{
  "_type": "https://in-toto.io/Statement/v0.1",
  "subject": [
    {
      "name": "orchard-gateway-4.2.0.tgz",
      "digest": {
        "sha256": "06af88e316cf889e0b72645f235f77c900d48972456b1ff6ba4df49ae24be734"
      }
    }
  ],
  "predicateType": "https://slsa.dev/provenance/v0.2",
  "predicate": {
    "builder": {
      "id": "https://build.orchard.example/builders/hosted/v1"
    },
    "buildType": "https://build.orchard.example/buildtypes/npm/v1",
    "invocation": {
      "configSource": {
        "uri": "git+https://git.orchard.example/orchard/gateway",
        "digest": {
          "sha1": "902ea810fbdd8ff73082bd2873585709f2ca500b"
        },
        "entryPoint": ".orchard/build.yaml"
      },
      "parameters": {
        "target": "release"
      },
      "environment": {
        "runnerImage": "example-linux:3.20"
      }
    },
    "buildConfig": {
      "steps": [
        {
          "command": [
            "npm",
            "ci"
          ],
          "env": []
        },
        {
          "command": [
            "npm",
            "run",
            "build"
          ],
          "env": []
        }
      ]
    },
    "metadata": {
      "buildInvocationId": "8814",
      "buildStartedOn": "2026-01-01T00:00:00Z",
      "buildFinishedOn": "2026-01-01T00:06:12Z",
      "completeness": {
        "parameters": true,
        "environment": false,
        "materials": true
      },
      "reproducible": false
    },
    "materials": [
      {
        "uri": "git+https://git.orchard.example/orchard/gateway",
        "digest": {
          "sha1": "902ea810fbdd8ff73082bd2873585709f2ca500b"
        }
      }
    ]
  },
  "novus_sample_note": "SAMPLE — fictional supply-chain data. Every package, registry, version, hash, licence, advisory identifier and signature in this document is invented."
}