{
  "schema": "novus-sample/reproducible-build/1",
  "artifact": {
    "name": "orchard-gateway-4.2.0.tgz",
    "sha256": "06af88e316cf889e0b72645f235f77c900d48972456b1ff6ba4df49ae24be734"
  },
  "builds": [
    {
      "builder": "https://build.orchard.example/builders/hosted/v1",
      "runId": "8814",
      "startedOn": "2026-01-01T00:00:00Z",
      "sha256": "06af88e316cf889e0b72645f235f77c900d48972456b1ff6ba4df49ae24be734",
      "environment": {
        "os": "example-linux 3.20",
        "arch": "x86_64",
        "tz": "UTC",
        "sourceDateEpoch": 1767225600
      }
    },
    {
      "builder": "https://build.orchard.example/builders/rebuilder/v1",
      "runId": "8815",
      "startedOn": "2026-01-02T00:00:00Z",
      "sha256": "06af88e316cf889e0b72645f235f77c900d48972456b1ff6ba4df49ae24be734",
      "environment": {
        "os": "example-linux 3.20",
        "arch": "aarch64",
        "tz": "UTC",
        "sourceDateEpoch": 1767225600
      }
    }
  ],
  "reproducible": true,
  "differences": [],
  "novus_sample_note": "SAMPLE — fictional supply-chain data. Every package, registry, version, hash, licence, advisory identifier and signature in this document is invented."
}