SPACE_PROVENANCE.json

{
  "schema": "szl.space-source-attestation/v1",
  "observed_at": "2026-07-12T01:54:25Z",
  "space": {
    "id": "SZLHOLDINGS/sda",
    "repository_type": "space",
    "sdk": "docker",
    "runtime_stage_observed": "RUNNING",
    "artifact_kind": "space-repository-snapshot",
    "purpose": "Sovereign-domain-awareness demonstration for anomaly detection, track fusion, and receipt-bound verdicts.",
    "source_files_reviewed": [
      "README.md",
      "Dockerfile",
      "server.py",
      "szl_source_attestation.py",
      "index.html",
      "assets/sda-fabric.js"
    ]
  },
  "source_of_record": {
    "state": "VERIFIED_HF_SOURCE_OF_RECORD",
    "relation": "hf-native-source-of-record",
    "platform": "huggingface",
    "repository": "SZLHOLDINGS/sda",
    "artifact_base_revision": "ab447a66e7f9fed85f29616194c601937aced174",
    "artifact_base_state": "MEASURED_PRE_ATTESTATION_BASE",
    "artifact_base_url": "https://huggingface.co/spaces/SZLHOLDINGS/sda/tree/ab447a66e7f9fed85f29616194c601937aced174",
    "file_count": 15,
    "total_bytes": 780069,
    "tree_sha256": "24e9c97afdeb9dd4778f148a11372831726b77fb086a718915389dba267fccff",
    "tree_hash_algorithm": "sha256 of UTF-8 path + NUL + per-file content sha256 + LF, sorted by path; .cache excluded"
  },
  "public_github": {
    "state": "NO_DIRECT_PUBLIC_SAME_NAME_REPOSITORY_OBSERVED",
    "same_name_candidate": "https://github.com/szl-holdings/sda",
    "same_name_candidate_http_status": 404,
    "observation_semantics": "A public 404 does not establish the absence of a private repository.",
    "contextual_references": [
      "https://github.com/DHI/tsod",
      "https://github.com/GraGODs/GraGOD",
      "https://github.com/brandon-rhodes/python-sgp4",
      "https://github.com/d-ailin/GDN",
      "https://github.com/datamllab/tods",
      "https://github.com/pygod-team/pygod",
      "https://github.com/salesforce/Merlion",
      "https://github.com/szl-holdings",
      "https://github.com/yzhao062/pyod"
    ],
    "contextual_reference_role": "DOCUMENTATION_RESEARCH_DEPENDENCY_OR_ORGANIZATION_CONTEXT_NOT_BUILD_SOURCE_PARITY"
  },
  "claims": {
    "full_github_repository_parity": "NOT_CLAIMED",
    "reproducible_build": "NOT_CLAIMED",
    "binary_provenance": "NOT_CLAIMED",
    "serving_process_revision": "NOT_CLAIMED"
  },
  "limits": [
    "The attestation overlay cannot self-embed its resulting Hub commit, so artifact_base_revision is the immutable measured pre-overlay tree.",
    "Repository-head evidence does not prove the exact serving-process revision during a rolling deployment.",
    "Reproducible build, binary provenance, and serving-process identity are not claimed.",
    "No claim is made about private repositories or unobserved producer systems.",
    "The existing live deployment-source endpoint continues to describe the unresolved external-source boundary; this artifact establishes the Hub repository as source of record for the measured Space tree."
  ]
}