{
  "entry": {
    "seq": 16731,
    "at": "2026-11-06T15:41:25.241Z",
    "type": "safety.rating",
    "subject": "github:github/spec-kit",
    "payload": {
      "as_of": "2026-11-06T15:27:31.765Z",
      "band": "Good public signals",
      "check_version": "rs-safety-checks-1.0",
      "evidence_sha256": "065de70a13be214e285fee27def7011bbf21f326ad8c36639b93e9a45dc69785",
      "rating_sha256": "c009422e8242b43b07a315249366be6d79737415d2159f3b825819f9053acfe5",
      "repo": "github/spec-kit",
      "score": 82,
      "stream": "safety_ratings"
    },
    "payload_hash": "d140d137f3939eb649e7327baec3dde23c0bdfb3fd6de937eed7843208f1308e",
    "leaf_hash": "41a9f2f46e7383df78aa530ae3c84912f0a9cd4d4b694ce377f2ceb18eec26cf",
    "block_height": 3986,
    "texts": {},
    "data": {
      "as_of": "2026-11-06T15:27:31.765Z",
      "band": "Good public signals",
      "check_version": "rs-safety-checks-1.0",
      "evidence_sha256": "065de70a13be214e285fee27def7011bbf21f326ad8c36639b93e9a45dc69785",
      "rating_sha256": "c009422e8242b43b07a315249366be6d79737415d2159f3b825819f9053acfe5",
      "repo": "github/spec-kit",
      "score": 82,
      "stream": "safety_ratings"
    }
  },
  "status": "sealed",
  "block": {
    "v": 1,
    "height": 3986,
    "prev_hash": "7656d52b78f85a6f6d6ade6e9aa439810989da97e559f39723946dd4b909f9a3",
    "merkle_root": "bc245d9ce40c7e298ee13537019f0bbef5eeb5baabfed74075088198c5af8264",
    "first_seq": 16721,
    "last_seq": 16740,
    "entry_count": 20,
    "at": "2026-11-06T15:41:26.806Z",
    "key_id": "key_41eb7b6d1b11968a",
    "block_hash": "b855b14250ed97b167b87b319984c1a5fc1fa07e6c8b93b22dcb0412d648f8e4",
    "signature": "Gk6h9beN+E5i/ZXZGctwJS9gYWFdGZjY20IYS3Usw2QOarb+LF9VFVK+v63iiwFWuBj2fGSx/SmiMzqkWz6kDg==",
    "public_key_pem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAEYWJAvPDwdwiByA4ucuPBAV0jLWwXGgtbZqbyrLNMiM=\n-----END PUBLIC KEY-----\n"
  },
  "proof": {
    "leaf_hash": "41a9f2f46e7383df78aa530ae3c84912f0a9cd4d4b694ce377f2ceb18eec26cf",
    "index": 10,
    "path": [
      {
        "side": "R",
        "hash": "ad8c17f3c557c42386d6e1323a6487f24f65e500c6bae6b260627ac145017ec9"
      },
      {
        "side": "L",
        "hash": "2eefe6b14723a4adb8beaa9ed95251c7b31b6ffbe29bc4f3ef44888d630865e9"
      },
      {
        "side": "R",
        "hash": "6f4c67d7059d5b40f2f8f97c8cff079d1aacf13bbe720a8c700c1144258b208b"
      },
      {
        "side": "L",
        "hash": "10e3b87cca0257c117080146cef4c6e84af34480dd80e7d0ec60507152d0db4d"
      },
      {
        "side": "R",
        "hash": "5c4d1cdf17cf722f127aefee4c666f921003f2aa0578485682c9f3349a19087e"
      }
    ],
    "merkle_root": "bc245d9ce40c7e298ee13537019f0bbef5eeb5baabfed74075088198c5af8264",
    "how_to_verify": "payload_hash = sha256(canonical(payload)); leaf = sha256('leaf:' + canonical({seq, at, type, subject, payload_hash})); fold the path (R: sha256('node:' + acc + hash), L: sha256('node:' + hash + acc)) to merkle_root; verify the Ed25519 signature over canonical(block header)."
  },
  "finality": {
    "state": "bitcoin-anchored",
    "final": false,
    "witnesses": 0,
    "witnesses_confirmed_unaffiliated": 0,
    "witnesses_total": 0,
    "required": 2,
    "finalized_through": null,
    "bitcoin": {
      "anchored": true,
      "block_height": 974832,
      "confirmed_through": 6032
    },
    "states": [
      "recorded",
      "sealed",
      "bitcoin-anchored",
      "witness-quorum",
      "final"
    ],
    "rule": "States climb recorded -> sealed -> bitcoin-anchored -> witness-quorum -> final. A block is final only once its hash is confirmed in Bitcoin AND 2 confirmed-unaffiliated witnesses on distinct registrable domains with distinct keys have cosigned it or any later block; each header commits to every earlier block. Cosignatures from affiliated, unconfirmed, pending or challenged witnesses are public evidence but never count toward quorum. The quorum steps up on a published schedule as confirmed-unaffiliated witnesses grow: 2 required while fewer than 5 are confirmed, 3 at 5, 4 at 10, 6 at 20, 8 at 40. Every tier's requirement sits well below the count that triggers it, so churn is weather, not a freeze; the requirement is recomputed from the live count on every read."
  }
}