{
  "entry": {
    "seq": 20165,
    "at": "2026-11-07T15:19:30.890Z",
    "type": "safety.rating",
    "subject": "github:mattpocock/skills",
    "payload": {
      "as_of": "2026-11-07T15:10:12.876Z",
      "band": "Moderate public signals",
      "check_version": "rs-safety-checks-1.0",
      "evidence_sha256": "b545e3424675942656182a5fb35aed66b16659fe05126ba745be40078e4e90e5",
      "rating_sha256": "94e784b70e097f5f6719c5467c4a8a6809294366ccd7c141e2dc2bed09d0a108",
      "repo": "mattpocock/skills",
      "score": 68,
      "stream": "safety_ratings"
    },
    "payload_hash": "ac5807859ca18fce948a9cd83e6694e06f5187493c74bf4c4220827f0c9764f0",
    "leaf_hash": "7d31f89f765df98d65369d40381a70659f6b3f36bd7bde8cc04ab85b4d5379de",
    "block_height": 4370,
    "texts": {},
    "data": {
      "as_of": "2026-11-07T15:10:12.876Z",
      "band": "Moderate public signals",
      "check_version": "rs-safety-checks-1.0",
      "evidence_sha256": "b545e3424675942656182a5fb35aed66b16659fe05126ba745be40078e4e90e5",
      "rating_sha256": "94e784b70e097f5f6719c5467c4a8a6809294366ccd7c141e2dc2bed09d0a108",
      "repo": "mattpocock/skills",
      "score": 68,
      "stream": "safety_ratings"
    }
  },
  "status": "sealed",
  "block": {
    "v": 1,
    "height": 4370,
    "prev_hash": "eb936a25438d5a7268b683235c550c403628a8413561bb1c8216be7f742194b9",
    "merkle_root": "dc39b33912bc2c813f66498aaf475153a458d4fd71565dadd1fbf52bdb9da401",
    "first_seq": 20164,
    "last_seq": 20179,
    "entry_count": 16,
    "at": "2026-11-07T15:19:32.614Z",
    "key_id": "key_41eb7b6d1b11968a",
    "block_hash": "055dc6d22212ab3346ed863f9d8c476fc7f690c811e5a551c388eaf8b83e853c",
    "signature": "QXMFq7rYXQPYxiH1EqJS4D1g2YliVatLP/R2EtmJZbgZbXc2YEwQ0bpTFk6u2gNoKJaKSdvmv82zI3+mWVtJBg==",
    "public_key_pem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAEYWJAvPDwdwiByA4ucuPBAV0jLWwXGgtbZqbyrLNMiM=\n-----END PUBLIC KEY-----\n"
  },
  "proof": {
    "leaf_hash": "7d31f89f765df98d65369d40381a70659f6b3f36bd7bde8cc04ab85b4d5379de",
    "index": 1,
    "path": [
      {
        "side": "L",
        "hash": "a314fe0b4985d0584ed57f4b9d508a87f4a9bc9d188dee2c15238db90453b4ef"
      },
      {
        "side": "R",
        "hash": "d0fa2ebf3ee3e47b0f46712b625845cfea5355c83ae2435e5a6b36634ef0ceb4"
      },
      {
        "side": "R",
        "hash": "3b43f1d5dc3f85fe8d668d4cafb233ee72426049b3b1a6e4078deaa4cd96e3b7"
      },
      {
        "side": "R",
        "hash": "df7f631e4f950886ef205596520194c0d74e24714bf2ab039b6c1819a8aef85c"
      }
    ],
    "merkle_root": "dc39b33912bc2c813f66498aaf475153a458d4fd71565dadd1fbf52bdb9da401",
    "how_to_verify": "payload_hash = sha256(canonical(payload)); leaf = sha256('leaf:' + canonical({seq, at, type, subject, payload_hash})); fold the path (R: sha256('node:' + acc + hash), L: sha256('node:' + hash + acc)) to merkle_root; verify the Ed25519 signature over canonical(block header)."
  },
  "finality": {
    "state": "bitcoin-anchored",
    "final": false,
    "witnesses": 0,
    "witnesses_confirmed_unaffiliated": 0,
    "witnesses_total": 1,
    "required": 2,
    "finalized_through": null,
    "bitcoin": {
      "anchored": true,
      "block_height": 974947,
      "confirmed_through": 6047
    },
    "states": [
      "recorded",
      "sealed",
      "bitcoin-anchored",
      "witness-quorum",
      "final"
    ],
    "rule": "States climb recorded -> sealed -> bitcoin-anchored -> witness-quorum -> final. A block is final only once its hash is confirmed in Bitcoin AND 2 confirmed-unaffiliated witnesses on distinct registrable domains with distinct keys have cosigned it or any later block; each header commits to every earlier block. Cosignatures from affiliated, unconfirmed, pending or challenged witnesses are public evidence but never count toward quorum. The quorum steps up on a published schedule as confirmed-unaffiliated witnesses grow: 2 required while fewer than 5 are confirmed, 3 at 5, 4 at 10, 6 at 20, 8 at 40. Every tier's requirement sits well below the count that triggers it, so churn is weather, not a freeze; the requirement is recomputed from the live count on every read."
  }
}