{
  "entry": {
    "seq": 30808,
    "at": "2026-11-10T15:08:52.376Z",
    "type": "safety.rating",
    "subject": "github:cloudflare/security-audit-skill",
    "payload": {
      "as_of": "2026-11-10T14:57:30.581Z",
      "band": "Moderate public signals",
      "check_version": "rs-safety-checks-1.0",
      "evidence_sha256": "b1d299ba7fdcabfe9851ed79bea301dd5967e01dca48a9ebe8a2ace8e7bbc2ab",
      "rating_sha256": "2ff20ca174a48c505519133d244bddede40ef395b512f966e619f1f151f66824",
      "repo": "cloudflare/security-audit-skill",
      "score": 54,
      "stream": "safety_ratings"
    },
    "payload_hash": "5733f929dfe9abe3dd3369a51e46fca38552b9a9a092747f0c901ac5757199b3",
    "leaf_hash": "50f47bc9ec67a6353ae72e983560e2a7f3ef067cea94fad77d0315b1f758c947",
    "block_height": 5713,
    "texts": {},
    "data": {
      "as_of": "2026-11-10T14:57:30.581Z",
      "band": "Moderate public signals",
      "check_version": "rs-safety-checks-1.0",
      "evidence_sha256": "b1d299ba7fdcabfe9851ed79bea301dd5967e01dca48a9ebe8a2ace8e7bbc2ab",
      "rating_sha256": "2ff20ca174a48c505519133d244bddede40ef395b512f966e619f1f151f66824",
      "repo": "cloudflare/security-audit-skill",
      "score": 54,
      "stream": "safety_ratings"
    }
  },
  "status": "sealed",
  "block": {
    "v": 1,
    "height": 5713,
    "prev_hash": "ebdc3b033ef3ab78c926cc6482ef0df079067b7a259189c7bf2acbf504c6f557",
    "merkle_root": "1372654f3bc2b358ead803c4ff6338726bbfd711f6c354c43e1e7d72406c799e",
    "first_seq": 30808,
    "last_seq": 30827,
    "entry_count": 20,
    "at": "2026-11-10T15:08:54.904Z",
    "key_id": "key_41eb7b6d1b11968a",
    "block_hash": "0b7cb87092e76159bf695420da42e6f9333243b7e7fb9888ba1c30957faf8d56",
    "signature": "HsR7c9/HZwcanHJVMektqxcHwvJcIRUcffPlABoijWQ72xzPBEetCRAaRpk0mfwqAMKwmZNIJWiyT/9ze0SPAw==",
    "public_key_pem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAEYWJAvPDwdwiByA4ucuPBAV0jLWwXGgtbZqbyrLNMiM=\n-----END PUBLIC KEY-----\n"
  },
  "proof": {
    "leaf_hash": "50f47bc9ec67a6353ae72e983560e2a7f3ef067cea94fad77d0315b1f758c947",
    "index": 0,
    "path": [
      {
        "side": "R",
        "hash": "7bbeb7af66eb57462dd8207303b3621d17184093771a22654c419045fd70c779"
      },
      {
        "side": "R",
        "hash": "ee7f7eb28ead1bc17815a3207ca7b2d397b39deb723ceada83c9ba7ff31886b0"
      },
      {
        "side": "R",
        "hash": "2a753c5924dadd7e489bb39f4a6ba23c25dd2dbb04b28be20f43acad777937dd"
      },
      {
        "side": "R",
        "hash": "f97f65ee6240e30539474205f01440b15b7f4ef1e295671a47e40b41b9f09c2f"
      },
      {
        "side": "R",
        "hash": "eaff485aa2c83f221771f7603a9185e2182ac62aa44bf581d77ee7f5e9269270"
      }
    ],
    "merkle_root": "1372654f3bc2b358ead803c4ff6338726bbfd711f6c354c43e1e7d72406c799e",
    "how_to_verify": "payload_hash = sha256(canonical(payload)); leaf = sha256('leaf:' + canonical({seq, at, type, subject, payload_hash})); fold the path (R: sha256('node:' + acc + hash), L: sha256('node:' + hash + acc)) to merkle_root; verify the Ed25519 signature over canonical(block header)."
  },
  "finality": {
    "state": "bitcoin-anchored",
    "final": false,
    "witnesses": 0,
    "witnesses_confirmed_unaffiliated": 0,
    "witnesses_total": 1,
    "required": 2,
    "finalized_through": null,
    "bitcoin": {
      "anchored": true,
      "block_height": 975319,
      "confirmed_through": 6065
    },
    "states": [
      "recorded",
      "sealed",
      "bitcoin-anchored",
      "witness-quorum",
      "final"
    ],
    "rule": "States climb recorded -> sealed -> bitcoin-anchored -> witness-quorum -> final. A block is final only once its hash is confirmed in Bitcoin AND 2 confirmed-unaffiliated witnesses on distinct registrable domains with distinct keys have cosigned it or any later block; each header commits to every earlier block. Cosignatures from affiliated, unconfirmed, pending or challenged witnesses are public evidence but never count toward quorum. The quorum steps up on a published schedule as confirmed-unaffiliated witnesses grow: 2 required while fewer than 5 are confirmed, 3 at 5, 4 at 10, 6 at 20, 8 at 40. Every tier's requirement sits well below the count that triggers it, so churn is weather, not a freeze; the requirement is recomputed from the live count on every read."
  }
}