{
  "entry": {
    "seq": 3754,
    "at": "2026-10-31T00:39:55.887Z",
    "type": "safety.rating",
    "subject": "github:cloudflare/security-audit-skill",
    "payload": {
      "as_of": "2026-10-31T00:20:40.838Z",
      "band": "Moderate public signals",
      "check_version": "rs-safety-checks-1.0",
      "evidence_sha256": "84ec165427a9bd07edc2548226fcc1a60f8d8632a12f1dd6f6d15bceb7153229",
      "rating_sha256": "639af479759c8a52b04fa20022389d96b0734294f40642814bfa958452e74417",
      "repo": "cloudflare/security-audit-skill",
      "score": 54,
      "stream": "safety_ratings"
    },
    "payload_hash": "58a11b6ae8a84ba22ae4334d3c317f4c84051e13f9b3b8f42b12b8ae26d20a31",
    "leaf_hash": "fe17d368304f2f1893c5f31b581969eb7308a3b5c72972fdb0cf71a248049734",
    "block_height": 1852,
    "texts": {},
    "data": {
      "as_of": "2026-10-31T00:20:40.838Z",
      "band": "Moderate public signals",
      "check_version": "rs-safety-checks-1.0",
      "evidence_sha256": "84ec165427a9bd07edc2548226fcc1a60f8d8632a12f1dd6f6d15bceb7153229",
      "rating_sha256": "639af479759c8a52b04fa20022389d96b0734294f40642814bfa958452e74417",
      "repo": "cloudflare/security-audit-skill",
      "score": 54,
      "stream": "safety_ratings"
    }
  },
  "status": "sealed",
  "block": {
    "v": 1,
    "height": 1852,
    "prev_hash": "c31fee266c33c1ce108b4ba77a9b194360b41872b7949f128154a07a97c27678",
    "merkle_root": "35e0edab266d689456deb109aaedcfa51e239b1d84c47e56f35737062174efbb",
    "first_seq": 3747,
    "last_seq": 3772,
    "entry_count": 26,
    "at": "2026-10-31T00:39:56.025Z",
    "key_id": "key_41eb7b6d1b11968a",
    "block_hash": "457237f21415ec217a46d73447c6c23a2db85b7a8278df9bcb342da9dcce4e1d",
    "signature": "KKfSWbyeJyXAxiPU64ZHZkJmfW9DHom0KSI8ckxNd2ACQy/n6sLElHQEQm/0YsyWD9j87k4nbXpeAIAwPwnaCw==",
    "public_key_pem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAEYWJAvPDwdwiByA4ucuPBAV0jLWwXGgtbZqbyrLNMiM=\n-----END PUBLIC KEY-----\n"
  },
  "proof": {
    "leaf_hash": "fe17d368304f2f1893c5f31b581969eb7308a3b5c72972fdb0cf71a248049734",
    "index": 7,
    "path": [
      {
        "side": "L",
        "hash": "a9608d291f51d23a4a397442fe666f0493965986896fc4e437c4fb8591242209"
      },
      {
        "side": "L",
        "hash": "8ad62226c2ab4d4802823316bcb0a727fcf37f29a5d66d50082b48994699b673"
      },
      {
        "side": "L",
        "hash": "9764d5a865452958cf8c30848dbb49b3a153f8703d732f7acd548c6cfff3b2cd"
      },
      {
        "side": "R",
        "hash": "5f22632bc023a09a1c1680d53bbe1f805aa5cf6fdae2b5b06855ea323e9a5aba"
      },
      {
        "side": "R",
        "hash": "7ca452ad3a5b05ffad4503e0ec99b41a14080c86d3c96f861e179f48292d8e34"
      }
    ],
    "merkle_root": "35e0edab266d689456deb109aaedcfa51e239b1d84c47e56f35737062174efbb",
    "how_to_verify": "payload_hash = sha256(canonical(payload)); leaf = sha256('leaf:' + canonical({seq, at, type, subject, payload_hash})); fold the path (R: sha256('node:' + acc + hash), L: sha256('node:' + hash + acc)) to merkle_root; verify the Ed25519 signature over canonical(block header)."
  },
  "finality": {
    "state": "bitcoin-anchored",
    "final": false,
    "witnesses": 0,
    "witnesses_confirmed_unaffiliated": 0,
    "witnesses_total": 0,
    "required": 2,
    "finalized_through": null,
    "bitcoin": {
      "anchored": true,
      "block_height": 973901,
      "confirmed_through": 6068
    },
    "states": [
      "recorded",
      "sealed",
      "bitcoin-anchored",
      "witness-quorum",
      "final"
    ],
    "rule": "States climb recorded -> sealed -> bitcoin-anchored -> witness-quorum -> final. A block is final only once its hash is confirmed in Bitcoin AND 2 confirmed-unaffiliated witnesses on distinct registrable domains with distinct keys have cosigned it or any later block; each header commits to every earlier block. Cosignatures from affiliated, unconfirmed, pending or challenged witnesses are public evidence but never count toward quorum. The quorum steps up on a published schedule as confirmed-unaffiliated witnesses grow: 2 required while fewer than 5 are confirmed, 3 at 5, 4 at 10, 6 at 20, 8 at 40. Every tier's requirement sits well below the count that triggers it, so churn is weather, not a freeze; the requirement is recomputed from the live count on every read."
  }
}