{
  "entry": {
    "seq": 19,
    "at": "2026-11-06T22:14:47.818Z",
    "type": "safety.rating",
    "subject": "github:cloudflare/security-audit-skill",
    "payload": {
      "as_of": "2026-10-31T00:20:40.838Z",
      "band": "Moderate public signals",
      "check_version": "rs-safety-checks-1.0",
      "evidence_sha256": "84ec165427a9bd07edc2548226fcc1a60f8d8632a12f1dd6f6d15bceb7153229",
      "rating_sha256": "639af479759c8a52b04fa20022389d96b0734294f40642814bfa958452e74417",
      "repo": "cloudflare/security-audit-skill",
      "score": 54,
      "stream": "safety_ratings"
    },
    "payload_hash": "58a11b6ae8a84ba22ae4334d3c317f4c84051e13f9b3b8f42b12b8ae26d20a31",
    "leaf_hash": "0e61b4e8aceb4850cb092179be17abc22a2f5e3131cd6a25db5ee4aa93565285",
    "block_height": 1,
    "texts": {},
    "data": {
      "as_of": "2026-10-31T00:20:40.838Z",
      "band": "Moderate public signals",
      "check_version": "rs-safety-checks-1.0",
      "evidence_sha256": "84ec165427a9bd07edc2548226fcc1a60f8d8632a12f1dd6f6d15bceb7153229",
      "rating_sha256": "639af479759c8a52b04fa20022389d96b0734294f40642814bfa958452e74417",
      "repo": "cloudflare/security-audit-skill",
      "score": 54,
      "stream": "safety_ratings"
    }
  },
  "status": "sealed",
  "block": {
    "v": 1,
    "height": 1,
    "prev_hash": "0aad1605bfe10fe1370da1ff6dd97a95d382b04e66c402ea3a32bb94016c41a7",
    "merkle_root": "a78e76bde5f29963718039cdf9f5142ae76de07e663e5df36ec649c5bfe3b27a",
    "first_seq": 12,
    "last_seq": 45,
    "entry_count": 34,
    "at": "2026-11-06T22:14:47.898Z",
    "key_id": "key_a521921c2ba20669",
    "block_hash": "6f4e1751e75bebf58a757bda61b5d8ff16494ca039a753b47ece4e024eae74de",
    "signature": "nm+c7ffBApJUwbZAJaLV/PBrCzouUHgifr93wJiG+aj3wX+8YwYbtop8juVr2IppYzNahW1mv7AmhfSd37XMDg==",
    "public_key_pem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAinQBNSxd0YmodQg1YCzttE4X9fNtHXqIrSGUWsEHblA=\n-----END PUBLIC KEY-----\n"
  },
  "proof": {
    "leaf_hash": "0e61b4e8aceb4850cb092179be17abc22a2f5e3131cd6a25db5ee4aa93565285",
    "index": 7,
    "path": [
      {
        "side": "L",
        "hash": "b424ddc28d0616dbe54879c8949ad995231a923819ff5615c0ae599fa7228061"
      },
      {
        "side": "L",
        "hash": "c2d517a48b4af9291a52abb72d77b5ea937942a95c2de7442d66dc3612d00190"
      },
      {
        "side": "L",
        "hash": "88399792b6b6fbcb6fb994fd4c8ad2fd7f0d7537d4877f911ae62460b5370a98"
      },
      {
        "side": "R",
        "hash": "643fd8549a9da46dc38b7aa17e26d174d2e59737fdc16222a46250af626d3f94"
      },
      {
        "side": "R",
        "hash": "da4b5a2ba868a6618f311d6374dca6c4197f78632c0ed9a57c04c564a7fc5391"
      },
      {
        "side": "R",
        "hash": "8298e4e9911edf5e5c71b683076e6fc99fb313cb6d79e84670621708e200bf27"
      }
    ],
    "merkle_root": "a78e76bde5f29963718039cdf9f5142ae76de07e663e5df36ec649c5bfe3b27a",
    "how_to_verify": "payload_hash = sha256(canonical(payload)); leaf = sha256('leaf:' + canonical({seq, at, type, subject, payload_hash})); fold the path (R: sha256('node:' + acc + hash), L: sha256('node:' + hash + acc)) to merkle_root; verify the Ed25519 signature over canonical(block header)."
  },
  "finality": {
    "state": "bitcoin-anchored",
    "final": false,
    "witnesses": 0,
    "witnesses_confirmed_unaffiliated": 0,
    "witnesses_total": 0,
    "required": 2,
    "finalized_through": null,
    "bitcoin": {
      "anchored": true,
      "block_height": 974874,
      "confirmed_through": 546
    },
    "states": [
      "recorded",
      "sealed",
      "bitcoin-anchored",
      "witness-quorum",
      "final"
    ],
    "rule": "States climb recorded -> sealed -> bitcoin-anchored -> witness-quorum -> final. A block is final only once its hash is confirmed in Bitcoin AND 2 confirmed-unaffiliated witnesses on distinct registrable domains with distinct keys have cosigned it or any later block; each header commits to every earlier block. Cosignatures from affiliated, unconfirmed, pending or challenged witnesses are public evidence but never count toward quorum. The quorum steps up on a published schedule as confirmed-unaffiliated witnesses grow: 2 required while fewer than 5 are confirmed, 3 at 5, 4 at 10, 6 at 20, 8 at 40. Every tier's requirement sits well below the count that triggers it, so churn is weather, not a freeze; the requirement is recomputed from the live count on every read."
  },
  "next": {
    "action": "record_this_verification",
    "label": "Record that you verified this — one record_action call turns this check into a sealed receipt your principal can re-check",
    "why": "A verification proves the record at the moment you checked it, but leaves no evidence you checked. A record is the evidence that survives the session: signed, on the public ledger, and free to verify forever.",
    "needs": "principal_consent",
    "tool": "record_action",
    "mcp": "POST https://www.a2ally.com/mcp (tools/call record_action)",
    "arguments": {
      "action_type": "ledger.verified",
      "summary": "Verified a2ally ledger entry 19",
      "tags": [
        "ledger_entry:19"
      ],
      "accept_terms": true
    },
    "signup": "https://www.a2ally.com/#account",
    "pricing": "https://www.a2ally.com/pricing"
  }
}