{
  "schemaVersion": "1.0.0",
  "updated": "2026-11-10T01:53:55.883Z",
  "evidenceMetadata": {
    "source": "proxmox/scripts/compliance/build-ecosystem-audit-transparency.mjs",
    "observedAt": "2026-11-10T01:53:55.601Z",
    "hashStatus": "self_hash_not_embedded_report_hashes_are_pinned_per_entry",
    "scope": "public read-only audit manifest index",
    "freshness": "point_in_time_manifest_generation",
    "limitations": [
      "The manifest cannot embed its own final SHA-256 without creating a recursive hash.",
      "Each report entry carries its own hash or explicit hash-status metadata.",
      "The index does not establish custody, settlement, legal approval, or production admission."
    ]
  },
  "reports": [
    {
      "id": "internal-audit-evidence-inventory",
      "title": "Internal audit-evidence metadata inventory",
      "type": "evidence_metadata_inventory",
      "format": "json",
      "href": "/audit/internal-audit-evidence-inventory.json",
      "publicationTier": "public_metadata_only_raw_contents_separate",
      "evidenceMetadata": {
        "source": "proxmox/scripts/compliance/build-ecosystem-audit-transparency.mjs",
        "observedAt": "2026-11-10T01:53:55.601Z",
        "hashStatus": "self_hash_not_embedded_entry_hashes_are_pinned_individually",
        "scope": "public read-only evidence metadata inventory; raw artifacts remain separately governed",
        "freshness": "point_in_time_inventory_projection"
      },
      "limitations": [
        "This inventory is a discoverability and provenance surface, not an attestation or production-admission record.",
        "Raw files remain separately governed; sensitive material is not copied or exposed by this inventory."
      ]
    },
    {
      "id": "ecosystem-audit-transparency-2026-06-17",
      "title": "Ecosystem Audit Transparency Report",
      "type": "summary",
      "format": "markdown",
      "href": "/audit/ecosystem-audit-transparency-report.md",
      "sha256": "1b6f0abf7baf4b4aeaf305a4f72547d46428ee87c1b9563d48809fd2bffd8ea6",
      "lanes": [
        "accounting",
        "smart_contract"
      ],
      "disclaimer": "Summaries on this page are not substitutes for statutory regulatory audit books. Raw FS audits remain supervisor-confidential; secret-free redacted derivatives or integrity indexes are required for public audit where internally obtainable.",
      "evidenceMetadata": {
        "source": "proxmox/docs/compliance/audit-transparency/ECOSYSTEM_AUDIT_TRANSPARENCY_REPORT.md",
        "observedAt": "2026-11-10T01:53:55.601Z",
        "sha256": "1b6f0abf7baf4b4aeaf305a4f72547d46428ee87c1b9563d48809fd2bffd8ea6",
        "scope": "public ecosystem audit-transparency summary",
        "freshness": "point_in_time_source_hash"
      },
      "publicationTier": "public_summary",
      "counselDecision": "approved"
    },
    {
      "id": "guosmm-e-2026-001",
      "title": "GUOSMM Series E — registry summary (source currently unavailable)",
      "type": "guosmm_series_e",
      "format": "markdown",
      "href": "https://gazette.shosjj.org/publications/2026/GUOSMM-E-2026-001/body.md",
      "documentId": "GUOSMM-E-2026-001",
      "evidenceMetadata": {
        "source": "https://gazette.shosjj.org/publications/2026/GUOSMM-E-2026-001/body.md",
        "observedAt": "2026-11-10T01:53:55.601Z",
        "sha256": null,
        "hashStatus": "external_source_http_404_observed_2026-11-09",
        "availability": "unavailable_http_404",
        "scope": "GUOSMM Series E public summary",
        "freshness": "external_source_requires_refresh"
      },
      "publicationTier": "public_summary_guosmm_series_e",
      "counselDecision": "approved",
      "lane": "chain138Transparency",
      "counselSignoffRef": "config/compliance/guosmm-e-2026-001-counsel-signoff.v1.json"
    },
    {
      "id": "3fr-pack-opinion-json",
      "title": "3FR pack-scope audit opinion (machine-readable sign-off)",
      "type": "accounting_pack",
      "format": "json",
      "href": "https://gitea.d-bis.org/d-bis/proxmox/src/branch/master/config/compliance/3fr-900b-external-audit-opinion.v1.json",
      "publicationTier": "regulatory_confidential",
      "evidenceMetadata": {
        "source": "proxmox/config/compliance/3fr-900b-external-audit-opinion.v1.json",
        "observedAt": "2026-11-10T01:53:55.601Z",
        "sha256": "8552fdbd96a584e03480bcaa121301af79ebac1d7e3e818e9a279970912ea259",
        "scope": "3FR pack-scope audit opinion index",
        "freshness": "point_in_time_source_hash"
      },
      "counselDecision": "approved_index_only",
      "lane": "regulatoryBooks"
    },
    {
      "id": "hybx-batch-001-integrity-index",
      "title": "HYBX-BATCH-001 raw package integrity index",
      "type": "integrity_index",
      "format": "json",
      "href": "/audit/hybx-batch-001-integrity-index.json",
      "publicationTier": "public_integrity_index_raw_contents_private",
      "evidenceMetadata": {
        "source": "proxmox/reports/status/transaction-packages/transaction-package-HYBX-BATCH-001.zip",
        "observedAt": "2026-11-09T06:46:25.637Z",
        "sha256": "5969f0769985740de3e8cd6d3bd47fb85fce6f59ea0eec7a1eb5016d78d32521",
        "scope": "HYBX-BATCH-001 raw transaction-package integrity index",
        "freshness": "point_in_time_archive_hash"
      }
    },
    {
      "id": "omnl-books-scope-b-derived-2026-11-09",
      "title": "OMNL Fineract books — Scope B secret-free audit derivative",
      "type": "accounting_pack_derivative",
      "format": "json",
      "href": "/audit/omnl-books-scope-b-derived-2026-11-09.json",
      "publicationTier": "public_redacted_audit_extract",
      "evidenceMetadata": {
        "source": "proxmox/scripts/compliance/audit-omnl-books-full.py reading the OMNL Fineract journal-entry service",
        "observedAt": "2026-11-09T23:19:43Z",
        "sha256": "e839f75867bb571e4a0834ce8f47370ccc04abb30c0c6421e5884a5b204da80a",
        "scope": "39-office aggregate GL policy and reconciliation scan; redacted summary only",
        "freshness": "point_in_time_runtime_scan"
      },
      "limitations": "Does not publish journal rows, account-level amounts, personal data, credentials, custodian confirmations, bank finality, reserve custody proof, settlement finality, legal approval, or production admission."
    },
    {
      "id": "m1-ecosystem-playbook-evidence-index",
      "title": "M1 ecosystem playbook evidence provenance index",
      "type": "evidence_provenance_index",
      "format": "json",
      "href": "/audit/m1-ecosystem-playbook-evidence-index.json",
      "publicationTier": "public_metadata_only_raw_contents_separate",
      "evidenceMetadata": {
        "source": "proxmox/reports/status/m1-ecosystem-playbook-evidence-manifest-latest.json",
        "observedAt": "2026-11-10T01:53:55.601Z",
        "sha256": "e040f1d8fa1e63f6e045e840f5669a9af671dfed8dc4d4be23c8f28639917157",
        "scope": "M1 ecosystem playbook secret-free evidence provenance index",
        "freshness": "point_in_time_manifest_projection"
      },
      "limitations": [
        "This index publishes metadata and dispositions only; raw evidence remains on its separately governed surfaces.",
        "Technical evidence does not establish custody, settlement, legal approval, or production admission."
      ]
    },
    {
      "id": "cybersecur-formal-report",
      "title": "CyberSecur Global — Scope E Formal Security Audit Report",
      "type": "smart_contract_audit",
      "format": "pdf",
      "href": "/audit/CSG-SCOPE-E-2026-001-formal-security-audit-report.pdf",
      "documentId": "SCOPE-E-CYBERSECUR-FORMAL-PDF",
      "engagementId": "CSG-SCOPE-E-2026-001",
      "sha256": "e213a3f33926f35217588eb498562eeb1f57fc9cbc4307cdd1f8d01f8666d694",
      "publicationTier": "full_report_when_signed",
      "counselDecision": "approved",
      "evidenceMetadata": {
        "source": "gov-portals-monorepo/DBIS/public/audit/CSG-SCOPE-E-2026-001-formal-security-audit-report.pdf",
        "observedAt": "2026-11-10T01:53:55.601Z",
        "sha256": "e213a3f33926f35217588eb498562eeb1f57fc9cbc4307cdd1f8d01f8666d694",
        "scope": "CyberSecur Global Scope E formal security audit report",
        "freshness": "point_in_time_source_hash"
      },
      "lane": "chain138Transparency"
    }
  ],
  "scheduled": [
    {
      "scopeId": "A",
      "title": "M1 eMoney reserve verification (cUSDT / cUSDC on dfio)",
      "firmId": "AF-RWL-001",
      "status": "scheduled",
      "scheduledStart": "2026-06-28",
      "publicationTier": "redacted_summary_on_transparency_audit_and_defillama_handoff"
    },
    {
      "scopeId": "B",
      "title": "IPSAS / IFRS financial statement audit",
      "firmId": "AF-RWL-001",
      "status": "scheduled",
      "scheduledStart": "2026-07-01",
      "publicationTier": "regulatory_confidential_raw_plus_required_public_redacted_summary"
    },
    {
      "scopeId": "D",
      "title": "Reserve sufficiency attestation for external indexers",
      "firmId": "AF-RWL-001",
      "status": "scheduled",
      "scheduledStart": "2026-07-15",
      "publicationTier": "redacted_summary_on_transparency_audit_and_defillama_handoff"
    },
    {
      "scopeId": "E",
      "title": "Smart contract security audit",
      "firmId": "AF-CSG-001",
      "status": "delivered",
      "scheduledStart": "2026-06-17",
      "publicationTier": "full_summary_on_d_bis_transparency_audit"
    }
  ],
  "scopeE": {
    "firm": "CyberSecur Global",
    "status": "formal_report_delivered",
    "intakeUrl": "https://cybersecur.d-bis.org/intake.html"
  },
  "rawDisclosureCounselSignedAt": "2026-06-18T20:00:00Z",
  "counselSignoffRef": "config/compliance/audit-publication-counsel-signoff.v1.json",
  "policyApplicationRef": "config/compliance/chain138-audit-publication-policy-application.v1.json",
  "publicationPolicyDoc": "docs/04-configuration/CHAIN138_REGULATORY_AUDIT_AND_PUBLIC_TRANSPARENCY.md",
  "blockedFromPublic": [
    {
      "id": "scope-b-fs-audit",
      "tier": "regulatory_confidential",
      "reason": "blocked_public_full",
      "rawOnly": true,
      "publicDerivative": {
        "required": true,
        "tier": "public_redacted_audit_extract",
        "status": "available_secret_free_derivative",
        "reportId": "omnl-books-scope-b-derived-2026-11-09",
        "surface": "/audit/omnl-books-scope-b-derived-2026-11-09.json",
        "source": "reports/status/omnl-books-full-review-latest.json"
      }
    },
    {
      "id": "hybx-batch-subreg",
      "tier": "regulatory_confidential",
      "reason": "blocked_public",
      "rawOnly": true,
      "publicDerivative": {
        "required": true,
        "tier": "public_redacted_audit_extract",
        "status": "available_integrity_index",
        "reportId": "hybx-batch-001-integrity-index",
        "surface": "/audit/hybx-batch-001-integrity-index.json",
        "source": "reports/status/transaction-packages/transaction-package-HYBX-BATCH-001.zip"
      }
    }
  ]
}
