{"policy":"SECURITY-POLICY-BUILDS v1.0","release":"2026-10-09-logs2","workers":{"albertlane-apex":{"gate":"v2","policy":"SECURITY-POLICY-BUILDS v1.0","result":"PASS_WITH_WARNINGS","results":[{"detail":"SECURITY-POLICY-BUILDS sha 3c612d5a59a0579f685dee2197cfe28352a6f3bb031a0ddd65cf8100a4a25281","rule":"policy","status":"PASS"},{"detail":"license header in first 12 lines","rule":"6.2","status":"PASS"},{"detail":"no private key material in worker","rule":"1.4","status":"PASS"},{"detail":"0 lines removed vs before","rule":"6.1","status":"PASS"},{"detail":"signing/hash code present; JCS function found","rule":"2.1","status":"PASS"},{"detail":"raw ip/user_agent columns created by worker: 0","rule":"3.2","status":"PASS"},{"detail":"no HSM/PKCS#11 signing key configured (known gap)","rule":"1.1","status":"WARN"},{"detail":"SOURCE_DATE_EPOCH=1791529200","rule":"4.2","status":"PASS"},{"detail":"manifest JCS round-trip","rule":"2.2","status":"PASS"},{"detail":"manifest signature absent (unsigned; known gap)","rule":"4.4","status":"WARN"},{"detail":"toolchain.lock matches","rule":"4.1","status":"PASS"},{"detail":"RFC 8785 vectors: PASS rfc8785-3.2.2 PASS rfc8785-3.2.3-sort PASS numbers-es6 ","rule":"2.1-vectors","status":"PASS"},{"detail":"jcs() present in worker","rule":"2.1","status":"PASS"},{"detail":"LANE_BUILD_SHA OK 4ce5c41111537ce726483e6365697909e221244abaad7675e5aedb521e49d007 LANE_BUILD_SHA_R15","rule":"4.4-build-sha","status":"PASS"},{"detail":"Grok Bot HSM signatures on build-manifest.jcs + SHA256SUMS","rule":"1.1/4.4","status":"PASS"},{"detail":"owner key not registered yet (run hsm/owner-keygen.sh); deploy allowed with grokbot signature only, logged","rule":"1.3","status":"WARN"}]},"meta-lane-api":{"gate":"v2","policy":"SECURITY-POLICY-BUILDS v1.0","result":"PASS_WITH_WARNINGS","results":[{"detail":"SECURITY-POLICY-BUILDS sha 3c612d5a59a0579f685dee2197cfe28352a6f3bb031a0ddd65cf8100a4a25281","rule":"policy","status":"PASS"},{"detail":"license header in first 12 lines","rule":"6.2","status":"PASS"},{"detail":"no private key material in worker","rule":"1.4","status":"PASS"},{"detail":"0 lines removed vs before","rule":"6.1","status":"PASS"},{"detail":"signing/hash code present; JCS function found","rule":"2.1","status":"PASS"},{"detail":"raw ip/user_agent columns created by worker: 0","rule":"3.2","status":"PASS"},{"detail":"no HSM/PKCS#11 signing key configured (known gap)","rule":"1.1","status":"WARN"},{"detail":"SOURCE_DATE_EPOCH=1791529200","rule":"4.2","status":"PASS"},{"detail":"manifest JCS round-trip","rule":"2.2","status":"PASS"},{"detail":"manifest signature absent (unsigned; known gap)","rule":"4.4","status":"WARN"},{"detail":"toolchain.lock matches","rule":"4.1","status":"PASS"},{"detail":"RFC 8785 vectors: PASS rfc8785-3.2.2 PASS rfc8785-3.2.3-sort PASS numbers-es6 ","rule":"2.1-vectors","status":"PASS"},{"detail":"jcs() present in worker","rule":"2.1","status":"PASS"},{"detail":"LANE_BUILD_SHA OK 4ad579dfab6a1d9ccad4b609e944fefc555c19096e7a18732049d771a5beaba1","rule":"4.4-build-sha","status":"PASS"},{"detail":"Grok Bot HSM signatures on build-manifest.jcs + SHA256SUMS","rule":"1.1/4.4","status":"PASS"},{"detail":"owner key not registered yet (run hsm/owner-keygen.sh); deploy allowed with grokbot signature only, logged","rule":"1.3","status":"WARN"}]}}}