Northstar vendor review

Conditional approval. Northstar meets the security baseline, but the contract must add a 30-day termination clause before procurement can proceed.

Self-viewing profile 4 resources Offline SHA-256 verification

Visible manifest

This section is both the no-script inspection surface and the carrier of the canonical manifest graph. Each machine statement explicitly names the same graph.

Vendor review brief

Source analysis describing the approval condition.

Path
/docs/brief.md
Type
text/markdown; charset=utf-8
Length
404 bytes
Integrity
sha256-JI/xLRsHxorxBdXiVUP60ZQsETgHCVLLpXIFfU4sPgk=

Structured status

Derived from the review brief.

Path
/data/status.json
Type
application/json
Length
84 bytes
Integrity
sha256-pnUtA8AY/SIa4aOorUlnwuQMcoaSZWvvotcCvE8dCKg=

Verification badge

A visual artifact for the verified result.

Path
/assets/verified.svg
Type
image/svg+xml
Length
355 bytes
Integrity
sha256-xto8JemiPBGHGlDuTp119Un4lICLPCskyz77zHEEtoc=