@m2-ai/lattice-cli 0.0.0-stage → 0.8.7

package/dist/security-runtime/licensing/candidates/cado-source-declaration-evidence.json

@@ -0,0 +1,283 @@
+{
+  "schemaVersion": 1,
+  "collectedAtUtc": "2026-10-21T09:50:51.417652+00:00",
+  "scope": "Original-source engineering evidence; no legal classification, clearance, runtime inclusion or release approval.",
+  "inventorySha256": "4a1eb672e488b99d3381979a9eb1de4890edee79cfbcded9502683d48dbc7d54",
+  "candidateEntries": [
+    {
+      "rule": "CADOSECURITY_Lambda_Malware",
+      "candidateBlockSha256": "7cf94ad72e026c794e3b2f690b2803bc7544651d74f35a3e4efc791a3e773715",
+      "metadataLicense": {
+        "license_url": "N/A",
+        "license": "Apache License 2.0"
+      },
+      "aggregatorSourceUrl": "https://github.com/mikesxrs/Open-Source-YARA-rules/blob/ec0056f767db98bf6d5fd63877ad51fb54d350e9/Cado Security/Lambda_Malware.yar#L1-L17"
+    },
+    {
+      "rule": "CADOSECURITY_Wiper_Ukr_Feb_2022",
+      "candidateBlockSha256": "40b05e0d4b3b822ba3db9cb3c77515e9d6d9590f41727c404404e143103ec548",
+      "metadataLicense": {
+        "license_url": "N/A",
+        "license": "Apache License 2.0"
+      },
+      "aggregatorSourceUrl": "https://github.com/mikesxrs/Open-Source-YARA-rules/blob/ec0056f767db98bf6d5fd63877ad51fb54d350e9/Cado Security/Wiper_Ukr_Feb_2022.yar#L1-L18"
+    },
+    {
+      "rule": "CADOSECURITY_Linux_Wiper_AWFULSHRED",
+      "candidateBlockSha256": "d69b464c9826aae816d5e03a4efb9ad2b11e9eeb3423dab31577dfc09d08c532",
+      "metadataLicense": {
+        "license_url": "N/A",
+        "license": "Apache License 2.0"
+      },
+      "aggregatorSourceUrl": "https://github.com/mikesxrs/Open-Source-YARA-rules/blob/ec0056f767db98bf6d5fd63877ad51fb54d350e9/Cado Security/Linux_Wiper_AWFULSHRED.yar#L1-L26"
+    },
+    {
+      "rule": "CADOSECURITY_Linux_Worm_ORCSHRED",
+      "candidateBlockSha256": "a59795afb657933804e19b65fa23e4f78ad7aa9c41f6f8325770495be1d818aa",
+      "metadataLicense": {
+        "license_url": "N/A",
+        "license": "Apache License 2.0"
+      },
+      "aggregatorSourceUrl": "https://github.com/mikesxrs/Open-Source-YARA-rules/blob/ec0056f767db98bf6d5fd63877ad51fb54d350e9/Cado Security/Linux_Worm_ORCSHRED.yar#L1-L19"
+    },
+    {
+      "rule": "CADOSECURITY_Linux_Wiper_SOLOSHRED",
+      "candidateBlockSha256": "b8b4c761e96a3eb8f9bf6f3b6408161d2d68bf1c59df08b382edffdde4541d5a",
+      "metadataLicense": {
+        "license_url": "N/A",
+        "license": "Apache License 2.0"
+      },
+      "aggregatorSourceUrl": "https://github.com/mikesxrs/Open-Source-YARA-rules/blob/ec0056f767db98bf6d5fd63877ad51fb54d350e9/Cado Security/Linux_Wiper_SOLOSHRED.yar#L1-L17"
+    },
+    {
+      "rule": "CADOSECURITY_Whispergate_Stage_1",
+      "candidateBlockSha256": "8d11e440164cc70e4e1170c25839f72594739dbbe149e84973b97638cffb0436",
+      "metadataLicense": {
+        "license_url": "N/A",
+        "license": "Apache License 2.0"
+      },
+      "aggregatorSourceUrl": "https://github.com/mikesxrs/Open-Source-YARA-rules/blob/ec0056f767db98bf6d5fd63877ad51fb54d350e9/Cado Security/Whispergate_Stage_1.yar#L1-L16"
+    },
+    {
+      "rule": "CADOSECURITY_Powershell_Downloader_POWERGAP",
+      "candidateBlockSha256": "368687ef54b9f4d792afb0d05553f6d6be424462b4398ec3d74be29a5793ab35",
+      "metadataLicense": {
+        "license_url": "N/A",
+        "license": "Apache License 2.0"
+      },
+      "aggregatorSourceUrl": "https://github.com/mikesxrs/Open-Source-YARA-rules/blob/ec0056f767db98bf6d5fd63877ad51fb54d350e9/Cado Security/Powershell_Downloader_POWERGAP.yar#L1-L19"
+    }
+  ],
+  "sources": [
+    {
+      "sourceKind": "archived-original-author-page",
+      "originalSourceUrl": "https://www.cadosecurity.com/cado-discovers-denonia-the-first-malware-specifically-targeting-lambda/",
+      "sourceUrl": "https://web.archive.org/web/20220406131421id_/https://www.cadosecurity.com/cado-discovers-denonia-the-first-malware-specifically-targeting-lambda/",
+      "captureTimestamp": "20220406131421",
+      "archiveResponseBytes": 84900,
+      "archiveResponseSha256": "5bfd687b890d5b5f562d50eafd8eca6197881a7da53fb00eefff386c21139cfb",
+      "extractedOriginalRule": {
+        "bytes": 605,
+        "sha256": "e12619896f68eed67266f0309929f9752129e311e1a07abdda3c7fef5f8a5365",
+        "canonicalRuleSha256": "4277f271429643f7b1054f17048155afb778cc8dd4d5ba93200d823bc2e9b1ec"
+      },
+      "frozenMirror": {
+        "url": "https://raw.githubusercontent.com/mikesxrs/Open-Source-YARA-rules/ec0056f767db98bf6d5fd63877ad51fb54d350e9/Cado%20Security/Lambda_Malware.yar",
+        "bytes": 729,
+        "sha256": "0ce298c67f88839ea461d650830d6cc9d127c4121561a881fa61e3580b2b8579",
+        "extractedRuleSha256": "200989bdf0efeadf19afb890fdd7734e3a0646a1e9b234abfa680204240be47f",
+        "canonicalRuleSha256": "6111814ee45d6defc50d99eceda3e73e4ecd2d8600cdd0a5096e64fdd02437a0"
+      },
+      "declarations": [
+        {
+          "ruleName": "lambda_malware",
+          "candidateRule": "CADOSECURITY_Lambda_Malware",
+          "candidateBlockSha256": "7cf94ad72e026c794e3b2f690b2803bc7544651d74f35a3e4efc791a3e773715",
+          "metadata": {
+            "author": "cdoman@cadosecurity.com",
+            "license": "Apache License 2.0",
+            "description": "Detects AWS Lambda Malware",
+            "date": "2022-04-03"
+          },
+          "licenseBasis": "original-page-rule-metadata",
+          "licenseUrl": null,
+          "licenseTextAvailable": false,
+          "originalDetection": {
+            "stringsSha256": "e344505010030e528b651793d143bcfe674e376682c323b8a45de4df15c1071e",
+            "conditionSha256": "73c8d40998c7fd0ed924aeeb13705a63e662ffd0d621f68694d175ad1081b068"
+          },
+          "candidateDetection": {
+            "stringsSha256": "e344505010030e528b651793d143bcfe674e376682c323b8a45de4df15c1071e",
+            "conditionSha256": "73c8d40998c7fd0ed924aeeb13705a63e662ffd0d621f68694d175ad1081b068"
+          },
+          "detectionTextCanonicalEqual": true,
+          "runtimeSemanticEquivalenceProven": false,
+          "candidateArchive": {
+            "url": "https://github.com/YARAHQ/yara-forge/releases/download/20260927/yara-forge-rules-core.zip",
+            "sha256": "16180800cc2f077638d2e13a33bd68609d0b6eedd1fbfdbae6d5d4a1c53f826f",
+            "entryPath": "packages/core/yara-rules-core.yar",
+            "extractedRuleSha256": "105519e6df2d8e1bcff3955f49718404dde04b6c216523a425a074be2812e17f",
+            "canonicalRuleSha256": "df24fbea176461195a428430f31156203e8a92f54a6a34b63a3a7debd150edbf",
+            "candidateBlockHashVerified": true
+          }
+        }
+      ],
+      "verificationScript": {
+        "packetRelativePath": "lattice-vsg-release-cycle-7/verify-cado-original.mjs",
+        "sha256": "6ae5c20f3d44ddc25f3df46bd15f5b25f4494626ed1214d419c82c9d0b6d3651",
+        "bytes": 12216,
+        "linuxOnlyDisposableContainerRequired": true
+      },
+      "rawRulePayloadRetained": false
+    },
+    {
+      "repository": "cado-security/DFIR_Resources_Whispergate",
+      "commit": "58742dbebb54cf1d34a16d045515f1df6a7c405d",
+      "path": "YARA/WhisperGate.yara",
+      "sourceUrl": "https://raw.githubusercontent.com/cado-security/DFIR_Resources_Whispergate/58742dbebb54cf1d34a16d045515f1df6a7c405d/YARA/WhisperGate.yara",
+      "gitBlobSha1": "c1ef0b11a7f7ddb9a88650d32cbae7dc8d0afc36",
+      "gitBlobVerified": true,
+      "sourceBytes": 2071,
+      "sourceSha256": "79d31438e075819e558b6d74abba4162937e1226d2389477803933c2c75eabc0",
+      "declarations": [
+        {
+          "ruleName": "Whispergate_Stage_1",
+          "metadata": {
+            "author": "mmuir@cadosecurity.com",
+            "license": "Apache License 2.0",
+            "description": "Detects first stage payload from WhisperGate"
+          }
+        },
+        {
+          "ruleName": "Whispergate_Stage_2",
+          "metadata": {
+            "author": "mmuir@cadosecurity.com",
+            "license": "Apache License 2.0",
+            "description": "Detects second stage payload from WhisperGate"
+          }
+        }
+      ],
+      "rawRulePayloadRetained": false
+    },
+    {
+      "repository": "cado-security/wiper_feb_2022",
+      "commit": "ff5c61c740a7aadc96e348a82af492e11b08e52b",
+      "path": "wiper.rule",
+      "sourceUrl": "https://raw.githubusercontent.com/cado-security/wiper_feb_2022/ff5c61c740a7aadc96e348a82af492e11b08e52b/wiper.rule",
+      "gitBlobSha1": "6dc7ae01e10863212033741c51c410ad35455a00",
+      "gitBlobVerified": true,
+      "sourceBytes": 683,
+      "sourceSha256": "5480d4c9e1cff79474dafa5a1b5834f2a2c58f31997ee85e91a283213ac64bdd",
+      "declarations": [
+        {
+          "ruleName": "Wiper_Ukr_Feb_2022",
+          "metadata": {
+            "author": "cadosecurity.com",
+            "license": "Apache License 2.0",
+            "description": "Detects Wiper seen in Ukraine 23rd Feb 2022"
+          }
+        }
+      ],
+      "rawRulePayloadRetained": false
+    },
+    {
+      "repository": "cado-security/DFIR_Resources_Industroyer2",
+      "commit": "7133b61f23954990d22c6bd85de0e26871427425",
+      "path": "YARA/AWFULSHRED.yara",
+      "sourceUrl": "https://raw.githubusercontent.com/cado-security/DFIR_Resources_Industroyer2/7133b61f23954990d22c6bd85de0e26871427425/YARA/AWFULSHRED.yara",
+      "gitBlobSha1": "763ff188b128aa59fae7be9c2a67a0eaa599374c",
+      "gitBlobVerified": true,
+      "sourceBytes": 723,
+      "sourceSha256": "fe9895685635da20cda7f9f1102226c847d3ae684eff0bab3a4e448ee0d6a225",
+      "declarations": [
+        {
+          "ruleName": "Linux_Wiper_AWFULSHRED",
+          "metadata": {
+            "author": "mmuir@cadosecurity.com",
+            "license": "Apache License 2.0",
+            "description": "Detects AWFULSHRED wiper used against Ukrainian ICS"
+          }
+        }
+      ],
+      "rawRulePayloadRetained": false
+    },
+    {
+      "repository": "cado-security/DFIR_Resources_Industroyer2",
+      "commit": "7133b61f23954990d22c6bd85de0e26871427425",
+      "path": "YARA/ORCSHRED.yara",
+      "sourceUrl": "https://raw.githubusercontent.com/cado-security/DFIR_Resources_Industroyer2/7133b61f23954990d22c6bd85de0e26871427425/YARA/ORCSHRED.yara",
+      "gitBlobSha1": "01685b030da619b235553fc966ecc47e7c3ae06c",
+      "gitBlobVerified": true,
+      "sourceBytes": 519,
+      "sourceSha256": "f16b9c8b99d0342f371a3c7e4456461d030c28bfa6659fb5d2848d7d3c29335e",
+      "declarations": [
+        {
+          "ruleName": "Linux_Worm_ORCSHRED",
+          "metadata": {
+            "author": "mmuir@cadosecurity.com",
+            "license": "Apache License 2.0",
+            "description": "Detects ORCSHRED worm used in attacks on Ukrainian ICS"
+          }
+        }
+      ],
+      "rawRulePayloadRetained": false
+    },
+    {
+      "repository": "cado-security/DFIR_Resources_Industroyer2",
+      "commit": "7133b61f23954990d22c6bd85de0e26871427425",
+      "path": "YARA/POWERGAP.yara",
+      "sourceUrl": "https://raw.githubusercontent.com/cado-security/DFIR_Resources_Industroyer2/7133b61f23954990d22c6bd85de0e26871427425/YARA/POWERGAP.yara",
+      "gitBlobSha1": "1861f55b4d6cc70ed681a35e5695b7465646f72c",
+      "gitBlobVerified": true,
+      "sourceBytes": 526,
+      "sourceSha256": "36f2c1352bcc092a0b3412dd3b453d76166c0a02a3872fd78433c9caafdd5e18",
+      "declarations": [
+        {
+          "ruleName": "Powershell_Downloader_POWERGAP",
+          "metadata": {
+            "author": "mmuir@cadosecurity.com",
+            "license": "Apache License 2.0",
+            "description": "Detects POWERGAP downloader used against Ukrainian ICS"
+          }
+        }
+      ],
+      "rawRulePayloadRetained": false
+    },
+    {
+      "repository": "cado-security/DFIR_Resources_Industroyer2",
+      "commit": "7133b61f23954990d22c6bd85de0e26871427425",
+      "path": "YARA/SOLOSHRED.yara",
+      "sourceUrl": "https://raw.githubusercontent.com/cado-security/DFIR_Resources_Industroyer2/7133b61f23954990d22c6bd85de0e26871427425/YARA/SOLOSHRED.yara",
+      "gitBlobSha1": "52b94e4b05e56870328ea2b8c1e183fac16de3fb",
+      "gitBlobVerified": true,
+      "sourceBytes": 515,
+      "sourceSha256": "92490b31fb98b3178901b01820c022debd82347c720bf3b7b4a68b525bb315cf",
+      "declarations": [
+        {
+          "ruleName": "Linux_Wiper_SOLOSHRED",
+          "metadata": {
+            "author": "mmuir@cadosecurity.com",
+            "license": "Apache License 2.0",
+            "description": "Detects SOLOSHRED wiper used against Ukrainian ICS"
+          }
+        }
+      ],
+      "rawRulePayloadRetained": false
+    }
+  ],
+  "license": {
+    "sourceUrl": "https://raw.githubusercontent.com/cado-security/DFIR_Resources_Industroyer2/7133b61f23954990d22c6bd85de0e26871427425/LICENSE",
+    "path": "licensing/notices/candidate-sources/sha256/c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4.txt",
+    "sha256": "c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4",
+    "bytes": 11357
+  },
+  "limits": [
+    "Rule-file identity was verified against original-author Git blobs or an archived original-author page. The Lambda candidate's canonical strings and condition text plus key declaration metadata match the original; compiled semantic/runtime equivalence and full aggregate byte equality are not established.",
+    "No raw rule/source payload was written to disk; only extracted declaration metadata and permitted LICENSE text were retained.",
+    "Repository LICENSE evidence for Industroyer2 does not establish original NOTICE absence or adaptation/distribution compliance.",
+    "The current Denonia URL redirects to a generic Darktrace page; the exact dated 2022 original-author archive is the retained declaration source. Its rule metadata declares Apache License 2.0, but no rule-specific license URL or full license/NOTICE file was found.",
+    "All commercial eligibility and release flags remain unchanged; unknown items have not been labeled public domain."
+  ],
+  "status": "supplemental-original-source-evidence-not-release-clearance",
+  "candidateBuilderIntegration": "The normalized Apache evidence may consume the exact archived declaration mapping. This record does not establish adaptation/distribution compliance, commercial clearance or release approval."
+}

package/dist/security-runtime/licensing/candidates/commercial-rule-candidate.json

@@ -0,0 +1,280 @@
+{
+  "schemaVersion": 1,
+  "status": "engineering-candidate-not-release-clearance",
+  "inputs": {
+    "commercialComponents": {
+      "path": "licensing/commercial-components.json",
+      "sha256": "c369ec24b9cb811245c62e4c4bcb130a65c48b215af064c938c4ccea4a0798e8",
+      "bytes": 18254
+    },
+    "sastCandidate": {
+      "path": "licensing/candidates/gitlab-sast-rules.json",
+      "sha256": "bbb4bef82d8f755df1d162d6806687254a7984014a8bdfe372adc11a95d076d6",
+      "bytes": 3133
+    },
+    "sastSources": {
+      "path": "licensing/candidates/gitlab-sast-source-evidence.json",
+      "sha256": "662c47108fe1acfd6ce3db5508fcfe81bb851f666bb5d4091e80d1f35ace0e91",
+      "bytes": 97468
+    },
+    "sastQualification": {
+      "path": "licensing/candidates/gitlab-sast-qualification.json",
+      "sha256": "5e3eeb24a1728fd27fd28562d59cbff8d43c281cb9a4018ea3a306698db5c559",
+      "bytes": 11213
+    },
+    "sastSourceNoticeBundle": {
+      "path": "licensing/candidates/gitlab-sast-source-notice-bundle.json",
+      "sha256": "95494e6442be48932743220de45124fb51dc578eddb8d72174f1038c6a2e4011",
+      "bytes": 1958
+    },
+    "yaraInventory": {
+      "path": "licensing/candidates/yara-forge-20260927.json",
+      "sha256": "4a1eb672e488b99d3381979a9eb1de4890edee79cfbcded9502683d48dbc7d54",
+      "bytes": 3027640
+    },
+    "yaraSourceQualification": {
+      "path": "licensing/candidates/yara-source-qualification.json",
+      "sha256": "ca2797cde56b3111816fd0d5dba260ebea87a3a99034a9eb229fab64a4b1c5c6",
+      "bytes": 11959
+    },
+    "malpediaSourceLicenseEvidence": {
+      "path": "licensing/candidates/malpedia-source-license-evidence.json",
+      "sha256": "4729a9374e28fd1ac463860efa7b596269cb323b97488de4d27af53506940e50",
+      "bytes": 2157
+    },
+    "apacheSourceLicenseEvidence": {
+      "path": "licensing/candidates/apache-source-license-evidence.json",
+      "sha256": "ab29e41e05a2c2dc333b2fbf05790c7497ba34a6aec125ed9a33f27756124350",
+      "bytes": 38800
+    }
+  },
+  "sast": {
+    "sourceCommit": "53bf5cf6df3c51b6c02110f5a638b5e6213666cd",
+    "sourceArchiveSha256": "32b51522401d1a19e2f68277235eef1f31ddd3560ae54343b6a6a78c4d2fbb23",
+    "sourceBundleSha256": "cf8966e91db4e583da96753bfdee7daf83f74f31408bb64016f3c90a6f83705e",
+    "selectedRuleCount": 161,
+    "licenseCounts": {
+      "LGPL-3.0": 82,
+      "MIT": 79
+    },
+    "sourceFileCount": 163,
+    "sourceFilesDigest": "acd43765ebb60cc8db86361e7a372bacb6cbe7e8d2478e6a6dfdfb5848b17282",
+    "licenseFiles": {
+      "LICENSE": {
+        "sha256": "33acf42afdd03163d75fe856cb431e70710e0b5deede3362e6d1c4697cfe1c6a",
+        "bytes": 2000,
+        "declaredLicense": "MIT"
+      },
+      "rules/lgpl/LICENSE": {
+        "sha256": "a5681bf9b05db14d86776930017c647ad9e6e56ff6bbcfdf21e5848288dfaf1b",
+        "bytes": 7651,
+        "declaredLicense": "LGPL-3.0"
+      }
+    },
+    "headersPreserved": true,
+    "modifiedFiles": 0,
+    "normalizedAuthorCatalogComplete": false,
+    "sourcePayloadStatus": "hash-bound-external-evidence-not-runtime-packaged",
+    "sourceNoticePackage": {
+      "archiveSha256": "aa6f5134dcf908f46992b7a00e7c42d5f7dcaeb45a0fad293132474159ecdd83",
+      "archiveBytes": 673832,
+      "entries": 167,
+      "status": "local-engineering-package-not-runtime-delivery",
+      "runtimePackaged": false,
+      "distributionObligationsComplete": false
+    },
+    "coverage": {
+      "detectionEquivalenceProven": false,
+      "missingIdentities": 5,
+      "addedIdentities": 4
+    }
+  },
+  "yara": {
+    "archiveVersion": "20260927",
+    "archiveSha256": "16180800cc2f077638d2e13a33bd68609d0b6eedd1fbfdbae6d5d4a1c53f826f",
+    "totalRules": 5110,
+    "conditionalCandidateCount": 4536,
+    "holdCount": 574,
+    "candidateDecisionCounts": {
+      "candidate-attribution": 2927,
+      "candidate-attribution-sharealike": 1582,
+      "candidate-explicit-apache": 27
+    },
+    "holdDecisionCounts": {
+      "exclude-safety": 1,
+      "exclude-unresolved-rights": 442,
+      "review-conflicting-metadata": 10,
+      "review-copyleft": 121
+    },
+    "candidateLicenseCounts": {
+      "Apache-2.0": 221,
+      "BSD-2-Clause": 928,
+      "CC-BY-SA-4.0": 1582,
+      "LicenseRef-DRL-1.1": 1789,
+      "MIT": 16
+    },
+    "conditionalSelectionDigest": "33aa825b1f9c843e7129f26b5b57e85d6121562cdeb577e40aef9360601585f6",
+    "holdDigest": "22150df654bf4396c085336f1c00f8d0483cdc61713a81db32a115c586ef98e2",
+    "allRuleMetadataDigest": "ce80ca2a1596fa58cf51a68b0087cdfc3b9abe25e6d03655fba9c5984865c3d6",
+    "authorAndSourceMetadataComplete": true,
+    "candidateLicenseClassificationPresent": true,
+    "sourceLicenseBindingComplete": false,
+    "sourceLicenseTextReferences": 16,
+    "candidatesWithRecordedLicenseTextReference": 2927,
+    "candidatesMissingRecordedLicenseTextReference": 1609,
+    "missingLicenseTextBindings": {
+      "Apache-2.0": 27,
+      "CC-BY-SA-4.0": 1582
+    },
+    "availableSourceDeclarationCount": 4536,
+    "availableSourceDeclarationCounts": {
+      "existingInventoryLicenseTextReferences": 2927,
+      "malpediaRulesFolderDeclaration": 1582,
+      "originalAuthorApacheDeclarations": 27
+    },
+    "sourceDeclarationGapCount": 0,
+    "sourceDeclarationGapLicenseCounts": {
+      "Apache-2.0": 0
+    },
+    "malpediaSourceDeclaration": {
+      "sourceRepository": "https://github.com/malpedia/signator-rules",
+      "sourceCommit": "c901f97b7df03e41917da74c2a84b04c227316c2",
+      "rulesFolderScope": "rules/",
+      "declaredLicense": "CC-BY-SA-4.0",
+      "selectedRules": 1582,
+      "uniqueSourceUrls": 1582,
+      "selectionTupleDigestAlgorithm": "SHA-256 of UTF-8 compact JSON tuples [rule,blockSha256,author,sourceUrl,candidateLicense,decision], sorted by rule code point order; no trailing newline",
+      "selectionTupleDigest": "1abee35347277118e5a744e8837bb6ac88147196ef80bd527dc833f6b840b042",
+      "declaration": {
+        "path": "licensing/notices/candidate-sources/sha256/e08c368ccd455f85c7fb9e04830e730f26e9dbb5c0f77bc88e09a5b0cb37df5b.txt",
+        "sha256": "e08c368ccd455f85c7fb9e04830e730f26e9dbb5c0f77bc88e09a5b0cb37df5b",
+        "bytes": 1938
+      },
+      "legalcode": {
+        "path": "licensing/notices/candidate-sources/sha256/28a9529c7d0bb4dc51f4bf5c116a3d16ef247a052f7591466768ddf563fd1cf5.txt",
+        "sha256": "28a9529c7d0bb4dc51f4bf5c116a3d16ef247a052f7591466768ddf563fd1cf5",
+        "bytes": 20138
+      },
+      "sourcePayloadEqualityEstablished": false,
+      "adaptationStatusEstablished": false,
+      "attributionAndDistributionObligationsComplete": false,
+      "commerciallyCleared": false
+    },
+    "apacheSourceDeclarations": {
+      "selectedRules": 27,
+      "selectionDigest": "7049543e6494f9dc40b0591b975c53d03f8823522d3679f81e04a457c32d1108",
+      "sourceKindCounts": {
+        "archived-original-author-page": 21,
+        "original-author-git-file": 6
+      },
+      "originalEvidenceRecords": [
+        {
+          "path": "licensing/candidates/cado-source-declaration-evidence.json",
+          "sha256": "810cadb12983588a7001fee92a328fb6ac66e9e766eb90ed06d4f083ad341e36",
+          "bytes": 14070
+        },
+        {
+          "path": "licensing/candidates/blackberry-source-declaration-evidence.json",
+          "sha256": "662602c01d6cc755ace812570591d8257de3462562e0ca4b57fa33c3a1ff7e8e",
+          "bytes": 22826
+        },
+        {
+          "path": "licensing/candidates/blackberry-additional-source-declaration-evidence.json",
+          "sha256": "db922d1ab580eb09a01de5db83741f134a4446610a0762a4c91a0c298099de2f",
+          "bytes": 18753
+        }
+      ],
+      "declaredRules": [
+        "BLACKBERRY_Boratrat",
+        "BLACKBERRY_Boratratinformation",
+        "BLACKBERRY_Boratratkeylogger",
+        "BLACKBERRY_Eternityclipper",
+        "BLACKBERRY_Eternityransom",
+        "BLACKBERRY_Eternitystealer",
+        "BLACKBERRY_Eternityworm",
+        "BLACKBERRY_Headertip",
+        "BLACKBERRY_Mal_Infostealer_EXE_Jupyter_Cert_36Ff",
+        "BLACKBERRY_Mal_Infostealer_MSI_EXE_Jupyter_Certificate",
+        "BLACKBERRY_Mal_Infostealer_MSI_Jupyter_Embedded_Powershell",
+        "BLACKBERRY_Mal_Infostealer_Win32_Blackguard",
+        "BLACKBERRY_Mal_Infostealer_Win32_Jupyter_Download_And_Execute_Module",
+        "BLACKBERRY_Mal_Infostealer_Win32_Jupyter_Main_Module",
+        "BLACKBERRY_Mal_Win32_Chaos_Builder_Ransomware_2022",
+        "BLACKBERRY_Mal_Win32_Chaosransomware_2022",
+        "BLACKBERRY_Mal_Win32_Onyx_Strain_Chaos_Ransomware_2022",
+        "BLACKBERRY_Snake",
+        "BLACKBERRY_Windealer_Executable",
+        "BLACKBERRY_Windealer_Library",
+        "CADOSECURITY_Lambda_Malware",
+        "CADOSECURITY_Linux_Wiper_AWFULSHRED",
+        "CADOSECURITY_Linux_Wiper_SOLOSHRED",
+        "CADOSECURITY_Linux_Worm_ORCSHRED",
+        "CADOSECURITY_Powershell_Downloader_POWERGAP",
+        "CADOSECURITY_Whispergate_Stage_1",
+        "CADOSECURITY_Wiper_Ukr_Feb_2022"
+      ],
+      "unmappedRules": [],
+      "sourcePayloadEqualityEstablished": false,
+      "adaptationStatusEstablished": false,
+      "attributionAndDistributionObligationsComplete": false,
+      "commerciallyCleared": false
+    },
+    "explicitApacheRulesWithoutSourceLicenseUrl": 27,
+    "sourcePayloadStatus": "linux-only-transient-selection-verified-not-runtime-packaged",
+    "rawRulePayloadIncluded": false,
+    "compileTestStatus": "strict-compile-passed-pinned-qualification-only",
+    "commerciallyCleared": false,
+    "sourceQualification": {
+      "evidence": {
+        "path": "licensing/candidates/yara-source-qualification.json",
+        "sha256": "ca2797cde56b3111816fd0d5dba260ebea87a3a99034a9eb229fab64a4b1c5c6"
+      },
+      "qualificationOnly": true,
+      "verifiedSourceBlocks": 5110,
+      "verifiedSelectedBlockHashes": 4536,
+      "excludedHolds": 574,
+      "filteredPayload": {
+        "bytes": 6858138,
+        "sha256": "20b79b4446792a00348fb683299a132b11e6aeeb58ad26c61722d00c237c4ae5"
+      },
+      "strictCompile": {
+        "platform": "linux",
+        "yaraXVersion": "1.21.0",
+        "exitStatus": 0,
+        "ignoreInvalidRules": false,
+        "compiledArtifact": {
+          "bytes": 7504097,
+          "sha256": "455f26d409f8ce649595dc040eac751581630903bf1c06ec68b4d8c9703862bf"
+        }
+      },
+      "sourcePayloadStatus": "linux-only-transient-selection-verified-not-runtime-packaged",
+      "compileTestStatus": "strict-compile-passed-pinned-qualification-only",
+      "runtimePackaged": false,
+      "coverageEquivalenceProven": false,
+      "adaptationComplianceEstablished": false,
+      "commerciallyCleared": false,
+      "releaseApproval": null
+    }
+  },
+  "releaseEligibility": {
+    "unchanged": true,
+    "status": "blocked",
+    "blockers": [
+      "commercial_component_rights_not_cleared",
+      "third_party_attribution_catalog_incomplete",
+      "replacement_rule_coverage_not_approved",
+      "artifact_release_approval_missing"
+    ]
+  },
+  "remainingGaps": [
+    "sast_final_runtime_source_notice_delivery_unverified",
+    "sast_normalized_author_catalog_missing",
+    "yara_selected_source_distribution_bundle_not_packaged",
+    "yara_per_rule_source_payload_equality_and_adaptation_status_missing",
+    "yara_attribution_change_notices_and_distribution_obligations_incomplete",
+    "yara_selected_pack_detection_controls_and_coverage_pending",
+    "replacement_rule_coverage_not_approved",
+    "commercial_component_rights_not_cleared",
+    "artifact_release_approval_missing"
+  ]
+}