Evidence

The public package is reproduced before it is trusted

CI regenerates the package from the exact public-core commit and compares the resulting files byte for byte with the copy used by this site.

Admitted projection

Verified projection

Core commit d94441f2f32fd8edc7b416beecd88b2b087d01a9; projection SHA-256 0e13dae7cddddff1110d79630682bfbc1495f1bc23d5ea95cf15e2906fb967c4; contract hash bf288d8b6349c2843b5196fa1857ae9c464773bbcf7cad9d821785ea67dfb6e8.

Source: Repository-verified projection · core d94441f2f32f · sha256 0e13dae7cddd

Production governance registries

Verified projection

Statistical adapters: 0. Protected evaluators: 0.

Source: Repository-verified projection · core d94441f2f32f · sha256 0e13dae7cddd

What the hash proves

Public source

The current checks establish reproducibility and integrity through an exact core checkout, the Python exporter, an independent TypeScript verifier, SHA-256 binding, and byte parity. DeltaGrid does not claim a detached publisher signature yet.

Source: Public projection provenance policy