{
  "releaseSnapshot": {
    "format": "static-release-reference-v1",
    "sourceVersion": "0.29.0",
    "sourceRegistrySha256": "a2b5ec09bf6c38b9d2879d746a4fded374f5928b445377b0270ef6aa8e6cac65",
    "generatedAt": "2026-10-06T15:38:00Z",
    "releaseAcceptance": "not-verified-by-generator",
    "runtimeReadiness": "not-evaluated",
    "livePaymentsVerified": false,
    "indexingVerified": false,
    "apiOrigin": null,
    "notice": "Build-time release reference. Runtime readiness, deployment, payment settlement and external indexing are not evaluated here. Prices are proposed; this file cannot authorize execution or payment."
  },
  "exampleResponse": {
    "operation": "sbom-diff",
    "version": "0.29.0",
    "result": {
      "matchBy": "name",
      "added": [],
      "removed": [],
      "changed": [
        {
          "identity": "[null,\"worker-kit\"]",
          "fields": [
            "version",
            "purl"
          ],
          "before": {
            "sourcePointer": "/components/0",
            "reference": null,
            "name": "worker-kit",
            "group": null,
            "version": "1.2.0",
            "purl": "pkg:npm/worker-kit@1.2.0",
            "type": "library",
            "licenses": [
              {
                "kind": "id",
                "value": "MIT"
              }
            ],
            "hashes": []
          },
          "after": {
            "sourcePointer": "/components/0",
            "reference": null,
            "name": "worker-kit",
            "group": null,
            "version": "1.3.0",
            "purl": "pkg:npm/worker-kit@1.3.0",
            "type": "library",
            "licenses": [
              {
                "kind": "id",
                "value": "MIT"
              }
            ],
            "hashes": []
          }
        }
      ],
      "unchangedCount": 0,
      "scope": "Unique group/name or versionless generic-PURL identities only; reference IDs, ordering, and source positions are ignored. Duplicate identities are rejected, not guessed."
    },
    "provenance": {
      "inputSha256": "b19944d599f94ec8f81c15402bd893787a4e4bbb2eb0f5ae646264db8b31b8b2",
      "outputSha256": "d267cc8407c56c634f70b48cbbdd55534cbeb8ea0c293a8e92a61b1b9e3e31d6",
      "deterministic": true,
      "externalRequests": 0
    }
  }
}