Store policies

What this store signs

The trust model per artifact class: what bytes each signature covers, who holds the key, and the one thing a valid signature does not prove. Names the classes that sit on the weakest available trust model, and lists what this store has not built. HTML for browsers, JSON otherwise. Free.

get/attestation

Request

  • Base URL: https://scvd.store
  • URL: https://scvd.store/attestation
  • Auth: none required

Headers

Accept'application/json' | 'text/html'

This door negotiates: application/json, text/html, parsed with q-values (RFC 9110 §12.5.1). A bare wildcard or no header gets application/json; a named AI reader that states no preference gets markdown where it is offered. The answer carries Vary.

If-None-Matchstring

Send a prior ETag (SHA-256 of exact response bytes). Unchanged content returns 304 with no body.

Response

OK

standfirststring required
key_architectureobject
why_signed_payloadstring
key_continuityobject
trust_modelsobject

The named models an artifact class can be rendered under.

money_pathobject
maker_marksobject
maker_mark_policyobject
marked_itemsobject
not_builtstring

What this store has not built, named rather than implied by absence.

held_against_usstring
criteria_pagestring uri
honest_limitstring required

Changes

No recorded changes to this operation across all 1 revision of this API.