CatalogEntryReview

One listed release as an operator sees it: consent facts, no addresses.

bundle_idBundle Id (string)required

Bundle identity the release belongs to.

bundle_versionBundle Version (string)required

Bundle version the release carries.

title object

Display title, if any.

anyOf

• string
• null

string

publisherPublisher (string)required

Publisher that signed the release.

sequenceSequence (integer)required

Publisher release sequence.

release_digestRelease Digest (string)required

Digest of the signed claims, as inspection reviews them.

runtime_platform object

Exact artifact family of a runtime-bearing release; None for a plain one.

anyOf

• string
• null

string

artifact_sha256Artifact Sha256 (string)required

Digest of the executable artifact.

artifact_bytesArtifact Bytes (integer)required

Signed artifact size in bytes.

transfer_bytesTransfer Bytes (integer)required

Everything an install transfers: the artifact plus, for a runtime-bearing release, every wheel it lists.

platformsstring[]required

Operating systems supported.

skulk_build_sha256Skulk Build Sha256 (string)required

Skulk build the release binds to.

permissionsstring[]required

Signed permission summaries.

descriptorsstring[]required

Qualified capability ids.

surfacesstring[]required

Titles of declared surfaces.

operationsOperations (boolean)required

Whether durable operations are declared.

steward_risksstring[]required

Steward exposure risk classes: observation, billable, effect.

expires_atExpires At (integer)required

Release expiry as a Unix timestamp.

matches_hostMatches Host (boolean)required

Whether this host's Skulk build and platform match the release.

CatalogEntryReview

{
  "bundle_id": "string",
  "bundle_version": "string",
  "title": "string",
  "publisher": "string",
  "sequence": 0,
  "release_digest": "string",
  "runtime_platform": "string",
  "artifact_sha256": "string",
  "artifact_bytes": 0,
  "transfer_bytes": 0,
  "platforms": [
    "string"
  ],
  "skulk_build_sha256": "string",
  "permissions": [
    "string"
  ],
  "descriptors": [
    "string"
  ],
  "surfaces": [
    "string"
  ],
  "operations": true,
  "steward_risks": [
    "string"
  ],
  "expires_at": 0,
  "matches_host": true
}