Attestations

{
  "type":        "build-reproducible",
  "entryDid":    "did:oas:l1fe:agent:web-research@3.4.0",
  "attesterDid": "did:oas:l1fe:auditor:k8s-reproducer",
  "issuedAt":    "2026-04-26T15:00:00Z",
  "evidence":    "https://ci.l1fe.ai/builds/4172",
  "signature":   "ed25519:…"
}

Attestations are detachable — they don't change the entry. They travel alongside it and are returned in GET /v1/attestations/<did>.

Standard types

• build-reproducible
• license-verified
• no-malware-detected
• eval-passed
• human-reviewed
• dependencies-pinned
• sbom-attached

Custom types are allowed; reuse a standard type when one fits.

Independence weight

Discovery ranking weighs independent attesters higher than repeated attestations from the same auditor. A single attester signing 100 entries contributes less to ranking than 5 different attesters signing the same entry.