Evidence

Every Softinel pipeline run, published and signed.

One canonical model. Every artifact below is a real pipeline output from a real codebase — findings pinned to file:line, verdict derived from a policy set, entire pack signed with Ed25519 against the key published at /.well-known/jwks.json. Anyone can verify.

3 artifacts published

sample-1
vulnerable-web
svp-platform/samples/vulnerable-web
Block
8
Files
8
Findings
2
Languages
json · typescriptView artifact →
sample-2
softinel-cli
svp-platform/apps/cli
Pass
6
Files
4
Findings
2
Languages
go · gomodView artifact →
sample-3
minimist@1.2.5
minimist@1.2.5 (vendored under samples/external/)
Block
20
Files
4
Findings
2
Languages
javascript · jsonView artifact →

Reproduce every artifact from source

git clone https://github.com/abokenan444/svp-platform cd svp-platform go run ./tools/build-evidence -all # Every artifact under apps/web/public/evidence/ should be byte-identical # to what softinel.com publishes (modulo timestamps and signatures). diff -q apps/web/public/evidence/sample-1/verdict.json \ <(curl -sS https://softinel.com/evidence/sample-1/verdict.json)

vulnerable-web

softinel-cli

minimist@1.2.5