{
  "type": "OrgAnchorVerifyIndex",
  "version": "1.0",
  "generated_at": "2026-05-12T02:57:21.619Z",
  "role": "adopting-organization-verify-index",
  "organization": {
    "name": "OrgAnchor",
    "display_name": "OrgAnchor",
    "description": "OrgAnchor helps organizations publish signed official endpoint statements so their online presence remains verifiable across domain, platform, and infrastructure changes."
  },
  "statement": {
    "path": "official-endpoints.json",
    "hash": "sha256:5811e45488c093e8820b35edf144a8dbae0c20a79063a44993043bfdf26a0a36"
  },
  "signature": {
    "path": "official-endpoints.json.sig",
    "hash": "sha256:ad353bd72e7b1fa4137ec609a85d06bfaa0ce7564ef1e3fd4581defba9c4a532"
  },
  "root_authority": {
    "path": "root-authority.json",
    "hash": "sha256:7d720aa028e4b3b94d47b8e8789b0d7f5c8bb0564e80fac7f0ad7b275718e1b9",
    "authority_id": "root-authority-2026",
    "threshold": {
      "required": 2,
      "total": 3
    }
  },
  "verification": {
    "command": "organchor statement verify --authority root-authority.json --expected-authority-hash sha256:7d720aa028e4b3b94d47b8e8789b0d7f5c8bb0564e80fac7f0ad7b275718e1b9 --in official-endpoints.json --sig official-endpoints.json.sig"
  },
  "linked_artifacts": {
    "claims": {
      "path": "claims/product-claims.json",
      "hash": "sha256:04835565e769bea5cbcc3c58aca9ba2de92ee16bae980c01b1e3e4c8401fbaee",
      "signature_path": "claims/product-claims.json.sig",
      "signature_hash": "sha256:dcb0dced3353ac6e543b16e75b259bc6b64e648e36388c36c3407db70ad5b79b"
    },
    "evidence": {
      "path": "evidence/evidence-manifest.json",
      "hash": "sha256:d2fd13f7bf63488c9d61bcadaf43c6e789a3a1be31a153cb3aa0b3b75120e459",
      "signature_path": "evidence/evidence-manifest.json.sig",
      "signature_hash": "sha256:8d58e282484f8a401443272542de9b9d46161a84a70d91ac75349706cee7462a"
    }
  },
  "notes": [
    "This index belongs to the adopting organization using OrgAnchor.",
    "This index is not a trust root.",
    "Verify signatures and root authority before trusting endpoint claims."
  ]
}