{
  "_schema": "omega-evidence-index-v1",
  "_comment": "Machine-readable index of OmegaEngine's published evidence artifacts. Static files live under /evidence/; live endpoints are listed with their auth (all public). When adding an artifact to public/evidence/, add it here with a fresh sha256.",
  "updatedAt": "2026-07-27",
  "baseUrl": "https://omegaengine.ai",
  "artifacts": [
    {
      "id": "fuzzer-corpus-score",
      "title": "Deterministic input-safety catch rate over the full 5,023-vector attack corpus",
      "path": "/evidence/fuzzer-corpus-score.json",
      "type": "application/json",
      "sha256": "15c11226246e134a10171c07c382f9d1ffeca2c3a269a78b3838bb035d17c99e",
      "shaNote": "SHA-256 of the file bytes as published; regenerating the artifact (npm run eval:fuzzer-corpus) changes this hash — treat a mismatch as 'the artifact was updated', then re-read this index.",
      "notes": "Deterministic layers only (no LLM judge); measures engine recall over a corpus of known attacks, published misses included. Methodology and reproduction steps: /docs/benchmark-methodology."
    }
  ],
  "liveEndpoints": [
    {
      "id": "redteam-claims",
      "title": "Canonical public red-team claims snapshot (integrity-hashed, ETag-cached)",
      "path": "/api/public/redteam-claims",
      "auth": "none"
    },
    {
      "id": "transparency-sth",
      "title": "RFC-6962 transparency log — signed tree head (Ed25519, offline-verifiable against /.well-known/jwks.json)",
      "path": "/api/transparency/sth",
      "auth": "none"
    },
    {
      "id": "jwks",
      "title": "Public signing keys (JWKS) — the trust root every attestation, receipt, and tree head verifies against",
      "path": "/.well-known/jwks.json",
      "auth": "none"
    }
  ],
  "humanPages": {
    "benchmarkMethodology": "/docs/benchmark-methodology",
    "judgeCard": "/docs/judge-card",
    "transparencyExplorer": "/transparency",
    "verify": "/verify",
    "verifyWithoutTrustingUs": "/docs/verify-without-trusting-us"
  },
  "verification": {
    "offline": "npx -y @omegaengine/verify@latest sample --api https://omegaengine.ai",
    "note": "Attestations, OmegaReceipts, and the transparency log STH are Ed25519-signed and verify offline against /.well-known/jwks.json. Benchmark artifacts above are published measurements — reproducible via the documented npm scripts, not cryptographically signed."
  }
}