{
  "schema": "csint-public-source-releaseguard-case/v1",
  "reviewId": "wcr-0d10a827199c-733b3cbe",
  "generatedAt": "2026-08-22T06:32:11.976Z",
  "source": {
    "repository": "https://github.com/n8n-io/self-hosted-ai-starter-kit",
    "license": "Apache-2.0",
    "licenseUrl": "https://github.com/n8n-io/self-hosted-ai-starter-kit/blob/9ccbaf42e007369453acaec60b9808cf8e6cdb44/LICENSE",
    "workflowPath": "n8n/demo-data/workflows/srOnR8PAY3u4RSwb.json",
    "baselineCommit": "cad1f5454fcb66819fae845ff8d267dde7aa69b6",
    "candidateCommit": "9ccbaf42e007369453acaec60b9808cf8e6cdb44",
    "commitUrl": "https://github.com/n8n-io/self-hosted-ai-starter-kit/commit/9ccbaf42e007369453acaec60b9808cf8e6cdb44"
  },
  "inputEvidence": {
    "baselineFileSha256": "b30e7bcbcb1b1a3fd4f82c9ddc2afdc68fa296ee5014580504f8126808e55f48",
    "candidateFileSha256": "e4e3112000b61db5fed114b026b000912b90ff832f163c3e7cc0d839bb1b7bad",
    "baselineCanonicalFingerprint": "733b3cbe0f85cb611895365ce3b7b69ecb8ed4165a3be8643fbf7a47598b1919",
    "candidateCanonicalFingerprint": "0d10a827199c10311c0b6bc18feb3e7e1fb33baf9d79f3c8b24f0ea0459a20b7"
  },
  "result": {
    "deliveryStatus": "draft",
    "policyResult": "review",
    "runtimeStatus": "not-run",
    "changeRecords": 1,
    "openFindings": ["AA-005-01", "AA-010-02"],
    "humanValidationComplete": false
  },
  "publishedArtifacts": {
    "reportHtml": "releaseguard-draft-report.html",
    "reportPdf": "releaseguard-draft-report.pdf",
    "packageZip": "releaseguard-draft-package.zip",
    "resultScreenshot": "releaseguard-run.jpg",
    "verifierScreenshot": "package-verified.jpg",
    "packageSha256": "6f0ca201176ca27f1fbb533161c8755d4664f29a31edf42405e9a8e0daca3613",
    "pdfSha256": "d41ce5eca8aa5fb6ecff6dc67dff0d832f7b7932d1b998e4a9fb16f850157e8d"
  },
  "boundary": {
    "rawWorkflowExportsPublished": false,
    "modelCalled": false,
    "credentialsUsed": false,
    "productionAccessed": false,
    "candidateBoundStagingReceiptSupplied": false,
    "claims": [
      "local static comparison of two public exports",
      "not a penetration test",
      "not a security or production-readiness guarantee",
      "not endorsed or certified by n8n"
    ]
  }
}