{
  "schema": "csint-public-tool-verification-manifest/v1",
  "testedAt": "2026-08-22T09:00:08.000Z",
  "method": "Each public file is checked against its recorded hash before it is opened locally. No sample is run or uploaded.",
  "examples": [
    {
      "id": "mcp-ruby-sdk",
      "tools": [
        "/ai-istihbarat"
      ],
      "source": "Model Context Protocol Ruby SDK",
      "outputs": [
        {
          "name": "mcp-ruby-sdk-agent-surface.json",
          "bytes": 11677,
          "sha256": "5546a961a34c6be9f7e347acd5aaf473171a8db35ad31914851f2374b748873f"
        },
        {
          "name": "mcp-ruby-sdk-agent-surface.md",
          "bytes": 4685,
          "sha256": "4bd8cc68a9077c077fa74f0d91d617f6ec716003a6fb979b0ceed7f838e0cf2e"
        },
        {
          "name": "mcp-ruby-sdk-live-summary.jpg",
          "bytes": 134700,
          "sha256": "5b32be8e46941c050d44a1e78960dc93c8391c7cf9e94470f872c8863e2f2dbf"
        }
      ]
    },
    {
      "id": "fdroid-client",
      "tools": [
        "/mobil-uygulama-inceleme",
        "/dijital-inceleme/sandbox",
        "/dijital-inceleme/binary-diff"
      ],
      "source": "F-Droid client 1.23.1 and F-Droid client 1.23.2",
      "outputs": [
        {
          "name": "fdroid-mobile-exposure.json",
          "bytes": 125193,
          "sha256": "efaabfee162e4b9c1120578bf31d80405d97848d14234108daba100ff192ab96"
        },
        {
          "name": "fdroid-mobile-exposure-evidence.zip",
          "bytes": 16254,
          "sha256": "ad2837d8e83df439a72a833590f0a5b0645575bfe1041eb91aa3044c5a86470c"
        },
        {
          "name": "fdroid-binary-diff.json",
          "bytes": 1046836,
          "sha256": "28e36fee99dc0403a826b790b5b8fd2b7b78c4f3b604b8a3146c4f792a2ed7da"
        },
        {
          "name": "fdroid-1.23.2-live-summary.jpg",
          "bytes": 121963,
          "sha256": "6e9dee2530dd97ed7503889e5b5ac6452d1c24f938e84059ceb1b6fe54b9d1bb"
        }
      ]
    },
    {
      "id": "busybox-image",
      "tools": [
        "/dijital-inceleme/container-supply-chain"
      ],
      "source": "Docker Official Image: BusyBox 1.36.1 (linux/amd64)",
      "outputs": [
        {
          "name": "busybox-container-report.json",
          "bytes": 3091,
          "sha256": "1797732d8a8cdf81df6f58ff5c74404f7b1052e94b88eda7190543e39a024c80"
        },
        {
          "name": "busybox-1.36.1-live-summary.jpg",
          "bytes": 81481,
          "sha256": "428fddc27f7a85ca619aae03f1c7d2ae7f20424c276de6abb7367677824f43ea"
        }
      ]
    },
    {
      "id": "live-read-only-dependencies",
      "tools": [
        "/advanced-osint",
        "/web-kanit",
        "/yonlendirme-zinciri",
        "/web-supply-chain",
        "/web-degisiklik-takibi",
        "/cti",
        "/fidye-takip",
        "/tehdit-aktorleri",
        "/dark-web-analizi",
        "/ti-brifing",
        "/tespit-paketi",
        "/kaynak-degisiklikleri",
        "/android-tehditleri"
      ],
      "source": "Seven GET checks across three deployed CSINT read-only services",
      "outputs": [
        {
          "name": "live-read-only-checks.json",
          "bytes": 3767,
          "sha256": "9ad232e5b205ad07a5c50d1270c2d039a5ba6f7fb8d69105a1eaf4ffdbcd6f08"
        }
      ]
    },
    {
      "id": "catalog-route-smoke",
      "tools": [
        "/ai-istihbarat",
        "/ai-agent-audit",
        "/mobil-uygulama-inceleme",
        "/android-davranis-ikizi",
        "/dijital-inceleme/sandbox",
        "/dijital-inceleme/binary-diff",
        "/dijital-inceleme/container-supply-chain",
        "/golge-izi",
        "/gorsel-video-kanit",
        "/advanced-osint",
        "/web-kanit",
        "/yonlendirme-zinciri",
        "/web-supply-chain",
        "/web-degisiklik-takibi",
        "/internet-gorunurlugu",
        "/golge-dogrulama",
        "/ioc-masasi",
        "/cti",
        "/aktif-istismar",
        "/fidye-takip",
        "/tehdit-aktorleri",
        "/dark-web-analizi",
        "/ti-brifing",
        "/tespit-paketi",
        "/web-arsiv-masasi",
        "/kaynak-degisiklikleri",
        "/android-tehditleri",
        "/report-builder",
        "/evidence-log",
        "/vaka-korelasyon"
      ],
      "source": "Local Turkish and English rendered routes",
      "outputs": [
        {
          "name": "catalog-route-checks.json",
          "bytes": 11310,
          "sha256": "ee23eea5d3722bc9407b929e0846b254c711115d317f8e78ee984fa0ae604759"
        }
      ]
    }
  ],
  "boundaries": [
    "Opening a file successfully does not show that it is safe, malicious, authentic, compliant, or ready to release.",
    "These examples show the file types that were tested. They do not cover every valid file, repository, container image, or workflow.",
    "The open-source n8n case has its own checked manifest. It remains a draft because no runtime test was performed."
  ]
}