{"schema":"qscout.cbom.verification.v1","algorithm":"ML-DSA-65","standard":"FIPS 204","key_id":"ml-dsa-65-qscout","verify_key_sha256":"89b33c0412d8464029244859e58ede43db939c9e2c16e0b39473d3d99415ee4f","verify_key_fingerprint":"89b33c0412d84640","verify_key_url":"https://api.qtonicquantum.com/public/verification-key","sample_url":"https://api.qtonicquantum.com/public/trust/cbom.sample.json","verification_url":"https://api.qtonicquantum.com/public/trust/cbom.verification.json","signature_b64":"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","signature_encoding":"base64","signature":"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","signed_at":"2026-09-30T06:26:01Z","git_sha":"e46cb851b8ebebc3a923c2d5f43a0f57e2d69f2a","canonicalization":"wire-utf8-bytes-of-cbom-json","signed_input":"full_document","covers":["serialNumber","metadata","metadata.timestamp","metadata.component","components","dependencies","bomFormat","specVersion","version","$schema"],"signing_input_sha256":"72bc110be372d9a31d208eea55d8cce18de9b37c4b8aa93b818f16860a41b618","cbom_sha256":"72bc110be372d9a31d208eea55d8cce18de9b37c4b8aa93b818f16860a41b618","cbom_serial_number":"urn:uuid:707f14e8-5815-4548-aedc-f0ffc7f6fd54","cbom_metadata_timestamp":"2026-09-30T06:26:00.625165+00:00","cbom_spec_version":"1.7","cbom_component_count":13,"verify_command":"SAMPLE=https://api.qtonicquantum.com/public/trust/cbom.sample.json VERIFY=https://api.qtonicquantum.com/public/trust/cbom.verification.json VK=https://api.qtonicquantum.com/public/verification-key && curl -fsSL \"$SAMPLE\" -o /tmp/qscout-cbom.sample.json && curl -fsSL \"$VERIFY\" -o /tmp/qscout-cbom.verification.json && curl -fsSL \"$VK\" -o /tmp/qscout-verification-key.json && python3 -c \"import base64,hashlib,json,sys;from pathlib import Path;sample=Path('/tmp/qscout-cbom.sample.json').read_bytes();v=json.loads(Path('/tmp/qscout-cbom.verification.json').read_text());vk=json.loads(Path('/tmp/qscout-verification-key.json').read_text());assert v.get('signed_input')=='full_document';assert hashlib.sha256(sample).hexdigest()==v['signing_input_sha256'];assert vk['verify_key_sha256']==v['verify_key_sha256'];import oqs;sig=base64.b64decode(v['signature_b64']);key=base64.b64decode(vk['verify_key_b64']);ok=oqs.Signature('ML-DSA-65').verify(sample,sig,key);print('VERIFY','OK' if ok else 'FAIL');sys.exit(0 if ok else 1)\"","verification_method":"ML-DSA-65 detached signature over the exact UTF-8 wire bytes of the CycloneDX CBOM JSON (full document including serialNumber and metadata.timestamp). Verify with libOQS or the companion command in verify_command.","not_signed":{"components_only":true,"note":"Signatures that only cover components[] are rejected by design. The signed message is the full CBOM document bytes."}}