Each retrieved in-toto build statement names the corresponding linux/amd64 image-manifest digest, and all retained index/manifest/provenance bytes match their declared SHA-256 digests.Content integrity does not authenticate a builder. Both statements have empty builder IDs, incomplete parameters/materials and reproducible=false; no detached signature verification was performed.TIBBIR UNIVERSE THIS IS TIBBIR How to get TIBBIR Ribbit in numbers Connected clues Account archive Bridge & contracts On-chain research Connections Community The story Reading room Network map Timeline Findings Source library Conversations People & companies Open questions Export & reuse