{
  "schema": "zlar-public-release-metadata-v1",
  "generated_at": "2026-06-28T04:32:40Z",
  "site": "https://zlar.ai/",
  "current_public_release": {
    "version": "v3.4.54",
    "title": "Scoped Claude Code pre-authority install readiness",
    "url": "https://zlar.ai/release.json",
    "repository": "private-core-source",
    "commit": "0156aeb71441e7191f5414d2d17bc51b4533b559",
    "tag": "v3.4.54",
    "tag_object": "daeba5e5126763b70643faf100dcd778b4fd6db6",
    "published_at": "2026-06-27T16:56:03Z",
    "public_verification_url": "https://zlar.ai/demo/proof-pack/proof-pack-manifest.json",
    "source_visibility": "private_current_core",
    "source_access": "request source review via hello@zlar.ai",
    "license_boundary": "Prior Apache-2.0 public distribution remains licensed; privacy does not revoke prior public rights."
  },
  "website": {
    "repository": "https://github.com/ZLAR-AI/zlar-ai.github.io",
    "branch": "main",
    "metadata_path": "release.json",
    "live_url": "https://zlar.ai/release.json",
    "verification_hint": "Verify the live public checkpoint through static zlar.ai artifacts: release.json, the proof-pack manifest, SHA256SUMS, verifier, and coverage report. Current core source is private."
  },
  "proof_pack": {
    "manifest_url": "https://zlar.ai/demo/proof-pack/proof-pack-manifest.json",
    "sha256sums_url": "https://zlar.ai/demo/proof-pack/SHA256SUMS",
    "public_verification_url": "https://zlar.ai/demo/proof-pack/proof-pack-manifest.json",
    "release_metadata_url": "https://zlar.ai/release.json"
  },
  "authority_boundary": "A log records what happened. A ZLAR receipt records what counted as authorized effect when action tried to become consequence.",
  "claim_boundary": {
    "summary": "Current public site explains the category, side-door boundary, and receipt-scanner proof surface. Detailed current core source and CI evidence are private; public verification is static zlar.ai metadata and proof-pack artifacts.",
    "service_proof_command": "zlar protected-records-installed-runtime-profile-service-proof --sample",
    "service_proof_artifact_verification_command": "zlar protected-records-installed-runtime-profile-service-proof verify --sample --json",
    "terminal_chain_command": "zlar protected-records-installed-runtime-profile-terminal-chain --sample",
    "evidence_threshold": "v3.4.54 - Scoped Claude Code pre-authority install readiness remains the current public release checkpoint. Public verification is the static zlar.ai receipt-scanner path: release.json, proof-pack-manifest.json, SHA256SUMS, verifier, and coverage report. Prior Apache-2.0 public distribution remains licensed; current core source access is private and source review is by request. This metadata does not claim public GitHub inspection, public clone/install access, public CI visibility, current-machine governance, live hook execution, live receipt emission, production authority, enterprise readiness, external attestation, sovereign recognition, or unrouted-surface coverage.",
    "safe_codex_wording": "ZLAR can govern Codex CLI-invoked MCP tool calls when those MCP servers are routed through ZLAR.",
    "non_claims": [
      "No public GitHub inspection claim for current core source.",
      "No public clone or install path claim.",
      "No public CI visibility claim.",
      "No current-machine governance claim.",
      "No live hook execution claim.",
      "No live receipt emission claim.",
      "No production authority claim.",
      "No enterprise readiness claim.",
      "No external attestation claim.",
      "No sovereign recognition claim.",
      "No unrouted-surface coverage claim."
    ],
    "deployment_profile_authority_bridge_command": "zlar protected-records-one-terminal-deployment-profile --sample",
    "public_verification": "Static zlar.ai release metadata and proof-pack artifacts only."
  },
  "release_metadata_updated_at": "2026-06-28T04:32:40Z",
  "source_boundary": "Prior Apache-2.0 public distribution remains licensed. Current core source access is private. Public verification uses static zlar.ai artifacts, not the private core GitHub repository."
}