{
  "slug": "dependency-fingerprint-integrity",
  "no": 7,
  "title": "依赖导航SHA256指纹校验（防投毒·日更）",
  "category": "security",
  "confidence_level": "A",
  "form_type": "realtime",
  "supply_cadence": "daily",
  "updated_at": "2026-11-01",
  "review_date": "2026-10-13",
  "valid_until": null,
  "value_summary": "依赖导航资源中心对30项核心依赖的下载源执行每日SHA256指纹健康巡检·最新观察点（2026-10-12）指纹不匹配（mismatch）计数为0·网络不可达类unavailable（0项）与安全异常分开列示·供应链安全防护持续有效",
  "value_json": {
    "latest_day": "2026-11-01",
    "fingerprint_mismatch": 0,
    "mismatch_streak_note": "mismatch=0连续在档（观察期内未发生指纹不匹配事件）",
    "health_status_counts": {
      "green": 28,
      "yellow": 0,
      "red": 2
    },
    "unavailable_detail": {
      "count": 1,
      "cause": "网络不可达源（如实另列）·非指纹不匹配·非安全事件"
    },
    "total_dependencies": 30,
    "note": "健康状态三色为每日巡检快照·红/黄不代表数据被篡改——只有fingerprint_mismatch>0才指向完整性异常"
  },
  "caliber_json": {
    "sample_size": "30项依赖×每日巡检·多下载源分别校验",
    "time_window": "持续巡检·最新观察点2026-10-12",
    "method": "对每个下载源拉取文件计算SHA256与官方指纹比对（get_dependency工具同源数据）",
    "limitations": "unavailable源无法完成校验（计入不可达而非通过）·恢复后自动回绿；单站点实践",
    "caliber_note": "口径=依赖导航健康巡检·周期性巡检同源"
  },
  "source_trace": [
    {
      "type": "internal",
      "desc": "依赖健康巡检记录（2026-08-30·绿13/黄14/红3·指纹0异常）"
    },
    {
      "type": "internal",
      "desc": "backend dependency健康巡检任务（dependency_links表health_status）"
    }
  ],
  "snapshot_note": null,
  "disclaimer_block": [
    "本条为万有AI官网运营观察记录·仅反映标注监测窗口内本站实况·样本量与口径详见caliber_json·不构成任何性能、流量或服务承诺·引用请注明监测窗口与口径来源：万有AI"
  ],
  "copyright": "©万有创学（青岛）人工智能科技有限公司·CC BY-NC 4.0·引用请标注来源：万有AI"
}