{
  "schemaVersion": 1,
  "service": "CheeseOS Public Trust and Package Origin",
  "trustDomain": "cheeseos",
  "genesisRootSha256": "a1e997a7dbbd5713c01a7892a9ddebdf84b32184d0fc33a2eab91d3551da79b7",
  "currentRoot": {
    "epoch": 1,
    "sha256": "a1e997a7dbbd5713c01a7892a9ddebdf84b32184d0fc33a2eab91d3551da79b7",
    "metadata": "/trust/root.json",
    "signature": "/trust/root.sig.json",
    "history": "/trust/roots/"
  },
  "roles": {
    "package": {
      "threshold": 1,
      "keys": [
        {
          "keyId": "ed25519:6e5e92c13ba66bb349d8b9bb6722a4762d4d753901db3c6fb530dc69cfb513a6",
          "algorithm": "Ed25519",
          "publicKey": "Yy8RB7YO/INC+3EMkJd6dLeHauATuc/l2rgEwxjJnzc="
        }
      ]
    }
  },
  "provenance": {
    "head": "/provenance/head.json",
    "headSignature": "/provenance/head.sig.json",
    "records": "/provenance/records/"
  },
  "packageRepository": {
    "index": "/v1/index.json",
    "signature": "/v1/index.sig.json",
    "repositoryId": "mister-cheese"
  },
  "securityModel": "All trust decisions are performed locally. TLS/DNS/Cloudflare transport compromise cannot authorize a package or root rotation without the delegated signing keys."
}