{
  "schema_version": 1,
  "title": "Waymark — Source identity desk",
  "reviewed_on": "2026-10-05",
  "scope": "Document identity, publication dates, immutable source revisions and publisher-attested onion addresses. No onion service connection or runtime vulnerability reproduction.",
  "method": {
    "retrieval": "Bounded HTTPS GETs from the original publishers and GitHub API; SHA-256 calculated over exact returned file bytes.",
    "hash_limits": "A digest identifies bytes at observation. It does not establish the truth of a document, authorship, safety, or later publisher changes.",
    "onion_check": "Base32 decode; require 35 bytes and version 3; compare bytes 32-33 with SHA3-256('.onion checksum' + 32-byte public key + version)[:2]. Syntax and checksum are distinct from publisher attribution and service reachability."
  },
  "records": [
    {
      "id": "fr-2025-02873",
      "type": "public_notice",
      "publisher": "Department of State / Office of the Federal Register / GPO",
      "title": "Foreign Terrorist Organization Designations — Public Notice 12672",
      "document_id": "2025-02873",
      "citation": "90 FR 10030–10031",
      "signed_on": "2025-02-06",
      "filed_at": "2025-02-19 08:45 (time printed in notice; no timezone inferred)",
      "published_on": "2025-02-20",
      "effective_date_text": "The designations go into effect upon publication.",
      "landing_url": "https://www.govinfo.gov/app/details/FR-2025-02-20/2025-02873",
      "artifacts": [
        { "label": "Public-inspection PDF", "url": "https://public-inspection.federalregister.gov/2025-02873.pdf", "bytes": 206676, "sha256": "704c800916cf06b48552924f501194e5a063e45e8731e536a5b5fa6d80a3d456" },
        { "label": "Published Federal Register PDF", "url": "https://www.govinfo.gov/content/pkg/FR-2025-02-20/pdf/2025-02873.pdf", "bytes": 178279, "sha256": "80280f5a815090da4f5feb4f216e1c8c7578ab0781db5d0500a1c94e466df511" },
        { "label": "GovInfo MODS XML", "url": "https://www.govinfo.gov/metadata/granule/FR-2025-02-20/2025-02873/mods.xml", "bytes": 8179, "sha256": "10c2d943f53e91b4c7ba1358c7836e7dddd402f661dffbe05be67522b0c5ee32" }
      ],
      "checked": "Read both PDF renditions and MODS identifiers/dateIssued. Both PDFs are two pages; the final page layout also contains adjacent notices. Extracted the target notice by its heading and FR document number.",
      "limits": "This verifies a historical publication and its text, not a present-day legal-status search or evidence of individual guilt. The two PDF renditions have different bytes and layout."
    },
    {
      "id": "urllib3-2.7.0",
      "type": "source_revision",
      "publisher": "urllib3 maintainers",
      "release": "2.7.0",
      "tag_object": "d5df809a675471a67a576a7921820104153b9366",
      "commit": "9a950b92d999f906b6020bb2d1076ee56cddd5d2",
      "tag_verification_api": { "verified": true, "reason": "valid" },
      "path": "src/urllib3/response.py",
      "line_locator": "1338–1354",
      "permalink": "https://github.com/urllib3/urllib3/blob/9a950b92d999f906b6020bb2d1076ee56cddd5d2/src/urllib3/response.py#L1338-L1354",
      "api_url": "https://api.github.com/repos/urllib3/urllib3/git/tags/d5df809a675471a67a576a7921820104153b9366",
      "artifact": { "url": "https://raw.githubusercontent.com/urllib3/urllib3/9a950b92d999f906b6020bb2d1076ee56cddd5d2/src/urllib3/response.py", "bytes": 53219, "sha256": "f525f806491da0b82cc759deea1a6dfb93e772b9c3ccfcdea82d4369285273e3" },
      "checked": "Resolved the annotated release tag to its commit using GitHub's API; fetched and hashed response.py at that commit; inspected _update_chunk_length.",
      "observation": "Line 1343 calls readline() without a length argument.",
      "limits": "GitHub reports the tag signature valid; no independent local signature verification. This record establishes source identity; the linked parser study reports its separate controlled regression."
    },
    {
      "id": "urllib3-2.8.0",
      "type": "source_revision",
      "publisher": "urllib3 maintainers",
      "release": "2.8.0",
      "tag_object": "2f980b433a89399ad5efd72e7f6da04e667ea287",
      "commit": "b1d30ab61fe0db8f11092805e8c5ac43e091064a",
      "tag_verification_api": { "verified": true, "reason": "valid" },
      "path": "src/urllib3/response.py",
      "line_locator": "1362–1383",
      "permalink": "https://github.com/urllib3/urllib3/blob/b1d30ab61fe0db8f11092805e8c5ac43e091064a/src/urllib3/response.py#L1362-L1383",
      "api_url": "https://api.github.com/repos/urllib3/urllib3/git/tags/2f980b433a89399ad5efd72e7f6da04e667ea287",
      "artifact": { "url": "https://raw.githubusercontent.com/urllib3/urllib3/b1d30ab61fe0db8f11092805e8c5ac43e091064a/src/urllib3/response.py", "bytes": 54628, "sha256": "0e4559c737914d4f8f941dca9ecfaf6caec6792258302bffec7b8b41dae3c71a" },
      "checked": "Resolved the annotated release tag to its commit using GitHub's API; fetched and hashed response.py at that commit; inspected _update_chunk_length.",
      "observation": "Lines 1367–1372 impose and check a line limit before size conversion.",
      "limits": "GitHub reports the tag signature valid; no independent local signature verification. This record establishes source identity; the linked parser study reports its separate controlled regression."
    },
    {
      "id": "tor-project-onion",
      "type": "publisher_attested_onion",
      "publisher": "Tor Project",
      "clearnet_url": "https://www.torproject.org/",
      "attestation_url": "https://onion.torproject.org/",
      "onion_address": "2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion",
      "checked": "Exact www.torproject.org entry in the publisher's official registry. Decoded and checked the v3 address locally.",
      "version": 3,
      "checksum_matches": true,
      "service_reachability": "not_tested",
      "limits": "Publisher attribution and address checksum were checked; onion availability and content equality were not tested."
    },
    {
      "id": "cia-onion-announcement",
      "type": "publisher_attested_onion",
      "publisher": "Central Intelligence Agency",
      "clearnet_url": "https://www.cia.gov/",
      "attestation_url": "https://www.cia.gov/stories/story/cias-latest-layer-an-onion-site/",
      "attestation_published_on": "2019-05-07",
      "onion_address": "ciadotgov4sjwlzihbbgxnqg3xiyrg7so2r2o3lt5wz5ypk4sxyjstad.onion",
      "checked": "The 2019 announcement was still available on cia.gov on the review date and printed this exact address. Decoded and checked the v3 address locally.",
      "version": 3,
      "checksum_matches": true,
      "service_reachability": "not_tested",
      "limits": "A historical publisher announcement is not a fresh service-status check. No claim of current onion reachability or anonymity guarantees."
    }
  ],
  "method_sources": [
    "https://www.govinfo.gov/developers",
    "https://docs.github.com/en/repositories/working-with-files/using-files/getting-permanent-links-to-files",
    "https://spec.torproject.org/rend-spec/encoding-onion-addresses.html",
    "https://community.torproject.org/onion-services/advanced/onion-location/"
  ]
}