Files
proxmox/proof_package/regulatory/README.md

18 lines
1.0 KiB
Markdown
Raw Normal View History

# Regulatory attestation (4.995)
Canonical attestation (OMNL officer names, scores): **`docs/04-configuration/mifos-omnl-central-bank/INSTITUTIONAL_PACKAGE_SCORE_ATTESTATION_4_995.json`**.
The zip build copies **`proof_package/regulatory/INSTITUTIONAL_PACKAGE_SCORE_ATTESTATION_4_995.json`** when present; otherwise it uses the **docs** path above.
**SUBREG PDF hashes:** When counsel memo and audit report PDFs exist locally, run:
`COUNSEL_PDF=/path/to/memo.pdf AUDIT_PDF=/path/to/audit.pdf bash scripts/omnl/patch-attestation-subreg-pdf-hashes.sh`
(then `bash scripts/omnl/build-transaction-package-zip.sh`).
Override path: `PACKAGE_4995_ATTESTATION_JSON=/path/to/file.json` when running `build-transaction-package-zip.sh`.
**Do not commit** production attestation with real names if policy forbids; use vault or CI secret store.
This folders **`.gitignore`** ignores `INSTITUTIONAL_PACKAGE_SCORE_ATTESTATION_4_995.json` so a local signed file is not pushed by mistake; remove from `.gitignore` if your policy requires versioning attestations.