{
  "min_valid_ts": "2026-05-01T03:00:00Z",
  "min_valid_ts_local": "2026-04-30T20:00:00-07:00",
  "rationale": "Initial watermark.",
  "schema_version": 1,
  "policy": "Clients refuse to use any attestation whose verified_at timestamp is older than min_valid_ts. The server is allowed to push min_valid_ts forward (invalidating older attestations after a disclosed incident) and never backward.",
  "signed": null,
  "_note": "MVP: this file is unsigned. Future versions will carry a Sigstore-keyless signature in `signed` so clients can verify the watermark wasn't tampered with in transit."
}