Attested Azure US baseline for v0.9.18

Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "postil-cli"
-version = "0.9.17"
+version = "0.9.18"
 edition = "2024"
 description = "Postil: a low-noise AI review gate. Silent on clean PRs, hard gate on real risk."
 license = "Apache-2.0"

bench/README.md

@@ -102,7 +102,7 @@ bun run bench:cohort-run -- --mode execute --manifest <cohort-manifest> --slot <
 
 Use [the release workflow](../.github/workflows/release.yml) for the five-sample comparison and [the calibration workflow](../.github/workflows/benchmark-calibration.yml) for the ten-sample recorded baseline. Both verify attestations, receipts, and provider generation evidence before comparison or recording.
 
-Release and calibration use Azure/US in `provisional-models-us.json`. The embedded hosted profile remains Azure/EU in `provisional-models.json` until authenticated US calibration evidence is imported. Calibration records `baseline-us.json`. New releases fail closed until the populated baseline and its attestation are committed. Calibration requires ten complete attested samples from the first attempt on main; its credential balance check is not a total spending cap. Baseline imports preserve the artifact bytes and every evaluator contract source, including both workflows. Any change to those sources requires calibration of the changed contract. The EU profile, baseline, and attestation remain separate evidence and cannot qualify the US route.
+The embedded hosted profile uses Azure/EU in `provisional-models.json`. Release and calibration use Azure/US in `provisional-models-us.json`, with separate baseline evidence in `baseline-us.json` and its attestation. New releases require that populated baseline and its attestation. Calibration requires ten complete attested samples from the first attempt on main; its credential balance check is not a total spending cap. Baseline imports preserve the artifact bytes and every evaluator contract source, including both workflows. Any change to those sources requires calibration of the changed contract. The EU profile, baseline, and attestation remain separate evidence and cannot qualify the US route.
 
 </details>
 

bench/baseline-us.attestation.json

@@ -0,0 +1 @@
+{"mediaType":"application/vnd.dev.sigstore.bundle.v0.3+json","verificationMaterial":{"certificate":{"rawBytes":"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"},"tlogEntries":[{"logIndex":"2931301373","logId":{"keyId":"wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="},"kindVersion":{"kind":"dsse","version":"0.0.1"},"integratedTime":"1790222076","inclusionPromise":{"signedEntryTimestamp":"MEUCIQDCgfzKH8/bVMuCjJMQOJv3i0MQQr07MNHb1Uwf9xp3pgIgBo1ezPSUeVGkGtzmJk3kyMBs09PSvZbzz0Dx2k0Dz8M="},"inclusionProof":{"logIndex":"2809397111","rootHash":"Vn15TkT5PZEm3yaYi6nQb9fUHmJvOF0hbxG8sKTrrsk=","treeSize":"2809397114","hashes":["yPZuojy48N6T5MCTrHRUV8FmxIK2IV/eLV9oQW+q9xw=","T7x6x9536whoyj2NOINS3o62W6xkpe9a62PBEk2H5PM=","30Zde/VlanNqIAJ4xVEmsRyOXNJfbxivKdbERb1jwCY=","jikTFf4uJ/5mPDwHZu6zi1lvb98dwCFUMrUl1m5H1zQ=","d3kUmYWFW6h8odnI8y2vD0HrgJ9y3CT1X9AzXFONAXU=","tiFqHZ8lUTDprmxsXljr+amQdu4zggjDW7vkX06cCeQ=","M/75hVppVMxSO4Rm+Jm5tQM4beBI0Y4H+gD88oC5SWE=","YynjcohjWYCaMsBUNecGGt7CcGOPUp4ptp+qIwqWtYU=","AjecGVzWCGvv1ReQ6bfKJRYHPYj8qkcAq/FKIL7QlCE=","fvkKNvqMS9VjKt2w1xPPoWL3rNKRiCMoL+9HaAxta6s=","2AcaJeW6o2XkehfHemfX92mnBLOgOfOFZ3akWx3AafU=","YNUMG9prkoawfQBmaFY7qsDP19cMqN0IZCWa+e4iCMo=","zWw6+c7S7fX78W88J88XZesFr7oyySw0jy6z+AeJQLY=","rB/kBDdOKYlOkeIX+pOncBiSlfvjbBDkvzrUbbRWAPI=","w/W66dfaBH625xILHkiQlUbOJ5QelZSp+C6GqYnB6MI=","MvQ+iLog0baE7oTRB31sH0woXyIDAaRd+xen1XrPpYg=","ebG2CsH5m5FuJQ0PR5vTPsSKI4I0VzKQZab+C6nZY+0=","eHW2pk/Q5c7ktN0pxWuY595q3Xtfd15g1SW9qFcyFx4=","JRIcZD2G8h7Iq0hZuQz5n2EZlMoRl+CidVyXLz5qg6Q=","Q3KSjpgGMyRso12cTtkfLjhxmsEOe02yzxJhFEq9+FE=","z5EmMdp/Wd0IVl0nUx8KTZCspZnHuBgCWIdw5mKBkek=","jJJsjr/pA/yBIChBkuFvUPlTHgDHtR/HJRcV60HXdRc=","mfWjSdNaEfNXxDww6AAOw/NoK9e6z1yKaZm5xvmMabs=","qxzHanAzz57SDdmJe0B7bJK72NTIBbwEMGBBKvDOROw=","xH/DCseLHr9eKoYT8qsORZK7zVdEGYWHuVtsVrD95wY="],"checkpoint":{"envelope":"rekor.sigstore.dev - 1193050959916656506\n2809397114\nVn15TkT5PZEm3yaYi6nQb9fUHmJvOF0hbxG8sKTrrsk=\n\n— rekor.sigstore.dev wNI9ajBFAiBnhAU0eVH5gmsULQxBawvEzuZqGfaVSawOOkL+uuxk7QIhALMuEouKEr+AO9eLSGXBV6K3mJ2io/G15j24Oulo6nW7\n"}},"canonicalizedBody":"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"}],"timestampVerificationData":{}},"dsseEnvelope":{"payload":"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","payloadType":"application/vnd.in-toto+json","signatures":[{"sig":"MEUCIDMoeL5mAJ2k6RcjxtCZlOfLr4EYuAXK3Gb4nbrQ8qQ6AiEAzcIhxwADK+A8rChiFiD/R16UskewYo5je/vf3CGRvMg="}]}}