A release bundle from dwarves (the build server), release-build mode
Made 2026-10-29 by dwarves release-build build (dwarves crates/dwarves-slsa, builder …/slsa/builders/dwarves-server/v1, lane SLSA3) from the holger 2.0.0 publish pins (h20-20261028T173518Z.pins, holger 87e5ada5) with --rebuild-published: 43 crates packaged in the network-off ci4 container, one in-toto Statement v1 / SLSA Provenance v1 for all of them.
holger-2.0.0-rebuild.intoto.jsonl: that statement in a DSSE envelope, signed byscripts/sign-release.shwithSLSA_TEST_KEY(a throwaway software P-256 key, not the owner's YubiKey; the private half is not kept).release-test-key.pubis its public key, key idb7238cc7bd98598c053314a119a98e670bc3ab1243cf3f7bf35817a7e3f4b6a5.holger-errcode-2.0.0.crate: one of its 43 subjects, as the runner built it (it differs from crates.io's 2.0.0 only in.cargo_vcs_info.json: crates.io's was packaged from 7bebb1e6).
tests/slsa_dwarf_release.rs verifies it with this crate, offline.