{"kind":"uds.big-bang.parity","chart":"charts/szl","chart_version":"0.1.0","app_version":"uds-v0.1.0","packaged_artifact":"szl-0.1.0.tgz","helm_version":"v3.21.0+ge0878d4","lint_status":"PASS — 1 chart(s) linted, 0 chart(s) failed (1 INFO: icon recommended)","rendered_objects":{"Deployment":7,"Service":7,"VirtualService":7,"AuthorizationPolicy":7,"PeerAuthentication":7,"NetworkPolicy":7,"PodMonitor":7,"Namespace":1,"total":50},"sub_chart_inventory":["a11oy","amaru","sentra","rosie","killinchu","vessels","hatun-mcp"],"big_bang_compat_matrix":[{"feature":"Istio sidecar mTLS (STRICT PeerAuthentication)","big_bang":true,"szl":true},{"feature":"Istio VirtualService + public gateway","big_bang":true,"szl":true},{"feature":"AuthorizationPolicy (ALLOW from mesh)","big_bang":true,"szl":true},{"feature":"NetworkPolicy default-deny ingress","big_bang":true,"szl":true},{"feature":"Prometheus PodMonitor scrape","big_bang":true,"szl":true},{"feature":"Keycloak realm client","big_bang":true,"szl":"configured-not-deployed"},{"feature":"Authservice SSO chain","big_bang":true,"szl":"configured-not-deployed"},{"feature":"Flux GitOps HelmRelease","big_bang":true,"szl":"roadmap (chart packaged; Flux wrapper pending)"},{"feature":"STIG-hardened Iron Bank base image","big_bang":true,"szl":"Dockerfile.ironbank (creds required)"},{"feature":"DSSE 4-organ aggregate receipt","big_bang":false,"szl":true}],"big_bang_reference":"https://repo1.dso.mil/big-bang/bigbang","install_command":"helm install bigbang-szl ./charts/szl --namespace szl-system --create-namespace","kustomize_overlay":"bigbang/ (kubectl kustomize ./bigbang -> 50 objects, exit 0)","honesty":"Chart + overlay are REAL and render/lint clean (verified with helm 3.21 + kubectl kustomize). Authservice/Keycloak are configured-not-deployed (Big Bang core owns them). Flux GitOps wrapper is honest roadmap.","dsse":{"payloadType":"application/vnd.szl.uds.hardening+json","payload":"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","_dsse":"DSSEv1","_pae_sha256":"10464f56a7a178adad62817122c50fa3af3db95891f5d8f0293e88fc12ca60f4","_signed_at":"2026-06-03T20:50:15.736554+00:00","signatures":[{"sig":"MEUCIBZcinIuJcn+QxBf039w9HvRc0qQVFnoSHJE3jnMo5TqAiEAhHk+sbWpYTfM9WuYoP8KrwvjgKLbCQeXG8XlOPNxpyk=","keyid":"szlholdings-cosign"}],"signed":true,"honesty":"REAL — ECDSA-P256-SHA256 over DSSE PAE; verifiable by `cosign verify-blob --key cosign.pub` and by the /khipu/verify endpoint.","verify_key_url":"https://github.com/szl-holdings/.github/blob/main/cosign.pub"},"signed":true,"cosign_keyid":"szlholdings-cosign"}