{
  "schema": 1,
  "product": "GizaLink ERP",
  "release": "Import & Tracking UAT v3",
  "status": "MANAGED_SYNTHETIC_TRIAL_SOURCE_OFFER",
  "composition": "d52221db846e194a3d82f8446df27c2098d752a0",
  "source_scope": "Prepared source for the six listed public upstream applications, including bundled frappe-ui where present; proprietary GizaLink application sources are excluded.",
  "components": [
    {
      "name": "crm",
      "repository": "https://github.com/frappe/crm",
      "upstream_sha": "39c0ed6f5347147de4d5e3675e07cc324071e3ab",
      "prepared_tree": "1c4aa2df3aa3e0bb4d45bebce5459c3a4c34df25",
      "download": "downloads/crm-v3-source.tar.gz",
      "download_sha256": "38ac20c23abb7ac8399994b6dbe869b6258eb9bd2476a36b949a4bd16f190d1e",
      "transform_patch": "downloads/crm-v3-transform.patch",
      "transform_sha256": "5dcac10f11cedb0906e10fe02a6d0747e98eb0248ceaf612e2c2285e42224825",
      "bundled_component": {
        "license": "MIT",
        "license_path": "frappe-ui/license.md",
        "license_sha256": "9a588e5ac898c236fe8b76507401f0c98736d31a6e8b2a7125975406c4c8e16d",
        "materialized_tree": "b14e3022c230069b67c1e22ff530914335045530",
        "path": "frappe-ui",
        "repository": "frappe/frappe-ui",
        "source_sha": "f730c1899dd7469774e5bccecee6dd6516e5aaa1",
        "source_tree": "b14e3022c230069b67c1e22ff530914335045530"
      },
      "verified_license_text": "AGPL-3.0",
      "license_text_sha256": "20b067f86de375aae6db0f283ab2e65de24d537733b89bd58432c101259d84cf",
      "image_source_tar_sha256": "c5ee04ec0af02339389730153f60b2641f73c9f273ae99016b3bd4a0fcbaff6e",
      "source_tar_sha256": "312d91a348b878156baffe6ff88f91029d600085acc81d34f9bcc13043da0d3b",
      "download_bytes": 24779409,
      "source_file_count": 2388,
      "publication_only_notice": {
        "path": "GIZALINK-MODIFICATIONS-NOTICE.txt",
        "sha256": "1332fa503fec2042a95ba3671fc4383ce1b6bf71301c87aa86d28c7baea29728",
        "bytes": 964,
        "relevant_modification_date": "2026-09-09",
        "license": "AGPL-3.0",
        "transform_patch": "downloads/crm-v3-transform.patch",
        "transform_sha256": "5dcac10f11cedb0906e10fe02a6d0747e98eb0248ceaf612e2c2285e42224825",
        "archive_relationship": "The offered archive contains every original image-source member unchanged and adds this one regular notice; the notice was not part of the candidate image build source tree."
      }
    },
    {
      "name": "helpdesk",
      "repository": "https://github.com/frappe/helpdesk",
      "upstream_sha": "1a528db9432f2c4be71ad3b91d92aee2e2dfd8f9",
      "prepared_tree": "9f3aec1a1f08ebeb837e6c671800b49682a06d87",
      "download": "downloads/helpdesk-v3-source.tar.gz",
      "download_sha256": "46bff7bdc90ae6f8c01700eebd6aad1a091db4401fdff1f8fae91f94b30650f2",
      "transform_patch": "downloads/helpdesk-v3-transform.patch",
      "transform_sha256": "dcadf0ff963ee535f502e421f1f12c9eed5b350f9e79dec2a6aa7aa8099f3312",
      "bundled_component": {
        "license": "MIT",
        "license_path": "frappe-ui/license.md",
        "license_sha256": "9a588e5ac898c236fe8b76507401f0c98736d31a6e8b2a7125975406c4c8e16d",
        "materialized_tree": "5efbf0abaecc32e94eb4400afd72611dadc146d3",
        "path": "frappe-ui",
        "repository": "frappe/frappe-ui",
        "source_sha": "b295b54aaa3a2a22f455df819d87433dc6b9ff6a",
        "source_tree": "5efbf0abaecc32e94eb4400afd72611dadc146d3"
      },
      "verified_license_text": "AGPL-3.0",
      "license_text_sha256": "8486a10c4393cee1c25392769ddd3b2d6c242d6ec7928e1414efff7dfb2f07ef",
      "image_source_tar_sha256": "43002cc2afb90e87648b034f1949076fabc9ac61e41b69f66e1c81589a5915c9",
      "source_tar_sha256": "1b39df2e9a79069b5e2a26bfb18d6b99d37ff71310e5950b38c45507994c6468",
      "download_bytes": 13235710,
      "source_file_count": 1162,
      "publication_only_notice": {
        "path": "GIZALINK-MODIFICATIONS-NOTICE.txt",
        "sha256": "88792582017c1d59ec6c78a8f4d35afc5f11e76151cc4d4789ff8888e115f6db",
        "bytes": 1686,
        "relevant_modification_date": "2026-09-09",
        "license": "AGPL-3.0",
        "transform_patch": "downloads/helpdesk-v3-transform.patch",
        "transform_sha256": "dcadf0ff963ee535f502e421f1f12c9eed5b350f9e79dec2a6aa7aa8099f3312",
        "archive_relationship": "The offered archive contains every original image-source member unchanged and adds this one regular notice; the notice was not part of the candidate image build source tree."
      }
    },
    {
      "name": "insights",
      "repository": "https://github.com/frappe/insights",
      "upstream_sha": "1c70a5f97d15eba9a6e2895ad454ab552f80d4b4",
      "prepared_tree": "00c11903244b5e18a73dcdb903f49ec545daa654",
      "download": "downloads/insights-v3-source.tar.gz",
      "download_sha256": "8340980e5de903cea38b23ee7f487addd70dcb27f68c8005c49d41e5d9547a38",
      "transform_patch": "downloads/insights-v3-transform.patch",
      "transform_sha256": "940eb68214d73f362abf439e1e8645cf24851403b27b1920e2aaa65493343087",
      "bundled_component": {
        "license": "MIT",
        "license_path": "frappe-ui/license.md",
        "license_sha256": "9a588e5ac898c236fe8b76507401f0c98736d31a6e8b2a7125975406c4c8e16d",
        "materialized_tree": "34e69070864da341f35be0d209c16d2fe63f2a0d",
        "path": "frappe-ui",
        "repository": "frappe/frappe-ui",
        "source_sha": "2820186a74a7e0f2bc35e0df4d274946a651a0b1",
        "source_tree": "34e69070864da341f35be0d209c16d2fe63f2a0d"
      },
      "verified_license_text": "AGPL-3.0",
      "license_text_sha256": "db1a87ba81e885b6bb82971964ab4e202463cde2ac4003571bc5a857d577e4a3",
      "image_source_tar_sha256": "c4c001d522b1a99e9fc8d1556fb9fdd47273362ee8d50379d166c07d6c5f9ac0",
      "source_tar_sha256": "740ca17786b32a561a9e60370ebb9052eeba913e546216387c09ff2823fc4a98",
      "download_bytes": 15297833,
      "source_file_count": 1030,
      "publication_only_notice": {
        "path": "GIZALINK-MODIFICATIONS-NOTICE.txt",
        "sha256": "b12e0d44e1ce2c98b1ac7f6edcf409c118bcb96e1f85d0830d56a4e3dff1fded",
        "bytes": 1065,
        "relevant_modification_date": "2026-09-09",
        "license": "AGPL-3.0",
        "transform_patch": "downloads/insights-v3-transform.patch",
        "transform_sha256": "940eb68214d73f362abf439e1e8645cf24851403b27b1920e2aaa65493343087",
        "archive_relationship": "The offered archive contains every original image-source member unchanged and adds this one regular notice; the notice was not part of the candidate image build source tree."
      }
    },
    {
      "name": "frappe",
      "repository": "https://github.com/frappe/frappe",
      "upstream_sha": "3de26f3d9c8023a441402a8d854c9993fffe4416",
      "download": "downloads/frappe-v3-source.tar.gz",
      "download_sha256": "3942d0db1ba33dfd88a9921d79e13f0991d621c74865f6be1efae237962e64ae",
      "source_tar_sha256": "af7b3a7d4f34a481684550b959809640b713f8b310c37d2429cae3d5cf07a329",
      "verified_license_text": "MIT",
      "license_text_sha256": "bc6001a54ffcc4ab520424d7dbb85b293578efcdcb7d8f8055e00dddf942e5d7"
    },
    {
      "name": "erpnext",
      "repository": "https://github.com/frappe/erpnext",
      "upstream_sha": "d1d3b241ae7bc21d18cf830a4bacd568e21a2a19",
      "download": "downloads/erpnext-v3-source.tar.gz",
      "download_sha256": "f0953eaafb7de72f6fed0681b0a459ea2f38bfbd6ddcb153a085f4eb2486087c",
      "source_tar_sha256": "9888b91617cf85280d2ce4db24366a9533caffe4ec1880b3ac9a7c570a9bd14a",
      "verified_license_text": "GPL-3.0",
      "license_text_sha256": "3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986"
    },
    {
      "name": "hrms",
      "repository": "https://github.com/frappe/hrms",
      "upstream_sha": "f281e8b172ac8836ad89c59df65a922101103097",
      "download": "downloads/hrms-v3-source.tar.gz",
      "download_sha256": "158ac17c2df9e05b5a446b9a85db35d9581fea158ea49413ee4af68d59f26d7d",
      "source_tar_sha256": "ff6461fcbd949fee38a1bb3953ad3c7545c95eb75e05cdcccfc8395e41261992",
      "verified_license_text": "GPL-3.0",
      "license_text_sha256": "f333043685c88280b1a0a41b4f8e2eacb02079f0bfca4d467e52c8834c658cea"
    }
  ],
  "provenance_note": "The frozen Insights composition license label is GPL-3.0; the actual retained upstream source license text is AGPL-3.0. The frozen lock remains unchanged; the offer retains the AGPL text and source. Offered CRM, Helpdesk and Insights archives add one publication-only modification notice dated 2026-09-09; image_source_tar_sha256 retains the pre-notice image-source tar identity.",
  "publication_notice_update": {
    "at": "2026-09-10",
    "status": "PREPARED_PENDING_INDEPENDENT_REVALIDATION",
    "components": [
      "crm",
      "helpdesk",
      "insights"
    ],
    "relevant_modification_date": "2026-09-09",
    "archive_invariant": "Every original member retains identical type, path and regular-file content; each offered archive adds exactly one regular top-level publication notice.",
    "image_source_identity": "image_source_tar_sha256 preserves the pre-notice tar payload digest used by the candidate; source_tar_sha256 identifies the offered tar payload with its publication-only notice."
  }
}