{
  "schema": "platform/rc-tuple-digests/v1",
  "generated_utc": "2026-10-05T20:45:00Z",
  "session": "P138 s45 (the trust chain close — PL-2 refresh)",
  "estate": "k3d-zen-staging",
  "note": "the LIVE deployed image digests per tier — read from the cluster (never from receipts); feeds cloud's C5 + maestro's effective-config digest",
  "tiers": {
    "zen-fabric": "sha256:0250153cea4364c9c4b100998599e39a24cead381a07c949e36ee0520e7a4759",
    "zen-control(zenruntime)": "sha256:406bf164b751c71539f7faa949284183357ae8f7430e187ffb72728ddd128bd0",
    "zen-identity": "sha256:ac5296469db571177fee72ad9cb782fdc585fecc3e116715a22c53bd2d5ae309",
    "zen-lock-signer": "sha256:753bff493d7ca91c1cb13c5af6014a70d1f3170a8bb528dc9679dca776af4fd7",
    "zen-lock-retrieval": "sha256:36a9ddda22d9b3a171c97590dfc36729b28790d0f3aa95865ee6b7ee47836709",
    "zen-back": "sha256:915e45b64962a80673d9c8039ec9a0af89614efb6bdd35e4f123ecb066ad1d8a",
    "zen-bff": "sha256:da3e4fcf4f6b910e61614a5435a39c2a9e23fe41b230097885223d4dc8f9b152",
    "zen-front": "sha256:b120632b7a9352422cd3cb25e97dee6bec4cbcbfd7dc478f3edb19e33f8f2913",
    "zen-trust": "sha256:80d0d90d6993ddfdc18d711fcf019bad8aac41f16588bac1fbcf6ac418d23c02",
    "valkey": "sha256:5d586b6d9574ce96954142cdca85f4903a0efdbd4d04d4fe27c9fb245cdf91d4"
  },
  "generation_notes": {
    "zen-trust": "fd79e79 (zen-sdk 85154ae — the TD-E1 bootstrap carve-out is lawful client-side); the enrollment passed on the governed just-minted grant (d158h) with the stale estate-era plane-attestation input retired from the deployment + the bundle",
    "zen-identity": "the d158e generation (the receipt-custody anchor verified == the lock's identity-plane-activation-receipt gen1 pub)",
    "zen-fabric": "unchanged at the converged generation (modeb-state serving the trust allocation)"
  },
  "staleness_flags": {
    "zen-back": "1/1 serving post-RESEED (the owner's decision executed)"
  }
}