Building Glasstrace — Evidence Manifest

Computed August 30, 2026

This series cites two kinds of supporting evidence.

Public. The Glasstrace software development kit (SDK) is open source under the MIT license. Its repository, the cited commits, and the cited source files are linked below and can be inspected directly. The package itself is on npm as @glasstrace/sdk.

Private, shared as needed. The product, validation, and planning repositories are private. Their artifacts may be shared on request, at the company’s discretion and in some cases in redacted form. To make that meaningful, this manifest publishes the SHA-256 digest of every private artifact cited in the series, computed as of the date above. A digest commits to the exact bytes of a file: if you later receive a copy of any artifact listed here, sha256sum <file> must reproduce the digest below, which establishes that the copy is the same document these articles describe — not a later revision. Commit hashes quoted in the articles for private repositories serve the same function for code states.

One artifact (RPORT-CANDIDATES.md) is listed for completeness but is not planned for sharing, because it names unexposed study candidates and releasing it would contaminate future confirmation holdouts.

Public: SDK repository

Repository: github.com/Erik-1259/glasstrace-sdk

Private: cited artifacts and their SHA-256 digests

Digests were computed with SHA-256 over the file bytes at rest. “Cited in” refers to article numbers in the Building Glasstrace series.