{
  "signed": {
    "_type": "layout",
    "steps": [
      {
        "_type": "step",
        "pubkeys": [
          "b7d643dec0a051096ee5d87221b5d91a33daa658699d30903e1cefb90c418401"
        ],
        "expected_command": [],
        "threshold": 1,
        "name": "write-code",
        "expected_materials": [],
        "expected_products": [
          [
            "ALLOW",
            "foo.py"
          ]
        ]
      },
      {
        "_type": "step",
        "pubkeys": [
          "d3ffd1086938b3698618adf088bf14b13db4c8ae19e4e78d73da49ee88492710"
        ],
        "expected_command": [
          "tar",
          "zcvf",
          "foo.tar.gz",
          "foo.py"
        ],
        "threshold": 1,
        "name": "package",
        "expected_materials": [
          [
            "MATCH",
            "foo.py",
            "WITH",
            "PRODUCTS",
            "FROM",
            "write-code"
          ],
          [
            "DISALLOW",
            "*"
          ]
        ],
        "expected_products": [
          [
            "ALLOW",
            "foo.tar.gz"
          ],
          [
            "ALLOW",
            "foo.py"
          ]
        ]
      }
    ],
    "inspect": [
      {
        "_type": "inspection",
        "run": [
          "tar",
          "xfz",
          "foo.tar.gz"
        ],
        "name": "untar",
        "expected_materials": [
          [
            "MATCH",
            "foo.tar.gz",
            "WITH",
            "PRODUCTS",
            "FROM",
            "package"
          ],
          [
            "DISALLOW",
            "foo.tar.gz"
          ]
        ],
        "expected_products": [
          [
            "MATCH",
            "foo.py",
            "WITH",
            "PRODUCTS",
            "FROM",
            "write-code"
          ],
          [
            "DISALLOW",
            "foo.py"
          ]
        ]
      }
    ],
    "keys": {
      "b7d643dec0a051096ee5d87221b5d91a33daa658699d30903e1cefb90c418401": {
        "keyid": "b7d643dec0a051096ee5d87221b5d91a33daa658699d30903e1cefb90c418401",
        "keyid_hash_algorithms": [
          "sha256",
          "sha512"
        ],
        "keytype": "rsa",
        "keyval": {
          "public": "-----BEGIN PUBLIC KEY-----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\np8348k6vJtDMB093/t6V9sTGYQcSbgKPyEQo5Pk6Wd4ZAgMBAAE=\n-----END PUBLIC KEY-----"
        },
        "scheme": "rsassa-pss-sha256"
      },
      "d3ffd1086938b3698618adf088bf14b13db4c8ae19e4e78d73da49ee88492710": {
        "keyid": "d3ffd1086938b3698618adf088bf14b13db4c8ae19e4e78d73da49ee88492710",
        "keyid_hash_algorithms": [
          "sha256",
          "sha512"
        ],
        "keytype": "rsa",
        "keyval": {
          "public": "-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcz9AucNbkJbQpwTHlEH\nRB+h+MkYKQjw06IgZ8TXlXGqp5pdwTHI5n5iFol0/rksmiZxatHwhth7ryYNC3Vk\n9g/LAs9E60yWytiSgV93EKv65bmhYqiSAkJdyaPKvCb7cG979B4e+HVpdVx6s7Ex\nIoaDRYcX3VIt6V25/SQz5iNUeVlb++QtSfQFEf3lHauoFhWZoCse24nWtYZo+3Ut\nuTmxygp7tU/9NmYb2BXEfUCdgjoCQ1UsFLBQQ4haIdJNOtRFl8KNY09zbMUijKIe\nX0ZvgT877LUtMyydKPEo04/u3DEr9Zba/SkHw43jYE/ojlXeik5uVjLSr3sJLDSP\nHwIDAQAB\n-----END PUBLIC KEY-----"
        },
        "scheme": "rsassa-pss-sha256"
      }
    },
    "expires": "2030-11-18T16:06:36Z",
    "readme": ""
  },
  "signatures": [
    {
      "keyid": "70ca5750c2eda80b18f41f4ec5f92146789b5d68dd09577be422a0159bd13680",
      "sig": "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",
      "cert": ""
    }
  ]
}