{
  "_comment": [
    "What this sample pins, and why each pin is here.",
    "",
    "OpenShell publishes a Helm chart and images for every commit on main, and separately",
    "for each release tag. This sample pins the v0.1.6 release: a release tag stays",
    "published, where a per-commit 0.0.0-dev.<sha> tag is a build artifact that can be",
    "collected later and would leave a reader unable to run the page.",
    "",
    "upstream_revision is the commit v0.1.6 points at, recorded so the policy schema and",
    "the pod the driver generates can be read at exactly the version that ran.",
    "",
    "A release also publishes the operator CLI as a static binary, so this sample downloads",
    "and verifies it rather than compiling it. cli_sha256 is the value from the release's",
    "own openshell-checksums-sha256.txt. The CLI, the chart, the gateway, the supervisor",
    "and the in-pod runtime therefore all come from one release.",
    "",
    "The chart is pinned by version and by the SHA-256 of the archive Helm pulls, and the",
    "three images by digest, so what runs cannot change under a retagged repository.",
    "scripts/setup.sh refuses the chart and the CLI on a checksum mismatch."
  ],
  "upstream_repository": "https://github.com/NVIDIA/OpenShell.git",
  "upstream_ref": "v0.1.6",
  "upstream_revision": "ac7f615cd12d5cc49cb16eb1f5f10ffeb1e90f47",
  "upstream_date": "2026-10-27",
  "chart": {
    "ref": "oci://ghcr.io/nvidia/openshell/helm-chart",
    "version": "0.1.6",
    "sha256": "0533ecf84f777954aaf6113a0813fbc9781ed2a5e6574fb807cebe9a818a1bd4"
  },
  "images": {
    "gateway": "ghcr.io/nvidia/openshell/gateway@sha256:f0b36dba21d282c52e498c25289658cfd6cd4f343b0069fde5609e25b002cdea",
    "supervisor": "ghcr.io/nvidia/openshell/supervisor@sha256:ce859a7d77ee515d3fe0b3c7dc61286516f402eb1d25c761d806d9ae5ed96c0b",
    "sandbox_runtime": "ghcr.io/nvidia/openshell/sandbox@sha256:1038eb5c1f191fa3c34684fd7041b891c78ec570979d487f36e06e08f91bfb63"
  },
  "cli_asset": "openshell-x86_64-unknown-linux-musl.tar.gz",
  "cli_sha256": "2951c67366f3e3584ed9cec8d49b9f0b0eefc8cacea8b0582ac164590492f136",
  "base_image": "public.ecr.aws/docker/library/python:3.13-slim"
}