This repository contains a reproducible audit of Sourcey 3.6.3 against the
public Gotify REST API Swagger snapshot pinned at commit
8221c0b895fdd1b1b84c0d5784e9422eb314ecb5.
report.md— human-readable findings and recommendationsevidence.json— captured commands, counts, examples, and classificationsreceipt.json— governed runx receiptverification.json— receipt verification resultX.yaml/run.mjs— reproducible governed audit runner