Skip to content
AuditFetch

Synthetic sample · no account required

Inspect the evidence packet before you install

This ZIP was generated by the AuditFetch packet exporter using a fictional repository configuration and an original demonstration control. It contains no customer records and was not collected from GitHub. It illustrates the export format, not a completed audit.

Download synthetic ZIP (2 KB)Request a Local evaluation

Downloaded packets can be opened without a running AuditFetch subscription. Store and share them according to your organization's rules.

What to inspect

  1. Open manifest.json. Inspect the sample period, generation time, control, requirement and artifact records. All identifiers are fictional.
  2. Inspect mapping_review in this version 2 manifest. The fictional rule mapping says not_required, with no review time. This is not a human approval.
  3. Open manifest.csv to inspect a tabular artifact index.
  4. Open the JSON file in artifacts/. It contains fictional repository settings, a sample flag and explicit limitations.
  5. Compare the payload's SHA-256 value with content_hash in the manifest. A changed payload should fail the comparison.

The exporter's period labels include “SOC 2 Type 1.” This sample does not contain a SOC 2 report, licensed control text or an auditor opinion. The fictional DEMO.CHANGE control is only a format example.

The manifest records source, time, control links and selected mapping review facts. Those facts describe the selection for this export. Later review changes can affect a new export. It does not embed a complete reviewer decision history, a per-artifact Ed25519 signature or a judgment of control effectiveness. Ask us to evaluate your required output before purchase.

The legacy format sample remains available. Its review snapshot is unavailable; do not infer one from current records.

Check the downloaded bytes

Download the checksum file and optional Python 3 verifier. The verifier reads the ZIP without extracting or running its contents. It checks the packet checksum and each listed payload. Review a downloaded script before running it.

SHA-256 checksumDownload sample verifier
python3 verify_sample_packet.py auditfetch-synthetic-packet-v2.zip auditfetch-synthetic-packet-v2.SHA256SUMS

A checksum is useful only with a trusted comparison value. An attacker who replaces both the packet and its checksum can pass this check. This verifies consistency; it does not independently authenticate GitHub, the sample author or an audit conclusion.

Integrity and security limitsLocal operating guide