{
  "schema_version": 1,
  "checked_on": "2026-10-24",
  "scope": "Face landmark software, model bundle and reference geometry. Provider API contracts and user photos are separate.",
  "assets": {
    "mediapipe": {
      "name": "MediaPipe Tasks Vision",
      "version": "0.10.17",
      "license": "Apache-2.0",
      "copyright": "Google LLC and MediaPipe contributors",
      "source": "https://www.npmjs.com/package/@mediapipe/tasks-vision/v/0.10.17",
      "license_file": "/licenses/mediapipe-Apache-2.0.txt"
    },
    "face_landmarker": {
      "name": "MediaPipe Face Landmarker model bundle",
      "version": "float16/1",
      "license": "Apache-2.0",
      "copyright": "Google / MediaPipe contributors",
      "source": "https://storage.googleapis.com/mediapipe-models/face_landmarker/face_landmarker/float16/1/face_landmarker.task",
      "sha256": "64184e229b263107bc2b804c6625db1341ff2bb731874b0bcc2fe6544e0bc9ff",
      "license_file": "/licenses/mediapipe-Apache-2.0.txt",
      "model_cards": [
        "https://storage.googleapis.com/mediapipe-assets/MediaPipe%20BlazeFace%20Model%20Card%20(Short%20Range).pdf",
        "https://storage.googleapis.com/mediapipe-assets/Model%20Card%20MediaPipe%20Face%20Mesh%20V2.pdf",
        "https://storage.googleapis.com/mediapipe-assets/Model%20Card%20Blendshape%20V2.pdf"
      ]
    },
    "canonical_face": {
      "name": "MediaPipe canonical face model",
      "license": "Apache-2.0",
      "copyright": "MediaPipe contributors",
      "source": "https://github.com/google-ai-edge/mediapipe/blob/master/mediapipe/modules/face_geometry/data/canonical_face_model.obj",
      "sha256": "8bac80443397e113f41a8b565ea72c59390bc031d9defab289dba7bc0c54e618",
      "license_file": "/licenses/mediapipe-Apache-2.0.txt",
      "changes": "OBJ converted to JSON with zero-based indices; projected to SVG/PNG; illustrative width variations and ear surfaces added by MYEONG.",
      "geometry_sha256": "4963a0354e56f5ea77b4b868ed0119d4c66b833b6ba43520adfd8d87d1f8a60e"
    },
    "three": {
      "name": "Three.js",
      "version": "0.184.0",
      "license": "MIT",
      "copyright": "Copyright 2010-2026 Three.js Authors",
      "source": "https://github.com/mrdoob/three.js/tree/r184",
      "license_file": "/licenses/three-0.184.0-MIT.txt"
    }
  },
  "license_hashes": {
    "mediapipe-Apache-2.0.txt": "8707eef0533987efc5b155d64761eeb6e20793f50b9bd1a68dad1cf4719d0ed8",
    "three-0.184.0-MIT.txt": "8b378ebe60e2fe500158cb0ac71cb5e8b7d92953c2abcc63a0eb90499653b5bc"
  },
  "capture_guide_creation": {
    "generator": "Grok Imagine",
    "workflow": "Cursor",
    "input_method": "text-only generation",
    "reference_images_supplied": false,
    "evidence": "User confirmations and embedded C2PA creator/action metadata in all three guide files.",
    "limits": "Original individual generation calls are not restored. C2PA signatures and asset hashes validate, but the self-signed signing credential is untrusted under the default trust configuration. This is not rights clearance."
  }
}