{"id":2,"seq":2,"vaulted_grams":18498.15,"issued_grams":9000.0,"backing_pct":149.98,"payload":{"attestation":"COMMODEX-CGX-RESERVE","backing_pct":149.98,"backing_pct_formula":"unencumbered_fine_grams / cgx_issued_grams * 100","cgx_issued_grams":9000.0,"client_allocated_grams":5000.0,"halal_bound_grams":0.0,"key_id":"35ae9cc4c48af079","prev_hash":"5a5d0a6ba22a9f977be799b160b027d22faca6106bc11c3a72ec426cf7de5370","rule":"CGX issuance is hard-capped in code at 1:1 against UNENCUMBERED vaulted fine grams — vaulted metal less client-allocated less XPG. Metal already spoken for cannot back a second claim","seq":2,"trigger":"scheduled heartbeat","ts":1790510531.13,"unencumbered_fine_grams":13498.15,"vaulted_fine_grams":18498.15,"vaulted_holdings":1,"xpg_backed_grams":0.0},"hash":"c1cefbb58c4c3b33e9ae1269dad1ed080527d099942b91321a83381333ce945d","signature":"4fd4b11a1398b4e26df538ac73c0b4ace9fdda551fe32902512a5ac1c1f316eb","ts":1790510531.1267262,"prev_hash":"5a5d0a6ba22a9f977be799b160b027d22faca6106bc11c3a72ec426cf7de5370","columns_match_signed_payload":true,"payload_canonical":"{\"attestation\":\"COMMODEX-CGX-RESERVE\",\"backing_pct\":149.98,\"backing_pct_formula\":\"unencumbered_fine_grams / cgx_issued_grams * 100\",\"cgx_issued_grams\":9000.0,\"client_allocated_grams\":5000.0,\"halal_bound_grams\":0.0,\"key_id\":\"35ae9cc4c48af079\",\"prev_hash\":\"5a5d0a6ba22a9f977be799b160b027d22faca6106bc11c3a72ec426cf7de5370\",\"rule\":\"CGX issuance is hard-capped in code at 1:1 against UNENCUMBERED vaulted fine grams \\u2014 vaulted metal less client-allocated less XPG. Metal already spoken for cannot back a second claim\",\"seq\":2,\"trigger\":\"scheduled heartbeat\",\"ts\":1790510531.13,\"unencumbered_fine_grams\":13498.15,\"vaulted_fine_grams\":18498.15,\"vaulted_holdings\":1,\"xpg_backed_grams\":0.0}","verify":"sha256 of `payload_canonical` - the exact signed bytes, UTF-8 - must equal `hash`. `payload` is that same document parsed; re-serialising it reproduces `hash` only under json.dumps(payload, sort_keys=True, separators=(',', ':')). `signature` is HMAC-SHA256(server key, hash): it proves origin and ordering to a holder of the key, and that key is not published yet, so the hash is the part anyone can check today."}