Every trust root in the source, dated.

Each row is a SHA-256 that was pinned for one of the three published artifacts, with the date it was pinned in the source and the commit. Dates are when a value was pinned, not when it was served: a root replaced the same day may never have been served. The list starts on 2026-06-27, when the pins moved into the source: verifier files distributed before that date are not in it. The current roots are on the published format page.