{
    "description": "Clickerwayne Provenance Cache Control",
    "version": "1.0",
    "last_generated": "2026-06-30T03:27:48Z",
    "etag_seed": "W/\"2a5a2b105464372f9d60d44bc60bdec8\"",
    "cache_recommendations": {
        "timestamp_authority": "max-age=300, must-revalidate (5 min - compromise detection)",
        "revocations": "max-age=900, must-revalidate (15 min - revocation propagation)",
        "schema": "max-age=86400, immutable (24h - schema rarely changes)",
        "manifests": "max-age=3600, must-revalidate (1h - content-addressed)",
        "manifest_index": "max-age=600, must-revalidate (10 min - reflects new manifests)"
    },
    "instruction": "If this etag_seed differs from cached value, revalidate all provenance endpoints. In key compromise scenarios, check last_generated to confirm manifests were regenerated after compromise_date."
}