{
  "bomFormat": "CycloneDX",
  "specVersion": "1.5",
  "serialNumber": "urn:uuid:00000000-0000-4000-8000-000000000000",
  "version": 1,
  "metadata": {
    "timestamp": null,
    "component": {"type": "container", "name": "pdf2html-production-worker", "version": "not-built", "properties": [{"name": "release_eligible", "value": "false"}]}
  },
  "components": [],
  "dependencies": [],
  "compositions": [{"aggregate": "unknown", "assemblies": []}],
  "notes": "Placeholder records absence of a production artifact; release validation requires a generated complete SBOM tied to the OCI digest."
}