Unsigned image rejected

SELECTED VISIBLE OUTPUT — not a full log

Selected visible output:
Unsigned image digest:
sha256:18549c45e5d1d87804372cb8082cefbee1019b9c592d816d14817cc12472ca17
admission webhook "mutate.kyverno.svc-fail" denied the request
resource Pod/default/unsigned-image-test was blocked
verify-image-signature: no signatures found
verify-provenance-attestation: image attestations verification failed, verifiedCount: 0, requiredCount: 1, error: no matching attestations
verify-sbom-attestation: image attestations verification failed, verifiedCount: 0, requiredCount: 1, error: no matching attestations
RESULT: PASS - unsigned image DENIED; no signatures found

Original: https://github.com/devSatym/gcp-supply-chain-security/blob/cbbc807c0c150e106affa89fbb1b9e8349005749/docs/my-validation/09-unsigned-blocked.png

Limitations:
- This is one server-side dry-run request, not a persisted negative deployment.
- Three missing claims occur together; it does not isolate each attestation requirement independently.
- Unmatched registries and excluded namespaces were not tested in this capture.