public java.lang.String getProvenanceBytes() {
    java.lang.Object ref = provenanceBytes_;
    if (ref instanceof java.lang.String) {
      return (java.lang.String) ref;
    } else {
      com.google.protobuf.ByteString bs = (com.google.protobuf.ByteString) ref;
      java.lang.String s = bs.toStringUtf8();
      provenanceBytes_ = s;
      return s;
    }
  }
public java . lang . String getProvenanceBytes ( ) { java . lang . Object ref = provenanceBytes_ ; if ( ref instanceof java . lang . String ) { return ( java . lang . String ) ref ; } else { com . google . protobuf . ByteString bs = ( com . google . protobuf . ByteString ) ref ; java . lang . String s = bs . toStringUtf8 ( ) ; provenanceBytes_ = s ; return s ; } }
<pre>
Serialized JSON representation of the provenance, used in generating the
`BuildSignature` in the corresponding Result. After verifying the
signature, `provenance_bytes` can be unmarshalled and compared to the
provenance to confirm that it is unchanged. A base64-encoded string
representation of the provenance bytes is used for the signature in order
to interoperate with openssl which expects this format for signature
verification.
The serialized form is captured both to avoid ambiguity in how the
provenance is marshalled to json as well to prevent incompatibilities with
future changes.
</pre>

<code>string provenance_bytes = 2;</code>