{
  "date": "2026-11-02",
  "node": "v22.22.3",
  "subject": "materials/verify/verify.mjs",
  "subject_sha256": "sha256:9ac83302aaf72fbf03ac886fed0aa5cd3f30dd41a663d624ec1a7e92e89dbc8a",
  "scope": "Local synthetic artifact checks; no runtime, public log, hardware attestation, invalid-proof acceptance study or prototype repair.",
  "fixtures": {
    "receipt_with_trust": {
      "exit": 0,
      "stdout": "PASS  parse              \nPASS  trust_store        1 runtime keys, 1 log keys\nPASS  version            aar=\"0.1\"\nPASS  signature          ed25519 by trusted key \"did:key:sample-beebbafd26f2\", body sha256:e2914eb27381cadc…\nPASS  log_tree_head      signed by log key for \"lugano-log-sample\", tree_size 8\nPASS  log_inclusion      index 5 of 8, computed root matches the signed tree head\nSKIP  attestation_root   \"device\": vendor or manufacturer root check not implemented in v0.1\nPASS  retained_zero      retained=0\nPASS  ledger_summary     4 egress hosts (2 blocked), 1 files, 1 payments, 3 tools\n\nRESULT: VERIFIED (signature and log, against the trust store); attestation root pending\n",
      "stderr": "RESULT: VERIFIED (signature and log, against the trust store); attestation root pending\n"
    },
    "receipt_without_trust": {
      "exit": 3,
      "stdout": "PASS  parse              \nSKIP  trust_store        no --trust given: keys the receipt supplies about itself are not trusted\nPASS  version            aar=\"0.1\"\nSKIP  signature          matches the key the receipt itself supplies; untrusted without a trust store or a verified attestation chain\nSKIP  log_inclusion      proof is consistent with the root the receipt supplies; not checked against a signed tree head (no log key in trust store) (no --sth)\nSKIP  attestation_root   \"device\": vendor or manufacturer root check not implemented in v0.1\nPASS  retained_zero      retained=0\nPASS  ledger_summary     4 egress hosts (2 blocked), 1 files, 1 payments, 3 tools\n\nRESULT: UNVERIFIED: no claim in this receipt is backed by a trusted key or a signed tree head\n",
      "stderr": "RESULT: UNVERIFIED: no claim in this receipt is backed by a trusted key or a signed tree head\n"
    },
    "tampered_with_trust": {
      "exit": 1,
      "stdout": "PASS  parse              \nPASS  trust_store        1 runtime keys, 1 log keys\nPASS  version            aar=\"0.1\"\nFAIL  signature          ed25519 by trusted key \"did:key:sample-beebbafd26f2\", body sha256:1367db23de714f0a…\nPASS  log_tree_head      signed by log key for \"lugano-log-sample\", tree_size 8\nFAIL  log_inclusion      index 5 of 8, computed root does not match the signed tree head\nSKIP  attestation_root   \"device\": vendor or manufacturer root check not implemented in v0.1\nPASS  retained_zero      retained=0\nPASS  ledger_summary     4 egress hosts (1 blocked), 1 files, 1 payments, 3 tools\n\nRESULT: FAIL\n",
      "stderr": "RESULT: FAIL\n"
    },
    "forged_root_with_trust": {
      "exit": 1,
      "stdout": "PASS  parse              \nPASS  trust_store        1 runtime keys, 1 log keys\nPASS  version            aar=\"0.1\"\nFAIL  signature          ed25519 by trusted key \"did:key:sample-beebbafd26f2\", body sha256:01807d96e2910da9…\nPASS  log_tree_head      signed by log key for \"lugano-log-sample\", tree_size 8\nPASS  log_inclusion      index 5 of 8, computed root matches the signed tree head\nSKIP  attestation_root   \"device\": vendor or manufacturer root check not implemented in v0.1\nPASS  retained_zero      retained=0\nPASS  ledger_summary     4 egress hosts (2 blocked), 1 files, 1 payments, 3 tools\n\nRESULT: FAIL\n",
      "stderr": "RESULT: FAIL\n"
    }
  },
  "independent_eight_leaf_vectors": [
    {
      "index": 0,
      "expected": "sha256:ca6b7b3e674ac86c1027b59c87c064fc3bc27b313294c75f83bd05fdd13f0dcf",
      "actual": "sha256:ca6b7b3e674ac86c1027b59c87c064fc3bc27b313294c75f83bd05fdd13f0dcf",
      "match": true
    },
    {
      "index": 1,
      "expected": "sha256:ca6b7b3e674ac86c1027b59c87c064fc3bc27b313294c75f83bd05fdd13f0dcf",
      "actual": "sha256:b558b42262a4a7e1348457b362fc35ae1dc4ea6ebd44b1437186c4a872d5e834",
      "match": false
    },
    {
      "index": 2,
      "expected": "sha256:ca6b7b3e674ac86c1027b59c87c064fc3bc27b313294c75f83bd05fdd13f0dcf",
      "actual": "sha256:ca6b7b3e674ac86c1027b59c87c064fc3bc27b313294c75f83bd05fdd13f0dcf",
      "match": true
    },
    {
      "index": 3,
      "expected": "sha256:ca6b7b3e674ac86c1027b59c87c064fc3bc27b313294c75f83bd05fdd13f0dcf",
      "actual": "sha256:f706ace92c0eb88227123ee0e17a4a2a6e1e3ea7f1d158bc8c8da1c9c7f1799a",
      "match": false
    },
    {
      "index": 4,
      "expected": "sha256:ca6b7b3e674ac86c1027b59c87c064fc3bc27b313294c75f83bd05fdd13f0dcf",
      "actual": "sha256:691379df6a0bc07f3647187ab91671264f07cddcceaef0f74046f646b806a6aa",
      "match": false
    },
    {
      "index": 5,
      "expected": "sha256:ca6b7b3e674ac86c1027b59c87c064fc3bc27b313294c75f83bd05fdd13f0dcf",
      "actual": "sha256:ca6b7b3e674ac86c1027b59c87c064fc3bc27b313294c75f83bd05fdd13f0dcf",
      "match": true
    },
    {
      "index": 6,
      "expected": "sha256:ca6b7b3e674ac86c1027b59c87c064fc3bc27b313294c75f83bd05fdd13f0dcf",
      "actual": "sha256:a2986899571e080933b25d48ea30a3a2d4c32b2315b3910d1ded2539baf3cd85",
      "match": false
    },
    {
      "index": 7,
      "expected": "sha256:ca6b7b3e674ac86c1027b59c87c064fc3bc27b313294c75f83bd05fdd13f0dcf",
      "actual": "sha256:ca6b7b3e674ac86c1027b59c87c064fc3bc27b313294c75f83bd05fdd13f0dcf",
      "match": true
    }
  ],
  "missing_schema_fields": {
    "exit": 0,
    "stdout": "PASS  parse              \nPASS  trust_store        1 runtime keys, 1 log keys\nPASS  version            aar=\"0.1\"\nPASS  signature          ed25519 by trusted key \"local-test\", body sha256:a0b08a07b7577ccb…\nPASS  log_tree_head      signed by log key for \"local-test\", tree_size 1\nPASS  log_inclusion      index 0 of 1, computed root matches the signed tree head\nSKIP  attestation_root   \"none\": vendor or manufacturer root check not implemented in v0.1\nPASS  retained_zero      retained=0\nPASS  ledger_summary     0 egress hosts (0 blocked), 0 files, 0 payments, 0 tools\n\nRESULT: VERIFIED (signature and log, against the trust store); attestation root pending\n",
    "stderr": "RESULT: VERIFIED (signature and log, against the trust store); attestation root pending\n"
  },
  "duplicate_retained_property": {
    "exit": 0,
    "stdout": "PASS  parse              \nPASS  trust_store        1 runtime keys, 1 log keys\nPASS  version            aar=\"0.1\"\nPASS  signature          ed25519 by trusted key \"local-test\", body sha256:a0b08a07b7577ccb…\nPASS  log_tree_head      signed by log key for \"local-test\", tree_size 1\nPASS  log_inclusion      index 0 of 1, computed root matches the signed tree head\nSKIP  attestation_root   \"none\": vendor or manufacturer root check not implemented in v0.1\nPASS  retained_zero      retained=0\nPASS  ledger_summary     0 egress hosts (0 blocked), 0 files, 0 payments, 0 tools\n\nRESULT: VERIFIED (signature and log, against the trust store); attestation root pending\n",
    "stderr": "RESULT: VERIFIED (signature and log, against the trust store); attestation root pending\n"
  },
  "extra_unsigned_head_timestamp": {
    "exit": 0,
    "stdout": "PASS  parse              \nPASS  trust_store        1 runtime keys, 1 log keys\nPASS  version            aar=\"0.1\"\nPASS  signature          ed25519 by trusted key \"local-test\", body sha256:a0b08a07b7577ccb…\nPASS  log_tree_head      signed by log key for \"local-test\", tree_size 1\nPASS  log_inclusion      index 0 of 1, computed root matches the signed tree head\nSKIP  attestation_root   \"none\": vendor or manufacturer root check not implemented in v0.1\nPASS  retained_zero      retained=0\nPASS  ledger_summary     0 egress hosts (0 blocked), 0 files, 0 payments, 0 tools\n\nRESULT: VERIFIED (signature and log, against the trust store); attestation root pending\n",
    "stderr": "RESULT: VERIFIED (signature and log, against the trust store); attestation root pending\n"
  },
  "canonical_input_examples": {
    "lone_surrogate": "{\"x\":\"\\ud800\"}",
    "overflow": "{\"x\":null}"
  },
  "limits": [
    "The independent tree covers size 8 only.",
    "Constructed signer/log keys are locally generated and explicitly accepted for these tests.",
    "Minimal and duplicate-key checks demonstrate those cases only, not a full parser audit.",
    "No assertion about acceptance of invalid inclusion proofs or population failure rates."
  ]
}