{
 "schema": "cain42.auditor_kit.verdict.v1",
 "verifier": {
  "name": "cain42_verify",
  "version": "8.0.1"
 },
 "evaluated_at_utc": "2026-10-11T03:32:46Z",
 "input": {
  "archive_path": "cain42-auditor-kit-8.0.1.zip",
  "archive_sha256": "583ea6912f6c08741972596d87f17544f93728cf42e50f76d6f028b97ae64db2",
  "archive_bytes": 433286,
  "expected_sha256": "583ea6912f6c08741972596d87f17544f93728cf42e50f76d6f028b97ae64db2",
  "expected_version": "8.0.1",
  "auditor_keys_supplied": 0
 },
 "release": {
  "kit_name": "cain42-auditor-kit",
  "kit_version": "8.0.1",
  "source_commit": "39f4293bf3f9bb4d97ddf0337d0f3b9758022237",
  "built_at_utc": "2026-10-11T03:32:15Z",
  "signing_key_id": "cain42-auditor-kit-release-2026-10",
  "signing_key_fingerprint_sha256": "d0f5f17ca2be05600042f4dd336b8e9a55f58ef14c83dc717f13bfb85e0afa20",
  "trust_anchor_fingerprint_sha256": "d0f5f17ca2be05600042f4dd336b8e9a55f58ef14c83dc717f13bfb85e0afa20",
  "running_verifier_sha256": "0c9f2e3c846397fa095c8de0a15cc734daccf2fba7ead2968626b836e2f50534"
 },
 "platform_status_as_recorded_in_package": {
  "production_ready": false,
  "overall": "RELEASE_GATE_BLOCKED",
  "gates": {
   "GATE-1": "PASSED_TESTED_SCOPE",
   "GATE-2": "BLOCKED",
   "GATE-3": "PASSED_TESTED_SCOPE",
   "GATE-4": "PASSED_TESTED_SCOPE",
   "GATE-5": "PASSED_TESTED_SCOPE",
   "GATE-6": "BLOCKED",
   "GATE-7": "PASSED_TESTED_SCOPE"
  }
 },
 "verdict": "PASS_INTEGRITY",
 "exit_code": 0,
 "error": null,
 "counts": {
  "PASS": 50,
  "FAIL": 0,
  "WARN": 0,
  "SKIP": 0
 },
 "checks": [
  {
   "id": "archive_size_within_limit",
   "status": "PASS",
   "on_fail": null,
   "detail": "433286 bytes (limit 67108864)"
  },
  {
   "id": "archive_matches_expected_sha256",
   "status": "PASS",
   "on_fail": null,
   "detail": "expected 583ea6912f6c08741972596d87f17544f93728cf42e50f76d6f028b97ae64db2, got 583ea6912f6c08741972596d87f17544f93728cf42e50f76d6f028b97ae64db2"
  },
  {
   "id": "archive_parses",
   "status": "PASS",
   "on_fail": null,
   "detail": ""
  },
  {
   "id": "archive_entry_count",
   "status": "PASS",
   "on_fail": null,
   "detail": "121 entries (limit 400)"
  },
  {
   "id": "archive_no_duplicate_entries",
   "status": "PASS",
   "on_fail": null,
   "detail": []
  },
  {
   "id": "archive_entries_safe",
   "status": "PASS",
   "on_fail": null,
   "detail": []
  },
  {
   "id": "archive_entry_crc",
   "status": "PASS",
   "on_fail": null,
   "detail": "121 files read and CRC-checked"
  },
  {
   "id": "manifest_parses_strictly",
   "status": "PASS",
   "on_fail": null,
   "detail": ""
  },
  {
   "id": "manifest_schema_supported",
   "status": "PASS",
   "on_fail": null,
   "detail": "schema='cain42.auditor_kit.manifest.v1'; supported=['cain42.auditor_kit.manifest.v1']"
  },
  {
   "id": "manifest_algorithms_supported",
   "status": "PASS",
   "on_fail": null,
   "detail": "hash='sha256' signature='ed25519'"
  },
  {
   "id": "manifest_bytes_canonical",
   "status": "PASS",
   "on_fail": null,
   "detail": "manifest bytes must equal sorted-key compact UTF-8 JSON (no ambiguity in what was signed)"
  },
  {
   "id": "manifest_required_fields",
   "status": "PASS",
   "on_fail": null,
   "detail": "missing or wrong type: []"
  },
  {
   "id": "trust_anchor_supplied",
   "status": "PASS",
   "on_fail": null,
   "detail": "fingerprint d0f5f17ca2be05600042f4dd336b8e9a55f58ef14c83dc717f13bfb85e0afa20"
  },
  {
   "id": "trust_anchor_not_revoked",
   "status": "PASS",
   "on_fail": null,
   "detail": ""
  },
  {
   "id": "signature_present",
   "status": "PASS",
   "on_fail": null,
   "detail": ""
  },
  {
   "id": "signature_record_well_formed",
   "status": "PASS",
   "on_fail": null,
   "detail": ""
  },
  {
   "id": "signature_algorithm_supported",
   "status": "PASS",
   "on_fail": null,
   "detail": "algorithm='ed25519'"
  },
  {
   "id": "signature_binds_this_manifest",
   "status": "PASS",
   "on_fail": null,
   "detail": ""
  },
  {
   "id": "manifest_names_signing_key",
   "status": "PASS",
   "on_fail": null,
   "detail": "manifest and signature record disagree on the signing key"
  },
  {
   "id": "signature_key_matches_anchor",
   "status": "PASS",
   "on_fail": null,
   "detail": ""
  },
  {
   "id": "signature_valid",
   "status": "PASS",
   "on_fail": null,
   "detail": "Ed25519 over the exact RELEASE_MANIFEST.json bytes"
  },
  {
   "id": "manifest_file_entries_valid",
   "status": "PASS",
   "on_fail": null,
   "detail": []
  },
  {
   "id": "no_missing_files",
   "status": "PASS",
   "on_fail": null,
   "detail": []
  },
  {
   "id": "no_unlisted_files",
   "status": "PASS",
   "on_fail": null,
   "detail": []
  },
  {
   "id": "file_hashes_match_manifest",
   "status": "PASS",
   "on_fail": null,
   "detail": []
  },
  {
   "id": "sha256sums_agrees_with_manifest",
   "status": "PASS",
   "on_fail": null,
   "detail": ""
  },
  {
   "id": "kit_version_well_formed",
   "status": "PASS",
   "on_fail": null,
   "detail": "8.0.1"
  },
  {
   "id": "archive_root_matches_version",
   "status": "PASS",
   "on_fail": null,
   "detail": "archive root 'cain42-auditor-kit-8.0.1', manifest archive_root 'cain42-auditor-kit-8.0.1', version '8.0.1'"
  },
  {
   "id": "version_is_expected_release",
   "status": "PASS",
   "on_fail": null,
   "detail": "expected 8.0.1, package says 8.0.1"
  },
  {
   "id": "source_commit_well_formed",
   "status": "PASS",
   "on_fail": null,
   "detail": "39f4293bf3f9bb4d97ddf0337d0f3b9758022237"
  },
  {
   "id": "build_time_not_in_future",
   "status": "PASS",
   "on_fail": null,
   "detail": "2026-10-11T03:32:15Z"
  },
  {
   "id": "embedded_verifier_matches_running_verifier",
   "status": "PASS",
   "on_fail": null,
   "detail": ""
  },
  {
   "id": "entry_docs_reference_current_release",
   "status": "PASS",
   "on_fail": null,
   "detail": []
  },
  {
   "id": "evidence_index_consistent",
   "status": "PASS",
   "on_fail": null,
   "detail": []
  },
  {
   "id": "no_unrecognized_mandatory_evidence",
   "status": "PASS",
   "on_fail": null,
   "detail": "mandatory evidence of a type this verifier cannot evaluate: []"
  },
  {
   "id": "evidence_present:kit_build_record",
   "status": "PASS",
   "on_fail": null,
   "detail": ""
  },
  {
   "id": "evidence_present:platform_release_gate_snapshot",
   "status": "PASS",
   "on_fail": null,
   "detail": ""
  },
  {
   "id": "evidence_present:quorum_certificate_sample",
   "status": "PASS",
   "on_fail": null,
   "detail": ""
  },
  {
   "id": "evidence_present:merkle_fixture_set",
   "status": "PASS",
   "on_fail": null,
   "detail": ""
  },
  {
   "id": "fresh:EV-BUILD",
   "status": "PASS",
   "on_fail": null,
   "detail": "0.0 days old; policy for kit_build_record is 30 days"
  },
  {
   "id": "evidence_valid:EV-BUILD",
   "status": "PASS",
   "on_fail": null,
   "detail": ""
  },
  {
   "id": "fresh:EV-MERKLE",
   "status": "PASS",
   "on_fail": null,
   "detail": "0.0 days old; policy for merkle_fixture_set is 365 days"
  },
  {
   "id": "evidence_valid:EV-MERKLE",
   "status": "PASS",
   "on_fail": null,
   "detail": "8 RFC 6962 cases; mismatches []"
  },
  {
   "id": "fresh:EV-GATES",
   "status": "PASS",
   "on_fail": null,
   "detail": "0.0 days old; policy for platform_release_gate_snapshot is 14 days"
  },
  {
   "id": "evidence_valid:EV-GATES",
   "status": "PASS",
   "on_fail": null,
   "detail": []
  },
  {
   "id": "fresh:EV-QC",
   "status": "PASS",
   "on_fail": null,
   "detail": "14.1 days old; policy for quorum_certificate_sample is 90 days"
  },
  {
   "id": "evidence_valid:EV-QC",
   "status": "PASS",
   "on_fail": null,
   "detail": "3 valid distinct signers ['cain-mr2-node-1', 'cain-mr2-node-2', 'cain-mr2-node-3']; quorum 3 of n=4 (f=1)"
  },
  {
   "id": "claim_matrix_parses",
   "status": "PASS",
   "on_fail": null,
   "detail": ""
  },
  {
   "id": "claims_traceable_and_uncontradicted",
   "status": "PASS",
   "on_fail": null,
   "detail": []
  },
  {
   "id": "no_instruction_like_text_in_evidence",
   "status": "PASS",
   "on_fail": null,
   "detail": []
  }
 ],
 "proves": [
  "The archive bytes hash to the reported archive_sha256 (and to --expect-sha256 when given).",
  "When signature_valid passes: the release manifest was signed by the private key matching the trust anchor you supplied.",
  "Every file in the archive is listed in the signed manifest with a matching SHA-256, and nothing is missing or extra.",
  "Version, archive root and source-commit identifiers inside the package agree with each other.",
  "Mandatory evidence records exist, parse, are internally consistent and are within the freshness policy.",
  "The sample quorum certificate carries >= quorum valid Ed25519 signatures from the cluster keys listed in the signed package."
 ],
 "does_not_prove": [
  "That the trust-anchor key belongs to who you think it does (you must establish that out of band; see KEYS_AND_TRUST.md).",
  "That any CAIN-42 claim is true. A valid signature binds a statement to a key; it does not make the statement correct.",
  "That the source commit exists, or that the platform was built from it (the repository is not public; provenance is DECLARED only).",
  "That anyone independent of the developer reviewed, reproduced or audited anything.",
  "Consensus safety or liveness of the CAIN-42 cluster, or the current state of any live system.",
  "That the CAIN-42 platform is production ready. Its release status is a separate record with its own gates."
 ],
 "scope": "Initial evidence-integrity verdict only. Not a security audit, not a proof of consensus safety, not a validation of any product, not a production-readiness decision.",
 "elapsed_seconds": 0.0548,
 "result_digest_sha256": "6ab39445f3817aaa89fe987d89004633a5c691d4d9d888b9bbaa4a2d79b8d1da"
}