{
  "at": "2026-11-10T12:00:00Z",
  "bundle_sha256": "58def3bbd6a3a5caa339f7cae553cec41b3edc539111ed14aff216f31b241b9c",
  "evidence_dir": "platform-gateway/frontend/evidence/notary-v3-2026-11-10",
  "honest_notes": [
    "L2 is proved with Z3 over the decision algebra (bounded symbolic). The Lean 4 equivalence theorem is PENDING: Lean is not installed on the build host.",
    "L0 is a verifiable local quorum with the production arithmetic (N=4, Q=3). It does not claim the production cross-region cluster is fault-free.",
    "L4 is a conformant local profile of AP2's open-mandate idea; it is not AP2 certification.",
    "Every layer notarizes and refuses. No layer, and no receipt, grants authority.",
    "Same-operator evidence. No third-party audit, no SOC 2, no customer has run this."
  ],
  "issuer_public_key_b64": "b6hfA2rpAdV29FOdhNXGkk4t91mCV0AnfFYwq0HO0R8=",
  "layers": [
    "L0.root",
    "L1.delegation",
    "L2.admission",
    "L3.state",
    "L4.intent-effect",
    "L5.evidence"
  ],
  "proof": {
    "all_proved": true,
    "certificate_valid": true,
    "lean_equivalence_proof": "PENDING \u2014 Lean 4 is not installed on the build host",
    "proof_hash": "452dc53074bccfd356826b162a2debe607252e79a1892fa9ed742de3c085b269",
    "scope": "Bounded symbolic proof of the admission decision algebra with Z3. Not a Lean 4 machine-checked equivalence proof; not a proof about the world."
  },
  "record_hashes": [
    "1641c97d087d6d5951e95f29d4f45a681cadb3a7ba5a125dc65ec7ad7e99d44d",
    "0bba1139849b4400b518e13a684ac9e0fdb162c1c4405bd298981ca0ee4cbd04"
  ],
  "reproducible": "record_hashes and layers.json; the bundle differs only in head.issued_at",
  "scenarios": [
    {
      "composed_ok": true,
      "composed_status": "NARROWED",
      "per_layer": {
        "L0.root": "AUTHORIZED",
        "L1.delegation": "NARROWED",
        "L2.admission": "AUTHORIZED",
        "L3.state": "AUTHORIZED",
        "L4.intent-effect": "NARROWED"
      },
      "reasons": {},
      "scenario": "A-compliant-treasury-transfer",
      "stack_hash": "c9e36bf08f9dd8776d9adbebae4d6e2a186339bed0877d9425246cb756b9cb3c"
    },
    {
      "composed_ok": false,
      "composed_status": "OUTSIDE_AUTHORITY",
      "per_layer": {
        "L0.root": "AUTHORIZED",
        "L1.delegation": "NARROWED",
        "L2.admission": "AUTHORIZED",
        "L3.state": "AUTHORIZED",
        "L4.intent-effect": "OUTSIDE_AUTHORITY"
      },
      "reasons": {
        "L4.intent-effect": [
          "effect parameters widen beyond the proposal (scope widening refused)",
          "effect spent 90000 > proposed 25000 (value widening refused)",
          "cumulative spend 90000 exceeds the mandate budget 50000",
          "settled amount differs from the authorized effect amount"
        ]
      },
      "scenario": "B-effect-widens-past-mandate",
      "stack_hash": "93bf40fe8ce4df8ace9e102aba7ca595d3f8beec5eb8d1faf98089372ab4e9ce"
    }
  ],
  "schema": "cain42.notary.v3.run.v1"
}