# IHVRK Sovereign Evolution 7 — Trust model for this bundle

**What you can check yourself.** Run `python3 -I verify_evolution_07.py` from a directory that contains only the
extracted bundle. It needs no network and only the Python standard library. It checks completeness, SHA-256
and size of every file, that no unlisted file is present, internal consistency of every result summary with
its detail records, freshness, that no gate or claim contradicts its evidence, and that no secret pattern or
private file type is present. With `--source <checkout>` it also compares the recorded hashes of the source
files with a checkout you obtained separately.

**What you cannot check from the bundle.** The tests, models and mutation run were executed by the developer.
The bundle carries their transcripts and exit codes, not the code (the implementation is private). A recorded
PASS is a developer assertion with a transcript attached. To reproduce, you need the private source and:
`python3 scripts/sovereign/evidence_pipeline_e7.py run`.

**Signature.** This bundle is **UNSIGNED**. Its manifest says so and the verifier reports the signature
dimension as NOT_RUN, never PASS. No key was generated for it: a key created by the same process that built
the bundle would prove nothing. If the owner signs a later bundle, verify with
`--trusted-key <base64 Ed25519 public key>` where the key comes from a channel you already trust (not from the
bundle and not from the site that served it). `--require-signature` makes an unsigned bundle fail.

**Keys.** No private key is in the bundle; the verifier fails (exit 18) if a private-key block or a private file
type appears. Rotation: a new release key must be announced through the existing owner-signed auditor kit
channel; a bundle signed by an unannounced key should be treated as unsigned.

**Withdrawn versions.** The manifest lists withdrawn bundle versions; the verifier fails (exit 19) if the bundle
is one of them. A stale bundle fails after 30 days by default (exit 16).

**Categories used in the reports.**

| Category | Meaning |
|---|---|
| Reproduced fact | you ran it and saw it (verifier checks; anything you re-run from source) |
| Developer assertion | recorded result of a run you did not observe (tests, mutation, live-site fetches) |
| Model-derived conclusion | holds in a stated abstraction (formal results) |
| Environment-dependent observation | true on the build host and kernel only (sandbox behaviour) |
| Unresolved | BLOCKED, NOT_RUN or UNKNOWN gates; everything in RESIDUAL_RISKS.md |

Integrity is not truth, a signature is not correctness, a local test is not production behaviour, and nothing in
this bundle has been reviewed by an independent human.