{
  "branch": "ironclad-prompt8-qualification",
  "gate_titles": {
    "G01": "JIT protocol correctness",
    "G02": "Independent TALOS verification",
    "G03": "Complete mediation of declared protected action paths",
    "G04": "Worker isolation and verified sandbox controls",
    "G05": "Replay ledger durability and concurrency guarantees",
    "G06": "Formal model validity and implementation-linked tests",
    "G07": "Adversarial regression and mutation coverage",
    "G08": "IHVRK clean-room reproduction and integrity",
    "G09": "Secret and private-artifact scanning",
    "G10": "Three-site evidence parity and homepage Verification Center discoverability",
    "G11": "Hosted CI execution",
    "G12": "Deployed revision identity and live MCPGate traffic-path evidence",
    "G13": "Hardware attestation and physical interlocks (only if claimed)",
    "G14": "Independent third-party human review"
  },
  "gates": {
    "G01": {
      "evidence": "test_e7_protocol: 94 passed, 0 not passed; regression suites clean: True",
      "mandatory_for_production": false,
      "scope": "local",
      "status": "PASS"
    },
    "G02": {
      "evidence": "test_e7_enforcement: 88 passed, 0 not passed (canary-file assertions on every refusal path)",
      "mandatory_for_production": false,
      "scope": "local",
      "status": "PASS"
    },
    "G03": {
      "evidence": "Inside cain/talos the only process-start sites are ['cain/talos/talos_sandbox_launcher.py', 'cain/talos/talos_worker.py'] (test E7-E-050/051). But cain.talos has 0 production callers: no gateway, MCP or talos-coder path is routed through it, and talos-coder's RunCommandTool still uses shell=True. Mediation is complete for the declared paths and absent for everything else.",
      "mandatory_for_production": false,
      "scope": "local",
      "status": "PARTIAL"
    },
    "G04": {
      "evidence": "test_e7_worker_isolation: 30 passed, 0 not passed; host: Linux 7.0.0-38-generic, Landlock ABI 8, euid 0, x86_64",
      "mandatory_for_production": false,
      "scope": "local",
      "status": "PASS"
    },
    "G05": {
      "evidence": "test_e7_ledger: 20 passed, 0 not passed; single-host SQLite only, multi-host unsupported and refused",
      "mandatory_for_production": false,
      "scope": "local",
      "status": "PASS"
    },
    "G06": {
      "evidence": "22/22 model properties hold with SAT controls and detected mutants (z3 5.1.0); test_e7_formal_link: 155 passed, 0 not passed",
      "mandatory_for_production": false,
      "scope": "local",
      "status": "PASS"
    },
    "G07": {
      "evidence": "mutation: {\"KILLED\": 85, \"SURVIVED_EQUIVALENT\": 4} of 89; unexplained survivors/errors: []; Evolution 7 suite 441 passed / 0 failed / 0 errors / 0 skipped",
      "mandatory_for_production": false,
      "scope": "local",
      "status": "PASS"
    },
    "G08": {
      "evidence": "`unshare -n /usr/bin/python3 -I verify_evolution_07.py` in a fresh temporary directory holding only the extracted bundle, network namespace disabled: exit 0",
      "mandatory_for_production": false,
      "scope": "local",
      "status": "PASS"
    },
    "G09": {
      "evidence": "29 public files scanned with 8 secret patterns: 0 findings; 0 files classified PRIVATE and excluded; no implementation source, key or database is in the bundle",
      "mandatory_for_production": false,
      "scope": "local",
      "status": "PASS"
    },
    "G10": {
      "evidence": "Evolution 7 evidence is NOT published on any of the three sites (publication was not authorised in this run). Homepage -> Verification Center link observed live: PASS. Evolution 6 manifest identical on all three sites: True.",
      "mandatory_for_production": true,
      "scope": "publication",
      "status": "BLOCKED"
    },
    "G11": {
      "evidence": "No git remote is configured (`git remote -v` is empty), so no hosted CI has ever run this code. A workflow file existing is not a CI run.",
      "mandatory_for_production": true,
      "scope": "production",
      "status": "BLOCKED"
    },
    "G12": {
      "evidence": "cain.talos has no production caller; the running gateways do not import it. No deployed revision carries this code and no live request traverses it.",
      "mandatory_for_production": true,
      "scope": "production",
      "status": "BLOCKED"
    },
    "G13": {
      "evidence": "No hardware attestation and no physical interlock is claimed by this evolution. talos_safeguards.py is a software simulation and was not changed.",
      "mandatory_for_production": false,
      "scope": "production",
      "status": "NOT_RUN"
    },
    "G14": {
      "evidence": "No independent human has reviewed this work. Everything here was produced and checked by the same development session.",
      "mandatory_for_production": true,
      "scope": "production",
      "status": "BLOCKED"
    }
  },
  "independent_review": {
    "record": null,
    "reviewer": null
  },
  "local_development_gate": "PARTIAL",
  "production_blockers": [
    "G10",
    "G11",
    "G12",
    "G14"
  ],
  "production_release_gate": "BLOCKED",
  "run_id": "e7-20261012T134603Z-5cbb38e7",
  "schema": "cain42.sovereign.evo07.release_gate.v1",
  "source_revision": "a97b94ddb6876c2266400e6303f3e578cb853833",
  "statuses": [
    "PASS",
    "FAIL",
    "PARTIAL",
    "BLOCKED",
    "NOT_RUN",
    "UNKNOWN"
  ],
  "verdict": "PARTIAL / PRODUCTION BLOCKED"
}