{
  "honest": [
    "Library, not the live boundary: the MCPGate path neither emits nor requires these proofs.",
    "The clean-room verifier is a same-project re-implementation, not a third party.",
    "Trust anchors (signers, policy hash, state root, epoch, revocations) are supplied out of band.",
    "Selective disclosure is a Merkle commitment, not zero knowledge.",
    "Performance is single-process on the build host; no multi-host or federated measurements.",
    "Rules are executable invariants, not a machine-checked proof of the Python code."
  ]
}
