{
 "adapters": {
  "a2a": {
   "authentication": "Ed25519 signed request (reference)",
   "authorization": "kernel + E8",
   "boundary": "E37 governed-execution contract",
   "bypass_possibilities": [
    "traffic that never reaches the adapter is ungoverned"
   ],
   "conformance": {
    "checks": {
     "deny_blocks": true,
     "evidence_emitted": true,
     "no_authorization_no_execution": true,
     "replay_refused": true,
     "unknown_fails_closed": true
    },
    "harness": "reference",
    "status": "TESTED",
    "version": "1.0"
   },
   "evidence": "per-attempt evidence digest",
   "failure_mode": "fail closed",
   "identity": "execution identity v2",
   "limitations": [
    "reference in-process harness",
    "no live protocol server"
   ],
   "policy_enforcement": "deny/unknown fail closed",
   "protocol": "a2a",
   "protocol_integration": "NOT_TESTED",
   "replay_behavior": "nonce single use",
   "status": "TESTED"
  },
  "browser": {
   "authentication": "Ed25519 signed request (reference)",
   "authorization": "kernel + E8",
   "boundary": "E37 governed-execution contract",
   "bypass_possibilities": [
    "traffic that never reaches the adapter is ungoverned"
   ],
   "conformance": {
    "checks": {
     "deny_blocks": true,
     "evidence_emitted": true,
     "no_authorization_no_execution": true,
     "replay_refused": true,
     "unknown_fails_closed": true
    },
    "harness": "reference",
    "status": "TESTED",
    "version": "1.0"
   },
   "evidence": "per-attempt evidence digest",
   "failure_mode": "fail closed",
   "identity": "execution identity v2",
   "limitations": [
    "reference in-process harness",
    "no live protocol server"
   ],
   "policy_enforcement": "deny/unknown fail closed",
   "protocol": "browser",
   "protocol_integration": "NOT_TESTED",
   "replay_behavior": "nonce single use",
   "status": "TESTED"
  },
  "cicd": {
   "authentication": "Ed25519 signed request (reference)",
   "authorization": "kernel + E8",
   "boundary": "E37 governed-execution contract",
   "bypass_possibilities": [
    "traffic that never reaches the adapter is ungoverned"
   ],
   "conformance": {
    "checks": {
     "deny_blocks": true,
     "evidence_emitted": true,
     "no_authorization_no_execution": true,
     "replay_refused": true,
     "unknown_fails_closed": true
    },
    "harness": "reference",
    "status": "TESTED",
    "version": "1.0"
   },
   "evidence": "per-attempt evidence digest",
   "failure_mode": "fail closed",
   "identity": "execution identity v2",
   "limitations": [
    "reference in-process harness",
    "no live protocol server"
   ],
   "policy_enforcement": "deny/unknown fail closed",
   "protocol": "cicd",
   "protocol_integration": "NOT_TESTED",
   "replay_behavior": "nonce single use",
   "status": "TESTED"
  },
  "cli": {
   "authentication": "Ed25519 signed request (reference)",
   "authorization": "kernel + E8",
   "boundary": "E37 governed-execution contract",
   "bypass_possibilities": [
    "traffic that never reaches the adapter is ungoverned"
   ],
   "conformance": {
    "checks": {
     "deny_blocks": true,
     "evidence_emitted": true,
     "no_authorization_no_execution": true,
     "replay_refused": true,
     "unknown_fails_closed": true
    },
    "harness": "reference",
    "status": "TESTED",
    "version": "1.0"
   },
   "evidence": "per-attempt evidence digest",
   "failure_mode": "fail closed",
   "identity": "execution identity v2",
   "limitations": [
    "reference in-process harness",
    "no live protocol server"
   ],
   "policy_enforcement": "deny/unknown fail closed",
   "protocol": "cli",
   "protocol_integration": "NOT_TESTED",
   "replay_behavior": "nonce single use",
   "status": "TESTED"
  },
  "cloud_api": {
   "authentication": "Ed25519 signed request (reference)",
   "authorization": "kernel + E8",
   "boundary": "E37 governed-execution contract",
   "bypass_possibilities": [
    "traffic that never reaches the adapter is ungoverned"
   ],
   "conformance": {
    "checks": {
     "deny_blocks": true,
     "evidence_emitted": true,
     "no_authorization_no_execution": true,
     "replay_refused": true,
     "unknown_fails_closed": true
    },
    "harness": "reference",
    "status": "TESTED",
    "version": "1.0"
   },
   "evidence": "per-attempt evidence digest",
   "failure_mode": "fail closed",
   "identity": "execution identity v2",
   "limitations": [
    "reference in-process harness",
    "no live protocol server"
   ],
   "policy_enforcement": "deny/unknown fail closed",
   "protocol": "cloud_api",
   "protocol_integration": "NOT_TESTED",
   "replay_behavior": "nonce single use",
   "status": "TESTED"
  },
  "container_runtime": {
   "authentication": "Ed25519 signed request (reference)",
   "authorization": "kernel + E8",
   "boundary": "E37 governed-execution contract",
   "bypass_possibilities": [
    "traffic that never reaches the adapter is ungoverned"
   ],
   "conformance": {
    "checks": {
     "deny_blocks": true,
     "evidence_emitted": true,
     "no_authorization_no_execution": true,
     "replay_refused": true,
     "unknown_fails_closed": true
    },
    "harness": "reference",
    "status": "TESTED",
    "version": "1.0"
   },
   "evidence": "per-attempt evidence digest",
   "failure_mode": "fail closed",
   "identity": "execution identity v2",
   "limitations": [
    "reference in-process harness",
    "no live protocol server"
   ],
   "policy_enforcement": "deny/unknown fail closed",
   "protocol": "container_runtime",
   "protocol_integration": "NOT_TESTED",
   "replay_behavior": "nonce single use",
   "status": "TESTED"
  },
  "database": {
   "authentication": "Ed25519 signed request (reference)",
   "authorization": "kernel + E8",
   "boundary": "E37 governed-execution contract",
   "bypass_possibilities": [
    "traffic that never reaches the adapter is ungoverned"
   ],
   "conformance": {
    "checks": {
     "deny_blocks": true,
     "evidence_emitted": true,
     "no_authorization_no_execution": true,
     "replay_refused": true,
     "unknown_fails_closed": true
    },
    "harness": "reference",
    "status": "TESTED",
    "version": "1.0"
   },
   "evidence": "per-attempt evidence digest",
   "failure_mode": "fail closed",
   "identity": "execution identity v2",
   "limitations": [
    "reference in-process harness",
    "no live protocol server"
   ],
   "policy_enforcement": "deny/unknown fail closed",
   "protocol": "database",
   "protocol_integration": "NOT_TESTED",
   "replay_behavior": "nonce single use",
   "status": "TESTED"
  },
  "event_bus": {
   "authentication": "Ed25519 signed request (reference)",
   "authorization": "kernel + E8",
   "boundary": "E37 governed-execution contract",
   "bypass_possibilities": [
    "traffic that never reaches the adapter is ungoverned"
   ],
   "conformance": {
    "checks": {
     "deny_blocks": true,
     "evidence_emitted": true,
     "no_authorization_no_execution": true,
     "replay_refused": true,
     "unknown_fails_closed": true
    },
    "harness": "reference",
    "status": "TESTED",
    "version": "1.0"
   },
   "evidence": "per-attempt evidence digest",
   "failure_mode": "fail closed",
   "identity": "execution identity v2",
   "limitations": [
    "reference in-process harness",
    "no live protocol server"
   ],
   "policy_enforcement": "deny/unknown fail closed",
   "protocol": "event_bus",
   "protocol_integration": "NOT_TESTED",
   "replay_behavior": "nonce single use",
   "status": "TESTED"
  },
  "filesystem": {
   "authentication": "Ed25519 signed request (reference)",
   "authorization": "kernel + E8",
   "boundary": "E37 governed-execution contract",
   "bypass_possibilities": [
    "traffic that never reaches the adapter is ungoverned"
   ],
   "conformance": {
    "checks": {
     "deny_blocks": true,
     "evidence_emitted": true,
     "no_authorization_no_execution": true,
     "replay_refused": true,
     "unknown_fails_closed": true
    },
    "harness": "reference",
    "status": "TESTED",
    "version": "1.0"
   },
   "evidence": "per-attempt evidence digest",
   "failure_mode": "fail closed",
   "identity": "execution identity v2",
   "limitations": [
    "reference in-process harness",
    "no live protocol server"
   ],
   "policy_enforcement": "deny/unknown fail closed",
   "protocol": "filesystem",
   "protocol_integration": "NOT_TESTED",
   "replay_behavior": "nonce single use",
   "status": "TESTED"
  },
  "grpc": {
   "authentication": "Ed25519 signed request (reference)",
   "authorization": "kernel + E8",
   "boundary": "E37 governed-execution contract",
   "bypass_possibilities": [
    "traffic that never reaches the adapter is ungoverned"
   ],
   "conformance": {
    "checks": {
     "deny_blocks": true,
     "evidence_emitted": true,
     "no_authorization_no_execution": true,
     "replay_refused": true,
     "unknown_fails_closed": true
    },
    "harness": "reference",
    "status": "TESTED",
    "version": "1.0"
   },
   "evidence": "per-attempt evidence digest",
   "failure_mode": "fail closed",
   "identity": "execution identity v2",
   "limitations": [
    "reference in-process harness",
    "no live protocol server"
   ],
   "policy_enforcement": "deny/unknown fail closed",
   "protocol": "grpc",
   "protocol_integration": "NOT_TESTED",
   "replay_behavior": "nonce single use",
   "status": "TESTED"
  },
  "gui": {
   "authentication": "Ed25519 signed request (reference)",
   "authorization": "kernel + E8",
   "boundary": "E37 governed-execution contract",
   "bypass_possibilities": [
    "traffic that never reaches the adapter is ungoverned"
   ],
   "conformance": {
    "checks": {
     "deny_blocks": true,
     "evidence_emitted": true,
     "no_authorization_no_execution": true,
     "replay_refused": true,
     "unknown_fails_closed": true
    },
    "harness": "reference",
    "status": "TESTED",
    "version": "1.0"
   },
   "evidence": "per-attempt evidence digest",
   "failure_mode": "fail closed",
   "identity": "execution identity v2",
   "limitations": [
    "reference in-process harness",
    "no live protocol server"
   ],
   "policy_enforcement": "deny/unknown fail closed",
   "protocol": "gui",
   "protocol_integration": "NOT_TESTED",
   "replay_behavior": "nonce single use",
   "status": "TESTED"
  },
  "http": {
   "authentication": "Ed25519 signed request (reference)",
   "authorization": "kernel + E8",
   "boundary": "E37 governed-execution contract",
   "bypass_possibilities": [
    "traffic that never reaches the adapter is ungoverned"
   ],
   "conformance": {
    "checks": {
     "deny_blocks": true,
     "evidence_emitted": true,
     "no_authorization_no_execution": true,
     "replay_refused": true,
     "unknown_fails_closed": true
    },
    "harness": "reference",
    "status": "TESTED",
    "version": "1.0"
   },
   "evidence": "per-attempt evidence digest",
   "failure_mode": "fail closed",
   "identity": "execution identity v2",
   "limitations": [
    "reference in-process harness",
    "no live protocol server"
   ],
   "policy_enforcement": "deny/unknown fail closed",
   "protocol": "http",
   "protocol_integration": "NOT_TESTED",
   "replay_behavior": "nonce single use",
   "status": "TESTED"
  },
  "local_ipc": {
   "authentication": "Ed25519 signed request (reference)",
   "authorization": "kernel + E8",
   "boundary": "E37 governed-execution contract",
   "bypass_possibilities": [
    "traffic that never reaches the adapter is ungoverned"
   ],
   "conformance": {
    "checks": {
     "deny_blocks": true,
     "evidence_emitted": true,
     "no_authorization_no_execution": true,
     "replay_refused": true,
     "unknown_fails_closed": true
    },
    "harness": "reference",
    "status": "TESTED",
    "version": "1.0"
   },
   "evidence": "per-attempt evidence digest",
   "failure_mode": "fail closed",
   "identity": "execution identity v2",
   "limitations": [
    "reference in-process harness",
    "no live protocol server"
   ],
   "policy_enforcement": "deny/unknown fail closed",
   "protocol": "local_ipc",
   "protocol_integration": "NOT_TESTED",
   "replay_behavior": "nonce single use",
   "status": "TESTED"
  },
  "mcp": {
   "authentication": "Ed25519 signed request (reference)",
   "authorization": "kernel + E8",
   "boundary": "E37 governed-execution contract",
   "bypass_possibilities": [
    "traffic that never reaches the adapter is ungoverned"
   ],
   "conformance": {
    "checks": {
     "deny_blocks": true,
     "evidence_emitted": true,
     "no_authorization_no_execution": true,
     "replay_refused": true,
     "unknown_fails_closed": true
    },
    "harness": "reference",
    "status": "TESTED",
    "version": "1.0"
   },
   "evidence": "per-attempt evidence digest",
   "failure_mode": "fail closed",
   "identity": "execution identity v2",
   "limitations": [
    "reference in-process harness",
    "no live protocol server"
   ],
   "policy_enforcement": "deny/unknown fail closed",
   "protocol": "mcp",
   "protocol_integration": "NOT_TESTED",
   "replay_behavior": "nonce single use",
   "status": "TESTED"
  },
  "physical_gateway": {
   "authentication": "Ed25519 signed request (reference)",
   "authorization": "kernel + E8",
   "boundary": "E37 governed-execution contract",
   "bypass_possibilities": [
    "traffic that never reaches the adapter is ungoverned"
   ],
   "conformance": {
    "checks": {
     "deny_blocks": true,
     "evidence_emitted": true,
     "no_authorization_no_execution": true,
     "replay_refused": true,
     "unknown_fails_closed": true
    },
    "harness": "reference",
    "status": "TESTED",
    "version": "1.0"
   },
   "evidence": "per-attempt evidence digest",
   "failure_mode": "fail closed",
   "identity": "execution identity v2",
   "limitations": [
    "reference in-process harness",
    "no live protocol server"
   ],
   "policy_enforcement": "deny/unknown fail closed",
   "protocol": "physical_gateway",
   "protocol_integration": "NOT_TESTED",
   "replay_behavior": "nonce single use",
   "status": "TESTED"
  },
  "rest": {
   "authentication": "Ed25519 signed request (reference)",
   "authorization": "kernel + E8",
   "boundary": "E37 governed-execution contract",
   "bypass_possibilities": [
    "traffic that never reaches the adapter is ungoverned"
   ],
   "conformance": {
    "checks": {
     "deny_blocks": true,
     "evidence_emitted": true,
     "no_authorization_no_execution": true,
     "replay_refused": true,
     "unknown_fails_closed": true
    },
    "harness": "reference",
    "status": "TESTED",
    "version": "1.0"
   },
   "evidence": "per-attempt evidence digest",
   "failure_mode": "fail closed",
   "identity": "execution identity v2",
   "limitations": [
    "reference in-process harness",
    "no live protocol server"
   ],
   "policy_enforcement": "deny/unknown fail closed",
   "protocol": "rest",
   "protocol_integration": "NOT_TESTED",
   "replay_behavior": "nonce single use",
   "status": "TESTED"
  },
  "shell": {
   "authentication": "Ed25519 signed request (reference)",
   "authorization": "kernel + E8",
   "boundary": "E37 governed-execution contract",
   "bypass_possibilities": [
    "traffic that never reaches the adapter is ungoverned"
   ],
   "conformance": {
    "checks": {
     "deny_blocks": true,
     "evidence_emitted": true,
     "no_authorization_no_execution": true,
     "replay_refused": true,
     "unknown_fails_closed": true
    },
    "harness": "reference",
    "status": "TESTED",
    "version": "1.0"
   },
   "evidence": "per-attempt evidence digest",
   "failure_mode": "fail closed",
   "identity": "execution identity v2",
   "limitations": [
    "reference in-process harness",
    "no live protocol server"
   ],
   "policy_enforcement": "deny/unknown fail closed",
   "protocol": "shell",
   "protocol_integration": "NOT_TESTED",
   "replay_behavior": "nonce single use",
   "status": "TESTED"
  },
  "websocket": {
   "authentication": "Ed25519 signed request (reference)",
   "authorization": "kernel + E8",
   "boundary": "E37 governed-execution contract",
   "bypass_possibilities": [
    "traffic that never reaches the adapter is ungoverned"
   ],
   "conformance": {
    "checks": {
     "deny_blocks": true,
     "evidence_emitted": true,
     "no_authorization_no_execution": true,
     "replay_refused": true,
     "unknown_fails_closed": true
    },
    "harness": "reference",
    "status": "TESTED",
    "version": "1.0"
   },
   "evidence": "per-attempt evidence digest",
   "failure_mode": "fail closed",
   "identity": "execution identity v2",
   "limitations": [
    "reference in-process harness",
    "no live protocol server"
   ],
   "policy_enforcement": "deny/unknown fail closed",
   "protocol": "websocket",
   "protocol_integration": "NOT_TESTED",
   "replay_behavior": "nonce single use",
   "status": "TESTED"
  }
 },
 "clouds": {
  "aws": {
   "integration": "NOT_IMPLEMENTED",
   "status": "ARCHITECTURE"
  },
  "azure": {
   "integration": "NOT_IMPLEMENTED",
   "status": "ARCHITECTURE"
  },
  "bare_metal": {
   "integration": "NOT_IMPLEMENTED",
   "status": "ARCHITECTURE"
  },
  "edge": {
   "integration": "NOT_IMPLEMENTED",
   "status": "ARCHITECTURE"
  },
  "gcp": {
   "integration": "NOT_IMPLEMENTED",
   "status": "ARCHITECTURE"
  },
  "hybrid": {
   "integration": "NOT_IMPLEMENTED",
   "status": "ARCHITECTURE"
  },
  "local": {
   "integration": "IN_PROCESS",
   "status": "TESTED"
  },
  "private_cloud": {
   "integration": "NOT_IMPLEMENTED",
   "status": "ARCHITECTURE"
  }
 },
 "conformance": {
  "a2a": {
   "checks": {
    "deny_blocks": true,
    "evidence_emitted": true,
    "no_authorization_no_execution": true,
    "replay_refused": true,
    "unknown_fails_closed": true
   },
   "harness": "reference",
   "known_limitations": [
    "reference in-process harness",
    "no live protocol server"
   ],
   "protocol": "a2a",
   "protocol_integration": "NOT_TESTED",
   "security_status": "in-process only",
   "status": "TESTED",
   "version": "1.0"
  },
  "browser": {
   "checks": {
    "deny_blocks": true,
    "evidence_emitted": true,
    "no_authorization_no_execution": true,
    "replay_refused": true,
    "unknown_fails_closed": true
   },
   "harness": "reference",
   "known_limitations": [
    "reference in-process harness",
    "no live protocol server"
   ],
   "protocol": "browser",
   "protocol_integration": "NOT_TESTED",
   "security_status": "in-process only",
   "status": "TESTED",
   "version": "1.0"
  },
  "cicd": {
   "checks": {
    "deny_blocks": true,
    "evidence_emitted": true,
    "no_authorization_no_execution": true,
    "replay_refused": true,
    "unknown_fails_closed": true
   },
   "harness": "reference",
   "known_limitations": [
    "reference in-process harness",
    "no live protocol server"
   ],
   "protocol": "cicd",
   "protocol_integration": "NOT_TESTED",
   "security_status": "in-process only",
   "status": "TESTED",
   "version": "1.0"
  },
  "cli": {
   "checks": {
    "deny_blocks": true,
    "evidence_emitted": true,
    "no_authorization_no_execution": true,
    "replay_refused": true,
    "unknown_fails_closed": true
   },
   "harness": "reference",
   "known_limitations": [
    "reference in-process harness",
    "no live protocol server"
   ],
   "protocol": "cli",
   "protocol_integration": "NOT_TESTED",
   "security_status": "in-process only",
   "status": "TESTED",
   "version": "1.0"
  },
  "cloud_api": {
   "checks": {
    "deny_blocks": true,
    "evidence_emitted": true,
    "no_authorization_no_execution": true,
    "replay_refused": true,
    "unknown_fails_closed": true
   },
   "harness": "reference",
   "known_limitations": [
    "reference in-process harness",
    "no live protocol server"
   ],
   "protocol": "cloud_api",
   "protocol_integration": "NOT_TESTED",
   "security_status": "in-process only",
   "status": "TESTED",
   "version": "1.0"
  },
  "container_runtime": {
   "checks": {
    "deny_blocks": true,
    "evidence_emitted": true,
    "no_authorization_no_execution": true,
    "replay_refused": true,
    "unknown_fails_closed": true
   },
   "harness": "reference",
   "known_limitations": [
    "reference in-process harness",
    "no live protocol server"
   ],
   "protocol": "container_runtime",
   "protocol_integration": "NOT_TESTED",
   "security_status": "in-process only",
   "status": "TESTED",
   "version": "1.0"
  },
  "database": {
   "checks": {
    "deny_blocks": true,
    "evidence_emitted": true,
    "no_authorization_no_execution": true,
    "replay_refused": true,
    "unknown_fails_closed": true
   },
   "harness": "reference",
   "known_limitations": [
    "reference in-process harness",
    "no live protocol server"
   ],
   "protocol": "database",
   "protocol_integration": "NOT_TESTED",
   "security_status": "in-process only",
   "status": "TESTED",
   "version": "1.0"
  },
  "event_bus": {
   "checks": {
    "deny_blocks": true,
    "evidence_emitted": true,
    "no_authorization_no_execution": true,
    "replay_refused": true,
    "unknown_fails_closed": true
   },
   "harness": "reference",
   "known_limitations": [
    "reference in-process harness",
    "no live protocol server"
   ],
   "protocol": "event_bus",
   "protocol_integration": "NOT_TESTED",
   "security_status": "in-process only",
   "status": "TESTED",
   "version": "1.0"
  },
  "filesystem": {
   "checks": {
    "deny_blocks": true,
    "evidence_emitted": true,
    "no_authorization_no_execution": true,
    "replay_refused": true,
    "unknown_fails_closed": true
   },
   "harness": "reference",
   "known_limitations": [
    "reference in-process harness",
    "no live protocol server"
   ],
   "protocol": "filesystem",
   "protocol_integration": "NOT_TESTED",
   "security_status": "in-process only",
   "status": "TESTED",
   "version": "1.0"
  },
  "grpc": {
   "checks": {
    "deny_blocks": true,
    "evidence_emitted": true,
    "no_authorization_no_execution": true,
    "replay_refused": true,
    "unknown_fails_closed": true
   },
   "harness": "reference",
   "known_limitations": [
    "reference in-process harness",
    "no live protocol server"
   ],
   "protocol": "grpc",
   "protocol_integration": "NOT_TESTED",
   "security_status": "in-process only",
   "status": "TESTED",
   "version": "1.0"
  },
  "gui": {
   "checks": {
    "deny_blocks": true,
    "evidence_emitted": true,
    "no_authorization_no_execution": true,
    "replay_refused": true,
    "unknown_fails_closed": true
   },
   "harness": "reference",
   "known_limitations": [
    "reference in-process harness",
    "no live protocol server"
   ],
   "protocol": "gui",
   "protocol_integration": "NOT_TESTED",
   "security_status": "in-process only",
   "status": "TESTED",
   "version": "1.0"
  },
  "http": {
   "checks": {
    "deny_blocks": true,
    "evidence_emitted": true,
    "no_authorization_no_execution": true,
    "replay_refused": true,
    "unknown_fails_closed": true
   },
   "harness": "reference",
   "known_limitations": [
    "reference in-process harness",
    "no live protocol server"
   ],
   "protocol": "http",
   "protocol_integration": "NOT_TESTED",
   "security_status": "in-process only",
   "status": "TESTED",
   "version": "1.0"
  },
  "local_ipc": {
   "checks": {
    "deny_blocks": true,
    "evidence_emitted": true,
    "no_authorization_no_execution": true,
    "replay_refused": true,
    "unknown_fails_closed": true
   },
   "harness": "reference",
   "known_limitations": [
    "reference in-process harness",
    "no live protocol server"
   ],
   "protocol": "local_ipc",
   "protocol_integration": "NOT_TESTED",
   "security_status": "in-process only",
   "status": "TESTED",
   "version": "1.0"
  },
  "mcp": {
   "checks": {
    "deny_blocks": true,
    "evidence_emitted": true,
    "no_authorization_no_execution": true,
    "replay_refused": true,
    "unknown_fails_closed": true
   },
   "harness": "reference",
   "known_limitations": [
    "reference in-process harness",
    "no live protocol server"
   ],
   "protocol": "mcp",
   "protocol_integration": "NOT_TESTED",
   "security_status": "in-process only",
   "status": "TESTED",
   "version": "1.0"
  },
  "physical_gateway": {
   "checks": {
    "deny_blocks": true,
    "evidence_emitted": true,
    "no_authorization_no_execution": true,
    "replay_refused": true,
    "unknown_fails_closed": true
   },
   "harness": "reference",
   "known_limitations": [
    "reference in-process harness",
    "no live protocol server"
   ],
   "protocol": "physical_gateway",
   "protocol_integration": "NOT_TESTED",
   "security_status": "in-process only",
   "status": "TESTED",
   "version": "1.0"
  },
  "rest": {
   "checks": {
    "deny_blocks": true,
    "evidence_emitted": true,
    "no_authorization_no_execution": true,
    "replay_refused": true,
    "unknown_fails_closed": true
   },
   "harness": "reference",
   "known_limitations": [
    "reference in-process harness",
    "no live protocol server"
   ],
   "protocol": "rest",
   "protocol_integration": "NOT_TESTED",
   "security_status": "in-process only",
   "status": "TESTED",
   "version": "1.0"
  },
  "shell": {
   "checks": {
    "deny_blocks": true,
    "evidence_emitted": true,
    "no_authorization_no_execution": true,
    "replay_refused": true,
    "unknown_fails_closed": true
   },
   "harness": "reference",
   "known_limitations": [
    "reference in-process harness",
    "no live protocol server"
   ],
   "protocol": "shell",
   "protocol_integration": "NOT_TESTED",
   "security_status": "in-process only",
   "status": "TESTED",
   "version": "1.0"
  },
  "websocket": {
   "checks": {
    "deny_blocks": true,
    "evidence_emitted": true,
    "no_authorization_no_execution": true,
    "replay_refused": true,
    "unknown_fails_closed": true
   },
   "harness": "reference",
   "known_limitations": [
    "reference in-process harness",
    "no live protocol server"
   ],
   "protocol": "websocket",
   "protocol_integration": "NOT_TESTED",
   "security_status": "in-process only",
   "status": "TESTED",
   "version": "1.0"
  }
 },
 "note": "contract conformance against a reference harness; protocol integration with live MCP/A2A/HTTP/... servers is NOT_TESTED",
 "schema": "cain42.e37.adapters.v1"
}