{
 "failures": [],
 "groups": {
  "action_proof": {
   "held": 26,
   "total": 26
  },
  "certificate": {
   "held": 6,
   "total": 6
  },
  "composition": {
   "held": 8,
   "total": 8
  },
  "conformance": {
   "held": 11,
   "total": 11
  },
  "coverage": {
   "held": 12,
   "total": 12
  },
  "dependency": {
   "held": 12,
   "total": 12
  },
  "evidence_basis": {
   "held": 133,
   "total": 133
  },
  "federation": {
   "held": 5,
   "total": 5
  },
  "field_tamper": {
   "held": 398,
   "total": 398
  },
  "freshness": {
   "held": 27,
   "total": 27
  },
  "handshake": {
   "held": 5,
   "total": 5
  },
  "law": {
   "held": 42,
   "total": 42
  },
  "negotiation": {
   "held": 13,
   "total": 13
  },
  "physical_hybrid": {
   "held": 36,
   "total": 36
  },
  "proof_confusion": {
   "held": 24,
   "total": 24
  },
  "protocol": {
   "held": 12,
   "total": 12
  },
  "receipt": {
   "held": 10,
   "total": 10
  },
  "revocation": {
   "held": 23,
   "total": 23
  },
  "secrecy": {
   "held": 17,
   "total": 17
  },
  "signed_object": {
   "held": 136,
   "total": 136
  },
  "status": {
   "held": 15,
   "total": 15
  },
  "translation": {
   "held": 16,
   "total": 16
  },
  "transparency": {
   "held": 30,
   "total": 30
  },
  "trust_state": {
   "held": 13,
   "total": 13
  }
 },
 "held": 1030,
 "ids": [
  {
   "group": "law",
   "id": "I38-LAW-I38-001",
   "text": "a valid proof cannot create authority"
  },
  {
   "group": "law",
   "id": "I38-LAW-I38-002",
   "text": "a valid identity cannot create authority"
  },
  {
   "group": "law",
   "id": "I38-LAW-I38-003",
   "text": "a valid capability cannot create authority"
  },
  {
   "group": "law",
   "id": "I38-LAW-I38-004",
   "text": "a proof cannot authorize an action after authority expiration"
  },
  {
   "group": "law",
   "id": "I38-LAW-I38-005",
   "text": "a revoked delegation cannot authorize future execution"
  },
  {
   "group": "law",
   "id": "I38-LAW-I38-006",
   "text": "a stale proof cannot authorize future execution"
  },
  {
   "group": "law",
   "id": "I38-LAW-I38-007",
   "text": "a partial proof cannot be represented as complete"
  },
  {
   "group": "law",
   "id": "I38-LAW-I38-008",
   "text": "unknown cannot become verified by composition"
  },
  {
   "group": "law",
   "id": "I38-LAW-I38-009",
   "text": "observed cannot become enforced by translation"
  },
  {
   "group": "law",
   "id": "I38-LAW-I38-010",
   "text": "simulation cannot become physical evidence"
  },
  {
   "group": "law",
   "id": "I38-LAW-I38-011",
   "text": "model confidence cannot become authority"
  },
  {
   "group": "law",
   "id": "I38-LAW-I38-012",
   "text": "consensus cannot become authorization"
  },
  {
   "group": "law",
   "id": "I38-LAW-I38-013",
   "text": "reputation cannot become authorization"
  },
  {
   "group": "law",
   "id": "I38-LAW-I38-014",
   "text": "proof verification cannot bypass E8"
  },
  {
   "group": "law",
   "id": "I38-LAW-I38-015",
   "text": "proof generation cannot bypass E8"
  },
  {
   "group": "law",
   "id": "I38-LAW-I38-016",
   "text": "receipt creation cannot retroactively authorize execution"
  },
  {
   "group": "law",
   "id": "I38-LAW-I38-017",
   "text": "execution success cannot prove authorization existed unless bound to the authorization record"
  },
  {
   "group": "law",
   "id": "I38-LAW-I38-018",
   "text": "a revoked dependency invalidates dependent proof claims"
  },
  {
   "group": "law",
   "id": "I38-LAW-I38-019",
   "text": "cross-domain translation cannot silently increase authority"
  },
  {
   "group": "law",
   "id": "I38-LAW-I38-020",
   "text": "protocol negotiation cannot increase authority"
  },
  {
   "group": "law",
   "id": "I38-LAW-I38-021",
   "text": "governance portability does not imply authority portability"
  },
  {
   "group": "law",
   "id": "I38-LAW-I38-022",
   "text": "verification portability does not imply safety certification"
  },
  {
   "group": "law",
   "id": "I38-LAW-I38-023",
   "text": "a proof from one environment cannot automatically authorize another environment"
  },
  {
   "group": "law",
   "id": "I38-LAW-I38-024",
   "text": "runtime substitution requires explicit governance evaluation"
  },
  {
   "group": "law",
   "id": "I38-LAW-I38-025",
   "text": "every consequential governed action remains traceable to E8"
  },
  {
   "group": "law",
   "id": "I38-LAW-I38-026",
   "text": "a handshake cannot create authority that did not previously exist"
  },
  {
   "group": "law",
   "id": "I38-LAW-I38-027",
   "text": "federation never silently merges authority"
  },
  {
   "group": "law",
   "id": "I38-LAW-I38-028",
   "text": "a lossy translation is never silent"
  },
  {
   "group": "law",
   "id": "I38-LAW-I38-029",
   "text": "unavailable verification is never fabricated"
  },
  {
   "group": "law",
   "id": "I38-LAW-I38-030",
   "text": "revocation is never claimed instantaneous unless measured"
  },
  {
   "group": "law",
   "id": "I38-LAW-I38-031",
   "text": "recovery never resurrects revoked or expired authority"
  },
  {
   "group": "law",
   "id": "I38-LAW-I38-032",
   "text": "a coverage certificate is not a security certification"
  },
  {
   "group": "law",
   "id": "I38-LAW-I38-033",
   "text": "an execution certificate does not claim the action was safe"
  },
  {
   "group": "law",
   "id": "I38-LAW-I38-034",
   "text": "software attestation is not hardware attestation"
  },
  {
   "group": "law",
   "id": "I38-LAW-I38-035",
   "text": "a predicted outcome is not an observed outcome"
  },
  {
   "group": "law",
   "id": "I38-LAW-I38-036",
   "text": "a digital-twin result is not a real-world result"
  },
  {
   "group": "law",
   "id": "I38-LAW-I38-037",
   "text": "proofs never carry secrets"
  },
  {
   "group": "law",
   "id": "I38-LAW-I38-038",
   "text": "a proof status never collapses into one trusted status"
  },
  {
   "group": "law",
   "id": "I38-LAW-I38-039",
   "text": "a claim missing any evidence link is not fully verified"
  },
  {
   "group": "law",
   "id": "I38-LAW-I38-040",
   "text": "failures become evidence and are never hidden"
  },
  {
   "group": "law",
   "id": "I38-LAW-I38-041",
   "text": "no revocation state -> no assumed validity"
  },
  {
   "group": "law",
   "id": "I38-LAW-I38-042",
   "text": "UNKNOWN -> UNKNOWN"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-action_proof-VALID",
   "text": "action_proof verifies under its pinned issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-action_proof-NOAUTH",
   "text": "action_proof records grants_authority=false"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-action_proof-WRONGKEY",
   "text": "action_proof fails under another issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-action_proof-DOMAIN",
   "text": "action_proof fails under another signing domain"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-action_proof-agent_identity",
   "text": "changing action_proof.agent_identity breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-action_proof-authority_grant",
   "text": "changing action_proof.authority_grant breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-action_proof-authorization_token",
   "text": "changing action_proof.authorization_token breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-action_proof-capability_set",
   "text": "changing action_proof.capability_set breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-action_proof-claim",
   "text": "changing action_proof.claim breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-action_proof-context_digest",
   "text": "changing action_proof.context_digest breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-action_proof-decision_digest",
   "text": "changing action_proof.decision_digest breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-action_proof-delegation_chain",
   "text": "changing action_proof.delegation_chain breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-action_proof-depends_on",
   "text": "changing action_proof.depends_on breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-action_proof-e8_commit",
   "text": "changing action_proof.e8_commit breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-action_proof-environment_identity",
   "text": "changing action_proof.environment_identity breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-action_proof-evidence_digest",
   "text": "changing action_proof.evidence_digest breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-action_proof-execution_boundary",
   "text": "changing action_proof.execution_boundary breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-action_proof-execution_identity",
   "text": "changing action_proof.execution_identity breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-action_proof-execution_receipt",
   "text": "changing action_proof.execution_receipt breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-action_proof-governance_epoch",
   "text": "changing action_proof.governance_epoch breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-action_proof-grants_authority",
   "text": "changing action_proof.grants_authority breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-action_proof-intent_digest",
   "text": "changing action_proof.intent_digest breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-action_proof-layer_proofs",
   "text": "changing action_proof.layer_proofs breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-action_proof-outcome",
   "text": "changing action_proof.outcome breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-action_proof-policy_digest",
   "text": "changing action_proof.policy_digest breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-action_proof-policy_version",
   "text": "changing action_proof.policy_version breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-action_proof-post_execution_evidence",
   "text": "changing action_proof.post_execution_evidence breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-action_proof-proof_version",
   "text": "changing action_proof.proof_version breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-action_proof-revocation_state",
   "text": "changing action_proof.revocation_state breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-action_proof-risk_state",
   "text": "changing action_proof.risk_state breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-action_proof-runtime_identity",
   "text": "changing action_proof.runtime_identity breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-action_proof-timestamp",
   "text": "changing action_proof.timestamp breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-action_proof-trajectory_digest",
   "text": "changing action_proof.trajectory_digest breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-action_proof-trust_domain",
   "text": "changing action_proof.trust_domain breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-action_proof-unknown_fields",
   "text": "changing action_proof.unknown_fields breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-action_proof-verification_status",
   "text": "changing action_proof.verification_status breaks verification"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-composite-VALID",
   "text": "composite verifies under its pinned issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-composite-NOAUTH",
   "text": "composite records grants_authority=false"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-composite-WRONGKEY",
   "text": "composite fails under another issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-composite-DOMAIN",
   "text": "composite fails under another signing domain"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-composite-authority_attested",
   "text": "changing composite.authority_attested breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-composite-component_states",
   "text": "changing composite.component_states breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-composite-components",
   "text": "changing composite.components breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-composite-depends_on",
   "text": "changing composite.depends_on breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-composite-grants_authority",
   "text": "changing composite.grants_authority breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-composite-status",
   "text": "changing composite.status breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-composite-subject",
   "text": "changing composite.subject breaks verification"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-conformance_cert-VALID",
   "text": "conformance_cert verifies under its pinned issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-conformance_cert-NOAUTH",
   "text": "conformance_cert records grants_authority=false"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-conformance_cert-WRONGKEY",
   "text": "conformance_cert fails under another issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-conformance_cert-DOMAIN",
   "text": "conformance_cert fails under another signing domain"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-conformance_cert-grants_authority",
   "text": "changing conformance_cert.grants_authority breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-conformance_cert-implementation",
   "text": "changing conformance_cert.implementation breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-conformance_cert-passed",
   "text": "changing conformance_cert.passed breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-conformance_cert-profile",
   "text": "changing conformance_cert.profile breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-conformance_cert-status",
   "text": "changing conformance_cert.status breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-conformance_cert-third_party_certification",
   "text": "changing conformance_cert.third_party_certification breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-conformance_cert-total",
   "text": "changing conformance_cert.total breaks verification"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-coverage_cert-VALID",
   "text": "coverage_cert verifies under its pinned issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-coverage_cert-NOAUTH",
   "text": "coverage_cert records grants_authority=false"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-coverage_cert-WRONGKEY",
   "text": "coverage_cert fails under another issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-coverage_cert-DOMAIN",
   "text": "coverage_cert fails under another signing domain"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-coverage_cert-authority",
   "text": "changing coverage_cert.authority breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-coverage_cert-grants_authority",
   "text": "changing coverage_cert.grants_authority breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-coverage_cert-hardware_attestation",
   "text": "changing coverage_cert.hardware_attestation breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-coverage_cert-identity",
   "text": "changing coverage_cert.identity breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-coverage_cert-kind",
   "text": "changing coverage_cert.kind breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-coverage_cert-policy",
   "text": "changing coverage_cert.policy breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-coverage_cert-security_certification",
   "text": "changing coverage_cert.security_certification breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-coverage_cert-surfaces",
   "text": "changing coverage_cert.surfaces breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-coverage_cert-system",
   "text": "changing coverage_cert.system breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-coverage_cert-third_party_review",
   "text": "changing coverage_cert.third_party_review breaks verification"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-evidence_cert-VALID",
   "text": "evidence_cert verifies under its pinned issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-evidence_cert-NOAUTH",
   "text": "evidence_cert records grants_authority=false"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-evidence_cert-WRONGKEY",
   "text": "evidence_cert fails under another issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-evidence_cert-DOMAIN",
   "text": "evidence_cert fails under another signing domain"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-evidence_cert-bundle",
   "text": "changing evidence_cert.bundle breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-evidence_cert-grants_authority",
   "text": "changing evidence_cert.grants_authority breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-evidence_cert-independent_third_party",
   "text": "changing evidence_cert.independent_third_party breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-evidence_cert-manifest_digest",
   "text": "changing evidence_cert.manifest_digest breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-evidence_cert-verifier_result",
   "text": "changing evidence_cert.verifier_result breaks verification"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-execution_cert-VALID",
   "text": "execution_cert verifies under its pinned issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-execution_cert-NOAUTH",
   "text": "execution_cert records grants_authority=false"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-execution_cert-WRONGKEY",
   "text": "execution_cert fails under another issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-execution_cert-DOMAIN",
   "text": "execution_cert fails under another signing domain"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-execution_cert-action_proof",
   "text": "changing execution_cert.action_proof breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-execution_cert-authority",
   "text": "changing execution_cert.authority breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-execution_cert-boundary",
   "text": "changing execution_cert.boundary breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-execution_cert-capability",
   "text": "changing execution_cert.capability breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-execution_cert-does_not_claim",
   "text": "changing execution_cert.does_not_claim breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-execution_cert-e8_commit",
   "text": "changing execution_cert.e8_commit breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-execution_cert-epoch",
   "text": "changing execution_cert.epoch breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-execution_cert-evidence",
   "text": "changing execution_cert.evidence breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-execution_cert-grants_authority",
   "text": "changing execution_cert.grants_authority breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-execution_cert-identity",
   "text": "changing execution_cert.identity breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-execution_cert-policy",
   "text": "changing execution_cert.policy breaks verification"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-failure-VALID",
   "text": "failure verifies under its pinned issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-failure-NOAUTH",
   "text": "failure records grants_authority=false"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-failure-WRONGKEY",
   "text": "failure fails under another issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-failure-DOMAIN",
   "text": "failure fails under another signing domain"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-failure-affected_claim",
   "text": "changing failure.affected_claim breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-failure-affected_component",
   "text": "changing failure.affected_component breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-failure-affected_dependency",
   "text": "changing failure.affected_dependency breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-failure-affected_proof",
   "text": "changing failure.affected_proof breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-failure-detail",
   "text": "changing failure.detail breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-failure-failure",
   "text": "changing failure.failure breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-failure-grants_authority",
   "text": "changing failure.grants_authority breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-failure-hidden",
   "text": "changing failure.hidden breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-failure-remediation_status",
   "text": "changing failure.remediation_status breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-failure-reproduction",
   "text": "changing failure.reproduction breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-failure-security_significance",
   "text": "changing failure.security_significance breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-failure-severity",
   "text": "changing failure.severity breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-failure-verification_status",
   "text": "changing failure.verification_status breaks verification"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-gip-VALID",
   "text": "gip verifies under its pinned issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-gip-NOAUTH",
   "text": "gip records grants_authority=false"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-gip-WRONGKEY",
   "text": "gip fails under another issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-gip-DOMAIN",
   "text": "gip fails under another signing domain"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-gip-action_proof",
   "text": "changing gip.action_proof breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-gip-action_proof_hash",
   "text": "changing gip.action_proof_hash breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-gip-blocks",
   "text": "changing gip.blocks breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-gip-gip",
   "text": "changing gip.gip breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-gip-grants_authority",
   "text": "changing gip.grants_authority breaks verification"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-handshake-VALID",
   "text": "handshake verifies under its pinned issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-handshake-NOAUTH",
   "text": "handshake records grants_authority=false"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-handshake-WRONGKEY",
   "text": "handshake fails under another issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-handshake-DOMAIN",
   "text": "handshake fails under another signing domain"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-handshake-agreed_authority",
   "text": "changing handshake.agreed_authority breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-handshake-creates_authority",
   "text": "changing handshake.creates_authority breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-handshake-dimensions",
   "text": "changing handshake.dimensions breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-handshake-grants_authority",
   "text": "changing handshake.grants_authority breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-handshake-next",
   "text": "changing handshake.next breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-handshake-proof_formats",
   "text": "changing handshake.proof_formats breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-handshake-protocols",
   "text": "changing handshake.protocols breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-handshake-result",
   "text": "changing handshake.result breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-handshake-why",
   "text": "changing handshake.why breaks verification"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_authorization-VALID",
   "text": "layer_authorization verifies under its pinned issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_authorization-NOAUTH",
   "text": "layer_authorization records grants_authority=false"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_authorization-WRONGKEY",
   "text": "layer_authorization fails under another issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_authorization-DOMAIN",
   "text": "layer_authorization fails under another signing domain"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_authorization-authority_attested",
   "text": "changing layer_authorization.authority_attested breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_authorization-basis",
   "text": "changing layer_authorization.basis breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_authorization-claims",
   "text": "changing layer_authorization.claims breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_authorization-claims_digest",
   "text": "changing layer_authorization.claims_digest breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_authorization-depends_on",
   "text": "changing layer_authorization.depends_on breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_authorization-governance_epoch",
   "text": "changing layer_authorization.governance_epoch breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_authorization-grants_authority",
   "text": "changing layer_authorization.grants_authority breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_authorization-issued_at",
   "text": "changing layer_authorization.issued_at breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_authorization-kind",
   "text": "changing layer_authorization.kind breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_authorization-not_after",
   "text": "changing layer_authorization.not_after breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_authorization-proof_version",
   "text": "changing layer_authorization.proof_version breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_authorization-subject",
   "text": "changing layer_authorization.subject breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_authorization-trust_domain",
   "text": "changing layer_authorization.trust_domain breaks verification"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_capability-VALID",
   "text": "layer_capability verifies under its pinned issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_capability-NOAUTH",
   "text": "layer_capability records grants_authority=false"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_capability-WRONGKEY",
   "text": "layer_capability fails under another issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_capability-DOMAIN",
   "text": "layer_capability fails under another signing domain"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_capability-authority_attested",
   "text": "changing layer_capability.authority_attested breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_capability-basis",
   "text": "changing layer_capability.basis breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_capability-claims",
   "text": "changing layer_capability.claims breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_capability-claims_digest",
   "text": "changing layer_capability.claims_digest breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_capability-depends_on",
   "text": "changing layer_capability.depends_on breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_capability-governance_epoch",
   "text": "changing layer_capability.governance_epoch breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_capability-grants_authority",
   "text": "changing layer_capability.grants_authority breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_capability-issued_at",
   "text": "changing layer_capability.issued_at breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_capability-kind",
   "text": "changing layer_capability.kind breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_capability-not_after",
   "text": "changing layer_capability.not_after breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_capability-proof_version",
   "text": "changing layer_capability.proof_version breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_capability-subject",
   "text": "changing layer_capability.subject breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_capability-trust_domain",
   "text": "changing layer_capability.trust_domain breaks verification"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_commit-VALID",
   "text": "layer_commit verifies under its pinned issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_commit-NOAUTH",
   "text": "layer_commit records grants_authority=false"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_commit-WRONGKEY",
   "text": "layer_commit fails under another issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_commit-DOMAIN",
   "text": "layer_commit fails under another signing domain"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_commit-authority_attested",
   "text": "changing layer_commit.authority_attested breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_commit-basis",
   "text": "changing layer_commit.basis breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_commit-claims",
   "text": "changing layer_commit.claims breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_commit-claims_digest",
   "text": "changing layer_commit.claims_digest breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_commit-depends_on",
   "text": "changing layer_commit.depends_on breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_commit-governance_epoch",
   "text": "changing layer_commit.governance_epoch breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_commit-grants_authority",
   "text": "changing layer_commit.grants_authority breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_commit-issued_at",
   "text": "changing layer_commit.issued_at breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_commit-kind",
   "text": "changing layer_commit.kind breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_commit-not_after",
   "text": "changing layer_commit.not_after breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_commit-proof_version",
   "text": "changing layer_commit.proof_version breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_commit-subject",
   "text": "changing layer_commit.subject breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_commit-trust_domain",
   "text": "changing layer_commit.trust_domain breaks verification"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_conformance-VALID",
   "text": "layer_conformance verifies under its pinned issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_conformance-NOAUTH",
   "text": "layer_conformance records grants_authority=false"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_conformance-WRONGKEY",
   "text": "layer_conformance fails under another issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_conformance-DOMAIN",
   "text": "layer_conformance fails under another signing domain"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_conformance-authority_attested",
   "text": "changing layer_conformance.authority_attested breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_conformance-basis",
   "text": "changing layer_conformance.basis breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_conformance-claims",
   "text": "changing layer_conformance.claims breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_conformance-claims_digest",
   "text": "changing layer_conformance.claims_digest breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_conformance-depends_on",
   "text": "changing layer_conformance.depends_on breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_conformance-governance_epoch",
   "text": "changing layer_conformance.governance_epoch breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_conformance-grants_authority",
   "text": "changing layer_conformance.grants_authority breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_conformance-issued_at",
   "text": "changing layer_conformance.issued_at breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_conformance-kind",
   "text": "changing layer_conformance.kind breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_conformance-not_after",
   "text": "changing layer_conformance.not_after breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_conformance-proof_version",
   "text": "changing layer_conformance.proof_version breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_conformance-subject",
   "text": "changing layer_conformance.subject breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_conformance-trust_domain",
   "text": "changing layer_conformance.trust_domain breaks verification"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_continuity-VALID",
   "text": "layer_continuity verifies under its pinned issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_continuity-NOAUTH",
   "text": "layer_continuity records grants_authority=false"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_continuity-WRONGKEY",
   "text": "layer_continuity fails under another issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_continuity-DOMAIN",
   "text": "layer_continuity fails under another signing domain"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_continuity-authority_attested",
   "text": "changing layer_continuity.authority_attested breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_continuity-basis",
   "text": "changing layer_continuity.basis breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_continuity-claims",
   "text": "changing layer_continuity.claims breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_continuity-claims_digest",
   "text": "changing layer_continuity.claims_digest breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_continuity-depends_on",
   "text": "changing layer_continuity.depends_on breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_continuity-governance_epoch",
   "text": "changing layer_continuity.governance_epoch breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_continuity-grants_authority",
   "text": "changing layer_continuity.grants_authority breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_continuity-issued_at",
   "text": "changing layer_continuity.issued_at breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_continuity-kind",
   "text": "changing layer_continuity.kind breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_continuity-not_after",
   "text": "changing layer_continuity.not_after breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_continuity-proof_version",
   "text": "changing layer_continuity.proof_version breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_continuity-subject",
   "text": "changing layer_continuity.subject breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_continuity-trust_domain",
   "text": "changing layer_continuity.trust_domain breaks verification"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_delegation-VALID",
   "text": "layer_delegation verifies under its pinned issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_delegation-NOAUTH",
   "text": "layer_delegation records grants_authority=false"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_delegation-WRONGKEY",
   "text": "layer_delegation fails under another issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_delegation-DOMAIN",
   "text": "layer_delegation fails under another signing domain"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_delegation-authority_attested",
   "text": "changing layer_delegation.authority_attested breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_delegation-basis",
   "text": "changing layer_delegation.basis breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_delegation-claims",
   "text": "changing layer_delegation.claims breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_delegation-claims_digest",
   "text": "changing layer_delegation.claims_digest breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_delegation-depends_on",
   "text": "changing layer_delegation.depends_on breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_delegation-governance_epoch",
   "text": "changing layer_delegation.governance_epoch breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_delegation-grants_authority",
   "text": "changing layer_delegation.grants_authority breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_delegation-issued_at",
   "text": "changing layer_delegation.issued_at breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_delegation-kind",
   "text": "changing layer_delegation.kind breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_delegation-not_after",
   "text": "changing layer_delegation.not_after breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_delegation-proof_version",
   "text": "changing layer_delegation.proof_version breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_delegation-subject",
   "text": "changing layer_delegation.subject breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_delegation-trust_domain",
   "text": "changing layer_delegation.trust_domain breaks verification"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_enforcement-VALID",
   "text": "layer_enforcement verifies under its pinned issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_enforcement-NOAUTH",
   "text": "layer_enforcement records grants_authority=false"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_enforcement-WRONGKEY",
   "text": "layer_enforcement fails under another issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_enforcement-DOMAIN",
   "text": "layer_enforcement fails under another signing domain"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_enforcement-authority_attested",
   "text": "changing layer_enforcement.authority_attested breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_enforcement-basis",
   "text": "changing layer_enforcement.basis breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_enforcement-claims",
   "text": "changing layer_enforcement.claims breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_enforcement-claims_digest",
   "text": "changing layer_enforcement.claims_digest breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_enforcement-depends_on",
   "text": "changing layer_enforcement.depends_on breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_enforcement-governance_epoch",
   "text": "changing layer_enforcement.governance_epoch breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_enforcement-grants_authority",
   "text": "changing layer_enforcement.grants_authority breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_enforcement-issued_at",
   "text": "changing layer_enforcement.issued_at breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_enforcement-kind",
   "text": "changing layer_enforcement.kind breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_enforcement-not_after",
   "text": "changing layer_enforcement.not_after breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_enforcement-proof_version",
   "text": "changing layer_enforcement.proof_version breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_enforcement-subject",
   "text": "changing layer_enforcement.subject breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_enforcement-trust_domain",
   "text": "changing layer_enforcement.trust_domain breaks verification"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_environment-VALID",
   "text": "layer_environment verifies under its pinned issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_environment-NOAUTH",
   "text": "layer_environment records grants_authority=false"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_environment-WRONGKEY",
   "text": "layer_environment fails under another issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_environment-DOMAIN",
   "text": "layer_environment fails under another signing domain"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_environment-authority_attested",
   "text": "changing layer_environment.authority_attested breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_environment-basis",
   "text": "changing layer_environment.basis breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_environment-claims",
   "text": "changing layer_environment.claims breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_environment-claims_digest",
   "text": "changing layer_environment.claims_digest breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_environment-depends_on",
   "text": "changing layer_environment.depends_on breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_environment-governance_epoch",
   "text": "changing layer_environment.governance_epoch breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_environment-grants_authority",
   "text": "changing layer_environment.grants_authority breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_environment-issued_at",
   "text": "changing layer_environment.issued_at breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_environment-kind",
   "text": "changing layer_environment.kind breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_environment-not_after",
   "text": "changing layer_environment.not_after breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_environment-proof_version",
   "text": "changing layer_environment.proof_version breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_environment-subject",
   "text": "changing layer_environment.subject breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_environment-trust_domain",
   "text": "changing layer_environment.trust_domain breaks verification"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_evidence-VALID",
   "text": "layer_evidence verifies under its pinned issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_evidence-NOAUTH",
   "text": "layer_evidence records grants_authority=false"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_evidence-WRONGKEY",
   "text": "layer_evidence fails under another issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_evidence-DOMAIN",
   "text": "layer_evidence fails under another signing domain"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_evidence-authority_attested",
   "text": "changing layer_evidence.authority_attested breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_evidence-basis",
   "text": "changing layer_evidence.basis breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_evidence-claims",
   "text": "changing layer_evidence.claims breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_evidence-claims_digest",
   "text": "changing layer_evidence.claims_digest breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_evidence-depends_on",
   "text": "changing layer_evidence.depends_on breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_evidence-governance_epoch",
   "text": "changing layer_evidence.governance_epoch breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_evidence-grants_authority",
   "text": "changing layer_evidence.grants_authority breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_evidence-issued_at",
   "text": "changing layer_evidence.issued_at breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_evidence-kind",
   "text": "changing layer_evidence.kind breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_evidence-not_after",
   "text": "changing layer_evidence.not_after breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_evidence-proof_version",
   "text": "changing layer_evidence.proof_version breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_evidence-subject",
   "text": "changing layer_evidence.subject breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_evidence-trust_domain",
   "text": "changing layer_evidence.trust_domain breaks verification"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_execution-VALID",
   "text": "layer_execution verifies under its pinned issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_execution-NOAUTH",
   "text": "layer_execution records grants_authority=false"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_execution-WRONGKEY",
   "text": "layer_execution fails under another issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_execution-DOMAIN",
   "text": "layer_execution fails under another signing domain"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_execution-authority_attested",
   "text": "changing layer_execution.authority_attested breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_execution-basis",
   "text": "changing layer_execution.basis breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_execution-claims",
   "text": "changing layer_execution.claims breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_execution-claims_digest",
   "text": "changing layer_execution.claims_digest breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_execution-depends_on",
   "text": "changing layer_execution.depends_on breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_execution-governance_epoch",
   "text": "changing layer_execution.governance_epoch breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_execution-grants_authority",
   "text": "changing layer_execution.grants_authority breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_execution-issued_at",
   "text": "changing layer_execution.issued_at breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_execution-kind",
   "text": "changing layer_execution.kind breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_execution-not_after",
   "text": "changing layer_execution.not_after breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_execution-proof_version",
   "text": "changing layer_execution.proof_version breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_execution-subject",
   "text": "changing layer_execution.subject breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_execution-trust_domain",
   "text": "changing layer_execution.trust_domain breaks verification"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_federation-VALID",
   "text": "layer_federation verifies under its pinned issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_federation-NOAUTH",
   "text": "layer_federation records grants_authority=false"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_federation-WRONGKEY",
   "text": "layer_federation fails under another issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_federation-DOMAIN",
   "text": "layer_federation fails under another signing domain"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_federation-authority_attested",
   "text": "changing layer_federation.authority_attested breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_federation-basis",
   "text": "changing layer_federation.basis breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_federation-claims",
   "text": "changing layer_federation.claims breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_federation-claims_digest",
   "text": "changing layer_federation.claims_digest breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_federation-depends_on",
   "text": "changing layer_federation.depends_on breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_federation-governance_epoch",
   "text": "changing layer_federation.governance_epoch breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_federation-grants_authority",
   "text": "changing layer_federation.grants_authority breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_federation-issued_at",
   "text": "changing layer_federation.issued_at breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_federation-kind",
   "text": "changing layer_federation.kind breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_federation-not_after",
   "text": "changing layer_federation.not_after breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_federation-proof_version",
   "text": "changing layer_federation.proof_version breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_federation-subject",
   "text": "changing layer_federation.subject breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_federation-trust_domain",
   "text": "changing layer_federation.trust_domain breaks verification"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_governability-VALID",
   "text": "layer_governability verifies under its pinned issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_governability-NOAUTH",
   "text": "layer_governability records grants_authority=false"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_governability-WRONGKEY",
   "text": "layer_governability fails under another issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_governability-DOMAIN",
   "text": "layer_governability fails under another signing domain"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_governability-authority_attested",
   "text": "changing layer_governability.authority_attested breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_governability-basis",
   "text": "changing layer_governability.basis breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_governability-claims",
   "text": "changing layer_governability.claims breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_governability-claims_digest",
   "text": "changing layer_governability.claims_digest breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_governability-depends_on",
   "text": "changing layer_governability.depends_on breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_governability-governance_epoch",
   "text": "changing layer_governability.governance_epoch breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_governability-grants_authority",
   "text": "changing layer_governability.grants_authority breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_governability-issued_at",
   "text": "changing layer_governability.issued_at breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_governability-kind",
   "text": "changing layer_governability.kind breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_governability-not_after",
   "text": "changing layer_governability.not_after breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_governability-proof_version",
   "text": "changing layer_governability.proof_version breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_governability-subject",
   "text": "changing layer_governability.subject breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_governability-trust_domain",
   "text": "changing layer_governability.trust_domain breaks verification"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_identity-VALID",
   "text": "layer_identity verifies under its pinned issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_identity-NOAUTH",
   "text": "layer_identity records grants_authority=false"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_identity-WRONGKEY",
   "text": "layer_identity fails under another issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_identity-DOMAIN",
   "text": "layer_identity fails under another signing domain"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_identity-authority_attested",
   "text": "changing layer_identity.authority_attested breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_identity-basis",
   "text": "changing layer_identity.basis breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_identity-claims",
   "text": "changing layer_identity.claims breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_identity-claims_digest",
   "text": "changing layer_identity.claims_digest breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_identity-depends_on",
   "text": "changing layer_identity.depends_on breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_identity-governance_epoch",
   "text": "changing layer_identity.governance_epoch breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_identity-grants_authority",
   "text": "changing layer_identity.grants_authority breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_identity-issued_at",
   "text": "changing layer_identity.issued_at breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_identity-kind",
   "text": "changing layer_identity.kind breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_identity-not_after",
   "text": "changing layer_identity.not_after breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_identity-proof_version",
   "text": "changing layer_identity.proof_version breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_identity-subject",
   "text": "changing layer_identity.subject breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_identity-trust_domain",
   "text": "changing layer_identity.trust_domain breaks verification"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_migration-VALID",
   "text": "layer_migration verifies under its pinned issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_migration-NOAUTH",
   "text": "layer_migration records grants_authority=false"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_migration-WRONGKEY",
   "text": "layer_migration fails under another issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_migration-DOMAIN",
   "text": "layer_migration fails under another signing domain"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_migration-authority_attested",
   "text": "changing layer_migration.authority_attested breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_migration-basis",
   "text": "changing layer_migration.basis breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_migration-claims",
   "text": "changing layer_migration.claims breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_migration-claims_digest",
   "text": "changing layer_migration.claims_digest breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_migration-depends_on",
   "text": "changing layer_migration.depends_on breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_migration-governance_epoch",
   "text": "changing layer_migration.governance_epoch breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_migration-grants_authority",
   "text": "changing layer_migration.grants_authority breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_migration-issued_at",
   "text": "changing layer_migration.issued_at breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_migration-kind",
   "text": "changing layer_migration.kind breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_migration-not_after",
   "text": "changing layer_migration.not_after breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_migration-proof_version",
   "text": "changing layer_migration.proof_version breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_migration-subject",
   "text": "changing layer_migration.subject breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_migration-trust_domain",
   "text": "changing layer_migration.trust_domain breaks verification"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_outcome-VALID",
   "text": "layer_outcome verifies under its pinned issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_outcome-NOAUTH",
   "text": "layer_outcome records grants_authority=false"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_outcome-WRONGKEY",
   "text": "layer_outcome fails under another issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_outcome-DOMAIN",
   "text": "layer_outcome fails under another signing domain"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_outcome-authority_attested",
   "text": "changing layer_outcome.authority_attested breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_outcome-basis",
   "text": "changing layer_outcome.basis breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_outcome-claims",
   "text": "changing layer_outcome.claims breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_outcome-claims_digest",
   "text": "changing layer_outcome.claims_digest breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_outcome-depends_on",
   "text": "changing layer_outcome.depends_on breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_outcome-governance_epoch",
   "text": "changing layer_outcome.governance_epoch breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_outcome-grants_authority",
   "text": "changing layer_outcome.grants_authority breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_outcome-issued_at",
   "text": "changing layer_outcome.issued_at breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_outcome-kind",
   "text": "changing layer_outcome.kind breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_outcome-not_after",
   "text": "changing layer_outcome.not_after breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_outcome-proof_version",
   "text": "changing layer_outcome.proof_version breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_outcome-subject",
   "text": "changing layer_outcome.subject breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_outcome-trust_domain",
   "text": "changing layer_outcome.trust_domain breaks verification"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_policy-VALID",
   "text": "layer_policy verifies under its pinned issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_policy-NOAUTH",
   "text": "layer_policy records grants_authority=false"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_policy-WRONGKEY",
   "text": "layer_policy fails under another issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_policy-DOMAIN",
   "text": "layer_policy fails under another signing domain"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_policy-authority_attested",
   "text": "changing layer_policy.authority_attested breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_policy-basis",
   "text": "changing layer_policy.basis breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_policy-claims",
   "text": "changing layer_policy.claims breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_policy-claims_digest",
   "text": "changing layer_policy.claims_digest breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_policy-depends_on",
   "text": "changing layer_policy.depends_on breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_policy-governance_epoch",
   "text": "changing layer_policy.governance_epoch breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_policy-grants_authority",
   "text": "changing layer_policy.grants_authority breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_policy-issued_at",
   "text": "changing layer_policy.issued_at breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_policy-kind",
   "text": "changing layer_policy.kind breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_policy-not_after",
   "text": "changing layer_policy.not_after breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_policy-proof_version",
   "text": "changing layer_policy.proof_version breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_policy-subject",
   "text": "changing layer_policy.subject breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_policy-trust_domain",
   "text": "changing layer_policy.trust_domain breaks verification"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_recovery-VALID",
   "text": "layer_recovery verifies under its pinned issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_recovery-NOAUTH",
   "text": "layer_recovery records grants_authority=false"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_recovery-WRONGKEY",
   "text": "layer_recovery fails under another issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_recovery-DOMAIN",
   "text": "layer_recovery fails under another signing domain"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_recovery-authority_attested",
   "text": "changing layer_recovery.authority_attested breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_recovery-basis",
   "text": "changing layer_recovery.basis breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_recovery-claims",
   "text": "changing layer_recovery.claims breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_recovery-claims_digest",
   "text": "changing layer_recovery.claims_digest breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_recovery-depends_on",
   "text": "changing layer_recovery.depends_on breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_recovery-governance_epoch",
   "text": "changing layer_recovery.governance_epoch breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_recovery-grants_authority",
   "text": "changing layer_recovery.grants_authority breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_recovery-issued_at",
   "text": "changing layer_recovery.issued_at breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_recovery-kind",
   "text": "changing layer_recovery.kind breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_recovery-not_after",
   "text": "changing layer_recovery.not_after breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_recovery-proof_version",
   "text": "changing layer_recovery.proof_version breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_recovery-subject",
   "text": "changing layer_recovery.subject breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_recovery-trust_domain",
   "text": "changing layer_recovery.trust_domain breaks verification"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_revocation-VALID",
   "text": "layer_revocation verifies under its pinned issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_revocation-NOAUTH",
   "text": "layer_revocation records grants_authority=false"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_revocation-WRONGKEY",
   "text": "layer_revocation fails under another issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_revocation-DOMAIN",
   "text": "layer_revocation fails under another signing domain"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_revocation-authority_attested",
   "text": "changing layer_revocation.authority_attested breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_revocation-basis",
   "text": "changing layer_revocation.basis breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_revocation-claims",
   "text": "changing layer_revocation.claims breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_revocation-claims_digest",
   "text": "changing layer_revocation.claims_digest breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_revocation-depends_on",
   "text": "changing layer_revocation.depends_on breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_revocation-governance_epoch",
   "text": "changing layer_revocation.governance_epoch breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_revocation-grants_authority",
   "text": "changing layer_revocation.grants_authority breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_revocation-issued_at",
   "text": "changing layer_revocation.issued_at breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_revocation-kind",
   "text": "changing layer_revocation.kind breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_revocation-not_after",
   "text": "changing layer_revocation.not_after breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_revocation-proof_version",
   "text": "changing layer_revocation.proof_version breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_revocation-subject",
   "text": "changing layer_revocation.subject breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_revocation-trust_domain",
   "text": "changing layer_revocation.trust_domain breaks verification"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_risk-VALID",
   "text": "layer_risk verifies under its pinned issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_risk-NOAUTH",
   "text": "layer_risk records grants_authority=false"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_risk-WRONGKEY",
   "text": "layer_risk fails under another issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-layer_risk-DOMAIN",
   "text": "layer_risk fails under another signing domain"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_risk-authority_attested",
   "text": "changing layer_risk.authority_attested breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_risk-basis",
   "text": "changing layer_risk.basis breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_risk-claims",
   "text": "changing layer_risk.claims breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_risk-claims_digest",
   "text": "changing layer_risk.claims_digest breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_risk-depends_on",
   "text": "changing layer_risk.depends_on breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_risk-governance_epoch",
   "text": "changing layer_risk.governance_epoch breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_risk-grants_authority",
   "text": "changing layer_risk.grants_authority breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_risk-issued_at",
   "text": "changing layer_risk.issued_at breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_risk-kind",
   "text": "changing layer_risk.kind breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_risk-not_after",
   "text": "changing layer_risk.not_after breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_risk-proof_version",
   "text": "changing layer_risk.proof_version breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_risk-subject",
   "text": "changing layer_risk.subject breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-layer_risk-trust_domain",
   "text": "changing layer_risk.trust_domain breaks verification"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-log_checkpoint-VALID",
   "text": "log_checkpoint verifies under its pinned issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-log_checkpoint-NOAUTH",
   "text": "log_checkpoint records grants_authority=false"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-log_checkpoint-WRONGKEY",
   "text": "log_checkpoint fails under another issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-log_checkpoint-DOMAIN",
   "text": "log_checkpoint fails under another signing domain"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-log_checkpoint-at",
   "text": "changing log_checkpoint.at breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-log_checkpoint-grants_authority",
   "text": "changing log_checkpoint.grants_authority breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-log_checkpoint-root",
   "text": "changing log_checkpoint.root breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-log_checkpoint-size",
   "text": "changing log_checkpoint.size breaks verification"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-manifest-VALID",
   "text": "manifest verifies under its pinned issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-manifest-NOAUTH",
   "text": "manifest records grants_authority=false"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-manifest-WRONGKEY",
   "text": "manifest fails under another issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-manifest-DOMAIN",
   "text": "manifest fails under another signing domain"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-manifest-authorization_models",
   "text": "changing manifest.authorization_models breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-manifest-delegation_models",
   "text": "changing manifest.delegation_models breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-manifest-enforcement_boundaries",
   "text": "changing manifest.enforcement_boundaries breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-manifest-evidence_models",
   "text": "changing manifest.evidence_models breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-manifest-grants_authority",
   "text": "changing manifest.grants_authority breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-manifest-identity",
   "text": "changing manifest.identity breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-manifest-limitations",
   "text": "changing manifest.limitations breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-manifest-proof_formats",
   "text": "changing manifest.proof_formats breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-manifest-revocation_models",
   "text": "changing manifest.revocation_models breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-manifest-runtime_requirements",
   "text": "changing manifest.runtime_requirements breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-manifest-safety_certificate",
   "text": "changing manifest.safety_certificate breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-manifest-security_properties",
   "text": "changing manifest.security_properties breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-manifest-supported_governance",
   "text": "changing manifest.supported_governance breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-manifest-supported_protocols",
   "text": "changing manifest.supported_protocols breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-manifest-trust_score",
   "text": "changing manifest.trust_score breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-manifest-unknowns",
   "text": "changing manifest.unknowns breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-manifest-version",
   "text": "changing manifest.version breaks verification"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-negotiation-VALID",
   "text": "negotiation verifies under its pinned issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-negotiation-NOAUTH",
   "text": "negotiation records grants_authority=false"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-negotiation-WRONGKEY",
   "text": "negotiation fails under another issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-negotiation-DOMAIN",
   "text": "negotiation fails under another signing domain"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-negotiation-fabricated",
   "text": "changing negotiation.fabricated breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-negotiation-grants_authority",
   "text": "changing negotiation.grants_authority breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-negotiation-requirements",
   "text": "changing negotiation.requirements breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-negotiation-result",
   "text": "changing negotiation.result breaks verification"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-receipt-VALID",
   "text": "receipt verifies under its pinned issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-receipt-NOAUTH",
   "text": "receipt records grants_authority=false"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-receipt-WRONGKEY",
   "text": "receipt fails under another issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-receipt-DOMAIN",
   "text": "receipt fails under another signing domain"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-receipt-action_digest",
   "text": "changing receipt.action_digest breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-receipt-authorization_digest",
   "text": "changing receipt.authorization_digest breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-receipt-decision_digest",
   "text": "changing receipt.decision_digest breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-receipt-evidence_refs",
   "text": "changing receipt.evidence_refs breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-receipt-execution_digest",
   "text": "changing receipt.execution_digest breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-receipt-governance_epoch",
   "text": "changing receipt.governance_epoch breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-receipt-grants_authority",
   "text": "changing receipt.grants_authority breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-receipt-prev",
   "text": "changing receipt.prev breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-receipt-result_digest",
   "text": "changing receipt.result_digest breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-receipt-retroactive_authorization",
   "text": "changing receipt.retroactive_authorization breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-receipt-seq",
   "text": "changing receipt.seq breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-receipt-signer",
   "text": "changing receipt.signer breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-receipt-timestamp",
   "text": "changing receipt.timestamp breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-receipt-verifier_status",
   "text": "changing receipt.verifier_status breaks verification"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-revocation-VALID",
   "text": "revocation verifies under its pinned issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-revocation-NOAUTH",
   "text": "revocation records grants_authority=false"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-revocation-WRONGKEY",
   "text": "revocation fails under another issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-revocation-DOMAIN",
   "text": "revocation fails under another signing domain"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-revocation-at",
   "text": "changing revocation.at breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-revocation-grants_authority",
   "text": "changing revocation.grants_authority breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-revocation-kind",
   "text": "changing revocation.kind breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-revocation-reason",
   "text": "changing revocation.reason breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-revocation-target",
   "text": "changing revocation.target breaks verification"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-translation-VALID",
   "text": "translation verifies under its pinned issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-translation-NOAUTH",
   "text": "translation records grants_authority=false"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-translation-WRONGKEY",
   "text": "translation fails under another issuer"
  },
  {
   "group": "signed_object",
   "id": "I38-OBJ-translation-DOMAIN",
   "text": "translation fails under another signing domain"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-translation-fates",
   "text": "changing translation.fates breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-translation-grants_authority",
   "text": "changing translation.grants_authority breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-translation-how",
   "text": "changing translation.how breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-translation-lossy",
   "text": "changing translation.lossy breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-translation-scope_broadened",
   "text": "changing translation.scope_broadened breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-translation-status",
   "text": "changing translation.status breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-translation-target",
   "text": "changing translation.target breaks verification"
  },
  {
   "group": "field_tamper",
   "id": "I38-FIELD-translation-translated",
   "text": "changing translation.translated breaks verification"
  },
  {
   "group": "composition",
   "id": "I38-COMPOSE-1",
   "text": "composition over random components (seed family 1) is weakest + intersected"
  },
  {
   "group": "composition",
   "id": "I38-COMPOSE-2",
   "text": "composition over random components (seed family 2) is weakest + intersected"
  },
  {
   "group": "composition",
   "id": "I38-COMPOSE-3",
   "text": "composition over random components (seed family 3) is weakest + intersected"
  },
  {
   "group": "composition",
   "id": "I38-COMPOSE-4",
   "text": "composition over random components (seed family 4) is weakest + intersected"
  },
  {
   "group": "composition",
   "id": "I38-COMPOSE-5",
   "text": "composition over random components (seed family 5) is weakest + intersected"
  },
  {
   "group": "composition",
   "id": "I38-COMPOSE-6",
   "text": "composition over random components (seed family 6) is weakest + intersected"
  },
  {
   "group": "composition",
   "id": "I38-COMPOSE-7",
   "text": "composition over random components (seed family 7) is weakest + intersected"
  },
  {
   "group": "composition",
   "id": "I38-COMPOSE-8",
   "text": "composition over random components (seed family 8) is weakest + intersected"
  },
  {
   "group": "translation",
   "id": "I38-TR-SCOPE-oauth_introspection",
   "text": "oauth_introspection: translated scope never broadens"
  },
  {
   "group": "translation",
   "id": "I38-TR-STATUS-oauth_introspection",
   "text": "oauth_introspection: no non-VALID status becomes active"
  },
  {
   "group": "translation",
   "id": "I38-TR-SCOPE-oidc_claims",
   "text": "oidc_claims: translated scope never broadens"
  },
  {
   "group": "translation",
   "id": "I38-TR-STATUS-oidc_claims",
   "text": "oidc_claims: no non-VALID status becomes active"
  },
  {
   "group": "translation",
   "id": "I38-TR-SCOPE-mcp_auth_context",
   "text": "mcp_auth_context: translated scope never broadens"
  },
  {
   "group": "translation",
   "id": "I38-TR-STATUS-mcp_auth_context",
   "text": "mcp_auth_context: no non-VALID status becomes active"
  },
  {
   "group": "translation",
   "id": "I38-TR-SCOPE-a2a_context",
   "text": "a2a_context: translated scope never broadens"
  },
  {
   "group": "translation",
   "id": "I38-TR-STATUS-a2a_context",
   "text": "a2a_context: no non-VALID status becomes active"
  },
  {
   "group": "translation",
   "id": "I38-TR-SCOPE-enterprise_iam",
   "text": "enterprise_iam: translated scope never broadens"
  },
  {
   "group": "translation",
   "id": "I38-TR-STATUS-enterprise_iam",
   "text": "enterprise_iam: no non-VALID status becomes active"
  },
  {
   "group": "translation",
   "id": "I38-TR-SCOPE-capability_token",
   "text": "capability_token: translated scope never broadens"
  },
  {
   "group": "translation",
   "id": "I38-TR-STATUS-capability_token",
   "text": "capability_token: no non-VALID status becomes active"
  },
  {
   "group": "translation",
   "id": "I38-TR-SCOPE-machine_contract",
   "text": "machine_contract: translated scope never broadens"
  },
  {
   "group": "translation",
   "id": "I38-TR-STATUS-machine_contract",
   "text": "machine_contract: no non-VALID status becomes active"
  },
  {
   "group": "translation",
   "id": "I38-TR-SCOPE-audit_record",
   "text": "audit_record: translated scope never broadens"
  },
  {
   "group": "translation",
   "id": "I38-TR-STATUS-audit_record",
   "text": "audit_record: no non-VALID status becomes active"
  },
  {
   "group": "status",
   "id": "I38-STATUS-GENERATED",
   "text": "transitions from GENERATED obey the non-collapsing model"
  },
  {
   "group": "status",
   "id": "I38-STATUS-SIGNED",
   "text": "transitions from SIGNED obey the non-collapsing model"
  },
  {
   "group": "status",
   "id": "I38-STATUS-VERIFIED",
   "text": "transitions from VERIFIED obey the non-collapsing model"
  },
  {
   "group": "status",
   "id": "I38-STATUS-PARTIALLY_VERIFIED",
   "text": "transitions from PARTIALLY_VERIFIED obey the non-collapsing model"
  },
  {
   "group": "status",
   "id": "I38-STATUS-REPRODUCIBLE",
   "text": "transitions from REPRODUCIBLE obey the non-collapsing model"
  },
  {
   "group": "status",
   "id": "I38-STATUS-PUBLICLY_VERIFIED",
   "text": "transitions from PUBLICLY_VERIFIED obey the non-collapsing model"
  },
  {
   "group": "status",
   "id": "I38-STATUS-STALE",
   "text": "transitions from STALE obey the non-collapsing model"
  },
  {
   "group": "status",
   "id": "I38-STATUS-REVOKED",
   "text": "transitions from REVOKED obey the non-collapsing model"
  },
  {
   "group": "status",
   "id": "I38-STATUS-INVALID",
   "text": "transitions from INVALID obey the non-collapsing model"
  },
  {
   "group": "status",
   "id": "I38-STATUS-INCOMPLETE",
   "text": "transitions from INCOMPLETE obey the non-collapsing model"
  },
  {
   "group": "status",
   "id": "I38-STATUS-SIMULATED",
   "text": "transitions from SIMULATED obey the non-collapsing model"
  },
  {
   "group": "status",
   "id": "I38-STATUS-OBSERVED_ONLY",
   "text": "transitions from OBSERVED_ONLY obey the non-collapsing model"
  },
  {
   "group": "status",
   "id": "I38-STATUS-ENFORCED",
   "text": "transitions from ENFORCED obey the non-collapsing model"
  },
  {
   "group": "status",
   "id": "I38-STATUS-UNKNOWN",
   "text": "transitions from UNKNOWN obey the non-collapsing model"
  },
  {
   "group": "status",
   "id": "I38-STATUS-SUPERSEDED",
   "text": "transitions from SUPERSEDED obey the non-collapsing model"
  },
  {
   "group": "freshness",
   "id": "I38-FRESH-expired_authority",
   "text": "expired_authority always makes a proof STALE"
  },
  {
   "group": "freshness",
   "id": "I38-FRESH-policy_change",
   "text": "policy_change always makes a proof STALE"
  },
  {
   "group": "freshness",
   "id": "I38-FRESH-identity_rotation",
   "text": "identity_rotation always makes a proof STALE"
  },
  {
   "group": "freshness",
   "id": "I38-FRESH-capability_mutation",
   "text": "capability_mutation always makes a proof STALE"
  },
  {
   "group": "freshness",
   "id": "I38-FRESH-runtime_migration",
   "text": "runtime_migration always makes a proof STALE"
  },
  {
   "group": "freshness",
   "id": "I38-FRESH-environment_drift",
   "text": "environment_drift always makes a proof STALE"
  },
  {
   "group": "freshness",
   "id": "I38-FRESH-trust_domain_change",
   "text": "trust_domain_change always makes a proof STALE"
  },
  {
   "group": "freshness",
   "id": "I38-FRESH-risk_escalation",
   "text": "risk_escalation always makes a proof STALE"
  },
  {
   "group": "freshness",
   "id": "I38-FRESH-trajectory_drift",
   "text": "trajectory_drift always makes a proof STALE"
  },
  {
   "group": "freshness",
   "id": "I38-FRESH-evidence_revocation",
   "text": "evidence_revocation always makes a proof STALE"
  },
  {
   "group": "freshness",
   "id": "I38-FRESH-delegation_revocation",
   "text": "delegation_revocation always makes a proof STALE"
  },
  {
   "group": "freshness",
   "id": "I38-FRESH-governance_epoch_change",
   "text": "governance_epoch_change always makes a proof STALE"
  },
  {
   "group": "freshness",
   "id": "I38-FRESH-execution_boundary_change",
   "text": "execution_boundary_change always makes a proof STALE"
  },
  {
   "group": "freshness",
   "id": "I38-FRESH-model_runtime_substitution",
   "text": "model_runtime_substitution always makes a proof STALE"
  },
  {
   "group": "freshness",
   "id": "I38-FRESH-time_window_expiration",
   "text": "time_window_expiration always makes a proof STALE"
  },
  {
   "group": "revocation",
   "id": "I38-REV-proof",
   "text": "a proof revocation of the subject always revokes its proofs"
  },
  {
   "group": "revocation",
   "id": "I38-REV-authority",
   "text": "a authority revocation of the subject always revokes its proofs"
  },
  {
   "group": "revocation",
   "id": "I38-REV-identity",
   "text": "a identity revocation of the subject always revokes its proofs"
  },
  {
   "group": "revocation",
   "id": "I38-REV-delegation",
   "text": "a delegation revocation of the subject always revokes its proofs"
  },
  {
   "group": "revocation",
   "id": "I38-REV-capability",
   "text": "a capability revocation of the subject always revokes its proofs"
  },
  {
   "group": "revocation",
   "id": "I38-REV-policy",
   "text": "a policy revocation of the subject always revokes its proofs"
  },
  {
   "group": "revocation",
   "id": "I38-REV-evidence",
   "text": "a evidence revocation of the subject always revokes its proofs"
  },
  {
   "group": "revocation",
   "id": "I38-REV-runtime",
   "text": "a runtime revocation of the subject always revokes its proofs"
  },
  {
   "group": "revocation",
   "id": "I38-REV-environment",
   "text": "a environment revocation of the subject always revokes its proofs"
  },
  {
   "group": "revocation",
   "id": "I38-REV-certificate",
   "text": "a certificate revocation of the subject always revokes its proofs"
  },
  {
   "group": "revocation",
   "id": "I38-REV-trust_domain",
   "text": "a trust_domain revocation of the subject always revokes its proofs"
  },
  {
   "group": "trust_state",
   "id": "I38-TRUST-identity_integrity",
   "text": "a weak identity_integrity is always the visible weakest"
  },
  {
   "group": "trust_state",
   "id": "I38-TRUST-authority_integrity",
   "text": "a weak authority_integrity is always the visible weakest"
  },
  {
   "group": "trust_state",
   "id": "I38-TRUST-capability_integrity",
   "text": "a weak capability_integrity is always the visible weakest"
  },
  {
   "group": "trust_state",
   "id": "I38-TRUST-delegation_integrity",
   "text": "a weak delegation_integrity is always the visible weakest"
  },
  {
   "group": "trust_state",
   "id": "I38-TRUST-policy_integrity",
   "text": "a weak policy_integrity is always the visible weakest"
  },
  {
   "group": "trust_state",
   "id": "I38-TRUST-evidence_integrity",
   "text": "a weak evidence_integrity is always the visible weakest"
  },
  {
   "group": "trust_state",
   "id": "I38-TRUST-execution_integrity",
   "text": "a weak execution_integrity is always the visible weakest"
  },
  {
   "group": "trust_state",
   "id": "I38-TRUST-environment_integrity",
   "text": "a weak environment_integrity is always the visible weakest"
  },
  {
   "group": "trust_state",
   "id": "I38-TRUST-proof_integrity",
   "text": "a weak proof_integrity is always the visible weakest"
  },
  {
   "group": "trust_state",
   "id": "I38-TRUST-enforcement_integrity",
   "text": "a weak enforcement_integrity is always the visible weakest"
  },
  {
   "group": "trust_state",
   "id": "I38-TRUST-revocation_integrity",
   "text": "a weak revocation_integrity is always the visible weakest"
  },
  {
   "group": "trust_state",
   "id": "I38-TRUST-continuity_integrity",
   "text": "a weak continuity_integrity is always the visible weakest"
  },
  {
   "group": "trust_state",
   "id": "I38-TRUST-conformance_integrity",
   "text": "a weak conformance_integrity is always the visible weakest"
  },
  {
   "group": "protocol",
   "id": "I38-GIP-mcp",
   "text": "GIP over mcp: stripped/downgraded/tampered never CARRIED"
  },
  {
   "group": "protocol",
   "id": "I38-GIP-a2a",
   "text": "GIP over a2a: stripped/downgraded/tampered never CARRIED"
  },
  {
   "group": "protocol",
   "id": "I38-GIP-http",
   "text": "GIP over http: stripped/downgraded/tampered never CARRIED"
  },
  {
   "group": "protocol",
   "id": "I38-GIP-rest",
   "text": "GIP over rest: stripped/downgraded/tampered never CARRIED"
  },
  {
   "group": "protocol",
   "id": "I38-GIP-grpc",
   "text": "GIP over grpc: stripped/downgraded/tampered never CARRIED"
  },
  {
   "group": "protocol",
   "id": "I38-GIP-websocket",
   "text": "GIP over websocket: stripped/downgraded/tampered never CARRIED"
  },
  {
   "group": "protocol",
   "id": "I38-GIP-event_bus",
   "text": "GIP over event_bus: stripped/downgraded/tampered never CARRIED"
  },
  {
   "group": "protocol",
   "id": "I38-GIP-local_ipc",
   "text": "GIP over local_ipc: stripped/downgraded/tampered never CARRIED"
  },
  {
   "group": "protocol",
   "id": "I38-GIP-cli",
   "text": "GIP over cli: stripped/downgraded/tampered never CARRIED"
  },
  {
   "group": "protocol",
   "id": "I38-GIP-browser",
   "text": "GIP over browser: stripped/downgraded/tampered never CARRIED"
  },
  {
   "group": "protocol",
   "id": "I38-GIP-computer_use",
   "text": "GIP over computer_use: stripped/downgraded/tampered never CARRIED"
  },
  {
   "group": "protocol",
   "id": "I38-GIP-cloud_api",
   "text": "GIP over cloud_api: stripped/downgraded/tampered never CARRIED"
  },
  {
   "group": "federation",
   "id": "I38-FED-1",
   "text": "federated recognition within allowance (family 1)"
  },
  {
   "group": "handshake",
   "id": "I38-HS-1",
   "text": "handshake authority within both sides (family 1)"
  },
  {
   "group": "federation",
   "id": "I38-FED-2",
   "text": "federated recognition within allowance (family 2)"
  },
  {
   "group": "handshake",
   "id": "I38-HS-2",
   "text": "handshake authority within both sides (family 2)"
  },
  {
   "group": "federation",
   "id": "I38-FED-3",
   "text": "federated recognition within allowance (family 3)"
  },
  {
   "group": "handshake",
   "id": "I38-HS-3",
   "text": "handshake authority within both sides (family 3)"
  },
  {
   "group": "federation",
   "id": "I38-FED-4",
   "text": "federated recognition within allowance (family 4)"
  },
  {
   "group": "handshake",
   "id": "I38-HS-4",
   "text": "handshake authority within both sides (family 4)"
  },
  {
   "group": "federation",
   "id": "I38-FED-5",
   "text": "federated recognition within allowance (family 5)"
  },
  {
   "group": "handshake",
   "id": "I38-HS-5",
   "text": "handshake authority within both sides (family 5)"
  },
  {
   "group": "dependency",
   "id": "I38-DEP-INVALID-IDENTITY",
   "text": "a forged IDENTITY dependency always invalidates the action proof"
  },
  {
   "group": "proof_confusion",
   "id": "I38-CONFUSE-IDENTITY",
   "text": "any other proof in the IDENTITY slot is never VALID"
  },
  {
   "group": "proof_confusion",
   "id": "I38-CONFUSE-ATTR-IDENTITY",
   "text": "a IDENTITY layer for another subject/epoch/domain is INVALID"
  },
  {
   "group": "freshness",
   "id": "I38-STALEDEP-IDENTITY",
   "text": "a stale IDENTITY dependency makes the proof STALE"
  },
  {
   "group": "revocation",
   "id": "I38-REVDEP-IDENTITY",
   "text": "a revoked IDENTITY dependency makes the proof REVOKED"
  },
  {
   "group": "dependency",
   "id": "I38-DEP-INVALID-CAPABILITY",
   "text": "a forged CAPABILITY dependency always invalidates the action proof"
  },
  {
   "group": "proof_confusion",
   "id": "I38-CONFUSE-CAPABILITY",
   "text": "any other proof in the CAPABILITY slot is never VALID"
  },
  {
   "group": "proof_confusion",
   "id": "I38-CONFUSE-ATTR-CAPABILITY",
   "text": "a CAPABILITY layer for another subject/epoch/domain is INVALID"
  },
  {
   "group": "freshness",
   "id": "I38-STALEDEP-CAPABILITY",
   "text": "a stale CAPABILITY dependency makes the proof STALE"
  },
  {
   "group": "revocation",
   "id": "I38-REVDEP-CAPABILITY",
   "text": "a revoked CAPABILITY dependency makes the proof REVOKED"
  },
  {
   "group": "dependency",
   "id": "I38-DEP-INVALID-DELEGATION",
   "text": "a forged DELEGATION dependency always invalidates the action proof"
  },
  {
   "group": "proof_confusion",
   "id": "I38-CONFUSE-DELEGATION",
   "text": "any other proof in the DELEGATION slot is never VALID"
  },
  {
   "group": "proof_confusion",
   "id": "I38-CONFUSE-ATTR-DELEGATION",
   "text": "a DELEGATION layer for another subject/epoch/domain is INVALID"
  },
  {
   "group": "freshness",
   "id": "I38-STALEDEP-DELEGATION",
   "text": "a stale DELEGATION dependency makes the proof STALE"
  },
  {
   "group": "revocation",
   "id": "I38-REVDEP-DELEGATION",
   "text": "a revoked DELEGATION dependency makes the proof REVOKED"
  },
  {
   "group": "dependency",
   "id": "I38-DEP-INVALID-POLICY",
   "text": "a forged POLICY dependency always invalidates the action proof"
  },
  {
   "group": "proof_confusion",
   "id": "I38-CONFUSE-POLICY",
   "text": "any other proof in the POLICY slot is never VALID"
  },
  {
   "group": "proof_confusion",
   "id": "I38-CONFUSE-ATTR-POLICY",
   "text": "a POLICY layer for another subject/epoch/domain is INVALID"
  },
  {
   "group": "freshness",
   "id": "I38-STALEDEP-POLICY",
   "text": "a stale POLICY dependency makes the proof STALE"
  },
  {
   "group": "revocation",
   "id": "I38-REVDEP-POLICY",
   "text": "a revoked POLICY dependency makes the proof REVOKED"
  },
  {
   "group": "dependency",
   "id": "I38-DEP-INVALID-RISK",
   "text": "a forged RISK dependency always invalidates the action proof"
  },
  {
   "group": "proof_confusion",
   "id": "I38-CONFUSE-RISK",
   "text": "any other proof in the RISK slot is never VALID"
  },
  {
   "group": "proof_confusion",
   "id": "I38-CONFUSE-ATTR-RISK",
   "text": "a RISK layer for another subject/epoch/domain is INVALID"
  },
  {
   "group": "freshness",
   "id": "I38-STALEDEP-RISK",
   "text": "a stale RISK dependency makes the proof STALE"
  },
  {
   "group": "revocation",
   "id": "I38-REVDEP-RISK",
   "text": "a revoked RISK dependency makes the proof REVOKED"
  },
  {
   "group": "dependency",
   "id": "I38-DEP-INVALID-EVIDENCE",
   "text": "a forged EVIDENCE dependency always invalidates the action proof"
  },
  {
   "group": "proof_confusion",
   "id": "I38-CONFUSE-EVIDENCE",
   "text": "any other proof in the EVIDENCE slot is never VALID"
  },
  {
   "group": "proof_confusion",
   "id": "I38-CONFUSE-ATTR-EVIDENCE",
   "text": "a EVIDENCE layer for another subject/epoch/domain is INVALID"
  },
  {
   "group": "freshness",
   "id": "I38-STALEDEP-EVIDENCE",
   "text": "a stale EVIDENCE dependency makes the proof STALE"
  },
  {
   "group": "revocation",
   "id": "I38-REVDEP-EVIDENCE",
   "text": "a revoked EVIDENCE dependency makes the proof REVOKED"
  },
  {
   "group": "dependency",
   "id": "I38-DEP-INVALID-AUTHORIZATION",
   "text": "a forged AUTHORIZATION dependency always invalidates the action proof"
  },
  {
   "group": "proof_confusion",
   "id": "I38-CONFUSE-AUTHORIZATION",
   "text": "any other proof in the AUTHORIZATION slot is never VALID"
  },
  {
   "group": "proof_confusion",
   "id": "I38-CONFUSE-ATTR-AUTHORIZATION",
   "text": "a AUTHORIZATION layer for another subject/epoch/domain is INVALID"
  },
  {
   "group": "freshness",
   "id": "I38-STALEDEP-AUTHORIZATION",
   "text": "a stale AUTHORIZATION dependency makes the proof STALE"
  },
  {
   "group": "revocation",
   "id": "I38-REVDEP-AUTHORIZATION",
   "text": "a revoked AUTHORIZATION dependency makes the proof REVOKED"
  },
  {
   "group": "dependency",
   "id": "I38-DEP-INVALID-COMMIT",
   "text": "a forged COMMIT dependency always invalidates the action proof"
  },
  {
   "group": "proof_confusion",
   "id": "I38-CONFUSE-COMMIT",
   "text": "any other proof in the COMMIT slot is never VALID"
  },
  {
   "group": "proof_confusion",
   "id": "I38-CONFUSE-ATTR-COMMIT",
   "text": "a COMMIT layer for another subject/epoch/domain is INVALID"
  },
  {
   "group": "freshness",
   "id": "I38-STALEDEP-COMMIT",
   "text": "a stale COMMIT dependency makes the proof STALE"
  },
  {
   "group": "revocation",
   "id": "I38-REVDEP-COMMIT",
   "text": "a revoked COMMIT dependency makes the proof REVOKED"
  },
  {
   "group": "dependency",
   "id": "I38-DEP-INVALID-ENFORCEMENT",
   "text": "a forged ENFORCEMENT dependency always invalidates the action proof"
  },
  {
   "group": "proof_confusion",
   "id": "I38-CONFUSE-ENFORCEMENT",
   "text": "any other proof in the ENFORCEMENT slot is never VALID"
  },
  {
   "group": "proof_confusion",
   "id": "I38-CONFUSE-ATTR-ENFORCEMENT",
   "text": "a ENFORCEMENT layer for another subject/epoch/domain is INVALID"
  },
  {
   "group": "freshness",
   "id": "I38-STALEDEP-ENFORCEMENT",
   "text": "a stale ENFORCEMENT dependency makes the proof STALE"
  },
  {
   "group": "revocation",
   "id": "I38-REVDEP-ENFORCEMENT",
   "text": "a revoked ENFORCEMENT dependency makes the proof REVOKED"
  },
  {
   "group": "dependency",
   "id": "I38-DEP-INVALID-EXECUTION",
   "text": "a forged EXECUTION dependency always invalidates the action proof"
  },
  {
   "group": "proof_confusion",
   "id": "I38-CONFUSE-EXECUTION",
   "text": "any other proof in the EXECUTION slot is never VALID"
  },
  {
   "group": "proof_confusion",
   "id": "I38-CONFUSE-ATTR-EXECUTION",
   "text": "a EXECUTION layer for another subject/epoch/domain is INVALID"
  },
  {
   "group": "freshness",
   "id": "I38-STALEDEP-EXECUTION",
   "text": "a stale EXECUTION dependency makes the proof STALE"
  },
  {
   "group": "revocation",
   "id": "I38-REVDEP-EXECUTION",
   "text": "a revoked EXECUTION dependency makes the proof REVOKED"
  },
  {
   "group": "dependency",
   "id": "I38-DEP-INVALID-OUTCOME",
   "text": "a forged OUTCOME dependency always invalidates the action proof"
  },
  {
   "group": "proof_confusion",
   "id": "I38-CONFUSE-OUTCOME",
   "text": "any other proof in the OUTCOME slot is never VALID"
  },
  {
   "group": "proof_confusion",
   "id": "I38-CONFUSE-ATTR-OUTCOME",
   "text": "a OUTCOME layer for another subject/epoch/domain is INVALID"
  },
  {
   "group": "freshness",
   "id": "I38-STALEDEP-OUTCOME",
   "text": "a stale OUTCOME dependency makes the proof STALE"
  },
  {
   "group": "revocation",
   "id": "I38-REVDEP-OUTCOME",
   "text": "a revoked OUTCOME dependency makes the proof REVOKED"
  },
  {
   "group": "dependency",
   "id": "I38-DEP-INVALID-ENVIRONMENT",
   "text": "a forged ENVIRONMENT dependency always invalidates the action proof"
  },
  {
   "group": "proof_confusion",
   "id": "I38-CONFUSE-ENVIRONMENT",
   "text": "any other proof in the ENVIRONMENT slot is never VALID"
  },
  {
   "group": "proof_confusion",
   "id": "I38-CONFUSE-ATTR-ENVIRONMENT",
   "text": "a ENVIRONMENT layer for another subject/epoch/domain is INVALID"
  },
  {
   "group": "freshness",
   "id": "I38-STALEDEP-ENVIRONMENT",
   "text": "a stale ENVIRONMENT dependency makes the proof STALE"
  },
  {
   "group": "revocation",
   "id": "I38-REVDEP-ENVIRONMENT",
   "text": "a revoked ENVIRONMENT dependency makes the proof REVOKED"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-IDENTITY-OBSERVED",
   "text": "IDENTITY proof keeps basis OBSERVED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-IDENTITY-VERIFIED",
   "text": "IDENTITY proof keeps basis VERIFIED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-IDENTITY-DERIVED",
   "text": "IDENTITY proof keeps basis DERIVED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-IDENTITY-UNVERIFIED",
   "text": "IDENTITY proof keeps basis UNVERIFIED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-IDENTITY-COUNTERFACTUAL",
   "text": "IDENTITY proof keeps basis COUNTERFACTUAL as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-IDENTITY-SIMULATED",
   "text": "IDENTITY proof keeps basis SIMULATED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-IDENTITY-PREDICTED",
   "text": "IDENTITY proof keeps basis PREDICTED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-CAPABILITY-OBSERVED",
   "text": "CAPABILITY proof keeps basis OBSERVED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-CAPABILITY-VERIFIED",
   "text": "CAPABILITY proof keeps basis VERIFIED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-CAPABILITY-DERIVED",
   "text": "CAPABILITY proof keeps basis DERIVED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-CAPABILITY-UNVERIFIED",
   "text": "CAPABILITY proof keeps basis UNVERIFIED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-CAPABILITY-COUNTERFACTUAL",
   "text": "CAPABILITY proof keeps basis COUNTERFACTUAL as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-CAPABILITY-SIMULATED",
   "text": "CAPABILITY proof keeps basis SIMULATED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-CAPABILITY-PREDICTED",
   "text": "CAPABILITY proof keeps basis PREDICTED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-DELEGATION-OBSERVED",
   "text": "DELEGATION proof keeps basis OBSERVED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-DELEGATION-VERIFIED",
   "text": "DELEGATION proof keeps basis VERIFIED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-DELEGATION-DERIVED",
   "text": "DELEGATION proof keeps basis DERIVED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-DELEGATION-UNVERIFIED",
   "text": "DELEGATION proof keeps basis UNVERIFIED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-DELEGATION-COUNTERFACTUAL",
   "text": "DELEGATION proof keeps basis COUNTERFACTUAL as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-DELEGATION-SIMULATED",
   "text": "DELEGATION proof keeps basis SIMULATED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-DELEGATION-PREDICTED",
   "text": "DELEGATION proof keeps basis PREDICTED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-POLICY-OBSERVED",
   "text": "POLICY proof keeps basis OBSERVED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-POLICY-VERIFIED",
   "text": "POLICY proof keeps basis VERIFIED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-POLICY-DERIVED",
   "text": "POLICY proof keeps basis DERIVED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-POLICY-UNVERIFIED",
   "text": "POLICY proof keeps basis UNVERIFIED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-POLICY-COUNTERFACTUAL",
   "text": "POLICY proof keeps basis COUNTERFACTUAL as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-POLICY-SIMULATED",
   "text": "POLICY proof keeps basis SIMULATED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-POLICY-PREDICTED",
   "text": "POLICY proof keeps basis PREDICTED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-RISK-OBSERVED",
   "text": "RISK proof keeps basis OBSERVED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-RISK-VERIFIED",
   "text": "RISK proof keeps basis VERIFIED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-RISK-DERIVED",
   "text": "RISK proof keeps basis DERIVED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-RISK-UNVERIFIED",
   "text": "RISK proof keeps basis UNVERIFIED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-RISK-COUNTERFACTUAL",
   "text": "RISK proof keeps basis COUNTERFACTUAL as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-RISK-SIMULATED",
   "text": "RISK proof keeps basis SIMULATED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-RISK-PREDICTED",
   "text": "RISK proof keeps basis PREDICTED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-EVIDENCE-OBSERVED",
   "text": "EVIDENCE proof keeps basis OBSERVED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-EVIDENCE-VERIFIED",
   "text": "EVIDENCE proof keeps basis VERIFIED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-EVIDENCE-DERIVED",
   "text": "EVIDENCE proof keeps basis DERIVED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-EVIDENCE-UNVERIFIED",
   "text": "EVIDENCE proof keeps basis UNVERIFIED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-EVIDENCE-COUNTERFACTUAL",
   "text": "EVIDENCE proof keeps basis COUNTERFACTUAL as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-EVIDENCE-SIMULATED",
   "text": "EVIDENCE proof keeps basis SIMULATED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-EVIDENCE-PREDICTED",
   "text": "EVIDENCE proof keeps basis PREDICTED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-AUTHORIZATION-OBSERVED",
   "text": "AUTHORIZATION proof keeps basis OBSERVED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-AUTHORIZATION-VERIFIED",
   "text": "AUTHORIZATION proof keeps basis VERIFIED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-AUTHORIZATION-DERIVED",
   "text": "AUTHORIZATION proof keeps basis DERIVED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-AUTHORIZATION-UNVERIFIED",
   "text": "AUTHORIZATION proof keeps basis UNVERIFIED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-AUTHORIZATION-COUNTERFACTUAL",
   "text": "AUTHORIZATION proof keeps basis COUNTERFACTUAL as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-AUTHORIZATION-SIMULATED",
   "text": "AUTHORIZATION proof keeps basis SIMULATED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-AUTHORIZATION-PREDICTED",
   "text": "AUTHORIZATION proof keeps basis PREDICTED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-COMMIT-OBSERVED",
   "text": "COMMIT proof keeps basis OBSERVED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-COMMIT-VERIFIED",
   "text": "COMMIT proof keeps basis VERIFIED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-COMMIT-DERIVED",
   "text": "COMMIT proof keeps basis DERIVED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-COMMIT-UNVERIFIED",
   "text": "COMMIT proof keeps basis UNVERIFIED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-COMMIT-COUNTERFACTUAL",
   "text": "COMMIT proof keeps basis COUNTERFACTUAL as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-COMMIT-SIMULATED",
   "text": "COMMIT proof keeps basis SIMULATED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-COMMIT-PREDICTED",
   "text": "COMMIT proof keeps basis PREDICTED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-EXECUTION-OBSERVED",
   "text": "EXECUTION proof keeps basis OBSERVED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-EXECUTION-VERIFIED",
   "text": "EXECUTION proof keeps basis VERIFIED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-EXECUTION-DERIVED",
   "text": "EXECUTION proof keeps basis DERIVED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-EXECUTION-UNVERIFIED",
   "text": "EXECUTION proof keeps basis UNVERIFIED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-EXECUTION-COUNTERFACTUAL",
   "text": "EXECUTION proof keeps basis COUNTERFACTUAL as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-EXECUTION-SIMULATED",
   "text": "EXECUTION proof keeps basis SIMULATED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-EXECUTION-PREDICTED",
   "text": "EXECUTION proof keeps basis PREDICTED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-OUTCOME-OBSERVED",
   "text": "OUTCOME proof keeps basis OBSERVED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-OUTCOME-VERIFIED",
   "text": "OUTCOME proof keeps basis VERIFIED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-OUTCOME-DERIVED",
   "text": "OUTCOME proof keeps basis DERIVED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-OUTCOME-UNVERIFIED",
   "text": "OUTCOME proof keeps basis UNVERIFIED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-OUTCOME-COUNTERFACTUAL",
   "text": "OUTCOME proof keeps basis COUNTERFACTUAL as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-OUTCOME-SIMULATED",
   "text": "OUTCOME proof keeps basis SIMULATED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-OUTCOME-PREDICTED",
   "text": "OUTCOME proof keeps basis PREDICTED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-ENVIRONMENT-OBSERVED",
   "text": "ENVIRONMENT proof keeps basis OBSERVED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-ENVIRONMENT-VERIFIED",
   "text": "ENVIRONMENT proof keeps basis VERIFIED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-ENVIRONMENT-DERIVED",
   "text": "ENVIRONMENT proof keeps basis DERIVED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-ENVIRONMENT-UNVERIFIED",
   "text": "ENVIRONMENT proof keeps basis UNVERIFIED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-ENVIRONMENT-COUNTERFACTUAL",
   "text": "ENVIRONMENT proof keeps basis COUNTERFACTUAL as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-ENVIRONMENT-SIMULATED",
   "text": "ENVIRONMENT proof keeps basis SIMULATED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-ENVIRONMENT-PREDICTED",
   "text": "ENVIRONMENT proof keeps basis PREDICTED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-ENFORCEMENT-OBSERVED",
   "text": "ENFORCEMENT proof keeps basis OBSERVED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-ENFORCEMENT-VERIFIED",
   "text": "ENFORCEMENT proof keeps basis VERIFIED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-ENFORCEMENT-DERIVED",
   "text": "ENFORCEMENT proof keeps basis DERIVED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-ENFORCEMENT-UNVERIFIED",
   "text": "ENFORCEMENT proof keeps basis UNVERIFIED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-ENFORCEMENT-COUNTERFACTUAL",
   "text": "ENFORCEMENT proof keeps basis COUNTERFACTUAL as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-ENFORCEMENT-SIMULATED",
   "text": "ENFORCEMENT proof keeps basis SIMULATED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-ENFORCEMENT-PREDICTED",
   "text": "ENFORCEMENT proof keeps basis PREDICTED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-REVOCATION-OBSERVED",
   "text": "REVOCATION proof keeps basis OBSERVED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-REVOCATION-VERIFIED",
   "text": "REVOCATION proof keeps basis VERIFIED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-REVOCATION-DERIVED",
   "text": "REVOCATION proof keeps basis DERIVED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-REVOCATION-UNVERIFIED",
   "text": "REVOCATION proof keeps basis UNVERIFIED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-REVOCATION-COUNTERFACTUAL",
   "text": "REVOCATION proof keeps basis COUNTERFACTUAL as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-REVOCATION-SIMULATED",
   "text": "REVOCATION proof keeps basis SIMULATED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-REVOCATION-PREDICTED",
   "text": "REVOCATION proof keeps basis PREDICTED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-CONTINUITY-OBSERVED",
   "text": "CONTINUITY proof keeps basis OBSERVED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-CONTINUITY-VERIFIED",
   "text": "CONTINUITY proof keeps basis VERIFIED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-CONTINUITY-DERIVED",
   "text": "CONTINUITY proof keeps basis DERIVED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-CONTINUITY-UNVERIFIED",
   "text": "CONTINUITY proof keeps basis UNVERIFIED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-CONTINUITY-COUNTERFACTUAL",
   "text": "CONTINUITY proof keeps basis COUNTERFACTUAL as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-CONTINUITY-SIMULATED",
   "text": "CONTINUITY proof keeps basis SIMULATED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-CONTINUITY-PREDICTED",
   "text": "CONTINUITY proof keeps basis PREDICTED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-MIGRATION-OBSERVED",
   "text": "MIGRATION proof keeps basis OBSERVED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-MIGRATION-VERIFIED",
   "text": "MIGRATION proof keeps basis VERIFIED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-MIGRATION-DERIVED",
   "text": "MIGRATION proof keeps basis DERIVED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-MIGRATION-UNVERIFIED",
   "text": "MIGRATION proof keeps basis UNVERIFIED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-MIGRATION-COUNTERFACTUAL",
   "text": "MIGRATION proof keeps basis COUNTERFACTUAL as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-MIGRATION-SIMULATED",
   "text": "MIGRATION proof keeps basis SIMULATED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-MIGRATION-PREDICTED",
   "text": "MIGRATION proof keeps basis PREDICTED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-RECOVERY-OBSERVED",
   "text": "RECOVERY proof keeps basis OBSERVED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-RECOVERY-VERIFIED",
   "text": "RECOVERY proof keeps basis VERIFIED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-RECOVERY-DERIVED",
   "text": "RECOVERY proof keeps basis DERIVED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-RECOVERY-UNVERIFIED",
   "text": "RECOVERY proof keeps basis UNVERIFIED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-RECOVERY-COUNTERFACTUAL",
   "text": "RECOVERY proof keeps basis COUNTERFACTUAL as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-RECOVERY-SIMULATED",
   "text": "RECOVERY proof keeps basis SIMULATED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-RECOVERY-PREDICTED",
   "text": "RECOVERY proof keeps basis PREDICTED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-FEDERATION-OBSERVED",
   "text": "FEDERATION proof keeps basis OBSERVED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-FEDERATION-VERIFIED",
   "text": "FEDERATION proof keeps basis VERIFIED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-FEDERATION-DERIVED",
   "text": "FEDERATION proof keeps basis DERIVED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-FEDERATION-UNVERIFIED",
   "text": "FEDERATION proof keeps basis UNVERIFIED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-FEDERATION-COUNTERFACTUAL",
   "text": "FEDERATION proof keeps basis COUNTERFACTUAL as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-FEDERATION-SIMULATED",
   "text": "FEDERATION proof keeps basis SIMULATED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-FEDERATION-PREDICTED",
   "text": "FEDERATION proof keeps basis PREDICTED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-CONFORMANCE-OBSERVED",
   "text": "CONFORMANCE proof keeps basis OBSERVED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-CONFORMANCE-VERIFIED",
   "text": "CONFORMANCE proof keeps basis VERIFIED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-CONFORMANCE-DERIVED",
   "text": "CONFORMANCE proof keeps basis DERIVED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-CONFORMANCE-UNVERIFIED",
   "text": "CONFORMANCE proof keeps basis UNVERIFIED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-CONFORMANCE-COUNTERFACTUAL",
   "text": "CONFORMANCE proof keeps basis COUNTERFACTUAL as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-CONFORMANCE-SIMULATED",
   "text": "CONFORMANCE proof keeps basis SIMULATED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-CONFORMANCE-PREDICTED",
   "text": "CONFORMANCE proof keeps basis PREDICTED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-GOVERNABILITY-OBSERVED",
   "text": "GOVERNABILITY proof keeps basis OBSERVED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-GOVERNABILITY-VERIFIED",
   "text": "GOVERNABILITY proof keeps basis VERIFIED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-GOVERNABILITY-DERIVED",
   "text": "GOVERNABILITY proof keeps basis DERIVED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-GOVERNABILITY-UNVERIFIED",
   "text": "GOVERNABILITY proof keeps basis UNVERIFIED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-GOVERNABILITY-COUNTERFACTUAL",
   "text": "GOVERNABILITY proof keeps basis COUNTERFACTUAL as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-GOVERNABILITY-SIMULATED",
   "text": "GOVERNABILITY proof keeps basis SIMULATED as signed"
  },
  {
   "group": "evidence_basis",
   "id": "I38-BASIS-GOVERNABILITY-PREDICTED",
   "text": "GOVERNABILITY proof keeps basis PREDICTED as signed"
  },
  {
   "group": "physical_hybrid",
   "id": "I38-SIM-IDENTITY-SIMULATED",
   "text": "a SIMULATED IDENTITY layer never yields a VALID proof"
  },
  {
   "group": "physical_hybrid",
   "id": "I38-SIM-IDENTITY-PREDICTED",
   "text": "a PREDICTED IDENTITY layer never yields a VALID proof"
  },
  {
   "group": "physical_hybrid",
   "id": "I38-SIM-IDENTITY-COUNTERFACTUAL",
   "text": "a COUNTERFACTUAL IDENTITY layer never yields a VALID proof"
  },
  {
   "group": "physical_hybrid",
   "id": "I38-SIM-CAPABILITY-SIMULATED",
   "text": "a SIMULATED CAPABILITY layer never yields a VALID proof"
  },
  {
   "group": "physical_hybrid",
   "id": "I38-SIM-CAPABILITY-PREDICTED",
   "text": "a PREDICTED CAPABILITY layer never yields a VALID proof"
  },
  {
   "group": "physical_hybrid",
   "id": "I38-SIM-CAPABILITY-COUNTERFACTUAL",
   "text": "a COUNTERFACTUAL CAPABILITY layer never yields a VALID proof"
  },
  {
   "group": "physical_hybrid",
   "id": "I38-SIM-DELEGATION-SIMULATED",
   "text": "a SIMULATED DELEGATION layer never yields a VALID proof"
  },
  {
   "group": "physical_hybrid",
   "id": "I38-SIM-DELEGATION-PREDICTED",
   "text": "a PREDICTED DELEGATION layer never yields a VALID proof"
  },
  {
   "group": "physical_hybrid",
   "id": "I38-SIM-DELEGATION-COUNTERFACTUAL",
   "text": "a COUNTERFACTUAL DELEGATION layer never yields a VALID proof"
  },
  {
   "group": "physical_hybrid",
   "id": "I38-SIM-POLICY-SIMULATED",
   "text": "a SIMULATED POLICY layer never yields a VALID proof"
  },
  {
   "group": "physical_hybrid",
   "id": "I38-SIM-POLICY-PREDICTED",
   "text": "a PREDICTED POLICY layer never yields a VALID proof"
  },
  {
   "group": "physical_hybrid",
   "id": "I38-SIM-POLICY-COUNTERFACTUAL",
   "text": "a COUNTERFACTUAL POLICY layer never yields a VALID proof"
  },
  {
   "group": "physical_hybrid",
   "id": "I38-SIM-RISK-SIMULATED",
   "text": "a SIMULATED RISK layer never yields a VALID proof"
  },
  {
   "group": "physical_hybrid",
   "id": "I38-SIM-RISK-PREDICTED",
   "text": "a PREDICTED RISK layer never yields a VALID proof"
  },
  {
   "group": "physical_hybrid",
   "id": "I38-SIM-RISK-COUNTERFACTUAL",
   "text": "a COUNTERFACTUAL RISK layer never yields a VALID proof"
  },
  {
   "group": "physical_hybrid",
   "id": "I38-SIM-EVIDENCE-SIMULATED",
   "text": "a SIMULATED EVIDENCE layer never yields a VALID proof"
  },
  {
   "group": "physical_hybrid",
   "id": "I38-SIM-EVIDENCE-PREDICTED",
   "text": "a PREDICTED EVIDENCE layer never yields a VALID proof"
  },
  {
   "group": "physical_hybrid",
   "id": "I38-SIM-EVIDENCE-COUNTERFACTUAL",
   "text": "a COUNTERFACTUAL EVIDENCE layer never yields a VALID proof"
  },
  {
   "group": "physical_hybrid",
   "id": "I38-SIM-AUTHORIZATION-SIMULATED",
   "text": "a SIMULATED AUTHORIZATION layer never yields a VALID proof"
  },
  {
   "group": "physical_hybrid",
   "id": "I38-SIM-AUTHORIZATION-PREDICTED",
   "text": "a PREDICTED AUTHORIZATION layer never yields a VALID proof"
  },
  {
   "group": "physical_hybrid",
   "id": "I38-SIM-AUTHORIZATION-COUNTERFACTUAL",
   "text": "a COUNTERFACTUAL AUTHORIZATION layer never yields a VALID proof"
  },
  {
   "group": "physical_hybrid",
   "id": "I38-SIM-COMMIT-SIMULATED",
   "text": "a SIMULATED COMMIT layer never yields a VALID proof"
  },
  {
   "group": "physical_hybrid",
   "id": "I38-SIM-COMMIT-PREDICTED",
   "text": "a PREDICTED COMMIT layer never yields a VALID proof"
  },
  {
   "group": "physical_hybrid",
   "id": "I38-SIM-COMMIT-COUNTERFACTUAL",
   "text": "a COUNTERFACTUAL COMMIT layer never yields a VALID proof"
  },
  {
   "group": "physical_hybrid",
   "id": "I38-SIM-ENFORCEMENT-SIMULATED",
   "text": "a SIMULATED ENFORCEMENT layer never yields a VALID proof"
  },
  {
   "group": "physical_hybrid",
   "id": "I38-SIM-ENFORCEMENT-PREDICTED",
   "text": "a PREDICTED ENFORCEMENT layer never yields a VALID proof"
  },
  {
   "group": "physical_hybrid",
   "id": "I38-SIM-ENFORCEMENT-COUNTERFACTUAL",
   "text": "a COUNTERFACTUAL ENFORCEMENT layer never yields a VALID proof"
  },
  {
   "group": "physical_hybrid",
   "id": "I38-SIM-EXECUTION-SIMULATED",
   "text": "a SIMULATED EXECUTION layer never yields a VALID proof"
  },
  {
   "group": "physical_hybrid",
   "id": "I38-SIM-EXECUTION-PREDICTED",
   "text": "a PREDICTED EXECUTION layer never yields a VALID proof"
  },
  {
   "group": "physical_hybrid",
   "id": "I38-SIM-EXECUTION-COUNTERFACTUAL",
   "text": "a COUNTERFACTUAL EXECUTION layer never yields a VALID proof"
  },
  {
   "group": "physical_hybrid",
   "id": "I38-SIM-OUTCOME-SIMULATED",
   "text": "a SIMULATED OUTCOME layer never yields a VALID proof"
  },
  {
   "group": "physical_hybrid",
   "id": "I38-SIM-OUTCOME-PREDICTED",
   "text": "a PREDICTED OUTCOME layer never yields a VALID proof"
  },
  {
   "group": "physical_hybrid",
   "id": "I38-SIM-OUTCOME-COUNTERFACTUAL",
   "text": "a COUNTERFACTUAL OUTCOME layer never yields a VALID proof"
  },
  {
   "group": "physical_hybrid",
   "id": "I38-SIM-ENVIRONMENT-SIMULATED",
   "text": "a SIMULATED ENVIRONMENT layer never yields a VALID proof"
  },
  {
   "group": "physical_hybrid",
   "id": "I38-SIM-ENVIRONMENT-PREDICTED",
   "text": "a PREDICTED ENVIRONMENT layer never yields a VALID proof"
  },
  {
   "group": "physical_hybrid",
   "id": "I38-SIM-ENVIRONMENT-COUNTERFACTUAL",
   "text": "a COUNTERFACTUAL ENVIRONMENT layer never yields a VALID proof"
  },
  {
   "group": "secrecy",
   "id": "I38-SECRET-sk-live-",
   "text": "pattern sk-live-... is refused wherever it appears"
  },
  {
   "group": "secrecy",
   "id": "I38-SECRET------BEG",
   "text": "pattern -----BEG... is refused wherever it appears"
  },
  {
   "group": "secrecy",
   "id": "I38-SECRET-AKIAABCD",
   "text": "pattern AKIAABCD... is refused wherever it appears"
  },
  {
   "group": "secrecy",
   "id": "I38-SECRET-password",
   "text": "pattern password... is refused wherever it appears"
  },
  {
   "group": "secrecy",
   "id": "I38-SECRET-Bearer a",
   "text": "pattern Bearer a... is refused wherever it appears"
  },
  {
   "group": "secrecy",
   "id": "I38-SECRET-ghp_abcd",
   "text": "pattern ghp_abcd... is refused wherever it appears"
  },
  {
   "group": "secrecy",
   "id": "I38-SECRET-xoxb-123",
   "text": "pattern xoxb-123... is refused wherever it appears"
  },
  {
   "group": "secrecy",
   "id": "I38-SECRETKEY-api_key",
   "text": "claim key api_key is refused"
  },
  {
   "group": "secrecy",
   "id": "I38-SECRETKEY-chain_of_thought",
   "text": "claim key chain_of_thought is refused"
  },
  {
   "group": "secrecy",
   "id": "I38-SECRETKEY-credential",
   "text": "claim key credential is refused"
  },
  {
   "group": "secrecy",
   "id": "I38-SECRETKEY-customer_data",
   "text": "claim key customer_data is refused"
  },
  {
   "group": "secrecy",
   "id": "I38-SECRETKEY-model_weights",
   "text": "claim key model_weights is refused"
  },
  {
   "group": "secrecy",
   "id": "I38-SECRETKEY-password",
   "text": "claim key password is refused"
  },
  {
   "group": "secrecy",
   "id": "I38-SECRETKEY-private_key",
   "text": "claim key private_key is refused"
  },
  {
   "group": "secrecy",
   "id": "I38-SECRETKEY-prompt",
   "text": "claim key prompt is refused"
  },
  {
   "group": "secrecy",
   "id": "I38-SECRETKEY-raw_prompt",
   "text": "claim key raw_prompt is refused"
  },
  {
   "group": "secrecy",
   "id": "I38-SECRETKEY-secret",
   "text": "claim key secret is refused"
  },
  {
   "group": "transparency",
   "id": "I38-LOG-INCL-1",
   "text": "every entry of a 1-entry log has a valid inclusion proof"
  },
  {
   "group": "transparency",
   "id": "I38-LOG-INCL-2",
   "text": "every entry of a 2-entry log has a valid inclusion proof"
  },
  {
   "group": "transparency",
   "id": "I38-LOG-INCL-3",
   "text": "every entry of a 3-entry log has a valid inclusion proof"
  },
  {
   "group": "transparency",
   "id": "I38-LOG-INCL-4",
   "text": "every entry of a 4-entry log has a valid inclusion proof"
  },
  {
   "group": "transparency",
   "id": "I38-LOG-INCL-5",
   "text": "every entry of a 5-entry log has a valid inclusion proof"
  },
  {
   "group": "transparency",
   "id": "I38-LOG-INCL-6",
   "text": "every entry of a 6-entry log has a valid inclusion proof"
  },
  {
   "group": "transparency",
   "id": "I38-LOG-INCL-7",
   "text": "every entry of a 7-entry log has a valid inclusion proof"
  },
  {
   "group": "transparency",
   "id": "I38-LOG-INCL-8",
   "text": "every entry of a 8-entry log has a valid inclusion proof"
  },
  {
   "group": "transparency",
   "id": "I38-LOG-INCL-9",
   "text": "every entry of a 9-entry log has a valid inclusion proof"
  },
  {
   "group": "transparency",
   "id": "I38-LOG-INCL-10",
   "text": "every entry of a 10-entry log has a valid inclusion proof"
  },
  {
   "group": "transparency",
   "id": "I38-LOG-INCL-11",
   "text": "every entry of a 11-entry log has a valid inclusion proof"
  },
  {
   "group": "transparency",
   "id": "I38-LOG-INCL-12",
   "text": "every entry of a 12-entry log has a valid inclusion proof"
  },
  {
   "group": "transparency",
   "id": "I38-LOG-INCL-13",
   "text": "every entry of a 13-entry log has a valid inclusion proof"
  },
  {
   "group": "transparency",
   "id": "I38-LOG-INCL-14",
   "text": "every entry of a 14-entry log has a valid inclusion proof"
  },
  {
   "group": "transparency",
   "id": "I38-LOG-INCL-15",
   "text": "every entry of a 15-entry log has a valid inclusion proof"
  },
  {
   "group": "transparency",
   "id": "I38-LOG-INCL-16",
   "text": "every entry of a 16-entry log has a valid inclusion proof"
  },
  {
   "group": "transparency",
   "id": "I38-LOG-INCL-17",
   "text": "every entry of a 17-entry log has a valid inclusion proof"
  },
  {
   "group": "transparency",
   "id": "I38-LOG-INCL-18",
   "text": "every entry of a 18-entry log has a valid inclusion proof"
  },
  {
   "group": "transparency",
   "id": "I38-LOG-INCL-19",
   "text": "every entry of a 19-entry log has a valid inclusion proof"
  },
  {
   "group": "transparency",
   "id": "I38-LOG-INCL-20",
   "text": "every entry of a 20-entry log has a valid inclusion proof"
  },
  {
   "group": "transparency",
   "id": "I38-LOG-CONS-1",
   "text": "consistency from size 1 to any larger size holds"
  },
  {
   "group": "transparency",
   "id": "I38-LOG-CONS-2",
   "text": "consistency from size 2 to any larger size holds"
  },
  {
   "group": "transparency",
   "id": "I38-LOG-CONS-3",
   "text": "consistency from size 3 to any larger size holds"
  },
  {
   "group": "transparency",
   "id": "I38-LOG-CONS-4",
   "text": "consistency from size 4 to any larger size holds"
  },
  {
   "group": "transparency",
   "id": "I38-LOG-CONS-5",
   "text": "consistency from size 5 to any larger size holds"
  },
  {
   "group": "transparency",
   "id": "I38-LOG-CONS-6",
   "text": "consistency from size 6 to any larger size holds"
  },
  {
   "group": "transparency",
   "id": "I38-LOG-CONS-7",
   "text": "consistency from size 7 to any larger size holds"
  },
  {
   "group": "transparency",
   "id": "I38-LOG-CONS-8",
   "text": "consistency from size 8 to any larger size holds"
  },
  {
   "group": "transparency",
   "id": "I38-LOG-CONS-9",
   "text": "consistency from size 9 to any larger size holds"
  },
  {
   "group": "transparency",
   "id": "I38-LOG-CONS-10",
   "text": "consistency from size 10 to any larger size holds"
  },
  {
   "group": "receipt",
   "id": "I38-RECEIPT-1",
   "text": "any field change in a 1-receipt chain is detected"
  },
  {
   "group": "receipt",
   "id": "I38-RECEIPT-2",
   "text": "any field change in a 2-receipt chain is detected"
  },
  {
   "group": "receipt",
   "id": "I38-RECEIPT-3",
   "text": "any field change in a 3-receipt chain is detected"
  },
  {
   "group": "receipt",
   "id": "I38-RECEIPT-4",
   "text": "any field change in a 4-receipt chain is detected"
  },
  {
   "group": "receipt",
   "id": "I38-RECEIPT-5",
   "text": "any field change in a 5-receipt chain is detected"
  },
  {
   "group": "receipt",
   "id": "I38-RECEIPT-6",
   "text": "any field change in a 6-receipt chain is detected"
  },
  {
   "group": "receipt",
   "id": "I38-RECEIPT-7",
   "text": "any field change in a 7-receipt chain is detected"
  },
  {
   "group": "receipt",
   "id": "I38-RECEIPT-8",
   "text": "any field change in a 8-receipt chain is detected"
  },
  {
   "group": "receipt",
   "id": "I38-RECEIPT-9",
   "text": "any field change in a 9-receipt chain is detected"
  },
  {
   "group": "receipt",
   "id": "I38-RECEIPT-10",
   "text": "any field change in a 10-receipt chain is detected"
  },
  {
   "group": "conformance",
   "id": "I38-CONF-vendor_a",
   "text": "the suite fails vendor_a exactly on its built-in defects"
  },
  {
   "group": "conformance",
   "id": "I38-CONF-vendor_b",
   "text": "the suite fails vendor_b exactly on its built-in defects"
  },
  {
   "group": "conformance",
   "id": "I38-CONF-open_source_agent",
   "text": "the suite fails open_source_agent exactly on its built-in defects"
  },
  {
   "group": "conformance",
   "id": "I38-CONF-mcp_agent",
   "text": "the suite fails mcp_agent exactly on its built-in defects"
  },
  {
   "group": "conformance",
   "id": "I38-CONF-a2a_agent",
   "text": "the suite fails a2a_agent exactly on its built-in defects"
  },
  {
   "group": "conformance",
   "id": "I38-CONF-enterprise_agent",
   "text": "the suite fails enterprise_agent exactly on its built-in defects"
  },
  {
   "group": "conformance",
   "id": "I38-CONF-local_agent",
   "text": "the suite fails local_agent exactly on its built-in defects"
  },
  {
   "group": "conformance",
   "id": "I38-CONF-cloud_agent",
   "text": "the suite fails cloud_agent exactly on its built-in defects"
  },
  {
   "group": "conformance",
   "id": "I38-CONF-browser_agent",
   "text": "the suite fails browser_agent exactly on its built-in defects"
  },
  {
   "group": "conformance",
   "id": "I38-CONF-coding_agent",
   "text": "the suite fails coding_agent exactly on its built-in defects"
  },
  {
   "group": "conformance",
   "id": "I38-CONF-physical_system_gateway",
   "text": "the suite fails physical_system_gateway exactly on its built-in defects"
  },
  {
   "group": "negotiation",
   "id": "I38-TRUTH-third_party_verification",
   "text": "third_party_verification is never fabricated as available"
  },
  {
   "group": "negotiation",
   "id": "I38-TRUTH-hardware_attestation",
   "text": "hardware_attestation is never fabricated as available"
  },
  {
   "group": "negotiation",
   "id": "I38-TRUTH-zero_knowledge_proof",
   "text": "zero_knowledge_proof is never fabricated as available"
  },
  {
   "group": "negotiation",
   "id": "I38-NEG-identity_proof",
   "text": "requirement identity_proof is answered honestly"
  },
  {
   "group": "negotiation",
   "id": "I38-NEG-delegation_proof",
   "text": "requirement delegation_proof is answered honestly"
  },
  {
   "group": "negotiation",
   "id": "I38-NEG-authorization_proof",
   "text": "requirement authorization_proof is answered honestly"
  },
  {
   "group": "negotiation",
   "id": "I38-NEG-policy_proof",
   "text": "requirement policy_proof is answered honestly"
  },
  {
   "group": "negotiation",
   "id": "I38-NEG-execution_proof",
   "text": "requirement execution_proof is answered honestly"
  },
  {
   "group": "negotiation",
   "id": "I38-NEG-outcome_proof",
   "text": "requirement outcome_proof is answered honestly"
  },
  {
   "group": "negotiation",
   "id": "I38-NEG-third_party_verification",
   "text": "requirement third_party_verification is answered honestly"
  },
  {
   "group": "negotiation",
   "id": "I38-NEG-hardware_attestation",
   "text": "requirement hardware_attestation is answered honestly"
  },
  {
   "group": "negotiation",
   "id": "I38-NEG-zero_knowledge_proof",
   "text": "requirement zero_knowledge_proof is answered honestly"
  },
  {
   "group": "negotiation",
   "id": "I38-NEG-transparency_inclusion",
   "text": "requirement transparency_inclusion is answered honestly"
  },
  {
   "group": "coverage",
   "id": "I38-COV-enforcement_probe",
   "text": "coverage from enforcement_probe is exactly its evidence class"
  },
  {
   "group": "coverage",
   "id": "I38-COV-sealed_e8",
   "text": "coverage from sealed_e8 is exactly its evidence class"
  },
  {
   "group": "coverage",
   "id": "I38-COV-hardware_quote_verified",
   "text": "coverage from hardware_quote_verified is exactly its evidence class"
  },
  {
   "group": "coverage",
   "id": "I38-COV-signature_verified",
   "text": "coverage from signature_verified is exactly its evidence class"
  },
  {
   "group": "coverage",
   "id": "I38-COV-partial_probe",
   "text": "coverage from partial_probe is exactly its evidence class"
  },
  {
   "group": "coverage",
   "id": "I38-COV-monitored",
   "text": "coverage from monitored is exactly its evidence class"
  },
  {
   "group": "coverage",
   "id": "I38-COV-observed",
   "text": "coverage from observed is exactly its evidence class"
  },
  {
   "group": "coverage",
   "id": "I38-COV-bypass_known",
   "text": "coverage from bypass_known is exactly its evidence class"
  },
  {
   "group": "coverage",
   "id": "I38-COV-outside_any_boundary",
   "text": "coverage from outside_any_boundary is exactly its evidence class"
  },
  {
   "group": "coverage",
   "id": "I38-COV-integration_exists",
   "text": "coverage from integration_exists is exactly its evidence class"
  },
  {
   "group": "coverage",
   "id": "I38-COV-declared_enforced",
   "text": "coverage from declared_enforced is exactly its evidence class"
  },
  {
   "group": "coverage",
   "id": "I38-COV-vendor_says_secure",
   "text": "coverage from vendor_says_secure is exactly its evidence class"
  },
  {
   "group": "certificate",
   "id": "I38-CERT-VALID",
   "text": "execution certificate policy for verdict VALID"
  },
  {
   "group": "certificate",
   "id": "I38-CERT-INVALID",
   "text": "execution certificate policy for verdict INVALID"
  },
  {
   "group": "certificate",
   "id": "I38-CERT-INCOMPLETE",
   "text": "execution certificate policy for verdict INCOMPLETE"
  },
  {
   "group": "certificate",
   "id": "I38-CERT-STALE",
   "text": "execution certificate policy for verdict STALE"
  },
  {
   "group": "certificate",
   "id": "I38-CERT-REVOKED",
   "text": "execution certificate policy for verdict REVOKED"
  },
  {
   "group": "certificate",
   "id": "I38-CERT-UNKNOWN",
   "text": "execution certificate policy for verdict UNKNOWN"
  },
  {
   "group": "action_proof",
   "id": "I38-AP-TAMPER-agent_identity",
   "text": "any change to action proof agent_identity is INVALID"
  },
  {
   "group": "action_proof",
   "id": "I38-AP-TAMPER-execution_identity",
   "text": "any change to action proof execution_identity is INVALID"
  },
  {
   "group": "action_proof",
   "id": "I38-AP-TAMPER-runtime_identity",
   "text": "any change to action proof runtime_identity is INVALID"
  },
  {
   "group": "action_proof",
   "id": "I38-AP-TAMPER-environment_identity",
   "text": "any change to action proof environment_identity is INVALID"
  },
  {
   "group": "action_proof",
   "id": "I38-AP-TAMPER-capability_set",
   "text": "any change to action proof capability_set is INVALID"
  },
  {
   "group": "action_proof",
   "id": "I38-AP-TAMPER-authority_grant",
   "text": "any change to action proof authority_grant is INVALID"
  },
  {
   "group": "action_proof",
   "id": "I38-AP-TAMPER-delegation_chain",
   "text": "any change to action proof delegation_chain is INVALID"
  },
  {
   "group": "action_proof",
   "id": "I38-AP-TAMPER-policy_version",
   "text": "any change to action proof policy_version is INVALID"
  },
  {
   "group": "action_proof",
   "id": "I38-AP-TAMPER-policy_digest",
   "text": "any change to action proof policy_digest is INVALID"
  },
  {
   "group": "action_proof",
   "id": "I38-AP-TAMPER-risk_state",
   "text": "any change to action proof risk_state is INVALID"
  },
  {
   "group": "action_proof",
   "id": "I38-AP-TAMPER-context_digest",
   "text": "any change to action proof context_digest is INVALID"
  },
  {
   "group": "action_proof",
   "id": "I38-AP-TAMPER-intent_digest",
   "text": "any change to action proof intent_digest is INVALID"
  },
  {
   "group": "action_proof",
   "id": "I38-AP-TAMPER-decision_digest",
   "text": "any change to action proof decision_digest is INVALID"
  },
  {
   "group": "action_proof",
   "id": "I38-AP-TAMPER-evidence_digest",
   "text": "any change to action proof evidence_digest is INVALID"
  },
  {
   "group": "action_proof",
   "id": "I38-AP-TAMPER-trajectory_digest",
   "text": "any change to action proof trajectory_digest is INVALID"
  },
  {
   "group": "action_proof",
   "id": "I38-AP-TAMPER-authorization_token",
   "text": "any change to action proof authorization_token is INVALID"
  },
  {
   "group": "action_proof",
   "id": "I38-AP-TAMPER-e8_commit",
   "text": "any change to action proof e8_commit is INVALID"
  },
  {
   "group": "action_proof",
   "id": "I38-AP-TAMPER-execution_boundary",
   "text": "any change to action proof execution_boundary is INVALID"
  },
  {
   "group": "action_proof",
   "id": "I38-AP-TAMPER-execution_receipt",
   "text": "any change to action proof execution_receipt is INVALID"
  },
  {
   "group": "action_proof",
   "id": "I38-AP-TAMPER-outcome",
   "text": "any change to action proof outcome is INVALID"
  },
  {
   "group": "action_proof",
   "id": "I38-AP-TAMPER-post_execution_evidence",
   "text": "any change to action proof post_execution_evidence is INVALID"
  },
  {
   "group": "action_proof",
   "id": "I38-AP-TAMPER-revocation_state",
   "text": "any change to action proof revocation_state is INVALID"
  },
  {
   "group": "action_proof",
   "id": "I38-AP-TAMPER-timestamp",
   "text": "any change to action proof timestamp is INVALID"
  },
  {
   "group": "action_proof",
   "id": "I38-AP-TAMPER-governance_epoch",
   "text": "any change to action proof governance_epoch is INVALID"
  },
  {
   "group": "action_proof",
   "id": "I38-AP-TAMPER-proof_version",
   "text": "any change to action proof proof_version is INVALID"
  },
  {
   "group": "action_proof",
   "id": "I38-AP-TAMPER-verification_status",
   "text": "any change to action proof verification_status is INVALID"
  }
 ],
 "schema": "cain42.e38.invariants.v1",
 "total": 1030,
 "trials_per_property": 12
}