{
 "artifacts": [
  {
   "artifact_digest": "5814840a65b5fbcc1f30e87f71796dcaacba97c287493f7293d0bd7d90e5e42c",
   "assurance_level": 3,
   "assurance_level_name": "PROPERTY_VERIFIED",
   "code_digests": {
    "assurance": "1d826f6d868fed31aac3216c7a936b7aa6ed46d24268e5e2048a3bcbea4b728b",
    "cleanroom": "4893bd49ed88200b82aaf1459fc88a125b06d7e8b1c61b75d11f9c866dabd189",
    "contract": "eab0641ecd82a2f6226efb69e19efde2aef3713369e05f07c5b8af9e003cd15d",
    "rig": "4eb70110342694a86abe94a89070cbd21b5f69af81141b5b7ff7cce65b59f811"
   },
   "depends_on": [],
   "method": "exhaustive_over_abstraction",
   "ok": true,
   "property": "DECIDE_CONFORMS_TO_ORDERED_GUARD_MODEL",
   "result_digest": "1c27606df5793a38917e9535363c2fc1395ab0ba3ab0e11213cc1539fdde111b",
   "schema": "cain.assurance.v1",
   "summary": {
    "claim": "Over the 12-dimension fault lattice, exactly one point (no faults) is ALLOW, and decide() and the clean-room verifier both return the model's first-failing-guard reason at every point.",
    "does_not_prove": "inputs outside the lattice; correctness of the guards' own predicates on other values",
    "exhaustive": true,
    "lattice_size": 435456
   },
   "tool_versions": {
    "cryptography": "46.0.5",
    "implementation": "CPython",
    "python": "3.14.4",
    "z3": "5.1.0"
   },
   "valid_from": 1791118389,
   "valid_until": 1793710389
  },
  {
   "artifact_digest": "ebacbac03c022a3e4b622dc29d0b3f7ab522ed55f1b64d509cd69992a1ffc401",
   "assurance_level": 4,
   "assurance_level_name": "FORMALLY_MODELED",
   "code_digests": {
    "assurance": "1d826f6d868fed31aac3216c7a936b7aa6ed46d24268e5e2048a3bcbea4b728b",
    "contract": "eab0641ecd82a2f6226efb69e19efde2aef3713369e05f07c5b8af9e003cd15d"
   },
   "depends_on": [],
   "method": "explicit_state_model_check",
   "ok": true,
   "property": "LIFECYCLE_MODEL",
   "result_digest": "0a633d7745e39524d8887099fa196b0869256d5502d0e4ff25d722a292e8089d",
   "schema": "cain.assurance.v1",
   "summary": {
    "claim": "exhaustive over the lifecycle table the runtime enforces",
    "does_not_prove": "that every code path routes state changes through _transition() (see trace checks)"
   },
   "tool_versions": {
    "cryptography": "46.0.5",
    "implementation": "CPython",
    "python": "3.14.4",
    "z3": "5.1.0"
   },
   "valid_from": 1791118389,
   "valid_until": 1793710389
  },
  {
   "artifact_digest": "7e4c2d38095fe1db777bc7888698da2a1eef285b953f57875cad563d9662a814",
   "assurance_level": 2,
   "assurance_level_name": "ADVERSARIAL_TESTED",
   "code_digests": {
    "assurance": "1d826f6d868fed31aac3216c7a936b7aa6ed46d24268e5e2048a3bcbea4b728b",
    "rig": "4eb70110342694a86abe94a89070cbd21b5f69af81141b5b7ff7cce65b59f811"
   },
   "depends_on": [],
   "method": "trace_property",
   "ok": true,
   "property": "Z3_ENCODING_FAITHFUL",
   "result_digest": "82b81047ade7b43603f9cde5cdaa150d6e2d2a5b1af945b100dc3dd28dd220d5",
   "schema": "cain.assurance.v1",
   "summary": {},
   "tool_versions": {
    "cryptography": "46.0.5",
    "implementation": "CPython",
    "python": "3.14.4",
    "z3": "5.1.0"
   },
   "valid_from": 1791118389,
   "valid_until": 1793710389
  },
  {
   "artifact_digest": "9abf9ab53d917e43729575a8fff848e36ea82eb407dd8eba4f3897ff0f5a18a8",
   "assurance_level": 5,
   "assurance_level_name": "FORMALLY_VERIFIED",
   "code_digests": {
    "assurance": "1d826f6d868fed31aac3216c7a936b7aa6ed46d24268e5e2048a3bcbea4b728b",
    "rig": "4eb70110342694a86abe94a89070cbd21b5f69af81141b5b7ff7cce65b59f811"
   },
   "depends_on": [
    "Z3_ENCODING_FAITHFUL"
   ],
   "method": "smt_proof",
   "ok": true,
   "property": "DELEGATION_SCOPE_ATTENUATION",
   "result_digest": "f00727db4ef7a4b89d2828e2732e81cb005a891a065a9a1a88dbc1e675f7fb01",
   "schema": "cain.assurance.v1",
   "summary": {
    "claim": "for all strings, under RIG's stored-scope normalization: a delegated child scope never covers a resource its parent does not; by induction over hops, the same holds for chains of any depth",
    "complete": true,
    "precondition": "scopes as RIG stores them: non-empty, no trailing '/' unless exactly '/', or '*'; resource contains no '*'",
    "proved_cases": [
     "L1b",
     "L1a_prime",
     "PW",
     "parent_star",
     "child_star_parent_not",
     "parent_prefix_child_concrete",
     "parent_prefix_child_prefix",
     "parent_concrete_child_prefix",
     "parent_concrete_child_concrete:equal",
     "parent_concrete_child_concrete:parent_root",
     "parent_concrete_child_concrete:below:res_eq_child",
     "parent_concrete_child_concrete:below:res_below_child",
     "parent_concrete_child_concrete:below:child_not_root"
    ]
   },
   "tool_versions": {
    "cryptography": "46.0.5",
    "implementation": "CPython",
    "python": "3.14.4",
    "z3": "5.1.0"
   },
   "valid_from": 1791118389,
   "valid_until": 1793710389
  },
  {
   "artifact_digest": "8467b0be1f394f59d5309e456c219392efeaa54de19bb8231547a3fd12c609c1",
   "assurance_level": 2,
   "assurance_level_name": "ADVERSARIAL_TESTED",
   "code_digests": {
    "assurance": "1d826f6d868fed31aac3216c7a936b7aa6ed46d24268e5e2048a3bcbea4b728b",
    "contract": "eab0641ecd82a2f6226efb69e19efde2aef3713369e05f07c5b8af9e003cd15d",
    "memvault": "132e16a78bdd0040c343381f67ec2afc1708e5e0f8e8d060bd027f86095b1817",
    "openshell": "501f2b2f869315b4c441fb935e1e19754f8638932808e38042bf0730649758e4",
    "rig": "4eb70110342694a86abe94a89070cbd21b5f69af81141b5b7ff7cce65b59f811",
    "scitt": "4a116fb9c1d42b8d7a16bccb0949924b761decc9399ee11d076ae809c1b9f1bf"
   },
   "depends_on": [],
   "method": "trace_property",
   "ok": true,
   "property": "TEMPORAL_TRACE_PROPERTIES",
   "result_digest": "e696cbcb2bdf7dcff9af97daf4ba5736d4b014d5c9c68eecb16678f6081ee5e2",
   "schema": "cain.assurance.v1",
   "summary": {},
   "tool_versions": {
    "cryptography": "46.0.5",
    "implementation": "CPython",
    "python": "3.14.4",
    "z3": "5.1.0"
   },
   "valid_from": 1791118389,
   "valid_until": 1793710389
  }
 ],
 "assurance_graph": {
  "AUTHORIZATION_DECISION": [
   "DECIDE_CONFORMS_TO_ORDERED_GUARD_MODEL",
   "DELEGATION_SCOPE_ATTENUATION",
   "LIFECYCLE_MODEL"
  ],
  "DECIDE_CONFORMS_TO_ORDERED_GUARD_MODEL": [],
  "DELEGATION_SCOPE_ATTENUATION": [
   "Z3_ENCODING_FAITHFUL"
  ],
  "LIFECYCLE_MODEL": [],
  "REVOCATION_NEVER_OPTIONAL": [
   "LIFECYCLE_MODEL",
   "TEMPORAL_TRACE_PROPERTIES",
   "DECIDE_CONFORMS_TO_ORDERED_GUARD_MODEL"
  ],
  "TEMPORAL_TRACE_PROPERTIES": [],
  "Z3_ENCODING_FAITHFUL": []
 },
 "graph_status": {
  "AUTHORIZATION_DECISION": "VALID",
  "DECIDE_CONFORMS_TO_ORDERED_GUARD_MODEL": "VALID",
  "DELEGATION_SCOPE_ATTENUATION": "VALID",
  "LIFECYCLE_MODEL": "VALID",
  "REVOCATION_NEVER_OPTIONAL": "VALID",
  "TEMPORAL_TRACE_PROPERTIES": "VALID",
  "Z3_ENCODING_FAITHFUL": "VALID"
 },
 "meta_invariants": {
  "ok": true,
  "property": "META_INVARIANTS",
  "violations": []
 },
 "schema": "cain.assurance.v1"
}