{
  "verifier": "verify_e42_v2.py",
  "imports_cain": false,
  "categories": {
    "PUBLISHER_AUTHENTICATION": {
      "checks": 3,
      "pass": 3,
      "fail": 0,
      "not_established": 0,
      "unsupported": 0,
      "harness_error": 0,
      "establishes": "that the holder of the pinned publisher key signed the attestation bytes",
      "does_not_establish": "that the publisher is trustworthy or that the content is true"
    },
    "ARTIFACT_INTEGRITY": {
      "checks": 43,
      "pass": 43,
      "fail": 0,
      "not_established": 0,
      "unsupported": 0,
      "harness_error": 0,
      "establishes": "that served files are byte-identical to the declared hashes",
      "does_not_establish": "that the content is semantically correct"
    },
    "SCHEMA": {
      "checks": 59,
      "pass": 59,
      "fail": 0,
      "not_established": 0,
      "unsupported": 0,
      "harness_error": 0,
      "establishes": "that fields, enums and signatures are well-formed",
      "does_not_establish": "that the values are true, only well-formed"
    },
    "REPORT_CONSISTENCY": {
      "checks": 1342,
      "pass": 1342,
      "fail": 0,
      "not_established": 0,
      "unsupported": 0,
      "harness_error": 0,
      "establishes": "that the report's numbers are self-consistent",
      "does_not_establish": "any behaviour; a signed report can be internally consistent and false"
    },
    "SEMANTIC_RECOMPUTATION": {
      "checks": 9,
      "pass": 9,
      "fail": 0,
      "not_established": 0,
      "unsupported": 0,
      "harness_error": 0,
      "establishes": "that a claim was re-derived from raw observations",
      "does_not_establish": "anything about components not covered by the recomputation"
    },
    "IMPLEMENTATION_REEXECUTION": {
      "checks": 0,
      "pass": 0,
      "fail": 0,
      "not_established": 0,
      "unsupported": 0,
      "harness_error": 0,
      "establishes": "that the implementation was observed doing the claim",
      "does_not_establish": "correctness beyond the executed test, or independence of the tester"
    },
    "LIVE_OBSERVATION": {
      "checks": 1,
      "pass": 0,
      "fail": 0,
      "not_established": 1,
      "unsupported": 0,
      "harness_error": 0,
      "establishes": "that a live deployment exhibited the behaviour at the stated time",
      "does_not_establish": "permanence, or that the observer is independent"
    },
    "UNSUPPORTED": {
      "checks": 2,
      "pass": 0,
      "fail": 0,
      "not_established": 2,
      "unsupported": 0,
      "harness_error": 0,
      "establishes": "nothing; the input version/class is not supported",
      "does_not_establish": "nothing"
    },
    "HARNESS_ERROR": {
      "checks": 0,
      "pass": 0,
      "fail": 0,
      "not_established": 0,
      "unsupported": 0,
      "harness_error": 0,
      "establishes": "nothing; the input is malformed",
      "does_not_establish": "nothing"
    }
  },
  "behavioural_pass": false,
  "result": "NO_FAILURES",
  "non_pass": [
    {
      "category": "UNSUPPORTED",
      "name": "receipt[0].authority_offline",
      "outcome": "NOT_ESTABLISHED",
      "detail": "authority is 'NONE': no structured, verifiable authority to check"
    },
    {
      "category": "LIVE_OBSERVATION",
      "name": "receipt[0].authority_revocation",
      "outcome": "NOT_ESTABLISHED",
      "detail": "offline bundle cannot observe live revocation/stateful replay"
    },
    {
      "category": "UNSUPPORTED",
      "name": "coverage.enforcement_classification",
      "outcome": "NOT_ESTABLISHED",
      "detail": "no linked deployment config / credential placement / boundary / bypass / side-effect evidence"
    }
  ]
}