{
  "rule": "these categories are NOT equivalent and must not be summed into one 'verified' number",
  "categories": {
    "PUBLISHER_AUTHENTICATION": {
      "checks": 3,
      "pass": 3,
      "fail": 0,
      "not_established": 0,
      "unsupported": 0,
      "harness_error": 0,
      "establishes": "that the holder of the pinned publisher key signed the attestation bytes",
      "does_not_establish": "that the publisher is trustworthy or that the content is true"
    },
    "ARTIFACT_INTEGRITY": {
      "checks": 43,
      "pass": 43,
      "fail": 0,
      "not_established": 0,
      "unsupported": 0,
      "harness_error": 0,
      "establishes": "that served files are byte-identical to the declared hashes",
      "does_not_establish": "that the content is semantically correct"
    },
    "SCHEMA": {
      "checks": 59,
      "pass": 59,
      "fail": 0,
      "not_established": 0,
      "unsupported": 0,
      "harness_error": 0,
      "establishes": "that fields, enums and signatures are well-formed",
      "does_not_establish": "that the values are true, only well-formed"
    },
    "REPORT_CONSISTENCY": {
      "checks": 1342,
      "pass": 1342,
      "fail": 0,
      "not_established": 0,
      "unsupported": 0,
      "harness_error": 0,
      "establishes": "that the report's numbers are self-consistent",
      "does_not_establish": "any behaviour; a signed report can be internally consistent and false"
    },
    "SEMANTIC_RECOMPUTATION": {
      "checks": 9,
      "pass": 9,
      "fail": 0,
      "not_established": 0,
      "unsupported": 0,
      "harness_error": 0,
      "establishes": "that a claim was re-derived from raw observations",
      "does_not_establish": "anything about components not covered by the recomputation"
    },
    "IMPLEMENTATION_REEXECUTION": {
      "checks": 0,
      "pass": 0,
      "fail": 0,
      "not_established": 0,
      "unsupported": 0,
      "harness_error": 0,
      "establishes": "that the implementation was observed doing the claim",
      "does_not_establish": "correctness beyond the executed test, or independence of the tester"
    },
    "LIVE_OBSERVATION": {
      "checks": 1,
      "pass": 0,
      "fail": 0,
      "not_established": 1,
      "unsupported": 0,
      "harness_error": 0,
      "establishes": "that a live deployment exhibited the behaviour at the stated time",
      "does_not_establish": "permanence, or that the observer is independent"
    },
    "UNSUPPORTED": {
      "checks": 2,
      "pass": 0,
      "fail": 0,
      "not_established": 2,
      "unsupported": 0,
      "harness_error": 0,
      "establishes": "nothing; the input version/class is not supported",
      "does_not_establish": "nothing"
    },
    "HARNESS_ERROR": {
      "checks": 0,
      "pass": 0,
      "fail": 0,
      "not_established": 0,
      "unsupported": 0,
      "harness_error": 0,
      "establishes": "nothing; the input is malformed",
      "does_not_establish": "nothing"
    }
  },
  "behavioural_pass": false,
  "note": "REPORT_CONSISTENCY passes are self-consistency, not observed behaviour."
}