{
  "_doc": "One result, read from the codebase’s own files at the commit named here. Every value is that file’s own, copied verbatim; nothing here is written by hand. A value replaced by {withheld: true, sha256_of_value, bytes} is committed by its sha256 instead of published, for the reason it states, and is never edited. Each whole source file is committed by sha256 below, and its bytes are published only where its visibility says so. The codebase is named by the public subject its files are published under.",
  "lane": "inference-limits",
  "repository": "inference-limits",
  "commit": "eb76dce3f6dc0889d822db1c7a5af76dc876d2db",
  "portfolio_id": "inference-limits:certfabric-verifycore",
  "id": "certfabric-verifycore",
  "attestation_row": {
    "attested_at": "2026-09-12",
    "attestor": "04-aiscaleout",
    "repository": {
      "withheld": true,
      "why": "a working-directory name (R8)",
      "sha256_of_value": "dc9a8056162a9f8af22c3358adefec1007380f73db3ac6575018b9f67cec86a6",
      "bytes": 7
    },
    "source_doc": "TOP_N_CROWN_JEWELS.md",
    "source_doc_sha256": "15a64fb189e85a28a6fee2c09ec72d602dd019272769f54e167d6cc5bf3c425a",
    "state": "attested",
    "top_n": 11,
    "note_sha256": "cda096249bc344dc78f7c156eaaaaa4915f346127e628cf67243910f731d04df",
    "ids_in_row": 11,
    "file": "dataroom/TOP_N_ATTESTATION.jsonl",
    "line": 1
  },
  "claim_source": {
    "receipt": "inference-limits/top40.json",
    "sha256": "5d74491a747c903d407b42abbeececaf6268df57216a1fac67aa795bc4092b6e",
    "field": "entries[28].claim",
    "file": "top40.json"
  },
  "top40_entry": {
    "id": "certfabric-verifycore",
    "rank": 29,
    "native_rank": 19,
    "title": "CertFabric and verifycore, an incubated proof-carrying signoff platform",
    "claim": {
      "withheld": true,
      "why": "uses a word the published record keeps for its own process (S3.1-DIALECT)",
      "sha256_of_value": "f26b3f664fe410ff7b10b16a64f900706ec347d4e1bb9a45f8878dc6f025747a",
      "bytes": 239
    },
    "scope": {
      "withheld": true,
      "why": "a working-directory name (R8)",
      "sha256_of_value": "eb55d484bd5b98591659d61fa1ba284ee9b011e11afc94b0f69af6b16b92b438",
      "bytes": 187
    },
    "limits": "'Externally anchorable' is NOT evidence of a live Bitcoin or OpenTimestamps anchor — NO EXTERNAL ANCHOR EXISTS. Several primitives are VENDORED from sibling origins (verifycore/VENDORED.md); check provenance before claiming authorship. Keys and external trust operations are deployment responsibilities. The README's 'network' label overstates deployment.",
    "artifact_path": "certfabric/",
    "witness_command": "cd statefabric/formal/lean && lake build Extract && cd - >/dev/null && PYTEST_DISABLE_PLUGIN_AUTOLOAD=1 python3 -m pytest -q verifycore/tests certfabric/tests",
    "witness_result": "exit=0 | Build completed successfully (24 jobs).",
    "witness_class": "ASSERTING",
    "third_party_axis": "—",
    "facts": {
      "ran_with_receipt": true,
      "third_party_graded": false,
      "negative_control_stated": false,
      "ip_class_known": false,
      "reproduce_command": true,
      "regenerates_not_verifies": false
    },
    "fact_count": 2,
    "repro_command": "cd statefabric/formal/lean && lake build Extract && cd - >/dev/null && PYTEST_DISABLE_PLUGIN_AUTOLOAD=1 python3 -m pytest -q verifycore/tests certfabric/tests",
    "ip_class": null,
    "ip_class_basis": {
      "withheld": true,
      "why": "a note on the entry's intellectual-property class, which this site does not publish; a hash of the note is kept",
      "sha256_of_value": "1fa3b0de2499ff0cae5431ddd894e54301c85cc39df867e9e43b4552d055cba7",
      "bytes": 265
    },
    "negative_control": null
  },
  "witness_quality_entry": {
    "id": "certfabric-verifycore",
    "claim": {
      "withheld": true,
      "why": "uses a word the published record keeps for its own process (S3.1-DIALECT)",
      "sha256_of_value": "f26b3f664fe410ff7b10b16a64f900706ec347d4e1bb9a45f8878dc6f025747a",
      "bytes": 239
    },
    "class": "ASSERTING",
    "why": {
      "withheld": true,
      "why": "uses a word the published record keeps for its own process (S3.1-DIALECT)",
      "sha256_of_value": "f4a57d79f49dc64c2436841d3517c5b8b325d3738bf9d07004e729e960585604",
      "bytes": 276
    },
    "witness_command": "cd statefabric/formal/lean && lake build Extract && cd - >/dev/null && PYTEST_DISABLE_PLUGIN_AUTOLOAD=1 python3 -m pytest -q verifycore/tests certfabric/tests",
    "defect_demonstration": {
      "id": "certfabric-verifycore",
      "target": "certfabric/cert/verify.py",
      "defect": "the certificate verifier's digest check is forced true, so a tampered body verifies — the fail-closed property the suite exists to establish",
      "witness_command": "cd statefabric/formal/lean && lake build Extract && cd - >/dev/null && PYTEST_DISABLE_PLUGIN_AUTOLOAD=1 python3 -m pytest -q verifycore/tests certfabric/tests",
      "recorded_exit": 0,
      "recorded_assertion": "97 passed",
      "mutation": "replaced 1 of 1 occurrences of 'checks[\"digests\"] = bool(sem_ok and rec_ok and csha_ok)' with 'checks[\"digests\"] = True  # PLANTED DEFECT'",
      "mutated_exit": 1,
      "mutated_first_line": "Build completed successfully (24 jobs).",
      "assertion_present_under_defect": false,
      "witness_rejects_the_defect": true,
      "tree_clean_after_restore": true,
      "restored_exit": 0,
      "restored_assertion_present": true
    },
    "asserts": "the Lean package is built and the two suites execute: 97 passed, including the axiom gate that runs `#print axioms sfServed` through the kernel, the RFC-6962 inclusion proofs, and the fail-closed verification paths.",
    "stale_claims_ref": null,
    "attested": true
  },
  "packet": null,
  "measured": {
    "measured": true,
    "basis": "defect_demonstration.mutated_exit = 1",
    "exit": 1,
    "defect_rejected": true
  },
  "register": {
    "truth_state": "attested",
    "truth_line": 142,
    "measured_per_register": true,
    "witness_class_per_register": "ASSERTING",
    "ip_class_public": "unknown",
    "ip_class_sha256": "b23a6a8439c0dde5515893e7c90c1e3233b8616e634470f20dc4928bcf3609bc",
    "ip_class_source": "reports/TOP_N_CROWN_JEWELS.md:27 @ 7eff877f38ed",
    "receipt": "register/CROWN_JEWELS_TRUTH.md",
    "receipt_sha256": "bde06cf0d3e99644522d18e79b6bd5d84ed4f5c86e315a48fef207e9e49c5022",
    "ip_class_receipt": "register/ip_class.jsonl",
    "ip_class_receipt_sha256": "b1e8f97aa6779e0fefed2f7a7726e1a03563b536b497392401b49bb8ef84d4ca"
  },
  "withheld_fields": [
    {
      "field": "top40.scope",
      "codes": [
        "LANE_DIRECTORY_NAME"
      ]
    },
    {
      "field": "top40.claim",
      "codes": [
        "PROCESS_NARRATION"
      ]
    },
    {
      "field": "witness_quality.claim",
      "codes": [
        "PROCESS_NARRATION"
      ]
    },
    {
      "field": "witness_quality.why",
      "codes": [
        "PROCESS_NARRATION"
      ]
    },
    {
      "field": "attestation_row.repository",
      "codes": [
        "LANE_DIRECTORY_NAME"
      ]
    }
  ],
  "sources": {
    "attestation": {
      "receipt": "inference-limits/dataroom/TOP_N_ATTESTATION.jsonl",
      "source": "dataroom/TOP_N_ATTESTATION.jsonl",
      "commit": "eb76dce3f6dc0889d822db1c7a5af76dc876d2db",
      "sha256": "a674007bd1bcc71c72d9033d28bbf3c0fe0f19bff407993b2a71aacfa57fca6f",
      "bytes": 1701,
      "visibility": "sealed"
    },
    "top40": {
      "receipt": "inference-limits/top40.json",
      "source": "top40.json",
      "commit": "eb76dce3f6dc0889d822db1c7a5af76dc876d2db",
      "sha256": "5d74491a747c903d407b42abbeececaf6268df57216a1fac67aa795bc4092b6e",
      "bytes": 246151,
      "visibility": "sealed"
    },
    "witness_quality": {
      "receipt": "inference-limits/dataroom/witness_quality.json",
      "source": "dataroom/witness_quality.json",
      "commit": "eb76dce3f6dc0889d822db1c7a5af76dc876d2db",
      "sha256": "2d25181a8dde236a009eb4264e63f129382d7641862180d6001c0be2856f9049",
      "bytes": 82971,
      "visibility": "sealed"
    },
    "repro_index": {
      "receipt": "inference-limits/repro/INDEX.json",
      "source": "repro/INDEX.json",
      "commit": "eb76dce3f6dc0889d822db1c7a5af76dc876d2db",
      "sha256": "80ed62f5df6a95c42aa44f13ab11a287c303acf258caf8ff2bd72439f5fc0bf0",
      "bytes": 46450,
      "visibility": "sealed"
    }
  }
}