{
  "_doc": "One result, read from the codebase’s own files at the commit named here. Every value is that file’s own, copied verbatim; nothing here is written by hand. A value replaced by {withheld: true, sha256_of_value, bytes} is committed by its sha256 instead of published, for the reason it states, and is never edited. Each whole source file is committed by sha256 below, and its bytes are published only where its visibility says so. The codebase is named by the public subject its files are published under.",
  "lane": "packaging-extraction",
  "repository": "packaging-extraction",
  "commit": "b8d9325aea6d8ef103cb3d1dd1c4ba77bd80ee2f",
  "portfolio_id": "packaging-extraction:trust-chain",
  "id": "trust-chain",
  "attestation_row": {
    "attested_at": "2026-09-19",
    "attestor": "07-genesis",
    "repository": "genesis",
    "source_doc": "CROWN_JEWELS_RESOLVED.md",
    "source_doc_sha256": "781bf515d77ef14469d543ce87b2a15d0420237f5a9bc9b1a7b4899d0f935cb7",
    "state": "attested",
    "top_n": 31,
    "note_sha256": "1218191deb85b45fe5d2ef07e47c7d4e6c09061b6b8386e86759a6105204cd17",
    "ids_in_row": 31,
    "file": "dataroom/TOP_N_ATTESTATION.jsonl",
    "line": 1
  },
  "claim_source": {
    "receipt": "packaging-extraction/top40.json",
    "sha256": "1dca1ae6d762bd584ae11aa353701b702e3378cf912d8d64ec065e74f589319e",
    "field": "entries[37].claim",
    "file": "top40.json"
  },
  "top40_entry": {
    "id": "trust-chain",
    "rank": 38,
    "title": "The trust chain — UCS, in-toto, exact-SHA receipts and the portable verifiers",
    "claim": "A layered, portable answer to 'which exact code, weights, evidence and policy produced this result?', with verifiers that run on a machine that has never seen Genesis.",
    "scope": {
      "withheld": true,
      "why": "uses a word the published record keeps for its own process (S3.1-DIALECT)",
      "sha256_of_value": "c5fc02bc5861103c90802bef9b74c59965676736d0a768b231c0d0340eb47d2c",
      "bytes": 159
    },
    "limits": {
      "withheld": true,
      "why": "uses a word the published record keeps for its own process (S3.1-DIALECT)",
      "sha256_of_value": "6bbcd16d9351cc117ae950dbaae06abf5dfff5d402d1cd6a7b393e5d88c5b25c",
      "bytes": 1413
    },
    "artifact_path": "docs/audit/UCS_CLOSURE_ROOT.json",
    "witness_command": "PYTHONPATH=. python3 scripts/audit/verify_ucs_closure_gate.py",
    "witness_result": "exit=0 · EXIT0_NO_TOUCH · PASS|| UCS closure root c7177b9fc3db63fe… over 1723 witnesses: internally consistent, 136 stable committed leaves anchored (re-hash matches), independent stdlib verifier verifies inclusion, tamper-evident (leaf flip changes root), JS↔Python Merkle agree on fixture (root + inclusion). Full pristine-t",
    "witness_class": "ASSERTING",
    "witness_class_basis": "measured",
    "third_party_axis": "-",
    "facts": {
      "ran_with_receipt": true,
      "third_party_graded": false,
      "negative_control_stated": true,
      "ip_class_known": false,
      "reproduce_command": true,
      "regenerates_not_verifies": false
    },
    "facts_count": 3,
    "repro_command": "PYTHONPATH=. python3 scripts/audit/verify_ucs_closure_gate.py",
    "reproduce_command": "PYTHONPATH=. python3 scripts/audit/verify_ucs_closure_gate.py",
    "repro_packet": null,
    "ip_class": "UNKNOWN",
    "evidence_tier": "SIMULATED",
    "run_status": "RAN",
    "output_excerpt": "PASS|| UCS closure root c7177b9fc3db63fe… over 1723 witnesses: internally consistent, 136 stable committed leaves anchored (re-hash matches), independent stdlib verifier verifies inclusion, tamper-evident (leaf flip changes root), JS↔Python Merkle agree on fixture (root + inclusion).",
    "attestation_rank": 37,
    "negative_control": "leaf flip changes the root; subject tamper fails the envelope"
  },
  "witness_quality_entry": {
    "id": "trust-chain",
    "portfolio_id": "genesis:trust-chain",
    "class": "ASSERTING",
    "measured_class": "ASSERTING",
    "basis": "measured",
    "why": {
      "withheld": true,
      "why": "uses a word the published record keeps for its own process (S3.1-DIALECT)",
      "sha256_of_value": "0b5272a297012fd67d73643d26365b9d245be55595a896fda7227c6c6bee4cf0",
      "bytes": 493
    },
    "witness_command": "PYTHONPATH=. python3 scripts/audit/verify_ucs_closure_gate.py",
    "exit_clean": 0,
    "exit_mutated": 1,
    "asserts": "- stable leaf benchmarks/bem_vs_ieee_5.json on disk does NOT hash to its committed root leaf (tamper)"
  },
  "packet": null,
  "measured": {
    "measured": true,
    "basis": "exit_mutated = 1 (basis == measured)",
    "exit": 1,
    "defect_rejected": true
  },
  "register": {
    "truth_state": "attested",
    "truth_line": 207,
    "measured_per_register": true,
    "witness_class_per_register": "ASSERTING",
    "ip_class_public": "not_public",
    "ip_class_sha256": "c2ab54a718ff5484fea4f59ecc2a446deef5412ea225434433529a34a9764660",
    "ip_class_source": "docs/audit/CHIPLETOS_CANON_FACTS_2026_09_17.json:34 @ e47033d4758e",
    "receipt": "register/CROWN_JEWELS_TRUTH.md",
    "receipt_sha256": "bde06cf0d3e99644522d18e79b6bd5d84ed4f5c86e315a48fef207e9e49c5022",
    "ip_class_receipt": "register/ip_class.jsonl",
    "ip_class_receipt_sha256": "b1e8f97aa6779e0fefed2f7a7726e1a03563b536b497392401b49bb8ef84d4ca"
  },
  "withheld_fields": [
    {
      "field": "top40.scope",
      "codes": [
        "PROCESS_NARRATION"
      ]
    },
    {
      "field": "top40.limits",
      "codes": [
        "PROCESS_NARRATION"
      ]
    },
    {
      "field": "witness_quality.why",
      "codes": [
        "PROCESS_NARRATION"
      ]
    }
  ],
  "sources": {
    "attestation": {
      "receipt": "packaging-extraction/dataroom/TOP_N_ATTESTATION.jsonl",
      "source": "dataroom/TOP_N_ATTESTATION.jsonl",
      "commit": "b8d9325aea6d8ef103cb3d1dd1c4ba77bd80ee2f",
      "sha256": "73bf88d1ecd6c3299599f1929a6fda2e3b20dbe725d908375a1aec5038f199e8",
      "bytes": 3855,
      "visibility": "sealed"
    },
    "top40": {
      "receipt": "packaging-extraction/top40.json",
      "source": "top40.json",
      "commit": "b8d9325aea6d8ef103cb3d1dd1c4ba77bd80ee2f",
      "sha256": "1dca1ae6d762bd584ae11aa353701b702e3378cf912d8d64ec065e74f589319e",
      "bytes": 245175,
      "visibility": "sealed"
    },
    "witness_quality": {
      "receipt": "packaging-extraction/dataroom/witness_quality.json",
      "source": "dataroom/witness_quality.json",
      "commit": "b8d9325aea6d8ef103cb3d1dd1c4ba77bd80ee2f",
      "sha256": "a5b45f767596df7e20404884fd30f0975b1931cf08bb7f3b4e4bfc4b83073c51",
      "bytes": 161552,
      "visibility": "sealed"
    },
    "repro_index": {
      "receipt": "packaging-extraction/repro/INDEX.json",
      "source": "repro/INDEX.json",
      "commit": "b8d9325aea6d8ef103cb3d1dd1c4ba77bd80ee2f",
      "sha256": "3e1cdc5f09bf5c34a582d32529e944a4fe565211faccceb3dc5a7a1724f68635",
      "bytes": 28509,
      "visibility": "sealed"
    }
  }
}