{
  "_doc": "One result, read from the codebase’s own files at the commit named here. Every value is that file’s own, copied verbatim; nothing here is written by hand. A value replaced by {withheld: true, sha256_of_value, bytes} is committed by its sha256 instead of published, for the reason it states, and is never edited. Each whole source file is committed by sha256 below, and its bytes are published only where its visibility says so. The codebase is named by the public subject its files are published under.",
  "lane": "wireless-pqc",
  "repository": "wireless-pqc",
  "commit": "709160c57c9eb875e239acdf1eb3d0c4462e4c29",
  "portfolio_id": "wireless-pqc:kyberslash-version-pinned-ct",
  "id": "kyberslash-version-pinned-ct",
  "attestation_row": {
    "attested_at": "2026-09-13",
    "attestor": "03-wifipqc",
    "repository": {
      "withheld": true,
      "why": "a working-directory name (R8)",
      "sha256_of_value": "6f37ed958c37482bf7ee04acba61df04492fe3186c1ba6c10b77519cd450c69f",
      "bytes": 7
    },
    "source_doc": "CROWN_JEWELS_RESOLVED.md",
    "source_doc_sha256": "6958cd834026328936c2fbfb51a8b00a4dd5ec6cb65b1d0d8960bcfe0b9e2418",
    "state": "attested",
    "top_n": 26,
    "note_sha256": "c1af3e3220ffc4290cc975a79bf85d216638fd8abd3f4d8e7e67f6f5af0aff3b",
    "ids_in_row": 26,
    "file": "dataroom/TOP_N_ATTESTATION.jsonl",
    "line": 1
  },
  "claim_source": {
    "receipt": "wireless-pqc/dataroom/top40.json",
    "sha256": "6076db4027d7499ac53b5cf15f9a07bb7e41c38f56fb0f469a62353e10e65353",
    "field": "entries[5].claim",
    "file": "dataroom/top40.json"
  },
  "top40_entry": {
    "id": "kyberslash-version-pinned-ct",
    "portfolio_id": {
      "withheld": true,
      "why": "a working-directory name (R8)",
      "sha256_of_value": "9179067dabc22940787eab2a72953d39e464149d1eb889d0ffc1c5cec477ba54",
      "bytes": 36
    },
    "rank": 6,
    "native_rank": 26,
    "title": {
      "withheld": true,
      "why": "uses a word the published record keeps for its own process (S3.1-DIALECT)",
      "sha256_of_value": "7b6a36192ad3a61b595b05cb504d95ebe299ddc774b6031d5245eebad689fa54",
      "bytes": 111
    },
    "claim": {
      "withheld": true,
      "why": "uses a word the published record keeps for its own process (S3.1-DIALECT)",
      "sha256_of_value": "35f4e26ff7b585023903793e3f691dd9004732950172ce4232107bc52e4abc9c",
      "bytes": 138
    },
    "scope": "A DYNAMIC constant-time verdict on this host, this build, this microarchitecture. Not a proof of constant-time behaviour and not a physical side-channel evaluation.",
    "artifact_path": "artifacts/native/ct_mlkem_ci.json",
    "witness_command": "make ct-mlkem",
    "witness_result": {
      "status": "RAN",
      "exit": 0,
      "line": "  RESULT: PASS",
      "seconds": 2.7,
      "run_at": "2026-09-13T02:34:37Z",
      "owner_gated": false,
      "reason": null,
      "run_of_record": "clean clone at HEAD (S03, dataroom/witness_quality_20260913/clean_clone_baseline.json)"
    },
    "third_party_axis": "A",
    "facts": {
      "ran_with_receipt": true,
      "third_party_graded": true,
      "negative_control_stated": false,
      "ip_class_known": false,
      "reproduce_command": true,
      "regenerates": true
    },
    "fact_count": 4,
    "repro_command": "make ct-mlkem",
    "ip_class": null,
    "ip_class_basis": "no source in this repository states an IP class for this entry; never guessed"
  },
  "witness_quality_entry": {
    "id": "kyberslash-version-pinned-ct",
    "portfolio_id": {
      "withheld": true,
      "why": "a working-directory name (R8)",
      "sha256_of_value": "9179067dabc22940787eab2a72953d39e464149d1eb889d0ffc1c5cec477ba54",
      "bytes": 36
    },
    "title": {
      "withheld": true,
      "why": "uses a word the published record keeps for its own process (S3.1-DIALECT)",
      "sha256_of_value": "7b6a36192ad3a61b595b05cb504d95ebe299ddc774b6031d5245eebad689fa54",
      "bytes": 111
    },
    "claim": {
      "withheld": true,
      "why": "uses a word the published record keeps for its own process (S3.1-DIALECT)",
      "sha256_of_value": "35f4e26ff7b585023903793e3f691dd9004732950172ce4232107bc52e4abc9c",
      "bytes": 138
    },
    "class": "ASSERTING",
    "why": {
      "withheld": true,
      "why": "uses a word the published record keeps for its own process (S3.1-DIALECT)",
      "sha256_of_value": "f4979767f80dcf5a08217e0ad7f57159870695015d3c9e90dc44f235f1910b21",
      "bytes": 342
    },
    "witness_command": "make ct-mlkem",
    "clean_clone": {
      "exit": 0,
      "status": "RAN",
      "seconds": 2.7,
      "first_line": "== building ct_mlkem ==",
      "last_line": "  RESULT: PASS",
      "artifact_rewritten": true,
      "dirtied": [
        " M artifacts/native/ct_mlkem_ci.json"
      ],
      "run_at": "2026-09-13T02:34:37Z",
      "reason": null
    },
    "planted_defects": [
      {
        "index": 0,
        "what": "make the measurement instrument report a timing leak for any t (threshold 10.0 -> -1.0): the measured constant-time verdict becomes leak",
        "falsifies": "property: measured constant-time verdict ok",
        "decisive": true,
        "planted": [
          {
            "path": "tools/hostapd_pqc/ct_mlkem.c",
            "diff": "'(at < 10.0 ? \"ok\" : \"leak\")' -> '(at < -1.0 ? \"ok\" : \"leak\")' (x1 of 1)"
          }
        ],
        "exit": 2,
        "seconds": 3.5,
        "last_line": "make: *** [ct-mlkem] Error 1",
        "failure_moved_by": null
      },
      {
        "index": 1,
        "what": {
          "withheld": true,
          "why": "uses a word the published record keeps for its own process (S3.1-DIALECT)",
          "sha256_of_value": "59763266f59ee019d0926bc062a4fce3366ccf95772e2590f58e47a6b627c5a6",
          "bytes": 116
        },
        "falsifies": "property: version pinned past the fix",
        "decisive": true,
        "planted": [
          {
            "path": "tools/hostapd_pqc/verify_ct_mlkem.py",
            "diff": "'FIXED_THRESHOLD = (0, 10, 0)' -> 'FIXED_THRESHOLD = (0, 99, 0)' (x1 of 1)"
          }
        ],
        "exit": 2,
        "seconds": 4,
        "last_line": "make: *** [ct-mlkem] Error 1",
        "failure_moved_by": null
      }
    ],
    "measured": true,
    "stale_claims_ref": null
  },
  "packet": {
    "id": "kyberslash-version-pinned-ct",
    "portfolio_id": {
      "withheld": true,
      "why": "a working-directory name (R8)",
      "sha256_of_value": "9179067dabc22940787eab2a72953d39e464149d1eb889d0ffc1c5cec477ba54",
      "bytes": 36
    },
    "witness_command": "make ct-mlkem",
    "checker_witness": "make ct-mlkem",
    "path": "repro/kyberslash-version-pinned-ct/",
    "inputs": 4,
    "grade": "ASSERTING",
    "facts_count": 4,
    "env_guard": {
      "tool": "cc",
      "exit": 69
    },
    "kit2": {
      "grade": "ASSERTING",
      "graded_commit": "ecb2234212c70992465532494a378f97faffa959",
      "lane_head_at_grading": "cece072121bfd611fff9d7bf30acd649b8e55b40",
      "graded_utc": "2026-09-17T16:25:33Z",
      "reasons": [],
      "semantic_mutations": {
        "claim_moving": 7,
        "repro_red": 7,
        "witness_runs": 15,
        "tiers": {
          "claim_values": {
            "candidates": 5,
            "claim_moving": 3,
            "witness_runs": 5
          },
          "listed": {
            "candidates": 65,
            "claim_moving": 4,
            "witness_runs": 10
          },
          "traced": {
            "candidates": 0,
            "claim_moving": 0,
            "witness_runs": 0
          }
        }
      },
      "neutral_mutations": {
        "drawn": 11,
        "repro_red": 0,
        "coverage": {
          "listed_inputs_with_edits": 3,
          "runs": 11
        }
      },
      "inputs_graded": 4,
      "kit_pins_sha256": "af52c51b8b736c1930e0f36a27ce273f13cf86c8b4b88b703df44e80d5b25553"
    }
  },
  "measured": {
    "measured": true,
    "basis": "planted_defects[].exit = 2",
    "exit": 2,
    "defect_rejected": true
  },
  "register": {
    "truth_state": "attested",
    "truth_line": 122,
    "measured_per_register": true,
    "witness_class_per_register": "ASSERTING",
    "ip_class_public": "unknown",
    "ip_class_sha256": "b23a6a8439c0dde5515893e7c90c1e3233b8616e634470f20dc4928bcf3609bc",
    "ip_class_source": "TOP_N_CROWN_JEWELS.md:72 @ 102044d55aab",
    "receipt": "register/CROWN_JEWELS_TRUTH.md",
    "receipt_sha256": "bde06cf0d3e99644522d18e79b6bd5d84ed4f5c86e315a48fef207e9e49c5022",
    "ip_class_receipt": "register/ip_class.jsonl",
    "ip_class_receipt_sha256": "b1e8f97aa6779e0fefed2f7a7726e1a03563b536b497392401b49bb8ef84d4ca"
  },
  "withheld_fields": [
    {
      "field": "top40.portfolio_id",
      "codes": [
        "LANE_DIRECTORY_NAME"
      ]
    },
    {
      "field": "witness_quality.portfolio_id",
      "codes": [
        "LANE_DIRECTORY_NAME"
      ]
    },
    {
      "field": "packet.portfolio_id",
      "codes": [
        "LANE_DIRECTORY_NAME"
      ]
    },
    {
      "field": "top40.title",
      "codes": [
        "PROCESS_NARRATION"
      ]
    },
    {
      "field": "top40.claim",
      "codes": [
        "PROCESS_NARRATION"
      ]
    },
    {
      "field": "witness_quality.title",
      "codes": [
        "PROCESS_NARRATION"
      ]
    },
    {
      "field": "witness_quality.claim",
      "codes": [
        "PROCESS_NARRATION"
      ]
    },
    {
      "field": "witness_quality.why",
      "codes": [
        "PROCESS_NARRATION"
      ]
    },
    {
      "field": "witness_quality.planted_defects[1].what",
      "codes": [
        "PROCESS_NARRATION"
      ]
    },
    {
      "field": "attestation_row.repository",
      "codes": [
        "LANE_DIRECTORY_NAME"
      ]
    }
  ],
  "sources": {
    "attestation": {
      "receipt": "wireless-pqc/dataroom/TOP_N_ATTESTATION.jsonl",
      "source": "dataroom/TOP_N_ATTESTATION.jsonl",
      "commit": "709160c57c9eb875e239acdf1eb3d0c4462e4c29",
      "sha256": "9bf48d398fc36b52f21264edc3a04b8e2c3cd7da3c53f24ec80636897997097e",
      "bytes": 3364,
      "visibility": "sealed"
    },
    "top40": {
      "receipt": "wireless-pqc/dataroom/top40.json",
      "source": "dataroom/top40.json",
      "commit": "709160c57c9eb875e239acdf1eb3d0c4462e4c29",
      "sha256": "6076db4027d7499ac53b5cf15f9a07bb7e41c38f56fb0f469a62353e10e65353",
      "bytes": 167747,
      "visibility": "sealed"
    },
    "witness_quality": {
      "receipt": "wireless-pqc/dataroom/witness_quality.json",
      "source": "dataroom/witness_quality.json",
      "commit": "709160c57c9eb875e239acdf1eb3d0c4462e4c29",
      "sha256": "5d379a10112d400163b35100a423124c28e8bfbbdbe4378b71840eda85f75cfe",
      "bytes": 143046,
      "visibility": "sealed"
    },
    "repro_index": {
      "receipt": "wireless-pqc/repro/INDEX.json",
      "source": "repro/INDEX.json",
      "commit": "709160c57c9eb875e239acdf1eb3d0c4462e4c29",
      "sha256": "378fd4a3ce4f44403b7c9ca6a3f19c11895831f892736376c90cf9423037f9eb",
      "bytes": 26512,
      "visibility": "sealed"
    }
  }
}