{
  "_doc": "One result, read from the codebase’s own files at the commit named here. Every value is that file’s own, copied verbatim; nothing here is written by hand. A value replaced by {withheld: true, sha256_of_value, bytes} is committed by its sha256 instead of published, for the reason it states, and is never edited. Each whole source file is committed by sha256 below, and its bytes are published only where its visibility says so. The codebase is named by the public subject its files are published under.",
  "lane": "wireless-pqc",
  "repository": "wireless-pqc",
  "commit": "709160c57c9eb875e239acdf1eb3d0c4462e4c29",
  "portfolio_id": "wireless-pqc:libcrux-three-way-agreement",
  "id": "libcrux-three-way-agreement",
  "attestation_row": {
    "attested_at": "2026-09-13",
    "attestor": "03-wifipqc",
    "repository": {
      "withheld": true,
      "why": "a working-directory name (R8)",
      "sha256_of_value": "6f37ed958c37482bf7ee04acba61df04492fe3186c1ba6c10b77519cd450c69f",
      "bytes": 7
    },
    "source_doc": "CROWN_JEWELS_RESOLVED.md",
    "source_doc_sha256": "6958cd834026328936c2fbfb51a8b00a4dd5ec6cb65b1d0d8960bcfe0b9e2418",
    "state": "attested",
    "top_n": 26,
    "note_sha256": "c1af3e3220ffc4290cc975a79bf85d216638fd8abd3f4d8e7e67f6f5af0aff3b",
    "ids_in_row": 26,
    "file": "dataroom/TOP_N_ATTESTATION.jsonl",
    "line": 1
  },
  "claim_source": {
    "receipt": "wireless-pqc/dataroom/top40.json",
    "sha256": "6076db4027d7499ac53b5cf15f9a07bb7e41c38f56fb0f469a62353e10e65353",
    "field": "entries[18].claim",
    "file": "dataroom/top40.json"
  },
  "top40_entry": {
    "id": "libcrux-three-way-agreement",
    "portfolio_id": {
      "withheld": true,
      "why": "a working-directory name (R8)",
      "sha256_of_value": "d0a5005bde6ee0342ca11d0d7b6d89c21681adc1662fcf73389b931c85e886cc",
      "bytes": 35
    },
    "rank": 19,
    "native_rank": 25,
    "title": "A verified-Rust ML-KEM implementation, liboqs, and NIST's own vectors agree three ways",
    "claim": "A formally verified Rust ML-KEM implementation, liboqs, and NIST's own vectors agree three ways over 60 vectors.",
    "scope": "60 vectors, a subset of entry 1 (`acvp-nist-255-vectors`)'s 255. Byte agreement only: the hax->F* WHOLE-CRATE discharge was not re-run and remains open requirement V5.",
    "artifact_path": "artifacts/native/libcrux_interop_ci.json",
    "witness_command": "make libcrux-interop",
    "witness_result": {
      "status": "RAN",
      "exit": 0,
      "line": "  RESULT: PASS",
      "seconds": 6.9,
      "run_at": "2026-09-13T02:34:34Z",
      "owner_gated": false,
      "reason": null,
      "run_of_record": "clean clone at HEAD (S03, dataroom/witness_quality_20260913/clean_clone_baseline.json)"
    },
    "third_party_axis": "B",
    "facts": {
      "ran_with_receipt": true,
      "third_party_graded": true,
      "negative_control_stated": false,
      "ip_class_known": false,
      "reproduce_command": true,
      "regenerates": false
    },
    "fact_count": 3,
    "repro_command": "make libcrux-interop",
    "ip_class": null,
    "ip_class_basis": "no source in this repository states an IP class for this entry; never guessed"
  },
  "witness_quality_entry": {
    "id": "libcrux-three-way-agreement",
    "portfolio_id": {
      "withheld": true,
      "why": "a working-directory name (R8)",
      "sha256_of_value": "d0a5005bde6ee0342ca11d0d7b6d89c21681adc1662fcf73389b931c85e886cc",
      "bytes": 35
    },
    "title": "A verified-Rust ML-KEM implementation, liboqs, and NIST's own vectors agree three ways",
    "claim": "A formally verified Rust ML-KEM implementation, liboqs, and NIST's own vectors agree three ways over 60 vectors.",
    "class": "ASSERTING",
    "why": "clean-clone exit 0; every decisive planted defect went red: [0] falsify NIST's expected shared secret k for ML-KEM-768 encapsulation tcId 26 (last hex digit) -> exit 2",
    "witness_command": "make libcrux-interop",
    "clean_clone": {
      "exit": 0,
      "status": "RAN",
      "seconds": 6.9,
      "first_line": "== libcrux <-> liboqs <-> NIST three-way ML-KEM-768 agreement ==",
      "last_line": "  RESULT: PASS",
      "artifact_rewritten": false,
      "dirtied": [],
      "run_at": "2026-09-13T02:34:34Z",
      "reason": null
    },
    "planted_defects": [
      {
        "index": 0,
        "what": "falsify NIST's expected shared secret k for ML-KEM-768 encapsulation tcId 26 (last hex digit)",
        "falsifies": "property: three-way agreement on every vector",
        "decisive": true,
        "planted": [
          {
            "path": "conformance/acvp/ML-KEM-encapDecap-FIPS203.internalProjection.json",
            "diff": "s/(\"k\": \"B2425299020BCF563B8E[0-9A-F]{43})[0-9A-F]\"/\\g<1>0\"/ (x1)"
          }
        ],
        "exit": 2,
        "seconds": 1.2,
        "last_line": "make: *** [libcrux-interop] Error 1",
        "failure_moved_by": null
      }
    ],
    "measured": true,
    "stale_claims_ref": null
  },
  "packet": null,
  "measured": {
    "measured": true,
    "basis": "planted_defects[].exit = 2",
    "exit": 2,
    "defect_rejected": true
  },
  "register": {
    "truth_state": "attested",
    "truth_line": 123,
    "measured_per_register": true,
    "witness_class_per_register": "ASSERTING",
    "ip_class_public": "unknown",
    "ip_class_sha256": "b23a6a8439c0dde5515893e7c90c1e3233b8616e634470f20dc4928bcf3609bc",
    "ip_class_source": "TOP_N_CROWN_JEWELS.md:72 @ 102044d55aab",
    "receipt": "register/CROWN_JEWELS_TRUTH.md",
    "receipt_sha256": "bde06cf0d3e99644522d18e79b6bd5d84ed4f5c86e315a48fef207e9e49c5022",
    "ip_class_receipt": "register/ip_class.jsonl",
    "ip_class_receipt_sha256": "b1e8f97aa6779e0fefed2f7a7726e1a03563b536b497392401b49bb8ef84d4ca"
  },
  "withheld_fields": [
    {
      "field": "top40.portfolio_id",
      "codes": [
        "LANE_DIRECTORY_NAME"
      ]
    },
    {
      "field": "witness_quality.portfolio_id",
      "codes": [
        "LANE_DIRECTORY_NAME"
      ]
    },
    {
      "field": "attestation_row.repository",
      "codes": [
        "LANE_DIRECTORY_NAME"
      ]
    }
  ],
  "sources": {
    "attestation": {
      "receipt": "wireless-pqc/dataroom/TOP_N_ATTESTATION.jsonl",
      "source": "dataroom/TOP_N_ATTESTATION.jsonl",
      "commit": "709160c57c9eb875e239acdf1eb3d0c4462e4c29",
      "sha256": "9bf48d398fc36b52f21264edc3a04b8e2c3cd7da3c53f24ec80636897997097e",
      "bytes": 3364,
      "visibility": "sealed"
    },
    "top40": {
      "receipt": "wireless-pqc/dataroom/top40.json",
      "source": "dataroom/top40.json",
      "commit": "709160c57c9eb875e239acdf1eb3d0c4462e4c29",
      "sha256": "6076db4027d7499ac53b5cf15f9a07bb7e41c38f56fb0f469a62353e10e65353",
      "bytes": 167747,
      "visibility": "sealed"
    },
    "witness_quality": {
      "receipt": "wireless-pqc/dataroom/witness_quality.json",
      "source": "dataroom/witness_quality.json",
      "commit": "709160c57c9eb875e239acdf1eb3d0c4462e4c29",
      "sha256": "5d379a10112d400163b35100a423124c28e8bfbbdbe4378b71840eda85f75cfe",
      "bytes": 143046,
      "visibility": "sealed"
    },
    "repro_index": {
      "receipt": "wireless-pqc/repro/INDEX.json",
      "source": "repro/INDEX.json",
      "commit": "709160c57c9eb875e239acdf1eb3d0c4462e4c29",
      "sha256": "378fd4a3ce4f44403b7c9ca6a3f19c11895831f892736376c90cf9423037f9eb",
      "bytes": 26512,
      "visibility": "sealed"
    }
  }
}