{
  "_doc": "One result, read from the codebase’s own files at the commit named here. Every value is that file’s own, copied verbatim; nothing here is written by hand. A value replaced by {withheld: true, sha256_of_value, bytes} is committed by its sha256 instead of published, for the reason it states, and is never edited. Each whole source file is committed by sha256 below, and its bytes are published only where its visibility says so. The codebase is named by the public subject its files are published under.",
  "lane": "wireless-pqc",
  "repository": "wireless-pqc",
  "commit": "709160c57c9eb875e239acdf1eb3d0c4462e4c29",
  "portfolio_id": "wireless-pqc:standalone-c-verifier-bundle",
  "id": "standalone-c-verifier-bundle",
  "attestation_row": {
    "attested_at": "2026-09-13",
    "attestor": "03-wifipqc",
    "repository": {
      "withheld": true,
      "why": "a working-directory name (R8)",
      "sha256_of_value": "6f37ed958c37482bf7ee04acba61df04492fe3186c1ba6c10b77519cd450c69f",
      "bytes": 7
    },
    "source_doc": "CROWN_JEWELS_RESOLVED.md",
    "source_doc_sha256": "6958cd834026328936c2fbfb51a8b00a4dd5ec6cb65b1d0d8960bcfe0b9e2418",
    "state": "attested",
    "top_n": 26,
    "note_sha256": "c1af3e3220ffc4290cc975a79bf85d216638fd8abd3f4d8e7e67f6f5af0aff3b",
    "ids_in_row": 26,
    "file": "dataroom/TOP_N_ATTESTATION.jsonl",
    "line": 1
  },
  "claim_source": {
    "receipt": "wireless-pqc/dataroom/top40.json",
    "sha256": "6076db4027d7499ac53b5cf15f9a07bb7e41c38f56fb0f469a62353e10e65353",
    "field": "entries[21].claim",
    "file": "dataroom/top40.json"
  },
  "top40_entry": {
    "id": "standalone-c-verifier-bundle",
    "portfolio_id": {
      "withheld": true,
      "why": "a working-directory name (R8)",
      "sha256_of_value": "32a0450b10bc98dff35e30b8bf92cab9abc908f16061aa17dd79a1b757edcb9d",
      "bytes": 36
    },
    "rank": 22,
    "native_rank": 4,
    "title": "A stranger can verify the 16 KiB state bound with a C compiler and nothing else — no solver, no network, no Python",
    "claim": "A stranger can verify the 16 KiB state bound with a C99 compiler and nothing else: no solver, no network, no Python.",
    "scope": "The self-contained pqc-state-verifier-bundle: 6 controls, 1 accepting and 5 refusing/rejecting. It verifies the certificate, not the whole envelope.",
    "artifact_path": "pqc-state-verifier-bundle",
    "witness_command": "make -C pqc-state-verifier-bundle check",
    "witness_result": {
      "status": "RAN",
      "exit": 0,
      "line": "Acceptance count: 1/6",
      "seconds": 0.5,
      "run_at": "2026-09-13T02:31:41Z",
      "owner_gated": false,
      "reason": null,
      "run_of_record": "clean clone at HEAD (S03, dataroom/witness_quality_20260913/clean_clone_baseline.json)"
    },
    "third_party_axis": "—",
    "facts": {
      "ran_with_receipt": true,
      "third_party_graded": false,
      "negative_control_stated": false,
      "ip_class_known": false,
      "reproduce_command": true,
      "regenerates": false
    },
    "fact_count": 2,
    "repro_command": "make -C pqc-state-verifier-bundle check",
    "ip_class": null,
    "ip_class_basis": "no source in this repository states an IP class for this entry; never guessed"
  },
  "witness_quality_entry": {
    "id": "standalone-c-verifier-bundle",
    "portfolio_id": {
      "withheld": true,
      "why": "a working-directory name (R8)",
      "sha256_of_value": "32a0450b10bc98dff35e30b8bf92cab9abc908f16061aa17dd79a1b757edcb9d",
      "bytes": 36
    },
    "title": "A stranger can verify the 16 KiB state bound with a C compiler and nothing else — no solver, no network, no Python",
    "claim": "A stranger can verify the 16 KiB state bound with a C99 compiler and nothing else: no solver, no network, no Python.",
    "class": "ASSERTING",
    "why": {
      "withheld": true,
      "why": "uses a word the published record keeps for its own process (S3.1-DIALECT)",
      "sha256_of_value": "71fb4e87bb2b91c26f13f9305924b4bebab8f4803f28c2ae68095d1a3d2b1630",
      "bytes": 539
    },
    "witness_command": "make -C pqc-state-verifier-bundle check",
    "clean_clone": {
      "exit": 0,
      "status": "RAN",
      "seconds": 0.5,
      "first_line": "cc -std=c99 -Wall -Wextra -Werror -pedantic -O2 src/farkas_check.c -o bin/farkas_check",
      "last_line": "Acceptance count: 1/6",
      "artifact_rewritten": false,
      "dirtied": [],
      "run_at": "2026-09-13T02:31:41Z",
      "reason": null
    },
    "planted_defects": [
      {
        "index": 0,
        "what": {
          "withheld": true,
          "why": "uses a word the published record keeps for its own process (S3.1-DIALECT)",
          "sha256_of_value": "54ed7253170342ecfd9cd149ae3071f1002302e4d78cf5400f31fdd074afad06",
          "bytes": 178
        },
        "falsifies": "property: the certificate verifies",
        "decisive": true,
        "planted": [
          {
            "path": "pqc-state-verifier-bundle/certs/valid-reassembly-cap.txt",
            "diff": "s/^16384 1$/16383 1/ (x1)"
          },
          {
            "path": "pqc-state-verifier-bundle/controls.tsv",
            "diff": {
              "withheld": true,
              "why": "uses a word the published record keeps for its own process (S3.1-DIALECT)",
              "sha256_of_value": "5461ccf9658ad7c9f56b507f78fa59ff86d297652c2b63696ea78b95307c2ba9",
              "bytes": 105
            }
          }
        ],
        "exit": 2,
        "seconds": 0.4,
        "last_line": "make: *** [check] Error 1",
        "failure_moved_by": null
      },
      {
        "index": 1,
        "what": "tamper the certificate without touching the trusted root (16384 -> 8192 in the row and the goal)",
        "falsifies": "property: the certificate is the pinned one",
        "decisive": true,
        "planted": [
          {
            "path": "pqc-state-verifier-bundle/certs/valid-reassembly-cap.txt",
            "diff": "'16384 1' -> '8192 1' (x2 of 2)"
          }
        ],
        "exit": 2,
        "seconds": 0.3,
        "last_line": "make: *** [check] Error 1",
        "failure_moved_by": null
      },
      {
        "index": 2,
        "what": {
          "withheld": true,
          "why": "uses a word the published record keeps for its own process (S3.1-DIALECT)",
          "sha256_of_value": "f0149f11130e876ba0c973a8672933332364122fbaba058a8fccdfaf6bfe350d",
          "bytes": 100
        },
        "falsifies": "number: 16 KiB (the bundle's root of trust is itself)",
        "decisive": false,
        "planted": [
          {
            "path": "pqc-state-verifier-bundle/certs/valid-reassembly-cap.txt",
            "diff": "'16384 1' -> '8192 1' (x2 of 2)"
          },
          {
            "path": "pqc-state-verifier-bundle/controls.tsv",
            "diff": {
              "withheld": true,
              "why": "uses a word the published record keeps for its own process (S3.1-DIALECT)",
              "sha256_of_value": "b24ce350e5851fa562ee6bbf5f886db4156c93a0913d3764d5684bebb7e169e3",
              "bytes": 105
            }
          }
        ],
        "exit": 0,
        "seconds": 0.3,
        "last_line": "Acceptance count: 1/6",
        "failure_moved_by": null
      }
    ],
    "measured": true,
    "stale_claims_ref": null
  },
  "packet": null,
  "measured": {
    "measured": true,
    "basis": "planted_defects[].exit = 2",
    "exit": 2,
    "defect_rejected": true
  },
  "register": {
    "truth_state": "attested",
    "truth_line": 133,
    "measured_per_register": true,
    "witness_class_per_register": "ASSERTING",
    "ip_class_public": "unknown",
    "ip_class_sha256": "b23a6a8439c0dde5515893e7c90c1e3233b8616e634470f20dc4928bcf3609bc",
    "ip_class_source": "TOP_N_CROWN_JEWELS.md:72 @ 102044d55aab",
    "receipt": "register/CROWN_JEWELS_TRUTH.md",
    "receipt_sha256": "bde06cf0d3e99644522d18e79b6bd5d84ed4f5c86e315a48fef207e9e49c5022",
    "ip_class_receipt": "register/ip_class.jsonl",
    "ip_class_receipt_sha256": "b1e8f97aa6779e0fefed2f7a7726e1a03563b536b497392401b49bb8ef84d4ca"
  },
  "withheld_fields": [
    {
      "field": "top40.portfolio_id",
      "codes": [
        "LANE_DIRECTORY_NAME"
      ]
    },
    {
      "field": "witness_quality.portfolio_id",
      "codes": [
        "LANE_DIRECTORY_NAME"
      ]
    },
    {
      "field": "witness_quality.why",
      "codes": [
        "PROCESS_NARRATION"
      ]
    },
    {
      "field": "witness_quality.planted_defects[0].what",
      "codes": [
        "PROCESS_NARRATION"
      ]
    },
    {
      "field": "witness_quality.planted_defects[0].planted[1].diff",
      "codes": [
        "PROCESS_NARRATION"
      ]
    },
    {
      "field": "witness_quality.planted_defects[2].what",
      "codes": [
        "PROCESS_NARRATION"
      ]
    },
    {
      "field": "witness_quality.planted_defects[2].planted[1].diff",
      "codes": [
        "PROCESS_NARRATION"
      ]
    },
    {
      "field": "attestation_row.repository",
      "codes": [
        "LANE_DIRECTORY_NAME"
      ]
    }
  ],
  "sources": {
    "attestation": {
      "receipt": "wireless-pqc/dataroom/TOP_N_ATTESTATION.jsonl",
      "source": "dataroom/TOP_N_ATTESTATION.jsonl",
      "commit": "709160c57c9eb875e239acdf1eb3d0c4462e4c29",
      "sha256": "9bf48d398fc36b52f21264edc3a04b8e2c3cd7da3c53f24ec80636897997097e",
      "bytes": 3364,
      "visibility": "sealed"
    },
    "top40": {
      "receipt": "wireless-pqc/dataroom/top40.json",
      "source": "dataroom/top40.json",
      "commit": "709160c57c9eb875e239acdf1eb3d0c4462e4c29",
      "sha256": "6076db4027d7499ac53b5cf15f9a07bb7e41c38f56fb0f469a62353e10e65353",
      "bytes": 167747,
      "visibility": "sealed"
    },
    "witness_quality": {
      "receipt": "wireless-pqc/dataroom/witness_quality.json",
      "source": "dataroom/witness_quality.json",
      "commit": "709160c57c9eb875e239acdf1eb3d0c4462e4c29",
      "sha256": "5d379a10112d400163b35100a423124c28e8bfbbdbe4378b71840eda85f75cfe",
      "bytes": 143046,
      "visibility": "sealed"
    },
    "repro_index": {
      "receipt": "wireless-pqc/repro/INDEX.json",
      "source": "repro/INDEX.json",
      "commit": "709160c57c9eb875e239acdf1eb3d0c4462e4c29",
      "sha256": "378fd4a3ce4f44403b7c9ca6a3f19c11895831f892736376c90cf9423037f9eb",
      "bytes": 26512,
      "visibility": "sealed"
    }
  }
}