{
  "_doc": "One result, read from the codebase’s own files at the commit named here. Every value is that file’s own, copied verbatim; nothing here is written by hand. A value replaced by {withheld: true, sha256_of_value, bytes} is committed by its sha256 instead of published, for the reason it states, and is never edited. Each whole source file is committed by sha256 below, and its bytes are published only where its visibility says so. The codebase is named by the public subject its files are published under.",
  "lane": "wireless-pqc",
  "repository": "wireless-pqc",
  "commit": "709160c57c9eb875e239acdf1eb3d0c4462e4c29",
  "portfolio_id": "wireless-pqc:third-party-mlkem-interop",
  "id": "third-party-mlkem-interop",
  "attestation_row": {
    "attested_at": "2026-09-13",
    "attestor": "03-wifipqc",
    "repository": {
      "withheld": true,
      "why": "a working-directory name (R8)",
      "sha256_of_value": "6f37ed958c37482bf7ee04acba61df04492fe3186c1ba6c10b77519cd450c69f",
      "bytes": 7
    },
    "source_doc": "CROWN_JEWELS_RESOLVED.md",
    "source_doc_sha256": "6958cd834026328936c2fbfb51a8b00a4dd5ec6cb65b1d0d8960bcfe0b9e2418",
    "state": "attested",
    "top_n": 26,
    "note_sha256": "c1af3e3220ffc4290cc975a79bf85d216638fd8abd3f4d8e7e67f6f5af0aff3b",
    "ids_in_row": 26,
    "file": "dataroom/TOP_N_ATTESTATION.jsonl",
    "line": 1
  },
  "claim_source": {
    "receipt": "wireless-pqc/dataroom/top40.json",
    "sha256": "6076db4027d7499ac53b5cf15f9a07bb7e41c38f56fb0f469a62353e10e65353",
    "field": "entries[4].claim",
    "file": "dataroom/top40.json"
  },
  "top40_entry": {
    "id": "third-party-mlkem-interop",
    "portfolio_id": {
      "withheld": true,
      "why": "a working-directory name (R8)",
      "sha256_of_value": "a8a73f27b0a0429508df9b56131a379202161a2c644f093c0122a4601086a922",
      "bytes": 33
    },
    "rank": 5,
    "native_rank": 24,
    "title": "Two mainstream stacks that share no code with this lab interoperate at the ML-KEM-768 contract, in both directions",
    "claim": "OpenSSL and liboqs -- two mainstream stacks sharing no code with this lab -- interoperate at the ML-KEM-768 contract in both directions.",
    "scope": {
      "withheld": true,
      "why": "uses a word the published record keeps for its own process (S3.1-DIALECT)",
      "sha256_of_value": "04a3db62f0b694b25ccc4b46cad07106bf53b3576059043e2bce34caec5328e3",
      "bytes": 154
    },
    "artifact_path": "artifacts/native/interop_3p_ci.json",
    "witness_command": "make interop-3p",
    "witness_result": {
      "status": "RAN",
      "exit": 0,
      "line": "wrote artifacts/native/interop_3p_ci.json",
      "seconds": 0.3,
      "run_at": "2026-09-13T02:34:27Z",
      "owner_gated": false,
      "reason": null,
      "run_of_record": "clean clone at HEAD (S03, dataroom/witness_quality_20260913/clean_clone_baseline.json)"
    },
    "third_party_axis": "A",
    "facts": {
      "ran_with_receipt": true,
      "third_party_graded": true,
      "negative_control_stated": false,
      "ip_class_known": false,
      "reproduce_command": true,
      "regenerates": true
    },
    "fact_count": 4,
    "repro_command": "make interop-3p",
    "ip_class": null,
    "ip_class_basis": "no source in this repository states an IP class for this entry; never guessed"
  },
  "witness_quality_entry": {
    "id": "third-party-mlkem-interop",
    "portfolio_id": {
      "withheld": true,
      "why": "a working-directory name (R8)",
      "sha256_of_value": "a8a73f27b0a0429508df9b56131a379202161a2c644f093c0122a4601086a922",
      "bytes": 33
    },
    "title": "Two mainstream stacks that share no code with this lab interoperate at the ML-KEM-768 contract, in both directions",
    "claim": "OpenSSL and liboqs -- two mainstream stacks sharing no code with this lab -- interoperate at the ML-KEM-768 contract in both directions.",
    "class": "ASSERTING",
    "why": {
      "withheld": true,
      "why": "uses a word the published record keeps for its own process (S3.1-DIALECT)",
      "sha256_of_value": "a8c0860cd12f213cc43234ab3f16bc254ff5b8ad6fc7fe89674bc4893b310b01",
      "bytes": 304
    },
    "witness_command": "make interop-3p",
    "clean_clone": {
      "exit": 0,
      "status": "RAN",
      "seconds": 0.3,
      "first_line": "liboqs-python faulthandler is disabled",
      "last_line": "wrote artifacts/native/interop_3p_ci.json",
      "artifact_rewritten": true,
      "dirtied": [
        " M artifacts/native/interop_3p_ci.json"
      ],
      "run_at": "2026-09-13T02:34:27Z",
      "reason": null
    },
    "planted_defects": [
      {
        "index": 0,
        "what": "corrupt one byte of the liboqs ciphertext on its way to OpenSSL (A->B): the two stacks no longer interoperate",
        "falsifies": "property: cross-vendor A->B secret match",
        "decisive": true,
        "planted": [
          {
            "path": "tools/interop/third_party_mlkem.py",
            "diff": "'                ss_ossl = _openssl_decap(sk_pem, ct_ab, tmp)\\n' -> '                ss_ossl = _openssl_decap(sk_pem, bytes([ct_ab[5] ^ 0x80]) + ct_a' (x1 of 1)"
          }
        ],
        "exit": 2,
        "seconds": 0.5,
        "last_line": "make: *** [interop-3p] Error 1",
        "failure_moved_by": null
      },
      {
        "index": 1,
        "what": {
          "withheld": true,
          "why": "uses a word the published record keeps for its own process (S3.1-DIALECT)",
          "sha256_of_value": "69df6df3cd28ca49039d5af0e7d1e67335574676cd0f4be91b197656df9994b4",
          "bytes": 105
        },
        "falsifies": "property: the deterministic KAT floor",
        "decisive": true,
        "planted": [
          {
            "path": "conformance/interop_kit/vectors.json",
            "diff": "s/(\"ptk\": \"[0-9a-f]{94})[0-9a-f]{2}\"/\\g<1>00\"/ (x1)"
          }
        ],
        "exit": 2,
        "seconds": 0.3,
        "last_line": "make: *** [interop-3p] Error 1",
        "failure_moved_by": null
      }
    ],
    "measured": true,
    "stale_claims_ref": null
  },
  "packet": {
    "id": "third-party-mlkem-interop",
    "portfolio_id": {
      "withheld": true,
      "why": "a working-directory name (R8)",
      "sha256_of_value": "a8a73f27b0a0429508df9b56131a379202161a2c644f093c0122a4601086a922",
      "bytes": 33
    },
    "witness_command": "make interop-3p",
    "checker_witness": "make interop-3p",
    "path": "repro/third-party-mlkem-interop/",
    "inputs": 5,
    "grade": "ASSERTING",
    "facts_count": 4,
    "env_guard": {
      "tool": "openssl",
      "exit": 69
    },
    "kit2": {
      "grade": "ASSERTING",
      "graded_commit": "ecb2234212c70992465532494a378f97faffa959",
      "lane_head_at_grading": "cece072121bfd611fff9d7bf30acd649b8e55b40",
      "graded_utc": "2026-09-17T16:25:33Z",
      "reasons": [],
      "semantic_mutations": {
        "claim_moving": 3,
        "repro_red": 3,
        "witness_runs": 6,
        "tiers": {
          "claim_values": {
            "candidates": 0,
            "claim_moving": 0,
            "witness_runs": 0
          },
          "listed": {
            "candidates": 78,
            "claim_moving": 3,
            "witness_runs": 6
          },
          "traced": {
            "candidates": 0,
            "claim_moving": 0,
            "witness_runs": 0
          }
        }
      },
      "neutral_mutations": {
        "drawn": 12,
        "repro_red": 0,
        "coverage": {
          "listed_inputs_with_edits": 4,
          "runs": 12
        }
      },
      "inputs_graded": 5,
      "kit_pins_sha256": "af52c51b8b736c1930e0f36a27ce273f13cf86c8b4b88b703df44e80d5b25553"
    }
  },
  "measured": {
    "measured": true,
    "basis": "planted_defects[].exit = 2",
    "exit": 2,
    "defect_rejected": true
  },
  "register": {
    "truth_state": "attested",
    "truth_line": 134,
    "measured_per_register": true,
    "witness_class_per_register": "ASSERTING",
    "ip_class_public": "unknown",
    "ip_class_sha256": "b23a6a8439c0dde5515893e7c90c1e3233b8616e634470f20dc4928bcf3609bc",
    "ip_class_source": "TOP_N_CROWN_JEWELS.md:72 @ 102044d55aab",
    "receipt": "register/CROWN_JEWELS_TRUTH.md",
    "receipt_sha256": "bde06cf0d3e99644522d18e79b6bd5d84ed4f5c86e315a48fef207e9e49c5022",
    "ip_class_receipt": "register/ip_class.jsonl",
    "ip_class_receipt_sha256": "b1e8f97aa6779e0fefed2f7a7726e1a03563b536b497392401b49bb8ef84d4ca"
  },
  "withheld_fields": [
    {
      "field": "top40.portfolio_id",
      "codes": [
        "LANE_DIRECTORY_NAME"
      ]
    },
    {
      "field": "witness_quality.portfolio_id",
      "codes": [
        "LANE_DIRECTORY_NAME"
      ]
    },
    {
      "field": "packet.portfolio_id",
      "codes": [
        "LANE_DIRECTORY_NAME"
      ]
    },
    {
      "field": "top40.scope",
      "codes": [
        "PROCESS_NARRATION"
      ]
    },
    {
      "field": "witness_quality.why",
      "codes": [
        "PROCESS_NARRATION"
      ]
    },
    {
      "field": "witness_quality.planted_defects[1].what",
      "codes": [
        "PROCESS_NARRATION"
      ]
    },
    {
      "field": "attestation_row.repository",
      "codes": [
        "LANE_DIRECTORY_NAME"
      ]
    }
  ],
  "sources": {
    "attestation": {
      "receipt": "wireless-pqc/dataroom/TOP_N_ATTESTATION.jsonl",
      "source": "dataroom/TOP_N_ATTESTATION.jsonl",
      "commit": "709160c57c9eb875e239acdf1eb3d0c4462e4c29",
      "sha256": "9bf48d398fc36b52f21264edc3a04b8e2c3cd7da3c53f24ec80636897997097e",
      "bytes": 3364,
      "visibility": "sealed"
    },
    "top40": {
      "receipt": "wireless-pqc/dataroom/top40.json",
      "source": "dataroom/top40.json",
      "commit": "709160c57c9eb875e239acdf1eb3d0c4462e4c29",
      "sha256": "6076db4027d7499ac53b5cf15f9a07bb7e41c38f56fb0f469a62353e10e65353",
      "bytes": 167747,
      "visibility": "sealed"
    },
    "witness_quality": {
      "receipt": "wireless-pqc/dataroom/witness_quality.json",
      "source": "dataroom/witness_quality.json",
      "commit": "709160c57c9eb875e239acdf1eb3d0c4462e4c29",
      "sha256": "5d379a10112d400163b35100a423124c28e8bfbbdbe4378b71840eda85f75cfe",
      "bytes": 143046,
      "visibility": "sealed"
    },
    "repro_index": {
      "receipt": "wireless-pqc/repro/INDEX.json",
      "source": "repro/INDEX.json",
      "commit": "709160c57c9eb875e239acdf1eb3d0c4462e4c29",
      "sha256": "378fd4a3ce4f44403b7c9ca6a3f19c11895831f892736376c90cf9423037f9eb",
      "bytes": 26512,
      "visibility": "sealed"
    }
  }
}