{
  "_doc": "One result, read from the codebase’s own files at the commit named here. Every value is that file’s own, copied verbatim; nothing here is written by hand. A value replaced by {withheld: true, sha256_of_value, bytes} is committed by its sha256 instead of published, for the reason it states, and is never edited. Each whole source file is committed by sha256 below, and its bytes are published only where its visibility says so. The codebase is named by the public subject its files are published under.",
  "lane": "wireless-reliability",
  "repository": "wireless-reliability",
  "commit": "1cb3c54d9de8629abdd214911bfef7a7244ec4ff",
  "portfolio_id": "wireless-reliability:capinfer-mcp-disagreements",
  "id": "capinfer-mcp-disagreements",
  "attestation_row": {
    "attested_at": "2026-09-19",
    "attestor": "02-wireless",
    "repository": {
      "withheld": true,
      "why": "a working-directory name (R8)",
      "sha256_of_value": "62a01cc8ef60803479267f32d6c312ef0eb75baeb9e054d8b1cac54bf9f40a33",
      "bytes": 7
    },
    "source_doc": "CROWN_JEWELS_RESOLVED.md",
    "source_doc_sha256": "0e41e33d018b8df50fc37e9a1ee7fb393ef434e338776bb04f71e8e15cf440e8",
    "state": "attested",
    "top_n": 17,
    "note_sha256": "e7b0dcf1a32532b1bd0eb9b3d22caa8772768191e022000636b87cd28b1536b0",
    "ids_in_row": 17,
    "file": "05_wireless_reliability_fallback_lab/dataroom/TOP_N_ATTESTATION.jsonl",
    "line": 1
  },
  "claim_source": {
    "receipt": "wireless-reliability/dataroom/top40.json",
    "sha256": "94bf9dc5735a54020b7052fde3da5f062e760f2cb351babab0fcd6f1b52c7be5",
    "field": "entries[2].claim",
    "file": "05_wireless_reliability_fallback_lab/dataroom/top40.json"
  },
  "top40_entry": {
    "id": "capinfer-mcp-disagreements",
    "rank": 3,
    "title": "Five capability disagreements on six real third-party MCP servers — `capinfer/` (F3-05)",
    "claim": "Six third-party MCP servers were run under a real sandbox with syscall tracing, and their **authors' own declared behaviour hints** were compared against observed behaviour.",
    "scope": {
      "withheld": true,
      "why": "uses a word the published record keeps for its own process (S3.1-DIALECT)",
      "sha256_of_value": "6b616aece1fc7d607ed7714fca59e3b34e21af8bb416ac6c22e4f77e5118aa9a",
      "bytes": 635
    },
    "limits": "The current run marks this candidate `vc_eligible = False` with veto text *\"fresh capability-inference gate 13/15 RED vs historical 15/15\"*, and the `veto_source` column reads **`.omo L319 explicit exclusion`**.",
    "artifact_path": "capinfer/artifacts/capinfer_gate.json",
    "witness_command": "python3 scripts/check_capinfer.py",
    "witness_result": "exit=0 · 7.3s · GREEN: 15/15 legs green",
    "witness_class": "ASSERTING",
    "witness_class_basis": "`dataroom/witness_quality.json` id `capinfer-mcp-disagreements` — class ASSERTING; clean-clone exit 0; planted defect(s) D3",
    "clean_clone_exit": 0,
    "third_party_axis": "B",
    "third_party_basis": "`out/s02/verdicts.json` rank 3 axis `TPG-POST`",
    "facts": {
      "ran_with_receipt": true,
      "third_party_graded": true,
      "negative_control_stated": false,
      "ip_class_known": false,
      "reproduce_command": true,
      "regenerates": true
    },
    "facts_count": 4,
    "repro_command": "python3 scripts/check_capinfer.py",
    "reproduce_command": "python3 scripts/check_capinfer.py",
    "repro_packet": {
      "path": "repro/capinfer-mcp-disagreements/",
      "index_sha256": "0bff5030dca36a8e129e242975c67c75d1b983c670458420bee8b943429ac3ee",
      "grade": "FAIL",
      "kit_pin": "af52c51b8b736c1930e0f36a27ce273f13cf86c8b4b88b703df44e80d5b25553",
      "graded_rev": "c00e9fc66a81985b79a78d866a45314aa63ed123"
    },
    "ip_class": null,
    "ip_class_basis": "LANE_REGISTER_2026-09.md: '`ip_class` is UNKNOWN for every row by instruction' — unassessed, therefore null, never inferred",
    "evidence_tier": "EXTERNAL",
    "run_status": "RAN",
    "output_excerpt": "15 / 15 green; 5 disagreements",
    "attestation_rank": 3
  },
  "witness_quality_entry": {
    "id": "capinfer-mcp-disagreements",
    "claim": "Six third-party MCP servers were run under a real sandbox with syscall tracing, and their **authors' own declared behaviour hints** were compared against observed behaviour.",
    "class": "ASSERTING",
    "why": "Planted defect D3 edited one committed profile (`capinfer/artifacts/profiles/fetch.json`) and the gate went from `GREEN: 15/15` to `RED: 11/15` and **exit 1** in the clean clone; restoring it returned exit 0. The witness binds the evidence the claim is made of.",
    "clean_clone": {
      "artifact_skip_markers": null,
      "exit": 0,
      "receipt": "out/s02_witness_quality/clean_clone_receipts_2026-09-12.json#3:capinfer-mcp-disagreements",
      "seconds": 7.4,
      "skip_reason": null,
      "skipped": null
    },
    "planted_defects": [
      {
        "demo": "D3",
        "exit_after_restore": 0,
        "exit_before": 0,
        "exit_with_defect": 1,
        "expectation": "nonzero",
        "expectation_met": true,
        "file_restored_byte_identical": true,
        "mutation": {
          "from": "\"agreements\": [],",
          "to": "\"agreements\": [{\"planted\": \"S02 defect\"}],"
        },
        "planted": "one committed capability profile is edited, so it no longer re-derives byte-for-byte from the trace it was signed over",
        "ran_at": "2026-09-12T14:37:36+00:00",
        "receipt_file": "out/s02_witness_quality/planted_defects_2026-09-12.json",
        "verdict": "ASSERTING — the planted defect turned the witness red"
      }
    ],
    "asserts": [
      {
        "asserts": "15 legs, any one red is a non-zero exit",
        "file": "scripts/check_capinfer.py",
        "lines": [
          697
        ],
        "needle": "return 1 if failures else 0",
        "source": "return 1 if failures else 0"
      },
      {
        "asserts": "each committed capability profile must re-derive byte-for-byte from the committed strace trace it was signed over",
        "file": "scripts/check_capinfer.py",
        "lines": [
          177
        ],
        "needle": "every profile re-derives byte-for-byte from the committed trace",
        "source": "@leg(3, \"every profile re-derives byte-for-byte from the committed trace\")"
      }
    ],
    "stale_claims_ref": null
  },
  "packet": {
    "id": "capinfer-mcp-disagreements",
    "portfolio_id": {
      "withheld": true,
      "why": "a working-directory name (R8)",
      "sha256_of_value": "74fc25da236ab15f934ce7cc194f7d9a3171d1366b1087635cb3bee51ba24a88",
      "bytes": 34
    },
    "witness_command": "python3 scripts/check_capinfer.py",
    "checker_witness": "cd 05_wireless_reliability_fallback_lab && python3 scripts/check_capinfer.py",
    "path": "repro/capinfer-mcp-disagreements/",
    "inputs": 42,
    "grade": "FAIL",
    "facts_count": 4,
    "attestation_rank": 3,
    "env_guard": {
      "tool": "docker",
      "where": "before the witness",
      "exit": 69
    },
    "kit2": {
      "grade": "FAIL",
      "graded_commit": "c00e9fc66a81985b79a78d866a45314aa63ed123",
      "lane_head_at_grading": "c00e9fc66a81985b79a78d866a45314aa63ed123",
      "graded_utc": "2026-09-18T05:57:12Z",
      "reasons": [
        "witness red or silent on a clean clone (rc 1, value ('GREEN', 6, 6, 'GREEN', 5, 'RED', 13, 15))"
      ],
      "semantic_mutations": {
        "claim_moving": null,
        "repro_red": 0,
        "witness_runs": null,
        "tiers": null
      },
      "neutral_mutations": {
        "drawn": 0,
        "repro_red": 0,
        "coverage": null
      },
      "inputs_graded": 0,
      "kit_pins_sha256": "af52c51b8b736c1930e0f36a27ce273f13cf86c8b4b88b703df44e80d5b25553"
    }
  },
  "measured": {
    "measured": true,
    "basis": "planted_defects[].exit_with_defect = 1",
    "exit": 1,
    "defect_rejected": true
  },
  "register": {
    "truth_state": "attested",
    "truth_line": 87,
    "measured_per_register": true,
    "witness_class_per_register": "ASSERTING",
    "ip_class_public": "unknown",
    "ip_class_sha256": "b23a6a8439c0dde5515893e7c90c1e3233b8616e634470f20dc4928bcf3609bc",
    "ip_class_source": "05_wireless_reliability_fallback_lab/LANE_REGISTER_2026-09.md:7 @ 3871d59d4db8",
    "receipt": "register/CROWN_JEWELS_TRUTH.md",
    "receipt_sha256": "bde06cf0d3e99644522d18e79b6bd5d84ed4f5c86e315a48fef207e9e49c5022",
    "ip_class_receipt": "register/ip_class.jsonl",
    "ip_class_receipt_sha256": "b1e8f97aa6779e0fefed2f7a7726e1a03563b536b497392401b49bb8ef84d4ca"
  },
  "withheld_fields": [
    {
      "field": "packet.portfolio_id",
      "codes": [
        "LANE_DIRECTORY_NAME"
      ]
    },
    {
      "field": "top40.scope",
      "codes": [
        "PROCESS_NARRATION"
      ]
    },
    {
      "field": "attestation_row.repository",
      "codes": [
        "LANE_DIRECTORY_NAME"
      ]
    }
  ],
  "sources": {
    "attestation": {
      "receipt": "wireless-reliability/dataroom/TOP_N_ATTESTATION.jsonl",
      "source": "05_wireless_reliability_fallback_lab/dataroom/TOP_N_ATTESTATION.jsonl",
      "commit": "1cb3c54d9de8629abdd214911bfef7a7244ec4ff",
      "sha256": "0a32ca5be37efe69c4770cfdc34075f6101dfd530f8f64349812f119f1dc256f",
      "bytes": 3470,
      "visibility": "sealed"
    },
    "top40": {
      "receipt": "wireless-reliability/dataroom/top40.json",
      "source": "05_wireless_reliability_fallback_lab/dataroom/top40.json",
      "commit": "1cb3c54d9de8629abdd214911bfef7a7244ec4ff",
      "sha256": "94bf9dc5735a54020b7052fde3da5f062e760f2cb351babab0fcd6f1b52c7be5",
      "bytes": 163338,
      "visibility": "sealed"
    },
    "witness_quality": {
      "receipt": "wireless-reliability/dataroom/witness_quality.json",
      "source": "05_wireless_reliability_fallback_lab/dataroom/witness_quality.json",
      "commit": "1cb3c54d9de8629abdd214911bfef7a7244ec4ff",
      "sha256": "d54d7585c2c9014d607f3a27518062eea78a5e1ac86733df5c69067c25f5f365",
      "bytes": 135112,
      "visibility": "sealed"
    },
    "repro_index": {
      "receipt": "wireless-reliability/_root/repro/INDEX.json",
      "source": "repro/INDEX.json",
      "commit": "1cb3c54d9de8629abdd214911bfef7a7244ec4ff",
      "sha256": "0bff5030dca36a8e129e242975c67c75d1b983c670458420bee8b943429ac3ee",
      "bytes": 24483,
      "visibility": "sealed"
    }
  }
}