{
  "schema": "finality-assurance-corpus.v1",
  "profile": "Institutional outcome certificate v2",
  "authorship": "SELLER_AUTHORED",
  "external_independence": false,
  "vectors": [
    {
      "id": "honest-final",
      "category": "positive",
      "authorship": "SELLER_AUTHORED",
      "expected_valid": true,
      "input": {
        "certificate": {
          "id": "public-test-certificate",
          "certificate_version": 2,
          "head_sequence": 1,
          "contract_id": "public-test-outcome",
          "tenant_id": "public-test-tenant",
          "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
          "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
          "state": "FINAL",
          "evidence_ids": [
            "e-acceptance",
            "e-ledger"
          ],
          "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
          "issued_at": "2026-10-01T12:00:01Z",
          "issuer_id": "public-test-issuer",
          "signer_key_id": "public-test-key",
          "trust_domain_id": "public-test-domain",
          "reliance_profile_id": "R2",
          "policy_version": "test-policy-1",
          "schema_version": "2.0.0",
          "previous_certificate_id": null,
          "evidence_ceiling": "E3",
          "payload_digest": "sha256:c13f1b066bfbd0ded101802777d0f4b9a1f96676455deaed2552b200020129a5",
          "signature": "9AoMPC0JWQHyi7hN7BYzey6Z9xlLeIj2CBnCw4ZnSBLCkWd4i27leOud1e2_os18hOlCJdS9h8Cmp4Nhq_f5BQ"
        },
        "options": {
          "contract": {
            "id": "public-test-outcome",
            "version": 1,
            "tenant_id": "public-test-tenant",
            "subject": "Public test delivery",
            "expected_end_state": {
              "delivered": true
            },
            "authoritative_sources": [
              "ledger",
              "acceptance"
            ],
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "contradiction_rules": [
              {
                "path": "revoked",
                "operator": "eq",
                "value": true
              }
            ],
            "source_freshness_seconds": {
              "ledger": 10,
              "acceptance": 10
            },
            "max_clock_skew_seconds": 0
          },
          "evidence": [
            {
              "id": "e-ledger",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "ledger",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/ledger"
            },
            {
              "id": "e-acceptance",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "acceptance",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/acceptance"
            }
          ],
          "now": "2026-10-01T12:00:01Z",
          "current_head": {
            "id": "public-test-certificate",
            "certificate_version": 2,
            "head_sequence": 1,
            "contract_id": "public-test-outcome",
            "tenant_id": "public-test-tenant",
            "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
            "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
            "state": "FINAL",
            "evidence_ids": [
              "e-acceptance",
              "e-ledger"
            ],
            "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
            "issued_at": "2026-10-01T12:00:01Z",
            "issuer_id": "public-test-issuer",
            "signer_key_id": "public-test-key",
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "previous_certificate_id": null,
            "evidence_ceiling": "E3",
            "payload_digest": "sha256:c13f1b066bfbd0ded101802777d0f4b9a1f96676455deaed2552b200020129a5",
            "signature": "9AoMPC0JWQHyi7hN7BYzey6Z9xlLeIj2CBnCw4ZnSBLCkWd4i27leOud1e2_os18hOlCJdS9h8Cmp4Nhq_f5BQ"
          },
          "trusted_issuer_keys": [
            {
              "id": "public-test-key",
              "issuer_id": "public-test-issuer",
              "public_key": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAoZdrzsncx0W1p1YesByChrqEK8HaF3+DtD3X5KlnKig=\n-----END PUBLIC KEY-----\n",
              "trust_domains": [
                "public-test-domain"
              ],
              "status": "ACTIVE",
              "not_before": "2026-01-01T00:00:00Z",
              "not_after": "2027-01-01T00:00:00Z"
            }
          ]
        }
      }
    },
    {
      "id": "reordered-evidence",
      "category": "ordering",
      "authorship": "SELLER_AUTHORED",
      "expected_valid": true,
      "input": {
        "certificate": {
          "id": "public-test-certificate",
          "certificate_version": 2,
          "head_sequence": 1,
          "contract_id": "public-test-outcome",
          "tenant_id": "public-test-tenant",
          "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
          "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
          "state": "FINAL",
          "evidence_ids": [
            "e-acceptance",
            "e-ledger"
          ],
          "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
          "issued_at": "2026-10-01T12:00:01Z",
          "issuer_id": "public-test-issuer",
          "signer_key_id": "public-test-key",
          "trust_domain_id": "public-test-domain",
          "reliance_profile_id": "R2",
          "policy_version": "test-policy-1",
          "schema_version": "2.0.0",
          "previous_certificate_id": null,
          "evidence_ceiling": "E3",
          "payload_digest": "sha256:c13f1b066bfbd0ded101802777d0f4b9a1f96676455deaed2552b200020129a5",
          "signature": "9AoMPC0JWQHyi7hN7BYzey6Z9xlLeIj2CBnCw4ZnSBLCkWd4i27leOud1e2_os18hOlCJdS9h8Cmp4Nhq_f5BQ"
        },
        "options": {
          "contract": {
            "id": "public-test-outcome",
            "version": 1,
            "tenant_id": "public-test-tenant",
            "subject": "Public test delivery",
            "expected_end_state": {
              "delivered": true
            },
            "authoritative_sources": [
              "ledger",
              "acceptance"
            ],
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "contradiction_rules": [
              {
                "path": "revoked",
                "operator": "eq",
                "value": true
              }
            ],
            "source_freshness_seconds": {
              "ledger": 10,
              "acceptance": 10
            },
            "max_clock_skew_seconds": 0
          },
          "evidence": [
            {
              "id": "e-acceptance",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "acceptance",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/acceptance"
            },
            {
              "id": "e-ledger",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "ledger",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/ledger"
            }
          ],
          "now": "2026-10-01T12:00:01Z",
          "current_head": {
            "id": "public-test-certificate",
            "certificate_version": 2,
            "head_sequence": 1,
            "contract_id": "public-test-outcome",
            "tenant_id": "public-test-tenant",
            "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
            "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
            "state": "FINAL",
            "evidence_ids": [
              "e-acceptance",
              "e-ledger"
            ],
            "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
            "issued_at": "2026-10-01T12:00:01Z",
            "issuer_id": "public-test-issuer",
            "signer_key_id": "public-test-key",
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "previous_certificate_id": null,
            "evidence_ceiling": "E3",
            "payload_digest": "sha256:c13f1b066bfbd0ded101802777d0f4b9a1f96676455deaed2552b200020129a5",
            "signature": "9AoMPC0JWQHyi7hN7BYzey6Z9xlLeIj2CBnCw4ZnSBLCkWd4i27leOud1e2_os18hOlCJdS9h8Cmp4Nhq_f5BQ"
          },
          "trusted_issuer_keys": [
            {
              "id": "public-test-key",
              "issuer_id": "public-test-issuer",
              "public_key": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAoZdrzsncx0W1p1YesByChrqEK8HaF3+DtD3X5KlnKig=\n-----END PUBLIC KEY-----\n",
              "trust_domains": [
                "public-test-domain"
              ],
              "status": "ACTIVE",
              "not_before": "2026-01-01T00:00:00Z",
              "not_after": "2027-01-01T00:00:00Z"
            }
          ]
        }
      }
    },
    {
      "id": "missing-package",
      "category": "malformed",
      "authorship": "SELLER_AUTHORED",
      "expected_valid": false,
      "input": {
        "certificate": null,
        "options": {
          "contract": {
            "id": "public-test-outcome",
            "version": 1,
            "tenant_id": "public-test-tenant",
            "subject": "Public test delivery",
            "expected_end_state": {
              "delivered": true
            },
            "authoritative_sources": [
              "ledger",
              "acceptance"
            ],
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "contradiction_rules": [
              {
                "path": "revoked",
                "operator": "eq",
                "value": true
              }
            ],
            "source_freshness_seconds": {
              "ledger": 10,
              "acceptance": 10
            },
            "max_clock_skew_seconds": 0
          },
          "evidence": [
            {
              "id": "e-ledger",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "ledger",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/ledger"
            },
            {
              "id": "e-acceptance",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "acceptance",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/acceptance"
            }
          ],
          "now": "2026-10-01T12:00:01Z",
          "current_head": {
            "id": "public-test-certificate",
            "certificate_version": 2,
            "head_sequence": 1,
            "contract_id": "public-test-outcome",
            "tenant_id": "public-test-tenant",
            "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
            "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
            "state": "FINAL",
            "evidence_ids": [
              "e-acceptance",
              "e-ledger"
            ],
            "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
            "issued_at": "2026-10-01T12:00:01Z",
            "issuer_id": "public-test-issuer",
            "signer_key_id": "public-test-key",
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "previous_certificate_id": null,
            "evidence_ceiling": "E3",
            "payload_digest": "sha256:c13f1b066bfbd0ded101802777d0f4b9a1f96676455deaed2552b200020129a5",
            "signature": "9AoMPC0JWQHyi7hN7BYzey6Z9xlLeIj2CBnCw4ZnSBLCkWd4i27leOud1e2_os18hOlCJdS9h8Cmp4Nhq_f5BQ"
          },
          "trusted_issuer_keys": [
            {
              "id": "public-test-key",
              "issuer_id": "public-test-issuer",
              "public_key": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAoZdrzsncx0W1p1YesByChrqEK8HaF3+DtD3X5KlnKig=\n-----END PUBLIC KEY-----\n",
              "trust_domains": [
                "public-test-domain"
              ],
              "status": "ACTIVE",
              "not_before": "2026-01-01T00:00:00Z",
              "not_after": "2027-01-01T00:00:00Z"
            }
          ]
        }
      }
    },
    {
      "id": "empty-certificate",
      "category": "malformed",
      "authorship": "SELLER_AUTHORED",
      "expected_valid": false,
      "input": {
        "certificate": {},
        "options": {
          "contract": {
            "id": "public-test-outcome",
            "version": 1,
            "tenant_id": "public-test-tenant",
            "subject": "Public test delivery",
            "expected_end_state": {
              "delivered": true
            },
            "authoritative_sources": [
              "ledger",
              "acceptance"
            ],
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "contradiction_rules": [
              {
                "path": "revoked",
                "operator": "eq",
                "value": true
              }
            ],
            "source_freshness_seconds": {
              "ledger": 10,
              "acceptance": 10
            },
            "max_clock_skew_seconds": 0
          },
          "evidence": [
            {
              "id": "e-ledger",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "ledger",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/ledger"
            },
            {
              "id": "e-acceptance",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "acceptance",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/acceptance"
            }
          ],
          "now": "2026-10-01T12:00:01Z",
          "current_head": {
            "id": "public-test-certificate",
            "certificate_version": 2,
            "head_sequence": 1,
            "contract_id": "public-test-outcome",
            "tenant_id": "public-test-tenant",
            "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
            "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
            "state": "FINAL",
            "evidence_ids": [
              "e-acceptance",
              "e-ledger"
            ],
            "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
            "issued_at": "2026-10-01T12:00:01Z",
            "issuer_id": "public-test-issuer",
            "signer_key_id": "public-test-key",
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "previous_certificate_id": null,
            "evidence_ceiling": "E3",
            "payload_digest": "sha256:c13f1b066bfbd0ded101802777d0f4b9a1f96676455deaed2552b200020129a5",
            "signature": "9AoMPC0JWQHyi7hN7BYzey6Z9xlLeIj2CBnCw4ZnSBLCkWd4i27leOud1e2_os18hOlCJdS9h8Cmp4Nhq_f5BQ"
          },
          "trusted_issuer_keys": [
            {
              "id": "public-test-key",
              "issuer_id": "public-test-issuer",
              "public_key": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAoZdrzsncx0W1p1YesByChrqEK8HaF3+DtD3X5KlnKig=\n-----END PUBLIC KEY-----\n",
              "trust_domains": [
                "public-test-domain"
              ],
              "status": "ACTIVE",
              "not_before": "2026-01-01T00:00:00Z",
              "not_after": "2027-01-01T00:00:00Z"
            }
          ]
        }
      }
    },
    {
      "id": "invalid-clock",
      "category": "malformed",
      "authorship": "SELLER_AUTHORED",
      "expected_valid": false,
      "input": {
        "certificate": {
          "id": "public-test-certificate",
          "certificate_version": 2,
          "head_sequence": 1,
          "contract_id": "public-test-outcome",
          "tenant_id": "public-test-tenant",
          "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
          "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
          "state": "FINAL",
          "evidence_ids": [
            "e-acceptance",
            "e-ledger"
          ],
          "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
          "issued_at": "2026-10-01T12:00:01Z",
          "issuer_id": "public-test-issuer",
          "signer_key_id": "public-test-key",
          "trust_domain_id": "public-test-domain",
          "reliance_profile_id": "R2",
          "policy_version": "test-policy-1",
          "schema_version": "2.0.0",
          "previous_certificate_id": null,
          "evidence_ceiling": "E3",
          "payload_digest": "sha256:c13f1b066bfbd0ded101802777d0f4b9a1f96676455deaed2552b200020129a5",
          "signature": "9AoMPC0JWQHyi7hN7BYzey6Z9xlLeIj2CBnCw4ZnSBLCkWd4i27leOud1e2_os18hOlCJdS9h8Cmp4Nhq_f5BQ"
        },
        "options": {
          "contract": {
            "id": "public-test-outcome",
            "version": 1,
            "tenant_id": "public-test-tenant",
            "subject": "Public test delivery",
            "expected_end_state": {
              "delivered": true
            },
            "authoritative_sources": [
              "ledger",
              "acceptance"
            ],
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "contradiction_rules": [
              {
                "path": "revoked",
                "operator": "eq",
                "value": true
              }
            ],
            "source_freshness_seconds": {
              "ledger": 10,
              "acceptance": 10
            },
            "max_clock_skew_seconds": 0
          },
          "evidence": [
            {
              "id": "e-ledger",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "ledger",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/ledger"
            },
            {
              "id": "e-acceptance",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "acceptance",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/acceptance"
            }
          ],
          "now": "not-a-time",
          "current_head": {
            "id": "public-test-certificate",
            "certificate_version": 2,
            "head_sequence": 1,
            "contract_id": "public-test-outcome",
            "tenant_id": "public-test-tenant",
            "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
            "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
            "state": "FINAL",
            "evidence_ids": [
              "e-acceptance",
              "e-ledger"
            ],
            "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
            "issued_at": "2026-10-01T12:00:01Z",
            "issuer_id": "public-test-issuer",
            "signer_key_id": "public-test-key",
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "previous_certificate_id": null,
            "evidence_ceiling": "E3",
            "payload_digest": "sha256:c13f1b066bfbd0ded101802777d0f4b9a1f96676455deaed2552b200020129a5",
            "signature": "9AoMPC0JWQHyi7hN7BYzey6Z9xlLeIj2CBnCw4ZnSBLCkWd4i27leOud1e2_os18hOlCJdS9h8Cmp4Nhq_f5BQ"
          },
          "trusted_issuer_keys": [
            {
              "id": "public-test-key",
              "issuer_id": "public-test-issuer",
              "public_key": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAoZdrzsncx0W1p1YesByChrqEK8HaF3+DtD3X5KlnKig=\n-----END PUBLIC KEY-----\n",
              "trust_domains": [
                "public-test-domain"
              ],
              "status": "ACTIVE",
              "not_before": "2026-01-01T00:00:00Z",
              "not_after": "2027-01-01T00:00:00Z"
            }
          ]
        }
      }
    },
    {
      "id": "malformed-key",
      "category": "crypto",
      "authorship": "SELLER_AUTHORED",
      "expected_valid": false,
      "input": {
        "certificate": {
          "id": "public-test-certificate",
          "certificate_version": 2,
          "head_sequence": 1,
          "contract_id": "public-test-outcome",
          "tenant_id": "public-test-tenant",
          "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
          "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
          "state": "FINAL",
          "evidence_ids": [
            "e-acceptance",
            "e-ledger"
          ],
          "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
          "issued_at": "2026-10-01T12:00:01Z",
          "issuer_id": "public-test-issuer",
          "signer_key_id": "public-test-key",
          "trust_domain_id": "public-test-domain",
          "reliance_profile_id": "R2",
          "policy_version": "test-policy-1",
          "schema_version": "2.0.0",
          "previous_certificate_id": null,
          "evidence_ceiling": "E3",
          "payload_digest": "sha256:c13f1b066bfbd0ded101802777d0f4b9a1f96676455deaed2552b200020129a5",
          "signature": "9AoMPC0JWQHyi7hN7BYzey6Z9xlLeIj2CBnCw4ZnSBLCkWd4i27leOud1e2_os18hOlCJdS9h8Cmp4Nhq_f5BQ"
        },
        "options": {
          "contract": {
            "id": "public-test-outcome",
            "version": 1,
            "tenant_id": "public-test-tenant",
            "subject": "Public test delivery",
            "expected_end_state": {
              "delivered": true
            },
            "authoritative_sources": [
              "ledger",
              "acceptance"
            ],
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "contradiction_rules": [
              {
                "path": "revoked",
                "operator": "eq",
                "value": true
              }
            ],
            "source_freshness_seconds": {
              "ledger": 10,
              "acceptance": 10
            },
            "max_clock_skew_seconds": 0
          },
          "evidence": [
            {
              "id": "e-ledger",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "ledger",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/ledger"
            },
            {
              "id": "e-acceptance",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "acceptance",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/acceptance"
            }
          ],
          "now": "2026-10-01T12:00:01Z",
          "current_head": {
            "id": "public-test-certificate",
            "certificate_version": 2,
            "head_sequence": 1,
            "contract_id": "public-test-outcome",
            "tenant_id": "public-test-tenant",
            "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
            "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
            "state": "FINAL",
            "evidence_ids": [
              "e-acceptance",
              "e-ledger"
            ],
            "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
            "issued_at": "2026-10-01T12:00:01Z",
            "issuer_id": "public-test-issuer",
            "signer_key_id": "public-test-key",
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "previous_certificate_id": null,
            "evidence_ceiling": "E3",
            "payload_digest": "sha256:c13f1b066bfbd0ded101802777d0f4b9a1f96676455deaed2552b200020129a5",
            "signature": "9AoMPC0JWQHyi7hN7BYzey6Z9xlLeIj2CBnCw4ZnSBLCkWd4i27leOud1e2_os18hOlCJdS9h8Cmp4Nhq_f5BQ"
          },
          "trusted_issuer_keys": [
            {
              "id": "public-test-key",
              "issuer_id": "public-test-issuer",
              "public_key": "bad",
              "trust_domains": [
                "public-test-domain"
              ],
              "status": "ACTIVE",
              "not_before": "2026-01-01T00:00:00Z",
              "not_after": "2027-01-01T00:00:00Z"
            }
          ]
        }
      }
    },
    {
      "id": "truncated-signature",
      "category": "crypto",
      "authorship": "SELLER_AUTHORED",
      "expected_valid": false,
      "input": {
        "certificate": {
          "id": "public-test-certificate",
          "certificate_version": 2,
          "head_sequence": 1,
          "contract_id": "public-test-outcome",
          "tenant_id": "public-test-tenant",
          "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
          "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
          "state": "FINAL",
          "evidence_ids": [
            "e-acceptance",
            "e-ledger"
          ],
          "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
          "issued_at": "2026-10-01T12:00:01Z",
          "issuer_id": "public-test-issuer",
          "signer_key_id": "public-test-key",
          "trust_domain_id": "public-test-domain",
          "reliance_profile_id": "R2",
          "policy_version": "test-policy-1",
          "schema_version": "2.0.0",
          "previous_certificate_id": null,
          "evidence_ceiling": "E3",
          "payload_digest": "sha256:c13f1b066bfbd0ded101802777d0f4b9a1f96676455deaed2552b200020129a5",
          "signature": "9AoMPC0J"
        },
        "options": {
          "contract": {
            "id": "public-test-outcome",
            "version": 1,
            "tenant_id": "public-test-tenant",
            "subject": "Public test delivery",
            "expected_end_state": {
              "delivered": true
            },
            "authoritative_sources": [
              "ledger",
              "acceptance"
            ],
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "contradiction_rules": [
              {
                "path": "revoked",
                "operator": "eq",
                "value": true
              }
            ],
            "source_freshness_seconds": {
              "ledger": 10,
              "acceptance": 10
            },
            "max_clock_skew_seconds": 0
          },
          "evidence": [
            {
              "id": "e-ledger",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "ledger",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/ledger"
            },
            {
              "id": "e-acceptance",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "acceptance",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/acceptance"
            }
          ],
          "now": "2026-10-01T12:00:01Z",
          "current_head": {
            "id": "public-test-certificate",
            "certificate_version": 2,
            "head_sequence": 1,
            "contract_id": "public-test-outcome",
            "tenant_id": "public-test-tenant",
            "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
            "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
            "state": "FINAL",
            "evidence_ids": [
              "e-acceptance",
              "e-ledger"
            ],
            "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
            "issued_at": "2026-10-01T12:00:01Z",
            "issuer_id": "public-test-issuer",
            "signer_key_id": "public-test-key",
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "previous_certificate_id": null,
            "evidence_ceiling": "E3",
            "payload_digest": "sha256:c13f1b066bfbd0ded101802777d0f4b9a1f96676455deaed2552b200020129a5",
            "signature": "9AoMPC0JWQHyi7hN7BYzey6Z9xlLeIj2CBnCw4ZnSBLCkWd4i27leOud1e2_os18hOlCJdS9h8Cmp4Nhq_f5BQ"
          },
          "trusted_issuer_keys": [
            {
              "id": "public-test-key",
              "issuer_id": "public-test-issuer",
              "public_key": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAoZdrzsncx0W1p1YesByChrqEK8HaF3+DtD3X5KlnKig=\n-----END PUBLIC KEY-----\n",
              "trust_domains": [
                "public-test-domain"
              ],
              "status": "ACTIVE",
              "not_before": "2026-01-01T00:00:00Z",
              "not_after": "2027-01-01T00:00:00Z"
            }
          ]
        }
      }
    },
    {
      "id": "corrupt-payload",
      "category": "corruption",
      "authorship": "SELLER_AUTHORED",
      "expected_valid": false,
      "input": {
        "certificate": {
          "id": "public-test-certificate",
          "certificate_version": 2,
          "head_sequence": 1,
          "contract_id": "public-test-outcome",
          "tenant_id": "public-test-tenant",
          "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
          "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
          "state": "FINAL",
          "evidence_ids": [
            "e-acceptance",
            "e-ledger"
          ],
          "reason": "corrupted",
          "issued_at": "2026-10-01T12:00:01Z",
          "issuer_id": "public-test-issuer",
          "signer_key_id": "public-test-key",
          "trust_domain_id": "public-test-domain",
          "reliance_profile_id": "R2",
          "policy_version": "test-policy-1",
          "schema_version": "2.0.0",
          "previous_certificate_id": null,
          "evidence_ceiling": "E3",
          "payload_digest": "sha256:c13f1b066bfbd0ded101802777d0f4b9a1f96676455deaed2552b200020129a5",
          "signature": "9AoMPC0JWQHyi7hN7BYzey6Z9xlLeIj2CBnCw4ZnSBLCkWd4i27leOud1e2_os18hOlCJdS9h8Cmp4Nhq_f5BQ"
        },
        "options": {
          "contract": {
            "id": "public-test-outcome",
            "version": 1,
            "tenant_id": "public-test-tenant",
            "subject": "Public test delivery",
            "expected_end_state": {
              "delivered": true
            },
            "authoritative_sources": [
              "ledger",
              "acceptance"
            ],
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "contradiction_rules": [
              {
                "path": "revoked",
                "operator": "eq",
                "value": true
              }
            ],
            "source_freshness_seconds": {
              "ledger": 10,
              "acceptance": 10
            },
            "max_clock_skew_seconds": 0
          },
          "evidence": [
            {
              "id": "e-ledger",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "ledger",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/ledger"
            },
            {
              "id": "e-acceptance",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "acceptance",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/acceptance"
            }
          ],
          "now": "2026-10-01T12:00:01Z",
          "current_head": {
            "id": "public-test-certificate",
            "certificate_version": 2,
            "head_sequence": 1,
            "contract_id": "public-test-outcome",
            "tenant_id": "public-test-tenant",
            "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
            "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
            "state": "FINAL",
            "evidence_ids": [
              "e-acceptance",
              "e-ledger"
            ],
            "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
            "issued_at": "2026-10-01T12:00:01Z",
            "issuer_id": "public-test-issuer",
            "signer_key_id": "public-test-key",
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "previous_certificate_id": null,
            "evidence_ceiling": "E3",
            "payload_digest": "sha256:c13f1b066bfbd0ded101802777d0f4b9a1f96676455deaed2552b200020129a5",
            "signature": "9AoMPC0JWQHyi7hN7BYzey6Z9xlLeIj2CBnCw4ZnSBLCkWd4i27leOud1e2_os18hOlCJdS9h8Cmp4Nhq_f5BQ"
          },
          "trusted_issuer_keys": [
            {
              "id": "public-test-key",
              "issuer_id": "public-test-issuer",
              "public_key": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAoZdrzsncx0W1p1YesByChrqEK8HaF3+DtD3X5KlnKig=\n-----END PUBLIC KEY-----\n",
              "trust_domains": [
                "public-test-domain"
              ],
              "status": "ACTIVE",
              "not_before": "2026-01-01T00:00:00Z",
              "not_after": "2027-01-01T00:00:00Z"
            }
          ]
        }
      }
    },
    {
      "id": "corrupt-evidence",
      "category": "corruption",
      "authorship": "SELLER_AUTHORED",
      "expected_valid": false,
      "input": {
        "certificate": {
          "id": "public-test-certificate",
          "certificate_version": 2,
          "head_sequence": 1,
          "contract_id": "public-test-outcome",
          "tenant_id": "public-test-tenant",
          "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
          "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
          "state": "FINAL",
          "evidence_ids": [
            "e-acceptance",
            "e-ledger"
          ],
          "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
          "issued_at": "2026-10-01T12:00:01Z",
          "issuer_id": "public-test-issuer",
          "signer_key_id": "public-test-key",
          "trust_domain_id": "public-test-domain",
          "reliance_profile_id": "R2",
          "policy_version": "test-policy-1",
          "schema_version": "2.0.0",
          "previous_certificate_id": null,
          "evidence_ceiling": "E3",
          "payload_digest": "sha256:c13f1b066bfbd0ded101802777d0f4b9a1f96676455deaed2552b200020129a5",
          "signature": "9AoMPC0JWQHyi7hN7BYzey6Z9xlLeIj2CBnCw4ZnSBLCkWd4i27leOud1e2_os18hOlCJdS9h8Cmp4Nhq_f5BQ"
        },
        "options": {
          "contract": {
            "id": "public-test-outcome",
            "version": 1,
            "tenant_id": "public-test-tenant",
            "subject": "Public test delivery",
            "expected_end_state": {
              "delivered": true
            },
            "authoritative_sources": [
              "ledger",
              "acceptance"
            ],
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "contradiction_rules": [
              {
                "path": "revoked",
                "operator": "eq",
                "value": true
              }
            ],
            "source_freshness_seconds": {
              "ledger": 10,
              "acceptance": 10
            },
            "max_clock_skew_seconds": 0
          },
          "evidence": [
            {
              "id": "e-ledger",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "ledger",
              "observed_state": {
                "delivered": false
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/ledger"
            },
            {
              "id": "e-acceptance",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "acceptance",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/acceptance"
            }
          ],
          "now": "2026-10-01T12:00:01Z",
          "current_head": {
            "id": "public-test-certificate",
            "certificate_version": 2,
            "head_sequence": 1,
            "contract_id": "public-test-outcome",
            "tenant_id": "public-test-tenant",
            "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
            "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
            "state": "FINAL",
            "evidence_ids": [
              "e-acceptance",
              "e-ledger"
            ],
            "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
            "issued_at": "2026-10-01T12:00:01Z",
            "issuer_id": "public-test-issuer",
            "signer_key_id": "public-test-key",
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "previous_certificate_id": null,
            "evidence_ceiling": "E3",
            "payload_digest": "sha256:c13f1b066bfbd0ded101802777d0f4b9a1f96676455deaed2552b200020129a5",
            "signature": "9AoMPC0JWQHyi7hN7BYzey6Z9xlLeIj2CBnCw4ZnSBLCkWd4i27leOud1e2_os18hOlCJdS9h8Cmp4Nhq_f5BQ"
          },
          "trusted_issuer_keys": [
            {
              "id": "public-test-key",
              "issuer_id": "public-test-issuer",
              "public_key": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAoZdrzsncx0W1p1YesByChrqEK8HaF3+DtD3X5KlnKig=\n-----END PUBLIC KEY-----\n",
              "trust_domains": [
                "public-test-domain"
              ],
              "status": "ACTIVE",
              "not_before": "2026-01-01T00:00:00Z",
              "not_after": "2027-01-01T00:00:00Z"
            }
          ]
        }
      }
    },
    {
      "id": "duplicate-evidence",
      "category": "duplication",
      "authorship": "SELLER_AUTHORED",
      "expected_valid": false,
      "input": {
        "certificate": {
          "id": "public-test-certificate",
          "certificate_version": 2,
          "head_sequence": 1,
          "contract_id": "public-test-outcome",
          "tenant_id": "public-test-tenant",
          "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
          "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
          "state": "FINAL",
          "evidence_ids": [
            "e-acceptance",
            "e-ledger"
          ],
          "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
          "issued_at": "2026-10-01T12:00:01Z",
          "issuer_id": "public-test-issuer",
          "signer_key_id": "public-test-key",
          "trust_domain_id": "public-test-domain",
          "reliance_profile_id": "R2",
          "policy_version": "test-policy-1",
          "schema_version": "2.0.0",
          "previous_certificate_id": null,
          "evidence_ceiling": "E3",
          "payload_digest": "sha256:c13f1b066bfbd0ded101802777d0f4b9a1f96676455deaed2552b200020129a5",
          "signature": "9AoMPC0JWQHyi7hN7BYzey6Z9xlLeIj2CBnCw4ZnSBLCkWd4i27leOud1e2_os18hOlCJdS9h8Cmp4Nhq_f5BQ"
        },
        "options": {
          "contract": {
            "id": "public-test-outcome",
            "version": 1,
            "tenant_id": "public-test-tenant",
            "subject": "Public test delivery",
            "expected_end_state": {
              "delivered": true
            },
            "authoritative_sources": [
              "ledger",
              "acceptance"
            ],
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "contradiction_rules": [
              {
                "path": "revoked",
                "operator": "eq",
                "value": true
              }
            ],
            "source_freshness_seconds": {
              "ledger": 10,
              "acceptance": 10
            },
            "max_clock_skew_seconds": 0
          },
          "evidence": [
            {
              "id": "e-ledger",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "ledger",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/ledger"
            },
            {
              "id": "e-acceptance",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "acceptance",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/acceptance"
            },
            {
              "id": "e-ledger",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "ledger",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/ledger"
            }
          ],
          "now": "2026-10-01T12:00:01Z",
          "current_head": {
            "id": "public-test-certificate",
            "certificate_version": 2,
            "head_sequence": 1,
            "contract_id": "public-test-outcome",
            "tenant_id": "public-test-tenant",
            "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
            "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
            "state": "FINAL",
            "evidence_ids": [
              "e-acceptance",
              "e-ledger"
            ],
            "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
            "issued_at": "2026-10-01T12:00:01Z",
            "issuer_id": "public-test-issuer",
            "signer_key_id": "public-test-key",
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "previous_certificate_id": null,
            "evidence_ceiling": "E3",
            "payload_digest": "sha256:c13f1b066bfbd0ded101802777d0f4b9a1f96676455deaed2552b200020129a5",
            "signature": "9AoMPC0JWQHyi7hN7BYzey6Z9xlLeIj2CBnCw4ZnSBLCkWd4i27leOud1e2_os18hOlCJdS9h8Cmp4Nhq_f5BQ"
          },
          "trusted_issuer_keys": [
            {
              "id": "public-test-key",
              "issuer_id": "public-test-issuer",
              "public_key": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAoZdrzsncx0W1p1YesByChrqEK8HaF3+DtD3X5KlnKig=\n-----END PUBLIC KEY-----\n",
              "trust_domains": [
                "public-test-domain"
              ],
              "status": "ACTIVE",
              "not_before": "2026-01-01T00:00:00Z",
              "not_after": "2027-01-01T00:00:00Z"
            }
          ]
        }
      }
    },
    {
      "id": "untrusted-issuer",
      "category": "authority",
      "authorship": "SELLER_AUTHORED",
      "expected_valid": false,
      "input": {
        "certificate": {
          "id": "public-test-certificate",
          "certificate_version": 2,
          "head_sequence": 1,
          "contract_id": "public-test-outcome",
          "tenant_id": "public-test-tenant",
          "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
          "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
          "state": "FINAL",
          "evidence_ids": [
            "e-acceptance",
            "e-ledger"
          ],
          "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
          "issued_at": "2026-10-01T12:00:01Z",
          "issuer_id": "public-test-issuer",
          "signer_key_id": "public-test-key",
          "trust_domain_id": "public-test-domain",
          "reliance_profile_id": "R2",
          "policy_version": "test-policy-1",
          "schema_version": "2.0.0",
          "previous_certificate_id": null,
          "evidence_ceiling": "E3",
          "payload_digest": "sha256:c13f1b066bfbd0ded101802777d0f4b9a1f96676455deaed2552b200020129a5",
          "signature": "9AoMPC0JWQHyi7hN7BYzey6Z9xlLeIj2CBnCw4ZnSBLCkWd4i27leOud1e2_os18hOlCJdS9h8Cmp4Nhq_f5BQ"
        },
        "options": {
          "contract": {
            "id": "public-test-outcome",
            "version": 1,
            "tenant_id": "public-test-tenant",
            "subject": "Public test delivery",
            "expected_end_state": {
              "delivered": true
            },
            "authoritative_sources": [
              "ledger",
              "acceptance"
            ],
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "contradiction_rules": [
              {
                "path": "revoked",
                "operator": "eq",
                "value": true
              }
            ],
            "source_freshness_seconds": {
              "ledger": 10,
              "acceptance": 10
            },
            "max_clock_skew_seconds": 0
          },
          "evidence": [
            {
              "id": "e-ledger",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "ledger",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/ledger"
            },
            {
              "id": "e-acceptance",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "acceptance",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/acceptance"
            }
          ],
          "now": "2026-10-01T12:00:01Z",
          "current_head": {
            "id": "public-test-certificate",
            "certificate_version": 2,
            "head_sequence": 1,
            "contract_id": "public-test-outcome",
            "tenant_id": "public-test-tenant",
            "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
            "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
            "state": "FINAL",
            "evidence_ids": [
              "e-acceptance",
              "e-ledger"
            ],
            "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
            "issued_at": "2026-10-01T12:00:01Z",
            "issuer_id": "public-test-issuer",
            "signer_key_id": "public-test-key",
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "previous_certificate_id": null,
            "evidence_ceiling": "E3",
            "payload_digest": "sha256:c13f1b066bfbd0ded101802777d0f4b9a1f96676455deaed2552b200020129a5",
            "signature": "9AoMPC0JWQHyi7hN7BYzey6Z9xlLeIj2CBnCw4ZnSBLCkWd4i27leOud1e2_os18hOlCJdS9h8Cmp4Nhq_f5BQ"
          },
          "trusted_issuer_keys": []
        }
      }
    },
    {
      "id": "revoked-key",
      "category": "authority",
      "authorship": "SELLER_AUTHORED",
      "expected_valid": false,
      "input": {
        "certificate": {
          "id": "public-test-certificate",
          "certificate_version": 2,
          "head_sequence": 1,
          "contract_id": "public-test-outcome",
          "tenant_id": "public-test-tenant",
          "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
          "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
          "state": "FINAL",
          "evidence_ids": [
            "e-acceptance",
            "e-ledger"
          ],
          "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
          "issued_at": "2026-10-01T12:00:01Z",
          "issuer_id": "public-test-issuer",
          "signer_key_id": "public-test-key",
          "trust_domain_id": "public-test-domain",
          "reliance_profile_id": "R2",
          "policy_version": "test-policy-1",
          "schema_version": "2.0.0",
          "previous_certificate_id": null,
          "evidence_ceiling": "E3",
          "payload_digest": "sha256:c13f1b066bfbd0ded101802777d0f4b9a1f96676455deaed2552b200020129a5",
          "signature": "9AoMPC0JWQHyi7hN7BYzey6Z9xlLeIj2CBnCw4ZnSBLCkWd4i27leOud1e2_os18hOlCJdS9h8Cmp4Nhq_f5BQ"
        },
        "options": {
          "contract": {
            "id": "public-test-outcome",
            "version": 1,
            "tenant_id": "public-test-tenant",
            "subject": "Public test delivery",
            "expected_end_state": {
              "delivered": true
            },
            "authoritative_sources": [
              "ledger",
              "acceptance"
            ],
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "contradiction_rules": [
              {
                "path": "revoked",
                "operator": "eq",
                "value": true
              }
            ],
            "source_freshness_seconds": {
              "ledger": 10,
              "acceptance": 10
            },
            "max_clock_skew_seconds": 0
          },
          "evidence": [
            {
              "id": "e-ledger",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "ledger",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/ledger"
            },
            {
              "id": "e-acceptance",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "acceptance",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/acceptance"
            }
          ],
          "now": "2026-10-01T12:00:01Z",
          "current_head": {
            "id": "public-test-certificate",
            "certificate_version": 2,
            "head_sequence": 1,
            "contract_id": "public-test-outcome",
            "tenant_id": "public-test-tenant",
            "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
            "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
            "state": "FINAL",
            "evidence_ids": [
              "e-acceptance",
              "e-ledger"
            ],
            "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
            "issued_at": "2026-10-01T12:00:01Z",
            "issuer_id": "public-test-issuer",
            "signer_key_id": "public-test-key",
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "previous_certificate_id": null,
            "evidence_ceiling": "E3",
            "payload_digest": "sha256:c13f1b066bfbd0ded101802777d0f4b9a1f96676455deaed2552b200020129a5",
            "signature": "9AoMPC0JWQHyi7hN7BYzey6Z9xlLeIj2CBnCw4ZnSBLCkWd4i27leOud1e2_os18hOlCJdS9h8Cmp4Nhq_f5BQ"
          },
          "trusted_issuer_keys": [
            {
              "id": "public-test-key",
              "issuer_id": "public-test-issuer",
              "public_key": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAoZdrzsncx0W1p1YesByChrqEK8HaF3+DtD3X5KlnKig=\n-----END PUBLIC KEY-----\n",
              "trust_domains": [
                "public-test-domain"
              ],
              "status": "REVOKED",
              "not_before": "2026-01-01T00:00:00Z",
              "not_after": "2027-01-01T00:00:00Z"
            }
          ]
        }
      }
    },
    {
      "id": "expired-key",
      "category": "authority",
      "authorship": "SELLER_AUTHORED",
      "expected_valid": false,
      "input": {
        "certificate": {
          "id": "public-test-certificate",
          "certificate_version": 2,
          "head_sequence": 1,
          "contract_id": "public-test-outcome",
          "tenant_id": "public-test-tenant",
          "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
          "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
          "state": "FINAL",
          "evidence_ids": [
            "e-acceptance",
            "e-ledger"
          ],
          "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
          "issued_at": "2026-10-01T12:00:01Z",
          "issuer_id": "public-test-issuer",
          "signer_key_id": "public-test-key",
          "trust_domain_id": "public-test-domain",
          "reliance_profile_id": "R2",
          "policy_version": "test-policy-1",
          "schema_version": "2.0.0",
          "previous_certificate_id": null,
          "evidence_ceiling": "E3",
          "payload_digest": "sha256:c13f1b066bfbd0ded101802777d0f4b9a1f96676455deaed2552b200020129a5",
          "signature": "9AoMPC0JWQHyi7hN7BYzey6Z9xlLeIj2CBnCw4ZnSBLCkWd4i27leOud1e2_os18hOlCJdS9h8Cmp4Nhq_f5BQ"
        },
        "options": {
          "contract": {
            "id": "public-test-outcome",
            "version": 1,
            "tenant_id": "public-test-tenant",
            "subject": "Public test delivery",
            "expected_end_state": {
              "delivered": true
            },
            "authoritative_sources": [
              "ledger",
              "acceptance"
            ],
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "contradiction_rules": [
              {
                "path": "revoked",
                "operator": "eq",
                "value": true
              }
            ],
            "source_freshness_seconds": {
              "ledger": 10,
              "acceptance": 10
            },
            "max_clock_skew_seconds": 0
          },
          "evidence": [
            {
              "id": "e-ledger",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "ledger",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/ledger"
            },
            {
              "id": "e-acceptance",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "acceptance",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/acceptance"
            }
          ],
          "now": "2026-10-01T12:00:01Z",
          "current_head": {
            "id": "public-test-certificate",
            "certificate_version": 2,
            "head_sequence": 1,
            "contract_id": "public-test-outcome",
            "tenant_id": "public-test-tenant",
            "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
            "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
            "state": "FINAL",
            "evidence_ids": [
              "e-acceptance",
              "e-ledger"
            ],
            "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
            "issued_at": "2026-10-01T12:00:01Z",
            "issuer_id": "public-test-issuer",
            "signer_key_id": "public-test-key",
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "previous_certificate_id": null,
            "evidence_ceiling": "E3",
            "payload_digest": "sha256:c13f1b066bfbd0ded101802777d0f4b9a1f96676455deaed2552b200020129a5",
            "signature": "9AoMPC0JWQHyi7hN7BYzey6Z9xlLeIj2CBnCw4ZnSBLCkWd4i27leOud1e2_os18hOlCJdS9h8Cmp4Nhq_f5BQ"
          },
          "trusted_issuer_keys": [
            {
              "id": "public-test-key",
              "issuer_id": "public-test-issuer",
              "public_key": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAoZdrzsncx0W1p1YesByChrqEK8HaF3+DtD3X5KlnKig=\n-----END PUBLIC KEY-----\n",
              "trust_domains": [
                "public-test-domain"
              ],
              "status": "ACTIVE",
              "not_before": "2026-01-01T00:00:00Z",
              "not_after": "2026-10-01T12:00:01Z"
            }
          ]
        }
      }
    },
    {
      "id": "missing-evidence",
      "category": "insufficient",
      "authorship": "SELLER_AUTHORED",
      "expected_valid": false,
      "input": {
        "certificate": {
          "id": "public-test-certificate",
          "certificate_version": 2,
          "head_sequence": 1,
          "contract_id": "public-test-outcome",
          "tenant_id": "public-test-tenant",
          "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
          "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
          "state": "FINAL",
          "evidence_ids": [
            "e-acceptance",
            "e-ledger"
          ],
          "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
          "issued_at": "2026-10-01T12:00:01Z",
          "issuer_id": "public-test-issuer",
          "signer_key_id": "public-test-key",
          "trust_domain_id": "public-test-domain",
          "reliance_profile_id": "R2",
          "policy_version": "test-policy-1",
          "schema_version": "2.0.0",
          "previous_certificate_id": null,
          "evidence_ceiling": "E3",
          "payload_digest": "sha256:c13f1b066bfbd0ded101802777d0f4b9a1f96676455deaed2552b200020129a5",
          "signature": "9AoMPC0JWQHyi7hN7BYzey6Z9xlLeIj2CBnCw4ZnSBLCkWd4i27leOud1e2_os18hOlCJdS9h8Cmp4Nhq_f5BQ"
        },
        "options": {
          "contract": {
            "id": "public-test-outcome",
            "version": 1,
            "tenant_id": "public-test-tenant",
            "subject": "Public test delivery",
            "expected_end_state": {
              "delivered": true
            },
            "authoritative_sources": [
              "ledger",
              "acceptance"
            ],
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "contradiction_rules": [
              {
                "path": "revoked",
                "operator": "eq",
                "value": true
              }
            ],
            "source_freshness_seconds": {
              "ledger": 10,
              "acceptance": 10
            },
            "max_clock_skew_seconds": 0
          },
          "evidence": [],
          "now": "2026-10-01T12:00:01Z",
          "current_head": {
            "id": "public-test-certificate",
            "certificate_version": 2,
            "head_sequence": 1,
            "contract_id": "public-test-outcome",
            "tenant_id": "public-test-tenant",
            "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
            "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
            "state": "FINAL",
            "evidence_ids": [
              "e-acceptance",
              "e-ledger"
            ],
            "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
            "issued_at": "2026-10-01T12:00:01Z",
            "issuer_id": "public-test-issuer",
            "signer_key_id": "public-test-key",
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "previous_certificate_id": null,
            "evidence_ceiling": "E3",
            "payload_digest": "sha256:c13f1b066bfbd0ded101802777d0f4b9a1f96676455deaed2552b200020129a5",
            "signature": "9AoMPC0JWQHyi7hN7BYzey6Z9xlLeIj2CBnCw4ZnSBLCkWd4i27leOud1e2_os18hOlCJdS9h8Cmp4Nhq_f5BQ"
          },
          "trusted_issuer_keys": [
            {
              "id": "public-test-key",
              "issuer_id": "public-test-issuer",
              "public_key": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAoZdrzsncx0W1p1YesByChrqEK8HaF3+DtD3X5KlnKig=\n-----END PUBLIC KEY-----\n",
              "trust_domains": [
                "public-test-domain"
              ],
              "status": "ACTIVE",
              "not_before": "2026-01-01T00:00:00Z",
              "not_after": "2027-01-01T00:00:00Z"
            }
          ]
        }
      }
    },
    {
      "id": "stale-evidence",
      "category": "freshness",
      "authorship": "SELLER_AUTHORED",
      "expected_valid": false,
      "input": {
        "certificate": {
          "id": "public-test-certificate",
          "certificate_version": 2,
          "head_sequence": 1,
          "contract_id": "public-test-outcome",
          "tenant_id": "public-test-tenant",
          "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
          "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
          "state": "FINAL",
          "evidence_ids": [
            "e-acceptance",
            "e-ledger"
          ],
          "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
          "issued_at": "2026-10-01T12:00:01Z",
          "issuer_id": "public-test-issuer",
          "signer_key_id": "public-test-key",
          "trust_domain_id": "public-test-domain",
          "reliance_profile_id": "R2",
          "policy_version": "test-policy-1",
          "schema_version": "2.0.0",
          "previous_certificate_id": null,
          "evidence_ceiling": "E3",
          "payload_digest": "sha256:c13f1b066bfbd0ded101802777d0f4b9a1f96676455deaed2552b200020129a5",
          "signature": "9AoMPC0JWQHyi7hN7BYzey6Z9xlLeIj2CBnCw4ZnSBLCkWd4i27leOud1e2_os18hOlCJdS9h8Cmp4Nhq_f5BQ"
        },
        "options": {
          "contract": {
            "id": "public-test-outcome",
            "version": 1,
            "tenant_id": "public-test-tenant",
            "subject": "Public test delivery",
            "expected_end_state": {
              "delivered": true
            },
            "authoritative_sources": [
              "ledger",
              "acceptance"
            ],
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "contradiction_rules": [
              {
                "path": "revoked",
                "operator": "eq",
                "value": true
              }
            ],
            "source_freshness_seconds": {
              "ledger": 10,
              "acceptance": 10
            },
            "max_clock_skew_seconds": 0
          },
          "evidence": [
            {
              "id": "e-ledger",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "ledger",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/ledger"
            },
            {
              "id": "e-acceptance",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "acceptance",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/acceptance"
            }
          ],
          "now": "2026-10-01T12:01:00Z",
          "current_head": {
            "id": "public-test-certificate",
            "certificate_version": 2,
            "head_sequence": 1,
            "contract_id": "public-test-outcome",
            "tenant_id": "public-test-tenant",
            "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
            "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
            "state": "FINAL",
            "evidence_ids": [
              "e-acceptance",
              "e-ledger"
            ],
            "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
            "issued_at": "2026-10-01T12:00:01Z",
            "issuer_id": "public-test-issuer",
            "signer_key_id": "public-test-key",
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "previous_certificate_id": null,
            "evidence_ceiling": "E3",
            "payload_digest": "sha256:c13f1b066bfbd0ded101802777d0f4b9a1f96676455deaed2552b200020129a5",
            "signature": "9AoMPC0JWQHyi7hN7BYzey6Z9xlLeIj2CBnCw4ZnSBLCkWd4i27leOud1e2_os18hOlCJdS9h8Cmp4Nhq_f5BQ"
          },
          "trusted_issuer_keys": [
            {
              "id": "public-test-key",
              "issuer_id": "public-test-issuer",
              "public_key": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAoZdrzsncx0W1p1YesByChrqEK8HaF3+DtD3X5KlnKig=\n-----END PUBLIC KEY-----\n",
              "trust_domains": [
                "public-test-domain"
              ],
              "status": "ACTIVE",
              "not_before": "2026-01-01T00:00:00Z",
              "not_after": "2027-01-01T00:00:00Z"
            }
          ]
        }
      }
    },
    {
      "id": "replayed-old-head",
      "category": "replay",
      "authorship": "SELLER_AUTHORED",
      "expected_valid": false,
      "input": {
        "certificate": {
          "id": "public-test-certificate",
          "certificate_version": 2,
          "head_sequence": 1,
          "contract_id": "public-test-outcome",
          "tenant_id": "public-test-tenant",
          "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
          "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
          "state": "FINAL",
          "evidence_ids": [
            "e-acceptance",
            "e-ledger"
          ],
          "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
          "issued_at": "2026-10-01T12:00:01Z",
          "issuer_id": "public-test-issuer",
          "signer_key_id": "public-test-key",
          "trust_domain_id": "public-test-domain",
          "reliance_profile_id": "R2",
          "policy_version": "test-policy-1",
          "schema_version": "2.0.0",
          "previous_certificate_id": null,
          "evidence_ceiling": "E3",
          "payload_digest": "sha256:c13f1b066bfbd0ded101802777d0f4b9a1f96676455deaed2552b200020129a5",
          "signature": "9AoMPC0JWQHyi7hN7BYzey6Z9xlLeIj2CBnCw4ZnSBLCkWd4i27leOud1e2_os18hOlCJdS9h8Cmp4Nhq_f5BQ"
        },
        "options": {
          "contract": {
            "id": "public-test-outcome",
            "version": 1,
            "tenant_id": "public-test-tenant",
            "subject": "Public test delivery",
            "expected_end_state": {
              "delivered": true
            },
            "authoritative_sources": [
              "ledger",
              "acceptance"
            ],
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "contradiction_rules": [
              {
                "path": "revoked",
                "operator": "eq",
                "value": true
              }
            ],
            "source_freshness_seconds": {
              "ledger": 10,
              "acceptance": 10
            },
            "max_clock_skew_seconds": 0
          },
          "evidence": [
            {
              "id": "e-ledger",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "ledger",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/ledger"
            },
            {
              "id": "e-acceptance",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "acceptance",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/acceptance"
            }
          ],
          "now": "2026-10-01T12:00:01Z",
          "current_head": {
            "id": "successor",
            "certificate_version": 2,
            "head_sequence": 2,
            "contract_id": "public-test-outcome",
            "tenant_id": "public-test-tenant",
            "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
            "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
            "state": "FINAL",
            "evidence_ids": [
              "e-acceptance",
              "e-ledger"
            ],
            "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
            "issued_at": "2026-10-01T12:00:01Z",
            "issuer_id": "public-test-issuer",
            "signer_key_id": "public-test-key",
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "previous_certificate_id": null,
            "evidence_ceiling": "E3",
            "payload_digest": "sha256:c13f1b066bfbd0ded101802777d0f4b9a1f96676455deaed2552b200020129a5",
            "signature": "9AoMPC0JWQHyi7hN7BYzey6Z9xlLeIj2CBnCw4ZnSBLCkWd4i27leOud1e2_os18hOlCJdS9h8Cmp4Nhq_f5BQ"
          },
          "trusted_issuer_keys": [
            {
              "id": "public-test-key",
              "issuer_id": "public-test-issuer",
              "public_key": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAoZdrzsncx0W1p1YesByChrqEK8HaF3+DtD3X5KlnKig=\n-----END PUBLIC KEY-----\n",
              "trust_domains": [
                "public-test-domain"
              ],
              "status": "ACTIVE",
              "not_before": "2026-01-01T00:00:00Z",
              "not_after": "2027-01-01T00:00:00Z"
            }
          ]
        }
      }
    },
    {
      "id": "reopened-head",
      "category": "replay",
      "authorship": "SELLER_AUTHORED",
      "expected_valid": false,
      "input": {
        "certificate": {
          "id": "public-test-certificate",
          "certificate_version": 2,
          "head_sequence": 1,
          "contract_id": "public-test-outcome",
          "tenant_id": "public-test-tenant",
          "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
          "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
          "state": "FINAL",
          "evidence_ids": [
            "e-acceptance",
            "e-ledger"
          ],
          "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
          "issued_at": "2026-10-01T12:00:01Z",
          "issuer_id": "public-test-issuer",
          "signer_key_id": "public-test-key",
          "trust_domain_id": "public-test-domain",
          "reliance_profile_id": "R2",
          "policy_version": "test-policy-1",
          "schema_version": "2.0.0",
          "previous_certificate_id": null,
          "evidence_ceiling": "E3",
          "payload_digest": "sha256:c13f1b066bfbd0ded101802777d0f4b9a1f96676455deaed2552b200020129a5",
          "signature": "9AoMPC0JWQHyi7hN7BYzey6Z9xlLeIj2CBnCw4ZnSBLCkWd4i27leOud1e2_os18hOlCJdS9h8Cmp4Nhq_f5BQ"
        },
        "options": {
          "contract": {
            "id": "public-test-outcome",
            "version": 1,
            "tenant_id": "public-test-tenant",
            "subject": "Public test delivery",
            "expected_end_state": {
              "delivered": true
            },
            "authoritative_sources": [
              "ledger",
              "acceptance"
            ],
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "contradiction_rules": [
              {
                "path": "revoked",
                "operator": "eq",
                "value": true
              }
            ],
            "source_freshness_seconds": {
              "ledger": 10,
              "acceptance": 10
            },
            "max_clock_skew_seconds": 0
          },
          "evidence": [
            {
              "id": "e-ledger",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "ledger",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/ledger"
            },
            {
              "id": "e-acceptance",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "acceptance",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/acceptance"
            }
          ],
          "now": "2026-10-01T12:00:01Z",
          "current_head": {
            "id": "public-test-certificate",
            "certificate_version": 2,
            "head_sequence": 1,
            "contract_id": "public-test-outcome",
            "tenant_id": "public-test-tenant",
            "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
            "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
            "state": "REOPENED",
            "evidence_ids": [
              "e-acceptance",
              "e-ledger"
            ],
            "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
            "issued_at": "2026-10-01T12:00:01Z",
            "issuer_id": "public-test-issuer",
            "signer_key_id": "public-test-key",
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "previous_certificate_id": null,
            "evidence_ceiling": "E3",
            "payload_digest": "sha256:c13f1b066bfbd0ded101802777d0f4b9a1f96676455deaed2552b200020129a5",
            "signature": "9AoMPC0JWQHyi7hN7BYzey6Z9xlLeIj2CBnCw4ZnSBLCkWd4i27leOud1e2_os18hOlCJdS9h8Cmp4Nhq_f5BQ"
          },
          "trusted_issuer_keys": [
            {
              "id": "public-test-key",
              "issuer_id": "public-test-issuer",
              "public_key": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAoZdrzsncx0W1p1YesByChrqEK8HaF3+DtD3X5KlnKig=\n-----END PUBLIC KEY-----\n",
              "trust_domains": [
                "public-test-domain"
              ],
              "status": "ACTIVE",
              "not_before": "2026-01-01T00:00:00Z",
              "not_after": "2027-01-01T00:00:00Z"
            }
          ]
        }
      }
    },
    {
      "id": "cross-tenant-head",
      "category": "tenant",
      "authorship": "SELLER_AUTHORED",
      "expected_valid": false,
      "input": {
        "certificate": {
          "id": "public-test-certificate",
          "certificate_version": 2,
          "head_sequence": 1,
          "contract_id": "public-test-outcome",
          "tenant_id": "public-test-tenant",
          "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
          "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
          "state": "FINAL",
          "evidence_ids": [
            "e-acceptance",
            "e-ledger"
          ],
          "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
          "issued_at": "2026-10-01T12:00:01Z",
          "issuer_id": "public-test-issuer",
          "signer_key_id": "public-test-key",
          "trust_domain_id": "public-test-domain",
          "reliance_profile_id": "R2",
          "policy_version": "test-policy-1",
          "schema_version": "2.0.0",
          "previous_certificate_id": null,
          "evidence_ceiling": "E3",
          "payload_digest": "sha256:c13f1b066bfbd0ded101802777d0f4b9a1f96676455deaed2552b200020129a5",
          "signature": "9AoMPC0JWQHyi7hN7BYzey6Z9xlLeIj2CBnCw4ZnSBLCkWd4i27leOud1e2_os18hOlCJdS9h8Cmp4Nhq_f5BQ"
        },
        "options": {
          "contract": {
            "id": "public-test-outcome",
            "version": 1,
            "tenant_id": "public-test-tenant",
            "subject": "Public test delivery",
            "expected_end_state": {
              "delivered": true
            },
            "authoritative_sources": [
              "ledger",
              "acceptance"
            ],
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "contradiction_rules": [
              {
                "path": "revoked",
                "operator": "eq",
                "value": true
              }
            ],
            "source_freshness_seconds": {
              "ledger": 10,
              "acceptance": 10
            },
            "max_clock_skew_seconds": 0
          },
          "evidence": [
            {
              "id": "e-ledger",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "ledger",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/ledger"
            },
            {
              "id": "e-acceptance",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "acceptance",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/acceptance"
            }
          ],
          "now": "2026-10-01T12:00:01Z",
          "current_head": {
            "id": "public-test-certificate",
            "certificate_version": 2,
            "head_sequence": 1,
            "contract_id": "public-test-outcome",
            "tenant_id": "other-tenant",
            "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
            "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
            "state": "FINAL",
            "evidence_ids": [
              "e-acceptance",
              "e-ledger"
            ],
            "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
            "issued_at": "2026-10-01T12:00:01Z",
            "issuer_id": "public-test-issuer",
            "signer_key_id": "public-test-key",
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "previous_certificate_id": null,
            "evidence_ceiling": "E3",
            "payload_digest": "sha256:c13f1b066bfbd0ded101802777d0f4b9a1f96676455deaed2552b200020129a5",
            "signature": "9AoMPC0JWQHyi7hN7BYzey6Z9xlLeIj2CBnCw4ZnSBLCkWd4i27leOud1e2_os18hOlCJdS9h8Cmp4Nhq_f5BQ"
          },
          "trusted_issuer_keys": [
            {
              "id": "public-test-key",
              "issuer_id": "public-test-issuer",
              "public_key": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAoZdrzsncx0W1p1YesByChrqEK8HaF3+DtD3X5KlnKig=\n-----END PUBLIC KEY-----\n",
              "trust_domains": [
                "public-test-domain"
              ],
              "status": "ACTIVE",
              "not_before": "2026-01-01T00:00:00Z",
              "not_after": "2027-01-01T00:00:00Z"
            }
          ]
        }
      }
    },
    {
      "id": "cross-tenant-evidence",
      "category": "tenant",
      "authorship": "SELLER_AUTHORED",
      "expected_valid": false,
      "input": {
        "certificate": {
          "id": "public-test-certificate",
          "certificate_version": 2,
          "head_sequence": 1,
          "contract_id": "public-test-outcome",
          "tenant_id": "public-test-tenant",
          "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
          "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
          "state": "FINAL",
          "evidence_ids": [
            "e-acceptance",
            "e-ledger"
          ],
          "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
          "issued_at": "2026-10-01T12:00:01Z",
          "issuer_id": "public-test-issuer",
          "signer_key_id": "public-test-key",
          "trust_domain_id": "public-test-domain",
          "reliance_profile_id": "R2",
          "policy_version": "test-policy-1",
          "schema_version": "2.0.0",
          "previous_certificate_id": null,
          "evidence_ceiling": "E3",
          "payload_digest": "sha256:c13f1b066bfbd0ded101802777d0f4b9a1f96676455deaed2552b200020129a5",
          "signature": "9AoMPC0JWQHyi7hN7BYzey6Z9xlLeIj2CBnCw4ZnSBLCkWd4i27leOud1e2_os18hOlCJdS9h8Cmp4Nhq_f5BQ"
        },
        "options": {
          "contract": {
            "id": "public-test-outcome",
            "version": 1,
            "tenant_id": "public-test-tenant",
            "subject": "Public test delivery",
            "expected_end_state": {
              "delivered": true
            },
            "authoritative_sources": [
              "ledger",
              "acceptance"
            ],
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "contradiction_rules": [
              {
                "path": "revoked",
                "operator": "eq",
                "value": true
              }
            ],
            "source_freshness_seconds": {
              "ledger": 10,
              "acceptance": 10
            },
            "max_clock_skew_seconds": 0
          },
          "evidence": [
            {
              "id": "e-ledger",
              "contract_id": "public-test-outcome",
              "tenant_id": "other-tenant",
              "source_id": "ledger",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/ledger"
            },
            {
              "id": "e-acceptance",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "acceptance",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/acceptance"
            }
          ],
          "now": "2026-10-01T12:00:01Z",
          "current_head": {
            "id": "public-test-certificate",
            "certificate_version": 2,
            "head_sequence": 1,
            "contract_id": "public-test-outcome",
            "tenant_id": "public-test-tenant",
            "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
            "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
            "state": "FINAL",
            "evidence_ids": [
              "e-acceptance",
              "e-ledger"
            ],
            "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
            "issued_at": "2026-10-01T12:00:01Z",
            "issuer_id": "public-test-issuer",
            "signer_key_id": "public-test-key",
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "previous_certificate_id": null,
            "evidence_ceiling": "E3",
            "payload_digest": "sha256:c13f1b066bfbd0ded101802777d0f4b9a1f96676455deaed2552b200020129a5",
            "signature": "9AoMPC0JWQHyi7hN7BYzey6Z9xlLeIj2CBnCw4ZnSBLCkWd4i27leOud1e2_os18hOlCJdS9h8Cmp4Nhq_f5BQ"
          },
          "trusted_issuer_keys": [
            {
              "id": "public-test-key",
              "issuer_id": "public-test-issuer",
              "public_key": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAoZdrzsncx0W1p1YesByChrqEK8HaF3+DtD3X5KlnKig=\n-----END PUBLIC KEY-----\n",
              "trust_domains": [
                "public-test-domain"
              ],
              "status": "ACTIVE",
              "not_before": "2026-01-01T00:00:00Z",
              "not_after": "2027-01-01T00:00:00Z"
            }
          ]
        }
      }
    },
    {
      "id": "signed-bad-version",
      "category": "signed-invalid",
      "authorship": "SELLER_AUTHORED",
      "expected_valid": false,
      "input": {
        "certificate": {
          "id": "public-test-certificate",
          "certificate_version": 999,
          "head_sequence": 1,
          "contract_id": "public-test-outcome",
          "tenant_id": "public-test-tenant",
          "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
          "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
          "state": "FINAL",
          "evidence_ids": [
            "e-acceptance",
            "e-ledger"
          ],
          "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
          "issued_at": "2026-10-01T12:00:01Z",
          "issuer_id": "public-test-issuer",
          "signer_key_id": "public-test-key",
          "trust_domain_id": "public-test-domain",
          "reliance_profile_id": "R2",
          "policy_version": "test-policy-1",
          "schema_version": "2.0.0",
          "previous_certificate_id": null,
          "evidence_ceiling": "E3",
          "payload_digest": "sha256:3b15a50ba15b11add8935ab627aa3c772c5f332c9f005aa21b162fce95bd404e",
          "signature": "FGYX8nq5wU_HPlGB1mGCRuIJNxtd5DATVYHHfFIU53F91iOLshN1TY64BLrrR-V66Ang0f93VzvyW5KGEBgJAQ"
        },
        "options": {
          "contract": {
            "id": "public-test-outcome",
            "version": 1,
            "tenant_id": "public-test-tenant",
            "subject": "Public test delivery",
            "expected_end_state": {
              "delivered": true
            },
            "authoritative_sources": [
              "ledger",
              "acceptance"
            ],
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "contradiction_rules": [
              {
                "path": "revoked",
                "operator": "eq",
                "value": true
              }
            ],
            "source_freshness_seconds": {
              "ledger": 10,
              "acceptance": 10
            },
            "max_clock_skew_seconds": 0
          },
          "evidence": [
            {
              "id": "e-ledger",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "ledger",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/ledger"
            },
            {
              "id": "e-acceptance",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "acceptance",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/acceptance"
            }
          ],
          "now": "2026-10-01T12:00:01Z",
          "current_head": {
            "id": "public-test-certificate",
            "certificate_version": 999,
            "head_sequence": 1,
            "contract_id": "public-test-outcome",
            "tenant_id": "public-test-tenant",
            "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
            "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
            "state": "FINAL",
            "evidence_ids": [
              "e-acceptance",
              "e-ledger"
            ],
            "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
            "issued_at": "2026-10-01T12:00:01Z",
            "issuer_id": "public-test-issuer",
            "signer_key_id": "public-test-key",
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "previous_certificate_id": null,
            "evidence_ceiling": "E3",
            "payload_digest": "sha256:3b15a50ba15b11add8935ab627aa3c772c5f332c9f005aa21b162fce95bd404e",
            "signature": "FGYX8nq5wU_HPlGB1mGCRuIJNxtd5DATVYHHfFIU53F91iOLshN1TY64BLrrR-V66Ang0f93VzvyW5KGEBgJAQ"
          },
          "trusted_issuer_keys": [
            {
              "id": "public-test-key",
              "issuer_id": "public-test-issuer",
              "public_key": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAoZdrzsncx0W1p1YesByChrqEK8HaF3+DtD3X5KlnKig=\n-----END PUBLIC KEY-----\n",
              "trust_domains": [
                "public-test-domain"
              ],
              "status": "ACTIVE",
              "not_before": "2026-01-01T00:00:00Z",
              "not_after": "2027-01-01T00:00:00Z"
            }
          ]
        }
      }
    },
    {
      "id": "signed-wrong-trust-domain",
      "category": "signed-invalid",
      "authorship": "SELLER_AUTHORED",
      "expected_valid": false,
      "input": {
        "certificate": {
          "id": "public-test-certificate",
          "certificate_version": 2,
          "head_sequence": 1,
          "contract_id": "public-test-outcome",
          "tenant_id": "public-test-tenant",
          "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
          "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
          "state": "FINAL",
          "evidence_ids": [
            "e-acceptance",
            "e-ledger"
          ],
          "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
          "issued_at": "2026-10-01T12:00:01Z",
          "issuer_id": "public-test-issuer",
          "signer_key_id": "public-test-key",
          "trust_domain_id": "other-domain",
          "reliance_profile_id": "R2",
          "policy_version": "test-policy-1",
          "schema_version": "2.0.0",
          "previous_certificate_id": null,
          "evidence_ceiling": "E3",
          "payload_digest": "sha256:099600018681439ce2dd6272bb38e655a331a80eee34d669946de7c30047b0f7",
          "signature": "r6EQl2dGMsxN2eVVq5la-yxOuH8Efj8wXRDpp0NgXxSp-3tHUiaFDSuaqo2cCrk2Je9Hf-mIe6elggnoA4CcAQ"
        },
        "options": {
          "contract": {
            "id": "public-test-outcome",
            "version": 1,
            "tenant_id": "public-test-tenant",
            "subject": "Public test delivery",
            "expected_end_state": {
              "delivered": true
            },
            "authoritative_sources": [
              "ledger",
              "acceptance"
            ],
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "contradiction_rules": [
              {
                "path": "revoked",
                "operator": "eq",
                "value": true
              }
            ],
            "source_freshness_seconds": {
              "ledger": 10,
              "acceptance": 10
            },
            "max_clock_skew_seconds": 0
          },
          "evidence": [
            {
              "id": "e-ledger",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "ledger",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/ledger"
            },
            {
              "id": "e-acceptance",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "acceptance",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/acceptance"
            }
          ],
          "now": "2026-10-01T12:00:01Z",
          "current_head": {
            "id": "public-test-certificate",
            "certificate_version": 2,
            "head_sequence": 1,
            "contract_id": "public-test-outcome",
            "tenant_id": "public-test-tenant",
            "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
            "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
            "state": "FINAL",
            "evidence_ids": [
              "e-acceptance",
              "e-ledger"
            ],
            "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
            "issued_at": "2026-10-01T12:00:01Z",
            "issuer_id": "public-test-issuer",
            "signer_key_id": "public-test-key",
            "trust_domain_id": "other-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "previous_certificate_id": null,
            "evidence_ceiling": "E3",
            "payload_digest": "sha256:099600018681439ce2dd6272bb38e655a331a80eee34d669946de7c30047b0f7",
            "signature": "r6EQl2dGMsxN2eVVq5la-yxOuH8Efj8wXRDpp0NgXxSp-3tHUiaFDSuaqo2cCrk2Je9Hf-mIe6elggnoA4CcAQ"
          },
          "trusted_issuer_keys": [
            {
              "id": "public-test-key",
              "issuer_id": "public-test-issuer",
              "public_key": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAoZdrzsncx0W1p1YesByChrqEK8HaF3+DtD3X5KlnKig=\n-----END PUBLIC KEY-----\n",
              "trust_domains": [
                "public-test-domain"
              ],
              "status": "ACTIVE",
              "not_before": "2026-01-01T00:00:00Z",
              "not_after": "2027-01-01T00:00:00Z"
            }
          ]
        }
      }
    },
    {
      "id": "signed-zero-sequence",
      "category": "signed-invalid",
      "authorship": "SELLER_AUTHORED",
      "expected_valid": false,
      "input": {
        "certificate": {
          "id": "public-test-certificate",
          "certificate_version": 2,
          "head_sequence": 0,
          "contract_id": "public-test-outcome",
          "tenant_id": "public-test-tenant",
          "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
          "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
          "state": "FINAL",
          "evidence_ids": [
            "e-acceptance",
            "e-ledger"
          ],
          "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
          "issued_at": "2026-10-01T12:00:01Z",
          "issuer_id": "public-test-issuer",
          "signer_key_id": "public-test-key",
          "trust_domain_id": "public-test-domain",
          "reliance_profile_id": "R2",
          "policy_version": "test-policy-1",
          "schema_version": "2.0.0",
          "previous_certificate_id": null,
          "evidence_ceiling": "E3",
          "payload_digest": "sha256:41f5b0a8a2a9ab0d9a970499688f64de0d81f36819eb150b55b0f833b0b59f71",
          "signature": "7O1HotLjikDEseM2BN1jcdRGyA160tCpLUdrNIrgmPcv-aYU8f_wwcudnTw7Y2lo-EjaHszoFnuvK348CBI6DA"
        },
        "options": {
          "contract": {
            "id": "public-test-outcome",
            "version": 1,
            "tenant_id": "public-test-tenant",
            "subject": "Public test delivery",
            "expected_end_state": {
              "delivered": true
            },
            "authoritative_sources": [
              "ledger",
              "acceptance"
            ],
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "contradiction_rules": [
              {
                "path": "revoked",
                "operator": "eq",
                "value": true
              }
            ],
            "source_freshness_seconds": {
              "ledger": 10,
              "acceptance": 10
            },
            "max_clock_skew_seconds": 0
          },
          "evidence": [
            {
              "id": "e-ledger",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "ledger",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/ledger"
            },
            {
              "id": "e-acceptance",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "acceptance",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/acceptance"
            }
          ],
          "now": "2026-10-01T12:00:01Z",
          "current_head": {
            "id": "public-test-certificate",
            "certificate_version": 2,
            "head_sequence": 0,
            "contract_id": "public-test-outcome",
            "tenant_id": "public-test-tenant",
            "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
            "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
            "state": "FINAL",
            "evidence_ids": [
              "e-acceptance",
              "e-ledger"
            ],
            "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
            "issued_at": "2026-10-01T12:00:01Z",
            "issuer_id": "public-test-issuer",
            "signer_key_id": "public-test-key",
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "previous_certificate_id": null,
            "evidence_ceiling": "E3",
            "payload_digest": "sha256:41f5b0a8a2a9ab0d9a970499688f64de0d81f36819eb150b55b0f833b0b59f71",
            "signature": "7O1HotLjikDEseM2BN1jcdRGyA160tCpLUdrNIrgmPcv-aYU8f_wwcudnTw7Y2lo-EjaHszoFnuvK348CBI6DA"
          },
          "trusted_issuer_keys": [
            {
              "id": "public-test-key",
              "issuer_id": "public-test-issuer",
              "public_key": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAoZdrzsncx0W1p1YesByChrqEK8HaF3+DtD3X5KlnKig=\n-----END PUBLIC KEY-----\n",
              "trust_domains": [
                "public-test-domain"
              ],
              "status": "ACTIVE",
              "not_before": "2026-01-01T00:00:00Z",
              "not_after": "2027-01-01T00:00:00Z"
            }
          ]
        }
      }
    },
    {
      "id": "signed-future-issuance",
      "category": "signed-invalid",
      "authorship": "SELLER_AUTHORED",
      "expected_valid": false,
      "input": {
        "certificate": {
          "id": "public-test-certificate",
          "certificate_version": 2,
          "head_sequence": 1,
          "contract_id": "public-test-outcome",
          "tenant_id": "public-test-tenant",
          "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
          "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
          "state": "FINAL",
          "evidence_ids": [
            "e-acceptance",
            "e-ledger"
          ],
          "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
          "issued_at": "2026-10-02T00:00:00Z",
          "issuer_id": "public-test-issuer",
          "signer_key_id": "public-test-key",
          "trust_domain_id": "public-test-domain",
          "reliance_profile_id": "R2",
          "policy_version": "test-policy-1",
          "schema_version": "2.0.0",
          "previous_certificate_id": null,
          "evidence_ceiling": "E3",
          "payload_digest": "sha256:2a5c17ede938f9355a6773284f10bcc5d0336fad50e6abb30f7e8679d8922dd4",
          "signature": "MfJao8oc4nMdP2VQNnbYKqBS_MWPlGFkBC0_ABWMMwrppIUo4ZQ__LOp4HU8StQtxxblwTZ-GD1YG2oHw1YeAg"
        },
        "options": {
          "contract": {
            "id": "public-test-outcome",
            "version": 1,
            "tenant_id": "public-test-tenant",
            "subject": "Public test delivery",
            "expected_end_state": {
              "delivered": true
            },
            "authoritative_sources": [
              "ledger",
              "acceptance"
            ],
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "contradiction_rules": [
              {
                "path": "revoked",
                "operator": "eq",
                "value": true
              }
            ],
            "source_freshness_seconds": {
              "ledger": 10,
              "acceptance": 10
            },
            "max_clock_skew_seconds": 0
          },
          "evidence": [
            {
              "id": "e-ledger",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "ledger",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/ledger"
            },
            {
              "id": "e-acceptance",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "acceptance",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/acceptance"
            }
          ],
          "now": "2026-10-01T12:00:01Z",
          "current_head": {
            "id": "public-test-certificate",
            "certificate_version": 2,
            "head_sequence": 1,
            "contract_id": "public-test-outcome",
            "tenant_id": "public-test-tenant",
            "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
            "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
            "state": "FINAL",
            "evidence_ids": [
              "e-acceptance",
              "e-ledger"
            ],
            "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
            "issued_at": "2026-10-02T00:00:00Z",
            "issuer_id": "public-test-issuer",
            "signer_key_id": "public-test-key",
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "previous_certificate_id": null,
            "evidence_ceiling": "E3",
            "payload_digest": "sha256:2a5c17ede938f9355a6773284f10bcc5d0336fad50e6abb30f7e8679d8922dd4",
            "signature": "MfJao8oc4nMdP2VQNnbYKqBS_MWPlGFkBC0_ABWMMwrppIUo4ZQ__LOp4HU8StQtxxblwTZ-GD1YG2oHw1YeAg"
          },
          "trusted_issuer_keys": [
            {
              "id": "public-test-key",
              "issuer_id": "public-test-issuer",
              "public_key": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAoZdrzsncx0W1p1YesByChrqEK8HaF3+DtD3X5KlnKig=\n-----END PUBLIC KEY-----\n",
              "trust_domains": [
                "public-test-domain"
              ],
              "status": "ACTIVE",
              "not_before": "2026-01-01T00:00:00Z",
              "not_after": "2027-01-01T00:00:00Z"
            }
          ]
        }
      }
    },
    {
      "id": "signed-semantic-contradiction",
      "category": "signed-invalid",
      "authorship": "SELLER_AUTHORED",
      "expected_valid": false,
      "input": {
        "certificate": {
          "id": "public-test-certificate",
          "certificate_version": 2,
          "head_sequence": 1,
          "contract_id": "public-test-outcome",
          "tenant_id": "public-test-tenant",
          "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
          "evidence_root": "sha256:3747cd885517996322597ce1d910fa6fc1f495e5c2d012cba84648485a680e9a",
          "state": "FINAL",
          "evidence_ids": [
            "e-acceptance",
            "e-ledger"
          ],
          "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
          "issued_at": "2026-10-01T12:00:01Z",
          "issuer_id": "public-test-issuer",
          "signer_key_id": "public-test-key",
          "trust_domain_id": "public-test-domain",
          "reliance_profile_id": "R2",
          "policy_version": "test-policy-1",
          "schema_version": "2.0.0",
          "previous_certificate_id": null,
          "evidence_ceiling": "E3",
          "payload_digest": "sha256:3b617527af3eb9a0a63ba7d2fa1b0a6462c039fbf216464ae28ffe72c19dce45",
          "signature": "Ku7aC1uipJQBx0Qn6i4tu7bCv9vsK7sVt3T0mKDeEbOg4NhjOuj9YJqYst_eDozAK_MXXUSVgwec1Nz9PdLaCw"
        },
        "options": {
          "contract": {
            "id": "public-test-outcome",
            "version": 1,
            "tenant_id": "public-test-tenant",
            "subject": "Public test delivery",
            "expected_end_state": {
              "delivered": true
            },
            "authoritative_sources": [
              "ledger",
              "acceptance"
            ],
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "contradiction_rules": [
              {
                "path": "revoked",
                "operator": "eq",
                "value": true
              }
            ],
            "source_freshness_seconds": {
              "ledger": 10,
              "acceptance": 10
            },
            "max_clock_skew_seconds": 0
          },
          "evidence": [
            {
              "id": "e-ledger",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "ledger",
              "observed_state": {
                "delivered": false,
                "revoked": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/ledger"
            },
            {
              "id": "e-acceptance",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "acceptance",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/acceptance"
            }
          ],
          "now": "2026-10-01T12:00:01Z",
          "current_head": {
            "id": "public-test-certificate",
            "certificate_version": 2,
            "head_sequence": 1,
            "contract_id": "public-test-outcome",
            "tenant_id": "public-test-tenant",
            "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
            "evidence_root": "sha256:3747cd885517996322597ce1d910fa6fc1f495e5c2d012cba84648485a680e9a",
            "state": "FINAL",
            "evidence_ids": [
              "e-acceptance",
              "e-ledger"
            ],
            "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
            "issued_at": "2026-10-01T12:00:01Z",
            "issuer_id": "public-test-issuer",
            "signer_key_id": "public-test-key",
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "previous_certificate_id": null,
            "evidence_ceiling": "E3",
            "payload_digest": "sha256:3b617527af3eb9a0a63ba7d2fa1b0a6462c039fbf216464ae28ffe72c19dce45",
            "signature": "Ku7aC1uipJQBx0Qn6i4tu7bCv9vsK7sVt3T0mKDeEbOg4NhjOuj9YJqYst_eDozAK_MXXUSVgwec1Nz9PdLaCw"
          },
          "trusted_issuer_keys": [
            {
              "id": "public-test-key",
              "issuer_id": "public-test-issuer",
              "public_key": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAoZdrzsncx0W1p1YesByChrqEK8HaF3+DtD3X5KlnKig=\n-----END PUBLIC KEY-----\n",
              "trust_domains": [
                "public-test-domain"
              ],
              "status": "ACTIVE",
              "not_before": "2026-01-01T00:00:00Z",
              "not_after": "2027-01-01T00:00:00Z"
            }
          ]
        }
      }
    },
    {
      "id": "signed-empty-end-state",
      "category": "signed-invalid",
      "authorship": "SELLER_AUTHORED",
      "expected_valid": false,
      "input": {
        "certificate": {
          "id": "public-test-certificate",
          "certificate_version": 2,
          "head_sequence": 1,
          "contract_id": "public-test-outcome",
          "tenant_id": "public-test-tenant",
          "contract_digest": "sha256:cfc84d86326bf5699be9841e55725706f511f2532e66d32445036b1ecc1adf75",
          "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
          "state": "FINAL",
          "evidence_ids": [
            "e-acceptance",
            "e-ledger"
          ],
          "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
          "issued_at": "2026-10-01T12:00:01Z",
          "issuer_id": "public-test-issuer",
          "signer_key_id": "public-test-key",
          "trust_domain_id": "public-test-domain",
          "reliance_profile_id": "R2",
          "policy_version": "test-policy-1",
          "schema_version": "2.0.0",
          "previous_certificate_id": null,
          "evidence_ceiling": "E3",
          "payload_digest": "sha256:3a5a1261e9abf886f5d4a7b6451345e5ad583fd1334de39467d670939357f856",
          "signature": "mNvX0VodXA03O7rakIWJHk-NljDxR_eBUkIu7xBtAzhMEazg-wNEpPy-iyc2jAJvRZ7Zjsf_HizMtEEP042NBg"
        },
        "options": {
          "contract": {
            "id": "public-test-outcome",
            "version": 1,
            "tenant_id": "public-test-tenant",
            "subject": "Public test delivery",
            "expected_end_state": {},
            "authoritative_sources": [
              "ledger",
              "acceptance"
            ],
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "contradiction_rules": [
              {
                "path": "revoked",
                "operator": "eq",
                "value": true
              }
            ],
            "source_freshness_seconds": {
              "ledger": 10,
              "acceptance": 10
            },
            "max_clock_skew_seconds": 0
          },
          "evidence": [
            {
              "id": "e-ledger",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "ledger",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/ledger"
            },
            {
              "id": "e-acceptance",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "acceptance",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/acceptance"
            }
          ],
          "now": "2026-10-01T12:00:01Z",
          "current_head": {
            "id": "public-test-certificate",
            "certificate_version": 2,
            "head_sequence": 1,
            "contract_id": "public-test-outcome",
            "tenant_id": "public-test-tenant",
            "contract_digest": "sha256:cfc84d86326bf5699be9841e55725706f511f2532e66d32445036b1ecc1adf75",
            "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
            "state": "FINAL",
            "evidence_ids": [
              "e-acceptance",
              "e-ledger"
            ],
            "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
            "issued_at": "2026-10-01T12:00:01Z",
            "issuer_id": "public-test-issuer",
            "signer_key_id": "public-test-key",
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "previous_certificate_id": null,
            "evidence_ceiling": "E3",
            "payload_digest": "sha256:3a5a1261e9abf886f5d4a7b6451345e5ad583fd1334de39467d670939357f856",
            "signature": "mNvX0VodXA03O7rakIWJHk-NljDxR_eBUkIu7xBtAzhMEazg-wNEpPy-iyc2jAJvRZ7Zjsf_HizMtEEP042NBg"
          },
          "trusted_issuer_keys": [
            {
              "id": "public-test-key",
              "issuer_id": "public-test-issuer",
              "public_key": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAoZdrzsncx0W1p1YesByChrqEK8HaF3+DtD3X5KlnKig=\n-----END PUBLIC KEY-----\n",
              "trust_domains": [
                "public-test-domain"
              ],
              "status": "ACTIVE",
              "not_before": "2026-01-01T00:00:00Z",
              "not_after": "2027-01-01T00:00:00Z"
            }
          ]
        }
      }
    },
    {
      "id": "signed-policy-mismatch",
      "category": "signed-invalid",
      "authorship": "SELLER_AUTHORED",
      "expected_valid": false,
      "input": {
        "certificate": {
          "id": "public-test-certificate",
          "certificate_version": 2,
          "head_sequence": 1,
          "contract_id": "public-test-outcome",
          "tenant_id": "public-test-tenant",
          "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
          "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
          "state": "FINAL",
          "evidence_ids": [
            "e-acceptance",
            "e-ledger"
          ],
          "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
          "issued_at": "2026-10-01T12:00:01Z",
          "issuer_id": "public-test-issuer",
          "signer_key_id": "public-test-key",
          "trust_domain_id": "public-test-domain",
          "reliance_profile_id": "R2",
          "policy_version": "other-policy",
          "schema_version": "2.0.0",
          "previous_certificate_id": null,
          "evidence_ceiling": "E3",
          "payload_digest": "sha256:0106d754a1f196c2104c5dc77ff4bcf7abbb48b48eac2b21c7f97f668d700f5a",
          "signature": "OymDLWqpG19V8qalv_65c97KwbZlT7inUW5TrtH4_bojW7J4dXFr0kbsoD_OeaMClNhNGuOllZb7kJAjgiTeDg"
        },
        "options": {
          "contract": {
            "id": "public-test-outcome",
            "version": 1,
            "tenant_id": "public-test-tenant",
            "subject": "Public test delivery",
            "expected_end_state": {
              "delivered": true
            },
            "authoritative_sources": [
              "ledger",
              "acceptance"
            ],
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "contradiction_rules": [
              {
                "path": "revoked",
                "operator": "eq",
                "value": true
              }
            ],
            "source_freshness_seconds": {
              "ledger": 10,
              "acceptance": 10
            },
            "max_clock_skew_seconds": 0
          },
          "evidence": [
            {
              "id": "e-ledger",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "ledger",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/ledger"
            },
            {
              "id": "e-acceptance",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "acceptance",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/acceptance"
            }
          ],
          "now": "2026-10-01T12:00:01Z",
          "current_head": {
            "id": "public-test-certificate",
            "certificate_version": 2,
            "head_sequence": 1,
            "contract_id": "public-test-outcome",
            "tenant_id": "public-test-tenant",
            "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
            "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
            "state": "FINAL",
            "evidence_ids": [
              "e-acceptance",
              "e-ledger"
            ],
            "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
            "issued_at": "2026-10-01T12:00:01Z",
            "issuer_id": "public-test-issuer",
            "signer_key_id": "public-test-key",
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "other-policy",
            "schema_version": "2.0.0",
            "previous_certificate_id": null,
            "evidence_ceiling": "E3",
            "payload_digest": "sha256:0106d754a1f196c2104c5dc77ff4bcf7abbb48b48eac2b21c7f97f668d700f5a",
            "signature": "OymDLWqpG19V8qalv_65c97KwbZlT7inUW5TrtH4_bojW7J4dXFr0kbsoD_OeaMClNhNGuOllZb7kJAjgiTeDg"
          },
          "trusted_issuer_keys": [
            {
              "id": "public-test-key",
              "issuer_id": "public-test-issuer",
              "public_key": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAoZdrzsncx0W1p1YesByChrqEK8HaF3+DtD3X5KlnKig=\n-----END PUBLIC KEY-----\n",
              "trust_domains": [
                "public-test-domain"
              ],
              "status": "ACTIVE",
              "not_before": "2026-01-01T00:00:00Z",
              "not_after": "2027-01-01T00:00:00Z"
            }
          ]
        }
      }
    },
    {
      "id": "signed-wrong-evidence-identities",
      "category": "signed-invalid",
      "authorship": "SELLER_AUTHORED",
      "expected_valid": false,
      "input": {
        "certificate": {
          "id": "public-test-certificate",
          "certificate_version": 2,
          "head_sequence": 1,
          "contract_id": "public-test-outcome",
          "tenant_id": "public-test-tenant",
          "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
          "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
          "state": "FINAL",
          "evidence_ids": [
            "not-the-bound-evidence"
          ],
          "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
          "issued_at": "2026-10-01T12:00:01Z",
          "issuer_id": "public-test-issuer",
          "signer_key_id": "public-test-key",
          "trust_domain_id": "public-test-domain",
          "reliance_profile_id": "R2",
          "policy_version": "test-policy-1",
          "schema_version": "2.0.0",
          "previous_certificate_id": null,
          "evidence_ceiling": "E3",
          "payload_digest": "sha256:a310f203f23830d2a969b34ec521574fd9935d53793571bb881833a751669ee8",
          "signature": "kyj5q1N2C5NH7KVGQaThHUaqPD6DyqDhbtCk9gd8Ep6DOZ1_QRLhxZoToWLGi2jnFHTaOf3nlpN1ySb36bNpDg"
        },
        "options": {
          "contract": {
            "id": "public-test-outcome",
            "version": 1,
            "tenant_id": "public-test-tenant",
            "subject": "Public test delivery",
            "expected_end_state": {
              "delivered": true
            },
            "authoritative_sources": [
              "ledger",
              "acceptance"
            ],
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "contradiction_rules": [
              {
                "path": "revoked",
                "operator": "eq",
                "value": true
              }
            ],
            "source_freshness_seconds": {
              "ledger": 10,
              "acceptance": 10
            },
            "max_clock_skew_seconds": 0
          },
          "evidence": [
            {
              "id": "e-ledger",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "ledger",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/ledger"
            },
            {
              "id": "e-acceptance",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "acceptance",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/acceptance"
            }
          ],
          "now": "2026-10-01T12:00:01Z",
          "current_head": {
            "id": "public-test-certificate",
            "certificate_version": 2,
            "head_sequence": 1,
            "contract_id": "public-test-outcome",
            "tenant_id": "public-test-tenant",
            "contract_digest": "sha256:5a19bf261ad2ef3ce167e15be7b83c735e43703ae71eef37faa25664eca2c40b",
            "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
            "state": "FINAL",
            "evidence_ids": [
              "not-the-bound-evidence"
            ],
            "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
            "issued_at": "2026-10-01T12:00:01Z",
            "issuer_id": "public-test-issuer",
            "signer_key_id": "public-test-key",
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "previous_certificate_id": null,
            "evidence_ceiling": "E3",
            "payload_digest": "sha256:a310f203f23830d2a969b34ec521574fd9935d53793571bb881833a751669ee8",
            "signature": "kyj5q1N2C5NH7KVGQaThHUaqPD6DyqDhbtCk9gd8Ep6DOZ1_QRLhxZoToWLGi2jnFHTaOf3nlpN1ySb36bNpDg"
          },
          "trusted_issuer_keys": [
            {
              "id": "public-test-key",
              "issuer_id": "public-test-issuer",
              "public_key": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAoZdrzsncx0W1p1YesByChrqEK8HaF3+DtD3X5KlnKig=\n-----END PUBLIC KEY-----\n",
              "trust_domains": [
                "public-test-domain"
              ],
              "status": "ACTIVE",
              "not_before": "2026-01-01T00:00:00Z",
              "not_after": "2027-01-01T00:00:00Z"
            }
          ]
        }
      }
    },
    {
      "id": "signed-invalid-freshness",
      "category": "signed-invalid",
      "authorship": "SELLER_AUTHORED",
      "expected_valid": false,
      "input": {
        "certificate": {
          "id": "public-test-certificate",
          "certificate_version": 2,
          "head_sequence": 1,
          "contract_id": "public-test-outcome",
          "tenant_id": "public-test-tenant",
          "contract_digest": "sha256:365bc4051e889ce11c335c133393eac0913243bb8c52c04cd9725d7c136b467c",
          "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
          "state": "FINAL",
          "evidence_ids": [
            "e-acceptance",
            "e-ledger"
          ],
          "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
          "issued_at": "2026-10-01T12:00:01Z",
          "issuer_id": "public-test-issuer",
          "signer_key_id": "public-test-key",
          "trust_domain_id": "public-test-domain",
          "reliance_profile_id": "R2",
          "policy_version": "test-policy-1",
          "schema_version": "2.0.0",
          "previous_certificate_id": null,
          "evidence_ceiling": "E3",
          "payload_digest": "sha256:2bb2e03ecd3e2ea91220442d780fe6010a1f3e55ca5b8d1d63f100d0872c8d3e",
          "signature": "JYgvJodTkPGsvvhzpikgxZNKtyil5zuUppeSzknRLYavhN_79_DgYp2I6ZGZ2eWOro_Kov_34LAz1cTa6fzXCg"
        },
        "options": {
          "contract": {
            "id": "public-test-outcome",
            "version": 1,
            "tenant_id": "public-test-tenant",
            "subject": "Public test delivery",
            "expected_end_state": {
              "delivered": true
            },
            "authoritative_sources": [
              "ledger",
              "acceptance"
            ],
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "contradiction_rules": [
              {
                "path": "revoked",
                "operator": "eq",
                "value": true
              }
            ],
            "source_freshness_seconds": {
              "ledger": -1,
              "acceptance": 10
            },
            "max_clock_skew_seconds": 0
          },
          "evidence": [
            {
              "id": "e-ledger",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "ledger",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/ledger"
            },
            {
              "id": "e-acceptance",
              "contract_id": "public-test-outcome",
              "tenant_id": "public-test-tenant",
              "source_id": "acceptance",
              "observed_state": {
                "delivered": true
              },
              "owner": "public-test-source",
              "observed_at": "2026-10-01T12:00:00Z",
              "authority_uri": "https://source.example/acceptance"
            }
          ],
          "now": "2026-10-01T12:00:01Z",
          "current_head": {
            "id": "public-test-certificate",
            "certificate_version": 2,
            "head_sequence": 1,
            "contract_id": "public-test-outcome",
            "tenant_id": "public-test-tenant",
            "contract_digest": "sha256:365bc4051e889ce11c335c133393eac0913243bb8c52c04cd9725d7c136b467c",
            "evidence_root": "sha256:af451110815708ea31bc5f687b64d3aee755cf667d0bfb9055a62256b928933d",
            "state": "FINAL",
            "evidence_ids": [
              "e-acceptance",
              "e-ledger"
            ],
            "reason": "AUTHORITATIVE_END_STATE_SATISFIED",
            "issued_at": "2026-10-01T12:00:01Z",
            "issuer_id": "public-test-issuer",
            "signer_key_id": "public-test-key",
            "trust_domain_id": "public-test-domain",
            "reliance_profile_id": "R2",
            "policy_version": "test-policy-1",
            "schema_version": "2.0.0",
            "previous_certificate_id": null,
            "evidence_ceiling": "E3",
            "payload_digest": "sha256:2bb2e03ecd3e2ea91220442d780fe6010a1f3e55ca5b8d1d63f100d0872c8d3e",
            "signature": "JYgvJodTkPGsvvhzpikgxZNKtyil5zuUppeSzknRLYavhN_79_DgYp2I6ZGZ2eWOro_Kov_34LAz1cTa6fzXCg"
          },
          "trusted_issuer_keys": [
            {
              "id": "public-test-key",
              "issuer_id": "public-test-issuer",
              "public_key": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAoZdrzsncx0W1p1YesByChrqEK8HaF3+DtD3X5KlnKig=\n-----END PUBLIC KEY-----\n",
              "trust_domains": [
                "public-test-domain"
              ],
              "status": "ACTIVE",
              "not_before": "2026-01-01T00:00:00Z",
              "not_after": "2027-01-01T00:00:00Z"
            }
          ]
        }
      }
    }
  ]
}
