{"algorithm":"Ed25519","body":{"attestation":{"approved_production_measurements":[],"official_vector_scope":"Official AWS root and historical COSE authentication only","provider_status":{"aws-nitro":"Software fixtures and official historical document authentication pass; real Finality enclave execution not established","azure-sev-snp":"NOT_IMPLEMENTED","azure-sgx":"Software fixtures pass; real SGX execution not established","gcp-confidential-space":"Software token fixtures pass; real workload execution not established","gcp-confidential-vm":"NOT_IMPLEMENTED; Confidential Space is a different profile","tpm2":"NOT_IMPLEMENTED"},"real_hardware_test":"ENVIRONMENT_BLOCKED"},"buyer_authored_cases":0,"candidate":"V128","certifications":0,"claim":"Zero observed false FINAL in specified repaired-code lab populations is not a universal theorem or production assurance.","cleanroom":{"external_implementation":0,"secondary_checker":"INTERNAL_PRIMARY_AWARE_SHARED_LEGACY_MERKLE_REFERENCES","source_free_distribution":"PREPARED","source_isolated_internal_simulation":"ENVIRONMENT_BLOCKED_AND_NOT_EXECUTED"},"counter_scope":"Uncompleted production control/deployment threat triage leaves critical/high release counters unknown. Current named internal campaigns only; unknown/unmeasured release counters remain null. Fixed historical defects remain in defect history, never erased.","customer_production_deployments":0,"evidence":[{"path":"assurance/v128/defect-history.json","sha256":"e64089d4cc7e88fed351daf2a3b8a52b627ac467fabc6a81f0ae7a64ed49c6d1"},{"path":"assurance/v128/audit-execution.json","sha256":"f2017df33aa81f1f0089581dd2c826f8cfd2d3d4deec05026403af346a1516c0"},{"path":"assurance/v128/scale-1000.json","sha256":"cf9f737046119f582eace9757195e8ceef353c3d505aae02de0ddeb28eb6c7ad"},{"path":"assurance/v128/scale-10000.json","sha256":"eadc947842491b23040bdeb76aab61ab14b44cb4bf650b2e93901a325f5b3fe6"},{"path":"assurance/v128/scale-100000.json","sha256":"cf0cf2bca54875a082d6fb8ac92eaae0aa66872e2dc0be1e77f5732343f56ab1"},{"path":"assurance/v128/scale-results.json","sha256":"14bc65fc476d9be4612fa8f599d1b8295d4afd5235624b0b6bb9e502a5ef1222"},{"path":"assurance/v128/mutation-results.json","sha256":"38880402847487c38f09db4ae259af05bd797ca232e458ef8a579c8074e27c2b"},{"path":"assurance/v128/inherited-mutation-results.json","sha256":"0fd1ea7cef5199c72eb8c59ed505323891297c18315c6c4ef45d69a4094667ab"},{"path":"assurance/v128/high-reference-results.json","sha256":"4aa691dcfda370b42a593019228f3707d3c32acf14db2b29e1932820f2105a9a"},{"path":"assurance/v128/reference-regression-results.json","sha256":"c6aa15a721675d607489be63bd18952c1d1b253a8b293be1f6213ecee1a9419f"},{"path":"assurance/v128/operator-compromise.json","sha256":"9f879869d08eecfc25e7c1cb826fe5deb0255f40f9050e58365fe54846613ad3"},{"path":"assurance/v128/fuzz-results.json","sha256":"afb2dbb2dc4d5c38424b4305b7216714caefa4dee8896f02f338899e17fc0f8b"},{"path":"assurance/v128/network-dr-results.json","sha256":"a82f388383a96c22231e005b9bd1538a3a3f8cd6437a48f6d03a442c3bb1db72"},{"path":"assurance/v128/formal-model-results.json","sha256":"3c93bb3ff4e023f9f84a139be989b6bcaec9a161d5efa2f0888d5757ce9431c6"},{"path":"assurance/v128/quorum-proof-results.json","sha256":"62abca6990892ee0ae80c029a2750e1fa8e79a02e34a7da45c9d0273e2b6a527"},{"path":"assurance/v128/test-results.json","sha256":"11b120664e28f6112bdb823569ecfe6f695205c679d523d1f20b73bf13eb289e"},{"path":"assurance/v128/soak-results.json","sha256":"d0f0d689f88953d48e3281a4edaf9fc45d5cbedadc56d049c772efa550baae4a"}],"external_audits":0,"external_evidence_boundary":"No external attribution or elapsed production history is generated by this program","formal":{"abstract_quorum_lemma":{"classification":"PROVEN_ABSTRACT_INTEGER_LEMMA_BY_SMT_UNSAT","domain":"Unbounded mathematical integers; no fixed operator-count bound","negated_conclusion":"overlap <= f","not_proven":["Production-code refinement","Honest signer non-equivocation","Protected storage and credential separation","Hardware implementation","Whole-system FINAL safety"],"premises":["Distinct operator keys","0 <= f < n","2 <= q <= n","Cardinality intersection bound overlap >= 2q-n","2q > n+f"],"premises_satisfiable":true,"production_function":"validateIntersectingQuorum","removed_guard_counterexample":{"faulty":0,"operators":4,"overlap":0,"threshold":2},"result":"unsat","schema":"FinalitySMTQuorumLemma/1","source_sha256":"2834745ded7c19fe373f9a56c3b692ad3ca596a974a75cd652f705f87af4cc03","theorem":"Two q-of-n quorums share more than f members if 2q > n+f","tool":"Z3","tool_version":"4.15.4"},"bounded_state_model":{"bound":{"depth":8,"replicas":"not represented","revocation":"one boolean","sequences":4},"classification":"MODEL_CHECKED_WITH_BOUND","counterexamples":0,"operator_compromise_minimum_cut":"UNVERIFIED","production_refinement":"UNVERIFIED","properties":["FINAL requires current retained floor","revocation forbids FINAL","FINAL requires predecessor linkage","monotonic floor","REOPEN removes FINAL"],"proven":[],"schema":"V128BoundedMonotonicStateModel/1","states":30,"transitions":108,"unbounded_temporal_theorem":"UNVERIFIED"},"production_refinement":"UNVERIFIED","whole_system_temporal_theorem":"UNVERIFIED"},"gates":{"BUYER_SEALED_ISOLATION":{"reason":"Crypto seal/reveal/commit harness tested; required namespace sandbox denied, no security fallback","status":"ENVIRONMENT_BLOCKED"},"CANONICAL_MANIFEST_LIVE":{"reason":"Signed candidate only; complete public-estate migration and live canonical endpoint not established","status":"HOLD"},"CLEANROOM_PACKAGE":{"reason":"Source-free specs/vectors distribution; no source-isolated internal implementation or full independently checked provider specification","status":"PARTIAL"},"DISASTER_RECOVERY":{"reason":"Local committed-state restart/restore exercises; full protected deployment recovery unvalidated","status":"PARTIAL"},"DURABLE_TRUST_STATE":{"reason":"Real SQLite journal and protected-floor checks tested; deployed protected global head serialization and root rotation remain unresolved","status":"PARTIAL"},"MULTI_REGION_SAFETY":{"reason":"Bounded schedules and separate local HTTP/SQLite processes tested; actual regions/global serialization untested","status":"PARTIAL"},"OFFLINE_VERIFY":{"reason":"Complete supplied packet verifies without Finality private API/DB; real hardware execution not established","status":"SOFTWARE_PROFILE_PASS"},"REAL_HARDWARE_ATTESTATION":{"reason":"HARDWARE OR CLOUD ATTESTATION HOST REQUIRED; see hardware blocker","status":"ENVIRONMENT_BLOCKED"},"ROLLBACK":{"reason":"Actual SQLite restore rejects with separately retained floor; old measured image/container and complete independent-floor recovery untested","status":"PARTIAL"},"STAGING_VALIDATION":{"reason":"No hardware host or deployed isolated production-equivalent staging; local software checks only","status":"PARTIAL"},"TRANSPARENCY":{"reason":"Persistent local log, proofs, restart/restore/corruption and witnesses tested; production failover/scalability unvalidated","status":"PARTIAL"},"WITNESS_PACKAGE":{"reason":"One-command source tooling and real OCI assembly; actual container execution/clean-host setup time unvalidated","status":"PARTIAL"}},"mutations":{"inherited_attested_campaign":{"killed":8,"results":[{"crashed":false,"guard":"DISTINCT_AUTHORITY_KEY_QUORUM","killed":true,"syntax_failure":false},{"crashed":false,"guard":"PROVIDER_SIGNATURE","killed":true,"syntax_failure":false},{"crashed":false,"guard":"ATTESTATION_NONCE","killed":true,"syntax_failure":false},{"crashed":false,"guard":"QUOTED_RUNTIME_HASH","killed":true,"syntax_failure":false},{"crashed":false,"guard":"MEASUREMENT_NOT_APPROVED","killed":true,"syntax_failure":false},{"crashed":false,"guard":"STALE_OR_ROLLED_BACK_TRUST_STATE","killed":true,"syntax_failure":false},{"crashed":false,"guard":"RELEASE_WITNESS_QUORUM","killed":true,"syntax_failure":false},{"crashed":false,"guard":"REVOKED_OR_FOREIGN_AUTHORITY","killed":true,"syntax_failure":false}],"schema":"AttestedFinalityMutations/1","survivors":0,"total":8},"new_guard_campaign":{"baseline_passed":true,"killed":15,"results":[{"crashed":false,"guard":"MEASURED_PROVIDER_POLICY_PIN","killed":true,"syntax_failure":false},{"crashed":false,"guard":"BOOTSTRAP_CONTEXT","killed":true,"syntax_failure":false},{"crashed":false,"guard":"ISSUER_POLICY_QUORUM_THRESHOLD","killed":true,"syntax_failure":false},{"crashed":false,"guard":"CONFLICTING_SOURCE_OBSERVATIONS","killed":true,"syntax_failure":false},{"crashed":false,"guard":"NONINTERSECTING_TRUST_QUORUM","killed":true,"syntax_failure":false},{"crashed":false,"guard":"LEDGER_EVIDENCE_KEY_NOT_ACTIVE","killed":true,"syntax_failure":false},{"crashed":false,"guard":"LEDGER_DUAL_CONTROL_REQUIRED","killed":true,"syntax_failure":false},{"crashed":false,"guard":"HEAD_CONTROL_PLANE_NOT_SEPARATE","killed":true,"syntax_failure":false},{"crashed":false,"guard":"PROTECTED_HEAD_STALE_OR_FORKED","killed":true,"syntax_failure":false},{"crashed":false,"guard":"PROTECTED_HEAD_EXPIRED","killed":true,"syntax_failure":false},{"crashed":false,"guard":"LEDGER_EXTERNALLY_PINNED_FLOOR","killed":true,"syntax_failure":false},{"crashed":false,"guard":"LEDGER_FORK_OR_ROLLBACK","killed":true,"syntax_failure":false},{"crashed":false,"guard":"LEDGER_MEASUREMENT_NOT_CURRENT","killed":true,"syntax_failure":false},{"crashed":false,"guard":"LEDGER_RELEASE_NOT_CURRENT","killed":true,"syntax_failure":false},{"crashed":false,"guard":"LEDGER_ATTESTED_STATE_BINDING","killed":true,"syntax_failure":false}],"schema":"FinalityV128GuardMutations/1","scope":"Selected guard removals; not all possible security mutations","survivors":0,"total":15}},"observed_at":"2026-10-02T16:21:35.555Z","product_version":"16.0.0","production":{"active_release":"V126","candidate_deployment_generation":null},"public_site_version":80,"publication_state":"UNPUBLISHED_CANDIDATE","release_counters":{"accepted_trust_rollbacks":0,"attestation_bypass":null,"known_critical_defects":null,"known_false_final":0,"known_high_defects":null,"mutation_survivors":0,"public_claim_contradictions":null,"reference_disagreements":0,"rollback_safety_failures":0,"tenant_violations":null,"unsafe_accepts":0},"scale":{"attested_checks":100000,"classification":"SELLER_CONTROLLED_SINGLE_PROCESS_LAB","code_sha256":{"assurance/v127/attested-fixture.mjs":"cbccbf7c1f0062da719d93284b5e2b6866f30aa4155bcb2dbe06dd4bd5c0674b","assurance/v128/ledger-fixture.mjs":"fde998dfe3fe52faa3b1d18d7016f99b683843e81b11e5568c58f4b9fa784200","institutional/attested/cbor.mjs":"b3c49b554d48a5118aa0073317d1a0081ec421bfde55b664914298393324e8da","institutional/attested/finality.mjs":"d50ab92c31c85a878c0177f45a0245ca2f704f13376b7fb66348741e82fc41e3","institutional/attested/gcp.mjs":"8fc5c08c4a6d21649d324130e9f3792ca7946946903c9ee991cc9532f310f34f","institutional/attested/nitro.mjs":"66f614abef317ea26f8857e2d7b76d784cbb029c14c9146d6149cf1d484abc45","institutional/attested/providers.mjs":"5d9fa605b9c7ca349b074a2954b98038dc11c1f1d1864918e0965d0099482c14","institutional/attested/wire.mjs":"3de3ba24434b921e26a40093b09ade9370b890caebe9bca78a09b750db7034d0","institutional/trust-kernel.mjs":"eb64e666bbc470dafe94c7092a1da99681e37cffc30417ceda9ea6ea091207c7","institutional/trust-state/ledger.mjs":"d0c4a4d6bd95632578272a350fe1f29d268b7e7e4558c550c5acf3ca5038fef6"},"cpu_microseconds":{"system":1082756,"user":323698183},"disagreements":0,"duration_ms":"323152.727271","events":1000000,"not_measured":["network","I/O pressure","database pressure","real multi-region","customer production"],"p50_ms":"0.03307999996468425","p95_ms":"1.4676859999999579","p999_ms":"8.312043999991147","p99_ms":"5.454852000002575","population":"90% institutional decision transitions and 10% full attested-envelope verifications under a simulated provider; deterministic seeded mutations","reopen_transitions":440230,"rss_bytes":237694976,"schema":"FinalityLabScale/1","seed":128001,"throughput_per_second":"3094.5120236023486","unsafe_accepts":0},"schema":"FinalityCanonicalTruth/2","secondary_reference":{"cases":40,"classification":"INTERNAL_PRIMARY_AWARE_SECONDARY_CONTROL_PLANE_REUSES_PYTHON_LEGACY_AND_MERKLE_REFERENCES","cleanroom_execution":"NOT_ESTABLISHED","corpus_sha256":"b90b3c1ce0a13cf00c2f7b2e011a8eff872e2710dcd2c9a6c67503b8bf5e1e92","disagreements":0,"external_independence":false,"provider_coverage":"AZURE_SOFTWARE_TOKEN_PROFILE_ONLY","results":[{"expected":true,"id":"canonical-azure-software-positive","primary":true,"secondary":true},{"expected":false,"id":"nonce","primary":false,"secondary":false},{"expected":false,"id":"tenant","primary":false,"secondary":false},{"expected":false,"id":"environment","primary":false,"secondary":false},{"expected":false,"id":"sequence","primary":false,"secondary":false},{"expected":false,"id":"digest","primary":false,"secondary":false},{"expected":false,"id":"protocol","primary":false,"secondary":false},{"expected":false,"id":"policy","primary":false,"secondary":false},{"expected":false,"id":"release-approval","primary":false,"secondary":false},{"expected":false,"id":"release-expiry","primary":false,"secondary":false},{"expected":false,"id":"floor","primary":false,"secondary":false},{"expected":false,"id":"ledger-signature","primary":false,"secondary":false},{"expected":false,"id":"protected-head-quorum","primary":false,"secondary":false},{"expected":false,"id":"protected-head-nonce","primary":false,"secondary":false},{"expected":false,"id":"ledger-sequence","primary":false,"secondary":false},{"expected":false,"id":"provider-signature","primary":false,"secondary":false},{"expected":false,"id":"checkpoint","primary":false,"secondary":false},{"expected":false,"id":"witness-quorum","primary":false,"secondary":false},{"expected":false,"id":"receipt","primary":false,"secondary":false},{"expected":false,"id":"binding","primary":false,"secondary":false},{"expected":false,"id":"no-ledger","primary":false,"secondary":false},{"expected":false,"id":"no-provider","primary":false,"secondary":false},{"expected":false,"id":"evidence","primary":false,"secondary":false},{"expected":false,"id":"duplicate-evidence","primary":false,"secondary":false},{"expected":false,"id":"source-signature","primary":false,"secondary":false},{"expected":false,"id":"issuer-key","primary":false,"secondary":false},{"expected":false,"id":"max_state_age_ms--1","primary":false,"secondary":false},{"expected":false,"id":"max_state_age_ms-true","primary":false,"secondary":false},{"expected":false,"id":"max_state_age_ms-600000","primary":false,"secondary":false},{"expected":false,"id":"max_issuance_age_ms--1","primary":false,"secondary":false},{"expected":false,"id":"max_issuance_age_ms-true","primary":false,"secondary":false},{"expected":false,"id":"max_issuance_age_ms-600000","primary":false,"secondary":false},{"expected":false,"id":"signed-provider-nonce","primary":false,"secondary":false},{"expected":false,"id":"signed-provider-x-ms-sgx-is-debuggable","primary":false,"secondary":false},{"expected":false,"id":"signed-provider-x-ms-sgx-mrenclave","primary":false,"secondary":false},{"expected":false,"id":"signed-provider-x-ms-sgx-report-data","primary":false,"secondary":false},{"expected":false,"id":"signed-provider-x-ms-sgx-ehd","primary":false,"secondary":false},{"expected":false,"id":"signed-provider-x-ms-attestation-type","primary":false,"secondary":false},{"expected":false,"id":"signed-provider-exp","primary":false,"secondary":false},{"expected":false,"id":"validly-signed-historical-authority-padding","primary":false,"secondary":false}],"schema":"FinalityHighAssuranceComparison/1","sources":{"institutional/attested/finality.mjs":"d50ab92c31c85a878c0177f45a0245ca2f704f13376b7fb66348741e82fc41e3","institutional/trust-kernel.mjs":"eb64e666bbc470dafe94c7092a1da99681e37cffc30417ceda9ea6ea091207c7","institutional/trust-state/ledger.mjs":"d0c4a4d6bd95632578272a350fe1f29d268b7e7e4558c550c5acf3ca5038fef6","research/fvre/reference/attested_reference.py":"c35745829bfe503598955cce3e03ab91a04b03eccfee45f0faff5592c3be4333","research/fvre/reference/certificate_reference.py":"12a408d70083c6506f75a40a4ea12a809b1ad26f5f189fd11d76b5b7ae984185","research/fvre/reference/merkle_reference.py":"70cf8bd511de610edcfa83a84677c1380a9ab145355d8bc47db4feba8a873cab"},"unexpected_rejects":0,"unsafe_accepts":0},"source_commit":"6228c3d688889bdae33a87d01e8af794d57bac8e","source_identity":"Checkpoint commit plus exact content hashes in bound evidence; not a claim that uncommitted work is in that commit","tests":{"build":"PASS","classification":"INTERNAL_REPOSITORY_REGRESSION","command":"npm test (build plus node --test tests/*.test.mjs)","duration_ms":"7407.58659","external_validation":false,"fail":0,"log_sha256":"ee52ffffea72345cf71029d86cd6fbc59975196dc32a5a66b2dc3c66f8217ee5","pass":1429,"schema":"FinalityV128Regression/1","skip":0,"tests":1429,"toolchains":{"go":"1.27.1","go_archive_sha256":"63d339f0da5ab53635a56f2490a7984dfe12dfcff22ad749f63edaf590168445","node":"24.19.0"}},"transparency":{"classification":"SELLER_LOCAL_PERSISTENT_LOG","production_release_checkpoint":null},"whole_program_complete":false,"witnesses":{"container_execution":"NOT_ESTABLISHED","external_operators":0,"seller_test_instances":2}},"key_id":"seller-candidate-release-key","signature":"SwfQ5II_pMhBUlsVE-AdIK8xOGJHkRiCfP5nGM5H7uP6m4AdL4pz3wenFRtrOtCCwCRK38C92XA3tJUmbZq4Dw"}