Original
SHA-256 Calculando… En esta página ocurren tres cosas distintas, y importa cuál es cuál.
Tu navegador calcula un SHA-256 real del fichero que elijas. Eso es una identidad: dice exactamente qué bytes tienes. No es una inspección del fichero y no dice nada sobre si es seguro.
Quince situaciones pasaron una vez por el kernel de referencia real, y sus respuestas exactas quedaron escritas. Leer una no es lo mismo que ejecutarla ahora. Cada una lleva el digest de la entrada de la que salió y el comando que la vuelve a ejecutar.
Sólo el CLI ejecuta de verdad el kernel de aseguramiento. Toma un expediente y sus pins, y los evalúa en tu máquina. El navegador no puede hacerlo, y esta página no finge lo contrario.
Cómo ejecutarlo →Un expediente (un bundle) es un único fichero JSON que reúne todo sobre una afirmación: el artefacto, la evidencia producida sobre él, qué ejecución produjo esa evidencia, la política que se aplica y la autoridad bajo la que se aplica.
Los pins son cuatro digests que se entregan aparte, desde fuera: qué debería ser el expediente, la política, la autoridad y el artefacto. Son quien llama comprometiéndose por adelantado con lo que espera, para que el expediente no pueda afirmar su propia identidad sin más.
No necesitas construir uno para seguir esta página. El repositorio incluye ejemplos listos en content/kernel-fixtures/inputs/, y la página de Terminal muestra cómo evaluarlos.
La página que ya tienes abre el fichero en memoria. No se hace copia ni se prepara ninguna petición.
La criptografía del propio navegador, la misma que usa para TLS, reduce esos bytes a un único valor de 64 caracteres.
Este sitio son ficheros estáticos sin servidor detrás. No hay endpoint que pudiera recibir una subida aunque el código lo intentara.
No necesitas instalar nada ni entender criptografía para seguir esta página. Cuatro acciones, en orden.
Pulsa "Elige un fichero" y escoge cualquier cosa de este dispositivo: una foto, un PDF, un documento.
Verás el nombre del fichero, su tamaño, y una línea larga de 64 letras y números.
Eso significa esa línea larga es la huella del fichero. Dos ficheros con la misma huella son el mismo fichero. Dos con huellas distintas son ficheros distintos, aunque parezcan idénticos.
Mira la segunda demo, donde hay dos frases casi idénticas una al lado de la otra.
Verás que se diferencian en un solo carácter, y que sus dos huellas no se parecen en nada.
Eso significa un cambio demasiado pequeño para que lo note una persona cambia la huella por completo. Nadie puede alterar un fichero en silencio y conservar su identidad.
Abre la lista de quince situaciones y pulsa cualquiera.
Verás un resultado — PASS, FAIL o NO_CONSTA — con la explicación de qué se preguntaba y qué se encontró.
Eso significa son respuestas que dio el motor real, anotadas antes. El panel nombra la entrada exacta de la que salió cada una.
Dentro de cualquier situación, abre "De dónde sale esta respuesta".
Verás los digests de la entrada, y un comando que puedes ejecutar tú.
Eso significa aquí nada te pide que te lo creas. Puedes reproducir cualquiera de estas respuestas en tu propia máquina.
Si no funciona Si no aparece ninguna huella, puede que tu navegador sea antiguo y no tenga la criptografía que esto usa. No se envió nada a ninguna parte; prueba con un Chrome, Safari, Firefox o Edge actual.
Esta demo no sube tu fichero. El digest se calcula en este dispositivo con la implementación de Web Crypto de tu navegador, y este sitio no tiene servidor que pudiera recibirlo.
Cualquier fichero. Nada sale de tu navegador.
Todo lo que has calculado o comparado en esta página puede exportarse como un fichero JSON, construido por completo en tu navegador. Ningún servidor participa.
SHA-256 Calculando… SHA-256 Calculando… Un carácter: 4021 pasó a 4022. Un revisor humano lo pasa por alto. Los digests no tienen nada en común.
Caracteres hexadecimales iniciales que comparten los dos digests: —
Verify los trata como dos artefactos sin relación, porque es lo que son. Una aprobación registrada para uno no dice nada del otro.
VALID Los bytes coinciden con su pin, la evidencia está vigente, completa y sin disputa, y la regla que pedía la política se cumple.
ninguno
R2.6.0-AC707_TESTS/test_kernel.py::test_001Exact output of the AC7 reference kernel at recording time. Not a simulation, and not an independent certification. Replaying this file is not the same as evaluating now: use `verify kernel-evaluate --scenario <id>` to re-run the kernel against the versioned inputs beside it.
Vuelve a ejecutarlo tú, en vivonode cli/bin/verify.mjs kernel-evaluate --scenario VALID --json Ese comando evalúa los inputs versionados de este escenario con el kernel en tu máquina y reporta execution_mode=LIVE_REFERENCE_KERNEL. Lo que lees arriba es la grabación hecha antes, que `verify demo` reporta como RECORDED_REPLAY.
{
"authority_sha256": "48151d5d76902eac6ee32c605da1b9b29c079ee391200182b82b0285a4b9b556",
"bundle_sha256": "17120f16dbb28c3735618b024add127b08e897fc899c8fcb7e583ad2ab2e68e9",
"causally_assessed_run_ids": [
"RUN-1"
],
"claims": [
{
"claim_id": "CLAIM-SAFE",
"evidence_ids": [
"E-RUNTIME"
],
"findings": [],
"status": "PASS"
}
],
"errors": [],
"notes": [
"REFERENCE_KERNEL_ONLY",
"EVALUATOR_EVALUATES_EXTERNAL_AUTHORITY_AUTHORIZES",
"NO_SECURE_RUNNER",
"NO_OPERATIONAL_EFFECT_CLAIM"
],
"policy_sha256": "3729ec67b21a5bd31e23409d8bb4603336fc1dde27871c2f9c50a20269872838",
"properties": [
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P001-BUNDLE-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P002-AUTHORITY-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P003-POLICY-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P004-SUBJECT-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P005-EVIDENCE-CONTENT-INTEGRITY",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P006-EVIDENCE-SUBJECT-BINDING",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P007-RUN-BINDING",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P008-STALENESS-CHECKED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P009-TIME-BOUNDARIES",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P010-EVIDENCE-COMPLETENESS",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P011-CONFLICT-FREE",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P012-ONE-USE-CONSISTENCY",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [
{
"code": "CAUSAL_PREAUTH_NOT_IMPLEMENTED",
"evidence_ids": [],
"message": "Offline evaluation cannot prove consume -> capability -> effect ordering",
"object_id": "MF-P013-CAUSAL-PREAUTH"
}
],
"property_id": "MF-P013-CAUSAL-PREAUTH",
"status": "NO_CONSTA"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P014-STRUCTURAL-INDEPENDENCE",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P015-SELF-AUTHORIZATION-DISABLED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P016-POLICY-CONSUMED-IS-PINNED-POLICY",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P017-UNKNOWN-IS-NOT-PASS",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P018-VERIFIED-EVIDENCE-IS-CONSUMED-EVIDENCE",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P019-CHANGE-IMPACT-CHECKED",
"status": "PASS"
}
],
"record_valid": true,
"release_authority": false,
"schema": "MFAK-RESULT-2.3",
"security_assessment_status": "PASS",
"subject_sha256": "5a30ea7597d1c5a244200812200e9a309dd6e53c1bc21733c3ec0024060a991e"
} CONFLICTING_EVIDENCE Las dos piezas de evidencia son utilizables y se contradicen. El conflicto no se resuelve prefiriendo la conveniente.
ninguno
R2.6.0-AC707_TESTS/test_kernel.py::test_018Exact output of the AC7 reference kernel at recording time. Not a simulation, and not an independent certification. Replaying this file is not the same as evaluating now: use `verify kernel-evaluate --scenario <id>` to re-run the kernel against the versioned inputs beside it.
Vuelve a ejecutarlo tú, en vivonode cli/bin/verify.mjs kernel-evaluate --scenario CONFLICTING_EVIDENCE --json Ese comando evalúa los inputs versionados de este escenario con el kernel en tu máquina y reporta execution_mode=LIVE_REFERENCE_KERNEL. Lo que lees arriba es la grabación hecha antes, que `verify demo` reporta como RECORDED_REPLAY.
{
"authority_sha256": "48151d5d76902eac6ee32c605da1b9b29c079ee391200182b82b0285a4b9b556",
"bundle_sha256": "ef525da33671f1633d6b3803de9e450a6eb5abf293f71460ec388375929b1252",
"causally_assessed_run_ids": [],
"claims": [
{
"claim_id": "CLAIM-SAFE",
"evidence_ids": [
"E-RUNTIME"
],
"findings": [],
"status": "PASS"
}
],
"errors": [],
"notes": [
"REFERENCE_KERNEL_ONLY",
"EVALUATOR_EVALUATES_EXTERNAL_AUTHORITY_AUTHORIZES",
"NO_SECURE_RUNNER",
"NO_OPERATIONAL_EFFECT_CLAIM"
],
"policy_sha256": "3729ec67b21a5bd31e23409d8bb4603336fc1dde27871c2f9c50a20269872838",
"properties": [
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P001-BUNDLE-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P002-AUTHORITY-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P003-POLICY-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P004-SUBJECT-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P005-EVIDENCE-CONTENT-INTEGRITY",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P006-EVIDENCE-SUBJECT-BINDING",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P007-RUN-BINDING",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P008-STALENESS-CHECKED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P009-TIME-BOUNDARIES",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P010-EVIDENCE-COMPLETENESS",
"status": "PASS"
},
{
"evidence_ids": [
"E-RUNTIME"
],
"findings": [
{
"code": "EVIDENCE_CONFLICT",
"evidence_ids": [
"E-RUNTIME"
],
"message": "Conflicting evidence values exist for the same fact key",
"object_id": "MF-P011-CONFLICT-FREE"
}
],
"property_id": "MF-P011-CONFLICT-FREE",
"status": "FAIL"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P012-ONE-USE-CONSISTENCY",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [
{
"code": "CAUSAL_PREAUTH_NOT_IMPLEMENTED",
"evidence_ids": [],
"message": "Offline evaluation cannot prove consume -> capability -> effect ordering",
"object_id": "MF-P013-CAUSAL-PREAUTH"
}
],
"property_id": "MF-P013-CAUSAL-PREAUTH",
"status": "NO_CONSTA"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P014-STRUCTURAL-INDEPENDENCE",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P015-SELF-AUTHORIZATION-DISABLED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P016-POLICY-CONSUMED-IS-PINNED-POLICY",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P017-UNKNOWN-IS-NOT-PASS",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P018-VERIFIED-EVIDENCE-IS-CONSUMED-EVIDENCE",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P019-CHANGE-IMPACT-CHECKED",
"status": "PASS"
}
],
"record_valid": true,
"release_authority": false,
"schema": "MFAK-RESULT-2.3",
"security_assessment_status": "FAIL",
"subject_sha256": "5a30ea7597d1c5a244200812200e9a309dd6e53c1bc21733c3ec0024060a991e"
} CONTRADICTS_RELATION El propio expediente afirma que una pieza de evidencia contradice a otra. Esa arista la consume la decisión, no se trata como una etiqueta.
ninguno
R2.6.0-AC707_TESTS/test_kernel.py::test_086Exact output of the AC7 reference kernel at recording time. Not a simulation, and not an independent certification. Replaying this file is not the same as evaluating now: use `verify kernel-evaluate --scenario <id>` to re-run the kernel against the versioned inputs beside it.
Vuelve a ejecutarlo tú, en vivonode cli/bin/verify.mjs kernel-evaluate --scenario CONTRADICTS_RELATION --json Ese comando evalúa los inputs versionados de este escenario con el kernel en tu máquina y reporta execution_mode=LIVE_REFERENCE_KERNEL. Lo que lees arriba es la grabación hecha antes, que `verify demo` reporta como RECORDED_REPLAY.
{
"authority_sha256": "48151d5d76902eac6ee32c605da1b9b29c079ee391200182b82b0285a4b9b556",
"bundle_sha256": "2e5a2d873d07ee2422726de680f0d37e1c44cee4a067ccaa3a68159fdf814d2d",
"causally_assessed_run_ids": [],
"claims": [
{
"claim_id": "CLAIM-SAFE",
"evidence_ids": [
"E-RUNTIME"
],
"findings": [],
"status": "PASS"
}
],
"errors": [],
"notes": [
"REFERENCE_KERNEL_ONLY",
"EVALUATOR_EVALUATES_EXTERNAL_AUTHORITY_AUTHORIZES",
"NO_SECURE_RUNNER",
"NO_OPERATIONAL_EFFECT_CLAIM"
],
"policy_sha256": "3729ec67b21a5bd31e23409d8bb4603336fc1dde27871c2f9c50a20269872838",
"properties": [
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P001-BUNDLE-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P002-AUTHORITY-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P003-POLICY-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P004-SUBJECT-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P005-EVIDENCE-CONTENT-INTEGRITY",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P006-EVIDENCE-SUBJECT-BINDING",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P007-RUN-BINDING",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P008-STALENESS-CHECKED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P009-TIME-BOUNDARIES",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P010-EVIDENCE-COMPLETENESS",
"status": "PASS"
},
{
"evidence_ids": [
"E-BOUNDARY",
"E-RUNTIME"
],
"findings": [
{
"code": "EVIDENCE_CONFLICT",
"evidence_ids": [
"E-BOUNDARY",
"E-RUNTIME"
],
"message": "Conflicting evidence values exist for the same fact key",
"object_id": "MF-P011-CONFLICT-FREE"
}
],
"property_id": "MF-P011-CONFLICT-FREE",
"status": "FAIL"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P012-ONE-USE-CONSISTENCY",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [
{
"code": "CAUSAL_PREAUTH_NOT_IMPLEMENTED",
"evidence_ids": [],
"message": "Offline evaluation cannot prove consume -> capability -> effect ordering",
"object_id": "MF-P013-CAUSAL-PREAUTH"
}
],
"property_id": "MF-P013-CAUSAL-PREAUTH",
"status": "NO_CONSTA"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P014-STRUCTURAL-INDEPENDENCE",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P015-SELF-AUTHORIZATION-DISABLED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P016-POLICY-CONSUMED-IS-PINNED-POLICY",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P017-UNKNOWN-IS-NOT-PASS",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P018-VERIFIED-EVIDENCE-IS-CONSUMED-EVIDENCE",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P019-CHANGE-IMPACT-CHECKED",
"status": "PASS"
}
],
"record_valid": true,
"release_authority": false,
"schema": "MFAK-RESULT-2.3",
"security_assessment_status": "FAIL",
"subject_sha256": "5a30ea7597d1c5a244200812200e9a309dd6e53c1bc21733c3ec0024060a991e"
} MISSING_EVIDENCE_CLOSED La política declara completo el conjunto de evidencia requerida. Falta algo obligatorio, y en mundo cerrado eso es un negativo definitivo.
ninguno
R2.6.0-AC707_TESTS/test_kernel.py::test_016Exact output of the AC7 reference kernel at recording time. Not a simulation, and not an independent certification. Replaying this file is not the same as evaluating now: use `verify kernel-evaluate --scenario <id>` to re-run the kernel against the versioned inputs beside it.
Vuelve a ejecutarlo tú, en vivonode cli/bin/verify.mjs kernel-evaluate --scenario MISSING_EVIDENCE_CLOSED --json Ese comando evalúa los inputs versionados de este escenario con el kernel en tu máquina y reporta execution_mode=LIVE_REFERENCE_KERNEL. Lo que lees arriba es la grabación hecha antes, que `verify demo` reporta como RECORDED_REPLAY.
{
"authority_sha256": "18e6ac532b8b0a848ce6b3231b8573382fded60009b3515fd8fcfcca3a6c3a6c",
"bundle_sha256": "e5bce4752fc4e0f12677d92b29c4b9b8d1506f39558af291ae69f67db0fe3c0f",
"causally_assessed_run_ids": [],
"claims": [
{
"claim_id": "CLAIM-SAFE",
"evidence_ids": [
"E-RUNTIME"
],
"findings": [],
"status": "PASS"
}
],
"errors": [],
"notes": [
"REFERENCE_KERNEL_ONLY",
"EVALUATOR_EVALUATES_EXTERNAL_AUTHORITY_AUTHORIZES",
"NO_SECURE_RUNNER",
"NO_OPERATIONAL_EFFECT_CLAIM"
],
"policy_sha256": "a359b72b40c062a136b620c5ad5af69f2c78aae3d73f836f1a23c5836730924f",
"properties": [
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P001-BUNDLE-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P002-AUTHORITY-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P003-POLICY-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P004-SUBJECT-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P005-EVIDENCE-CONTENT-INTEGRITY",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P006-EVIDENCE-SUBJECT-BINDING",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P007-RUN-BINDING",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P008-STALENESS-CHECKED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P009-TIME-BOUNDARIES",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [
{
"code": "REQUIRED_EVIDENCE_KIND_MISSING",
"evidence_ids": [],
"message": "witness",
"object_id": "MF-P010-EVIDENCE-COMPLETENESS"
}
],
"property_id": "MF-P010-EVIDENCE-COMPLETENESS",
"status": "FAIL"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P011-CONFLICT-FREE",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P012-ONE-USE-CONSISTENCY",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [
{
"code": "CAUSAL_PREAUTH_NOT_IMPLEMENTED",
"evidence_ids": [],
"message": "Offline evaluation cannot prove consume -> capability -> effect ordering",
"object_id": "MF-P013-CAUSAL-PREAUTH"
}
],
"property_id": "MF-P013-CAUSAL-PREAUTH",
"status": "NO_CONSTA"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P014-STRUCTURAL-INDEPENDENCE",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P015-SELF-AUTHORIZATION-DISABLED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P016-POLICY-CONSUMED-IS-PINNED-POLICY",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P017-UNKNOWN-IS-NOT-PASS",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P018-VERIFIED-EVIDENCE-IS-CONSUMED-EVIDENCE",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P019-CHANGE-IMPACT-CHECKED",
"status": "PASS"
}
],
"record_valid": true,
"release_authority": false,
"schema": "MFAK-RESULT-2.3",
"security_assessment_status": "FAIL",
"subject_sha256": "5a30ea7597d1c5a244200812200e9a309dd6e53c1bc21733c3ec0024060a991e"
} ONE_USE_REUSED El permiso debía consumirse una vez. El expediente muestra dos consumos.
ninguno
R2.6.0-AC707_TESTS/test_kernel.py::test_019Exact output of the AC7 reference kernel at recording time. Not a simulation, and not an independent certification. Replaying this file is not the same as evaluating now: use `verify kernel-evaluate --scenario <id>` to re-run the kernel against the versioned inputs beside it.
Vuelve a ejecutarlo tú, en vivonode cli/bin/verify.mjs kernel-evaluate --scenario ONE_USE_REUSED --json Ese comando evalúa los inputs versionados de este escenario con el kernel en tu máquina y reporta execution_mode=LIVE_REFERENCE_KERNEL. Lo que lees arriba es la grabación hecha antes, que `verify demo` reporta como RECORDED_REPLAY.
{
"authority_sha256": "48151d5d76902eac6ee32c605da1b9b29c079ee391200182b82b0285a4b9b556",
"bundle_sha256": "b48d38f3d1a4be44396d499b5b954eb7207cb8b3c3175a248500e68fd2affbff",
"causally_assessed_run_ids": [],
"claims": [
{
"claim_id": "CLAIM-SAFE",
"evidence_ids": [
"E-RUNTIME"
],
"findings": [],
"status": "PASS"
}
],
"errors": [],
"notes": [
"REFERENCE_KERNEL_ONLY",
"EVALUATOR_EVALUATES_EXTERNAL_AUTHORITY_AUTHORIZES",
"NO_SECURE_RUNNER",
"NO_OPERATIONAL_EFFECT_CLAIM"
],
"policy_sha256": "3729ec67b21a5bd31e23409d8bb4603336fc1dde27871c2f9c50a20269872838",
"properties": [
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P001-BUNDLE-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P002-AUTHORITY-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P003-POLICY-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P004-SUBJECT-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P005-EVIDENCE-CONTENT-INTEGRITY",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P006-EVIDENCE-SUBJECT-BINDING",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P007-RUN-BINDING",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P008-STALENESS-CHECKED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P009-TIME-BOUNDARIES",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P010-EVIDENCE-COMPLETENESS",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P011-CONFLICT-FREE",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [
{
"code": "ONE_USE_CONSISTENCY_FAILED",
"evidence_ids": [],
"message": "Permit consumption records violate one-use consistency",
"object_id": "MF-P012-ONE-USE-CONSISTENCY"
}
],
"property_id": "MF-P012-ONE-USE-CONSISTENCY",
"status": "FAIL"
},
{
"evidence_ids": [],
"findings": [
{
"code": "CAUSAL_PREAUTH_NOT_IMPLEMENTED",
"evidence_ids": [],
"message": "Offline evaluation cannot prove consume -> capability -> effect ordering",
"object_id": "MF-P013-CAUSAL-PREAUTH"
}
],
"property_id": "MF-P013-CAUSAL-PREAUTH",
"status": "NO_CONSTA"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P014-STRUCTURAL-INDEPENDENCE",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P015-SELF-AUTHORIZATION-DISABLED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P016-POLICY-CONSUMED-IS-PINNED-POLICY",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P017-UNKNOWN-IS-NOT-PASS",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P018-VERIFIED-EVIDENCE-IS-CONSUMED-EVIDENCE",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P019-CHANGE-IMPACT-CHECKED",
"status": "PASS"
}
],
"record_valid": true,
"release_authority": false,
"schema": "MFAK-RESULT-2.3",
"security_assessment_status": "FAIL",
"subject_sha256": "5a30ea7597d1c5a244200812200e9a309dd6e53c1bc21733c3ec0024060a991e"
} STRICT_TYPES Una comprobación reporta el entero 1 donde se requería un booleano. El núcleo se niega a leer eso como aprobado.
ninguno
R2.6.0-AC707_TESTS/test_kernel.py::test_025Exact output of the AC7 reference kernel at recording time. Not a simulation, and not an independent certification. Replaying this file is not the same as evaluating now: use `verify kernel-evaluate --scenario <id>` to re-run the kernel against the versioned inputs beside it.
Vuelve a ejecutarlo tú, en vivonode cli/bin/verify.mjs kernel-evaluate --scenario STRICT_TYPES --json Ese comando evalúa los inputs versionados de este escenario con el kernel en tu máquina y reporta execution_mode=LIVE_REFERENCE_KERNEL. Lo que lees arriba es la grabación hecha antes, que `verify demo` reporta como RECORDED_REPLAY.
{
"authority_sha256": "48151d5d76902eac6ee32c605da1b9b29c079ee391200182b82b0285a4b9b556",
"bundle_sha256": "2132f8461a8c1970946c61bf2b87b9d8a1b2a75afa5d9f3ec92f759ac337d27e",
"causally_assessed_run_ids": [],
"claims": [
{
"claim_id": "CLAIM-SAFE",
"evidence_ids": [
"E-RUNTIME"
],
"findings": [],
"status": "FAIL"
}
],
"errors": [],
"notes": [
"REFERENCE_KERNEL_ONLY",
"EVALUATOR_EVALUATES_EXTERNAL_AUTHORITY_AUTHORIZES",
"NO_SECURE_RUNNER",
"NO_OPERATIONAL_EFFECT_CLAIM"
],
"policy_sha256": "3729ec67b21a5bd31e23409d8bb4603336fc1dde27871c2f9c50a20269872838",
"properties": [
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P001-BUNDLE-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P002-AUTHORITY-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P003-POLICY-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P004-SUBJECT-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P005-EVIDENCE-CONTENT-INTEGRITY",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P006-EVIDENCE-SUBJECT-BINDING",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P007-RUN-BINDING",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P008-STALENESS-CHECKED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P009-TIME-BOUNDARIES",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P010-EVIDENCE-COMPLETENESS",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P011-CONFLICT-FREE",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P012-ONE-USE-CONSISTENCY",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [
{
"code": "CAUSAL_PREAUTH_NOT_IMPLEMENTED",
"evidence_ids": [],
"message": "Offline evaluation cannot prove consume -> capability -> effect ordering",
"object_id": "MF-P013-CAUSAL-PREAUTH"
}
],
"property_id": "MF-P013-CAUSAL-PREAUTH",
"status": "NO_CONSTA"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P014-STRUCTURAL-INDEPENDENCE",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P015-SELF-AUTHORIZATION-DISABLED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P016-POLICY-CONSUMED-IS-PINNED-POLICY",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P017-UNKNOWN-IS-NOT-PASS",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P018-VERIFIED-EVIDENCE-IS-CONSUMED-EVIDENCE",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P019-CHANGE-IMPACT-CHECKED",
"status": "PASS"
}
],
"record_valid": true,
"release_authority": false,
"schema": "MFAK-RESULT-2.3",
"security_assessment_status": "FAIL",
"subject_sha256": "5a30ea7597d1c5a244200812200e9a309dd6e53c1bc21733c3ec0024060a991e"
} UNFAVOURABLE_RESULT Nada está mal formado. El expediente es totalmente interpretable, y lo que se interpreta es un resultado negativo.
ninguno
R2.6.0-AC707_TESTS/test_kernel.py::test_023Exact output of the AC7 reference kernel at recording time. Not a simulation, and not an independent certification. Replaying this file is not the same as evaluating now: use `verify kernel-evaluate --scenario <id>` to re-run the kernel against the versioned inputs beside it.
Vuelve a ejecutarlo tú, en vivonode cli/bin/verify.mjs kernel-evaluate --scenario UNFAVOURABLE_RESULT --json Ese comando evalúa los inputs versionados de este escenario con el kernel en tu máquina y reporta execution_mode=LIVE_REFERENCE_KERNEL. Lo que lees arriba es la grabación hecha antes, que `verify demo` reporta como RECORDED_REPLAY.
{
"authority_sha256": "48151d5d76902eac6ee32c605da1b9b29c079ee391200182b82b0285a4b9b556",
"bundle_sha256": "a726c0d073fd5b7d30ec19eef45ce529f1549bca087389f7f74843b502262ef3",
"causally_assessed_run_ids": [],
"claims": [
{
"claim_id": "CLAIM-SAFE",
"evidence_ids": [
"E-RUNTIME"
],
"findings": [],
"status": "FAIL"
}
],
"errors": [],
"notes": [
"REFERENCE_KERNEL_ONLY",
"EVALUATOR_EVALUATES_EXTERNAL_AUTHORITY_AUTHORIZES",
"NO_SECURE_RUNNER",
"NO_OPERATIONAL_EFFECT_CLAIM"
],
"policy_sha256": "3729ec67b21a5bd31e23409d8bb4603336fc1dde27871c2f9c50a20269872838",
"properties": [
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P001-BUNDLE-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P002-AUTHORITY-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P003-POLICY-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P004-SUBJECT-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P005-EVIDENCE-CONTENT-INTEGRITY",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P006-EVIDENCE-SUBJECT-BINDING",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P007-RUN-BINDING",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P008-STALENESS-CHECKED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P009-TIME-BOUNDARIES",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P010-EVIDENCE-COMPLETENESS",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P011-CONFLICT-FREE",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P012-ONE-USE-CONSISTENCY",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [
{
"code": "CAUSAL_PREAUTH_NOT_IMPLEMENTED",
"evidence_ids": [],
"message": "Offline evaluation cannot prove consume -> capability -> effect ordering",
"object_id": "MF-P013-CAUSAL-PREAUTH"
}
],
"property_id": "MF-P013-CAUSAL-PREAUTH",
"status": "NO_CONSTA"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P014-STRUCTURAL-INDEPENDENCE",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P015-SELF-AUTHORIZATION-DISABLED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P016-POLICY-CONSUMED-IS-PINNED-POLICY",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P017-UNKNOWN-IS-NOT-PASS",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P018-VERIFIED-EVIDENCE-IS-CONSUMED-EVIDENCE",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P019-CHANGE-IMPACT-CHECKED",
"status": "PASS"
}
],
"record_valid": true,
"release_authority": false,
"schema": "MFAK-RESULT-2.3",
"security_assessment_status": "FAIL",
"subject_sha256": "5a30ea7597d1c5a244200812200e9a309dd6e53c1bc21733c3ec0024060a991e"
} BORROWED_RUN_EVIDENCE El claim está adscrito a una ejecución pero se apoya en evidencia producida por otra. El préstamo entre ejecuciones se rechaza, no se promedia.
CLAIM_CROSS_RUN_BORROWINGR2.6.0-AC707_TESTS/test_kernel.py::test_013Exact output of the AC7 reference kernel at recording time. Not a simulation, and not an independent certification. Replaying this file is not the same as evaluating now: use `verify kernel-evaluate --scenario <id>` to re-run the kernel against the versioned inputs beside it.
Vuelve a ejecutarlo tú, en vivonode cli/bin/verify.mjs kernel-evaluate --scenario BORROWED_RUN_EVIDENCE --json Ese comando evalúa los inputs versionados de este escenario con el kernel en tu máquina y reporta execution_mode=LIVE_REFERENCE_KERNEL. Lo que lees arriba es la grabación hecha antes, que `verify demo` reporta como RECORDED_REPLAY.
{
"authority_sha256": "48151d5d76902eac6ee32c605da1b9b29c079ee391200182b82b0285a4b9b556",
"bundle_sha256": "c339fb3a1cde94da247a6011d95d7d99bcc2fb779417a2ff08508d45408ef7f7",
"causally_assessed_run_ids": [],
"claims": [],
"errors": [
{
"code": "CLAIM_CROSS_RUN_BORROWING",
"evidence_ids": [
"E-RUNTIME"
],
"message": "Claim may not borrow evidence from another run",
"object_id": "CLAIM-SAFE"
}
],
"notes": [
"REFERENCE_KERNEL_ONLY",
"EVALUATOR_EVALUATES_EXTERNAL_AUTHORITY_AUTHORIZES",
"NO_SECURE_RUNNER",
"NO_OPERATIONAL_EFFECT_CLAIM"
],
"policy_sha256": "3729ec67b21a5bd31e23409d8bb4603336fc1dde27871c2f9c50a20269872838",
"properties": [
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P007-RUN-BINDING",
"status": "FAIL"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P015-SELF-AUTHORIZATION-DISABLED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P017-UNKNOWN-IS-NOT-PASS",
"status": "PASS"
}
],
"record_valid": false,
"release_authority": false,
"schema": "MFAK-RESULT-2.3",
"security_assessment_status": "NO_CONSTA",
"subject_sha256": "5a30ea7597d1c5a244200812200e9a309dd6e53c1bc21733c3ec0024060a991e"
} CAUSAL_PREAUTH_REQUIRED La política requiere una propiedad de preautorización causal. Este kernel no implementa esa puerta, y lo dice en lugar de aprobar en silencio.
ninguno
R2.6.0-AC707_TESTS/test_kernel.py::test_021Exact output of the AC7 reference kernel at recording time. Not a simulation, and not an independent certification. Replaying this file is not the same as evaluating now: use `verify kernel-evaluate --scenario <id>` to re-run the kernel against the versioned inputs beside it.
Vuelve a ejecutarlo tú, en vivonode cli/bin/verify.mjs kernel-evaluate --scenario CAUSAL_PREAUTH_REQUIRED --json Ese comando evalúa los inputs versionados de este escenario con el kernel en tu máquina y reporta execution_mode=LIVE_REFERENCE_KERNEL. Lo que lees arriba es la grabación hecha antes, que `verify demo` reporta como RECORDED_REPLAY.
{
"authority_sha256": "67032f78a28b6565c7f758c56502ad68b106578aae55411ffd828276e5ca812b",
"bundle_sha256": "1ca1d5a056164afa800e6fd22227155fee8ab4d239a347455be86528271e8e36",
"causally_assessed_run_ids": [],
"claims": [
{
"claim_id": "CLAIM-SAFE",
"evidence_ids": [
"E-RUNTIME"
],
"findings": [],
"status": "PASS"
}
],
"errors": [],
"notes": [
"REFERENCE_KERNEL_ONLY",
"EVALUATOR_EVALUATES_EXTERNAL_AUTHORITY_AUTHORIZES",
"NO_SECURE_RUNNER",
"NO_OPERATIONAL_EFFECT_CLAIM"
],
"policy_sha256": "2adb1b539a51225d8aa3ce65a4d7590a0fa6014866b492dc42b3776b8df286d2",
"properties": [
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P001-BUNDLE-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P002-AUTHORITY-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P003-POLICY-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P004-SUBJECT-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P005-EVIDENCE-CONTENT-INTEGRITY",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P006-EVIDENCE-SUBJECT-BINDING",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P007-RUN-BINDING",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P008-STALENESS-CHECKED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P009-TIME-BOUNDARIES",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P010-EVIDENCE-COMPLETENESS",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P011-CONFLICT-FREE",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P012-ONE-USE-CONSISTENCY",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [
{
"code": "CAUSAL_PREAUTH_NOT_IMPLEMENTED",
"evidence_ids": [],
"message": "Offline evaluation cannot prove consume -> capability -> effect ordering",
"object_id": "MF-P013-CAUSAL-PREAUTH"
}
],
"property_id": "MF-P013-CAUSAL-PREAUTH",
"status": "NO_CONSTA"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P014-STRUCTURAL-INDEPENDENCE",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P015-SELF-AUTHORIZATION-DISABLED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P016-POLICY-CONSUMED-IS-PINNED-POLICY",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P017-UNKNOWN-IS-NOT-PASS",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P018-VERIFIED-EVIDENCE-IS-CONSUMED-EVIDENCE",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P019-CHANGE-IMPACT-CHECKED",
"status": "PASS"
}
],
"record_valid": true,
"release_authority": false,
"schema": "MFAK-RESULT-2.3",
"security_assessment_status": "NO_CONSTA",
"subject_sha256": "5a30ea7597d1c5a244200812200e9a309dd6e53c1bc21733c3ec0024060a991e"
} INSUFFICIENT_INDEPENDENCE La política quería evidencia de productores estructuralmente distintos. Las dos piezas vienen del mismo.
ninguno
R2.6.0-AC707_TESTS/test_kernel.py::test_022Exact output of the AC7 reference kernel at recording time. Not a simulation, and not an independent certification. Replaying this file is not the same as evaluating now: use `verify kernel-evaluate --scenario <id>` to re-run the kernel against the versioned inputs beside it.
Vuelve a ejecutarlo tú, en vivonode cli/bin/verify.mjs kernel-evaluate --scenario INSUFFICIENT_INDEPENDENCE --json Ese comando evalúa los inputs versionados de este escenario con el kernel en tu máquina y reporta execution_mode=LIVE_REFERENCE_KERNEL. Lo que lees arriba es la grabación hecha antes, que `verify demo` reporta como RECORDED_REPLAY.
{
"authority_sha256": "48151d5d76902eac6ee32c605da1b9b29c079ee391200182b82b0285a4b9b556",
"bundle_sha256": "2ff2938349776b7696e57ca9a16ac62820facd1e87a44255e4e2a86060429ce1",
"causally_assessed_run_ids": [],
"claims": [
{
"claim_id": "CLAIM-SAFE",
"evidence_ids": [
"E-RUNTIME"
],
"findings": [],
"status": "PASS"
}
],
"errors": [],
"notes": [
"REFERENCE_KERNEL_ONLY",
"EVALUATOR_EVALUATES_EXTERNAL_AUTHORITY_AUTHORIZES",
"NO_SECURE_RUNNER",
"NO_OPERATIONAL_EFFECT_CLAIM"
],
"policy_sha256": "3729ec67b21a5bd31e23409d8bb4603336fc1dde27871c2f9c50a20269872838",
"properties": [
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P001-BUNDLE-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P002-AUTHORITY-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P003-POLICY-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P004-SUBJECT-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P005-EVIDENCE-CONTENT-INTEGRITY",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P006-EVIDENCE-SUBJECT-BINDING",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P007-RUN-BINDING",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P008-STALENESS-CHECKED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P009-TIME-BOUNDARIES",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P010-EVIDENCE-COMPLETENESS",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P011-CONFLICT-FREE",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P012-ONE-USE-CONSISTENCY",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [
{
"code": "CAUSAL_PREAUTH_NOT_IMPLEMENTED",
"evidence_ids": [],
"message": "Offline evaluation cannot prove consume -> capability -> effect ordering",
"object_id": "MF-P013-CAUSAL-PREAUTH"
}
],
"property_id": "MF-P013-CAUSAL-PREAUTH",
"status": "NO_CONSTA"
},
{
"evidence_ids": [],
"findings": [
{
"code": "STRUCTURAL_INDEPENDENCE_INSUFFICIENT",
"evidence_ids": [],
"message": "Declared producer diversity is insufficient; physical independence is never inferred",
"object_id": "MF-P014-STRUCTURAL-INDEPENDENCE"
}
],
"property_id": "MF-P014-STRUCTURAL-INDEPENDENCE",
"status": "NO_CONSTA"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P015-SELF-AUTHORIZATION-DISABLED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P016-POLICY-CONSUMED-IS-PINNED-POLICY",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P017-UNKNOWN-IS-NOT-PASS",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P018-VERIFIED-EVIDENCE-IS-CONSUMED-EVIDENCE",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P019-CHANGE-IMPACT-CHECKED",
"status": "PASS"
}
],
"record_valid": true,
"release_authority": false,
"schema": "MFAK-RESULT-2.3",
"security_assessment_status": "NO_CONSTA",
"subject_sha256": "5a30ea7597d1c5a244200812200e9a309dd6e53c1bc21733c3ec0024060a991e"
} MISSING_EVIDENCE_OPEN Hueco idéntico, política distinta. Aquí la ausencia no puede leerse como negativo, así que la respuesta honesta es que no consta.
ninguno
R2.6.0-AC707_TESTS/test_kernel.py::test_017Exact output of the AC7 reference kernel at recording time. Not a simulation, and not an independent certification. Replaying this file is not the same as evaluating now: use `verify kernel-evaluate --scenario <id>` to re-run the kernel against the versioned inputs beside it.
Vuelve a ejecutarlo tú, en vivonode cli/bin/verify.mjs kernel-evaluate --scenario MISSING_EVIDENCE_OPEN --json Ese comando evalúa los inputs versionados de este escenario con el kernel en tu máquina y reporta execution_mode=LIVE_REFERENCE_KERNEL. Lo que lees arriba es la grabación hecha antes, que `verify demo` reporta como RECORDED_REPLAY.
{
"authority_sha256": "6f4c90eae2a7c566b3939b8eb2d4c65374bdbc35d17c44b3a3a7001bd89b5128",
"bundle_sha256": "1eac7cc19d6aa9313b633376dca3ef7f5a1d84885819d714c4d766f6b107bd2e",
"causally_assessed_run_ids": [],
"claims": [
{
"claim_id": "CLAIM-SAFE",
"evidence_ids": [
"E-RUNTIME"
],
"findings": [],
"status": "PASS"
}
],
"errors": [],
"notes": [
"REFERENCE_KERNEL_ONLY",
"EVALUATOR_EVALUATES_EXTERNAL_AUTHORITY_AUTHORIZES",
"NO_SECURE_RUNNER",
"NO_OPERATIONAL_EFFECT_CLAIM"
],
"policy_sha256": "8f86ed2243fe7cfe8e06fe3ca943982867b8e04fbb2fc2c0cb3681959c89be89",
"properties": [
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P001-BUNDLE-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P002-AUTHORITY-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P003-POLICY-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P004-SUBJECT-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P005-EVIDENCE-CONTENT-INTEGRITY",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P006-EVIDENCE-SUBJECT-BINDING",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P007-RUN-BINDING",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P008-STALENESS-CHECKED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P009-TIME-BOUNDARIES",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [
{
"code": "REQUIRED_EVIDENCE_KIND_MISSING",
"evidence_ids": [],
"message": "witness",
"object_id": "MF-P010-EVIDENCE-COMPLETENESS"
}
],
"property_id": "MF-P010-EVIDENCE-COMPLETENESS",
"status": "NO_CONSTA"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P011-CONFLICT-FREE",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P012-ONE-USE-CONSISTENCY",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [
{
"code": "CAUSAL_PREAUTH_NOT_IMPLEMENTED",
"evidence_ids": [],
"message": "Offline evaluation cannot prove consume -> capability -> effect ordering",
"object_id": "MF-P013-CAUSAL-PREAUTH"
}
],
"property_id": "MF-P013-CAUSAL-PREAUTH",
"status": "NO_CONSTA"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P014-STRUCTURAL-INDEPENDENCE",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P015-SELF-AUTHORIZATION-DISABLED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P016-POLICY-CONSUMED-IS-PINNED-POLICY",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P017-UNKNOWN-IS-NOT-PASS",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P018-VERIFIED-EVIDENCE-IS-CONSUMED-EVIDENCE",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P019-CHANGE-IMPACT-CHECKED",
"status": "PASS"
}
],
"record_valid": true,
"release_authority": false,
"schema": "MFAK-RESULT-2.3",
"security_assessment_status": "NO_CONSTA",
"subject_sha256": "5a30ea7597d1c5a244200812200e9a309dd6e53c1bc21733c3ec0024060a991e"
} MISSING_FACT La regla pregunta si una comprobación concreta pasó. Esa comprobación no está en la evidencia. Desconocido no es lo mismo que correcto.
ninguno
R2.6.0-AC707_TESTS/test_kernel.py::test_024Exact output of the AC7 reference kernel at recording time. Not a simulation, and not an independent certification. Replaying this file is not the same as evaluating now: use `verify kernel-evaluate --scenario <id>` to re-run the kernel against the versioned inputs beside it.
Vuelve a ejecutarlo tú, en vivonode cli/bin/verify.mjs kernel-evaluate --scenario MISSING_FACT --json Ese comando evalúa los inputs versionados de este escenario con el kernel en tu máquina y reporta execution_mode=LIVE_REFERENCE_KERNEL. Lo que lees arriba es la grabación hecha antes, que `verify demo` reporta como RECORDED_REPLAY.
{
"authority_sha256": "48151d5d76902eac6ee32c605da1b9b29c079ee391200182b82b0285a4b9b556",
"bundle_sha256": "3dfaf1dab17995b806edd7094f0ddc88f5c48f92f8e3590c5d4fa2c98952a8fc",
"causally_assessed_run_ids": [],
"claims": [
{
"claim_id": "CLAIM-SAFE",
"evidence_ids": [
"E-RUNTIME"
],
"findings": [
{
"code": "RULE_FACT_MISSING",
"evidence_ids": [],
"message": "Required fact path is absent",
"object_id": "E-RUNTIME"
}
],
"status": "NO_CONSTA"
}
],
"errors": [],
"notes": [
"REFERENCE_KERNEL_ONLY",
"EVALUATOR_EVALUATES_EXTERNAL_AUTHORITY_AUTHORIZES",
"NO_SECURE_RUNNER",
"NO_OPERATIONAL_EFFECT_CLAIM"
],
"policy_sha256": "3729ec67b21a5bd31e23409d8bb4603336fc1dde27871c2f9c50a20269872838",
"properties": [
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P001-BUNDLE-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P002-AUTHORITY-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P003-POLICY-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P004-SUBJECT-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P005-EVIDENCE-CONTENT-INTEGRITY",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P006-EVIDENCE-SUBJECT-BINDING",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P007-RUN-BINDING",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P008-STALENESS-CHECKED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P009-TIME-BOUNDARIES",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P010-EVIDENCE-COMPLETENESS",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P011-CONFLICT-FREE",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P012-ONE-USE-CONSISTENCY",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [
{
"code": "CAUSAL_PREAUTH_NOT_IMPLEMENTED",
"evidence_ids": [],
"message": "Offline evaluation cannot prove consume -> capability -> effect ordering",
"object_id": "MF-P013-CAUSAL-PREAUTH"
}
],
"property_id": "MF-P013-CAUSAL-PREAUTH",
"status": "NO_CONSTA"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P014-STRUCTURAL-INDEPENDENCE",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P015-SELF-AUTHORIZATION-DISABLED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P016-POLICY-CONSUMED-IS-PINNED-POLICY",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P017-UNKNOWN-IS-NOT-PASS",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P018-VERIFIED-EVIDENCE-IS-CONSUMED-EVIDENCE",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P019-CHANGE-IMPACT-CHECKED",
"status": "PASS"
}
],
"record_valid": true,
"release_authority": false,
"schema": "MFAK-RESULT-2.3",
"security_assessment_status": "NO_CONSTA",
"subject_sha256": "5a30ea7597d1c5a244200812200e9a309dd6e53c1bc21733c3ec0024060a991e"
} STALE_EVIDENCE La evidencia está presente y bien formada, pero lo que midió no es lo vigente. Presente no es lo mismo que vigente.
ninguno
R2.6.0-AC707_TESTS/test_kernel.py::test_014Exact output of the AC7 reference kernel at recording time. Not a simulation, and not an independent certification. Replaying this file is not the same as evaluating now: use `verify kernel-evaluate --scenario <id>` to re-run the kernel against the versioned inputs beside it.
Vuelve a ejecutarlo tú, en vivonode cli/bin/verify.mjs kernel-evaluate --scenario STALE_EVIDENCE --json Ese comando evalúa los inputs versionados de este escenario con el kernel en tu máquina y reporta execution_mode=LIVE_REFERENCE_KERNEL. Lo que lees arriba es la grabación hecha antes, que `verify demo` reporta como RECORDED_REPLAY.
{
"authority_sha256": "48151d5d76902eac6ee32c605da1b9b29c079ee391200182b82b0285a4b9b556",
"bundle_sha256": "5daea236478f550c2b423795935e584f79e425b21f937903af21e10819d5a17a",
"causally_assessed_run_ids": [],
"claims": [
{
"claim_id": "CLAIM-SAFE",
"evidence_ids": [
"E-RUNTIME"
],
"findings": [
{
"code": "CLAIM_REQUIRED_EVIDENCE_UNUSABLE",
"evidence_ids": [
"E-RUNTIME"
],
"message": "Claim requires stale, untimely, or missing evidence",
"object_id": "CLAIM-SAFE"
}
],
"status": "NO_CONSTA"
}
],
"errors": [],
"notes": [
"REFERENCE_KERNEL_ONLY",
"EVALUATOR_EVALUATES_EXTERNAL_AUTHORITY_AUTHORIZES",
"NO_SECURE_RUNNER",
"NO_OPERATIONAL_EFFECT_CLAIM"
],
"policy_sha256": "3729ec67b21a5bd31e23409d8bb4603336fc1dde27871c2f9c50a20269872838",
"properties": [
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P001-BUNDLE-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P002-AUTHORITY-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P003-POLICY-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P004-SUBJECT-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P005-EVIDENCE-CONTENT-INTEGRITY",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P006-EVIDENCE-SUBJECT-BINDING",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P007-RUN-BINDING",
"status": "PASS"
},
{
"evidence_ids": [
"E-BOUNDARY",
"E-RUNTIME"
],
"findings": [
{
"code": "STALE_EVIDENCE_PRESENT",
"evidence_ids": [
"E-BOUNDARY",
"E-RUNTIME"
],
"message": "One or more evidence objects are stale",
"object_id": "MF-P008-STALENESS-CHECKED"
}
],
"property_id": "MF-P008-STALENESS-CHECKED",
"status": "NO_CONSTA"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P009-TIME-BOUNDARIES",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [
{
"code": "REQUIRED_EVIDENCE_KIND_PRESENT_BUT_UNUSABLE",
"evidence_ids": [],
"message": "boundary,runtime",
"object_id": "MF-P010-EVIDENCE-COMPLETENESS"
}
],
"property_id": "MF-P010-EVIDENCE-COMPLETENESS",
"status": "NO_CONSTA"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P011-CONFLICT-FREE",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P012-ONE-USE-CONSISTENCY",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [
{
"code": "CAUSAL_PREAUTH_NOT_IMPLEMENTED",
"evidence_ids": [],
"message": "Offline evaluation cannot prove consume -> capability -> effect ordering",
"object_id": "MF-P013-CAUSAL-PREAUTH"
}
],
"property_id": "MF-P013-CAUSAL-PREAUTH",
"status": "NO_CONSTA"
},
{
"evidence_ids": [],
"findings": [
{
"code": "STRUCTURAL_INDEPENDENCE_INSUFFICIENT",
"evidence_ids": [],
"message": "Declared producer diversity is insufficient; physical independence is never inferred",
"object_id": "MF-P014-STRUCTURAL-INDEPENDENCE"
}
],
"property_id": "MF-P014-STRUCTURAL-INDEPENDENCE",
"status": "NO_CONSTA"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P015-SELF-AUTHORIZATION-DISABLED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P016-POLICY-CONSUMED-IS-PINNED-POLICY",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P017-UNKNOWN-IS-NOT-PASS",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P018-VERIFIED-EVIDENCE-IS-CONSUMED-EVIDENCE",
"status": "PASS"
},
{
"evidence_ids": [
"E-BOUNDARY",
"E-RUNTIME"
],
"findings": [
{
"code": "CHANGE_IMPACT_INVALIDATED_EVIDENCE",
"evidence_ids": [
"E-BOUNDARY",
"E-RUNTIME"
],
"message": "Current object changes invalidate dependent evidence",
"object_id": "MF-P019-CHANGE-IMPACT-CHECKED"
}
],
"property_id": "MF-P019-CHANGE-IMPACT-CHECKED",
"status": "NO_CONSTA"
}
],
"record_valid": true,
"release_authority": false,
"schema": "MFAK-RESULT-2.3",
"security_assessment_status": "NO_CONSTA",
"subject_sha256": "5a30ea7597d1c5a244200812200e9a309dd6e53c1bc21733c3ec0024060a991e"
} TAMPERED_ARTIFACT El artefacto se alteró en un solo byte. El digest comprometido de antemano ya no describe los bytes que se tienen.
BUNDLE_PIN_MISMATCHSUBJECT_PIN_MISMATCHR2.6.0-AC707_TESTS/test_kernel.py::test_002Exact output of the AC7 reference kernel at recording time. Not a simulation, and not an independent certification. Replaying this file is not the same as evaluating now: use `verify kernel-evaluate --scenario <id>` to re-run the kernel against the versioned inputs beside it.
Vuelve a ejecutarlo tú, en vivonode cli/bin/verify.mjs kernel-evaluate --scenario TAMPERED_ARTIFACT --json Ese comando evalúa los inputs versionados de este escenario con el kernel en tu máquina y reporta execution_mode=LIVE_REFERENCE_KERNEL. Lo que lees arriba es la grabación hecha antes, que `verify demo` reporta como RECORDED_REPLAY.
{
"authority_sha256": "48151d5d76902eac6ee32c605da1b9b29c079ee391200182b82b0285a4b9b556",
"bundle_sha256": "0fb8bf450e8f10e5837a42e7f34ba52dbc1ec30b73afc6942091fdce1436c21b",
"causally_assessed_run_ids": [],
"claims": [],
"errors": [
{
"code": "BUNDLE_PIN_MISMATCH",
"evidence_ids": [],
"message": "Bundle does not match external expected digest",
"object_id": null
},
{
"code": "SUBJECT_PIN_MISMATCH",
"evidence_ids": [],
"message": "Subject digest does not match external expected subject",
"object_id": null
}
],
"notes": [
"REFERENCE_KERNEL_ONLY",
"EVALUATOR_EVALUATES_EXTERNAL_AUTHORITY_AUTHORIZES",
"NO_SECURE_RUNNER",
"NO_OPERATIONAL_EFFECT_CLAIM"
],
"policy_sha256": "3729ec67b21a5bd31e23409d8bb4603336fc1dde27871c2f9c50a20269872838",
"properties": [
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P001-BUNDLE-PINNED",
"status": "FAIL"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P002-AUTHORITY-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P003-POLICY-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P004-SUBJECT-PINNED",
"status": "FAIL"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P015-SELF-AUTHORIZATION-DISABLED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P017-UNKNOWN-IS-NOT-PASS",
"status": "PASS"
}
],
"record_valid": false,
"release_authority": false,
"schema": "MFAK-RESULT-2.3",
"security_assessment_status": "NO_CONSTA",
"subject_sha256": "185fd6c9c5e9fd7ea9aa83f424653f28ec99e825c6214a9fae95f7173ab23410"
} UNTIMELY_EVIDENCE La evidencia llegó más tarde de lo que permite la política de tiempo de la autoridad respecto a la ejecución que dice describir.
ninguno
R2.6.0-AC707_TESTS/test_kernel.py::test_015Exact output of the AC7 reference kernel at recording time. Not a simulation, and not an independent certification. Replaying this file is not the same as evaluating now: use `verify kernel-evaluate --scenario <id>` to re-run the kernel against the versioned inputs beside it.
Vuelve a ejecutarlo tú, en vivonode cli/bin/verify.mjs kernel-evaluate --scenario UNTIMELY_EVIDENCE --json Ese comando evalúa los inputs versionados de este escenario con el kernel en tu máquina y reporta execution_mode=LIVE_REFERENCE_KERNEL. Lo que lees arriba es la grabación hecha antes, que `verify demo` reporta como RECORDED_REPLAY.
{
"authority_sha256": "48151d5d76902eac6ee32c605da1b9b29c079ee391200182b82b0285a4b9b556",
"bundle_sha256": "1b81ca700c0761c9a792527d9d26c110cacceef6332c2933bc2679000b8d43f2",
"causally_assessed_run_ids": [],
"claims": [
{
"claim_id": "CLAIM-SAFE",
"evidence_ids": [
"E-RUNTIME"
],
"findings": [
{
"code": "CLAIM_REQUIRED_EVIDENCE_UNUSABLE",
"evidence_ids": [
"E-RUNTIME"
],
"message": "Claim requires stale, untimely, or missing evidence",
"object_id": "CLAIM-SAFE"
}
],
"status": "NO_CONSTA"
}
],
"errors": [],
"notes": [
"REFERENCE_KERNEL_ONLY",
"EVALUATOR_EVALUATES_EXTERNAL_AUTHORITY_AUTHORIZES",
"NO_SECURE_RUNNER",
"NO_OPERATIONAL_EFFECT_CLAIM"
],
"policy_sha256": "3729ec67b21a5bd31e23409d8bb4603336fc1dde27871c2f9c50a20269872838",
"properties": [
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P001-BUNDLE-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P002-AUTHORITY-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P003-POLICY-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P004-SUBJECT-PINNED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P005-EVIDENCE-CONTENT-INTEGRITY",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P006-EVIDENCE-SUBJECT-BINDING",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P007-RUN-BINDING",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P008-STALENESS-CHECKED",
"status": "PASS"
},
{
"evidence_ids": [
"E-RUNTIME"
],
"findings": [
{
"code": "EVIDENCE_TIME_INVALID",
"evidence_ids": [
"E-RUNTIME"
],
"message": "Evidence time is outside the explicit authority time policy",
"object_id": "MF-P009-TIME-BOUNDARIES"
}
],
"property_id": "MF-P009-TIME-BOUNDARIES",
"status": "NO_CONSTA"
},
{
"evidence_ids": [],
"findings": [
{
"code": "REQUIRED_EVIDENCE_KIND_PRESENT_BUT_UNUSABLE",
"evidence_ids": [],
"message": "runtime",
"object_id": "MF-P010-EVIDENCE-COMPLETENESS"
}
],
"property_id": "MF-P010-EVIDENCE-COMPLETENESS",
"status": "NO_CONSTA"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P011-CONFLICT-FREE",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P012-ONE-USE-CONSISTENCY",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [
{
"code": "CAUSAL_PREAUTH_NOT_IMPLEMENTED",
"evidence_ids": [],
"message": "Offline evaluation cannot prove consume -> capability -> effect ordering",
"object_id": "MF-P013-CAUSAL-PREAUTH"
}
],
"property_id": "MF-P013-CAUSAL-PREAUTH",
"status": "NO_CONSTA"
},
{
"evidence_ids": [],
"findings": [
{
"code": "STRUCTURAL_INDEPENDENCE_INSUFFICIENT",
"evidence_ids": [],
"message": "Declared producer diversity is insufficient; physical independence is never inferred",
"object_id": "MF-P014-STRUCTURAL-INDEPENDENCE"
}
],
"property_id": "MF-P014-STRUCTURAL-INDEPENDENCE",
"status": "NO_CONSTA"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P015-SELF-AUTHORIZATION-DISABLED",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P016-POLICY-CONSUMED-IS-PINNED-POLICY",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P017-UNKNOWN-IS-NOT-PASS",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P018-VERIFIED-EVIDENCE-IS-CONSUMED-EVIDENCE",
"status": "PASS"
},
{
"evidence_ids": [],
"findings": [],
"property_id": "MF-P019-CHANGE-IMPACT-CHECKED",
"status": "PASS"
}
],
"record_valid": true,
"release_authority": false,
"schema": "MFAK-RESULT-2.3",
"security_assessment_status": "NO_CONSTA",
"subject_sha256": "5a30ea7597d1c5a244200812200e9a309dd6e53c1bc21733c3ec0024060a991e"
}