{
  "_doc": "One result, read from the codebase’s own files at the commit named here. Every value is that file’s own, copied verbatim; nothing here is written by hand. A value replaced by {withheld: true, sha256_of_value, bytes} is committed by its sha256 instead of published, for the reason it states, and is never edited. Each whole source file is committed by sha256 below, and its bytes are published only where its visibility says so. The codebase is named by the public subject its files are published under.",
  "lane": "packaging-extraction",
  "repository": "packaging-extraction",
  "commit": "a1923d01aa5f41b783676d705c8d8aab6ffe0b6e",
  "portfolio_id": "packaging-extraction:confidential-exchange",
  "id": "confidential-exchange",
  "attestation_row": {
    "attested_at": "2026-09-24",
    "attestor": "07-genesis",
    "repository": "genesis",
    "source_doc": "CROWN_JEWELS_RESOLVED.md",
    "source_doc_sha256": "c35959e4a90e709a936fc6f71d3f7ae2877c5159e85fa2a607f06891f48766f4",
    "state": "attested",
    "top_n": 31,
    "note_sha256": "a18188920cc59653aabf6437890706d1f62a11628e4623e54f67ed9f03e13dc7",
    "ids_in_row": 31,
    "file": "dataroom/TOP_N_ATTESTATION.jsonl",
    "line": 1
  },
  "claim_source": {
    "receipt": "packaging-extraction/top40.json",
    "sha256": "351cc4baba04093d3588db85057a6ffc657a4a67caf6282afe65b45b20d09ff7",
    "field": "entries[19].claim",
    "file": "top40.json"
  },
  "top40_entry": {
    "id": "confidential-exchange",
    "rank": 20,
    "title": "Confidential exchange, two tiers deliberately separate",
    "claim": "Two organisations reach a joint engineering decision without either handing over the input that answers it, and the leak sweep took 13 of 39 private scalars in the committed artifact down to 0.",
    "scope": "Commitment-based signoff, explicitly NOT zero-knowledge — the name is honest. Status is in-progress, not done.",
    "limits": "The self-catch is the credible part: six caller-controlled channels reaching published bytes all leaked identically, and one was ALREADY SHIPPING every via diameter, the binding pitch and the binding pair under a green minimal_cone_exposed: True — while the disclosure prose written to EXPLAIN the leak was itself a leak. The 19-fault sweep is was ASSERTED until S02 (2026-09-10) — reported 19/19 but never cleanly captured, launched under nohup without an exit code. It is now CAPTURED: --out writes a committed per-fault receipt, and the run recorded 19 registered faults, 19 CAUGHT BY THE CHECK AIMED AT EACH, 0 missed, 0 red-for-the-wrong-reason, green before and after exit 0, wall 11240.5 s (3.1 h under foreign loadavg 9-207). The four files the sweep can write were sha-tabled before and after and are byte-identical, with git status unchanged across the run. Receipt: out/sprint_S02_gen08_faults_2026-09.json. A lossy 4-significant-figure encoding defeats every scan, disclosed. verify_confidential_package_gate.py is NOT in the counted suite.",
    "artifact_path": "benchmarks/confidential/confidential_exchange_witness_2026_08.json",
    "witness_command": "PYTHONPATH=. python3 scripts/audit/verify_confidential_signoff_gate.py",
    "witness_result": {
      "withheld": true,
      "why": "uses a word the published record keeps for its own process (S3.1-DIALECT)",
      "sha256_of_value": "9e749106900257fca14df849964fe56b05b77ae5cb8dcd44f5c8a6a4d9852b94",
      "bytes": 310
    },
    "witness_class": "ASSERTING",
    "witness_class_basis": "measured",
    "third_party_axis": "-",
    "facts": {
      "ran_with_receipt": true,
      "third_party_graded": false,
      "negative_control_stated": true,
      "ip_class_known": false,
      "reproduce_command": true,
      "regenerates_not_verifies": false
    },
    "facts_count": 3,
    "repro_command": "PYTHONPATH=. python3 scripts/audit/verify_confidential_signoff_gate.py",
    "reproduce_command": "PYTHONPATH=. python3 scripts/audit/verify_confidential_signoff_gate.py",
    "repro_packet": null,
    "ip_class": "UNKNOWN",
    "evidence_tier": "SIMULATED",
    "run_status": "RAN",
    "output_excerpt": {
      "withheld": true,
      "why": "uses a word the published record keeps for its own process (S3.1-DIALECT)",
      "sha256_of_value": "e77b99447bee694e75818df62ab376225624ebd344a3dc6bb924639bcf52ecc4",
      "bytes": 282
    },
    "attestation_rank": 25,
    "negative_control": {
      "withheld": true,
      "why": "uses a word the published record keeps for its own process (S3.1-DIALECT)",
      "sha256_of_value": "88943eb813a0bc563150c1e1eda9f06b8e9c565cec9a932965e3d829e2d53353",
      "bytes": 80
    }
  },
  "witness_quality_entry": {
    "id": "confidential-exchange",
    "portfolio_id": "genesis:confidential-exchange",
    "class": "ASSERTING",
    "measured_class": "ASSERTING",
    "basis": "measured",
    "why": {
      "withheld": true,
      "why": "uses a word the published record keeps for its own process (S3.1-DIALECT)",
      "sha256_of_value": "4a5b7c911aacfc7399287b84614de5212b24d4d75126a8e775eeb84e553a3e6c",
      "bytes": 639
    },
    "witness_command": "PYTHONPATH=. python3 scripts/audit/verify_confidential_signoff_gate.py",
    "exit_clean": 0,
    "exit_mutated": 1,
    "asserts": "FAIL|| confidential-signoff properties failed: confidentiality_no_geometry_leak"
  },
  "packet": null,
  "measured": {
    "measured": true,
    "basis": "exit_mutated = 1 (basis == measured)",
    "exit": 1,
    "defect_rejected": true
  },
  "register": {
    "truth_state": "attested",
    "truth_line": 185,
    "measured_per_register": true,
    "witness_class_per_register": "ASSERTING",
    "ip_class_public": "not_public",
    "ip_class_sha256": "c2ab54a718ff5484fea4f59ecc2a446deef5412ea225434433529a34a9764660",
    "ip_class_source": "docs/audit/CHIPLETOS_CANON_FACTS_2026_09_17.json:34 @ e47033d4758e",
    "receipt": "register/CROWN_JEWELS_TRUTH.md",
    "receipt_sha256": "bde06cf0d3e99644522d18e79b6bd5d84ed4f5c86e315a48fef207e9e49c5022",
    "ip_class_receipt": "register/ip_class.jsonl",
    "ip_class_receipt_sha256": "b1e8f97aa6779e0fefed2f7a7726e1a03563b536b497392401b49bb8ef84d4ca"
  },
  "withheld_fields": [
    {
      "field": "top40.witness_result",
      "codes": [
        "PROCESS_NARRATION"
      ]
    },
    {
      "field": "top40.output_excerpt",
      "codes": [
        "PROCESS_NARRATION"
      ]
    },
    {
      "field": "top40.negative_control",
      "codes": [
        "PROCESS_NARRATION"
      ]
    },
    {
      "field": "witness_quality.why",
      "codes": [
        "PROCESS_NARRATION"
      ]
    }
  ],
  "sources": {
    "attestation": {
      "receipt": "packaging-extraction/dataroom/TOP_N_ATTESTATION.jsonl",
      "source": "dataroom/TOP_N_ATTESTATION.jsonl",
      "commit": "a1923d01aa5f41b783676d705c8d8aab6ffe0b6e",
      "sha256": "0d18114ea7fdd5a62825c8d448d2a2736033b8f097427e08d24284d9e1254f0d",
      "bytes": 4519,
      "visibility": "sealed"
    },
    "top40": {
      "receipt": "packaging-extraction/top40.json",
      "source": "top40.json",
      "commit": "a1923d01aa5f41b783676d705c8d8aab6ffe0b6e",
      "sha256": "351cc4baba04093d3588db85057a6ffc657a4a67caf6282afe65b45b20d09ff7",
      "bytes": 269691,
      "visibility": "sealed"
    },
    "witness_quality": {
      "receipt": "packaging-extraction/dataroom/witness_quality.json",
      "source": "dataroom/witness_quality.json",
      "commit": "a1923d01aa5f41b783676d705c8d8aab6ffe0b6e",
      "sha256": "a5b45f767596df7e20404884fd30f0975b1931cf08bb7f3b4e4bfc4b83073c51",
      "bytes": 161552,
      "visibility": "sealed"
    },
    "repro_index": {
      "receipt": "packaging-extraction/repro/INDEX.json",
      "source": "repro/INDEX.json",
      "commit": "a1923d01aa5f41b783676d705c8d8aab6ffe0b6e",
      "sha256": "2a0ff93973dcafbf404f0f71c52777408d17e0ba38d141b92e0f4611a2cf72d1",
      "bytes": 34521,
      "visibility": "sealed"
    }
  }
}