{"schemaVersion":"developer.reits.tech/runner-controller-dossier-store-verifier-configuration-bundle/v1","status":"VERIFIER_CONFIGURATION_BUNDLE_CONTRACT_BOUND_PRODUCTION_BUNDLE_ABSENT","evaluatedAt":"2026-09-28T12:41:48.193Z","mode":"PURE_TEST_ONLY_CONFIGURATION_BUNDLE_EVALUATOR_NO_PRODUCTION_LOADER_NO_EXTERNAL_EFFECTS","program":{"acceptedKnives":4,"totalKnives":36,"currentKnife":"D05","closeoutCut":19,"remainingIncludingCurrent":32,"remainingAfterAcceptance":31,"d05Accepted":false},"summary":{"upstreamVerifierAdapterContractAvailable":true,"configurationBundleContractBound":true,"productionBundlesObserved":0,"trustRootsRequired":3,"productionTrustRootKeyRefs":0,"configurationBindingsRequired":8,"productionConfigurationBindings":0,"attestationsRequired":4,"productionAttestations":0,"envelopeFields":26,"lifecycleStates":8,"fixtureCases":40,"fixtureAssertionsPassed":40,"fixtureAccepted":1,"fixtureDenied":39,"productionLoadersConfigured":0,"externalReadsExecuted":0,"externalWritesExecuted":0,"resourcesCreated":0,"provisioningPermitted":false,"decision":"HOLD_ADAPTER_ASSEMBLY_UNTIL_ONE_NON_FIXTURE_SIGNED_CONFIGURATION_BUNDLE_BINDS_THREE_ROOTS_EIGHT_CONFIGS_FOUR_ATTESTATIONS_AND_ROLLBACK"},"upstreamVerifierAdapterContract":{"id":"d05-verifier-adapters@1dfd35b4f388-88df79c7e910","contentDigest":"sha256:88df79c7e910765dc6bdee2996d7c970cfd48d571c594ba793592c9d99e5e069","sourceRevision":"1dfd35b4f388738df724e8f588f00a3841976f6b","productionReady":false,"executable":false},"configurationBundleContract":{"id":"d05-verifier-config-bundle@1dfd35b4f388-315d9d0c7226","contentDigest":"sha256:315d9d0c722614411d1d2c64427282cda2754ba4118ab855e808f70b2a524329","canonicalBytes":12993,"subject":{"schemaVersion":"developer.reits.tech/runner-controller-dossier-store-verifier-configuration-bundle-contract/v1","verifierAdapterContractId":"d05-verifier-adapters@1dfd35b4f388-88df79c7e910","verifierAdapterContractDigest":"sha256:88df79c7e910765dc6bdee2996d7c970cfd48d571c594ba793592c9d99e5e069","sourceRevision":"1dfd35b4f388738df724e8f588f00a3841976f6b","bundleContract":{"productionBundle":null,"trustRootsRequired":3,"configurationBindingsRequired":8,"attestationsRequired":4,"signatureAlgorithm":"ECDSA_P256_SHA256","validitySeconds":600,"maxClockSkewSeconds":30,"fieldsRequired":26,"requiredFields":["schemaVersion","bundleId","upstreamContractId","upstreamContractDigest","sourceRevision","environment","trustRootGeneration","trustRootManifestDigest","trustRootKeyRefsDigest","configurationSetDigest","rollbackBundleId","rollbackBundleDigest","revocationRef","revocationSnapshotDigest","custodyPolicyDigest","authorityPolicyDigest","issuedAt","expiresAt","signatureAlgorithm","signerAuthority","signerKeyRef","challengeDigest","nonceReservationDigest","attestationsDigest","canonicalPayloadDigest","signature"]},"trustRoots":[{"ordinal":1,"rootId":"TRUST-ROOT-01","name":"HealthReceiptVerificationRoot","owner":"SECURITY","usage":"VERIFY_ONLY","productionKeyRef":null},{"ordinal":2,"rootId":"TRUST-ROOT-02","name":"ChallengeNonceAuthorityRoot","owner":"PLATFORM_SRE","usage":"VERIFY_RECEIPT_ONLY","productionKeyRef":null},{"ordinal":3,"rootId":"TRUST-ROOT-03","name":"QualificationAuthorityRoot","owner":"QA_ARCHITECT","usage":"VERIFY_ONLY","productionKeyRef":null}],"configurationBindings":[{"ordinal":1,"slot":"KEYREF_ALLOWLIST_REF","owner":"SECURITY","expectedScheme":"configref://","productionBinding":null},{"ordinal":2,"slot":"KEYREF_ALLOWLIST_DIGEST","owner":"SECURITY","expectedScheme":"sha256:","productionBinding":null},{"ordinal":3,"slot":"REVOCATION_SNAPSHOT_REF","owner":"SECURITY","expectedScheme":"revocationref://","productionBinding":null},{"ordinal":4,"slot":"REVOCATION_TRUST_ROOT_REF","owner":"SECURITY","expectedScheme":"keyref://","productionBinding":null},{"ordinal":5,"slot":"CHALLENGE_VERIFIER_REF","owner":"PLATFORM_SRE","expectedScheme":"configref://","productionBinding":null},{"ordinal":6,"slot":"NONCE_REGISTRY_READER_REF","owner":"PLATFORM_SRE","expectedScheme":"configref://","productionBinding":null},{"ordinal":7,"slot":"AUTHORITY_CHAIN_POLICY_REF","owner":"QA_ARCHITECT","expectedScheme":"configref://","productionBinding":null},{"ordinal":8,"slot":"HEALTH_SIGNATURE_VERIFIER_REF","owner":"QA_ARCHITECT","expectedScheme":"configref://","productionBinding":null}],"attestationSeats":[{"ordinal":1,"seat":"SECURITY_CUSTODY_ATTESTATION","authority":"SECURITY","qualifier":"QA_ARCHITECT","scope":"ROOT_KEYREFS_AND_REVOCATION","productionAttestation":null},{"ordinal":2,"seat":"PLATFORM_CONFIGURATION_ATTESTATION","authority":"PLATFORM_SRE","qualifier":"GLOBAL_ARCHITECT","scope":"CONFIG_REFS_AND_RUNTIME_BOUNDARY","productionAttestation":null},{"ordinal":3,"seat":"QA_SCHEMA_ATTESTATION","authority":"QA_ARCHITECT","qualifier":"SECURITY","scope":"SCHEMA_FIXTURES_AND_FAIL_CLOSED_CODES","productionAttestation":null},{"ordinal":4,"seat":"ARCHITECTURE_ROLLBACK_ATTESTATION","authority":"GLOBAL_ARCHITECT","qualifier":"PLATFORM_SRE","scope":"ROLLBACK_AND_GENERATION_TRANSITION","productionAttestation":null}],"lifecycleStates":[{"ordinal":1,"state":"DRAFT","productionObserved":false},{"ordinal":2,"state":"ROOTS_BOUND","productionObserved":false},{"ordinal":3,"state":"CONFIGS_BOUND","productionObserved":false},{"ordinal":4,"state":"ROLLBACK_BOUND","productionObserved":false},{"ordinal":5,"state":"REVOCATION_BOUND","productionObserved":false},{"ordinal":6,"state":"ATTESTED","productionObserved":false},{"ordinal":7,"state":"SEALED_FIXTURE","productionObserved":false},{"ordinal":8,"state":"PRODUCTION_DENIED","productionObserved":true}],"fixtureRegistry":[{"ordinal":1,"id":"VCB-001","scenario":"complete fixture bundle binds roots, configurations, rollback and attestations","expectedCode":"TEST_ONLY_CONFIGURATION_BUNDLE_SEALED","expectedTerminal":"SEALED_FIXTURE"},{"ordinal":2,"id":"VCB-002","scenario":"upstream verifier adapter contract is absent","expectedCode":"UPSTREAM_VERIFIER_ADAPTER_CONTRACT_UNAVAILABLE","expectedTerminal":"DENIED"},{"ordinal":3,"id":"VCB-003","scenario":"configuration bundle is absent","expectedCode":"PRODUCTION_CONFIGURATION_BUNDLE_ABSENT","expectedTerminal":"DENIED"},{"ordinal":4,"id":"VCB-004","scenario":"envelope contains an extra field","expectedCode":"CONFIGURATION_BUNDLE_FIELDS_INVALID","expectedTerminal":"DENIED"},{"ordinal":5,"id":"VCB-005","scenario":"upstream contract identity drifts","expectedCode":"VERIFIER_ADAPTER_CONTRACT_ID_MISMATCH","expectedTerminal":"DENIED"},{"ordinal":6,"id":"VCB-006","scenario":"upstream contract digest drifts","expectedCode":"VERIFIER_ADAPTER_CONTRACT_DIGEST_MISMATCH","expectedTerminal":"DENIED"},{"ordinal":7,"id":"VCB-007","scenario":"source revision is not an exact Git SHA","expectedCode":"SOURCE_REVISION_INVALID","expectedTerminal":"DENIED"},{"ordinal":8,"id":"VCB-008","scenario":"bundle environment is staging","expectedCode":"PRODUCTION_BUNDLE_ENVIRONMENT_REQUIRED","expectedTerminal":"DENIED"},{"ordinal":9,"id":"VCB-009","scenario":"trust-root generation is empty","expectedCode":"TRUST_ROOT_GENERATION_REQUIRED","expectedTerminal":"DENIED"},{"ordinal":10,"id":"VCB-010","scenario":"one trust root is missing","expectedCode":"TRUST_ROOT_CARDINALITY_INVALID","expectedTerminal":"DENIED"},{"ordinal":11,"id":"VCB-011","scenario":"trust roots are reordered","expectedCode":"TRUST_ROOT_ORDER_INVALID","expectedTerminal":"DENIED"},{"ordinal":12,"id":"VCB-012","scenario":"trust-root identity is reused","expectedCode":"TRUST_ROOT_ID_REUSED","expectedTerminal":"DENIED"},{"ordinal":13,"id":"VCB-013","scenario":"trust root exposes an untyped key","expectedCode":"TRUST_ROOT_KEYREF_INVALID","expectedTerminal":"DENIED"},{"ordinal":14,"id":"VCB-014","scenario":"trust root permits signing","expectedCode":"TRUST_ROOT_USAGE_INVALID","expectedTerminal":"DENIED"},{"ordinal":15,"id":"VCB-015","scenario":"trust-root owner differs from policy","expectedCode":"TRUST_ROOT_OWNER_MISMATCH","expectedTerminal":"DENIED"},{"ordinal":16,"id":"VCB-016","scenario":"one configuration binding is missing","expectedCode":"CONFIGURATION_BINDING_CARDINALITY_INVALID","expectedTerminal":"DENIED"},{"ordinal":17,"id":"VCB-017","scenario":"configuration bindings are reordered","expectedCode":"CONFIGURATION_BINDING_ORDER_INVALID","expectedTerminal":"DENIED"},{"ordinal":18,"id":"VCB-018","scenario":"configuration slot is reused","expectedCode":"CONFIGURATION_SLOT_REUSED","expectedTerminal":"DENIED"},{"ordinal":19,"id":"VCB-019","scenario":"configuration reference is not typed","expectedCode":"CONFIGURATION_REFERENCE_INVALID","expectedTerminal":"DENIED"},{"ordinal":20,"id":"VCB-020","scenario":"configuration digest is malformed","expectedCode":"CONFIGURATION_BINDING_DIGEST_INVALID","expectedTerminal":"DENIED"},{"ordinal":21,"id":"VCB-021","scenario":"configuration owner differs from policy","expectedCode":"CONFIGURATION_OWNER_MISMATCH","expectedTerminal":"DENIED"},{"ordinal":22,"id":"VCB-022","scenario":"configuration version is empty","expectedCode":"CONFIGURATION_VERSION_REQUIRED","expectedTerminal":"DENIED"},{"ordinal":23,"id":"VCB-023","scenario":"configuration-set digest is wrong","expectedCode":"CONFIGURATION_SET_DIGEST_MISMATCH","expectedTerminal":"DENIED"},{"ordinal":24,"id":"VCB-024","scenario":"trust-root manifest digest is wrong","expectedCode":"TRUST_ROOT_MANIFEST_DIGEST_MISMATCH","expectedTerminal":"DENIED"},{"ordinal":25,"id":"VCB-025","scenario":"rollback bundle identity is missing","expectedCode":"ROLLBACK_BUNDLE_ID_REQUIRED","expectedTerminal":"DENIED"},{"ordinal":26,"id":"VCB-026","scenario":"rollback bundle digest is malformed","expectedCode":"ROLLBACK_BUNDLE_DIGEST_INVALID","expectedTerminal":"DENIED"},{"ordinal":27,"id":"VCB-027","scenario":"revocation reference is not typed","expectedCode":"BUNDLE_REVOCATION_REF_INVALID","expectedTerminal":"DENIED"},{"ordinal":28,"id":"VCB-028","scenario":"revocation snapshot digest is malformed","expectedCode":"BUNDLE_REVOCATION_DIGEST_INVALID","expectedTerminal":"DENIED"},{"ordinal":29,"id":"VCB-029","scenario":"configuration bundle is expired","expectedCode":"CONFIGURATION_BUNDLE_EXPIRED","expectedTerminal":"DENIED"},{"ordinal":30,"id":"VCB-030","scenario":"configuration bundle was issued in the future","expectedCode":"CONFIGURATION_BUNDLE_FROM_FUTURE","expectedTerminal":"DENIED"},{"ordinal":31,"id":"VCB-031","scenario":"bundle signature algorithm is not P-256","expectedCode":"CONFIGURATION_BUNDLE_SIGNATURE_ALGORITHM_MISMATCH","expectedTerminal":"DENIED"},{"ordinal":32,"id":"VCB-032","scenario":"one independent attestation is missing","expectedCode":"BUNDLE_ATTESTATION_CARDINALITY_INVALID","expectedTerminal":"DENIED"},{"ordinal":33,"id":"VCB-033","scenario":"attestation seats are reordered","expectedCode":"BUNDLE_ATTESTATION_ORDER_INVALID","expectedTerminal":"DENIED"},{"ordinal":34,"id":"VCB-034","scenario":"attestation authority self-qualifies","expectedCode":"INDEPENDENT_BUNDLE_ATTESTATION_REQUIRED","expectedTerminal":"DENIED"},{"ordinal":35,"id":"VCB-035","scenario":"one attestation signature is unverified","expectedCode":"BUNDLE_ATTESTATION_SIGNATURE_UNVERIFIED","expectedTerminal":"DENIED"},{"ordinal":36,"id":"VCB-036","scenario":"bundle sealing challenge is missing","expectedCode":"BUNDLE_CHALLENGE_REQUIRED","expectedTerminal":"DENIED"},{"ordinal":37,"id":"VCB-037","scenario":"bundle nonce reservation has a concurrent winner","expectedCode":"BUNDLE_NONCE_RESERVATION_CONFLICT","expectedTerminal":"DENIED"},{"ordinal":38,"id":"VCB-038","scenario":"canonical payload digest is wrong","expectedCode":"CANONICAL_BUNDLE_DIGEST_MISMATCH","expectedTerminal":"DENIED"},{"ordinal":39,"id":"VCB-039","scenario":"bundle signature is unverified","expectedCode":"CONFIGURATION_BUNDLE_SIGNATURE_UNVERIFIED","expectedTerminal":"DENIED"},{"ordinal":40,"id":"VCB-040","scenario":"fixture bundle is presented to production loader","expectedCode":"PRODUCTION_CONFIGURATION_BUNDLE_LOADER_NOT_CONFIGURED","expectedTerminal":"DENIED"}],"decisionCodes":["TEST_ONLY_CONFIGURATION_BUNDLE_SEALED","UPSTREAM_VERIFIER_ADAPTER_CONTRACT_UNAVAILABLE","PRODUCTION_CONFIGURATION_BUNDLE_ABSENT","CONFIGURATION_BUNDLE_FIELDS_INVALID","VERIFIER_ADAPTER_CONTRACT_ID_MISMATCH","VERIFIER_ADAPTER_CONTRACT_DIGEST_MISMATCH","SOURCE_REVISION_INVALID","PRODUCTION_BUNDLE_ENVIRONMENT_REQUIRED","TRUST_ROOT_GENERATION_REQUIRED","TRUST_ROOT_CARDINALITY_INVALID","TRUST_ROOT_ORDER_INVALID","TRUST_ROOT_ID_REUSED","TRUST_ROOT_KEYREF_INVALID","TRUST_ROOT_USAGE_INVALID","TRUST_ROOT_OWNER_MISMATCH","CONFIGURATION_BINDING_CARDINALITY_INVALID","CONFIGURATION_BINDING_ORDER_INVALID","CONFIGURATION_SLOT_REUSED","CONFIGURATION_REFERENCE_INVALID","CONFIGURATION_BINDING_DIGEST_INVALID","CONFIGURATION_OWNER_MISMATCH","CONFIGURATION_VERSION_REQUIRED","CONFIGURATION_SET_DIGEST_MISMATCH","TRUST_ROOT_MANIFEST_DIGEST_MISMATCH","ROLLBACK_BUNDLE_ID_REQUIRED","ROLLBACK_BUNDLE_DIGEST_INVALID","BUNDLE_REVOCATION_REF_INVALID","BUNDLE_REVOCATION_DIGEST_INVALID","CONFIGURATION_BUNDLE_EXPIRED","CONFIGURATION_BUNDLE_FROM_FUTURE","CONFIGURATION_BUNDLE_SIGNATURE_ALGORITHM_MISMATCH","BUNDLE_ATTESTATION_CARDINALITY_INVALID","BUNDLE_ATTESTATION_ORDER_INVALID","INDEPENDENT_BUNDLE_ATTESTATION_REQUIRED","BUNDLE_ATTESTATION_SIGNATURE_UNVERIFIED","BUNDLE_CHALLENGE_REQUIRED","BUNDLE_NONCE_RESERVATION_CONFLICT","CANONICAL_BUNDLE_DIGEST_MISMATCH","CONFIGURATION_BUNDLE_SIGNATURE_UNVERIFIED","PRODUCTION_CONFIGURATION_BUNDLE_LOADER_NOT_CONFIGURED"],"invariants":["EXACT_CUT_18_VERIFIER_ADAPTER_CONTRACT_IS_REQUIRED","BUNDLE_FIELDS_ARE_EXACT_AND_CANONICAL","THREE_ORDERED_TRUST_ROOTS_ARE_REQUIRED","TRUST_ROOT_IDENTITIES_ARE_UNIQUE","TRUST_ROOT_KEYS_ARE_KEYREFS_NOT_KEY_MATERIAL","TRUST_ROOT_KEYS_ARE_VERIFY_ONLY","TRUST_ROOT_OWNERS_MATCH_POLICY","TRUST_ROOT_GENERATION_IS_IMMUTABLE","EIGHT_ORDERED_CONFIGURATION_BINDINGS_ARE_REQUIRED","CONFIGURATION_SLOTS_ARE_UNIQUE","CONFIGURATION_REFS_ARE_TYPED","CONFIGURATION_DIGESTS_ARE_SHA256","CONFIGURATION_OWNERS_MATCH_CUT_18","CONFIGURATION_VERSIONS_ARE_EXPLICIT","CONFIGURATION_SET_DIGEST_BINDS_ALL_EIGHT_SLOTS","ROLLBACK_BUNDLE_ID_AND_DIGEST_ARE_REQUIRED","REVOCATION_REFERENCE_AND_SNAPSHOT_DIGEST_ARE_REQUIRED","BUNDLE_VALIDITY_IS_AT_MOST_TEN_MINUTES","ONLY_ECDSA_P256_SHA256_IS_ACCEPTED","FOUR_ORDERED_ATTESTATIONS_ARE_REQUIRED","ATTESTATION_AUTHORITIES_CANNOT_SELF_QUALIFY","EVERY_ATTESTATION_SIGNATURE_IS_VERIFIED","SEALING_CHALLENGE_IS_CONTENT_BOUND","NONCE_RESERVATION_HAS_ONE_WINNER","CANONICAL_PAYLOAD_DIGEST_IS_VERIFIED","BUNDLE_SIGNATURE_IS_VERIFIED_LAST","FIXTURE_ROOTS_CONFIGS_AND_SIGNATURES_NEVER_REACH_PRODUCTION","PRODUCTION_LOADER_FAILS_CLOSED_WHEN_UNCONFIGURED","NO_EXTERNAL_READ_OCCURS_IN_THIS_CONTRACT_EVALUATOR","NO_EXTERNAL_WRITE_OR_RESOURCE_CREATION_IS_PERMITTED"]},"productionReady":false,"executable":false},"productionEvaluation":{"code":"PRODUCTION_CONFIGURATION_BUNDLE_ABSENT","terminal":"DENIED","failedStage":null,"rootsVerified":0,"configurationsVerified":0,"attestationsVerified":0,"productionReady":false},"trustRootMatrix":[{"ordinal":1,"rootId":"TRUST-ROOT-01","name":"HealthReceiptVerificationRoot","owner":"SECURITY","usage":"VERIFY_ONLY","productionKeyRef":null,"status":"PRODUCTION_TRUST_ROOT_KEYREF_ABSENT"},{"ordinal":2,"rootId":"TRUST-ROOT-02","name":"ChallengeNonceAuthorityRoot","owner":"PLATFORM_SRE","usage":"VERIFY_RECEIPT_ONLY","productionKeyRef":null,"status":"PRODUCTION_TRUST_ROOT_KEYREF_ABSENT"},{"ordinal":3,"rootId":"TRUST-ROOT-03","name":"QualificationAuthorityRoot","owner":"QA_ARCHITECT","usage":"VERIFY_ONLY","productionKeyRef":null,"status":"PRODUCTION_TRUST_ROOT_KEYREF_ABSENT"}],"configurationBindingMatrix":[{"ordinal":1,"slot":"KEYREF_ALLOWLIST_REF","owner":"SECURITY","expectedScheme":"configref://","productionBinding":null,"status":"PRODUCTION_CONFIGURATION_BINDING_ABSENT"},{"ordinal":2,"slot":"KEYREF_ALLOWLIST_DIGEST","owner":"SECURITY","expectedScheme":"sha256:","productionBinding":null,"status":"PRODUCTION_CONFIGURATION_BINDING_ABSENT"},{"ordinal":3,"slot":"REVOCATION_SNAPSHOT_REF","owner":"SECURITY","expectedScheme":"revocationref://","productionBinding":null,"status":"PRODUCTION_CONFIGURATION_BINDING_ABSENT"},{"ordinal":4,"slot":"REVOCATION_TRUST_ROOT_REF","owner":"SECURITY","expectedScheme":"keyref://","productionBinding":null,"status":"PRODUCTION_CONFIGURATION_BINDING_ABSENT"},{"ordinal":5,"slot":"CHALLENGE_VERIFIER_REF","owner":"PLATFORM_SRE","expectedScheme":"configref://","productionBinding":null,"status":"PRODUCTION_CONFIGURATION_BINDING_ABSENT"},{"ordinal":6,"slot":"NONCE_REGISTRY_READER_REF","owner":"PLATFORM_SRE","expectedScheme":"configref://","productionBinding":null,"status":"PRODUCTION_CONFIGURATION_BINDING_ABSENT"},{"ordinal":7,"slot":"AUTHORITY_CHAIN_POLICY_REF","owner":"QA_ARCHITECT","expectedScheme":"configref://","productionBinding":null,"status":"PRODUCTION_CONFIGURATION_BINDING_ABSENT"},{"ordinal":8,"slot":"HEALTH_SIGNATURE_VERIFIER_REF","owner":"QA_ARCHITECT","expectedScheme":"configref://","productionBinding":null,"status":"PRODUCTION_CONFIGURATION_BINDING_ABSENT"}],"attestationMatrix":[{"ordinal":1,"seat":"SECURITY_CUSTODY_ATTESTATION","authority":"SECURITY","qualifier":"QA_ARCHITECT","scope":"ROOT_KEYREFS_AND_REVOCATION","productionAttestation":null,"status":"PRODUCTION_ATTESTATION_ABSENT"},{"ordinal":2,"seat":"PLATFORM_CONFIGURATION_ATTESTATION","authority":"PLATFORM_SRE","qualifier":"GLOBAL_ARCHITECT","scope":"CONFIG_REFS_AND_RUNTIME_BOUNDARY","productionAttestation":null,"status":"PRODUCTION_ATTESTATION_ABSENT"},{"ordinal":3,"seat":"QA_SCHEMA_ATTESTATION","authority":"QA_ARCHITECT","qualifier":"SECURITY","scope":"SCHEMA_FIXTURES_AND_FAIL_CLOSED_CODES","productionAttestation":null,"status":"PRODUCTION_ATTESTATION_ABSENT"},{"ordinal":4,"seat":"ARCHITECTURE_ROLLBACK_ATTESTATION","authority":"GLOBAL_ARCHITECT","qualifier":"PLATFORM_SRE","scope":"ROLLBACK_AND_GENERATION_TRANSITION","productionAttestation":null,"status":"PRODUCTION_ATTESTATION_ABSENT"}],"lifecycleMatrix":[{"ordinal":1,"state":"DRAFT","productionObserved":false},{"ordinal":2,"state":"ROOTS_BOUND","productionObserved":false},{"ordinal":3,"state":"CONFIGS_BOUND","productionObserved":false},{"ordinal":4,"state":"ROLLBACK_BOUND","productionObserved":false},{"ordinal":5,"state":"REVOCATION_BOUND","productionObserved":false},{"ordinal":6,"state":"ATTESTED","productionObserved":false},{"ordinal":7,"state":"SEALED_FIXTURE","productionObserved":false},{"ordinal":8,"state":"PRODUCTION_DENIED","productionObserved":true}],"bundleFieldMatrix":[{"ordinal":1,"field":"schemaVersion","classification":"IDENTITY_BINDING","observed":false},{"ordinal":2,"field":"bundleId","classification":"IDENTITY_BINDING","observed":false},{"ordinal":3,"field":"upstreamContractId","classification":"IDENTITY_BINDING","observed":false},{"ordinal":4,"field":"upstreamContractDigest","classification":"DIGEST_BINDING","observed":false},{"ordinal":5,"field":"sourceRevision","classification":"IDENTITY_BINDING","observed":false},{"ordinal":6,"field":"environment","classification":"IDENTITY_BINDING","observed":false},{"ordinal":7,"field":"trustRootGeneration","classification":"IDENTITY_BINDING","observed":false},{"ordinal":8,"field":"trustRootManifestDigest","classification":"DIGEST_BINDING","observed":false},{"ordinal":9,"field":"trustRootKeyRefsDigest","classification":"DIGEST_BINDING","observed":false},{"ordinal":10,"field":"configurationSetDigest","classification":"DIGEST_BINDING","observed":false},{"ordinal":11,"field":"rollbackBundleId","classification":"RECOVERY_BINDING","observed":false},{"ordinal":12,"field":"rollbackBundleDigest","classification":"DIGEST_BINDING","observed":false},{"ordinal":13,"field":"revocationRef","classification":"RECOVERY_BINDING","observed":false},{"ordinal":14,"field":"revocationSnapshotDigest","classification":"DIGEST_BINDING","observed":false},{"ordinal":15,"field":"custodyPolicyDigest","classification":"DIGEST_BINDING","observed":false},{"ordinal":16,"field":"authorityPolicyDigest","classification":"DIGEST_BINDING","observed":false},{"ordinal":17,"field":"issuedAt","classification":"TIME_BINDING","observed":false},{"ordinal":18,"field":"expiresAt","classification":"TIME_BINDING","observed":false},{"ordinal":19,"field":"signatureAlgorithm","classification":"CRYPTO_BINDING","observed":false},{"ordinal":20,"field":"signerAuthority","classification":"IDENTITY_BINDING","observed":false},{"ordinal":21,"field":"signerKeyRef","classification":"CRYPTO_BINDING","observed":false},{"ordinal":22,"field":"challengeDigest","classification":"DIGEST_BINDING","observed":false},{"ordinal":23,"field":"nonceReservationDigest","classification":"DIGEST_BINDING","observed":false},{"ordinal":24,"field":"attestationsDigest","classification":"DIGEST_BINDING","observed":false},{"ordinal":25,"field":"canonicalPayloadDigest","classification":"DIGEST_BINDING","observed":false},{"ordinal":26,"field":"signature","classification":"CRYPTO_BINDING","observed":false}],"fixtureResults":[{"ordinal":1,"id":"VCB-001","scenario":"complete fixture bundle binds roots, configurations, rollback and attestations","expectedCode":"TEST_ONLY_CONFIGURATION_BUNDLE_SEALED","actualCode":"TEST_ONLY_CONFIGURATION_BUNDLE_SEALED","terminal":"SEALED_FIXTURE","passed":true,"failedStage":null,"rootsVerified":3,"configurationsVerified":8,"attestationsVerified":4,"productionReady":false},{"ordinal":2,"id":"VCB-002","scenario":"upstream verifier adapter contract is absent","expectedCode":"UPSTREAM_VERIFIER_ADAPTER_CONTRACT_UNAVAILABLE","actualCode":"UPSTREAM_VERIFIER_ADAPTER_CONTRACT_UNAVAILABLE","terminal":"DENIED","passed":true,"failedStage":null,"rootsVerified":0,"configurationsVerified":0,"attestationsVerified":0,"productionReady":false},{"ordinal":3,"id":"VCB-003","scenario":"configuration bundle is absent","expectedCode":"PRODUCTION_CONFIGURATION_BUNDLE_ABSENT","actualCode":"PRODUCTION_CONFIGURATION_BUNDLE_ABSENT","terminal":"DENIED","passed":true,"failedStage":null,"rootsVerified":0,"configurationsVerified":0,"attestationsVerified":0,"productionReady":false},{"ordinal":4,"id":"VCB-004","scenario":"envelope contains an extra field","expectedCode":"CONFIGURATION_BUNDLE_FIELDS_INVALID","actualCode":"CONFIGURATION_BUNDLE_FIELDS_INVALID","terminal":"DENIED","passed":true,"failedStage":"ENVELOPE","rootsVerified":0,"configurationsVerified":0,"attestationsVerified":0,"productionReady":false},{"ordinal":5,"id":"VCB-005","scenario":"upstream contract identity drifts","expectedCode":"VERIFIER_ADAPTER_CONTRACT_ID_MISMATCH","actualCode":"VERIFIER_ADAPTER_CONTRACT_ID_MISMATCH","terminal":"DENIED","passed":true,"failedStage":"UPSTREAM","rootsVerified":0,"configurationsVerified":0,"attestationsVerified":0,"productionReady":false},{"ordinal":6,"id":"VCB-006","scenario":"upstream contract digest drifts","expectedCode":"VERIFIER_ADAPTER_CONTRACT_DIGEST_MISMATCH","actualCode":"VERIFIER_ADAPTER_CONTRACT_DIGEST_MISMATCH","terminal":"DENIED","passed":true,"failedStage":"UPSTREAM","rootsVerified":0,"configurationsVerified":0,"attestationsVerified":0,"productionReady":false},{"ordinal":7,"id":"VCB-007","scenario":"source revision is not an exact Git SHA","expectedCode":"SOURCE_REVISION_INVALID","actualCode":"SOURCE_REVISION_INVALID","terminal":"DENIED","passed":true,"failedStage":"IDENTITY","rootsVerified":0,"configurationsVerified":0,"attestationsVerified":0,"productionReady":false},{"ordinal":8,"id":"VCB-008","scenario":"bundle environment is staging","expectedCode":"PRODUCTION_BUNDLE_ENVIRONMENT_REQUIRED","actualCode":"PRODUCTION_BUNDLE_ENVIRONMENT_REQUIRED","terminal":"DENIED","passed":true,"failedStage":"IDENTITY","rootsVerified":0,"configurationsVerified":0,"attestationsVerified":0,"productionReady":false},{"ordinal":9,"id":"VCB-009","scenario":"trust-root generation is empty","expectedCode":"TRUST_ROOT_GENERATION_REQUIRED","actualCode":"TRUST_ROOT_GENERATION_REQUIRED","terminal":"DENIED","passed":true,"failedStage":"TRUST_ROOTS","rootsVerified":0,"configurationsVerified":0,"attestationsVerified":0,"productionReady":false},{"ordinal":10,"id":"VCB-010","scenario":"one trust root is missing","expectedCode":"TRUST_ROOT_CARDINALITY_INVALID","actualCode":"TRUST_ROOT_CARDINALITY_INVALID","terminal":"DENIED","passed":true,"failedStage":"TRUST_ROOTS","rootsVerified":0,"configurationsVerified":0,"attestationsVerified":0,"productionReady":false},{"ordinal":11,"id":"VCB-011","scenario":"trust roots are reordered","expectedCode":"TRUST_ROOT_ORDER_INVALID","actualCode":"TRUST_ROOT_ORDER_INVALID","terminal":"DENIED","passed":true,"failedStage":"TRUST_ROOTS","rootsVerified":0,"configurationsVerified":0,"attestationsVerified":0,"productionReady":false},{"ordinal":12,"id":"VCB-012","scenario":"trust-root identity is reused","expectedCode":"TRUST_ROOT_ID_REUSED","actualCode":"TRUST_ROOT_ID_REUSED","terminal":"DENIED","passed":true,"failedStage":"TRUST_ROOTS","rootsVerified":0,"configurationsVerified":0,"attestationsVerified":0,"productionReady":false},{"ordinal":13,"id":"VCB-013","scenario":"trust root exposes an untyped key","expectedCode":"TRUST_ROOT_KEYREF_INVALID","actualCode":"TRUST_ROOT_KEYREF_INVALID","terminal":"DENIED","passed":true,"failedStage":"TRUST_ROOTS","rootsVerified":0,"configurationsVerified":0,"attestationsVerified":0,"productionReady":false},{"ordinal":14,"id":"VCB-014","scenario":"trust root permits signing","expectedCode":"TRUST_ROOT_USAGE_INVALID","actualCode":"TRUST_ROOT_USAGE_INVALID","terminal":"DENIED","passed":true,"failedStage":"TRUST_ROOTS","rootsVerified":0,"configurationsVerified":0,"attestationsVerified":0,"productionReady":false},{"ordinal":15,"id":"VCB-015","scenario":"trust-root owner differs from policy","expectedCode":"TRUST_ROOT_OWNER_MISMATCH","actualCode":"TRUST_ROOT_OWNER_MISMATCH","terminal":"DENIED","passed":true,"failedStage":"TRUST_ROOTS","rootsVerified":0,"configurationsVerified":0,"attestationsVerified":0,"productionReady":false},{"ordinal":16,"id":"VCB-016","scenario":"one configuration binding is missing","expectedCode":"CONFIGURATION_BINDING_CARDINALITY_INVALID","actualCode":"CONFIGURATION_BINDING_CARDINALITY_INVALID","terminal":"DENIED","passed":true,"failedStage":"CONFIGURATION","rootsVerified":3,"configurationsVerified":0,"attestationsVerified":0,"productionReady":false},{"ordinal":17,"id":"VCB-017","scenario":"configuration bindings are reordered","expectedCode":"CONFIGURATION_BINDING_ORDER_INVALID","actualCode":"CONFIGURATION_BINDING_ORDER_INVALID","terminal":"DENIED","passed":true,"failedStage":"CONFIGURATION","rootsVerified":3,"configurationsVerified":0,"attestationsVerified":0,"productionReady":false},{"ordinal":18,"id":"VCB-018","scenario":"configuration slot is reused","expectedCode":"CONFIGURATION_SLOT_REUSED","actualCode":"CONFIGURATION_SLOT_REUSED","terminal":"DENIED","passed":true,"failedStage":"CONFIGURATION","rootsVerified":3,"configurationsVerified":0,"attestationsVerified":0,"productionReady":false},{"ordinal":19,"id":"VCB-019","scenario":"configuration reference is not typed","expectedCode":"CONFIGURATION_REFERENCE_INVALID","actualCode":"CONFIGURATION_REFERENCE_INVALID","terminal":"DENIED","passed":true,"failedStage":"CONFIGURATION","rootsVerified":3,"configurationsVerified":0,"attestationsVerified":0,"productionReady":false},{"ordinal":20,"id":"VCB-020","scenario":"configuration digest is malformed","expectedCode":"CONFIGURATION_BINDING_DIGEST_INVALID","actualCode":"CONFIGURATION_BINDING_DIGEST_INVALID","terminal":"DENIED","passed":true,"failedStage":"CONFIGURATION","rootsVerified":3,"configurationsVerified":0,"attestationsVerified":0,"productionReady":false},{"ordinal":21,"id":"VCB-021","scenario":"configuration owner differs from policy","expectedCode":"CONFIGURATION_OWNER_MISMATCH","actualCode":"CONFIGURATION_OWNER_MISMATCH","terminal":"DENIED","passed":true,"failedStage":"CONFIGURATION","rootsVerified":3,"configurationsVerified":0,"attestationsVerified":0,"productionReady":false},{"ordinal":22,"id":"VCB-022","scenario":"configuration version is empty","expectedCode":"CONFIGURATION_VERSION_REQUIRED","actualCode":"CONFIGURATION_VERSION_REQUIRED","terminal":"DENIED","passed":true,"failedStage":"CONFIGURATION","rootsVerified":3,"configurationsVerified":0,"attestationsVerified":0,"productionReady":false},{"ordinal":23,"id":"VCB-023","scenario":"configuration-set digest is wrong","expectedCode":"CONFIGURATION_SET_DIGEST_MISMATCH","actualCode":"CONFIGURATION_SET_DIGEST_MISMATCH","terminal":"DENIED","passed":true,"failedStage":"DIGESTS","rootsVerified":3,"configurationsVerified":8,"attestationsVerified":0,"productionReady":false},{"ordinal":24,"id":"VCB-024","scenario":"trust-root manifest digest is wrong","expectedCode":"TRUST_ROOT_MANIFEST_DIGEST_MISMATCH","actualCode":"TRUST_ROOT_MANIFEST_DIGEST_MISMATCH","terminal":"DENIED","passed":true,"failedStage":"DIGESTS","rootsVerified":3,"configurationsVerified":8,"attestationsVerified":0,"productionReady":false},{"ordinal":25,"id":"VCB-025","scenario":"rollback bundle identity is missing","expectedCode":"ROLLBACK_BUNDLE_ID_REQUIRED","actualCode":"ROLLBACK_BUNDLE_ID_REQUIRED","terminal":"DENIED","passed":true,"failedStage":"ROLLBACK","rootsVerified":3,"configurationsVerified":8,"attestationsVerified":0,"productionReady":false},{"ordinal":26,"id":"VCB-026","scenario":"rollback bundle digest is malformed","expectedCode":"ROLLBACK_BUNDLE_DIGEST_INVALID","actualCode":"ROLLBACK_BUNDLE_DIGEST_INVALID","terminal":"DENIED","passed":true,"failedStage":"ROLLBACK","rootsVerified":3,"configurationsVerified":8,"attestationsVerified":0,"productionReady":false},{"ordinal":27,"id":"VCB-027","scenario":"revocation reference is not typed","expectedCode":"BUNDLE_REVOCATION_REF_INVALID","actualCode":"BUNDLE_REVOCATION_REF_INVALID","terminal":"DENIED","passed":true,"failedStage":"REVOCATION","rootsVerified":3,"configurationsVerified":8,"attestationsVerified":0,"productionReady":false},{"ordinal":28,"id":"VCB-028","scenario":"revocation snapshot digest is malformed","expectedCode":"BUNDLE_REVOCATION_DIGEST_INVALID","actualCode":"BUNDLE_REVOCATION_DIGEST_INVALID","terminal":"DENIED","passed":true,"failedStage":"REVOCATION","rootsVerified":3,"configurationsVerified":8,"attestationsVerified":0,"productionReady":false},{"ordinal":29,"id":"VCB-029","scenario":"configuration bundle is expired","expectedCode":"CONFIGURATION_BUNDLE_EXPIRED","actualCode":"CONFIGURATION_BUNDLE_EXPIRED","terminal":"DENIED","passed":true,"failedStage":"TIME","rootsVerified":3,"configurationsVerified":8,"attestationsVerified":0,"productionReady":false},{"ordinal":30,"id":"VCB-030","scenario":"configuration bundle was issued in the future","expectedCode":"CONFIGURATION_BUNDLE_FROM_FUTURE","actualCode":"CONFIGURATION_BUNDLE_FROM_FUTURE","terminal":"DENIED","passed":true,"failedStage":"TIME","rootsVerified":3,"configurationsVerified":8,"attestationsVerified":0,"productionReady":false},{"ordinal":31,"id":"VCB-031","scenario":"bundle signature algorithm is not P-256","expectedCode":"CONFIGURATION_BUNDLE_SIGNATURE_ALGORITHM_MISMATCH","actualCode":"CONFIGURATION_BUNDLE_SIGNATURE_ALGORITHM_MISMATCH","terminal":"DENIED","passed":true,"failedStage":"SIGNATURE","rootsVerified":3,"configurationsVerified":8,"attestationsVerified":0,"productionReady":false},{"ordinal":32,"id":"VCB-032","scenario":"one independent attestation is missing","expectedCode":"BUNDLE_ATTESTATION_CARDINALITY_INVALID","actualCode":"BUNDLE_ATTESTATION_CARDINALITY_INVALID","terminal":"DENIED","passed":true,"failedStage":"ATTESTATIONS","rootsVerified":3,"configurationsVerified":8,"attestationsVerified":0,"productionReady":false},{"ordinal":33,"id":"VCB-033","scenario":"attestation seats are reordered","expectedCode":"BUNDLE_ATTESTATION_ORDER_INVALID","actualCode":"BUNDLE_ATTESTATION_ORDER_INVALID","terminal":"DENIED","passed":true,"failedStage":"ATTESTATIONS","rootsVerified":3,"configurationsVerified":8,"attestationsVerified":0,"productionReady":false},{"ordinal":34,"id":"VCB-034","scenario":"attestation authority self-qualifies","expectedCode":"INDEPENDENT_BUNDLE_ATTESTATION_REQUIRED","actualCode":"INDEPENDENT_BUNDLE_ATTESTATION_REQUIRED","terminal":"DENIED","passed":true,"failedStage":"ATTESTATIONS","rootsVerified":3,"configurationsVerified":8,"attestationsVerified":0,"productionReady":false},{"ordinal":35,"id":"VCB-035","scenario":"one attestation signature is unverified","expectedCode":"BUNDLE_ATTESTATION_SIGNATURE_UNVERIFIED","actualCode":"BUNDLE_ATTESTATION_SIGNATURE_UNVERIFIED","terminal":"DENIED","passed":true,"failedStage":"ATTESTATIONS","rootsVerified":3,"configurationsVerified":8,"attestationsVerified":0,"productionReady":false},{"ordinal":36,"id":"VCB-036","scenario":"bundle sealing challenge is missing","expectedCode":"BUNDLE_CHALLENGE_REQUIRED","actualCode":"BUNDLE_CHALLENGE_REQUIRED","terminal":"DENIED","passed":true,"failedStage":"CHALLENGE","rootsVerified":3,"configurationsVerified":8,"attestationsVerified":4,"productionReady":false},{"ordinal":37,"id":"VCB-037","scenario":"bundle nonce reservation has a concurrent winner","expectedCode":"BUNDLE_NONCE_RESERVATION_CONFLICT","actualCode":"BUNDLE_NONCE_RESERVATION_CONFLICT","terminal":"DENIED","passed":true,"failedStage":"NONCE","rootsVerified":3,"configurationsVerified":8,"attestationsVerified":4,"productionReady":false},{"ordinal":38,"id":"VCB-038","scenario":"canonical payload digest is wrong","expectedCode":"CANONICAL_BUNDLE_DIGEST_MISMATCH","actualCode":"CANONICAL_BUNDLE_DIGEST_MISMATCH","terminal":"DENIED","passed":true,"failedStage":"CANONICALIZATION","rootsVerified":3,"configurationsVerified":8,"attestationsVerified":4,"productionReady":false},{"ordinal":39,"id":"VCB-039","scenario":"bundle signature is unverified","expectedCode":"CONFIGURATION_BUNDLE_SIGNATURE_UNVERIFIED","actualCode":"CONFIGURATION_BUNDLE_SIGNATURE_UNVERIFIED","terminal":"DENIED","passed":true,"failedStage":"SIGNATURE","rootsVerified":3,"configurationsVerified":8,"attestationsVerified":4,"productionReady":false},{"ordinal":40,"id":"VCB-040","scenario":"fixture bundle is presented to production loader","expectedCode":"PRODUCTION_CONFIGURATION_BUNDLE_LOADER_NOT_CONFIGURED","actualCode":"PRODUCTION_CONFIGURATION_BUNDLE_LOADER_NOT_CONFIGURED","terminal":"DENIED","passed":true,"failedStage":"PRODUCTION","rootsVerified":3,"configurationsVerified":8,"attestationsVerified":4,"productionReady":false}],"selectedDenialTrace":{"ordinal":37,"id":"VCB-037","scenario":"bundle nonce reservation has a concurrent winner","expectedCode":"BUNDLE_NONCE_RESERVATION_CONFLICT","actualCode":"BUNDLE_NONCE_RESERVATION_CONFLICT","terminal":"DENIED","passed":true,"failedStage":"NONCE","rootsVerified":3,"configurationsVerified":8,"attestationsVerified":4,"productionReady":false},"decisionCodes":["TEST_ONLY_CONFIGURATION_BUNDLE_SEALED","UPSTREAM_VERIFIER_ADAPTER_CONTRACT_UNAVAILABLE","PRODUCTION_CONFIGURATION_BUNDLE_ABSENT","CONFIGURATION_BUNDLE_FIELDS_INVALID","VERIFIER_ADAPTER_CONTRACT_ID_MISMATCH","VERIFIER_ADAPTER_CONTRACT_DIGEST_MISMATCH","SOURCE_REVISION_INVALID","PRODUCTION_BUNDLE_ENVIRONMENT_REQUIRED","TRUST_ROOT_GENERATION_REQUIRED","TRUST_ROOT_CARDINALITY_INVALID","TRUST_ROOT_ORDER_INVALID","TRUST_ROOT_ID_REUSED","TRUST_ROOT_KEYREF_INVALID","TRUST_ROOT_USAGE_INVALID","TRUST_ROOT_OWNER_MISMATCH","CONFIGURATION_BINDING_CARDINALITY_INVALID","CONFIGURATION_BINDING_ORDER_INVALID","CONFIGURATION_SLOT_REUSED","CONFIGURATION_REFERENCE_INVALID","CONFIGURATION_BINDING_DIGEST_INVALID","CONFIGURATION_OWNER_MISMATCH","CONFIGURATION_VERSION_REQUIRED","CONFIGURATION_SET_DIGEST_MISMATCH","TRUST_ROOT_MANIFEST_DIGEST_MISMATCH","ROLLBACK_BUNDLE_ID_REQUIRED","ROLLBACK_BUNDLE_DIGEST_INVALID","BUNDLE_REVOCATION_REF_INVALID","BUNDLE_REVOCATION_DIGEST_INVALID","CONFIGURATION_BUNDLE_EXPIRED","CONFIGURATION_BUNDLE_FROM_FUTURE","CONFIGURATION_BUNDLE_SIGNATURE_ALGORITHM_MISMATCH","BUNDLE_ATTESTATION_CARDINALITY_INVALID","BUNDLE_ATTESTATION_ORDER_INVALID","INDEPENDENT_BUNDLE_ATTESTATION_REQUIRED","BUNDLE_ATTESTATION_SIGNATURE_UNVERIFIED","BUNDLE_CHALLENGE_REQUIRED","BUNDLE_NONCE_RESERVATION_CONFLICT","CANONICAL_BUNDLE_DIGEST_MISMATCH","CONFIGURATION_BUNDLE_SIGNATURE_UNVERIFIED","PRODUCTION_CONFIGURATION_BUNDLE_LOADER_NOT_CONFIGURED"],"invariants":["EXACT_CUT_18_VERIFIER_ADAPTER_CONTRACT_IS_REQUIRED","BUNDLE_FIELDS_ARE_EXACT_AND_CANONICAL","THREE_ORDERED_TRUST_ROOTS_ARE_REQUIRED","TRUST_ROOT_IDENTITIES_ARE_UNIQUE","TRUST_ROOT_KEYS_ARE_KEYREFS_NOT_KEY_MATERIAL","TRUST_ROOT_KEYS_ARE_VERIFY_ONLY","TRUST_ROOT_OWNERS_MATCH_POLICY","TRUST_ROOT_GENERATION_IS_IMMUTABLE","EIGHT_ORDERED_CONFIGURATION_BINDINGS_ARE_REQUIRED","CONFIGURATION_SLOTS_ARE_UNIQUE","CONFIGURATION_REFS_ARE_TYPED","CONFIGURATION_DIGESTS_ARE_SHA256","CONFIGURATION_OWNERS_MATCH_CUT_18","CONFIGURATION_VERSIONS_ARE_EXPLICIT","CONFIGURATION_SET_DIGEST_BINDS_ALL_EIGHT_SLOTS","ROLLBACK_BUNDLE_ID_AND_DIGEST_ARE_REQUIRED","REVOCATION_REFERENCE_AND_SNAPSHOT_DIGEST_ARE_REQUIRED","BUNDLE_VALIDITY_IS_AT_MOST_TEN_MINUTES","ONLY_ECDSA_P256_SHA256_IS_ACCEPTED","FOUR_ORDERED_ATTESTATIONS_ARE_REQUIRED","ATTESTATION_AUTHORITIES_CANNOT_SELF_QUALIFY","EVERY_ATTESTATION_SIGNATURE_IS_VERIFIED","SEALING_CHALLENGE_IS_CONTENT_BOUND","NONCE_RESERVATION_HAS_ONE_WINNER","CANONICAL_PAYLOAD_DIGEST_IS_VERIFIED","BUNDLE_SIGNATURE_IS_VERIFIED_LAST","FIXTURE_ROOTS_CONFIGS_AND_SIGNATURES_NEVER_REACH_PRODUCTION","PRODUCTION_LOADER_FAILS_CLOSED_WHEN_UNCONFIGURED","NO_EXTERNAL_READ_OCCURS_IN_THIS_CONTRACT_EVALUATOR","NO_EXTERNAL_WRITE_OR_RESOURCE_CREATION_IS_PERMITTED"],"safetyTruth":{"trustRootsRequired":3,"configurationBindingsRequired":8,"attestationsRequired":4,"productionBundlesObserved":0,"productionTrustRootKeyRefs":0,"productionConfigurationBindings":0,"productionAttestations":0,"productionLoadersConfigured":0,"fixtureCases":40,"fixtureAccepted":1,"fixtureDenied":39,"fixtureAssertionsPassed":40,"privateKeysLoaded":0,"rawNoncesExposed":0,"rawSignaturesExposed":0,"externalReadsExecuted":0,"externalWritesExecuted":0,"ledgerWritesExecuted":0,"adapterFactoriesCreated":0,"portCallsExecuted":0,"resourcesCreated":0,"controllerListenerStarts":0,"paidResourcesCreated":false,"provisioningPermitted":false,"d05Accepted":false},"discovery":{"workbench":"/release-foundation#runner-controller-dossier-store-verifier-configuration-bundle","schema":"/schemas/runner-controller-dossier-store-verifier-configuration-bundle.v1.schema.json","verifierAdapters":"/api/runner-controller/dossier-store-verifier-adapters","healthEnvelopes":"/api/runner-controller/dossier-store-port-health-receipts","liveIdentity":"/api/release-unit"}}