{
  "schemaVersion": "developer.reits.tech/auth-four-lane-readback-dispatch/v1",
  "dispatchId": "D05-C02-F05-03-FOUR-LANE-READBACK-DISPATCH",
  "baselineBinding": { "baselineId": "D05-C02-F05-02-CURRENT-BASELINE-EVIDENCE-PACK", "revision": "3967686c7e7fc0e4ccf738ca63139a41b5057a82", "service": "reits-auth", "loopbackAddress": "127.0.0.1", "loopbackPort": 8095, "candidateObservedAt": "2026-08-09T08:05:15Z" },
  "lane": {
    "id": "SECURITY", "sequence": 2, "ownerRole": "Security Owner", "subjectRealm": "security-owner-realm", "controlDomain": "security-verification-control",
    "tasks": [
      { "id": "SECURITY_TOKEN_ALGORITHM_SEPARATION", "title": "独立证明 Access Token 与 OIDC ID Token 算法分轨", "instruction": "核对 Access Token 为 HS256/k21-20260717-a，OIDC ID Token 为 RS256/reits-auth-oidc-20260806-1；不得把两类 Token 混写。", "expectedEvidenceClass": "TOKEN_ALGORITHM_READBACK", "state": "NOT_EXECUTED" },
      { "id": "SECURITY_JWKS_ENDPOINT_NEGATIVE", "title": "核对 JWKS、公开端点与未授权负向响应", "instruction": "只读重采 discovery、JWKS 与 userinfo；记录 JWKS 单 RSA sig key，并验证未授权 userinfo 失败关闭，不记录原始 Token。", "expectedEvidenceClass": "JWKS_ENDPOINT_NEGATIVE_READBACK", "state": "NOT_EXECUTED" }
    ]
  },
  "expectedOutput": { "independentReadbackRef": null, "signedReceiptRef": null, "completedAt": null },
  "execution": { "dispatched": false, "externalRunObserved": false, "productionMutationRequested": false },
  "boundary": { "containsSecrets": false, "containsPrivateIdentity": false, "portalAcceptsUploads": false, "portalSigns": false, "g03Requalified": false, "formalProgressChanged": false }
}