{
  "schemaVersion": "1.0.0",
  "audit": "thirteenth-independent-audit",
  "scope": "M1-M3 only",
  "status": "remediated-locally-read-only-readiness-remains-blocked",
  "findings": {
    "M1": {
      "status": "closed",
      "controls": [
        "absolute traversal begins at a trusted root descriptor",
        "every ancestor is lstat-opened with no-follow and matched by device and inode",
        "runtime trees are walked and hashed through held descriptors",
        "canonical candidate, toolchain, standard-library, and dynamic-library paths reject ancestor aliases",
        "runtime objects are revalidated after isolated execution"
      ]
    },
    "M2": {
      "status": "closed",
      "controls": [
        "exclusive directory lock serializes cooperating publishers",
        "the original channel dirfd is held for the complete publication",
        "requested path device and inode are checked before staging, after parent creation, before generation rename, before pointer rename, and after pointer fsync",
        "a detached publication fails and restores the prior pointer/removes the new generation"
      ]
    },
    "M3": {
      "status": "closed-with-explicit-local-policy-limit",
      "controls": [
        "artifact files finalize mode 0400 and generation directories finalize mode 0500",
        "files and directories are fsynced before pointer selection",
        "publisher and checker validate ownership, link count, inode identity, digest, and absence of write bits",
        "checker rejects writable or mutated generations"
      ],
      "limitation": "Ordinary permissions do not prevent the owning account or root from changing permissions or bytes. Signed candidate-bound content-addressed verification remains authoritative; no stronger machine-immutability claim is made."
    }
  },
  "verification": {
    "focusedRegressionsNormal": {
      "passed": 5,
      "failed": 0
    },
    "focusedRegressionsOptimized": {
      "passed": 5,
      "failed": 0
    },
    "fullSuiteNormal": {
      "passed": 309,
      "failed": 0,
      "sha256": "72d9fd31abde78c741ac589964b14976261bcf6af257f10b06e3e2e7bf780240"
    },
    "fullSuiteOptimized": {
      "passed": 309,
      "failed": 0,
      "sha256": "3c027882814fbd6cd19ef22fc7846f3fe8e39a158b9eebb36d62129da2d72001"
    },
    "originalHarnessReplay": {
      "secure": 22,
      "insecure": 0,
      "sha256": "a4d7f2e8f60decab8ade97f1417bf8c9670d289f7b6ebe59ffa8d0d2b385517a"
    },
    "schemaJsonFiles": 41,
    "strictJsonFilesParsed": 84,
    "pythonFilesAstParsed": 19,
    "validatorDeterministic": true,
    "validatorSha256": "3a9a1727cc38b1f50b6eb0a7d9714b3a2519a393470e3cd4e14b48f3addfee61",
    "diffCheck": "pass",
    "packageCacheCheck": "pass"
  },
  "readiness": {
    "partnerReady": false,
    "pilotReady": false,
    "organizationalStatus": "blocked",
    "v2Default": true,
    "activeDesignPartners": 0,
    "networkActions": "none"
  },
  "changedImplementationDigests": {
    "scripts/run_unlinkability_protocol.py": "9e5cef4111b277c1e25455c2aa943e8d06b07d3ead872aa0b324cd4dc109fcfc",
    "scripts/check_organizational_readiness.py": "f383228a39f22ae10f02259f968add7cf70bd962af6c6dcc8a16567cd70464e8",
    "tests/test_thirteenth_generation_audit.py": "7bb05f28cdc36755c69e6bea6e3d169d0fed3a9159b5b271c6da82b315af4893"
  },
  "remainingBlockerCount": 25,
  "remainingHumanBlockerCount": 14,
  "remainingBlockers": [
    "LEGAL-ENTITY",
    "AUTHORIZED-SIGNATORY",
    "ACTUAL-CONTACTS",
    "INSURANCE",
    "COUNSEL-SIGNOFF",
    "PRIVACY-SIGNOFF",
    "PARTNER-ACCEPTANCE",
    "ROLE-ASSIGNMENTS",
    "COMMERCIAL-AGREEMENT",
    "SIGNATURES",
    "SECURITY-POLICY-ACCEPTANCE",
    "INCIDENT-PLAN-ACCEPTANCE",
    "SUPPORT-SLA-SELECTION",
    "CHANGE-RACI-ACCEPTANCE",
    "CANDIDATE-BINDING",
    "CANONICAL-OPERATIONS",
    "EXACT-COMMIT-TESTS",
    "MODULE-ROLLOUT",
    "BOUNDED-LIABILITIES",
    "PULL-PAYMENTS",
    "FAIL-CLOSED-APIS",
    "PRIVACY-CROSS-CHAIN",
    "IMMUTABLE-EVIDENCE",
    "PAUSE-SAFE-EXITS",
    "PROTECTED-DECISION-INPUTS"
  ]
}
