{
  "schemaVersion": "1.0.0",
  "recordType": "eighth-independent-audit-remediation-closure",
  "dateUtc": "2026-08-26",
  "truthfulState": {
    "status": "blocked",
    "partnerReady": false,
    "pilotReady": false,
    "v2Default": true,
    "activeDesignPartners": 0,
    "networkActions": "none"
  },
  "findingClosures": [
    {
      "id": "H-01",
      "status": "closed-in-source",
      "controls": [
        "Seed opening must match a separately resolved candidate-bound domain-separated precommitment and rejects zero, repeated-byte, and low-diversity material.",
        "Challenge corpus is strict JSON Lines with exact fields, unique pair IDs, unique rows, unique nondegenerate input pairs, and exact test assignments.",
        "Command input is strict JSON bound to the canonical nontrivial runner blob at sourceCommit.",
        "Every transcript resolves a unique typed execution output; outcomes are derived from raw runner bytes and exact corpus rows.",
        "Execution evidence binds all input blobs, candidate, scope, source commit, tree, runner digest, timestamps, and an exact assigned independent-reviewer detached signature."
      ]
    },
    {
      "id": "M-01",
      "status": "closed-in-source",
      "controls": [
        "Human identity and legal registry roots require distinct paths, digests, root IDs, authority classes, administrator IDs, and Ed25519 public keys.",
        "Each signed registry summary resolves a unique external raw response JSON artifact and recomputes its byte digest.",
        "Raw response entity, issuer, query, status, and issue-time fields must exactly match the normalized signed response.",
        "responseId is domain-separated and derived from issuer ID, query reference, and raw response digest."
      ]
    },
    {
      "id": "M-02",
      "status": "closed-in-source",
      "controls": [
        "Every incident objective log now requires an outputPath paired with outputSha256.",
        "Each output resolves to a unique typed candidate-bound blob with exact participants, channels, objective, exercise, source, tree, scope, and ordered timestamps.",
        "Every assertion resolves a globally unique typed tracked JSON blob with objective-specific evidence type and recomputed nonempty raw-evidence digest."
      ]
    },
    {
      "id": "L-01",
      "status": "closed-in-source",
      "controls": [
        "The complete empirical-rate-plus-Hoeffding-margin expression is evaluated with Decimal precision 80.",
        "Exactly one ROUND_CEILING conversion is applied to the complete expression.",
        "The 1/15000 at 95 percent vector yields 101 basis points; monotonic boundary/property vectors are covered."
      ]
    }
  ],
  "focusedOutcomes": {
    "namedRegressions": 5,
    "focusedHarnessNormal": {
      "total": 29,
      "rejected": 29,
      "accepted": 0,
      "secure": 29
    },
    "focusedHarnessOptimized": {
      "total": 29,
      "rejected": 29,
      "accepted": 0,
      "secure": 29
    }
  },
  "verification": {
    "unitTestsNormal": {"passed": 183, "failed": 0},
    "unitTestsOptimized": {"passed": 183, "failed": 0},
    "strictJsonFiles": 56,
    "pythonFiles": 14,
    "packageGateRuns": 2,
    "organizationalGateRuns": 2,
    "deterministic": true,
    "diffCheck": "passed",
    "pycFiles": 0,
    "cacheDirectories": 0,
    "symlinks": 0
  },
  "sourceFiles": [
    {"path": "config/trust-root-policy.json", "sha256": "70b66981c5c45053b4018764ab4532824d7f8b4f2893a060b959e139681a4b98"},
    {"path": "config/legal-registry-trust-policy.json", "sha256": "58c2c3c72c19c3960dfc6af2b4037b625a883161194983dab43953639249f492"},
    {"path": "schemas/trust-root-policy.schema.json", "sha256": "11f0050893bfa95100dd57c45917a4bbbd04103865ec5abd282bc05a5066bb71"},
    {"path": "schemas/legal-registry-trust-policy.schema.json", "sha256": "4a5784ac0583276c6620f18614f027a10a4a6c701fba5ddfd5f3c4ecd32d7c8e"},
    {"path": "schemas/evidence/legal-entity-registry-response.schema.json", "sha256": "ab2233b6d149c9d9fe5f28c368f713ff44cc2b9870fd0c598a4df6274cc79342"},
    {"path": "schemas/evidence/legal-entity-raw-registry-response.schema.json", "sha256": "d0099cf8d325604cf2cb0790f9a038226015b4f7593da4883809c301a4b086ae"},
    {"path": "schemas/evidence/incident-objective-log.schema.json", "sha256": "bf23f2aaeb47b706deab4810fc1baed6e51861976f200fb852c525a684d260cd"},
    {"path": "schemas/evidence/incident-objective-output.schema.json", "sha256": "23a3e05aab0732679c6b73c0e556a35249ef063216d861c8b02ce09adb37a067"},
    {"path": "schemas/evidence/incident-assertion-evidence.schema.json", "sha256": "ffd13e3335baaef342a89686d869b07c5ba7dcf6fd6b51b48ebbd7e2a20e107a"},
    {"path": "schemas/evidence/privacy-unlinkability-methodology-input.schema.json", "sha256": "2892bc5a9ea11d3ceaa970801834885881fccdd7434216af5abcb1fc0a8b80c6"},
    {"path": "schemas/evidence/privacy-unlinkability-transcript.schema.json", "sha256": "6061ec570da59ee169de21d16adf1130397da03b7a7c3c1a2d8f5942cfa8d29f"},
    {"path": "schemas/evidence/unlinkability-test-results.schema.json", "sha256": "e751f456d341148eeeb3df96e43c20c437b0f099fc1acb12743de6e756589eac"},
    {"path": "schemas/evidence/privacy-unlinkability-seed-commitment.schema.json", "sha256": "d34eb9a9e3133c9d8ba6fd10b0a22b7132ec3183ebfa33e228ed02807514f4f1"},
    {"path": "schemas/evidence/privacy-unlinkability-execution-output.schema.json", "sha256": "e7830b6419ca8a7cb15ac8713f3020db35546568fc58d925d25cea1d6e5ce200"},
    {"path": "scripts/check_organizational_readiness.py", "sha256": "29b2c8ce1b7b78d52ff79fabae5812ae5967ad1ebd8cee2ec99f31707c7970b4"},
    {"path": "scripts/validate_partner_package.py", "sha256": "f203fa962f9c29a325d3ab521b9877fae5e00caac861ff5f18a8ac8d3e2bde5d"},
    {"path": "scripts/run_unlinkability_protocol.py", "sha256": "4dd68ff7ed739e145ca3bf0c8387e53cbf5b0dd09f63245674d7e8a0619bd2ca"},
    {"path": "tests/test_eighth_generation_audit.py", "sha256": "6de615166240cbf7e989bf481a77370e58bf2d611dd97aab4f72694986a894ba"}
  ],
  "externalBlockers": [
    "ACTUAL-CONTACTS",
    "AUTHORIZED-SIGNATORY",
    "CHANGE-RACI-ACCEPTANCE",
    "COMMERCIAL-AGREEMENT",
    "COUNSEL-SIGNOFF",
    "INCIDENT-PLAN-ACCEPTANCE",
    "INSURANCE",
    "LEGAL-ENTITY",
    "PARTNER-ACCEPTANCE",
    "PRIVACY-SIGNOFF",
    "ROLE-ASSIGNMENTS",
    "SECURITY-POLICY-ACCEPTANCE",
    "SIGNATURES",
    "SUPPORT-SLA-SELECTION",
    "A genuine independently administered human-identity root and administrator",
    "A separate genuine independently administered legal-registry root and administrator",
    "Candidate-bound exact-commit unlinkability execution and independent-review signature",
    "Candidate-bound incident outputs and typed assertion evidence"
  ],
  "claimsNotMade": [
    "No legal advice",
    "No partner acceptance",
    "No audit certification",
    "No entity formation",
    "No deployment",
    "No signing"
  ]
}
