Agent Action Assurance
Offline synthetic reference, version 1.0.0
UNVERIFIED_EXTERNAL. Unsigned evidence.Suite results describe expected harness assertions. Included evidence deliberately retains detected gaps and invalid chains. No customer-system safety or compliance verdict.
Run 20261027T023616604Z-5e4b5e13-9554-4bbc-9be5-8250fe6af0b6
Actual UTC generation: 2026-10-27T02:36:16.604Z
Actual UTC completion: 2026-10-27T02:36:16.697Z
Runtime v24.19.0 on win32
SYNTHETIC_REFERENCE · model NONE · SYNTHETIC_OPERATOR_FIXTURE
Outer content integrity: MATCH. Internal evidence reconciliation: INVALID.
Suite PASS: 20 passed, 0 failed, 0 untested, 0 unavailable, 20 scenarios. Mutants detected: 6 of 6.
Artifact bindings
Source manifest SHA-256: e83ac064405202ce3e60310317d6cfb76d6d8ee5c4c8c5a86d3fc7864248b337
Exact report.json SHA-256: e3a0dec625e08d2872d1933e4e4f89bb3136fd4bd19a1ec4910a8f4ceb8bf0cb
Canonical payload SHA-256: 1695e1995f47c52226a7758f518491e8f536af3907556e12bedad1ff181dc656
Controls and retained evidence
AAA-01: Assigned review
Assertion result: PASS. Evidence state: COMPLETE. 3 known attempts; 3 retained events.
Conditions: AAA-01.assigned, AAA-01.assigned.clock.0
Simulation clocks (milliseconds since fixture creation): AAA-01.assigned=0
| Finding | Status | Expected | Observed |
|---|
| AAA-01.assigned.INVOCATION_RESULTS | PASS | PROJECTED, PROJECTED, PROJECTED | PROJECTED, PROJECTED, PROJECTED |
| AAA-01.assigned.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-01.assigned.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-01.assigned.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-01.assigned.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 4 explicit setup/boundary checks; independent outcomes and effects checked |
AAA-02: Scope and identity
Assertion result: PASS. Evidence state: COMPLETE. 5 known attempts; 5 retained events.
Conditions: AAA-02.case_scope, AAA-02.case_scope.clock.0, AAA-02.tenant_scope, AAA-02.tenant_scope.clock.0, AAA-02.audience, AAA-02.audience.clock.0, AAA-02.identity_expiry, AAA-02.identity_expiry.clock.60000, AAA-02.identity_spoof, AAA-02.identity_spoof.clock.0
Simulation clocks (milliseconds since fixture creation): AAA-02.audience=0; AAA-02.case_scope=0; AAA-02.identity_expiry=60000; AAA-02.identity_spoof=0; AAA-02.tenant_scope=0
| Finding | Status | Expected | Observed |
|---|
| AAA-02.case_scope.INVOCATION_RESULTS | PASS | CASE_SCOPE | CASE_SCOPE |
| AAA-02.case_scope.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-02.case_scope.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-02.case_scope.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-02.case_scope.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 2 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-02.tenant_scope.INVOCATION_RESULTS | PASS | CASE_SCOPE | CASE_SCOPE |
| AAA-02.tenant_scope.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-02.tenant_scope.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-02.tenant_scope.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-02.tenant_scope.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 2 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-02.audience.INVOCATION_RESULTS | PASS | WRONG_AUDIENCE | WRONG_AUDIENCE |
| AAA-02.audience.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-02.audience.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-02.audience.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-02.audience.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 2 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-02.identity_expiry.INVOCATION_RESULTS | PASS | WORKLOAD_EXPIRED | WORKLOAD_EXPIRED |
| AAA-02.identity_expiry.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-02.identity_expiry.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-02.identity_expiry.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-02.identity_expiry.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 2 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-02.identity_spoof.INVOCATION_RESULTS | PASS | INVALID_REQUEST | INVALID_REQUEST |
| AAA-02.identity_spoof.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-02.identity_spoof.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-02.identity_spoof.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-02.identity_spoof.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 2 explicit setup/boundary checks; independent outcomes and effects checked |
AAA-03: Forbidden tools
Assertion result: PASS. Evidence state: COMPLETE. 4 known attempts; 4 retained events.
Conditions: AAA-03.payment, AAA-03.payment.clock.0, AAA-03.beneficiary, AAA-03.beneficiary.clock.0, AAA-03.permissions, AAA-03.permissions.clock.0, AAA-03.unknown_tool, AAA-03.unknown_tool.clock.0
Simulation clocks (milliseconds since fixture creation): AAA-03.beneficiary=0; AAA-03.payment=0; AAA-03.permissions=0; AAA-03.unknown_tool=0
| Finding | Status | Expected | Observed |
|---|
| AAA-03.payment.INVOCATION_RESULTS | PASS | UNKNOWN_TOOL | UNKNOWN_TOOL |
| AAA-03.payment.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-03.payment.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-03.payment.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-03.payment.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 2 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-03.beneficiary.INVOCATION_RESULTS | PASS | UNKNOWN_TOOL | UNKNOWN_TOOL |
| AAA-03.beneficiary.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-03.beneficiary.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-03.beneficiary.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-03.beneficiary.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 2 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-03.permissions.INVOCATION_RESULTS | PASS | UNKNOWN_TOOL | UNKNOWN_TOOL |
| AAA-03.permissions.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-03.permissions.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-03.permissions.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-03.permissions.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 2 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-03.unknown_tool.INVOCATION_RESULTS | PASS | UNKNOWN_TOOL | UNKNOWN_TOOL |
| AAA-03.unknown_tool.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-03.unknown_tool.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-03.unknown_tool.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-03.unknown_tool.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 2 explicit setup/boundary checks; independent outcomes and effects checked |
AAA-04: Untrusted instructions
Assertion result: PASS. Evidence state: COMPLETE. 4 known attempts; 4 retained events.
Conditions: AAA-04.malicious_case, AAA-04.malicious_case.clock.0, AAA-04.malicious_policy, AAA-04.malicious_policy.clock.0
Simulation clocks (milliseconds since fixture creation): AAA-04.malicious_case=0; AAA-04.malicious_policy=0
| Finding | Status | Expected | Observed |
|---|
| AAA-04.malicious_case.INVOCATION_RESULTS | PASS | PROJECTED, UNKNOWN_TOOL | PROJECTED, UNKNOWN_TOOL |
| AAA-04.malicious_case.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-04.malicious_case.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-04.malicious_case.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-04.malicious_case.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 4 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-04.malicious_policy.INVOCATION_RESULTS | PASS | PROJECTED, UNKNOWN_TOOL | PROJECTED, UNKNOWN_TOOL |
| AAA-04.malicious_policy.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-04.malicious_policy.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-04.malicious_policy.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-04.malicious_policy.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 4 explicit setup/boundary checks; independent outcomes and effects checked |
AAA-05: Bulk and egress
Assertion result: PASS. Evidence state: COMPLETE. 2 known attempts; 2 retained events.
Conditions: AAA-05.bulk, AAA-05.bulk.clock.0, AAA-05.destination, AAA-05.destination.clock.0
Simulation clocks (milliseconds since fixture creation): AAA-05.bulk=0; AAA-05.destination=0
| Finding | Status | Expected | Observed |
|---|
| AAA-05.bulk.INVOCATION_RESULTS | PASS | UNKNOWN_TOOL | UNKNOWN_TOOL |
| AAA-05.bulk.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-05.bulk.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-05.bulk.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-05.bulk.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 2 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-05.destination.INVOCATION_RESULTS | PASS | INVALID_REQUEST | INVALID_REQUEST |
| AAA-05.destination.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-05.destination.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-05.destination.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-05.destination.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 2 explicit setup/boundary checks; independent outcomes and effects checked |
AAA-06: Projection privacy
Assertion result: PASS. Evidence state: COMPLETE. 3 known attempts; 3 retained events.
Conditions: AAA-06.projection_privacy, AAA-06.projection_privacy.clock.0
Simulation clocks (milliseconds since fixture creation): AAA-06.projection_privacy=0
| Finding | Status | Expected | Observed |
|---|
| AAA-06.projection_privacy.INVOCATION_RESULTS | PASS | PROJECTED, PROJECTED, PROJECTED | PROJECTED, PROJECTED, PROJECTED |
| AAA-06.projection_privacy.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-06.projection_privacy.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-06.projection_privacy.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-06.projection_privacy.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 4 explicit setup/boundary checks; independent outcomes and effects checked |
AAA-07: Separate approval
Assertion result: PASS. Evidence state: COMPLETE. 4 known attempts; 4 retained events.
Conditions: AAA-07.missing, AAA-07.missing.clock.0, AAA-07.pending, AAA-07.pending.clock.0, AAA-07.rejected, AAA-07.rejected.clock.0, AAA-07.approved, AAA-07.approved.clock.0
Simulation clocks (milliseconds since fixture creation): AAA-07.approved=0; AAA-07.missing=0; AAA-07.pending=0; AAA-07.rejected=0
| Finding | Status | Expected | Observed |
|---|
| AAA-07.missing.INVOCATION_RESULTS | PASS | INVALID_GRANT | INVALID_GRANT |
| AAA-07.missing.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-07.missing.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-07.missing.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-07.missing.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 2 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-07.pending.INVOCATION_RESULTS | PASS | INVALID_GRANT | INVALID_GRANT |
| AAA-07.pending.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-07.pending.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-07.pending.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-07.pending.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 2 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-07.rejected.INVOCATION_RESULTS | PASS | GRANT_REVOKED | GRANT_REVOKED |
| AAA-07.rejected.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-07.rejected.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-07.rejected.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-07.rejected.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 2 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-07.approved.INVOCATION_RESULTS | PASS | APPENDED | APPENDED |
| AAA-07.approved.SIDE_EFFECTS | PASS | 1 committed writes; unchanged forbidden sentinels | 1 observed notes; 1 committed writes |
| AAA-07.approved.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-07.approved.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-07.approved.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 2 explicit setup/boundary checks; independent outcomes and effects checked |
AAA-08: Approval claims
Assertion result: PASS. Evidence state: COMPLETE. 4 known attempts; 4 retained events.
Conditions: AAA-08.declared_approval, AAA-08.declared_approval.clock.0, AAA-08.claimed_role, AAA-08.claimed_role.clock.0, AAA-08.forged_grant, AAA-08.forged_grant.clock.0, AAA-08.foreign_grant, AAA-08.foreign_grant.clock.0
Simulation clocks (milliseconds since fixture creation): AAA-08.claimed_role=0; AAA-08.declared_approval=0; AAA-08.foreign_grant=0; AAA-08.forged_grant=0
| Finding | Status | Expected | Observed |
|---|
| AAA-08.declared_approval.INVOCATION_RESULTS | PASS | INVALID_GRANT | INVALID_GRANT |
| AAA-08.declared_approval.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-08.declared_approval.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-08.declared_approval.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-08.declared_approval.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 2 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-08.claimed_role.INVOCATION_RESULTS | PASS | INVALID_GRANT | INVALID_GRANT |
| AAA-08.claimed_role.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-08.claimed_role.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-08.claimed_role.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-08.claimed_role.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 2 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-08.forged_grant.INVOCATION_RESULTS | PASS | INVALID_GRANT | INVALID_GRANT |
| AAA-08.forged_grant.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-08.forged_grant.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-08.forged_grant.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-08.forged_grant.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 2 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-08.foreign_grant.INVOCATION_RESULTS | PASS | INVALID_GRANT | INVALID_GRANT |
| AAA-08.foreign_grant.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-08.foreign_grant.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-08.foreign_grant.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-08.foreign_grant.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 2 explicit setup/boundary checks; independent outcomes and effects checked |
AAA-09: Intent binding
Assertion result: PASS. Evidence state: COMPLETE. 6 known attempts; 6 retained events.
Conditions: AAA-09.parameters, AAA-09.parameters.clock.0, AAA-09.identity, AAA-09.identity.clock.0, AAA-09.revision, AAA-09.revision.clock.0, AAA-09.purpose, AAA-09.purpose.clock.0, AAA-09.request_identity, AAA-09.request_identity.clock.0
Simulation clocks (milliseconds since fixture creation): AAA-09.identity=0; AAA-09.parameters=0; AAA-09.purpose=0; AAA-09.request_identity=0; AAA-09.revision=0
| Finding | Status | Expected | Observed |
|---|
| AAA-09.parameters.INVOCATION_RESULTS | PASS | GRANT_MISMATCH | GRANT_MISMATCH |
| AAA-09.parameters.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-09.parameters.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-09.parameters.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-09.parameters.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 2 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-09.identity.INVOCATION_RESULTS | PASS | INVALID_GRANT | INVALID_GRANT |
| AAA-09.identity.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-09.identity.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-09.identity.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-09.identity.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 2 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-09.revision.INVOCATION_RESULTS | PASS | APPENDED, REVISION_CONFLICT | APPENDED, REVISION_CONFLICT |
| AAA-09.revision.SIDE_EFFECTS | PASS | 1 committed writes; unchanged forbidden sentinels | 1 observed notes; 1 committed writes |
| AAA-09.revision.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-09.revision.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-09.revision.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 3 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-09.purpose.INVOCATION_RESULTS | PASS | INVALID_REQUEST | INVALID_REQUEST |
| AAA-09.purpose.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-09.purpose.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-09.purpose.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-09.purpose.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 2 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-09.request_identity.INVOCATION_RESULTS | PASS | GRANT_MISMATCH | GRANT_MISMATCH |
| AAA-09.request_identity.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-09.request_identity.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-09.request_identity.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-09.request_identity.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 2 explicit setup/boundary checks; independent outcomes and effects checked |
AAA-10: Authority expiry
Assertion result: PASS. Evidence state: COMPLETE. 6 known attempts; 6 retained events.
Conditions: AAA-10.expired_issuance, AAA-10.expired_issuance.clock.0, AAA-10.overlong_issuance, AAA-10.overlong_issuance.clock.0, AAA-10.expiry_equal, AAA-10.expiry_equal.clock.30000, AAA-10.workload_expiry, AAA-10.workload_expiry.clock.60000, AAA-10.queued_expiry, AAA-10.queued_expiry.clock.30000
Simulation clocks (milliseconds since fixture creation): AAA-10.expired_issuance=0; AAA-10.expiry_equal=30000; AAA-10.overlong_issuance=0; AAA-10.queued_expiry=30000; AAA-10.workload_expiry=60000
| Finding | Status | Expected | Observed |
|---|
| AAA-10.expired_issuance.INVOCATION_RESULTS | PASS | INVALID_GRANT | INVALID_GRANT |
| AAA-10.expired_issuance.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-10.expired_issuance.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-10.expired_issuance.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-10.expired_issuance.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 3 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-10.overlong_issuance.INVOCATION_RESULTS | PASS | INVALID_GRANT | INVALID_GRANT |
| AAA-10.overlong_issuance.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-10.overlong_issuance.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-10.overlong_issuance.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-10.overlong_issuance.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 3 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-10.expiry_equal.INVOCATION_RESULTS | PASS | GRANT_EXPIRED | GRANT_EXPIRED |
| AAA-10.expiry_equal.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-10.expiry_equal.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-10.expiry_equal.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-10.expiry_equal.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 2 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-10.workload_expiry.INVOCATION_RESULTS | PASS | WORKLOAD_EXPIRED | WORKLOAD_EXPIRED |
| AAA-10.workload_expiry.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-10.workload_expiry.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-10.workload_expiry.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-10.workload_expiry.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 2 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-10.queued_expiry.INVOCATION_RESULTS | PASS | GRANT_EXPIRED, GRANT_EXPIRED | GRANT_EXPIRED, GRANT_EXPIRED |
| AAA-10.queued_expiry.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-10.queued_expiry.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-10.queued_expiry.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-10.queued_expiry.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 3 explicit setup/boundary checks; independent outcomes and effects checked |
AAA-11: Exact replay
Assertion result: PASS. Evidence state: COMPLETE. 13 known attempts; 13 retained events.
Conditions: AAA-11.sequential, AAA-11.sequential.clock.0, AAA-11.concurrent, AAA-11.concurrent.clock.0, AAA-11.advanced_revision, AAA-11.advanced_revision.clock.0, AAA-11.write_ceiling, AAA-11.write_ceiling.clock.0, AAA-11.write_ceiling.limit.committed_writes.1, AAA-11.changed_intent, AAA-11.changed_intent.clock.0, AAA-11.consumed_new_key, AAA-11.consumed_new_key.clock.0
Simulation clocks (milliseconds since fixture creation): AAA-11.advanced_revision=0; AAA-11.changed_intent=0; AAA-11.concurrent=0; AAA-11.consumed_new_key=0; AAA-11.sequential=0; AAA-11.write_ceiling=0
| Finding | Status | Expected | Observed |
|---|
| AAA-11.sequential.INVOCATION_RESULTS | PASS | APPENDED, EXACT_REPLAY | APPENDED, EXACT_REPLAY |
| AAA-11.sequential.SIDE_EFFECTS | PASS | 1 committed writes; unchanged forbidden sentinels | 1 observed notes; 1 committed writes |
| AAA-11.sequential.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-11.sequential.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-11.sequential.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 3 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-11.concurrent.INVOCATION_RESULTS | PASS | APPENDED, EXACT_REPLAY | APPENDED, EXACT_REPLAY |
| AAA-11.concurrent.SIDE_EFFECTS | PASS | 1 committed writes; unchanged forbidden sentinels | 1 observed notes; 1 committed writes |
| AAA-11.concurrent.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-11.concurrent.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-11.concurrent.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 3 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-11.advanced_revision.INVOCATION_RESULTS | PASS | APPENDED, APPENDED, EXACT_REPLAY | APPENDED, APPENDED, EXACT_REPLAY |
| AAA-11.advanced_revision.SIDE_EFFECTS | PASS | 2 committed writes; unchanged forbidden sentinels | 2 observed notes; 2 committed writes |
| AAA-11.advanced_revision.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-11.advanced_revision.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-11.advanced_revision.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 4 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-11.write_ceiling.INVOCATION_RESULTS | PASS | APPENDED, EXACT_REPLAY | APPENDED, EXACT_REPLAY |
| AAA-11.write_ceiling.SIDE_EFFECTS | PASS | 1 committed writes; unchanged forbidden sentinels | 1 observed notes; 1 committed writes |
| AAA-11.write_ceiling.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-11.write_ceiling.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-11.write_ceiling.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 3 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-11.changed_intent.INVOCATION_RESULTS | PASS | APPENDED, IDEMPOTENCY_CONFLICT | APPENDED, IDEMPOTENCY_CONFLICT |
| AAA-11.changed_intent.SIDE_EFFECTS | PASS | 1 committed writes; unchanged forbidden sentinels | 1 observed notes; 1 committed writes |
| AAA-11.changed_intent.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-11.changed_intent.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-11.changed_intent.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 3 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-11.consumed_new_key.INVOCATION_RESULTS | PASS | APPENDED, GRANT_MISMATCH | APPENDED, GRANT_MISMATCH |
| AAA-11.consumed_new_key.SIDE_EFFECTS | PASS | 1 committed writes; unchanged forbidden sentinels | 1 observed notes; 1 committed writes |
| AAA-11.consumed_new_key.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-11.consumed_new_key.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-11.consumed_new_key.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 3 explicit setup/boundary checks; independent outcomes and effects checked |
AAA-12: Revocation
Assertion result: PASS. Evidence state: COMPLETE. 7 known attempts; 7 retained events.
Conditions: AAA-12.workload, AAA-12.workload.clock.0, AAA-12.grant, AAA-12.grant.clock.0, AAA-12.ancestor, AAA-12.ancestor.clock.0, AAA-12.replay_revoked, AAA-12.replay_revoked.clock.0, AAA-12.replay_expired, AAA-12.replay_expired.clock.30000
Simulation clocks (milliseconds since fixture creation): AAA-12.ancestor=0; AAA-12.grant=0; AAA-12.replay_expired=30000; AAA-12.replay_revoked=0; AAA-12.workload=0
| Finding | Status | Expected | Observed |
|---|
| AAA-12.workload.INVOCATION_RESULTS | PASS | WORKLOAD_REVOKED | WORKLOAD_REVOKED |
| AAA-12.workload.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-12.workload.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-12.workload.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-12.workload.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 2 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-12.grant.INVOCATION_RESULTS | PASS | GRANT_REVOKED | GRANT_REVOKED |
| AAA-12.grant.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-12.grant.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-12.grant.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-12.grant.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 2 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-12.ancestor.INVOCATION_RESULTS | PASS | WORKLOAD_REVOKED | WORKLOAD_REVOKED |
| AAA-12.ancestor.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-12.ancestor.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-12.ancestor.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-12.ancestor.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 2 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-12.replay_revoked.INVOCATION_RESULTS | PASS | APPENDED, GRANT_REVOKED | APPENDED, GRANT_REVOKED |
| AAA-12.replay_revoked.SIDE_EFFECTS | PASS | 1 committed writes; unchanged forbidden sentinels | 1 observed notes; 1 committed writes |
| AAA-12.replay_revoked.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-12.replay_revoked.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-12.replay_revoked.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 3 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-12.replay_expired.INVOCATION_RESULTS | PASS | APPENDED, GRANT_EXPIRED | APPENDED, GRANT_EXPIRED |
| AAA-12.replay_expired.SIDE_EFFECTS | PASS | 1 committed writes; unchanged forbidden sentinels | 1 observed notes; 1 committed writes |
| AAA-12.replay_expired.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-12.replay_expired.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-12.replay_expired.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 3 explicit setup/boundary checks; independent outcomes and effects checked |
AAA-13: Revocation timing
Assertion result: PASS. Evidence state: COMPLETE. 6 known attempts; 6 retained events.
Conditions: AAA-13.queued, AAA-13.queued.clock.0, AAA-13.delegated, AAA-13.delegated.clock.0, AAA-13.precommit, AAA-13.precommit.clock.0, AAA-13.postcommit, AAA-13.postcommit.clock.0
Simulation clocks (milliseconds since fixture creation): AAA-13.delegated=0; AAA-13.postcommit=0; AAA-13.precommit=0; AAA-13.queued=0
| Finding | Status | Expected | Observed |
|---|
| AAA-13.queued.INVOCATION_RESULTS | PASS | WORKLOAD_REVOKED, WORKLOAD_REVOKED | WORKLOAD_REVOKED, WORKLOAD_REVOKED |
| AAA-13.queued.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-13.queued.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-13.queued.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-13.queued.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 3 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-13.delegated.INVOCATION_RESULTS | PASS | WORKLOAD_REVOKED | WORKLOAD_REVOKED |
| AAA-13.delegated.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-13.delegated.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-13.delegated.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-13.delegated.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 2 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-13.precommit.INVOCATION_RESULTS | PASS | WORKLOAD_REVOKED | WORKLOAD_REVOKED |
| AAA-13.precommit.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-13.precommit.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-13.precommit.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-13.precommit.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 2 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-13.postcommit.INVOCATION_RESULTS | PASS | APPENDED, WORKLOAD_REVOKED | APPENDED, WORKLOAD_REVOKED |
| AAA-13.postcommit.SIDE_EFFECTS | PASS | 1 committed writes; unchanged forbidden sentinels | 1 observed notes; 1 committed writes |
| AAA-13.postcommit.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-13.postcommit.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-13.postcommit.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 3 explicit setup/boundary checks; independent outcomes and effects checked |
AAA-14: Authorization availability
Assertion result: PASS. Evidence state: COMPLETE. 6 known attempts; 6 retained events.
Conditions: AAA-14.unavailable, AAA-14.unavailable.clock.0, AAA-14.throw, AAA-14.throw.clock.0, AAA-14.malformed, AAA-14.malformed.clock.0, AAA-14.unknown_decision, AAA-14.unknown_decision.clock.0, AAA-14.replay_unavailable, AAA-14.replay_unavailable.clock.0
Simulation clocks (milliseconds since fixture creation): AAA-14.malformed=0; AAA-14.replay_unavailable=0; AAA-14.throw=0; AAA-14.unavailable=0; AAA-14.unknown_decision=0
| Finding | Status | Expected | Observed |
|---|
| AAA-14.unavailable.INVOCATION_RESULTS | PASS | AUTHORIZATION_UNAVAILABLE | AUTHORIZATION_UNAVAILABLE |
| AAA-14.unavailable.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-14.unavailable.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-14.unavailable.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-14.unavailable.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 2 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-14.throw.INVOCATION_RESULTS | PASS | AUTHORIZATION_UNAVAILABLE | AUTHORIZATION_UNAVAILABLE |
| AAA-14.throw.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-14.throw.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-14.throw.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-14.throw.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 2 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-14.malformed.INVOCATION_RESULTS | PASS | AUTHORIZATION_UNAVAILABLE | AUTHORIZATION_UNAVAILABLE |
| AAA-14.malformed.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-14.malformed.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-14.malformed.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-14.malformed.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 2 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-14.unknown_decision.INVOCATION_RESULTS | PASS | AUTHORIZATION_UNAVAILABLE | AUTHORIZATION_UNAVAILABLE |
| AAA-14.unknown_decision.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-14.unknown_decision.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-14.unknown_decision.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-14.unknown_decision.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 2 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-14.replay_unavailable.INVOCATION_RESULTS | PASS | APPENDED, AUTHORIZATION_UNAVAILABLE | APPENDED, AUTHORIZATION_UNAVAILABLE |
| AAA-14.replay_unavailable.SIDE_EFFECTS | PASS | 1 committed writes; unchanged forbidden sentinels | 1 observed notes; 1 committed writes |
| AAA-14.replay_unavailable.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-14.replay_unavailable.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-14.replay_unavailable.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 3 explicit setup/boundary checks; independent outcomes and effects checked |
AAA-15: Private append boundary
Assertion result: PASS. Evidence state: COMPLETE. 5 known attempts; 5 retained events.
Conditions: AAA-15.absent, AAA-15.absent.clock.0, AAA-15.forged, AAA-15.forged.clock.0, AAA-15.wrong_action, AAA-15.wrong_action.clock.0, AAA-15.consumed, AAA-15.consumed.clock.0
Simulation clocks (milliseconds since fixture creation): AAA-15.absent=0; AAA-15.consumed=0; AAA-15.forged=0; AAA-15.wrong_action=0
| Finding | Status | Expected | Observed |
|---|
| AAA-15.absent.INVOCATION_RESULTS | PASS | INVALID_PERMIT | INVALID_PERMIT |
| AAA-15.absent.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-15.absent.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-15.absent.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-15.absent.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 2 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-15.forged.INVOCATION_RESULTS | PASS | INVALID_PERMIT | INVALID_PERMIT |
| AAA-15.forged.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-15.forged.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-15.forged.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-15.forged.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 2 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-15.wrong_action.INVOCATION_RESULTS | PASS | INVALID_PERMIT | INVALID_PERMIT |
| AAA-15.wrong_action.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-15.wrong_action.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-15.wrong_action.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-15.wrong_action.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 2 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-15.consumed.INVOCATION_RESULTS | PASS | APPENDED, INVALID_PERMIT | APPENDED, INVALID_PERMIT |
| AAA-15.consumed.SIDE_EFFECTS | PASS | 1 committed writes; unchanged forbidden sentinels | 1 observed notes; 1 committed writes |
| AAA-15.consumed.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-15.consumed.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-15.consumed.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 3 explicit setup/boundary checks; independent outcomes and effects checked |
AAA-16: Version binding
Assertion result: PASS. Evidence state: COMPLETE. 4 known attempts; 4 retained events.
Conditions: AAA-16.policy, AAA-16.policy.clock.0, AAA-16.release, AAA-16.release.clock.0, AAA-16.replay_changed, AAA-16.replay_changed.clock.0
Simulation clocks (milliseconds since fixture creation): AAA-16.policy=0; AAA-16.release=0; AAA-16.replay_changed=0
| Finding | Status | Expected | Observed |
|---|
| AAA-16.policy.INVOCATION_RESULTS | PASS | VERSION_CHANGED | VERSION_CHANGED |
| AAA-16.policy.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-16.policy.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-16.policy.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-16.policy.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 2 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-16.release.INVOCATION_RESULTS | PASS | VERSION_CHANGED | VERSION_CHANGED |
| AAA-16.release.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-16.release.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-16.release.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-16.release.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 2 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-16.replay_changed.INVOCATION_RESULTS | PASS | APPENDED, VERSION_CHANGED | APPENDED, VERSION_CHANGED |
| AAA-16.replay_changed.SIDE_EFFECTS | PASS | 1 committed writes; unchanged forbidden sentinels | 1 observed notes; 1 committed writes |
| AAA-16.replay_changed.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-16.replay_changed.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-16.replay_changed.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 3 explicit setup/boundary checks; independent outcomes and effects checked |
AAA-17: Known-attempt evidence gap
Assertion result: PASS. Evidence state: GAP_DETECTED. 1 known attempts; 0 retained events.
Conditions: AAA-17.dropped_event, AAA-17.dropped_event.clock.0, AAA-17.dropped_event.fault.MISSING_EVENT
Simulation clocks (milliseconds since fixture creation): AAA-17.dropped_event=0
| Finding | Status | Expected | Observed |
|---|
| AAA-17.dropped_event.INVOCATION_RESULTS | PASS | APPENDED | APPENDED |
| AAA-17.dropped_event.SIDE_EFFECTS | PASS | 1 committed writes; unchanged forbidden sentinels | 1 observed notes; 1 committed writes |
| AAA-17.dropped_event.LEDGER_ACCOUNTING | PASS | MISSING_EVENT | MISSING_EVENT |
| AAA-17.dropped_event.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-17.dropped_event.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 2 explicit setup/boundary checks; independent outcomes and effects checked |
AAA-18: Evidence tampering
Assertion result: PASS. Evidence state: INVALID. 9 known attempts; 9 retained events.
Conditions: AAA-18.altered, AAA-18.altered.clock.0, AAA-18.altered.fault.CHAIN_HASH, AAA-18.reordered, AAA-18.reordered.clock.0, AAA-18.reordered.fault.EVENT_ORDER, AAA-18.duplicated, AAA-18.duplicated.clock.0, AAA-18.duplicated.fault.DUPLICATE_EVENT, AAA-18.truncated, AAA-18.truncated.clock.0, AAA-18.truncated.fault.MISSING_EVENT, AAA-18.untrusted_producer, AAA-18.untrusted_producer.clock.0
Simulation clocks (milliseconds since fixture creation): AAA-18.altered=0; AAA-18.duplicated=0; AAA-18.reordered=0; AAA-18.truncated=0; AAA-18.untrusted_producer=0
| Finding | Status | Expected | Observed |
|---|
| AAA-18.altered.INVOCATION_RESULTS | PASS | PROJECTED, PROJECTED | PROJECTED, PROJECTED |
| AAA-18.altered.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-18.altered.LEDGER_ACCOUNTING | PASS | CHAIN_HASH | CHAIN_HASH |
| AAA-18.altered.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-18.altered.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 3 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-18.reordered.INVOCATION_RESULTS | PASS | PROJECTED, PROJECTED | PROJECTED, PROJECTED |
| AAA-18.reordered.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-18.reordered.LEDGER_ACCOUNTING | PASS | EVENT_ORDER | EVENT_ORDER |
| AAA-18.reordered.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-18.reordered.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 3 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-18.duplicated.INVOCATION_RESULTS | PASS | PROJECTED, PROJECTED | PROJECTED, PROJECTED |
| AAA-18.duplicated.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-18.duplicated.LEDGER_ACCOUNTING | PASS | DUPLICATE_EVENT, EVENT_ORDER | DUPLICATE_EVENT, EVENT_ORDER |
| AAA-18.duplicated.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-18.duplicated.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 3 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-18.truncated.INVOCATION_RESULTS | PASS | PROJECTED, PROJECTED | PROJECTED, PROJECTED |
| AAA-18.truncated.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-18.truncated.LEDGER_ACCOUNTING | PASS | MISSING_EVENT | MISSING_EVENT |
| AAA-18.truncated.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-18.truncated.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 3 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-18.untrusted_producer.INVOCATION_RESULTS | PASS | PROJECTED | PROJECTED |
| AAA-18.untrusted_producer.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-18.untrusted_producer.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-18.untrusted_producer.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-18.untrusted_producer.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 3 explicit setup/boundary checks; independent outcomes and effects checked |
AAA-19: Shared budgets
Assertion result: PASS. Evidence state: COMPLETE. 145 known attempts; 142 retained events.
Conditions: AAA-19.writes, AAA-19.writes.clock.0, AAA-19.bytes, AAA-19.bytes.clock.0, AAA-19.bytes.limit.committed_note_bytes.8, AAA-19.family_time, AAA-19.family_time.clock.1000, AAA-19.family_time.limit.family_lifetime_ms.1000, AAA-19.queue, AAA-19.queue.clock.0, AAA-19.queue.limit.queued_calls.1, AAA-19.children, AAA-19.children.clock.0, AAA-19.depth, AAA-19.depth.clock.0, AAA-19.siblings, AAA-19.siblings.clock.0, AAA-19.siblings.limit.committed_writes.1, AAA-19.calls_65, AAA-19.calls_65.clock.0, AAA-19.calls_66, AAA-19.calls_66.clock.0
Simulation clocks (milliseconds since fixture creation): AAA-19.bytes=0; AAA-19.calls_65=0; AAA-19.calls_66=0; AAA-19.children=0; AAA-19.depth=0; AAA-19.family_time=1000; AAA-19.queue=0; AAA-19.siblings=0; AAA-19.writes=0
| Finding | Status | Expected | Observed |
|---|
| AAA-19.writes.INVOCATION_RESULTS | PASS | APPENDED, APPENDED, APPENDED, WRITE_LIMIT | APPENDED, APPENDED, APPENDED, WRITE_LIMIT |
| AAA-19.writes.SIDE_EFFECTS | PASS | 3 committed writes; unchanged forbidden sentinels | 3 observed notes; 3 committed writes |
| AAA-19.writes.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-19.writes.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-19.writes.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 5 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-19.bytes.INVOCATION_RESULTS | PASS | APPENDED, NOTE_BYTE_LIMIT | APPENDED, NOTE_BYTE_LIMIT |
| AAA-19.bytes.SIDE_EFFECTS | PASS | 1 committed writes; unchanged forbidden sentinels | 1 observed notes; 1 committed writes |
| AAA-19.bytes.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-19.bytes.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-19.bytes.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 3 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-19.family_time.INVOCATION_RESULTS | PASS | FAMILY_EXPIRED | FAMILY_EXPIRED |
| AAA-19.family_time.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-19.family_time.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-19.family_time.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-19.family_time.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 2 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-19.queue.INVOCATION_RESULTS | PASS | APPENDED, EXACT_REPLAY, QUEUE_LIMIT | APPENDED, EXACT_REPLAY, QUEUE_LIMIT |
| AAA-19.queue.SIDE_EFFECTS | PASS | 1 committed writes; unchanged forbidden sentinels | 1 observed notes; 1 committed writes |
| AAA-19.queue.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-19.queue.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-19.queue.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 4 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-19.children.INVOCATION_RESULTS | PASS | PROJECTED | PROJECTED |
| AAA-19.children.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-19.children.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-19.children.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-19.children.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 3 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-19.depth.INVOCATION_RESULTS | PASS | PROJECTED | PROJECTED |
| AAA-19.depth.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-19.depth.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-19.depth.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-19.depth.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 3 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-19.siblings.INVOCATION_RESULTS | PASS | APPENDED, WRITE_LIMIT | APPENDED, WRITE_LIMIT |
| AAA-19.siblings.SIDE_EFFECTS | PASS | 1 committed writes; unchanged forbidden sentinels | 1 observed notes; 1 committed writes |
| AAA-19.siblings.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-19.siblings.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-19.siblings.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 3 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-19.calls_65.INVOCATION_RESULTS | PASS | 65 fixed invocation outcomes | PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJEC |
| AAA-19.calls_65.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-19.calls_65.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-19.calls_65.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-19.calls_65.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 66 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-19.calls_66.INVOCATION_RESULTS | PASS | 66 fixed invocation outcomes | PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJECTED, PROJEC |
| AAA-19.calls_66.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-19.calls_66.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-19.calls_66.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-19.calls_66.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 67 explicit setup/boundary checks; independent outcomes and effects checked |
AAA-20: Capability and lifetime
Assertion result: PASS. Evidence state: COMPLETE. 6 known attempts; 6 retained events.
Conditions: AAA-20.privacy, AAA-20.privacy.clock.0, AAA-20.detached_snapshot, AAA-20.detached_snapshot.clock.0, AAA-20.reader_boundary, AAA-20.reader_boundary.clock.0, AAA-20.disposal, AAA-20.disposal.clock.0
Simulation clocks (milliseconds since fixture creation): AAA-20.detached_snapshot=0; AAA-20.disposal=0; AAA-20.privacy=0; AAA-20.reader_boundary=0
| Finding | Status | Expected | Observed |
|---|
| AAA-20.privacy.INVOCATION_RESULTS | PASS | PROJECTED | PROJECTED |
| AAA-20.privacy.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-20.privacy.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-20.privacy.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-20.privacy.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 6 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-20.detached_snapshot.INVOCATION_RESULTS | PASS | PROJECTED | PROJECTED |
| AAA-20.detached_snapshot.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-20.detached_snapshot.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-20.detached_snapshot.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-20.detached_snapshot.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 4 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-20.reader_boundary.INVOCATION_RESULTS | PASS | PROJECTED, PROJECTED, PROJECTED | PROJECTED, PROJECTED, PROJECTED |
| AAA-20.reader_boundary.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-20.reader_boundary.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-20.reader_boundary.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-20.reader_boundary.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 4 explicit setup/boundary checks; independent outcomes and effects checked |
| AAA-20.disposal.INVOCATION_RESULTS | PASS | DISPOSED | DISPOSED |
| AAA-20.disposal.SIDE_EFFECTS | PASS | 0 committed writes; unchanged forbidden sentinels | 0 observed notes; 0 committed writes |
| AAA-20.disposal.LEDGER_ACCOUNTING | PASS | COMPLETE | Complete admitted and overflow accounting |
| AAA-20.disposal.DATA_BOUNDARY | PASS | Only approved response fields; no restricted canaries | Exact projection fields and synthetic canary exclusion checked |
| AAA-20.disposal.CONTROL_EXPECTATION | PASS | Fixed control conditions and all independent invariants | 4 explicit setup/boundary checks; independent outcomes and effects checked |
Mandatory negative controls
- DENY_WITH_EFFECT: detected. INVALID_GRANT; EFFECT_OWNERSHIP, RESULT_DISAGREEMENT; 2 explicit setup/boundary checks; independent outcomes and effects checked
- ALLOW_WITHOUT_EFFECT: detected. 0 observed notes; 0 committed writes; EFFECT_OWNERSHIP, RESULT_DISAGREEMENT; 2 explicit setup/boundary checks; independent outcomes and effects checked
- APPROVAL_BYPASS: detected. APPENDED; 1 observed notes; 1 committed writes; 2 explicit setup/boundary checks; independent outcomes and effects checked
- DUPLICATE_EFFECT: detected. 2 observed notes; 2 committed writes; COUNTER_ACCOUNTING, EFFECT_OWNERSHIP, UNKNOWN_EVENT; 2 explicit setup/boundary checks; independent outcomes and effects checked
- DROP_EVENT: detected. MISSING_EVENT; 2 explicit setup/boundary checks; independent outcomes and effects checked
- REHASHED_FALSE_RESULT: detected. INVALID_GRANT; 0 observed notes; 0 committed writes; 2 explicit setup/boundary checks; independent outcomes and effects checked; Rehashed denial contradicts independently retained committed note and allowed outcome
Limits and human review
- Synthetic reference only. No customer system was tested.
- Model NONE. No claim of LLM prompt-injection robustness.
- Operator authentication is a synthetic fixture, not real human authentication.
- Unsigned evidence. Hashes do not authenticate the producer or prove issuer identity.
- Host or Node process compromise and modified kit code are outside this test.
- Idempotency is local to one in-memory process run, not distributed or durable.
- Completeness is limited to the finite known-attempt workload, not arbitrary unseen activity.
- Deployment enforcement, real retention, access controls and customer effectiveness remain untested.
Open this HTML and use your browser's Print to PDF. Review the PDF and remove information outside the agreed scope before existing PDF intake. Keep original JSON and digests. Uploading is separate from acceptance. Integration engineering, execution testing and penetration testing require separate scope.