{
  "assumptions": [
    "controlled witness atomically binds intent identity and payload to one effect",
    "SQLite process-restart durability on the tested local filesystem",
    "authority is enforced inside the witness transaction",
    "receipt commitment is checked against a separately queried witness; it is not a digital signature"
  ],
  "checks": [
    {
      "name": "initial_effect_count_zero",
      "passed": true
    },
    {
      "name": "lost_acknowledgement_keeps_obligation_pending",
      "passed": true
    },
    {
      "name": "restart_reconciles_one_effect",
      "passed": true
    },
    {
      "name": "replay_does_not_repeat_effect",
      "passed": true
    },
    {
      "name": "concurrent_replay_does_not_repeat_effect",
      "passed": true
    },
    {
      "name": "same_identity_changed_payload_denied",
      "passed": true
    },
    {
      "name": "different_institution_has_no_authority",
      "passed": true
    },
    {
      "name": "revoked_authority_prevents_new_effect",
      "passed": true
    },
    {
      "name": "receipt_matches_independent_witness",
      "passed": true
    },
    {
      "name": "tampered_receipt_rejected",
      "passed": true
    },
    {
      "name": "self_consistent_forgery_rejected_by_witness",
      "passed": true
    }
  ],
  "classification": "public reference run",
  "exhibit": "controlled-continuity-reference",
  "run_sha256": "7152d744a6e1672a16069df231f6a35c2268800136eff7af146647f515e686cb",
  "schema_version": 1,
  "source_sha256": {
    "evidence.schema.json": "ac1877ba6979ef6bcf7fac72d2c7c2c85620debaab2eccc2597abe122e782ed2",
    "fixture.json": "318d168854071da551f5f232139cbd3df02218b2beb2a84984e9a50cb6c8779a",
    "verify.py": "fd3455cb9e6a671cdedbac6c598e543bc1a2c9852a9295faa9d37d8f9ee74f45",
    "witness.py": "efad7e089b7327fabadabd6e4ad0bd8ec5ce6694b46ad7d3511a0ce626e174eb"
  },
  "trace": [
    {
      "check": "initial_effect_count_zero",
      "observation": {
        "receipt": null,
        "status": "observed",
        "total_effect_count": 0
      }
    },
    {
      "check": "lost_acknowledgement_keeps_obligation_pending",
      "observation": {
        "owner": {
          "receipt_sha256": null,
          "state": "pending"
        },
        "witness": {
          "receipt": {
            "authority_epoch": 1,
            "effect": "notebook-entry-recorded",
            "effect_count_for_intent": 1,
            "institution": "teaching-institution",
            "intent_id": "notebook-entry-001",
            "receipt_sha256": "a8dfcd6432ddb443c194bca8a671da3c1d9cb5a0ccc4d65286d48e1066a68746",
            "request_sha256": "7ed240d9879cb97990e93b0e5cbfd1f27395adeada8a0387c6f70f6bfefc5c71",
            "schema_version": 1
          },
          "status": "observed",
          "total_effect_count": 1
        },
        "worker_exit": 73
      }
    },
    {
      "check": "restart_reconciles_one_effect",
      "observation": {
        "owner": {
          "receipt_sha256": "a8dfcd6432ddb443c194bca8a671da3c1d9cb5a0ccc4d65286d48e1066a68746",
          "state": "settled"
        },
        "witness": {
          "receipt": {
            "authority_epoch": 1,
            "effect": "notebook-entry-recorded",
            "effect_count_for_intent": 1,
            "institution": "teaching-institution",
            "intent_id": "notebook-entry-001",
            "receipt_sha256": "a8dfcd6432ddb443c194bca8a671da3c1d9cb5a0ccc4d65286d48e1066a68746",
            "request_sha256": "7ed240d9879cb97990e93b0e5cbfd1f27395adeada8a0387c6f70f6bfefc5c71",
            "schema_version": 1
          },
          "status": "observed",
          "total_effect_count": 1
        }
      }
    },
    {
      "check": "replay_does_not_repeat_effect",
      "observation": {
        "receipt": {
          "authority_epoch": 1,
          "effect": "notebook-entry-recorded",
          "effect_count_for_intent": 1,
          "institution": "teaching-institution",
          "intent_id": "notebook-entry-001",
          "receipt_sha256": "a8dfcd6432ddb443c194bca8a671da3c1d9cb5a0ccc4d65286d48e1066a68746",
          "request_sha256": "7ed240d9879cb97990e93b0e5cbfd1f27395adeada8a0387c6f70f6bfefc5c71",
          "schema_version": 1
        },
        "status": "already_recorded"
      }
    },
    {
      "check": "concurrent_replay_does_not_repeat_effect",
      "observation": {
        "replays": 4,
        "total_effect_count": 1
      }
    },
    {
      "check": "same_identity_changed_payload_denied",
      "observation": {
        "reason": "identity_or_payload_mismatch",
        "status": "denied"
      }
    },
    {
      "check": "different_institution_has_no_authority",
      "observation": {
        "reason": "current_authority_required",
        "status": "denied"
      }
    },
    {
      "check": "revoked_authority_prevents_new_effect",
      "observation": {
        "attempt": {
          "reason": "current_authority_required",
          "status": "denied"
        },
        "revocation": {
          "authority_epoch": 2,
          "status": "revoked"
        }
      }
    },
    {
      "check": "receipt_matches_independent_witness",
      "observation": {
        "receipt_sha256": "a8dfcd6432ddb443c194bca8a671da3c1d9cb5a0ccc4d65286d48e1066a68746"
      }
    },
    {
      "check": "tampered_receipt_rejected",
      "observation": {
        "changed_field": "effect_count_for_intent"
      }
    },
    {
      "check": "self_consistent_forgery_rejected_by_witness",
      "observation": {
        "self_hash_is_not_authentication": true
      }
    }
  ]
}