{
  "schema": "aaes.sample-exercise/v1",
  "performed_at": "2026-10-13T15:38:23.772561+00:00",
  "performed_by": "AAES",
  "exercise_type": "synthetic export integrity; no agent or provider execution",
  "environment": {
    "os": "Darwin",
    "architecture": "arm64",
    "python": "3.14.4"
  },
  "provenance": {
    "verifier_sha256": "8c9b419b4987ebdf3b399102aacabd01b0b745bdd88144cb9276850523cf39f5",
    "export_sha256": "4edbd9e4b0ca2b154266c3dee9f874c62d00b811d375fa3b0935e19115babf3e",
    "public_key_file_sha256": "bcb7212739ec198f464eaff83809ab05950af94accf338d82af35eadb5393540"
  },
  "limitations": [
    "Vendor-run exercise of a vendor-supplied synthetic sample; not independent validation.",
    "No approval, credential-bypass, budget, completeness, or provider-outcome control is tested.",
    "A supplied key establishes consistency against that key, not independent key provenance.",
    "Only the specified record-hash edit and wrong-key case are tested; this is not a security audit.",
    "The runner makes no network requests. Network isolation must be established separately by the reviewer."
  ],
  "checks": [
    {
      "id": "unchanged",
      "expected_exit_code": 0,
      "expected_fields": {
        "ok": true,
        "chain_ok": true,
        "root_ok": true,
        "signature_ok": true
      },
      "actual_exit_code": 0,
      "actual": {
        "path": "/Users/alexschell/Documents/GitHub/AAES/site/public/verification/sample-export.jsonl",
        "ok": true,
        "schema": "aaes.export/v2",
        "log_id": "aaes-sample-pack",
        "tenant_id": "tenant-demo",
        "exported_at": "2026-09-28T12:00:00Z",
        "entry_count": 16,
        "declared_entry_count": 16,
        "first_sequence": 1,
        "last_sequence": 16,
        "head_index": 16,
        "head_tree_size": 16,
        "head_root": "bcb30959b41fe8e15e2e59d9219885ba7f81bb97d9afe901bcb01ad14bbe1bbe",
        "head_signed_at": "2026-09-28T12:00:00Z",
        "recomputed_root": "bcb30959b41fe8e15e2e59d9219885ba7f81bb97d9afe901bcb01ad14bbe1bbe",
        "chain_ok": true,
        "root_ok": true,
        "signature_ok": true,
        "key_source": "supplied",
        "public_key_hex": "bea00de54171d1ebf590efa7eb7d0a9fa8b9da3981e2937410d2dc841f9e2cf9",
        "anchor_count": 1,
        "anchors_ok": true,
        "anchors_verified": 1,
        "timestamps_checked": 1,
        "timestamps_independent": 0,
        "witnesses_verified": 0,
        "independent_witnesses": 0,
        "gapped": false,
        "tombstones_checked": 0,
        "warnings": [
          "every external timestamp is a noop placeholder: no third party attested to these heads",
          "zero independent witnesses: AAES alone holds the only signature over this history"
        ]
      },
      "stderr": "",
      "matches_expectation": true
    },
    {
      "id": "edited-record-hash",
      "expected_exit_code": 1,
      "expected_fields": {
        "ok": false,
        "chain_ok": false,
        "root_ok": false
      },
      "actual_exit_code": 1,
      "actual": {
        "path": "/var/folders/1p/h59g2wcj76q1dhtsng60zzn00000gn/T/aaes-sample-exercise-aij22hgr/tampered.jsonl",
        "ok": false,
        "schema": "aaes.export/v2",
        "log_id": "aaes-sample-pack",
        "tenant_id": "tenant-demo",
        "exported_at": "2026-09-28T12:00:00Z",
        "entry_count": 16,
        "declared_entry_count": 16,
        "first_sequence": 1,
        "last_sequence": 16,
        "head_index": 16,
        "head_tree_size": 16,
        "head_root": "bcb30959b41fe8e15e2e59d9219885ba7f81bb97d9afe901bcb01ad14bbe1bbe",
        "head_signed_at": "2026-09-28T12:00:00Z",
        "recomputed_root": "b9715c0432e91d9974c2abe12881556a1436f36bd8efd268a0bb4e0016660b1a",
        "chain_ok": false,
        "root_ok": false,
        "signature_ok": true,
        "key_source": "supplied",
        "public_key_hex": "bea00de54171d1ebf590efa7eb7d0a9fa8b9da3981e2937410d2dc841f9e2cf9",
        "anchor_count": 1,
        "anchors_ok": false,
        "anchors_verified": 0,
        "timestamps_checked": 0,
        "timestamps_independent": 0,
        "witnesses_verified": 0,
        "independent_witnesses": 0,
        "gapped": false,
        "tombstones_checked": 0,
        "warnings": [
          "zero independent witnesses: AAES alone holds the only signature over this history"
        ],
        "errors": [
          "verifier: hash chain does not verify: entry 0 (sequence 1): chain hash is bca6bdc7b29355120ed080463b8c5771e70566c7d67979e88122c06d614d5784, recomputed 22110d7e2343835df1cc43c36bbfc2b34e3879772e14649376d6082bdbfad12c",
          "entry 0 (sequence 1): leaf is 8c395d19e24f9a1ff74961741b46a25a746c2825a9f5da6bf258c5ce86d0a989, recomputed 342b89ee8ad65cc6b93dfc846291cdeb9e41da8845bb173ae3efdc3623c1929e",
          "entry 1 (sequence 2): chain hash is 66384322467d714c57255767e77a1f9532e958528177fbc80454b08cf94c14f9, recomputed df31d9eddb60fe2acd25ca63dae7b7476fd000fe95b076c9025a1cdabe282af4",
          "entry 2 (sequence 3): chain hash is b150e37491c8210e48e5c5ef1fe27994eb7c554ac4026a42be564de9c26b755d, recomputed ba3b8d06577d71868248cd9a84dc1dc90f2d1ae85af1388105a1e6aae7bfb64a",
          "entry 3 (sequence 4): chain hash is 6aee7026898364fe224e53f6f691075eaaaa4c1b7813bd07d9eaf95c7db7418b, recomputed 56c59ff1201d4d8043d97efc0b61f02e22c152218fc707679d268892e4c40298",
          "entry 4 (sequence 5): chain hash is 3eb550a3189fef4d8d47ec079689347c661c0a1cbf3d6181c58384510227e546, recomputed 851cadba4ccd1918eb32f3eda64696b7623bde53dd44cbefe1c09ddcba5ebc93",
          "entry 5 (sequence 6): chain hash is 9ac8e31b6c2383f043f640cc0d64dc08bde7f4a50d7865846073d6c7190967a1, recomputed 03d853ba4d087f3afad8e8df3e7b1bbe06e0002620214999cee98d9fce690f81",
          "entry 6 (sequence 7): chain hash is a8b35ceee3f546d5b14c3369627271e67ab7ae33b72dcd730a79160aff8f916b, recomputed 71555c9712f94a2fffc9dd643094d1e3f514083c469d3f99bc7747a82315959b",
          "entry 7 (sequence 8): chain hash is 969078e81fb223511527081c039248aeb3ff927c2ce66c4abfab3a4f59c49a91, recomputed a16002b5928e2299245f28f878250aa6c132ecaf7c68f9215562c137bffab298",
          "entry 8 (sequence 9): chain hash is dce35240d270694c9774f76457633d02b6b8c4b635de7d3f6e28e8fda89fcfc5, recomputed cd0a6b781e55474af74f6dd6739a1e3408587fd143f20ab44683fadd2b54a8dd",
          "entry 9 (sequence 10): chain hash is f15ec23daf6fe1ce31236b56e01dc79de95d026feca5ce43c35a4c8ae8ee5c85, recomputed 16795ebc21ec06cbd50825a7a9210f11974ac43ec1eb28174c686062ae09f88b",
          "entry 10 (sequence 11): chain hash is e24bf03b44e2dd13d61fdd5373cdc9b568ec7d77adf37fb09a49e19aeafe1e47, recomputed 985373c95d557b74cf44f6af2dc8b103b1a5d913875c70f421e5ac4ccbb9c9c5",
          "entry 11 (sequence 12): chain hash is 447d63bc8bb4708478003024e483f3c20f2ce1ca81e39e695a237f7fd78340c1, recomputed c92813fdf8a963a725e714b9ac271acfb323920e40ddd5ebf76b64bedc79b917",
          "entry 12 (sequence 13): chain hash is 5c14de1884c9f7b8d40d489c313a46fdea2156feb3beb51848425dacfab93e58, recomputed 5676168c5d3ef4e1a80c7669c3b55daa69cea3aaade1c1f6de6e7ea6908da1d4",
          "entry 13 (sequence 14): chain hash is c7cbc55e12f31ee47aacf322634007a85f28d6deab38afaeb2d022671ee7b54c, recomputed 6312cd42f7301a4322785f656bfd6dac4435d93c3fa1a101231a2d5e5fdc3056",
          "entry 14 (sequence 15): chain hash is 5a3d516e2df59f4c0bf4c03a26834f4a9ea9e2e2ca12d747b6c350edc33a102b, recomputed e58a7135190bd7b09b71776efa7fc8bd0b18cd4a4f784db2fe3ace6c9d79650f",
          "entry 15 (sequence 16): chain hash is 1421b217e4c2d4948997f5311cfed5acc6369b7fb3cd3ff97843bcf82fe69a56, recomputed 8184dc0dad5177967cbe8d7421e0b474f7e109121ff2abcd32395fd05c676f9f",
          "verifier: merkle root does not match the signed tree head: head root is bcb30959b41fe8e15e2e59d9219885ba7f81bb97d9afe901bcb01ad14bbe1bbe, recomputed b9715c0432e91d9974c2abe12881556a1436f36bd8efd268a0bb4e0016660b1a",
          "anchor 0: root bcb30959b41fe8e15e2e59d9219885ba7f81bb97d9afe901bcb01ad14bbe1bbe is not the root of the first 16 entries (b9715c0432e91d9974c2abe12881556a1436f36bd8efd268a0bb4e0016660b1a)"
        ]
      },
      "stderr": "",
      "matches_expectation": true
    },
    {
      "id": "wrong-public-key",
      "expected_exit_code": 1,
      "expected_fields": {
        "ok": false,
        "signature_ok": false
      },
      "actual_exit_code": 1,
      "actual": {
        "path": "/Users/alexschell/Documents/GitHub/AAES/site/public/verification/sample-export.jsonl",
        "ok": false,
        "schema": "aaes.export/v2",
        "log_id": "aaes-sample-pack",
        "tenant_id": "tenant-demo",
        "exported_at": "2026-09-28T12:00:00Z",
        "entry_count": 16,
        "declared_entry_count": 16,
        "first_sequence": 1,
        "last_sequence": 16,
        "head_index": 16,
        "head_tree_size": 16,
        "head_root": "bcb30959b41fe8e15e2e59d9219885ba7f81bb97d9afe901bcb01ad14bbe1bbe",
        "head_signed_at": "2026-09-28T12:00:00Z",
        "recomputed_root": "bcb30959b41fe8e15e2e59d9219885ba7f81bb97d9afe901bcb01ad14bbe1bbe",
        "chain_ok": true,
        "root_ok": true,
        "signature_ok": false,
        "key_source": "supplied",
        "public_key_hex": "0000000000000000000000000000000000000000000000000000000000000000",
        "anchor_count": 1,
        "anchors_ok": false,
        "anchors_verified": 0,
        "timestamps_checked": 0,
        "timestamps_independent": 0,
        "witnesses_verified": 0,
        "independent_witnesses": 0,
        "gapped": false,
        "tombstones_checked": 0,
        "warnings": [
          "zero independent witnesses: AAES alone holds the only signature over this history"
        ],
        "errors": [
          "verifier: supplied public key does not match the key in the export: export was signed by bea00de54171d1ebf590efa7eb7d0a9fa8b9da3981e2937410d2dc841f9e2cf9, verifier was given 0000000000000000000000000000000000000000000000000000000000000000",
          "verifier: signature does not verify under the supplied public key",
          "anchor 0: verifier: signature does not verify under the supplied public key"
        ]
      },
      "stderr": "",
      "matches_expectation": true
    },
    {
      "id": "require-independent",
      "expected_exit_code": 1,
      "expected_fields": {
        "ok": false,
        "independent_witnesses": 0,
        "timestamps_independent": 0
      },
      "actual_exit_code": 1,
      "actual": {
        "path": "/Users/alexschell/Documents/GitHub/AAES/site/public/verification/sample-export.jsonl",
        "ok": false,
        "schema": "aaes.export/v2",
        "log_id": "aaes-sample-pack",
        "tenant_id": "tenant-demo",
        "exported_at": "2026-09-28T12:00:00Z",
        "entry_count": 16,
        "declared_entry_count": 16,
        "first_sequence": 1,
        "last_sequence": 16,
        "head_index": 16,
        "head_tree_size": 16,
        "head_root": "bcb30959b41fe8e15e2e59d9219885ba7f81bb97d9afe901bcb01ad14bbe1bbe",
        "head_signed_at": "2026-09-28T12:00:00Z",
        "recomputed_root": "bcb30959b41fe8e15e2e59d9219885ba7f81bb97d9afe901bcb01ad14bbe1bbe",
        "chain_ok": true,
        "root_ok": true,
        "signature_ok": true,
        "key_source": "supplied",
        "public_key_hex": "bea00de54171d1ebf590efa7eb7d0a9fa8b9da3981e2937410d2dc841f9e2cf9",
        "anchor_count": 1,
        "anchors_ok": true,
        "anchors_verified": 1,
        "timestamps_checked": 1,
        "timestamps_independent": 0,
        "witnesses_verified": 0,
        "independent_witnesses": 0,
        "gapped": false,
        "tombstones_checked": 0,
        "errors": [
          "every external timestamp is a noop placeholder: no third party attested to these heads",
          "zero independent witnesses: AAES alone holds the only signature over this history",
          "independent verification was requested and this export has zero independent witnesses and zero independent timestamps; an unkeyed head commitment is not an external witness"
        ]
      },
      "stderr": "",
      "matches_expectation": true
    }
  ],
  "verifier_identity": "aaesverify v0.2.0 (85c1bccc36ec0edead9d3952377a0e98ed72b299), export schema aaes.export/v2",
  "original_inputs_unchanged": true,
  "all_expectations_met": true
}