{
  "_type": "https://in-toto.io/Statement/v1",
  "subject": [
    {
      "name": "compliance_mandate/art-304-aiuc1-evidence-pack-assembler",
      "digest": {
        "sha256": "6dc36ff96075fde1830bbea4ecbe3bb7896a268e423b68c5354eb72203d18fef"
      }
    },
    {
      "name": "compliance_mandate/art-304-aiuc1-evidence-pack-assembler.receipt.json",
      "digest": {
        "sha256": "f9ee4dfe6f59eb6aacfcee1d7a3de7ae7da6984523c1b7a1f205d21f06843376"
      }
    }
  ],
  "predicateType": "https://ainumbers.co/attestations/ocg-execution-receipt/v0.2",
  "predicate": {
    "chaingraphVersion": "0.4.0",
    "computeMode": "server",
    "mandateType": "compliance_mandate",
    "toolId": "art-304-aiuc1-evidence-pack-assembler",
    "toolVersion": "1.0.0",
    "generatedAt": "2026-11-06T00:00:00.000Z",
    "buildType": "https://ainumbers.co/chaingraph/context/v0.2#WebCryptoSHA256",
    "executionHash": "6dc36ff96075fde1830bbea4ecbe3bb7896a268e423b68c5354eb72203d18fef",
    "chain": {
      "parent_hashes": [],
      "parent_tool_ids": [],
      "chain_depth": 0
    },
    "policyParameters": {
      "aiuc1_version": "2026-Q1",
      "artifacts": {
        "receipts": [
          {
            "id": "r1",
            "digest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
          },
          {
            "id": "r2",
            "digest": "sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
          }
        ],
        "escalation_closures": [
          {
            "id": "e1",
            "digest": "sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd"
          }
        ],
        "mandates": [
          {
            "id": "m1",
            "digest": "sha256:eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee"
          }
        ]
      },
      "control_mapping": [
        {
          "control_id": "AIUC-A-01",
          "artifact_refs": [
            "r1"
          ]
        },
        {
          "control_id": "AIUC-B-01",
          "artifact_refs": [
            "r2",
            "e1"
          ]
        },
        {
          "control_id": "AIUC-E-01",
          "artifact_refs": [
            "m1"
          ]
        }
      ],
      "cadence_attestation_input": {
        "max_gap_days_by_control": [
          {
            "control_id": "AIUC-A-01",
            "max_gap_days": 45
          }
        ]
      }
    },
    "outputPayload": {
      "aiuc1_version": "2026-Q1",
      "version_mismatch": false,
      "controls": [
        {
          "control_id": "AIUC-A-01",
          "status": "receipt-backed",
          "artifact_digests": [
            "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
          ],
          "claim_strength": "receipt-backed"
        },
        {
          "control_id": "AIUC-B-01",
          "status": "receipt-backed",
          "artifact_digests": [
            "sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
            "sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd"
          ],
          "claim_strength": "receipt-backed"
        },
        {
          "control_id": "AIUC-E-01",
          "status": "receipt-backed",
          "artifact_digests": [
            "sha256:eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee"
          ],
          "claim_strength": "receipt-backed"
        }
      ],
      "pack_claim_strength": "receipt-backed",
      "oscal_assessment_results": {
        "_source_citation": "arXiv:2604.13767 AI-evidence property-extension mapping (Apache-2.0 reference implementation); documented mapping only, not a runtime dependency.",
        "type": "oscal-assessment-results",
        "aiuc1_version": "2026-Q1",
        "results": [
          {
            "control_id": "AIUC-A-01",
            "state": "satisfied"
          },
          {
            "control_id": "AIUC-B-01",
            "state": "satisfied"
          },
          {
            "control_id": "AIUC-E-01",
            "state": "satisfied"
          }
        ]
      },
      "cadence_attestation": {
        "period_days": 90,
        "rows": [
          {
            "control_id": "AIUC-A-01",
            "max_gap_days": 45,
            "within_cadence": true
          }
        ],
        "all_within_cadence": true
      },
      "anchor": null,
      "insufficient_evidence": false
    },
    "complianceFlags": [
      "AIUC1_PACK_ASSEMBLED",
      "AIUC1_PACK_SCORED"
    ],
    "dcp1Profile": "ocg-deterministic-compute",
    "controlRefs": [
      {
        "framework": "aiuc-1",
        "id": "AIUC-A-01"
      },
      {
        "framework": "aiuc-1",
        "id": "AIUC-B-01"
      },
      {
        "framework": "aiuc-1",
        "id": "AIUC-E-01"
      }
    ],
    "sourceAnchor": {
      "documentDigest": "7805c28c612b9daf261960b074b0719eb95986ba35d409e3163aa23c2ccf7c7d",
      "locator": "chaingraph/kernels/fixtures/art-304-aiuc1-evidence-pack-assembler.fixtures.json vectors[0] policy_parameters"
    },
    "tickmark": "recalculated"
  }
}