{
  "tool_id": "art-147-mcp-server-identity-attestation-validator",
  "note": "golden_hash empty until first `node golden-parity.test.mjs --update`.",
  "vectors": [
    {
      "name": "valid-identity-with-attestation",
      "policy_parameters": {
        "identity": {
          "subject": "did:web:example.com",
          "issuer": "did:web:registry.mcp.io",
          "serverInfo": {
            "name": "ExampleMCPServer",
            "version": "1.2.0"
          },
          "attestation": {
            "ref": "https://registry.mcp.io/attestations/abc123"
          }
        },
        "well_known_path": "/.well-known/mcp-server-identity",
        "signature_valid": true
      },
      "output_payload": {
        "identity_valid": true,
        "has_subject": true,
        "has_issuer": true,
        "has_server_info": true,
        "attested": true,
        "missing": []
      },
      "golden_hash": "b79a5ba24c7b6f47438bbc8c4b18f2086557eb124e1f58b00d234a00d5f8bb76"
    },
    {
      "name": "invalid-missing-subject-and-wrong-path",
      "policy_parameters": {
        "identity": {
          "issuer": "did:web:registry.mcp.io",
          "serverInfo": {
            "name": "BadServer",
            "version": "0.1.0"
          }
        },
        "well_known_path": "/mcp-identity",
        "signature_valid": true
      },
      "output_payload": {
        "identity_valid": false,
        "has_subject": false,
        "has_issuer": true,
        "has_server_info": true,
        "attested": false,
        "missing": [
          "WELL_KNOWN_PATH",
          "SUBJECT",
          "ATTESTATION"
        ]
      },
      "golden_hash": "5860ed1bb398cad823259dce2d2d83d8c121d5b7a88fd16062241c3fdb3cc3b9"
    },
    {
      "name": "invalid-signature",
      "policy_parameters": {
        "identity": {
          "subject": "did:web:example.com",
          "issuer": "did:web:registry.mcp.io",
          "serverInfo": {
            "name": "ExampleMCPServer",
            "version": "1.0.0"
          },
          "attestation": {
            "ref": "https://registry.mcp.io/attestations/xyz"
          }
        },
        "well_known_path": "/.well-known/mcp-server-identity",
        "signature_valid": false
      },
      "output_payload": {
        "identity_valid": false,
        "has_subject": true,
        "has_issuer": true,
        "has_server_info": true,
        "attested": false,
        "missing": [
          "ATTESTATION"
        ]
      },
      "golden_hash": "726c9993b6aaa32eec6011348f53ae0022251fda533abcba2a7c31974d6733d4"
    }
  ]
}