{
  "tool_id": "art-286-anchored-extract-verifier",
  "note": "golden_hash empty until first node golden-parity.test.mjs --update.",
  "vectors": [
    {
      "name": "default-inputs",
      "policy_parameters": {},
      "output_payload": {
        "anchored_extract_determination": "REFUSED_UNANCHORED",
        "anchored": false,
        "root_match": false,
        "source_class": null,
        "computed_root": "08679e383d66dbc4192bae473a37843066188e42635077349d1c7db7cf25b20c",
        "claimed_root": null,
        "structural_error": null,
        "anchor_note": "No external anchor of a recognized class was supplied; a self-produced root is not verifiable by this kernel.",
        "escalation": null,
        "not_proven": [
          {
            "item": "Extract contents beyond the leaf",
            "detail": "This kernel verifies inclusion of a leaf hash under a root; it does not inspect or validate the extract's underlying content beyond that hash."
          },
          {
            "item": "Completeness of the committed set",
            "detail": "Inclusion of one leaf does not prove the root commits to a complete or unaltered set of records; items could be omitted from what the root represents."
          },
          {
            "item": "Freshness beyond the anchor's own time semantics",
            "detail": "An RFC 3161/OTS/Sigstore/on-chain anchor proves the root existed no later than the anchor's own timestamp; it does not prove the extract is currently accurate or unchanged since."
          },
          {
            "item": "Universal chain-explorer equivalence",
            "detail": "A self-produced hash chain with no external anchor is explicitly refused by this kernel (anchored:false): it is not treated as verified evidence."
          }
        ],
        "regulatory_framework": "Voluntary anchored-extract verification aligned with amended AS 1105 (FY2026) and the AICPA practice aid on not relying on unanchored chain explorers; not a PCAOB audit."
      },
      "golden_hash": "fef32118493ab6984f89947ed6758b88443555423873e659e9c333adc6966633"
    },
    {
      "name": "pass-ocg-artifact-single-leaf",
      "policy_parameters": {
        "extract": {
          "leaf_content_hash": "sha256:receiptA-content-hash",
          "merkle_path": []
        },
        "claimed_root": "a495e1c83ab24f0317b9466462dec37e0d34c5c28fed33cec240e20cff5ab236",
        "source_class": "ocg_artifact"
      },
      "output_payload": {
        "anchored_extract_determination": "VERIFIED",
        "anchored": true,
        "root_match": true,
        "source_class": "ocg_artifact",
        "computed_root": "a495e1c83ab24f0317b9466462dec37e0d34c5c28fed33cec240e20cff5ab236",
        "claimed_root": "a495e1c83ab24f0317b9466462dec37e0d34c5c28fed33cec240e20cff5ab236",
        "structural_error": null,
        "anchor_note": "Recognized as an OCG artifact/chain envelope (dogfood: our own receipt format), not an ad-hoc self-produced claim.",
        "escalation": null,
        "not_proven": [
          {
            "item": "Extract contents beyond the leaf",
            "detail": "This kernel verifies inclusion of a leaf hash under a root; it does not inspect or validate the extract's underlying content beyond that hash."
          },
          {
            "item": "Completeness of the committed set",
            "detail": "Inclusion of one leaf does not prove the root commits to a complete or unaltered set of records; items could be omitted from what the root represents."
          },
          {
            "item": "Freshness beyond the anchor's own time semantics",
            "detail": "An RFC 3161/OTS/Sigstore/on-chain anchor proves the root existed no later than the anchor's own timestamp; it does not prove the extract is currently accurate or unchanged since."
          },
          {
            "item": "Universal chain-explorer equivalence",
            "detail": "A self-produced hash chain with no external anchor is explicitly refused by this kernel (anchored:false): it is not treated as verified evidence."
          }
        ],
        "regulatory_framework": "Voluntary anchored-extract verification aligned with amended AS 1105 (FY2026) and the AICPA practice aid on not relying on unanchored chain explorers; not a PCAOB audit."
      },
      "golden_hash": "bc3b06cb0f95413c03aef39b5b0f89da75a316e289cee60599f89061a8aa7875"
    },
    {
      "name": "pass-ots-anchored-two-level",
      "policy_parameters": {
        "extract": {
          "leaf_content_hash": "sha256:extract-ots-001",
          "merkle_path": [
            {
              "hash": "deadbeef00000000000000000000000000000000000000000000000000ffff",
              "position": "right"
            }
          ]
        },
        "claimed_root": "72b0405679106b978ab927c9ecb7edbef2c8e23ae4f84173b4d487a90d798cd9",
        "source_class": "ots",
        "anchor_evidence": {
          "ots": {
            "attestation": "bitcoin_confirmed",
            "bitcoin_block_height": 921000
          }
        }
      },
      "output_payload": {
        "anchored_extract_determination": "VERIFIED",
        "anchored": true,
        "root_match": true,
        "source_class": "ots",
        "computed_root": "72b0405679106b978ab927c9ecb7edbef2c8e23ae4f84173b4d487a90d798cd9",
        "claimed_root": "72b0405679106b978ab927c9ecb7edbef2c8e23ae4f84173b4d487a90d798cd9",
        "structural_error": null,
        "anchor_note": "OpenTimestamps proof present (attestation: bitcoin_confirmed).",
        "escalation": null,
        "not_proven": [
          {
            "item": "Extract contents beyond the leaf",
            "detail": "This kernel verifies inclusion of a leaf hash under a root; it does not inspect or validate the extract's underlying content beyond that hash."
          },
          {
            "item": "Completeness of the committed set",
            "detail": "Inclusion of one leaf does not prove the root commits to a complete or unaltered set of records; items could be omitted from what the root represents."
          },
          {
            "item": "Freshness beyond the anchor's own time semantics",
            "detail": "An RFC 3161/OTS/Sigstore/on-chain anchor proves the root existed no later than the anchor's own timestamp; it does not prove the extract is currently accurate or unchanged since."
          },
          {
            "item": "Universal chain-explorer equivalence",
            "detail": "A self-produced hash chain with no external anchor is explicitly refused by this kernel (anchored:false): it is not treated as verified evidence."
          }
        ],
        "regulatory_framework": "Voluntary anchored-extract verification aligned with amended AS 1105 (FY2026) and the AICPA practice aid on not relying on unanchored chain explorers; not a PCAOB audit."
      },
      "golden_hash": "6de3ec930e5547dd7d611c6c60625774831f81f09007199078e72027a8f20409"
    },
    {
      "name": "pass-rfc3161-anchored",
      "policy_parameters": {
        "extract": {
          "leaf_content_hash": "sha256:extract-tsa-001",
          "merkle_path": []
        },
        "claimed_root": "a90d43d8ee43efaa832fada2ed413cc5fca35d0a6792542ef65d9e0e1251dcbf",
        "source_class": "rfc3161",
        "anchor_evidence": {
          "rfc3161": {
            "tsa_message_imprint": "imprint-001",
            "tsa_time": "2026-07-10T12:00:00Z"
          }
        }
      },
      "output_payload": {
        "anchored_extract_determination": "VERIFIED",
        "anchored": true,
        "root_match": true,
        "source_class": "rfc3161",
        "computed_root": "a90d43d8ee43efaa832fada2ed413cc5fca35d0a6792542ef65d9e0e1251dcbf",
        "claimed_root": "a90d43d8ee43efaa832fada2ed413cc5fca35d0a6792542ef65d9e0e1251dcbf",
        "structural_error": null,
        "anchor_note": "RFC 3161 timestamp token present (TSA time: 2026-07-10T12:00:00Z).",
        "escalation": null,
        "not_proven": [
          {
            "item": "Extract contents beyond the leaf",
            "detail": "This kernel verifies inclusion of a leaf hash under a root; it does not inspect or validate the extract's underlying content beyond that hash."
          },
          {
            "item": "Completeness of the committed set",
            "detail": "Inclusion of one leaf does not prove the root commits to a complete or unaltered set of records; items could be omitted from what the root represents."
          },
          {
            "item": "Freshness beyond the anchor's own time semantics",
            "detail": "An RFC 3161/OTS/Sigstore/on-chain anchor proves the root existed no later than the anchor's own timestamp; it does not prove the extract is currently accurate or unchanged since."
          },
          {
            "item": "Universal chain-explorer equivalence",
            "detail": "A self-produced hash chain with no external anchor is explicitly refused by this kernel (anchored:false): it is not treated as verified evidence."
          }
        ],
        "regulatory_framework": "Voluntary anchored-extract verification aligned with amended AS 1105 (FY2026) and the AICPA practice aid on not relying on unanchored chain explorers; not a PCAOB audit."
      },
      "golden_hash": "c6a1b1fcf38e0fd5e8cd42833d49dd5b3643b3c439be6f3a65fa7cf344a09b22"
    },
    {
      "name": "pass-vr1-onchain-composed",
      "policy_parameters": {
        "extract": {
          "leaf_content_hash": "sha256:extract-vr1-001",
          "merkle_path": []
        },
        "claimed_root": "b889e9778ff7745f7a51c90fc464be085650c5012a8cbbc6687b79e39912e9c8",
        "source_class": "vr1_onchain",
        "anchor_evidence": {
          "vr1_onchain": {
            "verified": true,
            "source": "vr-1"
          }
        }
      },
      "output_payload": {
        "anchored_extract_determination": "VERIFIED",
        "anchored": true,
        "root_match": true,
        "source_class": "vr1_onchain",
        "computed_root": "b889e9778ff7745f7a51c90fc464be085650c5012a8cbbc6687b79e39912e9c8",
        "claimed_root": "b889e9778ff7745f7a51c90fc464be085650c5012a8cbbc6687b79e39912e9c8",
        "structural_error": null,
        "anchor_note": "Composed with an on-chain storage-proof result (VR-1 State-Proof Verifier, source: vr-1).",
        "escalation": null,
        "not_proven": [
          {
            "item": "Extract contents beyond the leaf",
            "detail": "This kernel verifies inclusion of a leaf hash under a root; it does not inspect or validate the extract's underlying content beyond that hash."
          },
          {
            "item": "Completeness of the committed set",
            "detail": "Inclusion of one leaf does not prove the root commits to a complete or unaltered set of records; items could be omitted from what the root represents."
          },
          {
            "item": "Freshness beyond the anchor's own time semantics",
            "detail": "An RFC 3161/OTS/Sigstore/on-chain anchor proves the root existed no later than the anchor's own timestamp; it does not prove the extract is currently accurate or unchanged since."
          },
          {
            "item": "Universal chain-explorer equivalence",
            "detail": "A self-produced hash chain with no external anchor is explicitly refused by this kernel (anchored:false): it is not treated as verified evidence."
          }
        ],
        "regulatory_framework": "Voluntary anchored-extract verification aligned with amended AS 1105 (FY2026) and the AICPA practice aid on not relying on unanchored chain explorers; not a PCAOB audit."
      },
      "golden_hash": "a0ea88bc32442399f1763aa4b99194ea2013c12f3ee6865f9b1c142a87733232"
    },
    {
      "name": "refuse-self-produced-root-no-anchor",
      "policy_parameters": {
        "extract": {
          "leaf_content_hash": "sha256:extract-noanchor-001",
          "merkle_path": []
        },
        "claimed_root": "anything-caller-claims",
        "source_class": null
      },
      "output_payload": {
        "anchored_extract_determination": "REFUSED_UNANCHORED",
        "anchored": false,
        "root_match": false,
        "source_class": null,
        "computed_root": "44fa0134caccd9242182f6fb902977af8bfb94f1da42c880fdb8f6e77f777696",
        "claimed_root": "anything-caller-claims",
        "structural_error": null,
        "anchor_note": "No external anchor of a recognized class was supplied; a self-produced root is not verifiable by this kernel.",
        "escalation": null,
        "not_proven": [
          {
            "item": "Extract contents beyond the leaf",
            "detail": "This kernel verifies inclusion of a leaf hash under a root; it does not inspect or validate the extract's underlying content beyond that hash."
          },
          {
            "item": "Completeness of the committed set",
            "detail": "Inclusion of one leaf does not prove the root commits to a complete or unaltered set of records; items could be omitted from what the root represents."
          },
          {
            "item": "Freshness beyond the anchor's own time semantics",
            "detail": "An RFC 3161/OTS/Sigstore/on-chain anchor proves the root existed no later than the anchor's own timestamp; it does not prove the extract is currently accurate or unchanged since."
          },
          {
            "item": "Universal chain-explorer equivalence",
            "detail": "A self-produced hash chain with no external anchor is explicitly refused by this kernel (anchored:false): it is not treated as verified evidence."
          }
        ],
        "regulatory_framework": "Voluntary anchored-extract verification aligned with amended AS 1105 (FY2026) and the AICPA practice aid on not relying on unanchored chain explorers; not a PCAOB audit."
      },
      "golden_hash": "b96a84c1baa0a5aa23526eeff473800e6e79307bee9fbabf7dd256f9282244af"
    },
    {
      "name": "fail-mismatch-tampered-root-sigstore",
      "policy_parameters": {
        "extract": {
          "leaf_content_hash": "sha256:extract-sigstore-001",
          "merkle_path": []
        },
        "claimed_root": "deliberately-wrong-root-0000",
        "source_class": "sigstore",
        "anchor_evidence": {
          "sigstore": {
            "rekor_log_index": 123456,
            "rekor_uuid": "uuid-abc-123"
          }
        }
      },
      "output_payload": {
        "anchored_extract_determination": "MISMATCH",
        "anchored": true,
        "root_match": false,
        "source_class": "sigstore",
        "computed_root": "2ba9b687814f8efed286bee00a65e9147a75a86ca8564237e32983387821de69",
        "claimed_root": "deliberately-wrong-root-0000",
        "structural_error": null,
        "anchor_note": "Sigstore Rekor transparency-log entry present (log index: 123456).",
        "escalation": {
          "raised": true,
          "reason": "Computed root does not match the claimed root for an otherwise-recognized anchor class.",
          "severity": "high"
        },
        "not_proven": [
          {
            "item": "Extract contents beyond the leaf",
            "detail": "This kernel verifies inclusion of a leaf hash under a root; it does not inspect or validate the extract's underlying content beyond that hash."
          },
          {
            "item": "Completeness of the committed set",
            "detail": "Inclusion of one leaf does not prove the root commits to a complete or unaltered set of records; items could be omitted from what the root represents."
          },
          {
            "item": "Freshness beyond the anchor's own time semantics",
            "detail": "An RFC 3161/OTS/Sigstore/on-chain anchor proves the root existed no later than the anchor's own timestamp; it does not prove the extract is currently accurate or unchanged since."
          },
          {
            "item": "Universal chain-explorer equivalence",
            "detail": "A self-produced hash chain with no external anchor is explicitly refused by this kernel (anchored:false): it is not treated as verified evidence."
          }
        ],
        "regulatory_framework": "Voluntary anchored-extract verification aligned with amended AS 1105 (FY2026) and the AICPA practice aid on not relying on unanchored chain explorers; not a PCAOB audit."
      },
      "golden_hash": "2679873764463660833071cc7cb840785e555281d705fc33d55398a51be272c3"
    }
  ]
}