{
  "tool_id": "art-609-jwks-pinned-directory-check",
  "note": "golden_hash values computed via buildArtifact() at build time -- see SPEC-BOTAUTH-NONCE-VISA-1 SS3/SS6(b) for the canonicalization decision this kernel implements.",
  "vectors": [
    {
      "name": "pinned-digest-matches",
      "policy_parameters": {
        "directory_jwks": {
          "keys": [
            {
              "kty": "OKP",
              "crv": "Ed25519",
              "kid": "key-2026-06",
              "x": "WrHvnND7oaWfvrGxUU3FNeJaQDwYj4K3e5fl0fH5p2g"
            }
          ]
        },
        "pinned_digest": "45d28be3698cb02c2a658ecb15c292076254ca24cd797bc75a39dacd244a028d"
      },
      "output_payload": {
        "computed_digest": "45d28be3698cb02c2a658ecb15c292076254ca24cd797bc75a39dacd244a028d",
        "pinned_digest": "45d28be3698cb02c2a658ecb15c292076254ca24cd797bc75a39dacd244a028d",
        "pinned_digest_well_formed": true,
        "digest_match": true,
        "key_count": 1
      },
      "golden_hash": "5a0b5fa3adc70854677c3b45cd754cbf2ed3ec1a7efe5ddf62dd72335116ae95"
    },
    {
      "name": "pinned-digest-mismatch",
      "policy_parameters": {
        "directory_jwks": {
          "keys": [
            {
              "kty": "OKP",
              "crv": "Ed25519",
              "kid": "key-2026-06",
              "x": "WrHvnND7oaWfvrGxUU3FNeJaQDwYj4K3e5fl0fH5p2g"
            }
          ]
        },
        "pinned_digest": "0000000000000000000000000000000000000000000000000000000000000000"
      },
      "output_payload": {
        "computed_digest": "45d28be3698cb02c2a658ecb15c292076254ca24cd797bc75a39dacd244a028d",
        "pinned_digest": "0000000000000000000000000000000000000000000000000000000000000000",
        "pinned_digest_well_formed": true,
        "digest_match": false,
        "key_count": 1
      },
      "golden_hash": "1b942fac1c7e79c5bb665fe9037c7b6f87666fa93c24fe80fc695a169be54041"
    },
    {
      "name": "pinned-digest-missing",
      "policy_parameters": {
        "directory_jwks": {
          "keys": [
            {
              "kty": "OKP",
              "crv": "Ed25519",
              "kid": "key-2026-06",
              "x": "WrHvnND7oaWfvrGxUU3FNeJaQDwYj4K3e5fl0fH5p2g"
            }
          ]
        }
      },
      "output_payload": {
        "computed_digest": "45d28be3698cb02c2a658ecb15c292076254ca24cd797bc75a39dacd244a028d",
        "pinned_digest": null,
        "pinned_digest_well_formed": false,
        "digest_match": false,
        "key_count": 1
      },
      "golden_hash": "5d839aa221e08cfa17cd7ff00a052f93f960d21c7a84ede4b3baa522dec37ade"
    }
  ]
}
