{ "tool_id": "art-649-publish-model-risk-head", "note": "Golden fixtures for the model-risk SPEC.md HEAD-1 head-commit publish kernel (MRM-LINEAGE-BUILD-SPEC.md sec.4). output_payload is buildArtifact()'s canonical result (matches golden_hash / vm-parity-gate, both of which run buildArtifact, never compute() alone): head_hash is filled in only there (independent pure-SHA-256 recompute, sec.4 note). signature_valid/chain_valid are the CALLER's own verification claim (pp.signature_verification / pp.chain_verification), echoed verbatim by compute() itself -- never recomputed by this node (see the kernel HARD FENCE comment for why: the real zkVM guest has no WebCrypto, and the VM<->worker parity harness's crypto.subtle.verify bridge was measured to diverge from the worker during authoring). Covers: missing head, missing/malformed verification-claim shape, every structural-shape violation validateHeadShape() checks, and five valid shapes (genesis with a true claim, genesis with a caller-asserted false claim -- still a valid receipt, just recording a failed verification -- chained with a chain claim, chained missing the required chain claim, and a rotation-announced head). human_sign_off: PENDING (this row does not sign -- manifest-level signature per spec sec.4).", "vectors": [ { "name": "missing-head", "policy_parameters": {}, "output_payload": { "stream": null, "signer": null, "seq": null, "prev_head_hash": null, "root": null, "timestamp": null, "rotates_to": null, "structural_error": "head is required.", "is_genesis": false, "head_hash": null, "signature_valid": null, "signature_verified_by": null, "chain_valid": null, "chain_verified_by": null, "chain_errors": [], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-562's stage-reference citations. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed validation-history tip at this seq; it does not itself detect the same signer publishing a different, conflicting head for the same (stream, seq) elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU), not this node." }, { "item": "Revalidation-cadence enforcement", "detail": "This node publishes one head-commit event. Whether a model's revalidation is overdue is computed separately by art-453-model-validation-status (next_due_in_days); this stream only makes that history citable in sequence order." }, { "item": "Root-artifact authenticity", "detail": "root is a caller-supplied execution_hash citing the period's art-562 lineage pack (or bare art-453/art-489 receipt), asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream artifact." }, { "item": "RDARR / BCBS 239 / SR 26-2 compliance", "detail": "This receipt evidences one head-commit publication event. It has no bearing on whether the underlying model is fit for use and does not itself satisfy RDARR, BCBS 239, or SR 26-2 -- those are firm-level governance obligations this document evidences a piece of, never fulfills." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a model's SR 26-2 revalidation-history stream; not itself an RDARR, BCBS 239, or SR 26-2 requirement." }, "golden_hash": "2f15663463d3e32fe45920d31cefbdad70297c04cc6df76978f586fce1dd4c2b" }, { "name": "head-missing-signature-verification", "policy_parameters": { "head": { "head_version": "1", "stream": "model-risk-head:MODEL-CREDIT-PD-01", "signer": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "seq": 0, "prev_head_hash": null, "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111", "timestamp": "2026-08-05T00:00:00Z", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "proofPurpose": "assertionMethod", "created": "2026-08-05T00:00:00Z", "proofValue": "z36T1LGhKz8AJJhq6ugKpgxAwh381zQccmoi8tCVqQq6hcWQ8s6sngbDQ7V946QrBaAm5koRv2VggGkofNC579jbF" } } }, "output_payload": { "stream": null, "signer": null, "seq": null, "prev_head_hash": null, "root": null, "timestamp": null, "rotates_to": null, "structural_error": "signature_verification is required (the caller's own verification result).", "is_genesis": false, "head_hash": null, "signature_valid": null, "signature_verified_by": null, "chain_valid": null, "chain_verified_by": null, "chain_errors": [], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-562's stage-reference citations. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed validation-history tip at this seq; it does not itself detect the same signer publishing a different, conflicting head for the same (stream, seq) elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU), not this node." }, { "item": "Revalidation-cadence enforcement", "detail": "This node publishes one head-commit event. Whether a model's revalidation is overdue is computed separately by art-453-model-validation-status (next_due_in_days); this stream only makes that history citable in sequence order." }, { "item": "Root-artifact authenticity", "detail": "root is a caller-supplied execution_hash citing the period's art-562 lineage pack (or bare art-453/art-489 receipt), asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream artifact." }, { "item": "RDARR / BCBS 239 / SR 26-2 compliance", "detail": "This receipt evidences one head-commit publication event. It has no bearing on whether the underlying model is fit for use and does not itself satisfy RDARR, BCBS 239, or SR 26-2 -- those are firm-level governance obligations this document evidences a piece of, never fulfills." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a model's SR 26-2 revalidation-history stream; not itself an RDARR, BCBS 239, or SR 26-2 requirement." }, "golden_hash": "1bc75cd054d06c994d2d6e678ffe91c8e071807f8284ee5ad3f7ad712566f411" }, { "name": "signature-verification-missing-verified-by", "policy_parameters": { "head": { "head_version": "1", "stream": "model-risk-head:MODEL-CREDIT-PD-01", "signer": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "seq": 0, "prev_head_hash": null, "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111", "timestamp": "2026-08-05T00:00:00Z", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "proofPurpose": "assertionMethod", "created": "2026-08-05T00:00:00Z", "proofValue": "z36T1LGhKz8AJJhq6ugKpgxAwh381zQccmoi8tCVqQq6hcWQ8s6sngbDQ7V946QrBaAm5koRv2VggGkofNC579jbF" } }, "signature_verification": { "verified": true } }, "output_payload": { "stream": null, "signer": null, "seq": null, "prev_head_hash": null, "root": null, "timestamp": null, "rotates_to": null, "structural_error": "signature_verification.verified_by is required (free text naming the tool/method used to verify).", "is_genesis": false, "head_hash": null, "signature_valid": null, "signature_verified_by": null, "chain_valid": null, "chain_verified_by": null, "chain_errors": [], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-562's stage-reference citations. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed validation-history tip at this seq; it does not itself detect the same signer publishing a different, conflicting head for the same (stream, seq) elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU), not this node." }, { "item": "Revalidation-cadence enforcement", "detail": "This node publishes one head-commit event. Whether a model's revalidation is overdue is computed separately by art-453-model-validation-status (next_due_in_days); this stream only makes that history citable in sequence order." }, { "item": "Root-artifact authenticity", "detail": "root is a caller-supplied execution_hash citing the period's art-562 lineage pack (or bare art-453/art-489 receipt), asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream artifact." }, { "item": "RDARR / BCBS 239 / SR 26-2 compliance", "detail": "This receipt evidences one head-commit publication event. It has no bearing on whether the underlying model is fit for use and does not itself satisfy RDARR, BCBS 239, or SR 26-2 -- those are firm-level governance obligations this document evidences a piece of, never fulfills." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a model's SR 26-2 revalidation-history stream; not itself an RDARR, BCBS 239, or SR 26-2 requirement." }, "golden_hash": "1b28e93950230bf93254f4b99fdcad2fba40740551ed5be60e33a21f15448155" }, { "name": "signer-not-did-key", "policy_parameters": { "head": { "head_version": "1", "stream": "model-risk-head:MODEL-CREDIT-PD-01", "signer": "not-a-did", "seq": 0, "prev_head_hash": null, "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111", "timestamp": "2026-08-05T00:00:00Z", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "not-a-did", "proofPurpose": "assertionMethod", "created": "2026-08-05T00:00:00Z", "proofValue": "z36T1LGhKz8AJJhq6ugKpgxAwh381zQccmoi8tCVqQq6hcWQ8s6sngbDQ7V946QrBaAm5koRv2VggGkofNC579jbF" } }, "signature_verification": { "verified": true, "verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-17" } }, "output_payload": { "stream": null, "signer": null, "seq": null, "prev_head_hash": null, "root": null, "timestamp": null, "rotates_to": null, "structural_error": "head.signer must be a did:key.", "is_genesis": false, "head_hash": null, "signature_valid": null, "signature_verified_by": null, "chain_valid": null, "chain_verified_by": null, "chain_errors": [], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-562's stage-reference citations. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed validation-history tip at this seq; it does not itself detect the same signer publishing a different, conflicting head for the same (stream, seq) elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU), not this node." }, { "item": "Revalidation-cadence enforcement", "detail": "This node publishes one head-commit event. Whether a model's revalidation is overdue is computed separately by art-453-model-validation-status (next_due_in_days); this stream only makes that history citable in sequence order." }, { "item": "Root-artifact authenticity", "detail": "root is a caller-supplied execution_hash citing the period's art-562 lineage pack (or bare art-453/art-489 receipt), asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream artifact." }, { "item": "RDARR / BCBS 239 / SR 26-2 compliance", "detail": "This receipt evidences one head-commit publication event. It has no bearing on whether the underlying model is fit for use and does not itself satisfy RDARR, BCBS 239, or SR 26-2 -- those are firm-level governance obligations this document evidences a piece of, never fulfills." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a model's SR 26-2 revalidation-history stream; not itself an RDARR, BCBS 239, or SR 26-2 requirement." }, "golden_hash": "004af54967a31c873d890ef8f97eafef010dbdcf81ef6add591ab8fa55262d6a" }, { "name": "seq-not-integer", "policy_parameters": { "head": { "head_version": "1", "stream": "model-risk-head:MODEL-CREDIT-PD-01", "signer": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "seq": 1.5, "prev_head_hash": null, "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111", "timestamp": "2026-08-05T00:00:00Z", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "proofPurpose": "assertionMethod", "created": "2026-08-05T00:00:00Z", "proofValue": "z36T1LGhKz8AJJhq6ugKpgxAwh381zQccmoi8tCVqQq6hcWQ8s6sngbDQ7V946QrBaAm5koRv2VggGkofNC579jbF" } }, "signature_verification": { "verified": true, "verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-17" } }, "output_payload": { "stream": null, "signer": null, "seq": null, "prev_head_hash": null, "root": null, "timestamp": null, "rotates_to": null, "structural_error": "head.seq must be a non-negative integer.", "is_genesis": false, "head_hash": null, "signature_valid": null, "signature_verified_by": null, "chain_valid": null, "chain_verified_by": null, "chain_errors": [], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-562's stage-reference citations. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed validation-history tip at this seq; it does not itself detect the same signer publishing a different, conflicting head for the same (stream, seq) elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU), not this node." }, { "item": "Revalidation-cadence enforcement", "detail": "This node publishes one head-commit event. Whether a model's revalidation is overdue is computed separately by art-453-model-validation-status (next_due_in_days); this stream only makes that history citable in sequence order." }, { "item": "Root-artifact authenticity", "detail": "root is a caller-supplied execution_hash citing the period's art-562 lineage pack (or bare art-453/art-489 receipt), asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream artifact." }, { "item": "RDARR / BCBS 239 / SR 26-2 compliance", "detail": "This receipt evidences one head-commit publication event. It has no bearing on whether the underlying model is fit for use and does not itself satisfy RDARR, BCBS 239, or SR 26-2 -- those are firm-level governance obligations this document evidences a piece of, never fulfills." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a model's SR 26-2 revalidation-history stream; not itself an RDARR, BCBS 239, or SR 26-2 requirement." }, "golden_hash": "37d0f693164e95666a8f3d25f3c9f0f63c3f9eb3a7051f7cb52ab38773da6beb" }, { "name": "genesis-prev-head-hash-not-null", "policy_parameters": { "head": { "head_version": "1", "stream": "model-risk-head:MODEL-CREDIT-PD-01", "signer": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "seq": 0, "prev_head_hash": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111", "timestamp": "2026-08-05T00:00:00Z", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "proofPurpose": "assertionMethod", "created": "2026-08-05T00:00:00Z", "proofValue": "z36T1LGhKz8AJJhq6ugKpgxAwh381zQccmoi8tCVqQq6hcWQ8s6sngbDQ7V946QrBaAm5koRv2VggGkofNC579jbF" } }, "signature_verification": { "verified": true, "verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-17" } }, "output_payload": { "stream": null, "signer": null, "seq": null, "prev_head_hash": null, "root": null, "timestamp": null, "rotates_to": null, "structural_error": "head.seq is 0 (genesis) but head.prev_head_hash is not null.", "is_genesis": false, "head_hash": null, "signature_valid": null, "signature_verified_by": null, "chain_valid": null, "chain_verified_by": null, "chain_errors": [], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-562's stage-reference citations. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed validation-history tip at this seq; it does not itself detect the same signer publishing a different, conflicting head for the same (stream, seq) elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU), not this node." }, { "item": "Revalidation-cadence enforcement", "detail": "This node publishes one head-commit event. Whether a model's revalidation is overdue is computed separately by art-453-model-validation-status (next_due_in_days); this stream only makes that history citable in sequence order." }, { "item": "Root-artifact authenticity", "detail": "root is a caller-supplied execution_hash citing the period's art-562 lineage pack (or bare art-453/art-489 receipt), asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream artifact." }, { "item": "RDARR / BCBS 239 / SR 26-2 compliance", "detail": "This receipt evidences one head-commit publication event. It has no bearing on whether the underlying model is fit for use and does not itself satisfy RDARR, BCBS 239, or SR 26-2 -- those are firm-level governance obligations this document evidences a piece of, never fulfills." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a model's SR 26-2 revalidation-history stream; not itself an RDARR, BCBS 239, or SR 26-2 requirement." }, "golden_hash": "d77bdead2355100a7645de0d448b7c78109fa0e9a22cbd7bafb116b9272c3239" }, { "name": "root-bad-format", "policy_parameters": { "head": { "head_version": "1", "stream": "model-risk-head:MODEL-CREDIT-PD-01", "signer": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "seq": 0, "prev_head_hash": null, "root": "not-a-hash", "timestamp": "2026-08-05T00:00:00Z", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "proofPurpose": "assertionMethod", "created": "2026-08-05T00:00:00Z", "proofValue": "z36T1LGhKz8AJJhq6ugKpgxAwh381zQccmoi8tCVqQq6hcWQ8s6sngbDQ7V946QrBaAm5koRv2VggGkofNC579jbF" } }, "signature_verification": { "verified": true, "verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-17" } }, "output_payload": { "stream": null, "signer": null, "seq": null, "prev_head_hash": null, "root": null, "timestamp": null, "rotates_to": null, "structural_error": "head.root must be a \"sha256:\"-prefixed digest.", "is_genesis": false, "head_hash": null, "signature_valid": null, "signature_verified_by": null, "chain_valid": null, "chain_verified_by": null, "chain_errors": [], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-562's stage-reference citations. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed validation-history tip at this seq; it does not itself detect the same signer publishing a different, conflicting head for the same (stream, seq) elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU), not this node." }, { "item": "Revalidation-cadence enforcement", "detail": "This node publishes one head-commit event. Whether a model's revalidation is overdue is computed separately by art-453-model-validation-status (next_due_in_days); this stream only makes that history citable in sequence order." }, { "item": "Root-artifact authenticity", "detail": "root is a caller-supplied execution_hash citing the period's art-562 lineage pack (or bare art-453/art-489 receipt), asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream artifact." }, { "item": "RDARR / BCBS 239 / SR 26-2 compliance", "detail": "This receipt evidences one head-commit publication event. It has no bearing on whether the underlying model is fit for use and does not itself satisfy RDARR, BCBS 239, or SR 26-2 -- those are firm-level governance obligations this document evidences a piece of, never fulfills." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a model's SR 26-2 revalidation-history stream; not itself an RDARR, BCBS 239, or SR 26-2 requirement." }, "golden_hash": "4b6a739b10ae2c3e7ff5ae51544b41f76208ec5dd2b4ee1f282b6212dd2984f4" }, { "name": "timestamp-bad-format", "policy_parameters": { "head": { "head_version": "1", "stream": "model-risk-head:MODEL-CREDIT-PD-01", "signer": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "seq": 0, "prev_head_hash": null, "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111", "timestamp": "not-a-timestamp", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "proofPurpose": "assertionMethod", "created": "2026-08-05T00:00:00Z", "proofValue": "z36T1LGhKz8AJJhq6ugKpgxAwh381zQccmoi8tCVqQq6hcWQ8s6sngbDQ7V946QrBaAm5koRv2VggGkofNC579jbF" } }, "signature_verification": { "verified": true, "verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-17" } }, "output_payload": { "stream": null, "signer": null, "seq": null, "prev_head_hash": null, "root": null, "timestamp": null, "rotates_to": null, "structural_error": "head.timestamp must be an RFC3339 timestamp.", "is_genesis": false, "head_hash": null, "signature_valid": null, "signature_verified_by": null, "chain_valid": null, "chain_verified_by": null, "chain_errors": [], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-562's stage-reference citations. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed validation-history tip at this seq; it does not itself detect the same signer publishing a different, conflicting head for the same (stream, seq) elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU), not this node." }, { "item": "Revalidation-cadence enforcement", "detail": "This node publishes one head-commit event. Whether a model's revalidation is overdue is computed separately by art-453-model-validation-status (next_due_in_days); this stream only makes that history citable in sequence order." }, { "item": "Root-artifact authenticity", "detail": "root is a caller-supplied execution_hash citing the period's art-562 lineage pack (or bare art-453/art-489 receipt), asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream artifact." }, { "item": "RDARR / BCBS 239 / SR 26-2 compliance", "detail": "This receipt evidences one head-commit publication event. It has no bearing on whether the underlying model is fit for use and does not itself satisfy RDARR, BCBS 239, or SR 26-2 -- those are firm-level governance obligations this document evidences a piece of, never fulfills." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a model's SR 26-2 revalidation-history stream; not itself an RDARR, BCBS 239, or SR 26-2 requirement." }, "golden_hash": "4dddc544d3430cd77f30f103580693d755ae3ed1c2b18faa8f12afa90ad6cdf9" }, { "name": "proof-missing", "policy_parameters": { "head": { "head_version": "1", "stream": "model-risk-head:MODEL-CREDIT-PD-01", "signer": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "seq": 0, "prev_head_hash": null, "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111", "timestamp": "2026-08-05T00:00:00Z" }, "signature_verification": { "verified": true, "verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-17" } }, "output_payload": { "stream": null, "signer": null, "seq": null, "prev_head_hash": null, "root": null, "timestamp": null, "rotates_to": null, "structural_error": "head.proof is required (the head must already be signed).", "is_genesis": false, "head_hash": null, "signature_valid": null, "signature_verified_by": null, "chain_valid": null, "chain_verified_by": null, "chain_errors": [], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-562's stage-reference citations. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed validation-history tip at this seq; it does not itself detect the same signer publishing a different, conflicting head for the same (stream, seq) elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU), not this node." }, { "item": "Revalidation-cadence enforcement", "detail": "This node publishes one head-commit event. Whether a model's revalidation is overdue is computed separately by art-453-model-validation-status (next_due_in_days); this stream only makes that history citable in sequence order." }, { "item": "Root-artifact authenticity", "detail": "root is a caller-supplied execution_hash citing the period's art-562 lineage pack (or bare art-453/art-489 receipt), asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream artifact." }, { "item": "RDARR / BCBS 239 / SR 26-2 compliance", "detail": "This receipt evidences one head-commit publication event. It has no bearing on whether the underlying model is fit for use and does not itself satisfy RDARR, BCBS 239, or SR 26-2 -- those are firm-level governance obligations this document evidences a piece of, never fulfills." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a model's SR 26-2 revalidation-history stream; not itself an RDARR, BCBS 239, or SR 26-2 requirement." }, "golden_hash": "b86ebc51a7c7448ab364624525e70e31795054f5a732c01bf72bef0f9554fa85" }, { "name": "seq-positive-prev-head-hash-null", "policy_parameters": { "head": { "head_version": "1", "stream": "model-risk-head:MODEL-CREDIT-PD-01", "signer": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "seq": 1, "prev_head_hash": null, "root": "sha256:3333333333333333333333333333333333333333333333333333333333333333", "timestamp": "2026-09-05T00:00:00Z", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "proofPurpose": "assertionMethod", "created": "2026-09-05T00:00:00Z", "proofValue": "zAAAA" } }, "signature_verification": { "verified": true, "verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-17" } }, "output_payload": { "stream": null, "signer": null, "seq": null, "prev_head_hash": null, "root": null, "timestamp": null, "rotates_to": null, "structural_error": "head.seq is greater than 0 but head.prev_head_hash is null (only a genesis head may omit prev_head_hash).", "is_genesis": false, "head_hash": null, "signature_valid": null, "signature_verified_by": null, "chain_valid": null, "chain_verified_by": null, "chain_errors": [], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-562's stage-reference citations. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed validation-history tip at this seq; it does not itself detect the same signer publishing a different, conflicting head for the same (stream, seq) elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU), not this node." }, { "item": "Revalidation-cadence enforcement", "detail": "This node publishes one head-commit event. Whether a model's revalidation is overdue is computed separately by art-453-model-validation-status (next_due_in_days); this stream only makes that history citable in sequence order." }, { "item": "Root-artifact authenticity", "detail": "root is a caller-supplied execution_hash citing the period's art-562 lineage pack (or bare art-453/art-489 receipt), asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream artifact." }, { "item": "RDARR / BCBS 239 / SR 26-2 compliance", "detail": "This receipt evidences one head-commit publication event. It has no bearing on whether the underlying model is fit for use and does not itself satisfy RDARR, BCBS 239, or SR 26-2 -- those are firm-level governance obligations this document evidences a piece of, never fulfills." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a model's SR 26-2 revalidation-history stream; not itself an RDARR, BCBS 239, or SR 26-2 requirement." }, "golden_hash": "4300abd063c2ae42093f448aa7a4b4b7268e5674e14673c2ced3bdf3511352be" }, { "name": "valid-genesis-head-signature-valid", "policy_parameters": { "head": { "head_version": "1", "stream": "model-risk-head:MODEL-CREDIT-PD-01", "signer": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "seq": 0, "prev_head_hash": null, "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111", "timestamp": "2026-08-05T00:00:00Z", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "proofPurpose": "assertionMethod", "created": "2026-08-05T00:00:00Z", "proofValue": "z36T1LGhKz8AJJhq6ugKpgxAwh381zQccmoi8tCVqQq6hcWQ8s6sngbDQ7V946QrBaAm5koRv2VggGkofNC579jbF" } }, "signature_verification": { "verified": true, "verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-17" } }, "output_payload": { "stream": "model-risk-head:MODEL-CREDIT-PD-01", "signer": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "seq": 0, "prev_head_hash": null, "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111", "timestamp": "2026-08-05T00:00:00Z", "rotates_to": null, "structural_error": null, "is_genesis": true, "head_hash": "sha256:55816c618ad6751c2bb8a38c33398b4c3510fd74ad3d0632f227e05dbdc2bd5e", "signature_valid": true, "signature_verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-17", "chain_valid": null, "chain_verified_by": null, "chain_errors": [], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-562's stage-reference citations. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed validation-history tip at this seq; it does not itself detect the same signer publishing a different, conflicting head for the same (stream, seq) elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU), not this node." }, { "item": "Revalidation-cadence enforcement", "detail": "This node publishes one head-commit event. Whether a model's revalidation is overdue is computed separately by art-453-model-validation-status (next_due_in_days); this stream only makes that history citable in sequence order." }, { "item": "Root-artifact authenticity", "detail": "root is a caller-supplied execution_hash citing the period's art-562 lineage pack (or bare art-453/art-489 receipt), asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream artifact." }, { "item": "RDARR / BCBS 239 / SR 26-2 compliance", "detail": "This receipt evidences one head-commit publication event. It has no bearing on whether the underlying model is fit for use and does not itself satisfy RDARR, BCBS 239, or SR 26-2 -- those are firm-level governance obligations this document evidences a piece of, never fulfills." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a model's SR 26-2 revalidation-history stream; not itself an RDARR, BCBS 239, or SR 26-2 requirement." }, "golden_hash": "e9f2f9d74eed569f99b08362d537947044be010afb568ab981f567c9e7436abe" }, { "name": "valid-genesis-head-signature-invalid-claim", "policy_parameters": { "head": { "head_version": "1", "stream": "model-risk-head:MODEL-CREDIT-PD-01", "signer": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "seq": 0, "prev_head_hash": null, "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111", "timestamp": "2026-08-05T00:00:00Z", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "proofPurpose": "assertionMethod", "created": "2026-08-05T00:00:00Z", "proofValue": "z36T1LGhKz8AJJhq6ugKpgxAwh381zQccmoi8tCVqQq6hcWQ8s6sngbDQ7V946QrBaAm5koRv2VggGkofNC579jbF" } }, "signature_verification": { "verified": false, "verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-17" } }, "output_payload": { "stream": "model-risk-head:MODEL-CREDIT-PD-01", "signer": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "seq": 0, "prev_head_hash": null, "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111", "timestamp": "2026-08-05T00:00:00Z", "rotates_to": null, "structural_error": null, "is_genesis": true, "head_hash": "sha256:55816c618ad6751c2bb8a38c33398b4c3510fd74ad3d0632f227e05dbdc2bd5e", "signature_valid": false, "signature_verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-17", "chain_valid": null, "chain_verified_by": null, "chain_errors": [], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-562's stage-reference citations. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed validation-history tip at this seq; it does not itself detect the same signer publishing a different, conflicting head for the same (stream, seq) elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU), not this node." }, { "item": "Revalidation-cadence enforcement", "detail": "This node publishes one head-commit event. Whether a model's revalidation is overdue is computed separately by art-453-model-validation-status (next_due_in_days); this stream only makes that history citable in sequence order." }, { "item": "Root-artifact authenticity", "detail": "root is a caller-supplied execution_hash citing the period's art-562 lineage pack (or bare art-453/art-489 receipt), asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream artifact." }, { "item": "RDARR / BCBS 239 / SR 26-2 compliance", "detail": "This receipt evidences one head-commit publication event. It has no bearing on whether the underlying model is fit for use and does not itself satisfy RDARR, BCBS 239, or SR 26-2 -- those are firm-level governance obligations this document evidences a piece of, never fulfills." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a model's SR 26-2 revalidation-history stream; not itself an RDARR, BCBS 239, or SR 26-2 requirement." }, "golden_hash": "ccfb4cb9946d4abd5e49d2a1cb60358dd61d42eded38173020f23c0b7d5e7b2f" }, { "name": "valid-chained-head-with-prior-and-chain-claim", "policy_parameters": { "head": { "head_version": "1", "stream": "model-risk-head:MODEL-CREDIT-PD-01", "signer": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "seq": 1, "prev_head_hash": "sha256:2222222222222222222222222222222222222222222222222222222222222222", "root": "sha256:3333333333333333333333333333333333333333333333333333333333333333", "timestamp": "2026-09-05T00:00:00Z", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "proofPurpose": "assertionMethod", "created": "2026-09-05T00:00:00Z", "proofValue": "zAAAA" } }, "signature_verification": { "verified": true, "verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-17" }, "prior_head": { "head_version": "1", "stream": "model-risk-head:MODEL-CREDIT-PD-01", "signer": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "seq": 0, "prev_head_hash": null, "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111", "timestamp": "2026-08-05T00:00:00Z", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "proofPurpose": "assertionMethod", "created": "2026-08-05T00:00:00Z", "proofValue": "z36T1LGhKz8AJJhq6ugKpgxAwh381zQccmoi8tCVqQq6hcWQ8s6sngbDQ7V946QrBaAm5koRv2VggGkofNC579jbF" } }, "chain_verification": { "verified": true, "verified_by": "off-node _head.mjs verifyChain, 2026-08-17" } }, "output_payload": { "stream": "model-risk-head:MODEL-CREDIT-PD-01", "signer": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "seq": 1, "prev_head_hash": "sha256:2222222222222222222222222222222222222222222222222222222222222222", "root": "sha256:3333333333333333333333333333333333333333333333333333333333333333", "timestamp": "2026-09-05T00:00:00Z", "rotates_to": null, "structural_error": null, "is_genesis": false, "head_hash": "sha256:5be041904f1877b3aca31ceea66f3d2edb1e45837ecfa5c2a4424b55da29f9f0", "signature_valid": true, "signature_verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-17", "chain_valid": true, "chain_verified_by": "off-node _head.mjs verifyChain, 2026-08-17", "chain_errors": [], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-562's stage-reference citations. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed validation-history tip at this seq; it does not itself detect the same signer publishing a different, conflicting head for the same (stream, seq) elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU), not this node." }, { "item": "Revalidation-cadence enforcement", "detail": "This node publishes one head-commit event. Whether a model's revalidation is overdue is computed separately by art-453-model-validation-status (next_due_in_days); this stream only makes that history citable in sequence order." }, { "item": "Root-artifact authenticity", "detail": "root is a caller-supplied execution_hash citing the period's art-562 lineage pack (or bare art-453/art-489 receipt), asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream artifact." }, { "item": "RDARR / BCBS 239 / SR 26-2 compliance", "detail": "This receipt evidences one head-commit publication event. It has no bearing on whether the underlying model is fit for use and does not itself satisfy RDARR, BCBS 239, or SR 26-2 -- those are firm-level governance obligations this document evidences a piece of, never fulfills." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a model's SR 26-2 revalidation-history stream; not itself an RDARR, BCBS 239, or SR 26-2 requirement." }, "golden_hash": "e91d56140c08b69bdd770d431199e70f6225ba440865aef1d5d3752956f210ad" }, { "name": "chained-head-missing-chain-verification", "policy_parameters": { "head": { "head_version": "1", "stream": "model-risk-head:MODEL-CREDIT-PD-01", "signer": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "seq": 1, "prev_head_hash": "sha256:2222222222222222222222222222222222222222222222222222222222222222", "root": "sha256:3333333333333333333333333333333333333333333333333333333333333333", "timestamp": "2026-09-05T00:00:00Z", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "proofPurpose": "assertionMethod", "created": "2026-09-05T00:00:00Z", "proofValue": "zAAAA" } }, "signature_verification": { "verified": true, "verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-17" }, "prior_head": { "head_version": "1", "stream": "model-risk-head:MODEL-CREDIT-PD-01", "signer": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "seq": 0, "prev_head_hash": null, "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111", "timestamp": "2026-08-05T00:00:00Z", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "proofPurpose": "assertionMethod", "created": "2026-08-05T00:00:00Z", "proofValue": "z36T1LGhKz8AJJhq6ugKpgxAwh381zQccmoi8tCVqQq6hcWQ8s6sngbDQ7V946QrBaAm5koRv2VggGkofNC579jbF" } } }, "output_payload": { "stream": null, "signer": null, "seq": null, "prev_head_hash": null, "root": null, "timestamp": null, "rotates_to": null, "structural_error": "chain_verification is required (the caller's own verification result).", "is_genesis": false, "head_hash": null, "signature_valid": null, "signature_verified_by": null, "chain_valid": null, "chain_verified_by": null, "chain_errors": [], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-562's stage-reference citations. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed validation-history tip at this seq; it does not itself detect the same signer publishing a different, conflicting head for the same (stream, seq) elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU), not this node." }, { "item": "Revalidation-cadence enforcement", "detail": "This node publishes one head-commit event. Whether a model's revalidation is overdue is computed separately by art-453-model-validation-status (next_due_in_days); this stream only makes that history citable in sequence order." }, { "item": "Root-artifact authenticity", "detail": "root is a caller-supplied execution_hash citing the period's art-562 lineage pack (or bare art-453/art-489 receipt), asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream artifact." }, { "item": "RDARR / BCBS 239 / SR 26-2 compliance", "detail": "This receipt evidences one head-commit publication event. It has no bearing on whether the underlying model is fit for use and does not itself satisfy RDARR, BCBS 239, or SR 26-2 -- those are firm-level governance obligations this document evidences a piece of, never fulfills." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a model's SR 26-2 revalidation-history stream; not itself an RDARR, BCBS 239, or SR 26-2 requirement." }, "golden_hash": "c525085cc8d97b1dc6cfac66c14fa52f3915e54525b76055c729efe73e49ba00" }, { "name": "valid-rotation-head", "policy_parameters": { "head": { "head_version": "1", "stream": "model-risk-head:MODEL-CREDIT-PD-01", "signer": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "seq": 2, "prev_head_hash": "sha256:4444444444444444444444444444444444444444444444444444444444444444", "root": "sha256:5555555555555555555555555555555555555555555555555555555555555555", "timestamp": "2026-10-05T00:00:00Z", "rotates_to": "did:key:z6MkNEWSIGNER0000000000000000000000000000000000", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "proofPurpose": "assertionMethod", "created": "2026-10-05T00:00:00Z", "proofValue": "zBBBB" } }, "signature_verification": { "verified": true, "verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-17" } }, "output_payload": { "stream": "model-risk-head:MODEL-CREDIT-PD-01", "signer": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "seq": 2, "prev_head_hash": "sha256:4444444444444444444444444444444444444444444444444444444444444444", "root": "sha256:5555555555555555555555555555555555555555555555555555555555555555", "timestamp": "2026-10-05T00:00:00Z", "rotates_to": "did:key:z6MkNEWSIGNER0000000000000000000000000000000000", "structural_error": null, "is_genesis": false, "head_hash": "sha256:59ba8d4369d188e64068ed2107c7529c98e8c61766d1dc2aa226514f5a80d5c8", "signature_valid": true, "signature_verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-17", "chain_valid": null, "chain_verified_by": null, "chain_errors": [], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-562's stage-reference citations. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed validation-history tip at this seq; it does not itself detect the same signer publishing a different, conflicting head for the same (stream, seq) elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU), not this node." }, { "item": "Revalidation-cadence enforcement", "detail": "This node publishes one head-commit event. Whether a model's revalidation is overdue is computed separately by art-453-model-validation-status (next_due_in_days); this stream only makes that history citable in sequence order." }, { "item": "Root-artifact authenticity", "detail": "root is a caller-supplied execution_hash citing the period's art-562 lineage pack (or bare art-453/art-489 receipt), asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream artifact." }, { "item": "RDARR / BCBS 239 / SR 26-2 compliance", "detail": "This receipt evidences one head-commit publication event. It has no bearing on whether the underlying model is fit for use and does not itself satisfy RDARR, BCBS 239, or SR 26-2 -- those are firm-level governance obligations this document evidences a piece of, never fulfills." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a model's SR 26-2 revalidation-history stream; not itself an RDARR, BCBS 239, or SR 26-2 requirement." }, "golden_hash": "55ad7fe5a172ca62d359777d9620eaef2f2d60edd4cf004b321c11787d6bd947" } ] }