{ "tool_id": "art-659-publish-fund-nav-head", "note": "Golden fixtures for the tokenized-fund daily-NAV SPEC.md HEAD-1 head-commit publish kernel (NAV-LINEAGE-BUILD-SPEC.md sec.3). output_payload is buildArtifact()'s canonical result (matches golden_hash / vm-parity-gate, both of which run buildArtifact, never compute() alone): head_hash is filled in only there (independent pure-SHA-256 recompute). signature_valid/chain_valid are the CALLER's own verification claim (pp.signature_verification / pp.chain_verification), echoed verbatim by compute() itself -- never recomputed by this node (see the kernel HARD FENCE comment for why: the real zkVM guest has no WebCrypto, and the VM<->worker parity harness's crypto.subtle.verify bridge was measured to diverge from the worker during art-649 authoring, the sibling this kernel follows). Covers: missing head, missing/malformed verification-claim shape, every structural-shape violation validateHeadShape() checks, and five valid shapes (genesis with a true claim, genesis with a caller-asserted false claim -- still a valid receipt, just recording a failed verification -- chained with a chain claim, chained missing the required chain claim, and a rotation-announced head). human_sign_off: PENDING (this row does not sign -- manifest-level signature per spec sec.3).", "vectors": [ { "name": "missing-head", "policy_parameters": {}, "output_payload": { "stream": null, "signer": null, "seq": null, "prev_head_hash": null, "root": null, "timestamp": null, "rotates_to": null, "structural_error": "head is required.", "is_genesis": false, "head_hash": null, "signature_valid": null, "signature_verified_by": null, "chain_valid": null, "chain_verified_by": null, "chain_errors": [], "errors": [ "head is required." ], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-649's own caller-verification-claim convention. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed daily-NAV tip at this seq; it does not itself detect the same signer publishing a different, conflicting NAV for the same day elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU per NAV-LINEAGE-BUILD-SPEC.md §3), not this node." }, { "item": "Daily NAV computation accuracy", "detail": "root is a caller-supplied execution_hash citing the day's art-373-recompute-fund-nav receipt, asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream NAV computation, nor that the computation was accurate." }, { "item": "Tokenized-fund on-chain share representation", "detail": "This receipt attests a signed publication event over a declared NAV-per-share figure. It makes no claim about the tokenized fund's on-chain share representation, token supply, or transfer mechanics -- those are out of scope for this node." }, { "item": "NAV-error / fund-administration compliance", "detail": "This receipt evidences one head-commit publication event. It has no bearing on whether the underlying NAV calculation was accurate and does not itself satisfy any fund-administration, custody, or NAV-error disclosure regime (e.g. CSSF 24/856-shaped disclosure) -- those obligations live with the fund administrator and with the art-373/art-374/nav-error-evidence-pack chain this stream cites, never with this node." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a tokenized fund's daily-NAV stream per NAV-LINEAGE-BUILD-SPEC.md §3; not itself a fund-administration, custody, or NAV-error disclosure requirement." }, "golden_hash": "19672b26827960f6d6f3eb905586ef3db61939d07bf281cd78817d0dc96313af" }, { "name": "head-missing-signature-verification", "policy_parameters": { "head": { "head_version": "1", "stream": "fund-nav:ACME-TOKENIZED-FUND-01", "signer": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK", "seq": 0, "prev_head_hash": null, "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111", "timestamp": "2026-08-27T00:00:00Z", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK", "proofPurpose": "assertionMethod", "created": "2026-08-27T00:00:00Z", "proofValue": "z36T1LGhKz8AJJhq6ugKpgxAwh381zQccmoi8tCVqQq6hcWQ8s6sngbDQ7V946QrBaAm5koRv2VggGkofNC579jbF" } } }, "output_payload": { "stream": null, "signer": null, "seq": null, "prev_head_hash": null, "root": null, "timestamp": null, "rotates_to": null, "structural_error": "signature_verification is required (the caller's own verification result).", "is_genesis": false, "head_hash": null, "signature_valid": null, "signature_verified_by": null, "chain_valid": null, "chain_verified_by": null, "chain_errors": [], "errors": [ "signature_verification is required (the caller's own verification result)." ], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-649's own caller-verification-claim convention. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed daily-NAV tip at this seq; it does not itself detect the same signer publishing a different, conflicting NAV for the same day elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU per NAV-LINEAGE-BUILD-SPEC.md §3), not this node." }, { "item": "Daily NAV computation accuracy", "detail": "root is a caller-supplied execution_hash citing the day's art-373-recompute-fund-nav receipt, asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream NAV computation, nor that the computation was accurate." }, { "item": "Tokenized-fund on-chain share representation", "detail": "This receipt attests a signed publication event over a declared NAV-per-share figure. It makes no claim about the tokenized fund's on-chain share representation, token supply, or transfer mechanics -- those are out of scope for this node." }, { "item": "NAV-error / fund-administration compliance", "detail": "This receipt evidences one head-commit publication event. It has no bearing on whether the underlying NAV calculation was accurate and does not itself satisfy any fund-administration, custody, or NAV-error disclosure regime (e.g. CSSF 24/856-shaped disclosure) -- those obligations live with the fund administrator and with the art-373/art-374/nav-error-evidence-pack chain this stream cites, never with this node." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a tokenized fund's daily-NAV stream per NAV-LINEAGE-BUILD-SPEC.md §3; not itself a fund-administration, custody, or NAV-error disclosure requirement." }, "golden_hash": "e0d5c69d5300e9f74a063c5d073bf06bfc6a33bfb8e76bfa2022fe2161ac4047" }, { "name": "signature-verification-missing-verified-by", "policy_parameters": { "head": { "head_version": "1", "stream": "fund-nav:ACME-TOKENIZED-FUND-01", "signer": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK", "seq": 0, "prev_head_hash": null, "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111", "timestamp": "2026-08-27T00:00:00Z", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK", "proofPurpose": "assertionMethod", "created": "2026-08-27T00:00:00Z", "proofValue": "z36T1LGhKz8AJJhq6ugKpgxAwh381zQccmoi8tCVqQq6hcWQ8s6sngbDQ7V946QrBaAm5koRv2VggGkofNC579jbF" } }, "signature_verification": { "verified": true } }, "output_payload": { "stream": null, "signer": null, "seq": null, "prev_head_hash": null, "root": null, "timestamp": null, "rotates_to": null, "structural_error": "signature_verification.verified_by is required (free text naming the tool/method used to verify).", "is_genesis": false, "head_hash": null, "signature_valid": null, "signature_verified_by": null, "chain_valid": null, "chain_verified_by": null, "chain_errors": [], "errors": [ "signature_verification.verified_by is required (free text naming the tool/method used to verify)." ], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-649's own caller-verification-claim convention. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed daily-NAV tip at this seq; it does not itself detect the same signer publishing a different, conflicting NAV for the same day elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU per NAV-LINEAGE-BUILD-SPEC.md §3), not this node." }, { "item": "Daily NAV computation accuracy", "detail": "root is a caller-supplied execution_hash citing the day's art-373-recompute-fund-nav receipt, asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream NAV computation, nor that the computation was accurate." }, { "item": "Tokenized-fund on-chain share representation", "detail": "This receipt attests a signed publication event over a declared NAV-per-share figure. It makes no claim about the tokenized fund's on-chain share representation, token supply, or transfer mechanics -- those are out of scope for this node." }, { "item": "NAV-error / fund-administration compliance", "detail": "This receipt evidences one head-commit publication event. It has no bearing on whether the underlying NAV calculation was accurate and does not itself satisfy any fund-administration, custody, or NAV-error disclosure regime (e.g. CSSF 24/856-shaped disclosure) -- those obligations live with the fund administrator and with the art-373/art-374/nav-error-evidence-pack chain this stream cites, never with this node." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a tokenized fund's daily-NAV stream per NAV-LINEAGE-BUILD-SPEC.md §3; not itself a fund-administration, custody, or NAV-error disclosure requirement." }, "golden_hash": "b4296112599add6068bf4ff6aa2330829fef7535345d43145c81ea1f47bf152f" }, { "name": "signer-not-did-key", "policy_parameters": { "head": { "head_version": "1", "stream": "fund-nav:ACME-TOKENIZED-FUND-01", "signer": "not-a-did", "seq": 0, "prev_head_hash": null, "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111", "timestamp": "2026-08-27T00:00:00Z", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "not-a-did", "proofPurpose": "assertionMethod", "created": "2026-08-27T00:00:00Z", "proofValue": "z36T1LGhKz8AJJhq6ugKpgxAwh381zQccmoi8tCVqQq6hcWQ8s6sngbDQ7V946QrBaAm5koRv2VggGkofNC579jbF" } }, "signature_verification": { "verified": true, "verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-27" } }, "output_payload": { "stream": null, "signer": null, "seq": null, "prev_head_hash": null, "root": null, "timestamp": null, "rotates_to": null, "structural_error": "head.signer must be a did:key.", "is_genesis": false, "head_hash": null, "signature_valid": null, "signature_verified_by": null, "chain_valid": null, "chain_verified_by": null, "chain_errors": [], "errors": [ "head.signer must be a did:key." ], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-649's own caller-verification-claim convention. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed daily-NAV tip at this seq; it does not itself detect the same signer publishing a different, conflicting NAV for the same day elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU per NAV-LINEAGE-BUILD-SPEC.md §3), not this node." }, { "item": "Daily NAV computation accuracy", "detail": "root is a caller-supplied execution_hash citing the day's art-373-recompute-fund-nav receipt, asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream NAV computation, nor that the computation was accurate." }, { "item": "Tokenized-fund on-chain share representation", "detail": "This receipt attests a signed publication event over a declared NAV-per-share figure. It makes no claim about the tokenized fund's on-chain share representation, token supply, or transfer mechanics -- those are out of scope for this node." }, { "item": "NAV-error / fund-administration compliance", "detail": "This receipt evidences one head-commit publication event. It has no bearing on whether the underlying NAV calculation was accurate and does not itself satisfy any fund-administration, custody, or NAV-error disclosure regime (e.g. CSSF 24/856-shaped disclosure) -- those obligations live with the fund administrator and with the art-373/art-374/nav-error-evidence-pack chain this stream cites, never with this node." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a tokenized fund's daily-NAV stream per NAV-LINEAGE-BUILD-SPEC.md §3; not itself a fund-administration, custody, or NAV-error disclosure requirement." }, "golden_hash": "40c04704c414b3296704f6bf17791848da611c45ba53cdc6c3b1be8758540834" }, { "name": "seq-not-integer", "policy_parameters": { "head": { "head_version": "1", "stream": "fund-nav:ACME-TOKENIZED-FUND-01", "signer": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK", "seq": 1.5, "prev_head_hash": null, "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111", "timestamp": "2026-08-27T00:00:00Z", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK", "proofPurpose": "assertionMethod", "created": "2026-08-27T00:00:00Z", "proofValue": "z36T1LGhKz8AJJhq6ugKpgxAwh381zQccmoi8tCVqQq6hcWQ8s6sngbDQ7V946QrBaAm5koRv2VggGkofNC579jbF" } }, "signature_verification": { "verified": true, "verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-27" } }, "output_payload": { "stream": null, "signer": null, "seq": null, "prev_head_hash": null, "root": null, "timestamp": null, "rotates_to": null, "structural_error": "head.seq must be a non-negative integer.", "is_genesis": false, "head_hash": null, "signature_valid": null, "signature_verified_by": null, "chain_valid": null, "chain_verified_by": null, "chain_errors": [], "errors": [ "head.seq must be a non-negative integer." ], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-649's own caller-verification-claim convention. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed daily-NAV tip at this seq; it does not itself detect the same signer publishing a different, conflicting NAV for the same day elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU per NAV-LINEAGE-BUILD-SPEC.md §3), not this node." }, { "item": "Daily NAV computation accuracy", "detail": "root is a caller-supplied execution_hash citing the day's art-373-recompute-fund-nav receipt, asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream NAV computation, nor that the computation was accurate." }, { "item": "Tokenized-fund on-chain share representation", "detail": "This receipt attests a signed publication event over a declared NAV-per-share figure. It makes no claim about the tokenized fund's on-chain share representation, token supply, or transfer mechanics -- those are out of scope for this node." }, { "item": "NAV-error / fund-administration compliance", "detail": "This receipt evidences one head-commit publication event. It has no bearing on whether the underlying NAV calculation was accurate and does not itself satisfy any fund-administration, custody, or NAV-error disclosure regime (e.g. CSSF 24/856-shaped disclosure) -- those obligations live with the fund administrator and with the art-373/art-374/nav-error-evidence-pack chain this stream cites, never with this node." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a tokenized fund's daily-NAV stream per NAV-LINEAGE-BUILD-SPEC.md §3; not itself a fund-administration, custody, or NAV-error disclosure requirement." }, "golden_hash": "4069321656aa1118e88567b193612f9ba4a8894b40d5603a7d19ff05d1ac7c57" }, { "name": "genesis-prev-head-hash-not-null", "policy_parameters": { "head": { "head_version": "1", "stream": "fund-nav:ACME-TOKENIZED-FUND-01", "signer": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK", "seq": 0, "prev_head_hash": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111", "timestamp": "2026-08-27T00:00:00Z", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK", "proofPurpose": "assertionMethod", "created": "2026-08-27T00:00:00Z", "proofValue": "z36T1LGhKz8AJJhq6ugKpgxAwh381zQccmoi8tCVqQq6hcWQ8s6sngbDQ7V946QrBaAm5koRv2VggGkofNC579jbF" } }, "signature_verification": { "verified": true, "verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-27" } }, "output_payload": { "stream": null, "signer": null, "seq": null, "prev_head_hash": null, "root": null, "timestamp": null, "rotates_to": null, "structural_error": "head.seq is 0 (genesis) but head.prev_head_hash is not null.", "is_genesis": false, "head_hash": null, "signature_valid": null, "signature_verified_by": null, "chain_valid": null, "chain_verified_by": null, "chain_errors": [], "errors": [ "head.seq is 0 (genesis) but head.prev_head_hash is not null." ], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-649's own caller-verification-claim convention. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed daily-NAV tip at this seq; it does not itself detect the same signer publishing a different, conflicting NAV for the same day elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU per NAV-LINEAGE-BUILD-SPEC.md §3), not this node." }, { "item": "Daily NAV computation accuracy", "detail": "root is a caller-supplied execution_hash citing the day's art-373-recompute-fund-nav receipt, asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream NAV computation, nor that the computation was accurate." }, { "item": "Tokenized-fund on-chain share representation", "detail": "This receipt attests a signed publication event over a declared NAV-per-share figure. It makes no claim about the tokenized fund's on-chain share representation, token supply, or transfer mechanics -- those are out of scope for this node." }, { "item": "NAV-error / fund-administration compliance", "detail": "This receipt evidences one head-commit publication event. It has no bearing on whether the underlying NAV calculation was accurate and does not itself satisfy any fund-administration, custody, or NAV-error disclosure regime (e.g. CSSF 24/856-shaped disclosure) -- those obligations live with the fund administrator and with the art-373/art-374/nav-error-evidence-pack chain this stream cites, never with this node." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a tokenized fund's daily-NAV stream per NAV-LINEAGE-BUILD-SPEC.md §3; not itself a fund-administration, custody, or NAV-error disclosure requirement." }, "golden_hash": "24f9ac7896813f58dc25d7c73a9008d064425c79ace90d8062c3c7ae47596c7b" }, { "name": "root-bad-format", "policy_parameters": { "head": { "head_version": "1", "stream": "fund-nav:ACME-TOKENIZED-FUND-01", "signer": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK", "seq": 0, "prev_head_hash": null, "root": "not-a-hash", "timestamp": "2026-08-27T00:00:00Z", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK", "proofPurpose": "assertionMethod", "created": "2026-08-27T00:00:00Z", "proofValue": "z36T1LGhKz8AJJhq6ugKpgxAwh381zQccmoi8tCVqQq6hcWQ8s6sngbDQ7V946QrBaAm5koRv2VggGkofNC579jbF" } }, "signature_verification": { "verified": true, "verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-27" } }, "output_payload": { "stream": null, "signer": null, "seq": null, "prev_head_hash": null, "root": null, "timestamp": null, "rotates_to": null, "structural_error": "head.root must be a \"sha256:\"-prefixed digest.", "is_genesis": false, "head_hash": null, "signature_valid": null, "signature_verified_by": null, "chain_valid": null, "chain_verified_by": null, "chain_errors": [], "errors": [ "head.root must be a \"sha256:\"-prefixed digest." ], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-649's own caller-verification-claim convention. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed daily-NAV tip at this seq; it does not itself detect the same signer publishing a different, conflicting NAV for the same day elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU per NAV-LINEAGE-BUILD-SPEC.md §3), not this node." }, { "item": "Daily NAV computation accuracy", "detail": "root is a caller-supplied execution_hash citing the day's art-373-recompute-fund-nav receipt, asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream NAV computation, nor that the computation was accurate." }, { "item": "Tokenized-fund on-chain share representation", "detail": "This receipt attests a signed publication event over a declared NAV-per-share figure. It makes no claim about the tokenized fund's on-chain share representation, token supply, or transfer mechanics -- those are out of scope for this node." }, { "item": "NAV-error / fund-administration compliance", "detail": "This receipt evidences one head-commit publication event. It has no bearing on whether the underlying NAV calculation was accurate and does not itself satisfy any fund-administration, custody, or NAV-error disclosure regime (e.g. CSSF 24/856-shaped disclosure) -- those obligations live with the fund administrator and with the art-373/art-374/nav-error-evidence-pack chain this stream cites, never with this node." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a tokenized fund's daily-NAV stream per NAV-LINEAGE-BUILD-SPEC.md §3; not itself a fund-administration, custody, or NAV-error disclosure requirement." }, "golden_hash": "538171d2dbe706183173fa3cf2afaa5ac6e587623a08e4bb00d980313fd2f4d6" }, { "name": "timestamp-bad-format", "policy_parameters": { "head": { "head_version": "1", "stream": "fund-nav:ACME-TOKENIZED-FUND-01", "signer": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK", "seq": 0, "prev_head_hash": null, "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111", "timestamp": "not-a-timestamp", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK", "proofPurpose": "assertionMethod", "created": "2026-08-27T00:00:00Z", "proofValue": "z36T1LGhKz8AJJhq6ugKpgxAwh381zQccmoi8tCVqQq6hcWQ8s6sngbDQ7V946QrBaAm5koRv2VggGkofNC579jbF" } }, "signature_verification": { "verified": true, "verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-27" } }, "output_payload": { "stream": null, "signer": null, "seq": null, "prev_head_hash": null, "root": null, "timestamp": null, "rotates_to": null, "structural_error": "head.timestamp must be an RFC3339 timestamp.", "is_genesis": false, "head_hash": null, "signature_valid": null, "signature_verified_by": null, "chain_valid": null, "chain_verified_by": null, "chain_errors": [], "errors": [ "head.timestamp must be an RFC3339 timestamp." ], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-649's own caller-verification-claim convention. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed daily-NAV tip at this seq; it does not itself detect the same signer publishing a different, conflicting NAV for the same day elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU per NAV-LINEAGE-BUILD-SPEC.md §3), not this node." }, { "item": "Daily NAV computation accuracy", "detail": "root is a caller-supplied execution_hash citing the day's art-373-recompute-fund-nav receipt, asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream NAV computation, nor that the computation was accurate." }, { "item": "Tokenized-fund on-chain share representation", "detail": "This receipt attests a signed publication event over a declared NAV-per-share figure. It makes no claim about the tokenized fund's on-chain share representation, token supply, or transfer mechanics -- those are out of scope for this node." }, { "item": "NAV-error / fund-administration compliance", "detail": "This receipt evidences one head-commit publication event. It has no bearing on whether the underlying NAV calculation was accurate and does not itself satisfy any fund-administration, custody, or NAV-error disclosure regime (e.g. CSSF 24/856-shaped disclosure) -- those obligations live with the fund administrator and with the art-373/art-374/nav-error-evidence-pack chain this stream cites, never with this node." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a tokenized fund's daily-NAV stream per NAV-LINEAGE-BUILD-SPEC.md §3; not itself a fund-administration, custody, or NAV-error disclosure requirement." }, "golden_hash": "f4e7248bf8a7b6f286591c064e898fc35ce30dbae448c4117a396b6b75e0af5a" }, { "name": "proof-missing", "policy_parameters": { "head": { "head_version": "1", "stream": "fund-nav:ACME-TOKENIZED-FUND-01", "signer": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK", "seq": 0, "prev_head_hash": null, "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111", "timestamp": "2026-08-27T00:00:00Z" }, "signature_verification": { "verified": true, "verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-27" } }, "output_payload": { "stream": null, "signer": null, "seq": null, "prev_head_hash": null, "root": null, "timestamp": null, "rotates_to": null, "structural_error": "head.proof is required (the head must already be signed).", "is_genesis": false, "head_hash": null, "signature_valid": null, "signature_verified_by": null, "chain_valid": null, "chain_verified_by": null, "chain_errors": [], "errors": [ "head.proof is required (the head must already be signed)." ], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-649's own caller-verification-claim convention. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed daily-NAV tip at this seq; it does not itself detect the same signer publishing a different, conflicting NAV for the same day elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU per NAV-LINEAGE-BUILD-SPEC.md §3), not this node." }, { "item": "Daily NAV computation accuracy", "detail": "root is a caller-supplied execution_hash citing the day's art-373-recompute-fund-nav receipt, asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream NAV computation, nor that the computation was accurate." }, { "item": "Tokenized-fund on-chain share representation", "detail": "This receipt attests a signed publication event over a declared NAV-per-share figure. It makes no claim about the tokenized fund's on-chain share representation, token supply, or transfer mechanics -- those are out of scope for this node." }, { "item": "NAV-error / fund-administration compliance", "detail": "This receipt evidences one head-commit publication event. It has no bearing on whether the underlying NAV calculation was accurate and does not itself satisfy any fund-administration, custody, or NAV-error disclosure regime (e.g. CSSF 24/856-shaped disclosure) -- those obligations live with the fund administrator and with the art-373/art-374/nav-error-evidence-pack chain this stream cites, never with this node." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a tokenized fund's daily-NAV stream per NAV-LINEAGE-BUILD-SPEC.md §3; not itself a fund-administration, custody, or NAV-error disclosure requirement." }, "golden_hash": "4b57f80a684eb533156e40434aaab06e893964a381f07937f8ee33ac4557faab" }, { "name": "seq-positive-prev-head-hash-null", "policy_parameters": { "head": { "head_version": "1", "stream": "fund-nav:ACME-TOKENIZED-FUND-01", "signer": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK", "seq": 1, "prev_head_hash": null, "root": "sha256:3333333333333333333333333333333333333333333333333333333333333333", "timestamp": "2026-08-28T00:00:00Z", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK", "proofPurpose": "assertionMethod", "created": "2026-08-27T00:00:00Z", "proofValue": "z36T1LGhKz8AJJhq6ugKpgxAwh381zQccmoi8tCVqQq6hcWQ8s6sngbDQ7V946QrBaAm5koRv2VggGkofNC579jbF" } }, "signature_verification": { "verified": true, "verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-27" } }, "output_payload": { "stream": null, "signer": null, "seq": null, "prev_head_hash": null, "root": null, "timestamp": null, "rotates_to": null, "structural_error": "head.seq is greater than 0 but head.prev_head_hash is null (only a genesis head may omit prev_head_hash).", "is_genesis": false, "head_hash": null, "signature_valid": null, "signature_verified_by": null, "chain_valid": null, "chain_verified_by": null, "chain_errors": [], "errors": [ "head.seq is greater than 0 but head.prev_head_hash is null (only a genesis head may omit prev_head_hash)." ], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-649's own caller-verification-claim convention. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed daily-NAV tip at this seq; it does not itself detect the same signer publishing a different, conflicting NAV for the same day elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU per NAV-LINEAGE-BUILD-SPEC.md §3), not this node." }, { "item": "Daily NAV computation accuracy", "detail": "root is a caller-supplied execution_hash citing the day's art-373-recompute-fund-nav receipt, asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream NAV computation, nor that the computation was accurate." }, { "item": "Tokenized-fund on-chain share representation", "detail": "This receipt attests a signed publication event over a declared NAV-per-share figure. It makes no claim about the tokenized fund's on-chain share representation, token supply, or transfer mechanics -- those are out of scope for this node." }, { "item": "NAV-error / fund-administration compliance", "detail": "This receipt evidences one head-commit publication event. It has no bearing on whether the underlying NAV calculation was accurate and does not itself satisfy any fund-administration, custody, or NAV-error disclosure regime (e.g. CSSF 24/856-shaped disclosure) -- those obligations live with the fund administrator and with the art-373/art-374/nav-error-evidence-pack chain this stream cites, never with this node." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a tokenized fund's daily-NAV stream per NAV-LINEAGE-BUILD-SPEC.md §3; not itself a fund-administration, custody, or NAV-error disclosure requirement." }, "golden_hash": "4b5983d2388a8f96a724aded68dec5831e01ba53e6dbcbee4781991bf93dc967" }, { "name": "valid-genesis-head-signature-valid", "policy_parameters": { "head": { "head_version": "1", "stream": "fund-nav:ACME-TOKENIZED-FUND-01", "signer": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK", "seq": 0, "prev_head_hash": null, "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111", "timestamp": "2026-08-27T00:00:00Z", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK", "proofPurpose": "assertionMethod", "created": "2026-08-27T00:00:00Z", "proofValue": "z36T1LGhKz8AJJhq6ugKpgxAwh381zQccmoi8tCVqQq6hcWQ8s6sngbDQ7V946QrBaAm5koRv2VggGkofNC579jbF" } }, "signature_verification": { "verified": true, "verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-27" } }, "output_payload": { "stream": "fund-nav:ACME-TOKENIZED-FUND-01", "signer": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK", "seq": 0, "prev_head_hash": null, "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111", "timestamp": "2026-08-27T00:00:00Z", "rotates_to": null, "structural_error": null, "is_genesis": true, "head_hash": "sha256:a057da8ced2678ad3d95836ed0f0f47104acd8cb448df6fe2f3c2798f429613e", "signature_valid": true, "signature_verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-27", "chain_valid": null, "chain_verified_by": null, "chain_errors": [], "errors": [], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-649's own caller-verification-claim convention. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed daily-NAV tip at this seq; it does not itself detect the same signer publishing a different, conflicting NAV for the same day elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU per NAV-LINEAGE-BUILD-SPEC.md §3), not this node." }, { "item": "Daily NAV computation accuracy", "detail": "root is a caller-supplied execution_hash citing the day's art-373-recompute-fund-nav receipt, asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream NAV computation, nor that the computation was accurate." }, { "item": "Tokenized-fund on-chain share representation", "detail": "This receipt attests a signed publication event over a declared NAV-per-share figure. It makes no claim about the tokenized fund's on-chain share representation, token supply, or transfer mechanics -- those are out of scope for this node." }, { "item": "NAV-error / fund-administration compliance", "detail": "This receipt evidences one head-commit publication event. It has no bearing on whether the underlying NAV calculation was accurate and does not itself satisfy any fund-administration, custody, or NAV-error disclosure regime (e.g. CSSF 24/856-shaped disclosure) -- those obligations live with the fund administrator and with the art-373/art-374/nav-error-evidence-pack chain this stream cites, never with this node." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a tokenized fund's daily-NAV stream per NAV-LINEAGE-BUILD-SPEC.md §3; not itself a fund-administration, custody, or NAV-error disclosure requirement." }, "golden_hash": "d1d3d8f53cacd128371cfc25ea45db68c919ec7c5c1373443e7bd547f9cbefe7" }, { "name": "valid-genesis-head-signature-invalid-claim", "policy_parameters": { "head": { "head_version": "1", "stream": "fund-nav:ACME-TOKENIZED-FUND-01", "signer": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK", "seq": 0, "prev_head_hash": null, "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111", "timestamp": "2026-08-27T00:00:00Z", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK", "proofPurpose": "assertionMethod", "created": "2026-08-27T00:00:00Z", "proofValue": "z36T1LGhKz8AJJhq6ugKpgxAwh381zQccmoi8tCVqQq6hcWQ8s6sngbDQ7V946QrBaAm5koRv2VggGkofNC579jbF" } }, "signature_verification": { "verified": false, "verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-27" } }, "output_payload": { "stream": "fund-nav:ACME-TOKENIZED-FUND-01", "signer": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK", "seq": 0, "prev_head_hash": null, "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111", "timestamp": "2026-08-27T00:00:00Z", "rotates_to": null, "structural_error": null, "is_genesis": true, "head_hash": "sha256:a057da8ced2678ad3d95836ed0f0f47104acd8cb448df6fe2f3c2798f429613e", "signature_valid": false, "signature_verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-27", "chain_valid": null, "chain_verified_by": null, "chain_errors": [], "errors": [], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-649's own caller-verification-claim convention. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed daily-NAV tip at this seq; it does not itself detect the same signer publishing a different, conflicting NAV for the same day elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU per NAV-LINEAGE-BUILD-SPEC.md §3), not this node." }, { "item": "Daily NAV computation accuracy", "detail": "root is a caller-supplied execution_hash citing the day's art-373-recompute-fund-nav receipt, asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream NAV computation, nor that the computation was accurate." }, { "item": "Tokenized-fund on-chain share representation", "detail": "This receipt attests a signed publication event over a declared NAV-per-share figure. It makes no claim about the tokenized fund's on-chain share representation, token supply, or transfer mechanics -- those are out of scope for this node." }, { "item": "NAV-error / fund-administration compliance", "detail": "This receipt evidences one head-commit publication event. It has no bearing on whether the underlying NAV calculation was accurate and does not itself satisfy any fund-administration, custody, or NAV-error disclosure regime (e.g. CSSF 24/856-shaped disclosure) -- those obligations live with the fund administrator and with the art-373/art-374/nav-error-evidence-pack chain this stream cites, never with this node." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a tokenized fund's daily-NAV stream per NAV-LINEAGE-BUILD-SPEC.md §3; not itself a fund-administration, custody, or NAV-error disclosure requirement." }, "golden_hash": "7809f2cf65b7829a173e1d503ef9e85909cb580369fe9da06a85faf3268b578f" }, { "name": "valid-chained-head-with-prior-and-chain-claim", "policy_parameters": { "head": { "head_version": "1", "stream": "fund-nav:ACME-TOKENIZED-FUND-01", "signer": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK", "seq": 1, "prev_head_hash": "sha256:2222222222222222222222222222222222222222222222222222222222222222", "root": "sha256:3333333333333333333333333333333333333333333333333333333333333333", "timestamp": "2026-08-28T00:00:00Z", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK", "proofPurpose": "assertionMethod", "created": "2026-08-27T00:00:00Z", "proofValue": "z36T1LGhKz8AJJhq6ugKpgxAwh381zQccmoi8tCVqQq6hcWQ8s6sngbDQ7V946QrBaAm5koRv2VggGkofNC579jbF" } }, "signature_verification": { "verified": true, "verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-27" }, "prior_head": { "head_version": "1", "stream": "fund-nav:ACME-TOKENIZED-FUND-01", "signer": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK", "seq": 0, "prev_head_hash": null, "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111", "timestamp": "2026-08-27T00:00:00Z", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK", "proofPurpose": "assertionMethod", "created": "2026-08-27T00:00:00Z", "proofValue": "z36T1LGhKz8AJJhq6ugKpgxAwh381zQccmoi8tCVqQq6hcWQ8s6sngbDQ7V946QrBaAm5koRv2VggGkofNC579jbF" } }, "chain_verification": { "verified": true, "verified_by": "off-node _head.mjs verifyChain, 2026-08-27" } }, "output_payload": { "stream": "fund-nav:ACME-TOKENIZED-FUND-01", "signer": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK", "seq": 1, "prev_head_hash": "sha256:2222222222222222222222222222222222222222222222222222222222222222", "root": "sha256:3333333333333333333333333333333333333333333333333333333333333333", "timestamp": "2026-08-28T00:00:00Z", "rotates_to": null, "structural_error": null, "is_genesis": false, "head_hash": "sha256:6911bdce0dda647154313f16d749010eff8aea6821f3a7c847875fbb128527e2", "signature_valid": true, "signature_verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-27", "chain_valid": true, "chain_verified_by": "off-node _head.mjs verifyChain, 2026-08-27", "chain_errors": [], "errors": [], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-649's own caller-verification-claim convention. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed daily-NAV tip at this seq; it does not itself detect the same signer publishing a different, conflicting NAV for the same day elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU per NAV-LINEAGE-BUILD-SPEC.md §3), not this node." }, { "item": "Daily NAV computation accuracy", "detail": "root is a caller-supplied execution_hash citing the day's art-373-recompute-fund-nav receipt, asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream NAV computation, nor that the computation was accurate." }, { "item": "Tokenized-fund on-chain share representation", "detail": "This receipt attests a signed publication event over a declared NAV-per-share figure. It makes no claim about the tokenized fund's on-chain share representation, token supply, or transfer mechanics -- those are out of scope for this node." }, { "item": "NAV-error / fund-administration compliance", "detail": "This receipt evidences one head-commit publication event. It has no bearing on whether the underlying NAV calculation was accurate and does not itself satisfy any fund-administration, custody, or NAV-error disclosure regime (e.g. CSSF 24/856-shaped disclosure) -- those obligations live with the fund administrator and with the art-373/art-374/nav-error-evidence-pack chain this stream cites, never with this node." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a tokenized fund's daily-NAV stream per NAV-LINEAGE-BUILD-SPEC.md §3; not itself a fund-administration, custody, or NAV-error disclosure requirement." }, "golden_hash": "8f97b696e2ed7d33bf448a7201520006d8e15221c992b21945e0f6ce2c675b83" }, { "name": "chained-head-missing-chain-verification", "policy_parameters": { "head": { "head_version": "1", "stream": "fund-nav:ACME-TOKENIZED-FUND-01", "signer": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK", "seq": 1, "prev_head_hash": "sha256:2222222222222222222222222222222222222222222222222222222222222222", "root": "sha256:3333333333333333333333333333333333333333333333333333333333333333", "timestamp": "2026-08-28T00:00:00Z", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK", "proofPurpose": "assertionMethod", "created": "2026-08-27T00:00:00Z", "proofValue": "z36T1LGhKz8AJJhq6ugKpgxAwh381zQccmoi8tCVqQq6hcWQ8s6sngbDQ7V946QrBaAm5koRv2VggGkofNC579jbF" } }, "signature_verification": { "verified": true, "verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-27" }, "prior_head": { "head_version": "1", "stream": "fund-nav:ACME-TOKENIZED-FUND-01", "signer": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK", "seq": 0, "prev_head_hash": null, "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111", "timestamp": "2026-08-27T00:00:00Z", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK", "proofPurpose": "assertionMethod", "created": "2026-08-27T00:00:00Z", "proofValue": "z36T1LGhKz8AJJhq6ugKpgxAwh381zQccmoi8tCVqQq6hcWQ8s6sngbDQ7V946QrBaAm5koRv2VggGkofNC579jbF" } } }, "output_payload": { "stream": null, "signer": null, "seq": null, "prev_head_hash": null, "root": null, "timestamp": null, "rotates_to": null, "structural_error": "chain_verification is required (the caller's own verification result).", "is_genesis": false, "head_hash": null, "signature_valid": null, "signature_verified_by": null, "chain_valid": null, "chain_verified_by": null, "chain_errors": [], "errors": [ "chain_verification is required (the caller's own verification result)." ], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-649's own caller-verification-claim convention. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed daily-NAV tip at this seq; it does not itself detect the same signer publishing a different, conflicting NAV for the same day elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU per NAV-LINEAGE-BUILD-SPEC.md §3), not this node." }, { "item": "Daily NAV computation accuracy", "detail": "root is a caller-supplied execution_hash citing the day's art-373-recompute-fund-nav receipt, asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream NAV computation, nor that the computation was accurate." }, { "item": "Tokenized-fund on-chain share representation", "detail": "This receipt attests a signed publication event over a declared NAV-per-share figure. It makes no claim about the tokenized fund's on-chain share representation, token supply, or transfer mechanics -- those are out of scope for this node." }, { "item": "NAV-error / fund-administration compliance", "detail": "This receipt evidences one head-commit publication event. It has no bearing on whether the underlying NAV calculation was accurate and does not itself satisfy any fund-administration, custody, or NAV-error disclosure regime (e.g. CSSF 24/856-shaped disclosure) -- those obligations live with the fund administrator and with the art-373/art-374/nav-error-evidence-pack chain this stream cites, never with this node." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a tokenized fund's daily-NAV stream per NAV-LINEAGE-BUILD-SPEC.md §3; not itself a fund-administration, custody, or NAV-error disclosure requirement." }, "golden_hash": "e91ed06dbfd9a310cec8838b298675bfa57b599bdde785c21c454cac55ffb43d" }, { "name": "valid-rotation-head", "policy_parameters": { "head": { "head_version": "1", "stream": "fund-nav:ACME-TOKENIZED-FUND-01", "signer": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK", "seq": 0, "prev_head_hash": null, "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111", "timestamp": "2026-08-27T00:00:00Z", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK", "proofPurpose": "assertionMethod", "created": "2026-08-27T00:00:00Z", "proofValue": "z36T1LGhKz8AJJhq6ugKpgxAwh381zQccmoi8tCVqQq6hcWQ8s6sngbDQ7V946QrBaAm5koRv2VggGkofNC579jbF" }, "rotates_to": "did:key:z6MkfriQ3v2AwvNSVSFH8ZfXaJZzWy5UYDKPKN4XPZ6y9CJ" }, "signature_verification": { "verified": true, "verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-27" } }, "output_payload": { "stream": "fund-nav:ACME-TOKENIZED-FUND-01", "signer": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK", "seq": 0, "prev_head_hash": null, "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111", "timestamp": "2026-08-27T00:00:00Z", "rotates_to": "did:key:z6MkfriQ3v2AwvNSVSFH8ZfXaJZzWy5UYDKPKN4XPZ6y9CJ", "structural_error": null, "is_genesis": true, "head_hash": "sha256:30c229b626d843e4ac28cc391fc4245ea114e9077038776e313491913f8a8c1e", "signature_valid": true, "signature_verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-27", "chain_valid": null, "chain_verified_by": null, "chain_errors": [], "errors": [], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-649's own caller-verification-claim convention. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed daily-NAV tip at this seq; it does not itself detect the same signer publishing a different, conflicting NAV for the same day elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU per NAV-LINEAGE-BUILD-SPEC.md §3), not this node." }, { "item": "Daily NAV computation accuracy", "detail": "root is a caller-supplied execution_hash citing the day's art-373-recompute-fund-nav receipt, asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream NAV computation, nor that the computation was accurate." }, { "item": "Tokenized-fund on-chain share representation", "detail": "This receipt attests a signed publication event over a declared NAV-per-share figure. It makes no claim about the tokenized fund's on-chain share representation, token supply, or transfer mechanics -- those are out of scope for this node." }, { "item": "NAV-error / fund-administration compliance", "detail": "This receipt evidences one head-commit publication event. It has no bearing on whether the underlying NAV calculation was accurate and does not itself satisfy any fund-administration, custody, or NAV-error disclosure regime (e.g. CSSF 24/856-shaped disclosure) -- those obligations live with the fund administrator and with the art-373/art-374/nav-error-evidence-pack chain this stream cites, never with this node." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a tokenized fund's daily-NAV stream per NAV-LINEAGE-BUILD-SPEC.md §3; not itself a fund-administration, custody, or NAV-error disclosure requirement." }, "golden_hash": "6237b42f09c4e66ea4e47cb198b9c048d706b50b8f1247a3cacb4c5dd8f89c4b" } ] }