{
  "bundle_version": "0.1",
  "receipt": {
    "type": "ZkVmReceipt",
    "system": "risc0",
    "receiptFormat": "groth16-bn254",
    "imageId": "sha256:a1a0bc89b5b1febaeda3519f6dbade0fa5ac16beeb143c4e1b01689573567bc6",
    "seal": "BnjygZY9Th1F1TcqhhU91MyBYp3ueOU62ge9lwVWRm8X14QemdFdnunfn31lSUcOz3t20qi4dXiLrVX5KizNOQqf4GyKX3PWvjAFOjT1pHZ5Cndg4PWIwVoA4MxlTkZBJpaPKHtlsODmR/QCW9orbcnUT+22Bg62KSbe/57BI2MCQyJQiHs+jY+5KUM/HcCq2V//JKpybGBo27/LVAF0cwkgNF1anlzEX0ZHLg/ILBjLbexuhwPYLtNQPKAxR+XbLPpMVTZqqvgr2Y2Bo42bkYIWs1LnLI5adpaCHc+kP7kjRSd73W9DPcgJw6EZpC9ACuKdngAYiS4gsVnM+3Jqdg==",
    "journal": {
      "chaingraph_version": "0.4.0",
      "kernel_digest": "sha256:a57bc96bcfdea16261374e636c9a22668fd91415abc1e441540e6d48306026b0",
      "output": {
        "agent_parity_findings": [],
        "as_of_date": "2027-02-15",
        "boundary": "This evidences that named humans took responsibility for the subject named here. It carries no claim that a regulator has accepted anything, it does not serve as a filing, and it makes no assertion that the certified numbers are correct. A satisfied threshold means the stated number of distinct identities each filed a signed approval record over this subject in this role, and it means nothing beyond that.",
        "counted_identities": [
          "did:key:zChiefExecSynth",
          "did:key:zChiefFinanceSynth"
        ],
        "counted_records": [
          {
            "actor_type": "human",
            "identity_id": "did:key:zChiefExecSynth",
            "record_hash": "sha256:aa01",
            "record_ref": "sha256:aa01",
            "verification_method": "did:key:zChiefExecSynth#key-1"
          },
          {
            "actor_type": "human",
            "identity_id": "did:key:zChiefFinanceSynth",
            "record_hash": "sha256:aa02",
            "record_ref": "sha256:aa02",
            "verification_method": "did:key:zChiefFinanceSynth#key-1"
          }
        ],
        "distinct_identities_counted": 2,
        "distinctness_basis": "Counting is by distinct identity_id (SPEC.md section 27.3), never by record and never by signing key. One human rotating keys counts once, and one human signing twice counts once. Every collapse is reported rather than applied silently.",
        "duplicate_identities_collapsed": [],
        "foreign_subject_records_rejected": [],
        "no_arithmetic_claim": "This surface counts approvals. It computes nothing about what was certified: no reserve composition, no eligible-asset determination, no outstanding-balance reconciliation and no ratio. Whether the certified figures are right is decided by the people who signed and by whoever examines their work, never here.",
        "note": "Deterministic dual control certification evidence. Single-run and stateless: it holds no records, runs on no schedule, and retains nothing. It decides one thing, whether N distinct named identities each filed a signed approval record over a sealed subject in a required role, and it reports every record it could not count and why. It is regime agnostic: the regime label is free text and no statute is interpreted. It computes nothing about what was certified. It is not a filing and not legal advice.",
        "off_role_records_ignored": [],
        "override_handling": "A section 27.5 override changes which gate policy applies. It does not produce a distinct human approver, so it never satisfies a threshold here. Override records are carried and counted separately and are never folded into the distinct-identity count, which is what stops a time-boxed record resolving to a silent permanent pass.",
        "override_records": [],
        "prepared_by": {
          "actor_type": "unstated",
          "identity_id": null
        },
        "rationale": [
          "Dual control evidence assembled for certification reference CERT-SYNTH-0007 under the caller-supplied regime label Payment stablecoin monthly reserve report certification. The label is free text and nothing in this computation branches on it.",
          "The certification is bound to subject sha256:3333333333333333333333333333333333333333333333333333333333333333, carried as a attested_artifact and not recomputed here.",
          "2 distinct attestor identities each filed a signed approval record over this subject, which meets the required threshold of 2.",
          "2 records supplied: 2 counted, 0 rejected as unsigned, 0 rejected for naming another subject, 0 not relevant to this role, 0 rejection, 0 override.",
          "No identity filed more than one counted approval, so no collapse was required. Counting remains by distinct identity rather than by record.",
          "This evidences that named humans took responsibility for the subject named here. It carries no claim that a regulator has accepted anything, it does not serve as a filing, and it makes no assertion that the certified numbers are correct. A satisfied threshold means the stated number of distinct identities each filed a signed approval record over this subject in this role, and it means nothing beyond that.",
          "This surface counts approvals. It computes nothing about what was certified: no reserve composition, no eligible-asset determination, no outstanding-balance reconciliation and no ratio. Whether the certified figures are right is decided by the people who signed and by whoever examines their work, never here."
        ],
        "records_summary": {
          "agent_finding_count": 0,
          "counted_record_count": 2,
          "distinct_identities_counted": 2,
          "duplicate_identity_count": 0,
          "foreign_subject_rejected_count": 0,
          "off_role_ignored_count": 0,
          "override_record_count": 0,
          "rejection_record_count": 0,
          "supplied_count": 2,
          "unsigned_rejected_count": 0
        },
        "regime": {
          "basis": "regime_label is free text supplied by the caller and is never interpreted. Nothing in this computation branches on it, no statute is matched against it, and no citation is emitted for it. It records which certification the evidence was assembled for so a reader is not left guessing.",
          "certification_ref": "CERT-SYNTH-0007",
          "regime_label": "Payment stablecoin monthly reserve report certification",
          "regime_label_is_free_text": true
        },
        "rejection_records": [],
        "role_policy": {
          "permitted_roles": [
            "preparer",
            "reviewer",
            "approver",
            "attestor",
            "submitter",
            "model_owner",
            "compliance_officer",
            "examiner"
          ],
          "read_only_roles": [
            "examiner"
          ],
          "reason": "The required role is one of the closed section 27.1 roles and can carry approval authority.",
          "required_role": "attestor",
          "role_eligible": true,
          "role_known": true,
          "role_read_only": false
        },
        "subject": {
          "subject_binding_source": "art-502-bind-attested-subject",
          "subject_class": "attested_artifact",
          "subject_hash": "sha256:3333333333333333333333333333333333333333333333333333333333333333",
          "subject_limit": "This subject is a section 27.4 attested artifact. It evidences producer pinning, input binding and content integrity, and it carries no section 18 compute proof and no section 16 or 17 re-execution claim. It never evidences that the arithmetic inside the producer output is correct.",
          "subject_present": true,
          "subject_recomputed_here": false
        },
        "threshold_policy": {
          "dual_control": true,
          "reason": "A threshold of 2 distinct attestor identities is required over this subject.",
          "threshold_construction": "in-toto integer threshold, applied per SPEC.md section 27.3: satisfied when at least N distinct identities have each filed a signed approval record naming this role and this subject.",
          "threshold_n": 2,
          "threshold_valid": true
        },
        "threshold_satisfied": true,
        "threshold_shortfall": 0,
        "unsigned_records_rejected": [],
        "verdict_reason": "2 distinct attestor identities each filed a signed approval record over this subject, which meets the required threshold of 2."
      }
    }
  },
  "journal_contract": {
    "spec": "SPEC.md §18.7",
    "serialization": "rfc8785-jcs+utf8",
    "journal_digest": "sha256:6a22016475afb0ace4ad1fc36659da3b182394ef78c8dac44c8d511c0db6c601",
    "claim_digest": null
  },
  "provenance": {
    "repo": "PostOakLabs/ainumbers",
    "receipt_source": "chaingraph/graph/nodes/art-503-build-dual-control-certification.json",
    "receipt_source_sha256": "sha256:dbcf40551c4886211c1ea53c9cc376d1a2882baa0e58d0b309366933410318e5",
    "anchor_source": "registry/lineage/checkpoint.sigsum-record.json",
    "checkpoint_source": "registry/lineage/checkpoint"
  },
  "anchor": {
    "type": "c2sp-tlog-proof-v1",
    "record": {
      "anchor_type": "c2sp-tlog-proof-v1",
      "log_origin": "sigsum.org/v1/tree/44ad38f8226ff9bd27629a41e55df727308d0a1cd8a2c31d3170048ac1dd22a1",
      "log_url": "https://seasalp.glasklar.is",
      "log_public_key": "0ec7e16843119b120377a73913ac6acbc2d03d82432e2c36b841b09a95841f25",
      "anchored_hash": "sha256:3b9dddcfacf47214cc0bbb19edbc39a5cd3d1c97fa00aa0fd68a517cf67aee2a",
      "leaf": {
        "checksum": "76ea62f7c28942563a1008b44ff888a990b6b2f1d740023982bbd04662adbedb",
        "signature": "2e994211513e790035c9040f4e23b518e64a188f8fd211d203d3a380511fa355e559348b84fc00953c3aa9d91d95bb3696a292054041389943b0fcf4b6c9c502",
        "public_key": "64ffed0396abb761968b34ce849b7b09bc47b8a492ba2efd006b6b8f5622ceca"
      },
      "tree_head": {
        "size": 75024,
        "root_hash": "3cd5407964fe6c6df9f1e7051f5a8e941030b93b68a97656de81f9baa43d640d",
        "log_signature": "ff6baa55f14a9b9a695483113f00fc5c9f3bbb9ca74c01c83dfd8715ad154b2f2d302e71b1b4f52f87ba58f9c15a80a30c6302f0910dc2f0d3e7d857ab0a5003"
      },
      "inclusion_proof": {
        "leaf_index": 75022,
        "path": [
          "15d2f7a6315ce3382346be0bae0b920bfa68349ad438b517277c6e973f5343ef",
          "33dc416363cc76a4e1d907d7c46cafa5ccde896c4b3aac8783b7dc56df5795d8",
          "d2ee6278e332275416624857eed451d640f159258f4c9b315be88fe939ca8a77",
          "83e35bee174ca40f3413c410657f7b3a7c444435043c0af96c8865e03095913c",
          "a59bef38745cdb26f6b87a19b8cd0f609c2e906f02f1d3991d9fa60f0480b580",
          "3ce012af67840673cbd9835e3e57c1d8c6f47f6d737188365acb80151a30e0cc",
          "668dba989ea933a1ecea7315cad1eb9b4e65c7bfdf993edb5f9e992e4c7a354d",
          "6e3104eb98a720cc868416197a730db01f0032cbbb3f74602bf997125a81f28b"
        ]
      },
      "witness_cosignatures": [
        {
          "key_hash": "0dad9d849c57687454f100d87fa729b54cb69f7af97346613348defcba9c361c",
          "timestamp": 1792825229,
          "signature": "b71a5a1b8d95c3a70512cab1930c2468533f3cf40d09d4126fb3c8eadd17fc738a0944b56886befa48d4f917306867b5d669b77f3091c90d936783f470338c07"
        },
        {
          "key_hash": "cd02db1cc0488c28245d7c3ff50b3e214334c067f2571e849425146bb6bd173d",
          "timestamp": 1792825229,
          "signature": "95d726f8522e14a3ec2bd04687b0ea98db64dad72319e1a40653b9d0066423ffd17f37a44c6e7d1da09c13b4cb3c364080a4850aba12a602456706989bfff303"
        },
        {
          "key_hash": "9a0dcddbd96f6d6d404227b5ff23de7a43f25cdde9790af5ace332d347fac49a",
          "timestamp": 1792825230,
          "signature": "86b01971d57851ba8e5fd51e9c3f4845d50dfe9baead1f72a0e759e6a309386cd234321575bac7986b35fd13f98b6ee8e7645a92afef9cfb9f09cf88c0a81c0e"
        },
        {
          "key_hash": "6d6a78191e59815eff9131941fc3e08dd716a281c8b886dd67880d552e587a23",
          "timestamp": 1792825229,
          "signature": "81671d11a22ae26bd348344f7e15db82ca6267f7de4126a8e947a5da628989eb167a8b282d202c62377bf26753a1de62c322b6460b899f854465da5fc1c27601"
        },
        {
          "key_hash": "6bdf03b285fce48e00ff9b199cb2b77472dcc4a112f067fa5b274929cb9504e3",
          "timestamp": 1792825229,
          "signature": "49450a408ffdb2e047076e8ed01beb2f8077a53e3cab765ecec0614151f50c643038be46f4a7266ed6edb30974d4154b9a4c2c6c3b46d71e10f878dbe2c36102"
        },
        {
          "key_hash": "ff2f237a707a2d3a6adfb1600d3375cafe4527ba4fcec793e6093b9b1a4bd79a",
          "timestamp": 1792825229,
          "signature": "dfa05cb7f4c1389903f8377e8f4daf7fbf3a7c99ad65bc9c81029c12cb07004d25473ed022e0cefe5cdf05e497aeded87e57fabcc7d87dbfc1923bee2ab1260e"
        },
        {
          "key_hash": "81538d254f0a67aa07172826ef46fe0cd04b7425bd634a50bb0a8419d55fa65f",
          "timestamp": 1792825229,
          "signature": "6caece92c05dd00057b0c908c969b0eccbcf87c1b418c3fe4cb7b3dad781c125dc86b1895fc7019614a1eca3cfb6fb19f8442e64069d38870f1f620a6d41a60d"
        },
        {
          "key_hash": "774fafee07d3b0d9399d669676440a6301db9fa8fe2140d7d352418da25144c5",
          "timestamp": 1792825230,
          "signature": "7f0c93c5f31347edcd47f5850bf665de43539efb3b295e32563f004f0feec33ae3d9d84e031f1859e42b10218a17a0f0df019253f448ccd76d7499afa2e0ab04"
        },
        {
          "key_hash": "f6f91669f7955f542718af9edb6a1276d88a0f8822cba9046e549d0b3796f394",
          "timestamp": 1792825229,
          "signature": "a3d77cfcafbc1a1d096b422276fa50994e269a7b61797064a4b2e758808bf8c4e27b4f1caae28291bd486c71ae2c2a6b57d0443cc7a7eac11114ce517c3c800c"
        },
        {
          "key_hash": "5da2b3803c2f802eed9744b74e3e4a3d31e1e77ed994ef56730d57fa52f698a5",
          "timestamp": 1792825229,
          "signature": "302d4d04700aff6efa819b203915b04f7ffdac8b1579b969d54d332f3a74063d390383fa77766d4e3fbe995cc2de69be6127d3a0662559db80b9f6e187c59105"
        },
        {
          "key_hash": "3573fb7fdab7434cd0dad9fd6460abf420388055db8aaaec177c248f03a990cc",
          "timestamp": 1792825230,
          "signature": "a6bdce3abf06934fb65d3ccfa49dab537569f36f9ffddb219642104272de95cdadb2f501cfd0e71995328c5b6df899d89f88650c67a3a61f2cca166ac1556c06"
        },
        {
          "key_hash": "d59098d686f47ec1d4d1984c8ac0ab97a3d8a65c7ba8cb6422ada0fae927e194",
          "timestamp": 1792825230,
          "signature": "8dab0aaec1272e078195a13b620c2a6f46128218ac70440383b59f9038d4d42f4bc8b643c001592ae005b157f221ba0387733d1505dd5b3298ad579398129c04"
        }
      ]
    },
    "checkpoint_text": "ainumbers.co/registry/lineage\n77\n5z6Ug6W2BZ2nOm3btMKO8R4pkYHtYENH0v+MJOm9qac=\n\n— ainumbers.co/registry/lineage JrLnur2JVUx48WLcyZxWqbSgiY63HRRAlGCvfM7AgCcnBY06MX8kbyWE290q052tS6nQyxTr3fclM7c2Qi/pfqcrGAM=\n",
    "subject": {
      "kind": "registry-checkpoint",
      "origin": "ainumbers.co/registry/lineage",
      "log_policy": "chaingraph/policies/ainumbers-registry-lineage.tlog-policy"
    }
  },
  "trust_policy": {
    "name": "sigsum-generic-2025-1",
    "source": "chaingraph/policies/sigsum-generic-2025-1.tlog-policy",
    "sha256": "sha256:666d9d0b9ab2e4019769c42eaccd7d6d502a9abac45979bb9b08b7213e4f53e3",
    "shape": "2 logs, 3 witnesses, quorum 2-of-3"
  }
}