{
  "tool_id": "art-459-sod-matrix-check",
  "tool_version": "1.0.0",
  "display_name": "Segregation-of-Duties Matrix Checker",
  "mcp_name": "check_sod_matrix",
  "mandate_type": "compliance_control",
  "wave": 74,
  "gpu": false,
  "url": "https://ainumbers.co/chaingraph/art-459-sod-matrix-check.html",
  "description": "Evaluates a caller-declared role-assignment set against a caller-declared SoD conflict ruleset for SOX 404 / ICFR access controls. For every user, checks all pairs of assigned roles against the ruleset and returns any conflicts found, the count of affected users, and a clean/not-clean verdict. The ruleset is a versioned policy input, never derived by the kernel. Deterministic pairwise set evaluation only. Zero network, zero PII -- user_id and role names are caller-supplied opaque strings.",
  "input_schema_ref": "chaingraph/art-459-sod-matrix-check.html#manifest",
  "consumes": [],
  "feeds": [],
  "status": "live",
  "conformance_fixtures": true,
  "compute_capability": "server",
  "compute_images": [
    {
      "system": "sha256-source",
      "image_id": "sha256:991bda6ad22de1f56d310c7cfbe98b6a7a9e4fdace9805007b0cc161d05cd7cd",
      "valid_from": "2026-07-10"
    },
    {
      "system": "risc0",
      "image_id": "sha256:a1a0bc89b5b1febaeda3519f6dbade0fa5ac16beeb143c4e1b01689573567bc6",
      "valid_from": "2026-07-24"
    }
  ],
  "export_capability": [
    "json"
  ],
  "compute_proof_ready": "ready",
  "compute_proof": {
    "type": "ZkVmReceipt",
    "system": "risc0",
    "receiptFormat": "groth16-bn254",
    "imageId": "sha256:a1a0bc89b5b1febaeda3519f6dbade0fa5ac16beeb143c4e1b01689573567bc6",
    "seal": "I15hOcNgbTqu47fDCpP6JdKV5kx27cnjQN8sfLtmUcwTC7spr4h7JlV2Ka113cQxt8mJCv62BxD0GXNseo2njSwDKUw6FwLworpTHK4iyynMEwP/HZOYkr9mJOjBkKUQGuEDSAfBG3g5c5muTm4H5K219laBM/cyv7KACaT5N3Ig4+UGCaeFZVK0Ewq36YvTHrwi8/T6kil9vEoQ35wZggmzxrZE7CH7wQbXOcbHG56g6KdJW4RX5s7erLQaGN4IKouBcYKp5FZZUrc7uCcyt4fV5cOZxaLkgq9VUzlV0ccWLI1BO0oSH732VlnAkXZWWoZiAnShhNJ6kBp9LouVJg==",
    "journal": {
      "chaingraph_version": "0.4.0",
      "kernel_digest": "sha256:991bda6ad22de1f56d310c7cfbe98b6a7a9e4fdace9805007b0cc161d05cd7cd",
      "output": {
        "clean": true,
        "conflict_count": 0,
        "conflict_rules_evaluated": 1,
        "conflicts": [],
        "ruleset_version": "sod-ruleset-v1",
        "users_evaluated": 2,
        "users_with_conflicts": 0
      }
    }
  }
}