{
  "tool_id": "art-461-control-test-evidence-composer",
  "tool_version": "1.0.0",
  "display_name": "Control-Test Evidence Composer",
  "mcp_name": "compose_control_test_evidence",
  "mandate_type": "compliance_control",
  "wave": 76,
  "gpu": false,
  "url": "https://ainumbers.co/chaingraph/art-461-control-test-evidence-composer.html",
  "description": "Composes a SOX 404 / ICFR control-test evidence artifact: reconciles a caller-declared attribute sample (item ids, e.g. from art-458) against a per-item pass/fail test-result set into one test-conclusion record -- sample coverage, exception count vs a caller-set tolerable-deviation threshold, and a test conclusion (operating effectively / exception noted / incomplete). The tester is recorded under the SOX 404 / PCAOB AS 1215 preparer role; every test carries a fixed review_required gate for reviewer sign-off. An exception count above zero flags a deficiency CANDIDATE only -- severity classification and its reason_code are a separate human reviewer approval record, never computed here. Deterministic reconciliation only. Zero network, zero PII.",
  "input_schema_ref": "chaingraph/art-461-control-test-evidence-composer.html#manifest",
  "consumes": [],
  "feeds": [],
  "status": "live",
  "conformance_fixtures": true,
  "compute_capability": "server",
  "compute_images": [
    {
      "system": "sha256-source",
      "image_id": "sha256:ab7d9c5cf26d42cb2205025bca9f91353454bea181602f0dd0508aa55c4e94e4",
      "valid_from": "2026-07-10"
    },
    {
      "system": "risc0",
      "image_id": "sha256:a1a0bc89b5b1febaeda3519f6dbade0fa5ac16beeb143c4e1b01689573567bc6",
      "valid_from": "2026-07-24"
    }
  ],
  "export_capability": [
    "json"
  ],
  "compute_proof_ready": "ready",
  "compute_proof": {
    "type": "ZkVmReceipt",
    "system": "risc0",
    "receiptFormat": "groth16-bn254",
    "imageId": "sha256:a1a0bc89b5b1febaeda3519f6dbade0fa5ac16beeb143c4e1b01689573567bc6",
    "seal": "DqGUoX4qntnf1R+kst8rE5kTavGqpgGNDb9QnrFBCU0CeQQvH4XxbtbQ4uv9l93rVr6CNvdbs0I79uI83rCGbirJgnTX6ZEo4qkk+OWDmkaiFMkASwFFtWj5GNYGv1x9Fce5d3cqHFTlrn9whL1yoP9YllYtAk32W1MPYn68OdQIokNCnj3VxseR+eakEdJghvZQx97RBUr9gcNFm+eWlQlHqEYeTbRCTq0P/Np5gNbJGDHJ72R4TYJUCYh2DlELGg1UF8h+L+U/l27/DDZSjRl2j8ZPgczPPpFwxG85x7gNY+JVbC+F5nBsStObCNROiCRDsWK99+WL46uJit0SlQ==",
    "journal": {
      "chaingraph_version": "0.4.0",
      "kernel_digest": "sha256:ab7d9c5cf26d42cb2205025bca9f91353454bea181602f0dd0508aa55c4e94e4",
      "output": {
        "control_id": "CTRL-AP-014",
        "coverage_complete": true,
        "deficiency": null,
        "exception_count": 0,
        "exception_rate": 0,
        "extra_results": [],
        "fail_count": 0,
        "gate_status": "review_required",
        "missing_results": [],
        "not_a_severity_judgment": "This artifact reconciles declared sample coverage and exception count against a tolerable-deviation threshold. Deficiency severity (control / significant / material weakness) and its reason_code are a human reviewer approval record (SPEC.md §27.2), never computed here.",
        "pass_count": 4,
        "population_hash": "sha256:pop-aaa111",
        "reporting_period": "2026-Q2",
        "sample_size": 4,
        "test_conclusion": "operating_effectively",
        "tested_count": 4,
        "tester_id": "tester-jsmith",
        "tester_role": "preparer",
        "tolerable_exception_count": 0,
        "within_tolerance": true
      }
    }
  }
}