{
      "tool_id": "art-88-fido-pqc-conformance-checker",
      "tool_version": "1.0.0",
      "display_name": "FIDO2 / WebAuthn PQC Conformance Checker",
      "mcp_name": "check_fido_pqc_conformance",
      "mandate_type": "compliance_mandate",
      "wave": 18,
      "gpu": false,
      "url": "https://ainumbers.co/chaingraph/art-88-fido-pqc-conformance-checker.html",
      "description": "Validates FIDO2/WebAuthn authenticator ML-DSA conformance vs IANA COSE algorithm registry identifiers and CTAP2.3 minimum version. Checks COSE identifier presence and CTAP version. Scoped to credential crypto-suite migration -- credential FORMAT/protocol conformance belongs to any future EUDI wave.",
      "input_schema_ref": "chaingraph/art-88-fido-pqc-conformance-checker.html#manifest",
      "consumes": [
        "art-85-pqc-timeline-fit-diagnostic"
      ],
      "feeds": [
        "cry-05-agent-action-audit-trail-aggregator"
      ],
      "status": "live",
      "conformance_fixtures": false,
      "compute_capability": "server",
      "compute_images": [{"system":"sha256-source","image_id":"sha256:92b325e20fa5a4e60b6cc1b0080285af19bf639951c96ec6a0b76d69a57b823b","valid_from":"2026-07-10"},{"system":"risc0","image_id":"sha256:a1a0bc89b5b1febaeda3519f6dbade0fa5ac16beeb143c4e1b01689573567bc6","valid_from":"2026-06-28"}],
      "compute_proof": {
        "type": "ZkVmReceipt",
        "system": "risc0",
        "receiptFormat": "groth16-bn254",
        "imageId": "sha256:a1a0bc89b5b1febaeda3519f6dbade0fa5ac16beeb143c4e1b01689573567bc6",
        "seal": "D6ud46Oqq0DKtsmvW0VHE0symBDGhj+yJoeRudjsbk8LHBrON+qUAHeMjW4046RebPl3pixnjNj/tGIbjrFjKyrirmLrJBw0WmF/1tV7biQjG4DU7w75la2zWiG+Dez5ACb3nFSuvr+J6Squz7e+u+3Od7Tz4ypKY0xix9rkQwwuzgLqvnL4bo1P9tUvLit6WsSTl8YRUjP2GhU0n+2twhsVgwiZb0Yd0zbXV/lKPd7Yw1SnnYMQDc2jbQHfar/RGOumyba/f8yKxN5XP/2UFzt7ZfVFQ1hlSt+r1/RwlEsuFbV6OumjmsGdGnu03Vdd5KEwKbSvUj4RVhOLuufkcA==",
        "journal": {
          "chaingraph_version": "0.4.0",
          "kernel_digest": "sha256:92b325e20fa5a4e60b6cc1b0080285af19bf639951c96ec6a0b76d69a57b823b",
          "output": {
            "attestation_format": "packed",
            "conformant": false,
            "cose_pqc_registry": {
              "ML-DSA-44": -48,
              "ML-DSA-65": -49,
              "ML-DSA-87": -50
            },
            "ctap_pqc_ready": false,
            "ctap_version": "2.0",
            "gaps": [
              "Target COSE algorithm (ML-DSA-65, ID -49) not in supported list",
              "CTAP version 2.0 < 2.3 — CTAP2.3 required for native PQC support"
            ],
            "hybrid_status": "legacy_only",
            "note": "DECISION-SUPPORT DRAFT. COSE PQC algorithm IDs from IANA COSE Algorithms Registry — verify current assignments. CTAP2.3 PQC requirement from FIDO Alliance CTAP2.3 specification — verify current version. ML-DSA COSE IDs may be updated as IANA registration progresses.",
            "reference_version": "2026-06",
            "supported_pqc_cose_ids": [],
            "target_cose_id": -49,
            "target_pqc": "ML-DSA-65"
          }
        }
      },
      "export_capability": [
        "pdf",
        "xlsx"
      ]
    }