{ "tool_id": "art-408-evidence-bundle-tier-labeler", "note": "golden_hash computed directly via executionHash at fixture-authoring time. 3 vectors per tier (Verify/Execute/Prove) plus 1 UNLABELED negative case.", "vectors": [ { "name": "verify-only-artifact-a", "description": "Envelope well-formed and execution_hash recomputes; chain-execution not declared -- qualifies for OCG-Verify only.", "policy_parameters": { "artifact_tool_id": "art-04-agent-identity-attestation-checker", "artifact_execution_hash": "sha256:aaaa1111", "proof_refs": [ "receipt:art-04-envelope-check" ], "gate_results": { "envelope_well_formed": true, "execution_hash_recomputes": true, "chain_execution_valid": false, "mandate_gates_valid": false, "compute_integrity_proof_valid": false } }, "output_payload": { "artifact_tool_id": "art-04-agent-identity-attestation-checker", "artifact_execution_hash": "sha256:aaaa1111", "tier_label": "OCG-Verify", "eligible_tiers": [ "OCG-Verify" ], "gate_provenance": { "envelope_well_formed": true, "execution_hash_recomputes": true, "chain_execution_valid": false, "mandate_gates_valid": false, "compute_integrity_proof_valid": false }, "proof_refs": [ "receipt:art-04-envelope-check" ], "proof_ref_count": 1, "ha_evidence_bundle": null, "note": "The tiered label re-expresses existing §15 gate-pass results; it adds no new gate and mints no new trust claim (SPEC.md §SIDECAR.1).", "disambiguation": "This node does not re-run §1/§4/§18/§21/§22 gates itself -- gate_results is a caller declaration of prior gate outcomes for the referenced artifact, not independently re-verified here." }, "compliance_flags": [ "EVIDENCE_BUNDLE_ASSEMBLED", "SIDECAR_TIER_OCG_VERIFY" ], "golden_hash": "ab5232fea8410181268e05357bd51e046039502dbef0bced018cdf695f9a42a1" }, { "name": "verify-only-artifact-b", "description": "Second OCG-Verify-only artifact -- envelope/hash gates hold, chain-execution not declared.", "policy_parameters": { "artifact_tool_id": "art-12-acp-checkout-conformance-validator", "artifact_execution_hash": "sha256:bbbb2222", "proof_refs": [], "gate_results": { "envelope_well_formed": true, "execution_hash_recomputes": true, "chain_execution_valid": false, "mandate_gates_valid": true, "compute_integrity_proof_valid": false } }, "output_payload": { "artifact_tool_id": "art-12-acp-checkout-conformance-validator", "artifact_execution_hash": "sha256:bbbb2222", "tier_label": "OCG-Verify", "eligible_tiers": [ "OCG-Verify" ], "gate_provenance": { "envelope_well_formed": true, "execution_hash_recomputes": true, "chain_execution_valid": false, "mandate_gates_valid": true, "compute_integrity_proof_valid": false }, "proof_refs": [], "proof_ref_count": 0, "ha_evidence_bundle": null, "note": "The tiered label re-expresses existing §15 gate-pass results; it adds no new gate and mints no new trust claim (SPEC.md §SIDECAR.1).", "disambiguation": "This node does not re-run §1/§4/§18/§21/§22 gates itself -- gate_results is a caller declaration of prior gate outcomes for the referenced artifact, not independently re-verified here." }, "compliance_flags": [ "EVIDENCE_BUNDLE_ASSEMBLED", "SIDECAR_TIER_OCG_VERIFY" ], "golden_hash": "64a4f4987137228c6bbbfc39c463b5a9ca763ade94f64ba414f8792fa51e4b59" }, { "name": "verify-only-artifact-c", "description": "Third OCG-Verify-only artifact -- mandate gates declared false, so tier caps at Verify.", "policy_parameters": { "artifact_tool_id": "art-122-timestamp-attestation-verifier", "artifact_execution_hash": "sha256:cccc3333", "proof_refs": [ "receipt:art-122-tsa" ], "gate_results": { "envelope_well_formed": true, "execution_hash_recomputes": true, "chain_execution_valid": true, "mandate_gates_valid": false, "compute_integrity_proof_valid": false } }, "output_payload": { "artifact_tool_id": "art-122-timestamp-attestation-verifier", "artifact_execution_hash": "sha256:cccc3333", "tier_label": "OCG-Verify", "eligible_tiers": [ "OCG-Verify" ], "gate_provenance": { "envelope_well_formed": true, "execution_hash_recomputes": true, "chain_execution_valid": true, "mandate_gates_valid": false, "compute_integrity_proof_valid": false }, "proof_refs": [ "receipt:art-122-tsa" ], "proof_ref_count": 1, "ha_evidence_bundle": null, "note": "The tiered label re-expresses existing §15 gate-pass results; it adds no new gate and mints no new trust claim (SPEC.md §SIDECAR.1).", "disambiguation": "This node does not re-run §1/§4/§18/§21/§22 gates itself -- gate_results is a caller declaration of prior gate outcomes for the referenced artifact, not independently re-verified here." }, "compliance_flags": [ "EVIDENCE_BUNDLE_ASSEMBLED", "SIDECAR_TIER_OCG_VERIFY" ], "golden_hash": "7f0153159dedd4a6cbb10071aa42b1e6bbee99893d56e188974cc43b335116bc" }, { "name": "execute-artifact-a", "description": "Envelope/hash + chain-execution + mandate gates all hold, no compute-integrity proof -- OCG-Execute.", "policy_parameters": { "artifact_tool_id": "art-147-mcp-server-identity-attestation-validator", "artifact_execution_hash": "sha256:dddd4444", "proof_refs": [ "receipt:art-147-envelope", "receipt:art-147-mandate" ], "gate_results": { "envelope_well_formed": true, "execution_hash_recomputes": true, "chain_execution_valid": true, "mandate_gates_valid": true, "compute_integrity_proof_valid": false } }, "output_payload": { "artifact_tool_id": "art-147-mcp-server-identity-attestation-validator", "artifact_execution_hash": "sha256:dddd4444", "tier_label": "OCG-Execute", "eligible_tiers": [ "OCG-Verify", "OCG-Execute" ], "gate_provenance": { "envelope_well_formed": true, "execution_hash_recomputes": true, "chain_execution_valid": true, "mandate_gates_valid": true, "compute_integrity_proof_valid": false }, "proof_refs": [ "receipt:art-147-envelope", "receipt:art-147-mandate" ], "proof_ref_count": 2, "ha_evidence_bundle": null, "note": "The tiered label re-expresses existing §15 gate-pass results; it adds no new gate and mints no new trust claim (SPEC.md §SIDECAR.1).", "disambiguation": "This node does not re-run §1/§4/§18/§21/§22 gates itself -- gate_results is a caller declaration of prior gate outcomes for the referenced artifact, not independently re-verified here." }, "compliance_flags": [ "EVIDENCE_BUNDLE_ASSEMBLED", "SIDECAR_TIER_OCG_EXECUTE" ], "golden_hash": "cd38b08513a72882e047072214418aae8829e5047429d4afff1055159e69caef" }, { "name": "execute-artifact-b", "description": "Second OCG-Execute artifact -- same gate shape, distinct artifact reference.", "policy_parameters": { "artifact_tool_id": "art-149-mcp-registry-entry-conformance", "artifact_execution_hash": "sha256:eeee5555", "proof_refs": [ "receipt:art-149-envelope" ], "gate_results": { "envelope_well_formed": true, "execution_hash_recomputes": true, "chain_execution_valid": true, "mandate_gates_valid": true, "compute_integrity_proof_valid": false } }, "output_payload": { "artifact_tool_id": "art-149-mcp-registry-entry-conformance", "artifact_execution_hash": "sha256:eeee5555", "tier_label": "OCG-Execute", "eligible_tiers": [ "OCG-Verify", "OCG-Execute" ], "gate_provenance": { "envelope_well_formed": true, "execution_hash_recomputes": true, "chain_execution_valid": true, "mandate_gates_valid": true, "compute_integrity_proof_valid": false }, "proof_refs": [ "receipt:art-149-envelope" ], "proof_ref_count": 1, "ha_evidence_bundle": null, "note": "The tiered label re-expresses existing §15 gate-pass results; it adds no new gate and mints no new trust claim (SPEC.md §SIDECAR.1).", "disambiguation": "This node does not re-run §1/§4/§18/§21/§22 gates itself -- gate_results is a caller declaration of prior gate outcomes for the referenced artifact, not independently re-verified here." }, "compliance_flags": [ "EVIDENCE_BUNDLE_ASSEMBLED", "SIDECAR_TIER_OCG_EXECUTE" ], "golden_hash": "41ac226e9de63b76fe71629840792c032e326ace94a3c3e00c8b9e780d4b6658" }, { "name": "execute-artifact-c", "description": "Third OCG-Execute artifact -- compute-integrity gate explicitly declared false, caps at Execute.", "policy_parameters": { "artifact_tool_id": "art-159-vida-einvoice-en16931-conformance-validator", "artifact_execution_hash": "sha256:ffff6666", "proof_refs": [ "receipt:art-159-envelope", "receipt:art-159-mandate" ], "gate_results": { "envelope_well_formed": true, "execution_hash_recomputes": true, "chain_execution_valid": true, "mandate_gates_valid": true, "compute_integrity_proof_valid": false } }, "output_payload": { "artifact_tool_id": "art-159-vida-einvoice-en16931-conformance-validator", "artifact_execution_hash": "sha256:ffff6666", "tier_label": "OCG-Execute", "eligible_tiers": [ "OCG-Verify", "OCG-Execute" ], "gate_provenance": { "envelope_well_formed": true, "execution_hash_recomputes": true, "chain_execution_valid": true, "mandate_gates_valid": true, "compute_integrity_proof_valid": false }, "proof_refs": [ "receipt:art-159-envelope", "receipt:art-159-mandate" ], "proof_ref_count": 2, "ha_evidence_bundle": null, "note": "The tiered label re-expresses existing §15 gate-pass results; it adds no new gate and mints no new trust claim (SPEC.md §SIDECAR.1).", "disambiguation": "This node does not re-run §1/§4/§18/§21/§22 gates itself -- gate_results is a caller declaration of prior gate outcomes for the referenced artifact, not independently re-verified here." }, "compliance_flags": [ "EVIDENCE_BUNDLE_ASSEMBLED", "SIDECAR_TIER_OCG_EXECUTE" ], "golden_hash": "93df65059cef4c31927f3261d0451cf737edf9a13ae7bc2a5d688fd5085ee827" }, { "name": "prove-artifact-a", "description": "All five gates hold including a verified §18 compute-integrity proof -- OCG-Prove, the top tier.", "policy_parameters": { "artifact_tool_id": "art-171-iso42001-aims-clause-conformance", "artifact_execution_hash": "sha256:11117777", "proof_refs": [ "receipt:art-171-envelope", "receipt:art-171-mandate", "proof:art-171-risc0-groth16" ], "gate_results": { "envelope_well_formed": true, "execution_hash_recomputes": true, "chain_execution_valid": true, "mandate_gates_valid": true, "compute_integrity_proof_valid": true } }, "output_payload": { "artifact_tool_id": "art-171-iso42001-aims-clause-conformance", "artifact_execution_hash": "sha256:11117777", "tier_label": "OCG-Prove", "eligible_tiers": [ "OCG-Verify", "OCG-Execute", "OCG-Prove" ], "gate_provenance": { "envelope_well_formed": true, "execution_hash_recomputes": true, "chain_execution_valid": true, "mandate_gates_valid": true, "compute_integrity_proof_valid": true }, "proof_refs": [ "receipt:art-171-envelope", "receipt:art-171-mandate", "proof:art-171-risc0-groth16" ], "proof_ref_count": 3, "ha_evidence_bundle": null, "note": "The tiered label re-expresses existing §15 gate-pass results; it adds no new gate and mints no new trust claim (SPEC.md §SIDECAR.1).", "disambiguation": "This node does not re-run §1/§4/§18/§21/§22 gates itself -- gate_results is a caller declaration of prior gate outcomes for the referenced artifact, not independently re-verified here." }, "compliance_flags": [ "EVIDENCE_BUNDLE_ASSEMBLED", "SIDECAR_TIER_OCG_PROVE" ], "golden_hash": "6198b9b475545e204361365d40fafb503dbbfe0dbb71d0102ffde00a8481e261" }, { "name": "prove-artifact-b", "description": "Second OCG-Prove artifact -- distinct proof reference, same gate shape.", "policy_parameters": { "artifact_tool_id": "art-213-fx-settlement-netting-kernel", "artifact_execution_hash": "sha256:22228888", "proof_refs": [ "proof:art-213-risc0-groth16" ], "gate_results": { "envelope_well_formed": true, "execution_hash_recomputes": true, "chain_execution_valid": true, "mandate_gates_valid": true, "compute_integrity_proof_valid": true } }, "output_payload": { "artifact_tool_id": "art-213-fx-settlement-netting-kernel", "artifact_execution_hash": "sha256:22228888", "tier_label": "OCG-Prove", "eligible_tiers": [ "OCG-Verify", "OCG-Execute", "OCG-Prove" ], "gate_provenance": { "envelope_well_formed": true, "execution_hash_recomputes": true, "chain_execution_valid": true, "mandate_gates_valid": true, "compute_integrity_proof_valid": true }, "proof_refs": [ "proof:art-213-risc0-groth16" ], "proof_ref_count": 1, "ha_evidence_bundle": null, "note": "The tiered label re-expresses existing §15 gate-pass results; it adds no new gate and mints no new trust claim (SPEC.md §SIDECAR.1).", "disambiguation": "This node does not re-run §1/§4/§18/§21/§22 gates itself -- gate_results is a caller declaration of prior gate outcomes for the referenced artifact, not independently re-verified here." }, "compliance_flags": [ "EVIDENCE_BUNDLE_ASSEMBLED", "SIDECAR_TIER_OCG_PROVE" ], "golden_hash": "db4ceb3ff6b4f44db01f3ab034b3c377bb72da8cc55d22aeb444c528bb7e151e" }, { "name": "prove-artifact-c", "description": "Third OCG-Prove artifact -- multiple stacked proof refs.", "policy_parameters": { "artifact_tool_id": "art-279-vr-1-state-proof-kernel", "artifact_execution_hash": "sha256:33339999", "proof_refs": [ "receipt:art-279-envelope", "proof:art-279-risc0-groth16", "anchor:art-279-jades" ], "gate_results": { "envelope_well_formed": true, "execution_hash_recomputes": true, "chain_execution_valid": true, "mandate_gates_valid": true, "compute_integrity_proof_valid": true } }, "output_payload": { "artifact_tool_id": "art-279-vr-1-state-proof-kernel", "artifact_execution_hash": "sha256:33339999", "tier_label": "OCG-Prove", "eligible_tiers": [ "OCG-Verify", "OCG-Execute", "OCG-Prove" ], "gate_provenance": { "envelope_well_formed": true, "execution_hash_recomputes": true, "chain_execution_valid": true, "mandate_gates_valid": true, "compute_integrity_proof_valid": true }, "proof_refs": [ "receipt:art-279-envelope", "proof:art-279-risc0-groth16", "anchor:art-279-jades" ], "proof_ref_count": 3, "ha_evidence_bundle": null, "note": "The tiered label re-expresses existing §15 gate-pass results; it adds no new gate and mints no new trust claim (SPEC.md §SIDECAR.1).", "disambiguation": "This node does not re-run §1/§4/§18/§21/§22 gates itself -- gate_results is a caller declaration of prior gate outcomes for the referenced artifact, not independently re-verified here." }, "compliance_flags": [ "EVIDENCE_BUNDLE_ASSEMBLED", "SIDECAR_TIER_OCG_PROVE" ], "golden_hash": "282d2752e963456520c546357b8fa78efcf27a53f563fda400bfa616d7fbf6fe" }, { "name": "unlabeled-envelope-invalid", "description": "Envelope declared not well-formed -- no tier qualifies, UNLABELED with the failure flag.", "policy_parameters": { "artifact_tool_id": "art-999-hypothetical-malformed-artifact", "artifact_execution_hash": "", "proof_refs": [], "gate_results": { "envelope_well_formed": false, "execution_hash_recomputes": false, "chain_execution_valid": false, "mandate_gates_valid": false, "compute_integrity_proof_valid": false } }, "output_payload": { "artifact_tool_id": "art-999-hypothetical-malformed-artifact", "artifact_execution_hash": "", "tier_label": "UNLABELED", "eligible_tiers": [], "gate_provenance": { "envelope_well_formed": false, "execution_hash_recomputes": false, "chain_execution_valid": false, "mandate_gates_valid": false, "compute_integrity_proof_valid": false }, "proof_refs": [], "proof_ref_count": 0, "ha_evidence_bundle": null, "note": "The tiered label re-expresses existing §15 gate-pass results; it adds no new gate and mints no new trust claim (SPEC.md §SIDECAR.1).", "disambiguation": "This node does not re-run §1/§4/§18/§21/§22 gates itself -- gate_results is a caller declaration of prior gate outcomes for the referenced artifact, not independently re-verified here." }, "compliance_flags": [ "EVIDENCE_BUNDLE_ASSEMBLED", "SIDECAR_UNLABELED_GATES_FAILED", "SIDECAR_NO_ARTIFACT_HASH_DECLARED" ], "golden_hash": "026e82fe88dd255e778e981f78a791356453aa7861c963e7206694bfe57420f3" }, { "name": "ha_conv1_evidence_bundle_attached", "description": "HA-CONV-1: same gate shape as prove-artifact-a, but the caller supplies a collected section-27.2 human_accountability_records[] over the artifact hash -- consumed/emitted as a section-27.6 evidence bundle riding the same diffable object as the tier label (SIDECAR_HA_EVIDENCE_BUNDLE_ATTACHED).", "policy_parameters": { "artifact_tool_id": "art-171-iso42001-aims-clause-conformance", "artifact_execution_hash": "sha256:11117777", "proof_refs": [ "receipt:art-171-envelope", "receipt:art-171-mandate", "proof:art-171-risc0-groth16" ], "gate_results": { "envelope_well_formed": true, "execution_hash_recomputes": true, "chain_execution_valid": true, "mandate_gates_valid": true, "compute_integrity_proof_valid": true }, "human_accountability_records": [ { "record_type": "approval", "role": "reviewer", "subject_hash": "sha256:11117777", "identity": { "id": "did:key:z6MkjExampleReviewerIdentity" }, "decision": "approve" } ] }, "output_payload": { "artifact_tool_id": "art-171-iso42001-aims-clause-conformance", "artifact_execution_hash": "sha256:11117777", "tier_label": "OCG-Prove", "eligible_tiers": [ "OCG-Verify", "OCG-Execute", "OCG-Prove" ], "gate_provenance": { "envelope_well_formed": true, "execution_hash_recomputes": true, "chain_execution_valid": true, "mandate_gates_valid": true, "compute_integrity_proof_valid": true }, "proof_refs": [ "receipt:art-171-envelope", "receipt:art-171-mandate", "proof:art-171-risc0-groth16" ], "proof_ref_count": 3, "ha_evidence_bundle": { "subject_hash": "sha256:11117777", "verification_result": "OCG-Prove", "reviewers": [ "did:key:z6MkjExampleReviewerIdentity" ] }, "note": "The tiered label re-expresses existing §15 gate-pass results; it adds no new gate and mints no new trust claim (SPEC.md §SIDECAR.1).", "disambiguation": "This node does not re-run §1/§4/§18/§21/§22 gates itself -- gate_results is a caller declaration of prior gate outcomes for the referenced artifact, not independently re-verified here." }, "compliance_flags": [ "EVIDENCE_BUNDLE_ASSEMBLED", "SIDECAR_TIER_OCG_PROVE", "SIDECAR_HA_EVIDENCE_BUNDLE_ATTACHED" ], "golden_hash": "a5246771b5882441c8ddb97eb985f359b7fd4d1c4864235b4155ce624b92078b" } ] }