{
  "tool_id": "art-418-idv-verification-failure-incident-composer",
  "note": "golden_hash filled by `node golden-parity.test.mjs --update`.",
  "vectors": [
    {
      "name": "clean-injection-incident",
      "description": "Full session receipt link, injection_detected failure type, contraindicated severity, two valid evidence digests, well-formed escalation cross-link.",
      "policy_parameters": {
        "session_receipt": {
          "session_id": "sess-2026-0001",
          "verifier_id": "vendor-alpha-idv",
          "receipt_hash": "sha256:11111111111111111111111111111111111111111111111111111111111111"
        },
        "failure_classification": {
          "incident_id": "INC-IDV-2026-0090",
          "failure_type": "injection_detected",
          "description": "Virtual-camera injection flagged mid-session by the injection-detection vendor.",
          "severity_class": "contraindicated",
          "detected_at": "2026-07-20T09:12:00Z"
        },
        "session_evidence": [
          {
            "evidence_type": "otel_span",
            "digest": "sha256:22222222222222222222222222222222222222222222222222222222222222"
          },
          {
            "evidence_type": "in_toto_link",
            "digest": "sha256:33333333333333333333333333333333333333333333333333333333333333"
          }
        ],
        "remediation": {
          "status": "in_progress",
          "notes": "Session flagged for manual fraud-team review; verifier account suspended pending outcome."
        },
        "escalation_cross_link": {
          "escalation_record_hash": "sha256:44444444444444444444444444444444444444444444444444444444444444",
          "failure_receipt_hash": null
        }
      },
      "output_payload": {
        "session_receipt": {
          "session_id": "sess-2026-0001",
          "verifier_id": "vendor-alpha-idv",
          "receipt_hash": "sha256:11111111111111111111111111111111111111111111111111111111111111",
          "receipt_hash_well_formed": true
        },
        "failure_classification": {
          "incident_id": "INC-IDV-2026-0090",
          "failure_type": "injection_detected",
          "failure_type_coerced_from_unknown_type": false,
          "description": "Virtual-camera injection flagged mid-session by the injection-detection vendor.",
          "severity_class": "contraindicated",
          "severity_coerced_from_forbidden_class": false,
          "detected_at": "2026-07-20T09:12:00Z"
        },
        "session_evidence": [
          {
            "evidence_type": "otel_span",
            "digest": "sha256:22222222222222222222222222222222222222222222222222222222222222"
          },
          {
            "evidence_type": "in_toto_link",
            "digest": "sha256:33333333333333333333333333333333333333333333333333333333333333"
          }
        ],
        "evidence_count": 2,
        "invalid_evidence_count": 0,
        "remediation": {
          "status": "in_progress",
          "status_coerced_from_forbidden_class": false,
          "notes": "Session flagged for manual fraud-team review; verifier account suspended pending outcome."
        },
        "escalation_cross_link": {
          "escalation_record_hash": "sha256:44444444444444444444444444444444444444444444444444444444444444",
          "escalation_record_hash_well_formed": true,
          "failure_receipt_hash": null,
          "failure_receipt_hash_well_formed": false
        },
        "cross_linked": true,
        "record_claim_strength": "evidence-backed",
        "record_note": "This is a verification-failure incident evidence record for an IDV/KYC session incident the caller declares; not a fraud-detection system, not a determination of fault, and not a regulatory or insurance adjudication."
      },
      "golden_hash": "454ee4099520eb7f38ae1af633d79646c0754f57cf3b060d5925d1aa6c122731"
    },
    {
      "name": "session-receipt-link-missing",
      "description": "No session_receipt cross-link declared -- record claim strength MUST degrade to insufficient rather than silently proceeding.",
      "policy_parameters": {
        "session_receipt": {},
        "failure_classification": {
          "incident_id": "INC-IDV-2026-0091",
          "failure_type": "liveness_failed",
          "description": "Liveness challenge failed twice in the same session.",
          "severity_class": "warning"
        },
        "session_evidence": [],
        "remediation": {},
        "escalation_cross_link": {}
      },
      "output_payload": {
        "session_receipt": {
          "session_id": null,
          "verifier_id": null,
          "receipt_hash": null,
          "receipt_hash_well_formed": false
        },
        "failure_classification": {
          "incident_id": "INC-IDV-2026-0091",
          "failure_type": "liveness_failed",
          "failure_type_coerced_from_unknown_type": false,
          "description": "Liveness challenge failed twice in the same session.",
          "severity_class": "warning",
          "severity_coerced_from_forbidden_class": false,
          "detected_at": null
        },
        "session_evidence": [],
        "evidence_count": 0,
        "invalid_evidence_count": 0,
        "remediation": {
          "status": "open",
          "status_coerced_from_forbidden_class": true,
          "notes": null
        },
        "escalation_cross_link": {
          "escalation_record_hash": null,
          "escalation_record_hash_well_formed": false,
          "failure_receipt_hash": null,
          "failure_receipt_hash_well_formed": false
        },
        "cross_linked": false,
        "record_claim_strength": "insufficient",
        "record_note": "This is a verification-failure incident evidence record for an IDV/KYC session incident the caller declares; not a fraud-detection system, not a determination of fault, and not a regulatory or insurance adjudication."
      },
      "golden_hash": "8379f735bc2edbebb630c48b25399684cec4d3398c8bb360d37087e1201939cc"
    },
    {
      "name": "failure-type-and-severity-coerced-evidence-dropped",
      "description": "Declares a forbidden failure_type and severity_class ('critical'), plus two malformed evidence entries -- all MUST be coerced/dropped rather than passed through.",
      "policy_parameters": {
        "session_receipt": {
          "session_id": "sess-2026-0044",
          "verifier_id": "vendor-beta-idv",
          "receipt_hash": "sha256:55555555555555555555555555555555555555555555555555555555555555"
        },
        "failure_classification": {
          "incident_id": "INC-IDV-2026-0092",
          "failure_type": "biometric_spoofing",
          "description": "Verifier flagged an unclassified anomaly outside the standard failure taxonomy.",
          "severity_class": "critical",
          "detected_at": "2026-07-20T10:30:00Z"
        },
        "session_evidence": [
          {
            "evidence_type": "otel_span",
            "digest": "sha256:66666666666666666666666666666666666666666666666666666666666666"
          },
          {
            "evidence_type": "unknown_type",
            "digest": "sha256:77777777777777777777777777777777777777777777777777777777777777"
          },
          {
            "evidence_type": "in_toto_link",
            "digest": null
          }
        ],
        "remediation": {
          "status": "escalated",
          "notes": "Routed to fraud team for manual disposition."
        },
        "escalation_cross_link": {}
      },
      "output_payload": {
        "session_receipt": {
          "session_id": "sess-2026-0044",
          "verifier_id": "vendor-beta-idv",
          "receipt_hash": "sha256:55555555555555555555555555555555555555555555555555555555555555",
          "receipt_hash_well_formed": true
        },
        "failure_classification": {
          "incident_id": "INC-IDV-2026-0092",
          "failure_type": "other",
          "failure_type_coerced_from_unknown_type": true,
          "description": "Verifier flagged an unclassified anomaly outside the standard failure taxonomy.",
          "severity_class": "warning",
          "severity_coerced_from_forbidden_class": true,
          "detected_at": "2026-07-20T10:30:00Z"
        },
        "session_evidence": [
          {
            "evidence_type": "otel_span",
            "digest": "sha256:66666666666666666666666666666666666666666666666666666666666666"
          }
        ],
        "evidence_count": 1,
        "invalid_evidence_count": 2,
        "remediation": {
          "status": "open",
          "status_coerced_from_forbidden_class": true,
          "notes": "Routed to fraud team for manual disposition."
        },
        "escalation_cross_link": {
          "escalation_record_hash": null,
          "escalation_record_hash_well_formed": false,
          "failure_receipt_hash": null,
          "failure_receipt_hash_well_formed": false
        },
        "cross_linked": false,
        "record_claim_strength": "evidence-backed",
        "record_note": "This is a verification-failure incident evidence record for an IDV/KYC session incident the caller declares; not a fraud-detection system, not a determination of fault, and not a regulatory or insurance adjudication."
      },
      "golden_hash": "c98d1cc9e97c3bb25d57eb716580faba33c5e00948988fe97305d5e07d4a360e"
    },
    {
      "name": "cross-link-malformed",
      "description": "Both escalation cross-link hashes are present but not well-formed digests -- MUST be flagged, never silently accepted as valid linkage.",
      "policy_parameters": {
        "session_receipt": {
          "session_id": "sess-2026-0077",
          "verifier_id": "vendor-gamma-idv",
          "receipt_hash": "sha256:88888888888888888888888888888888888888888888888888888888888888"
        },
        "failure_classification": {
          "incident_id": "INC-IDV-2026-0093",
          "failure_type": "device_anomaly",
          "description": "Device fingerprint mismatch flagged by device-signal summary.",
          "severity_class": "affirming",
          "detected_at": "2026-07-20T11:05:00Z"
        },
        "session_evidence": [
          {
            "evidence_type": "otel_span",
            "digest": "sha256:99999999999999999999999999999999999999999999999999999999999999"
          }
        ],
        "remediation": {
          "status": "resolved",
          "notes": "Confirmed benign device change; no action needed."
        },
        "escalation_cross_link": {
          "escalation_record_hash": "not-a-hash",
          "failure_receipt_hash": "sha256:ab"
        }
      },
      "output_payload": {
        "session_receipt": {
          "session_id": "sess-2026-0077",
          "verifier_id": "vendor-gamma-idv",
          "receipt_hash": "sha256:88888888888888888888888888888888888888888888888888888888888888",
          "receipt_hash_well_formed": true
        },
        "failure_classification": {
          "incident_id": "INC-IDV-2026-0093",
          "failure_type": "device_anomaly",
          "failure_type_coerced_from_unknown_type": false,
          "description": "Device fingerprint mismatch flagged by device-signal summary.",
          "severity_class": "affirming",
          "severity_coerced_from_forbidden_class": false,
          "detected_at": "2026-07-20T11:05:00Z"
        },
        "session_evidence": [
          {
            "evidence_type": "otel_span",
            "digest": "sha256:99999999999999999999999999999999999999999999999999999999999999"
          }
        ],
        "evidence_count": 1,
        "invalid_evidence_count": 0,
        "remediation": {
          "status": "resolved",
          "status_coerced_from_forbidden_class": false,
          "notes": "Confirmed benign device change; no action needed."
        },
        "escalation_cross_link": {
          "escalation_record_hash": "not-a-hash",
          "escalation_record_hash_well_formed": false,
          "failure_receipt_hash": "sha256:ab",
          "failure_receipt_hash_well_formed": false
        },
        "cross_linked": true,
        "record_claim_strength": "evidence-backed",
        "record_note": "This is a verification-failure incident evidence record for an IDV/KYC session incident the caller declares; not a fraud-detection system, not a determination of fault, and not a regulatory or insurance adjudication."
      },
      "golden_hash": "44ed586ac11fb51124bc7aedd93ffe2100406917b06329ec153a5daf8f81783a"
    }
  ]
}