{
  "tool_id": "art-438-eval-attestation-receipt-composer",
  "note": "Eval-attestation receipt composer (POSTCAMPAIGN-BAND-SPEC.md §PC-6, EVAL-AT-1). Vector 1: eval_log hash + mandate_reference both bound, exercises claim_strength: mandate-bound. Vector 2: eval_log hash only, no mandate_reference, exercises claim_strength: hash-only. Vector 3: empty policy_parameters, exercises attestation_determination: INSUFFICIENT_EVIDENCE + claim_strength: missing finite gate.",
  "vectors": [
    {
      "name": "mandate_bound",
      "description": "Eval log hash present and referenced by a compiled Work Mandate digest.",
      "policy_parameters": {
        "eval_log": {
          "hash": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
          "format": "inspect_ai_eval_log",
          "eval_id": "inspect-eval-2026-07-23-001"
        },
        "mandate_reference": {
          "work_mandate_hash": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
          "policy_id": "governance-policy-eval-gate-v1"
        }
      },
      "output_payload": {
        "attestation_determination": "ATTESTED",
        "eval_log_hash": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
        "eval_format": "inspect_ai_eval_log",
        "eval_id": "inspect-eval-2026-07-23-001",
        "mandate_reference": {
          "work_mandate_hash": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
          "policy_id": "governance-policy-eval-gate-v1"
        },
        "claim_strength": "mandate-bound",
        "verify_instructions": "Recompute SHA-256 of the referenced inspect_ai_eval_log eval log bytes and confirm it equals sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa; this receipt is VERIFY-ONLY and does not re-run, re-score, or grade the eval.",
        "not_proven": [
          { "item": "Eval correctness or scoring validity", "detail": "This receipt attests only that a specific eval log digest was produced; it does not re-run, re-score, or otherwise validate the underlying evaluation." },
          { "item": "Eval log completeness", "detail": "The hash covers exactly the log bytes supplied by the caller. A truncated, redacted, or cherry-picked log hashes correctly too." },
          { "item": "Mandate satisfaction", "detail": "mandate_reference records a pointer to a compiled Work Mandate (art-274); whether the eval actually satisfies that mandate's policy conditions is a separate judgment, not made by this kernel." },
          { "item": "Currency beyond generation time", "detail": "A §16 signature attests the artifact at generated_at; a §20 anchor (if attached) proves inclusion by a time. Neither proves the eval log is still current." }
        ]
      },
      "golden_hash": "fd98296bbf4635a4e7112a2274c6feb78cbbee6847154cfd2362eaa61e9ca1b5"
    },
    {
      "name": "hash_only",
      "description": "Eval log hash present, no mandate_reference bound.",
      "policy_parameters": {
        "eval_log": {
          "hash": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
          "format": "inspect_ai_eval_log",
          "eval_id": "inspect-eval-2026-07-23-002"
        }
      },
      "output_payload": {
        "attestation_determination": "ATTESTED",
        "eval_log_hash": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
        "eval_format": "inspect_ai_eval_log",
        "eval_id": "inspect-eval-2026-07-23-002",
        "mandate_reference": null,
        "claim_strength": "hash-only",
        "verify_instructions": "Recompute SHA-256 of the referenced inspect_ai_eval_log eval log bytes and confirm it equals sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa; this receipt is VERIFY-ONLY and does not re-run, re-score, or grade the eval.",
        "not_proven": [
          { "item": "Eval correctness or scoring validity", "detail": "This receipt attests only that a specific eval log digest was produced; it does not re-run, re-score, or otherwise validate the underlying evaluation." },
          { "item": "Eval log completeness", "detail": "The hash covers exactly the log bytes supplied by the caller. A truncated, redacted, or cherry-picked log hashes correctly too." },
          { "item": "Mandate satisfaction", "detail": "mandate_reference records a pointer to a compiled Work Mandate (art-274); whether the eval actually satisfies that mandate's policy conditions is a separate judgment, not made by this kernel." },
          { "item": "Currency beyond generation time", "detail": "A §16 signature attests the artifact at generated_at; a §20 anchor (if attached) proves inclusion by a time. Neither proves the eval log is still current." }
        ]
      },
      "golden_hash": "382bb95b9bd426fa77312b13710df5828a2aa9c75a531597b5937b8420fbbde2"
    },
    {
      "name": "insufficient_evidence_edge_case",
      "description": "No eval_log supplied -- attestation_determination: INSUFFICIENT_EVIDENCE, claim_strength: missing, not a crash (finite gate).",
      "policy_parameters": {},
      "output_payload": {
        "attestation_determination": "INSUFFICIENT_EVIDENCE",
        "eval_log_hash": null,
        "eval_format": "inspect_ai_eval_log",
        "eval_id": null,
        "mandate_reference": null,
        "claim_strength": "missing",
        "verify_instructions": null,
        "not_proven": [
          { "item": "Eval correctness or scoring validity", "detail": "This receipt attests only that a specific eval log digest was produced; it does not re-run, re-score, or otherwise validate the underlying evaluation." },
          { "item": "Eval log completeness", "detail": "The hash covers exactly the log bytes supplied by the caller. A truncated, redacted, or cherry-picked log hashes correctly too." },
          { "item": "Mandate satisfaction", "detail": "mandate_reference records a pointer to a compiled Work Mandate (art-274); whether the eval actually satisfies that mandate's policy conditions is a separate judgment, not made by this kernel." },
          { "item": "Currency beyond generation time", "detail": "A §16 signature attests the artifact at generated_at; a §20 anchor (if attached) proves inclusion by a time. Neither proves the eval log is still current." }
        ]
      },
      "golden_hash": "6c23317e9a0ee400c2e0b31458473f9b1d57d7989d28ff29a81280b8875d12de"
    }
  ]
}