{ "record_schema": "eziah.accord.experimental-evidence-publication/2", "record_state": "PUBLISHED", "record_signed": false, "record_character": "Unsigned website summary derived from the owner-signed Public.2 release and its accepted canonical publication mapping. It reports; it does not extend any signature.", "supersedes_website_record": { "path": "releases/eza-001/linux-experimental-evidence-001/website-record.json", "sha256": "51547b329d979c13f0afa7358ad1ec075a2a805d799588f7ba7d970e91eaff1a", "note": "Earlier unsigned draft retained unchanged as history." }, "identity": { "specification_id": "EZA-001", "release_id": "R001", "candidate_id": "EZA-001-R001-rc.9", "evidence_release_id": "EZA-001-LINUX-EXPERIMENTAL-EVIDENCE-001-rc.1", "public_edition_id": "EZA-001-LINUX-EXPERIMENTAL-EVIDENCE-001-public.2", "publication_artifact_identity": "EZA-001-LINUX-EXPERIMENTAL-EVIDENCE-001-public.2", "original_evidence_release_id": "EZA-001-LINUX-EXPERIMENTAL-EVIDENCE-001-rc.1", "namespace": "eza-001/linux-experimental-evidence-001-public.2", "lineage_id": "eza-001/linux-experimental-evidence-001-public.2/lineage", "relation": "supporting_evidence_not_specification_revision", "never_attribute_public2_signatures_to": [ "EZA-001-LINUX-EXPERIMENTAL-EVIDENCE-001-rc.1", "EZA-001-LINUX-EXPERIMENTAL-EVIDENCE-001-public.1" ] }, "title": "EZA-001 Linux Experimental Evidence 001", "edition_title": "Public edition 2", "maturity": "EXPERIMENTAL", "summary": "Saved evidence from a native Linux experiment. The native authority protocol passed within five saved cases. Overall adversarial isolation is inconclusive, live same-tick mutation was not executed, and full runtime reproduction is not available from this public subset.", "canonical": { "page": "/evidence/eza-001/r001/linux-experimental-evidence-001", "machine_record": "/evidence/eza-001/r001/linux-experimental-evidence-001.json", "artifact_base": "/evidence/eza-001/r001/linux-experimental-evidence-001/artifacts/public.2/", "specification_document_id": "eza-001/r001/specification", "specification_url": "https://eziah.dev/releases/eza-001/r001/specification" }, "supported_claim": [ { "subject": "Native authority protocol", "result": "PASS", "scope": "within five saved cases" }, { "subject": "Overall adversarial isolation", "result": "INCONCLUSIVE" }, { "subject": "Live same-tick mutation", "result": "NOT EXECUTED" }, { "subject": "Full runtime reproduction", "result": "NOT AVAILABLE", "scope": "from the public subset" } ], "verdicts": { "native_protocol": "PASS", "manual_four_file_denial": "INCONCLUSIVE", "isolated_scope_enforcement": "INCONCLUSIVE", "same_tick_mutation": "NOT EXECUTED", "overall_adversarial_isolation": "INCONCLUSIVE", "production_certification": false }, "claims": [ { "id": "eza-001/linux-experimental-evidence-001-rc.1/claim/authorized", "statement": "One exact authorized write to object:X, one root consumed and the prepared handle removed; object:Y remains initial.", "verdict": "PASS for exact native case only", "classification": "evaluator conclusion", "signature_coverage": "privacy-derived projection in the owner-signed public.2 package (manifest and release binding Minisign signatures independently verified); original Release 220 signatures do not authenticate projections or interpretation", "requirement_ids": [ "eza-001/r001/specification/R1", "eza-001/r001/specification/R3", "eza-001/r001/specification/R6", "eza-001/r001/specification/R7", "eza-001/r001/specification/R10", "eza-001/r001/specification/R12" ], "observation_ids": [ "eza-001/linux-experimental-evidence-001-rc.1/observation/authorized" ], "source_artifact_ids": [ "eza-001/linux-experimental-evidence-001-rc.1/artifact/1bea0e18cd6033296c5cbea18987602ce7ff9929294f8e007b2d36ef77e95d25", "eza-001/linux-experimental-evidence-001-rc.1/artifact/262cbdcddca62582a41664fc408052a9086f0e0ffb15a1ce1d8d981fef8f1886", "eza-001/linux-experimental-evidence-001-rc.1/artifact/3196578b810165dbce2a948c006f24d2d3620dcff5b6d461da0609fb12f4b768", "eza-001/linux-experimental-evidence-001-rc.1/artifact/5a97bbf999446a7acc642c025081ad398bfaa61004987c745fd3f4f861d59513", "eza-001/linux-experimental-evidence-001-rc.1/artifact/9feaefd49fdc86008bde7cf5b39fad35aa9a5e8be5ec8b63f8878b711970087f", "eza-001/linux-experimental-evidence-001-rc.1/artifact/f93764fa9d6511ed3b581e4f6ee305971fd68f42ac9f6e7e6a4542059619dbc3" ], "public_artifact_paths": { "eza-001/linux-experimental-evidence-001-rc.1/artifact/1bea0e18cd6033296c5cbea18987602ce7ff9929294f8e007b2d36ef77e95d25": { "path": "evidence/native-authorized-commit-217/authority-after.json", "sha256": "201fdee37c14850f8bfb4098afac785e42b9658c9a1089b1145117b3eac8ceea", "bytes": 53119, "status": "included-byte-identical", "digest_scope": "included public file bytes" }, "eza-001/linux-experimental-evidence-001-rc.1/artifact/262cbdcddca62582a41664fc408052a9086f0e0ffb15a1ce1d8d981fef8f1886": { "path": "evidence/native-authorized-commit-217/complete-executor-journal.jsonl", "sha256": "815280a9a0a90637f1ed3f771b40b3751f47e15281583837c8777b93f4b5350f", "bytes": 33137, "status": "derived-projection", "digest_scope": "included public file bytes", "byte_identical": false, "original_signature_authenticates_projection": false, "projection_artifact_id": "eza-001/linux-experimental-evidence-001-public.2/artifact/projection/91fc47c7200117bf6438693c10a8942702bad27d2154faeab49617c61417ed76", "transformation_inventory_path": "PROJECTION-INVENTORY.json" }, "eza-001/linux-experimental-evidence-001-rc.1/artifact/3196578b810165dbce2a948c006f24d2d3620dcff5b6d461da0609fb12f4b768": { "path": "evidence/native-authorized-commit-217/NATIVE-RECEIPT.json", "sha256": "44699ea8daa6e0fbcc90927eb1566d060720a716203b08b5c18dcbb0cf5364b9", "bytes": 2204, "status": "included-byte-identical", "digest_scope": "included public file bytes" }, "eza-001/linux-experimental-evidence-001-rc.1/artifact/5a97bbf999446a7acc642c025081ad398bfaa61004987c745fd3f4f861d59513": { "path": "evidence/native-authorized-commit-217/COMMIT-RESULT.json", "sha256": "e737c1e47d210e0f6894e2d6a723158d6e41c9bf46e9bbd808e0664ed72fa39b", "bytes": 761, "status": "included-byte-identical", "digest_scope": "included public file bytes" }, "eza-001/linux-experimental-evidence-001-rc.1/artifact/9feaefd49fdc86008bde7cf5b39fad35aa9a5e8be5ec8b63f8878b711970087f": { "path": "evidence/final-release-220/audit/current-authority.json", "sha256": "f4bfef7efaf67b520aabef9bd565b56c9d9a5316c8d8d13df224e2d855bc28dd", "bytes": 103117, "status": "included-byte-identical", "digest_scope": "included public file bytes" }, "eza-001/linux-experimental-evidence-001-rc.1/artifact/f93764fa9d6511ed3b581e4f6ee305971fd68f42ac9f6e7e6a4542059619dbc3": { "path": "evidence/native-authorized-commit-217/authority-before.json", "sha256": "45c608a1df34380864d5d4ee0746d3ea7e461b61668a91e8cc142c168a9571a3", "bytes": 43533, "status": "included-byte-identical", "digest_scope": "included public file bytes" } } }, { "id": "eza-001/linux-experimental-evidence-001-rc.1/claim/no-authority", "statement": "Request without authority refused with FAIL_SAFELY and zero additional protected effects.", "verdict": "PASS for exact native case only", "classification": "evaluator conclusion", "signature_coverage": "privacy-derived projection in the owner-signed public.2 package (manifest and release binding Minisign signatures independently verified); original Release 220 signatures do not authenticate projections or interpretation", "requirement_ids": [ "eza-001/r001/specification/R1", "eza-001/r001/specification/R3", "eza-001/r001/specification/R8", "eza-001/r001/specification/R9", "eza-001/r001/specification/R10" ], "observation_ids": [ "eza-001/linux-experimental-evidence-001-rc.1/observation/no-authority" ], "source_artifact_ids": [ "eza-001/linux-experimental-evidence-001-rc.1/artifact/102a0e4821764c041374dc8926a052efebfe90179f7cf4a0ada59b94b8078cec", "eza-001/linux-experimental-evidence-001-rc.1/artifact/2e2fcff858a75b94b76c02e743872ce0213087ba730f7df09b0d8a2573ad1941", "eza-001/linux-experimental-evidence-001-rc.1/artifact/5223a3e66d09df307b5d35551a15e8f2f4f89beebb9ed14a6401e171a4ae37d2", "eza-001/linux-experimental-evidence-001-rc.1/artifact/9e7c782dceec74b5260842b18d4a02e507f9c5fcd86878a9ed9ae7df2ccaa70c", "eza-001/linux-experimental-evidence-001-rc.1/artifact/9feaefd49fdc86008bde7cf5b39fad35aa9a5e8be5ec8b63f8878b711970087f", "eza-001/linux-experimental-evidence-001-rc.1/artifact/df4b71cc7319eb297c061c0c7f16ec08d98f53c3c2f1a21ccd5b7ce88113f463" ], "public_artifact_paths": { "eza-001/linux-experimental-evidence-001-rc.1/artifact/102a0e4821764c041374dc8926a052efebfe90179f7cf4a0ada59b94b8078cec": { "path": "evidence/live-authority-stress-218/no-authority/NATIVE-RECEIPT.json", "sha256": "b09feb9fd2fae84566e1bb0924b81d7ecda9b15b2ff6762e83634a6559167747", "bytes": 2059, "status": "included-byte-identical", "digest_scope": "included public file bytes" }, "eza-001/linux-experimental-evidence-001-rc.1/artifact/2e2fcff858a75b94b76c02e743872ce0213087ba730f7df09b0d8a2573ad1941": { "path": "evidence/live-authority-stress-218/no-authority/NATIVE-RESULT.json", "sha256": "d6580121637d01d572e88244c99f3d2a72d456dce5c2cc179a697e0fc1da1ea5", "bytes": 706, "status": "included-byte-identical", "digest_scope": "included public file bytes" }, "eza-001/linux-experimental-evidence-001-rc.1/artifact/5223a3e66d09df307b5d35551a15e8f2f4f89beebb9ed14a6401e171a4ae37d2": { "path": "evidence/live-authority-stress-218/final-physical-evidence.json", "sha256": "3a92a71318942d12588ce7baf446e2f6e3033dac3ffd002c3e625661fb285ddb", "bytes": 137829, "status": "derived-projection", "digest_scope": "included public file bytes", "byte_identical": false, "original_signature_authenticates_projection": false, "projection_artifact_id": "eza-001/linux-experimental-evidence-001-public.2/artifact/projection/baa586e22dba799b9fb134c03662fe64e531411cf91273e2004439829be8c6d8", "transformation_inventory_path": "PROJECTION-INVENTORY.json" }, "eza-001/linux-experimental-evidence-001-rc.1/artifact/9e7c782dceec74b5260842b18d4a02e507f9c5fcd86878a9ed9ae7df2ccaa70c": { "path": "evidence/live-authority-stress-218/no-authority/authority-before.stdout", "sha256": "f9a17de3fdb687132aaa2f0eeb88abbab99096a5cbd9ebee64c65a917b34762a", "bytes": 53119, "status": "included-byte-identical", "digest_scope": "included public file bytes" }, "eza-001/linux-experimental-evidence-001-rc.1/artifact/9feaefd49fdc86008bde7cf5b39fad35aa9a5e8be5ec8b63f8878b711970087f": { "path": "evidence/final-release-220/audit/current-authority.json", "sha256": "f4bfef7efaf67b520aabef9bd565b56c9d9a5316c8d8d13df224e2d855bc28dd", "bytes": 103117, "status": "included-byte-identical", "digest_scope": "included public file bytes" }, "eza-001/linux-experimental-evidence-001-rc.1/artifact/df4b71cc7319eb297c061c0c7f16ec08d98f53c3c2f1a21ccd5b7ce88113f463": { "path": "evidence/live-authority-stress-218/no-authority/authority-after.stdout", "sha256": "1940b39e8d87f61ec6b536f8767637b2d9c87515ed4ec691c726529ea49e2ded", "bytes": 65147, "status": "included-byte-identical", "digest_scope": "included public file bytes" } } }, { "id": "eza-001/linux-experimental-evidence-001-rc.1/claim/out-of-scope-replay", "statement": "Out-of-scope attempt refused for replay; no additional protected effect; isolated scope enforcement remains INCONCLUSIVE.", "verdict": "PASS for exact native case only", "classification": "evaluator conclusion", "signature_coverage": "privacy-derived projection in the owner-signed public.2 package (manifest and release binding Minisign signatures independently verified); original Release 220 signatures do not authenticate projections or interpretation", "requirement_ids": [ "eza-001/r001/specification/R4", "eza-001/r001/specification/R7", "eza-001/r001/specification/R8" ], "observation_ids": [ "eza-001/linux-experimental-evidence-001-rc.1/observation/out-of-scope-replay" ], "source_artifact_ids": [ "eza-001/linux-experimental-evidence-001-rc.1/artifact/209141895f8ab072edd6be32bc2fb5e3fcb2460866b442a218c67797d04c02dc", "eza-001/linux-experimental-evidence-001-rc.1/artifact/5223a3e66d09df307b5d35551a15e8f2f4f89beebb9ed14a6401e171a4ae37d2", "eza-001/linux-experimental-evidence-001-rc.1/artifact/9feaefd49fdc86008bde7cf5b39fad35aa9a5e8be5ec8b63f8878b711970087f", "eza-001/linux-experimental-evidence-001-rc.1/artifact/b3c4353c9a1c794ad2be85ade5dbbc2c7913b4b31dccc5d42d017b5f3221c42f", "eza-001/linux-experimental-evidence-001-rc.1/artifact/d2e492eb82fa13ab6554e7a9651b550ff45f9c4fce2fee54b7cb04c8e5b8d924", "eza-001/linux-experimental-evidence-001-rc.1/artifact/dd04d283fe6aaaa3d6cab65ad12ac77da0a76c81c3a6aac0a0e78257a3032ffe" ], "public_artifact_paths": { "eza-001/linux-experimental-evidence-001-rc.1/artifact/209141895f8ab072edd6be32bc2fb5e3fcb2460866b442a218c67797d04c02dc": { "path": "evidence/live-authority-stress-218/out-of-scope/NATIVE-RECEIPT.json", "sha256": "f326a3bd350ff3c0a81bf0c9b61bb3e2c03221854b08f216d6a8190aab037a2b", "bytes": 2143, "status": "included-byte-identical", "digest_scope": "included public file bytes" }, "eza-001/linux-experimental-evidence-001-rc.1/artifact/5223a3e66d09df307b5d35551a15e8f2f4f89beebb9ed14a6401e171a4ae37d2": { "path": "evidence/live-authority-stress-218/final-physical-evidence.json", "sha256": "3a92a71318942d12588ce7baf446e2f6e3033dac3ffd002c3e625661fb285ddb", "bytes": 137829, "status": "derived-projection", "digest_scope": "included public file bytes", "byte_identical": false, "original_signature_authenticates_projection": false, "projection_artifact_id": "eza-001/linux-experimental-evidence-001-public.2/artifact/projection/baa586e22dba799b9fb134c03662fe64e531411cf91273e2004439829be8c6d8", "transformation_inventory_path": "PROJECTION-INVENTORY.json" }, "eza-001/linux-experimental-evidence-001-rc.1/artifact/9feaefd49fdc86008bde7cf5b39fad35aa9a5e8be5ec8b63f8878b711970087f": { "path": "evidence/final-release-220/audit/current-authority.json", "sha256": "f4bfef7efaf67b520aabef9bd565b56c9d9a5316c8d8d13df224e2d855bc28dd", "bytes": 103117, "status": "included-byte-identical", "digest_scope": "included public file bytes" }, "eza-001/linux-experimental-evidence-001-rc.1/artifact/b3c4353c9a1c794ad2be85ade5dbbc2c7913b4b31dccc5d42d017b5f3221c42f": { "path": "evidence/live-authority-stress-218/out-of-scope/authority-after.stdout", "sha256": "faaa958f89bc985633b65c7da27a8c309dc8a07c2a8a566c5374be1ed9fdccd3", "bytes": 77697, "status": "included-byte-identical", "digest_scope": "included public file bytes" }, "eza-001/linux-experimental-evidence-001-rc.1/artifact/d2e492eb82fa13ab6554e7a9651b550ff45f9c4fce2fee54b7cb04c8e5b8d924": { "path": "evidence/live-authority-stress-218/out-of-scope/NATIVE-RESULT.json", "sha256": "777391a5c4cfc7f16f1236fa92b0f46253e1b64fe49bcc69a08670666a35fef3", "bytes": 715, "status": "included-byte-identical", "digest_scope": "included public file bytes" }, "eza-001/linux-experimental-evidence-001-rc.1/artifact/dd04d283fe6aaaa3d6cab65ad12ac77da0a76c81c3a6aac0a0e78257a3032ffe": { "path": "evidence/live-authority-stress-218/out-of-scope/authority-before.stdout", "sha256": "0b221b74a490dc32ffafab8af7e6f5617a60ed7b28858928a8bea1effd82e096", "bytes": 65147, "status": "included-byte-identical", "digest_scope": "included public file bytes" } } }, { "id": "eza-001/linux-experimental-evidence-001-rc.1/claim/consumed-grant", "statement": "Consumed-grant replay refused with no additional protected effect or renewed authority.", "verdict": "PASS for exact native case only", "classification": "evaluator conclusion", "signature_coverage": "privacy-derived projection in the owner-signed public.2 package (manifest and release binding Minisign signatures independently verified); original Release 220 signatures do not authenticate projections or interpretation", "requirement_ids": [ "eza-001/r001/specification/R7", "eza-001/r001/specification/R8" ], "observation_ids": [ "eza-001/linux-experimental-evidence-001-rc.1/observation/consumed-grant" ], "source_artifact_ids": [ "eza-001/linux-experimental-evidence-001-rc.1/artifact/43d95485b1a98c008a97934a086218a4383bae956b2d551652f211c5c92b435e", "eza-001/linux-experimental-evidence-001-rc.1/artifact/5223a3e66d09df307b5d35551a15e8f2f4f89beebb9ed14a6401e171a4ae37d2", "eza-001/linux-experimental-evidence-001-rc.1/artifact/6bc646a2a0673a2fbc963f6eeb9be7773f7ac4cde7d49e7837f1b25ba8eedb7e", "eza-001/linux-experimental-evidence-001-rc.1/artifact/88c8e235ac6223c5c650167403c3bbf1f708ed0820def46690fc4b97cde01321", "eza-001/linux-experimental-evidence-001-rc.1/artifact/9feaefd49fdc86008bde7cf5b39fad35aa9a5e8be5ec8b63f8878b711970087f", "eza-001/linux-experimental-evidence-001-rc.1/artifact/a5e645709928db27a8b97fbfca6ae164ca4f92116f73ab05137e667e8f8df646" ], "public_artifact_paths": { "eza-001/linux-experimental-evidence-001-rc.1/artifact/43d95485b1a98c008a97934a086218a4383bae956b2d551652f211c5c92b435e": { "path": "evidence/live-authority-stress-218/consumed-grant/NATIVE-RESULT.json", "sha256": "79f28e62c294da17dbb54d19d83537fdbf6dfb5e4d0701dba1b61c9a4d576cb7", "bytes": 710, "status": "included-byte-identical", "digest_scope": "included public file bytes" }, "eza-001/linux-experimental-evidence-001-rc.1/artifact/5223a3e66d09df307b5d35551a15e8f2f4f89beebb9ed14a6401e171a4ae37d2": { "path": "evidence/live-authority-stress-218/final-physical-evidence.json", "sha256": "3a92a71318942d12588ce7baf446e2f6e3033dac3ffd002c3e625661fb285ddb", "bytes": 137829, "status": "derived-projection", "digest_scope": "included public file bytes", "byte_identical": false, "original_signature_authenticates_projection": false, "projection_artifact_id": "eza-001/linux-experimental-evidence-001-public.2/artifact/projection/baa586e22dba799b9fb134c03662fe64e531411cf91273e2004439829be8c6d8", "transformation_inventory_path": "PROJECTION-INVENTORY.json" }, "eza-001/linux-experimental-evidence-001-rc.1/artifact/6bc646a2a0673a2fbc963f6eeb9be7773f7ac4cde7d49e7837f1b25ba8eedb7e": { "path": "evidence/live-authority-stress-218/consumed-grant/NATIVE-RECEIPT.json", "sha256": "9a4b1be94fbc64456c2e5471f44f6d0ef8ca3bb1df5e6500434795698e83d55a", "bytes": 2129, "status": "included-byte-identical", "digest_scope": "included public file bytes" }, "eza-001/linux-experimental-evidence-001-rc.1/artifact/88c8e235ac6223c5c650167403c3bbf1f708ed0820def46690fc4b97cde01321": { "path": "evidence/live-authority-stress-218/consumed-grant/authority-after.stdout", "sha256": "088b2492393f4cacaca2c3aa26408bdc6fb233a75b2c7d2235c9c1dcc331f22c", "bytes": 90157, "status": "included-byte-identical", "digest_scope": "included public file bytes" }, "eza-001/linux-experimental-evidence-001-rc.1/artifact/9feaefd49fdc86008bde7cf5b39fad35aa9a5e8be5ec8b63f8878b711970087f": { "path": "evidence/final-release-220/audit/current-authority.json", "sha256": "f4bfef7efaf67b520aabef9bd565b56c9d9a5316c8d8d13df224e2d855bc28dd", "bytes": 103117, "status": "included-byte-identical", "digest_scope": "included public file bytes" }, "eza-001/linux-experimental-evidence-001-rc.1/artifact/a5e645709928db27a8b97fbfca6ae164ca4f92116f73ab05137e667e8f8df646": { "path": "evidence/live-authority-stress-218/consumed-grant/authority-before.stdout", "sha256": "b8f3479553f84ac92e85f48537b43ec7931a8b281b52a0268fe73addc29f4cfd", "bytes": 77697, "status": "included-byte-identical", "digest_scope": "included public file bytes" } } }, { "id": "eza-001/linux-experimental-evidence-001-rc.1/claim/spent-handle", "statement": "The exact spent-handle attempt refused with no additional protected effect; broader attack isolation not established.", "verdict": "PASS for exact native case only", "classification": "evaluator conclusion", "signature_coverage": "privacy-derived projection in the owner-signed public.2 package (manifest and release binding Minisign signatures independently verified); original Release 220 signatures do not authenticate projections or interpretation", "requirement_ids": [ "eza-001/r001/specification/R6", "eza-001/r001/specification/R7", "eza-001/r001/specification/R8" ], "observation_ids": [ "eza-001/linux-experimental-evidence-001-rc.1/observation/spent-handle" ], "source_artifact_ids": [ "eza-001/linux-experimental-evidence-001-rc.1/artifact/418eedf5994f7d1902c6b12a1b4b42fc9e8afe925e977756188b3313edaf732c", "eza-001/linux-experimental-evidence-001-rc.1/artifact/5223a3e66d09df307b5d35551a15e8f2f4f89beebb9ed14a6401e171a4ae37d2", "eza-001/linux-experimental-evidence-001-rc.1/artifact/87b1c0b0ee7a4f4dc471b8157b74cdef9ba89e81c43b6d8efbd389a8e92aed66", "eza-001/linux-experimental-evidence-001-rc.1/artifact/9c797d39de9a52fe531aa072ee45b17f165a4b3f2afd7443866cba4f8f869a27", "eza-001/linux-experimental-evidence-001-rc.1/artifact/9feaefd49fdc86008bde7cf5b39fad35aa9a5e8be5ec8b63f8878b711970087f", "eza-001/linux-experimental-evidence-001-rc.1/artifact/a9ad6b11bccc783b6ea2785c5a043da7949a89b9b78210366227c0e623af1845" ], "public_artifact_paths": { "eza-001/linux-experimental-evidence-001-rc.1/artifact/418eedf5994f7d1902c6b12a1b4b42fc9e8afe925e977756188b3313edaf732c": { "path": "evidence/live-authority-stress-218/spent-handle/authority-after.stdout", "sha256": "84d81af8a35769c60642ce46f0a9168dd1857cfea2c132f24aea69c26e3d4ef1", "bytes": 103117, "status": "included-byte-identical", "digest_scope": "included public file bytes" }, "eza-001/linux-experimental-evidence-001-rc.1/artifact/5223a3e66d09df307b5d35551a15e8f2f4f89beebb9ed14a6401e171a4ae37d2": { "path": "evidence/live-authority-stress-218/final-physical-evidence.json", "sha256": "3a92a71318942d12588ce7baf446e2f6e3033dac3ffd002c3e625661fb285ddb", "bytes": 137829, "status": "derived-projection", "digest_scope": "included public file bytes", "byte_identical": false, "original_signature_authenticates_projection": false, "projection_artifact_id": "eza-001/linux-experimental-evidence-001-public.2/artifact/projection/baa586e22dba799b9fb134c03662fe64e531411cf91273e2004439829be8c6d8", "transformation_inventory_path": "PROJECTION-INVENTORY.json" }, "eza-001/linux-experimental-evidence-001-rc.1/artifact/87b1c0b0ee7a4f4dc471b8157b74cdef9ba89e81c43b6d8efbd389a8e92aed66": { "path": "evidence/live-authority-stress-218/spent-handle/NATIVE-RECEIPT.json", "sha256": "3ad20f816c21d2de6dbc52ecc49a96d86d9c162653f695ec7b36e7a5da4e0b2a", "bytes": 2205, "status": "included-byte-identical", "digest_scope": "included public file bytes" }, "eza-001/linux-experimental-evidence-001-rc.1/artifact/9c797d39de9a52fe531aa072ee45b17f165a4b3f2afd7443866cba4f8f869a27": { "path": "evidence/live-authority-stress-218/spent-handle/authority-before.stdout", "sha256": "d1bdced6d9d8451f1b07766e61c66639875e4033b7a3ea7a1971022f1ed05d9c", "bytes": 90157, "status": "included-byte-identical", "digest_scope": "included public file bytes" }, "eza-001/linux-experimental-evidence-001-rc.1/artifact/9feaefd49fdc86008bde7cf5b39fad35aa9a5e8be5ec8b63f8878b711970087f": { "path": "evidence/final-release-220/audit/current-authority.json", "sha256": "f4bfef7efaf67b520aabef9bd565b56c9d9a5316c8d8d13df224e2d855bc28dd", "bytes": 103117, "status": "included-byte-identical", "digest_scope": "included public file bytes" }, "eza-001/linux-experimental-evidence-001-rc.1/artifact/a9ad6b11bccc783b6ea2785c5a043da7949a89b9b78210366227c0e623af1845": { "path": "evidence/live-authority-stress-218/spent-handle/NATIVE-RESULT.json", "sha256": "2cf251c75fa418630136a154552df66e0da2439850fd649d93b2d2c200209559", "bytes": 728, "status": "included-byte-identical", "digest_scope": "included public file bytes" } } }, { "id": "eza-001/linux-experimental-evidence-001-rc.1/claim/manual", "statement": "Manual four-file denial: INCONCLUSIVE", "verdict": "INCONCLUSIVE", "classification": "evaluator conclusion", "signature_coverage": "privacy-derived projection in the owner-signed public.2 package (manifest and release binding Minisign signatures independently verified); original Release 220 signatures do not authenticate projections or interpretation", "requirement_ids": [ "eza-001/r001/specification/R6" ], "observation_ids": [ "eza-001/linux-experimental-evidence-001-rc.1/observation/manual" ], "source_artifact_ids": [ "eza-001/linux-experimental-evidence-001-rc.1/artifact/0805755a4a4bd88dc0e5a832b9736c2ad7faacd37d3e77117c34e38e06f23e85" ], "public_artifact_paths": { "eza-001/linux-experimental-evidence-001-rc.1/artifact/0805755a4a4bd88dc0e5a832b9736c2ad7faacd37d3e77117c34e38e06f23e85": { "path": "evidence/final-release-220/audit/MANUAL-TEST-EVIDENCE.json", "sha256": "51e1cd646d730ed2c96c68ba5a0b8c94295f2f1e044aa89f7a151d419869b2e1", "bytes": 10640, "status": "derived-projection", "digest_scope": "included public file bytes", "byte_identical": false, "original_signature_authenticates_projection": false, "projection_artifact_id": "eza-001/linux-experimental-evidence-001-public.2/artifact/projection/1ca548a43a393d9aeb5d6e58b0d3d067f6a6de7f84c9f5e26310751f07258e7a", "transformation_inventory_path": "PROJECTION-INVENTORY.json" } } }, { "id": "eza-001/linux-experimental-evidence-001-rc.1/claim/scope", "statement": "Isolated scope enforcement: INCONCLUSIVE", "verdict": "INCONCLUSIVE", "classification": "evaluator conclusion", "signature_coverage": "privacy-derived projection in the owner-signed public.2 package (manifest and release binding Minisign signatures independently verified); original Release 220 signatures do not authenticate projections or interpretation", "requirement_ids": [ "eza-001/r001/specification/R4" ], "observation_ids": [], "source_artifact_ids": [ "eza-001/linux-experimental-evidence-001-rc.1/artifact/c2ef069f1e250791eb86b59046a44aa7456ce480029aafb12f01221feb9834f5" ], "public_artifact_paths": { "eza-001/linux-experimental-evidence-001-rc.1/artifact/c2ef069f1e250791eb86b59046a44aa7456ce480029aafb12f01221feb9834f5": { "path": "historical/original-release/CLAIM-BOUNDARIES.txt", "sha256": "6f6eaa008c95d32c2e9da0bcb46be5ad2fa4293d6554ba3abd55e0cf3761f08d", "bytes": 3537, "status": "derived-projection", "digest_scope": "included public file bytes", "byte_identical": false, "original_signature_authenticates_projection": false, "projection_artifact_id": "eza-001/linux-experimental-evidence-001-public.2/artifact/projection/a791c4ac3b8fdd823e82107f3b53aace610adc6273740da9ba6d1bfb77884f77", "transformation_inventory_path": "PROJECTION-INVENTORY.json" } } }, { "id": "eza-001/linux-experimental-evidence-001-rc.1/claim/same-tick", "statement": "Same-tick mutation: NOT EXECUTED", "verdict": "NOT EXECUTED", "classification": "evaluator conclusion", "signature_coverage": "privacy-derived projection in the owner-signed public.2 package (manifest and release binding Minisign signatures independently verified); original Release 220 signatures do not authenticate projections or interpretation", "requirement_ids": [ "eza-001/r001/specification/R5", "eza-001/r001/specification/R6" ], "observation_ids": [], "source_artifact_ids": [ "eza-001/linux-experimental-evidence-001-rc.1/artifact/c2ef069f1e250791eb86b59046a44aa7456ce480029aafb12f01221feb9834f5" ], "public_artifact_paths": { "eza-001/linux-experimental-evidence-001-rc.1/artifact/c2ef069f1e250791eb86b59046a44aa7456ce480029aafb12f01221feb9834f5": { "path": "historical/original-release/CLAIM-BOUNDARIES.txt", "sha256": "6f6eaa008c95d32c2e9da0bcb46be5ad2fa4293d6554ba3abd55e0cf3761f08d", "bytes": 3537, "status": "derived-projection", "digest_scope": "included public file bytes", "byte_identical": false, "original_signature_authenticates_projection": false, "projection_artifact_id": "eza-001/linux-experimental-evidence-001-public.2/artifact/projection/a791c4ac3b8fdd823e82107f3b53aace610adc6273740da9ba6d1bfb77884f77", "transformation_inventory_path": "PROJECTION-INVENTORY.json" } } } ], "limitations": [ { "id": "eza-001/linux-experimental-evidence-001-rc.1/limitation/trust", "text": "Historical captures trust root, Linux kernel, systemd/journald, installer anchor and capture transport. Hashes and signatures authenticate bytes, not unobserved events.", "status": "INCONCLUSIVE", "classification": "documented limitation" }, { "id": "eza-001/linux-experimental-evidence-001-rc.1/limitation/manual", "text": "Manual four-file denial was owner-reported; two UID 5206 sudo sessions lack stdin code, exact four targets, errno, exit status and output.", "status": "INCONCLUSIVE", "classification": "documented limitation" }, { "id": "eza-001/linux-experimental-evidence-001-rc.1/limitation/scope", "text": "Out-of-scope request used a consumed grant; replay refusal preceded the scope check.", "status": "INCONCLUSIVE", "classification": "documented limitation" }, { "id": "eza-001/linux-experimental-evidence-001-rc.1/limitation/same-tick", "text": "No live same-tick mutation execution record is established; fixture cases are not substitutes.", "status": "NOT EXECUTED", "classification": "documented limitation" }, { "id": "eza-001/linux-experimental-evidence-001-rc.1/limitation/production", "text": "No production certification, universal security, arbitrary filesystem isolation or root/kernel compromise resistance is established.", "status": "NOT ESTABLISHED", "classification": "documented limitation" }, { "id": "eza-001/linux-experimental-evidence-001-rc.1/limitation/implementation", "text": "Linux implementation manifest 8b072a89… differs from R001 rc.9 specification manifest fc44b015…; requirement mappings are a reviewer crosswalk, not byte equivalence or full conformance.", "status": "DISTINCT IDENTITIES", "classification": "subsequent reviewer interpretation" }, { "id": "eza-001/linux-experimental-evidence-001-rc.1/limitation/external-review", "text": "Current and prior agent reviews are saved-byte re-examinations, not independent human/laboratory execution or organizational adoption.", "status": "NOT ESTABLISHED", "classification": "documented limitation" }, { "id": "eza-001/linux-experimental-evidence-001-public.2/limitation/public-subset", "text": "Native wheels and all dependency distributions, original containers and unselected history are omitted. Saved-case consistency is checkable; full runtime/installation reproduction and independent original-container ancestry verification require omitted originals/inputs. Historical pre-signing statement in the frozen package text (retained verbatim there): \"New edition remains unsigned pending owner signing.\" Current state (2026-10-21): MANIFEST.json and RELEASE-BINDING.json carry owner Minisign signatures (key CFC656D308ECD752), independently verified; its identity does not replace the original. Public.2 also projects operational identifiers and omits complete maintenance authentication/replay material.", "status": "PARTIAL EVIDENCE EDITION", "classification": "derived-publication limitation" }, { "id": "eza-001/linux-experimental-evidence-001-public.2/limitation/privacy-projections", "text": "This edition uses explicit opaque aliases for operational machine, host, account, network and boot identifiers. Aliases are public correlation labels, not actual historical identifiers, and do not establish host/key retirement or present operational status. Modified records are derived projections, not byte-identical copies; original Release 220 signatures do not authenticate projected bytes. Full maintenance replay is unavailable from public.2 because current-maintenance.json and associated replay inputs are omitted. The five saved native cases, 22 substantive ledger rows, receipt/event relationships and required native journal MESSAGE payloads remain the intended inspectable scope. No runtime reproduction, new experiment, independent redaction attestation or stronger security result is asserted.", "status": "PRIVACY PROJECTIONS; PACKAGE OWNER-SIGNED (manifest and binding verified); ORIGINAL RELEASE 220 SIGNATURES DO NOT AUTHENTICATE PROJECTIONS", "classification": "derived-publication limitation" }, { "id": "eza-001/linux-experimental-evidence-001-public.2/limitation/maintenance-omissions", "text": "The remaining current-authority ledger/physical-state consistency, checkpoint/witness relationships, selected sudo journal bindings and saved native-case receipt/event checks can be inspected. Complete SSH authentication history, complete maintenance-journal membership and full saved maintenance replay cannot be independently reproduced from public.2. Historical maintenance PASS statements are retained historical assessment statements, not current-public-edition verification claims.", "status": "FULL MAINTENANCE REPLAY UNAVAILABLE", "classification": "derived-publication limitation" } ], "lineage": { "lineage_id": "eza-001/linux-experimental-evidence-001-public.2/lineage", "specification": { "id": "EZA-001", "release": "R001", "candidate": "EZA-001-R001-rc.9", "document_id": "eza-001/r001/specification", "url": "https://eziah.dev/releases/eza-001/r001/specification" }, "source_counts": { "requirements": 16, "experiments": 8, "observations": 6, "claims": 8, "relationships": 23, "verifications": 2, "limitations": 10, "artifacts": 76 }, "edition_members": [ { "zip_member": "EZA-001-LINUX-EXPERIMENTAL-EVIDENCE-001-public.2/IDENTITY.json", "edition_relative_path": "IDENTITY.json", "bytes": 1681, "sha256": "9d2a9c0651ea5500c2665ba14459b9ef689d660d079971bc23b16e4282adf45b" }, { "zip_member": "EZA-001-LINUX-EXPERIMENTAL-EVIDENCE-001-public.2/PROJECTION-INVENTORY.json", "edition_relative_path": "PROJECTION-INVENTORY.json", "bytes": 34367, "sha256": "a6e9cd07e168f8ce5f4f69fe07640c91d49f8f6834b2cb8fc54856d9ae9440b3" }, { "zip_member": "EZA-001-LINUX-EXPERIMENTAL-EVIDENCE-001-public.2/PUBLICATION-LINEAGE.json", "edition_relative_path": "PUBLICATION-LINEAGE.json", "bytes": 247433, "sha256": "4fbfdb22b421753fa79f4830b8a0595e54e533d4a219c042f24c6a9f45c726a5" }, { "zip_member": "EZA-001-LINUX-EXPERIMENTAL-EVIDENCE-001-public.2/RETRIEVAL-RECORDS.json", "edition_relative_path": "RETRIEVAL-RECORDS.json", "bytes": 146028, "sha256": "ce6bd712fd0864aae021d0c6596b17678821cd6f59fd3e38a70210625e5f306b" } ], "historical_identities": { "original_release": { "id": "EZA-001-LINUX-EXPERIMENTAL-EVIDENCE-001-rc.1", "archive_bytes": 180009168, "archive_sha256": "c560375e008991adb26536880b17a48a083ca424226f6f219e87cb18d92e25bb", "manifest_sha256": "ab3602bc570a205537a0ae2e7f379de3c2582bd7a454e43dd35894832aa30b7b", "availability": "private; not published" }, "public1": { "id": "EZA-001-LINUX-EXPERIMENTAL-EVIDENCE-001-public.1", "archive_sha256": "d76188a10e25654bad97069ed71c5fdc8783e6f4d696ddaae9cad83c551eacdf", "manifest_sha256": "c76344408004a35be04d13ff9fa9734d9af4e7270f224b1bc2f5c6f530a76788", "availability": "superseded; not published" } } }, "artifacts": [ { "filename": "EZA-001-LINUX-EXPERIMENTAL-EVIDENCE-001-public.2.zip", "path": "/evidence/eza-001/r001/linux-experimental-evidence-001/artifacts/public.2/EZA-001-LINUX-EXPERIMENTAL-EVIDENCE-001-public.2.zip", "bytes": 1912040, "sha256": "4889b9a31db11a23d33986690d8951eda23be3140caeba9c1f31d356bb960832", "group": "cryptographic-core", "role": "privacy-minimized public evidence edition", "signature_coverage": "bound by signed RELEASE-BINDING.json (filename, bytes, SHA-256); not directly signed" }, { "filename": "MANIFEST.json", "path": "/evidence/eza-001/r001/linux-experimental-evidence-001/artifacts/public.2/MANIFEST.json", "bytes": 51106, "sha256": "4b9bfde72523248863487f11e8bd3e448a92b0d50d81e5dfe40aa2b3fe48fb6c", "group": "cryptographic-core", "role": "payload manifest of the public.2 edition", "signature_coverage": "signed: MANIFEST.json.minisig" }, { "filename": "MANIFEST.json.minisig", "path": "/evidence/eza-001/r001/linux-experimental-evidence-001/artifacts/public.2/MANIFEST.json.minisig", "bytes": 315, "sha256": "59d86447a1b8b427875a064ad0b5c043902b50774cf9ba6f2fa5000de3d5a114", "group": "cryptographic-core", "role": "detached Minisign signature over MANIFEST.json", "signature_coverage": "signature" }, { "filename": "RELEASE-BINDING.json", "path": "/evidence/eza-001/r001/linux-experimental-evidence-001/artifacts/public.2/RELEASE-BINDING.json", "bytes": 1502, "sha256": "f4d820f664fe7d87c500ba77fabbb54ba6516ba53408c06ca38766bd44e6412b", "group": "cryptographic-core", "role": "release binding: exact ZIP and manifest identity", "signature_coverage": "signed: RELEASE-BINDING.json.minisig" }, { "filename": "RELEASE-BINDING.json.minisig", "path": "/evidence/eza-001/r001/linux-experimental-evidence-001/artifacts/public.2/RELEASE-BINDING.json.minisig", "bytes": 322, "sha256": "0752f94431152d53f1fe3092aaf7bc4653b5d81cc2f19bddf4f1eb291f78a8a4", "group": "cryptographic-core", "role": "detached Minisign signature over RELEASE-BINDING.json", "signature_coverage": "signature" }, { "filename": "SHA256SUMS", "path": "/evidence/eza-001/r001/linux-experimental-evidence-001/artifacts/public.2/SHA256SUMS", "bytes": 554, "sha256": "ce15b120321a5deb8004ca387342bbd2f0354f2d1c2dfc076706cd99ce65421d", "group": "immutable-companion", "role": "checksum list for the publication folder", "signature_coverage": "unsigned companion; also lists OWNER-SIGNING-HANDOFF.txt, which is intentionally not published" }, { "filename": "VERIFY-COMMAND.txt", "path": "/evidence/eza-001/r001/linux-experimental-evidence-001/artifacts/public.2/VERIFY-COMMAND.txt", "bytes": 419, "sha256": "d6e9e7d14a97590d8ac78ff9a3c898cb8c21418b64202960a8e93c04de5e8689", "group": "immutable-companion", "role": "exact offline verification command", "signature_coverage": "unsigned companion" }, { "filename": "verify_public_edition.py", "path": "/evidence/eza-001/r001/linux-experimental-evidence-001/artifacts/public.2/verify_public_edition.py", "bytes": 36695, "sha256": "4976e99b2a897d52cfe9687d564c40e29543035f13d75fea3e716b3507822d4b", "group": "immutable-companion", "role": "offline standard-library saved-evidence verifier", "signature_coverage": "unsigned companion; read before running" } ], "unpublished_handoff_files": [ "OWNER-SIGNING-HANDOFF.txt" ], "signing": { "scheme": "minisign", "key_id": "CFC656D308ECD752", "public_key": "RWRS1+wI01bGz7h6vYSR4m9shqB2/q8FiIpbY8tSgDQnhNZ4qzp+0mSA", "public_key_url": "/integration/eza-001-developer-trial-001/keys/eziah-release-2026-01.pub", "public_key_file_sha256": "df3a3e0aa9f6368906f7004083e8abab76e8cb98b603ab0e9146e68abbdf0311", "signatures": [ { "signed_file": "MANIFEST.json", "signature_file": "MANIFEST.json.minisig", "trusted_comment": "EZA-001 Linux Experimental Evidence public.2 manifest" }, { "signed_file": "RELEASE-BINDING.json", "signature_file": "RELEASE-BINDING.json.minisig", "trusted_comment": "EZA-001 Linux Experimental Evidence public.2 release binding" } ], "archive_relationship": "The signed release binding identifies the exact ZIP by filename, size and SHA-256. The signed manifest identifies its exact payload. No direct ZIP signature is claimed." }, "record_kinds": [ { "kind": "signed artifacts", "members": [ "MANIFEST.json", "RELEASE-BINDING.json" ], "meaning": "Owner-signed with key CFC656D308ECD752. The signatures authenticate these exact bytes, and through them the ZIP identity and payload digests. They do not attest that unobserved events happened." }, { "kind": "privacy projections", "meaning": "Some records inside the ZIP are derived projections with opaque aliases for machine, host, account, network and boot identifiers. They are not byte-identical to the private originals, and the original signature does not authenticate them." }, { "kind": "unsigned website summary", "meaning": "This page and its JSON record. They summarise the signed edition and add no signed claims." }, { "kind": "independent review", "meaning": "Earlier reviews were agent re-examinations of saved bytes, not independent human or laboratory execution. The Public.2 verification record checks signatures and bytes only; it is not a new evidence review." } ], "verification_overlay": { "verification_record": "VERIFICATION.json", "signature_verification_record": "SIGNATURE-VERIFICATION.json", "public2_manifest_signature": "VERIFIED", "public2_release_binding_signature": "VERIFIED", "signed_manifest_sha256": "4b9bfde72523248863487f11e8bd3e448a92b0d50d81e5dfe40aa2b3fe48fb6c", "signed_binding_sha256": "f4d820f664fe7d87c500ba77fabbb54ba6516ba53408c06ca38766bd44e6412b", "archive_sha256": "4889b9a31db11a23d33986690d8951eda23be3140caeba9c1f31d356bb960832", "key_id": "CFC656D308ECD752", "historical_text_note": "Frozen UNSIGNED, NOT SIGNED, PENDING and preparation-era not-published labels are retained verbatim. This separate unsigned verification record establishes current signature verification only. Prior independent acceptance is an input from the owner directive and is not repeated here. Hosting, live delivery verification and registry retrieval were completed separately at publication; indexing is a separate step. Signing public.2 bytes does not turn a historical review or interpretation into a witnessed observation.", "hosted_delivery": "VERIFIED — live served bytes, SHA-256 and both signatures checked 2026-10-21", "execution_authorized": false, "historical_execution_newly_attested": false }, "verify_command": "Run from this publication directory after reviewing the verifier:\npython3 -I -B verify_public_edition.py 'EZA-001-LINUX-EXPERIMENTAL-EVIDENCE-001-public.2.zip' --expected-archive '4889b9a31db11a23d33986690d8951eda23be3140caeba9c1f31d356bb960832' --expected-manifest '4b9bfde72523248863487f11e8bd3e448a92b0d50d81e5dfe40aa2b3fe48fb6c'\nOptional private derivation: add --source-public-one /path/to/the/frozen/public.1.zip", "authority_boundary": "Retrieving information about authority confers information, not execution permission. Only the trusted enforcement boundary may establish and enforce permission for a protected action. EVIDENCE IS RETRIEVABLE. PERMISSION IS NOT INFERRED.", "publication": { "state": "PUBLISHED", "published_at": "2026-10-21T19:41:26Z", "hosted_delivery_verification": "PASSED — all eight public files matched recorded sizes and SHA-256; both Minisign signatures verified; approved verifier PASS", "indexing": "NOT SUBMITTED", "record_signature": "This website record is an unsigned reporting record; only MANIFEST.json and RELEASE-BINDING.json are signed." }, "derived_from": { "CANONICAL-PUBLICATION-MAPPING.json": "ef7a30628b2baaedcfc475332c53a0ad2fb874456921884bacd9a77f5f7da947", "VERIFICATION.json": "e50fe3a4f17079aa5c4d62cd0b9b68c9d3cd9b2fc6caee0fd73f380a93dd164f", "SIGNATURE-VERIFICATION.json": "187aa0b31cfb3be9ed20ee4ffe889ea860997c755c0e1860146d4808f0a47568" } }