{
  "kind": "Eziah-post-signing-verification-checkpoint/1",
  "release_id": "EZA-001-R001",
  "candidate_id": "EZA-001-R001-rc.9",
  "status": "SECOND_MAC_SIGNATURE_AND_INVENTORY_VERIFICATION_PASS_WEBSITE_ACCEPTANCE_PENDING",
  "manifest_sha256": "fc44b015cbf152aef4e4cc25bc0bdc6d58f6763a0af871b81795de04e32f8f3e",
  "candidate_archive": {
    "file": "EZA-001-R001-rc.9.zip",
    "bytes": 15496913,
    "sha256": "3062213046b50db71ddbf13160a9711a25b2e8b1dd882a3bf35e007958b22e39"
  },
  "publication_handoff": {
    "file": "EZA-001-R001-Publication-001.zip",
    "sha256": "d90e4af274cee169a06bbdde9b0a1a2d1ee1459bb6540d134089de0a7550f236"
  },
  "signer": {
    "key_id": "CFC656D308ECD752",
    "public_key_base64": "RWRS1+wI01bGz7h6vYSR4m9shqB2/q8FiIpbY8tSgDQnhNZ4qzp+0mSA",
    "signature_sha256": "bc6e7808a6e2cfc9fecfa790d6e69bed85ff5712015d892a0e667004a2d6144e"
  },
  "evidence_source": "Owner-pasted Terminal output in this conversation; not externally attested execution or a complete raw session export.",
  "environment": {
    "host_from_prompt": "Montrels-MacBook-Air",
    "account_from_prompt": "montrelhutto",
    "minisign": "0.12",
    "python": "3.9.6",
    "os_version": "NOT_CAPTURED",
    "architecture": "Homebrew arm64 bottle shown in owner-supplied install log; no separate uname capture"
  },
  "input_directory": "/Users/montrelhutto/Desktop/EZA-001-R001-Publication-001",
  "output_candidate_directory": "/Users/montrelhutto/EZA-R001-Clean-Check-001/EZA-001-R001-rc.9",
  "verification": {
    "listed_handoff_checksums": "PASS",
    "listed_handoff_files": 10,
    "manifest_signature": "PASS",
    "trusted_comment_signature": "PASS",
    "manifest_pin": "PASS",
    "archive_file_inventory": "PASS_EXACT_125",
    "extracted_file_inventory": "PASS_EXACT_125",
    "candidate_code_executed": false,
    "behavior_suite_rerun": false
  },
  "bootstrap_trust": "Trusted local Minisign and Python; public key pinned in supplied command from owner conversation. No private key needed for verification.",
  "preceding_attempts": [
    {
      "result": "STOP_BEFORE_VERIFICATION",
      "reason": "Expected Downloads folder absent; actual Desktop folder established by owner pwd."
    },
    {
      "result": "STOP_AT_CHECKSUM_GATE",
      "reason": "Inner release ZIP absent from publication folder; other listed checksums matched. Signature and Python inventory stages did not run."
    },
    {
      "repair": "Exact candidate ZIP supplied separately and moved from Desktop into publication folder; no candidate rebuild, manifest change or re-signing."
    }
  ],
  "operator_help": "Assistant provided commands and folder-placement guidance; owner performed installation, file placement and verification manually.",
  "canonicalized_terminal_result_excerpt": "EZA-001-R001-rc.9.zip: OK\nHANDOFF-VALIDATION.json: OK\nMANIFEST.json: OK\nMANIFEST.json.minisig: OK\nRELEASE-ACCEPTANCE-PREPARED.json: OK\nSIGNATURE-VERIFICATION.json: OK\nVERIFY-PUBLICATION.md: OK\nevidence/EZA-001-R001-rc.9-Review-Assessment.md: OK\nevidence/EZA-001-R001-rc.9-Review-Reconciliation.zip: OK\neziah-release-2026-01.pub: OK\n\nSignature and comment signature verified\nTrusted comment: Eziah EZA-001 R001; candidate EZA-001-R001-rc.9; MANIFEST.json\nPASS: signed manifest and all 125 archived/extracted candidate files match.\nCandidate: /Users/montrelhutto/EZA-R001-Clean-Check-001/EZA-001-R001-rc.9\nNo candidate code executed; no behavior suite rerun.\n",
  "scope_limits": [
    "Separate-Mac fresh-directory verification, not proof of a newly installed or uncompromised machine.",
    "Handoff checksums checked listed entries only; no claim of exact outer-folder inventory.",
    "Signature covers manifest and trusted comment; external metadata remains unsigned.",
    "No behavioral score added. Existing independent review qualifications remain in force."
  ],
  "review_verdict": "REQUIRED_ENFORCEMENT_AND_REPRODUCTION_GATES_PASS_WITH_EXPLICIT_WRAPPER_EXCEPTION",
  "original_review_wrapper_gate": "FAIL_PRESERVED_WITH_EXPLICIT_NARROW_EXCEPTION",
  "pending": [
    "Eziah.dev source inspection, R001 import, wiring corrections and website acceptance.",
    "Public signer key distributed through independently authenticated owner channel.",
    "Separate private-key backup and recovery confirmation.",
    "Final external acceptance record and owner publication approval.",
    "Actual hosted-download verification before indexing."
  ],
  "publication_performed": false,
  "checkpoint_signature": "UNSIGNED_EXTERNAL_RECORD",
  "relation_to_prepared_kit": "Adds later owner-reported verification evidence; the original prepared kit and frozen candidate retain their historical statuses."
}