{
  "schema_version": "assurance-record/v1",
  "signature": {
    "algorithm": "Ed25519",
    "key_id": "assurance-ledger-demo-signer-ed25519-2026-08",
    "value_base64": "LssOcNkxicKG/X4a9EmPfQgQiTjvG2QcWrIWEUvvJz52EMYPZpKX75gVZURHlHT6RQqs9IXQpVgHwc8yfrbkBA=="
  },
  "statement": {
    "record_id": "skimspeak-partner-demo-2026-08-22",
    "record_type": "illustrative_assurance_record",
    "notice": "DEMONSTRATION ONLY — SELF-ASSESSMENT — this record shows the Assurance Ledger product and is not an issued independent assessment of SkimSpeak.",
    "issued_at": "2026-08-22T21:45:00-07:00",
    "valid_until": "2026-11-20T21:45:00-08:00",
    "issuer": {
      "name": "Assurance Ledger Demonstration Signer",
      "role": "publisher-controlled demonstration signer",
      "independence": "none; this is an illustrative self-assessment"
    },
    "assessment_mode": "illustrative_self_assessment",
    "distribution": {
      "public_record": "Public technical record containing publisher-signed factual findings only.",
      "practitioner_report": "Not included in this demonstration; any future practitioner report would be separately restricted by its engagement terms.",
      "restriction": "No firm branding, independent-audit language, or professional opinion is represented or authorized."
    },
    "subject": {
      "product": "SkimSpeak demonstration",
      "release": "partner-demo-2026-08-22",
      "source": {
        "status": "not_evaluated_for_demo_artifact"
      },
      "build": {
        "status": "not_evaluated_for_demo_artifact"
      },
      "artifact": {
        "url": "http://localhost:3000/api/assurance/demo/artifacts/48450e4c4472f8e870e955a544acb281085ca4b12f4c3f5603bb1214303b39ca",
        "filename": "SkimSpeak-assurance-demonstration.txt",
        "media_type": "text/plain; charset=utf-8",
        "bytes": 236,
        "sha256": "48450e4c4472f8e870e955a544acb281085ca4b12f4c3f5603bb1214303b39ca"
      }
    },
    "access_receipt": {
      "adapter": "superuser_reference",
      "authorization": "publisher-authorized private inspection",
      "data_boundary": "source, tests, logs, prompts, and private traces remain inside the audit room",
      "future_adapters": [
        "temporary_read_only_github_app",
        "customer_run_audit_skill",
        "independent_auditor_ephemeral_workspace"
      ]
    },
    "public_evidence_root": {
      "algorithm": "sha256",
      "value": "48450e4c4472f8e870e955a544acb281085ca4b12f4c3f5603bb1214303b39ca",
      "meaning": "single public evidence leaf: the exact demonstration artifact bytes"
    },
    "claims": [
      {
        "id": "IDENTITY-01",
        "category": "artifact identity",
        "title": "The file served now is the file named by this record",
        "statement": "At verification time, the bytes returned by the absolute endpoint named in this publisher-signed demonstration record have the exact declared byte length and SHA-256 digest.",
        "criticality": "required",
        "status_at_issue": "green",
        "evidence_grade": "Vendor attested",
        "publicly_rerunnable": true,
        "checked_at": "2026-08-22T21:45:00-07:00",
        "valid_until": "2026-11-20T21:45:00-08:00",
        "predicate": {
          "rule": "served_bytes.length == 236 AND sha256(served_bytes) == declared_sha256",
          "result": "pass"
        },
        "evidence": [
          {
            "id": "endpoint-byte-check",
            "kind": "deterministic_verifier",
            "grade": "public",
            "summary": "The open verifier fetches the endpoint and hashes the response locally.",
            "commitment": "sha256:48450e4c4472f8e870e955a544acb281085ca4b12f4c3f5603bb1214303b39ca"
          }
        ],
        "reliances": [
          {
            "id": "REL-27",
            "statement": "The verifier received the demonstration signer public key through a trustworthy channel and has not been given a substituted verifier.",
            "mitigation": "Pin the public key in open verifier code and distribute it out of band."
          },
          {
            "id": "REL-08",
            "statement": "The verifier's network view is representative of the artifact offered to intended recipients.",
            "mitigation": "Use HTTPS plus independent monitors from multiple networks to detect targeted equivocation."
          }
        ],
        "exclusions": [
          "No claim is made about installation, execution, or files on a recipient's computer."
        ],
        "freshness_triggers": [
          "artifact endpoint bytes change",
          "signer key is revoked",
          "record expires"
        ]
      },
      {
        "id": "BUILD-01",
        "category": "provenance",
        "title": "The assessed source was bound to the named artifact",
        "statement": "The assessed private source commitment flowed through a declared provenance-producing build to the exact artifact digest in this record.",
        "criticality": "required",
        "status_at_issue": "gray",
        "evidence_grade": "Stated reliance",
        "publicly_rerunnable": false,
        "checked_at": "2026-08-22T21:45:00-07:00",
        "valid_until": "2026-11-20T21:45:00-08:00",
        "predicate": {
          "rule": "observed_source_commit == declared_commit AND build_output_sha256 == declared_sha256",
          "result": "not_evaluated"
        },
        "evidence": [
          {
            "id": "missing-build-provenance",
            "kind": "not_evaluated",
            "grade": "Stated reliance",
            "summary": "No source-to-artifact provenance was issued for this in-memory text demonstration. A real application release must supply it."
          }
        ],
        "reliances": [
          {
            "id": "REL-25",
            "statement": "The publisher supplied the complete source and build configuration needed for the scoped release.",
            "mitigation": "Record repository, workflow, submodule, dependency-lock, and secret-free environment inventories before testing."
          },
          {
            "id": "REL-04",
            "statement": "The isolated builder executed the committed workflow without an undisclosed substitution.",
            "mitigation": "Pin build inputs and retain signed provenance; use a hardened hosted builder for a production assessment."
          }
        ],
        "exclusions": [
          "This demonstration artifact is not the SkimSpeak application binary.",
          "The illustrative record is not an issued third-party build attestation."
        ],
        "freshness_triggers": [
          "source commitment changes",
          "workflow or dependency lock changes",
          "served artifact changes"
        ]
      },
      {
        "id": "CONSENT-01",
        "category": "user control",
        "title": "Summarization requires an explicit user action",
        "statement": "For the declared desktop interaction paths, provider-bound summarization begins only after the user invokes the configured shortcut and accepts the applicable provider disclosure.",
        "criticality": "required",
        "status_at_issue": "gray",
        "evidence_grade": "Stated reliance",
        "publicly_rerunnable": false,
        "checked_at": "2026-08-22T21:45:00-07:00",
        "valid_until": "2026-11-20T21:45:00-08:00",
        "predicate": {
          "rule": "all observed provider requests have a prior shortcut event and valid disclosure state",
          "result": "not_evaluated"
        },
        "evidence": [
          {
            "id": "consent-state-trace",
            "kind": "not_evaluated",
            "grade": "Stated reliance",
            "summary": "The production behavioral trace and its commitment have not been issued for this demonstration."
          }
        ],
        "reliances": [
          {
            "id": "REL-12",
            "statement": "The declared interaction paths cover the release paths represented by this claim.",
            "mitigation": "Publish the path inventory and list excluded extensions, debug modes, and future features."
          }
        ],
        "exclusions": [
          "No universal claim is made about modified builds, developer tooling, or future interaction paths."
        ],
        "freshness_triggers": [
          "shortcut handling changes",
          "provider disclosure changes",
          "network client changes"
        ]
      },
      {
        "id": "VERBATIM-01",
        "category": "privacy",
        "title": "Verbatim mode does not call a summarization provider",
        "statement": "Across a committed verbatim-mode test corpus and declared network boundary, a deterministic egress monitor observes zero summarization-provider requests.",
        "criticality": "required",
        "status_at_issue": "gray",
        "evidence_grade": "Stated reliance",
        "publicly_rerunnable": false,
        "checked_at": "2026-08-22T21:45:00-07:00",
        "valid_until": "2026-11-20T21:45:00-08:00",
        "predicate": {
          "rule": "count(provider_requests where mode == verbatim) == 0 for committed cases",
          "result": "not_evaluated"
        },
        "evidence": [
          {
            "id": "verbatim-egress-log",
            "kind": "not_evaluated",
            "grade": "Stated reliance",
            "summary": "The decision rule is deterministic, but no artifact-bound egress run was issued for this demonstration."
          }
        ],
        "reliances": [
          {
            "id": "REL-15",
            "statement": "The audit environment observed all relevant outbound network paths.",
            "mitigation": "Deny unlisted egress and record traffic at the sandbox boundary."
          }
        ],
        "exclusions": [
          "Observed absence across a committed corpus is not a universal statement about every possible execution on every machine."
        ],
        "freshness_triggers": [
          "verbatim pipeline changes",
          "network destinations change",
          "sandbox policy changes"
        ]
      },
      {
        "id": "REDACTION-01",
        "category": "privacy",
        "title": "Declared sensitive token classes are redacted before provider egress",
        "statement": "For the public synthetic fixtures and declared token classes, the provider-bound payload contains the configured replacement tokens and no original sensitive values.",
        "criticality": "required",
        "status_at_issue": "gray",
        "evidence_grade": "Stated reliance",
        "publicly_rerunnable": false,
        "checked_at": "2026-08-22T21:45:00-07:00",
        "valid_until": "2026-11-20T21:45:00-08:00",
        "predicate": {
          "rule": "for every declared fixture: originals absent AND replacements present in captured provider payload",
          "result": "not_evaluated"
        },
        "evidence": [
          {
            "id": "redaction-fixture-results",
            "kind": "not_evaluated",
            "grade": "Stated reliance",
            "summary": "The rule is deterministic, but no public vector set and artifact-bound payload trace were issued for this demonstration."
          }
        ],
        "reliances": [
          {
            "id": "REL-19",
            "statement": "The public token-class list accurately defines what this claim covers.",
            "mitigation": "Show covered and excluded classes; treat newly supported classes as a freshness trigger."
          }
        ],
        "exclusions": [
          "No claim is made that every possible identifier or contextual inference is removed."
        ],
        "freshness_triggers": [
          "redaction rules change",
          "covered token classes change",
          "payload construction changes"
        ]
      },
      {
        "id": "SEMANTIC-01",
        "category": "quality",
        "title": "Summaries preserve declared facts on the committed evaluation set",
        "statement": "On a precommitted fictional evaluation set, a frozen evaluator profile scores summaries against a published preservation and prohibited-invention rubric.",
        "criticality": "advisory",
        "status_at_issue": "gray",
        "evidence_grade": "Stated reliance",
        "publicly_rerunnable": false,
        "checked_at": "2026-08-22T21:45:00-07:00",
        "valid_until": "2026-09-21T21:45:00-07:00",
        "predicate": {
          "rule": "fact_preservation_rate >= 0.90 AND prohibited_invention_count == 0 on the committed set",
          "result": "not_evaluated"
        },
        "evidence": [
          {
            "id": "frozen-evaluator-run",
            "kind": "not_evaluated",
            "grade": "Stated reliance",
            "summary": "No evaluator run or numeric result is represented by this demonstration record. A production run would treat the model as a measuring instrument, not an oracle."
          }
        ],
        "reliances": [
          {
            "id": "REL-21",
            "statement": "The frozen evaluator and rubric are sufficiently calibrated for this bounded quality measurement.",
            "mitigation": "Publish model, weights, tokenizer, harness, prompt, scorer, runtime, disagreement rate, and human calibration commitments."
          },
          {
            "id": "REL-19",
            "statement": "The committed fictional set is representative of the usage described by the claim.",
            "mitigation": "Publish the sampling method, uncertainty, known failures, and scope limits."
          }
        ],
        "exclusions": [
          "The result is not a universal guarantee that every future summary is correct.",
          "A frozen open model makes the measurement reproducible within its execution profile; it does not make the judgment logically true."
        ],
        "freshness_triggers": [
          "model, tokenizer, prompt, harness, scorer, dataset, or runtime profile changes",
          "summarization pipeline changes",
          "30-day quality evidence window expires"
        ]
      }
    ],
    "declared_non_claims": [
      "No inspection of a downloader's machine, installed files, or running process.",
      "No assurance for future releases or bytes not matching the declared digest.",
      "No universal correctness, security, privacy, or availability guarantee.",
      "No cryptographic verification of a third-party provider's retention or deletion behavior.",
      "No independent assessment is represented by this demonstration record."
    ]
  }
}