{
  "schema": "futhorc-policy-audit-results/1",
  "release": "v2026.08.15.18",
  "generated_at": "2026-08-16T02:15:21.096735+00:00",
  "authority": "actual_local_python_unittest_plus_independent_php_verification",
  "truth_boundary": "Passing audit tests establish deterministic checked-in hash-chain and policy-decision reproducibility only. SHA-256 chaining without authenticated signing/key custody is not authorship, non-repudiation, peer authentication, network authenticity, domain control, or real-world authorization.",
  "environment": {
    "python": "3.13.5",
    "implementation": "CPython",
    "platform": "Linux-6.18.35-x86_64-with-glibc2.41",
    "php": "8.4.23"
  },
  "artifact_sha256": {
    "assets/data/futhorc-policy-receipt-schema.json": "54c79977fa4b10f46c01dc7ece0abaab31dc4d347d54b140729c3e7292d046b4",
    "assets/data/fixtures/futhorc-policy-audit-cases.json": "dc961b029404cd5bfcd1c2c14f442a8fac547e1bd9894e012a4ab78d6ba43fec",
    "assets/data/futhorc-policy-audit-chain.json": "b36cd67557cb088d6db403be834792e857bc45fad76dd25c7241794fb7e144b5",
    "tools/futhorc_policy_audit.py": "18f250f862e3c31f538a8d37b96bb0c8b9d4a3b6015a8329586710cd0af1c24d",
    "tools/verify_futhorc_policy_audit.php": "1e8304e9857f78d368a4ab5f03b56ac13bd9b811e48983e1182ff2dcd7053a39",
    "tests/test_futhorc_policy_audit.py": "3700deea902a186e9bb7bdaafc3fb6a693f57afe17f78b076ea8f6522f6f5949"
  },
  "deterministic_summary": {
    "tests_run": 15,
    "failures": 0,
    "errors": 0,
    "successful": true,
    "receipt_count": 8,
    "negative_case_classes": 9,
    "python_chain_digest_sha256": "e54e800dead045612a3eeeb4febfd8eee74846b4924ace64d1763790ff3d3646",
    "php_verified": true,
    "php_chain_digest_sha256": "e54e800dead045612a3eeeb4febfd8eee74846b4924ace64d1763790ff3d3646",
    "cross_runtime_digest_equal": true
  },
  "deterministic_digest_sha256": "df2a42dec048d93d2094971e6808e51e1d9201fad662e5e8e1ee8a62fdae168e",
  "negative_case_classes": [
    "mutation",
    "reordering",
    "duplicate_receipt_id",
    "broken_previous_digest",
    "policy_digest_mismatch",
    "namespace_mismatch",
    "decision_not_reproducible",
    "session_transcript_mismatch",
    "chain_digest_mismatch"
  ],
  "php_verifier_output": {
    "pass": true,
    "authority": "independent_local_php_verifier",
    "receipt_count": 8,
    "chain_digest_sha256": "e54e800dead045612a3eeeb4febfd8eee74846b4924ace64d1763790ff3d3646",
    "policy_digest_sha256": "e05829b8f05ec72468b177229e5016cbca0f25dcd3c2ce74d53ca275593ad2ab",
    "receipt_digests_sha256": "e1c4419f43e8afd10c1f0dc6f3614fc508fdcef4ccbaefe60e46c7618bf2e5b5",
    "truth_boundary": "Cross-runtime digest parity is local interoperability/integrity evidence only; it is not signing, authorship, peer authentication, or real-world authorization."
  },
  "failed_tests": [],
  "error_tests": []
}