{
  "schema": "cbsr/local-release-manifest/v1",
  "version": "0.11.0",
  "generated": "2026-08-20",
  "file_count_excluding_manifest": 723,
  "local_verification": {
    "constraints_sha256": "6970056c0c0b56de1cdc63e21d4cd5fb2ee2e4ca21242d31b2ca628b8ca37a7a",
    "external_evidence": {
      "github_actions_python_3_10_to_3_13": "requires successful remote workflow run",
      "windows_clean_room": "requires successful windows-latest or physical Windows 11 run"
    },
    "generation_passes": 2,
    "implementation": "CPython",
    "package_smoke": {
      "license_inventory": "dist/licenses.json",
      "pip_audit": "passed_no_known_vulnerabilities_live",
      "pip_audit_evidence": "dist/pip-audit.json",
      "python": "3.12.13",
      "reproducible_builds": 2,
      "resolved_runtime": {
        "cbsr-mcp": "0.11.0",
        "mcp": "1.29.0",
        "pydantic": "2.12.5",
        "pydantic-settings": "2.14.2"
      },
      "schema": "cbsr/package-smoke/v1",
      "smoke": {
        "agenticfi_capabilities": [
          "audit_decision",
          "compare_jurisdictions",
          "evaluate_action",
          "get_rule",
          "search_evidence",
          "watch_changes"
        ],
        "comparison_count": 1,
        "decision": "review_required",
        "execution_authorized": false,
        "receipt_valid": true,
        "records": 152,
        "registered_tools": 40,
        "registry_tools": 40,
        "rule_id": "us-pss-reserve_backing-001",
        "search_count": 6,
        "signing_state": "unsigned",
        "version": "0.11.0",
        "watch_due": 9
      },
      "warning_policy": "error",
      "wheel": "cbsr_mcp-0.11.0-py3-none-any.whl",
      "wheel_sha256": "02bfe7589dfb0f3f7e28240be2c79da73cd86134c668015f8258146c60177d4b"
    },
    "platform": "Linux-6.18.35-x86_64-with-glibc2.39",
    "python": "3.12.13",
    "reproducible_artifact_count": 332,
    "schema": "cbsr/verification-summary/v2",
    "source_fingerprint_sha256": "d3193c1c680b3a023455829e005446c54035f7328b69508539e1014fcfc649e9",
    "status": "passed",
    "step_count": 73,
    "steps_completed": [
      "generation pass 1: MCP registry manifest",
      "generation pass 1: analysis",
      "generation pass 1: compose",
      "generation pass 1: substrate",
      "generation pass 1: edge skeletons",
      "generation pass 1: stakeholders",
      "generation pass 1: verification worklist",
      "generation pass 1: legal event ontology",
      "generation pass 1: signal table",
      "generation pass 1: directed corridors",
      "generation pass 1: dataset",
      "generation pass 1: corridor states",
      "generation pass 1: sensitivity",
      "generation pass 1: settlement",
      "generation pass 1: forward view",
      "generation pass 1: forward sensitivity",
      "generation pass 1: API",
      "generation pass 1: pages",
      "generation pass 1: site",
      "generation pass 1: research outputs",
      "generation pass 1: AgenticFi evaluation",
      "generation pass 1: mixed-method research delivery",
      "generation pass 1: governance and public-interest mappings",
      "generation pass 1: formal delivery reports",
      "committed artifact hash gate",
      "generation pass 2: MCP registry manifest",
      "generation pass 2: analysis",
      "generation pass 2: compose",
      "generation pass 2: substrate",
      "generation pass 2: edge skeletons",
      "generation pass 2: stakeholders",
      "generation pass 2: verification worklist",
      "generation pass 2: legal event ontology",
      "generation pass 2: signal table",
      "generation pass 2: directed corridors",
      "generation pass 2: dataset",
      "generation pass 2: corridor states",
      "generation pass 2: sensitivity",
      "generation pass 2: settlement",
      "generation pass 2: forward view",
      "generation pass 2: forward sensitivity",
      "generation pass 2: API",
      "generation pass 2: pages",
      "generation pass 2: site",
      "generation pass 2: research outputs",
      "generation pass 2: AgenticFi evaluation",
      "generation pass 2: mixed-method research delivery",
      "generation pass 2: governance and public-interest mappings",
      "generation pass 2: formal delivery reports",
      "second-pass deterministic hash gate",
      "identifier gate",
      "MCP documentation gate",
      "README count gate",
      "invariants",
      "legacy negative tests",
      "directed corridor gates",
      "directed negative tests",
      "class-rule proof",
      "migration no-op",
      "schema cross-check",
      "verification backlog",
      "persisted review metadata",
      "legal event ontology",
      "freshness and AgenticFi tests",
      "research reproduction",
      "AgenticFi scenario, schema, receipt and pilot delivery",
      "quantitative, qualitative, claims, dossier and whitepaper delivery",
      "DPG, SDG, GDC and DPI governance delivery",
      "repository high-confidence secret scan",
      "security workflow and governance evidence delivery",
      "formal transformation and release delivery",
      "CycloneDX SBOM",
      "reproducible package + clean-install + six-tool smoke + pip-audit"
    ],
    "version": "0.11.0"
  },
  "external_platform_evidence": {
    "github_actions_python_3_10_to_3_13": "not established by this local ZIP build",
    "windows_11_clean_room": "not established by this Linux ZIP build",
    "instructions": "docs/validation/PLATFORM_EVIDENCE.md"
  },
  "local_linux_matrix": {
    "status": "passed",
    "evidence": "docs/validation/local-linux-matrix.json",
    "scope": "Python 3.10-3.13 local Linux; not GitHub Actions or Windows",
    "source_fingerprint_sha256": "d3193c1c680b3a023455829e005446c54035f7328b69508539e1014fcfc649e9",
    "wheel_sha256": "02bfe7589dfb0f3f7e28240be2c79da73cd86134c668015f8258146c60177d4b"
  },
  "legal_currentness_certificate": false,
  "independent_reviews": {
    "legal_second_review": "not_completed",
    "security_review": "not_completed",
    "whitepaper_peer_review": "not_completed",
    "qualitative_second_coder": "not_completed"
  }
}