{"actualHeads":[{"sha256":"5b9010046de6e13296dcc23db6bec9d1fe84326e81252402d9a549b45a2f20eb"}],"actualNonce":null,"actualRecipient":"example:downstream-team","artifacts":[{"applicableProfileCount":0,"artifactKind":"ordinary","digest":{"sha256":"ecd821dbe6f4204c4aad64878643d7954cb8c94abbf8d0b28f9c2bfc272f781e"},"digestPrerequisiteChecks":["completeness-anchor"],"digestStatus":"skipped","head":{"sha256":"5b9010046de6e13296dcc23db6bec9d1fe84326e81252402d9a549b45a2f20eb"},"lifecycleRole":"final","profilePrerequisiteChecks":["completeness-anchor"],"profileStatus":"skipped","statementDigest":{"sha256":"5b9010046de6e13296dcc23db6bec9d1fe84326e81252402d9a549b45a2f20eb"},"subjectName":"customers.public.json"}],"bundleId":"urn:makoto:demo:negative:rewired-step","checks":[{"id":"load-safely","prerequisiteChecks":[],"status":"pass"},{"id":"parse-strictly","prerequisiteChecks":[],"status":"pass"},{"id":"index-payloads","prerequisiteChecks":[],"status":"pass"},{"id":"core-schemas","prerequisiteChecks":[],"status":"pass"},{"id":"signatures","prerequisiteChecks":[],"status":"fail"},{"id":"authorization-thresholds","prerequisiteChecks":[],"status":"fail"},{"id":"metadata-profiles","prerequisiteChecks":[],"status":"pass"},{"id":"authorization","prerequisiteChecks":[],"status":"fail"},{"id":"graph-dependency-artifacts","prerequisiteChecks":[],"status":"pass"},{"id":"graph","prerequisiteChecks":["authorization"],"status":"skipped"},{"id":"roots-and-heads","prerequisiteChecks":["graph"],"status":"skipped"},{"id":"completeness-anchor","prerequisiteChecks":[],"status":"fail"},{"id":"freshness-anchors","prerequisiteChecks":[],"status":"pass"},{"id":"artifact-bytes","prerequisiteChecks":["completeness-anchor"],"status":"skipped"},{"id":"artifact-profiles","prerequisiteChecks":["completeness-anchor"],"status":"skipped"},{"id":"decision","prerequisiteChecks":[],"status":"pass"}],"coreCatalogDigest":{"sha256":"b68cb2cae64cfcd2a5021a725505ccbaa80dfaa053322ce276af9c6650860304"},"datasetEntries":[],"decision":"deny","errors":[{"causedByCheck":"signatures","code":"E_SIGNATURE_INVALID","context":{"keyid":"sha256:8cef065b7af83669150b7d32704d3d3e75c3e9aee0d4f6740544c68e81b377aa","statementDigest":{"sha256":"5b9010046de6e13296dcc23db6bec9d1fe84326e81252402d9a549b45a2f20eb"}},"message":"signature verification failed","step":5},{"causedByCheck":"authorization-thresholds","code":"E_SIGNER_UNAUTHORIZED","context":{"statementDigest":{"sha256":"5b9010046de6e13296dcc23db6bec9d1fe84326e81252402d9a549b45a2f20eb"}},"message":"no matching policy rule met its signature threshold","step":6},{"causedByCheck":"completeness-anchor","code":"E_MANIFEST_SET","context":{"artifactDigest":{"sha256":"ecd821dbe6f4204c4aad64878643d7954cb8c94abbf8d0b28f9c2bfc272f781e"},"bundleId":"urn:makoto:demo:negative:rewired-step","head":{"sha256":"5b9010046de6e13296dcc23db6bec9d1fe84326e81252402d9a549b45a2f20eb"},"subjectName":"customers.public.json"},"message":"final artifact is not an exact terminal subject of its declared head","step":11},{"causedByCheck":"completeness-anchor","code":"E_MANIFEST_SET","context":{"bundleId":"urn:makoto:demo:negative:rewired-step"},"message":"signed manifest sets do not equal the verified graph and bundle index","step":11}],"evaluationTime":"2026-09-16T16:00:00Z","expectedArtifacts":[{"digest":{"sha256":"ecd821dbe6f4204c4aad64878643d7954cb8c94abbf8d0b28f9c2bfc272f781e"},"head":{"sha256":"5b9010046de6e13296dcc23db6bec9d1fe84326e81252402d9a549b45a2f20eb"},"subjectName":"customers.public.json"}],"expectedHeads":[{"sha256":"5b9010046de6e13296dcc23db6bec9d1fe84326e81252402d9a549b45a2f20eb"}],"expectedManifestDigest":{"sha256":"c60982b592479600d4f8204c35b3215ebad80e7d7527f69bdea43e5eda4ecb7f"},"expectedNonce":null,"expectedRecipient":null,"handoff":{"authorization":"pass","completeness":"fail","freshnessChecks":{"expected-artifacts":"pass","expected-heads":"pass","expected-manifest":"pass","max-age":"not_checked","nonce":"not_checked"},"freshnessMethod":"multiple","freshnessStatus":"pass","signatures":[{"cryptographic":"pass","keyKnown":true,"keyid":"sha256:d016df3d83373617c06b5e1d6359caa06eeba8b3af2c7077234f109f2194516c"}]},"manifestDigest":{"sha256":"c60982b592479600d4f8204c35b3215ebad80e7d7527f69bdea43e5eda4ecb7f"},"nonceStatus":"not_checked","policyDigest":{"sha256":"614eb137303bcea78f25ded2e332a10649358484f9582984c1730ddc106ebfcd"},"policyDigestEncoding":"exact-input-bytes","primaryError":"E_SIGNATURE_INVALID","profiles":[{"closureDigest":{"sha256":"8c13490145ccdfe6958163ef0c578afb57da07772c2071932f8a4d98870e776e"},"critical":true,"digest":{"sha256":"31934d2cf8fa7b5af2f8e4cf591d96278c4f59ddb6bb190afccb93701244f9eb"},"id":"https://schemas.example.internal/makoto/public-transform-metadata-v1.schema.json","mediaType":null,"prerequisiteChecks":[],"requiredByAuthorizationRuleIds":[],"requiredByManifest":false,"requiredByPolicy":false,"resolution":"pass","statementDigest":{"sha256":"5b9010046de6e13296dcc23db6bec9d1fe84326e81252402d9a549b45a2f20eb"},"subjectName":null,"target":"predicate","validation":"pass"}],"quarantinedStatements":[],"recipientStatus":"not_checked","reportTruncated":false,"reportVersion":"0.2","roots":[{"sha256":"56b7be4394fe09c62ec7a3d5763cecc251e9696f267f35b2acc717b0d170a27a"}],"statements":[{"authorization":"pass","authorizationPrerequisiteChecks":[],"authorizingRuleIds":["urn:makoto:demo:rule:origin"],"candidateRuleIds":["urn:makoto:demo:rule:origin"],"coreSchema":"pass","coreSchemaPrerequisiteChecks":[],"digest":{"sha256":"56b7be4394fe09c62ec7a3d5763cecc251e9696f267f35b2acc717b0d170a27a"},"eventId":"urn:uuid:11111111-1111-4111-8111-111111111111","graph":"pass","graphPrerequisiteChecks":[],"predicateType":"https://usemakoto.dev/predicate/v0.2/origin","signatures":[{"cryptographic":"pass","keyKnown":true,"keyid":"sha256:fd110d301d2f077de1414b8f99f441b1403fab207b2052fbd2c065e4ee8e7dc2"}]},{"authorization":"fail","authorizationPrerequisiteChecks":[],"authorizingRuleIds":[],"candidateRuleIds":[],"coreSchema":"pass","coreSchemaPrerequisiteChecks":[],"digest":{"sha256":"5b9010046de6e13296dcc23db6bec9d1fe84326e81252402d9a549b45a2f20eb"},"eventId":"urn:uuid:33333333-3333-4333-8333-333333333333","graph":"skipped","graphPrerequisiteChecks":["authorization"],"predicateType":"https://usemakoto.dev/predicate/v0.2/transform","signatures":[{"cryptographic":"fail","keyKnown":true,"keyid":"sha256:8cef065b7af83669150b7d32704d3d3e75c3e9aee0d4f6740544c68e81b377aa"}]}],"summary":{"artifactsChecked":0,"artifactsDeclared":1,"heads":1,"historicalMaterialsChecked":0,"historicalMaterialsDeclared":0,"manifestSignaturesAuthorized":1,"manifestSignaturesRequired":1,"manifestSignaturesValid":1,"profilesDeclared":1,"profilesValidated":1,"quarantinedStatementsTotal":0,"roots":1,"signaturesChecked":3,"signaturesTotal":3,"signaturesValid":2,"statementsAuthorized":1,"statementsReachable":0,"statementsTotal":2,"statementsValid":2},"tool":{"name":"makoto","version":"0.3.0a0"},"unindexedEnvelopes":[],"unreferencedFiles":[],"warnings":[]}