{"actualHeads":[{"sha256":"2177e987c877a726576703926b2ab69caa46a5f9326d1df8ac7d60056cd9c348"}],"actualNonce":null,"actualRecipient":"example:downstream-team","artifacts":[{"applicableProfileCount":0,"artifactKind":"ordinary","digest":{"sha256":"2f4fe11d8b533357fa0fdb890f1a714047393c962d75c8dd8cbb009e01fbd9f4"},"digestPrerequisiteChecks":["completeness-anchor"],"digestStatus":"skipped","head":{"sha256":"2177e987c877a726576703926b2ab69caa46a5f9326d1df8ac7d60056cd9c348"},"lifecycleRole":"final","profilePrerequisiteChecks":["completeness-anchor"],"profileStatus":"skipped","statementDigest":{"sha256":"2177e987c877a726576703926b2ab69caa46a5f9326d1df8ac7d60056cd9c348"},"subjectName":"customers.public.json"}],"bundleId":"urn:makoto:demo:negative:rewired-step","checks":[{"id":"load-safely","prerequisiteChecks":[],"status":"pass"},{"id":"parse-strictly","prerequisiteChecks":[],"status":"pass"},{"id":"index-payloads","prerequisiteChecks":[],"status":"pass"},{"id":"core-schemas","prerequisiteChecks":[],"status":"pass"},{"id":"signatures","prerequisiteChecks":[],"status":"fail"},{"id":"authorization-thresholds","prerequisiteChecks":[],"status":"fail"},{"id":"metadata-profiles","prerequisiteChecks":[],"status":"pass"},{"id":"authorization","prerequisiteChecks":[],"status":"fail"},{"id":"graph-dependency-artifacts","prerequisiteChecks":[],"status":"pass"},{"id":"graph","prerequisiteChecks":["authorization"],"status":"skipped"},{"id":"roots-and-heads","prerequisiteChecks":["graph"],"status":"skipped"},{"id":"completeness-anchor","prerequisiteChecks":[],"status":"fail"},{"id":"freshness-anchors","prerequisiteChecks":[],"status":"pass"},{"id":"artifact-bytes","prerequisiteChecks":["completeness-anchor"],"status":"skipped"},{"id":"artifact-profiles","prerequisiteChecks":["completeness-anchor"],"status":"skipped"},{"id":"decision","prerequisiteChecks":[],"status":"pass"}],"coreCatalogDigest":{"sha256":"298f55040022b6fe7c71e7a37d6ec4a75317d1c0b52a679dcca744cb4a3eaaf3"},"datasetEntries":[],"decision":"deny","errors":[{"causedByCheck":"signatures","code":"E_SIGNATURE_INVALID","context":{"keyid":"sha256:8cef065b7af83669150b7d32704d3d3e75c3e9aee0d4f6740544c68e81b377aa","statementDigest":{"sha256":"2177e987c877a726576703926b2ab69caa46a5f9326d1df8ac7d60056cd9c348"}},"message":"signature verification failed","step":5},{"causedByCheck":"authorization-thresholds","code":"E_SIGNER_UNAUTHORIZED","context":{"statementDigest":{"sha256":"2177e987c877a726576703926b2ab69caa46a5f9326d1df8ac7d60056cd9c348"}},"message":"no matching policy rule met its signature threshold","step":6},{"causedByCheck":"completeness-anchor","code":"E_MANIFEST_SET","context":{"artifactDigest":{"sha256":"2f4fe11d8b533357fa0fdb890f1a714047393c962d75c8dd8cbb009e01fbd9f4"},"bundleId":"urn:makoto:demo:negative:rewired-step","head":{"sha256":"2177e987c877a726576703926b2ab69caa46a5f9326d1df8ac7d60056cd9c348"},"subjectName":"customers.public.json"},"message":"final artifact is not an exact terminal subject of its declared head","step":11},{"causedByCheck":"completeness-anchor","code":"E_MANIFEST_SET","context":{"bundleId":"urn:makoto:demo:negative:rewired-step"},"message":"signed manifest sets do not equal the verified graph and bundle index","step":11}],"evaluationTime":"2026-09-16T16:00:00Z","expectedArtifacts":[{"digest":{"sha256":"2f4fe11d8b533357fa0fdb890f1a714047393c962d75c8dd8cbb009e01fbd9f4"},"head":{"sha256":"2177e987c877a726576703926b2ab69caa46a5f9326d1df8ac7d60056cd9c348"},"subjectName":"customers.public.json"}],"expectedHeads":[{"sha256":"2177e987c877a726576703926b2ab69caa46a5f9326d1df8ac7d60056cd9c348"}],"expectedManifestDigest":{"sha256":"53af716cac4f889c569b687927f627a537311446521c51603077007b2581019b"},"expectedNonce":null,"expectedRecipient":null,"handoff":{"authorization":"pass","completeness":"fail","freshnessChecks":{"expected-artifacts":"pass","expected-heads":"pass","expected-manifest":"pass","max-age":"not_checked","nonce":"not_checked"},"freshnessMethod":"multiple","freshnessStatus":"pass","signatures":[{"cryptographic":"pass","keyKnown":true,"keyid":"sha256:d016df3d83373617c06b5e1d6359caa06eeba8b3af2c7077234f109f2194516c"}]},"manifestDigest":{"sha256":"53af716cac4f889c569b687927f627a537311446521c51603077007b2581019b"},"nonceStatus":"not_checked","policyDigest":{"sha256":"614eb137303bcea78f25ded2e332a10649358484f9582984c1730ddc106ebfcd"},"policyDigestEncoding":"exact-input-bytes","primaryError":"E_SIGNATURE_INVALID","profiles":[{"closureDigest":{"sha256":"8c13490145ccdfe6958163ef0c578afb57da07772c2071932f8a4d98870e776e"},"critical":true,"digest":{"sha256":"31934d2cf8fa7b5af2f8e4cf591d96278c4f59ddb6bb190afccb93701244f9eb"},"id":"https://schemas.example.internal/makoto/public-transform-metadata-v1.schema.json","mediaType":null,"prerequisiteChecks":[],"requiredByAuthorizationRuleIds":[],"requiredByManifest":false,"requiredByPolicy":false,"resolution":"pass","statementDigest":{"sha256":"2177e987c877a726576703926b2ab69caa46a5f9326d1df8ac7d60056cd9c348"},"subjectName":null,"target":"predicate","validation":"pass"}],"quarantinedStatements":[],"recipientStatus":"not_checked","reportTruncated":false,"reportVersion":"0.2","roots":[{"sha256":"56b7be4394fe09c62ec7a3d5763cecc251e9696f267f35b2acc717b0d170a27a"}],"statements":[{"authorization":"fail","authorizationPrerequisiteChecks":[],"authorizingRuleIds":[],"candidateRuleIds":[],"coreSchema":"pass","coreSchemaPrerequisiteChecks":[],"digest":{"sha256":"2177e987c877a726576703926b2ab69caa46a5f9326d1df8ac7d60056cd9c348"},"eventId":"urn:uuid:33333333-3333-4333-8333-333333333333","graph":"skipped","graphPrerequisiteChecks":["authorization"],"predicateType":"https://usemakoto.dev/predicate/v0.2/transform","signatures":[{"cryptographic":"fail","keyKnown":true,"keyid":"sha256:8cef065b7af83669150b7d32704d3d3e75c3e9aee0d4f6740544c68e81b377aa"}]},{"authorization":"pass","authorizationPrerequisiteChecks":[],"authorizingRuleIds":["urn:makoto:demo:rule:origin"],"candidateRuleIds":["urn:makoto:demo:rule:origin"],"coreSchema":"pass","coreSchemaPrerequisiteChecks":[],"digest":{"sha256":"56b7be4394fe09c62ec7a3d5763cecc251e9696f267f35b2acc717b0d170a27a"},"eventId":"urn:uuid:11111111-1111-4111-8111-111111111111","graph":"pass","graphPrerequisiteChecks":[],"predicateType":"https://usemakoto.dev/predicate/v0.2/origin","signatures":[{"cryptographic":"pass","keyKnown":true,"keyid":"sha256:fd110d301d2f077de1414b8f99f441b1403fab207b2052fbd2c065e4ee8e7dc2"}]}],"summary":{"artifactsChecked":0,"artifactsDeclared":1,"heads":1,"historicalMaterialsChecked":0,"historicalMaterialsDeclared":0,"manifestSignaturesAuthorized":1,"manifestSignaturesRequired":1,"manifestSignaturesValid":1,"profilesDeclared":1,"profilesValidated":1,"quarantinedStatementsTotal":0,"roots":1,"signaturesChecked":3,"signaturesTotal":3,"signaturesValid":2,"statementsAuthorized":1,"statementsReachable":0,"statementsTotal":2,"statementsValid":2},"tool":{"name":"makoto","version":"0.2.0a0"},"unindexedEnvelopes":[],"unreferencedFiles":[],"warnings":[]}