{"actualHeads":[{"sha256":"962be71738a0146642d27c87fba3c7338b0f2bb764b113b16867bb4808b11977"}],"actualNonce":null,"actualRecipient":"example:downstream-team","artifacts":[{"applicableProfileCount":0,"artifactKind":"ordinary","digest":{"sha256":"2f4fe11d8b533357fa0fdb890f1a714047393c962d75c8dd8cbb009e01fbd9f4"},"digestPrerequisiteChecks":["completeness-anchor"],"digestStatus":"skipped","head":{"sha256":"962be71738a0146642d27c87fba3c7338b0f2bb764b113b16867bb4808b11977"},"lifecycleRole":"final","profilePrerequisiteChecks":["completeness-anchor"],"profileStatus":"skipped","statementDigest":{"sha256":"962be71738a0146642d27c87fba3c7338b0f2bb764b113b16867bb4808b11977"},"subjectName":"customers.public.json"}],"bundleId":"urn:makoto:demo:negative:unauthorized-signer","checks":[{"id":"load-safely","prerequisiteChecks":[],"status":"pass"},{"id":"parse-strictly","prerequisiteChecks":[],"status":"pass"},{"id":"index-payloads","prerequisiteChecks":[],"status":"pass"},{"id":"core-schemas","prerequisiteChecks":[],"status":"pass"},{"id":"signatures","prerequisiteChecks":[],"status":"pass"},{"id":"authorization-thresholds","prerequisiteChecks":[],"status":"fail"},{"id":"metadata-profiles","prerequisiteChecks":[],"status":"pass"},{"id":"authorization","prerequisiteChecks":[],"status":"fail"},{"id":"graph-dependency-artifacts","prerequisiteChecks":[],"status":"pass"},{"id":"graph","prerequisiteChecks":["authorization"],"status":"skipped"},{"id":"roots-and-heads","prerequisiteChecks":["graph"],"status":"skipped"},{"id":"completeness-anchor","prerequisiteChecks":[],"status":"fail"},{"id":"freshness-anchors","prerequisiteChecks":[],"status":"pass"},{"id":"artifact-bytes","prerequisiteChecks":["completeness-anchor"],"status":"skipped"},{"id":"artifact-profiles","prerequisiteChecks":["completeness-anchor"],"status":"skipped"},{"id":"decision","prerequisiteChecks":[],"status":"pass"}],"coreCatalogDigest":{"sha256":"298f55040022b6fe7c71e7a37d6ec4a75317d1c0b52a679dcca744cb4a3eaaf3"},"datasetEntries":[],"decision":"deny","errors":[{"causedByCheck":"authorization-thresholds","code":"E_SIGNER_UNAUTHORIZED","context":{"statementDigest":{"sha256":"962be71738a0146642d27c87fba3c7338b0f2bb764b113b16867bb4808b11977"}},"message":"no matching policy rule met its signature threshold","step":6},{"causedByCheck":"completeness-anchor","code":"E_MANIFEST_SET","context":{"artifactDigest":{"sha256":"2f4fe11d8b533357fa0fdb890f1a714047393c962d75c8dd8cbb009e01fbd9f4"},"bundleId":"urn:makoto:demo:negative:unauthorized-signer","head":{"sha256":"962be71738a0146642d27c87fba3c7338b0f2bb764b113b16867bb4808b11977"},"subjectName":"customers.public.json"},"message":"final artifact is not an exact terminal subject of its declared head","step":11},{"causedByCheck":"completeness-anchor","code":"E_MANIFEST_SET","context":{"bundleId":"urn:makoto:demo:negative:unauthorized-signer"},"message":"signed manifest sets do not equal the verified graph and bundle index","step":11}],"evaluationTime":"2026-09-16T16:00:00Z","expectedArtifacts":[{"digest":{"sha256":"2f4fe11d8b533357fa0fdb890f1a714047393c962d75c8dd8cbb009e01fbd9f4"},"head":{"sha256":"962be71738a0146642d27c87fba3c7338b0f2bb764b113b16867bb4808b11977"},"subjectName":"customers.public.json"}],"expectedHeads":[{"sha256":"962be71738a0146642d27c87fba3c7338b0f2bb764b113b16867bb4808b11977"}],"expectedManifestDigest":{"sha256":"362917a88b0f144d29126e0d05a845c2c58864244b1be0c85cff4d23db76b706"},"expectedNonce":null,"expectedRecipient":null,"handoff":{"authorization":"pass","completeness":"fail","freshnessChecks":{"expected-artifacts":"pass","expected-heads":"pass","expected-manifest":"pass","max-age":"not_checked","nonce":"not_checked"},"freshnessMethod":"multiple","freshnessStatus":"pass","signatures":[{"cryptographic":"pass","keyKnown":true,"keyid":"sha256:d016df3d83373617c06b5e1d6359caa06eeba8b3af2c7077234f109f2194516c"}]},"manifestDigest":{"sha256":"362917a88b0f144d29126e0d05a845c2c58864244b1be0c85cff4d23db76b706"},"nonceStatus":"not_checked","policyDigest":{"sha256":"7f20d92fa844586ce71413dfdcb771d9d60d549f1fb8f5e662e84b1db10d568c"},"policyDigestEncoding":"exact-input-bytes","primaryError":"E_SIGNER_UNAUTHORIZED","profiles":[{"closureDigest":{"sha256":"8c13490145ccdfe6958163ef0c578afb57da07772c2071932f8a4d98870e776e"},"critical":true,"digest":{"sha256":"31934d2cf8fa7b5af2f8e4cf591d96278c4f59ddb6bb190afccb93701244f9eb"},"id":"https://schemas.example.internal/makoto/public-transform-metadata-v1.schema.json","mediaType":null,"prerequisiteChecks":[],"requiredByAuthorizationRuleIds":[],"requiredByManifest":false,"requiredByPolicy":false,"resolution":"pass","statementDigest":{"sha256":"962be71738a0146642d27c87fba3c7338b0f2bb764b113b16867bb4808b11977"},"subjectName":null,"target":"predicate","validation":"pass"}],"quarantinedStatements":[],"recipientStatus":"not_checked","reportTruncated":false,"reportVersion":"0.2","roots":[{"sha256":"56b7be4394fe09c62ec7a3d5763cecc251e9696f267f35b2acc717b0d170a27a"}],"statements":[{"authorization":"pass","authorizationPrerequisiteChecks":[],"authorizingRuleIds":["urn:makoto:demo:rule:normalize"],"candidateRuleIds":["urn:makoto:demo:rule:normalize"],"coreSchema":"pass","coreSchemaPrerequisiteChecks":[],"digest":{"sha256":"1f28b72bcd4c1e9b7df71403ac6bb1670c2f2b09628ca6d76a2fa384db9a0848"},"eventId":"urn:uuid:22222222-2222-4222-8222-222222222222","graph":"pass","graphPrerequisiteChecks":[],"predicateType":"https://usemakoto.dev/predicate/v0.2/transform","signatures":[{"cryptographic":"pass","keyKnown":true,"keyid":"sha256:47dea58ea00fae9417ee19d76755bfef690899021132effb04fe1f9e4f0c8059"}]},{"authorization":"pass","authorizationPrerequisiteChecks":[],"authorizingRuleIds":["urn:makoto:demo:rule:origin"],"candidateRuleIds":["urn:makoto:demo:rule:origin"],"coreSchema":"pass","coreSchemaPrerequisiteChecks":[],"digest":{"sha256":"56b7be4394fe09c62ec7a3d5763cecc251e9696f267f35b2acc717b0d170a27a"},"eventId":"urn:uuid:11111111-1111-4111-8111-111111111111","graph":"pass","graphPrerequisiteChecks":[],"predicateType":"https://usemakoto.dev/predicate/v0.2/origin","signatures":[{"cryptographic":"pass","keyKnown":true,"keyid":"sha256:fd110d301d2f077de1414b8f99f441b1403fab207b2052fbd2c065e4ee8e7dc2"}]},{"authorization":"fail","authorizationPrerequisiteChecks":[],"authorizingRuleIds":[],"candidateRuleIds":[],"coreSchema":"pass","coreSchemaPrerequisiteChecks":[],"digest":{"sha256":"962be71738a0146642d27c87fba3c7338b0f2bb764b113b16867bb4808b11977"},"eventId":"urn:uuid:33333333-3333-4333-8333-333333333333","graph":"skipped","graphPrerequisiteChecks":["authorization"],"predicateType":"https://usemakoto.dev/predicate/v0.2/transform","signatures":[{"cryptographic":"pass","keyKnown":true,"keyid":"sha256:3774845b9147b50cf00771ca20eb29cc3043c078f79ee13ebd0c63062a133b4d"}]}],"summary":{"artifactsChecked":0,"artifactsDeclared":1,"heads":1,"historicalMaterialsChecked":0,"historicalMaterialsDeclared":0,"manifestSignaturesAuthorized":1,"manifestSignaturesRequired":1,"manifestSignaturesValid":1,"profilesDeclared":1,"profilesValidated":1,"quarantinedStatementsTotal":0,"roots":1,"signaturesChecked":4,"signaturesTotal":4,"signaturesValid":4,"statementsAuthorized":2,"statementsReachable":0,"statementsTotal":3,"statementsValid":3},"tool":{"name":"makoto","version":"0.2.0a0"},"unindexedEnvelopes":[],"unreferencedFiles":[],"warnings":[]}