{ "version": "1.0.0", "description": "SWT3 AI Witness cross-language test vectors. Generated by Python SDK.", "fingerprint_formula": "SHA256('WITNESS:{tenant}:{proc}:{fa}:{fb}:{fc}:{ts_ms}').hex()[:12]", "hash_formula": "SHA256(input).hex()[:16]", "fingerprint_vectors": [ { "id": 1, "description": "AI-INF.1 Inference Provenance - basic PASS", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-INF.1", "factor_a": 1, "factor_b": 1, "factor_c": 0, "fingerprint_timestamp_ms": 1774800000000, "clearing_level": 1, "expected_fingerprint": "2e16e2fe92dd" }, { "id": 2, "description": "AI-INF.2 Inference Latency - FAIL (exceeded threshold)", "tenant_id": "AWS_NITRO_ENCLAVE", "procedure_id": "AI-INF.2", "factor_a": 5000, "factor_b": 8000, "factor_c": 1, "fingerprint_timestamp_ms": 1774800001000, "clearing_level": 2, "expected_fingerprint": "4ed784765e6c" }, { "id": 3, "description": "AI-GRD.1 Guardrail Enforcement - PASS (3/2 active)", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-GRD.1", "factor_a": 2, "factor_b": 3, "factor_c": 0, "fingerprint_timestamp_ms": 1774800002000, "clearing_level": 0, "expected_fingerprint": "a0aa7669ae6f" }, { "id": 4, "description": "AI-MDL.1 Model Integrity - FAIL (hash mismatch)", "tenant_id": "AZURE_TRUSTED_EXEC", "procedure_id": "AI-MDL.1", "factor_a": 1, "factor_b": 0, "factor_c": 1, "fingerprint_timestamp_ms": 1774800003000, "clearing_level": 3, "expected_fingerprint": "c36d477b3c2d" }, { "id": 5, "description": "AI-FAIR.1 Bias - PASS (score equals threshold)", "tenant_id": "ACME_DEFENSE", "procedure_id": "AI-FAIR.1", "factor_a": 15, "factor_b": 15, "factor_c": 0, "fingerprint_timestamp_ms": 1774800004000, "clearing_level": 1, "expected_fingerprint": "53180f5ae221" }, { "id": 6, "description": "AI-MDL.2 Model Version - SaaS tenant", "tenant_id": "SAAS_TENANT_42", "procedure_id": "AI-MDL.2", "factor_a": 1, "factor_b": 1, "factor_c": 0, "fingerprint_timestamp_ms": 1774800005000, "clearing_level": 1, "expected_fingerprint": "c7e61c16ee94" }, { "id": 7, "description": "AI-EXPL.2 Confidence Scoring - large factors", "tenant_id": "AWS_NITRO_ENCLAVE", "procedure_id": "AI-EXPL.2", "factor_a": 85, "factor_b": 92, "factor_c": 0, "fingerprint_timestamp_ms": 1774800006000, "clearing_level": 2, "expected_fingerprint": "2f2b989bb5c6" }, { "id": 8, "description": "AI-HITL.1 Human Review - attestation PASS", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-HITL.1", "factor_a": 1, "factor_b": 1, "factor_c": 0, "fingerprint_timestamp_ms": 1774800007000, "clearing_level": 0, "expected_fingerprint": "afbab8c9e098" }, { "id": 9, "description": "AI-INF.3 Volume - large factor values", "tenant_id": "DEMO_ENCLAVE", "procedure_id": "AI-INF.3", "factor_a": 10000, "factor_b": 9500, "factor_c": 0, "fingerprint_timestamp_ms": 1774800008000, "clearing_level": 1, "expected_fingerprint": "05010820e5a4" }, { "id": 10, "description": "AI-DATA.1 Provenance - all zeros edge case", "tenant_id": "AZURE_TRUSTED_EXEC", "procedure_id": "AI-DATA.1", "factor_a": 0, "factor_b": 0, "factor_c": 0, "fingerprint_timestamp_ms": 1774800009000, "clearing_level": 3, "expected_fingerprint": "289eb7452237" }, { "id": 11, "description": "AI-TOOL.1 Tool Call Accountability - tool succeeded", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-TOOL.1", "factor_a": 1, "factor_b": 42, "factor_c": 1, "fingerprint_timestamp_ms": 1774800010000, "clearing_level": 1, "expected_fingerprint": "019eaf85fcba" }, { "id": 12, "description": "AI-ID.1 Agent Identity Attestation - identity present", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-ID.1", "factor_a": 1, "factor_b": 1, "factor_c": 0, "fingerprint_timestamp_ms": 1774800011000, "clearing_level": 1, "expected_fingerprint": "7966c8f7fbb6" }, { "id": 13, "description": "AI-GRD.3 Gatekeeper Gate - blocked (0/2 active guardrails)", "tenant_id": "ACME_DEFENSE", "procedure_id": "AI-GRD.3", "factor_a": 2, "factor_b": 0, "factor_c": 0, "fingerprint_timestamp_ms": 1774800012000, "clearing_level": 1, "expected_fingerprint": "62251b4cf593" }, { "id": 14, "description": "AI-RAG.1 Context Retrieval Provenance - 5 chunks, corpus identified", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-RAG.1", "factor_a": 5, "factor_b": 1, "factor_c": 0, "fingerprint_timestamp_ms": 1774800010000, "clearing_level": 1, "expected_fingerprint": "66209137510b" }, { "id": 15, "description": "AI-RAG.2 Context Relevance - threshold 0.75, avg 0.82, 1 below", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-RAG.2", "factor_a": 750, "factor_b": 820, "factor_c": 1, "fingerprint_timestamp_ms": 1774800011000, "clearing_level": 1, "expected_fingerprint": "f714436c06cf" }, { "id": 16, "description": "AI-MDL.5 Weight File Integrity - hash match", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-MDL.5", "factor_a": 1, "factor_b": 1, "factor_c": 0, "fingerprint_timestamp_ms": 1774800020000, "clearing_level": 1, "expected_fingerprint": "eb95216c3841" }, { "id": 17, "description": "AI-MDL.6 Adapter Stack - 3 adapters, all verified", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-MDL.6", "factor_a": 3, "factor_b": 1, "factor_c": 0, "fingerprint_timestamp_ms": 1774800021000, "clearing_level": 1, "expected_fingerprint": "8cdb254d3b0f" }, { "id": 18, "description": "AI-MDL.7 Quantization - GPTQ (code 5)", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-MDL.7", "factor_a": 1, "factor_b": 1, "factor_c": 5, "fingerprint_timestamp_ms": 1774800022000, "clearing_level": 1, "expected_fingerprint": "e41a794af2b7" }, { "id": 19, "description": "AI-SKILL.1 Skill Manifest - 4 skills, manifest verified", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-SKILL.1", "factor_a": 4, "factor_b": 1, "factor_c": 0, "fingerprint_timestamp_ms": 1774800023000, "clearing_level": 1, "expected_fingerprint": "99e67c3870ab" }, { "id": 20, "description": "AI-SKILL.2 Memory Context - 2 sources, all identified", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-SKILL.2", "factor_a": 2, "factor_b": 1, "factor_c": 0, "fingerprint_timestamp_ms": 1774800024000, "clearing_level": 1, "expected_fingerprint": "3b7054cb045a" }, { "id": 21, "description": "AI-SKILL.3 Reward Model Binding - identified", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-SKILL.3", "factor_a": 1, "factor_b": 1, "factor_c": 0, "fingerprint_timestamp_ms": 1774800025000, "clearing_level": 1, "expected_fingerprint": "737d5adb8f69" }, { "id": 22, "description": "AI-CHAIN.1 Multi-Agent Chain - depth 3, cycle bound, accepted", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-CHAIN.1", "factor_a": 3, "factor_b": 1, "factor_c": 1, "fingerprint_timestamp_ms": 1774800030000, "clearing_level": 1, "expected_fingerprint": "c7210714030a" }, { "id": 23, "description": "AI-VIO.1 Violation Report - high severity, auto-detected, safety policy", "tenant_id": "ACME_DEFENSE", "procedure_id": "AI-VIO.1", "factor_a": 3, "factor_b": 1, "factor_c": 4, "fingerprint_timestamp_ms": 1774800031000, "clearing_level": 1, "expected_fingerprint": "2cf52653ff8a" }, { "id": 24, "description": "AI-CHR.1 Agent Charter - hash match", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-CHR.1", "factor_a": 1, "factor_b": 1, "factor_c": 0, "fingerprint_timestamp_ms": 1774800032000, "clearing_level": 1, "expected_fingerprint": "0fe7713c8954" }, { "id": 25, "description": "AI-MDL.8 Model Registry - found and approved", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-MDL.8", "factor_a": 1, "factor_b": 1, "factor_c": 0, "fingerprint_timestamp_ms": 1774800033000, "clearing_level": 1, "expected_fingerprint": "c21161b481d1" }, { "id": 26, "description": "AI-HITL.3 Reviewer Identity - four-eyes, cryptographic binding", "tenant_id": "ACME_DEFENSE", "procedure_id": "AI-HITL.3", "factor_a": 2, "factor_b": 2, "factor_c": 2, "fingerprint_timestamp_ms": 1774800034000, "clearing_level": 1, "expected_fingerprint": "d7e3a52bd012" }, { "id": 27, "description": "AI-SAFE.1 Safe State - mechanism exists and confirmed", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-SAFE.1", "factor_a": 1, "factor_b": 1, "factor_c": 1, "fingerprint_timestamp_ms": 1774800035000, "clearing_level": 1, "expected_fingerprint": "44cc01ade479" }, { "id": 28, "description": "AI-DATA.3 Training Stats - 50k rows, 128 features, 85% balance", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-DATA.3", "factor_a": 50000, "factor_b": 128, "factor_c": 850, "fingerprint_timestamp_ms": 1774800036000, "clearing_level": 1, "expected_fingerprint": "f9ce447c6e19" }, { "id": 29, "description": "AI-DATA.4 PII Lifecycle - 10k records pseudonymized", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-DATA.4", "factor_a": 10000, "factor_b": 1, "factor_c": 1, "fingerprint_timestamp_ms": 1774800037000, "clearing_level": 1, "expected_fingerprint": "39407008633d" }, { "id": 30, "description": "AI-ENV.1 Thermal Integrity - 42C within 85C threshold", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-ENV.1", "factor_a": 42, "factor_b": 85, "factor_c": 1, "fingerprint_timestamp_ms": 1774800037000, "clearing_level": 0, "expected_fingerprint": "64c031701878" }, { "id": 31, "description": "AI-ENV.2 Power Integrity - 1200W draw, 1200W headroom, not throttled", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-ENV.2", "factor_a": 1200, "factor_b": 1200, "factor_c": 0, "fingerprint_timestamp_ms": 1774800037000, "clearing_level": 0, "expected_fingerprint": "0b31660c296f" }, { "id": 32, "description": "AI-MARK.1 Content Provenance - 3 text items with C2PA metadata", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-MARK.1", "factor_a": 3, "factor_b": 1, "factor_c": 0, "fingerprint_timestamp_ms": 1774800031000, "clearing_level": 1, "expected_fingerprint": "8ec75a21838f" }, { "id": 33, "description": "AI-BASE.1 Agent Behavioral Baseline - 12 dimensions, monitoring, within envelope", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-BASE.1", "factor_a": 12, "factor_b": 1, "factor_c": 1, "fingerprint_timestamp_ms": 1774800032000, "clearing_level": 1, "expected_fingerprint": "e66df4bbdedb" }, { "id": 34, "description": "AI-METAGOV.1 Governance Rule Attestation - 5 rules, config hash, version 1", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-METAGOV.1", "factor_a": 5, "factor_b": 123456, "factor_c": 1, "fingerprint_timestamp_ms": 1774800000000, "clearing_level": 1, "expected_fingerprint": "1c94756db9c1" }, { "id": 35, "description": "AI-METAGOV.2 Regulatory Layer Binding - 1 layer, reg fingerprint, position 0", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-METAGOV.2", "factor_a": 1, "factor_b": 789012, "factor_c": 0, "fingerprint_timestamp_ms": 1774800000000, "clearing_level": 1, "expected_fingerprint": "aadb6f87dcee" }, { "id": 36, "description": "AI-METAGOV.3 Policy Version Downgrade - version 2, content hash, downgrade=true", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-METAGOV.3", "factor_a": 2, "factor_b": 345678, "factor_c": 1, "fingerprint_timestamp_ms": 1774800000000, "clearing_level": 1, "expected_fingerprint": "32a6bd5ad5c9" }, { "id": 37, "description": "AI-METAGOV.4 Rule Conflict Resolution - 10 rules, 0 cycles, depth 3", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-METAGOV.4", "factor_a": 10, "factor_b": 0, "factor_c": 3, "fingerprint_timestamp_ms": 1774800000000, "clearing_level": 1, "expected_fingerprint": "0b503341c3c4" }, { "id": 38, "description": "AI-METAGOV.5 Governance Scope Boundary - verdict_rules scope, modify permission, operator hash", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-METAGOV.5", "factor_a": 0, "factor_b": 1, "factor_c": 567890, "fingerprint_timestamp_ms": 1774800000000, "clearing_level": 1, "expected_fingerprint": "dd4fe9576cd2" }, { "id": 39, "description": "AI-METAGOV.6 Emergency Override - incident_response reason, 48h window, unreviewed", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-METAGOV.6", "factor_a": 1, "factor_b": 48, "factor_c": 0, "fingerprint_timestamp_ms": 1774800000000, "clearing_level": 1, "expected_fingerprint": "270738c276fc" }, { "id": 40, "description": "AI-METAGOV.7 Rule Sync Divergence - version_divergent, local hash, remote hash", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-METAGOV.7", "factor_a": 1, "factor_b": 234567, "factor_c": 876543, "fingerprint_timestamp_ms": 1774800000000, "clearing_level": 1, "expected_fingerprint": "66601df8b6d7" }, { "id": 41, "description": "AI-METAGOV.8 Rule Provenance - 4 source files, combined hash, pure", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-METAGOV.8", "factor_a": 4, "factor_b": 654321, "factor_c": 1, "fingerprint_timestamp_ms": 1774800000000, "clearing_level": 1, "expected_fingerprint": "1500a3dcab94" }, { "id": 42, "description": "AI-ENG.1 Design Generation Provenance - mechanical, 12 constraints", "tenant_id": "DESIGN_ENCLAVE", "procedure_id": "AI-ENG.1", "factor_a": 12, "factor_b": 500, "factor_c": 0, "fingerprint_timestamp_ms": 1774800042000, "clearing_level": 1, "expected_fingerprint": "3a9ad53541de" }, { "id": 43, "description": "AI-ENG.2 Simulation Validation - FEA, 1000 sims all pass", "tenant_id": "DESIGN_ENCLAVE", "procedure_id": "AI-ENG.2", "factor_a": 1000, "factor_b": 1000, "factor_c": 0, "fingerprint_timestamp_ms": 1774800043000, "clearing_level": 1, "expected_fingerprint": "bd1bb0a1554b" }, { "id": 44, "description": "AI-ENG.3 Safety-Critical Review Gate - PE stamp, 3/3 approved", "tenant_id": "DESIGN_ENCLAVE", "procedure_id": "AI-ENG.3", "factor_a": 3, "factor_b": 3, "factor_c": 1, "fingerprint_timestamp_ms": 1774800044000, "clearing_level": 1, "expected_fingerprint": "0f7d9d58352d" }, { "id": 45, "description": "AI-ENG.4 Material Specification Compliance - ASME, 15/15 met", "tenant_id": "DESIGN_ENCLAVE", "procedure_id": "AI-ENG.4", "factor_a": 15, "factor_b": 15, "factor_c": 0, "fingerprint_timestamp_ms": 1774800045000, "clearing_level": 1, "expected_fingerprint": "34bfd6594dff" }, { "id": 46, "description": "AI-ENG.5 Design Revision Chain - approved, 7/10 AI-generated", "tenant_id": "DESIGN_ENCLAVE", "procedure_id": "AI-ENG.5", "factor_a": 10, "factor_b": 7, "factor_c": 1, "fingerprint_timestamp_ms": 1774800046000, "clearing_level": 1, "expected_fingerprint": "26ae638d2064" }, { "id": 47, "description": "AI-ENG.6 Fabrication Release - verified hash, mass production", "tenant_id": "DESIGN_ENCLAVE", "procedure_id": "AI-ENG.6", "factor_a": 1, "factor_b": 5, "factor_c": 2, "fingerprint_timestamp_ms": 1774800047000, "clearing_level": 1, "expected_fingerprint": "4ff83090bfc4" }, { "id": 48, "description": "AI-REACH.1 Hazard Reachability - PASS (all 5 hazards mitigated, automated)", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-REACH.1", "factor_a": 5, "factor_b": 5, "factor_c": 1, "fingerprint_timestamp_ms": 1774800020000, "clearing_level": 1, "expected_fingerprint": "84e3c4b4c9df" }, { "id": 49, "description": "AI-REACH.1 Hazard Reachability - FAIL (3/8 mitigated, manual)", "tenant_id": "ACME_DEFENSE", "procedure_id": "AI-REACH.1", "factor_a": 8, "factor_b": 3, "factor_c": 0, "fingerprint_timestamp_ms": 1774800021000, "clearing_level": 2, "expected_fingerprint": "e87e7975d10e" }, { "id": 50, "description": "AI-DECOM.1 Decommissioning - PASS (all deps resolved, archived)", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-DECOM.1", "factor_a": 4, "factor_b": 4, "factor_c": 0, "fingerprint_timestamp_ms": 1774800022000, "clearing_level": 1, "expected_fingerprint": "7c3a1b7bdcdd" }, { "id": 51, "description": "AI-DECOM.1 Decommissioning - FAIL (2/6 deps resolved, transferred)", "tenant_id": "AWS_NITRO_ENCLAVE", "procedure_id": "AI-DECOM.1", "factor_a": 6, "factor_b": 2, "factor_c": 3, "fingerprint_timestamp_ms": 1774800023000, "clearing_level": 0, "expected_fingerprint": "6820dea7fc0c" }, { "id": 52, "description": "AI-RECOMM.1 Re-commissioning - PASS (10/10 checks, full validation)", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-RECOMM.1", "factor_a": 10, "factor_b": 10, "factor_c": 0, "fingerprint_timestamp_ms": 1774800024000, "clearing_level": 1, "expected_fingerprint": "2022f26aef5a" }, { "id": 53, "description": "AI-RECOMM.1 Re-commissioning - FAIL (5/8 checks, shadow mode)", "tenant_id": "DEMO_ENCLAVE", "procedure_id": "AI-RECOMM.1", "factor_a": 8, "factor_b": 5, "factor_c": 1, "fingerprint_timestamp_ms": 1774800025000, "clearing_level": 1, "expected_fingerprint": "02eab528668a" }, { "id": 54, "description": "AI-FREEZE.1 Parameter Freeze - PASS (12/12 verified, full stack)", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-FREEZE.1", "factor_a": 12, "factor_b": 12, "factor_c": 2, "fingerprint_timestamp_ms": 1774800026000, "clearing_level": 1, "expected_fingerprint": "fd2541054cb7" }, { "id": 55, "description": "AI-FREEZE.1 Parameter Freeze - FAIL (18/20 verified, weights only)", "tenant_id": "AZURE_TRUSTED_EXEC", "procedure_id": "AI-FREEZE.1", "factor_a": 20, "factor_b": 18, "factor_c": 0, "fingerprint_timestamp_ms": 1774800027000, "clearing_level": 0, "expected_fingerprint": "934ab9388917" }, { "id": 56, "description": "AI-DEL.2 Delegation Boundary - PASS (max_depth=5, actual=3, action=allowed)", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-DEL.2", "factor_a": 5, "factor_b": 3, "factor_c": 3, "fingerprint_timestamp_ms": 1774800050000, "clearing_level": 1, "expected_fingerprint": "95bd06ef5d25" }, { "id": 57, "description": "AI-DEL.2 Delegation Boundary - PASS (max=3, actual=7, action=blocked)", "tenant_id": "ACME_DEFENSE", "procedure_id": "AI-DEL.2", "factor_a": 3, "factor_b": 7, "factor_c": 0, "fingerprint_timestamp_ms": 1774800051000, "clearing_level": 1, "expected_fingerprint": "8cad06659665" }, { "id": 58, "description": "AI-DEL.2 Delegation Boundary - FAIL (max=3, actual=5, action=allowed -- boundary breached)", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-DEL.2", "factor_a": 3, "factor_b": 5, "factor_c": 3, "fingerprint_timestamp_ms": 1774800052000, "clearing_level": 1, "expected_fingerprint": "475f1c3a36b2" }, { "id": 59, "description": "AI-DENSITY.1 Anchor Density - PASS (expected=100, actual=120, sufficient)", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-DENSITY.1", "factor_a": 100, "factor_b": 120, "factor_c": 0, "fingerprint_timestamp_ms": 1774800053000, "clearing_level": 1, "expected_fingerprint": "1be61cd2f4a4" }, { "id": 60, "description": "AI-DENSITY.1 Anchor Density - FAIL (expected=100, actual=30, insufficient)", "tenant_id": "AWS_NITRO_ENCLAVE", "procedure_id": "AI-DENSITY.1", "factor_a": 100, "factor_b": 30, "factor_c": 1, "fingerprint_timestamp_ms": 1774800054000, "clearing_level": 2, "expected_fingerprint": "e2834ea60fad" }, { "id": 61, "description": "AI-MCP.1 MCP Security Posture - PASS (8/8 checks, score 100)", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-MCP.1", "factor_a": 8, "factor_b": 8, "factor_c": 100, "fingerprint_timestamp_ms": 1774800055000, "clearing_level": 1, "expected_fingerprint": "899cfed70e1c" }, { "id": 62, "description": "AI-MCP.1 MCP Security Posture - FAIL (5/8 checks, score 62)", "tenant_id": "ACME_DEFENSE", "procedure_id": "AI-MCP.1", "factor_a": 8, "factor_b": 5, "factor_c": 62, "fingerprint_timestamp_ms": 1774800056000, "clearing_level": 1, "expected_fingerprint": "ba060ac484a2" }, { "id": 63, "description": "AI-PROV.1 Model Provenance - PASS (4 links, integrity verified, link_type=training)", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-PROV.1", "factor_a": 4, "factor_b": 1, "factor_c": 0, "fingerprint_timestamp_ms": 1774800057000, "clearing_level": 1, "expected_fingerprint": "66a40714c104" }, { "id": 64, "description": "AI-PROV.1 Model Provenance - FAIL (3 links, integrity failed, link_type=deployment)", "tenant_id": "AZURE_TRUSTED_EXEC", "procedure_id": "AI-PROV.1", "factor_a": 3, "factor_b": 0, "factor_c": 2, "fingerprint_timestamp_ms": 1774800058000, "clearing_level": 2, "expected_fingerprint": "374583ad4f0e" }, { "id": 65, "description": "AI-ORCH.1 Orchestration Topology - parallel, 3 agents, depth 2", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-ORCH.1", "factor_a": 1, "factor_b": 3, "factor_c": 2, "fingerprint_timestamp_ms": 1774800014000, "clearing_level": 1, "expected_fingerprint": "8df384ee695c" }, { "id": 66, "description": "AI-ORCH.2 Inter-Agent Handoff - lateral delegation", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-ORCH.2", "factor_a": 2847501234, "factor_b": 1938274650, "factor_c": 0, "fingerprint_timestamp_ms": 1774800014000, "clearing_level": 1, "expected_fingerprint": "e6b49bd8c761" }, { "id": 67, "description": "AI-CTX.1 Context Window - truncation, 8000 to 4000 tokens", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-CTX.1", "factor_a": 8000, "factor_b": 4000, "factor_c": 1, "fingerprint_timestamp_ms": 1774800014000, "clearing_level": 1, "expected_fingerprint": "b36e32df04b8" }, { "id": 68, "description": "AI-SAND.1 Sandbox Enforcement - clean, 10 declared, 5 invoked", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-SAND.1", "factor_a": 10, "factor_b": 5, "factor_c": 0, "fingerprint_timestamp_ms": 1774800014000, "clearing_level": 1, "expected_fingerprint": "8a58d2707f7a" }, { "id": 69, "description": "AI-GATE.1 Eval Gate - 85/100, score 85", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-GATE.1", "factor_a": 100, "factor_b": 85, "factor_c": 85, "fingerprint_timestamp_ms": 1774800014000, "clearing_level": 1, "expected_fingerprint": "cdccfadd40cd" } ], "signing_vectors": [ { "id": 1, "description": "HMAC-SHA256 signing with agent_id binding", "signing_key": "test-signing-key", "anchor_fingerprint": "019eaf85fcba", "agent_id": "agent-007", "expected_signature": "00ff82da1659e2e6a7fa875c781ed4635976c8136b8dc2c24672adb8673cb112" }, { "id": 2, "description": "HMAC-SHA256 signing without agent_id", "signing_key": "test-signing-key", "anchor_fingerprint": "019eaf85fcba", "agent_id": null, "expected_signature": "d844102f40fb5dad449a2f57922f5b23f73ffb3a026b5bd5fd537ebe5c6c44d0" } ], "hash_vectors": [ { "input": "Hello, world!", "expected_16": "315f5bdb76d078c4" }, { "input": "", "expected_16": "e3b0c44298fc1c14" }, { "input": "What is the meaning of life?", "expected_16": "318f903a83b4d30d" }, { "input": "gpt-4o-2024-11-20:fp_abc123", "expected_16": "0f6b04241d237297" }, { "input": "You are a helpful fraud detection assistant. Flag any transaction over $10,000.", "expected_16": "479eaa1ee804f844", "description": "System prompt hash for instruction drift detection" } ], "profile_signing_vectors": [ { "id": 1, "description": "Profile signing canonical message and HMAC-SHA256", "model_id": "gpt-4o", "model_hash": "abc123", "procedures": [ "AI-INF.1", "AI-GRD.1", "AI-MDL.1" ], "coverage_score_raw": 0.6666666666666666, "generated_at": 1700000000000, "valid_until": 1700086400000, "expected_message": "PROFILE:gpt-4o:abc123:1700000000000:1700086400000:AI-GRD.1,AI-INF.1,AI-MDL.1:0.667", "signing_key": "test-key-123", "expected_signature": "bdce7111c3a6e9968a5de1973f3a977aadb42c2d7327f38de79729019c7baa42" } ], "mldsa_vectors": [ { "id": 1, "description": "ML-DSA-65 signing with agent_id binding (non-deterministic: verify round-trip, not exact match)", "algorithm": "ml-dsa-65", "seed_hex": "60ef3bf0e31e764953cf67c6806d0c6512ce54a6e83a9328b7042b3896cf8f40", "public_key_hex_length": 3904, "anchor_fingerprint": "019eaf85fcba", "agent_id": "agent-007", "message": "019eaf85fcba:agent-007", "note": "Signatures are randomized per FIPS 204. Parity test: sign with SDK A, verify with SDK B using the shared seed-derived public key." }, { "id": 2, "description": "ML-DSA-65 signing without agent_id (non-deterministic: verify round-trip, not exact match)", "algorithm": "ml-dsa-65", "seed_hex": "60ef3bf0e31e764953cf67c6806d0c6512ce54a6e83a9328b7042b3896cf8f40", "public_key_hex_length": 3904, "anchor_fingerprint": "019eaf85fcba", "agent_id": null, "message": "019eaf85fcba", "note": "Same seed as vector 1. Verify that keygen from seed produces identical public keys across all implementations." } ], "lifecycle_chain_vectors": [ { "id": 1, "description": "Lifecycle chain ID for AI-EMRG.1 emergency override", "formula": "LC-{SHA256('LIFECYCLE:{tenant}:{proc}:{fp}:{ts}').hex()[:16]}", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-EMRG.1", "initiator_fingerprint": "2e16e2fe92dd", "timestamp_ms": 1774800000000, "expected_chain_id": "LC-7a38936db8ecec94" }, { "id": 2, "description": "Lifecycle chain ID for AI-DRIFT.2 consequence-mapped drift", "formula": "LC-{SHA256('LIFECYCLE:{tenant}:{proc}:{fp}:{ts}').hex()[:16]}", "tenant_id": "ENCLAVE_PROD", "procedure_id": "AI-DRIFT.2", "initiator_fingerprint": "4ed784765e6c", "timestamp_ms": 1774800001000, "expected_chain_id": "LC-60c720a257e2d3b9" }, { "id": 3, "description": "Lifecycle chain ID for AI-ASSESS.1 champion-challenger (different tenant)", "formula": "LC-{SHA256('LIFECYCLE:{tenant}:{proc}:{fp}:{ts}').hex()[:16]}", "tenant_id": "AWS_NITRO_ENCLAVE", "procedure_id": "AI-ASSESS.1", "initiator_fingerprint": "66209137510b", "timestamp_ms": 1774800010000, "expected_chain_id": "LC-9caadba335ca64cd" }, { "id": 4, "description": "Lifecycle stage codes (canonical set)", "stages": { "initiated": 0, "checkpoint": 1, "escalated": 2, "resolved": 3, "abandoned": 4, "superseded": 5 } } ] }