{
  "check": "adversarial_gate_audit",
  "dead_gates": [],
  "honest_scope": "Each entry is ONE mutation of ONE gate. Passing here means that gate rejected that specific corruption -- it is not proof the gate is correct in general, and no claim of completeness over all possible corruptions is made. A DEAD gate, however, is conclusive: it accepted input it was built to reject.",
  "kind": "measured (every gate mutated and observed)",
  "n_dead_gates": 0,
  "n_gates_that_bit": 26,
  "n_mutations": 26,
  "ok": true,
  "results": [
    {
      "bit": true,
      "detail": "status=REJECT",
      "gate": "certificate.verify",
      "mutation": "inflate one dual weight to 2"
    },
    {
      "bit": true,
      "detail": "status=MALFORMED",
      "gate": "certificate.verify",
      "mutation": "float weight [1.0, 1]"
    },
    {
      "bit": true,
      "detail": "status=ABSTAIN",
      "gate": "certificate.verify",
      "mutation": "weight on a family not in the matrix"
    },
    {
      "bit": true,
      "detail": "status=REJECT",
      "gate": "certificate.verify",
      "mutation": "claim bound 7 from only 3 support families"
    },
    {
      "bit": true,
      "detail": "status=ABSTAIN",
      "gate": "certificate.verify",
      "mutation": "empty certificate"
    },
    {
      "bit": true,
      "detail": "149718 -> 1919",
      "gate": "engine.exact_min_cover",
      "mutation": "halve the family set; enumeration count must move"
    },
    {
      "bit": true,
      "detail": "pcap.N_signal",
      "gate": "wire_vocabulary.lint",
      "mutation": "observable named after mechanism id N"
    },
    {
      "bit": true,
      "detail": "pcap.AB_flag",
      "gate": "wire_vocabulary.lint",
      "mutation": "observable named after mechanism id AB"
    },
    {
      "bit": true,
      "detail": "pcap.saw_krack_retransmission",
      "gate": "wire_vocabulary.lint",
      "mutation": "observable named after family krack_retransmission"
    },
    {
      "bit": true,
      "detail": "pcap.offline_dictionary_hint",
      "gate": "wire_vocabulary.lint",
      "mutation": "observable named after family only in repairs targets"
    },
    {
      "bit": true,
      "detail": "pcap.n_beacon",
      "gate": "wire_vocabulary.lint",
      "mutation": "must NOT reject the ordinary count prefix n_"
    },
    {
      "bit": true,
      "detail": "exit=1",
      "gate": "check_capture_not_worse",
      "mutation": "capture stripped to one subtype"
    },
    {
      "bit": true,
      "detail": "exit=1 (800 frames)",
      "gate": "check_capture_not_worse",
      "mutation": "MORE frames but subtypes lost"
    },
    {
      "bit": true,
      "detail": "exit=3",
      "gate": "check_capture_not_worse",
      "mutation": "no committed baseline to compare"
    },
    {
      "bit": true,
      "detail": "exit=3 K=None exact=False",
      "gate": "cover_cli",
      "mutation": "budget too small -> must not put a heuristic in K"
    },
    {
      "bit": true,
      "detail": "exit=3",
      "gate": "cover_cli",
      "mutation": "an item with no coverer"
    },
    {
      "bit": true,
      "detail": "exit=2",
      "gate": "cover_cli",
      "mutation": "unparseable input"
    },
    {
      "bit": true,
      "detail": "exit=1 :: ders/y0/gn0l8_vj2vd8vyc5vtznz86w0000gp/T/tmp9lpqbif2/planted.md:1  [NO-SCOPE/NO-PAIR]  The moat is proven minimal with K = 26 and that is all.\nACCEPTANCE: FAIL\n",
      "gate": "check_k_scoping",
      "mutation": "a bare `K = 26` with no scope and no pair"
    },
    {
      "bit": true,
      "detail": "exit=0 :: reement=None on 0 hand labels  (K_facet=26 is circular over the 32-toggle DSL; K_constr=7 is not \u2014 both are needed and neither is deleted)\nACCEPTANCE: ALL PASS\n",
      "gate": "check_k_scoping",
      "mutation": "must NOT trip on a correctly scoped+paired 26"
    },
    {
      "bit": true,
      "detail": "signature algorithm 'NO-SUCH-ALGORITHM-XYZ' is not enabled in this liboqs build; 68 mechanisms are enabled. This is a liboqs VERSION skew, not a missing feature",
      "gate": "crypto.resolve_sig_alg",
      "mutation": "unknown algorithm must raise, not fall back"
    },
    {
      "bit": true,
      "detail": "tooth=every_naive_control_accepts_the_attack",
      "gate": "check_gap_surfaces",
      "mutation": "naive control REJECTS the attack (probe would be vacuous)"
    },
    {
      "bit": true,
      "detail": "tooth=every_attack_direction_rejected",
      "gate": "check_gap_surfaces",
      "mutation": "attack reported as ACCEPTED"
    },
    {
      "bit": true,
      "detail": "tooth=every_legit_direction_accepted",
      "gate": "check_gap_surfaces",
      "mutation": "legitimate traffic reported REJECTED"
    },
    {
      "bit": true,
      "detail": "ok=False",
      "gate": "check_cross_genus",
      "mutation": "certificate claims VALID with a bound that disagrees with enumerated K"
    },
    {
      "bit": true,
      "detail": "ok=False",
      "gate": "check_cross_genus",
      "mutation": "the published 802.11 K silently moves to 6"
    },
    {
      "bit": true,
      "detail": "ok=False",
      "gate": "check_cross_genus",
      "mutation": "kind tags made decorative (inherited suffix rule gets everything right)"
    }
  ],
  "verdict": "real"
}