{
 "check": "farkas_payload_kind",
 "payload_kind": "farkas-linear-bound/1",
 "contributed_to": "f8 (owner of the PCE envelope, O1); this lane owns the payload kind",
 "checker_source": "pqc-state-verifier-bundle/src/farkas_check.c",
 "checker_trusted_base": [
  "c99-compiler",
  "posix-shell",
  "make"
 ],
 "checker_needs_no_json": true,
 "verdicts_are_four_valued": true,
 "native_exit_codes": {
  "VALID": 0,
  "REJECTED": 1,
  "MALFORMED": 2,
  "REFUSED": 3
 },
 "n_controls": 6,
 "controls_expected_exits": [
  0,
  1,
  3,
  1,
  2,
  4
 ],
 "n_vector_digests_recorded": 6,
 "n_controls_the_payload_checker_decides": 5,
 "n_controls_agreeing_with_controls_tsv": 5,
 "root_check_is_the_envelopes_job": true,
 "wrong_root_vector_native_verdict": 0,
 "payload_checker_accepts_the_wrong_root_vector": true,
 "verify_sh_exit": 0,
 "verify_sh_all_controls_pass": true,
 "verify_sh_tail": [
  "Results: 6/6 controls behaved as expected",
  "Acceptance count: 1/6"
 ],
 "acceptance_count": 1,
 "build_ok": true,
 "vectors": [
  {
   "name": "positive-valid",
   "vector": "certs/valid-reassembly-cap.txt",
   "declared_root_sha256": "ca3e62c773980344022b921502937e5601be0f5e54fc171c0bc179c95dd7495f",
   "expected_exit": 0,
   "sha256": "ca3e62c773980344022b921502937e5601be0f5e54fc171c0bc179c95dd7495f",
   "native_exit": 0,
   "decided_by": "payload-checker",
   "agrees_with_controls_tsv": true
  },
  {
   "name": "negative-multiplier",
   "vector": "certs/neg-invalid-multiplier.txt",
   "declared_root_sha256": "7bb0d32e4378522c083ce90575214e3122c1261c580053c9f594d35bda2a845d",
   "expected_exit": 1,
   "sha256": "7bb0d32e4378522c083ce90575214e3122c1261c580053c9f594d35bda2a845d",
   "native_exit": 1,
   "decided_by": "payload-checker",
   "agrees_with_controls_tsv": true
  },
  {
   "name": "negative-overflow",
   "vector": "certs/neg-overflow-forge.txt",
   "declared_root_sha256": "a48dd9c6d1bf3e577e35882c51b9478ab3ad901af36183d8ea7a7a80de68f2ac",
   "expected_exit": 3,
   "sha256": "a48dd9c6d1bf3e577e35882c51b9478ab3ad901af36183d8ea7a7a80de68f2ac",
   "native_exit": 3,
   "decided_by": "payload-checker",
   "agrees_with_controls_tsv": true
  },
  {
   "name": "negative-coefficient-mismatch",
   "vector": "certs/neg-coefficient-mismatch.txt",
   "declared_root_sha256": "0e6f14692c482af7331976ad04521cf32e2a437717f97e65b84989f35853cb35",
   "expected_exit": 1,
   "sha256": "0e6f14692c482af7331976ad04521cf32e2a437717f97e65b84989f35853cb35",
   "native_exit": 1,
   "decided_by": "payload-checker",
   "agrees_with_controls_tsv": true
  },
  {
   "name": "negative-malformed",
   "vector": "certs/neg-malformed.txt",
   "declared_root_sha256": "3c368445b0c5c0a6cc92b6fea95af074a77867a30577157ede16597458a2715f",
   "expected_exit": 2,
   "sha256": "3c368445b0c5c0a6cc92b6fea95af074a77867a30577157ede16597458a2715f",
   "native_exit": 2,
   "decided_by": "payload-checker",
   "agrees_with_controls_tsv": true
  },
  {
   "name": "negative-wrong-root",
   "vector": "certs/neg-wrong-root.txt",
   "declared_root_sha256": "0000000000000000000000000000000000000000000000000000000000000000",
   "expected_exit": 4,
   "sha256": "80096d89811bd8abffad31cff4805ef943772382884f08bb8823e147989a6c66",
   "native_exit": 0,
   "decided_by": "envelope",
   "agrees_with_controls_tsv": false
  }
 ],
 "manifest_digest_detects_mutation": true,
 "boundary_for_the_envelope": "The payload checker decides the three affine-Farkas conditions and returns four verdicts (0 VALID / 1 REJECTED / 2 MALFORMED / 3 REFUSED). It CANNOT return the exit 4 that controls.tsv's `negative-wrong-root` expects: verify.sh produces that from a sha256 comparison the binary never sees. The ROOT BINDING IS THE ENVELOPE'S JOB. An envelope that assumes this payload checker validates the trusted root would bind nothing.",
 "what_it_does_not_check": [
  "premise feasibility: if A.x <= b is infeasible the implication is vacuously true; deciding that needs an LP solve, which is the dependency this checker exists to avoid",
  "the trusted root (the envelope's job, above)",
  "that the modeled bound describes any deployed system"
 ]
}