{
  "expected": {
    "all_verdicts_in_vocabulary": true,
    "checker_accepts_bom": true,
    "citations_all_recovered": true,
    "connectors_blind": [],
    "connectors_expected": [
      "ci",
      "cloud_logs",
      "datasets",
      "github",
      "notebooks",
      "patents",
      "registries",
      "regulatory_docs"
    ],
    "has_counterfactual_row": true,
    "kyber_bom_spec_digest_unchanged": true,
    "n_claim_rows": 9,
    "n_question_rows": 4,
    "n_unverifiable_from_connector_failure": 0,
    "row_ids": [
      "D-C1-official-reference-implementation",
      "D-C2-fips-204-identification",
      "D-C3-build-status-badge",
      "D-C4-coverage-badge",
      "D-C5-build-procedure",
      "D-C6-selftest-contract",
      "D-C7-deterministic-vectors",
      "D-C8-shared-libraries",
      "D-C9-hedged-signing-default"
    ],
    "row_wheres": {
      "D-C1-official-reference-implementation": "README.md:5",
      "D-C2-fips-204-identification": "README.md:5",
      "D-C3-build-status-badge": "README.md:3",
      "D-C4-coverage-badge": "README.md:3",
      "D-C5-build-procedure": "README.md:29-38",
      "D-C6-selftest-contract": "README.md:40",
      "D-C7-deterministic-vectors": "README.md:41",
      "D-C8-shared-libraries": "README.md:69-76",
      "D-C9-hedged-signing-default": "README.md:61"
    },
    "target_commit": "d35ba3fe5449bee3e6d43e1f296c3ca818bd36be"
  },
  "hash_version": 2,
  "name": "claimbom_dilithium",
  "note": "S06 row 7 (sealed 2026-09-02 BEFORE tools/claimbom knew a second target and BEFORE any live run against pq-crystals/dilithium at d35ba3fe). RECORDED: the nine claim rows, quoted verbatim from README.md at the pinned commit (fetched read-only 2026-09-02, 81 lines) with the line citations above; the four Q rows reuse the kyber question set with dilithium search terms. BAR: every row verdicted from the closed vocabulary; no row UNVERIFIABLE because a connector failed (blind list empty); at least one counterfactual row (D-C2: NIST ML-DSA-65 keyGen vectors through the target's own crypto_sign_keypair with randombytes pinned to the seed, and a one-line counterfactual that must NOT match); the checker accepts the produced BOM; the kyber BOM's spec_digest does not move (the second target must not touch the first's rows). BLIND: the tally itself (REPRODUCED / REFUTED / PARTIAL / UNVERIFIABLE counts) and every verdict. Kill: a build or fetch failure on both platforms leaves rows UNVERIFIABLE-by-connector, which fails this bar and is published as NR.",
  "note_sha256": "6ca4be27673b6e94b00dae1bba86564dbe47abbd7893ab7d0fe602100d38d378",
  "protocol": "pre-registered before the benchmark run. sha256 covers expected+tol; note_sha256 covers the prose. Neither proves ordering on its own -- the git commit of this file does, and git_blob_matches() is the anchor that makes an edit visible.",
  "sealed": true,
  "sha256": "38b19be37fbf40218bfdfec9749582e6a2b9ff4559fdba343ebf6df17e37c13c",
  "tol": {}
}