{
  "expected": {
    "all_verdicts_in_vocabulary": true,
    "checker_accepts_bom": true,
    "citations_all_recovered": true,
    "connectors_blind": [],
    "connectors_expected": [
      "ci",
      "cloud_logs",
      "datasets",
      "github",
      "notebooks",
      "patents",
      "registries",
      "regulatory_docs"
    ],
    "dilithium_bom_spec_digest_unchanged": true,
    "has_counterfactual_row": true,
    "kyber_bom_spec_digest_unchanged": true,
    "n_claim_rows": 7,
    "n_question_rows": 4,
    "n_unverifiable_from_connector_failure": 0,
    "row_ids": [
      "M-C1-mlkem-c90-identification",
      "M-C2-fork-of-reference",
      "M-C3-ci-badge",
      "M-C4-formal-verification",
      "M-C5-quickstart-build-test",
      "M-C6-acvp-wycheproof",
      "M-C7-liboqs-default-since-0-13-0"
    ],
    "row_wheres": {
      "M-C1-mlkem-c90-identification": "README.md:13",
      "M-C2-fork-of-reference": "README.md:14",
      "M-C3-ci-badge": "README.md:5",
      "M-C4-formal-verification": "README.md:16-18",
      "M-C5-quickstart-build-test": "README.md:35-37",
      "M-C6-acvp-wycheproof": "README.md:107-108",
      "M-C7-liboqs-default-since-0-13-0": "README.md:50"
    },
    "target_commit": "a1b94a1d903072d5ea1d8ecf434bd9d5518014c0"
  },
  "hash_version": 2,
  "name": "claimbom_mlkem_native",
  "note": "S06 continuation row (a) (sealed 2026-09-02 BEFORE tools/claimbom knew a third target and BEFORE any live run against pq-code-package/mlkem-native at a1b94a1d, its main head fetched read-only today, README 224 lines). RECORDED: the seven claim rows quoted verbatim with line citations; the four Q rows are the instrument's with mlkem-native search terms. BAR: identical to the dilithium row's (closed-vocabulary verdicts on every row, no connector blind, a counterfactual row, checker accepts, the first two targets' spec_digests unchanged), plus M-C1 measured the same way kyber's C2 was (NIST ML-KEM-768 keyGen vectors through the target's own keypair_derand with coins d||z, and the one-line reversal of FIPS 203's domain separation in mlkem/src/indcpa.c as the counterfactual) with a C90 pedantic compile beside it. BLIND: the tally and every verdict. THE QUESTION THIS ROW ANSWERS: does the instrument's finding rate track code quality (this target is formally verified and the ML-KEM implementation liboqs ships) or README age? Publishable either way. Kill: build or fetch failure on this host is UNSUPPORTED on the affected rows; the row set does not move.",
  "note_sha256": "2fbaf59ef5946590f5fa52a5ec7bd750a8a6d78eff044a141f2a645999944bc8",
  "protocol": "pre-registered before the benchmark run. sha256 covers expected+tol; note_sha256 covers the prose. Neither proves ordering on its own -- the git commit of this file does, and git_blob_matches() is the anchor that makes an edit visible.",
  "sealed": true,
  "sha256": "8bfe9c35fb0a66ed16d6576b17e8212528a239c1a8b2e67689f2e594e6ee6922",
  "tol": {}
}