{
  "_doc": "One result, read from the codebase’s own files at the commit named here. Every value is that file’s own, copied verbatim; nothing here is written by hand. A value replaced by {withheld: true, sha256_of_value, bytes} is committed by its sha256 instead of published, for the reason it states, and is never edited. Each whole source file is committed by sha256 below, and its bytes are published only where its visibility says so. The codebase is named by the public subject its files are published under.",
  "lane": "wireless-pqc",
  "repository": "wireless-pqc",
  "commit": "709160c57c9eb875e239acdf1eb3d0c4462e4c29",
  "portfolio_id": "wireless-pqc:atlas-admits-what-does-not-fit",
  "id": "atlas-admits-what-does-not-fit",
  "attestation_row": {
    "attested_at": "2026-09-13",
    "attestor": "03-wifipqc",
    "repository": {
      "withheld": true,
      "why": "a working-directory name (R8)",
      "sha256_of_value": "6f37ed958c37482bf7ee04acba61df04492fe3186c1ba6c10b77519cd450c69f",
      "bytes": 7
    },
    "source_doc": "CROWN_JEWELS_RESOLVED.md",
    "source_doc_sha256": "6958cd834026328936c2fbfb51a8b00a4dd5ec6cb65b1d0d8960bcfe0b9e2418",
    "state": "attested",
    "top_n": 26,
    "note_sha256": "c1af3e3220ffc4290cc975a79bf85d216638fd8abd3f4d8e7e67f6f5af0aff3b",
    "ids_in_row": 26,
    "file": "dataroom/TOP_N_ATTESTATION.jsonl",
    "line": 1
  },
  "claim_source": {
    "receipt": "wireless-pqc/dataroom/top40.json",
    "sha256": "6076db4027d7499ac53b5cf15f9a07bb7e41c38f56fb0f469a62353e10e65353",
    "field": "entries[28].claim",
    "file": "dataroom/top40.json"
  },
  "top40_entry": {
    "id": "atlas-admits-what-does-not-fit",
    "portfolio_id": {
      "withheld": true,
      "why": "a working-directory name (R8)",
      "sha256_of_value": "fd0b41001b86878bcee675d44de3267bcec97f7e21c7030bfc0604e0d49c2477",
      "bytes": 38
    },
    "rank": 29,
    "native_rank": 18,
    "title": "The shipped engine admits a request that does not fit — and we published it as a headline",
    "claim": "The shipped admission engine ADMITS a request that does not fit its own arena, and we published that as a headline.",
    "scope": {
      "withheld": true,
      "why": "uses a word the published record keeps for its own process (S3.1-DIALECT)",
      "sha256_of_value": "a718ed44ce78ad1c5284a9a506a6ee0e77e2a23871efbc083e9af962f6b039f6",
      "bytes": 162
    },
    "artifact_path": "artifacts/native/atlas_ci.json",
    "witness_command": "make atlas-gate",
    "witness_result": {
      "status": "RAN",
      "exit": 0,
      "line": "PASS 14/14",
      "seconds": 1.1,
      "run_at": "2026-09-13T02:32:49Z",
      "owner_gated": false,
      "reason": null,
      "run_of_record": "clean clone at HEAD (S03, dataroom/witness_quality_20260913/clean_clone_baseline.json)"
    },
    "third_party_axis": "—",
    "facts": {
      "ran_with_receipt": true,
      "third_party_graded": false,
      "negative_control_stated": false,
      "ip_class_known": false,
      "reproduce_command": true,
      "regenerates": false
    },
    "fact_count": 2,
    "repro_command": "make atlas-gate",
    "ip_class": null,
    "ip_class_basis": "no source in this repository states an IP class for this entry; never guessed"
  },
  "witness_quality_entry": {
    "id": "atlas-admits-what-does-not-fit",
    "portfolio_id": {
      "withheld": true,
      "why": "a working-directory name (R8)",
      "sha256_of_value": "fd0b41001b86878bcee675d44de3267bcec97f7e21c7030bfc0604e0d49c2477",
      "bytes": 38
    },
    "title": "The shipped engine admits a request that does not fit — and we published it as a headline",
    "claim": "The shipped admission engine ADMITS a request that does not fit its own arena, and we published that as a headline.",
    "class": "ASSERTING",
    "why": "clean-clone exit 0; every decisive planted defect went red: [0] declare EAP-TLS's true fragment payload smaller (1020 -> 500): no admitted request exceeds the arena any more -> exit 2; [1] fix the shipped engine's R1 under-charge (FRAG_ELEMENT_PAYLOAD 255 -> 1020): the engine now denies the request the headline says it admits -> exit 2",
    "witness_command": "make atlas-gate",
    "clean_clone": {
      "exit": 0,
      "status": "RAN",
      "seconds": 1.1,
      "first_line": "PASS 14/14",
      "last_line": "PASS 14/14",
      "artifact_rewritten": false,
      "dirtied": [],
      "run_at": "2026-09-13T02:32:49Z",
      "reason": null
    },
    "planted_defects": [
      {
        "index": 0,
        "what": "declare EAP-TLS's true fragment payload smaller (1020 -> 500): no admitted request exceeds the arena any more",
        "falsifies": "property: an admitted request does not fit",
        "decisive": true,
        "planted": [
          {
            "path": "tools/atlas/protocols.py",
            "diff": "'        \"frag_payload\": 1020,' -> '        \"frag_payload\": 500,' (x1 of 1)"
          }
        ],
        "exit": 2,
        "seconds": 2.3,
        "last_line": "make: *** [atlas-gate] Error 2",
        "failure_moved_by": null
      },
      {
        "index": 1,
        "what": "fix the shipped engine's R1 under-charge (FRAG_ELEMENT_PAYLOAD 255 -> 1020): the engine now denies the request the headline says it admits",
        "falsifies": "property: the shipped engine admits it",
        "decisive": true,
        "planted": [
          {
            "path": "tools/rbadmit/rbadmit.c",
            "diff": "'#define FRAG_ELEMENT_PAYLOAD 255' -> '#define FRAG_ELEMENT_PAYLOAD 1020' (x1 of 1)"
          }
        ],
        "exit": 2,
        "seconds": 2.1,
        "last_line": "make: *** [atlas-gate] Error 2",
        "failure_moved_by": null
      }
    ],
    "measured": true,
    "stale_claims_ref": null
  },
  "packet": null,
  "measured": {
    "measured": true,
    "basis": "planted_defects[].exit = 2",
    "exit": 2,
    "defect_rejected": true
  },
  "register": {
    "truth_state": "attested",
    "truth_line": 113,
    "measured_per_register": true,
    "witness_class_per_register": "ASSERTING",
    "ip_class_public": "unknown",
    "ip_class_sha256": "b23a6a8439c0dde5515893e7c90c1e3233b8616e634470f20dc4928bcf3609bc",
    "ip_class_source": "TOP_N_CROWN_JEWELS.md:72 @ 102044d55aab",
    "receipt": "register/CROWN_JEWELS_TRUTH.md",
    "receipt_sha256": "bde06cf0d3e99644522d18e79b6bd5d84ed4f5c86e315a48fef207e9e49c5022",
    "ip_class_receipt": "register/ip_class.jsonl",
    "ip_class_receipt_sha256": "b1e8f97aa6779e0fefed2f7a7726e1a03563b536b497392401b49bb8ef84d4ca"
  },
  "withheld_fields": [
    {
      "field": "top40.portfolio_id",
      "codes": [
        "LANE_DIRECTORY_NAME"
      ]
    },
    {
      "field": "witness_quality.portfolio_id",
      "codes": [
        "LANE_DIRECTORY_NAME"
      ]
    },
    {
      "field": "top40.scope",
      "codes": [
        "PROCESS_NARRATION"
      ]
    },
    {
      "field": "attestation_row.repository",
      "codes": [
        "LANE_DIRECTORY_NAME"
      ]
    }
  ],
  "sources": {
    "attestation": {
      "receipt": "wireless-pqc/dataroom/TOP_N_ATTESTATION.jsonl",
      "source": "dataroom/TOP_N_ATTESTATION.jsonl",
      "commit": "709160c57c9eb875e239acdf1eb3d0c4462e4c29",
      "sha256": "9bf48d398fc36b52f21264edc3a04b8e2c3cd7da3c53f24ec80636897997097e",
      "bytes": 3364,
      "visibility": "sealed"
    },
    "top40": {
      "receipt": "wireless-pqc/dataroom/top40.json",
      "source": "dataroom/top40.json",
      "commit": "709160c57c9eb875e239acdf1eb3d0c4462e4c29",
      "sha256": "6076db4027d7499ac53b5cf15f9a07bb7e41c38f56fb0f469a62353e10e65353",
      "bytes": 167747,
      "visibility": "sealed"
    },
    "witness_quality": {
      "receipt": "wireless-pqc/dataroom/witness_quality.json",
      "source": "dataroom/witness_quality.json",
      "commit": "709160c57c9eb875e239acdf1eb3d0c4462e4c29",
      "sha256": "5d379a10112d400163b35100a423124c28e8bfbbdbe4378b71840eda85f75cfe",
      "bytes": 143046,
      "visibility": "sealed"
    },
    "repro_index": {
      "receipt": "wireless-pqc/repro/INDEX.json",
      "source": "repro/INDEX.json",
      "commit": "709160c57c9eb875e239acdf1eb3d0c4462e4c29",
      "sha256": "378fd4a3ce4f44403b7c9ca6a3f19c11895831f892736376c90cf9423037f9eb",
      "bytes": 26512,
      "visibility": "sealed"
    }
  }
}