{
  "_doc": "One result, read from the codebase’s own files at the commit named here. Every value is that file’s own, copied verbatim; nothing here is written by hand. A value replaced by {withheld: true, sha256_of_value, bytes} is committed by its sha256 instead of published, for the reason it states, and is never edited. Each whole source file is committed by sha256 below, and its bytes are published only where its visibility says so. The codebase is named by the public subject its files are published under.",
  "lane": "wireless-pqc",
  "repository": "wireless-pqc",
  "commit": "709160c57c9eb875e239acdf1eb3d0c4462e4c29",
  "portfolio_id": "wireless-pqc:onair-and-cpu-attribution",
  "id": "onair-and-cpu-attribution",
  "attestation_row": {
    "attested_at": "2026-09-13",
    "attestor": "03-wifipqc",
    "repository": {
      "withheld": true,
      "why": "a working-directory name (R8)",
      "sha256_of_value": "6f37ed958c37482bf7ee04acba61df04492fe3186c1ba6c10b77519cd450c69f",
      "bytes": 7
    },
    "source_doc": "CROWN_JEWELS_RESOLVED.md",
    "source_doc_sha256": "6958cd834026328936c2fbfb51a8b00a4dd5ec6cb65b1d0d8960bcfe0b9e2418",
    "state": "attested",
    "top_n": 26,
    "note_sha256": "c1af3e3220ffc4290cc975a79bf85d216638fd8abd3f4d8e7e67f6f5af0aff3b",
    "ids_in_row": 26,
    "file": "dataroom/TOP_N_ATTESTATION.jsonl",
    "line": 1
  },
  "claim_source": {
    "receipt": "wireless-pqc/dataroom/top40.json",
    "sha256": "6076db4027d7499ac53b5cf15f9a07bb7e41c38f56fb0f469a62353e10e65353",
    "field": "entries[30].claim",
    "file": "dataroom/top40.json"
  },
  "top40_entry": {
    "id": "onair-and-cpu-attribution",
    "portfolio_id": {
      "withheld": true,
      "why": "a working-directory name (R8)",
      "sha256_of_value": "37ec9dd8fec6f22c286af4747b4367aa01a07fa3762fbdd7c98ff7d2652a1b18",
      "bytes": 33
    },
    "rank": 31,
    "native_rank": 20,
    "title": "The post-quantum on-air and CPU costs, with the reduction attributed to the right artifact",
    "claim": "The post-quantum on-air and recurring-CPU costs, each attributed to the artifact that actually measured it.",
    "scope": "A byte model on both ends with a self-chosen 40-byte resumption ticket. The ~2.2x classical wall-clock tax ships alongside; quoting the reduction without it is the defect this entry exists to prevent.",
    "artifact_path": "artifacts/native/onair_resumption_ci.json",
    "witness_command": "make onair-resumption-ci && make recurring-tax-ci",
    "witness_result": {
      "status": "RAN",
      "exit": 0,
      "line": "RESULT: PASS",
      "seconds": 84.9,
      "run_at": "2026-09-13T02:34:15Z",
      "owner_gated": false,
      "reason": null,
      "run_of_record": "clean clone at HEAD (S03, dataroom/witness_quality_20260913/clean_clone_baseline.json)"
    },
    "third_party_axis": "—",
    "facts": {
      "ran_with_receipt": true,
      "third_party_graded": false,
      "negative_control_stated": false,
      "ip_class_known": false,
      "reproduce_command": true,
      "regenerates": false
    },
    "fact_count": 2,
    "repro_command": "make onair-resumption-ci && make recurring-tax-ci",
    "ip_class": null,
    "ip_class_basis": "no source in this repository states an IP class for this entry; never guessed"
  },
  "witness_quality_entry": {
    "id": "onair-and-cpu-attribution",
    "portfolio_id": {
      "withheld": true,
      "why": "a working-directory name (R8)",
      "sha256_of_value": "37ec9dd8fec6f22c286af4747b4367aa01a07fa3762fbdd7c98ff7d2652a1b18",
      "bytes": 33
    },
    "title": "The post-quantum on-air and CPU costs, with the reduction attributed to the right artifact",
    "claim": "The post-quantum on-air and recurring-CPU costs, each attributed to the artifact that actually measured it.",
    "class": "ASSERTING",
    "why": "clean-clone exit 0; every decisive planted defect went red: [0] the resumption verifier admits an exact-counter replay (<= becomes <) -> exit 2; [2] inflate the minimal safe ticket's tag field a thousandfold (TAG_BYTES 16 -> 16000): the measured on-air reduction falls below the 20x wall -> exit 2. Clauses the exit code does NOT cover (measured green, not decisive): [1] the resumption verifier stops binding the AP identity (a rogue AP is accepted)",
    "witness_command": "make onair-resumption-ci && make recurring-tax-ci",
    "clean_clone": {
      "exit": 0,
      "status": "RAN",
      "seconds": 84.9,
      "first_line": "liboqs-python faulthandler is disabled",
      "last_line": "RESULT: PASS",
      "artifact_rewritten": false,
      "dirtied": [
        " M artifacts/native/recurring_tax_ci.json",
        " M reports/recurring_tax_ci.md"
      ],
      "run_at": "2026-09-13T02:34:15Z",
      "reason": null
    },
    "planted_defects": [
      {
        "index": 0,
        "what": "the resumption verifier admits an exact-counter replay (<= becomes <)",
        "falsifies": "property: design-around replay-safe",
        "decisive": true,
        "planted": [
          {
            "path": "lib/wifipqc/session_resumption.py",
            "diff": "'        if self._bind_counter and counter <= self._last_counter:' -> '        if self._bind_counter and counter < self._last_counter:' (x1 of 1)"
          }
        ],
        "exit": 2,
        "seconds": 1.1,
        "last_line": "make: *** [onair-resumption-ci] Error 1",
        "failure_moved_by": null
      },
      {
        "index": 1,
        "what": "the resumption verifier stops binding the AP identity (a rogue AP is accepted)",
        "falsifies": "clause: (redundant) the verifier's AP-identity check -- not a falsification: the model binds the AP identity into the key derivation (derive_ark), so a rogue AP is still rejected when the verifier check is removed; the mechanism still closes the attack",
        "decisive": false,
        "planted": [
          {
            "path": "lib/wifipqc/session_resumption.py",
            "diff": "'        bssid = self._bssid if self._bind_ap else claimed_bssid' -> '        bssid = claimed_bssid' (x1 of 1)"
          }
        ],
        "exit": 0,
        "seconds": 84.4,
        "last_line": "RESULT: PASS",
        "failure_moved_by": null
      },
      {
        "index": 2,
        "what": "inflate the minimal safe ticket's tag field a thousandfold (TAG_BYTES 16 -> 16000): the measured on-air reduction falls below the 20x wall",
        "falsifies": "property: >= 20x fewer on-air bytes per roam, measured",
        "decisive": true,
        "planted": [
          {
            "path": "tools/hostapd_pqc/onair_resumption_ci.py",
            "diff": "'TAG_BYTES = 16        # resume_token MAC' -> 'TAG_BYTES = 16000     # resume_token MAC' (x1 of 1)"
          }
        ],
        "exit": 2,
        "seconds": 0.8,
        "last_line": "make: *** [onair-resumption-ci] Error 1",
        "failure_moved_by": null
      }
    ],
    "measured": true,
    "stale_claims_ref": null
  },
  "packet": null,
  "measured": {
    "measured": true,
    "basis": "planted_defects[].exit = 2",
    "exit": 2,
    "defect_rejected": true
  },
  "register": {
    "truth_state": "attested",
    "truth_line": 129,
    "measured_per_register": true,
    "witness_class_per_register": "ASSERTING",
    "ip_class_public": "unknown",
    "ip_class_sha256": "b23a6a8439c0dde5515893e7c90c1e3233b8616e634470f20dc4928bcf3609bc",
    "ip_class_source": "TOP_N_CROWN_JEWELS.md:72 @ 102044d55aab",
    "receipt": "register/CROWN_JEWELS_TRUTH.md",
    "receipt_sha256": "bde06cf0d3e99644522d18e79b6bd5d84ed4f5c86e315a48fef207e9e49c5022",
    "ip_class_receipt": "register/ip_class.jsonl",
    "ip_class_receipt_sha256": "b1e8f97aa6779e0fefed2f7a7726e1a03563b536b497392401b49bb8ef84d4ca"
  },
  "withheld_fields": [
    {
      "field": "top40.portfolio_id",
      "codes": [
        "LANE_DIRECTORY_NAME"
      ]
    },
    {
      "field": "witness_quality.portfolio_id",
      "codes": [
        "LANE_DIRECTORY_NAME"
      ]
    },
    {
      "field": "attestation_row.repository",
      "codes": [
        "LANE_DIRECTORY_NAME"
      ]
    }
  ],
  "sources": {
    "attestation": {
      "receipt": "wireless-pqc/dataroom/TOP_N_ATTESTATION.jsonl",
      "source": "dataroom/TOP_N_ATTESTATION.jsonl",
      "commit": "709160c57c9eb875e239acdf1eb3d0c4462e4c29",
      "sha256": "9bf48d398fc36b52f21264edc3a04b8e2c3cd7da3c53f24ec80636897997097e",
      "bytes": 3364,
      "visibility": "sealed"
    },
    "top40": {
      "receipt": "wireless-pqc/dataroom/top40.json",
      "source": "dataroom/top40.json",
      "commit": "709160c57c9eb875e239acdf1eb3d0c4462e4c29",
      "sha256": "6076db4027d7499ac53b5cf15f9a07bb7e41c38f56fb0f469a62353e10e65353",
      "bytes": 167747,
      "visibility": "sealed"
    },
    "witness_quality": {
      "receipt": "wireless-pqc/dataroom/witness_quality.json",
      "source": "dataroom/witness_quality.json",
      "commit": "709160c57c9eb875e239acdf1eb3d0c4462e4c29",
      "sha256": "5d379a10112d400163b35100a423124c28e8bfbbdbe4378b71840eda85f75cfe",
      "bytes": 143046,
      "visibility": "sealed"
    },
    "repro_index": {
      "receipt": "wireless-pqc/repro/INDEX.json",
      "source": "repro/INDEX.json",
      "commit": "709160c57c9eb875e239acdf1eb3d0c4462e4c29",
      "sha256": "378fd4a3ce4f44403b7c9ca6a3f19c11895831f892736376c90cf9423037f9eb",
      "bytes": 26512,
      "visibility": "sealed"
    }
  }
}