{
  "spec": "coderifts.proof-run.v1",
  "date": "2026-09-23",
  "started_at": "2026-09-23T09:00:51.553Z",
  "claims_source": "https://coderifts.com/.well-known/proof-claims.json",
  "claims_digest": "sha256:d735ecedb566f7c794ac77764ee087c0584540d69e2f70e703b6b90b65528ae6",
  "page": "https://coderifts.com/verify/",
  "website_commit": "5bc2f692b83714977639b6d1efa4296a353c668d",
  "website_commit_reason": null,
  "app_server_info": {
    "name": "CodeRifts API Governance",
    "version": "1.0.3"
  },
  "app_health_version": "1.0",
  "app_decision_spec_version": "2.0",
  "app_test_count": 8360,
  "app_commit": null,
  "app_commit_reason": "the app exposes no commit on any public surface — /health and MCP initialize both return a version string and no SHA. surface_source_ref_commit is the coderifts/api-governance commit that pins the published tools[], not the server build.",
  "surface_source_ref_commit": "d68d5c9d87d39fc8670c6fb6c1c702b4ad5f67bb",
  "environment": {
    "runner": "local",
    "runner_os": "darwin-x64",
    "github_run_id": null,
    "node": "v24.12.0",
    "python": "Python 3.9.6",
    "python_reason": null,
    "curl": "curl 8.7.1 (x86_64-apple-darwin24.0) libcurl/8.7.1 (SecureTransport) LibreSSL/3.3.6 zlib/1.2.12 nghttp2/1.64.0"
  },
  "summary": {
    "total": 10,
    "verified": 10,
    "stale": 0,
    "skipped": 0,
    "error": 0
  },
  "proofs": [
    {
      "id": "signed-decision",
      "verdict": "verified",
      "detail": "4/4 field(s) as documented",
      "ms": 135,
      "exit_code": 0,
      "output_digest": "sha256:c3737db340036b959110a8bbd1ed14b6028a6d3e368c82a2857bfab25d38b231",
      "output_bytes": 294
    },
    {
      "id": "valid-not-authz",
      "verdict": "verified",
      "detail": "3/3 field(s) as documented",
      "ms": 79,
      "exit_code": 0,
      "output_digest": "sha256:0c5283a8fd25941b807bfce16ce93de28022b455f146f048330f059794442921",
      "output_bytes": 572
    },
    {
      "id": "limits-as-data",
      "verdict": "verified",
      "detail": "3/3 expected string(s) present",
      "ms": 55,
      "exit_code": 0,
      "output_digest": "sha256:96e2f9851ea574cc06bf15cac2d4181047c3b129dcf310034b74a51e24937f93",
      "output_bytes": 5945
    },
    {
      "id": "surface-selfcheck",
      "verdict": "verified",
      "detail": "two sources agree: sha256:7d6fe4a0d5ef31a4cec82aaa0762c4434a246899233ff13321fe08b5cf8475d2",
      "ms": 122,
      "exit_code": 0,
      "output_digest": "sha256:96cf120ca3e6e84cb676a4671c0590dfb03f22d63775d48a8bda7cc05adc98d4",
      "output_bytes": 143
    },
    {
      "id": "unknown-method",
      "verdict": "verified",
      "detail": "2/2 field(s) as documented",
      "ms": 80,
      "exit_code": 0,
      "output_digest": "sha256:fbfa23c146f063b943e34bd80d04e4442882a30c90e4555afded2ac8db308ddd",
      "output_bytes": 94
    },
    {
      "id": "guarded-table",
      "verdict": "verified",
      "detail": "1/1 expected string(s) present",
      "ms": 1155,
      "exit_code": 0,
      "output_digest": "sha256:7d3d3a0aef146e08c1b655c3f28c0b20c339f41a127b75f318ad9c2469d48e83",
      "output_bytes": 49
    },
    {
      "id": "one-grant",
      "verdict": "verified",
      "detail": "1/1 expected string(s) present",
      "ms": 1121,
      "exit_code": 0,
      "output_digest": "sha256:864bb928a5a0c2286c05362b0ac1abc6eb39ffa230957710a85ba2339a67a114",
      "output_bytes": 48
    },
    {
      "id": "decision-branches",
      "verdict": "verified",
      "detail": "2/2 expected string(s) present",
      "ms": 1067,
      "exit_code": 0,
      "output_digest": "sha256:d39c630138daf7606477d86a55e3abbf098ebbbcd1a7a1e640f75a513482148f",
      "output_bytes": 614
    },
    {
      "id": "reproduce-evidence",
      "verdict": "verified",
      "detail": "1/1 expected string(s) present",
      "ms": 1101,
      "exit_code": 0,
      "output_digest": "sha256:b1e4fc86b8ce67dd2c2800a0d19378cb0fb28b06899a768fc9a1e30b7bef6908",
      "output_bytes": 231
    },
    {
      "id": "analysis-is-not-permission",
      "verdict": "verified",
      "detail": "5/5 field(s) as documented",
      "ms": 232,
      "exit_code": 0,
      "output_digest": "sha256:757bcc77079dab7b15d9e947e3fbf343773e15242d776cb2328d8623d5738fe1",
      "output_bytes": 6678
    }
  ],
  "does_not_prove": [
    "That a reader ran these commands, or that they would get this on their machine. It records that THIS runner did, from THIS environment, on this date.",
    "That a verified proof is a correct claim. It is agreement between a live surface and a published expectation — both of which we wrote.",
    "Anything about a proof marked skipped. A rate limit or a DNS failure is not evidence in either direction, which is why skipped never moves a badge."
  ]
}