{
  "bundle_version": "kuberna-elizaos-conformance-v1",
  "description": "Kuberna-side executable interoperability fixtures for the elizaOS agent certification discussion (#9810). Synthetic schema/conformance vectors only \u2014 not certification of execution quality, not an adoption claim.",
  "pinned": {
    "author": "kawacukennedy/kuberna-labs",
    "commit": "fada367f122adf10dcd0b8c63dba98df7d06a2d6",
    "canonical_receipt": "sdk/src/verify/fixtures/authority-receipt.json",
    "canonical_preimage": "sdk/src/verify/fixtures/authority-preimage.json"
  },
  "cases": [
    {
      "id": "positive-authority-work-link",
      "expected": "pass",
      "authority": {
        "receipt_type": "chain_derivable",
        "scope_version": "delegation-scope-v1",
        "fact_id": "0x82c33017978a70f0cf08ecc45df9ae81107410d466f0e5205b426981466baaad",
        "subject": {
          "erc8004_token_id": "10042",
          "agent_address": "0x1B2c3D4E5F6a7B8C9D0E1F2a3B4c5D6e7F809a1B"
        },
        "derivation": "jcs-sha256 over authority-preimage.json (version field excluded per AIPOU envelope convention)"
      },
      "work": {
        "receipt_type": "issuer_asserted",
        "scheme": "aipou-receipt-v1",
        "preActionFactId": "0x82c33017978a70f0cf08ecc45df9ae81107410d466f0e5205b426981466baaad",
        "coverage": {
          "scope": "agent-intent-executions",
          "observed_n": 12,
          "as_of": "2026-08-22T00:00:00Z",
          "complete": "enumerated"
        }
      },
      "assertion": "authority.factId === work.preActionFactId; trust-model boundary (chain_derivable vs issuer_asserted) preserved; coverage.scope declares what the claim ranges over"
    },
    {
      "id": "negative-factlink-drift",
      "expected": "fail",
      "authority": {
        "receipt_type": "chain_derivable",
        "scope_version": "delegation-scope-v1",
        "fact_id": "0x82c33017978a70f0cf08ecc45df9ae81107410d466f0e5205b426981466baaad",
        "subject": {
          "erc8004_token_id": "10042",
          "agent_address": "0x1B2c3D4E5F6a7B8C9D0E1F2a3B4c5D6e7F809a1B"
        },
        "derivation": "jcs-sha256 over authority-preimage.json (version field excluded per AIPOU envelope convention)"
      },
      "work": {
        "receipt_type": "issuer_asserted",
        "scheme": "aipou-receipt-v1",
        "preActionFactId": "0xdeadbeef00000000000000000000000000000000000000000000000000000000",
        "coverage": {
          "scope": "agent-intent-executions",
          "observed_n": 12,
          "as_of": "2026-08-22T00:00:00Z",
          "complete": "enumerated"
        }
      },
      "assertion": "one-edit mutation of positive-authority-work-link: only work.preActionFactId changed (same 32-byte length, different value). Mismatch fails closed before subject/version checks"
    },
    {
      "id": "negative-chain-derivable-with-issuer-fields",
      "expected": "fail",
      "authority": {
        "receipt_type": "chain_derivable",
        "scope_version": "delegation-scope-v1",
        "fact_id": "0x82c33017978a70f0cf08ecc45df9ae81107410d466f0e5205b426981466baaad",
        "subject": {
          "erc8004_token_id": "10042",
          "agent_address": "0x1B2c3D4E5F6a7B8C9D0E1F2a3B4c5D6e7F809a1B"
        },
        "collectorSignature": "0x0badc0de00",
        "collectorKeyId": "aipou-collector-001"
      },
      "assertion": "chain_derivable authority carrying issuer_asserted fields (collectorSignature, collectorKeyId) fails closed \u2014 trust-model downgrade detection"
    },
    {
      "id": "negative-unknown-scheme",
      "expected": "fail",
      "mutation_of": "positive-authority-work-link",
      "mutated_field": "work.scheme",
      "authority": {
        "receipt_type": "chain_derivable",
        "scope_version": "delegation-scope-v1",
        "fact_id": "0x82c33017978a70f0cf08ecc45df9ae81107410d466f0e5205b426981466baaad",
        "subject": {
          "erc8004_token_id": "10042",
          "agent_address": "0x1B2c3D4E5F6a7B8C9D0E1F2a3B4c5D6e7F809a1B"
        },
        "derivation": "jcs-sha256 over authority-preimage.json (version field excluded per AIPOU envelope convention)"
      },
      "work": {
        "receipt_type": "issuer_asserted",
        "scheme": "unregistered-scheme-v99",
        "preActionFactId": "0x82c33017978a70f0cf08ecc45df9ae81107410d466f0e5205b426981466baaad",
        "coverage": {
          "scope": "agent-intent-executions",
          "observed_n": 12,
          "as_of": "2026-08-22T00:00:00Z",
          "complete": "enumerated"
        }
      },
      "assertion": "one-edit mutation of positive-authority-work-link: only work.scheme changed to unregistered value. Same issuer, same key, same body, same canonicalisation \u2014 the only variable is the discriminant. Allow-list invariant: KNOWN.has(tag) is the accept path, everything else is reject."
    },
    {
      "id": "positive-degraded-coverage",
      "expected": "pass",
      "authority": {
        "receipt_type": "chain_derivable",
        "scope_version": "delegation-scope-v1",
        "fact_id": "0x82c33017978a70f0cf08ecc45df9ae81107410d466f0e5205b426981466baaad",
        "subject": {
          "erc8004_token_id": "10042",
          "agent_address": "0x1B2c3D4E5F6a7B8C9D0E1F2a3B4c5D6e7F809a1B"
        },
        "derivation": "jcs-sha256 over authority-preimage.json (version field excluded per AIPOU envelope convention)"
      },
      "work": {
        "receipt_type": "issuer_asserted",
        "scheme": "aipou-receipt-v1",
        "preActionFactId": "0x82c33017978a70f0cf08ecc45df9ae81107410d466f0e5205b426981466baaad",
        "coverage": {
          "scope": "agent-intent-executions",
          "observed_n": 0,
          "as_of": "2026-08-22T00:00:00Z",
          "complete": "unknown"
        }
      },
      "assertion": "coverage.complete: 'unknown' is reachable and not the default. Claim passes with degraded coverage \u2014 the consumer sees scope declared but no observation count. This proves the enum member is emitted, not just declared in the type."
    },
    {
      "id": "positive-chain-integrity",
      "expected": "pass",
      "authority": {
        "receipt_type": "chain_derivable",
        "scope_version": "delegation-scope-v1",
        "fact_id": "0x82c33017978a70f0cf08ecc45df9ae81107410d466f0e5205b426981466baaad",
        "subject": {
          "erc8004_token_id": "10042",
          "agent_address": "0x1B2c3D4E5F6a7B8C9D0E1F2a3B4c5D6e7F809a1B"
        },
        "chain_integrity": "valid",
        "link_signatures": "valid"
      },
      "assertion": "original chain: integrity valid, signatures valid \u2014 must pass. This is the control that makes the resealed negative meaningful."
    },
    {
      "id": "negative-resealed-chain",
      "expected": "fail",
      "mutation_of": "positive-chain-integrity",
      "mutated_field": "authority.link_signatures",
      "authority": {
        "receipt_type": "chain_derivable",
        "scope_version": "delegation-scope-v1",
        "fact_id": "0x82c33017978a70f0cf08ecc45df9ae81107410d466f0e5205b426981466baaad",
        "subject": {
          "erc8004_token_id": "10042",
          "agent_address": "0x1B2c3D4E5F6a7B8C9D0E1F2a3B4c5D6e7F809a1B"
        },
        "chain_integrity": "valid",
        "link_signatures": "invalid"
      },
      "assertion": "one-edit mutation of positive-chain-integrity: only link_signatures changed from valid to invalid. Chain where content is adjusted and hashes recomputed passes chain integrity but per-link signature verification fails \u2014 resealed chain rejected."
    }
  ]
}