{ "audited_zip": { "bytes": 80443, "members": 70, "path": "/mnt/data/CRLP_R35_LIVE_EVIDENCE_5bd329081bebd6d5.zip", "sha256": "710f94b194d5ad7e9f3c480906eb45b7043cbbdc9aec46f9167769a14ecdf4d5" }, "check_count": { "passed": 53, "total": 53 }, "checks": { "all_json_or_identified_jsonl_parseable": true, "attestation_custody_disclosed": true, "attestation_no_private_keys": true, "attestation_public_roots_valid": true, "attestation_statement_exact_match": true, "attestation_threshold_two_valid_signatures": true, "baseline_hash_enforced_by_static_audit": true, "baseline_hash_enforced_by_tests": true, "baseline_hash_recorded_in_payload_hash_inventory": true, "baseline_hash_recorded_in_payload_manifest": true, "baseline_hash_recorded_in_sbom": true, "baseline_statement_hash_mapped_to_named_parent_zip": true, "candidate_clean_extraction_verified": true, "candidate_package_gates_all_pass": true, "candidate_package_receipt_schema": true, "candidate_package_reproducible": true, "evidence_manifest_67_entries": true, "evidence_manifest_all_hashes_match": true, "evidence_package_exact_closure": true, "exactly_one_allowed_terminal_per_invocation": true, "final_gate_17_checks_all_true": true, "final_gate_no_errors": true, "final_gate_pass": true, "final_gate_schema": true, "final_gate_source_hashes_match": true, "final_gate_two_audited_runs": true, "four_ledgers_present": true, "four_live_effect_results_verified": true, "guard_run_receipt_manifest_link": true, "guard_run_receipt_runall_link": true, "host_network_internal_exact_topology": true, "host_network_v4_decisive_fields_valid": true, "host_network_v4_pass": true, "independent_scan_no_aws_access_keys": true, "independent_scan_no_long_password_assignments": true, "independent_scan_no_postgres_uri_passwords": true, "independent_scan_no_private_key_markers": true, "ledger_previous_hash_continuity": true, "run_exit_zero": true, "run_receipt_attempt_one": true, "run_receipt_intentionally_pre_audit": true, "runtime_destroy_pass": true, "secret_cleanup_pass": true, "service_stop_pass": true, "single_run_guard_attempt_one": true, "statement_artifact_count_matches_manifest": true, "statement_final_gate_hash_matches": true, "statement_manifest_hash_matches": true, "zip_crc_integrity": true, "zip_member_count_70": true, "zip_no_duplicate_names": true, "zip_no_unsafe_paths": true, "zip_sha256_matches_discovery": true }, "claims_not_permitted": [ "NVIDIA certified, approved, adopted, or production ready.", "Enterprise proven, distributed validation, or no-bypass guarantee.", "Independent custody or third-party certification of this evidence package.", "Nationwide or universal coverage beyond the declared single-host trusted-runner boundary." ], "claims_permitted": [ "CRLP R3.5 v0.2.5 RC01 completed one live AWS execution with run_all exit 0.", "The final composite gate passed 17/17 checks and independently rechecked source hashes.", "Host-network verification v4 passed using Docker Engine runtime inspection and controlled classification of Docker Compose v5.3.1 invalid IP:0.", "The evidence ZIP contains 67 manifest-bound artifacts plus manifest, statement, and attestation; all manifest hashes match.", "Two Ed25519 signatures satisfy the declared 2-of-3 internal threshold.", "Runtime state and secrets were destroyed before evidence sealing.", "The evidence statement baseline hash maps to BASELINE/CRLP_PRODUCT_CORE_V0_1_RUNTIME_ALPHA_CANDIDATE_R3_5_20260728.zip and is enforced by source audit/tests." ], "details": { "all_json_or_identified_jsonl_parseable": { "bad_json": [], "jsonl": [ { "objects": 3, "path": "system/COMPOSE_PS_BEFORE_STOP.json" } ] }, "attestation_public_roots_valid": { "crlp-r35-live-ephemeral-1": true, "crlp-r35-live-ephemeral-2": true, "crlp-r35-live-ephemeral-3": true }, "attestation_threshold_two_valid_signatures": { "crlp-r35-live-ephemeral-1": true, "crlp-r35-live-ephemeral-2": true }, "baseline_provenance_resolution": { "chain_context": { "evidence_zip_sha256": "710f94b194d5ad7e9f3c480906eb45b7043cbbdc9aec46f9167769a14ecdf4d5", "rc01_candidate_zip_sha256_from_receipt": "e15f40eb4dc53e254518aeb41543d91b59c84c712b8b50e96889c9b74d37d22d", "rc01_manifest_sha256_from_receipt": "174a0099e8c5cc1108eda2f420e5f4950746205b97ebd3015d4879b872f8dee6", "run_guard_manifest_sha256": "174a0099e8c5cc1108eda2f420e5f4950746205b97ebd3015d4879b872f8dee6", "run_receipt_manifest_sha256": "174a0099e8c5cc1108eda2f420e5f4950746205b97ebd3015d4879b872f8dee6", "v024_outer_source_zip_sha256_documented_in_handoff": "6359834b8dc70b2b007d5d8cbd80f5b1fa00a276b55ae76bb4d82a4b5383dee3" }, "corroborating_sources": [ { "artifact": "MANIFEST_SHA256.txt", "assertion": "maps the hash to the named BASELINE path", "sha256": "f235b21edadd2a8dd9d53706e8413660cd7fe6738ccc977c2d94719c70e01e6f" }, { "artifact": "BASELINE_V024_PAYLOAD_SHA256.txt", "assertion": "maps the hash to the same named BASELINE path", "sha256": "72b4023e242d38b5417c1e0a4b3febbe6834ce13922311c8e0f98df189ef34bc" }, { "artifact": "tools/audit_kit.py", "assertion": "recomputes the named baseline ZIP hash and requires equality", "sha256": "2c50a36cc0db6aabcec50610e7534a68b2a2385abe628641baf04b5ed30925c4" }, { "artifact": "tests/test_kit.py", "assertion": "requires BASELINE.json parent_source_zip_sha256 equality", "sha256": "0efbe5442a81a5287275b0c0c86e1f92521411c2a7cd43abf3ca6c96df03ba83" }, { "artifact": "SBOM.cyclonedx.json", "assertion": "records the parent baseline hash in the SBOM", "sha256": "7a4653ce279d208f3d7a81219890cfde15f9f03fe6b79af924a8e55a5e350a24" } ], "created_at_utc": "2026-07-31T10:30:00Z", "evidence_statement_baseline_zip_sha256": "3a92398eeb7c1c545bc30e08ae44fca9a8f4295a4126a5d0e05e5f1fdbd0db9f", "identified_artifact": { "logical_path": "BASELINE/CRLP_PRODUCT_CORE_V0_1_RUNTIME_ALPHA_CANDIDATE_R3_5_20260728.zip", "role": "parent CRLP Product Core runtime alpha candidate embedded in the live kit baseline", "sha256": "3a92398eeb7c1c545bc30e08ae44fca9a8f4295a4126a5d0e05e5f1fdbd0db9f" }, "limitations": [ "The source-to-live chain was operated by the same operator; independent custody is not demonstrated.", "The outer v0.2.4 and RC01 ZIP bytes were not both included in the five-file final evidence upload, although their hashes and receipts are documented." ], "resolution": "RESOLVED_BASELINE_IDENTITY", "schema_version": "crlp-r35-baseline-provenance-resolution-v1", "supersedes_audit_finding": "F-002 in crlp-r35-v025-independent-final-audit-v1" }, "evidence_manifest_67_entries": 67, "evidence_manifest_all_hashes_match": [], "evidence_package_exact_closure": { "missing": [], "unmanifested": [ "EVIDENCE_ATTESTATION.json", "EVIDENCE_MANIFEST_SHA256.txt", "EVIDENCE_STATEMENT.json" ] }, "exactly_one_allowed_terminal_per_invocation": [ { "events": 5, "invocation_terminals": { "7c38962a-b768-43ca-8d18-33cacdc5b258": [ "VERIFIED" ] }, "path": "live-load-20260731T092319-14751-54514/real-infrastructure/postgres/control/ledger.sqlite3" }, { "events": 5, "invocation_terminals": { "b48a33f2-1931-4439-99d0-15a1552c9f80": [ "VERIFIED" ] }, "path": "live-load-20260731T092319-14751-54514/real-infrastructure/triton/control/ledger.sqlite3" }, { "events": 5, "invocation_terminals": { "58bc7c92-5eaf-49b0-b5a4-f4568b67d11f": [ "VERIFIED" ] }, "path": "live-unload-20260731T092322-24211-54514/real-infrastructure/postgres/control/ledger.sqlite3" }, { "events": 5, "invocation_terminals": { "697f0546-c669-4902-9dc0-172b7f223d68": [ "VERIFIED" ] }, "path": "live-unload-20260731T092322-24211-54514/real-infrastructure/triton/control/ledger.sqlite3" } ], "final_gate_17_checks_all_true": { "all_images_present_and_identified": true, "all_required_artifacts_present": true, "all_required_json_parseable": true, "certificate_inventory_complete": true, "direct_live_run_reports_verified": true, "healthy_load_and_unload_summary_pass": true, "host_bypass_absent": true, "password_only_certless_postgres_probe_rejected": true, "pki_preparation_attested": true, "private_key_scan_empty": true, "rendered_compose_validated": true, "runtime_secrets_destroyed": true, "runtime_state_destroyed": true, "sensitive_value_scan_empty": true, "service_logs_archived": true, "services_proven_stopped": true, "untrusted_boundary_attacks_rejected": true }, "final_gate_source_hashes_match": {}, "final_gate_two_audited_runs": [ "LOAD", "UNLOAD" ], "four_ledgers_present": 4, "four_live_effect_results_verified": [ { "pass": true, "path": "live-load-20260731T092319-14751-54514/real-infrastructure/postgres/POSTGRES_LIVE_RESULT.json", "status": "EXECUTED", "terminal": "VERIFIED" }, { "pass": true, "path": "live-load-20260731T092319-14751-54514/real-infrastructure/triton/TRITON_LIVE_RESULT.json", "status": "EXECUTED", "terminal": "VERIFIED" }, { "pass": true, "path": "live-unload-20260731T092322-24211-54514/real-infrastructure/postgres/POSTGRES_LIVE_RESULT.json", "status": "EXECUTED", "terminal": "VERIFIED" }, { "pass": true, "path": "live-unload-20260731T092322-24211-54514/real-infrastructure/triton/TRITON_LIVE_RESULT.json", "status": "EXECUTED", "terminal": "VERIFIED" } ], "host_network_v4_decisive_fields_valid": { "postgres-r35": true, "triton-proxy-r35": true, "triton-r35": true }, "independent_scan_no_aws_access_keys": [], "independent_scan_no_long_password_assignments": [], "independent_scan_no_postgres_uri_passwords": [], "independent_scan_no_private_key_markers": [], "statement_final_gate_hash_matches": { "actual": "c5280ae4154b69e769c9a097cb76de4691bab0c3d1614d0cbaca922cbee01966", "statement": "c5280ae4154b69e769c9a097cb76de4691bab0c3d1614d0cbaca922cbee01966" }, "statement_manifest_hash_matches": { "actual": "5bd329081bebd6d5d809e34164244d00900007f0c86ec549216a75238e69c377", "statement": "5bd329081bebd6d5d809e34164244d00900007f0c86ec549216a75238e69c377" }, "zip_member_count_70": 70, "zip_no_unsafe_paths": [], "zip_sha256_matches_discovery": "710f94b194d5ad7e9f3c480906eb45b7043cbbdc9aec46f9167769a14ecdf4d5" }, "findings": [ { "evidence": [ { "objects": 3, "path": "system/COMPOSE_PS_BEFORE_STOP.json" } ], "id": "F-001", "impact": "Herramientas que usen json.load() fallarán aunque el contenido por línea sea válido y esté ligado por manifiesto. No afecta los 17 checks ni los hashes del gate final.", "recommendation": "En la siguiente versión renombrar a .jsonl o emitir un arreglo JSON; preservar este artefacto original.", "severity": "LOW", "title": "Archivo .json contiene JSON Lines, no un documento JSON único" }, { "evidence": { "custody": "same-operator-ephemeral-roots", "independent_custody": false, "threshold": 2 }, "id": "L-001", "impact": "Las firmas prueban integridad y umbral interno, no validación por tercero independiente.", "recommendation": "Mantener la afirmación como sello interno de preproducción; para mayor fuerza, usar KMS/HSM o custodios independientes en una futura versión.", "severity": "LIMITATION", "title": "Custodia de firmas no independiente" }, { "evidence": { "chain_context": { "evidence_zip_sha256": "710f94b194d5ad7e9f3c480906eb45b7043cbbdc9aec46f9167769a14ecdf4d5", "rc01_candidate_zip_sha256_from_receipt": "e15f40eb4dc53e254518aeb41543d91b59c84c712b8b50e96889c9b74d37d22d", "rc01_manifest_sha256_from_receipt": "174a0099e8c5cc1108eda2f420e5f4950746205b97ebd3015d4879b872f8dee6", "run_guard_manifest_sha256": "174a0099e8c5cc1108eda2f420e5f4950746205b97ebd3015d4879b872f8dee6", "run_receipt_manifest_sha256": "174a0099e8c5cc1108eda2f420e5f4950746205b97ebd3015d4879b872f8dee6", "v024_outer_source_zip_sha256_documented_in_handoff": "6359834b8dc70b2b007d5d8cbd80f5b1fa00a276b55ae76bb4d82a4b5383dee3" }, "corroborating_sources": [ { "artifact": "MANIFEST_SHA256.txt", "assertion": "maps the hash to the named BASELINE path", "sha256": "f235b21edadd2a8dd9d53706e8413660cd7fe6738ccc977c2d94719c70e01e6f" }, { "artifact": "BASELINE_V024_PAYLOAD_SHA256.txt", "assertion": "maps the hash to the same named BASELINE path", "sha256": "72b4023e242d38b5417c1e0a4b3febbe6834ce13922311c8e0f98df189ef34bc" }, { "artifact": "tools/audit_kit.py", "assertion": "recomputes the named baseline ZIP hash and requires equality", "sha256": "2c50a36cc0db6aabcec50610e7534a68b2a2385abe628641baf04b5ed30925c4" }, { "artifact": "tests/test_kit.py", "assertion": "requires BASELINE.json parent_source_zip_sha256 equality", "sha256": "0efbe5442a81a5287275b0c0c86e1f92521411c2a7cd43abf3ca6c96df03ba83" }, { "artifact": "SBOM.cyclonedx.json", "assertion": "records the parent baseline hash in the SBOM", "sha256": "7a4653ce279d208f3d7a81219890cfde15f9f03fe6b79af924a8e55a5e350a24" } ], "created_at_utc": "2026-07-31T10:30:00Z", "evidence_statement_baseline_zip_sha256": "3a92398eeb7c1c545bc30e08ae44fca9a8f4295a4126a5d0e05e5f1fdbd0db9f", "identified_artifact": { "logical_path": "BASELINE/CRLP_PRODUCT_CORE_V0_1_RUNTIME_ALPHA_CANDIDATE_R3_5_20260728.zip", "role": "parent CRLP Product Core runtime alpha candidate embedded in the live kit baseline", "sha256": "3a92398eeb7c1c545bc30e08ae44fca9a8f4295a4126a5d0e05e5f1fdbd0db9f" }, "limitations": [ "The source-to-live chain was operated by the same operator; independent custody is not demonstrated.", "The outer v0.2.4 and RC01 ZIP bytes were not both included in the five-file final evidence upload, although their hashes and receipts are documented." ], "resolution": "RESOLVED_BASELINE_IDENTITY", "schema_version": "crlp-r35-baseline-provenance-resolution-v1", "supersedes_audit_finding": "F-002 in crlp-r35-v025-independent-final-audit-v1" }, "id": "R-001", "impact": "The earlier audit incorrectly treated baseline_zip_sha256 as unidentified. Source manifests, static audit code, tests, and SBOM map it to a named parent baseline ZIP.", "recommendation": "Preserve audit v1 for traceability and use audit v2 as the corrected current assessment.", "severity": "RESOLVED", "title": "Audit v1 baseline identity finding corrected" }, { "evidence": { "custody": "same-operator-ephemeral-roots", "independent_custody": false }, "id": "L-002", "impact": "Baseline identity is resolved, but the full source-to-live custody chain is not independently attested by a third party or external key custodian.", "recommendation": "For a future enterprise pilot, anchor release and evidence manifests in KMS/HSM or independent organizational custodians.", "severity": "LIMITATION", "title": "Full custody chain is same-operator rather than independently witnessed" } ], "schema_version": "crlp-r35-v025-independent-final-audit-v2", "supersedes": { "json_sha256": "0f5d6b96dba9c5ea0abec8947f12d3899b4a3501f46dcc600a37da500f6f9065", "markdown_sha256": "6e5d640d4a4e3b3caa1c3785c17cf6788ed414fddb72a34b6b1fc01eef341c69", "reason": "Corrects F-002 after locating baseline identity evidence in source manifests, audit code, tests, and SBOM.", "schema_version": "crlp-r35-v025-independent-final-audit-v1" }, "verdict": { "baseline_identity": "PASS", "independent_custody": "NOT_DEMONSTRATED", "internal_cryptographic_evidence_seal": "PASS", "recommended_state": "SEALED_LIVE_PILOT_EVIDENCE_WITH_DECLARED_LIMITATIONS", "source_to_live_custody": "DOCUMENTED_SAME_OPERATOR", "technical_live_pilot_gate": "PASS" } }