{
  "data": {
    "generated_at": "2026-08-01T19:51:34.875Z",
    "manifest_id": 1,
    "source_hash": "f412a8eb436b066aa86589f1809316a5b2a7dc8b651c5902188f87037c860c9b",
    "all_nine_checks_proven": true,
    "scenarios": [
      {
        "id": "C1",
        "description": "identity leaked verbatim into a public summary (nested field injected)",
        "shipped_failure_cited": "production identity-leak incidents in weekly-tender-sync.mjs's pre-2026-07-31 gate rounds",
        "clean_pass": true,
        "clean_evidence": {
          "rows_seen": 2100,
          "forbidden_keys": [],
          "leak_gate_hits": []
        },
        "corrupted_caught": true,
        "corrupted_evidence": {
          "rows_seen": 2100,
          "forbidden_keys": [],
          "leak_gate_hits": [
            {
              "name": "EN org token: Hospital Authority",
              "value": "Hospital Authority"
            }
          ]
        },
        "proof_valid": true
      },
      {
        "id": "C2",
        "description": "banner reworded to imply concealment — zero forbidden tokens, still a meaning leak",
        "shipped_failure_cited": "the real 2026 production banner: \"the formal reference and the exact deadline have been removed\" — zero pattern hits, caught only by Raymond reading the page",
        "clean_pass": true,
        "clean_evidence": {
          "actual_hash": "e142b7e9fb358bc1584f2106f879d6dcbe7cd329e3f9c1ff2e2b83a36baed9a3",
          "expected_hash": "e142b7e9fb358bc1584f2106f879d6dcbe7cd329e3f9c1ff2e2b83a36baed9a3",
          "actual_text": "Pre-contract supply requirement summary: scope, quantities, specifications, pricing basis, delivery terms and required submissions. Full specifications and appendices are provided after the cooperation agreement is signed."
        },
        "corrupted_caught": true,
        "corrupted_evidence": {
          "actual_hash": "ce19506f4aa661edb3cbe4d16814236265b3a0507dfc1bcfeb345dd9cf89779b",
          "expected_hash": "e142b7e9fb358bc1584f2106f879d6dcbe7cd329e3f9c1ff2e2b83a36baed9a3",
          "actual_text": "Pre-contract supply requirement summary: scope, quantities, specifications (the buyer identity and exact deadline have been withheld), pricing basis, delivery terms and required submissions. Full specifications and appendices are provided after the cooperation agreement is signed."
        },
        "proof_valid": true
      },
      {
        "id": "C3",
        "description": "64 open rows silently swapped for 64 already-closed rows — total count unchanged",
        "shipped_failure_cited": "64 open tenders invisible while count checks passed (production incident)",
        "clean_pass": true,
        "clean_evidence": {
          "source_open_count": 426,
          "published_open_count": 426,
          "counts_matched": true,
          "missing_ids": [],
          "missing_count": 0,
          "unexpected_ids": [],
          "unexpected_count": 0
        },
        "corrupted_caught": true,
        "corrupted_evidence": {
          "source_open_count": 426,
          "published_open_count": 362,
          "counts_matched": false,
          "missing_ids": [
            "AT-SG-2630-466",
            "AT-GB-2628-085",
            "AT-GB-2628-114",
            "AT-SG-2630-118",
            "AT-GB-2628-106",
            "AT-GB-2630-337",
            "AT-SG-2630-454",
            "AT-CA-2629-021",
            "AT-GB-2628-022",
            "AT-GB-2628-013",
            "AT-EU-2629-150",
            "AT-CA-2629-081",
            "AT-HK-2630-288",
            "AT-AU-2630-094",
            "AT-EU-2630-256",
            "AT-SG-2629-060",
            "AT-CA-2630-137",
            "AT-GB-2628-024",
            "AT-SG-2630-525",
            "AT-EU-2629-103"
          ],
          "missing_count": 64,
          "unexpected_ids": [],
          "unexpected_count": 0
        },
        "count_only_check_would_have_passed": true,
        "proof_valid": true
      },
      {
        "id": "C4",
        "description": "27 rows given a non-string public_id (null / number) — a permissive client silently drops them",
        "shipped_failure_cited": "asaptic-tender-web/src/App.tsx:129-161 parseRequirement(): typeof id !== \"string\" -> null -> filtered out, 27 blank pages",
        "clean_pass": true,
        "clean_evidence": {
          "checked": 2100,
          "bad_count": 0,
          "bad_sample": []
        },
        "corrupted_caught": true,
        "corrupted_evidence": {
          "checked": 2100,
          "bad_count": 27,
          "bad_sample": [
            {
              "row_public_id": "(no public_id)",
              "bad_value": null
            },
            {
              "row_public_id": 12346,
              "bad_value": 12346
            },
            {
              "row_public_id": "(no public_id)",
              "bad_value": null
            },
            {
              "row_public_id": 12348,
              "bad_value": 12348
            },
            {
              "row_public_id": "(no public_id)",
              "bad_value": null
            },
            {
              "row_public_id": 12350,
              "bad_value": 12350
            },
            {
              "row_public_id": "(no public_id)",
              "bad_value": null
            },
            {
              "row_public_id": 12352,
              "bad_value": 12352
            },
            {
              "row_public_id": "(no public_id)",
              "bad_value": null
            },
            {
              "row_public_id": 12354,
              "bad_value": 12354
            }
          ]
        },
        "proof_valid": true
      },
      {
        "id": "C5",
        "description": "heartbeat gap inflated by 400h to simulate a dark pipeline",
        "shipped_failure_cited": "deepcheck_surfaces.py:146-149 flat `age <= 8` cliff reported PASS for 8 dark days",
        "clean_pass": true,
        "clean_evidence": {
          "cadence_bound_hours": 72.6,
          "last_heartbeat_age_hours": 2.4,
          "last_data_age_hours": 2.4,
          "alive": true,
          "data_fresh": true,
          "status": "alive_and_fresh",
          "note": "production's own publish gate (weekly-tender-sync.mjs:1039) already refuses to WRITE stale data (verified byte-identical, --allow-stale not passed by the refresh script) — this check targets the separate MONITORING gap (deepcheck_surfaces.py's flat `age <= 8` cliff), not a live publish-time bypass."
        },
        "corrupted_caught": true,
        "corrupted_evidence": {
          "cadence_bound_hours": 72.6,
          "last_heartbeat_age_hours": 402.4,
          "last_data_age_hours": 2.4,
          "alive": false,
          "data_fresh": true,
          "status": "dark",
          "note": "production's own publish gate (weekly-tender-sync.mjs:1039) already refuses to WRITE stale data (verified byte-identical, --allow-stale not passed by the refresh script) — this check targets the separate MONITORING gap (deepcheck_surfaces.py's flat `age <= 8` cliff), not a live publish-time bypass."
        },
        "proof_valid": true,
        "note": "the flat-cliff BYPASS itself is already fixed in production (coordinator-verified, weekly-tender-sync.mjs:1039 unchanged, --allow-stale not passed) — this check is a forward-looking replacement for the monitoring gap, not a live-hole mitigation."
      },
      {
        "id": "C6",
        "description": "source_hash / manifest_id stripped from the response",
        "shipped_failure_cited": "0 of 43 live pages carried any derivation provenance",
        "clean_pass": true,
        "clean_evidence": {
          "has_source_hash": true,
          "has_manifest_id": true,
          "matches_manifest": true,
          "response_source_hash": "f412a8eb436b066aa86589f1809316a5b2a7dc8b651c5902188f87037c860c9b",
          "manifest_source_hash": "f412a8eb436b066aa86589f1809316a5b2a7dc8b651c5902188f87037c860c9b"
        },
        "corrupted_caught": true,
        "corrupted_evidence": {
          "has_source_hash": false,
          "has_manifest_id": false,
          "matches_manifest": false,
          "response_source_hash": null,
          "manifest_source_hash": "f412a8eb436b066aa86589f1809316a5b2a7dc8b651c5902188f87037c860c9b"
        },
        "proof_valid": true
      },
      {
        "id": "C7",
        "description": "asaptic_id re-added to one public row (the correlation vector)",
        "shipped_failure_cited": "AT-HK-2629-261: mandatory model number + category resolves via public search to a named department, correlatable through the shared asaptic_id",
        "clean_pass": true,
        "clean_evidence": {
          "checked": 2100,
          "leaked_count": 0,
          "leaked_sample": []
        },
        "corrupted_caught": true,
        "corrupted_evidence": {
          "checked": 2100,
          "leaked_count": 1,
          "leaked_sample": [
            {
              "public_id": "dd499b69-e990-438d-b2c7-7303e906d9b9",
              "reason": "asaptic_id key present in public row"
            }
          ]
        },
        "proof_valid": true
      },
      {
        "id": "C8",
        "description": "primary R2 object missing — compare the fixed adapter against a faithful reproduction of the production pattern",
        "shipped_failure_cited": "asaptic-web/_worker.js:100-125 — catch(e) { // swallow } then falls through to ASSETS.fetch with no signal",
        "clean_pass": null,
        "corrupted_caught": true,
        "corrupted_evidence": {
          "fixed_adapter_alerted": true,
          "fixed_degraded_reason": "primary R2 object missing — served the baked last-known-good fallback snapshot instead of erroring",
          "legacy_adapter_silently_swallowed": true,
          "legacy_adapter_response_shape": {
            "ok": true,
            "degraded": false,
            "degraded_reason": null
          }
        },
        "proof_valid": true
      },
      {
        "id": "C9",
        "description": "every check fed a deliberately empty subject must report ok:false with reason no_subject_visible, never a vacuous ok:true",
        "shipped_failure_cited": "\"a check that cannot see its subject reports clean\" — happened 3x in one production night",
        "clean_pass": null,
        "corrupted_caught": true,
        "corrupted_evidence": {
          "empty_subject_results": [
            {
              "id": "C1",
              "ok": false,
              "reason": "no_subject_visible"
            },
            {
              "id": "C2",
              "ok": false,
              "reason": "no_subject_visible"
            },
            {
              "id": "C3",
              "ok": false,
              "reason": "no_subject_visible"
            },
            {
              "id": "C4",
              "ok": false,
              "reason": "no_subject_visible"
            },
            {
              "id": "C5",
              "ok": false,
              "reason": "no_subject_visible"
            },
            {
              "id": "C6",
              "ok": false,
              "reason": "no_subject_visible"
            },
            {
              "id": "C7",
              "ok": false,
              "reason": "no_subject_visible"
            }
          ]
        },
        "coverage_meta_check": {
          "id": "C9",
          "name": "checks_must_not_report_clean_on_empty_input",
          "ok": true,
          "reads": [
            "every other check's own ok + evidence.reason",
            "subjectSizes per check"
          ],
          "evidence": {
            "problems": [],
            "checks_audited": 7
          }
        },
        "proof_valid": true
      }
    ]
  },
  "meta": {
    "request_id": "0a56b4b4-e623-475d-9d9f-e657e6cc7512"
  },
  "error": null
}