{
  "report": "Reference implementation suite (LOG-03)",
  "id": "reference-core",
  "component": "Continuous MMR transparency log + R2 receipt core",
  "suite_file": "test/run-all.mjs",
  "suite_file_sha256": "338afb23e3e4ffdd93b9b0b7caa0e0b49c42666a9e182ff48a3b61319fe1d116",
  "result": {
    "passed": 195,
    "failed": 0,
    "skipped": 0,
    "unit": "assertions",
    "suites": 13,
    "status": "PASS"
  },
  "detail": "test.mjs 18 \u00b7 keyreg 6 \u00b7 interop 13 \u00b7 groupA 24 \u00b7 groupB 18 \u00b7 groupC 18 \u00b7 groupD 18 \u00b7 groupE 20 \u00b7 groupF 20 \u00b7 groupG 16 \u00b7 H2a ok(8 props) \u00b7 H2b 15 \u00b7 H3a 9",
  "note": "203 counting test_H2a_property.mjs's 8 property-assertions (reported as 'ok'). Plus H-1 adversarial fuzz: 404,000 cases (malleability / downgrade / Merkle-forgery), 0 succeeded.",
  "what_it_proves": "The full R2 v1.1 reference suite passes across all 13 sub-suites from a clean checkout; the append-and-prove path is correct with no counterexample found.",
  "what_it_does_not_prove": "That the AI action a receipt describes was correct or wise \u2014 only that the receipt is well-formed and unmodified.",
  "raw_excerpt": "$ node test/run-all.mjs\n\u2713 test.mjs 18 \u00b7 keyreg 6 \u00b7 interop 13 \u00b7 groupA 24 \u00b7 groupB 18 \u00b7 groupC 18\n\u2713 groupD 18 \u00b7 groupE 20 \u00b7 groupF 20 \u00b7 groupG 16 \u00b7 H2a ok \u00b7 H2b 15 \u00b7 H3a 9\nALL REFERENCE SUITES GREEN",
  "frozen_tag": "audit-tob-v1.1.0",
  "commit": "697f339",
  "reproduced_utc": "2026-07-27",
  "node": "v22.22.3",
  "repo": "github.com/DCS-LabsAI/dcs-rseries-core",
  "prod_dependencies": 0,
  "reproduced_by": "DCS Labs \u2014 live reproduction from clean checkout",
  "posture": "ground-demonstrated; not externally audited",
  "non_claim": "Post-quantum signature: the current R-Series hybrid profile signs the post-quantum leg with real ML-DSA-65. Key custody: a software signer \u2014 hardware-backed HSM/KMS custody is a separate deployment control, is not deployed here, and no FIPS-validated module is claimed. Not independently audited by external third parties.",
  "status": "SUPERSEDED \u2014 27 Jul 2026 baseline (audit-tob-v1.1.0 \u00b7 697f339). Retained as dated historical evidence. This record predates the C1\u2013C2.9 internal remediation programme and does not describe the current implementation. Current record: internal-assurance-c2.9 (DCS_RSeries_ReferenceCore_Record_C2.9.json)."
}