{ "caught": 20, "total": 20, "escaped": 0, "attacks": [ {"id": 1, "desc": "delete N7 required field", "caught": true, "mechanism": "ENCODE_FAIL_CLOSED", "detail": "SEAL_INPUT_MISSING"}, {"id": 2, "desc": "add extra N7 field", "caught": true, "mechanism": "ENCODE_FAIL_CLOSED", "detail": "SEAL_INPUT_EXTRA"}, {"id": 3, "desc": "reorder N7 field", "caught": true, "mechanism": "ENCODE_FAIL_CLOSED", "detail": "SEAL_FIELD_ORDER_MISMATCH"}, {"id": 4, "desc": "wrong N7 domain tag", "caught": true, "mechanism": "ENCODE_FAIL_CLOSED", "detail": "SEAL_DOMAIN_TAG_MISMATCH"}, {"id": 5, "desc": "N7 binds N8 -> cycle", "caught": true, "mechanism": "ENCODE_FAIL_CLOSED", "detail": "SEAL_HASH_GRAPH_CYCLE"}, {"id": 6, "desc": "N8 missing N7", "caught": true, "mechanism": "ENCODE_FAIL_CLOSED", "detail": "SEAL_INPUT_MISSING"}, {"id": 7, "desc": "N8 wrong signer representation", "caught": true, "mechanism": "ENCODE_FAIL_CLOSED+VERIFY_MISMATCH", "detail": "inject=SEAL_FIELD_FORBIDDEN_BYTE; clean_forged_eq_canonical=False"}, {"id": 8, "desc": "N8 wrong timestamp format", "caught": true, "mechanism": "ENCODE_FAIL_CLOSED+VERIFY_MISMATCH", "detail": "inject=SEAL_FIELD_FORBIDDEN_BYTE; clean_forged_eq_canonical=False; semantic-format-validation=OUT_OF_CONTRACT_SCOPE(Codex-supplied)"}, {"id": 9, "desc": "P7 missing canonicalizer hash", "caught": true, "mechanism": "ENCODE_FAIL_CLOSED", "detail": "SEAL_INPUT_MISSING"}, {"id": 10, "desc": "P7 mutated canonicalizer hash", "caught": true, "mechanism": "VERIFY_MISMATCH", "detail": ""}, {"id": 11, "desc": "P7 mutated Packet V3 tree", "caught": true, "mechanism": "VERIFY_MISMATCH", "detail": ""}, {"id": 12, "desc": "prose-only P7 pin", "caught": true, "mechanism": "ENCODE_FAIL_CLOSED", "detail": "SEAL_PROSE_ONLY_PIN_REJECTED"}, {"id": 13, "desc": "spec.json drift from encoder", "caught": true, "mechanism": "DRIFT_DETECTED", "detail": "clean matches, tampered differs"}, {"id": 14, "desc": "spec.md claims a field not in encoder", "caught": true, "mechanism": "DRIFT_DETECTED", "detail": "clean matches encoder, +ghost_field differs"}, {"id": 15, "desc": "encoder extra authority field not in spec", "caught": true, "mechanism": "DRIFT_DETECTED", "detail": "an encoder roster with an extra field would not equal spec.json"}, {"id": 16, "desc": "fixture labelled as real seal", "caught": true, "mechanism": "GUARD_REJECT", "detail": "SEAL_FIXTURE_CLAIMS_REAL"}, {"id": 17, "desc": "owner authorization expanded to implementation", "caught": true, "mechanism": "ENCODE_FAIL_CLOSED", "detail": "SEAL_CONSTANT_FIELD_MISMATCH"}, {"id": 18, "desc": "production gate removed from checklist", "caught": true, "mechanism": "GUARD_REJECT", "detail": "SEAL_PRODUCTION_GATE_MISSING"}, {"id": 19, "desc": "unknown dependency edge added (N7->N8)", "caught": true, "mechanism": "CYCLE_DETECTED", "detail": "clean acyclic, injected edge -> cycle"}, {"id": 20, "desc": "hash manifest tamper", "caught": true, "mechanism": "VERIFY_MISMATCH", "detail": "tampered HASH_MANIFEST.txt"} ], "canonical_fixture_NOT_A_SEAL": { "N7": "6225f265155942c1d32ce3ed2d491b4c3b7b0109a3b4b6fde9a37f434b459bfd", "N8": "b1f001b64da50748823259593393b6e2d050c8c55c56918c99386984d075aa73", "P7": "3599f6635be42a695991f66f561642e26718403f4e14ad220480480a8da7d541" } }