{
  "entry": 246,
  "type": "self_submitted_verdict",
  "created_at": 1787077032,
  "pubkey_hex": "6786e18a864893a900bd9858e650f67ccc3513f248fed374b591e2ff6922fbb7",
  "event_id": "ba6aef4ff80ab4c33b6e2d0e09a5d8af2e80284daa72ed96b71b46f165231c25",
  "proof_event": {
    "id": "ba6aef4ff80ab4c33b6e2d0e09a5d8af2e80284daa72ed96b71b46f165231c25",
    "pubkey": "6786e18a864893a900bd9858e650f67ccc3513f248fed374b591e2ff6922fbb7",
    "created_at": 1787077030,
    "kind": 30078,
    "tags": [
      [
        "d",
        "invinoveritas-proof-d7f8744cfdbc955abc59a5f587028598cbe4e53613bfd9b3c0c186ad95ee5065-1787077030-a6d92b56"
      ],
      [
        "t",
        "invinoveritas"
      ],
      [
        "t",
        "proof"
      ],
      [
        "schema",
        "invinoveritas.verdict_proof.v1"
      ]
    ],
    "content": "{\"artifact_hash\":\"d7f8744cfdbc955abc59a5f587028598cbe4e53613bfd9b3c0c186ad95ee5065\",\"artifact_type\":\"agent_output\",\"confidence\":0.9,\"conformance_suite\":\"https://github.com/babyblueviper1/preaction-governance-conformance\",\"decision_ref\":\"sha256:a90a6f398e94129344549d36bd93cbefabd97f0f18a2fb7ca548ada24a089aaa\",\"decision_ref_preimage_fields\":[\"artifact_hash\",\"artifact_type\",\"policy_version\",\"verdict\",\"source_class\",\"vantage_limitation\",\"related_decision_ref\",\"intended_audience\",\"confidentiality_tier\",\"disclosed_summary\",\"intended_verifier\",\"policy_commitment\",\"verified_at\",\"registry_as_of\",\"registry_snapshot_sha256\"],\"decision_ref_preimage_rule\":\"every name in decision_ref_preimage_fields is a key in the hashed preimage object, always -- absent fields (e.g. vantage_limitation when not applicable) are present as JSON null, never omitted from the object.\",\"engine_generation\":1,\"execution_binding\":\"external\",\"independent_nodes\":[\"https://invinoveritas-castra.babyblueviper.workers.dev/verify\",\"https://babyblueviper1--2aba75da693711f185891607ee4eb77e.web.val.run\"],\"key_id\":\"6786e18a864893a900bd9858e650f67ccc3513f248fed374b591e2ff6922fbb7\",\"mediator_evidence\":{\"authority_basis\":\"Real live integration account (label 'osuite-checkpoint', created 2026-07-13, 17 calls). Verified 2026-07-18 that calls genuinely originate from OSuite's own infrastructure, not ours: nginx access log shows the most recent /review call (2026-07-18T08:45:49Z) from IP 104.43.193.12 (Microsoft Azure, Des Moines datacenter -- confirmed distinct from this VPS's own provider), User-Agent 'node' (a real backend client, not this fleet's own Python-based scripts). platform_revenue_ledger's 'internal' classification on these calls is a FUNDING axis, not a caller-identity axis (this account was credited a 30,000-sat prototyping grant rather than paying with real deposited sats -- confirmed via core/auth.py's classification logic: managed=False for this api_key/agent_id on every current check, classification only stayed 'internal' because treasury_amount was 0, unrelated to who is calling). OSuite's own public product claim (action envelope reviewed by OSuite before execution, binding approval to an action fingerprint) matches the structural bar: an independent runtime sitting between the agent and execution, not something the reviewed agent controls.\",\"evidence_ref\":\"https://x.com/jw_ond/status/2078409858651721850\",\"mediator_id\":\"osuite\",\"registered_at\":\"2026-07-18\",\"registry_snapshot_sha256\":\"ca7912e150d4e03f4c762f4d4b2a4718c1e56043c45756f6031578f84fcddbb5\"},\"mediator_name\":\"OSuite\",\"platform\":\"invinoveritas\",\"policy_commitment\":\"sha256:b0d29b374874515c8ffa392326fd05d80fcee28dc791fdbb5edbeb6fd50396dd\",\"policy_commitment_inputs\":{\"conformance_suite_commit\":\"62d32e519c39ba060950140ee7ceb5327371a0fe\",\"conformance_suite_repo\":\"babyblueviper1/preaction-governance-conformance\",\"rubric_doc_path\":\"docs/policy_spec/invinoveritas.review.v10.md\",\"rubric_sha256\":\"a4af5917fb2d37a685476458a6e326e6cc870fc24e8b49b41243b685fb9eb1b5\"},\"policy_version\":\"invinoveritas.review.v11\",\"registry_as_of\":1787077030,\"registry_snapshot_sha256\":\"ca7912e150d4e03f4c762f4d4b2a4718c1e56043c45756f6031578f84fcddbb5\",\"requires_use_time_revalidation\":true,\"review_model_hash\":\"deda3dc02a1d1575f15d5c9f9b3e31cf0c768a55508c31e7ff0f4fc8f33fc669\",\"schema\":\"invinoveritas.verdict_proof.v1\",\"source_class\":\"independent_mediator\",\"state_hash\":\"sha256:bf20ca701b25455d379b0bc8d68d8be880c8fec08561106cbb72e59005f44aea\",\"summary_hash\":\"8c25c5f195d7b90732152631969217137646ddb82580bca731eacbf76361a2e6\",\"verdict\":\"approve_with_concerns\",\"verified_at\":1787077030,\"verifier_keys\":\"https://api.babyblueviper.com/.well-known/verifier-keys.json\",\"verifier_pubkey\":\"6786e18a864893a900bd9858e650f67ccc3513f248fed374b591e2ff6922fbb7\",\"verify_how\":\"Easiest: install the offline verifier above and recompute locally. Or POST this proof's signed `event` to verify_url (or an independent_node), OR run NIP-01 yourself: recompute the Nostr event id = sha256([0,pubkey,created_at,kind,tags,content]), verify the schnorr signature against verifier_pubkey. valid ⇒ invinoveritas issued this, untampered. No trust required.\",\"verify_offline\":\"npm i invinoveritas-verify  ·  pip install invinoveritas-verify  — recompute this proof on your own machine against verifier_pubkey; you never have to call us.\",\"verify_url\":\"https://api.babyblueviper.com/verify-proof\"}",
    "sig": "ffcf2096dd8f20826c3f06463f8f258be60becd204ea2a292dc4b886a1d56ad8bdb4cce95856d4d994d85bcfd338228fa09c506378b789c8d00399d33f688c8e"
  },
  "record": {
    "ledger": "invinoveritas verdict ledger",
    "entry": 246,
    "type": "self_submitted_verdict",
    "title": "Self-submitted verdict — approve_with_concerns (conf 0.9) on a agent_output artifact, submitted by osuite-checkpoint",
    "what": "A signed, artifact-bound /review verdict, submitted by a registered account (osuite-checkpoint) via POST /ledger/submit — self-serve, paid, auto-accepted after cryptographic verification (not editorially hand-picked; see this entry's `type`). The schnorr signature binds the verdict + a hash of the exact reviewed artifact to our published key — verify it yourself via POST /verify-proof or NIP-01, with no trust in either party required. Submitter's own context: 'OSuite self-submitted verifier proof for approval-bound GitHub SaaS action bbv-v11-github-saas-2026-08-18-1816z'",
    "submitted_by": "osuite-checkpoint",
    "submission_note": "OSuite self-submitted verifier proof for approval-bound GitHub SaaS action bbv-v11-github-saas-2026-08-18-1816z",
    "paid_sats": 196,
    "verdict": {
      "artifact_hash": "d7f8744cfdbc955abc59a5f587028598cbe4e53613bfd9b3c0c186ad95ee5065",
      "artifact_type": "agent_output",
      "confidence": 0.9,
      "conformance_suite": "https://github.com/babyblueviper1/preaction-governance-conformance",
      "decision_ref": "sha256:a90a6f398e94129344549d36bd93cbefabd97f0f18a2fb7ca548ada24a089aaa",
      "decision_ref_preimage_fields": [
        "artifact_hash",
        "artifact_type",
        "policy_version",
        "verdict",
        "source_class",
        "vantage_limitation",
        "related_decision_ref",
        "intended_audience",
        "confidentiality_tier",
        "disclosed_summary",
        "intended_verifier",
        "policy_commitment",
        "verified_at",
        "registry_as_of",
        "registry_snapshot_sha256"
      ],
      "decision_ref_preimage_rule": "every name in decision_ref_preimage_fields is a key in the hashed preimage object, always -- absent fields (e.g. vantage_limitation when not applicable) are present as JSON null, never omitted from the object.",
      "engine_generation": 1,
      "execution_binding": "external",
      "independent_nodes": [
        "https://invinoveritas-castra.babyblueviper.workers.dev/verify",
        "https://babyblueviper1--2aba75da693711f185891607ee4eb77e.web.val.run"
      ],
      "key_id": "6786e18a864893a900bd9858e650f67ccc3513f248fed374b591e2ff6922fbb7",
      "mediator_evidence": {
        "authority_basis": "Real live integration account (label 'osuite-checkpoint', created 2026-07-13, 17 calls). Verified 2026-07-18 that calls genuinely originate from OSuite's own infrastructure, not ours: nginx access log shows the most recent /review call (2026-07-18T08:45:49Z) from IP 104.43.193.12 (Microsoft Azure, Des Moines datacenter -- confirmed distinct from this VPS's own provider), User-Agent 'node' (a real backend client, not this fleet's own Python-based scripts). platform_revenue_ledger's 'internal' classification on these calls is a FUNDING axis, not a caller-identity axis (this account was credited a 30,000-sat prototyping grant rather than paying with real deposited sats -- confirmed via core/auth.py's classification logic: managed=False for this api_key/agent_id on every current check, classification only stayed 'internal' because treasury_amount was 0, unrelated to who is calling). OSuite's own public product claim (action envelope reviewed by OSuite before execution, binding approval to an action fingerprint) matches the structural bar: an independent runtime sitting between the agent and execution, not something the reviewed agent controls.",
        "evidence_ref": "https://x.com/jw_ond/status/2078409858651721850",
        "mediator_id": "osuite",
        "registered_at": "2026-07-18",
        "registry_snapshot_sha256": "ca7912e150d4e03f4c762f4d4b2a4718c1e56043c45756f6031578f84fcddbb5"
      },
      "mediator_name": "OSuite",
      "platform": "invinoveritas",
      "policy_commitment": "sha256:b0d29b374874515c8ffa392326fd05d80fcee28dc791fdbb5edbeb6fd50396dd",
      "policy_commitment_inputs": {
        "conformance_suite_commit": "62d32e519c39ba060950140ee7ceb5327371a0fe",
        "conformance_suite_repo": "babyblueviper1/preaction-governance-conformance",
        "rubric_doc_path": "docs/policy_spec/invinoveritas.review.v10.md",
        "rubric_sha256": "a4af5917fb2d37a685476458a6e326e6cc870fc24e8b49b41243b685fb9eb1b5"
      },
      "policy_version": "invinoveritas.review.v11",
      "registry_as_of": 1787077030,
      "registry_snapshot_sha256": "ca7912e150d4e03f4c762f4d4b2a4718c1e56043c45756f6031578f84fcddbb5",
      "requires_use_time_revalidation": true,
      "review_model_hash": "deda3dc02a1d1575f15d5c9f9b3e31cf0c768a55508c31e7ff0f4fc8f33fc669",
      "schema": "invinoveritas.verdict_proof.v1",
      "source_class": "independent_mediator",
      "state_hash": "sha256:bf20ca701b25455d379b0bc8d68d8be880c8fec08561106cbb72e59005f44aea",
      "summary_hash": "8c25c5f195d7b90732152631969217137646ddb82580bca731eacbf76361a2e6",
      "verdict": "approve_with_concerns",
      "verified_at": 1787077030,
      "verifier_keys": "https://api.babyblueviper.com/.well-known/verifier-keys.json",
      "verifier_pubkey": "6786e18a864893a900bd9858e650f67ccc3513f248fed374b591e2ff6922fbb7",
      "verify_how": "Easiest: install the offline verifier above and recompute locally. Or POST this proof's signed `event` to verify_url (or an independent_node), OR run NIP-01 yourself: recompute the Nostr event id = sha256([0,pubkey,created_at,kind,tags,content]), verify the schnorr signature against verifier_pubkey. valid ⇒ invinoveritas issued this, untampered. No trust required.",
      "verify_offline": "npm i invinoveritas-verify  ·  pip install invinoveritas-verify  — recompute this proof on your own machine against verifier_pubkey; you never have to call us.",
      "verify_url": "https://api.babyblueviper.com/verify-proof"
    },
    "proof": {
      "event_id": "ba6aef4ff80ab4c33b6e2d0e09a5d8af2e80284daa72ed96b71b46f165231c25",
      "pubkey": "6786e18a864893a900bd9858e650f67ccc3513f248fed374b591e2ff6922fbb7",
      "artifact_hash": "d7f8744cfdbc955abc59a5f587028598cbe4e53613bfd9b3c0c186ad95ee5065",
      "decision_ref": "sha256:a90a6f398e94129344549d36bd93cbefabd97f0f18a2fb7ca548ada24a089aaa",
      "how_to_verify": "POST /verify-proof with this Nostr event, or run NIP-01 verification against our published npub."
    },
    "ts": 1787077032
  },
  "chain": {
    "prev_head_hash": "bd534f740d78010c6d9a65eddf3df580da07d9d96e85bcdd2811b8d08576cbde",
    "content_hash": "f95aa5738d40bd64315b0f7516ff5a1cae5783c6c16ee54327043f3827793d3d",
    "head_hash": "2b62f9f00c1a4c32faf5fdde1ce25d5e38f1ecaea9fe4f3549f66c9a5ccf5ad2"
  },
  "chain_head_relays": [
    "relay.damus.io",
    "nos.lol",
    "relay.primal.net"
  ],
  "posted": true,
  "relays": [
    "relay.damus.io",
    "nos.lol",
    "relay.primal.net"
  ],
  "posted_at": 1787077059,
  "commitment_proof": {
    "mechanism": "nostr-relay-publication",
    "event_id": "ba6aef4ff80ab4c33b6e2d0e09a5d8af2e80284daa72ed96b71b46f165231c25",
    "signed_at": 1787077030,
    "published_at": 1787077059,
    "relays": [
      "relay.damus.io",
      "nos.lol",
      "relay.primal.net"
    ],
    "how_to_check": "fetch the event by id from any listed public relay and confirm created_at; relays held the signed verdict from published_at, before the outcome settled",
    "timing": {
      "hierarchy": "Bitcoin PoW (OpenTimestamps, trust-maximal) > original relay copy (tightest time) > on-chain committedAt > survivor floor (ERC-8299 Appendix B)",
      "tier": null,
      "timestamp": null,
      "claim": "relay retention unaudited; signed_at is this validator's own claim",
      "available": {
        "tier0_btc_pow": null,
        "tier1_relay_attested": null,
        "tier2_onchain_committed_at": null,
        "tier3_survivor_floor": null
      }
    }
  }
}