{
  "schemaVersion": "kingy-independent-publication-readiness-followup/1.0.0",
  "reviewedAt": "2026-10-17T06:09:16.438070+00:00",
  "sourceReviewPassed": true,
  "publicationApproved": false,
  "priorReview": "publication-readiness-source-review-20261017T060729.json",
  "priorReviewSha256": "41c067f973ad02b56d812a900d0fe71f40d0b5cb65548466878efa3aa9a773b1",
  "sourceSha256": {
    "evidence/comparison-v19/seal-measurement.py": "7dc2fef344233624aa77fa3d374b0863bf6f1356b5fb0d2b659aa57decd945d1",
    "release/comparison-v19/check-public-privacy.py": "3d1de75a9b661317388eebcc37390dee4fe7ac09d63817d541155c4c080f53a7",
    "release/comparison-v19/build-release-receipt.py": "929f6e68361643a367a264aeb2b5bea992a0180412510c6661843c491156130a",
    "release/comparison-v19/report-stage/deploy.sh": "0f3a3d3520259ed4a41d837af68d6694fd8dd4238a81995353720098d6663566",
    "release/comparison-v19/app-stage/deploy.sh": "298b10b39b4d6f54f919b5b722f6b5662f48e304fefa7f4f0c7d42f6d194381c"
  },
  "closedFindings": [
    {
      "id": "privacy-check-not-bound-to-staged-bytes",
      "status": "fixed; source checked and synthetic positive/rejection cases passed",
      "evidence": "publication-binding-focused-controls-20261017T060842.json",
      "detail": "Scanner records hashes of actual filesystem files from the same scanned byte buffers and rechecks them before receipt. Report-stage requires strict true pass and exact staged-tree map equality. App-stage binds the report hash and exact staged workflow tree when present."
    },
    {
      "id": "copied-smoke-artifacts-not-bound-to-install-receipt",
      "status": "fixed; actual three asserts independently tested",
      "evidence": "publication-binding-focused-controls-20261017T060842.json",
      "detail": "Builder verifies selftest raw/summary hashes against installation receipt and exact parsed network object equality before creating workflow-release."
    }
  ],
  "controls": {
    "passed": 16,
    "failed": 0,
    "receiptSha256": "83ba1b3c59f96a4c72a7b27f7aebdd840d06f1857a6f5f38dc4dade4b289f7fe",
    "scope": "Actual embedded Python staging gates and three builder smoke-binding asserts only; synthetic files. No shell deployment/full release builder/model execution."
  },
  "alreadyClosedFindingEvidence": [
    "publication-privacy-fixed-controls-20261017T060444.json",
    "seal-metadata-focused-controls-20261017T060649.json"
  ],
  "remainingSourceBlockersFromThisReview": [],
  "remainingActualGates": [
    "Final native template/ten-PDF/model settings and r2 freeze independent review.",
    "All240 original attempts complete and sealed; frozen grading and final independent source/scorer audit.",
    "Actual clean-install/authentication/egress checks, exact final public privacy scan, guarded staged copies and anonymous public readback."
  ],
  "sourcesEditedByReviewer": false,
  "actualDeploymentExecuted": false,
  "liveUiActions": 0,
  "modelCalls": 0,
  "freshReferencesRead": false,
  "freshQualityOutputsRead": false,
  "actualPrivateMessagesRead": false
}