{
  "schemaVersion": "kingy-v20-independent-short-draft-scanner-repair-review/1.0.0",
  "reviewedAt": "2026-10-18T05:45:49.150014+00:00",
  "approvedForActualRescan": true,
  "publicationOrDlpPassGranted": false,
  "scope": "Synthetic negative/positive controls and source comparison only. Actual public artifacts must be rebuilt and rescanned using the final source; no private values were opened or printed by reviewer.",
  "initialFalsePositiveDiagnosisSha256": "c833f9b16fcd764aed38d37067b3ff201bc6065882c1ac16e7e4d814d565fd62",
  "preservedFirstFailedActualScan": "operations/public-privacy-check.initial-failed.json",
  "preservedRoot8ControlsSha256": "913f2af755d864d877c54f751809defdc29cb54c91f84a5bd5921c2366442985",
  "preservedPreJsonlScannerSha256": "967a5e2f28273c5215ab6123fa0843b63fdc65099aa21dd262413989ea759168",
  "correctedScannerSourceSha256": "c54877c4319a4721354dcf2188383c562415b2eda531cf8142a1eac9c07e081b",
  "counterexampleReceiptSha256": "86f0517b1701a2465cc5b969f76cc86282b62d010efc8e90e8d0a5f2cf8b3a81",
  "beforeIndependentSyntheticControls": {
    "tests": 16,
    "failed": 2,
    "failures": "Exact known-short clientInput in JSONL and JSONL inside nested ZIP escaped the first short-needle correction.",
    "logSha256": "ba5ebaf7de450742b525f65a4e143684e44f5dfeaceb9629c3047663a901c0e1"
  },
  "finalIndependentSyntheticControls": {
    "tests": 18,
    "passed": 18,
    "testSourceSha256": "e4df031d472e8255c888a9429778b6343d83472fc53e176a17b3e43834459f2b",
    "logSha256": "ee2ab2d8e5850b9146e4981c89105992d81b99f84c8c769a7852b0cefba3733b",
    "coverage": [
      "Incidental two-character ordinary substring allowed",
      "Exact short clientInput JSON, nested JSON and Unicode escaped JSON blocked",
      "JSONL exact field, malformed earlier line, case variant and nested archive records blocked",
      "Four-character draft retains substring protection",
      "Whitespace-short exact original clientInput value blocked",
      "Whole private-file hashes and private filenames blocked",
      "Both process API-key syntaxes protected, including nested ZIP",
      "Long raw/JSON-escaped UI values protected",
      "Binary private-file hash and unsafe nested archive path blocked"
    ]
  },
  "sourceDiffReview": {
    "allTopLevelAstNodesExceptCheckFunctionUnchangedFrom967Source": true,
    "byteHashNeedleAndPrivatePathCheckPrefixUnchanged": true,
    "nestedZipRecursionAndTraversalGuardSuffixUnchanged": true,
    "shortDraftIngestionFilterAndExactDraftValuesUnchanged": true,
    "longContentRawUiCredentialCollectionUnchanged": true,
    "runtimeReceiptBindsItsActualScannerSourceSha256": true,
    "newChange": "Exact recursive clientInput comparison now scans JSON and each JSONL record independently, including nested archive members; malformed unrelated records cannot hide a later match. Filename case variants are accepted for these structured formats."
  },
  "frozen37SourcePinsVerifiedUnchanged": {
    "method/COMPARISON-PROTOCOL.md": "d7a2ecc9f65770cb1fe05c5d6c936f0c5c8a7603ad8d77259e55bb357c8b5474",
    "method/PAIRED-ANALYSIS.md": "cc09572414393b465dc5cc3388272c2027a2c423d0ab1b729e6f9fa255f32282",
    "method/SCORING.md": "2d0b2201a894bb663f5f71a6c2464bcf7d53138b84b83de153ed9bf18f553259",
    "method/common_grade.py": "e9b95ce6b5a821c0ab703c60de388f7604d919d62cfe13ac544cfbcb95c14c5f",
    "method/consumed-v14-controls.json": "2d7971b4f92c22712b837ac60ca8b702a56ff41c0748f70188d53df1bb10e9af",
    "method/engineering-review-followup.json": "e85921ff15eda64b052df7d331844719295616ad36a43b5ebb47e757ec6782d3",
    "method/engineering-review.json": "1563d64d3f8a757d19c9029af15cb749dc44d7f245994289916cee91998b63eb",
    "method/native-control.py": "dd552d5bca14227be3833dcd63687ac9154aafd29a40f4813b929229682cfc4a",
    "method/native-duplicate.applescript": "15df26771ac91a43ed44554affa5f358a0f39581d55ca2e6b4921b8ceef4ed6f",
    "method/native-rename-clone.applescript": "1b271b307c49b92a085cfb38cb2f5a3cf9ac7fb75d5aae02371b72e99fcb07a6",
    "method/native-study.mjs": "c2eb99fa6dbb92ac9459b8ff1eebc13ac4f2145563df1ab24a49684fb1ba0f36",
    "method/native-ui.mjs": "de41f85c2cf490e682c21c9bce7b8ee87406be5b81b4551cf4425cf083e138a5",
    "method/native-user-template.txt": "6445968866a12a80297f52f1c97afe07ce1b425d349544f648a2faf294943b5e",
    "method/native_capture.py": "5517b3dcf7dee4dc4fcf209e05961c967b68d1eba212a37fc7fac0fcca3a4556",
    "method/paired_analysis.py": "3f9d31a285e55d6c5c83b360b5e2d36e174733470e9ce2638e5ef3c444be6ca5",
    "method/postmeasurement.py": "a11a2dd93ff574bd55ccc39cc92bbcb15079028e73c169790496cff3b43e4e41",
    "method/prepare_comparison.py": "485c071e983d7707e767b5dd80d509e08a294f444296caab466086823f66a784",
    "method/run_kingy_session.py": "e21d7c97bc87407370f87ae3184d4d247998dc6d4cbee024d7ba225186a68909",
    "method/seal_measurement.py": "2c0e10682d92512f5405284c7141d6700a4ba7a716d3873f0b43760279de6144",
    "method/test_common_grade.py": "a2872ad08989bcd713b7e0f1cf31609b7415ccdb342e229290209b7b4c729102",
    "method/test_cross_page_repair.py": "2bd6d99cab35b4ef42412238a1a4e8ea0e7c59243e6b5dee4675c2864d262a50",
    "method/test_exact_source_repair.py": "7600bf0c9503438ab32ce290721af740584619eb69e71de2b393731e5bb758d8",
    "method/test_measurement_infrastructure.py": "f89e921117704375fa5e01c5c0bede2e986342e6576672de0bba3da9b5a49b49",
    "method/test_native_capture.py": "f0178f50d665e5e523c549f1b6247b003f45eb6773452ea90b731f7a52e4e490",
    "method/test_native_control.py": "f504e1f32f60e57b445f744d9a385bfb20472b26cbbb1abb5bb1d7b0b9f88354",
    "method/test_paired_analysis.py": "2a87d8a6627563a01321a9f56846f009ba7c8d6c3ac50413e7490ca14fd2825f",
    "method/test_v15_grade.py": "607b412a1f015cfd4ba4921ccc867663c97900632a2c0ab2acc328c1b3428bfb",
    "workflow-v15-r6/runner.py": "ac8d1ccb48ebe017f7e2794392598967695ef3186fcf4d3889dfd579e8479458",
    "workflow-v15-r6/start_server.py": "7f54900199a61c495bf5f6753a5caa13b529f86061d56ec2fca5a63be3844b2a",
    "workflow-v15-r6/prepare_model.py": "2a66acb34c1bf136b087179dbc2c5f676156bb31d971ed33b82b05e77c12f576",
    "workflow-v15-r6/evaluate.py": "8daa63c6ceb93111fd898683d40712a414ebda0fdf08b6a165638250871e4152",
    "workflow-v15-r6/offline.sb": "e5462ef1daae3785012cb8e4fa05b89105bf4ac4d98be9580a8c357365a4f54f",
    "workflow-v15-r6/requirements.txt": "3ec8922905dc4e3a10c3b46bd7fba023c37ffc309d51c6bed2a13ec3e98177fd",
    "workflow-v15-r6/SCORING.md": "2d0b2201a894bb663f5f71a6c2464bcf7d53138b84b83de153ed9bf18f553259",
    "workflow-v15-r6/README.md": "b6be0bf726188ef1a87ddfde1165a3bb929bf9b4b638e5b222dd94eb73d3f321",
    "workflow-v15-r6/LICENSE.txt": "7b5272ed8db5e81567ea2a9624ab25c04db44dc168db692c760a61f4d392100c",
    "workflow-v15-r6/common_grade.py": "e9b95ce6b5a821c0ab703c60de388f7604d919d62cfe13ac544cfbcb95c14c5f"
  },
  "unchangedActualScientificOutputSha256": {
    "grading-access-receipt.json": "5f0dda794d95b8b7096b4497c026c1e04333984e0d61d365f1feef19bb057bba",
    "interrupted-appendix-common.jsonl": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
    "kingy-common.jsonl": "bf3a42954840a83da4b58b12eeb6c85b79ed3e9fb438d170454138e0845e217d",
    "lmstudio-common.jsonl": "2248e56c55d67d525dd130f8a8bb70f416225b5f30f3ab936c0ae12453dbba89",
    "paired-results.json": "4e0288c2164f4b67c3d009204e22981ffb1720582cda68c31264538f90b88ab1",
    "session-provenance.json": "5cc9f10b7f646c6a6358b27186291dc72f6d3dd3233cb40d48b25c2006d882f1",
    "summaries.json": "c488a4acf7a7e117b209226f6aae33b1e61e42e0aa767a54489563a773c34735"
  },
  "actualPrivateValuesReadOrPrinted": false,
  "actualBroadPrivateTreeOrPublicArtifactScanRunByReviewer": false,
  "scientificInputsOrGradesChanged": false,
  "actualReportOrInputChangedByReviewer": false,
  "modelCalls": 0,
  "nativeUiActions": 0,
  "productionWrites": 0,
  "ownershipReturnedToRoot": true,
  "remaining": "Root must preserve/rebuild prepared report/input with the corrected scanner, run actual nested-artifact DLP, then public upload/readback only after that scan passes."
}