{
  "schemaVersion": "kingy-independent-public-static-ui-allowance-review/1.0.0",
  "reviewedAt": "2026-10-18T05:53:12.162082+00:00",
  "passed": true,
  "decision": "Approved for rebuilding prepared report and performing actual privacy rescan only. This receipt is not an actual public privacy or publication pass.",
  "scannerSourceSha256": "6752315814bbbf5d1e0a1f56ba44b7814b38872806d1dc298725a91e8752a6e9",
  "scannerSource": "release/comparison-v20/check-public-privacy.py",
  "testSourceSha256": "dafccb86123e65cb9a0ef526baf2e3225ed99d1d2bcb86ab0431579753b6c4de",
  "testSource": "evidence/comparison-v20/independent-publication-review/test-short-draft-scanner-repair.py",
  "controls": {
    "passed": 27,
    "failed": 0,
    "log": "evidence/comparison-v20/independent-publication-review/static-ui-scanner-controls.log",
    "logSha256": "88d44293d8d72413bbf12ade4abbfe4659cc0e0eeafdeb8b92c0f2a098bebfe8"
  },
  "exactPublicSourceAllowance": {
    "id": "v20-pinned-native-ui-static-status/1.0.0",
    "path": "app/public/documents/comparisons/document-comparison-v20-20261018.1/evidence/study-materials.zip!method/native-ui.mjs",
    "sourceSha256": "de41f85c2cf490e682c21c9bce7b8ee87406be5b81b4551cf4425cf083e138a5",
    "needleSha256": "706956ae15b99861d58d15be0dd8abea323b28408e52af8b42f99654dda53c5f"
  },
  "reviewFindings": [
    "Exactly one known static public status needle is classified by its 15-byte length and SHA256, only at one canonical outer archive and inner source path and the exact frozen native-ui source SHA256.",
    "Same bytes at a different inner path or outer archive remain blocked. Modified source at the exact canonical path is blocked, including when both public status labels are removed.",
    "Any whole-private-file hash or additional needle, including synthetic credential markers, still blocks the exact pinned source. The alternate status label is not allowed.",
    "All preexisting collection and helper ASTs are unchanged; the private path predicate and JSON/JSONL exact draft and archive recursion/traversal guards are unchanged.",
    "Neither the scanner nor control source embeds the classified status literal as contiguous bytes. Review output contains hashes and classification only."
  ],
  "preservedBefore": {
    "directory": "evidence/comparison-v20/operations/privacy-scan-before-static-ui-fix-20261018T055027669173Z",
    "filesSha256": {
      "before-sha256.json": "750a30697c9e379c46108f8a1f5affdbc01a7fc8e7156aa690eb7c3793977ce8",
      "check-public-privacy.py": "c54877c4319a4721354dcf2188383c562415b2eda531cf8142a1eac9c07e081b",
      "public-privacy-check.json": "bcf63951865099c4f02de4dbd86c2abb52542891b3a666e2aec0c1b137d3bfc5",
      "test-short-draft-scanner-repair.py": "e4df031d472e8255c888a9429778b6343d83472fc53e176a17b3e43834459f2b"
    }
  },
  "integrity": {
    "frozenSourcePinsReverified": 37,
    "scientificOutputPinsReverified": 7,
    "methodFreezeSha256": "17a4f68181a07ec77cfb01d583913b66e97c7c6cbac48957addc8d96e2ede556",
    "analysisCompletionSha256": "beedfb22e4dfc26dd868cb2a87143a37159a286bc2ab09f07a867232cfdfdb24"
  },
  "boundaries": {
    "actualPrivateValuesPrinted": false,
    "actualPrivacyScanRunByReviewer": false,
    "actualReportOrInputChanged": false,
    "scientificDataOrFrozenSourceChanged": false,
    "productionWritten": false
  }
}