{
  "version": 1,
  "note": "Positive bytes are independent deterministic contract fixtures. rejection_checklist names required implementation mutations but does not itself carry mutated hex. The purpose-3 object pins fields 9-11 and signing layout; snapshot authority acceptance remains in authoritative-snapshot-v1.json.",
  "keys": {
    "publication_key": "waypoint/global/chat/f51c989b4ebd9259e52dfc94257d9e1c/4f6f6c1c0c4d45ddb32459b2869c07ca",
    "moved_key": "waypoint/global/chat/f51c989b4ebd9259e52dfc94257d9e1c/aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
    "capability_expression": "waypoint/global/chat/f51c989b4ebd9259e52dfc94257d9e1c/**",
    "expected_storage_key_digest_hex": "e1543a05f76adb4a4e5ab5c732a9b06c2691f204a93eac6231b0e1f82ee94a7e",
    "moved_key_digest_hex": "3fc0f120454643adc867359be56feb431c4c5f1c3928349c095352467a672041",
    "expected_digest_input_hex": "70657472612d73746f726167652d6b65792d76310000000056776179706f696e742f676c6f62616c2f636861742f66353163393839623465626439323539653532646663393432353764396531632f3466366636633163306334643435646462333234353962323836396330376361"
  },
  "capability": {
    "subject_principal_id": "p-42",
    "subject_private_seed_hex": "202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f",
    "subject_signing_key_hex": "29acbae141bccaf0b22e1a94d34d0bc7361e526d0bfe12c89794bc9322966dd7",
    "action": 1,
    "purposes": [
      0
    ],
    "classification_ceiling": {
      "policy_id": "NATO",
      "max_classification": "SECRET",
      "category_auths": [
        {
          "type": 2,
          "tag": "Releasable To",
          "values": [
            "GBR",
            "USA"
          ]
        }
      ]
    },
    "issued_at_ms": 1700000000000,
    "expires_at_ms": 1700003600000,
    "capability_id_hex": "44444444444444444444444444444444",
    "directory_private_seed_hex": "000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f",
    "directory_public_key_hex": "03a107bff3ce10be1d70dd18e74bc09967e4d6309ba50d5f1ddc8664125531b8",
    "directory_key_id_hex": "56475aa75463474c0285df5dbf2bcab73da651358839e9b77481b2eab107708c",
    "expected_signing_input_hex": "70657472612d73746f726167652d6361706162696c6974792d763100000000010100000004702d343229acbae141bccaf0b22e1a94d34d0bc7361e526d0bfe12c89794bc9322966dd700000038776179706f696e742f676c6f62616c2f636861742f66353163393839623465626439323539653532646663393432353764396531632f2a2a00000001000000000000003d000000044e41544f0000000653454352455400000001000000020000000d52656c65617361626c6520546f0000000200000003474252000000035553410000018bcfe568000000018bd01c56804444444444444444444444444444444456475aa75463474c0285df5dbf2bcab73da651358839e9b77481b2eab107708c00000001000000000000000000",
    "expected_directory_signature_hex": "401c47ed14af62ae1e19409d8d034d94d51d2483f58b7397a86d98ac5b1157fbb5dfc2d13a5f6c7934aedf13cd61a4e972b77e0c15fe7c163ea2a2bea9e60306",
    "expected_encoded_capability_hex": "080110011a04702d3432222029acbae141bccaf0b22e1a94d34d0bc7361e526d0bfe12c89794bc9322966dd72a38776179706f696e742f676c6f62616c2f636861742f66353163393839623465626439323539653532646663393432353764396531632f2a2a3201003a2b0a044e41544f12065345435245541a1b0802120d52656c65617361626c6520546f1a034742521a035553414080d095ffbc314880adf180bd315210444444444444444444444444444444445a2056475aa75463474c0285df5dbf2bcab73da651358839e9b77481b2eab107708c6240401c47ed14af62ae1e19409d8d034d94d51d2483f58b7397a86d98ac5b1157fbb5dfc2d13a5f6c7934aedf13cd61a4e972b77e0c15fe7c163ea2a2bea9e603066801",
    "expected_capability_sha256_hex": "85717138bc19c077cbc371d1bf7559de1f4b9b82d8d71e2118265f9645db1c6d"
  },
  "live_envelope": {
    "identity_token_hex": "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",
    "payload_hex": "68656c6c6f2077697265",
    "nonce_hex": "111111111111111111111111",
    "issued_at_ms": 1700000000000,
    "expected_signing_input_hex": "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",
    "expected_device_signature_hex": "7e081835e02eddb64cb0cdeacf893ca70ab072a47825797adee0b8450f7cd1904fb94fa6f0ebfd4df535b6129b49675ef0888b6c54c8675cb6c19894e7a6870b",
    "expected_encoded_envelope_hex": "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",
    "expected_value_sha256_hex": "a35ba5778189d51a5c1ae2df0028220a0422b7c0f8e9a9cc479e26f8944a8ba0"
  },
  "publish_use_proof": {
    "nonce_hex": "555555555555555555555555",
    "expected_signing_input_hex": "70657472612d73746f726167652d7573652d76310185717138bc19c077cbc371d1bf7559de1f4b9b82d8d71e2118265f9645db1c6d00000056776179706f696e742f676c6f62616c2f636861742f66353163393839623465626439323539653532646663393432353764396531632f346636663663316330633464343564646233323435396232383639633037636120a35ba5778189d51a5c1ae2df0028220a0422b7c0f8e9a9cc479e26f8944a8ba05555555555555555555555550000018bcfe56800",
    "expected_subject_signature_hex": "56b944e2ce73c9f2def98641216d3203de3c3c59836caf0e287242699776967a29ce3fa715e2aaad46c672e440597ca55c9ca346f7cedd9f143b82a2b36e3509",
    "expected_encoded_proof_hex": "080110011a2085717138bc19c077cbc371d1bf7559de1f4b9b82d8d71e2118265f9645db1c6d2256776179706f696e742f676c6f62616c2f636861742f66353163393839623465626439323539653532646663393432353764396531632f34663666366331633063346434356464623332343539623238363963303763612a20a35ba5778189d51a5c1ae2df0028220a0422b7c0f8e9a9cc479e26f8944a8ba0320c5555555555555555555555553880d095ffbc31424056b944e2ce73c9f2def98641216d3203de3c3c59836caf0e287242699776967a29ce3fa715e2aaad46c672e440597ca55c9ca346f7cedd9f143b82a2b36e3509",
    "expected_encoded_authorization_hex": "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"
  },
  "committed_authority_mutation": {
    "canonical_publication_key": "waypoint/global/channel/f51c989b4ebd9259e52dfc94257d9e1c",
    "storage_key_digest_hex": "9207fbc3e924ea6def68aa42f7e8b48cf4f12fbc939c99a1f539d1d5b937b8db",
    "payload_hex": "aabbccdd",
    "owner_principal_id": "p-42",
    "purpose": 1,
    "authority_ledger_version": 7,
    "expected_commitment_input_hex": "70657472612d617574686f726974792d6d75746174696f6e2d7631009207fbc3e924ea6def68aa42f7e8b48cf4f12fbc939c99a1f539d1d5b937b8db8d70d691c822d55638b6e7fd54cd94170c87d19eb1f628b757506ede5688d2970000004d000000044e41544f0000000653454352455400000001000000020000000d52656c65617361626c6520546f0000000200000003474252000000035553410000018bcfe5680000000004702d343200000004702d3432000000010000000000000007",
    "expected_committed_mutation_sha256_hex": "16a8cf4c346bd55c15846a6179e7656e4fee88dfa63fe13e72d4eecfadcc7d08",
    "expected_capability_signing_input_hex": "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",
    "expected_directory_signature_hex": "34c92ec054e3cbff580eac6c047e4bcd5d962a185ed8a3d65836c07000e449111e6cbab15640a342efa93017782960cf29ad9f1272afb8c9cd435d31babd5d06",
    "expected_encoded_capability_hex": "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"
  },
  "purpose3_field_layout": {
    "canonical_publication_key": "waypoint/global/snapshot/orbat/bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb/e73ef65f67762509143408282dd11a55/4/manifest",
    "snapshot_authority_grant_hex": "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",
    "storage_key_digest_hex": "939860385d030d067054647797d57c9d30e3288ac25856cb2a701ca2fc6ccbc2",
    "publication_capability_hex": "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",
    "publication_capability_signing_input_hex": "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",
    "expected_signing_input_hex": "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",
    "expected_device_signature_hex": "e7eeb3b131758778ad566fb883977caaec436111325626ad6dcac79321255bc9a60bc9b9df06c81911bd0b5d8ba1bd81b4a6c95476f031ea9eaef0c2253a7704",
    "expected_encoded_envelope_hex": "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",
    "expected_semantic_result": "reject_snapshot_subject"
  },
  "rejection_checklist": [
    {
      "name": "envelope moved to different key",
      "expected": "reject_storage_key_digest"
    },
    {
      "name": "missing storage key digest",
      "expected": "reject_storage_key_digest"
    },
    {
      "name": "short storage key digest",
      "expected": "reject_storage_key_digest"
    },
    {
      "name": "missing retained publication capability",
      "expected": "reject_publication_capability"
    },
    {
      "name": "noncanonical retained publication capability",
      "expected": "reject_noncanonical_capability"
    },
    {
      "name": "retained capability key excludes envelope key",
      "expected": "reject_capability_containment"
    },
    {
      "name": "retained capability action is query",
      "expected": "reject_capability_action"
    },
    {
      "name": "retained capability omits envelope purpose",
      "expected": "reject_capability_purpose"
    },
    {
      "name": "retained capability subject mismatch",
      "expected": "reject_capability_subject"
    },
    {
      "name": "retained capability signing key mismatch",
      "expected": "reject_capability_subject_key"
    },
    {
      "name": "retained capability Directory key id mismatch",
      "expected": "reject_directory_key_id"
    },
    {
      "name": "retained capability Directory signature invalid",
      "expected": "reject_directory_signature"
    },
    {
      "name": "retained capability expired before envelope issue",
      "expected": "reject_capability_issue_interval"
    },
    {
      "name": "envelope classification above capability ceiling",
      "expected": "reject_classification_ceiling"
    },
    {
      "name": "wildcard publication-key digest",
      "expected": "reject_non_concrete_publication_key"
    },
    {
      "name": "proof value digest mismatch",
      "expected": "reject_value_digest"
    },
    {
      "name": "proof capability digest mismatch",
      "expected": "reject_capability_digest"
    },
    {
      "name": "publication attachment capability differs from envelope field 11",
      "expected": "reject_attachment_capability_mismatch"
    },
    {
      "name": "proof action differs from capability action",
      "expected": "reject_proof_action"
    },
    {
      "name": "proof nonce wrong length",
      "expected": "reject_proof_nonce"
    },
    {
      "name": "proof timestamp outside freshness window",
      "expected": "reject_proof_freshness"
    },
    {
      "name": "proof replay",
      "expected": "reject_nonce_replay"
    },
    {
      "name": "expired capability",
      "expected": "reject_expired_capability"
    },
    {
      "name": "revoked subject signing key",
      "expected": "reject_revoked_subject"
    },
    {
      "name": "purpose 3 missing authority grant field 9",
      "expected": "reject_snapshot_authority"
    },
    {
      "name": "purpose 3 wrong authority grant field 9",
      "expected": "reject_snapshot_authority"
    },
    {
      "name": "purpose 3 signed by non-Web subject",
      "expected": "reject_snapshot_subject"
    },
    {
      "name": "purpose 3 field 10 digest mismatch",
      "expected": "reject_storage_key_digest"
    },
    {
      "name": "purpose 3 field 11 is query capability",
      "expected": "reject_capability_action"
    }
  ]
}