{
  "classification": "Public",
  "expected": {
    "conformance_scope": "pass",
    "evidence_state": "unverified",
    "key_lifecycle": "active",
    "normalized_linkage": "pass",
    "overall": "unverified",
    "payload_digest": "pass",
    "signature": "pass",
    "structure": "pass"
  },
  "expected_verdict": "unverified",
  "metadata": {
    "data_origin": "Sanitized deterministic demonstration data generated locally; no staging or production material.",
    "description": "A deterministic receipt-verification example shaped like the CISA KEV capability; not a live catalog record.",
    "fixture_id": "gold-cisa-kev",
    "generated_at": "2026-07-17T00:00:00Z",
    "not_live_claim": true,
    "test_key_id": "df-ed25519-a3c5eeda6a1d",
    "title": "CISA KEV capability \u2014 sanitized demonstration"
  },
  "receipt": {
    "payload_sha256": "sha256:803c669e86582ef34f7a0fe22583323f415b9bda6a2e6379763dbeda52424fdc",
    "receipt": {
      "canonicalization": "df-jcs-1",
      "correction_of": null,
      "issued_at": "2026-07-17T00:00:00Z",
      "kind": "observation",
      "receipt_id": "tr_522dc5d91c6082dc1e48f46e6a695f65",
      "request": {
        "caller_claim": null,
        "capability": "exploited_vulnerabilities",
        "operation": "resolve_live_fact",
        "parameters": {
          "limit": 1,
          "query": "DEMO-2026-0001"
        }
      },
      "request_id": "req_d292a1a5d089c47f977ecb215d2ffc21",
      "result": {
        "freshness_state": "fresh",
        "limitations": [
          "The DEMO identifier is intentionally non-real and was not fetched from CISA.",
          "This is sanitized deterministic conformance data, not a live source observation.",
          "A valid signature proves signed-byte integrity and issuer attribution, not objective truth."
        ],
        "status": "ok",
        "value": {
          "catalog_version": "sanitized-2026.07.17",
          "count": 1,
          "results": [
            {
              "cve": "DEMO-2026-0001",
              "product": "Example Product",
              "required_action": "Apply vendor guidance in this sanitized demonstration.",
              "vendor": "Example Vendor"
            }
          ]
        },
        "verification_state": "unverified"
      },
      "roles": {
        "claimant": {
          "id": "public-conformance.dynamicfeed.invalid",
          "role": "claimant"
        },
        "issuer": {
          "id": "public-conformance.dynamicfeed.invalid",
          "role": "issuer"
        },
        "observer": {
          "id": "public-conformance.dynamicfeed.invalid",
          "role": "observer"
        },
        "witness": {
          "id": "public-conformance.dynamicfeed.invalid",
          "role": "witness"
        }
      },
      "schema_version": "trust-receipt/v1",
      "source_observations": [
        {
          "adapter_response_sha256": "sha256:78eee4fb18aa1cd2571963430ae6e504637ec379b5bcd624e805f0053aeec1a2",
          "commercial_use": true,
          "freshness": {
            "age_seconds": 60,
            "maximum_age_seconds": 604800,
            "state": "fresh"
          },
          "license": "US Government work \u2014 public domain",
          "normalized_evidence_sha256": "sha256:8047c5addda43893e7aa61a6319229a018f1ec6b8a03a660f431821fcb6c9082",
          "observed_at": "2026-07-16T23:59:00Z",
          "raw_evidence_available": false,
          "raw_evidence_sha256": null,
          "retrieved_at": "2026-07-17T00:00:00Z",
          "source_id": "cisa-kev",
          "source_name": "CISA KEV (sanitized demonstration)",
          "source_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
        }
      ],
      "transformation": {
        "adapter": "exploited_vulnerabilities",
        "parser_version": "trust-receipt-v1.0-public-demo"
      }
    },
    "signature": {
      "alg": "Ed25519",
      "canonicalization": "df-jcs-1",
      "key_id": "df-ed25519-a3c5eeda6a1d",
      "sig": "axzC4gvNmmq3bW5qmXAQ396O3OKClACu2e5uHh85SAdde4tw2V127wl_JgEBLgwK4wSdbAsZuzr0sUF9IReCDA"
    }
  },
  "schema": "df-conformance-fixture/v1"
}
