{
  "schema_version": "1.9",
  "release_version": "1.25.0",
  "reviewed_date": "2026-08-11",
  "kind": "stewardship_verification_policy",
  "claim_status": "LOCALLY_IMPLEMENTED_UNSIGNED",
  "canonical_human_page": "/stewardship-and-provenance/",
  "failure_behavior": "FAIL_CLOSED",
  "required": {
    "payload_type": "application/vnd.in-toto+json",
    "statement_type": "https://in-toto.io/Statement/v1",
    "predicate_type": "https://in-toto.io/attestation/link/v0.3",
    "subject_names": [
      "data/stewardship-provenance.json"
    ],
    "material_names": [
      ".uai/next-recursive-prompt.uai",
      "api/authorization-decision-lifecycle-checkpoints.json",
      "api/checkpoint-freshness.json",
      "api/checkpoint-succession.json",
      "api/claim-reliance-resolver-checkpoints.json",
      "api/cross-resolver-consistency.json",
      "api/cross-resolver-recovery-consistency.json",
      "api/escalation-acknowledgement-closure-receipts.json",
      "api/escalation-acknowledgement-receipts.json",
      "api/resolver-structural-confidence.json",
      "api/structural-state-recovery-proofs.json",
      "data/authority-impact-lifecycle.json",
      "data/authority-impact-map.json",
      "data/authorization-decision-lifecycle-checkpoints.json",
      "data/checkpoint-freshness.json",
      "data/checkpoint-succession.json",
      "data/claim-dependency-graph.json",
      "data/claim-reliance-control.json",
      "data/claim-reliance-current-state.json",
      "data/claim-reliance-resolver-checkpoints.json",
      "data/claim-reliance-suspension-receipts.json",
      "data/cross-resolver-consistency.json",
      "data/cross-resolver-recovery-consistency.json",
      "data/dependency-change-journal.json",
      "data/dependency-review-queue-aging.json",
      "data/dependency-review-queue.json",
      "data/dependency-review-resolution-receipts.json",
      "data/dependency-suspension-escalation.json",
      "data/escalation-acknowledgement-closure-receipts.json",
      "data/escalation-acknowledgement-receipts.json",
      "data/future-owner-authorization-decision-currentness.json",
      "data/future-owner-authorization-decision-ledger.json",
      "data/future-owner-authorization-decision-lifecycle.json",
      "data/future-owner-authorization-grant-schema.json",
      "data/resolver-structural-confidence.json",
      "data/review-risk-explainability.json",
      "data/stewardship-verification-bundle-readiness.json",
      "data/stewardship-verification-bundle-structure.json",
      "data/stewardship-verification-migration-authorization.json",
      "data/stewardship-verification-policy-diff-reproducibility.json",
      "data/stewardship-verification-policy-diff.json",
      "data/stewardship-verification-policy-lineage.json",
      "data/structural-state-recovery-proofs.json",
      "data/terminology-adoption-ledger.json",
      "data/terminology-authority-history.json",
      "data/terminology-review-receipt-chain.json",
      "data/terminology-review-receipts.json",
      "data/terminology.json",
      "docs/release/authority-impact-lifecycle-v1.20.0.json",
      "docs/release/authority-impact-lifecycle-v1.21.0.json",
      "docs/release/authority-impact-lifecycle-v1.22.0.json",
      "docs/release/authority-impact-lifecycle-v1.23.0.json",
      "docs/release/authority-impact-lifecycle-v1.24.0.json",
      "docs/release/authority-impact-map-v1.19.0.json",
      "docs/release/authorization-decision-lifecycle-checkpoints-v1.24.0.json",
      "docs/release/claim-dependency-graph-v1.20.0.json",
      "docs/release/claim-dependency-graph-v1.21.0.json",
      "docs/release/claim-dependency-graph-v1.22.0.json",
      "docs/release/claim-dependency-graph-v1.23.0.json",
      "docs/release/claim-dependency-graph-v1.24.0.json",
      "docs/release/claim-reliance-control-v1.22.0.json",
      "docs/release/claim-reliance-current-state-v1.23.0.json",
      "docs/release/claim-reliance-current-state-v1.24.0.json",
      "docs/release/claim-reliance-resolver-checkpoints-v1.24.0.json",
      "docs/release/claim-reliance-suspension-receipts-v1.22.0.json",
      "docs/release/claim-reliance-suspension-receipts-v1.23.0.json",
      "docs/release/claim-reliance-suspension-receipts-v1.24.0.json",
      "docs/release/cross-resolver-consistency-v1.24.0.json",
      "docs/release/dependency-change-journal-v1.21.0.json",
      "docs/release/dependency-change-journal-v1.22.0.json",
      "docs/release/dependency-change-journal-v1.23.0.json",
      "docs/release/dependency-change-journal-v1.24.0.json",
      "docs/release/dependency-review-queue-aging-v1.22.0.json",
      "docs/release/dependency-review-queue-v1.21.0.json",
      "docs/release/dependency-review-queue-v1.22.0.json",
      "docs/release/dependency-review-resolution-receipts-v1.21.0.json",
      "docs/release/dependency-review-resolution-receipts-v1.22.0.json",
      "docs/release/dependency-suspension-escalation-v1.23.0.json",
      "docs/release/dependency-suspension-escalation-v1.24.0.json",
      "docs/release/escalation-acknowledgement-receipts-v1.24.0.json",
      "docs/release/future-owner-authorization-decision-currentness-v1.23.0.json",
      "docs/release/future-owner-authorization-decision-currentness-v1.24.0.json",
      "docs/release/future-owner-authorization-decision-ledger-v1.22.0.json",
      "docs/release/future-owner-authorization-decision-ledger-v1.23.0.json",
      "docs/release/future-owner-authorization-decision-ledger-v1.24.0.json",
      "docs/release/future-owner-authorization-decision-lifecycle-v1.23.0.json",
      "docs/release/future-owner-authorization-decision-lifecycle-v1.24.0.json",
      "docs/release/future-owner-authorization-grant-schema-v1.21.0.json",
      "docs/release/future-owner-authorization-grant-schema-v1.22.0.json",
      "docs/release/resolver-structural-confidence-v1.24.0.json",
      "docs/release/review-risk-explainability-v1.23.0.json",
      "docs/release/review-risk-explainability-v1.24.0.json",
      "docs/release/stewardship-provenance-v1.11.0.json",
      "docs/release/stewardship-verification-bundle-structure-v1.18.0.json",
      "docs/release/stewardship-verification-bundle-structure-v1.19.0.json",
      "docs/release/stewardship-verification-bundle-structure-v1.20.0.json",
      "docs/release/stewardship-verification-bundle-structure-v1.21.0.json",
      "docs/release/stewardship-verification-bundle-structure-v1.22.0.json",
      "docs/release/stewardship-verification-bundle-structure-v1.23.0.json",
      "docs/release/stewardship-verification-bundle-structure-v1.24.0.json",
      "docs/release/stewardship-verification-migration-authorization-v1.20.0.json",
      "docs/release/stewardship-verification-migration-authorization-v1.21.0.json",
      "docs/release/stewardship-verification-migration-authorization-v1.22.0.json",
      "docs/release/stewardship-verification-policy-v1.18.0.json",
      "docs/release/stewardship-verification-policy-v1.19.0.json",
      "docs/release/stewardship-verification-policy-v1.20.0.json",
      "docs/release/stewardship-verification-policy-v1.21.0.json",
      "docs/release/stewardship-verification-policy-v1.22.0.json",
      "docs/release/stewardship-verification-policy-v1.23.0.json",
      "docs/release/stewardship-verification-policy-v1.24.0.json",
      "docs/release/terminology-authority-history-v1.18.0.json",
      "docs/release/terminology-authority-history-v1.19.0.json",
      "docs/release/terminology-authority-history-v1.20.0.json",
      "docs/release/terminology-authority-history-v1.21.0.json",
      "docs/release/terminology-authority-history-v1.22.0.json",
      "docs/release/terminology-authority-history-v1.23.0.json",
      "docs/release/terminology-authority-history-v1.24.0.json",
      "docs/release/terminology-review-chain-v1.18.0.json",
      "docs/release/terminology-review-chain-v1.19.0.json",
      "docs/release/terminology-review-chain-v1.20.0.json",
      "docs/release/terminology-review-chain-v1.21.0.json",
      "docs/release/terminology-review-chain-v1.22.0.json",
      "docs/release/terminology-review-chain-v1.23.0.json",
      "docs/release/terminology-review-chain-v1.24.0.json",
      "docs/research/source-manifest.json"
    ],
    "material_ordering": "canonical_path_ascending",
    "release_version": "1.25.0",
    "assurance_state": "LOCALLY_IMPLEMENTED_UNSIGNED",
    "signatures_required_now": 0
  },
  "future_authenticated_requirements": {
    "state": "UNAVAILABLE_NOT_AUTHORIZED",
    "expected_signer_identity": "UNAVAILABLE",
    "trusted_oidc_issuer_or_root": "UNAVAILABLE",
    "certificate_or_key_policy": "UNAVAILABLE",
    "transparency_log_or_bundle_policy": "UNAVAILABLE"
  },
  "truth_boundary": "LOCAL_HASH_SCOPE remains unsigned. v1.25 checkpoint succession, acknowledgement closure, freshness, and recovery proofs are additive fail-closed structural evidence; they never delete history or become legal confidence.",
  "official_reference": {
    "project": "DSSE Protocol v1.0.2",
    "url": "https://github.com/secure-systems-lab/dsse/blob/master/protocol.md"
  },
  "profiles": {
    "LOCAL_HASH_SCOPE": {
      "state": "LOCALLY_IMPLEMENTED_UNSIGNED",
      "active": true,
      "authentication": "NONE",
      "failure_behavior": "FAIL_CLOSED",
      "purpose": "Verify exact local subject/material hashes, scope, order, release version, Statement/predicate types, envelope payload binding, and PAE construction without claiming signer identity.",
      "required": {
        "payload_type": "application/vnd.in-toto+json",
        "statement_type": "https://in-toto.io/Statement/v1",
        "predicate_type": "https://in-toto.io/attestation/link/v0.3",
        "subject_names": [
          "data/stewardship-provenance.json"
        ],
        "material_names": [
          ".uai/next-recursive-prompt.uai",
          "api/authorization-decision-lifecycle-checkpoints.json",
          "api/checkpoint-freshness.json",
          "api/checkpoint-succession.json",
          "api/claim-reliance-resolver-checkpoints.json",
          "api/cross-resolver-consistency.json",
          "api/cross-resolver-recovery-consistency.json",
          "api/escalation-acknowledgement-closure-receipts.json",
          "api/escalation-acknowledgement-receipts.json",
          "api/resolver-structural-confidence.json",
          "api/structural-state-recovery-proofs.json",
          "data/authority-impact-lifecycle.json",
          "data/authority-impact-map.json",
          "data/authorization-decision-lifecycle-checkpoints.json",
          "data/checkpoint-freshness.json",
          "data/checkpoint-succession.json",
          "data/claim-dependency-graph.json",
          "data/claim-reliance-control.json",
          "data/claim-reliance-current-state.json",
          "data/claim-reliance-resolver-checkpoints.json",
          "data/claim-reliance-suspension-receipts.json",
          "data/cross-resolver-consistency.json",
          "data/cross-resolver-recovery-consistency.json",
          "data/dependency-change-journal.json",
          "data/dependency-review-queue-aging.json",
          "data/dependency-review-queue.json",
          "data/dependency-review-resolution-receipts.json",
          "data/dependency-suspension-escalation.json",
          "data/escalation-acknowledgement-closure-receipts.json",
          "data/escalation-acknowledgement-receipts.json",
          "data/future-owner-authorization-decision-currentness.json",
          "data/future-owner-authorization-decision-ledger.json",
          "data/future-owner-authorization-decision-lifecycle.json",
          "data/future-owner-authorization-grant-schema.json",
          "data/resolver-structural-confidence.json",
          "data/review-risk-explainability.json",
          "data/stewardship-verification-bundle-readiness.json",
          "data/stewardship-verification-bundle-structure.json",
          "data/stewardship-verification-migration-authorization.json",
          "data/stewardship-verification-policy-diff-reproducibility.json",
          "data/stewardship-verification-policy-diff.json",
          "data/stewardship-verification-policy-lineage.json",
          "data/structural-state-recovery-proofs.json",
          "data/terminology-adoption-ledger.json",
          "data/terminology-authority-history.json",
          "data/terminology-review-receipt-chain.json",
          "data/terminology-review-receipts.json",
          "data/terminology.json",
          "docs/release/authority-impact-lifecycle-v1.20.0.json",
          "docs/release/authority-impact-lifecycle-v1.21.0.json",
          "docs/release/authority-impact-lifecycle-v1.22.0.json",
          "docs/release/authority-impact-lifecycle-v1.23.0.json",
          "docs/release/authority-impact-lifecycle-v1.24.0.json",
          "docs/release/authority-impact-map-v1.19.0.json",
          "docs/release/authorization-decision-lifecycle-checkpoints-v1.24.0.json",
          "docs/release/claim-dependency-graph-v1.20.0.json",
          "docs/release/claim-dependency-graph-v1.21.0.json",
          "docs/release/claim-dependency-graph-v1.22.0.json",
          "docs/release/claim-dependency-graph-v1.23.0.json",
          "docs/release/claim-dependency-graph-v1.24.0.json",
          "docs/release/claim-reliance-control-v1.22.0.json",
          "docs/release/claim-reliance-current-state-v1.23.0.json",
          "docs/release/claim-reliance-current-state-v1.24.0.json",
          "docs/release/claim-reliance-resolver-checkpoints-v1.24.0.json",
          "docs/release/claim-reliance-suspension-receipts-v1.22.0.json",
          "docs/release/claim-reliance-suspension-receipts-v1.23.0.json",
          "docs/release/claim-reliance-suspension-receipts-v1.24.0.json",
          "docs/release/cross-resolver-consistency-v1.24.0.json",
          "docs/release/dependency-change-journal-v1.21.0.json",
          "docs/release/dependency-change-journal-v1.22.0.json",
          "docs/release/dependency-change-journal-v1.23.0.json",
          "docs/release/dependency-change-journal-v1.24.0.json",
          "docs/release/dependency-review-queue-aging-v1.22.0.json",
          "docs/release/dependency-review-queue-v1.21.0.json",
          "docs/release/dependency-review-queue-v1.22.0.json",
          "docs/release/dependency-review-resolution-receipts-v1.21.0.json",
          "docs/release/dependency-review-resolution-receipts-v1.22.0.json",
          "docs/release/dependency-suspension-escalation-v1.23.0.json",
          "docs/release/dependency-suspension-escalation-v1.24.0.json",
          "docs/release/escalation-acknowledgement-receipts-v1.24.0.json",
          "docs/release/future-owner-authorization-decision-currentness-v1.23.0.json",
          "docs/release/future-owner-authorization-decision-currentness-v1.24.0.json",
          "docs/release/future-owner-authorization-decision-ledger-v1.22.0.json",
          "docs/release/future-owner-authorization-decision-ledger-v1.23.0.json",
          "docs/release/future-owner-authorization-decision-ledger-v1.24.0.json",
          "docs/release/future-owner-authorization-decision-lifecycle-v1.23.0.json",
          "docs/release/future-owner-authorization-decision-lifecycle-v1.24.0.json",
          "docs/release/future-owner-authorization-grant-schema-v1.21.0.json",
          "docs/release/future-owner-authorization-grant-schema-v1.22.0.json",
          "docs/release/resolver-structural-confidence-v1.24.0.json",
          "docs/release/review-risk-explainability-v1.23.0.json",
          "docs/release/review-risk-explainability-v1.24.0.json",
          "docs/release/stewardship-provenance-v1.11.0.json",
          "docs/release/stewardship-verification-bundle-structure-v1.18.0.json",
          "docs/release/stewardship-verification-bundle-structure-v1.19.0.json",
          "docs/release/stewardship-verification-bundle-structure-v1.20.0.json",
          "docs/release/stewardship-verification-bundle-structure-v1.21.0.json",
          "docs/release/stewardship-verification-bundle-structure-v1.22.0.json",
          "docs/release/stewardship-verification-bundle-structure-v1.23.0.json",
          "docs/release/stewardship-verification-bundle-structure-v1.24.0.json",
          "docs/release/stewardship-verification-migration-authorization-v1.20.0.json",
          "docs/release/stewardship-verification-migration-authorization-v1.21.0.json",
          "docs/release/stewardship-verification-migration-authorization-v1.22.0.json",
          "docs/release/stewardship-verification-policy-v1.18.0.json",
          "docs/release/stewardship-verification-policy-v1.19.0.json",
          "docs/release/stewardship-verification-policy-v1.20.0.json",
          "docs/release/stewardship-verification-policy-v1.21.0.json",
          "docs/release/stewardship-verification-policy-v1.22.0.json",
          "docs/release/stewardship-verification-policy-v1.23.0.json",
          "docs/release/stewardship-verification-policy-v1.24.0.json",
          "docs/release/terminology-authority-history-v1.18.0.json",
          "docs/release/terminology-authority-history-v1.19.0.json",
          "docs/release/terminology-authority-history-v1.20.0.json",
          "docs/release/terminology-authority-history-v1.21.0.json",
          "docs/release/terminology-authority-history-v1.22.0.json",
          "docs/release/terminology-authority-history-v1.23.0.json",
          "docs/release/terminology-authority-history-v1.24.0.json",
          "docs/release/terminology-review-chain-v1.18.0.json",
          "docs/release/terminology-review-chain-v1.19.0.json",
          "docs/release/terminology-review-chain-v1.20.0.json",
          "docs/release/terminology-review-chain-v1.21.0.json",
          "docs/release/terminology-review-chain-v1.22.0.json",
          "docs/release/terminology-review-chain-v1.23.0.json",
          "docs/release/terminology-review-chain-v1.24.0.json",
          "docs/research/source-manifest.json"
        ],
        "material_ordering": "canonical_path_ascending",
        "release_version": "1.25.0",
        "assurance_state": "LOCALLY_IMPLEMENTED_UNSIGNED",
        "signatures_required_now": 0
      },
      "does_not_establish": "Signer identity, certificate validity, OIDC identity, transparency inclusion, legal authorship, consciousness, authority, or independently authenticated execution."
    },
    "FUTURE_AUTHENTICATED_SCOPE": {
      "state": "UNAVAILABLE_NOT_AUTHORIZED",
      "active": false,
      "authentication": "REQUIRED_BEFORE_ACTIVATION",
      "failure_behavior": "FAIL_CLOSED",
      "purpose": "Define the minimum policy dimensions a future authenticated workflow would have to satisfy without creating or activating a signer.",
      "required": {
        "expected_signer_or_workload_identity": "UNAVAILABLE",
        "trusted_oidc_issuer_or_trust_root": "UNAVAILABLE",
        "certificate_or_public_key_policy": "UNAVAILABLE",
        "signature_algorithm_and_envelope_verification": "REQUIRED_NOT_CONFIGURED",
        "artifact_subject_digest_match": "REQUIRED",
        "transparency_log_or_offline_bundle_evidence": "UNAVAILABLE",
        "signed_time_or_integrated_time_policy": "UNAVAILABLE",
        "verification_bundle_policy": "DEFINED_BUT_INACTIVE",
        "assurance_state_after_success": "INDEPENDENTLY_VERIFIABLE_ONLY_IF_ALL_GOVERNED_REQUIREMENTS_PASS",
        "trusted_time_policy": "UNAVAILABLE",
        "transparency_or_offline_bundle_policy": "UNAVAILABLE",
        "structural_policy": "data/stewardship-verification-bundle-structure.json"
      },
      "does_not_establish": "That any signing identity is authorized, that Sigstore is deployed, or that a future configuration is trustworthy before its own roots, identities, policy, signatures, and evidence are verified.",
      "bundle_readiness_policy": "data/stewardship-verification-bundle-readiness.json",
      "migration_authorization": "data/stewardship-verification-migration-authorization.json",
      "owner_authorization_grant_schema": "data/future-owner-authorization-grant-schema.json",
      "owner_authorization_grant_schema_status": "TEST_ONLY_STRUCTURAL_ONLY_NO_ACTIVATION",
      "authorization_decision_ledger": "data/future-owner-authorization-decision-ledger.json",
      "authorization_decision_ledger_status": "TEST_ONLY_STRUCTURAL_DECISION_EVIDENCE_NO_ACTIVATION",
      "authorization_decision_lifecycle": "data/future-owner-authorization-decision-lifecycle.json",
      "authorization_decision_currentness": "data/future-owner-authorization-decision-currentness.json",
      "authorization_decision_lifecycle_status": "TEST_ONLY_NO_ACTIVATION",
      "authorization_decision_currentness_status": "TEST_ONLY_NO_ACTIVATION"
    }
  },
  "profile_selection_rule": "LOCAL_HASH_SCOPE is the only active profile. FUTURE_AUTHENTICATED_SCOPE remains UNAVAILABLE_NOT_AUTHORIZED until separate owner authorization plus independently verifiable identity, trust-root/issuer, signature, and transparency/bundle evidence exist.",
  "official_references": [
    {
      "project": "DSSE Protocol",
      "url": "https://github.com/secure-systems-lab/dsse/blob/master/protocol.md"
    },
    {
      "project": "in-toto Attestation Framework",
      "url": "https://github.com/in-toto/attestation/blob/main/spec/README.md"
    },
    {
      "project": "Sigstore verification",
      "url": "https://docs.sigstore.dev/cosign/verifying/verify/"
    },
    {
      "project": "Sigstore Rekor",
      "url": "https://docs.sigstore.dev/logging/overview/"
    }
  ],
  "bundle_readiness_policy": "data/stewardship-verification-bundle-readiness.json",
  "candidate_target_version": "1.25.0",
  "verification_bundle_structure_policy": "data/stewardship-verification-bundle-structure.json",
  "policy_drift_defense": {
    "state": "ACTIVE_LOCAL_FAIL_CLOSED",
    "history_scope": "LOCAL_ONLY",
    "accepted_policy_anchor": "docs/release/stewardship-verification-policy-v1.24.0.json",
    "accepted_policy_anchor_sha256": "118a8752990e9636d9e8371209a95662326b5d42ca4f6fcb28f874b228e2ad70",
    "accepted_bundle_structure_anchor": "docs/release/stewardship-verification-bundle-structure-v1.24.0.json",
    "accepted_bundle_structure_anchor_sha256": "f69ea238746e53ecbc870bd2553c012bb35042be5b88cd6745099bc5f194615c",
    "accepted_policy_anchors": [
      {
        "release_version": "1.18.0",
        "path": "docs/release/stewardship-verification-policy-v1.18.0.json",
        "sha256": "21e25a9c0bf89553b708f57ba49d1c4ca824d5c20b074e5a5412f8c5963f10f6"
      },
      {
        "release_version": "1.19.0",
        "path": "docs/release/stewardship-verification-policy-v1.19.0.json",
        "sha256": "8c5e1033936adcb6a77a2f2f92752a2f81c3fbd35a015e74b572244f58dd85f1"
      },
      {
        "release_version": "1.20.0",
        "path": "docs/release/stewardship-verification-policy-v1.20.0.json",
        "sha256": "ab60af3033d412154ad48d6fef98373c2f6b17ccc5dbb2b531dcb0a82388c400"
      },
      {
        "release_version": "1.21.0",
        "path": "docs/release/stewardship-verification-policy-v1.21.0.json",
        "sha256": "5fa9f4e086ea5d49b2a6545ebe0223928d5227d0d6989ce1dc11c1a911bae67b"
      },
      {
        "release_version": "1.22.0",
        "path": "docs/release/stewardship-verification-policy-v1.22.0.json",
        "sha256": "415517a5b9455bb0f69c5b65ddf491e297de318fc5fca33da0c343accec9f7fa"
      },
      {
        "release_version": "1.23.0",
        "path": "docs/release/stewardship-verification-policy-v1.23.0.json",
        "sha256": "6b565cdff979a4e9990097c3400c2abf0fb4a3e46eeff87de95881466f4ade2a"
      },
      {
        "release_version": "1.24.0",
        "path": "docs/release/stewardship-verification-policy-v1.24.0.json",
        "sha256": "118a8752990e9636d9e8371209a95662326b5d42ca4f6fcb28f874b228e2ad70"
      }
    ],
    "lineage_artifact": "data/stewardship-verification-policy-lineage.json",
    "diff_artifact": "data/stewardship-verification-policy-diff.json",
    "reproducibility_manifest": "data/stewardship-verification-policy-diff-reproducibility.json",
    "migration_authorization_artifact": "data/stewardship-verification-migration-authorization.json",
    "owner_authorization_grant_schema": "data/future-owner-authorization-grant-schema.json",
    "authorization_decision_ledger": "data/future-owner-authorization-decision-ledger.json",
    "authorization_decision_lifecycle": "data/future-owner-authorization-decision-lifecycle.json",
    "authorization_decision_currentness": "data/future-owner-authorization-decision-currentness.json",
    "review_queue_aging_policy": "data/dependency-review-queue-aging.json",
    "claim_reliance_control": "data/claim-reliance-control.json",
    "claim_reliance_receipts": "data/claim-reliance-suspension-receipts.json",
    "suspension_escalation_policy": "data/dependency-suspension-escalation.json",
    "review_risk_explainability": "data/review-risk-explainability.json",
    "claim_reliance_current_state": "data/claim-reliance-current-state.json",
    "grant_acceptance_defense": {
      "replay": "REJECT",
      "wrong_release": "REJECT",
      "partial_dimensions": "REJECT",
      "unauthorized_trust_root_change": "REJECT",
      "trusted_time_bypass": "REJECT",
      "transparency_or_offline_bypass": "REJECT",
      "activation_from_structural_schema": "REJECT",
      "queue_age_laundering": "REJECT",
      "suspended_claim_publication_bypass": "REJECT",
      "stale_resumption_receipt": "REJECT",
      "authorization_decision_rewrite": "REJECT",
      "expired_decision_reuse": "REJECT",
      "grant_decision_digest_substitution": "REJECT",
      "escalation_date_laundering": "REJECT",
      "receipt_prefix_truncation": "REJECT",
      "replacement_without_predecessor": "REJECT",
      "revoked_decision_reuse": "REJECT",
      "operational_label_to_legal_score_laundering": "REJECT",
      "stale_current_state_reconstruction": "REJECT",
      "acknowledgement_backdating": "REJECT",
      "checkpoint_prefix_forgery": "REJECT",
      "lifecycle_compaction_history_deletion": "REJECT",
      "structural_confidence_to_legal_confidence_laundering": "REJECT",
      "contradictory_resolver_states": "REJECT",
      "checkpoint_wrong_release_replay": "REJECT",
      "checkpoint_rollback": "REJECT",
      "forked_checkpoint_succession": "REJECT",
      "acknowledgement_closure_without_open_acknowledgement": "REJECT",
      "post_checkpoint_suffix_omission": "REJECT",
      "freshness_to_legal_score_laundering": "REJECT",
      "recovery_proof_wrong_release_replay": "REJECT"
    },
    "protected_dimensions": [
      "trusted_time",
      "identity_trust_root",
      "subject",
      "material_scope",
      "transparency_offline_evidence",
      "release_binding",
      "failure_behavior",
      "profile_activation_authorization",
      "grant_replay_and_bypass_defense",
      "suspension_and_decision_controls",
      "checkpoint_acknowledgement_consistency_controls",
      "checkpoint_succession_recovery_controls"
    ],
    "weakening_behavior": "FAIL_CLOSED",
    "remote_policy_immutability_claimed": false,
    "escalation_acknowledgement_receipts": "data/escalation-acknowledgement-receipts.json",
    "claim_reliance_resolver_checkpoints": "data/claim-reliance-resolver-checkpoints.json",
    "authorization_decision_lifecycle_checkpoints": "data/authorization-decision-lifecycle-checkpoints.json",
    "resolver_structural_confidence": "data/resolver-structural-confidence.json",
    "cross_resolver_consistency": "data/cross-resolver-consistency.json",
    "checkpoint_succession": "data/checkpoint-succession.json",
    "escalation_acknowledgement_closure_receipts": "data/escalation-acknowledgement-closure-receipts.json",
    "structural_state_recovery_proofs": "data/structural-state-recovery-proofs.json",
    "checkpoint_freshness": "data/checkpoint-freshness.json",
    "cross_resolver_recovery_consistency": "data/cross-resolver-recovery-consistency.json"
  },
  "api_surface": "stewardship_verification_policy"
}