{
  "contract": "r2pq-verification-result/2",
  "failed": [],
  "layers": {
    "certificate_trust": {
      "detail": "No trust store, TSA policy, or revocation validation is performed.",
      "status": "NOT EVALUATED"
    },
    "format": {
      "detail": "Recognized leaf format 2; result semantics are version 2.",
      "status": "PASS"
    },
    "inclusion_proofs": {
      "detail": "1 supplied proof paths reconstruct the root; this does not establish completeness.",
      "status": "PASS"
    },
    "operator_provenance": {
      "detail": "This format provides no authenticated operator identity.",
      "status": "NOT PROVIDED"
    },
    "payload_correspondence": {
      "detail": "Shareable receipt omits assessment payloads.",
      "status": "NOT PROVIDED"
    },
    "root_reconstruction": {
      "detail": "Supplied leaves reconstruct the root.",
      "status": "PASS"
    },
    "timestamp_binding": {
      "detail": "No external timestamp supplied.",
      "status": "NOT PROVIDED"
    },
    "token_signature": {
      "detail": "No timestamp token supplied.",
      "status": "NOT PROVIDED"
    }
  },
  "limitations": [
    "Not verification of assessment correctness, discovery coverage, runtime behavior, or migration completion.",
    "No operator provenance or trusted TSA identity established.",
    "Display metadata (including report ID and generated_at_ms) is not authenticated by these checks.",
    "A signed time assertion is not proof of when the scan ran; long-term validation is not performed."
  ],
  "passed": [
    "format",
    "root_reconstruction",
    "inclusion_proofs"
  ],
  "summary": "AVAILABLE CHECKS PASSED",
  "unavailable": [
    "payload_correspondence",
    "timestamp_binding",
    "token_signature",
    "certificate_trust",
    "operator_provenance"
  ]
}