{
  "_demo": {
    "attack_class": "Forged Receipt",
    "scenario": "Attacker mints a fake verification receipt that claims Compliance Desk Zeta verified an Acme NAP artifact. The JSON is well-formed and the principal URN is real. The signature blocks, however, are forged.",
    "expected_rejection": "TripleFamilySignaturesInvalid",
    "live_check_in_browser": "Inspect signature blobs — all bytes are zero, which is the canonical forge tell. The receipt cannot have been produced by Zeta's signing keys.",
    "production_check": "qsign_fed_receipts::verify_receipt invokes h33_root::sig::triple_verify against Zeta's pubkeys recorded in the federation key registry; the 2-of-3 threshold fails immediately and the verifier returns ReceiptOutcome::Invalid."
  },
  "schema": "urn:h33:qsign:fed-verification-receipt:v0.1",
  "receipt_hash": "1111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111af",
  "body": {
    "verifier_principal_id": "urn:h33:fed:compliance-desk-zeta:verifier:nightly-batch",
    "verified_artifact_schema": "urn:h33:qsign:nap:v0.1",
    "verified_artifact_binding_hash": "a3f7c91e4b8d2061cf5a93e72b4d6f8a01c39e7b5f2a4d6c8e0a1b3d5f7e9c1a2b4d6f8a0c2e4061739b5d8e0f2a4c6e8",
    "verifier_outcome": "Valid",
    "registry_tip_hash_at_verification": "f7c4a2e8b9d3f1c6a5e02071e93b4d6f8a0c2e4f6081739b5d8e0f2a4c6e8b0d2f4a6c8e0b2d4f60819a3c5e7f9b1d3e5",
    "registry_records_at_verification": 5,
    "verified_at_unix_ms": 1780000120000,
    "verifier_software": "rogue/0.1",
    "notes": "forged — no real verifier produced this"
  },
  "signatures": {
    "ml_dsa_87":    "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "slh_dsa_256s": "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000",
    "falcon":       "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"
  }
}