{
  "_note": "Generated by h33-pq-verified-pillar3 at unix=1781063169. CKKS-256 engine: crate::fhe::ckks (H33-native, no third-party FHE). Five plaintext signals encrypted into one CKKS ciphertext (SIMD packing); five weights into a second ciphertext; encrypted multiplication via CkksEvaluator::multiply (with relin keys); single decryption of the product; per-slot sum in plaintext; threshold classification. Four H33-74-v3 receipts (keygen, encrypt\u00d72, evaluate, decrypt) chain-back to this bundle via receipt_ids. Triple-family PQ signatures pending release-principal key access.",
  "_status": "REAL_H33_NATIVE_FHE_BUNDLE_READY_SIGNATURES_PENDING",
  "attested_output": {
    "decision_class": "ship",
    "output_ciphertext_sha3_384": "9dbae9d658d7faada7ae358f59538d9a4a6b00002caddfd65103a9ef0a9a15cf85de890241cd6f637acecded00efd790",
    "output_ciphertext_size_bytes": 15728921,
    "score_range_hash": "560d4dd7d19787887d773da59d310631bd0f55d3692fe67c2a77f750237f465f2204a36ceb0f5b6637d0d25c1828b6b8"
  },
  "computation_engine": {
    "backend": "CKKS",
    "engine_source": "crate::fhe::ckks via crate::api::fhe_l5_handlers + crate::api::fhe_l5_receipts",
    "fingerprint": "824a580a653b6c742cae8d9815a7bebfdb5f3cda1e625d09e437954a29026beca68c85ebc07830cee38caa4a6869d160",
    "h33_native": true,
    "name": "H33 FHE-IQ",
    "third_party_libraries": []
  },
  "cycle_id": "2026-Q2-001",
  "data_access_mode": "encrypted",
  "encrypted_inputs": [
    {
      "ciphertext_sha3_384": "d919c1e89bf45a5800881b8b818fad39fe8ed4a269edd3432688689d317624a6d5e81147b15422730eb15910e5ac9f7f",
      "name": "test_pass_rate",
      "schema_hash": "fab90c68e29e35f2ba51e9489baefbd1688c642d17882247e6f90221413bd4cd81a51202f886dd0ee3904255076f9377"
    },
    {
      "ciphertext_sha3_384": "e4e90a917a4387efdc28c2aa7940650161b60592fc79e9b33bf0b36597343cd60a8cc7d75b932580fe628cc28f920a73",
      "name": "conformance_status",
      "schema_hash": "6a46d3e07194faff11f3287c3c81d6bea575b29899a5b6b499ebf07e1306aee289e1a950cf1bd120dcb87d1b16c475da"
    },
    {
      "ciphertext_sha3_384": "e353c0b9df91cd8ef0b4e14501ba995bf94adf978b5869e624d0deb4086fb7610814c6f9fe0a21767c92e3c66c9ff384",
      "name": "security_checks",
      "schema_hash": "458f5fcec28f6999ca1cb27aa6fc1803925e267fb2e49b44aaffbcc1e51d1dcbd607950af4a214a3b3b3fc8f9b2c53dc"
    },
    {
      "ciphertext_sha3_384": "c9767d0831bb89e334b4e3807f459c1a8c5b2d2190bab49c1c99e554c9acbdbe4d4a465263fcc595c5589bc06ecf881a",
      "name": "dependency_health",
      "schema_hash": "a27923c63253f951321958b3417ef97454614160a2cf76ef069da821ea4d632d8f366b632d0f2637971399baeaf62a40"
    },
    {
      "ciphertext_sha3_384": "a579b8a1fec4436238e70c29fd66151a38bda857877c6a48732f2fb5a90f75651a9c0d97fdbfb52e9c89a297d9915648",
      "name": "performance_thresholds",
      "schema_hash": "dd6d26e48e26fe03467f720ef5aa5f9624ddfe1d0615512dd0c25d0fad54603f9677ec9e54e5394940f592b582e04ddc"
    }
  ],
  "fhe_computation": {
    "circuit_depth": 1,
    "circuit_hash": "fb7d2a2264dd931418a59dd65329ec0c010d682d229cdff3ed3dcf73c9ad870648c97f4612b657045b92234ee67634fa",
    "execution_proof_sha3_384": "3a611ab0af37b25541781297e1cb24160cf291114ee6e5ca278c0cf6196235caa0bd035abd0e90e8b97622e8e6441ac4",
    "operations": [
      "weighted_sum",
      "threshold_comparison"
    ]
  },
  "fhe_iq_attestation": {
    "attestation_note": "Plaintext inputs observed only at the CkksEncoder::encode_real boundary (single observation site at the input-encryption call). All subsequent operations are on CKKS-256 ciphertexts: encrypt(weights) + multiply(ct, ct) = encrypted product. A single decryption returns the per-slot weighted contributions; these are summed in plaintext at lines 333-340 of the producer binary src/bin/h33_pq_verified_pillar3.rs and immediately discarded after threshold-classification. The exact numeric weighted score is never written to the bundle, never logged, never returned. Only the decision_class (ship) is published.",
    "data_access_mode_honored": true,
    "no_plaintext_access_verified": true,
    "verifier_signature": {
      "ml_dsa_87": "PENDING_INDEPENDENT_FHE_VERIFIER_SIGNATURE"
    }
  },
  "h33_74_v3_receipts": [
    {
      "bundle_id": null,
      "caller_owner": "h33-self-attestation-pillar3",
      "code_version": "1.0.0",
      "engine_id": "ckks-256",
      "envelope_hash": "5d0699231c89d229c6a46633d238f1bd8dc5a855b17a7889d3a4e4647f4e73db",
      "input_commitment": "a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a",
      "operation": "keygen",
      "output_commitment": "284462ed8a1c9ce0412cad4bd2ccd1bd601a32f0e35da07cf05f1668ad773572",
      "parameter_profile": "nist-l5",
      "product_id": "ckks-256",
      "receipt_id": "219b21f1dd9198862899c4c59dc161c5031b016ca5faf825ccefaa7ce12443bd",
      "session_id": "8ba8690c-5fb3-dabd-b583-26d9a6030979",
      "status": "success",
      "timestamp_unix": 1781063168
    },
    {
      "bundle_id": null,
      "caller_owner": "h33-self-attestation-pillar3",
      "code_version": "1.0.0",
      "engine_id": "ckks-256",
      "envelope_hash": "5d0699231c89d229c6a46633d238f1bd8dc5a855b17a7889d3a4e4647f4e73db",
      "input_commitment": "54d8a5a37a342f3a7970cbef1e83ab182596fc2318dc9f61b4883c5dfd594ab6",
      "operation": "encrypt",
      "output_commitment": "57ac2e58f4bfad60c17af83a75897f408fd74bc7c618b0159b924510d5b59009",
      "parameter_profile": "nist-l5",
      "product_id": "ckks-256",
      "receipt_id": "1a0f955e4652974da5a65e3bdef34ffe85b4b1e66300cfa45d6d6a83f10cfbb4",
      "session_id": "8ba8690c-5fb3-dabd-b583-26d9a6030979",
      "status": "success",
      "timestamp_unix": 1781063168
    },
    {
      "bundle_id": null,
      "caller_owner": "h33-self-attestation-pillar3",
      "code_version": "1.0.0",
      "engine_id": "ckks-256",
      "envelope_hash": "5d0699231c89d229c6a46633d238f1bd8dc5a855b17a7889d3a4e4647f4e73db",
      "input_commitment": "dc74d4b2daf75c9e0279b49eb6ded0dcaf499d9fda2519f36b6e11b63152133b",
      "operation": "encrypt",
      "output_commitment": "95150f20822dc35ae7be7741512cd986130474863acef41b4223924b427fbad7",
      "parameter_profile": "nist-l5",
      "product_id": "ckks-256",
      "receipt_id": "143b53b9b5c137d192b894a93bf21b5520606b4482b1dfff02ca7614f5388ca7",
      "session_id": "8ba8690c-5fb3-dabd-b583-26d9a6030979",
      "status": "success",
      "timestamp_unix": 1781063168
    },
    {
      "bundle_id": null,
      "caller_owner": "h33-self-attestation-pillar3",
      "code_version": "1.0.0",
      "engine_id": "ckks-256",
      "envelope_hash": "5d0699231c89d229c6a46633d238f1bd8dc5a855b17a7889d3a4e4647f4e73db",
      "input_commitment": "afcb91fed0ade0ec75b4be654af04f5173bacbc68909cfec1afba4121b26d267",
      "operation": "evaluate",
      "output_commitment": "3ce0bd7a47d09bf9b52bc623266971c57985f5e56eb60c004d24bb9c7e8383cb",
      "parameter_profile": "nist-l5",
      "product_id": "ckks-256",
      "receipt_id": "52957fc5363604a8bb157461dc192cd0d5cfbdb81c67b8776c7ac769ef1025a3",
      "session_id": "8ba8690c-5fb3-dabd-b583-26d9a6030979",
      "status": "success",
      "timestamp_unix": 1781063169
    },
    {
      "bundle_id": null,
      "caller_owner": "h33-self-attestation-pillar3",
      "code_version": "1.0.0",
      "engine_id": "ckks-256",
      "envelope_hash": "5d0699231c89d229c6a46633d238f1bd8dc5a855b17a7889d3a4e4647f4e73db",
      "input_commitment": "3ce0bd7a47d09bf9b52bc623266971c57985f5e56eb60c004d24bb9c7e8383cb",
      "operation": "decrypt",
      "output_commitment": "918b7df148e6dec8f7b4bc89c95ca6e74d5fb657b56756883ab5120f3c4e992b",
      "parameter_profile": "nist-l5",
      "product_id": "ckks-256",
      "receipt_id": "2c237052e96df4c63a94638f98fd68f3e3b967377bf5a2ba435daa17ee58b59f",
      "session_id": "8ba8690c-5fb3-dabd-b583-26d9a6030979",
      "status": "success",
      "timestamp_unix": 1781063169
    }
  ],
  "publishing_rule": "Encrypted-input hashes + computation manifest + attested output classification ONLY. Underlying input values and exact numeric scores are never exposed. Encrypted-in-use throughout. The substrate demonstrates the H33 product principle of verifying integrity without exposing data \u2014 recursively, against H33's own release governance loop.",
  "receipt_ids": [
    "219b21f1dd9198862899c4c59dc161c5031b016ca5faf825ccefaa7ce12443bd",
    "1a0f955e4652974da5a65e3bdef34ffe85b4b1e66300cfa45d6d6a83f10cfbb4",
    "143b53b9b5c137d192b894a93bf21b5520606b4482b1dfff02ca7614f5388ca7",
    "52957fc5363604a8bb157461dc192cd0d5cfbdb81c67b8776c7ac769ef1025a3",
    "2c237052e96df4c63a94638f98fd68f3e3b967377bf5a2ba435daa17ee58b59f"
  ],
  "schema_version": "h33-pq-verified/pillar3-privacy-release-readiness/v1.0",
  "signatures": {
    "falcon_1024": "PENDING_SIGNING_BY_RELEASE_PRINCIPAL",
    "ml_dsa_87": "PENDING_SIGNING_BY_RELEASE_PRINCIPAL",
    "slh_dsa_256s": "PENDING_SIGNING_BY_RELEASE_PRINCIPAL"
  },
  "verification_record": {
    "result": "PENDING",
    "verifier_fingerprint": "NOT_A_VALID_FINGERPRINT_THIS_FIELD_IS_TAMPERED_WITH_AND_DOES_NOT_PARSE_AS_HEX",
    "verifier_version": "h33-verify 0.3.0"
  },
  "workflow": "Release Readiness Scoring"
}