{
  "release": "h33-verifier",
  "version": "v0.1.0",
  "released_at": "2026-06-04T07:00:00Z",
  "category": "Trustless Decision Attestation infrastructure",
  "binary_name": "h33-independent-canonical-replay",

  "anti_drift_invariants": {
    "Q0_who_bears_risk": "Never H33. H33 bears attestation accuracy + verifier correctness — and nothing else.",
    "Q0_5_who_owns_the_decision": "The decision owner always remains the decision owner. H33 never becomes the decision maker.",
    "money_quote": "Attestation ≠ Underwriting."
  },

  "artifacts": [
    {
      "kind": "binary",
      "filename": "h33-independent-canonical-replay-v0.1.0-aarch64-apple-darwin",
      "target_triple": "aarch64-apple-darwin",
      "size_bytes": 1149600,
      "sha3_256": "4b7e3576b3756f54990853abc418b2473640a521d3541bb8b5dc9b180c194361",
      "sha256": "3fb0886638dc495b56de765782cbc545c28b56439f61e800f05ed2c6f20b584e",
      "executable": true,
      "purpose": "Independently replay a canonical event log; reproduce the SACRED state_id byte-identically; verify a case package's structural integrity. Runs without H33, without SCIF, without network."
    },
    {
      "kind": "source-tarball",
      "filename": "h33-verifier-source-v0.1.0.tar.gz",
      "size_bytes": 55283352,
      "sha3_256": "98d4ce874bbace0b7e6fc04ef4d321a4730cbcc4eba252da36a8ecf6c89647a5",
      "sha256": "bfda4425451f890c0a9ca51ee77c60bfc7bbfe85caf3456e4e0d71bb79b4c1fa",
      "source_state_commit": "234b823ffc6cbf2107da3e4cdec0a5101918e5e8",
      "purpose": "The exact source tree the v0.1.0 binary was built from. A third party can untar, build, and confirm the resulting binary's SHA3-256 matches the binary artifact above."
    },
    {
      "kind": "example-output",
      "filename": "example-output-claim-84711.json",
      "size_bytes": 3019,
      "purpose": "The verifier's output when run against the canonical-continuity-tenant case (claim-84711) inside the enterprise bundle at /workspace/portability/bundles/. Shows the determination string and overall_pass boolean a third party should expect to see."
    }
  ],

  "build_environment": {
    "rustc": "rustc 1.93.1 (01f6ddf75 2026-02-11)",
    "cargo": "cargo 1.93.1 (083ac5135 2025-12-15)",
    "build_command": "cargo build --release --bin h33-independent-canonical-replay",
    "build_target": "aarch64-apple-darwin",
    "deterministic_build": false,
    "deterministic_build_note": "v0.1 documents the build environment; v0.2 will use a deterministic containerized toolchain so byte-for-byte reproducible builds are possible across machines. v0.1 third parties verify via SHA3-256 match between their own build and the published binary, accepting that the local toolchain must match the build_environment fields above for bytes to align."
  },

  "verifier_capabilities_v0_1": {
    "verifies": [
      "Canonical event log replay produces the expected SACRED state_id",
      "All policy_version_ref values resolve to registered policies",
      "All model_version_ref values resolve to registered models",
      "All parent_decision_ids resolve to earlier decisions",
      "Every decision was made under a valid authority lifecycle state"
    ],
    "verifies_optionally_with_flag": [
      "--verify-signatures: per-event PQ signature verification (ML-DSA-65 + FALCON-512 + SLH-DSA-SHA2-128f)"
    ],
    "does_not_verify": [
      "Attestation document signatures (Trustless Decision Attestation document format · lands v0.2 once attestations exist)",
      "Bundle hash anchoring against an attestation (also v0.2)",
      "Signer identity for canonical events (Phase F · out of scope for v0.1 and v0.2)",
      "Anything outside structural replay — wisdom, fairness, lawfulness, compliance, defensibility-in-court (Q0.5 · NEVER in scope · H33 does not judge decisions)"
    ]
  },

  "deferred_to_v0_2": [
    "Multi-platform releases: Linux x86_64 · Linux aarch64 · Darwin x86_64",
    "PQ-signed releases (release-signing key ceremony required)",
    "Byte-deterministic builds across machines (containerized toolchain)",
    "Attestation document format verification (lands when attestations exist)",
    "CI/CD release automation",
    "Tagged git release in scif-backend (gitlab auth currently unauthenticated for this terminal; v0.2 lands with a public-fetchable tag)"
  ],

  "constitutional_constraints": {
    "applies_per": "Trustless Decision Attestation v1 Product Design Memo (Q0 + Q0.5)",
    "Q0": "This release bears the risk of verifier correctness — the binary must be deterministic and the verdicts byte-identical for byte-identical input. Nothing else.",
    "Q0_5": "This release makes no judgment about any decision. It surfaces structural replay verdicts only."
  }
}