{
  "schemaVersion": "judaxis.public-live-proof-summary.v1",
  "sourceSchemaVersion": "judaxis.sentinel.live-kvm-proof.v1",
  "generatedAt": "2026-10-16T19:32:31.589Z",
  "verified": true,
  "evidenceSha256": "f01c4bdcd7f8a931808a2bc1a1f8e96a0825c5c02e26a9f58f37952ffe2e781b",
  "trustedKeySha256": "fcf83fbb691a92f78a44fc56d10d9496614587492d2d9d40c78b11d50519d711",
  "runtime": {
    "isolation": "KVM-backed Kata guest",
    "workloadIdentity": "Kubernetes to OpenBao",
    "allowedEffect": "executed exactly once",
    "deniedMutation": "blocked before broker or target",
    "rawSecretRetained": false
  },
  "modelPlan": {
    "source": "pinned network-isolated local model",
    "modelName": "qwen2.5-coder:1.5b-instruct-q4_K_M",
    "modelId": "d7372fd82851",
    "actionOrder": [
      "policy.mutate",
      "release.attest"
    ],
    "planDigest": "a1685d8a6981b7b23e87899ae80851b0b4db628f94e347fa773198552b94d29d",
    "signatureVerified": true,
    "outputExecutedDirectly": false,
    "rawResponseRetained": false,
    "enforcement": "fixed-action plan enforced by the independent gateway in KVM"
  },
  "exposure": {
    "kubernetesApi": "blocked externally",
    "openBao": "blocked externally"
  },
  "supplyChain": {
    "imageDigest": "sha256:d8cd2956fdaf30d05c620533cfa77549fd977c786245fe1df2bf628f0fd264a0",
    "sbomFormat": "CycloneDX-1.6",
    "sbomSha256": "76fa90507d7f2c7b531b04709ade7b8baa1c5026dacbf280c256590b4aa7ccee",
    "mutableTagPresent": false,
    "sourceCodeConfigMapsPresent": false
  },
  "signing": {
    "algorithm": "Ed25519",
    "trustScope": "ephemeral staging",
    "kmsOrHsmBacked": false
  },
  "limitations": [
    "production-high-availability",
    "external-penetration-test",
    "customer-production-workload",
    "hardware-backed-kms-or-hsm-signing",
    "arbitrary-agent-behavior-prevention",
    "online-model-in-kvm-guest",
    "external-frontier-model-provider"
  ]
}