{
  "schema": "concresca.activation-receipt-policy.v027",
  "site_version": "0.28.0-wip",
  "canonical_origin": "https://concresca.com",
  "digest_rule": "SHA-256 of canonical JSON after removing receiptDigestSha256; keys sorted; UTF-8; compact separators; no secret values.",
  "independence_rule": "Each gate is verified from its own receipt. A green source receipt cannot satisfy suite, database, dogfood, redress, Passenger, or owner-authorization evidence.",
  "receipt_types": {
    "source": {
      "required_for": [
        "staging",
        "production"
      ],
      "actual_result": null
    },
    "upstream_suite": {
      "required_for": [
        "staging",
        "production"
      ],
      "actual_result": null
    },
    "mysql": {
      "required_for": [
        "staging",
        "production"
      ],
      "actual_result": null
    },
    "owner_authorization": {
      "required_for": [
        "staging",
        "production"
      ],
      "actual_result": null
    },
    "dogfood": {
      "required_for": [
        "production"
      ],
      "actual_result": null
    },
    "redress": {
      "required_for": [
        "production"
      ],
      "actual_result": null
    },
    "passenger": {
      "required_for": [
        "production"
      ],
      "actual_result": null
    }
  },
  "public_projection": "Receipt paths, credentials, database names, filesystem roots, raw tokens, peppers, private evidence, and unrestricted command output are never exposed.",
  "local_contract_evidence": {
    "status": "PASS",
    "executed_checks": 49,
    "passed_checks": 49,
    "failed_checks": 0,
    "path": "v0.27.0-wip-root-runtime-tests.json",
    "sha256": "e2489158a687a607c84ab8d63c7a15c9045c33dfdcacfa41b1efb0304cbda795"
  },
  "status": "LOCAL_VERIFIER_TESTED_OPERATIONAL_RECEIPTS_ABSENT",
  "truth_boundary": "Receipt parsing, digest rejection, independent-gate behavior, and public redaction were executed with synthetic fixtures only."
}
