{
  "schemaVersion": "eviulon-assurance-evidence-statement-1.0",
  "id": "EVI-AE-139",
  "evidence_id": "EVI-AE-139",
  "version": "2.19.0",
  "status": "PASS",
  "generated": "2026-08-08",
  "reviewerClass": "repository-automated",
  "authorityIds": [
    "EVI-AUT-001",
    "EVI-AUT-002"
  ],
  "certificationStatus": "Not independent certification",
  "artifactClass": "package-inventory-snapshot",
  "suite": "tools/package_v219_release.py",
  "proofPath": "/docs/proof/package-inventory-results.json",
  "scope": "Root-deployable inventory, current runtime assets, v2.19 governance records, 89-report corpus, protected memory, required paths, inactive connector, no private keys, absent /api/stats and deterministic archive-safety rules.",
  "truthBoundary": "Local static repository, generated-site, local-validator, Chromium-harness, Apache-harness, report-memory, deterministic fixture and package evidence only. No live Patefacere connector, production signing key, production trust anchor, Patefacere mutation, citizen-data exchange, identity, credential or passport transaction, Evulgare operation, production deployment, legal enactment, service guarantee, external recognition or independent certification is established.",
  "result": {
    "status": "PASS",
    "repositoryCoreFileCount": 4086,
    "sourceFileCount": 4820,
    "requiredPathCount": 129,
    "requiredPathsPresent": true,
    "rootDeploymentShapeVerified": true,
    "corpus": {
      "reports": 89,
      "sourceProvenanceRecords": 89,
      "ecosystemSensitiveCorrectedEditions": 21,
      "ecosystemSensitiveRawQuarantines": 21,
      "duplicateIntakeAliases": 4,
      "sectionLevelPointers": 89
    },
    "protectedHashesMatch": true,
    "apiStatsAbsent": true,
    "v219Governance": {
      "reportReviews": 89,
      "findings": 38,
      "mutations": 0,
      "signatureFixtures": 12,
      "policyAmendments": 8,
      "policyConsultations": 8,
      "freshnessRecords": 8,
      "readerJourneys": 8,
      "schemaCount": 6,
      "schemaVectors": 78
    },
    "connectorState": "contract-published-connector-inactive",
    "reciprocalVerificationState": "UNAVAILABLE",
    "productionSigningEnabled": false,
    "privateKeysPresent": false,
    "finalArchiveReplayRecordedExternally": true,
    "finalInventoryRequiredAfterEvidenceBinding": true
  },
  "preBindingProofSha256": "1b4c6afb9e1cac4058917413a0c2c0ce03cdbeb1ca395b11f4c6353e150c90d4",
  "proofBindingStatus": "Clean pre-evidence-binding inventory snapshot. The final repository inventory, public-manifest binding, ZIP CRC, exact extraction replay, deterministic rebuild, and archive SHA-256 are re-evaluated after these evidence statements are projected and are recorded in the external package audit.",
  "limitations": [
    "Exact final ZIP SHA-256, CRC, extraction replay and deterministic rebuild are recorded in the external package audit after final source gates pass."
  ]
}