{
  "schema_version": "nexuscrm.layout-bundle-owner-verification-receipt.conformance/v1",
  "receipt_vectors": [
    {
      "name": "app-owner",
      "receipt": {
        "receipt_version": "nexuscrm.layout-bundle-owner-verification-receipt/v1",
        "org_id": "org-layout",
        "writer_command_id": "0190d800-0000-7000-8000-000000000123",
        "writer_reservation_generation": "128",
        "source_request_digest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
        "required_bundle_key_set_digest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
        "bundle_key": {
          "slot_owner_kind": "app",
          "slot_owner_namespace": "io.example.app",
          "local_component_key": "key256:1111111111111111111111111111111111111111111111111111111111111111"
        },
        "evidence_version": "nexuscrm.layout-bundle-app-authority-evidence/v1",
        "evidence_digest": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
        "verification_state": 1
      },
      "canonical_bytes_length": "487",
      "canonical_bytes_hex": "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",
      "receipt_digest": "sha256:11c22c741abd7c25837d04567f3aa45dbe449565f9b7bce86588a6b8783f8d0e"
    },
    {
      "name": "tenant-owner",
      "receipt": {
        "receipt_version": "nexuscrm.layout-bundle-owner-verification-receipt/v1",
        "org_id": "org-layout",
        "writer_command_id": "0190d800-0000-7000-8000-000000000123",
        "writer_reservation_generation": "128",
        "source_request_digest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
        "required_bundle_key_set_digest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
        "bundle_key": {
          "slot_owner_kind": "tenant",
          "slot_owner_namespace": "io.example.tenant",
          "local_component_key": "key256:2222222222222222222222222222222222222222222222222222222222222222"
        },
        "evidence_version": "nexuscrm.layout-bundle-tenant-authority-evidence/v1",
        "evidence_digest": "sha256:2222222222222222222222222222222222222222222222222222222222222222",
        "verification_state": 1
      },
      "canonical_bytes_length": "493",
      "canonical_bytes_hex": "346e6578757363726d2e6c61796f75742d62756e646c652d6f776e65722d766572696669636174696f6e2d726563656970742f76310a6f72672d6c61796f75742430313930643830302d303030302d373030302d383030302d3030303030303030303132338001477368613235363a61616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161477368613235363a626262626262626262626262626262626262626262626262626262626262626262626262626262626262626262626262626262626262626262626262626262621d6e6578757363726d2e6c61796f75742d62756e646c652d6b65792f76310211696f2e6578616d706c652e74656e616e74476b65793235363a32323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232336e6578757363726d2e6c61796f75742d62756e646c652d74656e616e742d617574686f726974792d65766964656e63652f7631477368613235363a3232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323201",
      "receipt_digest": "sha256:3c3babc8fce091527c814c69ebc4c79f946a58e84e965e23801e09a4f11afc57"
    },
    {
      "name": "system-owner",
      "receipt": {
        "receipt_version": "nexuscrm.layout-bundle-owner-verification-receipt/v1",
        "org_id": "org-layout",
        "writer_command_id": "0190d800-0000-7000-8000-000000000123",
        "writer_reservation_generation": "128",
        "source_request_digest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
        "required_bundle_key_set_digest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
        "bundle_key": {
          "slot_owner_kind": "system",
          "slot_owner_namespace": "io.nexuscrm.system",
          "local_component_key": "key256:3333333333333333333333333333333333333333333333333333333333333333"
        },
        "evidence_version": "nexuscrm.layout-bundle-system-authority-evidence/v1",
        "evidence_digest": "sha256:3333333333333333333333333333333333333333333333333333333333333333",
        "verification_state": 1
      },
      "canonical_bytes_length": "494",
      "canonical_bytes_hex": "346e6578757363726d2e6c61796f75742d62756e646c652d6f776e65722d766572696669636174696f6e2d726563656970742f76310a6f72672d6c61796f75742430313930643830302d303030302d373030302d383030302d3030303030303030303132338001477368613235363a61616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161477368613235363a626262626262626262626262626262626262626262626262626262626262626262626262626262626262626262626262626262626262626262626262626262621d6e6578757363726d2e6c61796f75742d62756e646c652d6b65792f76310312696f2e6e6578757363726d2e73797374656d476b65793235363a33333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333336e6578757363726d2e6c61796f75742d62756e646c652d73797374656d2d617574686f726974792d65766964656e63652f7631477368613235363a3333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333301",
      "receipt_digest": "sha256:fe2e5023d2ad6e7f1cd0d899688eb4a42a1461327f15511dbb8f1254dba55bed"
    }
  ],
  "set_vectors": [
    {
      "name": "empty-complete-set",
      "fixture": "empty",
      "source_envelope": {
        "receipt_set_version": "nexuscrm.layout-bundle-owner-verification-receipt-set/v1",
        "receipt_version": "nexuscrm.layout-bundle-owner-verification-receipt/v1",
        "org_id": "org-layout",
        "writer_command_id": "0190d800-0000-7000-8000-000000000123",
        "writer_reservation_generation": "128",
        "source_request_digest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
      },
      "required_bundle_key_set": {
        "version": "nexuscrm.required-layout-bundle-key-set/v1",
        "bundle_keys": []
      },
      "receipts": [],
      "required_bundle_key_set_digest": "sha256:58252dfd20cdc6bd5d1ee83638d4dcb02cc3b1337c600235241c4b4861aa92a8",
      "canonical_receipt_digests": [],
      "canonical_bytes_length": "335",
      "canonical_bytes_hex": "386e6578757363726d2e6c61796f75742d62756e646c652d6f776e65722d766572696669636174696f6e2d726563656970742d7365742f7631346e6578757363726d2e6c61796f75742d62756e646c652d6f776e65722d766572696669636174696f6e2d726563656970742f76310a6f72672d6c61796f75742430313930643830302d303030302d373030302d383030302d3030303030303030303132338001477368613235363a61616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161477368613235363a353832353264666432306364633662643564316565383336333864346463623032636333623133333763363030323335323431633462343836316161393261381d6e6578757363726d2e6c61796f75742d62756e646c652d6b65792f763100",
      "receipt_set_digest": "sha256:ac2007f22e9193695735f81133c54119562aaafaaef08617ddd9e37febef86e3"
    },
    {
      "name": "mixed-owner-permuted",
      "fixture": "mixed-owner-permuted",
      "source_envelope": {
        "receipt_set_version": "nexuscrm.layout-bundle-owner-verification-receipt-set/v1",
        "receipt_version": "nexuscrm.layout-bundle-owner-verification-receipt/v1",
        "org_id": "org-layout",
        "writer_command_id": "0190d800-0000-7000-8000-000000000123",
        "writer_reservation_generation": "128",
        "source_request_digest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
      },
      "required_bundle_key_set": {
        "version": "nexuscrm.required-layout-bundle-key-set/v1",
        "bundle_keys": [
          {
            "slot_owner_kind": "tenant",
            "slot_owner_namespace": "io.example.tenant",
            "local_component_key": "key256:2222222222222222222222222222222222222222222222222222222222222222"
          },
          {
            "slot_owner_kind": "system",
            "slot_owner_namespace": "io.nexuscrm.system",
            "local_component_key": "key256:3333333333333333333333333333333333333333333333333333333333333333"
          },
          {
            "slot_owner_kind": "app",
            "slot_owner_namespace": "io.example.app",
            "local_component_key": "key256:1111111111111111111111111111111111111111111111111111111111111111"
          }
        ]
      },
      "receipts": [
        {
          "bundle_key": {
            "slot_owner_kind": "system",
            "slot_owner_namespace": "io.nexuscrm.system",
            "local_component_key": "key256:3333333333333333333333333333333333333333333333333333333333333333"
          },
          "evidence_version": "nexuscrm.layout-bundle-system-authority-evidence/v1",
          "evidence_digest": "sha256:3333333333333333333333333333333333333333333333333333333333333333",
          "verification_state": 1
        },
        {
          "bundle_key": {
            "slot_owner_kind": "tenant",
            "slot_owner_namespace": "io.example.tenant",
            "local_component_key": "key256:2222222222222222222222222222222222222222222222222222222222222222"
          },
          "evidence_version": "nexuscrm.layout-bundle-tenant-authority-evidence/v1",
          "evidence_digest": "sha256:2222222222222222222222222222222222222222222222222222222222222222",
          "verification_state": 1
        },
        {
          "bundle_key": {
            "slot_owner_kind": "app",
            "slot_owner_namespace": "io.example.app",
            "local_component_key": "key256:1111111111111111111111111111111111111111111111111111111111111111"
          },
          "evidence_version": "nexuscrm.layout-bundle-app-authority-evidence/v1",
          "evidence_digest": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
          "verification_state": 1
        }
      ],
      "required_bundle_key_set_digest": "sha256:c7d98d871d368960c1c541e71dbb1d432dce584d850c9189f37167e80d427dcc",
      "canonical_receipt_digests": [
        "sha256:012ef51c7cdb3c76ac8400c244ced04a312ba7b8d1c3dd053e0ee6116d643b20",
        "sha256:317aa1363dae9e0ac5854adf145ef0d1d36a21d22df550e96da687f11d0f99b0",
        "sha256:593390d1aa7ae1179b2ff64508f386fb82106235930f7b0d6755aec4dcfae4b6"
      ],
      "canonical_bytes_length": "978",
      "canonical_bytes_hex": "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",
      "receipt_set_digest": "sha256:1ccff503550a2398783c96764f17cd04bfdfb3d08c5c5a7c0312ccb81a5e5adc"
    }
  ],
  "writer_generation_boundary_vectors": [
    {
      "name": "generation-127",
      "base_receipt_vector": "tenant-owner",
      "writer_reservation_generation": "127",
      "canonical_u_leb128_hex": "7f",
      "canonical_bytes_length": "492",
      "receipt_digest": "sha256:6008c38a7df0a120c87af02a164824589e14bdb482c6b3d8c18842f0d6781672"
    },
    {
      "name": "generation-128",
      "base_receipt_vector": "tenant-owner",
      "writer_reservation_generation": "128",
      "canonical_u_leb128_hex": "8001",
      "canonical_bytes_length": "493",
      "receipt_digest": "sha256:3c3babc8fce091527c814c69ebc4c79f946a58e84e965e23801e09a4f11afc57"
    },
    {
      "name": "generation-max-uint64",
      "base_receipt_vector": "tenant-owner",
      "writer_reservation_generation": "18446744073709551615",
      "canonical_u_leb128_hex": "ffffffffffffffffff01",
      "canonical_bytes_length": "501",
      "receipt_digest": "sha256:2489bf3dd48dcf19d91435699577f251a020228bdd664c421dd0a980783f0b81"
    }
  ],
  "receipt_count_boundary_vectors": [
    {
      "name": "receipt-count-127",
      "source_envelope": "the mixed-owner-permuted envelope",
      "slot_owner_kind": "tenant",
      "slot_owner_namespace": "io.example.tenant",
      "local_component_key_algorithm": "key256: followed by the lowercase hexadecimal index left-padded to 64 digits",
      "receipt_input_order": "ascending index",
      "required_bundle_key_input_order": "descending index",
      "evidence_version": "nexuscrm.layout-bundle-tenant-authority-evidence/v1",
      "evidence_digest": "sha256:2222222222222222222222222222222222222222222222222222222222222222",
      "verification_state": 1,
      "receipt_count": 127,
      "canonical_u_leb128_hex": "7f",
      "required_bundle_key_set_digest": "sha256:312da242b472d26b28b2253b6732ce0e8507a3be826aec370cb6907906edb0ae",
      "canonical_bytes_length": "27767",
      "receipt_set_digest": "sha256:89f68eacd6feeac7efd9724cb0f0bfb7afaefb33eeb8ff3fd97701e2d646aa02"
    },
    {
      "name": "receipt-count-128",
      "source_envelope": "the mixed-owner-permuted envelope",
      "slot_owner_kind": "tenant",
      "slot_owner_namespace": "io.example.tenant",
      "local_component_key_algorithm": "key256: followed by the lowercase hexadecimal index left-padded to 64 digits",
      "receipt_input_order": "ascending index",
      "required_bundle_key_input_order": "descending index",
      "evidence_version": "nexuscrm.layout-bundle-tenant-authority-evidence/v1",
      "evidence_digest": "sha256:2222222222222222222222222222222222222222222222222222222222222222",
      "verification_state": 1,
      "receipt_count": 128,
      "canonical_u_leb128_hex": "8001",
      "required_bundle_key_set_digest": "sha256:9e10fb24b22efe014d47a6b8a3561057b14aaff9efe6baa1b2b77712195a3848",
      "canonical_bytes_length": "27984",
      "receipt_set_digest": "sha256:f8ce5b4263fcb110aac9223c2ce595a78e54ed0ce6aa15d6e467968eff7749cc"
    }
  ],
  "rejection_vectors": [
    {
      "name": "unknown-verification-state",
      "base_fixture": "mixed-owner-permuted",
      "mutation": "set first receipt verification_state to 0x02",
      "error_contains": "VERIFIED"
    },
    {
      "name": "duplicate-bundle-key",
      "base_fixture": "mixed-owner-permuted",
      "mutation": "replace second receipt BundleKey with first receipt BundleKey",
      "error_contains": "duplicate BundleKey"
    },
    {
      "name": "missing-required-key",
      "base_fixture": "mixed-owner-permuted",
      "mutation": "remove final receipt",
      "error_contains": "exactly one"
    },
    {
      "name": "extra-required-key",
      "base_fixture": "mixed-owner-permuted",
      "mutation": "replace first receipt with a valid non-required tenant BundleKey",
      "error_contains": "not a required BundleKey"
    },
    {
      "name": "source-required-set-mismatch",
      "base_fixture": "mixed-owner-permuted",
      "mutation": "replace RequiredBundleKeySetDigest with sha256:ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
      "error_contains": "does not match"
    },
    {
      "name": "foreign-evidence-version",
      "base_fixture": "mixed-owner-permuted",
      "mutation": "replace first receipt EvidenceVersion with the App evidence version",
      "error_contains": "EvidenceVersion"
    }
  ],
  "maximum_count_recipe": {
    "maximum_receipts": 100000,
    "overflow_receipts": 100001,
    "overflow_error_contains": "exceeds 100000 entries"
  },
  "exact_size_boundary_recipe": {
    "name": "reachable-31-mib-boundary",
    "receipt_set_version_utf8_bytes": 56,
    "receipt_set_version_framed_bytes": 57,
    "receipt_version_utf8_bytes": 52,
    "receipt_version_framed_bytes": 53,
    "org_id": "255 lowercase ASCII o bytes",
    "org_id_utf8_bytes": 255,
    "org_id_framed_bytes": 257,
    "writer_command_id": "ffffffff-ffff-7fff-bfff-ffffffffffff",
    "writer_command_id_framed_bytes": 37,
    "writer_reservation_generation": "18446744073709551615",
    "writer_reservation_generation_framed_bytes": 10,
    "source_request_digest": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
    "source_request_digest_framed_bytes": 72,
    "required_bundle_key_set_digest": "sha256:0365f8c40fc265bc443c7bfa845e09f30186dfc492540fb3727430bf19f7604b",
    "required_bundle_key_set_digest_framed_bytes": 72,
    "bundle_key_version_framed_bytes": 30,
    "receipt_count": 100000,
    "receipt_count_framed_bytes": 3,
    "shared_prefix_canonical_bytes": 591,
    "owner_kind": "tenant",
    "owner_kind_canonical_byte": "02",
    "namespace_algorithm": "strings.Repeat(\"a\", 57) + fmt.Sprintf(\"%06x\", index) + \".\" + strings.Repeat(\"b\", namespace_bytes - 64)",
    "namespace_126_byte_receipt_count": 94735,
    "namespace_126_byte_entry_canonical_bytes": 325,
    "namespace_127_byte_receipt_count": 5265,
    "namespace_127_byte_entry_canonical_bytes": 326,
    "local_component_key": "key256:1111111111111111111111111111111111111111111111111111111111111111",
    "evidence_version": "nexuscrm.layout-bundle-tenant-authority-evidence/v1",
    "evidence_digest": "sha256:2222222222222222222222222222222222222222222222222222222222222222",
    "verification_state": 1,
    "total_canonical_bytes": 32505856,
    "receipt_set_digest": "sha256:3c7d218295a1777232c57475286dc8a32cd0330625d9c5266a7a3e1fc192092c",
    "overflow_mutation": "replace index 0 126-byte namespace with its 127-byte form",
    "overflow_canonical_bytes": 32505857
  }
}