{
  "benchmarkId": "CG-BENCHMARK-AGENT-LICENSE-VERIFICATION-0.1.0",
  "version": "0.1.0",
  "testedAt": "2026-08-03T13:16:22.111Z",
  "directQuestion": "Does the published verifier accept the intact signed test chain and reject each of the eight declared mutations?",
  "executionOrder": [
    "load the deterministic public Agent Security License 1.0 test vectors",
    "verify exact fields, closed selectors, authority and agent Ed25519 signatures, and canonical digests",
    "verify license validity, revocation ledger continuity, signed anchor agreement, and exact session binding",
    "apply one declared mutation per rejection case",
    "compare each observed accept or reject decision with the declared expectation",
    "hash the case-level output into one deterministic run digest"
  ],
  "passRule": "A case passes only when the observed accepted or rejected decision equals the declared expectation.",
  "sourceCheckedAt": "2026-08-03",
  "sourceUrls": [
    "https://www.rfc-editor.org/rfc/rfc8032",
    "https://www.rfc-editor.org/rfc/rfc8785",
    "https://csrc.nist.gov/pubs/sp/800/207/final",
    "https://genai.owasp.org/resource/agentic-ai-threats-and-mitigations/"
  ],
  "standardsInterpretation": [
    "RFC 8032 defines EdDSA and Ed25519 verification behavior.",
    "RFC 8785 defines deterministic JSON canonicalization for repeatable hashing and signing.",
    "NIST SP 800-207 supports authenticating and authorizing before a protected session rather than granting implicit trust.",
    "OWASP documents emerging agentic threats and mitigation needs; it does not certify CapitalGuard."
  ],
  "reproducibility": {
    "verifier": "/observatory/benchmarks/agent-license-verification/v0.1.0/verifier.mjs",
    "fixturePack": "/observatory/benchmarks/agent-license-verification/v0.1.0/fixture-pack.json",
    "testVectors": "/agent-license/v1.0.0/test-vectors.json",
    "command": "node verifier.mjs test-vectors.json"
  },
  "claimBoundary": "This publisher-operated benchmark verifies one deterministic signed CapitalGuard test chain and eight declared rejection mutations with the published verifier. It does not audit a customer system, compare vendors, prove that every malformed artifact is rejected, prove private-key custody, or guarantee that an agent or environment is secure.",
  "limitations": [
    "The fixtures are synthetic and contain no customer repositories, credentials, agent traffic, or production keys.",
    "The benchmark covers nine declared cases, not the complete input space of every schema or cryptographic implementation.",
    "A valid signature proves integrity under the referenced key; it does not prove the human or legal identity behind that key.",
    "Current revocation status still depends on retrieving and protecting the latest signed ledger and anchor.",
    "Runtime controls outside the authenticated CapitalGuard path remain outside this verification result."
  ]
}