{
  "artifacts": {
    "diff": {
      "schemaVersion": "cg-privilege-diff-0.1.0",
      "sha256": "404ccd314d483afc7f4339a1200ab93383dfb109b215c3f5c05805ea9c8aa23d"
    },
    "shareable": {
      "schemaVersion": "cg-privilege-diff-shareable-0.1.0",
      "sha256": "3ac62b3292a3a2068e42d40ab3cdae5531815f7a95ceccca46ced2e3433617dc"
    }
  },
  "claimBoundary": "CapitalGuard Privilege Diff 0.1 compares two exact, signed private Agent Surface Compiler 0.1 snapshots. It detects declared capability and control changes represented by the published compiler support matrix without executing repository code, workflows, commands, tools, models, MCP servers, or network requests. A reported change does not prove runtime behavior, exploitation, complete discovery, or protection, and unchanged configuration is not proof of safety.",
  "comparison": {
    "baseline": {
      "generatedAt": "2026-07-27T13:30:00.000Z",
      "inventorySha256": "04793789557a7f16dcf49c6ca42f0a4d153bdc964bf43b78e8315dff33fd157d",
      "receiptSha256": "ffabcd033cf65da9e62dee7b46348776203b3f95880bd3a9fc6d1cda4529a91a",
      "repositoryFingerprintSha256": "b7b4da0edfaa772b8c6e1cd0ca0b502486aeded333441cfe7375140af9e6750e",
      "semanticDigestSha256": "0d79039956f974972492fbfaed925b7fda00c6f937415e638712c73f882a93c6"
    },
    "candidate": {
      "generatedAt": "2026-07-27T13:35:00.000Z",
      "inventorySha256": "a07cb778acb0cd7d1e7ec530167aeb3d8a416ecc68ba165125e4ebe42d5757d5",
      "receiptSha256": "e3957a6f3a7fa2f8cc3d05cf2f66b558fe89d5d9e11e1fb731b65ce303f073c7",
      "repositoryFingerprintSha256": "acc2994db2b79917d9d1dc6b8697a7262ebe16bcf67e7d2ef84ec877f10c2c7e",
      "semanticDigestSha256": "25298c3c2987e77ce83f9fbb4a9ef78dc9543097629e7b59fb81d0db8486de42"
    },
    "compilerSignerKeySha256": "503d8ee46d581c649966569ae095e27041de83322e8e0480e5539e00d2d5d874",
    "subjectBindingSha256": "bb4fbf4a5343f2ab2595bd22f022a36f59baf47dc194f19ae304147ca6d4e530"
  },
  "decision": {
    "blockingChangeIds": [
      "CGPD-03DC94780E93BEEDB9DCB8FD",
      "CGPD-073DE666252629F71D72F8B4",
      "CGPD-09C4B2688462199CA3F9D478",
      "CGPD-0F0EE9D1284BB181883D57A1",
      "CGPD-0FE6C0F6438DC42883779C25",
      "CGPD-113EA26573E62B0F79734077",
      "CGPD-1BF7BFFD813CC5CDCE5FB84A",
      "CGPD-23D49DB1361CFFE7D8B4EDB3",
      "CGPD-2A90ACFC4C7B178E61979A18",
      "CGPD-2C1C4AFE96D8893FF8352016",
      "CGPD-3E8AF5021D6A4E916F82ECC1",
      "CGPD-4223385D312707C5D4D3C39E",
      "CGPD-4365EC41C9EAEE67DC29BA64",
      "CGPD-7A09C211D52CB5BA38C09EC2",
      "CGPD-85AB88F2173A08C45AC8F4AF",
      "CGPD-8D01B3FE2ACD2814069BA508",
      "CGPD-94A9578FAC3B771191EB36CF",
      "CGPD-958ED8040B5D27E7186447F5",
      "CGPD-A9334F7015D7E326FFECA41D",
      "CGPD-B1DE53BEA7A4C51F322E5929",
      "CGPD-CBFD2CA8F78F3737A8372BB7",
      "CGPD-D760B77F19E4270DBCCE9B4F",
      "CGPD-DA5CA213F6D9AADDFDFB57A2",
      "CGPD-E5B56B71FC686018C3F04F8C",
      "CGPD-E610E48775308ABD2DB7A8AD",
      "CGPD-F8341D2E66E3032A155A02EA"
    ],
    "evidenceDegradationChangeIds": [
      "CGPD-7A09C211D52CB5BA38C09EC2"
    ],
    "result": "block",
    "reviewChangeIds": [
      "CGPD-03DC94780E93BEEDB9DCB8FD",
      "CGPD-073DE666252629F71D72F8B4",
      "CGPD-09C4B2688462199CA3F9D478",
      "CGPD-0F0EE9D1284BB181883D57A1",
      "CGPD-0FE6C0F6438DC42883779C25",
      "CGPD-113EA26573E62B0F79734077",
      "CGPD-1BF7BFFD813CC5CDCE5FB84A",
      "CGPD-23D49DB1361CFFE7D8B4EDB3",
      "CGPD-2A90ACFC4C7B178E61979A18",
      "CGPD-2C1C4AFE96D8893FF8352016",
      "CGPD-3D508506E0076C64704F7AF8",
      "CGPD-3E8AF5021D6A4E916F82ECC1",
      "CGPD-4223385D312707C5D4D3C39E",
      "CGPD-43034007DA3187891AA18FF2",
      "CGPD-4324A23E55F1B8787F8A1311",
      "CGPD-4365EC41C9EAEE67DC29BA64",
      "CGPD-72D332379D64011B4350FE7E",
      "CGPD-7A09C211D52CB5BA38C09EC2",
      "CGPD-85AB88F2173A08C45AC8F4AF",
      "CGPD-8D01B3FE2ACD2814069BA508",
      "CGPD-94A9578FAC3B771191EB36CF",
      "CGPD-958ED8040B5D27E7186447F5",
      "CGPD-96A19E820A078F30AA6842E7",
      "CGPD-A9334F7015D7E326FFECA41D",
      "CGPD-B1DE53BEA7A4C51F322E5929",
      "CGPD-CBFD2CA8F78F3737A8372BB7",
      "CGPD-D760B77F19E4270DBCCE9B4F",
      "CGPD-DA5CA213F6D9AADDFDFB57A2",
      "CGPD-E5B56B71FC686018C3F04F8C",
      "CGPD-E610E48775308ABD2DB7A8AD",
      "CGPD-F8341D2E66E3032A155A02EA",
      "CGPD-FDAE1B84645A370D4B8E063C"
    ]
  },
  "generatedAt": "2026-07-27T13:40:00.000Z",
  "policyDigestSha256": "246b25f2f5910518ccb595500e5d113edac05078720f6aef3aca68df01e5c087",
  "schemaVersion": "cg-privilege-diff-receipt-0.1.0",
  "signature": {
    "algorithm": "ed25519",
    "publicKeyPem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAoJql9HpnWYAv+VX43C0qFKXJnSO+l/hkEn/5ODRVpPA=\n-----END PUBLIC KEY-----",
    "signatureBase64": "JpxFuYAPnU/lbtmix7rijlE0BRCRSYCD3OY6HZsb0XRXf4McskrNOQJnc/5d6kXdOJVsl4Nok2M+Lh1W7dOIBQ==",
    "signerKeySha256": "744f36cca67eb1912cb282e08e86bd2fe0d09004a28cf6e7c6bd56cdd6bf65aa"
  },
  "summary": {
    "acknowledgedChangeCount": 0,
    "blockingChangeCount": 26,
    "byClassification": {
      "control_removed": 9,
      "control_weakened": 3,
      "evidence_degraded": 1,
      "identity_inherited": 1,
      "informational": 1,
      "privilege_added": 8,
      "privilege_expanded": 8,
      "risk_reduced": 2,
      "surface_added": 1,
      "surface_removed": 2
    },
    "byDirection": {
      "expansion": 31,
      "neutral": 1,
      "reduction": 4
    },
    "bySeverity": {
      "critical": 6,
      "high": 20,
      "low": 4,
      "medium": 6
    },
    "changeCount": 36,
    "evidenceDegradationCount": 1,
    "reviewChangeCount": 32
  },
  "version": "0.1.0"
}