{
  "claimBoundary": "CapitalGuard Privilege Diff 0.1 compares two exact, signed private Agent Surface Compiler 0.1 snapshots. It detects declared capability and control changes represented by the published compiler support matrix without executing repository code, workflows, commands, tools, models, MCP servers, or network requests. A reported change does not prove runtime behavior, exploitation, complete discovery, or protection, and unchanged configuration is not proof of safety.",
  "licensedExecutable": {
    "bytes": 476368,
    "distribution": "licensed_delivery_only",
    "filename": "capitalguard-privilege-diff.cjs",
    "sha256": "f7a8713ec8f908bd34d79648050de399676b5668029e269e3d2620efcaddb7b5"
  },
  "publicArtifacts": [
    {
      "bytes": 189,
      "filename": "default-policy.json",
      "sha256": "607182f6ea63d93c5d05b126a46f78fde093d3c989b12b3c185a23af88ad11e4"
    },
    {
      "bytes": 14520,
      "filename": "diff.schema.json",
      "sha256": "4302adde039f4830e59c9220b7eb83e00beaf558f69a416eb8f6220ab297707b"
    },
    {
      "bytes": 2148,
      "filename": "methodology.json",
      "sha256": "cc8a9dd718cfacc0b4167a64249f875dee5a562f16fd3a4bf9082fb6a3750c2e"
    },
    {
      "bytes": 1505,
      "filename": "policy.schema.json",
      "sha256": "5456fd4b93c3ee95dc51d6670c95c2505751fcfa2a1cb2153692d087805e94ab"
    },
    {
      "bytes": 9768,
      "filename": "receipt.schema.json",
      "sha256": "e6e6338c4bce6c2aef9b6251c6cfaddd965847613211a0659e352737155b1934"
    },
    {
      "bytes": 7110,
      "filename": "shareable.schema.json",
      "sha256": "22d822a8ce4508dbab6c87939614091c71bde149d0a4146e37097ef847223b12"
    },
    {
      "bytes": 2550,
      "filename": "support-matrix.json",
      "sha256": "d277b814ff516ccbe075a5d5774952693afe19c3fccc120c853ebda9b8e33bef"
    },
    {
      "bytes": 2898,
      "filename": "test-vectors.json",
      "sha256": "e35a6a8db2c13fad8b8846d47b5b1ce9aa1ee774f5988eb911dac5cbcd85448f"
    },
    {
      "bytes": 2149,
      "filename": "threat-model.json",
      "sha256": "002c5cc96ce0e39e893dced1afbec4e481bce891228cd8f38dc6816d60e49438"
    }
  ],
  "releaseDigestSha256": "c6dad2611259f86a8c109652411820072381cb80ebb576b756235567e44c7a3c",
  "releasedAt": "2026-07-18T00:00:00.000Z",
  "requiredInput": "Two exact signed private Agent Surface Compiler 0.1 output directories",
  "schemas": {
    "diff": "cg-privilege-diff-0.1.0",
    "policy": "cg-privilege-diff-policy-0.1.0",
    "receipt": "cg-privilege-diff-receipt-0.1.0",
    "shareable": "cg-privilege-diff-shareable-0.1.0"
  },
  "version": "0.1.0"
}