{
  "attestation_version": "1.0",
  "baseline": {
    "p3_remains_frozen": true,
    "p3_zip_sha256": "fc676e975bb679c2f5971a8209c5dd07bb828dfd95fee8ba0a33bb6847823e3d"
  },
  "claim_boundary": {
    "established": [
      "Production bytes correspond to the reviewed rc2 deployment manifest.",
      "The production surface hash matches the pinned public-surface hash.",
      "The production origin passed the stated HTTPS/TLS/HSTS/secure-context checks.",
      "The stated desktop and mobile browser smoke flows passed.",
      "The stated blocked internal paths were not publicly served."
    ],
    "not_established": [
      "iPhone authorization ceremony for the new exact-action profile",
      "live Gate admission",
      "production transaction execution",
      "physical outcome"
    ]
  },
  "deployed_candidate": {
    "public_surface_sha256": "a02df8dd91f56e328748fb16ead5fb3576f88071b26268f63d1af7c467b626c6",
    "review_candidate_zip_sha256": "c59a7ec00b5e3a63d8c036624dd8521236ab18511481fbc3286ca932054e034c",
    "source_revision": "openverifier-v13.9.0-rc2",
    "version": "13.9.0-rc2"
  },
  "deployment_state": {
    "candidate_bytes_modified_after_rc2_review": false,
    "deployed": true,
    "production_domain": "openverifier.org",
    "review_status": "LIVE_BYTE_AND_SECURE_ORIGIN_CHECK_PASSED"
  },
  "independent_live_check": {
    "observations": [
      "Drive ZIP SHA-256 matched the reviewed rc2 candidate.",
      "ZIP rebuilt byte-for-byte.",
      "All 35 deployment-manifest files matched production bytes, including the ISO 4217 pin.",
      "Public-surface hash recomputed to the pinned value.",
      "HTTP redirected to HTTPS.",
      "TLS and HSTS validated.",
      "Production page operated as a secure context with Web Crypto available.",
      "Desktop and mobile browser smoke flows passed.",
      "Blocked test, tool, package, and Netlify control paths returned 404."
    ],
    "reviewer": "Iman Schrock",
    "status": "PASS"
  },
  "notes": [
    "This deployment attestation is separate from the frozen rc2 review package.",
    "It updates deployment-state truth without modifying the reviewed rc2 bytes.",
    "It does not convert OpenVerifier compatibility verification into EMILIA approval, certification, endorsement, or a canonical Gate deployment.",
    "This JSON record is hash-pinned below; absent an external signature, its SHA-256 identifies the exact record bytes but is not a signer-provenance attestation."
  ],
  "operator": "Aurifex Inc.",
  "prepared_on": "2026-09-25",
  "profile": "OPENVERIFIER-DEPLOYMENT-ATTESTATION-v1",
  "surface": "https://openverifier.org/"
}