@sanning/proof 0.11.1 → 0.13.0

package/vectors/case-file-index.json

@@ -0,0 +1,668 @@
+{
+  "rule": "case-file-index",
+  "ruleVersion": 1,
+  "statement": "How a reader compares a case file's index, contents.json, with the folder it sits at the root of (evidence-bundle.md §5.6.3 v1.20, A25). The index is never an input to the case reading, and no finding here moves a verdict, a note, a contribution or an exit code. Findings come in this order: case_index_unreadable (and nothing else), case_index_pack_missing, case_index_pack_unlisted, case_index_file_missing, case_index_file_unlisted, case_index_file_differs, case_index_names_absent; within a kind by the UTF-8 bytes of the ref or path, and names_absent in the index's own order. Only files under a listed pack's folder or under report/ are reported as unlisted.",
+  "howToUse": "Call readCaseFileIndex / read_case_file_index with the bytes of index_hex (null: no index in the folder) and `files`, and compare the result with `expected`. A finding lists only the fields it carries.",
+  "rows": [
+    {
+      "id": "index-matches",
+      "why": "The honest index of an honest drop: every pack listed, every file listed with its hash, report/ listed. No findings. contents.json and HOW-TO-VERIFY.txt sit at the root, outside every pack and outside report/, and are not compared.",
+      "index_hex": "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",
+      "files": [
+        {
+          "path": "HOW-TO-VERIFY.txt",
+          "sha256": "76b25bc6207548c6bd05b1ab2e364ff8c493f6fb04e6a69d731a6f158482b7d9"
+        },
+        {
+          "path": "contents.json",
+          "sha256": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a"
+        },
+        {
+          "path": "report/README.txt",
+          "sha256": "01ec18976e767e814aee9b1ca69f6b9d3129c43690cbb4b4484c9e92316cbfd7"
+        },
+        {
+          "path": "packs/b/bundle.json",
+          "sha256": "0e842f2531324788ca856cabd6730d8b42f95701ae528b10ab1ed324125b15ce"
+        },
+        {
+          "path": "packs/a/logs/x.json",
+          "sha256": "5041bf1f713df204784353e82f6a4a535931cb64f1f4b4a5aeaffcb720918b22"
+        },
+        {
+          "path": "packs/a/bundle.json",
+          "sha256": "c8baeb0866584358ddd0641bd598bb9b8b8880953b2a155cf62500b8c89a734c"
+        }
+      ],
+      "expected": {
+        "index": "read",
+        "case_id": "case-4b19de",
+        "findings": []
+      }
+    },
+    {
+      "id": "pack-missing",
+      "why": "The index lists pack b and the folder holds no packs/b/bundle.json. The pack is missing, and so is the one file the index lists for it: two findings, because the rule names a listed pack with no bundle.json and, separately, a listed path with no file.",
+      "index_hex": "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",
+      "files": [
+        {
+          "path": "HOW-TO-VERIFY.txt",
+          "sha256": "76b25bc6207548c6bd05b1ab2e364ff8c493f6fb04e6a69d731a6f158482b7d9"
+        },
+        {
+          "path": "contents.json",
+          "sha256": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a"
+        },
+        {
+          "path": "report/README.txt",
+          "sha256": "01ec18976e767e814aee9b1ca69f6b9d3129c43690cbb4b4484c9e92316cbfd7"
+        },
+        {
+          "path": "packs/a/logs/x.json",
+          "sha256": "5041bf1f713df204784353e82f6a4a535931cb64f1f4b4a5aeaffcb720918b22"
+        },
+        {
+          "path": "packs/a/bundle.json",
+          "sha256": "c8baeb0866584358ddd0641bd598bb9b8b8880953b2a155cf62500b8c89a734c"
+        }
+      ],
+      "expected": {
+        "index": "read",
+        "case_id": "case-4b19de",
+        "findings": [
+          {
+            "kind": "case_index_pack_missing",
+            "ref": "b"
+          },
+          {
+            "kind": "case_index_file_missing",
+            "path": "packs/b/bundle.json"
+          }
+        ]
+      }
+    },
+    {
+      "id": "pack-unlisted",
+      "why": "A pack in the folder the index does not list. Its files are not reported one by one: only a LISTED pack's folder is compared file by file.",
+      "index_hex": "7b22616273656e74223a5b5d2c22636173655f6964223a22636173652d346231396465222c22636f6e74656e74735f76657273696f6e223a2273616e6e696e672e636173652d66696c652f7631222c227061636b73223a5b7b2266696c6573223a5b7b2270617468223a227061636b732f612f62756e646c652e6a736f6e222c22736861323536223a2263386261656230383636353834333538646464303634316264353938626239623862383838303935336232613135356366363235303062386338396137333463227d2c7b2270617468223a227061636b732f612f6c6f67732f782e6a736f6e222c22736861323536223a2235303431626631663731336466323034373834333533653832663661346135333539333163623634663166346234613561656166666362373230393138623232227d5d2c22726566223a2261227d2c7b2266696c6573223a5b7b2270617468223a227061636b732f622f62756e646c652e6a736f6e222c22736861323536223a2230653834326632353331333234373838636138353663616264363733306438623432663935373031616535323862313061623165643332343132356231356365227d5d2c22726566223a2262227d5d2c227265706f7274223a5b7b2270617468223a227265706f72742f524541444d452e747874222c22736861323536223a2230316563313839373665373637653831346165653962316361363966366239643331323963343336393063626234623434383463396539323331366362666437227d5d7d",
+      "files": [
+        {
+          "path": "packs/c/logs/y.json",
+          "sha256": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a"
+        },
+        {
+          "path": "packs/c/bundle.json",
+          "sha256": "ff7e2c8be651b691bed15755e70125c17b1899525c991bb3392e94affe430be0"
+        },
+        {
+          "path": "HOW-TO-VERIFY.txt",
+          "sha256": "76b25bc6207548c6bd05b1ab2e364ff8c493f6fb04e6a69d731a6f158482b7d9"
+        },
+        {
+          "path": "contents.json",
+          "sha256": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a"
+        },
+        {
+          "path": "report/README.txt",
+          "sha256": "01ec18976e767e814aee9b1ca69f6b9d3129c43690cbb4b4484c9e92316cbfd7"
+        },
+        {
+          "path": "packs/b/bundle.json",
+          "sha256": "0e842f2531324788ca856cabd6730d8b42f95701ae528b10ab1ed324125b15ce"
+        },
+        {
+          "path": "packs/a/logs/x.json",
+          "sha256": "5041bf1f713df204784353e82f6a4a535931cb64f1f4b4a5aeaffcb720918b22"
+        },
+        {
+          "path": "packs/a/bundle.json",
+          "sha256": "c8baeb0866584358ddd0641bd598bb9b8b8880953b2a155cf62500b8c89a734c"
+        }
+      ],
+      "expected": {
+        "index": "read",
+        "case_id": "case-4b19de",
+        "findings": [
+          {
+            "kind": "case_index_pack_unlisted",
+            "ref": "c"
+          }
+        ]
+      }
+    },
+    {
+      "id": "file-missing",
+      "why": "A listed file that is not in the folder.",
+      "index_hex": "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",
+      "files": [
+        {
+          "path": "HOW-TO-VERIFY.txt",
+          "sha256": "76b25bc6207548c6bd05b1ab2e364ff8c493f6fb04e6a69d731a6f158482b7d9"
+        },
+        {
+          "path": "contents.json",
+          "sha256": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a"
+        },
+        {
+          "path": "report/README.txt",
+          "sha256": "01ec18976e767e814aee9b1ca69f6b9d3129c43690cbb4b4484c9e92316cbfd7"
+        },
+        {
+          "path": "packs/b/bundle.json",
+          "sha256": "0e842f2531324788ca856cabd6730d8b42f95701ae528b10ab1ed324125b15ce"
+        },
+        {
+          "path": "packs/a/bundle.json",
+          "sha256": "c8baeb0866584358ddd0641bd598bb9b8b8880953b2a155cf62500b8c89a734c"
+        }
+      ],
+      "expected": {
+        "index": "read",
+        "case_id": "case-4b19de",
+        "findings": [
+          {
+            "kind": "case_index_file_missing",
+            "path": "packs/a/logs/x.json"
+          }
+        ]
+      }
+    },
+    {
+      "id": "file-unlisted",
+      "why": "A file under a listed pack's folder that the index does not list.",
+      "index_hex": "7b22616273656e74223a5b5d2c22636173655f6964223a22636173652d346231396465222c22636f6e74656e74735f76657273696f6e223a2273616e6e696e672e636173652d66696c652f7631222c227061636b73223a5b7b2266696c6573223a5b7b2270617468223a227061636b732f612f62756e646c652e6a736f6e222c22736861323536223a2263386261656230383636353834333538646464303634316264353938626239623862383838303935336232613135356366363235303062386338396137333463227d2c7b2270617468223a227061636b732f612f6c6f67732f782e6a736f6e222c22736861323536223a2235303431626631663731336466323034373834333533653832663661346135333539333163623634663166346234613561656166666362373230393138623232227d5d2c22726566223a2261227d2c7b2266696c6573223a5b7b2270617468223a227061636b732f622f62756e646c652e6a736f6e222c22736861323536223a2230653834326632353331333234373838636138353663616264363733306438623432663935373031616535323862313061623165643332343132356231356365227d5d2c22726566223a2262227d5d2c227265706f7274223a5b7b2270617468223a227265706f72742f524541444d452e747874222c22736861323536223a2230316563313839373665373637653831346165653962316361363966366239643331323963343336393063626234623434383463396539323331366362666437227d5d7d",
+      "files": [
+        {
+          "path": "packs/a/logs/extra.json",
+          "sha256": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a"
+        },
+        {
+          "path": "HOW-TO-VERIFY.txt",
+          "sha256": "76b25bc6207548c6bd05b1ab2e364ff8c493f6fb04e6a69d731a6f158482b7d9"
+        },
+        {
+          "path": "contents.json",
+          "sha256": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a"
+        },
+        {
+          "path": "report/README.txt",
+          "sha256": "01ec18976e767e814aee9b1ca69f6b9d3129c43690cbb4b4484c9e92316cbfd7"
+        },
+        {
+          "path": "packs/b/bundle.json",
+          "sha256": "0e842f2531324788ca856cabd6730d8b42f95701ae528b10ab1ed324125b15ce"
+        },
+        {
+          "path": "packs/a/logs/x.json",
+          "sha256": "5041bf1f713df204784353e82f6a4a535931cb64f1f4b4a5aeaffcb720918b22"
+        },
+        {
+          "path": "packs/a/bundle.json",
+          "sha256": "c8baeb0866584358ddd0641bd598bb9b8b8880953b2a155cf62500b8c89a734c"
+        }
+      ],
+      "expected": {
+        "index": "read",
+        "case_id": "case-4b19de",
+        "findings": [
+          {
+            "kind": "case_index_file_unlisted",
+            "path": "packs/a/logs/extra.json"
+          }
+        ]
+      }
+    },
+    {
+      "id": "report-file-unlisted",
+      "why": "A file under report/ that the index does not list.",
+      "index_hex": "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",
+      "files": [
+        {
+          "path": "report/memo.pdf",
+          "sha256": "315d429b7714cedb6ad04ac31240145257692630457f3c88253c5beceac76027"
+        },
+        {
+          "path": "HOW-TO-VERIFY.txt",
+          "sha256": "76b25bc6207548c6bd05b1ab2e364ff8c493f6fb04e6a69d731a6f158482b7d9"
+        },
+        {
+          "path": "contents.json",
+          "sha256": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a"
+        },
+        {
+          "path": "report/README.txt",
+          "sha256": "01ec18976e767e814aee9b1ca69f6b9d3129c43690cbb4b4484c9e92316cbfd7"
+        },
+        {
+          "path": "packs/b/bundle.json",
+          "sha256": "0e842f2531324788ca856cabd6730d8b42f95701ae528b10ab1ed324125b15ce"
+        },
+        {
+          "path": "packs/a/logs/x.json",
+          "sha256": "5041bf1f713df204784353e82f6a4a535931cb64f1f4b4a5aeaffcb720918b22"
+        },
+        {
+          "path": "packs/a/bundle.json",
+          "sha256": "c8baeb0866584358ddd0641bd598bb9b8b8880953b2a155cf62500b8c89a734c"
+        }
+      ],
+      "expected": {
+        "index": "read",
+        "case_id": "case-4b19de",
+        "findings": [
+          {
+            "kind": "case_index_file_unlisted",
+            "path": "report/memo.pdf"
+          }
+        ]
+      }
+    },
+    {
+      "id": "file-differs",
+      "why": "A listed file whose bytes do not hash to the listed value. The finding carries both values.",
+      "index_hex": "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",
+      "files": [
+        {
+          "path": "HOW-TO-VERIFY.txt",
+          "sha256": "76b25bc6207548c6bd05b1ab2e364ff8c493f6fb04e6a69d731a6f158482b7d9"
+        },
+        {
+          "path": "contents.json",
+          "sha256": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a"
+        },
+        {
+          "path": "report/README.txt",
+          "sha256": "01ec18976e767e814aee9b1ca69f6b9d3129c43690cbb4b4484c9e92316cbfd7"
+        },
+        {
+          "path": "packs/b/bundle.json",
+          "sha256": "0e842f2531324788ca856cabd6730d8b42f95701ae528b10ab1ed324125b15ce"
+        },
+        {
+          "path": "packs/a/logs/x.json",
+          "sha256": "5041bf1f713df204784353e82f6a4a535931cb64f1f4b4a5aeaffcb720918b22"
+        },
+        {
+          "path": "packs/a/bundle.json",
+          "sha256": "7bc2d48abf2b22796bd883fe2b8a5643e960d69c3386fd06a51cc798453458fb"
+        }
+      ],
+      "expected": {
+        "index": "read",
+        "case_id": "case-4b19de",
+        "findings": [
+          {
+            "kind": "case_index_file_differs",
+            "path": "packs/a/bundle.json",
+            "listed_sha256": "c8baeb0866584358ddd0641bd598bb9b8b8880953b2a155cf62500b8c89a734c",
+            "sha256": "7bc2d48abf2b22796bd883fe2b8a5643e960d69c3386fd06a51cc798453458fb"
+          }
+        ]
+      }
+    },
+    {
+      "id": "names-absent",
+      "why": "The assembler says two packs are absent, one with the key it expected them signed by and one without. One finding per entry, in the index's own order, each the assembler's statement and nothing more.",
+      "index_hex": "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",
+      "files": [
+        {
+          "path": "HOW-TO-VERIFY.txt",
+          "sha256": "76b25bc6207548c6bd05b1ab2e364ff8c493f6fb04e6a69d731a6f158482b7d9"
+        },
+        {
+          "path": "contents.json",
+          "sha256": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a"
+        },
+        {
+          "path": "report/README.txt",
+          "sha256": "01ec18976e767e814aee9b1ca69f6b9d3129c43690cbb4b4484c9e92316cbfd7"
+        },
+        {
+          "path": "packs/b/bundle.json",
+          "sha256": "0e842f2531324788ca856cabd6730d8b42f95701ae528b10ab1ed324125b15ce"
+        },
+        {
+          "path": "packs/a/logs/x.json",
+          "sha256": "5041bf1f713df204784353e82f6a4a535931cb64f1f4b4a5aeaffcb720918b22"
+        },
+        {
+          "path": "packs/a/bundle.json",
+          "sha256": "c8baeb0866584358ddd0641bd598bb9b8b8880953b2a155cf62500b8c89a734c"
+        }
+      ],
+      "expected": {
+        "index": "read",
+        "case_id": "case-4b19de",
+        "findings": [
+          {
+            "kind": "case_index_names_absent",
+            "reason": "the checker's pack was not handed over",
+            "public_key": "56d38b0000000000000000000000000000000000000000000000000000a1c675"
+          },
+          {
+            "kind": "case_index_names_absent",
+            "reason": "a third agent took part"
+          }
+        ]
+      }
+    },
+    {
+      "id": "unreadable-bom",
+      "why": "The honest index behind a byte-order mark. The index is read with the JSON reader §5.4.2 rule 7 pins, which refuses one, so the index is unreadable and no other comparison runs.",
+      "index_hex": "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",
+      "files": [
+        {
+          "path": "HOW-TO-VERIFY.txt",
+          "sha256": "76b25bc6207548c6bd05b1ab2e364ff8c493f6fb04e6a69d731a6f158482b7d9"
+        },
+        {
+          "path": "contents.json",
+          "sha256": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a"
+        },
+        {
+          "path": "report/README.txt",
+          "sha256": "01ec18976e767e814aee9b1ca69f6b9d3129c43690cbb4b4484c9e92316cbfd7"
+        },
+        {
+          "path": "packs/a/logs/x.json",
+          "sha256": "5041bf1f713df204784353e82f6a4a535931cb64f1f4b4a5aeaffcb720918b22"
+        },
+        {
+          "path": "packs/a/bundle.json",
+          "sha256": "c8baeb0866584358ddd0641bd598bb9b8b8880953b2a155cf62500b8c89a734c"
+        }
+      ],
+      "expected": {
+        "index": "unreadable",
+        "case_id": null,
+        "findings": [
+          {
+            "kind": "case_index_unreadable",
+            "reason": "not readable as JSON"
+          }
+        ]
+      }
+    },
+    {
+      "id": "unreadable-unknown-version",
+      "why": "contents_version is a version this reader does not know.",
+      "index_hex": "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",
+      "files": [
+        {
+          "path": "HOW-TO-VERIFY.txt",
+          "sha256": "76b25bc6207548c6bd05b1ab2e364ff8c493f6fb04e6a69d731a6f158482b7d9"
+        },
+        {
+          "path": "contents.json",
+          "sha256": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a"
+        },
+        {
+          "path": "report/README.txt",
+          "sha256": "01ec18976e767e814aee9b1ca69f6b9d3129c43690cbb4b4484c9e92316cbfd7"
+        },
+        {
+          "path": "packs/b/bundle.json",
+          "sha256": "0e842f2531324788ca856cabd6730d8b42f95701ae528b10ab1ed324125b15ce"
+        },
+        {
+          "path": "packs/a/logs/x.json",
+          "sha256": "5041bf1f713df204784353e82f6a4a535931cb64f1f4b4a5aeaffcb720918b22"
+        },
+        {
+          "path": "packs/a/bundle.json",
+          "sha256": "c8baeb0866584358ddd0641bd598bb9b8b8880953b2a155cf62500b8c89a734c"
+        }
+      ],
+      "expected": {
+        "index": "unreadable",
+        "case_id": null,
+        "findings": [
+          {
+            "kind": "case_index_unreadable",
+            "reason": "contents_version is not sanning.case-file/v1"
+          }
+        ]
+      }
+    },
+    {
+      "id": "unreadable-missing-member",
+      "why": "A required member, absent[], is not there.",
+      "index_hex": "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",
+      "files": [
+        {
+          "path": "HOW-TO-VERIFY.txt",
+          "sha256": "76b25bc6207548c6bd05b1ab2e364ff8c493f6fb04e6a69d731a6f158482b7d9"
+        },
+        {
+          "path": "contents.json",
+          "sha256": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a"
+        },
+        {
+          "path": "report/README.txt",
+          "sha256": "01ec18976e767e814aee9b1ca69f6b9d3129c43690cbb4b4484c9e92316cbfd7"
+        },
+        {
+          "path": "packs/b/bundle.json",
+          "sha256": "0e842f2531324788ca856cabd6730d8b42f95701ae528b10ab1ed324125b15ce"
+        },
+        {
+          "path": "packs/a/logs/x.json",
+          "sha256": "5041bf1f713df204784353e82f6a4a535931cb64f1f4b4a5aeaffcb720918b22"
+        },
+        {
+          "path": "packs/a/bundle.json",
+          "sha256": "c8baeb0866584358ddd0641bd598bb9b8b8880953b2a155cf62500b8c89a734c"
+        }
+      ],
+      "expected": {
+        "index": "unreadable",
+        "case_id": null,
+        "findings": [
+          {
+            "kind": "case_index_unreadable",
+            "reason": "absent is not an array"
+          }
+        ]
+      }
+    },
+    {
+      "id": "no-index",
+      "why": "A folder with no contents.json is a folder of packs, with no finding.",
+      "index_hex": null,
+      "files": [
+        {
+          "path": "HOW-TO-VERIFY.txt",
+          "sha256": "76b25bc6207548c6bd05b1ab2e364ff8c493f6fb04e6a69d731a6f158482b7d9"
+        },
+        {
+          "path": "contents.json",
+          "sha256": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a"
+        },
+        {
+          "path": "report/README.txt",
+          "sha256": "01ec18976e767e814aee9b1ca69f6b9d3129c43690cbb4b4484c9e92316cbfd7"
+        },
+        {
+          "path": "packs/b/bundle.json",
+          "sha256": "0e842f2531324788ca856cabd6730d8b42f95701ae528b10ab1ed324125b15ce"
+        },
+        {
+          "path": "packs/a/logs/x.json",
+          "sha256": "5041bf1f713df204784353e82f6a4a535931cb64f1f4b4a5aeaffcb720918b22"
+        },
+        {
+          "path": "packs/a/bundle.json",
+          "sha256": "c8baeb0866584358ddd0641bd598bb9b8b8880953b2a155cf62500b8c89a734c"
+        }
+      ],
+      "expected": {
+        "index": "absent",
+        "case_id": null,
+        "findings": []
+      }
+    },
+    {
+      "id": "unknown-member-ignored",
+      "why": "Members this reader does not know, at the top and inside a pack entry, are ignored.",
+      "index_hex": "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",
+      "files": [
+        {
+          "path": "HOW-TO-VERIFY.txt",
+          "sha256": "76b25bc6207548c6bd05b1ab2e364ff8c493f6fb04e6a69d731a6f158482b7d9"
+        },
+        {
+          "path": "contents.json",
+          "sha256": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a"
+        },
+        {
+          "path": "report/README.txt",
+          "sha256": "01ec18976e767e814aee9b1ca69f6b9d3129c43690cbb4b4484c9e92316cbfd7"
+        },
+        {
+          "path": "packs/b/bundle.json",
+          "sha256": "0e842f2531324788ca856cabd6730d8b42f95701ae528b10ab1ed324125b15ce"
+        },
+        {
+          "path": "packs/a/logs/x.json",
+          "sha256": "5041bf1f713df204784353e82f6a4a535931cb64f1f4b4a5aeaffcb720918b22"
+        },
+        {
+          "path": "packs/a/bundle.json",
+          "sha256": "c8baeb0866584358ddd0641bd598bb9b8b8880953b2a155cf62500b8c89a734c"
+        }
+      ],
+      "expected": {
+        "index": "read",
+        "case_id": "case-4b19de",
+        "findings": []
+      }
+    },
+    {
+      "id": "not-jcs-accepted",
+      "why": "The honest index pretty-printed, with its members out of order. A producer writes JCS; a reader does not require it.",
+      "index_hex": "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",
+      "files": [
+        {
+          "path": "HOW-TO-VERIFY.txt",
+          "sha256": "76b25bc6207548c6bd05b1ab2e364ff8c493f6fb04e6a69d731a6f158482b7d9"
+        },
+        {
+          "path": "contents.json",
+          "sha256": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a"
+        },
+        {
+          "path": "report/README.txt",
+          "sha256": "01ec18976e767e814aee9b1ca69f6b9d3129c43690cbb4b4484c9e92316cbfd7"
+        },
+        {
+          "path": "packs/b/bundle.json",
+          "sha256": "0e842f2531324788ca856cabd6730d8b42f95701ae528b10ab1ed324125b15ce"
+        },
+        {
+          "path": "packs/a/logs/x.json",
+          "sha256": "5041bf1f713df204784353e82f6a4a535931cb64f1f4b4a5aeaffcb720918b22"
+        },
+        {
+          "path": "packs/a/bundle.json",
+          "sha256": "c8baeb0866584358ddd0641bd598bb9b8b8880953b2a155cf62500b8c89a734c"
+        }
+      ],
+      "expected": {
+        "index": "read",
+        "case_id": "case-4b19de",
+        "findings": []
+      }
+    },
+    {
+      "id": "order",
+      "why": "Every comparison kind at once, in the pinned order, and within a kind by the UTF-8 bytes of the path or ref: U+FF5E (EF BD 9E) sorts before U+1F600 (F0 9F 98 80) by UTF-8 bytes, and after it by UTF-16 code units, so a reader that sorted as JavaScript sorts strings would swap the two unlisted report files.",
+      "index_hex": "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",
+      "files": [
+        {
+          "path": "packs/a/zzz.json",
+          "sha256": "4e07408562bedb8b60ce05c1decfe3ad16b72230967de01f640b7e4729b49fce"
+        },
+        {
+          "path": "report/～.txt",
+          "sha256": "d4735e3a265e16eee03f59718b9b5d03019c07d8b6c51f90da3a666eec13ab35"
+        },
+        {
+          "path": "report/😀.txt",
+          "sha256": "6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b"
+        },
+        {
+          "path": "packs/c/bundle.json",
+          "sha256": "ff7e2c8be651b691bed15755e70125c17b1899525c991bb3392e94affe430be0"
+        },
+        {
+          "path": "packs/d/bundle.json",
+          "sha256": "7335e2c223602d7a4de72223406d996f9db3b6250f482856f388ad582694067c"
+        },
+        {
+          "path": "HOW-TO-VERIFY.txt",
+          "sha256": "76b25bc6207548c6bd05b1ab2e364ff8c493f6fb04e6a69d731a6f158482b7d9"
+        },
+        {
+          "path": "contents.json",
+          "sha256": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a"
+        },
+        {
+          "path": "report/README.txt",
+          "sha256": "01ec18976e767e814aee9b1ca69f6b9d3129c43690cbb4b4484c9e92316cbfd7"
+        },
+        {
+          "path": "packs/b/bundle.json",
+          "sha256": "6930f4d79c98896452175c379c484147853435eea464cab602cad30462d3fd88"
+        },
+        {
+          "path": "packs/a/bundle.json",
+          "sha256": "c8baeb0866584358ddd0641bd598bb9b8b8880953b2a155cf62500b8c89a734c"
+        }
+      ],
+      "expected": {
+        "index": "read",
+        "case_id": "case-4b19de",
+        "findings": [
+          {
+            "kind": "case_index_pack_missing",
+            "ref": "z"
+          },
+          {
+            "kind": "case_index_pack_unlisted",
+            "ref": "c"
+          },
+          {
+            "kind": "case_index_pack_unlisted",
+            "ref": "d"
+          },
+          {
+            "kind": "case_index_file_missing",
+            "path": "packs/a/logs/x.json"
+          },
+          {
+            "kind": "case_index_file_unlisted",
+            "path": "packs/a/zzz.json"
+          },
+          {
+            "kind": "case_index_file_unlisted",
+            "path": "report/～.txt"
+          },
+          {
+            "kind": "case_index_file_unlisted",
+            "path": "report/😀.txt"
+          },
+          {
+            "kind": "case_index_file_differs",
+            "path": "packs/b/bundle.json",
+            "listed_sha256": "0e842f2531324788ca856cabd6730d8b42f95701ae528b10ab1ed324125b15ce",
+            "sha256": "6930f4d79c98896452175c379c484147853435eea464cab602cad30462d3fd88"
+          },
+          {
+            "kind": "case_index_names_absent",
+            "reason": "the checker's pack was not handed over"
+          }
+        ]
+      }
+    }
+  ]
+}