@sanning/proof 0.19.0 → 0.19.1

package/dist/case.d.ts

@@ -243,6 +243,7 @@
  */
 import { type DeclarationRole } from "./declaration.js";
 import { type PackGradeCauseKind, type PackVerdict } from "./grading.js";
+import type { EnvironmentMarker } from "./environment.js";
 import type { SideContentMap } from "./side-content.js";
 /**
  * The verdicts a case can reach. Every one is already in use in
@@ -991,15 +992,30 @@ export declare const CASE_RELIANCE: Readonly<Record<CaseVerdict, string>>;
  */
 export declare const CASE_RELIANCE_HANDOFF_CLAUSE = "Every hand-off with both sides in this drop is intact.";
 /**
- * What a reader may rely on for one case reading (5.5.6 v1.28, A35), byte
- * for byte the text `case_reliance`'s Python sibling returns.
+ * The sentence a case reading's reliance line gains where its packs hold an
+ * envelope signed `environment: "dev"` (5.5.6, A48), keyed by the environment
+ * marker (`environmentMarker`): `dev` where every envelope is signed dev,
+ * `mixed` where only some are. Inserted after the line's first sentence, for
+ * every verdict word. A drop with no `dev` envelope has no marker and gains
+ * nothing.
+ */
+export declare const CASE_RELIANCE_SANDBOX: Readonly<Record<EnvironmentMarker, string>>;
+/**
+ * What a reader may rely on for one case reading (5.5.6 v1.38, A35 and A48),
+ * byte for byte the text `case_reliance`'s Python sibling returns.
  *
- * For every word but `verified` this is `CASE_RELIANCE` unchanged. For
+ * For every word but `verified` the base is `CASE_RELIANCE` unchanged. For
  * `verified`, the hand-off clause is inserted after the first sentence
  * where `handoffRecords` is not zero, and left out where it is zero: the
  * base sentence never claims a hand-off the drop does not hold.
+ *
+ * Where `environmentMarker` is `dev` or `mixed`, the `CASE_RELIANCE_SANDBOX`
+ * sentence for it is inserted after the first sentence, for every word, so
+ * it directly follows the claim it qualifies (and precedes the hand-off
+ * clause). Where it is null or absent, the text is exactly what it was
+ * before A48.
  */
-export declare function caseReliance(verdict: CaseVerdict, handoffRecords: number): string;
+export declare function caseReliance(verdict: CaseVerdict, handoffRecords: number, environmentMarker?: EnvironmentMarker | null): string;
 /** The three witness states, and how each is printed (5.5.6, D7). No other. */
 export declare const WITNESS_STATES: {
     readonly confirmed: "Confirmed on the public record";

package/dist/case.js

@@ -1854,23 +1854,58 @@ export const CASE_RELIANCE = {
  */
 export const CASE_RELIANCE_HANDOFF_CLAUSE = "Every hand-off with both sides in this drop is intact.";
 /**
- * What a reader may rely on for one case reading (5.5.6 v1.28, A35), byte
- * for byte the text `case_reliance`'s Python sibling returns.
+ * The sentence a case reading's reliance line gains where its packs hold an
+ * envelope signed `environment: "dev"` (5.5.6, A48), keyed by the environment
+ * marker (`environmentMarker`): `dev` where every envelope is signed dev,
+ * `mixed` where only some are. Inserted after the line's first sentence, for
+ * every verdict word. A drop with no `dev` envelope has no marker and gains
+ * nothing.
+ */
+export const CASE_RELIANCE_SANDBOX = {
+    dev: "The records in this drop are sandbox records, signed environment " +
+        "dev: they are not production evidence.",
+    mixed: "Some records in this drop are sandbox records, signed environment " +
+        "dev: those are not production evidence.",
+};
+/**
+ * What a reader may rely on for one case reading (5.5.6 v1.38, A35 and A48),
+ * byte for byte the text `case_reliance`'s Python sibling returns.
  *
- * For every word but `verified` this is `CASE_RELIANCE` unchanged. For
+ * For every word but `verified` the base is `CASE_RELIANCE` unchanged. For
  * `verified`, the hand-off clause is inserted after the first sentence
  * where `handoffRecords` is not zero, and left out where it is zero: the
  * base sentence never claims a hand-off the drop does not hold.
+ *
+ * Where `environmentMarker` is `dev` or `mixed`, the `CASE_RELIANCE_SANDBOX`
+ * sentence for it is inserted after the first sentence, for every word, so
+ * it directly follows the claim it qualifies (and precedes the hand-off
+ * clause). Where it is null or absent, the text is exactly what it was
+ * before A48.
  */
-export function caseReliance(verdict, handoffRecords) {
+export function caseReliance(verdict, handoffRecords, environmentMarker = null) {
+    let first;
+    let rest;
     if (verdict === "verified" && handoffRecords > 0) {
-        return ("Every pack in this drop is genuine, unaltered, and matches its own " +
-            "signed declaration. Every hand-off with both sides in this drop is " +
-            "intact. Every record in it was signed by its holder's key. This " +
-            "was read offline, on this device. It does not say this drop holds " +
-            "everything that was recorded.");
+        first = "Every pack in this drop is genuine, unaltered, and matches its own signed declaration.";
+        rest =
+            "Every hand-off with both sides in this drop is intact. Every record " +
+                "in it was signed by its holder's key. This was read offline, on this " +
+                "device. It does not say this drop holds everything that was recorded.";
+    }
+    else {
+        const base = CASE_RELIANCE[verdict];
+        const cut = base.indexOf(". ");
+        first = base.slice(0, cut + 1);
+        rest = base.slice(cut + 2);
     }
-    return CASE_RELIANCE[verdict];
+    // Only `dev` and `mixed` add the sentence. Any other value, which the type
+    // forbids but an untyped caller can pass, reads as no marker.
+    const sandbox = environmentMarker === "dev" || environmentMarker === "mixed"
+        ? CASE_RELIANCE_SANDBOX[environmentMarker]
+        : null;
+    if (sandbox === null)
+        return `${first} ${rest}`;
+    return `${first} ${sandbox} ${rest}`;
 }
 /** The three witness states, and how each is printed (5.5.6, D7). No other. */
 export const WITNESS_STATES = {

package/dist/cli.js

@@ -2696,7 +2696,7 @@ async function caseCommand(argv, io) {
     const data = {
         verdict: reading.verdict,
         title: reading.verdict === "verified" && marker !== null ? SANDBOX_TITLE : titleOf(reading.verdict),
-        reliance: caseReliance(reading.verdict, reading.handoffRecords),
+        reliance: caseReliance(reading.verdict, reading.handoffRecords, marker),
         exit_code: code,
         summary: renderCaseSummary(reading),
         witness: {

package/dist/index.d.ts

@@ -10,7 +10,7 @@ export { PACK_GRADE_CAUSE_KINDS, PACK_VERDICTS, accountDisclosure, completenessN
 export type { CompletenessNote, DisclosureAccount, GradeInput, PackGrade, PackGradeCause, PackGradeCauseKind, PackVerdict, } from "./grading.js";
 export { DECLARATION_CONTENT_KINDS, DECLARATION_DEVIATION_KINDS, DECLARATION_NOTE_KINDS, DECLARATION_ROLES, DECLARATION_VERDICTS, DECLARATION_VERSION, DECLARATION_VERSION_V2, DECLARATION_VERSION_V3, DECLARATION_VERSIONS, checkDeclaration, declarationClaims, packRecords, renderContentFinding, renderDeclarationSummary, renderDeviation, renderNote, } from "./declaration.js";
 export type { DeclarationCheck, DeclarationClaims, DeclarationContentFinding, DeclarationContentKind, DeclarationDeviation, DeclarationDeviationKind, DeclarationNote, DeclarationNoteKind, DeclarationRole, DeclarationVerdict, PackRecord, } from "./declaration.js";
-export { CASE_BODY_TYPES, CASE_EXCEPTION_KINDS, CASE_QUARANTINED_PROFILES, CASE_RECORD_PROFILES, CASE_RECORD_STATUSES, CASE_NOTE_KINDS, CASE_RELIANCE, CASE_RELIANCE_HANDOFF_CLAUSE, CASE_VERDICTS, CONTENT_WITHHELD_BY_DECLARATION, CO_SIGNATURES_PRESENT, VERDICT_DISPLAY_TITLES, WITNESS_NOT_LOOKED_UP, WITNESS_STATES, WITNESS_TIME_CACHED, WITNESS_TIME_RECORDED, caseReliance, readCase, renderCaseNote, renderCaseSummary, renderException, renderWitnessLine, } from "./case.js";
+export { CASE_BODY_TYPES, CASE_EXCEPTION_KINDS, CASE_QUARANTINED_PROFILES, CASE_RECORD_PROFILES, CASE_RECORD_STATUSES, CASE_NOTE_KINDS, CASE_RELIANCE, CASE_RELIANCE_HANDOFF_CLAUSE, CASE_RELIANCE_SANDBOX, CASE_VERDICTS, CONTENT_WITHHELD_BY_DECLARATION, CO_SIGNATURES_PRESENT, VERDICT_DISPLAY_TITLES, WITNESS_NOT_LOOKED_UP, WITNESS_STATES, WITNESS_TIME_CACHED, WITNESS_TIME_RECORDED, caseReliance, readCase, renderCaseNote, renderCaseSummary, renderException, renderWitnessLine, } from "./case.js";
 export { MAX_BLOCK_TIME, MAX_WITNESS_CACHE_DEPTH, WITNESS_CACHE_NAME, WITNESS_CACHE_VERSION, checkWitnessCache, formatBlockTime, readWitnessCache, renderWitnessTime, witnessTimeQuery, } from "./witness-cache.js";
 export type { CachedWitnessTime, WitnessTimeAnswer, WitnessTimeCheck } from "./witness-cache.js";
 export { lookupPublicRecord, onChainHalf, witnessLine } from "./witness-lookup.js";

package/dist/index.js

@@ -94,7 +94,7 @@ export { DECLARATION_CONTENT_KINDS, DECLARATION_DEVIATION_KINDS, DECLARATION_NOT
 //
 // Pure: data in, data out, no I/O. Additive: a new module, no existing export
 // changes, and no new verdict word anywhere.
-export { CASE_BODY_TYPES, CASE_EXCEPTION_KINDS, CASE_QUARANTINED_PROFILES, CASE_RECORD_PROFILES, CASE_RECORD_STATUSES, CASE_NOTE_KINDS, CASE_RELIANCE, CASE_RELIANCE_HANDOFF_CLAUSE, CASE_VERDICTS, CONTENT_WITHHELD_BY_DECLARATION, CO_SIGNATURES_PRESENT, VERDICT_DISPLAY_TITLES, WITNESS_NOT_LOOKED_UP, WITNESS_STATES, WITNESS_TIME_CACHED, WITNESS_TIME_RECORDED, caseReliance, readCase, renderCaseNote, renderCaseSummary, renderException, renderWitnessLine, } from "./case.js";
+export { CASE_BODY_TYPES, CASE_EXCEPTION_KINDS, CASE_QUARANTINED_PROFILES, CASE_RECORD_PROFILES, CASE_RECORD_STATUSES, CASE_NOTE_KINDS, CASE_RELIANCE, CASE_RELIANCE_HANDOFF_CLAUSE, CASE_RELIANCE_SANDBOX, CASE_VERDICTS, CONTENT_WITHHELD_BY_DECLARATION, CO_SIGNATURES_PRESENT, VERDICT_DISPLAY_TITLES, WITNESS_NOT_LOOKED_UP, WITNESS_STATES, WITNESS_TIME_CACHED, WITNESS_TIME_RECORDED, caseReliance, readCase, renderCaseNote, renderCaseSummary, renderException, renderWitnessLine, } from "./case.js";
 // The witnessed-time cache (evidence-bundle 5.6.6, v1.25, A30): read it, look it
 // up, print it. Never an input to a verdict.
 export { MAX_BLOCK_TIME, MAX_WITNESS_CACHE_DEPTH, WITNESS_CACHE_NAME, WITNESS_CACHE_VERSION, checkWitnessCache, formatBlockTime, readWitnessCache, renderWitnessTime, witnessTimeQuery, } from "./witness-cache.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sanning/proof",
-  "version": "0.19.0",
+  "version": "0.19.1",
   "description": "TypeScript kernel of the Sanning verification stack: RFC 8785 (JCS) canonicalization, SHA-256, and Ed25519 verification for Verifiable Event Envelopes. Full-family verifier (inline + external commitment); accepts sanning.agent/v1 and sanning.events/v2. Conformance-gated byte-for-byte against the test-vectors corpus.",
   "license": "MIT",
   "type": "module",

package/src/case.ts

@@ -272,6 +272,7 @@ import {
   completenessNotes,
   gradePack,
 } from "./grading.js";
+import type { EnvironmentMarker } from "./environment.js";
 import type { SideContentMap } from "./side-content.js";
 import { renderWitnessTime } from "./witness-cache.js";
 
@@ -2306,25 +2307,64 @@ export const CASE_RELIANCE_HANDOFF_CLAUSE =
   "Every hand-off with both sides in this drop is intact.";
 
 /**
- * What a reader may rely on for one case reading (5.5.6 v1.28, A35), byte
- * for byte the text `case_reliance`'s Python sibling returns.
+ * The sentence a case reading's reliance line gains where its packs hold an
+ * envelope signed `environment: "dev"` (5.5.6, A48), keyed by the environment
+ * marker (`environmentMarker`): `dev` where every envelope is signed dev,
+ * `mixed` where only some are. Inserted after the line's first sentence, for
+ * every verdict word. A drop with no `dev` envelope has no marker and gains
+ * nothing.
+ */
+export const CASE_RELIANCE_SANDBOX: Readonly<Record<EnvironmentMarker, string>> = {
+  dev:
+    "The records in this drop are sandbox records, signed environment " +
+    "dev: they are not production evidence.",
+  mixed:
+    "Some records in this drop are sandbox records, signed environment " +
+    "dev: those are not production evidence.",
+};
+
+/**
+ * What a reader may rely on for one case reading (5.5.6 v1.38, A35 and A48),
+ * byte for byte the text `case_reliance`'s Python sibling returns.
  *
- * For every word but `verified` this is `CASE_RELIANCE` unchanged. For
+ * For every word but `verified` the base is `CASE_RELIANCE` unchanged. For
  * `verified`, the hand-off clause is inserted after the first sentence
  * where `handoffRecords` is not zero, and left out where it is zero: the
  * base sentence never claims a hand-off the drop does not hold.
+ *
+ * Where `environmentMarker` is `dev` or `mixed`, the `CASE_RELIANCE_SANDBOX`
+ * sentence for it is inserted after the first sentence, for every word, so
+ * it directly follows the claim it qualifies (and precedes the hand-off
+ * clause). Where it is null or absent, the text is exactly what it was
+ * before A48.
  */
-export function caseReliance(verdict: CaseVerdict, handoffRecords: number): string {
+export function caseReliance(
+  verdict: CaseVerdict,
+  handoffRecords: number,
+  environmentMarker: EnvironmentMarker | null = null,
+): string {
+  let first: string;
+  let rest: string;
   if (verdict === "verified" && handoffRecords > 0) {
-    return (
-      "Every pack in this drop is genuine, unaltered, and matches its own " +
-      "signed declaration. Every hand-off with both sides in this drop is " +
-      "intact. Every record in it was signed by its holder's key. This " +
-      "was read offline, on this device. It does not say this drop holds " +
-      "everything that was recorded."
-    );
+    first = "Every pack in this drop is genuine, unaltered, and matches its own signed declaration.";
+    rest =
+      "Every hand-off with both sides in this drop is intact. Every record " +
+      "in it was signed by its holder's key. This was read offline, on this " +
+      "device. It does not say this drop holds everything that was recorded.";
+  } else {
+    const base = CASE_RELIANCE[verdict];
+    const cut = base.indexOf(". ");
+    first = base.slice(0, cut + 1);
+    rest = base.slice(cut + 2);
   }
-  return CASE_RELIANCE[verdict];
+  // Only `dev` and `mixed` add the sentence. Any other value, which the type
+  // forbids but an untyped caller can pass, reads as no marker.
+  const sandbox =
+    environmentMarker === "dev" || environmentMarker === "mixed"
+      ? CASE_RELIANCE_SANDBOX[environmentMarker]
+      : null;
+  if (sandbox === null) return `${first} ${rest}`;
+  return `${first} ${sandbox} ${rest}`;
 }
 
 /** The three witness states, and how each is printed (5.5.6, D7). No other. */

package/src/cli.ts

@@ -3083,7 +3083,7 @@ async function caseCommand(argv: readonly string[], io: Cli): Promise<number> {
   const data = {
     verdict: reading.verdict,
     title: reading.verdict === "verified" && marker !== null ? SANDBOX_TITLE : titleOf(reading.verdict),
-    reliance: caseReliance(reading.verdict, reading.handoffRecords),
+    reliance: caseReliance(reading.verdict, reading.handoffRecords, marker),
     exit_code: code,
     summary: renderCaseSummary(reading),
     witness: {

package/src/index.ts

@@ -234,6 +234,7 @@ export {
   CASE_NOTE_KINDS,
   CASE_RELIANCE,
   CASE_RELIANCE_HANDOFF_CLAUSE,
+  CASE_RELIANCE_SANDBOX,
   CASE_VERDICTS,
   CONTENT_WITHHELD_BY_DECLARATION,
   CO_SIGNATURES_PRESENT,

package/vectors/sandbox-evidence.json

@@ -1,7 +1,7 @@
 {
   "rule": "sandbox-evidence",
-  "ruleVersion": 1,
-  "statement": "A pack or case holding any envelope signed environment dev is sandbox evidence, not production evidence (envelope-spec section 2). Both commands report environment_marker in --json, dev where every envelope is signed dev and mixed where only some are, and absent otherwise. Such a pack never prints VERIFIED: where it exits 5 verify prints the headline SANDBOX and case the title Sandbox, and wherever the marker is present it prints the line 'Sandbox evidence (environment dev): not production evidence'. It exits 5 where it would otherwise exit 0, and also where every envelope is signed dev and the only unsettled witnesses are simulated; everywhere else it keeps its code, so a failure still exits 1 and a production or mixed pack with a simulated witness still exits 3 (evidence-export.md section 5). No flag turns 5 into 0. A simulated witness (anchor_ref.kind simulated, a sandbox plane's) is never fetched and never counted as checked on a chain, and no line claims an on-chain look-up for a pack whose only witnesses are simulated.",
+  "ruleVersion": 2,
+  "statement": "A pack or case holding any envelope signed environment dev is sandbox evidence, not production evidence (envelope-spec section 2). Both commands report environment_marker in --json, dev where every envelope is signed dev and mixed where only some are, and absent otherwise. Such a pack never prints VERIFIED: where it exits 5 verify prints the headline SANDBOX and case the title Sandbox, and wherever the marker is present it prints the line 'Sandbox evidence (environment dev): not production evidence'. It exits 5 where it would otherwise exit 0, and also where every envelope is signed dev and the only unsettled witnesses are simulated; everywhere else it keeps its code, so a failure still exits 1 and a production or mixed pack with a simulated witness still exits 3 (evidence-export.md section 5). No flag turns 5 into 0. A simulated witness (anchor_ref.kind simulated, a sandbox plane's) is never fetched and never counted as checked on a chain, and no line claims an on-chain look-up for a pack whose only witnesses are simulated. Wherever the marker is present, the reliance line case prints and writes gains one sentence directly after its first, for every verdict: 'The records in this drop are sandbox records, signed environment dev: they are not production evidence.' where it is dev, and 'Some records in this drop are sandbox records, signed environment dev: those are not production evidence.' where it is mixed (evidence-bundle.md section 5.5.6, A48). Each case's expect.case.reliance is that line in full.",
   "home": "@sanning/proof: ts/vectors/sandbox-evidence.json, written by tools/gen-vectors/gen_sandbox_evidence_table.py. Held by ts/test/sandbox-evidence.test.ts and tests/test_sandbox_evidence.py, each against these bytes, and by cross-kernel/run_sandbox.sh, which runs both commands as child processes over every case.",
   "howToUse": "For each case, write `pack` as bundle.json in a folder, and each entry of `logsHex` as logs/<event_id>.json holding the decoded bytes. Run verify on bundle.json (with --logs <folder>/logs where `logsHex` is not empty) and case on the folder, each with --gateways <url,...> where `gateways` is not empty, through a fetch seam that answers each URL in `serves` with its decoded bytes, answers any other URL 404, and records every URL asked. Assert `expect`.",
   "sandboxLine": "Sandbox evidence (environment dev): not production evidence",
@@ -112,7 +112,8 @@
           "verdict": "verified",
           "exit": 5,
           "environmentMarker": "dev",
-          "title": "Sandbox"
+          "title": "Sandbox",
+          "reliance": "Every pack in this drop is genuine, unaltered, and matches its own signed declaration. The records in this drop are sandbox records, signed environment dev: they are not production evidence. Every record in it was signed by its holder's key. This was read offline, on this device. It does not say this drop holds everything that was recorded."
         }
       }
     },
@@ -226,7 +227,8 @@
           "verdict": "verified",
           "exit": 5,
           "environmentMarker": "dev",
-          "title": "Sandbox"
+          "title": "Sandbox",
+          "reliance": "Every pack in this drop is genuine, unaltered, and matches its own signed declaration. The records in this drop are sandbox records, signed environment dev: they are not production evidence. Every record in it was signed by its holder's key. This was read offline, on this device. It does not say this drop holds everything that was recorded."
         }
       }
     },
@@ -332,7 +334,8 @@
           "verdict": "verified",
           "exit": 5,
           "environmentMarker": "mixed",
-          "title": "Sandbox"
+          "title": "Sandbox",
+          "reliance": "Every pack in this drop is genuine, unaltered, and matches its own signed declaration. Some records in this drop are sandbox records, signed environment dev: those are not production evidence. Every record in it was signed by its holder's key. This was read offline, on this device. It does not say this drop holds everything that was recorded."
         }
       }
     },
@@ -437,7 +440,8 @@
           "verdict": "verified",
           "exit": 5,
           "environmentMarker": "mixed",
-          "title": "Sandbox"
+          "title": "Sandbox",
+          "reliance": "Every pack in this drop is genuine, unaltered, and matches its own signed declaration. Some records in this drop are sandbox records, signed environment dev: those are not production evidence. Every record in it was signed by its holder's key. This was read offline, on this device. It does not say this drop holds everything that was recorded."
         }
       }
     },
@@ -543,7 +547,8 @@
           "verdict": "verified",
           "exit": 0,
           "environmentMarker": null,
-          "title": "Verified"
+          "title": "Verified",
+          "reliance": "Every pack in this drop is genuine, unaltered, and matches its own signed declaration. Every record in it was signed by its holder's key. This was read offline, on this device. It does not say this drop holds everything that was recorded."
         }
       }
     },
@@ -657,7 +662,8 @@
           "verdict": "verified",
           "exit": 0,
           "environmentMarker": null,
-          "title": "Verified"
+          "title": "Verified",
+          "reliance": "Every pack in this drop is genuine, unaltered, and matches its own signed declaration. Every record in it was signed by its holder's key. This was read offline, on this device. It does not say this drop holds everything that was recorded."
         }
       }
     },
@@ -734,7 +740,8 @@
           "verdict": "verified",
           "exit": 0,
           "environmentMarker": null,
-          "title": "Verified"
+          "title": "Verified",
+          "reliance": "Every pack in this drop is genuine, unaltered, and matches its own signed declaration. Every record in it was signed by its holder's key. This was read offline, on this device. It does not say this drop holds everything that was recorded."
         }
       }
     },
@@ -840,7 +847,8 @@
           "verdict": "incomplete",
           "exit": 3,
           "environmentMarker": "dev",
-          "title": "Incomplete"
+          "title": "Incomplete",
+          "reliance": "Nothing here was proven wrong, and part of it could not be checked: the other side of a hand-off is not in this drop, bytes were not handed over, or a claim could not be read. The records in this drop are sandbox records, signed environment dev: they are not production evidence. Each exception says what is missing and, where a key is known, whose pack would supply it."
         }
       }
     },
@@ -924,7 +932,8 @@
           "verdict": "verified",
           "exit": 1,
           "environmentMarker": "dev",
-          "title": "Sandbox"
+          "title": "Sandbox",
+          "reliance": "Every pack in this drop is genuine, unaltered, and matches its own signed declaration. The records in this drop are sandbox records, signed environment dev: they are not production evidence. Every record in it was signed by its holder's key. This was read offline, on this device. It does not say this drop holds everything that was recorded."
         }
       }
     },
@@ -1002,7 +1011,8 @@
           "verdict": "verified",
           "exit": 5,
           "environmentMarker": "dev",
-          "title": "Sandbox"
+          "title": "Sandbox",
+          "reliance": "Every pack in this drop is genuine, unaltered, and matches its own signed declaration. The records in this drop are sandbox records, signed environment dev: they are not production evidence. Every record in it was signed by its holder's key. This was read offline, on this device. It does not say this drop holds everything that was recorded."
         }
       }
     },
@@ -1084,7 +1094,8 @@
           "verdict": "verified",
           "exit": 5,
           "environmentMarker": "dev",
-          "title": "Sandbox"
+          "title": "Sandbox",
+          "reliance": "Every pack in this drop is genuine, unaltered, and matches its own signed declaration. The records in this drop are sandbox records, signed environment dev: they are not production evidence. Every record in it was signed by its holder's key. This was read offline, on this device. It does not say this drop holds everything that was recorded."
         }
       }
     },
@@ -1166,7 +1177,8 @@
           "verdict": "verified",
           "exit": 3,
           "environmentMarker": null,
-          "title": "Verified"
+          "title": "Verified",
+          "reliance": "Every pack in this drop is genuine, unaltered, and matches its own signed declaration. Every record in it was signed by its holder's key. This was read offline, on this device. It does not say this drop holds everything that was recorded."
         }
       }
     },
@@ -1279,7 +1291,8 @@
           "verdict": "verified",
           "exit": 5,
           "environmentMarker": "dev",
-          "title": "Sandbox"
+          "title": "Sandbox",
+          "reliance": "Every pack in this drop is genuine, unaltered, and matches its own signed declaration. The records in this drop are sandbox records, signed environment dev: they are not production evidence. Every record in it was signed by its holder's key. This was read offline, on this device. It does not say this drop holds everything that was recorded."
         }
       }
     },
@@ -1392,7 +1405,8 @@
           "verdict": "verified",
           "exit": 3,
           "environmentMarker": "mixed",
-          "title": "Sandbox"
+          "title": "Sandbox",
+          "reliance": "Every pack in this drop is genuine, unaltered, and matches its own signed declaration. Some records in this drop are sandbox records, signed environment dev: those are not production evidence. Every record in it was signed by its holder's key. This was read offline, on this device. It does not say this drop holds everything that was recorded."
         }
       }
     },
@@ -1474,7 +1488,8 @@
           "verdict": "verified",
           "exit": 3,
           "environmentMarker": "dev",
-          "title": "Sandbox"
+          "title": "Sandbox",
+          "reliance": "Every pack in this drop is genuine, unaltered, and matches its own signed declaration. The records in this drop are sandbox records, signed environment dev: they are not production evidence. Every record in it was signed by its holder's key. This was read offline, on this device. It does not say this drop holds everything that was recorded."
         }
       }
     },
@@ -1586,7 +1601,8 @@
           "verdict": "verified",
           "exit": 3,
           "environmentMarker": "dev",
-          "title": "Sandbox"
+          "title": "Sandbox",
+          "reliance": "Every pack in this drop is genuine, unaltered, and matches its own signed declaration. The records in this drop are sandbox records, signed environment dev: they are not production evidence. Every record in it was signed by its holder's key. This was read offline, on this device. It does not say this drop holds everything that was recorded."
         }
       }
     },
@@ -1692,7 +1708,8 @@
           "verdict": "partial",
           "exit": 3,
           "environmentMarker": "dev",
-          "title": "Partial"
+          "title": "Partial",
+          "reliance": "Nothing here was proven wrong, and a check could not be completed: a pack names no witness, or a pack in a hand-off reading does not say what it holds. The records in this drop are sandbox records, signed environment dev: they are not production evidence. The exceptions say which."
         }
       }
     },
@@ -1780,7 +1797,8 @@
           "verdict": "verified",
           "exit": 5,
           "environmentMarker": "dev",
-          "title": "Sandbox"
+          "title": "Sandbox",
+          "reliance": "Every pack in this drop is genuine, unaltered, and matches its own signed declaration. The records in this drop are sandbox records, signed environment dev: they are not production evidence. Every record in it was signed by its holder's key. This was read offline, on this device. It does not say this drop holds everything that was recorded."
         }
       }
     },
@@ -1872,7 +1890,8 @@
           "verdict": "verified",
           "exit": 5,
           "environmentMarker": "dev",
-          "title": "Sandbox"
+          "title": "Sandbox",
+          "reliance": "Every pack in this drop is genuine, unaltered, and matches its own signed declaration. The records in this drop are sandbox records, signed environment dev: they are not production evidence. Every record in it was signed by its holder's key. This was read offline, on this device. It does not say this drop holds everything that was recorded."
         }
       }
     },
@@ -2005,7 +2024,8 @@
           "verdict": "verified",
           "exit": 5,
           "environmentMarker": "dev",
-          "title": "Sandbox"
+          "title": "Sandbox",
+          "reliance": "Every pack in this drop is genuine, unaltered, and matches its own signed declaration. The records in this drop are sandbox records, signed environment dev: they are not production evidence. Every record in it was signed by its holder's key. This was read offline, on this device. It does not say this drop holds everything that was recorded."
         }
       }
     },
@@ -2097,7 +2117,8 @@
           "verdict": "verified",
           "exit": 3,
           "environmentMarker": null,
-          "title": "Verified"
+          "title": "Verified",
+          "reliance": "Every pack in this drop is genuine, unaltered, and matches its own signed declaration. Every record in it was signed by its holder's key. This was read offline, on this device. It does not say this drop holds everything that was recorded."
         }
       }
     },
@@ -2183,7 +2204,8 @@
           "verdict": "verified",
           "exit": 3,
           "environmentMarker": null,
-          "title": "Verified"
+          "title": "Verified",
+          "reliance": "Every pack in this drop is genuine, unaltered, and matches its own signed declaration. Every record in it was signed by its holder's key. This was read offline, on this device. It does not say this drop holds everything that was recorded."
         }
       }
     },
@@ -2309,7 +2331,8 @@
           "verdict": "verified",
           "exit": 3,
           "environmentMarker": "dev",
-          "title": "Sandbox"
+          "title": "Sandbox",
+          "reliance": "Every pack in this drop is genuine, unaltered, and matches its own signed declaration. The records in this drop are sandbox records, signed environment dev: they are not production evidence. Every record in it was signed by its holder's key. This was read offline, on this device. It does not say this drop holds everything that was recorded."
         }
       }
     },
@@ -2397,7 +2420,8 @@
           "verdict": "verified",
           "exit": 5,
           "environmentMarker": "dev",
-          "title": "Sandbox"
+          "title": "Sandbox",
+          "reliance": "Every pack in this drop is genuine, unaltered, and matches its own signed declaration. The records in this drop are sandbox records, signed environment dev: they are not production evidence. Every record in it was signed by its holder's key. This was read offline, on this device. It does not say this drop holds everything that was recorded."
         }
       }
     },
@@ -2489,7 +2513,8 @@
           "verdict": "verified",
           "exit": 5,
           "environmentMarker": "dev",
-          "title": "Sandbox"
+          "title": "Sandbox",
+          "reliance": "Every pack in this drop is genuine, unaltered, and matches its own signed declaration. The records in this drop are sandbox records, signed environment dev: they are not production evidence. Every record in it was signed by its holder's key. This was read offline, on this device. It does not say this drop holds everything that was recorded."
         }
       }
     }