oev-conformance-vectors 0.1.0__tar.gz

oev_conformance_vectors-0.1.0/.gitignore

@@ -0,0 +1,5 @@
+node_modules/
+dist/
+*.egg-info/
+__pycache__/
+*.pyc

oev_conformance_vectors-0.1.0/LICENSE

@@ -0,0 +1,176 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS

oev_conformance_vectors-0.1.0/PKG-INFO

@@ -0,0 +1,34 @@
+Metadata-Version: 2.5
+Name: oev-conformance-vectors
+Version: 0.1.0
+Summary: Language-independent conformance vector set for OEVP verifiers: inputs, expected results, and a runner with a documented external-verifier contract
+Author: Open Evidence Verification Protocol Contributors
+License-Expression: Apache-2.0
+License-File: LICENSE
+Requires-Python: >=3.10
+Provides-Extra: dev
+Requires-Dist: open-evidence-verification[oept]>=0.2.1; extra == 'dev'
+Requires-Dist: pytest>=7.4; extra == 'dev'
+Description-Content-Type: text/markdown
+
+# oev-conformance-vectors
+
+Language-independent conformance vector set for OEVP verifiers
+(vector set version **0.1.0**, 12 active + 2 planned vectors, generated
+from the byte-stable OEVP conformance fixtures).
+
+- `src/oev_conformance_vectors/data/vectors/` — inputs + expected results
+- `src/oev_conformance_vectors/data/fixtures/` — the neutral bundle fixtures
+  the vectors reference (self-contained: no other repository needed)
+- `src/oev_conformance_vectors/runner.py` — the runner. External mode is
+  dependency-free: `oev-conformance run --verifier "<command> {input}"`.
+  Builtin mode (the Python reference verifier) requires
+  `open-evidence-verification[oept]` (see the dev extra).
+
+External-verifier contract: the command is invoked with `{input}` replaced
+by the absolute path of a vector's `input.json` and MUST print one JSON
+object: `{"vector_id", "exit_code", "result"}`. Comparison is fail-closed.
+
+This package is the Kapı C deliverable: vectors ship separately from the
+reference implementation so a second implementer never needs the Python
+reference to prove conformance.

oev_conformance_vectors-0.1.0/README.md

@@ -0,0 +1,21 @@
+# oev-conformance-vectors
+
+Language-independent conformance vector set for OEVP verifiers
+(vector set version **0.1.0**, 12 active + 2 planned vectors, generated
+from the byte-stable OEVP conformance fixtures).
+
+- `src/oev_conformance_vectors/data/vectors/` — inputs + expected results
+- `src/oev_conformance_vectors/data/fixtures/` — the neutral bundle fixtures
+  the vectors reference (self-contained: no other repository needed)
+- `src/oev_conformance_vectors/runner.py` — the runner. External mode is
+  dependency-free: `oev-conformance run --verifier "<command> {input}"`.
+  Builtin mode (the Python reference verifier) requires
+  `open-evidence-verification[oept]` (see the dev extra).
+
+External-verifier contract: the command is invoked with `{input}` replaced
+by the absolute path of a vector's `input.json` and MUST print one JSON
+object: `{"vector_id", "exit_code", "result"}`. Comparison is fail-closed.
+
+This package is the Kapı C deliverable: vectors ship separately from the
+reference implementation so a second implementer never needs the Python
+reference to prove conformance.

oev_conformance_vectors-0.1.0/pyproject.toml

@@ -0,0 +1,25 @@
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[project]
+name = "oev-conformance-vectors"
+version = "0.1.0"
+description = "Language-independent conformance vector set for OEVP verifiers: inputs, expected results, and a runner with a documented external-verifier contract"
+readme = "README.md"
+license = "Apache-2.0"
+requires-python = ">=3.10"
+authors = [{ name = "Open Evidence Verification Protocol Contributors" }]
+dependencies = []
+
+[project.optional-dependencies]
+dev = ["pytest>=7.4", "open-evidence-verification[oept]>=0.2.1"]
+
+[project.scripts]
+oev-conformance = "oev_conformance_vectors.runner:main"
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/oev_conformance_vectors"]
+
+[tool.hatch.build.targets.sdist]
+include = ["src", "tests", "README.md", "LICENSE"]

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/__init__.py

@@ -0,0 +1 @@
+__version__ = "0.1.0"

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/01-valid-oept-pass/expected-result.json

@@ -0,0 +1 @@
+{"checks":{"application_signature":"PASS","archive_safety":"PASS","manifest_structure":"PASS","member_digests":"PASS"},"overall_result":"TECHNICAL_CHECKS_PASSED","receipt_signature_trusted":true,"trusted_verifier_key_id":"test-verifier-2026"}

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/01-valid-oept-pass/package-trust-keys.json

@@ -0,0 +1,6 @@
+[
+  {
+    "key_id": "conformance-test-key",
+    "public_key_pem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAZHQFbcEU4SxGXn6EY0Xz6By9k70sQUa2DxU+mqfPgFc=\n-----END PUBLIC KEY-----\n"
+  }
+]

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/01-valid-oept-pass/profile.json

@@ -0,0 +1 @@
+{"description":"Strict profile requiring safe archive, manifest, member digests, and application signature","optional_checks":[],"parameters":{},"profile_id":"strict-conformance-profile","profile_version":"0.1.0","protocol_version":"oev-profile/0.1","required_checks":["archive_safety","manifest_structure","member_digests","application_signature"],"target_format":"oept-bundle/0.1"}

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/01-valid-oept-pass/receipt.dsse.json

@@ -0,0 +1 @@
+{"payload":"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","payloadType":"application/vnd.oev.verification-receipt+json","signatures":[{"keyid":"test-verifier-2026","sig":"rUoAZuWiV2f3xpAzb+hWTBj+OTYjpEgK1MZCgaL4Xt6DRw2KgyTjNAQLTZVxqMtXt0c9zLW+Fkx4uWlk5IhjCg=="}]}

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/01-valid-oept-pass/verifier-trust-keys.json

@@ -0,0 +1 @@
+[{"key_id":"test-verifier-2026","public_key_pem":"-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAKP/Iu/f8wXvWGfkye+kkjwEyyUPCRLVWxNyEw7rd4vo=\n-----END PUBLIC KEY-----\n"}]

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/02-tampered-package/expected-result.json

@@ -0,0 +1 @@
+{"checks":{"archive_safety":"PASS","manifest_structure":"PASS","member_digests":"FAIL"},"overall_result":"TECHNICAL_CHECKS_FAILED"}

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/02-tampered-package/profile.json

@@ -0,0 +1 @@
+{"profile_id":"integrity-check-profile","profile_version":"0.1.0","protocol_version":"oev-profile/0.1","required_checks":["archive_safety","manifest_structure","member_digests"],"target_format":"oept-bundle/0.1"}

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/03-required-signature-unsatisfied/expected-result.json

@@ -0,0 +1 @@
+{"checks":{"application_signature":"UNVERIFIED","archive_safety":"PASS","manifest_structure":"PASS","member_digests":"PASS"},"note":"Required check 'application_signature' was UNVERIFIED on unsigned package","overall_result":"PROFILE_UNSATISFIED"}

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/03-required-signature-unsatisfied/profile.json

@@ -0,0 +1 @@
+{"description":"Strict profile requiring safe archive, manifest, member digests, and application signature","optional_checks":[],"parameters":{},"profile_id":"strict-conformance-profile","profile_version":"0.1.0","protocol_version":"oev-profile/0.1","required_checks":["archive_safety","manifest_structure","member_digests","application_signature"],"target_format":"oept-bundle/0.1"}

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/04-tampered-receipt/expected-result.json

@@ -0,0 +1 @@
+{"crypto_valid":false,"is_trusted_signer":false,"note":"Tampered receipt payload must fail DSSE signature verification and self-digest check","receipt_digest_valid":false}

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/04-tampered-receipt/receipt.dsse.json

@@ -0,0 +1 @@
+{"payload":"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","payloadType":"application/vnd.oev.verification-receipt+json","signatures":[{"keyid":"test-verifier-2026","sig":"rUoAZuWiV2f3xpAzb+hWTBj+OTYjpEgK1MZCgaL4Xt6DRw2KgyTjNAQLTZVxqMtXt0c9zLW+Fkx4uWlk5IhjCg=="}]}

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/04-tampered-receipt/verifier-trust-keys.json

@@ -0,0 +1 @@
+[{"key_id":"test-verifier-2026","public_key_pem":"-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAKP/Iu/f8wXvWGfkye+kkjwEyyUPCRLVWxNyEw7rd4vo=\n-----END PUBLIC KEY-----\n"}]

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/05-reverify-package-mismatch/expected-result.json

@@ -0,0 +1 @@
+{"note":"Package digest mismatch between historic receipt and fresh package bytes","package_digest_match":false,"reverification_result":"MISMATCH"}

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/05-reverify-package-mismatch/profile.json

@@ -0,0 +1 @@
+{"description":"Strict profile requiring safe archive, manifest, member digests, and application signature","optional_checks":[],"parameters":{},"profile_id":"strict-conformance-profile","profile_version":"0.1.0","protocol_version":"oev-profile/0.1","required_checks":["archive_safety","manifest_structure","member_digests","application_signature"],"target_format":"oept-bundle/0.1"}

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/05-reverify-package-mismatch/receipt.dsse.json

@@ -0,0 +1 @@
+{"payload":"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","payloadType":"application/vnd.oev.verification-receipt+json","signatures":[{"keyid":"test-verifier-2026","sig":"rUoAZuWiV2f3xpAzb+hWTBj+OTYjpEgK1MZCgaL4Xt6DRw2KgyTjNAQLTZVxqMtXt0c9zLW+Fkx4uWlk5IhjCg=="}]}

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/06-signature-invalid/expected-result.json

@@ -0,0 +1 @@
+{"checks":{"application_signature":"FAIL","archive_safety":"PASS","manifest_structure":"PASS","member_digests":"PASS"},"note":"Bundle carries a corrupted application signature; signature check FAILs (distinct from UNVERIFIED on unsigned bundles)","overall_result":"TECHNICAL_CHECKS_FAILED"}

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/06-signature-invalid/package-trust-keys.json

@@ -0,0 +1,6 @@
+[
+  {
+    "key_id": "conformance-test-key",
+    "public_key_pem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAZHQFbcEU4SxGXn6EY0Xz6By9k70sQUa2DxU+mqfPgFc=\n-----END PUBLIC KEY-----\n"
+  }
+]

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/06-signature-invalid/profile.json

@@ -0,0 +1 @@
+{"description":"Strict profile including application signature; bundle carries a corrupted signature","optional_checks":[],"parameters":{},"profile_id":"integrity-check-profile","profile_version":"0.1.0","protocol_version":"oev-profile/0.1","required_checks":["archive_safety","manifest_structure","member_digests","application_signature"],"target_format":"oept-bundle/0.1"}

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/07-pack-replay-ok/expected-result.json

@@ -0,0 +1 @@
+{"eligible_fact_ids":["fact-001","fact-002","fact-003"],"note":"A valid pack replayed with the matching out-of-band pin succeeds; only snapshot-bound facts observed at or before captured_at are eligible.","replay_status":"REPLAY_OK"}

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/07-pack-replay-ok/pack/artifacts/maintenance-policy.txt

@@ -0,0 +1,5 @@
+Maintenance policy (synthetic demo document)
+============================================
+- Pressure limit for station P-42: 85 psi.
+- Service is considered overdue after 180 days without maintenance.
+- Readings above the limit must be reviewed by a maintenance lead.

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/07-pack-replay-ok/pack/artifacts/sensor-export.csv

@@ -0,0 +1,3 @@
+observed_at,source,pressure_psi
+2026-10-01T07:50:00Z,sensor-feed-A,86.1
+2026-10-01T07:55:00Z,sensor-feed-A,87.4

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/07-pack-replay-ok/pack/case.json

@@ -0,0 +1 @@
+{"case_id":"demo-case-001","case_type":"field-maintenance-review","closed_at":"2026-10-01T09:30:00Z","description":"Fully synthetic demonstration case: a maintenance dispatcher reviews a sensor reading and records a maintenance decision. All data is fictional.","notes":["Synthetic example data - not derived from any real asset, person, or decision."],"opened_at":"2026-10-01T08:00:00Z","originating_system":"oev-demo-generator/0.2","protocol_version":"oev-decision-pack/0.2","title":"Pump station P-42 maintenance review (synthetic demo)"}

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/07-pack-replay-ok/pack/facts.json

@@ -0,0 +1 @@
+{"case_id":"demo-case-001","facts":[{"fact_id":"fact-001","key":"sensor.pressure_reading","note":"Values requiring exact decimal representation are strings.","observed_at":"2026-10-01T07:55:00Z","snapshot_source_id":"sensor-export-2026-10-01","source":"sensor-feed-A","unit":"psi","value":"87.4","value_type":"decimal_string"},{"fact_id":"fact-002","key":"sensor.pressure_limit","observed_at":"2026-10-01T08:00:00Z","snapshot_source_id":"policy-snapshot-2026-10-01","source":"maintenance-policy-document","unit":"psi","value":"85","value_type":"decimal_string"},{"fact_id":"fact-003","key":"sensor.calibration_flag_active","observed_at":"2026-10-01T07:55:00Z","snapshot_source_id":"sensor-export-2026-10-01","source":"sensor-feed-A","value":false}],"protocol_version":"oev-decision-pack/0.2"}

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/07-pack-replay-ok/pack/findings.json

@@ -0,0 +1 @@
+{"case_id":"demo-case-001","findings":[{"created_at":"2026-10-01T08:05:00Z","finding_id":"finding-001","related_fact_ids":["fact-001","fact-002"],"rule_id":"pressure-above-limit","rule_run_id":"run-001","severity":"MEDIUM","summary":"Latest pressure reading 87.4 psi exceeds the configured limit 85 psi."}],"protocol_version":"oev-decision-pack/0.2"}

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/07-pack-replay-ok/pack/manifest.dsse.json

@@ -0,0 +1 @@
+{"payload":"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","payloadType":"application/vnd.oev.decision-pack-manifest+json","signatures":[{"keyid":"demo-signer-2026-10","public_key_pem":"-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAz4x0pnRGAS9YY4uxFs9VrkcGdmpznnPJla3bQK9GWT0=\n-----END PUBLIC KEY-----\n","sig":"fDNpn6YSblNP9q6noWlfNZzYCmaDpXjlCrmRGWCIqzP9MJQkc+b9Q8At6EnXI9szO2er80WDmeYpZdqJLwCxDQ=="}]}

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/07-pack-replay-ok/pack/manifest.json

@@ -0,0 +1 @@
+{"case_id":"demo-case-001","created_at":"2026-10-01T10:00:00Z","creator":{"software":"oev","version":"0.2.0"},"members":[{"canonicalization":"raw","media_type":"text/plain","path":"artifacts/maintenance-policy.txt","role":"artifact","sha256":"sha256:53fb02729df8ed6c6a13564095ccc2c66673d9b66724fb69e5ded041914e7582","size_bytes":268},{"canonicalization":"raw","media_type":"text/csv","path":"artifacts/sensor-export.csv","role":"artifact","sha256":"sha256:13f59794a5d5e6b955a633ccda5195147237d63bbccdeea4152206fd9a89c53b","size_bytes":112},{"canonicalization":"jcs-rfc8785","media_type":"application/json","path":"case.json","role":"case","sha256":"sha256:112035262a89f0d9d919e225e77089101ab38a33c2aee71688f533612a208dc7","size_bytes":541},{"canonicalization":"jcs-rfc8785","media_type":"application/json","path":"facts.json","role":"facts","sha256":"sha256:3782745ccf73e7840875b9d8dbd02826ab766e5c17f440d71497dc0a7e3d66dd","size_bytes":792},{"canonicalization":"jcs-rfc8785","media_type":"application/json","path":"findings.json","role":"findings","sha256":"sha256:402d0e9a7fd259c30b4179fc65474af1af06ca6ddc7794884eb3939d96efdf15","size_bytes":350},{"canonicalization":"jcs-rfc8785","media_type":"application/json","path":"review_actions.json","role":"review_actions","sha256":"sha256:b9e4d22e0ce64b7b3f88a87ebb6992cea66586ab06dc75be8adb553e65096626","size_bytes":777},{"canonicalization":"jcs-rfc8785","media_type":"application/json","path":"rule_runs.json","role":"rule_runs","sha256":"sha256:a52f91164b7362bf7df0b7a8de9c4ab0e111900a3c180925b245ee503dcd91c7","size_bytes":2317},{"canonicalization":"jcs-rfc8785","media_type":"application/json","path":"snapshot_context.json","role":"snapshot_context","sha256":"sha256:85d4674d5ca39afd6b38e0cb2e03c396e0b97f790e309594f885b74b3ff217a5","size_bytes":745},{"canonicalization":"jcs-rfc8785","media_type":"application/json","path":"timeline.json","role":"timeline","sha256":"sha256:1256ff1a052fe1bcac2afaf874550b7f852fcd12da3540f9e74091f8d07e2e67","size_bytes":1832}],"pack_digest":"sha256:7871579fa558987434a14932150c6b36b29c9966b7ef79d4dcf92bfa93c7f9dd","pack_id":"pack-demo-case-001","protocol_version":"oev-decision-pack/0.2"}

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/07-pack-replay-ok/pack/review_actions.json

@@ -0,0 +1 @@
+{"case_id":"demo-case-001","protocol_version":"oev-decision-pack/0.2","review_actions":[{"action_id":"review-001","action_type":"ESCALATE","actor":{"actor_id":"reviewer-001","actor_type":"human","display_name":"Dispatcher (demo)"},"note":"Escalated to the maintenance lead for human judgment.","performed_at":"2026-10-01T08:15:00Z","references_finding_ids":["finding-001"]},{"action_id":"review-002","action_type":"APPROVE","actor":{"actor_id":"reviewer-002","actor_type":"human","display_name":"Maintenance Lead (demo)"},"note":"Work order WO-2041 scheduled and pressure placed under monitoring. This record captures that the action occurred; the pack does not assert the decision was correct.","performed_at":"2026-10-01T09:30:00Z","references_finding_ids":["finding-001"]}]}

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/07-pack-replay-ok/pack/rule_runs.json

@@ -0,0 +1 @@
+{"case_id":"demo-case-001","protocol_version":"oev-decision-pack/0.2","rule_runs":[{"detail":"Latest reading 87.4 psi is greater than limit 85 psi.","executed_at":"2026-10-01T08:05:00Z","executed_by":"oev-demo-rules/0.2","inputs":["fact-001","fact-002"],"outcome":"TRIGGERED","rule":{"condition":{"args":[{"fact":"sensor.pressure_reading"},{"fact":"sensor.pressure_limit"}],"op":"gt"},"description":"Flags when the latest pressure reading exceeds the configured limit.","rule_digest":"sha256:ce28b5196b3d058936adc4e6aedcf073da28f03e029484f98fdbbaa379b3db87","rule_id":"pressure-above-limit","rule_version":"1.1.0"},"run_id":"run-001"},{"detail":"Required fact 'maintenance.last_service_date' was not recorded in this snapshot; the run could not reach a conclusion.","executed_at":"2026-10-01T08:05:00Z","executed_by":"oev-demo-rules/0.2","inputs":[],"outcome":"UNVERIFIABLE","rule":{"condition":{"args":[{"fact":"maintenance.last_service_date"},{"param":"max_days_since_service"}],"op":"days_since_gt"},"description":"Flags when the last service date is older than the configured maximum.","rule_digest":"sha256:63111410da72b70c52e2377b9ccddb89e8cbfab2992d494342a17578f117e8da","rule_id":"service-overdue","rule_version":"1.0.0"},"run_id":"run-002"},{"detail":"Calibration flag is false.","executed_at":"2026-10-01T08:05:00Z","executed_by":"oev-demo-rules/0.2","inputs":["fact-003"],"outcome":"NOT_TRIGGERED","rule":{"condition":{"args":[{"fact":"sensor.calibration_flag_active"},{"const":true}],"op":"eq"},"description":"Flags when the sensor calibration flag is active.","rule_digest":"sha256:8e5be35c57088ec5c534c2f59767a27847f189a59820141565a0002b401555af","rule_id":"calibration-flag-active","rule_version":"1.0.0"},"run_id":"run-003"},{"detail":"Only one independent pressure source recorded; agreement check requires human review.","executed_at":"2026-10-01T08:05:00Z","executed_by":"oev-demo-rules/0.2","inputs":["fact-001"],"outcome":"REVIEW_REQUIRED","rule":{"condition":{"args":[{"prefix":"sensor.pressure_reading"},{"const":2}],"op":"fact_count_gte"},"description":"Requires two independent readings for agreement; defers to a reviewer.","rule_digest":"sha256:fb0d5cc9248c7d3cc951c2f8a1530a127fe33e0ddac05c1c5c9673818fdd336a","rule_id":"dual-source-agreement","rule_version":"0.3.0"},"run_id":"run-004"}]}

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/07-pack-replay-ok/pack/snapshot_context.json

@@ -0,0 +1 @@
+{"captured_at":"2026-10-01T08:00:00Z","case_id":"demo-case-001","generator":{"software":"oev-demo-generator","version":"0.2.0"},"notes":["Synthetic snapshot for demonstration purposes."],"parameters":{"max_days_since_service":180,"pressure_readings_required_for_agreement":2},"protocol_version":"oev-decision-pack/0.2","snapshot_id":"snapshot-2026-10-01-001","sources":[{"digest":"sha256:13f59794a5d5e6b955a633ccda5195147237d63bbccdeea4152206fd9a89c53b","kind":"sensor_export","retrieved_at":"2026-10-01T08:00:00Z","source_id":"sensor-export-2026-10-01"},{"digest":"sha256:53fb02729df8ed6c6a13564095ccc2c66673d9b66724fb69e5ded041914e7582","kind":"policy_document","retrieved_at":"2026-10-01T08:00:00Z","source_id":"policy-snapshot-2026-10-01"}]}

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/07-pack-replay-ok/pack/timeline.json

@@ -0,0 +1 @@
+{"case_id":"demo-case-001","events":[{"actor":"oev-demo-generator/0.2","event_id":"evt-001","event_type":"case.opened","occurred_at":"2026-10-01T08:00:00Z","sequence":1,"summary":"Case opened after scheduled sensor export."},{"actor":"oev-demo-generator/0.2","event_id":"evt-002","event_type":"facts.recorded","occurred_at":"2026-10-01T08:00:00Z","references":[{"id":"fact-001","kind":"fact"},{"id":"fact-002","kind":"fact"},{"id":"fact-003","kind":"fact"}],"sequence":2,"summary":"Three facts recorded from the snapshot sources."},{"actor":"oev-demo-rules/0.2","event_id":"evt-003","event_type":"rule_runs.executed","occurred_at":"2026-10-01T08:05:00Z","references":[{"id":"run-001","kind":"rule_run"},{"id":"run-002","kind":"rule_run"},{"id":"run-003","kind":"rule_run"},{"id":"run-004","kind":"rule_run"}],"sequence":3,"summary":"Four rules executed against the recorded facts."},{"actor":"oev-demo-rules/0.2","event_id":"evt-004","event_type":"finding.raised","occurred_at":"2026-10-01T08:05:00Z","references":[{"id":"finding-001","kind":"finding"}],"sequence":4,"summary":"Finding raised from run-001."},{"actor":"reviewer-001","event_id":"evt-005","event_type":"review.escalated","occurred_at":"2026-10-01T08:15:00Z","references":[{"id":"review-001","kind":"review_action"}],"sequence":5,"summary":"Finding escalated to maintenance lead."},{"actor":"reviewer-002","event_id":"evt-006","event_type":"review.approved","occurred_at":"2026-10-01T09:30:00Z","references":[{"id":"review-002","kind":"review_action"}],"sequence":6,"summary":"Maintenance lead approved with work order scheduled."},{"actor":"oev-demo-generator/0.2","event_id":"evt-007","event_type":"case.closed","occurred_at":"2026-10-01T09:30:00Z","sequence":7,"summary":"Case closed after the recorded review actions."}],"protocol_version":"oev-decision-pack/0.2"}

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/07-pack-replay-ok/pin.json

@@ -0,0 +1 @@
+{"case_id":"demo-case-001","pack_digest":"sha256:7871579fa558987434a14932150c6b36b29c9966b7ef79d4dcf92bfa93c7f9dd","pack_id":"pack-demo-case-001","protocol_version":"oev-decision-pack/0.2"}

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/08-pack-replay-hash-changed/expected-result.json

@@ -0,0 +1 @@
+{"note":"The copy is internally self-consistent (digests and pack_digest agree), but the out-of-band pin anchors the original bytes: replay refuses.","pinned_pack_digest":"sha256:7871579fa558987434a14932150c6b36b29c9966b7ef79d4dcf92bfa93c7f9dd","replay_status":"PACK_HASH_CHANGED"}

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/08-pack-replay-hash-changed/pack/artifacts/maintenance-policy.txt

@@ -0,0 +1,5 @@
+Maintenance policy (synthetic demo document)
+============================================
+- Pressure limit for station P-42: 85 psi.
+- Service is considered overdue after 180 days without maintenance.
+- Readings above the limit must be reviewed by a maintenance lead.

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/08-pack-replay-hash-changed/pack/artifacts/sensor-export.csv

@@ -0,0 +1,3 @@
+observed_at,source,pressure_psi
+2026-10-01T07:50:00Z,sensor-feed-A,86.1
+2026-10-01T07:55:00Z,sensor-feed-A,87.4

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/08-pack-replay-hash-changed/pack/case.json

@@ -0,0 +1 @@
+{"case_id":"demo-case-001","case_type":"field-maintenance-review","closed_at":"2026-10-01T09:30:00Z","description":"Fully synthetic demonstration case: a maintenance dispatcher reviews a sensor reading and records a maintenance decision. All data is fictional.","notes":["Synthetic example data - not derived from any real asset, person, or decision."],"opened_at":"2026-10-01T08:00:00Z","originating_system":"oev-demo-generator/0.2","protocol_version":"oev-decision-pack/0.2","title":"Pump station P-42 maintenance review (synthetic demo)"}

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/08-pack-replay-hash-changed/pack/facts.json

@@ -0,0 +1 @@
+{"case_id":"demo-case-001","facts":[{"fact_id":"fact-001","key":"sensor.pressure_reading","note":"Values requiring exact decimal representation are strings.","observed_at":"2026-10-01T07:55:00Z","snapshot_source_id":"sensor-export-2026-10-01","source":"sensor-feed-A","unit":"psi","value":"99.9","value_type":"decimal_string"},{"fact_id":"fact-002","key":"sensor.pressure_limit","observed_at":"2026-10-01T08:00:00Z","snapshot_source_id":"policy-snapshot-2026-10-01","source":"maintenance-policy-document","unit":"psi","value":"85","value_type":"decimal_string"},{"fact_id":"fact-003","key":"sensor.calibration_flag_active","observed_at":"2026-10-01T07:55:00Z","snapshot_source_id":"sensor-export-2026-10-01","source":"sensor-feed-A","value":false}],"protocol_version":"oev-decision-pack/0.2"}

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/08-pack-replay-hash-changed/pack/findings.json

@@ -0,0 +1 @@
+{"case_id":"demo-case-001","findings":[{"created_at":"2026-10-01T08:05:00Z","finding_id":"finding-001","related_fact_ids":["fact-001","fact-002"],"rule_id":"pressure-above-limit","rule_run_id":"run-001","severity":"MEDIUM","summary":"Latest pressure reading 87.4 psi exceeds the configured limit 85 psi."}],"protocol_version":"oev-decision-pack/0.2"}

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/08-pack-replay-hash-changed/pack/manifest.json

@@ -0,0 +1 @@
+{"case_id":"demo-case-001","created_at":"2026-10-01T10:00:00Z","creator":{"software":"oev","version":"0.2.0"},"members":[{"canonicalization":"raw","media_type":"text/plain","path":"artifacts/maintenance-policy.txt","role":"artifact","sha256":"sha256:53fb02729df8ed6c6a13564095ccc2c66673d9b66724fb69e5ded041914e7582","size_bytes":268},{"canonicalization":"raw","media_type":"text/csv","path":"artifacts/sensor-export.csv","role":"artifact","sha256":"sha256:13f59794a5d5e6b955a633ccda5195147237d63bbccdeea4152206fd9a89c53b","size_bytes":112},{"canonicalization":"jcs-rfc8785","media_type":"application/json","path":"case.json","role":"case","sha256":"sha256:112035262a89f0d9d919e225e77089101ab38a33c2aee71688f533612a208dc7","size_bytes":541},{"canonicalization":"jcs-rfc8785","media_type":"application/json","path":"facts.json","role":"facts","sha256":"sha256:e45a8ab5af40124bde8ff336b30cf98ba2f8137081931e1090096fc3bf772543","size_bytes":792},{"canonicalization":"jcs-rfc8785","media_type":"application/json","path":"findings.json","role":"findings","sha256":"sha256:402d0e9a7fd259c30b4179fc65474af1af06ca6ddc7794884eb3939d96efdf15","size_bytes":350},{"canonicalization":"jcs-rfc8785","media_type":"application/json","path":"review_actions.json","role":"review_actions","sha256":"sha256:b9e4d22e0ce64b7b3f88a87ebb6992cea66586ab06dc75be8adb553e65096626","size_bytes":777},{"canonicalization":"jcs-rfc8785","media_type":"application/json","path":"rule_runs.json","role":"rule_runs","sha256":"sha256:a52f91164b7362bf7df0b7a8de9c4ab0e111900a3c180925b245ee503dcd91c7","size_bytes":2317},{"canonicalization":"jcs-rfc8785","media_type":"application/json","path":"snapshot_context.json","role":"snapshot_context","sha256":"sha256:85d4674d5ca39afd6b38e0cb2e03c396e0b97f790e309594f885b74b3ff217a5","size_bytes":745},{"canonicalization":"jcs-rfc8785","media_type":"application/json","path":"timeline.json","role":"timeline","sha256":"sha256:1256ff1a052fe1bcac2afaf874550b7f852fcd12da3540f9e74091f8d07e2e67","size_bytes":1832}],"pack_digest":"sha256:388d80735ae5b5cd05e3325862d8060738c9425d654df73300c730c1b05ca8f1","pack_id":"pack-demo-case-001","protocol_version":"oev-decision-pack/0.2"}

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/08-pack-replay-hash-changed/pack/review_actions.json

@@ -0,0 +1 @@
+{"case_id":"demo-case-001","protocol_version":"oev-decision-pack/0.2","review_actions":[{"action_id":"review-001","action_type":"ESCALATE","actor":{"actor_id":"reviewer-001","actor_type":"human","display_name":"Dispatcher (demo)"},"note":"Escalated to the maintenance lead for human judgment.","performed_at":"2026-10-01T08:15:00Z","references_finding_ids":["finding-001"]},{"action_id":"review-002","action_type":"APPROVE","actor":{"actor_id":"reviewer-002","actor_type":"human","display_name":"Maintenance Lead (demo)"},"note":"Work order WO-2041 scheduled and pressure placed under monitoring. This record captures that the action occurred; the pack does not assert the decision was correct.","performed_at":"2026-10-01T09:30:00Z","references_finding_ids":["finding-001"]}]}

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/08-pack-replay-hash-changed/pack/rule_runs.json

@@ -0,0 +1 @@
+{"case_id":"demo-case-001","protocol_version":"oev-decision-pack/0.2","rule_runs":[{"detail":"Latest reading 87.4 psi is greater than limit 85 psi.","executed_at":"2026-10-01T08:05:00Z","executed_by":"oev-demo-rules/0.2","inputs":["fact-001","fact-002"],"outcome":"TRIGGERED","rule":{"condition":{"args":[{"fact":"sensor.pressure_reading"},{"fact":"sensor.pressure_limit"}],"op":"gt"},"description":"Flags when the latest pressure reading exceeds the configured limit.","rule_digest":"sha256:ce28b5196b3d058936adc4e6aedcf073da28f03e029484f98fdbbaa379b3db87","rule_id":"pressure-above-limit","rule_version":"1.1.0"},"run_id":"run-001"},{"detail":"Required fact 'maintenance.last_service_date' was not recorded in this snapshot; the run could not reach a conclusion.","executed_at":"2026-10-01T08:05:00Z","executed_by":"oev-demo-rules/0.2","inputs":[],"outcome":"UNVERIFIABLE","rule":{"condition":{"args":[{"fact":"maintenance.last_service_date"},{"param":"max_days_since_service"}],"op":"days_since_gt"},"description":"Flags when the last service date is older than the configured maximum.","rule_digest":"sha256:63111410da72b70c52e2377b9ccddb89e8cbfab2992d494342a17578f117e8da","rule_id":"service-overdue","rule_version":"1.0.0"},"run_id":"run-002"},{"detail":"Calibration flag is false.","executed_at":"2026-10-01T08:05:00Z","executed_by":"oev-demo-rules/0.2","inputs":["fact-003"],"outcome":"NOT_TRIGGERED","rule":{"condition":{"args":[{"fact":"sensor.calibration_flag_active"},{"const":true}],"op":"eq"},"description":"Flags when the sensor calibration flag is active.","rule_digest":"sha256:8e5be35c57088ec5c534c2f59767a27847f189a59820141565a0002b401555af","rule_id":"calibration-flag-active","rule_version":"1.0.0"},"run_id":"run-003"},{"detail":"Only one independent pressure source recorded; agreement check requires human review.","executed_at":"2026-10-01T08:05:00Z","executed_by":"oev-demo-rules/0.2","inputs":["fact-001"],"outcome":"REVIEW_REQUIRED","rule":{"condition":{"args":[{"prefix":"sensor.pressure_reading"},{"const":2}],"op":"fact_count_gte"},"description":"Requires two independent readings for agreement; defers to a reviewer.","rule_digest":"sha256:fb0d5cc9248c7d3cc951c2f8a1530a127fe33e0ddac05c1c5c9673818fdd336a","rule_id":"dual-source-agreement","rule_version":"0.3.0"},"run_id":"run-004"}]}

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/08-pack-replay-hash-changed/pack/snapshot_context.json

@@ -0,0 +1 @@
+{"captured_at":"2026-10-01T08:00:00Z","case_id":"demo-case-001","generator":{"software":"oev-demo-generator","version":"0.2.0"},"notes":["Synthetic snapshot for demonstration purposes."],"parameters":{"max_days_since_service":180,"pressure_readings_required_for_agreement":2},"protocol_version":"oev-decision-pack/0.2","snapshot_id":"snapshot-2026-10-01-001","sources":[{"digest":"sha256:13f59794a5d5e6b955a633ccda5195147237d63bbccdeea4152206fd9a89c53b","kind":"sensor_export","retrieved_at":"2026-10-01T08:00:00Z","source_id":"sensor-export-2026-10-01"},{"digest":"sha256:53fb02729df8ed6c6a13564095ccc2c66673d9b66724fb69e5ded041914e7582","kind":"policy_document","retrieved_at":"2026-10-01T08:00:00Z","source_id":"policy-snapshot-2026-10-01"}]}

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/08-pack-replay-hash-changed/pack/timeline.json

@@ -0,0 +1 @@
+{"case_id":"demo-case-001","events":[{"actor":"oev-demo-generator/0.2","event_id":"evt-001","event_type":"case.opened","occurred_at":"2026-10-01T08:00:00Z","sequence":1,"summary":"Case opened after scheduled sensor export."},{"actor":"oev-demo-generator/0.2","event_id":"evt-002","event_type":"facts.recorded","occurred_at":"2026-10-01T08:00:00Z","references":[{"id":"fact-001","kind":"fact"},{"id":"fact-002","kind":"fact"},{"id":"fact-003","kind":"fact"}],"sequence":2,"summary":"Three facts recorded from the snapshot sources."},{"actor":"oev-demo-rules/0.2","event_id":"evt-003","event_type":"rule_runs.executed","occurred_at":"2026-10-01T08:05:00Z","references":[{"id":"run-001","kind":"rule_run"},{"id":"run-002","kind":"rule_run"},{"id":"run-003","kind":"rule_run"},{"id":"run-004","kind":"rule_run"}],"sequence":3,"summary":"Four rules executed against the recorded facts."},{"actor":"oev-demo-rules/0.2","event_id":"evt-004","event_type":"finding.raised","occurred_at":"2026-10-01T08:05:00Z","references":[{"id":"finding-001","kind":"finding"}],"sequence":4,"summary":"Finding raised from run-001."},{"actor":"reviewer-001","event_id":"evt-005","event_type":"review.escalated","occurred_at":"2026-10-01T08:15:00Z","references":[{"id":"review-001","kind":"review_action"}],"sequence":5,"summary":"Finding escalated to maintenance lead."},{"actor":"reviewer-002","event_id":"evt-006","event_type":"review.approved","occurred_at":"2026-10-01T09:30:00Z","references":[{"id":"review-002","kind":"review_action"}],"sequence":6,"summary":"Maintenance lead approved with work order scheduled."},{"actor":"oev-demo-generator/0.2","event_id":"evt-007","event_type":"case.closed","occurred_at":"2026-10-01T09:30:00Z","sequence":7,"summary":"Case closed after the recorded review actions."}],"protocol_version":"oev-decision-pack/0.2"}

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/08-pack-replay-hash-changed/pin.json

@@ -0,0 +1 @@
+{"case_id":"demo-case-001","pack_digest":"sha256:7871579fa558987434a14932150c6b36b29c9966b7ef79d4dcf92bfa93c7f9dd","pack_id":"pack-demo-case-001","protocol_version":"oev-decision-pack/0.2"}

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/09-pack-replay-snapshot-leak/expected-result.json

@@ -0,0 +1 @@
+{"excluded_fact_id":"fact-901","note":"A recorded rule run consumed a fact observed after the snapshot capture (2026-10-01T09:00:00Z > captured_at 2026-10-01T08:00:00Z): the recorded history contradicts the snapshot boundary, so the entire replay refuses.","replay_status":"SNAPSHOT_LEAK"}

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/09-pack-replay-snapshot-leak/pack/artifacts/maintenance-policy.txt

@@ -0,0 +1,5 @@
+Maintenance policy (synthetic demo document)
+============================================
+- Pressure limit for station P-42: 85 psi.
+- Service is considered overdue after 180 days without maintenance.
+- Readings above the limit must be reviewed by a maintenance lead.

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/09-pack-replay-snapshot-leak/pack/artifacts/sensor-export.csv

@@ -0,0 +1,3 @@
+observed_at,source,pressure_psi
+2026-10-01T07:50:00Z,sensor-feed-A,86.1
+2026-10-01T07:55:00Z,sensor-feed-A,87.4

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/09-pack-replay-snapshot-leak/pack/case.json

@@ -0,0 +1 @@
+{"case_id":"demo-case-001","case_type":"field-maintenance-review","closed_at":"2026-10-01T09:30:00Z","description":"Fully synthetic demonstration case: a maintenance dispatcher reviews a sensor reading and records a maintenance decision. All data is fictional.","notes":["Synthetic example data - not derived from any real asset, person, or decision."],"opened_at":"2026-10-01T08:00:00Z","originating_system":"oev-demo-generator/0.2","protocol_version":"oev-decision-pack/0.2","title":"Pump station P-42 maintenance review (synthetic demo)"}

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/09-pack-replay-snapshot-leak/pack/facts.json

@@ -0,0 +1 @@
+{"case_id":"demo-case-001","facts":[{"fact_id":"fact-001","key":"sensor.pressure_reading","note":"Values requiring exact decimal representation are strings.","observed_at":"2026-10-01T07:55:00Z","snapshot_source_id":"sensor-export-2026-10-01","source":"sensor-feed-A","unit":"psi","value":"87.4","value_type":"decimal_string"},{"fact_id":"fact-002","key":"sensor.pressure_limit","observed_at":"2026-10-01T08:00:00Z","snapshot_source_id":"policy-snapshot-2026-10-01","source":"maintenance-policy-document","unit":"psi","value":"85","value_type":"decimal_string"},{"fact_id":"fact-003","key":"sensor.calibration_flag_active","observed_at":"2026-10-01T07:55:00Z","snapshot_source_id":"sensor-export-2026-10-01","source":"sensor-feed-A","value":false},{"fact_id":"fact-901","key":"sensor.reading_after_capture","observed_at":"2026-10-01T09:00:00Z","snapshot_source_id":"sensor-export-2026-10-01","source":"sensor-feed-A","value":"99.9","value_type":"decimal_string"}],"protocol_version":"oev-decision-pack/0.2"}

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/09-pack-replay-snapshot-leak/pack/findings.json

@@ -0,0 +1 @@
+{"case_id":"demo-case-001","findings":[{"created_at":"2026-10-01T08:05:00Z","finding_id":"finding-001","related_fact_ids":["fact-001","fact-002"],"rule_id":"pressure-above-limit","rule_run_id":"run-001","severity":"MEDIUM","summary":"Latest pressure reading 87.4 psi exceeds the configured limit 85 psi."}],"protocol_version":"oev-decision-pack/0.2"}

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/09-pack-replay-snapshot-leak/pack/manifest.json

@@ -0,0 +1 @@
+{"case_id":"demo-case-001","created_at":"2026-10-01T10:00:00Z","creator":{"software":"oev","version":"0.2.0"},"members":[{"canonicalization":"raw","media_type":"text/plain","path":"artifacts/maintenance-policy.txt","role":"artifact","sha256":"sha256:53fb02729df8ed6c6a13564095ccc2c66673d9b66724fb69e5ded041914e7582","size_bytes":268},{"canonicalization":"raw","media_type":"text/csv","path":"artifacts/sensor-export.csv","role":"artifact","sha256":"sha256:13f59794a5d5e6b955a633ccda5195147237d63bbccdeea4152206fd9a89c53b","size_bytes":112},{"canonicalization":"jcs-rfc8785","media_type":"application/json","path":"case.json","role":"case","sha256":"sha256:112035262a89f0d9d919e225e77089101ab38a33c2aee71688f533612a208dc7","size_bytes":541},{"canonicalization":"jcs-rfc8785","media_type":"application/json","path":"facts.json","role":"facts","sha256":"sha256:6f38a50656e717b84d871a35ba873e9e64ad50d51f94f22b991d07ca47422517","size_bytes":1007},{"canonicalization":"jcs-rfc8785","media_type":"application/json","path":"findings.json","role":"findings","sha256":"sha256:402d0e9a7fd259c30b4179fc65474af1af06ca6ddc7794884eb3939d96efdf15","size_bytes":350},{"canonicalization":"jcs-rfc8785","media_type":"application/json","path":"review_actions.json","role":"review_actions","sha256":"sha256:b9e4d22e0ce64b7b3f88a87ebb6992cea66586ab06dc75be8adb553e65096626","size_bytes":777},{"canonicalization":"jcs-rfc8785","media_type":"application/json","path":"rule_runs.json","role":"rule_runs","sha256":"sha256:dbac4f8085f1656ecd99ff6357a783758dcbb630a957c2b7476e39040917776b","size_bytes":2861},{"canonicalization":"jcs-rfc8785","media_type":"application/json","path":"snapshot_context.json","role":"snapshot_context","sha256":"sha256:85d4674d5ca39afd6b38e0cb2e03c396e0b97f790e309594f885b74b3ff217a5","size_bytes":745},{"canonicalization":"jcs-rfc8785","media_type":"application/json","path":"timeline.json","role":"timeline","sha256":"sha256:1256ff1a052fe1bcac2afaf874550b7f852fcd12da3540f9e74091f8d07e2e67","size_bytes":1832}],"pack_digest":"sha256:2a19e207203c8c0d53eac2751bf25709481571639898ca29355128ca77d4da56","pack_id":"pack-demo-case-001","protocol_version":"oev-decision-pack/0.2"}

oev_conformance_vectors-0.1.0/src/oev_conformance_vectors/data/fixtures/09-pack-replay-snapshot-leak/pack/review_actions.json

@@ -0,0 +1 @@
+{"case_id":"demo-case-001","protocol_version":"oev-decision-pack/0.2","review_actions":[{"action_id":"review-001","action_type":"ESCALATE","actor":{"actor_id":"reviewer-001","actor_type":"human","display_name":"Dispatcher (demo)"},"note":"Escalated to the maintenance lead for human judgment.","performed_at":"2026-10-01T08:15:00Z","references_finding_ids":["finding-001"]},{"action_id":"review-002","action_type":"APPROVE","actor":{"actor_id":"reviewer-002","actor_type":"human","display_name":"Maintenance Lead (demo)"},"note":"Work order WO-2041 scheduled and pressure placed under monitoring. This record captures that the action occurred; the pack does not assert the decision was correct.","performed_at":"2026-10-01T09:30:00Z","references_finding_ids":["finding-001"]}]}