# FLR009-LAB1 — Synthetic Supply-Chain Evidence Lab

Use the eight pre-generated local cases in `fixtures/cases.json`. For each case, build **Supply-Chain Compromise Trace & Quarantine Record v1** and decide only from the supplied evidence.

Trace source revision, dependency evidence, builder identity, provenance subject, artifact/repository digests, and policy separately. Preserve `UNKNOWN` when evidence is incomplete. Do not create, modify, publish, or retrieve packages from any external registry.

`run_checks.py` validates fixture shape only. The administrative oracle is intentionally not learner-visible.