{
  "schema": "MAKNOW_FLR009_LAB_FIXTURES_v1",
  "note": "Synthetic local supply-chain evidence only. No malicious package, external registry, production credential, production system, or external target is used.",
  "cases": [
    {
      "id": "safe_baseline",
      "source_revision_match": true,
      "source_policy_evidence": true,
      "dependency_evidence_match": true,
      "builder_approved": true,
      "provenance_subject_match": true,
      "artifact_digest_match": true,
      "repository_digest_match": true,
      "signature_valid": true,
      "credential_signal_only": false,
      "evidence_complete": true,
      "post_source_revision_match": true,
      "post_source_policy_evidence": true,
      "post_dependency_evidence_match": true,
      "post_builder_approved": true,
      "post_provenance_subject_match": true,
      "post_artifact_digest_match": true,
      "post_repository_digest_match": true,
      "post_signature_valid": true,
      "post_credential_signal_only": false,
      "post_evidence_complete": true
    },
    {
      "id": "dependency_lock_mismatch",
      "source_revision_match": true,
      "source_policy_evidence": true,
      "dependency_evidence_match": false,
      "builder_approved": true,
      "provenance_subject_match": true,
      "artifact_digest_match": true,
      "repository_digest_match": true,
      "signature_valid": true,
      "credential_signal_only": false,
      "evidence_complete": true,
      "post_source_revision_match": true,
      "post_source_policy_evidence": true,
      "post_dependency_evidence_match": true,
      "post_builder_approved": true,
      "post_provenance_subject_match": true,
      "post_artifact_digest_match": true,
      "post_repository_digest_match": true,
      "post_signature_valid": true,
      "post_credential_signal_only": false,
      "post_evidence_complete": true
    },
    {
      "id": "unapproved_builder",
      "source_revision_match": true,
      "source_policy_evidence": true,
      "dependency_evidence_match": true,
      "builder_approved": false,
      "provenance_subject_match": true,
      "artifact_digest_match": true,
      "repository_digest_match": true,
      "signature_valid": true,
      "credential_signal_only": false,
      "evidence_complete": true,
      "post_source_revision_match": true,
      "post_source_policy_evidence": true,
      "post_dependency_evidence_match": true,
      "post_builder_approved": true,
      "post_provenance_subject_match": true,
      "post_artifact_digest_match": true,
      "post_repository_digest_match": true,
      "post_signature_valid": true,
      "post_credential_signal_only": false,
      "post_evidence_complete": true
    },
    {
      "id": "provenance_subject_mismatch",
      "source_revision_match": true,
      "source_policy_evidence": true,
      "dependency_evidence_match": true,
      "builder_approved": true,
      "provenance_subject_match": false,
      "artifact_digest_match": true,
      "repository_digest_match": true,
      "signature_valid": true,
      "credential_signal_only": false,
      "evidence_complete": true,
      "post_source_revision_match": true,
      "post_source_policy_evidence": true,
      "post_dependency_evidence_match": true,
      "post_builder_approved": true,
      "post_provenance_subject_match": true,
      "post_artifact_digest_match": true,
      "post_repository_digest_match": true,
      "post_signature_valid": true,
      "post_credential_signal_only": false,
      "post_evidence_complete": true
    },
    {
      "id": "repository_digest_mismatch",
      "source_revision_match": true,
      "source_policy_evidence": true,
      "dependency_evidence_match": true,
      "builder_approved": true,
      "provenance_subject_match": true,
      "artifact_digest_match": true,
      "repository_digest_match": false,
      "signature_valid": false,
      "credential_signal_only": false,
      "evidence_complete": true,
      "post_source_revision_match": true,
      "post_source_policy_evidence": true,
      "post_dependency_evidence_match": true,
      "post_builder_approved": true,
      "post_provenance_subject_match": true,
      "post_artifact_digest_match": true,
      "post_repository_digest_match": true,
      "post_signature_valid": true,
      "post_credential_signal_only": false,
      "post_evidence_complete": true
    },
    {
      "id": "adjacent_credential_signal_only",
      "source_revision_match": true,
      "source_policy_evidence": true,
      "dependency_evidence_match": true,
      "builder_approved": true,
      "provenance_subject_match": true,
      "artifact_digest_match": true,
      "repository_digest_match": true,
      "signature_valid": true,
      "credential_signal_only": true,
      "evidence_complete": true,
      "post_source_revision_match": true,
      "post_source_policy_evidence": true,
      "post_dependency_evidence_match": true,
      "post_builder_approved": true,
      "post_provenance_subject_match": true,
      "post_artifact_digest_match": true,
      "post_repository_digest_match": true,
      "post_signature_valid": true,
      "post_credential_signal_only": true,
      "post_evidence_complete": true
    },
    {
      "id": "source_policy_evidence_incomplete",
      "source_revision_match": true,
      "source_policy_evidence": null,
      "dependency_evidence_match": true,
      "builder_approved": true,
      "provenance_subject_match": true,
      "artifact_digest_match": true,
      "repository_digest_match": true,
      "signature_valid": true,
      "credential_signal_only": false,
      "evidence_complete": false,
      "post_source_revision_match": true,
      "post_source_policy_evidence": null,
      "post_dependency_evidence_match": true,
      "post_builder_approved": true,
      "post_provenance_subject_match": true,
      "post_artifact_digest_match": true,
      "post_repository_digest_match": true,
      "post_signature_valid": true,
      "post_credential_signal_only": false,
      "post_evidence_complete": false
    },
    {
      "id": "transfer_subject_fixed_repository_breaks",
      "source_revision_match": true,
      "source_policy_evidence": true,
      "dependency_evidence_match": true,
      "builder_approved": true,
      "provenance_subject_match": false,
      "artifact_digest_match": true,
      "repository_digest_match": true,
      "signature_valid": true,
      "credential_signal_only": false,
      "evidence_complete": true,
      "post_source_revision_match": true,
      "post_source_policy_evidence": true,
      "post_dependency_evidence_match": true,
      "post_builder_approved": true,
      "post_provenance_subject_match": true,
      "post_artifact_digest_match": true,
      "post_repository_digest_match": false,
      "post_signature_valid": false,
      "post_credential_signal_only": false,
      "post_evidence_complete": true
    }
  ]
}