{
  "schema_version": "ioi.components.hypervisor.governed-effect-claim-manifest.v1",
  "manifest_ref": "claim-manifest://c8/v3/u1-aft-campaign-o-aes-phl-14d24907-20260823T213517Z",
  "subject_ref": "provider-operation://trajectory/12b32ab24c76fc24136d5b0a9baf7892fbbbf86f283cc5652d7024bc729e8715",
  "subject_hash": "sha256:12b32ab24c76fc24136d5b0a9baf7892fbbbf86f283cc5652d7024bc729e8715",
  "protection_profile": "trusted_host_hostile_guest",
  "claims": [
    {
      "claim_id": "governed_infrastructure_lifecycle",
      "status": "demonstrated",
      "evidence_refs": [
        "certificate://c8/v2/101c2437f2092838a38eaae84e24c55c1eebfdd71e43c6ee5fdac41069cfd538"
      ],
      "limitation_note": "Real Akash create, readiness, result retrieval, teardown, and terminal settlement are bound."
    },
    {
      "claim_id": "workload_readiness",
      "status": "demonstrated",
      "evidence_refs": [
        "evidence://provider/readiness/u1-aft-campaign-o-aes-phl-14d24907-20260823T213517Z"
      ],
      "limitation_note": "The provider reported one requested and one ready replica."
    },
    {
      "claim_id": "workload_result_binding",
      "status": "demonstrated",
      "evidence_refs": [
        "receipt://aft/result-retrieval/u1-aft-campaign-o-aes-phl-14d24907-20260823T213517Z"
      ],
      "limitation_note": "An authenticated, TLS-pinned result was committed after provider evidence."
    },
    {
      "claim_id": "logical_policy_mediation",
      "status": "demonstrated",
      "evidence_refs": [
        "trajectory-decision://0c643ad093e9e5696e40ac8f3f06c13625bd2df5c62fc81b8b0d69251372ab79"
      ],
      "limitation_note": "The exact request advanced a bounded trajectory only after every constraint passed."
    },
    {
      "claim_id": "workload_bound_isolation_enforced",
      "status": "demonstrated",
      "evidence_refs": [
        "workload-isolation-binding://u1/o/14d24907/20260823T213517Z"
      ],
      "limitation_note": "A fresh no-NIC Cloud Hypervisor guest could return only a quarantined proposal."
    },
    {
      "claim_id": "worker_secret_non_possession_tested",
      "status": "demonstrated",
      "evidence_refs": [
        "evidence://secret-non-possession/u1-aft-campaign-o-aes-phl-14d24907-20260823T213517Z"
      ],
      "limitation_note": "Scoped to a trusted host and hostile UID-0 guest across the enumerated channels; host/VMM compromise is outside this claim."
    },
    {
      "claim_id": "separate_verifier",
      "status": "demonstrated",
      "evidence_refs": [
        "verifier://ioi/aft-c8-verifier"
      ],
      "limitation_note": "A separately built verifier consumes only the portable bundle and policy."
    },
    {
      "claim_id": "independently_reproduced",
      "status": "not_demonstrated",
      "evidence_refs": [],
      "limitation_note": "The campaign is variance-caveated; no within-threshold reproduction claim is made."
    },
    {
      "claim_id": "third_party_verified",
      "status": "not_demonstrated",
      "evidence_refs": [],
      "limitation_note": "The verifier is separate but maintained by IOI, not a third party."
    },
    {
      "claim_id": "provider_neutrality",
      "status": "not_demonstrated",
      "evidence_refs": [],
      "limitation_note": "This evidence covers one exact Akash provider."
    },
    {
      "claim_id": "bare_metal_placement",
      "status": "not_demonstrated",
      "evidence_refs": [],
      "limitation_note": "The measured container exposes hardware characteristics but no tenant-specific host attestation."
    }
  ],
  "source_basis_refs": [
    {
      "ref": "source://ioi/aft/14d249076477e97ec0dce5cdbea069b205df7cad",
      "hash": "sha256:f7d3a4ce081e734904517a797eae61a95b5a6fff7279fe3f19407f08406bdb78"
    },
    {
      "ref": "source://ioi/hypervisor/f59d3afbab56c93292756217d142f05b37a7b618",
      "hash": "sha256:c19666da7dc8377d9aba261ef12bfdc2ffba8c54195da2b194645cca3497ff93"
    }
  ],
  "generated_at": "2026-08-23T23:45:00Z",
  "manifest_hash": "sha256:3b9f94d36265c4cf69d9dcd3727286d6261c2fd92d13582e11a85a5fd3e3e89b"
}