aauth.sidecat.dev · All reports · report.md · report.json

aauth-go remote report

Report go-ad34a9a. Suite aauth-conformance f415f2f8e18bebb2b4b6928d96c80d999244e72a. Revision ad34a9a. Suite exit 0.

Pass means the listed assertions passed. Remote mode does not grade TLS, enrollment or discovery. not_exercised is a scenario this transport does not run, or a conditional check that did not apply.

The role reports follow.

Four-party authorization report

Suite SHA-256: 33056ca8b0601972c16829eecf57e9d6eda7857fc80670a7a379c8f5f61f9da2

Verifier clock: 1793721145 Unix seconds

Execution: passed.

Pass means only the listed assertions passed, not the entire section. adapter-contract rows specify the test application's response. Remote mode reached the deployed servers over HTTPS; it does not grade TLS, enrollment or discovery security.

Assertion evidence

aauth-go

• federated-none/initial-status-0 — fed.person-required: pass
• federated-none/initial-sfv-token-1 — fed.person-required: pass
• federated-none/person-status-2 — fed.person-token: pass
• federated-none/person-ps-jwt-3 — fed.person-token: pass
• federated-none/challenge-status-4 — fed.challenge: pass
• federated-none/challenge-sfv-token-5 — fed.challenge: pass
• federated-none/challenge-fed-challenge-6 — fed.challenge: pass
• federated-none/handoff-fed-ps-proof-7 — fed.ps-proof: not_exercised: the Person Server's request to the Access Server is not observable remotely
• federated-none/handoff-fed-forwarded-8 — fed.forwarding: not_exercised: the Person Server's request to the Access Server is not observable remotely
• federated-none/access-status-9 — fed.auth-token: not_exercised: the Person Server's request to the Access Server is not observable remotely
• federated-none/access-ps-jwt-10 — fed.auth-token: not_exercised: the Person Server's request to the Access Server is not observable remotely
• federated-none/token-status-11 — fed.delivery: pass
• federated-none/token-ps-jwt-12 — fed.delivery: pass
• federated-none/protected-status-13 — fed.application: pass
• federated-none/protected-json-member-14 — fed.application: pass
• federated-short-agent/initial-status-0 — fed.person-required: pass
• federated-short-agent/initial-sfv-token-1 — fed.person-required: pass
• federated-short-agent/person-status-2 — fed.person-token: pass
• federated-short-agent/person-ps-jwt-3 — fed.person-token: pass
• federated-short-agent/challenge-status-4 — fed.challenge: pass
• federated-short-agent/challenge-sfv-token-5 — fed.challenge: pass
• federated-short-agent/challenge-fed-challenge-6 — fed.challenge: pass
• federated-short-agent/handoff-fed-ps-proof-7 — fed.ps-proof: not_exercised: the Person Server's request to the Access Server is not observable remotely
• federated-short-agent/handoff-fed-forwarded-8 — fed.forwarding: not_exercised: the Person Server's request to the Access Server is not observable remotely
• federated-short-agent/access-status-9 — fed.auth-token: not_exercised: the Person Server's request to the Access Server is not observable remotely
• federated-short-agent/access-ps-jwt-10 — fed.auth-token: not_exercised: the Person Server's request to the Access Server is not observable remotely
• federated-short-agent/token-status-11 — fed.delivery: pass
• federated-short-agent/token-ps-jwt-12 — fed.delivery: pass
• federated-short-agent/protected-status-13 — fed.application: pass
• federated-short-agent/protected-json-member-14 — fed.application: pass
• federated-as-proof/initial-status-0 — fed.person-required: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-proof/initial-sfv-token-1 — fed.person-required: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-proof/person-status-2 — fed.person-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-proof/person-ps-jwt-3 — fed.person-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-proof/challenge-status-4 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-proof/challenge-sfv-token-5 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-proof/challenge-fed-challenge-6 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-proof/handoff-fed-ps-proof-7 — fed.ps-proof: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-proof/handoff-fed-forwarded-8 — fed.forwarding: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-proof/access-status-9 — fed.as-binding: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-proof/access-ps-no-token-10 — fed.as-binding: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-proof/token-ps-no-token-11 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-body/initial-status-0 — fed.person-required: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-body/initial-sfv-token-1 — fed.person-required: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-body/person-status-2 — fed.person-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-body/person-ps-jwt-3 — fed.person-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-body/challenge-status-4 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-body/challenge-sfv-token-5 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-body/challenge-fed-challenge-6 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-body/handoff-fed-ps-proof-7 — fed.ps-proof: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-body/handoff-fed-forwarded-8 — fed.forwarding: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-body/access-status-9 — fed.as-binding: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-body/access-ps-no-token-10 — fed.as-binding: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-body/token-ps-no-token-11 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-aud/initial-status-0 — fed.person-required: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-aud/initial-sfv-token-1 — fed.person-required: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-aud/person-status-2 — fed.person-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-aud/person-ps-jwt-3 — fed.person-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-aud/challenge-status-4 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-aud/challenge-sfv-token-5 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-aud/challenge-fed-challenge-6 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-aud/handoff-fed-ps-proof-7 — fed.ps-proof: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-aud/handoff-fed-forwarded-8 — fed.forwarding: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-aud/access-status-9 — fed.as-binding: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-aud/access-ps-no-token-10 — fed.as-binding: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-aud/access-json-member-11 — fed.as-binding: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-aud/token-ps-no-token-12 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-aud/token-status-13 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-aud/token-json-member-14 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-jti/initial-status-0 — fed.person-required: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-jti/initial-sfv-token-1 — fed.person-required: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-jti/person-status-2 — fed.person-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-jti/person-ps-jwt-3 — fed.person-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-jti/challenge-status-4 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-jti/challenge-sfv-token-5 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-jti/challenge-fed-challenge-6 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-jti/handoff-fed-ps-proof-7 — fed.ps-proof: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-jti/handoff-fed-forwarded-8 — fed.forwarding: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-jti/access-status-9 — fed.as-binding: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-jti/access-ps-no-token-10 — fed.as-binding: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-jti/access-json-member-11 — fed.as-binding: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-jti/token-ps-no-token-12 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-jti/token-status-13 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-jti/token-json-member-14 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-ps/initial-status-0 — fed.person-required: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-ps/initial-sfv-token-1 — fed.person-required: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-ps/person-status-2 — fed.person-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-ps/person-ps-jwt-3 — fed.person-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-ps/challenge-status-4 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-ps/challenge-sfv-token-5 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-ps/challenge-fed-challenge-6 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-ps/handoff-fed-ps-proof-7 — fed.ps-proof: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-ps/handoff-fed-forwarded-8 — fed.forwarding: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-ps/access-status-9 — fed.as-binding: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-ps/access-ps-no-token-10 — fed.as-binding: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-ps/access-json-member-11 — fed.as-binding: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-ps/token-ps-no-token-12 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-ps/token-status-13 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-ps/token-json-member-14 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-key/initial-status-0 — fed.person-required: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-key/initial-sfv-token-1 — fed.person-required: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-key/person-status-2 — fed.person-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-key/person-ps-jwt-3 — fed.person-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-key/challenge-status-4 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-key/challenge-sfv-token-5 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-key/challenge-fed-challenge-6 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-key/handoff-fed-ps-proof-7 — fed.ps-proof: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-key/handoff-fed-forwarded-8 — fed.forwarding: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-key/access-status-9 — fed.as-binding: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-key/access-ps-no-token-10 — fed.as-binding: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-key/access-json-member-11 — fed.as-binding: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-key/token-ps-no-token-12 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-key/token-status-13 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-resource-key/token-json-member-14 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-presented-expired/initial-status-0 — fed.person-required: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-presented-expired/initial-sfv-token-1 — fed.person-required: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-presented-expired/person-status-2 — fed.person-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-presented-expired/person-ps-jwt-3 — fed.person-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-presented-expired/challenge-status-4 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-presented-expired/challenge-sfv-token-5 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-presented-expired/challenge-fed-challenge-6 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-presented-expired/handoff-fed-ps-proof-7 — fed.ps-proof: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-presented-expired/handoff-fed-forwarded-8 — fed.forwarding: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-presented-expired/access-status-9 — fed.as-binding: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-presented-expired/access-ps-no-token-10 — fed.as-binding: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-presented-expired/access-json-member-11 — fed.as-binding: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-presented-expired/token-ps-no-token-12 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-presented-expired/token-status-13 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-presented-expired/token-json-member-14 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-signature/initial-status-0 — fed.person-required: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-signature/initial-sfv-token-1 — fed.person-required: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-signature/person-status-2 — fed.person-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-signature/person-ps-jwt-3 — fed.person-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-signature/challenge-status-4 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-signature/challenge-sfv-token-5 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-signature/challenge-fed-challenge-6 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-signature/handoff-fed-ps-proof-7 — fed.ps-proof: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-signature/handoff-fed-forwarded-8 — fed.forwarding: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-signature/access-status-9 — fed.auth-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-signature/access-ps-jwt-10 — fed.auth-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-signature/token-ps-no-token-11 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-signature/token-status-12 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-signature/token-json-member-13 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-iss/initial-status-0 — fed.person-required: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-iss/initial-sfv-token-1 — fed.person-required: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-iss/person-status-2 — fed.person-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-iss/person-ps-jwt-3 — fed.person-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-iss/challenge-status-4 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-iss/challenge-sfv-token-5 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-iss/challenge-fed-challenge-6 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-iss/handoff-fed-ps-proof-7 — fed.ps-proof: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-iss/handoff-fed-forwarded-8 — fed.forwarding: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-iss/access-status-9 — fed.auth-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-iss/access-ps-jwt-10 — fed.auth-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-iss/token-ps-no-token-11 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-iss/token-status-12 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-iss/token-json-member-13 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-aud/initial-status-0 — fed.person-required: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-aud/initial-sfv-token-1 — fed.person-required: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-aud/person-status-2 — fed.person-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-aud/person-ps-jwt-3 — fed.person-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-aud/challenge-status-4 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-aud/challenge-sfv-token-5 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-aud/challenge-fed-challenge-6 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-aud/handoff-fed-ps-proof-7 — fed.ps-proof: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-aud/handoff-fed-forwarded-8 — fed.forwarding: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-aud/access-status-9 — fed.auth-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-aud/access-ps-jwt-10 — fed.auth-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-aud/token-ps-no-token-11 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-aud/token-status-12 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-aud/token-json-member-13 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-key/initial-status-0 — fed.person-required: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-key/initial-sfv-token-1 — fed.person-required: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-key/person-status-2 — fed.person-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-key/person-ps-jwt-3 — fed.person-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-key/challenge-status-4 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-key/challenge-sfv-token-5 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-key/challenge-fed-challenge-6 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-key/handoff-fed-ps-proof-7 — fed.ps-proof: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-key/handoff-fed-forwarded-8 — fed.forwarding: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-key/access-status-9 — fed.auth-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-key/access-ps-jwt-10 — fed.auth-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-key/token-ps-no-token-11 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-key/token-status-12 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-key/token-json-member-13 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-sub/initial-status-0 — fed.person-required: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-sub/initial-sfv-token-1 — fed.person-required: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-sub/person-status-2 — fed.person-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-sub/person-ps-jwt-3 — fed.person-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-sub/challenge-status-4 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-sub/challenge-sfv-token-5 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-sub/challenge-fed-challenge-6 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-sub/handoff-fed-ps-proof-7 — fed.ps-proof: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-sub/handoff-fed-forwarded-8 — fed.forwarding: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-sub/access-status-9 — fed.auth-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-sub/access-ps-jwt-10 — fed.auth-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-sub/token-ps-no-token-11 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-sub/token-status-12 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-sub/token-json-member-13 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-scope/initial-status-0 — fed.person-required: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-scope/initial-sfv-token-1 — fed.person-required: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-scope/person-status-2 — fed.person-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-scope/person-ps-jwt-3 — fed.person-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-scope/challenge-status-4 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-scope/challenge-sfv-token-5 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-scope/challenge-fed-challenge-6 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-scope/handoff-fed-ps-proof-7 — fed.ps-proof: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-scope/handoff-fed-forwarded-8 — fed.forwarding: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-scope/access-status-9 — fed.auth-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-scope/access-ps-jwt-10 — fed.auth-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-scope/token-ps-no-token-11 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-scope/token-status-12 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-scope/token-json-member-13 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-exp/initial-status-0 — fed.person-required: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-exp/initial-sfv-token-1 — fed.person-required: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-exp/person-status-2 — fed.person-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-exp/person-ps-jwt-3 — fed.person-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-exp/challenge-status-4 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-exp/challenge-sfv-token-5 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-exp/challenge-fed-challenge-6 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-exp/handoff-fed-ps-proof-7 — fed.ps-proof: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-exp/handoff-fed-forwarded-8 — fed.forwarding: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-exp/access-status-9 — fed.auth-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-exp/access-ps-jwt-10 — fed.auth-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-exp/token-ps-no-token-11 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-exp/token-status-12 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-exp/token-json-member-13 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-ps/initial-status-0 — fed.person-required: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-ps/initial-sfv-token-1 — fed.person-required: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-ps/person-status-2 — fed.person-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-ps/person-ps-jwt-3 — fed.person-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-ps/challenge-status-4 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-ps/challenge-sfv-token-5 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-ps/challenge-fed-challenge-6 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-ps/handoff-fed-ps-proof-7 — fed.ps-proof: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-ps/handoff-fed-forwarded-8 — fed.forwarding: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-ps/access-status-9 — fed.auth-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-ps/access-ps-jwt-10 — fed.auth-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-ps/token-ps-no-token-11 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-ps/token-status-12 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• federated-grant-ps/token-json-member-13 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-denial/initial-status-0 — fed.person-required: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-denial/initial-sfv-token-1 — fed.person-required: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-denial/person-status-2 — fed.person-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-denial/person-ps-jwt-3 — fed.person-token: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-denial/challenge-status-4 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-denial/challenge-sfv-token-5 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-denial/challenge-fed-challenge-6 — fed.challenge: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-denial/handoff-fed-ps-proof-7 — fed.ps-proof: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-denial/handoff-fed-forwarded-8 — fed.forwarding: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-denial/access-status-9 — fed.application: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-denial/access-ps-no-token-10 — fed.application: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-denial/access-json-member-11 — fed.application: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-denial/token-ps-no-token-12 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-denial/token-status-13 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• federated-as-denial/token-json-member-14 — fed.delivery: not_exercised: injects a fault between the Person Server and the Access Server
• fixture-ps-none/initial-status-0 — fed.person-required: pass
• fixture-ps-none/initial-sfv-token-1 — fed.person-required: pass
• fixture-ps-none/challenge-status-4 — fed.challenge: pass
• fixture-ps-none/challenge-sfv-token-5 — fed.challenge: pass
• fixture-ps-none/challenge-fed-challenge-6 — fed.challenge: pass
• fixture-ps-none/access-status-9 — fed.auth-token: pass
• fixture-ps-none/access-ps-jwt-10 — fed.auth-token: pass
• fixture-ps-none/protected-status-13 — fed.application: pass
• fixture-ps-none/protected-json-member-14 — fed.application: pass
• fixture-ps-short-agent/initial-status-0 — fed.person-required: pass
• fixture-ps-short-agent/initial-sfv-token-1 — fed.person-required: pass
• fixture-ps-short-agent/challenge-status-4 — fed.challenge: pass
• fixture-ps-short-agent/challenge-sfv-token-5 — fed.challenge: pass
• fixture-ps-short-agent/challenge-fed-challenge-6 — fed.challenge: pass
• fixture-ps-short-agent/access-status-9 — fed.auth-token: pass
• fixture-ps-short-agent/access-ps-jwt-10 — fed.auth-token: pass
• fixture-ps-short-agent/protected-status-13 — fed.application: pass
• fixture-ps-short-agent/protected-json-member-14 — fed.application: pass
• fixture-ps-as-proof/initial-status-0 — fed.person-required: pass
• fixture-ps-as-proof/initial-sfv-token-1 — fed.person-required: pass
• fixture-ps-as-proof/challenge-status-4 — fed.challenge: pass
• fixture-ps-as-proof/challenge-sfv-token-5 — fed.challenge: pass
• fixture-ps-as-proof/challenge-fed-challenge-6 — fed.challenge: pass
• fixture-ps-as-proof/access-status-9 — fed.as-binding: pass
• fixture-ps-as-proof/access-ps-no-token-10 — fed.as-binding: pass
• fixture-ps-as-body/initial-status-0 — fed.person-required: pass
• fixture-ps-as-body/initial-sfv-token-1 — fed.person-required: pass
• fixture-ps-as-body/challenge-status-4 — fed.challenge: pass
• fixture-ps-as-body/challenge-sfv-token-5 — fed.challenge: pass
• fixture-ps-as-body/challenge-fed-challenge-6 — fed.challenge: pass
• fixture-ps-as-body/access-status-9 — fed.as-binding: pass
• fixture-ps-as-body/access-ps-no-token-10 — fed.as-binding: pass
• fixture-ps-as-resource-aud/initial-status-0 — fed.person-required: not_exercised: re-signs the Resource's challenge, which needs the Resource's private key
• fixture-ps-as-resource-aud/initial-sfv-token-1 — fed.person-required: not_exercised: re-signs the Resource's challenge, which needs the Resource's private key
• fixture-ps-as-resource-aud/challenge-status-4 — fed.challenge: not_exercised: re-signs the Resource's challenge, which needs the Resource's private key
• fixture-ps-as-resource-aud/challenge-sfv-token-5 — fed.challenge: not_exercised: re-signs the Resource's challenge, which needs the Resource's private key
• fixture-ps-as-resource-aud/challenge-fed-challenge-6 — fed.challenge: not_exercised: re-signs the Resource's challenge, which needs the Resource's private key
• fixture-ps-as-resource-aud/access-status-9 — fed.as-binding: not_exercised: re-signs the Resource's challenge, which needs the Resource's private key
• fixture-ps-as-resource-aud/access-ps-no-token-10 — fed.as-binding: not_exercised: re-signs the Resource's challenge, which needs the Resource's private key
• fixture-ps-as-resource-aud/access-json-member-11 — fed.as-binding: not_exercised: re-signs the Resource's challenge, which needs the Resource's private key
• fixture-ps-as-resource-jti/initial-status-0 — fed.person-required: not_exercised: re-signs the Resource's challenge, which needs the Resource's private key
• fixture-ps-as-resource-jti/initial-sfv-token-1 — fed.person-required: not_exercised: re-signs the Resource's challenge, which needs the Resource's private key
• fixture-ps-as-resource-jti/challenge-status-4 — fed.challenge: not_exercised: re-signs the Resource's challenge, which needs the Resource's private key
• fixture-ps-as-resource-jti/challenge-sfv-token-5 — fed.challenge: not_exercised: re-signs the Resource's challenge, which needs the Resource's private key
• fixture-ps-as-resource-jti/challenge-fed-challenge-6 — fed.challenge: not_exercised: re-signs the Resource's challenge, which needs the Resource's private key
• fixture-ps-as-resource-jti/access-status-9 — fed.as-binding: not_exercised: re-signs the Resource's challenge, which needs the Resource's private key
• fixture-ps-as-resource-jti/access-ps-no-token-10 — fed.as-binding: not_exercised: re-signs the Resource's challenge, which needs the Resource's private key
• fixture-ps-as-resource-jti/access-json-member-11 — fed.as-binding: not_exercised: re-signs the Resource's challenge, which needs the Resource's private key
• fixture-ps-as-resource-ps/initial-status-0 — fed.person-required: not_exercised: re-signs the Resource's challenge, which needs the Resource's private key
• fixture-ps-as-resource-ps/initial-sfv-token-1 — fed.person-required: not_exercised: re-signs the Resource's challenge, which needs the Resource's private key
• fixture-ps-as-resource-ps/challenge-status-4 — fed.challenge: not_exercised: re-signs the Resource's challenge, which needs the Resource's private key
• fixture-ps-as-resource-ps/challenge-sfv-token-5 — fed.challenge: not_exercised: re-signs the Resource's challenge, which needs the Resource's private key
• fixture-ps-as-resource-ps/challenge-fed-challenge-6 — fed.challenge: not_exercised: re-signs the Resource's challenge, which needs the Resource's private key
• fixture-ps-as-resource-ps/access-status-9 — fed.as-binding: not_exercised: re-signs the Resource's challenge, which needs the Resource's private key
• fixture-ps-as-resource-ps/access-ps-no-token-10 — fed.as-binding: not_exercised: re-signs the Resource's challenge, which needs the Resource's private key
• fixture-ps-as-resource-ps/access-json-member-11 — fed.as-binding: not_exercised: re-signs the Resource's challenge, which needs the Resource's private key
• fixture-ps-as-resource-key/initial-status-0 — fed.person-required: not_exercised: re-signs the Resource's challenge, which needs the Resource's private key
• fixture-ps-as-resource-key/initial-sfv-token-1 — fed.person-required: not_exercised: re-signs the Resource's challenge, which needs the Resource's private key
• fixture-ps-as-resource-key/challenge-status-4 — fed.challenge: not_exercised: re-signs the Resource's challenge, which needs the Resource's private key
• fixture-ps-as-resource-key/challenge-sfv-token-5 — fed.challenge: not_exercised: re-signs the Resource's challenge, which needs the Resource's private key
• fixture-ps-as-resource-key/challenge-fed-challenge-6 — fed.challenge: not_exercised: re-signs the Resource's challenge, which needs the Resource's private key
• fixture-ps-as-resource-key/access-status-9 — fed.as-binding: not_exercised: re-signs the Resource's challenge, which needs the Resource's private key
• fixture-ps-as-resource-key/access-ps-no-token-10 — fed.as-binding: not_exercised: re-signs the Resource's challenge, which needs the Resource's private key
• fixture-ps-as-resource-key/access-json-member-11 — fed.as-binding: not_exercised: re-signs the Resource's challenge, which needs the Resource's private key
• fixture-ps-as-presented-expired/initial-status-0 — fed.person-required: pass
• fixture-ps-as-presented-expired/initial-sfv-token-1 — fed.person-required: pass
• fixture-ps-as-presented-expired/challenge-status-4 — fed.challenge: pass
• fixture-ps-as-presented-expired/challenge-sfv-token-5 — fed.challenge: pass
• fixture-ps-as-presented-expired/challenge-fed-challenge-6 — fed.challenge: pass
• fixture-ps-as-presented-expired/access-status-9 — fed.as-binding: pass
• fixture-ps-as-presented-expired/access-ps-no-token-10 — fed.as-binding: pass
• fixture-ps-as-presented-expired/access-json-member-11 — fed.as-binding: pass
• fixture-ps-as-denial/initial-status-0 — fed.person-required: not_exercised: re-signs the Resource's challenge, which needs the Resource's private key
• fixture-ps-as-denial/initial-sfv-token-1 — fed.person-required: not_exercised: re-signs the Resource's challenge, which needs the Resource's private key
• fixture-ps-as-denial/challenge-status-4 — fed.challenge: not_exercised: re-signs the Resource's challenge, which needs the Resource's private key
• fixture-ps-as-denial/challenge-sfv-token-5 — fed.challenge: not_exercised: re-signs the Resource's challenge, which needs the Resource's private key
• fixture-ps-as-denial/challenge-fed-challenge-6 — fed.challenge: not_exercised: re-signs the Resource's challenge, which needs the Resource's private key
• fixture-ps-as-denial/access-status-9 — fed.application: not_exercised: re-signs the Resource's challenge, which needs the Resource's private key
• fixture-ps-as-denial/access-ps-no-token-10 — fed.application: not_exercised: re-signs the Resource's challenge, which needs the Resource's private key
• fixture-ps-as-denial/access-json-member-11 — fed.application: not_exercised: re-signs the Resource's challenge, which needs the Resource's private key
• budget-four-party-grant/challenge-status — budget.four-party-grant: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-four-party-grant/challenge-budget — budget.four-party-grant: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-four-party-grant/access-budget — budget.four-party-grant: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-four-party-grant/token-status — budget.four-party-grant: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-four-party-grant/token-jwt — fed.delivery: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-four-party-grant/token-budget — budget.four-party-grant: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-four-party-grant/protected-status — budget.hard-cap: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-four-party-grant/protected-subject — fed.application: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-four-party-grant/protected-cost — budget.hard-cap: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-four-party-grant/protected-remaining — budget.hard-cap: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-four-party-omission/challenge-status — budget.four-party-omission: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-four-party-omission/challenge-budget — budget.four-party-omission: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-four-party-omission/access-status — budget.four-party-omission: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-four-party-omission/access-budget — budget.four-party-omission: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-four-party-omission/protected-status — fed.application: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-four-party-omission/protected-subject — fed.application: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-consumption/challenge-budget — budget.four-party-grant: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-consumption/access-budget — budget.four-party-grant: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-consumption/protected-status — budget.hard-cap: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-consumption/protected-cost — budget.hard-cap: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-consumption/protected-remaining — budget.hard-cap: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-consumption/step-up-status — budget.consumption: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-consumption/step-up-budget — budget.consumption: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-consumption/step-up-consumed — budget.consumption: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-consumption/step-up-remaining — budget.hard-cap: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-consumption/other-status — budget.consumption: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-consumption/other-consumed — budget.consumption: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-header/access-budget — budget.four-party-grant: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-header/reserved-status — budget.header: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-header/reserved-remaining — budget.header: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-header/reserved-hold — budget.header: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-header/reserved-no-cost — budget.header: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-header/reserved-trailer-cost — budget.trailer: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-header/reserved-trailer-no-remaining — budget.trailer: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-header/reserved-trailer-no-hold — budget.trailer: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-header/following-remaining — budget.header: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-header/following-hold — budget.header: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-usage/protected-status — budget.usage: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-usage/protected-cost — budget.usage: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-usage/usage-status — budget.usage: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-usage/usage-audience — budget.usage: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-usage/usage-unit — budget.usage: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-usage/usage-decimals — budget.usage: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-usage/usage-all-time — budget.usage: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-usage/unknown-status — budget.usage: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-usage/unknown-omits-usage — budget.usage: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-usage/unknown-unit — budget.usage: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-usage/no-ps-status — budget.usage-request: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-usage/no-ps-error — budget.usage-request: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-usage/two-keys-status — budget.usage-request: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-usage/jkts-status — budget.usage: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-usage/jkts-omitted — budget.usage: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-hard-cap/protected-status — budget.hard-cap: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-hard-cap/protected-cost — budget.hard-cap: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-hard-cap/protected-remaining — budget.hard-cap: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-hard-cap/second-token-status — budget.four-party-grant: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-hard-cap/second-token-budget — budget.four-party-grant: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-hard-cap/second-protected-status — budget.hard-cap: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-hard-cap/second-protected-cost — budget.hard-cap: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-hard-cap/second-protected-remaining — budget.hard-cap: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-hard-cap/refusal-status — budget.hard-cap: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers
• budget-hard-cap/refusal-remaining — budget.hard-cap: not_exercised: uses the launcher's fixed budget paths and X-Fixture cost headers

events.agent-provider report

Suite SHA-256: 33056ca8b0601972c16829eecf57e9d6eda7857fc80670a7a379c8f5f61f9da2

Verifier clock: 1793721145 Unix seconds

Execution: passed.

Pass means only the listed assertions passed, not the entire section. adapter-contract rows specify the test application's response. Remote mode reached the deployed servers over HTTPS; it does not grade TLS, enrollment or discovery security.

Assertion evidence

aauth-go

• events-ap-delivery-with-body/metadata-status — events.ap.metadata: pass
• events-ap-delivery-with-body/event-endpoint — events.ap.metadata: pass
• events-ap-delivery-with-body/subscribe-control — events.ap.control: pass
• events-ap-delivery-with-body/subscribe-token — events.ap.subscribe-token: pass
• events-ap-delivery-with-body/accepted — events.ap.accepted: pass
• events-ap-delivery-without-body/subscribe-token — events.ap.subscribe-token: pass
• events-ap-delivery-without-body/accepted — events.ap.accepted: pass
• events-ap-max-uses/subscribe-token — events.ap.subscribe-token: pass
• events-ap-max-uses/first-accepted — events.ap.accepted: pass
• events-ap-max-uses/first-remaining — events.ap.remaining-uses: not_claimed
• events-ap-max-uses/second-accepted — events.ap.accepted: pass
• events-ap-max-uses/second-remaining — events.ap.remaining-uses: not_claimed
• events-ap-max-uses/third-refused — events.ap.max-uses: not_claimed
• events-ap-max-uses/pending-unchanged — events.ap.unchanged: not_claimed
• events-ap-body-mismatch/status — events.ap.body-s256: pass
• events-ap-body-mismatch/error — events.ap.body-s256: pass
• events-ap-body-mismatch/problem-type — events.ap.problem-type: pass
• events-ap-body-mismatch/pending-unchanged — events.ap.unchanged: not_claimed
• events-ap-body-without-digest/status — events.ap.body-s256: pass
• events-ap-body-without-digest/error — events.ap.body-s256: pass
• events-ap-body-without-digest/problem-type — events.ap.problem-type: pass
• events-ap-digest-without-body/status — events.ap.body-s256: pass
• events-ap-digest-without-body/error — events.ap.body-s256: pass
• events-ap-digest-without-body/problem-type — events.ap.problem-type: pass
• events-ap-cnf/status — events.ap.cnf-absent: pass
• events-ap-cnf/error — events.ap.validation: pass
• events-ap-expired/status — events.ap.validation: pass
• events-ap-expired/error — events.ap.expired-code: pass
• events-ap-expired/problem-type — events.ap.problem-type: pass
• events-ap-wrong-typ/status — events.ap.typ: pass
• events-ap-wrong-typ/error — events.ap.jwt-code: pass
• events-ap-wrong-typ/problem-type — events.ap.problem-type: pass
• events-ap-uncovered-content-digest/status — events.ap.coverage: pass
• events-ap-uncovered-content-digest/error — events.ap.input-code: pass
• events-ap-uncovered-content-digest/problem-type — events.ap.problem-type: pass
• events-ap-uncovered-content-type/status — events.ap.coverage: pass
• events-ap-uncovered-content-type/error — events.ap.input-code: pass
• events-ap-uncovered-content-type/problem-type — events.ap.problem-type: pass
• events-ap-proof-key/status — events.ap.same-key: pass
• events-ap-proof-key/error — events.ap.signature-code: pass
• events-ap-proof-key/problem-type — events.ap.problem-type: pass
• events-ap-unknown-kid/status — events.ap.validation: pass
• events-ap-unknown-kid/error — events.ap.unknown-key: pass
• events-ap-unknown-kid/problem-type — events.ap.problem-type: pass
• events-ap-unknown-eid/subscribe-token — events.ap.subscribe-token: pass
• events-ap-unknown-eid/not-found — events.ap.unknown-eid: pass
• events-ap-other-resource/subscribe-token — events.ap.subscribe-token: pass
• events-ap-other-resource/forbidden — events.ap.resource-match: not_claimed
• events-ap-wrong-aud/status — events.ap.audience: not_claimed
• events-ap-wrong-aud/error — events.ap.audience: not_claimed
• events-ap-wrong-aud/problem-type — events.ap.problem-type: pass
• events-ap-bad-signature/status — events.ap.validation: pass
• events-ap-bad-signature/error — events.ap.jwt-code: pass
• events-ap-bad-signature/problem-type — events.ap.problem-type: pass

events.agent report

Suite SHA-256: 33056ca8b0601972c16829eecf57e9d6eda7857fc80670a7a379c8f5f61f9da2

Verifier clock: 1793721145 Unix seconds

Execution: passed.

Pass means only the listed assertions passed, not the entire section. adapter-contract rows specify the test application's response. Remote mode reached the deployed servers over HTTPS; it does not grade TLS, enrollment or discovery security.

Assertion evidence

aauth-go

• events-agent-valid-body/accepted — events.agent.accepts: pass
• events-agent-valid-no-body/accepted — events.agent.accepts: pass
• events-agent-aud-case/accepted — events.agent.aud: pass
• events-agent-aud-other/accepted — events.agent.aud: pass
• events-agent-expired/accepted — events.agent.exp: pass
• events-agent-body-mismatch/accepted — events.agent.body: pass
• events-agent-body-without-digest/accepted — events.agent.body: pass
• events-agent-digest-without-body/accepted — events.agent.body: pass
• events-agent-wrong-typ/accepted — events.agent.verification: pass
• events-agent-wrong-dwk/accepted — events.agent.verification: pass
• events-agent-bad-signature/accepted — events.agent.verification: pass

events.delivery report

Suite SHA-256: 33056ca8b0601972c16829eecf57e9d6eda7857fc80670a7a379c8f5f61f9da2

Verifier clock: 1793721145 Unix seconds

Execution: passed.

Pass means only the listed assertions passed, not the entire section. adapter-contract rows specify the test application's response. Remote mode reached the deployed servers over HTTPS; it does not grade TLS, enrollment or discovery security.

Assertion evidence

aauth-go

• events-delivery-native-resource/registered — events.delivery.registered: pass
• events-delivery-native-resource/fired-1 — events.delivery.fired: pass
• events-delivery-native-resource/self-jwt-1 — events.delivery.self-jwt: pass
• events-delivery-native-resource/eid-1 — events.delivery.eid: pass
• events-delivery-native-resource/cnf-absent-1 — events.delivery.cnf-absent: pass
• events-delivery-native-resource/body-s256-1 — events.delivery.body-s256: pass
• events-delivery-native-resource/coverage-1 — events.delivery.coverage: pass
• events-delivery-native-resource/proof-1 — events.delivery.proof: pass
• events-delivery-native-resource/fired-2 — events.delivery.fired: pass
• events-delivery-native-resource/self-jwt-2 — events.delivery.self-jwt: pass
• events-delivery-native-resource/eid-2 — events.delivery.eid: pass
• events-delivery-native-resource/cnf-absent-2 — events.delivery.cnf-absent: pass
• events-delivery-native-resource/body-s256-2 — events.delivery.body-s256: pass
• events-delivery-native-resource/coverage-2 — events.delivery.coverage: pass
• events-delivery-native-resource/proof-2 — events.delivery.proof: pass

events.subscription report

Suite SHA-256: 33056ca8b0601972c16829eecf57e9d6eda7857fc80670a7a379c8f5f61f9da2

Verifier clock: 1793721145 Unix seconds

Execution: passed.

Pass means only the listed assertions passed, not the entire section. adapter-contract rows specify the test application's response. Remote mode reached the deployed servers over HTTPS; it does not grade TLS, enrollment or discovery security.

Assertion evidence

aauth-go

• events-sub-valid/registered — events.sub.registered: pass
• events-sub-expired/status — events.sub.exp: pass
• events-sub-expired/error — events.sub.expired-code: pass
• events-sub-expired/problem-type — events.sub.problem-type: pass
• events-sub-wrong-aud/status — events.sub.aud: pass
• events-sub-wrong-aud/error — events.sub.verification: pass
• events-sub-wrong-typ/status — events.sub.typ-dwk: pass
• events-sub-wrong-typ/error — events.sub.jwt-code: pass
• events-sub-wrong-typ/problem-type — events.sub.problem-type: pass
• events-sub-wrong-dwk/status — events.sub.typ-dwk: pass
• events-sub-wrong-dwk/error — events.sub.jwt-code: pass
• events-sub-wrong-dwk/problem-type — events.sub.problem-type: pass
• events-sub-empty-eid/status — events.sub.eid: pass
• events-sub-empty-eid/error — events.sub.verification: pass
• events-sub-cnf-mismatch/status — events.sub.cnf: pass
• events-sub-cnf-mismatch/error — events.sub.signature-code: pass
• events-sub-cnf-mismatch/problem-type — events.sub.problem-type: pass
• events-sub-bad-signature/status — events.sub.verification: pass
• events-sub-bad-signature/error — events.sub.jwt-code: pass
• events-sub-bad-signature/problem-type — events.sub.problem-type: pass
• events-sub-ticket-bound/ticket-issued — events.sub.ticket-issued: pass
• events-sub-ticket-bound/registered — events.sub.ticket-bound: pass
• events-sub-ticket-other-key/ticket-issued — events.sub.ticket-issued: pass
• events-sub-ticket-other-key/refused — events.sub.ticket-bound: pass
• events-sub-ticket-reused/ticket-issued — events.sub.ticket-issued: pass
• events-sub-ticket-reused/first-registered — events.sub.ticket-bound: pass
• events-sub-ticket-reused/refused — events.sub.ticket-single-use: not_claimed

Person Server direct authorization report

Suite SHA-256: 33056ca8b0601972c16829eecf57e9d6eda7857fc80670a7a379c8f5f61f9da2

Verifier clock: 1793721144 Unix seconds

Execution: passed.

Pass means only the listed assertions passed, not the entire section. adapter-contract rows specify the test application's response. Remote mode reached the deployed servers over HTTPS; it does not grade TLS, enrollment or discovery security.

Assertion evidence

aauth-go

• ps-valid/person-status — ps.person-endpoint: pass
• ps-valid/person-signature — ps.common-verification: pass
• ps-valid/person-identity — ps.person-structure: pass
• ps-valid/person-key — ps.person-structure: pass
• ps-valid/person-lifetime — ps.person-lifetime: pass
• ps-valid/person-authorization — ps.person-no-authorization: pass
• ps-valid/auth-status — ps.auth-endpoint: pass
• ps-valid/auth-signature — ps.common-verification: pass
• ps-valid/auth-identity — ps.auth-structure: pass
• ps-valid/auth-key — ps.auth-structure: pass
• ps-valid/auth-lifetime — ps.auth-lifetime: pass
• ps-valid/auth-authorization — ps.host-scope-policy: pass
• ps-valid/configured-person — ps.host-person-profile: pass
• ps-proof-tamper/refusal — ps.proof-verification: pass
• ps-proof-tamper/signature-error — ps.proof-verification: pass
• ps-body-tamper/refusal — ps.body-integrity: pass
• ps-wrong-audience/person-status — ps.person-endpoint: pass
• ps-wrong-audience/person-signature — ps.common-verification: pass
• ps-wrong-audience/person-identity — ps.person-structure: pass
• ps-wrong-audience/person-key — ps.person-structure: pass
• ps-wrong-audience/person-lifetime — ps.person-lifetime: pass
• ps-wrong-audience/person-authorization — ps.person-no-authorization: pass
• ps-wrong-audience/token-refusal — ps.resource-verification: pass
• ps-wrong-audience/token-error — ps.resource-verification: pass
• ps-wrong-audience/configured-person — ps.host-person-profile: pass
• ps-wrong-audience/no-issued-token — ps.resource-verification: pass
• ps-wrong-key/person-status — ps.person-endpoint: pass
• ps-wrong-key/person-signature — ps.common-verification: pass
• ps-wrong-key/person-identity — ps.person-structure: pass
• ps-wrong-key/person-key — ps.person-structure: pass
• ps-wrong-key/person-lifetime — ps.person-lifetime: pass
• ps-wrong-key/person-authorization — ps.person-no-authorization: pass
• ps-wrong-key/token-refusal — ps.resource-verification: pass
• ps-wrong-key/token-error — ps.resource-verification: pass
• ps-wrong-key/configured-person — ps.host-person-profile: pass
• ps-wrong-key/no-issued-token — ps.resource-verification: pass
• ps-wrong-person/person-status — ps.person-endpoint: pass
• ps-wrong-person/person-signature — ps.common-verification: pass
• ps-wrong-person/person-identity — ps.person-structure: pass
• ps-wrong-person/person-key — ps.person-structure: pass
• ps-wrong-person/person-lifetime — ps.person-lifetime: pass
• ps-wrong-person/person-authorization — ps.person-no-authorization: pass
• ps-wrong-person/token-refusal — ps.resource-verification: pass
• ps-wrong-person/token-error — ps.resource-verification: pass
• ps-wrong-person/configured-person — ps.host-person-profile: pass
• ps-wrong-person/no-issued-token — ps.resource-verification: pass
• ps-wrong-lineage/person-status — ps.person-endpoint: pass
• ps-wrong-lineage/person-signature — ps.common-verification: pass
• ps-wrong-lineage/person-identity — ps.person-structure: pass
• ps-wrong-lineage/person-key — ps.person-structure: pass
• ps-wrong-lineage/person-lifetime — ps.person-lifetime: pass
• ps-wrong-lineage/person-authorization — ps.person-no-authorization: pass
• ps-wrong-lineage/token-refusal — ps.resource-verification: pass
• ps-wrong-lineage/token-error — ps.resource-verification: pass
• ps-wrong-lineage/configured-person — ps.host-person-profile: pass
• ps-wrong-lineage/no-issued-token — ps.resource-verification: pass
• ps-wrong-ps/person-status — ps.person-endpoint: pass
• ps-wrong-ps/person-signature — ps.common-verification: pass
• ps-wrong-ps/person-identity — ps.person-structure: pass
• ps-wrong-ps/person-key — ps.person-structure: pass
• ps-wrong-ps/person-lifetime — ps.person-lifetime: pass
• ps-wrong-ps/person-authorization — ps.person-no-authorization: pass
• ps-wrong-ps/token-refusal — ps.resource-verification: pass
• ps-wrong-ps/token-error — ps.resource-verification: pass
• ps-wrong-ps/configured-person — ps.host-person-profile: pass
• ps-wrong-ps/no-issued-token — ps.resource-verification: pass
• ps-expired-resource/person-status — ps.person-endpoint: pass
• ps-expired-resource/person-signature — ps.common-verification: pass
• ps-expired-resource/person-identity — ps.person-structure: pass
• ps-expired-resource/person-key — ps.person-structure: pass
• ps-expired-resource/person-lifetime — ps.person-lifetime: pass
• ps-expired-resource/person-authorization — ps.person-no-authorization: pass
• ps-expired-resource/token-refusal — ps.errors: pass
• ps-expired-resource/token-error — ps.errors: pass
• ps-expired-resource/configured-person — ps.host-person-profile: pass
• ps-expired-resource/no-issued-token — ps.errors: pass
• ps-expired-presented/person-status — ps.person-endpoint: not_exercised: re-signs the Person Server's own token, which needs its private key
• ps-expired-presented/person-signature — ps.common-verification: not_exercised: re-signs the Person Server's own token, which needs its private key
• ps-expired-presented/person-identity — ps.person-structure: not_exercised: re-signs the Person Server's own token, which needs its private key
• ps-expired-presented/person-key — ps.person-structure: not_exercised: re-signs the Person Server's own token, which needs its private key
• ps-expired-presented/person-lifetime — ps.person-lifetime: not_exercised: re-signs the Person Server's own token, which needs its private key
• ps-expired-presented/person-authorization — ps.person-no-authorization: not_exercised: re-signs the Person Server's own token, which needs its private key
• ps-expired-presented/token-refusal — ps.errors: not_exercised: re-signs the Person Server's own token, which needs its private key
• ps-expired-presented/token-error — ps.errors: not_exercised: re-signs the Person Server's own token, which needs its private key
• ps-expired-presented/configured-person — ps.host-person-profile: not_exercised: re-signs the Person Server's own token, which needs its private key
• ps-expired-presented/no-issued-token — ps.errors: not_exercised: re-signs the Person Server's own token, which needs its private key
• ps-denied-scope/person-status — ps.person-endpoint: pass
• ps-denied-scope/person-signature — ps.common-verification: pass
• ps-denied-scope/person-identity — ps.person-structure: pass
• ps-denied-scope/person-key — ps.person-structure: pass
• ps-denied-scope/person-lifetime — ps.person-lifetime: pass
• ps-denied-scope/person-authorization — ps.person-no-authorization: pass
• ps-denied-scope/token-refusal — ps.host-scope-policy: pass
• ps-denied-scope/token-error — ps.host-scope-policy: pass
• ps-denied-scope/configured-person — ps.host-person-profile: pass
• ps-denied-scope/no-issued-token — ps.host-scope-policy: pass
• ps-short-parent/person-status — ps.person-endpoint: pass
• ps-short-parent/person-signature — ps.common-verification: pass
• ps-short-parent/person-identity — ps.person-structure: pass
• ps-short-parent/person-key — ps.person-structure: pass
• ps-short-parent/person-lifetime — ps.person-lifetime: pass
• ps-short-parent/person-authorization — ps.person-no-authorization: pass
• ps-short-parent/auth-status — ps.auth-endpoint: pass
• ps-short-parent/auth-signature — ps.common-verification: pass
• ps-short-parent/auth-identity — ps.auth-structure: pass
• ps-short-parent/auth-key — ps.auth-structure: pass
• ps-short-parent/auth-lifetime — ps.auth-lifetime: pass
• ps-short-parent/auth-authorization — ps.host-scope-policy: pass
• ps-short-parent/configured-person — ps.host-person-profile: pass

r3.federated-issuer report

Suite SHA-256: 33056ca8b0601972c16829eecf57e9d6eda7857fc80670a7a379c8f5f61f9da2

Verifier clock: 1793721145 Unix seconds

Execution: passed.

Pass means only the listed assertions passed, not the entire section. adapter-contract rows specify the test application's response. Remote mode reached the deployed servers over HTTPS; it does not grade TLS, enrollment or discovery security.

Assertion evidence

aauth-go

• r3-federated-class/as-fetched — r3.as.fetch: pass
• r3-federated-class/as-fetch-proof — r3.as.fetch-signature: pass
• r3-federated-class/ps-fetch-proof — r3.as.ps-fetch-signature: pass
• r3-federated-class/auth-token — r3.as.auth-claims: pass
• r3-federated-as-hash-mismatch/as-fetched — r3.as.fetch: pass
• r3-federated-as-hash-mismatch/no-auth-token — r3.as.hash-mismatch: pass
• r3-federated-ps-hash-mismatch/no-auth-token — r3.as.ps-hash-verification: pass

r3.issuer report

Suite SHA-256: 33056ca8b0601972c16829eecf57e9d6eda7857fc80670a7a379c8f5f61f9da2

Verifier clock: 1793721145 Unix seconds

Execution: passed.

Pass means only the listed assertions passed, not the entire section. adapter-contract rows specify the test application's response. Remote mode reached the deployed servers over HTTPS; it does not grade TLS, enrollment or discovery security.

Assertion evidence

aauth-go

• r3-issuer-class/fetched — r3.issuer.fetch: pass
• r3-issuer-class/fetch-proof — r3.issuer.fetch-signature: pass
• r3-issuer-class/auth-token — r3.issuer.auth-claims: pass
• r3-issuer-hash-mismatch/fetched — r3.issuer.fetch: pass
• r3-issuer-hash-mismatch/refused — r3.issuer.hash-mismatch: pass
• r3-issuer-hash-mismatch/no-auth-token — r3.issuer.hash-mismatch: pass
• r3-issuer-document-missing/fetched — r3.issuer.fetch: pass
• r3-issuer-document-missing/no-auth-token — r3.issuer.hash-verification: pass
• r3-issuer-scope-and-r3/auth-token — r3.issuer.auth-claims: pass
• r3-issuer-scope-and-r3/scope — r3.issuer.scope-and-r3: pass

r3.resource report

Suite SHA-256: 33056ca8b0601972c16829eecf57e9d6eda7857fc80670a7a379c8f5f61f9da2

Verifier clock: 1793721145 Unix seconds

Execution: passed.

Pass means only the listed assertions passed, not the entire section. adapter-contract rows specify the test application's response. Remote mode reached the deployed servers over HTTPS; it does not grade TLS, enrollment or discovery security.

Assertion evidence

aauth-go

• r3-resource-class/vocabularies — r3.resource.metadata-vocabularies: pass
• r3-resource-class/resource-token — r3.resource.token-claims: pass
• r3-resource-class/as-fetch-status — r3.resource.content-addressing: pass
• r3-resource-class/as-fetch-digest — r3.resource.content-addressing: pass
• r3-resource-class/as-fetch-fields — r3.resource.document-fields: pass
• r3-resource-class/as-fetch-covers — r3.resource.composition: pass
• r3-resource-class/as-refetch-digest — r3.resource.content-addressing: pass
• r3-resource-class/ps-fetch-digest — r3.resource.content-addressing: pass
• r3-resource-class/granted-served — r3.resource.granted-served: pass
• r3-resource-class/granted-operation — r3.resource.granted-served: pass
• r3-resource-class/ungranted-refused — r3.resource.grant-enforcement: pass
• r3-resource-unsigned-fetch/fetch-unsigned-refused — r3.resource.document-signature: pass
• r3-resource-unsigned-fetch/fetch-unsigned-no-document — r3.resource.document-signature: pass
• r3-resource-unsigned-fetch/fetch-unsigned-status — r3.resource.document-signature-error: pass
• r3-resource-unsigned-fetch/fetch-unsigned-error — r3.resource.document-signature-error: pass
• r3-resource-agent-fetch/fetch-agent-refused — r3.resource.document-signature: pass
• r3-resource-agent-fetch/fetch-agent-no-document — r3.resource.document-signature: pass
• r3-resource-other-signer/fetch-other-refused — r3.resource.document-entitlement: pass
• r3-resource-other-signer/fetch-other-no-document — r3.resource.document-entitlement: pass
• r3-resource-tampered-fetch/fetch-tampered-refused — r3.resource.document-signature: pass
• r3-resource-tampered-fetch/fetch-tampered-no-document — r3.resource.document-signature: pass
• r3-resource-tampered-fetch/fetch-tampered-status — r3.resource.document-signature-error: pass
• r3-resource-tampered-fetch/fetch-tampered-error — r3.resource.document-signature-error: pass
• r3-resource-unknown-operation/refused — r3.resource.operation-validation: pass
• r3-resource-unknown-operation/no-resource-token — r3.resource.operation-validation: pass
• r3-resource-unadvertised-vocabulary/refused — r3.resource.operation-validation: pass
• r3-resource-unadvertised-vocabulary/no-resource-token — r3.resource.operation-validation: pass
• r3-resource-three-party/resource-token — r3.resource.token-claims: pass
• r3-resource-three-party/ps-fetch-digest — r3.resource.content-addressing: pass
• r3-resource-three-party/ps-fetch-fields — r3.resource.document-fields: pass
• r3-resource-three-party/fetch-access-refused — r3.resource.document-entitlement: pass
• r3-resource-three-party/fetch-access-no-document — r3.resource.document-entitlement: pass
• r3-resource-three-party/granted-served — r3.resource.granted-served: pass
• r3-resource-per-call/challenge — r3.resource.per-call-requirement: pass
• r3-resource-per-call/proposal-digest — r3.resource.content-addressing: pass
• r3-resource-per-call/proposal-shape — r3.resource.proposal-fields: pass
• r3-resource-per-call/completed — r3.resource.granted-served: pass
• r3-resource-per-call/completed-operation — r3.resource.granted-served: pass
• r3-resource-per-call/executed-once — r3.resource.per-call-single-use: pass
• r3-resource-per-call-mismatch/challenge — r3.resource.per-call-requirement: pass
• r3-resource-per-call-mismatch/refused — r3.resource.per-call-parameters: pass
• r3-resource-per-call-mismatch/not-executed — r3.resource.per-call-parameters: pass

Resource agent-identity report

Suite SHA-256: 33056ca8b0601972c16829eecf57e9d6eda7857fc80670a7a379c8f5f61f9da2

Verifier clock: 1793721144 Unix seconds

Execution: passed.

Pass means only the listed assertions passed, not the entire section. adapter-contract rows specify the test application's response. Remote mode reached the deployed servers over HTTPS; it does not grade TLS, enrollment or discovery security.

Assertion evidence

aauth-go

• unsigned/status — core.agent-token-required: pass
• unsigned/requirement — core.agent-token-required: pass
• valid/status — core.agent-identity: pass
• valid/subject — core.agent-identity: pass
• tampered/status — core.verification: pass
• tampered/error — key.invalid-signature: pass
• tampered/problem-type — key.response-body: pass
• expired/status — core.verification: pass
• expired/error — key.expired-jwt: pass
• expired/problem-type — key.response-body: pass
• uncovered-signature-key/status — core.verification: pass
• uncovered-signature-key/error — key.invalid-input: pass
• uncovered-signature-key/problem-type — key.response-body: pass
• uncovered-signature-key/required-coverage — core.verification: pass
• future-created/status — core.verification: pass
• future-created/error — key.clock-skew: pass
• future-created/problem-type — key.response-body: pass
• person-required-agent-token/status — core.person-token-required: not_claimed
• person-required-agent-token/requirement — core.person-token-required: not_claimed
• person-required-agent-token/no-parameters — core.person-token-required: not_claimed
• person-required-unsigned/status — core.person-token-required: not_claimed
• person-required-unsigned/requirement — core.person-token-required: not_claimed
• person-required-unsigned/no-parameters — core.person-token-required: not_claimed
• person-required-person-token/status — core.person-token-required: not_claimed
• person-required-person-token/subject — core.person-token-required: not_claimed

sigkey.verifier report

Suite SHA-256: 33056ca8b0601972c16829eecf57e9d6eda7857fc80670a7a379c8f5f61f9da2

Verifier clock: 1793721146 Unix seconds

Execution: passed.

Pass means only the listed assertions passed, not the entire section. adapter-contract rows specify the test application's response. Remote mode reached the deployed servers over HTTPS; it does not grade TLS, enrollment or discovery security.

Assertion evidence

aauth-go

• sigkey-hwk-ed25519/status — sigkey.v.hwk-ed25519: pass
• sigkey-hwk-ed25519/verified-scheme — sigkey.v.echo: pass
• sigkey-hwk-es256/status — sigkey.v.hwk-es256: not_claimed
• sigkey-hwk-es256/verified-scheme — sigkey.v.echo: not_claimed
• sigkey-hwk-es384/status — sigkey.v.hwk-es384: pass
• sigkey-hwk-es384/verified-scheme — sigkey.v.echo: pass
• sigkey-hwk-rs256/status — sigkey.v.hwk-rs256: pass
• sigkey-hwk-rs256/verified-scheme — sigkey.v.echo: pass
• sigkey-hwk-ps256/status — sigkey.v.hwk-ps256: pass
• sigkey-hwk-ps256/verified-scheme — sigkey.v.echo: pass
• sigkey-ap-mixed-jwks/status — sigkey.v.ap-mixed-jwks: pass
• sigkey-ap-pq-only/outcome — sigkey.v.ap-pq-only: pass
• sigkey-jwks-uri/status — sigkey.v.jwks-uri: pass
• sigkey-jwks-uri/verified-scheme — sigkey.v.echo: pass
• sigkey-jwks-uri-mixed/status — sigkey.v.signer-mixed-jwks: pass
• sigkey-jwks-uri-mixed/verified-scheme — sigkey.v.echo: pass
• sigkey-jwks-uri-pq-only/outcome — sigkey.v.signer-pq-only: pass
• sigkey-jwks-uri-unknown-kid/status — sigkey.v.unknown-kid: pass
• sigkey-jwks-uri-unknown-kid/error — sigkey.v.unknown-kid: pass
• sigkey-jwks/status — sigkey.v.jwks: pass
• sigkey-jwks/verified-scheme — sigkey.v.echo: pass
• sigkey-self-jwt/status — sigkey.v.self-jwt: not_claimed
• sigkey-self-jwt/verified-scheme — sigkey.v.echo: not_claimed
• sigkey-jkt-jwt/status — sigkey.v.jkt-jwt: pass
• sigkey-jkt-jwt/verified-scheme — sigkey.v.echo: pass
• sigkey-uncovered-hwk/status — sigkey.v.uncovered-hwk: pass
• sigkey-uncovered-hwk/error — sigkey.v.uncovered-hwk: pass
• sigkey-uncovered-jwks-uri/status — sigkey.v.uncovered-jwks-uri: pass
• sigkey-uncovered-jwks-uri/error — sigkey.v.uncovered-jwks-uri: pass
• sigkey-unknown-scheme/status — sigkey.v.unknown-scheme: pass
• sigkey-unknown-scheme/error — sigkey.v.unknown-scheme: pass
• sigkey-missing-member-jwt/status — sigkey.v.missing-member-jwt: pass
• sigkey-missing-member-jwt/error — sigkey.v.missing-member-jwt: pass
• sigkey-missing-member-hwk/status — sigkey.v.missing-member-hwk: pass
• sigkey-missing-member-hwk/error — sigkey.v.missing-member-hwk: pass
• sigkey-hwk-kid/status — sigkey.v.hwk-kid: pass
• sigkey-hwk-kid/error-present — sigkey.v.hwk-kid: pass
• sigkey-hwk-eddsa/status — sigkey.v.hwk-eddsa: pass
• sigkey-hwk-eddsa/error — sigkey.v.hwk-eddsa: pass
• sigkey-cnf-eddsa/status — sigkey.v.cnf-eddsa: pass
• sigkey-cnf-eddsa/error — sigkey.v.cnf-eddsa: pass
• sigkey-jws-eddsa/status — sigkey.v.jws-eddsa: pass
• sigkey-jws-eddsa/error-present — sigkey.v.jws-eddsa: pass
• sigkey-hwk-kty-mismatch/status — sigkey.v.hwk-kty-mismatch: pass
• sigkey-hwk-kty-mismatch/error — sigkey.v.hwk-kty-mismatch: pass
• sigkey-hwk-crv-mismatch/status — sigkey.v.hwk-crv-mismatch: pass
• sigkey-hwk-crv-mismatch/error — sigkey.v.hwk-crv-mismatch: pass
• sigkey-cnf-kty-mismatch/status — sigkey.v.cnf-kty-mismatch: pass
• sigkey-cnf-kty-mismatch/error-present — sigkey.v.cnf-kty-mismatch: pass
• sigkey-hwk-symmetric/status — sigkey.v.hwk-symmetric: pass
• sigkey-hwk-symmetric/error-present — sigkey.v.hwk-symmetric: pass
• sigkey-cnf-symmetric/status — sigkey.v.cnf-symmetric: pass
• sigkey-cnf-symmetric/error-present — sigkey.v.cnf-symmetric: pass
• sigkey-jwt-no-exp/status — sigkey.v.jwt-exp: pass
• sigkey-jwt-no-exp/error — sigkey.v.jwt-exp: pass
• sigkey-jwt-es256/status — sigkey.v.jwt-es256: not_claimed
• sigkey-jwks-uri-named-document/status — sigkey.v.jwks-uri: pass
• sigkey-jwks-uri-named-document/verified-scheme — sigkey.v.echo: pass

supervision.person-server report

Suite SHA-256: 33056ca8b0601972c16829eecf57e9d6eda7857fc80670a7a379c8f5f61f9da2

Verifier clock: 1793721146 Unix seconds

Execution: passed.

Pass means only the listed assertions passed, not the entire section. adapter-contract rows specify the test application's response. Remote mode reached the deployed servers over HTTPS; it does not grade TLS, enrollment or discovery security.

Assertion evidence

aauth-go

• supervision.ps-allow/status — supervision.ps.decision-applied: pass
• supervision.ps-allow/credential — supervision.ps.decision-applied: pass
• supervision.ps-allow/exp — supervision.ps.allow-exp: pass
• supervision.ps-allow/connect-proof — supervision.ps.core-keying: pass
• supervision.ps-allow/connect-action — supervision.ps.connect-action: pass
• supervision.ps-allow/decision-proof — supervision.ps.body-coverage: pass
• supervision.ps-allow/sdi — supervision.ps.envelope: pass
• supervision.ps-allow/iat — supervision.ps.envelope: pass
• supervision.ps-allow/sub — supervision.ps.envelope: pass
• supervision.ps-allow/agent — supervision.ps.envelope: pass
• supervision.ps-allow/act — supervision.ps.act-members: pass
• supervision.ps-allow/resource — supervision.ps.act-members: pass
• supervision.ps-allow/agent-token — supervision.ps.act-members: pass
• supervision.ps-allow/distinct-sdi — supervision.ps.sdi-unique: pass
• supervision.ps-allow/again — supervision.ps.decision-applied: pass
• supervision.ps-allow/issued-proof — supervision.ps.core-keying: pass
• supervision.ps-allow/issued-id — supervision.ps.event-id: pass
• supervision.ps-auth-token/status — supervision.ps.decision-applied: pass
• supervision.ps-auth-token/credential — supervision.ps.decision-applied: pass
• supervision.ps-auth-token/act — supervision.ps.act-members: pass
• supervision.ps-auth-token/resource-token — supervision.ps.act-members: pass
• supervision.ps-auth-token/presented-token — supervision.ps.act-members: pass
• supervision.ps-auth-token/proof — supervision.ps.body-coverage: pass
• supervision.ps-auth-token/sdi — supervision.ps.envelope: pass
• supervision.ps-deny/refused — supervision.ps.decision-applied: pass
• supervision.ps-deny/no-credential — supervision.ps.decision-applied: pass
• supervision.ps-wrong-sdi/no-credential — supervision.ps.sdi-verify: pass
• supervision.ps-wrong-sdi/to-person — supervision.ps.unavailable: pass
• supervision.ps-wrong-sdi/consulted — supervision.ps.envelope: pass
• supervision.ps-bad-signature/no-credential — supervision.ps.signed-verify: pass
• supervision.ps-bad-signature/to-person — supervision.ps.unavailable: pass
• supervision.ps-bad-signature/consulted — supervision.ps.envelope: pass
• supervision.ps-foreign-signer/no-credential — supervision.ps.signed-verify: pass
• supervision.ps-foreign-signer/to-person — supervision.ps.unavailable: pass
• supervision.ps-foreign-signer/consulted — supervision.ps.envelope: pass
• supervision.ps-unsigned/no-credential — supervision.ps.signed-verify: pass
• supervision.ps-unsigned/to-person — supervision.ps.unavailable: pass
• supervision.ps-unsigned/consulted — supervision.ps.envelope: pass
• supervision.ps-ask/pending — supervision.ps.decision-applied: pass
• supervision.ps-ask/no-credential — supervision.ps.decision-applied: pass
• supervision.ps-ask/completed — supervision.ps.reason-optional: pass
• supervision.ps-ask/answer — supervision.ps.decision-resolved: pass
• supervision.ps-ask/resolved-id — supervision.ps.event-id: pass
• supervision.ps-ask/resolved-proof — supervision.ps.core-keying: pass
• supervision.ps-server-error/pending — supervision.ps.unavailable: pass
• supervision.ps-server-error/no-credential — supervision.ps.unavailable: pass
• supervision.ps-server-error/person-decided — supervision.ps.unavailable: pass
• supervision.ps-server-error/answer — supervision.ps.decision-resolved: pass
• supervision.ps-deferred/pending — supervision.ps.deferred-poll: pass
• supervision.ps-deferred/no-credential — supervision.ps.deferred-poll: pass
• supervision.ps-deferred/poll-proof — supervision.ps.deferred-poll: pass
• supervision.ps-deferred/applied — supervision.ps.decision-applied: pass
• supervision.ps-proposal/status — supervision.ps.decision-applied: pass
• supervision.ps-proposal/mission — supervision.ps.decision-applied: pass
• supervision.ps-proposal/proposal-proof — supervision.ps.body-coverage: pass
• supervision.ps-proposal/proposal-sdi — supervision.ps.envelope: pass
• supervision.ps-proposal/proposal-agent-token — supervision.ps.act-members: pass
• supervision.ps-proposal/approved-action — supervision.ps.mission-action: pass
• supervision.ps-proposal/approved-id — supervision.ps.event-id: pass
• supervision.ps-proposal/approved-mission — supervision.ps.approved-report: pass
• supervision.ps-proposal/approved-proof — supervision.ps.core-keying: pass
• supervision.ps-proposal-no-description/no-mission — supervision.ps.proposal-description: pass
• supervision.ps-proposal-no-description/to-person — supervision.ps.unavailable: pass
• supervision.ps-proposal-no-description/consulted — supervision.ps.envelope: pass

supervision.server report

Suite SHA-256: 33056ca8b0601972c16829eecf57e9d6eda7857fc80670a7a379c8f5f61f9da2

Verifier clock: 1793721146 Unix seconds

Execution: passed.

Pass means only the listed assertions passed, not the entire section. adapter-contract rows specify the test application's response. Remote mode reached the deployed servers over HTTPS; it does not grade TLS, enrollment or discovery security.

Assertion evidence

aauth-go

• supervision.ss-metadata/issuer — supervision.ss.metadata-issuer: pass
• supervision.ss-metadata/endpoints — supervision.ss.metadata-endpoints: pass
• supervision.ss-unsigned/status — supervision.ss.core-verification: pass
• supervision.ss-unsigned/signature-error — supervision.ss.core-verification: pass
• supervision.ss-unsigned/no-decision — supervision.ss.connected-only: pass
• supervision.ss-uncovered-body/status — supervision.ss.core-verification: pass
• supervision.ss-uncovered-body/invalid-input — supervision.ss.core-verification: pass
• supervision.ss-uncovered-body/no-decision — supervision.ss.connected-only: pass
• supervision.ss-unknown-sub/unknown-sub-status — supervision.ss.connected-only: pass
• supervision.ss-unknown-sub/unknown-sub-error — supervision.ss.connected-only: pass
• supervision.ss-unknown-sub/unknown-sub-no-decision — supervision.ss.connected-only: pass
• supervision.ss-refused-person-server/connect-status — supervision.ss.connected-only: pass
• supervision.ss-refused-person-server/connect-error — supervision.ss.connected-only: pass
• supervision.ss-refused-person-server/connect-no-decision — supervision.ss.connected-only: pass
• supervision.ss-refused-person-server/decide-refused — supervision.ss.connected-only: pass
• supervision.ss-refused-person-server/decide-no-decision — supervision.ss.connected-only: pass
• supervision.ss-connect-action/missing-status — supervision.ss.connect-action: pass
• supervision.ss-connect-action/missing-error — supervision.ss.connect-action: pass
• supervision.ss-connect-action/unrecognized-status — supervision.ss.connect-action: pass
• supervision.ss-connect-action/unrecognized-error — supervision.ss.connect-action: pass
• supervision.ss-envelope/no-sdi-status — supervision.ss.envelope: pass
• supervision.ss-envelope/no-sdi-error — supervision.ss.envelope: pass
• supervision.ss-envelope/no-sdi-no-decision — supervision.ss.envelope: pass
• supervision.ss-envelope/no-iat-status — supervision.ss.envelope: pass
• supervision.ss-envelope/no-iat-error — supervision.ss.envelope: pass
• supervision.ss-envelope/no-iat-no-decision — supervision.ss.envelope: pass
• supervision.ss-envelope/no-sub-status — supervision.ss.envelope: pass
• supervision.ss-envelope/no-sub-error — supervision.ss.envelope: pass
• supervision.ss-envelope/no-sub-no-decision — supervision.ss.envelope: pass
• supervision.ss-envelope/no-agent-status — supervision.ss.envelope: pass
• supervision.ss-envelope/no-agent-error — supervision.ss.envelope: pass
• supervision.ss-envelope/no-agent-no-decision — supervision.ss.envelope: pass
• supervision.ss-act-members/person-no-resource-status — supervision.ss.act-members: pass
• supervision.ss-act-members/person-no-resource-error — supervision.ss.act-members: pass
• supervision.ss-act-members/person-no-agent-token-status — supervision.ss.act-members: pass
• supervision.ss-act-members/person-no-agent-token-error — supervision.ss.act-members: pass
• supervision.ss-act-members/auth-no-resource-token-status — supervision.ss.act-members: pass
• supervision.ss-act-members/auth-no-resource-token-error — supervision.ss.act-members: pass
• supervision.ss-act-members/auth-no-presented-token-status — supervision.ss.act-members: pass
• supervision.ss-act-members/auth-no-presented-token-error — supervision.ss.act-members: pass
• supervision.ss-act-members/proposal-no-agent-token-status — supervision.ss.act-members: pass
• supervision.ss-act-members/proposal-no-agent-token-error — supervision.ss.act-members: pass
• supervision.ss-signed-allow/status — supervision.ss.host-policy: pass
• supervision.ss-signed-allow/allowed — supervision.ss.host-policy: pass
• supervision.ss-signed-allow/sdi — supervision.ss.sdi-echo: pass
• supervision.ss-signed-allow/signed — supervision.ss.signed-coverage: pass
• supervision.ss-idempotent/status — supervision.ss.host-policy: pass
• supervision.ss-idempotent/sdi — supervision.ss.sdi-echo: pass
• supervision.ss-idempotent/signed — supervision.ss.signed-coverage: pass
• supervision.ss-idempotent/same — supervision.ss.idempotence: pass
• supervision.ss-deferred/pending — supervision.ss.deferred-pending: pass
• supervision.ss-deferred/again-pending — supervision.ss.idempotence: pass
• supervision.ss-deferred/again-location — supervision.ss.idempotence: pass
• supervision.ss-deferred/other-status — supervision.ss.deferred-poller: pass
• supervision.ss-deferred/other-error — supervision.ss.deferred-poller: pass
• supervision.ss-deferred/other-no-decision — supervision.ss.deferred-poller: pass
• supervision.ss-deferred/early-pending — supervision.ss.deferred-pending: pass
• supervision.ss-deferred/decided — supervision.ss.host-policy: pass
• supervision.ss-deferred/sdi — supervision.ss.sdi-echo: pass
• supervision.ss-deferred/signed — supervision.ss.signed-coverage: pass
• supervision.ss-mission-action/missing-status — supervision.ss.mission-action: pass
• supervision.ss-mission-action/missing-error — supervision.ss.mission-action: pass
• supervision.ss-mission-action/unrecognized-status — supervision.ss.mission-action: pass
• supervision.ss-mission-action/unrecognized-error — supervision.ss.mission-action: pass
• supervision.ss-mission-action/report-no-id-status — supervision.ss.event-id: pass
• supervision.ss-mission-action/report-no-id-error — supervision.ss.event-id: pass
• supervision.ss-event-members/no-id-status — supervision.ss.event-id: pass
• supervision.ss-event-members/no-id-error — supervision.ss.event-id: pass
• supervision.ss-event-members/no-answer-status — supervision.ss.decision-resolved-answer: pass
• supervision.ss-event-members/no-answer-error — supervision.ss.decision-resolved-answer: pass
• supervision.ss-rate-limited/status — supervision.ss.rate-limited: pass
• supervision.ss-rate-limited/error — supervision.ss.rate-limited: pass
• supervision.ss-rate-limited/retry-after — supervision.ss.rate-limited: pass