{
  "schema": "helixforge.browser-authentication-source.v1",
  "observed_at": "2026-09-10T19:20:43.362423+00:00",
  "status": "passed",
  "implementation_base": "4e103f62a0e68d9a273c0abec76ee6ab35db2531",
  "contracts": {
    "key-cape": "f9812ab3b2bfe8f0817185f44071e612264ec3ee",
    "approval-engine": "2fdb01d42aa721f3b44f46abe018e53a7813e916"
  },
  "validation": {
    "tests_passed": 206,
    "tests_failed": 0,
    "tests_skipped": 0,
    "existing_tests": 100,
    "real_engine_component_tests": 3,
    "command": "INFD_APPROVAL_ENGINE_SOURCE=/home/worsch/approval-engine /tmp/hfact-browser-20260910/.venv/bin/python -m pytest -q",
    "identity_evidence": "locally signed synthetic fixture, validated by login and actual Approval Engine JWT verifier; not a native KeyCape human login",
    "local_http_smoke": {
      "status": "passed",
      "checks": {
        "installed_entrypoint_health": true,
        "fixed_issuer_authorization_redirect": true,
        "exact_registered_callback_and_scopes": true,
        "pkce_s256_and_browser_cookie": true,
        "incomplete_approval_path_not_ready": true,
        "binding_route_unavailable": true
      },
      "issuer_contacted": false,
      "native_human_login": false,
      "model_calls": 0
    }
  },
  "source_sha256": {
    "informed_decision/approval_http.py": "14187ab81f0ce2d9d61ec548ff4da8563d7d1d6084f3d91dddfba9cc90d1864d",
    "informed_decision/http_transport.py": "d861f9cea798af7afeffb78b93b353ade0037b4536cf44b6e71ef7d6dc794940",
    "informed_decision/oidc.py": "f68d0145e0eb08e46fbbaeaf21b34bfaf51b4fdddc247e46d57c20a19f692134",
    "informed_decision/web.py": "c4eb8f828e38437aec305796adf30b947207a2d34b2e5fc9c63ed9d5eff99729",
    "informed_decision/provenance.py": "de02c6bf162865ba9619d74cfd68dd0a5d7f81e6c9e427f67f848cb2c2214f83",
    "pyproject.toml": "8e8e008035077e409c883fb1198387b24c4c63b37a3d695c8740a237cd3258d9",
    "tests/test_approval_component.py": "eea6cd523b81fb99478b72666a50ea46d5c031b7459241e0522a2606534ecbbc",
    "tests/test_approval_http.py": "81bdd8aaa0c039d6e9c37ba030a87956adf132fa2391882f18120f8ec578b4fd",
    "tests/test_browser_auth.py": "01f4088968eea87c58ac0b30806111f1367349e6eaf55f1d3c59499e6c68b590",
    "tests/test_http_transport.py": "314f7210748a548adebedb7c63cbc9b2b5790db00c082ef1fff2664e871e350e",
    "tools/smoke_browser_shell.py": "373524286e0bd475b6c6afa974f1836f0f12a39b041e8b4682c42bdd91ebc56d"
  },
  "native_human_login_proven": false,
  "browser_approval_route_available": false,
  "deployed": false,
  "factory_attempts": 0,
  "paid_model_calls": 0,
  "remaining_owner_record": "INFD-WP-0001-T08",
  "remaining": [
    "durable presentation/disposition plus transactional evidence outbox",
    "entitlement before render and actor/version/ack guards in browser path",
    "independent audit custody/delivery and duplicate/ambiguous entry reconciliation",
    "native client registration/login and deployed Approval Engine proof"
  ]
}