{
  "product": "Boan Zhiyu security core",
  "version": "0.1.0",
  "evidenceLevel": "Phase 1.2 E1 local engineering verification",
  "verifiedAt": "2026-09-01",
  "scope": "Frozen point-in-time portable Node.js component source, offline aggregate network-incident triage, and harmless automated test fixtures",
  "snapshotStatus": {
    "frozenPointInTime": true,
    "representsCurrentSourceTree": false,
    "subsequentWorkOutsideDigest": "The legal-consent gate and its tests were added after this Phase 1.2 E1 snapshot."
  },
  "sourceEvidenceDigest": {
    "algorithm": "SHA-256",
    "fileSet": "All regular files recursively under scripts/, src/, and test/ at the frozen Phase 1.2 E1 snapshot time",
    "ordering": "Relative POSIX paths sorted by raw UTF-8 bytes",
    "recordFormat": "<lowercase file SHA-256><two ASCII spaces><relative POSIX path><LF>",
    "method": "Concatenate one record per file, including the final LF, encode as UTF-8, then compute SHA-256 over the complete record stream.",
    "fileCount": 78,
    "value": "f86d40ee5f0bf12b497ee5e5d0fc1420bd9bf948ef81b52bcaf0d82fb1e856e8"
  },
  "verificationReport": {
    "relativePath": "docs/VERIFICATION_REPORT_NETWORK_INCIDENT_TRIAGE_2026-09-01.md",
    "algorithm": "SHA-256",
    "digest": "40321a561d2f5f2c8932d9010544b22432ebeb40667c77a31d8fdc4fda60ac3d"
  },
  "releaseGate": {
    "tests": 372,
    "passed": 370,
    "failed": 0,
    "skippedPlatformConditional": 2,
    "build": "passed",
    "typecheck": "passed",
    "featureRegistryValidation": "passed"
  },
  "parserRobustnessGate": {
    "tests": 5,
    "passed": 5,
    "failed": 0,
    "mode": "fixed-seed offline bounded fuzz and property verification"
  },
  "sourceCoverage": {
    "linesPercent": 91.22,
    "branchesPercent": 78.42,
    "functionsPercent": 95.29
  },
  "featureRegistry": {
    "features": 111,
    "platformCells": 450,
    "structuralErrors": 0,
    "caveat": "The registry includes implemented, partial, planned, research, and not-feasible entries; its total is not an implemented-feature count."
  },
  "networkTriageBoundary": {
    "mode": "offline aggregate-fact triage",
    "networkIdentifiersAccepted": false,
    "connectionsRead": false,
    "packetContentRead": false,
    "networkAccessInitiated": false,
    "networkProbes": 0,
    "packetCaptures": 0,
    "intrusionProven": false,
    "malwareProven": false,
    "actionsTaken": 0,
    "networkChanges": 0,
    "realTimeFirewallOrIdsIps": false,
    "automaticBlocking": false,
    "alwaysOnProtection": false
  },
  "dependencyAudit": {
    "tool": "npm audit",
    "knownVulnerabilitiesInCurrentLockfile": 0,
    "caveat": "A point-in-time dependency snapshot, not a guarantee that vulnerabilities do not exist or will never be discovered."
  },
  "certificationStatus": {
    "thirdPartyProductCertifications": [],
    "independentLabTests": [],
    "officialMarksAuthorized": []
  },
  "notEvidenceOf": [
    "a production endpoint security product",
    "real-device protection effectiveness",
    "real-time firewall, IDS/IPS, automatic blocking, or 24/7 network protection",
    "real-malware detection rate",
    "false-positive rate",
    "sustained resource usage",
    "third-party certification or endorsement"
  ]
}