{
 "schema": "ihvrk.release_gate/1",
 "policy": "release is BLOCKED if any gate is BLOCKED or FAIL; gates are never lowered to make the result pass",
 "gates": [
  {"id": "G1", "blocks_when": "forbidden execution state reachable in a required formal model", "result": "PASS", "evidence": ["z3_proofs.json", "tlc_summary.json"]},
  {"id": "G2", "blocks_when": "required safety invariant fails", "result": "PASS", "evidence": ["z3_proofs.json", "tlc_summary.json"]},
  {"id": "G3", "blocks_when": "critical authorization or replay test fails", "result": "PASS", "evidence": ["test_results.json"]},
  {"id": "G4", "blocks_when": "invalid approval produces a permit", "result": "PASS", "evidence": ["test_results.json"]},
  {"id": "G5", "blocks_when": "unresolved solver result grants permission", "result": "PASS", "evidence": ["test_results.json", "z3_proofs.json"]},
  {"id": "G6", "blocks_when": "protected action executes without a valid action-bound permit", "result": "PASS", "scope_note": "within declared scope; assumes A-PATH", "evidence": ["test_results.json"]},
  {"id": "G7", "blocks_when": "critical ledger-integrity test fails", "result": "PASS", "evidence": ["test_results.json", "sample_ledger/"]},
  {"id": "G8", "blocks_when": "required runtime enforcement control missing", "result": "BLOCKED", "reason": "eBPF LSM not attachable on host (bpf not in active LSM list); user-space map daemon not written", "evidence": ["ebpf_verifier_load.txt"]},
  {"id": "G9", "blocks_when": "known critical defect lacks a disposition", "result": "PASS", "evidence": ["../FINDINGS.md"]},
  {"id": "G10", "blocks_when": "artifact cannot be linked to tested source revision", "result": "PASS", "evidence": ["MANIFEST.json"]},
  {"id": "G11", "blocks_when": "required evidence missing or unverifiable", "result": "PASS", "evidence": ["verify_ihvrk_evidence.py"]},
  {"id": "G12", "blocks_when": "deployment violates a mandatory trust assumption", "result": "BLOCKED", "reason": "not integrated into any live CAIN path (L-INTEG); service keys are SOFTWARE_TEST (L-HSM)"}
 ],
 "verdict_full_scope": "RELEASE_GATE_BLOCKED",
 "verdict_library_scope": "RELEASE_CANDIDATE_WITH_OPEN_FINDINGS",
 "open_findings": ["L-DOS", "L-INDEP"]
}