{
 "all_as_expected": true,
 "control_authorize_reachable": "SAT",
 "invariants": [
  {
   "expected": "UNSAT",
   "invariant": "I1",
   "kind": "inductive",
   "observed": "UNSAT",
   "sensitivity_counterexample": {
    "action_digest": "1",
    "approval_channel": "AGENT_CLAIM",
    "approval_epoch": "0",
    "approved_digest": "0",
    "approved_resource": "0",
    "cap_audience_match": "True",
    "cap_expires": "0",
    "cap_issuer": "VALID",
    "cap_scope_covers": "True",
    "cap_signature": "VALID",
    "cap_subject_match": "True",
    "challenge": "ISSUED",
    "current_epoch": "2",
    "current_policy_version": "1",
    "enforcement_state": "RELEASED",
    "env_trust": "VALID",
    "human_decision": "ABSENT",
    "hvt_expires": "0",
    "hvt_issuer": "VALID",
    "hvt_not_before": "0",
    "hvt_signature": "VALID",
    "m_auth1": "False",
    "m_denied0": "False",
    "m_denied1": "False",
    "m_done0": "False",
    "m_done1": "False",
    "m_exec0": "0",
    "m_exec1": "0",
    "m_exec_digest": "2",
    "m_pdig0": "2",
    "m_pdig1": "1",
    "m_permit0": "NONE",
    "m_permit1": "ISSUED",
    "nonce_match": "True",
    "now": "0",
    "permit_state": "NONE",
    "policy_version": "0",
    "request_epoch": "1",
    "required_aal": "0",
    "resource": "1",
    "revocation": "NOT_REVOKED",
    "solver_status": "TIMEOUT",
    "tenant_match": "True",
    "uncertainty": "1",
    "verifier_aal": "0",
    "verifier_independent": "True",
    "verifier_status": "VALID"
   },
   "sensitivity_dropped_guards": [
    "issue_requires_authorize"
   ],
   "sensitivity_expected": "SAT",
   "sensitivity_observed": "SAT",
   "statement": "no execution without valid authorization"
  },
  {
   "expected": "UNSAT",
   "invariant": "I2",
   "kind": "unreachability",
   "observed": "UNSAT",
   "sensitivity_counterexample": {
    "action_digest": "0",
    "approval_channel": "VERIFIER",
    "approval_epoch": "0",
    "approved_digest": "0",
    "approved_resource": "0",
    "cap_audience_match": "True",
    "cap_expires": "1",
    "cap_issuer": "VALID",
    "cap_scope_covers": "True",
    "cap_signature": "VALID",
    "cap_subject_match": "True",
    "challenge": "ISSUED",
    "current_epoch": "0",
    "current_policy_version": "0",
    "enforcement_state": "BLOCKED",
    "env_trust": "VALID",
    "human_decision": "APPROVE",
    "hvt_expires": "1",
    "hvt_issuer": "VALID",
    "hvt_not_before": "0",
    "hvt_signature": "INVALID",
    "nonce_match": "True",
    "now": "0",
    "permit_state": "NONE",
    "policy_version": "0",
    "request_epoch": "0",
    "required_aal": "0",
    "resource": "0",
    "revocation": "NOT_REVOKED",
    "solver_status": "OK",
    "tenant_match": "True",
    "time_trusted": "True",
    "uncertainty": "0",
    "verifier_aal": "0",
    "verifier_independent": "True",
    "verifier_status": "VALID"
   },
   "sensitivity_dropped_guards": [
    "hvt_signature",
    "hvt_signature_indet"
   ],
   "sensitivity_expected": "SAT",
   "sensitivity_observed": "SAT",
   "statement": "no authorization from an invalid signature"
  },
  {
   "expected": "UNSAT",
   "invariant": "I3",
   "kind": "unreachability",
   "observed": "UNSAT",
   "sensitivity_counterexample": {
    "action_digest": "0",
    "approval_channel": "VERIFIER",
    "approval_epoch": "0",
    "approved_digest": "0",
    "approved_resource": "0",
    "cap_audience_match": "True",
    "cap_expires": "1",
    "cap_issuer": "VALID",
    "cap_scope_covers": "True",
    "cap_signature": "VALID",
    "cap_subject_match": "True",
    "challenge": "ISSUED",
    "current_epoch": "0",
    "current_policy_version": "0",
    "enforcement_state": "BLOCKED",
    "env_trust": "VALID",
    "human_decision": "APPROVE",
    "hvt_expires": "1",
    "hvt_issuer": "INVALID",
    "hvt_not_before": "0",
    "hvt_signature": "VALID",
    "nonce_match": "True",
    "now": "0",
    "permit_state": "NONE",
    "policy_version": "0",
    "request_epoch": "0",
    "required_aal": "0",
    "resource": "0",
    "revocation": "NOT_REVOKED",
    "solver_status": "OK",
    "tenant_match": "True",
    "time_trusted": "True",
    "uncertainty": "0",
    "verifier_aal": "0",
    "verifier_independent": "True",
    "verifier_status": "VALID"
   },
   "sensitivity_dropped_guards": [
    "hvt_issuer",
    "hvt_issuer_indet"
   ],
   "sensitivity_expected": "SAT",
   "sensitivity_observed": "SAT",
   "statement": "no authorization from an untrusted issuer"
  },
  {
   "expected": "UNSAT",
   "invariant": "I4",
   "kind": "unreachability",
   "observed": "UNSAT",
   "sensitivity_counterexample": {
    "action_digest": "0",
    "approval_channel": "VERIFIER",
    "approval_epoch": "0",
    "approved_digest": "0",
    "approved_resource": "0",
    "cap_audience_match": "True",
    "cap_expires": "1",
    "cap_issuer": "VALID",
    "cap_scope_covers": "True",
    "cap_signature": "VALID",
    "cap_subject_match": "True",
    "challenge": "ISSUED",
    "current_epoch": "0",
    "current_policy_version": "0",
    "enforcement_state": "BLOCKED",
    "env_trust": "VALID",
    "human_decision": "APPROVE",
    "hvt_expires": "1",
    "hvt_issuer": "VALID",
    "hvt_not_before": "0",
    "hvt_signature": "VALID",
    "nonce_match": "True",
    "now": "0",
    "permit_state": "NONE",
    "policy_version": "0",
    "request_epoch": "0",
    "required_aal": "0",
    "resource": "0",
    "revocation": "REVOKED",
    "solver_status": "OK",
    "tenant_match": "True",
    "time_trusted": "True",
    "uncertainty": "0",
    "verifier_aal": "0",
    "verifier_independent": "True",
    "verifier_status": "VALID"
   },
   "sensitivity_dropped_guards": [
    "revoked"
   ],
   "sensitivity_expected": "SAT",
   "sensitivity_observed": "SAT",
   "statement": "no authorization from an expired or revoked token"
  },
  {
   "expected": "UNSAT",
   "invariant": "I5",
   "kind": "unreachability",
   "observed": "UNSAT",
   "sensitivity_counterexample": {
    "action_digest": "0",
    "approval_channel": "VERIFIER",
    "approval_epoch": "0",
    "approved_digest": "0",
    "approved_resource": "0",
    "cap_audience_match": "True",
    "cap_expires": "1",
    "cap_issuer": "VALID",
    "cap_scope_covers": "True",
    "cap_signature": "VALID",
    "cap_subject_match": "True",
    "challenge": "CONSUMED",
    "current_epoch": "0",
    "current_policy_version": "0",
    "enforcement_state": "BLOCKED",
    "env_trust": "VALID",
    "human_decision": "APPROVE",
    "hvt_expires": "1",
    "hvt_issuer": "VALID",
    "hvt_not_before": "0",
    "hvt_signature": "VALID",
    "nonce_match": "True",
    "now": "0",
    "permit_state": "NONE",
    "policy_version": "0",
    "request_epoch": "0",
    "required_aal": "0",
    "resource": "0",
    "revocation": "NOT_REVOKED",
    "solver_status": "OK",
    "tenant_match": "True",
    "time_trusted": "True",
    "uncertainty": "0",
    "verifier_aal": "0",
    "verifier_independent": "True",
    "verifier_status": "VALID"
   },
   "sensitivity_dropped_guards": [
    "challenge"
   ],
   "sensitivity_expected": "SAT",
   "sensitivity_observed": "SAT",
   "statement": "no authorization from an invalid or consumed challenge"
  },
  {
   "expected": "UNSAT",
   "invariant": "I6",
   "kind": "unreachability",
   "observed": "UNSAT",
   "sensitivity_counterexample": {
    "action_digest": "0",
    "approval_channel": "VERIFIER",
    "approval_epoch": "0",
    "approved_digest": "0",
    "approved_resource": "0",
    "cap_audience_match": "True",
    "cap_expires": "1",
    "cap_issuer": "VALID",
    "cap_scope_covers": "True",
    "cap_signature": "VALID",
    "cap_subject_match": "True",
    "challenge": "ISSUED",
    "current_epoch": "0",
    "current_policy_version": "0",
    "enforcement_state": "BLOCKED",
    "env_trust": "VALID",
    "human_decision": "ABSENT",
    "hvt_expires": "1",
    "hvt_issuer": "VALID",
    "hvt_not_before": "0",
    "hvt_signature": "VALID",
    "nonce_match": "True",
    "now": "0",
    "permit_state": "NONE",
    "policy_version": "0",
    "request_epoch": "0",
    "required_aal": "0",
    "resource": "0",
    "revocation": "NOT_REVOKED",
    "solver_status": "OK",
    "tenant_match": "True",
    "time_trusted": "True",
    "uncertainty": "0",
    "verifier_aal": "0",
    "verifier_independent": "True",
    "verifier_status": "VALID"
   },
   "sensitivity_dropped_guards": [
    "human_decision"
   ],
   "sensitivity_expected": "SAT",
   "sensitivity_observed": "SAT",
   "statement": "no authorization when human approval is absent"
  },
  {
   "expected": "UNSAT",
   "invariant": "I7",
   "kind": "unreachability",
   "observed": "UNSAT",
   "sensitivity_counterexample": {
    "action_digest": "1",
    "approval_channel": "VERIFIER",
    "approval_epoch": "0",
    "approved_digest": "0",
    "approved_resource": "0",
    "cap_audience_match": "True",
    "cap_expires": "1",
    "cap_issuer": "VALID",
    "cap_scope_covers": "True",
    "cap_signature": "VALID",
    "cap_subject_match": "True",
    "challenge": "ISSUED",
    "current_epoch": "0",
    "current_policy_version": "0",
    "enforcement_state": "BLOCKED",
    "env_trust": "VALID",
    "human_decision": "APPROVE",
    "hvt_expires": "1",
    "hvt_issuer": "VALID",
    "hvt_not_before": "0",
    "hvt_signature": "VALID",
    "nonce_match": "True",
    "now": "0",
    "permit_state": "NONE",
    "policy_version": "0",
    "request_epoch": "0",
    "required_aal": "0",
    "resource": "0",
    "revocation": "NOT_REVOKED",
    "solver_status": "OK",
    "tenant_match": "True",
    "time_trusted": "True",
    "uncertainty": "0",
    "verifier_aal": "0",
    "verifier_independent": "True",
    "verifier_status": "VALID"
   },
   "sensitivity_dropped_guards": [
    "digest"
   ],
   "sensitivity_expected": "SAT",
   "sensitivity_observed": "SAT",
   "statement": "no authorization for a different action digest or resource"
  },
  {
   "expected": "UNSAT",
   "invariant": "I8",
   "kind": "unreachability",
   "observed": "UNSAT",
   "sensitivity_counterexample": {
    "action_digest": "0",
    "approval_channel": "VERIFIER",
    "approval_epoch": "0",
    "approved_digest": "0",
    "approved_resource": "0",
    "cap_audience_match": "True",
    "cap_expires": "1",
    "cap_issuer": "VALID",
    "cap_scope_covers": "False",
    "cap_signature": "VALID",
    "cap_subject_match": "True",
    "challenge": "ISSUED",
    "current_epoch": "0",
    "current_policy_version": "0",
    "enforcement_state": "BLOCKED",
    "env_trust": "VALID",
    "human_decision": "APPROVE",
    "hvt_expires": "1",
    "hvt_issuer": "VALID",
    "hvt_not_before": "0",
    "hvt_signature": "VALID",
    "nonce_match": "True",
    "now": "0",
    "permit_state": "NONE",
    "policy_version": "0",
    "request_epoch": "0",
    "required_aal": "0",
    "resource": "0",
    "revocation": "NOT_REVOKED",
    "solver_status": "OK",
    "tenant_match": "True",
    "time_trusted": "True",
    "uncertainty": "0",
    "verifier_aal": "0",
    "verifier_independent": "True",
    "verifier_status": "VALID"
   },
   "sensitivity_dropped_guards": [
    "cap_scope"
   ],
   "sensitivity_expected": "SAT",
   "sensitivity_observed": "SAT",
   "statement": "no authorization outside capability scope, audience, subject or tenant"
  },
  {
   "expected": "UNSAT",
   "invariant": "I9",
   "kind": "unreachability",
   "observed": "UNSAT",
   "sensitivity_counterexample": {
    "action_digest": "0",
    "approval_channel": "VERIFIER",
    "approval_epoch": "0",
    "approved_digest": "0",
    "approved_resource": "0",
    "cap_audience_match": "True",
    "cap_expires": "1",
    "cap_issuer": "VALID",
    "cap_scope_covers": "True",
    "cap_signature": "VALID",
    "cap_subject_match": "True",
    "challenge": "ISSUED",
    "current_epoch": "0",
    "current_policy_version": "1",
    "enforcement_state": "BLOCKED",
    "env_trust": "VALID",
    "human_decision": "APPROVE",
    "hvt_expires": "1",
    "hvt_issuer": "VALID",
    "hvt_not_before": "0",
    "hvt_signature": "VALID",
    "nonce_match": "True",
    "now": "0",
    "permit_state": "NONE",
    "policy_version": "0",
    "request_epoch": "0",
    "required_aal": "0",
    "resource": "0",
    "revocation": "NOT_REVOKED",
    "solver_status": "OK",
    "tenant_match": "True",
    "time_trusted": "True",
    "uncertainty": "0",
    "verifier_aal": "0",
    "verifier_independent": "True",
    "verifier_status": "VALID"
   },
   "sensitivity_dropped_guards": [
    "policy_version"
   ],
   "sensitivity_expected": "SAT",
   "sensitivity_observed": "SAT",
   "statement": "no authorization when policy version or epoch is stale"
  },
  {
   "expected": "UNSAT",
   "invariant": "I10",
   "kind": "unreachability",
   "observed": "UNSAT",
   "sensitivity_counterexample": {
    "action_digest": "0",
    "approval_channel": "VERIFIER",
    "approval_epoch": "0",
    "approved_digest": "0",
    "approved_resource": "0",
    "cap_audience_match": "True",
    "cap_expires": "1",
    "cap_issuer": "VALID",
    "cap_scope_covers": "True",
    "cap_signature": "VALID",
    "cap_subject_match": "True",
    "challenge": "ISSUED",
    "current_epoch": "0",
    "current_policy_version": "0",
    "enforcement_state": "BLOCKED",
    "env_trust": "VALID",
    "human_decision": "APPROVE",
    "hvt_expires": "1",
    "hvt_issuer": "VALID",
    "hvt_not_before": "0",
    "hvt_signature": "VALID",
    "nonce_match": "True",
    "now": "0",
    "permit_state": "NONE",
    "policy_version": "0",
    "request_epoch": "0",
    "required_aal": "0",
    "resource": "0",
    "revocation": "NOT_REVOKED",
    "solver_status": "TIMEOUT",
    "tenant_match": "True",
    "time_trusted": "True",
    "uncertainty": "0",
    "verifier_aal": "0",
    "verifier_independent": "True",
    "verifier_status": "VALID"
   },
   "sensitivity_dropped_guards": [
    "solver"
   ],
   "sensitivity_expected": "SAT",
   "sensitivity_observed": "SAT",
   "statement": "no authorization when the solver status is UNKNOWN or TIMEOUT"
  },
  {
   "expected": "UNSAT",
   "invariant": "I11",
   "kind": "inductive",
   "observed": "UNSAT",
   "sensitivity_counterexample": {
    "action_digest": "1",
    "approval_channel": "VERIFIER",
    "approval_epoch": "1",
    "approved_digest": "0",
    "approved_resource": "0",
    "cap_audience_match": "True",
    "cap_expires": "0",
    "cap_issuer": "VALID",
    "cap_scope_covers": "True",
    "cap_signature": "VALID",
    "cap_subject_match": "True",
    "challenge": "ISSUED",
    "current_epoch": "1",
    "current_policy_version": "1",
    "enforcement_state": "BLOCKED",
    "env_trust": "VALID",
    "human_decision": "APPROVE",
    "hvt_expires": "0",
    "hvt_issuer": "VALID",
    "hvt_not_before": "0",
    "hvt_signature": "VALID",
    "m_auth0": "False",
    "m_auth1": "False",
    "m_denied0": "True",
    "m_denied1": "True",
    "m_done0": "False",
    "m_done1": "True",
    "m_exec0": "0",
    "m_exec1": "1",
    "m_exec_digest": "2",
    "m_pdig0": "2",
    "m_pdig1": "2",
    "m_permit0": "NONE",
    "m_permit1": "CONSUMED",
    "nonce_match": "True",
    "now": "0",
    "permit_state": "NONE",
    "policy_version": "0",
    "request_epoch": "0",
    "required_aal": "0",
    "resource": "1",
    "revocation": "NOT_REVOKED",
    "solver_status": "OK",
    "tenant_match": "True",
    "uncertainty": "0",
    "verifier_aal": "0",
    "verifier_independent": "True",
    "verifier_status": "VALID"
   },
   "sensitivity_dropped_guards": [
    "consume_requires_issued"
   ],
   "sensitivity_expected": "SAT",
   "sensitivity_observed": "SAT",
   "statement": "no permit reuse after atomic consumption"
  },
  {
   "expected": "UNSAT",
   "invariant": "I12",
   "kind": "unreachability",
   "observed": "UNSAT",
   "sensitivity_counterexample": {
    "action_digest": "0",
    "approval_channel": "VERIFIER",
    "approval_epoch": "0",
    "approved_digest": "0",
    "approved_resource": "0",
    "cap_audience_match": "True",
    "cap_expires": "1",
    "cap_issuer": "VALID",
    "cap_scope_covers": "True",
    "cap_signature": "VALID",
    "cap_subject_match": "True",
    "challenge": "ISSUED",
    "current_epoch": "0",
    "current_policy_version": "0",
    "enforcement_state": "BLOCKED",
    "env_trust": "INVALID",
    "human_decision": "APPROVE",
    "hvt_expires": "1",
    "hvt_issuer": "VALID",
    "hvt_not_before": "0",
    "hvt_signature": "VALID",
    "nonce_match": "True",
    "now": "0",
    "permit_state": "NONE",
    "policy_version": "0",
    "request_epoch": "0",
    "required_aal": "0",
    "resource": "0",
    "revocation": "NOT_REVOKED",
    "solver_status": "OK",
    "tenant_match": "True",
    "time_trusted": "True",
    "uncertainty": "0",
    "verifier_aal": "0",
    "verifier_independent": "True",
    "verifier_status": "VALID"
   },
   "sensitivity_dropped_guards": [
    "env",
    "env_trust_indet"
   ],
   "sensitivity_expected": "SAT",
   "sensitivity_observed": "SAT",
   "statement": "no authorization when a required environmental trust condition fails"
  },
  {
   "expected": "UNSAT",
   "invariant": "I13",
   "kind": "unreachability",
   "observed": "UNSAT",
   "sensitivity_counterexample": {
    "action_digest": "0",
    "approval_channel": "VERIFIER",
    "approval_epoch": "0",
    "approved_digest": "0",
    "approved_resource": "0",
    "cap_audience_match": "True",
    "cap_expires": "0",
    "cap_issuer": "VALID",
    "cap_scope_covers": "True",
    "cap_signature": "VALID",
    "cap_subject_match": "True",
    "challenge": "ISSUED",
    "current_epoch": "0",
    "current_policy_version": "0",
    "enforcement_state": "BLOCKED",
    "env_trust": "VALID",
    "human_decision": "APPROVE",
    "hvt_expires": "0",
    "hvt_issuer": "VALID",
    "hvt_not_before": "0",
    "hvt_signature": "VALID",
    "nonce_match": "True",
    "now": "0",
    "permit_state": "NONE",
    "policy_version": "0",
    "request_epoch": "0",
    "required_aal": "0",
    "resource": "0",
    "revocation": "NOT_REVOKED",
    "solver_status": "OK",
    "tenant_match": "True",
    "time_trusted": "False",
    "uncertainty": "0",
    "verifier_aal": "0",
    "verifier_independent": "True",
    "verifier_status": "VALID"
   },
   "sensitivity_dropped_guards": [
    "time_untrusted"
   ],
   "sensitivity_expected": "SAT",
   "sensitivity_observed": "SAT",
   "statement": "no authorization when identity, time or provenance evidence is indeterminate"
  },
  {
   "expected": "UNSAT",
   "invariant": "I14",
   "kind": "unreachability",
   "observed": "UNSAT",
   "sensitivity_counterexample": {
    "action_digest": "0",
    "approval_channel": "AGENT_CLAIM",
    "approval_epoch": "0",
    "approved_digest": "0",
    "approved_resource": "0",
    "cap_audience_match": "True",
    "cap_expires": "1",
    "cap_issuer": "VALID",
    "cap_scope_covers": "True",
    "cap_signature": "VALID",
    "cap_subject_match": "True",
    "challenge": "ISSUED",
    "current_epoch": "0",
    "current_policy_version": "0",
    "enforcement_state": "BLOCKED",
    "env_trust": "VALID",
    "human_decision": "APPROVE",
    "hvt_expires": "1",
    "hvt_issuer": "VALID",
    "hvt_not_before": "0",
    "hvt_signature": "VALID",
    "nonce_match": "True",
    "now": "0",
    "permit_state": "NONE",
    "policy_version": "0",
    "request_epoch": "0",
    "required_aal": "0",
    "resource": "0",
    "revocation": "NOT_REVOKED",
    "solver_status": "OK",
    "tenant_match": "True",
    "time_trusted": "True",
    "uncertainty": "0",
    "verifier_aal": "0",
    "verifier_independent": "True",
    "verifier_status": "VALID"
   },
   "sensitivity_dropped_guards": [
    "approval_channel"
   ],
   "sensitivity_expected": "SAT",
   "sensitivity_observed": "SAT",
   "statement": "no authorization from an agent-supplied claim of approval"
  },
  {
   "expected": "UNSAT",
   "invariant": "I15",
   "kind": "inductive",
   "observed": "UNSAT",
   "sensitivity_counterexample": {
    "action_digest": "1",
    "approval_channel": "VERIFIER",
    "approval_epoch": "1",
    "approved_digest": "0",
    "approved_resource": "0",
    "cap_audience_match": "True",
    "cap_expires": "0",
    "cap_issuer": "VALID",
    "cap_scope_covers": "True",
    "cap_signature": "VALID",
    "cap_subject_match": "True",
    "challenge": "ISSUED",
    "current_epoch": "1",
    "current_policy_version": "1",
    "enforcement_state": "RELEASED",
    "env_trust": "VALID",
    "human_decision": "APPROVE",
    "hvt_expires": "0",
    "hvt_issuer": "VALID",
    "hvt_not_before": "0",
    "hvt_signature": "VALID",
    "m_auth0": "False",
    "m_auth1": "False",
    "m_denied0": "True",
    "m_denied1": "True",
    "m_done0": "False",
    "m_done1": "True",
    "m_exec0": "0",
    "m_exec1": "1",
    "m_exec_digest": "2",
    "m_pdig0": "2",
    "m_pdig1": "2",
    "m_permit0": "NONE",
    "m_permit1": "CONSUMED",
    "nonce_match": "True",
    "now": "0",
    "permit_state": "NONE",
    "policy_version": "0",
    "request_epoch": "0",
    "required_aal": "0",
    "resource": "1",
    "revocation": "NOT_REVOKED",
    "solver_status": "OK",
    "tenant_match": "True",
    "uncertainty": "0",
    "verifier_aal": "0",
    "verifier_independent": "True",
    "verifier_status": "VALID"
   },
   "sensitivity_dropped_guards": [
    "deny_requires_no_permit",
    "consume_requires_issued"
   ],
   "sensitivity_expected": "SAT",
   "sensitivity_observed": "SAT",
   "statement": "no conflicting terminal outcomes for one single-use request"
  }
 ],
 "schema": "ihvrk.solver.proofs/1",
 "z3_version": "5.1.0"
}