{
  "artifact": "BLADE-AGENT-HSM Emulator",
  "version": "2.6",
  "variant": "adversarial high-assurance research emulator",
  "generatedAt": "2026-05-20T05:00:00.000Z",
  "environment": { "node": "v22.x", "runtime": "Node.js + Web Crypto", "os": "Linux" },
  "reproduce": "cd tests && for t in test-harness.mjs test-harness-v25.mjs test-embedded-v25.mjs test-redteam.mjs test-redteam-embedded.mjs test-v26-embedded.mjs test-pinning.mjs; do node $t; done",
  "summary": { "total": 275, "passed": 275, "failed": 0, "skipped": 0, "deterministic": true, "rerunsConfirmed": 3 },
  "suites": [
    { "name": "round-1-2-standalone",      "file": "tests/test-harness.mjs",          "total": 105, "passed": 105, "failed": 0 },
    { "name": "round-3-adversarial",       "file": "tests/test-harness-v25.mjs",      "total": 106, "passed": 106, "failed": 0 },
    { "name": "embedded-core-in-html",     "file": "tests/test-embedded-v25.mjs",     "total": 15,  "passed": 15,  "failed": 0 },
    { "name": "red-team-logic",            "file": "tests/test-redteam.mjs",          "total": 15,  "passed": 15,  "failed": 0 },
    { "name": "red-team-embedded-in-html", "file": "tests/test-redteam-embedded.mjs", "total": 11,  "passed": 11,  "failed": 0 },
    { "name": "v26-defect-fixes-embedded", "file": "tests/test-v26-embedded.mjs",     "total": 10,  "passed": 10,  "failed": 0 },
    { "name": "trust-root-pinning",        "file": "tests/test-pinning.mjs",          "total": 13,  "passed": 13,  "failed": 0 }
  ],
  "criticalFindingsClosed": {
    "F-9":  "Verify button calls real verifyTrace (not a line-counter)",
    "F-22": "i2cBusStuck / tpmCrcFail fault knobs enforced",
    "F-10": "verifyTrace verifies ECDSA P-256 signature on every audit entry; forged sigHex fails",
    "F-12": "tamper records true origin tier (fromTier captured before T0 seal)",
    "F-42": "P-384 signed anchor over {eventCount, finalPcrHexes, traceSha256}; truncation fails",
    "Residual-1": "audit signatures verified against the trace-embedded signing key, not the live instance key (foreign traces verify correctly)",
    "Residual-2": "attestation identity is pinned out-of-band; an attacker who re-keys the anchor with their own keypair is rejected (ATTESTATION_IDENTITY_MISMATCH)"
  },
  "trustModel": {
    "adversarial-forgery-resistant": "anchor present, identity pinned and matched, anchor signature valid, count/sha matched, trace-keyed audit signatures valid",
    "integrity-and-same-session": "anchor present but no out-of-band pin; detects accidental corruption and same-session tampering only",
    "pcr-chain-only": "no anchor supplied"
  },
  "assuranceBoundary": [
    "Browser-local emulator; not certified hardware",
    "No NSA/NASA/DoD/FIPS/EAL endorsement claimed",
    "Web Crypto API software cryptographic substrate",
    "Silicon timing modeled, not physically measured",
    "PQC/ML-DSA is an interface model; real ML-DSA not bundled",
    "Radiation/EW/Byzantine behavior is scenario modeling, not lab validation"
  ]
}