{
  "_what_this_is": "the verification walk's expected answers, as of the scenario date \u2014 the acceptance test for anyone implementing a verifier against this registry",
  "as_of": "2026-08-25T12:00:00Z",
  "cases": [
    {
      "because": "valid mandate, accepted, issuer is a root",
      "capability": "repo.pull-request.create",
      "expected": "YES",
      "subject": "sha256:df2bb4d93af69e6a",
      "subject_label": "fixture-agent-a \u2014 valid, accepted mandate"
    },
    {
      "because": "mandate revoked, effective 2026-08-20",
      "capability": "repo.contents.write",
      "expected": "NO",
      "subject": "sha256:1ccafd8f3f8906c4",
      "subject_label": "fixture-agent-b \u2014 mandate revoked by issuer"
    },
    {
      "because": "mandate expired 2026-08-01",
      "capability": "repo.pull-request.create",
      "expected": "NO",
      "subject": "sha256:f32e7a1da4e098e0",
      "subject_label": "fixture-agent-c \u2014 mandate expired"
    },
    {
      "because": "mandate issued, never accepted \u2014 inert",
      "capability": "repo.pull-request.create",
      "expected": "NO",
      "subject": "sha256:b3ffc1f05803720b",
      "subject_label": "fixture-agent-d \u2014 mandate issued, never accepted"
    },
    {
      "because": "subject identity revoked, effective 2026-08-24",
      "capability": "repo.pull-request.create",
      "expected": "NO",
      "subject": "sha256:1d7edf604b98bcf2",
      "subject_label": "fixture-agent-e \u2014 identity self-revoked"
    },
    {
      "because": "the role holds a valid accepted mandate \u2014 and anyone holding the published key can exercise it, which is the lesson",
      "capability": "repo.pull-request.create",
      "expected": "YES",
      "subject": "sha256:878bb98be58abc56",
      "subject_label": "role: site-agent"
    }
  ]
}