verification.json

{
  "timestamp_utc": "2026-10-05T18:20:43.149341+00:00",
  "scope": "Direct production checks plus user-supplied ChatGPT development-connection evidence; packaged plugin host tests Blocked.",
  "results": [
    {
      "tool": "architecture_list",
      "arguments": {},
      "error": "HTTP Error 403: Forbidden"
    },
    {
      "tool": "architecture_inspect",
      "arguments": {
        "component": "public_mcp"
      },
      "error": "HTTP Error 403: Forbidden"
    },
    {
      "tool": "architecture_inspect",
      "arguments": {
        "component": "authorization_boundary"
      },
      "error": "HTTP Error 403: Forbidden"
    }
  ],
  "follow_up_timestamp_utc": "2026-10-05T18:51:51.705015+00:00",
  "follow_up_inspections": [
    {
      "component": "public_mcp",
      "response": {
        "jsonrpc": "2.0",
        "id": "public_mcp",
        "result": {
          "content": [
            {
              "type": "text",
              "text": "TRELAB Public MCP: Public read-only interface for bounded TRELAB capabilities."
            }
          ],
          "structuredContent": {
            "id": "public_mcp",
            "name": "TRELAB Public MCP",
            "summary": "Public read-only interface for bounded TRELAB capabilities.",
            "authority": "The interface itself grants no execution authority."
          }
        }
      }
    },
    {
      "component": "authorization_boundary",
      "response": {
        "jsonrpc": "2.0",
        "id": "authorization_boundary",
        "result": {
          "content": [
            {
              "type": "text",
              "text": "Authorization Boundary: Separates public discovery from private TRELAB execution infrastructure."
            }
          ],
          "structuredContent": {
            "id": "authorization_boundary",
            "name": "Authorization Boundary",
            "summary": "Separates public discovery from private TRELAB execution infrastructure.",
            "authority": "Public MCP requests cannot widen authorization or invoke private execution capabilities."
          }
        }
      }
    }
  ],
  "follow_up_architecture_list": {
    "status": "Passed",
    "evidence": "Production curl tools/call returned public_mcp and authorization_boundary in prior preparation turn."
  },
  "public_pages": [
    {
      "url": "https://trematria.com",
      "status": "Passed",
      "verification": "Fetched publicly over HTTPS with certificate validation and inspected content.",
      "content_sha256": "3dcf898f9b9fe83be2ff04ee4f671e07a87ddb96d23c9ca4142701f906c4f0e3"
    },
    {
      "url": "https://trematria.com/support",
      "status": "Passed",
      "verification": "Fetched publicly over HTTPS with certificate validation and inspected content.",
      "content_sha256": "4b2c4e6a4cd44cdd48a2b0aa9ded021ee5d64797c2b98b12ac1f1b0040f6debb"
    },
    {
      "url": "https://trematria.com/privacy",
      "status": "Passed",
      "verification": "Fetched publicly over HTTPS with certificate validation and inspected content.",
      "content_sha256": "f4e978a8676b5d759da364765a3e175e7a4250c00849e090e0606a306d7212e7"
    },
    {
      "url": "https://trematria.com/terms",
      "status": "Passed",
      "verification": "Fetched publicly over HTTPS with certificate validation and inspected content.",
      "content_sha256": "719172363145eab134fece18e2d5347257d19dcc672ff2060f6a0b264f376054"
    }
  ],
  "interpretation": "Development outputs substantiate bounded public behavior; they do not verify saved submission connection or private TAG enforcement. All eight exact saved-version review cases remain pending.",
  "development_evidence": {
    "document": "evidence/TRELAB_Public_MCP_Test_Evidence.docx",
    "observed_tests": 7,
    "coverage": "Status, architecture list, both component inspections and three capability refusal scenarios. These are development-connection observations, not exact saved submission case passes.",
    "demo_url": "https://drive.google.com/file/d/1pjhryNZ_Ylobp2QaHHwmdnrnmQas7_80/view",
    "demo_access": "Public page fetched HTTP 200; user confirmed unauthenticated incognito video playback on 2026-10-06 Australia/Sydney.",
    "recording_duration_seconds": 76.85805,
    "recording_sha256": "4c37081838f09020af3b60e9c234d314c9d0a8d13d9eb7c739d5cbb04e93fba6"
  },
  "package_host_validation": {
    "status": "Blocked",
    "evidence": "Saved private v0.1.3 manifest and generated MCP config both point to intended production endpoint. Android @ selector shows only separate TRELAB Public MCP development connection. No exact-package tool call verified.",
    "cause": "Unresolved; available source metadata does not expose runtime registration state."
  },
  "portal_observations": {
    "source": "User-supplied screenshots on 2026-10-06 Australia/Sydney",
    "v0.1.4": "Draft uploaded; domain verified; MCP configured; exactly trelab_status, architecture_list, architecture_inspect discovered; latest MCP scan reports no issues.",
    "metadata_finding": "Other category could not be confirmed. v0.1.5 explicitly sets Developer Tools.",
    "remaining": "New metadata scan, imported review details, saved-version test cases and human attestations."
  }
}