{
  "certificate": {
    "certificate_type": "phase0",
    "control_integrity": {
      "checked": true,
      "clean": true,
      "findings": []
    },
    "detail": "full",
    "detection": {
      "atoms": [],
      "bound": null,
      "computed": true,
      "dependent": false,
      "uncalibrated": []
    },
    "encoding_check": {
      "definitions": 52,
      "equations": 94,
      "held": true,
      "means": "The CNF the oracle refuted decodes back to the equations above: every auxiliary stands for the product it claims, and every clause is one of these equations with its auxiliaries substituted. What remains unchecked is the refutation itself, not the translation."
    },
    "final_step": {
      "instruction": "0 = 1 was asserted directly by this row rather than derived, so there is no operation to replay.",
      "op": "INSERT",
      "oracle": true,
      "source": "cryptominisat-phase0"
    },
    "format_version": 1,
    "note": "The contradiction was asserted by an external decision procedure, so it cannot be re-derived from the operations below. The listed prefix is still replayable.",
    "operations": [],
    "oracle_dependencies": [
      "cryptominisat-phase0"
    ],
    "origin_class": "external_oracle",
    "policy": {
      "file": "policy.co",
      "parse_diagnostics": 0,
      "sha256": "470bfaea5ca9297edde3c6f9dd1287ac090b0db94091edd9bf067c4d63c22ec5",
      "unroll_depth": []
    },
    "provenance": {
      "controls": {},
      "declared": false,
      "limits": [
        "The declaration may be false: nothing here verifies that the system named as asserting a control is that system. It is bounded by custody, not proof: the source manifest is a reviewed artefact bound to a policy digest and carried on this certificate with its own hash, so a false declaration is a signed and attributable statement rather than an assumption.",
        "A resolver may launder an argument into a reading: returning a value taken from the model's arguments is the one thing a resolver cannot be checked for in general. It is bounded by the argument-invariance conformance test, which mutates the arguments with the systems of record held fixed and requires the readings not to move. That is a test and not a proof, and a resolver that passes it may still launder on an input the mutation did not reach.",
        "Detection is bounded, not proved: a detection-dependent obligation's bound is a union over rates measured on a stated corpus. A corpus unrepresentative of the traffic gives a number that is arithmetically correct and practically wrong, which is why the corpus, its size and the date it was measured travel with the bound."
      ],
      "undeclared": []
    },
    "question": {
      "action": "respond with permitted high risk answer",
      "obligation_context": "risk_warning_given",
      "pins": [
        {
          "name": "respond with permitted high risk answer",
          "source": "action",
          "value": 1,
          "variable": 51
        },
        {
          "name": "risk_warning_given",
          "source": "obligation",
          "value": 0,
          "variable": 32
        },
        {
          "name": "product_is_nmmi",
          "source": "conditioning",
          "value": 1,
          "variable": 22
        }
      ]
    },
    "self_contained": false,
    "status": "oracle_unsat",
    "steps_to_contradiction": 0
  },
  "certificate_detail": "full",
  "decided_by": "phase0-cdcl",
  "oracle_dependent": true,
  "origin_class": "external_oracle",
  "phase0_verdict": "UNSAT, admitted (oracle_unsat_admissible is true), so this verdict is the oracle's assertion and not a derived refutation",
  "status": "UNSAT"
}