{
  "schema_version": "1.0.0",
  "mark_id": "VM-LOCAL-20260909-001",
  "label": "Evidence-linked local test",
  "issued_at": "2026-09-09T01:50:00+02:00",
  "valid_through": "2026-12-08T23:59:59+02:00",
  "expiry_policy": "Treat the mark as expired after valid_through. A later run does not extend this record.",
  "issuer": "MCP Compatibility Review",
  "subject": {
    "type": "fictional_local_fixture",
    "name": "Demo Library fixture",
    "version": "fixture-2",
    "contract_id": "DEMO-LIBRARY-CONTRACT-1",
    "contract_version": "1.0.0",
    "contract_sha256": "1ea6106f62c403ff7e451d0aa18db012fee7fb0619a1e8f10f0fab7bd23afb43"
  },
  "scope": {
    "run_id": "LOCAL-HARNESS-20260909-001",
    "harness_version": "0.1.0",
    "target_host": "127.0.0.1",
    "external_network": false,
    "customer_system": false,
    "real_mcp_server": false,
    "named_client": false,
    "case_ids": ["CON-L01", "DSC-L01", "TOL-L01", "AUT-L01", "ERR-L01", "WRK-L01"]
  },
  "result": {
    "executed": 5,
    "pass": 4,
    "fail": 1,
    "blocked": 1,
    "overall": "FAIL",
    "rule": "Overall is FAIL when any in-scope executed case fails. BLOCKED is disclosed separately and is never counted as a pass."
  },
  "evidence": {
    "manifest_url": "/Local_Harness_Manifest_2026-09-09.json",
    "manifest_sha256": "5f83f94f2bdac3d37b0c330e9e4223756839a5c8ed54c324cd8767a2b099329c",
    "bundle_url": "/Local_Harness_Evidence_2026-09-09.zip",
    "bundle_sha256": "de14e22af52d7da426347d6adaafc9aceeea0cfd9fea3559021b11eefd3da2ee"
  },
  "status_rules": {
    "expired": "The current time is later than valid_through.",
    "superseded": "A replacement record explicitly names this mark_id.",
    "revoked": "The issuer publishes a revocation record identifying this mark_id and reason.",
    "unverifiable": "The mark record, evidence manifest, bundle or declared hashes cannot be resolved or matched."
  },
  "prohibited_interpretations": [
    "Not certification, accreditation or independent attestation",
    "Not proof of compatibility with MCP, Codex, Sourcegraph or any customer system",
    "Not a security, privacy, performance or production-readiness assurance",
    "Not permission to reuse this mark for another version, environment, run or product"
  ]
}
