{
  "schema": "hybrid.dectec-api-only-mainnet-acceptance.v1",
  "state": "passed",
  "recorded_at": "2026-10-20T23:31:33.831653+00:00",
  "partner": "Dectec / TwinVault",
  "scope": "Platform API acceptance using five new synthetic owners and two isolated apps; not actual Dectec production registration.",
  "api_only": true,
  "browser_or_form_automation_used": false,
  "new_synthetic_accounts": 5,
  "unique_personal_vaults_verified": 5,
  "normal_signup_login_mfa_protection_and_explicit_consent": true,
  "email_verified": false,
  "files_uploaded_retrieved_and_decrypted": 5,
  "total_plaintext_bytes": 3155114,
  "same_original_files_restored_after_revocation": true,
  "cross_owner_and_cross_app_denials_verified": true,
  "caller_selected_vault_rejected": true,
  "file_revocation": {
    "owners_tested": 5,
    "read_chunk_and_private_proof_denied": 403,
    "new_pending_requests_restore_access": false
  },
  "authority_revocation": {
    "schema": "hybrid.dectec-authority-revocation-acceptance.v1",
    "recorded_at": "2026-10-20T23:12:45.053Z",
    "owner": 1,
    "app_revocation_denials": {
      "context": 403,
      "renewal": 403
    },
    "explicit_app_reapproval_restored_same_vault": true,
    "native_source_revocation_confirmed": true,
    "source_revocation_denials": {
      "context": 403,
      "renewal": 403,
      "owner_api": 403
    },
    "no_replacement_identity_or_vault": true
  },
  "successful_scoped_renewals_observed": 23,
  "renewal_cannot_restore_withdrawn_app_or_source_authority": true,
  "wallet_or_mpc_api_calls_observed": 0,
  "mpc_wallet_required": false,
  "proof": {
    "network": "hybrid-mainnet",
    "independently_verified": true,
    "checkpoint_height": 121,
    "checkpoint": "22aef5c33d800e9c8b60ac9e52ad4768c3e60b28a4287c6bad5de6e9c262f079",
    "pinned_validator_set": "ab26c580159a240fbd94e8041a9e3bb04ec1a3e0406b49299122923e9abf19ff",
    "native_heights": [
      122,
      123,
      124,
      125,
      126
    ],
    "tampered_public_certificate_signature_rejected": true,
    "public_payloads_commitment_only": true
  },
  "receipts": [
    {
      "owner": 1,
      "object_id": "5397e1da08aaa54f338d7dfa0cf0b156",
      "event_uuid": "76ba66034b0f43ff9dbbfd2d3ca9e26b",
      "native_height": 122,
      "certificate_commitment": "da51ee9eee03765ce1ee50001ef9b127607d459b1c3fa93520349d5934f04905",
      "merkle_verified": true,
      "validator_finality_verified": true,
      "continuity_to_checkpoint": 121,
      "plaintext_bytes": 97,
      "plaintext_sha256": "f9e155a5ae60042d2239c6c042888905c882895fe375ff7a64cf4b1bb97d7933",
      "final_api_retrieval_verified": true,
      "exactly_one_completion_event_after_full_retry": true
    },
    {
      "owner": 2,
      "object_id": "d4921846be957d205b26b61d2921b538",
      "event_uuid": "643b8b9fe70f4aafb683af39f5123afb",
      "native_height": 123,
      "certificate_commitment": "889fca7f50a3c4846d8a9b75c907d935fc1f0be567ce3bc61069a9535de7ad83",
      "merkle_verified": true,
      "validator_finality_verified": true,
      "continuity_to_checkpoint": 121,
      "plaintext_bytes": 1024,
      "plaintext_sha256": "55fadcb63fe4ac2fd7310a9d6223c4834425955d899a492c723308e87705fa9a",
      "final_api_retrieval_verified": true,
      "exactly_one_completion_event_after_full_retry": true
    },
    {
      "owner": 3,
      "object_id": "7ec4cc583af0660bb3a20c0ae3b8528e",
      "event_uuid": "680afc1e10f4414882c9141cfc57ee7c",
      "native_height": 124,
      "certificate_commitment": "da702c3289842c9a88eec34c68946f7199361754a531ea8ea1945d34e1e59474",
      "merkle_verified": true,
      "validator_finality_verified": true,
      "continuity_to_checkpoint": 121,
      "plaintext_bytes": 1048640,
      "plaintext_sha256": "467b606f666e31cdabd99982e6a2af79e85512883a38326f85b47163bb022292",
      "final_api_retrieval_verified": true,
      "exactly_one_completion_event_after_full_retry": true
    },
    {
      "owner": 4,
      "object_id": "8e0386b0d0a1e3044117afb2c890da40",
      "event_uuid": "a2d6e3d7e4564f68b3816b216ca5caaa",
      "native_height": 125,
      "certificate_commitment": "39064e04070ffbd5b47de77eb4e2168bbd08d3605db15de93a1eb0b839895abd",
      "merkle_verified": true,
      "validator_finality_verified": true,
      "continuity_to_checkpoint": 121,
      "plaintext_bytes": 2097161,
      "plaintext_sha256": "b8ed775a917e557f5dfddf10efe279de7ccbc5e3bce5389ff5dae6ecfb2a29f1",
      "final_api_retrieval_verified": true,
      "exactly_one_completion_event_after_full_retry": true
    },
    {
      "owner": 5,
      "object_id": "bf914c503d2c7646612b8d3d0d738198",
      "event_uuid": "2e78c8ae58404cdca2227419d67fc680",
      "native_height": 126,
      "certificate_commitment": "02ffbb117151afe0f0ae988788796e6fd0978047f4a33fe0f25a64d588dafd14",
      "merkle_verified": true,
      "validator_finality_verified": true,
      "continuity_to_checkpoint": 121,
      "plaintext_bytes": 8192,
      "plaintext_sha256": "8781c313c32d1b46e8149e091a68ece3274096b453ea233c1a276412360f2001",
      "final_api_retrieval_verified": true,
      "exactly_one_completion_event_after_full_retry": true
    }
  ],
  "runtime": {
    "node": "24.18.0",
    "storage": "Existing IPFS repository on the mounted secondary drive; existing node identity and keys preserved.",
    "operator_keys_and_existing_user_data_preserved": true,
    "background_mailbox_archival_and_mpc_gates_unchanged": true
  },
  "integration_limits": {
    "short_access_token_seconds": 300,
    "scoped_renewal_max_original_window_hours": 8,
    "owner_approved_decryption_only_for_exact_files": true,
    "retention": "Synthetic accounts and original files retained for this requested demonstration; credentials remain private.",
    "earliest_recorded_renewal_window_ends_utc": "2026-10-21T06:32:48+00:00",
    "previously_decrypted_data_cannot_be_recalled": true,
    "not_established": [
      "Dectec production origin/callback or client registration",
      "load/scale or geographic redundancy SLA",
      "unattended access beyond the approved native-session window"
    ]
  },
  "required_dectec_details": [
    "Exact HTTPS application origin",
    "Exact same-origin HTTPS callback required by confidential-app registration, even though headless flow does not redirect",
    "Optional same-origin logout URL; staging registered separately"
  ],
  "api_trace_summary": [
    {
      "origin": "https://api.hybrid-chain.com",
      "path": "/api/v2/auth/sessions",
      "operation": "",
      "status": 200,
      "count": 5
    },
    {
      "origin": "https://api.hybrid-chain.com",
      "path": "/api/v2/auth/sessions/{id}/revocations",
      "operation": "",
      "status": 200,
      "count": 1
    },
    {
      "origin": "https://api.hybrid-chain.com",
      "path": "/api/v2/data-vault/files",
      "operation": "commit",
      "status": 200,
      "count": 10
    },
    {
      "origin": "https://api.hybrid-chain.com",
      "path": "/api/v2/data-vault/files",
      "operation": "context",
      "status": 200,
      "count": 47
    },
    {
      "origin": "https://api.hybrid-chain.com",
      "path": "/api/v2/data-vault/files",
      "operation": "context",
      "status": 400,
      "count": 30
    },
    {
      "origin": "https://api.hybrid-chain.com",
      "path": "/api/v2/data-vault/files",
      "operation": "context",
      "status": 401,
      "count": 26
    },
    {
      "origin": "https://api.hybrid-chain.com",
      "path": "/api/v2/data-vault/files",
      "operation": "context",
      "status": 503,
      "count": 1
    },
    {
      "origin": "https://api.hybrid-chain.com",
      "path": "/api/v2/data-vault/files",
      "operation": "decryption-status",
      "status": 200,
      "count": 60
    },
    {
      "origin": "https://api.hybrid-chain.com",
      "path": "/api/v2/data-vault/files",
      "operation": "list",
      "status": 200,
      "count": 6
    },
    {
      "origin": "https://api.hybrid-chain.com",
      "path": "/api/v2/data-vault/files",
      "operation": "prepare-upload",
      "status": 200,
      "count": 5
    },
    {
      "origin": "https://api.hybrid-chain.com",
      "path": "/api/v2/data-vault/files",
      "operation": "proof",
      "status": 200,
      "count": 10
    },
    {
      "origin": "https://api.hybrid-chain.com",
      "path": "/api/v2/data-vault/files",
      "operation": "proof",
      "status": 403,
      "count": 20
    },
    {
      "origin": "https://api.hybrid-chain.com",
      "path": "/api/v2/data-vault/files",
      "operation": "proof",
      "status": 404,
      "count": 6
    },
    {
      "origin": "https://api.hybrid-chain.com",
      "path": "/api/v2/data-vault/files",
      "operation": "put-chunk",
      "status": 200,
      "count": 16
    },
    {
      "origin": "https://api.hybrid-chain.com",
      "path": "/api/v2/data-vault/files",
      "operation": "read",
      "status": 200,
      "count": 10
    },
    {
      "origin": "https://api.hybrid-chain.com",
      "path": "/api/v2/data-vault/files",
      "operation": "read",
      "status": 403,
      "count": 20
    },
    {
      "origin": "https://api.hybrid-chain.com",
      "path": "/api/v2/data-vault/files",
      "operation": "read",
      "status": 404,
      "count": 36
    },
    {
      "origin": "https://api.hybrid-chain.com",
      "path": "/api/v2/data-vault/files",
      "operation": "read-chunk",
      "status": 200,
      "count": 16
    },
    {
      "origin": "https://api.hybrid-chain.com",
      "path": "/api/v2/data-vault/files",
      "operation": "read-chunk",
      "status": 403,
      "count": 20
    },
    {
      "origin": "https://api.hybrid-chain.com",
      "path": "/api/v2/data-vault/files",
      "operation": "refresh-connection",
      "status": 200,
      "count": 23
    },
    {
      "origin": "https://api.hybrid-chain.com",
      "path": "/api/v2/data-vault/files",
      "operation": "refresh-connection",
      "status": 403,
      "count": 6
    },
    {
      "origin": "https://api.hybrid-chain.com",
      "path": "/api/v2/data-vault/files",
      "operation": "register",
      "status": 200,
      "count": 10
    },
    {
      "origin": "https://api.hybrid-chain.com",
      "path": "/api/v2/data-vault/files",
      "operation": "request-decryption",
      "status": 200,
      "count": 11
    },
    {
      "origin": "https://api.hybrid-chain.com",
      "path": "/api/v2/me/authenticator-enrollments",
      "operation": "",
      "status": 201,
      "count": 5
    },
    {
      "origin": "https://api.hybrid-chain.com",
      "path": "/api/v2/me/authenticator-enrollments",
      "operation": "",
      "status": 403,
      "count": 1
    },
    {
      "origin": "https://api.hybrid-chain.com",
      "path": "/api/v2/me/authenticator-enrollments/{id}/confirmations",
      "operation": "",
      "status": 200,
      "count": 5
    },
    {
      "origin": "https://api.hybrid-chain.com",
      "path": "/api/v2/security/step-up",
      "operation": "",
      "status": 201,
      "count": 29
    },
    {
      "origin": "https://auth.hybrid-id.com",
      "path": "/vault/owner",
      "operation": "",
      "status": 200,
      "count": 5
    },
    {
      "origin": "https://auth.hybrid-id.com",
      "path": "/vault/owner",
      "operation": "application-create",
      "status": 200,
      "count": 2
    },
    {
      "origin": "https://auth.hybrid-id.com",
      "path": "/vault/owner",
      "operation": "connection-authorize",
      "status": 200,
      "count": 9
    },
    {
      "origin": "https://auth.hybrid-id.com",
      "path": "/vault/owner",
      "operation": "connection-authorize",
      "status": 502,
      "count": 1
    },
    {
      "origin": "https://auth.hybrid-id.com",
      "path": "/vault/owner",
      "operation": "connection-preview",
      "status": 200,
      "count": 10
    },
    {
      "origin": "https://auth.hybrid-id.com",
      "path": "/vault/owner",
      "operation": "connection-revoke",
      "status": 200,
      "count": 1
    },
    {
      "origin": "https://auth.hybrid-id.com",
      "path": "/vault/owner",
      "operation": "file-review",
      "status": 200,
      "count": 31
    },
    {
      "origin": "https://auth.hybrid-id.com",
      "path": "/vault/owner",
      "operation": "file-review",
      "status": 403,
      "count": 1
    },
    {
      "origin": "https://auth.hybrid-id.com",
      "path": "/vault/owner",
      "operation": "protection",
      "status": 200,
      "count": 20
    },
    {
      "origin": "https://auth.hybrid-id.com",
      "path": "/vault/owner",
      "operation": "protection-package",
      "status": 200,
      "count": 11
    },
    {
      "origin": "https://auth.hybrid-id.com",
      "path": "/vault/owner",
      "operation": "protection-status",
      "status": 200,
      "count": 25
    },
    {
      "origin": "https://auth.hybrid-id.com",
      "path": "/vault/owner",
      "operation": "protection-status",
      "status": 403,
      "count": 2
    },
    {
      "origin": "https://auth.hybrid-id.com",
      "path": "/vault/owner",
      "operation": "register",
      "status": 200,
      "count": 4
    }
  ],
  "sources": {
    "core": {
      "reviewed_feature": "ea6513c88d355f5753594996b7f3bef71485aa6b",
      "merge": "c34d2c3a37e830887b99cef9287895b3b5be3fa1",
      "pull_request": "https://github.com/Hybrid-Chain/hybrid-chain-master-server/pull/953",
      "deployment": "Narrow reviewed overlay on retained 358cfc5-relay-b48d80d serving release."
    },
    "gateway": {
      "reviewed_feature": "f1c065da32d758accd334a6e616a0c89898276d7",
      "merge": "24a1d9212568e4f8ff5fe4e978836295ccd97016",
      "preserved_serving_baseline": "82aeeaf00f63cdf5c0c9b8507dae6476ac7d7c84",
      "executable_sha256": "a924d003eaf9f132d91cd13103a612996b19ec8b9aa447acb58c8ee162bd2b2e",
      "pull_request": "https://github.com/Hybrid-Chain/hybrid-chain-api-gateway/pull/97"
    },
    "identity_provider": {
      "feature_pull_request": "https://github.com/Hybrid-Chain/hybrid-id-sso-website/pull/7",
      "first_authenticator_pull_request": "https://github.com/Hybrid-Chain/hybrid-id-sso-website/pull/8",
      "authority_lifecycle_pull_request": "https://github.com/Hybrid-Chain/hybrid-id-sso-website/pull/9",
      "latest_reviewed_feature": "0175f45c7e1a5e0d37c53e2221ef67f75486b70a",
      "merge": "1fdbb294b2833a1791cf3c3da74ba4633e632ce2",
      "deployment": "dectec-consent-0175f45; composed on preserved stradacarte-pull-b67b4f3c, not a whole-repository replacement.",
      "grant_module_sha256": "1102c195ac0654f9d35f7c85b6144c32f207c239f70e2f9fe3f823a2480972ca"
    },
    "api_example_behavior_basis": "1fdbb294b2833a1791cf3c3da74ba4633e632ce2"
  },
  "validation": {
    "latest_provider_checks_passed": 1538,
    "latest_provider_optional_skipped": 3,
    "native_composed_release_focused_checks_passed": 43,
    "api_driver_fixture_checks_passed": 2,
    "standalone_dependency_lock_and_imports_verified_on_node": "24.18.0",
    "hosted_exact_source_review": "Passed before activation, all three components. No billing/check bypass.",
    "latest_provider_hosted_runs": [
      "https://github.com/Hybrid-Chain/hybrid-id-sso-website/actions/runs/39514631487",
      "https://github.com/Hybrid-Chain/hybrid-id-sso-website/actions/runs/39514631531"
    ]
  },
  "artifacts": {
    "dectec-vault-api-example-20261020.tar.gz": {
      "url": "https://hybrid-id.com/integrations/dectec-vault-api-example-20261020.tar.gz",
      "sha256": "e0a2a60bb09807406c72767fff9b4ab6ff5e347571a7fbab52a9de932c0ee003",
      "bytes": 21180
    },
    "dectec-vault-example-files-20261020.zip": {
      "url": "https://hybrid-id.com/integrations/dectec-vault-example-files-20261020.zip",
      "sha256": "5c802ac886f1867d06c5846103324306559d92d9c9f87e2e1d5aa8bbf33f56d7",
      "bytes": 4673
    }
  }
}