{
 "tool": "eclipse-connect",
 "version": "P1",
 "bench_date": "2026-10-24",
 "bench_version": "0.1.0",
 "environment": "dogfood",
 "qualifier": "dogfood",
 "verdict": "CERTIFIED(dogfood)",
 "checks": [
  {
   "id": "N1",
   "name": "auth fail-closed",
   "verdict": "pass",
   "evidence": "upload no key/bogus key -> 401; revoked key -> 403; nothing recorded (simulator: ran 14 tests, all passed)"
  },
  {
   "id": "N2",
   "name": "validation",
   "verdict": "pass",
   "evidence": "non-vertical -> 400; >=60s -> 400; unparseable -> 400; oversize -> 400 (simulator: ran 14 tests, all passed); missing title -> 400 (probe)"
  },
  {
   "id": "N3",
   "name": "public gating",
   "verdict": "pass",
   "evidence": "public without flag -> 400 (upload + publish); public with flag -> 200 and metadata public (simulator: ran 14 tests, all passed)"
  },
  {
   "id": "N4",
   "name": "revoke",
   "verdict": "pass",
   "evidence": "revoke -> 200 revoked true; later upload -> 403; status revoked (simulator: ran 14 tests, all passed)"
  },
  {
   "id": "N5",
   "name": "audit",
   "verdict": "pass",
   "evidence": "exactly one audit entry per call; no token values in audit.jsonl/grants.json (simulator: ran 14 tests, all passed)"
  },
  {
   "id": "N6",
   "name": "status",
   "verdict": "pass",
   "evidence": "status carries no token values; quota 1600 after one upload (simulator: ran 14 tests, all passed); quota 3200 after two uploads, last_upload matches second video (probe)"
  },
  {
   "id": "N7",
   "name": "status auth",
   "verdict": "pass",
   "evidence": "GET /status with no key -> 401"
  },
  {
   "id": "N8",
   "name": "authorize/callback",
   "verdict": "pass",
   "evidence": "authorize -> 302 with youtube.upload scope; callback issues key once, stores only hash; replay -> 400; bad code stores nothing (simulator: ran 14 tests, all passed)"
  },
  {
   "id": "U1",
   "name": "auth enforced",
   "verdict": "pass",
   "evidence": "auth enforced on upload (401/403) and status (401 without key)"
  },
  {
   "id": "U2",
   "name": "schema valid",
   "verdict": "na",
   "evidence": "HTTP relay, not an MCP server; no tools/list surface exists to validate"
  },
  {
   "id": "U3",
   "name": "no unscoped fetch",
   "verdict": "pass",
   "evidence": "relay fetched only configured endpoints during probes: ['POST /o/oauth2/token', 'POST /upload/youtube/v3/videos?uploadType=resumable&part=snippet,status', 'PUT /session/session_1', 'PUT /session/session_2']"
  },
  {
   "id": "U4",
   "name": "no secret leak",
   "verdict": "pass",
   "evidence": "no token values in audit log, grant store, or status body (N5 + N6)"
  },
  {
   "id": "U5",
   "name": "sane errors",
   "verdict": "pass",
   "evidence": "validation errors are 400s (N2); unknown path -> 404"
  },
  {
   "id": "U6",
   "name": "process health",
   "verdict": "pass",
   "evidence": "relay answers authorize (302) and authenticated status (N6 + N8)"
  },
  {
   "id": "U8",
   "name": "bench isolation",
   "verdict": "pass",
   "evidence": "workspace product state byte-identical before/after bench"
  }
 ],
 "notes": [
  "Dogfood relay, test-mode grant; simulator only, no live YouTube/Google."
 ],
 "history": "append-only; prior runs retained in results/"
}