{
 "tool": "eclipse-strata-mcp",
 "version": "0.1.0",
 "bench_date": "2026-10-25",
 "bench_version": "verity-0.3.0-scoped-rebench-r3",
 "bench_type": "scoped re-bench (fix round 2) \u2014 D2 ONLY: D2X key-substitution + V3/V4/V5 with genuine anchor + genuine with/without anchor (incl CLI). D1/D3-D10 CLOSED in r2, NOT re-benched, not in scope.",
 "environment": "simulator (P0: OctoPrint virtual + virtual Klipper/Moonraker in-process sims; slicer: deterministic simulated PrusaSlicer behind production interface; class: fixture; pure-Python Ed25519)",
 "qualifier": "simulator",
 "verdict": "CERTIFIED(simulator)",
 "score": "12/12 checks pass",
 "score_note": "All scoped r3 probes pass. D2X (r2's sole OPEN defect, HIGH) is CLOSED: attacker pack is refused solely on UNVERIFIED_SIGNER \u2014 every other element is self-consistent by construction, so the trusted signer anchor is the deciding check. D1/D3-D10 remain CLOSED from r2 (not re-run, per scope). Ceiling per spec \u00a713 P0: CERTIFIED(simulator) only.",
 "checks": [
  {
   "id": "D2X-A",
   "name": "D2X byte-for-byte key substitution + genuine registry anchor",
   "verdict": "pass",
   "evidence": "D2X attacker+genuine-registry -> PRINT_UNVERIFIED failing=['UNVERIFIED_SIGNER'] refusal=UNVERIFIED_SIGNER signer_trust={'anchor_supplied': True, 'status': 'unverified', 'reason': 'signer_fingerprint_not_in_trusted_registry', 'fingerprint': '448f04ffcba874db93d9fd02520daa583a92b1f20b100ff791202a6d7a93e0de', 'signer_class': 'local'}"
  },
  {
   "id": "D2X-B",
   "name": "D2X attacker + genuine expected-fingerprint anchor",
   "verdict": "pass",
   "evidence": "D2X attacker+genuine expected_fingerprint -> PRINT_UNVERIFIED failing=['UNVERIFIED_SIGNER'] refusal=UNVERIFIED_SIGNER signer_trust={'anchor_supplied': True, 'status': 'unverified', 'reason': 'signer_fingerprint_not_in_trusted_registry', 'fingerprint': '448f04ffcba874db93d9fd02520daa583a92b1f20b100ff791202a6d7a93e0de', 'signer_class': 'local'}"
  },
  {
   "id": "D2X-C",
   "name": "D2X attacker + no anchor",
   "verdict": "pass",
   "evidence": "D2X attacker+NO anchor -> PRINT_UNVERIFIED failing=['UNVERIFIED_SIGNER'] refusal=UNVERIFIED_SIGNER signer_trust={'anchor_supplied': False, 'status': 'unverified', 'reason': 'no_trusted_signer_anchor_supplied', 'fingerprint': '448f04ffcba874db93d9fd02520daa583a92b1f20b100ff791202a6d7a93e0de', 'signer_class': 'local'}"
  },
  {
   "id": "D2-V3A",
   "name": "D2 V3 mandate tamper+rehash, genuine anchor",
   "verdict": "pass",
   "evidence": "V3+genuine-anchor -> PRINT_UNVERIFIED failing=['pack_hash', 'pack_signature', 'mandate_signature'] (r2 originals ['mandate_signature', 'pack_hash', 'pack_signature'] present, UNVERIFIED_SIGNER absent=True)"
  },
  {
   "id": "D2-V4A",
   "name": "D2 V4 telemetry tamper+rehash, genuine anchor",
   "verdict": "pass",
   "evidence": "V4+genuine-anchor -> PRINT_UNVERIFIED failing=['pack_hash', 'pack_signature', 'telemetry_envelope'] (r2 originals ['pack_hash', 'pack_signature', 'telemetry_envelope'] present, UNVERIFIED_SIGNER absent=True)"
  },
  {
   "id": "D2-V5A",
   "name": "D2 V5 end_state/slicer tamper+rehash, genuine anchor",
   "verdict": "pass",
   "evidence": "V5+genuine-anchor -> PRINT_UNVERIFIED failing=['pack_hash', 'pack_signature', 'slicer_build_pin'] (r2 originals ['pack_hash', 'pack_signature', 'slicer_build_pin'] present, UNVERIFIED_SIGNER absent=True)"
  },
  {
   "id": "G-A",
   "name": "Genuine pack + correct registry anchor",
   "verdict": "pass",
   "evidence": "genuine+registry -> PRINT_VERIFIED failing=[] signer_trust={'anchor_supplied': True, 'status': 'trusted', 'reason': None, 'fingerprint': '5f9b8789edce1f9ea591e447adfac4e99789d1ec4f4dcf2a0b54c342cce52dd7', 'signer_class': 'local'}"
  },
  {
   "id": "G-B",
   "name": "Genuine pack + correct expected-fingerprint anchor",
   "verdict": "pass",
   "evidence": "genuine+expected_fingerprint -> PRINT_VERIFIED failing=[] signer_trust={'anchor_supplied': True, 'status': 'trusted', 'reason': None, 'fingerprint': 'c931cb8c8ae806e0a41962600ae804be842eff694a1f54270d121d8eeb037113', 'signer_class': 'local'}"
  },
  {
   "id": "G-C",
   "name": "Genuine pack without anchor refuses UNVERIFIED",
   "verdict": "pass",
   "evidence": "genuine+NO anchor -> PRINT_UNVERIFIED failing=['UNVERIFIED_SIGNER'] refusal=UNVERIFIED_SIGNER signer_trust={'anchor_supplied': False, 'status': 'unverified', 'reason': 'no_trusted_signer_anchor_supplied', 'fingerprint': 'adc7243d955a9bc07150d425ab78e8f3195fa2612dd6df1912c433d985002563', 'signer_class': 'local'} (never silent-verify)"
  },
  {
   "id": "CLI-G",
   "name": "CLI genuine pack + registry file",
   "verdict": "pass",
   "evidence": "CLI genuine+--registry -> PRINT_VERIFIED failing=[]"
  },
  {
   "id": "CLI-GN",
   "name": "CLI genuine pack, no anchor",
   "verdict": "pass",
   "evidence": "CLI genuine+no anchor -> PRINT_UNVERIFIED failing=['UNVERIFIED_SIGNER'] refusal=UNVERIFIED_SIGNER"
  },
  {
   "id": "CLI-D2X",
   "name": "CLI D2X attacker pack + genuine registry file",
   "verdict": "pass",
   "evidence": "CLI D2X attacker+genuine --registry -> PRINT_UNVERIFIED failing=['UNVERIFIED_SIGNER'] refusal=UNVERIFIED_SIGNER"
  }
 ],
 "per_defect_verdicts": [
  {
   "id": "D2",
   "severity": "HIGH",
   "verdict": "CLOSED",
   "evidence": "D2X byte-for-byte (r2 script d2x_probe: attacker seed b'\\xaa'*32 keypair, mandate material PETG->ABS + expiry +365d re-signed w/ attacker key, mandate_hash recomputed, signer block replaced w/ attacker pk+fingerprint self-consistent, pack_hash recomputed, pack_signature attacker-made): + genuine registry anchor -> PRINT_UNVERIFIED failing=['UNVERIFIED_SIGNER'] refusal=UNVERIFIED_SIGNER reason=signer_fingerprint_not_in_trusted_registry; + genuine expected_fingerprint -> same; + no anchor -> PRINT_UNVERIFIED failing=['UNVERIFIED_SIGNER'] reason=no_trusted_signer_anchor_supplied; CLI attacker+genuine registry file -> same. V3/V4/V5 (r2 rehash_bench1 verbatim) WITH genuine anchor still fail on exact r2 elements (V3 pack_hash/pack_signature/mandate_signature; V4 pack_hash/pack_signature/telemetry_envelope; V5 pack_hash/pack_signature/slicer_build_pin) with UNVERIFIED_SIGNER absent \u2014 anchor change does not mask unkeyed tampers. Genuine+registry -> PRINT_VERIFIED failing=[]; genuine+expected_fingerprint -> PRINT_VERIFIED failing=[]; genuine+no anchor -> PRINT_UNVERIFIED ['UNVERIFIED_SIGNER'] (never silent-verify, library + CLI)."
  },
  {
   "id": "D1, D3-D10",
   "severity": "\u2014",
   "verdict": "CLOSED (carried from r2, not re-benched)",
   "evidence": "Per task scope: r2 card eclipse-strata-mcp-2026-10-25-r2.json stands; those defects were not re-probed in r3."
  }
 ],
 "novelty": {
  "verdict": "NOVELTY_PROVEN (retained from bench 1, not re-benched per scope)",
  "renamed_verb_overlap_pct": 55
 },
 "builder_claims_verified": {
  "builder_tests_64_of_64": "VERIFIED by independent re-run: python3 -m unittest discover -s tests -> Ran 64 tests in 254.228s, OK (57 r2-era + new D2Anchor regressions incl CLI anchor surface).",
  "smoke": "VERIFIED re-run: SMOKE OK (11 tools, 3 simulator printers, raw_gcode -32602/RAW_GCODE_REFUSED).",
  "trusted_signer_anchor": "VERIFIED: proof.py verify_pack + tools/strata_proof.py accept registry / expected_fingerprint anchor; unknown signer, no anchor -> named refusal UNVERIFIED_SIGNER with verdict PRINT_UNVERIFIED; genuine signer under correct anchor -> PRINT_VERIFIED."
 },
 "defects": [],
 "notes": [
  "Bench fixtures minted independently by Verity (bench-1/r2 set retained byte-for-byte): PETG profile (240/85C, first-layer 245/90), 35x25x6mm design, Klipper sim SIM-KLIP-001, gap threshold 15s, year-2027 mandate era, agent verity-agent-7 / principal verity-principal. Genuine anchor built from the ENGINE's signer (e.signer fingerprint+pk, out-of-band), never from the pack under test. Builder fixtures/tests NOT imported.",
  "D2X fingerprint observed: attacker fingerprint 448f04ffcba874db93d9fd02520daa583a92b1f20b100ff791202a6d7a93e0de (deterministic seed b'\\xaa'*32, identical across A/B/C probes).",
  "Out-of-scope items noted, not chased (per task): registry-key-mismatch and signer-class-mismatch shapes \u2014 present in builder D2Anchor tests (in the independently verified 64/64 suite) but not separately probed by this bench; attacker pack presented with the ATTACKER's own anchor would verify by definition of a trust anchor (verifier-side trust decision, not a product defect) \u2014 not probed as a failure.",
  "Prior cards byte-untouched: bench1 md5 30a61d4fb27477787d9b6b65b29de6ec, r2 md5 a37da801ef8f72cb1c57f41b9900bf10 (verified before and after r3). No product code modified by the bench; bench state under /tmp only (script /tmp/verity_strata_r3.py, results /tmp/verity_strata_r3_results.json).",
  "not_tested (unchanged P0 scope): real hardware, real slicer binaries, real Moonraker/OctoPrint endpoints, Herald signer, Blackbox custody, P1/P2 adapters. No printer was touched; no heat exists in this bench."
 ],
 "manifest_instruction": {
  "note": "Bench outcome for any later catalog pass: verdict CERTIFIED(simulator), score 12/12 scoped (r3), D2 CLOSED (incl D2X), D1/D3-D10 CLOSED (r2), novelty NOVELTY_PROVEN stands. Qualifier simulator only \u2014 no physical claim."
 },
 "history": "append-only; bench 1 at eclipse-strata-mcp-2026-10-25.json; scoped re-bench r2 at eclipse-strata-mcp-2026-10-25-r2.json (FAILED 25/26, D2 OPEN on D2X); this card is scoped re-bench r3 (D2 only)."
}