{
  "status": "passed",
  "includesRegisteredCleanup": true,
  "rawEvidenceDirectory": "target/celln-live-proof/catalogue-live-3041679295",
  "scope": "valid-credential malformed requests against actual TLS issuer/router before deployed controller dispatch, followed by real browser/KVM/DeepSeek acceptance; not tenant network or full guest adversarial qualification",
  "authenticatedRefusals": [
    "issuer truncated JSON: 400",
    "issuer missing version: 400",
    "issuer multiple JSON values: 400",
    "issuer tenant policy-root override: 400",
    "issuer unsupported version: 400",
    "router truncated JSON: 400",
    "router missing identity: 400",
    "router path traversal identity: 400",
    "router non-string identity: 400",
    "router empty body: 413"
  ],
  "trustedModelProfileIssuerJournalAndOwnerFilesUnchangedAfterEachRefusal": true,
  "controllerImage": "localhost/sympozium-celln-controller:35b45cd",
  "apiImage": "localhost/sympozium-celln-api:a3ba456",
  "cellnMergedFix": "c83be719872c97983c1cba307246503425a5a193",
  "issuerUsesDedicatedReadOnlyKubernetesIdentity": true,
  "runUID": "ad5fc132-ade9-44b1-ace8-779eeab16be4",
  "action": "celln-fcd03046ab96796f71deed0c99a7df2d1613ef76edc429d85f0c1b517c0a886d",
  "closure": "blake3:0e3b6eef32fa309149be0b276782ab649fa501483902591773f16dab6fe44b8e",
  "freshBrowserResult": "CELLN has length 5",
  "brokerRequests": 3,
  "toolCalls": 2,
  "modelPolicyWithdrawn": true,
  "hostReissuanceRefused": true,
  "ownerReceiptRetained": true,
  "jobs": 0,
  "liveCells": 0,
  "manualFinalizerRemoval": false,
  "proofControllerRestored": true,
  "testDurationSeconds": 56.29,
  "portableChecks": "fixture race tests, go vet and git diff --check passed; live opt-in evidence is separate"
}