{
  "schema_version": 1,
  "protocol_version": "T3-V1",
  "title": "Track 3 verification protocol",
  "core_rule": "PASS is only valid for the named claim when its evidence gates are satisfied. No evidence -> UNKNOWN. An unrun test -> NOT_TESTED. No status is inferred from another status.",
  "statuses": {
    "PASS": {
      "meaning": "Claim-specific evidence gates satisfied.",
      "evidence_requirements": [
        "claim-specific evidence reference(s)",
        "source URL or stable record locator",
        "no unresolved direct contradiction",
        "independent verifier where required"
      ]
    },
    "FAIL": {
      "meaning": "Claim-specific evidence explicitly contradicts the claim.",
      "evidence_requirements": [
        "contradicting evidence reference",
        "source URL/locator",
        "exact claim scope"
      ]
    },
    "UNKNOWN": {
      "meaning": "Test/search was attempted but evidence is insufficient for PASS or FAIL.",
      "evidence_requirements": [
        "documented test/search",
        "evidence gap"
      ]
    },
    "NOT_TESTED": {
      "meaning": "Test has not run.",
      "evidence_requirements": [
        "explicit unrun state"
      ]
    },
    "NOT_APPLICABLE": {
      "meaning": "Claim does not apply.",
      "evidence_requirements": [
        "explicit rationale"
      ]
    },
    "UNASSESSED": {
      "meaning": "No verifier has assigned a result.",
      "evidence_requirements": [
        "result left unassigned"
      ]
    }
  },
  "claims": {
    "UNIVERSE_ENTRY": "Facility/request is in the declared Track 3 research population.",
    "AI_COMPUTE_PUBLISHER_CHECK": "Epoch explicitly records AI-data-center compute evidence; publisher/derived check only.",
    "SITE_IDENTITY": "Facility has stable identity and site locator.",
    "GRID_CONNECTION": "Site-specific connection/service/queue record exists.",
    "POWER_OBSERVATION": "Site-specific electricity observation exists with source, period and units.",
    "PHYSICAL_REMOTE_SENSING": "Site-level optical/TIR/SAR observation is acquired and traceable.",
    "INDEPENDENT_CORROBORATION": "Material claim is supported by distinct retained sources.",
    "END_TO_END_TRACK3": "Physical, electrical, compute and independent-verifier chain is sufficient for the exact claim.",
    "ARTIFACT_ATTESTATION": "Verification bundle has a valid cryptographic attestation."
  },
  "pass_rules": {
    "UNIVERSE_ENTRY": [
      "stable ID",
      "canonical source record",
      "documented inclusion reason"
    ],
    "AI_COMPUTE_PUBLISHER_CHECK": [
      "explicit Epoch AI-data-center record",
      "positive compute-related publisher field",
      "publisher/derived scope stated"
    ],
    "SITE_IDENTITY": [
      "stable ID",
      "facility name",
      "address/equivalent site locator"
    ],
    "GRID_CONNECTION": [
      "site-specific queue/service/interconnection identifier or equivalent site-specific primary utility record",
      "source URL",
      "site-specific scope"
    ],
    "POWER_OBSERVATION": [
      "site-specific value",
      "measurement period",
      "units",
      "source URL"
    ],
    "PHYSICAL_REMOTE_SENSING": [
      "site-level observation",
      "acquisition identifier/date",
      "source URL",
      "measurement/derived metric",
      "processing method"
    ],
    "INDEPENDENT_CORROBORATION": [
      "two distinct retained source records",
      "materially overlapping claim",
      "independence caveat"
    ],
    "END_TO_END_TRACK3": [
      "independent verifier",
      "primary evidence",
      "independent corroboration",
      "physical + electrical + compute/accounting evidence"
    ],
    "ARTIFACT_ATTESTATION": [
      "attestation exists",
      "subject digest matches",
      "workflow/commit identity recorded"
    ]
  },
  "absence_testing_rule": "A no-match statement must point to a retained search record naming the source/database, URL/locator, capture date, search scope and result. Missing rows or fields are not absence evidence.",
  "independent_verifier": "verify_track3.py is intentionally read-only; its GitHub Actions workflow has contents: read only. This is operational separation, not organizational independence.",
  "signed_audit": "The signed bundle workflow uses GitHub Artifact Attestations, which are Sigstore-backed cryptographic provenance/integrity claims.",
  "versioning_rule": "Every result carries protocol_version, generation timestamp and source_snapshot_commit. Git history preserves prior versions.",
  "dispute_correction": "Corrections are append-only GitHub issue/event records; historical snapshots are retained and superseding records reference the original."
}