Demo A evidence pack.Not a live TEE.
Local isolation and hashes. Back to the run · aarloven.com
Sealed room boundary, this demo. Their program came into a local quarantine workspace controlled by the buyer or the law firm. Your samples stayed there. Test data was not sent to the vendor. See the environment fingerprint below.
This isolation is not a live TEE or SEV SNP attestation run. Upgrade path: AMD SEV SNP guest attestation. OUR_RUN is a dry run in Azure germanywestcentral. Same class of isolation as Apple PCC or Azure Confidential VMs. It moves the trust boundary. It does not erase residual ops risk. Norway jurisdiction is an upgrade tier, and is not claimed live on this pack.
Summary hashes
| Field | Value |
|---|---|
| image_or_binary_hash | 06868198174408ae8f4961fad2e1584ef5b2194af0325d611bf48b295f9fb15e |
| dataset_hash | 498c4444341714b8397a699d6fd852b8daef49da4b1de805ac1bac82e8bd2797 |
| result_hash | d3895185a15b8fedac49138f1f09b0ab16c196e2941e8babe87088a88e6efeaa |
| started_at | 2026-09-20T14:56:01+02:00 |
| finished_at | 2026-09-20T14:56:01+02:00 |
Intentional failure
overall_test_passed = False
Plus alias wang.wu+test@example.com was dropped by rule_email.
Plus alias alice+hidden@example.com in notes was dropped by rule_email.
Vendor email detection must cover common plus aliases (local+tag@domain). This fake seller app drops those addresses on purpose, so the red light is rejectable.
Claim evaluation
| ID | Title | Result | Notes |
|---|---|---|---|
| claim_program_integrity | Program integrity | Pass | image_or_binary_hash matches the locked baseline (06868198174408ae…). |
| claim_dataset_integrity | Test data integrity | Pass | dataset_hash=498c4444341714b8… recorded and well formed. |
| claim_data_stays_local | Data stays local | Pass | Environment fingerprint present. Process declaration: data stayed in local quarantine and was not sent to the vendor. (Not TEE.) |
| claim_reproducibility | Result reproducibility | Pass | result_hash=d3895185a15b8fed… matches the prior evidence pack from the same inputs. |
| claim_acceptance | Functional acceptance | Fail | Functional acceptance failed. PII misses in agreed scope: 2. Seller process did not exit zero (exit_code=1). overall_test_passed=false. The result hash may still be stable. Reject this round. Require a vendor fix, then lock the program again before a retest. |
| claim_time_anchoring | Time anchoring | Pass | Start and finish timestamps match. |
Environment fingerprint
| Key | Value |
|---|---|
| hostname | grok-bot-vm-291923180 |
| platform | Linux-6.12.94+-x86_64-with-glibc2.41 |
| python_version | 3.13.5 |
| cwd | /workspace/mvp-ai-governance/demo_a/workdir/quarantine |
| isolation_note | Demo A: process declaration + environment fingerprint. Run was in a local quarantine workspace; this is not TEE / remote attestation. |
| quarantine_workdir | /workspace/mvp-ai-governance/demo_a/workdir/quarantine |
Seller app summary
{
"total_findings": 15,
"email_hits": 5,
"ssn_hits": 5,
"name_column_hits": 5,
"intentional_false_negatives": 2
}
Generated for Demo A. Synthetic data. Demo only.