CHAIN VALID: /home/josh/.cache/aiuc1-evidence/frozen-2026-08-31/evidence-proxy-0.jsonl
  Receipts:  6
  Final seq: 5
  Root hash: 8da0d12591e925baa5e7a6e48d0042dab1e953b25b57b55e5302fe6c70f35a92
  Start:     2026-08-31T19:30:40Z
  End:       2026-08-31T19:31:21Z
  Signer:    66d189c1294a0c6e77bbeee004c9b75ffafca3dff8b1c6ee94c2c055afe16fbb
  Limit:      L-KEYHOLDER-OMIT: No in-domain mechanism proves completeness against the party holding the signing key.
  Limit:      L-FORGED-KEY: A record forged under a COMPROMISED signing key is in-domain indistinguishable from a real one.
  Limit:      L-RECORDER-BINARY: A malicious/modified recorder binary IS the attacker; its output cannot vouch for itself.
  Limit:      L-RECORDER-DISABLED: A disabled recorder / receipts-off config is a no-op success; nothing is proven.
  Limit:      L-VERIFIER-DRIFT: Divergent verdicts across verifier implementations/versions break the shared-truth property.
  Limit:      L-CONTAINMENT-UNPROVEN: "The boundary is the witness" holds only under attested containment; the binary alone cannot prove non-bypass.
  Limit:      L-CONCURRENT-RECORDER-WRITERS: Concurrent pipelock processes sharing one recorder directory can fork the sequence and produce a structurally unverifiable chain; the verifier may report a prev_hash mismatch that looks like tampering.
Containment: UNKNOWN — this bundle proves what was routed through the proxy; it does NOT prove the agent could not bypass it (see L-CONTAINMENT-UNPROVEN). Supply --posture to attest containment.
  containment reason: no posture capsule supplied
