Attested Execution Framework

The coverage declaration

What the reference verifier's suite covers and what it does not, entry by entry. This page renders fixture-coverage.json and adds nothing to it; the JSON is the declaration, per AEF 1201.

aef-reference-verifier 0.5.0against 1200/0.2, generated 15 August 2026

Suite version

Under AEF 1201 C10 the suite version is the digest of the coverage declaration as served, which the file cannot contain and this page computes from the same bytes it links:

sha-256:18d0d14f4a34e724b1d84b92027cbf0b823cf0a587b31ec3cf49b8f3ec25768c

Suite sources: packages/aef/test-suite-pins.ts at sha-256:acd1a0fc3ae17e19…; packages/aef/test.ts at sha-256:728c1769a3c95bb6…. Additional documents applied: 1300/0.2, 1300/0.1, 1201/0.1, 1301/0.1, 1400/0.1. Previous suite version: sha-256:f851528b8d6e7e3a….

Self-test subset (carried by the verifier, AEF 1201 C19): sha-256:a7385e2738bec6ce…. One required-to-fail fixture per fatal-capable check, per C19. The deployed verifier runs the subset before its first result in each configuration, refuses on mismatch per C20, and records the digest and outcome on every result per C21. A pass means the verifier agrees with its own pinned history in that configuration, and nothing more.

The suite's sixth version, and the first in which every fixture is a pinned pair as AEF 1201 C5 defines one: inputs comprise the record, the declaration, any supplied acceptance, renewals, or deprecations, the trust base statement, and the options, with the verification time pinned and artifact roots pointing at snapshots rather than the live repository. The hand-written tests in packages/aef/test.ts remain as a generated layer, labeled below, exercising the same behaviors with regenerated inputs; per C5's own text they discharge no C-requirement and are retained for redundancy. The suite version under C10 is the sha-256 digest of this file as served, which this file cannot contain.

The entries

Show
Suite entries with kind, inputs, and requirements exercised
EntryKindExercises
run-0001/run-0001-as-publishedstandards/aef/examples/run-0001/aer.json, standards/aef/examples/run-0001/declaration.json, standards/aef/examples/run-0001/options.jsonpinned1200/V1, 1200/V2, 1200/V5, 1200/V6, 1200/V7, 1200/V17, 1200/V18, 1200/V54
run-0001/run-0001-tampered isolates seal-integritystandards/aef/examples/run-0001/aer.tampered.json, standards/aef/examples/run-0001/declaration.json, standards/aef/examples/run-0001/options.jsonpinned, fails1200/V8, 1200/V9
run-0001/run-0001-no-declarationstandards/aef/examples/run-0001/aer.json, standards/aef/examples/run-0001/options.jsonpinned1200/V4, 1200/V36, 1200/V43
run-0001/run-0001-no-artifactsstandards/aef/examples/run-0001/aer.json, standards/aef/examples/run-0001/declaration.json, standards/aef/examples/run-0001/options.noartifacts.jsonpinned1200/V41
core-0001/core-well-formedstandards/aef/examples/core-0001/aer.json, standards/aef/examples/core-0001/declaration.json, standards/aef/examples/core-0001/options.jsonpinned1200/V2, 1200/V6, 1200/V7, 1300/R4, 1300/R6
core-0001/core-rtf-flipped isolates seal-integritystandards/aef/examples/core-0001/aer.rtf-flipped.json, standards/aef/examples/core-0001/declaration.json, standards/aef/examples/core-0001/options.jsonpinned, fails1200/V8, 1200/V9
core-0001/core-rtf-chain-broken isolates orderingstandards/aef/examples/core-0001/aer.rtf-chain-broken.json, standards/aef/examples/core-0001/declaration.json, standards/aef/examples/core-0001/options.jsonpinned, fails1200/V21, 1200/V22
core-0001/core-rtf-out-of-scope isolates scope-membershipstandards/aef/examples/core-0001/aer.rtf-out-of-scope.json, standards/aef/examples/core-0001/declaration.json, standards/aef/examples/core-0001/options.jsonpinned, fails1200/V15
core-0001/core-rtf-truncated isolates terminationstandards/aef/examples/core-0001/aer.rtf-truncated.json, standards/aef/examples/core-0001/declaration.json, standards/aef/examples/core-0001/options.jsonpinned, fails1200/V44, 1300/R12, 1300/R13
core-0001/core-rtf-late-capture isolates timestandards/aef/examples/core-0001/aer.rtf-late-capture.json, standards/aef/examples/core-0001/declaration.json, standards/aef/examples/core-0001/options.jsonpinned, fails1200/V26
core-0001/core-rtf-declaration-mismatch isolates declaration-bindingstandards/aef/examples/core-0001/aer.json, standards/aef/examples/core-0001/declaration.rtf-mismatch.json, standards/aef/examples/core-0001/options.jsonpinned, fails1200/V43, 1300/R14
core-0001/core-rtf-artifact-mismatch isolates artifact-bindingstandards/aef/examples/core-0001/aer.rtf-artifact-mismatch.json, standards/aef/examples/core-0001/declaration.json, standards/aef/examples/core-0001/options.artifacts.jsonpinned, fails1200/V18, 1200/V19
core-0001/core-declared-element-absent isolates declared-elementsstandards/aef/examples/core-0001/aer.declared-element-absent.json, standards/aef/examples/core-0001/declaration.json, standards/aef/examples/core-0001/options.jsonpinned1200/V16
core-0001/core-roles-empty isolates role-disclosurestandards/aef/examples/core-0001/aer.roles-empty.json, standards/aef/examples/core-0001/declaration.json, standards/aef/examples/core-0001/options.jsonpinned1200/V30, 1200/V31
core-0001/core-rtf-trust-base-mismatch isolates trust-base-referencestandards/aef/examples/core-0001/aer.rtf-trust-base-mismatch.json, standards/aef/examples/core-0001/declaration.json, standards/aef/examples/core-0001/options.jsonpinned1200/V37
approval-0001/approval-workedstandards/aef/examples/approval-0001/aer.json, standards/aef/examples/approval-0001/declaration.json, standards/aef/examples/approval-0001/acceptance.json, standards/aef/examples/approval-0001/options.jsonpinned1200/V27, 1200/V45, 1200/V46, 1200/V47, 1200/V48, 1301/A3, 1301/A7
approval-0001/approval-acceptance-withheldstandards/aef/examples/approval-0001/aer.json, standards/aef/examples/approval-0001/declaration.json, standards/aef/examples/approval-0001/options.jsonpinned1200/V48, 1301/A2
approval-0001/approval-rtf-referent-mismatch isolates approval-bindingstandards/aef/examples/approval-0001/aer.rtf-referent-mismatch.json, standards/aef/examples/approval-0001/declaration.json, standards/aef/examples/approval-0001/options.jsonpinned, fails1200/V45
approval-0001/approval-rtf-relation-mismatch isolates approval-relationstandards/aef/examples/approval-0001/aer.rtf-relation-mismatch.json, standards/aef/examples/approval-0001/declaration.json, standards/aef/examples/approval-0001/options.jsonpinned, fails1200/V46
approval-0001/approval-rtf-authorization-postdates isolates approval-timingstandards/aef/examples/approval-0001/aer.rtf-authorization-postdates.json, standards/aef/examples/approval-0001/declaration.json, standards/aef/examples/approval-0001/options.jsonpinned, fails1200/V47
approval-0001/approval-rtf-malformed isolates approval-formstandards/aef/examples/approval-0001/aer.rtf-malformed-approval.json, standards/aef/examples/approval-0001/declaration.json, standards/aef/examples/approval-0001/options.jsonpinned, fails1200/V27
approval-0001/approval-rtf-acceptance-in-recordstandards/aef/examples/approval-0001/aer.rtf-acceptance-in-record.json, standards/aef/examples/approval-0001/declaration.json, standards/aef/examples/approval-0001/options.jsonpinned, fails1200/V27, 1301/A2
approval-0001/approval-rtf-required-absentstandards/aef/examples/approval-0001/aer.rtf-approval-required-absent.json, standards/aef/examples/approval-0001/declaration.json, standards/aef/examples/approval-0001/options.jsonpinned, fails1200/V29
approval-0001/acceptance-rtf-referent-mismatch isolates acceptance-bindingstandards/aef/examples/approval-0001/aer.json, standards/aef/examples/approval-0001/declaration.json, standards/aef/examples/approval-0001/acceptance.rtf-referent-mismatch.json, standards/aef/examples/approval-0001/options.jsonpinned, fails1200/V48
approval-0001/acceptance-rtf-relation-mismatchstandards/aef/examples/approval-0001/aer.json, standards/aef/examples/approval-0001/declaration.json, standards/aef/examples/approval-0001/acceptance.rtf-relation-mismatch.json, standards/aef/examples/approval-0001/options.jsonpinned, fails1200/V48, 1301/A10
approval-0001/approval-selfapprovedstandards/aef/examples/approval-0001/aer.selfapproved.json, standards/aef/examples/approval-0001/declaration.selfapproved.json, standards/aef/examples/approval-0001/options.jsonpinned1200/V30, 1301/A9
approval-0001/approval-r24-formstandards/aef/examples/approval-0001/aer.r24-form-approval.json, standards/aef/examples/approval-0001/declaration.json, standards/aef/examples/approval-0001/options.jsonpinned1200/V27
anchor-0001/anchor-workedstandards/aef/examples/anchor-0001/aer.json, standards/aef/examples/anchor-0001/declaration.json, standards/aef/examples/anchor-0001/options.jsonpinned1200/V49, 1200/V50, 1200/V51, 1400/T1, 1400/T2, 1400/T6
anchor-0001/anchor-rtf-digest-mismatch isolates anchor-formstandards/aef/examples/anchor-0001/aer.rtf-anchor-digest-mismatch.json, standards/aef/examples/anchor-0001/declaration.json, standards/aef/examples/anchor-0001/options.jsonpinned, fails1200/V49
anchor-0001/anchor-late-declarationstandards/aef/examples/anchor-0001/aer.late-decl-anchor.json, standards/aef/examples/anchor-0001/declaration.late-anchor.json, standards/aef/examples/anchor-0001/options.jsonpinned1200/V50, 1400/T6
anchor-0001/anchor-latency-exceeded isolates seal-latencystandards/aef/examples/anchor-0001/aer.latency-exceeded.json, standards/aef/examples/anchor-0001/declaration.tight-latency.json, standards/aef/examples/anchor-0001/options.jsonpinned1200/V25, 1200/V51, 1400/T8
anchor-0001/anchor-renewal-heldstandards/aef/examples/anchor-0001/aer.json, standards/aef/examples/anchor-0001/declaration.json, standards/aef/examples/anchor-0001/renewal.json, standards/aef/examples/anchor-0001/options.jsonpinned1200/V52, 1400/T10
anchor-0001/anchor-rtf-renewal-mismatch isolates anchor-renewalstandards/aef/examples/anchor-0001/aer.json, standards/aef/examples/anchor-0001/declaration.json, standards/aef/examples/anchor-0001/renewal.rtf-mismatch.json, standards/aef/examples/anchor-0001/options.jsonpinned, fails1200/V52, 1400/T10
anchor-0001/anchor-v35-first-casestandards/aef/examples/anchor-0001/aer.json, standards/aef/examples/anchor-0001/declaration.json, standards/aef/examples/anchor-0001/deprecations.json, standards/aef/examples/anchor-0001/options.jsonpinned1200/V35, 1400/T11
anchor-0001/anchor-v35-second-casestandards/aef/examples/anchor-0001/aer.latency-exceeded.json, standards/aef/examples/anchor-0001/declaration.tight-latency.json, standards/aef/examples/anchor-0001/deprecations.json, standards/aef/examples/anchor-0001/options.jsonpinned1200/V35, 1400/T11
anchor-0001/anchor-renewal-extends-chainstandards/aef/examples/anchor-0001/aer.json, standards/aef/examples/anchor-0001/declaration.json, standards/aef/examples/anchor-0001/renewal.json, standards/aef/examples/anchor-0001/deprecations.json, standards/aef/examples/anchor-0001/options.jsonpinned1200/V35, 1400/T11
form-0002/form-v2-workedstandards/aef/examples/form-0002/aer.json, standards/aef/examples/form-0002/declaration.json, standards/aef/examples/form-0002/options.jsonpinned1200/V53, 1300/R2, 1300/R6
form-0002/form-supersedesstandards/aef/examples/form-0002/aer.supersedes-run-0001.json, standards/aef/examples/form-0002/declaration.json, standards/aef/examples/form-0002/options.jsonpinned1200/V53, 1300/R27
form-0002/form-rtf-sealedat-tamperedstandards/aef/examples/form-0002/aer.rtf-sealedat-tampered.json, standards/aef/examples/form-0002/declaration.json, standards/aef/examples/form-0002/options.jsonpinned, fails1200/V8, 1300/R6
form-0002/form-rtf-anchor-strippedstandards/aef/examples/form-0002/aer.rtf-anchor-stripped.json, standards/aef/examples/form-0002/declaration.json, standards/aef/examples/form-0002/options.jsonpinned, fails1200/V8, 1300/R6
form-0002/form-rtf-approval-unknown-memberstandards/aef/examples/form-0002/aer.rtf-approval-unknown-member.json, standards/aef/examples/form-0002/declaration.json, standards/aef/examples/form-0002/options.jsonpinned, fails1200/V27, 1300/R24
form-0002/form-rtf-unknown-versionstandards/aef/examples/form-0002/aer.rtf-unknown-version.json, standards/aef/examples/form-0002/declaration.json, standards/aef/examples/form-0002/options.jsonpinned1200/V36, 1200/V53
form-0002/form-rtf-missing-supersedes isolates record-formstandards/aef/examples/form-0002/aer.rtf-missing-supersedes.json, standards/aef/examples/form-0002/declaration.json, standards/aef/examples/form-0002/options.jsonpinned, fails1200/V53, 1300/R1, 1300/R27
canonical form sorts object keysgenerated
canonical form is stable across key insertion ordergenerated
REQUIRED TO FAIL: non-integer numbers are rejectedgenerated, fails
REQUIRED TO FAIL: undefined is rejected rather than droppedgenerated, fails
a well-formed record passes with qualificationsgenerated
REQUIRED TO FAIL: one flipped byte anywhere in the recordgenerated, fails
REQUIRED TO FAIL: a broken act log chaingenerated, fails
REQUIRED TO FAIL: an act outside the declared boundarygenerated, fails
REQUIRED TO FAIL: truncation, with no closing entrygenerated, fails
REQUIRED TO FAIL: a capture time after the seal timegenerated, fails
REQUIRED TO FAIL: a declaration that does not match the recordgenerated, fails
REQUIRED TO FAIL: an output artifact that does not match its digestgenerated, fails
a fatal check that cannot run yields INCONCLUSIVE, not FAIL and not PASSgenerated
V6: PASS is never emitted alongside a qualificationgenerated
V7: every emitted qualification carries a registry classgenerated
V5: the negative claims block is present and non-emptygenerated
V42: no conclusion-bearing field describes a result as certified, guaranteed, proven, or assuredgenerated
V10: the key binding reports which of identity or continuity was achievedgenerated
the published example record verifies as shippedgenerated
REQUIRED TO FAIL: the published tampered copygenerated, fails
the published verification result matches what the verifier produces nowgenerated
a reviewer holding only the record, with no artifacts, still gets a usable outcomegenerated
approval-0001: authorization plus acceptance verifies, full set re-pinned under AEF 1300 v0.2's margin qualificationgenerated
approval-0001: with the acceptance withheld, ACCEPTANCE-ABSENT is qualified, never fatalgenerated
REQUIRED TO FAIL: an authorization whose referent is not this record's declarationgenerated, fails
REQUIRED TO FAIL: a relation declared distinct under the operator's own keygenerated, fails
REQUIRED TO FAIL: an authorization that postdates the first captured actgenerated, fails
REQUIRED TO FAIL: an approval record with no type membergenerated, fails
REQUIRED TO FAIL: an acceptance placed inside the record it would acceptgenerated, fails
REQUIRED TO FAIL: approval required by the declaration and absent from the recordgenerated, fails
REQUIRED TO FAIL: an acceptance over some other record's digestgenerated, fails
REQUIRED TO FAIL: an acceptance declared distinct under the operator's own keygenerated, fails
approval-0001: the self-approved record emits APPROVAL-IS-SELF-ASSERTION exactly once, full set re-pinned under AEF 1300 v0.2generated
approval-0001: an R24-form approval verifies in the 1300/0.1 record that carries it, challenge-0003 resolvedgenerated
run-0001: the published record's full qualification set, re-pinned under AEF 1300 v0.2's margin qualificationgenerated
anchor-0001: an anchored declaration and record verify, full set re-pinned under AEF 1300 v0.2generated
REQUIRED TO FAIL: anchor evidence binding a different digest than the sealed bytesgenerated, fails
anchor-0001: a late declaration anchor leaves the before-relation not established, reported and not fatalgenerated
anchor-0001: a latency exceedance is a finding inside a declared boundary, not a failure of the recordgenerated
anchor-0001: a renewal binding this record's digest is held, with its proof honestly unverifiedgenerated
REQUIRED TO FAIL: a renewal over some other record's digestgenerated, fails
anchor-0001: V35 first case, an anchor predating the deprecation bounds the exposuregenerated
anchor-0001: V35 second case, an unanchored seal cannot be placed before the breakgenerated
anchor-0001: a renewal predating the deprecation, under undeprecated algorithms, extends the chaingenerated
form-0002: a v0.2 record verifies with no unauthenticated-margin qualification, full set pinnedgenerated
form-0002: the supersession member is reported, by canonical identity digestgenerated
REQUIRED TO FAIL: a v0.2 seal time rewritten after sealinggenerated, fails
REQUIRED TO FAIL: a v0.2 anchor stripped after sealinggenerated, fails
REQUIRED TO FAIL: an unknown member inside a v0.2 approval recordgenerated, fails
form-0002: an unknown record form is reported, not guessed at, and nothing else is checkedgenerated
REQUIRED TO FAIL: a v0.2 record without the supersedes member its form fixesgenerated, fails

Requirement coverage: 54 requirements of 1200/0.2

Asserted (36)

V2, V4, V5, V6, V7, V8, V9, V10, V14, V15, V16, V18, V19, V21, V24, V26, V27, V29, V30, V31, V35, V36, V37, V41, V42, V43, V44, V45, V46, V47, V48, V49, V51, V52, V53, V54

Asserted in part (5)

Requirements asserted in part, with what remains unasserted
V1the result form's outcome, checks, qualifications, failed check, and self-test members are asserted; the full AEF 1101 section 11 member list is not asserted as a set
V11asserted for the none mechanism only; x509, certificate-transparency, key-transparency, and pin remain unexercised
V13one of five mechanisms exercised; the revocation and inclusion-proof branches are expressible under v0.2's restatement and remain unimplemented
V25the qualification's conditional emission is pinned in both directions; the reported interval value is not asserted
V50the not-established branch is pinned by class; the established branch is exercised by the anchor-worked fixture without asserting the check's held status directly

Occurs unasserted (5)

The condition arises on every suite run and no test asserts it. A verifier that silently stopped satisfying any of these would still pass the suite.

V3, V17, V20, V23, V28

Never arises (3)

V32, V33, and V34 await re-verification comparison against an earlier result, which the verifier does not implement; no fixture can produce the condition.

V32, V33, V34

Not fixture-checkable (4)

Per AEF 1200 section 14: V12, V38, and V39 are checked by inspecting the verifier, and V40 is the document's one requirement on judgment.

V12, V38, V39, V40

Scoped unproducible (1)

V22 v0.2 scopes ORDER-UNCHAINED to record forms that do not require chaining, of which none exist, per resolution-0001; the condition is unproducible by any conformant input until such a form does.

V22

Required to fail, and isolation

Counting pinned fixtures only, per C5.

Every check that can fail has a failing fixture. Checks that cannot fail by construction: key-binding, anchor-ordering, algorithm-standing. These checks report and decide nothing: their status vocabulary contains no failed state, so C7's obligation, which binds every check that can fail, does not arise for them.

All 15 fatal-capable checks have isolating fixtures. An isolating fixture fails exactly its check and no other fatal check, asserted by exact fatal-failure-set comparison.

Every pinned fixture pins its complete expected qualification set by registry class, its exact fatal and non-fatal failure sets, its outcome, and its first failing check (C6).

Retired expectations (5)

Under AEF 1201 C12 a retirement keeps the entry's identity and records why the pinned expectation no longer binds:

approval-0001: authorization plus acceptance verifies, with its full qualification set pinned by class (14 August 2026)

Retired expectation: PASS_WITH_QUALIFICATIONS with the twelve-class set that predates UNAUTHENTICATED-SEAL-MARGIN

expectation superseded, not wrong: AEF 1300 v0.2's margin qualification joins every v0.1-form result; re-pinned under the same inputs with the thirteen-class set

approval-0001: the self-approved record emits APPROVAL-IS-SELF-ASSERTION exactly once, with its full qualification set pinned by class (14 August 2026)

Retired expectation: PASS_WITH_QUALIFICATIONS with the twelve-class set that predates UNAUTHENTICATED-SEAL-MARGIN

expectation superseded, not wrong: the margin qualification joins every v0.1-form result; re-pinned with the thirteen-class set

anchor-0001: an anchored declaration and record verify, with the full qualification set pinned by class (14 August 2026)

Retired expectation: PASS_WITH_QUALIFICATIONS with the twelve-class set that predates UNAUTHENTICATED-SEAL-MARGIN

expectation superseded, not wrong: the margin qualification joins every v0.1-form result; re-pinned with the thirteen-class set

run-0001: the published record's full qualification set, pinned by class (14 August 2026)

Retired expectation: PASS_WITH_QUALIFICATIONS with the eleven-class set that predates UNAUTHENTICATED-SEAL-MARGIN

expectation superseded, not wrong: the margin qualification joins every v0.1-form result; re-pinned with the twelve-class set

REQUIRED TO FAIL: an approval record with no type member (as a missing-discriminator failure of the A3 form) (14 August 2026)

Retired expectation: FAIL at approval-form because the type member is required of every approval

expectation ruled wrong by resolution-0003: a bare R24-form approval is form-conformant in a 1300/0.1 record; the fixture that carried A3 members with the type stripped keeps its FAIL under the any-distinguishing-member rule, and the bare three-member input is re-pinned as passing with APPROVAL-SEMANTICS-UNEVALUATED

The suite's own standing

The declaration records 0 failures against AEF 1201's requirements. The list is empty for the first time, and emptiness means exactly this: no requirement of AEF 1201 that binds this suite, this coverage declaration, or this verifier's self-test is known to be unmet. It is not a statement of suite adequacy, which AEF 1201 section 4 states cannot be established, and the reference-implementation gaps against AEF 1200 itself are listed inside the conformance claim, where C1 puts them. The conformance claim's standing:

Conformance claim 0001 is published at /aef/conformance-claim-0001.json, per C1 through C4: partial, with the requirements still failed or unexercised listed inside it.