{
  "schema_version": 1,
  "case": "model",
  "sdk_version": "0.3.0",
  "runtime": "ONNX Runtime 1.30.0 / ORT format",
  "verification_environment": "Owned Android emulator and local development service; not a hosted or Play-policy verification.",
  "asset_source": {
    "training": "Generated pen strokes; original reference training program and committed model.",
    "training_source_sha256": "684304f5213c74579de30b957d697badb1ba8c861a7b67ee13795cedd4292b91",
    "onnx_sha256": "2ede616b50c14b2486ead04cf8a34121dcdb85da75441e855e6900e236f31f3d",
    "ort_sha256": "043016160d76d90cf5796812b71d9bc42a3f9e6036d4ef8000c9fbd655e678a7"
  },
  "artifacts": {
    "baseline": {
      "apk_sha256": "425b7c2895794b3606d19d6506868d0fc8ec86253e09f57382db5751acd4c886",
      "apk_bytes": 39811572,
      "plaintext_searches": {
        "digits.onnx": {
          "probes": 256,
          "found": 256
        },
        "digits.ort": {
          "probes": 256,
          "found": 255
        },
        "digits.tflite": {
          "probes": 256,
          "found": 0
        }
      },
      "scan_exit": 1,
      "sealed_assets": [],
      "sealed_sha256": null
    },
    "vault": {
      "apk_sha256": "d070588b5456bf7ce1290817cfc5db202b3d638c456f00d942f19f2dfd350381",
      "apk_bytes": 41363532,
      "plaintext_searches": {
        "digits.onnx": {
          "probes": 256,
          "found": 0
        },
        "digits.ort": {
          "probes": 256,
          "found": 0
        },
        "digits.tflite": {
          "probes": 256,
          "found": 0
        }
      },
      "scan_exit": 0,
      "sealed_assets": [
        "assets/acme-digits/digits.ipva"
      ],
      "sealed_sha256": "dee1d07fff078ded6e3c22222447c858dc092dbdda15f4aef7698cc55c09e1b8"
    }
  },
  "checks": [
    {
      "check": "Minified release packaging",
      "observed": "The plaintext baseline is detected by the same byte searches that find no declared plaintext probes in the protected APK. Its sealed asset is present."
    },
    {
      "check": "Predictions",
      "observed": "Both builds match all 20 reference drawings and their expected probabilities within the comparison tolerance."
    },
    {
      "check": "Installation access",
      "observed": "An activation code the local service never issued is refused; the valid installation opens and runs the model."
    },
    {
      "check": "Offline use",
      "observed": "The protected model opens again and matches all 20 drawings with the service forwarding removed. The test-vector fixture remains reachable."
    }
  ],
  "tools": {
    "scanner": "ipvault 0.3.0",
    "sdk": "0.3.0",
    "sealer": "0.2.2 (format-v1 sealing code is unchanged between v0.2.2 and v0.3.0)"
  },
  "limits": "Active data remains in the app process. No general model-accuracy, memory-wipe, exploit-resistance or capture-prevention claim."
}