{
  "record": {
    "schema": "dev.trustshell.action-evidence/0.1-draft",
    "observation": {
      "platform": "github-actions",
      "host": "api.github.com",
      "url": "https://github.com/DealAppSeo/trustshell/actions/runs/39619591025",
      "owner": "DealAppSeo",
      "repo": "trustshell",
      "run_id": 39619591025,
      "run_attempt": 1,
      "workflow": {
        "name": "check",
        "path": ".github/workflows/check.yml"
      },
      "head_sha": "392797a69b6a3e57406cef210a8471585667e3af",
      "status": "completed",
      "conclusion": "success",
      "check": {
        "verdict": "COMPLETE",
        "results": [
          {
            "ok": true,
            "label": "A workflow run with this id exists",
            "detail": "check · completed"
          },
          {
            "ok": true,
            "label": "The run finished",
            "detail": "status: completed"
          },
          {
            "ok": true,
            "label": "The run succeeded",
            "detail": "GitHub reports conclusion: success"
          },
          {
            "ok": true,
            "label": "Every job in the run passed",
            "detail": "1 job"
          },
          {
            "ok": true,
            "label": "The commit exists on the remote",
            "detail": "392797a69b6a3e57406cef210a8471585667e3af"
          }
        ]
      },
      "jobs": {
        "http_status": 200,
        "total": 1,
        "items": [
          {
            "name": "check",
            "status": "completed",
            "conclusion": "success",
            "head_sha": "392797a69b6a3e57406cef210a8471585667e3af",
            "run_attempt": 1
          }
        ]
      },
      "fetchedAt": "2026-10-22T05:14:10.035Z",
      "freshness": "LIVE"
    },
    "claims": [
      {
        "claim": "The check workflow succeeded",
        "sentence": "The check workflow succeeded, run 39619591025.",
        "template": "gha.run_succeeded",
        "status": "SUPPORTED",
        "evidence_fields": [
          "/observation/status",
          "/observation/conclusion",
          "/observation/check/verdict",
          "/observation/jobs"
        ],
        "scope": "Whether workflow run 39619591025 (attempt 1, commit 392797a69b6a) concluded success with every job read. Not which tests it ran, not any other workflow or check on the commit, and not whether the change works.",
        "reason": "GitHub reports conclusion \"success\" for run 39619591025 (attempt 1, commit 392797a69b6a); 1 of 1 job concluded success. The line cites this run."
      },
      {
        "claim": "run 39619591025",
        "sentence": "The check workflow succeeded, run 39619591025.",
        "template": "gha.run_id",
        "status": "SUPPORTED",
        "evidence_fields": [
          "/observation/owner",
          "/observation/repo",
          "/observation/run_id"
        ],
        "scope": "Run identity only: whether the run this claim cites is the inspected run. Not what the run shows.",
        "reason": "The cited run is the inspected run, 39619591025."
      },
      {
        "claim": "The check workflow succeeded",
        "sentence": "The check workflow succeeded on commit 5d1c5e3f57e1, run 39619591025.",
        "template": "gha.run_succeeded",
        "status": "NOT_CHECKED",
        "evidence_fields": [],
        "scope": "Not compared: nothing ties this claim to the inspected run.",
        "reason": "This sentence cites a commit, run or attempt that is not, or could not be matched to, the inspected run, so its outcome claims are not compared with this run."
      },
      {
        "claim": "commit 5d1c5e3f57e1",
        "sentence": "The check workflow succeeded on commit 5d1c5e3f57e1, run 39619591025.",
        "template": "git.head_sha",
        "status": "CONTRADICTED",
        "evidence_fields": [
          "/observation/head_sha"
        ],
        "scope": "Commit identity only: whether the commit this claim cites is the one the inspected run ran on. A SHA is matched as a prefix, and a match supports only at 12 or more hex characters. Not what the commit changes or fixes.",
        "reason": "The claim cites commit 5d1c5e3f57e1; the inspected run is on 392797a69b6a."
      },
      {
        "claim": "run 39619591025",
        "sentence": "The check workflow succeeded on commit 5d1c5e3f57e1, run 39619591025.",
        "template": "gha.run_id",
        "status": "SUPPORTED",
        "evidence_fields": [
          "/observation/owner",
          "/observation/repo",
          "/observation/run_id"
        ],
        "scope": "Run identity only: whether the run this claim cites is the inspected run. Not what the run shows.",
        "reason": "The cited run is the inspected run, 39619591025."
      }
    ],
    "assurance": {
      "cryptographic_integrity": "NOT_CHECKED",
      "observation": "PLATFORM_REPORTED"
    },
    "does_not_prove": [
      "This is what GitHub can confirm. It is not a judgement about whether the code is correct.",
      "It cannot show work done outside this repository, or on a branch that was never pushed.",
      "A passing test suite proves the tests that exist passed — not that the right tests exist.",
      "It does not establish who or what authored the change.",
      "SUPPORTED means the platform record matches the narrow scope written next to the claim. It is not a finding that the claim is true in any broader sense.",
      "A successful workflow run shows that run succeeded. It does not show which tests ran, that all tests or all checks passed, or that a change works.",
      "Only this one workflow run was read. Other workflows, check suites and status checks on the same commit were not.",
      "Every observed fact is GitHub reporting on its own run (PLATFORM_REPORTED). Nothing was re-run or independently observed.",
      "Broader security: not checked. A CI conclusion is not a security review.",
      "The record is not signed. Its SHA-256 shows whether the record changed after it was made, not who made it."
    ]
  },
  "digest": {
    "algorithm": "sha-256",
    "canonicalization": "RFC 8785",
    "value": "e45fa23ae111f775c10438d94b56f228cd09cc8f90b10713412029b0aa92bb35"
  }
}