{
  "id": "62807487-5c56-468e-b68b-e3f3d53d542f",
  "created_at": "2026-08-19T01:05:06.33509+00:00",
  "evidence": {
    "key_id": "bkc-cert-20260819-2965e7",
    "metrics": {
      "steps_total": 45,
      "steps_failed": 6,
      "avg_scenario_ms": 3925,
      "scenarios_total": 3,
      "scenarios_passed": 0,
      "rate_limit_triggered": 3,
      "tampering_all_not_verified": true
    },
    "outcome": "FAIL",
    "trigger": "scheduler",
    "scenarios": [
      {
        "label": "Baseline DMARC quarantine + provider OK",
        "run_id": "a28db230-c921-4c65-8cff-79fe67e711c7",
        "latency": {
          "total_ms": 3446,
          "slowest_ms": 1184,
          "slowest_step": "rate_limit"
        },
        "outcome": "FAIL",
        "sequence": [
          {
            "step": "issue",
            "label": "ISSUED",
            "status": "PASS",
            "duration_ms": 159
          },
          {
            "step": "sign",
            "label": "SIGNED",
            "status": "PASS",
            "duration_ms": 145
          },
          {
            "step": "deliver",
            "label": "SENT",
            "status": "PASS",
            "duration_ms": 354
          },
          {
            "step": "provider",
            "label": "PROVIDER EVENT",
            "status": "PASS",
            "duration_ms": 503
          },
          {
            "step": "audit",
            "label": "AUDIT SEALED",
            "status": "PASS",
            "duration_ms": 83
          },
          {
            "step": "verify_public",
            "label": "PUBLIC VERIFY",
            "status": "PASS",
            "duration_ms": 116
          },
          {
            "step": "verify_offline",
            "label": "OFFLINE VERIFY",
            "status": "PASS",
            "duration_ms": 3
          },
          {
            "step": "rotate",
            "label": "KEY ROTATION",
            "status": "PASS",
            "duration_ms": 284
          },
          {
            "step": "verify_historic",
            "label": "HISTORIC VERIFY",
            "status": "PASS",
            "duration_ms": 76
          },
          {
            "step": "revoke",
            "label": "REVOKED",
            "status": "PASS",
            "duration_ms": 83
          },
          {
            "step": "verify_revoked",
            "label": "POST-REVOKE VERIFY",
            "status": "FAIL",
            "duration_ms": 76
          },
          {
            "step": "tamper",
            "label": "TAMPERING → NOT_VERIFIED",
            "status": "PASS",
            "duration_ms": 12
          },
          {
            "step": "rate_limit",
            "label": "RATE LIMIT",
            "status": "PASS",
            "duration_ms": 1184
          },
          {
            "step": "signed_report",
            "label": "SIGNED REPORT",
            "status": "FAIL",
            "duration_ms": 160
          },
          {
            "step": "promotion",
            "label": "PROMOTION PREPROD → PRODUCTION",
            "status": "PASS",
            "duration_ms": 208
          }
        ],
        "verdicts": {
          "tampering": "5/5 NOT_VERIFIED",
          "post_revoke": "NOT_VERIFIED + contenuto redatto",
          "public_verify": "VALID"
        },
        "proof_ref": "BKC-TEST-20260819-8AF201AC",
        "dmarc_phase": "quarantine",
        "duration_ms": 4041,
        "failed_steps": [
          {
            "step": "verify_revoked",
            "label": "Verifica dopo la revoca",
            "detail": "Collaudo pre-produzione: revoca simulata",
            "observed": "NOT_VERIFIED + contenuto redatto"
          },
          {
            "step": "signed_report",
            "label": "Report di verifica firmato",
            "detail": "Marcato environment=staging: non confondibile con la produzione",
            "observed": "NOT_VERIFIED · report firmato con bkc-cert-20260819-2965e7"
          }
        ],
        "verify_token": "2b25200786c83c392c012d462a1eb4977c709fbc32b81bff",
        "missing_steps": [],
        "provider_mode": "ok",
        "scenarioIndex": 0,
        "rate_limit_triggered_at": 16
      },
      {
        "label": "DMARC none + provider in retry",
        "run_id": "88ba77a6-052d-4529-9eab-ab6d0112507c",
        "latency": {
          "total_ms": 3591,
          "slowest_ms": 1440,
          "slowest_step": "rate_limit"
        },
        "outcome": "FAIL",
        "sequence": [
          {
            "step": "issue",
            "label": "ISSUED",
            "status": "PASS",
            "duration_ms": 148
          },
          {
            "step": "sign",
            "label": "SIGNED",
            "status": "PASS",
            "duration_ms": 143
          },
          {
            "step": "deliver",
            "label": "SENT",
            "status": "PASS",
            "duration_ms": 365
          },
          {
            "step": "provider",
            "label": "PROVIDER EVENT",
            "status": "PASS",
            "duration_ms": 424
          },
          {
            "step": "audit",
            "label": "AUDIT SEALED",
            "status": "PASS",
            "duration_ms": 73
          },
          {
            "step": "verify_public",
            "label": "PUBLIC VERIFY",
            "status": "PASS",
            "duration_ms": 71
          },
          {
            "step": "verify_offline",
            "label": "OFFLINE VERIFY",
            "status": "PASS",
            "duration_ms": 2
          },
          {
            "step": "rotate",
            "label": "KEY ROTATION",
            "status": "PASS",
            "duration_ms": 300
          },
          {
            "step": "verify_historic",
            "label": "HISTORIC VERIFY",
            "status": "PASS",
            "duration_ms": 81
          },
          {
            "step": "revoke",
            "label": "REVOKED",
            "status": "PASS",
            "duration_ms": 75
          },
          {
            "step": "verify_revoked",
            "label": "POST-REVOKE VERIFY",
            "status": "FAIL",
            "duration_ms": 79
          },
          {
            "step": "tamper",
            "label": "TAMPERING → NOT_VERIFIED",
            "status": "PASS",
            "duration_ms": 12
          },
          {
            "step": "rate_limit",
            "label": "RATE LIMIT",
            "status": "PASS",
            "duration_ms": 1440
          },
          {
            "step": "signed_report",
            "label": "SIGNED REPORT",
            "status": "FAIL",
            "duration_ms": 169
          },
          {
            "step": "promotion",
            "label": "PROMOTION PREPROD → PRODUCTION",
            "status": "PASS",
            "duration_ms": 209
          }
        ],
        "verdicts": {
          "tampering": "5/5 NOT_VERIFIED",
          "post_revoke": "NOT_VERIFIED + contenuto redatto",
          "public_verify": "VALID"
        },
        "proof_ref": "BKC-TEST-20260819-A3C4C4F1",
        "dmarc_phase": "none",
        "duration_ms": 4011,
        "failed_steps": [
          {
            "step": "verify_revoked",
            "label": "Verifica dopo la revoca",
            "detail": "Collaudo pre-produzione: revoca simulata",
            "observed": "NOT_VERIFIED + contenuto redatto"
          },
          {
            "step": "signed_report",
            "label": "Report di verifica firmato",
            "detail": "Marcato environment=staging: non confondibile con la produzione",
            "observed": "NOT_VERIFIED · report firmato con bkc-cert-20260819-2965e7"
          }
        ],
        "verify_token": "c2c70100cb90e496e92983ca78e52921a5ad8fe565765b3d",
        "missing_steps": [],
        "provider_mode": "retry",
        "scenarioIndex": 1,
        "rate_limit_triggered_at": 16
      },
      {
        "label": "DMARC reject + provider in errore permanente",
        "run_id": "6ea4bd60-332c-45c5-a19c-b67a264625e5",
        "latency": {
          "total_ms": 3294,
          "slowest_ms": 1153,
          "slowest_step": "rate_limit"
        },
        "outcome": "FAIL",
        "sequence": [
          {
            "step": "issue",
            "label": "ISSUED",
            "status": "PASS",
            "duration_ms": 161
          },
          {
            "step": "sign",
            "label": "SIGNED",
            "status": "PASS",
            "duration_ms": 141
          },
          {
            "step": "deliver",
            "label": "SENT",
            "status": "PASS",
            "duration_ms": 362
          },
          {
            "step": "provider",
            "label": "PROVIDER EVENT",
            "status": "PASS",
            "duration_ms": 428
          },
          {
            "step": "audit",
            "label": "AUDIT SEALED",
            "status": "PASS",
            "duration_ms": 72
          },
          {
            "step": "verify_public",
            "label": "PUBLIC VERIFY",
            "status": "PASS",
            "duration_ms": 72
          },
          {
            "step": "verify_offline",
            "label": "OFFLINE VERIFY",
            "status": "PASS",
            "duration_ms": 2
          },
          {
            "step": "rotate",
            "label": "KEY ROTATION",
            "status": "PASS",
            "duration_ms": 295
          },
          {
            "step": "verify_historic",
            "label": "HISTORIC VERIFY",
            "status": "PASS",
            "duration_ms": 91
          },
          {
            "step": "revoke",
            "label": "REVOKED",
            "status": "PASS",
            "duration_ms": 68
          },
          {
            "step": "verify_revoked",
            "label": "POST-REVOKE VERIFY",
            "status": "FAIL",
            "duration_ms": 78
          },
          {
            "step": "tamper",
            "label": "TAMPERING → NOT_VERIFIED",
            "status": "PASS",
            "duration_ms": 15
          },
          {
            "step": "rate_limit",
            "label": "RATE LIMIT",
            "status": "PASS",
            "duration_ms": 1153
          },
          {
            "step": "signed_report",
            "label": "SIGNED REPORT",
            "status": "FAIL",
            "duration_ms": 145
          },
          {
            "step": "promotion",
            "label": "PROMOTION PREPROD → PRODUCTION",
            "status": "PASS",
            "duration_ms": 211
          }
        ],
        "verdicts": {
          "tampering": "5/5 NOT_VERIFIED",
          "post_revoke": "NOT_VERIFIED + contenuto redatto",
          "public_verify": "VALID"
        },
        "proof_ref": "BKC-TEST-20260819-6058E4C5",
        "dmarc_phase": "reject",
        "duration_ms": 3724,
        "failed_steps": [
          {
            "step": "verify_revoked",
            "label": "Verifica dopo la revoca",
            "detail": "Collaudo pre-produzione: revoca simulata",
            "observed": "NOT_VERIFIED + contenuto redatto"
          },
          {
            "step": "signed_report",
            "label": "Report di verifica firmato",
            "detail": "Marcato environment=staging: non confondibile con la produzione",
            "observed": "NOT_VERIFIED · report firmato con bkc-cert-20260819-2965e7"
          }
        ],
        "verify_token": "1d317e9699d7c0616ac29fb53cded66ba80b33f9ec59d166",
        "missing_steps": [],
        "provider_mode": "hard_fail",
        "scenarioIndex": 2,
        "rate_limit_triggered_at": 16
      }
    ],
    "legal_note": "La verifica crittografica dimostra integrità e sequenza degli eventi. Non equivale a una certificazione legale in nessuna giurisdizione.",
    "environment": "staging",
    "report_hash": "1781f65591ed07029d98b30307be35489e4d49b5ec1dc670efd6a7bf2e568336",
    "completed_at": "2026-08-19T01:05:06.212Z",
    "gate_version": "bkc-release-gate/1.0",
    "generated_at": "2026-08-19T01:04:54.435Z",
    "signature_alg": "ECDSA_P256_SHA256",
    "promotion_ready": false,
    "report_signature": "ecdsa-p256-sha256:f25bd5b44d88b5fe4b0f1361c381b8518ae914105df18c3ef57f808afdc140a2290961b7aa184d9a7511228b468158ad38905d6fce201cf3ab8f156271eeeadc",
    "required_sequence": [
      {
        "step": "issue",
        "label": "ISSUED"
      },
      {
        "step": "sign",
        "label": "SIGNED"
      },
      {
        "step": "deliver",
        "label": "SENT"
      },
      {
        "step": "provider",
        "label": "PROVIDER EVENT"
      },
      {
        "step": "audit",
        "label": "AUDIT SEALED"
      },
      {
        "step": "verify_public",
        "label": "PUBLIC VERIFY"
      },
      {
        "step": "verify_offline",
        "label": "OFFLINE VERIFY"
      },
      {
        "step": "rotate",
        "label": "KEY ROTATION"
      },
      {
        "step": "verify_historic",
        "label": "HISTORIC VERIFY"
      },
      {
        "step": "revoke",
        "label": "REVOKED"
      },
      {
        "step": "verify_revoked",
        "label": "POST-REVOKE VERIFY"
      },
      {
        "step": "tamper",
        "label": "TAMPERING → NOT_VERIFIED"
      },
      {
        "step": "rate_limit",
        "label": "RATE LIMIT"
      },
      {
        "step": "signed_report",
        "label": "SIGNED REPORT"
      },
      {
        "step": "promotion",
        "label": "PROMOTION PREPROD → PRODUCTION"
      }
    ],
    "environment_notice": "EVIDENZA DI PREPRODUZIONE. I pacchetti sono marcati BKC-TEST-*, firmati con chiavi bkc-test-* e non costituiscono prove di produzione né certificazioni legali.",
    "protocol_invariants": {
      "verdicts": [
        "VALID",
        "REVOKED",
        "NOT_VERIFIED"
      ],
      "signature_alg": "ECDSA_P256_SHA256",
      "schema_version": "bkc-certified/1.1",
      "audit_semantics": [
        "proof.issued",
        "message.sent",
        "delivery.confirmed",
        "delivery.deferred",
        "delivery.retry",
        "delivery.failed",
        "verified.viewed",
        "verified.blocked"
      ],
      "revocation_policy": "revoke_redacts_never_deletes",
      "verification_rules": [
        "manifest_hash",
        "content_hash",
        "attachments_hash",
        "recipients",
        "mail_config_hash",
        "subject_hash",
        "delivery_status",
        "compliance_hash",
        "schema_version",
        "manifest_signature",
        "event_chain_linkage",
        "event_entry_hash",
        "chain_seal"
      ]
    }
  }
}