{
  "id": "b8cf8439-cac2-4c8c-8945-a1c95366e77f",
  "created_at": "2026-08-19T01:02:19.025612+00:00",
  "evidence": {
    "key_id": "bkc-cert-20260819-2965e7",
    "metrics": {
      "steps_total": 45,
      "steps_failed": 21,
      "avg_scenario_ms": 4071,
      "scenarios_total": 3,
      "scenarios_passed": 0,
      "rate_limit_triggered": 3,
      "tampering_all_not_verified": true
    },
    "outcome": "FAIL",
    "trigger": "scheduler",
    "scenarios": [
      {
        "label": "Baseline DMARC quarantine + provider OK",
        "run_id": "6cf9286b-d585-470c-9aa7-22a9da6381c1",
        "latency": {
          "total_ms": 3446,
          "slowest_ms": 1147,
          "slowest_step": "rate_limit"
        },
        "outcome": "FAIL",
        "sequence": [
          {
            "step": "issue",
            "label": "ISSUED",
            "status": "PASS",
            "duration_ms": 156
          },
          {
            "step": "sign",
            "label": "SIGNED",
            "status": "PASS",
            "duration_ms": 170
          },
          {
            "step": "deliver",
            "label": "SENT",
            "status": "PASS",
            "duration_ms": 411
          },
          {
            "step": "provider",
            "label": "PROVIDER EVENT",
            "status": "PASS",
            "duration_ms": 430
          },
          {
            "step": "audit",
            "label": "AUDIT SEALED",
            "status": "FAIL",
            "duration_ms": 74
          },
          {
            "step": "verify_public",
            "label": "PUBLIC VERIFY",
            "status": "FAIL",
            "duration_ms": 86
          },
          {
            "step": "verify_offline",
            "label": "OFFLINE VERIFY",
            "status": "FAIL",
            "duration_ms": 3
          },
          {
            "step": "rotate",
            "label": "KEY ROTATION",
            "status": "PASS",
            "duration_ms": 285
          },
          {
            "step": "verify_historic",
            "label": "HISTORIC VERIFY",
            "status": "FAIL",
            "duration_ms": 75
          },
          {
            "step": "revoke",
            "label": "REVOKED",
            "status": "PASS",
            "duration_ms": 67
          },
          {
            "step": "verify_revoked",
            "label": "POST-REVOKE VERIFY",
            "status": "FAIL",
            "duration_ms": 88
          },
          {
            "step": "tamper",
            "label": "TAMPERING → NOT_VERIFIED",
            "status": "PASS",
            "duration_ms": 16
          },
          {
            "step": "rate_limit",
            "label": "RATE LIMIT",
            "status": "PASS",
            "duration_ms": 1147
          },
          {
            "step": "signed_report",
            "label": "SIGNED REPORT",
            "status": "FAIL",
            "duration_ms": 235
          },
          {
            "step": "promotion",
            "label": "PROMOTION PREPROD → PRODUCTION",
            "status": "FAIL",
            "duration_ms": 203
          }
        ],
        "verdicts": {
          "tampering": "5/5 NOT_VERIFIED",
          "post_revoke": "NOT_VERIFIED + contenuto redatto",
          "public_verify": "NOT_VERIFIED"
        },
        "proof_ref": "BKC-TEST-20260819-6AFFB570",
        "dmarc_phase": "quarantine",
        "duration_ms": 4237,
        "failed_steps": [
          {
            "step": "audit",
            "label": "Catena audit immutabile",
            "detail": "",
            "observed": "3 eventi, catena rotta"
          },
          {
            "step": "verify_public",
            "label": "Verifica pubblica via token",
            "detail": "Catena degli eventi alterata.",
            "observed": "NOT_VERIFIED"
          },
          {
            "step": "verify_offline",
            "label": "Verifica offline con sola chiave pubblica",
            "detail": "Catena degli eventi alterata.",
            "observed": "NOT_VERIFIED (asymmetric)"
          },
          {
            "step": "verify_historic",
            "label": "Verifica storica dopo rotazione",
            "detail": "Firmata con bkc-test-20260819-2b954b, chiave attiva ora bkc-test-20260819-abc5b4",
            "observed": "NOT_VERIFIED"
          },
          {
            "step": "verify_revoked",
            "label": "Verifica dopo la revoca",
            "detail": "Collaudo pre-produzione: revoca simulata",
            "observed": "NOT_VERIFIED + contenuto redatto"
          },
          {
            "step": "signed_report",
            "label": "Report di verifica firmato",
            "detail": "Marcato environment=staging: non confondibile con la produzione",
            "observed": "NOT_VERIFIED · report firmato con bkc-cert-20260819-2965e7"
          },
          {
            "step": "promotion",
            "label": "Prova di promozione preprod → production",
            "detail": "Regole di verifica a1a19588df5dd517 · chiavi separate bkc-test-20260819-abc5b4 ≠ bkc-cert-20260819-2965e7",
            "observed": "divergenze: signature_alg"
          }
        ],
        "verify_token": "cd39ba9f71e7565a93ab21227979ab46ae2ed0141b9d38fc",
        "missing_steps": [],
        "provider_mode": "ok",
        "scenarioIndex": 0,
        "rate_limit_triggered_at": 16
      },
      {
        "label": "DMARC none + provider in retry",
        "run_id": "f78ced4d-539d-4c5e-86ec-9fcb8ce3afa0",
        "latency": {
          "total_ms": 3389,
          "slowest_ms": 1173,
          "slowest_step": "rate_limit"
        },
        "outcome": "FAIL",
        "sequence": [
          {
            "step": "issue",
            "label": "ISSUED",
            "status": "PASS",
            "duration_ms": 149
          },
          {
            "step": "sign",
            "label": "SIGNED",
            "status": "PASS",
            "duration_ms": 138
          },
          {
            "step": "deliver",
            "label": "SENT",
            "status": "PASS",
            "duration_ms": 375
          },
          {
            "step": "provider",
            "label": "PROVIDER EVENT",
            "status": "PASS",
            "duration_ms": 432
          },
          {
            "step": "audit",
            "label": "AUDIT SEALED",
            "status": "FAIL",
            "duration_ms": 82
          },
          {
            "step": "verify_public",
            "label": "PUBLIC VERIFY",
            "status": "FAIL",
            "duration_ms": 87
          },
          {
            "step": "verify_offline",
            "label": "OFFLINE VERIFY",
            "status": "FAIL",
            "duration_ms": 11
          },
          {
            "step": "rotate",
            "label": "KEY ROTATION",
            "status": "PASS",
            "duration_ms": 293
          },
          {
            "step": "verify_historic",
            "label": "HISTORIC VERIFY",
            "status": "FAIL",
            "duration_ms": 83
          },
          {
            "step": "revoke",
            "label": "REVOKED",
            "status": "PASS",
            "duration_ms": 80
          },
          {
            "step": "verify_revoked",
            "label": "POST-REVOKE VERIFY",
            "status": "FAIL",
            "duration_ms": 104
          },
          {
            "step": "tamper",
            "label": "TAMPERING → NOT_VERIFIED",
            "status": "PASS",
            "duration_ms": 14
          },
          {
            "step": "rate_limit",
            "label": "RATE LIMIT",
            "status": "PASS",
            "duration_ms": 1173
          },
          {
            "step": "signed_report",
            "label": "SIGNED REPORT",
            "status": "FAIL",
            "duration_ms": 157
          },
          {
            "step": "promotion",
            "label": "PROMOTION PREPROD → PRODUCTION",
            "status": "FAIL",
            "duration_ms": 211
          }
        ],
        "verdicts": {
          "tampering": "5/5 NOT_VERIFIED",
          "post_revoke": "NOT_VERIFIED + contenuto redatto",
          "public_verify": "NOT_VERIFIED"
        },
        "proof_ref": "BKC-TEST-20260819-0F0C0288",
        "dmarc_phase": "none",
        "duration_ms": 3914,
        "failed_steps": [
          {
            "step": "audit",
            "label": "Catena audit immutabile",
            "detail": "",
            "observed": "5 eventi, catena rotta"
          },
          {
            "step": "verify_public",
            "label": "Verifica pubblica via token",
            "detail": "Catena degli eventi alterata.",
            "observed": "NOT_VERIFIED"
          },
          {
            "step": "verify_offline",
            "label": "Verifica offline con sola chiave pubblica",
            "detail": "Catena degli eventi alterata.",
            "observed": "NOT_VERIFIED (asymmetric)"
          },
          {
            "step": "verify_historic",
            "label": "Verifica storica dopo rotazione",
            "detail": "Firmata con bkc-test-20260819-abc5b4, chiave attiva ora bkc-test-20260819-0cd0d3",
            "observed": "NOT_VERIFIED"
          },
          {
            "step": "verify_revoked",
            "label": "Verifica dopo la revoca",
            "detail": "Collaudo pre-produzione: revoca simulata",
            "observed": "NOT_VERIFIED + contenuto redatto"
          },
          {
            "step": "signed_report",
            "label": "Report di verifica firmato",
            "detail": "Marcato environment=staging: non confondibile con la produzione",
            "observed": "NOT_VERIFIED · report firmato con bkc-cert-20260819-2965e7"
          },
          {
            "step": "promotion",
            "label": "Prova di promozione preprod → production",
            "detail": "Regole di verifica a1a19588df5dd517 · chiavi separate bkc-test-20260819-0cd0d3 ≠ bkc-cert-20260819-2965e7",
            "observed": "divergenze: signature_alg"
          }
        ],
        "verify_token": "a9f494f9ee90c159b1854ef0de8c7a8fa33e9403dad443e9",
        "missing_steps": [],
        "provider_mode": "retry",
        "scenarioIndex": 1,
        "rate_limit_triggered_at": 16
      },
      {
        "label": "DMARC reject + provider in errore permanente",
        "run_id": "c1d53248-bad6-43a5-b535-c5d61f5d4fb8",
        "latency": {
          "total_ms": 3631,
          "slowest_ms": 1167,
          "slowest_step": "rate_limit"
        },
        "outcome": "FAIL",
        "sequence": [
          {
            "step": "issue",
            "label": "ISSUED",
            "status": "PASS",
            "duration_ms": 164
          },
          {
            "step": "sign",
            "label": "SIGNED",
            "status": "PASS",
            "duration_ms": 136
          },
          {
            "step": "deliver",
            "label": "SENT",
            "status": "PASS",
            "duration_ms": 349
          },
          {
            "step": "provider",
            "label": "PROVIDER EVENT",
            "status": "PASS",
            "duration_ms": 672
          },
          {
            "step": "audit",
            "label": "AUDIT SEALED",
            "status": "FAIL",
            "duration_ms": 66
          },
          {
            "step": "verify_public",
            "label": "PUBLIC VERIFY",
            "status": "FAIL",
            "duration_ms": 74
          },
          {
            "step": "verify_offline",
            "label": "OFFLINE VERIFY",
            "status": "FAIL",
            "duration_ms": 3
          },
          {
            "step": "rotate",
            "label": "KEY ROTATION",
            "status": "PASS",
            "duration_ms": 311
          },
          {
            "step": "verify_historic",
            "label": "HISTORIC VERIFY",
            "status": "FAIL",
            "duration_ms": 76
          },
          {
            "step": "revoke",
            "label": "REVOKED",
            "status": "PASS",
            "duration_ms": 74
          },
          {
            "step": "verify_revoked",
            "label": "POST-REVOKE VERIFY",
            "status": "FAIL",
            "duration_ms": 81
          },
          {
            "step": "tamper",
            "label": "TAMPERING → NOT_VERIFIED",
            "status": "PASS",
            "duration_ms": 29
          },
          {
            "step": "rate_limit",
            "label": "RATE LIMIT",
            "status": "PASS",
            "duration_ms": 1167
          },
          {
            "step": "signed_report",
            "label": "SIGNED REPORT",
            "status": "FAIL",
            "duration_ms": 216
          },
          {
            "step": "promotion",
            "label": "PROMOTION PREPROD → PRODUCTION",
            "status": "FAIL",
            "duration_ms": 213
          }
        ],
        "verdicts": {
          "tampering": "5/5 NOT_VERIFIED",
          "post_revoke": "NOT_VERIFIED + contenuto redatto",
          "public_verify": "NOT_VERIFIED"
        },
        "proof_ref": "BKC-TEST-20260819-6D5CAAC7",
        "dmarc_phase": "reject",
        "duration_ms": 4062,
        "failed_steps": [
          {
            "step": "audit",
            "label": "Catena audit immutabile",
            "detail": "",
            "observed": "3 eventi, catena rotta"
          },
          {
            "step": "verify_public",
            "label": "Verifica pubblica via token",
            "detail": "Catena degli eventi alterata.",
            "observed": "NOT_VERIFIED"
          },
          {
            "step": "verify_offline",
            "label": "Verifica offline con sola chiave pubblica",
            "detail": "Catena degli eventi alterata.",
            "observed": "NOT_VERIFIED (asymmetric)"
          },
          {
            "step": "verify_historic",
            "label": "Verifica storica dopo rotazione",
            "detail": "Firmata con bkc-test-20260819-0cd0d3, chiave attiva ora bkc-test-20260819-7b55a4",
            "observed": "NOT_VERIFIED"
          },
          {
            "step": "verify_revoked",
            "label": "Verifica dopo la revoca",
            "detail": "Collaudo pre-produzione: revoca simulata",
            "observed": "NOT_VERIFIED + contenuto redatto"
          },
          {
            "step": "signed_report",
            "label": "Report di verifica firmato",
            "detail": "Marcato environment=staging: non confondibile con la produzione",
            "observed": "NOT_VERIFIED · report firmato con bkc-cert-20260819-2965e7"
          },
          {
            "step": "promotion",
            "label": "Prova di promozione preprod → production",
            "detail": "Regole di verifica a1a19588df5dd517 · chiavi separate bkc-test-20260819-7b55a4 ≠ bkc-cert-20260819-2965e7",
            "observed": "divergenze: signature_alg"
          }
        ],
        "verify_token": "4f002e1019bba480aa0fc0d31b809c90c10d06bcee06c7d0",
        "missing_steps": [],
        "provider_mode": "hard_fail",
        "scenarioIndex": 2,
        "rate_limit_triggered_at": 16
      }
    ],
    "legal_note": "La verifica crittografica dimostra integrità e sequenza degli eventi. Non equivale a una certificazione legale in nessuna giurisdizione.",
    "environment": "staging",
    "report_hash": "f2bd5960341fb7b6d791e37ec420ce49e5cb49ce6a3ad2e73ce6e60c8fd87108",
    "completed_at": "2026-08-19T01:02:18.902Z",
    "gate_version": "bkc-release-gate/1.0",
    "generated_at": "2026-08-19T01:02:06.689Z",
    "signature_alg": "ECDSA_P256_SHA256",
    "promotion_ready": false,
    "report_signature": "ecdsa-p256-sha256:9aebe1863f85ef451fca948b732995a2d8834d42879f064956ab184e32615d083d5011e378b599ac49e327b479af9e4ef3ba26547e194939141379978d32c4b2",
    "required_sequence": [
      {
        "step": "issue",
        "label": "ISSUED"
      },
      {
        "step": "sign",
        "label": "SIGNED"
      },
      {
        "step": "deliver",
        "label": "SENT"
      },
      {
        "step": "provider",
        "label": "PROVIDER EVENT"
      },
      {
        "step": "audit",
        "label": "AUDIT SEALED"
      },
      {
        "step": "verify_public",
        "label": "PUBLIC VERIFY"
      },
      {
        "step": "verify_offline",
        "label": "OFFLINE VERIFY"
      },
      {
        "step": "rotate",
        "label": "KEY ROTATION"
      },
      {
        "step": "verify_historic",
        "label": "HISTORIC VERIFY"
      },
      {
        "step": "revoke",
        "label": "REVOKED"
      },
      {
        "step": "verify_revoked",
        "label": "POST-REVOKE VERIFY"
      },
      {
        "step": "tamper",
        "label": "TAMPERING → NOT_VERIFIED"
      },
      {
        "step": "rate_limit",
        "label": "RATE LIMIT"
      },
      {
        "step": "signed_report",
        "label": "SIGNED REPORT"
      },
      {
        "step": "promotion",
        "label": "PROMOTION PREPROD → PRODUCTION"
      }
    ],
    "environment_notice": "EVIDENZA DI PREPRODUZIONE. I pacchetti sono marcati BKC-TEST-*, firmati con chiavi bkc-test-* e non costituiscono prove di produzione né certificazioni legali.",
    "protocol_invariants": {
      "verdicts": [
        "VALID",
        "REVOKED",
        "NOT_VERIFIED"
      ],
      "signature_alg": "ECDSA-P256-SHA256",
      "schema_version": "bkc-certified/1.1",
      "audit_semantics": [
        "proof.issued",
        "message.sent",
        "delivery.confirmed",
        "delivery.deferred",
        "delivery.retry",
        "delivery.failed",
        "verified.viewed",
        "verified.blocked"
      ],
      "revocation_policy": "revoke_redacts_never_deletes",
      "verification_rules": [
        "manifest_hash",
        "content_hash",
        "attachments_hash",
        "recipients",
        "mail_config_hash",
        "subject_hash",
        "delivery_status",
        "compliance_hash",
        "schema_version",
        "manifest_signature",
        "event_chain_linkage",
        "event_entry_hash",
        "chain_seal"
      ]
    }
  }
}