{
  "schema_version": "reality.partner-safe-golden-summary/v1",
  "test": "held-out vehicle claim pipeline",
  "initial_input": ["fictional claim controls and loss narrative", "carrier-private vehicle fixture", "two simulated claimant images", "one estimate PDF"],
  "isolation": {
    "enforcement": "Node filesystem permission model in an ephemeral pre-acquisition process",
    "outside_allowlist_probe": "ERR_ACCESS_DENIED",
    "prior_bmw_fixture_read": false,
    "oracle_loaded_by_pipeline": false,
    "external_fixture_loaded_after_public_query_plan": true,
    "complete_vin_sent_to_open_web": false
  },
  "observed": {
    "public_search_executions": 4,
    "public_fetch_attempts": 4,
    "configuration_rows": 4,
    "model_year_recall_rows": 5,
    "vehicle_specific_recall_rows_promoted": 0,
    "artifacts_hash_bound": 3,
    "pdf_reality_engines_completed": 2,
    "image_model_calls_completed": 0,
    "automatic_claim_decision": false
  },
  "states": {
    "vehicle_configuration": "carrier-aligned",
    "vin_specific_recall": "unknown",
    "images": "known-synthetic oracle; production GenAI image adapter unavailable and explicitly unresolved",
    "estimate_pdf": "live Real_pdf and DocForge V14 signals recorded; native-label disagreement is an explicit human-review state",
    "reviewer_handoff": "request controlled recapture and first-party estimate confirmation"
  },
  "verification_state": "passed by the internal release gate; executable verifier and held-out inputs are not in the public bundle",
  "truth_boundary": "A complete report may end in a bounded request for more evidence. Unavailable model work is never represented as completed."
}