{
  "endpoint": "https://gate.horizonshield.dev/mcp",
  "entries": [
    {
      "at": "2026-08-14T18:00:43.527Z",
      "status": "held",
      "reachable": false,
      "record_sha256": "23575278ce5df80dcf4dd1886312104bcfbbb4120cfb79107037519dbd52832f",
      "conditions": {
        "mcp_endpoint": {
          "pass": false,
          "measured": true,
          "transport": true,
          "reason": "initialize failed: http 522"
        },
        "agent_card": {
          "pass": false,
          "measured": true,
          "transport": true,
          "reason": "agent-card not reachable (http 522)"
        },
        "compensation_disclosure": {
          "pass": false,
          "measured": true,
          "transport": false,
          "reason": "no agent-card, cannot read compensation"
        },
        "determinism": {
          "pass": false,
          "measured": false,
          "transport": false,
          "reason": "not measured: measuring determinism requires calling one of your tools, and this gate does not call tools on a server without the owner's consent. The first tool listed may be destructive. To have this condition measured, re-run with allow_"
        }
      },
      "fingerprint": "held|agent_card=0,compensation_disclosure=0,determinism=0,mcp_endpoint=0"
    },
    {
      "at": "2026-08-15T18:00:05.206Z",
      "status": "held",
      "reachable": false,
      "record_sha256": "93135f3847854b1b304441b7563ba1f5f5cc2590d00c22ec7fbe2ac28e38fd58",
      "conditions": {
        "mcp_endpoint": {
          "pass": false,
          "measured": true,
          "transport": true,
          "reason": "initialize failed: http 522"
        },
        "agent_card": {
          "pass": false,
          "measured": true,
          "transport": true,
          "reason": "agent-card not reachable (http 522)"
        },
        "compensation_disclosure": {
          "pass": false,
          "measured": true,
          "transport": false,
          "reason": "no agent-card, cannot read compensation"
        },
        "determinism": {
          "pass": false,
          "measured": false,
          "transport": false,
          "reason": "not measured: measuring determinism requires calling one of your tools, and this gate does not call tools on a server without the owner's consent. The first tool listed may be destructive. To have this condition measured, re-run with allow_tool_call set to true from a request you control."
        }
      },
      "surface": null,
      "fingerprint": "held|agent_card=0,compensation_disclosure=0,determinism=0,mcp_endpoint=0"
    },
    {
      "at": "2026-08-16T18:00:11.786Z",
      "status": "held",
      "reachable": false,
      "record_sha256": "499907119ed647ba74ebac7ba7f878ece86d4cfe4cbf16b0613054bdcd6ae1f8",
      "conditions": {
        "mcp_endpoint": {
          "pass": false,
          "measured": true,
          "transport": true,
          "reason": "initialize failed: http 522"
        },
        "agent_card": {
          "pass": false,
          "measured": true,
          "transport": true,
          "reason": "agent-card not reachable (http 522)"
        },
        "compensation_disclosure": {
          "pass": false,
          "measured": true,
          "transport": false,
          "reason": "no agent-card, cannot read compensation"
        },
        "determinism": {
          "pass": false,
          "measured": false,
          "transport": false,
          "reason": "not measured: measuring determinism requires calling one of your tools, and this gate does not call tools on a server without the owner's consent. The first tool listed may be destructive. To have this condition measured, re-run with allow_tool_call set to true from a request you control."
        }
      },
      "surface": null,
      "fingerprint": "held|agent_card=0,compensation_disclosure=0,determinism=0,mcp_endpoint=0"
    },
    {
      "at": "2026-08-16T23:57:23.653Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "093d83bd668407bf510245f43bb8cd4b060f720f4b6c3c9ea4ee6e3b78966ec9",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "8d3ddb111940f52d",
        "manifest_hash": "52bac6293318fd40",
        "server_info_hash": "358245049ceabd7b",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "lookup_server": "31da486d4acae8ed",
          "verify_verdict": "c022a23b3d8ce7b3"
        }
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1"
    },
    {
      "at": "2026-08-17T04:32:00.524Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "eca2140520fc2b64ee65793afe2ad170a18232c16302b43667ed0b90e7ce68d3",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "8d3ddb111940f52d",
        "manifest_hash": "52bac6293318fd40",
        "server_info_hash": "358245049ceabd7b",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "lookup_server": "31da486d4acae8ed",
          "verify_verdict": "c022a23b3d8ce7b3"
        }
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1"
    },
    {
      "at": "2026-08-17T18:00:58.980Z",
      "status": "held",
      "reachable": false,
      "record_sha256": "bdf705ddc4c1922fae51919f63f742f9bda6a924813c33c55415ecd519174cfd",
      "conditions": {
        "mcp_endpoint": {
          "pass": false,
          "measured": true,
          "transport": true,
          "reason": "initialize failed: http 522"
        },
        "agent_card": {
          "pass": false,
          "measured": true,
          "transport": true,
          "reason": "agent-card not reachable (http 522)"
        },
        "compensation_disclosure": {
          "pass": false,
          "measured": true,
          "transport": false,
          "reason": "no agent-card, cannot read compensation"
        },
        "determinism": {
          "pass": false,
          "measured": true,
          "transport": false,
          "reason": "no tool available to test"
        }
      },
      "surface": null,
      "fingerprint": "held|agent_card=0,compensation_disclosure=0,determinism=0,mcp_endpoint=0"
    },
    {
      "at": "2026-08-18T17:08:25.851Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "2dcd624e4c9bb5293f9b8053c67fb136dc1f5ca9770f89e7a2b36a429fa4e509",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "8d3ddb111940f52d",
        "manifest_hash": "ac9a2115de4a175a",
        "server_info_hash": "49ba1d01f7899445",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "lookup_server": "bfb59d75392759f4",
          "verify_verdict": "c022a23b3d8ce7b3"
        }
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1"
    },
    {
      "at": "2026-08-18T17:18:09.623Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "f622dc9eb43fc028eaf964e522eb06c3fa327ca90289d98dbf529bdbc5baddb4",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "8d3ddb111940f52d",
        "manifest_hash": "ac9a2115de4a175a",
        "server_info_hash": "49ba1d01f7899445",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "lookup_server": "bfb59d75392759f4",
          "verify_verdict": "c022a23b3d8ce7b3"
        }
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1"
    },
    {
      "at": "2026-08-18T17:41:05.135Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "8cf02a6109b3103c2795711e38d6d7acd72ce7299a505697d839b7f63eb0b52b",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "8d3ddb111940f52d",
        "manifest_hash": "ac9a2115de4a175a",
        "server_info_hash": "49ba1d01f7899445",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "lookup_server": "bfb59d75392759f4",
          "verify_verdict": "c022a23b3d8ce7b3"
        }
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1"
    },
    {
      "at": "2026-08-18T18:00:38.941Z",
      "status": "held",
      "reachable": false,
      "record_sha256": "b495f78bbb7745e63815ddc0538092b168b38e8849cccf9adc05c522d822f250",
      "conditions": {
        "mcp_endpoint": {
          "pass": false,
          "measured": true,
          "transport": true,
          "reason": "initialize failed: http 522"
        },
        "agent_card": {
          "pass": false,
          "measured": true,
          "transport": true,
          "reason": "agent-card not reachable (http 522)"
        },
        "compensation_disclosure": {
          "pass": false,
          "measured": true,
          "transport": false,
          "reason": "no agent-card, cannot read compensation"
        },
        "determinism": {
          "pass": false,
          "measured": true,
          "transport": false,
          "reason": "no tool available to test"
        }
      },
      "surface": null,
      "fingerprint": "held|agent_card=0,compensation_disclosure=0,determinism=0,mcp_endpoint=0"
    },
    {
      "at": "2026-08-19T04:04:46.691Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "f4a591856a3a50d365b05b3e4df2403bda0b84eb18da53edaf5b8cb23e476b1a",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "8d3ddb111940f52d",
        "manifest_hash": "ac9a2115de4a175a",
        "server_info_hash": "49ba1d01f7899445",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "lookup_server": "bfb59d75392759f4",
          "verify_verdict": "c022a23b3d8ce7b3"
        }
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1"
    },
    {
      "at": "2026-08-19T18:00:47.502Z",
      "status": "held",
      "reachable": true,
      "record_sha256": "54aa8bf5ac6d17f4248c5399c2dfe2b8a6550fc042082fe6cf7c42e3496ac344",
      "conditions": {
        "mcp_endpoint": {
          "pass": false,
          "measured": false,
          "transport": false,
          "reason": "not measured: relay unavailable (http 404): gate-side failure, not a statement about the target"
        },
        "agent_card": {
          "pass": false,
          "measured": false,
          "transport": false,
          "reason": "not measured: relay unavailable (http 404): gate-side failure, not a statement about the target"
        },
        "compensation_disclosure": {
          "pass": false,
          "measured": false,
          "transport": false,
          "reason": "not measured: the agent card could not be fetched because the gate's relay path was unavailable, so whether compensation is disclosed is unknown"
        },
        "determinism": {
          "pass": false,
          "measured": false,
          "transport": false,
          "reason": "not measured: the tool list could not be read because the gate's relay path was unavailable, so there was nothing to test determinism against"
        }
      },
      "surface": null,
      "fingerprint": "held|agent_card=0,compensation_disclosure=0,determinism=0,mcp_endpoint=0",
      "reachable_note": "This entry stores reachable: true, but every condition on this run says measured: false, so reachability was not established on it. Until 2026-08-20 the value was written as (v !== false), which turned 'not measured' into true. The stored entry is left exactly as written."
    },
    {
      "at": "2026-08-20T18:01:05.546Z",
      "status": "held",
      "reachable": null,
      "record_sha256": "495a973990187101513c02bda1d194596a7f3b4f2de12e6e82390924fd4f46d9",
      "conditions": {
        "mcp_endpoint": {
          "pass": false,
          "measured": false,
          "transport": false,
          "reason": "not measured: relay unavailable (http 404): gate-side failure, not a statement about the target"
        },
        "agent_card": {
          "pass": false,
          "measured": false,
          "transport": false,
          "reason": "not measured: relay unavailable (http 404): gate-side failure, not a statement about the target"
        },
        "compensation_disclosure": {
          "pass": false,
          "measured": false,
          "transport": false,
          "reason": "not measured: the agent card could not be fetched because the gate's relay path was unavailable, so whether compensation is disclosed is unknown"
        },
        "determinism": {
          "pass": false,
          "measured": false,
          "transport": false,
          "reason": "not measured: the tool list could not be read because the gate's relay path was unavailable, so there was nothing to test determinism against"
        }
      },
      "surface": null,
      "absence_vs_failure": {
        "measured": false,
        "tools_measured": null,
        "discriminating": null,
        "cannot_distinguish_pct": null
      },
      "fingerprint": "held|agent_card=0,compensation_disclosure=0,determinism=0,mcp_endpoint=0"
    },
    {
      "at": "2026-08-21T18:00:48.250Z",
      "status": "held",
      "reachable": null,
      "record_sha256": "8d184e3a930481720e46fabd5a45fb12928d697bf7356dbe16de874541bfa15d",
      "conditions": {
        "mcp_endpoint": {
          "pass": false,
          "measured": false,
          "transport": false,
          "reason": "not measured: relay unavailable (http 530): gate-side failure, not a statement about the target"
        },
        "agent_card": {
          "pass": false,
          "measured": false,
          "transport": false,
          "reason": "not measured: relay unavailable (http 530): gate-side failure, not a statement about the target"
        },
        "compensation_disclosure": {
          "pass": false,
          "measured": false,
          "transport": false,
          "reason": "not measured: the agent card could not be fetched because the gate's relay path was unavailable, so whether compensation is disclosed is unknown"
        },
        "determinism": {
          "pass": false,
          "measured": false,
          "transport": false,
          "reason": "not measured: the tool list could not be read because the gate's relay path was unavailable, so there was nothing to test determinism against"
        }
      },
      "surface": null,
      "absence_vs_failure": {
        "measured": false,
        "tools_measured": null,
        "discriminating": null,
        "cannot_distinguish_pct": null
      },
      "fingerprint": "held|agent_card=0,compensation_disclosure=0,determinism=0,mcp_endpoint=0"
    },
    {
      "at": "2026-08-22T18:00:26.190Z",
      "status": "held",
      "reachable": null,
      "record_sha256": "eaf789cc9c13f6cdc77e2dc98d3a3230779956b4262093effe8fba9ed149cf9f",
      "conditions": {
        "mcp_endpoint": {
          "pass": false,
          "measured": false,
          "transport": false,
          "reason": "not measured: relay unavailable (http 530): gate-side failure, not a statement about the target"
        },
        "agent_card": {
          "pass": false,
          "measured": false,
          "transport": false,
          "reason": "not measured: relay unavailable (http 530): gate-side failure, not a statement about the target"
        },
        "compensation_disclosure": {
          "pass": false,
          "measured": false,
          "transport": false,
          "reason": "not measured: the agent card could not be fetched because the gate's relay path was unavailable, so whether compensation is disclosed is unknown"
        },
        "determinism": {
          "pass": false,
          "measured": false,
          "transport": false,
          "reason": "not measured: the tool list could not be read because the gate's relay path was unavailable, so there was nothing to test determinism against"
        }
      },
      "surface": null,
      "absence_vs_failure": {
        "measured": false,
        "tools_measured": null,
        "discriminating": null,
        "cannot_distinguish_pct": null
      },
      "fingerprint": "held|agent_card=0,compensation_disclosure=0,determinism=0,mcp_endpoint=0"
    },
    {
      "at": "2026-08-23T03:34:30.281Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "bffcba2020d127cff07717a362693a139ea59e6267178949b9a66e46ed570e8d",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "d64176a7f5c5ac43",
        "manifest_hash": "591dbbf12456b7fa",
        "server_info_hash": "49ba1d01f7899445",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 5,
        "discriminating": 4,
        "cannot_distinguish_pct": 20
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1"
    },
    {
      "at": "2026-08-23T18:00:14.016Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "c2f2cf942c52fc86d6565eefd3d8f591ad93cf2f99eac2b693a8277360a89e49",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "d64176a7f5c5ac43",
        "manifest_hash": "591dbbf12456b7fa",
        "server_info_hash": "49ba1d01f7899445",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 5,
        "discriminating": 4,
        "cannot_distinguish_pct": 20
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1"
    },
    {
      "at": "2026-08-24T18:00:42.615Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "5eab9818c4b784f5d9064e190a091285a8dc373a3f2ee98d4c10d1783fe7b250",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "d64176a7f5c5ac43",
        "manifest_hash": "591dbbf12456b7fa",
        "server_info_hash": "49ba1d01f7899445",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 5,
        "discriminating": 4,
        "cannot_distinguish_pct": 20
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1"
    },
    {
      "at": "2026-08-25T18:01:03.975Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "477393ae9a3aef860f18f835e3e3dd6015e464f15003e031f7efcad27f37231d",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "d64176a7f5c5ac43",
        "manifest_hash": "591dbbf12456b7fa",
        "server_info_hash": "49ba1d01f7899445",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 5,
        "discriminating": 4,
        "cannot_distinguish_pct": 20
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1"
    },
    {
      "at": "2026-08-26T18:01:05.233Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "c4baac8dfa7cb1253a8e6a923a684bac42265b6803d0115e0fb201737a65acad",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "d64176a7f5c5ac43",
        "manifest_hash": "591dbbf12456b7fa",
        "server_info_hash": "49ba1d01f7899445",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 5,
        "discriminating": 4,
        "cannot_distinguish_pct": 20
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1"
    },
    {
      "at": "2026-08-27T18:01:04.203Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "dce24c853469edbb27a21d72cce0d9b05d6d36fc50ecbda754ddb5ed3e2fbf54",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "d64176a7f5c5ac43",
        "manifest_hash": "591dbbf12456b7fa",
        "server_info_hash": "49ba1d01f7899445",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 5,
        "discriminating": 4,
        "cannot_distinguish_pct": 20
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1"
    },
    {
      "at": "2026-08-28T01:15:56.693Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "623788f0fc1dd7daaa816734e5d62bdbbbcc5852c7b7491778f81b35dcdc4d49",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "d64176a7f5c5ac43",
        "manifest_hash": "591dbbf12456b7fa",
        "server_info_hash": "49ba1d01f7899445",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 5,
        "discriminating": 4,
        "cannot_distinguish_pct": 20
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1"
    },
    {
      "at": "2026-08-28T18:01:00.756Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "083eba63195ee303aa518ffe7e963ceaa1ce246ead33d0dfb672f15fd6e0af6a",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "d64176a7f5c5ac43",
        "manifest_hash": "591dbbf12456b7fa",
        "server_info_hash": "49ba1d01f7899445",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 5,
        "discriminating": 4,
        "cannot_distinguish_pct": 20
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1"
    },
    {
      "at": "2026-08-29T18:00:59.891Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "e9a5ec91bad42f2b2151081a6f76742f66ae91a618aef527a6f476877cb00c20",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "d64176a7f5c5ac43",
        "manifest_hash": "591dbbf12456b7fa",
        "server_info_hash": "49ba1d01f7899445",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 5,
        "discriminating": 4,
        "cannot_distinguish_pct": 20
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1"
    },
    {
      "at": "2026-08-30T18:00:16.633Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "0bd58e3b795daa02bea005d566efd5d2470489fd17c2f5837f1aeaa353a1df9e",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "d64176a7f5c5ac43",
        "manifest_hash": "591dbbf12456b7fa",
        "server_info_hash": "aeeaca9227973f48",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 5,
        "discriminating": 4,
        "cannot_distinguish_pct": 20
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1"
    },
    {
      "at": "2026-08-31T18:00:17.927Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "d7e0ae2b84074679064eecbf447d8e8034bbc85c21ce047569d5b5548e622aca",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "d64176a7f5c5ac43",
        "manifest_hash": "591dbbf12456b7fa",
        "server_info_hash": "aeeaca9227973f48",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 5,
        "discriminating": 4,
        "cannot_distinguish_pct": 20
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1"
    },
    {
      "at": "2026-09-01T18:00:17.400Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "e9c60f355f34130131717322ac32a9abc3891746be5637880b0714ed08260d9b",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "d64176a7f5c5ac43",
        "manifest_hash": "591dbbf12456b7fa",
        "server_info_hash": "aeeaca9227973f48",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 5,
        "discriminating": 4,
        "cannot_distinguish_pct": 20
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1"
    },
    {
      "at": "2026-09-02T18:00:43.457Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "c4e2b73e9eddaae4ddd9757564b49b9299fb9d122efbd0a2795b7fe7a8fda686",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "d64176a7f5c5ac43",
        "manifest_hash": "591dbbf12456b7fa",
        "server_info_hash": "aeeaca9227973f48",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 5,
        "discriminating": 4,
        "cannot_distinguish_pct": 20
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1"
    },
    {
      "at": "2026-09-03T18:01:33.510Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "57acf582a14c99f2ff8f74d4310a3c4f9fa30b24483954e15ddf820d67830187",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "d64176a7f5c5ac43",
        "manifest_hash": "591dbbf12456b7fa",
        "server_info_hash": "aeeaca9227973f48",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 5,
        "discriminating": 4,
        "cannot_distinguish_pct": 20
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1"
    },
    {
      "at": "2026-09-04T18:01:07.877Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "fb83deaf49a0adc9d46e72098af267095de63a040ed4e61904f15634b2cd6622",
      "consent_source": "operator_list",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "d64176a7f5c5ac43",
        "manifest_hash": "591dbbf12456b7fa",
        "server_info_hash": "b9ebc38a706b8de6",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 5,
        "discriminating": 4,
        "cannot_distinguish_pct": 20
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1"
    },
    {
      "at": "2026-09-05T18:01:04.520Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "a1a0ed9e647073f5d00c210dfe3ac88ef57614437a5eaa53bf57196a448e4fe9",
      "consent_source": "operator_list",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "d64176a7f5c5ac43",
        "manifest_hash": "591dbbf12456b7fa",
        "server_info_hash": "254db8b0f5cb001a",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 5,
        "discriminating": 4,
        "cannot_distinguish_pct": 20
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1"
    },
    {
      "at": "2026-09-06T18:01:12.388Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "4c471418251c481f7b06ea887708c43d2bd0ab633a9c326d58f0d87843e77ce7",
      "consent_source": "operator_list",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed; signature verifies"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "d64176a7f5c5ac43",
        "manifest_hash": "591dbbf12456b7fa",
        "server_info_hash": "7c38a9fc88bb5584",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 5,
        "discriminating": 4,
        "cannot_distinguish_pct": 20
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1",
      "coordinate_derivation": {
        "derived": true,
        "window_id": "w2957",
        "salt_commitment": "ff57ab419114d900da6d74f6a7cdc475e04c78435521303497dd862a1bf4b733",
        "salt_created_at": "2026-09-05T18:00:12.389Z",
        "beacon": {
          "height": 965808,
          "block_hash": "0000000000000000000217ec231db790d8ffea4328d608f7e4c7a56736d08eb1",
          "block_time": "2026-09-06T17:06:00.000Z"
        },
        "day_in_window": 0,
        "tool_set_sha256": "520bc56f233a1f283473fb6fa0ef8424143a60eb031ce84cd99c45cf60ee2162",
        "tool_count": 5,
        "fallback": null,
        "reason_code": null,
        "why": null
      },
      "establishes": [
        "at 2026-09-06T18:01:12.388Z this gate (commit 082d68342fd9, version 0.4.0) measured https://gate.horizonshield.dev/mcp and recorded status verified",
        "conditions passed: agent_card, compensation_disclosure, determinism, mcp_endpoint; conditions failed: none",
        "every hash in this record recomputes from the bytes it names, and record_sha256 recomputes from this record with record_sha256 and recompute_note removed",
        "the measurement instant and the tool measured were derived from a committed salt and a Bitcoin block the subject did not choose (coordinate_derivation)"
      ],
      "does_not_establish": [
        "correctness of any price, figure or answer the server returns",
        "truth of the compensation declaration; only its presence and shape are measured",
        "quality, competence or fitness of the operator or the service",
        "behaviour at instants not measured or from vantages this gate did not use"
      ]
    },
    {
      "at": "2026-09-07T18:00:32.904Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "521281818759b85d505483949b28dd9aa518cbb8a7c4398a67c4f28567983a20",
      "consent_source": "operator_list",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed; signature verifies"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "d64176a7f5c5ac43",
        "manifest_hash": "591dbbf12456b7fa",
        "server_info_hash": "7c38a9fc88bb5584",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 5,
        "discriminating": 4,
        "cannot_distinguish_pct": 20
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1",
      "coordinate_derivation": {
        "derived": true,
        "window_id": "w2957",
        "salt_commitment": "ff57ab419114d900da6d74f6a7cdc475e04c78435521303497dd862a1bf4b733",
        "salt_created_at": "2026-09-05T18:00:12.389Z",
        "beacon": {
          "height": 965808,
          "block_hash": "0000000000000000000217ec231db790d8ffea4328d608f7e4c7a56736d08eb1",
          "block_time": "2026-09-06T17:06:00.000Z"
        },
        "day_in_window": 0,
        "tool_set_sha256": "520bc56f233a1f283473fb6fa0ef8424143a60eb031ce84cd99c45cf60ee2162",
        "tool_count": 5,
        "fallback": null,
        "reason_code": null,
        "why": null
      },
      "establishes": [
        "at 2026-09-07T18:00:32.904Z this gate (commit 63010ebf09ae, version 0.4.0) measured https://gate.horizonshield.dev/mcp and recorded status verified",
        "conditions passed: agent_card, compensation_disclosure, determinism, mcp_endpoint; conditions failed: none",
        "every hash in this record recomputes from the bytes it names, and record_sha256 recomputes from this record with record_sha256 and recompute_note removed",
        "the measurement instant and the tool measured were derived from a committed salt and a Bitcoin block the subject did not choose (coordinate_derivation)"
      ],
      "does_not_establish": [
        "correctness of any price, figure or answer the server returns",
        "truth of the compensation declaration; only its presence and shape are measured",
        "quality, competence or fitness of the operator or the service",
        "behaviour at instants not measured or from vantages this gate did not use"
      ]
    },
    {
      "at": "2026-09-08T18:00:33.465Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "a62b2ea3583a703dd417799c1d2e72072e874d3e1a7f320c63fd81607405a252",
      "consent_source": "operator_list",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed; signature verifies"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "d64176a7f5c5ac43",
        "manifest_hash": "591dbbf12456b7fa",
        "server_info_hash": "7c38a9fc88bb5584",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 5,
        "discriminating": 4,
        "cannot_distinguish_pct": 20
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1",
      "coordinate_derivation": {
        "derived": true,
        "window_id": "w2957",
        "salt_commitment": "ff57ab419114d900da6d74f6a7cdc475e04c78435521303497dd862a1bf4b733",
        "salt_created_at": "2026-09-05T18:00:12.389Z",
        "beacon": {
          "height": 965808,
          "block_hash": "0000000000000000000217ec231db790d8ffea4328d608f7e4c7a56736d08eb1",
          "block_time": "2026-09-06T17:06:00.000Z"
        },
        "day_in_window": 0,
        "tool_set_sha256": "520bc56f233a1f283473fb6fa0ef8424143a60eb031ce84cd99c45cf60ee2162",
        "tool_count": 5,
        "fallback": null,
        "reason_code": null,
        "why": null
      },
      "establishes": [
        "at 2026-09-08T18:00:33.465Z this gate (commit 63010ebf09ae, version 0.4.0) measured https://gate.horizonshield.dev/mcp and recorded status verified",
        "conditions passed: agent_card, compensation_disclosure, determinism, mcp_endpoint; conditions failed: none",
        "every hash in this record recomputes from the bytes it names, and record_sha256 recomputes from this record with record_sha256 and recompute_note removed",
        "the measurement instant and the tool measured were derived from a committed salt and a Bitcoin block the subject did not choose (coordinate_derivation)"
      ],
      "does_not_establish": [
        "correctness of any price, figure or answer the server returns",
        "truth of the compensation declaration; only its presence and shape are measured",
        "quality, competence or fitness of the operator or the service",
        "behaviour at instants not measured or from vantages this gate did not use"
      ]
    },
    {
      "at": "2026-09-09T18:00:35.013Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "e9583c2a16ece3652e9c8e17a2bfe6a9ffb05a2ae24d6359486edbe4c75705ab",
      "consent_source": "operator_list",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed; signature verifies"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "d64176a7f5c5ac43",
        "manifest_hash": "591dbbf12456b7fa",
        "server_info_hash": "3fad759b92280dc3",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 5,
        "discriminating": 4,
        "cannot_distinguish_pct": 20
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1",
      "coordinate_derivation": {
        "derived": true,
        "window_id": "w2957",
        "salt_commitment": "ff57ab419114d900da6d74f6a7cdc475e04c78435521303497dd862a1bf4b733",
        "salt_created_at": "2026-09-05T18:00:12.389Z",
        "beacon": {
          "height": 965808,
          "block_hash": "0000000000000000000217ec231db790d8ffea4328d608f7e4c7a56736d08eb1",
          "block_time": "2026-09-06T17:06:00.000Z"
        },
        "day_in_window": 0,
        "tool_set_sha256": "520bc56f233a1f283473fb6fa0ef8424143a60eb031ce84cd99c45cf60ee2162",
        "tool_count": 5,
        "fallback": null,
        "reason_code": null,
        "why": null
      },
      "establishes": [
        "at 2026-09-09T18:00:35.013Z this gate (commit e45da70d1a56, version 0.4.3) measured https://gate.horizonshield.dev/mcp and recorded status verified",
        "conditions passed: agent_card, compensation_disclosure, determinism, mcp_endpoint; conditions failed: none",
        "every hash in this record recomputes from the bytes it names, and record_sha256 recomputes from this record with record_sha256 and recompute_note removed",
        "the measurement instant and the tool measured were derived from a committed salt and a Bitcoin block the subject did not choose (coordinate_derivation)"
      ],
      "does_not_establish": [
        "correctness of any price, figure or answer the server returns",
        "truth of the compensation declaration; only its presence and shape are measured",
        "quality, competence or fitness of the operator or the service",
        "behaviour at instants not measured or from vantages this gate did not use"
      ],
      "record_url": "https://gate.horizonshield.dev/record/e9583c2a16ece3652e9c8e17a2bfe6a9ffb05a2ae24d6359486edbe4c75705ab"
    },
    {
      "at": "2026-09-10T18:01:20.877Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "4c5dd12705825630158e4e36a6a667be79f06ba6bfc2cbcb7ae3df37dcfe5c2c",
      "consent_source": "operator_list",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed; signature verifies"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "d64176a7f5c5ac43",
        "manifest_hash": "591dbbf12456b7fa",
        "server_info_hash": "293d3bd4b5da059c",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 5,
        "discriminating": 4,
        "cannot_distinguish_pct": 20
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1",
      "coordinate_derivation": {
        "derived": true,
        "window_id": "w2958",
        "salt_commitment": "9f2d4322df312216e896440c75dceb69f2893f7b4df7437d2232e303060f5323",
        "salt_created_at": "2026-09-06T18:00:45.296Z",
        "beacon": {
          "height": 966383,
          "block_hash": "0000000000000000000174657b2639569b487df299ead571c5ce34b8f7f2f95a",
          "block_time": "2026-09-10T16:59:35.000Z"
        },
        "day_in_window": 3,
        "tool_set_sha256": "520bc56f233a1f283473fb6fa0ef8424143a60eb031ce84cd99c45cf60ee2162",
        "tool_count": 5,
        "fallback": null,
        "reason_code": null,
        "why": null
      },
      "establishes": [
        "at 2026-09-10T18:01:20.877Z this gate (commit ff457cfc6dac, version 0.4.5) measured https://gate.horizonshield.dev/mcp and recorded status verified",
        "conditions passed: agent_card, compensation_disclosure, determinism, mcp_endpoint; conditions failed: none",
        "every hash in this record recomputes from the bytes it names, and record_sha256 recomputes from this record with record_sha256 and recompute_note removed",
        "the measurement instant and the tool measured were derived from a committed salt and a Bitcoin block the subject did not choose (coordinate_derivation)",
        "the agent card was signed with the key at https://gate.horizonshield.dev/.well-known/jwks.json (kid hs-2026-09), which is served under the agent's own domain, and the signature verifies over the canonical card, so what the card declares is attributable to the operator and not only to this gate's observation"
      ],
      "does_not_establish": [
        "correctness of any price, figure or answer the server returns",
        "truth of the compensation declaration; only its presence and shape are measured",
        "quality, competence or fitness of the operator or the service",
        "behaviour at instants not measured or from vantages this gate did not use"
      ],
      "record_url": "https://gate.horizonshield.dev/record/4c5dd12705825630158e4e36a6a667be79f06ba6bfc2cbcb7ae3df37dcfe5c2c"
    },
    {
      "at": "2026-09-11T18:01:04.489Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "91150e613492a13788c15e64a12799ed397f6212f5c2540da2d33e1281f1cb3a",
      "consent_source": "operator_list",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed; signature verifies"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "d64176a7f5c5ac43",
        "manifest_hash": "591dbbf12456b7fa",
        "server_info_hash": "b5bb1e57d00d100a",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 5,
        "discriminating": 4,
        "cannot_distinguish_pct": 20
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1",
      "coordinate_derivation": {
        "derived": true,
        "window_id": "w2958",
        "salt_commitment": "9f2d4322df312216e896440c75dceb69f2893f7b4df7437d2232e303060f5323",
        "salt_created_at": "2026-09-06T18:00:45.296Z",
        "beacon": {
          "height": 966383,
          "block_hash": "0000000000000000000174657b2639569b487df299ead571c5ce34b8f7f2f95a",
          "block_time": "2026-09-10T16:59:35.000Z"
        },
        "day_in_window": 3,
        "tool_set_sha256": "520bc56f233a1f283473fb6fa0ef8424143a60eb031ce84cd99c45cf60ee2162",
        "tool_count": 5,
        "fallback": null,
        "reason_code": null,
        "why": null
      },
      "establishes": [
        "at 2026-09-11T18:01:04.489Z this gate (commit edf783cf37d7, version 0.4.7) measured https://gate.horizonshield.dev/mcp and recorded status verified",
        "conditions passed: agent_card, compensation_disclosure, determinism, mcp_endpoint; conditions failed: none",
        "every hash in this record recomputes from the bytes it names, and record_sha256 recomputes from this record with record_sha256 and recompute_note removed",
        "the measurement instant and the tool measured were derived from a committed salt and a Bitcoin block the subject did not choose (coordinate_derivation)",
        "the agent card was signed with the key at https://gate.horizonshield.dev/.well-known/jwks.json (kid hs-2026-09), which is served under the agent's own domain, and the signature verifies over the canonical card, so what the card declares is attributable to the operator and not only to this gate's observation"
      ],
      "does_not_establish": [
        "correctness of any price, figure or answer the server returns",
        "truth of the compensation declaration; only its presence and shape are measured",
        "quality, competence or fitness of the operator or the service",
        "behaviour at instants not measured or from vantages this gate did not use"
      ],
      "record_url": "https://gate.horizonshield.dev/record/91150e613492a13788c15e64a12799ed397f6212f5c2540da2d33e1281f1cb3a"
    },
    {
      "at": "2026-09-12T18:01:03.623Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "ea7327462e27ae142f2e75f1b2404d9ebca3e4073d31d71a9dbd83a757c06fe4",
      "consent_source": "operator_list",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed; signature verifies"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "d64176a7f5c5ac43",
        "manifest_hash": "591dbbf12456b7fa",
        "server_info_hash": "b5bb1e57d00d100a",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 5,
        "discriminating": 4,
        "cannot_distinguish_pct": 20
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1",
      "coordinate_derivation": {
        "derived": true,
        "window_id": "w2958",
        "salt_commitment": "9f2d4322df312216e896440c75dceb69f2893f7b4df7437d2232e303060f5323",
        "salt_created_at": "2026-09-06T18:00:45.296Z",
        "beacon": {
          "height": 966383,
          "block_hash": "0000000000000000000174657b2639569b487df299ead571c5ce34b8f7f2f95a",
          "block_time": "2026-09-10T16:59:35.000Z"
        },
        "day_in_window": 3,
        "tool_set_sha256": "520bc56f233a1f283473fb6fa0ef8424143a60eb031ce84cd99c45cf60ee2162",
        "tool_count": 5,
        "fallback": null,
        "reason_code": null,
        "why": null
      },
      "establishes": [
        "at 2026-09-12T18:01:03.623Z this gate (commit edf783cf37d7, version 0.4.7) measured https://gate.horizonshield.dev/mcp and recorded status verified",
        "conditions passed: agent_card, compensation_disclosure, determinism, mcp_endpoint; conditions failed: none",
        "every hash in this record recomputes from the bytes it names, and record_sha256 recomputes from this record with record_sha256 and recompute_note removed",
        "the measurement instant and the tool measured were derived from a committed salt and a Bitcoin block the subject did not choose (coordinate_derivation)",
        "the agent card was signed with the key at https://gate.horizonshield.dev/.well-known/jwks.json (kid hs-2026-09), which is served under the agent's own domain, and the signature verifies over the canonical card, so what the card declares is attributable to the operator and not only to this gate's observation"
      ],
      "does_not_establish": [
        "correctness of any price, figure or answer the server returns",
        "truth of the compensation declaration; only its presence and shape are measured",
        "quality, competence or fitness of the operator or the service",
        "behaviour at instants not measured or from vantages this gate did not use"
      ],
      "record_url": "https://gate.horizonshield.dev/record/ea7327462e27ae142f2e75f1b2404d9ebca3e4073d31d71a9dbd83a757c06fe4"
    },
    {
      "at": "2026-09-13T18:01:02.622Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "323aa18dfc780ed2fe746f2c32fb436e4cc11220ef73c35ccd56fc4ba4766d2c",
      "consent_source": "operator_list",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed; signature verifies"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "d64176a7f5c5ac43",
        "manifest_hash": "591dbbf12456b7fa",
        "server_info_hash": "b5bb1e57d00d100a",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 5,
        "discriminating": 4,
        "cannot_distinguish_pct": 20
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1",
      "coordinate_derivation": {
        "derived": true,
        "window_id": "w2958",
        "salt_commitment": "9f2d4322df312216e896440c75dceb69f2893f7b4df7437d2232e303060f5323",
        "salt_created_at": "2026-09-06T18:00:45.296Z",
        "beacon": {
          "height": 966383,
          "block_hash": "0000000000000000000174657b2639569b487df299ead571c5ce34b8f7f2f95a",
          "block_time": "2026-09-10T16:59:35.000Z"
        },
        "day_in_window": 3,
        "tool_set_sha256": "520bc56f233a1f283473fb6fa0ef8424143a60eb031ce84cd99c45cf60ee2162",
        "tool_count": 5,
        "fallback": null,
        "reason_code": null,
        "why": null
      },
      "establishes": [
        "at 2026-09-13T18:01:02.622Z this gate (commit edf783cf37d7, version 0.4.7) measured https://gate.horizonshield.dev/mcp and recorded status verified",
        "conditions passed: agent_card, compensation_disclosure, determinism, mcp_endpoint; conditions failed: none",
        "every hash in this record recomputes from the bytes it names, and record_sha256 recomputes from this record with record_sha256 and recompute_note removed",
        "the measurement instant and the tool measured were derived from a committed salt and a Bitcoin block the subject did not choose (coordinate_derivation)",
        "the agent card was signed with the key at https://gate.horizonshield.dev/.well-known/jwks.json (kid hs-2026-09), which is served under the agent's own domain, and the signature verifies over the canonical card, so what the card declares is attributable to the operator and not only to this gate's observation"
      ],
      "does_not_establish": [
        "correctness of any price, figure or answer the server returns",
        "truth of the compensation declaration; only its presence and shape are measured",
        "quality, competence or fitness of the operator or the service",
        "behaviour at instants not measured or from vantages this gate did not use"
      ],
      "record_url": "https://gate.horizonshield.dev/record/323aa18dfc780ed2fe746f2c32fb436e4cc11220ef73c35ccd56fc4ba4766d2c"
    },
    {
      "at": "2026-09-14T18:00:57.852Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "4ab212815624a6ee3dea73065078d3ad8acb68a587368ef74b9c0fcec93e7a29",
      "consent_source": "operator_list",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed; signature verifies"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "d64176a7f5c5ac43",
        "manifest_hash": "591dbbf12456b7fa",
        "server_info_hash": "b5bb1e57d00d100a",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 5,
        "discriminating": 4,
        "cannot_distinguish_pct": 20
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1",
      "coordinate_derivation": {
        "derived": true,
        "window_id": "w2958",
        "salt_commitment": "9f2d4322df312216e896440c75dceb69f2893f7b4df7437d2232e303060f5323",
        "salt_created_at": "2026-09-06T18:00:45.296Z",
        "beacon": {
          "height": 966383,
          "block_hash": "0000000000000000000174657b2639569b487df299ead571c5ce34b8f7f2f95a",
          "block_time": "2026-09-10T16:59:35.000Z"
        },
        "day_in_window": 3,
        "tool_set_sha256": "520bc56f233a1f283473fb6fa0ef8424143a60eb031ce84cd99c45cf60ee2162",
        "tool_count": 5,
        "fallback": null,
        "reason_code": null,
        "why": null
      },
      "establishes": [
        "at 2026-09-14T18:00:57.852Z this gate (commit 81e545ce59a0, version 0.4.7) measured https://gate.horizonshield.dev/mcp and recorded status verified",
        "conditions passed: agent_card, compensation_disclosure, determinism, mcp_endpoint; conditions failed: none",
        "every hash in this record recomputes from the bytes it names, and record_sha256 recomputes from this record with record_sha256 and recompute_note removed",
        "the measurement instant and the tool measured were derived from a committed salt and a Bitcoin block the subject did not choose (coordinate_derivation)",
        "the agent card was signed with the key at https://gate.horizonshield.dev/.well-known/jwks.json (kid hs-2026-09), which is served on the agent's own host, and the signature verifies over the canonical card, so what the card declares is attributable to the operator and not only to this gate's observation"
      ],
      "does_not_establish": [
        "correctness of any price, figure or answer the server returns",
        "truth of the compensation declaration; only its presence and shape are measured",
        "quality, competence or fitness of the operator or the service",
        "behaviour at instants not measured or from vantages this gate did not use"
      ],
      "record_url": "https://gate.horizonshield.dev/record/4ab212815624a6ee3dea73065078d3ad8acb68a587368ef74b9c0fcec93e7a29"
    },
    {
      "at": "2026-09-15T18:01:22.871Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "58ae4048f3ce32f8a811ee9d7fe9a9d8ed41cd724d9082bc4c670ec0562cc7ab",
      "consent_source": "operator_list",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed; signature verifies"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "d64176a7f5c5ac43",
        "manifest_hash": "591dbbf12456b7fa",
        "server_info_hash": "b5bb1e57d00d100a",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 5,
        "discriminating": 4,
        "cannot_distinguish_pct": 20
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1",
      "coordinate_derivation": {
        "derived": true,
        "window_id": "w2958",
        "salt_commitment": "9f2d4322df312216e896440c75dceb69f2893f7b4df7437d2232e303060f5323",
        "salt_created_at": "2026-09-06T18:00:45.296Z",
        "beacon": {
          "height": 966383,
          "block_hash": "0000000000000000000174657b2639569b487df299ead571c5ce34b8f7f2f95a",
          "block_time": "2026-09-10T16:59:35.000Z"
        },
        "day_in_window": 3,
        "tool_set_sha256": "520bc56f233a1f283473fb6fa0ef8424143a60eb031ce84cd99c45cf60ee2162",
        "tool_count": 5,
        "fallback": null,
        "reason_code": null,
        "why": null
      },
      "establishes": [
        "at 2026-09-15T18:01:22.871Z this gate (commit 4f3f6917181e, version 0.4.7) measured https://gate.horizonshield.dev/mcp and recorded status verified",
        "conditions passed: agent_card, compensation_disclosure, determinism, mcp_endpoint; conditions failed: none",
        "every hash in this record recomputes from the bytes it names, and record_sha256 recomputes from this record with record_sha256 and recompute_note removed",
        "the measurement instant and the tool measured were derived from a committed salt and a Bitcoin block the subject did not choose (coordinate_derivation)",
        "the agent card was signed with the key at https://gate.horizonshield.dev/.well-known/jwks.json (kid hs-2026-09), which is served on the agent's own host, and the signature verifies over the canonical card, so what the card declares is attributable to the operator and not only to this gate's observation"
      ],
      "does_not_establish": [
        "correctness of any price, figure or answer the server returns",
        "truth of the compensation declaration; only its presence and shape are measured",
        "quality, competence or fitness of the operator or the service",
        "behaviour at instants not measured or from vantages this gate did not use"
      ],
      "record_url": "https://gate.horizonshield.dev/record/58ae4048f3ce32f8a811ee9d7fe9a9d8ed41cd724d9082bc4c670ec0562cc7ab"
    },
    {
      "at": "2026-09-16T18:00:31.677Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "8a304b300bb50325792b3203f5fd9c2a8103cdac6a047342d49360813ce1b8bd",
      "consent_source": "operator_list",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed; signature verifies"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "d64176a7f5c5ac43",
        "manifest_hash": "591dbbf12456b7fa",
        "server_info_hash": "b5bb1e57d00d100a",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 5,
        "discriminating": 4,
        "cannot_distinguish_pct": 20
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1",
      "coordinate_derivation": {
        "derived": true,
        "window_id": "w2958",
        "salt_commitment": "9f2d4322df312216e896440c75dceb69f2893f7b4df7437d2232e303060f5323",
        "salt_created_at": "2026-09-06T18:00:45.296Z",
        "beacon": {
          "height": 966383,
          "block_hash": "0000000000000000000174657b2639569b487df299ead571c5ce34b8f7f2f95a",
          "block_time": "2026-09-10T16:59:35.000Z"
        },
        "day_in_window": 3,
        "tool_set_sha256": "520bc56f233a1f283473fb6fa0ef8424143a60eb031ce84cd99c45cf60ee2162",
        "tool_count": 5,
        "fallback": null,
        "reason_code": null,
        "why": null
      },
      "establishes": [
        "at 2026-09-16T18:00:31.677Z this gate (commit unpinned: this deployment did not inject a commit (deploy_gate.sh not used), version 0.4.7) measured https://gate.horizonshield.dev/mcp and recorded status verified",
        "conditions passed: agent_card, compensation_disclosure, determinism, mcp_endpoint; conditions failed: none",
        "every hash in this record recomputes from the bytes it names, and record_sha256 recomputes from this record with record_sha256 and recompute_note removed",
        "the measurement instant and the tool measured were derived from a committed salt and a Bitcoin block the subject did not choose (coordinate_derivation)",
        "the agent card was signed with the key at https://gate.horizonshield.dev/.well-known/jwks.json (kid hs-2026-09), which is served on the agent's own host, and the signature verifies over the canonical card, so what the card declares is attributable to the operator and not only to this gate's observation"
      ],
      "does_not_establish": [
        "correctness of any price, figure or answer the server returns",
        "truth of the compensation declaration; only its presence and shape are measured",
        "quality, competence or fitness of the operator or the service",
        "behaviour at instants not measured or from vantages this gate did not use"
      ],
      "record_url": "https://gate.horizonshield.dev/record/8a304b300bb50325792b3203f5fd9c2a8103cdac6a047342d49360813ce1b8bd"
    },
    {
      "at": "2026-09-17T18:01:22.064Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "3e509f3e46610304e5f8b28507e4f1ebab1ae40651acbf5bf339c204f762f607",
      "consent_source": "operator_list",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed; signature verifies"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "d64176a7f5c5ac43",
        "manifest_hash": "591dbbf12456b7fa",
        "server_info_hash": "b5bb1e57d00d100a",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 5,
        "discriminating": 4,
        "cannot_distinguish_pct": 20
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1",
      "coordinate_derivation": {
        "derived": true,
        "window_id": "w2959",
        "salt_commitment": "bc450f9e8d3fdc6b7cc2eb587dd33af6bb6f59ca133fa268e7db9539f23afe2b",
        "salt_created_at": "2026-09-10T18:00:31.627Z",
        "beacon": {
          "height": 967443,
          "block_hash": "0000000000000000000229e636cb9bb92708e76b1360a8096dec35b81ddd20ef",
          "block_time": "2026-09-17T17:15:49.000Z"
        },
        "day_in_window": 3,
        "tool_set_sha256": "520bc56f233a1f283473fb6fa0ef8424143a60eb031ce84cd99c45cf60ee2162",
        "tool_count": 5,
        "fallback": null,
        "reason_code": null,
        "why": null
      },
      "establishes": [
        "at 2026-09-17T18:01:22.064Z this gate (commit unpinned: this deployment did not inject a commit (deploy_gate.sh not used), version 0.4.7) measured https://gate.horizonshield.dev/mcp and recorded status verified",
        "conditions passed: agent_card, compensation_disclosure, determinism, mcp_endpoint; conditions failed: none",
        "every hash in this record recomputes from the bytes it names, and record_sha256 recomputes from this record with record_sha256 and recompute_note removed",
        "the measurement instant and the tool measured were derived from a committed salt and a Bitcoin block the subject did not choose (coordinate_derivation)",
        "the agent card was signed with the key at https://gate.horizonshield.dev/.well-known/jwks.json (kid hs-2026-09), which is served on the agent's own host, and the signature verifies over the canonical card, so what the card declares is attributable to the operator and not only to this gate's observation"
      ],
      "does_not_establish": [
        "correctness of any price, figure or answer the server returns",
        "truth of the compensation declaration; only its presence and shape are measured",
        "quality, competence or fitness of the operator or the service",
        "behaviour at instants not measured or from vantages this gate did not use"
      ],
      "record_url": "https://gate.horizonshield.dev/record/3e509f3e46610304e5f8b28507e4f1ebab1ae40651acbf5bf339c204f762f607"
    },
    {
      "at": "2026-09-18T18:01:42.326Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "8f7d07d00d807ef01841aaced37e106687b218dfc7585126e30de3d4651fef15",
      "consent_source": "operator_list",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed; signature verifies"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "d64176a7f5c5ac43",
        "manifest_hash": "591dbbf12456b7fa",
        "server_info_hash": "b5bb1e57d00d100a",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 5,
        "discriminating": 4,
        "cannot_distinguish_pct": 20
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1",
      "coordinate_derivation": {
        "derived": true,
        "window_id": "w2959",
        "salt_commitment": "bc450f9e8d3fdc6b7cc2eb587dd33af6bb6f59ca133fa268e7db9539f23afe2b",
        "salt_created_at": "2026-09-10T18:00:31.627Z",
        "beacon": {
          "height": 967443,
          "block_hash": "0000000000000000000229e636cb9bb92708e76b1360a8096dec35b81ddd20ef",
          "block_time": "2026-09-17T17:15:49.000Z"
        },
        "day_in_window": 3,
        "tool_set_sha256": "520bc56f233a1f283473fb6fa0ef8424143a60eb031ce84cd99c45cf60ee2162",
        "tool_count": 5,
        "fallback": null,
        "reason_code": null,
        "why": null
      },
      "establishes": [
        "at 2026-09-18T18:01:42.326Z this gate (commit unpinned: this deployment did not inject a commit (deploy_gate.sh not used), version 0.4.7) measured https://gate.horizonshield.dev/mcp and recorded status verified",
        "conditions passed: agent_card, compensation_disclosure, determinism, mcp_endpoint; conditions failed: none",
        "every hash in this record recomputes from the bytes it names, and record_sha256 recomputes from this record with record_sha256 and recompute_note removed",
        "the measurement instant and the tool measured were derived from a committed salt and a Bitcoin block the subject did not choose (coordinate_derivation)",
        "the agent card was signed with the key at https://gate.horizonshield.dev/.well-known/jwks.json (kid hs-2026-09), which is served on the agent's own host, and the signature verifies over the canonical card, so what the card declares is attributable to the operator and not only to this gate's observation"
      ],
      "does_not_establish": [
        "correctness of any price, figure or answer the server returns",
        "truth of the compensation declaration; only its presence and shape are measured",
        "quality, competence or fitness of the operator or the service",
        "behaviour at instants not measured or from vantages this gate did not use"
      ],
      "record_url": "https://gate.horizonshield.dev/record/8f7d07d00d807ef01841aaced37e106687b218dfc7585126e30de3d4651fef15"
    },
    {
      "at": "2026-09-19T18:01:39.428Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "afc608fc1150c7c9bd2c69d1ec50afc895110b67276b2dd99f3a70925d810c04",
      "consent_source": "operator_list",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed; signature verifies"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "d64176a7f5c5ac43",
        "manifest_hash": "591dbbf12456b7fa",
        "server_info_hash": "b5bb1e57d00d100a",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 5,
        "discriminating": 4,
        "cannot_distinguish_pct": 20
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1",
      "coordinate_derivation": {
        "derived": true,
        "window_id": "w2959",
        "salt_commitment": "bc450f9e8d3fdc6b7cc2eb587dd33af6bb6f59ca133fa268e7db9539f23afe2b",
        "salt_created_at": "2026-09-10T18:00:31.627Z",
        "beacon": {
          "height": 967443,
          "block_hash": "0000000000000000000229e636cb9bb92708e76b1360a8096dec35b81ddd20ef",
          "block_time": "2026-09-17T17:15:49.000Z"
        },
        "day_in_window": 3,
        "tool_set_sha256": "520bc56f233a1f283473fb6fa0ef8424143a60eb031ce84cd99c45cf60ee2162",
        "tool_count": 5,
        "fallback": null,
        "reason_code": null,
        "why": null
      },
      "establishes": [
        "at 2026-09-19T18:01:39.428Z this gate (commit unpinned: this deployment did not inject a commit (deploy_gate.sh not used), version 0.4.7) measured https://gate.horizonshield.dev/mcp and recorded status verified",
        "conditions passed: agent_card, compensation_disclosure, determinism, mcp_endpoint; conditions failed: none",
        "every hash in this record recomputes from the bytes it names, and record_sha256 recomputes from this record with record_sha256 and recompute_note removed",
        "the measurement instant and the tool measured were derived from a committed salt and a Bitcoin block the subject did not choose (coordinate_derivation)",
        "the agent card was signed with the key at https://gate.horizonshield.dev/.well-known/jwks.json (kid hs-2026-09), which is served on the agent's own host, and the signature verifies over the canonical card, so what the card declares is attributable to the operator and not only to this gate's observation"
      ],
      "does_not_establish": [
        "correctness of any price, figure or answer the server returns",
        "truth of the compensation declaration; only its presence and shape are measured",
        "quality, competence or fitness of the operator or the service",
        "behaviour at instants not measured or from vantages this gate did not use"
      ],
      "record_url": "https://gate.horizonshield.dev/record/afc608fc1150c7c9bd2c69d1ec50afc895110b67276b2dd99f3a70925d810c04"
    },
    {
      "at": "2026-09-20T18:01:23.442Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "ecb562a2a52aef8479806eb707df89b760e0f064b1f8d3e04b9b9cafd7c4e437",
      "consent_source": "operator_list",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed; signature verifies"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "d64176a7f5c5ac43",
        "manifest_hash": "591dbbf12456b7fa",
        "server_info_hash": "7549b2fb521f6e0e",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 5,
        "discriminating": 4,
        "cannot_distinguish_pct": 20
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1",
      "coordinate_derivation": {
        "derived": true,
        "window_id": "w2959",
        "salt_commitment": "bc450f9e8d3fdc6b7cc2eb587dd33af6bb6f59ca133fa268e7db9539f23afe2b",
        "salt_created_at": "2026-09-10T18:00:31.627Z",
        "beacon": {
          "height": 967443,
          "block_hash": "0000000000000000000229e636cb9bb92708e76b1360a8096dec35b81ddd20ef",
          "block_time": "2026-09-17T17:15:49.000Z"
        },
        "day_in_window": 3,
        "tool_set_sha256": "520bc56f233a1f283473fb6fa0ef8424143a60eb031ce84cd99c45cf60ee2162",
        "tool_count": 5,
        "fallback": null,
        "reason_code": null,
        "why": null
      },
      "establishes": [
        "at 2026-09-20T18:01:23.442Z this gate (commit 0cfe994dbc5a, version 0.4.14) measured https://gate.horizonshield.dev/mcp and recorded status verified",
        "conditions passed: agent_card, compensation_disclosure, determinism, mcp_endpoint; conditions failed: none",
        "every hash in this record recomputes from the bytes it names, and record_sha256 recomputes from this record with record_sha256 and recompute_note removed",
        "the measurement instant and the tool measured were derived from a committed salt and a Bitcoin block the subject did not choose (coordinate_derivation)",
        "the agent card was signed with the key at https://gate.horizonshield.dev/.well-known/jwks.json (kid hs-2026-09), which is served on the agent's own host, and the signature verifies over the canonical card, so what the card declares is attributable to the operator and not only to this gate's observation"
      ],
      "does_not_establish": [
        "correctness of any price, figure or answer the server returns",
        "truth of the compensation declaration; only its presence and shape are measured",
        "quality, competence or fitness of the operator or the service",
        "behaviour at instants not measured or from vantages this gate did not use"
      ],
      "record_url": "https://gate.horizonshield.dev/record/ecb562a2a52aef8479806eb707df89b760e0f064b1f8d3e04b9b9cafd7c4e437"
    },
    {
      "at": "2026-09-21T18:01:29.349Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "3b78979c0abb17f631deee57aba6b30eb755751828cb297f726d838983036eac",
      "consent_source": "operator_list",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed; signature verifies"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "d64176a7f5c5ac43",
        "manifest_hash": "591dbbf12456b7fa",
        "server_info_hash": "7549b2fb521f6e0e",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 5,
        "discriminating": 4,
        "cannot_distinguish_pct": 20
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1",
      "coordinate_derivation": {
        "derived": true,
        "window_id": "w2959",
        "salt_commitment": "bc450f9e8d3fdc6b7cc2eb587dd33af6bb6f59ca133fa268e7db9539f23afe2b",
        "salt_created_at": "2026-09-10T18:00:31.627Z",
        "beacon": {
          "height": 967443,
          "block_hash": "0000000000000000000229e636cb9bb92708e76b1360a8096dec35b81ddd20ef",
          "block_time": "2026-09-17T17:15:49.000Z"
        },
        "day_in_window": 3,
        "tool_set_sha256": "520bc56f233a1f283473fb6fa0ef8424143a60eb031ce84cd99c45cf60ee2162",
        "tool_count": 5,
        "fallback": null,
        "reason_code": null,
        "why": null
      },
      "establishes": [
        "at 2026-09-21T18:01:29.349Z this gate (commit 0cfe994dbc5a, version 0.4.14) measured https://gate.horizonshield.dev/mcp and recorded status verified",
        "conditions passed: agent_card, compensation_disclosure, determinism, mcp_endpoint; conditions failed: none",
        "every hash in this record recomputes from the bytes it names, and record_sha256 recomputes from this record with record_sha256 and recompute_note removed",
        "the measurement instant and the tool measured were derived from a committed salt and a Bitcoin block the subject did not choose (coordinate_derivation)",
        "the agent card was signed with the key at https://gate.horizonshield.dev/.well-known/jwks.json (kid hs-2026-09), which is served on the agent's own host, and the signature verifies over the canonical card, so what the card declares is attributable to the operator and not only to this gate's observation"
      ],
      "does_not_establish": [
        "correctness of any price, figure or answer the server returns",
        "truth of the compensation declaration; only its presence and shape are measured",
        "quality, competence or fitness of the operator or the service",
        "behaviour at instants not measured or from vantages this gate did not use"
      ],
      "record_url": "https://gate.horizonshield.dev/record/3b78979c0abb17f631deee57aba6b30eb755751828cb297f726d838983036eac"
    },
    {
      "at": "2026-09-22T18:00:27.210Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "644b78dceeb1565cc9c71154003c768dfab819edce4b890ee9898b71278130c0",
      "consent_source": "operator_list",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed; signature verifies"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "d64176a7f5c5ac43",
        "manifest_hash": "591dbbf12456b7fa",
        "server_info_hash": "7549b2fb521f6e0e",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 5,
        "discriminating": 4,
        "cannot_distinguish_pct": 20
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1",
      "coordinate_derivation": {
        "derived": true,
        "window_id": "w2959",
        "salt_commitment": "bc450f9e8d3fdc6b7cc2eb587dd33af6bb6f59ca133fa268e7db9539f23afe2b",
        "salt_created_at": "2026-09-10T18:00:31.627Z",
        "beacon": {
          "height": 967443,
          "block_hash": "0000000000000000000229e636cb9bb92708e76b1360a8096dec35b81ddd20ef",
          "block_time": "2026-09-17T17:15:49.000Z"
        },
        "day_in_window": 3,
        "tool_set_sha256": "520bc56f233a1f283473fb6fa0ef8424143a60eb031ce84cd99c45cf60ee2162",
        "tool_count": 5,
        "fallback": null,
        "reason_code": null,
        "why": null
      },
      "establishes": [
        "at 2026-09-22T18:00:27.210Z this gate (commit unpinned: this deployment did not inject a commit (deploy_gate.sh not used), version 0.4.14) measured https://gate.horizonshield.dev/mcp and recorded status verified",
        "conditions passed: agent_card, compensation_disclosure, determinism, mcp_endpoint; conditions failed: none",
        "every hash in this record recomputes from the bytes it names, and record_sha256 recomputes from this record with record_sha256 and recompute_note removed",
        "the measurement instant and the tool measured were derived from a committed salt and a Bitcoin block the subject did not choose (coordinate_derivation)",
        "the agent card was signed with the key at https://gate.horizonshield.dev/.well-known/jwks.json (kid hs-2026-09), which is served on the agent's own host, and the signature verifies over the canonical card, so what the card declares is attributable to the operator and not only to this gate's observation"
      ],
      "does_not_establish": [
        "correctness of any price, figure or answer the server returns",
        "truth of the compensation declaration; only its presence and shape are measured",
        "quality, competence or fitness of the operator or the service",
        "behaviour at instants not measured or from vantages this gate did not use"
      ],
      "record_url": "https://gate.horizonshield.dev/record/644b78dceeb1565cc9c71154003c768dfab819edce4b890ee9898b71278130c0"
    },
    {
      "at": "2026-09-23T18:00:25.632Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "666e7ec62ba5637f1571e837808ab8dfb62eb79ad113326d40f99b22c82db75e",
      "consent_source": "operator_list",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed; signature verifies"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "d64176a7f5c5ac43",
        "manifest_hash": "591dbbf12456b7fa",
        "server_info_hash": "7549b2fb521f6e0e",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 5,
        "discriminating": 4,
        "cannot_distinguish_pct": 20
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1",
      "coordinate_derivation": {
        "derived": true,
        "window_id": "w2959",
        "salt_commitment": "bc450f9e8d3fdc6b7cc2eb587dd33af6bb6f59ca133fa268e7db9539f23afe2b",
        "salt_created_at": "2026-09-10T18:00:31.627Z",
        "beacon": {
          "height": 967443,
          "block_hash": "0000000000000000000229e636cb9bb92708e76b1360a8096dec35b81ddd20ef",
          "block_time": "2026-09-17T17:15:49.000Z"
        },
        "day_in_window": 3,
        "tool_set_sha256": "520bc56f233a1f283473fb6fa0ef8424143a60eb031ce84cd99c45cf60ee2162",
        "tool_count": 5,
        "fallback": null,
        "reason_code": null,
        "why": null
      },
      "establishes": [
        "at 2026-09-23T18:00:25.632Z this gate (commit unpinned: this deployment did not inject a commit (deploy_gate.sh not used), version 0.4.14) measured https://gate.horizonshield.dev/mcp and recorded status verified",
        "conditions passed: agent_card, compensation_disclosure, determinism, mcp_endpoint; conditions failed: none",
        "every hash in this record recomputes from the bytes it names, and record_sha256 recomputes from this record with record_sha256 and recompute_note removed",
        "the measurement instant and the tool measured were derived from a committed salt and a Bitcoin block the subject did not choose (coordinate_derivation)",
        "the agent card was signed with the key at https://gate.horizonshield.dev/.well-known/jwks.json (kid hs-2026-09), which is served on the agent's own host, and the signature verifies over the canonical card, so what the card declares is attributable to the operator and not only to this gate's observation"
      ],
      "does_not_establish": [
        "correctness of any price, figure or answer the server returns",
        "truth of the compensation declaration; only its presence and shape are measured",
        "quality, competence or fitness of the operator or the service",
        "behaviour at instants not measured or from vantages this gate did not use"
      ],
      "record_url": "https://gate.horizonshield.dev/record/666e7ec62ba5637f1571e837808ab8dfb62eb79ad113326d40f99b22c82db75e"
    },
    {
      "at": "2026-09-24T18:00:42.244Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "cfed424a6374b5068a1a1feb0fe60eaceddd4443fda8490edab3708adb930a38",
      "consent_source": "operator_list",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed; signature verifies"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "d64176a7f5c5ac43",
        "manifest_hash": "591dbbf12456b7fa",
        "server_info_hash": "7549b2fb521f6e0e",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 5,
        "discriminating": 4,
        "cannot_distinguish_pct": 20
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1",
      "coordinate_derivation": {
        "derived": true,
        "window_id": "w2960",
        "salt_commitment": "1d2a3a28a20f4cf4691301f356c7a7cb178e9cd5498f9033e8e8e63f054757fc",
        "salt_created_at": "2026-09-17T18:01:16.405Z",
        "beacon": {
          "height": 968427,
          "block_hash": "000000000000000000016cebda67db9b191958f6bc6e40aad09cf0affa43251d",
          "block_time": "2026-09-24T16:52:08.000Z"
        },
        "day_in_window": 4,
        "tool_set_sha256": "520bc56f233a1f283473fb6fa0ef8424143a60eb031ce84cd99c45cf60ee2162",
        "tool_count": 5,
        "fallback": null,
        "reason_code": null,
        "why": null
      },
      "establishes": [
        "at 2026-09-24T18:00:42.244Z this gate (commit unpinned: this deployment did not inject a commit (deploy_gate.sh not used), version 0.4.14) measured https://gate.horizonshield.dev/mcp and recorded status verified",
        "conditions passed: agent_card, compensation_disclosure, determinism, mcp_endpoint; conditions failed: none",
        "every hash in this record recomputes from the bytes it names, and record_sha256 recomputes from this record with record_sha256 and recompute_note removed",
        "the measurement instant and the tool measured were derived from a committed salt and a Bitcoin block the subject did not choose (coordinate_derivation)",
        "the agent card was signed with the key at https://gate.horizonshield.dev/.well-known/jwks.json (kid hs-2026-09), which is served on the agent's own host, and the signature verifies over the canonical card, so what the card declares is attributable to the operator and not only to this gate's observation"
      ],
      "does_not_establish": [
        "correctness of any price, figure or answer the server returns",
        "truth of the compensation declaration; only its presence and shape are measured",
        "quality, competence or fitness of the operator or the service",
        "behaviour at instants not measured or from vantages this gate did not use"
      ],
      "record_url": "https://gate.horizonshield.dev/record/cfed424a6374b5068a1a1feb0fe60eaceddd4443fda8490edab3708adb930a38"
    },
    {
      "at": "2026-09-25T18:01:10.397Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "6e5ed6fb04d3f7ab844b4bbbb0eae1740777225d4086a6185e5e2e6a00d4a331",
      "consent_source": "operator_list",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed; signature verifies"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "d64176a7f5c5ac43",
        "manifest_hash": "591dbbf12456b7fa",
        "server_info_hash": "1498c8d79b5511c4",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 5,
        "discriminating": 4,
        "cannot_distinguish_pct": 20
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1",
      "coordinate_derivation": {
        "derived": true,
        "window_id": "w2960",
        "salt_commitment": "1d2a3a28a20f4cf4691301f356c7a7cb178e9cd5498f9033e8e8e63f054757fc",
        "salt_created_at": "2026-09-17T18:01:16.405Z",
        "beacon": {
          "height": 968427,
          "block_hash": "000000000000000000016cebda67db9b191958f6bc6e40aad09cf0affa43251d",
          "block_time": "2026-09-24T16:52:08.000Z"
        },
        "day_in_window": 4,
        "tool_set_sha256": "520bc56f233a1f283473fb6fa0ef8424143a60eb031ce84cd99c45cf60ee2162",
        "tool_count": 5,
        "fallback": null,
        "reason_code": null,
        "why": null
      },
      "establishes": [
        "at 2026-09-25T18:01:10.397Z this gate (commit 9475e33415c3, version 0.4.15) measured https://gate.horizonshield.dev/mcp and recorded status verified",
        "conditions passed: agent_card, compensation_disclosure, determinism, mcp_endpoint; conditions failed: none",
        "every hash in this record recomputes from the bytes it names, and record_sha256 recomputes from this record with record_sha256 and recompute_note removed",
        "the measurement instant and the tool measured were derived from a committed salt and a Bitcoin block the subject did not choose (coordinate_derivation)",
        "the agent card was signed with the key at https://gate.horizonshield.dev/.well-known/jwks.json (kid hs-2026-09), which is served on the agent's own host, and the signature verifies over the canonical card, so what the card declares is attributable to the operator and not only to this gate's observation"
      ],
      "does_not_establish": [
        "correctness of any price, figure or answer the server returns",
        "truth of the compensation declaration; only its presence and shape are measured",
        "quality, competence or fitness of the operator or the service",
        "behaviour at instants not measured or from vantages this gate did not use"
      ],
      "record_url": "https://gate.horizonshield.dev/record/6e5ed6fb04d3f7ab844b4bbbb0eae1740777225d4086a6185e5e2e6a00d4a331"
    },
    {
      "at": "2026-09-26T18:00:36.311Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "3d7a48c0c383dbe3855112818b32055993370b762283a4c8256feb5d99ff2f2e",
      "consent_source": "operator_list",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed; signature verifies"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "d64176a7f5c5ac43",
        "manifest_hash": "591dbbf12456b7fa",
        "server_info_hash": "1498c8d79b5511c4",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 5,
        "discriminating": 4,
        "cannot_distinguish_pct": 20
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1",
      "coordinate_derivation": {
        "derived": true,
        "window_id": "w2960",
        "salt_commitment": "1d2a3a28a20f4cf4691301f356c7a7cb178e9cd5498f9033e8e8e63f054757fc",
        "salt_created_at": "2026-09-17T18:01:16.405Z",
        "beacon": {
          "height": 968427,
          "block_hash": "000000000000000000016cebda67db9b191958f6bc6e40aad09cf0affa43251d",
          "block_time": "2026-09-24T16:52:08.000Z"
        },
        "day_in_window": 4,
        "tool_set_sha256": "520bc56f233a1f283473fb6fa0ef8424143a60eb031ce84cd99c45cf60ee2162",
        "tool_count": 5,
        "fallback": null,
        "reason_code": null,
        "why": null
      },
      "establishes": [
        "at 2026-09-26T18:00:36.311Z this gate (commit 9475e33415c3, version 0.4.15) measured https://gate.horizonshield.dev/mcp and recorded status verified",
        "conditions passed: agent_card, compensation_disclosure, determinism, mcp_endpoint; conditions failed: none",
        "every hash in this record recomputes from the bytes it names, and record_sha256 recomputes from this record with record_sha256 and recompute_note removed",
        "the measurement instant and the tool measured were derived from a committed salt and a Bitcoin block the subject did not choose (coordinate_derivation)",
        "the agent card was signed with the key at https://gate.horizonshield.dev/.well-known/jwks.json (kid hs-2026-09), which is served on the agent's own host, and the signature verifies over the canonical card, so what the card declares is attributable to the operator and not only to this gate's observation"
      ],
      "does_not_establish": [
        "correctness of any price, figure or answer the server returns",
        "truth of the compensation declaration; only its presence and shape are measured",
        "quality, competence or fitness of the operator or the service",
        "behaviour at instants not measured or from vantages this gate did not use"
      ],
      "record_url": "https://gate.horizonshield.dev/record/3d7a48c0c383dbe3855112818b32055993370b762283a4c8256feb5d99ff2f2e"
    },
    {
      "at": "2026-09-27T18:01:39.758Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "52a262eceeb07837d83370554cd3df14e2df3e3943e16407219b2e80e678ed8e",
      "consent_source": "operator_list",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed; signature verifies"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "d64176a7f5c5ac43",
        "manifest_hash": "591dbbf12456b7fa",
        "server_info_hash": "da78712e4ea9b40a",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 5,
        "discriminating": 4,
        "cannot_distinguish_pct": 20
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1",
      "coordinate_derivation": {
        "derived": true,
        "window_id": "w2960",
        "salt_commitment": "1d2a3a28a20f4cf4691301f356c7a7cb178e9cd5498f9033e8e8e63f054757fc",
        "salt_created_at": "2026-09-17T18:01:16.405Z",
        "beacon": {
          "height": 968427,
          "block_hash": "000000000000000000016cebda67db9b191958f6bc6e40aad09cf0affa43251d",
          "block_time": "2026-09-24T16:52:08.000Z"
        },
        "day_in_window": 4,
        "tool_set_sha256": "520bc56f233a1f283473fb6fa0ef8424143a60eb031ce84cd99c45cf60ee2162",
        "tool_count": 5,
        "fallback": null,
        "reason_code": null,
        "why": null
      },
      "establishes": [
        "at 2026-09-27T18:01:39.758Z this gate (commit 18d831518a99, version 0.4.16) measured https://gate.horizonshield.dev/mcp and recorded status verified",
        "conditions passed: agent_card, compensation_disclosure, determinism, mcp_endpoint; conditions failed: none",
        "every hash in this record recomputes from the bytes it names, and record_sha256 recomputes from this record with record_sha256 and recompute_note removed",
        "the measurement instant and the tool measured were derived from a committed salt and a Bitcoin block the subject did not choose (coordinate_derivation)",
        "the agent card was signed with the key at https://gate.horizonshield.dev/.well-known/jwks.json (kid hs-2026-09), which is served on the agent's own host, and the signature verifies over the canonical card, so what the card declares is attributable to the operator and not only to this gate's observation"
      ],
      "does_not_establish": [
        "correctness of any price, figure or answer the server returns",
        "truth of the compensation declaration; only its presence and shape are measured",
        "quality, competence or fitness of the operator or the service",
        "behaviour at instants not measured or from vantages this gate did not use"
      ],
      "record_url": "https://gate.horizonshield.dev/record/52a262eceeb07837d83370554cd3df14e2df3e3943e16407219b2e80e678ed8e"
    },
    {
      "at": "2026-09-28T18:01:21.701Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "7b19f4713bafc32360ac887f1eceaa73cb135d82c27f73e0cfa4051376ed5bea",
      "consent_source": "operator_list",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed; signature verifies"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "a7ae855561f7e259",
        "manifest_hash": "5b2607e53a860e1c",
        "server_info_hash": "ade55284411c0088",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "preflight_agent": "4f4056653181ff2f",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 6,
        "discriminating": 4,
        "cannot_distinguish_pct": 33.3
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1",
      "coordinate_derivation": {
        "derived": true,
        "window_id": "w2960",
        "salt_commitment": "1d2a3a28a20f4cf4691301f356c7a7cb178e9cd5498f9033e8e8e63f054757fc",
        "salt_created_at": "2026-09-17T18:01:16.405Z",
        "beacon": {
          "height": 968427,
          "block_hash": "000000000000000000016cebda67db9b191958f6bc6e40aad09cf0affa43251d",
          "block_time": "2026-09-24T16:52:08.000Z"
        },
        "day_in_window": 4,
        "tool_set_sha256": "30a477b6a8efa9d2b80876142149a9dacb2328da66de9fc9822020c74d63d2ec",
        "tool_count": 6,
        "fallback": null,
        "reason_code": null,
        "why": null
      },
      "establishes": [
        "at 2026-09-28T18:01:21.701Z this gate (commit 21012e48b80b, version 0.4.18) measured https://gate.horizonshield.dev/mcp and recorded status verified",
        "conditions passed: agent_card, compensation_disclosure, determinism, mcp_endpoint; conditions failed: none",
        "every hash in this record recomputes from the bytes it names, and record_sha256 recomputes from this record with record_sha256 and recompute_note removed",
        "the measurement instant and the tool measured were derived from a committed salt and a Bitcoin block the subject did not choose (coordinate_derivation)",
        "the agent card was signed with the key at https://gate.horizonshield.dev/.well-known/jwks.json (kid hs-2026-09), which is served on the agent's own host, and the signature verifies over the canonical card, so what the card declares is attributable to the operator and not only to this gate's observation"
      ],
      "does_not_establish": [
        "correctness of any price, figure or answer the server returns",
        "truth of the compensation declaration; only its presence and shape are measured",
        "quality, competence or fitness of the operator or the service",
        "behaviour at instants not measured or from vantages this gate did not use"
      ],
      "record_url": "https://gate.horizonshield.dev/record/7b19f4713bafc32360ac887f1eceaa73cb135d82c27f73e0cfa4051376ed5bea",
      "surface_change": {
        "added": [
          "preflight_agent"
        ],
        "removed": [],
        "definition_changed": [],
        "note": "The tool surface changed between measurements. This is a dated fact, not a defect: the MCP specification treats tool-list changes as normal operation (notifications/tools/list_changed). Recorded for anyone; judged by no one."
      }
    },
    {
      "at": "2026-09-29T18:00:54.729Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "f19e36efaf315657fff244a1470bbf2e8e8c7ca15901486da136e381c210fa50",
      "consent_source": "operator_list",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed; signature verifies"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "a7ae855561f7e259",
        "manifest_hash": "5b2607e53a860e1c",
        "server_info_hash": "e555c0a469814a62",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "preflight_agent": "4f4056653181ff2f",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "extras_covers": [
          "annotations",
          "_meta",
          "outputSchema",
          "title"
        ],
        "extras_manifest_hash": "f4d3014fcadeb187",
        "extras_hashes": {
          "check_conformance": "4bd8e1177bb0a368",
          "get_conditions": "781041379f0ec4d1",
          "is_verified": "b9a0eff9b87d14d7",
          "lookup_server": "4937b071162e4f9b",
          "preflight_agent": "5d6a17fea5431c9c",
          "verify_verdict": "03f3e03e28a5d374"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 6,
        "discriminating": 4,
        "cannot_distinguish_pct": 33.3
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1",
      "coordinate_derivation": {
        "derived": true,
        "window_id": "w2960",
        "salt_commitment": "1d2a3a28a20f4cf4691301f356c7a7cb178e9cd5498f9033e8e8e63f054757fc",
        "salt_created_at": "2026-09-17T18:01:16.405Z",
        "beacon": {
          "height": 968427,
          "block_hash": "000000000000000000016cebda67db9b191958f6bc6e40aad09cf0affa43251d",
          "block_time": "2026-09-24T16:52:08.000Z"
        },
        "day_in_window": 4,
        "tool_set_sha256": "30a477b6a8efa9d2b80876142149a9dacb2328da66de9fc9822020c74d63d2ec",
        "tool_count": 6,
        "fallback": null,
        "reason_code": null,
        "why": null
      },
      "establishes": [
        "at 2026-09-29T18:00:54.729Z this gate (commit 21ae3d461309, version 0.4.20) measured https://gate.horizonshield.dev/mcp and recorded status verified",
        "conditions passed: agent_card, compensation_disclosure, determinism, mcp_endpoint; conditions failed: none",
        "every hash in this record recomputes from the bytes it names, and record_sha256 recomputes from this record with record_sha256 and recompute_note removed",
        "the measurement instant and the tool measured were derived from a committed salt and a Bitcoin block the subject did not choose (coordinate_derivation)",
        "the agent card was signed with the key at https://gate.horizonshield.dev/.well-known/jwks.json (kid hs-2026-09), which is served on the agent's own host, and the signature verifies over the canonical card, so what the card declares is attributable to the operator and not only to this gate's observation"
      ],
      "does_not_establish": [
        "correctness of any price, figure or answer the server returns",
        "truth of the compensation declaration; only its presence and shape are measured",
        "quality, competence or fitness of the operator or the service",
        "behaviour at instants not measured or from vantages this gate did not use"
      ],
      "record_url": "https://gate.horizonshield.dev/record/f19e36efaf315657fff244a1470bbf2e8e8c7ca15901486da136e381c210fa50"
    },
    {
      "at": "2026-09-30T18:01:16.936Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "69435da6641e04fe31fd0136430e7378f669cdc2210a36ab29f4932bd70ecdc3",
      "consent_source": "operator_list",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed; signature verifies"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "a7ae855561f7e259",
        "manifest_hash": "5b2607e53a860e1c",
        "server_info_hash": "e555c0a469814a62",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "preflight_agent": "4f4056653181ff2f",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "extras_covers": [
          "annotations",
          "_meta",
          "outputSchema",
          "title"
        ],
        "extras_manifest_hash": "f4d3014fcadeb187",
        "extras_hashes": {
          "check_conformance": "4bd8e1177bb0a368",
          "get_conditions": "781041379f0ec4d1",
          "is_verified": "b9a0eff9b87d14d7",
          "lookup_server": "4937b071162e4f9b",
          "preflight_agent": "5d6a17fea5431c9c",
          "verify_verdict": "03f3e03e28a5d374"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 6,
        "discriminating": 4,
        "cannot_distinguish_pct": 33.3
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1",
      "coordinate_derivation": {
        "derived": true,
        "window_id": "w2960",
        "salt_commitment": "1d2a3a28a20f4cf4691301f356c7a7cb178e9cd5498f9033e8e8e63f054757fc",
        "salt_created_at": "2026-09-17T18:01:16.405Z",
        "beacon": {
          "height": 968427,
          "block_hash": "000000000000000000016cebda67db9b191958f6bc6e40aad09cf0affa43251d",
          "block_time": "2026-09-24T16:52:08.000Z"
        },
        "day_in_window": 4,
        "tool_set_sha256": "30a477b6a8efa9d2b80876142149a9dacb2328da66de9fc9822020c74d63d2ec",
        "tool_count": 6,
        "fallback": null,
        "reason_code": null,
        "why": null
      },
      "establishes": [
        "at 2026-09-30T18:01:16.936Z this gate (commit 21ae3d461309, version 0.4.20) measured https://gate.horizonshield.dev/mcp and recorded status verified",
        "conditions passed: agent_card, compensation_disclosure, determinism, mcp_endpoint; conditions failed: none",
        "every hash in this record recomputes from the bytes it names, and record_sha256 recomputes from this record with record_sha256 and recompute_note removed",
        "the measurement instant and the tool measured were derived from a committed salt and a Bitcoin block the subject did not choose (coordinate_derivation)",
        "the agent card was signed with the key at https://gate.horizonshield.dev/.well-known/jwks.json (kid hs-2026-09), which is served on the agent's own host, and the signature verifies over the canonical card, so what the card declares is attributable to the operator and not only to this gate's observation"
      ],
      "does_not_establish": [
        "correctness of any price, figure or answer the server returns",
        "truth of the compensation declaration; only its presence and shape are measured",
        "quality, competence or fitness of the operator or the service",
        "behaviour at instants not measured or from vantages this gate did not use"
      ],
      "record_url": "https://gate.horizonshield.dev/record/69435da6641e04fe31fd0136430e7378f669cdc2210a36ab29f4932bd70ecdc3"
    },
    {
      "at": "2026-10-02T18:01:17.193Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "046a9b3c81d65f23f32be0306f66dfc2b639aaa8b66280542f78dfe9b6944fcd",
      "consent_source": "operator_list",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed; signature verifies"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "a7ae855561f7e259",
        "manifest_hash": "5b2607e53a860e1c",
        "server_info_hash": "e555c0a469814a62",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "preflight_agent": "4f4056653181ff2f",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "extras_covers": [
          "annotations",
          "_meta",
          "outputSchema",
          "title"
        ],
        "extras_manifest_hash": "f4d3014fcadeb187",
        "extras_hashes": {
          "check_conformance": "4bd8e1177bb0a368",
          "get_conditions": "781041379f0ec4d1",
          "is_verified": "b9a0eff9b87d14d7",
          "lookup_server": "4937b071162e4f9b",
          "preflight_agent": "5d6a17fea5431c9c",
          "verify_verdict": "03f3e03e28a5d374"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 6,
        "discriminating": 4,
        "cannot_distinguish_pct": 33.3
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1",
      "coordinate_derivation": {
        "derived": true,
        "window_id": "w2961",
        "salt_commitment": "a610c33a3a00109495458a5ea0314c65f40c3a6175bb1b80c06ce0f8ba295b31",
        "salt_created_at": "2026-09-24T18:00:33.961Z",
        "beacon": {
          "height": 969466,
          "block_hash": "0000000000000000000190274198b6ff8e4c848049f935d9a5bdf0561a0035ed",
          "block_time": "2026-10-01T16:43:37.000Z"
        },
        "day_in_window": 1,
        "tool_set_sha256": "30a477b6a8efa9d2b80876142149a9dacb2328da66de9fc9822020c74d63d2ec",
        "tool_count": 6,
        "fallback": null,
        "reason_code": null,
        "why": null
      },
      "establishes": [
        "at 2026-10-02T18:01:17.193Z this gate (commit 21ae3d461309, version 0.4.20) measured https://gate.horizonshield.dev/mcp and recorded status verified",
        "conditions passed: agent_card, compensation_disclosure, determinism, mcp_endpoint; conditions failed: none",
        "every hash in this record recomputes from the bytes it names, and record_sha256 recomputes from this record with record_sha256 and recompute_note removed",
        "the measurement instant and the tool measured were derived from a committed salt and a Bitcoin block the subject did not choose (coordinate_derivation)",
        "the agent card was signed with the key at https://gate.horizonshield.dev/.well-known/jwks.json (kid hs-2026-09), which is served on the agent's own host, and the signature verifies over the canonical card, so what the card declares is attributable to the operator and not only to this gate's observation"
      ],
      "does_not_establish": [
        "correctness of any price, figure or answer the server returns",
        "truth of the compensation declaration; only its presence and shape are measured",
        "quality, competence or fitness of the operator or the service",
        "behaviour at instants not measured or from vantages this gate did not use"
      ],
      "record_url": "https://gate.horizonshield.dev/record/046a9b3c81d65f23f32be0306f66dfc2b639aaa8b66280542f78dfe9b6944fcd"
    },
    {
      "at": "2026-10-03T18:00:58.216Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "c4c2f7cf1c7cf230d1568aa619251105f4bb5b5140f08bf5fa6f89270a5baae4",
      "consent_source": "operator_list",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed; signature verifies"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "a7ae855561f7e259",
        "manifest_hash": "5b2607e53a860e1c",
        "server_info_hash": "e555c0a469814a62",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "preflight_agent": "4f4056653181ff2f",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "extras_covers": [
          "annotations",
          "_meta",
          "outputSchema",
          "title"
        ],
        "extras_manifest_hash": "f4d3014fcadeb187",
        "extras_hashes": {
          "check_conformance": "4bd8e1177bb0a368",
          "get_conditions": "781041379f0ec4d1",
          "is_verified": "b9a0eff9b87d14d7",
          "lookup_server": "4937b071162e4f9b",
          "preflight_agent": "5d6a17fea5431c9c",
          "verify_verdict": "03f3e03e28a5d374"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 6,
        "discriminating": 4,
        "cannot_distinguish_pct": 33.3
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1",
      "coordinate_derivation": {
        "derived": true,
        "window_id": "w2961",
        "salt_commitment": "a610c33a3a00109495458a5ea0314c65f40c3a6175bb1b80c06ce0f8ba295b31",
        "salt_created_at": "2026-09-24T18:00:33.961Z",
        "beacon": {
          "height": 969466,
          "block_hash": "0000000000000000000190274198b6ff8e4c848049f935d9a5bdf0561a0035ed",
          "block_time": "2026-10-01T16:43:37.000Z"
        },
        "day_in_window": 1,
        "tool_set_sha256": "30a477b6a8efa9d2b80876142149a9dacb2328da66de9fc9822020c74d63d2ec",
        "tool_count": 6,
        "fallback": null,
        "reason_code": null,
        "why": null
      },
      "establishes": [
        "at 2026-10-03T18:00:58.216Z this gate (commit 0194e7f4976e, version 0.4.20) measured https://gate.horizonshield.dev/mcp and recorded status verified",
        "conditions passed: agent_card, compensation_disclosure, determinism, mcp_endpoint; conditions failed: none",
        "every hash in this record recomputes from the bytes it names, and record_sha256 recomputes from this record with record_sha256 and recompute_note removed",
        "the measurement instant and the tool measured were derived from a committed salt and a Bitcoin block the subject did not choose (coordinate_derivation)",
        "the agent card was signed with the key at https://gate.horizonshield.dev/.well-known/jwks.json (kid hs-2026-09), which is served on the agent's own host, and the signature verifies over the canonical card, so what the card declares is attributable to the operator and not only to this gate's observation"
      ],
      "does_not_establish": [
        "correctness of any price, figure or answer the server returns",
        "truth of the compensation declaration; only its presence and shape are measured",
        "quality, competence or fitness of the operator or the service",
        "behaviour at instants not measured or from vantages this gate did not use"
      ],
      "record_url": "https://gate.horizonshield.dev/record/c4c2f7cf1c7cf230d1568aa619251105f4bb5b5140f08bf5fa6f89270a5baae4"
    },
    {
      "at": "2026-10-04T18:00:19.633Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "d1393c46158f983818501df643cce21c2172eb1643d7189ed3bc875487ca8535",
      "consent_source": "operator_list",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed; signature verifies"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "a7ae855561f7e259",
        "manifest_hash": "5b2607e53a860e1c",
        "server_info_hash": "e555c0a469814a62",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "preflight_agent": "4f4056653181ff2f",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "extras_covers": [
          "annotations",
          "_meta",
          "outputSchema",
          "title"
        ],
        "extras_manifest_hash": "f4d3014fcadeb187",
        "extras_hashes": {
          "check_conformance": "4bd8e1177bb0a368",
          "get_conditions": "781041379f0ec4d1",
          "is_verified": "b9a0eff9b87d14d7",
          "lookup_server": "4937b071162e4f9b",
          "preflight_agent": "5d6a17fea5431c9c",
          "verify_verdict": "03f3e03e28a5d374"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 6,
        "discriminating": 4,
        "cannot_distinguish_pct": 33.3
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1",
      "coordinate_derivation": {
        "derived": true,
        "window_id": "w2961",
        "salt_commitment": "a610c33a3a00109495458a5ea0314c65f40c3a6175bb1b80c06ce0f8ba295b31",
        "salt_created_at": "2026-09-24T18:00:33.961Z",
        "beacon": {
          "height": 969466,
          "block_hash": "0000000000000000000190274198b6ff8e4c848049f935d9a5bdf0561a0035ed",
          "block_time": "2026-10-01T16:43:37.000Z"
        },
        "day_in_window": 1,
        "tool_set_sha256": "30a477b6a8efa9d2b80876142149a9dacb2328da66de9fc9822020c74d63d2ec",
        "tool_count": 6,
        "fallback": null,
        "reason_code": null,
        "why": null
      },
      "establishes": [
        "at 2026-10-04T18:00:19.633Z this gate (commit 0194e7f4976e, version 0.4.20) measured https://gate.horizonshield.dev/mcp and recorded status verified",
        "conditions passed: agent_card, compensation_disclosure, determinism, mcp_endpoint; conditions failed: none",
        "every hash in this record recomputes from the bytes it names, and record_sha256 recomputes from this record with record_sha256 and recompute_note removed",
        "the measurement instant and the tool measured were derived from a committed salt and a Bitcoin block the subject did not choose (coordinate_derivation)",
        "the agent card was signed with the key at https://gate.horizonshield.dev/.well-known/jwks.json (kid hs-2026-09), which is served on the agent's own host, and the signature verifies over the canonical card, so what the card declares is attributable to the operator and not only to this gate's observation"
      ],
      "does_not_establish": [
        "correctness of any price, figure or answer the server returns",
        "truth of the compensation declaration; only its presence and shape are measured",
        "quality, competence or fitness of the operator or the service",
        "behaviour at instants not measured or from vantages this gate did not use"
      ],
      "record_url": "https://gate.horizonshield.dev/record/d1393c46158f983818501df643cce21c2172eb1643d7189ed3bc875487ca8535"
    },
    {
      "at": "2026-10-05T18:00:33.603Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "b4046acc25f4fe7b67d2ed251b050de02031600edaf1fbecfb445e02ba9b3815",
      "consent_source": "operator_list",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed; signature verifies"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "a7ae855561f7e259",
        "manifest_hash": "5b2607e53a860e1c",
        "server_info_hash": "e555c0a469814a62",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "preflight_agent": "4f4056653181ff2f",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "extras_covers": [
          "annotations",
          "_meta",
          "outputSchema",
          "title"
        ],
        "extras_manifest_hash": "f4d3014fcadeb187",
        "extras_hashes": {
          "check_conformance": "4bd8e1177bb0a368",
          "get_conditions": "781041379f0ec4d1",
          "is_verified": "b9a0eff9b87d14d7",
          "lookup_server": "4937b071162e4f9b",
          "preflight_agent": "5d6a17fea5431c9c",
          "verify_verdict": "03f3e03e28a5d374"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 6,
        "discriminating": 4,
        "cannot_distinguish_pct": 33.3
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1",
      "coordinate_derivation": {
        "derived": true,
        "window_id": "w2961",
        "salt_commitment": "a610c33a3a00109495458a5ea0314c65f40c3a6175bb1b80c06ce0f8ba295b31",
        "salt_created_at": "2026-09-24T18:00:33.961Z",
        "beacon": {
          "height": 969466,
          "block_hash": "0000000000000000000190274198b6ff8e4c848049f935d9a5bdf0561a0035ed",
          "block_time": "2026-10-01T16:43:37.000Z"
        },
        "day_in_window": 1,
        "tool_set_sha256": "30a477b6a8efa9d2b80876142149a9dacb2328da66de9fc9822020c74d63d2ec",
        "tool_count": 6,
        "fallback": null,
        "reason_code": null,
        "why": null
      },
      "establishes": [
        "at 2026-10-05T18:00:33.603Z this gate (commit 0194e7f4976e, version 0.4.20) measured https://gate.horizonshield.dev/mcp and recorded status verified",
        "conditions passed: agent_card, compensation_disclosure, determinism, mcp_endpoint; conditions failed: none",
        "every hash in this record recomputes from the bytes it names, and record_sha256 recomputes from this record with record_sha256 and recompute_note removed",
        "the measurement instant and the tool measured were derived from a committed salt and a Bitcoin block the subject did not choose (coordinate_derivation)",
        "the agent card was signed with the key at https://gate.horizonshield.dev/.well-known/jwks.json (kid hs-2026-09), which is served on the agent's own host, and the signature verifies over the canonical card, so what the card declares is attributable to the operator and not only to this gate's observation"
      ],
      "does_not_establish": [
        "correctness of any price, figure or answer the server returns",
        "truth of the compensation declaration; only its presence and shape are measured",
        "quality, competence or fitness of the operator or the service",
        "behaviour at instants not measured or from vantages this gate did not use"
      ],
      "record_url": "https://gate.horizonshield.dev/record/b4046acc25f4fe7b67d2ed251b050de02031600edaf1fbecfb445e02ba9b3815"
    },
    {
      "at": "2026-10-06T18:00:33.743Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "e075841f0ede98e142727c97f339d8c57d98accb6b0740305cdf04922fd041f2",
      "consent_source": "operator_list",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed; signature verifies"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "a7ae855561f7e259",
        "manifest_hash": "5b2607e53a860e1c",
        "server_info_hash": "e555c0a469814a62",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "bfb59d75392759f4",
          "preflight_agent": "4f4056653181ff2f",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "extras_covers": [
          "annotations",
          "_meta",
          "outputSchema",
          "title"
        ],
        "extras_manifest_hash": "f4d3014fcadeb187",
        "extras_hashes": {
          "check_conformance": "4bd8e1177bb0a368",
          "get_conditions": "781041379f0ec4d1",
          "is_verified": "b9a0eff9b87d14d7",
          "lookup_server": "4937b071162e4f9b",
          "preflight_agent": "5d6a17fea5431c9c",
          "verify_verdict": "03f3e03e28a5d374"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 6,
        "discriminating": 4,
        "cannot_distinguish_pct": 33.3
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1",
      "coordinate_derivation": {
        "derived": true,
        "window_id": "w2961",
        "salt_commitment": "a610c33a3a00109495458a5ea0314c65f40c3a6175bb1b80c06ce0f8ba295b31",
        "salt_created_at": "2026-09-24T18:00:33.961Z",
        "beacon": {
          "height": 969466,
          "block_hash": "0000000000000000000190274198b6ff8e4c848049f935d9a5bdf0561a0035ed",
          "block_time": "2026-10-01T16:43:37.000Z"
        },
        "day_in_window": 1,
        "tool_set_sha256": "30a477b6a8efa9d2b80876142149a9dacb2328da66de9fc9822020c74d63d2ec",
        "tool_count": 6,
        "fallback": null,
        "reason_code": null,
        "why": null
      },
      "establishes": [
        "at 2026-10-06T18:00:33.743Z this gate (commit 0194e7f4976e, version 0.4.20) measured https://gate.horizonshield.dev/mcp and recorded status verified",
        "conditions passed: agent_card, compensation_disclosure, determinism, mcp_endpoint; conditions failed: none",
        "every hash in this record recomputes from the bytes it names, and record_sha256 recomputes from this record with record_sha256 and recompute_note removed",
        "the measurement instant and the tool measured were derived from a committed salt and a Bitcoin block the subject did not choose (coordinate_derivation)",
        "the agent card was signed with the key at https://gate.horizonshield.dev/.well-known/jwks.json (kid hs-2026-09), which is served on the agent's own host, and the signature verifies over the canonical card, so what the card declares is attributable to the operator and not only to this gate's observation"
      ],
      "does_not_establish": [
        "correctness of any price, figure or answer the server returns",
        "truth of the compensation declaration; only its presence and shape are measured",
        "quality, competence or fitness of the operator or the service",
        "behaviour at instants not measured or from vantages this gate did not use"
      ],
      "record_url": "https://gate.horizonshield.dev/record/e075841f0ede98e142727c97f339d8c57d98accb6b0740305cdf04922fd041f2"
    },
    {
      "at": "2026-10-07T18:01:23.779Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "c26588912fb6c8b7f744d948013aba4a0b9427096c83a67d6d6e6f57be08520e",
      "consent_source": "operator_list",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed; signature verifies"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "a7ae855561f7e259",
        "manifest_hash": "bc95db90c4298dd4",
        "server_info_hash": "e555c0a469814a62",
        "tool_hashes": {
          "check_conformance": "6c9242efbeb8a568",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "2fe0ca861d7903a0",
          "preflight_agent": "4f4056653181ff2f",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "extras_covers": [
          "annotations",
          "_meta",
          "outputSchema",
          "title"
        ],
        "extras_manifest_hash": "d5491a71be8789c5",
        "extras_hashes": {
          "check_conformance": "c85c5f1adbe89505",
          "get_conditions": "93c373ef95a2a2bd",
          "is_verified": "da5899024ccf7651",
          "lookup_server": "5ff810db83984c5e",
          "preflight_agent": "54245c666b3d95c3",
          "verify_verdict": "659f6931e0cc6769"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 6,
        "discriminating": 5,
        "cannot_distinguish_pct": 16.7
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1",
      "coordinate_derivation": {
        "derived": true,
        "window_id": "w2961",
        "salt_commitment": "a610c33a3a00109495458a5ea0314c65f40c3a6175bb1b80c06ce0f8ba295b31",
        "salt_created_at": "2026-09-24T18:00:33.961Z",
        "beacon": {
          "height": 969466,
          "block_hash": "0000000000000000000190274198b6ff8e4c848049f935d9a5bdf0561a0035ed",
          "block_time": "2026-10-01T16:43:37.000Z"
        },
        "day_in_window": 1,
        "tool_set_sha256": "30a477b6a8efa9d2b80876142149a9dacb2328da66de9fc9822020c74d63d2ec",
        "tool_count": 6,
        "fallback": null,
        "reason_code": null,
        "why": null
      },
      "establishes": [
        "at 2026-10-07T18:01:23.779Z this gate (commit 4ada2386ae24, version 0.4.20) measured https://gate.horizonshield.dev/mcp and recorded status verified",
        "conditions passed: agent_card, compensation_disclosure, determinism, mcp_endpoint; conditions failed: none",
        "every hash in this record recomputes from the bytes it names, and record_sha256 recomputes from this record with record_sha256 and recompute_note removed",
        "the measurement instant and the tool measured were derived from a committed salt and a Bitcoin block the subject did not choose (coordinate_derivation)",
        "the agent card was signed with the key at https://gate.horizonshield.dev/.well-known/jwks.json (kid hs-2026-09), which is served on the agent's own host, and the signature verifies over the canonical card, so what the card declares is attributable to the operator and not only to this gate's observation"
      ],
      "does_not_establish": [
        "correctness of any price, figure or answer the server returns",
        "truth of the compensation declaration; only its presence and shape are measured",
        "quality, competence or fitness of the operator or the service",
        "behaviour at instants not measured or from vantages this gate did not use"
      ],
      "record_url": "https://gate.horizonshield.dev/record/c26588912fb6c8b7f744d948013aba4a0b9427096c83a67d6d6e6f57be08520e",
      "surface_change": {
        "added": [],
        "removed": [],
        "definition_changed": [
          "lookup_server"
        ],
        "extras_changed": [
          "check_conformance",
          "get_conditions",
          "is_verified",
          "lookup_server",
          "preflight_agent",
          "verify_verdict"
        ],
        "note": "The tool surface changed between measurements. This is a dated fact, not a defect: the MCP specification treats tool-list changes as normal operation (notifications/tools/list_changed). Recorded for anyone; judged by no one. extras_changed lists tools whose annotations, _meta, outputSchema or title moved while name, description and inputSchema may not have. Annotations such as destructiveHint are what a client reads to decide whether to ask a person first; they are self-declared hints and this gate does not judge whether the new value is true."
      }
    },
    {
      "at": "2026-10-09T18:00:45.375Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "7481947f04474e79f798bb3bcdfca4641cccb5bbd1ee860564ca67519850d708",
      "consent_source": "operator_list",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed; signature verifies"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "a7ae855561f7e259",
        "manifest_hash": "93f6a53c8bb31598",
        "server_info_hash": "e555c0a469814a62",
        "tool_hashes": {
          "check_conformance": "c68de4a02ab39814",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "2fe0ca861d7903a0",
          "preflight_agent": "4f4056653181ff2f",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "extras_covers": [
          "annotations",
          "_meta",
          "outputSchema",
          "title"
        ],
        "extras_manifest_hash": "87700d333d53fb0f",
        "extras_hashes": {
          "check_conformance": "785249d52293602e",
          "get_conditions": "93c373ef95a2a2bd",
          "is_verified": "da5899024ccf7651",
          "lookup_server": "5ff810db83984c5e",
          "preflight_agent": "54245c666b3d95c3",
          "verify_verdict": "659f6931e0cc6769"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 6,
        "discriminating": 5,
        "cannot_distinguish_pct": 16.7
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1",
      "coordinate_derivation": {
        "derived": true,
        "window_id": "w2962",
        "salt_commitment": "837d54ffa4050b9cc48d4730a8ebb6111af5bcde48e8002f41c631029ba26334",
        "salt_created_at": "2026-10-01T18:00:17.119Z",
        "beacon": {
          "height": 970510,
          "block_hash": "00000000000000000001d475a45969bf4991e5351185e475b52a5f523be8aa80",
          "block_time": "2026-10-08T16:00:22.000Z"
        },
        "day_in_window": 4,
        "tool_set_sha256": "30a477b6a8efa9d2b80876142149a9dacb2328da66de9fc9822020c74d63d2ec",
        "tool_count": 6,
        "fallback": null,
        "reason_code": null,
        "why": null
      },
      "establishes": [
        "at 2026-10-09T18:00:45.375Z this gate (commit 4f0ebd2dbb52, version 0.4.20) measured https://gate.horizonshield.dev/mcp and recorded status verified",
        "conditions passed: agent_card, compensation_disclosure, determinism, mcp_endpoint; conditions failed: none",
        "every hash in this record recomputes from the bytes it names, and record_sha256 recomputes from this record with record_sha256 and recompute_note removed",
        "the measurement instant and the tool measured were derived from a committed salt and a Bitcoin block the subject did not choose (coordinate_derivation)",
        "the agent card was signed with the key at https://gate.horizonshield.dev/.well-known/jwks.json (kid hs-2026-09), which is served on the agent's own host, and the signature verifies over the canonical card, so what the card declares is attributable to the operator and not only to this gate's observation"
      ],
      "does_not_establish": [
        "correctness of any price, figure or answer the server returns",
        "truth of the compensation declaration; only its presence and shape are measured",
        "quality, competence or fitness of the operator or the service",
        "behaviour at instants not measured or from vantages this gate did not use"
      ],
      "record_url": "https://gate.horizonshield.dev/record/7481947f04474e79f798bb3bcdfca4641cccb5bbd1ee860564ca67519850d708",
      "surface_change": {
        "added": [],
        "removed": [],
        "definition_changed": [
          "check_conformance"
        ],
        "extras_changed": [
          "check_conformance"
        ],
        "note": "The tool surface changed between measurements. This is a dated fact, not a defect: the MCP specification treats tool-list changes as normal operation (notifications/tools/list_changed). Recorded for anyone; judged by no one. extras_changed lists tools whose annotations, _meta, outputSchema or title moved while name, description and inputSchema may not have. Annotations such as destructiveHint are what a client reads to decide whether to ask a person first; they are self-declared hints and this gate does not judge whether the new value is true."
      }
    },
    {
      "at": "2026-10-10T18:00:19.818Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "a663ec51e52c01931eba9480ae38231ea5455e3bb9b039d5c30da28c4ea7d136",
      "consent_source": "operator_list",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed; signature verifies"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "a7ae855561f7e259",
        "manifest_hash": "93f6a53c8bb31598",
        "server_info_hash": "e555c0a469814a62",
        "tool_hashes": {
          "check_conformance": "c68de4a02ab39814",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "2fe0ca861d7903a0",
          "preflight_agent": "4f4056653181ff2f",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "extras_covers": [
          "annotations",
          "_meta",
          "outputSchema",
          "title"
        ],
        "extras_manifest_hash": "87700d333d53fb0f",
        "extras_hashes": {
          "check_conformance": "785249d52293602e",
          "get_conditions": "93c373ef95a2a2bd",
          "is_verified": "da5899024ccf7651",
          "lookup_server": "5ff810db83984c5e",
          "preflight_agent": "54245c666b3d95c3",
          "verify_verdict": "659f6931e0cc6769"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 6,
        "discriminating": 5,
        "cannot_distinguish_pct": 16.7
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1",
      "coordinate_derivation": {
        "derived": true,
        "window_id": "w2962",
        "salt_commitment": "837d54ffa4050b9cc48d4730a8ebb6111af5bcde48e8002f41c631029ba26334",
        "salt_created_at": "2026-10-01T18:00:17.119Z",
        "beacon": {
          "height": 970510,
          "block_hash": "00000000000000000001d475a45969bf4991e5351185e475b52a5f523be8aa80",
          "block_time": "2026-10-08T16:00:22.000Z"
        },
        "day_in_window": 4,
        "tool_set_sha256": "30a477b6a8efa9d2b80876142149a9dacb2328da66de9fc9822020c74d63d2ec",
        "tool_count": 6,
        "fallback": null,
        "reason_code": null,
        "why": null
      },
      "establishes": [
        "at 2026-10-10T18:00:19.818Z this gate (commit f286bfe1b797, version 0.4.20) measured https://gate.horizonshield.dev/mcp and recorded status verified",
        "conditions passed: agent_card, compensation_disclosure, determinism, mcp_endpoint; conditions failed: none",
        "every hash in this record recomputes from the bytes it names, and record_sha256 recomputes from this record with record_sha256 and recompute_note removed",
        "the measurement instant and the tool measured were derived from a committed salt and a Bitcoin block the subject did not choose (coordinate_derivation)",
        "the agent card was signed with the key at https://gate.horizonshield.dev/.well-known/jwks.json (kid hs-2026-09), which is served on the agent's own host, and the signature verifies over the canonical card, so what the card declares is attributable to the operator and not only to this gate's observation"
      ],
      "does_not_establish": [
        "correctness of any price, figure or answer the server returns",
        "truth of the compensation declaration; only its presence and shape are measured",
        "quality, competence or fitness of the operator or the service",
        "behaviour at instants not measured or from vantages this gate did not use"
      ],
      "record_url": "https://gate.horizonshield.dev/record/a663ec51e52c01931eba9480ae38231ea5455e3bb9b039d5c30da28c4ea7d136"
    },
    {
      "at": "2026-10-11T18:00:44.864Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "641bdcdc5cb3e951f280b3d44546219a186cd847433d7dbc8b4c09f619e2493a",
      "consent_source": "operator_list",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed; signature verifies"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "a7ae855561f7e259",
        "manifest_hash": "93f6a53c8bb31598",
        "server_info_hash": "e555c0a469814a62",
        "tool_hashes": {
          "check_conformance": "c68de4a02ab39814",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "2fe0ca861d7903a0",
          "preflight_agent": "4f4056653181ff2f",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "extras_covers": [
          "annotations",
          "_meta",
          "outputSchema",
          "title"
        ],
        "extras_manifest_hash": "87700d333d53fb0f",
        "extras_hashes": {
          "check_conformance": "785249d52293602e",
          "get_conditions": "93c373ef95a2a2bd",
          "is_verified": "da5899024ccf7651",
          "lookup_server": "5ff810db83984c5e",
          "preflight_agent": "54245c666b3d95c3",
          "verify_verdict": "659f6931e0cc6769"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 6,
        "discriminating": 5,
        "cannot_distinguish_pct": 16.7
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1",
      "coordinate_derivation": {
        "derived": true,
        "window_id": "w2962",
        "salt_commitment": "837d54ffa4050b9cc48d4730a8ebb6111af5bcde48e8002f41c631029ba26334",
        "salt_created_at": "2026-10-01T18:00:17.119Z",
        "beacon": {
          "height": 970510,
          "block_hash": "00000000000000000001d475a45969bf4991e5351185e475b52a5f523be8aa80",
          "block_time": "2026-10-08T16:00:22.000Z"
        },
        "day_in_window": 4,
        "tool_set_sha256": "30a477b6a8efa9d2b80876142149a9dacb2328da66de9fc9822020c74d63d2ec",
        "tool_count": 6,
        "fallback": null,
        "reason_code": null,
        "why": null
      },
      "establishes": [
        "at 2026-10-11T18:00:44.864Z this gate (commit f286bfe1b797, version 0.4.20) measured https://gate.horizonshield.dev/mcp and recorded status verified",
        "conditions passed: agent_card, compensation_disclosure, determinism, mcp_endpoint; conditions failed: none",
        "every hash in this record recomputes from the bytes it names, and record_sha256 recomputes from this record with record_sha256 and recompute_note removed",
        "the measurement instant and the tool measured were derived from a committed salt and a Bitcoin block the subject did not choose (coordinate_derivation)",
        "the agent card was signed with the key at https://gate.horizonshield.dev/.well-known/jwks.json (kid hs-2026-09), which is served on the agent's own host, and the signature verifies over the canonical card, so what the card declares is attributable to the operator and not only to this gate's observation"
      ],
      "does_not_establish": [
        "correctness of any price, figure or answer the server returns",
        "truth of the compensation declaration; only its presence and shape are measured",
        "quality, competence or fitness of the operator or the service",
        "behaviour at instants not measured or from vantages this gate did not use"
      ],
      "record_url": "https://gate.horizonshield.dev/record/641bdcdc5cb3e951f280b3d44546219a186cd847433d7dbc8b4c09f619e2493a"
    },
    {
      "at": "2026-10-13T18:07:02.588Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "7bf871fb1f6799716f21cd41c3496e1217bc2b17b2775f07bef9948486ee2742",
      "consent_source": "operator_list",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed; signature verifies"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "a7ae855561f7e259",
        "manifest_hash": "93f6a53c8bb31598",
        "server_info_hash": "e555c0a469814a62",
        "tool_hashes": {
          "check_conformance": "c68de4a02ab39814",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "2fe0ca861d7903a0",
          "preflight_agent": "4f4056653181ff2f",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "extras_covers": [
          "annotations",
          "_meta",
          "outputSchema",
          "title"
        ],
        "extras_manifest_hash": "87700d333d53fb0f",
        "extras_hashes": {
          "check_conformance": "785249d52293602e",
          "get_conditions": "93c373ef95a2a2bd",
          "is_verified": "da5899024ccf7651",
          "lookup_server": "5ff810db83984c5e",
          "preflight_agent": "54245c666b3d95c3",
          "verify_verdict": "659f6931e0cc6769"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 6,
        "discriminating": 5,
        "cannot_distinguish_pct": 16.7
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1",
      "coordinate_derivation": {
        "derived": true,
        "window_id": "w2962",
        "salt_commitment": "837d54ffa4050b9cc48d4730a8ebb6111af5bcde48e8002f41c631029ba26334",
        "salt_created_at": "2026-10-01T18:00:17.119Z",
        "beacon": {
          "height": 970510,
          "block_hash": "00000000000000000001d475a45969bf4991e5351185e475b52a5f523be8aa80",
          "block_time": "2026-10-08T16:00:22.000Z"
        },
        "day_in_window": 4,
        "tool_set_sha256": "30a477b6a8efa9d2b80876142149a9dacb2328da66de9fc9822020c74d63d2ec",
        "tool_count": 6,
        "fallback": null,
        "reason_code": null,
        "why": null
      },
      "establishes": [
        "at 2026-10-13T18:07:02.588Z this gate (commit c2bb3e026540, version 0.4.20) measured https://gate.horizonshield.dev/mcp and recorded status verified",
        "conditions passed: agent_card, compensation_disclosure, determinism, mcp_endpoint; conditions failed: none",
        "every hash in this record recomputes from the bytes it names, and record_sha256 recomputes from this record with record_sha256 and recompute_note removed",
        "the measurement instant and the tool measured were derived from a committed salt and a Bitcoin block the subject did not choose (coordinate_derivation)",
        "the agent card was signed with the key at https://gate.horizonshield.dev/.well-known/jwks.json (kid hs-2026-09), which is served on the agent's own host, and the signature verifies over the canonical card, so what the card declares is attributable to the operator and not only to this gate's observation"
      ],
      "does_not_establish": [
        "correctness of any price, figure or answer the server returns",
        "truth of the compensation declaration; only its presence and shape are measured",
        "quality, competence or fitness of the operator or the service",
        "behaviour at instants not measured or from vantages this gate did not use"
      ],
      "record_url": "https://gate.horizonshield.dev/record/7bf871fb1f6799716f21cd41c3496e1217bc2b17b2775f07bef9948486ee2742"
    },
    {
      "at": "2026-10-14T18:00:21.874Z",
      "status": "verified",
      "reachable": true,
      "record_sha256": "a1002539f857c63203eca2c973fb67ada8f224a8a199546ec51ef25b4b5b095c",
      "consent_source": "operator_list",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed; signature verifies"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "identical input returned identical output across 2 runs"
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "a7ae855561f7e259",
        "manifest_hash": "93f6a53c8bb31598",
        "server_info_hash": "e555c0a469814a62",
        "tool_hashes": {
          "check_conformance": "c68de4a02ab39814",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "2fe0ca861d7903a0",
          "preflight_agent": "4f4056653181ff2f",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "extras_covers": [
          "annotations",
          "_meta",
          "outputSchema",
          "title"
        ],
        "extras_manifest_hash": "87700d333d53fb0f",
        "extras_hashes": {
          "check_conformance": "785249d52293602e",
          "get_conditions": "93c373ef95a2a2bd",
          "is_verified": "da5899024ccf7651",
          "lookup_server": "5ff810db83984c5e",
          "preflight_agent": "54245c666b3d95c3",
          "verify_verdict": "659f6931e0cc6769"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 6,
        "discriminating": 5,
        "cannot_distinguish_pct": 16.7
      },
      "fingerprint": "verified|agent_card=1,compensation_disclosure=1,determinism=1,mcp_endpoint=1",
      "coordinate_derivation": {
        "derived": true,
        "window_id": "w2962",
        "salt_commitment": "837d54ffa4050b9cc48d4730a8ebb6111af5bcde48e8002f41c631029ba26334",
        "salt_created_at": "2026-10-01T18:00:17.119Z",
        "beacon": {
          "height": 970510,
          "block_hash": "00000000000000000001d475a45969bf4991e5351185e475b52a5f523be8aa80",
          "block_time": "2026-10-08T16:00:22.000Z"
        },
        "day_in_window": 4,
        "tool_set_sha256": "30a477b6a8efa9d2b80876142149a9dacb2328da66de9fc9822020c74d63d2ec",
        "tool_count": 6,
        "fallback": null,
        "reason_code": null,
        "why": null
      },
      "establishes": [
        "at 2026-10-14T18:00:21.874Z this gate (commit c2bb3e026540, version 0.4.20) measured https://gate.horizonshield.dev/mcp and recorded status verified",
        "conditions passed: agent_card, compensation_disclosure, determinism, mcp_endpoint; conditions failed: none",
        "every hash in this record recomputes from the bytes it names, and record_sha256 recomputes from this record with record_sha256 and recompute_note removed",
        "the measurement instant and the tool measured were derived from a committed salt and a Bitcoin block the subject did not choose (coordinate_derivation)",
        "the agent card was signed with the key at https://gate.horizonshield.dev/.well-known/jwks.json (kid hs-2026-09), which is served on the agent's own host, and the signature verifies over the canonical card, so what the card declares is attributable to the operator and not only to this gate's observation"
      ],
      "does_not_establish": [
        "correctness of any price, figure or answer the server returns",
        "truth of the compensation declaration; only its presence and shape are measured",
        "quality, competence or fitness of the operator or the service",
        "behaviour at instants not measured or from vantages this gate did not use"
      ],
      "record_url": "https://gate.horizonshield.dev/record/a1002539f857c63203eca2c973fb67ada8f224a8a199546ec51ef25b4b5b095c"
    },
    {
      "at": "2026-10-15T18:00:24.256Z",
      "status": "pending",
      "reachable": true,
      "record_sha256": "a182c93178befecc1ae30c3c5ff1904b454e0c19ff34a3fbc83710c8371299c3",
      "consent_source": "operator_list",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed; signature verifies"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": false,
          "measured": false,
          "transport": false,
          "reason": "not measured: every tool tried (3 of 6) answered empty arguments with an error, so there was no output to compare. An error echo is not a measurement of determinism."
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "a7ae855561f7e259",
        "manifest_hash": "93f6a53c8bb31598",
        "server_info_hash": "e555c0a469814a62",
        "tool_hashes": {
          "check_conformance": "c68de4a02ab39814",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "2fe0ca861d7903a0",
          "preflight_agent": "4f4056653181ff2f",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "extras_covers": [
          "annotations",
          "_meta",
          "outputSchema",
          "title"
        ],
        "extras_manifest_hash": "87700d333d53fb0f",
        "extras_hashes": {
          "check_conformance": "785249d52293602e",
          "get_conditions": "93c373ef95a2a2bd",
          "is_verified": "da5899024ccf7651",
          "lookup_server": "5ff810db83984c5e",
          "preflight_agent": "54245c666b3d95c3",
          "verify_verdict": "659f6931e0cc6769"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 6,
        "discriminating": 5,
        "cannot_distinguish_pct": 16.7
      },
      "fingerprint": "pending|agent_card=1,compensation_disclosure=1,determinism=0,mcp_endpoint=1",
      "coordinate_derivation": {
        "derived": true,
        "window_id": "w2963",
        "salt_commitment": "0aba314082acc94c8b07cfbd52b3240adc238241da68db426d94cf3205942db8",
        "salt_created_at": "2026-10-08T18:00:19.214Z",
        "beacon": {
          "height": 971599,
          "block_hash": "000000000000000000005d11ad7146e09cfa888440ef0134cc050118507cf163",
          "block_time": "2026-10-15T16:54:28.000Z"
        },
        "day_in_window": 3,
        "tool_set_sha256": "30a477b6a8efa9d2b80876142149a9dacb2328da66de9fc9822020c74d63d2ec",
        "tool_count": 6,
        "fallback": null,
        "reason_code": null,
        "why": null
      },
      "establishes": [
        "at 2026-10-15T18:00:24.256Z this gate (commit c2bb3e026540, version 0.4.20) measured https://gate.horizonshield.dev/mcp and recorded status pending",
        "conditions passed: agent_card, compensation_disclosure, mcp_endpoint; conditions failed: none",
        "every hash in this record recomputes from the bytes it names, and record_sha256 recomputes from this record with record_sha256 and recompute_note removed",
        "the measurement instant and the tool measured were derived from a committed salt and a Bitcoin block the subject did not choose (coordinate_derivation)",
        "the agent card was signed with the key at https://gate.horizonshield.dev/.well-known/jwks.json (kid hs-2026-09), which is served on the agent's own host, and the signature verifies over the canonical card, so what the card declares is attributable to the operator and not only to this gate's observation"
      ],
      "does_not_establish": [
        "correctness of any price, figure or answer the server returns",
        "truth of the compensation declaration; only its presence and shape are measured",
        "quality, competence or fitness of the operator or the service",
        "behaviour at instants not measured or from vantages this gate did not use",
        "conditions not measured on this instant: determinism (unmeasured is not failed)"
      ],
      "record_url": "https://gate.horizonshield.dev/record/a182c93178befecc1ae30c3c5ff1904b454e0c19ff34a3fbc83710c8371299c3"
    },
    {
      "at": "2026-10-16T18:00:27.588Z",
      "status": "pending",
      "reachable": true,
      "record_sha256": "261565f239cc51d832972932eff533c20eb3e7b9267b529109a159f135900c9a",
      "consent_source": "operator_list",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed; signature verifies"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": false,
          "measured": false,
          "transport": false,
          "reason": "not measured: every tool tried (3 of 6) answered empty arguments with an error, so there was no output to compare. An error echo is not a measurement of determinism."
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "a7ae855561f7e259",
        "manifest_hash": "93f6a53c8bb31598",
        "server_info_hash": "e555c0a469814a62",
        "tool_hashes": {
          "check_conformance": "c68de4a02ab39814",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "2fe0ca861d7903a0",
          "preflight_agent": "4f4056653181ff2f",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "extras_covers": [
          "annotations",
          "_meta",
          "outputSchema",
          "title"
        ],
        "extras_manifest_hash": "87700d333d53fb0f",
        "extras_hashes": {
          "check_conformance": "785249d52293602e",
          "get_conditions": "93c373ef95a2a2bd",
          "is_verified": "da5899024ccf7651",
          "lookup_server": "5ff810db83984c5e",
          "preflight_agent": "54245c666b3d95c3",
          "verify_verdict": "659f6931e0cc6769"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 6,
        "discriminating": 5,
        "cannot_distinguish_pct": 16.7
      },
      "fingerprint": "pending|agent_card=1,compensation_disclosure=1,determinism=0,mcp_endpoint=1",
      "coordinate_derivation": {
        "derived": true,
        "window_id": "w2963",
        "salt_commitment": "0aba314082acc94c8b07cfbd52b3240adc238241da68db426d94cf3205942db8",
        "salt_created_at": "2026-10-08T18:00:19.214Z",
        "beacon": {
          "height": 971599,
          "block_hash": "000000000000000000005d11ad7146e09cfa888440ef0134cc050118507cf163",
          "block_time": "2026-10-15T16:54:28.000Z"
        },
        "day_in_window": 3,
        "tool_set_sha256": "30a477b6a8efa9d2b80876142149a9dacb2328da66de9fc9822020c74d63d2ec",
        "tool_count": 6,
        "fallback": null,
        "reason_code": null,
        "why": null
      },
      "establishes": [
        "at 2026-10-16T18:00:27.588Z this gate (commit 9c17cca9f863, version 0.4.20) measured https://gate.horizonshield.dev/mcp and recorded status pending",
        "conditions passed: agent_card, compensation_disclosure, mcp_endpoint; conditions failed: none",
        "every hash in this record recomputes from the bytes it names, and record_sha256 recomputes from this record with record_sha256 and recompute_note removed",
        "the measurement instant and the tool measured were derived from a committed salt and a Bitcoin block the subject did not choose (coordinate_derivation)",
        "the agent card was signed with the key at https://gate.horizonshield.dev/.well-known/jwks.json (kid hs-2026-09), which is served on the agent's own host, and the signature verifies over the canonical card, so what the card declares is attributable to the operator and not only to this gate's observation"
      ],
      "does_not_establish": [
        "correctness of any price, figure or answer the server returns",
        "truth of the compensation declaration; only its presence and shape are measured",
        "quality, competence or fitness of the operator or the service",
        "behaviour at instants not measured or from vantages this gate did not use",
        "conditions not measured on this instant: determinism (unmeasured is not failed)"
      ],
      "record_url": "https://gate.horizonshield.dev/record/261565f239cc51d832972932eff533c20eb3e7b9267b529109a159f135900c9a"
    },
    {
      "at": "2026-10-18T18:00:50.724Z",
      "status": "pending",
      "reachable": true,
      "record_sha256": "9fb95934e43953e0cbc9c30397404f33a90f5926da075c823b0c1a52cbcf9ac2",
      "consent_source": "operator_list",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed; signature verifies"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": false,
          "measured": false,
          "transport": false,
          "reason": "not measured: every tool tried (3 of 6) answered empty arguments with an error, so there was no output to compare. An error echo is not a measurement of determinism."
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "a7ae855561f7e259",
        "manifest_hash": "93f6a53c8bb31598",
        "server_info_hash": "e555c0a469814a62",
        "tool_hashes": {
          "check_conformance": "c68de4a02ab39814",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "2fe0ca861d7903a0",
          "preflight_agent": "4f4056653181ff2f",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "extras_covers": [
          "annotations",
          "_meta",
          "outputSchema",
          "title"
        ],
        "extras_manifest_hash": "87700d333d53fb0f",
        "extras_hashes": {
          "check_conformance": "785249d52293602e",
          "get_conditions": "93c373ef95a2a2bd",
          "is_verified": "da5899024ccf7651",
          "lookup_server": "5ff810db83984c5e",
          "preflight_agent": "54245c666b3d95c3",
          "verify_verdict": "659f6931e0cc6769"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 6,
        "discriminating": 5,
        "cannot_distinguish_pct": 16.7
      },
      "fingerprint": "pending|agent_card=1,compensation_disclosure=1,determinism=0,mcp_endpoint=1",
      "coordinate_derivation": {
        "derived": true,
        "window_id": "w2963",
        "salt_commitment": "0aba314082acc94c8b07cfbd52b3240adc238241da68db426d94cf3205942db8",
        "salt_created_at": "2026-10-08T18:00:19.214Z",
        "beacon": {
          "height": 971599,
          "block_hash": "000000000000000000005d11ad7146e09cfa888440ef0134cc050118507cf163",
          "block_time": "2026-10-15T16:54:28.000Z"
        },
        "day_in_window": 3,
        "tool_set_sha256": "30a477b6a8efa9d2b80876142149a9dacb2328da66de9fc9822020c74d63d2ec",
        "tool_count": 6,
        "fallback": null,
        "reason_code": null,
        "why": null
      },
      "establishes": [
        "at 2026-10-18T18:00:50.724Z this gate (commit 9c17cca9f863, version 0.4.20) measured https://gate.horizonshield.dev/mcp and recorded status pending",
        "conditions passed: agent_card, compensation_disclosure, mcp_endpoint; conditions failed: none",
        "every hash in this record recomputes from the bytes it names, and record_sha256 recomputes from this record with record_sha256 and recompute_note removed",
        "the measurement instant and the tool measured were derived from a committed salt and a Bitcoin block the subject did not choose (coordinate_derivation)",
        "the agent card was signed with the key at https://gate.horizonshield.dev/.well-known/jwks.json (kid hs-2026-09), which is served on the agent's own host, and the signature verifies over the canonical card, so what the card declares is attributable to the operator and not only to this gate's observation"
      ],
      "does_not_establish": [
        "correctness of any price, figure or answer the server returns",
        "truth of the compensation declaration; only its presence and shape are measured",
        "quality, competence or fitness of the operator or the service",
        "behaviour at instants not measured or from vantages this gate did not use",
        "conditions not measured on this instant: determinism (unmeasured is not failed)"
      ],
      "record_url": "https://gate.horizonshield.dev/record/9fb95934e43953e0cbc9c30397404f33a90f5926da075c823b0c1a52cbcf9ac2"
    },
    {
      "at": "2026-10-19T18:00:12.284Z",
      "status": "pending",
      "reachable": true,
      "record_sha256": "814039f40862ea943d187690748da2a75e844a32788cfadc6f72a623ddd7f6c2",
      "consent_source": "operator_list",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed; signature verifies"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": false,
          "measured": false,
          "transport": false,
          "reason": "not measured: every tool tried (3 of 6) answered empty arguments with an error, so there was no output to compare. An error echo is not a measurement of determinism."
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "a7ae855561f7e259",
        "manifest_hash": "93f6a53c8bb31598",
        "server_info_hash": "e555c0a469814a62",
        "tool_hashes": {
          "check_conformance": "c68de4a02ab39814",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "2fe0ca861d7903a0",
          "preflight_agent": "4f4056653181ff2f",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "extras_covers": [
          "annotations",
          "_meta",
          "outputSchema",
          "title"
        ],
        "extras_manifest_hash": "87700d333d53fb0f",
        "extras_hashes": {
          "check_conformance": "785249d52293602e",
          "get_conditions": "93c373ef95a2a2bd",
          "is_verified": "da5899024ccf7651",
          "lookup_server": "5ff810db83984c5e",
          "preflight_agent": "54245c666b3d95c3",
          "verify_verdict": "659f6931e0cc6769"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 6,
        "discriminating": 5,
        "cannot_distinguish_pct": 16.7
      },
      "fingerprint": "pending|agent_card=1,compensation_disclosure=1,determinism=0,mcp_endpoint=1",
      "coordinate_derivation": {
        "derived": true,
        "window_id": "w2963",
        "salt_commitment": "0aba314082acc94c8b07cfbd52b3240adc238241da68db426d94cf3205942db8",
        "salt_created_at": "2026-10-08T18:00:19.214Z",
        "beacon": {
          "height": 971599,
          "block_hash": "000000000000000000005d11ad7146e09cfa888440ef0134cc050118507cf163",
          "block_time": "2026-10-15T16:54:28.000Z"
        },
        "day_in_window": 3,
        "tool_set_sha256": "30a477b6a8efa9d2b80876142149a9dacb2328da66de9fc9822020c74d63d2ec",
        "tool_count": 6,
        "fallback": null,
        "reason_code": null,
        "why": null
      },
      "establishes": [
        "at 2026-10-19T18:00:12.284Z this gate (commit b7af85f689af, version 0.4.20) measured https://gate.horizonshield.dev/mcp and recorded status pending",
        "conditions passed: agent_card, compensation_disclosure, mcp_endpoint; conditions failed: none",
        "every hash in this record recomputes from the bytes it names, and record_sha256 recomputes from this record with record_sha256 and recompute_note removed",
        "the measurement instant and the tool measured were derived from a committed salt and a Bitcoin block the subject did not choose (coordinate_derivation)",
        "the agent card was signed with the key at https://gate.horizonshield.dev/.well-known/jwks.json (kid hs-2026-09), which is served on the agent's own host, and the signature verifies over the canonical card, so what the card declares is attributable to the operator and not only to this gate's observation"
      ],
      "does_not_establish": [
        "correctness of any price, figure or answer the server returns",
        "truth of the compensation declaration; only its presence and shape are measured",
        "quality, competence or fitness of the operator or the service",
        "behaviour at instants not measured or from vantages this gate did not use",
        "conditions not measured on this instant: determinism (unmeasured is not failed)"
      ],
      "record_url": "https://gate.horizonshield.dev/record/814039f40862ea943d187690748da2a75e844a32788cfadc6f72a623ddd7f6c2"
    },
    {
      "at": "2026-10-20T18:01:15.620Z",
      "status": "pending",
      "reachable": true,
      "record_sha256": "d2cfa929f0de6a7a369d4aff735642949d9c129b30071a79c3041c520807128b",
      "consent_source": "operator_list",
      "conditions": {
        "mcp_endpoint": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "MCP endpoint responds to initialize and tools/list"
        },
        "agent_card": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "agent-card published and well-formed; signature verifies"
        },
        "compensation_disclosure": {
          "pass": true,
          "measured": true,
          "transport": false,
          "reason": "compensation structure declared"
        },
        "determinism": {
          "pass": false,
          "measured": false,
          "transport": false,
          "reason": "not measured: every tool tried (3 of 6) answered empty arguments with an error, so there was no output to compare. An error echo is not a measurement of determinism."
        }
      },
      "surface": {
        "complete": true,
        "pages_followed": 1,
        "names_hash": "a7ae855561f7e259",
        "manifest_hash": "93f6a53c8bb31598",
        "server_info_hash": "e555c0a469814a62",
        "tool_hashes": {
          "check_conformance": "c68de4a02ab39814",
          "get_conditions": "2cfe77b5fd14eb53",
          "is_verified": "d08b2eaeddb69207",
          "lookup_server": "2fe0ca861d7903a0",
          "preflight_agent": "4f4056653181ff2f",
          "verify_verdict": "c022a23b3d8ce7b3"
        },
        "extras_covers": [
          "annotations",
          "_meta",
          "outputSchema",
          "title"
        ],
        "extras_manifest_hash": "87700d333d53fb0f",
        "extras_hashes": {
          "check_conformance": "785249d52293602e",
          "get_conditions": "93c373ef95a2a2bd",
          "is_verified": "da5899024ccf7651",
          "lookup_server": "5ff810db83984c5e",
          "preflight_agent": "54245c666b3d95c3",
          "verify_verdict": "659f6931e0cc6769"
        },
        "canonicalization": "rfc8785-jcs",
        "unsafe_integer_scan": "clean"
      },
      "absence_vs_failure": {
        "measured": true,
        "tools_measured": 6,
        "discriminating": 5,
        "cannot_distinguish_pct": 16.7
      },
      "fingerprint": "pending|agent_card=1,compensation_disclosure=1,determinism=0,mcp_endpoint=1",
      "coordinate_derivation": {
        "derived": true,
        "window_id": "w2963",
        "salt_commitment": "0aba314082acc94c8b07cfbd52b3240adc238241da68db426d94cf3205942db8",
        "salt_created_at": "2026-10-08T18:00:19.214Z",
        "beacon": {
          "height": 971599,
          "block_hash": "000000000000000000005d11ad7146e09cfa888440ef0134cc050118507cf163",
          "block_time": "2026-10-15T16:54:28.000Z"
        },
        "day_in_window": 3,
        "tool_set_sha256": "30a477b6a8efa9d2b80876142149a9dacb2328da66de9fc9822020c74d63d2ec",
        "tool_count": 6,
        "fallback": null,
        "reason_code": null,
        "why": null
      },
      "establishes": [
        "at 2026-10-20T18:01:15.620Z this gate (commit b7af85f689af, version 0.4.20) measured https://gate.horizonshield.dev/mcp and recorded status pending",
        "conditions passed: agent_card, compensation_disclosure, mcp_endpoint; conditions failed: none",
        "every hash in this record recomputes from the bytes it names, and record_sha256 recomputes from this record with record_sha256 and recompute_note removed",
        "the measurement instant and the tool measured were derived from a committed salt and a Bitcoin block the subject did not choose (coordinate_derivation)",
        "the agent card was signed with the key at https://gate.horizonshield.dev/.well-known/jwks.json (kid hs-2026-09), which is served on the agent's own host, and the signature verifies over the canonical card, so what the card declares is attributable to the operator and not only to this gate's observation"
      ],
      "does_not_establish": [
        "correctness of any price, figure or answer the server returns",
        "truth of the compensation declaration; only its presence and shape are measured",
        "quality, competence or fitness of the operator or the service",
        "behaviour at instants not measured or from vantages this gate did not use",
        "conditions not measured on this instant: determinism (unmeasured is not failed)"
      ],
      "record_url": "https://gate.horizonshield.dev/record/d2cfa929f0de6a7a369d4aff735642949d9c129b30071a79c3041c520807128b"
    }
  ],
  "correction": {
    "at": "2026-08-20",
    "what": "Entries written before this date stored reachable as (v !== false), so a run where nothing could be measured was recorded as reachable: true.",
    "fix": "gate58 made reachable three-valued: true, false, or null when it was not measured. Entries written from this date carry null on such runs.",
    "affected_in_this_response": 1,
    "entries_are_not_edited": "Past entries keep the bytes they were written with. They carry reachable_note instead, so the record shows both what was written and why it was wrong."
  },
  "retention": {
    "kept_max": 400,
    "note": "The gate keeps the most recent 400 records per endpoint and drops the oldest beyond that (30 until 2026-09-05). Entries are never edited, but they do leave this response. A monthly ring (nenrin-ring-v1) needs the full month, so export before it is gone."
  }
}