{
  "reportType": "beproof-evidence-pack-sample",
  "redacted": true,
  "generatedAt": "2026-05-26T12:00:00Z",
  "auditRun": {
    "runId": "run-2026-05-26-sample",
    "mode": "full",
    "auditMode": "managed",
    "appVersion": "1.0.4",
    "policyPackVersion": "1.2.3",
    "contractVersion": "v0.2.0"
  },
  "summary": {
    "agentsDetected": 5,
    "accessReferences": 227,
    "usageSignals": 45,
    "openFindings": 3,
    "coverageGaps": 0,
    "approvedExceptions": 12
  },
  "inventory": [
    {
      "surface": "mcp_server",
      "name": "XcodeBuildMCP",
      "status": "review_required",
      "source": "[REDACTED]/.mcp.json"
    },
    {
      "surface": "ai_assistant",
      "name": "Cursor",
      "status": "observed",
      "source": "[REDACTED]/Library/Application Support/Cursor"
    }
  ],
  "findings": [
    {
      "id": "finding-sample-001",
      "severity": "critical",
      "title": "Unapproved MCP local command",
      "policy": "POL-F01",
      "agent": "XcodeBuildMCP",
      "status": "open",
      "evidenceRef": "[REDACTED]/.mcp.json"
    },
    {
      "id": "finding-sample-002",
      "severity": "medium",
      "title": "Configured but unused automation",
      "policy": "POL-O01",
      "agent": "Codex automation",
      "status": "open",
      "evidenceRef": "[REDACTED]/.codex/config.toml"
    }
  ],
  "coverageGaps": [],
  "exportManifest": {
    "version": "1.0",
    "artifactPath": "beproof-report-2026-05-26T12-00-00Z.json",
    "artifactSHA256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
    "manifestHash": "55e3c2aee57f288321864745cdc47d51c5f75e0f818d60ec7653dcc1c2bd58a7",
    "signingKeyId": "9ad87613db74e013ba423b66050b0cd9",
    "signatureAlgorithm": "ed25519-v1",
    "signature": "9vHLGSN9qZw70FjouPmCSq/mfR15QFXrg6t1cLjyQJNEhs0TgVzXaMZGyUVipsfqdbc2S/Sf9/wznWMzo/cuBA=="
  }
}