{"external_authenticity_claimed":false,"guarantees_within_boundary":["content_identity","deterministic_tamper_detection","reproducibility","revocation_and_current_authority_selection","fail_closed_workflow"],"not_claimed":["external_authenticity","non_repudiation","owner_tamper_proof_or_worm","resistance_to_compromised_operator_or_admin"],"outside_scope":"Coherent compromise of the trusted operator account or host administrator, including coherent modification of the repository, ledger, or verifier, is outside the Task26 threat model.","schema":"task26-evidence-trust-boundary-v1","scope_statement":"These guarantees apply only while the trusted operator account, host kernel, selected Python/pip toolchain, and sealed wheel bytes remain trustworthy.","signature_claim":"none","trust_anchors":["trusted_operator_account","host_kernel","selected_python_pip_toolchain","sealed_wheel_bytes"]}