{
  "case_id": "DA-MODEL-002",
  "verdict": "PASS",
  "finished_at": "2026-10-13T04:58:49.960638+00:00",
  "python": "3.12.14",
  "method": "Finite-state exhaustive reachable-state traversal, plus seeded property sequences",
  "exhaustive": {
    "verdict": "PASS",
    "states": 106,
    "transitions": 1378,
    "counterexample": null
  },
  "alphabet": [
    "request_1",
    "request_2",
    "receipt",
    "lamp_on",
    "lamp_off",
    "sense_on",
    "sense_off",
    "wrong_ticket",
    "stale",
    "forged",
    "repeat",
    "tick",
    "cancel"
  ],
  "property_sequences": 1000,
  "sequence_length": 100,
  "property_assertions": 200000,
  "seed": 20261013,
  "mutations": {
    "receipt_is_effect": {
      "verdict": "FAIL",
      "states": 4,
      "transitions": 16,
      "counterexample": [
        "request_1",
        "receipt"
      ],
      "before": {
        "ticket": 1,
        "age": 0,
        "receipt": false,
        "observed": false,
        "observed_ticket": 0,
        "observed_age": -1,
        "trusted": false,
        "lamp": false
      },
      "after": {
        "ticket": 1,
        "age": 0,
        "receipt": true,
        "observed": true,
        "observed_ticket": 1,
        "observed_age": 0,
        "trusted": false,
        "lamp": false
      }
    },
    "wrong_ticket": {
      "verdict": "FAIL",
      "states": 7,
      "transitions": 21,
      "counterexample": [
        "request_1",
        "wrong_ticket"
      ],
      "before": {
        "ticket": 1,
        "age": 0,
        "receipt": false,
        "observed": false,
        "observed_ticket": 0,
        "observed_age": -1,
        "trusted": false,
        "lamp": false
      },
      "after": {
        "ticket": 1,
        "age": 0,
        "receipt": false,
        "observed": true,
        "observed_ticket": 2,
        "observed_age": 0,
        "trusted": true,
        "lamp": false
      }
    },
    "stale": {
      "verdict": "FAIL",
      "states": 7,
      "transitions": 22,
      "counterexample": [
        "request_1",
        "stale"
      ],
      "before": {
        "ticket": 1,
        "age": 0,
        "receipt": false,
        "observed": false,
        "observed_ticket": 0,
        "observed_age": -1,
        "trusted": false,
        "lamp": false
      },
      "after": {
        "ticket": 1,
        "age": 0,
        "receipt": false,
        "observed": true,
        "observed_ticket": 1,
        "observed_age": 0,
        "trusted": true,
        "lamp": false
      }
    },
    "forged": {
      "verdict": "FAIL",
      "states": 7,
      "transitions": 23,
      "counterexample": [
        "request_1",
        "forged"
      ],
      "before": {
        "ticket": 1,
        "age": 0,
        "receipt": false,
        "observed": false,
        "observed_ticket": 0,
        "observed_age": -1,
        "trusted": false,
        "lamp": false
      },
      "after": {
        "ticket": 1,
        "age": 0,
        "receipt": false,
        "observed": true,
        "observed_ticket": 1,
        "observed_age": 0,
        "trusted": false,
        "lamp": false
      }
    }
  },
  "sources": [
    {
      "path": "model.py",
      "sha256": "54eb207b2f3826089b5dab44f77acda8ab3a73380f82a48cfd192c98d5e3779a"
    },
    {
      "path": "verify.py",
      "sha256": "4f522d90a849cc05f25a93fe11c9b00b35c5000d12799281f834a0f786ff546f"
    },
    {
      "path": "SPEC.md",
      "sha256": "c29109789097c6b14f169e624403e4ef56f6de83d4e1247478921a94b869c184"
    },
    {
      "path": "README.md",
      "sha256": "b86dc73047e0cd323f4a1dc37ab709ef2613ab657ce1010e0334e52c38c227ab"
    }
  ],
  "limits": [
    "Two unique commands; abstract time values 0, 1 and 2. Not unbounded verification.",
    "Trusted sensing and authenticated message classification are assumptions, not tested cryptography.",
    "No hardware, transport implementation, distributed recovery or physical measurements were tested.",
    "Confirmation means a fresh attributed observation, not proof of continuous physical state.",
    "No liveness guarantee: a command may never produce an observation.",
    "Invented example, not code, state names, record structures or protocols from any research programme.",
    "Authored and run in the site workflow; not an independent external audit."
  ]
}