{
 "evidence_record_id": "ser_f0db48f81fc77a6bcb5e5cfb0fc0ed9b",
 "schema": "ser.v0.1.legal_ai_output",
 "payload_hash": "f0db48f81fc77a6bcb5e5cfb0fc0ed9bb70ad94e1c5333c2dc44ca93e429adf1",
 "merkle_root": "cc81209fda8d30269764e22ef3eb656d94ac0f3770e7d3611cdaf912f3e04ef6",
 "transparency_anchor": {
  "status": "anchored",
  "rekor_log_id": "108e9186e8c5677a53c39c1b5b7f0cab8ce7b7f6a31d49631556b3e587897fe59c1601faa70e7f0d",
  "rekor_log_index": 3249798560,
  "rekor_url": "https://rekor.sigstore.dev/api/v1/log/entries/108e9186e8c5677a53c39c1b5b7f0cab8ce7b7f6a31d49631556b3e587897fe59c1601faa70e7f0d",
  "signing_algorithm": "ecdsa-p256-sha256",
  "public_key_pem": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEqYJKwk0CnyMWTqZlByXKOHUx+3VA\nCZHrDMcwQKeYEE7KJ3WCV5WkAypIJ0eYDZzqXw4lF6xVxVpwA2ePaqmCYg==\n-----END PUBLIC KEY-----",
  "anchored_at": "2026-10-14T09:04:59.013Z"
 },
 "surface": {
  "tier": "public_sandbox",
  "signing_algorithm_in_use": "ecdsa-p256-sha256-ephemeral",
  "signing_algorithm_in_production_tenants": "ed25519-hardware-backed-planned",
  "note": "This public MCP endpoint signs with an ephemeral ECDSA P-256 / SHA-256 keypair generated per request, for live Sigstore Rekor anchoring. A hardware-backed production signing tier is planned; no production tenant exists yet. The Sealed Evidence Record format and Rekor anchoring are designed to stay the same on that tier; only the signing key would change. See verdict.systems/security."
 },
 "chain_of_custody": {
  "sequence": 2,
  "prior_root": "3da552e8b818026d1a1dcb59d83e86972af9bf696f3560a2f5c7d502e3a0eb0a",
  "signer": "unbound_ephemeral_key",
  "transparency_anchor": {
   "status": "anchored",
   "rekor_log_id": "108e9186e8c5677a53c39c1b5b7f0cab8ce7b7f6a31d49631556b3e587897fe59c1601faa70e7f0d",
   "rekor_log_index": 3249798560,
   "rekor_url": "https://rekor.sigstore.dev/api/v1/log/entries/108e9186e8c5677a53c39c1b5b7f0cab8ce7b7f6a31d49631556b3e587897fe59c1601faa70e7f0d",
   "signing_algorithm": "ecdsa-p256-sha256",
   "public_key_pem": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEqYJKwk0CnyMWTqZlByXKOHUx+3VA\nCZHrDMcwQKeYEE7KJ3WCV5WkAypIJ0eYDZzqXw4lF6xVxVpwA2ePaqmCYg==\n-----END PUBLIC KEY-----",
   "anchored_at": "2026-10-14T09:04:59.013Z"
  },
  "retention_class": "ephemeral_compute"
 },
 "legal_review": {
  "human_review_status": "approved",
  "attorney_reviewer": null,
  "citations": [],
  "risk_flags": []
 },
 "record": {
  "schema": "ser.v0.1.legal_ai_output",
  "matter_id": "demo-trial-TRIAL-2210",
  "workflow": "agentic_action",
  "input_summary": "Site investigator review of the AI pre-screen on TRIAL-2210. Follows the prior record (merkle root 3da552e8b818026d1a1dcb59d83e86972af9bf696f3560a2f5c7d502e3a0eb0a).",
  "output_summary": "Investigator (fictional) overrules the AI: the candidate stopped a prohibited medication 9 days ago and protocol v3.1 requires a 14-day washout. Candidate marked not eligible now, re-screen allowed after day 14. Reason recorded.",
  "human_review_status": "approved",
  "attorney_reviewer": null,
  "model_provider": "demo",
  "model": null,
  "prompt_hash": null,
  "output_hash": null,
  "source_system": "Site investigator review (demonstration, fictional data)",
  "citations": [],
  "risk_flags": [],
  "metadata": {
   "case_id": "TRIAL-2210",
   "step_kind": "investigator_decision",
   "reviewer_role": "Site principal investigator",
   "final_decision": "override_not_eligible",
   "reason": "washout 9 of 14 days",
   "rescreen_after_day": 14,
   "step": 2,
   "of": 2,
   "illustrative": true,
   "disclosure": "Fictional scenario built for a demo on 2026-10-14. The sponsor, study, site, candidate and people are invented. The seals and the public log entries are real.",
   "prior_merkle_root": "3da552e8b818026d1a1dcb59d83e86972af9bf696f3560a2f5c7d502e3a0eb0a"
  },
  "event_time": "2026-10-14T09:04:56Z",
  "received_at": "2026-10-14T09:04:58.554Z"
 },
 "notice": "Sealed Evidence Record produced by stateless compute. Only record is covered by payload_hash; surface, chain_of_custody, legal_review and this notice are display copies outside the hash, so read the values inside record. Record commitment is anchored to the public Sigstore Rekor transparency log; verify independently at the rekor_url. Production admissibility requires the receiving Verdict tenant to attach retention policy, custodian identity, and (where applicable) a hardware-backed signer; that production tier is planned and no production tenant exists yet."
}