{"schema":"quox.evidence.item/1","id":"claim:registry_claims.witness_health","kind":"claim","claim_id":"quox.witness_health.v1","statement":"Quox continuously witnesses the health of its own evidence chain, and that self-witnessing check is itself machine-proven on the proof matrix.","not_claimed":null,"status":"OWNER-APPROVED","status_note":"Owner-approved for publication. Computed status VERIFIED comes from proof-engine runs and is reported separately in computed_status.","computed_status":"VERIFIED","status_history":[{"status":"IMPLEMENTED","date":"2026-10-14","cause":"first witness-health runs on the current checks"},{"status":"VERIFIED","date":"2026-10-17","cause":"SEER signoff receipts/witness-health equivalent (rule B); passes across dev and clean-vm on >=2 UTC days"}],"independent":{"kind":"self","note":"Issued by Quox; not independently verified."},"issuer":"Quox","dates":{"first":"2026-10-17","latest":"2026-10-17","as_of":"2026-10-17"},"freshness":{"staleness_days":30,"stale":false,"expires":"2026-11-16","as_of":"2026-10-23"},"evidence":[{"type":"artifact","url":"/facts.json","label":"Recompute from /facts proof-engine-evidence.json: the receipts/witness-health rows at checks ed0ee30fa935; the projection hash and WARD receipt make the snapshot independently checkable."},{"type":"ward-receipt","url":"/facts.receipt.json","label":"WARD receipt witnessing /facts.json, which records this claim"}],"limitations":"Proven on our own dev box and clean throwaway VMs, not yet on a third-party-operated install.","cannot_establish":"A valid signature proves this record is authentic and unmodified; it does NOT prove the system behaved correctly. The status was computed from Quox's own proof-engine runs on Quox's own installs; it is not a third-party test.","open_findings":[],"withheld_findings":0,"capabilities":["witness_health"],"verify":{"method":"ward-receipt","artifact_url":"/facts.json","receipt_url":"/facts.receipt.json","public_key":null,"public_key_source":"embedded in /facts.receipt.json (WARD tip signer; corroborated out of band by the public TSA token and git history named in facts.json witness)","locator":{"file":"/facts.json","path":"registry_claims.witness_health","claim_id":"quox.witness_health.v1"},"verifier_cmd":null,"reproduction":"Fetch /facts.json and /facts.receipt.json. sha256(facts.json bytes) must equal receipt.facts_sha256 and ward_entry.payload_hash. Recompute ward_entry.chain_hash per WARD SPEC section 4.4 (canonical JSON of the ten hash-body fields). Verify ward_tip.sig is an Ed25519 signature over the raw bytes of ward_tip.tip_chain_hash by receipt.public_key. Then confirm the item exists in facts.json at the locator with the same claim_id. A match proves the record is unmodified since witnessing, not that the claim is correct.","browser_verifiable":true},"citations":[{"url":"/facts.json","label":"Quox"}],"detail":{"path":"registry_claims.witness_health"},"human_url":"/evidence/explore#claim:registry_claims.witness_health","machine_url":"/evidence/items/claim:registry_claims.witness_health.json","api_url":"/api/evidence/claim:registry_claims.witness_health","contract":{"authentic_is_not_correct":"A valid signature or a recomputed hash proves a record is authentic and unmodified. It does not prove the system behaved correctly or that a finding list is complete.","independence":"self = issued by Quox and recomputable by anyone, not audited by a third party. visitor-recomputable = the reader recomputes it offline from published material. external = an outside party issued or hosts the primary record. Quox-verified is never independently verified.","curated_status":"status OWNER-APPROVED means the owner approved the wording for publication. It is not a computed VERIFIED status. computed_status, where present, is computed from proof-engine runs and is reported separately.","verify_caveat":"authentic != correct. A valid signature proves this record is authentic and unmodified; it does NOT prove the system behaved correctly."}}