{
  "manifest_type": "landing-claims",
  "schema_version": "1.0.0",
  "as_of": "2026-08-26T18:00:00Z",
  "public_url": "https://hummbl.io/manifest/landing-claims.json",
  "source_scope": {
    "repository": "hummbl-io/oss",
    "commit": "b1b05813832d14185bba12284dd8a6cede2f19c3",
    "tag": "hummbl-governance/v1.4.2",
    "package": "hummbl-governance",
    "published_version": "1.4.2",
    "proof_receipt": "web/manifest/evidence/hummbl-governance-v1.4.2-landing-proof.json",
    "proof_receipt_url": "https://hummbl.io/manifest/evidence/hummbl-governance-v1.4.2-landing-proof.json",
    "proof_receipt_sha256": "2093d042803d5fd2a5bd2cc537af3623a11cff7e51614e5a3516613bc212614d"
  },
  "release_markers": [
    "Govern what AI agents can do.",
    "2,463",
    "classified <strong>Alpha</strong>",
    "HMAC verifies integrity and authenticity"
  ],
  "summary": {
    "total": 14,
    "VERIFIED": 2,
    "VERIFIED_WITH_SCOPE": 10,
    "MARKETING_SUMMARY": 2,
    "INFERENCE": 0,
    "STALE": 0,
    "CONTRADICTED": 0,
    "UNSUPPORTED": 0
  },
  "claims": [
    {
      "id": "LANDING-001",
      "claim": "HUMMBL is open-source governance infrastructure for agentic AI.",
      "type": "interpretive",
      "volatility": "slow-changing",
      "risk": "medium",
      "disposition": "MARKETING_SUMMARY",
      "verdict": "OUT_OF_SCOPE",
      "evidence_level": "category-summary",
      "scope": "Product-category description grounded in the package description, license, and primitive inventory.",
      "assurance_boundary": "A category description is not a certification, fitness, or outcome guarantee.",
      "sources": [
        {
          "kind": "repository",
          "url": "https://github.com/hummbl-io/oss/blob/b1b05813832d14185bba12284dd8a6cede2f19c3/packages/hummbl-governance/pyproject.toml",
          "source_commit": "b1b05813832d14185bba12284dd8a6cede2f19c3",
          "file_sha256": "c2269b2db4ee4c0e7e05afdc5de0c83d1e998b5dc473108172b375090c88c81c",
          "observed_at": "2026-08-26T18:00:00Z"
        }
      ],
      "surface_assertions": [
        {
          "file": "web/index.html",
          "contains": [
            "open-source governance infrastructure for",
            "agentic AI"
          ]
        }
      ]
    },
    {
      "id": "LANDING-002",
      "claim": "The published hummbl-governance package is version 1.4.2 and classified Alpha.",
      "type": "technical",
      "volatility": "volatile/current",
      "risk": "high",
      "disposition": "VERIFIED",
      "verdict": "SUPPORTED",
      "evidence_level": "published-metadata",
      "scope": "PyPI version 1.4.2 and the Development Status :: 3 - Alpha classifier observed at the manifest timestamp.",
      "assurance_boundary": "Alpha describes package maturity; it does not establish production suitability.",
      "sources": [
        {
          "kind": "pypi",
          "url": "https://pypi.org/pypi/hummbl-governance/1.4.2/json",
          "observed_at": "2026-08-26T18:00:00Z"
        },
        {
          "kind": "local_receipt",
          "path": "web/manifest/evidence/hummbl-governance-v1.4.2-landing-proof.json",
          "url": "https://hummbl.io/manifest/evidence/hummbl-governance-v1.4.2-landing-proof.json",
          "observed_at": "2026-08-26T18:00:00Z"
        }
      ],
      "surface_assertions": [
        {
          "file": "web/index.html",
          "contains": ["v1.4.2 package", "classified <strong>Alpha</strong>"]
        },
        {
          "file": "web/llms.txt",
          "contains": ["PyPI v1.4.2 (Alpha)"]
        }
      ]
    },
    {
      "id": "LANDING-003",
      "claim": "The cited source scope contains 34 implemented governance primitives.",
      "type": "technical",
      "volatility": "historical",
      "risk": "high",
      "disposition": "VERIFIED_WITH_SCOPE",
      "verdict": "SUPPORTED",
      "evidence_level": "source-inspection",
      "scope": "26 existing primitives plus 8 implemented expansion primitives at tag hummbl-governance/v1.4.2 (commit b1b0581).",
      "assurance_boundary": "Six proposed primitives are explicitly excluded, and later source revisions may differ.",
      "sources": [
        {
          "kind": "repository",
          "url": "https://github.com/hummbl-io/oss/blob/b1b05813832d14185bba12284dd8a6cede2f19c3/packages/hummbl-governance/PRIMITIVES.md",
          "source_commit": "b1b05813832d14185bba12284dd8a6cede2f19c3",
          "file_sha256": "2bc3b3ff84dad81e4c3944e1e34b64dc09392d90ec0b1d6273b941ccfea5fd51",
          "observed_at": "2026-08-26T18:00:00Z"
        }
      ],
      "surface_assertions": [
        {
          "file": "web/index.html",
          "contains": ["<strong>34</strong>", "implemented primitives"]
        },
        {
          "file": "web/llms.txt",
          "contains": ["34 implemented primitives"]
        }
      ]
    },
    {
      "id": "LANDING-004",
      "claim": "Public repository CI at the cited source commit reported 2,463 passed and 3 skipped in the hummbl-governance test job.",
      "type": "technical",
      "volatility": "historical",
      "risk": "high",
      "disposition": "VERIFIED_WITH_SCOPE",
      "verdict": "SUPPORTED",
      "evidence_level": "public-ci-execution",
      "scope": "GitHub Actions run 32904924444 executed python -m pytest tests/ -q for the hummbl-governance package at commit 7546c4e on oss main; the job completed successfully on Python 3.13.",
      "assurance_boundary": "This establishes repository CI execution at one source commit on the public oss repository. Three tests were skipped, and the receipt does not establish production use or suitability. The public oss CI workflow runs Python 3.13 only and does not collect coverage.",
      "sources": [
        {
          "kind": "github_actions_run",
          "url": "https://github.com/hummbl-io/oss/actions/runs/32904924444",
          "source_commit": "7546c4ed5e850740a616f40905cb1a755b175536",
          "observed_at": "2026-08-26T18:00:00Z"
        },
        {
          "kind": "local_receipt",
          "path": "web/manifest/evidence/hummbl-governance-v1.4.2-landing-proof.json",
          "url": "https://hummbl.io/manifest/evidence/hummbl-governance-v1.4.2-landing-proof.json",
          "observed_at": "2026-08-26T18:00:00Z"
        }
      ],
      "surface_assertions": [
        {
          "file": "web/index.html",
          "contains": [
            "<strong>2,463</strong>",
            "tests passed per CI job",
            "2,463 passed, 3 skipped"
          ]
        },
        {
          "file": "web/llms-full.txt",
          "contains": [
            "Public CI run 32904924444 reported 2,463 passed",
            "This is repository CI evidence, not a production-use receipt"
          ]
        }
      ]
    },
    {
      "id": "LANDING-005",
      "claim": "The cited package metadata declares zero third-party Core runtime dependencies.",
      "type": "technical",
      "volatility": "historical",
      "risk": "high",
      "disposition": "VERIFIED_WITH_SCOPE",
      "verdict": "SUPPORTED",
      "evidence_level": "source-inspection",
      "scope": "The project.dependencies array is empty at tag hummbl-governance/v1.4.2 (commit b1b0581).",
      "assurance_boundary": "Optional, test, build, integration, and application dependencies are outside the Core runtime dependency claim.",
      "sources": [
        {
          "kind": "repository",
          "url": "https://github.com/hummbl-io/oss/blob/b1b05813832d14185bba12284dd8a6cede2f19c3/packages/hummbl-governance/pyproject.toml",
          "source_commit": "b1b05813832d14185bba12284dd8a6cede2f19c3",
          "file_sha256": "c2269b2db4ee4c0e7e05afdc5de0c83d1e998b5dc473108172b375090c88c81c",
          "observed_at": "2026-08-26T18:00:00Z"
        }
      ],
      "surface_assertions": [
        {
          "file": "web/index.html",
          "contains": [
            "<strong>0</strong>",
            "third-party Core runtime dependencies"
          ]
        },
        {
          "file": "web/llms.txt",
          "contains": ["zero third-party Core runtime dependencies"]
        }
      ]
    },
    {
      "id": "LANDING-006",
      "claim": "The same repository suite passed in public CI on Python 3.13 at the cited source commit.",
      "type": "technical",
      "volatility": "historical",
      "risk": "high",
      "disposition": "VERIFIED_WITH_SCOPE",
      "verdict": "SUPPORTED",
      "evidence_level": "public-ci-matrix",
      "scope": "GitHub Actions run 32904924444 test job 97986776451 completed successfully for Python 3.13. The public oss CI workflow runs Python 3.13 only.",
      "assurance_boundary": "A passing repository CI job does not guarantee behavior in every deployment environment or establish production suitability. The earlier 3.11/3.12/3.13 matrix was observed in the private hummbl-governance repository and is not reproduced in the public oss CI workflow.",
      "sources": [
        {
          "kind": "github_actions_run",
          "url": "https://github.com/hummbl-io/oss/actions/runs/32904924444",
          "source_commit": "7546c4ed5e850740a616f40905cb1a755b175536",
          "observed_at": "2026-08-26T18:00:00Z"
        },
        {
          "kind": "repository",
          "url": "https://github.com/hummbl-io/oss/blob/b1b05813832d14185bba12284dd8a6cede2f19c3/packages/hummbl-governance/.github/workflows/ci.yml",
          "source_commit": "b1b05813832d14185bba12284dd8a6cede2f19c3",
          "observed_at": "2026-08-26T18:00:00Z"
        }
      ],
      "surface_assertions": [
        {
          "file": "web/index.html",
          "contains": ["<strong>3.13</strong>", "same suite passed"]
        }
      ]
    },
    {
      "id": "LANDING-007",
      "claim": "The cited package source is licensed under Apache License 2.0.",
      "type": "technical",
      "volatility": "historical",
      "risk": "high",
      "disposition": "VERIFIED",
      "verdict": "SUPPORTED",
      "evidence_level": "source-inspection",
      "scope": "LICENSE and pyproject.toml at tag hummbl-governance/v1.4.2 (commit b1b0581).",
      "assurance_boundary": "The claim applies to the cited repository/package source and does not characterize third-party components.",
      "sources": [
        {
          "kind": "repository",
          "url": "https://github.com/hummbl-io/oss/blob/b1b05813832d14185bba12284dd8a6cede2f19c3/packages/hummbl-governance/LICENSE",
          "source_commit": "b1b05813832d14185bba12284dd8a6cede2f19c3",
          "file_sha256": "0085364ced96d0d13fd83c349114ffd0a8671a07d90cf7d8ac64d8f75b8ec4a0",
          "observed_at": "2026-08-26T18:00:00Z"
        }
      ],
      "surface_assertions": [
        {
          "file": "web/index.html",
          "contains": ["<strong>Apache 2.0</strong>", "open-source license"]
        }
      ]
    },
    {
      "id": "LANDING-008",
      "claim": "Delegation tokens bind their encoded authority fields with HMAC-SHA256 inside a shared-secret trust domain.",
      "type": "technical",
      "volatility": "historical",
      "risk": "high",
      "disposition": "VERIFIED_WITH_SCOPE",
      "verdict": "SUPPORTED",
      "evidence_level": "implementation-semantics",
      "scope": "DelegationTokenManager at tag hummbl-governance/v1.4.2 (commit b1b0581).",
      "assurance_boundary": "Shared-secret authentication is not public-key attribution, public verifiability, or non-repudiation.",
      "sources": [
        {
          "kind": "repository",
          "url": "https://github.com/hummbl-io/oss/blob/b1b05813832d14185bba12284dd8a6cede2f19c3/packages/hummbl-governance/hummbl_governance/delegation.py",
          "source_commit": "b1b05813832d14185bba12284dd8a6cede2f19c3",
          "file_sha256": "4f435499ba2d2ea43d98b2c5bd28818784e2d660a05a5d8b55b9f1246ce60f9d",
          "observed_at": "2026-08-26T18:00:00Z"
        }
      ],
      "surface_assertions": [
        {
          "file": "web/index.html",
          "contains": [
            "HMAC-SHA256 delegation tokens bind issuer",
            "shared-secret trust domain"
          ]
        }
      ]
    },
    {
      "id": "LANDING-009",
      "claim": "ReceiptEngine can make receipt integrity and authenticity checkable by parties holding the shared secret.",
      "type": "technical",
      "volatility": "historical",
      "risk": "high",
      "disposition": "VERIFIED_WITH_SCOPE",
      "verdict": "SUPPORTED",
      "evidence_level": "implementation-semantics",
      "scope": "ReceiptEngine HMAC signing and validation at tag hummbl-governance/v1.4.2 (commit b1b0581).",
      "assurance_boundary": "A valid receipt does not prove public attribution or that recorded evidence is complete or true.",
      "sources": [
        {
          "kind": "repository",
          "url": "https://github.com/hummbl-io/oss/blob/b1b05813832d14185bba12284dd8a6cede2f19c3/packages/hummbl-governance/hummbl_governance/kernel/receipt_engine.py",
          "source_commit": "b1b05813832d14185bba12284dd8a6cede2f19c3",
          "file_sha256": "40feb659c47274fffa73dfbe73910b3a32a6051a6c16044f923b62fdbfb013c0",
          "observed_at": "2026-08-26T18:00:00Z"
        }
      ],
      "surface_assertions": [
        {
          "file": "web/index.html",
          "contains": [
            "HMAC receipts make integrity and",
            "authenticity checkable by parties that hold the shared key"
          ]
        }
      ]
    },
    {
      "id": "LANDING-010",
      "claim": "Version 1.4.2 does not expose a dedicated GovernanceTuple object or one-call governed lifecycle; the example composes the tuple in a receipt payload.",
      "type": "technical",
      "volatility": "historical",
      "risk": "high",
      "disposition": "VERIFIED_WITH_SCOPE",
      "verdict": "SUPPORTED",
      "evidence_level": "absence-audit-and-executable-example",
      "scope": "Exported/source symbols and the executable example at version 1.4.2.",
      "assurance_boundary": "The absence audit is version-scoped and does not define future package APIs.",
      "sources": [
        {
          "kind": "local_receipt",
          "path": "web/manifest/evidence/hummbl-governance-v1.4.2-landing-proof.json",
          "url": "https://hummbl.io/manifest/evidence/hummbl-governance-v1.4.2-landing-proof.json",
          "observed_at": "2026-08-26T18:00:00Z"
        },
        {
          "kind": "repository",
          "url": "https://github.com/hummbl-io/oss/blob/b1b05813832d14185bba12284dd8a6cede2f19c3/packages/hummbl-governance/README.md",
          "source_commit": "b1b05813832d14185bba12284dd8a6cede2f19c3",
          "file_sha256": "6fba46bca5cc766338d7973ce25bd8ee5d2bb0331fb770802d4fb7c8fa43b722",
          "observed_at": "2026-08-26T18:00:00Z"
        }
      ],
      "surface_assertions": [
        {
          "file": "web/index.html",
          "contains": [
            "does not expose a dedicated",
            "<code>GovernanceTuple</code>",
            "The application composes the"
          ]
        },
        {
          "file": "web/llms.txt",
          "contains": [
            "does not expose a dedicated GovernanceTuple object or one-call lifecycle"
          ]
        }
      ]
    },
    {
      "id": "LANDING-011",
      "claim": "The homepage governed-lifecycle example executes against the published package API.",
      "type": "technical",
      "volatility": "volatile/current",
      "risk": "high",
      "disposition": "VERIFIED_WITH_SCOPE",
      "verdict": "SUPPORTED",
      "evidence_level": "executable-example",
      "scope": "Homepage Snippet Test verified locally against installed version 1.4.2.",
      "assurance_boundary": "The example demonstrates one API path; it is not an integration, security, or production-suitability warranty.",
      "sources": [
        {
          "kind": "local_receipt",
          "path": "web/manifest/evidence/hummbl-governance-v1.4.2-landing-proof.json",
          "url": "https://hummbl.io/manifest/evidence/hummbl-governance-v1.4.2-landing-proof.json",
          "observed_at": "2026-08-26T18:00:00Z"
        }
      ],
      "surface_assertions": [
        {
          "file": "web/index.html",
          "contains": [
            "This example runs against the package API",
            "create_and_store(",
            "receipts.verify_chain("
          ]
        }
      ]
    },
    {
      "id": "LANDING-012",
      "claim": "The evidence linked from the landing page does not include a production-use receipt supporting a general production-tested claim.",
      "type": "technical",
      "volatility": "volatile/current",
      "risk": "high",
      "disposition": "VERIFIED_WITH_SCOPE",
      "verdict": "SUPPORTED",
      "evidence_level": "bounded-absence-audit",
      "scope": "Only the evidence corpus enumerated in this landing claims manifest.",
      "assurance_boundary": "This does not assert that no private or unlinked production use exists.",
      "sources": [
        {
          "kind": "local_receipt",
          "path": "web/manifest/evidence/hummbl-governance-v1.4.2-landing-proof.json",
          "url": "https://hummbl.io/manifest/evidence/hummbl-governance-v1.4.2-landing-proof.json",
          "observed_at": "2026-08-26T18:00:00Z"
        }
      ],
      "surface_assertions": [
        {
          "file": "web/index.html",
          "contains": [
            "The evidence linked on this page",
            "does not include a production-use receipt that supports a general",
            "“production-tested” claim"
          ]
        }
      ]
    },
    {
      "id": "LANDING-013",
      "claim": "HUMMBL supports technical evidence generation and engineering mappings but does not itself determine legal applicability or confer compliance or certification.",
      "type": "legal",
      "volatility": "slow-changing",
      "risk": "high",
      "disposition": "MARKETING_SUMMARY",
      "verdict": "OUT_OF_SCOPE",
      "evidence_level": "assurance-boundary",
      "scope": "A limitation statement, not a claim of legal compliance or certification.",
      "assurance_boundary": "Legal applicability, certification, and regulator determinations remain with qualified authorities and the deploying organization.",
      "sources": [
        {
          "kind": "official_guidance",
          "url": "https://www.nist.gov/itl/ai-risk-management-framework",
          "observed_at": "2026-08-26T18:00:00Z"
        },
        {
          "kind": "official_standard",
          "url": "https://www.iso.org/standard/81230.html",
          "observed_at": "2026-08-26T18:00:00Z"
        }
      ],
      "surface_assertions": [
        {
          "file": "web/index.html",
          "contains": [
            "does not determine legal applicability, confer",
            "compliance, certify an AI management system"
          ]
        }
      ]
    },
    {
      "id": "LANDING-014",
      "claim": "A governance primitive only mediates actions routed through it.",
      "type": "technical",
      "volatility": "stable",
      "risk": "medium",
      "disposition": "VERIFIED_WITH_SCOPE",
      "verdict": "SUPPORTED",
      "evidence_level": "architecture-boundary",
      "scope": "In-process library controls invoked by the integrating application.",
      "assurance_boundary": "The deploying system remains responsible for complete placement, key protection, identity, evidence capture, monitoring, and response.",
      "sources": [
        {
          "kind": "repository",
          "url": "https://github.com/hummbl-io/oss/blob/b1b05813832d14185bba12284dd8a6cede2f19c3/packages/hummbl-governance/README.md",
          "source_commit": "b1b05813832d14185bba12284dd8a6cede2f19c3",
          "file_sha256": "6fba46bca5cc766338d7973ce25bd8ee5d2bb0331fb770802d4fb7c8fa43b722",
          "observed_at": "2026-08-26T18:00:00Z"
        }
      ],
      "surface_assertions": [
        {
          "file": "web/index.html",
          "contains": [
            "A primitive only mediates actions routed through it",
            "remains responsible for complete integration"
          ]
        }
      ]
    }
  ],
  "unresolved_evidence_gaps": [
    {
      "id": "GAP-001",
      "gap": "No production-use receipt is linked in this manifest.",
      "effect": "The landing page does not claim general production-tested status."
    },
    {
      "id": "GAP-002",
      "gap": "No cold-visitor comprehension results exist yet.",
      "effect": "Communication effectiveness remains unmeasured until five real participants complete the protocol."
    },
    {
      "id": "GAP-003",
      "gap": "The public oss CI workflow runs Python 3.13 only and does not collect coverage; the earlier 3.11/3.12/3.13 matrix with 84.45% coverage was observed in the private hummbl-governance repository.",
      "effect": "The landing page does not claim a multi-version Python matrix or coverage percentage from public CI evidence."
    }
  ]
}