{
  "schema": "eve.evidence.pack.v1",
  "generated_at": "2026-06-20T14:10:00Z",
  "tenant_id": "org_acme",
  "window": "2026-06-20",
  "public_keys": [
    {
      "key_id": "eve-sample-2026",
      "alg": "ed25519",
      "public_key_hex": "42aaead72ceea9f9423f281440c6cfac7a5f99b796b81862f452328972b21b61",
      "not_before": "2026-01-01T00:00:00Z",
      "status": "active"
    }
  ],
  "certificates": [
    {
      "schema": "eve.decision.certificate.v1",
      "certificate_id": "gdc_8f31a0c4e9b7",
      "issued_at": "2026-06-20T14:08:21Z",
      "tenant_id": "org_acme",
      "policy_set": "lending_v1",
      "request_digest": "sha256:5c1f9d2a7b3e4f6081a2b3c4d5e6f7089a0b1c2d3e4f50617283940a1b2c3a902",
      "decision": "BLOCKED",
      "reason_code": "ECOA.adverse_action.unexplained",
      "prev_hash": "sha256:0000000000000000000000000000000000000000000000000000000000000000",
      "signature": {
        "alg": "ed25519",
        "key_id": "eve-sample-2026",
        "value": "bc1700d48b6585c66fd635c8ea21cc4f7867ba73917e8114aba07eff947dc8c169b7594d5e8dc779ac5877e54b4749db1d4da662f10295173e655c9360db0007"
      }
    },
    {
      "schema": "eve.decision.certificate.v1",
      "certificate_id": "gdc_b40d77e1c2f9",
      "issued_at": "2026-06-20T14:09:03Z",
      "tenant_id": "org_acme",
      "policy_set": "lending_v1",
      "request_digest": "sha256:9f0e1d2c3b4a59687766554433221100ffeeddccbbaa99887766554433221100",
      "decision": "ALLOWED",
      "reason_code": "lending_v1.within_policy",
      "prev_hash": "sha256:ab94aeb9d8f51d5f904658ce33f0682a0f543ef7fcce87d21bba0fa6a6c1126f",
      "signature": {
        "alg": "ed25519",
        "key_id": "eve-sample-2026",
        "value": "49086614949eab217ec3da0349f234a73b35f7497fc3c77501094983cc5dacf2860da8e650f2f713b9cda845af64cab98c74456e44684942ad3cf561b8efcd01"
      }
    }
  ],
  "merkle": {
    "root": "sha256:d8824e2a6ed4e0cc0d830426caad318c8c78979d93eb56d807d899c8a82b1292",
    "leaf_count": 2,
    "leaves": [
      "ecd33b900cdeb9fd6e1f0cf287dce77f1334653eaf70c4ec1f5f94bc76b5f985",
      "54f2be57a952d97f646613077f9cd282aecb2342604fbe2cb63054813ecd4ff4"
    ],
    "signed_root": {
      "alg": "ed25519",
      "key_id": "eve-sample-2026",
      "value": "f4be5854744ec9641142d52708aed0628e9d8fa02abd5229d3844d957c3c5117535d0ccf295e75a5a80013eef3ba4e42b3363536b997ab90df2fff1d01a3d00a"
    },
    "inclusion_proofs": {
      "gdc_8f31a0c4e9b7": {
        "leaf_index": 0,
        "leaf": "ecd33b900cdeb9fd6e1f0cf287dce77f1334653eaf70c4ec1f5f94bc76b5f985",
        "siblings": [
          {
            "position": "right",
            "hash": "54f2be57a952d97f646613077f9cd282aecb2342604fbe2cb63054813ecd4ff4"
          }
        ]
      },
      "gdc_b40d77e1c2f9": {
        "leaf_index": 1,
        "leaf": "54f2be57a952d97f646613077f9cd282aecb2342604fbe2cb63054813ecd4ff4",
        "siblings": [
          {
            "position": "left",
            "hash": "ecd33b900cdeb9fd6e1f0cf287dce77f1334653eaf70c4ec1f5f94bc76b5f985"
          }
        ]
      }
    }
  },
  "manifest_note": "Each certificate's signature is Ed25519 over its JCS-canonical (RFC 8785) payload, excluding the signature field. cert_hash = sha256(JCS(certificate)). merkle leaf = sha256(cert_hash). This pack is self-contained: nothing here calls EVE."
}