{
  "_source": "README.md, ARCHITECTURE.md, and reports/gate-1-genesis.md. A row may be marked `implemented` only when the Gate 1 report evidences it.",
  "status_date": "2026-08-10",

  "legend": {
    "implemented": "Present in the repository and evidenced by the Gate 1 report.",
    "specified": "A normative schema, ADR, or written contract exists; code does not.",
    "planned": "An accepted architectural direction with no specification yet.",
    "research": "An open question. No commitment that it will be built at all."
  },

  "implemented": [
    {
      "capability": "Controlled read-only observation",
      "detail": "HTTP GET against a controlled origin under an explicit URL and network policy.",
      "evidence": "internal/safefetch, 8 network-policy tests"
    },
    {
      "capability": "Content-addressed evidence",
      "detail": "Response bodies stored and retrieved by SHA-256 digest, re-hashed before extraction.",
      "evidence": "internal/cas, 2 corrupted-CAS checks"
    },
    {
      "capability": "Deterministic observation encoding",
      "detail": "A canonical CBOR envelope with a normative CDDL schema and fixed field order.",
      "evidence": "internal/observation, schemas/cddl"
    },
    {
      "capability": "Independent Go and C verification",
      "detail": "Two implementations consume the same committed positive and negative vectors.",
      "evidence": "16 shared observation vectors, run in both"
    },
    {
      "capability": "Bounded fail-closed JSON handling",
      "detail": "Duplicate keys, trailing values, lone surrogates, and inputs past declared byte, depth, scalar, container, and token limits are rejected.",
      "evidence": "internal/jsonbounded, ADR 001"
    },
    {
      "capability": "Deterministic manual adapter",
      "detail": "A manually admitted JSON adapter that executes offline with no network and no shell.",
      "evidence": "internal/adapter, 11 extraction vectors"
    },
    {
      "capability": "Native and semantic views",
      "detail": "The provider's own term and lexical value are retained beside the transformed semantic value.",
      "evidence": "Gate 1 invariants"
    },
    {
      "capability": "Provenance-bearing unresolved fields",
      "detail": "An optional missing field becomes an explicit unresolved result with provenance and no fabricated value.",
      "evidence": "Gate 1 invariants"
    },
    {
      "capability": "Adversarial conformance corpus",
      "detail": "Committed vectors for duplicate keys, duplicate manifests, trailing JSON, unpaired surrogates, and prompt-injection content.",
      "evidence": "conformance/adversarial"
    },
    {
      "capability": "Atomic per-file publication",
      "detail": "Metadata and results are written through a bounded temporary file, synchronised, and atomically renamed.",
      "evidence": "internal/atomicfile"
    },
    {
      "capability": "Offline replay",
      "detail": "Extraction completes after the origin has been stopped.",
      "evidence": "1 offline end-to-end test, stopped-origin demo"
    }
  ],

  "not_implemented": [
    { "capability": "Arbitrary website compilation", "status": "planned", "note": "Gate 3 target. Structured sources first, not general HTML." },
    { "capability": "Isolated browser discovery", "status": "planned", "note": "Gate 5. Requires process or microVM isolation first." },
    { "capability": "Model-assisted schema induction", "status": "planned", "note": "Gate 6. Proposals only; a model may never promote itself into the canon." },
    { "capability": "Public adapter registry and admission", "status": "planned", "note": "Gate 4. Needs signing, revocation, and compatibility reporting." },
    { "capability": "Publisher verification and federation", "status": "planned", "note": "Gate 7." },
    { "capability": "MCP, WebMCP, and OpenAPI generation", "status": "planned", "note": "Downstream of a stable intermediate representation." },
    { "capability": "Typed Web intermediate representation", "status": "research", "note": "Named in the architecture; the encoding is not settled." },
    { "capability": "Semantic module compiler and kernel", "status": "specified", "note": "Direction is written; no code exists." },
    { "capability": "Scoped actions, receipts, and payments", "status": "planned", "note": "Gate 8. Requires an explicit capability model and a separate security gate." },
    { "capability": "Signed adapters and release provenance", "status": "planned", "note": "Named as an unresolved Gate 1 risk." },
    { "capability": "Blockchain anchoring", "status": "research", "note": "Optional notarisation at most. Never a semantic authority." },
    { "capability": "Production multi-tenancy", "status": "planned", "note": "Gated behind the deployment requirements on the security page." }
  ]
}