{
  "stage": "stage4-certify",
  "generated_at": "2026-03-28T23:03:31.803Z",
  "duration_ms": 5027,
  "trust_score": {
    "score": 92,
    "grade": "A",
    "maturity": "Initial",
    "max_achievable": 100,
    "signals": [
      {
        "signal": "security_scan",
        "score": 1,
        "weight": 0.15,
        "contribution": 0.15,
        "source": "stage2b-security",
        "rationale": "No security findings"
      },
      {
        "signal": "supply_chain",
        "score": 1,
        "weight": 0.1,
        "contribution": 0.1,
        "source": "stage2a-sbom",
        "rationale": "Skills have no dependency tree — supply chain N/A, scored as clean"
      },
      {
        "signal": "adversarial",
        "score": 1,
        "weight": 0.25,
        "contribution": 0.25,
        "source": "stage3b-adversarial",
        "rationale": "No adversarial findings — clean"
      },
      {
        "signal": "provenance",
        "score": 0.8,
        "weight": 0.2,
        "contribution": 0.16,
        "source": "stage1-ingest",
        "rationale": "source hash present, publisher identified, build succeeded, extraction method: llm_assisted"
      },
      {
        "signal": "consumer_confirm",
        "score": 1,
        "weight": 0.1,
        "contribution": 0.1,
        "source": "stage3a-functional",
        "rationale": "Pipeline-derived baseline: 5/5 triggers activated (no external reports yet)"
      },
      {
        "signal": "behavioral_pass",
        "score": 1,
        "weight": 0.1,
        "contribution": 0.1,
        "source": "stage3a-functional",
        "rationale": "5/5 triggers activated (100.0%)"
      },
      {
        "signal": "contract_accuracy",
        "score": 0.667,
        "weight": 0.06,
        "contribution": 0.039999999999999994,
        "source": "stage3a-functional",
        "rationale": "2/3 negative tests passed (66.7%)"
      },
      {
        "signal": "uptime",
        "score": 1,
        "weight": 0.04,
        "contribution": 0.04,
        "source": "pipeline-derived",
        "rationale": "Static instruction text — uptime N/A, scored as available"
      }
    ],
    "utility_multiplier": 0.98,
    "methodology_version": "2.1"
  },
  "review_flags": {
    "total": 6,
    "blocking": 0,
    "flags": [
      {
        "category": "content",
        "severity": "medium",
        "source": "stage4-assembler",
        "description": "Description section was synthesized by LLM from stage data — verify accuracy",
        "blocks_certification": false,
        "kind": "note"
      },
      {
        "category": "publisher",
        "severity": "medium",
        "source": "stage1-ingest",
        "description": "Publisher \"VoltAgent\" is not verified — first certification from this publisher",
        "blocks_certification": false,
        "kind": "note"
      },
      {
        "category": "provenance",
        "severity": "low",
        "source": "stage1-provenance",
        "description": "No SECURITY.md or SECURITY.txt file found — no published vulnerability reporting process",
        "blocks_certification": false,
        "kind": "note"
      },
      {
        "category": "provenance",
        "severity": "low",
        "source": "stage1-provenance",
        "description": "Single contributor — no peer review evidence in commit history",
        "blocks_certification": false,
        "kind": "note"
      },
      {
        "category": "provenance",
        "severity": "low",
        "source": "stage1-provenance",
        "description": "Repository is 2 days old — recently created",
        "blocks_certification": false,
        "kind": "note"
      },
      {
        "category": "provenance",
        "severity": "low",
        "source": "stage1-provenance",
        "description": "Package description appears to be boilerplate or template text",
        "blocks_certification": false,
        "kind": "note"
      }
    ]
  },
  "signing": {
    "content_hash": "sha256:50218bc543b1f9b6c86fd9c15c961ebc6d70b915fe9f98135a0e68db494341fe",
    "certified_at": "2026-03-28T23:03:31.448Z",
    "expires_at": "2027-03-28T23:03:31.448Z",
    "key_id": "kms-9db4ed3b9f53",
    "artifact_path": "C:\\Users\\scott\\Desktop\\Projects\\contract-pipeline\\pipeline\\data\\capabilities\\voltcc-research-analyst\\voltcc-research-analyst-latest.cert.json"
  },
  "assembly": {
    "capability_type": "skill",
    "description_source": "llm_generated",
    "completed_stages": [
      "stage1-ingest",
      "stage2b-security",
      "stage3a-functional",
      "stage3b-adversarial",
      "stage3c-fingerprint"
    ],
    "failed_stages": [],
    "skipped_stages": [
      "stage2a-sbom"
    ]
  }
}