{ "v": 1, "type": "mirror.examiner-pack", "generated_at": "2026-10-06T15:10:20.690Z", "subject": "worked example - one clear, one flag", "operator_jwks": { "keys": [ { "key_ops": [ "verify" ], "ext": true, "kty": "EC", "x": "ImeX_6GmbxYzDuHopizf8y5GD3sZr5B_yx1jB3tPMGM", "y": "VoGBYjLnjgOteRm5ceae3EOhNmye7QSRwXkNFO7B2jY", "crv": "P-256", "kid": "mir-7a9558abb08621d2", "alg": "ES256", "use": "sig" }, { "key_ops": [ "verify" ], "ext": true, "kty": "EC", "x": "q7RzZJxMV44dN2WTVCI3FmlWOAHEK0V0mZS7iniFn80", "y": "kOXLlLvnkIUKCW05icfU6AFulEor81CFpX2sV1lYXKI", "crv": "P-256", "kid": "mir-19bcc713de6f3baa", "alg": "ES256", "use": "sig" }, { "key_ops": [ "verify" ], "ext": true, "kty": "EC", "x": "3AhTtKK85p9PhZ6-QNsbQRUbyLxPKmRnilHtHPtY-_c", "y": "IJizUPsdYmSuOaffp9bzS6caovd3sjOUB_i7y-b21RA", "crv": "P-256", "kid": "mir-688d9d9477df1e65", "alg": "ES256", "use": "sig" }, { "key_ops": [ "verify" ], "ext": true, "kty": "EC", "x": "xYEB_YyI_DNFu15T9t14aN3CW4fRmeJ_YatRMv_9u0Y", "y": "A4BUpVx1BGJRUOaW1CVev50ScjSk5mnInLzAEqw2XFg", "crv": "P-256", "kid": "mir-f52346a55b42ceae", "alg": "ES256", "use": "sig" } ] }, "registry": { "record": { "v": 1, "type": "mirror.registry", "quorum": 2, "members": [ { "kid": "did:mirror:bankA", "name": null, "status": "active", "genesis": true, "ratifiers": [] }, { "kid": "did:mirror:bankB", "name": null, "status": "active", "genesis": true, "ratifiers": [] } ], "corridors": [ { "product": "hs8541 solar inverters", "version": 1, "edges": [ 50, 100, 150, 200 ], "corridor_id": "c:acb1acec883ad53093f4860109d6c730863be8ed11c216f4bfb7f24592b90fac", "status": "ratified", "ratifiers": [ "did:mirror:bankA", "did:mirror:bankB" ], "proposed_by": "did:mirror:bankA", "max_ratio": null, "edge_margin": null, "effective_from_ms": null } ], "rejected": { "unverified": 0, "not_member": 0, "self_ratify": 0, "duplicate": 0, "malformed": 0 } }, "proof": { "alg": "ES256", "kid": "mir-7a9558abb08621d2", "signature": "SNWcy4LCAvDa1vn-PEpYxHpHSBJKaS9G32tFL1zmdqkiF50QQlsC4mBzFOk6pwpBfj7e1O_XvnsyTOzv_t34Jw", "canonicalization": "recursively sorted keys", "note": "ES256 over the record as canonical JSON (recursively sorted keys). Verify offline against the published JWKS by matching proof.kid; no database, no network." } }, "verdicts": [ { "record": { "v": 1, "type": "mirror.trade-reconciliation", "shipment_ref": "SHIP-1001", "verdict": "reconciled", "cleared": true, "checked_roles": [ "customs", "invoice", "payment" ], "corridor_commitment": "2a1873701a74089da1292a5466522bd37eba5a6b0d17ff3cfdcaac782e3b7a9a", "corridor_ref": null, "label": "hs8541 solar inverters", "divergent_pairs": [], "missing_roles": [], "unreadable_legs": 0, "match_window": { "tolerance": 0, "band_gap_that_still_clears": 0, "bands": 5, "widest_bounded_ratio": 2, "widest_bounded_example": { "low_price_per_unit": 50, "high_price_per_unit": 100, "low_band": 1, "high_band": 1 }, "reaches_open_band": true, "plain_english": "A clear here asserts the two legs COMMITTED the SAME band of the agreed table - the strongest assertion band comparison can make, and an assertion about the committed labels: that each label is the band of its true value is checked at audit, by opening. Note that a band is still a range: the widest one spans 50 to 100 per unit, so even same-band agreement is consistent with a 2x price difference. And because the lowest and highest bands are open-ended, pairs that touch either one clear at NO bounded ratio at all.", "how_to_narrow": null }, "reason": "All 3 legs committed consistent band labels under the agreed corridor. Cleared on the committed labels - this record is the defensible reason; that each label is the band of its true value is checked at audit, by opening.", "disclaimer": "A structural trade-mispricing signal reconciled across parties from salted band commitments only - no raw value, unit, or band reaches the operator. NOT a zero-knowledge proof and NOT secure multiparty computation. Corridors are party-supplied; Mirror invents no prices. A divergence is a reason to look, never proof of laundering; a clear is a defensible record, never a guarantee of innocence.", "leg_authentication": { "mode": "signed", "strict": false, "counts": { "authentic": 3, "unauthenticated": 0, "forged": 0, "unknown_key": 0, "not_a_member": 0 }, "legs": [ { "role": "invoice", "kid": "mir-19bcc713de6f3baa", "state": "authentic", "note": null }, { "role": "customs", "kid": "mir-688d9d9477df1e65", "state": "authentic", "note": null }, { "role": "payment", "kid": "mir-f52346a55b42ceae", "state": "authentic", "note": null } ], "equivocation": [], "attestations": [ { "role": "invoice", "kid": "mir-19bcc713de6f3baa", "alg": "ES256", "sig": "rORaVGV4uqvoVi8I0YjYlBewevE8wdIo87bDVOeG8vJjUoTkKouXhEKlUCaESP_umai6kUxoGdbWKcj3aUgEUg", "commitments": [ "ace6a06dc4c5b385c3007153fa6f03fe1c0696f3d8d7442c464077cd7862950d" ], "corridor_commitment": "2a1873701a74089da1292a5466522bd37eba5a6b0d17ff3cfdcaac782e3b7a9a" }, { "role": "customs", "kid": "mir-688d9d9477df1e65", "alg": "ES256", "sig": "C-JV4k4uk3C3WoOjDWvZmU-jM8vFvPM2SMTrY8v4UbJ9GN-qvQ_-xRmZRVhkGBA42dO_I--o0GycdiJ-Hz_aUQ", "commitments": [ "ace6a06dc4c5b385c3007153fa6f03fe1c0696f3d8d7442c464077cd7862950d" ], "corridor_commitment": "2a1873701a74089da1292a5466522bd37eba5a6b0d17ff3cfdcaac782e3b7a9a" }, { "role": "payment", "kid": "mir-f52346a55b42ceae", "alg": "ES256", "sig": "MnZ-zSMxBctX_uxVhFzQ6GT1pNPEAMkAryIUMzjLgiZF1eoNFQMmqCbKc0CPaNuzn7E8BUJQxm7PmP6aEz1Y5w", "commitments": [ "ace6a06dc4c5b385c3007153fa6f03fe1c0696f3d8d7442c464077cd7862950d" ], "corridor_commitment": "2a1873701a74089da1292a5466522bd37eba5a6b0d17ff3cfdcaac782e3b7a9a" } ], "note": "Every leg is signed by an active ratified member. A supervisor can re-verify the inputs offline against the JWKS, without trusting the operator.", "limit": "Signatures defeat forgery, not censorship: an operator can still withhold a leg and report it missing. The member's own signed copy of that leg is the counter-evidence, which is what makes it a dispute with proof rather than an argument." } }, "proof": { "alg": "ES256", "kid": "mir-7a9558abb08621d2", "signature": "fFt4oPWnzHlQMppfQMLaTkG78ADWlt2BAc12ONwMMCAP4r31BMTcLIE72mDhj1mBOSZBEQmIwVjtVklCWCx4mQ", "canonicalization": "recursively sorted keys", "note": "ES256 over the record as canonical JSON (recursively sorted keys). Verify offline against the published JWKS by matching proof.kid; no database, no network." } }, { "record": { "v": 1, "type": "mirror.trade-reconciliation", "shipment_ref": "SHIP-1002", "verdict": "divergent", "cleared": false, "checked_roles": [ "customs", "invoice", "payment" ], "corridor_commitment": "a4cf9b09d50e461b1c1caf257531ffa4a283531052b38308a0aee7c5f05221d8", "corridor_ref": null, "label": "hs8541 solar inverters", "divergent_pairs": [ [ "customs", "invoice" ], [ "invoice", "payment" ] ], "missing_roles": [], "unreadable_legs": 0, "match_window": { "tolerance": 0, "band_gap_that_still_clears": 0, "bands": 5, "widest_bounded_ratio": 2, "widest_bounded_example": { "low_price_per_unit": 50, "high_price_per_unit": 100, "low_band": 1, "high_band": 1 }, "reaches_open_band": true, "plain_english": "A clear here asserts the two legs COMMITTED the SAME band of the agreed table - the strongest assertion band comparison can make, and an assertion about the committed labels: that each label is the band of its true value is checked at audit, by opening. Note that a band is still a range: the widest one spans 50 to 100 per unit, so even same-band agreement is consistent with a 2x price difference. And because the lowest and highest bands are open-ended, pairs that touch either one clear at NO bounded ratio at all.", "how_to_narrow": null }, "reason": "2 leg pair(s) price into inconsistent bands - a possible mispricing. Route to review before any clearing or payment.", "disclaimer": "A structural trade-mispricing signal reconciled across parties from salted band commitments only - no raw value, unit, or band reaches the operator. NOT a zero-knowledge proof and NOT secure multiparty computation. Corridors are party-supplied; Mirror invents no prices. A divergence is a reason to look, never proof of laundering; a clear is a defensible record, never a guarantee of innocence.", "leg_authentication": { "mode": "signed", "strict": false, "counts": { "authentic": 3, "unauthenticated": 0, "forged": 0, "unknown_key": 0, "not_a_member": 0 }, "legs": [ { "role": "invoice", "kid": "mir-19bcc713de6f3baa", "state": "authentic", "note": null }, { "role": "customs", "kid": "mir-688d9d9477df1e65", "state": "authentic", "note": null }, { "role": "payment", "kid": "mir-f52346a55b42ceae", "state": "authentic", "note": null } ], "equivocation": [], "attestations": [ { "role": "invoice", "kid": "mir-19bcc713de6f3baa", "alg": "ES256", "sig": "7NMleWJc6wtiXmjgo6yAbpYg8irgK4QMEGUX5SA5pHQVverP_Fd0yxsIle1eieuMHjnn34DVszNzMtEZnxXvlA", "commitments": [ "af815265e56a89268b9ec07622a8aa50fb62d4b6fa8f84b9d72f29b6fe72abc8" ], "corridor_commitment": "a4cf9b09d50e461b1c1caf257531ffa4a283531052b38308a0aee7c5f05221d8" }, { "role": "customs", "kid": "mir-688d9d9477df1e65", "alg": "ES256", "sig": "TkZaeh6KZJJ5kormEkjoPNBJatIw3qLypSj5Jt8PBstvQvWKEQiEorxM5UhixPwNKQ6lcTjOGBJT9aW7R1slLg", "commitments": [ "7df493e2d9d71ce730768fbc34ab304adf626e0cfb1623752d48fbfbe92662b7" ], "corridor_commitment": "a4cf9b09d50e461b1c1caf257531ffa4a283531052b38308a0aee7c5f05221d8" }, { "role": "payment", "kid": "mir-f52346a55b42ceae", "alg": "ES256", "sig": "9DL_uLC3frHVaXVfktJUhr2jD0nUxVrZvjGpMKB7U6hybeHPe40fpzSOEXHd-Dij5utcwQJiD7GJeSix2u-GKg", "commitments": [ "7df493e2d9d71ce730768fbc34ab304adf626e0cfb1623752d48fbfbe92662b7" ], "corridor_commitment": "a4cf9b09d50e461b1c1caf257531ffa4a283531052b38308a0aee7c5f05221d8" } ], "note": "Every leg is signed by an active ratified member. A supervisor can re-verify the inputs offline against the JWKS, without trusting the operator.", "limit": "Signatures defeat forgery, not censorship: an operator can still withhold a leg and report it missing. The member's own signed copy of that leg is the counter-evidence, which is what makes it a dispute with proof rather than an argument." } }, "proof": { "alg": "ES256", "kid": "mir-7a9558abb08621d2", "signature": "5xFNQm_W72ZBotmBso4j8NuWJ4lNWkm_pR3s7AwTfcIIEZfe6OE0BQ0tU6vsY9cD6T9ycRvLJWsM3v9p6eszww", "canonicalization": "recursively sorted keys", "note": "ES256 over the record as canonical JSON (recursively sorted keys). Verify offline against the published JWKS by matching proof.kid; no database, no network." } } ], "openings": [ { "shipment_ref": "SHIP-1001", "salt": "1163a0a59bb14a60acde781cbdd7ccf38705650741630ad51f33fd47041095dc", "commitment": "2a1873701a74089da1292a5466522bd37eba5a6b0d17ff3cfdcaac782e3b7a9a", "edges": [ 50, 100, 150, 200 ], "label": "hs8541 solar inverters v1" }, { "shipment_ref": "SHIP-1002", "salt": "b111ea722b307130bb2b99be7f03d0d58fe21da5d27e0dfed7881b65aa64b520", "commitment": "a4cf9b09d50e461b1c1caf257531ffa4a283531052b38308a0aee7c5f05221d8", "edges": [ 50, 100, 150, 200 ], "label": "hs8541 solar inverters v1" } ], "counts": { "verdicts": 2, "openings": 2, "malformed_dropped": 0, "keys": 4 }, "how_to_verify": [ "1. Open the accompanying .html file in any browser, offline. It re-checks every signature below on your machine.", "2. Or check it yourself: each verdict is ES256 (ECDSA P-256) over the record as canonical JSON - the same JSON with every object's keys sorted alphabetically.", "3. Match each proof.kid to a key in operator_jwks. A verdict whose kid is not published here is not evidence of anything.", "4. An opening proves the verdict's opaque corridor_commitment equals sha256(salt + '|c|' + 'c:' + sha256(sorted_edges_joined_by_commas)). That is how you confirm which price table a trade was judged under.", "5. Nothing here calls Mirror. If any step needed our servers, this would be a claim rather than evidence." ], "disclaimer": "A Mirror examiner pack. It proves what was decided, by which key, and under which agreed price table - it does not prove the underlying trade data was true, which remains the reporting institutions' responsibility. Verdicts are structural signals reconciled from salted commitments; NOT a zero-knowledge proof and NOT secure multiparty computation. A divergence is a reason to look, never proof of laundering; a clear is a defensible record, never a guarantee of innocence." }