{
 "v": 1,
 "type": "mirror.verdict-rule-certificate",
 "claim": "Across every configuration in the domain below, the operator's reconcile() returns exactly the three-state rule, and every record it signs keeps the invariants listed.",
 "rule": [
  "undetermined if any required leg is missing, or present but unbandable",
  "undetermined if the submitted bandable legs were banded under more than one corridor table",
  "divergent if any two required legs' band windows are disjoint: |band_a - band_b| > 2 x tolerance",
  "reconciled otherwise - and only then is cleared true"
 ],
 "invariants": [
  "exactly one of reconciled, divergent, undetermined - never a fourth state",
  "cleared is true if and only if the verdict is reconciled",
  "divergent if and only if at least one divergent pair is named, and the pairs named are exactly the disjoint ones",
  "every missing or unbandable required leg is named in missing_roles",
  "an unreadable leg is counted in unreadable_legs, never silently dropped",
  "no band, price, unit, amount or salt field appears anywhere in the record",
  "the record is byte-identical (canonical JSON) whatever order the legs arrive in"
 ],
 "domain": {
  "roles": [
   "invoice",
   "customs",
   "payment"
  ],
  "required_role_policies": 7,
  "states_per_role": 12,
  "state_kinds": [
   "absent",
   "present but unbandable",
   "banded: 5 bands x 2 corridor tables"
  ],
  "tolerances": [
   0,
   1
  ],
  "unreadable_legs": [
   0,
   1
  ]
 },
 "result": {
  "cases": 48384,
  "agreed": 48384,
  "counterexamples": 0,
  "verdicts": {
   "reconciled": 8176,
   "divergent": 2904,
   "undetermined": 37304
  }
 },
 "pinned_to": {
  "kernel": "kernel/mirror-kernel.js",
  "kernel_sha256": "884697f965cd88562af4cc77aef39bb14692b23956d1b08f110e34e7a19fd757",
  "rule": "kernel/mirror-verdict-rule.js",
  "rule_sha256": "b2fdeceac75e2ff3b8f662f273f7e590a4250c16bc256eded801db27719c0b6a"
 },
 "method": "Exhaustive enumeration over a finite domain (bounded model checking): every case in the domain is checked, none is sampled. It is not a proof for inputs outside the domain - more roles, more bands or wider tolerances are not covered by this certificate.",
 "reproduce": "node kernel/mirror-verdict-rule.test.js (regenerate with: node server/pin-verdict-rule.js)"
}