# Artifact Contract Test Vectors

These files are specification fixtures only. They contain conspicuous non-production identifiers and
digests. They MUST NOT be copied into an installer or accepted by a release verifier.

- `workstation-iso-manifest.valid.json`: structurally valid Workstation ISO payload example.
- `compatibility-cases.json`: deterministic compatibility outcomes and primary reason codes.
- `ed25519-test-public.pem`, the four `*-signature.valid.json` envelopes, and
  `signature-cases.json`: real test-only Ed25519 positive vectors plus tamper and unknown-key
  negatives. The private key was transient and is intentionally absent.
- `model-pack-manifest.valid.json`, `update-bundle-manifest.valid.json`, and
  `trust-bundle-manifest.valid.json`: structural examples for the remaining artifact types.
- `verification-evidence.md`: current parsing, digest, signature, and scope-limited verification result.

Before Gate 1 approval, add:

1. independent security/platform review of the test-vector procedure;
2. owner approval of the schemas, compatibility contract, and signing policy.

No production key or customer license may appear in this directory.

Run the complete automated fixture suite with Python packages `jsonschema` and `cryptography`:

```bash
python3 validate_vectors.py
```