{
  "schema_version": "ton-3811.errand-privacy.v2",
  "sample_kind": "synthetic_public_evidence",
  "public_dto": {
    "match_a": {
      "participant_token": "psn_5Fjza3VAfU6u5LVG",
      "distance_bucket": "1–3km",
      "key_ref": "keyref_6KFTg52GeWBzPLQ6",
      "key_status": "ACTIVE",
      "expires_at": "2026-07-24T13:00:00Z"
    },
    "match_b_same_synthetic_actor": {
      "participant_token": "psn_eXuL9f3wC7N2bM4R",
      "distance_bucket": "1–3km",
      "key_ref": "keyref_n1JH8dQ3pWz5RtY7",
      "key_status": "ACTIVE",
      "expires_at": "2026-07-24T13:05:00Z"
    }
  },
  "unlinkability_boundary": "tokens_differ_across_matches_only; network_device_behavioral_linkability_not_claimed",
  "laplace": {
    "epsilon": 0.5,
    "sensitivity_km": 1.0,
    "scale_km": 2.0,
    "scale_formula": "b = sensitivity / epsilon",
    "privacy_unit": "one synthetic participant contribution across requests_candidates_release_ids_endpoints_restarts",
    "composition": "basic_sequential",
    "epsilon_cap_per_unit_per_window": 6.0,
    "window_seconds": 86400,
    "durable_cross_request_accountant": true,
    "atomic_reserve_before_release": true,
    "release_id_replay": "fail_closed",
    "boundary": "bounded_synthetic_prototype_not_whole_system_dp_guarantee"
  },
  "key_lifecycle": {
    "scope": "single_match",
    "public_material": "opaque_reference_only",
    "transitions": ["ACTIVE->REVOKED", "ACTIVE->EXPIRED"],
    "terminal_access_denied": true,
    "server_material_destroyed_on_revoke": true,
    "server_material_destroyed_immediately_on_ttl": true,
    "capability_digest_destroyed_with_key_material": true,
    "restart_semantics": "remaining_active_rows_conservatively_revoked_before_serving",
    "boundary": "prototype_sqlite_lifecycle_not_kms_vault_or_e2ee_claim"
  },
  "arrival_boundary": {
    "exact_coordinates_or_address_exposed": false,
    "exact_or_rounded_distance_m_exposed": false,
    "public_result": "inside_geofence_or_outside_geofence",
    "whole_location_unlinkability_claimed": false
  },
  "server_only_schema": [
    "identity.real_name",
    "location.exact_latitude",
    "location.exact_longitude",
    "location.precise_address",
    "key.material"
  ],
  "forbidden_public_fields": [
    "real_name",
    "latitude",
    "longitude",
    "lat",
    "lon",
    "precise_address",
    "match_key",
    "key_material",
    "match_key_b64",
    "distance_m",
    "approximate_distance_km"
  ],
  "remediation_evidence": {
    "seed": 3825,
    "focused_regressions": "18 passed",
    "machine_result": "evidence/ton-3826/remediation-results.json"
  },
  "claim_limitations": [
    "synthetic_sample",
    "no_whole_system_dp_or_unlinkability_claim",
    "no_kms_vault_e2ee_claim",
    "no_customer_data",
    "no_operational_outcome_claim",
    "no_legal_compliance_claim"
  ]
}