{
  "proofpack_version": "1.1",
  "generated_at": "2026-07-03T15:55:55.383104",
  "incident_id": "6a7213bc-7be5-4541-bc08-47ab5828211e",
  "canonical_inputs": {
    "normalized_payload": {
      "partner_id": "metalert",
      "source_id": "smartsole_001",
      "source_type": "gps",
      "event_type": "gps.geofence_exit",
      "timestamp": "2026-07-03T15:55:55.186590",
      "received_at": "2026-07-03T15:55:55.186590",
      "trigger_timestamp": "2026-07-03T15:55:55.186590",
      "subject_id": "subject_demo",
      "location": {
        "lat": 34.0522,
        "lng": -118.2437,
        "accuracy_m": 18
      },
      "payload": {
        "partner_id": "metalert",
        "device_id": "smartsole_001",
        "event_type": "geofence_exit",
        "timestamp": "2026-07-03T15:55:55.186590",
        "trigger_timestamp": "2026-07-03T15:55:55.186590",
        "lat": 34.0522,
        "lng": -118.2437,
        "speed": 2.3,
        "bearing": 91,
        "battery": 34,
        "gps_accuracy_m": 18,
        "zone_id": "home",
        "zone_name": "Home",
        "time_of_day": "night",
        "caregiver_acknowledged": false,
        "subject_id": "subject_demo",
        "pre_trigger_window_seconds": 10,
        "post_trigger_window_seconds": 10
      },
      "metadata": {
        "speed": 2.3,
        "bearing": 91,
        "battery": 34,
        "zone_id": "home",
        "zone_name": "Home",
        "time_of_day": "night",
        "caregiver_acknowledged": false
      },
      "evidence_window": {
        "pre_trigger_window_seconds": 10,
        "post_trigger_window_seconds": 10
      }
    },
    "analysis": {
      "risk_score": 1.0,
      "urgency": "critical",
      "classification": "high_risk_wandering",
      "explanation": "User exited a known safe zone at an unusual nighttime hour, with battery low (34%), and no caregiver acknowledgment has been recorded. Risk score 1.0.",
      "recommended_action": "Notify the primary caregiver immediately and escalate to backup caregiver if no acknowledgment occurs within 3 minutes.",
      "confidence": 0.85,
      "watcher_score": 10,
      "escalation_required": true,
      "escalation_reason": "Watcher score 10/10 with urgency 'critical' and classification 'high_risk_wandering'.",
      "secondary_ai_status": "placeholder",
      "ruleset_name": "gps_wandering_v1",
      "ruleset_version": "0.1.0",
      "analysis_version": "0.1.0"
    },
    "evidence_window": {
      "pre_trigger_window_seconds": 10,
      "post_trigger_window_seconds": 10,
      "evidence_window_start": "2026-07-03T15:55:45.186590",
      "evidence_window_end": "2026-07-03T15:56:05.186590",
      "proof_window_available": false,
      "proof_window_policy": null,
      "proof_window_reference": null,
      "media_digest_pre": null,
      "media_digest_trigger": null,
      "media_digest_post": null
    }
  },
  "canonicalization_spec": "Canonical JSON, matching the producer exactly: json.dumps(obj, sort_keys=True, separators=(',', ':'), ensure_ascii=False), encoded UTF-8. datetimes are ISO-8601 strings as already serialized in canonical_inputs. Hash each canonical_inputs object exactly as given; do not re-map or reorder.",
  "bundle": {
    "event": {
      "id": "6a7213bc-7be5-4541-bc08-47ab5828211e",
      "partner_id": "fbce30e2-b1b2-47ce-ae73-2c73ada07bac",
      "source_type": "gps",
      "event_type": "gps.geofence_exit",
      "external_event_id": null,
      "timestamp": "2026-07-03T15:55:55.186590",
      "received_at": "2026-07-03T15:55:55.186590",
      "trigger_timestamp": "2026-07-03T15:55:55.186590",
      "subject_id": "subject_demo",
      "normalized_payload": {
        "partner_id": "metalert",
        "source_id": "smartsole_001",
        "source_type": "gps",
        "event_type": "gps.geofence_exit",
        "timestamp": "2026-07-03T15:55:55.186590",
        "received_at": "2026-07-03T15:55:55.186590",
        "trigger_timestamp": "2026-07-03T15:55:55.186590",
        "subject_id": "subject_demo",
        "location": {
          "lat": 34.0522,
          "lng": -118.2437,
          "accuracy_m": 18
        },
        "payload": {
          "partner_id": "metalert",
          "device_id": "smartsole_001",
          "event_type": "geofence_exit",
          "timestamp": "2026-07-03T15:55:55.186590",
          "trigger_timestamp": "2026-07-03T15:55:55.186590",
          "lat": 34.0522,
          "lng": -118.2437,
          "speed": 2.3,
          "bearing": 91,
          "battery": 34,
          "gps_accuracy_m": 18,
          "zone_id": "home",
          "zone_name": "Home",
          "time_of_day": "night",
          "caregiver_acknowledged": false,
          "subject_id": "subject_demo",
          "pre_trigger_window_seconds": 10,
          "post_trigger_window_seconds": 10
        },
        "metadata": {
          "speed": 2.3,
          "bearing": 91,
          "battery": 34,
          "zone_id": "home",
          "zone_name": "Home",
          "time_of_day": "night",
          "caregiver_acknowledged": false
        },
        "evidence_window": {
          "pre_trigger_window_seconds": 10,
          "post_trigger_window_seconds": 10
        }
      },
      "evidence_window": {
        "pre_trigger_window_seconds": 10,
        "post_trigger_window_seconds": 10,
        "evidence_window_start": "2026-07-03T15:55:45.186590",
        "evidence_window_end": "2026-07-03T15:56:05.186590",
        "proof_window_available": false,
        "proof_window_reference": null,
        "media_digest_pre": null,
        "media_digest_trigger": null,
        "media_digest_post": null
      },
      "incoming_proof_status": null
    },
    "analysis": {
      "id": "6c8993db-c9d7-480c-81e1-5ed33bca45ed",
      "risk_score": 1.0,
      "urgency": "critical",
      "classification": "high_risk_wandering",
      "explanation": "User exited a known safe zone at an unusual nighttime hour, with battery low (34%), and no caregiver acknowledgment has been recorded. Risk score 1.0.",
      "recommended_action": "Notify the primary caregiver immediately and escalate to backup caregiver if no acknowledgment occurs within 3 minutes.",
      "watcher_score": 10,
      "escalation_required": true,
      "escalation_reason": "Watcher score 10/10 with urgency 'critical' and classification 'high_risk_wandering'.",
      "ruleset_name": "gps_wandering_v1",
      "ruleset_version": "0.1.0",
      "analysis_version": "0.1.0"
    },
    "proof_record": {
      "id": "971696f3-6be3-44eb-a282-d44e12ee6817",
      "event_hash": "bb1af95cb4b37b168ed2ffc5249306ab275bdadfdc7dac6da88c39611b232759",
      "normalized_payload_hash": "b862c079e6f8c6882cae9fbfcf96a878e1f8f85381edd74e0199b7d8aa7936f6",
      "analysis_hash": "c091e1385e9fcad99d50555754bc819aab7521ca362ed2ecbcd3c31066c3661d",
      "evidence_window_hash": "f5c3603f7ac41f1a91a66473e706a5c2a7d8e7e94f8a64377238f0d2d91433a3",
      "signature": "d4e386a1a1ef17037b74c3b14a1a99d587e9c771bcf56e1208782ce5df97568cbdef58f1b047e574ba523a5d147146a4f96b17e73a240a740cf3094e0965100e",
      "signer_type": "software_key",
      "key_id": "sw-017837ad2f677943",
      "public_key_hex": "1c3f42cd9b13ed9241db13df549b96e61e3b6519e1b87d025b5e705fd6839209",
      "algorithm": "ed25519",
      "signed_at": "2026-07-03T15:55:55.199631",
      "proof_mode": "cloud_signed",
      "hash_context": "privinet.lumra.v1.event-proof",
      "signer_note": "PriviNet Lumra software key (self-signature; not a third-party time-stamp or CA anchor)"
    },
    "edge_binding": null
  },
  "verification": {
    "intact": true,
    "components": {
      "normalized_payload": true,
      "analysis": true,
      "evidence_window": true,
      "composite": true
    },
    "recomputed_event_hash": "bb1af95cb4b37b168ed2ffc5249306ab275bdadfdc7dac6da88c39611b232759",
    "stored_event_hash": "bb1af95cb4b37b168ed2ffc5249306ab275bdadfdc7dac6da88c39611b232759",
    "signature_status": "cloud_signed",
    "signature_valid": true,
    "checked_at": "2026-07-03T15:55:55.383104"
  },
  "verifier_instructions": "This ProofPack is self-verifying with open tools and no PriviNet servers.\nHash the objects under canonical_inputs (NOT the human-readable bundle,\nwhich is a display view). Use the canonicalization_spec exactly.\n1. Recompute SHA-256 over the canonical JSON of canonical_inputs.normalized_payload, .analysis, and .evidence_window. Confirm each matches\n   proof_record.normalized_payload_hash, analysis_hash, and\n   evidence_window_hash respectively (an omitted evidence_window means the\n   stored evidence_window_hash is null).\n2. Recompute the composite: SHA-256 of the UTF-8 string\n   'privinet.lumra.v1.event-proof|<payload_hash>|<analysis_hash>|<evidence_window_hash or empty>'.\n   Confirm it matches proof_record.event_hash.\n3. Verify the Ed25519 signature (proof_record.signature) over the ASCII\n   bytes of event_hash using proof_record.public_key_hex.\nA single altered byte in any canonical_inputs object breaks step 1, 2, or 3.",
  "declaration_template": "CERTIFICATION OF RECORD GENERATED BY AN ELECTRONIC PROCESS\n(template pursuant to Federal Rules of Evidence 902(13) and 902(14);\nfor review and signature by a qualified person or records custodian;\nnot legal advice; self-authentication does not guarantee admissibility)\n\nI, __________________________ [name], state that I am a qualified person\nwith knowledge of the PriviNet Lumra system that produced the records\ndescribed below, and I certify the following of my own knowledge:\n\n1. Incident record identifier: 6a7213bc-7be5-4541-bc08-47ab5828211e\n2. Event type and time: gps.geofence_exit at 2026-07-03T15:55:55.186590 (UTC)\n3. The record was signed by key_id sw-017837ad2f677943 using software_key\n   (ed25519) at 2026-07-03T15:55:55.199631 (UTC).\n   This is a self-signature by the PriviNet Lumra software key, attesting\n   integrity; it is not a third-party time-stamp or certificate-authority anchor.\n4. Composite record digest (SHA-256): bb1af95cb4b37b168ed2ffc5249306ab275bdadfdc7dac6da88c39611b232759\n5. Public verification key (hex): 1c3f42cd9b13ed9241db13df549b96e61e3b6519e1b87d025b5e705fd6839209\n6. The records are copies of data generated by an automated electronic\n   process shown to produce an accurate result, and the digests above\n   identify the records as unaltered.\n7. On 2026-07-03T15:55:55.383104 (UTC) the digests were recomputed from the records and the\n   signature was checked; the result was: integrity True,\n   signature_valid True.\n\nI declare under penalty of perjury that the foregoing is true and correct.\n\nSignature: __________________________   Date: ______________\nTitle/Role: _________________________\n",
  "notice": "Verification of these records is free and requires no PriviNet servers. This assembled, certification-ready ProofPack is a paid deliverable. The record is signed by PriviNet's own software key (a self-signature attesting integrity, not a third-party time-stamp or certificate authority anchor). Self-authentication under FRE 902(13)/(14) is effected through a qualified person's written certification and does not by itself guarantee admissibility.",
  "sample_notice": "SAMPLE ProofPack generated from a demonstration incident on the live Lumra engine. Same structure and verification as a production pack. The underlying event is synthetic demo data."
}