{
  "schema_version": "forge.public-evidence-map/v2",
  "framework": {
    "family": "3.3",
    "name": "FORGE 3.3 — Governança Verificável & Integridade da Entrega",
    "semver": "3.3.0-alpha.1",
    "channel": "alpha"
  },
  "release_published_at": "2026-09-06T21:47:18Z",
  "progress_as_of": "2026-09-08T14:47:43Z",
  "source": {
    "access": "restricted",
    "commit": "8a9ca92e4cb9f9aa9d9d14ac8594bd37ccebcac2",
    "decision": "ADR-0085",
    "manifest_sha256": "e87a918176b91c010f4c88074f8e259775f59d25b2e92f81a2db2b984546dd5b"
  },
  "release_record": {
    "path": "/releases/forge-3.3/release-record.json",
    "sha256": "3584a50d6f936ec1b6ff9fe766e4761bf307473b5cfbbe31d5aa518e821ea2b5"
  },
  "progress_record": {
    "path": "/releases/forge-3.3/progress-record-v1.json",
    "sha256": "5111a99b1b36b344135754ea910f4cc794208148c7dda4f3a94731b5fc13e8b0"
  },
  "runtime": {
    "tag": "forge-v0.26.0",
    "version": "0.26.0",
    "source_sha": "c55b0b08f319fdd49944b29af95bee76a518ea97",
    "release_url": "https://github.com/needyuai/trustyu-infra/releases/tag/forge-v0.26.0",
    "release_run": 34165466888,
    "assets": 9
  },
  "entries": [
    {
      "id": "G0",
      "capability": "Contrato de release",
      "state": "implemented",
      "artifact": "/releases/forge-3.3/release-record.json",
      "verifier": "scripts/build_forge33.py",
      "validity": "exactly 3.3.0-alpha.1 and its bound canonical source",
      "inference_boundary": "Supports consistency of the public mechanism declaration; it does not prove adoption, operation or outcomes."
    },
    {
      "id": "G1",
      "capability": "Spec durável",
      "state": "implemented",
      "artifact": "/releases/forge-3.3/release-record.json",
      "verifier": "scripts/build_forge33.py",
      "validity": "exactly 3.3.0-alpha.1 and its bound canonical source",
      "inference_boundary": "Supports consistency of the public mechanism declaration; it does not prove adoption, operation or outcomes."
    },
    {
      "id": "G2",
      "capability": "Governança",
      "state": "implemented",
      "artifact": "/releases/forge-3.3/release-record.json",
      "verifier": "scripts/build_forge33.py",
      "validity": "exactly 3.3.0-alpha.1 and its bound canonical source",
      "inference_boundary": "Supports consistency of the public mechanism declaration; it does not prove adoption, operation or outcomes."
    },
    {
      "id": "G3",
      "capability": "Veredito fail-closed",
      "state": "verified-owner",
      "artifact": "forge-v0.26.0 · gate-verdict/v2",
      "verifier": "suíte do runtime e CI do source SHA",
      "validity": "owner repo no SHA c55b0b08; adoção por consumidor não incluída",
      "inference_boundary": "Não prova que todos os gates da frota emitem o contrato nem que o veredito está enforced."
    },
    {
      "id": "G4",
      "capability": "Ciclo de vida do gate",
      "state": "verified-owner",
      "artifact": "forge-v0.26.0 · gate-lifecycle/v1",
      "verifier": "assessment 34161130913 · 3/3 receipts",
      "validity": "janela curta no owner repo; false-positive rate e enforcement sem denominador",
      "inference_boundary": "Não autoriza promoção automática, warn, enforce ou operação na frota."
    },
    {
      "id": "G5",
      "capability": "Release revisada",
      "state": "implemented",
      "artifact": "forge-v0.26.0 · 9 assets",
      "verifier": "release run 34165466888",
      "validity": "tag e assets vinculados ao SHA c55b0b08",
      "inference_boundary": "Bypass sancionado não equivale a revisão humana independente do conteúdo."
    },
    {
      "id": "G6",
      "capability": "Propagação na frota",
      "state": "implemented",
      "artifact": "/releases/forge-3.3/release-record.json",
      "verifier": "scripts/build_forge33.py",
      "validity": "exactly 3.3.0-alpha.1 and its bound canonical source",
      "inference_boundary": "Supports consistency of the public mechanism declaration; it does not prove adoption, operation or outcomes."
    },
    {
      "id": "G7",
      "capability": "Integridade da entrega",
      "state": "investigating",
      "artifact": "replay G7 v1 + receipt sha256:220f8939… · acesso técnico restrito",
      "verifier": "trustyu-docs#760 · trustyu-crm#2105 · run 34240297679",
      "validity": "janela histórica de 240 deploys + promoção observada em 2026-09-08; main e staging em ea3a6f1c…",
      "inference_boundary": "O guard segue post-merge/advisory; sem digest imutável do artefato, recovery real ou bloqueio de produção."
    },
    {
      "id": "G8",
      "capability": "Resultados",
      "state": "verified-owner",
      "artifact": "forge-v0.26.0 · delivery-effectiveness/v1",
      "verifier": "1.096 testes e CI do source SHA",
      "validity": "mecanismo no owner repo; resultado da frota insufficient-data",
      "inference_boundary": "Sem dois serviços e janela suficiente, não há baseline, tendência, causalidade ou benchmark."
    },
    {
      "id": "SEC",
      "capability": "Perímetro de dados",
      "state": "verified-owner",
      "artifact": "forge-v0.26.0 · agent-data-profile/v1",
      "verifier": "testes negativos e CI do source SHA",
      "validity": "mecanismo no owner repo; profiles dos consumidores ainda ausentes",
      "inference_boundary": "Não comprova DPA, configuração de destino, deleção exercitada ou operação na frota."
    }
  ],
  "boundaries": {
    "ga": false,
    "operating": false,
    "attested": false,
    "fleet_adopted": false,
    "brownfield_qualified": false,
    "customer_pilot": false
  }
}