{
  "coverage": {
    "failed": 2,
    "passed": 38,
    "required": 33,
    "skipped": 8
  },
  "disclaimers": [
    {
      "id": "not_certified",
      "text": "MHS conformance is a behavioural test result, not a safety certification. MHS.SAFETY.NOT_CERTIFIED: MHS is not a safety-rated channel; an independent hardware emergency stop is required."
    },
    {
      "id": "not_affiliated",
      "text": "OpenMHS is an independent open-source project, not affiliated with or endorsed by Anthropic, and not a reimplementation or compatible dialect of Anthropic's MHS research preview."
    },
    {
      "id": "simulation_only",
      "text": "Simulation conformance does not establish equivalence to the physical device; see the fidelity gaps in the device manifest."
    },
    {
      "id": "self_issued",
      "text": "Self-issued report (issuer.kind self): it records the subject's own run of the suite; recompute it with 'python -m mhs.conformance verify'."
    }
  ],
  "environment": {
    "date": "2026-11-05T20:35:11.826Z",
    "endpoint_ids": [
      "mhs://localhost:7400/robot/arm-2dof"
    ],
    "notes": "profile MHS-Sim; suite 1.4.1; transport in-process, fresh endpoint per group; allow_actuation=false; read_only=false; fixtures=none; approvals=none",
    "os": "Darwin 27.0.0",
    "python": "3.14.7",
    "suite": "mhs-conformance 1.4.1"
  },
  "issuer": {
    "kind": "self",
    "name": "mhs reference conformance suite"
  },
  "level_achieved": "CL4",
  "level_claimed": "CL4",
  "limitations": [
    "optional test failures (do not demote the level): CAP-016, TCAP-002",
    "skipped tests: FID-025, MODE-005, OP-011, SAFE-011, SAFE-012, SAFE-031, SAFE-041, SAFE-045",
    "requirement coverage (MHS-001 §5, SPEC-001): 582 normative ids; checked=52 tested=52 dispositioned=262 (out_of_profile=153, editorial=64, report_process=41, level_not_claimed=4) not_verified=268; the award covers only the executed checks and is not a claim of full normative coverage (inventory: mhs/conformance/applicability.json)."
  ],
  "profile": "MHS-Sim",
  "report_digest": "sha256:a1fbe27dbc13683cc2fb449665437de043b571770f0eceead00557cdbcc8923c",
  "report_version": "1.1.0",
  "subject": {
    "id": "mhs://localhost:7400",
    "kind": "endpoint",
    "manifest_digest": "sha256:efb6f1567d4ec054bc677caff81f3406b457c1c4525f75dd217bff74513cbcfd",
    "mhs_version": "1.0"
  },
  "suite_version": "1.4.1",
  "tests": [
    {
      "detail": "1 device manifest(s) validate against device.schema.json",
      "duration_ms": 2.883,
      "id": "ADPT-005",
      "level": "CL0",
      "name": "device manifests validate against the MHS schema",
      "required": true,
      "spec_ref": "ADPT-005",
      "status": "pass"
    },
    {
      "detail": "endpoint subject under MHS-Sim; device modes simulated",
      "duration_ms": 0.005,
      "id": "TCON-001",
      "level": "CL0",
      "name": "the profile matches the subject kind and every device mode",
      "required": true,
      "spec_ref": "CON-004, CON-005",
      "status": "pass"
    },
    {
      "detail": "8 binding(s) name catalogue classes or extension namespaces",
      "duration_ms": 0.666,
      "id": "CAP-035",
      "level": "CL0",
      "name": "bound classes are catalogue classes or extensions",
      "required": true,
      "spec_ref": "CAP-035",
      "status": "pass"
    },
    {
      "detail": "8 catalogue binding(s) respect their class risk floor",
      "duration_ms": 0.004,
      "id": "CAP-017",
      "level": "CL0",
      "name": "bindings do not lower their class risk floor",
      "required": true,
      "spec_ref": "CAP-017",
      "status": "pass"
    },
    {
      "detail": "mhs://localhost:7400/robot/arm-2dof: cap.motion.joint_position.v1 property-not-in-class at input.joint_positions_deg; mhs://localhost:7400/robot/arm-2dof: cap.motion.joint_position.v1 required-missing at input; mhs://localhost:7400/robot/arm-2dof: cap.motion.cartesian_pose.v1 property-not-in-class at input.x_mm; mhs://localhost:7400/robot/arm-2dof: cap.motion.cartesian_pose.v1 property-not-in-class at input.y_mm; mhs://localhost:7400/robot/arm-2dof: cap.motion.cartesian_pose.v1 property-not-in-class at input.elbow; mhs://localhost:7400/robot/arm-2dof: cap.motion.cartesian_pose.v1 required-missing at input",
      "duration_ms": 1.782,
      "id": "CAP-016",
      "level": "CL0",
      "mhs_code": "MHS.INTERNAL.SCHEMA_DRIFT",
      "name": "binding schemas do not drift from their class (advisory)",
      "required": false,
      "spec_ref": "CAP-016, CAP-018",
      "status": "fail"
    },
    {
      "detail": "mhs://localhost:7400/robot/arm-2dof: cap.world.state.v1 bound to resource kind 'robot.arm'; mhs://localhost:7400/robot/arm-2dof: cap.world.snapshot.v1 bound to resource kind 'robot.arm'; mhs://localhost:7400/robot/arm-2dof: cap.world.restore.v1 bound to resource kind 'robot.arm'; mhs://localhost:7400/robot/arm-2dof: cap.world.seed.v1 bound to resource kind 'robot.arm'",
      "duration_ms": 1.736,
      "id": "TCAP-002",
      "level": "CL0",
      "mhs_code": "MHS.CAPABILITY.KIND_MISMATCH",
      "name": "bindings target a resource kind their class accepts (advisory)",
      "required": false,
      "spec_ref": "MHS-003 §3 resource_kinds, MHS.CAPABILITY.KIND_MISMATCH (no numbered requirement)",
      "status": "fail"
    },
    {
      "detail": "no hardware or hybrid device: the actuation gate was not engaged",
      "duration_ms": 0.001,
      "id": "CON-031",
      "level": "CL0",
      "name": "hardware is not actuated without allow_actuation (suite check)",
      "required": true,
      "spec_ref": "CON-031",
      "status": "pass"
    },
    {
      "detail": "mhs.safety.estop sent 2 time(s) and mhs.safety.reset 2 time(s), only to software/both e-stops",
      "duration_ms": 0.003,
      "id": "CON-032",
      "level": "CL0",
      "name": "e-stops are sent only to software/both e-stops (suite check)",
      "required": true,
      "spec_ref": "CON-032",
      "status": "pass"
    },
    {
      "detail": "8/8 CL1 mandatory methods reached dispatch; probes: mhs.hello=present, mhs.devices.list=present, mhs.devices.get=present, mhs.schema.get=present, mhs.session.open=present, mhs.session.close=MHS.SESSION.UNKNOWN, mhs.resource.read=present, mhs.evidence.export=present",
      "duration_ms": 2.828,
      "id": "TPROTO-901",
      "level": "CL1",
      "name": "every mandatory CL1 method is implemented (dispatch-level probe)",
      "required": true,
      "spec_ref": "PROTO-016, PROTO-017, CON-014, CON-018",
      "status": "pass"
    },
    {
      "detail": "4/4 CL2 mandatory methods reached dispatch; probes: mhs.command=present, mhs.subscribe=MHS.PROTOCOL.INVALID_PARAMS, mhs.unsubscribe=MHS.SESSION.UNKNOWN, mhs.operations.get=MHS.OPERATION.UNKNOWN",
      "duration_ms": 0.475,
      "id": "TPROTO-902",
      "level": "CL2",
      "name": "every mandatory CL2 method is implemented (dispatch-level probe)",
      "required": true,
      "spec_ref": "PROTO-016, PROTO-017, CON-014, CON-018",
      "status": "pass"
    },
    {
      "detail": "2/2 CL3 mandatory methods reached dispatch; probes: mhs.operations.cancel=MHS.OPERATION.UNKNOWN, mhs.safety.status=present",
      "duration_ms": 0.111,
      "id": "TPROTO-903",
      "level": "CL3",
      "name": "every mandatory CL3 method is implemented (dispatch-level probe)",
      "required": true,
      "spec_ref": "PROTO-016, PROTO-017, CON-014, CON-018",
      "status": "pass"
    },
    {
      "detail": "hello ok: 1.0, 1 device(s)",
      "duration_ms": 0.256,
      "evidence": {
        "request_digest": "sha256:7e9ea4be0f8f8f58b5439f41ec03f2c815f678b8bea3fcdd6e7de6a9f3db2aef"
      },
      "id": "PROTO-013",
      "level": "CL1",
      "name": "mhs.hello negotiates the protocol and lists devices",
      "required": true,
      "spec_ref": "PROTO-013",
      "status": "pass"
    },
    {
      "detail": "devices.list/get ok for 1 device(s)",
      "duration_ms": 2.162,
      "id": "PROTO-021",
      "level": "CL1",
      "name": "devices.list/get return complete manifests",
      "required": true,
      "spec_ref": "PROTO-021",
      "status": "pass"
    },
    {
      "detail": "read arm@r0 hash verifies",
      "duration_ms": 0.178,
      "evidence": {
        "response_digest": "sha256:3e62679889e6e2b85fa065e214bcee6232cb93c496654ff11b205bd53c8a7199"
      },
      "id": "PROTO-023",
      "level": "CL1",
      "name": "resource.read returns a verifiable revision and state hash",
      "required": true,
      "spec_ref": "PROTO-023",
      "status": "pass"
    },
    {
      "detail": "read is stable at revision 0",
      "duration_ms": 0.237,
      "id": "PROTO-024",
      "level": "CL1",
      "name": "reads are stable without mutations",
      "required": true,
      "spec_ref": "PROTO-024",
      "status": "pass"
    },
    {
      "detail": "session opened with 8 granted capability(s)",
      "duration_ms": 0.077,
      "id": "SESS-001",
      "level": "CL1",
      "name": "session.open returns a grant, mode and expiry",
      "required": true,
      "spec_ref": "SESS-001",
      "status": "pass"
    },
    {
      "detail": "mode 'hardware' rejected with MHS.SESSION.MODE_MISMATCH",
      "duration_ms": 0.03,
      "id": "MODE-002",
      "level": "CL1",
      "mhs_code": "MHS.SESSION.MODE_MISMATCH",
      "name": "session mode mismatch is rejected",
      "required": true,
      "spec_ref": "MODE-002",
      "status": "pass"
    },
    {
      "detail": "session heartbeat refreshed the lease",
      "duration_ms": 0.022,
      "id": "SESS-005",
      "level": "CL3",
      "name": "session heartbeat refreshes the lease",
      "required": false,
      "spec_ref": "SESS-005",
      "status": "pass"
    },
    {
      "detail": "cap.motion.joint_position.v1 (invoke, synthesized input) completed r0->r1; revision advanced; read-verb cap.world.state.v1 (class example input) completed and kept the revision at r1",
      "duration_ms": 3.332,
      "evidence": {
        "request_digest": "sha256:011e841810caad9dad73ee16f3547146f746ca04377c05d7c9568dacdcb91eae",
        "response_digest": "sha256:9b97a7cb58e3cda087483cf72c4b24e66582da711eb0db6fd31f9794964551f5"
      },
      "id": "OP-001",
      "level": "CL2",
      "name": "a valid command returns a completed receipt",
      "required": true,
      "spec_ref": "OP-001",
      "status": "pass"
    },
    {
      "detail": "cap.motion.joint_position.v1 output validates against the binding output_schema",
      "duration_ms": 0.767,
      "evidence": {
        "note": "advisory (CAP-016, required in a later suite version): output does not match the class output_schema: $: missing required property 'joint_positions'; $.joint_mdeg: additional property 'joint_mdeg' is not allowed (allowed: \"duration_ms\", \"joint_positions\", \"reached\", \"tolerance_rad\")"
      },
      "id": "TCAP-001",
      "level": "CL2",
      "name": "a completed command's output validates against its output_schema",
      "required": true,
      "spec_ref": "MHS-003 §3 output_schema, appendix B MHS.CAPABILITY.OUTPUT_INVALID (no numbered requirement)",
      "status": "pass"
    },
    {
      "detail": "invoke cap.motion.joint_position.v1 changed resource 'arm' state",
      "duration_ms": 1.867,
      "id": "TCAP-003",
      "level": "CL2",
      "name": "a probe command has an observable effect (writes change state)",
      "required": false,
      "spec_ref": "CAP-013",
      "status": "pass"
    },
    {
      "detail": "duplicate command_id with identical input replayed without a second effect",
      "duration_ms": 1.111,
      "id": "OP-003",
      "level": "CL2",
      "name": "command_id idempotency replays without re-execution",
      "required": true,
      "spec_ref": "OP-003",
      "status": "pass"
    },
    {
      "detail": "command_id reuse with different input rejected with MHS.CONFLICT.COMMAND_ID_REUSE",
      "duration_ms": 1.236,
      "id": "OP-004",
      "level": "CL2",
      "mhs_code": "MHS.CONFLICT.COMMAND_ID_REUSE",
      "name": "command_id reuse with different input is a conflict",
      "required": true,
      "spec_ref": "OP-004",
      "status": "pass"
    },
    {
      "detail": "stale expected_revision rejected with MHS.CONFLICT.REVISION",
      "duration_ms": 0.664,
      "id": "OP-005",
      "level": "CL2",
      "mhs_code": "MHS.CONFLICT.REVISION",
      "name": "expected_revision conflicts are rejected",
      "required": true,
      "spec_ref": "OP-005",
      "status": "pass"
    },
    {
      "detail": "input with a wrongly typed 'joint_positions_deg' rejected with MHS.CAPABILITY.INPUT_INVALID",
      "duration_ms": 0.641,
      "id": "PROTO-027",
      "level": "CL2",
      "mhs_code": "MHS.CAPABILITY.INPUT_INVALID",
      "name": "schema-invalid input is rejected without effects",
      "required": true,
      "spec_ref": "PROTO-027",
      "status": "pass"
    },
    {
      "detail": "unknown capability rejected with MHS.CAPABILITY.UNKNOWN",
      "duration_ms": 0.226,
      "id": "PROTO-014",
      "level": "CL2",
      "mhs_code": "MHS.CAPABILITY.UNKNOWN",
      "name": "unknown capabilities are rejected",
      "required": true,
      "spec_ref": "PROTO-014",
      "status": "pass"
    },
    {
      "detail": "operations.get(op_01M6PPRCACQ9SYCY2YSFD731RZ) returns the receipt snapshot",
      "duration_ms": 0.778,
      "id": "PROTO-030",
      "level": "CL2",
      "name": "operations can be queried for commands",
      "required": false,
      "spec_ref": "PROTO-030",
      "status": "pass"
    },
    {
      "detail": "deadline exceeded on cap.motion.joint_position.v1 surfaced as MHS.OUTCOME.TIMEOUT (status 'unknown')",
      "duration_ms": 405.962,
      "id": "PROTO-011",
      "level": "CL2",
      "mhs_code": "MHS.OUTCOME.TIMEOUT",
      "name": "deadlines surface as a timeout outcome",
      "required": false,
      "spec_ref": "PROTO-011",
      "status": "pass"
    },
    {
      "detail": "endpoint does not declare a cancellable capability; OP-011 is not applicable",
      "duration_ms": 0.014,
      "id": "OP-011",
      "level": "CL3",
      "name": "cancellation resolves to a declared safe state",
      "required": false,
      "spec_ref": "OP-011",
      "status": "skip"
    },
    {
      "detail": "lost response surfaced as MHS.OUTCOME.UNKNOWN (status 'unknown'; observed r9)",
      "duration_ms": 1.629,
      "id": "OP-013",
      "level": "CL2",
      "mhs_code": "MHS.OUTCOME.UNKNOWN",
      "name": "unknown-outcome semantics survive a lost receipt",
      "required": false,
      "spec_ref": "OP-013",
      "status": "pass"
    },
    {
      "detail": "safety.status ok: risk R1, 0 interlock(s)",
      "duration_ms": 0.143,
      "id": "SAFE-001",
      "level": "CL3",
      "name": "safety.status exposes risk, e-stop, interlocks and safe state",
      "required": true,
      "spec_ref": "SAFE-001",
      "status": "pass"
    },
    {
      "detail": "no hardware or hybrid device at R2/R3; SAFE-045 is not applicable",
      "duration_ms": 0.003,
      "id": "SAFE-045",
      "level": "CL3",
      "name": "hardware R2+ devices declare an independent stop path",
      "required": false,
      "spec_ref": "SAFE-045",
      "status": "skip"
    },
    {
      "detail": "safe_state.achieved_by resolves on 1 device(s)",
      "duration_ms": 0.011,
      "id": "SAFE-029",
      "level": "CL3",
      "name": "safe_state.achieved_by resolves to bound, permit-free actions",
      "required": true,
      "spec_ref": "SAFE-029",
      "status": "pass"
    },
    {
      "detail": "e-stop latched within its declared latency, blocked commands, reset released the latch without auto-resume, a new command recovered",
      "duration_ms": 33.602,
      "id": "TSAFE-001",
      "level": "CL3",
      "name": "e-stop latches, blocks commands and reset releases it",
      "required": true,
      "spec_ref": "SAFE-040, SAFE-042, SAFE-048",
      "status": "pass"
    },
    {
      "detail": "e-stop reached mhs://localhost:7400/robot/arm-2dof: latched, safe state achieved in 0 ms; driver estop() invoked",
      "duration_ms": 1.033,
      "id": "SAFE-028",
      "level": "CL3",
      "name": "the e-stop reaches the device and its safe state",
      "required": true,
      "spec_ref": "SAFE-028",
      "status": "pass"
    },
    {
      "detail": "no declared interlock gates an actuating binding",
      "duration_ms": 0.007,
      "id": "SAFE-011",
      "level": "CL3",
      "name": "open interlocks block actuation",
      "required": false,
      "spec_ref": "SAFE-011",
      "status": "skip"
    },
    {
      "detail": "no declared interlock gates an actuating binding",
      "duration_ms": 0.003,
      "id": "SAFE-012",
      "level": "CL3",
      "name": "interlocks in an unknown state block actuation",
      "required": false,
      "spec_ref": "SAFE-012",
      "status": "skip"
    },
    {
      "detail": "the primary device declares no interlock that gates actuation",
      "duration_ms": 0.003,
      "id": "SAFE-041",
      "level": "CL3",
      "name": "reset is refused while a hard interlock is open",
      "required": false,
      "spec_ref": "SAFE-041",
      "status": "skip"
    },
    {
      "detail": "endpoint declares no gated (requires_permit) capability",
      "duration_ms": 0.003,
      "id": "SAFE-031",
      "level": "CL3",
      "name": "gated capabilities require a valid single-use permit",
      "required": false,
      "spec_ref": "SAFE-030, SAFE-031",
      "status": "skip"
    },
    {
      "detail": "8 out-of-limit probe(s) refused with MHS.SAFETY.ENVELOPE_VIOLATION before any effect (4 inside the schema range), covering 3 limited path(s): cap.motion.cartesian_pose.v1 x_mm, cap.motion.cartesian_pose.v1 y_mm, cap.motion.joint_position.v1 joint_positions_deg; values x_mm=451.0, y_mm=451.0, x_mm=-451.0, y_mm=-451.0, joint_positions_deg[0]=136.0, joint_positions_deg[1]=136.0, joint_positions_deg[0]=-136.0, joint_positions_deg[1]=-136.0",
      "duration_ms": 7.601,
      "id": "SAFE-014",
      "level": "CL3",
      "mhs_code": "MHS.SAFETY.ENVELOPE_VIOLATION",
      "name": "safety envelope bounds are enforced before effects",
      "required": true,
      "spec_ref": "SAFE-014",
      "status": "pass"
    },
    {
      "detail": "hello advertises MHS.SAFETY.NOT_CERTIFIED",
      "duration_ms": 0.003,
      "id": "SAFE-050",
      "level": "CL3",
      "name": "MHS.SAFETY.NOT_CERTIFIED is disclosed in hello",
      "required": true,
      "spec_ref": "SAFE-050",
      "status": "pass"
    },
    {
      "detail": "evidence bundle verified offline (15 receipts, head sha256:967773ce09c7f1e046c4659c26994722647de377f0ab1041d4d0ffd7e51ab170)",
      "duration_ms": 4.896,
      "evidence": {
        "response_digest": "sha256:967773ce09c7f1e046c4659c26994722647de377f0ab1041d4d0ffd7e51ab170"
      },
      "id": "EVID-015",
      "level": "CL4",
      "name": "evidence exports and verifies offline",
      "required": true,
      "spec_ref": "EVID-015",
      "status": "pass"
    },
    {
      "detail": "tampered bundle rejected: {'seq': 1, 'mhs_code': 'MHS.EVIDENCE.CHAIN_BROKEN', 'detail': \"digest mismatch (recomputed sha256:42e4ed6348f014394ad481cb6d2f2d9e69061558808613ab6d73710188143e5f, receipt claims 'sha256:bf96aa07d9a99e1d47133cc39208651130b501863b7c52097163bc96d5322457')\"}",
      "duration_ms": 4.719,
      "id": "EVID-016",
      "level": "CL4",
      "name": "tampered evidence is detected",
      "required": true,
      "spec_ref": "EVID-016",
      "status": "pass"
    },
    {
      "detail": "evidence chain links verified across 15 receipt(s)",
      "duration_ms": 0.343,
      "id": "EVID-010",
      "level": "CL4",
      "name": "receipt evidence links form a hash chain",
      "required": true,
      "spec_ref": "EVID-010",
      "status": "pass"
    },
    {
      "detail": "fidelity contracts disclosed for 1 device(s)",
      "duration_ms": 0.003,
      "id": "FID-005",
      "level": "CL4",
      "name": "simulated devices disclose a complete fidelity contract",
      "required": true,
      "spec_ref": "FID-005",
      "status": "pass"
    },
    {
      "detail": "restored snapshot reproduced identical state_hash sequence (2 commands)",
      "duration_ms": 4.519,
      "id": "FID-016",
      "level": "CL4",
      "name": "restore reproduces an identical state_hash sequence",
      "required": true,
      "spec_ref": "FID-016",
      "status": "pass"
    },
    {
      "detail": "primary device does not declare seeded determinism",
      "duration_ms": 0.004,
      "id": "FID-025",
      "level": "CL4",
      "name": "seeded replay reproduces identical sequences for the same seed",
      "required": false,
      "spec_ref": "FID-025",
      "status": "skip"
    },
    {
      "detail": "endpoint does not expose a replay-mode device",
      "duration_ms": 0.001,
      "id": "MODE-005",
      "level": "CL1",
      "name": "replay endpoints are read-only but readable and snapshotable",
      "required": false,
      "spec_ref": "MODE-005",
      "status": "skip"
    }
  ]
}