Verdict Manifest Boundary

Source-verified against commit 2021a48f6e (2026-10-05). Re-verify the named source contracts before applying this description to an installation. Re-verify: git show HEAD:src/Authority/__Libraries/StellaOps.Authority.Core/Verdicts/VerdictManifest.cs.

Authority retains verdict-manifest library models and storage under src/Authority/__Libraries/StellaOps.Authority.Core/Verdicts/ and StellaOps.Authority.Persistence/Postgres/VerdictManifestStore.cs. Their presence is not proof that the former trust-lattice workflow runs in the host.

Current VEX decision path

The Vulnerabilities hub stores issuer facts. The shared consensus evaluator computes a deterministic decision hash. Policy persists the tenant’s effective status and Findings displays it. The Findings overlay feed carries supported operator decisions.

Use the consensus runbook and decision hash reference for that current path. The old VexLens proof and PCR trust-vector schemas do not describe this evaluator.

Library record

VerdictManifest retains its manifest identity, tenant, asset and vulnerability identities, pinned inputs, result, policy hash, lattice version, evaluation time and manifest digest. Signature and Rekor identifiers are optional model fields. A populated field alone is not cryptographic verification or proof of a production producer.

The former HTTP route examples and completion claim are preserved as historical design, rather than instructions to operate the current VEX chain.

The earlier design is frozen history. It does not describe the current runtime.