The example backend satisfies several source-level checks. PRODUCTION-7 still refuses to call it production-ready because runtime, operational and human evidence is missing.
GateINCOMPLETE
Score74 / 100
Coverage54.3%
Failed findings0
Control states3 verified · 4 partial · 7 unknown
SignerOfficial alpha identity
What was inspected
A deliberately small reference backend.
The target is the allowlisted healthy fixture shipped with the Inspection Kit. It contains a small API boundary, outbound-client timeout, health endpoint, locked dependencies and failure-path tests.
The report path was normalised to example-backend before signing so the public artefact does not disclose a local workstation path. The signed revision, capabilities, evidence references and scores remain inside the downloadable canonical JSON.
The portable bundle contains the canonical report, detached signature, public key, verification manifest and separate instructions for humans and code LLMs.