{
  "product": "Ntfyx",
  "protocol_version": 1,
  "cli_release": "0.1.2",
  "checked_at": "2026-09-30T13:27:58.962146+00:00",
  "scope": "Project-run protocol tests on Node 24.14.0; not an independent audit, phone test or delivery benchmark. Application source and internal logs are not part of this public summary.",
  "passed": 8,
  "failed": 0,
  "skipped": 0,
  "checks": [
    "strict JSON rejects duplicate/unsafe/invalid UTF Unicode fields",
    "ES256 original bytes, raw signature, algorithm and payload tampering",
    "HPKE all recipients signed; nonextractable complete keypair decrypts only own entry",
    "PSK pairing binds role origin intent digest and key",
    "Deny note cannot become Allow; choice IDs and payload bounded",
    "RFC9180 published P256 SHA256 AES256 Base and PSK vectors",
    "Swift CryptoKit generated envelope decrypts and verifies in JS",
    "encoded wire cap rejects escaped multi-recipient expansion without truncation"
  ],
  "standards": [
    "https://www.rfc-editor.org/rfc/rfc9180",
    "https://www.rfc-editor.org/rfc/rfc7515",
    "https://www.rfc-editor.org/rfc/rfc7518"
  ]
}