{
  "surveillanceSchemaVersion": "1.0",
  "benchmarkKey": "signed-execution-safety",
  "observedAt": "2026-10-26T10:33:38.532011+00:00",
  "status": "pass",
  "benchmark": "DN Definitive Flash Signed Execution Safety Benchmark",
  "benchmarkVersion": "1.0",
  "evidenceLevel": "code-executed-upstream-signed-execution-boundary-tests",
  "upstreamRepository": "DefinitiveCo/flash-mcp",
  "upstreamCommit": "25064e2ce10dc7d22f9ddf128c7164ec6eaddfcf",
  "dnRepositoryCommit": "1aac2307fd0fc6faec908bdd5237390ba511e1d6",
  "githubRunId": "40308301811",
  "assertions": {
    "requiredSignedOrderFieldsValidated": true,
    "evmAndSvmFieldFamiliesSeparated": true,
    "permit2TypedDataAndSignaturePaired": true,
    "crossChainRecipientAndBridgeQuoteRequired": true,
    "privateKeyExcludedFromExternalSignedSubmit": true,
    "ambiguousSubmitReconciliationExercised": true,
    "duplicateRetryWarningExercised": true,
    "marketTerminalPollingExercised": true,
    "nativeAssetNormalizationExercised": true
  },
  "controls": {},
  "boundaryFinding": {},
  "limitations": [
    "Uses deterministic upstream tests and fake clients rather than live trading.",
    "The pinned upstream commit has a package.json override not reflected in bun.lock, so dependencies are installed from the pinned manifest with --no-save and metadata mutation is rejected.",
    "Does not prove production API authorization, wallet custody, principal revocation, spend limits, cancel latency or backend venue behavior.",
    "Does not justify a DN Machine Exposure Class by itself."
  ],
  "sourceArtifact": "result.json"
}