{"format":"sealroute-client-acceptance-evidence-template-v2","template_only":true,"instructions":["Copy this file before filling customer evidence.","Set template_only to false after replacing every <placeholder> value.","Validate the filled file with secure-llm-delivery-check --external-evidence-file.","Before production release, add --require-production-release-ready so required release gates must be verified."],"release":{"status":"<candidate|published>","client_version":"<client-version>","published_at":"<iso-8601-published-time>","artifact_sha256":"<artifact-sha256>","manifest_url":"/download/client/manifest","checksum_url":"/download/client.sha256","tool_configs_url":"/download/client/tool-configs"},"redaction":{"never_collect":["user access tokens","local client API keys","channel distribution keys","admin tokens","upstream provider keys","raw customer prompts","raw model responses that contain customer data"],"allowed_evidence":["sanitized screenshots","request ids","audit hashes","Merkle roots","proof verification status","download filename, size, and checksum"]},"client_tool_runs":[{"tool":"WorkBuddy","setup":{"provider_type":"OpenAI-compatible custom provider","base_url":"http://127.0.0.1:18997/v1","model":"secure-deepseek-v4-flash","streaming":"test both enabled and disabled"},"evidence":{"sanitized_configuration_screenshot":"<path-or-ticket-reference>","models_endpoint_lists_secure_model":"<true|false>","non_stream_request_id":"<request-id>","non_stream_proof_request_id":"<same-request-id>","non_stream_proof_verified_offline":"<true|false>","stream_request_id":"<request-id>","stream_proof_request_id":"<same-request-id>","stream_proof_verified_offline":"<true|false>","ordinary_openai_response_returned":"<true|false>"}},{"tool":"Codex","setup":{"provider_type":"OpenAI-compatible custom provider","base_url":"http://127.0.0.1:18997/v1","model":"secure-deepseek-v4-flash","streaming":"test both enabled and disabled"},"evidence":{"sanitized_configuration_screenshot":"<path-or-ticket-reference>","models_endpoint_lists_secure_model":"<true|false>","non_stream_request_id":"<request-id>","non_stream_proof_request_id":"<same-request-id>","non_stream_proof_verified_offline":"<true|false>","stream_request_id":"<request-id>","stream_proof_request_id":"<same-request-id>","stream_proof_verified_offline":"<true|false>","ordinary_openai_response_returned":"<true|false>"}},{"tool":"Cherry Studio","setup":{"provider_type":"OpenAI-compatible custom provider","base_url":"http://127.0.0.1:18997/v1","model":"secure-deepseek-v4-flash","streaming":"test both enabled and disabled"},"evidence":{"sanitized_configuration_screenshot":"<path-or-ticket-reference>","models_endpoint_lists_secure_model":"<true|false>","non_stream_request_id":"<request-id>","non_stream_proof_request_id":"<same-request-id>","non_stream_proof_verified_offline":"<true|false>","stream_request_id":"<request-id>","stream_proof_request_id":"<same-request-id>","stream_proof_verified_offline":"<true|false>","ordinary_openai_response_returned":"<true|false>"}}],"distribution_gateway_runs":[{"target":"NewAPI","setup":{"provider_type":"OpenAI-compatible","base_url":"<relay-or-channel-distribution-base-url>","models_path":"/models","chat_path":"/chat/completions","model":"secure-deepseek-v4-flash"},"evidence":{"models_endpoint_lists_secure_model":"<true|false>","streaming_chat_returns_secure_chunks":"<true|false>","logs_contain_ciphertext_only":"<true|false>","proof_request_id":"<request-id>"}},{"target":"One API","setup":{"provider_type":"OpenAI-compatible","base_url":"<relay-or-channel-distribution-base-url>","models_path":"/models","chat_path":"/chat/completions","model":"secure-deepseek-v4-flash"},"evidence":{"models_endpoint_lists_secure_model":"<true|false>","streaming_chat_returns_secure_chunks":"<true|false>","logs_contain_ciphertext_only":"<true|false>","proof_request_id":"<request-id>"}}],"channel_workspace_runs":[{"target":"Channel workspace","setup":{"workspace_url":"/workspace?role=channel","distribution_configs_url":"/download/channel/distribution-configs","proof_report_url":"/v1/portal/channel/proofs/report?format=json"},"evidence":{"key_rotation_confirmed":"<true|false>","secure_model_route_active":"<true|false>","upstream_credential_hash_present":"<true|false>","proof_report_exported":"<true|false>","no_raw_keys_in_report":"<true|false>","proof_report_reference":"<report-id-or-ticket-reference>"}}],"trusted_upstream_runs":[{"target":"NewAPI or One API as trusted upstream","evidence":{"upstream_probe_status":"<reachable|failed>","credential_hash_present":"<true|false>","raw_key_absent_from_report":"<true|false>"}}],"release_gate_runs":[{"gate":"production_config_check","title":"Production config check","matrix_rows":["base_security_and_interaction"],"evidence":{"status":"<passed|failed|not-run>","production_profile":"<true|false>","secret_free_report":"<true|false>","report_id":"<config-check-report-id>"}},{"gate":"worm_audit_retention","title":"WORM or object-store audit retention","matrix_rows":["base_security_and_interaction"],"evidence":{"status":"<passed|failed|not-run>","object_store_or_worm_mount_observed":"<true|false>","retention_policy_observed":"<true|false>","evidence_id":"<worm-retention-evidence-id>"}},{"gate":"customer_smoke_pack","title":"Customer-facing smoke evidence pack","matrix_rows":["feature_gap_closure"],"evidence":{"status":"<passed|failed|not-run>","sanitized_evidence_collected":"<true|false>","no_customer_plaintext_or_secrets":"<true|false>","evidence_id":"<customer-smoke-evidence-id>"}},{"gate":"launch_blocker_closure","title":"Launch blocker closure","matrix_rows":["feature_gap_closure"],"evidence":{"status":"<passed|failed|not-run>","launch_blockers_zero_or_accepted":"<true|false>","deferrals_have_owner":"<true|false>","decision_reference":"<launch-decision-reference>"}},{"gate":"ux_browser_smoke","title":"Portal, workspace, official operations, and client setup UX smoke","matrix_rows":["ux_layout"],"evidence":{"status":"<passed|failed|not-run>","portal_workspace_official_ops_checked":"<true|false>","no_text_overlap":"<true|false>","no_secret_values_visible":"<true|false>","screenshot_bundle_id":"<screenshot-bundle-id>"}},{"gate":"market_packaging_approval","title":"Market editions, pricing, and legal approval","matrix_rows":["market_editions"],"evidence":{"status":"<approved|failed|not-run>","edition_catalog_reviewed":"<true|false>","pricing_approved":"<true|false>","legal_approved":"<true|false>","approval_reference":"<approval-ticket-or-document-id>"}},{"gate":"parallel_execution_lanes","title":"Parallel development and smoke-test lanes","matrix_rows":["parallel_dev_and_test"],"evidence":{"status":"<passed|failed|not-run>","lane_owners_assigned":"<true|false>","client_channel_upstream_lanes_parallelized":"<true|false>","consolidated_report_ready":"<true|false>","report_id":"<parallel-execution-report-id>"}},{"gate":"macos_signing_notarization","title":"macOS package signing and notarization","matrix_rows":[],"evidence":{"status":"<passed|failed|not-run>","signed_artifact_verified":"<true|false>","notarization_checked":"<true|false>","checksum_matches_manifest":"<true|false>","artifact_id":"<signed-artifact-id>"},"optional_until":"packaged_macos_release"},{"gate":"cloud_release_smoke","title":"Cloud release smoke","matrix_rows":[],"evidence":{"status":"<passed|failed|not-run>","production_url_reachable":"<true|false>","health_ready_passed":"<true|false>","rollback_owner_assigned":"<true|false>","release_id":"<cloud-release-id>"},"optional_until":"cloud_release"},{"gate":"kms_tee_attestation","title":"KMS/HSM/TEE attestation","matrix_rows":[],"evidence":{"status":"<passed|failed|not-run>","kms_or_hsm_key_custody_enabled":"<true|false>","attestation_report_reviewed":"<true|false>","raw_keys_absent_from_logs":"<true|false>","evidence_id":"<attestation-evidence-id>"},"optional_until":"enterprise_attestation_environment"}],"completion_gate":["WorkBuddy, Codex, and Cherry Studio each complete one non-streaming and one streaming request, with an offline-verified Proof bound to each Request ID.","All three tools are tested against the client version, published time, and artifact SHA-256 recorded in release evidence.","NewAPI and One API distribution routes return encrypted secure-chunk-v1 payloads.","Channel workspace evidence covers key rotation, secure model route, upstream custody, and proof report export.","Required release gates have status passed, approved, complete, or verified.","All proof packages verify offline.","The evidence bundle contains no raw secrets or customer plaintext."]}