{
  "schema_version": 1,
  "fixture_id": "coderssecret-static-triage-001",
  "classification": "inert-metadata-and-source-summaries",
  "warning": "No binary, package, archive, installer, or runnable image is included.",
  "byte_signature_records": [
    { "id": "pe-trusted", "declared_signature": "PE32+-metadata-record", "actual_asset": "metadata-only" },
    { "id": "elf-trusted", "declared_signature": "ELF64-metadata-record", "actual_asset": "metadata-only" },
    { "id": "script-review", "declared_signature": "UTF-8-course-pseudocode", "actual_asset": "non-executable-text" }
  ],
  "pe_pair": {
    "trusted": {
      "id": "pe-trusted",
      "machine": "x86-64",
      "subsystem": "console",
      "sections": [".text:r-x", ".rdata:r--", ".data:rw-"],
      "imports": ["course-console-output", "normal-process-exit"],
      "signer": "Northstar Training Signer A",
      "declared_purpose": "print a fixed course greeting"
    },
    "altered": {
      "id": "pe-altered",
      "machine": "x86-64",
      "subsystem": "console",
      "sections": [".text:r-x", ".rdata:r--", ".data:rw-", ".course:rw-"],
      "imports": ["course-console-output", "normal-process-exit", "read-course-metadata"],
      "signer": "Northstar Training Signer B",
      "declared_purpose": "print a fixed course greeting",
      "review_note": "Structure and signer changed; intent is unknown and must not be inferred"
    }
  },
  "elf_pair": {
    "trusted": {
      "id": "elf-trusted",
      "class": "ELF64",
      "type": "position-independent-executable-metadata",
      "program_headers": ["read-execute", "read-only", "read-write"],
      "needed_libraries": ["course-standard-runtime"],
      "build_id": "course-build-approved-420"
    },
    "altered": {
      "id": "elf-altered",
      "class": "ELF64",
      "type": "position-independent-executable-metadata",
      "program_headers": ["read-execute", "read-only", "read-write"],
      "needed_libraries": ["course-standard-runtime", "course-format-helper"],
      "build_id": "course-build-review-421",
      "review_note": "A dependency and build identifier changed; compare provenance before drawing a conclusion"
    }
  },
  "package_pair": {
    "trusted": {
      "name": "northstar-format-helper",
      "version": "4.2.0-course",
      "publisher": "Northstar Training Team",
      "dependencies": { "course-text-core": "1.0.0" },
      "lifecycle_scripts": [],
      "lock_integrity": "course-sha256-approved-420",
      "builder": "northstar-course-builder-a"
    },
    "altered": {
      "name": "northstar-format-helper",
      "version": "4.2.1-course",
      "publisher": "Northstar Training Team",
      "dependencies": { "course-text-core": "1.0.0", "course-color-table": "1.0.0" },
      "lifecycle_scripts": [],
      "lock_integrity": "course-sha256-review-421",
      "builder": "northstar-course-builder-b",
      "review_note": "Dependency and builder changed; the fixture contains no installable package"
    }
  },
  "review_only_script": {
    "language": "course-pseudocode",
    "source_lines": [
      "OPEN fixed course-input.txt for reading",
      "VALIDATE exactly two bounded integer records",
      "CREATE new course-summary.txt only when absent",
      "WRITE a sum and branch label",
      "CLOSE both files and EXIT"
    ],
    "inputs": ["fixed course-input.txt"],
    "outputs": ["new course-summary.txt"],
    "network": false,
    "child_processes": false,
    "privilege": "current non-privileged user",
    "cleanup": "learner deletes generated working output during teardown"
  },
  "questions": [
    "Which differences are direct observations?",
    "Which benign release or compiler changes could explain them?",
    "Which verified evidence would change the release decision?"
  ]
}