{
  "artifact_id": "sample-2",
  "verdict": "pass",
  "reason": "All policy conditions satisfied.",
  "policy_set": "softinel-baseline-2026-07",
  "conditions": [
    {
      "id": "no-critical-findings",
      "title": "No critical findings",
      "status": "satisfied",
      "detail": "0 critical findings."
    },
    {
      "id": "no-known-cve-in-direct-deps",
      "title": "No known CVEs in direct dependencies",
      "status": "satisfied",
      "detail": "Direct dependencies checked against OSV."
    },
    {
      "id": "no-eval-on-untrusted-input",
      "title": "No `eval` on untrusted input",
      "status": "satisfied",
      "detail": "SEC-EVAL-001 gate."
    },
    {
      "id": "high-severity-cap",
      "title": "High-severity findings ≤ 2",
      "status": "satisfied",
      "detail": "0 high-severity findings (cap 2)."
    },
    {
      "id": "architecture-fanout",
      "title": "No architectural fan-out violations",
      "status": "satisfied",
      "detail": "ARCH-FANOUT-001 gate."
    }
  ],
  "severity_spread": {
    "critical": 0,
    "high": 0,
    "medium": 0,
    "low": 2,
    "info": 2
  },
  "signed_at": "2026-07-24T14:01:16Z"
}