K07 · evidence-bundled critical-infrastructure assurance

Facility Evidence-Bundle Generator

Direct answer

The K07 generator converts authorized local specifications into a checksummed bundle and refuses to treat a generic pattern, unsafe path, secret field, unsupported state, or digest mismatch as valid facility evidence.

Authority and evidence boundary. K07 publishes knowledge architecture, bounded reference records, procurement structures, local validation tools, signed synthetic fixtures, and point-in-time source review. It does not certify a facility, award a contract, authorize an operation, prove truth, establish deployment, or claim current operation.

Offline tool contract

The included tools/facility_bundle.py reads caller-supplied local JSON only. It performs no network retrieval, facility discovery, credential access, topology discovery, or control action.

python tools/facility_bundle.py generate --spec fixtures/facility-bundles/valid/spec.json --output bundle.json
python tools/facility_bundle.py validate --bundle bundle.json --output validation.json

Reference validation result

PASSfixture status
1site facts
1artifacts
1claims

Inspect the validation record.

Negative controls

The tool rejects generic facility references, unsafe paths, prohibited coordinate or secret fields, invalid claim states, duplicate identifiers, missing evidence for satisfied claims, and digest mismatch.