{
  "schema_version": 1,
  "sdk_sha256": "3ad1b78e87ec2ab0e96f5778024b25df4e2d37a1771875b71cfae5e3636d4095",
  "classification": "controlled_loopback_fixture_actual_sdk",
  "certified_live_product": false,
  "truth_boundary": "Actual checked-in embed SDK in real Chromium with controlled HTTP fixture CSP. Respondent UI and HTTP server are synthetic; no authenticated product, deployed header, or backend domain validation certified.",
  "checks": [
    {
      "name": "Permitted fixture origin loads through frame-ancestors",
      "status": "passed"
    },
    {
      "name": "Attribution URL, accessible title and visible fixture branding",
      "status": "passed"
    },
    {
      "name": "Same-origin sibling cannot spoof resize",
      "status": "passed"
    },
    {
      "name": "Wrong origin, nonfinite and oversized heights are rejected; valid source resizes",
      "status": "passed"
    },
    {
      "name": "Responsive width 1440 and keyboard operation",
      "status": "passed"
    },
    {
      "name": "Responsive width 390 and keyboard operation",
      "status": "passed"
    },
    {
      "name": "Denied fixture origin blocked by actual browser CSP",
      "status": "passed"
    }
  ],
  "status": "passed"
}