{
  "schema": "assay.receipt-family-matrix.v1",
  "updated_at": "2026-05-03",
  "families": [
    {
      "family": "external_eval_receipts",
      "first_surface": "promptfoo_assertion_component_result",
      "event_type": "assay.receipt.promptfoo.assertion_component.v1",
      "receipt_schema": "assay.receipt.promptfoo.assertion-component.v1",
      "receipt_schema_path": "receipt-schemas/receipts/promptfoo.assertion-component.v1.schema.json",
      "input_schema_path": "receipt-schemas/inputs/promptfoo-cli-jsonl-component-result.v1.schema.json",
      "source_system": "promptfoo",
      "source_surface": "cli-jsonl.gradingResult.componentResults",
      "trust_basis_claim": "external_eval_receipt_boundary_visible",
      "trust_basis_source": "external_evidence_receipt",
      "trust_basis_boundary": "supported-external-eval-receipt-events-only",
      "included_fields": [
        "schema",
        "source_system",
        "source_surface",
        "source_artifact_ref",
        "source_artifact_digest",
        "reducer_version",
        "imported_at",
        "assertion_type",
        "result.pass",
        "result.score",
        "result.reason"
      ],
      "excluded_fields": [
        "raw_prompt",
        "raw_output",
        "raw_expected_value",
        "vars",
        "full_jsonl_row",
        "provider_payload",
        "stats",
        "token_or_cost_data",
        "red_team_report",
        "run_level_truth"
      ],
      "does_not_claim": [
        "the Promptfoo eval run passed",
        "the model output was correct",
        "the raw Promptfoo payload is Assay truth",
        "the full Promptfoo run was imported"
      ],
      "plan": "../architecture/PLAN-P33-EXTERNAL-EVAL-RECEIPT-TRUST-BASIS-CLAIM-2026q2.md"
    },
    {
      "family": "external_decision_receipts",
      "first_surface": "openfeature_evaluation_details_boolean",
      "event_type": "assay.receipt.openfeature.evaluation_details.v1",
      "receipt_schema": "assay.receipt.openfeature.evaluation_details.v1",
      "receipt_schema_path": "receipt-schemas/receipts/openfeature.evaluation-details.v1.schema.json",
      "input_schema_path": "receipt-schemas/inputs/openfeature-evaluation-details-export.v1.schema.json",
      "source_system": "openfeature",
      "source_surface": "evaluation_details.boolean",
      "trust_basis_claim": "external_decision_receipt_boundary_visible",
      "trust_basis_source": "external_decision_receipt",
      "trust_basis_boundary": "supported-external-decision-receipt-events-only",
      "included_fields": [
        "schema",
        "source_system",
        "source_surface",
        "source_artifact_ref",
        "source_artifact_digest",
        "reducer_version",
        "imported_at",
        "decision.flag_key",
        "decision.value_type",
        "decision.value",
        "decision.variant",
        "decision.reason",
        "decision.error_code"
      ],
      "excluded_fields": [
        "error_message",
        "flag_metadata",
        "evaluation_context",
        "targeting_key",
        "provider_metadata",
        "provider_config",
        "targeting_rules",
        "user_identifiers",
        "application_state"
      ],
      "does_not_claim": [
        "the flag decision was correct",
        "the provider behaved correctly",
        "the targeting rules are correct",
        "the flag configuration is complete or true",
        "the application behavior controlled by the flag is safe"
      ],
      "plan": "../architecture/PLAN-P45B-DECISION-RECEIPT-TRUST-BASIS-CLAIM-2026q2.md"
    },
    {
      "family": "external_inventory_receipts",
      "first_surface": "cyclonedx_mlbom_model_component",
      "event_type": "assay.receipt.cyclonedx.mlbom_model_component.v1",
      "receipt_schema": "assay.receipt.cyclonedx.mlbom-model-component.v1",
      "receipt_schema_path": "receipt-schemas/receipts/cyclonedx.mlbom-model-component.v1.schema.json",
      "input_schema_path": "receipt-schemas/inputs/cyclonedx-mlbom-model-component-input.v1.schema.json",
      "source_system": "cyclonedx",
      "source_surface": "bom.components[type=machine-learning-model]",
      "trust_basis_claim": "external_inventory_receipt_boundary_visible",
      "trust_basis_source": "external_inventory_receipt",
      "trust_basis_boundary": "supported-external-inventory-receipt-events-only",
      "included_fields": [
        "schema",
        "source_system",
        "source_surface",
        "source_artifact_ref",
        "source_artifact_digest",
        "reducer_version",
        "imported_at",
        "model_component.bom_ref",
        "model_component.name",
        "model_component.version",
        "model_component.publisher",
        "model_component.purl",
        "model_component.dataset_refs",
        "model_component.model_card_refs"
      ],
      "excluded_fields": [
        "full_bom",
        "dependency_graph",
        "vulnerabilities",
        "licenses",
        "pedigree",
        "ancestors",
        "full_modelCard",
        "dataset_bodies",
        "performance_metrics",
        "fairness_or_ethics_sections",
        "compliance_truth"
      ],
      "does_not_claim": [
        "the BOM is complete",
        "the model is safe",
        "the model card is correct",
        "the dataset refs are approved or sufficient",
        "the CycloneDX artifact is Assay truth"
      ],
      "plan": "../architecture/PLAN-P45-INVENTORY-RECEIPT-TRUST-BASIS-CLAIM-2026q2.md"
    }
  ],
  "importer_only_receipts": [
    {
      "family": "score_receipts",
      "first_surface": "mastra_score_event",
      "event_type": "assay.receipt.mastra.score_event.v1",
      "receipt_schema": "assay.receipt.mastra.score_event.v1",
      "receipt_schema_path": "receipt-schemas/receipts/mastra.score-event.v1.schema.json",
      "input_schema_path": "receipt-schemas/inputs/mastra-score-event-export.v1.schema.json",
      "source_system": "mastra",
      "source_surface": "observability.score_event",
      "trust_basis_claim": null,
      "included_fields": [
        "schema",
        "source_system",
        "source_surface",
        "source_artifact_ref",
        "source_artifact_digest",
        "reducer_version",
        "imported_at",
        "score_event.score",
        "score_event.target_ref",
        "score_event.timestamp",
        "score_event.score_id_ref",
        "score_event.scorer_id",
        "score_event.scorer_name",
        "score_event.scorer_version",
        "score_event.score_source",
        "score_event.trace_id_ref",
        "score_event.span_id_ref",
        "score_event.score_trace_id_ref",
        "score_event.target_entity_type",
        "score_event.metadata_ref",
        "score_event.reason"
      ],
      "excluded_fields": [
        "raw_metadata",
        "raw_correlationContext",
        "trace_tree",
        "exportedSpan",
        "logs",
        "metrics",
        "feedback",
        "prompts",
        "request_response_bodies",
        "scorer_config",
        "dashboard_state"
      ],
      "does_not_claim": [
        "a Trust Basis score receipt claim is present",
        "the score is correct",
        "the scorer is reliable",
        "the Mastra runtime behaved correctly",
        "the trace or span anchor is complete",
        "the score should pass or fail a gate"
      ],
      "plan": "../architecture/PLAN-P14C-MASTRA-SCOREEVENT-RECEIPT-IMPORT-2026q2.md",
      "claim_readiness_plan": "../architecture/PLAN-P14D-MASTRA-SCORE-RECEIPT-TRUST-BASIS-READINESS-FREEZE-2026q2.md"
    },
    {
      "family": "case_result_receipts",
      "first_surface": "pydantic_reduced_case_result",
      "event_type": "assay.receipt.pydantic.case_result.v1",
      "receipt_schema": "assay.receipt.pydantic.case_result.v1",
      "receipt_schema_path": "receipt-schemas/receipts/pydantic.case-result.v1.schema.json",
      "input_schema_path": "receipt-schemas/inputs/pydantic-case-result-export.v1.schema.json",
      "source_system": "pydantic_evals",
      "source_surface": "evaluation_report.cases.case_result",
      "trust_basis_claim": null,
      "included_fields": [
        "schema",
        "source_system",
        "source_surface",
        "source_artifact_ref",
        "source_artifact_digest",
        "reducer_version",
        "imported_at",
        "case_result.case_name",
        "case_result.source_case_name",
        "case_result.source_ref",
        "case_result.results.kind",
        "case_result.results.evaluator_name",
        "case_result.results.passed",
        "case_result.results.score",
        "case_result.results.reason",
        "case_result.timestamp"
      ],
      "excluded_fields": [
        "raw_ReportCase",
        "full_EvaluationReport",
        "inputs",
        "expected_output",
        "output",
        "metadata",
        "experiment_metadata",
        "trace_id",
        "span_id",
        "Logfire_payload",
        "prompts",
        "completions",
        "analyses",
        "failures"
      ],
      "does_not_claim": [
        "a Trust Basis Pydantic case-result claim is present",
        "the evaluator judgment is correct",
        "the model output was correct",
        "the full ReportCase was imported",
        "the full EvaluationReport was imported",
        "Logfire or trace semantics are Assay truth"
      ],
      "plan": "../architecture/PLAN-P9D-PYDANTIC-CASE-RESULT-RECEIPT-IMPORT-2026q2.md",
      "claim_readiness_plan": "../architecture/PLAN-P9C-PYDANTIC-REDUCED-CASE-RESULT-RECEIPT-READINESS-2026q2.md"
    }
  ]
}