区分普通adapter和Decision证书流程，不只看下载成功
本页展示随包原生输入和验收参考。目标产品运行状态：未运行。表格与图片不代表产品已经生成的结果。
input.csv / practice-data.json
本课实际输入字段
| adapter | scheme | identity | root | requiredFiles |
|---|---|---|---|---|
| requirement-check/granite-4.1-3b/lora | sigstore | Granite-sign@ibm.com | ||
| decision/granite-4.1-8b/lora | certificate | DigiCert Trusted Root G4 | ||
| ["adapter_config.json", "adapter_model.safetensors", "io.yaml", "model.sig"] |
普通库走身份验证
reference.csv：作者验收映射，不是目标API回包
| ordinary | decision | tamperTest |
|---|---|---|
| verify sigstore with official identity/provider | ||
| verify certificate and expected fingerprints | ||
| must fail on isolated changed copy |
应当保留的约束
| ordinary | decision | tamperTest |
|---|---|---|
| verify sigstore with official identity/provider | ||
| verify certificate and expected fingerprints | ||
| must fail on isolated changed copy |
故意构造的错误样例
| scheme | adapter | error | evidence | claim | file | changed |
|---|---|---|---|---|---|---|
| sigstore | decision | wrong verification process | ||||
| no verification performed | file downloaded | signature verified | ||||
| content mutated | verified original | io.yaml | True |
先保存真实产品输出，再逐项对照。actualOutput / actualResult 在未执行时保持 not_run，不能把这里的期望值复制成已测结果。