{
  "schema_version": 1,
  "source_archive_sha256": "f0ca2a34ef5e272266a0ef0ac709affd82bf75c8a147b31d5d460eac4b6322dc",
  "provenance_limit": "Original UUID filenames recovered from the complete chat archive by exact SHA-256 identity; received curated names retained as published filenames. All source archive members preserved outside the public repository.",
  "inspection": {
    "archive_png_members": 82,
    "unique_original_pngs": 72,
    "inspected_archive_members": 82,
    "published_unique_pngs": 19,
    "unpublished_unique_pngs": 53,
    "duplicate_curated_members": 10,
    "redacted": 0
  },
  "files": [
    {
      "evidence_id": "P14-01",
      "category": "F",
      "title": "LINUX01 Active Directory login",
      "technical_claim": "Ubuntu 26.04 LTS console shows login with the domain account and successful shell access.",
      "claim_boundary": "Authenticate to an Ubuntu host with an Active Directory account.",
      "original_filename": "dcf9e5c2-a14a-4914-8694-8473067dd5eb.png",
      "published_filename": "P14-01-LINUX01-Active-Directory-Login-Success.png",
      "source_archive": "Project-14-All-Chat-Screenshots.zip",
      "source_member": "Original-Chat-Screenshots/dcf9e5c2-a14a-4914-8694-8473067dd5eb.png",
      "sha256": "abc898ca399c2239b2f15e88bc61e0ea04b7d192726507d3ba80e22ad2b3a86d",
      "size_bytes": 109763,
      "width": 476,
      "height": 627,
      "modified": false,
      "redacted": false,
      "url": "https://jeremyfontenot.online/projects/grafana-entra-sso/evidence/P14-01-LINUX01-Active-Directory-Login-Success.png"
    },
    {
      "evidence_id": "P14-02",
      "category": "F",
      "title": "Active Directory identity and groups",
      "technical_claim": "The domain account resolves with id output and Active Directory group memberships on Linux.",
      "claim_boundary": "Verify Linux user identity and Active Directory group resolution.",
      "original_filename": "c50ae6b1-b109-462d-a822-004bf08136fd.png",
      "published_filename": "P14-02-LINUX01-AD-Identity-Group-Validation.png",
      "source_archive": "Project-14-All-Chat-Screenshots.zip",
      "source_member": "Original-Chat-Screenshots/c50ae6b1-b109-462d-a822-004bf08136fd.png",
      "sha256": "ea1750395b65b8066d6f4ccece3b410b1bc53b19e56e208ce3885d0285a4e693",
      "size_bytes": 136207,
      "width": 1003,
      "height": 627,
      "modified": false,
      "redacted": false,
      "url": "https://jeremyfontenot.online/projects/grafana-entra-sso/evidence/P14-02-LINUX01-AD-Identity-Group-Validation.png"
    },
    {
      "evidence_id": "P14-03",
      "category": "F",
      "title": "Domain account SSH session",
      "technical_claim": "LINUX01 SSH shell shows the domain-account prompt and private VLAN address 10.10.30.20.",
      "claim_boundary": "Administer a private Linux host through a domain-account SSH session.",
      "original_filename": "1a9fd905-a686-4763-987b-0e012fc9d7ee.png",
      "published_filename": "P14-03-LINUX01-Domain-SSH-Session.png",
      "source_archive": "Project-14-All-Chat-Screenshots.zip",
      "source_member": "Original-Chat-Screenshots/1a9fd905-a686-4763-987b-0e012fc9d7ee.png",
      "sha256": "1e29e4dcee248ca0ed72660e4e7b956fa5ab5bb44b2f5c2d3df7ad6473d06f37",
      "size_bytes": 258107,
      "width": 912,
      "height": 623,
      "modified": false,
      "redacted": false,
      "url": "https://jeremyfontenot.online/projects/grafana-entra-sso/evidence/P14-03-LINUX01-Domain-SSH-Session.png"
    },
    {
      "evidence_id": "P14-04",
      "category": "A",
      "title": "Grafana systemd service running",
      "technical_claim": "systemctl shows grafana-server enabled and active (running) on LINUX01.",
      "claim_boundary": "Enable a systemd application service and verify its running state.",
      "original_filename": "4d785818-f508-441c-a34a-388ed181c26d.png",
      "published_filename": "P14-04-Grafana-OSS-Systemd-Service-Running.png",
      "source_archive": "Project-14-All-Chat-Screenshots.zip",
      "source_member": "Original-Chat-Screenshots/4d785818-f508-441c-a34a-388ed181c26d.png",
      "sha256": "843977b0631cd9b44a83784e13e9849201547af8fd7a29908a8e76151d507d60",
      "size_bytes": 241946,
      "width": 1106,
      "height": 407,
      "modified": false,
      "redacted": false,
      "url": "https://jeremyfontenot.online/projects/grafana-entra-sso/evidence/P14-04-Grafana-OSS-Systemd-Service-Running.png"
    },
    {
      "evidence_id": "P14-06",
      "category": "E",
      "title": "Let’s Encrypt certificate issued",
      "technical_claim": "Certbot reports successfully received certificate, certificate/key paths, and expiration 2027-01-29.",
      "claim_boundary": "Issue a Let’s Encrypt certificate and identify its deployment paths and expiry.",
      "original_filename": "9792cd55-fe57-4b39-af79-f703e1d9abf3.png",
      "published_filename": "P14-06-LetsEncrypt-Certificate-Issued.png",
      "source_archive": "Project-14-All-Chat-Screenshots.zip",
      "source_member": "Original-Chat-Screenshots/9792cd55-fe57-4b39-af79-f703e1d9abf3.png",
      "sha256": "b141b670ee460e77be62b9e11526c132890d5b6724a0df121a1c914ead46655c",
      "size_bytes": 402791,
      "width": 1103,
      "height": 613,
      "modified": false,
      "redacted": false,
      "url": "https://jeremyfontenot.online/projects/grafana-entra-sso/evidence/P14-06-LetsEncrypt-Certificate-Issued.png"
    },
    {
      "evidence_id": "P14-07",
      "category": "A",
      "title": "Grafana HTTPS login page",
      "technical_claim": "Grafana login is displayed at the configured HTTPS hostname and port without a visible browser certificate warning.",
      "claim_boundary": "Access the self-hosted Grafana application over HTTPS.",
      "original_filename": "a3d61af2-bf5e-4d42-b99d-d54f30404ab4.png",
      "published_filename": "P14-07-Grafana-HTTPS-TLS-Validated.png",
      "source_archive": "Project-14-All-Chat-Screenshots.zip",
      "source_member": "Original-Chat-Screenshots/a3d61af2-bf5e-4d42-b99d-d54f30404ab4.png",
      "sha256": "661eade20e5568e3badec48cb60fa0fce7d754f16a5a70f9147044fd83baf6cd",
      "size_bytes": 973804,
      "width": 1901,
      "height": 985,
      "modified": false,
      "redacted": false,
      "url": "https://jeremyfontenot.online/projects/grafana-entra-sso/evidence/P14-07-Grafana-HTTPS-TLS-Validated.png"
    },
    {
      "evidence_id": "P14-08",
      "category": "B",
      "title": "Single-tenant Entra app registration",
      "technical_claim": "App overview shows Grafana-OSS-SSO-Lab, application/client ID, tenant ID, single-organization account type, and one Web redirect URI.",
      "claim_boundary": "Register a single-tenant relying-party application in Microsoft Entra.",
      "original_filename": "d79e2cc9-0dbe-4554-b232-44ed68a2cb7c.png",
      "published_filename": "P14-08-Entra-Grafana-App-Registration.png",
      "source_archive": "Project-14-All-Chat-Screenshots.zip",
      "source_member": "Original-Chat-Screenshots/d79e2cc9-0dbe-4554-b232-44ed68a2cb7c.png",
      "sha256": "4b4cdaa69a3e9384270b225b7709d4fb7fbde9ee3b483803c9ab3c4d1b6d958b",
      "size_bytes": 151952,
      "width": 1636,
      "height": 875,
      "modified": false,
      "redacted": false,
      "url": "https://jeremyfontenot.online/projects/grafana-entra-sso/evidence/P14-08-Entra-Grafana-App-Registration.png"
    },
    {
      "evidence_id": "P14-09",
      "category": "A",
      "title": "Microsoft Entra sign-in option",
      "technical_claim": "Grafana login displays Sign in with Microsoft Entra ID at the HTTPS application address.",
      "claim_boundary": "Present Microsoft Entra authentication on a self-hosted application login page.",
      "original_filename": "99ac0cba-fc15-4f8c-885e-c5667f56397c.png",
      "published_filename": "P14-09-Grafana-Microsoft-Entra-SSO-Login-Option.png",
      "source_archive": "Project-14-All-Chat-Screenshots.zip",
      "source_member": "Original-Chat-Screenshots/99ac0cba-fc15-4f8c-885e-c5667f56397c.png",
      "sha256": "2ea2b7796175988ebcdf94f241106333d576635026ce74409b475ee6e2f67b17",
      "size_bytes": 968875,
      "width": 1897,
      "height": 987,
      "modified": false,
      "redacted": false,
      "url": "https://jeremyfontenot.online/projects/grafana-entra-sso/evidence/P14-09-Grafana-Microsoft-Entra-SSO-Login-Option.png"
    },
    {
      "evidence_id": "P14-10",
      "category": "A",
      "title": "Authenticated Grafana dashboard",
      "technical_claim": "Grafana home is displayed in an authenticated application view.",
      "claim_boundary": "Verify the authenticated application view alongside the AzureAD profile evidence.",
      "original_filename": "39143b94-1595-46ff-9f9f-0bc63dc6c92b.png",
      "published_filename": "P14-10-Grafana-Microsoft-Entra-SSO-Authentication-Success.png",
      "source_archive": "Project-14-All-Chat-Screenshots.zip",
      "source_member": "Original-Chat-Screenshots/39143b94-1595-46ff-9f9f-0bc63dc6c92b.png",
      "sha256": "8de3e915029e371f70b1a1d8927b64be0cc5541d91478687efa0791f8d876648",
      "size_bytes": 318972,
      "width": 1910,
      "height": 982,
      "modified": false,
      "redacted": false,
      "url": "https://jeremyfontenot.online/projects/grafana-entra-sso/evidence/P14-10-Grafana-Microsoft-Entra-SSO-Authentication-Success.png"
    },
    {
      "evidence_id": "P14-11",
      "category": "B",
      "title": "Signed-in user identity",
      "technical_claim": "The Grafana account menu displays Jeremy Fontenot (Admin) and the expected Entra UPN.",
      "claim_boundary": "Verify the signed-in application account against the expected Entra identity.",
      "original_filename": "3f4a05c7-249c-4cfb-9770-919c9518e265.png",
      "published_filename": "P14-11-Grafana-Entra-User-Identity-Verified.png",
      "source_archive": "Project-14-All-Chat-Screenshots.zip",
      "source_member": "Original-Chat-Screenshots/3f4a05c7-249c-4cfb-9770-919c9518e265.png",
      "sha256": "40973f7ce9593fc2a9a7abb97904bd3142a4efe3710aa78b6e791357eadbd11a",
      "size_bytes": 326391,
      "width": 1905,
      "height": 982,
      "modified": false,
      "redacted": false,
      "url": "https://jeremyfontenot.online/projects/grafana-entra-sso/evidence/P14-11-Grafana-Entra-User-Identity-Verified.png"
    },
    {
      "evidence_id": "P14-12",
      "category": "C",
      "title": "AzureAD profile and Viewer role",
      "technical_claim": "Profile fields are labeled Synced via AzureAD; Main Org. role is Viewer and the session provider is AzureAD.",
      "claim_boundary": "Verify AzureAD-synchronized attributes, session provider and least-privilege Viewer access.",
      "original_filename": "6e8ebd31-0c17-43b2-ae4a-c13f2e76cbad.png",
      "published_filename": "P14-12-Grafana-Entra-Role-Assignment-Verified.png",
      "source_archive": "Project-14-All-Chat-Screenshots.zip",
      "source_member": "Original-Chat-Screenshots/6e8ebd31-0c17-43b2-ae4a-c13f2e76cbad.png",
      "sha256": "8a4ede848d81f5ba563bad4b93bf4dba86e551718e5f47ba56f3a1b09014a8b6",
      "size_bytes": 133942,
      "width": 1912,
      "height": 1227,
      "modified": false,
      "redacted": false,
      "url": "https://jeremyfontenot.online/projects/grafana-entra-sso/evidence/P14-12-Grafana-Entra-Role-Assignment-Verified.png"
    },
    {
      "evidence_id": "P14-13",
      "category": "C",
      "title": "Explicit enterprise application assignment",
      "technical_claim": "Grafana-OSS-SSO-Lab lists Jeremy Fontenot (Admin) as User with Default Access.",
      "claim_boundary": "Assign an authorized identity to an Entra enterprise application.",
      "original_filename": "59d59e04-ad8d-4aad-80b4-636156572076.png",
      "published_filename": "P14-13-Entra-Grafana-Authorized-User-Assignment.png",
      "source_archive": "Project-14-All-Chat-Screenshots.zip",
      "source_member": "Original-Chat-Screenshots/59d59e04-ad8d-4aad-80b4-636156572076.png",
      "sha256": "dd187d0779f4fa491af85de971f0ac4a7be8b3b31ba020dad40cb31abe58a59b",
      "size_bytes": 158011,
      "width": 1912,
      "height": 914,
      "modified": false,
      "redacted": false,
      "url": "https://jeremyfontenot.online/projects/grafana-entra-sso/evidence/P14-13-Entra-Grafana-Authorized-User-Assignment.png"
    },
    {
      "evidence_id": "P14-14",
      "category": "C",
      "title": "Assignment required enabled",
      "technical_claim": "Enterprise application properties show Assignment required = Yes, visibility enabled, and a successful update notification.",
      "claim_boundary": "Configure an enterprise application to require explicit user assignment.",
      "original_filename": "34b95f54-aab8-4653-84aa-6df6a38a913a.png",
      "published_filename": "P14-14-Entra-Grafana-Assignment-Required-Enabled.png",
      "source_archive": "Project-14-All-Chat-Screenshots.zip",
      "source_member": "Original-Chat-Screenshots/34b95f54-aab8-4653-84aa-6df6a38a913a.png",
      "sha256": "9e4236c651f111cf6ea86683429640c18f070cccac6941e4ad7057143890b42b",
      "size_bytes": 185675,
      "width": 1912,
      "height": 914,
      "modified": false,
      "redacted": false,
      "url": "https://jeremyfontenot.online/projects/grafana-entra-sso/evidence/P14-14-Entra-Grafana-Assignment-Required-Enabled.png"
    },
    {
      "evidence_id": "P14-15",
      "category": "D",
      "title": "Application branding and launch URL",
      "technical_claim": "Branding and properties show the Grafana logo and configured private HTTPS home-page URL.",
      "claim_boundary": "Configure application branding and the HTTPS launch address for My Apps.",
      "original_filename": "ca095c5f-d544-49b7-b426-a11cad9b97ed.png",
      "published_filename": "P14-15-Entra-Grafana-Branding-Launch-URL.png",
      "source_archive": "Project-14-All-Chat-Screenshots.zip",
      "source_member": "Original-Chat-Screenshots/ca095c5f-d544-49b7-b426-a11cad9b97ed.png",
      "sha256": "17649794f8719923cb67e5bf60aee0eee3355be21b577729e10f78590fd0b8a2",
      "size_bytes": 170788,
      "width": 1912,
      "height": 914,
      "modified": false,
      "redacted": false,
      "url": "https://jeremyfontenot.online/projects/grafana-entra-sso/evidence/P14-15-Entra-Grafana-Branding-Launch-URL.png"
    },
    {
      "evidence_id": "P14-16",
      "category": "E",
      "title": "Cloudflare DNS permission scope",
      "technical_claim": "Cloudflare token configuration limits permission to Zone DNS Edit for the specific jeremyfontenot.online zone.",
      "claim_boundary": "Scope Cloudflare DNS permissions to the specific certificate-validation zone.",
      "original_filename": "eee858a0-6187-4c67-86a1-16924bd77d86.png",
      "published_filename": "P14-16-Cloudflare-DNS01-Scoped-Permissions.png",
      "source_archive": "Project-14-All-Chat-Screenshots.zip",
      "source_member": "Original-Chat-Screenshots/eee858a0-6187-4c67-86a1-16924bd77d86.png",
      "sha256": "c65343edd9de175799fea3133ed14853a63756467c17fcb01002f28948a4f569",
      "size_bytes": 51680,
      "width": 1292,
      "height": 770,
      "modified": false,
      "redacted": false,
      "url": "https://jeremyfontenot.online/projects/grafana-entra-sso/evidence/P14-16-Cloudflare-DNS01-Scoped-Permissions.png"
    },
    {
      "evidence_id": "P14-17",
      "category": "D",
      "title": "Microsoft My Apps tile",
      "technical_claim": "The assigned user’s Apps dashboard contains the Grafana-OSS-SSO-Lab tile.",
      "claim_boundary": "Make an assigned enterprise application discoverable through Microsoft My Apps.",
      "original_filename": "c4206ae1-60a0-4429-ae1f-68480d5290c5.png",
      "published_filename": "P14-17-Microsoft-MyApps-Grafana-SSO-Tile.png",
      "source_archive": "Project-14-All-Chat-Screenshots.zip",
      "source_member": "Original-Chat-Screenshots/c4206ae1-60a0-4429-ae1f-68480d5290c5.png",
      "sha256": "cba34ef8b2e0261bfdd1e8647113e6b52b86fe2132e264400aef3e8125244847",
      "size_bytes": 237937,
      "width": 1912,
      "height": 1301,
      "modified": false,
      "redacted": false,
      "url": "https://jeremyfontenot.online/projects/grafana-entra-sso/evidence/P14-17-Microsoft-MyApps-Grafana-SSO-Tile.png"
    },
    {
      "evidence_id": "P14-18",
      "category": "D",
      "title": "Grafana after My Apps launch",
      "technical_claim": "Grafana home is displayed in the capture supplied after the My Apps launch.",
      "claim_boundary": "Validate application access following the documented My Apps launch workflow.",
      "original_filename": "62fd87a0-a80d-45f7-95a6-6f49028140e4.png",
      "published_filename": "P14-18-Microsoft-MyApps-Grafana-SSO-Launch-Success.png",
      "source_archive": "Project-14-All-Chat-Screenshots.zip",
      "source_member": "Original-Chat-Screenshots/62fd87a0-a80d-45f7-95a6-6f49028140e4.png",
      "sha256": "c3dd1c9678a48c77de946ec299f681b023536ed068e09308c064e00bf15a30f3",
      "size_bytes": 410566,
      "width": 1912,
      "height": 914,
      "modified": false,
      "redacted": false,
      "url": "https://jeremyfontenot.online/projects/grafana-entra-sso/evidence/P14-18-Microsoft-MyApps-Grafana-SSO-Launch-Success.png"
    },
    {
      "evidence_id": "P14-19",
      "category": "D",
      "title": "AzureAD session after launch",
      "technical_claim": "Grafana profile shows AzureAD-synchronized identity, Viewer role, and two AzureAD session entries.",
      "claim_boundary": "Verify AzureAD session identity and Viewer authorization following application launch.",
      "original_filename": "2211a62a-dfe6-4648-906d-f0e6543c3bb9.png",
      "published_filename": "P14-19-MyApps-Grafana-AzureAD-Session-Verified.png",
      "source_archive": "Project-14-All-Chat-Screenshots.zip",
      "source_member": "Original-Chat-Screenshots/2211a62a-dfe6-4648-906d-f0e6543c3bb9.png",
      "sha256": "d6ed4c1443ed48d421e5625c5a2e443dd111a5f7c04c36fec57bbdf2bd4474dd",
      "size_bytes": 144593,
      "width": 1899,
      "height": 1271,
      "modified": false,
      "redacted": false,
      "url": "https://jeremyfontenot.online/projects/grafana-entra-sso/evidence/P14-19-MyApps-Grafana-AzureAD-Session-Verified.png"
    },
    {
      "evidence_id": "P14-D05",
      "category": "B",
      "title": "OAuth consent prompt",
      "technical_claim": "Microsoft requests basic profile and continued access for Grafana-OSS-SSO-Lab.",
      "claim_boundary": "Review application identity and requested permissions during OAuth consent.",
      "original_filename": "2f442995-f8e4-4c81-894f-201a12afdc20.png",
      "published_filename": "P14-D05-Entra-OAuth-Consent-Prompt.png",
      "source_archive": "Project-14-All-Chat-Screenshots.zip",
      "source_member": "Original-Chat-Screenshots/2f442995-f8e4-4c81-894f-201a12afdc20.png",
      "sha256": "006c10a4550b4be3913be0d30cccb7512f1b77a717484577560c8289ab3e77f9",
      "size_bytes": 141957,
      "width": 607,
      "height": 672,
      "modified": false,
      "redacted": false,
      "url": "https://jeremyfontenot.online/projects/grafana-entra-sso/evidence/P14-D05-Entra-OAuth-Consent-Prompt.png"
    }
  ],
  "original_archive_sha256": "2c89b3ab8e3944120c503d78e2befca6e8b160bdfc6bda7c5d5ad0e5da197f1d"
}