{
  "schema_version": "vignette.avatar-decode-audit.v1",
  "generated_at": "2026-08-29T21:18:49+09:00",
  "status": "deployment_blocked",
  "method": {
    "runtime": "Python 3.11",
    "decoder": "Pillow 12.2.0 Image.verify",
    "extension_contract": [
      "png",
      "jpg",
      "jpeg",
      "webp"
    ],
    "privacy": {
      "raw_filenames_recorded": false,
      "raw_paths_recorded": false,
      "user_ids_recorded": false,
      "emails_recorded": false,
      "avatar_urls_recorded": false
    }
  },
  "source_union": {
    "source_root_count": 3,
    "object_count": 93,
    "inventory_sha256": "9d703126f78d4fc8330408835d76a7d680276240dc578d6fc9ca420c2f25e6aa",
    "total_size_bytes": 52973,
    "maximum_object_size_bytes": 28208,
    "same_name_content_conflicts": 0,
    "missing_database_references": 0,
    "decode_valid_count": 3,
    "decode_invalid_count": 90,
    "extension_mismatch_count": 0,
    "valid_formats": {
      "JPEG": 2,
      "PNG": 1
    },
    "valid_dimension_counts": {
      "1x1": 1,
      "225x225": 1,
      "512x512": 1
    }
  },
  "connected_database": {
    "database_target_sha256": "81fe4a2844b7340f21396931fa18580e24358f857a08cc60540ddf8a4f8789b5",
    "reference_count": 8,
    "unique_object_count": 8,
    "reference_set_sha256": "70926cf36ceb2375dd6c471bc59a38138460d8e4895ad1f2bddbcf1a49210d2b",
    "active_private_audio_count": 0,
    "found_object_count": 8,
    "missing_object_count": 0,
    "decode_valid_count": 2,
    "decode_invalid_count": 6,
    "valid_formats": {
      "JPEG": 2
    },
    "valid_dimension_counts": {
      "225x225": 1,
      "512x512": 1
    },
    "invalid_signature_counts": {
      "PNG": 6
    },
    "invalid_size_counts": {
      "70": 6
    },
    "invalid_unique_content_count": 1,
    "all_invalid_objects_have_identical_content": true
  },
  "release_gate": {
    "allowed": false,
    "reason": "Six of eight database-referenced avatar objects have a PNG signature but fail full image decoding. Preserve the bytes and database references until the owner chooses a recovery policy; do not claim the broken-image incident is resolved or deploy the current storage candidate."
  }
}