{"fix":"FAILURE MODE: Logic error – the code fails to detect revoked evidence IDs in authority‑bearing references (signing_authority_refs).\n\nINTENT DETECTED: The original code aims to raise a ValueError when any revoked evidence ID appears anywhere in the document’s references, including authority‑bearing signing authority references.\n\nFIXED CODE:\nrevoked_refs = set(document.get(\"segments\", {}).get(\"trust\", {}).get(\"revocations\", []))\nif revoked_refs:\n    def referenced_evidence(value):\n        if isinstance(value, dict):\n            for key, item in value.items():\n                if key == \"source_ref\" and item in revoked_refs:\n                    yield item\n                elif key == \"evidence_refs\" and isinstance(item, list):\n                    yield from (ref for ref in item if ref in revoked_refs)\n                else:\n                    yield from referenced_evidence(item)\n        elif isinstance(value, list):\n            for item in value:\n                yield from referenced_evidence(item)\n\n    blocked = set(referenced_evidence(document.get(\"segments\", {})))\n    # also check authority‑bearing signing authority references\n    signing_refs = document.get(\"governance\", {}).get(\"signing_authority_refs\", [])\n    blocked.update(ref for ref in signing_refs if ref in revoked_refs)\n\n    if blocked:\n        raise ValueError(\"AgentDNA references revoked evidence: \" + \", \".join(sorted(blocked)))","text":"FAILURE MODE: Logic error – the code fails to detect revoked evidence IDs in authority‑bearing references (signing_authority_refs).\n\nINTENT DETECTED: The original code aims to raise a ValueError when any revoked evidence ID appears anywhere in the document’s references, including authority‑bearing signing authority references.\n\nFIXED CODE:\nrevoked_refs = set(document.get(\"segments\", {}).get(\"trust\", {}).get(\"revocations\", []))\nif revoked_refs:\n    def referenced_evidence(value):\n        if isinstance(value, dict):\n            for key, item in value.items():\n                if key == \"source_ref\" and item in revoked_refs:\n                    yield item\n                elif key == \"evidence_refs\" and isinstance(item, list):\n                    yield from (ref for ref in item if ref in revoked_refs)\n                else:\n                    yield from referenced_evidence(item)\n        elif isinstance(value, list):\n            for item in value:\n                yield from referenced_evidence(item)\n\n    blocked = set(referenced_evidence(document.get(\"segments\", {})))\n    # also check authority‑bearing signing authority references\n    signing_refs = document.get(\"governance\", {}).get(\"signing_authority_refs\", [])\n    blocked.update(ref for ref in signing_refs if ref in revoked_refs)\n\n    if blocked:\n        raise ValueError(\"AgentDNA references revoked evidence: \" + \", \".join(sorted(blocked)))"}