{
  "note": "Real deployed runtime bytecode extracted from this repo's compiled Hardhat artifacts (aerenew/contracts/artifacts/contracts/pqc/*). Used by the scanner's offline path and by selftest.js. Extracted 2026-07-19.",
  "fixtures": {
    "AerePQCAttestation": {
      "source": "contracts/artifacts/contracts/pqc/AerePQCAttestation.sol/AerePQCAttestation.json",
      "expectedReadiness": "GREEN",
      "why": "Directly staticcalls the live native PQC precompiles 0x0AE1..0x0AE4."
    },
    "AerePQCTxAccount": {
      "source": "contracts/artifacts/contracts/pqc/AerePQCTxAccount.sol/AerePQCTxAccount.json",
      "expectedReadiness": "GREEN",
      "why": "ERC-4337 sender auth via a direct staticcall to 0x0AE1..0x0AE4."
    },
    "AereHybridAuth": {
      "source": "contracts/artifacts/contracts/pqc/AereHybridAuth.sol/AereHybridAuth.json",
      "expectedReadiness": "RED",
      "why": "Semantically ECDSA + Falcon hybrid, BUT verifies Falcon via the SOLIDITY AereFalcon512Verifier contract (0x4E8e...D8fFC), not the native precompile band, so bytecode scanning cannot see the PQC leg. This is the scanner's documented scope limit, kept as a fixture so it cannot silently regress."
    },
    "AereFalcon512Verifier": {
      "source": "contracts/artifacts/contracts/pqc/AereFalcon512Verifier.sol/AereFalcon512Verifier.json",
      "expectedReadiness": "RED",
      "why": "The heavy in-EVM Falcon verifier. Its 0x0100 PUSH2 constants are lattice-math literals (the number 256), not P-256 precompile calls, so the call-proximity gate correctly does not flag P-256."
    }
  }
}