{
  "caseId": "phishing",
  "dateAsiaShanghai": "2026-10-27",
  "assessmentType": "AI evaluator qualitative observations plus separately linked executable checks; not independent human blind scoring",
  "status": "technical-pass-content-mostly-correct-with-wording-note",
  "observations": {
    "status": "technical-pass-content-mostly-correct-with-wording-note",
    "videoSha256": "bd80f64d6a47aed64fae0601f52a743acadbf240542dee57d589d3d1d957c0f2",
    "technicalEvidence": "qa/phishing/media-checks.json",
    "observations": [
      "81.966s,1920x1080,30fps,2459 frames; full video/audio decode and17 SRT cue timing checks pass",
      "SPF/DKIM example.org pass with From example.com not aligned correctly produces DMARC fail",
      "The film preserves the limits: authentication pass is not a content safety guarantee; fail is not proof of fraud",
      "Eight scene sections, animated flows and a complete ending are visible"
    ],
    "notes": [
      "The From line is called only a display label; distinguish display name, declared address and authenticated identity more precisely",
      "The Gmail menu glyph appears as a box in the checked version",
      "Dense header details and phonetic spelling of acronyms in captions could be edited for easier nontechnical reading"
    ],
    "verificationLimits": [
      "Audio track and level were checked technically; no independent human listening study",
      "Earlier source YouTube style context was unavailable"
    ],
    "previousCheckedVideoSha256": "28335811de6cbec35786bb0d94e02e6915c2d6f181304fed32a460e28835893e",
    "finalVersionEvidence": "qa/phishing-final-audit.json"
  },
  "technicalEvidence": {
    "caseId": "phishing",
    "checkedAt": "2026-10-26T17:12:40.436227+00:00",
    "sourceVideo": "cases/phishing/video.mp4",
    "videoSha256": "bd80f64d6a47aed64fae0601f52a743acadbf240542dee57d589d3d1d957c0f2",
    "immutableSnapshot": "qa/phishing/video-bd80f64d6a47.mp4",
    "durationSeconds": 81.966016,
    "width": 1920,
    "height": 1080,
    "fps": 30.0,
    "videoFrames": "2459",
    "audioStreams": [
      {
        "codec_name": "aac",
        "sample_rate": "48000",
        "channels": 2,
        "duration": "81.966000"
      }
    ],
    "srtCueCount": 17,
    "lastSrtEnd": 80.344,
    "technicalChecks": {
      "duration": true,
      "dimensions": true,
      "fps": true,
      "audioTrack": true,
      "fullDecode": true,
      "srtValidTimes": true
    },
    "allTechnicalChecksPass": true,
    "frames": [
      {
        "timeSeconds": 0.2,
        "path": "qa/phishing/frames/00-0.200s.jpg",
        "sha256": "5b29d8debc9a087f2df3362bcc0d66edde428860569d0cd70977bd2b079ea237"
      },
      {
        "timeSeconds": 9.107,
        "path": "qa/phishing/frames/01-9.107s.jpg",
        "sha256": "f7f0d7bc869def4375478ed9fe0070dad46048a971b990a0fc4dd26431169245"
      },
      {
        "timeSeconds": 18.215,
        "path": "qa/phishing/frames/02-18.215s.jpg",
        "sha256": "2fa8a8715cd4d8df34b37af25fac6aa630e3e9b1ed28b0eebf461c2f944760f8"
      },
      {
        "timeSeconds": 27.322,
        "path": "qa/phishing/frames/03-27.322s.jpg",
        "sha256": "ee178d12e45d4d64b242517510d86e93417b829d461b63ac5548f5d85771f494"
      },
      {
        "timeSeconds": 36.429,
        "path": "qa/phishing/frames/04-36.429s.jpg",
        "sha256": "28f29f1d74a2faa582fc0499f996143e146b4bc4237cddcf6b848faaf3c06ade"
      },
      {
        "timeSeconds": 45.537,
        "path": "qa/phishing/frames/05-45.537s.jpg",
        "sha256": "4e21be66f7bd1119c1b186f3e374038e34f2d853e846382aa03d948fb05fd637"
      },
      {
        "timeSeconds": 54.644,
        "path": "qa/phishing/frames/06-54.644s.jpg",
        "sha256": "2828de35b43bca637668b02a6fb44e23d7e9ddd3eeb5792df68d131e78829b64"
      },
      {
        "timeSeconds": 63.751,
        "path": "qa/phishing/frames/07-63.751s.jpg",
        "sha256": "50eadbfba5d00c8267c17990609c14afc6259ae8e7c3bd0637bc2f50ce039c9c"
      },
      {
        "timeSeconds": 72.859,
        "path": "qa/phishing/frames/08-72.859s.jpg",
        "sha256": "8abd7684e654ab588be00f6b8e8adceb9cbdb3215281ad0c5cc28eb74f3c54bc"
      },
      {
        "timeSeconds": 81.766016,
        "path": "qa/phishing/frames/09-81.766s.jpg",
        "sha256": "a7f7e3a50fa8d13bd9aecedf6571afe91d71ce044e0f64dce753804c80ba4c5c"
      }
    ],
    "contactSheets": [
      "qa/phishing/contact-01.jpg",
      "qa/phishing/contact-02.jpg",
      "qa/phishing/contact-03.jpg"
    ],
    "visualAndFactualAssessment": "Separate evaluator observations required. Successful decode alone is not a content pass."
  },
  "requestEvidence": [
    "/evaluations/kimi-k3-1-pro-creative/phishing/attempt-01.json"
  ],
  "originalInputSha256": "1567e8e81385ae0f1709b27f4126337857ab012e6cd739c317de74bfbdfe95b0",
  "sourcePromptSha256": "1982b9439ae02d4828e0f5aca5cba72618cd25c6462778d7c046bdffd59a9398",
  "billing": {
    "basis": "Kimi Coding Plan subscription quota",
    "actualMonetaryCost": null
  },
  "reviewLimits": "AI qualitative observations plus executable checks; not independent human blind scoring or an exhaustive subjective listening study."
}