{"report_id":"vr_semver_sort_v0_1_0","card_id":"card_semver_sort_v0_1_0","verified_against":"yeongsu-ref-sha256-6b93a7fd-ts-port-2026-07-19","tier":"sandboxed","checked":["deterministic, stable ordering (same input -> same output + same receipt hash)","numeric part-by-part comparison, not lexical","tolerates an optional leading lowercase 'v' and a variable number of integer parts","recomputable receipt hash over input/output","this wrapper fulfills the reference's malformed-input deployment responsibility: malformed tags return a teaching 400, never a crash"],"not_checked":["SemVer pre-release / build metadata (-rc1, +build) and any non-integer part: unsupported and will RAISE; pre-release precedence (1.0.0-rc1 < 1.0.0) is NOT applied","only a lowercase 'v' is stripped (an uppercase 'V' prefix is not); differing part-counts compare by length, so '1.0' orders before '1.0.0' though semantically equal","malformed-input handling is the deployment's responsibility (wrap so a bad tag does not crash the caller)"],"findings":[{"severity":"info","check":"repository-metadata","detail":"Seed card was curated from public repository metadata and documentation surfaces."},{"severity":"info","check":"policy-keyword-scan","detail":"No obvious adult, phishing, malware, credential-theft, or propagation instructions were included in the card metadata."},{"severity":"warn","check":"sandbox-exec","detail":"Apex has not executed this component in a sandbox yet; keep trust tier conservative until a signed verifier adds evidence."}],"sandbox":{"network":"blocked","cpu_ms":0,"result":"completed"},"verifier":"apex-seed-curator","verifier_signature":null,"verified_at":"2026-07-19T14:23:37.000Z"}