采购软件加固服务应索取哪些可核验证据

import datetime as dt
import json
import re
import sys
from pathlib import Path

if len(sys.argv) != 2:
    raise SystemExit('usage: validate_vendor_answers.py questionnaire.json')
input_path = Path(sys.argv[1])
if not input_path.is_file():
    raise SystemExit('questionnaire file is missing')
data = json.loads(input_path.read_text(encoding='utf-8'))
claims = data.get('claims')
if not isinstance(claims, list) or not claims:
    raise SystemExit('claims array is missing')
allowed_types = {'static-report', 'device-receipt', 'provenance', 'attestation', 'signature-receipt', 'declaration-only'}
digest_pattern = re.compile(r'^[a-f0-9]{64}$')
today = dt.date.today()
seen = set()
blocked = []
for index, claim in enumerate(claims):
    claim_id = str(claim.get('id', '')).strip()
    if not claim_id or claim_id in seen:
        raise SystemExit(f'invalid claim id at index {index}')
    seen.add(claim_id)
    for field in ('statement', 'evidence_type', 'artifact_sha256', 'valid_until', 'boundary', 'reviewer'):
        if not isinstance(claim.get(field), str) or not claim[field].strip():
            raise SystemExit(f'{claim_id}: missing {field}')
    if claim['evidence_type'] not in allowed_types:
        raise SystemExit(f'{claim_id}: unsupported evidence type')
    if not digest_pattern.fullmatch(claim['artifact_sha256'].lower()):
        raise SystemExit(f'{claim_id}: invalid artifact digest')
    try:
        valid_until = dt.date.fromisoformat(claim['valid_until'])
    except ValueError:
        raise SystemExit(f'{claim_id}: invalid validity date')
    reasons = []
    if valid_until < today:
        reasons.append('evidence-expired')
    if claim['evidence_type'] == 'declaration-only':
        reasons.append('no-independent-evidence')
    if reasons:
        blocked.append({'id': claim_id, 'reasons': reasons})
result = {'claim_count': len(claims), 'blocked_count': len(blocked), 'blocked': blocked, 'status': 'pass' if not blocked else 'blocked'}
print(json.dumps(result, ensure_ascii=False, indent=2))