{
  "context": "Evaluates whether the solution leans on python-jose utility helpers for compact base64url handling, OpenID Connect at_hash generation, binary coercion, and key format detection as required by the spec. Prioritizes direct use of jose.utils primitives over reimplementing equivalent behaviors.",
  "type": "weighted_checklist",
  "checklist": [
    {
      "name": "Base64url encode",
      "description": "Uses jose.utils.base64url_encode to build each compact segment without padding rather than manual or generic base64 logic.",
      "max_score": 20
    },
    {
      "name": "Base64url decode",
      "description": "Uses jose.utils.base64url_decode (with its padding behavior) to turn compact segments back into bytes and lets errors from this helper surface for malformed input.",
      "max_score": 20
    },
    {
      "name": "at_hash helper",
      "description": "Derives the access-token fingerprint via jose.utils.calculate_at_hash using the hash callable from jose.constants.ALGORITHMS.HASHES[alg] (or equivalent mapping) instead of reimplementing digest slicing/encoding.",
      "max_score": 25
    },
    {
      "name": "Binary coercion",
      "description": "Relies on jose.utils.ensure_binary for string/bytes normalization within segment handling or key processing instead of ad hoc encoding checks.",
      "max_score": 15
    },
    {
      "name": "Key format checks",
      "description": "Detects PEM versus SSH materials using jose.utils.is_pem_format and jose.utils.is_ssh_key (or their exact behaviors) rather than custom regexes, defaulting to 'unknown' otherwise.",
      "max_score": 20
    }
  ]
}