Answer

Where this answer came from

demo-run-2
This answer's trail was checked on — each check that ran held.

Held under the checks that ran; not anchored, so it can't be shown to be the record that was made.

Repeat the check

Run it from the run's folder:

onetrace-verify --trust /srv/onetrace-demo/trust.json MANIFEST.json

The answer

The answer's text is not part of this record package. It is identified by its fingerprint below.

sha256:3e6759062698e97f8b327f70aa171643b40440c3953f0667b81e749f0f7fa48a

Receipt · step 5 of 7 · model
Version
stand-in-model · 1.0.0
What went in
receipt:request · 1144 bytes
sha256:320269f54eae7277e33c11187b218de57e73247d3e6238853e36d951553595a1
receipt:context · 1719 bytes
sha256:c7b56a92095158574296ba32aeccd810fa67add05b9ebf18cebd75b08e7b1701
receipt:tests#2 · 1769 bytes
sha256:f64b683ef2356032fa2ad96fa9393468f8a62fca55e970bfad9ab02e0d30ce57
request.json · 46 bytes
sha256:115c9e98fbcd0aa3de1410e9445a6b1067ce7baf7a3d031d13ba892be27396f0
context.json · 231 bytes
sha256:ed036ce42f2a83cc55b5519bee55508bb56b0277f10612d82b89fe71db84f230
test-results.json · 182 bytes
sha256:f516ca3671f472e9bb2492a90312396c02d3d7116d8a6838d72e6ec78bc35a66
What came out
model-output.json · 184 bytes
sha256:3e6759062698e97f8b327f70aa171643b40440c3953f0667b81e749f0f7fa48a
Fingerprint
sha256:c607a6255e49a4cd2b8f807e7fd2691d396c4515c13cd6ce5bc989b4ac1b7747
Settings it ran with
{
 "seed": "17"
}
The receipt, exactly as recorded
{"anchor":{"reason":"a demo record; anchoring is not part of this demo","state":"unanchored"},"assertions":{"constants":{"seed":"17"}},"coverage":{"boundaries":[],"completeness":"incomplete","declared_stages":["request","context","tests","model","proposal","config applied"],"emitting_stages":["request","context","tests","model"]},"digest_source":"emitter","emission":{"gaps":[],"policy":"fail-closed"},"format":"stage-receipt/0.2","inputs":[{"bytes":"1144","digest":"sha256:320269f54eae7277e33c11187b218de57e73247d3e6238853e36d951553595a1","media_type":"application/json","name":"receipt:request","trust_class":"operator-authored"},{"bytes":"1719","digest":"sha256:c7b56a92095158574296ba32aeccd810fa67add05b9ebf18cebd75b08e7b1701","media_type":"application/json","name":"receipt:context","trust_class":"operator-authored"},{"bytes":"1769","digest":"sha256:f64b683ef2356032fa2ad96fa9393468f8a62fca55e970bfad9ab02e0d30ce57","media_type":"application/json","name":"receipt:tests#2","trust_class":"operator-authored"},{"bytes":"46","digest":"sha256:115c9e98fbcd0aa3de1410e9445a6b1067ce7baf7a3d031d13ba892be27396f0","media_type":"application/json","name":"request.json","trust_class":"operator-authored"},{"bytes":"231","digest":"sha256:ed036ce42f2a83cc55b5519bee55508bb56b0277f10612d82b89fe71db84f230","media_type":"application/json","name":"context.json","trust_class":"operator-authored"},{"bytes":"182","digest":"sha256:f516ca3671f472e9bb2492a90312396c02d3d7116d8a6838d72e6ec78bc35a66","media_type":"application/json","name":"test-results.json","trust_class":"operator-authored"}],"instrument":{"config_digest":"sha256:157ee8ba61daebe690746b2142fe14b7afa765cb0e3a9de80063e94b79c8fbf8","id":"stand-in-model","kind":"generator","manifest_digest":"sha256:45b3ab543fa4cce1cd66108096ad26577bb7e30a8ff9edb8fea7b992bfe6f854","rederivable":"false","rederivable_note":"a sampled model call: its output is recorded, not replayed","version":"1.0.0"},"outcome":{"class":"ok"},"outputs":[{"bytes":"184","digest":"sha256:3e6759062698e97f8b327f70aa171643b40440c3953f0667b81e749f0f7fa48a","media_type":"application/json","name":"model-output.json","trust_class":"operator-authored"}],"prev":"sha256:f64b683ef2356032fa2ad96fa9393468f8a62fca55e970bfad9ab02e0d30ce57","run_id":"demo-run-2","stage":{"index":"5","name":"model"},"time":{"ended":"2026-09-29T10:00:09.000+00:00","started":"2026-09-29T10:00:08.000+00:00"}}
The check's own words
[PASS   ] receipts/05-model.json: receipt format
[PASS   ] receipts/05-model.json: bytes are canonical
[PASS   ] receipts/05-model.json: required field 'format'
[PASS   ] receipts/05-model.json: required field 'run_id'
[PASS   ] receipts/05-model.json: required field 'stage'
[PASS   ] receipts/05-model.json: required field 'prev'
[PASS   ] receipts/05-model.json: required field 'time'
[PASS   ] receipts/05-model.json: required field 'coverage'
[PASS   ] receipts/05-model.json: required field 'emission'
[PASS   ] receipts/05-model.json: required field 'anchor'
[PASS   ] receipts/05-model.json: required field 'instrument'
[PASS   ] receipts/05-model.json: required field 'inputs'
[PASS   ] receipts/05-model.json: required field 'outputs'
[PASS   ] receipts/05-model.json: required field 'assertions'
[PASS   ] receipts/05-model.json: required field 'outcome'
[PASS   ] receipts/05-model.json: time.started carries its zone
[PASS   ] receipts/05-model.json: time.ended carries its zone
[PASS   ] receipts/05-model.json: instrument is named and pinned
[PASS   ] receipts/05-model.json: inputs/receipt:request declares a trust class
[PASS   ] receipts/05-model.json: inputs/receipt:context declares a trust class
[PASS   ] receipts/05-model.json: inputs/receipt:tests#2 declares a trust class
[PASS   ] receipts/05-model.json: inputs/request.json declares a trust class
[PASS   ] receipts/05-model.json: inputs/context.json declares a trust class
[PASS   ] receipts/05-model.json: inputs/test-results.json declares a trust class
[PASS   ] receipts/05-model.json: outputs/model-output.json declares a trust class
[PASS   ] receipts/05-model.json: assertions name their constants
[PASS   ] receipts/05-model.json: outcome class is one of ['error', 'ok', 'refused']
[PASS   ] receipts/05-model.json: coverage declares completeness
[PASS   ] receipts/05-model.json: anchor state is declared, not absent
[NOT-RUN] receipts/05-model.json: originality -- record is declared unanchored; this verifier can establish consistency, not originality
[PASS   ] receipts/05-model.json: digest matches the manifest
[PASS   ] receipts/05-model.json: chain link
[PASS   ] receipts/05-model.json: output artifact 'model-output.json' matches

The trail

step 1 of 7

request

What went in
nothing
What came out
request.json · 46 bytes
When
→

Completed.

Ran as task-intake, version 1.0.0.

Checked — it holds.

Held under the checks that ran; not anchored, so it can't be shown to be the record that was made.

Receipt · step 1 of 7 · request
Version
task-intake · 1.0.0
What went in
nothing
What came out
request.json · 46 bytes
sha256:115c9e98fbcd0aa3de1410e9445a6b1067ce7baf7a3d031d13ba892be27396f0
Fingerprint
sha256:320269f54eae7277e33c11187b218de57e73247d3e6238853e36d951553595a1
Settings it ran with
{
 "clock": "set by the demo; the times in this record were not read from a clock"
}
The receipt, exactly as recorded
{"anchor":{"reason":"a demo record; anchoring is not part of this demo","state":"unanchored"},"assertions":{"constants":{"clock":"set by the demo; the times in this record were not read from a clock"}},"coverage":{"boundaries":[],"completeness":"incomplete","declared_stages":["request","context","tests","model","proposal","config applied"],"emitting_stages":["request"]},"digest_source":"emitter","emission":{"gaps":[],"policy":"fail-closed"},"format":"stage-receipt/0.2","inputs":[],"instrument":{"config_digest":"sha256:a716f9231f7813d63e8499ab3576bcf8ef5f6afcc60028ce249888e72beedd85","id":"task-intake","kind":"reader","manifest_digest":"sha256:45b3ab543fa4cce1cd66108096ad26577bb7e30a8ff9edb8fea7b992bfe6f854","rederivable":"true","version":"1.0.0"},"outcome":{"class":"ok"},"outputs":[{"bytes":"46","digest":"sha256:115c9e98fbcd0aa3de1410e9445a6b1067ce7baf7a3d031d13ba892be27396f0","media_type":"application/json","name":"request.json","trust_class":"operator-authored"}],"prev":null,"run_id":"demo-run-2","stage":{"index":"1","name":"request"},"time":{"ended":"2026-09-29T10:00:01.000+00:00","started":"2026-09-29T10:00:00.000+00:00"}}
The check's own words
[PASS   ] receipts/01-request.json: receipt format
[PASS   ] receipts/01-request.json: bytes are canonical
[PASS   ] receipts/01-request.json: required field 'format'
[PASS   ] receipts/01-request.json: required field 'run_id'
[PASS   ] receipts/01-request.json: required field 'stage'
[PASS   ] receipts/01-request.json: required field 'prev'
[PASS   ] receipts/01-request.json: required field 'time'
[PASS   ] receipts/01-request.json: required field 'coverage'
[PASS   ] receipts/01-request.json: required field 'emission'
[PASS   ] receipts/01-request.json: required field 'anchor'
[PASS   ] receipts/01-request.json: required field 'instrument'
[PASS   ] receipts/01-request.json: required field 'inputs'
[PASS   ] receipts/01-request.json: required field 'outputs'
[PASS   ] receipts/01-request.json: required field 'assertions'
[PASS   ] receipts/01-request.json: required field 'outcome'
[PASS   ] receipts/01-request.json: time.started carries its zone
[PASS   ] receipts/01-request.json: time.ended carries its zone
[PASS   ] receipts/01-request.json: instrument is named and pinned
[PASS   ] receipts/01-request.json: outputs/request.json declares a trust class
[PASS   ] receipts/01-request.json: assertions name their constants
[PASS   ] receipts/01-request.json: outcome class is one of ['error', 'ok', 'refused']
[PASS   ] receipts/01-request.json: coverage declares completeness
[PASS   ] receipts/01-request.json: anchor state is declared, not absent
[NOT-RUN] receipts/01-request.json: originality -- record is declared unanchored; this verifier can establish consistency, not originality
[PASS   ] receipts/01-request.json: digest matches the manifest
[PASS   ] receipts/01-request.json: chain link
[PASS   ] receipts/01-request.json: output artifact 'request.json' matches
step 2 of 7

context

What went in
receipt:request · 1144 bytes
request.json · 46 bytes
documents · 228 bytes
What came out
context.json · 231 bytes
When
→

Completed.

Ran as doc-search, version 1.0.0.

Checked — it holds.

Held under the checks that ran; not anchored, so it can't be shown to be the record that was made.

Receipt · step 2 of 7 · context
Version
doc-search · 1.0.0
What went in
receipt:request · 1144 bytes
sha256:320269f54eae7277e33c11187b218de57e73247d3e6238853e36d951553595a1
request.json · 46 bytes
sha256:115c9e98fbcd0aa3de1410e9445a6b1067ce7baf7a3d031d13ba892be27396f0
documents · 228 bytes
sha256:31e77846aec6e30def74fa234350d5f54c66e7a49ed8b4ad9284474c7ba9e7d3
What came out
context.json · 231 bytes
sha256:ed036ce42f2a83cc55b5519bee55508bb56b0277f10612d82b89fe71db84f230
Fingerprint
sha256:c7b56a92095158574296ba32aeccd810fa67add05b9ebf18cebd75b08e7b1701
Settings it ran with
{
 "top_k": "3"
}
The receipt, exactly as recorded
{"anchor":{"reason":"a demo record; anchoring is not part of this demo","state":"unanchored"},"assertions":{"constants":{"top_k":"3"}},"coverage":{"boundaries":[],"completeness":"incomplete","declared_stages":["request","context","tests","model","proposal","config applied"],"emitting_stages":["request","context"]},"digest_source":"emitter","emission":{"gaps":[],"policy":"fail-closed"},"format":"stage-receipt/0.2","inputs":[{"bytes":"1144","digest":"sha256:320269f54eae7277e33c11187b218de57e73247d3e6238853e36d951553595a1","media_type":"application/json","name":"receipt:request","trust_class":"operator-authored"},{"bytes":"46","digest":"sha256:115c9e98fbcd0aa3de1410e9445a6b1067ce7baf7a3d031d13ba892be27396f0","media_type":"application/json","name":"request.json","trust_class":"operator-authored"},{"bytes":"228","digest":"sha256:31e77846aec6e30def74fa234350d5f54c66e7a49ed8b4ad9284474c7ba9e7d3","media_type":"application/json","name":"documents","trust_class":"operator-authored"}],"instrument":{"config_digest":"sha256:41b2a714a3ed2cb5918719c654bd2461e211320890ed06a2ba62cf51aaed79b3","id":"doc-search","kind":"retriever","manifest_digest":"sha256:45b3ab543fa4cce1cd66108096ad26577bb7e30a8ff9edb8fea7b992bfe6f854","rederivable":"true","version":"1.0.0"},"outcome":{"class":"ok"},"outputs":[{"bytes":"231","digest":"sha256:ed036ce42f2a83cc55b5519bee55508bb56b0277f10612d82b89fe71db84f230","media_type":"application/json","name":"context.json","trust_class":"operator-authored"}],"prev":"sha256:320269f54eae7277e33c11187b218de57e73247d3e6238853e36d951553595a1","run_id":"demo-run-2","stage":{"index":"2","name":"context"},"time":{"ended":"2026-09-29T10:00:03.000+00:00","started":"2026-09-29T10:00:02.000+00:00"}}
The check's own words
[PASS   ] receipts/02-context.json: receipt format
[PASS   ] receipts/02-context.json: bytes are canonical
[PASS   ] receipts/02-context.json: required field 'format'
[PASS   ] receipts/02-context.json: required field 'run_id'
[PASS   ] receipts/02-context.json: required field 'stage'
[PASS   ] receipts/02-context.json: required field 'prev'
[PASS   ] receipts/02-context.json: required field 'time'
[PASS   ] receipts/02-context.json: required field 'coverage'
[PASS   ] receipts/02-context.json: required field 'emission'
[PASS   ] receipts/02-context.json: required field 'anchor'
[PASS   ] receipts/02-context.json: required field 'instrument'
[PASS   ] receipts/02-context.json: required field 'inputs'
[PASS   ] receipts/02-context.json: required field 'outputs'
[PASS   ] receipts/02-context.json: required field 'assertions'
[PASS   ] receipts/02-context.json: required field 'outcome'
[PASS   ] receipts/02-context.json: time.started carries its zone
[PASS   ] receipts/02-context.json: time.ended carries its zone
[PASS   ] receipts/02-context.json: instrument is named and pinned
[PASS   ] receipts/02-context.json: inputs/receipt:request declares a trust class
[PASS   ] receipts/02-context.json: inputs/request.json declares a trust class
[PASS   ] receipts/02-context.json: inputs/documents declares a trust class
[PASS   ] receipts/02-context.json: outputs/context.json declares a trust class
[PASS   ] receipts/02-context.json: assertions name their constants
[PASS   ] receipts/02-context.json: outcome class is one of ['error', 'ok', 'refused']
[PASS   ] receipts/02-context.json: coverage declares completeness
[PASS   ] receipts/02-context.json: anchor state is declared, not absent
[NOT-RUN] receipts/02-context.json: originality -- record is declared unanchored; this verifier can establish consistency, not originality
[PASS   ] receipts/02-context.json: digest matches the manifest
[PASS   ] receipts/02-context.json: chain link
[PASS   ] receipts/02-context.json: output artifact 'context.json' matches
step 3 of 7

tests

What went in
receipt:request · 1144 bytes
request.json · 46 bytes
What came out
nothing
When
→

Failed — TimeoutError: set by the demo to show a retry: the first attempt raises this instead of running; nothing timed out, reported by test-runner.

Ran as test-runner, version 2.4.0.

Checked — it holds.

Held under the checks that ran; not anchored, so it can't be shown to be the record that was made.

Receipt · step 3 of 7 · tests
Version
test-runner · 2.4.0
What went in
receipt:request · 1144 bytes
sha256:320269f54eae7277e33c11187b218de57e73247d3e6238853e36d951553595a1
request.json · 46 bytes
sha256:115c9e98fbcd0aa3de1410e9445a6b1067ce7baf7a3d031d13ba892be27396f0
What came out
nothing
Fingerprint
sha256:b9ba9f5c77eb382df6282a7a43bf4d1e41cfb66126929db74413cd71b9378f50
Settings it ran with
{
 "attempt": "1"
}
The receipt, exactly as recorded
{"anchor":{"reason":"a demo record; anchoring is not part of this demo","state":"unanchored"},"assertions":{"constants":{"attempt":"1"}},"coverage":{"boundaries":[],"completeness":"incomplete","declared_stages":["request","context","tests","model","proposal","config applied"],"emitting_stages":["request","context","tests"]},"digest_source":"emitter","emission":{"gaps":[],"policy":"fail-closed"},"format":"stage-receipt/0.2","inputs":[{"bytes":"1144","digest":"sha256:320269f54eae7277e33c11187b218de57e73247d3e6238853e36d951553595a1","media_type":"application/json","name":"receipt:request","trust_class":"operator-authored"},{"bytes":"46","digest":"sha256:115c9e98fbcd0aa3de1410e9445a6b1067ce7baf7a3d031d13ba892be27396f0","media_type":"application/json","name":"request.json","trust_class":"operator-authored"}],"instrument":{"config_digest":"sha256:b6ce29b790f5b0cac5791ffe27fd33af31088dffa62e608c4281bf5b7683b7a7","id":"test-runner","kind":"tool","manifest_digest":"sha256:45b3ab543fa4cce1cd66108096ad26577bb7e30a8ff9edb8fea7b992bfe6f854","rederivable":"true","version":"2.4.0"},"outcome":{"body":"set by the demo to show a retry: the first attempt raises this instead of running; nothing timed out","class":"error","origin":"test-runner","status":"TimeoutError"},"outputs":[],"prev":"sha256:c7b56a92095158574296ba32aeccd810fa67add05b9ebf18cebd75b08e7b1701","run_id":"demo-run-2","stage":{"index":"3","instance":"1","name":"tests"},"time":{"ended":"2026-09-29T10:00:05.000+00:00","started":"2026-09-29T10:00:04.000+00:00"}}
The check's own words
[PASS   ] receipts/03-tests_1.json: receipt format
[PASS   ] receipts/03-tests_1.json: bytes are canonical
[PASS   ] receipts/03-tests_1.json: required field 'format'
[PASS   ] receipts/03-tests_1.json: required field 'run_id'
[PASS   ] receipts/03-tests_1.json: required field 'stage'
[PASS   ] receipts/03-tests_1.json: required field 'prev'
[PASS   ] receipts/03-tests_1.json: required field 'time'
[PASS   ] receipts/03-tests_1.json: required field 'coverage'
[PASS   ] receipts/03-tests_1.json: required field 'emission'
[PASS   ] receipts/03-tests_1.json: required field 'anchor'
[PASS   ] receipts/03-tests_1.json: required field 'instrument'
[PASS   ] receipts/03-tests_1.json: required field 'inputs'
[PASS   ] receipts/03-tests_1.json: required field 'outputs'
[PASS   ] receipts/03-tests_1.json: required field 'assertions'
[PASS   ] receipts/03-tests_1.json: required field 'outcome'
[PASS   ] receipts/03-tests_1.json: time.started carries its zone
[PASS   ] receipts/03-tests_1.json: time.ended carries its zone
[PASS   ] receipts/03-tests_1.json: instrument is named and pinned
[PASS   ] receipts/03-tests_1.json: inputs/receipt:request declares a trust class
[PASS   ] receipts/03-tests_1.json: inputs/request.json declares a trust class
[PASS   ] receipts/03-tests_1.json: assertions name their constants
[PASS   ] receipts/03-tests_1.json: outcome class is one of ['error', 'ok', 'refused']
[PASS   ] receipts/03-tests_1.json: error carries status, body and origin
[PASS   ] receipts/03-tests_1.json: coverage declares completeness
[PASS   ] receipts/03-tests_1.json: anchor state is declared, not absent
[NOT-RUN] receipts/03-tests_1.json: originality -- record is declared unanchored; this verifier can establish consistency, not originality
[PASS   ] receipts/03-tests_1.json: digest matches the manifest
[PASS   ] receipts/03-tests_1.json: chain link
step 4 of 7

tests

What went in
receipt:request · 1144 bytes
request.json · 46 bytes
results · 192 bytes
What came out
test-results.json · 182 bytes
When
→

Completed.

Ran as test-runner, version 2.4.0.

Checked — it holds.

Held under the checks that ran; not anchored, so it can't be shown to be the record that was made.

Receipt · step 4 of 7 · tests
Version
test-runner · 2.4.0
What went in
receipt:request · 1144 bytes
sha256:320269f54eae7277e33c11187b218de57e73247d3e6238853e36d951553595a1
request.json · 46 bytes
sha256:115c9e98fbcd0aa3de1410e9445a6b1067ce7baf7a3d031d13ba892be27396f0
results · 192 bytes
sha256:c749bc9104500a0199716938598a26b9e0ebfb0c163f428c4b1dec8de2c5de73
What came out
test-results.json · 182 bytes
sha256:f516ca3671f472e9bb2492a90312396c02d3d7116d8a6838d72e6ec78bc35a66
Fingerprint
sha256:f64b683ef2356032fa2ad96fa9393468f8a62fca55e970bfad9ab02e0d30ce57
Settings it ran with
{
 "attempt": "2",
 "suite": "auth"
}
The receipt, exactly as recorded
{"anchor":{"reason":"a demo record; anchoring is not part of this demo","state":"unanchored"},"assertions":{"constants":{"attempt":"2","suite":"auth"},"failed":"4"},"coverage":{"boundaries":[],"completeness":"incomplete","declared_stages":["request","context","tests","model","proposal","config applied"],"emitting_stages":["request","context","tests"]},"digest_source":"emitter","emission":{"gaps":[],"policy":"fail-closed"},"format":"stage-receipt/0.2","inputs":[{"bytes":"1144","digest":"sha256:320269f54eae7277e33c11187b218de57e73247d3e6238853e36d951553595a1","media_type":"application/json","name":"receipt:request","trust_class":"operator-authored"},{"bytes":"46","digest":"sha256:115c9e98fbcd0aa3de1410e9445a6b1067ce7baf7a3d031d13ba892be27396f0","media_type":"application/json","name":"request.json","trust_class":"operator-authored"},{"bytes":"192","digest":"sha256:c749bc9104500a0199716938598a26b9e0ebfb0c163f428c4b1dec8de2c5de73","media_type":"application/json","name":"results","trust_class":"operator-authored"}],"instrument":{"config_digest":"sha256:b6ce29b790f5b0cac5791ffe27fd33af31088dffa62e608c4281bf5b7683b7a7","id":"test-runner","kind":"tool","manifest_digest":"sha256:45b3ab543fa4cce1cd66108096ad26577bb7e30a8ff9edb8fea7b992bfe6f854","rederivable":"true","version":"2.4.0"},"outcome":{"class":"ok"},"outputs":[{"bytes":"182","digest":"sha256:f516ca3671f472e9bb2492a90312396c02d3d7116d8a6838d72e6ec78bc35a66","media_type":"application/json","name":"test-results.json","trust_class":"operator-authored"}],"prev":"sha256:b9ba9f5c77eb382df6282a7a43bf4d1e41cfb66126929db74413cd71b9378f50","run_id":"demo-run-2","stage":{"index":"4","instance":"2","name":"tests"},"time":{"ended":"2026-09-29T10:00:07.000+00:00","started":"2026-09-29T10:00:06.000+00:00"}}
The check's own words
[PASS   ] receipts/04-tests_2.json: receipt format
[PASS   ] receipts/04-tests_2.json: bytes are canonical
[PASS   ] receipts/04-tests_2.json: required field 'format'
[PASS   ] receipts/04-tests_2.json: required field 'run_id'
[PASS   ] receipts/04-tests_2.json: required field 'stage'
[PASS   ] receipts/04-tests_2.json: required field 'prev'
[PASS   ] receipts/04-tests_2.json: required field 'time'
[PASS   ] receipts/04-tests_2.json: required field 'coverage'
[PASS   ] receipts/04-tests_2.json: required field 'emission'
[PASS   ] receipts/04-tests_2.json: required field 'anchor'
[PASS   ] receipts/04-tests_2.json: required field 'instrument'
[PASS   ] receipts/04-tests_2.json: required field 'inputs'
[PASS   ] receipts/04-tests_2.json: required field 'outputs'
[PASS   ] receipts/04-tests_2.json: required field 'assertions'
[PASS   ] receipts/04-tests_2.json: required field 'outcome'
[PASS   ] receipts/04-tests_2.json: time.started carries its zone
[PASS   ] receipts/04-tests_2.json: time.ended carries its zone
[PASS   ] receipts/04-tests_2.json: instrument is named and pinned
[PASS   ] receipts/04-tests_2.json: inputs/receipt:request declares a trust class
[PASS   ] receipts/04-tests_2.json: inputs/request.json declares a trust class
[PASS   ] receipts/04-tests_2.json: inputs/results declares a trust class
[PASS   ] receipts/04-tests_2.json: outputs/test-results.json declares a trust class
[PASS   ] receipts/04-tests_2.json: assertions name their constants
[PASS   ] receipts/04-tests_2.json: outcome class is one of ['error', 'ok', 'refused']
[PASS   ] receipts/04-tests_2.json: coverage declares completeness
[PASS   ] receipts/04-tests_2.json: anchor state is declared, not absent
[NOT-RUN] receipts/04-tests_2.json: originality -- record is declared unanchored; this verifier can establish consistency, not originality
[PASS   ] receipts/04-tests_2.json: digest matches the manifest
[PASS   ] receipts/04-tests_2.json: chain link
[PASS   ] receipts/04-tests_2.json: output artifact 'test-results.json' matches
step 5 of 7

model

What went in
receipt:request · 1144 bytes
receipt:context · 1719 bytes
receipt:tests#2 · 1769 bytes
request.json · 46 bytes
context.json · 231 bytes
test-results.json · 182 bytes
What came out
model-output.json · 184 bytes
When
→

Completed.

The model step is recorded, not replayable.

Ran as stand-in-model, version 1.0.0.

Checked — it holds.

Held under the checks that ran; not anchored, so it can't be shown to be the record that was made.

Receipt · step 5 of 7 · model
Version
stand-in-model · 1.0.0
What went in
receipt:request · 1144 bytes
sha256:320269f54eae7277e33c11187b218de57e73247d3e6238853e36d951553595a1
receipt:context · 1719 bytes
sha256:c7b56a92095158574296ba32aeccd810fa67add05b9ebf18cebd75b08e7b1701
receipt:tests#2 · 1769 bytes
sha256:f64b683ef2356032fa2ad96fa9393468f8a62fca55e970bfad9ab02e0d30ce57
request.json · 46 bytes
sha256:115c9e98fbcd0aa3de1410e9445a6b1067ce7baf7a3d031d13ba892be27396f0
context.json · 231 bytes
sha256:ed036ce42f2a83cc55b5519bee55508bb56b0277f10612d82b89fe71db84f230
test-results.json · 182 bytes
sha256:f516ca3671f472e9bb2492a90312396c02d3d7116d8a6838d72e6ec78bc35a66
What came out
model-output.json · 184 bytes
sha256:3e6759062698e97f8b327f70aa171643b40440c3953f0667b81e749f0f7fa48a
Fingerprint
sha256:c607a6255e49a4cd2b8f807e7fd2691d396c4515c13cd6ce5bc989b4ac1b7747
Settings it ran with
{
 "seed": "17"
}
The receipt, exactly as recorded
{"anchor":{"reason":"a demo record; anchoring is not part of this demo","state":"unanchored"},"assertions":{"constants":{"seed":"17"}},"coverage":{"boundaries":[],"completeness":"incomplete","declared_stages":["request","context","tests","model","proposal","config applied"],"emitting_stages":["request","context","tests","model"]},"digest_source":"emitter","emission":{"gaps":[],"policy":"fail-closed"},"format":"stage-receipt/0.2","inputs":[{"bytes":"1144","digest":"sha256:320269f54eae7277e33c11187b218de57e73247d3e6238853e36d951553595a1","media_type":"application/json","name":"receipt:request","trust_class":"operator-authored"},{"bytes":"1719","digest":"sha256:c7b56a92095158574296ba32aeccd810fa67add05b9ebf18cebd75b08e7b1701","media_type":"application/json","name":"receipt:context","trust_class":"operator-authored"},{"bytes":"1769","digest":"sha256:f64b683ef2356032fa2ad96fa9393468f8a62fca55e970bfad9ab02e0d30ce57","media_type":"application/json","name":"receipt:tests#2","trust_class":"operator-authored"},{"bytes":"46","digest":"sha256:115c9e98fbcd0aa3de1410e9445a6b1067ce7baf7a3d031d13ba892be27396f0","media_type":"application/json","name":"request.json","trust_class":"operator-authored"},{"bytes":"231","digest":"sha256:ed036ce42f2a83cc55b5519bee55508bb56b0277f10612d82b89fe71db84f230","media_type":"application/json","name":"context.json","trust_class":"operator-authored"},{"bytes":"182","digest":"sha256:f516ca3671f472e9bb2492a90312396c02d3d7116d8a6838d72e6ec78bc35a66","media_type":"application/json","name":"test-results.json","trust_class":"operator-authored"}],"instrument":{"config_digest":"sha256:157ee8ba61daebe690746b2142fe14b7afa765cb0e3a9de80063e94b79c8fbf8","id":"stand-in-model","kind":"generator","manifest_digest":"sha256:45b3ab543fa4cce1cd66108096ad26577bb7e30a8ff9edb8fea7b992bfe6f854","rederivable":"false","rederivable_note":"a sampled model call: its output is recorded, not replayed","version":"1.0.0"},"outcome":{"class":"ok"},"outputs":[{"bytes":"184","digest":"sha256:3e6759062698e97f8b327f70aa171643b40440c3953f0667b81e749f0f7fa48a","media_type":"application/json","name":"model-output.json","trust_class":"operator-authored"}],"prev":"sha256:f64b683ef2356032fa2ad96fa9393468f8a62fca55e970bfad9ab02e0d30ce57","run_id":"demo-run-2","stage":{"index":"5","name":"model"},"time":{"ended":"2026-09-29T10:00:09.000+00:00","started":"2026-09-29T10:00:08.000+00:00"}}
The check's own words
[PASS   ] receipts/05-model.json: receipt format
[PASS   ] receipts/05-model.json: bytes are canonical
[PASS   ] receipts/05-model.json: required field 'format'
[PASS   ] receipts/05-model.json: required field 'run_id'
[PASS   ] receipts/05-model.json: required field 'stage'
[PASS   ] receipts/05-model.json: required field 'prev'
[PASS   ] receipts/05-model.json: required field 'time'
[PASS   ] receipts/05-model.json: required field 'coverage'
[PASS   ] receipts/05-model.json: required field 'emission'
[PASS   ] receipts/05-model.json: required field 'anchor'
[PASS   ] receipts/05-model.json: required field 'instrument'
[PASS   ] receipts/05-model.json: required field 'inputs'
[PASS   ] receipts/05-model.json: required field 'outputs'
[PASS   ] receipts/05-model.json: required field 'assertions'
[PASS   ] receipts/05-model.json: required field 'outcome'
[PASS   ] receipts/05-model.json: time.started carries its zone
[PASS   ] receipts/05-model.json: time.ended carries its zone
[PASS   ] receipts/05-model.json: instrument is named and pinned
[PASS   ] receipts/05-model.json: inputs/receipt:request declares a trust class
[PASS   ] receipts/05-model.json: inputs/receipt:context declares a trust class
[PASS   ] receipts/05-model.json: inputs/receipt:tests#2 declares a trust class
[PASS   ] receipts/05-model.json: inputs/request.json declares a trust class
[PASS   ] receipts/05-model.json: inputs/context.json declares a trust class
[PASS   ] receipts/05-model.json: inputs/test-results.json declares a trust class
[PASS   ] receipts/05-model.json: outputs/model-output.json declares a trust class
[PASS   ] receipts/05-model.json: assertions name their constants
[PASS   ] receipts/05-model.json: outcome class is one of ['error', 'ok', 'refused']
[PASS   ] receipts/05-model.json: coverage declares completeness
[PASS   ] receipts/05-model.json: anchor state is declared, not absent
[NOT-RUN] receipts/05-model.json: originality -- record is declared unanchored; this verifier can establish consistency, not originality
[PASS   ] receipts/05-model.json: digest matches the manifest
[PASS   ] receipts/05-model.json: chain link
[PASS   ] receipts/05-model.json: output artifact 'model-output.json' matches
step 6 of 7

proposal

What went in
receipt:model · 2400 bytes
model-output.json · 184 bytes
What came out
proposal.json · 81 bytes
When
→

Completed.

Ran as action-parser, version 1.0.0.

Checked — it holds.

Held under the checks that ran; not anchored, so it can't be shown to be the record that was made.

Receipt · step 6 of 7 · proposal
Version
action-parser · 1.0.0
What went in
receipt:model · 2400 bytes
sha256:c607a6255e49a4cd2b8f807e7fd2691d396c4515c13cd6ce5bc989b4ac1b7747
model-output.json · 184 bytes
sha256:3e6759062698e97f8b327f70aa171643b40440c3953f0667b81e749f0f7fa48a
What came out
proposal.json · 81 bytes
sha256:bae93e89f1275a7a140bff86f09e3fd4c970c2d0098bda51fdd4412878d27e17
Fingerprint
sha256:d8a8d0f3fed543651affd6fc616a4dbcd07e6e59864222f64ab3e69cfd6f462d
Settings it ran with
{}
The receipt, exactly as recorded
{"anchor":{"reason":"a demo record; anchoring is not part of this demo","state":"unanchored"},"assertions":{},"coverage":{"boundaries":[],"completeness":"incomplete","declared_stages":["request","context","tests","model","proposal","config applied"],"emitting_stages":["request","context","tests","model","proposal"]},"digest_source":"emitter","emission":{"gaps":[],"policy":"fail-closed"},"format":"stage-receipt/0.2","inputs":[{"bytes":"2400","digest":"sha256:c607a6255e49a4cd2b8f807e7fd2691d396c4515c13cd6ce5bc989b4ac1b7747","media_type":"application/json","name":"receipt:model","trust_class":"operator-authored"},{"bytes":"184","digest":"sha256:3e6759062698e97f8b327f70aa171643b40440c3953f0667b81e749f0f7fa48a","media_type":"application/json","name":"model-output.json","trust_class":"operator-authored"}],"instrument":{"config_digest":"sha256:6c32b25ddfcd07e8bcadde61d592dc1f57b09a24cc079e6387af6dfb3e4e8456","id":"action-parser","kind":"parser","manifest_digest":"sha256:45b3ab543fa4cce1cd66108096ad26577bb7e30a8ff9edb8fea7b992bfe6f854","rederivable":"true","version":"1.0.0"},"outcome":{"class":"ok"},"outputs":[{"bytes":"81","digest":"sha256:bae93e89f1275a7a140bff86f09e3fd4c970c2d0098bda51fdd4412878d27e17","media_type":"application/json","name":"proposal.json","trust_class":"operator-authored"}],"prev":"sha256:c607a6255e49a4cd2b8f807e7fd2691d396c4515c13cd6ce5bc989b4ac1b7747","run_id":"demo-run-2","stage":{"index":"6","name":"proposal"},"time":{"ended":"2026-09-29T10:00:11.000+00:00","started":"2026-09-29T10:00:10.000+00:00"}}
The check's own words
[PASS   ] receipts/06-proposal.json: receipt format
[PASS   ] receipts/06-proposal.json: bytes are canonical
[PASS   ] receipts/06-proposal.json: required field 'format'
[PASS   ] receipts/06-proposal.json: required field 'run_id'
[PASS   ] receipts/06-proposal.json: required field 'stage'
[PASS   ] receipts/06-proposal.json: required field 'prev'
[PASS   ] receipts/06-proposal.json: required field 'time'
[PASS   ] receipts/06-proposal.json: required field 'coverage'
[PASS   ] receipts/06-proposal.json: required field 'emission'
[PASS   ] receipts/06-proposal.json: required field 'anchor'
[PASS   ] receipts/06-proposal.json: required field 'instrument'
[PASS   ] receipts/06-proposal.json: required field 'inputs'
[PASS   ] receipts/06-proposal.json: required field 'outputs'
[PASS   ] receipts/06-proposal.json: required field 'assertions'
[PASS   ] receipts/06-proposal.json: required field 'outcome'
[PASS   ] receipts/06-proposal.json: time.started carries its zone
[PASS   ] receipts/06-proposal.json: time.ended carries its zone
[PASS   ] receipts/06-proposal.json: instrument is named and pinned
[PASS   ] receipts/06-proposal.json: inputs/receipt:model declares a trust class
[PASS   ] receipts/06-proposal.json: inputs/model-output.json declares a trust class
[PASS   ] receipts/06-proposal.json: outputs/proposal.json declares a trust class
[PASS   ] receipts/06-proposal.json: outcome class is one of ['error', 'ok', 'refused']
[PASS   ] receipts/06-proposal.json: coverage declares completeness
[PASS   ] receipts/06-proposal.json: anchor state is declared, not absent
[NOT-RUN] receipts/06-proposal.json: originality -- record is declared unanchored; this verifier can establish consistency, not originality
[PASS   ] receipts/06-proposal.json: digest matches the manifest
[PASS   ] receipts/06-proposal.json: chain link
[PASS   ] receipts/06-proposal.json: output artifact 'proposal.json' matches
step 7 of 7

config applied

What went in
receipt:proposal · 1542 bytes
proposal.json · 81 bytes
What came out
auth.json · 22 bytes
When
→

Completed.

Ran as config-writer, version 1.2.0.

Checked — it holds.

Held under the checks that ran; not anchored, so it can't be shown to be the record that was made.

Receipt · step 7 of 7 · config applied
Version
config-writer · 1.2.0
What went in
receipt:proposal · 1542 bytes
sha256:d8a8d0f3fed543651affd6fc616a4dbcd07e6e59864222f64ab3e69cfd6f462d
proposal.json · 81 bytes
sha256:bae93e89f1275a7a140bff86f09e3fd4c970c2d0098bda51fdd4412878d27e17
What came out
auth.json · 22 bytes
sha256:8075e9f891f4cc7bc61e8e6b81178630c022d9d7f2eb8af45e8073638242eb60
Fingerprint
sha256:a3a4c5ebdba696004f5185086f3396a10168d0c94fda4f62943a9b4d02028384
Settings it ran with
{}
The receipt, exactly as recorded
{"anchor":{"reason":"a demo record; anchoring is not part of this demo","state":"unanchored"},"assertions":{},"coverage":{"boundaries":[],"completeness":"complete","declared_stages":["request","context","tests","model","proposal","config applied"],"emitting_stages":["request","context","tests","model","proposal","config applied"]},"digest_source":"emitter","emission":{"gaps":[],"policy":"fail-closed"},"format":"stage-receipt/0.2","inputs":[{"bytes":"1542","digest":"sha256:d8a8d0f3fed543651affd6fc616a4dbcd07e6e59864222f64ab3e69cfd6f462d","media_type":"application/json","name":"receipt:proposal","trust_class":"operator-authored"},{"bytes":"81","digest":"sha256:bae93e89f1275a7a140bff86f09e3fd4c970c2d0098bda51fdd4412878d27e17","media_type":"application/json","name":"proposal.json","trust_class":"operator-authored"}],"instrument":{"config_digest":"sha256:4cf2bb94cb556cc07db470fc80186d87755477bab765d84c86f56c9c9a2623af","id":"config-writer","kind":"tool","manifest_digest":"sha256:45b3ab543fa4cce1cd66108096ad26577bb7e30a8ff9edb8fea7b992bfe6f854","rederivable":"true","version":"1.2.0"},"outcome":{"class":"ok"},"outputs":[{"bytes":"22","digest":"sha256:8075e9f891f4cc7bc61e8e6b81178630c022d9d7f2eb8af45e8073638242eb60","media_type":"application/json","name":"auth.json","trust_class":"operator-authored"}],"prev":"sha256:d8a8d0f3fed543651affd6fc616a4dbcd07e6e59864222f64ab3e69cfd6f462d","run_id":"demo-run-2","stage":{"index":"7","name":"config applied"},"time":{"ended":"2026-09-29T10:00:13.000+00:00","started":"2026-09-29T10:00:12.000+00:00"}}
The check's own words
[PASS   ] receipts/07-config-applied.json: receipt format
[PASS   ] receipts/07-config-applied.json: bytes are canonical
[PASS   ] receipts/07-config-applied.json: required field 'format'
[PASS   ] receipts/07-config-applied.json: required field 'run_id'
[PASS   ] receipts/07-config-applied.json: required field 'stage'
[PASS   ] receipts/07-config-applied.json: required field 'prev'
[PASS   ] receipts/07-config-applied.json: required field 'time'
[PASS   ] receipts/07-config-applied.json: required field 'coverage'
[PASS   ] receipts/07-config-applied.json: required field 'emission'
[PASS   ] receipts/07-config-applied.json: required field 'anchor'
[PASS   ] receipts/07-config-applied.json: required field 'instrument'
[PASS   ] receipts/07-config-applied.json: required field 'inputs'
[PASS   ] receipts/07-config-applied.json: required field 'outputs'
[PASS   ] receipts/07-config-applied.json: required field 'assertions'
[PASS   ] receipts/07-config-applied.json: required field 'outcome'
[PASS   ] receipts/07-config-applied.json: time.started carries its zone
[PASS   ] receipts/07-config-applied.json: time.ended carries its zone
[PASS   ] receipts/07-config-applied.json: instrument is named and pinned
[PASS   ] receipts/07-config-applied.json: inputs/receipt:proposal declares a trust class
[PASS   ] receipts/07-config-applied.json: inputs/proposal.json declares a trust class
[PASS   ] receipts/07-config-applied.json: outputs/auth.json declares a trust class
[PASS   ] receipts/07-config-applied.json: outcome class is one of ['error', 'ok', 'refused']
[PASS   ] receipts/07-config-applied.json: coverage declares completeness
[PASS   ] receipts/07-config-applied.json: 'complete' is consistent with the stage lists
[PASS   ] receipts/07-config-applied.json: anchor state is declared, not absent
[NOT-RUN] receipts/07-config-applied.json: originality -- record is declared unanchored; this verifier can establish consistency, not originality
[PASS   ] receipts/07-config-applied.json: digest matches the manifest
[PASS   ] receipts/07-config-applied.json: chain link
[PASS   ] receipts/07-config-applied.json: output artifact 'auth.json' matches

What could not be checked

  • Each declared step left a receipt, as the receipts themselves state.

  • This record held under the checks that ran. It has not been anchored, so it cannot be shown to be the record that was made — here is what anchoring would add.

    Anchored, it would read: this record existed by a stated date and hasn't changed since — checkable against an independent anchor.

The run, step by step