Case

The run, step by step

demo-run-1

The case

Run
demo-run-1
ran
→
What it was for
request → context → tests → model → proposal → config applied
This answer's trail was checked on — each check that ran held.

Held under the checks that ran; not anchored, so it can't be shown to be the record that was made.

Repeat the check

Run it from the run's folder:

onetrace-verify --trust /srv/onetrace-demo/trust.json MANIFEST.json

What the evidence establishes

Each rung is a separate question, with its own evidence.

Records agreeYes · 202 checks made — all hold.
Signed by a known recorderYes · test key (demo) · sha256:311dc2859bb2dfcfa2c94184b682fff3f535ec4c8867c1437a29123b4c626777
Nothing declared is missingYes · Each declared step left a receipt, as the receipts themselves state.
Ran as approvedYes · the check's plan row and its edges row both passed, and the run itself verified
Re-runnable stages reproducedNot checked · No re-check from the record was run, so this page does not say whether anything comes out the same.
Action authorized, effect confirmedNo records · This console does not record authorization.
Committed by a known timeNo · not anchored

None of these says the run's output or action was correct.

The execution graph

requestrequestcontextcontexttests ×2tests ×2modelmodelproposalproposalconfig appliedconfig applied
tests ×2
Show as table
NodeStageRecorded position
requestrequest1
contextcontext2
tests (1st)tests3
tests (2nd)tests4
modelmodel5
proposalproposal6
config appliedconfig applied7
FromTo
contextmodel
modelproposal
proposalconfig applied
requestcontext
requestmodel
requesttests (1st)
requesttests (2nd)
tests (2nd)model

A link shows which recorded output a stage read. It does not by itself prove that one stage caused the next.

Recorded order

What happened, in the order the receipts give

Held under the checks that ran; not anchored, so none of these steps can be shown to be the record that was made.

StepWhenWhat was checked and what was notOutcome
request
step 1 of 7
 →

Checked — it holds.

Completed.
context
step 2 of 7
 →

Checked — it holds.

Completed.
tests
step 3 of 7
 →

Checked — it holds.

failed — TimeoutError: set by the demo to show a retry: the first attempt raises this instead of running; nothing timed out
tests
step 4 of 7
 →

Checked — it holds.

Completed.
model
step 5 of 7
 →

Checked — it holds.

Completed.
proposal
step 6 of 7
 →

Checked — it holds.

Completed.
config applied
step 7 of 7
 →

Checked — it holds.

Completed.
Receipt · step 1 of 7 · request
step 1 of 7

request

What went in
nothing
What came out
request.json · 46 bytes
When
→

Completed.

Ran as task-intake, version 1.0.0.

Receipt · step 1 of 7 · request
Version
task-intake · 1.0.0
What went in
nothing
What came out
request.json · 46 bytes
sha256:115c9e98fbcd0aa3de1410e9445a6b1067ce7baf7a3d031d13ba892be27396f0
Fingerprint
sha256:1d99e89fc99c93266ee58baa89a66b385c634e4c6882ab2f050e04af902dbdc8
Settings it ran with
{
 "clock": "set by the demo; the times in this record were not read from a clock"
}
The receipt, exactly as recorded
{"anchor":{"reason":"a demo record; anchoring is not part of this demo","state":"unanchored"},"assertions":{"constants":{"clock":"set by the demo; the times in this record were not read from a clock"}},"coverage":{"boundaries":[],"completeness":"incomplete","declared_stages":["request","context","tests","model","proposal","config applied"],"emitting_stages":["request"]},"digest_source":"emitter","emission":{"gaps":[],"policy":"fail-closed"},"format":"stage-receipt/0.2","inputs":[],"instrument":{"config_digest":"sha256:a716f9231f7813d63e8499ab3576bcf8ef5f6afcc60028ce249888e72beedd85","id":"task-intake","kind":"reader","manifest_digest":"sha256:45b3ab543fa4cce1cd66108096ad26577bb7e30a8ff9edb8fea7b992bfe6f854","rederivable":"true","version":"1.0.0"},"outcome":{"class":"ok"},"outputs":[{"bytes":"46","digest":"sha256:115c9e98fbcd0aa3de1410e9445a6b1067ce7baf7a3d031d13ba892be27396f0","media_type":"application/json","name":"request.json","trust_class":"operator-authored"}],"prev":null,"run_id":"demo-run-1","stage":{"index":"1","name":"request"},"time":{"ended":"2026-09-28T10:00:01.000+00:00","started":"2026-09-28T10:00:00.000+00:00"}}
The check's own words
[PASS   ] receipts/01-request.json: receipt format
[PASS   ] receipts/01-request.json: bytes are canonical
[PASS   ] receipts/01-request.json: required field 'format'
[PASS   ] receipts/01-request.json: required field 'run_id'
[PASS   ] receipts/01-request.json: required field 'stage'
[PASS   ] receipts/01-request.json: required field 'prev'
[PASS   ] receipts/01-request.json: required field 'time'
[PASS   ] receipts/01-request.json: required field 'coverage'
[PASS   ] receipts/01-request.json: required field 'emission'
[PASS   ] receipts/01-request.json: required field 'anchor'
[PASS   ] receipts/01-request.json: required field 'instrument'
[PASS   ] receipts/01-request.json: required field 'inputs'
[PASS   ] receipts/01-request.json: required field 'outputs'
[PASS   ] receipts/01-request.json: required field 'assertions'
[PASS   ] receipts/01-request.json: required field 'outcome'
[PASS   ] receipts/01-request.json: time.started carries its zone
[PASS   ] receipts/01-request.json: time.ended carries its zone
[PASS   ] receipts/01-request.json: instrument is named and pinned
[PASS   ] receipts/01-request.json: outputs/request.json declares a trust class
[PASS   ] receipts/01-request.json: assertions name their constants
[PASS   ] receipts/01-request.json: outcome class is one of ['error', 'ok', 'refused']
[PASS   ] receipts/01-request.json: coverage declares completeness
[PASS   ] receipts/01-request.json: anchor state is declared, not absent
[NOT-RUN] receipts/01-request.json: originality -- record is declared unanchored; this verifier can establish consistency, not originality
[PASS   ] receipts/01-request.json: digest matches the manifest
[PASS   ] receipts/01-request.json: chain link
[PASS   ] receipts/01-request.json: output artifact 'request.json' matches
Receipt · step 2 of 7 · context
step 2 of 7

context

What went in
receipt:request · 1144 bytes
request.json · 46 bytes
documents · 228 bytes
What came out
context.json · 231 bytes
When
→

Completed.

Ran as doc-search, version 1.0.0.

Receipt · step 2 of 7 · context
Version
doc-search · 1.0.0
What went in
receipt:request · 1144 bytes
sha256:1d99e89fc99c93266ee58baa89a66b385c634e4c6882ab2f050e04af902dbdc8
request.json · 46 bytes
sha256:115c9e98fbcd0aa3de1410e9445a6b1067ce7baf7a3d031d13ba892be27396f0
documents · 228 bytes
sha256:31e77846aec6e30def74fa234350d5f54c66e7a49ed8b4ad9284474c7ba9e7d3
What came out
context.json · 231 bytes
sha256:ed036ce42f2a83cc55b5519bee55508bb56b0277f10612d82b89fe71db84f230
Fingerprint
sha256:3a911ce67d1fb01f460b7e720bc1b42f01d55ca208566631780a17032fde9873
Settings it ran with
{
 "top_k": "3"
}
The receipt, exactly as recorded
{"anchor":{"reason":"a demo record; anchoring is not part of this demo","state":"unanchored"},"assertions":{"constants":{"top_k":"3"}},"coverage":{"boundaries":[],"completeness":"incomplete","declared_stages":["request","context","tests","model","proposal","config applied"],"emitting_stages":["request","context"]},"digest_source":"emitter","emission":{"gaps":[],"policy":"fail-closed"},"format":"stage-receipt/0.2","inputs":[{"bytes":"1144","digest":"sha256:1d99e89fc99c93266ee58baa89a66b385c634e4c6882ab2f050e04af902dbdc8","media_type":"application/json","name":"receipt:request","trust_class":"operator-authored"},{"bytes":"46","digest":"sha256:115c9e98fbcd0aa3de1410e9445a6b1067ce7baf7a3d031d13ba892be27396f0","media_type":"application/json","name":"request.json","trust_class":"operator-authored"},{"bytes":"228","digest":"sha256:31e77846aec6e30def74fa234350d5f54c66e7a49ed8b4ad9284474c7ba9e7d3","media_type":"application/json","name":"documents","trust_class":"operator-authored"}],"instrument":{"config_digest":"sha256:41b2a714a3ed2cb5918719c654bd2461e211320890ed06a2ba62cf51aaed79b3","id":"doc-search","kind":"retriever","manifest_digest":"sha256:45b3ab543fa4cce1cd66108096ad26577bb7e30a8ff9edb8fea7b992bfe6f854","rederivable":"true","version":"1.0.0"},"outcome":{"class":"ok"},"outputs":[{"bytes":"231","digest":"sha256:ed036ce42f2a83cc55b5519bee55508bb56b0277f10612d82b89fe71db84f230","media_type":"application/json","name":"context.json","trust_class":"operator-authored"}],"prev":"sha256:1d99e89fc99c93266ee58baa89a66b385c634e4c6882ab2f050e04af902dbdc8","run_id":"demo-run-1","stage":{"index":"2","name":"context"},"time":{"ended":"2026-09-28T10:00:03.000+00:00","started":"2026-09-28T10:00:02.000+00:00"}}
The check's own words
[PASS   ] receipts/02-context.json: receipt format
[PASS   ] receipts/02-context.json: bytes are canonical
[PASS   ] receipts/02-context.json: required field 'format'
[PASS   ] receipts/02-context.json: required field 'run_id'
[PASS   ] receipts/02-context.json: required field 'stage'
[PASS   ] receipts/02-context.json: required field 'prev'
[PASS   ] receipts/02-context.json: required field 'time'
[PASS   ] receipts/02-context.json: required field 'coverage'
[PASS   ] receipts/02-context.json: required field 'emission'
[PASS   ] receipts/02-context.json: required field 'anchor'
[PASS   ] receipts/02-context.json: required field 'instrument'
[PASS   ] receipts/02-context.json: required field 'inputs'
[PASS   ] receipts/02-context.json: required field 'outputs'
[PASS   ] receipts/02-context.json: required field 'assertions'
[PASS   ] receipts/02-context.json: required field 'outcome'
[PASS   ] receipts/02-context.json: time.started carries its zone
[PASS   ] receipts/02-context.json: time.ended carries its zone
[PASS   ] receipts/02-context.json: instrument is named and pinned
[PASS   ] receipts/02-context.json: inputs/receipt:request declares a trust class
[PASS   ] receipts/02-context.json: inputs/request.json declares a trust class
[PASS   ] receipts/02-context.json: inputs/documents declares a trust class
[PASS   ] receipts/02-context.json: outputs/context.json declares a trust class
[PASS   ] receipts/02-context.json: assertions name their constants
[PASS   ] receipts/02-context.json: outcome class is one of ['error', 'ok', 'refused']
[PASS   ] receipts/02-context.json: coverage declares completeness
[PASS   ] receipts/02-context.json: anchor state is declared, not absent
[NOT-RUN] receipts/02-context.json: originality -- record is declared unanchored; this verifier can establish consistency, not originality
[PASS   ] receipts/02-context.json: digest matches the manifest
[PASS   ] receipts/02-context.json: chain link
[PASS   ] receipts/02-context.json: output artifact 'context.json' matches
Receipt · step 3 of 7 · tests
step 3 of 7

tests

What went in
receipt:request · 1144 bytes
request.json · 46 bytes
What came out
nothing
When
→

Failed — TimeoutError: set by the demo to show a retry: the first attempt raises this instead of running; nothing timed out, reported by test-runner.

Ran as test-runner, version 2.4.0.

Receipt · step 3 of 7 · tests
Version
test-runner · 2.4.0
What went in
receipt:request · 1144 bytes
sha256:1d99e89fc99c93266ee58baa89a66b385c634e4c6882ab2f050e04af902dbdc8
request.json · 46 bytes
sha256:115c9e98fbcd0aa3de1410e9445a6b1067ce7baf7a3d031d13ba892be27396f0
What came out
nothing
Fingerprint
sha256:7f260d88d6a0b4994b533f1c2529bdeff6a53a4e6908441b7b49180900feaf8b
Settings it ran with
{
 "attempt": "1"
}
The receipt, exactly as recorded
{"anchor":{"reason":"a demo record; anchoring is not part of this demo","state":"unanchored"},"assertions":{"constants":{"attempt":"1"}},"coverage":{"boundaries":[],"completeness":"incomplete","declared_stages":["request","context","tests","model","proposal","config applied"],"emitting_stages":["request","context","tests"]},"digest_source":"emitter","emission":{"gaps":[],"policy":"fail-closed"},"format":"stage-receipt/0.2","inputs":[{"bytes":"1144","digest":"sha256:1d99e89fc99c93266ee58baa89a66b385c634e4c6882ab2f050e04af902dbdc8","media_type":"application/json","name":"receipt:request","trust_class":"operator-authored"},{"bytes":"46","digest":"sha256:115c9e98fbcd0aa3de1410e9445a6b1067ce7baf7a3d031d13ba892be27396f0","media_type":"application/json","name":"request.json","trust_class":"operator-authored"}],"instrument":{"config_digest":"sha256:b6ce29b790f5b0cac5791ffe27fd33af31088dffa62e608c4281bf5b7683b7a7","id":"test-runner","kind":"tool","manifest_digest":"sha256:45b3ab543fa4cce1cd66108096ad26577bb7e30a8ff9edb8fea7b992bfe6f854","rederivable":"true","version":"2.4.0"},"outcome":{"body":"set by the demo to show a retry: the first attempt raises this instead of running; nothing timed out","class":"error","origin":"test-runner","status":"TimeoutError"},"outputs":[],"prev":"sha256:3a911ce67d1fb01f460b7e720bc1b42f01d55ca208566631780a17032fde9873","run_id":"demo-run-1","stage":{"index":"3","instance":"1","name":"tests"},"time":{"ended":"2026-09-28T10:00:05.000+00:00","started":"2026-09-28T10:00:04.000+00:00"}}
The check's own words
[PASS   ] receipts/03-tests_1.json: receipt format
[PASS   ] receipts/03-tests_1.json: bytes are canonical
[PASS   ] receipts/03-tests_1.json: required field 'format'
[PASS   ] receipts/03-tests_1.json: required field 'run_id'
[PASS   ] receipts/03-tests_1.json: required field 'stage'
[PASS   ] receipts/03-tests_1.json: required field 'prev'
[PASS   ] receipts/03-tests_1.json: required field 'time'
[PASS   ] receipts/03-tests_1.json: required field 'coverage'
[PASS   ] receipts/03-tests_1.json: required field 'emission'
[PASS   ] receipts/03-tests_1.json: required field 'anchor'
[PASS   ] receipts/03-tests_1.json: required field 'instrument'
[PASS   ] receipts/03-tests_1.json: required field 'inputs'
[PASS   ] receipts/03-tests_1.json: required field 'outputs'
[PASS   ] receipts/03-tests_1.json: required field 'assertions'
[PASS   ] receipts/03-tests_1.json: required field 'outcome'
[PASS   ] receipts/03-tests_1.json: time.started carries its zone
[PASS   ] receipts/03-tests_1.json: time.ended carries its zone
[PASS   ] receipts/03-tests_1.json: instrument is named and pinned
[PASS   ] receipts/03-tests_1.json: inputs/receipt:request declares a trust class
[PASS   ] receipts/03-tests_1.json: inputs/request.json declares a trust class
[PASS   ] receipts/03-tests_1.json: assertions name their constants
[PASS   ] receipts/03-tests_1.json: outcome class is one of ['error', 'ok', 'refused']
[PASS   ] receipts/03-tests_1.json: error carries status, body and origin
[PASS   ] receipts/03-tests_1.json: coverage declares completeness
[PASS   ] receipts/03-tests_1.json: anchor state is declared, not absent
[NOT-RUN] receipts/03-tests_1.json: originality -- record is declared unanchored; this verifier can establish consistency, not originality
[PASS   ] receipts/03-tests_1.json: digest matches the manifest
[PASS   ] receipts/03-tests_1.json: chain link
Receipt · step 4 of 7 · tests
step 4 of 7

tests

What went in
receipt:request · 1144 bytes
request.json · 46 bytes
results · 192 bytes
What came out
test-results.json · 182 bytes
When
→

Completed.

Ran as test-runner, version 2.4.0.

Receipt · step 4 of 7 · tests
Version
test-runner · 2.4.0
What went in
receipt:request · 1144 bytes
sha256:1d99e89fc99c93266ee58baa89a66b385c634e4c6882ab2f050e04af902dbdc8
request.json · 46 bytes
sha256:115c9e98fbcd0aa3de1410e9445a6b1067ce7baf7a3d031d13ba892be27396f0
results · 192 bytes
sha256:c749bc9104500a0199716938598a26b9e0ebfb0c163f428c4b1dec8de2c5de73
What came out
test-results.json · 182 bytes
sha256:f516ca3671f472e9bb2492a90312396c02d3d7116d8a6838d72e6ec78bc35a66
Fingerprint
sha256:f3e376b07e2313b9724d56d89dd8ed4eb7ba4e796ce56696f5e20a47955b8395
Settings it ran with
{
 "attempt": "2",
 "suite": "auth"
}
The receipt, exactly as recorded
{"anchor":{"reason":"a demo record; anchoring is not part of this demo","state":"unanchored"},"assertions":{"constants":{"attempt":"2","suite":"auth"},"failed":"4"},"coverage":{"boundaries":[],"completeness":"incomplete","declared_stages":["request","context","tests","model","proposal","config applied"],"emitting_stages":["request","context","tests"]},"digest_source":"emitter","emission":{"gaps":[],"policy":"fail-closed"},"format":"stage-receipt/0.2","inputs":[{"bytes":"1144","digest":"sha256:1d99e89fc99c93266ee58baa89a66b385c634e4c6882ab2f050e04af902dbdc8","media_type":"application/json","name":"receipt:request","trust_class":"operator-authored"},{"bytes":"46","digest":"sha256:115c9e98fbcd0aa3de1410e9445a6b1067ce7baf7a3d031d13ba892be27396f0","media_type":"application/json","name":"request.json","trust_class":"operator-authored"},{"bytes":"192","digest":"sha256:c749bc9104500a0199716938598a26b9e0ebfb0c163f428c4b1dec8de2c5de73","media_type":"application/json","name":"results","trust_class":"operator-authored"}],"instrument":{"config_digest":"sha256:b6ce29b790f5b0cac5791ffe27fd33af31088dffa62e608c4281bf5b7683b7a7","id":"test-runner","kind":"tool","manifest_digest":"sha256:45b3ab543fa4cce1cd66108096ad26577bb7e30a8ff9edb8fea7b992bfe6f854","rederivable":"true","version":"2.4.0"},"outcome":{"class":"ok"},"outputs":[{"bytes":"182","digest":"sha256:f516ca3671f472e9bb2492a90312396c02d3d7116d8a6838d72e6ec78bc35a66","media_type":"application/json","name":"test-results.json","trust_class":"operator-authored"}],"prev":"sha256:7f260d88d6a0b4994b533f1c2529bdeff6a53a4e6908441b7b49180900feaf8b","run_id":"demo-run-1","stage":{"index":"4","instance":"2","name":"tests"},"time":{"ended":"2026-09-28T10:00:07.000+00:00","started":"2026-09-28T10:00:06.000+00:00"}}
The check's own words
[PASS   ] receipts/04-tests_2.json: receipt format
[PASS   ] receipts/04-tests_2.json: bytes are canonical
[PASS   ] receipts/04-tests_2.json: required field 'format'
[PASS   ] receipts/04-tests_2.json: required field 'run_id'
[PASS   ] receipts/04-tests_2.json: required field 'stage'
[PASS   ] receipts/04-tests_2.json: required field 'prev'
[PASS   ] receipts/04-tests_2.json: required field 'time'
[PASS   ] receipts/04-tests_2.json: required field 'coverage'
[PASS   ] receipts/04-tests_2.json: required field 'emission'
[PASS   ] receipts/04-tests_2.json: required field 'anchor'
[PASS   ] receipts/04-tests_2.json: required field 'instrument'
[PASS   ] receipts/04-tests_2.json: required field 'inputs'
[PASS   ] receipts/04-tests_2.json: required field 'outputs'
[PASS   ] receipts/04-tests_2.json: required field 'assertions'
[PASS   ] receipts/04-tests_2.json: required field 'outcome'
[PASS   ] receipts/04-tests_2.json: time.started carries its zone
[PASS   ] receipts/04-tests_2.json: time.ended carries its zone
[PASS   ] receipts/04-tests_2.json: instrument is named and pinned
[PASS   ] receipts/04-tests_2.json: inputs/receipt:request declares a trust class
[PASS   ] receipts/04-tests_2.json: inputs/request.json declares a trust class
[PASS   ] receipts/04-tests_2.json: inputs/results declares a trust class
[PASS   ] receipts/04-tests_2.json: outputs/test-results.json declares a trust class
[PASS   ] receipts/04-tests_2.json: assertions name their constants
[PASS   ] receipts/04-tests_2.json: outcome class is one of ['error', 'ok', 'refused']
[PASS   ] receipts/04-tests_2.json: coverage declares completeness
[PASS   ] receipts/04-tests_2.json: anchor state is declared, not absent
[NOT-RUN] receipts/04-tests_2.json: originality -- record is declared unanchored; this verifier can establish consistency, not originality
[PASS   ] receipts/04-tests_2.json: digest matches the manifest
[PASS   ] receipts/04-tests_2.json: chain link
[PASS   ] receipts/04-tests_2.json: output artifact 'test-results.json' matches
Receipt · step 5 of 7 · model
step 5 of 7

model

What went in
receipt:request · 1144 bytes
receipt:context · 1719 bytes
receipt:tests#2 · 1769 bytes
request.json · 46 bytes
context.json · 231 bytes
test-results.json · 182 bytes
What came out
model-output.json · 187 bytes
When
→

Completed.

The model step is recorded, not replayable.

Ran as stand-in-model, version 1.0.0.

Receipt · step 5 of 7 · model
Version
stand-in-model · 1.0.0
What went in
receipt:request · 1144 bytes
sha256:1d99e89fc99c93266ee58baa89a66b385c634e4c6882ab2f050e04af902dbdc8
receipt:context · 1719 bytes
sha256:3a911ce67d1fb01f460b7e720bc1b42f01d55ca208566631780a17032fde9873
receipt:tests#2 · 1769 bytes
sha256:f3e376b07e2313b9724d56d89dd8ed4eb7ba4e796ce56696f5e20a47955b8395
request.json · 46 bytes
sha256:115c9e98fbcd0aa3de1410e9445a6b1067ce7baf7a3d031d13ba892be27396f0
context.json · 231 bytes
sha256:ed036ce42f2a83cc55b5519bee55508bb56b0277f10612d82b89fe71db84f230
test-results.json · 182 bytes
sha256:f516ca3671f472e9bb2492a90312396c02d3d7116d8a6838d72e6ec78bc35a66
What came out
model-output.json · 187 bytes
sha256:30e8e872af1f6b280289f66b3ddb9c033edcd19f90cadd2542f4546b905b41af
Fingerprint
sha256:2c606f5e6021f91dcb96c0496452a7174582ef0dda9b1ef73fcf0d20e4bf6f8f
Settings it ran with
{
 "seed": "42"
}
The receipt, exactly as recorded
{"anchor":{"reason":"a demo record; anchoring is not part of this demo","state":"unanchored"},"assertions":{"constants":{"seed":"42"}},"coverage":{"boundaries":[],"completeness":"incomplete","declared_stages":["request","context","tests","model","proposal","config applied"],"emitting_stages":["request","context","tests","model"]},"digest_source":"emitter","emission":{"gaps":[],"policy":"fail-closed"},"format":"stage-receipt/0.2","inputs":[{"bytes":"1144","digest":"sha256:1d99e89fc99c93266ee58baa89a66b385c634e4c6882ab2f050e04af902dbdc8","media_type":"application/json","name":"receipt:request","trust_class":"operator-authored"},{"bytes":"1719","digest":"sha256:3a911ce67d1fb01f460b7e720bc1b42f01d55ca208566631780a17032fde9873","media_type":"application/json","name":"receipt:context","trust_class":"operator-authored"},{"bytes":"1769","digest":"sha256:f3e376b07e2313b9724d56d89dd8ed4eb7ba4e796ce56696f5e20a47955b8395","media_type":"application/json","name":"receipt:tests#2","trust_class":"operator-authored"},{"bytes":"46","digest":"sha256:115c9e98fbcd0aa3de1410e9445a6b1067ce7baf7a3d031d13ba892be27396f0","media_type":"application/json","name":"request.json","trust_class":"operator-authored"},{"bytes":"231","digest":"sha256:ed036ce42f2a83cc55b5519bee55508bb56b0277f10612d82b89fe71db84f230","media_type":"application/json","name":"context.json","trust_class":"operator-authored"},{"bytes":"182","digest":"sha256:f516ca3671f472e9bb2492a90312396c02d3d7116d8a6838d72e6ec78bc35a66","media_type":"application/json","name":"test-results.json","trust_class":"operator-authored"}],"instrument":{"config_digest":"sha256:a125ee0261f9a07bf3f58e1baba061c3a111d63624a66ddef6e1fa0477009a27","id":"stand-in-model","kind":"generator","manifest_digest":"sha256:45b3ab543fa4cce1cd66108096ad26577bb7e30a8ff9edb8fea7b992bfe6f854","rederivable":"false","rederivable_note":"a sampled model call: its output is recorded, not replayed","version":"1.0.0"},"outcome":{"class":"ok"},"outputs":[{"bytes":"187","digest":"sha256:30e8e872af1f6b280289f66b3ddb9c033edcd19f90cadd2542f4546b905b41af","media_type":"application/json","name":"model-output.json","trust_class":"operator-authored"}],"prev":"sha256:f3e376b07e2313b9724d56d89dd8ed4eb7ba4e796ce56696f5e20a47955b8395","run_id":"demo-run-1","stage":{"index":"5","name":"model"},"time":{"ended":"2026-09-28T10:00:09.000+00:00","started":"2026-09-28T10:00:08.000+00:00"}}
The check's own words
[PASS   ] receipts/05-model.json: receipt format
[PASS   ] receipts/05-model.json: bytes are canonical
[PASS   ] receipts/05-model.json: required field 'format'
[PASS   ] receipts/05-model.json: required field 'run_id'
[PASS   ] receipts/05-model.json: required field 'stage'
[PASS   ] receipts/05-model.json: required field 'prev'
[PASS   ] receipts/05-model.json: required field 'time'
[PASS   ] receipts/05-model.json: required field 'coverage'
[PASS   ] receipts/05-model.json: required field 'emission'
[PASS   ] receipts/05-model.json: required field 'anchor'
[PASS   ] receipts/05-model.json: required field 'instrument'
[PASS   ] receipts/05-model.json: required field 'inputs'
[PASS   ] receipts/05-model.json: required field 'outputs'
[PASS   ] receipts/05-model.json: required field 'assertions'
[PASS   ] receipts/05-model.json: required field 'outcome'
[PASS   ] receipts/05-model.json: time.started carries its zone
[PASS   ] receipts/05-model.json: time.ended carries its zone
[PASS   ] receipts/05-model.json: instrument is named and pinned
[PASS   ] receipts/05-model.json: inputs/receipt:request declares a trust class
[PASS   ] receipts/05-model.json: inputs/receipt:context declares a trust class
[PASS   ] receipts/05-model.json: inputs/receipt:tests#2 declares a trust class
[PASS   ] receipts/05-model.json: inputs/request.json declares a trust class
[PASS   ] receipts/05-model.json: inputs/context.json declares a trust class
[PASS   ] receipts/05-model.json: inputs/test-results.json declares a trust class
[PASS   ] receipts/05-model.json: outputs/model-output.json declares a trust class
[PASS   ] receipts/05-model.json: assertions name their constants
[PASS   ] receipts/05-model.json: outcome class is one of ['error', 'ok', 'refused']
[PASS   ] receipts/05-model.json: coverage declares completeness
[PASS   ] receipts/05-model.json: anchor state is declared, not absent
[NOT-RUN] receipts/05-model.json: originality -- record is declared unanchored; this verifier can establish consistency, not originality
[PASS   ] receipts/05-model.json: digest matches the manifest
[PASS   ] receipts/05-model.json: chain link
[PASS   ] receipts/05-model.json: output artifact 'model-output.json' matches
Receipt · step 6 of 7 · proposal
step 6 of 7

proposal

What went in
receipt:model · 2400 bytes
model-output.json · 187 bytes
What came out
proposal.json · 84 bytes
When
→

Completed.

Ran as action-parser, version 1.0.0.

Receipt · step 6 of 7 · proposal
Version
action-parser · 1.0.0
What went in
receipt:model · 2400 bytes
sha256:2c606f5e6021f91dcb96c0496452a7174582ef0dda9b1ef73fcf0d20e4bf6f8f
model-output.json · 187 bytes
sha256:30e8e872af1f6b280289f66b3ddb9c033edcd19f90cadd2542f4546b905b41af
What came out
proposal.json · 84 bytes
sha256:37520e6db342615223d1d5a0e3395bc6b3395ed1cbdaa5f054d9544bc6ffa3f8
Fingerprint
sha256:f126be6bc88c7bb1bb612bf9dfa533f078ae45bd0ead7cae32e7a2860db00e34
Settings it ran with
{}
The receipt, exactly as recorded
{"anchor":{"reason":"a demo record; anchoring is not part of this demo","state":"unanchored"},"assertions":{},"coverage":{"boundaries":[],"completeness":"incomplete","declared_stages":["request","context","tests","model","proposal","config applied"],"emitting_stages":["request","context","tests","model","proposal"]},"digest_source":"emitter","emission":{"gaps":[],"policy":"fail-closed"},"format":"stage-receipt/0.2","inputs":[{"bytes":"2400","digest":"sha256:2c606f5e6021f91dcb96c0496452a7174582ef0dda9b1ef73fcf0d20e4bf6f8f","media_type":"application/json","name":"receipt:model","trust_class":"operator-authored"},{"bytes":"187","digest":"sha256:30e8e872af1f6b280289f66b3ddb9c033edcd19f90cadd2542f4546b905b41af","media_type":"application/json","name":"model-output.json","trust_class":"operator-authored"}],"instrument":{"config_digest":"sha256:6c32b25ddfcd07e8bcadde61d592dc1f57b09a24cc079e6387af6dfb3e4e8456","id":"action-parser","kind":"parser","manifest_digest":"sha256:45b3ab543fa4cce1cd66108096ad26577bb7e30a8ff9edb8fea7b992bfe6f854","rederivable":"true","version":"1.0.0"},"outcome":{"class":"ok"},"outputs":[{"bytes":"84","digest":"sha256:37520e6db342615223d1d5a0e3395bc6b3395ed1cbdaa5f054d9544bc6ffa3f8","media_type":"application/json","name":"proposal.json","trust_class":"operator-authored"}],"prev":"sha256:2c606f5e6021f91dcb96c0496452a7174582ef0dda9b1ef73fcf0d20e4bf6f8f","run_id":"demo-run-1","stage":{"index":"6","name":"proposal"},"time":{"ended":"2026-09-28T10:00:11.000+00:00","started":"2026-09-28T10:00:10.000+00:00"}}
The check's own words
[PASS   ] receipts/06-proposal.json: receipt format
[PASS   ] receipts/06-proposal.json: bytes are canonical
[PASS   ] receipts/06-proposal.json: required field 'format'
[PASS   ] receipts/06-proposal.json: required field 'run_id'
[PASS   ] receipts/06-proposal.json: required field 'stage'
[PASS   ] receipts/06-proposal.json: required field 'prev'
[PASS   ] receipts/06-proposal.json: required field 'time'
[PASS   ] receipts/06-proposal.json: required field 'coverage'
[PASS   ] receipts/06-proposal.json: required field 'emission'
[PASS   ] receipts/06-proposal.json: required field 'anchor'
[PASS   ] receipts/06-proposal.json: required field 'instrument'
[PASS   ] receipts/06-proposal.json: required field 'inputs'
[PASS   ] receipts/06-proposal.json: required field 'outputs'
[PASS   ] receipts/06-proposal.json: required field 'assertions'
[PASS   ] receipts/06-proposal.json: required field 'outcome'
[PASS   ] receipts/06-proposal.json: time.started carries its zone
[PASS   ] receipts/06-proposal.json: time.ended carries its zone
[PASS   ] receipts/06-proposal.json: instrument is named and pinned
[PASS   ] receipts/06-proposal.json: inputs/receipt:model declares a trust class
[PASS   ] receipts/06-proposal.json: inputs/model-output.json declares a trust class
[PASS   ] receipts/06-proposal.json: outputs/proposal.json declares a trust class
[PASS   ] receipts/06-proposal.json: outcome class is one of ['error', 'ok', 'refused']
[PASS   ] receipts/06-proposal.json: coverage declares completeness
[PASS   ] receipts/06-proposal.json: anchor state is declared, not absent
[NOT-RUN] receipts/06-proposal.json: originality -- record is declared unanchored; this verifier can establish consistency, not originality
[PASS   ] receipts/06-proposal.json: digest matches the manifest
[PASS   ] receipts/06-proposal.json: chain link
[PASS   ] receipts/06-proposal.json: output artifact 'proposal.json' matches
Receipt · step 7 of 7 · config applied
step 7 of 7

config applied

What went in
receipt:proposal · 1542 bytes
proposal.json · 84 bytes
What came out
auth.json · 25 bytes
When
→

Completed.

Ran as config-writer, version 1.2.0.

Receipt · step 7 of 7 · config applied
Version
config-writer · 1.2.0
What went in
receipt:proposal · 1542 bytes
sha256:f126be6bc88c7bb1bb612bf9dfa533f078ae45bd0ead7cae32e7a2860db00e34
proposal.json · 84 bytes
sha256:37520e6db342615223d1d5a0e3395bc6b3395ed1cbdaa5f054d9544bc6ffa3f8
What came out
auth.json · 25 bytes
sha256:9132b844bfbb589de0a46a831ff8865264caa0493b8c10fd17a7f0622a4ab652
Fingerprint
sha256:5285298283dbfaffc8efc0c3a07bd8641a8781e9742ce8cc54024535a8272eb2
Settings it ran with
{}
The receipt, exactly as recorded
{"anchor":{"reason":"a demo record; anchoring is not part of this demo","state":"unanchored"},"assertions":{},"coverage":{"boundaries":[],"completeness":"complete","declared_stages":["request","context","tests","model","proposal","config applied"],"emitting_stages":["request","context","tests","model","proposal","config applied"]},"digest_source":"emitter","emission":{"gaps":[],"policy":"fail-closed"},"format":"stage-receipt/0.2","inputs":[{"bytes":"1542","digest":"sha256:f126be6bc88c7bb1bb612bf9dfa533f078ae45bd0ead7cae32e7a2860db00e34","media_type":"application/json","name":"receipt:proposal","trust_class":"operator-authored"},{"bytes":"84","digest":"sha256:37520e6db342615223d1d5a0e3395bc6b3395ed1cbdaa5f054d9544bc6ffa3f8","media_type":"application/json","name":"proposal.json","trust_class":"operator-authored"}],"instrument":{"config_digest":"sha256:4cf2bb94cb556cc07db470fc80186d87755477bab765d84c86f56c9c9a2623af","id":"config-writer","kind":"tool","manifest_digest":"sha256:45b3ab543fa4cce1cd66108096ad26577bb7e30a8ff9edb8fea7b992bfe6f854","rederivable":"true","version":"1.2.0"},"outcome":{"class":"ok"},"outputs":[{"bytes":"25","digest":"sha256:9132b844bfbb589de0a46a831ff8865264caa0493b8c10fd17a7f0622a4ab652","media_type":"application/json","name":"auth.json","trust_class":"operator-authored"}],"prev":"sha256:f126be6bc88c7bb1bb612bf9dfa533f078ae45bd0ead7cae32e7a2860db00e34","run_id":"demo-run-1","stage":{"index":"7","name":"config applied"},"time":{"ended":"2026-09-28T10:00:13.000+00:00","started":"2026-09-28T10:00:12.000+00:00"}}
The check's own words
[PASS   ] receipts/07-config-applied.json: receipt format
[PASS   ] receipts/07-config-applied.json: bytes are canonical
[PASS   ] receipts/07-config-applied.json: required field 'format'
[PASS   ] receipts/07-config-applied.json: required field 'run_id'
[PASS   ] receipts/07-config-applied.json: required field 'stage'
[PASS   ] receipts/07-config-applied.json: required field 'prev'
[PASS   ] receipts/07-config-applied.json: required field 'time'
[PASS   ] receipts/07-config-applied.json: required field 'coverage'
[PASS   ] receipts/07-config-applied.json: required field 'emission'
[PASS   ] receipts/07-config-applied.json: required field 'anchor'
[PASS   ] receipts/07-config-applied.json: required field 'instrument'
[PASS   ] receipts/07-config-applied.json: required field 'inputs'
[PASS   ] receipts/07-config-applied.json: required field 'outputs'
[PASS   ] receipts/07-config-applied.json: required field 'assertions'
[PASS   ] receipts/07-config-applied.json: required field 'outcome'
[PASS   ] receipts/07-config-applied.json: time.started carries its zone
[PASS   ] receipts/07-config-applied.json: time.ended carries its zone
[PASS   ] receipts/07-config-applied.json: instrument is named and pinned
[PASS   ] receipts/07-config-applied.json: inputs/receipt:proposal declares a trust class
[PASS   ] receipts/07-config-applied.json: inputs/proposal.json declares a trust class
[PASS   ] receipts/07-config-applied.json: outputs/auth.json declares a trust class
[PASS   ] receipts/07-config-applied.json: outcome class is one of ['error', 'ok', 'refused']
[PASS   ] receipts/07-config-applied.json: coverage declares completeness
[PASS   ] receipts/07-config-applied.json: 'complete' is consistent with the stage lists
[PASS   ] receipts/07-config-applied.json: anchor state is declared, not absent
[NOT-RUN] receipts/07-config-applied.json: originality -- record is declared unanchored; this verifier can establish consistency, not originality
[PASS   ] receipts/07-config-applied.json: digest matches the manifest
[PASS   ] receipts/07-config-applied.json: chain link
[PASS   ] receipts/07-config-applied.json: output artifact 'auth.json' matches

Where it changed

No comparison with another run was made, so this page does not say where anything changed.

What could be re-checked

No re-check from the record was run, so this page does not say whether anything comes out the same.

What was checked and what was not

Checked

  • step 1 of 7 · request — 26 checks made — all hold.
  • step 2 of 7 · context — 29 checks made — all hold.
  • step 3 of 7 · tests — 27 checks made — all hold.
  • step 4 of 7 · tests — 29 checks made — all hold.
  • step 5 of 7 · model — 32 checks made — all hold.
  • step 6 of 7 · proposal — 27 checks made — all hold.
  • step 7 of 7 · config applied — 28 checks made — all hold.
  • The list of steps — 1 check made — it holds.

Not checked

  • Every step — Held under the checks that ran; not anchored, so none of these steps can be shown to be the record that was made.
The check's own words

These words were read as text, because the machine-readable report was not there. That is the fallback, and it is the only thing on this page that was read that way.

[PASS   ] receipts/01-request.json: receipt format
[PASS   ] receipts/01-request.json: bytes are canonical
[PASS   ] receipts/01-request.json: required field 'format'
[PASS   ] receipts/01-request.json: required field 'run_id'
[PASS   ] receipts/01-request.json: required field 'stage'
[PASS   ] receipts/01-request.json: required field 'prev'
[PASS   ] receipts/01-request.json: required field 'time'
[PASS   ] receipts/01-request.json: required field 'coverage'
[PASS   ] receipts/01-request.json: required field 'emission'
[PASS   ] receipts/01-request.json: required field 'anchor'
[PASS   ] receipts/01-request.json: required field 'instrument'
[PASS   ] receipts/01-request.json: required field 'inputs'
[PASS   ] receipts/01-request.json: required field 'outputs'
[PASS   ] receipts/01-request.json: required field 'assertions'
[PASS   ] receipts/01-request.json: required field 'outcome'
[PASS   ] receipts/01-request.json: time.started carries its zone
[PASS   ] receipts/01-request.json: time.ended carries its zone
[PASS   ] receipts/01-request.json: instrument is named and pinned
[PASS   ] receipts/01-request.json: outputs/request.json declares a trust class
[PASS   ] receipts/01-request.json: assertions name their constants
[PASS   ] receipts/01-request.json: outcome class is one of ['error', 'ok', 'refused']
[PASS   ] receipts/01-request.json: coverage declares completeness
[PASS   ] receipts/01-request.json: anchor state is declared, not absent
[NOT-RUN] receipts/01-request.json: originality -- record is declared unanchored; this verifier can establish consistency, not originality
[PASS   ] receipts/01-request.json: digest matches the manifest
[PASS   ] receipts/01-request.json: chain link
[PASS   ] receipts/01-request.json: output artifact 'request.json' matches
[PASS   ] receipts/02-context.json: receipt format
[PASS   ] receipts/02-context.json: bytes are canonical
[PASS   ] receipts/02-context.json: required field 'format'
[PASS   ] receipts/02-context.json: required field 'run_id'
[PASS   ] receipts/02-context.json: required field 'stage'
[PASS   ] receipts/02-context.json: required field 'prev'
[PASS   ] receipts/02-context.json: required field 'time'
[PASS   ] receipts/02-context.json: required field 'coverage'
[PASS   ] receipts/02-context.json: required field 'emission'
[PASS   ] receipts/02-context.json: required field 'anchor'
[PASS   ] receipts/02-context.json: required field 'instrument'
[PASS   ] receipts/02-context.json: required field 'inputs'
[PASS   ] receipts/02-context.json: required field 'outputs'
[PASS   ] receipts/02-context.json: required field 'assertions'
[PASS   ] receipts/02-context.json: required field 'outcome'
[PASS   ] receipts/02-context.json: time.started carries its zone
[PASS   ] receipts/02-context.json: time.ended carries its zone
[PASS   ] receipts/02-context.json: instrument is named and pinned
[PASS   ] receipts/02-context.json: inputs/receipt:request declares a trust class
[PASS   ] receipts/02-context.json: inputs/request.json declares a trust class
[PASS   ] receipts/02-context.json: inputs/documents declares a trust class
[PASS   ] receipts/02-context.json: outputs/context.json declares a trust class
[PASS   ] receipts/02-context.json: assertions name their constants
[PASS   ] receipts/02-context.json: outcome class is one of ['error', 'ok', 'refused']
[PASS   ] receipts/02-context.json: coverage declares completeness
[PASS   ] receipts/02-context.json: anchor state is declared, not absent
[NOT-RUN] receipts/02-context.json: originality -- record is declared unanchored; this verifier can establish consistency, not originality
[PASS   ] receipts/02-context.json: digest matches the manifest
[PASS   ] receipts/02-context.json: chain link
[PASS   ] receipts/02-context.json: output artifact 'context.json' matches
[PASS   ] receipts/03-tests_1.json: receipt format
[PASS   ] receipts/03-tests_1.json: bytes are canonical
[PASS   ] receipts/03-tests_1.json: required field 'format'
[PASS   ] receipts/03-tests_1.json: required field 'run_id'
[PASS   ] receipts/03-tests_1.json: required field 'stage'
[PASS   ] receipts/03-tests_1.json: required field 'prev'
[PASS   ] receipts/03-tests_1.json: required field 'time'
[PASS   ] receipts/03-tests_1.json: required field 'coverage'
[PASS   ] receipts/03-tests_1.json: required field 'emission'
[PASS   ] receipts/03-tests_1.json: required field 'anchor'
[PASS   ] receipts/03-tests_1.json: required field 'instrument'
[PASS   ] receipts/03-tests_1.json: required field 'inputs'
[PASS   ] receipts/03-tests_1.json: required field 'outputs'
[PASS   ] receipts/03-tests_1.json: required field 'assertions'
[PASS   ] receipts/03-tests_1.json: required field 'outcome'
[PASS   ] receipts/03-tests_1.json: time.started carries its zone
[PASS   ] receipts/03-tests_1.json: time.ended carries its zone
[PASS   ] receipts/03-tests_1.json: instrument is named and pinned
[PASS   ] receipts/03-tests_1.json: inputs/receipt:request declares a trust class
[PASS   ] receipts/03-tests_1.json: inputs/request.json declares a trust class
[PASS   ] receipts/03-tests_1.json: assertions name their constants
[PASS   ] receipts/03-tests_1.json: outcome class is one of ['error', 'ok', 'refused']
[PASS   ] receipts/03-tests_1.json: error carries status, body and origin
[PASS   ] receipts/03-tests_1.json: coverage declares completeness
[PASS   ] receipts/03-tests_1.json: anchor state is declared, not absent
[NOT-RUN] receipts/03-tests_1.json: originality -- record is declared unanchored; this verifier can establish consistency, not originality
[PASS   ] receipts/03-tests_1.json: digest matches the manifest
[PASS   ] receipts/03-tests_1.json: chain link
[PASS   ] receipts/04-tests_2.json: receipt format
[PASS   ] receipts/04-tests_2.json: bytes are canonical
[PASS   ] receipts/04-tests_2.json: required field 'format'
[PASS   ] receipts/04-tests_2.json: required field 'run_id'
[PASS   ] receipts/04-tests_2.json: required field 'stage'
[PASS   ] receipts/04-tests_2.json: required field 'prev'
[PASS   ] receipts/04-tests_2.json: required field 'time'
[PASS   ] receipts/04-tests_2.json: required field 'coverage'
[PASS   ] receipts/04-tests_2.json: required field 'emission'
[PASS   ] receipts/04-tests_2.json: required field 'anchor'
[PASS   ] receipts/04-tests_2.json: required field 'instrument'
[PASS   ] receipts/04-tests_2.json: required field 'inputs'
[PASS   ] receipts/04-tests_2.json: required field 'outputs'
[PASS   ] receipts/04-tests_2.json: required field 'assertions'
[PASS   ] receipts/04-tests_2.json: required field 'outcome'
[PASS   ] receipts/04-tests_2.json: time.started carries its zone
[PASS   ] receipts/04-tests_2.json: time.ended carries its zone
[PASS   ] receipts/04-tests_2.json: instrument is named and pinned
[PASS   ] receipts/04-tests_2.json: inputs/receipt:request declares a trust class
[PASS   ] receipts/04-tests_2.json: inputs/request.json declares a trust class
[PASS   ] receipts/04-tests_2.json: inputs/results declares a trust class
[PASS   ] receipts/04-tests_2.json: outputs/test-results.json declares a trust class
[PASS   ] receipts/04-tests_2.json: assertions name their constants
[PASS   ] receipts/04-tests_2.json: outcome class is one of ['error', 'ok', 'refused']
[PASS   ] receipts/04-tests_2.json: coverage declares completeness
[PASS   ] receipts/04-tests_2.json: anchor state is declared, not absent
[NOT-RUN] receipts/04-tests_2.json: originality -- record is declared unanchored; this verifier can establish consistency, not originality
[PASS   ] receipts/04-tests_2.json: digest matches the manifest
[PASS   ] receipts/04-tests_2.json: chain link
[PASS   ] receipts/04-tests_2.json: output artifact 'test-results.json' matches
[PASS   ] receipts/05-model.json: receipt format
[PASS   ] receipts/05-model.json: bytes are canonical
[PASS   ] receipts/05-model.json: required field 'format'
[PASS   ] receipts/05-model.json: required field 'run_id'
[PASS   ] receipts/05-model.json: required field 'stage'
[PASS   ] receipts/05-model.json: required field 'prev'
[PASS   ] receipts/05-model.json: required field 'time'
[PASS   ] receipts/05-model.json: required field 'coverage'
[PASS   ] receipts/05-model.json: required field 'emission'
[PASS   ] receipts/05-model.json: required field 'anchor'
[PASS   ] receipts/05-model.json: required field 'instrument'
[PASS   ] receipts/05-model.json: required field 'inputs'
[PASS   ] receipts/05-model.json: required field 'outputs'
[PASS   ] receipts/05-model.json: required field 'assertions'
[PASS   ] receipts/05-model.json: required field 'outcome'
[PASS   ] receipts/05-model.json: time.started carries its zone
[PASS   ] receipts/05-model.json: time.ended carries its zone
[PASS   ] receipts/05-model.json: instrument is named and pinned
[PASS   ] receipts/05-model.json: inputs/receipt:request declares a trust class
[PASS   ] receipts/05-model.json: inputs/receipt:context declares a trust class
[PASS   ] receipts/05-model.json: inputs/receipt:tests#2 declares a trust class
[PASS   ] receipts/05-model.json: inputs/request.json declares a trust class
[PASS   ] receipts/05-model.json: inputs/context.json declares a trust class
[PASS   ] receipts/05-model.json: inputs/test-results.json declares a trust class
[PASS   ] receipts/05-model.json: outputs/model-output.json declares a trust class
[PASS   ] receipts/05-model.json: assertions name their constants
[PASS   ] receipts/05-model.json: outcome class is one of ['error', 'ok', 'refused']
[PASS   ] receipts/05-model.json: coverage declares completeness
[PASS   ] receipts/05-model.json: anchor state is declared, not absent
[NOT-RUN] receipts/05-model.json: originality -- record is declared unanchored; this verifier can establish consistency, not originality
[PASS   ] receipts/05-model.json: digest matches the manifest
[PASS   ] receipts/05-model.json: chain link
[PASS   ] receipts/05-model.json: output artifact 'model-output.json' matches
[PASS   ] receipts/06-proposal.json: receipt format
[PASS   ] receipts/06-proposal.json: bytes are canonical
[PASS   ] receipts/06-proposal.json: required field 'format'
[PASS   ] receipts/06-proposal.json: required field 'run_id'
[PASS   ] receipts/06-proposal.json: required field 'stage'
[PASS   ] receipts/06-proposal.json: required field 'prev'
[PASS   ] receipts/06-proposal.json: required field 'time'
[PASS   ] receipts/06-proposal.json: required field 'coverage'
[PASS   ] receipts/06-proposal.json: required field 'emission'
[PASS   ] receipts/06-proposal.json: required field 'anchor'
[PASS   ] receipts/06-proposal.json: required field 'instrument'
[PASS   ] receipts/06-proposal.json: required field 'inputs'
[PASS   ] receipts/06-proposal.json: required field 'outputs'
[PASS   ] receipts/06-proposal.json: required field 'assertions'
[PASS   ] receipts/06-proposal.json: required field 'outcome'
[PASS   ] receipts/06-proposal.json: time.started carries its zone
[PASS   ] receipts/06-proposal.json: time.ended carries its zone
[PASS   ] receipts/06-proposal.json: instrument is named and pinned
[PASS   ] receipts/06-proposal.json: inputs/receipt:model declares a trust class
[PASS   ] receipts/06-proposal.json: inputs/model-output.json declares a trust class
[PASS   ] receipts/06-proposal.json: outputs/proposal.json declares a trust class
[PASS   ] receipts/06-proposal.json: outcome class is one of ['error', 'ok', 'refused']
[PASS   ] receipts/06-proposal.json: coverage declares completeness
[PASS   ] receipts/06-proposal.json: anchor state is declared, not absent
[NOT-RUN] receipts/06-proposal.json: originality -- record is declared unanchored; this verifier can establish consistency, not originality
[PASS   ] receipts/06-proposal.json: digest matches the manifest
[PASS   ] receipts/06-proposal.json: chain link
[PASS   ] receipts/06-proposal.json: output artifact 'proposal.json' matches
[PASS   ] receipts/07-config-applied.json: receipt format
[PASS   ] receipts/07-config-applied.json: bytes are canonical
[PASS   ] receipts/07-config-applied.json: required field 'format'
[PASS   ] receipts/07-config-applied.json: required field 'run_id'
[PASS   ] receipts/07-config-applied.json: required field 'stage'
[PASS   ] receipts/07-config-applied.json: required field 'prev'
[PASS   ] receipts/07-config-applied.json: required field 'time'
[PASS   ] receipts/07-config-applied.json: required field 'coverage'
[PASS   ] receipts/07-config-applied.json: required field 'emission'
[PASS   ] receipts/07-config-applied.json: required field 'anchor'
[PASS   ] receipts/07-config-applied.json: required field 'instrument'
[PASS   ] receipts/07-config-applied.json: required field 'inputs'
[PASS   ] receipts/07-config-applied.json: required field 'outputs'
[PASS   ] receipts/07-config-applied.json: required field 'assertions'
[PASS   ] receipts/07-config-applied.json: required field 'outcome'
[PASS   ] receipts/07-config-applied.json: time.started carries its zone
[PASS   ] receipts/07-config-applied.json: time.ended carries its zone
[PASS   ] receipts/07-config-applied.json: instrument is named and pinned
[PASS   ] receipts/07-config-applied.json: inputs/receipt:proposal declares a trust class
[PASS   ] receipts/07-config-applied.json: inputs/proposal.json declares a trust class
[PASS   ] receipts/07-config-applied.json: outputs/auth.json declares a trust class
[PASS   ] receipts/07-config-applied.json: outcome class is one of ['error', 'ok', 'refused']
[PASS   ] receipts/07-config-applied.json: coverage declares completeness
[PASS   ] receipts/07-config-applied.json: 'complete' is consistent with the stage lists
[PASS   ] receipts/07-config-applied.json: anchor state is declared, not absent
[NOT-RUN] receipts/07-config-applied.json: originality -- record is declared unanchored; this verifier can establish consistency, not originality
[PASS   ] receipts/07-config-applied.json: digest matches the manifest
[PASS   ] receipts/07-config-applied.json: chain link
[PASS   ] receipts/07-config-applied.json: output artifact 'auth.json' matches
[PASS   ] manifest: chain head matches the last receipt
[PASS   ] edges conform to declared_edges
[PASS   ] edges equal the edges derived from the receipts
[PASS   ] signatures/1.json: signature -- signed by test key (demo) (sha256:311dc2859bb2dfcfa2c94184b682fff3f535ec4c8867c1437a29123b4c626777) (claimed signer "reference demo")

202 pass, 0 fail, 7 not-run  ->  PASS
a signature does not show: that the key wasn't stolen or misused; that the run's output is correct; when the record was signed (an anchor's job); who the person behind the key is (the trust list connects a key to a name)

Policy

No authorization records for this run.

Authorization

The run receipt

This record shows what was verified and evaluated at the time — not what was ultimately true.

Where this answer came from