Runs / p3-27-t-1-rules2 · P3 / Receipt
The run receipt
Records agree: yes · 143 of 148 checks · Signed: Yes · Anchored: Not anchored
| Run | p3-27-t-1-rules2 · b5461c9ac8b2 |
|---|---|
| Format | stage-receipt-chain/0.3 |
| Stages | 5 of 5 declared stages |
| The graph | 5 nodes · 5 links · [PASS ] edges conform to declared_edges· [PASS ] edges equal the edges derived from the receipts |
| Chain head | sha256:cfab49ce08bd…sha256:cfab49ce08bdc7f9e6a9c4a56387aa4106ffc24b2b9e0fab718c1669fee273c7 |
| Output files | 5 of 5 present and matching their receipts |
| Model stages | none declared |
| Authorization | no authorization records |
| Recorded | → · the record does not say which onetrace version made it |
| Signature | Yes · demo key (public seed: proves the record wasn't changed since signing, not who signed it)· sha256:6e20550ae0dc…sha256:6e20550ae0dc6b4471d54336d09d74d14f3f623b735045eddd053c444ec3b14c |
| Anchor | Not anchored · no anchor beside the chain |
View JSON
{"anchor":{"reason":"a demo record; anchoring is not part of this demo","state":"unanchored"},"chain":[{"digest":"sha256:ebecf9158302c928e9b9efe57ee410bfc901ab53c328bc0fcd051979b553dcaf","file":"receipts/01-intake.json","index":"1","stage":"intake"},{"digest":"sha256:f639a32e49d920f50222a1877b5996a11144f97ea7302c5884f3f8d81784ada2","file":"receipts/02-classify.json","index":"2","stage":"classify"},{"digest":"sha256:c9766e68b16a9cfeb8e022eb05e794f1a73a8cf1e2f1a0daca13e45ca3eaf5c4","file":"receipts/03-lookup-account.json","index":"3","stage":"lookup_account"},{"digest":"sha256:4c974e037dc41db08e17ae5b3bdc5564fa342954ee1e44276d11e7871b8cd4dd","file":"receipts/04-draft-reply.json","index":"4","stage":"draft_reply"},{"digest":"sha256:cfab49ce08bdc7f9e6a9c4a56387aa4106ffc24b2b9e0fab718c1669fee273c7","file":"receipts/05-route.json","index":"5","stage":"route"}],"chain_head":"sha256:cfab49ce08bdc7f9e6a9c4a56387aa4106ffc24b2b9e0fab718c1669fee273c7","declared_edges":[{"from":"intake","to":"classify"},{"from":"intake","to":"lookup_account"},{"from":"classify","to":"draft_reply"},{"from":"lookup_account","to":"draft_reply"},{"from":"draft_reply","to":"route"}],"edges":[{"from":"intake","to":"classify"},{"from":"intake","to":"lookup_account"},{"from":"classify","to":"draft_reply"},{"from":"lookup_account","to":"draft_reply"},{"from":"draft_reply","to":"route"}],"format":"stage-receipt-chain/0.3","outputs_kept":"all","run_id":"p3-27-t-1-rules2","run_id_source":"caller"}Check it yourself
Download this run's record, unpack it, and in its folder run:
pip install "onetrace-verify[crypto]"
onetrace-verify --require-artifacts --trust trust.json .trust.json is the signing keys you trust, each with your label for it, in the onetrace-trust/0.1 format: {"format": "onetrace-trust/0.1", "keys": [{"key_id": "...", "label": "..."}]}
Kept inputs aren't included in this public console's downloads: removing them is supported, and the run still verifies without them.
The check makes no network calls and needs no account.
What the check printed
This console's own run of the verifier over the stored record, at : onetrace-verify --trust trust.json MANIFEST.json, exit 0. File paths are shortened to their names; the output is as it wrote it, a row longer than the page shows cut with the count of what is left out.
[PASS ] receipts/01-intake.json: receipt format [PASS ] receipts/01-intake.json: bytes are canonical [PASS ] receipts/01-intake.json: required field 'format' [PASS ] receipts/01-intake.json: required field 'run_id' [PASS ] receipts/01-intake.json: required field 'stage' [PASS ] receipts/01-intake.json: required field 'prev' [PASS ] receipts/01-intake.json: required field 'time' [PASS ] receipts/01-intake.json: required field 'coverage' [PASS ] receipts/01-intake.json: required field 'emission' [PASS ] receipts/01-intake.json: required field 'anchor' [PASS ] receipts/01-intake.json: required field 'instrument' [PASS ] receipts/01-intake.json: required field 'inputs' [PASS ] receipts/01-intake.json: required field 'outputs' [PASS ] receipts/01-intake.json: required field 'assertions' [PASS ] receipts/01-intake.json: required field 'outcome' [PASS ] receipts/01-intake.json: time.started carries its zone [PASS ] receipts/01-intake.json: time.ended carries its zone [PASS ] receipts/01-intake.json: instrument is named and pinned [PASS ] receipts/01-intake.json: inputs/ticket declares a trust class [PASS ] receipts/01-intake.json: outputs/ticket.json declares a trust class [PASS ] receipts/01-intake.json: outcome class is one of ['error', 'ok', 'refused'] [PASS ] receipts/01-intake.json: coverage declares completeness [PASS ] receipts/01-intake.json: anchor state is declared, not absent [NOT-RUN] receipts/01-intake.json: originality -- record is declared unanchored; this verifier can establish consistency, not originality [PASS ] receipts/01-intake.json: digest matches the manifest [PASS ] receipts/01-intake.json: chain link [PASS ] receipts/01-intake.json: output artifact 'ticket.json' matches [PASS ] receipts/02-classify.json: receipt format [PASS ] receipts/02-classify.json: bytes are canonical [PASS ] receipts/02-classify.json: required field 'format' [PASS ] receipts/02-classify.json: required field 'run_id' [PASS ] receipts/02-classify.json: required field 'stage' [PASS ] receipts/02-classify.json: required field 'prev' [PASS ] receipts/02-classify.json: required field 'time' [PASS ] receipts/02-classify.json: required field 'coverage' [PASS ] receipts/02-classify.json: required field 'emission' [PASS ] receipts/02-classify.json: required field 'anchor' [PASS ] receipts/02-classify.json: required field 'instrument' [PASS ] receipts/02-classify.json: required field 'inputs' [PASS ] receipts/02-classify.json: required field 'outputs' [PASS ] receipts/02-classify.json: required field 'assertions' [PASS ] receipts/02-classify.json: required field 'outcome' [PASS ] receipts/02-classify.json: time.started carries its zone [PASS ] receipts/02-classify.json: time.ended carries its zone [PASS ] receipts/02-classify.json: instrument is named and pinned [PASS ] receipts/02-classify.json: inputs/receipt:intake declares a trust class [PASS ] receipts/02-classify.json: inputs/ticket.json declares a trust class [PASS ] receipts/02-classify.json: outputs/class.json declares a trust class [PASS ] receipts/02-classify.json: assertions name their constants [PASS ] receipts/02-classify.json: outcome class is one of ['error', 'ok', 'refused'] [PASS ] receipts/02-classify.json: coverage declares completeness [PASS ] receipts/02-classify.json: anchor state is declared, not absent [NOT-RUN] receipts/02-classify.json: originality -- record is declared unanchored; this verifier can establish consistency, not originality [PASS ] receipts/02-classify.json: digest matches the manifest [PASS ] receipts/02-classify.json: chain link [PASS ] receipts/02-classify.json: output artifact 'class.json' matches [PASS ] receipts/03-lookup-account.json: receipt format [PASS ] receipts/03-lookup-account.json: bytes are canonical [PASS ] receipts/03-lookup-account.json: required field 'format' [PASS ] receipts/03-lookup-account.json: required field 'run_id' [PASS ] receipts/03-lookup-account.json: required field 'stage' [PASS ] receipts/03-lookup-account.json: required field 'prev' [PASS ] receipts/03-lookup-account.json: required field 'time' [PASS ] receipts/03-lookup-account.json: required field 'coverage' [PASS ] receipts/03-lookup-account.json: required field 'emission' [PASS ] receipts/03-lookup-account.json: required field 'anchor' [PASS ] receipts/03-lookup-account.json: required field 'instrument' [PASS ] receipts/03-lookup-account.json: required field 'inputs' [PASS ] receipts/03-lookup-account.json: required field 'outputs' [PASS ] receipts/03-lookup-account.json: required field 'assertions' [PASS ] receipts/03-lookup-account.json: required field 'outcome' [PASS ] receipts/03-lookup-account.json: time.started carries its zone [PASS ] receipts/03-lookup-account.json: time.ended carries its zone [PASS ] receipts/03-lookup-account.json: instrument is named and pinned [PASS ] receipts/03-lookup-account.json: inputs/receipt:intake declares a trust class [PASS ] receipts/03-lookup-account.json: inputs/ticket.json declares a trust class [PASS ] receipts/03-lookup-account.json: inputs/accounts declares a trust class [PASS ] receipts/03-lookup-account.json: outputs/account.json declares a trust class [PASS ] receipts/03-lookup-account.json: outcome class is one of ['error', 'ok', 'refused'] [PASS ] receipts/03-lookup-account.json: coverage declares completeness [PASS ] receipts/03-lookup-account.json: anchor state is declared, not absent [NOT-RUN] receipts/03-lookup-account.json: originality -- record is declared unanchored; this verifier can establish consistency, not originality [PASS ] receipts/03-lookup-account.json: digest matches the manifest [PASS ] receipts/03-lookup-account.json: chain link [PASS ] receipts/03-lookup-account.json: output artifact 'account.json' matches [PASS ] receipts/04-draft-reply.json: receipt format [PASS ] receipts/04-draft-reply.json: bytes are canonical [PASS ] receipts/04-draft-reply.json: required field 'format' [PASS ] receipts/04-draft-reply.json: required field 'run_id' [PASS ] receipts/04-draft-reply.json: required field 'stage' [PASS ] receipts/04-draft-reply.json: required field 'prev' [PASS ] receipts/04-draft-reply.json: required field 'time' [PASS ] receipts/04-draft-reply.json: required field 'coverage' [PASS ] receipts/04-draft-reply.json: required field 'emission' [PASS ] receipts/04-draft-reply.json: required field 'anchor' [PASS ] receipts/04-draft-reply.json: required field 'instrument' [PASS ] receipts/04-draft-reply.json: required field 'inputs' [PASS ] receipts/04-draft-reply.json: required field 'outputs' [PASS ] receipts/04-draft-reply.json: required field 'assertions' [PASS ] receipts/04-draft-reply.json: required field 'outcome' [PASS ] receipts/04-draft-reply.json: time.started carries its zone [PASS ] receipts/04-draft-reply.json: time.ended carries its zone [PASS ] receipts/04-draft-reply.json: instrument is named and pinned [PASS ] receipts/04-draft-reply.json: inputs/receipt:classify declares a trust class [PASS ] receipts/04-draft-reply.json: inputs/receipt:lookup_account declares a trust class [PASS ] receipts/04-draft-reply.json: inputs/class.json declares a trust class [PASS ] receipts/04-draft-reply.json: inputs/account.json declares a trust class [PASS ] receipts/04-draft-reply.json: outputs/reply.json declares a trust class [PASS ] receipts/04-draft-reply.json: outcome class is one of ['error', 'ok', 'refused'] [PASS ] receipts/04-draft-reply.json: coverage declares completeness [PASS ] receipts/04-draft-reply.json: anchor state is declared, not absent [NOT-RUN] receipts/04-draft-reply.json: originality -- record is declared unanchored; this verifier can establish consistency, not originality [PASS ] receipts/04-draft-reply.json: digest matches the manifest [PASS ] receipts/04-draft-reply.json: chain link [PASS ] receipts/04-draft-reply.json: output artifact 'reply.json' matches [PASS ] receipts/05-route.json: receipt format [PASS ] receipts/05-route.json: bytes are canonical [PASS ] receipts/05-route.json: required field 'format' [PASS ] receipts/05-route.json: required field 'run_id' [PASS ] receipts/05-route.json: required field 'stage' [PASS ] receipts/05-route.json: required field 'prev' [PASS ] receipts/05-route.json: required field 'time' [PASS ] receipts/05-route.json: required field 'coverage' [PASS ] receipts/05-route.json: required field 'emission' [PASS ] receipts/05-route.json: required field 'anchor' [PASS ] receipts/05-route.json: required field 'instrument' [PASS ] receipts/05-route.json: required field 'inputs' [PASS ] receipts/05-route.json: required field 'outputs' [PASS ] receipts/05-route.json: required field 'assertions' [PASS ] receipts/05-route.json: required field 'outcome' [PASS ] receipts/05-route.json: time.started carries its zone [PASS ] receipts/05-route.json: time.ended carries its zone [PASS ] receipts/05-route.json: instrument is named and pinned [PASS ] receipts/05-route.json: inputs/receipt:draft_reply declares a trust class [PASS ] receipts/05-route.json: inputs/reply.json declares a trust class [PASS ] receipts/05-route.json: outputs/route.json declares a trust class [PASS ] receipts/05-route.json: outcome class is one of ['error', 'ok', 'refused'] [PASS ] receipts/05-route.json: coverage declares completeness [PASS ] receipts/05-route.json: 'complete' is consistent with the stage lists [PASS ] receipts/05-route.json: anchor state is declared, not absent [NOT-RUN] receipts/05-route.json: originality -- record is declared unanchored; this verifier can establish consistency, not originality [PASS ] receipts/05-route.json: digest matches the manifest [PASS ] receipts/05-route.json: chain link [PASS ] receipts/05-route.json: output artifact 'route.json' matches [PASS ] manifest: chain head matches the last receipt [PASS ] edges conform to declared_edges [PASS ] edges equal the edges derived from the receipts [PASS ] signatures/1.json: signature -- signed by demo key (public seed: proves the record wasn't changed since signing, not who signed it) (sha256:6e20550ae0dc6b4471d54336d09d74d14f3f623b735045eddd053c444ec3b14c) 143 pass, 0 fail, 5 not-run -> PASS a signature does not show: that the key wasn't stolen or misused; that the run's output is correct; when the record was signed (an anchor's job); who the person behind the key is (the trust list connects a key to a name)
What this receipt does not say
- that the output or the action was correct
- why the model wrote what it wrote
- that the signing key wasn't misused (your trust list is what ties a key to a name)
- that the run was correct at the anchored time (the anchor shows only that the record existed by then)