This answer's trail was checked on — each check that ran held.
Held under the checks that ran; not anchored, so it can't be shown to be the record that was made.
Repeat the check
Run it from the run's folder:
onetrace-verify --trust trust.json MANIFEST.json
What the evidence establishes
Each rung is a separate question, with its own evidence.
Records agree
Yes · 84 checks made — all hold.
Signed by a known recorder
Yes · demo key (public seed: proves the record wasn't changed since signing, not who signed it) · sha256:6e20550ae0dc…sha256:6e20550ae0dc6b4471d54336d09d74d14f3f623b735045eddd053c444ec3b14c
Nothing declared is missing
Yes · Each declared step left a receipt, as the receipts themselves state.
Ran as approved
a straight-line run: there is no plan to compare
Re-runnable stages reproduced
Not checked · No re-check from the record was run, so this page does not say whether anything comes out the same.
Action authorized, effect confirmed
No records · This console does not record authorization.
Committed by a known time
Not anchored · no anchor beside the chain
None of these says the run's output or action was correct.
{"anchor":{"reason":"a demo record; anchoring is not part of this demo","state":"unanchored"},"assertions":{"constants":{"data":"invented example data"}},"coverage":{"boundaries":[],"completeness":"incomplete","declared_stages":["measure","classify","reject_command"],"emitting_stages":["measure"]},"digest_source":"emitter","emission":{"gaps":[],"policy":"fail-closed"},"format":"stage-receipt/0.3","inputs":[{"bytes":"150","digest":"sha256:e939844ba95e5365ceea1d57a4549ffa4b432ea3ceb0e7b4b531874d4d9b050f","media_type":"application/json","name":"frame.json","trust_class":"externally-sourced"}],"instrument":{"config_digest":"sha256:459d3946e4eede9afd932cd4a4dc6d89adbaaa148aef5c47d3943dbd9a05516d","id":"fill-level-camera","kind":"measurement","manifest_digest":"sha256:1699f98ac5cde3962ce813773ab07f795fe38fef851d097a4ace9534c6016016","rederivable":"true","version":"1.0.0"},"outcome":{"class":"ok"},"outputs":[{"bytes":"23","digest":"sha256:58a840841536a4d6b93bf193fcf4872de93d264a076ce71fed8bb59a892442a9","media_type":"application/json","name":"level.json","trust_class":"operator-authored"}],"prev":null,"run_id":"p6-36-fill-baseline","stage":{"index":"1","name":"measure"},"time":{"ended":"2026-10-25T12:52:10.182+00:00","started":"2026-10-25T12:52:10.179+00:00"}}
The check's own words
[PASS ] receipts/01-measure.json: receipt format
[PASS ] receipts/01-measure.json: bytes are canonical
[PASS ] receipts/01-measure.json: required field 'format'
[PASS ] receipts/01-measure.json: required field 'run_id'
[PASS ] receipts/01-measure.json: required field 'stage'
[PASS ] receipts/01-measure.json: required field 'prev'
[PASS ] receipts/01-measure.json: required field 'time'
[PASS ] receipts/01-measure.json: required field 'coverage'
[PASS ] receipts/01-measure.json: required field 'emission'
[PASS ] receipts/01-measure.json: required field 'anchor'
[PASS ] receipts/01-measure.json: required field 'instrument'
[PASS ] receipts/01-measure.json: required field 'inputs'
[PASS ] receipts/01-measure.json: required field 'outputs'
[PASS ] receipts/01-measure.json: required field 'assertions'
[PASS ] receipts/01-measure.json: required field 'outcome'
[PASS ] receipts/01-measure.json: time.started carries its zone
[PASS ] receipts/01-measure.json: time.ended carries its zone
[PASS ] receipts/01-measure.json: instrument is named and pinned
[PASS ] receipts/01-measure.json: inputs/frame.json declares a trust class
[PASS ] receipts/01-measure.json: outputs/level.json declares a trust class
[PASS ] receipts/01-measure.json: assertions name their constants
[PASS ] receipts/01-measure.json: outcome class is one of ['error', 'ok', 'refused']
[PASS ] receipts/01-measure.json: coverage declares completeness
[PASS ] receipts/01-measure.json: anchor state is declared, not absent
[NOT-RUN] receipts/01-measure.json: originality -- record is declared unanchored; this verifier can establish consistency, not originality
[PASS ] receipts/01-measure.json: digest matches the manifest
[PASS ] receipts/01-measure.json: chain link
[PASS ] receipts/01-measure.json: output artifact 'level.json' matches
{"anchor":{"reason":"a demo record; anchoring is not part of this demo","state":"unanchored"},"assertions":{},"coverage":{"boundaries":[],"completeness":"incomplete","declared_stages":["measure","classify","reject_command"],"emitting_stages":["measure","classify"]},"digest_source":"emitter","emission":{"gaps":[],"policy":"fail-closed"},"format":"stage-receipt/0.3","inputs":[{"bytes":"1273","digest":"sha256:7ffa3ff72064c790ac46f51bcc58be392802286ad9b93b1064eb0a4ef22173f6","media_type":"application/json","name":"receipt:measure","trust_class":"operator-authored"},{"bytes":"23","digest":"sha256:58a840841536a4d6b93bf193fcf4872de93d264a076ce71fed8bb59a892442a9","media_type":"application/json","name":"level.json","trust_class":"operator-authored"}],"instrument":{"config_digest":"sha256:54f99d592ea3332584b19c3e8419a3ef0b0bc0ec1629c8010c375b151d55aeaa","id":"fill-classifier","kind":"rule","manifest_digest":"sha256:1699f98ac5cde3962ce813773ab07f795fe38fef851d097a4ace9534c6016016","rederivable":"true","version":"1.0.0"},"outcome":{"class":"ok"},"outputs":[{"bytes":"17","digest":"sha256:96d76c7af1675073cf95e0f4b26015864dda6f761d129b5d79875d1cef4d475e","media_type":"application/json","name":"result.json","trust_class":"operator-authored"}],"prev":"sha256:7ffa3ff72064c790ac46f51bcc58be392802286ad9b93b1064eb0a4ef22173f6","run_id":"p6-36-fill-baseline","stage":{"index":"2","name":"classify"},"time":{"ended":"2026-10-25T12:52:10.192+00:00","started":"2026-10-25T12:52:10.190+00:00"}}
The check's own words
[PASS ] receipts/02-classify.json: receipt format
[PASS ] receipts/02-classify.json: bytes are canonical
[PASS ] receipts/02-classify.json: required field 'format'
[PASS ] receipts/02-classify.json: required field 'run_id'
[PASS ] receipts/02-classify.json: required field 'stage'
[PASS ] receipts/02-classify.json: required field 'prev'
[PASS ] receipts/02-classify.json: required field 'time'
[PASS ] receipts/02-classify.json: required field 'coverage'
[PASS ] receipts/02-classify.json: required field 'emission'
[PASS ] receipts/02-classify.json: required field 'anchor'
[PASS ] receipts/02-classify.json: required field 'instrument'
[PASS ] receipts/02-classify.json: required field 'inputs'
[PASS ] receipts/02-classify.json: required field 'outputs'
[PASS ] receipts/02-classify.json: required field 'assertions'
[PASS ] receipts/02-classify.json: required field 'outcome'
[PASS ] receipts/02-classify.json: time.started carries its zone
[PASS ] receipts/02-classify.json: time.ended carries its zone
[PASS ] receipts/02-classify.json: instrument is named and pinned
[PASS ] receipts/02-classify.json: inputs/receipt:measure declares a trust class
[PASS ] receipts/02-classify.json: inputs/level.json declares a trust class
[PASS ] receipts/02-classify.json: outputs/result.json declares a trust class
[PASS ] receipts/02-classify.json: outcome class is one of ['error', 'ok', 'refused']
[PASS ] receipts/02-classify.json: coverage declares completeness
[PASS ] receipts/02-classify.json: anchor state is declared, not absent
[NOT-RUN] receipts/02-classify.json: originality -- record is declared unanchored; this verifier can establish consistency, not originality
[PASS ] receipts/02-classify.json: digest matches the manifest
[PASS ] receipts/02-classify.json: chain link
[PASS ] receipts/02-classify.json: output artifact 'result.json' matches
{"anchor":{"reason":"a demo record; anchoring is not part of this demo","state":"unanchored"},"assertions":{},"coverage":{"boundaries":[],"completeness":"complete","declared_stages":["measure","classify","reject_command"],"emitting_stages":["measure","classify","reject_command"]},"digest_source":"emitter","emission":{"gaps":[],"policy":"fail-closed"},"format":"stage-receipt/0.3","inputs":[{"bytes":"1491","digest":"sha256:7a9c0319d43ebdc8f7fc3b9872598c7baadea829c0eacd4900db529803d0c2c7","media_type":"application/json","name":"receipt:classify","trust_class":"operator-authored"},{"bytes":"17","digest":"sha256:96d76c7af1675073cf95e0f4b26015864dda6f761d129b5d79875d1cef4d475e","media_type":"application/json","name":"result.json","trust_class":"operator-authored"}],"instrument":{"config_digest":"sha256:a8fa134fadca99291aaf02979c163617578efed377ca524c960e15bd7b158f30","id":"reject-gate","kind":"command-recorder","manifest_digest":"sha256:1699f98ac5cde3962ce813773ab07f795fe38fef851d097a4ace9534c6016016","rederivable":"true","version":"1.0.0"},"outcome":{"class":"ok"},"outputs":[{"bytes":"18","digest":"sha256:9576c16cd17d5a59d9200c0fe43fcbe16d637108452d44a4239ec9513f70f791","media_type":"application/json","name":"command.json","trust_class":"operator-authored"}],"prev":"sha256:7a9c0319d43ebdc8f7fc3b9872598c7baadea829c0eacd4900db529803d0c2c7","run_id":"p6-36-fill-baseline","stage":{"index":"3","name":"reject_command"},"time":{"ended":"2026-10-25T12:52:10.200+00:00","started":"2026-10-25T12:52:10.198+00:00"}}
The check's own words
[PASS ] receipts/03-reject-command.json: receipt format
[PASS ] receipts/03-reject-command.json: bytes are canonical
[PASS ] receipts/03-reject-command.json: required field 'format'
[PASS ] receipts/03-reject-command.json: required field 'run_id'
[PASS ] receipts/03-reject-command.json: required field 'stage'
[PASS ] receipts/03-reject-command.json: required field 'prev'
[PASS ] receipts/03-reject-command.json: required field 'time'
[PASS ] receipts/03-reject-command.json: required field 'coverage'
[PASS ] receipts/03-reject-command.json: required field 'emission'
[PASS ] receipts/03-reject-command.json: required field 'anchor'
[PASS ] receipts/03-reject-command.json: required field 'instrument'
[PASS ] receipts/03-reject-command.json: required field 'inputs'
[PASS ] receipts/03-reject-command.json: required field 'outputs'
[PASS ] receipts/03-reject-command.json: required field 'assertions'
[PASS ] receipts/03-reject-command.json: required field 'outcome'
[PASS ] receipts/03-reject-command.json: time.started carries its zone
[PASS ] receipts/03-reject-command.json: time.ended carries its zone
[PASS ] receipts/03-reject-command.json: instrument is named and pinned
[PASS ] receipts/03-reject-command.json: inputs/receipt:classify declares a trust class
[PASS ] receipts/03-reject-command.json: inputs/result.json declares a trust class
[PASS ] receipts/03-reject-command.json: outputs/command.json declares a trust class
[PASS ] receipts/03-reject-command.json: outcome class is one of ['error', 'ok', 'refused']
[PASS ] receipts/03-reject-command.json: coverage declares completeness
[PASS ] receipts/03-reject-command.json: 'complete' is consistent with the stage lists
[PASS ] receipts/03-reject-command.json: anchor state is declared, not absent
[NOT-RUN] receipts/03-reject-command.json: originality -- record is declared unanchored; this verifier can establish consistency, not originality
[PASS ] receipts/03-reject-command.json: digest matches the manifest
[PASS ] receipts/03-reject-command.json: chain link
[PASS ] receipts/03-reject-command.json: output artifact 'command.json' matches
Where it changed
No comparison with another run was made, so this page does not say where anything changed.
What could be re-checked
No re-check from the record was run, so this page does not say whether anything comes out the same.
This record shows what was verified and evaluated at the time — not what was ultimately true.