Runs / P2 / demo-run-2

demo-run-2 · P2

Changed vs demo-run-1 · first difference at model

6 of 6 declared stages; 1 retry recorded · recorded in the format stage-receipt-chain/0.3 · ran · received by this console

  • Records agree Yes
  • Ran as approved Yes
  • Signed by a known recorder Yes
  • Committed by a known time Not anchored
This answer's trail was checked on — each check that ran held.

Held under the checks that ran; not anchored, so it can't be shown to be the record that was made.

Repeat the check

Run it from the run's folder:

onetrace-verify --trust trust.json MANIFEST.json

The answer

The answer's text is not part of this record package. It is identified by its fingerprint below.

sha256:3e6759062698…sha256:3e6759062698e97f8b327f70aa171643b40440c3953f0667b81e749f0f7fa48a
Receipt · step 5 of 7 · model
Version
stand-in-model · 1.0.0
What went in
receipt:request · 1052 bytes
sha256:18ea3a196340…sha256:18ea3a19634067303caaae8b51a88e110cba592af95abe53d241808fbb636779
receipt:context · 1719 bytes
sha256:617ee694af65…sha256:617ee694af65d622ef7c6d9e6ba4d077bb7d2edd7224be171aeba6fff7a25e2d
receipt:tests#2 · 1769 bytes
sha256:bd6da68e25e3…sha256:bd6da68e25e3ee132e98764133210cf241a0d813fb71803993f2aa3a88407846
request.json · 46 bytes
sha256:115c9e98fbcd…sha256:115c9e98fbcd0aa3de1410e9445a6b1067ce7baf7a3d031d13ba892be27396f0
context.json · 231 bytes
sha256:ed036ce42f2a…sha256:ed036ce42f2a83cc55b5519bee55508bb56b0277f10612d82b89fe71db84f230
test-results.json · 182 bytes
sha256:f516ca3671f4…sha256:f516ca3671f472e9bb2492a90312396c02d3d7116d8a6838d72e6ec78bc35a66
What came out
model-output.json · 184 bytes
sha256:3e6759062698…sha256:3e6759062698e97f8b327f70aa171643b40440c3953f0667b81e749f0f7fa48a
Fingerprint
sha256:3e2bc5db7ad7…sha256:3e2bc5db7ad76f9078852d533fec87609187987513b194bb3f4718f042b16b31
Settings it ran with
{
 "seed": "17"
}
The receipt, exactly as recorded
{"anchor":{"reason":"a demo record; anchoring is not part of this demo","state":"unanchored"},"assertions":{"constants":{"seed":"17"}},"coverage":{"boundaries":[],"completeness":"incomplete","declared_stages":["request","context","tests","model","proposal","config applied"],"emitting_stages":["request","context","tests","model"]},"digest_source":"emitter","emission":{"gaps":[],"policy":"fail-closed"},"format":"stage-receipt/0.3","inputs":[{"bytes":"1052","digest":"sha256:18ea3a19634067303caaae8b51a88e110cba592af95abe53d241808fbb636779","media_type":"application/json","name":"receipt:request","trust_class":"operator-authored"},{"bytes":"1719","digest":"sha256:617ee694af65d622ef7c6d9e6ba4d077bb7d2edd7224be171aeba6fff7a25e2d","media_type":"application/json","name":"receipt:context","trust_class":"operator-authored"},{"bytes":"1769","digest":"sha256:bd6da68e25e3ee132e98764133210cf241a0d813fb71803993f2aa3a88407846","media_type":"application/json","name":"receipt:tests#2","trust_class":"operator-authored"},{"bytes":"46","digest":"sha256:115c9e98fbcd0aa3de1410e9445a6b1067ce7baf7a3d031d13ba892be27396f0","media_type":"application/json","name":"request.json","trust_class":"operator-authored"},{"bytes":"231","digest":"sha256:ed036ce42f2a83cc55b5519bee55508bb56b0277f10612d82b89fe71db84f230","media_type":"application/json","name":"context.json","trust_class":"operator-authored"},{"bytes":"182","digest":"sha256:f516ca3671f472e9bb2492a90312396c02d3d7116d8a6838d72e6ec78bc35a66","media_type":"application/json","name":"test-results.json","trust_class":"operator-authored"}],"instrument":{"config_digest":"sha256:157ee8ba61daebe690746b2142fe14b7afa765cb0e3a9de80063e94b79c8fbf8","id":"stand-in-model","kind":"generator","manifest_digest":"sha256:45b3ab543fa4cce1cd66108096ad26577bb7e30a8ff9edb8fea7b992bfe6f854","rederivable":"false","rederivable_note":"a sampled model call: its output is recorded, not replayed","version":"1.0.0"},"outcome":{"class":"ok"},"outputs":[{"bytes":"184","digest":"sha256:3e6759062698e97f8b327f70aa171643b40440c3953f0667b81e749f0f7fa48a","media_type":"application/json","name":"model-output.json","trust_class":"operator-authored"}],"prev":"sha256:bd6da68e25e3ee132e98764133210cf241a0d813fb71803993f2aa3a88407846","run_id":"demo-run-2","stage":{"index":"5","name":"model"},"time":{"ended":"2026-10-25T12:52:09.122+00:00","started":"2026-10-25T12:52:09.120+00:00"}}
The check's own words
[PASS   ] receipts/05-model.json: receipt format
[PASS   ] receipts/05-model.json: bytes are canonical
[PASS   ] receipts/05-model.json: required field 'format'
[PASS   ] receipts/05-model.json: required field 'run_id'
[PASS   ] receipts/05-model.json: required field 'stage'
[PASS   ] receipts/05-model.json: required field 'prev'
[PASS   ] receipts/05-model.json: required field 'time'
[PASS   ] receipts/05-model.json: required field 'coverage'
[PASS   ] receipts/05-model.json: required field 'emission'
[PASS   ] receipts/05-model.json: required field 'anchor'
[PASS   ] receipts/05-model.json: required field 'instrument'
[PASS   ] receipts/05-model.json: required field 'inputs'
[PASS   ] receipts/05-model.json: required field 'outputs'
[PASS   ] receipts/05-model.json: required field 'assertions'
[PASS   ] receipts/05-model.json: required field 'outcome'
[PASS   ] receipts/05-model.json: time.started carries its zone
[PASS   ] receipts/05-model.json: time.ended carries its zone
[PASS   ] receipts/05-model.json: instrument is named and pinned
[PASS   ] receipts/05-model.json: inputs/receipt:request declares a trust class
[PASS   ] receipts/05-model.json: inputs/receipt:context declares a trust class
[PASS   ] receipts/05-model.json: inputs/receipt:tests#2 declares a trust class
[PASS   ] receipts/05-model.json: inputs/request.json declares a trust class
[PASS   ] receipts/05-model.json: inputs/context.json declares a trust class
[PASS   ] receipts/05-model.json: inputs/test-results.json declares a trust class
[PASS   ] receipts/05-model.json: outputs/model-output.json declares a trust class
[PASS   ] receipts/05-model.json: assertions name their constants
[PASS   ] receipts/05-model.json: outcome class is one of ['error', 'ok', 'refused']
[PASS   ] receipts/05-model.json: coverage declares completeness
[PASS   ] receipts/05-model.json: anchor state is declared, not absent
[NOT-RUN] receipts/05-model.json: originality -- record is declared unanchored; this verifier can establish consistency, not originality
[PASS   ] receipts/05-model.json: digest matches the manifest
[PASS   ] receipts/05-model.json: chain link
[PASS   ] receipts/05-model.json: output artifact 'model-output.json' matches

The trail

step 1 of 7

request

What went in
nothing
What came out
request.json · 46 bytes
When
→

Completed.

Ran as task-intake, version 1.0.0.

Checked — it holds.

Held under the checks that ran; not anchored, so it can't be shown to be the record that was made.

Receipt · step 1 of 7 · request
Version
task-intake · 1.0.0
What went in
nothing
What came out
request.json · 46 bytes
sha256:115c9e98fbcd…sha256:115c9e98fbcd0aa3de1410e9445a6b1067ce7baf7a3d031d13ba892be27396f0
Fingerprint
sha256:18ea3a196340…sha256:18ea3a19634067303caaae8b51a88e110cba592af95abe53d241808fbb636779
Settings it ran with
{}
The receipt, exactly as recorded
{"anchor":{"reason":"a demo record; anchoring is not part of this demo","state":"unanchored"},"assertions":{},"coverage":{"boundaries":[],"completeness":"incomplete","declared_stages":["request","context","tests","model","proposal","config applied"],"emitting_stages":["request"]},"digest_source":"emitter","emission":{"gaps":[],"policy":"fail-closed"},"format":"stage-receipt/0.3","inputs":[],"instrument":{"config_digest":"sha256:a716f9231f7813d63e8499ab3576bcf8ef5f6afcc60028ce249888e72beedd85","id":"task-intake","kind":"reader","manifest_digest":"sha256:45b3ab543fa4cce1cd66108096ad26577bb7e30a8ff9edb8fea7b992bfe6f854","rederivable":"true","version":"1.0.0"},"outcome":{"class":"ok"},"outputs":[{"bytes":"46","digest":"sha256:115c9e98fbcd0aa3de1410e9445a6b1067ce7baf7a3d031d13ba892be27396f0","media_type":"application/json","name":"request.json","trust_class":"operator-authored"}],"prev":null,"run_id":"demo-run-2","stage":{"index":"1","name":"request"},"time":{"ended":"2026-10-25T12:52:09.088+00:00","started":"2026-10-25T12:52:09.084+00:00"}}
The check's own words
[PASS   ] receipts/01-request.json: receipt format
[PASS   ] receipts/01-request.json: bytes are canonical
[PASS   ] receipts/01-request.json: required field 'format'
[PASS   ] receipts/01-request.json: required field 'run_id'
[PASS   ] receipts/01-request.json: required field 'stage'
[PASS   ] receipts/01-request.json: required field 'prev'
[PASS   ] receipts/01-request.json: required field 'time'
[PASS   ] receipts/01-request.json: required field 'coverage'
[PASS   ] receipts/01-request.json: required field 'emission'
[PASS   ] receipts/01-request.json: required field 'anchor'
[PASS   ] receipts/01-request.json: required field 'instrument'
[PASS   ] receipts/01-request.json: required field 'inputs'
[PASS   ] receipts/01-request.json: required field 'outputs'
[PASS   ] receipts/01-request.json: required field 'assertions'
[PASS   ] receipts/01-request.json: required field 'outcome'
[PASS   ] receipts/01-request.json: time.started carries its zone
[PASS   ] receipts/01-request.json: time.ended carries its zone
[PASS   ] receipts/01-request.json: instrument is named and pinned
[PASS   ] receipts/01-request.json: outputs/request.json declares a trust class
[PASS   ] receipts/01-request.json: outcome class is one of ['error', 'ok', 'refused']
[PASS   ] receipts/01-request.json: coverage declares completeness
[PASS   ] receipts/01-request.json: anchor state is declared, not absent
[NOT-RUN] receipts/01-request.json: originality -- record is declared unanchored; this verifier can establish consistency, not originality
[PASS   ] receipts/01-request.json: digest matches the manifest
[PASS   ] receipts/01-request.json: chain link
[PASS   ] receipts/01-request.json: output artifact 'request.json' matches
step 2 of 7

context

What went in
receipt:request · 1052 bytes
request.json · 46 bytes
documents · 228 bytes
What came out
context.json · 231 bytes
When
→

Completed.

Ran as doc-search, version 1.0.0.

Checked — it holds.

Held under the checks that ran; not anchored, so it can't be shown to be the record that was made.

Receipt · step 2 of 7 · context
Version
doc-search · 1.0.0
What went in
receipt:request · 1052 bytes
sha256:18ea3a196340…sha256:18ea3a19634067303caaae8b51a88e110cba592af95abe53d241808fbb636779
request.json · 46 bytes
sha256:115c9e98fbcd…sha256:115c9e98fbcd0aa3de1410e9445a6b1067ce7baf7a3d031d13ba892be27396f0
documents · 228 bytes
sha256:31e77846aec6…sha256:31e77846aec6e30def74fa234350d5f54c66e7a49ed8b4ad9284474c7ba9e7d3
What came out
context.json · 231 bytes
sha256:ed036ce42f2a…sha256:ed036ce42f2a83cc55b5519bee55508bb56b0277f10612d82b89fe71db84f230
Fingerprint
sha256:617ee694af65…sha256:617ee694af65d622ef7c6d9e6ba4d077bb7d2edd7224be171aeba6fff7a25e2d
Settings it ran with
{
 "top_k": "3"
}
The receipt, exactly as recorded
{"anchor":{"reason":"a demo record; anchoring is not part of this demo","state":"unanchored"},"assertions":{"constants":{"top_k":"3"}},"coverage":{"boundaries":[],"completeness":"incomplete","declared_stages":["request","context","tests","model","proposal","config applied"],"emitting_stages":["request","context"]},"digest_source":"emitter","emission":{"gaps":[],"policy":"fail-closed"},"format":"stage-receipt/0.3","inputs":[{"bytes":"1052","digest":"sha256:18ea3a19634067303caaae8b51a88e110cba592af95abe53d241808fbb636779","media_type":"application/json","name":"receipt:request","trust_class":"operator-authored"},{"bytes":"46","digest":"sha256:115c9e98fbcd0aa3de1410e9445a6b1067ce7baf7a3d031d13ba892be27396f0","media_type":"application/json","name":"request.json","trust_class":"operator-authored"},{"bytes":"228","digest":"sha256:31e77846aec6e30def74fa234350d5f54c66e7a49ed8b4ad9284474c7ba9e7d3","media_type":"application/json","name":"documents","trust_class":"operator-authored"}],"instrument":{"config_digest":"sha256:41b2a714a3ed2cb5918719c654bd2461e211320890ed06a2ba62cf51aaed79b3","id":"doc-search","kind":"retriever","manifest_digest":"sha256:45b3ab543fa4cce1cd66108096ad26577bb7e30a8ff9edb8fea7b992bfe6f854","rederivable":"true","version":"1.0.0"},"outcome":{"class":"ok"},"outputs":[{"bytes":"231","digest":"sha256:ed036ce42f2a83cc55b5519bee55508bb56b0277f10612d82b89fe71db84f230","media_type":"application/json","name":"context.json","trust_class":"operator-authored"}],"prev":"sha256:18ea3a19634067303caaae8b51a88e110cba592af95abe53d241808fbb636779","run_id":"demo-run-2","stage":{"index":"2","name":"context"},"time":{"ended":"2026-10-25T12:52:09.091+00:00","started":"2026-10-25T12:52:09.091+00:00"}}
The check's own words
[PASS   ] receipts/02-context.json: receipt format
[PASS   ] receipts/02-context.json: bytes are canonical
[PASS   ] receipts/02-context.json: required field 'format'
[PASS   ] receipts/02-context.json: required field 'run_id'
[PASS   ] receipts/02-context.json: required field 'stage'
[PASS   ] receipts/02-context.json: required field 'prev'
[PASS   ] receipts/02-context.json: required field 'time'
[PASS   ] receipts/02-context.json: required field 'coverage'
[PASS   ] receipts/02-context.json: required field 'emission'
[PASS   ] receipts/02-context.json: required field 'anchor'
[PASS   ] receipts/02-context.json: required field 'instrument'
[PASS   ] receipts/02-context.json: required field 'inputs'
[PASS   ] receipts/02-context.json: required field 'outputs'
[PASS   ] receipts/02-context.json: required field 'assertions'
[PASS   ] receipts/02-context.json: required field 'outcome'
[PASS   ] receipts/02-context.json: time.started carries its zone
[PASS   ] receipts/02-context.json: time.ended carries its zone
[PASS   ] receipts/02-context.json: instrument is named and pinned
[PASS   ] receipts/02-context.json: inputs/receipt:request declares a trust class
[PASS   ] receipts/02-context.json: inputs/request.json declares a trust class
[PASS   ] receipts/02-context.json: inputs/documents declares a trust class
[PASS   ] receipts/02-context.json: outputs/context.json declares a trust class
[PASS   ] receipts/02-context.json: assertions name their constants
[PASS   ] receipts/02-context.json: outcome class is one of ['error', 'ok', 'refused']
[PASS   ] receipts/02-context.json: coverage declares completeness
[PASS   ] receipts/02-context.json: anchor state is declared, not absent
[NOT-RUN] receipts/02-context.json: originality -- record is declared unanchored; this verifier can establish consistency, not originality
[PASS   ] receipts/02-context.json: digest matches the manifest
[PASS   ] receipts/02-context.json: chain link
[PASS   ] receipts/02-context.json: output artifact 'context.json' matches
step 3 of 7

tests

What went in
receipt:request · 1052 bytes
request.json · 46 bytes
What came out
nothing
When
→

Failed — TimeoutError: set by the demo to show a retry: the first attempt raises this instead of running; nothing timed out, reported by test-runner.

Ran as test-runner, version 2.4.0.

Checked — it holds.

Held under the checks that ran; not anchored, so it can't be shown to be the record that was made.

Receipt · step 3 of 7 · tests
Version
test-runner · 2.4.0
What went in
receipt:request · 1052 bytes
sha256:18ea3a196340…sha256:18ea3a19634067303caaae8b51a88e110cba592af95abe53d241808fbb636779
request.json · 46 bytes
sha256:115c9e98fbcd…sha256:115c9e98fbcd0aa3de1410e9445a6b1067ce7baf7a3d031d13ba892be27396f0
What came out
nothing
Fingerprint
sha256:24e0dbc3c1c6…sha256:24e0dbc3c1c695ef610cbd60ac9e544b60a2fc91bf20d70099c3ec54f285da27
Settings it ran with
{
 "attempt": "1"
}
The receipt, exactly as recorded
{"anchor":{"reason":"a demo record; anchoring is not part of this demo","state":"unanchored"},"assertions":{"constants":{"attempt":"1"}},"coverage":{"boundaries":[],"completeness":"incomplete","declared_stages":["request","context","tests","model","proposal","config applied"],"emitting_stages":["request","context","tests"]},"digest_source":"emitter","emission":{"gaps":[],"policy":"fail-closed"},"format":"stage-receipt/0.3","inputs":[{"bytes":"1052","digest":"sha256:18ea3a19634067303caaae8b51a88e110cba592af95abe53d241808fbb636779","media_type":"application/json","name":"receipt:request","trust_class":"operator-authored"},{"bytes":"46","digest":"sha256:115c9e98fbcd0aa3de1410e9445a6b1067ce7baf7a3d031d13ba892be27396f0","media_type":"application/json","name":"request.json","trust_class":"operator-authored"}],"instrument":{"config_digest":"sha256:b6ce29b790f5b0cac5791ffe27fd33af31088dffa62e608c4281bf5b7683b7a7","id":"test-runner","kind":"tool","manifest_digest":"sha256:45b3ab543fa4cce1cd66108096ad26577bb7e30a8ff9edb8fea7b992bfe6f854","rederivable":"true","version":"2.4.0"},"outcome":{"body":"set by the demo to show a retry: the first attempt raises this instead of running; nothing timed out","class":"error","origin":"test-runner","status":"TimeoutError"},"outputs":[],"prev":"sha256:617ee694af65d622ef7c6d9e6ba4d077bb7d2edd7224be171aeba6fff7a25e2d","run_id":"demo-run-2","stage":{"index":"3","instance":"1","name":"tests"},"time":{"ended":"2026-10-25T12:52:09.091+00:00","started":"2026-10-25T12:52:09.091+00:00"}}
The check's own words
[PASS   ] receipts/03-tests_1.json: receipt format
[PASS   ] receipts/03-tests_1.json: bytes are canonical
[PASS   ] receipts/03-tests_1.json: required field 'format'
[PASS   ] receipts/03-tests_1.json: required field 'run_id'
[PASS   ] receipts/03-tests_1.json: required field 'stage'
[PASS   ] receipts/03-tests_1.json: required field 'prev'
[PASS   ] receipts/03-tests_1.json: required field 'time'
[PASS   ] receipts/03-tests_1.json: required field 'coverage'
[PASS   ] receipts/03-tests_1.json: required field 'emission'
[PASS   ] receipts/03-tests_1.json: required field 'anchor'
[PASS   ] receipts/03-tests_1.json: required field 'instrument'
[PASS   ] receipts/03-tests_1.json: required field 'inputs'
[PASS   ] receipts/03-tests_1.json: required field 'outputs'
[PASS   ] receipts/03-tests_1.json: required field 'assertions'
[PASS   ] receipts/03-tests_1.json: required field 'outcome'
[PASS   ] receipts/03-tests_1.json: time.started carries its zone
[PASS   ] receipts/03-tests_1.json: time.ended carries its zone
[PASS   ] receipts/03-tests_1.json: instrument is named and pinned
[PASS   ] receipts/03-tests_1.json: inputs/receipt:request declares a trust class
[PASS   ] receipts/03-tests_1.json: inputs/request.json declares a trust class
[PASS   ] receipts/03-tests_1.json: assertions name their constants
[PASS   ] receipts/03-tests_1.json: outcome class is one of ['error', 'ok', 'refused']
[PASS   ] receipts/03-tests_1.json: error carries status, body and origin
[PASS   ] receipts/03-tests_1.json: coverage declares completeness
[PASS   ] receipts/03-tests_1.json: anchor state is declared, not absent
[NOT-RUN] receipts/03-tests_1.json: originality -- record is declared unanchored; this verifier can establish consistency, not originality
[PASS   ] receipts/03-tests_1.json: digest matches the manifest
[PASS   ] receipts/03-tests_1.json: chain link
step 4 of 7

tests

What went in
receipt:request · 1052 bytes
request.json · 46 bytes
results · 192 bytes
What came out
test-results.json · 182 bytes
When
→

Completed.

Ran as test-runner, version 2.4.0.

Checked — it holds.

Held under the checks that ran; not anchored, so it can't be shown to be the record that was made.

Receipt · step 4 of 7 · tests
Version
test-runner · 2.4.0
What went in
receipt:request · 1052 bytes
sha256:18ea3a196340…sha256:18ea3a19634067303caaae8b51a88e110cba592af95abe53d241808fbb636779
request.json · 46 bytes
sha256:115c9e98fbcd…sha256:115c9e98fbcd0aa3de1410e9445a6b1067ce7baf7a3d031d13ba892be27396f0
results · 192 bytes
sha256:c749bc910450…sha256:c749bc9104500a0199716938598a26b9e0ebfb0c163f428c4b1dec8de2c5de73
What came out
test-results.json · 182 bytes
sha256:f516ca3671f4…sha256:f516ca3671f472e9bb2492a90312396c02d3d7116d8a6838d72e6ec78bc35a66
Fingerprint
sha256:bd6da68e25e3…sha256:bd6da68e25e3ee132e98764133210cf241a0d813fb71803993f2aa3a88407846
Settings it ran with
{
 "attempt": "2",
 "suite": "auth"
}
The receipt, exactly as recorded
{"anchor":{"reason":"a demo record; anchoring is not part of this demo","state":"unanchored"},"assertions":{"constants":{"attempt":"2","suite":"auth"},"failed":"4"},"coverage":{"boundaries":[],"completeness":"incomplete","declared_stages":["request","context","tests","model","proposal","config applied"],"emitting_stages":["request","context","tests"]},"digest_source":"emitter","emission":{"gaps":[],"policy":"fail-closed"},"format":"stage-receipt/0.3","inputs":[{"bytes":"1052","digest":"sha256:18ea3a19634067303caaae8b51a88e110cba592af95abe53d241808fbb636779","media_type":"application/json","name":"receipt:request","trust_class":"operator-authored"},{"bytes":"46","digest":"sha256:115c9e98fbcd0aa3de1410e9445a6b1067ce7baf7a3d031d13ba892be27396f0","media_type":"application/json","name":"request.json","trust_class":"operator-authored"},{"bytes":"192","digest":"sha256:c749bc9104500a0199716938598a26b9e0ebfb0c163f428c4b1dec8de2c5de73","media_type":"application/json","name":"results","trust_class":"operator-authored"}],"instrument":{"config_digest":"sha256:b6ce29b790f5b0cac5791ffe27fd33af31088dffa62e608c4281bf5b7683b7a7","id":"test-runner","kind":"tool","manifest_digest":"sha256:45b3ab543fa4cce1cd66108096ad26577bb7e30a8ff9edb8fea7b992bfe6f854","rederivable":"true","version":"2.4.0"},"outcome":{"class":"ok"},"outputs":[{"bytes":"182","digest":"sha256:f516ca3671f472e9bb2492a90312396c02d3d7116d8a6838d72e6ec78bc35a66","media_type":"application/json","name":"test-results.json","trust_class":"operator-authored"}],"prev":"sha256:24e0dbc3c1c695ef610cbd60ac9e544b60a2fc91bf20d70099c3ec54f285da27","run_id":"demo-run-2","stage":{"index":"4","instance":"2","name":"tests"},"time":{"ended":"2026-10-25T12:52:09.105+00:00","started":"2026-10-25T12:52:09.091+00:00"}}
The check's own words
[PASS   ] receipts/04-tests_2.json: receipt format
[PASS   ] receipts/04-tests_2.json: bytes are canonical
[PASS   ] receipts/04-tests_2.json: required field 'format'
[PASS   ] receipts/04-tests_2.json: required field 'run_id'
[PASS   ] receipts/04-tests_2.json: required field 'stage'
[PASS   ] receipts/04-tests_2.json: required field 'prev'
[PASS   ] receipts/04-tests_2.json: required field 'time'
[PASS   ] receipts/04-tests_2.json: required field 'coverage'
[PASS   ] receipts/04-tests_2.json: required field 'emission'
[PASS   ] receipts/04-tests_2.json: required field 'anchor'
[PASS   ] receipts/04-tests_2.json: required field 'instrument'
[PASS   ] receipts/04-tests_2.json: required field 'inputs'
[PASS   ] receipts/04-tests_2.json: required field 'outputs'
[PASS   ] receipts/04-tests_2.json: required field 'assertions'
[PASS   ] receipts/04-tests_2.json: required field 'outcome'
[PASS   ] receipts/04-tests_2.json: time.started carries its zone
[PASS   ] receipts/04-tests_2.json: time.ended carries its zone
[PASS   ] receipts/04-tests_2.json: instrument is named and pinned
[PASS   ] receipts/04-tests_2.json: inputs/receipt:request declares a trust class
[PASS   ] receipts/04-tests_2.json: inputs/request.json declares a trust class
[PASS   ] receipts/04-tests_2.json: inputs/results declares a trust class
[PASS   ] receipts/04-tests_2.json: outputs/test-results.json declares a trust class
[PASS   ] receipts/04-tests_2.json: assertions name their constants
[PASS   ] receipts/04-tests_2.json: outcome class is one of ['error', 'ok', 'refused']
[PASS   ] receipts/04-tests_2.json: coverage declares completeness
[PASS   ] receipts/04-tests_2.json: anchor state is declared, not absent
[NOT-RUN] receipts/04-tests_2.json: originality -- record is declared unanchored; this verifier can establish consistency, not originality
[PASS   ] receipts/04-tests_2.json: digest matches the manifest
[PASS   ] receipts/04-tests_2.json: chain link
[PASS   ] receipts/04-tests_2.json: output artifact 'test-results.json' matches
step 5 of 7

model

What went in
receipt:request · 1052 bytes
receipt:context · 1719 bytes
receipt:tests#2 · 1769 bytes
request.json · 46 bytes
context.json · 231 bytes
test-results.json · 182 bytes
What came out
model-output.json · 184 bytes
When
→

Completed.

The model step is recorded, not replayable.

Ran as stand-in-model, version 1.0.0.

Checked — it holds.

Held under the checks that ran; not anchored, so it can't be shown to be the record that was made.

Receipt · step 5 of 7 · model
Version
stand-in-model · 1.0.0
What went in
receipt:request · 1052 bytes
sha256:18ea3a196340…sha256:18ea3a19634067303caaae8b51a88e110cba592af95abe53d241808fbb636779
receipt:context · 1719 bytes
sha256:617ee694af65…sha256:617ee694af65d622ef7c6d9e6ba4d077bb7d2edd7224be171aeba6fff7a25e2d
receipt:tests#2 · 1769 bytes
sha256:bd6da68e25e3…sha256:bd6da68e25e3ee132e98764133210cf241a0d813fb71803993f2aa3a88407846
request.json · 46 bytes
sha256:115c9e98fbcd…sha256:115c9e98fbcd0aa3de1410e9445a6b1067ce7baf7a3d031d13ba892be27396f0
context.json · 231 bytes
sha256:ed036ce42f2a…sha256:ed036ce42f2a83cc55b5519bee55508bb56b0277f10612d82b89fe71db84f230
test-results.json · 182 bytes
sha256:f516ca3671f4…sha256:f516ca3671f472e9bb2492a90312396c02d3d7116d8a6838d72e6ec78bc35a66
What came out
model-output.json · 184 bytes
sha256:3e6759062698…sha256:3e6759062698e97f8b327f70aa171643b40440c3953f0667b81e749f0f7fa48a
Fingerprint
sha256:3e2bc5db7ad7…sha256:3e2bc5db7ad76f9078852d533fec87609187987513b194bb3f4718f042b16b31
Settings it ran with
{
 "seed": "17"
}
The receipt, exactly as recorded
{"anchor":{"reason":"a demo record; anchoring is not part of this demo","state":"unanchored"},"assertions":{"constants":{"seed":"17"}},"coverage":{"boundaries":[],"completeness":"incomplete","declared_stages":["request","context","tests","model","proposal","config applied"],"emitting_stages":["request","context","tests","model"]},"digest_source":"emitter","emission":{"gaps":[],"policy":"fail-closed"},"format":"stage-receipt/0.3","inputs":[{"bytes":"1052","digest":"sha256:18ea3a19634067303caaae8b51a88e110cba592af95abe53d241808fbb636779","media_type":"application/json","name":"receipt:request","trust_class":"operator-authored"},{"bytes":"1719","digest":"sha256:617ee694af65d622ef7c6d9e6ba4d077bb7d2edd7224be171aeba6fff7a25e2d","media_type":"application/json","name":"receipt:context","trust_class":"operator-authored"},{"bytes":"1769","digest":"sha256:bd6da68e25e3ee132e98764133210cf241a0d813fb71803993f2aa3a88407846","media_type":"application/json","name":"receipt:tests#2","trust_class":"operator-authored"},{"bytes":"46","digest":"sha256:115c9e98fbcd0aa3de1410e9445a6b1067ce7baf7a3d031d13ba892be27396f0","media_type":"application/json","name":"request.json","trust_class":"operator-authored"},{"bytes":"231","digest":"sha256:ed036ce42f2a83cc55b5519bee55508bb56b0277f10612d82b89fe71db84f230","media_type":"application/json","name":"context.json","trust_class":"operator-authored"},{"bytes":"182","digest":"sha256:f516ca3671f472e9bb2492a90312396c02d3d7116d8a6838d72e6ec78bc35a66","media_type":"application/json","name":"test-results.json","trust_class":"operator-authored"}],"instrument":{"config_digest":"sha256:157ee8ba61daebe690746b2142fe14b7afa765cb0e3a9de80063e94b79c8fbf8","id":"stand-in-model","kind":"generator","manifest_digest":"sha256:45b3ab543fa4cce1cd66108096ad26577bb7e30a8ff9edb8fea7b992bfe6f854","rederivable":"false","rederivable_note":"a sampled model call: its output is recorded, not replayed","version":"1.0.0"},"outcome":{"class":"ok"},"outputs":[{"bytes":"184","digest":"sha256:3e6759062698e97f8b327f70aa171643b40440c3953f0667b81e749f0f7fa48a","media_type":"application/json","name":"model-output.json","trust_class":"operator-authored"}],"prev":"sha256:bd6da68e25e3ee132e98764133210cf241a0d813fb71803993f2aa3a88407846","run_id":"demo-run-2","stage":{"index":"5","name":"model"},"time":{"ended":"2026-10-25T12:52:09.122+00:00","started":"2026-10-25T12:52:09.120+00:00"}}
The check's own words
[PASS   ] receipts/05-model.json: receipt format
[PASS   ] receipts/05-model.json: bytes are canonical
[PASS   ] receipts/05-model.json: required field 'format'
[PASS   ] receipts/05-model.json: required field 'run_id'
[PASS   ] receipts/05-model.json: required field 'stage'
[PASS   ] receipts/05-model.json: required field 'prev'
[PASS   ] receipts/05-model.json: required field 'time'
[PASS   ] receipts/05-model.json: required field 'coverage'
[PASS   ] receipts/05-model.json: required field 'emission'
[PASS   ] receipts/05-model.json: required field 'anchor'
[PASS   ] receipts/05-model.json: required field 'instrument'
[PASS   ] receipts/05-model.json: required field 'inputs'
[PASS   ] receipts/05-model.json: required field 'outputs'
[PASS   ] receipts/05-model.json: required field 'assertions'
[PASS   ] receipts/05-model.json: required field 'outcome'
[PASS   ] receipts/05-model.json: time.started carries its zone
[PASS   ] receipts/05-model.json: time.ended carries its zone
[PASS   ] receipts/05-model.json: instrument is named and pinned
[PASS   ] receipts/05-model.json: inputs/receipt:request declares a trust class
[PASS   ] receipts/05-model.json: inputs/receipt:context declares a trust class
[PASS   ] receipts/05-model.json: inputs/receipt:tests#2 declares a trust class
[PASS   ] receipts/05-model.json: inputs/request.json declares a trust class
[PASS   ] receipts/05-model.json: inputs/context.json declares a trust class
[PASS   ] receipts/05-model.json: inputs/test-results.json declares a trust class
[PASS   ] receipts/05-model.json: outputs/model-output.json declares a trust class
[PASS   ] receipts/05-model.json: assertions name their constants
[PASS   ] receipts/05-model.json: outcome class is one of ['error', 'ok', 'refused']
[PASS   ] receipts/05-model.json: coverage declares completeness
[PASS   ] receipts/05-model.json: anchor state is declared, not absent
[NOT-RUN] receipts/05-model.json: originality -- record is declared unanchored; this verifier can establish consistency, not originality
[PASS   ] receipts/05-model.json: digest matches the manifest
[PASS   ] receipts/05-model.json: chain link
[PASS   ] receipts/05-model.json: output artifact 'model-output.json' matches
step 6 of 7

proposal

What went in
receipt:model · 2400 bytes
model-output.json · 184 bytes
What came out
proposal.json · 81 bytes
When
→

Completed.

Ran as action-parser, version 1.0.0.

Checked — it holds.

Held under the checks that ran; not anchored, so it can't be shown to be the record that was made.

Receipt · step 6 of 7 · proposal
Version
action-parser · 1.0.0
What went in
receipt:model · 2400 bytes
sha256:3e2bc5db7ad7…sha256:3e2bc5db7ad76f9078852d533fec87609187987513b194bb3f4718f042b16b31
model-output.json · 184 bytes
sha256:3e6759062698…sha256:3e6759062698e97f8b327f70aa171643b40440c3953f0667b81e749f0f7fa48a
What came out
proposal.json · 81 bytes
sha256:bae93e89f127…sha256:bae93e89f1275a7a140bff86f09e3fd4c970c2d0098bda51fdd4412878d27e17
Fingerprint
sha256:224c12eeb391…sha256:224c12eeb391f7f68b86278986706c2df747f73751d76a4ddec0b90b5b59eb47
Settings it ran with
{}
The receipt, exactly as recorded
{"anchor":{"reason":"a demo record; anchoring is not part of this demo","state":"unanchored"},"assertions":{},"coverage":{"boundaries":[],"completeness":"incomplete","declared_stages":["request","context","tests","model","proposal","config applied"],"emitting_stages":["request","context","tests","model","proposal"]},"digest_source":"emitter","emission":{"gaps":[],"policy":"fail-closed"},"format":"stage-receipt/0.3","inputs":[{"bytes":"2400","digest":"sha256:3e2bc5db7ad76f9078852d533fec87609187987513b194bb3f4718f042b16b31","media_type":"application/json","name":"receipt:model","trust_class":"operator-authored"},{"bytes":"184","digest":"sha256:3e6759062698e97f8b327f70aa171643b40440c3953f0667b81e749f0f7fa48a","media_type":"application/json","name":"model-output.json","trust_class":"operator-authored"}],"instrument":{"config_digest":"sha256:6c32b25ddfcd07e8bcadde61d592dc1f57b09a24cc079e6387af6dfb3e4e8456","id":"action-parser","kind":"parser","manifest_digest":"sha256:45b3ab543fa4cce1cd66108096ad26577bb7e30a8ff9edb8fea7b992bfe6f854","rederivable":"true","version":"1.0.0"},"outcome":{"class":"ok"},"outputs":[{"bytes":"81","digest":"sha256:bae93e89f1275a7a140bff86f09e3fd4c970c2d0098bda51fdd4412878d27e17","media_type":"application/json","name":"proposal.json","trust_class":"operator-authored"}],"prev":"sha256:3e2bc5db7ad76f9078852d533fec87609187987513b194bb3f4718f042b16b31","run_id":"demo-run-2","stage":{"index":"6","name":"proposal"},"time":{"ended":"2026-10-25T12:52:09.131+00:00","started":"2026-10-25T12:52:09.129+00:00"}}
The check's own words
[PASS   ] receipts/06-proposal.json: receipt format
[PASS   ] receipts/06-proposal.json: bytes are canonical
[PASS   ] receipts/06-proposal.json: required field 'format'
[PASS   ] receipts/06-proposal.json: required field 'run_id'
[PASS   ] receipts/06-proposal.json: required field 'stage'
[PASS   ] receipts/06-proposal.json: required field 'prev'
[PASS   ] receipts/06-proposal.json: required field 'time'
[PASS   ] receipts/06-proposal.json: required field 'coverage'
[PASS   ] receipts/06-proposal.json: required field 'emission'
[PASS   ] receipts/06-proposal.json: required field 'anchor'
[PASS   ] receipts/06-proposal.json: required field 'instrument'
[PASS   ] receipts/06-proposal.json: required field 'inputs'
[PASS   ] receipts/06-proposal.json: required field 'outputs'
[PASS   ] receipts/06-proposal.json: required field 'assertions'
[PASS   ] receipts/06-proposal.json: required field 'outcome'
[PASS   ] receipts/06-proposal.json: time.started carries its zone
[PASS   ] receipts/06-proposal.json: time.ended carries its zone
[PASS   ] receipts/06-proposal.json: instrument is named and pinned
[PASS   ] receipts/06-proposal.json: inputs/receipt:model declares a trust class
[PASS   ] receipts/06-proposal.json: inputs/model-output.json declares a trust class
[PASS   ] receipts/06-proposal.json: outputs/proposal.json declares a trust class
[PASS   ] receipts/06-proposal.json: outcome class is one of ['error', 'ok', 'refused']
[PASS   ] receipts/06-proposal.json: coverage declares completeness
[PASS   ] receipts/06-proposal.json: anchor state is declared, not absent
[NOT-RUN] receipts/06-proposal.json: originality -- record is declared unanchored; this verifier can establish consistency, not originality
[PASS   ] receipts/06-proposal.json: digest matches the manifest
[PASS   ] receipts/06-proposal.json: chain link
[PASS   ] receipts/06-proposal.json: output artifact 'proposal.json' matches
step 7 of 7

config applied

What went in
receipt:proposal · 1542 bytes
proposal.json · 81 bytes
What came out
auth.json · 22 bytes
When
→

Completed.

Ran as config-writer, version 1.2.0.

Checked — it holds.

Held under the checks that ran; not anchored, so it can't be shown to be the record that was made.

Receipt · step 7 of 7 · config applied
Version
config-writer · 1.2.0
What went in
receipt:proposal · 1542 bytes
sha256:224c12eeb391…sha256:224c12eeb391f7f68b86278986706c2df747f73751d76a4ddec0b90b5b59eb47
proposal.json · 81 bytes
sha256:bae93e89f127…sha256:bae93e89f1275a7a140bff86f09e3fd4c970c2d0098bda51fdd4412878d27e17
What came out
auth.json · 22 bytes
sha256:8075e9f891f4…sha256:8075e9f891f4cc7bc61e8e6b81178630c022d9d7f2eb8af45e8073638242eb60
Fingerprint
sha256:5babea32acdb…sha256:5babea32acdb6a6075972b59e4cfddf7e3e7ba9bde45fe13852d1cf1eca158b5
Settings it ran with
{}
The receipt, exactly as recorded
{"anchor":{"reason":"a demo record; anchoring is not part of this demo","state":"unanchored"},"assertions":{},"coverage":{"boundaries":[],"completeness":"complete","declared_stages":["request","context","tests","model","proposal","config applied"],"emitting_stages":["request","context","tests","model","proposal","config applied"]},"digest_source":"emitter","emission":{"gaps":[],"policy":"fail-closed"},"format":"stage-receipt/0.3","inputs":[{"bytes":"1542","digest":"sha256:224c12eeb391f7f68b86278986706c2df747f73751d76a4ddec0b90b5b59eb47","media_type":"application/json","name":"receipt:proposal","trust_class":"operator-authored"},{"bytes":"81","digest":"sha256:bae93e89f1275a7a140bff86f09e3fd4c970c2d0098bda51fdd4412878d27e17","media_type":"application/json","name":"proposal.json","trust_class":"operator-authored"}],"instrument":{"config_digest":"sha256:4cf2bb94cb556cc07db470fc80186d87755477bab765d84c86f56c9c9a2623af","id":"config-writer","kind":"tool","manifest_digest":"sha256:45b3ab543fa4cce1cd66108096ad26577bb7e30a8ff9edb8fea7b992bfe6f854","rederivable":"true","version":"1.2.0"},"outcome":{"class":"ok"},"outputs":[{"bytes":"22","digest":"sha256:8075e9f891f4cc7bc61e8e6b81178630c022d9d7f2eb8af45e8073638242eb60","media_type":"application/json","name":"auth.json","trust_class":"operator-authored"}],"prev":"sha256:224c12eeb391f7f68b86278986706c2df747f73751d76a4ddec0b90b5b59eb47","run_id":"demo-run-2","stage":{"index":"7","name":"config applied"},"time":{"ended":"2026-10-25T12:52:09.139+00:00","started":"2026-10-25T12:52:09.137+00:00"}}
The check's own words
[PASS   ] receipts/07-config-applied.json: receipt format
[PASS   ] receipts/07-config-applied.json: bytes are canonical
[PASS   ] receipts/07-config-applied.json: required field 'format'
[PASS   ] receipts/07-config-applied.json: required field 'run_id'
[PASS   ] receipts/07-config-applied.json: required field 'stage'
[PASS   ] receipts/07-config-applied.json: required field 'prev'
[PASS   ] receipts/07-config-applied.json: required field 'time'
[PASS   ] receipts/07-config-applied.json: required field 'coverage'
[PASS   ] receipts/07-config-applied.json: required field 'emission'
[PASS   ] receipts/07-config-applied.json: required field 'anchor'
[PASS   ] receipts/07-config-applied.json: required field 'instrument'
[PASS   ] receipts/07-config-applied.json: required field 'inputs'
[PASS   ] receipts/07-config-applied.json: required field 'outputs'
[PASS   ] receipts/07-config-applied.json: required field 'assertions'
[PASS   ] receipts/07-config-applied.json: required field 'outcome'
[PASS   ] receipts/07-config-applied.json: time.started carries its zone
[PASS   ] receipts/07-config-applied.json: time.ended carries its zone
[PASS   ] receipts/07-config-applied.json: instrument is named and pinned
[PASS   ] receipts/07-config-applied.json: inputs/receipt:proposal declares a trust class
[PASS   ] receipts/07-config-applied.json: inputs/proposal.json declares a trust class
[PASS   ] receipts/07-config-applied.json: outputs/auth.json declares a trust class
[PASS   ] receipts/07-config-applied.json: outcome class is one of ['error', 'ok', 'refused']
[PASS   ] receipts/07-config-applied.json: coverage declares completeness
[PASS   ] receipts/07-config-applied.json: 'complete' is consistent with the stage lists
[PASS   ] receipts/07-config-applied.json: anchor state is declared, not absent
[NOT-RUN] receipts/07-config-applied.json: originality -- record is declared unanchored; this verifier can establish consistency, not originality
[PASS   ] receipts/07-config-applied.json: digest matches the manifest
[PASS   ] receipts/07-config-applied.json: chain link
[PASS   ] receipts/07-config-applied.json: output artifact 'auth.json' matches

What could not be checked

  • Each declared step left a receipt, as the receipts themselves state.

  • This record held under the checks that ran. It has not been anchored, so it cannot be shown to be the record that was made — here is what anchoring would add.

    Anchored, it would read: this record existed by a stated date and hasn't changed since — checkable against an independent anchor.

The run, step by step