Runs / P4 / p4-29-reply-30-days

p4-29-reply-30-days · P4

4 of 4 declared stages · recorded in the format stage-receipt-chain/0.3 · ran · received by this console

  • Records agree Yes
  • Ran as approved a straight-line run: there is no plan to compare
  • Signed by a known recorder Yes
  • Committed by a known time Not anchored

Records agree: this console's check held, with the run's output files required. Every check behind this is on Proof

The case

Run
p4-29-reply-30-days
ran
→
What it was for
question → draft → policy_check → send
This answer's trail was checked on — each check that ran held.

Held under the checks that ran; not anchored, so it can't be shown to be the record that was made.

Repeat the check

Run it from the run's folder:

onetrace-verify --trust trust.json MANIFEST.json

What the evidence establishes

Each rung is a separate question, with its own evidence.

Records agreeYes · 113 checks made — all hold.
Signed by a known recorderYes · demo key (public seed: proves the record wasn't changed since signing, not who signed it) ·
sha256:6e20550ae0dc…sha256:6e20550ae0dc6b4471d54336d09d74d14f3f623b735045eddd053c444ec3b14c
Nothing declared is missingYes · Each declared step left a receipt, as the receipts themselves state.
Ran as approveda straight-line run: there is no plan to compare
Re-runnable stages reproducedNot checked · No re-check from the record was run, so this page does not say whether anything comes out the same.
Action authorized, effect confirmedNo records · This console does not record authorization.
Committed by a known timeNot anchored · no anchor beside the chain

None of these says the run's output or action was correct.

The execution graph

recorded as a straight line (no graph recorded)

question · 1 output file · Checked — it holds.question1 output fileChecked — it holds.draft · 1 output file · Checked — it holds.draft1 output fileChecked — it holds.policy_check · 1 output file · Checked — it holds.policy_check1 output fileChecked — it holds.send · 1 output file · Checked — it holds.send1 output fileChecked — it holds.
  1. question1 output fileChecked — it holds.
  2. draft1 output fileChecked — it holds.
  3. policy_check1 output fileChecked — it holds.
  4. send1 output fileChecked — it holds.
Show as table
NodeStageRecorded position
questionquestion1
draftdraft2
policy_checkpolicy_check3
sendsend4
FromTo
draftpolicy_check
policy_checksend
questiondraft

A link shows which recorded output a stage read. It does not by itself prove that one stage caused the next.

Recorded order

What happened, in the order the receipts give

Held under the checks that ran; not anchored, so none of these steps can be shown to be the record that was made.

StepWhenWhat was checked and what was notOutcome
question
step 1 of 4
 →

Checked — it holds.

Completed.
draft
step 2 of 4
 →

Checked — it holds.

Completed.
policy_check
step 3 of 4
 →

Checked — it holds.

Completed.
send
step 4 of 4
 →

Checked — it holds.

Completed.
Receipt · step 1 of 4 · question
step 1 of 4

question

What went in
question · 87 bytes
ticket · 159 bytes
What came out
question.json · 86 bytes
When
→

Completed.

Ran as ticket-intake, version 1.0.0.

Receipt · step 1 of 4 · question
Version
ticket-intake · 1.0.0
What went in
question · 87 bytes
sha256:8c3df5048fd1…sha256:8c3df5048fd188a0063dac72b0e16c9fda8734ecea7fff2f7625361cd521de4d
ticket · 159 bytes
sha256:87015ed0122f…sha256:87015ed0122f6278c29ae696b849faacf4f66fe45fd9eae151b05cef5ce3ce22
What came out
question.json · 86 bytes
sha256:4a5490ea1248…sha256:4a5490ea1248c2b62c88ddad88a32655312a3571bcefff03180711a8e86e4d78
Fingerprint
sha256:e1186d03ca07…sha256:e1186d03ca07a728904834142d0c76ffdfb6dc99b401bf38bd52af0e9a5f9a24
Settings it ran with
{
 "onetrace.kept_inputs": "ticket"
}
The receipt, exactly as recorded
{"anchor":{"reason":"a demo record; anchoring is not part of this demo","state":"unanchored"},"assertions":{"constants":{"onetrace.kept_inputs":"ticket"}},"coverage":{"boundaries":[],"completeness":"incomplete","declared_stages":["question","draft","policy_check","send"],"emitting_stages":["question"]},"digest_source":"emitter","emission":{"gaps":[],"policy":"fail-closed"},"format":"stage-receipt/0.3","inputs":[{"bytes":"87","digest":"sha256:8c3df5048fd188a0063dac72b0e16c9fda8734ecea7fff2f7625361cd521de4d","media_type":"application/json","name":"question","trust_class":"operator-authored"},{"bytes":"159","digest":"sha256:87015ed0122f6278c29ae696b849faacf4f66fe45fd9eae151b05cef5ce3ce22","media_type":"application/json","name":"ticket","trust_class":"externally-sourced"}],"instrument":{"config_digest":"sha256:388eef47ed64d7880d08c4fec9370078db79093951d9fbe98cbf5f128138b5b0","id":"ticket-intake","kind":"reader","manifest_digest":"sha256:9171dab9f5f0714257e71310cf08777e66d71816f9061e2914c84fb0bf5c6352","rederivable":"true","version":"1.0.0"},"outcome":{"class":"ok"},"outputs":[{"bytes":"86","digest":"sha256:4a5490ea1248c2b62c88ddad88a32655312a3571bcefff03180711a8e86e4d78","media_type":"application/json","name":"question.json","trust_class":"operator-authored"}],"prev":null,"run_id":"p4-29-reply-30-days","stage":{"index":"1","name":"question"},"time":{"ended":"2026-10-25T12:52:09.672+00:00","started":"2026-10-25T12:52:09.648+00:00"}}
The check's own words
[PASS   ] receipts/01-question.json: receipt format
[PASS   ] receipts/01-question.json: bytes are canonical
[PASS   ] receipts/01-question.json: required field 'format'
[PASS   ] receipts/01-question.json: required field 'run_id'
[PASS   ] receipts/01-question.json: required field 'stage'
[PASS   ] receipts/01-question.json: required field 'prev'
[PASS   ] receipts/01-question.json: required field 'time'
[PASS   ] receipts/01-question.json: required field 'coverage'
[PASS   ] receipts/01-question.json: required field 'emission'
[PASS   ] receipts/01-question.json: required field 'anchor'
[PASS   ] receipts/01-question.json: required field 'instrument'
[PASS   ] receipts/01-question.json: required field 'inputs'
[PASS   ] receipts/01-question.json: required field 'outputs'
[PASS   ] receipts/01-question.json: required field 'assertions'
[PASS   ] receipts/01-question.json: required field 'outcome'
[PASS   ] receipts/01-question.json: time.started carries its zone
[PASS   ] receipts/01-question.json: time.ended carries its zone
[PASS   ] receipts/01-question.json: instrument is named and pinned
[PASS   ] receipts/01-question.json: inputs/question declares a trust class
[PASS   ] receipts/01-question.json: inputs/ticket declares a trust class
[PASS   ] receipts/01-question.json: outputs/question.json declares a trust class
[PASS   ] receipts/01-question.json: assertions name their constants
[PASS   ] receipts/01-question.json: outcome class is one of ['error', 'ok', 'refused']
[PASS   ] receipts/01-question.json: coverage declares completeness
[PASS   ] receipts/01-question.json: anchor state is declared, not absent
[NOT-RUN] receipts/01-question.json: originality -- record is declared unanchored; this verifier can establish consistency, not originality
[PASS   ] receipts/01-question.json: digest matches the manifest
[PASS   ] receipts/01-question.json: chain link
[PASS   ] receipts/01-question.json: output artifact 'question.json' matches
Receipt · step 2 of 4 · draft
step 2 of 4

draft

What went in
receipt:question · 1451 bytes
question.json · 86 bytes
What came out
draft.json · 190 bytes
When
→

Completed.

The model step is recorded, not replayable.

Ran as reply-stub, version 1.0.0.

Receipt · step 2 of 4 · draft
Version
reply-stub · 1.0.0
What went in
receipt:question · 1451 bytes
sha256:e1186d03ca07…sha256:e1186d03ca07a728904834142d0c76ffdfb6dc99b401bf38bd52af0e9a5f9a24
question.json · 86 bytes
sha256:4a5490ea1248…sha256:4a5490ea1248c2b62c88ddad88a32655312a3571bcefff03180711a8e86e4d78
What came out
draft.json · 190 bytes
sha256:28ee91f1478b…sha256:28ee91f1478b0243c2989623f4d63fe0575538923c7bfc2832fb350556baa202
Fingerprint
sha256:b9dee89c29c4…sha256:b9dee89c29c49ed3be5ccb235b315a4038b56a84f4be4584b5499436c21d3664
Settings it ran with
{}
The receipt, exactly as recorded
{"anchor":{"reason":"a demo record; anchoring is not part of this demo","state":"unanchored"},"assertions":{},"coverage":{"boundaries":[],"completeness":"incomplete","declared_stages":["question","draft","policy_check","send"],"emitting_stages":["question","draft"]},"digest_source":"emitter","emission":{"gaps":[],"policy":"fail-closed"},"format":"stage-receipt/0.3","inputs":[{"bytes":"1451","digest":"sha256:e1186d03ca07a728904834142d0c76ffdfb6dc99b401bf38bd52af0e9a5f9a24","media_type":"application/json","name":"receipt:question","trust_class":"operator-authored"},{"bytes":"86","digest":"sha256:4a5490ea1248c2b62c88ddad88a32655312a3571bcefff03180711a8e86e4d78","media_type":"application/json","name":"question.json","trust_class":"operator-authored"}],"instrument":{"config_digest":"sha256:a6ca0a7bdd490d3e2fe2b9d3dcb0cbe4b0b5f8ba71633003e1623c0ec595720c","id":"reply-stub","kind":"model-stub","manifest_digest":"sha256:9171dab9f5f0714257e71310cf08777e66d71816f9061e2914c84fb0bf5c6352","rederivable":"false","rederivable_note":"a stub standing in for a sampled model call: its wording is picked by a seed that changes per run, so its output is recorded, not replayed","version":"1.0.0"},"outcome":{"class":"ok"},"outputs":[{"bytes":"190","digest":"sha256:28ee91f1478b0243c2989623f4d63fe0575538923c7bfc2832fb350556baa202","media_type":"application/json","name":"draft.json","trust_class":"operator-authored"}],"prev":"sha256:e1186d03ca07a728904834142d0c76ffdfb6dc99b401bf38bd52af0e9a5f9a24","run_id":"p4-29-reply-30-days","stage":{"index":"2","name":"draft"},"time":{"ended":"2026-10-25T12:52:09.681+00:00","started":"2026-10-25T12:52:09.679+00:00"}}
The check's own words
[PASS   ] receipts/02-draft.json: receipt format
[PASS   ] receipts/02-draft.json: bytes are canonical
[PASS   ] receipts/02-draft.json: required field 'format'
[PASS   ] receipts/02-draft.json: required field 'run_id'
[PASS   ] receipts/02-draft.json: required field 'stage'
[PASS   ] receipts/02-draft.json: required field 'prev'
[PASS   ] receipts/02-draft.json: required field 'time'
[PASS   ] receipts/02-draft.json: required field 'coverage'
[PASS   ] receipts/02-draft.json: required field 'emission'
[PASS   ] receipts/02-draft.json: required field 'anchor'
[PASS   ] receipts/02-draft.json: required field 'instrument'
[PASS   ] receipts/02-draft.json: required field 'inputs'
[PASS   ] receipts/02-draft.json: required field 'outputs'
[PASS   ] receipts/02-draft.json: required field 'assertions'
[PASS   ] receipts/02-draft.json: required field 'outcome'
[PASS   ] receipts/02-draft.json: time.started carries its zone
[PASS   ] receipts/02-draft.json: time.ended carries its zone
[PASS   ] receipts/02-draft.json: instrument is named and pinned
[PASS   ] receipts/02-draft.json: inputs/receipt:question declares a trust class
[PASS   ] receipts/02-draft.json: inputs/question.json declares a trust class
[PASS   ] receipts/02-draft.json: outputs/draft.json declares a trust class
[PASS   ] receipts/02-draft.json: outcome class is one of ['error', 'ok', 'refused']
[PASS   ] receipts/02-draft.json: coverage declares completeness
[PASS   ] receipts/02-draft.json: anchor state is declared, not absent
[NOT-RUN] receipts/02-draft.json: originality -- record is declared unanchored; this verifier can establish consistency, not originality
[PASS   ] receipts/02-draft.json: digest matches the manifest
[PASS   ] receipts/02-draft.json: chain link
[PASS   ] receipts/02-draft.json: output artifact 'draft.json' matches
Receipt · step 3 of 4 · policy_check
step 3 of 4

policy_check

What went in
receipt:draft · 1655 bytes
draft.json · 190 bytes
What came out
checked.json · 192 bytes
When
→

Completed.

Ran as refund-policy, version 1.0.0.

Receipt · step 3 of 4 · policy_check
Version
refund-policy · 1.0.0
What went in
receipt:draft · 1655 bytes
sha256:b9dee89c29c4…sha256:b9dee89c29c49ed3be5ccb235b315a4038b56a84f4be4584b5499436c21d3664
draft.json · 190 bytes
sha256:28ee91f1478b…sha256:28ee91f1478b0243c2989623f4d63fe0575538923c7bfc2832fb350556baa202
What came out
checked.json · 192 bytes
sha256:4f4a22093f01…sha256:4f4a22093f01287c2ecd1920b74b0157879691495b35e4b15f9fb0a37f528860
Fingerprint
sha256:43798d7f2f0d…sha256:43798d7f2f0d27e09f17666c6d52d95136b2e0125380e23aabeae4fc5fddd3b8
Settings it ran with
{
 "refund_days": "30"
}
The receipt, exactly as recorded
{"anchor":{"reason":"a demo record; anchoring is not part of this demo","state":"unanchored"},"assertions":{"constants":{"refund_days":"30"}},"coverage":{"boundaries":[],"completeness":"incomplete","declared_stages":["question","draft","policy_check","send"],"emitting_stages":["question","draft","policy_check"]},"digest_source":"emitter","emission":{"gaps":[],"policy":"fail-closed"},"format":"stage-receipt/0.3","inputs":[{"bytes":"1655","digest":"sha256:b9dee89c29c49ed3be5ccb235b315a4038b56a84f4be4584b5499436c21d3664","media_type":"application/json","name":"receipt:draft","trust_class":"operator-authored"},{"bytes":"190","digest":"sha256:28ee91f1478b0243c2989623f4d63fe0575538923c7bfc2832fb350556baa202","media_type":"application/json","name":"draft.json","trust_class":"operator-authored"}],"instrument":{"config_digest":"sha256:15365411adadf0ba324da9c280f369991f88ba8140d4f79688027aa3ea180e6e","id":"refund-policy","kind":"checker","manifest_digest":"sha256:9171dab9f5f0714257e71310cf08777e66d71816f9061e2914c84fb0bf5c6352","rederivable":"true","version":"1.0.0"},"outcome":{"class":"ok"},"outputs":[{"bytes":"192","digest":"sha256:4f4a22093f01287c2ecd1920b74b0157879691495b35e4b15f9fb0a37f528860","media_type":"application/json","name":"checked.json","trust_class":"operator-authored"}],"prev":"sha256:b9dee89c29c49ed3be5ccb235b315a4038b56a84f4be4584b5499436c21d3664","run_id":"p4-29-reply-30-days","stage":{"index":"3","name":"policy_check"},"time":{"ended":"2026-10-25T12:52:09.690+00:00","started":"2026-10-25T12:52:09.685+00:00"}}
The check's own words
[PASS   ] receipts/03-policy-check.json: receipt format
[PASS   ] receipts/03-policy-check.json: bytes are canonical
[PASS   ] receipts/03-policy-check.json: required field 'format'
[PASS   ] receipts/03-policy-check.json: required field 'run_id'
[PASS   ] receipts/03-policy-check.json: required field 'stage'
[PASS   ] receipts/03-policy-check.json: required field 'prev'
[PASS   ] receipts/03-policy-check.json: required field 'time'
[PASS   ] receipts/03-policy-check.json: required field 'coverage'
[PASS   ] receipts/03-policy-check.json: required field 'emission'
[PASS   ] receipts/03-policy-check.json: required field 'anchor'
[PASS   ] receipts/03-policy-check.json: required field 'instrument'
[PASS   ] receipts/03-policy-check.json: required field 'inputs'
[PASS   ] receipts/03-policy-check.json: required field 'outputs'
[PASS   ] receipts/03-policy-check.json: required field 'assertions'
[PASS   ] receipts/03-policy-check.json: required field 'outcome'
[PASS   ] receipts/03-policy-check.json: time.started carries its zone
[PASS   ] receipts/03-policy-check.json: time.ended carries its zone
[PASS   ] receipts/03-policy-check.json: instrument is named and pinned
[PASS   ] receipts/03-policy-check.json: inputs/receipt:draft declares a trust class
[PASS   ] receipts/03-policy-check.json: inputs/draft.json declares a trust class
[PASS   ] receipts/03-policy-check.json: outputs/checked.json declares a trust class
[PASS   ] receipts/03-policy-check.json: assertions name their constants
[PASS   ] receipts/03-policy-check.json: outcome class is one of ['error', 'ok', 'refused']
[PASS   ] receipts/03-policy-check.json: coverage declares completeness
[PASS   ] receipts/03-policy-check.json: anchor state is declared, not absent
[NOT-RUN] receipts/03-policy-check.json: originality -- record is declared unanchored; this verifier can establish consistency, not originality
[PASS   ] receipts/03-policy-check.json: digest matches the manifest
[PASS   ] receipts/03-policy-check.json: chain link
[PASS   ] receipts/03-policy-check.json: output artifact 'checked.json' matches
Receipt · step 4 of 4 · send
step 4 of 4

send

What went in
receipt:policy_check · 1545 bytes
checked.json · 192 bytes
What came out
sent.json · 107 bytes
When
→

Completed.

Ran as reply-outbox, version 1.0.0.

Receipt · step 4 of 4 · send
Version
reply-outbox · 1.0.0
What went in
receipt:policy_check · 1545 bytes
sha256:43798d7f2f0d…sha256:43798d7f2f0d27e09f17666c6d52d95136b2e0125380e23aabeae4fc5fddd3b8
checked.json · 192 bytes
sha256:4f4a22093f01…sha256:4f4a22093f01287c2ecd1920b74b0157879691495b35e4b15f9fb0a37f528860
What came out
sent.json · 107 bytes
sha256:4fb8f5cd98e9…sha256:4fb8f5cd98e910c6413602452c2d190c98cda9b4886676496c3e356fe73c475c
Fingerprint
sha256:0f78a4652674…sha256:0f78a4652674d5312896c2e6d29750e260f745847c8de68e082b1d5ecc57508d
Settings it ran with
{}
The receipt, exactly as recorded
{"anchor":{"reason":"a demo record; anchoring is not part of this demo","state":"unanchored"},"assertions":{},"coverage":{"boundaries":[],"completeness":"complete","declared_stages":["question","draft","policy_check","send"],"emitting_stages":["question","draft","policy_check","send"]},"digest_source":"emitter","emission":{"gaps":[],"policy":"fail-closed"},"format":"stage-receipt/0.3","inputs":[{"bytes":"1545","digest":"sha256:43798d7f2f0d27e09f17666c6d52d95136b2e0125380e23aabeae4fc5fddd3b8","media_type":"application/json","name":"receipt:policy_check","trust_class":"operator-authored"},{"bytes":"192","digest":"sha256:4f4a22093f01287c2ecd1920b74b0157879691495b35e4b15f9fb0a37f528860","media_type":"application/json","name":"checked.json","trust_class":"operator-authored"}],"instrument":{"config_digest":"sha256:75ebc28d7e876709d8e8277b1dcd9336801c6dcb0331535d6b546d4ddd02aab5","id":"reply-outbox","kind":"writer","manifest_digest":"sha256:9171dab9f5f0714257e71310cf08777e66d71816f9061e2914c84fb0bf5c6352","rederivable":"true","version":"1.0.0"},"outcome":{"class":"ok"},"outputs":[{"bytes":"107","digest":"sha256:4fb8f5cd98e910c6413602452c2d190c98cda9b4886676496c3e356fe73c475c","media_type":"application/json","name":"sent.json","trust_class":"operator-authored"}],"prev":"sha256:43798d7f2f0d27e09f17666c6d52d95136b2e0125380e23aabeae4fc5fddd3b8","run_id":"p4-29-reply-30-days","stage":{"index":"4","name":"send"},"time":{"ended":"2026-10-25T12:52:09.699+00:00","started":"2026-10-25T12:52:09.690+00:00"}}
The check's own words
[PASS   ] receipts/04-send.json: receipt format
[PASS   ] receipts/04-send.json: bytes are canonical
[PASS   ] receipts/04-send.json: required field 'format'
[PASS   ] receipts/04-send.json: required field 'run_id'
[PASS   ] receipts/04-send.json: required field 'stage'
[PASS   ] receipts/04-send.json: required field 'prev'
[PASS   ] receipts/04-send.json: required field 'time'
[PASS   ] receipts/04-send.json: required field 'coverage'
[PASS   ] receipts/04-send.json: required field 'emission'
[PASS   ] receipts/04-send.json: required field 'anchor'
[PASS   ] receipts/04-send.json: required field 'instrument'
[PASS   ] receipts/04-send.json: required field 'inputs'
[PASS   ] receipts/04-send.json: required field 'outputs'
[PASS   ] receipts/04-send.json: required field 'assertions'
[PASS   ] receipts/04-send.json: required field 'outcome'
[PASS   ] receipts/04-send.json: time.started carries its zone
[PASS   ] receipts/04-send.json: time.ended carries its zone
[PASS   ] receipts/04-send.json: instrument is named and pinned
[PASS   ] receipts/04-send.json: inputs/receipt:policy_check declares a trust class
[PASS   ] receipts/04-send.json: inputs/checked.json declares a trust class
[PASS   ] receipts/04-send.json: outputs/sent.json declares a trust class
[PASS   ] receipts/04-send.json: outcome class is one of ['error', 'ok', 'refused']
[PASS   ] receipts/04-send.json: coverage declares completeness
[PASS   ] receipts/04-send.json: 'complete' is consistent with the stage lists
[PASS   ] receipts/04-send.json: anchor state is declared, not absent
[NOT-RUN] receipts/04-send.json: originality -- record is declared unanchored; this verifier can establish consistency, not originality
[PASS   ] receipts/04-send.json: digest matches the manifest
[PASS   ] receipts/04-send.json: chain link
[PASS   ] receipts/04-send.json: output artifact 'sent.json' matches

Where it changed

No comparison with another run was made, so this page does not say where anything changed.

What could be re-checked

No re-check from the record was run, so this page does not say whether anything comes out the same.

This record shows what was verified and evaluated at the time — not what was ultimately true.

Where this answer came from