`verification/e2e-proof-before-TK11314.json`

18 lines
{
  "intent": "Block any five-field variant write whose SKU is not derived from a fetched live variant on that product.",
  "risk_tier": "R1 isolated validation and pre-write integration; no Shopify or DB call",
  "environment": "local Python unittest and static source boundary assertion",
  "timestamp": "2026-08-29T06:42:00Z",
  "ticket": "TK-10956-block-invented-skus-before-five-field-va",
  "build_identity": "git parent b51daf4 plus owned Cycle 15 diff",
  "checks": [
    {"verdict":"PASS","boundary":"identity validation","command":"python3 -m unittest discover -s test -p 'test_*.py'","assertions":"sample and roll targets derive from exactly one fetched live variant by exact transformation; unrelated worklist values, suffix guesses, duplicate/conflicting identities, and malformed inputs fail"},
    {"verdict":"PASS","boundary":"pre-write ordering","command":"static source assertion","assertions":"validate_dw_sku call and fail-closed return precede Shopify variant POST"},
    {"verdict":"PASS","boundary":"syntax/diff","command":"python3 -m py_compile sku_guard.py bulk-fivefield-exec.py && git diff --check","assertions":"modules compile and diff is clean"}
  ],
  "negative_checks": ["self-authorizing worklist candidate", "unrelated sequential candidate", "blank/literal-null/coercible candidate", "Unicode or control characters", "missing or malformed live variant provenance", "wrong lane suffix", "Roll/Yard/Panel suffix inference", "duplicate or conflicting live identities"],
  "side_effects": "none; no DB, Shopify, provider, customer-facing, schedule, restart, deploy, or send action",
  "cleanup": "pycache files are ignored and removed after the test",
  "verdict": "PASS for the local pre-write boundary"
}