← back to Gmc Titlefix
Preserve historical proof and scope MDC evidence to its ticket
853cb8f11970fdfb63656ddfcbc4f7d3a2398e2b · 2026-09-09 11:52:16 -0700 · Steve Abrams
Files touched
M verification/e2e-proof.jsonA verification/tk11307-source-guard-e2e-proof.json
Diff
commit 853cb8f11970fdfb63656ddfcbc4f7d3a2398e2b
Author: Steve Abrams <steve@designerwallcoverings.com>
Date: Wed Sep 9 11:52:16 2026 -0700
Preserve historical proof and scope MDC evidence to its ticket
---
verification/e2e-proof.json | 81 +++++++++++++++---------
verification/tk11307-source-guard-e2e-proof.json | 54 ++++++++++++++++
2 files changed, 106 insertions(+), 29 deletions(-)
diff --git a/verification/e2e-proof.json b/verification/e2e-proof.json
index 48c7525..b0ab3e8 100644
--- a/verification/e2e-proof.json
+++ b/verification/e2e-proof.json
@@ -1,50 +1,73 @@
{
- "intent": "Fail closed before insert for unresolved sample-title source selection",
- "risk_tier": "R1 isolated code; external deployment remains blocked",
- "environment": "Isolated worktree; offline auth/fetch stubs; real CLI subprocesses",
- "base_commit": "8bc8356720606be4cc06ab60f3c03737cc4d9247",
- "timestamp": "2026-09-09T18:49:17.695633+00:00",
- "ticket": "TK-11307",
- "correlation": "dm-mtug50la-61688-skhph3",
- "commands": [
- "node test-mdc-source-guard.mjs",
- "git diff --check",
- "Fresh copied builder process.exit(42) mutation: updated suite must fail"
- ],
+ "ticket": "TK-10993",
+ "agent": "codex-run-10993",
+ "intent": "Execute and independently verify Steve-approved 19 Google landing-link and 14 description corrections",
+ "risk_tier": "R4",
+ "environment": {
+ "merchant": "146735262",
+ "shopify": "designer-laboratory-sandbox",
+ "api": "Merchant products/v1 single-field PATCH"
+ },
+ "timestamp": "2026-09-05T07:25:07.335226+00:00",
+ "authorization": {
+ "ticket": "TK-10993",
+ "approved_by": "Steve",
+ "authorization": "22TK-10993 is blocked at your live- feed gate approve ungate!!!",
+ "scope": "19 link and 14 description corrections from manifest",
+ "manifest_sha256": "ead4af90c8e149947e23f77add89cd02ea87f0a7e251d769db8a198b07d24818",
+ "recorded_at": "2026-09-05T07:03:08.328723+00:00"
+ },
+ "manifest_sha256": "ead4af90c8e149947e23f77add89cd02ea87f0a7e251d769db8a198b07d24818",
+ "documented_preflight_refinement": "verification/tk10993-20260905-link-preflight-amendment.json",
"checks": [
{
+ "name": "Pinned scope, field-mask/negative tests, rollback rehearsal",
+ "verdict": "PASS",
+ "evidence": "6 tests; reverse PATCH restores only affected field; no real rollback fired"
+ },
+ {
+ "name": "Six live canary responses",
"verdict": "PASS",
- "name": "CLI boundary negatives and stub happy path",
- "assertions": 78,
- "evidence": "/var/folders/rq/j8g1f7nn6jv6_lr1cfmqym6w0000gn/T/mdc-source-proof-mKrYkA"
+ "evidence": "6 accepted with full before snapshots, manifest-bound hashes and prior intent records"
},
{
+ "name": "Canary served view",
"verdict": "PASS",
- "mutant_suite_exit": 1,
- "reason": "Builder early-exit mutation is detected at required source listing boundary",
- "directory": "/private/tmp/mdc-exit-mutation.3VaNcc",
- "evidence": "/Users/macstudio3/Projects/ticket-system/data/codex-yoloforever/cycle-20260909T1836Z.rZWqkR/mdc-mutation-tests.txt"
+ "evidence": "verify-2026-09-05T07-08-00-350Z.json: correct6, errors0, collateral0, age218s"
},
{
+ "name": "Customer destinations",
"verdict": "PASS",
- "name": "Every negative CLI case proves specific resolver rejection and reached-list trace; malformed/foreign explicit source requires specific pre-list rejection"
+ "evidence": "public-landings-2026-09-05T07-09-43-087Z.json: all19 HTTP200 with public JSON requested variant present"
},
{
+ "name": "720-second canary observation before rest",
"verdict": "PASS",
- "name": "Main HEAD, all tracked file hashes, dirty/untracked status preserved",
- "evidence": "/Users/macstudio3/Projects/ticket-system/data/codex-yoloforever/cycle-20260909T1836Z.rZWqkR/mdc-main-preserved.json"
+ "evidence": "canary-pass.json: 741 seconds, six correct, zero errors/collateral/new disapprovals"
},
{
+ "name": "All33 live field corrections verified",
"verdict": "PASS",
- "name": "No real auth reads or networking; stub imports intercept before reading; fetch constrained; socket guard installed"
+ "evidence": "data/tk10993-approved-residual-20260905/verify-2026-09-05T07-22-08-600Z.json: correct33/33, errors0, unrelated changes0, new disapprovals0"
},
{
- "verdict": "SKIP",
- "name": "Live processed product state, source identity, preimages, canary, runtime integration",
- "reason": "Out of scope and unapproved; source outcome remains blocked"
+ "name": "Independent post-apply regression audit",
+ "verdict": "PASS",
+ "evidence": "verification/tk10993-20260905-post-apply-final.json: destamp40/40, protected10/10, F3links22/22, identitycopy82/82"
}
],
- "retained_state": "All temporary fixtures and worktree retained; no cleanup deletion",
- "verdict": "PARTIAL overall; bounded offline increment passes",
- "safest_next_action": "Parent independently reruns suite and reviews isolated commit; leave runtime unchanged"
+ "side_effect_boundary": "No inserts/deletes, Shopify writes, price changes, shipping-setting changes, or remote pushes. Only approved link/description PATCHes.",
+ "commands": [
+ "node --test test/tk10993-residual-executor.test.mjs",
+ "node tk10993-residual-executor.mjs preflight",
+ "node tk10993-residual-executor.mjs canary --apply-approved",
+ "node tk10993-residual-executor.mjs verify",
+ "node tk10993-residual-executor.mjs public-landings",
+ "node tk10993-residual-executor.mjs rollback-plan",
+ "node tk10993-residual-executor.mjs rest --apply-approved"
+ ],
+ "rollback": "Per-record before snapshots and reverse single-field PATCH requests; simulated restore tested. No live reversal was needed.",
+ "verdict": "PASS_APPROVED_33_CORRECTIONS",
+ "broader_ticket_status": "Still open: overnight durability observation and fresh Canada full-coverage assessment. Approved33-field gate resolved.",
+ "rollback_plan": "data/tk10993-approved-residual-20260905/rollback-plan-2026-09-05T07-22-54-719Z.json"
}
diff --git a/verification/tk11307-source-guard-e2e-proof.json b/verification/tk11307-source-guard-e2e-proof.json
new file mode 100644
index 0000000..189f991
--- /dev/null
+++ b/verification/tk11307-source-guard-e2e-proof.json
@@ -0,0 +1,54 @@
+{
+ "intent": "Fail closed before insert for unresolved sample-title source selection",
+ "risk_tier": "R1 isolated code; external deployment remains blocked",
+ "environment": "Isolated worktree; offline auth/fetch stubs; real CLI subprocesses",
+ "base_commit": "8bc8356720606be4cc06ab60f3c03737cc4d9247",
+ "timestamp": "2026-09-09T18:49:17.695633+00:00",
+ "ticket": "TK-11307",
+ "correlation": "dm-mtug50la-61688-skhph3",
+ "commands": [
+ "node test-mdc-source-guard.mjs",
+ "git diff --check",
+ "Fresh copied builder process.exit(42) mutation: updated suite must fail"
+ ],
+ "checks": [
+ {
+ "verdict": "PASS",
+ "name": "CLI boundary negatives and stub happy path",
+ "assertions": 78,
+ "evidence": "/var/folders/rq/j8g1f7nn6jv6_lr1cfmqym6w0000gn/T/mdc-source-proof-mKrYkA"
+ },
+ {
+ "verdict": "PASS",
+ "mutant_suite_exit": 1,
+ "reason": "Builder early-exit mutation is detected at required source listing boundary",
+ "directory": "/private/tmp/mdc-exit-mutation.3VaNcc",
+ "evidence": "/Users/macstudio3/Projects/ticket-system/data/codex-yoloforever/cycle-20260909T1836Z.rZWqkR/mdc-mutation-tests.txt"
+ },
+ {
+ "verdict": "PASS",
+ "name": "Every negative CLI case proves specific resolver rejection and reached-list trace; malformed/foreign explicit source requires specific pre-list rejection"
+ },
+ {
+ "verdict": "PASS",
+ "name": "Main HEAD, all tracked file hashes, dirty/untracked status preserved",
+ "evidence": "/Users/macstudio3/Projects/ticket-system/data/codex-yoloforever/cycle-20260909T1836Z.rZWqkR/mdc-main-preserved.json"
+ },
+ {
+ "verdict": "PASS",
+ "name": "No real auth reads or networking; stub imports intercept before reading; fetch constrained; socket guard installed"
+ },
+ {
+ "verdict": "SKIP",
+ "name": "Live processed product state, source identity, preimages, canary, runtime integration",
+ "reason": "Out of scope and unapproved; source outcome remains blocked"
+ },
+ {
+ "verdict": "PASS",
+ "name": "Existing TK10993 verification/e2e-proof.json preserved byte-for-byte from base 8bc8356; MDC evidence stored at ticket-scoped path"
+ }
+ ],
+ "retained_state": "All temporary fixtures and worktree retained; no cleanup deletion",
+ "verdict": "PARTIAL overall; bounded offline increment passes",
+ "safest_next_action": "Parent independently reruns suite and reviews isolated commit; leave runtime unchanged"
+}
← 6ed630b Require MDC CLI tests to prove intended source rejection
·
back to Gmc Titlefix
·
Reject MDC sources that claim both primary and supplemental 165be73 →