Record independent verification of adopted model guard

c7d4b713d7f12061cbd60f523bba70a960ebf05e · 2026-09-10 17:44:30 -0700 · Steve Abrams
Files touched

M verification/e2e-proof.json
Diff

commit c7d4b713d7f12061cbd60f523bba70a960ebf05e
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Thu Sep 10 17:44:30 2026 -0700

    Record independent verification of adopted model guard
---
 verification/e2e-proof.json | 33 +++++++++++++++++++--------------
 1 file changed, 19 insertions(+), 14 deletions(-)

diff --git a/verification/e2e-proof.json b/verification/e2e-proof.json
index cec2537..a5763b6 100644
--- a/verification/e2e-proof.json
+++ b/verification/e2e-proof.json
@@ -1,11 +1,11 @@
 {
-  "intent": "Refuse model-load requests for configuration-only or incomplete on-disk model directories; isolated adoption candidate only",
+  "intent": "Local defensive source fix: refuse config-only/incomplete/corrupt tensor files before model-load request. No runtime model operation requested or performed.",
   "risk_tier": "R1",
   "ticket": "TK-11401",
   "correlation_id": "TK-11401/tail/M-02912",
-  "timestamp": "2026-09-11T00:41:34.548708+00:00",
+  "timestamp": "2026-09-11T00:44:30.033704+00:00",
   "base_commit": "4c16796",
-  "environment": "Isolated git worktree. Actual review.sh copied to temporary fixture app; curl and timeout intercepted by offline executables. EXO_MODELS_DIR points to fixture directory; HOME is unchanged. No active source or scheduler edited.",
+  "environment": "Adopted local source repository; real review.sh exercised in temporary filesystem against mocked external commands; real model directory checked read-only by helper.",
   "preconditions": [
     "Real Qwen3.8 directory has config/index but zero shards",
     "TK11325 records intentional user-authorized removal",
@@ -20,32 +20,37 @@
   "assertions": [
     {
       "verdict": "PASS",
-      "boundary": "actual wrapper -> model POST",
-      "details": "41 actual-wrapper offline scenarios PASS: malformed/missing/truncated shards, wrong tensor map, shape/dtype payload mismatch, unknown dtype, negative/bool dimensions, invalid object schemas and traversal refuse with zero model POST and no traceback; valid scalar/zero-size tensors and22 official dtype widths pass mocked POST; blank no-op."
+      "boundary": "adopted wrapper -> intercepted model API",
+      "details": "41 offline positive/negative cases pass, including all22 supported dtype widths, forged shape size, malformed JSON objects, stub/missing/truncated shards, zero-sized and scalar tensors; no external requests."
     },
     {
       "verdict": "PASS",
       "boundary": "actual model filesystem",
-      "details": "Real configuration/index-only model refused missing shard with exit1; no write or model request"
+      "details": "weight preflight REFUSED: missing or outside-root shard: model-00001-of-00006.safetensors; exit1"
     },
     {
       "verdict": "PASS",
-      "boundary": "syntax/diff",
-      "details": "bash -n and git diff --check pass"
+      "boundary": "source adoption",
+      "details": "Actual checked-in files exercised; bash -n and git diff --check pass."
     },
     {
-      "verdict": "SKIP",
-      "boundary": "runtime adoption and live inference",
-      "details": "Explicitly excluded; requires owner acceptance / scheduled runtime change approval. Artifact completeness only, not a production-fix claim."
+      "verdict": "NOT_IN_SCOPE",
+      "boundary": "download/model inference/scheduler",
+      "details": "No download, wrapper invocation against real services, model swap, scheduler install/restart or inference validation required or performed. No claim of publisher authentication/engine compatibility."
     }
   ],
-  "rollback": "Revert candidate commit or do not adopt candidate; no live change to undo",
+  "rollback": "git -C /Users/macstudio3/Projects/local-model-leaderboard-watch revert --no-edit 156aa46 6fe8096",
   "limitations": [
     "Validates local tensor layout, dtype/shape byte lengths and index references only; not publisher authentication, full safetensors conformance or inference-engine compatibility.",
     "Unknown dtype names fail closed and require explicit support review.",
     "Preflight cannot prevent concurrent deletion after check; runtime errors remain possible."
   ],
-  "verdict": "PASS isolated candidate; operational issue remains held until adoption",
+  "verdict": "PASS for local defensive source fix",
   "review_fix": "Acceptance reviewer proved F32 shape[1000] with4-byte offsets/payload incorrectly passed6afbb80. Followup rejects mismatch, validates malformed object schemas without traceback, supports zero-size tensors, replaces HOME override with scoped EXO_MODELS_DIR.",
-  "reference": "https://github.com/safetensors/safetensors/blob/main/safetensors/src/tensor.rs (Dtype::bitsize verified September10,2026)"
+  "reference": "https://github.com/safetensors/safetensors/blob/main/safetensors/src/tensor.rs (Dtype::bitsize verified September10,2026)",
+  "adopted_commits": [
+    "6fe8096",
+    "156aa46"
+  ],
+  "source_adoption": "PASS: clean master based on4c16796, two reviewed local commits; actual adopted source harness41/41 PASS"
 }
← 156aa46 Validate tensor shape byte lengths before allowing model loa · back to Local Model Leaderboard Watch · auto-data-snapshot: 2026-09-11T08:57:34 (1 data files) — dat 831b6cb →