[object Object]

← back to Ticket System

Add replayable TK-10928 cycle evidence

3233cb8e953ef85da42a2bf02fdf4d818017460f · 2026-09-03 19:50:30 -0700 · Steve Abrams

Files touched

Diff

commit 3233cb8e953ef85da42a2bf02fdf4d818017460f
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Thu Sep 3 19:50:30 2026 -0700

    Add replayable TK-10928 cycle evidence
---
 .../TK-10928-20260904T0238Z-vpops/README.md        |  2 +
 .../TK-10928-20260904T0238Z-vpops/e2e-proof.json   |  6 +--
 .../TK-10928-20260904T0238Z-vpops/manifest.json    |  6 ++-
 .../replay-output.txt                              |  7 ++++
 .../TK-10928-20260904T0238Z-vpops/replay.sh        | 49 ++++++++++++++++++++++
 5 files changed, 66 insertions(+), 4 deletions(-)

diff --git a/data/codex-yoloforever/evidence/TK-10928-20260904T0238Z-vpops/README.md b/data/codex-yoloforever/evidence/TK-10928-20260904T0238Z-vpops/README.md
index aa9ea459..a68035e6 100644
--- a/data/codex-yoloforever/evidence/TK-10928-20260904T0238Z-vpops/README.md
+++ b/data/codex-yoloforever/evidence/TK-10928-20260904T0238Z-vpops/README.md
@@ -4,4 +4,6 @@ Correlation: `codex-yf-20260904T0238Z-vpops`
 
 This R0 bundle preserves the exact ticketmaster snapshot, latest canonical blocker event, zero-cost guard, and installed DTD entry points observed in one bounded read-only cycle. It does not diagnose or remediate the canary and does not change ticket status, assignment, or blocker state.
 
+Run `./replay.sh` to recheck the preserved snapshot against its exact source identity, board semantics, negative tamper rejection, canonical recheck time, and zero-cost guard. `replay-output.txt` retains the successful run. `manifest.json` hashes every other bundle artifact; it intentionally cannot hash itself without a recursive digest.
+
 The controlling outcome is gated-only/no-progress: wait through `2026-09-04T11:10:00Z`, then perform only the separately authorized read-only scheduler/artifact correlation if the ticket remains eligible. History/ref rewrite, prune/GC, threshold policy, process, remote, production, and external actions remain Steve-gated.
diff --git a/data/codex-yoloforever/evidence/TK-10928-20260904T0238Z-vpops/e2e-proof.json b/data/codex-yoloforever/evidence/TK-10928-20260904T0238Z-vpops/e2e-proof.json
index 8ab1f59f..7337738d 100644
--- a/data/codex-yoloforever/evidence/TK-10928-20260904T0238Z-vpops/e2e-proof.json
+++ b/data/codex-yoloforever/evidence/TK-10928-20260904T0238Z-vpops/e2e-proof.json
@@ -7,16 +7,16 @@
   "correlation": "codex-yf-20260904T0238Z-vpops",
   "timestamp": "2026-09-04T02:42:05Z",
   "build_identity": "pre-evidence HEAD b353f0f3dc08e82de20ca2e5fa6d458240350946; final evidence commit recorded in ticket handoff",
-  "baseline": "Fresh ticketmaster snapshot 2026-09-04T02:38:14.595Z and latest canonical blocker event 2026-09-03T23:04:12.038Z.",
+  "baseline": "Fresh source /Users/macstudio3/.agents/skills/ticketmaster/state/latest.json at snapshot ts 2026-09-04T02:38:14.595Z, sha256 f54c4e2652e12e1cdc565489d5b7852bc0b9365e2cbd768f678de8a897002e00, 22451 bytes; latest canonical blocker event 2026-09-03T23:04:12.038Z.",
   "assertions": [
-    {"boundary":"file","assertion":"preserved snapshot is byte-identical to the fresh source at capture","verdict":"PASS"},
+    {"boundary":"file","assertion":"replay.sh verifies the preserved snapshot is byte-identical to its exact source path/hash/size; replay-output.txt records exit 0","verdict":"PASS"},
     {"boundary":"board","assertion":"totals.open_or_active=56 and orchestration_reasons.actionable_pickups=0","verdict":"PASS"},
     {"boundary":"board","assertion":"top contains zero execute and zero fast-track-local dispositions","verdict":"PASS"},
     {"boundary":"ticket","assertion":"TK-10928 is open, hold-policy, live, steveGated=true, approvalLane=hold-policy","verdict":"PASS"},
     {"boundary":"ticket","assertion":"latest blocker requires preserving history and waiting through recheck_at=2026-09-04T11:10:00Z before read-only scheduler/artifact correlation","verdict":"PASS"},
     {"boundary":"cost-guard","assertion":"guard is exactly ZERO_COST_REQUIRED plus newline at start and end; sha256=8cae41cd92c49ab229b26a9061bea48712416efcc6534496a94d69a67f5aa7ed","verdict":"PASS"},
     {"boundary":"static-code","assertion":"installed panel and post-decision scripts pin the canonical guard and assign DTD_ZERO_COST=1 for ZERO_COST_REQUIRED before provider routing, even when inherited DTD_ZERO_COST is absent","verdict":"PASS"},
-    {"boundary":"negative","assertion":"a snapshot tampered to actionable_pickups=1 is rejected by the semantic verifier","verdict":"PASS"},
+    {"boundary":"negative","assertion":"replay.sh creates a unique retained tamper copy, changes actionable_pickups to 1, and requires the semantic verifier to reject it; replay-output.txt records PASS","verdict":"PASS"},
     {"boundary":"side-effect","assertion":"no canary/scheduler/repo/disk probe, process/service action, ticket state/blocker mutation, DTD, Claude, provider API, paid HTTP, or external write was performed","verdict":"PASS"}
   ],
   "cleanup": "Evidence intentionally retained; unique temporary tamper directory intentionally retained for OS reclamation.",
diff --git a/data/codex-yoloforever/evidence/TK-10928-20260904T0238Z-vpops/manifest.json b/data/codex-yoloforever/evidence/TK-10928-20260904T0238Z-vpops/manifest.json
index 25fa2a76..41a9a813 100644
--- a/data/codex-yoloforever/evidence/TK-10928-20260904T0238Z-vpops/manifest.json
+++ b/data/codex-yoloforever/evidence/TK-10928-20260904T0238Z-vpops/manifest.json
@@ -4,12 +4,16 @@
   "correlation": "codex-yf-20260904T0238Z-vpops",
   "captured_at": "2026-09-04T02:42:05Z",
   "cost_usd": 0,
+  "self_exclusion": "manifest.json is intentionally excluded because a file cannot contain its own stable cryptographic digest",
   "files": [
-    {"path":"README.md","bytes":709,"sha256":"c72206d68b8ee47081d1cd9e56e50943f7afcfba0f9c3890b0a2129aa4046ea4"},
+    {"path":"README.md","bytes":1050,"sha256":"add6beacffe948ef6060b96f5e00c0883073ff61167bd36fa0e5cb62edcee9b5"},
     {"path":"dtd-cost-mode","bytes":19,"sha256":"8cae41cd92c49ab229b26a9061bea48712416efcc6534496a94d69a67f5aa7ed"},
+    {"path":"e2e-proof.json","bytes":2966,"sha256":"dc9b80707fb387c0b2f5da155fef1c6d777c92374c61d5d8b0226da7966d0e21"},
     {"path":"installed-panel.sh","bytes":6893,"sha256":"c62d3ad635af598fb41c029c8d272f079a420cd9812a34a71ff08e776d59c93b"},
     {"path":"installed-post-decision-codex.sh","bytes":3736,"sha256":"c89d41d74256d739f7bb0756ccd8d8e25228398b026abfb49d5c594fffe7f503"},
     {"path":"latest-blocker-event.jsonl","bytes":647,"sha256":"47b9145088ea7398d3f1528fc5c74ee61c28f43e32f69f34cc95706c9deb1716"},
+    {"path":"replay-output.txt","bytes":614,"sha256":"7c5e98b249d10dc0562c473306c043f78de5cfe460ebf14169603f33ce74913e"},
+    {"path":"replay.sh","bytes":2261,"sha256":"16fd26aac5950b6d78bd5770a5d7659fa7ef3f45cfe0d8cefc1d4b8305652f6f"},
     {"path":"ticketmaster-latest.json","bytes":22451,"sha256":"f54c4e2652e12e1cdc565489d5b7852bc0b9365e2cbd768f678de8a897002e00"},
     {"path":"yoloforever-dtd-sha256.tsv","bytes":233,"sha256":"17488709e96bfe30e02cf1d91ae83fea32df584b5d564ba24061822441763d79"}
   ]
diff --git a/data/codex-yoloforever/evidence/TK-10928-20260904T0238Z-vpops/replay-output.txt b/data/codex-yoloforever/evidence/TK-10928-20260904T0238Z-vpops/replay-output.txt
new file mode 100644
index 00000000..6ecf639c
--- /dev/null
+++ b/data/codex-yoloforever/evidence/TK-10928-20260904T0238Z-vpops/replay-output.txt
@@ -0,0 +1,7 @@
+command: ./replay.sh
+exit: 0
+snapshot_identity PASS source=/Users/macstudio3/.agents/skills/ticketmaster/state/latest.json sha256=f54c4e2652e12e1cdc565489d5b7852bc0b9365e2cbd768f678de8a897002e00 bytes=22451
+board_semantics PASS open=56 actionable=0 execute=0 fast_track_local=0
+tamper_rejection PASS changed=orchestration_reasons.actionable_pickups:0->1 retained_temp=/var/folders/rq/j8g1f7nn6jv6_lr1cfmqym6w0000gn/T/tmp.Ngg9Sn8Ozb/ticketmaster-latest-tampered.json
+canonical_blocker PASS recheck_at=2026-09-04T11:10:00Z
+zero_cost_guard PASS sha256=8cae41cd92c49ab229b26a9061bea48712416efcc6534496a94d69a67f5aa7ed
diff --git a/data/codex-yoloforever/evidence/TK-10928-20260904T0238Z-vpops/replay.sh b/data/codex-yoloforever/evidence/TK-10928-20260904T0238Z-vpops/replay.sh
new file mode 100755
index 00000000..f39d4a4e
--- /dev/null
+++ b/data/codex-yoloforever/evidence/TK-10928-20260904T0238Z-vpops/replay.sh
@@ -0,0 +1,49 @@
+#!/bin/sh
+set -eu
+
+BUNDLE_DIR=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)
+SOURCE_SNAPSHOT=/Users/macstudio3/.agents/skills/ticketmaster/state/latest.json
+EXPECTED_SNAPSHOT_SHA=f54c4e2652e12e1cdc565489d5b7852bc0b9365e2cbd768f678de8a897002e00
+EXPECTED_GUARD_SHA=8cae41cd92c49ab229b26a9061bea48712416efcc6534496a94d69a67f5aa7ed
+TAMPER_DIR=$(mktemp -d)
+TAMPERED="$TAMPER_DIR/ticketmaster-latest-tampered.json"
+
+hash_file() {
+  shasum -a 256 "$1" | awk '{print $1}'
+}
+
+SOURCE_SHA=$(hash_file "$SOURCE_SNAPSHOT")
+PRESERVED_SHA=$(hash_file "$BUNDLE_DIR/ticketmaster-latest.json")
+test "$SOURCE_SHA" = "$EXPECTED_SNAPSHOT_SHA"
+test "$PRESERVED_SHA" = "$EXPECTED_SNAPSHOT_SHA"
+cmp -s "$SOURCE_SNAPSHOT" "$BUNDLE_DIR/ticketmaster-latest.json"
+printf 'snapshot_identity PASS source=%s sha256=%s bytes=%s\n' \
+  "$SOURCE_SNAPSHOT" "$SOURCE_SHA" "$(wc -c < "$SOURCE_SNAPSHOT" | tr -d ' ')"
+
+jq -e '.totals.open_or_active == 56
+  and .orchestration_reasons.actionable_pickups == 0
+  and ([.top[] | select(.disposition == "execute")] | length) == 0
+  and ([.top[] | select(.disposition == "fast-track-local")] | length) == 0' \
+  "$BUNDLE_DIR/ticketmaster-latest.json" >/dev/null
+printf 'board_semantics PASS open=56 actionable=0 execute=0 fast_track_local=0\n'
+
+jq '.orchestration_reasons.actionable_pickups = 1' \
+  "$BUNDLE_DIR/ticketmaster-latest.json" > "$TAMPERED"
+if jq -e '.totals.open_or_active == 56
+  and .orchestration_reasons.actionable_pickups == 0
+  and ([.top[] | select(.disposition == "execute")] | length) == 0
+  and ([.top[] | select(.disposition == "fast-track-local")] | length) == 0' \
+  "$TAMPERED" >/dev/null; then
+  printf 'tamper_rejection FAIL\n' >&2
+  exit 1
+fi
+printf 'tamper_rejection PASS changed=orchestration_reasons.actionable_pickups:0->1 retained_temp=%s\n' "$TAMPERED"
+
+jq -e '.blocker.recheck_at == "2026-09-04T11:10:00Z"' \
+  "$BUNDLE_DIR/latest-blocker-event.jsonl" >/dev/null
+printf 'canonical_blocker PASS recheck_at=2026-09-04T11:10:00Z\n'
+
+GUARD_SHA=$(hash_file /Users/macstudio3/Projects/ticket-system/config/dtd-cost-mode)
+test "$(tr -d '\r\n' < /Users/macstudio3/Projects/ticket-system/config/dtd-cost-mode)" = ZERO_COST_REQUIRED
+test "$GUARD_SHA" = "$EXPECTED_GUARD_SHA"
+printf 'zero_cost_guard PASS sha256=%s\n' "$GUARD_SHA"

← 6757237a Preserve TK-10928 gate snapshot evidence  ·  back to Ticket System  ·  Log TK-10928 zero-cost monitoring cycle b3a80ae6 →