docs: publish Process multiselect verification and native correction evidence

2026-09-23 06:51:41 -07:00
parent b743a10d51
commit 6d99aacab8
48 changed files with 4921 additions and 0 deletions
@@ -0,0 +1,70 @@
+"""Package the fixed, closed capture-1 pixels using an existing checks package."""
+from pathlib import Path
+import argparse
+import json
+import subprocess
+import zipfile
+from verify import COMMIT, MEMBERS, SOURCES, OUTER, need, pin, checks_data, verify_data, verify_package
+
+HERE = Path(__file__).resolve().parent
+
+
+def main():
+    parser = argparse.ArgumentParser(description=__doc__)
+    parser.add_argument("--root", type=Path, required=True)
+    parser.add_argument("--checks", type=Path, required=True)
+    parser.add_argument("--output", type=Path)
+    parser.add_argument("--check-only", action="store_true")
+    args = parser.parse_args()
+    need(args.check_only or args.output is not None, "--output or --check-only required")
+    if args.output:
+        need(not args.output.exists(), "fresh nonexistent output directory required")
+    checks = checks_data(args.checks)
+    gate, source = checks
+    # Compare every captured source byte to the named commit, not current worktree.
+    paths = sorted(source)
+    result = subprocess.run(["git", "cat-file", "--batch"], cwd=args.root,
+                            input="".join(COMMIT + ":" + name + "\n" for name in paths).encode(), capture_output=True, check=True)
+    offset = 0
+    for name in paths:
+        end = result.stdout.index(b"\n", offset)
+        header = result.stdout[offset:end].split()
+        need(len(header) == 3 and header[1] == b"blob", "missing commit blob: " + name)
+        size = int(header[2])
+        data = result.stdout[end + 1:end + 1 + size]
+        need(data == source[name], "captured input differs from b153: " + name)
+        offset = end + 2 + size
+    need(offset == len(result.stdout), "exact Git batch readback")
+    folder = args.root / ".local/process-feedback-review"
+    need({p.relative_to(folder).as_posix() for p in (folder / "capture-1").rglob("*") if p.is_file()} == {name for name in MEMBERS if name.startswith("capture-1/")}, "exact captured file inventory")
+    payload = {}
+    for name in sorted(MEMBERS):
+        path = folder / name
+        need(not path.is_symlink() and not getattr(path, "is_junction", lambda: False)(), "linked input")
+        payload[name] = path.read_bytes()
+    manifest = {"schema": 1, "kind": "process-render-feedback", "sourceCommit": COMMIT,
+                "checksRun": "feedback-1", "checksPins": {name: pin(data) for name, data in gate.items()},
+                "capturingSources": {name: pin(source[name]) for name in SOURCES},
+                "members": {name: pin(data) for name, data in payload.items()}}
+    summary = verify_data(manifest, payload.__getitem__, checks)
+    if args.check_only:
+        print("PASS raw pixels, metadata and all 742 b153 source blobs:", summary)
+        return
+    out = args.output.resolve()
+    out.mkdir(parents=True, exist_ok=False)
+    for name in ("prepare.py", "verify.py", "README.md"):
+        (out / name).write_bytes((HERE / name).read_bytes())
+    with zipfile.ZipFile(out / "evidence.zip", "x", compression=zipfile.ZIP_DEFLATED, compresslevel=9) as archive:
+        for name, data in payload.items():
+            info = zipfile.ZipInfo(name, date_time=(2026, 9, 23, 0, 0, 0))
+            info.compress_type = zipfile.ZIP_DEFLATED
+            info.external_attr = 0o100644 << 16
+            archive.writestr(info, data)
+    (out / "manifest.json").write_text(json.dumps(manifest, indent=2) + "\n", encoding="utf-8")
+    (out / "files.json").write_text(json.dumps({name: pin((out / name).read_bytes()) for name in sorted(OUTER)}, indent=2) + "\n", encoding="utf-8")
+    need(verify_package(out, checks) == summary, "written archive readback")
+    print("PASS package readback and all 742 b153 source blobs:", out, summary)
+
+
+if __name__ == "__main__":
+    main()