3.0 KiB
Finite v2 controls — execution pending parent review
controls.py has 15 cases total: one unchanged positive, then fourteen negatives. It stops on the first unexpected result or timeout. It does not import the verifier. After review only:
python -B controls.py --repo /path/to/ARCADIA-Studio --package /path/to/v2-package --out /fresh/path/to/controls-results
The positive uses original package bytes. Each negative rebuilds one transient ZIP; all changed inner log/input/outcome bindings, payload hashes, ZIP bytes/SHA and verifier bytes/SHA are refreshed, except the two intentional top-level pin controls. Repeated-target artifact negatives therefore reach the new identity check with valid transport hashes. Only compact stdout/stderr/result files remain. Temporary paths are checked beneath the fresh result directory before automatic cleanup; source/package files remain untouched. Peak additional archive storage is about 0.5 MiB, not a retained corpus. Per-case timeout defaults to300 seconds (configurable30–600); timeout is not a successful refusal.
| Case | Mutation / expected discriminator |
|---|---|
| archive-pin | Append ZIP transport bytes after recording its pin; top-level archive pin differs. |
| verifier-pin | Corrupt only verifier descriptor; top-level verifier pin differs. |
| route-pair-artifact | Change only route-error artifact SHA, with refreshed receipt/transport hashes; repeated integration target artifact differs. |
| source-pair-artifact | Change only aggregate-reference artifact SHA; same pair-identity refusal. |
| missing-new-outcome | Remove one new full-suite outcome and adjust pass count; exact runtime membership refuses. |
| changed-inherited-diagnostic | Alter one old diagnostic column while retaining name/status/header error; exact diagnostic comparison refuses. |
| forged-git-input | Consistently forge one input SHA across all ten71 manifests; immutable Git bytes refuse. |
| missing-failed-history | Remove b9 failed-focus triple with refreshed membership; mandatory payload inventory refuses. |
| integration-zero-test | Synthesize successful zero-test result/footer; exactly-one expected outcome refuses. |
| integration-ignored | Replace one ok outcome/footer with ignored; required status refuses. |
| integration-wrong-command | Remove --exact while retaining genuine outcomes; exact argv refuses. |
| changed-formatter-body | Alter same inherited body in71/aaec fmt logs; published baseline comparison refuses. |
| changed-successor-diff | Append text to correction patch; immutable Git diff refuses. |
| duplicate-zip-member | Add duplicate member and refresh archive pin; ZIP uniqueness refuses. |
A refusal at a different earlier check is an unexpected result, not a pass for the intended discriminator. The driver checks original package hashes after every case and at completion. It launches only the reviewed verifier with read-only Git access, never subject code, compiler, GUI, archived launchers or binaries. This is a finite proposal, not evidence of executed controls.