97 lines
4.9 KiB
Markdown
97 lines
4.9 KiB
Markdown
# Closed multiselect gate evidence
|
|
|
|
This package preserves all 19 closed captures selected from
|
|
`.local/group-movement-gates`: 14 recorded exit 0, and five recorded exit 101.
|
|
Every run reports unchanged captured inputs. The five failures remain failures;
|
|
their complete original receipts and streams are included. See the separate
|
|
[saved-view report](../../../multiselect-saved-view-20260923.md) for scope and
|
|
native observations. These standard-library Python 3.10+ tools do not run Cargo,
|
|
Git, archived source or executables.
|
|
|
|
| Run | Recorded exit | Input files |
|
|
| --- | ---: | ---: |
|
|
| core-1 | 0 | 722 |
|
|
| core-2 | 101 | 729 |
|
|
| core-3 | 0 | 729 |
|
|
| desktop-1 | 101 | 727 |
|
|
| desktop-2 | 101 | 728 |
|
|
| desktop-3 | 0 | 729 |
|
|
| desktop-4 | 0 | 729 |
|
|
| desktop-5 | 0 | 729 |
|
|
| format-1 | 0 | 729 |
|
|
| format-2 | 0 | 729 |
|
|
| lint-1 | 101 | 729 |
|
|
| lint-2 | 0 | 729 |
|
|
| lint-3 | 0 | 729 |
|
|
| native-build-1 | 0 | 729 |
|
|
| native-build-2 | 0 | 729 |
|
|
| oracle-2 | 101 | 729 |
|
|
| oracle-3 | 0 | 729 |
|
|
| windows-build-1 | 0 | 729 |
|
|
| windows-build-2 | 0 | 729 |
|
|
|
|
Core-3, desktop-4, format-1, lint-2, native-build-1 and windows-build-1 share the
|
|
729-file map `55a5f354bb5049a8c77ba9bafa833438ebf754649b0cf5d175d0c8dcfcedd7bb`.
|
|
Desktop-5, format-2, lint-3, native-build-2 and windows-build-2 share the distinct
|
|
729-file map `99dc46645236e674244e7c4867595a6000d3d85b54bcc9ab2b0c601923ecf66c`.
|
|
The [source identity verifier](../source/README.md) compares those maps with Git
|
|
commits `12a7352ddef5f69a144ead8219a50916233d63a9` and
|
|
`f6a6010baed9e6164a1fcc7ecd58256a562827d7`, respectively. Earlier maps retain
|
|
their own evidence scope; they are not reruns against the later source.
|
|
|
|
To validate this exact raw run list without writing a package, from the checkout
|
|
root run:
|
|
|
|
```text
|
|
python -B harness/experiments/multiselect-20260923/checks/prepare.py --root . --runs core-1 core-2 core-3 desktop-1 desktop-2 desktop-3 desktop-4 desktop-5 format-1 format-2 lint-1 lint-2 lint-3 native-build-1 native-build-2 oracle-2 oracle-3 windows-build-1 windows-build-2 --check-only
|
|
```
|
|
|
|
Missing closure, changed inputs, inconsistent receipts, unavailable exact helpers,
|
|
and extra/unexpected run files are refused. Run names must be supplied, must be
|
|
unique, and cannot contain path separators.
|
|
|
|
To create a package, use the same explicit `--runs` list, omit `--check-only`, and
|
|
optionally supply `--output PATH`. The default output is this checks directory.
|
|
An output package is not overwritten. `--helper PATH` can be repeated to supply
|
|
an older gate helper whose exact pinned bytes are no longer the current helper.
|
|
Default helper candidates are `.local/group-movement-gates/*.py`.
|
|
|
|
Verify a completed package anywhere, without the original checkout:
|
|
|
|
```text
|
|
python -B PATH_TO_PACKAGE/verify.py
|
|
```
|
|
|
|
The packager preserves the seven original files per run: started/process/result
|
|
receipts, stdout/stderr logs, the input map, and its source ZIP. It preserves the
|
|
exact helper bytes named by each receipt. Only byte-identical input maps and ZIPs
|
|
are deduplicated into hash-named capsules; their per-run logical mapping remains.
|
|
ZIP member ordering and timestamps are fixed. Raw input/log bytes are unchanged.
|
|
|
|
`manifest.json` records the explicit run list, outcomes, commands, recorded HEADs,
|
|
input counts, helper paths, logical mapping and every stored member pin.
|
|
`files.json` pins `prepare.py`, `verify.py`, this README, the manifest and archive.
|
|
The verifier checks safe exact ZIP membership (including nested source ZIPs),
|
|
every recorded byte count/hash, input counts, the 71 vendored iced_widget files,
|
|
start/process/finish order, receipt relationships, unchanged-input flags, helper
|
|
identity, and exact ordered executable-artifact records parsed from Cargo JSON
|
|
stdout. Missing JSON artifact records remain missing; they are not synthesized
|
|
from paths or inferred from a successful exit. Non-null artifact readback pins
|
|
are checked structurally; executable bytes are not included or independently
|
|
verified by this package.
|
|
|
|
The source capsules are **local historical input snapshots**, including captured
|
|
uncommitted work. A recorded HEAD alone does not identify their contents. They
|
|
are not an integrated release, a hermetic toolchain distribution, or a claim that
|
|
one run's gate applies to a later input map. Commands, paths, PIDs, times and
|
|
artifact hashes are historical receipts, not authenticated execution records.
|
|
The verifier checks their internal consistency and does not access historical
|
|
absolute paths, contact services, extract archives or rerun tests. Pin integrity
|
|
is not an external signature or proof against coordinated receipt alteration.
|
|
|
|
This package has no native interaction, focus, selection, movement, saved-model,
|
|
Undo/Redo or full #29 acceptance implication. The native evidence and its
|
|
independent evaluator belong in their separate reviewed record. The verification
|
|
summary reports captured outcomes, including failures; it does not declare the
|
|
feature or all captured gates successful.
|