I read this as a read-only cryptographic release-provenance audit of the exact v36 candidate - I’ll locate the release evidence and ledger schema, independently recompute every requested digest and qualification run, then return PASS/FAIL/INCONCLUSIVE with any mismatches.


The exact prefreeze and postfreeze bundles are present. I’m now reconciling their self-declared hashes against raw bytes/canonical JSON, mapping every field in ledger line 168 to its source artifact, and extracting the original commands so fresh runs use the candidate’s own sealed tools rather than ambient code.


message: WebSocket error

stop_reason: error


All line-168 byte hashes checked so far match, including the two ledger “socket transcript” values as raw file hashes; the different hashes inside the receipts are canonical transcript-document hashes, not contradictions. The 39-event authority registry/ledger chain also recomputes end to end. I’m starting the fresh isolated execution wave now: actual 749-test profile run, hostile-CWD standalone verifier, direct bare bootstrap, sealed Ty 3.12, and clean-wheel rehydrated final state.


The fresh standalone, bare bootstrap, and 109-wheel rehydrated final-state runs all returned the exact candidate and PASS statuses. The fresh profile run again collected/executed/passed 749/749/749 with the same ordered test-ID manifest digest and interpreter hash; only pytest’s elapsed-time text changed, as expected. The first Ty invocation was invalid because I pre-created its contractually absent output directory; after removing that audit-only directory, the single valid Ty run reproduced the exact 810-diagnostic raw and semantic hashes. I’m completing the final exhaustive seal/inventory/RECORD/stream/log and ledger-field reconciliation.


I read this as the final read-only release-provenance verdict - I recomputed all bindings, resolved ledger line 168, and independently reran every requested qualification surface.

# Cryptographic verdict: PASS

Exact candidate:

`1a8ba68a8312943b8918ef9029023aa97fc968fd2d9c0f316d7385232e0d7712`

## Core provenance

- Candidate derivation recomputed from canonical inputs: exact match.
- Candidate file: `cad42b6d5c56719a082a14f98dd0b7baa0b63cc6d9e930bd3e99df7b81e90fd0`
- Product binding:
  - document: `74a3e39740ac76a67b3402d4046b716bca5ef926e704b7cbc7c74bac6f1646b3`
  - file: `d9c983b5e26f7e21b1e2e6507aacb1146a6fdfb747185a7adc71a37618b6df56`
- Wheels:
  - Hermes: `cf768529760f99f1023509b2309777e24cc837f56c3ebd2086e91a9721ee5884`
  - Profile: `a56da2417df0912f3fe407c0b78befd7362207d1c8a35271000af46701ba79d2`
  - Ty: `932d4552233cfbaa325ddc3db5982150a37f437cf94a332eb3869052148bfe4c`
- All 109 sealed wheels passed full ZIP/RECORD member hash and size validation.
- Bound tool hashes, including Ty runner `cf6cdcf...`, profile runner `ef7c3ce7...`, and interpreter `d9bc96d1...`, match.

## Receipt-v2 and fresh profile run

Historical receipt-v2 recomputed correctly:

- Receipt file: `11b5e964e2688c3cf444c92f51890d2c52c71f6353a01f1f8e3ed80ed8466e90`
- Receipt document: `b1a732e065a4ef0b3768ed5c9387d5cd2593da61b1bfeb96f5e62c48d24a3df3`
- Source before/after: `b34b2a12fd0ad3d4c95a58c847a2411e81272a646f5a4f5ec568d0d3640a3747`
- Manifest artifact: `e9d99366b71c1da76cab1b0232478ba262b94deb4eb48301ff41f06704864bf8`
- Manifest document: `75570c292c602ee16f25d6fbafada471b70b3cddf9d3f7d7fee75bd0e6227a0b`
- Historical stdout: `f71b02075ec56c94c14e7d8c8d31dede6043090f59eb3a16d3514902e56725ed`
- Historical stderr: empty SHA-256.
- Fresh isolated run: `749/749/749`, exit 0, Python 3.12.9, pytest 9.1.1.
- Fresh ordered test IDs reproduced the exact manifest document digest. Raw stdout differed only because pytest embeds elapsed time.

## Ty, socket, and direct_url

- Fresh valid Ty run reproduced:
  - 810 diagnostics
  - raw: `f4a2265141525dc8005430e8afdf61145ff88c24a7fc00aad2d7609b3f2ce86a`
  - semantic: `4b24118c95c05fa392f976a69034da7e7d24f63d098b32ef5c252537ab13da61`
  - target `--python-version 3.12` exactly once
  - zero capability diagnostics
- Both socket transcripts canonically recomputed:
  - source: `1ee8a05698b941267af090d620e5b4f3f9608c75bdaa33818e3adabf78dbb944`
  - installed: `eceed398429f5d9743c4dcd818cb32fa482e0c5823eb7f8a5ce78b3efb959668`
- Each records one server-delivered post-revocation update, zero handler entries, zero mutations, deferred watcher failure, and complete cleanup.
- Ledger hashes `d8bfc6...` and `80d4e0...` are raw transcript-file hashes; the different values above are canonical document hashes.
- Raw direct_url hashes recomputed:
  - Hermes: `da1a23b65038c9e1bd16e63e5ded0f218f9434bd451b7546fa4e11dee1dd8bcc`
  - Profile: `e2bf6d6efd045965e1fcf35db5738f6b98f691b82f61d153c5df0f0987e8ad48`
- Canonical portable projections:
  - Hermes: `f28a844f3dd45d39a7b3b7f9455857f071cd64c283077b3b157b32576c5a4f71`
  - Profile: `17792abcaaa6a8c08704ef383c2a9ae685e9cc7795a9b0071671af15d0ea42f2`
- No raw path-dependent equality is claimed.

## Authority, seals, inventories, and reruns

- Full 39-event authority registry and ledger chains recomputed.
- Registry head: `77db12c10f93a65c54c1cd1383a0f7a1d1a6bac889c9d6d063f3d987abc1ceea`
- Ledger head: `1ef33da8d556f185ffd941deeaf562321c2091ac8b2498e78df85373178f51f9`
- Prefreeze: 394 files, exact inventory, modes and no symlinks.
- Prefreeze seal: `ca3a427889c8d5f61929b34707c2a89529c9205e00e06c3733307df414fc96b0`
- Postfreeze: 43 sealed receipt files, exact stream byte counts/hashes and exit codes.
- Postfreeze seal: `2ccf4da39293b7c101c1a69c3e4955eebbf5ee2a55688b46f636620ada8988c4`
- Fresh hostile-CWD standalone: `TASK26_INDEPENDENT_CANDIDATE_PASS`
- Fresh bare bootstrap: `TASK26_FROZEN_BOOTSTRAP_PASS`
- Fresh clean 109-wheel rehydration: `ACTUAL_INSTALLED_GOLDEN_PATH_PASS`
- Test logs resolve to 284 focused, 76 expanded, 204+204 parser, 131 lifecycle, 8,530 Gateway, 32 direct_url attacks, and 14 Ty attacks.

All 22 digest fields in ledger line 168 resolve exactly to their referenced bytes. The evidence bundles and ledger were not modified; audit-only temporary roots were removed.