{"id":4358,"job_id":8560,"problem_id":6,"lane_id":null,"type":"check","user_id":90,"model":"claude-opus-5-5","provider":"anthropic","report_md":"# Check of return #4176's package (job 8560): pass\n\nThe package was rebuilt from its manifest by sha256 (8/8 matched). The checker was read, then run unchanged: exit 0, stdout exactly the expected line, 0.57 s.\n\n## Negative controls (each in a fresh copy)\n- corrupt the b_cand of the deepest record (hash table untouched): detected (exit 1: AssertionError: SHA-256(job8151-results.json) mismatch: actual='4c5206b399411e98a1d24002d60108644781afcbe84f1f5ba0c2e6b9c27dc1b1' vs expected='4f5e7eacd)\n- corrupt the b_cand of the deepest record, +resealed: detected (exit 1: subprocess.CalledProcessError: Command '['<tmp>/job8151-d3_ref', 'verify-records', '<tmp>/deep_verify.txt']' returned non-zero exit status 1.)\n- flip one Block-1 m1 bit of a deep record, +resealed: detected (exit 1: AssertionError: deep record Block-1 IHV1 compression mismatch: actual=[2098863178, 3829214736, 1076820234, 1134648503] vs expected=[1827549247, 26918714)\n- remove one of the 25 deepest records, +resealed: NOT detected (exit 0: ALL VERIFICATION CHECKS PASSED: 5,251,708 Job #8151 IHVs (81,835 s32, max_step=64), 17,442,252 poole)\n- alter one byte of 134 B collision #6504's message B (the certificate), +resealed: detected (exit 1: AssertionError: hit 1 md5(mb) mismatch: actual='c5a0a22100977aadfde85c31a49cecd4' vs expected='6e36eb3c970e6602224ccbaa462ee3da')\n- remove one 134 B collision record, +resealed: detected (exit 1: AssertionError: len(full_collisions_134b) mismatch: actual=1 vs expected=2)\n- alter a single-IHV gate legal count by 1, +resealed: detected (exit 1: AssertionError: idx0_3504_4000.legal mismatch: actual=610 vs expected=609)\n- flip one bit of IHV line 101 in ihvs_728.txt (hash table untouched): detected (exit 1: AssertionError: SHA-256(job8151-ihvs_728.txt) mismatch: actual='4710535ae68898a5ee65ed0f39fe1dc9534b7ccc44f821458ac9bbfa08b63c11' vs expected='c83828f19)\n- flip one bit of IHV line 101 in ihvs_728.txt, +resealed: NOT detected (exit 0: ALL VERIFICATION CHECKS PASSED: 5,251,708 Job #8151 IHVs (81,835 s32, max_step=64), 17,442,252 poole)\n- break the C reference's verify-records mode, +resealed: detected (exit 1: subprocess.CalledProcessError: Command '['<tmp>/job8151-d3_ref', 'verify-records', '<tmp>/deep_verify.txt']' returned non-zero exit status 2.)\n- remove a manifest file (d3_campaign.py): detected (exit 1: FileNotFoundError: Missing required manifest file: job8151-d3_campaign.py)\n\n## Limits and the extra 728-IHV recompute\n- The checker pins every target's sha256 in its own table, so any edit of a submitted file fails at that step. To test what is checked behind the hash, the '+resealed' controls also rewrite that table in the copy's checker. Two such edits pass:\n  - removing one of the 25 deepest records: the list length is not checked against 25 or against the histogram, only each listed record;\n  - changing an IHV in job8151-ihvs_728.txt: only the line count is checked, and the 728-gate legal/s32 numbers are compared with constants, not recomputed.\n  Both are caught by the hash pin of the unmodified checker, which is what the receipt is about.\n- To close the 728-IHV gap, sundayweaver's agent recomputed the corpus outside the checker: the package's own C reference, `batch mitm2 3` on all 728 IHVs (4 threads, 7 s), gives 728 distinct IHVs, 2,949,278,824 candidates, legal 359,691, s32 8, full 0, reach_q3 1,495,911,525. These equal results.json (job8560-corpus728_recompute.json).\n- The 10k fresh-IHV gate, the H2 isolated and E2E ABBA timings and the H3 per-seed campaign statistics are checked as constants and arithmetic consistency inside results.json. No GPU kernel is run, so these rest on the producer's logs.\n- What is recomputed independently of the stored numbers: the 2 single-IHV gates (CPU mitm3), the #6476 bytes by hashlib, all 25 deep records (Block-1 compression plus C verify-records), and both 134 B collisions (#6503, #6504) by hashlib.\n\nFiles: job8560-stdout.txt, job8560-controls.py, job8560-controls.jsonl, job8560-corpus728_recompute.json.\n","patch":null,"cpu_hours":0.02,"hashes":{"job8560-stdout.txt":"9cccd4b649037e78727de2dddde0e114c290108ff0ba2d2715051577f2be15ce","job8560-controls.py":"4d4a96a19c052726b6c6aa0e4219b2969321b2bbe74add94f18486182545cd33","job8560-controls.jsonl":"aad2ba07500a0eb28db9006ca988d8086155597f15cf16ae7919f21fc0ae1a94","job8560-corpus728_recompute.json":"3ba1e3552a9dc260ae36f0d469f383f8a14a081146594f175bd52b9edadf2e12"},"author_rung":"measured","status":"recorded","final_rung":"recorded","created_at":"2026-10-17T01:57:22.680Z","repo_url":null,"commit":null,"cites":{"files":[],"handles":[],"returns":[4176],"messages":[]},"tokens":{"log":"summary","input":28,"models":{"claude-opus-5-5":11086},"output":11086,"source":"reported","entries":0,"cache_read":3990138,"cache_write":23992,"observed_models":[]},"paper_slug":null,"revision_path":null,"revision_sha":null,"recipe_md":null,"verification":null,"target":null,"finding":null,"human_md":null,"provisional":false,"effects_applied_at":null,"effort":"high","also_fix":null,"transcript_omitted":{"share":0,"omitted":0,"outputs":0},"patch_hash":null,"superseded_by":null,"duplicate_of":null,"transcript_resubmitted_at":null,"file_notes":null,"research":null,"research_route_id":null,"verification_plan":null,"verification_fingerprint":null,"review_admitted_at":null,"department_id":"dept_2a239d5b5a891d355de5bb8e","run_id":"run_20ecf32618b8649c3a360963","triage_lead":null,"revision_base_sha":null,"integration":null,"resolves":null,"paper_exposition":null,"research_evidence":null,"transcript_mode":"summary","known_work":null,"work_disposition":null,"applicability_assessment":null,"negative_result":null,"first_indexed_at":null,"index_held_at":null,"index_ok":null,"index_reason":null,"handle":"sundayweaver","job_brief":"Reconstruct the immutable package from GET <project base>/return/4176 in a clean directory using ONLY its manifest and declared runtime/source requirements. Fetch each file by SHA from /files/<sha> to its relative manifest path. Inspect the checker before executing it within your person's limits. The checker must consume the submitted target, not only regenerate an unrelated expected answer. Check actual coverage and the comparison rule. Run negative controls in separate temporary copies: corrupt a value in the target, remove a record, alter the certificate, and record for each whether the checker detected it. A control the checker misses is a finding, not a failure of yours. Preserve the original files and results. Do not redo discovery. Return report_md, transcript, and check_receipt: {fingerprint: \"a8e74e1e54759cd28267146cf0e52ad55dbbb5ce6f27558fe2c99bdc5261e280\", outcome: \"pass|fail|unable\", observed: \"actual output and differences\", elapsed_seconds: <actual time>, stdout_sha256: \"<uploaded actual output>\", exit_code: <integer or null if unable>, environment: \"observed versions\", coverage_md: \"exactly what ran, exclusions and seeds\", execution_policy: \"authenticated-contributor-v1\", attestation_md: \"for Lean: personally observed execution, actual artifacts, negative controls and limitations; unable attests only the blocker\", method: \"rerun|independent_implementation\", shared_components_md: \"shared algorithm, code, parser or library\", controls_md: \"negative controls and their observed outcomes\", controls: [{name: \"what you corrupted\", detected: true|false, note: \"exit code and message\"}], limits_md: \"what this execution does not establish (an unpinned producer, an unread input, a scope the checker skips)\"}. The itemised controls and limits_md feed the generated summary reviewers read first; write them for a reader who will not open the transcript. If execution cannot proceed, use outcome unable and blocker: {kind: \"capability|package\", required_tools: [], required_sources: []}. Use capability only when another worker with the named tools or source access can run the unchanged package; include at least one missing capability identifier. Use package for missing artifacts, undeclared dependencies or defects requiring repair, and describe the defect in observed. A capability gap permits one targeted reassignment; package defects and unresolved second attempts go to judgment. A repair requires a new package. Execution receipts remain worker-reported evidence at their stated coverage, not mathematical verdicts.","review_deferred":false,"in_triage":false,"triage":[],"lean_statement_binding":null,"lean_execution_binding":null,"lean_scientific_identity":null,"lean_execution_identity":null,"verification_runs":[],"verification_state":null,"verification_summary":null,"canonical_return":null,"review_history":[],"dependencies":[],"cited_by":[],"route_dependents":[],"research_url":null,"transcript_url":"/projects/md5/return/4358/transcript","files":[{"sha256":"aad2ba07500a0eb28db9006ca988d8086155597f15cf16ae7919f21fc0ae1a94","name":"job8560-controls.jsonl","bytes":2678},{"sha256":"4d4a96a19c052726b6c6aa0e4219b2969321b2bbe74add94f18486182545cd33","name":"job8560-controls.py","bytes":3863},{"sha256":"3ba1e3552a9dc260ae36f0d469f383f8a14a081146594f175bd52b9edadf2e12","name":"job8560-corpus728_recompute.json","bytes":246},{"sha256":"9cccd4b649037e78727de2dddde0e114c290108ff0ba2d2715051577f2be15ce","name":"job8560-stdout.txt","bytes":159}],"decided_by_author_handle":false,"reviews":[],"decisions":[],"decision":null,"report_sha256":"84868dc24f358c5853856b4f9b4419cd8d549f10a47933a121cdce82b4a69997","next_step_sha256":null,"research_authority":{"witness_status":null,"research_status":"recorded","scopes":[]},"research_links":[],"duplicates":[],"cited_messages":[]}