{ "checked_at": "2026-10-16T17:54:13.797579+00:00", "review_scope": "independent source reconstruction, focused regression tests and canonical integrated hash verification; not foreign owner approval or native acceptance", "checks": { "platform": { "result": "73 passed in 8.91s", "reconstruction": "/tmp/netkingdom-target-root-review/platform-r1" }, "browser": { "result": "103 passed in 5.47s", "reconstruction": "/tmp/netkingdom-target-root-review/browser-r2", "earlier_attempt": "85 passed,16 failed in browser-r1: missing tracked public KeyCape sibling request and sibling declaration layout; corrected fixture paths for final revision, no production code workaround" }, "warden_browser_r2": { "result": "102 passed in 12.91s", "reconstruction": "/tmp/netkingdom-target-root-review/warden-r2", "patch_sha256": "1fb05b513c4db784f8691b5bc2790f5ca396071d4354615d2da7fc505c45684b" }, "platform_wave2": { "result": "83 passed in 72.99s", "reconstruction": "/tmp/netkingdom-target-root-review/platform-r2", "native_scope": "Disposable loopback OpenBao with synthetic admission; no production acceptance", "patch_sha256": "c419ac0f6dba3e36f15dc51a6a36fbd87fe7d255cce40c33c7f4589d80355580" }, "glas_r1": { "result": "141 passed in 6.74s", "reconstruction": "/tmp/netkingdom-target-root-review/glas-r1", "native_scope": "Actual bwrap synthetic host/env/subprocess denial, provider output redaction, subsequent command clean and workspace teardown; actual interactive assignment unchanged", "patch_sha256": "83eeeb0017603aabae0ff49a23f96248f677f6c9f3e2c01b22f6d0416fca69c7" }, "secrets_r2": { "status": "passed", "earlier_attempt": "Archive reconstruction test helper Go build refused VCS status (exit128); rerun disables only Go VCS stamping for this source archive, no application guard change", "reconstruction": "/tmp/netkingdom-target-root-review/secrets-r2", "result": "125 independent focused tests passed; producer/fixture hash checker passed", "test_count": 125 }, "approval_r1": { "result": "44 passed in 18.02s", "reconstruction": "/tmp/netkingdom-target-root-review/approval-r1", "native_acceptance": false }, "mason_r1": { "result": "50 passed in 15.96s", "reconstruction": "/tmp/netkingdom-target-root-review/mason-r1", "native_acceptance": false }, "secrets_commit_scan": { "result": "R2 commit refused by normal pinned scanner", "finding_metadata": [ { "file": "src/secrets_engine/config.py", "rule": "generic-api-key", "line": 74 }, { "file": "tests/test_consume_binding_join.py", "rule": "generic-api-key", "line": 39 } ], "review": "Both findings are pre-existing public UUID identifiers, not credentials. R3 names them explicitly without changing values or scanner policy. Normal commit scan must pass." }, "platform_wave3": { "result": "122 passed in 118.63s", "reconstruction": "/tmp/netkingdom-target-root-review/platform-r3", "native_scope": "Disposable OpenBao only; no authoritative real grant", "preflight_history": [ "Stopped before all writes when Platform HEAD advanced d79079bb to4021ca5e; unrelated policy-only delta verified and preserved", "Default sandbox denied owner checkout writes; retried through approved escalation and verified exact hashes" ] }, "access_r2": { "result": "actual serve CLI -> HTTP -> Secrets R2 verification and request/lifetime validation passed; response equals recorder; unsigned/tampered/group-write startup refused", "reconstruction": "/tmp/netkingdom-target-root-review/access-r2", "receipt": "access-verifier-review/coordinator-local-proof-r2.json", "native_scope": "Disposable loopback only; caller-auth disabled synthetic token, no production admission" }, "secrets_r4": { "result": "133 focused strict handoff/consume/signature/transport tests passed; 7 actual packaging tests passed with supplied locked public PyYAML wheel", "reconstruction": "/tmp/netkingdom-target-root-review/secrets-r4", "scope": "combined packaging R1 and strict handoff R2 applied to c80a944; no runtime installation or trust admission" }, "platform_wave4": { "result": "130 passed in195.03s", "reconstruction": "/tmp/netkingdom-target-root-review/platform-r4", "strict_handoff_module_sha256": "b82695b88c201fdcbd8854a0d3c37ee2d2d3feee2c0663d784180fa070ac6677", "approval_client_revision": "8624fa20bbfb0c0329e5327b4dd8d8c05a312d7a", "native_scope": "actual local source providers and disposable OpenBao; synthetic identity/key/policy only; actual task policy DENY retained; no production acceptance" }, "approval_confirmation": { "result": "36 passed in0.39s", "reconstruction": "/tmp/netkingdom-target-root-review/approval-r2", "client_sha256": "afd4383d6785b12be9650d1cb3ef84ccbb1b57cd271d38d55e75875c46e85a79", "earlier_command": "Nonexistent test_consume.py named in collection; zero tests ran, corrected to actual confirmation module", "author_retained_failure": "101 passed/1 existing200ms unavailable-server message mismatch under concurrent test load; focused retry passed; fail-closed throughout" }, "platform_wave4_final_approval_client": { "result": "8 passed in89.23s", "reconstruction": "/tmp/netkingdom-target-root-review/platform-r4", "approval_client_sha256": "afd4383d6785b12be9650d1cb3ef84ccbb1b57cd271d38d55e75875c46e85a79", "strict_handoff_module_sha256": "b82695b88c201fdcbd8854a0d3c37ee2d2d3feee2c0663d784180fa070ac6677", "scope": "final mediator/ordinal suite with independently reconstructed Approval confirmation repair and Secrets strict R2; actual local source servers and disposable OpenBao" }, "coordinator_evidence_scan": { "initial_result": "normal commit refused five evidence blobs;8generic-api-key matches", "diagnosis": "every finding independently parsed as a64hex source-file SHA256 within files_sha256 mapping; filenames containing api/auth/credential triggered heuristic", "correction": "explicit sha256: digest notation in canonical integration receipt mappings; actual digest bytes unchanged; no scanner rule/allowlist changes", "original_blocked_blobs": [ "5afec808e0a47edae8efd2369e191b605d438cc8", "7c686b53018206e2833e248e33dc1e08ccd60114", "b743960ab08d604a3dc5f4d273271a857bdde210", "dc0de7d302639760f919acfac83e3d0446c621f7", "eb67b4b8b369b3fea4eda25c3d9b5ed5d906f98d" ], "final_result": "normal commit scanner clean36blobs; root commit d170e6b" }, "platform_wave5": { "result": "32 passed in 316.66s", "reconstruction": "/tmp/netkingdom-target-root-review/platform-r5", "patch_sha256": "sha256:b4c44a452a1b62d0a2c114e2de60537666a139a387c478c663236b3aacdaadec", "scope": "exact sequential metadata baseline/readback and independent cleanup; no nativeCAS or production acceptance; positiveAccess pin ec21518e" }, "access_native_preparation_r2": { "result": "9 receipt tests and2runtime-twin tests passed", "reconstruction": "/tmp/netkingdom-target-root-review/access-native-r2", "retained_attempt": "Initial nine tests skipped because SECRETS_ENGINE_SOURCE_ROOT missing; corrected explicit source environment gave nine actual passes", "review": "R1 reproduced bool/int and int/float source-record equality acceptance; R2 exact JSON types and same verified/hashed bounded bytes" }, "secrets_native_preparation": { "result": "independent runtime AST unchanged except docstrings; proposal/template JSON valid", "native_effect_coverage": "0/11 serving sites across10handlers", "bundle_scope": "canonical ff1 bundle rebuilt by owner; no installation/trust" }, "approval_go_fact": { "result": "Go suite,2Python producer-vector tests and14114actualPython canonicalbyte/digest differential cases passed", "reconstruction": "/tmp/netkingdom-target-root-review/approval-go-r1", "retained_attempt": "Differential initially refused Go cache write in sandbox; approved exact rerun passed", "scope": "pure data owner adapter, no origin/credential/runtime authority" }, "access_b1_r2": { "result": "cmd/access-engine,internal/taskexecution,internal/decision Go suites passed; repaired nested duplicate targeted test passed", "reconstruction": "/tmp/netkingdom-target-root-review/access-b1", "review": "R1 test had malformed JSON instead of valid nested duplicate; correctedR2. SignedDENY until trusted successor, all genericexecute-ccr paths refuse" }, "access_trusted_successor_r1": { "result": "full Go suite passed independently", "reconstruction": "/tmp/netkingdom-target-root-review/access-trusted-r1", "patch_sha256": "sha256:6079ed2ff40b131aa2c5efc8d33608ecb3475c8158f0486b44ec4469e9f222c1", "state": "not integrated; consumer successor/fullstack/native gates pending", "integration_blocker": "Discovered whole-stack timing contradiction:15sPDPallow versus backendTTL30..120 plus5sreserve. Owner temporal review in progress; no widenedTTL/clockwaiver." }, "platform_recovery_r2": { "state": "passed", "reconstruction": "/tmp/netkingdom-target-root-review/platform-recovery-r2", "patch_sha256": "sha256:61f516c876fd612b83300e9913f0e80aad836a50014310797913c7c4505e3114", "retained_attempts": [ "41passed12setuperrors: missing SECRETS_ENGINE_SOURCE_ROOT", "41passed12setuperrors: missing PYTHONPATH source dependency" ], "review": "R1 broad404absence and damagedcapsule sourcecounterexamples requireR2 exactabsence and independently keyed authenticatedcapsule; no native grant", "result": "53 passed in169.59s with explicit Secrets source and PYTHONPATH", "published_commit": "b9eaa200601f1226d13efe82472dfec81c2999aa", "reconciliation": "applied exactcommit primary/railiance01;64records1taskupdated12historicalunresolvededges" }, "wave5_publication": { "platform": "d870596 applied exactcommit primary/railiance01,64records updated,12historical unresolvededges retained", "secrets": "5a2099f synced16/16zero failures/errors", "access_prep": "919ce25 firstStateHub querytimeout, retry38/38zero failures/errors; twoIDsassigned, generatedonlywriteback refused; stale C13 temporarily markedclosed after taskcreation and needs next reconciliation", "approval": "3485415 synced7/7zero failures/errors; generatedIDs preserved; dirty_workplans means no exactwholeprojectionrevision", "access_b1": "4f6946b retry synced38/38 and pushed; nofail/errors11warnings; correct activeWPstatus restored from authoritativefile" }, "secrets_trusted_successor_r2": { "result": "176 independent focused tests passed in62.17s", "reconstruction": "/tmp/netkingdom-target-root-review/secrets-trusted-r2", "patch_sha256": "sha256:65218b481f01cace1b879a3935b05af6b1c743960c64df69e43974fcc2c2002c", "state": "notintegrated; latest producer temporal and retainedregistry whole-stack correspondence under owner review" }, "successor_cross_owner_seams": { "state": "unintegrated; owners actively resolving", "findings": [ "retained registry normalized approval-free binding differs from original submitted approval binding; actual request refused before CAS/effect", "fractional decision not_before versus whole-second Approval consumed_at rejects immediate legitimate CAS", "operation ceiling, actual credential expiry and cleanup reserve require consistent owner contracts and absolute per-call enforcement" ], "acceptance": "actual retained-registry producer/consumer/native path; no empty registry, blind replay, timestamp waiver or implicit trust" }, "access_trusted_temporal_r2": { "state": "focused independent source checks passed; pending successor integration", "reconstruction": "/tmp/netkingdom-target-root-review/access-trusted-r2", "patch_sha256": "sha256:f44fce1bc4190e70cf9488f7319f6384b723f4dd2e1e791a4a0d8ee2557d0f9b", "command": "GOCACHE=/tmp/netkingdom-root-go-cache go test ./internal/decision ./cmd/access-engine -run 'TestTrusted(TaskWholeOperationLifetime|ServiceActualHTTPPositiveAndRefusals)' -count=1", "result": "decision and command packages passed; exact operation deadline, cleanup reserve, source cap and original/fresh authority cases", "retained_attempt": "initial command cwd was predecessor R1, where decision selection had no tests; corrected R2 command passed actual new tests" }, "approval_timestamp_precision": { "state": "canonical defect independently reproduced; owner repair pending", "evidence": "approval-timestamp-precision/coordinator-counterexample.json", "result": "approval expiry .500, actual clock .750; native consume incorrectly succeeds after expiry and records whole-second timestamp", "scope": "actual canonical in-memory Engine deterministic clock; no production probing" }, "access_trusted_r3": { "result": "All seven affected Go packages passed independently", "command": "go test ./cmd/access-engine ./internal/decision ./internal/taskexecution ./internal/sign ./internal/audit ./internal/emission ./internal/registry -count=1", "reconstruction": "/tmp/netkingdom-target-root-review/access-trusted-r3", "patch_sha256": "sha256:46bfeb706d3a88bf6054309cc9303eb360a91e57dda3b0fcbb7b80d551a75db6", "native_accepted": false }, "secrets_trusted_r4": { "result": "193 focused tests passed in20.31s", "reconstruction": "/tmp/netkingdom-target-root-review/secrets-trusted-r4", "patch_sha256": "sha256:759bf5c7b89169ddd32761d36ce1ae71735bb4c471213f5bbb8cd9af25350b86", "owner_full_suite": "784passed16failed7skipped; exact16 failures reproduce on retained baseline", "native_accepted": false }, "approval_precision_r1": { "result": "98 tests passed in2.02s", "reconstruction": "/tmp/netkingdom-target-root-review/approval-precision-r1", "patch_sha256": "sha256:74eb0ff67d14508c2a2cee14d055790321ee171a96d5290ad6d037ce8f61dbcd", "covers": [ "timestamp precision", "atomic consumption", "independent confirmation", "outbox", "claim contract", "human control" ], "native_accepted": false }, "platform_budget_r1": { "result": "28 tests passed in129.95s", "reconstruction": "/tmp/netkingdom-target-root-review/platform-budget-r1", "commit": "76fdc0b861ec2ee7f6512dc5023ffc0cee5940f9", "scope": "Absolute per-call and whole-operation deadlines, actual credential expiry and immutable source bytes; disposable fixture only" }, "platform_fullchain_r1": { "result": "8 tests passed in128.41s", "reconstruction": "/tmp/netkingdom-target-root-review/platform-fullchain-r1", "patch_sha256": "sha256:a26c68ff224663129757fd43d0a5364762180131030e4dda22975935be89f99d", "scope": "Real local Access and Approval services, strict Secrets R4, root-built binaries, actual retained registry and disposable OpenBao; synthetic distinct identities and admission", "proves": [ "Immediate precise CAS and authoritative GET before native effect", "Six positive native calls, complete readback and cleanup", "Signed DENY/ALLOW parity with durable source recording", "Changed source, foreign caller, revoked approval, denied reader, registry drift and expiry refuse", "Revocation after ALLOW before CAS permits zero native effect" ], "native_accepted": false }, "platform_signer_writer_r3": { "result": "12 tests passed in12.14s on writer R2; R3 changes metadata only", "reconstruction": "/tmp/netkingdom-target-root-review/platform-signer-r2", "patch_sha256": "sha256:b0c190060f5a41d6002e1fb7b49f047fd4874a51576f29f3c127a8634c2616f6", "metadata_delta_sha256": "sha256:a29cdbd2ac92fd09bc6c79144e9aeb84bb6abcd303df997c0f01c0223cf1a508", "scope": "Disposable OpenBao, durable private receipt, exact KV CAS/readback, unknown outcomes retained; production entry deliberately unavailable", "native_accepted": false }, "wave7_preflight": { "result": "All four owner source reconstructions matched expected final bytes before owner mutations", "retained_difference": "Access canonical workplan retains existing T05/T06 managed UUID lines absent in review snapshot; exact two-line diff inspected; no source behavior difference", "scope": "Unrelated owner dirty files preserved" }, "approval_precision_publication_scan": { "result": "First commit refused by unchanged scanner", "blocked_file": "docs/reviews/2026-10-16-fractional-consumption-temporal-approval-owner-review.json", "blocked_blob": "deefaac30c988de61ee26a08f29482ae76b39a0b", "next_action": "Approval owner preparing explicit sha256 metadata formatting; no scanner bypass or review meaning change", "resolution": "Approval owner prefix-only metadata repair; exact hashes/review meaning preserved. Unchanged normal scanner passed all6blobs;d40e842 published." }, "wave7_publication": { "result": "All five new canonical commits published (budget plus four-owner wave); exact committed file hashes independently verified and commits are origin/main ancestors", "native_accepted": false, "approval_limit": "Whole-repository projection revision unavailable due to retained unrelated dirty workplans; generated-only writeback refused without bypass", "platform_sync": "Exact7be8b6e applied at primary/railiance01;64records,12historical unresolvededges" }, "wave8_publication": { "result": "All four commits published; exact committed bytes and origin/main ancestry verified", "native_accepted": false }, "access_outbox_hardening": { "result": "Root go test -race ./internal/emission ./internal/decision ./cmd/access-engine -count=1 and chart tests passed", "source_commit": "0a05383195213e7eaacd08388ce1d7892ce756df", "scope": "Process exclusion, bounded storage/startup and refusal paths; native PVC/disk/receiver acceptance remains open" }, "warden_installed_routing": { "result": "135 root tests passed; normal make install-memory and installed plan verified", "receipt": "warden-admin-routing/installed-verification.json", "scope": "Installed metadata routing; no login or native custody" }, "platform_native_adapter_r2": { "result": "56 root tests passed in40.02s", "retained_r1_failure": "Metadata-only crash could not recover; R2 distinguishes absent/metadata-only/version1 read-only outcomes", "consumer_review": "decision-native-preparation/platform-public-trust-review-r2.json", "native_accepted": false }, "secrets_clean_release": { "result": "Independent artifact/source hashes, two builds equal; fresh offline install and pre-credential trust refusal passed", "receipt": "decision-native-preparation/r3/coordinator-bundle-review.json", "native_effects_accepted": "0/11 call sites" }, "access_package_local": { "result": "Exact thirteen-file canonical tree committed; actual local resolver succeeds; global baseline findings retained", "receipt": "access-package-identity/admission/canonical-creation.json", "scope": "Local source ownership only; no remote/placement/native acceptance" }, "access_publisher_fix": { "result": "3 root tests and Bash syntax passed", "commit": "84c78e072c8f3daf2bc3b90f8efc8fbeb16c3cf0", "retained_failure": "CI400 pushed image then failed because python3 absent; no scanner/workflow bypass" }, "audit_bounded_reconciliation": { "result": "17 root tests passed,1 isolated skip; actual canonical sibling fixture separately passed1", "commit": "64509d2c4039ca1249f9e8aabf2bae030e3640cf", "scope": "Complete independently retained ledger protocol and receiver fixtures; no sender/observer admission" }, "platform_packet_assembler_r2": { "result": "5 root tests passed", "retained_r1_failure": "Initial assembler did not enforce promised0600; repaired with exclusive no-follow open,fchmod,fsync", "scope": "Offline preparation only; external approvals unauthenticated by assembler" } } }