{ "read_this_first": [ "This describes one recorded failure in one small program, called N-1.", "Plain summary: the program would apply a file repair when handed a permission record. It checked that the record was internally consistent, but never that the record had actually been issued. A record built from public information was accepted and the repair ran.", "You do not need any knowledge of the project to check the two claims below. They are checkable from this file alone.", "What you cannot do from this file: re-run the original experiment. The primary artifacts live on the research machine and are not published. This is a reference bundle, not a replay." ], "plain": { "what_happened": "A small program was allowed to fix one specific broken file on one machine, but only with permission. Permission took the form of a signed note saying which fix, on which file. The program was tested 24 times and behaved as recorded every time. Then it was given something it had not been given before: a permission note written by hand, without permission ever being asked for. The program accepted it and changed the file.", "why_it_matters": "The note was never checked against the list of permissions that had actually been granted. It only had to look right. Anything that could read a public list of what fixes exist could write itself a valid-looking note, and the program would act on it.", "what_it_shows": [ "The permission note was not proof that permission had been given. It was only proof that someone knew what a permission note looks like.", "Every limit the design named was real, and every one of them was applied at the moment permission was requested. None was applied again at the moment the file was changed.", "The flaw was already in the frozen program. It was found by testing it from outside, without changing a line of it." ], "what_it_does_not_show": [ "It is not a break-in from outside. It needed nothing secret, but it also needed the ability to run code on that machine already.", "It says nothing about someone who can already run programs as the same user. That person can edit the file directly and needs no permission note at all. That was out of scope before this finding and is still out of scope now.", "The repair has never run against the real target. Every successful run of the fixed version was against a copy, because producing a genuine broken file would have meant deliberately breaking a working one." ] }, "why_24_of_24": { "question": "How can a system pass all 24 of its tests and still be broken?", "answer": [ "24 out of 24 means every test behaved the way the test file said it would. It does not mean 24 separate safety requirements were shown to hold.", "One of those 24 is the flaw. The test that caught it records the unsafe behaviour as its expected result, because the expectation was written down after the behaviour was measured. That is why it counts as a pass.", "Only 13 of the case families were written down before any of the code existed. The rest, including this one, were added while attacking the system.", "The plan the tests were checking against was allowed to admit findings like this. It said in advance that any naturally occurring failure should be recorded rather than smoothed over. That is what makes this a finding and not a moved goalpost.", "And underneath the tests, the requirements themselves were only partly covered. Four of the nine things the design was supposed to guarantee had nothing testing them at all." ], "not_the_lesson": [ "The lesson is not that tests are useless. The two weaker forgeries were correctly refused, and it is those refusals that made the third result legible instead of invisible.", "The lesson is not that the 24/24 result was dishonest. It is accurate. It is a count of cases matching expectations, and it was never a count of safety properties." ] }, "mechanism_plain": { "setup": "The program sits between a detector and a file. The detector notices that a specific configuration file has become malformed. The program is allowed to apply exactly one repair, named in advance, to exactly one file, named in advance. It cannot run shell commands and it cannot take a file path from whoever calls it.", "the_note": "To act, the program needs a start permit: a small record naming the condition, the repair, the target file and a reference number. The reference number is a hash of the rest of the record, so a permit is internally consistent by construction.", "the_gap": "The program checked that the permit was internally consistent. It never checked that the permit existed in the ledger of permits that had actually been issued. Its function signature had no way to reach that ledger, so the question could not be asked.", "the_attack": "Build a permit from public information, compute the reference number the same way the issuer computes it, and hand it over. Three lines. The program validated it, applied the repair and rewrote the file.", "the_fix": "The successor takes a reference number instead of a record. It fetches the permit body out of the ledger itself, so a caller-supplied body is no longer an input to any decision. The forgery is not forbidden, it is unsayable.", "still_open": "The fixed version has run only against copies of the broken file. Whether it survives being killed halfway through has been argued from the order of operations, not demonstrated." }, "field_descriptions": { "coverage": "How many of the nine requirements had something checking them at the time of the failure. covered + uncovered + contested always equals total.", "cases_total": "How many test cases ran.", "cases_matched": "How many behaved the way the test file recorded they would. This is NOT a count of safety properties.", "preregistered_families": "How many case families were written down and hashed before any code existed.", "expectation_set": "Whether the expected value was written before the run, or after the behaviour had been measured. \"after_measurement\" marks a recorded failure.", "subject": "What the run was actually performed against. SANDBOX_COPY_OF_REAL_ARTEFACT means real code and real bytes, but a copy of the target rather than the live one.", "status": "Epistemic status. FALSIFIED means a counterexample exists. CONTESTED means it was deliberately never claimed. UNKNOWN means not established either way." }, "case": { "id": "f-n1", "kind": "flaw", "flagship": true, "title": "N-1 — permit membership was not checked at the point of effect", "statement": "A start permit was accepted for being self-consistent rather than for being committed. The executor validated the record and applied the transform; sandbox bytes changed. Start permits were derivable and self-consistent, not evidence that authorization had occurred.", "status": "FALSIFIED", "at": "2026-08-24T08:58:00Z", "author": { "type": "test", "name": "adversarial testing of the successor bundle" }, "discovered_by": "o-s18", "discovered_in": "startauth-01", "found_by": "startauth-sched-01", "affected_properties": [ "C-1", "C-4" ], "mechanism": [ "a complete start permit body was assembled from public facts — the registry, the entry, any target in the frozen list", "start_ref was self-derived, computed exactly the way the authorizer computes it", "the permit had never been committed to the authorization ledger", "validate_start accepted the body as self-consistent", "execute() applied the registry-named transform", "sandbox bytes changed, measured by the test hashing the file before and after" ], "root_cause": "execute() validates a start permit by re-deriving start_ref from the record's own body. Its signature carries no ledger path, so it could not check membership. The rate bound, the dedup bound and the observation binding were all enforced at mint time only, and none was re-asked at the point of effect.", "remained_valid": [ "o-s14", "o-s15", "o-s13b", "o-s9", "o-s12" ], "invalidated": [ "C-1", "C-4" ], "correction": "startauth-v2", "supports": [], "evidence": [ { "kind": "case", "ref": "startauth-sched-01/results/battery.json", "value": "S18" }, { "kind": "source", "ref": "startauth-01/src/execute.py", "value": "def execute(start_rec, reg, evidence_dir, now=None)" }, { "kind": "source", "ref": "startauth-sched-01/tests/battery.py:347-359", "value": "forgery construction and finding" } ] }, "commitment": { "id": "c-executor-intent", "kind": "commitment", "title": "The original intent, as written in the frozen executor", "statement": "Everything it is permitted to do is re-derived from the frozen registry at execution time, so a start permit cannot outlive the authorization that produced it.", "status": "COMMITTED_BEFORE_RESULT", "at": "2026-08-23T16:00:36Z", "author": { "type": "human", "name": "module docstring" }, "supports": [], "evidence": [ { "kind": "source", "ref": "startauth-01/src/execute.py", "value": "module docstring, quoted unmodified" } ], "notes": "A precise and correct statement about staleness. It was read as a statement about existence. It never was one." }, "run": { "id": "r-sched-battery", "kind": "run", "title": "STARTAUTH-SCHED-01 adversarial battery", "statement": "Twenty-four cases executed against the frozen predecessor and the scheduled scanner. Every case matched its recorded expectation.", "status": "EMPIRICALLY_OBSERVED", "at": "2026-08-24T08:58:00Z", "author": { "type": "test", "name": "startauth-sched-01/tests/battery.py" }, "host_role": "single-host research node (macOS, arm64)", "environment": "python 3.9.6", "subject": "SANDBOX_COPY_OF_REAL_ARTEFACT", "cases_total": 24, "cases_matched": 24, "preregistered_families": 13, "supports": [], "evidence": [ { "kind": "result", "ref": "startauth-sched-01/results/battery.json", "value": "passed 24, total 24" }, { "kind": "hash", "ref": "real target sha256 before", "value": "50ce380792d52cad2cf0fff656c2d079de5a9232d5c16a8d75ca54f74cbc42d1" }, { "kind": "hash", "ref": "real target sha256 after", "value": "50ce380792d52cad2cf0fff656c2d079de5a9232d5c16a8d75ca54f74cbc42d1" } ], "notes": "Thirteen case families were preregistered. S16-S18 were added during adversarial testing and are not in the frozen table; they are admitted by the preregistration's naturally-occurring-failure clause. The live target was never a subject of any case." }, "observations": [ { "id": "o-s16", "kind": "observation", "case": "S16", "title": "Raw scanner proposal fed to the bounded executor", "statement": "The proposal record exactly as the scanner emits it, handed to the executor.", "status": "MECHANICALLY_ESTABLISHED", "expected": "REFUSED", "observed": "REFUSED", "ok": true, "expectation_set": "before", "at": "2026-08-24T08:58:00Z", "author": { "type": "test", "name": "battery.py" }, "supports": [ "r-sched-battery" ], "evidence": [ { "kind": "code", "ref": "refusal", "value": "authorization_drift | bytes_unchanged=True" } ] }, { "id": "o-s17", "kind": "observation", "case": "S17", "title": "Complete forgery with an underivable start_ref", "statement": "Every field a start permit needs, but an arbitrary start_ref.", "status": "MECHANICALLY_ESTABLISHED", "expected": "REFUSED", "observed": "REFUSED", "ok": true, "expectation_set": "before", "at": "2026-08-24T08:58:00Z", "author": { "type": "test", "name": "battery.py" }, "supports": [ "r-sched-battery" ], "evidence": [ { "kind": "code", "ref": "refusal", "value": "authorization_drift | bytes_unchanged=True" } ] }, { "id": "o-s18", "kind": "observation", "case": "S18", "title": "Self-derived start_ref, never committed to any ledger", "statement": "A complete permit body assembled from public facts, with start_ref derived exactly the way the authorizer derives it, committed nowhere. It was accepted and the effect was applied.", "status": "FALSIFIED", "expected": "APPLIED", "observed": "APPLIED", "ok": true, "expectation_set": "after_measurement", "at": "2026-08-24T08:58:00Z", "author": { "type": "test", "name": "battery.py" }, "supports": [ "r-sched-battery", "f-n1" ], "evidence": [ { "kind": "case", "ref": "startauth-sched-01/results/battery.json", "value": "expected APPLIED, observed APPLIED, ok true" }, { "kind": "source", "ref": "startauth-sched-01/tests/battery.py:347-359", "value": "FINDING: a start permit is derivable, not unforgeable; execute() consults no ledger" } ], "notes": "This case row is why 24/24 must never be rendered as twenty-four safety properties. Its ok:true records that the system behaved as the test author had come to expect — and what the author had come to expect was a catastrophic failure." }, { "id": "o-s14", "kind": "observation", "case": "S14", "title": "The live target was untouched across the whole battery", "statement": "The real scheduled-job configuration file was byte-identical before and after every case.", "status": "MECHANICALLY_ESTABLISHED", "expected": "50ce3807…", "observed": "50ce3807…", "ok": true, "expectation_set": "before", "at": "2026-08-24T08:58:00Z", "author": { "type": "test", "name": "battery.py" }, "supports": [ "r-sched-battery" ], "evidence": [ { "kind": "hash", "ref": "sha256", "value": "50ce380792d52cad2cf0fff656c2d079de5a9232d5c16a8d75ca54f74cbc42d1" } ] }, { "id": "o-s15", "kind": "observation", "case": "S15", "title": "The frozen predecessor's freeze held after the battery", "statement": "STARTAUTH-01 reported FREEZE INTACT after the battery that found N-1 inside it.", "status": "MECHANICALLY_ESTABLISHED", "expected": "FREEZE INTACT", "observed": "FREEZE INTACT", "ok": true, "expectation_set": "before", "at": "2026-08-24T08:58:00Z", "author": { "type": "test", "name": "battery.py" }, "supports": [ "r-sched-battery" ], "evidence": [ { "kind": "freeze", "ref": "startauth-01/verify_freeze.py", "value": "FREEZE INTACT" } ], "notes": "The defect was found without modifying the code that contained it." }, { "id": "o-s13b", "kind": "observation", "case": "S13b", "title": "The scanner never imports the only module that writes a target", "statement": "execute is absent from sys.modules after a full scan.", "status": "MECHANICALLY_ESTABLISHED", "expected": "ABSENT", "observed": "ABSENT", "ok": true, "expectation_set": "before", "at": "2026-08-24T08:58:00Z", "author": { "type": "test", "name": "battery.py" }, "supports": [ "r-sched-battery" ], "evidence": [ { "kind": "code", "ref": "sys.modules", "value": "execute absent" } ] }, { "id": "o-s9", "kind": "observation", "case": "S9", "title": "The projection agrees with the frozen authorizer on every branch", "statement": "A ten-case matrix reaching every refusal branch plus the authorizable one, driven through both the non-minting projection and the real authorizer.", "status": "MECHANICALLY_ESTABLISHED", "expected": "IDENTICAL", "observed": "IDENTICAL", "ok": true, "expectation_set": "before", "at": "2026-08-24T08:58:00Z", "author": { "type": "test", "name": "battery.py" }, "supports": [ "r-sched-battery" ], "evidence": [ { "kind": "matrix", "ref": "10 cases", "value": "all codes equal" } ] }, { "id": "o-s12", "kind": "observation", "case": "S12", "title": "The daily proposal bound held under a storm", "statement": "Twelve eligible scans spread over twelve hours produced exactly four proposals, not twelve.", "status": "MECHANICALLY_ESTABLISHED", "expected": "BOUNDED", "observed": "BOUNDED", "ok": true, "expectation_set": "before", "at": "2026-08-24T08:58:00Z", "author": { "type": "test", "name": "battery.py" }, "supports": [ "r-sched-battery" ], "evidence": [ { "kind": "count", "ref": "proposals", "value": "4 of a cap of 4" } ] } ], "properties": [ { "id": "C-1", "kind": "property", "clause": 1, "title": "No byte of a target changes without a committed authorization", "statement": "No byte of a target changes without a committed authorization.", "status": "FALSIFIED", "coverage": "uncovered", "deliberate_scope": false, "vv_method": "TEST", "covered_at": "startauth-v2", "counterexample": "o-s18", "at": null, "author": { "type": "design", "name": "authored decomposition" }, "supports": [], "evidence": [ { "kind": "case", "ref": "startauth-sched-01/results/battery.json", "value": "S18" } ], "notes": "This is N-1. The frozen executor's signature carries no ledger path, so commitment was not a question it could ask. Covered at V2 by permit_not_committed." }, { "id": "C-2", "kind": "property", "clause": 2, "title": "At most one effect per permit", "statement": "At most one effect per committed start permit.", "status": "UNCOVERED", "coverage": "uncovered", "deliberate_scope": false, "vv_method": "TEST", "covered_at": "startauth-v2", "counterexample": null, "at": null, "author": { "type": "design", "name": "authored decomposition" }, "supports": [], "evidence": [ { "kind": "case", "ref": "startauth-v2", "value": "case D — permit_already_consumed" } ], "notes": "No consumption record existed at v1, so a valid permit replayed without bound. V2 delivers at-most-once deliberately, not exactly-once: a crash in the window leaves a burned permit and no effect, which is recoverable, rather than a double effect, which is not." }, { "id": "C-3", "kind": "property", "clause": 3, "title": "An effect cannot precede its commitment", "statement": "An effect cannot precede its commitment, and the order is auditable afterwards.", "status": "UNCOVERED", "coverage": "uncovered", "deliberate_scope": false, "vv_method": "ANALYSIS", "covered_at": "startauth-v2", "counterexample": null, "at": null, "author": { "type": "design", "name": "authored decomposition" }, "supports": [], "evidence": [ { "kind": "case", "ref": "startauth-v2", "value": "case E — line(permit) < line(consumed)" } ], "notes": "Enforced at consumption time inside the lock, then re-derived afterwards by an auditor that imports nothing from the implementation." }, { "id": "C-4", "kind": "property", "clause": 4, "title": "The caller's permit body is not a decision input", "statement": "The caller's permit body is not an input to any decision.", "status": "FALSIFIED", "coverage": "uncovered", "deliberate_scope": false, "vv_method": "INSPECTION", "covered_at": "startauth-v2", "counterexample": "o-s18", "at": null, "author": { "type": "design", "name": "authored decomposition" }, "supports": [], "evidence": [ { "kind": "signature", "ref": "startauth-v2/src/execute2.py", "value": "consume_and_execute(start_ref: str, ...)" } ], "notes": "At v1 the caller-supplied body was the only input to the decision. V2 removes it from the trusted set and adds one policy integer, a TTL — a net contraction of the trusted boundary, reported as such rather than as a general strengthening." }, { "id": "C-5", "kind": "property", "clause": 5, "title": "A permit cannot outlive its authorization", "statement": "A permit cannot outlive the authorization that produced it.", "status": "MECHANICALLY_ESTABLISHED", "coverage": "covered", "deliberate_scope": false, "vv_method": "TEST", "covered_at": "startauth-01", "counterexample": null, "at": null, "author": { "type": "design", "name": "authored decomposition" }, "supports": [], "evidence": [ { "kind": "case", "ref": "startauth-01", "value": "case L — registry drift detected" } ], "notes": "The one clause the original docstring genuinely described. True then, true now, and never the clause N-1 needed." }, { "id": "C-6", "kind": "property", "clause": 6, "title": "An out-of-scope action is inexpressible, not merely forbidden", "statement": "An out-of-scope action is inexpressible rather than merely forbidden.", "status": "MECHANICALLY_ESTABLISHED", "coverage": "covered", "deliberate_scope": false, "vv_method": "INSPECTION", "covered_at": "startauth-01", "counterexample": null, "at": null, "author": { "type": "design", "name": "authored decomposition" }, "supports": [], "evidence": [ { "kind": "code", "ref": "startauth-01/src/execute.py", "value": "effect_not_in_closed_table; target_not_authorized" } ], "notes": "Residual: only one transform is in the closed table. Nothing here shows the property generalises to a transform that is not idempotent and not byte-derivable from a backup." }, { "id": "C-7", "kind": "property", "clause": 7, "title": "The executor's claim of success is recorded and never consulted", "statement": "The executor's claim of success is recorded and never consulted.", "status": "MECHANICALLY_ESTABLISHED", "coverage": "covered", "deliberate_scope": false, "vv_method": "TEST", "covered_at": "startauth-01", "counterexample": null, "at": null, "author": { "type": "design", "name": "authored decomposition" }, "supports": [], "evidence": [ { "kind": "case", "ref": "startauth-01", "value": "case G — executor claims success, postcondition false, no permit mints" } ], "notes": "The executor still records 'repair applied successfully'. The postcondition is sabotaged behind its back and no completion permit mints. V2 adds a witness that measures the effect instead of reading the report." }, { "id": "C-8", "kind": "property", "clause": 8, "title": "The world is re-checked at the moment of effect", "statement": "The world is re-checked at the moment of effect, and a vanished condition is a safe no-op.", "status": "MECHANICALLY_ESTABLISHED", "coverage": "covered", "deliberate_scope": false, "vv_method": "TEST", "covered_at": "startauth-01", "counterexample": null, "at": null, "author": { "type": "design", "name": "authored decomposition" }, "supports": [], "evidence": [ { "kind": "case", "ref": "startauth-01", "value": "case F — condition_no_longer_holds" } ], "notes": "Moving the recheck inside the lock in V2 also meant a vanished condition does not burn the permit — a deviation from the preregistered design note, in the safe direction, reported as such rather than quietly enjoyed." }, { "id": "C-9", "kind": "property", "clause": 9, "title": "A permit is unforgeable", "statement": "A permit is unforgeable.", "status": "CONTESTED", "coverage": "contested", "deliberate_scope": true, "vv_method": "NONE", "covered_at": null, "counterexample": null, "at": null, "author": { "type": "design", "name": "authored decomposition" }, "supports": [ "u-a12" ], "evidence": [ { "kind": "residual", "ref": "A12", "value": "explicitly out of scope" } ], "notes": "Never claimed. An actor who can run code as the same user can append a well-formed start_permit to the ledger. V2 does not create an unforgeable token. What the repair changes is the class of the artefact, not its forgeability." } ], "coverage": { "covered": 4, "uncovered": 4, "contested": 1, "total": 9 }, "judgment": { "id": "j-sched-auditor", "kind": "judgment", "title": "Independent auditor over the committed artefacts", "statement": "Thirteen invariants re-derived from committed artefacts by a checker that imports nothing from the implementation. All hold.", "status": "MECHANICALLY_ESTABLISHED", "at": "2026-08-24T08:58:00Z", "author": { "type": "auditor", "name": "startauth-sched-01/verify.py" }, "invariants_total": 13, "invariants_named": [ "STARTAUTH-01 pins intact", "regime is proposal_only", "no import of the bounded executor", "no import of the minting authorizer", "no authority record kind ever written", "seq == physical line index", "every scan committed a no-effect verdict", "no-effect held on every scan", "every scan recorded before AND after hashes", "no proposal claims authority", "effect ledger holds no sched_* record" ], "supports": [], "evidence": [ { "kind": "result", "ref": "startauth-sched-01/verify.py", "value": "ALL INVARIANTS HOLD (13 checks)" } ], "notes": "Thirteen are reported. Eleven are recoverable by static extraction of the checker's labels; the remaining two are constructed at runtime and are not named here rather than guessed at." }, "unknowns": [ { "id": "u-a12", "kind": "unknown", "residual": "A12", "title": "A hostile actor running as the same user", "statement": "An actor who can run code as this user edits the target directly and needs no permit at all; equally, they can append a well-formed start permit to the ledger. The successor does not create an unforgeable token.", "status": "CONTESTED", "at": null, "author": { "type": "human", "name": "research" }, "why": "Explicitly out of scope. Not weakened or strengthened by the repair.", "supports": [], "evidence": [ { "kind": "scope", "ref": "A12", "value": "unchanged by the repair" } ] }, { "id": "u-crash-window", "kind": "unknown", "residual": "CRASH-WINDOW", "title": "At-most-once is argued, not demonstrated", "statement": "No process has been killed between the consumption commit and the write. The ordering argument is sound and untested.", "status": "UNKNOWN", "at": null, "author": { "type": "human", "name": "research" }, "why": "It is the cheapest remaining test and it has not been run. A scheduled consumer runs unattended, which is exactly the regime where a killed process matters.", "supports": [], "evidence": [] }, { "id": "u-lock", "kind": "unknown", "residual": "A-LOCK", "title": "The file lock is advisory", "statement": "Every writer must use the ledger transaction. That is convention, not enforcement.", "status": "INFERRED", "at": null, "author": { "type": "human", "name": "research" }, "why": "A writer that ignores the lock defeats the at-most-once guarantee. The auditor detects the resulting sequence disagreement after the fact; it does not prevent it.", "supports": [], "evidence": [] }, { "id": "u-clock", "kind": "unknown", "residual": "A-CLOCK", "title": "Freshness depends on the system clock", "statement": "A moved clock moves the time-to-live window.", "status": "UNKNOWN", "at": null, "author": { "type": "human", "name": "research" }, "why": "Carried as an assumption in the trusted base, named there rather than tested.", "supports": [], "evidence": [] }, { "id": "u-fs", "kind": "unknown", "residual": "A-FS", "title": "Filesystem atomicity and durability are assumed", "statement": "Atomic replace and durable flush are assumed, not tested.", "status": "UNKNOWN", "at": null, "author": { "type": "human", "name": "research" }, "why": "A crash must leave the original intact. That property rests on the platform and is carried as an assumption.", "supports": [], "evidence": [] }, { "id": "u-no-live-demo", "kind": "unknown", "residual": "NO-LIVE-DEMO", "title": "No live eligible-condition demonstration", "statement": "The successor has never executed anything outside a sandbox.", "status": "UNKNOWN", "at": null, "author": { "type": "human", "name": "research" }, "why": "Manufacturing a live eligible condition means deliberately corrupting a real scheduled job. Not done, not worked around.", "supports": [], "evidence": [] }, { "id": "u-n4-residual", "kind": "unknown", "residual": "N-4", "title": "A latent defect left unrepaired by design", "statement": "The sequence double-count in the frozen ledger transaction is measured, understood and deliberately not fixed.", "status": "EMPIRICALLY_OBSERVED", "at": null, "author": { "type": "human", "name": "research" }, "why": "Editing it would break the freeze that makes the predecessor citable evidence. The successor refuses on detecting it instead.", "supports": [], "evidence": [] }, { "id": "u-one-transform", "kind": "unknown", "residual": "ONE-TRANSFORM", "title": "One transform is in the closed table", "statement": "Nothing establishes that the property generalises to a transform that is not idempotent and not byte-derivable from a backup.", "status": "UNKNOWN", "at": null, "author": { "type": "human", "name": "research" }, "why": "The bound is real and it is narrow. The narrowness is the finding, not a caveat on it.", "supports": [], "evidence": [] } ], "correction": { "id": "startauth-v2", "kind": "artifact", "title": "STARTAUTH-V2", "statement": "The successor that repairs N-1. A start permit is no longer a self-consistent assertion; it is a committed, ordered, single-use ledger fact, consumed under one exclusive lock before any byte is written.", "status": "EMPIRICALLY_OBSERVED", "at": "2026-08-24T00:00:00Z", "author": { "type": "human", "name": "research" }, "maturity": "RESEARCH_PROTOTYPE", "subject": "SANDBOX_COPY_OF_REAL_ARTEFACT", "bundle": "startauth-v2", "git": "f135277", "freeze": "V2 FREEZE INTACT, 21 files", "supports": [ "c-v2-prereg", "f-n1" ], "evidence": [ { "kind": "git", "ref": "preregistration commit", "value": "e7ba213 — contains zero .py files" }, { "kind": "git", "ref": "implementation commit", "value": "f135277" }, { "kind": "battery", "ref": "startauth-v2/tests/battery_v2.py", "value": "22 of 22 as declared" }, { "kind": "battery", "ref": "startauth-v2/tests/battery_v1_port.py", "value": "14 of 14, expectations unchanged" }, { "kind": "battery", "ref": "startauth-v2/tests/sched_differential.py", "value": "8 of 8" } ], "notes": "Experimental. No launchd job, no cron, no bridge hook. Every APPLIED result is against a sandbox copy of the real defective bytes — never the live target." }, "caveats": [ "cases_matched (24) equals cases_total (24) AND 1 expectation is of failure. Do not read as a safety-property count.", "13 case families were fixed in advance; 24 cases ran.", "The nine requirements were written by this project, not machine-extracted.", "The artifact behind this case is not public, so this case does not re-derive from a clone. The other findings do." ] }