05 — P6 DIGEST AND STAMP REVIEW

Included

c1_digest() serializes:

• canonical operation code/title/group/input/output/modes/status/evidence;
• all bad-input result rows;
• upstream rows as op|sandbox_id;
• row counts and per-family MD5 plus combined MD5.

The digest is computed after the fatal gate and persisted in the same SHARE-locked transaction. Harness facts and isolation case 8 are therefore included.

Incomplete

• stamp serialization excludes detail.gate, actor and a current-run identity;
• stamp queries are not scoped to the current sandbox;
• exactly one post-gate success stamp per P3/P4/P5 is not required;
• P4 evidence bytes are hashed but not validated.

Therefore the digest includes data called “stamps/evidence”, but does not prove those bytes are the current run's success evidence. Digest computation ordering is safe; evidence provenance is not.