01 — A1 · Pre-Apply Evidence Canonicalization to AgentData KB

Result: PASS. The 5-file preflight package was canonicalized from local disk to AgentData KB and read back successfully.

Source (local, operator laptop)

/Users/nmhuyen/Documents/Manual Deploy/web-test/knowledge/dev/laws-new/reports/c1-w7-real-exec-channel-preflight/

KB target (now populated; was empty before this run — verified via list_documents → 0 items)

knowledge/dev/laws-new/reports/c1-w7-real-exec-channel-preflight/

Files + local sha256 (Bash shasum -a 256)

File	local sha256	KB upload	KB readback len
01-shell-and-ssh-proof.md	1884b326116cd7772192e93638c5a0a5fceb53263e603db30e31aef09a18143e	created rev1	1699
02-vps-dot-bin-proof.md	f4ecfdec6e7d5b6ebe6fc44ddffd5d227036214b24b9e3d2985135c3a3d5bd36	created rev1	1717
03-dot-apr-capability-proof.md	d537ce34e0522fbd5be21c07c09ea2c67a185cde058c8e18f703d6ab9e304ee7	created rev1	2222
04-live-before-snapshot.md	3009b890f2ebc6692ca3a4bc4e52a317d0f6f3f0711b9ff076650d15fb8c3f01	created rev1	2408
05-final-decision.md	fe4091f66d7c5384f2a2ed22a0be6bdd74ab9843ea6d8be82acdff5425367078	created rev1	3777

Proof

• file count: 5 (local) → 5 uploaded → 5 readback (batch_read count=5)
• file names: match required set exactly
• local sha256: recorded above (authoritative, Bash-computed)
• readback success: YES (all 5 returned content; headers/tables/verdict strings match the canonical source)
• missing: 0
• mismatch: 0 (KB readback content is faithful to the uploaded canonical text)

Channel note (honesty)

The governed REST endpoint AGENT_DATA_URL=http://host.docker.internal:8000 is a docker-internal address not reachable from the operator shell, so an independent curl-side sha256 of the stored bytes could not be taken in this pass. Canonicalization + readback fidelity were therefore verified through the wired governed MCP agent-data channel (upload_document → batch_read), and the authoritative local sha256 values are recorded above for any later byte-level re-verification.

A1 gate: PASS. Preflight evidence is in KB. (HOLD C1_W7_PREAPPLY_HOLD_PREFLIGHT_EVIDENCE_NOT_IN_KB did NOT fire.)