Article-14 Executable-Evidence — 5-Lens Detector Spec

• Date: 2026-06-10 · Object ID: TKT-OBJ-045 · Authority: design-authority (check definitions), provisional · Owner: SYSTEM/AUTHORITY
• Purpose: define the five reusable detector lenses the Tool-Kiem-Thu inspector applies to a construction blueprint to check Article-14 executable evidence ("a load-bearing clause that names an executable must be immediately runnable; prose is not proof"). Non-gating: a lens FAIL is a READ_LEVEL_FAIL/NEEDS_FIX, it advises an approver — it does not seal or block; Codex remains the sealing authority.
• Scope note (honors Recheck-8 K constraint): these definitions are applied to THIS blueprint only; promoting them into a reusable framework product is OUT OF SCOPE here and gated behind owner+Codex (no framework build performed).

The five lenses

Lens	Detects	Trigger condition	Required evidence to clear	Verdict if unmet	Article-14 / Recheck-8 mapping
L1 Missing artifact	A load-bearing clause references an artifact (esp. executable .py, a produced digest/output, a manifest) that does not exist as a real file/value	declared artifact not resolvable read-only in KB/native	the artifact exists at the declared path AND has the declared type	MISSING_ARTIFACT (FAIL)	"implementation runs that artifact, not this prose" → B
L2 Fake selftest	A selftest/PASS count asserted without reproducible output, or whose assertions don't cover the production path	PASS claimed but command unrunnable, or output not pasted, or asserts are narrow unit ≠ production behavior	the declared command runs and its complete real output is pasted, covering the production path	FAKE_OR_UNVERIFIED_SELFTEST (FAIL)	"paste complete real output"; 22 unit asserts ≠ seal path → B/F
L3 Non-runnable command	A command line the blueprint says to run errors or exits non-zero for the wrong reason	declared command → error / non-zero exit (e.g. [Errno 2] exit 2)	command exits 0 (or the declared success code) for the declared reason	NON_RUNNABLE_COMMAND (FAIL)	the decisive exit 2 evidence → B
L4 Duplicate authority	Two or more effective canonical/decision authorities for one nature (incl. demoted-but-still-consulted prose, or a derived view that becomes a second SSOT)	more than one artifact/section is required to produce the canonical result, or a banner demotes prose the implementer must still consult	a runnable inventory proves exactly ONE canonical identity/hash; nothing else implements the procedure	DUPLICATE_AUTHORITY (NEEDS_FIX)	Điều 14 "one SSOT for one nature"; guard must be executed not asserted → C
L5 Forbidden scope	A check/guard that should scope to current authority only either (a) isn't enforced over the whole document, or (b) could trip on/consume out-of-scope content (audit trail, superseded fences, excluded regions)	whole-document extractor / fence-balance / boundary scoping not executable, or guard scope undefined	executable extractor enumerates + scopes markers/fences/sections; guards scan current authority only, never the audit trail	FORBIDDEN_SCOPE / SCOPE_UNENFORCED (NEEDS_FIX)	marker/extractor + boundary registry → E

Detector contract (how a lens runs, read-only)

1. Resolve each declared artifact/command against KB (list_documents/get_document) and native surfaces — read-only. Existence/type is ARTIFACT_EXISTENCE_EVIDENCE; it is NEVER promoted to "the executable claim is proven" (that needs EXECUTION_EVIDENCE).
2. For L2/L3, distinguish "not run here" from "non-runnable": a missing file is NON_RUNNABLE (structural); a runnable-but-not-executed command is UNVERIFIED (fail-closed for execution-class claims).
3. Each finding carries: claim id, lens, declared vs actual evidence, verdict, exact fix, and the Recheck-8 check letter it corresponds to (so the inspector never contradicts the authoritative review).
4. Output is non-gating: decision_effect=NONE, may_gate=false, scope_of_denial stated, FLAG_PROSE_ONLY_PASS raised whenever a PASS rests on prose.

Anti-self-defeat clause (the checker must not commit the sins it detects)

• The checkable package and these reports are provisional-non-authority derived views; they must not become a second canonical authority over the blueprint (else they trip L4 themselves).
• These reports paste/cite real read-only evidence (e.g. the 14-doc all-.md listing) — they do not assert PASS from prose (else they trip L2).

Verdict

FIVE_LENS_DETECTOR_SPEC_DEFINED — five lenses defined with trigger/evidence/verdict and bound to Article-14 + Recheck-8 checks; applied to this blueprint only; framework promotion deferred to owner+Codex.