KB-3893

FIX7 Authority-Seal Rehearsal — README NOT A SEAL

3 min read Revision 1
tool-kiem-thufix7authority-sealrehearsalnot-a-sealreadme2026-06-10

FIX7 Authority-Seal — Rehearsal Artifacts — README: NOT A SEAL

  • Date: 2026-06-10 · Host: T1 · Codex consulted: NO · Production mutation: NO
  • Lane: FIX7_AUTHORITY_SEAL_FULL_DRESS_REHEARSAL_AND_CODEX_READY_PACKET_MACRO_2026_06_10

⛔ These artifacts are a REHEARSAL. They are NOT an authority seal.

Every digest in this directory was computed by authority_seal_encoder.py over clearly-labelled FIXTURE authority inputs. They prove the encoder RUNS end-to-end and is DETERMINISTIC. They carry no approval and no authority:

Property Value
is_real_n7 false
is_real_n8 false
is_real_p7 false
is_owner_final_seal false
is_codex_seal false
Real A1 (approval_event_id) MISSING — Codex mints at seal
Real A2 (approver_identity) MISSING — owner + Codex
Real A3 (approval_event_timestamp) MISSING — Codex stamps
Real A5 (owner_blueprint_decision) MISSING — owner chooses
Real N8 signer/timestamp/parent/report MISSING — Codex-only

Fixture rehearsal digests (NOT A SEAL)

N7 envelope_manifest_sha256  : 6225f265155942c1d32ce3ed2d491b4c3b7b0109a3b4b6fde9a37f434b459bfd
N8 detached_seal_sha256      : b1f001b64da50748823259593393b6e2d050c8c55c56918c99386984d075aa73
P7 authority_seal_pin_sha256 : 3599f6635be42a695991f66f561642e26718403f4e14ad220480480a8da7d541
DAG acyclic (N7,N8,P7)       : True

A real seal will have different digests because the real A1–A5 and Codex signer/timestamp differ from these fixtures (proven in the anti-hardcode report: mutating any input changes the digest).

Files in this directory

File What it is
README_NOT_A_SEAL.md this banner
fixture-inputs.json the labelled fixture authority inputs + DAG
n7-rehearsal-artifact.json N7 ordered records + preimage bytes + digest
n8-rehearsal-artifact.json N8 (binds N7) records + digest
p7-rehearsal-artifact.json P7 (binds N7,N8) records + digest
rehearsal-summary.json sequence + determinism verdict + encoder sha
redteam-results.json 20/20 adversarial attack outcomes
commands.sh exact reproduction command log
stdout.log captured run output (stderr.log is empty = no errors)
exit_codes.json per-step exit codes (all 0)
HASH_MANIFEST.txt sha256 of every file here
packet_tree.sha256 single tree hash over the whole closure packet (9f40519a…)

Reproduce

cd <packet-root>            # where authority_seal_encoder.py lives
bash rehearsal/commands.sh  # selftest -> rehearsal -> drift -> redteam -> anti-hardcode -> rc=0

Note: the byte-pinned artifacts are authority_seal_encoder.py (47200442…, 19131 B) and authority-seal-encoder-spec.json (f1c49927…, 4928 B). The supporting markdown docs are content-faithful and validated structurally by the drift checker.

Back to Knowledge Hub knowledge/dev/laws/tool-kiem-thu/packets/fix7-authority-closure-2026-06-10/rehearsal/README_NOT_A_SEAL.md