MANIFEST_VERIFY: OK — ENTIRE authority section (18 top fields, 27 artifact hashes, selftest 45/45, forbidden hits 0, 9 negative tests) recomputed and equal; 6 REAL CLI executions observed against the static oracle (exits 4/0 as spec'd); explanatory is declared non-authority [OK] C1 positive control: untampered copy --verify == 0 PACKET_COMPLETENESS: OK (33 required files present; HASH_MANIFEST covers the tracked tree bidirectionally; all hashes match) [OK] C2 positive control: untampered copy --complete == 0 FORBIDDEN_SCAN: files=8 hits=0 [OK] C3 positive control: untampered copy --scan == 0 [OK] C4 positive control: produce corpus_ok+frozen_ok on untampered copy MANIFEST_VERIFY: FAIL (authority != full recomputation, or invariant violated)

• authority.forbidden_scope.forbidden_operations_found: manifest=999 != recomputed=0 [OK] T1 tamper authority.forbidden_scope.forbidden_operations_found=999 -> verify FAILS [OK] T2a missing doc 05 -> produce fail-closed state (corpus_ok False, all digests suppressed) MANIFEST_VERIFY: FAIL (authority recomputation impossible — fail-closed): SystemExit: FATAL: pinned packet corpus does not produce cleanly (fail-closed) [OK] T2b missing doc 05 -> manifest --verify FAILS PACKET_COMPLETENESS: FAIL
• required file MISSING: docs/05-rollback-blueprint.md
• HASH_MANIFEST entry has no file on disk: docs/05-rollback-blueprint.md [OK] T2c missing doc 05 -> packet --complete FAILS [OK] T2d missing doc 05 -> ACTUAL CLI exit OBSERVED == 4, suppression marker, no digest leak — observed_exit=4 MANIFEST_VERIFY: FAIL (authority != full recomputation, or invariant violated)
• authority.selftest.checks_passed: manifest=999 != recomputed=45 [OK] T3 tamper authority.selftest.checks_passed=999 -> verify FAILS MANIFEST_VERIFY: FAIL (authority != full recomputation, or invariant violated)
• authority.ssot.ssot_md_sha256: manifest='0000000000000000000000000000000000000000000000000000000000000000' != recomputed='49c386a9b9666c09786fc4f89bc79776b6046eaee6f4da6d8537d2c753b734d0' [OK] T4 tamper authority.ssot.ssot_md_sha256 -> verify FAILS MANIFEST_VERIFY: FAIL (authority recomputation impossible — fail-closed): FileNotFoundError: [Errno 2] No such file or directory: '/var/folders/z3/_hp1c7kn24nd1vt3jp7yhlh40000gn/T/fix7adv-j4_8my9r/copy5/logs/produce.log' [OK] T5a remove logs/produce.log -> verify FAILS (log is an authority artifact) PACKET_COMPLETENESS: FAIL
• required file MISSING: logs/produce.log
• HASH_MANIFEST entry has no file on disk: logs/produce.log [OK] T5b remove logs/produce.log -> --complete FAILS PACKET_COMPLETENESS: FAIL
• file on disk NOT covered by HASH_MANIFEST: docs/03-gap-classification.md [OK] T6 drop HASH_MANIFEST entry for docs/03 -> --complete FAILS (bidirectional coverage) PACKET_COMPLETENESS: FAIL
• required file MISSING: RERUN.sh
• HASH_MANIFEST entry has no file on disk: RERUN.sh [OK] T7 remove RERUN.sh -> --complete FAILS (required packet file) PACKET_COMPLETENESS: FAIL
• hash mismatch vs HASH_MANIFEST: docs/00-readme-first.md [OK] T8a byte-tamper docs/00 -> --complete FAILS (hash mismatch) MANIFEST_VERIFY: FAIL (authority != full recomputation, or invariant violated)
• authority.artifacts.docs/00-readme-first.md: manifest='aae97ad59afd706d1cf004d5e1a64b2796c1ae298fe26c328c4c7701c9d1373e' != recomputed='332bb355b773a014b07a8c34c8815ecda31b9931c3909398a42c28f76192a3ef'
• authority.per_doc_normalized_active_content_sha256.00-readme-first.md: manifest='b1665ac27783aae54fc045d8977243f4aa4a5d3341122b768ff5e57273f1ba5d' != recomputed='0e7855ad10f072831eec6e45414550f4e94afffe41665f93c081a9b04ffb8022'
• authority.produce.active_corpus_sha256: manifest='d777e87c73d3b62d36789d9343f346102e98dbf301f2c93f7608470b876b258c' != recomputed='921bdbb23821abcd3ae0b538eeb8bdaddec065a10a0ed41997884481afafa31a' [OK] T8b byte-tamper docs/00 -> verify FAILS [OK] T8c byte-tamper -> packet tree-hash diverges (KB-vs-local mismatch detector) FORBIDDEN_SCAN: files=8 hits=1
• {'file': 'evidence/materialize_canonicalizer.py', 'line': 19, 'pattern': '\bsubprocess\b'} [OK] T9a forbidden token in seal-path code -> --scan FAILS MANIFEST_VERIFY: FAIL (authority != full recomputation, or invariant violated)
• authority.artifacts.evidence/materialize_canonicalizer.py: manifest='9e05d2c1b19fc401908c40fed642af6211ee351a4960ba046e805c6a08b9a7a6' != recomputed='e04ee1238ef23e1ae283b0d70d75b36e34192737ea03ba52c9fe21af6c125163'
• authority.forbidden_scope.forbidden_operations_found: manifest=0 != recomputed=1
• authority.forbidden_scope.hits: list differs: manifest=[] recomputed=[{"file": "evidence/materialize_canonicalizer.py", "line": 19, "pattern": "\bsubprocess\b"}]
• authority.forbidden_scope.stdlib_offline_only: manifest=True != recomputed=False
• forbidden scan found 1 hits: [{'file': 'evidence/materialize_canonicalizer.py', 'line': 19, 'pattern': '\bsubprocess\b'}] [OK] T9b forbidden token in seal-path code -> verify FAILS MANIFEST_VERIFY: FAIL (authority != full recomputation, or invariant violated)
• authority.digest_classes.canonicalizer_sha256: manifest='CODEX_SEALED' != recomputed='CANDIDATE_OVER_PATCHED_KB_BYTES'
• manifest digest class canonicalizer_sha256='CODEX_SEALED' not in allowlist ['FROZEN_REPRODUCED', 'REAL_CANDIDATE', 'REHEARSAL', 'CANDIDATE_OVER_PATCHED_KB_BYTES', 'BLOCKED_NEEDS_SEALED_INPUTS', 'CODEX_ONLY'] (claiming a sealed/unknown class fails closed) [OK] T10 digest class -> CODEX_SEALED -> verify FAILS (allowlist + deep diff) MANIFEST_VERIFY: FAIL (authority != full recomputation, or invariant violated)
• authority.codex_sealed_values_present: manifest=True != recomputed=False
• authority.codex_sealed_values_present must be false [OK] T11 codex_sealed_values_present=true -> verify FAILS MANIFEST_VERIFY: FAIL (authority != full recomputation, or invariant violated)
• authority.totally_real_seal: EXTRA key in manifest (not recomputable -> not allowed in authority) [OK] T12 extra hand-authored field in authority -> verify FAILS (schema: no unverified field may live in authority) [OK] T13a fail-open SUT (error exit 0) -> manifest --emit FAILS (no laundering) — observed_exit=1 [OK] T13b fail-open SUT (error exit 0) -> manifest --verify FAILS — observed_exit=1 ADVERSARIAL_SUITE: PASS (25/25 expectations met; every tamper must be caught, every control must be green)