FIX7 Executable Claim Ledger

• Date: 2026-06-10 · Object ID: TKT-OBJ-052 · Authority: provisional-non-authority, evidence-only · Codex: NOT consulted
• Every executable/checkable claim → artifact → command → expected → actual → lens → verdict → fix/blocker. Evidence: …/packets/fix7-codex-recheck-9-2026-06-10/ (hash-bound logs + RERUN.sh).

A. Command/run ledger

CID	Claim	command	expected	actual (this macro)	lens	verdict	fix/blocker
C-01	executable canonicalizer SSOT exists and runs	python3 canonicalizer-fix7-canon-v1-ssot.py --selftest	exit 0	exit 0, 22/22 PASS after materialize_canonicalizer.py extracts .py from .md	L1+L3	CLEARED	P1 done; .py materialized (py_sha256 9355f0…)
C-02	--selftest=22/22 reproduces f2bda8…fe251	same	real pasted output + production coverage	22/22 pasted; membership cross-tool shasum==hashlib==f2bda8…; extended to 36/36 covering production extractor	L2	CLEARED	P3 done; selftest now covers seal-path fixtures
C-03	exactly one canonical authority	dup-authority inventory	one identity	runnable duplicate_authority_inventory(): one→ok, two→not ok (selftest PASS)	L4	CLEARED	P4 done; single implementation (P-EXT-1)
C-04	marker/scope contract enforced (whole-doc)	--selftest extractor fixtures + --produce	duplicate/fence/overlap/boundary executable	executable extractor; 11 fail-closed fixtures PASS; ran clean over 10 real docs	L5	CLEARED	P5 done
C-05	the 8 aggregate seal digests are produced	--produce docs	all 8	6/8 produced as candidates (see §B); N7 rehearsal, N8 Codex-only	L1-out	PARTIAL	P2 partial; N7/N8 = Codex/seal blockers
C-06	detached seal integrity-protected	n/a (seal authoring)	independent signature/revision-bound	N8 is Codex-authored (sealed_by/at, signature, parent_checkpoint) — not self-computable	L4-adj	BLOCKED (Codex)	P6/P7 Codex
C-07	no new hardcode; PG-native preserved	static scan	no runtime hardcode / PG regression	stdlib-offline-only; 0 forbidden ops; canonicalizer issues no SQL/runtime behavior	L4/L5-adj	CLEARED	forbidden-scope proof

B. Digest ledger (8 aggregate + 10 per-doc)

digest	node	command	expected	actual	class	blocker
membership	N2	--produce	f2bda8…fe251	f2bda8…fe251	FROZEN reproduced	none
normalized_active_content ×10	N1	--produce	deterministic	10 hashes (e.g. 00=b1665a…, 06=1144b7…)	REAL CANDIDATE	none (seals at Codex)
marker_fence_registry	N3	--produce	deterministic	bb9ca0…	REAL CANDIDATE	none
superseded_boundary	N4	--produce	deterministic	9b111c…	REAL CANDIDATE	none
guard_set	N5	--produce	=N1(doc06)	1144b7… (==doc06 hash)	REAL CANDIDATE	none
active_corpus	N6	--produce	deterministic	d777e8…	REHEARSAL (revisions seal at Codex)	revision pin
canonicalizer_sha256	—	--produce	hash of SSOT bytes	8f80f9… (local copy)	CANDIDATE	authoritative=KB bytes at sealed rev
envelope_manifest	N7	—	bind sealed roster	REHEARSAL_ONLY	BLOCKED	sealed sub-digests + approval-event fields (Codex/owner)
detached_seal	N8	—	Codex seal	CODEX_ONLY	BLOCKED	Codex authors seal metadata + signature

C. Negative/adversarial ledger

test	expected	actual
tamper doc 03	hash changes	12d9d1…→b2494d… (detected)
remove doc 05	missing flagged	EXTRACT_ERROR=LOCAL_FILE_MISSING
run absent .py	exit 2	REAL_EXIT_CODE=2 (the recheck-8 defect; P1 eliminates)
9-of-10 membership	≠ f2bda8	2e7519… ≠ f2bda8
11 extractor fail-closed fixtures	named status each	all PASS (ACTIVE_SCOPE_MARKER_MISSING/DUPLICATE, FENCE_UNBALANCED/NESTED, EXCLUDE_REGION_UNBALANCED, alias/marker/field classes)

Verdict

EXECUTABLE_CLAIM_LEDGER_BOUND — every claim bound to a command, expected, actual, hash, lens, verdict; L1/L2/L3/L4/L5 structural defects cleared; the only PARTIAL/BLOCKED rows (C-05/C-06, N7/N8) are the Codex seal handoff, not engineering gaps.