Checkpoint — Codex FIX7 Blueprint Recheck 9

Date: 2026-06-10
Status: CODEX_RECHECK_9_NEEDS_T1_FIX
Production mutation: NO
Seal decision: N7/N8/P7/canonicalizer hash NOT SEALED; blueprint NOT APPROVED.

Nominal checks

• bash RERUN.sh → exit 0; 36/36; membership_frozen_ok: True; manifest verify OK; final PASS.
• python3 manifest_tool.py --verify → exit 0.
• shasum -a 256 -c HASH_MANIFEST.txt → all 25 pinned files OK; exit 0.
• materialized canonicalizer .py == extended .py; nominal SSOT candidate hash 144eb3d9....

Decisive adversarial failures

1. Tamper forbidden_scope.forbidden_operations_found from 0 to 999:
   • manifest_tool.py --verify → exit 0.
   • full RERUN.sh → RERUN_RESULT: PASS, exit 0.
2. Remove active doc 05 and run declared production --produce:
   • reports EXTRACT_ERROR=LOCAL_FILE_MISSING;
   • still reports membership_frozen_ok: True;
   • exits 0.
3. RERUN.sh uses set -u, does not enforce selftest/produce exits, and does not rerun hash-manifest/forbidden-scope/negative-test evidence.
4. KB packet root returns not_found for RERUN.sh, HASH_MANIFEST.txt, and raw logs; runnable evidence exists only in local mirror.
5. Current 10 KB doc lengths and SSOT rev2 length match mirror, but exact current KB-byte SHA-256 could not be independently recomputed with available MCP reads.

Verdicts

• RERUN: NOMINAL PASS / ADVERSARIAL FAIL
• manifest_tool: FAIL-CLOSED CLAIM REJECTED
• HASH_MANIFEST: PASS on local mirror
• KB re-fetch/re-hash: PARTIAL / exact hash blocked
• P-EXT-1 exact apply: PARTIAL / byte-exact seal unverified
• Article 13: FAIL FOR SEAL
• Article 14: FAIL
• N7/N8/P7: DO NOT SEAL

Blockers

• R9-B1: verifier does not verify every load-bearing/current-pass field.
• R9-B2: production path exits 0 on missing active doc.
• R9-B3: RERUN overclaims executed checks and ignores step exits.
• R9-B4: KB packet and runnable mirror are divergent/incomplete.
• R9-B5: current KB-byte hash/revision binding incomplete.

Minimal safe next step

T1 corrects R9-B1 through R9-B5 and routes a fresh packet for Codex rerun.

Full report: knowledge/dev/reports/architecture/codex-fix7-blueprint-recheck-9-reproducible-packet-seal-review-2026-06-10/00-readme-first.md