FIX7 Authority Governed-Evidence Completeness + Fresh Reconstruction (under TKT v0.2, 2026-06-11)
FIX7 Authority Governed-Evidence Completeness + Fresh Reconstruction (2026-06-11)
Host: T1. Authority: NON_AUTHORITY. Codex consulted: NO. Production mutated: NO.
Packet inventory (all present in governed KB)
Root: knowledge/dev/reports/architecture/fix7-authority-n-node-tkt-v02-alignment-2026-06-11/
| file | sha256 | present | source |
|---|---|---|---|
README_FOR_OWNER_AND_CODEX.md |
— | YES | new |
commands.sh |
3e00d0b6… |
YES (pinned) | new |
exit_codes.json |
— | YES | generated |
HASH_MANIFEST.txt |
— | YES | new |
packet_tree.sha256 |
96d00b9e… (tree) |
YES | new |
manifest.json |
— | YES | new |
RERUN.sh |
— | YES | new |
n_node_checker.py |
4fdf7d24… |
YES (pinned) | new |
sp_align_probes.py |
4b2e04e2… |
YES (pinned) | new |
authority_seal_encoder.py |
13344f92… |
by-reference | …/fix7-authority-closure-2026-06-10/ (byte-identical) |
codex_probes.py |
112b4ec5… |
by-reference | …/fix7-authority-closure-2026-06-10/ (byte-identical) |
No missing evidence file. By-reference pins follow T2 convention (§3a) to avoid divergent duplicate authority.
Fresh reconstruction (the workbench is NOT the proof)
- Byte-exactness of KB store proven 3 ways: (a)
authority_seal_encoder.pymaterialized from KB hashes to13344f92…== governed pin == N-node model JSONS3.encoder_sha256; (b) republishedn_node_checker.pyKBcontent_length= 10774 = local bytes; (c) republishedcommands.shKBcontent_length= 2372 = local bytes. - Clean-directory RERUN (
/tmp/fix7-fresh-recon, separate from the build dir):bash RERUN.sh→ step1shasum -c HASH_MANIFEST.txtall OK → step2 tree96d00b9e…OK → step3commands.shOVERALL_RESULT: PASS→RERUN_RESULT: PASS, exit 0. - Tamper proofs (fail-closed): file byte-flip →
RERUN_RESULT: FAIL (manifest drift)exit 1;packet_tree.sha256tamper →RERUN_RESULT: FAIL (tree mismatch)exit 1; untouched control → PASS exit 0.
No-vector evidence continuity
Raw stdout/stderr logs are local (/tmp/fix7-tkt-v02-align/*.log, …/packet/evidence/logs/), each regenerable deterministically by bash commands.sh. KB carries summaries + sha pins, not raw logs (no NVSZ root designated; V02-PB-NVSZ-1 remains owner/operator). This report does NOT claim KB contains the raw logs.
Completeness verdict
Governed evidence files exist; fresh KB reconstruction passes; tamper fails closed; engineering / rehearsal / candidate / authority are separated (see firewall report). No report-only evidence for any load-bearing claim (see report-vs-file audit).