{ "doc": "fix7-p0-codex-rejected-sqlite-reproducibility-fix-machine-report", "date": "2026-06-13", "macro": "FIX7_P0_FIX_CODEX_REJECTED_SQLITE_REPRODUCIBILITY_AND_RESEAL_CAPSULE_MACRO_2026_06_13", "final_status": "FIX7_P0_CODEX_REJECTED_SQLITE_REPRODUCIBILITY_FIXED_CAPSULE_READY", "fixes_codex_rejection": "CODEX_FIX7_P0_EXECUTABLE_CAPSULE_AUDIT_REJECTED", "kb_mirror_note": "byte-mirror of the sealed in-capsule machine report (sha256 2bbd065f83aa0f6057c324b440b6d098b7643500cbb8dd9d0c3f65fa3576708f, 4234 bytes) PLUS this kb_mirror_note and capsule_tree_final, which the sealed copy cannot self-reference", "capsule_tree_final": "86e553b8cdb5e15cc2c633cb8ed2516f0bc70ead95fbbd737f9aaa1a15541822", "codex_rejection_reproduced_before_fix": true, "codex_rejection_evidence_preserved": "logs/codex-rejection-evidence-preserved-2026-06-13/", "root_cause": { "summary": "raw SQLite FILE sha256 values were embedded in the pass/fail path of sealed rehearsal evidence; raw SQLite file bytes are deterministic within one runtime but differ across SQLite library builds (page/header/file layout)", "determinism_matrix": [ {"runtime": "python 3.11.6 / sqlite 3.42.0 (seal env)", "fresh_raw_db_sha256": "5a6ad4634d3db3c8899cc66cd279880a9c2a7841e3e714a4d7fb7008dfbcf598", "stable_within_runtime": true}, {"runtime": "python 3.9.6 / sqlite 3.51.0", "fresh_raw_db_sha256": "a7c5bddd523f7ffae789f22b94f64af97b49c567d19ca0169a3a8c81878fade7", "stable_within_runtime": true}, {"runtime": "codex audit runtime (third sqlite build)", "fresh_raw_db_sha256": "1fbf9607a51e6d838ec9c4b8835b3823190db86c2b6fd891140153450997691e", "stable_within_runtime": true} ], "drift_confined_to_raw_file_hash_fields": true }, "fix": { "proof_model_old": "raw SQLite file sha256 in pass/fail path (REJECTED)", "proof_model_new": "CANONICAL_LOGICAL_STATE_V1 sha256 in pass/fail path; raw file hash diagnostic only", "canonicalizer": "packets/fix7-p0-final-pre-real-data-readiness-packet-2026-06-12/canonicalize_sqlite_state.py", "canonicalizer_sha256": "6997da403c602d6f483c201ad77bdded6750a3cd5284a4c2f6627b5269715c41", "raw_sqlite_file_hash_diagnostic": "packets/fix7-p0-final-pre-real-data-readiness-packet-2026-06-12/raw-sqlite-diagnostic.json (regenerated, unsealed, never pass/fail)", "rollback_proof_preserved": { "after_apply_state_hash_differs_from_before": true, "after_rollback_state_hash_equals_before": true, "row_counts_and_row_absence_restore_proof": true, "fake_no_mutation_rollback_fails_closed": true, "hardened_validator_unchanged_byte_exact": "e6547e6935cb01aae5feb405899c97107f1990ff3e2f7e6b9157828a90956c47" } }, "resealed": { "final_readiness_packet_tree_new": "ad9e15112d378ca2734707d04b4ff21614148f040d534c43df77d89be574f401", "final_readiness_packet_tree_superseded": "b476b547009f905898229a869094504986822eec3eb02103479e6231bc55cd90", "sealed_evidence_sha256": { "rollback-evidence.json": "2fe4567150fca5990ecacd604b49b28295d1874946eb6531f5baf269218fca68", "surrogate-rehearsal-execution-evidence.json": "c269dfa40cb30808a6ba6228ad0b0f75dbf9cec4d7bb4057fa1462c40e08a748" }, "fixture_canonical_state_sha256": "ec8a584cc7d21a7114fd6b801e933054dd0f5f10ae29a8eda6538d8d0cadc8bd", "capsule_manifest_files": 203 }, "fresh_reproducibility_proof": { "fresh_process_run_1": "PASS (logs/fresh-process-repro-run-1.log)", "fresh_process_run_2": "PASS (logs/fresh-process-repro-run-2.log)", "fresh_tempdir_and_different_sqlite_build_run": "PASS - 4/4 evidence JSONs byte-identical on sqlite 3.51.0, diagnostic differs by design (logs/fresh-tempdir-repro-run.log)", "verify_capsule_exit": 0, "rerun_all_exit": 0, "bad_input_regression": "capsule 10/10 + packet 12/12 fail-closed, 0 forbidden token leaks" }, "safety": { "production_mutation": false, "production_db_or_directus_or_live_contact": false, "real_run": false, "qt001_apply": false, "permit_activation_repoint_cutover": false, "ci_deploy_trigger": false, "secrets_copied_or_changed": false, "real_production_data_copied": false, "real_data_or_production_decision_selected": false, "evidence_deleted": false, "canonical_fold_performed": false }, "next": "owner routes Codex back to the capsule; CODEX_AUDIT_INSTRUCTIONS.md first commands unchanged" }