{ "doc": "fix7-p0-implementation-evidence-audit-plan", "date": "2026-06-11", "authority_of_this_doc": "PLANNING_NON_AUTHORITY; defines the evidence a FUTURE execution macro must produce", "required_evidence": [ {"artifact": "HASH_MANIFEST.txt", "purpose": "per-file sha256 of every execution-lane file", "gate": "shasum -a 256 -c all OK"}, {"artifact": "packet_tree.sha256", "purpose": "sha256(HASH_MANIFEST.txt) = single tree pin", "gate": "tree matches recompute"}, {"artifact": "commands.sh + RERUN.sh", "purpose": "executable, reconstructable run", "gate": "RERUN_RESULT: PASS in fresh mktemp"}, {"artifact": "exit_codes.json", "purpose": "byte-stable record of actual exit codes", "gate": "recompute byte-stable across reruns"}, {"artifact": "report-vs-file audit", "purpose": "every load-bearing claim maps to a real file + hash + command + exit", "gate": "audit PASS incl. file-presence"}, {"artifact": "bad_input_probes", "purpose": "fail-closed proof", "gate": "all probes fail-closed; any_fail_open=false"}, {"artifact": "authority firewall", "purpose": "encoder/seal cannot be re-derived or self-sealed; candidate never shown as sealed", "gate": "firewall rules PASS"}, {"artifact": "seal-vs-bytes recheck record", "purpose": "PC-3 proof canonicalizer rev3 still == P7 pin", "gate": "sha256 49c386a9..b734d0 + 38756 bytes match"}, {"artifact": "current-state update", "purpose": "single source of truth for lane status", "gate": "current-state doc written"}, {"artifact": "production-mutation proof", "purpose": "ONLY if a separate production authorization is ever granted; before/after production snapshot", "gate": "N/A this macro; production forbidden"} ], "no_vector_policy": "raw execution logs local + hashed + regenerable; only summaries + hashes in vector KB; NVSZ root pending (V02-PB-NVSZ-1)", "no_fake_pass_rule": "every gate must show executed output (Article 14); no narrated PASS; candidate/rehearsal values never labelled sealed", "production_evidence_required_now": false }