{ "packet": "fix7-real-n6-provenance-under-tkt-v02-2026-06-11", "date": "2026-06-11", "host": "T1", "convention": "TKT v0.2 pre-Codex review packet conventions (commands.sh + exit_codes.json + HASH_MANIFEST + packet_tree + RERUN)", "steps": [ {"id": "verifier_selftest", "cmd": "python3 real_n6_provenance_verifier.py --selftest", "expected_exit": 0, "meaning": "19/19 pure fail-closed gates (rev2: +dup-declared/+dup-manifest/+malformed/+bad-hash)"}, {"id": "verify_real_n6", "cmd": "python3 real_n6_provenance_verifier.py --verify --corpus <recon>/docs ... --emit-cert", "expected_exit": 0, "meaning": "real N6 computed from governed corpus; certificate emitted"}, {"id": "cert_byte_identical", "cmd": "diff regenerated-cert pinned-cert", "expected_exit": 0, "meaning": "certificate is deterministic"}, {"id": "adversarial_probes", "cmd": "python3 n6_adversarial_probes.py <recon>", "expected_exit": 0, "meaning": "31/31 probes fail-closed (P25-P28 = Codex dup/manifest regression); no PASS/seal/official digest emitted"}, {"id": "authority_firewall", "cmd": "python3 authority_firewall.py <recon>", "expected_exit": 0, "meaning": "8/8 firewall rules hold"}, {"id": "cert_binding_selfcheck", "cmd": "verify_certificate(cert)", "expected_exit": 0, "meaning": "certificate binding digest intact"}, {"id": "commands_overall", "cmd": "bash commands.sh", "expected_exit": 0, "meaning": "OVERALL: PASS (5/5 gates)"}, {"id": "rerun_from_kb", "cmd": "bash RERUN.sh", "expected_exit": 0, "meaning": "fresh KB reconstruction + all gates -> RERUN_RESULT: PASS"} ], "reject_exit_code": 5, "notes": "verifier --verify exits 5 (REJECTED) on any provenance/corpus/manifest failure; 0 only on a fully governed, byte-exact, non-rehearsal candidate." }