{ "experiment": "PASS", "proofVersion": "shared-ai-configuration-drift-proof/v1", "evidenceDate": "2026-07-19", "source": { "publicRepository": "https://github.com/cygaco/WarpOS", "commit": "8b083d78948263c998134ac5d34947c383e17a85", "verification": { "commit": "8b083d78948263c998134ac5d34947c383e17a85", "blobs": { "framework/paths.registry.json": "aba0be06992cd4a9e61e086b133a07c8886d13bc", "scripts/paths/build.js": "267de41f6ff5491144cd63b4b2c2648d154749d8", "scripts/paths/gate.js": "0adf90bf3a5dc8a626b3435eb7f6dfb8c88b0333", "scripts/checks/path-usage.js": "9d26b86d7f884515b21c49230ab62c33d53bd392" } }, "acquisition": "Each run used a new path-restricted git archive from the frozen commit. No live worktree, untracked file, or network source was read into the fixture." }, "contract": { "proofVersion": "shared-ai-configuration-drift-proof/v1", "evidenceDate": "2026-07-19", "sourceKey": "eventsFile", "originalValue": ".claude/project/events/events.jsonl", "inventedChangedValue": ".workbench/shared-events/events-v2.jsonl", "inventedTamperValue": ".workbench/stale-copy/events.jsonl", "inventedWrongConsumerValue": ".workbench/wrong-target/events.jsonl", "outputPaths": [ ".claude/paths.json", "scripts/hooks/lib/paths.generated.js", "scripts/path-lint.rules.generated.json", "schemas/paths.schema.json", "_requirements/03-architecture/PATH_KEYS.md" ], "permissions": { "sourceRead": "A path-restricted git archive of one frozen tracked public commit only.", "liveWorktreeFiles": "none", "untrackedFiles": "none", "network": "none", "providerCalls": "none", "outsideActions": "none", "durableWrites": [ "The named JSON report, and only when --write is supplied." ] }, "requiredCases": [ "clean frozen baseline", "one registry value changed before generation", "all five declared artifacts regenerated", "one generated artifact manually tampered", "unknown key rejected by the proof-only exact validator", "known key with the wrong path rejected by the proof-only exact validator", "original registry value restored and all frozen bytes recovered", "two independent archive runs produce the same deterministic receipt" ] }, "runs": [ { "runId": "independent-run-a", "core": { "archive": { "sha256": "536e2059832764a5314a1471b7117f8a892c3953c6f72611516122e9e0f6adb9", "trackedPaths": [ "framework/paths.registry.json", "scripts/paths/build.js", "scripts/paths/gate.js", "scripts/checks/path-usage.js", ".claude/paths.json", "scripts/hooks/lib/paths.generated.js", "scripts/path-lint.rules.generated.json", "schemas/paths.schema.json", "_requirements/03-architecture/PATH_KEYS.md" ], "extractedFileCount": 9 }, "frozenSourceSha256": { "framework/paths.registry.json": "542ed8831af89366c2f60795211186073f63776adee6d6781ae4efb964c52e89", "scripts/paths/build.js": "4db9f24e5d535c77e59a951f9492d17f991201bf5f88a71704f063d679719cc9", "scripts/paths/gate.js": "066307bf5473f492231df5894c808d0467902c79f7cf213b433b0164e346567d", "scripts/checks/path-usage.js": "f74259b5fcab5fce9325483a920f849e28254061ee07aba2854c6ea2337793d7" }, "inventory": { "registryKeys": 134, "activeKeys": 133, "removedKeys": 1, "generatedMappings": 133 }, "baseline": { "buildCheckExitCode": 0, "artifactGate": { "exitCode": 0, "ok": true, "checks": [ "artifacts" ], "counts": { "errors": 0, "warnStrict": 0 }, "findingAreas": [] }, "outputHashes": { ".claude/paths.json": "343e88cdc5fdfa456fae4ff8c12a5d2ed03e1ed6672e8d4735ea9a5ac689e1c6", "scripts/hooks/lib/paths.generated.js": "0acb610b8d89a628e6689d24ace399616848770f49a969075ab9673928bcf758", "scripts/path-lint.rules.generated.json": "0a2ef7226351a70322d3846b1f0bbd5aed8076094e616809053cfb48378fd129", "schemas/paths.schema.json": "e867c421f7328f0afcaea1d29e08495fd2e8ace183983ccb09bfa9c10610a8a0", "_requirements/03-architecture/PATH_KEYS.md": "cbb8f2a9cb89a10b10b024d09ac74dc45462bf6af1df86a8c2f214c0939a0e57" }, "trackedSubsetFingerprint": "7f2a50b0554cc9ec4411b183af5fdfa67ce0c2a50a5ff14c2e5064448da565d0" }, "registryChange": { "changedLeafPaths": [ "paths.eventsFile.path" ], "before": ".claude/project/events/events.jsonl", "after": ".workbench/shared-events/events-v2.jsonl" }, "staleBeforeGeneration": { "buildCheckExitCode": 1, "reportedStale": [ ".claude/paths.json", "scripts/hooks/lib/paths.generated.js", "scripts/path-lint.rules.generated.json", "schemas/paths.schema.json", "_requirements/03-architecture/PATH_KEYS.md" ], "allDeclaredOutputsReportedStale": true }, "generation": { "exitCode": 0, "postGenerationBuildCheckExitCode": 0, "postGenerationArtifactGate": { "exitCode": 0, "ok": true, "checks": [ "artifacts" ], "counts": { "errors": 0, "warnStrict": 0 }, "findingAreas": [] }, "outputHashes": { ".claude/paths.json": "d84a9a3d3c67132c59c451303574ae4b7a5eaf7a45b1a7ce4b7241f320c33e1b", "scripts/hooks/lib/paths.generated.js": "0b1aad482d2bf52bd1b2e3ebd02b9223e25ebc321d0d09e23985731cb9ab0a80", "scripts/path-lint.rules.generated.json": "eef822f8235a08829ea635790a9f247a8f6c776cb97191cf67862cd47981d776", "schemas/paths.schema.json": "b4b92bcbdef5645f910047818441b7cc1c90d350a67e66cd30f55c0010921eb5", "_requirements/03-architecture/PATH_KEYS.md": "1d3a2e866853ee8a517ee3e680a5c60692187ea9b3e775193669f0941e81ed58" }, "changedOutputs": [ ".claude/paths.json", "scripts/hooks/lib/paths.generated.js", "scripts/path-lint.rules.generated.json", "schemas/paths.schema.json", "_requirements/03-architecture/PATH_KEYS.md" ], "allFiveOutputHashesChanged": true }, "manualTamper": { "artifact": ".claude/paths.json", "changedLeafPaths": [ "eventsFile" ], "inventedTamperValue": ".workbench/stale-copy/events.jsonl", "gatedUse": { "gate": { "exitCode": 1, "ok": false, "checks": [ "artifacts" ], "counts": { "errors": 1, "warnStrict": 0 }, "findingAreas": [ "artifacts" ] }, "decision": "BLOCK", "reason": "STALE_GENERATED_ARTIFACT", "executionDirective": "SUPPRESS", "downstreamInvocations": 0 } }, "proofOnlyExactConsumerValidator": { "attribution": "fixture-only-not-WarpOS", "validConsumer": { "validator": "proof-only-exact-consumer-validator/v1", "attribution": "fixture-only-not-WarpOS", "decision": "ALLOW", "reason": "EXACT_ACTIVE_KEY_AND_PATH", "executionDirective": "EXECUTE", "downstreamInvocations": 1, "request": { "key": "eventsFile", "path": ".workbench/shared-events/events-v2.jsonl" } }, "unknownKey": { "validator": "proof-only-exact-consumer-validator/v1", "attribution": "fixture-only-not-WarpOS", "decision": "REJECT", "reason": "UNKNOWN_ACTIVE_KEY", "executionDirective": "SUPPRESS", "downstreamInvocations": 0, "request": { "key": "inventedUnknownEventsFile", "path": ".workbench/unknown/events.jsonl" } }, "knownKeyWrongPath": { "validator": "proof-only-exact-consumer-validator/v1", "attribution": "fixture-only-not-WarpOS", "decision": "REJECT", "reason": "KNOWN_KEY_WRONG_PATH", "executionDirective": "SUPPRESS", "downstreamInvocations": 0, "request": { "key": "eventsFile", "path": ".workbench/wrong-target/events.jsonl" } } }, "rollback": { "restoredRegistryValue": ".claude/project/events/events.jsonl", "generationExitCode": 0, "buildCheckExitCode": 0, "artifactGate": { "exitCode": 0, "ok": true, "checks": [ "artifacts" ], "counts": { "errors": 0, "warnStrict": 0 }, "findingAreas": [] }, "outputHashes": { ".claude/paths.json": "343e88cdc5fdfa456fae4ff8c12a5d2ed03e1ed6672e8d4735ea9a5ac689e1c6", "scripts/hooks/lib/paths.generated.js": "0acb610b8d89a628e6689d24ace399616848770f49a969075ab9673928bcf758", "scripts/path-lint.rules.generated.json": "0a2ef7226351a70322d3846b1f0bbd5aed8076094e616809053cfb48378fd129", "schemas/paths.schema.json": "e867c421f7328f0afcaea1d29e08495fd2e8ace183983ccb09bfa9c10610a8a0", "_requirements/03-architecture/PATH_KEYS.md": "cbb8f2a9cb89a10b10b024d09ac74dc45462bf6af1df86a8c2f214c0939a0e57" }, "outputHashesMatchBaseline": true, "trackedSubsetFingerprint": "7f2a50b0554cc9ec4411b183af5fdfa67ce0c2a50a5ff14c2e5064448da565d0", "trackedSubsetMatchesBaseline": true, "cleanDiff": { "changedPaths": [], "verdict": "CLEAN" } } }, "deterministicCoreSha256": "27be6bd28fde49d09898b19008020aaa05f5ebe9f89cfab2ad88438528fd22d8", "privacyScan": { "absoluteWindowsPathFound": false, "emailAddressFound": false, "bearerCredentialFound": false, "secretLikePrefixFound": false, "verdict": "PASS" }, "cleanup": { "disposableArchiveDirectoryRemoved": true, "verifiedMissingAfterRemoval": true } }, { "runId": "independent-run-b", "core": { "archive": { "sha256": "536e2059832764a5314a1471b7117f8a892c3953c6f72611516122e9e0f6adb9", "trackedPaths": [ "framework/paths.registry.json", "scripts/paths/build.js", "scripts/paths/gate.js", "scripts/checks/path-usage.js", ".claude/paths.json", "scripts/hooks/lib/paths.generated.js", "scripts/path-lint.rules.generated.json", "schemas/paths.schema.json", "_requirements/03-architecture/PATH_KEYS.md" ], "extractedFileCount": 9 }, "frozenSourceSha256": { "framework/paths.registry.json": "542ed8831af89366c2f60795211186073f63776adee6d6781ae4efb964c52e89", "scripts/paths/build.js": "4db9f24e5d535c77e59a951f9492d17f991201bf5f88a71704f063d679719cc9", "scripts/paths/gate.js": "066307bf5473f492231df5894c808d0467902c79f7cf213b433b0164e346567d", "scripts/checks/path-usage.js": "f74259b5fcab5fce9325483a920f849e28254061ee07aba2854c6ea2337793d7" }, "inventory": { "registryKeys": 134, "activeKeys": 133, "removedKeys": 1, "generatedMappings": 133 }, "baseline": { "buildCheckExitCode": 0, "artifactGate": { "exitCode": 0, "ok": true, "checks": [ "artifacts" ], "counts": { "errors": 0, "warnStrict": 0 }, "findingAreas": [] }, "outputHashes": { ".claude/paths.json": "343e88cdc5fdfa456fae4ff8c12a5d2ed03e1ed6672e8d4735ea9a5ac689e1c6", "scripts/hooks/lib/paths.generated.js": "0acb610b8d89a628e6689d24ace399616848770f49a969075ab9673928bcf758", "scripts/path-lint.rules.generated.json": "0a2ef7226351a70322d3846b1f0bbd5aed8076094e616809053cfb48378fd129", "schemas/paths.schema.json": "e867c421f7328f0afcaea1d29e08495fd2e8ace183983ccb09bfa9c10610a8a0", "_requirements/03-architecture/PATH_KEYS.md": "cbb8f2a9cb89a10b10b024d09ac74dc45462bf6af1df86a8c2f214c0939a0e57" }, "trackedSubsetFingerprint": "7f2a50b0554cc9ec4411b183af5fdfa67ce0c2a50a5ff14c2e5064448da565d0" }, "registryChange": { "changedLeafPaths": [ "paths.eventsFile.path" ], "before": ".claude/project/events/events.jsonl", "after": ".workbench/shared-events/events-v2.jsonl" }, "staleBeforeGeneration": { "buildCheckExitCode": 1, "reportedStale": [ ".claude/paths.json", "scripts/hooks/lib/paths.generated.js", "scripts/path-lint.rules.generated.json", "schemas/paths.schema.json", "_requirements/03-architecture/PATH_KEYS.md" ], "allDeclaredOutputsReportedStale": true }, "generation": { "exitCode": 0, "postGenerationBuildCheckExitCode": 0, "postGenerationArtifactGate": { "exitCode": 0, "ok": true, "checks": [ "artifacts" ], "counts": { "errors": 0, "warnStrict": 0 }, "findingAreas": [] }, "outputHashes": { ".claude/paths.json": "d84a9a3d3c67132c59c451303574ae4b7a5eaf7a45b1a7ce4b7241f320c33e1b", "scripts/hooks/lib/paths.generated.js": "0b1aad482d2bf52bd1b2e3ebd02b9223e25ebc321d0d09e23985731cb9ab0a80", "scripts/path-lint.rules.generated.json": "eef822f8235a08829ea635790a9f247a8f6c776cb97191cf67862cd47981d776", "schemas/paths.schema.json": "b4b92bcbdef5645f910047818441b7cc1c90d350a67e66cd30f55c0010921eb5", "_requirements/03-architecture/PATH_KEYS.md": "1d3a2e866853ee8a517ee3e680a5c60692187ea9b3e775193669f0941e81ed58" }, "changedOutputs": [ ".claude/paths.json", "scripts/hooks/lib/paths.generated.js", "scripts/path-lint.rules.generated.json", "schemas/paths.schema.json", "_requirements/03-architecture/PATH_KEYS.md" ], "allFiveOutputHashesChanged": true }, "manualTamper": { "artifact": ".claude/paths.json", "changedLeafPaths": [ "eventsFile" ], "inventedTamperValue": ".workbench/stale-copy/events.jsonl", "gatedUse": { "gate": { "exitCode": 1, "ok": false, "checks": [ "artifacts" ], "counts": { "errors": 1, "warnStrict": 0 }, "findingAreas": [ "artifacts" ] }, "decision": "BLOCK", "reason": "STALE_GENERATED_ARTIFACT", "executionDirective": "SUPPRESS", "downstreamInvocations": 0 } }, "proofOnlyExactConsumerValidator": { "attribution": "fixture-only-not-WarpOS", "validConsumer": { "validator": "proof-only-exact-consumer-validator/v1", "attribution": "fixture-only-not-WarpOS", "decision": "ALLOW", "reason": "EXACT_ACTIVE_KEY_AND_PATH", "executionDirective": "EXECUTE", "downstreamInvocations": 1, "request": { "key": "eventsFile", "path": ".workbench/shared-events/events-v2.jsonl" } }, "unknownKey": { "validator": "proof-only-exact-consumer-validator/v1", "attribution": "fixture-only-not-WarpOS", "decision": "REJECT", "reason": "UNKNOWN_ACTIVE_KEY", "executionDirective": "SUPPRESS", "downstreamInvocations": 0, "request": { "key": "inventedUnknownEventsFile", "path": ".workbench/unknown/events.jsonl" } }, "knownKeyWrongPath": { "validator": "proof-only-exact-consumer-validator/v1", "attribution": "fixture-only-not-WarpOS", "decision": "REJECT", "reason": "KNOWN_KEY_WRONG_PATH", "executionDirective": "SUPPRESS", "downstreamInvocations": 0, "request": { "key": "eventsFile", "path": ".workbench/wrong-target/events.jsonl" } } }, "rollback": { "restoredRegistryValue": ".claude/project/events/events.jsonl", "generationExitCode": 0, "buildCheckExitCode": 0, "artifactGate": { "exitCode": 0, "ok": true, "checks": [ "artifacts" ], "counts": { "errors": 0, "warnStrict": 0 }, "findingAreas": [] }, "outputHashes": { ".claude/paths.json": "343e88cdc5fdfa456fae4ff8c12a5d2ed03e1ed6672e8d4735ea9a5ac689e1c6", "scripts/hooks/lib/paths.generated.js": "0acb610b8d89a628e6689d24ace399616848770f49a969075ab9673928bcf758", "scripts/path-lint.rules.generated.json": "0a2ef7226351a70322d3846b1f0bbd5aed8076094e616809053cfb48378fd129", "schemas/paths.schema.json": "e867c421f7328f0afcaea1d29e08495fd2e8ace183983ccb09bfa9c10610a8a0", "_requirements/03-architecture/PATH_KEYS.md": "cbb8f2a9cb89a10b10b024d09ac74dc45462bf6af1df86a8c2f214c0939a0e57" }, "outputHashesMatchBaseline": true, "trackedSubsetFingerprint": "7f2a50b0554cc9ec4411b183af5fdfa67ce0c2a50a5ff14c2e5064448da565d0", "trackedSubsetMatchesBaseline": true, "cleanDiff": { "changedPaths": [], "verdict": "CLEAN" } } }, "deterministicCoreSha256": "27be6bd28fde49d09898b19008020aaa05f5ebe9f89cfab2ad88438528fd22d8", "privacyScan": { "absoluteWindowsPathFound": false, "emailAddressFound": false, "bearerCredentialFound": false, "secretLikePrefixFound": false, "verdict": "PASS" }, "cleanup": { "disposableArchiveDirectoryRemoved": true, "verifiedMissingAfterRemoval": true } } ], "crossRunReproducibility": { "deterministicCoreSha256": "27be6bd28fde49d09898b19008020aaa05f5ebe9f89cfab2ad88438528fd22d8", "archiveBytesIdentical": true, "changedOutputBytesIdentical": true, "rollbackOutputBytesIdentical": true, "receiptsByteIdentical": true, "verdict": "PASS" }, "allowedClaim": "WarpOS gives active paths stable names and can reject stale generated artifacts when the artifact gate is invoked.", "limits": [ "The frozen registry validation is shallow and does not validate every field, alias, duplicate, traversal, or collision.", "The five files are written sequentially, not transactionally.", "The broader path gate aggregates failures; it is not universally fail-fast.", "Warnings block only under strict mode.", "The generated schema is not itself invoked by the artifact gate used in this fixture.", "The path lint uses a fixed catalog and broad exclusions.", "The default usage audit checks only five keys and can count textual mentions as consumers. Its --all mode includes the removed tombstone and fails in the frozen tree.", "A matching generated file does not prove the runtime used the correct current value.", "The frozen tree does not prove provider-neutral CI enforcement.", "The proof-only exact consumer validator belongs to this fixture. It is not a WarpOS feature or a claim about the frozen gate.", "The fixture proves one invented relative-value migration in one frozen commit. It does not prove production safety, security, or universal configuration correctness." ], "privacy": { "syntheticRelativeValuesOnly": true, "liveWorktreeFilesReadIntoFixture": false, "untrackedFilesReadIntoFixture": false, "privateDataPersisted": false, "networkUsed": false, "providerCallsMade": false, "outsideActionsTaken": false, "sourceRepoPathPersisted": false, "scan": { "absoluteWindowsPathFound": false, "emailAddressFound": false, "bearerCredentialFound": false, "secretLikePrefixFound": false }, "verdict": "PASS" }, "independentVerdict": { "reviewer": "deterministic-shared-configuration-proof-reviewer/v1", "requiredCaseGroupsPassed": 8, "failedCaseGroups": 0, "overall": "PASS" } }