EV — TFW_20260830-114238_ASSISTED15: Neutral Assisted 1.5 Product and Maintenance Bridge¶
Date: 2026-08-30 Author: saubakirov via Codex Executor Task: TFW_20260830-114238_ASSISTED15 TS: TS — TFW_20260830-114238_ASSISTED15
Environment¶
| Field | Value |
|---|---|
| OS | Windows 11 10.0.26200 |
| Language / Runtime | Python 3.13.5; PowerShell 5.1.26100.9278 |
| Renderer | Microsoft Edge headless; Poppler pdfinfo/pdftoppm |
| Deploy target | Local copied starter and isolated temporary fixtures |
| CI / Pipeline | Local; no network, push, tag or publication |
| Git | 2.42.0.windows.1; baseline f3eb986 |
| Public release hashes | manifest f09603aaa60af68fe8e21cc3d14215f6a7bf64486e09dd2e966d779a793c66ea; policy 2caf8bba83ac4018f4cde1d38964cb91645bb1637d6a9f866fed97a083d64b07 |
Evidence¶
| # | AC | What was verified | Environment | Result | Artifact |
|---|---|---|---|---|---|
| E1 | AC-1 | Product delta from f3eb986 is exactly 25 new, 7 modified and 3 deleted paths / 4,035 changed lines. The post-commit run checked 20 Assisted commits through terminal evidence 640fad5 with zero forbidden-path hits and found it in no remote-tracking ref or tag; this final attestation follow-up is exact-path staged to five task-local files. Concurrent forbidden paths are listed as external dirty/commits rather than misattributed. A clean copied starter is uninitialized, ships no runtime state, and reports exact 1.5\n. |
Git task-commit audit plus isolated Windows copy | VERIFIED | boundary-summary.json; boundary-and-source-attestation.md; assisted15-verification.log |
| E2 | AC-2 | verify-release regenerates the allowed payload and requires exact path equality. Hostile omitted payload, omitted policy, unexpected payload, self-entry and non-regular payload fixtures all reject. The manifest is carried as a separate release record; repeated validation returns stable public hashes. |
Shipped V1–V2 plus two complete runs | VERIFIED | assisted15-verification.log; assisted15-fixture-results.json; maintenance/forward-journal.ndjson |
| E3 | AC-3 | Source, target, operation and staging roots are pinned through their component chains; symlink/junction/reparse ancestry rejects before product writes. A stable private target-keyed lock is acquired before operation-directory creation, baseline or staging. A retained REAL two-process same-target test gives both operations the same lock key, blocks the loser before its operation directory with zero target/product writes, and lets a different target proceed independently. Drift rejects at zero writes; injected partial/recovery history stays linked and immutable. | Windows isolated Git-baseline copies and real processes | VERIFIED | maintenance/forward-journal.ndjson; maintenance/partial-journal.ndjson; maintenance/partial-terminal.json; maintenance/recovery-terminal.json; assisted15-fixture-results.json |
| E4 | AC-4 | A deterministic recorded table covers complete, partial, lost-handle, no-interrupt, overlap, manual fallback and full re-review; every expected/observed record passes with zero duplicates. Review revision 2 accepted the actual one-Phase-Coordinator → same Executor → one independent Reviewer lineage, Coordinator-only reporting and the seven-scenario table. Both correction commits b37f7a3 and afef18a are from that same Executor. |
Recorded table plus actual review traces | VERIFIED | assisted15-fixture-results.json; ../review/verify.md; ../review/rev2/verify.md; Git commits 3f96b4d, 60ad942, afef18a |
| E5 | AC-5 | Populated P2 preserved synthetic work/, knowledge, people/profile, PROJECT.md, both themes, unrelated .codex, unknown target-only and separate Full namespace bytes exactly. The target carries the verified manifest, passes verify-release, and a clean installed target is accepted as the next source; zero unexplained changes remain. |
Actual Windows isolated forward targets | VERIFIED | maintenance/protected-before.json; maintenance/protected-after.json; maintenance/forward-terminal.json; assisted15-fixture-results.json |
| E6 | AC-6 | Reverse accepts only a canonical create-once verified terminal with matching neighboring journal/provenance, exact approved candidate root and confinement outside public/source/target/private operation roots. Fake-report and candidate-under-public fixtures reject at zero writes. Two valid private operations differing in IDs/counts produce byte-identical public candidates/IDs without public-core mutation. | Closed synthetic operations plus read-only P6 inventory | VERIFIED | maintenance/public-candidate-a.json; maintenance/public-candidate-b.json; assisted15-fixture-results.json; source-immutability.json |
| E7 | AC-7 | Actual copied starter began with no participant; the documented clean-copy create-profile --organization-role ... command executed and created ivanov. Actual proven persistent ask binding succeeded. The complete identity matrix covers cardinalities, surnames, collisions, invalid state, shared/project/Full rejection, corrupt registry, live lock and zero-write/session fallback. |
Actual Windows adapter plus isolated matrix | VERIFIED | identity-windows.json; assisted15-verification.log; boundary-summary.json |
| E8 | AC-8 | Actual Windows operation proves the private owner/ACL and pins the full created namespace chain. Operation-time instrumentation records full-chain/ACL reprobe before the first registry read or lock probe; substituting the namespace immediately before that first read causes zero substituted reads and zero registry writes. Actual project-root, foreign-lock, junction, permissive-ACL and other namespace-substitution cases reject without registry mutation. All registry reads occur under validated locality and the live lock. | Windows 11 ACL/junction/OS-lock/order fixtures | VERIFIED | identity-windows.json; assisted15-fixture-results.json |
| E9 | AC-9 | TI1 attacks reject escaping/missing/non-regular/external resources, extra theme syntax and active/text/external SVG. Four blocked-network PDFs were generated with both header-suppression flags, parsed as 3+3+5+5 pages, and contain no absolute local URL. Sixteen true-PNG page replacements plus four single-shot true-PNG full captures were individually inspected; extensions match bytes and no stitch overlap exists. | Edge headless, Poppler, visual inspection | VERIFIED | templates/render-summary.json; templates/*.pdf; templates/*-page-*.png; templates/browser-*-full.png |
| E10 | AC-10 | Cross-file shipped V10 and direct scan agree on Assisted 1.5, Russian authority, manual baseline, lifecycle, identity, templates, maintenance interface and version paths. Product/generated output contains no field/company/person/path/brand/logo/private-history marker; SVG is neutral shape-only. | Full public payload plus rendered outputs | VERIFIED | assisted15-verification.log; boundary-summary.json; templates/render-summary.json |
| E11 | AC-11 | verify-release, complete V1–V12 including real contention, 25-check identity including first-access order, and template checks ran twice and passed. The task evidence runner also ran twice after revision 2 and produced byte-identical summary SHA-256 4b24de247def51f7313d2505cce9189019a83b772a5ebcf2aa57f8f58375cc0c. Project/task schema checks, clean-copy documented command, render validation and product diff check pass. |
Clean local repeated validation | VERIFIED | assisted15-verification.log; assisted15-fixture-results.json; boundary-summary.json |
| E12 | AC-12 | P2 reaches maintainable 1.5 with exact manifest continuity, stable same-target exclusion and next-source reuse; closed P6 reverse is candidate-only and rejects hostile provenance/root cases. The complete real-field 29-row inventory is equal across readers and pre/post under both documented aggregate orders. No push, tag or publication occurred. Review revision 2 accepted field immutability/direction mechanics; same-Reviewer acceptance of the D9/D10-corrected terminal package is the remaining lifecycle gate. | Isolated directions, read-only field inventory, Git audit | DEFERRED | boundary-and-source-attestation.md; source-immutability.json; maintenance/; assisted15-fixture-results.json; ../review/rev2/verify.md |
Verdict¶
Evidence verdict: 11/12 VERIFIED, 1 DEFERRED, 0 BLOCKED, 0 N/A
The one deferred row contains the lifecycle-order dependency: the same independent Reviewer must perform the required full re-review of this corrected terminal package. E4 is already verified by the live lineage and accepted deterministic table. No implementation, fixture, source-integrity or publication gate is blocked.
Attachments¶
| File | Description |
|---|---|
assisted15-verification.log |
Reproducible commands, environments, exit statuses and deterministic V1–V12 outputs |
assisted15-fixture-results.json |
Privacy-safe actual P2/reverse/identity/P6 outcome summary |
identity-windows.json |
Actual Windows locality, binding, live-lock and junction evidence without user/device paths |
source-immutability.json |
Dual aggregate-order explanation, cross-reader row equality and pre/post immutability |
boundary-summary.json |
Product census, LOC, forbidden diff, clean-copy and environment summary |
maintenance/* |
Forward/partial/recovery terminals and journals, protected manifests and two public candidates |
templates/render-summary.json |
Header-free blocked-network render hashes, byte signatures, page counts, full-capture dimensions and visual verdict |
templates/a4-{stock,custom}.pdf |
Final stock/custom three-page A4 outputs |
templates/presentation-{stock,custom}.pdf |
Final stock/custom five-page presentation outputs |
templates/*-page-*.png |
Sixteen final per-page visual evidence images |
templates/browser-*-full.png |
Four single-shot true-PNG full-page browser captures with no stitch overlap |
EV — TFW_20260830-114238_ASSISTED15: Neutral Assisted 1.5 Product and Maintenance Bridge | 2026-08-30