Public proof
INC-0E7C54F8B5
This manifest carries the full authoritative state snapshot. The verification below was recomputed from that snapshot just now, using the same Safety Kernel the production services used. No model, no network.
Verification checks
Every check that could be performed, and every one that could not
| Check | Detail | |
|---|---|---|
| PASS | manifest version | version=1 |
| PASS | state snapshot present | 14 collections |
| PASS | artifact hash: state_snapshot | 91c3e98e0cc9b0cf… vs stored 91c3e98e0cc9b0cf… |
| PASS | artifact hash: invariant_results | 6e491611542dbda6… vs stored 6e491611542dbda6… |
| PASS | artifact hash: reconciliation | f0d112b1685dd6c7… vs stored f0d112b1685dd6c7… |
| PASS | signing key is pinned | pinned to the published Cloud KMS evidence-signer v1 public key |
| PASS | signature | verified against cloud-kms public key |
| PASS | state snapshot parses | rebuilt KernelState |
| PASS | invariant verdict matches | 13 invariants recomputed |
| PASS | reconciliation hash | f0d112b1685dd6c7… vs stored f0d112b1685dd6c7… |
| PASS | declared incident state | manifest says CLOSED, snapshot says CLOSED |
| PASS | closed incident is fully reconciled | 0 unresolved, 0 in flight |
| PASS | synthetic data declared | manifest declares synthetic/simulated provenance |
Reconciliation
Every impacted container, once
- Total impacted
- 42
- Committed
- 42
- Quarantined
- 0
- In flight
- 0
- Unresolved
- 0
- Complete
- yes
Signature
Detached, over canonical JSON
Invariants
Left: what the manifest claims. Right: what recomputation produced.
| Invariant | Stored | Recomputed | |
|---|---|---|---|
| N1 | true | true | match |
| N2 | true | true | match |
| N3 | true | true | match |
| N4 | true | true | match |
| N5 | true | true | match |
| N6 | true | true | match |
| N7 | true | true | match |
| N8 | true | true | match |
| N9 | true | true | match |
| N10 | true | true | match |
| N11 | true | true | match |
| N12 | true | true | match |
| N13 | true | true | match |
Verify it yourself
python -m nightshift.verify --manifest evidence/incidents/INC-0E7C54F8B5.manifest.json
Exit code 0 for PASS, 1 for MISMATCH, 2 for PARTIAL. The verifier rebuilds the world from the snapshot and re-runs the same invariant functions the services ran. If someone edits the snapshot to make a partial rescue look complete, the artifact hash fails and the recomputed verdict diverges. Both are reported separately so you can see which happened.