Public proof
INC-ED9B367D69
This manifest carries the full authoritative state snapshot. The verification below was recomputed from that snapshot just now, using the same Safety Kernel the production services used. No model, no network.
Verification checks
Every check that could be performed, and every one that could not
| Check | Detail | |
|---|---|---|
| PASS | manifest version | version=1 |
| PASS | state snapshot present | 14 collections |
| PASS | artifact hash: state_snapshot | 8a5b15f424754fcc… vs stored 8a5b15f424754fcc… |
| PASS | artifact hash: invariant_results | d5b8e52323ad3a83… vs stored d5b8e52323ad3a83… |
| PASS | artifact hash: reconciliation | 13b10d107876472b… vs stored 13b10d107876472b… |
| PASS | signing key is pinned | pinned to the published Cloud KMS evidence-signer v1 public key |
| PASS | signature | verified against cloud-kms public key |
| PASS | state snapshot parses | rebuilt KernelState |
| PASS | invariant verdict matches | 13 invariants recomputed |
| PASS | reconciliation hash | 13b10d107876472b… vs stored 13b10d107876472b… |
| PASS | declared incident state | manifest says RECONCILING, snapshot says RECONCILING |
| PASS | synthetic data declared | manifest declares synthetic/simulated provenance |
Reconciliation
Every impacted container, once
- Total impacted
- 42
- Committed
- 42
- Quarantined
- 0
- In flight
- 0
- Unresolved
- 0
- Complete
- yes
Signature
Detached, over canonical JSON
Invariants
Left: what the manifest claims. Right: what recomputation produced.
| Invariant | Stored | Recomputed | |
|---|---|---|---|
| N1 | true | true | match |
| N2 | true | true | match |
| N3 | true | true | match |
| N4 | false | false | match |
| N5 | true | true | match |
| N6 | true | true | match |
| N7 | true | true | match |
| N8 | true | true | match |
| N9 | true | true | match |
| N10 | true | true | match |
| N11 | true | true | match |
| N12 | true | true | match |
| N13 | true | true | match |
Verify it yourself
python -m nightshift.verify --manifest evidence/incidents/INC-ED9B367D69.manifest.json
Exit code 0 for PASS, 1 for MISMATCH, 2 for PARTIAL. The verifier rebuilds the world from the snapshot and re-runs the same invariant functions the services ran. If someone edits the snapshot to make a partial rescue look complete, the artifact hash fails and the recomputed verdict diverges. Both are reported separately so you can see which happened.