Independent verification
Check the evidence without trusting us
Every completed incident produces a canonical JSON manifest carrying the full authoritative state snapshot, hashed with SHA-256 and signed with a Cloud KMS asymmetric key. The verifier rebuilds the world from that snapshot and re-runs the same invariant functions the production services ran.
Run the verifier
git clone https://github.com/winsznx/night-shift.git && cd night-shift make setup-python make verify-demo # or point it at any single manifest in the clone python -m nightshift.verify --manifest evidence/incidents/INC-0E7C54F8B5.manifest.json # or verify the published copy straight over HTTPS, no clone needed python -m nightshift.verify --manifest https://storage.googleapis.com/nightshift-public-evidence-project-2ac1d1fb-7da1-46b4-90e/incidents/INC-0E7C54F8B5/manifest.json
No model and no Google Cloud credentials. The manifests are committed to the repository, so the deterministic reference proof runs on a clean clone with nothing configured and no network at all. Every sealed copy is also published to gs://nightshift-public-evidence-project-2ac1d1fb-7da1-46b4-90e, which is world-readable, so the last command above verifies the same document over HTTPS without cloning anything. That bucket holds manifests, signatures and public keys and nothing else.
What each result means
| Result | Meaning | Exit |
|---|---|---|
| PASS | Every check performed, every one passed. Signature valid, artifact hashes match, recomputed verdict identical to the stored one. | 0 |
| MISMATCH | Something diverged. The report names which: a hash, the signature, or a specific invariant whose stored value disagrees with recomputation. | 1 |
| PARTIAL | Everything checkable checked out, but something could not be checked, most often an unsigned manifest. Never reported as PASS. | 2 |
Published manifests
Verified live when this page rendered
| Incident | State | Invariants | Signer | Verification | |
|---|---|---|---|---|---|
| INC-ED9B367D69 | RECONCILING | N4 | cloud-kms | PASS | Open proof |
| INC-0E7C54F8B5 | CLOSED | all hold | cloud-kms | PASS | Open proof |
What the verifier cannot tell you
It proves the stored verdict follows from the stored state, and that the state was signed by the holder of the published key. It does not prove the state describes the physical world. This is a synthetic estate and the responder movements are simulated. It also says nothing about the quality of the agents' judgement, only that the deterministic rules held whatever they decided.