Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
25 changes: 25 additions & 0 deletions docs/ENGINEERING_EVIDENCE.md
Original file line number Diff line number Diff line change
Expand Up @@ -131,6 +131,31 @@ The full local qualification harness is retained on the qualification host; its

---

## v3.4.0 post-publication recursive closure

A post-release closure campaign was completed against the immutable `v3.4.0` tag at `2db5bff64507b8d67642122a5ff2fc73dfef9152` plus the captured heads of the six v3.4 clean-room repositories, `ENTITY-GITHUB-APP`, and six published domain repositories. The frozen capture contains 984 exact Git blobs, 45 GitHub API evidence records and 11 release-evidence artifacts: 1,040 constituents / 5,136,474 bytes.

- frozen constituent root: `4feb51a4bd0d958b7beb3eddbe9fd78678b7c31c2a4fe3d6cf7d9f4d87aa6e06`;
- ENTITY-ingested constituent root: `4feb51a4bd0d958b7beb3eddbe9fd78678b7c31c2a4fe3d6cf7d9f4d87aa6e06`;
- 1,041 ENTITY objects, Evidence Objects, rights records, Rights Passports, Global Passports and zero-value records;
- 1,040 zero-weight closure-membership provenance edges;
- exact state tree before/after destructive recovery: `6e054beaa96c089b3958973c834b3ddb2dda2466961c7ac67a748c7813c22925`;
- canonical SQLite semantic root before/after: `9c8ed4e767adf37abad6f0a2492e8a8007126fc1264218d0d184a4f6e7fa4231`;
- content-vault root before/after: `6ffc454b88c06f9da72db5854c3018a8fc5e0f3a334d829eafafeb0f9dbd4280`;
- sovereign export tree: `ce155ac3755d37292b69dd97aa24a4e9635e23950de016529640555f23b79149`;
- all 1,041 registered objects reverified after AES-256-GCM backup, destructive state deletion and recovery.

The closure target is finite and immutable: the `v3.4.0` release plus the captured external repository heads. The later commit that publishes the closure evidence is not defined as a constituent of that already-frozen target, because requiring a record to ingest the event that publishes itself would create non-terminating self-reference. This remains BTG-controlled evidence and does not establish independent third-party validation, objective truth, legal/regulatory approval, market adoption or accounting fair value.

Authoritative records:

- `docs/qualification/ENTITY_V3_4_0_POST_RELEASE_RECURSIVE_CLOSURE_2026-09-24.json`
- `docs/qualification/ENTITY_V3_4_0_POST_RELEASE_RECURSIVE_CLOSURE_2026-09-24.md`
- `docs/qualification/ENTITY_V3_4_0_POST_RELEASE_RECURSIVE_CLOSURE_CATALOG_2026-09-24.json`
- `tools/verify_v3_4_post_release_closure.py`

---

## What the tests are intended to prove

Tests can support claims such as:
Expand Down
Original file line number Diff line number Diff line change
@@ -0,0 +1,132 @@
{
"campaign": "ENTITY v3.4.0 complete post-publication recursive closure",
"claim_boundary": {
"accounting_fair_value_claimed": false,
"btg_controlled_evidence_is_not_independent_third_party_validation": true,
"custody_is_authority": false,
"economic_value_invented": false,
"independent_security_review_claimed": false,
"legal_or_regulatory_compliance_claimed": false,
"market_adoption_or_liquidity_claimed": false,
"objective_external_truth_claimed": false
},
"closure_definition": {
"immutable_target_is_v3_4_0_release_and_captured_external_repository_heads": true,
"later_publication_of_this_closure_report_is_not_part_of_the_frozen_target": true,
"reason": "Requiring a closure record to ingest the event that publishes that same record would create non-terminating self-reference."
},
"controller_entity_id": "ent2-pylbl7za6lhtytbui4drgko6p5qwzzka4uvaoxuwnqs6ca3lxyfq",
"coverage": {
"category_counts": {
"git_blob": 984,
"github_evidence": 45,
"release_evidence": 11
},
"closure_anchor_objects": 1,
"constituent_bytes": 5136474,
"constituents": 1040,
"git_tracked_files": 984,
"github_api_evidence_records": 45,
"release_evidence_artifacts": 11,
"total_ingested_objects": 1041
},
"date": "2026-09-24",
"destructive_recovery": {
"all_objects_evidence_rights_passports_global_passports_and_vault_bytes_reverified": true,
"encrypted_backup": {
"bytes": 3567691,
"cipher": "AES-256-GCM",
"encrypted": true,
"sha256": "f2b2a4231fb688762f6e055eabea8ca4f0c801b8685060ddbb5c76860ec23e60"
},
"identical_content_vault": true,
"identical_sqlite_semantics": true,
"identical_state_tree": true,
"performed": true
},
"entity_native_records": {
"evidence_objects": 1041,
"global_passports": 1041,
"objects": 1041,
"provenance_edges": 1040,
"rights": 1041,
"rights_passports": 1041,
"values": 1041
},
"release_evidence": {
"cleanroom_v3_4_result_sha256": "ac7504cce70576008cff069607619660a4b9bf0cad43b3f3de81078f1e80d9ba",
"final_codeql_run": 36074203138,
"final_public_conformance_run": 36074202905,
"publisher_run": 36074265814
},
"roots": {
"capture_manifest_sha256": "5be369fc320c43b66afbc103fccf04246e78441c3a93e5cdad85028af742cfa2",
"content_vault_after_recovery": {
"bytes": 4361212,
"files": 656,
"sha256": "6ffc454b88c06f9da72db5854c3018a8fc5e0f3a334d829eafafeb0f9dbd4280"
},
"content_vault_before_destruction": {
"bytes": 4361212,
"files": 656,
"sha256": "6ffc454b88c06f9da72db5854c3018a8fc5e0f3a334d829eafafeb0f9dbd4280"
},
"entity_ingested_constituent_root_sha256": "4feb51a4bd0d958b7beb3eddbe9fd78678b7c31c2a4fe3d6cf7d9f4d87aa6e06",
"frozen_constituent_root_sha256": "4feb51a4bd0d958b7beb3eddbe9fd78678b7c31c2a4fe3d6cf7d9f4d87aa6e06",
"git_blob_inventory_sha256": "2c4c535f1d0378b37f493a0a14e5f51f5cbb13741233c184037760e2dcc3bf44",
"sovereign_export_manifest_sha256": "72b3012b5db0eda931fb6bbf4476f342dcdaedceb91290c57fdd5b4018275e96",
"sovereign_export_tree": {
"bytes": 11716165,
"files": 7,
"sha256": "ce155ac3755d37292b69dd97aa24a4e9635e23950de016529640555f23b79149"
},
"sqlite_semantic_after_recovery": {
"databases": 5,
"rows": 7293,
"sha256": "9c8ed4e767adf37abad6f0a2492e8a8007126fc1264218d0d184a4f6e7fa4231",
"tables": 16
},
"sqlite_semantic_before_destruction": {
"databases": 5,
"rows": 7293,
"sha256": "9c8ed4e767adf37abad6f0a2492e8a8007126fc1264218d0d184a4f6e7fa4231",
"tables": 16
},
"state_tree_after_recovery": {
"bytes": 16724654,
"files": 665,
"sha256": "6e054beaa96c089b3958973c834b3ddb2dda2466961c7ac67a748c7813c22925"
},
"state_tree_before_destruction": {
"bytes": 16724654,
"files": 665,
"sha256": "6e054beaa96c089b3958973c834b3ddb2dda2466961c7ac67a748c7813c22925"
}
},
"schema": "entity-v3-4-post-release-recursive-closure-v1",
"status": "PASS",
"target": {
"captured_repository_heads": {
"ENTITY": "2db5bff64507b8d67642122a5ff2fc73dfef9152",
"ENTITY-AI": "b7ead617f6710862feeac11e3b998131e8196b71",
"ENTITY-CSHARP-CLEANROOM": "2cf64646cb70c8d89698f3f474a0a2a532c83b2d",
"ENTITY-DEFENCE": "8018ed7ead3654b39b3ee4bea85a1b8b0844ea64",
"ENTITY-FINANCE": "2f0839e29ea8d1b8ebd422ece363b0c5cdfceb2e",
"ENTITY-GITHUB-APP": "7ef6b33b5d586cabd1f912491152fcff10e0ad47",
"ENTITY-GO-CLEANROOM": "d878229a5256bf7c06a1da84dfb9ba0297f0c946",
"ENTITY-HEALTHCARE": "249da1e0583591cf5e8cfc69d57af5afc331d154",
"ENTITY-JAVA-CLEANROOM": "da2520429f8dab7a2752b2b6b6fc653c6ae173b6",
"ENTITY-MANUFACTURING": "808a1ab50d02d00ab22348dd29f491db96c03fac",
"ENTITY-ROBOTICS": "861e8b688ef80945d39bdedf3044f189ffcbfb19",
"ENTITY-RUST-CLEANROOM": "5420f724495722019b1f8624f02fe8a02df7bfbf",
"ENTITY-SWIFT-CLEANROOM": "2f40118999beceb6c34f2ea1c583dd12cfe81368",
"ENTITY-TYPESCRIPT-CLEANROOM": "48e7f606740819379eee2e0fa663d41044b1d899"
},
"commit": "2db5bff64507b8d67642122a5ff2fc73dfef9152",
"pull_request": 41,
"release_id": 396162815,
"repository": "blackmore-technology-group/ENTITY",
"tag": "v3.4.0"
},
"version": "3.4.0"
}
Original file line number Diff line number Diff line change
@@ -0,0 +1,59 @@
# ENTITY v3.4.0 Post-Release Recursive Closure — 2026-09-24

**Status: PASS**

This campaign closes the post-publication recursive provenance gap for the immutable ENTITY `v3.4.0` release at `2db5bff64507b8d67642122a5ff2fc73dfef9152`.

## Frozen target

- ENTITY `v3.4.0` exact Git tree plus its final release/PR/CI/publisher evidence.
- Six BTG-controlled v3.4 clean-room repositories at captured `main` commits.
- `ENTITY-GITHUB-APP` at its captured qualified `main` commit plus installation/webhook evidence.
- Six published v3.4 domain repositories and their sealed archive evidence.
- Exact Git blob bytes were used; Windows checkout line-ending transformations were not trusted.

## Coverage

- Git-tracked source/repository files: **984**
- GitHub API evidence records: **45**
- Additional release evidence artifacts: **11**
- Frozen constituents: **1040**
- Frozen constituent bytes: **5,136,474**
- ENTITY-native ingested objects including closure anchor: **1041**

## Canonical roots

- Git blob inventory: `2c4c535f1d0378b37f493a0a14e5f51f5cbb13741233c184037760e2dcc3bf44`
- Frozen constituent root: `4feb51a4bd0d958b7beb3eddbe9fd78678b7c31c2a4fe3d6cf7d9f4d87aa6e06`
- ENTITY-ingested constituent root: `4feb51a4bd0d958b7beb3eddbe9fd78678b7c31c2a4fe3d6cf7d9f4d87aa6e06`

## ENTITY-native governed state

- ENTITY objects: **1041**
- signed Evidence Objects: **1041**
- rights records: **1041**
- Rights Passports: **1041**
- Global Passports: **1041**
- explicit zero-value records: **1041**
- zero-weight provenance edges from closure anchor: **1040**

Each constituent is recoverable from the content-addressed ENTITY vault and is bound to an ENTITY object, signed evidence, rights record, Rights Passport, Global Passport and zero-value economic baseline. The zero-weight provenance edges describe membership in the closure corpus; they do not invent contribution percentages or ownership.

## Destructive recovery proof

The generated closure state was encrypted using AES-256-GCM, deleted, restored, and re-opened. The exact state tree, canonical SQLite semantic root and content-vault root were identical before destruction and after recovery.

- state tree: `6e054beaa96c089b3958973c834b3ddb2dda2466961c7ac67a748c7813c22925`
- SQLite semantic root: `9c8ed4e767adf37abad6f0a2492e8a8007126fc1264218d0d184a4f6e7fa4231`
- content vault root: `6ffc454b88c06f9da72db5854c3018a8fc5e0f3a334d829eafafeb0f9dbd4280`
- sovereign export tree: `ce155ac3755d37292b69dd97aa24a4e9635e23950de016529640555f23b79149`

All **1041** registered objects were rechecked after recovery; their vault bytes, Evidence Objects, Rights Passports and Global Passports all verified.

## Closure boundary

The frozen closure target is the immutable `v3.4.0` release plus the external BTG-controlled repositories/evidence captured for this campaign. This report and its later publication commit are intentionally outside that frozen target: requiring a record to ingest the event that publishes that same record would create non-terminating self-reference rather than a meaningful finite closure.

## Claim boundary

This is a BTG-controlled recursive qualification. It proves content integrity, attributable provenance, governed rights/passport registration, release-evidence capture and destructive recovery for the named frozen corpus. It does **not** establish objective external truth, unrelated third-party interoperability, independent security review, legal or regulatory compliance, market adoption/liquidity, legal ownership, or accounting fair value. Provider custody remains non-authoritative, and no monetary value or historical contribution percentage was invented.
Loading
Loading