verified localexecutableload bearing
pack-check-tamper-roundtrip
A synthetic local receipt passes check, and changing a pinned input produces a named input-hash-drift failure.
b3fdfabef759c42d8b5f2f742fc7dd3091c597980a624eccc469c8b1a1f2534e
generated from this source tree
Certiv’s author-local release receipt.
This receipt is generated during the site build from the repository root manifest. Each load-bearing claim runs twice from separate workspace copies and must match its recorded expectation.
It demonstrates internal release evidence. It is not an independent security audit, third-party reproducible build, certification, or verifier-node verdict.
certiv 1.1 GA self-checks
author check passedpack-check-tamper-roundtrip · A synthetic local receipt passes check, and changing a pinned input produces a named input-hash-drift failure.
author check passednondeterminism-fails-closed · A claim whose command is not deterministic is refused at pack time, never blessed.
author check passednode-fields-rejected · An author-side receipt that carries node-only fields (verification_result, verified_at, node_id) is rejected.
author check passedkernel-agrees-with-tool · For a synthetic receipt, the separate kernel and the full tool both observe the declared check passing when execution is explicitly requested.
author check passednon-finite-tolerance-rejected · A non-finite numeric tolerance is rejected before any claim command runs.
author check passedremote-execution-fails-closed · A verification node with no configured digest-pinned image reports its sandbox unavailable and never falls back to a host process.
author check passedkernel-is-stdlib-only · The separate reference validator parses, compiles, and imports only Python standard-library modules.
receipt 72997d9ac2046e66f5fd66ba9e49261e…certiv_receipt_v2
declared checks
7 receipt claims
verified localexecutableload bearing
nondeterminism-fails-closed
A claim whose command is not deterministic is refused at pack time, never blessed.
0d36bddd1729bd28111e6a8fc6e61c9c992b6adbafb12400c41435ef0f69a886
verified localexecutableload bearing
node-fields-rejected
An author-side receipt that carries node-only fields (verification_result, verified_at, node_id) is rejected.
42f9612088ec2b158a24d219215e22d00d07aae00750fb837ddae60c44945c23
verified localexecutableload bearing
kernel-agrees-with-tool
For a synthetic receipt, the separate kernel and the full tool both observe the declared check passing when execution is explicitly requested.
00db6a56c014c0cf7ad97fc1de9d4245efef7adacccc37e615a992602cf75a41
verified localexecutableload bearing
non-finite-tolerance-rejected
A non-finite numeric tolerance is rejected before any claim command runs.
aa87ff64732fb50a2dcc9ec1eb220f07a21c669275420fd597c4d5ebe3e30f7a
verified localexecutableload bearing
remote-execution-fails-closed
A verification node with no configured digest-pinned image reports its sandbox unavailable and never falls back to a host process.
27a3a8774fac4f6dfeb936e644a0cd6ff1defea2e0788d42deda2a5c1c555a86
verified localexecutableload bearing
kernel-is-stdlib-only
The separate reference validator parses, compiles, and imports only Python standard-library modules.
edd343dfa959b24243b322123dc10a721519c554f636b88303a64118dd04dcd5
What this supports
- the declared source inputs matched recorded hashes;
- the declared checks ran twice and agreed locally;
- their exact expectations passed at receipt creation;
- the published receipt exposes those observations.
What remains unproven
- absence of every defect or vulnerability;
- independent reproduction on another operator’s system;
- supply-chain integrity beyond the published release evidence;
- fitness, safety, compliance, or suitability for a specific use.