{
  "_doc": "One result, read from the codebase’s own files at the commit named here. Every value is that file’s own, copied verbatim; nothing here is written by hand. A value replaced by {withheld: true, sha256_of_value, bytes} is committed by its sha256 instead of published, for the reason it states, and is never edited. Each whole source file is committed by sha256 below, and its bytes are published only where its visibility says so. The codebase is named by the public subject its files are published under.",
  "lane": "packaging-extraction",
  "repository": "packaging-extraction",
  "commit": "b8d9325aea6d8ef103cb3d1dd1c4ba77bd80ee2f",
  "portfolio_id": "packaging-extraction:served-ensemble-certified",
  "id": "served-ensemble-certified",
  "attestation_row": {
    "attested_at": "2026-09-19",
    "attestor": "07-genesis",
    "repository": "genesis",
    "source_doc": "CROWN_JEWELS_RESOLVED.md",
    "source_doc_sha256": "781bf515d77ef14469d543ce87b2a15d0420237f5a9bc9b1a7b4899d0f935cb7",
    "state": "attested",
    "top_n": 31,
    "note_sha256": "1218191deb85b45fe5d2ef07e47c7d4e6c09061b6b8386e86759a6105204cd17",
    "ids_in_row": 31,
    "file": "dataroom/TOP_N_ATTESTATION.jsonl",
    "line": 1
  },
  "claim_source": {
    "receipt": "packaging-extraction/top40.json",
    "sha256": "1dca1ae6d762bd584ae11aa353701b702e3378cf912d8d64ec065e74f589319e",
    "field": "entries[4].claim",
    "file": "top40.json"
  },
  "top40_entry": {
    "id": "served-ensemble-certified",
    "rank": 5,
    "title": "The served production ensemble, certified globally and box-free",
    "claim": "The 3-seed ResMLP ensemble actually on the serving path carries a certified output range valid on all of R^53 — not over a box, not over a sampled region.",
    "scope": "Certifies a RANGE, not accuracy against BEM. 'Served ensemble' means the path selected by CHIPLETOS_PROV7_ENSEMBLE_SEEDS, not every request by default. The mechanism is a structural LayerNorm identity, so branch-and-bound cannot tighten it — a property of the mechanism, not a defect. It is explicitly NOT a CROWN result.",
    "limits": "Quote the sample-independent quantity: certified width 12.444335541908577 normalized, against the gate's own bar of 3.0. Tightness is 1.19–1.25× empirical depending on the draw — per-seed 1.2105 / 1.2121 / 1.1873 over 120,000 samples per seed, versus 1.25× reproducibly on the gate's fresh 36,000-sample re-derivation. Both are true at different sample sizes; relabelling either as 'the wrong one' is the exact defect docs/HEADLINE_FIGURE_DISAMBIGUATION.md exists to prevent. Gates 89/150/151/152/156/157 certify a DIFFERENT model — the Gate-71 substrate-agnostic surrogate, not this ensemble.",
    "artifact_path": "benchmarks/nn_verify/served_resmlp_certified_range_2026_07.json",
    "witness_command": "PYTHONPATH=. python3 scripts/audit/verify_served_resmlp_gate.py",
    "witness_result": "exit=0 · EXIT0_NO_TOUCH · PASS|| SERVED ResMLP+LayerNorm (768x8, ~9.7M params) certified GLOBALLY: width 12.444 normalized (1.25x empirical), Z0 in [0.926, 1906] ohm; prior attempts on this topology were vacuous (1.63e17). Fault injection caught.",
    "witness_class": "ASSERTING",
    "witness_class_basis": "measured",
    "third_party_axis": "-",
    "facts": {
      "ran_with_receipt": true,
      "third_party_graded": false,
      "negative_control_stated": true,
      "ip_class_known": false,
      "reproduce_command": true,
      "regenerates_not_verifies": false
    },
    "facts_count": 3,
    "repro_command": "PYTHONPATH=. python3 scripts/audit/verify_served_resmlp_gate.py",
    "reproduce_command": "PYTHONPATH=. python3 scripts/audit/verify_served_resmlp_gate.py",
    "repro_packet": null,
    "ip_class": "UNKNOWN",
    "evidence_tier": "PROVEN",
    "run_status": "RAN",
    "output_excerpt": "    PASS  honest_scope_disclosed  (range-not-accuracy + box-independence disclosed)\nPASS|| SERVED ResMLP+LayerNorm (768x8, ~9.7M params) certified GLOBALLY: width 12.444 normalized (1.25x empirical), Z0 in [0.926, 1906] ohm; prior attempts on this topology were vacuous (1.63e17). Fault injection caught.",
    "attestation_rank": 13,
    "negative_control": "shrunk-LayerNorm-ball fault must be caught"
  },
  "witness_quality_entry": {
    "id": "served-ensemble-certified",
    "portfolio_id": "genesis:served-ensemble-certified",
    "class": "ASSERTING",
    "measured_class": "ASSERTING",
    "basis": "measured",
    "why": {
      "withheld": true,
      "why": "uses a word the published record keeps for its own process (S3.1-DIALECT)",
      "sha256_of_value": "6c91b65f7ac1eb068366f8e386c054ae0ebab047b878375119a21067adc76646",
      "bytes": 690
    },
    "witness_command": "PYTHONPATH=. python3 scripts/audit/verify_served_resmlp_gate.py",
    "exit_clean": 0,
    "exit_mutated": 1,
    "asserts": "FAIL|| served-ResMLP certified-range gate"
  },
  "packet": null,
  "measured": {
    "measured": true,
    "basis": "exit_mutated = 1 (basis == measured)",
    "exit": 1,
    "defect_rejected": true
  },
  "register": {
    "truth_state": "attested",
    "truth_line": 205,
    "measured_per_register": true,
    "witness_class_per_register": "ASSERTING",
    "ip_class_public": "not_public",
    "ip_class_sha256": "c2ab54a718ff5484fea4f59ecc2a446deef5412ea225434433529a34a9764660",
    "ip_class_source": "docs/audit/CHIPLETOS_CANON_FACTS_2026_09_17.json:34 @ e47033d4758e",
    "receipt": "register/CROWN_JEWELS_TRUTH.md",
    "receipt_sha256": "bde06cf0d3e99644522d18e79b6bd5d84ed4f5c86e315a48fef207e9e49c5022",
    "ip_class_receipt": "register/ip_class.jsonl",
    "ip_class_receipt_sha256": "b1e8f97aa6779e0fefed2f7a7726e1a03563b536b497392401b49bb8ef84d4ca"
  },
  "withheld_fields": [
    {
      "field": "witness_quality.why",
      "codes": [
        "PROCESS_NARRATION"
      ]
    }
  ],
  "sources": {
    "attestation": {
      "receipt": "packaging-extraction/dataroom/TOP_N_ATTESTATION.jsonl",
      "source": "dataroom/TOP_N_ATTESTATION.jsonl",
      "commit": "b8d9325aea6d8ef103cb3d1dd1c4ba77bd80ee2f",
      "sha256": "73bf88d1ecd6c3299599f1929a6fda2e3b20dbe725d908375a1aec5038f199e8",
      "bytes": 3855,
      "visibility": "sealed"
    },
    "top40": {
      "receipt": "packaging-extraction/top40.json",
      "source": "top40.json",
      "commit": "b8d9325aea6d8ef103cb3d1dd1c4ba77bd80ee2f",
      "sha256": "1dca1ae6d762bd584ae11aa353701b702e3378cf912d8d64ec065e74f589319e",
      "bytes": 245175,
      "visibility": "sealed"
    },
    "witness_quality": {
      "receipt": "packaging-extraction/dataroom/witness_quality.json",
      "source": "dataroom/witness_quality.json",
      "commit": "b8d9325aea6d8ef103cb3d1dd1c4ba77bd80ee2f",
      "sha256": "a5b45f767596df7e20404884fd30f0975b1931cf08bb7f3b4e4bfc4b83073c51",
      "bytes": 161552,
      "visibility": "sealed"
    },
    "repro_index": {
      "receipt": "packaging-extraction/repro/INDEX.json",
      "source": "repro/INDEX.json",
      "commit": "b8d9325aea6d8ef103cb3d1dd1c4ba77bd80ee2f",
      "sha256": "3e1cdc5f09bf5c34a582d32529e944a4fe565211faccceb3dc5a7a1724f68635",
      "bytes": 28509,
      "visibility": "sealed"
    }
  }
}