[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_218":219,"_220":221},"routes/_app.x.$handle.$name",{"_98":97,"_32":45,"_107":88,"_27":108,"_13":14,"_109":-5,"_11":110,"_111":112,"_113":114,"_115":116,"_117":118,"_20":-5,"_119":-5,"_120":-5,"_121":25,"_122":123,"_124":25,"_125":-5,"_126":-5,"_127":128},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":69,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":81,"_82":83,"_84":85,"_86":25},"version",10,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","asu_challenge_v1.ts","latestPath","fileId","74680384-ac92-11f1-8003-1607ee4eb77e","name","fileType","script","content","// CANDIDATE_ONLY_NO_AUTHORITY\n// Atomic single-use adjudication challenge V1.\n// Shadow proof substrate only. It deliberately does not touch canonical Brain tables.\nimport { API_URL } from \"https://esm.town/v/std/API_URL\";\nimport { createClient } from \"npm:@libsql/client@0.17.2/web\";\n\nexport const PROJECT = \"mosadek/project-brain-live-v1-durable\";\nexport const FINAL_TASK = \"BRAIN-FIRST-SUPERHERO-SAME-IDENTITY-FINAL-ADJUDICATION-P0-V1-20260908\";\nexport const MAX_TTL_MS = 600_000;\nexport const MAX_OBSERVATION_AGE_MS = 3_600_000;\nconst C = \"fs_asu_challenge_v1\";\nconst E = \"fs_asu_event_v1\";\nconst P = \"fs_asu_population_shadow_v1\";\n\nconst token = Deno.env.get(\"VAL_TOWN_API_KEY\") || \"\";\nconst nativeFetch = globalThis.fetch.bind(globalThis);\nfunction compatFetch(input:any, init?:any):Promise {\n if (typeof input === \"string\" || input instanceof URL) return nativeFetch(input, init);\n const method = String(input?.method || init?.method || \"GET\");\n const headers = new Headers();\n const src = input?.headers || init?.headers;\n if (src?.forEach) src.forEach((v:string,k:string)=>headers.set(k,v));\n else if (src) for (const [k,v] of Object.entries(src)) headers.set(k,String(v));\n return (async()=>{\n let body:any = undefined;\n if (method !== \"GET\" && method !== \"HEAD\") {\n if (typeof input?.arrayBuffer === \"function\") body = new Uint8Array(await input.arrayBuffer());\n else body = input?.body ?? init?.body;\n }\n return await nativeFetch(String(input.url), {method,headers,body,redirect:\"manual\"});\n })();\n}\nfunction db(){\n return createClient({url:`${API_URL}/v3/sqlite/scoped/`, authToken:token, fetch:compatFetch as any});\n}\nexport function canon(x:any):string {\n if (x === null || typeof x !== \"object\") return JSON.stringify(x);\n if (Array.isArray(x)) return \"[\" + x.map(canon).join(\",\") + \"]\";\n return \"{\" + Object.keys(x).sort().map(k=>JSON.stringify(k)+\":\"+canon(x[k])).join(\",\") + \"}\";\n}\nexport async function sha256Text(s:string):Promise {\n const d = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(s));\n return [...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\");\n}\nfunction isHex64(s:any){ return /^[0-9a-f]{64}$/.test(String(s??\"\")); }\nfunction ms(s:any){ return Date.parse(String(s??\"\")); }\nfunction exactKeys(x:any, keys:string[]){\n if(!x || typeof x!==\"object\" || Array.isArray(x)) return false;\n const a=Object.keys(x).sort(), b=[...keys].sort();\n return a.length===b.length && a.every((k,i)=>k===b[i]);\n}\nfunction fail(reason:string, extra:any={}){ return {ok:false,reason,...extra}; }\n\nexport async function initShadow(){\n const d=db();\n await d.batch([\n `CREATE TABLE IF NOT EXISTS ${C}(\n challenge_id TEXT PRIMARY KEY,\n execution_request_id TEXT NOT NULL UNIQUE,\n immutable_json TEXT NOT NULL,\n challenge_sha256 TEXT NOT NULL UNIQUE,\n state TEXT NOT NULL CHECK(state IN ('FRESH','CLAIMED','ACCEPTED','BURNED')),\n claim_event_uuid TEXT UNIQUE,\n claim_receipt_sha256 TEXT UNIQUE,\n claim_request_sha256 TEXT,\n claimed_at TEXT,\n accepted_trace_id TEXT,\n execution_admission_sha256 TEXT UNIQUE,\n execution_receipt_json TEXT,\n terminal_at TEXT,\n burned_reason TEXT,\n population_consumed INTEGER NOT NULL DEFAULT 0 CHECK(population_consumed IN (0,1))\n )`,\n `CREATE TABLE IF NOT EXISTS ${E}(\n event_uuid TEXT PRIMARY KEY,\n challenge_id TEXT NOT NULL,\n type TEXT NOT NULL,\n payload_json TEXT NOT NULL,\n event_sha256 TEXT NOT NULL UNIQUE,\n created_at TEXT NOT NULL\n )`,\n `CREATE TABLE IF NOT EXISTS ${P}(\n challenge_id TEXT PRIMARY KEY,\n execution_admission_sha256 TEXT NOT NULL UNIQUE,\n shadow_increment INTEGER NOT NULL CHECK(shadow_increment=1),\n created_at TEXT NOT NULL\n )`\n ],\"write\");\n return {ok:true};\n}\nexport async function resetShadow(){\n await initShadow();\n const d=db();\n await d.batch([`DELETE FROM ${P}`,`DELETE FROM ${E}`,`DELETE FROM ${C}`],\"write\");\n return {ok:true};\n}\nexport async function getChallenge(challengeId:string){\n const d=db();\n const r:any=await d.execute({sql:`SELECT * FROM ${C} WHERE challenge_id=?`,args:[challengeId]});\n return r.rows?.[0] ?? null;\n}\nfunction immutableChallengeInput(i:any){\n return {\n schema:\"FIRST_SUPERHERO_ATOMIC_SINGLE_USE_CHALLENGE_V1\",\n project:PROJECT,\n task_id:FINAL_TASK,\n candidate_id:String(i.candidate_id),\n qualifying_run_id:String(i.qualifying_run_id),\n execution_request_id:String(i.execution_request_id),\n finalizer_file_id:String(i.finalizer_file_id),\n finalizer_branch_id:String(i.finalizer_branch_id),\n finalizer_version:Number(i.finalizer_version),\n finalizer_val_type:String(i.finalizer_val_type),\n finalizer_source_sha256:String(i.finalizer_source_sha256),\n input_bundle_sha256:String(i.input_bundle_sha256),\n source_freeze_verified:i.source_freeze_verified===true,\n source_frozen_at:String(i.source_frozen_at),\n source_freeze_receipt_sha256:String(i.source_freeze_receipt_sha256),\n issued_at:String(i.issued_at),\n expires_at:String(i.expires_at),\n final_target_context_sha256:String(i.final_target_context_sha256)\n };\n}\nfunction validateImmutable(x:any, serverNow:string){\n if(!x.candidate_id||!x.qualifying_run_id||x.execution_request_id.length<16)return \"BAD_IDENTITY\";\n if(!x.finalizer_file_id||!x.finalizer_branch_id||!Number.isInteger(x.finalizer_version)||x.finalizer_version<1)return \"BAD_SOURCE_IDENTITY\";\n if(![\"script\",\"interval\",\"http\"].includes(x.finalizer_val_type))return \"BAD_VAL_TYPE\";\n if(!isHex64(x.finalizer_source_sha256)||!isHex64(x.input_bundle_sha256)||!isHex64(x.source_freeze_receipt_sha256)||!isHex64(x.final_target_context_sha256))return \"BAD_HASH\";\n if(x.source_freeze_verified!==true)return \"SOURCE_NOT_FROZEN\";\n const n=ms(serverNow), issued=ms(x.issued_at), expires=ms(x.expires_at), frozen=ms(x.source_frozen_at);\n if(![n,issued,expires,frozen].every(Number.isFinite))return \"BAD_TIME\";\n if(frozen>issued||issued>n||expires<=n||expires<=issued||expires-issued>MAX_TTL_MS)return \"BAD_TTL\";\n return null;\n}\nexport async function issueChallenge(input:any, serverNow:string){\n await initShadow();\n const immutable=immutableChallengeInput(input);\n const bad=validateImmutable(immutable,serverNow); if(bad)return fail(bad);\n const challenge_id=crypto.randomUUID();\n const challenge_sha256=await sha256Text(canon({challenge_id,...immutable}));\n const d=db();\n try{\n await d.execute({sql:`INSERT INTO ${C}(challenge_id,execution_request_id,immutable_json,challenge_sha256,state)\n VALUES(?,?,?,?, 'FRESH')`,args:[challenge_id,immutable.execution_request_id,canon(immutable),challenge_sha256]});\n }catch(e){return fail(\"ISSUE_CONFLICT\",{detail:String((e as any)?.message??e)})}\n return {ok:true,challenge_id,challenge_sha256,immutable};\n}\nfunction claimBinding(c:any){\n return {\n challenge_id:String(c.challenge_id),\n project:String(c.project),\n task_id:String(c.task_id),\n candidate_id:String(c.candidate_id),\n qualifying_run_id:String(c.qualifying_run_id),\n execution_request_id:String(c.execution_request_id),\n finalizer_source_sha256:String(c.finalizer_source_sha256),\n input_bundle_sha256:String(c.input_bundle_sha256),\n challenge_sha256:String(c.challenge_sha256)\n };\n}\nfunction immutableMatches(row:any, req:any){\n const x=JSON.parse(String(row.immutable_json));\n return req.project===x.project && req.task_id===x.task_id && req.candidate_id===x.candidate_id &&\n req.qualifying_run_id===x.qualifying_run_id && req.execution_request_id===x.execution_request_id &&\n req.finalizer_source_sha256===x.finalizer_source_sha256 && req.input_bundle_sha256===x.input_bundle_sha256 &&\n req.challenge_sha256===String(row.challenge_sha256);\n}\nasync function readAfterClientError(challengeId:string){\n try{return await getChallenge(challengeId)}catch{return null}\n}\nexport async function claimChallenge(req:any, serverNow:string, fault:\"NONE\"|\"BEFORE_COMMIT\"|\"AFTER_COMMIT_RESPONSE_LOST\"=\"NONE\"){\n await initShadow();\n const required=[\"challenge_id\",\"project\",\"task_id\",\"candidate_id\",\"qualifying_run_id\",\"execution_request_id\",\"finalizer_source_sha256\",\"input_bundle_sha256\",\"challenge_sha256\"];\n if(!exactKeys(req,required))return fail(\"CLAIM_SCHEMA_NOT_CLOSED\");\n const d:any=db();\n let tx:any=null, committed=false;\n try{\n tx=await d.transaction(\"write\");\n const rr:any=await tx.execute({sql:`SELECT * FROM ${C} WHERE challenge_id=?`,args:[req.challenge_id]});\n const row:any=rr.rows?.[0]; if(!row){await tx.rollback();return fail(\"CHALLENGE_MISSING\")}\n if(!immutableMatches(row,req)){await tx.rollback();return fail(\"CLAIM_BINDING_MISMATCH\")}\n const imm=JSON.parse(String(row.immutable_json));\n if(String(row.state)===\"CLAIMED\"||String(row.state)===\"ACCEPTED\"){\n await tx.rollback();\n return {ok:true,fresh:false,state:String(row.state),claim_event_uuid:row.claim_event_uuid,claim_receipt_sha256:row.claim_receipt_sha256};\n }\n if(String(row.state)===\"BURNED\"){await tx.rollback();return fail(\"CHALLENGE_BURNED\")}\n if(ms(serverNow)>ms(imm.expires_at)){\n await tx.execute({sql:`UPDATE ${C} SET state='BURNED',burned_reason='STALE_BEFORE_CLAIM',terminal_at=? WHERE challenge_id=? AND state='FRESH'`,args:[serverNow,req.challenge_id]});\n await tx.commit(); committed=true; return fail(\"CHALLENGE_EXPIRED_BURNED\");\n }\n const claim_request_sha256=await sha256Text(canon(claimBinding(req)));\n const event_uuid=crypto.randomUUID();\n const receipt=await sha256Text(canon({schema:\"ATOMIC_CHALLENGE_CLAIM_RECEIPT_V1\",event_uuid,claim_request_sha256,challenge_sha256:req.challenge_sha256}));\n const u:any=await tx.execute({sql:`UPDATE ${C}\n SET state='CLAIMED',claim_event_uuid=?,claim_receipt_sha256=?,claim_request_sha256=?,claimed_at=?\n WHERE challenge_id=? AND state='FRESH'\n RETURNING challenge_id`,args:[event_uuid,receipt,claim_request_sha256,serverNow,req.challenge_id]});\n if((u.rows||[]).length!==1){await tx.rollback();return fail(\"CLAIM_CAS_LOST\")}\n const ep=canon({challenge_id:req.challenge_id,claim_request_sha256,claim_receipt_sha256:receipt});\n const eh=await sha256Text(canon({event_uuid,type:\"CHALLENGE_CLAIMED\",payload:JSON.parse(ep)}));\n await tx.execute({sql:`INSERT INTO ${E}(event_uuid,challenge_id,type,payload_json,event_sha256,created_at) VALUES(?,?, 'CHALLENGE_CLAIMED',?,?,?)`,args:[event_uuid,req.challenge_id,ep,eh,serverNow]});\n if(fault===\"BEFORE_COMMIT\")throw new Error(\"INJECT_BEFORE_CLAIM_COMMIT\");\n await tx.commit(); committed=true;\n if(fault===\"AFTER_COMMIT_RESPONSE_LOST\")throw new Error(\"INJECT_AFTER_CLAIM_COMMIT_RESPONSE_LOST\");\n return {ok:true,fresh:true,state:\"CLAIMED\",claim_event_uuid:event_uuid,claim_receipt_sha256:receipt,claim_request_sha256};\n }catch(e){\n if(tx&&!committed){try{await tx.rollback()}catch{}}\n const row:any=await readAfterClientError(String(req.challenge_id));\n if(committed) throw e;\n if(row&&immutableMatches(row,req)&&(String(row.state)===\"CLAIMED\"||String(row.state)===\"ACCEPTED\")){\n return {ok:true,fresh:false,reconciled_after_error:true,state:String(row.state),claim_event_uuid:row.claim_event_uuid,claim_receipt_sha256:row.claim_receipt_sha256};\n }\n return fail(\"CLAIM_TRANSACTION_ERROR\",{detail:String((e as any)?.message??e)});\n }\n}\nexport async function burnClaimed(challengeId:string, reason:string, serverNow:string){\n await initShadow(); const d=db();\n const r:any=await d.execute({sql:`UPDATE ${C} SET state='BURNED',burned_reason=?,terminal_at=? WHERE challenge_id=? AND state='CLAIMED' RETURNING challenge_id`,args:[reason,serverNow,challengeId]});\n if((r.rows||[]).length===1)return {ok:true,burned:true};\n const row:any=await getChallenge(challengeId);\n return {ok:true,burned:false,state:row?.state??null};\n}\nfunction closedResult(stdout:string){\n let x:any; try{x=JSON.parse(stdout)}catch{return {ok:false,reason:\"MALFORMED_PROVIDER_STDOUT\"}}\n const keys=[\"schema\",\"project\",\"task_id\",\"candidate_id\",\"qualifying_run_id\",\"execution_request_id\",\"challenge_sha256\",\"claim_receipt_sha256\",\"finalizer_source_sha256\",\"finalizer_version\",\"input_bundle_sha256\",\"consumed_input_bundle_sha256\",\"candidate_only\",\"authority\",\"independent_review_claimed\",\"p_real_increment\",\"human_authority_approval\",\"verdict\"];\n if(!exactKeys(x,keys))return {ok:false,reason:\"RESULT_SCHEMA_NOT_CLOSED\"};\n if(stdout!==canon(x))return {ok:false,reason:\"NONCANONICAL_PROVIDER_STDOUT\"};\n return {ok:true,result:x};\n}\nfunction fenceOk(f:any){\n return !!f && f.execution_allowed===false && f.prevent_self_review===true && f.self_certification_forbidden===true &&\n f.physical_chat_execution_distinctness_required===true && f.reviewer_must_be_physically_distinct===true &&\n f.do_not_infer_distinctness_from_agent_id===true;\n}\nasync function verifyPositiveTrace(row:any, input:any){\n const imm=JSON.parse(String(row.immutable_json)), t=input?.trace, current=input?.current_source, fresh=input?.freshness, fence=input?.final_target_fence;\n if(!t||!current||!fresh||!fence)return fail(\"MISSING_ADJUDICATION_INPUT\");\n if(String(input.claim_receipt_sha256)!==String(row.claim_receipt_sha256))return fail(\"FORGED_OR_WRONG_CLAIM_RECEIPT\");\n if(fresh.superseded===true||fresh.do_not_consume===true||fresh.newer_falsification===true||fresh.identity_mismatch===true)return fail(\"FRESHNESS_FENCE_REJECT\");\n if(!fenceOk(fence))return fail(\"FINAL_SELF_REVIEW_FENCE_NOT_PRESERVED\");\n if(t.evidence_origin!==\"VAL_PROVIDER_API_LIVE_QUERY\"||t.provider_telemetry_direct_query!==true)return fail(\"MISSING_POSITIVE_PROVIDER_TRACE\");\n if(!t.trace_id||t.trace_status_ok!==true||t.stdout_trace_id!==t.trace_id||t.stdout_log_count!==1)return fail(\"TRACE_OR_STDOUT_BINDING_FAIL\");\n if(t.file_id!==imm.finalizer_file_id||t.branch_id!==imm.finalizer_branch_id||Number(t.version)!==imm.finalizer_version||t.val_type!==imm.finalizer_val_type)return fail(\"PROVIDER_SOURCE_IDENTITY_MISMATCH\");\n if(t.source_sha256!==imm.finalizer_source_sha256||current.source_sha256!==imm.finalizer_source_sha256||Number(current.version)!==imm.finalizer_version||current.branch_id!==imm.finalizer_branch_id)return fail(\"SOURCE_CHANGED_OR_WRONG\");\n if(current.source_freeze_receipt_sha256!==imm.source_freeze_receipt_sha256)return fail(\"SOURCE_FREEZE_RECEIPT_MISMATCH\");\n const issued=ms(imm.issued_at),expires=ms(imm.expires_at),ts=ms(t.trace_start),te=ms(t.trace_end),observedMs=ms(input.observed_at);\n if(![issued,expires,ts,te,observedMs].every(Number.isFinite)||tsexpires||observedMsMAX_OBSERVATION_AGE_MS)return fail(\"TRACE_TIME_BINDING_FAIL\");\n const cr:any=closedResult(String(t.stdout)); if(!cr.ok)return cr;\n const r=cr.result;\n if(r.schema!==\"FIRST_SUPERHERO_ATOMIC_CHALLENGE_ADJUDICATOR_RESULT_V1\"||r.project!==PROJECT||r.task_id!==FINAL_TASK)return fail(\"RESULT_IDENTITY_MISMATCH\");\n if(r.candidate_id!==imm.candidate_id||r.qualifying_run_id!==imm.qualifying_run_id||r.execution_request_id!==imm.execution_request_id)return fail(\"CROSS_CONTROLLER_OR_RUN\");\n if(r.challenge_sha256!==String(row.challenge_sha256)||r.claim_receipt_sha256!==String(row.claim_receipt_sha256))return fail(\"CROSS_CHALLENGE_OR_CLAIM\");\n if(r.finalizer_source_sha256!==imm.finalizer_source_sha256||Number(r.finalizer_version)!==imm.finalizer_version)return fail(\"CROSS_SOURCE\");\n if(r.input_bundle_sha256!==imm.input_bundle_sha256||r.consumed_input_bundle_sha256!==imm.input_bundle_sha256)return fail(\"CROSS_OR_UNCONSUMED_INPUT\");\n if(r.candidate_only!==true||r.authority!==false||r.independent_review_claimed!==false||r.p_real_increment!==0||r.human_authority_approval!==false)return fail(\"SELF_PROMOTION_OR_REVIEW_CONFLATION\");\n if(typeof r.verdict!==\"string\"||!r.verdict)return fail(\"BAD_RESULT_VERDICT\");\n const stdout_sha256=await sha256Text(String(t.stdout));\n const stable=await sha256Text(canon({\n schema:\"ATOMIC_CHALLENGE_EXECUTION_ADMISSION_V1\",project:PROJECT,task_id:FINAL_TASK,\n challenge_id:String(row.challenge_id),challenge_sha256:String(row.challenge_sha256),\n claim_event_uuid:String(row.claim_event_uuid),claim_receipt_sha256:String(row.claim_receipt_sha256),\n candidate_id:imm.candidate_id,qualifying_run_id:imm.qualifying_run_id,execution_request_id:imm.execution_request_id,\n source_sha256:imm.finalizer_source_sha256,input_bundle_sha256:imm.input_bundle_sha256,\n trace_id:String(t.trace_id),stdout_sha256,trace_start:String(t.trace_start),trace_end:String(t.trace_end)\n }));\n const obs=await sha256Text(canon({schema:\"ATOMIC_CHALLENGE_OBSERVATION_RECEIPT_V1\",execution_admission_sha256:stable,observed_at:String(input.observed_at),provider_query_id:String(t.provider_query_id||\"\"),provider_query_request_sha256:String(t.provider_query_request_sha256||\"\"),provider_query_response_sha256:String(t.provider_query_response_sha256||\"\")}));\n return {ok:true,result:r,execution_admission_sha256:stable,observation_receipt_sha256:obs,stdout_sha256};\n}\nexport async function adjudicateChallenge(input:any, serverNow:string, fault:\"NONE\"|\"BEFORE_COMMIT\"|\"AFTER_COMMIT_RESPONSE_LOST\"=\"NONE\"){\n await initShadow();\n const challengeId=String(input?.challenge_id??\"\");\n const first:any=await getChallenge(challengeId); if(!first)return fail(\"CHALLENGE_MISSING\");\n if(String(first.state)===\"ACCEPTED\"){\n const v:any=await verifyPositiveTrace(first,input);\n if(v.ok&&v.execution_admission_sha256===String(first.execution_admission_sha256))return {ok:true,fresh:false,state:\"ACCEPTED\",execution_admission_sha256:first.execution_admission_sha256,observation_receipt_sha256:v.observation_receipt_sha256};\n return fail(\"ACCEPTED_CHALLENGE_DIFFERENT_EXECUTION\");\n }\n if(String(first.state)===\"BURNED\")return fail(\"CHALLENGE_BURNED\");\n if(String(first.state)!==\"CLAIMED\")return fail(\"CHALLENGE_NOT_CLAIMED\");\n const v:any=await verifyPositiveTrace(first,input);\n if(!v.ok){\n if(v.reason!==\"FORGED_OR_WRONG_CLAIM_RECEIPT\"){\n await burnClaimed(challengeId,\"ADJUDICATION_REJECT_\"+v.reason,serverNow);\n }\n return v;\n }\n const d:any=db(); let tx:any=null,committed=false;\n try{\n tx=await d.transaction(\"write\");\n const rr:any=await tx.execute({sql:`SELECT * FROM ${C} WHERE challenge_id=?`,args:[challengeId]});\n const row:any=rr.rows?.[0]; if(!row){await tx.rollback();return fail(\"CHALLENGE_MISSING\")}\n if(String(row.state)===\"ACCEPTED\"){\n await tx.rollback();\n if(String(row.execution_admission_sha256)===v.execution_admission_sha256)return {ok:true,fresh:false,state:\"ACCEPTED\",execution_admission_sha256:v.execution_admission_sha256,observation_receipt_sha256:v.observation_receipt_sha256};\n return fail(\"SECOND_EXECUTION_REJECTED\");\n }\n if(String(row.state)!==\"CLAIMED\"||String(row.claim_receipt_sha256)!==String(input.claim_receipt_sha256)){await tx.rollback();return fail(\"CLAIM_STATE_CHANGED\")}\n const event_uuid=crypto.randomUUID();\n const payload=canon({challenge_id:challengeId,trace_id:String(input.trace.trace_id),execution_admission_sha256:v.execution_admission_sha256,observation_receipt_sha256:v.observation_receipt_sha256});\n const event_sha256=await sha256Text(canon({event_uuid,type:\"CHALLENGE_ACCEPTED\",payload:JSON.parse(payload)}));\n const receipt=canon({schema:\"ATOMIC_CHALLENGE_ACCEPTED_RECEIPT_V1\",event_uuid,event_sha256,execution_admission_sha256:v.execution_admission_sha256,observation_receipt_sha256:v.observation_receipt_sha256,p_real_increment:0,authority:false,independent_review_admission:false});\n const u:any=await tx.execute({sql:`UPDATE ${C} SET state='ACCEPTED',accepted_trace_id=?,execution_admission_sha256=?,execution_receipt_json=?,terminal_at=? WHERE challenge_id=? AND state='CLAIMED' AND claim_receipt_sha256=? RETURNING challenge_id`,args:[String(input.trace.trace_id),v.execution_admission_sha256,receipt,serverNow,challengeId,String(input.claim_receipt_sha256)]});\n if((u.rows||[]).length!==1){await tx.rollback();return fail(\"ADJUDICATION_CAS_LOST\")}\n await tx.execute({sql:`INSERT INTO ${E}(event_uuid,challenge_id,type,payload_json,event_sha256,created_at) VALUES(?,?, 'CHALLENGE_ACCEPTED',?,?,?)`,args:[event_uuid,challengeId,payload,event_sha256,serverNow]});\n if(fault===\"BEFORE_COMMIT\")throw new Error(\"INJECT_BEFORE_OUTCOME_COMMIT\");\n await tx.commit(); committed=true;\n if(fault===\"AFTER_COMMIT_RESPONSE_LOST\")throw new Error(\"INJECT_AFTER_OUTCOME_COMMIT_RESPONSE_LOST\");\n return {ok:true,fresh:true,state:\"ACCEPTED\",execution_admission_sha256:v.execution_admission_sha256,observation_receipt_sha256:v.observation_receipt_sha256,provider_trace_id:String(input.trace.trace_id),p_real_increment:0,independent_review_admission:false,authority:false};\n }catch(e){\n if(tx&&!committed){try{await tx.rollback()}catch{}}\n if(committed) throw e;\n const row:any=await readAfterClientError(challengeId);\n if(row?.state===\"ACCEPTED\"&&String(row.execution_admission_sha256)===v.execution_admission_sha256)return {ok:true,fresh:false,reconciled_after_error:true,state:\"ACCEPTED\",execution_admission_sha256:v.execution_admission_sha256,observation_receipt_sha256:v.observation_receipt_sha256};\n return fail(\"ADJUDICATION_TRANSACTION_ERROR\",{detail:String((e as any)?.message??e)});\n }\n}\nexport async function consumeShadowPopulationAdmission(challengeId:string, serverNow:string){\n await initShadow(); const d:any=db(); let tx:any=null;\n try{\n tx=await d.transaction(\"write\");\n const rr:any=await tx.execute({sql:`SELECT state,execution_admission_sha256,population_consumed FROM ${C} WHERE challenge_id=?`,args:[challengeId]});\n const row:any=rr.rows?.[0]; if(!row||String(row.state)!==\"ACCEPTED\"){await tx.rollback();return fail(\"NOT_ACCEPTED\")}\n if(Number(row.population_consumed)===1){\n await tx.rollback();\n const p:any=await d.execute({sql:`SELECT * FROM ${P} WHERE challenge_id=?`,args:[challengeId]});\n return {ok:true,fresh:false,shadow_increment:0,existing:p.rows?.[0]??null};\n }\n const ins:any=await tx.execute({sql:`INSERT INTO ${P}(challenge_id,execution_admission_sha256,shadow_increment,created_at) VALUES(?,?,1,?) RETURNING challenge_id`,args:[challengeId,String(row.execution_admission_sha256),serverNow]});\n if((ins.rows||[]).length!==1){await tx.rollback();return fail(\"POPULATION_UNIQUE_INSERT_FAILED\")}\n const up:any=await tx.execute({sql:`UPDATE ${C} SET population_consumed=1 WHERE challenge_id=? AND population_consumed=0 RETURNING challenge_id`,args:[challengeId]});\n if((up.rows||[]).length!==1){await tx.rollback();return fail(\"POPULATION_CAS_LOST\")}\n await tx.commit();\n return {ok:true,fresh:true,shadow_increment:1,canonical_p_real_increment:0};\n }catch(e){if(tx){try{await tx.rollback()}catch{}}return fail(\"POPULATION_TX_ERROR\",{detail:String((e as any)?.message??e)})}\n}\nexport async function shadowCounts(){\n await initShadow(); const d=db();\n const r:any=await d.execute(`SELECT\n (SELECT COUNT(*) FROM ${C}) challenges,\n (SELECT COUNT(*) FROM ${C} WHERE state='CLAIMED') claimed,\n (SELECT COUNT(*) FROM ${C} WHERE state='ACCEPTED') accepted,\n (SELECT COUNT(*) FROM ${C} WHERE state='BURNED') burned,\n (SELECT COUNT(*) FROM ${E}) events,\n (SELECT COUNT(*) FROM ${E} WHERE type='CHALLENGE_CLAIMED') claim_events,\n (SELECT COUNT(*) FROM ${E} WHERE type='CHALLENGE_ACCEPTED') accept_events,\n (SELECT COUNT(*) FROM ${P}) population_rows,\n (SELECT COALESCE(SUM(shadow_increment),0) FROM ${P}) shadow_population_sum`);\n return r.rows?.[0]??null;\n}\n","// CANDIDATE_ONLY_NO_AUTHORITY\n// Atomic single-use adjudication challenge V1.\n// Shadow proof substrate only. It deliberately does not touch canonical Brain tables.\nimport { API_URL } from \"https://esm.town/v/std/API_URL\";\nimport { createClient } from \"npm:@libsql/client@0.17.2/web\";\n\nexport const PROJECT = \"mosadek/project-brain-live-v1-durable\";\nexport const FINAL_TASK = \"BRAIN-FIRST-SUPERHERO-SAME-IDENTITY-FINAL-ADJUDICATION-P0-V1-20260908\";\nexport const MAX_TTL_MS = 600_000;\nexport const MAX_OBSERVATION_AGE_MS = 3_600_000;\nconst C = \"fs_asu_challenge_v1\";\nconst E = \"fs_asu_event_v1\";\nconst P = \"fs_asu_population_shadow_v2\";\n\nconst token = Deno.env.get(\"VAL_TOWN_API_KEY\") || \"\";\nconst nativeFetch = globalThis.fetch.bind(globalThis);\nfunction compatFetch(input:any, init?:any):Promise {\n if (typeof input === \"string\" || input instanceof URL) return nativeFetch(input, init);\n const method = String(input?.method || init?.method || \"GET\");\n const headers = new Headers();\n const src = input?.headers || init?.headers;\n if (src?.forEach) src.forEach((v:string,k:string)=>headers.set(k,v));\n else if (src) for (const [k,v] of Object.entries(src)) headers.set(k,String(v));\n return (async()=>{\n let body:any = undefined;\n if (method !== \"GET\" && method !== \"HEAD\") {\n if (typeof input?.arrayBuffer === \"function\") body = new Uint8Array(await input.arrayBuffer());\n else body = input?.body ?? init?.body;\n }\n return await nativeFetch(String(input.url), {method,headers,body,redirect:\"manual\"});\n })();\n}\nfunction db(){\n return createClient({url:`${API_URL}/v3/sqlite/scoped/`, authToken:token, fetch:compatFetch as any});\n}\nexport function canon(x:any):string {\n if (x === null || typeof x !== \"object\") return JSON.stringify(x);\n if (Array.isArray(x)) return \"[\" + x.map(canon).join(\",\") + \"]\";\n return \"{\" + Object.keys(x).sort().map(k=>JSON.stringify(k)+\":\"+canon(x[k])).join(\",\") + \"}\";\n}\nexport async function sha256Text(s:string):Promise {\n const d = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(s));\n return [...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\");\n}\nfunction isHex64(s:any){ return /^[0-9a-f]{64}$/.test(String(s??\"\")); }\nfunction ms(s:any){ return Date.parse(String(s??\"\")); }\nfunction exactKeys(x:any, keys:string[]){\n if(!x || typeof x!==\"object\" || Array.isArray(x)) return false;\n const a=Object.keys(x).sort(), b=[...keys].sort();\n return a.length===b.length && a.every((k,i)=>k===b[i]);\n}\nfunction fail(reason:string, extra:any={}){ return {ok:false,reason,...extra}; }\n\nexport async function initShadow(){\n const d=db();\n await d.batch([\n `CREATE TABLE IF NOT EXISTS ${C}(\n challenge_id TEXT PRIMARY KEY,\n execution_request_id TEXT NOT NULL UNIQUE,\n immutable_json TEXT NOT NULL,\n challenge_sha256 TEXT NOT NULL UNIQUE,\n state TEXT NOT NULL CHECK(state IN ('FRESH','CLAIMED','ACCEPTED','BURNED')),\n claim_event_uuid TEXT UNIQUE,\n claim_receipt_sha256 TEXT UNIQUE,\n claim_request_sha256 TEXT,\n claimed_at TEXT,\n accepted_trace_id TEXT,\n execution_admission_sha256 TEXT UNIQUE,\n execution_receipt_json TEXT,\n terminal_at TEXT,\n burned_reason TEXT,\n population_consumed INTEGER NOT NULL DEFAULT 0 CHECK(population_consumed IN (0,1))\n )`,\n `CREATE TABLE IF NOT EXISTS ${E}(\n event_uuid TEXT PRIMARY KEY,\n challenge_id TEXT NOT NULL,\n type TEXT NOT NULL,\n payload_json TEXT NOT NULL,\n event_sha256 TEXT NOT NULL UNIQUE,\n created_at TEXT NOT NULL\n )`,\n `CREATE TABLE IF NOT EXISTS ${P}(\n challenge_id TEXT PRIMARY KEY,\n execution_admission_sha256 TEXT NOT NULL UNIQUE,\n shadow_increment INTEGER NOT NULL CHECK(shadow_increment=1),\n created_at TEXT NOT NULL\n )`\n ],\"write\");\n return {ok:true};\n}\nexport async function resetShadow(){\n await initShadow();\n const d=db();\n await d.batch([`DELETE FROM ${P}`,`DELETE FROM ${E}`,`DELETE FROM ${C}`],\"write\");\n return {ok:true};\n}\nexport async function getChallenge(challengeId:string){\n const d=db();\n const r:any=await d.execute({sql:`SELECT * FROM ${C} WHERE challenge_id=?`,args:[challengeId]});\n return r.rows?.[0] ?? null;\n}\nfunction immutableChallengeInput(i:any){\n return {\n schema:\"FIRST_SUPERHERO_ATOMIC_SINGLE_USE_CHALLENGE_V1\",\n project:PROJECT,\n task_id:FINAL_TASK,\n candidate_id:String(i.candidate_id),\n qualifying_run_id:String(i.qualifying_run_id),\n execution_request_id:String(i.execution_request_id),\n finalizer_file_id:String(i.finalizer_file_id),\n finalizer_branch_id:String(i.finalizer_branch_id),\n finalizer_version:Number(i.finalizer_version),\n finalizer_val_type:String(i.finalizer_val_type),\n finalizer_source_sha256:String(i.finalizer_source_sha256),\n input_bundle_sha256:String(i.input_bundle_sha256),\n source_freeze_verified:i.source_freeze_verified===true,\n source_frozen_at:String(i.source_frozen_at),\n source_freeze_receipt_sha256:String(i.source_freeze_receipt_sha256),\n issued_at:String(i.issued_at),\n expires_at:String(i.expires_at),\n final_target_context_sha256:String(i.final_target_context_sha256)\n };\n}\nfunction validateImmutable(x:any, serverNow:string){\n if(!x.candidate_id||!x.qualifying_run_id||x.execution_request_id.length<16)return \"BAD_IDENTITY\";\n if(!x.finalizer_file_id||!x.finalizer_branch_id||!Number.isInteger(x.finalizer_version)||x.finalizer_version<1)return \"BAD_SOURCE_IDENTITY\";\n if(![\"script\",\"interval\",\"http\"].includes(x.finalizer_val_type))return \"BAD_VAL_TYPE\";\n if(!isHex64(x.finalizer_source_sha256)||!isHex64(x.input_bundle_sha256)||!isHex64(x.source_freeze_receipt_sha256)||!isHex64(x.final_target_context_sha256))return \"BAD_HASH\";\n if(x.source_freeze_verified!==true)return \"SOURCE_NOT_FROZEN\";\n const n=ms(serverNow), issued=ms(x.issued_at), expires=ms(x.expires_at), frozen=ms(x.source_frozen_at);\n if(![n,issued,expires,frozen].every(Number.isFinite))return \"BAD_TIME\";\n if(frozen>issued||issued>n||expires<=n||expires<=issued||expires-issued>MAX_TTL_MS)return \"BAD_TTL\";\n return null;\n}\nexport async function issueChallenge(input:any, serverNow:string){\n await initShadow();\n const immutable=immutableChallengeInput(input);\n const bad=validateImmutable(immutable,serverNow); if(bad)return fail(bad);\n const challenge_id=crypto.randomUUID();\n const challenge_sha256=await sha256Text(canon({challenge_id,...immutable}));\n const d=db();\n try{\n await d.execute({sql:`INSERT INTO ${C}(challenge_id,execution_request_id,immutable_json,challenge_sha256,state)\n VALUES(?,?,?,?, 'FRESH')`,args:[challenge_id,immutable.execution_request_id,canon(immutable),challenge_sha256]});\n }catch(e){return fail(\"ISSUE_CONFLICT\",{detail:String((e as any)?.message??e)})}\n return {ok:true,challenge_id,challenge_sha256,immutable};\n}\nfunction claimBinding(c:any){\n return {\n challenge_id:String(c.challenge_id),\n project:String(c.project),\n task_id:String(c.task_id),\n candidate_id:String(c.candidate_id),\n qualifying_run_id:String(c.qualifying_run_id),\n execution_request_id:String(c.execution_request_id),\n finalizer_source_sha256:String(c.finalizer_source_sha256),\n input_bundle_sha256:String(c.input_bundle_sha256),\n challenge_sha256:String(c.challenge_sha256)\n };\n}\nfunction immutableMatches(row:any, req:any){\n const x=JSON.parse(String(row.immutable_json));\n return req.project===x.project && req.task_id===x.task_id && req.candidate_id===x.candidate_id &&\n req.qualifying_run_id===x.qualifying_run_id && req.execution_request_id===x.execution_request_id &&\n req.finalizer_source_sha256===x.finalizer_source_sha256 && req.input_bundle_sha256===x.input_bundle_sha256 &&\n req.challenge_sha256===String(row.challenge_sha256);\n}\nasync function readAfterClientError(challengeId:string){\n try{return await getChallenge(challengeId)}catch{return null}\n}\nexport async function claimChallenge(req:any, serverNow:string, fault:\"NONE\"|\"BEFORE_COMMIT\"|\"AFTER_COMMIT_RESPONSE_LOST\"=\"NONE\"){\n await initShadow();\n const required=[\"challenge_id\",\"project\",\"task_id\",\"candidate_id\",\"qualifying_run_id\",\"execution_request_id\",\"finalizer_source_sha256\",\"input_bundle_sha256\",\"challenge_sha256\"];\n if(!exactKeys(req,required))return fail(\"CLAIM_SCHEMA_NOT_CLOSED\");\n const d:any=db();\n let tx:any=null, committed=false;\n try{\n tx=await d.transaction(\"write\");\n const rr:any=await tx.execute({sql:`SELECT * FROM ${C} WHERE challenge_id=?`,args:[req.challenge_id]});\n const row:any=rr.rows?.[0]; if(!row){await tx.rollback();return fail(\"CHALLENGE_MISSING\")}\n if(!immutableMatches(row,req)){await tx.rollback();return fail(\"CLAIM_BINDING_MISMATCH\")}\n const imm=JSON.parse(String(row.immutable_json));\n if(String(row.state)===\"CLAIMED\"||String(row.state)===\"ACCEPTED\"){\n await tx.rollback();\n return {ok:true,fresh:false,state:String(row.state),claim_event_uuid:row.claim_event_uuid,claim_receipt_sha256:row.claim_receipt_sha256};\n }\n if(String(row.state)===\"BURNED\"){await tx.rollback();return fail(\"CHALLENGE_BURNED\")}\n if(ms(serverNow)>ms(imm.expires_at)){\n await tx.execute({sql:`UPDATE ${C} SET state='BURNED',burned_reason='STALE_BEFORE_CLAIM',terminal_at=? WHERE challenge_id=? AND state='FRESH'`,args:[serverNow,req.challenge_id]});\n await tx.commit(); committed=true; return fail(\"CHALLENGE_EXPIRED_BURNED\");\n }\n const claim_request_sha256=await sha256Text(canon(claimBinding(req)));\n const event_uuid=crypto.randomUUID();\n const receipt=await sha256Text(canon({schema:\"ATOMIC_CHALLENGE_CLAIM_RECEIPT_V1\",event_uuid,claim_request_sha256,challenge_sha256:req.challenge_sha256}));\n const u:any=await tx.execute({sql:`UPDATE ${C}\n SET state='CLAIMED',claim_event_uuid=?,claim_receipt_sha256=?,claim_request_sha256=?,claimed_at=?\n WHERE challenge_id=? AND state='FRESH'\n RETURNING challenge_id`,args:[event_uuid,receipt,claim_request_sha256,serverNow,req.challenge_id]});\n if((u.rows||[]).length!==1){await tx.rollback();return fail(\"CLAIM_CAS_LOST\")}\n const ep=canon({challenge_id:req.challenge_id,claim_request_sha256,claim_receipt_sha256:receipt});\n const eh=await sha256Text(canon({event_uuid,type:\"CHALLENGE_CLAIMED\",payload:JSON.parse(ep)}));\n await tx.execute({sql:`INSERT INTO ${E}(event_uuid,challenge_id,type,payload_json,event_sha256,created_at) VALUES(?,?, 'CHALLENGE_CLAIMED',?,?,?)`,args:[event_uuid,req.challenge_id,ep,eh,serverNow]});\n if(fault===\"BEFORE_COMMIT\")throw new Error(\"INJECT_BEFORE_CLAIM_COMMIT\");\n await tx.commit(); committed=true;\n if(fault===\"AFTER_COMMIT_RESPONSE_LOST\")throw new Error(\"INJECT_AFTER_CLAIM_COMMIT_RESPONSE_LOST\");\n return {ok:true,fresh:true,state:\"CLAIMED\",claim_event_uuid:event_uuid,claim_receipt_sha256:receipt,claim_request_sha256};\n }catch(e){\n if(tx&&!committed){try{await tx.rollback()}catch{}}\n const row:any=await readAfterClientError(String(req.challenge_id));\n if(committed) throw e;\n if(row&&immutableMatches(row,req)&&(String(row.state)===\"CLAIMED\"||String(row.state)===\"ACCEPTED\")){\n return {ok:true,fresh:false,reconciled_after_error:true,state:String(row.state),claim_event_uuid:row.claim_event_uuid,claim_receipt_sha256:row.claim_receipt_sha256};\n }\n return fail(\"CLAIM_TRANSACTION_ERROR\",{detail:String((e as any)?.message??e)});\n }\n}\nexport async function burnClaimed(challengeId:string, reason:string, serverNow:string){\n await initShadow(); const d=db();\n const r:any=await d.execute({sql:`UPDATE ${C} SET state='BURNED',burned_reason=?,terminal_at=? WHERE challenge_id=? AND state='CLAIMED' RETURNING challenge_id`,args:[reason,serverNow,challengeId]});\n if((r.rows||[]).length===1)return {ok:true,burned:true};\n const row:any=await getChallenge(challengeId);\n return {ok:true,burned:false,state:row?.state??null};\n}\nfunction closedResult(stdout:string){\n let x:any; try{x=JSON.parse(stdout)}catch{return {ok:false,reason:\"MALFORMED_PROVIDER_STDOUT\"}}\n const keys=[\"schema\",\"project\",\"task_id\",\"candidate_id\",\"qualifying_run_id\",\"execution_request_id\",\"challenge_sha256\",\"claim_receipt_sha256\",\"finalizer_source_sha256\",\"finalizer_version\",\"input_bundle_sha256\",\"consumed_input_bundle_sha256\",\"candidate_only\",\"authority\",\"independent_review_claimed\",\"p_real_increment\",\"human_authority_approval\",\"verdict\"];\n if(!exactKeys(x,keys))return {ok:false,reason:\"RESULT_SCHEMA_NOT_CLOSED\"};\n if(stdout!==canon(x))return {ok:false,reason:\"NONCANONICAL_PROVIDER_STDOUT\"};\n return {ok:true,result:x};\n}\nfunction fenceOk(f:any){\n return !!f && f.execution_allowed===false && f.prevent_self_review===true && f.self_certification_forbidden===true &&\n f.physical_chat_execution_distinctness_required===true && f.reviewer_must_be_physically_distinct===true &&\n f.do_not_infer_distinctness_from_agent_id===true;\n}\nasync function verifyPositiveTrace(row:any, input:any){\n const imm=JSON.parse(String(row.immutable_json)), t=input?.trace, current=input?.current_source, fresh=input?.freshness, fence=input?.final_target_fence;\n if(!t||!current||!fresh||!fence)return fail(\"MISSING_ADJUDICATION_INPUT\");\n if(String(input.claim_receipt_sha256)!==String(row.claim_receipt_sha256))return fail(\"FORGED_OR_WRONG_CLAIM_RECEIPT\");\n if(fresh.superseded===true||fresh.do_not_consume===true||fresh.newer_falsification===true||fresh.identity_mismatch===true)return fail(\"FRESHNESS_FENCE_REJECT\");\n if(!fenceOk(fence))return fail(\"FINAL_SELF_REVIEW_FENCE_NOT_PRESERVED\");\n if(t.evidence_origin!==\"VAL_PROVIDER_API_LIVE_QUERY\"||t.provider_telemetry_direct_query!==true)return fail(\"MISSING_POSITIVE_PROVIDER_TRACE\");\n if(!t.trace_id||t.trace_status_ok!==true||t.stdout_trace_id!==t.trace_id||t.stdout_log_count!==1)return fail(\"TRACE_OR_STDOUT_BINDING_FAIL\");\n if(t.file_id!==imm.finalizer_file_id||t.branch_id!==imm.finalizer_branch_id||Number(t.version)!==imm.finalizer_version||t.val_type!==imm.finalizer_val_type)return fail(\"PROVIDER_SOURCE_IDENTITY_MISMATCH\");\n if(t.source_sha256!==imm.finalizer_source_sha256||current.source_sha256!==imm.finalizer_source_sha256||Number(current.version)!==imm.finalizer_version||current.branch_id!==imm.finalizer_branch_id)return fail(\"SOURCE_CHANGED_OR_WRONG\");\n if(current.source_freeze_receipt_sha256!==imm.source_freeze_receipt_sha256)return fail(\"SOURCE_FREEZE_RECEIPT_MISMATCH\");\n const issued=ms(imm.issued_at),expires=ms(imm.expires_at),ts=ms(t.trace_start),te=ms(t.trace_end),observedMs=ms(input.observed_at);\n if(![issued,expires,ts,te,observedMs].every(Number.isFinite)||tsexpires||observedMsMAX_OBSERVATION_AGE_MS)return fail(\"TRACE_TIME_BINDING_FAIL\");\n const cr:any=closedResult(String(t.stdout)); if(!cr.ok)return cr;\n const r=cr.result;\n if(r.schema!==\"FIRST_SUPERHERO_ATOMIC_CHALLENGE_ADJUDICATOR_RESULT_V1\"||r.project!==PROJECT||r.task_id!==FINAL_TASK)return fail(\"RESULT_IDENTITY_MISMATCH\");\n if(r.candidate_id!==imm.candidate_id||r.qualifying_run_id!==imm.qualifying_run_id||r.execution_request_id!==imm.execution_request_id)return fail(\"CROSS_CONTROLLER_OR_RUN\");\n if(r.challenge_sha256!==String(row.challenge_sha256)||r.claim_receipt_sha256!==String(row.claim_receipt_sha256))return fail(\"CROSS_CHALLENGE_OR_CLAIM\");\n if(r.finalizer_source_sha256!==imm.finalizer_source_sha256||Number(r.finalizer_version)!==imm.finalizer_version)return fail(\"CROSS_SOURCE\");\n if(r.input_bundle_sha256!==imm.input_bundle_sha256||r.consumed_input_bundle_sha256!==imm.input_bundle_sha256)return fail(\"CROSS_OR_UNCONSUMED_INPUT\");\n if(r.candidate_only!==true||r.authority!==false||r.independent_review_claimed!==false||r.p_real_increment!==0||r.human_authority_approval!==false)return fail(\"SELF_PROMOTION_OR_REVIEW_CONFLATION\");\n if(typeof r.verdict!==\"string\"||!r.verdict)return fail(\"BAD_RESULT_VERDICT\");\n const stdout_sha256=await sha256Text(String(t.stdout));\n const stable=await sha256Text(canon({\n schema:\"ATOMIC_CHALLENGE_EXECUTION_ADMISSION_V1\",project:PROJECT,task_id:FINAL_TASK,\n challenge_id:String(row.challenge_id),challenge_sha256:String(row.challenge_sha256),\n claim_event_uuid:String(row.claim_event_uuid),claim_receipt_sha256:String(row.claim_receipt_sha256),\n candidate_id:imm.candidate_id,qualifying_run_id:imm.qualifying_run_id,execution_request_id:imm.execution_request_id,\n source_sha256:imm.finalizer_source_sha256,input_bundle_sha256:imm.input_bundle_sha256,\n trace_id:String(t.trace_id),stdout_sha256,trace_start:String(t.trace_start),trace_end:String(t.trace_end)\n }));\n const obs=await sha256Text(canon({schema:\"ATOMIC_CHALLENGE_OBSERVATION_RECEIPT_V1\",execution_admission_sha256:stable,observed_at:String(input.observed_at),provider_query_id:String(t.provider_query_id||\"\"),provider_query_request_sha256:String(t.provider_query_request_sha256||\"\"),provider_query_response_sha256:String(t.provider_query_response_sha256||\"\")}));\n return {ok:true,result:r,execution_admission_sha256:stable,observation_receipt_sha256:obs,stdout_sha256};\n}\nexport async function adjudicateChallenge(input:any, serverNow:string, fault:\"NONE\"|\"BEFORE_COMMIT\"|\"AFTER_COMMIT_RESPONSE_LOST\"=\"NONE\"){\n await initShadow();\n const challengeId=String(input?.challenge_id??\"\");\n const first:any=await getChallenge(challengeId); if(!first)return fail(\"CHALLENGE_MISSING\");\n if(String(first.state)===\"ACCEPTED\"){\n const v:any=await verifyPositiveTrace(first,input);\n if(v.ok&&v.execution_admission_sha256===String(first.execution_admission_sha256))return {ok:true,fresh:false,state:\"ACCEPTED\",execution_admission_sha256:first.execution_admission_sha256,observation_receipt_sha256:v.observation_receipt_sha256};\n return fail(\"ACCEPTED_CHALLENGE_DIFFERENT_EXECUTION\");\n }\n if(String(first.state)===\"BURNED\")return fail(\"CHALLENGE_BURNED\");\n if(String(first.state)!==\"CLAIMED\")return fail(\"CHALLENGE_NOT_CLAIMED\");\n const v:any=await verifyPositiveTrace(first,input);\n if(!v.ok){\n if(v.reason!==\"FORGED_OR_WRONG_CLAIM_RECEIPT\"){\n await burnClaimed(challengeId,\"ADJUDICATION_REJECT_\"+v.reason,serverNow);\n }\n return v;\n }\n const d:any=db(); let tx:any=null,committed=false;\n try{\n tx=await d.transaction(\"write\");\n const rr:any=await tx.execute({sql:`SELECT * FROM ${C} WHERE challenge_id=?`,args:[challengeId]});\n const row:any=rr.rows?.[0]; if(!row){await tx.rollback();return fail(\"CHALLENGE_MISSING\")}\n if(String(row.state)===\"ACCEPTED\"){\n await tx.rollback();\n if(String(row.execution_admission_sha256)===v.execution_admission_sha256)return {ok:true,fresh:false,state:\"ACCEPTED\",execution_admission_sha256:v.execution_admission_sha256,observation_receipt_sha256:v.observation_receipt_sha256};\n return fail(\"SECOND_EXECUTION_REJECTED\");\n }\n if(String(row.state)!==\"CLAIMED\"||String(row.claim_receipt_sha256)!==String(input.claim_receipt_sha256)){await tx.rollback();return fail(\"CLAIM_STATE_CHANGED\")}\n const event_uuid=crypto.randomUUID();\n const payload=canon({challenge_id:challengeId,trace_id:String(input.trace.trace_id),execution_admission_sha256:v.execution_admission_sha256,observation_receipt_sha256:v.observation_receipt_sha256});\n const event_sha256=await sha256Text(canon({event_uuid,type:\"CHALLENGE_ACCEPTED\",payload:JSON.parse(payload)}));\n const receipt=canon({schema:\"ATOMIC_CHALLENGE_ACCEPTED_RECEIPT_V1\",event_uuid,event_sha256,execution_admission_sha256:v.execution_admission_sha256,observation_receipt_sha256:v.observation_receipt_sha256,p_real_increment:0,authority:false,independent_review_admission:false});\n const u:any=await tx.execute({sql:`UPDATE ${C} SET state='ACCEPTED',accepted_trace_id=?,execution_admission_sha256=?,execution_receipt_json=?,terminal_at=? WHERE challenge_id=? AND state='CLAIMED' AND claim_receipt_sha256=? RETURNING challenge_id`,args:[String(input.trace.trace_id),v.execution_admission_sha256,receipt,serverNow,challengeId,String(input.claim_receipt_sha256)]});\n if((u.rows||[]).length!==1){await tx.rollback();return fail(\"ADJUDICATION_CAS_LOST\")}\n await tx.execute({sql:`INSERT INTO ${E}(event_uuid,challenge_id,type,payload_json,event_sha256,created_at) VALUES(?,?, 'CHALLENGE_ACCEPTED',?,?,?)`,args:[event_uuid,challengeId,payload,event_sha256,serverNow]});\n if(fault===\"BEFORE_COMMIT\")throw new Error(\"INJECT_BEFORE_OUTCOME_COMMIT\");\n await tx.commit(); committed=true;\n if(fault===\"AFTER_COMMIT_RESPONSE_LOST\")throw new Error(\"INJECT_AFTER_OUTCOME_COMMIT_RESPONSE_LOST\");\n return {ok:true,fresh:true,state:\"ACCEPTED\",execution_admission_sha256:v.execution_admission_sha256,observation_receipt_sha256:v.observation_receipt_sha256,provider_trace_id:String(input.trace.trace_id),p_real_increment:0,independent_review_admission:false,authority:false};\n }catch(e){\n if(tx&&!committed){try{await tx.rollback()}catch{}}\n if(committed) throw e;\n const row:any=await readAfterClientError(challengeId);\n if(row?.state===\"ACCEPTED\"&&String(row.execution_admission_sha256)===v.execution_admission_sha256)return {ok:true,fresh:false,reconciled_after_error:true,state:\"ACCEPTED\",execution_admission_sha256:v.execution_admission_sha256,observation_receipt_sha256:v.observation_receipt_sha256};\n return fail(\"ADJUDICATION_TRANSACTION_ERROR\",{detail:String((e as any)?.message??e)});\n }\n}\nexport async function consumeShadowPopulationAdmission(challengeId:string, serverNow:string){\n await initShadow(); const d:any=db(); let tx:any=null;\n try{\n tx=await d.transaction(\"write\");\n const rr:any=await tx.execute({sql:`SELECT state,execution_admission_sha256,population_consumed FROM ${C} WHERE challenge_id=?`,args:[challengeId]});\n const row:any=rr.rows?.[0]; if(!row||String(row.state)!==\"ACCEPTED\"){await tx.rollback();return fail(\"NOT_ACCEPTED\")}\n if(Number(row.population_consumed)===1){\n await tx.rollback();\n const p:any=await d.execute({sql:`SELECT * FROM ${P} WHERE challenge_id=?`,args:[challengeId]});\n return {ok:true,fresh:false,shadow_increment:0,existing:p.rows?.[0]??null};\n }\n const ins:any=await tx.execute({sql:`INSERT INTO ${P}(challenge_id,execution_admission_sha256,shadow_increment,created_at) VALUES(?,?,1,?) RETURNING challenge_id`,args:[challengeId,String(row.execution_admission_sha256),serverNow]});\n if((ins.rows||[]).length!==1){await tx.rollback();return fail(\"POPULATION_UNIQUE_INSERT_FAILED\")}\n const up:any=await tx.execute({sql:`UPDATE ${C} SET population_consumed=1 WHERE challenge_id=? AND population_consumed=0 RETURNING challenge_id`,args:[challengeId]});\n if((up.rows||[]).length!==1){await tx.rollback();return fail(\"POPULATION_CAS_LOST\")}\n await tx.commit();\n return {ok:true,fresh:true,shadow_increment:1,canonical_p_real_increment:0};\n }catch(e){if(tx){try{await tx.rollback()}catch{}}return fail(\"POPULATION_TX_ERROR\",{detail:String((e as any)?.message??e)})}\n}\nexport async function shadowCounts(){\n await initShadow(); const d=db();\n const r:any=await d.execute(`SELECT\n (SELECT COUNT(*) FROM ${C}) challenges,\n (SELECT COUNT(*) FROM ${C} WHERE state='CLAIMED') claimed,\n (SELECT COUNT(*) FROM ${C} WHERE state='ACCEPTED') accepted,\n (SELECT COUNT(*) FROM ${C} WHERE state='BURNED') burned,\n (SELECT COUNT(*) FROM ${E}) events,\n (SELECT COUNT(*) FROM ${E} WHERE type='CHALLENGE_CLAIMED') claim_events,\n (SELECT COUNT(*) FROM ${E} WHERE type='CHALLENGE_ACCEPTED') accept_events,\n (SELECT COUNT(*) FROM ${P}) population_rows,\n (SELECT COALESCE(SUM(shadow_increment),0) FROM ${P}) shadow_population_sum`);\n return r.rows?.[0]??null;\n}\n","createdAt",["D",1788988552531],"branchVersion","branchId","be198ed3-293b-4188-b8e2-2114e930f807","id","b206a410-2b1f-457a-8c4d-38a628a1b8e3","brain-host-provenance-probe-20260908",["D",1788984050291],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Nonproduction first-superhero shadow evidence","imageUrl","6be0fc5c-1fef-4bd6-a1e1-67a3f8c0764e","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0715b-703f-741f-ab35-c85020e4a5e0","tursoName","b206a4102b1f457a8c4d38a628a1b8e3","tursoHostname","b206a4102b1f457a8c4d38a628a1b8e3-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789512647429],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_98":97,"_106":102},"org",{"_98":97,"_99":100,"_101":102,"_18":55,"_103":104,"_105":25},"branch",{"_13":87,"_32":88,"_43":42,"_89":44,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":45,"_96":97},"isOwned",18,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","mosadek","handle","displayName","Mo Sadek","avatar","https://lh3.googleusercontent.com/a/ACg8ocL1eT_LHhKSg5px3nXIO6eez79aZXef466qXKh2gak-0iwrvw=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":213,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":214,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":215,"_82":216,"_84":217,"_86":25},"tree",[188,189,190,191,192,193],"files",[188,189,190,191,192,193],"counts",{"_178":61,"_179":143,"_180":61,"_181":182,"_183":184},"contents",[129,130,131,132,133,134],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":172,"_32":173,"_30":174,"_138":-5,"_41":42,"_40":143,"_140":141,"_38":175,"_13":61,"_33":20,"_35":176,"_24":25,"_145":-5,"_27":177},{"_43":168,"_32":28,"_30":31,"_138":-5,"_41":42,"_40":14,"_140":25,"_38":169,"_13":170,"_33":34,"_35":37,"_24":25,"_145":-5,"_27":171},{"_43":161,"_32":162,"_30":163,"_138":-5,"_41":42,"_40":164,"_140":141,"_38":165,"_13":61,"_33":34,"_35":166,"_24":25,"_145":-5,"_27":167},{"_43":154,"_32":155,"_30":156,"_138":-5,"_41":42,"_40":157,"_140":141,"_38":158,"_13":61,"_33":34,"_35":159,"_24":25,"_145":-5,"_27":160},{"_43":147,"_32":148,"_30":149,"_138":-5,"_41":42,"_40":150,"_140":141,"_38":151,"_13":61,"_33":34,"_35":152,"_24":25,"_145":-5,"_27":153},{"_43":135,"_32":136,"_30":137,"_138":-5,"_41":42,"_40":139,"_140":141,"_38":142,"_13":143,"_33":34,"_35":144,"_24":25,"_145":-5,"_27":146},"8e1b54a4-0e9f-4847-b6cf-ada751913848","asu_challenge_v1_test.ts","badf5b32-ac92-11f1-b2fe-1607ee4eb77e","parentId",6,"latest",true,["D",1788988175747],1,"// CANDIDATE_ONLY_NO_AUTHORITY\nimport {\n PROJECT, FINAL_TASK, canon, resetShadow, issueChallenge, claimChallenge, burnClaimed,\n adjudicateChallenge, consumeShadowPopulationAdmission, getChallenge, shadowCounts\n} from \"./asu_challenge_v1.ts\";\n\nconst H=(c:string)=>c.repeat(64);\nconst T0=\"2026-09-09T21:10:00.000Z\";\nconst T1=\"2026-09-09T21:10:01.000Z\";\nconst T2=\"2026-09-09T21:10:02.000Z\";\nconst T3=\"2026-09-09T21:10:03.000Z\";\nconst T6=\"2026-09-09T21:16:00.000Z\";\nconst BASE_TARGET_CONTEXT=\"f503d10e0a8b8e7755e6ee58ca79f13d5658c4148324cc41d3761245ccad992c\";\nconst cases:any[]=[];\nfunction assert(c:any,msg:string){if(!c)throw new Error(msg)}\nasync function tc(name:string,fn:()=>Promise){\n try{await fn();cases.push({name,pass:true})}\n catch(e){cases.push({name,pass:false,error:String((e as any)?.message??e)})}\n}\nfunction baseIssue(suffix=\"x\"){\n return {\n candidate_id:\"VAL_NATIVE_GENERIC_JIT_CONTROLLER_V1R1\",\n qualifying_run_id:\"qualifying-run-\"+suffix,\n execution_request_id:\"execution-request-\"+suffix+\"-0123456789\",\n finalizer_file_id:\"finalizer-file-1\",\n finalizer_branch_id:\"main-branch-id\",\n finalizer_version:7,\n finalizer_val_type:\"script\",\n finalizer_source_sha256:H(\"a\"),\n input_bundle_sha256:H(\"b\"),\n source_freeze_verified:true,\n source_frozen_at:T0,\n source_freeze_receipt_sha256:H(\"c\"),\n issued_at:T0,\n expires_at:\"2026-09-09T21:15:00.000Z\",\n final_target_context_sha256:BASE_TARGET_CONTEXT\n };\n}\nfunction claimReq(issue:any){\n return {\n challenge_id:issue.challenge_id,project:PROJECT,task_id:FINAL_TASK,\n candidate_id:issue.immutable.candidate_id,qualifying_run_id:issue.immutable.qualifying_run_id,\n execution_request_id:issue.immutable.execution_request_id,\n finalizer_source_sha256:issue.immutable.finalizer_source_sha256,\n input_bundle_sha256:issue.immutable.input_bundle_sha256,\n challenge_sha256:issue.challenge_sha256\n };\n}\nasync function freshClaimed(suffix=\"x\"){\n await resetShadow();\n const issue:any=await issueChallenge(baseIssue(suffix),T0); assert(issue.ok,\"issue failed \"+JSON.stringify(issue));\n const req=claimReq(issue);\n const claim:any=await claimChallenge(req,T1); assert(claim.ok&&claim.fresh===true,\"claim failed \"+JSON.stringify(claim));\n return {issue,req,claim};\n}\nfunction finalFence(){return {\n execution_allowed:false,prevent_self_review:true,self_certification_forbidden:true,\n physical_chat_execution_distinctness_required:true,reviewer_must_be_physically_distinct:true,\n do_not_infer_distinctness_from_agent_id:true\n}}\nfunction resultObj(x:any,over:any={}){\n return {\n schema:\"FIRST_SUPERHERO_ATOMIC_CHALLENGE_ADJUDICATOR_RESULT_V1\",\n project:PROJECT,task_id:FINAL_TASK,\n candidate_id:x.issue.immutable.candidate_id,\n qualifying_run_id:x.issue.immutable.qualifying_run_id,\n execution_request_id:x.issue.immutable.execution_request_id,\n challenge_sha256:x.issue.challenge_sha256,\n claim_receipt_sha256:x.claim.claim_receipt_sha256,\n finalizer_source_sha256:x.issue.immutable.finalizer_source_sha256,\n finalizer_version:x.issue.immutable.finalizer_version,\n input_bundle_sha256:x.issue.immutable.input_bundle_sha256,\n consumed_input_bundle_sha256:x.issue.immutable.input_bundle_sha256,\n candidate_only:true,authority:false,independent_review_claimed:false,p_real_increment:0,\n human_authority_approval:false,verdict:\"QUALIFYING_RESULT_PASS\",...over\n };\n}\nfunction adjudication(x:any,traceId=\"trace-good-1\",over:any={}){\n const r=resultObj(x,over.result||{});\n const trace={\n evidence_origin:\"VAL_PROVIDER_API_LIVE_QUERY\",provider_telemetry_direct_query:true,\n trace_id:traceId,trace_status_ok:true,stdout_trace_id:traceId,stdout_log_count:1,\n file_id:x.issue.immutable.finalizer_file_id,branch_id:x.issue.immutable.finalizer_branch_id,\n version:x.issue.immutable.finalizer_version,val_type:x.issue.immutable.finalizer_val_type,\n source_sha256:x.issue.immutable.finalizer_source_sha256,\n trace_start:\"2026-09-09T21:10:01.100Z\",trace_end:\"2026-09-09T21:10:01.900Z\",\n stdout:canon(r),\n provider_query_id:\"query-12345678\",provider_query_request_sha256:H(\"d\"),provider_query_response_sha256:H(\"e\"),\n ...(over.trace||{})\n };\n return {\n challenge_id:x.issue.challenge_id,claim_receipt_sha256:x.claim.claim_receipt_sha256,\n observed_at:over.observed_at||T2,\n trace,\n current_source:{branch_id:x.issue.immutable.finalizer_branch_id,version:x.issue.immutable.finalizer_version,\n source_sha256:x.issue.immutable.finalizer_source_sha256,\n source_freeze_receipt_sha256:x.issue.immutable.source_freeze_receipt_sha256,...(over.current_source||{})},\n freshness:{superseded:false,do_not_consume:false,newer_falsification:false,identity_mismatch:false,...(over.freshness||{})},\n final_target_fence:{...finalFence(),...(over.final_target_fence||{})},\n ...(over.extra_top||{})\n };\n}\n\nawait tc(\"two_simultaneous_claims_exactly_one_fresh\",async()=>{\n await resetShadow(); const issue:any=await issueChallenge(baseIssue(\"two\"),T0);const req=claimReq(issue);\n const rs=await Promise.all([claimChallenge(req,T1),claimChallenge(req,T1)]);\n assert(rs.filter((x:any)=>x.ok&&x.fresh===true).length===1,\"not exactly one fresh \"+JSON.stringify(rs));\n const c:any=await shadowCounts();assert(Number(c.claim_events)===1&&Number(c.claimed)===1,\"duplicate claim event \"+JSON.stringify(c));\n});\nawait tc(\"n_way_claims_exactly_one_canonical_claim\",async()=>{\n await resetShadow(); const issue:any=await issueChallenge(baseIssue(\"nway\"),T0);const req=claimReq(issue);\n const rs=await Promise.all(Array.from({length:16},()=>claimChallenge(req,T1)));\n assert(rs.filter((x:any)=>x.ok&&x.fresh===true).length<=1,\"more than one fresh\");\n const row:any=await getChallenge(issue.challenge_id), c:any=await shadowCounts();\n assert(row.state===\"CLAIMED\"&&Number(c.claim_events)===1,\"canonical uniqueness failed \"+JSON.stringify({rs,c}));\n});\nawait tc(\"claim_replay_idempotent_nonmultiplicative\",async()=>{\n const x=await freshClaimed(\"replay\"); const r:any=await claimChallenge(x.req,T2);\n assert(r.ok&&r.fresh===false&&r.claim_receipt_sha256===x.claim.claim_receipt_sha256,\"claim replay not idempotent\");\n const c:any=await shadowCounts();assert(Number(c.claim_events)===1,\"claim replay added event\");\n});\nfor(const field of [\"task_id\",\"candidate_id\",\"qualifying_run_id\",\"execution_request_id\",\"finalizer_source_sha256\",\"input_bundle_sha256\",\"challenge_sha256\"]){\n await tc(\"wrong_claim_binding_\"+field,async()=>{\n await resetShadow(); const issue:any=await issueChallenge(baseIssue(\"wrong-\"+field),T0);const req:any=claimReq(issue);\n req[field]=field.includes(\"sha256\")?H(\"f\"):\"WRONG-\"+String(req[field]);\n const r:any=await claimChallenge(req,T1);assert(!r.ok&&r.reason===\"CLAIM_BINDING_MISMATCH\",\"wrong binding passed \"+field+\" \"+JSON.stringify(r));\n const row:any=await getChallenge(issue.challenge_id);assert(row.state===\"FRESH\",\"wrong binding mutated state\");\n });\n}\nawait tc(\"direct_nonprovider_claim_can_only_burn_without_positive_trace\",async()=>{\n const x=await freshClaimed(\"attacker\");const b:any=await burnClaimed(x.issue.challenge_id,\"DIRECT_CALLER_NO_PROVIDER_TRACE\",T2);\n assert(b.ok&&b.burned===true,\"burn failed\");const row:any=await getChallenge(x.issue.challenge_id);assert(row.state===\"BURNED\",\"not burned\");\n});\nawait tc(\"crash_before_claim_commit_rolls_back_to_fresh\",async()=>{\n await resetShadow();const issue:any=await issueChallenge(baseIssue(\"cbcc\"),T0);const req=claimReq(issue);\n const r:any=await claimChallenge(req,T1,\"BEFORE_COMMIT\");assert(!r.ok,\"fault should fail response\");\n const row:any=await getChallenge(issue.challenge_id);assert(row.state===\"FRESH\",\"precommit crash did not rollback \"+row.state);\n const retry:any=await claimChallenge(req,T2);assert(retry.ok&&retry.fresh===true,\"retry after rollback failed\");\n});\nawait tc(\"crash_after_claim_commit_burns_no_retry\",async()=>{\n await resetShadow();const issue:any=await issueChallenge(baseIssue(\"cacc\"),T0);const req=claimReq(issue);\n try{await claimChallenge(req,T1,\"AFTER_COMMIT_RESPONSE_LOST\")}catch{}\n let row:any=await getChallenge(issue.challenge_id);assert(row.state===\"CLAIMED\",\"claim not durably claimed\");\n await burnClaimed(issue.challenge_id,\"UNKNOWN_AFTER_CLAIM\",T2);row=await getChallenge(issue.challenge_id);assert(row.state===\"BURNED\",\"unknown not burned\");\n const retry:any=await claimChallenge(req,T3);assert(!retry.ok&&retry.reason===\"CHALLENGE_BURNED\",\"burned challenge retried\");\n});\nawait tc(\"stale_fresh_challenge_is_burned\",async()=>{\n await resetShadow();const issue:any=await issueChallenge(baseIssue(\"stale\"),T0);const r:any=await claimChallenge(claimReq(issue),T6);\n assert(!r.ok&&r.reason===\"CHALLENGE_EXPIRED_BURNED\",\"stale claim not burned \"+JSON.stringify(r));\n const row:any=await getChallenge(issue.challenge_id);assert(row.state===\"BURNED\",\"stale row not burned\");\n});\nawait tc(\"execution_request_unique_across_challenges\",async()=>{\n await resetShadow();const b=baseIssue(\"uniq\");const a:any=await issueChallenge(b,T0);assert(a.ok,\"first issue fail\");\n const second:any=await issueChallenge({...b},T0);assert(!second.ok&&second.reason===\"ISSUE_CONFLICT\",\"duplicate execution request allowed\");\n});\nawait tc(\"bad_ttl_rejected_at_issue\",async()=>{\n await resetShadow();const b=baseIssue(\"ttl\");b.expires_at=\"2026-09-09T21:25:00.000Z\";const r:any=await issueChallenge(b,T0);\n assert(!r.ok&&r.reason===\"BAD_TTL\",\"oversized ttl accepted\");\n});\nawait tc(\"positive_exact_provider_trace_passes_without_global_enumeration\",async()=>{\n const x=await freshClaimed(\"pass\");const r:any=await adjudicateChallenge(adjudication(x),T2);\n assert(r.ok&&r.fresh===true&&r.p_real_increment===0&&r.authority===false,\"positive failed \"+JSON.stringify(r));\n const row:any=await getChallenge(x.issue.challenge_id);assert(row.state===\"ACCEPTED\",\"not accepted\");\n});\nawait tc(\"one_positive_trace_with_unrelated_extra_traces_passes\",async()=>{\n const x=await freshClaimed(\"extras\");const i:any=adjudication(x,\"trace-main\",{extra_top:{provider_listing:{truncated:true,claimed_complete:false,extra_trace_ids:[\"x\",\"y\",\"z\"]}}});\n const r:any=await adjudicateChallenge(i,T2);assert(r.ok,\"unrelated traces incorrectly require enumeration \"+JSON.stringify(r));\n});\nawait tc(\"truncated_or_lying_provider_listing_not_used_for_uniqueness\",async()=>{\n const x=await freshClaimed(\"trunc\");const i:any=adjudication(x,\"trace-exact\",{extra_top:{provider_listing:{truncated:false,advertised_complete:true,known_omissions:[\"old-trace\"]}}});\n const r:any=await adjudicateChallenge(i,T2);assert(r.ok,\"enumeration dependency remained \"+JSON.stringify(r));\n});\nawait tc(\"forged_claim_receipt_rejected_without_mutating_claim\",async()=>{\n const x=await freshClaimed(\"forgeclaim\");const i:any=adjudication(x);i.claim_receipt_sha256=H(\"f\");\n const r:any=await adjudicateChallenge(i,T2);assert(!r.ok&&r.reason===\"FORGED_OR_WRONG_CLAIM_RECEIPT\",\"forged claim passed\");\n const row:any=await getChallenge(x.issue.challenge_id);assert(row.state===\"CLAIMED\",\"forged claim should not alter canonical claim\");\n});\nawait tc(\"forged_provider_trace_burns_claim\",async()=>{\n const x=await freshClaimed(\"forgetrace\");const i:any=adjudication(x,\"trace-fake\",{trace:{evidence_origin:\"SELF_ASSERTED\"}});\n const r:any=await adjudicateChallenge(i,T2);assert(!r.ok&&r.reason===\"MISSING_POSITIVE_PROVIDER_TRACE\",\"forged trace passed\");\n const row:any=await getChallenge(x.issue.challenge_id);assert(row.state===\"BURNED\",\"invalid positive evidence not burned\");\n});\nawait tc(\"source_mutation_after_freeze_burns\",async()=>{\n const x=await freshClaimed(\"source\");const i:any=adjudication(x,\"trace-source\",{current_source:{source_sha256:H(\"f\")}});\n const r:any=await adjudicateChallenge(i,T2);assert(!r.ok&&r.reason===\"SOURCE_CHANGED_OR_WRONG\",\"source mutation passed\");\n const row:any=await getChallenge(x.issue.challenge_id);assert(row.state===\"BURNED\",\"source mutation not terminal\");\n});\nawait tc(\"noncanonical_stdout_burns\",async()=>{\n const x=await freshClaimed(\"noncanon\");const i:any=adjudication(x);i.trace.stdout=\" \"+i.trace.stdout;\n const r:any=await adjudicateChallenge(i,T2);assert(!r.ok&&r.reason===\"NONCANONICAL_PROVIDER_STDOUT\",\"noncanonical stdout passed\");\n});\nawait tc(\"duplicate_json_key_stdout_burns\",async()=>{\n const x=await freshClaimed(\"dupkey\");const i:any=adjudication(x);const obj=resultObj(x);\n i.trace.stdout=canon(obj).replace('{\"authority\":false','{\"authority\":false,\"authority\":false');\n const r:any=await adjudicateChallenge(i,T2);assert(!r.ok&&r.reason===\"NONCANONICAL_PROVIDER_STDOUT\",\"duplicate key passed \"+JSON.stringify(r));\n});\nawait tc(\"self_promotion_fields_rejected\",async()=>{\n const x=await freshClaimed(\"promote\");const i:any=adjudication(x,\"trace-p\",{result:{p_real_increment:1}});\n const r:any=await adjudicateChallenge(i,T2);assert(!r.ok&&r.reason===\"SELF_PROMOTION_OR_REVIEW_CONFLATION\",\"self promotion passed\");\n});\nawait tc(\"cross_candidate_or_run_rejected\",async()=>{\n const x=await freshClaimed(\"cross\");const i:any=adjudication(x,\"trace-cross\",{result:{qualifying_run_id:\"other-run\"}});\n const r:any=await adjudicateChallenge(i,T2);assert(!r.ok&&r.reason===\"CROSS_CONTROLLER_OR_RUN\",\"cross run passed\");\n});\nawait tc(\"freshness_fence_rejects_newer_falsification\",async()=>{\n const x=await freshClaimed(\"fresh\");const i:any=adjudication(x,\"trace-fresh\",{freshness:{newer_falsification:true}});\n const r:any=await adjudicateChallenge(i,T2);assert(!r.ok&&r.reason===\"FRESHNESS_FENCE_REJECT\",\"newer falsification ignored\");\n});\nawait tc(\"machine_self_review_fence_must_remain_closed\",async()=>{\n const x=await freshClaimed(\"fence\");const i:any=adjudication(x,\"trace-fence\",{final_target_fence:{execution_allowed:true}});\n const r:any=await adjudicateChallenge(i,T2);assert(!r.ok&&r.reason===\"FINAL_SELF_REVIEW_FENCE_NOT_PRESERVED\",\"open final task accepted\");\n});\nawait tc(\"trace_outside_challenge_window_rejected\",async()=>{\n const x=await freshClaimed(\"time\");const i:any=adjudication(x,\"trace-time\",{trace:{trace_end:\"2026-09-09T21:15:01.000Z\"}});\n const r:any=await adjudicateChallenge(i,T2);assert(!r.ok&&r.reason===\"TRACE_TIME_BINDING_FAIL\",\"late trace passed\");\n});\nawait tc(\"crash_before_adjudicator_outcome_commit_burns_on_recovery\",async()=>{\n const x=await freshClaimed(\"adjb\");const i:any=adjudication(x);const r:any=await adjudicateChallenge(i,T2,\"BEFORE_COMMIT\");\n assert(!r.ok,\"precommit adjudication fault should fail\");let row:any=await getChallenge(x.issue.challenge_id);assert(row.state===\"CLAIMED\",\"adjudication precommit did not rollback\");\n await burnClaimed(x.issue.challenge_id,\"UNKNOWN_ADJUDICATOR_OUTCOME\",T3);row=await getChallenge(x.issue.challenge_id);assert(row.state===\"BURNED\",\"unknown outcome not burned\");\n});\nawait tc(\"crash_after_adjudicator_commit_is_idempotently_recoverable\",async()=>{\n const x=await freshClaimed(\"adja\");const i:any=adjudication(x);\n try{await adjudicateChallenge(i,T2,\"AFTER_COMMIT_RESPONSE_LOST\")}catch{}\n let row:any=await getChallenge(x.issue.challenge_id);assert(row.state===\"ACCEPTED\",\"accepted commit lost\");\n const r:any=await adjudicateChallenge(i,T3);assert(r.ok&&r.fresh===false,\"accepted reread not idempotent \"+JSON.stringify(r));\n});\nawait tc(\"duplicate_provider_execution_cannot_replace_accepted_trace\",async()=>{\n const x=await freshClaimed(\"duptrace\");const a:any=adjudication(x,\"trace-A\");const p:any=await adjudicateChallenge(a,T2);assert(p.ok,\"first trace fail\");\n const b:any=adjudication(x,\"trace-B\");const r:any=await adjudicateChallenge(b,T3);assert(!r.ok&&r.reason===\"ACCEPTED_CHALLENGE_DIFFERENT_EXECUTION\",\"second trace replaced accepted\");\n const row:any=await getChallenge(x.issue.challenge_id);assert(row.accepted_trace_id===\"trace-A\",\"accepted trace changed\");\n});\nawait tc(\"exact_execution_reread_different_observed_at_nonmultiplicative\",async()=>{\n const x=await freshClaimed(\"reread\");const i:any=adjudication(x,\"trace-R\");const a:any=await adjudicateChallenge(i,T2);assert(a.ok&&a.fresh,\"first accept failed\");\n const j:any=adjudication(x,\"trace-R\",{observed_at:T3});const b:any=await adjudicateChallenge(j,T3);\n assert(b.ok&&b.fresh===false&&b.execution_admission_sha256===a.execution_admission_sha256,\"stable replay identity changed\");\n assert(b.observation_receipt_sha256!==a.observation_receipt_sha256,\"observation receipt failed to bind observed_at\");\n const c:any=await shadowCounts();assert(Number(c.accept_events)===1,\"reread added acceptance event\");\n});\nawait tc(\"population_shadow_gate_increments_at_most_once\",async()=>{\n const x=await freshClaimed(\"pop\");const a:any=await adjudicateChallenge(adjudication(x),T2);assert(a.ok,\"accept fail\");\n const p1:any=await consumeShadowPopulationAdmission(x.issue.challenge_id,T2);\n const p2:any=await consumeShadowPopulationAdmission(x.issue.challenge_id,T3);\n assert(p1.ok&&p1.fresh===true&&p1.shadow_increment===1,\"first shadow increment fail\");\n assert(p2.ok&&p2.fresh===false&&p2.shadow_increment===0,\"second increment not fenced\");\n const c:any=await shadowCounts();assert(Number(c.population_rows)===1&&Number(c.shadow_population_sum)===1,\"population duplicated \"+JSON.stringify(c));\n});\nawait tc(\"n_way_population_attempts_still_one_unique_transition\",async()=>{\n const x=await freshClaimed(\"popn\");const a:any=await adjudicateChallenge(adjudication(x),T2);assert(a.ok,\"accept fail\");\n await Promise.all(Array.from({length:12},()=>consumeShadowPopulationAdmission(x.issue.challenge_id,T3)));\n const c:any=await shadowCounts();assert(Number(c.population_rows)===1&&Number(c.shadow_population_sum)===1,\"n-way population duplicated \"+JSON.stringify(c));\n});\nawait tc(\"no_population_transition_from_claimed_only\",async()=>{\n const x=await freshClaimed(\"nopop\");const p:any=await consumeShadowPopulationAdmission(x.issue.challenge_id,T2);\n assert(!p.ok&&p.reason===\"NOT_ACCEPTED\",\"claimed-only population allowed\");\n});\nawait tc(\"canonical_p_real_never_incremented_by_candidate\",async()=>{\n const x=await freshClaimed(\"pzero\");const a:any=await adjudicateChallenge(adjudication(x),T2);assert(a.ok&&a.p_real_increment===0,\"adjudicator p_real nonzero\");\n const p:any=await consumeShadowPopulationAdmission(x.issue.challenge_id,T3);assert(p.canonical_p_real_increment===0,\"shadow path claimed canonical p_real\");\n});\n\nconst failed=cases.filter(x=>!x.pass);\nconst report={\n schema:\"ATOMIC_SINGLE_USE_ADJUDICATION_CHALLENGE_TEST_REPORT_V1\",\n classification:\"CANDIDATE_NONAUTHORITY_SHADOW_REAL_VAL_SQLITE\",\n project:\"mosadek/brain-host-provenance-probe-20260908\",\n source:\"asu_challenge_v1.ts\",\n tests:cases.length,passed:cases.length-failed.length,failed:failed.length,cases,\n verdict:failed.length===0?\"PASS_ATOMIC_CHALLENGE_CANDIDATE_TESTS\":\"REJECT_ATOMIC_CHALLENGE_CANDIDATE\",\n actual_val_scoped_sqlite:true,concurrency_tested:true,crash_injection_tested:true,\n complete_provider_window_enumeration_required:false,\n one_positive_exact_provider_trace_required:true,\n p_real_increment:0,independent_review_claimed:false,human_authority_approval:false,direct_sprites_calls:0\n};\nconsole.log(JSON.stringify(report,null,2));\nif(failed.length)throw new Error(\"TEST_FAILURES=\"+failed.length);\nexport default report;\n","label",[136],"f758dd37-61a2-4dac-8831-5fedb87b430f","asu_challenge_v1_tail.ts","0a81d296-ac93-11f1-b528-1607ee4eb77e",7,["D",1788988296151],"import {PROJECT,FINAL_TASK,canon,resetShadow,issueChallenge,claimChallenge,adjudicateChallenge,consumeShadowPopulationAdmission,getChallenge,shadowCounts} from \"./asu_challenge_v1.ts\";\nconst H=(c:string)=>c.repeat(64),T0=\"2026-09-09T21:20:00.000Z\",T1=\"2026-09-09T21:20:01.000Z\",T2=\"2026-09-09T21:20:02.000Z\",T3=\"2026-09-09T21:20:03.000Z\";\nconst CTX=\"f503d10e0a8b8e7755e6ee58ca79f13d5658c4148324cc41d3761245ccad992c\";\nconst cases:any[]=[];function assert(c:any,m:string){if(!c)throw new Error(m)}async function tc(n:string,f:()=>Promise){try{await f();cases.push({name:n,pass:true})}catch(e){cases.push({name:n,pass:false,error:String((e as any)?.message??e)})}}\nfunction base(s:string){return{candidate_id:\"VAL_NATIVE_GENERIC_JIT_CONTROLLER_V1R1\",qualifying_run_id:\"run-\"+s,execution_request_id:\"exec-\"+s+\"-0123456789012345\",finalizer_file_id:\"finalizer-file-1\",finalizer_branch_id:\"main-branch-id\",finalizer_version:7,finalizer_val_type:\"script\",finalizer_source_sha256:H(\"a\"),input_bundle_sha256:H(\"b\"),source_freeze_verified:true,source_frozen_at:T0,source_freeze_receipt_sha256:H(\"c\"),issued_at:T0,expires_at:\"2026-09-09T21:25:00.000Z\",final_target_context_sha256:CTX}}\nfunction req(i:any){return{challenge_id:i.challenge_id,project:PROJECT,task_id:FINAL_TASK,candidate_id:i.immutable.candidate_id,qualifying_run_id:i.immutable.qualifying_run_id,execution_request_id:i.immutable.execution_request_id,finalizer_source_sha256:i.immutable.finalizer_source_sha256,input_bundle_sha256:i.immutable.input_bundle_sha256,challenge_sha256:i.challenge_sha256}}\nasync function fresh(s:string){await resetShadow();const i:any=await issueChallenge(base(s),T0);assert(i.ok,\"issue\");const c:any=await claimChallenge(req(i),T1);assert(c.ok&&c.fresh,\"claim\");return{issue:i,claim:c}}\nfunction fence(){return{execution_allowed:false,prevent_self_review:true,self_certification_forbidden:true,physical_chat_execution_distinctness_required:true,reviewer_must_be_physically_distinct:true,do_not_infer_distinctness_from_agent_id:true}}\nfunction input(x:any,trace=\"trace-1\",observed=T2){const r={schema:\"FIRST_SUPERHERO_ATOMIC_CHALLENGE_ADJUDICATOR_RESULT_V1\",project:PROJECT,task_id:FINAL_TASK,candidate_id:x.issue.immutable.candidate_id,qualifying_run_id:x.issue.immutable.qualifying_run_id,execution_request_id:x.issue.immutable.execution_request_id,challenge_sha256:x.issue.challenge_sha256,claim_receipt_sha256:x.claim.claim_receipt_sha256,finalizer_source_sha256:x.issue.immutable.finalizer_source_sha256,finalizer_version:x.issue.immutable.finalizer_version,input_bundle_sha256:x.issue.immutable.input_bundle_sha256,consumed_input_bundle_sha256:x.issue.immutable.input_bundle_sha256,candidate_only:true,authority:false,independent_review_claimed:false,p_real_increment:0,human_authority_approval:false,verdict:\"PASS\"};return{challenge_id:x.issue.challenge_id,claim_receipt_sha256:x.claim.claim_receipt_sha256,observed_at:observed,trace:{evidence_origin:\"VAL_PROVIDER_API_LIVE_QUERY\",provider_telemetry_direct_query:true,trace_id:trace,trace_status_ok:true,stdout_trace_id:trace,stdout_log_count:1,file_id:x.issue.immutable.finalizer_file_id,branch_id:x.issue.immutable.finalizer_branch_id,version:x.issue.immutable.finalizer_version,val_type:x.issue.immutable.finalizer_val_type,source_sha256:x.issue.immutable.finalizer_source_sha256,trace_start:\"2026-09-09T21:20:01.100Z\",trace_end:\"2026-09-09T21:20:01.900Z\",stdout:canon(r),provider_query_id:\"query-12345678\",provider_query_request_sha256:H(\"d\"),provider_query_response_sha256:H(\"e\")},current_source:{branch_id:x.issue.immutable.finalizer_branch_id,version:x.issue.immutable.finalizer_version,source_sha256:x.issue.immutable.finalizer_source_sha256,source_freeze_receipt_sha256:x.issue.immutable.source_freeze_receipt_sha256},freshness:{superseded:false,do_not_consume:false,newer_falsification:false,identity_mismatch:false},final_target_fence:fence()}}\nawait tc(\"duplicate_provider_execution_cannot_replace_accepted_trace\",async()=>{const x=await fresh(\"duptrace\");const a:any=await adjudicateChallenge(input(x,\"trace-A\"),T2);assert(a.ok,\"first\");const b:any=await adjudicateChallenge(input(x,\"trace-B\"),T3);assert(!b.ok&&b.reason===\"ACCEPTED_CHALLENGE_DIFFERENT_EXECUTION\",\"second replaced\");const row:any=await getChallenge(x.issue.challenge_id);assert(row.accepted_trace_id===\"trace-A\",\"trace changed\")});\nawait tc(\"exact_execution_reread_different_observed_at_nonmultiplicative\",async()=>{const x=await fresh(\"reread\");const a:any=await adjudicateChallenge(input(x,\"trace-R\",T2),T2);assert(a.ok&&a.fresh,\"first\");const b:any=await adjudicateChallenge(input(x,\"trace-R\",T3),T3);assert(b.ok&&b.fresh===false&&b.execution_admission_sha256===a.execution_admission_sha256,\"identity changed\");assert(b.observation_receipt_sha256!==a.observation_receipt_sha256,\"observation not rebound\");const c:any=await shadowCounts();assert(Number(c.accept_events)===1,\"multiplicative\")});\nawait tc(\"population_shadow_gate_increments_at_most_once\",async()=>{const x=await fresh(\"pop\");assert((await adjudicateChallenge(input(x),T2) as any).ok,\"accept\");const p1:any=await consumeShadowPopulationAdmission(x.issue.challenge_id,T2),p2:any=await consumeShadowPopulationAdmission(x.issue.challenge_id,T3);assert(p1.ok&&p1.fresh&&p1.shadow_increment===1,\"first\");assert(p2.ok&&!p2.fresh&&p2.shadow_increment===0,\"second\");const c:any=await shadowCounts();assert(Number(c.population_rows)===1&&Number(c.shadow_population_sum)===1,\"duplicate\")});\nawait tc(\"n_way_population_attempts_still_one_unique_transition\",async()=>{const x=await fresh(\"popn\");assert((await adjudicateChallenge(input(x),T2) as any).ok,\"accept\");await Promise.all(Array.from({length:8},()=>consumeShadowPopulationAdmission(x.issue.challenge_id,T3)));const c:any=await shadowCounts();assert(Number(c.population_rows)===1&&Number(c.shadow_population_sum)===1,\"nway duplicate\")});\nawait tc(\"no_population_transition_from_claimed_only\",async()=>{const x=await fresh(\"nopop\");const p:any=await consumeShadowPopulationAdmission(x.issue.challenge_id,T2);assert(!p.ok&&p.reason===\"NOT_ACCEPTED\",\"claimed allowed\")});\nawait tc(\"canonical_p_real_never_incremented_by_candidate\",async()=>{const x=await fresh(\"pzero\");const a:any=await adjudicateChallenge(input(x),T2);assert(a.ok&&a.p_real_increment===0,\"adjudicator p_real\");const p:any=await consumeShadowPopulationAdmission(x.issue.challenge_id,T3);assert(p.canonical_p_real_increment===0,\"shadow claimed p_real\")});\nconst failed=cases.filter(x=>!x.pass);console.log(JSON.stringify({schema:\"ATOMIC_SINGLE_USE_ADJUDICATION_CHALLENGE_TAIL_REPORT_V1\",tests:cases.length,passed:cases.length-failed.length,failed:failed.length,cases,verdict:failed.length?\"REJECT_OR_INVALID\":\"PASS_TAIL\",p_real_increment:0,human_authority_approval:false,independent_review_claimed:false},null,2));if(failed.length)throw new Error(\"TAIL_FAILURES=\"+failed.length);\n",[148],"8b8f694d-5c4a-4d1e-81ca-55ddc8fd77ee","asu_challenge_v1_ref_test.ts","3669f4ba-ac93-11f1-8fdf-1607ee4eb77e",9,["D",1788988369816],"import {canon} from \"./asu_challenge_v1.ts\";import {verifyAtomicChallengeBundle} from \"./asu_challenge_v1_ref.ts\";\nconst H=(c:string)=>c.repeat(64),PROJECT=\"mosadek/project-brain-live-v1-durable\",TASK=\"BRAIN-FIRST-SUPERHERO-SAME-IDENTITY-FINAL-ADJUDICATION-P0-V1-20260908\";\nconst imm={schema:\"FIRST_SUPERHERO_ATOMIC_SINGLE_USE_CHALLENGE_V1\",project:PROJECT,task_id:TASK,candidate_id:\"C1\",qualifying_run_id:\"R1\",execution_request_id:\"E1234567890123456\",finalizer_file_id:\"F1\",finalizer_branch_id:\"B1\",finalizer_version:7,finalizer_val_type:\"script\",finalizer_source_sha256:H(\"a\"),input_bundle_sha256:H(\"b\"),source_freeze_verified:true,source_frozen_at:\"2026-09-09T21:30:00.000Z\",source_freeze_receipt_sha256:H(\"c\"),issued_at:\"2026-09-09T21:30:00.000Z\",expires_at:\"2026-09-09T21:35:00.000Z\",final_target_context_sha256:H(\"d\")};\nconst row={challenge_id:\"CH1\",challenge_sha256:H(\"9\"),state:\"CLAIMED\",claim_event_uuid:\"EV1\",claim_receipt_sha256:H(\"8\")};\nfunction fence(){return{execution_allowed:false,prevent_self_review:true,self_certification_forbidden:true,physical_chat_execution_distinctness_required:true,reviewer_must_be_physically_distinct:true,do_not_infer_distinctness_from_agent_id:true}}\nfunction input(over:any={}){const result={schema:\"FIRST_SUPERHERO_ATOMIC_CHALLENGE_ADJUDICATOR_RESULT_V1\",project:PROJECT,task_id:TASK,candidate_id:\"C1\",qualifying_run_id:\"R1\",execution_request_id:\"E1234567890123456\",challenge_sha256:H(\"9\"),claim_receipt_sha256:H(\"8\"),finalizer_source_sha256:H(\"a\"),finalizer_version:7,input_bundle_sha256:H(\"b\"),consumed_input_bundle_sha256:H(\"b\"),candidate_only:true,authority:false,independent_review_claimed:false,p_real_increment:0,human_authority_approval:false,verdict:\"PASS\",...(over.result||{})};return{challenge_row:row,immutable:imm,claim_receipt_sha256:over.claim_receipt_sha256||H(\"8\"),observed_at:\"2026-09-09T21:31:02.000Z\",trace:{evidence_origin:\"VAL_PROVIDER_API_LIVE_QUERY\",provider_telemetry_direct_query:true,trace_id:\"T1\",trace_status_ok:true,stdout_trace_id:\"T1\",stdout_log_count:1,file_id:\"F1\",branch_id:\"B1\",version:7,val_type:\"script\",source_sha256:H(\"a\"),trace_start:\"2026-09-09T21:31:00.000Z\",trace_end:\"2026-09-09T21:31:01.000Z\",stdout:canon(result),provider_query_id:\"Q12345678\",provider_query_request_sha256:H(\"e\"),provider_query_response_sha256:H(\"f\"),...(over.trace||{})},current_source:{branch_id:\"B1\",version:7,source_sha256:H(\"a\"),source_freeze_receipt_sha256:H(\"c\"),...(over.current_source||{})},freshness:{superseded:false,do_not_consume:false,newer_falsification:false,identity_mismatch:false,...(over.freshness||{})},final_target_fence:{...fence(),...(over.fence||{})}}}\nconst tests:any[]=[];async function t(n:string,f:()=>Promise){let pass=false,detail=\"\";try{pass=await f()}catch(e){detail=String(e)}tests.push({name:n,pass,detail})}\nawait t(\"positive_without_global_enumeration\",async()=>{const r:any=await verifyAtomicChallengeBundle(input());return r.ok&&r.global_provider_enumeration_consulted===false});\nawait t(\"forged_claim_reject\",async()=>!(await verifyAtomicChallengeBundle(input({claim_receipt_sha256:H(\"7\")})) as any).ok);\nawait t(\"source_mutation_reject\",async()=>!(await verifyAtomicChallengeBundle(input({current_source:{source_sha256:H(\"7\")}})) as any).ok);\nawait t(\"open_self_review_fence_reject\",async()=>!(await verifyAtomicChallengeBundle(input({fence:{execution_allowed:true}})) as any).ok);\nawait t(\"noncanonical_stdout_reject\",async()=>{const i:any=input();i.trace.stdout=\" \"+i.trace.stdout;return !(await verifyAtomicChallengeBundle(i) as any).ok});\nawait t(\"self_promotion_reject\",async()=>!(await verifyAtomicChallengeBundle(input({result:{p_real_increment:1}})) as any).ok);\nconst failed=tests.filter(x=>!x.pass);console.log(JSON.stringify({schema:\"ASU_REFERENCE_VERIFIER_TEST_V1\",tests:tests.length,passed:tests.length-failed.length,failed:failed.length,cases:tests,verdict:failed.length?\"REJECT\":\"PASS\",p_real_increment:0,human_authority_approval:false,independent_review_claimed:false},null,2));if(failed.length)throw new Error(\"REF_TEST_FAIL\");\n",[155],"cfd12b96-c625-40b3-889c-4e714731a13b","asu_challenge_v1_ref.ts","25bf0f7e-ac93-11f1-9515-1607ee4eb77e",8,["D",1788988341850],"// CANDIDATE_ONLY_NO_AUTHORITY\n// Pure reference verifier for an already atomically CLAIMED single-use challenge.\n// It intentionally ignores provider-wide enumeration. Uniqueness comes from the canonical claim CAS.\nimport {PROJECT,FINAL_TASK,MAX_OBSERVATION_AGE_MS,canon,sha256Text} from \"./asu_challenge_v1.ts\";\n\nfunction fail(reason:string){return{ok:false,verdict:\"ATOMIC_CHALLENGE_REFERENCE_REJECT\",reason}}\nfunction exactKeys(x:any,keys:string[]){if(!x||typeof x!==\"object\"||Array.isArray(x))return false;const a=Object.keys(x).sort(),b=[...keys].sort();return a.length===b.length&&a.every((k,i)=>k===b[i])}\nfunction ms(x:any){return Date.parse(String(x??\"\"))}\nfunction fenceOk(f:any){return !!f&&f.execution_allowed===false&&f.prevent_self_review===true&&f.self_certification_forbidden===true&&f.physical_chat_execution_distinctness_required===true&&f.reviewer_must_be_physically_distinct===true&&f.do_not_infer_distinctness_from_agent_id===true}\nexport async function verifyAtomicChallengeBundle(i:any){\n const row=i?.challenge_row,imm=i?.immutable,trace=i?.trace,current=i?.current_source,fresh=i?.freshness,fence=i?.final_target_fence;\n if(!row||!imm||!trace||!current||!fresh||!fence)return fail(\"MISSING_INPUT\");\n if(row.state!==\"CLAIMED\"&&row.state!==\"ACCEPTED\")return fail(\"CHALLENGE_NOT_CLAIMED\");\n if(imm.schema!==\"FIRST_SUPERHERO_ATOMIC_SINGLE_USE_CHALLENGE_V1\"||imm.project!==PROJECT||imm.task_id!==FINAL_TASK)return fail(\"CHALLENGE_IDENTITY\");\n if(i.claim_receipt_sha256!==row.claim_receipt_sha256||!row.claim_event_uuid)return fail(\"CLAIM_RECEIPT_OR_EVENT_BINDING\");\n if(fresh.superseded===true||fresh.do_not_consume===true||fresh.newer_falsification===true||fresh.identity_mismatch===true)return fail(\"FRESHNESS_FENCE_REJECT\");\n if(!fenceOk(fence))return fail(\"FINAL_SELF_REVIEW_FENCE_NOT_PRESERVED\");\n if(trace.evidence_origin!==\"VAL_PROVIDER_API_LIVE_QUERY\"||trace.provider_telemetry_direct_query!==true)return fail(\"MISSING_POSITIVE_PROVIDER_TRACE\");\n if(!trace.trace_id||trace.trace_status_ok!==true||trace.stdout_trace_id!==trace.trace_id||trace.stdout_log_count!==1)return fail(\"TRACE_STDOUT_BINDING\");\n if(trace.file_id!==imm.finalizer_file_id||trace.branch_id!==imm.finalizer_branch_id||Number(trace.version)!==Number(imm.finalizer_version)||trace.val_type!==imm.finalizer_val_type)return fail(\"SOURCE_IDENTITY\");\n if(trace.source_sha256!==imm.finalizer_source_sha256||current.source_sha256!==imm.finalizer_source_sha256||Number(current.version)!==Number(imm.finalizer_version)||current.branch_id!==imm.finalizer_branch_id||current.source_freeze_receipt_sha256!==imm.source_freeze_receipt_sha256)return fail(\"SOURCE_FREEZE_OR_MUTATION\");\n const issued=ms(imm.issued_at),expires=ms(imm.expires_at),ts=ms(trace.trace_start),te=ms(trace.trace_end),obs=ms(i.observed_at);\n if(![issued,expires,ts,te,obs].every(Number.isFinite)||tsexpires||obsMAX_OBSERVATION_AGE_MS)return fail(\"TIME_BINDING\");\n let r:any;try{r=JSON.parse(String(trace.stdout))}catch{return fail(\"MALFORMED_STDOUT\")}\n const keys=[\"schema\",\"project\",\"task_id\",\"candidate_id\",\"qualifying_run_id\",\"execution_request_id\",\"challenge_sha256\",\"claim_receipt_sha256\",\"finalizer_source_sha256\",\"finalizer_version\",\"input_bundle_sha256\",\"consumed_input_bundle_sha256\",\"candidate_only\",\"authority\",\"independent_review_claimed\",\"p_real_increment\",\"human_authority_approval\",\"verdict\"];\n if(!exactKeys(r,keys)||String(trace.stdout)!==canon(r))return fail(\"NONCANONICAL_OR_OPEN_STDOUT\");\n if(r.schema!==\"FIRST_SUPERHERO_ATOMIC_CHALLENGE_ADJUDICATOR_RESULT_V1\"||r.project!==PROJECT||r.task_id!==FINAL_TASK)return fail(\"RESULT_IDENTITY\");\n if(r.candidate_id!==imm.candidate_id||r.qualifying_run_id!==imm.qualifying_run_id||r.execution_request_id!==imm.execution_request_id)return fail(\"CROSS_CONTROLLER_OR_RUN\");\n if(r.challenge_sha256!==row.challenge_sha256||r.claim_receipt_sha256!==row.claim_receipt_sha256)return fail(\"CROSS_CHALLENGE_OR_CLAIM\");\n if(r.finalizer_source_sha256!==imm.finalizer_source_sha256||Number(r.finalizer_version)!==Number(imm.finalizer_version)||r.input_bundle_sha256!==imm.input_bundle_sha256||r.consumed_input_bundle_sha256!==imm.input_bundle_sha256)return fail(\"SOURCE_OR_INPUT_BINDING\");\n if(r.candidate_only!==true||r.authority!==false||r.independent_review_claimed!==false||r.p_real_increment!==0||r.human_authority_approval!==false)return fail(\"SELF_PROMOTION\");\n if(typeof r.verdict!==\"string\"||!r.verdict)return fail(\"BAD_VERDICT\");\n const stdout_sha256=await sha256Text(String(trace.stdout));\n const execution_admission_sha256=await sha256Text(canon({schema:\"ATOMIC_CHALLENGE_EXECUTION_ADMISSION_V1\",project:PROJECT,task_id:FINAL_TASK,challenge_id:String(row.challenge_id),challenge_sha256:String(row.challenge_sha256),claim_event_uuid:String(row.claim_event_uuid),claim_receipt_sha256:String(row.claim_receipt_sha256),candidate_id:imm.candidate_id,qualifying_run_id:imm.qualifying_run_id,execution_request_id:imm.execution_request_id,source_sha256:imm.finalizer_source_sha256,input_bundle_sha256:imm.input_bundle_sha256,trace_id:String(trace.trace_id),stdout_sha256,trace_start:String(trace.trace_start),trace_end:String(trace.trace_end)}));\n const observation_receipt_sha256=await sha256Text(canon({schema:\"ATOMIC_CHALLENGE_OBSERVATION_RECEIPT_V1\",execution_admission_sha256,observed_at:String(i.observed_at),provider_query_id:String(trace.provider_query_id||\"\"),provider_query_request_sha256:String(trace.provider_query_request_sha256||\"\"),provider_query_response_sha256:String(trace.provider_query_response_sha256||\"\")}));\n return{ok:true,verdict:\"ATOMIC_CHALLENGE_REFERENCE_PASS\",execution_admission_sha256,observation_receipt_sha256,provider_trace_id:String(trace.trace_id),candidate_id:imm.candidate_id,qualifying_run_id:imm.qualifying_run_id,execution_request_id:imm.execution_request_id,global_provider_enumeration_consulted:false,p_real_increment:0,authority:false,independent_review_admission:false};\n}\n",[162],"b930be85-0218-4063-834c-58aa56c9e36b",["D",1788988552531],3,[28],"75febd4b-b70f-4f2c-989c-f6d5ebdd5265","README.md","27d5929c-ac89-11f1-ae1f-1607ee4eb77e",["D",1788984050374],"# Nonproduction shadow evidence\nNo authority. No production mutation.\n",[173],"pulls","branches","forks","envVars",{"_185":61,"_187":61},"connections",{"_185":61,"_186":61},"count","unfilledCount","emptyCount",{"_43":172,"_32":173,"_30":174,"_138":-5,"_41":42,"_40":143,"_140":141,"_38":210,"_13":61,"_33":20,"_35":176,"_24":25,"_145":-5,"_195":211,"_27":212},{"_43":168,"_32":28,"_30":31,"_138":-5,"_41":42,"_40":14,"_140":25,"_38":207,"_13":170,"_33":34,"_35":37,"_24":25,"_145":-5,"_195":208,"_27":209},{"_43":161,"_32":162,"_30":163,"_138":-5,"_41":42,"_40":164,"_140":141,"_38":204,"_13":61,"_33":34,"_35":166,"_24":25,"_145":-5,"_195":205,"_27":206},{"_43":154,"_32":155,"_30":156,"_138":-5,"_41":42,"_40":157,"_140":141,"_38":201,"_13":61,"_33":34,"_35":159,"_24":25,"_145":-5,"_195":202,"_27":203},{"_43":147,"_32":148,"_30":149,"_138":-5,"_41":42,"_40":150,"_140":141,"_38":198,"_13":61,"_33":34,"_35":152,"_24":25,"_145":-5,"_195":199,"_27":200},{"_43":135,"_32":136,"_30":137,"_138":-5,"_41":42,"_40":139,"_140":141,"_38":194,"_13":143,"_33":34,"_35":144,"_24":25,"_145":-5,"_195":196,"_27":197},["D",1788988175747],"children",[],[136],["D",1788988296151],[],[148],["D",1788988369816],[],[155],["D",1788988341850],[],[162],["D",1788988552531],[],[28],["D",1788984050374],[],[173],["D",1788984050291],["D",1789512647429],{"_98":97,"_106":102},{"_98":97,"_99":100,"_101":102,"_18":55,"_103":104,"_105":25},{"_13":87,"_32":88,"_43":42,"_89":44,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":45,"_96":97},"ctx",{"_80":-5,"_126":251,"_252":253,"_254":255,"_256":25,"_257":25,"_258":25,"_259":141,"_260":-5,"_261":-7,"_262":-7,"_263":61,"_264":25,"_265":25,"_266":-5,"_267":25,"_268":25,"_269":25,"_270":-5},"ENV",{"_222":223,"_224":225,"_226":88,"_227":228,"_229":230,"_231":232,"_233":234,"_235":236,"_237":238,"_239":240,"_241":242,"_243":244,"_245":246,"_247":248,"_249":250},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v10