[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_182":183,"_184":185},"routes/_app.x.$handle.$name",{"_98":97,"_32":45,"_107":88,"_27":108,"_13":14,"_109":-5,"_11":110,"_111":112,"_113":114,"_115":116,"_117":118,"_20":-5,"_119":-5,"_120":-5,"_121":25,"_122":123,"_124":25,"_125":-5,"_126":-5,"_127":128},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":69,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":81,"_82":83,"_84":85,"_86":25},"version",8,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","v2_candidate.ts","latestPath","fileId","a67690e6-abbd-11f1-9a6f-1607ee4eb77e","name","fileType","script","content","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nconst enc=new TextEncoder();\nasync function sha256(s:string){const d=await crypto.subtle.digest(\"SHA-256\",enc.encode(s));return[...new Uint8Array(d)].map(b=>b.toString(16).padStart(2,\"0\")).join(\"\")}\nfunction canon(x:any):string{if(x===null||typeof x!==\"object\")return JSON.stringify(x);if(Array.isArray(x))return\"[\"+x.map(canon).join(\",\")+\"]\";return\"{\"+Object.keys(x).sort().map(k=>JSON.stringify(k)+\":\"+canon(x[k])).join(\",\")+\"}\"}\nfunction hex256(){const b=new Uint8Array(32);crypto.getRandomValues(b);return[...b].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\")}\nconst PHASES=[\"RUN_START\",\"GOAL_INSTANCE_RECEIVED\",\"KNOWLEDGE_SKILL_ACTION_PROOF\",\"FAILURE_REPLAN\",\"CROSS_DOMAIN_ACTION\",\"DURABLE_STATE_WRITE\",\"FRESH_CONTINUATION_READBACK\",\"RUN_FINALIZE\"] as const;\ntype Phase=typeof PHASES[number];\ntype Pins={constitution:string;definition:string;focus:string;equivalence:string;controller_core:string;controller_policy:string;tool_policy:string;model_settings:string;goal_generator_commitment:string};\ntype Step={run_id:string;challenge:string;step:number;phase:Phase;prev_receipt:string|null;origin_receipt_sha256:string};\nconst ttl=300000;\nconst RUNS=\"superhero_causal_runs_v2_candidate\";\nconst ORIGINS=\"superhero_causal_origins_v2_candidate\";\nconst PROJECT_PINS:Pins={constitution:\"c\".repeat(64),definition:\"d\".repeat(64),focus:\"f\".repeat(64),equivalence:\"e\".repeat(64),controller_core:\"1\".repeat(64),controller_policy:\"2\".repeat(64),tool_policy:\"3\".repeat(64),model_settings:\"4\".repeat(64),goal_generator_commitment:\"5\".repeat(64)};\nasync function setup(){\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${RUNS}(run_id TEXT PRIMARY KEY,challenge TEXT NOT NULL,challenge_issued_ms INTEGER NOT NULL,step INTEGER NOT NULL,prev_receipt TEXT,phase TEXT NOT NULL,pins_json TEXT NOT NULL,complete INTEGER NOT NULL DEFAULT 0,updated_ms INTEGER NOT NULL)`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${ORIGINS}(receipt_sha256 TEXT PRIMARY KEY,run_id TEXT NOT NULL,step INTEGER NOT NULL,phase TEXT NOT NULL,challenge_sha256 TEXT NOT NULL,request_observation_sha256 TEXT NOT NULL,issuer_class TEXT NOT NULL,verified INTEGER NOT NULL,authority_bound INTEGER NOT NULL,expires_ms INTEGER NOT NULL,consumed INTEGER NOT NULL DEFAULT 0)`);\n}\nasync function reset(){await sqlite.execute(`DELETE FROM ${RUNS}`);await sqlite.execute(`DELETE FROM ${ORIGINS}`)}\nasync function issue(){\n const now_ms=Date.now(),run_id=hex256(),challenge=hex256();\n await sqlite.execute({sql:`INSERT INTO ${RUNS}(run_id,challenge,challenge_issued_ms,step,prev_receipt,phase,pins_json,complete,updated_ms) VALUES(?,?,?,0,NULL,?,?,0,?)`,args:[run_id,challenge,now_ms,PHASES[0],canon(PROJECT_PINS),now_ms]});\n return{run_id,challenge,step:0,prev_receipt:null,phase:PHASES[0] as Phase};\n}\n// Candidate-internal protected-writer stand-in. Production must replace this with the authority-bound canary/verifier write path.\nasync function installProtectedOrigin(run_id:string,step:number,phase:Phase,challenge:string,request_observation_sha256:string,expires_ms:number){\n const body={schema:\"PROTECTED_CHATGPT_ORIGIN_RECEIPT_V2\",run_id,step,phase,challenge_sha256:await sha256(challenge),request_observation_sha256,issuer_class:\"AUTHORITY_BOUND_CHATGPT_WORK_VERIFIER\",verified:true,authority_bound:true,expires_ms};\n const receipt_sha256=await sha256(canon(body));\n await sqlite.execute({sql:`INSERT OR IGNORE INTO ${ORIGINS}(receipt_sha256,run_id,step,phase,challenge_sha256,request_observation_sha256,issuer_class,verified,authority_bound,expires_ms,consumed) VALUES(?,?,?,?,?,?,?,1,1,?,0)`,args:[receipt_sha256,run_id,step,phase,body.challenge_sha256,request_observation_sha256,body.issuer_class,expires_ms]});\n return receipt_sha256;\n}\nasync function row(sql:string,args:any[]=[]){const r:any=await sqlite.execute({sql,args});return r.rows?.[0]??null}\nasync function transition(s:Step){\n const fail=(reason:string)=>({ok:false,reason,receipt:null as any,next:null as any});\n const nowMs=Date.now();\n const r:any=await row(`SELECT * FROM ${RUNS} WHERE run_id=?`,[s.run_id]);\n if(!r)return fail(\"RUN_NOT_FOUND\");\n if(Number(r.complete)===1)return fail(\"RUN_ALREADY_COMPLETE\");\n if(s.step!==Number(r.step))return fail(\"STEP_MISMATCH\");\n if(s.phase!==String(r.phase))return fail(\"PHASE_MISMATCH\");\n if(s.challenge!==String(r.challenge))return fail(\"CHALLENGE_MISMATCH\");\n if((s.prev_receipt??null)!==(r.prev_receipt??null))return fail(\"PREVIOUS_RECEIPT_MISMATCH\");\n if(s.now_msttl)return fail(\"CHALLENGE_EXPIRED_OR_FUTURE\");\n const ch=await sha256(String(r.challenge));\n const o:any=await row(`SELECT * FROM ${ORIGINS} WHERE receipt_sha256=?`,[s.origin_receipt_sha256]);\n if(!o)return fail(\"PROTECTED_ORIGIN_MISSING\");\n if(Number(o.verified)!==1||Number(o.authority_bound)!==1||String(o.issuer_class)!==\"AUTHORITY_BOUND_CHATGPT_WORK_VERIFIER\")return fail(\"PROTECTED_ORIGIN_INVALID\");\n if(String(o.run_id)!==String(r.run_id)||Number(o.step)!==Number(r.step)||String(o.phase)!==String(r.phase)||String(o.challenge_sha256)!==ch)return fail(\"PROTECTED_ORIGIN_BINDING_MISMATCH\");\n if(Number(o.expires_ms)<=s.now_ms)return fail(\"PROTECTED_ORIGIN_EXPIRED\");\n const nextStep=Number(r.step)+1,complete=nextStep>=PHASES.length,nextChallenge=complete?\"\":hex256(),nextPhase=complete?String(r.phase):PHASES[nextStep];\n const body={schema:\"SUPERHERO_CAUSAL_RUN_RECEIPT_V2\",run_id:String(r.run_id),step:Number(r.step),phase:String(r.phase),previous_receipt_sha256:r.prev_receipt??null,pins:JSON.parse(String(r.pins_json)),protected_origin_receipt_sha256:s.origin_receipt_sha256,request_observation_sha256:String(o.request_observation_sha256),challenge_sha256:ch,next_challenge_sha256:complete?null:await sha256(nextChallenge)};\n const receipt=await sha256(canon(body));\n const u:any=await sqlite.execute({sql:`UPDATE ${RUNS} SET challenge=?,challenge_issued_ms=?,step=?,prev_receipt=?,phase=?,complete=?,updated_ms=? WHERE run_id=? AND step=? AND challenge=? AND phase=? AND COALESCE(prev_receipt,'')=COALESCE(?,'') AND complete=0 AND EXISTS(SELECT 1 FROM ${ORIGINS} o WHERE o.receipt_sha256=? AND o.run_id=${RUNS}.run_id AND o.step=${RUNS}.step AND o.phase=${RUNS}.phase AND o.challenge_sha256=? AND o.verified=1 AND o.authority_bound=1 AND o.issuer_class='AUTHORITY_BOUND_CHATGPT_WORK_VERIFIER' AND o.expires_ms>? ) RETURNING run_id`,args:[nextChallenge,s.now_ms,nextStep,receipt,nextPhase,complete?1:0,s.now_ms,r.run_id,r.step,r.challenge,r.phase,r.prev_receipt??null,s.origin_receipt_sha256,ch,s.now_ms]});\n if(!(u.rows||[]).length)return fail(\"STATE_CAS_LOST\");\n await sqlite.execute({sql:`UPDATE ${ORIGINS} SET consumed=1 WHERE receipt_sha256=?`,args:[s.origin_receipt_sha256]});\n return{ok:true,reason:\"PASS\",receipt:{...body,receipt_sha256:receipt},next:{run_id:r.run_id,challenge:nextChallenge,step:nextStep,prev_receipt:receipt,phase:nextPhase,complete}};\n}\nasync function originFor(state:any,now_ms:number){return await installProtectedOrigin(state.run_id,state.step,state.phase,state.challenge,await sha256(\"obs:\"+state.run_id+\":\"+state.step),now_ms+60000)}\nasync function stepFor(state:any,origin:string,now_ms:number):Promise{return{run_id:state.run_id,challenge:state.challenge,step:state.step,phase:state.phase,prev_receipt:state.prev_receipt,origin_receipt_sha256:origin,now_ms}}\nasync function main(){\n await setup();await reset();const tests:any[]=[];let now=1000000;\n // Forged late state cannot exist because the API takes only an id and project state is authoritative.\n const fakeOrigin=\"f\".repeat(64);\n const forged=await transition({run_id:\"forged-run\",challenge:\"forged\",step:7,phase:\"RUN_FINALIZE\",prev_receipt:\"x\",origin_receipt_sha256:fakeOrigin,now_ms:now});\n tests.push({name:\"forged_late_state\",pass:!forged.ok&&forged.reason===\"RUN_NOT_FOUND\",observed:forged.reason});\n // Legitimate initial state + protected origin.\n const base=await issue(now);const o0=await originFor(base,now);\n // Detached origin from another run must fail.\n const other=await issue(now);const otherOrigin=await originFor(other,now);\n const detached=await transition(await stepFor(base,otherOrigin,now+1000));\n tests.push({name:\"detached_origin\",pass:!detached.ok&&detached.reason===\"PROTECTED_ORIGIN_BINDING_MISMATCH\",observed:detached.reason});\n // Two identical concurrent transitions: exactly one may advance.\n const a=await stepFor(base,o0,now+1000);const [x,y]=await Promise.all([transition(a),transition(a)]);\n tests.push({name:\"concurrent_single_winner\",pass:[x.ok,y.ok].filter(Boolean).length===1&&[x.reason,y.reason].includes(\"STATE_CAS_LOST\"),observed:[x.reason,y.reason]});\n const good=x.ok?x:y;let state=good.next;let receipts=[good.receipt];\n // Replay old transition fails.\n const replay=await transition(a);tests.push({name:\"replay\",pass:!replay.ok&&replay.reason===\"STEP_MISMATCH\",observed:replay.reason});\n // Missing origin fails at current state.\n const miss=await transition({...await stepFor(state,\"0\".repeat(64),now+2000)});tests.push({name:\"missing_origin\",pass:!miss.ok&&miss.reason===\"PROTECTED_ORIGIN_MISSING\",observed:miss.reason});\n // Wrong phase relative to project state fails.\n const org1=await originFor(state,now+1000);\n const wp=await transition({...await stepFor(state,org1,now+2000),phase:\"RUN_FINALIZE\"} as any);tests.push({name:\"wrong_phase\",pass:!wp.ok&&wp.reason===\"PHASE_MISMATCH\",observed:wp.reason});\n // Full remaining sequence.\n while(!state.complete){now+=1000;const o=await originFor(state,now);const z=await transition(await stepFor(state,o,now+1));if(!z.ok)throw new Error(\"positive sequence \"+z.reason);receipts.push(z.receipt);state=z.next}\n tests.push({name:\"full_eight_phase_chain\",pass:state.complete&&receipts.length===8,observed:{complete:state.complete,count:receipts.length}});\n const chain=receipts.every((r:any,i:number)=>i===0?r.previous_receipt_sha256===null:r.previous_receipt_sha256===receipts[i-1].receipt_sha256);\n tests.push({name:\"receipt_chain\",pass:chain,observed:chain});\n const passed=tests.every(t=>t.pass);\n console.log(JSON.stringify({schema:\"SUPERHERO_CAUSAL_RUN_STATE_MACHINE_V2_CANDIDATE_SELFTEST\",classification:\"CANDIDATE_NONAUTHORITY_MECHANICS_ONLY\",passed,test_count:tests.length,tests,p_real_increment:0,human_authority_approval:false,direct_sprites_calls:0,limitations:[\"installProtectedOrigin is an internal stand-in; production must accept origin rows only from the separately protected authority-bound canary/verifier path.\",\"This candidate proves project-owned CAS mechanics, not ChatGPT Work origin or P_real.\"]},null,2));\n if(!passed)Deno.exit(1);\n}\nawait main();","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nconst enc=new TextEncoder();\nasync function sha256(s:string){const d=await crypto.subtle.digest(\"SHA-256\",enc.encode(s));return[...new Uint8Array(d)].map(b=>b.toString(16).padStart(2,\"0\")).join(\"\")}\nfunction canon(x:any):string{if(x===null||typeof x!==\"object\")return JSON.stringify(x);if(Array.isArray(x))return\"[\"+x.map(canon).join(\",\")+\"]\";return\"{\"+Object.keys(x).sort().map(k=>JSON.stringify(k)+\":\"+canon(x[k])).join(\",\")+\"}\"}\nfunction hex256(){const b=new Uint8Array(32);crypto.getRandomValues(b);return[...b].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\")}\nconst PHASES=[\"RUN_START\",\"GOAL_INSTANCE_RECEIVED\",\"KNOWLEDGE_SKILL_ACTION_PROOF\",\"FAILURE_REPLAN\",\"CROSS_DOMAIN_ACTION\",\"DURABLE_STATE_WRITE\",\"FRESH_CONTINUATION_READBACK\",\"RUN_FINALIZE\"] as const;\ntype Phase=typeof PHASES[number];\ntype Pins={constitution:string;definition:string;focus:string;equivalence:string;controller_core:string;controller_policy:string;tool_policy:string;model_settings:string;goal_generator_commitment:string};\ntype Step={run_id:string;challenge:string;step:number;phase:Phase;prev_receipt:string|null;origin_receipt_sha256:string};\nconst ttl=300000;\nconst RUNS=\"superhero_causal_runs_v2_candidate\";\nconst ORIGINS=\"superhero_causal_origins_v2_candidate\";\nconst PROJECT_PINS:Pins={constitution:\"c\".repeat(64),definition:\"d\".repeat(64),focus:\"f\".repeat(64),equivalence:\"e\".repeat(64),controller_core:\"1\".repeat(64),controller_policy:\"2\".repeat(64),tool_policy:\"3\".repeat(64),model_settings:\"4\".repeat(64),goal_generator_commitment:\"5\".repeat(64)};\nasync function setup(){\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${RUNS}(run_id TEXT PRIMARY KEY,challenge TEXT NOT NULL,challenge_issued_ms INTEGER NOT NULL,step INTEGER NOT NULL,prev_receipt TEXT,phase TEXT NOT NULL,pins_json TEXT NOT NULL,complete INTEGER NOT NULL DEFAULT 0,updated_ms INTEGER NOT NULL)`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${ORIGINS}(receipt_sha256 TEXT PRIMARY KEY,run_id TEXT NOT NULL,step INTEGER NOT NULL,phase TEXT NOT NULL,challenge_sha256 TEXT NOT NULL,request_observation_sha256 TEXT NOT NULL,issuer_class TEXT NOT NULL,verified INTEGER NOT NULL,authority_bound INTEGER NOT NULL,expires_ms INTEGER NOT NULL,consumed INTEGER NOT NULL DEFAULT 0)`);\n}\nasync function reset(){await sqlite.execute(`DELETE FROM ${RUNS}`);await sqlite.execute(`DELETE FROM ${ORIGINS}`)}\nasync function issue(){\n const now_ms=Date.now(),run_id=hex256(),challenge=hex256();\n await sqlite.execute({sql:`INSERT INTO ${RUNS}(run_id,challenge,challenge_issued_ms,step,prev_receipt,phase,pins_json,complete,updated_ms) VALUES(?,?,?,0,NULL,?,?,0,?)`,args:[run_id,challenge,now_ms,PHASES[0],canon(PROJECT_PINS),now_ms]});\n return{run_id,challenge,step:0,prev_receipt:null,phase:PHASES[0] as Phase};\n}\n// Candidate-internal protected-writer stand-in. Production must replace this with the authority-bound canary/verifier write path.\nasync function installProtectedOrigin(run_id:string,step:number,phase:Phase,challenge:string,request_observation_sha256:string,expires_ms:number){\n const body={schema:\"PROTECTED_CHATGPT_ORIGIN_RECEIPT_V2\",run_id,step,phase,challenge_sha256:await sha256(challenge),request_observation_sha256,issuer_class:\"AUTHORITY_BOUND_CHATGPT_WORK_VERIFIER\",verified:true,authority_bound:true,expires_ms};\n const receipt_sha256=await sha256(canon(body));\n await sqlite.execute({sql:`INSERT OR IGNORE INTO ${ORIGINS}(receipt_sha256,run_id,step,phase,challenge_sha256,request_observation_sha256,issuer_class,verified,authority_bound,expires_ms,consumed) VALUES(?,?,?,?,?,?,?,1,1,?,0)`,args:[receipt_sha256,run_id,step,phase,body.challenge_sha256,request_observation_sha256,body.issuer_class,expires_ms]});\n return receipt_sha256;\n}\nasync function row(sql:string,args:any[]=[]){const r:any=await sqlite.execute({sql,args});return r.rows?.[0]??null}\nasync function transition(s:Step){\n const fail=(reason:string)=>({ok:false,reason,receipt:null as any,next:null as any});\n const nowMs=Date.now();\n const r:any=await row(`SELECT * FROM ${RUNS} WHERE run_id=?`,[s.run_id]);\n if(!r)return fail(\"RUN_NOT_FOUND\");\n if(Number(r.complete)===1)return fail(\"RUN_ALREADY_COMPLETE\");\n if(s.step!==Number(r.step))return fail(\"STEP_MISMATCH\");\n if(s.phase!==String(r.phase))return fail(\"PHASE_MISMATCH\");\n if(s.challenge!==String(r.challenge))return fail(\"CHALLENGE_MISMATCH\");\n if((s.prev_receipt??null)!==(r.prev_receipt??null))return fail(\"PREVIOUS_RECEIPT_MISMATCH\");\n if(nowMsttl)return fail(\"CHALLENGE_EXPIRED_OR_FUTURE\");\n const ch=await sha256(String(r.challenge));\n const o:any=await row(`SELECT * FROM ${ORIGINS} WHERE receipt_sha256=?`,[s.origin_receipt_sha256]);\n if(!o)return fail(\"PROTECTED_ORIGIN_MISSING\");\n if(Number(o.verified)!==1||Number(o.authority_bound)!==1||String(o.issuer_class)!==\"AUTHORITY_BOUND_CHATGPT_WORK_VERIFIER\")return fail(\"PROTECTED_ORIGIN_INVALID\");\n if(String(o.run_id)!==String(r.run_id)||Number(o.step)!==Number(r.step)||String(o.phase)!==String(r.phase)||String(o.challenge_sha256)!==ch)return fail(\"PROTECTED_ORIGIN_BINDING_MISMATCH\");\n if(Number(o.expires_ms)<=s.now_ms)return fail(\"PROTECTED_ORIGIN_EXPIRED\");\n const nextStep=Number(r.step)+1,complete=nextStep>=PHASES.length,nextChallenge=complete?\"\":hex256(),nextPhase=complete?String(r.phase):PHASES[nextStep];\n const body={schema:\"SUPERHERO_CAUSAL_RUN_RECEIPT_V2\",run_id:String(r.run_id),step:Number(r.step),phase:String(r.phase),previous_receipt_sha256:r.prev_receipt??null,pins:JSON.parse(String(r.pins_json)),protected_origin_receipt_sha256:s.origin_receipt_sha256,request_observation_sha256:String(o.request_observation_sha256),challenge_sha256:ch,next_challenge_sha256:complete?null:await sha256(nextChallenge)};\n const receipt=await sha256(canon(body));\n const u:any=await sqlite.execute({sql:`UPDATE ${RUNS} SET challenge=?,challenge_issued_ms=?,step=?,prev_receipt=?,phase=?,complete=?,updated_ms=? WHERE run_id=? AND step=? AND challenge=? AND phase=? AND COALESCE(prev_receipt,'')=COALESCE(?,'') AND complete=0 AND EXISTS(SELECT 1 FROM ${ORIGINS} o WHERE o.receipt_sha256=? AND o.run_id=${RUNS}.run_id AND o.step=${RUNS}.step AND o.phase=${RUNS}.phase AND o.challenge_sha256=? AND o.verified=1 AND o.authority_bound=1 AND o.issuer_class='AUTHORITY_BOUND_CHATGPT_WORK_VERIFIER' AND o.expires_ms>? ) RETURNING run_id`,args:[nextChallenge,s.now_ms,nextStep,receipt,nextPhase,complete?1:0,s.now_ms,r.run_id,r.step,r.challenge,r.phase,r.prev_receipt??null,s.origin_receipt_sha256,ch,s.now_ms]});\n if(!(u.rows||[]).length)return fail(\"STATE_CAS_LOST\");\n await sqlite.execute({sql:`UPDATE ${ORIGINS} SET consumed=1 WHERE receipt_sha256=?`,args:[s.origin_receipt_sha256]});\n return{ok:true,reason:\"PASS\",receipt:{...body,receipt_sha256:receipt},next:{run_id:r.run_id,challenge:nextChallenge,step:nextStep,prev_receipt:receipt,phase:nextPhase,complete}};\n}\nasync function originFor(state:any,now_ms:number){return await installProtectedOrigin(state.run_id,state.step,state.phase,state.challenge,await sha256(\"obs:\"+state.run_id+\":\"+state.step),now_ms+60000)}\nasync function stepFor(state:any,origin:string,now_ms:number):Promise{return{run_id:state.run_id,challenge:state.challenge,step:state.step,phase:state.phase,prev_receipt:state.prev_receipt,origin_receipt_sha256:origin,now_ms}}\nasync function main(){\n await setup();await reset();const tests:any[]=[];let now=1000000;\n // Forged late state cannot exist because the API takes only an id and project state is authoritative.\n const fakeOrigin=\"f\".repeat(64);\n const forged=await transition({run_id:\"forged-run\",challenge:\"forged\",step:7,phase:\"RUN_FINALIZE\",prev_receipt:\"x\",origin_receipt_sha256:fakeOrigin,now_ms:now});\n tests.push({name:\"forged_late_state\",pass:!forged.ok&&forged.reason===\"RUN_NOT_FOUND\",observed:forged.reason});\n // Legitimate initial state + protected origin.\n const base=await issue(now);const o0=await originFor(base,now);\n // Detached origin from another run must fail.\n const other=await issue(now);const otherOrigin=await originFor(other,now);\n const detached=await transition(await stepFor(base,otherOrigin,now+1000));\n tests.push({name:\"detached_origin\",pass:!detached.ok&&detached.reason===\"PROTECTED_ORIGIN_BINDING_MISMATCH\",observed:detached.reason});\n // Two identical concurrent transitions: exactly one may advance.\n const a=await stepFor(base,o0,now+1000);const [x,y]=await Promise.all([transition(a),transition(a)]);\n tests.push({name:\"concurrent_single_winner\",pass:[x.ok,y.ok].filter(Boolean).length===1&&[x.reason,y.reason].includes(\"STATE_CAS_LOST\"),observed:[x.reason,y.reason]});\n const good=x.ok?x:y;let state=good.next;let receipts=[good.receipt];\n // Replay old transition fails.\n const replay=await transition(a);tests.push({name:\"replay\",pass:!replay.ok&&replay.reason===\"STEP_MISMATCH\",observed:replay.reason});\n // Missing origin fails at current state.\n const miss=await transition({...await stepFor(state,\"0\".repeat(64),now+2000)});tests.push({name:\"missing_origin\",pass:!miss.ok&&miss.reason===\"PROTECTED_ORIGIN_MISSING\",observed:miss.reason});\n // Wrong phase relative to project state fails.\n const org1=await originFor(state,now+1000);\n const wp=await transition({...await stepFor(state,org1,now+2000),phase:\"RUN_FINALIZE\"} as any);tests.push({name:\"wrong_phase\",pass:!wp.ok&&wp.reason===\"PHASE_MISMATCH\",observed:wp.reason});\n // Full remaining sequence.\n while(!state.complete){now+=1000;const o=await originFor(state,now);const z=await transition(await stepFor(state,o,now+1));if(!z.ok)throw new Error(\"positive sequence \"+z.reason);receipts.push(z.receipt);state=z.next}\n tests.push({name:\"full_eight_phase_chain\",pass:state.complete&&receipts.length===8,observed:{complete:state.complete,count:receipts.length}});\n const chain=receipts.every((r:any,i:number)=>i===0?r.previous_receipt_sha256===null:r.previous_receipt_sha256===receipts[i-1].receipt_sha256);\n tests.push({name:\"receipt_chain\",pass:chain,observed:chain});\n const passed=tests.every(t=>t.pass);\n console.log(JSON.stringify({schema:\"SUPERHERO_CAUSAL_RUN_STATE_MACHINE_V2_CANDIDATE_SELFTEST\",classification:\"CANDIDATE_NONAUTHORITY_MECHANICS_ONLY\",passed,test_count:tests.length,tests,p_real_increment:0,human_authority_approval:false,direct_sprites_calls:0,limitations:[\"installProtectedOrigin is an internal stand-in; production must accept origin rows only from the separately protected authority-bound canary/verifier path.\",\"This candidate proves project-owned CAS mechanics, not ChatGPT Work origin or P_real.\"]},null,2));\n if(!passed)Deno.exit(1);\n}\nawait main();","createdAt",["D",1788896958912],"branchVersion","branchId","6563f4c4-ac94-429f-8218-70e2e4fe7493","id","33e00560-1f50-42dd-be33-905e435ca839","brain-superhero-causal-run-v1",["D",1788895734436],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","First superhero causal run verifier","imageUrl","6be0fc5c-1fef-4bd6-a1e1-67a3f8c0764e","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0715b-703f-741f-ab35-c85020e4a5e0","tursoName","33e005601f5042ddbe33905e435ca839","tursoHostname","33e005601f5042ddbe33905e435ca839-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789504908499],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_98":97,"_106":102},"org",{"_98":97,"_99":100,"_101":102,"_18":55,"_103":104,"_105":25},"branch",{"_13":87,"_32":88,"_43":42,"_89":44,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":45,"_96":97},"isOwned",22,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","mosadek","handle","displayName","Mo Sadek","avatar","https://lh3.googleusercontent.com/a/ACg8ocL1eT_LHhKSg5px3nXIO6eez79aZXef466qXKh2gak-0iwrvw=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":177,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":178,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":179,"_82":180,"_84":181,"_86":25},"tree",[164,165,166],"files",[164,165,166],"counts",{"_154":61,"_155":142,"_156":61,"_157":158,"_159":160},"contents",[129,130,131],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":147,"_32":148,"_30":149,"_133":-5,"_41":42,"_40":150,"_134":143,"_38":151,"_13":61,"_33":34,"_35":152,"_24":25,"_137":-5,"_27":153},{"_43":139,"_32":140,"_30":141,"_133":-5,"_41":42,"_40":142,"_134":143,"_38":144,"_13":61,"_33":34,"_35":145,"_24":25,"_137":-5,"_27":146},{"_43":132,"_32":28,"_30":31,"_133":-5,"_41":42,"_40":14,"_134":25,"_38":135,"_13":136,"_33":34,"_35":37,"_24":25,"_137":-5,"_27":138},"9454f024-9cca-4842-94ee-0c22c1e7efcf","parentId","latest",["D",1788896958912],5,"label",[28],"d8f492a3-22b1-43ae-824d-7eb196999cea","main.ts","8772a9e8-abbb-11f1-9128-1607ee4eb77e",1,true,["D",1788895734467],"const enc=new TextEncoder();\nasync function sha256(s:string){const d=await crypto.subtle.digest(\"SHA-256\",enc.encode(s));return[...new Uint8Array(d)].map(b=>b.toString(16).padStart(2,\"0\")).join(\"\")}\nfunction canon(x:any):string{if(x===null||typeof x!==\"object\")return JSON.stringify(x);if(Array.isArray(x))return\"[\"+x.map(canon).join(\",\")+\"]\";return\"{\"+Object.keys(x).sort().map(k=>JSON.stringify(k)+\":\"+canon(x[k])).join(\",\")+\"}\"}\nconst PHASES=[\"RUN_START\",\"GOAL_INSTANCE_RECEIVED\",\"KNOWLEDGE_SKILL_ACTION_PROOF\",\"FAILURE_REPLAN\",\"CROSS_DOMAIN_ACTION\",\"DURABLE_STATE_WRITE\",\"FRESH_CONTINUATION_READBACK\",\"RUN_FINALIZE\"] as const;\ntype Phase=typeof PHASES[number];\ntype Pins={constitution:string;definition:string;focus:string;equivalence:string;controller_core:string;controller_policy:string;tool_policy:string;model_settings:string;goal_generator_commitment:string};\ntype Run={run_id:string;challenge:string;challenge_issued_ms:number;step:number;prev_receipt:string|null;phase:Phase;pins:Pins;complete:boolean};\ntype Step={run_id:string;challenge:string;step:number;phase:Phase;prev_receipt:string|null;pins:Pins;origin_verified:boolean;authority_bound:boolean;now_ms:number};\nconst ttl=300000;\nfunction pinsEqual(a:Pins,b:Pins){return canon(a)===canon(b)}\nasync function issue(pins:Pins,now_ms=Date.now()):Promise{return{run_id:crypto.randomUUID(),challenge:crypto.randomUUID()+crypto.randomUUID(),challenge_issued_ms:now_ms,step:0,prev_receipt:null,phase:PHASES[0],pins,complete:false}}\nasync function transition(run:Run,s:Step){\n const fail=(reason:string)=>({ok:false,reason,run,receipt:null as any});\n if(run.complete)return fail(\"RUN_ALREADY_COMPLETE\");\n if(s.run_id!==run.run_id)return fail(\"CROSS_RUN\");\n if(s.step!==run.step)return fail(\"STEP_MISMATCH\");\n if(s.phase!==run.phase)return fail(\"PHASE_MISMATCH\");\n if(s.challenge!==run.challenge)return fail(\"CHALLENGE_MISMATCH\");\n if(s.prev_receipt!==run.prev_receipt)return fail(\"PREVIOUS_RECEIPT_MISMATCH\");\n if(!pinsEqual(s.pins,run.pins))return fail(\"PINS_MISMATCH\");\n if(!s.origin_verified)return fail(\"ORIGIN_NOT_VERIFIED\");\n if(!s.authority_bound)return fail(\"AUTHORITY_NOT_BOUND\");\n if(s.now_msttl)return fail(\"CHALLENGE_EXPIRED_OR_FUTURE\");\n const body={schema:\"SUPERHERO_CAUSAL_RUN_RECEIPT_V1\",run_id:run.run_id,step:run.step,phase:run.phase,previous_receipt_sha256:run.prev_receipt,pins:run.pins,origin_verified:true,authority_bound:true,challenge_sha256:await sha256(run.challenge)};\n const receipt=await sha256(canon(body));\n const nextStep=run.step+1,complete=nextStep>=PHASES.length;\n const next:Run={...run,step:nextStep,prev_receipt:receipt,complete,phase:complete?run.phase:PHASES[nextStep],challenge:complete?\"\":crypto.randomUUID()+crypto.randomUUID(),challenge_issued_ms:s.now_ms};\n return{ok:true,reason:\"PASS\",run:next,receipt:{...body,receipt_sha256:receipt}};\n}\nconst pins:Pins={constitution:\"c\".repeat(64),definition:\"d\".repeat(64),focus:\"f\".repeat(64),equivalence:\"e\".repeat(64),controller_core:\"1\".repeat(64),controller_policy:\"2\".repeat(64),tool_policy:\"3\".repeat(64),model_settings:\"4\".repeat(64),goal_generator_commitment:\"5\".repeat(64)};\nfunction stepFor(r:Run,patch:any={}):Step{return{run_id:r.run_id,challenge:r.challenge,step:r.step,phase:r.phase,prev_receipt:r.prev_receipt,pins:r.pins,origin_verified:true,authority_bound:true,now_ms:r.challenge_issued_ms+1000,...patch}}\nasync function expectReject(name:string,r:Run,patch:any,reason:string){const x=await transition(r,stepFor(r,patch));return{name,pass:!x.ok&&x.reason===reason,observed:x.reason,expected:reason}}\nasync function main(){\n const base=await issue(pins,1000000);\n const tests:any[]=[];\n tests.push(await expectReject(\"cross_run\",base,{run_id:\"other\"},\"CROSS_RUN\"));\n tests.push(await expectReject(\"wrong_step\",base,{step:1},\"STEP_MISMATCH\"));\n tests.push(await expectReject(\"skip_phase\",base,{phase:\"GOAL_INSTANCE_RECEIVED\"},\"PHASE_MISMATCH\"));\n tests.push(await expectReject(\"wrong_challenge\",base,{challenge:\"wrong\"},\"CHALLENGE_MISMATCH\"));\n tests.push(await expectReject(\"stale_prev\",base,{prev_receipt:\"stale\"},\"PREVIOUS_RECEIPT_MISMATCH\"));\n tests.push(await expectReject(\"wrong_pins\",base,{pins:{...pins,controller_core:\"9\".repeat(64)}},\"PINS_MISMATCH\"));\n tests.push(await expectReject(\"origin_false\",base,{origin_verified:false},\"ORIGIN_NOT_VERIFIED\"));\n tests.push(await expectReject(\"authority_false\",base,{authority_bound:false},\"AUTHORITY_NOT_BOUND\"));\n tests.push(await expectReject(\"expired\",base,{now_ms:base.challenge_issued_ms+ttl+1},\"CHALLENGE_EXPIRED_OR_FUTURE\"));\n const good1=await transition(base,stepFor(base));tests.push({name:\"first_valid\",pass:good1.ok,observed:good1.reason,expected:\"PASS\"});\n const replay=await transition(good1.run,stepFor(base));tests.push({name:\"replay_old_step\",pass:!replay.ok&&replay.reason===\"STEP_MISMATCH\",observed:replay.reason,expected:\"STEP_MISMATCH\"});\n let r=base;const receipts:any[]=[];for(let i=0;ii===0?x.previous_receipt_sha256===null:x.previous_receipt_sha256===receipts[i-1].receipt_sha256);\n tests.push({name:\"receipt_chain\",pass:receiptChain,observed:receiptChain,expected:true});\n const passed=tests.every(t=>t.pass);\n console.log(JSON.stringify({schema:\"SUPERHERO_CAUSAL_RUN_STATE_MACHINE_SELFTEST_V1\",classification:\"CANDIDATE_NONAUTHORITY_MECHANICS_ONLY\",passed,test_count:tests.length,tests,positive_receipt_root:receipts.at(-1)?.receipt_sha256,p_real_increment:0,human_authority_approval:false,direct_sprites_calls:0},null,2));\n if(!passed)Deno.exit(1);\n}\nawait main();",[140],"fb90962d-4727-41bf-98d1-47a4ea463908","falsify_v1.ts","557719ea-abbd-11f1-be17-1607ee4eb77e",2,["D",1788896509496],"const enc=new TextEncoder();\nasync function sha256(s:string){const d=await crypto.subtle.digest(\"SHA-256\",enc.encode(s));return[...new Uint8Array(d)].map(b=>b.toString(16).padStart(2,\"0\")).join(\"\")}\nfunction canon(x:any):string{if(x===null||typeof x!==\"object\")return JSON.stringify(x);if(Array.isArray(x))return\"[\"+x.map(canon).join(\",\")+\"]\";return\"{\"+Object.keys(x).sort().map(k=>JSON.stringify(k)+\":\"+canon(x[k])).join(\",\")+\"}\"}\nconst PHASES=[\"RUN_START\",\"GOAL_INSTANCE_RECEIVED\",\"KNOWLEDGE_SKILL_ACTION_PROOF\",\"FAILURE_REPLAN\",\"CROSS_DOMAIN_ACTION\",\"DURABLE_STATE_WRITE\",\"FRESH_CONTINUATION_READBACK\",\"RUN_FINALIZE\"] as const;\ntype Phase=typeof PHASES[number];\ntype Pins={constitution:string;definition:string;focus:string;equivalence:string;controller_core:string;controller_policy:string;tool_policy:string;model_settings:string;goal_generator_commitment:string};\ntype Run={run_id:string;challenge:string;challenge_issued_ms:number;step:number;prev_receipt:string|null;phase:Phase;pins:Pins;complete:boolean};\ntype Step={run_id:string;challenge:string;step:number;phase:Phase;prev_receipt:string|null;pins:Pins;origin_verified:boolean;authority_bound:boolean;now_ms:number};\nconst ttl=300000;\nfunction pinsEqual(a:Pins,b:Pins){return canon(a)===canon(b)}\nasync function transition(run:Run,s:Step){\n const fail=(reason:string)=>({ok:false,reason,run,receipt:null as any});\n if(run.complete)return fail(\"RUN_ALREADY_COMPLETE\");\n if(s.run_id!==run.run_id)return fail(\"CROSS_RUN\");\n if(s.step!==run.step)return fail(\"STEP_MISMATCH\");\n if(s.phase!==run.phase)return fail(\"PHASE_MISMATCH\");\n if(s.challenge!==run.challenge)return fail(\"CHALLENGE_MISMATCH\");\n if(s.prev_receipt!==run.prev_receipt)return fail(\"PREVIOUS_RECEIPT_MISMATCH\");\n if(!pinsEqual(s.pins,run.pins))return fail(\"PINS_MISMATCH\");\n if(!s.origin_verified)return fail(\"ORIGIN_NOT_VERIFIED\");\n if(!s.authority_bound)return fail(\"AUTHORITY_NOT_BOUND\");\n if(s.now_msttl)return fail(\"CHALLENGE_EXPIRED_OR_FUTURE\");\n const body={schema:\"SUPERHERO_CAUSAL_RUN_RECEIPT_V1\",run_id:run.run_id,step:run.step,phase:run.phase,previous_receipt_sha256:run.prev_receipt,pins:run.pins,origin_verified:true,authority_bound:true,challenge_sha256:await sha256(run.challenge)};\n const receipt=await sha256(canon(body));\n const nextStep=run.step+1,complete=nextStep>=PHASES.length;\n const next:Run={...run,step:nextStep,prev_receipt:receipt,complete,phase:complete?run.phase:PHASES[nextStep],challenge:complete?\"\":crypto.randomUUID()+crypto.randomUUID(),challenge_issued_ms:s.now_ms};\n return{ok:true,reason:\"PASS\",run:next,receipt:{...body,receipt_sha256:receipt}};\n}\nconst pins:Pins={constitution:\"c\".repeat(64),definition:\"d\".repeat(64),focus:\"f\".repeat(64),equivalence:\"e\".repeat(64),controller_core:\"1\".repeat(64),controller_policy:\"2\".repeat(64),tool_policy:\"3\".repeat(64),model_settings:\"4\".repeat(64),goal_generator_commitment:\"5\".repeat(64)};\nfunction stepFor(r:Run):Step{return{run_id:r.run_id,challenge:r.challenge,step:r.step,phase:r.phase,prev_receipt:r.prev_receipt,pins:r.pins,origin_verified:true,authority_bound:true,now_ms:r.challenge_issued_ms+1000}}\nconst forged:Run={run_id:\"forged-run\",challenge:\"forged-challenge\",challenge_issued_ms:1000000,step:7,prev_receipt:\"forged-prev\",phase:\"RUN_FINALIZE\",pins,complete:false};\nconst forgedResult=await transition(forged,stepFor(forged));\nconst base:Run={run_id:\"fork-run\",challenge:\"fork-challenge\",challenge_issued_ms:2000000,step:0,prev_receipt:null,phase:\"RUN_START\",pins,complete:false};\nconst [forkA,forkB]=await Promise.all([transition(base,stepFor(base)),transition(base,stepFor(base))]);\nconsole.log(JSON.stringify({\n schema:\"SUPERHERO_CAUSAL_RUN_V1_INDEPENDENT_COUNTEREXAMPLE\",\n source_sha256:\"e3c0940ddc904f99e2cce66bc0d96841eb30f137188f0e6c2a69077e33c2de28\",\n forged_late_phase:{passed:forgedResult.ok,reason:forgedResult.reason,receipt:forgedResult.receipt?.receipt_sha256,next_complete:forgedResult.run.complete},\n concurrent_same_state:{a_passed:forkA.ok,b_passed:forkB.ok,same_receipt:forkA.receipt?.receipt_sha256===forkB.receipt?.receipt_sha256,challenge_a:forkA.run.challenge,challenge_b:forkB.run.challenge,divergent_next_challenge:forkA.run.challenge!==forkB.run.challenge},\n falsified:forgedResult.ok&&forkA.ok&&forkB.ok&&forkA.run.challenge!==forkB.run.challenge,\n classification:\"CANDIDATE_NONAUTHORITY_FALSIFICATION\",\n p_real_increment:0,human_authority_approval:false,direct_sprites_calls:0\n},null,2));",[148],"pulls","branches","forks","envVars",{"_161":61,"_163":61},"connections",{"_161":61,"_162":61},"count","unfilledCount","emptyCount",{"_43":147,"_32":148,"_30":149,"_133":-5,"_41":42,"_40":150,"_134":143,"_38":174,"_13":61,"_33":34,"_35":152,"_24":25,"_137":-5,"_168":175,"_27":176},{"_43":139,"_32":140,"_30":141,"_133":-5,"_41":42,"_40":142,"_134":143,"_38":171,"_13":61,"_33":34,"_35":145,"_24":25,"_137":-5,"_168":172,"_27":173},{"_43":132,"_32":28,"_30":31,"_133":-5,"_41":42,"_40":14,"_134":25,"_38":167,"_13":136,"_33":34,"_35":37,"_24":25,"_137":-5,"_168":169,"_27":170},["D",1788896958912],"children",[],[28],["D",1788895734467],[],[140],["D",1788896509496],[],[148],["D",1788895734436],["D",1789504908499],{"_98":97,"_106":102},{"_98":97,"_99":100,"_101":102,"_18":55,"_103":104,"_105":25},{"_13":87,"_32":88,"_43":42,"_89":44,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":45,"_96":97},"ctx",{"_80":-5,"_126":215,"_216":217,"_218":219,"_220":25,"_221":25,"_222":25,"_223":143,"_224":-5,"_225":-7,"_226":-7,"_227":61,"_228":25,"_229":25,"_230":-5,"_231":25,"_232":25,"_233":25,"_234":-5},"ENV",{"_186":187,"_188":189,"_190":88,"_191":192,"_193":194,"_195":196,"_197":198,"_199":200,"_201":202,"_203":204,"_205":206,"_207":208,"_209":210,"_211":212,"_213":214},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v8