| 62 | 2026-09-07 22:27 UTC |
adjudication |
confirmed 28c4ae555cbc#R5 by pdbethke: real, read: git log --name-only output is C-quoted for special bytes and never matches; such a file ranks with churn 1 · signer name is self-reported: corral-ledger-3 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 61 | 2026-09-07 22:27 UTC |
adjudication |
confirmed 28c4ae555cbc#R4 by pdbethke: real, read: the covering test FILE is picked from the single most-covering test id, never summed per file · signer name is self-reported: corral-ledger-3 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 60 | 2026-09-07 22:27 UTC |
adjudication |
confirmed 28c4ae555cbc#R2 by pdbethke: real, reproduced: CanonicalKV is not injective — a model name carrying , or = collides the cache key with a different role map · signer name is self-reported: corral-ledger-3 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 59 | 2026-09-07 22:27 UTC |
adjudication |
confirmed 28c4ae555cbc#R1 by pdbethke: real, reproduced: explicit --tests pairings are left out of the collision grouping, so a convention pairing on the same test file is not demoted · signer name is self-reported: corral-ledger-3 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 58 | 2026-09-07 22:27 UTC |
review |
review of internal/adequacy by gemini-3.6-flash: 1 reproduced, 0 code-read, 0 hypothesis · signer name is self-reported: corral-ledger-3 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 57 | 2026-09-07 22:24 UTC |
review |
review of internal/certify by claude-code: 3 reproduced, 3 code-read, 0 hypothesis · signer name is self-reported: corral-ledger-3 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 56 | 2026-09-07 22:17 UTC |
review |
review of internal/auditpush by gemini-3.6-flash: 2 reproduced, 0 code-read, 0 hypothesis · signer name is self-reported: corral-ledger-3 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 55 | 2026-09-07 22:14 UTC |
review |
review of internal/review by codex: 2 reproduced, 0 code-read, 0 hypothesis · signer name is self-reported: corral-ledger-3 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 54 | 2026-09-07 22:11 UTC |
review |
review of cmd/corral by claude-code: 4 reproduced, 3 code-read, 0 hypothesis · signer name is self-reported: corral-ledger-3 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 53 | 2026-09-07 22:00 UTC |
review |
review of internal/lang by codex: 2 reproduced, 0 code-read, 0 hypothesis · signer name is self-reported: corral-ledger-3 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 52 | 2026-09-07 21:56 UTC |
review |
review of internal/reposcan by claude-code: 3 reproduced, 2 code-read, 0 hypothesis · signer name is self-reported: corral-ledger-3 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 51 | 2026-09-07 20:30 UTC |
adjudication |
confirmed 61dc210a39fd#R7 by pdbethke: real, read: refutation ids are neither canonicalised nor checked against the review's ids; a verifier answering r1 or 1 is silently dropped · signer name is self-reported: corral-ledger-3 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 50 | 2026-09-07 20:30 UTC |
adjudication |
confirmed 61dc210a39fd#R5 by pdbethke: real, read: Plan counts every finding of a covering review toward every scope it covers, ignoring the finding's file · signer name is self-reported: corral-ledger-3 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 49 | 2026-09-07 20:30 UTC |
adjudication |
confirmed 61dc210a39fd#R4 by pdbethke: real, reproduced: LoadScope does not confine the scope to the checkout; a scope with .. reads outside it and the bytes go to the provider · signer name is self-reported: corral-ledger-3 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 48 | 2026-09-07 20:30 UTC |
adjudication |
confirmed 61dc210a39fd#R3 by pdbethke: real, reproduced: Parse accepts any parseable object in the prose as the review; a zero-findings review results from a stray JSON literal · signer name is self-reported: corral-ledger-3 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 47 | 2026-09-07 20:30 UTC |
adjudication |
confirmed 61dc210a39fd#R2 by pdbethke: real, reproduced: a verifier's reproduced refutation of a CODE-READ claim is run and recorded and then never consulted by OutcomeOf · signer name is self-reported: corral-ledger-3 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 46 | 2026-09-07 20:30 UTC |
adjudication |
confirmed 61dc210a39fd#R1 by pdbethke: real, reproduced: a reproduction the harness could not run is recorded as a script that ran and disagreed, and charged to the reviewer · signer name is self-reported: corral-ledger-3 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 45 | 2026-09-07 20:30 UTC |
adjudication |
confirmed dcd0874fecb8#R1 by pdbethke: real, reproduced, and mine: the cut line names tried[MaxRendered:] of the caller's order after Render began sorting a copy — the range it names is not the tail it dropped · signer name is self-reported: corral-ledger-3 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 44 | 2026-09-07 20:30 UTC |
adjudication |
confirmed f29544721ecd#R1 by pdbethke: real, reproduced: the container backend ignores Bind.PerEntry, which the bwrap backend honours; cache-writing toolchains hit EROFS there only · signer name is self-reported: corral-ledger-3 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 43 | 2026-09-07 20:30 UTC |
adjudication |
confirmed b3307bbbb5e6#R4 by pdbethke: real, read: an unmeasured mutant's grading record is built and dropped before the per-mutant map is written · signer name is self-reported: corral-ledger-3 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 42 | 2026-09-07 20:30 UTC |
adjudication |
confirmed b3307bbbb5e6#R3 by pdbethke: real, reproduced: the timeout re-probe runs the shared command under the mutant's narrowed budget; a slow suite aborts the file's report as unhealthy · signer name is self-reported: corral-ledger-3 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 41 | 2026-09-07 20:30 UTC |
adjudication |
confirmed b3307bbbb5e6#R2 by pdbethke: real, reproduced: capFor keyed on the raw argv, looked up with the fail-fast argv; the per-command cap never applies when both are set, which gate.go always sets · signer name is self-reported: corral-ledger-3 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 40 | 2026-09-07 20:30 UTC |
adjudication |
confirmed b3307bbbb5e6#R1 by pdbethke: real, reproduced: the canary runs the shared command only; a narrowed per-mutant command that never reaches the file reports every mutant survived under CanaryKilled=true — false survivors in the default mode · signer name is self-reported: corral-ledger-3 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 39 | 2026-09-07 20:30 UTC |
adjudication |
confirmed 559719120ef0#R1 by pdbethke: real, reproduced: AppendLedgerEntry/placeEntry check no entry shape, so ledger append admits an adjudication WriteAdjudication would refuse and verify passes it — the rule at one door · signer name is self-reported: corral-ledger-3 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 38 | 2026-09-07 20:29 UTC |
review |
review of internal/review by claude-code: 4 reproduced, 4 code-read, 0 hypothesis · signer name is self-reported: corral-ledger-3 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 37 | 2026-09-07 20:19 UTC |
review |
review of internal/prior by gemini-3.6-flash: 1 reproduced, 0 code-read, 0 hypothesis · signer name is self-reported: corral-ledger-3 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 36 | 2026-09-07 20:17 UTC |
review |
review of internal/sandbox by gemini-3.6-flash: 1 reproduced, 0 code-read, 0 hypothesis · signer name is self-reported: corral-ledger-3 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 35 | 2026-09-07 20:15 UTC |
review |
review of internal/adequacy by claude-code: 3 reproduced, 3 code-read, 0 hypothesis · signer name is self-reported: corral-ledger-3 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 34 | 2026-09-07 20:06 UTC |
review |
review of internal/auditpush by codex: 1 reproduced, 0 code-read, 0 hypothesis · signer name is self-reported: corral-ledger-3 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 33 | 2026-09-07 14:35 UTC |
adjudication |
confirmed a79b583bacea#R1 by pdbethke: real, reproduced: unanchored first-occurrence stem replace mangles the authored test's suffix for stems like st or go, so the authored test is never collected · corral-ledger-2: hashed in the sparse form (a recorded false or zero is not distinguished from an absent one) and its scan_uid is not derivable from the entry · signer name is self-reported: corral-ledger-2 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 32 | 2026-09-07 14:35 UTC |
adjudication |
confirmed ed079ca08965#R6 by pdbethke: real, read: PushReviewEntry is not a transaction; a half-landed review row is what PushBundle's transaction exists to prevent · corral-ledger-2: hashed in the sparse form (a recorded false or zero is not distinguished from an absent one) and its scan_uid is not derivable from the entry · signer name is self-reported: corral-ledger-2 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 31 | 2026-09-07 14:35 UTC |
adjudication |
confirmed ed079ca08965#R5 by pdbethke: real, read: entries sorted by Pushed (microseconds) paired with names sorted lexically (seconds) — a chain break inside one second is named on the wrong file · corral-ledger-2: hashed in the sparse form (a recorded false or zero is not distinguished from an absent one) and its scan_uid is not derivable from the entry · signer name is self-reported: corral-ledger-2 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 30 | 2026-09-07 14:35 UTC |
adjudication |
confirmed ed079ca08965#R4 by pdbethke: real, reproduced: Passed *bool nil (never measured) and false (measured) hash and verify identically under the sparse form; the entry hash must not prune · corral-ledger-2: hashed in the sparse form (a recorded false or zero is not distinguished from an absent one) and its scan_uid is not derivable from the entry · signer name is self-reported: corral-ledger-2 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 29 | 2026-09-07 14:35 UTC |
adjudication |
confirmed ed079ca08965#R3 by pdbethke: real, reproduced: Retracted is honoured for scan entries only; a retracted review's rows load and push · corral-ledger-2: hashed in the sparse form (a recorded false or zero is not distinguished from an absent one) and its scan_uid is not derivable from the entry · signer name is self-reported: corral-ledger-2 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 28 | 2026-09-07 14:35 UTC |
adjudication |
confirmed ed079ca08965#R2 by pdbethke: real, reproduced: placeEntry re-stamps Pushed after mintPush hashed the earlier one into scan_uid, so the uid never recomputes from the entry · corral-ledger-2: hashed in the sparse form (a recorded false or zero is not distinguished from an absent one) and its scan_uid is not derivable from the entry · signer name is self-reported: corral-ledger-2 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 27 | 2026-09-07 14:35 UTC |
adjudication |
confirmed ed079ca08965#R1 by pdbethke: real, read: CanonicalizeForWarehouse normalizes StartedAt but not the two fields added with the ledger (FinishedAt, ComputedAt) — the rule at one door and not the other; the script's fixture was wrong, the code is as claimed · corral-ledger-2: hashed in the sparse form (a recorded false or zero is not distinguished from an absent one) and its scan_uid is not derivable from the entry · signer name is self-reported: corral-ledger-2 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 26 | 2026-09-07 14:33 UTC |
review |
review of internal/adequacy by codex: 0 reproduced, 0 code-read, 1 hypothesis · corral-ledger-2: hashed in the sparse form (a recorded false or zero is not distinguished from an absent one) and its scan_uid is not derivable from the entry · signer name is self-reported: corral-ledger-2 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 25 | 2026-09-07 14:31 UTC |
review |
review of internal/advpool by gemini-3.6-flash: 1 reproduced, 0 code-read, 0 hypothesis · corral-ledger-2: hashed in the sparse form (a recorded false or zero is not distinguished from an absent one) and its scan_uid is not derivable from the entry · signer name is self-reported: corral-ledger-2 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 24 | 2026-09-07 14:28 UTC |
review |
review of internal/adequacy by codex: 0 reproduced, 0 code-read, 0 hypothesis · corral-ledger-2: hashed in the sparse form (a recorded false or zero is not distinguished from an absent one) and its scan_uid is not derivable from the entry · signer name is self-reported: corral-ledger-2 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 23 | 2026-09-07 14:27 UTC |
review |
review of internal/auditpush by claude-code: 3 reproduced, 3 code-read, 0 hypothesis · corral-ledger-2: hashed in the sparse form (a recorded false or zero is not distinguished from an absent one) and its scan_uid is not derivable from the entry · signer name is self-reported: corral-ledger-2 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 22 | 2026-09-07 12:07 UTC |
adjudication |
confirmed d0f2993a4adf#R6 by pdbethke: real: byte-indexed truncation splits a rune · corral-ledger-2: hashed in the sparse form (a recorded false or zero is not distinguished from an absent one) and its scan_uid is not derivable from the entry · signer name is self-reported: corral-ledger-2 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 21 | 2026-09-07 12:07 UTC |
adjudication |
confirmed d0f2993a4adf#R5 by pdbethke: real: the cut at MaxRendered after a line sort always drops the file's tail; the summary line must say where the undisclosed edits are · corral-ledger-2: hashed in the sparse form (a recorded false or zero is not distinguished from an absent one) and its scan_uid is not derivable from the entry · signer name is self-reported: corral-ledger-2 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 20 | 2026-09-07 12:07 UTC |
adjudication |
confirmed d0f2993a4adf#R4 by pdbethke: real: invalid and timed-out mutants were planted and are part of what was tried; skipping them lets the next generator re-roll them · corral-ledger-2: hashed in the sparse form (a recorded false or zero is not distinguished from an absent one) and its scan_uid is not derivable from the entry · signer name is self-reported: corral-ledger-2 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 19 | 2026-09-07 12:07 UTC |
adjudication |
confirmed d0f2993a4adf#R3 by pdbethke: real: an empty ParentSHA256 is reported as 'a different version of this file' when it is 'no version recorded'; the message is false for that case · corral-ledger-2: hashed in the sparse form (a recorded false or zero is not distinguished from an absent one) and its scan_uid is not derivable from the entry · signer name is self-reported: corral-ledger-2 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 18 | 2026-09-07 12:07 UTC |
adjudication |
confirmed d0f2993a4adf#R2 by pdbethke: real: Digest omits Search/Replace while Render quotes them, so two different prompts share a fingerprint and the cache key cannot tell them apart. fix: hash the hunk · corral-ledger-2: hashed in the sparse form (a recorded false or zero is not distinguished from an absent one) and its scan_uid is not derivable from the entry · signer name is self-reported: corral-ledger-2 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 17 | 2026-09-07 12:07 UTC |
adjudication |
confirmed d0f2993a4adf#R1 by pdbethke: real: the merge key (sha, id) with positional ids (s0/m1 repeats every run) drops a later run's edits on an unchanged file; the script's test held and codex traced the merge. fix: the key carries the edit's span and hunk · corral-ledger-2: hashed in the sparse form (a recorded false or zero is not distinguished from an absent one) and its scan_uid is not derivable from the entry · signer name is self-reported: corral-ledger-2 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 16 | 2026-09-07 12:06 UTC |
review |
review of internal/prior by claude-code: 2 reproduced, 4 code-read, 0 hypothesis · corral-ledger-2: hashed in the sparse form (a recorded false or zero is not distinguished from an absent one) and its scan_uid is not derivable from the entry · signer name is self-reported: corral-ledger-2 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 15 | 2026-09-07 11:50 UTC |
adjudication |
refuted 54e55c10537f#R2 by pdbethke: narrower than claimed: fleet_claims keys the limiter on identity(req, "anonymous") with a FIXED fallback, not a caller-supplied name, so the rotating-name bypass ask_fleet closed is not reachable here; a subagent's key is its delegation name, and minting delegations is itself admin-gated · corral-ledger-2: hashed in the sparse form (a recorded false or zero is not distinguished from an absent one) and its scan_uid is not derivable from the entry · signer name is self-reported: corral-ledger-2 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 14 | 2026-09-07 11:50 UTC |
adjudication |
confirmed 54e55c10537f#R1 by pdbethke: real, and the fifth review's shape — a rule enforced at one door and not the other: admin.go says every admin door gates on isHumanAdmin; the ad-hoc SQL door gated on isAdmin, so a delegation token under a superuser could read the whole telemetry store. the reviewer's reproduction is kept as the regression test; fixed · corral-ledger-2: hashed in the sparse form (a recorded false or zero is not distinguished from an absent one) and its scan_uid is not derivable from the entry · signer name is self-reported: corral-ledger-2 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 13 | 2026-09-07 11:48 UTC |
review |
review of internal/brain by claude-sonnet-5: 1 reproduced, 1 code-read, 0 hypothesis · corral-ledger-2: hashed in the sparse form (a recorded false or zero is not distinguished from an absent one) and its scan_uid is not derivable from the entry · signer name is self-reported: corral-ledger-2 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 12 | 2026-09-07 11:42 UTC |
review |
review of internal/brain by gemini-3.6-flash: 0 reproduced, 0 code-read, 0 hypothesis · corral-ledger-2: hashed in the sparse form (a recorded false or zero is not distinguished from an absent one) and its scan_uid is not derivable from the entry · signer name is self-reported: corral-ledger-2 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 11 | 2026-09-07 00:39 UTC |
adjudication |
refuted 5e49d9f21ad8#R3 by pdbethke: json.Marshal cannot fail on a slice of structs of strings, ints and *int; the verifier's argument is correct · corral-ledger-2: hashed in the sparse form (a recorded false or zero is not distinguished from an absent one) and its scan_uid is not derivable from the entry · signer name is self-reported: corral-ledger-2 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 10 | 2026-09-07 00:39 UTC |
adjudication |
confirmed 5e49d9f21ad8#R2 by pdbethke: the doc comment describes an entryHash parameter that was designed and never added; the linkage runs the other way (the entry names the statement). comment fixed · corral-ledger-2: hashed in the sparse form (a recorded false or zero is not distinguished from an absent one) and its scan_uid is not derivable from the entry · signer name is self-reported: corral-ledger-2 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 9 | 2026-09-07 00:39 UTC |
adjudication |
refuted 5e49d9f21ad8#R1 by pdbethke: by design: an empty hash is what omitempty needs so a finding with no script carries no scriptSha256; the verifier's reproduction showed exactly that · corral-ledger-2: hashed in the sparse form (a recorded false or zero is not distinguished from an absent one) and its scan_uid is not derivable from the entry · signer name is self-reported: corral-ledger-2 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 8 | 2026-09-07 00:38 UTC |
review |
review of internal/certify/review_statement.go by claude-sonnet-5: 0 reproduced, 3 code-read, 0 hypothesis · corral-ledger-2: hashed in the sparse form (a recorded false or zero is not distinguished from an absent one) and its scan_uid is not derivable from the entry · signer name is self-reported: corral-ledger-2 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 7 | 2026-09-07 00:08 UTC |
review |
review of internal/certify/review_statement.go by gemini-3.6-flash: 0 reproduced, 0 code-read, 0 hypothesis · corral-ledger-2: hashed in the sparse form (a recorded false or zero is not distinguished from an absent one) and its scan_uid is not derivable from the entry · signer name is self-reported: corral-ledger-2 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 6 | 2026-09-06 23:55 UTC |
adjudication |
confirmed 21821837da8e#R1 by pdbethke: real: extractJSON took the first '{' in the text; the verifier tried and could not refute it. fixed in feat/verifier-seat (fenced block first, else the first balanced object that parses), with a test the old code fails · corral-ledger-2: hashed in the sparse form (a recorded false or zero is not distinguished from an absent one) and its scan_uid is not derivable from the entry · signer name is self-reported: corral-ledger-2 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 5 | 2026-09-06 23:55 UTC |
review |
review of internal/review by gemini-3.6-flash: 1 reproduced, 0 code-read, 0 hypothesis · corral-ledger-2: hashed in the sparse form (a recorded false or zero is not distinguished from an absent one) and its scan_uid is not derivable from the entry · signer name is self-reported: corral-ledger-2 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 4 | 2026-09-06 14:45 UTC |
adjudication |
confirmed c85b6ebcd6e4#R1 by pdbethke: the claim holds: filepath.Rel errors on a relative --dir against an absolute src and the error skipped the in-place check (proven by a test that fails on the unfixed code). the script's own evidence was for a different reason — its fixture entry was malformed, so exit 1 came from ReadLedgerEntry before the check ran. fixed in feat/review-loop · corral-ledger-2: hashed in the sparse form (a recorded false or zero is not distinguished from an absent one) and its scan_uid is not derivable from the entry · signer name is self-reported: corral-ledger-2 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 3 | 2026-09-06 14:44 UTC |
review |
review of cmd/corral/ledger.go by gemini-3.6-flash: 1 reproduced, 0 code-read, 0 hypothesis · corral-ledger-2: hashed in the sparse form (a recorded false or zero is not distinguished from an absent one) and its scan_uid is not derivable from the entry · signer name is self-reported: corral-ledger-2 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 2 | 2026-09-06 14:42 UTC |
adjudication |
refuted 09c43b7c81f2#R1 by pdbethke: ReadLedgerDir returns nil, nil for a directory with no scans/ subdir (ledgerdir.go: os.IsNotExist → nil), so Load never aborts on a directory of documents; the script also could not run — it imported internal packages from outside the module · corral-ledger-2: hashed in the sparse form (a recorded false or zero is not distinguished from an absent one) and its scan_uid is not derivable from the entry · signer name is self-reported: corral-ledger-2 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|
| 1 | 2026-09-06 14:42 UTC |
review |
review of internal/prior by gemini-3.6-flash: 0 reproduced, 1 code-read, 0 hypothesis · corral-ledger-2: hashed in the sparse form (a recorded false or zero is not distinguished from an absent one) and its scan_uid is not derivable from the entry · signer name is self-reported: corral-ledger-2 does not cover keyid in the hash, so it is not vouched for by the signature (the signature itself is checked) |
verified
|