Files
paperspec/fixtures/invalid/missing-required-file/package/receipts.jsonl
T
alexmandClaude ea0a7efa78 feat: zipped packages, target set, checklists, audit fixes and a stress test
Features for the next six months (accessible HTML export, paperpack and
Lode on packages, the personal bundle):

- Zipped packages: the oracle writes and reads `.sct.zip` archives under
  the rules of spec/12 §12.2; validate.py and load.py accept them; a
  byte-identical zip of the tiny package joins the fixtures, and two
  broken archives (traversal, symbolic link) join fixtures/invalid.
- The target set of targeted F3 (spec/08 §8.10) is computed by the
  oracle and pinned by vectors/targets.jsonl under each digit rule; the
  rule now covers cells as well as sentences and the leaves of anchored
  containers, and defines a node's section.
- scienting-checklist/1 (provisional): a conformance check of an export,
  covered by a receipt as ["checklist", id, hash] (spec/08 §8.11), with a
  WCAG 2.1 AA fixture and its receipt.
- QA reports are signed like receipts (spec/08 §8.9).
- A `description` annotation body with role alt or long, so an
  accessible export can find a confirmed figure description; the layer
  fixture carries one, and the store's body-kind constraint allows it.
- scienting-spot-check/1, the seed payload, is registered with a schema.
- exercise, submission and grade are provisional until a course has
  used them.

Audit fixes, each with a vector or a broken package where one was
missing:

- Folder packages: symbolic links are refused on validate and load,
  manifest paths must not collide under case folding, listed files are
  matched by exact name, files are hashed in chunks under a size limit.
- Files are compared byte for byte, so CR LF, a byte order mark, NaN,
  a lone surrogate or invalid UTF-8 is refused instead of translated;
  integers beyond 2^53 are read as doubles, as canonical JSON writes them.
- Receipts: signature.key must equal by and the key must be valid when
  signed; a qa receipt's nodes must be the sample at the original's
  hashes, its scope must name qa.of, its errors must be sampled nodes;
  statuses are computed once, iteratively, so chains of spot-checks
  hundreds deep settle; Base64 and manifest shape errors become refusals
  instead of tracebacks; counts and the fidelity of roster-less packages
  are recomputed.
- The gate enforces rule 11 of spec/11 §11.4: changed nodes are
  validated against the node schema and the references between nodes
  are checked, so a set to a bad value, an insert with unknown
  properties or a delete of a referenced header cell is refused; a
  relabel to null drops the label; a reclassify drops foreign
  attributes; a split strips whitespace across runs; ids.jsonl order
  follows spec/04 §4.4 in every state; a move after itself is refused.
- Anchors: the relabel rule requires that nothing else changed below the
  node; an alias chain ending in a deletion no longer crashes resolve.
- Notation: a script after an empty group applies to the previous atom
  ({}^{14}C); letters are defined by Unicode block in spec/05 §5.4 and
  the oracle; \left) is complex.
- Page fingerprints delete whitespace before folding, so "10 -20" and
  "10-20" fold alike (spec/07 §7.1).
- Grades are summed with exact decimals; the reviewer error bound is
  computed with integer arithmetic.
- receipts and revocations are keyed by (doc_key, id) in SQL, since one
  revocation may be carried by several packages.

Checking:

- tools/stress.py: seeded randomized property tests over canonical JSON,
  normalization, notation, random correction walks, anchor resolution,
  Merkle roots, spot-check samples, error bounds, fingerprints, mutated
  archives and packages, rights and spot-check chains; CI runs it.
- check.py verifies every count and version the prose states against
  the repository, the zipped fixture and crafted archives, the checklist
  coverage, and nine more broken packages.
- CONTRIBUTING.md gains a release checklist.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
2026-10-14 20:07:22 -04:00

2 lines
2.1 KiB
JSON

{"at":"2026-10-11T12:00:00Z","by":"ana","doc":"tiny2026example","evidence":[{"kind":"crop","node":"cjkdv61","sha256":"6e12bbc22302e7b635b18df516ad91e1a3ba23cc98e303cffd9f04925ca4e21c"},{"kind":"crop","node":"jss11hp","sha256":"09a6be7a365bc435b545392abd5cd35d3d4cfb1954cb8a72e357c2a349b4c7c9"},{"kind":"crop","node":"k69qp1x","sha256":"e136e117a2cceaff1b8133b8d5c9cf079eb902c8adf0de1585bfe1d040bd39f3"},{"kind":"crop","node":"pd32xxr","sha256":"27b56093c27a4356ff2d21dd0e3d944f9ffef1dcec1e9b536341e5a1e67c9965"},{"kind":"crop","node":"qrvfgfb","sha256":"1b702389a8acd28e0a691a1d12f0cfff18cfdc25338018e9d45e670ec7280a39"},{"kind":"crop","node":"tn1vrf0","sha256":"e80437c7d4dd642527dbffd5f221a0b5d3e4fded4f02d901aafb6a77e782ce2c"},{"kind":"crop","node":"v43b2r1","sha256":"3039d88c2df8d0a934de6818297f9f0e3da8b1ab2a20204d77050543ee82a5a7"},{"kind":"crop","node":"w1dkdqd","sha256":"7650611ebd6f085066b2d9c2556faa33cc1389d7fb9ec762d909d3db588eacbf"},{"kind":"crop","node":"whq15cf","sha256":"7e136414636ea5bffe8958b5cf895fb52defa77050e0e444d45bbb0ecbcd84f5"},{"kind":"witness","sha256":"fda3f1e9bb3538cd85dcc42281e00fd045f726652664439ce5a15d8489425b21"}],"format":"scienting-receipt/1","id":"kmxw2ekgx2ek4","level":"F3","nodes":[["cjkdv61","e5934b14bfa48e6849f2902d59934dfa81e86a9866f656a0270d9df2d6226078"],["jss11hp","ec5d51bd0027283d3a6f32dce37228ac9290eba1eae32b12c0d148ae247fbb78"],["k69qp1x","413dfb455f4b2940f62e25f18b4dbafb1ea0dd2378b20b33d3ac18e3221245bf"],["pd32xxr","443539440dca73149ca75276492334ce9a5a6c50070137e8dc7bf414b75a27ab"],["qrvfgfb","a1cc3f2e8226fd3036f8d3d93b810dd6606e1b59f1b0383e8f9f4cdc9b173f56"],["tn1vrf0","ef0f58e83c4f36c7eca0b3380e3f520bb6684a182045296691af46980a3951f6"],["v43b2r1","f5761f338b2878dff39a6ee724a75b13626dd625a0df96cf1cc6f9e8258cb7cc"],["w1dkdqd","71b1af6dd6a56f24cb3b338e0fe99df06b9154ecdf4b391b00b7a7e61e23a8ed"],["whq15cf","caeb3ae57d0821b8ac961c9507debbcda2b118b16cdc010b83a143a782058d57"]],"rev":0,"root":"c8716a570ed36851723b0a8f4caf35e05adce12314315a40355eb5dbded00cc2","scope":"all","signature":{"key":"ana","scheme":"ed25519","value":"wPOEH5RpoWW9fkNCLWFt6iYfliHMf40SwbQN5kgtGuBBImylXvx1rhFp/jUGJaQj3QjToR/uy8u3a9v3iu5jCA=="}}