docs(runner): retain Pi v5 security and paid control proofs

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-10-30 05:16:50 +01:00 · 2026-09-28 17:42:05 -05:00
1 parent 94ef513f89
commit ddeee41ee6
@@ -0,0 +1,122 @@
+{
+  "schema": "paperclip.pi-native-controls-proof.v1",
+  "sourceRevision": "aec26ad83f1d082f0d0a5eaffbd615a9e2e26155",
+  "providerPackDigest": "sha256:cf7d0998bbc2bed7b893c726c2b6455ba8a683d9cff7d92afedbff2d5900d500",
+  "profileDigest": "sha256:020d96ccbd3c45c3f62680814776394ed5a56d9572a1a4dccda56a74d16c7803",
+  "actualSelectedModel": "openrouter/deepseek/deepseek-v4-flash-0731",
+  "modelPromptRequests": 1,
+  "visibleText": "STEERED_CURRENTQUEUED_NEXT",
+  "staleSteerRejected": true,
+  "permissionRequests": 1,
+  "settlement": {
+    "stopReason": "end_turn",
+    "usage": {
+      "inputTokens": 3727,
+      "outputTokens": 140,
+      "cachedReadTokens": 1792,
+      "cachedWriteTokens": 0,
+      "totalTokens": 5659,
+      "_meta": {
+        "paperclipPi": {
+          "provenance": "assistant_message_receipts",
+          "costUsd": 0.0006111560000000002,
+          "costSource": "pi_pricing_estimate"
+        }
+      }
+    },
+    "metadata": null
+  },
+  "oracle": {
+    "markerExistedBefore": false,
+    "markerExistsAfter": false,
+    "method": "independent filesystem stat before cleanup"
+  },
+  "limits": [
+    "Direct ACP active steering, queued native follow-up and owned extension denial; durable PRP restart replay is not exercised.",
+    "Pipe write acknowledgement is followed by the matching failed tool update and settled prompt."
+  ],
+  "attemptId": "pi-native-controls-03",
+  "profileVersion": 5,
+  "qualificationStatus": "pending",
+  "environment": {
+    "platform": "darwin",
+    "architecture": "arm64",
+    "execution": "direct-native-acp"
+  },
+  "controls": [
+    {
+      "method": "pi/steer",
+      "kind": "steer",
+      "accepted": true,
+      "activePromptPending": true,
+      "ackBeforePermissionResponse": true,
+      "activeSessionIdentityMatched": true
+    },
+    {
+      "method": "pi/follow_up",
+      "kind": "follow_up",
+      "accepted": true,
+      "activePromptPending": true,
+      "ackBeforePermissionResponse": true,
+      "activeSessionIdentityMatched": true
+    }
+  ],
+  "decision": {
+    "count": 1,
+    "normalizedInvocationId": "pi-849b369266c920633abffa988509e4ba61fcdf464f62c73900fd5ddd6d477402",
+    "toolTitle": "Pi write",
+    "originalOfferedOptionIds": [
+      "allow_once",
+      "allow_always",
+      "reject_once"
+    ],
+    "selectedOriginalOptionId": "reject_once",
+    "persistedAndFsyncedBeforeResponse": true,
+    "pipeWriteAcknowledged": true,
+    "matchingFailedToolUpdate": true,
+    "rawRequestAndSessionIdsRetainedPrivately": true
+  },
+  "result": {
+    "durationSeconds": 19.199,
+    "exitCode": 0,
+    "stopReason": null,
+    "status": "passed"
+  },
+  "cost": {
+    "catalogEstimateUsd": 0.0006111560000000002,
+    "costSource": "pi_pricing_estimate",
+    "providerReportedUsd": null,
+    "observedKeyDeltaUsd": 0.000151739,
+    "earlyObservedKeyDeltaUsd": 0,
+    "cumulativeObservedExclusiveKeyDeltaUsd": 0.028858372,
+    "billingReconciliation": "Later exclusive-key observation resolves initial unchanged reads; no intervening provider activity."
+  },
+  "supervision": {
+    "model": "openrouter/deepseek/deepseek-v4-flash-0731",
+    "source": "aec26ad83f1d082f0d0a5eaffbd615a9e2e26155",
+    "packDigest": "sha256:cf7d0998bbc2bed7b893c726c2b6455ba8a683d9cff7d92afedbff2d5900d500",
+    "reservationUsd": 2,
+    "billingWatchdogUsd": 0.5,
+    "activeDeadlineSeconds": 120,
+    "outerDeadlineSeconds": 300,
+    "deadlineClocks": [
+      "wall",
+      "monotonic"
+    ],
+    "sleepAssertion": "caffeinate -i",
+    "automaticRetries": 0,
+    "providerPromptMaximum": 1
+  },
+  "cleanup": {
+    "probeFinallyCompleted": true,
+    "childCloseAndVerifiedCommandLeaseCloseAwaited": true,
+    "temporaryWorkspaceRemovalAwaited": true,
+    "matchingLiveProbeOrPiProcesses": 0,
+    "databaseStarted": false
+  },
+  "publication": {
+    "hiddenReasoningIncluded": false,
+    "credentialsIncluded": false,
+    "providerSessionIdsIncluded": false
+  }
+}
@@ -0,0 +1,283 @@
+{
+  "schema": "paperclip.pi-v5-offline-qualification/v1",
+  "sourceRevision": "aec26ad83f1d082f0d0a5eaffbd615a9e2e26155",
+  "profileVersion": 5,
+  "model": "openrouter/deepseek/deepseek-v4-flash-0731",
+  "qualification": "pending",
+  "paidCalls": 0,
+  "credentials": false,
+  "sourceTrees": {
+    "packages/paperclip-runner/src": "08da7f645ec75be82e525da2d0cae46b329b734f",
+    "packages/paperclip-runner/scripts": "5413d7ec0e8306efa29c43c063c642e7984c13ce",
+    "packages/paperclip-runner/runner": "b9b519d1766df8af629a2eacb91d51ee6a1f92c2",
+    "patches": "5d9ae2a6546e13f780269e4fdbf03efa99fbafe4",
+    "server/src": "1a4c4b7000becae6021d74e7dc0f2f36180c767c",
+    "tests/runner-e2e": "6d15ec5668fda2eed3bd308e11e0fda0cf48ca19"
+  },
+  "verification": {
+    "recursiveTypecheck": "passed",
+    "fullRepositoryBuild": "passed",
+    "typescriptIncludingActualInstallation": 43,
+    "installedWrapperAndNativeSdk": 19,
+    "materializer": 8,
+    "nativeBackendRustTestsPassed": 13,
+    "independentCodeReview": "no blocking findings",
+    "cleanDependencyResolutions": 2,
+    "resolvedLockSha256": "9eea60187c6c808efb4d936a234a8d8000beac45253091abd4c5348132bd1408",
+    "trackedLockUnchanged": true
+  },
+  "pack": {
+    "sourceRevision": "aec26ad83f1d082f0d0a5eaffbd615a9e2e26155",
+    "packDigest": "sha256:cf7d0998bbc2bed7b893c726c2b6455ba8a683d9cff7d92afedbff2d5900d500",
+    "manifestFileSha256": "6fe0fae6057a1d4503e0b0901bce330b403b64f7610a27695ff289f0f2181c58",
+    "target": {
+      "platform": "darwin",
+      "architecture": "arm64"
+    },
+    "productionLock": "sha256:9eea60187c6c808efb4d936a234a8d8000beac45253091abd4c5348132bd1408",
+    "distDigest": "sha256:2fc9b100eb4b3a8dde6d51cdcf3741815dde783579fe35c7d04e59833440ffff",
+    "verifiedProviders": {
+      "cursor": {
+        "version": "2026.09.26-dd393fe",
+        "profileDigest": "sha256:1157a5d071abbd57ab132f22bace75c65e84cc47a045b0023475488755e14899",
+        "closureDigest": "sha256:77394184a89b0e7384971181da19c3c82d83a399b04e7944b3f94fe3d7e62b25",
+        "qualification": "pending",
+        "path": "provider-assets/cursor/darwin-arm64",
+        "sha256": "sha256:3b6de19114d4df62f648604025a0d71937dfa7c2b15b397cce5da2c5da268994",
+        "verifiedFileCount": 446
+      },
+      "copilot": {
+        "version": "1.0.88",
+        "profileDigest": "sha256:b18c01603dd0169d233140709cfaa8bf5304a03cf5de78ca4f625f30013e8457",
+        "closureDigest": "sha256:fb3b367a45cd76122fe931521fa2a18adf234ba944fc302db9e10e005e57037e",
+        "qualification": "pending",
+        "path": "provider-assets/copilot/darwin-arm64",
+        "sha256": "sha256:49ad871973843e2bfc3ee1d1886f6a1537e887748cc6f3d5148b3ec7f3c7298f",
+        "verifiedFileCount": 1
+      },
+      "pi": {
+        "version": "0.84.2",
+        "profileDigest": "sha256:020d96ccbd3c45c3f62680814776394ed5a56d9572a1a4dccda56a74d16c7803",
+        "closureDigest": "sha256:0010175e4bc200f145386e59f7a824cf7532ad273e9db6824d22c4f82cdcd6ff",
+        "qualification": "pending",
+        "path": "provider-assets/pi/darwin-arm64",
+        "sha256": "sha256:a679a009c1fe370fed020acad1c642848a278278306885edd9c47de897cfe566",
+        "verifiedFileCount": 13827
+      }
+    },
+    "providerInferenceCalls": 0,
+    "providerProcessesStarted": 0
+  },
+  "outerNode": {
+    "version": "24.21.0",
+    "bundledUndici": "7.29.1",
+    "sha256": "e4b5a3af0e05c75de2eae013904145f40fe7fc2a6e6f17510128bf45cca4e79b",
+    "relocatedPackInterpreterExecuted": true
+  },
+  "nativeLaunch": {
+    "schema": "paperclip.combined-provider-offline-smoke/v1",
+    "provider": "pi",
+    "target": {
+      "platform": "darwin",
+      "architecture": "arm64"
+    },
+    "sourceRevision": "aec26ad83f1d082f0d0a5eaffbd615a9e2e26155",
+    "providerPackDigest": "sha256:cf7d0998bbc2bed7b893c726c2b6455ba8a683d9cff7d92afedbff2d5900d500",
+    "candidate": {
+      "version": "0.84.2",
+      "profileDigest": "sha256:020d96ccbd3c45c3f62680814776394ed5a56d9572a1a4dccda56a74d16c7803",
+      "closureDigest": "sha256:0010175e4bc200f145386e59f7a824cf7532ad273e9db6824d22c4f82cdcd6ff",
+      "qualification": "pending",
+      "path": "provider-assets/pi/darwin-arm64",
+      "sha256": "sha256:a679a009c1fe370fed020acad1c642848a278278306885edd9c47de897cfe566"
+    },
+    "commandDigest": "sha256:020d96ccbd3c45c3f62680814776394ed5a56d9572a1a4dccda56a74d16c7803",
+    "registryLaunch": "verifyAcpxProfileInstallation/openCommand/spawn",
+    "initializeRequestId": 0,
+    "protocolVersion": 1,
+    "nativeInfo": {
+      "name": "pi-acp",
+      "title": "pi ACP adapter",
+      "version": "0.0.33"
+    },
+    "agentCapabilities": {
+      "loadSession": true,
+      "mcpCapabilities": {
+        "http": true,
+        "sse": false
+      },
+      "_meta": {
+        "paperclipPi": {
+          "version": 1,
+          "steering": true,
+          "queuedFollowUp": true,
+          "questions": [
+            "select",
+            "confirm",
+            "input",
+            "editor"
+          ],
+          "nativePermissions": true,
+          "promptUsage": true,
+          "nativePlan": false,
+          "pendingRequestRecovery": "live-process-only"
+        }
+      },
+      "promptCapabilities": {
+        "image": true,
+        "audio": false,
+        "embeddedContext": false
+      },
+      "sessionCapabilities": {
+        "list": {}
+      }
+    },
+    "exitCode": 0,
+    "eofSettled": true,
+    "prompts": 0,
+    "inferenceCalls": 0,
+    "network": "macOS sandbox-exec deny network*",
+    "credentials": false,
+    "explicitModelOnlyForProfileAdmission": "openrouter/deepseek/deepseek-v4-flash-0731",
+    "modelSelected": false,
+    "providerGroupCleanup": true,
+    "privateStateRemoved": true
+  },
+  "runnerBinary": {
+    "source": "aec26ad83f1d082f0d0a5eaffbd615a9e2e26155",
+    "rustTree": "b9b519d1766df8af629a2eacb91d51ee6a1f92c2",
+    "sha256": "fe03a5f5e7b7d51aafb398aa435e4a200ca6e0206c46b84ba0baa15aa0be5f31",
+    "profileVersion": 5,
+    "profileDigest": "sha256:020d96ccbd3c45c3f62680814776394ed5a56d9572a1a4dccda56a74d16c7803",
+    "model": "openrouter/deepseek/deepseek-v4-flash-0731",
+    "mode": "0555",
+    "build": "pnpm build (release runnerd)"
+  },
+  "fullRunnerStartup": {
+    "credentials": false,
+    "promptCalls": 0,
+    "durationMs": 8558,
+    "result": "typed_rejection",
+    "code": "command_execution_failed",
+    "classification": "session_ensure_failed",
+    "unchangedDeadlineMs": 30000,
+    "interpretation": "Credential-free admission rejection; not authenticated session success."
+  },
+  "securityProof": "security-closure-proof.v5.json",
+  "limits": [
+    "macOS ARM64 credential-free launch only; no authenticated v5 qualification in this artifact.",
+    "x64 Node archives and closure identities are pinned; target execution is not demonstrated by this artifact.",
+    "Historical v1-v4 evidence remains bound to its own source and bytes."
+  ],
+  "independentCombinedRegistryStartup": {
+    "schema": "paperclip.combined-provider-probe-index/v2",
+    "sourceRevision": "aec26ad83f1d082f0d0a5eaffbd615a9e2e26155",
+    "providerPackDigest": "sha256:cf7d0998bbc2bed7b893c726c2b6455ba8a683d9cff7d92afedbff2d5900d500",
+    "platform": {
+      "platform": "darwin",
+      "architecture": "arm64"
+    },
+    "outerInterpreter": {
+      "version": "24.21.0",
+      "bundledUndici": "7.29.1",
+      "sha256": "sha256:e4b5a3af0e05c75de2eae013904145f40fe7fc2a6e6f17510128bf45cca4e79b"
+    },
+    "proofs": {
+      "cursor": {
+        "sha256": "39d5e570970f476dd861f26d616383a5fb8751e90644e8f902f316d530df4b8b",
+        "registryLaunch": "verifyAcpxProfileInstallation/openCommand/spawn",
+        "candidate": {
+          "version": "2026.09.26-dd393fe",
+          "profileDigest": "sha256:1157a5d071abbd57ab132f22bace75c65e84cc47a045b0023475488755e14899",
+          "closureDigest": "sha256:77394184a89b0e7384971181da19c3c82d83a399b04e7944b3f94fe3d7e62b25",
+          "qualification": "pending",
+          "path": "provider-assets/cursor/darwin-arm64",
+          "sha256": "sha256:3b6de19114d4df62f648604025a0d71937dfa7c2b15b397cce5da2c5da268994"
+        },
+        "initialized": true,
+        "protocolVersion": 1,
+        "nativeInfo": null,
+        "eofExit": {
+          "exitCode": null,
+          "cleanExit": false
+        },
+        "explicitCleanupRequired": true,
+        "leaseCleanupPassed": true,
+        "privateStateRemoved": true,
+        "supervisorExitCode": 0,
+        "networkPolicy": "deny network",
+        "fixtureRequests": [],
+        "durationSeconds": 7.233
+      },
+      "copilot": {
+        "sha256": "44cdc7243d93f7bf0a78cb955d15c145f7b0cbf482664f4a03ebd887d2d7ea5f",
+        "registryLaunch": "verifyAcpxProfileInstallation/openCommand/spawn",
+        "candidate": {
+          "version": "1.0.88",
+          "profileDigest": "sha256:b18c01603dd0169d233140709cfaa8bf5304a03cf5de78ca4f625f30013e8457",
+          "closureDigest": "sha256:fb3b367a45cd76122fe931521fa2a18adf234ba944fc302db9e10e005e57037e",
+          "qualification": "pending",
+          "path": "provider-assets/copilot/darwin-arm64",
+          "sha256": "sha256:49ad871973843e2bfc3ee1d1886f6a1537e887748cc6f3d5148b3ec7f3c7298f"
+        },
+        "initialized": true,
+        "protocolVersion": 1,
+        "nativeInfo": {
+          "name": "Copilot",
+          "title": "Copilot",
+          "version": "1.0.88"
+        },
+        "eofExit": {
+          "exitCode": 0,
+          "cleanExit": true
+        },
+        "explicitCleanupRequired": false,
+        "leaseCleanupPassed": true,
+        "privateStateRemoved": true,
+        "supervisorExitCode": 0,
+        "networkPolicy": "deny network except loopback",
+        "fixtureRequests": [],
+        "durationSeconds": 2.872
+      },
+      "pi": {
+        "sha256": "1c4395d673fc4ba789cf90b570ae4f8e9431fe5676eae3fcad9c6347aa971d84",
+        "registryLaunch": "verifyAcpxProfileInstallation/openCommand/spawn",
+        "candidate": {
+          "version": "0.84.2",
+          "profileDigest": "sha256:020d96ccbd3c45c3f62680814776394ed5a56d9572a1a4dccda56a74d16c7803",
+          "closureDigest": "sha256:0010175e4bc200f145386e59f7a824cf7532ad273e9db6824d22c4f82cdcd6ff",
+          "qualification": "pending",
+          "path": "provider-assets/pi/darwin-arm64",
+          "sha256": "sha256:a679a009c1fe370fed020acad1c642848a278278306885edd9c47de897cfe566"
+        },
+        "initialized": true,
+        "protocolVersion": 1,
+        "nativeInfo": {
+          "name": "pi-acp",
+          "title": "pi ACP adapter",
+          "version": "0.0.33"
+        },
+        "eofExit": {
+          "exitCode": 0,
+          "cleanExit": true
+        },
+        "explicitCleanupRequired": false,
+        "leaseCleanupPassed": true,
+        "privateStateRemoved": true,
+        "supervisorExitCode": 0,
+        "networkPolicy": "deny network",
+        "fixtureRequests": [],
+        "durationSeconds": 11.046
+      }
+    },
+    "credentialsProvided": false,
+    "promptsSent": 0,
+    "providerInferenceCalls": 0,
+    "remainingProbeSupervisors": 0,
+    "qualification": "pending; credential-free initialization only; no model/paid/Daytona qualification",
+    "unchangedSiblingProviderIdentities": [
+      "cursor",
+      "copilot"
+    ]
+  }
+}
@@ -1,6 +1,6 @@
 {
  "schema": "paperclip.pi-paid-qualification-progress.v1",
-  "recordedAt": "2026-09-28T22:24:39.777300+00:00",
+  "recordedAt": "2026-09-28T22:41:36.062345+00:00",
  "qualificationStatus": "pending",
  "environment": {
    "platform": "darwin",
@@ -17,7 +17,7 @@
  "budget": {
    "authorizedMaximumUsd": 25,
    "reservedPerBatchUsd": 2,
-    "measuredSpendUsd": 0.028706633,
+    "measuredSpendUsd": 0.028858372,
    "measurement": "exclusive OpenRouter key billing delta; model catalog estimates are not provider billing",
    "billingGroups": [
      {
@@ -700,6 +700,38 @@
      },
      "automaticRetries": 0,
      "evidence": "native-controls-proof.v4.darwin-arm64.json"
+    },
+    {
+      "attemptId": "pi-native-controls-03",
+      "family": "native-acp",
+      "caseId": "active-steer-queued-follow-up-and-denied-write",
+      "profileVersion": 5,
+      "source": "aec26ad83f1d082f0d0a5eaffbd615a9e2e26155",
+      "packDigest": "sha256:cf7d0998bbc2bed7b893c726c2b6455ba8a683d9cff7d92afedbff2d5900d500",
+      "profileDigest": "sha256:020d96ccbd3c45c3f62680814776394ed5a56d9572a1a4dccda56a74d16c7803",
+      "model": "openrouter/deepseek/deepseek-v4-flash-0731",
+      "status": "passed",
+      "modelPromptRequests": 1,
+      "durationSeconds": 19.199,
+      "billingDeltaUsd": 0.000151739,
+      "earlyObservedKeyDeltaUsd": 0,
+      "billingCoverage": "exclusive key delta settled on later observation",
+      "terminalUsage": {
+        "inputTokens": 3727,
+        "outputTokens": 140,
+        "cachedReadTokens": 1792,
+        "cachedWriteTokens": 0,
+        "totalTokens": 5659,
+        "_meta": {
+          "paperclipPi": {
+            "provenance": "assistant_message_receipts",
+            "costUsd": 0.0006111560000000002,
+            "costSource": "pi_pricing_estimate"
+          }
+        }
+      },
+      "automaticRetries": 0,
+      "evidence": "native-controls-proof.v5.darwin-arm64.json"
    }
  ],
  "observedSemanticOperations": {
@@ -777,8 +809,21 @@
      "optionalInstallationSuitePassed": 5,
      "installedPackageAndMaterializerTestsPassed": 24,
      "nativeRustTestsPassed": 13,
-      "authenticatedQualification": "blocked before provider startup by local database fixture infrastructure",
+      "authenticatedQualification": "Product blocked before provider startup by local database fixture infrastructure; separate native controls probe passed",
      "nativeControlsProof": "native-controls-proof.v4.darwin-arm64.json"
+    },
+    "version5": {
+      "source": "aec26ad83f1d082f0d0a5eaffbd615a9e2e26155",
+      "offlineProof": "offline-provider-pack-proof.v5.darwin-arm64.json",
+      "securityClosureProof": "security-closure-proof.v5.json",
+      "nativeControlsProof": "native-controls-proof.v5.darwin-arm64.json",
+      "recursiveTypecheck": "passed",
+      "fullBuild": "passed",
+      "focusedTypeScriptTestsPassed": 43,
+      "installedWrapperAndNativeSdkTestsPassed": 19,
+      "materializerTestsPassed": 8,
+      "nativeRustTestsPassed": 13,
+      "qualification": "pending; one direct ACP controls probe passed, complete Product/Daytona matrix remains pending"
    }
  },
  "publicationBoundary": {
@@ -789,7 +834,7 @@
  },
  "remaining": [
    "Successful canonical Runner protocol completion",
-    "Semantic plan approval with canonical write boundary, pending-input restart, and refreshed version4 Product hello",
+    "Current version5 local Product hello, file, question, semantic plan and pending-input restart journeys",
    "Durable native pending-request reconnect/recovery beyond direct ACP controls",
    "Complete token and price/billing coverage, separate from catalog estimates",
    "Linux x64 Daytona authenticated qualification"
@@ -0,0 +1,173 @@
+{
+  "schema": "paperclip.pi-security-closure-proof.v1",
+  "sourceRevision": "aec26ad83f1d082f0d0a5eaffbd615a9e2e26155",
+  "advisory": "https://github.com/advisories/GHSA-3wwx-pv8p-q78v",
+  "profileVersion": 5,
+  "profileDigest": "sha256:020d96ccbd3c45c3f62680814776394ed5a56d9572a1a4dccda56a74d16c7803",
+  "npmCiInstalledVersionBeforeOwnedReplacement": "8.9.0",
+  "installedVersionAfterOwnedReplacement": "8.10.2",
+  "isolatedLockUnchangedByInstall": true,
+  "isolatedLockSha256": "0516456f6da2b09f35b15b17b558780f9d98419d2d911a37416e07cf0e306df4",
+  "upstreamMetadata": {
+    "package.json": {
+      "sha256": "820f4adc6d61f2cefbc29ce17e9dfd9aa482248d54be5d0dfa2a868ca000c7b0",
+      "unchangedFromV4": true
+    },
+    "npm-shrinkwrap.json": {
+      "sha256": "e09ee75249d2381fbb66d2199c9e699910ce3fa7608d55e93f6fe37c3ded5973",
+      "unchangedFromV4": true
+    }
+  },
+  "node": {
+    "version": "24.21.0",
+    "bundledUndici": "7.29.1",
+    "sha256": "e4b5a3af0e05c75de2eae013904145f40fe7fc2a6e6f17510128bf45cca4e79b"
+  },
+  "targets": {
+    "darwin-arm64": {
+      "archiveSha256": "bed7eea5325e1108f32ce5228ddd6a5f0f08a499ee42aa7442aea583702f6057",
+      "executableSha256": "e4b5a3af0e05c75de2eae013904145f40fe7fc2a6e6f17510128bf45cca4e79b",
+      "executableSize": 122129232
+    },
+    "darwin-x64": {
+      "archiveSha256": "1462cb3b3046b815cf8ea436d3da450ec1a9f11dac7e5a46b0ada5305d7e8097",
+      "executableSha256": "7abcf39bd37ab251015337ff75304d7555f0d8e88c6e0fbf04bce8ce34636f49",
+      "executableSize": 125270960
+    },
+    "linux-x64": {
+      "archiveSha256": "6e1db87ef58b8819e5d5402eff1536491b18edd8eb7bee5ef7897876e88dc5ff",
+      "executableSha256": "7fde7b8afa198da66257f42ee2001d874c7355631e6d1579a5fb5ef1f246df4c",
+      "executableSize": 126595440
+    }
+  },
+  "closureSha256": {
+    "darwin-arm64": "0010175e4bc200f145386e59f7a824cf7532ad273e9db6824d22c4f82cdcd6ff",
+    "darwin-x64": "9dd49bd1341a6e3438db56cc6b3dc772964ebcdd0552bcfbf2e5e621b2970ab6",
+    "linux-x64": "91169667544764764e2e402868fbb76a9a429575cfdb1b312b8ed8ae669ebc89"
+  },
+  "verifiedFileCount": 13827,
+  "changedRuntimeFiles": [
+    "node/bin/node",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/docs/docs/api/Client.md",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/docs/docs/api/EnvHttpProxyAgent.md",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/docs/docs/api/EventSource.md",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/docs/docs/api/Interceptors.md",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/docs/docs/api/Socks5ProxyAgent.md",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/lib/api/readable.js",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/lib/cache/memory-cache-store.js",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/lib/core/connect.js",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/lib/core/symbols.js",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/lib/dispatcher/agent.js",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/lib/dispatcher/balanced-pool.js",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/lib/dispatcher/client-h1.js",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/lib/dispatcher/client-h2.js",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/lib/dispatcher/client.js",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/lib/dispatcher/dispatcher-base.js",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/lib/dispatcher/dispatcher.js",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/lib/dispatcher/dispatcher1-wrapper.js",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/lib/dispatcher/env-http-proxy-agent.js",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/lib/dispatcher/proxy-agent.js",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/lib/dispatcher/retry-agent.js",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/lib/dispatcher/round-robin-pool.js",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/lib/dispatcher/socks5-proxy-agent.js",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/lib/handler/cache-handler.js",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/lib/handler/decorator-handler.js",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/lib/handler/deduplication-handler.js",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/lib/handler/redirect-handler.js",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/lib/handler/retry-handler.js",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/lib/interceptor/cache.js",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/lib/interceptor/decompress.js",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/lib/interceptor/deduplicate.js",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/lib/interceptor/dns.js",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/lib/interceptor/dump.js",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/lib/mock/mock-agent.js",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/lib/mock/mock-utils.js",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/lib/util/cache.js",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/lib/web/cookies/parse.js",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/lib/web/eventsource/eventsource-stream.js",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/lib/web/eventsource/eventsource.js",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/lib/web/fetch/index.js",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/lib/web/fetch/request.js",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/lib/web/fetch/util.js",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/lib/web/webidl/index.js",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/lib/web/websocket/connection.js",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/lib/web/websocket/permessage-deflate.js",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/lib/web/websocket/stream/websocketstream.js",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/lib/web/websocket/websocket.js",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/package.json",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/types/client.d.ts",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/types/interceptors.d.ts",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/types/mock-agent.d.ts",
+    "node_modules/@earendil-works/pi-coding-agent/node_modules/undici/types/socks5-proxy-agent.d.ts",
+    "package-lock.json",
+    "package.json"
+  ],
+  "archiveBounds": {
+    "compressedBytes": 4194304,
+    "inflatedTarBytes": 4194304,
+    "regularFiles": 214
+  },
+  "credentialAccess": false,
+  "providerPrompts": 0,
+  "providerInferenceCalls": 0,
+  "x64ExecutionQualified": false,
+  "tests": {
+    "materializer": 8,
+    "typescriptIncludingActualInstallation": 43,
+    "installedWrapperAndNativeSdk": 19,
+    "rustNativeBackend": 13
+  },
+  "independentReview": {
+    "source": "aec26ad83f1d082f0d0a5eaffbd615a9e2e26155",
+    "review": "read-only credential-free",
+    "packageCount": 143,
+    "verifiedFiles": 13827,
+    "closureSha256": "0010175e4bc200f145386e59f7a824cf7532ad273e9db6824d22c4f82cdcd6ff",
+    "profileSha256": "020d96ccbd3c45c3f62680814776394ed5a56d9572a1a4dccda56a74d16c7803",
+    "node": {
+      "node": "24.21.0",
+      "undici": "7.29.1"
+    },
+    "installedUndici": "8.10.2",
+    "unchangedUpstreamMetadata": {
+      "package.json": "820f4adc6d61f2cefbc29ce17e9dfd9aa482248d54be5d0dfa2a868ca000c7b0",
+      "npm-shrinkwrap.json": "e09ee75249d2381fbb66d2199c9e699910ce3fa7608d55e93f6fe37c3ded5973"
+    },
+    "unchangedDistributionLockSha256": "0516456f6da2b09f35b15b17b558780f9d98419d2d911a37416e07cf0e306df4",
+    "scope": "Reviewed source upgrades Pi private interpreter. Parent separately authorized outer pack Node24.21.0 and Docker provider-build Node24.21.0; resulting mac/Linux artifacts are not covered by this installed-distribution proof.",
+    "x64Execution": "not tested",
+    "inferenceRequests": 0,
+    "verification": {
+      "materializer": {
+        "passed": 8,
+        "failed": 0
+      },
+      "profileAndRecovery": {
+        "passed": 12,
+        "failed": 0,
+        "skipped": 1,
+        "skip": "Optional actual snapshot launch separately covered by Pi implementer"
+      },
+      "retainedOperatorSetupFailures": 2
+    },
+    "warmIdentityReview": {
+      "piOldProfileVersionsRejected": [
+        1,
+        2,
+        3,
+        4
+      ],
+      "privateProfileBinds": [
+        "wrapper patch",
+        "all platform closure pins",
+        "Node executable via closure"
+      ],
+      "outerPackBinds": [
+        "Node artifact sha256",
+        "canonical manifest digest",
+        "runner launch authority digest",
+        "persisted launch_profile_digest"
+      ]
+    }
+  }
+}