A record from the Factory repository, docs/continuation-receipt.json, shown as committed except that its local paths appear as placeholders in angle brackets, such as <local evidence archive>, standing for files that are not published; a placeholder that stands in for a key keeps the file's name, as in <local evidence file: report.md>. Its private session identifiers appear as numbered placeholders, such as <private session 1>, one number for each session in this record. Every hash, date and count is as recorded. The build review says what the Factory's receipts support.
{
"date": "2026-09-28T08:12:11.559182+00:00",
"baseline": "9312fc2",
"scope": "Trusted local guarded verification with durable cancellation and bounded recovery after controller loss accepted. Real repository delivery and isolated execution remain open. Local Git only; no remote or CI.",
"implementation": [
{
"phase": "opus-fence",
"session_id": "<private session 1>",
"models_observed": [
"claude-opus-5-5"
],
"result": "success",
"is_error": false,
"duration_ms": 802361,
"raw_sha256": "93c8b2c9405a5317cb65909af7d2ca120c11260ca85af6b160a2d8fdf9911a77",
"final_sha256": "d7bd0802fce7511dad906f292762f8531c1330844ef41e49d72b531acc7d193c",
"model": "claude-opus-5-5",
"effort": "high",
"tool": "Claude Code 2.1.283"
},
{
"phase": "opus-guarded-worker",
"session_id": "<private session 1>",
"models_observed": [
"claude-opus-5-5"
],
"result": "error_during_execution",
"is_error": true,
"duration_ms": 1094830,
"raw_sha256": "a4f8fc176fbbacf7b398f086b60920ea2035a2995249a854ab49871830b27ae1",
"final_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
"model": "claude-opus-5-5",
"effort": "high",
"tool": "Claude Code 2.1.283",
"note": "Coordinator gracefully stopped construction after normal targeted checks to address independent findings; optional broad mutation run was interrupted and is not complete."
},
{
"phase": "opus-guarded-worker-fix",
"session_id": "<private session 1>",
"models_observed": [
"claude-opus-5-5"
],
"result": "success",
"is_error": false,
"duration_ms": 676114,
"raw_sha256": "df12a90f8b5d69e91620307ec55eb5a92e3f84b541283a5bf24ac9ad3d50c572",
"final_sha256": "d34b7047b38e265216edfcf08e5b8aa386259f5b6dba39ba9795b9b5d5c0e4c9",
"model": "claude-opus-5-5",
"effort": "high",
"tool": "Claude Code 2.1.283"
},
{
"phase": "opus-cancellation",
"session_id": "<private session 1>",
"models_observed": [
"claude-opus-5-5"
],
"result": "success",
"is_error": false,
"duration_ms": 287569,
"raw_sha256": "23560782d0f36d567773d8438e7dbdcc18c0f1185db6bfe9d01b4e6952d79d8c",
"final_sha256": "bb4e2595bc6179e0c52dc8ec060467ff5e16f98f872b5028ec15ea6a6355271f",
"model": "claude-opus-5-5",
"effort": "high",
"tool": "Claude Code 2.1.283"
},
{
"phase": "opus-recovery-composition",
"session_id": "<private session 1>",
"models_observed": [
"claude-opus-5-5"
],
"result": "success",
"is_error": false,
"duration_ms": 1896273,
"raw_sha256": "6f1c54850ea4172465a0b344af8f5be68189f6b44b5b8d47065e9357d7d352bf",
"final_sha256": "8d3df6d253de918111a85e03c718b0658447560c55c4c7d06350650a400ee062",
"model": "claude-opus-5-5",
"effort": "high",
"tool": "Claude Code 2.1.283"
},
{
"phase": "opus-recovery-finish",
"session_id": "<private session 2>",
"models_observed": [
"claude-opus-5-5"
],
"result": "success",
"is_error": false,
"duration_ms": 140714,
"raw_sha256": "f49d75c3a28e3d24e8c19c4d8b80d61c37b01a3bf2f67cf1db87bd45e3f40c4f",
"final_sha256": "ad120f0dde516412d6ad410d98688d340e1521b621569320ec12ea3fa8ac09b7",
"model": "claude-opus-5-5",
"effort": "high",
"tool": "Claude Code 2.1.283"
}
],
"review": {
"model": "gpt-6-astra",
"effort": "xhigh",
"disposition": "accepted guarded verification and recovery, including ledger, shared report validation, manifest parsing and legacy compatibility; R1-R5 and all follow-up variants closed",
"files": {
"<local evidence file: astra-fence-review.md>": "68a763f957dc6ee8f06261efd069aa7935dd83f203a0af1e5d691c8f6c829591",
"<local evidence file: astra-guarded-worker-review.md>": "cbde85a11bb39a19933c69da521965c035e5a7a62dee24444ff51ccee9a38d4b",
"<local evidence file: astra-cancellation-review.md>": "47853c51064f5da5e3f6be25d97f7c88ee4a65d31a5fe1d7c9452416b9055d90",
"<local evidence file: astra-recovery-review.md>": "1f785dbba227c2e8ab4784359bb272314e07e55efd1d7076e808c5cae8c14712"
},
"focused_checks": 70,
"typecheck": "passed",
"cancellation_focused_checks": 31,
"recovery_focused_checks": 23
},
"files": {
"src/attempt-fence.ts": "f14f25128419873444b7bf014642d3124edb7c85517edaf652a055d071b09ec1",
"test/attempt-fence.test.ts": "9b9a84fad5e9f713776ea30522cda08ff10b9f4ee80e0c2e17e2282f7236f034",
"test/attempt-fence-crash.test.ts": "b8159160486f3c41eab8f0a3751d925cd60b44dff3c09515bbc5c3773f3ce48f",
"test/helpers/fence-child.ts": "13ab374ca082f4361a38b0e9d121d884893452b51916f5158c0f0a880ba4310e",
"test/helpers/fence-commit-crash-child.ts": "7fade00347eb809b2c3a5e5094c65380ff470cb87934ce43636db0c1dc75a58b",
"src/assurance.ts": "141e23e2eda2fdfae16dbab4e3c016187c50bba9732becfa2e0f3f1ec63f9b0d",
"src/attempt-workspace.ts": "302544b53265745d7d0b398c75314620668a980c2e4eb5c45dd89151e902d733",
"src/canonical-json.ts": "986f7f53e942101a3a689e000242f49c5d611e641beb2817312553db32edaec2",
"src/cli.ts": "cdad515a5a3718baae60f770b67c972a3f89b60571c347ef0f883459112f5853",
"src/errors.ts": "b8575f160cb4d74340f69846095f386de53a95c4f95aae5e66143b3ed6cfcc10",
"src/evidence.ts": "b1ef9086845f3e33c92e908eac456f8f6bef3e8d07ad1e9127e92698a25317c4",
"src/execution.ts": "b33b8c072a54719150a9880cb75e8978bcf28f977512662d3d80dd1dbf5a51a6",
"src/fixture-child.ts": "e2f214750778820465a37ac5b1b0ac76f6f685c57bcfb5cb715875c5f29be67e",
"src/fixture-gate.ts": "c6cb8f21a3e44de24e5e88cf113167123b2f9d652fcc4793297b0641571f9182",
"src/fixture-manifest.ts": "c17bf09e6b075cde8b4759db4519552bb38bb48f337c85647673a0b46280499c",
"src/journal.ts": "15387ef3fa5d8de5a2de5e0a5f71d1e61193f8fd4d4b927adb452faeb1169902",
"src/local-factory.ts": "e5983c991a1d8268cdcccd8dc9db487889cacc65573cad28e5fac9dd69dbef1d",
"src/local-worker.ts": "0acd32ba8e5422afdcba31c375b4d03f310a576e7dc9294b790e46c38e879c5f",
"test/attempt-workspace.test.ts": "6d4fd76f4b703b7090e4d74f591ac928e4dec9b0722635e4ac5f75e480017e33",
"test/guarded-worker-boundaries.test.ts": "fd38641c48865b0ffd13755d558d74c127462620bb65128b331146d943293f24",
"test/guarded-worker.test.ts": "7186dc383fb643c84b87bd0d94edb6ce7f77a5fa293100f1c811964536ddf7ed",
"test/fixture-manifest.test.ts": "75f244d12a63b754527d003ee666f3d69fe90e58e23498206c257899ffeb0386",
"test/helpers/guarded-worker-child.ts": "c7997784e0a5def85579ef39539bd66c4432f0af2e21a120c07a8c0e056ea517",
"test/helpers/json-lines.ts": "f0f801ca48da2dbd7a49b150cb23279d4a7250ebcb77d3bf544550440ec266e9",
"test/helpers/broken-entry-preload.mjs": "dbb1016d1515a26b1a361764e181ad8dc1742ce07a737ff13fbfc19569d68512",
"test/execution.test.ts": "cbe21d47d4f3c26c6394752e4d19d0b6de8ad6ea8449a6e3b25a530a9cac07fd",
"test/execution-cancellation-boundaries.test.ts": "380b48509ca3bbe7bb7e062847d205658baa55d7c4c3753dfcbdbbf2a01a00ff",
"test/helpers/execution-cancellation-child.ts": "ac44894fc94dba3ec14d6578dc2513892c25e299419e39da357f24f5b35c7737",
"src/attempt-ledger.ts": "e1a95b4dc98da5f8caa453f764a97d552dbab0a5faa3bd03e456389cfafd892f",
"src/factory-support.ts": "b1fcbbfafae9796c3e4f6779beed59f5361ed9fa9afe884e779450ecbc6ffeea",
"src/guarded-verification.ts": "cca316fc6a2cb2cf26dfeb146c94a91077122a8e6cb444636e0f80c7cfc9f999",
"test/attempt-ledger.test.ts": "708d30099b3b9aba7a6e1d7c9ab0f194c2a15e64788150f49dae59ac6ae3ff72",
"test/local-factory.test.ts": "a6f68346cc1cd1a54ed6d8ffb01ef3d1b41b0bafd67cf52258865e55d5ae84e0",
"test/local-factory-recovery.test.ts": "93dcd2a286d44f812412baaac7107764465840f09348d05352126e2286b2bb81",
"test/local-factory-legacy.test.ts": "bc46fc48f7583472b3d539c41fe0e14ae3b87b341b82169b8f939517afb0e5ea",
"test/local-factory-observer-boundary.test.ts": "9224592d28c1948df0d8ceae7111971cab29abc3a90ec18c1ea47700ad319bc2",
"test/helpers/factory-cli.ts": "03f0529e47ed8c9001764a4c36ea8e03ded4118a864df214fd4fdef993ab0c65",
"test/helpers/factory-harness.ts": "afe9c4afa69163991dbb66548d5417cc8e928f0b4f0217c1dfb25271812394f3",
"test/helpers/recovery-observer-fault.ts": "fdad2d45bada8573a987615dfd114a84b6550350db82e4286947fddf12054809",
"test/guarded-verification.test.ts": "72b482af60a712cbd0a18b630069e6362a257b0b46b43cadc0611c948a08bdd1"
},
"validation": {
"producer_full_check": {
"tests": 116,
"pass": 116,
"focused_repeats": 8
},
"coordinator_focused_check": {
"typecheck": "passed",
"tests": 18,
"pass": 18,
"fail": 0,
"log": "<local evidence file>",
"sha256": "8e1e27bbb030ea6052d9c98ee515a41a2b35eae502ded5d893eb6933a02a2c90",
"note": "After retaining independent commit-crash regression and releasing a producer-test hold before directory cleanup; no runtime source changes."
},
"coordinator_full_check": {
"typecheck": "passed",
"tests": 185,
"pass": 185,
"fail": 0,
"cancelled": 0,
"skipped": 0,
"log": "<local evidence file>",
"sha256": "94ae8b81f965c62e81f50ea16bdf974539e24c995794fcedca2b0cbf648e2384",
"performedBy": "Opus finishing pass; actual exit0; coordinator inspected complete log",
"note": "After this check only a surplus EOF blank line was removed from local-factory.ts. Astra verified the exact whitespace-only change; final actual CLI demos pass on the accepted hashes."
},
"legacy_current_proof": {
"exit_code": 3,
"historicalVerdict": "Verified",
"currentOutcome": "invalidated",
"currentValidity": "invalid",
"sameRun": true,
"journalUnchanged": true,
"reasons": [
"the fixture program src/fixture-child.ts no longer matches the pinned Candidate sha256:7a30d50aefec2bfc97e35bf49cd70b9cd1aea4f69d65120036a5ba143d82b16f"
]
},
"recovery_cli_demo": {
"recordedAt": "2026-09-28T08:10:40.267683+00:00",
"receipt": "<local evidence file>",
"sha256": "67a3fe841941e595e1c8bfd18cf65dc7a533731eeab729b68440755e8424721a",
"stateDir": "<home directory path>",
"cases": [
{
"fault": "SIGKILL after claim commit",
"crashExitCode": -9,
"continuation": "verify",
"outcome": "verified",
"attempts": [
"interrupted",
"completed"
],
"pinsUnchanged": true,
"budgetUnchanged": true,
"readOnlyInspect": true
},
{
"fault": "SIGKILL after report commit",
"crashExitCode": -9,
"continuation": "recover",
"outcome": "verified",
"attempts": [
"completed"
],
"pinsUnchanged": true,
"budgetUnchanged": true,
"readOnlyInspect": true
}
]
}
},
"limitations": [
"Trusted fixed fixtures on one local POSIX host; no arbitrary-code isolation or hostile-writer protection",
"Process-crash tests do not establish power-loss or other-platform qualification",
"Fencing proves protected work cannot resume, not OS process exit; uncertain resources remain quarantined",
"Legacy /1 records retain original pins and budget; missing-report attempts remain unresolved and are never re-dispatched",
"Recovery is performed by verify/recover invocations; no background service or external release is commissioned",
"Real repository/provider delivery and the 27 customer-value epics remain open; optional earlier broad mutation sweep was not completed"
]
}