A record from the Factory repository, docs/executor-receipt.json, shown as committed except that its local paths appear as placeholders in angle brackets, such as <local evidence archive>, standing for files that are not published; a placeholder that stands in for a key keeps the file's name, as in <local evidence file: report.md>. Its private session identifiers appear as numbered placeholders, such as <private session 1>, one number for each session in this record. Every hash, date and count is as recorded. The build review says what the Factory's receipts support.
{
"date": "2026-09-28T08:49:26.407671+00:00",
"baseline": "fb9c7f4",
"scope": "Accepted stateless local macOS executor; not yet composed into repository delivery. Local only, no remote or CI.",
"implementation": {
"phase": "opus-confined-executor",
"session_id": "<private session 1>",
"models_observed": [
"claude-opus-5-5"
],
"result": "success",
"is_error": false,
"duration_ms": 1830883,
"raw_sha256": "02326b5aecf90e349be1bd2e8e123047371e9ec8473e6d780c752310dd0d4969",
"final_sha256": "8964e3bf7325fc609ab3e1dd5decfd3f54901abc63c349e2f846797e3abf9b11",
"model": "claude-opus-5-5",
"effort": "high",
"tool": "Claude Code 2.1.283"
},
"review": {
"model": "gpt-6-astra",
"effort": "xhigh",
"disposition": "accepted; no open material executor findings",
"independent_cases": 24,
"permanent_independent_regression": "Actual executor Node-FFI effective resource limits and denied hard-limit increases",
"coordinator_changes": "Source comments and documentation accuracy only; runtime code unchanged from independently probed263ecd21 revision."
},
"validation": {
"command": "npm run check",
"exit_code": 0,
"typecheck": "passed",
"tests": 209,
"passed": 209,
"failed": 0,
"skipped": 0,
"log": "<local evidence file>"
},
"runtime": {
"protocol": "sf-confined-runtime/1",
"platform": "darwin",
"arch": "arm64",
"version": "v26.8.1",
"os": {
"release": "27.0.0",
"version": "Darwin Kernel Version 27.0.0: Tue Aug 11 21:02:57 PDT 2026; root:xnu-13432.1.9~1/RELEASE_ARM64_T8132"
},
"executable": "/opt/homebrew/Cellar/node/26.8.1/bin/node",
"digest": "sha256:56d27801ef11ff28555da6677edcc42daae918b96bf1f97a80029ef7eef9cf69",
"launcher": [
{
"path": "/bin/dash",
"size": 420992,
"sha256": "5a09397855d43680e94c1c2c0f994a3537b0f2525f1bd2e11a8ce442adffc007"
},
{
"path": "/usr/bin/env",
"size": 167712,
"sha256": "2b2a1145527f00e8369fda0d2ffc523b520201bb08dbaf4b0bded837f7652ce0"
},
{
"path": "/usr/bin/sandbox-exec",
"size": 135136,
"sha256": "58839ef01b4eef8aac0d2aa8f9d1c074ae45aafe3533965b030672450064acc8"
}
]
},
"profile": {
"name": "sf-confined-node-stateless/1",
"digest": "sha256:4003ae885038ad26944881836bc5184053a5941985071fa75bcb50ef9e08aba1"
},
"files": {
"src/confined-executor.ts": "a46864e9d262a695a607bd2cea639a246ee52782178d1c038df6092cc1f0b322",
"test/confined-executor.test.ts": "e3791db15d99bb67228bcdbbf05ade0b08ab066c6d5959dac229de570dabdf7a",
"test/confined-executor-boundaries.test.ts": "82572702855480e27caecd059914c1ab1089fb0243143564435e795ef94e7810",
"test/helpers/confined-controller.ts": "e66c53f0ff9f57413efc580ba238b86b66f296041a308b7209fb4d8b73df46d1",
"test/helpers/confined-native-library.c": "3d55164145879b4ad76c5df9e50e60df5fc65c9f5ffbceadd8fbc3dfb802f278",
"test/helpers/confined-native-probe.c": "5ebc0e5aea54d4e0e17e2938ddacf7cf13bb24302f63f39244eda70009f71ffb",
"test/helpers/confined-probe.mjs": "09673509dbcfdc5b0f654870a345e84477ca9e8b748f1ef014c148171edf7145",
"test/helpers/confined.ts": "a9fbdfffd3574a8bc091af5812bb0c5cfcde68291b279ff03a88e90de3c4046f"
},
"evidence": {
"<local evidence file: astra-executor-review.md>": "a4bb33fa2491307ac2fa91b49480d3d1d96fb4e0e84b81f2af57266dfd6a58f4",
"<local evidence file: astra-executor-api-review.json>": "4a66bdd141470e2cc5e3f32a500d3deb83850d79a89b90758a80c01f73f4dd0d",
"<local evidence file: astra-executor-fault-review.json>": "6c6526929ab54b0777a38b76be8fe86391132382b4e62149cf1ef7d750296fb7",
"<local evidence file: astra-executor-runtime-identity.json>": "c9349c585e8cdfd43c1216e722bc17143fbcd964bf87021eefa2f0a5d78e3c93",
"<local evidence file: astra-executor-comment-only-proof.json>": "0aa4eba78d87609d0fddb6e7165f6565708802b25b56b1061e84f63f875e6f82",
"<local evidence file: executor-accepted-check.txt>": "6f49127fb77d709244b0dfbe677e70132a7c8958e08ef9ae3d1c2357a297939e",
"<local evidence file: executor-accepted-runtime.json>": "1fe50fca32b545c842a17dd97bdc3458f5ff656115588e66bdfbb9cf54e8e20d"
},
"closed_findings": [
"Cancellation after spawn and before collection is observed before bootstrap admission.",
"Exclusive fixed-slot creation prevents two same-cap controllers overbooking a shared root.",
"Launcher bytes and OS build participate in runtime identity.",
"CPU signal handling is not misrepresented as hard termination."
],
"limits": [
"Only the tested darwin/arm64 Node26.8.1 stateless single-process boundary.",
"Named public runtime directory subtrees remain readable; static closure hashing is not hermetic filesystem identity.",
"No hard RAM, hard aggregate disk or non-bypassable CPU-time termination guarantee.",
"No automatic termination/reclamation after observer loss; uncertain slots stay retained.",
"Shared-root controllers require the same commissioned maxRetained.",
"Host runtime files are checked before and after execution, not held immutable throughout."
],
"next": "Repair independently observed inspection schema mutation; then protected repository sealing and delivery."
}