northset.ai

Proof-of-Pass Receipts

Proof-of-pass receipts for open-source work record exactly which declared commands returned exit 0, on named code and in a named environment. Each receipt is scoped evidence, not a verdict on code quality or maintainer approval.

Request a private run

Generated at 2026-07-16T22:49:40.312Z

FEATURED RECEIPT

One real receipt, readable top to bottom.

  1. Exact commandsCopied verbatim from the signed receipt evidence.
  2. Recorded environmentImage, digest, and network policy stay visible.
  3. Scoped resultCounted declared commands; never a bare PASS.
  4. Separate outcomeLater upstream decisions detach from receipt evidence.

NORTHSET

Proof-of-Pass Receipt

CONTRIBUTOR SELF-RUN — NOT MAINTAINER VERIFICATION

Receipt ID
M-008
Run start
2026-07-12T01:49:17.299Z
Run finish
2026-07-12T01:51:33.547Z

Project

RaspberryPiFoundation/blockly-samples

Work

workspace-search buttons need type=button · PR #2748

Verification execution

runtime: northset-oss executor v0
human operator: aeziz

Code

base
c37ab067e848da5e8b136d4cf16d8cdffc653ee5
recorded patch commit
db5ccc98b2dcb5751fb2121075e067e0439ced40
declared metadata; not execution-bound
patch diff SHA-256
sha256:d171e1897e488dbb5f732e13f892ab2380eec800be4d4aea07862dd413fad922
bound to executed patch bytes

Environment

image reference
node:22-bookworm
repository digest
node@sha256:a25c9934ff6382cd4f08b6bc26c82bf4ea69b1e6f8dabfb2ead457374127c365
network
phaseA:bridge,phaseB:none

Declared checks

Execution summary
1/1 declared command returned exit 0 in the recorded environment

  1. npm run test --workspace=@blockly/plugin-workspace-search

    exit 0 · 6.5s

unclassified executor time (derived residual) 2m09s

run wall (derived from recorded timestamps) 2m16s

PASS — 1/1 declared command

Every command listed returned exit 0 in the declared environment. Only the listed commands are in scope. Unlisted test, lint, typecheck, build, coverage, compiler, full-suite, and CI gates are not implied or recorded.

Public scope interpretation

The declared network-off check runs the workspace-search plugin's Mocha unit suite (17 tests including the new button-type regression test) on Node 22, after a disclosed online phase-A install (npm ci + the plugin's build, npm cache redirected to /workspace/.npmcache). It does not run the full monorepo test/lint/format matrix; upstream CI additionally runs Node 22 and 24, eslint, and prettier --check across all packages.

Record details

payment
none · not merge-contingent
redactions
1 email
Bundle contents digest
sha256:58c3a6dd0c2e142a486cdf7c7e112fa6aa75affcc6c77a139fd5a694cf0cd64c
Signed asset SHA-256
sha256:78d81249cc1b429983365ad72de44971530936d65e938f42cdc75b8e1eb56638
Signed provenance recorded
verified 2026-07-14T14:21:48Z

NOT INCLUDED

  • Does not prove code quality
  • Does not prove security
  • Contributor self-run record of Northset's own contribution; not the maintainer's verification.
  • The declared network-off check runs the workspace-search plugin's Mocha unit suite (17 tests including the new button-type regression test) on Node 22, after a disclosed online phase-A install (npm ci + the plugin's build, npm cache redirected to /workspace/.npmcache). It does not run the full monorepo test/lint/format matrix; upstream CI additionally runs Node 22 and 24, eslint, and prettier --check across all packages.

Signed bundle

Download signed bundle

Verify this receipt

gh attestation verify run-record-M-008.tar.gz --repo northset-oss/verification-pilot --signer-workflow northset-oss/verification-pilot/.github/workflows/attest-bundle.yml

Attestation confirms that Northset's signing workflow produced this exact bundle. The signer does not witness the recorded run, and verification does not turn it into maintainer verification.

QR → receipt page
Northset contributed this fix and ran its declared checks. Contributor self-run. Not maintainer verification.

Evidence of what ran — not a verdict that the code is good.

SELF-FUNDED FIELD-TESTING.

Open full receipt →

- - - detach here - - -

External status

Mutable upstream observation; unattested and separate from the signed run record.

PR state
MERGED
Review signal
APPROVED
CI state
SUCCESS
Upstream updated at
2026-07-13T19:03:50Z
Observed at
2026-07-14T23:05:45.867Z
MERGED

Linked maintainer review · open linked record

Verify this receipt

Confirm where the attested bundle came from. This does not turn the recorded run into maintainer verification.

gh attestation verify run-record-M-008.tar.gz --repo northset-oss/verification-pilot --signer-workflow northset-oss/verification-pilot/.github/workflows/attest-bundle.yml

External status

Pull-request state and review signals are mutable upstream observations, recorded at each publication envelope's observed time. They are unattested metadata and are separate from the signed run bundle.

30 External receipts

6 Merged upstream

3 Closed unmerged

0 Open approved

1 Open changes requested

20 Open awaiting review

EXTERNAL RECEIPTS

M-021

CONTRIBUTOR SELF-RUN — NOT MAINTAINER VERIFICATION

KaotoIO/kaoto

Collapsed state of groups is not preserved when switching tabs

PASS — 4/4 declared commands

Command evidence and NOT INCLUDED are on the full receipt.

attestation: recorded

PR state: MERGED

Review signal: APPROVED

PR changed since this record. recorded patch commit 19be9992371505fcddf498cdd93c59a08c0bb152; current PR head 07fb69366cdcb45863073a1daa65084916829eb4. The current head is mutable external status and was not executed by this record.

Open receipt →

M-020

CONTRIBUTOR SELF-RUN — NOT MAINTAINER VERIFICATION

KaotoIO/kaoto

DataMapper: Abstract wrapper fields need unique names to support multiple refs to the same abstract element

PASS — 4/4 declared commands

Command evidence and NOT INCLUDED are on the full receipt.

attestation: recorded

PR state: MERGED

Review signal: APPROVED

PR changed since this record. recorded patch commit ffc3e052480163e7338e3164008c6a7a26a77605; current PR head 00d27e70410dc78f0fcda582b987d515dc8b5817. The current head is mutable external status and was not executed by this record.

Open receipt →

M-015

CONTRIBUTOR SELF-RUN — NOT MAINTAINER VERIFICATION

prometheus/client_js

PASS — 1/1 declared command

Command evidence and NOT INCLUDED are on the full receipt.

attestation: recorded

PR state: CLOSED UNMERGED

Review signal: REVIEW REQUIRED

Open receipt →

M-014

CONTRIBUTOR SELF-RUN — NOT MAINTAINER VERIFICATION

prometheus/client_js

PASS — 1/1 declared command

Command evidence and NOT INCLUDED are on the full receipt.

attestation: recorded

PR state: CLOSED UNMERGED

Review signal: CHANGES REQUESTED

Open receipt →

M-012

CONTRIBUTOR SELF-RUN — NOT MAINTAINER VERIFICATION

nodejs/doc-kit

Consideration: detect `doc-kit.config.mjs` automatically

PASS — 1/1 declared command

Command evidence and NOT INCLUDED are on the full receipt.

attestation: recorded

PR state: OPEN

Review signal: CHANGES REQUESTED

PR changed since this record. recorded patch commit a0bdd2de6a81b60e2f8a607a40d39b4fa0b22751; current PR head 662687f704f55e5e46b7479b24a031f156e236fb. The current head is mutable external status and was not executed by this record.

Open receipt →

M-011

CONTRIBUTOR SELF-RUN — NOT MAINTAINER VERIFICATION

prometheus/client_js

Cluster should always aggregate metrics in a same order

PASS — 1/1 declared command

Command evidence and NOT INCLUDED are on the full receipt.

attestation: recorded

PR state: MERGED

Review signal: APPROVED

PR changed since this record. recorded patch commit e345d993c4d2e1ad54e7367e38e07bcc283ccbca; current PR head b64dc651cb3a1a22ed5e51095bbea2296d2b57ad. The current head is mutable external status and was not executed by this record.

Open receipt →
Own-repository rehearsal archive (3)

Rehearsals exercise the receipt system. They are not external validation.

M-003

REHEARSAL — NOT EXTERNAL VALIDATION

northset-oss/verification-pilot

PASS — 2/2 declared commands

Command evidence and NOT INCLUDED are on the full receipt.

attestation: recorded

PR state: PREPARED

Review signal: NONE

Open receipt →

FOR MAINTAINERS

Request a private run

Maintain an open-source project? Send Northset a PR already in your queue. We run its repository-declared checks in an isolated container and return the run record privately. We do not modify the PR. Nothing is published without your approval. Free during the pilot.

Email a private requestOpen a public request

The issue form is public. Do not include secrets or private repository details there; use email instead.

Already onboarded? Add northset-verify to a PR to request a run on that PR.

CLAIMS BOUNDARY

What a receipt does and does not say

A receipt reports the exact declared commands, their recorded exit status, and the recorded execution environment from an immutable run bundle.

It does not prove code quality, security, full CI coverage, production readiness, or maintainer approval. An attestation confirms bundle provenance; it does not broaden the receipt's claim.

Live upstream outcomes are detached because a later maintainer decision is a different fact from the recorded run. Read the full Claims Boundary policy.