NORTHSET
Proof-of-Pass Receipt
Receipt ID M-1027
ISSUE / WORKIssue #209 · PR #243
CONTRIBUTOR SELF-RUN — NOT MAINTAINER VERIFICATION
RUN5.9s
01 / TECHNICAL RESULT
Technical result
declared command passed
1/1 expected-success command returned exit 0; all structured observations met their declared expectations
- Upstream
- MERGEDmutable external state
- Environment
- sha256:aa84d532f3697aaa9c4b9fb2165828c133cd2ae8fb434d6fcd37f4173da47e01network none
- Signature
- proof attestedGitHub artifact attestation for the exact proof bytes
02 / DECLARED CHECKS
Command evidence
Execution summary
1/1 expected-success command returned exit 0; all structured observations met their declared expectations
mkdir -p /tmp/vite-temp && /workspace/node_modules/.bin/vitest run --root ui --no-color src/composables/charts/useBarChartOptions.test.tsexit 0 · 2.1s
Checks not run
Go and CLI tests— not selected by the repository UI-only CI path filter
run wall (derived from recorded timestamps) 5.9s
Every command listed returned exit 0 in the declared environment. Only the listed commands are in scope. Unlisted test, lint, typecheck, build, coverage, compiler, full-suite, and CI gates are not implied or recorded.
03 / RECORDED IDENTITIES
Compact hashes
- Patch diff SHA-256
sha256:f00a1d…9269c9e- Container image digest
sha256:aa84d5…da47e01
04 / CLAIMS BOUNDARY
NOT INCLUDED
- Contributor self-run; not maintainer verification.
- Does not prove code quality, security, full CI coverage, production readiness, or maintainer approval.
05 / Evidence annexTechnical · provenance · full recorded values
01Technical evidence
Code, full environment, patch, and redacted outputs
Technical evidence
Code, full environment, patch, and redacted outputsProject
Work
Verification execution
runtime: Northset factory (node)
human operator: Northset mission operator
Code
- base
a276e795378c716aa8e982bfcdd1530c65224b43- recorded patch commit
dc0fd72a83231dbad7e5d5b9b634c779fcccd50c
bound to verified tested tree- verified tested tree
4a19518c889e8b601d47d3f9d975cee241b86d5b- patch diff SHA-256
sha256:f00a1d…9269c9e
bound to executed patch bytes
Environment
- image reference
- sha256:aa84d532f3697aaa9c4b9fb2165828c133cd2ae8fb434d6fcd37f4173da47e01
- repository digest
sha256:aa84d5…da47e01- network
- none
02Provenance & record
Full hashes, bundle identity, attestation, and record details
Provenance & record
Full hashes, bundle identity, attestation, and record detailsRecord details
- payment
- none recorded · not merge-contingent
- redactions
- none recorded
- Bundle contents digest
- not recorded; raw proof identity is listed below
- Immutable raw proof
- inspect source proof
- Raw proof SHA-256
sha256:0d6a51…4e87e88- Publication observation
- inspect source publication status
- Factory PR state
- MERGED
- Factory attestation state
- RECEIPT_ATTESTED
- Factory status observed
- Factory proof attestation
- recorded for the exact proof bytes
Full cryptographic values
Full recorded values. The compact receipt above shortens these for legibility only.
- Patch diff SHA-256
sha256:f00a1de431dc6960c077202c867aaeffc45afc71e8431d214bc02a82e9269c9e- Container image digest
sha256:aa84d532f3697aaa9c4b9fb2165828c133cd2ae8fb434d6fcd37f4173da47e01
Factory proof attestation
Open factory proof attestation
Verify the factory proof
curl --fail --silent --show-error --location --output M-1027-dc0fd72a83231dbad7e5d5b9b634c779fcccd50c-proof.json 'https://raw.githubusercontent.com/northset-oss/verification-pilot/1899d890df7156ab758a6c0449fe7bbbc3f46710/receipts/M-1027/dc0fd72a83231dbad7e5d5b9b634c779fcccd50c/proof.json'
gh attestation verify M-1027-dc0fd72a83231dbad7e5d5b9b634c779fcccd50c-proof.json --repo northset-oss/verification-pilot --signer-workflow northset-oss/verification-pilot/.github/workflows/pages.ymlThis attestation covers the exact immutable factory proof bytes. It does not attest a legacy signed bundle, witness the recorded run, or turn contributor evidence into maintainer verification.
QR → receipt page