{
  "tool_id": "art-655-publish-market-mark-head",
  "tool_version": "1.0.0",
  "display_name": "Publish Market Mark Head",
  "mcp_name": "publish_market_mark_head",
  "mandate_type": "attestation_mandate",
  "wave": 111,
  "gpu": false,
  "url": "https://ainumbers.co/mcp.html",
  "pageless": "MCP-callable head-commit publisher, no interactive UI of its own — presented through the shared MCP tool catalog (mcp.html), matching KERNEL-SCAFFOLD-1's page-less-by-default shape (a fresh chaingraph/art-655-*.html page would be a NAV-ISLAND-1 unlinked island until an ASSEMBLE row wires it into chaingraph-hub.html; see RIDER-KERNEL.md SHARD-GATE-PRE-ASSEMBLE-1 / K-FULL-1's own \"assembly is the main-side workflow's job\" text). Same shape as art-649-publish-model-risk-head's original kernel-only PR, before ASSEMBLE-LAND-0817-1 later folded in its page.",
  "description": "Publishes one SPEC.md §HEAD-1 head-commit publication event for a market's mark-price print stream (stream = \"mark:<venue>:<pair>\"), so a series of art-560-oracle-price-aggregation prints for the same pair becomes a sequence-numbered, signer-continuous chain instead of a set of unlinked artifacts a reader must independently discover and order, mirroring MRM-LINEAGE-BUILD-SPEC.md's art-649-publish-model-risk-head and NAV-LINEAGE-BUILD-SPEC.md §3 / INDEX-LINEAGE-BUILD-SPEC.md §5's own §HEAD-1 sections, applied to a market's mark-print cadence. HARD FENCE: this node never accepts or handles private key material, the caller signs the head-commit off-node via chaingraph/kernels/_head.mjs's own buildHead/signHead and separately runs its own Ed25519 verification (again via _head.mjs's verifyHeadProof/verifyChain) before calling this node. signature_valid and chain_valid are the caller's own verification claim, asserted and digested into this receipt, never independently re-derived by this node (the real zkVM guest has no WebCrypto at all, so an in-kernel Ed25519 verify result would not be reproducible across this repo's required execution environments). The one field this node DOES independently recompute is head_hash (pure SHA-256/JCS over the caller-supplied head, never trusted as a caller-asserted value, per SO #34). Backed by ocg-head-file@1 only at first, matching the model-risk/NAV/index lineage rows; a head-file tip proves the signer's claimed tip, it does not itself detect equivocation (needs ocg-head-tlog@1, a later WU) and is not itself a print-cadence/staleness enforcement mechanism. The estate's head-commit primitive (SPEC.md §HEAD-1 + _head.mjs) is merged to main; this node applies that estate-internal primitive to a market's mark-price stream and makes no claim under CFTC, SEC, or any venue's own market-data attestation obligations itself.",
  "input_schema_ref": "mcp.html#manifest",
  "consumes": [
    "art-560-oracle-price-aggregation"
  ],
  "feeds": [],
  "status": "live",
  "conformance_fixtures": true,
  "compute_capability": "server",
  "compute_images": [
    {
      "system": "sha256-source",
      "image_id": "sha256:6c5a944ad3d3508d828bc34a320e09734f576f2f1b8522d1f9b16eac803bd568",
      "valid_from": "2026-07-10"
    },
    {
      "system": "risc0",
      "image_id": "sha256:a1a0bc89b5b1febaeda3519f6dbade0fa5ac16beeb143c4e1b01689573567bc6",
      "valid_from": "2026-09-04"
    }
  ],
  "export_capability": [
    "json"
  ],
  "standards_basis": "not_applicable",
  "cited_clause_digest": [],
  "compute_proof_ready": "ready",
  "cycle_preflight": "FAST — 5,776,304 user_cycles max across all 15 fixture vectors (argmax v13), measured exec-only 2026-09-04 against landed origin/main bytes (node-exists check passed: kernel + shard live on origin/main); 0.19x the 30,000,000 line.",
  "compute_proof": {
    "type": "ZkVmReceipt",
    "system": "risc0",
    "receiptFormat": "groth16-bn254",
    "imageId": "sha256:a1a0bc89b5b1febaeda3519f6dbade0fa5ac16beeb143c4e1b01689573567bc6",
    "seal": "Fz9idrixCrtJQat/BhUYYWni57Rw9Ox03Z2XFXbmPzsK2kcvUsK8Q4+d76eN3kltbe74QPZvb39E0XBvct0CuAgRMxXoyLexxopnGDmOzl1dmwT73LZGCZOmCxDUxLIPKkP6l7p4V5tbDefZ3EtmGM8go9k0U96S1euGnWKOAMUm6YDg0EFadhWMvK9wMZEaT2kEceJB7hPo+XPIMIijHCIejp/IKSdRrDp75iYV77eeF/5t8DRD+aU7eAtH5vUTE9MOXjR97SIa1CBn1ZZpZCP0axkdrDjZUdKOAvfKMW4gUR3gVkYzo1mh1nliwwHpe4UsgxjZXzOo2dAZ3KSvgg==",
    "journal": {
      "chaingraph_version": "0.4.0",
      "kernel_digest": "sha256:6c5a944ad3d3508d828bc34a320e09734f576f2f1b8522d1f9b16eac803bd568",
      "output": {
        "chain_errors": [],
        "chain_valid": null,
        "chain_verified_by": null,
        "errors": [
          "head is required."
        ],
        "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).",
        "head_hash": null,
        "is_genesis": false,
        "not_proven": [
          {
            "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-562's stage-reference citations and art-649's identical fence. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments).",
            "item": "Signature / chain verification"
          },
          {
            "detail": "A head-file tip proves the signer's claimed mark-stream tip at this seq; it does not itself detect the same signer publishing a different, conflicting head for the same (stream, seq) elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU), not this node.",
            "item": "Equivocation detection"
          },
          {
            "detail": "This node publishes one head-commit event per mark print made citable in order. Whether a market's mark stream has gone stale (no new print within its expected cadence) or has silently skipped a print is not evaluated here -- this stream only makes the prints that WERE published citable in sequence order.",
            "item": "Print continuity / staleness detection"
          },
          {
            "detail": "root is a caller-supplied execution_hash citing the print's own art-560-oracle-price-aggregation artifact, asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream print, nor does it re-run or check the aggregation math that produced it.",
            "item": "Root-artifact authenticity"
          },
          {
            "detail": "Per the parent spec's positioning line, a venue platform attests that an order filled, a margin call fired, or a funding payment transferred -- it does not attest the arithmetic that determined the number. This receipt evidences one head-commit publication event over an already-computed mark print; it makes no claim under CFTC, SEC, or any venue's own market-data recordkeeping obligations, and has no bearing on whether the underlying oracle submissions were themselves accurate (that is art-560-oracle-price-aggregation's own declared scope, not this node's).",
            "item": "Venue / market-data attestation"
          }
        ],
        "prev_head_hash": null,
        "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a market's mark-price print stream (DERIV-WORKFLOWS-BUILD-SPEC.md §4); not itself a CFTC, SEC, or venue market-data attestation requirement.",
        "root": null,
        "rotates_to": null,
        "seq": null,
        "signature_valid": null,
        "signature_verified_by": null,
        "signer": null,
        "stream": null,
        "structural_error": "head is required.",
        "timestamp": null
      }
    }
  }
}