{ "tool_id": "art-655-publish-market-mark-head", "note": "golden_hash pinned (see vectors). Golden fixtures for the market mark-price SPEC.md HEAD-1 head-commit publish kernel (DERIV-WORKFLOWS-BUILD-SPEC.md sec.4). output_payload is buildArtifact()'s canonical result (matches golden_hash / vm-parity-gate, both of which run buildArtifact, never compute() alone): head_hash is filled in only there (independent pure-SHA-256 recompute, sec.4 note). signature_valid/chain_valid are the CALLER's own verification claim (pp.signature_verification / pp.chain_verification), echoed verbatim by compute() itself -- never recomputed by this node (see the kernel HARD FENCE comment for why: the real zkVM guest has no WebCrypto, and the VM<->worker parity harness's crypto.subtle.verify bridge was measured to diverge from the worker during art-649's authoring). Covers: missing head, missing/malformed verification-claim shape, every structural-shape violation validateHeadShape() checks, and four valid shapes (genesis with a true claim, genesis with a caller-asserted false claim -- still a valid receipt, just recording a failed verification -- chained with a chain claim, and a rotation-announced head). human_sign_off: PENDING (this row does not sign -- manifest-level signature per spec sec.4).", "vectors": [ { "name": "missing-head", "policy_parameters": {}, "output_payload": { "stream": null, "signer": null, "seq": null, "prev_head_hash": null, "root": null, "timestamp": null, "rotates_to": null, "structural_error": "head is required.", "is_genesis": false, "head_hash": null, "signature_valid": null, "signature_verified_by": null, "chain_valid": null, "chain_verified_by": null, "chain_errors": [], "errors": [ "head is required." ], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-562's stage-reference citations and art-649's identical fence. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed mark-stream tip at this seq; it does not itself detect the same signer publishing a different, conflicting head for the same (stream, seq) elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU), not this node." }, { "item": "Print continuity / staleness detection", "detail": "This node publishes one head-commit event per mark print made citable in order. Whether a market's mark stream has gone stale (no new print within its expected cadence) or has silently skipped a print is not evaluated here -- this stream only makes the prints that WERE published citable in sequence order." }, { "item": "Root-artifact authenticity", "detail": "root is a caller-supplied execution_hash citing the print's own art-560-oracle-price-aggregation artifact, asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream print, nor does it re-run or check the aggregation math that produced it." }, { "item": "Venue / market-data attestation", "detail": "Per the parent spec's positioning line, a venue platform attests that an order filled, a margin call fired, or a funding payment transferred -- it does not attest the arithmetic that determined the number. This receipt evidences one head-commit publication event over an already-computed mark print; it makes no claim under CFTC, SEC, or any venue's own market-data recordkeeping obligations, and has no bearing on whether the underlying oracle submissions were themselves accurate (that is art-560-oracle-price-aggregation's own declared scope, not this node's)." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a market's mark-price print stream (DERIV-WORKFLOWS-BUILD-SPEC.md §4); not itself a CFTC, SEC, or venue market-data attestation requirement." }, "golden_hash": "47d160d743feda85dff9eecca06d389121b3807a47bcc9d0c8e57844a6d63139" }, { "name": "head-missing-signature-verification", "policy_parameters": { "head": { "head_version": "1", "stream": "mark:kalshi:BTCPERP", "signer": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "seq": 0, "prev_head_hash": null, "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111", "timestamp": "2026-08-05T00:00:00Z", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "proofPurpose": "assertionMethod", "created": "2026-08-05T00:00:00Z", "proofValue": "z36T1LGhKz8AJJhq6ugKpgxAwh381zQccmoi8tCVqQq6hcWQ8s6sngbDQ7V946QrBaAm5koRv2VggGkofNC579jbF" } } }, "output_payload": { "stream": null, "signer": null, "seq": null, "prev_head_hash": null, "root": null, "timestamp": null, "rotates_to": null, "structural_error": "signature_verification is required (the caller's own verification result).", "is_genesis": false, "head_hash": null, "signature_valid": null, "signature_verified_by": null, "chain_valid": null, "chain_verified_by": null, "chain_errors": [], "errors": [ "signature_verification is required (the caller's own verification result)." ], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-562's stage-reference citations and art-649's identical fence. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed mark-stream tip at this seq; it does not itself detect the same signer publishing a different, conflicting head for the same (stream, seq) elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU), not this node." }, { "item": "Print continuity / staleness detection", "detail": "This node publishes one head-commit event per mark print made citable in order. Whether a market's mark stream has gone stale (no new print within its expected cadence) or has silently skipped a print is not evaluated here -- this stream only makes the prints that WERE published citable in sequence order." }, { "item": "Root-artifact authenticity", "detail": "root is a caller-supplied execution_hash citing the print's own art-560-oracle-price-aggregation artifact, asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream print, nor does it re-run or check the aggregation math that produced it." }, { "item": "Venue / market-data attestation", "detail": "Per the parent spec's positioning line, a venue platform attests that an order filled, a margin call fired, or a funding payment transferred -- it does not attest the arithmetic that determined the number. This receipt evidences one head-commit publication event over an already-computed mark print; it makes no claim under CFTC, SEC, or any venue's own market-data recordkeeping obligations, and has no bearing on whether the underlying oracle submissions were themselves accurate (that is art-560-oracle-price-aggregation's own declared scope, not this node's)." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a market's mark-price print stream (DERIV-WORKFLOWS-BUILD-SPEC.md §4); not itself a CFTC, SEC, or venue market-data attestation requirement." }, "golden_hash": "ab6526ddba9a6c804e8e667ea39c3c2b31c8f5e80ab0e682cfda7e30f1482be5" }, { "name": "signature-verification-missing-verified-by", "policy_parameters": { "head": { "head_version": "1", "stream": "mark:kalshi:BTCPERP", "signer": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "seq": 0, "prev_head_hash": null, "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111", "timestamp": "2026-08-05T00:00:00Z", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "proofPurpose": "assertionMethod", "created": "2026-08-05T00:00:00Z", "proofValue": "z36T1LGhKz8AJJhq6ugKpgxAwh381zQccmoi8tCVqQq6hcWQ8s6sngbDQ7V946QrBaAm5koRv2VggGkofNC579jbF" } }, "signature_verification": { "verified": true } }, "output_payload": { "stream": null, "signer": null, "seq": null, "prev_head_hash": null, "root": null, "timestamp": null, "rotates_to": null, "structural_error": "signature_verification.verified_by is required (free text naming the tool/method used to verify).", "is_genesis": false, "head_hash": null, "signature_valid": null, "signature_verified_by": null, "chain_valid": null, "chain_verified_by": null, "chain_errors": [], "errors": [ "signature_verification.verified_by is required (free text naming the tool/method used to verify)." ], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-562's stage-reference citations and art-649's identical fence. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed mark-stream tip at this seq; it does not itself detect the same signer publishing a different, conflicting head for the same (stream, seq) elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU), not this node." }, { "item": "Print continuity / staleness detection", "detail": "This node publishes one head-commit event per mark print made citable in order. Whether a market's mark stream has gone stale (no new print within its expected cadence) or has silently skipped a print is not evaluated here -- this stream only makes the prints that WERE published citable in sequence order." }, { "item": "Root-artifact authenticity", "detail": "root is a caller-supplied execution_hash citing the print's own art-560-oracle-price-aggregation artifact, asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream print, nor does it re-run or check the aggregation math that produced it." }, { "item": "Venue / market-data attestation", "detail": "Per the parent spec's positioning line, a venue platform attests that an order filled, a margin call fired, or a funding payment transferred -- it does not attest the arithmetic that determined the number. This receipt evidences one head-commit publication event over an already-computed mark print; it makes no claim under CFTC, SEC, or any venue's own market-data recordkeeping obligations, and has no bearing on whether the underlying oracle submissions were themselves accurate (that is art-560-oracle-price-aggregation's own declared scope, not this node's)." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a market's mark-price print stream (DERIV-WORKFLOWS-BUILD-SPEC.md §4); not itself a CFTC, SEC, or venue market-data attestation requirement." }, "golden_hash": "820ca028aca5860dfac93dfd89b751a91759064750b223ce5cd9628374ce1b60" }, { "name": "signer-not-did-key", "policy_parameters": { "head": { "head_version": "1", "stream": "mark:kalshi:BTCPERP", "signer": "not-a-did", "seq": 0, "prev_head_hash": null, "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111", "timestamp": "2026-08-05T00:00:00Z", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "not-a-did", "proofPurpose": "assertionMethod", "created": "2026-08-05T00:00:00Z", "proofValue": "z36T1LGhKz8AJJhq6ugKpgxAwh381zQccmoi8tCVqQq6hcWQ8s6sngbDQ7V946QrBaAm5koRv2VggGkofNC579jbF" } }, "signature_verification": { "verified": true, "verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-27" } }, "output_payload": { "stream": null, "signer": null, "seq": null, "prev_head_hash": null, "root": null, "timestamp": null, "rotates_to": null, "structural_error": "head.signer must be a did:key.", "is_genesis": false, "head_hash": null, "signature_valid": null, "signature_verified_by": null, "chain_valid": null, "chain_verified_by": null, "chain_errors": [], "errors": [ "head.signer must be a did:key." ], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-562's stage-reference citations and art-649's identical fence. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed mark-stream tip at this seq; it does not itself detect the same signer publishing a different, conflicting head for the same (stream, seq) elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU), not this node." }, { "item": "Print continuity / staleness detection", "detail": "This node publishes one head-commit event per mark print made citable in order. Whether a market's mark stream has gone stale (no new print within its expected cadence) or has silently skipped a print is not evaluated here -- this stream only makes the prints that WERE published citable in sequence order." }, { "item": "Root-artifact authenticity", "detail": "root is a caller-supplied execution_hash citing the print's own art-560-oracle-price-aggregation artifact, asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream print, nor does it re-run or check the aggregation math that produced it." }, { "item": "Venue / market-data attestation", "detail": "Per the parent spec's positioning line, a venue platform attests that an order filled, a margin call fired, or a funding payment transferred -- it does not attest the arithmetic that determined the number. This receipt evidences one head-commit publication event over an already-computed mark print; it makes no claim under CFTC, SEC, or any venue's own market-data recordkeeping obligations, and has no bearing on whether the underlying oracle submissions were themselves accurate (that is art-560-oracle-price-aggregation's own declared scope, not this node's)." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a market's mark-price print stream (DERIV-WORKFLOWS-BUILD-SPEC.md §4); not itself a CFTC, SEC, or venue market-data attestation requirement." }, "golden_hash": "97445a475a85b68ab7ea20f0ec157a84962469a8fb23ac2b009790ab28fed565" }, { "name": "seq-not-integer", "policy_parameters": { "head": { "head_version": "1", "stream": "mark:kalshi:BTCPERP", "signer": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "seq": 1.5, "prev_head_hash": null, "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111", "timestamp": "2026-08-05T00:00:00Z", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "proofPurpose": "assertionMethod", "created": "2026-08-05T00:00:00Z", "proofValue": "z36T1LGhKz8AJJhq6ugKpgxAwh381zQccmoi8tCVqQq6hcWQ8s6sngbDQ7V946QrBaAm5koRv2VggGkofNC579jbF" } }, "signature_verification": { "verified": true, "verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-27" } }, "output_payload": { "stream": null, "signer": null, "seq": null, "prev_head_hash": null, "root": null, "timestamp": null, "rotates_to": null, "structural_error": "head.seq must be a non-negative integer.", "is_genesis": false, "head_hash": null, "signature_valid": null, "signature_verified_by": null, "chain_valid": null, "chain_verified_by": null, "chain_errors": [], "errors": [ "head.seq must be a non-negative integer." ], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-562's stage-reference citations and art-649's identical fence. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed mark-stream tip at this seq; it does not itself detect the same signer publishing a different, conflicting head for the same (stream, seq) elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU), not this node." }, { "item": "Print continuity / staleness detection", "detail": "This node publishes one head-commit event per mark print made citable in order. Whether a market's mark stream has gone stale (no new print within its expected cadence) or has silently skipped a print is not evaluated here -- this stream only makes the prints that WERE published citable in sequence order." }, { "item": "Root-artifact authenticity", "detail": "root is a caller-supplied execution_hash citing the print's own art-560-oracle-price-aggregation artifact, asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream print, nor does it re-run or check the aggregation math that produced it." }, { "item": "Venue / market-data attestation", "detail": "Per the parent spec's positioning line, a venue platform attests that an order filled, a margin call fired, or a funding payment transferred -- it does not attest the arithmetic that determined the number. This receipt evidences one head-commit publication event over an already-computed mark print; it makes no claim under CFTC, SEC, or any venue's own market-data recordkeeping obligations, and has no bearing on whether the underlying oracle submissions were themselves accurate (that is art-560-oracle-price-aggregation's own declared scope, not this node's)." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a market's mark-price print stream (DERIV-WORKFLOWS-BUILD-SPEC.md §4); not itself a CFTC, SEC, or venue market-data attestation requirement." }, "golden_hash": "efde38171d726d6c1503808b343238511676cedef8b54eeaccca66c7eb070544" }, { "name": "genesis-prev-head-hash-not-null", "policy_parameters": { "head": { "head_version": "1", "stream": "mark:kalshi:BTCPERP", "signer": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "seq": 0, "prev_head_hash": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111", "timestamp": "2026-08-05T00:00:00Z", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "proofPurpose": "assertionMethod", "created": "2026-08-05T00:00:00Z", "proofValue": "z36T1LGhKz8AJJhq6ugKpgxAwh381zQccmoi8tCVqQq6hcWQ8s6sngbDQ7V946QrBaAm5koRv2VggGkofNC579jbF" } }, "signature_verification": { "verified": true, "verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-27" } }, "output_payload": { "stream": null, "signer": null, "seq": null, "prev_head_hash": null, "root": null, "timestamp": null, "rotates_to": null, "structural_error": "head.seq is 0 (genesis) but head.prev_head_hash is not null.", "is_genesis": false, "head_hash": null, "signature_valid": null, "signature_verified_by": null, "chain_valid": null, "chain_verified_by": null, "chain_errors": [], "errors": [ "head.seq is 0 (genesis) but head.prev_head_hash is not null." ], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-562's stage-reference citations and art-649's identical fence. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed mark-stream tip at this seq; it does not itself detect the same signer publishing a different, conflicting head for the same (stream, seq) elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU), not this node." }, { "item": "Print continuity / staleness detection", "detail": "This node publishes one head-commit event per mark print made citable in order. Whether a market's mark stream has gone stale (no new print within its expected cadence) or has silently skipped a print is not evaluated here -- this stream only makes the prints that WERE published citable in sequence order." }, { "item": "Root-artifact authenticity", "detail": "root is a caller-supplied execution_hash citing the print's own art-560-oracle-price-aggregation artifact, asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream print, nor does it re-run or check the aggregation math that produced it." }, { "item": "Venue / market-data attestation", "detail": "Per the parent spec's positioning line, a venue platform attests that an order filled, a margin call fired, or a funding payment transferred -- it does not attest the arithmetic that determined the number. This receipt evidences one head-commit publication event over an already-computed mark print; it makes no claim under CFTC, SEC, or any venue's own market-data recordkeeping obligations, and has no bearing on whether the underlying oracle submissions were themselves accurate (that is art-560-oracle-price-aggregation's own declared scope, not this node's)." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a market's mark-price print stream (DERIV-WORKFLOWS-BUILD-SPEC.md §4); not itself a CFTC, SEC, or venue market-data attestation requirement." }, "golden_hash": "e460b2af03704a6bb839acc73b06cdb54ca95d3399f90c245b35c9d0ce2ec384" }, { "name": "root-bad-format", "policy_parameters": { "head": { "head_version": "1", "stream": "mark:kalshi:BTCPERP", "signer": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "seq": 0, "prev_head_hash": null, "root": "not-a-hash", "timestamp": "2026-08-05T00:00:00Z", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "proofPurpose": "assertionMethod", "created": "2026-08-05T00:00:00Z", "proofValue": "z36T1LGhKz8AJJhq6ugKpgxAwh381zQccmoi8tCVqQq6hcWQ8s6sngbDQ7V946QrBaAm5koRv2VggGkofNC579jbF" } }, "signature_verification": { "verified": true, "verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-27" } }, "output_payload": { "stream": null, "signer": null, "seq": null, "prev_head_hash": null, "root": null, "timestamp": null, "rotates_to": null, "structural_error": "head.root must be a \"sha256:\"-prefixed digest.", "is_genesis": false, "head_hash": null, "signature_valid": null, "signature_verified_by": null, "chain_valid": null, "chain_verified_by": null, "chain_errors": [], "errors": [ "head.root must be a \"sha256:\"-prefixed digest." ], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-562's stage-reference citations and art-649's identical fence. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed mark-stream tip at this seq; it does not itself detect the same signer publishing a different, conflicting head for the same (stream, seq) elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU), not this node." }, { "item": "Print continuity / staleness detection", "detail": "This node publishes one head-commit event per mark print made citable in order. Whether a market's mark stream has gone stale (no new print within its expected cadence) or has silently skipped a print is not evaluated here -- this stream only makes the prints that WERE published citable in sequence order." }, { "item": "Root-artifact authenticity", "detail": "root is a caller-supplied execution_hash citing the print's own art-560-oracle-price-aggregation artifact, asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream print, nor does it re-run or check the aggregation math that produced it." }, { "item": "Venue / market-data attestation", "detail": "Per the parent spec's positioning line, a venue platform attests that an order filled, a margin call fired, or a funding payment transferred -- it does not attest the arithmetic that determined the number. This receipt evidences one head-commit publication event over an already-computed mark print; it makes no claim under CFTC, SEC, or any venue's own market-data recordkeeping obligations, and has no bearing on whether the underlying oracle submissions were themselves accurate (that is art-560-oracle-price-aggregation's own declared scope, not this node's)." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a market's mark-price print stream (DERIV-WORKFLOWS-BUILD-SPEC.md §4); not itself a CFTC, SEC, or venue market-data attestation requirement." }, "golden_hash": "d67400081aab4bd424f2f4bf21ef4afb1d96edabf46bd54e66ba65a53ae87303" }, { "name": "timestamp-bad-format", "policy_parameters": { "head": { "head_version": "1", "stream": "mark:kalshi:BTCPERP", "signer": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "seq": 0, "prev_head_hash": null, "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111", "timestamp": "not-a-timestamp", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "proofPurpose": "assertionMethod", "created": "2026-08-05T00:00:00Z", "proofValue": "z36T1LGhKz8AJJhq6ugKpgxAwh381zQccmoi8tCVqQq6hcWQ8s6sngbDQ7V946QrBaAm5koRv2VggGkofNC579jbF" } }, "signature_verification": { "verified": true, "verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-27" } }, "output_payload": { "stream": null, "signer": null, "seq": null, "prev_head_hash": null, "root": null, "timestamp": null, "rotates_to": null, "structural_error": "head.timestamp must be an RFC3339 timestamp.", "is_genesis": false, "head_hash": null, "signature_valid": null, "signature_verified_by": null, "chain_valid": null, "chain_verified_by": null, "chain_errors": [], "errors": [ "head.timestamp must be an RFC3339 timestamp." ], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-562's stage-reference citations and art-649's identical fence. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed mark-stream tip at this seq; it does not itself detect the same signer publishing a different, conflicting head for the same (stream, seq) elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU), not this node." }, { "item": "Print continuity / staleness detection", "detail": "This node publishes one head-commit event per mark print made citable in order. Whether a market's mark stream has gone stale (no new print within its expected cadence) or has silently skipped a print is not evaluated here -- this stream only makes the prints that WERE published citable in sequence order." }, { "item": "Root-artifact authenticity", "detail": "root is a caller-supplied execution_hash citing the print's own art-560-oracle-price-aggregation artifact, asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream print, nor does it re-run or check the aggregation math that produced it." }, { "item": "Venue / market-data attestation", "detail": "Per the parent spec's positioning line, a venue platform attests that an order filled, a margin call fired, or a funding payment transferred -- it does not attest the arithmetic that determined the number. This receipt evidences one head-commit publication event over an already-computed mark print; it makes no claim under CFTC, SEC, or any venue's own market-data recordkeeping obligations, and has no bearing on whether the underlying oracle submissions were themselves accurate (that is art-560-oracle-price-aggregation's own declared scope, not this node's)." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a market's mark-price print stream (DERIV-WORKFLOWS-BUILD-SPEC.md §4); not itself a CFTC, SEC, or venue market-data attestation requirement." }, "golden_hash": "fb317208a8e9231818c020009e3a7a3a0073bb95de7801852fcddeb2530bc37b" }, { "name": "proof-missing", "policy_parameters": { "head": { "head_version": "1", "stream": "mark:kalshi:BTCPERP", "signer": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "seq": 0, "prev_head_hash": null, "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111", "timestamp": "2026-08-05T00:00:00Z" }, "signature_verification": { "verified": true, "verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-27" } }, "output_payload": { "stream": null, "signer": null, "seq": null, "prev_head_hash": null, "root": null, "timestamp": null, "rotates_to": null, "structural_error": "head.proof is required (the head must already be signed).", "is_genesis": false, "head_hash": null, "signature_valid": null, "signature_verified_by": null, "chain_valid": null, "chain_verified_by": null, "chain_errors": [], "errors": [ "head.proof is required (the head must already be signed)." ], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-562's stage-reference citations and art-649's identical fence. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed mark-stream tip at this seq; it does not itself detect the same signer publishing a different, conflicting head for the same (stream, seq) elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU), not this node." }, { "item": "Print continuity / staleness detection", "detail": "This node publishes one head-commit event per mark print made citable in order. Whether a market's mark stream has gone stale (no new print within its expected cadence) or has silently skipped a print is not evaluated here -- this stream only makes the prints that WERE published citable in sequence order." }, { "item": "Root-artifact authenticity", "detail": "root is a caller-supplied execution_hash citing the print's own art-560-oracle-price-aggregation artifact, asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream print, nor does it re-run or check the aggregation math that produced it." }, { "item": "Venue / market-data attestation", "detail": "Per the parent spec's positioning line, a venue platform attests that an order filled, a margin call fired, or a funding payment transferred -- it does not attest the arithmetic that determined the number. This receipt evidences one head-commit publication event over an already-computed mark print; it makes no claim under CFTC, SEC, or any venue's own market-data recordkeeping obligations, and has no bearing on whether the underlying oracle submissions were themselves accurate (that is art-560-oracle-price-aggregation's own declared scope, not this node's)." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a market's mark-price print stream (DERIV-WORKFLOWS-BUILD-SPEC.md §4); not itself a CFTC, SEC, or venue market-data attestation requirement." }, "golden_hash": "05a56a57458fadab9313dff6e3108ff8ee746db48a76eb9d440234f18ac5262b" }, { "name": "seq-positive-prev-head-hash-null", "policy_parameters": { "head": { "head_version": "1", "stream": "mark:kalshi:BTCPERP", "signer": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "seq": 1, "prev_head_hash": null, "root": "sha256:3333333333333333333333333333333333333333333333333333333333333333", "timestamp": "2026-09-05T00:00:00Z", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "proofPurpose": "assertionMethod", "created": "2026-09-05T00:00:00Z", "proofValue": "zAAAA" } }, "signature_verification": { "verified": true, "verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-27" } }, "output_payload": { "stream": null, "signer": null, "seq": null, "prev_head_hash": null, "root": null, "timestamp": null, "rotates_to": null, "structural_error": "head.seq is greater than 0 but head.prev_head_hash is null (only a genesis head may omit prev_head_hash).", "is_genesis": false, "head_hash": null, "signature_valid": null, "signature_verified_by": null, "chain_valid": null, "chain_verified_by": null, "chain_errors": [], "errors": [ "head.seq is greater than 0 but head.prev_head_hash is null (only a genesis head may omit prev_head_hash)." ], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-562's stage-reference citations and art-649's identical fence. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed mark-stream tip at this seq; it does not itself detect the same signer publishing a different, conflicting head for the same (stream, seq) elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU), not this node." }, { "item": "Print continuity / staleness detection", "detail": "This node publishes one head-commit event per mark print made citable in order. Whether a market's mark stream has gone stale (no new print within its expected cadence) or has silently skipped a print is not evaluated here -- this stream only makes the prints that WERE published citable in sequence order." }, { "item": "Root-artifact authenticity", "detail": "root is a caller-supplied execution_hash citing the print's own art-560-oracle-price-aggregation artifact, asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream print, nor does it re-run or check the aggregation math that produced it." }, { "item": "Venue / market-data attestation", "detail": "Per the parent spec's positioning line, a venue platform attests that an order filled, a margin call fired, or a funding payment transferred -- it does not attest the arithmetic that determined the number. This receipt evidences one head-commit publication event over an already-computed mark print; it makes no claim under CFTC, SEC, or any venue's own market-data recordkeeping obligations, and has no bearing on whether the underlying oracle submissions were themselves accurate (that is art-560-oracle-price-aggregation's own declared scope, not this node's)." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a market's mark-price print stream (DERIV-WORKFLOWS-BUILD-SPEC.md §4); not itself a CFTC, SEC, or venue market-data attestation requirement." }, "golden_hash": "41ea2e4afef49392b74494ade3c91e3fc6145cea235864a64518ee0d799dc67c" }, { "name": "chained-head-missing-chain-verification", "policy_parameters": { "head": { "head_version": "1", "stream": "mark:kalshi:BTCPERP", "signer": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "seq": 1, "prev_head_hash": "sha256:2222222222222222222222222222222222222222222222222222222222222222", "root": "sha256:3333333333333333333333333333333333333333333333333333333333333333", "timestamp": "2026-09-05T00:00:00Z", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "proofPurpose": "assertionMethod", "created": "2026-09-05T00:00:00Z", "proofValue": "zAAAA" } }, "signature_verification": { "verified": true, "verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-27" }, "prior_head": { "head_version": "1", "stream": "mark:kalshi:BTCPERP", "signer": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "seq": 0, "prev_head_hash": null, "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111", "timestamp": "2026-08-05T00:00:00Z", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "proofPurpose": "assertionMethod", "created": "2026-08-05T00:00:00Z", "proofValue": "z36T1LGhKz8AJJhq6ugKpgxAwh381zQccmoi8tCVqQq6hcWQ8s6sngbDQ7V946QrBaAm5koRv2VggGkofNC579jbF" } } }, "output_payload": { "stream": null, "signer": null, "seq": null, "prev_head_hash": null, "root": null, "timestamp": null, "rotates_to": null, "structural_error": "chain_verification is required (the caller's own verification result).", "is_genesis": false, "head_hash": null, "signature_valid": null, "signature_verified_by": null, "chain_valid": null, "chain_verified_by": null, "chain_errors": [], "errors": [ "chain_verification is required (the caller's own verification result)." ], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-562's stage-reference citations and art-649's identical fence. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed mark-stream tip at this seq; it does not itself detect the same signer publishing a different, conflicting head for the same (stream, seq) elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU), not this node." }, { "item": "Print continuity / staleness detection", "detail": "This node publishes one head-commit event per mark print made citable in order. Whether a market's mark stream has gone stale (no new print within its expected cadence) or has silently skipped a print is not evaluated here -- this stream only makes the prints that WERE published citable in sequence order." }, { "item": "Root-artifact authenticity", "detail": "root is a caller-supplied execution_hash citing the print's own art-560-oracle-price-aggregation artifact, asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream print, nor does it re-run or check the aggregation math that produced it." }, { "item": "Venue / market-data attestation", "detail": "Per the parent spec's positioning line, a venue platform attests that an order filled, a margin call fired, or a funding payment transferred -- it does not attest the arithmetic that determined the number. This receipt evidences one head-commit publication event over an already-computed mark print; it makes no claim under CFTC, SEC, or any venue's own market-data recordkeeping obligations, and has no bearing on whether the underlying oracle submissions were themselves accurate (that is art-560-oracle-price-aggregation's own declared scope, not this node's)." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a market's mark-price print stream (DERIV-WORKFLOWS-BUILD-SPEC.md §4); not itself a CFTC, SEC, or venue market-data attestation requirement." }, "golden_hash": "913abbf0f22c5fa0dfbdbb3874672fb27c0d1e933d1d50df57657b1cb73aefce" }, { "name": "valid-genesis-head-signature-valid", "policy_parameters": { "head": { "head_version": "1", "stream": "mark:kalshi:BTCPERP", "signer": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "seq": 0, "prev_head_hash": null, "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111", "timestamp": "2026-08-05T00:00:00Z", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "proofPurpose": "assertionMethod", "created": "2026-08-05T00:00:00Z", "proofValue": "z36T1LGhKz8AJJhq6ugKpgxAwh381zQccmoi8tCVqQq6hcWQ8s6sngbDQ7V946QrBaAm5koRv2VggGkofNC579jbF" } }, "signature_verification": { "verified": true, "verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-27" } }, "output_payload": { "stream": "mark:kalshi:BTCPERP", "signer": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "seq": 0, "prev_head_hash": null, "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111", "timestamp": "2026-08-05T00:00:00Z", "rotates_to": null, "structural_error": null, "is_genesis": true, "head_hash": "sha256:7bf991a22a5a1c6f0770a336d771ae9f7360449272e1a6687ef7baaed9907d8d", "signature_valid": true, "signature_verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-27", "chain_valid": null, "chain_verified_by": null, "chain_errors": [], "errors": [], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-562's stage-reference citations and art-649's identical fence. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed mark-stream tip at this seq; it does not itself detect the same signer publishing a different, conflicting head for the same (stream, seq) elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU), not this node." }, { "item": "Print continuity / staleness detection", "detail": "This node publishes one head-commit event per mark print made citable in order. Whether a market's mark stream has gone stale (no new print within its expected cadence) or has silently skipped a print is not evaluated here -- this stream only makes the prints that WERE published citable in sequence order." }, { "item": "Root-artifact authenticity", "detail": "root is a caller-supplied execution_hash citing the print's own art-560-oracle-price-aggregation artifact, asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream print, nor does it re-run or check the aggregation math that produced it." }, { "item": "Venue / market-data attestation", "detail": "Per the parent spec's positioning line, a venue platform attests that an order filled, a margin call fired, or a funding payment transferred -- it does not attest the arithmetic that determined the number. This receipt evidences one head-commit publication event over an already-computed mark print; it makes no claim under CFTC, SEC, or any venue's own market-data recordkeeping obligations, and has no bearing on whether the underlying oracle submissions were themselves accurate (that is art-560-oracle-price-aggregation's own declared scope, not this node's)." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a market's mark-price print stream (DERIV-WORKFLOWS-BUILD-SPEC.md §4); not itself a CFTC, SEC, or venue market-data attestation requirement." }, "golden_hash": "29a903be0b7c56124f975e44f6979054e237d94182e9ab06b733670bf9b49b39" }, { "name": "valid-genesis-head-signature-invalid-claim", "policy_parameters": { "head": { "head_version": "1", "stream": "mark:kalshi:BTCPERP", "signer": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "seq": 0, "prev_head_hash": null, "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111", "timestamp": "2026-08-05T00:00:00Z", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "proofPurpose": "assertionMethod", "created": "2026-08-05T00:00:00Z", "proofValue": "z36T1LGhKz8AJJhq6ugKpgxAwh381zQccmoi8tCVqQq6hcWQ8s6sngbDQ7V946QrBaAm5koRv2VggGkofNC579jbF" } }, "signature_verification": { "verified": false, "verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-27" } }, "output_payload": { "stream": "mark:kalshi:BTCPERP", "signer": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "seq": 0, "prev_head_hash": null, "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111", "timestamp": "2026-08-05T00:00:00Z", "rotates_to": null, "structural_error": null, "is_genesis": true, "head_hash": "sha256:7bf991a22a5a1c6f0770a336d771ae9f7360449272e1a6687ef7baaed9907d8d", "signature_valid": false, "signature_verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-27", "chain_valid": null, "chain_verified_by": null, "chain_errors": [], "errors": [], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-562's stage-reference citations and art-649's identical fence. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed mark-stream tip at this seq; it does not itself detect the same signer publishing a different, conflicting head for the same (stream, seq) elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU), not this node." }, { "item": "Print continuity / staleness detection", "detail": "This node publishes one head-commit event per mark print made citable in order. Whether a market's mark stream has gone stale (no new print within its expected cadence) or has silently skipped a print is not evaluated here -- this stream only makes the prints that WERE published citable in sequence order." }, { "item": "Root-artifact authenticity", "detail": "root is a caller-supplied execution_hash citing the print's own art-560-oracle-price-aggregation artifact, asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream print, nor does it re-run or check the aggregation math that produced it." }, { "item": "Venue / market-data attestation", "detail": "Per the parent spec's positioning line, a venue platform attests that an order filled, a margin call fired, or a funding payment transferred -- it does not attest the arithmetic that determined the number. This receipt evidences one head-commit publication event over an already-computed mark print; it makes no claim under CFTC, SEC, or any venue's own market-data recordkeeping obligations, and has no bearing on whether the underlying oracle submissions were themselves accurate (that is art-560-oracle-price-aggregation's own declared scope, not this node's)." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a market's mark-price print stream (DERIV-WORKFLOWS-BUILD-SPEC.md §4); not itself a CFTC, SEC, or venue market-data attestation requirement." }, "golden_hash": "9168baf9a3e2c6c7c85a5b9024fcfcb93110b5f17819a61efef0397b4b6300dd" }, { "name": "valid-chained-head-with-prior-and-chain-claim", "policy_parameters": { "head": { "head_version": "1", "stream": "mark:kalshi:BTCPERP", "signer": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "seq": 1, "prev_head_hash": "sha256:2222222222222222222222222222222222222222222222222222222222222222", "root": "sha256:3333333333333333333333333333333333333333333333333333333333333333", "timestamp": "2026-09-05T00:00:00Z", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "proofPurpose": "assertionMethod", "created": "2026-09-05T00:00:00Z", "proofValue": "zAAAA" } }, "signature_verification": { "verified": true, "verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-27" }, "prior_head": { "head_version": "1", "stream": "mark:kalshi:BTCPERP", "signer": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "seq": 0, "prev_head_hash": null, "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111", "timestamp": "2026-08-05T00:00:00Z", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "proofPurpose": "assertionMethod", "created": "2026-08-05T00:00:00Z", "proofValue": "z36T1LGhKz8AJJhq6ugKpgxAwh381zQccmoi8tCVqQq6hcWQ8s6sngbDQ7V946QrBaAm5koRv2VggGkofNC579jbF" } }, "chain_verification": { "verified": true, "verified_by": "off-node _head.mjs verifyChain, 2026-08-27" } }, "output_payload": { "stream": "mark:kalshi:BTCPERP", "signer": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "seq": 1, "prev_head_hash": "sha256:2222222222222222222222222222222222222222222222222222222222222222", "root": "sha256:3333333333333333333333333333333333333333333333333333333333333333", "timestamp": "2026-09-05T00:00:00Z", "rotates_to": null, "structural_error": null, "is_genesis": false, "head_hash": "sha256:006bcdfae7cfea8f53bca0409b8f767c6a1fbd92c4690ffce86e470b0dc7eb95", "signature_valid": true, "signature_verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-27", "chain_valid": true, "chain_verified_by": "off-node _head.mjs verifyChain, 2026-08-27", "chain_errors": [], "errors": [], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-562's stage-reference citations and art-649's identical fence. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed mark-stream tip at this seq; it does not itself detect the same signer publishing a different, conflicting head for the same (stream, seq) elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU), not this node." }, { "item": "Print continuity / staleness detection", "detail": "This node publishes one head-commit event per mark print made citable in order. Whether a market's mark stream has gone stale (no new print within its expected cadence) or has silently skipped a print is not evaluated here -- this stream only makes the prints that WERE published citable in sequence order." }, { "item": "Root-artifact authenticity", "detail": "root is a caller-supplied execution_hash citing the print's own art-560-oracle-price-aggregation artifact, asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream print, nor does it re-run or check the aggregation math that produced it." }, { "item": "Venue / market-data attestation", "detail": "Per the parent spec's positioning line, a venue platform attests that an order filled, a margin call fired, or a funding payment transferred -- it does not attest the arithmetic that determined the number. This receipt evidences one head-commit publication event over an already-computed mark print; it makes no claim under CFTC, SEC, or any venue's own market-data recordkeeping obligations, and has no bearing on whether the underlying oracle submissions were themselves accurate (that is art-560-oracle-price-aggregation's own declared scope, not this node's)." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a market's mark-price print stream (DERIV-WORKFLOWS-BUILD-SPEC.md §4); not itself a CFTC, SEC, or venue market-data attestation requirement." }, "golden_hash": "b18c4a1c409607ff22f5ef797d5a19796159d07bcc7c6d6f764dfd5101a3fef3" }, { "name": "valid-genesis-head-rotation-announced", "policy_parameters": { "head": { "head_version": "1", "stream": "mark:hyperliquid:TRADEXYZ-SPX", "signer": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "seq": 5, "prev_head_hash": "sha256:4444444444444444444444444444444444444444444444444444444444444444", "root": "sha256:5555555555555555555555555555555555555555555555555555555555555555", "timestamp": "2026-09-05T00:00:00Z", "rotates_to": "did:key:z6MkROTATEDkeyaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "proof": { "type": "DataIntegrityProof", "cryptosuite": "eddsa-jcs-2022", "verificationMethod": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "proofPurpose": "assertionMethod", "created": "2026-09-05T00:00:00Z", "proofValue": "zROTATE1" } }, "signature_verification": { "verified": true, "verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-27" } }, "output_payload": { "stream": "mark:hyperliquid:TRADEXYZ-SPX", "signer": "did:key:z6MkwWLGNQkh4W4EbpPsw9fV7dGDL33ipZnY85Hs72J3Bd3Y", "seq": 5, "prev_head_hash": "sha256:4444444444444444444444444444444444444444444444444444444444444444", "root": "sha256:5555555555555555555555555555555555555555555555555555555555555555", "timestamp": "2026-09-05T00:00:00Z", "rotates_to": "did:key:z6MkROTATEDkeyaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "structural_error": null, "is_genesis": false, "head_hash": "sha256:2e1d51d695740a1717c8eededd407f015f353e436f5bb55400cbcc5395556bfd", "signature_valid": true, "signature_verified_by": "off-node _head.mjs verifyHeadProof, 2026-08-27", "chain_valid": null, "chain_verified_by": null, "chain_errors": [], "errors": [], "not_proven": [ { "item": "Signature / chain verification", "detail": "signature_valid and chain_valid are the CALLER's own verification claim (e.g. from running _head.mjs's verifyHeadProof/verifyChain, or chaingraph/standard/head-commit.test.mjs, off-node before calling this node), asserted and digested into this receipt -- exactly like art-562's stage-reference citations and art-649's identical fence. This node does not itself execute Ed25519 verification (the real zkVM guest has no WebCrypto at all; an in-kernel verify() result would not be reproducible across this repo's required execution environments)." }, { "item": "Equivocation detection", "detail": "A head-file tip proves the signer's claimed mark-stream tip at this seq; it does not itself detect the same signer publishing a different, conflicting head for the same (stream, seq) elsewhere. That needs the ocg-head-tlog@1 witness backing (a later WU), not this node." }, { "item": "Print continuity / staleness detection", "detail": "This node publishes one head-commit event per mark print made citable in order. Whether a market's mark stream has gone stale (no new print within its expected cadence) or has silently skipped a print is not evaluated here -- this stream only makes the prints that WERE published citable in sequence order." }, { "item": "Root-artifact authenticity", "detail": "root is a caller-supplied execution_hash citing the print's own art-560-oracle-price-aggregation artifact, asserted and digested into this receipt. This node performs no lookup against a live artifact store and does not itself verify that the cited hash corresponds to a real, still-valid upstream print, nor does it re-run or check the aggregation math that produced it." }, { "item": "Venue / market-data attestation", "detail": "Per the parent spec's positioning line, a venue platform attests that an order filled, a margin call fired, or a funding payment transferred -- it does not attest the arithmetic that determined the number. This receipt evidences one head-commit publication event over an already-computed mark print; it makes no claim under CFTC, SEC, or any venue's own market-data recordkeeping obligations, and has no bearing on whether the underlying oracle submissions were themselves accurate (that is art-560-oracle-price-aggregation's own declared scope, not this node's)." } ], "fence": "This node never accepts or handles private key material and never itself runs an Ed25519 verify. signature_valid/chain_valid are the CALLER's own verification claim, asserted and digested into this receipt, never independently re-derived. head_hash is the one field this node DOES independently recompute (pure SHA-256 over the caller-supplied head, never trusted as a caller-asserted value).", "regulatory_framework": "SPEC.md §HEAD-1 (this estate's own head-commit primitive, PROV-HEAD-1, DONE/merged) applied to a market's mark-price print stream (DERIV-WORKFLOWS-BUILD-SPEC.md §4); not itself a CFTC, SEC, or venue market-data attestation requirement." }, "golden_hash": "704e1ef089a3df58e09edb1a3fb5977b63329c3cd8fa553d5a2d75af35691fa9" } ] }