Audit: the three omitted #626 assembly digests are payload and JSON-file hashes

[hevlyo]

Summary

• Classifies the three digest paths that research/selected626-linux-reconciliation removes before comparing Linux run 38317651752 with the committed Conditional κ = 0.001635527380375392: coordinated owner repair on PR623 #626 assembly.
• template_sha256 is SHA-256 of the decompressed GLOBAL-TEMPLATE.json.gz payload. The recorded Linux/committed mismatch is therefore a template-content disagreement, not a gzip header difference.
• input_sha256.owner_audit and input_sha256.fresh_invoice are SHA-256 of indented JSON files. A nested container hash can change the file while a projection that keeps only paid_profile stays equal. Without the omitted files, those two disagreements stay mixed.

No new kappa and no selected-frontier change. Seed c0d742beb437484a0cb0c8971994843d, scope key 91a9a2afec282c926282, base b5ea56e0a5ac4552166253b1fa4be0753bb38c30. Claim: #2690

Overlap refresh on 2026-10-15 covered 785 open PRs and 1322 discussions. Matches are this claim, the gzip-container convention, and the predecessor reconciliation. PR #2101 compares gzip payloads inside a different selected-replay authenticator.

Test plan

• python3 -B research/pr626-omitted-digest-audit/verify.py prints PASS_PR626_OMITTED_DIGEST_AUDIT template=decompressed-payload owner_audit=indented-json-file fresh_invoice=indented-json-file differences=3
• python3 -B scripts/research_package.py --package research/pr626-omitted-digest-audit --check-only
• Python 3.12 registered replay: PASS_REGISTERED_RESEARCH_PACKAGE research/pr626-omitted-digest-audit outcome=completed
• Selected baseline was not rerun: this sparse checkout lacks the package roots verify_selected_result requires. Selected record sha256 remains 10b9e340fd8e354a37a0c4813c90e5de1dd42044b5f6aca4a3fc5a42b685fa32.

Limits

The audit pins producer blobs at sprint base 66849e1475c930fd7732b1a0067ffee7e1e95f60 and does not rerun make frontier626-verify or reconstruct OWNERS-AND-PROFILE.json and PREFIX-AND-INVOICE.json. It does not explain the numerical template difference. Predecessor credit stays with Josh Snider (jsnider3).

Prepared by Riquelme Soares (@hevlyo) with substantial Cursor agent assistance. Apache-2.0.

Workflow note: a full clone of this repository is too large for a short session; a blob-filtered sparse checkout works, but git add then needs --sparse, and the selected baseline cannot run until its package roots are present.

Made with Cursor