{
  "schema": "business-is-near-current-source-checks-v1",
  "prepared_utc": "2026-11-14T21:45:29.624127+00:00",
  "scope": "Current source closure with separate read-only pending metadata UI qualification; all original local financial/controller proof stays generation-specific.",
  "current_source": {
    "manifest": "source/OWNER-TOOLS-SOURCE.json",
    "bytes": 74754,
    "sha256": "c0399959fdcb599d3e1b1d6f988cf51bea17846a3b8001bc7ab7541c02937cf8",
    "files": 437,
    "relative_imports_verified": 517,
    "vite_input_declarations_verified": 27,
    "verification_basis": "Exact virtual byte/import composition; Root must run the unchanged official verifier on assembled successor before publication.",
    "inventory_scope": "Unchanged 437-file owner-tools closure; separate managed-recovery capsule uses its own 70-payload manifest."
  },
  "local_module": {
    "path": "source/labs/procurement/candidate-v4-delivery",
    "manifest": "source/labs/procurement/candidate-v4-delivery/MODULE-SOURCE-MANIFEST.json",
    "bytes": 7363,
    "sha256": "46e1630c49ef0df8b0cf0459f9e235c954356738e961cef621d803d014bad0c1",
    "manifested_files_excluding_itself": 40,
    "relative_imports_verified": 53,
    "pinned_financial_wasm": {
      "bytes": 595178,
      "sha256": "bf13e856506ebfd3e2a532d79e9a3a657436ca299ae34e64654465b00633091d"
    },
    "compiled_js": {
      "bytes": 167656,
      "sha256": "ae277c28cfb179d30308f0dc92ae0a3fb67fc5195de802c80cf3151ea1127ed7"
    },
    "scope": "Historical 40-row module inventory and unchanged financial build pins; not current repaired controller coverage"
  },
  "separate_repaired_controller_qualification": {
    "offline_tests": 43,
    "independent_focused_probes": 16,
    "narrow_review": "CLEAN after isolated read-invariant/availability repairs",
    "browser_smoke": "Initial page, nonfinancial key preparation, open transaction review and Go Back; zero application requests/signatures. Separate operator observation, not a full cycle.",
    "browser_smoke_report": "docs/evidence/local-initial-smoke/SMOKE-REPORT.json",
    "browser_smoke_report_sha256": "e292347b1b1778161c1e911cd13fb218fb7aba3d78cdf70c564a94088fc127df",
    "full_current_controller_browser_cycle_verified": false,
    "nightly_signing_verified": false,
    "scope": "Earlier V2-only offline repair/initial browser smoke; not the current V5 cycle qualification"
  },
  "historical_proof_boundaries": [
    "Earlier one-slot and two-record local protocol evidence uses the same financial WASM; neither is a fresh execution of this source package.",
    "An older browser generation completed eleven original FINAL transactions and two native transfers; it does not establish the repaired current controller full cycle.",
    "The preserved 103-second local video/transcript describe an earlier release, including synthetic Cloud fixtures and held frames.",
    "The broader 44-area catalogue is historical. Exactly two immutable original component reports are included as bounded test fixtures; the complete historical corpus is absent.",
    "Metadata cleanup changes source hashes. Historical source commitments and checks remain attached to their original runs and are not promoted to current-source acceptance."
  ],
  "notices": {
    "original_project_license": "All rights reserved; no project-wide license grant",
    "upstream_body_bytes_and_line_endings_preserved": true,
    "upstream_body_sha256": "52381062c6fb9004f25d14799a663ff7ff0e666b2b89a165e3a9d03cdc4f54e6",
    "nightly_addendum": "docs/NIGHTLY-NOTICES-ADDENDUM.md"
  },
  "download": {
    "path": "docs/downloads/business-is-near-reproducible-source.zip",
    "inventory": "SOURCE-DOWNLOAD-MANIFEST.json inside the archive",
    "hash_binding": "PUBLICATION-MANIFEST.json binds the completed download; no circular self-hash claim",
    "nested_archives": false,
    "installed_dependencies_or_runtime_configuration_included": false
  },
  "unverified": [
    "Real human hiring or a public marketplace",
    "Maximum 8 by 8 capacity",
    "Real Nightly full-cycle approval and production recovery",
    "Live NEAR AI Cloud billing or hosted TEE execution",
    "Mainnet or continuously hosted service",
    "Commercial demand and human usability validation",
    "Recurring/general production company loop; V5 establishes only one bounded isolated local task"
  ],
  "publication": "Local preparation does not establish a public deployment or decide the public history transition.",
  "inherited_offline_checks_from_clean_generation": {
    "local_module": {
      "passed": 83,
      "failed": 0,
      "includes_controller_subset": 43,
      "command": "npm --prefix source/labs/procurement/candidate-v4-delivery/financial-fork test",
      "uses_synthetic_hosts_for_some_contract_tests": true,
      "proves_native_transfers": false
    },
    "public_frontend": {
      "passed": 44,
      "failed": 0,
      "command": "node --test source/web-chain/tests/founder-next-actions.test.mjs source/web-chain/tests/founder-service-policy.test.mjs"
    },
    "public_owner_tool_links": {
      "passed": 2,
      "failed": 0,
      "command": "node --test source/web-chain/tests/public-tool-links.test.mjs",
      "scope": "Only 17 unavailable public links point to labeled GitHub source/setup; normal tool pages remain local."
    },
    "financial_semantic_typecheck": "PASS",
    "financial_build": "PASS; compiled JS and WASM match the pinned reviewed outputs byte-for-byte",
    "frontend_builds": {
      "public_testnet": "PASS",
      "normal_owner_tools": "PASS",
      "dependency_lock_matched_existing_installed_frontend_tree": true,
      "dependency_installation_during_preparation": false
    },
    "native_requirement_structure": "PASS; 44 original IDs and baseline/catalogue links only, no feature-completion inference",
    "historical_catalogue_unit_tests": {
      "total": 20,
      "passed": 19,
      "errors": 1,
      "error": "Full 43-report export audit lacks original historical evidence; assertions and original artifact lookup remain intact."
    },
    "full_historical_catalogue_audit": {
      "exit_code": 2,
      "status": "EXPECTED MISSING HISTORICAL EVIDENCE; NOT A PASS"
    },
    "external_model_calls": 0,
    "near_nodes_started": 0,
    "application_transactions": 0
  },
  "fresh_focused_v5_checks": {
    "company_duration_passed": 28,
    "portable_proxy_mock_tests_passed": 7,
    "failed": 0,
    "qualification_source_manifest_sha256": "53680d9938a4d457f3bda7a7a51131d4b5bb1720222bbd905470028375c071ef",
    "unchanged_inherited83_not_rerun_by_qualifier": true,
    "portable_proxy_not_part_of_recorded_model_run": true,
    "scope": "Prior source58 and strictUTF8 helper qualification; current repaired controller profile is below"
  },
  "prior_V5_trial2_generation": {
    "source_guide": "source/labs/procurement/candidate-v4-delivery/local-app-v5/README.md",
    "proof": "docs/evidence/company-loop-v5/verification.json",
    "public_proof_manifest_sha256": "d84ffb19b56b8a22373ed7769d75724f3ad085c3e15888305d78a6af1216ce1d",
    "qualified": "One fresh isolated local company task, one actual local Gemma response,11originalFINALs,two exact native principal actions,company result linked",
    "known_recovery_P2": "Some prebirth errors can wedge the local inspection cache, and stale/multiple prepared approvals need stronger serialization. No unauthorized-spend path was identified in the scoped review.",
    "claimed_repaired": false,
    "unverified": [
      "Actual human hire",
      "Recurrence",
      "Public Nightly full company workflow",
      "Cloud/TEE/mainnet",
      "Production recovery"
    ],
    "current_code_acceptance": false
  },
  "company_loop_v5": {
    "source_guide": "source/labs/procurement/candidate-v4-delivery/local-app-v5/README.md",
    "proof": "docs/evidence/company-loop-v5-repaired/verification.json",
    "qualified_controller60_sha256": "fab51cf3491a57f29da5309dd1954b2b251285d4ba6c91788da18555ee47d3b8",
    "qualified": "One repaired local positive-path cycle, one observed local Gemma response,11FINAL,two principal actions; not live fault-injection or production proof",
    "current_profile_tests": {
      "repair": 30,
      "company_duration": 28,
      "affected_base_guards": 25,
      "total": 83,
      "different_from_historical83": true,
      "proxy_tests_separate": 7
    },
    "specific_prebirth_and_ACK_P2": "Separate v3 source/fake-port repair qualified; ambiguous/restarted/signed states stay UNKNOWN, not a general recovery solution",
    "limits": [
      "Synthetic new local owner/operator/provider, one job/one cycle, same-live-process company/RSA state.",
      "Owned prebirth positive reset remains live-commit-only; failed or restarted uncertainty and signed originals stay UNKNOWN/no auto-reset/resign/rebroadcast.",
      "P3 reviewer input prefill and hidden countdown remain unchanged source-based UX concerns.",
      "No public production/Nightly, mainnet, actual human hire/customer/revenue, NEAR AI Cloud/TEE, full parity or ten successful complete runs proved.",
      "A saved owned local RPC export supports offline consistency, not an independently trusted public network/attestation.",
      "Public repository transition/Nightly human gates and submission/video publication remain outside this review."
    ]
  },
  "historical40_old83_current_claimed": false,
  "prior_d61_release_verification_route": {
    "command": "node source/scripts/verify_owner_tools_source.mjs",
    "authoritative": "Current OWNER-TOOLS-SOURCE exact-byte/shared-import closure",
    "current_source_files": 434,
    "current_module_files_in_owner_closure": 58,
    "local_imports": 514,
    "current_company_tests": {
      "repair": 30,
      "company_duration": 28,
      "affected_guards": 25,
      "total": 83,
      "different_from_historical83": true,
      "proxy7_separate": true
    },
    "observed_assembled_release_logs": {
      "09-current83.log": {
        "bytes": 20870,
        "sha256": "e2930e402dd8c39c9c4f8eafc30d3fc3923268b4663c91635f1893f3376a7c4c"
      },
      "10-proxy7.log": {
        "bytes": 1795,
        "sha256": "6eead006f5a9b3c5229e384630b63e4cd68e18d70492a238cc9dffcaed5de077"
      },
      "08-owner-verifier.log": {
        "bytes": 187,
        "sha256": "fc6ef8319563e6caf0db0fb52a2828631882087b13d77886c648bb4835057f13"
      }
    },
    "logs_basis": "Root ran the assembled bytes; packager read and hashed terminal results. No checks were rerun by packager.",
    "historical_inner_verifier": {
      "manifest_rows": 40,
      "manifest_sha256": "46e1630c49ef0df8b0cf0459f9e235c954356738e961cef621d803d014bad0c1",
      "verifier": "source/labs/procurement/candidate-v4-delivery/verify-source.mjs",
      "active_current_command": false,
      "reason": "Preserved old manifest/verifier describe historical bytes. Changed controller/README bytes are intentionally checked by current owner inventory, not relabelled into old receipt."
    },
    "documentation_successor": "README/SETUP/DEPLOYMENT now prescribe this current route; source434 unchanged.",
    "current_successor_acceptance": false
  },
  "current_verification_route": {
    "command": "node source/scripts/verify_owner_tools_source.mjs",
    "source_files": 437,
    "relative_imports": 517,
    "current_module_files": 58,
    "company_profile_unchanged": 83,
    "proxy_profile_unchanged": 7,
    "separate_pending_UI_command": "node --test source/web-chain/tests/business-pending-metadata.test.mjs",
    "separate_pending_UI_tests": 25,
    "basis": "Virtual closure; final assembled official verifier/build are Root release checks, no new core/model/native execution inferred."
  },
  "read_only_pending_metadata_UI": {
    "source_freeze_sha256": "aa29e142aaa86ecec00914a360ef99b4029d5a66d95bde521dfaebb82b9e626d",
    "source_paths": {
      "source/web-chain/src/business-ui.js": {
        "bytes": 87514,
        "sha256": "aa653978f357d66e0da37a245b338f7bb53ea4e8e23702f7ed0acf28475de043"
      },
      "source/web-chain/business.html": {
        "bytes": 28847,
        "sha256": "6ca15f014818a1c1f09b4dedbdb65f209b710b7cf3bff1e1664d80d979e0a450"
      },
      "source/web-chain/src/business-pending-metadata.js": {
        "bytes": 5602,
        "sha256": "c11392b5cd9c9eaa5cb77f6282a7c5fac4747cb965e2ea1bcdc49cdb30816605"
      },
      "source/web-chain/src/business-pending-metadata.css": {
        "bytes": 919,
        "sha256": "10f96df6d05c25ee1a510c71a99f25f0d4ccbc2e99f2a7383c119ee029978912"
      },
      "source/web-chain/tests/business-pending-metadata.test.mjs": {
        "bytes": 16171,
        "sha256": "2eae3e35984f7bc3a47a0e7e607daa4216da90de8cbbcca0f808f0e74b1b7ea6"
      }
    },
    "scope": "Read-only9-field projection; all outcomesUNKNOWN. No new handler/clear/reconcile/retry/reset/sign/network/storage-write capability. Transaction/pending/recovery/callback boundary code unchanged.",
    "fake_checks": {
      "author": 25,
      "independent_probes": 10,
      "result": "PASS",
      "no_actual_user_browser_or_pending_record": true
    },
    "configured_Claude_review": {
      "generation": "EarlierV1 frozen source snapshot, tools disabled",
      "verdict": "FINDINGS",
      "findings": "Two P3: fingerprint qualifier and missing display-branch coverage",
      "successor_adjudication": "Explicit unverified/not-recomputed label and expanded fake branch checks separately qualified inV2/V3. No repeated paid review and no Claude CLEAN claim.",
      "raw_review_kept_private": true
    },
    "disclosure": "Native DOM open boolean preserved; rows refreshed; hidden/error state resets disclosure. No stored or authority state added.",
    "fake_visual_preview": {
      "status": "ROOT_REPORTED_PASS",
      "basis": "Root explicitly reported synthetic visual PASS to packager; separate Root receipt will be retained outside this packet.",
      "environment": "Synthetic preview only; no actual user pending storage, recovery file or wallet behavior is qualified.",
      "child_browser_observation": false,
      "separate_receipt_bundled": false,
      "separate_Root_receipt_sha256": "54ec0ceca95bbb479c3adff83829d104b92c309574437d9e8a9b1c26991525dd"
    },
    "limits": [
      "Metadata is not authentication, intent-integrity validation, unsigned classification or FINAL proof.",
      "No actual user pending/storage, recovery file, wallet signing or public company full-cycle verification.",
      "Existing automatic callback/reconciliation behavior is unchanged; use a clean URL to inspect without clearing."
    ]
  },
  "wallet_company_rediscovery_navigation": {
    "scope": "Same-origin link only to existing owner-discovery path; no new lookup, storage or transaction authority",
    "existing_read_path": "founder.html -> verified factory owner lookup/chooser -> clean business.html?founder=ID",
    "composed_business_ui_sha256": "042f1d300a0f9704216efcdbe33018b85c65ef622891df3b85c6e76fe829b6cc",
    "landing_sha256": "1da27bf10da6a382ac83cfd53aa22f5b1c12b916338ddb75305cf365a807fb90",
    "merge_insertion_sha256": "ee64f1cc1d9557b15e5884e0e0c523ca3fafff2571565842e6c0f7df8d8e093a",
    "focused_fake_checks": 10,
    "limits": "This restores company discovery, not private recovery keys or storage inside Nightly. Managed-vault work is separate and not deployed by this component."
  },
  "managed_recovery_source_capsule": {
    "schema": "business-is-near-managed-recovery-source-capsule-v1",
    "prepared_utc": "2026-11-14T23:56:09.406956+00:00",
    "source_path": "source/labs/managed-recovery-vault",
    "source_readme": "https://github.com/businessisnear/business-is-near/blob/main/source/labs/managed-recovery-vault/README.md",
    "capsule_manifest": {
      "path": "source/labs/managed-recovery-vault/CAPSULE-MANIFEST.json",
      "sha256": "4fcab506dd9fac35adc83a55f512082b8fb5620599a670a266bc492df694107f",
      "payload_files": 71,
      "total_files_including_manifest": 72
    },
    "owner_tools_inventory": {
      "path": "source/OWNER-TOOLS-SOURCE.json",
      "files": 437,
      "unchanged": true
    },
    "scope": "Portable source and prebuilt local UI for an experimental service-custodied wallet-authenticated recovery prototype; published source is not a hosted service or actual wallet acceptance result.",
    "verification": {
      "explicit_capsule_byte_verifier": "PASS: 71 explicit source/fixture/static files",
      "model_calls": 0,
      "application_transactions": 0,
      "runtime_or_recovery_access": false,
      "portable_cli_help": {
        "bootstrap": "PASS; argument help only, no configuration created",
        "finite_host": "PASS; argument help only, no service started"
      },
      "checked_utc": "2026-11-14T23:56:22.860080+00:00",
      "v3_public_copy_tests": {
        "pass": 17,
        "fail": 0,
        "synthetic_only": true
      }
    },
    "not_established": [
      "Actual Nightly unlock, private import or restore",
      "Automatic recovery enrollment for new public-app work",
      "Hosted persistence, TLS or cross-device availability",
      "Private app storage inside the wallet",
      "Cloud/TEE or mainnet operation"
    ],
    "v3_compatibility_review": {
      "source_freeze_sha256": "fc436abe7715171e04ad3ee1522bff432d7e7c278ee66d32dc1b463518f1e77d",
      "independent_review_sha256": "2a9e806f82a38de3de4034e8cd9eada8eb20bc763de398fc7503f3e9a7dc7da1",
      "checks": "17 synthetic/offline tests plus original app download shape replay; actual wallet import/restore remains unverified"
    }
  }
}