DA-EX-001 / PUBLIC EVIDENCE CASE
One request. One receipt.
An archived inquiry-handler snapshot from 12 October 2026: source, a property and a recorded execution. The current handler has additional safeguards and is checked separately.
13.10.2026 / SPECIFICATION CORRECTION
F-1 / F-2: coverage gaps addressed.
The original 347-request run never entered the insert-race fallback, and all input fixtures used language = en. The archived SPEC.md overstated coverage of these paths. The additional regression results below are separate from the original run.
F-1 / Forced race
A barrier holds the results of two real SELECT statements until both have read an absent key. One INSERT then creates the row, the other makes no change, and its handler executes the fallback SELECT. Identical and conflicting payloads are checked with either client selected as winner: 201/200 or 201/409, one persisted receipt and unchanged winner data.
F-2 / Language normalization
Fourteen inputs are covered for the historical handler: en, uk, missing, null, empty string, unknown language, EN, padded en, en-US, false, true, number, array and object. Only exact en remains en; other values become uk. Each case checks the stored language, replay with its canonical value and a conflict when the normalized language changes. The current handler also checks de, DE, de-DE and padded de: only exact de remains de; the other three become uk. Likewise, fr, FR, fr-FR and padded fr are checked: only exact fr remains fr.
| Check | Historical handler | Current handler |
|---|---|---|
| Barrier scenarios | 4 | 4 |
| Fallback executions / V8 | 4 | 4 |
| Language inputs | 14 | 22 |
| Additional requests | 50 | 74 |
| Assertions in the additional groups | 188 | 268 |
Negative controls: The new checks rejected three deliberate defects: removing the fallback, accepting conflicting payloads and normalizing every language to en.
Executed locally on real SQLite with a controlled SQL schedule in one process. This is not a distributed-concurrency or Cloudflare D1 test. No production API was called. The original ZIP, manifest, signatures and 12 October report remain unchanged.
Additional run: PASS · v24.19.0 ·
Exact results and checked-source SHA-256 hashes
Regression command in the source project:
node scripts/verify-evidence-coverage.mjs{
"schema": "DA-EX-001/coverage-correction/v1",
"status": "PASS",
"finished_at": "2026-10-14T00:08:46.088Z",
"node": "v24.19.0",
"artifact_id": "924bcddb97a58f886a7e4bdd8b3165aae6e05a4ca3b8f91184ce559ab4e9a07b",
"baseline": {
"handler_requests": 347,
"checks": 1773,
"journal_events": 332,
"insert_race_fallback_executions": 0
},
"historical": {
"status": "PASS",
"checks": 188,
"handler_requests": 50,
"forced_race": {
"cases": 4,
"requests": 8,
"scenarios": [
{
"case": "identical_payloads",
"winner": 0,
"statuses": [
201,
200
],
"initial_reads_absent": 2,
"insert_changes": [
1,
0
],
"fallback_reads": 1,
"rows": 1,
"status": "PASS"
},
{
"case": "identical_payloads",
"winner": 1,
"statuses": [
200,
201
],
"initial_reads_absent": 2,
"insert_changes": [
1,
0
],
"fallback_reads": 1,
"rows": 1,
"status": "PASS"
},
{
"case": "conflicting_payloads",
"winner": 0,
"statuses": [
201,
409
],
"initial_reads_absent": 2,
"insert_changes": [
1,
0
],
"fallback_reads": 1,
"rows": 1,
"status": "PASS"
},
{
"case": "conflicting_payloads",
"winner": 1,
"statuses": [
409,
201
],
"initial_reads_absent": 2,
"insert_changes": [
1,
0
],
"fallback_reads": 1,
"rows": 1,
"status": "PASS"
}
]
},
"language_normalization": {
"cases": 14,
"requests": 42,
"scenarios": [
{
"input": "en",
"normalized": "en",
"statuses": [
201,
200,
409
],
"status": "PASS"
},
{
"input": "uk",
"normalized": "uk",
"statuses": [
201,
200,
409
],
"status": "PASS"
},
{
"input": "missing",
"normalized": "uk",
"statuses": [
201,
200,
409
],
"status": "PASS"
},
{
"input": "null",
"normalized": "uk",
"statuses": [
201,
200,
409
],
"status": "PASS"
},
{
"input": "empty",
"normalized": "uk",
"statuses": [
201,
200,
409
],
"status": "PASS"
},
{
"input": "unknown",
"normalized": "uk",
"statuses": [
201,
200,
409
],
"status": "PASS"
},
{
"input": "uppercase_en",
"normalized": "uk",
"statuses": [
201,
200,
409
],
"status": "PASS"
},
{
"input": "padded_en",
"normalized": "uk",
"statuses": [
201,
200,
409
],
"status": "PASS"
},
{
"input": "regional_en",
"normalized": "uk",
"statuses": [
201,
200,
409
],
"status": "PASS"
},
{
"input": "false",
"normalized": "uk",
"statuses": [
201,
200,
409
],
"status": "PASS"
},
{
"input": "true",
"normalized": "uk",
"statuses": [
201,
200,
409
],
"status": "PASS"
},
{
"input": "number",
"normalized": "uk",
"statuses": [
201,
200,
409
],
"status": "PASS"
},
{
"input": "array",
"normalized": "uk",
"statuses": [
201,
200,
409
],
"status": "PASS"
},
{
"input": "object",
"normalized": "uk",
"statuses": [
201,
200,
409
],
"status": "PASS"
}
]
},
"insert_race_fallback_executions": 4
},
"current": {
"status": "PASS",
"checks": 268,
"handler_requests": 74,
"forced_race": {
"cases": 4,
"requests": 8,
"scenarios": [
{
"case": "identical_payloads",
"winner": 0,
"statuses": [
201,
200
],
"initial_reads_absent": 2,
"insert_changes": [
1,
0
],
"fallback_reads": 1,
"rows": 1,
"status": "PASS"
},
{
"case": "identical_payloads",
"winner": 1,
"statuses": [
200,
201
],
"initial_reads_absent": 2,
"insert_changes": [
1,
0
],
"fallback_reads": 1,
"rows": 1,
"status": "PASS"
},
{
"case": "conflicting_payloads",
"winner": 0,
"statuses": [
201,
409
],
"initial_reads_absent": 2,
"insert_changes": [
1,
0
],
"fallback_reads": 1,
"rows": 1,
"status": "PASS"
},
{
"case": "conflicting_payloads",
"winner": 1,
"statuses": [
409,
201
],
"initial_reads_absent": 2,
"insert_changes": [
1,
0
],
"fallback_reads": 1,
"rows": 1,
"status": "PASS"
}
]
},
"language_normalization": {
"cases": 22,
"requests": 66,
"scenarios": [
{
"input": "en",
"normalized": "en",
"statuses": [
201,
200,
409
],
"status": "PASS"
},
{
"input": "uk",
"normalized": "uk",
"statuses": [
201,
200,
409
],
"status": "PASS"
},
{
"input": "missing",
"normalized": "uk",
"statuses": [
201,
200,
409
],
"status": "PASS"
},
{
"input": "null",
"normalized": "uk",
"statuses": [
201,
200,
409
],
"status": "PASS"
},
{
"input": "empty",
"normalized": "uk",
"statuses": [
201,
200,
409
],
"status": "PASS"
},
{
"input": "unknown",
"normalized": "uk",
"statuses": [
201,
200,
409
],
"status": "PASS"
},
{
"input": "uppercase_en",
"normalized": "uk",
"statuses": [
201,
200,
409
],
"status": "PASS"
},
{
"input": "padded_en",
"normalized": "uk",
"statuses": [
201,
200,
409
],
"status": "PASS"
},
{
"input": "regional_en",
"normalized": "uk",
"statuses": [
201,
200,
409
],
"status": "PASS"
},
{
"input": "false",
"normalized": "uk",
"statuses": [
201,
200,
409
],
"status": "PASS"
},
{
"input": "true",
"normalized": "uk",
"statuses": [
201,
200,
409
],
"status": "PASS"
},
{
"input": "number",
"normalized": "uk",
"statuses": [
201,
200,
409
],
"status": "PASS"
},
{
"input": "array",
"normalized": "uk",
"statuses": [
201,
200,
409
],
"status": "PASS"
},
{
"input": "object",
"normalized": "uk",
"statuses": [
201,
200,
409
],
"status": "PASS"
},
{
"input": "de",
"normalized": "de",
"statuses": [
201,
200,
409
],
"status": "PASS"
},
{
"input": "uppercase_de",
"normalized": "uk",
"statuses": [
201,
200,
409
],
"status": "PASS"
},
{
"input": "regional_de",
"normalized": "uk",
"statuses": [
201,
200,
409
],
"status": "PASS"
},
{
"input": "padded_de",
"normalized": "uk",
"statuses": [
201,
200,
409
],
"status": "PASS"
},
{
"input": "fr",
"normalized": "fr",
"statuses": [
201,
200,
409
],
"status": "PASS"
},
{
"input": "uppercase_fr",
"normalized": "uk",
"statuses": [
201,
200,
409
],
"status": "PASS"
},
{
"input": "regional_fr",
"normalized": "uk",
"statuses": [
201,
200,
409
],
"status": "PASS"
},
{
"input": "padded_fr",
"normalized": "uk",
"statuses": [
201,
200,
409
],
"status": "PASS"
}
]
},
"insert_race_fallback_executions": 4
},
"mutation_controls": [
{
"id": "fallback_removed",
"result": "DETECTED",
"reason": "One real no-op insert followed by the fallback SELECT"
},
{
"id": "conflict_accepted",
"result": "DETECTED",
"reason": "Fallback response"
},
{
"id": "language_always_en",
"result": "DETECTED",
"reason": "en: different normalized language conflicts"
}
],
"bindings": [
{
"role": "historical_handler",
"sha256": "ecec0fe67f3df9658c4a42e20d9e2c8f0aabf60d9584ec225f877c57b4302cd0"
},
{
"role": "current_handler",
"sha256": "dacc2952c2876497a49d1c86394ad601c30430df551936d71d3b1418c9ef3b8d"
},
{
"role": "current_security",
"sha256": "c3b0adb9b8e4950edc72beb70719028e0387a48b2c4f635cecee9438759039b3"
},
{
"role": "current_body_reader",
"sha256": "4669c3ec9eed91a0d082a95a11433693481f073e39cb1878f325abcddc449c25"
},
{
"role": "current_fields",
"sha256": "62941d820fea3b01467c769a2e4f48bb2e28710e3e91c27ee30241badd565385"
},
{
"role": "current_migration",
"sha256": "9998207ea659d29bbb9ef501f835c68a22612244306bec5f07df85b1c78c415d"
},
{
"role": "probes",
"sha256": "71890850c625a796cce034edb4198d57f9e3cf4e8d0ed3989a063d940f9e310f"
},
{
"role": "runner",
"sha256": "b0eb82555abb59927d67d530e369c492f5975bf60c1bf2bf423b3e66dbc24f29"
}
],
"production_requests": 0,
"limits": [
"Deterministically scheduled SQL statements in one process and one SQLite connection.",
"No claim about distributed scheduling, Cloudflare D1 or physical effects.",
"The original package and report are retained unchanged; these are additional probes.",
"Only the runtime shown in this result was executed here."
]
}01Claim
A replay creates no second record.
While the stored record exists and is unchanged, replaying a valid inquiry with the same requestId and normalized content returns its original receipt. Different content under that ID is rejected as a conflict.
REQUEST ID7a345678-1234-4234-9234-123456789abc
02Artifact
Source you can inspect.
The files are pinned to the 12 October 2026 package. They are not the current API implementation after adding HMAC, IP limits and deletion through authenticated identity.
ARTIFACT SHA-256
924bcddb97a58f886a7e4bdd8b3165aae6e05a4ca3b8f91184ce559ab4e9a07b03Property
At most one record per key.
∀ k · count(rows[k]) ≤ 1
The PRIMARY KEY NOT NULL constraint prevents two rows from sharing an ID. The handler returns the stored receipt only when fields match; a mismatch returns 409.
This invariant assumes SQLite enforces its constraints. The results below are bounded implementation checks, not a formal proof of the entire code.
Archived SPEC.md — see the F-1 / F-2 correction above → ↗04Verification
An observed execution result.
347handler executions
81sequences × 4 requests
16concurrent calls in one process
1check after reopening the database
Every length-four word over A / B / C: two different valid inquiries sharing an ID, and an inquiry without consent. 347 = 5 + 324 + 16 + 2. Control requests + 81 × 4 requests + concurrent calls + initial write and replay after reopening the database.
| Control step | HTTP | Rows before → after | Observation |
|---|---|---|---|
| First submission | 201 | 0 → 1 | One record created |
| Exact replay | 200 | 1 → 1 | The same receipt |
| Normalized replay | 200 | 1 → 1 | The same receipt |
| Changed content, same ID | 409 | 1 → 1 | Conflict, stored record preserved |
| Missing consent | 400 | 1 → 1 | Rejected, stored record preserved |
Check the connection to the files.
The button recomputes SHA-256 for the downloaded files and compares them with the pinned manifest. This checks integrity in your browser; rerun the server tests using the command below.
Not yet checked in this browser.
10 payload files + manifest.json = 11 ZIP files
- README.md—
- SPEC.md—
- artifact/app/api/inquiries/route.ts—
- artifact/drizzle/0000_parallel_swordsman.sql—
- artifact/lib/inquiries.js—
- artifact/lib/inquiry-fields.js—
- fixtures.json—
- package.json—
- report.json—
- verify.mjs—
MANIFEST SHA-256
797f9a0c63a718c324f25f58b12a70c3441675358321b4d3c505b078c14954c0Select an original or edited copy. The file is processed on your device and is not uploaded.
No file selected.
Expected handler SHA-256
ecec0fe67f3df9658c4a42e20d9e2c8f0aabf60d9584ec225f877c57b4302cd0Selected file SHA-256
Reproduce the result yourself.
Extract the ZIP to a new folder and run the command. Node.js 24 or later is required. There are no npm dependencies. The run uses temporary SQLite databases and writes verification.local.json.
node verify.mjsZIP SHA-256
4dba2dd9b34e0e39bbc859e5ac7f4cd9bb8b42ab12246736edbdafe919de57daREPRODUCTION / SAME EXECUTOR
Same package. Same method.
The public ZIP was downloaded and executed again without changes. This confirms package integrity and repeatability of the existing run in the stated environment.
- Independent external verification
- Not performed
- Behavioural coverage
- The same 347 requests; no new scenarios
- Downloaded ZIP
- Exact SHA-256 match
- Original files
- 11 of 11 unchanged
This repeat does not establish test completeness, the novelty or difficulty of the property, or stronger conclusions about programme readiness.
Reproduction within the site-authoring workflow ·
Executor: Codex in the site-authoring workflow. A new directory on the same host; no second-machine test or network isolation is claimed.
How are assertions counted, and what does PASS mean?
Recorded report status: PASS.
1,773 assertions = 1,763 checks from the original run + 10 file-hash checks. This counts executed assertions, not unique scenarios. PASS means this set completed without violating its checks; it does not establish that the set is complete.
Why did the first comparator return FAIL?
Execution times change. The index of the request that creates the record can also change in the concurrent group. Both runs retain one row: one 201 and fifteen 200 responses. Sequential scenarios are compared in their original order.
The first comparator incorrectly required the same concurrent winner. It returned FAIL although the unchanged verifier passed. The comparison rule was corrected to match the stated property; the initial result is preserved.
ZIP SHA-256
33e792457b56f56f4ef2a5ad9971deaa2133eb2ca4f30604f6baf4962329dfdeThe next step is reproduction by another person on another machine, with an attributed report identifying the reviewer, environment, command, package hash, result and limitations. No such report is published here yet. Test completeness and the substance of the property require a separate review of the specification and scenarios.
05Boundaries
What this result establishes.
- The supplied files were checked with 347 control requests. Arbitrary HTTP inputs were not exhaustively enumerated.
- The original 16 concurrent calls did not enter the insert-race fallback, and all inputs used en. Additional F-1 / F-2 probes are reported above. Distributed concurrency and Cloudflare D1 were not exercised.
- The database was closed and reopened cleanly. Crash recovery and power loss were not tested.
- A receipt confirms a database record, not human review, message delivery or a physical action.
The verification was authored and executed while developing this example. It is not an independent external audit.
Hashes bind bytes to the published manifest. They do not replace an independently trusted publisher signature.
This case concerns a mechanism of this website, not the readiness of the research programmes.