{"entry":246,"ledger":"invinoveritas verdict ledger","paid_sats":196,"proof":{"artifact_hash":"d7f8744cfdbc955abc59a5f587028598cbe4e53613bfd9b3c0c186ad95ee5065","decision_ref":"sha256:a90a6f398e94129344549d36bd93cbefabd97f0f18a2fb7ca548ada24a089aaa","event_id":"ba6aef4ff80ab4c33b6e2d0e09a5d8af2e80284daa72ed96b71b46f165231c25","how_to_verify":"POST /verify-proof with this Nostr event, or run NIP-01 verification against our published npub.","pubkey":"6786e18a864893a900bd9858e650f67ccc3513f248fed374b591e2ff6922fbb7"},"submission_note":"OSuite self-submitted verifier proof for approval-bound GitHub SaaS action bbv-v11-github-saas-2026-08-18-1816z","submitted_by":"osuite-checkpoint","title":"Self-submitted verdict — approve_with_concerns (conf 0.9) on a agent_output artifact, submitted by osuite-checkpoint","ts":1787077032,"type":"self_submitted_verdict","verdict":{"artifact_hash":"d7f8744cfdbc955abc59a5f587028598cbe4e53613bfd9b3c0c186ad95ee5065","artifact_type":"agent_output","confidence":0.9,"conformance_suite":"https://github.com/babyblueviper1/preaction-governance-conformance","decision_ref":"sha256:a90a6f398e94129344549d36bd93cbefabd97f0f18a2fb7ca548ada24a089aaa","decision_ref_preimage_fields":["artifact_hash","artifact_type","policy_version","verdict","source_class","vantage_limitation","related_decision_ref","intended_audience","confidentiality_tier","disclosed_summary","intended_verifier","policy_commitment","verified_at","registry_as_of","registry_snapshot_sha256"],"decision_ref_preimage_rule":"every name in decision_ref_preimage_fields is a key in the hashed preimage object, always -- absent fields (e.g. vantage_limitation when not applicable) are present as JSON null, never omitted from the object.","engine_generation":1,"execution_binding":"external","independent_nodes":["https://invinoveritas-castra.babyblueviper.workers.dev/verify","https://babyblueviper1--2aba75da693711f185891607ee4eb77e.web.val.run"],"key_id":"6786e18a864893a900bd9858e650f67ccc3513f248fed374b591e2ff6922fbb7","mediator_evidence":{"authority_basis":"Real live integration account (label 'osuite-checkpoint', created 2026-07-13, 17 calls). Verified 2026-07-18 that calls genuinely originate from OSuite's own infrastructure, not ours: nginx access log shows the most recent /review call (2026-07-18T08:45:49Z) from IP 104.43.193.12 (Microsoft Azure, Des Moines datacenter -- confirmed distinct from this VPS's own provider), User-Agent 'node' (a real backend client, not this fleet's own Python-based scripts). platform_revenue_ledger's 'internal' classification on these calls is a FUNDING axis, not a caller-identity axis (this account was credited a 30,000-sat prototyping grant rather than paying with real deposited sats -- confirmed via core/auth.py's classification logic: managed=False for this api_key/agent_id on every current check, classification only stayed 'internal' because treasury_amount was 0, unrelated to who is calling). OSuite's own public product claim (action envelope reviewed by OSuite before execution, binding approval to an action fingerprint) matches the structural bar: an independent runtime sitting between the agent and execution, not something the reviewed agent controls.","evidence_ref":"https://x.com/jw_ond/status/2078409858651721850","mediator_id":"osuite","registered_at":"2026-07-18","registry_snapshot_sha256":"ca7912e150d4e03f4c762f4d4b2a4718c1e56043c45756f6031578f84fcddbb5"},"mediator_name":"OSuite","platform":"invinoveritas","policy_commitment":"sha256:b0d29b374874515c8ffa392326fd05d80fcee28dc791fdbb5edbeb6fd50396dd","policy_commitment_inputs":{"conformance_suite_commit":"62d32e519c39ba060950140ee7ceb5327371a0fe","conformance_suite_repo":"babyblueviper1/preaction-governance-conformance","rubric_doc_path":"docs/policy_spec/invinoveritas.review.v10.md","rubric_sha256":"a4af5917fb2d37a685476458a6e326e6cc870fc24e8b49b41243b685fb9eb1b5"},"policy_version":"invinoveritas.review.v11","registry_as_of":1787077030,"registry_snapshot_sha256":"ca7912e150d4e03f4c762f4d4b2a4718c1e56043c45756f6031578f84fcddbb5","requires_use_time_revalidation":true,"review_model_hash":"deda3dc02a1d1575f15d5c9f9b3e31cf0c768a55508c31e7ff0f4fc8f33fc669","schema":"invinoveritas.verdict_proof.v1","source_class":"independent_mediator","state_hash":"sha256:bf20ca701b25455d379b0bc8d68d8be880c8fec08561106cbb72e59005f44aea","summary_hash":"8c25c5f195d7b90732152631969217137646ddb82580bca731eacbf76361a2e6","verdict":"approve_with_concerns","verified_at":1787077030,"verifier_keys":"https://api.babyblueviper.com/.well-known/verifier-keys.json","verifier_pubkey":"6786e18a864893a900bd9858e650f67ccc3513f248fed374b591e2ff6922fbb7","verify_how":"Easiest: install the offline verifier above and recompute locally. Or POST this proof's signed `event` to verify_url (or an independent_node), OR run NIP-01 yourself: recompute the Nostr event id = sha256([0,pubkey,created_at,kind,tags,content]), verify the schnorr signature against verifier_pubkey. valid ⇒ invinoveritas issued this, untampered. No trust required.","verify_offline":"npm i invinoveritas-verify  ·  pip install invinoveritas-verify  — recompute this proof on your own machine against verifier_pubkey; you never have to call us.","verify_url":"https://api.babyblueviper.com/verify-proof"},"what":"A signed, artifact-bound /review verdict, submitted by a registered account (osuite-checkpoint) via POST /ledger/submit — self-serve, paid, auto-accepted after cryptographic verification (not editorially hand-picked; see this entry's `type`). The schnorr signature binds the verdict + a hash of the exact reviewed artifact to our published key — verify it yourself via POST /verify-proof or NIP-01, with no trust in either party required. Submitter's own context: 'OSuite self-submitted verifier proof for approval-bound GitHub SaaS action bbv-v11-github-saas-2026-08-18-1816z'"}