{"entry":267,"type":"pre_action_verdict","created_at":1790706412,"pubkey_hex":"6786e18a864893a900bd9858e650f67ccc3513f248fed374b591e2ff6922fbb7","event_id":"dbf1cb1f282d8aadfef8ab242a33763950d3d16a7cc916668988a4be985e3c44","proof_event":{"id":"dbf1cb1f282d8aadfef8ab242a33763950d3d16a7cc916668988a4be985e3c44","pubkey":"6786e18a864893a900bd9858e650f67ccc3513f248fed374b591e2ff6922fbb7","created_at":1790706412,"kind":30078,"tags":[["d","invinoveritas-proof-3f4f4966059a36671444f4252fe0ecd97b892803ab9c233f5525d45d5f7d1c00-1790706412-a7ceb559"],["t","invinoveritas"],["t","proof"],["schema","invinoveritas.verdict_proof.v1"]],"content":"{\"artifact_hash\":\"3f4f4966059a36671444f4252fe0ecd97b892803ab9c233f5525d45d5f7d1c00\",\"artifact_type\":\"plan\",\"canonicalization_version\":\"rfc8785.v1\",\"confidence\":0.91,\"conformance_suite\":\"https://github.com/babyblueviper1/preaction-governance-conformance\",\"context_provenance\":\"caller_asserted_unverified\",\"decision_ref\":\"sha256:d5d9e114dc25fd35b28ef1bac6a92103a9031a06ea919fb1afa9461b77a22bc6\",\"decision_ref_preimage_fields\":[\"artifact_hash\",\"artifact_type\",\"policy_version\",\"verdict\",\"source_class\",\"vantage_limitation\",\"related_decision_ref\",\"intended_audience\",\"confidentiality_tier\",\"disclosed_summary\",\"intended_verifier\",\"policy_commitment\",\"verified_at\",\"registry_as_of\",\"registry_snapshot_sha256\",\"action_binding_tool_hash\",\"action_binding_args_hash\",\"action_binding_agent_id\",\"action_binding_nonce\",\"freshness_beacon_hash\",\"epistemic_basis\",\"external_evidence_hash\",\"canonicalization_version\",\"related_claims_hash\",\"related_claims_result\",\"related_claims_comparison_version\",\"mediator_attestation_hash\"],\"decision_ref_preimage_rule\":\"every name in decision_ref_preimage_fields is a key in the hashed preimage object, always -- absent fields (e.g. vantage_limitation when not applicable) are present as JSON null, never omitted from the object.\",\"engine_generation\":1,\"epistemic_basis\":null,\"freshness_beacon\":{\"block_time\":1790705476,\"hash\":\"0000000000000000000156a62f636df63d77da47e993960ec0aeec916127b4d2\",\"height\":969188,\"source\":\"bitcoin\"},\"freshness_beacon_hash\":\"sha256:5498a5713c6fe7182d0f65d66560db183fcf9e142a7d2dc98c6d8aa250cc2f7a\",\"independent_nodes\":[\"https://invinoveritas-castra.babyblueviper.workers.dev/verify\",\"https://babyblueviper1--2aba75da693711f185891607ee4eb77e.web.val.run\"],\"key_id\":\"6786e18a864893a900bd9858e650f67ccc3513f248fed374b591e2ff6922fbb7\",\"platform\":\"invinoveritas\",\"policy_commitment\":\"sha256:ce58857dea9f9851394bd3126f9aca28b8ef7cc95cc3562ab0e4a863f8be73fe\",\"policy_commitment_inputs\":{\"conformance_suite_commit\":\"e90948ed3eb9d36eb1d0997ea4d02045e28a405a\",\"conformance_suite_repo\":\"babyblueviper1/preaction-governance-conformance\",\"rubric_doc_path\":\"docs/policy_spec/invinoveritas.review.v12.md\",\"rubric_sha256\":\"bb74afa68bd5e8b1ca1038d8f0c8cd9a0d1f83888a7ea7df7c551f579a974180\"},\"policy_version\":\"invinoveritas.review.v22\",\"registry_as_of\":null,\"registry_snapshot_sha256\":null,\"related_claims_result\":\"not_supplied\",\"review_model_hash\":\"deda3dc02a1d1575f15d5c9f9b3e31cf0c768a55508c31e7ff0f4fc8f33fc669\",\"review_prompt_template_hash\":\"13a72a4c1e3a99b969ac46b724eceef6620716292f2b730f19915cdd469c1e31\",\"schema\":\"invinoveritas.verdict_proof.v1\",\"source_class\":\"agent_reported\",\"summary_hash\":\"3ada8337cbf44e685860c8fbee6480e3e68638b059d17a0b80a6d100291c31a0\",\"verdict\":\"reject\",\"verified_at\":1790706412,\"verifier_keys\":\"https://api.babyblueviper.com/.well-known/verifier-keys.json\",\"verifier_pubkey\":\"6786e18a864893a900bd9858e650f67ccc3513f248fed374b591e2ff6922fbb7\",\"verify_how\":\"Easiest: install the offline verifier above and recompute locally. Or POST this proof's signed `event` to verify_url (or an independent_node), OR run NIP-01 yourself: recompute the Nostr event id = sha256([0,pubkey,created_at,kind,tags,content]), verify the schnorr signature against verifier_pubkey. valid ⇒ invinoveritas issued this, untampered. No trust required.\",\"verify_offline\":\"npm i invinoveritas-verify  ·  pip install invinoveritas-verify  — recompute this proof on your own machine against verifier_pubkey; you never have to call us.\",\"verify_url\":\"https://api.babyblueviper.com/verify-proof\"}","sig":"e0017945795e22e472bf07fb4e6bd9c7323a62812c6949feff4c72478ea618529fb3fcebb3ddcc09c738f781a9d8ed1986022fc4ee7aca7960cb24327ca4c3e2"},"record":{"ledger":"invinoveritas verdict ledger","entry":267,"type":"pre_action_verdict","title":"Forward verdict: x402 #2853 record shape keyed to the payee for facilitator attribution (resolves at freeze, by 2026-12-31)","what":"A SIGNED, artifact-bound verdict committed and published BEFORE its outcome exists. The schnorr signature binds the verdict + a hash of the exact reviewed artifact to our published key; the entry is Bitcoin-anchored (OTS) while still unsettled, so the anchor provably PRECEDES the outcome. Verify via POST /verify-proof or NIP-01, with no trust in us. Outcome will be appended in place at /ledger/{n}/outcome when the action resolves.","verdict":{"verdict":"reject","confidence":0.91,"summary":"The evidence strongly argues that `payTo` is not a facilitator-attribution key, but it does not establish that the settlement transaction submitter is always the facilitator either. Adopting either address as an implicit proxy without defining and attesting the facilitator role creates a durable accountability misattribution risk.","issues":[{"severity":"blocker","category":"correctness","description":"The proposal treats the settlement transaction submitter as synonymous with the facilitator. A transaction sender can instead be a relayer, sponsor, batching service, multisig executor, smart-account entry point, or another delegated submitter; matching a registered address in sampled transactions demonstrates correlation, not that the sender is the accountable facilitator for every settlement.","suggested_fix":"Define a canonical `facilitator` identity explicitly and require it to be signed/attested in the settlement record; retain `payTo` and transaction submitter as separate, labeled fields."},{"severity":"high","category":"correctness","description":"The observed 24–25.6% submitter attribution and 73–94% payee coverage are depth-dependent, which means the proposed attribution result changes based on traversal methodology rather than an unambiguous protocol-level identifier. Freezing a record shape around that inferred join will make disputes depend on off-chain indexing assumptions that different implementations may not reproduce.","suggested_fix":"Specify the exact on-chain event/transaction field and traversal rules in the standard, or avoid inference entirely by recording the facilitator identity in the signed settlement payload."},{"severity":"high","category":"intent_mismatch","description":"The resolution criterion measures whether the standard adopts one field choice, not whether that choice is semantically correct or safely attributable. A standards decision can adopt a payee key for compatibility or another reason while still producing incorrect facilitator accountability; adoption is not proof that the pre-outcome claim was wrong.","suggested_fix":"Separate the governance prediction from the technical claim: define correctness against protocol role semantics and a conformance corpus, and treat the eventual adopted shape only as the prediction outcome."},{"severity":"medium","category":"missing_check","description":"The claim \"the payee is never the facilitator\" is stronger than the presented join evidence. A payee can also operate its own facilitator or receive settlement into a facilitator-controlled address; a zero match in the sampled registry does not prove this is impossible or invalid across implementations.","suggested_fix":"State the bounded result as \"no sampled `payTo` matched the current 105-address registry\" unless the protocol normatively prohibits payee/facilitator address overlap."},{"severity":"medium","category":"safety","description":"A single address key is not durable accountability identity: facilitator addresses can rotate, use multiple hot wallets, submit through contracts, or share infrastructure. Historical disputes could be attributed to the wrong entity or become unjoinable after an operational address change.","suggested_fix":"Use a stable facilitator identifier plus versioned address bindings and validity intervals, with the settlement-time binding included in or referenced by the signed record."}]},"proof":{"event_id":"dbf1cb1f282d8aadfef8ab242a33763950d3d16a7cc916668988a4be985e3c44","pubkey":"6786e18a864893a900bd9858e650f67ccc3513f248fed374b591e2ff6922fbb7","artifact_sha256_in_event":true,"how_to_verify":"POST /verify-proof with this Nostr event, or run NIP-01; the artifact_hash binds it to the exact artifact reviewed."},"outcome_status":"pending — settles when the action resolves","ts":1790706412},"posted_at":1790706412,"relays":["relay.damus.io","nos.lol","relay.primal.net"],"posted":true,"ots_anchor":{"mechanism":"opentimestamps-bitcoin-pow","digest":"dbf1cb1f282d8aadfef8ab242a33763950d3d16a7cc916668988a4be985e3c44","digest_meaning":"the verdict's signed Nostr event_id, stamped as the OTS digest directly","status":"confirmed","precedence":true,"precedence_basis":"stamped pre-outcome — entry unsettled and fresh at stamp time","calendars":["https://a.pool.opentimestamps.org","https://b.pool.opentimestamps.org","https://a.pool.eternitywall.com","https://ots.btc.catallaxy.com"],"stamped_at":"2026-09-29T18:28:15Z","ots_path":"/data/track_record/ots/dbf1cb1f282d8aadfef8ab242a33763950d3d16a7cc916668988a4be985e3c44.ots","verify":"ots verify -d dbf1cb1f282d8aadfef8ab242a33763950d3d16a7cc916668988a4be985e3c44 dbf1cb1f282d8aadfef8ab242a33763950d3d16a7cc916668988a4be985e3c44.ots  (recomputable against any Bitcoin explorer; no trust in us)","bitcoin_block_height":969190,"confirmed_at":"2026-09-29T20:19:19Z","bitcoin_block_time":1790707464,"bitcoin_block_hash":"000000000000000000012169707ee22087f306be92086f0f4265ebfc53348123","ots_proof_url":"https://api.babyblueviper.com/ledger/267/ots"},"commitment_proof":{"mechanism":"nostr-relay-publication","event_id":"dbf1cb1f282d8aadfef8ab242a33763950d3d16a7cc916668988a4be985e3c44","signed_at":1790706412,"published_at":1790706412,"relays":["relay.damus.io","nos.lol","relay.primal.net"],"how_to_check":"fetch the event by id from any listed public relay and confirm created_at; relays held the signed verdict from published_at, before the outcome settled","ots_anchor":{"mechanism":"opentimestamps-bitcoin-pow","digest":"dbf1cb1f282d8aadfef8ab242a33763950d3d16a7cc916668988a4be985e3c44","digest_meaning":"the verdict's signed Nostr event_id, stamped as the OTS digest directly","status":"confirmed","precedence":true,"precedence_basis":"stamped pre-outcome — entry unsettled and fresh at stamp time","calendars":["https://a.pool.opentimestamps.org","https://b.pool.opentimestamps.org","https://a.pool.eternitywall.com","https://ots.btc.catallaxy.com"],"stamped_at":"2026-09-29T18:28:15Z","ots_path":"/data/track_record/ots/dbf1cb1f282d8aadfef8ab242a33763950d3d16a7cc916668988a4be985e3c44.ots","verify":"ots verify -d dbf1cb1f282d8aadfef8ab242a33763950d3d16a7cc916668988a4be985e3c44 dbf1cb1f282d8aadfef8ab242a33763950d3d16a7cc916668988a4be985e3c44.ots  (recomputable against any Bitcoin explorer; no trust in us)","bitcoin_block_height":969190,"confirmed_at":"2026-09-29T20:19:19Z","bitcoin_block_time":1790707464,"bitcoin_block_hash":"000000000000000000012169707ee22087f306be92086f0f4265ebfc53348123","ots_proof_url":"https://api.babyblueviper.com/ledger/267/ots"},"timing":{"hierarchy":"Bitcoin PoW (OpenTimestamps, trust-maximal) > original relay copy (tightest time) > on-chain committedAt > survivor floor (ERC-8299 Appendix B)","tier":0,"timestamp":1790707464,"claim":"Bitcoin proof-of-work (OpenTimestamps): the verdict event_id provably existed by this block's timestamp, anchored to a clock no chain operator or our key can move or back-date. Trust-maximal; the relay tier gives a tighter time on weaker trust.","available":{"tier0_btc_pow":1790707464,"tier1_relay_attested":null,"tier2_onchain_committed_at":null,"tier3_survivor_floor":null},"btc_pow":{"status":"confirmed","precedence":true,"bitcoin_block_height":969190,"bitcoin_block_time":1790707464,"verify":"ots verify -d dbf1cb1f282d8aadfef8ab242a33763950d3d16a7cc916668988a4be985e3c44 dbf1cb1f282d8aadfef8ab242a33763950d3d16a7cc916668988a4be985e3c44.ots  (recomputable against any Bitcoin explorer; no trust in us)","note":"trust-maximal anchor, un-forgeable Bitcoin proof-of-work — pre-outcome precedence","precedence_cross_check":null},"committed_at":null,"committed_at_reference":"judgment_type=outcome_verifiable (ERC-8274): committed_at MUST predate the realized outcome's settlement. committed_at is the tier-2 on-chain committedAt sourced from the ERC-8263 proofHash leg (see truthanchor_8263) — distinct from the ERC-8281/OCP input anchor, which commits the input, not the verdict."},"judgment_type":"outcome_verifiable"},"judgment_execution":{"spec":"JudgmentExecutionAttestation — ERC-8299 L4 composition (reviewed→executed commitment; origin t/28655 #11)","hash_alg":"sha256","raw_proposal_hash":"3f4f4966059a36671444f4252fe0ecd97b892803ab9c233f5525d45d5f7d1c00","verdict_ref":{"binding":"nostr-event","event_id":"dbf1cb1f282d8aadfef8ab242a33763950d3d16a7cc916668988a4be985e3c44"},"verdict_timestamp":1790706412,"executed_action_hash":null,"status":"entry predates executed-intent commitment wiring; action_taken is disclosed in the record and the outcome settled on-chain, but no separate executed-action hash was committed at the time (not backfilled by design)"},"outcome_evidence":{"question":"was the verdict later right or wrong? (distinct from commitment_proof's 'was it committed before the outcome was known?')","mechanism":"on-chain-settlement","account":"0x3b2A858806Fa4DEb9191Bb7918350fDB774603A4","note":"every governed trade settles on this public Hyperliquid account; the signed trade-outcome digest entries below contain the settled rows published at/after this verdict — wins AND losses","settled_digests":[],"status":"pending"}}