{"entry":278,"type":"pre_action_verdict","created_at":1794432156,"pubkey_hex":"6786e18a864893a900bd9858e650f67ccc3513f248fed374b591e2ff6922fbb7","event_id":"f6767cc62f4f38865e7961cfa52ca5624820663d0cc822c0d408652c723bf32c","proof_event":{"id":"f6767cc62f4f38865e7961cfa52ca5624820663d0cc822c0d408652c723bf32c","pubkey":"6786e18a864893a900bd9858e650f67ccc3513f248fed374b591e2ff6922fbb7","created_at":1794432156,"kind":30078,"tags":[["d","invinoveritas-proof-af069599c5b0492dcfc7b23af1ca49ff405646d9bf059fc93eec73f654a03e7f-1794432156-23541320"],["t","invinoveritas"],["t","proof"],["schema","invinoveritas.verdict_proof.v1"]],"content":"{\"artifact_hash\":\"af069599c5b0492dcfc7b23af1ca49ff405646d9bf059fc93eec73f654a03e7f\",\"artifact_type\":\"plan\",\"canonicalization_version\":\"rfc8785.v1\",\"confidence\":0.89,\"conformance_suite\":\"https://github.com/babyblueviper1/preaction-governance-conformance\",\"context_provenance\":\"caller_asserted_unverified\",\"decision_ref\":\"sha256:55293afdef9bbda5e51e0eef83814b4d94f6e665c6305a7e30f2b27640bf984e\",\"decision_ref_preimage_fields\":[\"artifact_hash\",\"artifact_type\",\"policy_version\",\"verdict\",\"source_class\",\"vantage_limitation\",\"related_decision_ref\",\"intended_audience\",\"confidentiality_tier\",\"disclosed_summary\",\"intended_verifier\",\"policy_commitment\",\"verified_at\",\"registry_as_of\",\"registry_snapshot_sha256\",\"action_binding_tool_hash\",\"action_binding_args_hash\",\"action_binding_agent_id\",\"action_binding_nonce\",\"freshness_beacon_hash\",\"epistemic_basis\",\"external_evidence_hash\",\"canonicalization_version\",\"related_claims_hash\",\"related_claims_result\",\"related_claims_comparison_version\",\"mediator_attestation_hash\"],\"decision_ref_preimage_rule\":\"every name in decision_ref_preimage_fields is a key in the hashed preimage object, always -- absent fields (e.g. vantage_limitation when not applicable) are present as JSON null, never omitted from the object.\",\"engine_generation\":1,\"epistemic_basis\":null,\"freshness_beacon\":{\"block_time\":1794429902,\"hash\":\"00000000000000000000c626ade7be99d95742976b65233931065394e08e532f\",\"height\":975473,\"source\":\"bitcoin\"},\"freshness_beacon_hash\":\"sha256:0f7a7eb0bef4645fbd0502a52677a67f64b82eadc92de895af652ad7c9be4ba9\",\"independent_nodes\":[\"https://invinoveritas-castra.babyblueviper.workers.dev/verify\",\"https://babyblueviper1--2aba75da693711f185891607ee4eb77e.web.val.run\"],\"key_id\":\"6786e18a864893a900bd9858e650f67ccc3513f248fed374b591e2ff6922fbb7\",\"platform\":\"invinoveritas\",\"policy_commitment\":\"sha256:ce58857dea9f9851394bd3126f9aca28b8ef7cc95cc3562ab0e4a863f8be73fe\",\"policy_commitment_inputs\":{\"conformance_suite_commit\":\"e90948ed3eb9d36eb1d0997ea4d02045e28a405a\",\"conformance_suite_repo\":\"babyblueviper1/preaction-governance-conformance\",\"rubric_doc_path\":\"docs/policy_spec/invinoveritas.review.v12.md\",\"rubric_sha256\":\"bb74afa68bd5e8b1ca1038d8f0c8cd9a0d1f83888a7ea7df7c551f579a974180\"},\"policy_version\":\"invinoveritas.review.v22\",\"registry_as_of\":null,\"registry_snapshot_sha256\":null,\"related_claims_result\":\"not_supplied\",\"review_model_hash\":\"deda3dc02a1d1575f15d5c9f9b3e31cf0c768a55508c31e7ff0f4fc8f33fc669\",\"review_prompt_template_hash\":\"13a72a4c1e3a99b969ac46b724eceef6620716292f2b730f19915cdd469c1e31\",\"schema\":\"invinoveritas.verdict_proof.v1\",\"source_class\":\"agent_reported\",\"summary_hash\":\"572b21db3406b18f8d7331cd07b2db20a27ef84771a26cb618a77b39ccb1bd08\",\"verdict\":\"approve_with_concerns\",\"verified_at\":1794432155,\"verifier_keys\":\"https://api.babyblueviper.com/.well-known/verifier-keys.json\",\"verifier_pubkey\":\"6786e18a864893a900bd9858e650f67ccc3513f248fed374b591e2ff6922fbb7\",\"verify_how\":\"Easiest: install the offline verifier above and recompute locally. Or POST this proof's signed `event` to verify_url (or an independent_node), OR run NIP-01 yourself: recompute the Nostr event id = sha256([0,pubkey,created_at,kind,tags,content]), verify the schnorr signature against verifier_pubkey. valid ⇒ invinoveritas issued this, untampered. No trust required.\",\"verify_offline\":\"npm i invinoveritas-verify  ·  pip install invinoveritas-verify  — recompute this proof on your own machine against verifier_pubkey; you never have to call us.\",\"verify_url\":\"https://api.babyblueviper.com/verify-proof\"}","sig":"daf7419b2650168e2c2ab973573a8b3699e0c266180c27f5d291e2ed8cf5bb4215c90929a708714cc4de3813fba976d392459eb8d7a5d01502a335e4951579c8"},"record":{"ledger":"invinoveritas verdict ledger","entry":278,"type":"pre_action_verdict","title":"Repository transfer: agent-governance-vocabulary to NOSAI-Federation (2026-11-14 18:00 UTC)","what":"A SIGNED, artifact-bound verdict committed and published BEFORE its outcome exists. The schnorr signature binds the verdict + a hash of the exact reviewed artifact to our published key; the entry is Bitcoin-anchored (OTS) while still unsettled, so the anchor provably PRECEDES the outcome. Verify via POST /verify-proof or NIP-01, with no trust in us. Outcome will be appended in place at /ledger/{n}/outcome when the action resolves.","verdict":{"verdict":"approve_with_concerns","confidence":0.89,"summary":"The proposed GitHub transfer is directionally sound and the stated post-transfer checks cover the core repository-preservation properties. However, two of the five settlement conditions are not independently determinable without a pre-transfer evidence baseline, and the early-close/objection timing rule is not operationally unambiguous.","issues":[{"severity":"medium","category":"missing_check","description":"Checks 2 and 4 refer to the pre-move default-branch head and every pre-move project entry, but no immutable pre-transfer SHA, tree hash, or entry manifest is specified. After transfer, a reviewer cannot objectively establish which commit was the pre-transfer head or whether all entries match their pre-transfer contents if the branch changes around the move.","suggested_fix":"Before transfer, publish the exact default-branch SHA and a versioned manifest of project-entry paths plus SHA-256 content hashes in #244 or a signed release/tag; settle checks 2 and 4 against that artifact."},{"severity":"medium","category":"correctness","description":"The timing rule is ambiguous: the move is scheduled before the stated 14-day review ends, while 'the later 21 November date if an objection is raised' does not define an objection cutoff, who determines validity, or whether any objection automatically blocks the 14 November transfer. This can produce a dispute even if all GitHub preservation checks pass.","suggested_fix":"State a UTC objection deadline, the authorized decision-maker, and an explicit rule such as 'any substantiated objection posted before 2026-11-14 18:00 UTC defers transfer until a recorded resolution, no later than 2026-11-21 18:00 UTC.'"},{"severity":"medium","category":"safety","description":"The plan validates repository contents but has no transfer preflight for organization-dependent operational state. A repository transfer can change access and integration behavior under the destination organization, including team permissions, organization policies, GitHub Apps/webhooks, Actions configuration or secrets, deploy keys, Pages, and branch-protection enforcement. These failures would not be caught by the five listed checks.","suggested_fix":"Before transfer, inventory repository integrations and protection settings, confirm the destination organization can accept the transfer, and record a post-transfer validation checklist for permissions, CI, webhooks, Pages, and branch protections."}]},"proof":{"event_id":"f6767cc62f4f38865e7961cfa52ca5624820663d0cc822c0d408652c723bf32c","pubkey":"6786e18a864893a900bd9858e650f67ccc3513f248fed374b591e2ff6922fbb7","artifact_sha256_in_event":true,"how_to_verify":"POST /verify-proof with this Nostr event, or run NIP-01; the artifact_hash binds it to the exact artifact reviewed."},"outcome_status":"pending — settles when the action resolves","ts":1794432156},"posted_at":1794432156,"relays":[],"posted":false,"chain":{"prev_head_hash":"3fae39370f45a2d17a509e980bac5b53643507f071fe76e9abea3c99d4fb43ff","content_hash":"6293182d2206eee1aecb43e04b53ff07d14ddc5654842d5037c14b72a8e1c429","head_hash":"2f1e3af64e160179330728762872712283b9d5a0857328a18254962dffcc69ab"},"chain_head_relays":["relay.damus.io","offchain.pub","relay.nostr.net","relay.snort.social"],"ots_anchor":{"mechanism":"opentimestamps-bitcoin-pow","digest":"f6767cc62f4f38865e7961cfa52ca5624820663d0cc822c0d408652c723bf32c","digest_meaning":"the verdict's signed Nostr event_id, stamped as the OTS digest directly","status":"confirmed","precedence":true,"precedence_basis":"stamped pre-outcome — entry unsettled and fresh at stamp time","calendars":["https://a.pool.opentimestamps.org","https://b.pool.opentimestamps.org","https://a.pool.eternitywall.com","https://ots.btc.catallaxy.com"],"stamped_at":"2026-11-11T21:36:06Z","ots_path":"/data/track_record/ots/f6767cc62f4f38865e7961cfa52ca5624820663d0cc822c0d408652c723bf32c.ots","verify":"ots verify -d f6767cc62f4f38865e7961cfa52ca5624820663d0cc822c0d408652c723bf32c f6767cc62f4f38865e7961cfa52ca5624820663d0cc822c0d408652c723bf32c.ots  (recomputable against any Bitcoin explorer; no trust in us)","bitcoin_block_height":975480,"confirmed_at":"2026-11-11T22:55:39Z","bitcoin_block_time":1794434791,"bitcoin_block_hash":"00000000000000000000ab82200c7fa6b53e16475339c0fda4b16325c351702f"},"relay_anchor":{"checked_at":1794644433,"relays_holding":[],"status":"unverified"},"commitment_proof":null,"judgment_execution":{"spec":"JudgmentExecutionAttestation — ERC-8299 L4 composition (reviewed→executed commitment; origin t/28655 #11)","hash_alg":"sha256","raw_proposal_hash":"af069599c5b0492dcfc7b23af1ca49ff405646d9bf059fc93eec73f654a03e7f","verdict_ref":{"binding":"nostr-event","event_id":"f6767cc62f4f38865e7961cfa52ca5624820663d0cc822c0d408652c723bf32c"},"verdict_timestamp":1794432156,"executed_action_hash":null,"status":"entry predates executed-intent commitment wiring; action_taken is disclosed in the record and the outcome settled on-chain, but no separate executed-action hash was committed at the time (not backfilled by design)"},"outcome_evidence":{"question":"was the verdict later right or wrong? (distinct from commitment_proof's 'was it committed before the outcome was known?')","mechanism":"on-chain-settlement","account":"0x3b2A858806Fa4DEb9191Bb7918350fDB774603A4","note":"every governed trade settles on this public Hyperliquid account; the signed trade-outcome digest entries below contain the settled rows published at/after this verdict — wins AND losses","settled_digests":[],"status":"pending"}}