{runnerConfigured ? "Plans, verification, and fixed-kernel results can complete in this hosted session." - : "You can review the notebook and make a prediction here. The checked experiment runs only on a separately protected device."} + : health?.generationFilesystemReadIsolation === "PARTIAL" + ? "Generation filesystem read isolation is partial and is not accepted as live authority. Use the verified sample or replay." + : "You can review the notebook and make a prediction here. The checked experiment runs only on a separately protected device."}
diff --git a/apps/web/src/api.test.ts b/apps/web/src/api.test.ts index ea2b3119..bbb2b29d 100644 --- a/apps/web/src/api.test.ts +++ b/apps/web/src/api.test.ts @@ -662,6 +662,31 @@ describe("CounterLabApiClient", () => { ); }); + it("accepts an explicitly OS-enforced generation isolation claim", async () => { + const fetcher = vi.fn
diff --git a/apps/web/src/features/judge/SampleEvidencePack.tsx b/apps/web/src/features/judge/SampleEvidencePack.tsx
index aadb8210..0629f08b 100644
--- a/apps/web/src/features/judge/SampleEvidencePack.tsx
+++ b/apps/web/src/features/judge/SampleEvidencePack.tsx
@@ -1,4 +1,4 @@
-import { useEffect, useState } from "react";
+import { useEffect, useRef, useState } from "react";
import {
type ValidatedSampleProofCapsuleV1,
@@ -69,11 +69,14 @@ function HashValue({ value }: { value: string }) {
export function SampleEvidencePack({
verifyCapsule = verifyCheckedInSampleProofCapsule,
createDownload = createVerifiedDownload,
+ inspectionRequest = 0,
}: {
verifyCapsule?: () => Promise;
createDownload?: (bytes: Uint8Array) => VerifiedDownload;
+ inspectionRequest?: number;
}) {
const [state, setState] = useState({ status: "checking" });
+ const inspectionRef = useRef(null);
useEffect(() => {
let active = true;
@@ -102,6 +105,14 @@ export function SampleEvidencePack({
};
}, [createDownload, verifyCapsule]);
+ useEffect(() => {
+ if (inspectionRequest < 1 || state.status !== "ready") return;
+ const inspection = inspectionRef.current;
+ if (inspection === null) return;
+ inspection.open = true;
+ inspection.querySelector("summary")?.focus({ preventScroll: true });
+ }, [inspectionRequest, state.status]);
+
return (
) : (
atomic commits + focused tests
SOURCE COMPLETE for aggregate runtime chain"] + B["Review gate
independent review + lead diff review
PASS for aggregate runtime integration"] + C["Clean source freeze S
one committed physical tree
BLOCKED by preserved FUSE entry"] + D["Exact runner and adapter image
build receipt v4 bound to S
NOT RUN for current source"] + E["Real aggregate timeout sentinel
observer + controls + FINALIZE + cleanup
BLOCKED by /sys and /proc authority"] + F["Source/image evidence refresh
SBOM + VEX + engine evidence
NOT RUN"] + G["Evidence commit E
reviewed allowlisted evidence only
NOT CREATED"] + H["Qualification
receipt v6 + immutable registry image
NOT RUN; Wrangler identity unverified"] + I["Release check
receipt v5 + deterministic full gate
NOT RUN"] + J["Cloudflare deployment
maintenance + D1 + Container + Worker
NOT RUN"] + K["Public identity and smoke
deployment receipt v7 + /ready + health + live loops
NOT RUN"] + L["CloakBrowser qualification
40 journeys + manual accessibility/performance matrix
0 rendered journeys"] + M["Submission package
public app + repo + video + feedback + honest NO_DATA
EXTERNALLY UNVERIFIED"] + N["Git publication
push feature -> verify remote -> fast-forward main -> push main
NOT RUN"] + + A --> B --> C --> D --> E --> F --> G --> H --> I --> J --> K --> L --> M --> N + + classDef pass fill:#d9f3ee,stroke:#176b5b,color:#123b34; + classDef blocked fill:#fff0d0,stroke:#9a6500,color:#4c3500; + classDef pending fill:#eef2f7,stroke:#596579,color:#252b36; + classDef external fill:#f7e8ef,stroke:#95506d,color:#482636; + class A,B pass; + class C,E blocked; + class D,F,G,H,I,J,K,L pending; + class M,N external; +``` + +## Gate ledger + +| Gate | Required inputs | Required evidence | Current status | Failure rule | +| ------------------------- | -------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------- | +| Source slices | Reviewed implementation and tests | Atomic commits, focused tests, type checks, formatting, secret scan, whitespace check | Aggregate observer/runtime/consumer chain is source-complete | Repair in a new independent commit; do not weaken tests | +| Review | Complete source slice and focused evidence | Independent review plus lead inspection of complete diff | Aggregate runtime review is `GO`; its initial async run/drain race and missing positive path were repaired | Review findings remain open until implementation and regression tests pass | +| Clean source `S` | Final intended source and no tracked or untracked drift | `git status` empty and exact source commit recorded | **Blocked** by preserved FUSE entry | Do not hide, delete, or sweep the entry; use its proven owner's natural exit or a separately contained clean checkout | +| Exact image | Clean `S`, source-matching contained runtime, pinned BuildKit | Build receipt v4, source/tree labels, exact runner and adapter digests | **Not run** for current source; cached receipts belong to older commits | Never reuse or retag an earlier image as current | +| Real sentinel | Exact image, source-matching runtime, release-only qualification mode | Genuine memory OOM, PID denial, CPU throttling, exact membership, FINALIZE, eight cleanup facts, cgroup absence, exclusive evidence artifact | **Blocked** by the checked-in repository-only filesystem rule, which does not permit required `/sys/fs/cgroup` and owned `/proc/
observer, protocol, controls"] + R2["scripts/contained-runtime-*
request, run, server, supervisor"] + R3["services/runner/...
docker.py + timeout_proof.py"] + U1["apps/web/src + worker
learner and authority UI"] + end + + subgraph Verification["Pre-release verification"] + T1["Vitest + TypeScript"] + T2["Pytest + cross-runtime parity"] + T3["Playwright source + static collection"] + Q1["Independent review"] + end + + subgraph Release["Release evidence"] + B1["build-source-bound-runner.sh"] + S1["real timeout/cgroup sentinel"] + E1["refresh-source-bound-scientific-evidence.sh"] + Q2["qualify-runner-release.ts"] + R4["release-check.sh"] + end + + subgraph Production["Production evidence"] + C1["deploy-qualified.sh"] + C2["deployment receipt + /ready + health"] + C3["production-smoke.sh"] + P1["CloakBrowser full matrix"] + end + + R1 --> T1 + R2 --> T1 + R3 --> T2 + U1 --> T1 + U1 --> T3 + T1 --> Q1 + T2 --> Q1 + T3 --> Q1 + Q1 --> B1 --> S1 --> E1 --> Q2 --> R4 --> C1 --> C2 --> C3 --> P1 +``` + +Source tests demonstrate behavior; they do not manufacture the observation at +the real-sentinel, Cloudflare, public-identity, or browser nodes. + +## Commit and review chain at this checkpoint + +The current aggregate release chain is split into independent commits: + +- `0077f1a` — fixed cgroup controls; +- `fbc5ba9` — observer identity bindings; +- `37684dd` — observer protocol; +- `771d8bf` — aggregate observer; +- `317ba44` — live-session qualified-receipt binding; +- `c2c1817` — finalization signal; +- `cf90647` — fail-closed cgroup qualification; +- `bb1cc0b` — finalization-bound aggregate evidence; +- `3cdf38b` — exclusive qualification artifact-chain verification; +- `1ea2ed8` — honest pre-draft ABORT handling; +- `40db9bc` — observer/runtime qualification coordinator; +- `eaf4a60` — release-only runtime integration and control-receipt v3; +- `75dfb65` — Python v3 qualified-receipt consumption with v2 replay + compatibility; +- `f19387b` — current live-browser selector alignment; +- `e4dc33e` — factual progress checkpoint. + +Reported verification for the integrated aggregate slice is: + +- runtime/request/observer/coordinator/receipt Vitest: **7 files, 68/68 + passed**; +- complete runner Pytest with both required source roots: **82/82 passed**; +- repository, web client, generated Worker, and Worker TypeScript: **passed**; +- E2E strict TypeScript: **passed**; +- Playwright static collection: **40 tests in 3 files**, with no browser + launched; +- scoped Prettier, Python compilation, Node syntax, Git whitespace, and secret + scans: **passed**; +- independent runtime integration review: **GO** after the implementation + repaired its initial async run/drain race and missing positive + qualification-path coverage. + +These results are source evidence only. The real sentinel and every downstream +release node remain open. + +## File ownership and reviewer graph + +```mermaid +flowchart TD + Lead["Lead integrator
sole committer and release owner"] + Runtime["Runtime/release implementer
contained runtime + timeout consumer"] + UI["Learner UI implementer
isolated learner components/tests"] + Boundary["Boundary implementer
bounded Boundary files/tests"] + Browser["Browser QA reviewer
Playwright evidence only"] + Access["Accessibility reviewer
semantic/responsive findings"] + Docs["Documentation reviewer
copy and evidence drafts"] + Independent["Independent runtime reviewer
race, binding, failure-path audit"] + + Runtime --> Independent --> Lead + UI --> Access --> Lead + UI --> Browser --> Lead + Boundary --> Access + Boundary --> Browser + Docs --> Lead + Lead --> Commit["Selective staged diff
atomic local commit"] + Commit --> Gate["Relevant tests and delivery gate"] +``` + +| Area | Writable owner | Required reviewer/evidence | Integration owner | +| ----------------------------------------------------------- | ------------------------------------------------------- | ------------------------------------------------------------------- | ----------------- | +| `apps/web/src/App.tsx`, global routes/state/CSS | Lead only | React/Vitest, accessibility and browser review | Lead | +| `apps/web/src/components/learner/`, `features/learner/` | Assigned learner implementer when isolated | Focused component tests, accessibility review, lead diff review | Lead | +| Boundary Hunt files | Assigned Boundary implementer | Boundary invariants, keyboard/table/non-colour review | Lead | +| `scripts/contained-*`, release receipts and release scripts | Lead or one explicitly assigned runtime owner at a time | Runtime Vitest, Python parity, independent review, lead diff review | Lead | +| `services/runner/.../docker.py` and `timeout_proof.py` | One runtime owner at a time | Runner Pytest, cross-language receipt parity, failure-path review | Lead | +| Worker/API/contracts/session transitions | Lead only | TypeScript, Worker tests, authority-boundary review | Lead | +| Scientific/SBOM tracked evidence | Lead during exact refresh | Hash/schema verification and evidence-only diff review | Lead | +| Playwright specifications and evidence | Browser QA owner on assigned files | CloakBrowser execution, console/network and accessibility evidence | Lead | +| Root release/submission documentation | Lead integrates reviewer drafts | Claim-to-evidence review | Lead | +| Git commits, push, deployment and merge | Lead only | Clean staged diff and final delivery gate | Lead | + +No two writers may own the same shared file or receipt registry concurrently. +Only the lead stages, commits, deploys, pushes, or fast-forwards `main`. + +## Disciplines applied directly + +The following disciplines are applied directly from the checked-in repository +constitution, code, tests, and release scripts. This document does **not** claim +that home-directory skill files were read. + +| Discipline | Direct application in this graph | +| --------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Repository safety | All repository work and generated state stay inside the verified root; the FUSE entry is preserved; no destructive cleanup, stash, reset, or outside-root filesystem operation is accepted. | +| Code review | Each logical slice has focused characterization/regression tests, an isolated diff, independent review where assigned, and lead integration before an atomic commit. | +| Accessibility | Browser closure requires semantic names, keyboard completion, visible focus, exact-value tables, non-colour meaning, reduced motion, zoom, responsive viewports, touch targets, and screen-reader inspection. | +| React testing | Component and App behavior is checked with Vitest and strict TypeScript; Playwright covers composed learner journeys, authority labels, refresh, navigation, downloads, and no-result-before-Prediction behavior. | +| Playwright and CloakBrowser | Static collection is not browser evidence; release qualification requires the injected CloakBrowser CDP authority, accessibility snapshots, screenshots where visual judgment matters, and console/network review. Stock Chromium cannot close the gate. | +| Cloudflare and Wrangler | The repository-pinned Wrangler, contained account identity, exact registry digest, maintenance freeze, remote D1 migration, Container rollout, final Worker, recovery target, and public identity receipt form one ordered gate. | +| Delivery gate | Clean `S` -> exact image -> real sentinel -> evidence `E` -> qualification -> release check -> deployment -> public smoke -> full browser matrix -> submission -> push/fast-forward merge. No later node may compensate for an earlier red node. | + +## Current blockers and shortest honest path + +1. The source-level aggregate runtime chain is implemented and reviewed, but a + real delegated-cgroup sentinel has not run. +2. The current constitution prohibits the sentinel's necessary `/sys/fs/cgroup` + and owned `/proc/
- Seal a Prediction, change one condition, and let fixed evidence—not - AI prose—release the bounded result. CounterLab turns the - learner's notebook claim into a checkable Question → Prediction - → Test → Boundary → Apply → Repair record. + Seal a Prediction. Change one condition. Fixed evidence—not AI + prose—releases one bounded result.
@@ -94,25 +92,28 @@ export function JudgeModeView({ >“This score proves the model works for customers it has never seen.”-
- Approved fixed sample framing. No GPT-5.6, Codex, or runner call - occurs in this preview. -
+
+
+ Approved fixed sample framing. No GPT-5.6, Codex, or runner call + occurs here. +
+ + setSampleEvidenceInspectionRequest((request) => request + 1) + } + > + Inspect proof + +
From 830d61b3f6d6ea765a11b8cbce96682b487ab7f0 Mon Sep 17 00:00:00 2001
From: Abhyudaya Baiju Tharakan <22f3001492@ds.study.iitm.ac.in>
Date: Tue, 21 Jul 2026 08:47:12 +0530
Subject: [PATCH 058/143] fix(learner): restore prompt-first landing hierarchy
---
apps/web/src/App.test.tsx | 37 +++---
apps/web/src/App.tsx | 30 ++---
.../learner/AccessibilityStyles.test.ts | 18 +--
.../LockedBeliefBreakPreview.module.css | 109 ++++++++++++++++++
.../learner/LockedBeliefBreakPreview.test.tsx | 33 ++++++
.../learner/LockedBeliefBreakPreview.tsx | 39 ++++++-
.../learner/QuestionComposer.module.css | 44 +++----
apps/web/src/styles.css | 99 +++-------------
8 files changed, 254 insertions(+), 155 deletions(-)
create mode 100644 apps/web/src/components/learner/LockedBeliefBreakPreview.module.css
create mode 100644 apps/web/src/components/learner/LockedBeliefBreakPreview.test.tsx
diff --git a/apps/web/src/App.test.tsx b/apps/web/src/App.test.tsx
index 467fde5c..d0ca015a 100644
--- a/apps/web/src/App.test.tsx
+++ b/apps/web/src/App.test.tsx
@@ -21,6 +21,9 @@ import { activeRunnerRegistryKey } from "./features/learner/activeRunnerRegistry
import { requireBundledSampleResult, sampleArtifact } from "./sample";
const sampleResult = requireBundledSampleResult();
+const PRE_PREDICTION_RESULT_LANGUAGE =
+ /59\.4%|\bdeceptive\b|\bfairer test\b|\bverified result\b|\bevidence verdict\b|\bsupported hypothesis\b|\bthe fix\b|\bremove customer(?:_| )id\b|\bkeep each customer's rows together\b|\bproves?\b/i;
+const LANDING_FIXED_SAMPLE_VALUES = /98\.5%|59\.4%/i;
const verifiedImbalanceResult = VerifiedResultSetSchema.parse(
JSON.parse(imbalanceResultText),
@@ -1073,12 +1076,7 @@ describe("CounterLab judged flow", () => {
).toBeInTheDocument();
expect(
screen.getByText(
- /for learners testing whether a notebook result means what they think it means/i,
- ),
- ).toBeInTheDocument();
- expect(
- screen.getByText(
- /evidence-first learning.*seal a Prediction.*fixed evidence.*not AI prose/i,
+ /ask a question or attach a supported notebook.*reads the evidence and never runs its cells/i,
),
).toBeInTheDocument();
expect(
@@ -1110,7 +1108,7 @@ describe("CounterLab judged flow", () => {
screen.getByText(/fixed kernels calculate the result/i),
).toBeInTheDocument();
expect(
- screen.getByText(/read the evidence and never run the cells/i),
+ screen.getByText(/reads the evidence and never runs its cells/i),
).toBeInTheDocument();
expect(
screen.getByRole("navigation", {
@@ -1126,21 +1124,16 @@ describe("CounterLab judged flow", () => {
expect(
screen.getByRole("button", { name: /test this claim/i }),
).toBeDisabled();
- expect(
- screen.getByText(/result hidden until your Prediction is sealed/i),
- ).toBeInTheDocument();
- expect(
- screen.getByText(
- /name the claim.*lock your expectation.*change one thing/i,
- ),
- ).toBeInTheDocument();
- expect(
- screen.getByLabelText(/fair-test mechanism with result locked/i),
- ).toHaveTextContent(/familiar-row test.*unseen-entity test/i);
- expect(document.body).not.toHaveTextContent(/98\.5%|59\.4%/i);
- expect(
- screen.getByLabelText(/fair-test mechanism with result locked/i),
- ).toHaveAttribute("data-result-visibility", "locked");
+ const lockedPreview = screen.getByLabelText(
+ /fair-test preview with result locked/i,
+ );
+ expect(lockedPreview).toHaveTextContent(
+ /familiar rows.*change who counts as new.*unseen customers/i,
+ );
+ expect(lockedPreview).toHaveAttribute("data-presentation", "strip");
+ expect(lockedPreview).toHaveAttribute("data-result-visibility", "locked");
+ expect(document.body).not.toHaveTextContent(LANDING_FIXED_SAMPLE_VALUES);
+ expect(document.body).not.toHaveTextContent(PRE_PREDICTION_RESULT_LANGUAGE);
const proofSummary = screen.getByText("Evidence & proof");
await user.click(screen.getByRole("link", { name: /how proof works/i }));
expect(proofSummary.closest("details")).toHaveAttribute("open");
diff --git a/apps/web/src/App.tsx b/apps/web/src/App.tsx
index 30646c11..cc4988ad 100644
--- a/apps/web/src/App.tsx
+++ b/apps/web/src/App.tsx
@@ -1098,14 +1098,9 @@ function Landing({
@@ -1130,19 +1125,9 @@ function Landing({
What result are you trying to understand?
-- For learners testing whether a notebook result means what they - think it means. -
-- Evidence-first learning: seal a Prediction, change one - condition, and let fixed evidence—not AI prose—release the - bounded result. +
+ Ask a question or attach a supported notebook. CounterLab reads + the evidence and never runs its cells.
- No account needed Supported - Python/scikit-learn notebooks - We read the evidence and never run the cells + No account needed Sample, live, + and replay stay clearly labelled
{
expect(theaterStyles).toContain("animation: none");
});
- it("keeps the composer dominant and collapses the landing before fixed tracks overflow", () => {
- expect(globalStyles).toContain(
+ it("keeps the composer dominant in one centered responsive column", () => {
+ expect(globalStyles).not.toContain(
"grid-template-columns: minmax(520px, 1.08fr) minmax(480px, 0.92fr)",
);
expect(globalStyles).toContain("@media (max-width: 1240px)");
expect(globalStyles).toContain(
- ".question-first-layout {\n width: 100%;\n max-width: 1220px;\n min-width: 0;",
+ ".question-first-layout {\n width: 100%;\n max-width: 820px;\n min-width: 0;",
);
expect(globalStyles).toContain(
- ".question-first-layout {\n width: 100%;\n max-width: 780px;\n min-width: 0;",
+ ".question-first-layout {\n width: 100%;\n max-width: 820px;\n min-width: 0;",
);
expect(questionComposerStyles).toContain(
".composer {\n width: 100%;\n max-width: 780px;\n min-width: 0;",
@@ -128,11 +128,15 @@ describe("learner-facing responsive style safeguards", () => {
expect(questionComposerStyles).toContain(
".promptGroup {\n width: 100%;\n max-width: 640px;\n min-width: 0;",
);
- expect(globalStyles).toContain(
- ".landing-belief-break blockquote {\n display: none;",
+ expect(globalStyles).toContain("grid-template-columns: minmax(0, 1fr)");
+ expect(questionComposerStyles).toContain(
+ ".form {\n min-height: 122px;\n padding-bottom: 58px;",
);
expect(questionComposerStyles).toContain(
- "@media (max-width: 560px) {\n .promptGroup {\n display: none;",
+ ".submitText {\n position: static;",
+ );
+ expect(questionComposerStyles).not.toContain(
+ ".promptGroup {\n display: none;",
);
});
});
diff --git a/apps/web/src/components/learner/LockedBeliefBreakPreview.module.css b/apps/web/src/components/learner/LockedBeliefBreakPreview.module.css
new file mode 100644
index 00000000..b8877ea1
--- /dev/null
+++ b/apps/web/src/components/learner/LockedBeliefBreakPreview.module.css
@@ -0,0 +1,109 @@
+.strip {
+ width: 100%;
+ min-width: 0;
+ padding: 14px 16px;
+ display: grid;
+ gap: 11px;
+ overflow: hidden;
+ border: 1px solid var(--line);
+ border-radius: 14px;
+ color: var(--ink);
+ background: color-mix(in srgb, var(--night-raised) 84%, transparent);
+}
+
+.status {
+ margin: 0;
+ display: flex;
+ align-items: baseline;
+ justify-content: space-between;
+ gap: 12px;
+ color: var(--ink-soft);
+ font-size: 13px;
+ line-height: 1.4;
+}
+
+.status strong {
+ color: var(--aqua-bright);
+ font-size: 13px;
+ font-weight: 720;
+}
+
+.sequence {
+ margin: 0;
+ display: grid;
+ grid-template-columns: minmax(0, 1fr) auto minmax(0, 1fr);
+ align-items: center;
+ gap: 10px;
+ font-size: 15px;
+ line-height: 1.4;
+ text-align: center;
+}
+
+.sequence > span:first-child,
+.sequence > span:last-child {
+ min-width: 0;
+ padding: 9px 10px;
+ border: 1px solid var(--line);
+ border-radius: 10px;
+ background: var(--paper);
+}
+
+.change {
+ display: inline-grid;
+ justify-items: center;
+ gap: 2px;
+ color: var(--ink-soft);
+ font-size: 13px;
+ white-space: nowrap;
+}
+
+.change > span[aria-hidden="true"] {
+ color: var(--aqua-bright);
+ font-size: 18px;
+ line-height: 1;
+}
+
+.heldFixed {
+ margin: 0;
+ color: var(--ink-soft);
+ font-size: 13px;
+ line-height: 1.45;
+ text-align: center;
+}
+
+.heldFixed > span {
+ margin-right: 5px;
+ color: var(--aqua-bright);
+}
+
+@media (max-width: 560px) {
+ .strip {
+ padding: 12px;
+ gap: 9px;
+ }
+
+ .status {
+ align-items: flex-start;
+ flex-direction: column;
+ gap: 2px;
+ }
+
+ .sequence {
+ grid-template-columns: 1fr;
+ gap: 5px;
+ text-align: left;
+ }
+
+ .change {
+ grid-template-columns: auto 1fr;
+ justify-items: start;
+ padding-inline: 9px;
+ }
+}
+
+@media (prefers-reduced-motion: reduce) {
+ .strip,
+ .strip * {
+ transition: none;
+ }
+}
diff --git a/apps/web/src/components/learner/LockedBeliefBreakPreview.test.tsx b/apps/web/src/components/learner/LockedBeliefBreakPreview.test.tsx
new file mode 100644
index 00000000..c318a4d4
--- /dev/null
+++ b/apps/web/src/components/learner/LockedBeliefBreakPreview.test.tsx
@@ -0,0 +1,33 @@
+import { render, screen } from "@testing-library/react";
+import { describe, expect, it } from "vitest";
+
+import { LockedBeliefBreakPreview } from "./LockedBeliefBreakPreview";
+
+describe("LockedBeliefBreakPreview", () => {
+ it("offers a compact landing strip without revealing the bundled result", () => {
+ render(
+
+ );
+ }
+
return (
h1:focus-visible {
outline: 3px solid var(--focus-ring);
outline-offset: 6px;
@@ -6678,38 +6670,9 @@ body {
.landing-belief-break {
grid-area: belief-break;
- align-self: center;
+ width: min(780px, 100%);
+ justify-self: center;
min-width: 0;
- padding: clamp(20px, 2.5vw, 30px);
- overflow: hidden;
- border: 1px solid var(--line);
- border-radius: 18px;
- background: var(--night-raised);
- box-shadow: 0 24px 70px rgba(0, 0, 0, 0.34);
-}
-
-.landing-belief-break > header > p {
- margin: 0;
- color: var(--aqua-bright);
- font-size: 12px;
- font-weight: 760;
- line-height: 1.4;
-}
-
-.landing-belief-break > header > h2 {
- margin: 9px 0 0;
- font-family: var(--display);
- font-size: clamp(25px, 2.4vw, 36px);
- font-weight: 520;
- letter-spacing: -0.035em;
- line-height: 1.05;
-}
-
-.landing-belief-break blockquote {
- margin: 13px 0 0;
- color: var(--ink-soft);
- font-size: 15px;
- line-height: 1.5;
}
.landing-comparison-preview {
@@ -6963,15 +6926,8 @@ body {
.question-first-layout {
width: 100%;
- max-width: 780px;
+ max-width: 820px;
min-width: 0;
- grid-template-columns: 1fr;
- grid-template-areas:
- "question"
- "belief-break"
- "support"
- "recent";
- gap: 36px;
}
}
@@ -7119,7 +7075,7 @@ body {
}
.question-first-layout {
- gap: 16px;
+ gap: 14px;
}
.landing-question-column {
@@ -7130,32 +7086,13 @@ body {
font-size: 24px;
}
- .landing-audience {
+ .landing-trust-summary {
margin-top: 8px;
font-size: 15px;
}
- .landing-category {
- margin-top: 6px;
- font-size: 14px;
- }
-
.landing-belief-break {
- padding: 14px;
- border-radius: 17px;
- }
-
- .landing-belief-break > header > p {
- font-size: 12px;
- }
-
- .landing-belief-break > header > h2 {
- margin-top: 6px;
- font-size: 21px;
- }
-
- .landing-belief-break blockquote {
- display: none;
+ width: 100%;
}
.landing-comparison-preview {
From dd7b372fb15048e11224979157d3bf29f9beedc9 Mon Sep 17 00:00:00 2001
From: Abhyudaya Baiju Tharakan <22f3001492@ds.study.iitm.ac.in>
Date: Tue, 21 Jul 2026 08:50:02 +0530
Subject: [PATCH 059/143] test(learner): guard prompt-first landing fold
---
apps/web/e2e/judged-flow.spec.ts | 46 ++++++++++++++++++++++++++------
1 file changed, 38 insertions(+), 8 deletions(-)
diff --git a/apps/web/e2e/judged-flow.spec.ts b/apps/web/e2e/judged-flow.spec.ts
index 2517ef29..d19ce8ee 100644
--- a/apps/web/e2e/judged-flow.spec.ts
+++ b/apps/web/e2e/judged-flow.spec.ts
@@ -30,6 +30,8 @@ const claim =
"The 98 percent random split accuracy proves this model generalizes to customers it has never seen.";
const revision =
"When rows repeat an entity, hold out whole entities and remove identity-derived features before claiming generalization.";
+const prePredictionResultLanguage =
+ /59\.4%|\bdeceptive\b|\bfairer test\b|\bverified result\b|\bevidence verdict\b|\bsupported hypothesis\b|\bthe fix\b|\bremove customer(?:_| )id\b|\bkeep each customer's rows together\b|\bproves?\b/i;
const imbalanceNotebookPath = new URL(
"../../../fixtures/notebooks/fraud_class_imbalance.ipynb",
import.meta.url,
@@ -1332,29 +1334,57 @@ for (const viewport of beliefBreakViewports) {
composer,
"question composer before secondary paths",
);
+ await expectEntirelyInFirstViewport(
+ page,
+ page.getByRole("heading", {
+ name: /What result are you trying to understand/i,
+ }),
+ "Question-first heading",
+ );
await expectEntirelyInFirstViewport(
page,
page.getByText(
- /For learners testing whether a notebook result means what they think it means/i,
+ /Ask a question or attach a supported notebook.*never runs its cells/i,
),
- "learner audience statement",
+ "artifact safety summary",
);
- const preview = page.getByRole("complementary", {
- name: /One changed variable.*Everything else held fixed/i,
- });
+ const submit = page.getByRole("button", { name: /Test this claim/i });
+ await expect(submit).toBeDisabled();
+ await expectEntirelyInFirstViewport(
+ page,
+ submit,
+ "primary Question action",
+ );
+ await expectEntirelyInFirstViewport(
+ page,
+ page.getByRole("group", { name: /Prompt starters/i }),
+ "learner prompt starters",
+ );
+ if (viewport.width <= 620) {
+ const submitBox = await submit.boundingBox();
+ expect(submitBox, "mobile primary Question action bounds").not.toBeNull();
+ expect(submitBox!.width).toBeGreaterThanOrEqual(130);
+ }
+
+ const preview = page.locator(
+ '[data-presentation="strip"][data-result-visibility="locked"]',
+ );
await expectEntirelyInFirstViewport(
page,
preview,
"pre-Prediction fair-test promise",
);
+ await expect(preview).toContainText(/Result locked until Prediction/i);
await expect(preview).toContainText(
- /Result hidden until your Prediction is sealed/i,
+ /Familiar rows.*change who counts as new.*Unseen customers/i,
);
await expect(preview).toContainText(
- /Name the claim.*Lock your expectation.*Change one thing/i,
+ /Same model, features, preprocessing, sample size, metric, and seed/i,
+ );
+ await expect(page.locator("body")).not.toContainText(
+ prePredictionResultLanguage,
);
- await expect(page.locator("body")).not.toContainText("59.4%");
await expect(
page.getByRole("region", {
name: "Verified sample belief-break mechanism",
From dd99800ab7c00ab6951aca618b82b4f6a584b621 Mon Sep 17 00:00:00 2001
From: Abhyudaya Baiju Tharakan <22f3001492@ds.study.iitm.ac.in>
Date: Tue, 21 Jul 2026 08:51:37 +0530
Subject: [PATCH 060/143] docs(progress): record prompt-first release
checkpoint
---
docs/PROGRESS.md | 74 ++++++++++++++++++++++++++++++++++++++++++++++--
1 file changed, 71 insertions(+), 3 deletions(-)
diff --git a/docs/PROGRESS.md b/docs/PROGRESS.md
index 0904c7ec..56f48b7c 100644
--- a/docs/PROGRESS.md
+++ b/docs/PROGRESS.md
@@ -12,14 +12,15 @@ pass is never presented as a browser or production pass.
### Current checkpoint
- **Branch:** `feat/learner-ux-v6.1`
-- **Latest committed checkpoint:** `f19387b1ab214571ea27022efdc0b9432655cc9f`.
+- **Latest committed checkpoint:** `dd7b372fb15048e11224979157d3bf29f9beedc9`.
The worktree contains only the preserved, untracked
`scripts/.fuse_hidden0000a9600000801f`. The source now has a self-hashed
cgroup request, observer, FINALIZE/ABORT protocol, fixed negative controls,
fail-closed evidence validation, qualified-receipt derivation/store, runtime
observer orchestration, serialized run/drain handling, exact v2/v3 Python
- consumers, and 40 statically collected Playwright journeys. Source tests do
- not constitute a real cgroup sentinel: no exact image, aggregate host proof,
+ consumers, a tightened Judge first fold, a centered prompt-first Landing,
+ and 40 statically collected Playwright journeys. Source tests do not
+ constitute a real cgroup sentinel: no exact image, aggregate host proof,
qualification, deployment, rendered browser journey, learner observation,
video, Devpost publication, or submission receipt is claimed.
- **Earlier product checkpoint:**
@@ -3530,3 +3531,70 @@ worktree entry besides this progress update is the preserved FUSE tombstone
6. Learner evidence remains **`NO_DATA`**. Devpost, video, public-repository
verification, feedback Session ID, logged-out link audit, publication, and
submission receipt remain externally unverified.
+
+## Prompt-first release-presentation checkpoint — 2026-07-21T03:20:32Z
+
+Deadline: `2026-07-22T00:00:00Z`; **20 hours 39 minutes 28 seconds remained at
+this checkpoint**. The feature branch is at committed HEAD `dd7b372`; the only
+worktree entry besides this progress update is the preserved FUSE tombstone
+`scripts/.fuse_hidden0000a9600000801f`. It remains unchanged and unstaged.
+
+### Independently committed slices
+
+- `bd6e5c3 docs(release): map qualification dependencies` records the source,
+ release, reviewer, browser, Cloudflare, submission, and merge dependency
+ graph without representing local source checks as production closure.
+- `e80b390 fix(judge): tighten first-fold belief break` reduces Judge first-fold
+ copy and visual density, preserves the completed-fixed-sample authority
+ label, and keeps proof one action away before the verified mechanism.
+- `830d61b fix(learner): restore prompt-first landing hierarchy` makes the
+ Question composer the centered dominant action, keeps prompt starters and
+ textual mobile actions visible, and replaces the large pre-result card with
+ a compact locked fair-test strip. The Landing strip contains no fixed sample
+ values or verdict/fix language.
+- `dd7b372 test(learner): guard prompt-first landing fold` updates the
+ desktop/mobile Playwright contract for the new locked strip, visible primary
+ action and prompts, first-viewport containment, mobile action width,
+ horizontal overflow, and the shared pre-Prediction forbidden-text corpus.
+
+### Exact verification in these slices
+
+- Focused Landing component and integration Vitest: **4 files, 85/85 passed**.
+- Complete web Vitest: **79 files, 620/620 passed**.
+- Web client TypeScript and E2E TypeScript: **passed**.
+- Production Vite/Worker build: **passed**. Main client
+ **447.26 kB / 128.68 kB gzip**, client CSS
+ **200.63 kB / 34.69 kB gzip**, Worker
+ **1,863.39 kB / 359.59 kB gzip**.
+- Playwright static collection under the explicit non-rendering design-review
+ authority: **40 tests in 3 files**. No browser launched and no rendered
+ qualification is claimed.
+- Scoped Prettier, Git whitespace, and explicit secret scans: **passed**.
+- One package-manager wrapper retry stopped before test collection with
+ `unable to open database file`; the same checks passed through the
+ repository-local Vitest and TypeScript binaries. One initial Playwright
+ collection command used the wrong repo-local binary path, and one correctly
+ located command failed closed because no browser authority was supplied;
+ explicit non-rendering design-review collection then passed. None of these
+ setup attempts executed product tests or a browser before their corrected
+ passes.
+
+### Current remaining gates
+
+1. The source-level aggregate-cgroup chain remains locally tested but has no
+ real delegated-cgroup sentinel. The checked-in repository-only filesystem
+ constitution prohibits the necessary `/sys` and `/proc` reads, so exact
+ image qualification remains fail-closed.
+2. The preserved FUSE tombstone still prevents a clean physical worktree and
+ is not deleted, hidden, staged, or modified.
+3. Final source freeze, one exact runner image, refreshed source/image-bound
+ evidence, qualification, release checks, contained Wrangler identity, and
+ Cloudflare deployment remain **not run**.
+4. This session still has no `CLOAK_CDP_ENDPOINT`; desktop/mobile rendering,
+ keyboard, screen-reader, reduced-motion, console/network, reconnect,
+ downloads, screenshots, and Web Vitals remain **0 current journeys**.
+5. Learner evidence remains **`NO_DATA`**. Public repository/video/feedback
+ alignment, Devpost completion, logged-out verification, publication, and a
+ submission receipt remain externally unverified.
+6. The feature branch has not been pushed and has not been merged into `main`.
+ Push and fast-forward merge remain downstream of factual release gates.
From 2986046cd24e74a799d4494fc84f716f47e15341 Mon Sep 17 00:00:00 2001
From: Abhyudaya Baiju Tharakan <22f3001492@ds.study.iitm.ac.in>
Date: Tue, 21 Jul 2026 09:14:22 +0530
Subject: [PATCH 061/143] test(e2e): authorize private session assertions
---
apps/web/e2e/judged-flow.spec.ts | 26 ++++++++++++++++++------
apps/web/e2e/private-session.ts | 20 ++++++++++++++++++
apps/web/e2e/recovery-and-intake.spec.ts | 4 ++++
3 files changed, 44 insertions(+), 6 deletions(-)
create mode 100644 apps/web/e2e/private-session.ts
diff --git a/apps/web/e2e/judged-flow.spec.ts b/apps/web/e2e/judged-flow.spec.ts
index d19ce8ee..f0d9c7d9 100644
--- a/apps/web/e2e/judged-flow.spec.ts
+++ b/apps/web/e2e/judged-flow.spec.ts
@@ -25,6 +25,7 @@ import {
snapshotBrowserPerformanceEvidence,
type BrowserPerformanceEvidence,
} from "./performance-evidence";
+import { privateSessionHeaders } from "./private-session";
const claim =
"The 98 percent random split accuracy proves this model generalizes to customers it has never seen.";
@@ -152,9 +153,11 @@ async function writeLiveSmokeEvidence(
if (sessionId === null) {
throw new Error("Live smoke evidence requires a persisted session ID");
}
+ const ownerHeaders = await privateSessionHeaders(page, sessionId);
const completedSessionResponse = await page.request.get(
`/api/sessions/${encodeURIComponent(sessionId)}`,
+ { headers: ownerHeaders },
);
expect(completedSessionResponse.ok()).toBe(true);
const completedSessionPayload = (await completedSessionResponse.json()) as {
@@ -272,7 +275,7 @@ async function writeLiveSmokeEvidence(
const duplicatePublicationResponse = await page.request.post(
`/api/sessions/${encodeURIComponent(sessionId)}/replays`,
- { data: {} },
+ { data: {}, headers: ownerHeaders },
);
expect(duplicatePublicationResponse.status()).toBe(200);
const duplicatePublicationPayload =
@@ -287,6 +290,7 @@ async function writeLiveSmokeEvidence(
const activeStatusResponse = await page.request.get(
`/api/sessions/${encodeURIComponent(sessionId)}/replays/status`,
+ { headers: ownerHeaders },
);
expect(activeStatusResponse.ok()).toBe(true);
const activeStatusPayload = (await activeStatusResponse.json()) as {
@@ -511,6 +515,7 @@ async function writeLiveSmokeEvidence(
const revokedStatusResponse = await page.request.get(
`/api/sessions/${encodeURIComponent(sessionId)}/replays/status`,
+ { headers: ownerHeaders },
);
expect(revokedStatusResponse.ok()).toBe(true);
await expect(revokedStatusResponse.json()).resolves.toMatchObject({
@@ -522,7 +527,7 @@ async function writeLiveSmokeEvidence(
const duplicateRevocationResponse = await page.request.post(
`/api/sessions/${encodeURIComponent(sessionId)}/replays/revoke`,
- { data: {} },
+ { data: {}, headers: ownerHeaders },
);
expect(duplicateRevocationResponse.status()).toBe(200);
await expect(duplicateRevocationResponse.json()).resolves.toMatchObject({
@@ -531,7 +536,7 @@ async function writeLiveSmokeEvidence(
const republishRevokedResponse = await page.request.post(
`/api/sessions/${encodeURIComponent(sessionId)}/replays`,
- { data: {} },
+ { data: {}, headers: ownerHeaders },
);
expect(republishRevokedResponse.status()).toBe(409);
await expect(republishRevokedResponse.json()).resolves.toMatchObject({
@@ -1838,8 +1843,11 @@ test("prediction is immutable and results do not exist before commitment", async
window.localStorage.getItem("counterlab.sessionId"),
);
expect(sessionId).not.toBeNull();
+ const ownerHeaders = await privateSessionHeaders(page, sessionId!);
- const before = await page.request.get(`/api/sessions/${sessionId}`);
+ const before = await page.request.get(`/api/sessions/${sessionId}`, {
+ headers: ownerHeaders,
+ });
expect(before.ok()).toBe(true);
expect((await before.json()).data.verifiedResult).toBeUndefined();
@@ -1854,12 +1862,15 @@ test("prediction is immutable and results do not exist before commitment", async
`/api/sessions/${sessionId}/prediction`,
{
data: { choice: "Accuracy remains near 98%", confidence: 100 },
+ headers: ownerHeaders,
},
);
expect(overwrite.status()).toBe(409);
expect((await overwrite.json()).error.code).toBe("ILLEGAL_TRANSITION");
- const committed = await page.request.get(`/api/sessions/${sessionId}`);
+ const committed = await page.request.get(`/api/sessions/${sessionId}`, {
+ headers: ownerHeaders,
+ });
expect(committed.ok()).toBe(true);
const committedPayload = await committed.json();
expect(committedPayload.data.prediction.confidence).toBe(88);
@@ -2015,7 +2026,10 @@ test("a rejected test releases no result and remains recoverable after refresh",
const sessionId = await page.evaluate(() =>
window.localStorage.getItem("counterlab.sessionId"),
);
- const stored = await page.request.get(`/api/sessions/${sessionId}`);
+ expect(sessionId).not.toBeNull();
+ const stored = await page.request.get(`/api/sessions/${sessionId}`, {
+ headers: await privateSessionHeaders(page, sessionId!),
+ });
expect(stored.ok()).toBe(true);
expect((await stored.json()).data.verifiedResult).toBeUndefined();
diff --git a/apps/web/e2e/private-session.ts b/apps/web/e2e/private-session.ts
new file mode 100644
index 00000000..5c452904
--- /dev/null
+++ b/apps/web/e2e/private-session.ts
@@ -0,0 +1,20 @@
+import type { Page } from "./cloak-test";
+
+const ownerCapabilityPattern = /^cl_owner_[A-Za-z0-9_-]{43}$/u;
+
+export async function privateSessionHeaders(
+ page: Page,
+ sessionId: string,
+): Promise<{ authorization: string }> {
+ const storageKey = `counterlab.ownerCapability.${encodeURIComponent(sessionId)}`;
+ const capability = await page.evaluate(
+ (key) => window.localStorage.getItem(key),
+ storageKey,
+ );
+ if (capability === null || !ownerCapabilityPattern.test(capability)) {
+ throw new Error(
+ `Private session ${sessionId} has no valid browser-held owner capability`,
+ );
+ }
+ return { authorization: `Bearer ${capability}` };
+}
diff --git a/apps/web/e2e/recovery-and-intake.spec.ts b/apps/web/e2e/recovery-and-intake.spec.ts
index 69685e19..fcdd3195 100644
--- a/apps/web/e2e/recovery-and-intake.spec.ts
+++ b/apps/web/e2e/recovery-and-intake.spec.ts
@@ -1,4 +1,5 @@
import { expect, test, type Page } from "./cloak-test";
+import { privateSessionHeaders } from "./private-session";
import { SAMPLE_LEAKAGE_QUESTION } from "../shared/sample-authority";
const liveQuestion =
@@ -164,6 +165,9 @@ for (const response of [
);
const terminalResponse = await page.request.get(
`/api/sessions/${encodeURIComponent(closedSessionId!)}`,
+ {
+ headers: await privateSessionHeaders(page, closedSessionId!),
+ },
);
expect(terminalResponse.ok()).toBe(true);
expect((await terminalResponse.json()).data.state).toBe(
From e9529b0a4da7beaacf33e3a753158647e9b93146 Mon Sep 17 00:00:00 2001
From: Abhyudaya Baiju Tharakan <22f3001492@ds.study.iitm.ac.in>
Date: Tue, 21 Jul 2026 09:17:01 +0530
Subject: [PATCH 062/143] test(e2e): await fresh recovery sessions
---
apps/web/e2e/recovery-and-intake.spec.ts | 5 +++++
1 file changed, 5 insertions(+)
diff --git a/apps/web/e2e/recovery-and-intake.spec.ts b/apps/web/e2e/recovery-and-intake.spec.ts
index fcdd3195..0c33c2d6 100644
--- a/apps/web/e2e/recovery-and-intake.spec.ts
+++ b/apps/web/e2e/recovery-and-intake.spec.ts
@@ -186,6 +186,11 @@ for (const response of [
await page
.getByRole("button", { name: /Revise in a new investigation/i })
.click();
+ await expect
+ .poll(() => storedSessionId(page), {
+ message: "the replacement investigation should install a fresh session",
+ })
+ .not.toBe(closedSessionId);
await expect(
page.getByRole("heading", { name: /What do you think the score means/i }),
).toBeVisible();
From 52b40ef59e86a92e1d6e3a5fc2cb3bf385d204d0 Mon Sep 17 00:00:00 2001
From: Abhyudaya Baiju Tharakan <22f3001492@ds.study.iitm.ac.in>
Date: Tue, 21 Jul 2026 09:23:49 +0530
Subject: [PATCH 063/143] fix(learner): activate session routes before render
---
apps/web/e2e/judged-flow.spec.ts | 3 +++
apps/web/src/App.test.tsx | 35 ++++++++++++++++++++++++
apps/web/src/App.tsx | 46 +++++++++++++++++++-------------
3 files changed, 66 insertions(+), 18 deletions(-)
diff --git a/apps/web/e2e/judged-flow.spec.ts b/apps/web/e2e/judged-flow.spec.ts
index f0d9c7d9..bfffe219 100644
--- a/apps/web/e2e/judged-flow.spec.ts
+++ b/apps/web/e2e/judged-flow.spec.ts
@@ -1907,6 +1907,9 @@ test("refresh restores the question and confirmed Prediction phases", async ({
}) => {
await reset(page);
await page.getByRole("button", { name: /Try verified sample/i }).click();
+ await expect(
+ page.getByRole("heading", { name: /What do you think the score means/i }),
+ ).toBeVisible();
await page.reload();
await expect(
page.getByRole("heading", { name: /What do you think the score means/i }),
diff --git a/apps/web/src/App.test.tsx b/apps/web/src/App.test.tsx
index d0ca015a..f3cc74ac 100644
--- a/apps/web/src/App.test.tsx
+++ b/apps/web/src/App.test.tsx
@@ -1503,6 +1503,41 @@ describe("CounterLab judged flow", () => {
expect(story.getByText(/sha-256/i)).toBeInTheDocument();
});
+ it("installs the sample session route before exposing the Question stage", async () => {
+ const user = userEvent.setup();
+ const originalPushState = window.history.pushState.bind(window.history);
+ const questionVisibilityAtSessionActivation: boolean[] = [];
+ const pushStateSpy = vi
+ .spyOn(window.history, "pushState")
+ .mockImplementation((data, unused, url) => {
+ if (String(url).startsWith("/session/")) {
+ questionVisibilityAtSessionActivation.push(
+ screen.queryByRole("heading", {
+ name: /what do you think the score means/i,
+ }) !== null,
+ );
+ }
+ originalPushState(data, unused, url);
+ });
+
+ try {
+ render() {
}
describe("CounterLab judged flow", () => {
+ it("assigns distinct evidence identities to metrics from one output", () => {
+ const outputHash = "d".repeat(64);
+ const references = notebookEvidenceReferences(
+ ArtifactManifestSchema.parse({
+ ...uploadedArtifact,
+ cells: [
+ {
+ index: 1,
+ type: "code",
+ sourceSha256: "b".repeat(64),
+ sourceExcerpt: "accuracy and roc_auc",
+ executionCount: 1,
+ outputHashes: [outputHash],
+ symbols: [],
+ metricCandidates: [
+ { name: "accuracy", value: 0.98, outputIndex: 0 },
+ { name: "roc_auc", value: 0.97, outputIndex: 0 },
+ ],
+ },
+ ],
+ }),
+ );
+
+ expect(references.map(({ id }) => id)).toEqual([
+ `${outputHash}-0-accuracy`,
+ `${outputHash}-0-roc_auc`,
+ ]);
+ expect(new Set(references.map(({ id }) => id)).size).toBe(
+ references.length,
+ );
+ });
+
it("keeps Judge Mode on its own refresh-safe route", async () => {
const user = userEvent.setup();
const fetcher = installApi({
diff --git a/apps/web/src/App.tsx b/apps/web/src/App.tsx
index c9a5d3da..90df385d 100644
--- a/apps/web/src/App.tsx
+++ b/apps/web/src/App.tsx
@@ -708,7 +708,7 @@ function notebookScoreDisplay(
};
}
-function notebookEvidenceReferences(
+export function notebookEvidenceReferences(
artifact: ArtifactView | null,
): readonly NotebookEvidenceReference[] {
if (artifact?.fileSha256 === sampleArtifact.fileSha256) {
@@ -733,9 +733,7 @@ function notebookEvidenceReferences(
if (artifact === null) return [];
const metricReferences = artifact.cells.flatMap((cell) =>
cell.metricCandidates.map((metric) => ({
- id:
- cell.outputHashes[metric.outputIndex] ??
- `${cell.sourceSha256}-${metric.outputIndex}-${metric.name}`,
+ id: `${cell.outputHashes[metric.outputIndex] ?? cell.sourceSha256}-${metric.outputIndex}-${metric.name}`,
reference: `Cell ${cell.index} · output ${metric.outputIndex}`,
relevance: `${metric.name} is displayed notebook evidence attached to this question.`,
excerpt: `${metric.name}: ${metric.value.toLocaleString()}`,
From 4f7bbda6e980855b02641f384ca1ae6859c72dc3 Mon Sep 17 00:00:00 2001
From: Abhyudaya Baiju Tharakan <22f3001492@ds.study.iitm.ac.in>
Date: Tue, 21 Jul 2026 09:50:37 +0530
Subject: [PATCH 067/143] test(perf): scope first-fold browser budgets
---
apps/web/e2e/judged-flow.spec.ts | 94 +++++++++++++++++++++-----------
1 file changed, 63 insertions(+), 31 deletions(-)
diff --git a/apps/web/e2e/judged-flow.spec.ts b/apps/web/e2e/judged-flow.spec.ts
index 6a6f49ca..d063e16f 100644
--- a/apps/web/e2e/judged-flow.spec.ts
+++ b/apps/web/e2e/judged-flow.spec.ts
@@ -667,12 +667,13 @@ async function resetWithBrowserFailureObservation(
return failures;
}
-function expectWithinComprehensionBudget(
- startedAt: number,
+async function expectWithinComprehensionBudget(
+ page: Page,
maximumMs: number,
label: string,
) {
- expect(Date.now() - startedAt, label).toBeLessThanOrEqual(maximumMs);
+ const navigationElapsedMs = await page.evaluate(() => performance.now());
+ expect(navigationElapsedMs, label).toBeLessThanOrEqual(maximumMs);
}
function expectNoBrowserFailures(failures: BrowserFailureLog) {
@@ -711,7 +712,6 @@ async function expectBeliefBreakInFirstViewport(
page: Page,
surface: Locator,
modeLabel: RegExp,
- startedAt: number,
) {
const mechanism = surface.getByRole("region", {
name: "Verified sample belief-break mechanism",
@@ -799,6 +799,14 @@ async function expectBeliefBreakInFirstViewport(
await expect(mechanism).toBeVisible();
for (const stage of comprehensionStages) {
+ await Promise.all(
+ stage.required.map(({ locator }) => expect(locator).toBeVisible()),
+ );
+ await expectWithinComprehensionBudget(
+ page,
+ stage.budgetMs,
+ `Judge ${stage.label} must be inspectable within ${stage.budgetMs / 1_000} seconds`,
+ );
for (const required of stage.required) {
await expectEntirelyInFirstViewport(
page,
@@ -806,15 +814,19 @@ async function expectBeliefBreakInFirstViewport(
required.label,
);
}
- expectWithinComprehensionBudget(
- startedAt,
- stage.budgetMs,
- `Judge ${stage.label} must be inspectable within ${stage.budgetMs / 1_000} seconds`,
- );
}
}
-async function captureBeliefBreakScreenshot(page: Page, fileName: string) {
+async function captureBeliefBreakScreenshot(
+ page: Page,
+ fileName: string,
+ options: {
+ performanceBudgetScope?:
+ "navigation-first-fold" | "post-seal-spa-observation";
+ } = {},
+) {
+ const performanceBudgetScope =
+ options.performanceBudgetScope ?? "navigation-first-fold";
const configuredDirectory =
process.env.COUNTERLAB_E2E_BELIEF_BREAK_EVIDENCE_DIR ??
resolve(requiredRuntimeRoot(), "evidence", "belief-break");
@@ -823,7 +835,9 @@ async function captureBeliefBreakScreenshot(page: Page, fileName: string) {
);
await page.screenshot({ path: destination, fullPage: false });
const performance = await snapshotBrowserPerformanceEvidence(page);
- expectFirstFoldPerformanceBudgets(performance);
+ if (performanceBudgetScope === "navigation-first-fold") {
+ expectFirstFoldPerformanceBudgets(performance);
+ }
const evidenceDestination = await ensureRuntimeParent(
resolve(configuredDirectory, fileName.replace(/\.png$/u, ".json")),
);
@@ -834,6 +848,10 @@ async function captureBeliefBreakScreenshot(page: Page, fileName: string) {
browserAuthority: currentBrowserAuthorityLabel(),
capturedAt: new Date().toISOString(),
performance,
+ performanceBudget: {
+ enforced: performanceBudgetScope === "navigation-first-fold",
+ scope: performanceBudgetScope,
+ },
screenshot: fileName,
},
null,
@@ -1322,17 +1340,45 @@ for (const viewport of beliefBreakViewports) {
test(`${viewport.name} Landing keeps the unprimed Question and fair-test promise in the first viewport`, async ({
page,
}) => {
- const navigationStartedAt = Date.now();
await page.setViewportSize(viewport);
const failures = await resetWithBrowserFailureObservation(page);
+ const heading = page.getByRole("heading", {
+ name: /What result are you trying to understand/i,
+ });
+ const artifactSafetySummary = page.getByText(
+ /Ask a question or attach a supported notebook.*never runs its cells/i,
+ );
+ const composer = page.getByLabel("Your question or claim");
+ const submit = page.getByRole("button", { name: /Test this claim/i });
+ const promptStarters = page.getByRole("group", {
+ name: /Prompt starters/i,
+ });
+ const preview = page.locator(
+ '[data-presentation="strip"][data-result-visibility="locked"]',
+ );
+ await Promise.all(
+ [
+ heading,
+ artifactSafetySummary,
+ composer,
+ submit,
+ promptStarters,
+ preview,
+ ].map((locator) => expect(locator).toBeVisible()),
+ );
+ await expectWithinComprehensionBudget(
+ page,
+ 10_000,
+ "Landing Question and fair-test promise must become inspectable within ten seconds",
+ );
+
const skipLink = page.getByRole("link", {
name: /Skip to main content/i,
});
await skipLink.focus();
await expect(skipLink).toBeFocused();
await page.keyboard.press("Tab");
- const composer = page.getByLabel("Your question or claim");
await expect(composer).toBeFocused();
await expectEntirelyInFirstViewport(
page,
@@ -1341,20 +1387,15 @@ for (const viewport of beliefBreakViewports) {
);
await expectEntirelyInFirstViewport(
page,
- page.getByRole("heading", {
- name: /What result are you trying to understand/i,
- }),
+ heading,
"Question-first heading",
);
await expectEntirelyInFirstViewport(
page,
- page.getByText(
- /Ask a question or attach a supported notebook.*never runs its cells/i,
- ),
+ artifactSafetySummary,
"artifact safety summary",
);
- const submit = page.getByRole("button", { name: /Test this claim/i });
await expect(submit).toBeDisabled();
await expectEntirelyInFirstViewport(
page,
@@ -1363,7 +1404,7 @@ for (const viewport of beliefBreakViewports) {
);
await expectEntirelyInFirstViewport(
page,
- page.getByRole("group", { name: /Prompt starters/i }),
+ promptStarters,
"learner prompt starters",
);
if (viewport.width <= 620) {
@@ -1372,9 +1413,6 @@ for (const viewport of beliefBreakViewports) {
expect(submitBox!.width).toBeGreaterThanOrEqual(130);
}
- const preview = page.locator(
- '[data-presentation="strip"][data-result-visibility="locked"]',
- );
await expectEntirelyInFirstViewport(
page,
preview,
@@ -1395,11 +1433,6 @@ for (const viewport of beliefBreakViewports) {
name: "Verified sample belief-break mechanism",
}),
).toHaveCount(0);
- expectWithinComprehensionBudget(
- navigationStartedAt,
- 10_000,
- "Landing Question and fair-test promise must become inspectable within ten seconds",
- );
await expectNoHorizontalOverflow(page);
await captureBeliefBreakScreenshot(
page,
@@ -1412,7 +1445,6 @@ for (const viewport of beliefBreakViewports) {
test(`${viewport.name} Judge Mode shows the honest fixed-sample belief break in the first viewport`, async ({
page,
}) => {
- const navigationStartedAt = Date.now();
const failures = observeBrowserFailures(page);
await installBrowserPerformanceEvidence(page);
await page.setViewportSize(viewport);
@@ -1426,7 +1458,6 @@ for (const viewport of beliefBreakViewports) {
page,
preview,
/Completed fixed sample.*not a live result/i,
- navigationStartedAt,
);
await expect(
preview.getByText(
@@ -1520,6 +1551,7 @@ for (const viewport of beliefBreakViewports) {
await captureBeliefBreakScreenshot(
page,
`belief-break-sample-post-seal-${viewport.name}.png`,
+ { performanceBudgetScope: "post-seal-spa-observation" },
);
await page.waitForLoadState("networkidle");
expectNoBrowserFailures(failures);
From f5155e0cb19fec74330e1d3df9ab0bce0feca52b Mon Sep 17 00:00:00 2001
From: Abhyudaya Baiju Tharakan <22f3001492@ds.study.iitm.ac.in>
Date: Tue, 21 Jul 2026 09:52:29 +0530
Subject: [PATCH 068/143] docs(progress): record browser harness recovery
---
docs/PROGRESS.md | 83 ++++++++++++++++++++++++++++++++++++++++++++++++
1 file changed, 83 insertions(+)
diff --git a/docs/PROGRESS.md b/docs/PROGRESS.md
index 56f48b7c..50f0f2eb 100644
--- a/docs/PROGRESS.md
+++ b/docs/PROGRESS.md
@@ -3598,3 +3598,86 @@ worktree entry besides this progress update is the preserved FUSE tombstone
submission receipt remain externally unverified.
6. The feature branch has not been pushed and has not been merged into `main`.
Push and fast-forward merge remain downstream of factual release gates.
+
+## Browser-harness recovery checkpoint — 2026-07-21T04:20:55Z
+
+Deadline: `2026-07-22T00:00:00Z`; **19 hours 39 minutes 05 seconds remained at
+this checkpoint**. The feature branch is at committed HEAD `4f7bbda`; the only
+worktree entry besides this progress update is the preserved FUSE tombstone
+`scripts/.fuse_hidden0000a9600000801f`. It remains unread, unchanged, and
+unstaged.
+
+### Independently committed slices
+
+- `2986046 test(e2e): authorize private session assertions` sends the
+ browser-held owner capability on direct private-session E2E requests.
+- `e9529b0 test(e2e): await fresh recovery sessions` verifies that Reject and
+ Not enough evidence recovery creates a fresh session before resubmission.
+- `52b40ef fix(learner): activate session routes before render` persists the
+ session and route before exposing learner state, closing refresh and browser
+ history races.
+- `6142e5e test(e2e): align current learner journeys` updates stale accessible
+ names and route expectations without changing production authority.
+- `d184e5a test(e2e): configure local intake authority` supplies a clearly
+ local-only admission key to the local Playwright server and uses a distinct
+ supported live notebook fixture rather than sample evidence.
+- `cdbe153 fix(learner): distinguish notebook evidence keys` gives repeated
+ notebook evidence references stable unique React keys and adds unit/browser
+ console regression coverage.
+- `4f7bbda test(perf): scope first-fold browser budgets` measures current-page
+ visible readiness instead of harness setup time, checks required content in
+ parallel before geometry assertions, and records post-seal SPA metrics as
+ observation-only rather than mislabelling navigation LCP as post-interaction
+ qualification.
+
+### Exact verification in these slices
+
+- Full App integration suite before the evidence-key characterization:
+ **71/71 passed**; the added evidence-key unit test then passed **1/1**.
+- Recovery and route-regression browser runs: **2/2** and **1/1 passed**.
+- Updated learner-selector browser slices: **7/10 passed** on the first run;
+ the corrected three cases then passed **3/3**.
+- Intake browser matrix on fresh local D1 state: malformed/unsupported cases
+ **3/3 passed** and supported/retry cases **3/3 passed**.
+- Duplicate-key supported-upload browser regression: **1/1 passed** with no
+ React duplicate-key console error.
+- Desktop/mobile Landing, Judge first fold, and post-seal sample browser
+ matrix: **6/6 passed in 22.5 seconds**.
+- Current first-fold design-review metrics: Landing LCP **684–740 ms**, Judge
+ LCP **1,216–1,352 ms**, CLS **0–0.02145**, and TTFB **6.2–28.7 ms**.
+- E2E strict TypeScript, scoped Prettier, Git whitespace, and scoped secret
+ scans: **passed**.
+- A prior complete stock-browser run collected **40 tests** and produced
+ **10 passed, 25 failed, 5 skipped**. All 25 failures were classified as
+ harness authorization, stale selectors, route ordering, duplicate evidence
+ identity, or performance-scope problems. Targeted repairs now pass, but the
+ complete 40-test matrix has not yet been rerun, so it is not claimed green.
+
+All rendered checks in this checkpoint used explicitly labelled
+`stock-chromium-design-review` authority. They are useful implementation and
+visual-review evidence, but do not satisfy the required CloakBrowser public
+release qualification.
+
+### Current remaining gates
+
+1. Run the complete 40-test stock-browser matrix against fresh local D1 state,
+ repair any remaining product or harness failures, and record exact results.
+2. Run the final deterministic TypeScript, Vitest, Pytest, build, formatting,
+ secret, whitespace, mutation, and held-out gates at frozen source.
+3. Obtain a clean exact source `S`, execute the real aggregate-cgroup sentinel,
+ build one exact runner image, regenerate source/image-bound SBOM, VEX, and
+ scientific evidence, create evidence commit `E`, and qualify the tuple.
+ The preserved FUSE entry and the constitution's prohibition on required
+ `/sys` and `/proc` reads currently keep this chain fail-closed.
+4. Establish repository-contained Wrangler identity, deploy only the qualified
+ tuple, and verify exact public Worker/Container/source identity and complete
+ production smoke evidence.
+5. Run all public desktop/mobile, keyboard, screen-reader, reduced-motion,
+ reconnect, download, console/network, and Web Vitals journeys through an
+ injected CloakBrowser endpoint. This session still has no
+ `CLOAK_CDP_ENDPOINT`.
+6. Keep learner evidence as `NO_DATA` unless real consented observations occur.
+ Public repository/video/feedback alignment, Devpost publication, logged-out
+ verification, and submission receipt remain externally unverified.
+7. Push the feature branch and fast-forward `main` only after the ship gates
+ above are factual; neither publication action has occurred.
From e0313101952e2e1b66421bfb2c38adae383f7fad Mon Sep 17 00:00:00 2001
From: Abhyudaya Baiju Tharakan <22f3001492@ds.study.iitm.ac.in>
Date: Tue, 21 Jul 2026 09:58:17 +0530
Subject: [PATCH 069/143] docs(release): record local browser matrix
---
docs/PROGRESS.md | 17 +++++++++++++
.../19_RELEASE_DEPENDENCY_AND_REVIEW_GRAPH.md | 24 ++++++++++++-------
2 files changed, 33 insertions(+), 8 deletions(-)
diff --git a/docs/PROGRESS.md b/docs/PROGRESS.md
index 50f0f2eb..654960f5 100644
--- a/docs/PROGRESS.md
+++ b/docs/PROGRESS.md
@@ -3681,3 +3681,20 @@ release qualification.
verification, and submission receipt remain externally unverified.
7. Push the feature branch and fast-forward `main` only after the ship gates
above are factual; neither publication action has occurred.
+
+## Complete local browser-matrix checkpoint — 2026-07-21T04:26:26Z
+
+- The complete Playwright collection executed against fresh repository-local
+ D1 state under explicit `stock-chromium-design-review` authority: **40 tests
+ in 3 files, 35 passed, 5 intentionally skipped, 0 failed in 2.7 minutes**.
+- The five skips are exact and expected at this gate: two public mobile replay
+ journeys require `COUNTERLAB_E2E_BASE_URL`, one public asset scan requires a
+ frozen release manifest and public origin, and two untouched supported live
+ journeys require `COUNTERLAB_E2E_LIVE=1` with a genuinely qualified analyst
+ and hosted runner.
+- All local Sample, Replay, intake, recovery, refresh/history, authority,
+ responsive, keyboard, reduced-motion, transfer, patch-lock, first-fold,
+ console/network, and no-result-before-Prediction journeys passed.
+- This closes the local stock-browser regression gate only. It does not close
+ the exact-public, hosted-live, CloakBrowser, real screen-reader, deployment,
+ or submission gates.
diff --git a/docs/audits/counterlab-first-prize/19_RELEASE_DEPENDENCY_AND_REVIEW_GRAPH.md b/docs/audits/counterlab-first-prize/19_RELEASE_DEPENDENCY_AND_REVIEW_GRAPH.md
index 5158aeec..618ecd9c 100644
--- a/docs/audits/counterlab-first-prize/19_RELEASE_DEPENDENCY_AND_REVIEW_GRAPH.md
+++ b/docs/audits/counterlab-first-prize/19_RELEASE_DEPENDENCY_AND_REVIEW_GRAPH.md
@@ -1,10 +1,10 @@
# Release dependency and review graph
-- Checkpoint: `2026-07-21T03:07:00Z`
+- Checkpoint: `2026-07-21T04:26:26Z`
- Branch: `feat/learner-ux-v6.1`
-- Committed HEAD: `e4dc33eb44962b972c0157e5ecb4ed9760c16ee4`
+- Committed HEAD: `f5155e0cb19fec74330e1d3df9ab0bce0feca52b`
- Deadline: `2026-07-22T00:00:00Z`
-- Time remaining at this checkpoint: **20 hours 53 minutes**
+- Time remaining at this checkpoint: **19 hours 33 minutes 34 seconds**
## Purpose and evidence boundary
@@ -22,6 +22,12 @@ worktree will reject this state.
No current deployment, rendered CloakBrowser journey, learner outcome, video,
Devpost submission, branch push, or merge is claimed here.
+The complete local `stock-chromium-design-review` matrix now passes every
+locally executable journey: **35 passed, 5 intentionally skipped, 0 failed in
+2.7 minutes**. The five skips are the two exact-public mobile replay journeys,
+one exact-public asset scan, and two qualified hosted-runner journeys. This is
+useful source/design evidence; it is not public or CloakBrowser qualification.
+
## Release dependency graph
```mermaid
@@ -37,7 +43,7 @@ flowchart TD
I["Release check
receipt v5 + deterministic full gate
NOT RUN"] J["Cloudflare deployment
maintenance + D1 + Container + Worker
NOT RUN"] K["Public identity and smoke
deployment receipt v7 + /ready + health + live loops
NOT RUN"] - L["CloakBrowser qualification
40 journeys + manual accessibility/performance matrix
0 rendered journeys"] + L["Browser qualification
local stock 35 pass / 5 public-live skips
public CloakBrowser: 0 journeys"] M["Submission package
public app + repo + video + feedback + honest NO_DATA
EXTERNALLY UNVERIFIED"] N["Git publication
push feature -> verify remote -> fast-forward main -> push main
NOT RUN"] @@ -68,7 +74,7 @@ flowchart TD | Release check | Clean `E`, qualified receipt, exact local images and runtime | Release-check receipt v5 after formatting, tests, mutations, held-out, sandbox, scientific, build, reproduction, patch replay, and secret gates | **Not run** | Any failure blocks deployment | | Cloudflare deployment | Qualified receipt, release-check receipt, registry image, required secrets, recovery target, working CloakBrowser endpoint | Exact maintenance/final Worker versions, D1 migration log, exact Container digest, deployment receipt v7 | **Not run** | Stop before mutation when preflight is red; after mutation, automated Worker recovery does not reverse D1 or Container state | | Public identity and smoke | Active exact Worker/Container tuple | `/ready`, `/api/health?readiness=probe`, Worker 100% traffic, Container identity, public asset scan, Sample, Replay, leakage and imbalance live evidence, Capsule/replay evidence | **Not run** | Source, image, Worker, client, receipt, or capability mismatch is a release failure | -| CloakBrowser | Exact public tuple and injected `CLOAK_CDP_ENDPOINT` | All 40 current tests plus responsive, keyboard, screen-reader, 200% zoom, reduced-motion, console/network, downloads, reconnect, and Web Vitals evidence | **40 statically collected; 0 rendered** | Stock Chromium is design-review evidence only and cannot close this gate | +| CloakBrowser | Exact public tuple and injected `CLOAK_CDP_ENDPOINT` | All 40 current tests plus responsive, keyboard, screen-reader, 200% zoom, reduced-motion, console/network, downloads, reconnect, and Web Vitals evidence | Local stock design review: **35 passed, 5 public/live skips, 0 failed**; public CloakBrowser: **0 journeys** | Stock Chromium is design-review evidence only and cannot close this gate | | Devpost and impact | Qualified public tuple, public repo/video/feedback links, factual copy | Logged-out link audit, public video from exact tuple, Devpost receipt, real consented learner aggregates or explicit `NO_DATA` | **Externally unverified; learner evidence remains `NO_DATA`** | Never infer a submission or learner result | | Push and merge | Every ship gate factual and final source reviewed | Verified feature remote tip, fast-forward-only `main`, verified main remote tip | **Not run** | Do not push or merge a `NO-GO` release | @@ -86,7 +92,7 @@ flowchart LR subgraph Verification["Pre-release verification"] T1["Vitest + TypeScript"] T2["Pytest + cross-runtime parity"] - T3["Playwright source + static collection"] + T3["Playwright source + local stock matrix"] Q1["Independent review"] end @@ -147,8 +153,10 @@ Reported verification for the integrated aggregate slice is: - complete runner Pytest with both required source roots: **82/82 passed**; - repository, web client, generated Worker, and Worker TypeScript: **passed**; - E2E strict TypeScript: **passed**; -- Playwright static collection: **40 tests in 3 files**, with no browser - launched; +- Complete local stock-browser matrix: **40 tests in 3 files**, **35 passed, + 5 intentionally skipped, 0 failed in 2.7 minutes**. The public replay, + public asset, and real hosted-runner cases remain deferred to the exact + release tuple; - scoped Prettier, Python compilation, Node syntax, Git whitespace, and secret scans: **passed**; - independent runtime integration review: **GO** after the implementation From 9229c8ef4447063f8f6eea717da970e633c36d7e Mon Sep 17 00:00:00 2001 From: Abhyudaya Baiju Tharakan <22f3001492@ds.study.iitm.ac.in> Date: Tue, 21 Jul 2026 10:08:05 +0530 Subject: [PATCH 070/143] style(tests): normalize scientific UI fixtures --- .../TrustedLabSceneRenderer.test.tsx | 18 ++++++++---------- .../src/scientific-candidate-v5.test.ts | 3 ++- 2 files changed, 10 insertions(+), 11 deletions(-) diff --git a/apps/web/src/components/generative-ui/TrustedLabSceneRenderer.test.tsx b/apps/web/src/components/generative-ui/TrustedLabSceneRenderer.test.tsx index 7aea5009..91e2af99 100644 --- a/apps/web/src/components/generative-ui/TrustedLabSceneRenderer.test.tsx +++ b/apps/web/src/components/generative-ui/TrustedLabSceneRenderer.test.tsx @@ -222,16 +222,14 @@ describe("TrustedLabSceneRenderer", () => {)
- }
+ signedResult={signedResult({
+ integrity: {
+ mode: "hmac-signed",
+ contentHash: resultHash,
+ signature: digest("f"),
+ keyId: "counterlab-result-v1",
+ },
+ } as unknown as Partial)}
/>,
);
expect(screen.getByRole("alert")).toBeVisible();
diff --git a/packages/plan-verifier/src/scientific-candidate-v5.test.ts b/packages/plan-verifier/src/scientific-candidate-v5.test.ts
index 6aa4c189..dbf908b1 100644
--- a/packages/plan-verifier/src/scientific-candidate-v5.test.ts
+++ b/packages/plan-verifier/src/scientific-candidate-v5.test.ts
@@ -561,7 +561,8 @@ describe("scientific v5 candidate verification", () => {
label: "an invented result claim in the scene title",
mutate: (scene: LabSceneV2) => ({
...scene,
- title: "The repeated-identity explanation won after accuracy collapsed.",
+ title:
+ "The repeated-identity explanation won after accuracy collapsed.",
}),
},
{
From 6a92e06b543769164d5ea5a67adfcf5b0e99894b Mon Sep 17 00:00:00 2001
From: Abhyudaya Baiju Tharakan <22f3001492@ds.study.iitm.ac.in>
Date: Tue, 21 Jul 2026 10:13:42 +0530
Subject: [PATCH 071/143] docs(readme): reconcile judge link and evidence
---
README.md | 8 ++++----
1 file changed, 4 insertions(+), 4 deletions(-)
diff --git a/README.md b/README.md
index 7241ef6f..70f9d9c4 100644
--- a/README.md
+++ b/README.md
@@ -11,7 +11,7 @@ misconceptions in supported Jupyter notebooks. Its released Subject Packs cover
entity leakage and class imbalance/metric choice; it is not a generic notebook
copilot or an unrestricted code runner.
-**Live judge surface:**
+**Live judge surface:**
The v6.1 learner UX is implemented locally on
`feat/learner-ux-v6.1`; it has not been pushed, deployed, or browser-qualified.
@@ -274,10 +274,10 @@ The current measured artifact is
- random accuracy 0.984722, group accuracy 0.594444, ablation accuracy 0.673611;
- group entity overlap 0;
- canonical result hash
- `2501654264b9aa85b39fca944e585ff9b04263b83e182bc186d1f16464fee3b0`;
-- 12/12 published critical mutations detected;
+ `a6ae7652e04e4d70196f991c63b8f7bcb3b76f8c4ab833d3ce2b626df0ab6c94`;
+- 14/14 published leakage critical mutations detected;
- class-imbalance majority accuracy 0.989333 with 0 rare-class recall, and
- 12/12 imbalance mutations detected;
+ 15/15 published imbalance mutations detected;
- held-out intake/routing 10/10 and fixed full-loop completion 7/8; the
Random Forest patch is explicitly outside the registered non-sample patch
contract;
From 1aefd208ecbf3a05c1708d1b3242864a2ae837e8 Mon Sep 17 00:00:00 2001
From: Abhyudaya Baiju Tharakan <22f3001492@ds.study.iitm.ac.in>
Date: Tue, 21 Jul 2026 10:17:06 +0530
Subject: [PATCH 072/143] docs(submission): align fields demo and screenshot
evidence
---
docs/DEMO_CAPTIONS.vtt | 4 ++--
docs/DEMO_SCRIPT.md | 31 +++++++++++++++-------------
docs/DEVPOST_COPY.md | 31 +++++++++++++++++-----------
docs/SCREENSHOT_PLAN.md | 45 ++++++++++++++++++++++++++++++++++++++---
4 files changed, 80 insertions(+), 31 deletions(-)
diff --git a/docs/DEMO_CAPTIONS.vtt b/docs/DEMO_CAPTIONS.vtt
index 80315b52..24026779 100644
--- a/docs/DEMO_CAPTIONS.vtt
+++ b/docs/DEMO_CAPTIONS.vtt
@@ -7,10 +7,10 @@ CounterLab is for ML learners and instructors. This fixed sample changes one var
CounterLab begins with the Question. It treats notebook evidence as untrusted data, never runs a cell, and sends no raw rows, notebook file, or local path.
00:27.000 --> 00:43.000
-GPT-5.6 proposes these competing explanations from only the approved sanitized packet. It cannot run the notebook or decide the result. The learner seals an immutable Prediction before any experimental value appears.
+GPT-5.6 proposes these competing explanations from only the approved sanitized packet. It cannot run the notebook or decide the result. The learner seals an immutable Prediction before any experimental value appears in this live session.
00:43.000 --> 00:58.000
-Runtime Codex proposes only bounded operation IDs. The fixed scorer selects the test, and the frozen verifier decides whether the fixed kernel may release evidence.
+Runtime Codex composes registered operation IDs into bounded plans. The fixed scorer selects the test, and the frozen verifier decides whether the fixed kernel may release evidence.
00:58.000 --> 01:18.000
The numbers come from the fixed kernel. GPT-5.6 and Codex may explain or propose, but neither computes or verifies them.
diff --git a/docs/DEMO_SCRIPT.md b/docs/DEMO_SCRIPT.md
index 909da168..1952f556 100644
--- a/docs/DEMO_SCRIPT.md
+++ b/docs/DEMO_SCRIPT.md
@@ -1,10 +1,12 @@
# 2:45 demo voiceover and shot list
-Record **Live notebook analysis** only after the exact source has passed the
-Container smoke. A bundled sample is frozen, not a substitute live run. Keep
-**Verified replay** open as a disclosed backup and never present it as a new
-model call. Use [DEMO_CAPTIONS.vtt](DEMO_CAPTIONS.vtt) word for word so the
-spoken roles, on-screen labels, and captions agree.
+Record **Live notebook analysis** only after the exact source commit, runner
+image digest, Worker version, deployment ID, qualification receipt, and
+release-check receipt agree and that deployed tuple passes production smoke. A
+bundled sample is frozen, not a substitute live run. Keep **Verified replay**
+open as a disclosed backup and never present it as a new model call. Use
+[DEMO_CAPTIONS.vtt](DEMO_CAPTIONS.vtt) word for word so the spoken roles,
+on-screen labels, and captions agree.
## 0:00–0:12 — The belief break
@@ -28,7 +30,7 @@ weight. Confirm that the first captures the learner's meaning. Choose “Remain
near 98%,” set confidence, and seal it. Say: “GPT-5.6 proposes these competing
explanations from only the approved sanitized packet. It cannot run the
notebook or decide the result. The learner seals an immutable Prediction before
-any experimental value appears.”
+any experimental value appears in this live session.”
## 0:43–0:58 — Runtime Codex and Fair Test Builder
@@ -36,9 +38,9 @@ Show what changes, what stays fixed, and why whole-customer holdout matches
deployment. If this exact live compile is genuinely rejected and repaired, show
the learner-language explanation and optionally open Evidence & proof for the
sanitized counterexample. If it passes first try, say so. Never stage a failure.
-Say: “Runtime Codex proposes only bounded operation IDs. The fixed scorer
-selects the test, and the frozen verifier decides whether the fixed kernel may
-release evidence.”
+Say: “Runtime Codex composes registered operation IDs into bounded plans. The
+fixed scorer selects the test, and the frozen verifier decides whether the
+fixed kernel may release evidence.”
## 0:58–1:18 — Experiment Theater
@@ -74,11 +76,12 @@ transfer passes, and CounterLab patches only a copy.”
## 2:10–2:30 — Completion and proof
-Show: “You completed one verified entity-leakage loop: this fixed task separated
-performance on familiar rows from performance on new entities. It does not
-establish mastery.” Then open Evidence & proof for the Reasoning Diff and Proof
-Capsule. Say: “The Reasoning Diff is for the learner. The Proof Capsule binds
-the machine-readable evidence, versions, limitations, and event chain.”
+Show: “You completed one verified entity-leakage loop.” Then show “good on
+familiar rows” was compared with “performance on new entities in this fixed
+task,” followed by “Fixed transfer task passed” and the one-task/no-mastery
+limitation. Open Evidence & proof for the Reasoning Diff and Proof Capsule.
+Say: “The Reasoning Diff is for the learner. The Proof Capsule binds the
+machine-readable evidence, versions, limitations, and event chain.”
## 2:30–2:45 — Build truth and close
diff --git a/docs/DEVPOST_COPY.md b/docs/DEVPOST_COPY.md
index 7a23e9bc..00372542 100644
--- a/docs/DEVPOST_COPY.md
+++ b/docs/DEVPOST_COPY.md
@@ -15,13 +15,16 @@ Ask like chat. Prove it like science.
## Submission fields
- **Category:** Education
+- **Submitter type:** **PENDING** owner confirmation in the official form
+- **Country:** **PENDING** owner confirmation in the official form
- **Primary audience:** ML learners and instructors who need to test what a
notebook result actually supports
- **Live judge URL:**
- **License:** MIT
-- **Repository URL:** **PENDING** anonymous-access verification; do not paste a
- private or 404 URL
-- **Public video URL:** **PENDING** capture from the final qualified release
+- **Repository URL:** ;
+ **PENDING** anonymous-access verification
+- **Public YouTube video URL:** **PENDING** capture from the final qualified
+ release
- **Codex `/feedback` Session ID:** **PENDING** owner-supplied primary build
thread ID
- **Exact release receipt:** **PENDING** final source/Container/Worker
@@ -79,8 +82,9 @@ learner-first, source-bound release candidate:
- immutable Prediction, evidence story, Model Duel, Fair Test Builder,
Experiment Theater, Boundary Hunt, visual transfer, Repair preview, and
bounded completion;
-- a ten-second Judge preview bound to checked-in fixed sample evidence and a
- one-click integrity-verified Sample Proof Capsule;
+- an automated ten-second first-viewport inspectability preview bound to
+ checked-in fixed sample evidence and a one-click integrity-verified Sample
+ Proof Capsule; this is not a learner-comprehension measurement;
- recoverable reject/insufficient-evidence paths, supported-artifact gating,
pre-Prediction result-leak regressions, stored proof-event hydration, and
capability-link lifecycle handling;
@@ -189,10 +193,11 @@ claim should be copied into the submission until a measured study exists.
1. Open and confirm the public
build identifier matches the exact production receipt linked by the final
release evidence.
-2. Choose **Start sample** for the credential-free six-stage learner loop. In
- Boundary, make one classification or reveal/skip the map before Apply unlocks.
-3. Choose **Watch verified replay** to inspect the persistent read-only label and
- genuine reject/repair history without a new model call.
+2. Choose **Open disclosed walkthrough** for the credential-free six-stage
+ learner loop. In Boundary, make one classification or reveal/skip the map
+ before Apply unlocks.
+3. Choose **Watch replay** to inspect the persistent read-only label and genuine
+ reject/repair history without a new model call.
4. Choose **Run live** only when Judge Mode reports deployed live authority.
Upload a supported notebook, approve the exact outbound packet, and follow
reconnect, transfer, repaired-copy download, and Proof Capsule export.
@@ -200,9 +205,11 @@ claim should be copied into the submission until a measured study exists.
schema-v7 deployment receipt for the exact commit, Worker version, Container
digest, asset hashes, and smoke outcomes. If those identifiers do not agree,
treat live qualification as not proven.
-6. Run the repository-contained verification commands documented in `README.md`
- for local reproduction. Historical replay evidence remains visibly distinct
- from the exact deployed release.
+6. Use the [MIT-licensed CounterLab repository](https://github.com/ALikesToCode/CounterLab)
+ and run the repository-contained verification commands documented in
+ `README.md` for local reproduction. Historical replay evidence remains
+ visibly distinct from the exact deployed release. If anonymous repository
+ access is not verified, omit these instructions from the submitted entry.
## Submission consistency rule
diff --git a/docs/SCREENSHOT_PLAN.md b/docs/SCREENSHOT_PLAN.md
index 685df6ad..a7fa7569 100644
--- a/docs/SCREENSHOT_PLAN.md
+++ b/docs/SCREENSHOT_PLAN.md
@@ -1,13 +1,52 @@
# Screenshot plan
-Status: planned, not captured for the v6.1 local pass. The required
-`CLOAK_CDP_ENDPOINT` was unavailable, and stock Chromium is forbidden. Do not
-reuse historical screenshots as evidence of this source tree.
+Status: planned, not captured for the final release. The required
+`CLOAK_CDP_ENDPOINT` is unavailable. Stock Chromium may produce explicitly
+labelled design-review artifacts, but it cannot qualify or supply the final
+submission images. Do not reuse historical screenshots as evidence of the
+frozen release.
Capture the current commit through CloakBrowser at 1440 × 900 and 390 × 844.
Add a 1280 × 720 overflow check even if it is not a submission image. Use real
product state and omit browser chrome where the submission permits.
+## Curated Devpost package
+
+Create exactly four primary assets plus one thumbnail from the same qualified
+public tuple:
+
+1. `01-judge-belief-break-1440x900.png` — the primary Judge image: learner
+ claim, persistent Fixed sample label, one changed evaluation unit, held
+ controls, 98.5% familiar rows, 59.4% unseen customers, Boundary consequence,
+ and learner benefit in the first viewport.
+2. `02-live-prediction-and-authority-1440x900.png` — supported live notebook
+ evidence, approved privacy packet, equal-weight models, sealed Prediction,
+ and truthful GPT-5.6/Codex/kernel/verifier provenance. Capture only after a
+ genuine live call and exact release binding.
+3. `03-theater-boundary-1440x900.png` — pinned Prediction, one verified result,
+ controlled variables, Boundary Hunt/full-map handoff, non-colour symbols,
+ and the exact-value table.
+4. `04-transfer-repair-proof-1440x900.png` — deterministic transfer outcome,
+ minimal repair preview, copied-notebook download, Reasoning Diff, and Proof
+ Capsule action.
+5. `thumbnail-judge-belief-break.png` — a legible crop derived from asset 1;
+ do not introduce different values, claims, or release identity.
+
+Store final images under
+`docs/submission-assets//`. Beside every PNG, write a
+same-basename JSON sidecar containing: source commit, runner image digest,
+Worker version, deployment ID, deployment receipt hash, public URL and route,
+viewport, capture timestamp, browser authority, PNG SHA-256, console errors,
+and failed requests. A missing or mismatched field keeps the asset out of the
+submission.
+
+Capture desktop and mobile variants for qualification even when only the five
+curated files are uploaded. The 390 × 844 Judge capture must prove that the
+claim, comparison, Boundary consequence, and learner benefit remain visible
+without horizontal overflow.
+
+## Audit coverage matrix
+
1. **Question-first landing** — “What result are you trying to understand?”,
the claim field, notebook attachment, sample prompt chips, support sentence,
and secondary Judge Mode action. Do not reveal a result above the fold.
From 62cf3c95d1d783327bec548e879ddc11664b3e8f Mon Sep 17 00:00:00 2001
From: Abhyudaya Baiju Tharakan <22f3001492@ds.study.iitm.ac.in>
Date: Tue, 21 Jul 2026 10:18:50 +0530
Subject: [PATCH 073/143] docs(progress): record deterministic and submission
gates
---
docs/PROGRESS.md | 89 ++++++++++++++++++++++++++++++++++++++++++++++++
1 file changed, 89 insertions(+)
diff --git a/docs/PROGRESS.md b/docs/PROGRESS.md
index 654960f5..065b9aa2 100644
--- a/docs/PROGRESS.md
+++ b/docs/PROGRESS.md
@@ -3698,3 +3698,92 @@ release qualification.
- This closes the local stock-browser regression gate only. It does not close
the exact-public, hosted-live, CloakBrowser, real screen-reader, deployment,
or submission gates.
+
+## Deterministic gate and submission checkpoint — 2026-07-21T04:47:19Z
+
+Deadline: `2026-07-22T00:00:00Z`; **19 hours 12 minutes 41 seconds remained at
+this checkpoint**. The feature branch is at committed HEAD
+`1aefd208ecbf3a05c1708d1b3242864a2ae837e8`. The only worktree entry besides
+this progress update is the preserved, unstaged FUSE tombstone.
+
+### Completed and committed
+
+- `9229c8e style(tests): normalize scientific UI fixtures` repairs the only two
+ repository-wide Prettier drifts without behavior changes; focused tests pass
+ **25/25** for the scientific candidate and **9/9** for the trusted renderer.
+- `6a92e06 docs(readme): reconcile judge link and evidence` points the Judge URL
+ to `/judge` and aligns the published kernel hash and mutation counts with
+ `docs/ACHIEVED_METRICS.json`.
+- `1aefd20 docs(submission): align fields demo and screenshot evidence` adds the
+ missing administrative placeholders, current Judge controls, public YouTube
+ field, repository/license rule, exact-tuple video gate, precise Runtime Codex
+ role, current completion shot, synchronized captions, and a four-image plus
+ thumbnail package with per-asset provenance sidecars.
+
+### Current exact deterministic results
+
+- Complete local Playwright matrix: **35 passed, 5 exact-public/live skips,
+ 0 failed** across **40 tests in 3 files**.
+- Web Vitest: **79 files, 622/622 passed**.
+- Root Vitest: **70 files, 716 passed, 3 failed, 2 skipped**. All three failures
+ are the documented stale scientific-release bindings; no other test failed.
+- Kernel and runner Pytest: **304/304 passed**. Release tooling Pytest:
+ **27/27 passed**.
+- Repository, web client, Worker, and E2E strict TypeScript: **passed**. Worker
+ runtime types regenerated successfully through Wrangler 4.110.0.
+- Production build: **passed**. Main client **447.43 kB / 128.75 kB gzip**,
+ CSS **200.63 kB / 34.69 kB gzip**, Worker
+ **1,863.39 kB / 359.59 kB gzip**.
+- Critical mutations: leakage **14/14**, imbalance **19/19**. Tracked achieved
+ metrics check passed for its published **14/14** and **15/15** benchmark
+ scopes.
+- Held-out intake/routing **10/10**; fixed full-loop completion **7/8**; tracked
+ evidence matched. Patch replay passed with zero group overlap.
+- Sample Boundary and Sample Proof Capsule deterministic checks: **passed**.
+ Contract schemas and release-capability manifest regenerated with no drift.
+- Repository secret scan: **passed across 1,450 files**. Built client/Worker
+ secret scan: **passed across 31 files**. Repository-wide Prettier and Git
+ whitespace: **passed**.
+- Independent P0/P1 source re-audit: **13 focused files, 359/359 tests passed**.
+
+### Explicit red and blocked gates
+
+- Scientific binding check remains red across 10 generated binding files;
+ registry verification reports 14 stale source/vulnerability findings after
+ current source changes. These must be regenerated once from the frozen exact
+ image; no test or hash was weakened.
+- Contained Wrangler `whoami --json` returned `{"loggedIn":false}`. No
+ repository-contained Cloudflare token or account ID is present. Global home
+ login state is outside the permitted filesystem boundary and was not read.
+- The real aggregate-cgroup sentinel remains constitutionally blocked because
+ its required `/sys/fs/cgroup` and owned `/proc//stat` reads are outside
+ the repository-only boundary. The preserved FUSE entry also keeps the main
+ physical worktree unclean.
+- CloakBrowser remains unavailable; qualifying exact-public and real hosted-live
+ journeys remain unexecuted. Learner impact remains `NO_DATA`.
+
+### Ordered work left
+
+1. Finish the two remaining locally actionable source gaps: render named
+ verified Sample proof details from validated Capsule fields (`MB-005`) and
+ add a concise learner-audience/differentiation sentence to Landing
+ (`MB-014`), with focused tests and separate commits.
+2. Add a fail-closed submission-package metadata validator and mark the old
+ submission-readiness audit clearly historical. Verify anonymous repository
+ access without claiming it prematurely.
+3. Resolve repository-contained Wrangler authentication and the clean-source /
+ real-sentinel authority blockers.
+4. Freeze exact source `S`; build one runner image; execute genuine containment
+ and negative controls; regenerate SBOM, VEX, scientific evidence, Sample
+ Capsule, and evidence commit `E`; then rerun the complete release gate.
+5. Deploy only the qualified source/image tuple. Record exact Worker version,
+ deployment ID, Container digest, migrations, public identity, and complete
+ sample/replay/live production smoke.
+6. Run every public desktop/mobile, accessibility, reconnect, download,
+ console/network, and Web Vitals journey through CloakBrowser. Capture the
+ five provenance-bound submission assets from that exact tuple.
+7. Keep learner evidence `NO_DATA` unless consented observations occur; obtain
+ the public video, `/feedback` ID, Devpost slug and `submitted_at`, and verify
+ every link logged out.
+8. Push and verify the feature branch, then fast-forward-only merge and push
+ `main` after every ship gate above is factual. No push or merge has occurred.
From e4f723b78e397e6b5d1012dc9993c15c68b463dc Mon Sep 17 00:00:00 2001
From: Abhyudaya Baiju Tharakan <22f3001492@ds.study.iitm.ac.in>
Date: Tue, 21 Jul 2026 10:23:48 +0530
Subject: [PATCH 074/143] feat(learner): clarify landing audience and method
---
apps/web/e2e/judged-flow.spec.ts | 4 ++++
apps/web/src/App.test.tsx | 5 +++++
apps/web/src/App.tsx | 4 +++-
3 files changed, 12 insertions(+), 1 deletion(-)
diff --git a/apps/web/e2e/judged-flow.spec.ts b/apps/web/e2e/judged-flow.spec.ts
index d063e16f..ecab0fbf 100644
--- a/apps/web/e2e/judged-flow.spec.ts
+++ b/apps/web/e2e/judged-flow.spec.ts
@@ -1349,6 +1349,9 @@ for (const viewport of beliefBreakViewports) {
const artifactSafetySummary = page.getByText(
/Ask a question or attach a supported notebook.*never runs its cells/i,
);
+ const audienceDifference = page.getByText(
+ /Built for ML learners: seal a Prediction, then let one controlled test answer—not AI prose/i,
+ );
const composer = page.getByLabel("Your question or claim");
const submit = page.getByRole("button", { name: /Test this claim/i });
const promptStarters = page.getByRole("group", {
@@ -1361,6 +1364,7 @@ for (const viewport of beliefBreakViewports) {
[
heading,
artifactSafetySummary,
+ audienceDifference,
composer,
submit,
promptStarters,
diff --git a/apps/web/src/App.test.tsx b/apps/web/src/App.test.tsx
index 81090245..d5ca14e3 100644
--- a/apps/web/src/App.test.tsx
+++ b/apps/web/src/App.test.tsx
@@ -1112,6 +1112,11 @@ describe("CounterLab judged flow", () => {
/ask a question or attach a supported notebook.*reads the evidence and never runs its cells/i,
),
).toBeInTheDocument();
+ expect(
+ screen.getByText(
+ /built for ml learners: seal a prediction, then let one controlled test answer—not ai prose/i,
+ ),
+ ).toBeInTheDocument();
expect(
screen.getByRole("link", { name: /skip to main content/i }),
).toHaveAttribute("href", "#main-content");
diff --git a/apps/web/src/App.tsx b/apps/web/src/App.tsx
index 90df385d..808af02c 100644
--- a/apps/web/src/App.tsx
+++ b/apps/web/src/App.tsx
@@ -1105,7 +1105,9 @@ function Landing({
+ Fair-test preview + Result locked until Prediction +
++ Familiar rows + + + change who counts as new + + Unseen customers +
++ + Same model, features, preprocessing, sample size, metric, and seed. +
+receipt v5 + deterministic full gate
NOT RUN"] J["Cloudflare deployment
maintenance + D1 + Container + Worker
NOT RUN"] K["Public identity and smoke
deployment receipt v7 + /ready + health + live loops
NOT RUN"] - L["CloakBrowser qualification
40 journeys + manual accessibility/performance matrix
0 rendered journeys"] + L["Browser qualification
local stock 35 pass / 5 public-live skips
public CloakBrowser: 0 journeys"] M["Submission package
public app + repo + video + feedback + honest NO_DATA
EXTERNALLY UNVERIFIED"] N["Git publication
push feature -> verify remote -> fast-forward main -> push main
NOT RUN"] @@ -68,7 +74,7 @@ flowchart TD | Release check | Clean `E`, qualified receipt, exact local images and runtime | Release-check receipt v5 after formatting, tests, mutations, held-out, sandbox, scientific, build, reproduction, patch replay, and secret gates | **Not run** | Any failure blocks deployment | | Cloudflare deployment | Qualified receipt, release-check receipt, registry image, required secrets, recovery target, working CloakBrowser endpoint | Exact maintenance/final Worker versions, D1 migration log, exact Container digest, deployment receipt v7 | **Not run** | Stop before mutation when preflight is red; after mutation, automated Worker recovery does not reverse D1 or Container state | | Public identity and smoke | Active exact Worker/Container tuple | `/ready`, `/api/health?readiness=probe`, Worker 100% traffic, Container identity, public asset scan, Sample, Replay, leakage and imbalance live evidence, Capsule/replay evidence | **Not run** | Source, image, Worker, client, receipt, or capability mismatch is a release failure | -| CloakBrowser | Exact public tuple and injected `CLOAK_CDP_ENDPOINT` | All 40 current tests plus responsive, keyboard, screen-reader, 200% zoom, reduced-motion, console/network, downloads, reconnect, and Web Vitals evidence | **40 statically collected; 0 rendered** | Stock Chromium is design-review evidence only and cannot close this gate | +| CloakBrowser | Exact public tuple and injected `CLOAK_CDP_ENDPOINT` | All 40 current tests plus responsive, keyboard, screen-reader, 200% zoom, reduced-motion, console/network, downloads, reconnect, and Web Vitals evidence | Local stock design review: **35 passed, 5 public/live skips, 0 failed**; public CloakBrowser: **0 journeys** | Stock Chromium is design-review evidence only and cannot close this gate | | Devpost and impact | Qualified public tuple, public repo/video/feedback links, factual copy | Logged-out link audit, public video from exact tuple, Devpost receipt, real consented learner aggregates or explicit `NO_DATA` | **Externally unverified; learner evidence remains `NO_DATA`** | Never infer a submission or learner result | | Push and merge | Every ship gate factual and final source reviewed | Verified feature remote tip, fast-forward-only `main`, verified main remote tip | **Not run** | Do not push or merge a `NO-GO` release | @@ -86,7 +92,7 @@ flowchart LR subgraph Verification["Pre-release verification"] T1["Vitest + TypeScript"] T2["Pytest + cross-runtime parity"] - T3["Playwright source + static collection"] + T3["Playwright source + local stock matrix"] Q1["Independent review"] end @@ -147,8 +153,10 @@ Reported verification for the integrated aggregate slice is: - complete runner Pytest with both required source roots: **82/82 passed**; - repository, web client, generated Worker, and Worker TypeScript: **passed**; - E2E strict TypeScript: **passed**; -- Playwright static collection: **40 tests in 3 files**, with no browser - launched; +- Complete local stock-browser matrix: **40 tests in 3 files**, **35 passed, + 5 intentionally skipped, 0 failed in 2.7 minutes**. The public replay, + public asset, and real hosted-runner cases remain deferred to the exact + release tuple; - scoped Prettier, Python compilation, Node syntax, Git whitespace, and secret scans: **passed**; - independent runtime integration review: **GO** after the implementation From 9229c8ef4447063f8f6eea717da970e633c36d7e Mon Sep 17 00:00:00 2001 From: Abhyudaya Baiju Tharakan <22f3001492@ds.study.iitm.ac.in> Date: Tue, 21 Jul 2026 10:08:05 +0530 Subject: [PATCH 070/143] style(tests): normalize scientific UI fixtures --- .../TrustedLabSceneRenderer.test.tsx | 18 ++++++++---------- .../src/scientific-candidate-v5.test.ts | 3 ++- 2 files changed, 10 insertions(+), 11 deletions(-) diff --git a/apps/web/src/components/generative-ui/TrustedLabSceneRenderer.test.tsx b/apps/web/src/components/generative-ui/TrustedLabSceneRenderer.test.tsx index 7aea5009..91e2af99 100644 --- a/apps/web/src/components/generative-ui/TrustedLabSceneRenderer.test.tsx +++ b/apps/web/src/components/generative-ui/TrustedLabSceneRenderer.test.tsx @@ -222,16 +222,14 @@ describe("TrustedLabSceneRenderer", () => {
Ask a question or attach a supported notebook. CounterLab reads - the evidence and never runs its cells. + the evidence and never runs its cells. Built for ML learners: + seal a Prediction, then let one controlled test answer—not AI + prose.
Validated plan
++ Registered run identifiers from the session's validated Proof + Bundle. +
+-
+ {operationIds.map((operationId) => (
+
-
+
{operationId}+
+ ))}
+
-
+
- Generated adapter SHA-256 +
-
+
{proofBundle.generatedAdapter.sha256}+
+ - Recorded source commit +
-
+
{proofBundle.generatedAdapter.commitHash}+
+
+
+
+
+ + Plan verifier: {proofBundle.planVerification.status} ·{" "} + {proofBundle.planVerification.invariantCount} invariants +
+ )} +Verified patch
++ Changed notebook cells:{" "} + {proofBundle.patchResult.modifiedCells.join(", ")} +
++ Patch verification: {proofBundle.patchResult.status} ·{" "} + {proofBundle.patchResult.verification.invariants.length} named + invariants +
+
+ {proofBundle.patchResult.diff}
+
+ Public tests
++ {proofBundle.publicTests.passed} passed ·{" "} + {proofBundle.publicTests.failed} failed +
+-
+
- Public test report SHA-256 +
-
+
{proofBundle.publicTests.reportHash}+
+
+
+ External verifier · {proofBundle.externalVerifier.status}
+Accepted named invariants
+-
+ {proofBundle.externalVerifier.verifiedInvariants.map(
+ (invariant) => (
+
-
+
{invariant}+
+ ),
+ )}
+
+ Mutation probes recorded:{" "} + {proofBundle.externalVerifier.mutations.length} +
+-
+
- External verifier report SHA-256 +
-
+
{proofBundle.externalVerifier.reportHash}+
+
+
+ Verifier reports
+ {reports.map(([label, report]) => ( ++ {label} · {report.status} +
+-
+ {report.invariants.map((invariant) => (
+
-
+
{invariant.name}·{" "} + {invariant.passed ? "passed" : "rejected"} +
+ ))}
+
-
- Reproduce locally
-The demo has commands, not hand-waving.
+Source & license
+Source reproduction is gated.
- {`./scripts/test-all.sh\n./scripts/run-mutations.sh leakage\n./scripts/reproduce-session.sh leakage-01\n./scripts/replay-patch.sh leakage-01`}
-
+ + Local reproduction commands are withheld until the repository and MIT + License are anonymously accessible. CounterLab will not present + unactionable source instructions as public evidence. +