separate DeltaWire v4 measurement evidence

Author: bigboateng

.github/workflows/deltawire-preflight-v4.yml

@@ -0,0 +1,28 @@
+name: Verify DeltaWire preflight v4
+
+on:
+  push:
+    branches: [eval/deltawire-preflight-v4]
+  pull_request:
+    paths:
+      - "labs/20-deltawire/**"
+      - ".github/workflows/deltawire-preflight-v4.yml"
+
+permissions:
+  contents: read
+
+jobs:
+  validate-v4:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+        with:
+          fetch-depth: 0
+      - uses: actions/setup-go@v7
+        with:
+          go-version-file: labs/20-deltawire/go.mod
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.11"
+      - run: bash labs/20-deltawire/scripts/validate.sh
+      - run: bash labs/20-deltawire/eval/scripts/v4/validate.sh

labs/20-deltawire/eval/manifests/preflight-v3-evidence-lock.json

@@ -0,0 +1,72 @@
+{
+  "immutable_files": {
+    "labs/20-deltawire/eval/manifests/preflight-v2-evidence-lock.json": "dfaa4350681a36bcadef1e00d52bd90e16b2cf72638928ba2d0bc42b7af8f1b8",
+    "labs/20-deltawire/eval/manifests/preflight-v3-range-large.json": "bc219bbabbc8765a036b873313bed7aed62ffdcee0da570c703b64130d278a29",
+    "labs/20-deltawire/eval/matrices/72-run-matrix.json": "f9dcddc4b7336418c7e2b8e7a7e51ca1e42b5a137255ff0823a732618f3568d5",
+    "labs/20-deltawire/eval/probes/range-large-v3/authoritative-schema.json": "2fe7bdc8de996a09ccc651f42611dc88faee60c7390b36c62443ed3e523800b5",
+    "labs/20-deltawire/eval/probes/range-large-v3/environment/.deltawire/config.json": "673b9cf053e3ba2263bfbc49034360ed8dba8d959bd167f8ff4b1f7cb4302b6f",
+    "labs/20-deltawire/eval/probes/range-large-v3/environment/.deltawire/schemas/range-large.schema.json": "2fe7bdc8de996a09ccc651f42611dc88faee60c7390b36c62443ed3e523800b5",
+    "labs/20-deltawire/eval/probes/range-large-v3/environment/Dockerfile": "0d4281bcb20ed360a4815c6170b1bd3fa65beaf51942d7203809b075ca4d3ead",
+    "labs/20-deltawire/eval/probes/range-large-v3/environment/task-contract.json": "d3e1b7b3e5a4576540b3a2969d59f49818c7c0a12197b26d271e7e277b0054e5",
+    "labs/20-deltawire/eval/probes/range-large-v3/environment/verify_plan_contract.py": "8aafe73ab47213027a258f9abbebbca4803fa53f658abeb7b405d4a79202d4af",
+    "labs/20-deltawire/eval/probes/range-large-v3/instruction.md": "2c1086bd55056b63c89bbb359fdb7a32168ce6c9598d02d6c084a52ad46e9af9",
+    "labs/20-deltawire/eval/probes/range-large-v3/task-spec.json": "d3e1b7b3e5a4576540b3a2969d59f49818c7c0a12197b26d271e7e277b0054e5",
+    "labs/20-deltawire/eval/probes/range-large-v3/task.toml": "854a1379edee3d090dfe85265753bcd045d192ccbd21e71a2003ac037436a49a",
+    "labs/20-deltawire/eval/probes/range-large-v3/tests/semantic_oracle.py": "94b30fac117f40e977851966b5228e6c372bb48cbf2e5c29c24f428e1f98e91d",
+    "labs/20-deltawire/eval/probes/range-large-v3/tests/task-spec.json": "d3e1b7b3e5a4576540b3a2969d59f49818c7c0a12197b26d271e7e277b0054e5",
+    "labs/20-deltawire/eval/probes/range-large-v3/tests/test.sh": "8fc106530f63500be0aace428a5dbf3e08567feb2adc40968029cb7d7a95afbc",
+    "labs/20-deltawire/eval/results/preflight-v3/index.json": "cab7fd3dffdf486d77b6ad7a144025d5c0b0bbd0708e823c9cf0c0261d6dfbe0",
+    "labs/20-deltawire/eval/results/preflight-v3/readiness.json": "26ae7263a63c96d6565131080c1b95dfe92b954b31c408003cdd9cf5d9bb9875",
+    "labs/20-deltawire/eval/results/preflight-v3/treatment-probe-range-large-v3/D1-derived-assessment.json": "a802fc15372556197d3e274aff8e308c0208b396bdf11bb3656a6a360b384172",
+    "labs/20-deltawire/eval/results/preflight-v3/treatment-probe-range-large-v3/D1-plan-contract-receipt.json": "dcf531cd8e86207a951aa9e43e80d45d7a9f8df5e3baa224feafbc2de3dd6fa0",
+    "labs/20-deltawire/eval/results/preflight-v3/treatment-probe-range-large-v3/D1-semantic-result.json": "3e80260f930364f1b72255ed9898862e641536a8c6e84a75e9a4cbea3d1b46bb",
+    "labs/20-deltawire/eval/results/preflight-v3/treatment-probe-range-large-v3/D1-treatment-fidelity.json": "394054b28824efc34eb26cad91c135b10933657cf6c8ec788c19b219b15cb5ad",
+    "labs/20-deltawire/eval/results/preflight-v3/treatment-probe-range-large-v3/raw/D1/2026-07-22__12-00-56/config.json": "e8c95ea651adc99ac412322e2e08b735ef002fdab283a1e9c2a2f968698fd60c",
+    "labs/20-deltawire/eval/results/preflight-v3/treatment-probe-range-large-v3/raw/D1/2026-07-22__12-00-56/job.log": "689ee87a1b8ced2b1c159103d7a329c91b889c1e971637a428ee0847ba03412b",
+    "labs/20-deltawire/eval/results/preflight-v3/treatment-probe-range-large-v3/raw/D1/2026-07-22__12-00-56/lock.json": "4fdb9e97b806a06eb7a952310e25329e9dd30b768392ce4062903b83f8e4a048",
+    "labs/20-deltawire/eval/results/preflight-v3/treatment-probe-range-large-v3/raw/D1/2026-07-22__12-00-56/range-large-v3__wx2HCht/agent/gemini-cli.trajectory.jsonl": "069cfca7ba46baf5757e809de50e53a656973f5b0a0fbe597a1cf763dce4cd27",
+    "labs/20-deltawire/eval/results/preflight-v3/treatment-probe-range-large-v3/raw/D1/2026-07-22__12-00-56/range-large-v3__wx2HCht/agent/gemini-cli.txt": "54f08f9e9112fe5b46cb1f17fa6866496b58293f07d3b65a96ce82d0b6eb38f6",
+    "labs/20-deltawire/eval/results/preflight-v3/treatment-probe-range-large-v3/raw/D1/2026-07-22__12-00-56/range-large-v3__wx2HCht/agent/trajectory.json": "6ddaaa2b6b582fd56f600a29bf78fb6bf74d1bf39d2bb668c0b00793fa2e0a68",
+    "labs/20-deltawire/eval/results/preflight-v3/treatment-probe-range-large-v3/raw/D1/2026-07-22__12-00-56/range-large-v3__wx2HCht/artifacts/.deltawire/config.json": "673b9cf053e3ba2263bfbc49034360ed8dba8d959bd167f8ff4b1f7cb4302b6f",
+    "labs/20-deltawire/eval/results/preflight-v3/treatment-probe-range-large-v3/raw/D1/2026-07-22__12-00-56/range-large-v3__wx2HCht/artifacts/.deltawire/plan-contract-receipt.json": "dcf531cd8e86207a951aa9e43e80d45d7a9f8df5e3baa224feafbc2de3dd6fa0",
+    "labs/20-deltawire/eval/results/preflight-v3/treatment-probe-range-large-v3/raw/D1/2026-07-22__12-00-56/range-large-v3__wx2HCht/artifacts/.deltawire/plans/range-large.dw.json": "2021238a6573d8cf11477fb1d2656b9586b84415335edf69be4ff8fc74ef3a77",
+    "labs/20-deltawire/eval/results/preflight-v3/treatment-probe-range-large-v3/raw/D1/2026-07-22__12-00-56/range-large-v3__wx2HCht/artifacts/.deltawire/schemas/range-large.schema.json": "2fe7bdc8de996a09ccc651f42611dc88faee60c7390b36c62443ed3e523800b5",
+    "labs/20-deltawire/eval/results/preflight-v3/treatment-probe-range-large-v3/raw/D1/2026-07-22__12-00-56/range-large-v3__wx2HCht/artifacts/manifest.json": "639ca0ff42307921ded25177e8d0343df7be9621011c7235f6593835f78a4188",
+    "labs/20-deltawire/eval/results/preflight-v3/treatment-probe-range-large-v3/raw/D1/2026-07-22__12-00-56/range-large-v3__wx2HCht/artifacts/testdata/generated/output.ndjson": "9d205b57ab166d23c81927899f99b6ccece261c679c96979c58fbde975637776",
+    "labs/20-deltawire/eval/results/preflight-v3/treatment-probe-range-large-v3/raw/D1/2026-07-22__12-00-56/range-large-v3__wx2HCht/config.json": "c6d8111f06134293971b16d7690b5f81b5a43c4d8356c04bd650fdb29a1f4a3c",
+    "labs/20-deltawire/eval/results/preflight-v3/treatment-probe-range-large-v3/raw/D1/2026-07-22__12-00-56/range-large-v3__wx2HCht/lock.json": "66447eea0f175e275254a4f87ed377b6409328860335b917a2a390bd74e47a16",
+    "labs/20-deltawire/eval/results/preflight-v3/treatment-probe-range-large-v3/raw/D1/2026-07-22__12-00-56/range-large-v3__wx2HCht/result.json": "e787ad6ecf1f83810124e0d9e0e1a63d829bbd6d587d2b5d9586735ecf89c068",
+    "labs/20-deltawire/eval/results/preflight-v3/treatment-probe-range-large-v3/raw/D1/2026-07-22__12-00-56/range-large-v3__wx2HCht/trial.log": "689ee87a1b8ced2b1c159103d7a329c91b889c1e971637a428ee0847ba03412b",
+    "labs/20-deltawire/eval/results/preflight-v3/treatment-probe-range-large-v3/raw/D1/2026-07-22__12-00-56/range-large-v3__wx2HCht/verifier/reward.json": "36a492513204040f04d7bdf4146d84ede71353d8cc7df112fc3ebff66327683a",
+    "labs/20-deltawire/eval/results/preflight-v3/treatment-probe-range-large-v3/raw/D1/2026-07-22__12-00-56/range-large-v3__wx2HCht/verifier/test-stdout.txt": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "labs/20-deltawire/eval/results/preflight-v3/treatment-probe-range-large-v3/raw/D1/2026-07-22__12-00-56/result.json": "27356b5f2bee385d3d9ee465dbef77a518c10d76e7348deb99578eb395a1d7a3",
+    "labs/20-deltawire/eval/results/preflight-v3/treatment-probe-range-large-v3/redaction.json": "afd1361d1db4b96aae9fbfdc972d80c67aa9d490567417bc47ed68bff29a62ca",
+    "labs/20-deltawire/eval/results/preflight-v3/treatment-probe-range-large-v3/report.md": "b3cae2d8e3239d4667eb36dcd1c658fc1def98c4031fa6a6d252af8a3df65b41",
+    "labs/20-deltawire/eval/results/preflight-v3/treatment-probe-range-large-v3/run-ledger.json": "3bcdc70b82afdfcf6b2200cba7042032d6f24abbf55dc7f148438d2e4234d99e",
+    "labs/20-deltawire/eval/scripts/fidelity.py": "f5bd8c7bf1ae7f3d99f681f1c2edf9ffb3a7bface84e28fc96a9f2ec2bffd350",
+    "labs/20-deltawire/eval/scripts/generate_preflight_v3_manifest.py": "a3b79335eac24626fddeb91b874151d42996ef9accfb40b72407c16c28f00515",
+    "labs/20-deltawire/eval/scripts/runner.py": "ba28350a7546a7284834aed702a5934585b50cc4534a519c09332a1e28e17825",
+    "labs/20-deltawire/eval/scripts/semantic_oracle.py": "94b30fac117f40e977851966b5228e6c372bb48cbf2e5c29c24f428e1f98e91d",
+    "labs/20-deltawire/eval/scripts/task_contracts.py": "e72514979104f539d431fec7f400d2067a45c0d0814bc054bc937ff113c1fee2",
+    "labs/20-deltawire/eval/scripts/test_fidelity.py": "90708e8f2c29b53fc2c5b6a3e2f3738ba179f96c2503e257445c3ff2fdf6bab3",
+    "labs/20-deltawire/eval/scripts/test_runner_gates.py": "9c070d68893782362548b281eeccb4bdb6110a75624dee63a18b1e48948d278b",
+    "labs/20-deltawire/eval/scripts/validate_preflight.py": "3220c8ecd8fb5139871fa7b93a64497efbea5c8ae57280a207184168f44ff159",
+    "labs/20-deltawire/eval/scripts/verify_plan_contract.py": "8aafe73ab47213027a258f9abbebbca4803fa53f658abeb7b405d4a79202d4af",
+    "labs/20-deltawire/eval/skills/deltawire/SKILL.md": "b1c5ed8e1abd0bf4e2031d887657bbfbc79204eed5c9d48a97fa1fbf50c5695f",
+    "labs/20-deltawire/eval/tasks/range-large/authoritative-schema.json": "2fe7bdc8de996a09ccc651f42611dc88faee60c7390b36c62443ed3e523800b5",
+    "labs/20-deltawire/eval/tasks/range-large/environment/.deltawire/config.json": "673b9cf053e3ba2263bfbc49034360ed8dba8d959bd167f8ff4b1f7cb4302b6f",
+    "labs/20-deltawire/eval/tasks/range-large/environment/.deltawire/schemas/range-large.schema.json": "2fe7bdc8de996a09ccc651f42611dc88faee60c7390b36c62443ed3e523800b5",
+    "labs/20-deltawire/eval/tasks/range-large/environment/Dockerfile": "0d4281bcb20ed360a4815c6170b1bd3fa65beaf51942d7203809b075ca4d3ead",
+    "labs/20-deltawire/eval/tasks/range-large/environment/task-contract.json": "d3e1b7b3e5a4576540b3a2969d59f49818c7c0a12197b26d271e7e277b0054e5",
+    "labs/20-deltawire/eval/tasks/range-large/environment/verify_plan_contract.py": "8aafe73ab47213027a258f9abbebbca4803fa53f658abeb7b405d4a79202d4af",
+    "labs/20-deltawire/eval/tasks/range-large/instruction.md": "549f4047b1a4ba4f7a3f3dce9e60d1d70b141caa189aafdba942b15e6d022aee",
+    "labs/20-deltawire/eval/tasks/range-large/task-spec.json": "d3e1b7b3e5a4576540b3a2969d59f49818c7c0a12197b26d271e7e277b0054e5",
+    "labs/20-deltawire/eval/tasks/range-large/task.toml": "b7d4eff84bfbab08d514e1f39b58cdaaa1e925f4b28e09ec1e160041a45ef6b8",
+    "labs/20-deltawire/eval/tasks/range-large/tests/semantic_oracle.py": "94b30fac117f40e977851966b5228e6c372bb48cbf2e5c29c24f428e1f98e91d",
+    "labs/20-deltawire/eval/tasks/range-large/tests/task-spec.json": "d3e1b7b3e5a4576540b3a2969d59f49818c7c0a12197b26d271e7e277b0054e5",
+    "labs/20-deltawire/eval/tasks/range-large/tests/test.sh": "8fc106530f63500be0aace428a5dbf3e08567feb2adc40968029cb7d7a95afbc"
+  },
+  "schema_version": "git-evidence-lock.v1",
+  "source_commit": "07e341fd213b6deb17cce9115263cebe8ba2105f",
+  "source_tree": "cfad619db42d4426e464836d0e2be2de8384ddac"
+}

labs/20-deltawire/eval/probes/range-large-v4/authoritative-schema.json

@@ -0,0 +1,16 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "properties": {
+    "index": {
+      "maximum": 500,
+      "minimum": 1,
+      "type": "integer"
+    }
+  },
+  "required": [
+    "index"
+  ],
+  "title": "range-large",
+  "type": "object"
+}

labs/20-deltawire/eval/probes/range-large-v4/environment/.deltawire/config.json

@@ -0,0 +1,12 @@
+{
+  "limits": {
+    "max_output_bytes": 104857600,
+    "max_plan_bytes": 1048576,
+    "max_records": 100000,
+    "max_schema_bytes": 1048576
+  },
+  "plans_dir": ".deltawire/plans",
+  "schemas_dir": ".deltawire/schemas",
+  "state_file": ".deltawire/state.json",
+  "version": "deltawire.config.v1"
+}

labs/20-deltawire/eval/probes/range-large-v4/environment/.deltawire/schemas/range-large.schema.json

@@ -0,0 +1,16 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "additionalProperties": false,
+  "properties": {
+    "index": {
+      "maximum": 500,
+      "minimum": 1,
+      "type": "integer"
+    }
+  },
+  "required": [
+    "index"
+  ],
+  "title": "range-large",
+  "type": "object"
+}

labs/20-deltawire/eval/probes/range-large-v4/environment/Dockerfile

@@ -0,0 +1,10 @@
+FROM ubuntu:22.04
+COPY .generated/deltawire /usr/local/bin/deltawire
+COPY task-contract.json /task-contract.json
+COPY .deltawire /.deltawire
+COPY verify_plan_contract.py /usr/local/bin/verify_plan_contract.py
+COPY environment_receipt.py /usr/local/bin/environment_receipt.py
+COPY deltawire-environment-expectations.json /deltawire-environment-expectations.json
+RUN chmod 0755 /usr/local/bin/deltawire /usr/local/bin/verify_plan_contract.py /usr/local/bin/environment_receipt.py && chmod a-w /task-contract.json /.deltawire/config.json /.deltawire/schemas/*.json /deltawire-environment-expectations.json
+RUN command -v deltawire && deltawire version
+RUN apt-get update && apt-get install -y python3

labs/20-deltawire/eval/probes/range-large-v4/environment/deltawire-environment-expectations.json

@@ -0,0 +1,14 @@
+{
+  "schema_version": "deltawire-environment-expectations.v1",
+  "binary": {
+    "path": "/usr/local/bin/deltawire",
+    "realpath": "/usr/local/bin/deltawire",
+    "sha256": "453819efd1afe30b7e1815507de67b3150374955970a77231ce89a7a738c33c6",
+    "version": "deltawire version dev"
+  },
+  "files": {
+    "config": {"path": "/.deltawire/config.json", "sha256": "673b9cf053e3ba2263bfbc49034360ed8dba8d959bd167f8ff4b1f7cb4302b6f"},
+    "schema": {"path": "/.deltawire/schemas/range-large.schema.json", "sha256": "2fe7bdc8de996a09ccc651f42611dc88faee60c7390b36c62443ed3e523800b5"},
+    "public_contract": {"path": "/task-contract.json", "sha256": "d3e1b7b3e5a4576540b3a2969d59f49818c7c0a12197b26d271e7e277b0054e5"}
+  }
+}

labs/20-deltawire/eval/probes/range-large-v4/environment/environment_receipt.py

@@ -0,0 +1,36 @@
+#!/usr/bin/env python3
+"""Generate deterministic DeltaWire infrastructure evidence inside the task."""
+import argparse,hashlib,json,os,stat,subprocess
+from pathlib import Path
+
+def sha(path):
+ h=hashlib.sha256()
+ with Path(path).open("rb") as f:
+  for chunk in iter(lambda:f.read(1048576),b""): h.update(chunk)
+ return h.hexdigest()
+def main():
+ p=argparse.ArgumentParser(); p.add_argument("--expectations",required=True); p.add_argument("--receipt",required=True); a=p.parse_args()
+ expected=json.loads(Path(a.expectations).read_text()); binary=Path(expected["binary"]["path"])
+ exists=binary.exists(); lst=binary.lstat() if exists else None
+ is_regular=bool(lst and stat.S_ISREG(lst.st_mode)); is_symlink=binary.is_symlink() if exists else False
+ executable=exists and os.access(binary,os.X_OK); realpath=str(binary.resolve()) if exists else None
+ try: version=subprocess.run([str(binary),"version"],capture_output=True,text=True,check=False) if exists else None
+ except OSError: version=None
+ files={}
+ for name,item in expected["files"].items():
+  path=Path(item["path"]); actual=sha(path) if path.is_file() else None
+  files[name]={"path":item["path"],"exists":path.is_file(),"actual_sha256":actual,"expected_sha256":item["sha256"],"hash_match":actual==item["sha256"]}
+ binary_hash=sha(binary) if is_regular else None
+ checks={
+  "binary_exists":exists,"binary_regular":is_regular,"binary_not_symlink":not is_symlink,
+  "binary_executable":executable,"binary_path":str(binary)==expected["binary"]["path"],
+  "binary_realpath":realpath==expected["binary"]["realpath"],
+  "binary_hash":binary_hash==expected["binary"]["sha256"],
+  "version_exit_0":bool(version and version.returncode==0),
+  "version_exact":bool(version and version.stdout.splitlines() and version.stdout.splitlines()[0].strip()==expected["binary"]["version"]),
+  **{f"{name}_hash":item["hash_match"] for name,item in files.items()},
+ }
+ receipt={"schema_version":"deltawire-environment-receipt.v1","binary":{"path":str(binary),"realpath":realpath,"exists":exists,"is_regular":is_regular,"is_symlink":is_symlink,"executable":executable,"actual_sha256":binary_hash,"expected_sha256":expected["binary"]["sha256"],"version_stdout":version.stdout.strip() if version else None,"version_stderr":version.stderr.strip() if version else None,"version_exit_code":version.returncode if version else None,"expected_version":expected["binary"]["version"]},"files":files,"checks":checks,"status":"pass" if all(checks.values()) else "fail"}
+ target=Path(a.receipt); target.parent.mkdir(parents=True,exist_ok=True); target.write_text(json.dumps(receipt,indent=2,sort_keys=True)+"\n")
+ print(json.dumps(receipt,sort_keys=True)); raise SystemExit(0 if receipt["status"]=="pass" else 1)
+if __name__=="__main__": main()

labs/20-deltawire/eval/probes/range-large-v4/environment/task-contract.json

@@ -0,0 +1,24 @@
+{
+  "authoritative_schema": {
+    "path": ".deltawire/schemas/range-large.schema.json",
+    "sha256": "2fe7bdc8de996a09ccc651f42611dc88faee60c7390b36c62443ed3e523800b5"
+  },
+  "deltawire_applicability": "expected",
+  "family": "range",
+  "generation": {
+    "field": "index",
+    "field_order": [
+      "index"
+    ],
+    "start": 1
+  },
+  "ordering": "canonical_generation_order",
+  "output": {
+    "format": "ndjson",
+    "path": "testdata/generated/output.ndjson"
+  },
+  "record_count": 500,
+  "schema_version": "task-spec.v1",
+  "size": "large",
+  "task": "range-large"
+}

labs/20-deltawire/eval/probes/range-large-v4/environment/verify_plan_contract.py

@@ -0,0 +1,28 @@
+#!/usr/bin/env python3
+import argparse, hashlib, json, subprocess
+from pathlib import Path
+
+def sha(path): return hashlib.sha256(Path(path).read_bytes()).hexdigest()
+def write(path, value):
+    if path:
+        target=Path(path); target.parent.mkdir(parents=True,exist_ok=True); target.write_text(json.dumps(value,indent=2,sort_keys=True)+"\n")
+
+def main():
+    p=argparse.ArgumentParser(); p.add_argument("--contract",required=True); p.add_argument("--plan",required=True); p.add_argument("--repo",default="."); p.add_argument("--receipt"); p.add_argument("--deltawire",default="deltawire"); a=p.parse_args()
+    repo=Path(a.repo).resolve(); contract_path=Path(a.contract).resolve(); plan=Path(a.plan).resolve(); contract=json.loads(contract_path.read_text())
+    try: plan_arg=str(plan.relative_to(repo))
+    except ValueError: plan_arg=str(plan)
+    result={"schema_version":"plan-contract-receipt.v1","contract_sha256":sha(contract_path),"plan_sha256":sha(plan),"checks":{},"status":"fail"}
+    try:
+        run=subprocess.run([a.deltawire,"inspect","--repo",str(repo),"--format","json",plan_arg],capture_output=True,text=True)
+        result["inspect_exit_code"]=run.returncode
+        if run.returncode: result["error"]=run.stderr.strip() or run.stdout.strip()
+        else:
+            inspected=json.loads(run.stdout); schema=contract["authoritative_schema"]; schema_path=repo/schema["path"]
+            checks={"output_path":inspected.get("output_path")==contract["output"]["path"],"output_format":inspected.get("output_format")==contract["output"]["format"],"projected_records":inspected.get("projected_records")==contract["record_count"],"schema_path":inspected.get("schema_path")==schema["path"],"schema_exists":schema_path.is_file(),"schema_sha256":schema_path.is_file() and sha(schema_path)==schema["sha256"],"exact_count_assertion":str(contract["record_count"]) in json.dumps(inspected.get("assertion_summary",{}))}
+            result.update({"checks":checks,"inspect":inspected,"status":"pass" if all(checks.values()) else "fail"})
+    except (OSError,ValueError,KeyError) as error: result["error"]=str(error)
+    write(a.receipt,result)
+    if result["status"]!="pass": raise SystemExit(1)
+    print(json.dumps(result,sort_keys=True))
+if __name__=="__main__": main()