founder-ship-it/Slipmark · Proof record #83
Every verdict matched the files.
Where it came fromsigned by GitHub
- Repository
- founder-ship-it/Slipmark
- Commit
- 18395bfd5b45b691b8ed7de57259ff7ee81d1d0b
- Pull request
- #18
- Workflow
- Slipmark · pull_request
- Run
- 40222728052
Ledger entryLedger intact · 96 entries
- Entry
- #83 of 96
- Entry hash
- 22fd3fb7ee814a6fb764fb0d91290e6514edafc6223f5feb1b30977349549076
- Previous hash
- 96c6cf441ac29ba33bd0374c4220628ef7ebdbeeff8288b23405ee2683199093
Each entry's hash covers this run's verdicts and the previous entry's hash. The whole chain is recomputed every time this page is built: changing any past record would break it here.
Organisation rules Not met
Rules set by the repository owner, checked against the files this change touched.
| Rule | Result | Files it covered | Missing a passing verdict |
|---|---|---|---|
| Gate code and its spec need a reviewer pass | Not met | docs/attestation.md, src/attest/attestation.ts, src/attest/context.ts, src/attest/githubRender.ts, src/attest/markdownSubset.ts, src/attest/markdownWorker.ts | src/attest/context.ts, src/attest/githubRender.ts, src/attest/markdownSubset.ts, src/attest/markdownWorker.ts |
| Payments code needs a security review | Met | none changed |
Gate results
What CI found when it re-hashed each attested file at commit 18395bf. Slipmark Cloud then read GitHub's own copy of the commit, re-hashed every attested file itself and got the same answer.
| Result | File | Agent | Verdict | Detail |
|---|---|---|---|---|
| Verified | docs/attestation.md | reviewer | pass | reviewer verified docs/attestation.md |
| Verified | src/attest/attestation.ts | reviewer | pass | reviewer verified src/attest/attestation.ts |
| Verified | src/attest/signing.ts | reviewer | pass | reviewer verified src/attest/signing.ts |
Verdicts as the agents recorded them
The attestation files in the repository at this commit.
reviewer · pass.slipmark/attestations/reviewer--docs_attestation.md.json
- Read
- docs/attestation.md 37e910537001430cc329cbc6b8f09e281bfc0a1eeec33f0bd73b7a4eeec410b4
- Note
- Agent context section matches the code: three layers, the $ rule, renderer limits and uncovered gaps listed
- Attested
- 25 Oct 2026, 18:44 UTC
reviewer · pass.slipmark/attestations/reviewer--src_attest_attestation.ts.json
- Read
- src/attest/attestation.ts 4b2c1051aabe473da14bd7958edf5be0348b2b401118d214a29df2cb5d69ddaa
- Note
- Final review: every $ line refused (code included); maskCode bypasses closed; href/emoji counting, renderer fail-closed paths and stall limits verified; 186 tests pass
- Attested
- 25 Oct 2026, 18:44 UTC
reviewer · pass.slipmark/attestations/reviewer--src_attest_signing.ts.json
- Read
- src/attest/signing.ts aeefb8706f106dc0ddfcea6b6f3bba1dff9a49c4c572ab8a0b9113803578ae42
- Note
- Signing docs still match: canonical payload minus signature, which covers acknowledgedHidden; acknowledgements count only when signed by approverSigners
- Attested
- 25 Oct 2026, 18:44 UTC
What this proves: these verdicts were recorded by founder-ship-it/Slipmark's own workflow at this commit, and the files above either matched or did not. It does not prove a verdict was right, only what it was about.