MergeGate BASE
← Receipt
FAIL e6bd8ffbc5…f55e97

Sealed evaluation run

The buyer's base tree, the buyer's grader bundle, and the provider's diff. Assembled so the buyer's contribution always overwrites the provider's.

Stages

  1. Materialize the pinned base tree
    git archive emits tree contents only, so .git never exists to leak a reference solution.
  2. Guard every touched path
    contract evaluated FAIL: .github/workflows/deploy.yml modifies a contract-protected path (pattern: .github/**)
  3. 3
    Apply the provider diff not run
    Allowed source paths only, as explicit file changes.
  4. 4
    Inject the buyer grader bundle not run
    Overwrites whatever the provider left at the grader paths.
  5. 5
    Run the pinned commands not run
    Not reached: the violation decided the verdict first.

Path guard

.github/workflows/deploy.yml modifies a contract-protected path (pattern: .github/**)

protected_path

Decided before any command ran. Passing tests could not have rescued it: a submission that disables the deploy gate has routed around the contract, not satisfied it.

Tamper signals

None recorded.

Provider-supplied test hooks and files planted at grader paths would be listed here. Their absence is itself part of the record.

Pinned commands

Only the commands the buyer pinned, in the order pinned, as argv with no shell.

No commands executed.

The contract-term violation decided the verdict first.

Verification identity

What was graded, by which tests, in which environment. These are the values the receipt binds.

base sha
fe18707595a05f934ff8c643617a94a1ea54efda
submission sha
e6bd8ffbc565bcf4abdd438bd4c7d7d56ff55e97
tree hash
grader hash
sha256:83018d118089f7a1a267f815dccde1933e92fff615e70d00c8a6b31dd5e2a7a6
verifier image
us-central1-docker.pkg.dev/quick-catcher-470218-b0/mergegate/verifier@sha256:c1e9fe76ba1783e90bcadd47f580b0ac39a76be5cd0d748b87c833bb432ad905
result digest
sha256:a684f8232746874e184d2287d79cd7bde51cf831ee7fb47eb3e7f085f12e9e7c
egress: deny-tcp-egress-except-google-restricted-vip-199.36.153.4/30; dns-resolution-available .git stripped
Advisory: Gemini no effect on settlement

Code security screening

Ran before the sandbox. Did not gate it.

90 / 100 · HIGH
Modified protected path: .github/workflows/deploy.yml
Attempted modification of CI/CD workflow configuration

The submission contains modifications to a file within a protected path, specifically `.github/workflows/deploy.yml`. This action directly violates the contract terms that specify `.github/**` as protected. Altering CI/CD workflow configurations, even if seemingly to empty them, represents a significant integrity and security risk as it could disable or bypass critical automation. The changes to `src/calc.py` appear to be a functional bug fix that aligns with the described grader expectations and do not introduce any security concerns, supply chain risks, or test gaming. However, the breach of protected paths is a severe finding.

Failure forensics

Written after the refund. Did not cause a re-run.

retry likelihood: HIGH
Root cause

Your submission failed because it attempted to modify a contract-protected file. The task's terms clearly state that files within the '.github/' directory (pattern: .github/**) are protected and cannot be altered. Your submission included changes to '.github/workflows/deploy.yml', which falls under this protected path, leading to the immediate rejection of your submission before any tests were executed. Passing tests would not have rescued it, as the failure was a contract violation.

Suggested change

To resolve this, ensure that your submission does not introduce any changes to files located within the '.github/' directory. Specifically, revert all modifications to '.github/workflows/deploy.yml' and ensure that no files matching the '.github/**' pattern are altered in your submission.

Produced by gemini-2.5-flash and stored separately from the receipt, which binds only mechanically derived fields. Neither report was consulted by the verdict or the settlement, and neither is signed. The diff is written by the party being assessed, so the screening is assumed to be manipulable; that is acceptable precisely because manipulating it changes nothing.