MergeGate BASE
← Receipt
PASS e83964b7b6…d210ff

Sealed evaluation run

The buyer's base tree, the buyer's grader bundle, and the provider's diff. Assembled so the buyer's contribution always overwrites the provider's.

Stages

  1. Materialize the pinned base tree
    git archive emits tree contents only, so .git never exists to leak a reference solution.
  2. Guard every touched path
    No protected or grader path was touched.
  3. Apply the provider diff
    Allowed source paths only, as explicit file changes.
  4. Inject the buyer grader bundle
    Overwrites whatever the provider left at the grader paths.
  5. Run the pinned commands
    1 command(s) executed.

Path guard

No path violations.

Every path the submission touched fell inside the allowed source paths. Protected and grader paths were untouched.

Tamper signals

None recorded.

Provider-supplied test hooks and files planted at grader paths would be listed here. Their absence is itself part of the record.

Pinned commands

Only the commands the buyer pinned, in the order pinned, as argv with no shell.

$ /Users/heartlinmachado/Projects/mergegate/.venv/bin/python -m pytest -q exit 0
stdout digest sha256:cf78f3a04…b700fd
stderr digest sha256:553c3b994…0b6ce6

Output is bound by digest, not content. Test output can be large and contains whatever the provider's code printed, so the receipt commits to a digest instead of carrying attacker-controlled text.

Verification identity

What was graded, by which tests, in which environment. These are the values the receipt binds.

base sha
3476768e6dff4d7a39c3ae3fef2f188ab6ffddb8
submission sha
e83964b7b61edcd1eae5c425c0eacd6e0dd210ff
tree hash
sha256:c54eba00d2f07293d568f73f81870af675d29f05f42abf63063cd842c4d1ac35
grader hash
sha256:83018d118089f7a1a267f815dccde1933e92fff615e70d00c8a6b31dd5e2a7a6
verifier image
us-central1-docker.pkg.dev/quick-catcher-470218-b0/mergegate/verifier@sha256:2e81501ef459f2a520c0ac08c5fd51962af2290c666d2374681e9619cc015b0a
result digest
sha256:3578a0726f8ac83efe6e0a139c0db882dee4c043c222afbe86bfa2518c31cd51
egress: deny-tcp-egress; dns-resolution-available .git present