MergeGate BASE-SEPOLIA
← Receipt
FAIL 906e9c8c6c…162d14

Sealed evaluation run

The buyer's base tree, the buyer's grader bundle, and the provider's diff. Assembled so the buyer's contribution always overwrites the provider's.

Stages

  1. āœ“
    Materialize the pinned base tree
    git archive emits tree contents only, so .git never exists to leak a reference solution.
  2. āœ—
    Guard every touched path
    contract evaluated FAIL: .github/workflows/deploy.yml modifies a contract-protected path (pattern: .github/**)
  3. 3
    Apply the provider diff not run
    Allowed source paths only, as explicit file changes.
  4. 4
    Inject the buyer grader bundle not run
    Overwrites whatever the provider left at the grader paths.
  5. 5
    Run the pinned commands not run
    Not reached: the violation decided the verdict first.

Path guard

.github/workflows/deploy.yml modifies a contract-protected path (pattern: .github/**)

protected_path

Decided before any command ran. Passing tests could not have rescued it: a submission that disables the deploy gate has routed around the contract, not satisfied it.

Tamper signals

None recorded.

Provider-supplied test hooks and files planted at grader paths would be listed here. Their absence is itself part of the record.

Pinned commands

Only the commands the buyer pinned, in the order pinned, as argv with no shell.

No commands executed.

The contract-term violation decided the verdict first.

Verification identity

What was graded, by which tests, in which environment. These are the values the receipt binds.

base sha
3476768e6dff4d7a39c3ae3fef2f188ab6ffddb8
submission sha
906e9c8c6c94b58fa297b4b1c340ffaaed162d14
tree hash
grader hash
sha256:83018d118089f7a1a267f815dccde1933e92fff615e70d00c8a6b31dd5e2a7a6
verifier image
us-central1-docker.pkg.dev/quick-catcher-470218-b0/mergegate/verifier@sha256:2e81501ef459f2a520c0ac08c5fd51962af2290c666d2374681e9619cc015b0a
result digest
sha256:b3ce3ae23a1168e3bdb0f2f57e8c255cfa3d384735f522010ed22c72c18aa7c2
egress: deny-tcp-egress; dns-resolution-available .git stripped