Sealed evaluation run
The buyer's base tree, the buyer's grader bundle, and the provider's diff. Assembled so the buyer's contribution always overwrites the provider's.
Stages
-
✓
Materialize the pinned base treegit archive emits tree contents only, so .git never exists to leak a reference solution.
-
✓
Guard every touched pathNo protected or grader path was touched.
-
✓
Apply the provider diffAllowed source paths only, as explicit file changes.
-
✓
Inject the buyer grader bundleOverwrites whatever the provider left at the grader paths.
-
✓
Run the pinned commands1 command(s) executed.
Path guard
No path violations.
Every path the submission touched fell inside the allowed source paths. Protected and grader paths were untouched.
Tamper signals
None recorded.
Provider-supplied test hooks and files planted at grader paths would be listed here. Their absence is itself part of the record.
Pinned commands
Only the commands the buyer pinned, in the order pinned, as argv with no shell.
Output is bound by digest, not content. Test output can be large and contains whatever the provider's code printed, so the receipt commits to a digest instead of carrying attacker-controlled text.
Verification identity
What was graded, by which tests, in which environment. These are the values the receipt binds.