@vela-science/canopus 0.6.1 → 0.6.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/BUILD_WEEK.md CHANGED
@@ -23,12 +23,34 @@ p.m. Toronto time.
23
23
  | Sidon frontier | `5f138a51a6c8723d5a85ff0ffc265728c2c33c6e` | A root-bound GPT-5.6 target, a new 7,194-point witness, frozen verification, Receipt, Defer proposal, and replayable final commit |
24
24
  | Vela Observatory | `37eca05ae3bc1e2f2832ed99c58ba9fdc4bd1787` | A pinned public-run type, retained-run detail route, and stable anonymous `/build-week` evidence page |
25
25
 
26
- Canopus versions `0.1.0` through `0.6.1` were built during the submission
26
+ Canopus versions `0.1.0` through `0.6.2` were built during the submission
27
27
  period. Version `0.4.6` added the successful GPT-5.6 Sidon profile and secure
28
28
  workspace-backed artifact retention. Versions `0.5` and `0.6` then hardened
29
29
  retry-safe Vela composition, stage-typed run evidence, proposal-scoped replay,
30
30
  and a local-only sanitized publication bundle. None adds an acceptance path.
31
31
 
32
+ ## Dated Build Week ledger
33
+
34
+ All dates below are Toronto time. Tags identify released product bytes; later
35
+ documentation commits do not rewrite those release or evidence identities.
36
+
37
+ | Date | Repository and immutable ref | Build Week addition |
38
+ | --- | --- | --- |
39
+ | July 15 | Canopus first commit `9d95924f27842ceb14a45bb0ecaf5a777c3b2736` | Introduced the bounded research harness; no Canopus repository existed at the competition baseline. |
40
+ | July 16 | Canopus `v0.1.0` at `0c0e59bf025b93faca8e8078b098b5aee9c67078` | Bound exact missions, worker custody, artifact freezing, verifier separation, and released-Vela composition. |
41
+ | July 16 | Canopus `v0.2.0` at `ab01e6b4eebebb64cd3403962e1104d4b2d43bbb` | Shipped the authority-free mission loop with retained success and failure evidence. |
42
+ | July 17 | Canopus `v0.3.0` at `a25c97c4b92c6248d1f827ead6ab9522084728b8` | Added the installable `doctor`, `run`, `inspect`, `replay`, and `withdraw` product surface. |
43
+ | July 19 | Canopus `v0.4.3` at `f461a0d184f2076c4b451e524e5e949abdee621e` | Published the provenance-backed npm path and repaired clean-install usability. |
44
+ | July 20 | Sidon frontier result commit `4289e05876f142e72af622672e190be26f6a6f1d` | Retained the GPT-5.6-produced 7,194-point witness, verifier pass, Receipt, Defer proposal, and accepted delta zero. |
45
+ | July 20 | Canopus `v0.4.6` at `ad72a7aca63aaa6c060f840020cca6871e4a9f11` | Added the successful GPT-5.6 Sidon profile and bounded workspace-backed artifact handoff. |
46
+ | July 20 | Canopus `v0.5.0` at `25523ccb558f81db95c01b48b83616ed3ab05b35` | Added stage-typed run evidence and retry-safe Vela composition without adding an authority path. |
47
+ | July 20 | Sidon independent-audit commit `825657d7e87618c0aa6fc9af7e3182e05f324750` | Added a separate base-3 verifier and a deterministic collision-injection rejection probe. |
48
+ | July 21 | Canopus `v0.6.1` at `b98c846d61d4c554e43388107bcce77c51307db5` | Updated the released Vela and package identities; its packed judge path remained the generic canonical-witness check and is superseded by `v0.6.2`. |
49
+ | July 21 | Canopus `v0.6.2` at `43c1aa97165bd9c7e9b2dcbd232155f42ca8410c` | Shipped the exact pending-artifact and independent-verifier judge path, dated evidence ledger, caveat reconciliation, and third-party notice in the provenance-backed package. |
50
+ | July 21 | Vela `v0.912.0` at `bb6774b6a65ecc5615e17ddf574c3efd893e0e44` | Bound the final Build Week composition while leaving Receipt, policy, replay, and human-authority semantics intact. |
51
+ | July 21 | Observatory `v0.340.6` at `7483ab20c0d2878f3d50a76ed1bca9969f7dd5f5` | Deployed the anonymous run detail and `/build-week` route with an exact evidence manifest. |
52
+ | July 21 | Canopus documentation at `4cae162bc37538e9ff1add0ef42861804ff86a62` | Corrected the public commands to select and reproduce the pending witness rather than only retained canonical witnesses. |
53
+
32
54
  ## Primary GPT-5.6 scientific result
33
55
 
34
56
  ### What is new
@@ -83,6 +105,14 @@ The generated sanitized projection is
83
105
  It contains no raw worker events, isolated home, authentication, private path,
84
106
  or unrestricted log.
85
107
 
108
+ The immutable `0.4.6` Receipt preserves the worker's pre-verifier handoff
109
+ caveat that separate verification remained pending, alongside the rooted final
110
+ verifier evidence. We do not rewrite that historical record. Canopus fixed
111
+ post-verifier caveat finalization in commit
112
+ `58aad1e5806e7f3c192214e65f8968e03e2cff87` and shipped it from `0.5.1`
113
+ onward; the public projection derives standing caveats from the final run
114
+ observations and therefore reports the recorded verifier pass.
115
+
86
116
  ## Secondary evidence
87
117
 
88
118
  The earlier retained Erdős 1056 run remains a useful bounded-research example:
@@ -100,23 +130,34 @@ The formal profile `formal-erdos-505-test-dim-one-gpt56` supplies the public
100
130
  fail-closed counterexample. Run
101
131
  `run_4c2ba5f5-04ac-44d5-adb6-8937eb2ea165` produced a candidate, but the
102
132
  frozen Lean verifier rejected an unsolved inverse goal and `sorryAx`. Canopus
103
- stopped before Receipt creation or frontier mutation.
133
+ stopped before Receipt creation or frontier mutation. The rejected verifier
134
+ result is bound at
135
+ `sha256:04e31b07889f94a1d205231942bf30fa6c3b27864520b6a42de58604da53e544`.
104
136
 
105
137
  ## Reproduce without rebuilding Canopus
106
138
 
107
- The primary state transition needs released Vela and the public frontier:
139
+ The pending primary artifact needs the provenance-checked prebuilt
140
+ [Vela 0.912.0 release](https://github.com/vela-science/vela/releases/tag/v0.912.0)
141
+ and the public frontier. The audit commit adds an independent implementation
142
+ without changing the retained Receipt, proposal, or accepted state:
108
143
 
109
144
  ```bash
110
145
  git clone https://github.com/vela-science/sidon-frontier.git
111
146
  cd sidon-frontier
112
- git checkout 4289e05876f142e72af622672e190be26f6a6f1d
113
- vela reproduce .
147
+ git checkout 825657d7e87618c0aa6fc9af7e3182e05f324750
148
+ vela reproduce artifacts/sidon-a24-gpt56-7194.witness.json
149
+ node verification/verify-sidon-a24-7194.mjs \
150
+ artifacts/sidon-a24-gpt56-7194.witness.json
114
151
  ```
115
152
 
153
+ `vela reproduce .` remains the whole-frontier canonical-witness check, but it
154
+ must not be presented as verification of this still-pending proposal. The
155
+ artifact-specific command above is the exact pending-result path.
156
+
116
157
  Inspect the packaged product under Node 22 or 24:
117
158
 
118
159
  ```bash
119
- npm install --global @vela-science/canopus@0.6.1
160
+ npm install --global @vela-science/canopus@0.6.2
120
161
  canopus --version
121
162
  canopus profile validate sidon-a24-at-least-7194-gpt56-v3
122
163
  ```
@@ -148,3 +189,10 @@ Session ID is kept in the submission checklist, not this repository.
148
189
  - The retained Erdős 1056 result covers one finite range and does not solve Erdős 1056.
149
190
  - The rejected formal candidate does not prove the one-dimensional theorem or Erdős 505.
150
191
  - Vela predates Build Week. The submission is Canopus and its Build Week additions, not the whole ecosystem.
192
+
193
+ ## Licensing and third-party boundary
194
+
195
+ Canopus is dual-licensed Apache-2.0 OR MIT. Its runtime npm dependency set is
196
+ empty. Bundled verifier capsules and separately supplied development or host
197
+ tools are documented in [`THIRD_PARTY.md`](THIRD_PARTY.md); those tools do not
198
+ receive scientific decision authority through Canopus.
package/CHANGELOG.md CHANGED
@@ -1,5 +1,59 @@
1
1
  # Changelog
2
2
 
3
+ ## 0.6.3 - 2026-07-24
4
+
5
+ - Restore exact composition with released Vela `0.914.1` after Canopus
6
+ `0.6.2` correctly refused the newer binary at its version boundary. The
7
+ maintenance release preserves an exact legacy signature without
8
+ authenticating it, fixing the false Erdős repository-boundary blocker while
9
+ retaining all historical strict debt.
10
+ - Advance the current native-worker boundary to Codex CLI `0.145.0` and pin
11
+ the exact Linux archive and binary digests used by CI. Immutable missions
12
+ continue to require their own recorded Codex versions and hashes.
13
+ - Preserve the compact status, offer, Receipt, Defer, replay, and zero-authority
14
+ contracts through the released-binary integration test.
15
+ - Report Vela's current `scientific_state_root` directly from `canopus doctor`
16
+ instead of preserving the retired, ambiguous `snapshot_root` label.
17
+ - Replace the brittle list of individual Vela 0.9 patch versions with one
18
+ bounded compact-status compatibility rule. Historical missions still require
19
+ their exact recorded binary and digest.
20
+ - Advance the sole runnable Erdős 1056 profile to the adjacent, non-overlapping
21
+ range `10428601..10428800`; the completed `10428401..10428600` capsule remains
22
+ reproducible from Canopus `0.6.2` and its immutable run evidence.
23
+ - Raise the bounded Vela control-command ceiling from 30 to 120 seconds after
24
+ the real Erdős `vela work` transaction required 38.6 seconds. The original
25
+ timeout left only a recoverable `Prepared` journal in a disposable clone and
26
+ made no canonical-frontier change.
27
+ - Pin the active mission to account-compatible `gpt-5.4`. The attempted
28
+ `gpt-5.6` request was rejected by Codex before inference because ChatGPT
29
+ account authentication does not expose that model; it produced no research
30
+ artifact or frontier publication.
31
+ - Preserve the first `gpt-5.4` run as a stopped non-authoritative result after
32
+ provider-reported usage exceeded its 100,000-token postcondition: 136,448
33
+ input tokens, including 100,352 cached input tokens, plus 3,442 output
34
+ tokens. Register one distinct retry with no prior candidate or search hint,
35
+ one attempt, and a 160,000-token postcondition that remains below the
36
+ original 187,013-token Erdős run.
37
+ - Complete the separately registered retry in 72,454 observed tokens. The
38
+ frozen verifier independently confirms the exhaustive negative result over
39
+ `10428601..10428800`; Vela lands Receipt
40
+ `sha256:7400662ed6493aa6dc49a31c0d2ea1099a5380a272914b13325aaf088ba58b57`
41
+ as proposal `vpr_a845ae60ed695b93` through Defer with accepted-event delta
42
+ zero, and clean-clone reproduction matches.
43
+ - Publish only the sanitized, read-only run projection at
44
+ `evidence/erdos/run_192b3bef-9d6e-49e5-b72d-7ae903b29d5e`; the raw worker
45
+ directory, credentials, and unrestricted logs remain outside the package.
46
+
47
+ ## 0.6.2 - 2026-07-21
48
+
49
+ - Ship the exact pending Sidon artifact reproduction command and independent
50
+ base-3 verifier command in the provenance-backed package instead of the
51
+ whole-frontier canonical-witness check previously published by `0.6.1`.
52
+ - Package the dated Build Week ledger, immutable Receipt caveat reconciliation,
53
+ and third-party component notice used by the final judge path.
54
+ - Add release-contract coverage for those public instructions and files. No
55
+ runtime, protocol, Receipt, policy, or authority behavior changes.
56
+
3
57
  ## 0.6.1 - 2026-07-21
4
58
 
5
59
  - Correct the public Build Week record and judge quickstart to name the
package/README.md CHANGED
@@ -15,7 +15,7 @@
15
15
  </p>
16
16
 
17
17
  <p align="center">
18
- <a href="https://app.vela.space/build-week">Live evidence</a> ·
18
+ <a href="https://app.vela.space/frontiers/sidon-sets/runs/run_f68e4cfc-e5c7-4c73-86cb-d79807c47ec4">Retained Sidon run</a> ·
19
19
  <a href="BUILD_WEEK.md">Build Week record</a> ·
20
20
  <a href="docs/MISSIONS.md">Missions</a> ·
21
21
  <a href="docs/RUN_RECORD.md">Run records</a> ·
@@ -29,43 +29,72 @@ Receipt through `vela land`.
29
29
  It cannot sign, accept a proposal, or make a scientific decision. Removing
30
30
  Canopus does not change accepted state or Vela replay.
31
31
 
32
- ## Judge quickstart
32
+ ## Where Canopus fits
33
+
34
+ The Vela product story has five steps:
35
+
36
+ 1. **Produce:** any suitable workbench may produce bounded work; Canopus is the
37
+ optional isolated producer for Codex.
38
+ 2. **Preserve:** the canonical frontier Git repository preserves the exact
39
+ source, artifacts, and history.
40
+ 3. **Check:** Vela replays the frontier and frozen verifiers fail closed.
41
+ 4. **Decide:** signed policy or one protected human decision determines
42
+ scientific standing.
43
+ 5. **Reuse:** the read-only Observatory and other replaceable readers help
44
+ people inspect, reproduce, and continue the work.
45
+
46
+ Canopus owns **Produce** only. It reuses Git for preservation and Vela for
47
+ checking, landing, replay, and authority; it does not become a second state
48
+ store, verifier authority, or scientific workbench platform.
49
+
50
+ ## Inspect one retained example
33
51
 
34
52
  **20 seconds — inspect the real result:** open the anonymous
35
- [Build Week evidence page](https://app.vela.space/build-week) and follow
53
+ [retained Sidon run](https://app.vela.space/frontiers/sidon-sets/runs/run_f68e4cfc-e5c7-4c73-86cb-d79807c47ec4)
54
+ and follow
36
55
  Mission → GPT-5.6 → artifact → verifier → Receipt → Defer.
37
56
 
38
57
  **90 seconds — inspect the shipped product:**
39
58
 
40
59
  ```sh
41
- bunx @vela-science/canopus@0.6.1 --version
42
- bunx @vela-science/canopus@0.6.1 profile validate sidon-a24-at-least-7194-gpt56-v3
60
+ bunx @vela-science/canopus@0.6.3 --version
61
+ bunx @vela-science/canopus@0.6.3 profile validate sidon-a24-at-least-7194-gpt56-v3
43
62
  ```
44
63
 
45
64
  **Full workflow — reproduce without rebuilding Canopus:**
46
65
 
66
+ Install the provenance-checked prebuilt
67
+ [Vela 0.912.0 release](https://github.com/vela-science/vela/releases/tag/v0.912.0)
68
+ for your platform, then:
69
+
47
70
  ```sh
48
71
  git clone https://github.com/vela-science/sidon-frontier.git
49
72
  cd sidon-frontier
50
- git checkout 4289e05876f142e72af622672e190be26f6a6f1d
51
- vela reproduce .
73
+ git checkout 825657d7e87618c0aa6fc9af7e3182e05f324750
74
+ vela reproduce artifacts/sidon-a24-gpt56-7194.witness.json
75
+ node verification/verify-sidon-a24-7194.mjs \
76
+ artifacts/sidon-a24-gpt56-7194.witness.json
52
77
  ```
53
78
 
79
+ The first command selects the pending artifact explicitly and runs Vela's
80
+ frozen Sidon verifier. The second is an independent base-3 implementation that
81
+ also rejects a bound collision injection. Neither command accepts the proposal.
82
+
54
83
  ## Quickstart
55
84
 
56
85
  Run the provenance-backed public package with Bun:
57
86
 
58
87
  ```sh
59
- bunx @vela-science/canopus@0.6.1 --version
88
+ bunx @vela-science/canopus@0.6.3 --version
60
89
  ```
61
90
 
62
91
  Inspect a clean frontier, then run its first ranked producer offer:
63
92
 
64
93
  ```sh
65
- bunx @vela-science/canopus@0.6.1 doctor /path/to/frontier
66
- bunx @vela-science/canopus@0.6.1 run /path/to/frontier --first
67
- bunx @vela-science/canopus@0.6.1 inspect latest
68
- bunx @vela-science/canopus@0.6.1 replay /path/to/run.json
94
+ bunx @vela-science/canopus@0.6.3 doctor /path/to/frontier
95
+ bunx @vela-science/canopus@0.6.3 run /path/to/frontier --first
96
+ bunx @vela-science/canopus@0.6.3 inspect latest
97
+ bunx @vela-science/canopus@0.6.3 replay /path/to/run.json
69
98
  ```
70
99
 
71
100
  Export a completed Defer run without publishing or mutating anything:
@@ -84,7 +113,7 @@ standing after verification; historical run v0 records remain inspectable.
84
113
  Use `--no-land` for a diagnostic mission that cannot change the source frontier:
85
114
 
86
115
  ```sh
87
- bunx @vela-science/canopus@0.6.1 run /path/to/frontier --first --no-land
116
+ bunx @vela-science/canopus@0.6.3 run /path/to/frontier --first --no-land
88
117
  ```
89
118
 
90
119
  `doctor` binds the exact Vela, Codex, Git, frontier, packet, profile, and verifier
@@ -116,16 +145,16 @@ Advanced profile and withdrawal commands are documented in
116
145
  content-addressed contracts that bind the target, packet, objective, artifact
117
146
  types, worker, verifier, replay command, budgets, and landing ceiling.
118
147
 
119
- ## OpenAI Build Week
148
+ ## Retained Build Week evidence
120
149
 
121
150
  Inspect the retained Mission → worker → artifact → verifier → Receipt → Defer
122
- chain on the [live evidence surface](https://app.vela.space/build-week). Exact
123
- commits, run roots, audit evidence, and nonclaims live in
151
+ chain on the [exact Sidon run](https://app.vela.space/frontiers/sidon-sets/runs/run_f68e4cfc-e5c7-4c73-86cb-d79807c47ec4).
152
+ Exact commits, run roots, audit evidence, and nonclaims live in
124
153
  [`BUILD_WEEK.md`](BUILD_WEEK.md).
125
154
 
126
155
  ## Development
127
156
 
128
- Requires Bun 1.3.12, Vela 0.912.0, Codex CLI 0.144.6, and Docker. The built
157
+ Requires Bun 1.3.12, Vela 0.914.1, Codex CLI 0.145.0, and Docker. The built
129
158
  package also runs under Node 22 or 24; unsupported odd-numbered Node releases
130
159
  are rejected rather than silently treated as supported.
131
160
 
@@ -146,3 +175,7 @@ bun run pack:check
146
175
 
147
176
  Apache-2.0 OR MIT, at your option. Canopus is a replaceable producer; Vela
148
177
  remains the protocol and authority boundary.
178
+
179
+ The published CLI has no runtime npm dependencies. See
180
+ [Third-party components](THIRD_PARTY.md) for the bundled verifier and external
181
+ toolchain boundary.
package/THIRD_PARTY.md ADDED
@@ -0,0 +1,41 @@
1
+ # Third-party components
2
+
3
+ Canopus is licensed under Apache-2.0 OR MIT. The corresponding license texts
4
+ are in `LICENSE-APACHE` and `LICENSE-MIT`.
5
+
6
+ ## Shipped npm package
7
+
8
+ `@vela-science/canopus@0.6.3` has no runtime npm dependencies. Its packaged
9
+ JavaScript uses only Node.js built-ins. The package also contains frozen
10
+ mission data and verifier capsules produced for the bounded profiles described
11
+ in `docs/MISSIONS.md`; their source and executable identities are bound by the
12
+ profile and release evidence.
13
+
14
+ The native Vela verifier capsules are distributed under Vela's Apache-2.0 OR
15
+ MIT licensing. The Python and shell verifier capsules use only their host
16
+ language or declared container toolchain and do not add a vendored application
17
+ dependency.
18
+
19
+ ## Development-only dependencies
20
+
21
+ These packages are used to type-check and build Canopus but are not runtime npm
22
+ dependencies of the published CLI:
23
+
24
+ | Component | Role | Upstream license |
25
+ | --- | --- | --- |
26
+ | `typescript` | TypeScript compiler | Apache-2.0 |
27
+ | `@types/node` | Node.js type declarations | MIT |
28
+
29
+ Exact resolved versions and integrity hashes are recorded in `bun.lock`.
30
+
31
+ ## Separately supplied host tools
32
+
33
+ The full tool-using workflow composes separately installed Vela, Codex CLI,
34
+ Git, Docker, and operating-system sandbox facilities. They are not bundled as
35
+ npm runtime dependencies and remain governed by their respective upstream
36
+ licenses and terms. Canopus records or checks their exact identities where the
37
+ mission contract requires it.
38
+
39
+ Third-party presence does not imply authority. The Codex worker, verifier,
40
+ Canopus process, and host tools cannot sign or perform a protected Vela
41
+ scientific acceptance decision.
@@ -10,7 +10,7 @@ export interface ProductDoctorResult {
10
10
  git_commit: string;
11
11
  git_tree: string;
12
12
  event_log_root: string;
13
- snapshot_root: string;
13
+ scientific_state_root: string;
14
14
  clean: boolean;
15
15
  strict_blockers: number;
16
16
  };
@@ -7,7 +7,7 @@ import { sha256Bytes } from "../util/canonical.js";
7
7
  import { listProductProfiles, loadProductProfile, packagedWorkerProfile, stageProfileCapsule, } from "./profile.js";
8
8
  import { runNativeCustodyPreflight } from "./custody.js";
9
9
  import { runtimeIdentity } from "./runtime.js";
10
- import { CANOPUS_VERSION } from "./version.js";
10
+ import { CANOPUS_VERSION, SUPPORTED_CODEX_VERSION, SUPPORTED_VELA_VERSION, } from "./version.js";
11
11
  async function jsonCommand(options) {
12
12
  const result = await options.runner({
13
13
  argv: options.argv,
@@ -120,8 +120,8 @@ export async function doctorProduct(options) {
120
120
  runtimeIdentity({ name: "vela", cwd: frontier, home: runtime, runner }),
121
121
  runtimeIdentity({ name: "git", cwd: frontier, home: runtime, runner }),
122
122
  ]);
123
- if (vela.version !== "vela 0.912.0") {
124
- throw new Error(`Canopus ${CANOPUS_VERSION} requires vela 0.912.0, observed ${vela.version}`);
123
+ if (vela.version !== `vela ${SUPPORTED_VELA_VERSION}`) {
124
+ throw new Error(`Canopus ${CANOPUS_VERSION} requires vela ${SUPPORTED_VELA_VERSION}, observed ${vela.version}`);
125
125
  }
126
126
  const [status, offer, gitStatus] = await Promise.all([
127
127
  jsonCommand({ runner, argv: [vela.binary, "status", ".", "--json"], cwd: frontier, home: runtime, label: "vela status" }),
@@ -156,7 +156,7 @@ export async function doctorProduct(options) {
156
156
  git_commit: stringAt(gitState.commit, "vela status.git.commit", { min: 40, max: 64 }),
157
157
  git_tree: stringAt(gitState.tree, "vela status.git.tree", { min: 40, max: 64 }),
158
158
  event_log_root: sha256At(roots.event_log, "vela status.roots.event_log"),
159
- snapshot_root: sha256At(roots.snapshot, "vela status.roots.snapshot"),
159
+ scientific_state_root: sha256At(roots.scientific_state_root, "vela status.roots.scientific_state_root"),
160
160
  clean,
161
161
  strict_blockers: nonnegative(integrity.blocker_count, "vela status.integrity.blocker_count"),
162
162
  },
@@ -186,8 +186,9 @@ export async function doctorProduct(options) {
186
186
  runtimeIdentity({ name: "codex", cwd: frontier, home: runtime, runner }),
187
187
  runtimeIdentity({ name: "docker", cwd: frontier, home: runtime, runner }),
188
188
  ]);
189
- if (codex.version !== "codex-cli 0.144.6") {
190
- throw new Error(`registered worker requires codex-cli 0.144.6, observed ${codex.version}`);
189
+ if (codex.version !== `codex-cli ${SUPPORTED_CODEX_VERSION}`) {
190
+ throw new Error(`Canopus ${CANOPUS_VERSION} requires codex-cli ${SUPPORTED_CODEX_VERSION}, ` +
191
+ `observed ${codex.version}`);
191
192
  }
192
193
  const daemon = await runner({
193
194
  argv: [docker.binary, "info", "--format={{.ServerVersion}}"],
@@ -250,7 +251,7 @@ export async function doctorProduct(options) {
250
251
  git_commit: stringAt(gitState.commit, "vela status.git.commit", { min: 40, max: 64 }),
251
252
  git_tree: stringAt(gitState.tree, "vela status.git.tree", { min: 40, max: 64 }),
252
253
  event_log_root: sha256At(roots.event_log, "vela status.roots.event_log"),
253
- snapshot_root: sha256At(roots.snapshot, "vela status.roots.snapshot"),
254
+ scientific_state_root: sha256At(roots.scientific_state_root, "vela status.roots.scientific_state_root"),
254
255
  clean,
255
256
  strict_blockers: nonnegative(integrity.blocker_count, "vela status.integrity.blocker_count"),
256
257
  },
@@ -1 +1,3 @@
1
1
  export declare const CANOPUS_VERSION: string;
2
+ export declare const SUPPORTED_VELA_VERSION = "0.914.1";
3
+ export declare const SUPPORTED_CODEX_VERSION = "0.145.0";
@@ -4,3 +4,5 @@ if (typeof packageJson.version !== "string" || packageJson.version.length === 0)
4
4
  throw new Error("Canopus package version is missing");
5
5
  }
6
6
  export const CANOPUS_VERSION = packageJson.version;
7
+ export const SUPPORTED_VELA_VERSION = "0.914.1";
8
+ export const SUPPORTED_CODEX_VERSION = "0.145.0";
@@ -3,6 +3,7 @@ import type { ExecutionBindingV1, Mission, MissionRoots, StrictBaseline } from "
3
3
  import { type CommandRunner } from "../util/command.js";
4
4
  import type { LandResult, VelaCommandResponse, VelaInspection } from "./types.js";
5
5
  export type { CommandRunner } from "../util/command.js";
6
+ export declare const DEFAULT_VELA_COMMAND_TIMEOUT_MS = 120000;
6
7
  export declare function retainedArtifactPath(repoRoot: string, frontier: string, digest: string): string;
7
8
  export declare class VelaClientError extends Error {
8
9
  readonly code: "command_failed" | "malformed_output" | "version_mismatch" | "root_mismatch" | "unexpected_route";
@@ -3,6 +3,12 @@ import { GIT_OBJECT_RE, SHA256_RE, objectAt, relativePathAt, stringAt, } from ".
3
3
  import { MAX_COMMAND_ARGV, isolatedEnvironment, runCommand, } from "../util/command.js";
4
4
  import { canonicalJcs, sha256Bytes } from "../util/canonical.js";
5
5
  import { MAX_EXECUTABLE_BYTES, readBoundedRegularFile, sha256RegularFile } from "../util/files.js";
6
+ // Real large frontiers can spend tens of seconds in Vela's recoverable
7
+ // transaction preparation and derived-view materialization. Keep this well
8
+ // below mission wall-time budgets while allowing the measured 38.6-second
9
+ // Erdős work operation to reach its atomic commit instead of being killed in
10
+ // Prepared state.
11
+ export const DEFAULT_VELA_COMMAND_TIMEOUT_MS = 120_000;
6
12
  export function retainedArtifactPath(repoRoot, frontier, digest) {
7
13
  if (!/^sha256:[0-9a-f]{64}$/u.test(digest)) {
8
14
  throw new VelaClientError("malformed_output", "artifact digest is not sha256");
@@ -32,6 +38,13 @@ function parseJsonObject(stdout, command) {
32
38
  throw new VelaClientError("malformed_output", String(error));
33
39
  }
34
40
  }
41
+ function usesCompactStatusProjection(version) {
42
+ const match = /^0\.(\d+)\.(\d+)$/u.exec(version);
43
+ if (match === null)
44
+ return false;
45
+ const minor = Number(match[1]);
46
+ return Number.isSafeInteger(minor) && minor >= 900 && minor <= 914;
47
+ }
35
48
  function safeFailureMessage(value) {
36
49
  if (typeof value !== "string" || value.length === 0)
37
50
  return undefined;
@@ -321,7 +334,7 @@ export class VelaClient {
321
334
  this.#expectedSha256 = options.expectedSha256;
322
335
  this.#home = options.home;
323
336
  this.#maxOutputBytes = options.maxOutputBytes ?? 16 * 1024 * 1024;
324
- this.#timeoutMs = options.timeoutMs ?? 30_000;
337
+ this.#timeoutMs = options.timeoutMs ?? DEFAULT_VELA_COMMAND_TIMEOUT_MS;
325
338
  // Deliberately do not accept caller-supplied environment entries. In
326
339
  // particular, this prevents a harness integration from forwarding human
327
340
  // key variables into the Vela control lane. Agent actors auto-mint only an
@@ -432,7 +445,7 @@ export class VelaClient {
432
445
  if (replay.source_hash !== undefined) {
433
446
  assertEqual(normalizeSha256(replay.source_hash, "vela check.replay.source_hash"), checkCurrent, "Vela source snapshot");
434
447
  }
435
- const proof = version === "0.900.0" || version === "0.900.1" || version === "0.900.2" || version === "0.901.0" || version === "0.910.0" || version === "0.911.0" || version === "0.911.1" || version === "0.912.0"
448
+ const proof = usesCompactStatusProjection(version)
436
449
  ? {
437
450
  ok: true,
438
451
  command: "status_root_projection",
package/docs/MISSIONS.md CHANGED
@@ -1,26 +1,12 @@
1
- # Mission roles
1
+ # Missions
2
2
 
3
- Canopus Mission v0 runs one explicit role per mission. The role changes the worker
4
- instruction, not the trust boundary:
3
+ Mission v1 is the current Canopus mission contract. Canopus owns only the
4
+ **Produce** step in Vela's five-step product story: produce → preserve → check
5
+ → decide → reuse. The frontier Git repository preserves; Vela checks and
6
+ governs standing; signed policy or a protected human decision decides; the
7
+ Observatory and other replaceable readers support reuse.
5
8
 
6
- - `producer` constructs the smallest candidate or preserves a null result;
7
- - `adversary` seeks a concrete counterexample or narrows the claim;
8
- - `verifier` checks correspondence between the candidate and declared tests,
9
- while the separate frozen executable remains the mechanical verifier;
10
- - `fidelity` checks that prose claims do not outrun frozen artifacts and
11
- verifier facts.
12
-
13
- A research loop may fan these into separate missions against the same exact
14
- accepted roots. Each result lands its own Receipt and route. A repair mission
15
- names an immutable parent candidate, but a substantive downstream mission may
16
- inherit only state that Vela reports as accepted. Defer, a verifier pass, or a
17
- Canopus candidate digest is not an inheritance edge.
18
-
19
- This deliberately avoids a workflow DSL, agent society, or second graph. Git
20
- stores the bytes, Vela stores authority and accepted lineage, and Canopus is
21
- replaceable orchestration over those primitives.
22
-
23
- ## Mission v1
9
+ ## Mission v1: current
24
10
 
25
11
  Mission v1 keeps the same four roles and authority boundary while adding a
26
12
  tool-enabled local worker. `mission prepare` selects the first ranked attack,
@@ -76,3 +62,33 @@ Vela policy derivation, strict replay, and third-party reproduction one shared
76
62
  pure verifier and claim-fidelity contract. A target-specific wrapper is kept
77
63
  only when Vela has no suitable verifier; it is not duplicated for presentation
78
64
  or convenience.
65
+
66
+ ## Mission roles
67
+
68
+ One Mission v1 bundle runs one explicit role. The role changes the worker
69
+ instruction, not the trust boundary:
70
+
71
+ - `producer` constructs the smallest candidate or preserves a null result;
72
+ - `adversary` seeks a concrete counterexample or narrows the claim;
73
+ - `verifier` checks correspondence between the candidate and declared tests,
74
+ while the separate frozen executable remains the mechanical verifier; and
75
+ - `fidelity` checks that prose claims do not outrun frozen artifacts and
76
+ verifier facts.
77
+
78
+ A research loop may fan these into separate missions against the same exact
79
+ accepted roots. Each result lands its own Receipt and route. A repair mission
80
+ names an immutable parent candidate, but a substantive downstream mission may
81
+ inherit only state that Vela reports as accepted. Defer, a verifier pass, or a
82
+ Canopus candidate digest is not an inheritance edge.
83
+
84
+ This deliberately avoids a workflow DSL, agent society, or second graph. Git
85
+ stores the bytes, Vela stores authority and accepted lineage, and Canopus is
86
+ replaceable orchestration over those primitives.
87
+
88
+ ## Mission v0: historical replay only
89
+
90
+ Mission v0 is retained solely so frozen benchmark registrations and historical
91
+ run records remain reproducible. It used the same four roles with a tool-free
92
+ worker and the older macOS Seatbelt verifier manifest. Do not prepare new
93
+ product missions with v0; use Mission v1. Historical v0 bytes and results remain
94
+ unchanged.
package/docs/RELEASES.md CHANGED
@@ -1,5 +1,118 @@
1
1
  # Release evidence
2
2
 
3
+ ## Canopus v0.6.3
4
+
5
+ Version `0.6.3` is a narrow composition repair for released Vela `0.914.1`.
6
+ It changes no mission, Receipt, verifier, policy, proposal, or authority
7
+ contract. The release gate requires the exact installed Vela binary to pass
8
+ work, authored Defer landing, accepted-event delta zero, retained-artifact
9
+ binding, and clean-clone replay before publication. The current worker requires
10
+ Codex CLI `0.145.0`; CI verifies the exact Linux package and executable digests,
11
+ while every mission continues to bind its observed platform binary hash.
12
+ The diagnostic projection now names Vela's `scientific_state_root` directly;
13
+ the retired `snapshot_root` label is not carried forward into new output.
14
+ The sole active Erdős 1056 profile is preregistered for the next
15
+ non-overlapping range `10428601..10428800`. Its frozen ARM64 and x86-64
16
+ verifiers reject a malformed candidate after recomputing the complete range;
17
+ no model call or scientific landing is part of the registration commit.
18
+ The first live attempt stopped during initialization because the 30-second
19
+ Canopus Vela-command ceiling killed `vela work` while its recoverable journal
20
+ was `Prepared`. A fresh disposable-clone measurement completed the same exact
21
+ operation in 38.6 seconds. Canopus now uses a bounded 120-second control-command
22
+ ceiling; the failed run remains non-authoritative evidence and the canonical
23
+ frontier remained unchanged.
24
+ The subsequent `gpt-5.6` compatibility probe reached the isolated engine only
25
+ after a successful disposable work claim, then received an HTTP 400 before
26
+ inference because ChatGPT-account Codex does not expose that model. The active
27
+ registration uses the previously proven `gpt-5.4` worker and a new draft root;
28
+ the failed run remains separate non-authoritative evidence.
29
+ The first `gpt-5.4` run independently completed the bounded computation, but
30
+ Canopus stopped it before verification or landing because provider-reported
31
+ usage exceeded the frozen 100,000-token postcondition: 136,448 input tokens,
32
+ including 100,352 cached input tokens, plus 3,442 output tokens. Run
33
+ `run_6a11f27e-fddd-4963-94cf-23e8abc2e774` remains failed evidence; its
34
+ candidate is not salvaged or supplied to the retry. A distinct one-attempt
35
+ registration raises only the observed-token postcondition to 160,000, still
36
+ below the original 187,013-token Erdős run.
37
+
38
+ That distinct retry completed the full bounded path without semantic hints:
39
+
40
+ - Run: `run_192b3bef-9d6e-49e5-b72d-7ae903b29d5e`
41
+ - Model/runtime: `gpt-5.4` / Codex CLI `0.145.0`
42
+ - Scope: every prime in the exact inclusive range `10428601..10428800`
43
+ - Result: 13 primes checked; no factorial-residue fiber reached size 16; the
44
+ maximum was 11 at `p=10428703`, residue `8615683`
45
+ - Observed usage: 72,454 tokens, below the separately registered 160,000-token
46
+ ceiling
47
+ - Artifact:
48
+ `sha256:0547b0dba763c44b7c29f25407c66c3fe378ad64e164713d9c40a2caab96b088`
49
+ - Frozen verifier executable:
50
+ `sha256:875a28177ef9b29d2480a8fe7906eddc3e809824190083abc885609555f8e52d`
51
+ - Verifier output:
52
+ `sha256:aa19c8c445b550161ee14a95da82e1edcc2882dbd0e2880710d5a34d53bca597`
53
+ - Receipt:
54
+ `sha256:7400662ed6493aa6dc49a31c0d2ea1099a5380a272914b13325aaf088ba58b57`
55
+ - Proposal: `vpr_a845ae60ed695b93`
56
+ - Route and authority effect: Defer; accepted-event delta zero
57
+ - Clean-clone reproduction: matched
58
+ - Sanitized public projection:
59
+ `sha256:8809e983e526a4065c626ae4b9c27032082fbdc87ddb508009d35e4a620b330d`
60
+ - Publication bundle:
61
+ `sha256:d4d4121f790e00c41a5363f09eab76cc1764c94e4d7ae4e8f73a122f629282dc`
62
+ - Canonical frontier landing commit:
63
+ `e9ae9d3dd2ef5cae18346ee892451a091159f232`
64
+
65
+ The bounded negative result is evidence only; it neither proves the universal
66
+ Erdős statement nor constitutes scientific acceptance. The exact proposal is
67
+ pending human review, and its acceptance path remains blocked by the durable
68
+ Engine gate because it has no independent retained attachment or surviving
69
+ adversarial probe. The raw run directory remains local. Only the sanitized
70
+ projection and its content-addressed manifest enter this repository.
71
+
72
+ Release identities, package hashes, attestations, registry integrity, and the
73
+ installed-package smoke are filled only after the exact tag workflow succeeds.
74
+
75
+ ## Canopus v0.6.2
76
+
77
+ Version `0.6.2` is the final Build Week distribution correction. It packages
78
+ the exact artifact-specific Vela replay and independent base-3 verifier paths
79
+ for the pending 7,194-point Sidon witness, together with the dated evidence
80
+ ledger, immutable Receipt caveat reconciliation, and third-party notice that
81
+ were added after `0.6.1`. It changes no runtime, protocol, Receipt, policy, or
82
+ authority behavior.
83
+
84
+ - Source/tag: `43c1aa97165bd9c7e9b2dcbd232155f42ca8410c` / `v0.6.2`
85
+ - Cross-platform CI, released-Vela composition, custody, verifier, and
86
+ installed-package smoke:
87
+ [run 29849463278](https://github.com/vela-science/vela-research-harness/actions/runs/29849463278)
88
+ - CodeQL:
89
+ [run 29849462038](https://github.com/vela-science/vela-research-harness/actions/runs/29849462038)
90
+ - OIDC publish, GitHub build attestation, npm provenance audit, and matching
91
+ GitHub release:
92
+ [run 29849601711](https://github.com/vela-science/vela-research-harness/actions/runs/29849601711)
93
+ - Package SHA-256:
94
+ `7c82af47782c07c332f6b60020c9205da3d60132e970df0a3c7678545596a812`
95
+ - npm shasum: `ee1f69bcaf616982af3d27bfb2a60cb243252f81`
96
+ - npm integrity:
97
+ `sha512-mugVOz8ilh1VZ1S3A3BGS/2CowdplJd4qXTdi2AXNYOQCoJJ1/exOLlTw6BsU8FfGdgaASjxyJvq/+R+0015Aw==`
98
+ - The npm and GitHub release tarballs are byte-identical. The GitHub
99
+ attestation verifies against the exact release workflow, tag, and source
100
+ digest.
101
+ - A fresh `npm audit signatures --include-attestations` reports no invalid or
102
+ missing entries and verifies the npm signature plus SLSA provenance v1.
103
+ - A clean registry install executed under Node `v24.14.0`, returned
104
+ `canopus 0.6.2`, and validated the exact Sidon v3 profile root.
105
+ - Public package: <https://www.npmjs.com/package/@vela-science/canopus/v/0.6.2>
106
+ - Matching release: <https://github.com/vela-science/vela-research-harness/releases/tag/v0.6.2>
107
+ - Publication path: the repository release workflow validates the package on
108
+ macOS, packs it on Ubuntu, binds a GitHub build attestation to the exact tag
109
+ and workflow, publishes through npm trusted publishing, and audits the npm
110
+ signature plus SLSA provenance v1 before creating the GitHub release.
111
+ - Judge-path contract: the packed `README.md` and `BUILD_WEEK.md` select
112
+ `artifacts/sidon-a24-gpt56-7194.witness.json` explicitly at frontier audit
113
+ commit `825657d7e87618c0aa6fc9af7e3182e05f324750`; neither command performs a
114
+ scientific acceptance decision.
115
+
3
116
  ## Canopus v0.4.6
4
117
 
5
118
  Version `0.4.6` is the primary Build Week science release. It registers the
@@ -0,0 +1 @@
1
+ {"authority":"none","commands":[{"authority":"read_only","command":"vela reproduce . --proposal vpr_a845ae60ed695b93 --json","purpose":"reproduce_pending_artifact"},{"authority":"read_only","command":"vela review show . vpr_a845ae60ed695b93 --json","purpose":"inspect_review_material"},{"authority":"evidence_only","command":"vela verify attach . <attachment.json> --proposal vpr_a845ae60ed695b93 --as verifier:<actor> --json","purpose":"retain_independent_verifier_evidence"}],"proposal_id":"vpr_a845ae60ed695b93","schema":"canopus.pending-commands.v1"}
@@ -0,0 +1 @@
1
+ {"activity":{"clean_clone_replay":"matched","verifier":"pass","worker":"success"},"artifact_roots":["sha256:0547b0dba763c44b7c29f25407c66c3fe378ad64e164713d9c40a2caab96b088","sha256:23938294de90988480724d89405e8e97e8c9427ec647ea1a6e67aed877df6d9b","sha256:a16d74ae1bbde4d126afd57f5217e023f528bd754f62c6b7d5e86a58e7787c88"],"authority":"read_only_projection","caveats":["The worker handed off without verifier authority; Canopus subsequently recorded the separate verifier outcome.","Declared verifier outcome: passed.","Canopus produced this record; it is not a human acceptance decision."],"claim":"Bounded exhaustive search completed for Erdős 1056 k=15 over primes in 10428601..10428800; produced the required artifact bytes. Verification remains pending and will be performed separately by the frozen Canopus verifier.","final":{"commit":"e9ae9d3dd2ef5cae18346ee892451a091159f232","event_log_root":"sha256:b430f080ef0ac992571e0777b7154a8ae3567d0e9dd7292d3ee36e3ed2e4d8cd","snapshot_root":"sha256:ec16ec12124084e9ecbe3e954faa78bde52761673b2e3057dca0cd7f3a563280"},"mission":{"digest":"sha256:5d16a95366a5dce79dd3f1b1ea873349ca52e86c7caab8e015e9377e3385b2e0","id":"mission_erdos1056_k15_range_10428601_10428800_native2_retry","model":"gpt-5.4","registration_kind":"profile","registration_name":"erdos1056-k15-10428601-10428800","registration_root":"sha256:7225998d661b711786e194e2b578233f8d5f0cef129d4d06af7156ff90b51734","target":"erdos:1056","target_packet_root":"sha256:351cf94d7a6bfee8f8abd386af54f8bfa7fcc2cd01cf5cc155cf0a981086fcc5"},"nonclaims":["Verifier success is not scientific acceptance.","The bounded result does not establish maximality or settle the broader scientific problem.","Canopus did not sign or perform a human decision."],"policy":{"accepted_state_delta":0,"proposal_id":"vpr_a845ae60ed695b93","route":"defer"},"receipt_root":"sha256:7400662ed6493aa6dc49a31c0d2ea1099a5380a272914b13325aaf088ba58b57","reproduction":{"commands":["git clone https://github.com/vela-science/erdos-frontier.git","cd erdos-frontier","git checkout e9ae9d3dd2ef5cae18346ee892451a091159f232","vela reproduce 'artifacts/erdos1056-k15-range-10428601-10428800.txt'"]},"run_id":"run_192b3bef-9d6e-49e5-b72d-7ae903b29d5e","schema":"canopus.public-run.v1","source":{"commit":"7028ab2ad85f0fa2aee4526098e474044459e4e6","event_log_root":"sha256:12daf8cc1e4f2777629ca953e081c99b2931a60b8245273b9085a5c0add53c3b","repository":"https://github.com/vela-science/erdos-frontier","snapshot_root":"sha256:7f6efe7edd5bb0cf5e1fcb31d0b0d8892aa1de9a680dc4355d8628addcb546f4"},"usage":{"attempts":1,"observed_tokens":72454,"research_elapsed_ms":281331,"research_processes":7},"verifier_root":"sha256:7d6ac5bc88a1ca3d879c05e4429f237d017cdfc58f4c837d5d011a77c66fd46d"}
@@ -0,0 +1 @@
1
+ {"authority":"none","files":{"pending-commands.json":"sha256:9430fe4db2aa0842b6e806fde292412ca9b679676d0487e9ae55296822e1f850","public-run.json":"sha256:8809e983e526a4065c626ae4b9c27032082fbdc87ddb508009d35e4a620b330d","web-import.json":"sha256:65eaba0e4af34be3bb868c292b5905f5b97eb6a7a56c52f541e706c65238e047"},"run_id":"run_192b3bef-9d6e-49e5-b72d-7ae903b29d5e","schema":"canopus.publication-manifest.v1"}
@@ -0,0 +1 @@
1
+ {"accepted_state_delta":0,"authority":"read_only","projection_path":"public-run.json","projection_root":"sha256:8809e983e526a4065c626ae4b9c27032082fbdc87ddb508009d35e4a620b330d","route":"defer","run_id":"run_192b3bef-9d6e-49e5-b72d-7ae903b29d5e","schema":"vela-web.canopus-import.v1"}
@@ -1,15 +1,15 @@
1
1
  {
2
- "id": "mission_erdos1056_k15_range_10428401_10428600_native1",
2
+ "id": "mission_erdos1056_k15_range_10428601_10428800_native2_retry",
3
3
  "target": "auto",
4
4
  "frontier": ".",
5
5
  "actor": "agent:canopus-local",
6
6
  "role": "producer",
7
7
  "claim_type": "computational",
8
8
  "replayability": "exact",
9
- "objective": "Perform one finite exhaustive search for an Erdős 1056 k=15 witness over every prime p in the exact inclusive range 10428401..10428600. Use a compiled C++ program, one prime at a time; a flat open-addressed table keyed by the factorial residue keeps this bounded computation inside the registered memory and time limits. For each prime, compute t! modulo p for every cut t in 0..p-1 and count every residue fiber. For each p choose its largest fiber, breaking a tie by the smallest residue. If any largest fiber has at least 16 cuts, stop at the first such prime and report status=witness. Otherwise report status=negative and the greatest multiplicity over the whole range, breaking ties by the earliest prime and then the smallest residue. In both cases list every increasing cut in the selected fiber. Produce exactly one UTF-8 artifact at artifacts/erdos1056-k15-range-10428401-10428600.txt with these newline-terminated lines in order: schema=canopus.erdos1056-k15-search.v1; status=witness or status=negative; problem=1056; k=15; range_start=10428401; range_end=10428600; primes_tested=<exact count>; max_multiplicity=<exact count>; best_p=<prime>; best_residue=<residue>; cuts=<comma-separated cuts>. Return engine status success only after the program completes the entire registered range and writes the exact artifact. This is an exact bounded computation, not a universal answer to Erdős 1056.",
9
+ "objective": "Perform one finite exhaustive search for an Erdős 1056 k=15 witness over every prime p in the exact inclusive range 10428601..10428800. Use a compiled C++ program, one prime at a time; a flat open-addressed table keyed by the factorial residue keeps this bounded computation inside the registered memory and time limits. For each prime, compute t! modulo p for every cut t in 0..p-1 and count every residue fiber. For each p choose its largest fiber, breaking a tie by the smallest residue. If any largest fiber has at least 16 cuts, stop at the first such prime and report status=witness. Otherwise report status=negative and the greatest multiplicity over the whole range, breaking ties by the earliest prime and then the smallest residue. In both cases list every increasing cut in the selected fiber. Produce exactly one UTF-8 artifact at artifacts/erdos1056-k15-range-10428601-10428800.txt with these newline-terminated lines in order: schema=canopus.erdos1056-k15-search.v1; status=witness or status=negative; problem=1056; k=15; range_start=10428601; range_end=10428800; primes_tested=<exact count>; max_multiplicity=<exact count>; best_p=<prime>; best_residue=<residue>; cuts=<comma-separated cuts>. Return engine status success only after the program completes the entire registered range and writes the exact artifact. This is an exact bounded computation, not a universal answer to Erdős 1056.",
10
10
  "completion_condition": "The independent frozen capsule recomputes the full exact range in a separate network-denied and write-denied container and byte-matches the single artifact.",
11
11
  "allowed_paths": [
12
- "artifacts/erdos1056-k15-range-10428401-10428600.txt"
12
+ "artifacts/erdos1056-k15-range-10428601-10428800.txt"
13
13
  ],
14
14
  "budgets": {
15
15
  "max_research_wall_time_ms": 1800000,
@@ -18,7 +18,7 @@
18
18
  "max_prompt_bytes": 2097152,
19
19
  "max_artifact_bytes": 1048576,
20
20
  "max_attempts": 1,
21
- "max_observed_tokens": 100000
21
+ "max_observed_tokens": 160000
22
22
  },
23
23
  "worker": {
24
24
  "model": "gpt-5.4"
@@ -26,7 +26,7 @@
26
26
  "verifier": {
27
27
  "argv": [
28
28
  "capsule/verifier",
29
- "{artifact:artifacts/erdos1056-k15-range-10428401-10428600.txt}"
29
+ "{artifact:artifacts/erdos1056-k15-range-10428601-10428800.txt}"
30
30
  ],
31
31
  "cwd": "site",
32
32
  "timeout_ms": 300000,
@@ -34,7 +34,7 @@
34
34
  "capsule_path": "capsule/verifier"
35
35
  },
36
36
  "scientific_chain": {
37
- "predicted_observable": "The frozen verifier independently obtains the same first witness or complete bounded-negative result for all primes in 10428401..10428600 and exits zero on the exact candidate bytes.",
38
- "performed_test": "capsule/verifier artifacts/erdos1056-k15-range-10428401-10428600.txt"
37
+ "predicted_observable": "The frozen verifier independently obtains the same first witness or complete bounded-negative result for all primes in 10428601..10428800 and exits zero on the exact candidate bytes.",
38
+ "performed_test": "capsule/verifier artifacts/erdos1056-k15-range-10428601-10428800.txt"
39
39
  }
40
40
  }
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@vela-science/canopus",
3
- "version": "0.6.1",
3
+ "version": "0.6.3",
4
4
  "description": "A bounded, replaceable research harness over released Vela interfaces",
5
5
  "type": "module",
6
6
  "private": false,
@@ -53,8 +53,8 @@
53
53
  "dist/src/run.js",
54
54
  "dist/src/run.d.ts",
55
55
  "schemas",
56
- "capsules/erdos1056-k15/bin/linux-arm64/10428401-10428600/verifier",
57
- "capsules/erdos1056-k15/bin/linux-x86_64/10428401-10428600/verifier",
56
+ "capsules/erdos1056-k15/bin/linux-arm64/10428601-10428800/verifier",
57
+ "capsules/erdos1056-k15/bin/linux-x86_64/10428601-10428800/verifier",
58
58
  "capsules/formal-erdos-505-test-dim-one/verifier",
59
59
  "capsules/quantum-10-1-4/verifier.py",
60
60
  "capsules/sidon-a24/bin/linux-arm64/verifier",
@@ -64,12 +64,14 @@
64
64
  "runtime",
65
65
  "advisories",
66
66
  "evidence/build-week",
67
+ "evidence/erdos",
67
68
  "scripts/run-claim-fidelity-advisory.mjs",
68
69
  "scripts/run-hostile-native-custody-fixture.mjs",
69
70
  "scripts/run-hostile-verifier-fixture.mjs",
70
71
  "tests/fixtures/hostile-verifier",
71
72
  "README.md",
72
73
  "BUILD_WEEK.md",
74
+ "THIRD_PARTY.md",
73
75
  "docs/MISSIONS.md",
74
76
  "docs/RELEASES.md",
75
77
  "docs/RUN_RECORD.md",
@@ -1,15 +1,15 @@
1
1
  {
2
2
  "schema": "canopus.profile.v2",
3
- "name": "erdos1056-k15-10428401-10428600",
3
+ "name": "erdos1056-k15-10428601-10428800",
4
4
  "target": "erdos:1056",
5
5
  "target_packet_schema": "erdos-frontier.problem-work.v1",
6
6
  "draft": "missions/erdos1056-k15-next/mission.draft.json",
7
- "draft_sha256": "sha256:1c8f580b052f3d6b12c2d7694870eff1f196e27653422b6310a41ce14e4984d3",
8
- "objective_sha256": "sha256:34b546c81a3522cf98fc2cd5b0f0308b723069e534dd533f6babed4634086be3",
7
+ "draft_sha256": "sha256:31f0d178472b2eb904d081be09a78fdeb2f65091389e4b09650064e71f31c91f",
8
+ "objective_sha256": "sha256:b70c05cfe940c96610386c1abf51507e3282c2f96f3c6ef8ae85b1216a2f4b0a",
9
9
  "completion_condition_sha256": "sha256:4a4a06e2c867867a191af27900e96c23e677db2775783f1829c31e4867a7f270",
10
- "allowed_artifacts_sha256": "sha256:70aff1cfbd41e2a8e9afccdfeaba4a95dd0356902a2592e1ebae031f9dcbb658",
11
- "budgets_sha256": "sha256:26e3697f491461dd3073ebfb9960fcaf70e6412095fd4eeade7169fb79a4b070",
12
- "replay_argv_sha256": "sha256:939ffff9ab670b28d3715e4bb26f42aa520de532e9a73328ac4be459f539a6b7",
10
+ "allowed_artifacts_sha256": "sha256:11c82c9b03ba9cb220187160fac0923a38a533a5d7f05cc6749eaadfafa98d90",
11
+ "budgets_sha256": "sha256:5457a393d492978d8f191aca42fde0bf95261d74d701ce7ecd1b99f6e0dcbc0c",
12
+ "replay_argv_sha256": "sha256:d39c48fc7f6fe2d052e15d3454fecbd7db81b6eb764b01fd3d80dc96393c146c",
13
13
  "landing": {
14
14
  "expected_routes": ["defer"],
15
15
  "max_accepted_delta": 0
@@ -18,15 +18,15 @@
18
18
  "darwin-arm64": {
19
19
  "worker_profile": "runtime/native-worker/config.toml",
20
20
  "worker_profile_sha256": "sha256:12b58762819481ad101e7a172a296224b6050a8a07a7431272e521a4102908da",
21
- "verifier_capsule": "capsules/erdos1056-k15/bin/linux-arm64/10428401-10428600/verifier",
22
- "verifier_capsule_sha256": "sha256:a6fc0d2ad4dd8e665474d6efd530e8a574880b7191d246b1c245d8cf4db175aa",
21
+ "verifier_capsule": "capsules/erdos1056-k15/bin/linux-arm64/10428601-10428800/verifier",
22
+ "verifier_capsule_sha256": "sha256:875a28177ef9b29d2480a8fe7906eddc3e809824190083abc885609555f8e52d",
23
23
  "verifier_image": "ghcr.io/vela-science/canopus-verifier@sha256:a6f354862f2a3f7d72eb99244c65fa8583c98b74e17e3d5ce6e31ef48aa16536"
24
24
  },
25
25
  "linux-x86_64": {
26
26
  "worker_profile": "runtime/native-worker/config-linux.toml",
27
27
  "worker_profile_sha256": "sha256:fddecc4b7458b91f6d55ae16b666d297ae7bcd1a2f5deeb6650dcea60fc0242c",
28
- "verifier_capsule": "capsules/erdos1056-k15/bin/linux-x86_64/10428401-10428600/verifier",
29
- "verifier_capsule_sha256": "sha256:3cdcb487db4907b63230548a7c7fd94d4be6acf003ca532971f9cf1650f19546",
28
+ "verifier_capsule": "capsules/erdos1056-k15/bin/linux-x86_64/10428601-10428800/verifier",
29
+ "verifier_capsule_sha256": "sha256:51fc4e682d7a7f8f30f5e0dc2584e17fe94a037d246ff402fbe5d5ca6b820dc8",
30
30
  "verifier_image": "ghcr.io/vela-science/canopus-verifier@sha256:a6f354862f2a3f7d72eb99244c65fa8583c98b74e17e3d5ce6e31ef48aa16536"
31
31
  }
32
32
  }