@vela-science/canopus 0.6.2 → 0.6.3

package/BUILD_WEEK.md

@@ -46,7 +46,7 @@ documentation commits do not rewrite those release or evidence identities.
 | July 20 | Canopus `v0.5.0` at `25523ccb558f81db95c01b48b83616ed3ab05b35` | Added stage-typed run evidence and retry-safe Vela composition without adding an authority path. |
 | July 20 | Sidon independent-audit commit `825657d7e87618c0aa6fc9af7e3182e05f324750` | Added a separate base-3 verifier and a deterministic collision-injection rejection probe. |
 | July 21 | Canopus `v0.6.1` at `b98c846d61d4c554e43388107bcce77c51307db5` | Updated the released Vela and package identities; its packed judge path remained the generic canonical-witness check and is superseded by `v0.6.2`. |
-| July 21 | Canopus `v0.6.2` | Shipped the exact pending-artifact and independent-verifier judge path, dated evidence ledger, caveat reconciliation, and third-party notice in the provenance-backed package. |
+| July 21 | Canopus `v0.6.2` at `43c1aa97165bd9c7e9b2dcbd232155f42ca8410c` | Shipped the exact pending-artifact and independent-verifier judge path, dated evidence ledger, caveat reconciliation, and third-party notice in the provenance-backed package. |
 | July 21 | Vela `v0.912.0` at `bb6774b6a65ecc5615e17ddf574c3efd893e0e44` | Bound the final Build Week composition while leaving Receipt, policy, replay, and human-authority semantics intact. |
 | July 21 | Observatory `v0.340.6` at `7483ab20c0d2878f3d50a76ed1bca9969f7dd5f5` | Deployed the anonymous run detail and `/build-week` route with an exact evidence manifest. |
 | July 21 | Canopus documentation at `4cae162bc37538e9ff1add0ef42861804ff86a62` | Corrected the public commands to select and reproduce the pending witness rather than only retained canonical witnesses. |

package/CHANGELOG.md

@@ -1,5 +1,49 @@
 # Changelog
 
+## 0.6.3 - 2026-07-24
+
+- Restore exact composition with released Vela `0.914.1` after Canopus
+  `0.6.2` correctly refused the newer binary at its version boundary. The
+  maintenance release preserves an exact legacy signature without
+  authenticating it, fixing the false Erdős repository-boundary blocker while
+  retaining all historical strict debt.
+- Advance the current native-worker boundary to Codex CLI `0.145.0` and pin
+  the exact Linux archive and binary digests used by CI. Immutable missions
+  continue to require their own recorded Codex versions and hashes.
+- Preserve the compact status, offer, Receipt, Defer, replay, and zero-authority
+  contracts through the released-binary integration test.
+- Report Vela's current `scientific_state_root` directly from `canopus doctor`
+  instead of preserving the retired, ambiguous `snapshot_root` label.
+- Replace the brittle list of individual Vela 0.9 patch versions with one
+  bounded compact-status compatibility rule. Historical missions still require
+  their exact recorded binary and digest.
+- Advance the sole runnable Erdős 1056 profile to the adjacent, non-overlapping
+  range `10428601..10428800`; the completed `10428401..10428600` capsule remains
+  reproducible from Canopus `0.6.2` and its immutable run evidence.
+- Raise the bounded Vela control-command ceiling from 30 to 120 seconds after
+  the real Erdős `vela work` transaction required 38.6 seconds. The original
+  timeout left only a recoverable `Prepared` journal in a disposable clone and
+  made no canonical-frontier change.
+- Pin the active mission to account-compatible `gpt-5.4`. The attempted
+  `gpt-5.6` request was rejected by Codex before inference because ChatGPT
+  account authentication does not expose that model; it produced no research
+  artifact or frontier publication.
+- Preserve the first `gpt-5.4` run as a stopped non-authoritative result after
+  provider-reported usage exceeded its 100,000-token postcondition: 136,448
+  input tokens, including 100,352 cached input tokens, plus 3,442 output
+  tokens. Register one distinct retry with no prior candidate or search hint,
+  one attempt, and a 160,000-token postcondition that remains below the
+  original 187,013-token Erdős run.
+- Complete the separately registered retry in 72,454 observed tokens. The
+  frozen verifier independently confirms the exhaustive negative result over
+  `10428601..10428800`; Vela lands Receipt
+  `sha256:7400662ed6493aa6dc49a31c0d2ea1099a5380a272914b13325aaf088ba58b57`
+  as proposal `vpr_a845ae60ed695b93` through Defer with accepted-event delta
+  zero, and clean-clone reproduction matches.
+- Publish only the sanitized, read-only run projection at
+  `evidence/erdos/run_192b3bef-9d6e-49e5-b72d-7ae903b29d5e`; the raw worker
+  directory, credentials, and unrestricted logs remain outside the package.
+
 ## 0.6.2 - 2026-07-21
 
 - Ship the exact pending Sidon artifact reproduction command and independent

package/README.md

@@ -15,7 +15,7 @@
 </p>
 
 <p align="center">
-  <a href="https://app.vela.space/build-week">Live evidence</a> ·
+  <a href="https://app.vela.space/frontiers/sidon-sets/runs/run_f68e4cfc-e5c7-4c73-86cb-d79807c47ec4">Retained Sidon run</a> ·
   <a href="BUILD_WEEK.md">Build Week record</a> ·
   <a href="docs/MISSIONS.md">Missions</a> ·
   <a href="docs/RUN_RECORD.md">Run records</a> ·
@@ -29,17 +29,36 @@ Receipt through `vela land`.
 It cannot sign, accept a proposal, or make a scientific decision. Removing
 Canopus does not change accepted state or Vela replay.
 
-## Judge quickstart
+## Where Canopus fits
+
+The Vela product story has five steps:
+
+1. **Produce:** any suitable workbench may produce bounded work; Canopus is the
+   optional isolated producer for Codex.
+2. **Preserve:** the canonical frontier Git repository preserves the exact
+   source, artifacts, and history.
+3. **Check:** Vela replays the frontier and frozen verifiers fail closed.
+4. **Decide:** signed policy or one protected human decision determines
+   scientific standing.
+5. **Reuse:** the read-only Observatory and other replaceable readers help
+   people inspect, reproduce, and continue the work.
+
+Canopus owns **Produce** only. It reuses Git for preservation and Vela for
+checking, landing, replay, and authority; it does not become a second state
+store, verifier authority, or scientific workbench platform.
+
+## Inspect one retained example
 
 **20 seconds — inspect the real result:** open the anonymous
-[Build Week evidence page](https://app.vela.space/build-week) and follow
+[retained Sidon run](https://app.vela.space/frontiers/sidon-sets/runs/run_f68e4cfc-e5c7-4c73-86cb-d79807c47ec4)
+and follow
 Mission → GPT-5.6 → artifact → verifier → Receipt → Defer.
 
 **90 seconds — inspect the shipped product:**
 
 ```sh
-bunx @vela-science/canopus@0.6.2 --version
-bunx @vela-science/canopus@0.6.2 profile validate sidon-a24-at-least-7194-gpt56-v3
+bunx @vela-science/canopus@0.6.3 --version
+bunx @vela-science/canopus@0.6.3 profile validate sidon-a24-at-least-7194-gpt56-v3
 ```
 
 **Full workflow — reproduce without rebuilding Canopus:**
@@ -66,16 +85,16 @@ also rejects a bound collision injection. Neither command accepts the proposal.
 Run the provenance-backed public package with Bun:
 
 ```sh
-bunx @vela-science/canopus@0.6.2 --version
+bunx @vela-science/canopus@0.6.3 --version
 ```
 
 Inspect a clean frontier, then run its first ranked producer offer:
 
 ```sh
-bunx @vela-science/canopus@0.6.2 doctor /path/to/frontier
-bunx @vela-science/canopus@0.6.2 run /path/to/frontier --first
-bunx @vela-science/canopus@0.6.2 inspect latest
-bunx @vela-science/canopus@0.6.2 replay /path/to/run.json
+bunx @vela-science/canopus@0.6.3 doctor /path/to/frontier
+bunx @vela-science/canopus@0.6.3 run /path/to/frontier --first
+bunx @vela-science/canopus@0.6.3 inspect latest
+bunx @vela-science/canopus@0.6.3 replay /path/to/run.json
 ```
 
 Export a completed Defer run without publishing or mutating anything:
@@ -94,7 +113,7 @@ standing after verification; historical run v0 records remain inspectable.
 Use `--no-land` for a diagnostic mission that cannot change the source frontier:
 
 ```sh
-bunx @vela-science/canopus@0.6.2 run /path/to/frontier --first --no-land
+bunx @vela-science/canopus@0.6.3 run /path/to/frontier --first --no-land
 ```
 
 `doctor` binds the exact Vela, Codex, Git, frontier, packet, profile, and verifier
@@ -126,16 +145,16 @@ Advanced profile and withdrawal commands are documented in
 content-addressed contracts that bind the target, packet, objective, artifact
 types, worker, verifier, replay command, budgets, and landing ceiling.
 
-## OpenAI Build Week
+## Retained Build Week evidence
 
 Inspect the retained Mission → worker → artifact → verifier → Receipt → Defer
-chain on the [live evidence surface](https://app.vela.space/build-week). Exact
-commits, run roots, audit evidence, and nonclaims live in
+chain on the [exact Sidon run](https://app.vela.space/frontiers/sidon-sets/runs/run_f68e4cfc-e5c7-4c73-86cb-d79807c47ec4).
+Exact commits, run roots, audit evidence, and nonclaims live in
 [`BUILD_WEEK.md`](BUILD_WEEK.md).
 
 ## Development
 
-Requires Bun 1.3.12, Vela 0.912.0, Codex CLI 0.144.6, and Docker. The built
+Requires Bun 1.3.12, Vela 0.914.1, Codex CLI 0.145.0, and Docker. The built
 package also runs under Node 22 or 24; unsupported odd-numbered Node releases
 are rejected rather than silently treated as supported.
 

package/THIRD_PARTY.md

@@ -5,7 +5,7 @@ are in `LICENSE-APACHE` and `LICENSE-MIT`.
 
 ## Shipped npm package
 
-`@vela-science/canopus@0.6.2` has no runtime npm dependencies. Its packaged
+`@vela-science/canopus@0.6.3` has no runtime npm dependencies. Its packaged
 JavaScript uses only Node.js built-ins. The package also contains frozen
 mission data and verifier capsules produced for the bounded profiles described
 in `docs/MISSIONS.md`; their source and executable identities are bound by the

package/dist/src/product/doctor.d.ts

@@ -10,7 +10,7 @@ export interface ProductDoctorResult {
         git_commit: string;
         git_tree: string;
         event_log_root: string;
-        snapshot_root: string;
+        scientific_state_root: string;
         clean: boolean;
         strict_blockers: number;
     };

package/dist/src/product/doctor.js

@@ -7,7 +7,7 @@ import { sha256Bytes } from "../util/canonical.js";
 import { listProductProfiles, loadProductProfile, packagedWorkerProfile, stageProfileCapsule, } from "./profile.js";
 import { runNativeCustodyPreflight } from "./custody.js";
 import { runtimeIdentity } from "./runtime.js";
-import { CANOPUS_VERSION } from "./version.js";
+import { CANOPUS_VERSION, SUPPORTED_CODEX_VERSION, SUPPORTED_VELA_VERSION, } from "./version.js";
 async function jsonCommand(options) {
     const result = await options.runner({
         argv: options.argv,
@@ -120,8 +120,8 @@ export async function doctorProduct(options) {
             runtimeIdentity({ name: "vela", cwd: frontier, home: runtime, runner }),
             runtimeIdentity({ name: "git", cwd: frontier, home: runtime, runner }),
         ]);
-        if (vela.version !== "vela 0.912.0") {
-            throw new Error(`Canopus ${CANOPUS_VERSION} requires vela 0.912.0, observed ${vela.version}`);
+        if (vela.version !== `vela ${SUPPORTED_VELA_VERSION}`) {
+            throw new Error(`Canopus ${CANOPUS_VERSION} requires vela ${SUPPORTED_VELA_VERSION}, observed ${vela.version}`);
         }
         const [status, offer, gitStatus] = await Promise.all([
             jsonCommand({ runner, argv: [vela.binary, "status", ".", "--json"], cwd: frontier, home: runtime, label: "vela status" }),
@@ -156,7 +156,7 @@ export async function doctorProduct(options) {
                         git_commit: stringAt(gitState.commit, "vela status.git.commit", { min: 40, max: 64 }),
                         git_tree: stringAt(gitState.tree, "vela status.git.tree", { min: 40, max: 64 }),
                         event_log_root: sha256At(roots.event_log, "vela status.roots.event_log"),
-                        snapshot_root: sha256At(roots.snapshot, "vela status.roots.snapshot"),
+                        scientific_state_root: sha256At(roots.scientific_state_root, "vela status.roots.scientific_state_root"),
                         clean,
                         strict_blockers: nonnegative(integrity.blocker_count, "vela status.integrity.blocker_count"),
                     },
@@ -186,8 +186,9 @@ export async function doctorProduct(options) {
             runtimeIdentity({ name: "codex", cwd: frontier, home: runtime, runner }),
             runtimeIdentity({ name: "docker", cwd: frontier, home: runtime, runner }),
         ]);
-        if (codex.version !== "codex-cli 0.144.6") {
-            throw new Error(`registered worker requires codex-cli 0.144.6, observed ${codex.version}`);
+        if (codex.version !== `codex-cli ${SUPPORTED_CODEX_VERSION}`) {
+            throw new Error(`Canopus ${CANOPUS_VERSION} requires codex-cli ${SUPPORTED_CODEX_VERSION}, ` +
+                `observed ${codex.version}`);
         }
         const daemon = await runner({
             argv: [docker.binary, "info", "--format={{.ServerVersion}}"],
@@ -250,7 +251,7 @@ export async function doctorProduct(options) {
                     git_commit: stringAt(gitState.commit, "vela status.git.commit", { min: 40, max: 64 }),
                     git_tree: stringAt(gitState.tree, "vela status.git.tree", { min: 40, max: 64 }),
                     event_log_root: sha256At(roots.event_log, "vela status.roots.event_log"),
-                    snapshot_root: sha256At(roots.snapshot, "vela status.roots.snapshot"),
+                    scientific_state_root: sha256At(roots.scientific_state_root, "vela status.roots.scientific_state_root"),
                     clean,
                     strict_blockers: nonnegative(integrity.blocker_count, "vela status.integrity.blocker_count"),
                 },

package/dist/src/product/version.d.ts

@@ -1 +1,3 @@
 export declare const CANOPUS_VERSION: string;
+export declare const SUPPORTED_VELA_VERSION = "0.914.1";
+export declare const SUPPORTED_CODEX_VERSION = "0.145.0";

package/dist/src/product/version.js

@@ -4,3 +4,5 @@ if (typeof packageJson.version !== "string" || packageJson.version.length === 0)
     throw new Error("Canopus package version is missing");
 }
 export const CANOPUS_VERSION = packageJson.version;
+export const SUPPORTED_VELA_VERSION = "0.914.1";
+export const SUPPORTED_CODEX_VERSION = "0.145.0";

package/dist/src/vela/cli.d.ts

@@ -3,6 +3,7 @@ import type { ExecutionBindingV1, Mission, MissionRoots, StrictBaseline } from "
 import { type CommandRunner } from "../util/command.js";
 import type { LandResult, VelaCommandResponse, VelaInspection } from "./types.js";
 export type { CommandRunner } from "../util/command.js";
+export declare const DEFAULT_VELA_COMMAND_TIMEOUT_MS = 120000;
 export declare function retainedArtifactPath(repoRoot: string, frontier: string, digest: string): string;
 export declare class VelaClientError extends Error {
     readonly code: "command_failed" | "malformed_output" | "version_mismatch" | "root_mismatch" | "unexpected_route";

package/dist/src/vela/cli.js

@@ -3,6 +3,12 @@ import { GIT_OBJECT_RE, SHA256_RE, objectAt, relativePathAt, stringAt, } from ".
 import { MAX_COMMAND_ARGV, isolatedEnvironment, runCommand, } from "../util/command.js";
 import { canonicalJcs, sha256Bytes } from "../util/canonical.js";
 import { MAX_EXECUTABLE_BYTES, readBoundedRegularFile, sha256RegularFile } from "../util/files.js";
+// Real large frontiers can spend tens of seconds in Vela's recoverable
+// transaction preparation and derived-view materialization. Keep this well
+// below mission wall-time budgets while allowing the measured 38.6-second
+// Erdős work operation to reach its atomic commit instead of being killed in
+// Prepared state.
+export const DEFAULT_VELA_COMMAND_TIMEOUT_MS = 120_000;
 export function retainedArtifactPath(repoRoot, frontier, digest) {
     if (!/^sha256:[0-9a-f]{64}$/u.test(digest)) {
         throw new VelaClientError("malformed_output", "artifact digest is not sha256");
@@ -32,6 +38,13 @@ function parseJsonObject(stdout, command) {
         throw new VelaClientError("malformed_output", String(error));
     }
 }
+function usesCompactStatusProjection(version) {
+    const match = /^0\.(\d+)\.(\d+)$/u.exec(version);
+    if (match === null)
+        return false;
+    const minor = Number(match[1]);
+    return Number.isSafeInteger(minor) && minor >= 900 && minor <= 914;
+}
 function safeFailureMessage(value) {
     if (typeof value !== "string" || value.length === 0)
         return undefined;
@@ -321,7 +334,7 @@ export class VelaClient {
         this.#expectedSha256 = options.expectedSha256;
         this.#home = options.home;
         this.#maxOutputBytes = options.maxOutputBytes ?? 16 * 1024 * 1024;
-        this.#timeoutMs = options.timeoutMs ?? 30_000;
+        this.#timeoutMs = options.timeoutMs ?? DEFAULT_VELA_COMMAND_TIMEOUT_MS;
         // Deliberately do not accept caller-supplied environment entries. In
         // particular, this prevents a harness integration from forwarding human
         // key variables into the Vela control lane. Agent actors auto-mint only an
@@ -432,7 +445,7 @@ export class VelaClient {
         if (replay.source_hash !== undefined) {
             assertEqual(normalizeSha256(replay.source_hash, "vela check.replay.source_hash"), checkCurrent, "Vela source snapshot");
         }
-        const proof = version === "0.900.0" || version === "0.900.1" || version === "0.900.2" || version === "0.901.0" || version === "0.910.0" || version === "0.911.0" || version === "0.911.1" || version === "0.912.0"
+        const proof = usesCompactStatusProjection(version)
             ? {
                 ok: true,
                 command: "status_root_projection",

package/docs/MISSIONS.md

@@ -1,26 +1,12 @@
-# Mission roles
+# Missions
 
-Canopus Mission v0 runs one explicit role per mission. The role changes the worker
-instruction, not the trust boundary:
+Mission v1 is the current Canopus mission contract. Canopus owns only the
+**Produce** step in Vela's five-step product story: produce → preserve → check
+→ decide → reuse. The frontier Git repository preserves; Vela checks and
+governs standing; signed policy or a protected human decision decides; the
+Observatory and other replaceable readers support reuse.
 
-- `producer` constructs the smallest candidate or preserves a null result;
-- `adversary` seeks a concrete counterexample or narrows the claim;
-- `verifier` checks correspondence between the candidate and declared tests,
-  while the separate frozen executable remains the mechanical verifier;
-- `fidelity` checks that prose claims do not outrun frozen artifacts and
-  verifier facts.
-
-A research loop may fan these into separate missions against the same exact
-accepted roots. Each result lands its own Receipt and route. A repair mission
-names an immutable parent candidate, but a substantive downstream mission may
-inherit only state that Vela reports as accepted. Defer, a verifier pass, or a
-Canopus candidate digest is not an inheritance edge.
-
-This deliberately avoids a workflow DSL, agent society, or second graph. Git
-stores the bytes, Vela stores authority and accepted lineage, and Canopus is
-replaceable orchestration over those primitives.
-
-## Mission v1
+## Mission v1: current
 
 Mission v1 keeps the same four roles and authority boundary while adding a
 tool-enabled local worker. `mission prepare` selects the first ranked attack,
@@ -76,3 +62,33 @@ Vela policy derivation, strict replay, and third-party reproduction one shared
 pure verifier and claim-fidelity contract. A target-specific wrapper is kept
 only when Vela has no suitable verifier; it is not duplicated for presentation
 or convenience.
+
+## Mission roles
+
+One Mission v1 bundle runs one explicit role. The role changes the worker
+instruction, not the trust boundary:
+
+- `producer` constructs the smallest candidate or preserves a null result;
+- `adversary` seeks a concrete counterexample or narrows the claim;
+- `verifier` checks correspondence between the candidate and declared tests,
+  while the separate frozen executable remains the mechanical verifier; and
+- `fidelity` checks that prose claims do not outrun frozen artifacts and
+  verifier facts.
+
+A research loop may fan these into separate missions against the same exact
+accepted roots. Each result lands its own Receipt and route. A repair mission
+names an immutable parent candidate, but a substantive downstream mission may
+inherit only state that Vela reports as accepted. Defer, a verifier pass, or a
+Canopus candidate digest is not an inheritance edge.
+
+This deliberately avoids a workflow DSL, agent society, or second graph. Git
+stores the bytes, Vela stores authority and accepted lineage, and Canopus is
+replaceable orchestration over those primitives.
+
+## Mission v0: historical replay only
+
+Mission v0 is retained solely so frozen benchmark registrations and historical
+run records remain reproducible. It used the same four roles with a tool-free
+worker and the older macOS Seatbelt verifier manifest. Do not prepare new
+product missions with v0; use Mission v1. Historical v0 bytes and results remain
+unchanged.

package/docs/RELEASES.md

@@ -1,5 +1,77 @@
 # Release evidence
 
+## Canopus v0.6.3
+
+Version `0.6.3` is a narrow composition repair for released Vela `0.914.1`.
+It changes no mission, Receipt, verifier, policy, proposal, or authority
+contract. The release gate requires the exact installed Vela binary to pass
+work, authored Defer landing, accepted-event delta zero, retained-artifact
+binding, and clean-clone replay before publication. The current worker requires
+Codex CLI `0.145.0`; CI verifies the exact Linux package and executable digests,
+while every mission continues to bind its observed platform binary hash.
+The diagnostic projection now names Vela's `scientific_state_root` directly;
+the retired `snapshot_root` label is not carried forward into new output.
+The sole active Erdős 1056 profile is preregistered for the next
+non-overlapping range `10428601..10428800`. Its frozen ARM64 and x86-64
+verifiers reject a malformed candidate after recomputing the complete range;
+no model call or scientific landing is part of the registration commit.
+The first live attempt stopped during initialization because the 30-second
+Canopus Vela-command ceiling killed `vela work` while its recoverable journal
+was `Prepared`. A fresh disposable-clone measurement completed the same exact
+operation in 38.6 seconds. Canopus now uses a bounded 120-second control-command
+ceiling; the failed run remains non-authoritative evidence and the canonical
+frontier remained unchanged.
+The subsequent `gpt-5.6` compatibility probe reached the isolated engine only
+after a successful disposable work claim, then received an HTTP 400 before
+inference because ChatGPT-account Codex does not expose that model. The active
+registration uses the previously proven `gpt-5.4` worker and a new draft root;
+the failed run remains separate non-authoritative evidence.
+The first `gpt-5.4` run independently completed the bounded computation, but
+Canopus stopped it before verification or landing because provider-reported
+usage exceeded the frozen 100,000-token postcondition: 136,448 input tokens,
+including 100,352 cached input tokens, plus 3,442 output tokens. Run
+`run_6a11f27e-fddd-4963-94cf-23e8abc2e774` remains failed evidence; its
+candidate is not salvaged or supplied to the retry. A distinct one-attempt
+registration raises only the observed-token postcondition to 160,000, still
+below the original 187,013-token Erdős run.
+
+That distinct retry completed the full bounded path without semantic hints:
+
+- Run: `run_192b3bef-9d6e-49e5-b72d-7ae903b29d5e`
+- Model/runtime: `gpt-5.4` / Codex CLI `0.145.0`
+- Scope: every prime in the exact inclusive range `10428601..10428800`
+- Result: 13 primes checked; no factorial-residue fiber reached size 16; the
+  maximum was 11 at `p=10428703`, residue `8615683`
+- Observed usage: 72,454 tokens, below the separately registered 160,000-token
+  ceiling
+- Artifact:
+  `sha256:0547b0dba763c44b7c29f25407c66c3fe378ad64e164713d9c40a2caab96b088`
+- Frozen verifier executable:
+  `sha256:875a28177ef9b29d2480a8fe7906eddc3e809824190083abc885609555f8e52d`
+- Verifier output:
+  `sha256:aa19c8c445b550161ee14a95da82e1edcc2882dbd0e2880710d5a34d53bca597`
+- Receipt:
+  `sha256:7400662ed6493aa6dc49a31c0d2ea1099a5380a272914b13325aaf088ba58b57`
+- Proposal: `vpr_a845ae60ed695b93`
+- Route and authority effect: Defer; accepted-event delta zero
+- Clean-clone reproduction: matched
+- Sanitized public projection:
+  `sha256:8809e983e526a4065c626ae4b9c27032082fbdc87ddb508009d35e4a620b330d`
+- Publication bundle:
+  `sha256:d4d4121f790e00c41a5363f09eab76cc1764c94e4d7ae4e8f73a122f629282dc`
+- Canonical frontier landing commit:
+  `e9ae9d3dd2ef5cae18346ee892451a091159f232`
+
+The bounded negative result is evidence only; it neither proves the universal
+Erdős statement nor constitutes scientific acceptance. The exact proposal is
+pending human review, and its acceptance path remains blocked by the durable
+Engine gate because it has no independent retained attachment or surviving
+adversarial probe. The raw run directory remains local. Only the sanitized
+projection and its content-addressed manifest enter this repository.
+
+Release identities, package hashes, attestations, registry integrity, and the
+installed-package smoke are filled only after the exact tag workflow succeeds.
+
 ## Canopus v0.6.2
 
 Version `0.6.2` is the final Build Week distribution correction. It packages
@@ -9,7 +81,27 @@ ledger, immutable Receipt caveat reconciliation, and third-party notice that
 were added after `0.6.1`. It changes no runtime, protocol, Receipt, policy, or
 authority behavior.
 
-- Source/tag: `v0.6.2`
+- Source/tag: `43c1aa97165bd9c7e9b2dcbd232155f42ca8410c` / `v0.6.2`
+- Cross-platform CI, released-Vela composition, custody, verifier, and
+  installed-package smoke:
+  [run 29849463278](https://github.com/vela-science/vela-research-harness/actions/runs/29849463278)
+- CodeQL:
+  [run 29849462038](https://github.com/vela-science/vela-research-harness/actions/runs/29849462038)
+- OIDC publish, GitHub build attestation, npm provenance audit, and matching
+  GitHub release:
+  [run 29849601711](https://github.com/vela-science/vela-research-harness/actions/runs/29849601711)
+- Package SHA-256:
+  `7c82af47782c07c332f6b60020c9205da3d60132e970df0a3c7678545596a812`
+- npm shasum: `ee1f69bcaf616982af3d27bfb2a60cb243252f81`
+- npm integrity:
+  `sha512-mugVOz8ilh1VZ1S3A3BGS/2CowdplJd4qXTdi2AXNYOQCoJJ1/exOLlTw6BsU8FfGdgaASjxyJvq/+R+0015Aw==`
+- The npm and GitHub release tarballs are byte-identical. The GitHub
+  attestation verifies against the exact release workflow, tag, and source
+  digest.
+- A fresh `npm audit signatures --include-attestations` reports no invalid or
+  missing entries and verifies the npm signature plus SLSA provenance v1.
+- A clean registry install executed under Node `v24.14.0`, returned
+  `canopus 0.6.2`, and validated the exact Sidon v3 profile root.
 - Public package: <https://www.npmjs.com/package/@vela-science/canopus/v/0.6.2>
 - Matching release: <https://github.com/vela-science/vela-research-harness/releases/tag/v0.6.2>
 - Publication path: the repository release workflow validates the package on

package/evidence/erdos/run_192b3bef-9d6e-49e5-b72d-7ae903b29d5e/pending-commands.json

@@ -0,0 +1 @@
+{"authority":"none","commands":[{"authority":"read_only","command":"vela reproduce . --proposal vpr_a845ae60ed695b93 --json","purpose":"reproduce_pending_artifact"},{"authority":"read_only","command":"vela review show . vpr_a845ae60ed695b93 --json","purpose":"inspect_review_material"},{"authority":"evidence_only","command":"vela verify attach . <attachment.json> --proposal vpr_a845ae60ed695b93 --as verifier:<actor> --json","purpose":"retain_independent_verifier_evidence"}],"proposal_id":"vpr_a845ae60ed695b93","schema":"canopus.pending-commands.v1"}

package/evidence/erdos/run_192b3bef-9d6e-49e5-b72d-7ae903b29d5e/public-run.json

@@ -0,0 +1 @@
+{"activity":{"clean_clone_replay":"matched","verifier":"pass","worker":"success"},"artifact_roots":["sha256:0547b0dba763c44b7c29f25407c66c3fe378ad64e164713d9c40a2caab96b088","sha256:23938294de90988480724d89405e8e97e8c9427ec647ea1a6e67aed877df6d9b","sha256:a16d74ae1bbde4d126afd57f5217e023f528bd754f62c6b7d5e86a58e7787c88"],"authority":"read_only_projection","caveats":["The worker handed off without verifier authority; Canopus subsequently recorded the separate verifier outcome.","Declared verifier outcome: passed.","Canopus produced this record; it is not a human acceptance decision."],"claim":"Bounded exhaustive search completed for Erdős 1056 k=15 over primes in 10428601..10428800; produced the required artifact bytes. Verification remains pending and will be performed separately by the frozen Canopus verifier.","final":{"commit":"e9ae9d3dd2ef5cae18346ee892451a091159f232","event_log_root":"sha256:b430f080ef0ac992571e0777b7154a8ae3567d0e9dd7292d3ee36e3ed2e4d8cd","snapshot_root":"sha256:ec16ec12124084e9ecbe3e954faa78bde52761673b2e3057dca0cd7f3a563280"},"mission":{"digest":"sha256:5d16a95366a5dce79dd3f1b1ea873349ca52e86c7caab8e015e9377e3385b2e0","id":"mission_erdos1056_k15_range_10428601_10428800_native2_retry","model":"gpt-5.4","registration_kind":"profile","registration_name":"erdos1056-k15-10428601-10428800","registration_root":"sha256:7225998d661b711786e194e2b578233f8d5f0cef129d4d06af7156ff90b51734","target":"erdos:1056","target_packet_root":"sha256:351cf94d7a6bfee8f8abd386af54f8bfa7fcc2cd01cf5cc155cf0a981086fcc5"},"nonclaims":["Verifier success is not scientific acceptance.","The bounded result does not establish maximality or settle the broader scientific problem.","Canopus did not sign or perform a human decision."],"policy":{"accepted_state_delta":0,"proposal_id":"vpr_a845ae60ed695b93","route":"defer"},"receipt_root":"sha256:7400662ed6493aa6dc49a31c0d2ea1099a5380a272914b13325aaf088ba58b57","reproduction":{"commands":["git clone https://github.com/vela-science/erdos-frontier.git","cd erdos-frontier","git checkout e9ae9d3dd2ef5cae18346ee892451a091159f232","vela reproduce 'artifacts/erdos1056-k15-range-10428601-10428800.txt'"]},"run_id":"run_192b3bef-9d6e-49e5-b72d-7ae903b29d5e","schema":"canopus.public-run.v1","source":{"commit":"7028ab2ad85f0fa2aee4526098e474044459e4e6","event_log_root":"sha256:12daf8cc1e4f2777629ca953e081c99b2931a60b8245273b9085a5c0add53c3b","repository":"https://github.com/vela-science/erdos-frontier","snapshot_root":"sha256:7f6efe7edd5bb0cf5e1fcb31d0b0d8892aa1de9a680dc4355d8628addcb546f4"},"usage":{"attempts":1,"observed_tokens":72454,"research_elapsed_ms":281331,"research_processes":7},"verifier_root":"sha256:7d6ac5bc88a1ca3d879c05e4429f237d017cdfc58f4c837d5d011a77c66fd46d"}

package/evidence/erdos/run_192b3bef-9d6e-49e5-b72d-7ae903b29d5e/root-manifest.json

@@ -0,0 +1 @@
+{"authority":"none","files":{"pending-commands.json":"sha256:9430fe4db2aa0842b6e806fde292412ca9b679676d0487e9ae55296822e1f850","public-run.json":"sha256:8809e983e526a4065c626ae4b9c27032082fbdc87ddb508009d35e4a620b330d","web-import.json":"sha256:65eaba0e4af34be3bb868c292b5905f5b97eb6a7a56c52f541e706c65238e047"},"run_id":"run_192b3bef-9d6e-49e5-b72d-7ae903b29d5e","schema":"canopus.publication-manifest.v1"}

package/evidence/erdos/run_192b3bef-9d6e-49e5-b72d-7ae903b29d5e/web-import.json

@@ -0,0 +1 @@
+{"accepted_state_delta":0,"authority":"read_only","projection_path":"public-run.json","projection_root":"sha256:8809e983e526a4065c626ae4b9c27032082fbdc87ddb508009d35e4a620b330d","route":"defer","run_id":"run_192b3bef-9d6e-49e5-b72d-7ae903b29d5e","schema":"vela-web.canopus-import.v1"}

package/missions/erdos1056-k15-next/mission.draft.json

@@ -1,15 +1,15 @@
 {
-  "id": "mission_erdos1056_k15_range_10428401_10428600_native1",
+  "id": "mission_erdos1056_k15_range_10428601_10428800_native2_retry",
   "target": "auto",
   "frontier": ".",
   "actor": "agent:canopus-local",
   "role": "producer",
   "claim_type": "computational",
   "replayability": "exact",
-  "objective": "Perform one finite exhaustive search for an Erdős 1056 k=15 witness over every prime p in the exact inclusive range 10428401..10428600. Use a compiled C++ program, one prime at a time; a flat open-addressed table keyed by the factorial residue keeps this bounded computation inside the registered memory and time limits. For each prime, compute t! modulo p for every cut t in 0..p-1 and count every residue fiber. For each p choose its largest fiber, breaking a tie by the smallest residue. If any largest fiber has at least 16 cuts, stop at the first such prime and report status=witness. Otherwise report status=negative and the greatest multiplicity over the whole range, breaking ties by the earliest prime and then the smallest residue. In both cases list every increasing cut in the selected fiber. Produce exactly one UTF-8 artifact at artifacts/erdos1056-k15-range-10428401-10428600.txt with these newline-terminated lines in order: schema=canopus.erdos1056-k15-search.v1; status=witness or status=negative; problem=1056; k=15; range_start=10428401; range_end=10428600; primes_tested=<exact count>; max_multiplicity=<exact count>; best_p=<prime>; best_residue=<residue>; cuts=<comma-separated cuts>. Return engine status success only after the program completes the entire registered range and writes the exact artifact. This is an exact bounded computation, not a universal answer to Erdős 1056.",
+  "objective": "Perform one finite exhaustive search for an Erdős 1056 k=15 witness over every prime p in the exact inclusive range 10428601..10428800. Use a compiled C++ program, one prime at a time; a flat open-addressed table keyed by the factorial residue keeps this bounded computation inside the registered memory and time limits. For each prime, compute t! modulo p for every cut t in 0..p-1 and count every residue fiber. For each p choose its largest fiber, breaking a tie by the smallest residue. If any largest fiber has at least 16 cuts, stop at the first such prime and report status=witness. Otherwise report status=negative and the greatest multiplicity over the whole range, breaking ties by the earliest prime and then the smallest residue. In both cases list every increasing cut in the selected fiber. Produce exactly one UTF-8 artifact at artifacts/erdos1056-k15-range-10428601-10428800.txt with these newline-terminated lines in order: schema=canopus.erdos1056-k15-search.v1; status=witness or status=negative; problem=1056; k=15; range_start=10428601; range_end=10428800; primes_tested=<exact count>; max_multiplicity=<exact count>; best_p=<prime>; best_residue=<residue>; cuts=<comma-separated cuts>. Return engine status success only after the program completes the entire registered range and writes the exact artifact. This is an exact bounded computation, not a universal answer to Erdős 1056.",
   "completion_condition": "The independent frozen capsule recomputes the full exact range in a separate network-denied and write-denied container and byte-matches the single artifact.",
   "allowed_paths": [
-    "artifacts/erdos1056-k15-range-10428401-10428600.txt"
+    "artifacts/erdos1056-k15-range-10428601-10428800.txt"
   ],
   "budgets": {
     "max_research_wall_time_ms": 1800000,
@@ -18,7 +18,7 @@
     "max_prompt_bytes": 2097152,
     "max_artifact_bytes": 1048576,
     "max_attempts": 1,
-    "max_observed_tokens": 100000
+    "max_observed_tokens": 160000
   },
   "worker": {
     "model": "gpt-5.4"
@@ -26,7 +26,7 @@
   "verifier": {
     "argv": [
       "capsule/verifier",
-      "{artifact:artifacts/erdos1056-k15-range-10428401-10428600.txt}"
+      "{artifact:artifacts/erdos1056-k15-range-10428601-10428800.txt}"
     ],
     "cwd": "site",
     "timeout_ms": 300000,
@@ -34,7 +34,7 @@
     "capsule_path": "capsule/verifier"
   },
   "scientific_chain": {
-    "predicted_observable": "The frozen verifier independently obtains the same first witness or complete bounded-negative result for all primes in 10428401..10428600 and exits zero on the exact candidate bytes.",
-    "performed_test": "capsule/verifier artifacts/erdos1056-k15-range-10428401-10428600.txt"
+    "predicted_observable": "The frozen verifier independently obtains the same first witness or complete bounded-negative result for all primes in 10428601..10428800 and exits zero on the exact candidate bytes.",
+    "performed_test": "capsule/verifier artifacts/erdos1056-k15-range-10428601-10428800.txt"
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vela-science/canopus",
-  "version": "0.6.2",
+  "version": "0.6.3",
   "description": "A bounded, replaceable research harness over released Vela interfaces",
   "type": "module",
   "private": false,
@@ -53,8 +53,8 @@
     "dist/src/run.js",
     "dist/src/run.d.ts",
     "schemas",
-    "capsules/erdos1056-k15/bin/linux-arm64/10428401-10428600/verifier",
-    "capsules/erdos1056-k15/bin/linux-x86_64/10428401-10428600/verifier",
+    "capsules/erdos1056-k15/bin/linux-arm64/10428601-10428800/verifier",
+    "capsules/erdos1056-k15/bin/linux-x86_64/10428601-10428800/verifier",
     "capsules/formal-erdos-505-test-dim-one/verifier",
     "capsules/quantum-10-1-4/verifier.py",
     "capsules/sidon-a24/bin/linux-arm64/verifier",
@@ -64,6 +64,7 @@
     "runtime",
     "advisories",
     "evidence/build-week",
+    "evidence/erdos",
     "scripts/run-claim-fidelity-advisory.mjs",
     "scripts/run-hostile-native-custody-fixture.mjs",
     "scripts/run-hostile-verifier-fixture.mjs",

package/profiles/{erdos1056-k15-10428401-10428600.json → erdos1056-k15-10428601-10428800.json}

@@ -1,15 +1,15 @@
 {
   "schema": "canopus.profile.v2",
-  "name": "erdos1056-k15-10428401-10428600",
+  "name": "erdos1056-k15-10428601-10428800",
   "target": "erdos:1056",
   "target_packet_schema": "erdos-frontier.problem-work.v1",
   "draft": "missions/erdos1056-k15-next/mission.draft.json",
-  "draft_sha256": "sha256:1c8f580b052f3d6b12c2d7694870eff1f196e27653422b6310a41ce14e4984d3",
-  "objective_sha256": "sha256:34b546c81a3522cf98fc2cd5b0f0308b723069e534dd533f6babed4634086be3",
+  "draft_sha256": "sha256:31f0d178472b2eb904d081be09a78fdeb2f65091389e4b09650064e71f31c91f",
+  "objective_sha256": "sha256:b70c05cfe940c96610386c1abf51507e3282c2f96f3c6ef8ae85b1216a2f4b0a",
   "completion_condition_sha256": "sha256:4a4a06e2c867867a191af27900e96c23e677db2775783f1829c31e4867a7f270",
-  "allowed_artifacts_sha256": "sha256:70aff1cfbd41e2a8e9afccdfeaba4a95dd0356902a2592e1ebae031f9dcbb658",
-  "budgets_sha256": "sha256:26e3697f491461dd3073ebfb9960fcaf70e6412095fd4eeade7169fb79a4b070",
-  "replay_argv_sha256": "sha256:939ffff9ab670b28d3715e4bb26f42aa520de532e9a73328ac4be459f539a6b7",
+  "allowed_artifacts_sha256": "sha256:11c82c9b03ba9cb220187160fac0923a38a533a5d7f05cc6749eaadfafa98d90",
+  "budgets_sha256": "sha256:5457a393d492978d8f191aca42fde0bf95261d74d701ce7ecd1b99f6e0dcbc0c",
+  "replay_argv_sha256": "sha256:d39c48fc7f6fe2d052e15d3454fecbd7db81b6eb764b01fd3d80dc96393c146c",
   "landing": {
     "expected_routes": ["defer"],
     "max_accepted_delta": 0
@@ -18,15 +18,15 @@
     "darwin-arm64": {
       "worker_profile": "runtime/native-worker/config.toml",
       "worker_profile_sha256": "sha256:12b58762819481ad101e7a172a296224b6050a8a07a7431272e521a4102908da",
-      "verifier_capsule": "capsules/erdos1056-k15/bin/linux-arm64/10428401-10428600/verifier",
-      "verifier_capsule_sha256": "sha256:a6fc0d2ad4dd8e665474d6efd530e8a574880b7191d246b1c245d8cf4db175aa",
+      "verifier_capsule": "capsules/erdos1056-k15/bin/linux-arm64/10428601-10428800/verifier",
+      "verifier_capsule_sha256": "sha256:875a28177ef9b29d2480a8fe7906eddc3e809824190083abc885609555f8e52d",
       "verifier_image": "ghcr.io/vela-science/canopus-verifier@sha256:a6f354862f2a3f7d72eb99244c65fa8583c98b74e17e3d5ce6e31ef48aa16536"
     },
     "linux-x86_64": {
       "worker_profile": "runtime/native-worker/config-linux.toml",
       "worker_profile_sha256": "sha256:fddecc4b7458b91f6d55ae16b666d297ae7bcd1a2f5deeb6650dcea60fc0242c",
-      "verifier_capsule": "capsules/erdos1056-k15/bin/linux-x86_64/10428401-10428600/verifier",
-      "verifier_capsule_sha256": "sha256:3cdcb487db4907b63230548a7c7fd94d4be6acf003ca532971f9cf1650f19546",
+      "verifier_capsule": "capsules/erdos1056-k15/bin/linux-x86_64/10428601-10428800/verifier",
+      "verifier_capsule_sha256": "sha256:51fc4e682d7a7f8f30f5e0dc2584e17fe94a037d246ff402fbe5d5ca6b820dc8",
       "verifier_image": "ghcr.io/vela-science/canopus-verifier@sha256:a6f354862f2a3f7d72eb99244c65fa8583c98b74e17e3d5ce6e31ef48aa16536"
     }
   }