gargoyle-receipts 0.21.0.dev0__tar.gz → 0.22.0.dev0__tar.gz

{gargoyle_receipts-0.21.0.dev0/gargoyle_receipts.egg-info → gargoyle_receipts-0.22.0.dev0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gargoyle-receipts
-Version: 0.21.0.dev0
+Version: 0.22.0.dev0
 Summary: Signed, single-use, argument-bound receipts and human-approval holds for agent tool calls.
 Author: Justin LaPorte
 License-Expression: Apache-2.0
@@ -64,7 +64,7 @@ by whom, and what changed.
 
 ## Status
 
-Pre-release `0.21.0.dev0` on PyPI as `gargoyle-receipts`. Wire format
+Pre-release `0.22.0.dev0` on PyPI as `gargoyle-receipts`. Wire format
 `gargoyle/3`, evidence log `gargoyle-evidence/4`, witness
 `gargoyle-witness/1`; all three are specified in [SPEC.md](SPEC.md) and may
 still change before a first release.
@@ -91,7 +91,7 @@ against a fake Graph server); the OAuth broker for hosted connectors
 (deployed, metadata and redirect checks verified, no human sign-in through a
 connector yet).
 
-**Assurance.** 564 Python tests on Linux and Windows across Python 3.12,
+**Assurance.** 565 Python tests on Linux and Windows across Python 3.12,
 3.13 and 3.14, at dependency floors and at a lock file; a TypeScript suite
 that recomputes the conformance vectors byte for byte; two outside,
 model-driven security reviews on 2026-10-20 (ten findings, all fixed); the
@@ -682,6 +682,8 @@ keys (both at once when a pinned key is also set).
 | `GARGOYLE_APPROVERS_PATH`, `GARGOYLE_APPROVER_ROLE`, `GARGOYLE_APPROVER_GROUPS` | where enrolled approvers persist (default `approvers.json` beside the keys, with a `revoked` list, re-read when its content changes) and which Entra app role (default `Approver`) or groups may enroll, see every hold and the witness |
 | `GARGOYLE_HOLDS_PATH` | SQLite file for holds, grants, declines and plans, so a restart loses nothing a person is acting on (`gargoyle issuer` sets `holds.sqlite` beside the keys); `GET /health` reports `persistent` |
 | `GARGOYLE_MAX_OPEN_HOLDS` | how many held receipts and plans one principal may have waiting at once (default 20); the call over the cap is `REF_ISSUER_TOO_MANY_HOLDS` and nothing is stored |
+| `GARGOYLE_DECLINE_LIMIT`, `GARGOYLE_DECLINE_WINDOW_HOURS` | the decline cooldown: after this many declines of the same (principal, tool, path) within the window (defaults 2 and 24), the issuer refuses the next ask with `REF_ISSUER_DECLINED_RECENTLY` instead of holding it again, so an approver is not asked the same question a third time in a day; `0` disables |
+| `GARGOYLE_RECEIPT_TTL_SECONDS` | how long an issued receipt stays presentable (default 300); a held receipt's hold lives up to six times that, capped at an hour |
 | `GARGOYLE_ALLOW_SELF_APPROVAL` | `1` lets a person release their own call; by default the approver may be neither the hold's principal nor the party acted for (`REF_ISSUER_SELF_APPROVAL`). A grant for an expired hold is `REF_ISSUER_HOLD_EXPIRED` and the hold is dropped |
 | `GARGOYLE_WITNESS_PATH` | the issuer's signed, hash-chained record of every decision (`gargoyle issuer` sets `witness.jsonl` beside the keys) |
 | `GARGOYLE_HOLD_WEBHOOK_URL`, `GARGOYLE_APPROVE_URL` | POST a notice of every new hold (Slack incoming-webhook shape, `text` plus the hold) with a link to the console; notice only, the grant still needs the approver's key |

{gargoyle_receipts-0.21.0.dev0 → gargoyle_receipts-0.22.0.dev0}/README.md

@@ -26,7 +26,7 @@ by whom, and what changed.
 
 ## Status
 
-Pre-release `0.21.0.dev0` on PyPI as `gargoyle-receipts`. Wire format
+Pre-release `0.22.0.dev0` on PyPI as `gargoyle-receipts`. Wire format
 `gargoyle/3`, evidence log `gargoyle-evidence/4`, witness
 `gargoyle-witness/1`; all three are specified in [SPEC.md](SPEC.md) and may
 still change before a first release.
@@ -53,7 +53,7 @@ against a fake Graph server); the OAuth broker for hosted connectors
 (deployed, metadata and redirect checks verified, no human sign-in through a
 connector yet).
 
-**Assurance.** 564 Python tests on Linux and Windows across Python 3.12,
+**Assurance.** 565 Python tests on Linux and Windows across Python 3.12,
 3.13 and 3.14, at dependency floors and at a lock file; a TypeScript suite
 that recomputes the conformance vectors byte for byte; two outside,
 model-driven security reviews on 2026-10-20 (ten findings, all fixed); the
@@ -644,6 +644,8 @@ keys (both at once when a pinned key is also set).
 | `GARGOYLE_APPROVERS_PATH`, `GARGOYLE_APPROVER_ROLE`, `GARGOYLE_APPROVER_GROUPS` | where enrolled approvers persist (default `approvers.json` beside the keys, with a `revoked` list, re-read when its content changes) and which Entra app role (default `Approver`) or groups may enroll, see every hold and the witness |
 | `GARGOYLE_HOLDS_PATH` | SQLite file for holds, grants, declines and plans, so a restart loses nothing a person is acting on (`gargoyle issuer` sets `holds.sqlite` beside the keys); `GET /health` reports `persistent` |
 | `GARGOYLE_MAX_OPEN_HOLDS` | how many held receipts and plans one principal may have waiting at once (default 20); the call over the cap is `REF_ISSUER_TOO_MANY_HOLDS` and nothing is stored |
+| `GARGOYLE_DECLINE_LIMIT`, `GARGOYLE_DECLINE_WINDOW_HOURS` | the decline cooldown: after this many declines of the same (principal, tool, path) within the window (defaults 2 and 24), the issuer refuses the next ask with `REF_ISSUER_DECLINED_RECENTLY` instead of holding it again, so an approver is not asked the same question a third time in a day; `0` disables |
+| `GARGOYLE_RECEIPT_TTL_SECONDS` | how long an issued receipt stays presentable (default 300); a held receipt's hold lives up to six times that, capped at an hour |
 | `GARGOYLE_ALLOW_SELF_APPROVAL` | `1` lets a person release their own call; by default the approver may be neither the hold's principal nor the party acted for (`REF_ISSUER_SELF_APPROVAL`). A grant for an expired hold is `REF_ISSUER_HOLD_EXPIRED` and the hold is dropped |
 | `GARGOYLE_WITNESS_PATH` | the issuer's signed, hash-chained record of every decision (`gargoyle issuer` sets `witness.jsonl` beside the keys) |
 | `GARGOYLE_HOLD_WEBHOOK_URL`, `GARGOYLE_APPROVE_URL` | POST a notice of every new hold (Slack incoming-webhook shape, `text` plus the hold) with a link to the console; notice only, the grant still needs the approver's key |

{gargoyle_receipts-0.21.0.dev0 → gargoyle_receipts-0.22.0.dev0}/gargoyle/cli.py

@@ -817,6 +817,12 @@ def cmd_audit(args) -> int:
     from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PublicKey
     from gargoyle.execution import verify_chain
 
+    # A missing log is a usage error with the path named, not a traceback: a
+    # client whose evidence log was rotated or has not been written yet.
+    if getattr(args, "log", None) and not Path(args.log).is_file():
+        print("evidence log not found: %s (nothing recorded there yet, or the log was rotated under another name)"
+              % Path(args.log).resolve(), file=sys.stderr)
+        return 2
     out = _audit_trust_dir(args)
     if out is None:
         print("public-keys.json not found in %s%s: pass --out DIR, the folder that holds public-keys.json (and approvers.json), "
@@ -908,8 +914,9 @@ def cmd_audit(args) -> int:
             r = reconcile(entries, read_witness(args.witness), principal=principal, target_url=target)
             older = [f for f in r["findings"] if f["finding"] == "PREDATES_WITNESS"]
             before_log = [f for f in r["findings"] if f["finding"] == "PREDATES_EVIDENCE"]
+            in_flight = [f for f in r["findings"] if f["finding"] == "IN_FLIGHT"]
             for f in r["findings"]:
-                if f["finding"] in ("PREDATES_WITNESS", "PREDATES_EVIDENCE"):
+                if f["finding"] in ("PREDATES_WITNESS", "PREDATES_EVIDENCE", "IN_FLIGHT"):
                     continue
                 print("  FINDING %-22s %s" % (f["finding"], " ".join("%s=%s" % (k, str(v)[:40]) for k, v in f.items() if k != "finding")))
             if older:
@@ -920,7 +927,11 @@ def cmd_audit(args) -> int:
                 print("  note: %d receipt(s) the issuer issued to this principal predate this evidence log (first entry %s; %d of them held): "
                       "a log that began later cannot be asked about them. If the log was not meant to start then, that is the finding."
                       % (len(before_log), (r.get("log_start") or "?")[:19], held_n))
-            hard = len(r["findings"]) - len(older) - len(before_log)
+            if in_flight:
+                print("  note: %d receipt(s) issued after this log's last entry (%s) have no row yet: in flight when the log was read "
+                      "(this audit's own gated command, a call still held). Audit again later; one still missing then is MISSING_EVIDENCE."
+                      % (len(in_flight), (r.get("log_end") or "?")[:19]))
+            hard = len(r["findings"]) - len(older) - len(before_log) - len(in_flight)
             print("reconciled: %d issued by the issuer, %d in evidence, %d finding(s)%s"
                   % (r["issued"], r["evidence_with_receipt"], hard,
                      " (%d issued for other targets, not this gate's)" % r["issued_elsewhere"] if r.get("issued_elsewhere") else ""))

{gargoyle_receipts-0.21.0.dev0 → gargoyle_receipts-0.22.0.dev0}/gargoyle/doctor.py

@@ -177,6 +177,17 @@ def check_issuer(env: Dict[str, str], ctx: Context) -> Dict[str, Any]:
     if isinstance(head, dict):
         detail += ", witness seq %s" % head.get("seq")
     date = None
+    try:
+        date = r.headers.get("Date") if hasattr(r, "headers") else None
+    except Exception:
+        date = None
+    if h.get("enrolled_approvers") == 1:
+        # One browser key between every hold and its release: lost, re-enrolled
+        # or on leave, nothing is released until a second approver exists.
+        return {"check": Check("issuer", WARN, detail,
+                               "one approver enrolled: a lost or re-enrolled browser key, or an absence, leaves every hold waiting; enroll a second approver (a deputy role) and test a release by each"),
+                "health": h, "date": date}
+    date = None
     try:
         date = r.headers.get("Date") if hasattr(r, "headers") else None
     except Exception:

{gargoyle_receipts-0.21.0.dev0 → gargoyle_receipts-0.22.0.dev0}/gargoyle/evidence.py

@@ -127,29 +127,46 @@ def build_entry(*, seq: int, prev_sha256: str, kind: str, tool: str, args: Any,
     return entry
 
 
-def locked(lock_path: Any):
-    """An exclusive, blocking lock on `lock_path` (POSIX flock, Windows
-    byte-range lock), released on exit. Processes that share a file on one
-    workstation, the hook's PreToolUse and PostToolUse among them, hold it
-    across their read-modify-write so neither loses the other's update."""
+LOCK_WAIT_SECONDS = 60.0      # a lock not acquired in this long means a stuck holder; the caller fails closed
+
+
+def locked(lock_path: Any, wait_seconds: float = LOCK_WAIT_SECONDS):
+    """An exclusive lock on `lock_path` (POSIX flock, Windows byte-range
+    lock), released on exit. Processes that share a file on one workstation,
+    the hook's PreToolUse and PostToolUse among them, hold it across their
+    read-modify-write so neither loses the other's update. The wait is
+    bounded: a holder that never lets go (a hung process) raises OSError
+    after `wait_seconds` rather than hanging every later call, and a gate
+    that cannot record does not let the call through."""
     import contextlib
+    import time as _time
 
     @contextlib.contextmanager
     def hold():
         with open(lock_path, "a+b") as lock:
+            deadline = _time.monotonic() + wait_seconds
             try:
                 import fcntl
-                fcntl.flock(lock.fileno(), fcntl.LOCK_EX)
+                while True:
+                    try:
+                        fcntl.flock(lock.fileno(), fcntl.LOCK_EX | fcntl.LOCK_NB)
+                        break
+                    except OSError:
+                        if _time.monotonic() >= deadline:
+                            raise OSError("lock not acquired within %.0f s: %s (a stuck holder?)" % (wait_seconds, lock_path))
+                        _time.sleep(0.02)
                 unlock = lambda: fcntl.flock(lock.fileno(), fcntl.LOCK_UN)
             except ImportError:                       # Windows
                 import msvcrt
                 lock.seek(0)
                 while True:
                     try:
-                        msvcrt.locking(lock.fileno(), msvcrt.LK_LOCK, 1)   # retries about ten seconds, then raises
+                        msvcrt.locking(lock.fileno(), msvcrt.LK_NBLCK, 1)
                         break
                     except OSError:
-                        continue
+                        if _time.monotonic() >= deadline:
+                            raise OSError("lock not acquired within %.0f s: %s (a stuck holder?)" % (wait_seconds, lock_path))
+                        _time.sleep(0.02)
                 unlock = lambda: (lock.seek(0), msvcrt.locking(lock.fileno(), msvcrt.LK_UNLCK, 1))
             try:
                 yield

{gargoyle_receipts-0.21.0.dev0 → gargoyle_receipts-0.22.0.dev0}/gargoyle/reconcile.py

@@ -64,6 +64,12 @@ def reconcile(evidence: Iterable[Any], witness: Iterable[Any], *, principal: Opt
         # a log missing its head is a chain failure, and what the head would
         # have held stays MISSING_EVIDENCE.
         log_start = _parse(first.get("at"))
+    # The log's last entry: an issuance newer than it is a call whose evidence
+    # row the executor had not written when this log was read (the audit's own
+    # gated command, a call still waiting for its approver). Reported as
+    # IN_FLIGHT, information, not failure; the next audit settles it.
+    last = next((e for e in reversed(evidence) if isinstance(e, dict)), None)
+    log_end: Optional[datetime] = _parse(last.get("at")) if last is not None else None
     for e in evidence:
         if not isinstance(e, dict):
             continue
@@ -115,13 +121,18 @@ def reconcile(evidence: Iterable[Any], witness: Iterable[Any], *, principal: Opt
         at_w = _parse(w.get("at"))
         # Every issuance precedes its own evidence entry by a little; only one
         # older than the log's first entry by more than the window predates it.
-        kind = ("PREDATES_EVIDENCE" if (log_start is not None and at_w is not None
-                                        and (log_start - at_w).total_seconds() > window_seconds) else "MISSING_EVIDENCE")
+        if log_start is not None and at_w is not None and (log_start - at_w).total_seconds() > window_seconds:
+            kind = "PREDATES_EVIDENCE"
+        elif log_end is not None and at_w is not None and at_w > log_end:
+            kind = "IN_FLIGHT"
+        else:
+            kind = "MISSING_EVIDENCE"
         findings.append({"finding": kind, "decision_id": did, "tool": w.get("tool"), "principal": w.get("principal"),
                          "held": bool(w.get("held")), "at": w.get("at")})
-    hard = [f for f in findings if f["finding"] not in ("PREDATES_WITNESS", "PREDATES_EVIDENCE")]
+    hard = [f for f in findings if f["finding"] not in ("PREDATES_WITNESS", "PREDATES_EVIDENCE", "IN_FLIGHT")]
     return {"accepted": not hard, "findings": findings, "horizon": horizon.isoformat() if horizon else None,
             "log_start": log_start.isoformat() if log_start else None,
+            "log_end": log_end.isoformat() if log_end else None,
             "issued": len(issued), "evidence_with_receipt": len(seen_decisions), "issued_elsewhere": elsewhere}
 
 

{gargoyle_receipts-0.21.0.dev0 → gargoyle_receipts-0.22.0.dev0/gargoyle_receipts.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gargoyle-receipts
-Version: 0.21.0.dev0
+Version: 0.22.0.dev0
 Summary: Signed, single-use, argument-bound receipts and human-approval holds for agent tool calls.
 Author: Justin LaPorte
 License-Expression: Apache-2.0
@@ -64,7 +64,7 @@ by whom, and what changed.
 
 ## Status
 
-Pre-release `0.21.0.dev0` on PyPI as `gargoyle-receipts`. Wire format
+Pre-release `0.22.0.dev0` on PyPI as `gargoyle-receipts`. Wire format
 `gargoyle/3`, evidence log `gargoyle-evidence/4`, witness
 `gargoyle-witness/1`; all three are specified in [SPEC.md](SPEC.md) and may
 still change before a first release.
@@ -91,7 +91,7 @@ against a fake Graph server); the OAuth broker for hosted connectors
 (deployed, metadata and redirect checks verified, no human sign-in through a
 connector yet).
 
-**Assurance.** 564 Python tests on Linux and Windows across Python 3.12,
+**Assurance.** 565 Python tests on Linux and Windows across Python 3.12,
 3.13 and 3.14, at dependency floors and at a lock file; a TypeScript suite
 that recomputes the conformance vectors byte for byte; two outside,
 model-driven security reviews on 2026-10-20 (ten findings, all fixed); the
@@ -682,6 +682,8 @@ keys (both at once when a pinned key is also set).
 | `GARGOYLE_APPROVERS_PATH`, `GARGOYLE_APPROVER_ROLE`, `GARGOYLE_APPROVER_GROUPS` | where enrolled approvers persist (default `approvers.json` beside the keys, with a `revoked` list, re-read when its content changes) and which Entra app role (default `Approver`) or groups may enroll, see every hold and the witness |
 | `GARGOYLE_HOLDS_PATH` | SQLite file for holds, grants, declines and plans, so a restart loses nothing a person is acting on (`gargoyle issuer` sets `holds.sqlite` beside the keys); `GET /health` reports `persistent` |
 | `GARGOYLE_MAX_OPEN_HOLDS` | how many held receipts and plans one principal may have waiting at once (default 20); the call over the cap is `REF_ISSUER_TOO_MANY_HOLDS` and nothing is stored |
+| `GARGOYLE_DECLINE_LIMIT`, `GARGOYLE_DECLINE_WINDOW_HOURS` | the decline cooldown: after this many declines of the same (principal, tool, path) within the window (defaults 2 and 24), the issuer refuses the next ask with `REF_ISSUER_DECLINED_RECENTLY` instead of holding it again, so an approver is not asked the same question a third time in a day; `0` disables |
+| `GARGOYLE_RECEIPT_TTL_SECONDS` | how long an issued receipt stays presentable (default 300); a held receipt's hold lives up to six times that, capped at an hour |
 | `GARGOYLE_ALLOW_SELF_APPROVAL` | `1` lets a person release their own call; by default the approver may be neither the hold's principal nor the party acted for (`REF_ISSUER_SELF_APPROVAL`). A grant for an expired hold is `REF_ISSUER_HOLD_EXPIRED` and the hold is dropped |
 | `GARGOYLE_WITNESS_PATH` | the issuer's signed, hash-chained record of every decision (`gargoyle issuer` sets `witness.jsonl` beside the keys) |
 | `GARGOYLE_HOLD_WEBHOOK_URL`, `GARGOYLE_APPROVE_URL` | POST a notice of every new hold (Slack incoming-webhook shape, `text` plus the hold) with a link to the console; notice only, the grant still needs the approver's key |

{gargoyle_receipts-0.21.0.dev0 → gargoyle_receipts-0.22.0.dev0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "gargoyle-receipts"
-version = "0.21.0.dev0"
+version = "0.22.0.dev0"
 description = "Signed, single-use, argument-bound receipts and human-approval holds for agent tool calls."
 readme = "README.md"
 requires-python = ">=3.12"

{gargoyle_receipts-0.21.0.dev0 → gargoyle_receipts-0.22.0.dev0}/tests/test_doctor.py

@@ -53,7 +53,7 @@ class Http:
 
 ISSUER = "https://192.168.56.101:8443"
 HEALTH = {"ok": True, "policy": {"policy_id": "gargoyle.rules/1", "policy_sha256": "71145c21" + "0" * 56}, "entra": True,
-          "persistent": True, "pending_receipts": 0, "enrolled_approvers": 1, "witness_head": {"seq": 533, "entry_sha256": "ab" * 32}}
+          "persistent": True, "pending_receipts": 0, "enrolled_approvers": 2, "witness_head": {"seq": 533, "entry_sha256": "ab" * 32}}
 
 
 def _env(tmp_path, **over):
@@ -131,10 +131,14 @@ def test_issuer_tls_failure_points_at_requests_ca_bundle(tmp_path):
 
 
 def test_issuer_health_detail_and_date(tmp_path):
+    http = Http({ISSUER + "/health": Resp(200, dict(HEALTH, enrolled_approvers=1), {"Date": "Sun, 01 Nov 2026 20:35:12 GMT"})})
+    r = check_issuer(_env(tmp_path), _ctx(tmp_path, http))
+    # One enrolled approver is a warning: one browser key between every hold and its release.
+    assert r["check"].status == WARN and "rules 71145c21" in r["check"].detail and "witness seq 533" in r["check"].detail
+    assert "second approver" in r["check"].fix and r["date"].startswith("Sun")
     http = Http({ISSUER + "/health": Resp(200, HEALTH, {"Date": "Sun, 01 Nov 2026 20:35:12 GMT"})})
     r = check_issuer(_env(tmp_path), _ctx(tmp_path, http))
-    assert r["check"].status == PASS and "rules 71145c21" in r["check"].detail and "witness seq 533" in r["check"].detail
-    assert r["date"].startswith("Sun")
+    assert r["check"].status == PASS and r["date"].startswith("Sun")
 
 
 def test_clock_skew_levels(tmp_path):

{gargoyle_receipts-0.21.0.dev0 → gargoyle_receipts-0.22.0.dev0}/tests/test_evidence.py

@@ -209,3 +209,25 @@ def test_entries_name_the_client_and_older_versions_still_verify(tmp_path):
     assert not _well_formed(v4_missing)
     with pytest.raises(ValueError):
         build_entry(seq=1, prev_sha256=GENESIS, kind=REFUSED, tool="t", args={}, principal=PRINCIPAL, reason="x", client=7)
+
+
+def test_lock_wait_is_bounded(tmp_path):
+    # A holder that never lets go must not hang every later hook; the wait ends
+    # in an OSError the caller turns into a refusal.
+    import threading
+    from gargoyle.evidence import locked
+    lock_path = tmp_path / "audit.jsonl.lock"
+    held = threading.Event(); release = threading.Event()
+
+    def holder():
+        with locked(lock_path):
+            held.set(); release.wait(5)
+    t = threading.Thread(target=holder); t.start(); held.wait(5)
+    try:
+        with pytest.raises(OSError, match="not acquired"):
+            with locked(lock_path, wait_seconds=0.2):
+                pass
+    finally:
+        release.set(); t.join()
+    with locked(lock_path, wait_seconds=0.2):
+        pass

{gargoyle_receipts-0.21.0.dev0 → gargoyle_receipts-0.22.0.dev0}/tests/test_witness.py

@@ -114,6 +114,15 @@ def test_honest_evidence_reconciles_and_tampering_is_found(tmp_path):
     page = c.get("/witness?limit=1", headers=approver_h).json()
     assert [e["seq"] for e in page["entries"]] == [4] and page["seq"] == 4
     assert c.get("/witness?after=4", headers=approver_h).json() == {"entries": [], "seq": 4}
+    # An issuance newer than the log's last entry is in flight (the audit's own
+    # gated command, a call still held): information, settled by a later audit.
+    late = dict(witness[1], decision_id="just-issued", at=(datetime.now(timezone.utc) + timedelta(seconds=30)).isoformat())
+    r = reconcile(evidence, witness + [late], principal=PRINCIPAL)
+    assert r["accepted"] and [f["finding"] for f in r["findings"]] == ["IN_FLIGHT"] and r["log_end"]
+    # The same issuance older than the log's last entry is missing: its row had its chance.
+    early = dict(late, at=(datetime.now(timezone.utc) - timedelta(seconds=1)).isoformat())
+    r = reconcile(evidence, witness + [early], principal=PRINCIPAL)
+    assert not r["accepted"] and [f["finding"] for f in r["findings"]] == ["MISSING_EVIDENCE"]
     # Evidence from before the witness began is information, not a finding.
     old = dict(evidence[0], at="2026-01-01T00:00:00+00:00", receipt=dict(evidence[0]["receipt"], decision_id="before-the-witness"))
     r = reconcile(evidence + [old], witness, principal=PRINCIPAL)      # beside the real rows, not in place of one
@@ -139,7 +148,8 @@ def test_honest_evidence_reconciles_and_tampering_is_found(tmp_path):
                    at=(datetime.fromisoformat(evidence[0]["at"]) - timedelta(days=2)).isoformat())
     r = reconcile(evidence, witness + [ancient], principal=PRINCIPAL)
     assert r["accepted"] and [f["finding"] for f in r["findings"]] == ["PREDATES_EVIDENCE"] and r["log_start"] == evidence[0]["at"]
-    later = dict(ancient, decision_id="d-later", at=(datetime.fromisoformat(evidence[0]["at"]) + timedelta(seconds=1)).isoformat())
+    # Inside the log's span (before its last entry) and unrecorded: missing, not in flight.
+    later = dict(ancient, decision_id="d-later", at=(datetime.fromisoformat(evidence[-1]["at"]) - timedelta(microseconds=1)).isoformat())
     r = reconcile(evidence, witness + [later], principal=PRINCIPAL)
     assert not r["accepted"] and [f["finding"] for f in r["findings"]] == ["MISSING_EVIDENCE"]
 
@@ -211,6 +221,9 @@ def test_audit_names_a_missing_witness_or_folder_plainly(tmp_path, capsys):
     assert "pass --log" in capsys.readouterr().err
     assert main(["audit", "--out", str(out), "--check-tree", str(tmp_path)]) == 2
     assert "pass --log" in capsys.readouterr().err
+    # A log that is not there (rotated, or never written) is named, not a traceback.
+    assert main(["audit", "--log", str(tmp_path / "gone.jsonl"), "--out", str(out)]) == 2
+    assert "evidence log not found" in capsys.readouterr().err
     assert main(["audit", "--out", str(out)]) == 2
     assert "nothing to verify" in capsys.readouterr().err
     # The issuer creates the witness file at start, before any decision.