Dashboard › institutional-transition-lab › Distillation
b6003b8b-321c-45d2-a47f-169729eef956["lore_tm_v1_XP4_KORlSi9uFP7sqXHpUUKhttG_VgV_tBRa88sjUG0","lore_tm_v1_gQF6FMx54FNW1dtQAK2Ulp3-f9vs8rX2vES5qFxJ4UE","lore_tm_v1_H0yReVUEAZ2EWLzAcVNYVQdOQ5vXZlmhA87PjDsk2X4","lore_tm_v1_J2gKm0Fn2bLCB2_aZJaGr95Gc7L_YGvvFYJ62PuepeI","lore_tm_v1_4cMUgFBu8_2VSreSe-z9AHgdSvpFOLwSgihX_x3v8jI","lore_tm_v1_nuROoC3HVmKQj1uIpnt2MYraVTV4bin-QWON1ZjxVgU","lore_tm_v1_34qWkp5alAgboroXJNhA-7Qi3Fg56MbLNPYQNFE8lBc","lore_tm_v1_GH-EOTlDkRSkcsi_kpjG7P5blUtT-cVbAS9fMge2Wn8","lore_tm_v1_85-f_VTl5-YXcbtDvLTS04lbb28rdXaj6Sh75j2bw2s","lore_tm_v1_zqfzq_YIYFaWyYAjsVrugN8KTOe0Tx7HdbjI2rfSyEk","lore_tm_v1_gkmyZL6HsM4bK1VC8Welb0fR6qNPKz5HKGGcAfoR6Vw"]
Date: Sep 9, 2026
/usr/lib/python3.12/zipfile/__init__.py:1015-1112: ZipExtFile._update_crc() computes CRC only when _expected_crc is set and raises BadZipFile("Bad CRC-32 for file %r" % self.name) only once _eof is true; _read1() truncates decompressed output to self._left, sets EOF when declared uncompressed bytes are exhausted, and then updates CRC; _read2() reads at least MIN_READ_SIZE, caps reads at _compress_left, optionally decrypts data, and raises EOFError on an empty premature read.ZipExtFile.seek() inspected at /usr/lib/python3.12/zipfile/__init__.py:1121-1195: seeks are clamped to [0, _orig_file_size]; buffered seeks adjust _offset; forward seeks in uncompressed, unencrypted members directly move the underlying file and disable CRC checking by setting _expected_crc = None; backward seeks reset compressed position, CRC state, size counters, buffers, decompressor, EOF state, and decrypter before replaying reads; tell() derives position from _orig_file_size - _left - len(_readbuffer) + _offset./home/byk/Code/institutional-transition-lab/src/institution_lab/governance_adjudication.py defines archive limits MAX_ARTIFACT_BYTES = 32 * 1024 * 1024, MAX_ARCHIVE_MEMBERS = 128, MAX_ARCHIVE_MEMBER_BYTES = 16 * 1024 * 1024, and MAX_ARCHIVE_EXPANDED_BYTES = 64 * 1024 * 1024._verify_input_payloads() in /home/byk/Code/institutional-transition-lab/src/institution_lab/governance_adjudication.py:157-217 verifies whole-file SHA-256 pins before opening the artifact with zipfile.ZipFile(io.BytesIO(artifact)); rejects excessive member count, duplicate filenames, excessive summed declared ZipInfo.file_size, missing required members, and required members whose declared size exceeds MAX_ARCHIVE_MEMBER_BYTES; reads each required member with source.read(MAX_ARCHIVE_MEMBER_BYTES + 1) and compares it byte-for-byte against durable documents or coding_package bytes. Only zipfile.BadZipFile is translated to ValueError("artifact is not a valid ZIP archive")._read_regular_file() in /home/byk/Code/institutional-transition-lab/src/institution_lab/governance_adjudication.py:94-109 opens inputs with os.O_RDONLY | os.O_NONBLOCK | O_NOFOLLOW when available, requires stat.S_ISREG, rejects metadata or actual payload sizes above the configured bound, and reads at most max_bytes + 1._write_pinned_cli_inputs() in /home/byk/Code/institutional-transition-lab/tests/test_governance_adjudication.py:40-84 creates a two-member artifact containing documents.json and v1.2-adjudication-package.json, builds all 9 manifest pins, writes inputs.json, and monkeypatches FROZEN_INPUT_PINS to the generated manifest.{'id': 4611686018427387905, 'lc': 3, 'lp': 0, 'pb': 2, 'dict_size': 8388608}./home/byk/Code/institutional-transition-lab/tests/test_governance_adjudication.py found 4 specifically named frozen-artifact tests: test_input_manifest_rejects_files_not_from_pinned_artifact at line 729, test_input_manifest_rejects_duplicate_artifact_members at line 883, test_input_manifest_rejects_excessive_artifact_member_count at line 908, and test_committed_frozen_input_manifest_verifies at line 960./home/byk/Code/institutional-transition-lab/tests/test_governance_adjudication.py:683-951 cover: changed durable bytes rejected via documents_file_sha256; artifact/durable mismatch rejected as artifact member mismatch: documents.json; CLI verification resistant to a document-file swap; direct, symlink, and hardlink output aliases to each of 8 frozen inputs rejected without modifying the input; aliased outputs rejected; duplicate manifest key artifact_sha256 rejected while forcing an existing summary gate closed; non-object manifests rejected; duplicate documents.json members rejected; excessive artifact member count generated with exactly MAX_TEST_ARCHIVE_MEMBERS = 256 padding entries rejected; and FIFO inputs rejected without blocking, using a subprocess timeout of 1 second.b'bounded member\nbounded m' 1920 33 1 False 0 0xb58c09bd; b'zip-member-integrity\nzip' 2688 46 1 False 0 0xcf208d18; and b'\x00\x01\x02\x03\x04\x05\x06\x07\x08\t\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17' 2048 290 1 False 0 0x9f5edd58.4bca2fcd4b494d51c84dcd4d4a2de24a1ae58e7247b9a3dc51ee2877944b7b2e00 and 33 32 1920 0xb58c09bd./home/byk/Code/institutional-transition-lab/tests/test_governance_adjudication.py returned exactly 50 matches, including artifact construction at lines 52 and 65-70, pin checks around lines 636-640 and 683-773, duplicate-member coverage at lines 883-905, member-count coverage at lines 908-928, and committed artifact artifact-9642983578.zip at line 968.