{
  "contract": "changegate-gitlab-qc/v1",
  "gitlab": {
    "provider": "gitlab",
    "project_id": "87476475",
    "project_path": "midtown-intelligence-labs-group/changegate-releaseproof",
    "project_url": "https://gitlab.com/midtown-intelligence-labs-group/changegate-releaseproof",
    "commit_sha": "b22333d3b432a252f1f75966eb529ad509767d21",
    "branch": "review/releaseproof-delivery-20261017",
    "pipeline_source": "web",
    "pipeline_id": "2959586836",
    "pipeline_url": "https://gitlab.com/midtown-intelligence-labs-group/changegate-releaseproof/-/pipelines/2959586836",
    "job_id": "17261490878",
    "job_name": "releaseproof-contracts",
    "job_url": "https://gitlab.com/midtown-intelligence-labs-group/changegate-releaseproof/-/jobs/17261490878"
  },
  "outcome": "VALIDATION_COMPLETED",
  "exit_code": 0,
  "provenance": "RUNNER_CONTEXT_AND_CHECKOUT_RECORDED_NOT_SIGNED_ATTESTATION",
  "started_at": "2026-10-18T03:22:21.214Z",
  "commands": [
    {
      "id": "npm-install-pin",
      "command": [
        "npm",
        "install",
        "--global",
        "npm@11.19.0",
        "--ignore-scripts",
        "--no-audit",
        "--no-fund"
      ],
      "exit_code": 0,
      "signal": null,
      "spawn_error": null,
      "stdout": {
        "path": "work/gitlab-qc/contracts/npm-install-pin.stdout",
        "sha256": "0013fec2c58ea3288c31c049b2a484cb2d0f95b12bdccf43583909ec0abd0bfa",
        "byte_count": 27
      },
      "stderr": {
        "path": "work/gitlab-qc/contracts/npm-install-pin.stderr",
        "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
        "byte_count": 0
      }
    },
    {
      "id": "npm-version",
      "command": [
        "npm",
        "--version"
      ],
      "exit_code": 0,
      "signal": null,
      "spawn_error": null,
      "stdout": {
        "path": "work/gitlab-qc/contracts/npm-version.stdout",
        "sha256": "005206ab803f8881d8227540b7980b37e723b69a8849edb31734a90b7e7964e2",
        "byte_count": 8
      },
      "stderr": {
        "path": "work/gitlab-qc/contracts/npm-version.stderr",
        "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
        "byte_count": 0
      }
    },
    {
      "id": "native-regressions",
      "command": [
        "node",
        "--test",
        "releaseproof/gitlab-qc.test.mjs"
      ],
      "exit_code": 0,
      "signal": null,
      "spawn_error": null,
      "stdout": {
        "path": "work/gitlab-qc/contracts/native-regressions.stdout",
        "sha256": "1d37800e59ca92e16be1156f5f774673e8204d62780c8bbc20d51b7f04e77472",
        "byte_count": 2399
      },
      "stderr": {
        "path": "work/gitlab-qc/contracts/native-regressions.stderr",
        "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
        "byte_count": 0
      }
    },
    {
      "id": "report-contracts",
      "command": [
        "node",
        "--test",
        "releaseproof/report.test.mjs",
        "releaseproof/cli.test.mjs",
        "releaseproof/corrections.test.mjs",
        "releaseproof/output.test.mjs",
        "releaseproof/input-review.test.mjs",
        "releaseproof/unicode.test.mjs",
        "releaseproof/evidence-items.test.mjs",
        "releaseproof/html-provenance.test.mjs",
        "releaseproof/producer-compat.test.mjs",
        "releaseproof/audit-risk-review.test.mjs",
        "releaseproof/demo.test.mjs",
        "releaseproof/demo-page.test.mjs",
        "releaseproof/hosted-build.test.mjs",
        "releaseproof/duo-recording.test.mjs"
      ],
      "exit_code": 0,
      "signal": null,
      "spawn_error": null,
      "stdout": {
        "path": "work/gitlab-qc/contracts/report-contracts.stdout",
        "sha256": "5cdb290b7e18278cefe20d9c97ea12552fa26361d062571900020b6336530406",
        "byte_count": 63325
      },
      "stderr": {
        "path": "work/gitlab-qc/contracts/report-contracts.stderr",
        "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
        "byte_count": 0
      }
    },
    {
      "id": "version-contracts",
      "command": [
        "node",
        "--test",
        "releaseproof/version-compare.test.mjs",
        "releaseproof/version-simulation.test.mjs",
        "releaseproof/version-evidence-handoff.test.mjs"
      ],
      "exit_code": 0,
      "signal": null,
      "spawn_error": null,
      "stdout": {
        "path": "work/gitlab-qc/contracts/version-contracts.stdout",
        "sha256": "ad9815d9ab77639754aeab4b9018bbc156acd1e53d80dd5ffd56f2060a211f83",
        "byte_count": 7590
      },
      "stderr": {
        "path": "work/gitlab-qc/contracts/version-contracts.stderr",
        "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
        "byte_count": 0
      }
    },
    {
      "id": "staging-synthetic",
      "command": [
        "node",
        "--test",
        "releaseproof/staging-smoke.test.mjs",
        "releaseproof/staging-isolation.test.mjs",
        "releaseproof/staging-guards.test.mjs",
        "releaseproof/staging-oidc.test.mjs"
      ],
      "exit_code": 0,
      "signal": null,
      "spawn_error": null,
      "stdout": {
        "path": "work/gitlab-qc/contracts/staging-synthetic.stdout",
        "sha256": "e878dedda4c71e3f1cf35ebf9c73f688e0900573ae84c1567b97d277f020470f",
        "byte_count": 16231
      },
      "stderr": {
        "path": "work/gitlab-qc/contracts/staging-synthetic.stderr",
        "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
        "byte_count": 0
      }
    },
    {
      "id": "version-evidence",
      "command": [
        "node",
        "releaseproof/version-simulation.mjs",
        "work/version-simulation"
      ],
      "exit_code": 0,
      "signal": null,
      "spawn_error": null,
      "stdout": {
        "path": "work/gitlab-qc/contracts/version-evidence.stdout",
        "sha256": "dace399e74cedee8e6602ef7b68d8cf1e8cd11b602748f11c0079b2babcbb892",
        "byte_count": 79
      },
      "stderr": {
        "path": "work/gitlab-qc/contracts/version-evidence.stderr",
        "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
        "byte_count": 0
      }
    },
    {
      "id": "version-handoff",
      "command": [
        "node",
        "releaseproof/version-evidence-handoff-cli.mjs",
        "export",
        "--bundle",
        "work/version-simulation",
        "--out",
        "work/version-simulation-qc/duo-handoff"
      ],
      "exit_code": 0,
      "signal": null,
      "spawn_error": null,
      "stdout": {
        "path": "work/gitlab-qc/contracts/version-handoff.stdout",
        "sha256": "639e4efeb283c261648dffbde5740b40fdf37d2fd989c35a71011a5aa3b15e8c",
        "byte_count": 34
      },
      "stderr": {
        "path": "work/gitlab-qc/contracts/version-handoff.stderr",
        "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
        "byte_count": 0
      }
    },
    {
      "id": "report-inputs",
      "command": [
        "node",
        "releaseproof/write-example.mjs",
        "releaseproof-example"
      ],
      "exit_code": 0,
      "signal": null,
      "spawn_error": null,
      "stdout": {
        "path": "work/gitlab-qc/contracts/report-inputs.stdout",
        "sha256": "9dc91c5f399b4945c447c26e002c594c8fe8aad7aab2971761d9b3d42f02eed9",
        "byte_count": 61
      },
      "stderr": {
        "path": "work/gitlab-qc/contracts/report-inputs.stderr",
        "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
        "byte_count": 0
      }
    },
    {
      "id": "report-generation",
      "command": [
        "node",
        "releaseproof/cli.mjs",
        "--expected",
        "releaseproof-example/expected.json",
        "--packet",
        "releaseproof-example/packet.json",
        "--out",
        "releaseproof-output"
      ],
      "exit_code": 0,
      "signal": null,
      "spawn_error": null,
      "stdout": {
        "path": "work/gitlab-qc/contracts/report-generation.stdout",
        "sha256": "41c69c664f1ca7f3dc5b2f7ed940c902b6349bd7d660ea4195f52df63a693e7a",
        "byte_count": 102
      },
      "stderr": {
        "path": "work/gitlab-qc/contracts/report-generation.stderr",
        "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
        "byte_count": 0
      }
    },
    {
      "id": "missing-evidence",
      "command": [
        "node",
        "releaseproof/demo.mjs",
        "releaseproof-output/demo"
      ],
      "exit_code": 0,
      "signal": null,
      "spawn_error": null,
      "stdout": {
        "path": "work/gitlab-qc/contracts/missing-evidence.stdout",
        "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
        "byte_count": 0
      },
      "stderr": {
        "path": "work/gitlab-qc/contracts/missing-evidence.stderr",
        "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
        "byte_count": 0
      }
    }
  ],
  "not_run": [],
  "artifacts": [
    {
      "path": "work/version-simulation/WALKTHROUGH.md",
      "sha256": "7a3fb57447dc1aba5777648dbf281fa5da28bb36e7f7d615d6f41b5925fd8b00",
      "byte_count": 1256,
      "kind": "NEW_SYNTHETIC_EVIDENCE"
    },
    {
      "path": "work/version-simulation/corrected/comparison.json",
      "sha256": "3eba8ed22ad784b1b7a2c17e26d6603f2c5647cbe140a21396d2ca478bb27283",
      "byte_count": 1676,
      "kind": "NEW_SYNTHETIC_EVIDENCE"
    },
    {
      "path": "work/version-simulation/corrected.stderr",
      "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
      "byte_count": 0,
      "kind": "NEW_SYNTHETIC_EVIDENCE"
    },
    {
      "path": "work/version-simulation/corrected.stdout",
      "sha256": "4b271a07a1387239a4ecc2a724f5ea882af12920afc125f2860311b4c1dc2c57",
      "byte_count": 24,
      "kind": "NEW_SYNTHETIC_EVIDENCE"
    },
    {
      "path": "work/version-simulation/incomplete/comparison.json",
      "sha256": "86d8123be16d2ab2cd8431b0faf89dd25f445688e2697c5bf22de9f9206e1168",
      "byte_count": 1649,
      "kind": "NEW_SYNTHETIC_EVIDENCE"
    },
    {
      "path": "work/version-simulation/incomplete.stderr",
      "sha256": "d70c4f5f5995bcbae1fa7f3bec11e00424123ac5f7f157dec4f214083c9b7a3b",
      "byte_count": 31,
      "kind": "NEW_SYNTHETIC_EVIDENCE"
    },
    {
      "path": "work/version-simulation/incomplete.stdout",
      "sha256": "9ddb0a1ecbffef93ef2775e47df34a0c2c9f545ae612b8ce4660a24b1e6c20f3",
      "byte_count": 33,
      "kind": "NEW_SYNTHETIC_EVIDENCE"
    },
    {
      "path": "work/version-simulation/index.html",
      "sha256": "c71fde1d4914614ae58b812f4dba6e643ccea496bbd74ec0675a767777c7a87c",
      "byte_count": 12214,
      "kind": "NEW_SYNTHETIC_EVIDENCE"
    },
    {
      "path": "work/version-simulation/inputs/corrected.json",
      "sha256": "8ba897913fe4dedf6d4d14718d7bd61473bfade046aa1339650041a1bd59fa50",
      "byte_count": 378,
      "kind": "NEW_SYNTHETIC_EVIDENCE"
    },
    {
      "path": "work/version-simulation/inputs/expected.json",
      "sha256": "3d7d1f27a0d71ee5cbb49993875ff2dab5d63b0ea4cc15a0536d6f63ee7e90ca",
      "byte_count": 371,
      "kind": "NEW_SYNTHETIC_EVIDENCE"
    },
    {
      "path": "work/version-simulation/inputs/incomplete.json",
      "sha256": "1767e40407c6834d30ff105bd3318285988732fa7f4fb5eebfef36532776f293",
      "byte_count": 340,
      "kind": "NEW_SYNTHETIC_EVIDENCE"
    },
    {
      "path": "work/version-simulation/inputs/mismatch.json",
      "sha256": "f2d5b1cf13ed11825177eba77cb4da51acc76e312ea666032bd5cd634406de78",
      "byte_count": 378,
      "kind": "NEW_SYNTHETIC_EVIDENCE"
    },
    {
      "path": "work/version-simulation/mismatch/comparison.json",
      "sha256": "f3255b857911107a25309acfa0d64cb2f05285a1df86181c2cefa41b1286376f",
      "byte_count": 1671,
      "kind": "NEW_SYNTHETIC_EVIDENCE"
    },
    {
      "path": "work/version-simulation/mismatch.stderr",
      "sha256": "6f71de511f82fdee4ddb3305907992a56f8a143ced00e44f54d74971418e1996",
      "byte_count": 21,
      "kind": "NEW_SYNTHETIC_EVIDENCE"
    },
    {
      "path": "work/version-simulation/mismatch.stdout",
      "sha256": "5ee6d7ea8f87af3f86bc503ae94d8c0fb8f799ac4848b73d6aba577d61281938",
      "byte_count": 27,
      "kind": "NEW_SYNTHETIC_EVIDENCE"
    },
    {
      "path": "work/version-simulation/receipt.json",
      "sha256": "9fe9926657ff6888002735c8a4b9f0b8d954c2162f74563b0097cdfa7fc39f67",
      "byte_count": 5850,
      "kind": "NEW_SYNTHETIC_EVIDENCE"
    },
    {
      "path": "work/version-simulation-qc/duo-handoff/INTERPRETATION-PROMPT.txt",
      "sha256": "798b12892f652ec0c122e2aeeb30628630ff11752dff7de5aed561483232e78b",
      "byte_count": 1284,
      "kind": "NEW_SYNTHETIC_EVIDENCE"
    },
    {
      "path": "work/version-simulation-qc/duo-handoff/expected-response.json",
      "sha256": "d4f824ffeed21809d32c011cd0151d489d8d79743198cbd41f86718ff3c89b70",
      "byte_count": 3097,
      "kind": "NEW_SYNTHETIC_EVIDENCE"
    },
    {
      "path": "work/version-simulation-qc/duo-handoff/packet.json",
      "sha256": "74da25445ae625a6820e51371f0fb908251629af55afc3036b27431d031d968c",
      "byte_count": 5749,
      "kind": "NEW_SYNTHETIC_EVIDENCE"
    },
    {
      "path": "releaseproof-output/demo/WALKTHROUGH.md",
      "sha256": "907f1521ac65cd5daf1e8a14e30aabf580b85946267dc517c6e011a37fa64813",
      "byte_count": 2021,
      "kind": "NEW_SYNTHETIC_EVIDENCE"
    },
    {
      "path": "releaseproof-output/demo/index.html",
      "sha256": "be8f13843a53eadaadc5fff7c3f8376a9ec555ea76fcbc4d6f3f752243e80293",
      "byte_count": 14201,
      "kind": "NEW_SYNTHETIC_EVIDENCE"
    },
    {
      "path": "releaseproof-output/demo/negative-packet.json",
      "sha256": "2e79d0480d96c1c45af56cf3df99fb4b85755bda6f7a1c6543b2cfc65b9eb4af",
      "byte_count": 5185,
      "kind": "NEW_SYNTHETIC_EVIDENCE"
    },
    {
      "path": "releaseproof-output/demo/negative.stderr",
      "sha256": "570dd29f3d9b2fad21b1c0d47c674b65a733d2d8cfd9fab50057ee57e5a924b6",
      "byte_count": 22,
      "kind": "NEW_SYNTHETIC_EVIDENCE"
    },
    {
      "path": "releaseproof-output/demo/negative.stdout",
      "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
      "byte_count": 0,
      "kind": "NEW_SYNTHETIC_EVIDENCE"
    },
    {
      "path": "releaseproof-output/demo/producer.stderr",
      "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
      "byte_count": 0,
      "kind": "NEW_SYNTHETIC_EVIDENCE"
    },
    {
      "path": "releaseproof-output/demo/producer.stdout",
      "sha256": "9dc91c5f399b4945c447c26e002c594c8fe8aad7aab2971761d9b3d42f02eed9",
      "byte_count": 61,
      "kind": "NEW_SYNTHETIC_EVIDENCE"
    },
    {
      "path": "releaseproof-output/demo/receipt.json",
      "sha256": "9d9146aeee06b2dfa95b7c3b060942e4283500ae1c76f0d621c546f1fdf75f2c",
      "byte_count": 5210,
      "kind": "NEW_SYNTHETIC_EVIDENCE"
    },
    {
      "path": "releaseproof-output/demo/recovery-output/review.html",
      "sha256": "64edf70d5309ec7af2e31e05ff431a658252cd886eef449c1704ca6ea7227518",
      "byte_count": 7379,
      "kind": "NEW_SYNTHETIC_EVIDENCE"
    },
    {
      "path": "releaseproof-output/demo/recovery-output/review.json",
      "sha256": "370288924636c862be6d66e071f5a2a0a29e4cd3688f93e83686d36b04318d18",
      "byte_count": 4080,
      "kind": "NEW_SYNTHETIC_EVIDENCE"
    },
    {
      "path": "releaseproof-output/demo/recovery-packet.json",
      "sha256": "6b66febb7302ada3d3e91fb9e67b707bcdb9c5ddf69659074adf61cf2084aa40",
      "byte_count": 5282,
      "kind": "NEW_SYNTHETIC_EVIDENCE"
    },
    {
      "path": "releaseproof-output/demo/recovery.stderr",
      "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
      "byte_count": 0,
      "kind": "NEW_SYNTHETIC_EVIDENCE"
    },
    {
      "path": "releaseproof-output/demo/recovery.stdout",
      "sha256": "41c69c664f1ca7f3dc5b2f7ed940c902b6349bd7d660ea4195f52df63a693e7a",
      "byte_count": 102,
      "kind": "NEW_SYNTHETIC_EVIDENCE"
    },
    {
      "path": "releaseproof-output/demo/valid-input/expected.json",
      "sha256": "5e93dfe3ba96682bf480ca9dad6a0a65c461713dfac053be62bb919bd0b81067",
      "byte_count": 355,
      "kind": "NEW_SYNTHETIC_EVIDENCE"
    },
    {
      "path": "releaseproof-output/demo/valid-input/packet.json",
      "sha256": "6b66febb7302ada3d3e91fb9e67b707bcdb9c5ddf69659074adf61cf2084aa40",
      "byte_count": 5282,
      "kind": "NEW_SYNTHETIC_EVIDENCE"
    },
    {
      "path": "releaseproof-output/review.html",
      "sha256": "64edf70d5309ec7af2e31e05ff431a658252cd886eef449c1704ca6ea7227518",
      "byte_count": 7379,
      "kind": "NEW_SYNTHETIC_EVIDENCE"
    },
    {
      "path": "releaseproof-output/review.json",
      "sha256": "370288924636c862be6d66e071f5a2a0a29e4cd3688f93e83686d36b04318d18",
      "byte_count": 4080,
      "kind": "NEW_SYNTHETIC_EVIDENCE"
    },
    {
      "path": "releaseproof-example/expected.json",
      "sha256": "5e93dfe3ba96682bf480ca9dad6a0a65c461713dfac053be62bb919bd0b81067",
      "byte_count": 355,
      "kind": "NEW_SYNTHETIC_EVIDENCE"
    },
    {
      "path": "releaseproof-example/packet.json",
      "sha256": "6b66febb7302ada3d3e91fb9e67b707bcdb9c5ddf69659074adf61cf2084aa40",
      "byte_count": 5282,
      "kind": "NEW_SYNTHETIC_EVIDENCE"
    }
  ],
  "source_inputs": [
    {
      "path": ".gitlab-ci.yml",
      "sha256": "2667e3dea10a5e9f1e569e91f376b8e683016ab6d988555668920252c07778b4",
      "byte_count": 9448
    },
    {
      "path": "package.json",
      "sha256": "24af190062a7cd607dc9b06fce7de529a2bd19506a08b110239862fd9299949d",
      "byte_count": 1018
    },
    {
      "path": "package-lock.json",
      "sha256": "020c3c30055ed074ee388bbdcbb51a10289dc581086893df22b735738674a401",
      "byte_count": 252002
    },
    {
      "path": ".nvmrc",
      "sha256": "7e8a2fa94951112b894a3dbe3d05efef5e9263741fa49125f0a70f40fedab4cc",
      "byte_count": 8
    },
    {
      "path": ".npm-version",
      "sha256": "005206ab803f8881d8227540b7980b37e723b69a8849edb31734a90b7e7964e2",
      "byte_count": 8
    },
    {
      "path": "scripts/private-integration.test.mjs",
      "sha256": "ab4c543cc80a0deeae1dfd711b95ff49629e81c06892e69b7543dffb2b4eed44",
      "byte_count": 6875
    },
    {
      "path": "releaseproof/gitlab-qc.mjs",
      "sha256": "a38293d1cb82b63ef0cec282f2a204265e406608bca3a9e8b52c63cbd3c9c802",
      "byte_count": 11928
    },
    {
      "path": "releaseproof/gitlab-qc-plan.mjs",
      "sha256": "a158c2805946b19865b6240fed3a46239795a180f38db878738f0b421ba5133e",
      "byte_count": 6191
    },
    {
      "path": "releaseproof/hosted-smoke.mjs",
      "sha256": "f1da24a5a06a97af66f4ffaf027cb8c21900e6233d574cbd9960ff90b30c37e0",
      "byte_count": 30780
    },
    {
      "path": "public/releaseproof-duo-recording/evidence.json",
      "sha256": "11434e5dbb8eb90fa4a00161fc8026a43c2d62618e0797234faf7e20854b73c1",
      "byte_count": 2094
    },
    {
      "path": "public/releaseproof-duo-recording/response.json",
      "sha256": "1d3623d8221cc2d95d649e73732a819cd5708a3b51ef96b07698c1c74660cc69",
      "byte_count": 4939
    },
    {
      "path": "public/releaseproof-duo-recording/recording.json",
      "sha256": "039dd352a07070036779e0d8776407b76ff5e13e1bb3551359c9bcf67265e8bb",
      "byte_count": 2151
    }
  ],
  "historical_recording": {
    "session_id": 9631970,
    "flow_version": "1.2.0",
    "newly_invoked": false
  },
  "generated_evidence": "NEW_SYNTHETIC_BYTES_WITH_NATIVE_GITLAB_SIDECAR; github FIELDS REMAIN null",
  "advisory_snapshot": "NOT_ESTABLISHED: full and production audits are separate registry requests",
  "human_release": {
    "status": "PENDING",
    "approved": false
  },
  "deployment": {
    "authorized": false,
    "action": "NONE"
  },
  "gates": {
    "g0": "OPEN / NOT APPROVED",
    "g1": "CLOSED"
  },
  "finished_at": "2026-10-18T03:23:22.253Z"
}