OFFLINE / EXACT BYTES / NO DECISION

Inspect a delivery
without a browser.

Use the exact proposal readback and selected local files. The tool checks structure, digest bindings, matching check sets and local byte identity. It never submits acceptance or executes a supplied artifact.

NO JUDGMENT WHATSOEVER. Participant evaluation and standing effects are NONE.

Use the complete project

python3 scripts/concresca_delivery_check.py proposal.json \
  --artifact result.json \
  --evidence provider-evidence.json \
  --evidence requester-evidence.json \
  --output inspection.json

Run using the existing project Python environment. No dependency installation, browser unlock, credential handoff, human approval, scheduler, database change or new network route is required by this command. Paths select local files; URI fields inside the proposal are never opened.

The proposal input is an existing GET /api/matm/commons/work-proposals/{proposalId} response with ok: true, schemaVersion: concresca.work_proposal.v1 and a proposal object. A protected client owns authentication, exact resource selection, current readback, metering and custody. A plan or POST envelope is not this input.

The public workbench can also Download fresh snapshot for inspection from an explicitly selected delivered proposal. It performs three bounded GETs (contract, capabilities and proposal), clears the previous displayed result first, drops history from the exported projection and never substitutes an old payload after failure. The exported snapshot contains public participant metadata and selected terms. Keep it in the appropriate private context unless intentionally shared.

Read the result precisely

BYTES_MATCH means the selected artifact's hash and byte length match its declaration, all referenced evidence hashes have local matches, and no unreferenced evidence files were supplied. It does not mean that provider assertions are true, that described tests were rerun, or that requester acceptance was issued. A disputed result can have matching bytes.

BYTES_DIFFER identifies a main artifact mismatch. INCOMPLETE identifies missing artifact/evidence or unreferenced evidence. SOURCE_UNAVAILABLE suppresses non-delivered, withdrawn, expired or retention-expired material. Re-uploading an old snapshot cannot reveal later correction or withdrawal offline.

The exported concresca.delivery_byte_inspection.v1 report includes source/terms/delivery digests, source revision/state, artifact comparison, role-and-check-specific evidence matches and explicitly declared outcomes. It omits paths, filenames, participant identifiers, URIs and raw payloads. Predictable digests can identify predictable content; this is data minimization, not anonymization.

Every report records sourceAuthenticityVerified: false, currentRemoteStateVerified: false, checksExecuted: false and decisionSubmitted: false. Matching declared media type is not MIME sniffing or safe execution.

Automation exit codes

0: a byte-matching inspection report was written. 2: well-formed but incomplete/differing/unavailable result (report written), or invalid input (fixed error, no new report). 3: local I/O failure, including an existing output path. Inspect reportWritten in stdout/stderr rather than assuming a file was created.

The command refuses to overwrite an existing path. It writes complete JSON with mode 0600 and atomically links it into a new name. It is a local output helper, not a new durable custody or anti-rollback system. The caller must select a private, controlled parent directory; simultaneous adversarial changes to the parent are outside this boundary.

Bounded local processing

Proposal: 64 KiB, strict UTF-8, duplicate-key rejection, depth 16, no floats or nonfinite numbers. Files: 8 MiB each, 16 evidence files, 32 MiB cumulative; no archive expansion or artifact execution. The CLI validates the proposal before reading artifact/evidence files and skips them for an unavailable source. It refuses nonregular files, uses no-follow open on supported POSIX platforms and compares descriptor metadata around bounded reads. These checks do not prove immutable storage under an adversarial OS.

The browser makes no application network requests or persistent browser writes. Its result clears after edits, source replacement, hidden-page transitions and a 60-second observation deadline; downloads recompute the checks. Clearing the browser cannot recall previous downloads or guarantee memory erasure. Freshness of a local calculation is not freshness of an imported source.

The library also accepts locally computed {sha256, bytes} descriptors. Only callers that actually read the selected bytes may supply them as file observations; the library cannot authenticate an arbitrary digest. The CLI and browser compute descriptors themselves.

Exact sources and verification

For stand-alone use, save these source files together under their original .py names: concresca_delivery_check.py, concresca_work_plan.py, concresca_work_budget.py and concresca_work_client.py. They use the Python standard library for this offline operation. No contents are executed from a proposal or selected artifact.