{
  "kind": "captured-local-product-execution",
  "recordedAt": "2026-10-23T06:44:40.557Z",
  "product": "Tamperward",
  "version": "2.47.0",
  "sourceCommit": "362d8a6fe414eeba7e0381898a40baca7d3d9938",
  "baseline": "41fef38b42bc2f949a2fd8653a41ea1f79eea42e",
  "limitations": "Executed Tamperward CLI over a scripted disposable fixture. No model or live coding agent. No claim of semantic correctness, universal prevention, or hosted execution.",
  "fixture": {
    "original": "export const lineTotal = (price, quantity) => price * quantity;\n",
    "faulty": "export const lineTotal = (price, quantity) => price;\n",
    "tests": "import test from 'node:test';\nimport assert from 'node:assert/strict';\nimport {lineTotal} from '../src/total.js';\ntest('one item',()=>assert.equal(lineTotal(20,1),20));\ntest('three items',()=>assert.equal(lineTotal(20,3),60));\n"
  },
  "cases": [
    {
      "id": "baseline",
      "label": "Original implementation and original checks",
      "command": "node tamperward verify --base 41fef38b42bc2f949a2fd8653a41ea1f79eea42e --json --cwd <fixture>",
      "exitCode": 0,
      "stdout": "{\"schema_version\":1,\"verdict\":\"VERIFIED\",\"base\":\"41fef38b42bc2f949a2fd8653a41ea1f79eea42e\",\"adjudicated_tree\":\"94b6a8784e881ca315300cb98497f2c9de5d149d58de09827b6640c2244d12a9\",\"command\":\"node --test test/total.test.js\",\"budget_secs\":15,\"visible\":{\"exit\":0,\"secs\":0,\"diagnostics\":{\"stdout\":{\"captured_bytes\":169,\"retained_bytes\":169,\"truncated\":false},\"stderr\":{\"captured_bytes\":0,\"retained_bytes\":0,\"truncated\":false}}},\"pristine\":{\"exit\":0,\"secs\":0,\"diagnostics\":{\"stdout\":{\"captured_bytes\":169,\"retained_bytes\":169,\"truncated\":false},\"stderr\":{\"captured_bytes\":0,\"retained_bytes\":0,\"truncated\":false}}},\"protected_restored\":2,\"added_protected_removed\":0,\"filesystem_case_sensitive\":true,\"verifier_backend\":{\"kind\":\"local\",\"trust\":\"checkpointed-local\",\"available\":true},\"dependency_environment\":{\"status\":\"none\",\"roots\":[],\"fingerprint\":\"738aa82b627c9facb5605bf75df7f872bdcded56760ff8db690e405cd7fa8235\"},\"oracle_assurance\":{\"level\":\"suite-exit-only\",\"semantic_isolation\":false,\"candidate_code_executes_in_oracle_process\":true,\"limitation\":\"candidate source executes inside the configured suite process and may terminate or interpose on that in-process oracle; isolated-container is execution-domain isolation, not semantic/oracle isolation\"}}\n",
      "stderr": "verify: visible suite running (0s; 0 output bytes captured)\nverify: pristine suite running (0s; 0 output bytes captured)\n",
      "result": {
        "schema_version": 1,
        "verdict": "VERIFIED",
        "base": "41fef38b42bc2f949a2fd8653a41ea1f79eea42e",
        "adjudicated_tree": "94b6a8784e881ca315300cb98497f2c9de5d149d58de09827b6640c2244d12a9",
        "command": "node --test test/total.test.js",
        "budget_secs": 15,
        "visible": {
          "exit": 0,
          "secs": 0,
          "diagnostics": {
            "stdout": {
              "captured_bytes": 169,
              "retained_bytes": 169,
              "truncated": false
            },
            "stderr": {
              "captured_bytes": 0,
              "retained_bytes": 0,
              "truncated": false
            }
          }
        },
        "pristine": {
          "exit": 0,
          "secs": 0,
          "diagnostics": {
            "stdout": {
              "captured_bytes": 169,
              "retained_bytes": 169,
              "truncated": false
            },
            "stderr": {
              "captured_bytes": 0,
              "retained_bytes": 0,
              "truncated": false
            }
          }
        },
        "protected_restored": 2,
        "added_protected_removed": 0,
        "filesystem_case_sensitive": true,
        "verifier_backend": {
          "kind": "local",
          "trust": "checkpointed-local",
          "available": true
        },
        "dependency_environment": {
          "status": "none",
          "roots": [],
          "fingerprint": "738aa82b627c9facb5605bf75df7f872bdcded56760ff8db690e405cd7fa8235"
        },
        "oracle_assurance": {
          "level": "suite-exit-only",
          "semantic_isolation": false,
          "candidate_code_executes_in_oracle_process": true,
          "limitation": "candidate source executes inside the configured suite process and may terminate or interpose on that in-process oracle; isolated-container is execution-domain isolation, not semantic/oracle isolation"
        }
      }
    },
    {
      "id": "change-check",
      "label": "Protected test change",
      "command": "node tamperward check --diff 41fef38b42bc2f949a2fd8653a41ea1f79eea42e...HEAD --json --cwd <fixture>",
      "exitCode": 1,
      "stdout": "{\n  \"findings\": [\n    {\n      \"rule\": \"test-deletion\",\n      \"severity\": \"block\",\n      \"file\": \"test/total.test.js\",\n      \"message\": \"Test blocks removed: 2 → 1 it()/test() in this spec (each-table rows count as tests).\",\n      \"evidence\": \"1 test block(s) removed from test/total.test.js\",\n      \"remediation\": \"Keep the assertions and fix the code. Removing test blocks to go green is the tamper.\",\n      \"signoff\": {\n        \"required\": true,\n        \"command\": \"tamperward allow test-deletion --file test/total.test.js --reason \\\"...\\\"\"\n      }\n    }\n  ],\n  \"scanned\": 2,\n  \"ignoredFiles\": 0,\n  \"summary\": {\n    \"block\": 1,\n    \"warn\": 0\n  },\n  \"schema_version\": 1\n}\n",
      "stderr": "",
      "result": {
        "findings": [
          {
            "rule": "test-deletion",
            "severity": "block",
            "file": "test/total.test.js",
            "message": "Test blocks removed: 2 → 1 it()/test() in this spec (each-table rows count as tests).",
            "evidence": "1 test block(s) removed from test/total.test.js",
            "remediation": "Keep the assertions and fix the code. Removing test blocks to go green is the tamper.",
            "signoff": {
              "required": true,
              "command": "tamperward allow test-deletion --file test/total.test.js --reason \"...\""
            }
          }
        ],
        "scanned": 2,
        "ignoredFiles": 0,
        "summary": {
          "block": 1,
          "warn": 0
        },
        "schema_version": 1
      }
    },
    {
      "id": "masked",
      "label": "Candidate green; trusted checks fail",
      "command": "node tamperward verify --base 41fef38b42bc2f949a2fd8653a41ea1f79eea42e --json --cwd <fixture>",
      "exitCode": 1,
      "stdout": "{\"schema_version\":1,\"verdict\":\"MASKED_FAILURE\",\"base\":\"41fef38b42bc2f949a2fd8653a41ea1f79eea42e\",\"adjudicated_tree\":\"38ef761f4354257d2156f0e0b1ae0bdf2d38ec04ac62941fb53fa351f4c85f75\",\"command\":\"node --test test/total.test.js\",\"budget_secs\":15,\"visible\":{\"exit\":0,\"secs\":0,\"diagnostics\":{\"stdout\":{\"captured_bytes\":140,\"retained_bytes\":140,\"truncated\":false},\"stderr\":{\"captured_bytes\":0,\"retained_bytes\":0,\"truncated\":false}}},\"pristine\":{\"exit\":1,\"secs\":0,\"diagnostics\":{\"stdout\":{\"captured_bytes\":974,\"retained_bytes\":974,\"truncated\":false,\"tail\":\"✔ one item (0.90752ms)\\n✖ three items (0.890514ms)\\nℹ tests 2\\nℹ suites 0\\nℹ pass 1\\nℹ fail 1\\nℹ cancelled 0\\nℹ skipped 0\\nℹ todo 0\\nℹ duration_ms 88.095562\\n\\n✖ failing tests:\\n\\ntest at test/total.test.js:5:1\\n✖ three items (0.890514ms)\\n  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:\\n  \\n  20 !== 60\\n  \\n      at TestContext.<anonymous> (file:///tmp/tw-verify-pri-aCMCBF/t/test/total.test.js:5:31)\\n      at Test.runInAsyncScope (node:async_hooks:227:14)\\n      at Test.run (node:internal/test_runner/test:1382:25)\\n      at Test.processPendingSubtests (node:internal/test_runner/test:960:18)\\n      at Test.postRun (node:internal/test_runner/test:1522:19)\\n      at Test.run (node:internal/test_runner/test:1447:12)\\n      at async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3) {\\n    generatedMessage: true,\\n    code: 'ERR_ASSERTION',\\n    actual: 20,\\n    expected: 60,\\n    operator: 'strictEqual',\\n    diff: 'simple'\\n  }\\n\"},\"stderr\":{\"captured_bytes\":0,\"retained_bytes\":0,\"truncated\":false}}},\"protected_restored\":2,\"added_protected_removed\":0,\"filesystem_case_sensitive\":true,\"verifier_backend\":{\"kind\":\"local\",\"trust\":\"checkpointed-local\",\"available\":true},\"dependency_environment\":{\"status\":\"none\",\"roots\":[],\"fingerprint\":\"738aa82b627c9facb5605bf75df7f872bdcded56760ff8db690e405cd7fa8235\"},\"oracle_assurance\":{\"level\":\"suite-exit-only\",\"semantic_isolation\":false,\"candidate_code_executes_in_oracle_process\":true,\"limitation\":\"candidate source executes inside the configured suite process and may terminate or interpose on that in-process oracle; isolated-container is execution-domain isolation, not semantic/oracle isolation\"}}\n",
      "stderr": "verify: visible suite running (0s; 0 output bytes captured)\nverify: pristine suite running (0s; 0 output bytes captured)\n",
      "result": {
        "schema_version": 1,
        "verdict": "MASKED_FAILURE",
        "base": "41fef38b42bc2f949a2fd8653a41ea1f79eea42e",
        "adjudicated_tree": "38ef761f4354257d2156f0e0b1ae0bdf2d38ec04ac62941fb53fa351f4c85f75",
        "command": "node --test test/total.test.js",
        "budget_secs": 15,
        "visible": {
          "exit": 0,
          "secs": 0,
          "diagnostics": {
            "stdout": {
              "captured_bytes": 140,
              "retained_bytes": 140,
              "truncated": false
            },
            "stderr": {
              "captured_bytes": 0,
              "retained_bytes": 0,
              "truncated": false
            }
          }
        },
        "pristine": {
          "exit": 1,
          "secs": 0,
          "diagnostics": {
            "stdout": {
              "captured_bytes": 974,
              "retained_bytes": 974,
              "truncated": false,
              "tail": "✔ one item (0.90752ms)\n✖ three items (0.890514ms)\nℹ tests 2\nℹ suites 0\nℹ pass 1\nℹ fail 1\nℹ cancelled 0\nℹ skipped 0\nℹ todo 0\nℹ duration_ms 88.095562\n\n✖ failing tests:\n\ntest at test/total.test.js:5:1\n✖ three items (0.890514ms)\n  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:\n  \n  20 !== 60\n  \n      at TestContext.<anonymous> (file:///tmp/tw-verify-pri-aCMCBF/t/test/total.test.js:5:31)\n      at Test.runInAsyncScope (node:async_hooks:227:14)\n      at Test.run (node:internal/test_runner/test:1382:25)\n      at Test.processPendingSubtests (node:internal/test_runner/test:960:18)\n      at Test.postRun (node:internal/test_runner/test:1522:19)\n      at Test.run (node:internal/test_runner/test:1447:12)\n      at async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3) {\n    generatedMessage: true,\n    code: 'ERR_ASSERTION',\n    actual: 20,\n    expected: 60,\n    operator: 'strictEqual',\n    diff: 'simple'\n  }\n"
            },
            "stderr": {
              "captured_bytes": 0,
              "retained_bytes": 0,
              "truncated": false
            }
          }
        },
        "protected_restored": 2,
        "added_protected_removed": 0,
        "filesystem_case_sensitive": true,
        "verifier_backend": {
          "kind": "local",
          "trust": "checkpointed-local",
          "available": true
        },
        "dependency_environment": {
          "status": "none",
          "roots": [],
          "fingerprint": "738aa82b627c9facb5605bf75df7f872bdcded56760ff8db690e405cd7fa8235"
        },
        "oracle_assurance": {
          "level": "suite-exit-only",
          "semantic_isolation": false,
          "candidate_code_executes_in_oracle_process": true,
          "limitation": "candidate source executes inside the configured suite process and may terminate or interpose on that in-process oracle; isolated-container is execution-domain isolation, not semantic/oracle isolation"
        }
      }
    },
    {
      "id": "legitimate",
      "label": "Correct implementation with original checks",
      "command": "node tamperward verify --base 41fef38b42bc2f949a2fd8653a41ea1f79eea42e --json --cwd <fixture>",
      "exitCode": 0,
      "stdout": "{\"schema_version\":1,\"verdict\":\"VERIFIED\",\"base\":\"41fef38b42bc2f949a2fd8653a41ea1f79eea42e\",\"adjudicated_tree\":\"94b6a8784e881ca315300cb98497f2c9de5d149d58de09827b6640c2244d12a9\",\"command\":\"node --test test/total.test.js\",\"budget_secs\":15,\"visible\":{\"exit\":0,\"secs\":0,\"diagnostics\":{\"stdout\":{\"captured_bytes\":169,\"retained_bytes\":169,\"truncated\":false},\"stderr\":{\"captured_bytes\":0,\"retained_bytes\":0,\"truncated\":false}}},\"pristine\":{\"exit\":0,\"secs\":0,\"diagnostics\":{\"stdout\":{\"captured_bytes\":170,\"retained_bytes\":170,\"truncated\":false},\"stderr\":{\"captured_bytes\":0,\"retained_bytes\":0,\"truncated\":false}}},\"protected_restored\":2,\"added_protected_removed\":0,\"filesystem_case_sensitive\":true,\"verifier_backend\":{\"kind\":\"local\",\"trust\":\"checkpointed-local\",\"available\":true},\"dependency_environment\":{\"status\":\"none\",\"roots\":[],\"fingerprint\":\"738aa82b627c9facb5605bf75df7f872bdcded56760ff8db690e405cd7fa8235\"},\"oracle_assurance\":{\"level\":\"suite-exit-only\",\"semantic_isolation\":false,\"candidate_code_executes_in_oracle_process\":true,\"limitation\":\"candidate source executes inside the configured suite process and may terminate or interpose on that in-process oracle; isolated-container is execution-domain isolation, not semantic/oracle isolation\"}}\n",
      "stderr": "verify: visible suite running (0s; 0 output bytes captured)\nverify: pristine suite running (0s; 0 output bytes captured)\n",
      "result": {
        "schema_version": 1,
        "verdict": "VERIFIED",
        "base": "41fef38b42bc2f949a2fd8653a41ea1f79eea42e",
        "adjudicated_tree": "94b6a8784e881ca315300cb98497f2c9de5d149d58de09827b6640c2244d12a9",
        "command": "node --test test/total.test.js",
        "budget_secs": 15,
        "visible": {
          "exit": 0,
          "secs": 0,
          "diagnostics": {
            "stdout": {
              "captured_bytes": 169,
              "retained_bytes": 169,
              "truncated": false
            },
            "stderr": {
              "captured_bytes": 0,
              "retained_bytes": 0,
              "truncated": false
            }
          }
        },
        "pristine": {
          "exit": 0,
          "secs": 0,
          "diagnostics": {
            "stdout": {
              "captured_bytes": 170,
              "retained_bytes": 170,
              "truncated": false
            },
            "stderr": {
              "captured_bytes": 0,
              "retained_bytes": 0,
              "truncated": false
            }
          }
        },
        "protected_restored": 2,
        "added_protected_removed": 0,
        "filesystem_case_sensitive": true,
        "verifier_backend": {
          "kind": "local",
          "trust": "checkpointed-local",
          "available": true
        },
        "dependency_environment": {
          "status": "none",
          "roots": [],
          "fingerprint": "738aa82b627c9facb5605bf75df7f872bdcded56760ff8db690e405cd7fa8235"
        },
        "oracle_assurance": {
          "level": "suite-exit-only",
          "semantic_isolation": false,
          "candidate_code_executes_in_oracle_process": true,
          "limitation": "candidate source executes inside the configured suite process and may terminate or interpose on that in-process oracle; isolated-container is execution-domain isolation, not semantic/oracle isolation"
        }
      }
    },
    {
      "id": "unverifiable",
      "label": "Missing trusted baseline",
      "command": "node tamperward verify --base missing-trusted-base --json --cwd <fixture>",
      "exitCode": 2,
      "stdout": "{\"schema_version\":1,\"verdict\":\"CANNOT_VERIFY\",\"reason\":\"POLICY_ERROR\",\"detail\":\"cannot load policy (Command failed: git rev-parse --verify missing-trusted-base^{commit}\\nfatal: Needed a single revision\\n)\"}\n",
      "stderr": "fatal: Needed a single revision\n",
      "result": {
        "schema_version": 1,
        "verdict": "CANNOT_VERIFY",
        "reason": "POLICY_ERROR",
        "detail": "cannot load policy (Command failed: git rev-parse --verify missing-trusted-base^{commit}\nfatal: Needed a single revision\n)"
      }
    }
  ]
}