Can an investigation be checked independently?
CipherLoop → TraceForge
Production-v2 evidence contract · experimental producer + independent reader · offline replay verified.
-
01 / Producer lifecycle
Investigate.
Keep the record.The producer records tool observations, validation decisions, and how execution ended. Explicit lifecycle events keep failed execution visible.
CipherLoop source -
02 / Two-file handoff
The artifact boundary
- JSONL trajectory
- Ordered lifecycle and source observations
- Run metadata
- Ledger hash, event count, and final references
The metadata commits to the exact ledger bytes. Both files are required.
Inspect the contract -
03 / TraceForge
Verify integrity.
Locate the evidence.The reader checks integrity and source locations without importing CipherLoop runtime modules. Evaluation stays separate from the producer’s observations.
TraceForge source
c98c5d8 → TraceForge main
51af0f4. Recorded offline replay uses scripted tool responses, not a live audit.
Valid capture
Integrity and source-location checks can return PASS. This does not mean task success or
target safety.
Failed execution
Unavailable scanner output must not become a successful zero-finding result. The reader reports an error.
Altered artifact
Changed ledger bytes invalidate the commitment. The reader rejects the input instead of silently dropping evidence.
Adversarial contract tests · Linux baseline + pinned production replay passed. Frozen fixtures remain byte-stable. No hosted Windows or detection-accuracy claim.
Historical fixture oracle
| Fixture | CipherLoop decision | TraceForge result |
|---|---|---|
| toy | Accepted | Matches oracle |
| safe | Rejected | Matches oracle |
An independent oracle, with a narrow scope.
These fixtures exercise evidence capture and evaluation. They do not establish live audit accuracy or exploitability. “Safe” is a fixture name, not a security certification.
Hosted baseline CI passed · 9 Sep 2026
Source and recorded results inspected 11 Sep; project tests were not rerun for this portfolio
pass.
Historical study scoped to f03a1e1 ·
TraceForge baseline and limits