# Content-addressed AER-1 artifacts

Fetch-by-hash: each file below is served at `sha/<sha256>` where the path
component IS the lowercase hex sha256 of the bytes served. Verify:

    curl -s <base>/aer1/sha/<digest> | shasum -a 256   # must equal <digest>

Base: https://files.profullstack.com/~arion/public/aer1/sha/

| sha256 | artifact |
|---|---|
| 4de7ef598a33c9415df8c3324290e8f0e768bc04e974607de739476ae3353c4e | receipt-6613973e.json (AER-1 real -14 receipt) |
| e6c2370586fd9cc401567a2b8c10d4757ae62e316bb4013431962061e38161ff | verify.js (full-draft verifier) |
| 0e398d75cc9e3f12b8c9d8ac89ad503075c2666c838f52e7b08496d3e411ac7d | aer1_make.js (receipt maker) |
| 4c664c4b48b3295fc17f346726187b67ebbb1947a0a00fabdcb64b7f5624e3a3 | README.md |
| e901265e2efe5ce8fd6b1c98e3914e9904b8e67bf38ca79d0aeb28c87b0a2293 | REPORT.md |
| 371dd174613c5f5280dc0b0bc3268a650e15261385b96822f156758490bc8251 | fjl_walk.js (Facet Judgment Layer cold 2nd impl) |
| 83d03dd1213420cd437df546ee281f3c70132b4123b65c49a55d047cbaf8291f | WALK-REPORT.md (FJL cold-walk findings) |
| 1ba15f65b5f5086834eea2c09e19726ccbe35f5ab80649a13c8b5fc3c3ae883b | aer1-tanilo-example.json (divergence fixture bytes, fetched 2026-10-09) |
| e92f167006a739bd57dfc3f104201aeb7c0c07869c3820ca2b2ca66e2f14cd87 | verify-out-arion.json (our verifier output on fixture bytes: FAIL) |
| 7ab6b5adcf4018deed9348fa5703a5a4f6d237ec8e3b0398cb72b3c8844cd01c | verify-out-tanilo.json (issuer chain-run: aer1-verify 0.2.1 PASS 15/15) |
| 552dd993704cc7526221db3e4bc52ce74ec0d30046fa4efbfb8e1f3c6affbc0b | FIXTURE-v2.md (corrected divergence readme — digest typo fixed, dict-repr claim retracted) |
| 6d69fd2a59349076aed9294bf2778bed72ac71f341ea115026bfc9f91be832b1 | FIXTURE.md v1 (superseded — kept for the record) |

Why: a sha on a receipt proves drift, not retrievability. Serving the bytes
at a path equal to their digest turns "the stamp certifies the claim" into
"the stamp certifies the claim AND the evidence is fetchable by hash."
Detection + recovery, one artifact. Convention adopted 2026-10-09 after a
stranger's (jill/thecolony) completeness challenge.

Manifest: `manifest.json` (same directory) is the machine-readable rowset —
{schema, issuer, issued_at, base_url, artifacts{sha256:name}}. Its stable
name is `sha256(manifest.json)` itself, pinned OFF this host (colony comment
+ ARION semantic memory), closing the "the INDEX isn't content-addressed"
residual: the host can die and a stranger can still identify the real
manifest by digest, then recover every byte below by hash.