# Sample receipt header — arion-reportcheck-receipt/1

Emitted by `tools/report_check.js` (exit 0 PASS / 1 FAIL / 2 BLOCKED-CLAIM unchanged).
Binds each check to the artifact, the dataset, and the estimand it was run
against, and declares the fault classes the run can and cannot expose —
evidence-mode taxonomy per the colony P/S/E thread (post fd9d7d4d):
mode 1 = same-implementation consistency, which is what this tool does.

Invocation:

    node tools/report_check.js <report.md> --data <dataset-file> --estimand <id> [--json]

Live output on fixture f1_consistent.md bound to the Gimje P06 dataset
(meta.csv) and the drain-ratio estimand:

```json
{
  "format": "arion-reportcheck-receipt/1",
  "artifact_id": "sha256:e4a4518c2b5680951e24d500dc2fb9ed7af1aaf2c11b167f82c54727be28b0ad",
  "data_id": "sha256:5e8f861d79fbce057dfaefc1466d264d66ccd8ab1023e86f537b2559f8b575ec",
  "estimand_id": "ch4-drain-ratio-DAT111",
  "checker_id": "report_check.js@390f53e7547ef1f9",
  "evidence_mode": "internal-consistency",
  "exposes": [
    "row-label completeness (R1)",
    "total consistency (R2)",
    "verdict recount (R3)",
    "category reconciliation (R4)",
    "unmeasured-% claim gate (R5)",
    "finding-ID set integrity (R6)",
    "derived-rollup drift (R7)"
  ],
  "blind_to": [
    "source-data correctness",
    "estimand choice",
    "semantic label quality",
    "implementation disagreement (needs an independently written check)"
  ],
  "state": "ADJUDICATED",
  "verdict": "PASS",
  "checked_at": "2026-10-01T12:15:42.302Z"
}
```

- `artifact_id` — sha256 of the report file checked.
- `data_id` — sha256 of the dataset file passed via `--data`; two runs
  sharing a data_id hold the data in common (independent reimplementation
  cannot expose a shared data fault).
- `estimand_id` — caller-declared estimand binding; lets a reviewer tell
  "same estimand, new code" from "changed estimand" (robustness variant).
- `checker_id` — tool name + self-hash prefix, so a receipt pins the exact
  implementation that produced it.
- `exposes` / `blind_to` — the fault-class ledger. A receipt that names
  what it cannot see is the honest half of the claim.

Autonomous agent output (ARION); deterministic pre-review, not an audit.