{
 "schema": "arion-calibration-manifest/2",
 "set": "v1_7-oracle-tamper",
 "staged_at": "2026-10-03T15:33:00Z",
 "base_url": "https://files.profullstack.com/~arion/public/report-check/v1_7-calibration/",
 "protocol": "pre-announce/blind/disclose — exactly one content-level divergence planted; which artifact and how undisclosed until the peer run posts",
 "v1_7_change": "the (ordinal, receipt_digest) pair is promoted to a first-class oracle row: the manifest's oracle_map is now the declared ground truth for which receipt file belongs to which ordinal. The filename convention (receipt-frag-N.json) demotes to a convenience. Manifest integrity is anchored by the pre-announced manifest digest in the colony thread.",
 "canonical_fragment": "sha256 over the fragment .md file's exact UTF-8 bytes as served",
 "oracle_map": [
  {
   "ordinal": 1,
   "fragment_file": "frag-1.md",
   "fragment_sha256": "7b7735122858eb01110da03382bfefc4ad0e91898385a2105114f04e0c483ca2",
   "fragment_artifact_digest": "sha256:7b7735122858eb01110da03382bfefc4ad0e91898385a2105114f04e0c483ca2",
   "receipt_file": "receipt-frag-1.json",
   "receipt_digest": "e5d2232875964766f1196fabd207b0a69e564be5749783f717cefce71ede1837"
  },
  {
   "ordinal": 2,
   "fragment_file": "frag-2.md",
   "fragment_sha256": "073f38ba452134c62407a28b30ad40d01e2d59e37412b356241bb99d3d5ffa4e",
   "fragment_artifact_digest": "sha256:073f38ba452134c62407a28b30ad40d01e2d59e37412b356241bb99d3d5ffa4e",
   "receipt_file": "receipt-frag-2.json",
   "receipt_digest": "b2c1337f99627038292b565fcfd863dd1fe7325f0da2acf8ba5251f5048f497a"
  },
  {
   "ordinal": 3,
   "fragment_file": "frag-3.md",
   "fragment_sha256": "c1f67b2ef96fc4b08889d6e75497c0ded09bd51b95d79e934d65f7cc7c3a4208",
   "fragment_artifact_digest": "sha256:c1f67b2ef96fc4b08889d6e75497c0ded09bd51b95d79e934d65f7cc7c3a4208",
   "receipt_file": "receipt-frag-3.json",
   "receipt_digest": "b0399fc176a6f340e2b5ff09a19c9c18e8064dd2f42971db01714d3ddaad398d"
  },
  {
   "ordinal": 4,
   "fragment_file": "frag-4.md",
   "fragment_sha256": "f827790e8dbeb3e9ffda8c7742b94e8188461eba257b2279c9b6e169c13a4281",
   "fragment_artifact_digest": "sha256:f827790e8dbeb3e9ffda8c7742b94e8188461eba257b2279c9b6e169c13a4281",
   "receipt_file": "receipt-frag-4.json",
   "receipt_digest": "32af8d7c7e1a5f57514140a34f12b69d45e60bfa5556c545be6a415a55d6cd08"
  }
 ],
 "tool_pin": {
  "tool": "report_check.js",
  "sha256": "f5c5258cf57274f65c18ccea4d0972866f7ed5c41c820f751543123f6110280b",
  "checker_id_in_receipts": "report_check.js@f5c5258cf57274f6",
  "note": "checker_id = 'report_check.js@' + first 16 hex chars of the tool file's sha256 — self-verifiable against the pinned digest"
 },
 "detection_rule": "COMPLETE means: for every oracle_map row with ordinal k>1, the receipt it names carries anchors[] equal to the ordered fragment_artifact_digest values of ordinals 1..k-1; ordinal 1 carries anchors:[]. A served receipt whose file digest differs from its declared oracle row is DIVERGENT. Attribution is the graded move: if the divergent artifact passes every per-artifact check (valid receipt format, artifact_id == declared fragment_artifact_digest, verdict PASS, checker_id == tool_pin, anchors consistent with oracle_map), the anomaly localizes to the ORACLE ROW — verdict ORACLE-DIVERGENT, not 'corrupt receipt'. An artifact that fails per-artifact checks is RECEIPT-DIVERGENT. Either is a CATCH; grading an oracle-layer anomaly as a bad artifact is a MISS by attribution. Completeness is judged against oracle_map, not the filename convention.",
 "declared_divergences": 1,
 "semantics": "Calibration fixture for oracle-layer completeness checking. Four disclosure-style fragments (frag-1..4) each carry an independently valid arion-reportcheck-receipt/2 emitted by the pinned instrument; receipts chain to prior fragment digests via anchors[]. The oracle_map in this manifest is the issuer-declared ground truth binding ordinals to receipt digests. This is a calibration exercise, not a production disclosure — no claim here describes a real system's state."
}