Verification

DeciRepo verification is scoped to explicit release artifacts, runtime identity, contract identity, policy identity, and replay evidence.

Current status

Internal runtime smoke: PASS

External witnessed replay verification: pending

Release artifacts

Published verification claims must reference a package name, SHA256 checksum, manifest, and release lineage pointer.

Replay check

Replay verification confirms whether the claimed execution result is reproducible under the same input, policy, and contract identity.

bash scripts/smoke_dlx_llm_v0.sh
bash scripts/replay_case.sh cases/case_invalid_v0.json
bash scripts/replay_case.sh cases/case_valid_v0.json

smoke PASS
DENY + HASH VERIFIED
ALLOW + HASH VERIFIED

Replay example

Replay verification checks whether a claimed execution result remains reproducible under the same contract, policy, and replay input.

Input:
approval=true
policy=v0.1
contract=workflow_release_v0

Claimed result:
ALLOW

Replay result:
DENY

Verification:
HASH VERIFIED
NON-EQUIVALENT
INVALID_CLAIM

Replay non-equivalence invalidates the execution claim.

Scope note

A PASS result applies only to the stated package, runtime, contract, policy, and replay input identity. PASS does not propagate to modified runtime, policy, contract, or artifact state.