Process and source identity
Process metadata, installed-source hashes and launch history bind an observation to the code and process it sampled. A checkout or probe identity does not identify every running image.
Observation model
Trace the running code.
Preserve the operating record.
Operational tooling distinguishes scan completion, source identity and recovery behavior. receipt_diff.py aggregates scan receipts; deploy_verification.py records checkout and probe identities; recovery_verification.py retains the population of recovery cases. These separate records let the operator distinguish an unfinished observation from a failed component or an unmeasured recovery.
The operator needs to know which code was sampled, whether the observation completed and what domain behavior it measured. The tooling retains those identities separately so process presence cannot silently become a claim of successful operation.
Interpretable receipts
Receipt aggregation retains observation time, completion flags and evidence quality. Unknown freshness stays unknown; missing inputs do not improve the measured clean fraction.
Recovery observations
The recovery observer retains the affected component and eligible case population. Recovery acceptance requires fresh domain output. The published recovery record has zero cases and establishes no recovery effectiveness.
Tested local behavior
Test the observer against the failures it must detect.
The published repairs address initialization failure, unreadable test output, reused observation times and unsupported recovery counts. Counterexamples exercise the actual local consumers; source pins retain the implementation that rejected those cases.
Failure, repair and verification →The records distinguish isolated failure tests from dated operating observations. Follow the operating record for its installed source identity, measured population and adoption coverage.
Archived operating observation
Scheduler results, storage mounts, available probe paths and service observations remain in the dated record. They are not presented as a live dashboard or a new recovery attestation.