{
  "schema": "loop-invariant-teaching-evidence-v1",
  "createdAtUtc": "2026-10-28T21:44:28.379008+00:00",
  "authority": "Newly authored fictional teaching contract; no customer/product approval.",
  "historicalEvidence": "Original canonical prefix was explicitly pseudocode with mathematical explanation, not an authenticated executed fixture. This is a fresh Oct28UTC campaign.",
  "primaryExecution": {
    "status": "bounded-primary-observations-complete-strong-source-proof-unresolved",
    "primaryStartedAtUtc": "2026-10-28T21:36:13.534132+00:00",
    "primaryFinishedAtUtc": "2026-10-28T21:37:13.350790+00:00",
    "go": "go1.26.3 darwin/arm64",
    "z3": "4.15.4 64bit",
    "currentProofBinarySha256": "89c2dfbe34ab2d228b9847a3eca326644d2acce02e614b8dbab630baf83759d2",
    "gitRevision": "b566a01085f0233c0be2c71508a2d3caac0cf47a",
    "trackedDirty": true,
    "modifiedTrackedGoBuildSources": [],
    "counts": {
      "selectedInputRepresentations": 7,
      "distinctElementSequences": 6,
      "variants": 3,
      "recordedGoOperationCallsitesAndResults": 21,
      "runtimeCasesPassedByVariant": {
        "baseline": 6,
        "corrected": 7,
        "weak": 6
      },
      "runtimeInputFrameAndNilnessPasses": 21,
      "sourceVerifierInvocations": 3,
      "nonemptySourceLemmaResults": 3,
      "sourceProvedResults": 1,
      "strongSourceTimeouts": 2,
      "sourceCounterexamples": 0,
      "freshSolverRetries": 0,
      "independentCoverageEntryCountEvidence": "unavailable; no numeric entry-count assertion"
    },
    "sourceVerdicts": [
      {
        "variant": "baseline",
        "lemma": "scan_contract",
        "total": 1,
        "verdict": "TIMEOUT",
        "solver": "z3",
        "exitCode": 1,
        "durationMs": 15012,
        "cached": false,
        "diagnostics": [],
        "querySha256": "ae51ecb717e495b10d84dcb6a3b5fa5c65bc452dfdfcb34c801fbe336c3081aa",
        "hostDefinitionPresent": true,
        "hostLoopPresent": true,
        "hostCalledByLemma": true,
        "lenAtMost32Asserted": true,
        "prefixHelperPresent": true,
        "loopObligationQuantifiersPresent": true,
        "fallbackSymbolsPresent": false,
        "goalScope": "Returned bounds + completed-prefix property + exit negative-or-end; input frame/nilness and termination are not this lemma goal."
      },
      {
        "variant": "corrected",
        "lemma": "scan_contract",
        "total": 1,
        "verdict": "TIMEOUT",
        "solver": "z3",
        "exitCode": 1,
        "durationMs": 15021,
        "cached": false,
        "diagnostics": [],
        "querySha256": "616c4767d031d0d554d22466925535a8dadaff5f6e21d831f2dee5c34d51c5e9",
        "hostDefinitionPresent": true,
        "hostLoopPresent": true,
        "hostCalledByLemma": true,
        "lenAtMost32Asserted": true,
        "prefixHelperPresent": true,
        "loopObligationQuantifiersPresent": true,
        "fallbackSymbolsPresent": false,
        "goalScope": "Returned bounds + completed-prefix property + exit negative-or-end; input frame/nilness and termination are not this lemma goal."
      },
      {
        "variant": "weak",
        "lemma": "scan_bounds",
        "total": 1,
        "verdict": "PROVED",
        "solver": "z3",
        "exitCode": 0,
        "durationMs": 11,
        "cached": false,
        "diagnostics": [],
        "querySha256": "d1a70165255c8ec4fe247765f9170edf91ca5b863498a9f661c854dae3c56cca",
        "hostDefinitionPresent": true,
        "hostLoopPresent": true,
        "hostCalledByLemma": true,
        "lenAtMost32Asserted": true,
        "prefixHelperPresent": false,
        "loopObligationQuantifiersPresent": true,
        "fallbackSymbolsPresent": false,
        "goalScope": "Returned-index bounds only"
      }
    ],
    "functionBodiesIgnoringCommentsWhitespaceSha256": {
      "baseline": "4464539ece21d2453a4eff4b84cd212ad18d4c676fbda391148a542ede712938",
      "corrected": "825eadbf5b03febc35823f145c98fb31c6f35ea41bd78a726499115ee25dc30b",
      "weak": "4464539ece21d2453a4eff4b84cd212ad18d4c676fbda391148a542ede712938"
    },
    "actualRuntimeFailure": {
      "case": "negative-first",
      "input": [
        -1,
        2
      ],
      "literalExpectedIndex": 0,
      "baselineIndex": 2,
      "weakIndex": 2,
      "correctedIndex": 0
    },
    "limitations": [
      "Both strong source lemmas timed out after15s; no strong source proof or solver counterexample was obtained.",
      "The single PROVED verdict concerns only weaker returned-index bounds; it does not establish first-negative semantics and its implementation fails the negative-first literal case.",
      "Seven input representations include nil and nonnil-empty with the same element sequence; six unique element sequences, not exhaustive slice/length/value coverage.",
      "Twenty-one recorded Go callsite/results carry runtime.FuncForPC source identities. Intended compiler count coverage failed: empty directory/export and no-applicable-files warning; no independent entry counts, branch coverage or profiling claimed.",
      "The original observer method label overstated achieved coverage; raw source/output preserved and public observer metadata string corrected without primary rerun.",
      "Source SMT uses Seq Int and mathematical Int; nil/empty distinction and input frame are not proved by the result lemma. Complete input and nilness preservation is observed only for selected runtime calls, supported by manual read-only source inspection.",
      "Host len<=32 is asserted for wrapper parameters, while emitted quantified loop obligations range over arbitrary Seq Int states. Do not call this bounded unrolling or identify timeout cause without evidence.",
      "Manual loop and PrefixOK termination arguments are separate from current syntactic decreases validation. No general Go overflow/termination guarantee or caller integration.",
      "No solver install/download, cvc5 differential run, production/customer approval, proof obligation record acceptance or release was performed."
    ],
    "publicObserverMetadataAmendmentSha256": "7db62a5630dd3a15bd2496a878078e80a06989a0dd559fcf15624b53181411ed",
    "primaryRawBytesRetained": true,
    "noStrongProofAcceptance": true,
    "noAdditionalPrimaryCampaign": true
  },
  "sourceIdentity": {
    "primaryFixtureBeforeSha256": "71b5d175b9fe83ff61ba9c82b3d6857220b0f40d94ac684094d2909068940164",
    "primaryObserverSha256": "5b28c72aa0faef855bbb95373caabd28c5832e1f7eca66cb7742c2465f53bbba",
    "publicObserverSha256": "95f81f290187f3788df6d2abd821ee16a1ef12191f488ea3e8d94594dac79693",
    "scanAndHelperSourceSha256": {
      "baseline": "05d5666ad352c9557093af77d20fbad8c6847466eb96ba4bd46a163cd8e06f4b",
      "corrected": "18ab4f04b9cee28abde011553c567e70807c95428e8644c271f438d040f9f6db",
      "weak": "b108c27ecfad25d1154e947395dc74f970a9918ddef70662ae5acdea1378d449"
    },
    "literalCasesSha256": "0830d152a0f700e8256bc3e1aaa49653c17b6b8651a225379ed42d5405fd1ef0",
    "literalOracleSha256": "8981c4a6ee342a2941fcc2064484768a3e46fab94658047c3de280c5899096e0",
    "publicReproducerPrimaryExecuted": false,
    "publicReproducerValidation": "Python AST only; independent extracted-kit replay is a later separate identity.",
    "metadataCorrectionOnly": "See OBSERVER-METADATA-AMENDMENT.json and retained patch; no primary re-execution after metadata-string correction.",
    "proofBuildIdentityPublicSummary": "observed/build-identity-summary.json",
    "proofBinaryBundled": false
  },
  "commands": "observed/commands.json",
  "queryPaths": [
    "observed/baseline.smt2",
    "observed/corrected.smt2",
    "observed/weak.smt2"
  ],
  "runtimeObservation": "observed/observe.stdout.txt",
  "literalAssessment": "observed/oracle-assessment.json",
  "coverageFailure": [
    "observed/coverage.txt",
    "observed/coverage-export.stderr.txt"
  ],
  "portablePaths": {
    "default": "Go1.26.3+ and normal CPython3.12+; no Proof/network required for runtime/literal-oracle path",
    "optionalRetainedQueries": "Z3 required; exact retained SMT replay is not fresh Go translation",
    "optionalCurrentSourceVerifier": "Existing caller-provided Proof binary plus configured Z3; hash and actual verdict recorded separately"
  },
  "allLimits": [
    "Both strong source lemmas timed out after15s; no strong source proof or solver counterexample was obtained.",
    "The single PROVED verdict concerns only weaker returned-index bounds; it does not establish first-negative semantics and its implementation fails the negative-first literal case.",
    "Seven input representations include nil and nonnil-empty with the same element sequence; six unique element sequences, not exhaustive slice/length/value coverage.",
    "Twenty-one recorded Go callsite/results carry runtime.FuncForPC source identities. Intended compiler count coverage failed: empty directory/export and no-applicable-files warning; no independent entry counts, branch coverage or profiling claimed.",
    "The original observer method label overstated achieved coverage; raw source/output preserved and public observer metadata string corrected without primary rerun.",
    "Source SMT uses Seq Int and mathematical Int; nil/empty distinction and input frame are not proved by the result lemma. Complete input and nilness preservation is observed only for selected runtime calls, supported by manual read-only source inspection.",
    "Host len<=32 is asserted for wrapper parameters, while emitted quantified loop obligations range over arbitrary Seq Int states. Do not call this bounded unrolling or identify timeout cause without evidence.",
    "Manual loop and PrefixOK termination arguments are separate from current syntactic decreases validation. No general Go overflow/termination guarantee or caller integration.",
    "No solver install/download, cvc5 differential run, production/customer approval, proof obligation record acceptance or release was performed."
  ]
}