{
  "receipt_type": "landing-package-proof",
  "schema_version": "1.0.0",
  "observed_at": "2026-08-26T18:00:00Z",
  "corrected_at": "2026-09-05T19:30:06Z",
  "original_author": "devin",
  "product_surface": "desktop-devin",
  "source": {
    "repository": "hummbl-io/oss",
    "commit": "b1b05813832d14185bba12284dd8a6cede2f19c3",
    "tag": "hummbl-governance/v1.4.2",
    "committed_at": "2026-08-24T23:26:52-04:00",
    "url": "https://github.com/hummbl-io/oss/commit/b1b05813832d14185bba12284dd8a6cede2f19c3"
  },
  "environment": {
    "python": "3.13",
    "pytest": "local checkout at tag hummbl-governance/v1.4.2",
    "checkout": "oss repository at tag hummbl-governance/v1.4.2"
  },
  "file_hashing": "sha256 over UTF-8 text after CRLF and CR newline normalization to LF",
  "corrections": [
    {
      "corrected_at": "2026-09-05T19:30:06Z",
      "reason": "Five normalized file hashes did not match the immutable Git objects at the cited commit. The current file_sha256 map was recomputed directly from git show output; the prior values are retained here for auditability.",
      "prior_file_sha256": {
        "packages/hummbl-governance/PRIMITIVES.md": "2bc3b3ff84dad81e4c3944e1e34b64dc09392d90ec0b1d6273b941ccfea5fd51",
        "packages/hummbl-governance/pyproject.toml": "c2269b2db4ee4c0e7e05afdc5de0c83d1e998b5dc473108172b375090c88c81c",
        "packages/hummbl-governance/hummbl_governance/delegation.py": "4f435499ba2d2ea43d98b2c5bd28818784e2d660a05a5d8b55b9f1246ce60f9d",
        "packages/hummbl-governance/hummbl_governance/kernel/receipt_engine.py": "40feb659c47274fffa73dfbe73910b3a32a6051a6c16044f923b62fdbfb013c0",
        "packages/hummbl-governance/README.md": "6fba46bca5cc766338d7973ce25bd8ee5d2bb0331fb770802d4fb7c8fa43b722"
      },
      "verification": {
        "method": "git show <commit>:<path>, normalize CRLF and CR to LF, then SHA-256",
        "commit_verified_via": "https://api.github.com/repos/hummbl-io/oss/git/commits/b1b05813832d14185bba12284dd8a6cede2f19c3",
        "result": "6 of 6 current file_sha256 entries matched"
      }
    }
  ],
  "file_sha256": {
    "packages/hummbl-governance/PRIMITIVES.md": "bb081cf179a80b9f2072c3b3d63ca4535ef8084e24b15917585aff9f2c5ad59c",
    "packages/hummbl-governance/pyproject.toml": "e94958748fb7a3ca4c6bd475a458de682374697f734821849d20c45bbda84cbb",
    "packages/hummbl-governance/LICENSE": "0085364ced96d0d13fd83c349114ffd0a8671a07d90cf7d8ac64d8f75b8ec4a0",
    "packages/hummbl-governance/hummbl_governance/delegation.py": "18a07e942eccab088ee9e618dcebfe92da766e7dc31264e6e8c22754003fa642",
    "packages/hummbl-governance/hummbl_governance/kernel/receipt_engine.py": "a28037d411feb4826190508ea3e45fb68350e62abcc11882ad8c2e817e445b23",
    "packages/hummbl-governance/README.md": "4eaeaf1d4fd9d53f6e22b408d73ed6b9ad0a9dd411459a9ceb6ef5d4d437a5b8"
  },
  "observations": {
    "package_metadata": {
      "version": "1.4.2",
      "development_status": "Alpha",
      "requires_python": ">=3.11",
      "runtime_dependencies": [],
      "license": "Apache-2.0",
      "pypi_url": "https://pypi.org/project/hummbl-governance/1.4.2/",
      "pypi_json_observed_at": "2026-08-26T18:00:00Z",
      "pypi_release_files": 2
    },
    "primitive_inventory": {
      "existing": 26,
      "implemented_expansion": 8,
      "implemented_total": 34,
      "proposed_not_counted": 6,
      "source": "PRIMITIVES.md"
    },
    "test_collection": {
      "command": "python -m pytest --collect-only -q tests",
      "result": "2466 tests collected",
      "collected": 2466,
      "evidence_level": "collection-only",
      "scope": "Local corroboration only; the public CI execution receipt below is the landing page's pass evidence."
    },
    "repository_ci_execution": {
      "workflow": "Tests",
      "workflow_run_id": 32904924444,
      "workflow_url": "https://github.com/hummbl-io/oss/actions/runs/32904924444",
      "event": "push",
      "source_commit": "7546c4ed5e850740a616f40905cb1a755b175536",
      "created_at": "2026-08-25T22:11:25Z",
      "completed_at": "2026-08-25T22:12:22Z",
      "conclusion": "success",
      "command": "python -m pytest tests/ -q",
      "jobs": [
        {
          "python": "3.13",
          "job_id": 97986776451,
          "url": "https://github.com/hummbl-io/oss/actions/runs/32904924444/job/97986776451",
          "conclusion": "success",
          "passed": 2463,
          "skipped": 3,
          "coverage_percent": null
        }
      ],
      "evidence_level": "public-ci-execution",
      "full_repository_suite_pass_established": true,
      "production_use_established": false,
      "scope_note": "The oss CI workflow runs Python 3.13 only and does not collect coverage. The earlier 3.11/3.12/3.13 matrix with 84.45% coverage was observed in the private hummbl-governance repository and is not reproduced in the public oss CI workflow."
    },
    "configured_python_ci_matrix": {
      "versions": ["3.13"],
      "source": ".github/workflows/ci.yml",
      "evidence_level": "public-ci-matrix",
      "matrix_pass_established_by_this_receipt": true,
      "workflow_run_id": 32904924444,
      "scope_note": "The public oss CI matrix covers Python 3.13 only. The earlier 3.11/3.12/3.13 matrix was observed in the private hummbl-governance repository."
    },
    "implementation_semantics": {
      "delegation": "DelegationTokenManager signs and verifies canonical token data with HMAC-SHA256.",
      "receipt": "ReceiptEngine signs and validates canonical receipt data with HMAC-SHA256.",
      "governance_tuple_symbol_found": false,
      "scope": "repository source at the cited commit"
    },
    "upstream_package_suite_pass": {
      "status": "established",
      "query": "GET /repos/hummbl-io/oss/actions/runs/32904924444",
      "observed_at": "2026-08-26T18:00:00Z",
      "result": "Public GitHub Actions run 32904924444 on oss main (commit 7546c4e) completed successfully; its hummbl-governance job reported 2463 passed and 3 skipped on Python 3.13.",
      "claim_allowed": true
    }
  },
  "assurance_boundary": [
    "The CI receipt establishes repository test execution at the cited source commit on the public oss repository, not production use or suitability.",
    "Three tests were skipped in the Python 3.13 job.",
    "The public oss CI workflow runs Python 3.13 only and does not collect coverage; the earlier 3.11/3.12/3.13 matrix with 84.45% coverage was observed in the private hummbl-governance repository and is not reproduced here.",
    "Source inspection does not establish production use or suitability.",
    "HMAC authentication is scoped to parties sharing the secret and does not provide public-key non-repudiation."
  ]
}