Simulator identity accounting and canonical native diagnostic, 2026-10-15

No release acceptance, durability or full-duration claim follows. The TLS sink retains volatile test bytes only; canonical product packages and all independent oracles are unchanged.

The existing 24 source controls exited 0 at e8a557a216b0b47d86a5a54d04081aad38b7d5c0. Additional trust registration d9392f741b4a108bd3e18eef70af1da5fbe5cf89 reproduced 13 assertion/subtest failures across eight methods in a 33-method run, zero skips, exit 1. This differs from the prospective numerical prediction (seven methods/eleven entries); actual output is authoritative. Correction bb25bf75fb28ad97af4f66d1b6f9d4af9a1f43a1 passed all 33 methods with zero skips, exit 0. The native controller is 386 lines, +26 within the separately registered +40 budget.

The fixes bind exact source and attempted/raw key sets to authenticated streams, original wire hashes, attempt/response associations, and one final state per stream; boolean identity aliases are refused. Canonical argv no longer passes an unsupported witness option. Pending sequence-two bytes remain unobserved on the wire, explicitly.

Canonical native result

The sealed spindle_sim (SHA-256 606272bfbaec86900a928f2936d79b0ba4f6d5ed900556473bc3345a63283f47) was observed loaded via procfs device/inode/hash and PID/start/boot identity. Both identities delivered both registered Batches to the finite TLS sink; the original source/attempt/response/state ledgers passed and undelivered was zero. Native helper exit was 0. The diagnostic returned the intended exit 1 with status expected-red: sealed-native-missing-begin-after-real-ACK. This is a genuine missing-witness control, not an argument or setup failure.

The native helper lifetime between launch and observed stop was 1.026146073 seconds for a configured two-second offer. That observation alone is not a high-precision timing measurement, but it supports the registered concern that legacy offers at seconds zero and one do not require two elapsed seconds. No Rust mechanism has been changed or rebuilt yet.

Actual native output: results/simulator-native-missing-begin-red-01/control-receipt.json. Helper and sink stopped; disposable token files and private certificate keys were removed. Raw wire bytes, logs and original ledgers remain private.

Run evidence

simulator-native-registration-source-controls-01

Source e8a557a216b0b47d86a5a54d04081aad38b7d5c0; exit 0; stop confirmed True.

["env", "PYTHONPATH=tools/qualification:tools", "python3", "-B", "-m", "unittest", "-v", "test_simulator_exposure", "test_simulator_native_controls"]

Record SHA-256 b9e3bdf6a1ba01c0e1298163325602222b1a0a401b34a6d2a328dac67ade4a69; log SHA-256 aa2edec06422becc75ba6ef333d2519c2a0f12e5867501e3c4433a0fc7c21047. Resource receipt fabric-work-9863940bbc6d4447922feb8a57b80991.json, SHA-256 b108f162cf2ad3f33015bf16713cb781c3e32928ab71e84eb6410df44c016b2f. Full-DATA census 32482321912 bytes plus 1 GiB reserve; memory peak 24621056 bytes. 16/20 GiB high/max, no swap, 1800 seconds. Temporary removed True; retained failure evidence None.

simulator-accounting-red-01

Source d9392f741b4a108bd3e18eef70af1da5fbe5cf89; exit 1; stop confirmed True.

["env", "PYTHONPATH=tools/qualification:tools", "python3", "-B", "-m", "unittest", "-v", "test_simulator_exposure", "test_simulator_native_controls", "test_simulator_accounting"]

Record SHA-256 ead0a7684bd1341dd0dfa45bf481df7320831fcc0b3267537611b1f3de3ad948; log SHA-256 de01bf768278d2e8600a37ca6234f91114fdbc19572eae2535c4d7ae4d968ea1. Resource receipt fabric-work-212a7064aecc44c5a58654212a81e31d.json, SHA-256 adf4031f684293d1da54506d0884e016ebf1bec03e349dfde12aed822f0273f4. Full-DATA census 32482345473 bytes plus 1 GiB reserve; memory peak 25079808 bytes. 16/20 GiB high/max, no swap, 1800 seconds. Temporary removed True; retained failure evidence /run/media/kmosoti/data/FabricO11y/evidence/fabric-work-212a7064aecc44c5a58654212a81e31d.

simulator-accounting-controls-01

Source bb25bf75fb28ad97af4f66d1b6f9d4af9a1f43a1; exit 0; stop confirmed True.

["env", "PYTHONPATH=tools/qualification:tools", "python3", "-B", "-m", "unittest", "-v", "test_simulator_exposure", "test_simulator_native_controls", "test_simulator_accounting"]

Record SHA-256 407b26dbafe80b17fcf16e4cebacddd778c6c1e53a77fdefb09b164f7c6398ad; log SHA-256 ac2d42eafc69d0c217cebab45928c3ea610e0d88186e9f0e79512decf326b8e2. Resource receipt fabric-work-3e63b99094ec4b35bf29a6a2dc6742f8.json, SHA-256 b4bc4e3feecd6fd1c20b06d643b67e9c91b56da73d5932ac87ba0db410e60a2e. Full-DATA census 32482377922 bytes plus 1 GiB reserve; memory peak 24813568 bytes. 16/20 GiB high/max, no swap, 1800 seconds. Temporary removed True; retained failure evidence None.

simulator-canonical-native-red-01

Source bb25bf75fb28ad97af4f66d1b6f9d4af9a1f43a1; exit 1; stop confirmed True.

["env", "PYTHONPATH=tools/qualification:tools", "python3", "-B", "tools/qualification/simulator_native_controls.py", "--case", "canonical-red", "--binary", "/run/media/kmosoti/data/FabricO11y/results/installation-package-build/fresh-8fb6f413179b-01-deb-a/qualification-helpers/spindle_sim", "--authority", "docs/experiments/benchmarks/simulator-native-witness-canonical.json", "--authority-sha256", "23f3c7f259e5a4f3f3cfd36e59f20426f0ad62c9510fa2e2fe10a4f2e36445d1", "--build-receipt", "/run/media/kmosoti/data/FabricO11y/results/installation-package-build/fresh-8fb6f413179b-01-deb-a/receipt.json", "--out", "/run/media/kmosoti/data/FabricO11y/results/simulator-native-missing-begin-red-01"]

Record SHA-256 c2131aa2b6b6f257d491a307530582698aac3e70c4e8ad8adfbbda5d8d5ebe1c; log SHA-256 9427cc45c03d631ed52552f5a308c81adafc05f741f15f1d31597991f683d561. Resource receipt fabric-work-8ce4996de6ef4e0ab2d33ab2ad9ba097.json, SHA-256 9a615c40ca1ab75d6c560732c2f90bef1f52e05c4aeff8fc7fb92f833aaf0bf4. Full-DATA census 32482391555 bytes plus 1 GiB reserve; memory peak 30216192 bytes. 16/20 GiB high/max, no swap, 1800 seconds. Temporary removed True; retained failure evidence /run/media/kmosoti/data/FabricO11y/evidence/fabric-work-8ce4996de6ef4e0ab2d33ab2ad9ba097.

All runs were serialized through tools/resource_group.py with strict namespace census and receipts. Cold helper build, atomic/pre-offer native controls, positive duration witness and full S1/soak remain incomplete.