Governed action proof Download Verify All 48 files
Evidence package · T2 · 24 October 2026

Two AI agents. One signed mandate. Every handoff on record.

One owner-approved test run. Agent A drafted a painting quote for a fictional housing cooperative. Agent B reviewed it. EVE admitted each agent, bound each handoff to the signed mandate and recorded every step. The 48 files from the run were frozen the same day. Here they are.

Fictional test data. One run, built and checked by the same producer. Not independently verified.
Full packageZIP, 46 filesEverything below in one archive, including the checker.Download ZIPSHA-256 0d897da555e63166732a56e6d6d520469f018e5c1a46cf9a2339b7e1f6fed6b3 · 76,201 bytes
Frozen manifest48 files, SHA-256 and sizeThe list frozen on 24 October. Every file below is checked against it.Open manifestSHA-256 f9468fd311a83be92daa0bb0fd013139d0feb5957124e517edce7ccf746d8fef
CheckerVERIFY_PACKAGE.pyPython 3, standard library only. No network.Open scriptAlso: SHA256SUMS.txt for every file on this site
What happened
1 · Mandate

The owner reviewed the task, typed the mission ID and signed a mandate naming the task, both agents, the model, a 2.00 USD cost cap and a 60-minute window.

2 · Agent A

EVE admitted agent A with exactly the task file. A produced a quote: 96 362.50 SEK including VAT, two requests left unpriced as questions.

3 · Handoff

Before agent B started, EVE checked that the package for B held A's output unchanged, the same task and nothing else.

4 · Agent B

EVE admitted agent B, who reviewed the quote and answered VERDICT: ACCEPT. A replay of the closed handoff was refused.

Test status
L-1 chainALL_PASS, CHAIN_VERIFIEDPass15 of 15 checks; verifier FAILS []
L-2 workDeterministic quote checkPassQ1 to Q8; independent of both agents
L-3 reviewerAgent B: ACCEPTAgent statementSame vendor, separate context
L-4 server2 of 2 receiptsClient-reportedServer checked each upload
L-5 independentIndependent verificationNot establishedNo third party has checked this run

A lower layer never upgrades a higher one. Run cost by Hermes estimate: 0.096508 USD. The cost cap is a stop rule between agent turns, not a hard limit.

What this package does not establish
  • No independent verification, external audit or certification. The same producer built and checked the run. No external time anchor.
  • G-1 not performed: the mandate signature has not yet been checked against a published owner key. A prepared check, g1/G1_CHECK.sh, is included. A pass would prove that the signature matches the key, not who controls the key.
  • G-2 not resolved: the run client, server script and chain verifier named in the mandate are not in the package, so the chain checks cannot be re-run from it.
  • The agents' runtime tools and network egress were not established. No network isolation, production safety or hard cost limit is claimed.
Verify it yourself
On your own machine
unzip T2_EVIDENCE_PACKAGE_2026-10-25_final.zip
python3 public_evidence_T2_2026-10-25_final/VERIFY_PACKAGE.py
# expected last line:  RESULT PACKAGE_INTEGRITY_OK
The checker compares every distributed original with the frozen manifest, confirms that withheld files are absent, checks the reading copies by their own hash, and flags any unlisted file. It proves file identity against the manifest text. It does not prove that the manifest is authentic, who produced it, or that any statement inside a file is true.
In this browser
Fetches each file linked below from this site and computes its SHA-256 locally.

Why 46 files in the package and 48 in the manifest
The 48 are the original files frozen from the run. The 46 are the files in the published package. They overlap in 39 files.
  • 39 originals are distributed byte-identical.
  • 9 originals are withheld: the main result record (server firewall state and signing detail), the run wrapper script, four isolation-window logs and the environment precheck (server addresses, owner environment, container topology), and two files that are replaced by redacted reading copies. Their names, SHA-256 and the reason for withholding are listed below.
  • The package adds 7 files that are not originals: the frozen manifest itself, the 2 reading copies, README.md, VERIFY_PACKAGE.py, g1/G1_CHECK.sh and PUBLICATION_MANIFEST.json.
39 + 7 = 46. A reading copy is never evidence: it carries its own hash and cannot be checked against the frozen manifest.
All 48 frozen files
Original pathStatusBytesSHA-256 (frozen manifest)
result (1)
LGX_C2_T2_RESULT_2026-10-24.mdmain result record: server firewall state after rollback (line 32) and signing-attempt detail (lines 33-34); kept unchanged in the frozen chain (owner decision 2026-10-25)Withheld · security5,8340df6fa4a6570a7fbebfa293cdaa3da9944f8fb9ff3035bf29f795ab65db131e2
work product (agent A) (6)
chain02/runs/LGX-T2-QUOTE-20261024T130334Z/out/H1/a_out/OFFER_DRAFT.mdDistributed1,24114215d27c8bc6e77d23d19f647c3bcb21a5393b1ceb9b4e818eeb06c4b679af4
chain02/runs/LGX-T2-QUOTE-20261024T130334Z/out/H1/a_out/CALCULATION.csvDistributed548d9cab3dbcdc46d9c5cdec06f309687f0c719f41a31a2073c4de918df278108ea
chain02/runs/LGX-T2-QUOTE-20261024T130334Z/out/H1/a_out/ASSUMPTIONS_AND_QUESTIONS.mdDistributed1,27419745abb6f7cea32365763c3e26a15233af38e444b2cd0d595447a241298ae66
chain02/runs/LGX-T2-QUOTE-20261024T130334Z/out/H1/a_out/RESULT.mdDistributed480b1eaa62787f9537bfd14f60c8840eb11b3ef92472fefd8f27bb2802e7bced935
chain02/runs/LGX-T2-QUOTE-20261024T130334Z/out/H1/A_OUT_MANIFEST.sha256Distributed334aa7a7e47f2f94bab1debba3a0c0e715a703c7d754e4c022965fde0dc1f7ee4e9
chain02/runs/LGX-T2-QUOTE-20261024T130334Z/out/H1/a_out.tarDistributed10,240ae09e4040f52846890e8ed44190172b76255a0ce0f2369bf99950354152ffae5
review (agent B) (3)
chain02/runs/LGX-T2-QUOTE-20261024T130334Z/out/H2/a_out/REVIEW.mdDistributed1,42016537de90f879dc8c8fde34e7bfb1a2051a1b590bbfa2b99e71104e065afbcb6
chain02/runs/LGX-T2-QUOTE-20261024T130334Z/out/H2/A_OUT_MANIFEST.sha256Distributed76c0042cc960159fd1b217c6a13aba76c1199f20ad7f7c023c1969f39f0feb3dfa
chain02/runs/LGX-T2-QUOTE-20261024T130334Z/out/H2/a_out.tarDistributed10,2409145faa2828d8899be1fe1cc34fd5e9a01d70ca7f375f74f7f5f47d5333daae8
mandate and owner approval (6)
chain02/r2/missions/LGX-T2-QUOTE/MANDATE_LGX-T2-QUOTE-20261024T130334Z.txtDistributed8164494612f489fb858780906075880900e51181a564d2648be277bca68f942eaab
chain02/r2/missions/LGX-T2-QUOTE/MANDATE_LGX-T2-QUOTE-20261024T130334Z.txt.sigDistributed310633bee9a64969a0bb72fb83b76227884d4aa6265a68dd23287efda9baea13338
chain02/r2/lgx_c2/T2/T2_OWNER_GO_RECORD.mdDistributed1,76588e70d0fe04cad9b1ebc8fa04e79ce97f6b9c932972a614eb2648a6bbfb64b43
chain02/r2/lgx_c2/activations/N3R3_ACT_654226842f988bd162a0fcc5add09b152360aac446f77a8ad39e65b47614bc77.mdDistributed1,119654226842f988bd162a0fcc5add09b152360aac446f77a8ad39e65b47614bc77
chain02/r2/lgx_c2/activations/consumed/654226842f988bd162a0fcc5add09b152360aac446f77a8ad39e65b47614bc77/CONSUMED.txtDistributed16443e2d5a159aa1080909a7fcff1c3af62b7392bd9e173deb84ec154621c9d1e27
chain02/r2/lgx_c2/RUN_TASK_LGX_WSL_r4_T2.shserver addresses / owner environment / container topology and egress results (owner decision 2026-10-25)Withheld40,1991c945f698397984cb8619eb662160cfdbf6f4dbfc7f84f6de2bd457e7f3ee510
mission inputs (3)
chain02/r2/missions/LGX-T2-QUOTE/TASK.mdDistributed4,1216d575090fcbfa47a8d050087a3ae93706aae20e8e81659367a03dd4b054c431d
chain02/r2/missions/LGX-T2-QUOTE/MISSION_HOLD_LIFT.mdDistributed2,525456652d461549fe1c59e64ea56ec3371bf3d0bf585899f285e363326973338a7
chain02/r2/lgx_c2/T2/T2_SPEC.mdReading copy (not evidence): T2_SPEC.READING_COPY_r2.mdagent container network / toolset configuration and a service name; distributed only as a redacted reading copy (owner decision 2026-10-25)Withheld · reading copy9,5038965d91e25e36deb26272ab2d9d4b39b9c8a933f73200b8c5a6ae0b5e3cbd00d
run trace (10)
chain02/r2/missions/LGX-T2-QUOTE/RUN_LGX-T2-QUOTE-20261024T130334Z.txtReading copy (not evidence): RUN_LGX-T2-QUOTE-20261024T130334Z.READING_COPY.txtlocal key file paths and signing-attempt detail; distributed only as a redacted reading copy (owner decision 2026-10-25)Withheld · reading copy12,36422d43e5cd4e797ffd4dd2e38dd66e1b7117aa6042a81950841319dfb9ea2b627
chain02/runs/C2-live-LGX-T2-QUOTE-20261024T130334Z.jsonDistributed16,56602df91531127341c145c04ed2d2821d2337552fb5c86dda981b5ab0120d021f8
chain02/runs/LGX-T2-QUOTE-20261024T130334Z/link/LINK.jsonDistributed7483615753028856a239db86badf96dd9fa98f19c4f97d0cab59362d772e7d826b5
chain02/runs/LGX-T2-QUOTE-20261024T130334Z/server_io.logDistributed4,8200f2d3024edf8d7d24594af3c8cb27617b68183553b57a2dc1f42466f088daa4e
chain02/runs/LGX-T2-QUOTE-20261024T130334Z/pkg/H1/MANIFEST.sha256Distributed159d90a7154f85f33c936b44f8ed4d4de375c603d0488ab9317cb547ca4645a06a1
chain02/runs/LGX-T2-QUOTE-20261024T130334Z/pkg/H1/package.tarDistributed10,2407dafc199d898d01b0af7b4f39888c12f230a07c23deac15966446968f3e5dd60
chain02/runs/LGX-T2-QUOTE-20261024T130334Z/pkg/H2/MANIFEST.sha256Distributed5971213a9dd1b2264806154b6c5d7253a89dec97d6113ca0b84c882f45a2b405e77
chain02/runs/LGX-T2-QUOTE-20261024T130334Z/pkg/H2/package.tarDistributed20,48078c783cc91735d800fca7c100e06cc10f4ee96662424c7a627222bc82c26472b
chain02/runs/LGX-T2-QUOTE-20261024T130334Z/consumed/79abb1472f4dd56ef9e97decaa11dac7e63df41a62e173db9e447ff1b168408d.jsonDistributed2545e1cabb02689f79c2719f830edde1efa2a1ffb7c86931f3f1556623bf09f523d
chain02/runs/LGX-T2-QUOTE-20261024T130334Z/consumed/9d9b85ef0e27f94727e78fb39dd0f120c667673c9c4db89d5effc4256330de65.jsonDistributed254ac53b4fffd6d467b86c75ec03f20be947fa57b344c07fe1bf382d9b4c174cc17
EVE / VHR records (10)
chain02/runs/LGX-T2-QUOTE-20261024T130334Z/eve/determination_records.jsonDistributed11,499119e89d64e7a50e0abe5e96a42d18dad5a43a27e0fd780d74594cf3f746938eb
chain02/runs/LGX-T2-QUOTE-20261024T130334Z/eve/verified_handoff_v11_records.jsonDistributed8,4074860f171e6e2081d8da9008d00c71fc240611e3c789f32ed6c37b796b50b942f
chain02/runs/LGX-T2-QUOTE-20261024T130334Z/executor/intents/EVE-VHR11-LOCAL-000001.jsonDistributed1,2178fee17d4a5d70aba3490ca50af31014da8c55e6234c21539c82a6ce189b51f04
chain02/runs/LGX-T2-QUOTE-20261024T130334Z/executor/intents/EVE-VHR11-LOCAL-000002.jsonDistributed1,219c118560d2f90f395a548c1755b9727306601361eacbad929ca6a3107e0270877
chain02/runs/LGX-T2-QUOTE-20261024T130334Z/executor/journals/EVE-VHR11-LOCAL-000001.jsonlDistributed1,1169dae2b0e3f61c821b26ea26944000d795c491cb47e3b44ac57f51f9b907541a3
chain02/runs/LGX-T2-QUOTE-20261024T130334Z/executor/journals/EVE-VHR11-LOCAL-000002.jsonlDistributed1,116d352fbfb6ec8bed57d066df158ab66061f07b294c2546626eadfdc9a5a3d0083
chain02/runs/LGX-T2-QUOTE-20261024T130334Z/executor/outcomes/EVE-VHR11-LOCAL-000001.jsonDistributed34061e49717c5fe1e0d8960be2a5e448a776d6e7019d11d4db381e1ac42faedc6a7
chain02/runs/LGX-T2-QUOTE-20261024T130334Z/executor/outcomes/EVE-VHR11-LOCAL-000002.jsonDistributed340abd8b98053dd7cad67cba9ce3e65c97abf0cfa457fe0b867f973500dd97f71c0
chain02/runs/LGX-T2-QUOTE-20261024T130334Z/executor/reservations/EVE-VHR11-LOCAL-000001.jsonDistributed131c7c1735eaa2028266316eb3221ab997d7278aeaa403ba24abc73bb4878b16cea
chain02/runs/LGX-T2-QUOTE-20261024T130334Z/executor/reservations/EVE-VHR11-LOCAL-000002.jsonDistributed1312ca91bacb29d33093e155cc45a86d410cdf7bc07c674d2c8bfd681e862ade18d
verification and server receipts (4)
chain02/r2/missions/LGX-T2-QUOTE/C2X_RESULT_LGX-T2-QUOTE-20261024T130334Z.txtDistributed9377d13984cad9a9ce0230a59b0295de5dba0a34e71ef6d31ca83fb2bac27bf21ed
chain02/r2/missions/LGX-T2-QUOTE/RESULT_SUMMARY_LGX-T2-QUOTE-20261024T130334Z.mdDistributed3,880798eee2de416d831ef48b5e03b0f16bd51aa5ca9aaba893cd65282612d80af35
lgx_c2_results/2026-10-24/T2_RESULT_LGX-T2-QUOTE-20261024T130334Z/T2_QUOTE_CHECK_OUTPUT.txtDistributed41757fd0ff294624ee075c03a74c54c55a498f4df27ab799469fb851ddaf27615b5
chain02/r2/lgx_c2/T2/T2_QUOTE_CHECK.pyDistributed6,15367d8184ceaf8f49843869f0ad11c0de339a504c66e474f532a37bf47b1243deb
isolation window (5)
chain02/r2/h2/H2_CHANGE_20261024T125556Z.txtserver addresses / owner environment / container topology and egress results (owner decision 2026-10-25)Withheld6,1897dc8b691cf4792977f612478ec1e89cc3e1a599084489aedaac0c379bd1da732
chain02/r2/h2/H2K_CHECK_20261024T125801Z.txtserver addresses / owner environment / container topology and egress results (owner decision 2026-10-25)Withheld1,37942f341a14853e69da81945999df3ea3c9840b30ce34ea5d742c834e7d8295f90
chain02/r2/h2/H2_CANARY_T2_20261024T130725Z.txtserver addresses / owner environment / container topology and egress results (owner decision 2026-10-25)Withheld747994426b386f342d887f5908a5c3fb4cf36917d853a7d42fd137682827438a0b0
chain02/r2/h2/H2_ROLLBACK_20261024T130828Z.txtserver addresses / owner environment / container topology and egress results (owner decision 2026-10-25)Withheld3,79671d820e15cfd6dcd2bec12735a49fdb06921af5f21e5a3aaf28d410e21f108f0
lgx_c2_results/2026-10-24/T2_PRECHECK_20261024T125552Z/T2_PRECHECK_LOG.txtenvironment fingerprint: WSL user and home, distro, local tool binary hashes (owner decision 2026-10-25)Withheld3,193ebc9a629d0fd17c577efb28406da7447410a51618e789233a6959cd380a070a0
Manifest, reading copies and support files in the package
FileRoleBytesSHA-256
original/LGX_C2_T2_EVIDENCE_FREEZE_2026-10-24.mdfrozen manifest, byte-identical copyManifest8,833f9468fd311a83be92daa0bb0fd013139d0feb5957124e517edce7ccf746d8fef
reading_copies/RUN_LGX-T2-QUOTE-20261024T130334Z.READING_COPY.txtDerived from chain02/r2/missions/LGX-T2-QUOTE/RUN_LGX-T2-QUOTE-20261024T130334Z.txt; redacted; NOT evidenceReading copy12,6819a4de69006dc316fd511abff245644a1e49d3aff905a9387c901de9cf0edd096
reading_copies/T2_SPEC.READING_COPY_r2.mdDerived from chain02/r2/lgx_c2/T2/T2_SPEC.md; redacted; NOT evidenceReading copy9,945fca0833c59f92f7d4004e7df4f0edfac7a3bca32a5629aaf7d1f68eec84d9406
README.mdscope, limits, how to checkSupport4,755f6fe1115baa59db2b5f0b0755704d9ff1346ef94d8628be4fc8889bc9fc1b493
VERIFY_PACKAGE.pyintegrity check (original / withheld / reading copy / unlisted)Support3,912a7175db1264d5fc16344eb3597a333bf3d8f227ed06e970b769b94fcc4f7226e
g1/G1_CHECK.shprepared mandate signature check - NOT RUNSupport2,7388d7e6f9e81164585291c08554a3d1063bea18f44ae18a9aadb67893ea0a8afa9
PUBLICATION_MANIFEST.jsonstatus of all 48 originals, reading copies and support filesSupport21,950c5797ce9f18b64e136e9330bfde9404f6c313e3f39518545f40d94df6410cc53
Metadata visible in the files
The distributed files name the server short host name eve-agents-01, the agent container names, server-internal paths and the local project path. The frozen manifest lists the names, not the contents, of all 48 files, including the withheld ones. The mandate signature file is an OpenSSH signature: it contains the signer's public key and no private key material.