R12 Residual Packet C2 Reproducibility Audit Result

Status: closed before beacon, seed, board, packing, fit, or evaluation.

Verdict

The C2 toy generator and auditor are not admissible for a production freeze. This is independent of the earlier prerequisite failure that already closed C2. No production seed or generator was invoked.

Audited untracked snapshot hashes:

generator: 8f428df0ee5b775721985a166fbd58a014b680b24ce81d31780a345460e50a7e
auditor: 1df476ecc9d5a1e7d2a64d8dd406e1f43332c7df58d708f1d93f07d9e03e04e4

Blocking findings

One semantic beacon pulse admits multiple valid seeds because raw JSON bytes and post-pulse validator metadata enter the entropy. Pretty-printing, validator ordering, or validated_at changes produced different accepted commitments for the same parsed pulse. This is a seed-grinding channel.
The required freeze surface is incomplete. Production evaluator, scorers, jobs, runtime identity, provenance binder, packing, fit, evaluation, gates, and resource ledger are absent.
Prerequisite, freeze, and validator evidence are caller-supplied hashes and booleans rather than replayed evidence.
Seed consumers do not independently replay the raw beacon, signature, certificate, freeze receipt, validator evidence, or prerequisite results.
The claimed freeze commit is not proven to contain the executed bytes.
Runtime replay depends on CPython, random.Random, tokenizers, and absolute paths without an immutable runtime or conformance vectors.
Local O_EXCL and mode 0444 do not prove one-shot execution or preserve failures in an external append-only ledger.
The second implementation is not clean-room: tests prove only absence of an import, not independent control flow or independently generated golden vectors.

Targeted tests passed 42/42, and 32 toy differential replays agreed. Those facts establish internal consistency under the tested local runtime only; they do not repair the custody failures above.

Decision

C2 remains closed. The untracked toy files are retained only as quarantined mechanics and must not be committed as a production-ready protocol, used to request a beacon, derive a seed, generate a board, or authorize a fit. Reopening would require a new canonical seed scheme, complete immutable freeze surface, content-addressed externally timestamped bundle, git-tree binder, runtime digest or runtime-independent primitives, append-only attempt ledger, and a genuinely independent implementation with adversarial golden vectors.