Skip to content

Add signed encoding manifest for ca/policy/cra/td1-2026/provincial-territorial-personal-credits - #20

Closed
PavelMakarchuk wants to merge 3 commits into
mainfrom
axiom/signed-backfill-ca-29909578601-1
Closed

PavelMakarchuk wants to merge 3 commits into
mainfrom
axiom/signed-backfill-ca-29909578601-1

Conversation

@PavelMakarchuk

Copy link
Copy Markdown
Contributor

Signed apply manifest

Citation: ca/policy/cra/td1-2026/provincial-territorial-personal-credits
Base commit: c83f2ae3235f79a50acfa224d442ab704dfe280c
Axiom Encode run: https://github.com/TheAxiomFoundation/axiom-encode/actions/runs/29909578601

This draft PR was produced by the protected country-general signed-apply workflow. Review all RuleSpec and manifest changes before marking it ready.

@PavelMakarchuk

Copy link
Copy Markdown
Contributor Author

Independent review cycle completed on 97107e6e: no actionable findings. Verified 72 parameter rules, one 2026 snapshot with all 72 outputs, only Newfoundland and Labrador BPA changes (11188 -> 13094), 72 exact child-source proof excerpts on the expected jurisdiction citations, matching applied-file and source-attestation hashes, signed trusted-runtime provenance, parse checks, and git diff --check.

@PavelMakarchuk
PavelMakarchuk marked this pull request as ready for review July 22, 2026 10:23
@PavelMakarchuk

Copy link
Copy Markdown
Contributor Author

Post-review delta cycle completed on a4d472f: no actionable findings. The only delta is deletion of the stale active TD1 entry from known-validation-gaps.yaml, a decrement-only waiver change required by CI. The signed generated policy, companion test, and manifest remain byte-identical to reviewed commit 97107e6; YAML parse and diff checks pass.

@PavelMakarchuk

Copy link
Copy Markdown
Contributor Author

Final post-review metadata delta check on 57730f8: no actionable findings. Only .axiom/toolchain.toml changed, and its validation_waiver_set_sha256 exactly matches the reduced waiver file. Corpus release pins are unchanged; signed policy/test/manifest remain byte-identical to 97107e6; diff check passes.

@PavelMakarchuk

Copy link
Copy Markdown
Contributor Author

Superseded by #21, which regenerates the same audited TD1 module through the protected lane using the RuleSpec-trusted apply-signing key. This PR must not be merged because its manifest was signed by the retired ba63 trust root.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant