PUBLIC REPLAY
Verify one real packet.
One natural Flow pressure packet, one Hub countersignature, and one point-in-time archive answer—captured once and served only from the banked receipt below.
MS/1 · UNHOpen receipt JSON
packet ms1:flow:fd.positioning_pressure:equity:UNH:2026-07-17T23:04:20+00:00:020afcdf9f353607
payload sha256:502ef4c0d23ac6997534ff9d898e0105ed2d14ea3ece7f9c1a2f16a0c0debd22
key 4e10b56a3124ac27
value 75.9 · elevated
replay sha256:519a2c7dccdf1c9a80615593d53c7b53171b4d2a532253fe327fe1a7a1754c0a- Signature
- hub_countersigned
- Algorithm
- Ed25519
- Archive rows
- 67
PACKETHub countersigned
REPLAYpoint in time
CLAIM BOUNDARYcomposed receipt
01 · CAPTURE
The source stayed fixed.
Started
Completed
Flow source65e8a9d3600662c10bc52dd1deb8330237286513
Hub source476dfcea41340fb067a4bfde8ffeec8840068cac
Capture clientpublic GET only · no caller auth or cookie
Producer pathnormal Hub countersign POST occurred
Mutationno run, filing, custody, spend, latch, or go-live action
02 · PACKET
The body matches its hash.
- Subject
- equity:UNH
- Field
- fd.positioning_pressure
- Board clock
- 2026-07-17 23:04:43Z
- Measure clock
- 2026-07-17 23:04:20Z
- Key ID
- 4e10b56a3124ac27
Python's producer-compatible sorted, compact JSON rehash matches the packet payload hash. Ed25519 verification passes against the key ID captured from Hub discovery.
03 · REPLAY
The archive returns the same observation.
Requested cutoff2026-07-17 23:15:00Z
Snapshot anchor2026-07-17 23:02:46Z
Board anchor2026-07-17 23:04:43Z
Selectionlatest_archived_board_packet_at_or_before_requested_as_of_v1
Fingerprintsha256:519a2c7dccdf1c9a80615593d53c7b53171b4d2a532253fe327fe1a7a1754c0a
The archive response and signed packet agree on instrument, field, value, state, board clock, and measurement clock. The archive read does not recompute or backdate the packet.
CLAIM LIMIT
Two proofs, one honest join.
- Signature covers
- the MS/1 pressure packet
- Signature excludes
- replay receipt + archive fingerprint
- Receipt binds
- subject · value · state · clocks
- Producer-native signed replay
- not claimed
The signature covers the packet, not the replay receipt or archive fingerprint. The capture client issued public GETs; the sampled MS/1 route performed its normal downstream Hub countersign POST. The receipt composes two banked response bodies and never turns their equality into a claim that the Hub signed the replay archive.
VERIFY IT
Four checks, in order.
Rehash the unsigned packetRemove the signature object. Sort object keys recursively, serialize compact JSON with Python-compatible numeric tokens, SHA-256 the UTF-8 bytes, and compare the declared payload hash.01 · PASS
Verify the Hub signatureSelect the captured Hub discovery key by key_id. Verify Ed25519 over ms1-countersign/v0:flow:{packet_id}:marketschema.flow:{bare_payload_hash}.02 · PASS
Resolve the archive cutoffInspect the banked response. Confirm the selected snapshot and board clocks are at or before the requested cutoff and the archive fingerprint is exact.03 · PASS
Compare the observationMatch UNH, equity:UNH, fd.positioning_pressure, 75.9, elevated, and both captured clocks across the packet and archive response.04 · PASS
Plain JavaScript JSON.stringify is not claimed as a body rehasher for this captured packet: parsing turns producer tokens such as 1.0 into 1. The receipt records that mismatch instead of hiding it.
WITHHELD UNTIL PROOF
The trigger is a state, not a date.
Excluded until proof — this lane publishes only after its replay validates.
Publication trigger/v1/scorecard signal_gates.gates.flow_divergence.proof_state=proven and dt_weighting_status=eligible_after_cp_072_signal_gate.
Until thencontext-only · outside headline and DT weighting
Calendar ETAnone claimed
MACHINE RECEIPT
Every visible fact is pinned.
- Projection
- sha256:fc2e74ea4b87491327266a3dcbe8e0461570e928c0a3d5d501cc25e0907b0f8b
- Capture receipt
- sha256:d2838ba08d4145d2bb530ddc7a0441f5a5e280149ff793aecbbdcd0218c63c33
- Scope correction
- sha256:b63e979ba9782c974eff9d7be0b9fd55ae24cab4a9751771bee556ae8bf202eb
- Data contract
- 24a52152c6644166eeba44b586a74b93d63d4aab2b050d98ca8607ebb6e71de1
- Live fetch
- none on this page
The page renders the committed projection plus its additive v2 scope correction. The correction governs network-claim wording; the original v1 bytes remain immutable. Reloading cannot swap in a newer packet or silently change the demonstrated observation.
Banked public projectionv1 network wording is superseded by the v2 scope correction. No detached signature or public-key value is repeated here.JSON
{
"claim_scope_correction": {
"schema": "flow_public_replay_capture_claim_scope_correction_v1",
"status": "pass",
"recorded_at": "2026-07-20T19:10:02Z",
"scope": "claim_wording_only",
"supersedes": {
"path": "launch/flow-public-replay-capture-2026-07-20-v1/receipt.json",
"sha256": "d2838ba08d4145d2bb530ddc7a0441f5a5e280149ff793aecbbdcd0218c63c33",
"fields": [
"network_policy.methods",
"network_policy.direct_post_count",
"claim_limits[3]"
],
"original_bytes_remain_immutable": true
},
"corrected_interpretation": {
"capture_client": {
"methods_issued": [
"GET"
],
"authorization_headers_sent": false,
"cookie_headers_sent": false,
"direct_post_count": 0,
"snapshot_or_run_trigger_count": 0,
"filing_or_custody_mutation_count": 0,
"spend_latch_or_go_live_mutation_count": 0
},
"producer_downstream": {
"end_to_end_no_post_claim": false,
"countersign_post_occurred": true,
"method": "POST",
"endpoint": "https://api.marketschema.com/v1/ms1/signatures/flow/countersign",
"grant_header_capability": "X-MS1-Grant when the server-only room grant is configured",
"credential_value_inspected_or_banked": false,
"banked_result": {
"state": "signed",
"http_status": 200,
"key_id": "4e10b56a3124ac27",
"algorithm": "Ed25519"
}
},
"replacement_claim": "The capture client issued public GET requests only, sent no caller authorization or cookie header, and invoked no snapshot/run, filing/custody, spend/latch, or go-live action. The sampled MS/1 GET synchronously performed its normal downstream Hub countersign POST; no end-to-end no-POST claim is made."
},
"evidence": [
{
"path": "launch/flow-public-replay-capture-2026-07-20-v1/flow-ms1-pressure-limit-1.raw.json",
"sha256": "2ea26b084c00b2ac8cd2a3dc50e5be61bb6efa9e174559e5151b9b6533267bc7",
"binding": "signed countersign receipt with HTTP 200"
},
{
"path": "flowdensity/api/app.py",
"sha256": "eacefa4688115dede026b5ac0b5b6a089ec5de0b3dc97cc1ee9992a3cc24bd4c",
"binding": "GET /v1/ms1/pressure passes ms1_hub_countersign into packet construction"
},
{
"path": "flowdensity/public_api.py",
"sha256": "84f01f5c607d3a3cf23166a4ca85a6987b83e51e49b532e946bea10f42bdf254",
"binding": "one limited packet invokes the POST countersign client and records its result"
}
],
"does_not_change": [
"captured response bytes",
"payload hash verification",
"Ed25519 verification",
"packet-to-replay field equality",
"archive fingerprint",
"Flow or Hub runtime state"
]
},
"banked_projection_v1": {
"capture_id": "flow-public-replay:52d19238471379328ae052be",
"capture_window": {
"completed_at": "2026-07-20T18:38:47.581359Z",
"started_at": "2026-07-20T18:38:33.399728Z"
},
"claim_limits": [
"The MS/1 signature covers the current pressure packet, not the replay receipt or archive fingerprint.",
"This immutable receipt composes two natural GET responses and proves their exact public field equality.",
"The capture does not claim a producer-native signed replay packet.",
"No POST, snapshot run, replay mutation, filing, spend, latch, or go-live action occurred."
],
"evidence_kind": "composed_capture_receipt",
"measurement_binding": {
"board_as_of": "2026-07-17T23:04:43+00:00",
"board_clock_matches": true,
"field_id": "fd.positioning_pressure",
"instrument_id": "equity:UNH",
"measurement_as_of": "2026-07-17T23:04:20+00:00",
"measurement_clock_matches": true,
"state": "elevated",
"state_matches": true,
"symbol": "UNH",
"value": 75.9,
"value_matches": true
},
"ms1": {
"algorithm": "Ed25519",
"countersign_state": "signed",
"detached_signature_status": "hub_countersigned",
"key_id": "4e10b56a3124ac27",
"packet_id": "ms1:flow:fd.positioning_pressure:equity:UNH:2026-07-17T23:04:20+00:00:020afcdf9f353607",
"payload_sha256": "sha256:502ef4c0d23ac6997534ff9d898e0105ed2d14ea3ece7f9c1a2f16a0c0debd22",
"signature_policy": "canonical_sha256_integrity_binding_live_hub_key_detached_signature",
"signature_status": "hash_bound_hub_key_live_detached_signature"
},
"producer_packet_claim": false,
"raw_ms1_artifact": {
"contains_full_countersigned_packet": true,
"path": "launch/flow-public-replay-capture-2026-07-20-v1/flow-ms1-pressure-limit-1.raw.json",
"sha256": "2ea26b084c00b2ac8cd2a3dc50e5be61bb6efa9e174559e5151b9b6533267bc7"
},
"replay": {
"append_only": true,
"archive_entry_fingerprint": "sha256:519a2c7dccdf1c9a80615593d53c7b53171b4d2a532253fe327fe1a7a1754c0a",
"does_not_backdate": true,
"does_not_recompute": true,
"request_as_of": "2026-07-17T23:15:00+00:00",
"resolved_board_as_of": "2026-07-17T23:04:43+00:00",
"resolved_snapshot_as_of": "2026-07-17T23:02:46+00:00",
"row_count": 67,
"selection_policy": "latest_archived_board_packet_at_or_before_requested_as_of_v1"
},
"schema": "flow_public_replay_capture_projection_v1",
"served_source": {
"flow_commit_sha": "65e8a9d3600662c10bc52dd1deb8330237286513",
"hub_commit_sha": "476dfcea41340fb067a4bfde8ffeec8840068cac"
},
"source_receipt": {
"path": "launch/flow-public-replay-capture-2026-07-20-v1/receipt.json",
"sha256": "d2838ba08d4145d2bb530ddc7a0441f5a5e280149ff793aecbbdcd0218c63c33"
},
"status": "pass",
"verification": {
"js_numeric_reserialization": {
"canonicalization_attempt": "javascript/deep-sorted-keys/JSON.stringify/utf-8",
"generic_js_verifier_claim": false,
"integral_float_paths": [
"$.freshness.confidence_basis.coverage",
"$.freshness.confidence_basis.cap",
"$.source_health.snapshot_freshness_budget_seconds",
"$.provenance.source_receipt.snapshot_freshness_budget_seconds"
],
"matches_packet": false,
"payload_sha256": "sha256:469f8063632b4050d1bf4b3c9cc6ca2b0e36d0a645c01e15d27cd21750bac814",
"reason": "Parsed JSON loses Python integral-float tokens such as 1.0; JSON.stringify reserializes them as 1. Node verifies Ed25519 over the producer-declared hash, while the Python rehash binds that hash to this packet body.",
"status": "unsupported"
},
"node_ed25519": {
"algorithm": "Ed25519",
"live_hub_discovery_key_id": "4e10b56a3124ac27",
"message_template": "ms1-countersign/v0:{room}:{packet_id}:{issuer}:{payload_sha256}",
"public_key_bytes": 32,
"signature_bytes": 64,
"status": "pass",
"verified": true
},
"python_canonical_payload_rehash": {
"canonicalization": "python-json/sorted-keys/compact/utf-8/default-str",
"matches_packet": true,
"payload_sha256": "sha256:502ef4c0d23ac6997534ff9d898e0105ed2d14ea3ece7f9c1a2f16a0c0debd22",
"status": "pass"
}
}
}
}