Executed at UTC: 2026-10-04T11:54:24.100993+00:00
Distill revision: 2417e00dabe498eb8187f4544f001d5a49fbdb45
Binary SHA-256: e265131bcda0b499f702f7d4cd4aea13d31bacc81c81e3634ffe63d49a947925
Runtime: go1.26.4; clean VCS revision
Source: retained case-01 public fixture; all original artifacts preserved
Scored model runs: 0; paid provider calls: 0

Check: lock public fixture inputs
$ distill lock config.json --output context.lock.json
Exit code: 0
stdout:
locked sources=3 duplicates=0 selected=3 tokens=532 lock_sha256=6cb95c3e205268b6addbe4c56e360b867a97b1dabddab3c2cdcab83f384c5a14
stderr:
(empty)

Check: build first artifact
$ distill build context.lock.json --output distill
Exit code: 0
stdout:
built sources=3 duplicates=0 selected=3 tokens=532 bundle_sha256=2c823187d98e56167582c28f7bb42e27f94b2ae365f326dc82ab4691df155ad7 lock_sha256=6cb95c3e205268b6addbe4c56e360b867a97b1dabddab3c2cdcab83f384c5a14 manifest_sha256=6ec1e0608fb72cf5c9dda22a5f4f2af77d3da871ac7797fd2f55016cb77ed534
stderr:
(empty)

Check: verify against retained lock digest
$ distill verify distill --expected-lock-sha256 6cb95c3e205268b6addbe4c56e360b867a97b1dabddab3c2cdcab83f384c5a14
Exit code: 0
stdout:
verified sources=3 duplicates=0 selected=3 tokens=532 bundle_sha256=2c823187d98e56167582c28f7bb42e27f94b2ae365f326dc82ab4691df155ad7 lock_sha256=6cb95c3e205268b6addbe4c56e360b867a97b1dabddab3c2cdcab83f384c5a14 manifest_sha256=6ec1e0608fb72cf5c9dda22a5f4f2af77d3da871ac7797fd2f55016cb77ed534
stderr:
(empty)

Check: build repeat artifact
$ distill build context.lock.json --output repeat
Exit code: 0
stdout:
built sources=3 duplicates=0 selected=3 tokens=532 bundle_sha256=2c823187d98e56167582c28f7bb42e27f94b2ae365f326dc82ab4691df155ad7 lock_sha256=6cb95c3e205268b6addbe4c56e360b867a97b1dabddab3c2cdcab83f384c5a14 manifest_sha256=6ec1e0608fb72cf5c9dda22a5f4f2af77d3da871ac7797fd2f55016cb77ed534
stderr:
(empty)

Check: verify repeat artifact
$ distill verify repeat --expected-lock-sha256 6cb95c3e205268b6addbe4c56e360b867a97b1dabddab3c2cdcab83f384c5a14
Exit code: 0
stdout:
verified sources=3 duplicates=0 selected=3 tokens=532 bundle_sha256=2c823187d98e56167582c28f7bb42e27f94b2ae365f326dc82ab4691df155ad7 lock_sha256=6cb95c3e205268b6addbe4c56e360b867a97b1dabddab3c2cdcab83f384c5a14 manifest_sha256=6ec1e0608fb72cf5c9dda22a5f4f2af77d3da871ac7797fd2f55016cb77ed534
stderr:
(empty)

Check: reject changed locked source
$ distill build context.lock.json --output rejected-source-drift
Exit code: 1
stdout:
(empty)
stderr:
Error: locked inputs or identities drifted; run lock explicitly to review changes
Usage:
  distill build <lockfile> [flags]

Flags:
  -h, --help            help for build
  -o, --output string   fresh output directory

Global Flags:
      --config string   config file (default is $HOME/.distill.yaml)
      --verbose         enable verbose output

locked inputs or identities drifted; run lock explicitly to review changes

Check: verify original artifact after rejected build
$ distill verify distill --expected-lock-sha256 6cb95c3e205268b6addbe4c56e360b867a97b1dabddab3c2cdcab83f384c5a14
Exit code: 0
stdout:
verified sources=3 duplicates=0 selected=3 tokens=532 bundle_sha256=2c823187d98e56167582c28f7bb42e27f94b2ae365f326dc82ab4691df155ad7 lock_sha256=6cb95c3e205268b6addbe4c56e360b867a97b1dabddab3c2cdcab83f384c5a14 manifest_sha256=6ec1e0608fb72cf5c9dda22a5f4f2af77d3da871ac7797fd2f55016cb77ed534
stderr:
(empty)

Check: reject modified bundle
$ distill verify tampered --expected-lock-sha256 6cb95c3e205268b6addbe4c56e360b867a97b1dabddab3c2cdcab83f384c5a14
Exit code: 1
stdout:
(empty)
stderr:
Error: context.manifest.json: bundle identity mismatch
Usage:
  distill verify <directory> [flags]

Flags:
      --expected-lock-sha256 string   trusted out-of-band context.lock.json SHA-256
  -h, --help                          help for verify

Global Flags:
      --config string   config file (default is $HOME/.distill.yaml)
      --verbose         enable verbose output

context.manifest.json: bundle identity mismatch

Check: reject different expected lock digest
$ distill verify distill --expected-lock-sha256 0000000000000000000000000000000000000000000000000000000000000000
Exit code: 1
stdout:
(empty)
stderr:
Error: trusted lock digest mismatch: got 6cb95c3e205268b6addbe4c56e360b867a97b1dabddab3c2cdcab83f384c5a14, want 0000000000000000000000000000000000000000000000000000000000000000
Usage:
  distill verify <directory> [flags]

Flags:
      --expected-lock-sha256 string   trusted out-of-band context.lock.json SHA-256
  -h, --help                          help for verify

Global Flags:
      --config string   config file (default is $HOME/.distill.yaml)
      --verbose         enable verbose output

trusted lock digest mismatch: got 6cb95c3e205268b6addbe4c56e360b867a97b1dabddab3c2cdcab83f384c5a14, want 0000000000000000000000000000000000000000000000000000000000000000

Repeat-build byte comparisons (first = repeat = original retained artifact):
context.bundle.md: 2674 bytes; sha256=2c823187d98e56167582c28f7bb42e27f94b2ae365f326dc82ab4691df155ad7; identical=true
context.lock.json: 3001 bytes; sha256=6cb95c3e205268b6addbe4c56e360b867a97b1dabddab3c2cdcab83f384c5a14; identical=true
context.manifest.json: 2957 bytes; sha256=6ec1e0608fb72cf5c9dda22a5f4f2af77d3da871ac7797fd2f55016cb77ed534; identical=true
SHA256SUMS: 274 bytes; sha256=4de1ce4af44a2ca9c192ffcb52f15fb885560fb03b30fc89bbface0d0f3e8aa4; identical=true