{
  "schema": "vaultfire.v3-launch-current-status-corrections.v1",
  "preparedDate": "2026-08-23",
  "purpose": "Correct two historical readiness-manifest findings on the read-only V3 launch console when later, checked-in source and command evidence is more current. This layer changes only the displayed status of the named findings; it does not change, delete, or reinterpret historical evidence.",
  "scope": {
    "historicalManifest": "release-evidence/VAULTFIRE_V3_FINAL_CROSS_CHAIN_READINESS_20260822.json",
    "candidateManifest": "release-evidence/BASE_V3_READ_ONLY_CANDIDATE_MANIFEST_20260822.json",
    "validatedCombinedSourceCommit": "66859326f1ff8519739bcfb44864b9dc24845322"
  },
  "claimsNotMade": [
    "audit completion",
    "independent human audit completion",
    "deployment readiness",
    "deployment",
    "signing authorization",
    "broadcast authorization",
    "pilot readiness",
    "pilot approval",
    "payment readiness",
    "payment settlement",
    "Bazaar activation",
    "production durable idempotency"
  ],
  "corrections": [
    {
      "id": "V2-ABI-001",
      "displayStatus": "superseded-by-current-strict-abi",
      "summary": "The historical strict-ABI failure is superseded for this console by the later current strict ABI validation: 36 frozen, provenance-backed V2 ABIs verified with exit 0. This is an engineering control only and does not establish audit, deployment, pilot, payment, signing, or broadcast readiness.",
      "historical": {
        "status": "blocking",
        "summary": "VaultfireTrustAttestation is the sole deployed V2 contract without a traceable canonical ABI; strict V2 ABI command exited 1."
      },
      "currentEvidence": {
        "candidateAssertions": {
          "path": "release-evidence/BASE_V3_READ_ONLY_CANDIDATE_MANIFEST_20260822.json",
          "sha256": "e4a3028796c74976f5b56cf034e2819c35944ae6c067b01ae1beb41ce55372ba",
          "jsonPointers": [
            "/engineeringEvidence/canonicalReleaseGate/exitCode",
            "/engineeringEvidence/canonicalReleaseGate/strictV2AbiCount"
          ],
          "expected": {
            "exitCode": 0,
            "strictV2AbiCount": 36
          }
        },
        "command": {
          "workingDirectory": ".",
          "argv": [
            "python3",
            "baseline/check_v2_abi_package.py",
            "--strict"
          ],
          "exitCode": 0,
          "stdout": "verified 36 frozen, provenance-backed V2 ABIs",
          "validatorSource": {
            "path": "baseline/check_v2_abi_package.py",
            "sha256": "9a08c9c3377f9233dd310f445ed6074d525b72e656310758c5169eac4dc3c071"
          }
        }
      }
    },
    {
      "id": "X402-VALID-AFTER",
      "displayStatus": "superseded-by-current-source-and-tests",
      "summary": "The historical missing-validAfter finding is superseded for this console by the later V3 source binding and recorded focused-test evidence. It does not enable x402: V2 remains the default, live settlement is unverified, and production durable idempotency is unverified.",
      "historical": {
        "status": "blocking-for-v3-enablement",
        "summary": "Prepared V3 challenge/payment types do not carry a validAfter field; a signed not-before policy remains to be specified and tested."
      },
      "currentEvidence": {
        "candidateAssertions": {
          "path": "release-evidence/BASE_V3_READ_ONLY_CANDIDATE_MANIFEST_20260822.json",
          "sha256": "e4a3028796c74976f5b56cf034e2819c35944ae6c067b01ae1beb41ce55372ba",
          "jsonPointers": [
            "/engineeringEvidence/apiAndX402/v3ValidAfterBoundAndTested",
            "/engineeringEvidence/apiAndX402/v2Default",
            "/engineeringEvidence/apiAndX402/v3LiveSettlementVerified",
            "/engineeringEvidence/apiAndX402/productionDurableIdempotencyVerified"
          ],
          "expected": {
            "v3ValidAfterBoundAndTested": true,
            "v2Default": true,
            "v3LiveSettlementVerified": false,
            "productionDurableIdempotencyVerified": false
          }
        },
        "recordedCommand": {
          "workingDirectory": "pr7",
          "argv": [
            "npm",
            "run",
            "test:x402"
          ],
          "recordedResult": {
            "focusedX402TestsPassed": 48,
            "paymentSecurityTestsPassed": 40
          },
          "limitation": "The exact npm run test:x402 command was rerun at source commit 66859326f1ff8519739bcfb44864b9dc24845322 and passed 48 tests, including 40 payment-security tests. This does not establish live settlement, facilitator, wallet, chain-finality, receipt-validation, Bazaar-activation, or production-durability readiness."
        },
        "sourceBindings": [
          {
            "path": "pr7/sdk/v3/x402.ts",
            "sha256": "0a5c6979390ce58fd1ff20dd23e0e1f3a9bc1cdd19124722dd12628e493b3eb3",
            "requiredText": [
              "validAfter: number",
              "[\"validAfter\", String(payment.validAfter)]",
              "now < challenge.validAfter"
            ]
          },
          {
            "path": "pr7/tests/x402/x402-payment-security.spec.ts",
            "sha256": "1d2f1dc176858615b827c51901943eea867c0d51ffc61b1fc58c9749348264fe",
            "requiredText": [
              "rejects a correctly signed payment before its validAfter time",
              "rejects a validAfter mutation that was not covered by the original signature"
            ]
          }
        ]
      }
    }
  ]
}
