Invariants / CN-OPERATOR-EVIDENCE-01

CN-OPERATOR-EVIDENCE-01

CN release enforced

Every PHASE4-N-S-C operator-pass evidence manifest (docs/clusters/PHASE4-N-S-C/CE-N-S-LIVE_YYYYMMDD-.toml) carries the closed schema: schema_version, ade_commit, cardano_node_version, cardano_cli_version, network, block_hash, slot, opcert_fingerprint, genesis_fingerprint, ade_evidence_file, peer_log_file, peer_log_capture_command, peer_log_filter, peer_log_file_sha256, acceptance_keyword_match. The peer_log_file_sha256 cross-checks the committed peer.log file's actual hash. grep filter is documentation, not authority — the committed peer_log_file is the raw docker logs output.

Source: docs/planning/phase4-n-s-invariants.md §1 (I6); §2 (N6, N7); user-direction correction 6
Cluster: PHASE4-N-S-C
Introduced in: PHASE4-N-S-C

Enforcement trace

Code

Tests 0

no tests named — gap

CI 2

Cross-references

Strengthened in

Open obligation

Schema is enforced: any committed CE-N-S-LIVE_*.toml file MUST conform to the documented schema (the CI gate runs only when such a file is present). C1/C2 execution is blocked_until_operator_pass_executed: until the operator brings up a private testnet (C1) or preprod stake is provisioned (C2) and the binary is run + paired evidence committed, no CE-N-S-LIVE_*.toml exists and the CI gate is vacuously satisfied. Reopen criteria: operator commits at least one CE-N-S-LIVE_*.toml; the gate then verifies schema + sha256 match.