# Alpha.1 kernel evidence — 2026-07-27

## Scope

Local macOS witness for the repository-authored alpha. It does not prove semantic summary quality, every browser, Windows behavior, cloud transcription, or production scale.

## Witnesses

```text
PYTHONPATH=src python3 -m unittest discover -s tests -v
19 tests → OK

python3 -m compileall -q src
clipper/*.json → python3 -m json.tool PASS
provenance/*.json → python3 -m json.tool PASS

python3 -m venv /tmp/wiki-engine-venv
/tmp/wiki-engine-venv/bin/pip install .
wiki-engine --vault /tmp/wiki-engine-witness init
wiki-engine --vault /tmp/wiki-engine-witness doctor
wiki-engine --vault /tmp/wiki-engine-witness review
```

The disposable installed CLI reported schema `1.0`, zero problems, recovery not required, and a read-only empty Review queue.

### Public CI witness

GitHub Actions run [`30239758799`](https://github.com/youkistudios/wiki-engine/actions/runs/30239758799) completed with all six matrix jobs passing:

```text
ubuntu-latest × Python 3.10, 3.12, 3.14
macos-latest  × Python 3.10, 3.12, 3.14
```

This witnesses the repository test and validation commands on those hosted runners. It does not establish external-user, accessibility, semantic-quality, or production-scale evidence.

## Covered behaviors

- idempotent initialization;
- content-addressed ingest and exact-byte deduplication;
- final-component symlink refusal;
- safe visible receipts and hidden raw payloads;
- strict Signal/Wiki frontmatter lineage;
- two-source Wiki minimum;
- explicit Signal supersession and retained prior revision;
- durable video manifest/transcript binding;
- transcript-only, targeted-frame, and design/full-visual routes;
- uninspected GitHub link extraction;
- registry and Signal-record path tamper failure;
- source payload tamper detection;
- transaction-journal recovery witness;
- digest-bound Inbox acknowledgement;
- read-only organization Review.

## Evidence boundary

A same-user attacker capable of coherently replacing all payload and control metadata is outside the alpha threat model. Agent-authored Signal/Wiki correctness remains review-dependent.