# Harbor Room Governed Fixture — Verification Record

**Verification date:** August 24, 2026  
**Fixture version:** `public-governed-workflow-v1`  
**Disposition:** VERIFIED PUBLIC CANDIDATE / NOT PUBLISHED

## Reproduction

The runner was executed twice from clean temporary state. Both runs passed all 7 assertions. The generated manifest, ZIP export, and result JSON were byte-identical between runs.

Final generated-output SHA-256 values:

- `evidence/latest/manifest.json`: `396abbf2f566348d0205c486107b64fadc8ed2f65e36baaed5b462084428761c`
- `evidence/latest/public-fixture-export.zip`: `e1756b5911d692adae7991b8bca1cadee55bbf5a3351e1d38417479b8c6ba9d8`
- `evidence/latest/result.json`: `933aca8a8933c08c161ac928251172d8030818c719a45a10dfac8d7186b8e54f`

## Archive and database inspection

The ZIP contains exactly:

- `artifacts/harbor-room-observation.txt`
- `institution.sqlite`
- `manifest.json`

The database integrity check returned `ok`. Inspection confirmed five records, seven events, one preserved source artifact, and `correction-001` as the sole record with `CURRENT` authority. The rejected, deferred, and superseded interpretations all have `NONE` authority.

The fictional source SHA-256 is `3eb35a213d1a946f300c27e87084a6ec10d9b9c95a90eb765b7c3f9e42b229cc`. That identity is retained in the manifest and every derived record, and export/restore passed the runner's lineage check.

## Privacy and provenance review

The fixture directory and extracted archive were scanned for machine-local paths, URLs, email-like contact data, IP addresses, authorization headers, and common credential markers. No matches were found. The organization, participant, observation, model strings, and workflow are explicitly fictional or synthetic.

## Demonstrated

- Model-like proposals begin as interpretation, not current institutional authority.
- Explicit participant decisions keep accept, reject, and defer distinct.
- A participant correction can supersede an accepted interpretation without deleting lineage.
- The original source and authority history survive export and restoration.
- This execution used zero live model calls and zero network calls.

## Not demonstrated

This fixture does not establish model quality, universal AlexOS behavior, production readiness, application security, signing or identity guarantees, private-state parity, daemon isolation, or deployment behavior. It is not the production AlexOS application or reference kernel.

Publication, website download exposure, and any expanded claim remain separately approval-gated.