Social Media 2 civic route logo Social Media 2

Build evidence

Social Media 2 build status

Social Media 2 is operated by the Polis cooperative. This surface reports mechanical audit state for every clause in docs/POLIS.md §10.

BUILD_DONE
FALSE
Clauses
89
PASS
70
FAIL
6
PENDING
13

Source Artifacts

Last evaluated: . Current failing clauses: E2, E3, K1, I0, H2, X4. Pending clauses: 13.

Clause Results

Each row has a stable anchor. The JSON manifest has the same clause order as POLIS.md §10.

Clause Group Status Last evaluated Audit summary
T1CodePASSRelease build succeeds for every workspace crate.
T2CodePASSWorkspace tests finish with zero failed and zero ignored.
T3CodePASSClippy passes for workspace tests and examples with warnings denied.
T4CodePASSWorkspace cargo check passes for tests and examples.
T5CodePASSRust source files stay at or under 500 lines.
T6CodePASSFunctions stay under 30 lines and cyclomatic complexity 10.
T7CodePASSMain branch contains no denied development markers.
T8CodePASSInvariant check rejects forbidden social-media symbols.
E1EmbeddersPASSThe 21-slot slate exists and every slot is loadable.
E2EmbeddersFAILDistinctness audit requires a real opt-in calibration set of at least 500; synthetic QA manifests are rejected.
E3EmbeddersFAILMarginal-info audit requires real 30-day outcomes; synthetic QA rows cannot satisfy this gate.
E4EmbeddersPASSFrozen embedder compile gate confirms no trainable gradient path.
E5EmbeddersPASSaiwonder /readyz is green with 23 warm models, covering all 21 slots plus rerank and search-embed; FSV 0810/0811.
E6EmbeddersPENDINGNo-LLM guard exists, but commissioned frozen classifier-embedder evidence for S5-S10, S20, and S21 is still tracked by the open ML-TRAIN issues.
C1ConstellationPASSTest citizen intake populates all 21 slots.
C2ConstellationPASSProvenance writes one row per slot forward pass.
C3ConstellationPASSDeletion contract purges private state within 24 hours and issues receipts.
C4ConstellationPASSConstellation type exposes no flattening operation.
C5ConstellationPASSAuthenticated production event, venue, and host-search routes read a real 21-slot stored Constellation per slot, with no flattening and no public per-citizen explanation.
K1Derived Data Abundance — 231-signal layerFAILProduction D1 has the cross-term table but 0 real cross-term rows; 210 pairwise terms per real Constellation are not populated yet.
K2Derived Data Abundance — 231-signal layerPENDINGFoundationality scalar Phase-O code/readback exists, but production per-citizen scalar population is not yet proven for BUILD_DONE.
K3Derived Data Abundance — 231-signal layerPENDINGEffective-rank reporting is not yet production-bound to the real DDA signal count.
K4Derived Data Abundance — 231-signal layerPASSMeaning-compression ratio is computed and surfaced in the meaning-compression dashboard readback from FSV 0804.
M1MatchingPASSUtility formula is computable and weights are signed by SARB approval id.
M2MatchingPASSConstellation guard rejects adversarial set with required recall.
M3MatchingPASSSelection pipeline emits valid candidate gatherings for all six formats.
M4MatchingPASSMistake loop consumes outcomes and updates protected per-citizen heads.
M5MatchingPASSSynthetic 10k-citizen allocation satisfies the Rawlsian floor.
M6MatchingPASSMatching accepts no priority or promotion path.
F1FormatsPASSAll six formats have data model, UI, and venue-integration contracts.
F2FormatsPASSAll per-format success metrics are computable.
F3FormatsPASSAgora token protocol, eknomos enforcement, and mind-change aggregate are present.
F4FormatsPASSSymposium phone basket and leitmotif card are present.
F5FormatsPASSFestival contract blocks commercial-vendor fields.
F6FormatsPASSAleatory composition remains pure lot after hard constraints.
L1LifecyclePASSFive-step onboarding flow completes end to end.
L2LifecyclePASSThree proof-of-personhood modes are supported; KYC document deletion is checked.
L3LifecyclePASSCitizen anchoring prevents simultaneous active polises and enforces move delay.
L4LifecyclePASSExit conversation, printed summary, and deletion receipt flow pass.
G1GovernancePASSVRF stratified sortition draws and logs verifiable receipts.
G2GovernancePASSCitizen Assembly state machine convenes, deliberates, tallies, and publishes aggregate.
G3GovernancePASSSARB weight-change approval and halt workflow pass.
G4GovernancePASSAmendment process time locks and revote ratification pass.
G5GovernancePASSCooperative articles artifact embeds Tier-4 invariants and signed PDF.
G6GovernancePASSFounder precommitment trust template passes.
P1Privacy + SecurityPASSPrivate state AEAD and HSM-emulator encryption contract passes.
P2Privacy + SecurityPASSDifferential-privacy aggregate enforces epsilon, delta, and min cell size.
P3Privacy + SecurityPASSSignal DM stores ciphertext only and requires prior meeting.
P4Privacy + SecurityPASSAudit log is append-only and citizen-pullable.
P5Privacy + SecurityPASSBreach incident-response drill pages and meets deadlines.
B1Business + VenuesPASSCivic subscription billing has four access-only tiers.
B2Business + VenuesPASSVenue registry, booking, and fee cap pass.
B3Business + VenuesPASSCivic fund ledger and catalyst grant workflow pass.
B4Business + VenuesPASSFinancial audit verifies zero ad and data-sale revenue.
B5Business + VenuesPENDINGStripe immutable webhook ledger, refunds/disputes, and ledger-gap detection remain tracked by open payments/admin issues.
B6Business + VenuesPENDINGBusiness-necessary payment/refund/fraud/tax data policy is partly documented, but full minimized access-controlled disclosure/reconciliation remains open.
W1aiwonder ML serving planePENDINGProduction search embed/rerank runs on aiwonder and Workers AI is disabled, but cross-term and matching compute are not fully proven on aiwonder.
W2aiwonder ML serving planePASSWorker-to-aiwonder Tunnel + Access bindings are live; bindings smoke reports aiwonder configured, no missing secret names, and closed breaker state.
W3aiwonder ML serving planePENDINGaiwonder service is reachable, but the isolated on-box subtree/user/slice/port separation readback remains to be completed.
W4aiwonder ML serving planePENDINGZero-data-retention teardown for raw citizen bytes on aiwonder is still tracked by open ZDR issues.
W5aiwonder ML serving planePENDINGWarm readiness and synthetic weekly-match timing are proven, but the full benchmark set is not yet complete for production BUILD_DONE.
W6aiwonder ML serving planePENDINGSearch vector receipts are stored in Cloudflare, but the full per-inference signed provenance receipt contract for all ML paths remains open.
W7aiwonder ML serving planePASSSynthetic 100-journey self-test passed end-to-end with real aiwonder, storage readback, and synthetic calibration exclusion in FSV 0810.
N1Admin console + protected rootPENDING/admin server-side RBAC remains tracked by open admin issues.
N2Admin console + protected rootPENDINGImmutable admin audit log and PII-masked UI are not yet complete.
N3Admin console + protected rootPENDINGRoot account immutability for [email protected] is specified but still requires DB/app guard and route/migration tests.
N4Admin console + protected rootPASSAdmin ML ops console surfaces live aiwonder warm, GPU/VRAM, queue, latency, per-slot drill-down, and BUILD_DONE clause status; FSV 0745.
I0InvariantsFAILInvariant all-pass gate remains failed until current audit closure is complete.
H1HardeningPASSFourteen hardening-axis checklist passes.
H2HardeningFAILIndependent pen-test evidence from an external firm is missing.
H3HardeningPASSReproducible build evidence passes.
A1Assets (A) — codex-generated visualsPASSLogo variants are generated and checked.
A2Assets (A) — codex-generated visualsPASSBrand palette, typography, and spacing are checked.
A3Assets (A) — codex-generated visualsPASSDesign-system component limits and denied primitives are checked.
A4Assets (A) — codex-generated visualsPASSRequired illustration count and categories are checked.
A5Assets (A) — codex-generated visualsPASSMarketing landing page check passes.
A6Assets (A) — codex-generated visualsPASSFestival poster template passes.
A7Assets (A) — codex-generated visualsPASSWooden speaking token render passes.
A8Assets (A) — codex-generated visualsPASSAccessibility audit gate for assets and pages passes.
D1DeploymentPASSD1 deployment topology contract passes.
D2DeploymentPASSLocal release gate enforces invariant clauses.
D3DeploymentPASSCitizen-data-free observability live check passes.
D4DeploymentPASSDisaster-recovery drill evidence passes.
D5DeploymentPASSPilot polis and infrastructure evidence pass.
D6DeploymentPASS100-citizen invite list and outreach plan evidence pass.
X1DocumentationPASSOperator runbook passes.
X2DocumentationPASSCitizen onboarding document passes.
X3DocumentationPASSWelcoming-citizen training guide passes.
X4DocumentationFAILLegal-reviewed cooperative articles and bylaws evidence is missing.

External Evidence Readbacks

These lines summarize no-secret public manifests. Secret values remain outside the repo.

Latest first-party calibration readback: 1 intake response, 0 thirty-day outcome responses, 0 joined records. No respondent data is public. Last read at 2026-05-28T20:46:41Z.

Latest synthetic QA boundary: synthetic QA is operational evidence only. It has 16 implemented submit smokes, 0 open submit smokes, 16 local successful synthetic paths, 1 production canary run, and 0 production synthetic rows counted as BUILD_DONE evidence.

Latest review mailbox readback: 0 security report candidates and 0 legal review candidates. No mail content is public. Last read at 2026-05-26T10:46:41Z.

Production cutover readback: semantic search is live on the apex with aiwonder search embeddings, real event and venue vectors, and authenticated event, venue, and host-search routes reading a real 21-slot Constellation as stored_constellation. DDA cross-term production rows remain at 0, so K1 still fails.

Latest acquisition readback: 46 acquisition paths cataloged. Mozilla MOSS SOS nomination and SilentProof Free Baseline are submitted pending external response or authorization email preparation; HackerOne Community Edition is held for the public form's three-month active-project age requirement; Open Bug Bounty, disclose.io safe-harbor review, OSS-Fuzz, Zealynx, OpenSSF Alpha-Omega, UTSA CIAS C4 Clinic, Michigan Law Community Enterprise Clinic, UGA Business Law Clinic, Georgia State CDELC, and Duke Community Enterprise Clinic are held for explicit no-cost, regional, eligibility, independent-report, policy, harness, scope-safety, or timing boundaries; Georgetown SENL Clinic intake is open but held until truthful private organization facts are available; RoundTable, Free Country Chicago, and WDCB are submitted pending editorial, moderation, or staff review; Google Event structured data is held until a truthful physical single-event leaf page exists; IndexNow key file is live and 4 owned URLs were accepted with key validation pending; Eventbrite and Humanitix free-listing attempts are held at provider login/signup; Around Evanston, ABC7, InEvanston, Enjoy Evanston, Patch, and Evanston Made are held for CAPTCHA, phone, location, event-fit, paid-promotion, or arts-calendar policy constraints.

Latest outbound queue readback: 27 no-cost actions tracked, 7 public forms submitted, 7 email messages sent from headed Gmail and matched in Sent search. Mozilla MOSS SOS nomination is submitted; HackerOne Community Edition remains age-gated; Georgetown SENL Clinic remains unsubmitted because its open application requires private owner-supplied organization facts. Both remain acquisition paths, not H2 or X4 evidence.