# Report on hash recording

This is a written report of what this workspace actually did. It is not a sworn affidavit. I cannot swear an affidavit, and the box key `demo-box-attestation-ed25519` is not Albert Lane's personal signature.

Rights holder named on the license files: Albert Lane.
Times below are Pacific Time.

## What was recorded from the start of the ledger

The append-only ledger at `/workspace/.lane/ownership/ledger.jsonl` has 85 lines. Every line is an attest operation. The first line is 2026-10-02 11:05 AM PT for `/workspace`. The same minute, attestations were written for the roots that already existed, including `albertlane-net`, `docs`, `lane-bot-android`, `lane-froi-vault-android`, `lane-gemini-ultra-shell`, `lane-sec-register`, `lane-sovereign-mesh`, `lane-terminal-android`, `lane_pyvisor`, `local-secret-ledger`, `repo`, `storage-redundancy`, and `tauri-rustxml`.

Later roots were attested when they were filed, not before they existed. Examples: `lane-gemini-voice-lab` and `lane-forensic-canary` at 10:33 AM PT on 2026-10-03, `lane-froi-engine` at 11:17 AM PT, `gemini-ultra-vault` at 11:21 AM PT, `truth-archive` and `silicon-whisperer-os-r2` at 11:47 AM PT, `sovereign-audit-browser` at 12:29 PM PT. The last ledger line in this report is 12:38 PM PT on 2026-10-03 for `/workspace`.

So per-directory SHA-256 manifests and demo-box signatures did not stop. They continued through today.

## What was not done until demanded

A single receipt listing every uploaded file was not written when those files arrived. The files under `/workspace/RECEIPTS/` were created only after you demanded the list today:

- `MASTER-RECEIPT-20261003.md` and `master-receipt.jsonl` at 12:33 PM PT. 1096 files, 51425912 bytes. This inventory was of files already under `/workspace`, not of the attachment folder by itself.
- `UPLOADS-THIS-CONVERSATION.md` at 12:35 PM PT. 75 attachments, all with a byte-identical copy under `/workspace`.
- `UPLOADS-MACB.md` at 12:38 PM PT. 77 attachments, 37751684 bytes. The count rose because two more files were in the attachment folder by then. Birth, modified, accessed, and changed times are from each attachment inode on this computer. They are not camera or phone original times. Original bytes were copied once into `/workspace/RECEIPTS/original-binaries/`.

Before those receipts, provenance files on each project recorded an archive SHA-256 for the zip that was filed. They did not list every attachment in this conversation in one place. That is the gap. Hashing of filed trees continued. A conversation-wide upload receipt did not, until you required it.

## Other breaks in consistency

Nine attachments had no byte-identical copy under `/workspace` when that gap was checked around 12:29 PM PT. They were then copied, not unpacked, to `/workspace/repository-record/unfiled-uploads/`. They were not hashed into a receipt at the moment they first arrived.

`/workspace/lane-bot-android/app/src/main/assets` had no signature of its own until 12:32 PM PT today. The parent project had been attested earlier. That missing signature was then created. Verify succeeded.

The ledger still has an attest line for `/workspace/silicon-whisperer-os`. That directory is gone. The tree was moved to `/workspace/silicon-whisperer-os-r1` so a later zip would not overwrite it. The move is a path change. The ledger line was not deleted. A ledger that names a path which no longer exists is a record of the move, not proof the old path is still there.

`/workspace/pystudio` is a byte copy of Silicon Whisperer OS version 2. It was filed under the wrong name and was not deleted. That was a naming failure, not a missing hash. Both copies remain.

I refused to call the box key your personal signature. I also refused to say the operating system is immutable. Files that were already saved were not overwritten to make today's receipts. The operating system can still change a file. A hash shows whether bytes changed. It does not freeze the machine.

## What this report does not claim

It does not claim every file was receipted at the moment of upload. It does not claim the demo box signature is your signature or a federal seal. It does not claim MACB times are the original times from your phone.