Verification note: AI-generated clearance certificate and ledger

Checked Nov 4, 2026, about 10:00–10:25 PM PT, with plain HTTPS GET requests (user agent AROS-Validator/5.0). Nothing was created or changed to make a claim true.

Documents checked: SLSA Level 3 clearance certificate (PDF) and provenance estate ledger (Markdown). Both were generated by an AI assistant. Their digests and signature are not independently verified.

Result

0 of 19 listed digests match the SHA-256 of any live response body.

All 18 /app/* routes return HTTP 200 on albertlane.net. 5 are dedicated pages (z-axis, marketplace, packaging, website, violations). The other 13 return the same generic hub page that any unknown /app/ path returns.
Those HTML pages embed a per-request value, so their SHA-256 changes on every fetch. A fixed digest for them cannot match.
/site-directory.json is stable: HTTP 200, 348,915 bytes, SHA-256 e93657b90c09629296ab155c45a02e9da07861352ab13493bfe58181902932d7 (24,462 URLs, 12 hosts). The listed digest is 4a5b6c7d…. No match.
api.albertlane.net/v1/manifest/proof?route=… returns HTTP 404 "route not in manifest" for all 19 entries, so the proof responses quoted in the d1 transcript are not served live.
sec.albertlane.net/app/sec-manifest returns 404. sec.albertlane.net/estate/sec-manifest is a real page (HTTP 200, about 333 KB). The listed Merkle root string appears there only as a stated, unverified hash of a different evidence item, not as a Merkle root.
The Ed25519 signature block names no public key, so it cannot be checked. "Block #894012" names no chain.
Most listed digests are sequential hex patterns (for example 1b2c3d4e5f6a7b8c…), and some routes (for example /app/phonon and /app/aros) are given different digests at different points in the d1 transcript.

Per-route results

Route	Listed digest	albertlane.net	sec.	aros.	api proof	Match
`/app/sec-manifest`	`7e8f9a0b1c2d3e4f…`	200 · 4,033 B · generic hub page	404	200	404	No
`/app/z-axis`	`1b2c3d4e5f6a7b8c…`	200 · 4,173 B · dedicated page	404	200	404	No
`/app/phonon`	`9b0c1d2e3f4a5b6c…`	200 · 4,033 B · generic hub page	404	200	404	No
`/app/aros`	`1a2b3c4d5e6f7a8b…`	200 · 4,033 B · generic hub page	404	200	404	No
`/app/froi`	`3d4e5f6a7b8c9d0e…`	200 · 4,033 B · generic hub page	404	200	404	No
`/app/forge`	`7c8d9e0f1a2b3c4d…`	200 · 4,033 B · generic hub page	404	200	404	No
`/app/marketplace`	`9218e47f2a104b28…`	200 · 3,923 B · dedicated page	404	200	404	No
`/app/packaging`	`5c6d7e8f9a0b1c2d…`	200 · 4,564 B · dedicated page	404	200	404	No
`/app/website`	`4e5f6a7b8c9d0e1f…`	200 · 3,719 B · dedicated page	404	200	404	No
`/app/cache`	`1f2e3d4c5b6a7f8e…`	200 · 4,033 B · generic hub page	404	200	404	No
`/app/gateway`	`3a4b5c6d7e8f9a0b…`	200 · 4,033 B · generic hub page	404	200	404	No
`/app/telemetry`	`4c5d6e7f8a9b0c1d…`	200 · 4,033 B · generic hub page	404	200	404	No
`/app/whistleblower`	`9a0b1c2d3e4f5a6b…`	200 · 4,033 B · generic hub page	404	200	404	No
`/app/audit-log`	`8b9c0d1e2f3a4b5c…`	200 · 4,033 B · generic hub page	404	200	404	No
`/app/iam`	`2c3d4e5f6a7b8c9d…`	200 · 4,033 B · generic hub page	404	200	404	No
`/app/pki`	`a1b2c3d4e5f6a7b8…`	200 · 4,033 B · generic hub page	404	200	404	No
`/app/violations`	`0f1a2b3c4d5e6f7a…`	200 · 3,790 B · dedicated page	404	200	404	No
`/app/deck`	`5d6e7f8a9b0c1d2e…`	200 · 4,033 B · generic hub page	404	200	404	No
`/site-directory.json`	`4a5b6c7d8e9f0a1b…`	200 · 348,915 B · directory JSON	404	200	404	No

aros.albertlane.net answers every path with a generic JSON status (about 220 bytes). sec.albertlane.net returns a 9-byte 404 for these paths.