Two tapes verdict
Both ends of a tool call can keep their own tape: the agent side writes down every call it sent and every answer it got, the tool side every call it received and every answer it sent. Paste both tapes here and the witness service lines them up, call by call, and signs a receipt of what it found. The tapes are sent to the service for this one comparison and are not stored.
The tapes
Agent side's tape
The
arcaeon-tape/1 file the adapter writes with --tape.
Tool side's tape
The same calls as the tool side saw them (call_proxy
--tape, or the adapter with --side tool).
Verdict
Every finding
What could not be looked at
Receipt
Not compared
The four answers
- MATCHED n of n. Every call on either tape is on the other one, with the same request and the same answer.
- MISSING at call k. Call k is on one tape and not the other, or its answer reached one side only. The answer names the short tape.
- ALTERED at call k. Both tapes have call k and they disagree about it, or a tape contradicts itself: edited after it was written, or a call number used twice or out of order.
- COULD NOT LOOK. A tape is empty on both sides, is not a tape, holds two sides at once, or holds something the comparison will not guess about. That is never a pass.
The first divergence is the headline; the table lists every one. The rules are those of arcaeon-ledger reconcile (arcaeon-ledger 0.8.0), and the service is checked against that command, case by case.
What this does not prove
- The service saw only what was submitted. It did not see the calls, the agent or the tool. It compared two files someone chose to send, and the receipt says exactly that: these two tapes, as submitted, compared like this at this time.
- An operator-owned tape is not an outside witness. If one party runs both ends, MATCHED means two of its own recorders agree. That catches relays, gateways and bugs in between; it is not independent evidence, and a party that wants a false story can write two tapes that match.
- A call nobody recorded leaves no trace. If an agent never makes a call, or makes it through a channel with no tape on it, neither tape shows anything.
- No witness pin is checked here. Two tapes cut at the same point still match each other. The pin, a counter held by a third party, is what catches that; hold the tapes against it with
arcaeon-ledger reconcile agent.tape.jsonl tool.tape.jsonl --pin pin.json. - It compares content, not bytes. A relay that rewrites a message without changing what it says still matches, on purpose.