machine:Machine checks passed: 3/3. Review pending with human or llm.

auto-review:PR is live at HTTP 200, authored by @argonautworks, machine floor is 3/3 green. The fetched artifact is a GitHub reference page with no raw diff, so content cannot be verified by this filter: offer quality, startup-specificity, first-party source accuracy, DCO CI pass, and data-only constraint are unconfirmed. The terminal acceptance bullet requires Sourcey human review, merge, and the vendor live on the Sourcey surface before Frantic accepts — that gate is unverifiable from a reference page. Passing to human review for diff inspection, offer verification against the first-party source, CI status check, and merge/publication confirmation.

human review:PR #147 merged; vendor kong live on the Sourcey catalog

machine:Machine checks passed: 3/3. Review pending with human or llm.

auto-review:Machine floor is clean: PR is live at sourcey/startup-credits/pull/149, URL admitted as public surface, and @argonautworks stars the repo. The artifact fetch returned a GitHub reference page with no raw diff or YAML content, so offer quality, sourcing completeness, first-party fields, CI/DCO status, and merge/publication state cannot be machine-verified here. The work is plausible and passes to human review. Human review must confirm: (1) the PR changes exactly one new vendor YAML under vendors/{shard}/ with no unrelated files; (2) the vendor is new to the catalog; (3) the offer is startup-specific, currently available, and supported by a first-party English-language source with complete structured fields; (4) CI and DCO pass on the current head; (5) the PR has been merged and the vendor appears on the live Sourcey surface before acceptance — this last bullet is a hard gate the machine cannot clear.

human review:PR #149 merged; vendor gumlet live on the Sourcey catalog

machine:Machine checks passed: 3/3. Review pending with human or llm.

auto-review:Machine floor clean: 3/3 checks passed (GitHub star confirmed, PR live at HTTP 200, public surface admitted). The PR exists at https://github.com/sourcey/startup-credits/pull/156 and the claimant stars the repo. Artifact fetch returned only a GitHub reference page with no raw diff contents, so offer substance, field completeness, first-party sourcing, data-only constraint, and CI status could not be verified from the fetched packet. The bounty's defining gate — Sourcey human review merges the PR and the vendor appears on the live Sourcey surface — cannot be confirmed from a live-but-unmerged PR URL alone. Advisory pass to human review: the reviewer must open the PR diff directly, confirm the vendor YAML is new to the catalog, verify the offer is startup-specific and sourced from a first-party English-language page, check Sourcey Candidate Verifier and DCO CI status on the current head, and confirm the PR has been merged and the vendor is live on the Sourcey surface before recording an accepted judgment.

human review:PR #156 merged; vendor mirava live on the Sourcey catalog

machine:Machine checks passed: 3/3. Review pending with human or llm.

auto-review:PR resolves and is public; machine floor passes (URL admitted, HTTP 200, @argonautworks stars sourcey/startup-credits). The artifact fetch returned only a GitHub reference page with no raw diff, so YAML content, vendor novelty, offer quality, source accuracy, and CI/DCO status cannot be confirmed by auto-review. The defining human-gate bullet — Sourcey human review, PR merge, and live surface appearance — is unmet in the current artifact evidence and must be confirmed by a human reviewer before acceptance. Passing to human review: verify the diff contains exactly one new vendor YAML with no unrelated files, confirm the offer is startup-specific and sourced from a first-party English-language page, check CI/DCO pass on the PR head, and confirm the PR has been merged and the vendor appears on the live Sourcey surface.

human review:PR #151 merged; vendor rize live on the Sourcey catalog

machine:Machine checks passed: 20/20. Review pending with human or llm.

auto-review:All 11 acceptance bullets met with evidence, not assertion. Package name is exactly `bookkeeper`, published under ArgonautWorks at `argonautworks/bookkeeper@0.1.0`. Public_url is the live canonical runx.ai listing (HTTP 200, ArgonautWorks as publisher). PR #384 against runxhq/runx is live; x_yaml and skill_md are raw-fetchable from the PR head commit `00988964a8731fb30e530b9584629ffcdc6edd28`. All artifacts reference the same revision consistently. Digest-pinned clean install succeeded and inspected ready. Local harness: 8 cases, 0 assertion errors. Hosted harness: passed_publish_gate. Post-publish dogfood ran the registry ref, sealed receipt `sha256:c2c3ea70e5a4e208f7e4d4e86d2386ea44182cb95f5d5e57fd48619ab3d9b130`, independently verified with production-mode Ed25519 signature and zero findings. evidence_json.dogfood contains the required block with package, input, command, receipt_ref, verify_verdict, and all 8 harness_cases by name and status. X.yaml policy declares side_effects: none, persists_state: denied, sends_messages: denied; dogfood output confirms ledger_mutation=false, write_count=0, writes=[], external_effects=[]. Harness covers the two required cases (sealed clean batch, refused ambiguous→needs_review) plus 6 additional lanes (unknown account, out-of-period, invalid amount). Every categorized line binds to a supplied chart account; no GL account invention. evidence_json carries 22 observations covering all required fields. Report and evidence cover full operator onboarding. The paid_publication_raw_ref warnings are inapplicable: raw GitHub URLs for x_yaml, skill_md, evidence_json, verification_json, and report are what the artifact spec calls for; the canonical public deliverable home is runx.ai, not a raw host. The hand-fed-input concern in the rubric targets skills that claim to go and get data but take it pre-supplied; here transactions[] and chart_of_accounts are the caller's own data by design and by bounty contract, making this a bounded read-only categorization tool with real operator value. 20/20 machine checks passed, no deterministic blockers. 5/5 clean delivery.

human review:Prior human review 2026-08-10 scored 4/5 with full reproduction; bounty payout floor is 5; no revision in 32 days; operator closure on 2026-09-11.

machine:Machine checks passed: 20/20. Review pending with human or llm.

auto-review:All eleven acceptance bullets met. Package name exact: `argonautworks/list-hygiene-judge@0.1.0`. Publish flow correct via purpose-scoped GitHub credential. `public_url` live on `runx.ai` under the worker's registry identity. PR #383 against `runxhq/runx` live; raw `X.yaml` and `SKILL.md` fetch from the worker's fork at commit `a92103ee`. All artifacts reference the same revision, digest, and receipt. Eight-case harness passed with zero assertion errors including the three required case names (`sealed_decay_re_permission`, `sealed_hard_bounce_suppress`, `stop_missing_or_stale_evidence`). Hosted registry harness confirmed 8 cases and 7 receipts. Post-publish dogfood ran the registry ref, sealed receipt `sha256:1010ba48...`, and verified with production-mode Ed25519 signatures in a 6-receipt tree with zero findings. CAS semantics are real: `data.append_event` with `idempotency_key` and `expected_version`, read back confirming `after_version: 1`. Safety guarantees proven by harness: no write on stale evidence, no write on active unsubscribe marker, refuses negative metrics. `downstream_send.status: not_run` correct; `send-as` is the named downstream enforcer. Evidence JSON covers all 12 required observations including consent-state verdict, recorded transition with aggregate binding, stop-without-append path, and the sealed receipt id. Real operational value: governs durable consent-state transitions before campaign sends, preventing delivery to suppressed contacts.