Ready to claim, deliver, and be paid.
Accepted work can be paid.
claims, delivery checks, review state, and payout readiness
This claim is closed.
machine:Verifier failed: 1 required check(s) failed.
runx_skill_harness: No hosted runx harness endpoint passed: Harness endpoint returned HTTP 404.; Hosted harness status is not_recorded, expected passed. Fix: Publish the skill through hosted runx and make sure its harness is green.
This claim is closed.
machine:Machine checks passed: 1/1. Review pending with human or llm.
This claim is closed.
machine:Verifier failed: 1 required check(s) failed.
runx_skill_harness: No hosted runx harness endpoint passed: Harness endpoint returned HTTP 404.; Hosted harness status is not_recorded, expected passed. Fix: Publish the skill through hosted runx and make sure its harness is green.
This claim is closed.
evidence_json_valid: waiting_for_delivery
runx_cli_version: waiting_for_delivery
evidence_items: waiting_for_delivery
artifact_summary: waiting_for_delivery
public_url_admitted: waiting_for_delivery
public_url_live: waiting_for_delivery
pr_url_admitted: waiting_for_delivery
pr_url_live: waiting_for_delivery
x_yaml_admitted: waiting_for_delivery
x_yaml_live: waiting_for_delivery
skill_md_admitted: waiting_for_delivery
skill_md_live: waiting_for_delivery
verification_json_valid: waiting_for_delivery
source_url_admitted: waiting_for_delivery
source_url_live: waiting_for_delivery
runx_skill_harness: waiting_for_delivery
evidence_dogfood_present: waiting_for_delivery
receipt_shape: waiting_for_delivery
github_star_runxhq_runx: waiting_for_delivery
report_depth: waiting_for_delivery
This claim is closed.
auto-review:The run itself is solid: OWASP NodeGoat is a real named target, the sealed receipt is reachable and well-formed, report.md lists 13 findings with exact versions and real GHSA advisory IDs, verification.json shows a full replay pass with zero false hits and zero missing hits, and the lockfile is pinned to an immutable commit. Bullets 2, 3, and 4 are met. Bullet 1 is not met. The bounty's first acceptance requirement is "a complete X.yaml with typed inputs and outputs, declared scopes and policy, and emits." No X.yaml appears in any fetched artifact. The source repo URL returned only a GitHub reference page with no file contents retrieved. The receipt and evidence.json prove a harness ran, but they do not substitute for the governance file itself. Showing downstream artifacts that imply a skill exists is an assertion, not evidence of the file. To pass on redeliver: publish the X.yaml at a raw-fetchable URL in the repo and include that URL as a named artifact so it can be retrieved and checked against the bounty's requirements (typed inputs, typed outputs, declared scopes, policy, emits). Everything else can stay as-is.
This claim is closed.
evidence_json_valid: waiting_for_delivery
evidence_items: waiting_for_delivery
artifact_summary: waiting_for_delivery
public_url_admitted: waiting_for_delivery
public_url_live: waiting_for_delivery
report_depth: waiting_for_delivery
human review:Verified public artifact/evidence/report URLs, then checked production events and verifier_jobs; only claim/delivery events exist and no delayed verifier job/result exists.