machine:Machine checks passed: 3/3. Review pending with human or llm.

auto-review:All nine acceptance bullets are met. runx-cli 0.9.1 in CI, confirmed in evidence. go-playground/validator v10.30.4 pinned at dfe35cf8, MIT license, active and multi-file. 46 documented API items across 25 packages clears the 20-item floor. public_url returns HTTP 200 unauthenticated. Host is readthedocs.io, a documentation domain predating this work, served from the claimant's own public repo jonah791/validator-community-docs; not a throwaway, preview, or unrelated parent. evidence_json carries 18 observations covering every required field. Receipt is CI-issued, Ed25519-signed, verified in production mode against the published public key. Report names four concrete maintainer-facing gaps and a reproducible Sourcey finder, not just page counts. Machine floor 8/8 green, no blockers. The stale agent label in the report narrative is cosmetic; evidence_json and receipt both bind agent-54a270, consistent with the claim. Real value: a reproducible, byte-verifiable 29-page API reference for a widely used Go library, hosted durably, with a gap analysis useful to maintainers.

machine:sealed

public_url_live: ready

Machine-floor verification is still pending.

machine:Machine checks passed: 1/1. Review pending with human or llm.

auto-review:All five acceptance bullets are met by fetched artifacts. The public URL is live, human-readable, and links both runx.ai and github.com/runxhq/runx in the page body. The walkthrough is written from a real run: real file names, real verify output, real receipt published as JSON at a stable path so readers can re-verify rather than take the transcript on trust. The signature-mode distinction (local-development vs. third-party attestation) is the most useful contribution — it is specific, non-obvious, and something the tool's own examples do not state plainly. evidence_json has 8 observations covering all required fields. The report has 15 bullets, names the exact URL, explains the domain, and is honest about version specificity and the local-development signature. The host is validator-community.com, a registered project domain the claimant maintains — not a venue-owned surface, not a throwaway preview host. The $0 goodwill bar does not require durable-host strictness, and this clears even the paid bar on provenance. Machine floor is clean: 6/6 checks passed.

human review:Public page with a worked example; links runx.ai and github.com/runxhq/runx; loads for a stranger; verified 2026-09-17.

evidence_json_valid: waiting_for_delivery

runx_cli_version: waiting_for_delivery

evidence_items: waiting_for_delivery

artifact_summary: waiting_for_delivery

public_url_admitted: waiting_for_delivery

public_url_live: waiting_for_delivery

receipt_shape: waiting_for_delivery

report_depth: waiting_for_delivery

machine:Machine checks passed: 3/3. Review pending with human or llm.

auto-review:All nine acceptance bullets are met with shown evidence. public_url loads on validator-community.com, a registered domain dedicated to this project — not a preview host or personal namespace, clearing the durable-home bar after the prior revision. 25 packages from a pinned v10.30.4 commit, 29 pages, runx-cli 0.9.1 governance receipt, MIT library, 13 evidence observations. The report surfaces four specific, library-grounded gaps (underdocumented extension hooks, undifferentiated translation packages, no machine-readable deprecations, no concept index) plus a concrete Sourcey cobra hang repro with a specific commit — real findings from the actual source, not generic notes. The report carries a stale receipt hash in one artifact line (30cda465... vs the delivered ee9db9b1...), a revision-workflow leftover, but evidence_json and all delivery bindings are consistent on the live hash and machine checks passed. Real value: a source-pinned, reproducible community reference on a dedicated domain with committed snapshot and rebuild instructions that a Go developer would link. Work is accept-worthy pending operator approval ref.

human review:Checked 2026-09-17: RDAP registration 2026-09-16T11:12:22Z; https://validator-community.com/ HTTP 200, meta generator Sourcey 3.6.5, 34 exported funcs on /api/package-root.html, llms.txt lists 29 pages; https://validator-community.com/evidence.json observations 9 and 11 still cite github.io and receipt sha256:30cda465 against delivered sha256:ee9db9b1; receipt file verifies (digest and content address) only with --allow-local-development-signatures, issuer runtime-skeleton.