machine:sealed

Auto-review held the delivery for a person: Held for a person: description_json could not be read: dpaste.org refused our reader (HTTP 403); a person opens it in a browser. report could not be read: dpaste.org refused our reader (HTTP 403); a person opens it in...

receipt_shape: waiting_for_delivery

github_star_nitrosend_cli: waiting_for_delivery

report_depth: waiting_for_delivery

nitrosend_receipt: waiting_for_delivery

machine:Machine checks passed: 3/3. Review pending with human or llm.

auto-review:PagerDuty for Startups entity added at the correct path (entities/pa/pagerduty.yaml), one offer, complete structured fields matching the first-party source at pagerduty.com/startups/. Eligibility, access, economics, lifecycle, and source references are all present and internally consistent. Claimant provenance is confirmed via the fork SHA. Machine floor is 3/3 green with no blockers. The offer is a real, startup-specific program with material value — 6 months free on a platform startups actually pay for. Data-only PR, correct schema version, no fabricated facts.

human review:Pull request #1550 was closed without being merged, so the offer never reached Sourcey. Sourcey admission had marked it rejected as a conflict with an existing offer. Nothing on this claim can be accepted. Evidence: https://github.com/sourcey/startup-credits/pull/1550

machine:Machine checks passed: 5/5. Review pending with human or llm.

auto-review:All 12 acceptance bullets met. Package name exact: crm-cleanup. runx-cli 0.9.1 satisfies the 0.6.14 floor. PR #483 against runxhq/runx contains the skill package; raw x_yaml and skill_md are fetchable from the PR head commit 2fb647f9 in the claimant's fork. All artifacts reference the same version 0.2.0 and that commit. Clean install, local harness 4/4 sealed, hosted harness green. Dogfood receipt sha256:5d92e4f9 is the post-publish run of iliasabk/crm-cleanup@0.2.0, not a fixture seal; verify verdict valid. Real source read confirmed: crm_source.kind=web_fetch against a live raw.githubusercontent.com connector export at run time, not a hand-fed fixture. Full read→decide→write loop is proven: finalize enforces the allowlist deterministically, apply-write executes fs.write through the mock-crm-outbox transport under an X.yaml scope gate, record-write seals write_result with before/after pairs bound to the decision digest — a governed workspace write, not a returned data object. No-op path withholds all write steps when write_plan.status=withheld. Refusal cases for invented quote and unlisted field are both sealed. Output schema is fully typed with required and additionalProperties:false; schema enforcement is deterministic JavaScript, not hand-rolled presence checks. evidence_json carries 25 observations covering all required topics; report has 8 bullets. public_url is the canonical runx registry listing, the correct durable home for a published runx skill. No secrets in any artifact. Dogfood result is operationally useful: 3 applied CRM field updates with before/after against a real transcript, written to outbox.

human review:A6 requires the dogfood run to read current CRM records from a real source. The live connector export is examples/connector-export.json from the same commit. write_result.after is built from the decision instead of read back, bound_to is the input digest, the hosted harness ran 0 cases, and the pull request head moved after delivery. Paid runx skills need 5/5. Evidence: https://github.com/runxhq/runx/pull/483

machine:Machine checks passed: 5/5. Review pending with human or llm.

auto-review:All acceptance bullets met. Package name is exactly postmortem-maker, published as iliasabk/postmortem-maker@sha-ce80a6be011f with green hosted harness (4/4 cases). PR #478 against runxhq/runx is live; raw X.yaml and SKILL.md are fetchable from the PR head commit. CLI is 0.9.1 (≥ 0.6.14). Dogfood run fetched the live nltk/nltk#3733 GitHub issue and comments at run time via the runx resume channel — not a fixture — and produced a fully cited publishable postmortem with 3 timeline entries, known root cause, 0 unknowns, 2 action items. Sealed-outbox transport executed in the same run (fs.write to outbox/postmortems/gh-nltk-3733.postmortem.json, publish_result.executed: true). Receipt verifies valid (8-receipt tree, local-development signatures explicitly permitted by the bounty's verify command). Code-first audit confirms: finalize step enforces verbatim citation checks deterministically in javascript; deliver/record-delivery steps are conditional on send_plan.status === ready, so refused cases provably skip the write; schema has additionalProperties: false with enum and pattern constraints; no package-local lookalikes for any governed capability. Evidence and report cover all required fields. Provenance chain is auditable: registry owner, fork commit, PR, raw files, and gist evidence all trace to the same claimant and revision. The skill reads a real source and executes a real governed write — it does operator-useful work, not a pattern demo.

human review:GET repos/runxhq/runx/pulls/478 returned 404 and GET users/iliasabk returned 404 on 2026-09-15; runx.ai/x/iliasabk/postmortem-maker@sha-ce80a6be011f still returns 200.