Tests Pass
inconclusive
cannot_verify_locally: iOS target requires Xcode; not installed on the build host
- outcome=cannot_verify_locally
- limitation=iOS target requires Xcode; not installed on the build host
portfolio-verification-checkrun
Boundary
This receipt is not a safety certification, security approval, or live health guarantee. It summarizes the public-safe evidence, checks, exclusions, freshness, and limitations listed below.
Inconclusive
Claims Match
inconclusive
cannot_verify: claims were found but could not be checked
- outcome=cannot_verify
- ledger_count=1
portfolio-verification-checkrun
Not Checked
Liveness
not checked
not_applicable: liveness only applies to web-deploy stack
- outcome=not_applicable
portfolio-verification-checkrun
Passed
Tests Present
passed
pass: truth data reports a test suite
- outcome=pass
- derived_has_tests=True
portfolio-verification-checkrun
Ci Present
passed
pass: truth data reports CI workflows
- outcome=pass
- derived_has_ci=True
portfolio-verification-checkrun
Ci Green
passed
pass: latest default-branch workflow succeeded
- outcome=pass
- conclusion=success
- run_url=https://github.com/saagpatel/GhostRoutes/actions/runs/28792086147
portfolio-verification-checkrun
License Present
passed
pass: truth data reports a license file
- outcome=pass
- derived_has_license=True
portfolio-verification-checkrun
Evidence
Evidence entries are public-safe references and digests, not raw private reports.
| ID | Title | Kind | Reference | Digest |
|---|---|---|---|---|
| portfolio-verification-checkrun | Portfolio repository verification check-run | json | local-public-safe-input:portfolio-verification-checkrun | 51e6833a3f51e5db... |
Intentionally Excluded
Local filesystem paths and raw logs
The receipt includes bounded outcomes, counts, and short reasons only.
Secrets and private configuration
The check-run contract excludes credentials, token values, environment dumps, and private config.
Mutable repository state
The runner is read-only for target repositories and does not record unbounded working-tree detail.
Limitations
A receipt is not a certification, approval, or live health guarantee.
External checks depend on local CLI availability, network access, and current provider state.
Claims matching is limited to mechanically checkable README signals in v1.
Passing checks do not prove security posture, maintainability, or release readiness.
Reproduce Or Inspect
Run a bounded portfolio verification check-run.
python3 scripts/portfolio_verify_run.py --repo-id <repo> --repo-path <repo> --repo-full-name <owner/name> --stack <stack> --truth <truth.json> --out <check-run.json>
Generate this receipt.
trust-receipt repo-verify --input <check-run.json>