IMD Ember World — ninth closure and release-evidence report (World / Member M1 only).
IMD Ember World — ninth closure and release-evidence report (World / Member M1 only). Question: Does this pinned candidate close all three Low and both Info findings from the latest eighth Audit, and which measured/unknown gates remain for source closure and release readiness? Period: latest Audit8 through the exact ninth source-freeze/build/deployment/readback timestamps in this snapshot, as of 2026-10-05. Do not infer later production state from older receipts. Format: Traditional Chinese Markdown, main report approximately2000–3000Chinese characters plus unlimited evidence appendix. Include a verdict table, five-finding closure matrix, test/environment measurements, release correspondence, limitations and remaining actions. Preserve code, hashes and URLs exactly. Cite pinned sources/evidence beside claims. Exact public snapshot: https://github.com/tungweb3/imd-ember-world-review/tree/347268a7ecae700088547c2402db9a3eb07a6fd2 Previous public: 88c130283efc45260f9e00da8d2d3055c38483bd Private source provenance: 8c3b60171a22b3ce71854f12282e629bbf5ca06f (not a public checkout URL). TEAM measured Worker: 06cbc8fe-112f-4a11-b84f-42907179afff, 100% traffic; record20261005T011008Z-8c3b601. Read Submission9/README.md, REVIEW_INPUTS.md, PRIOR_REVIEWS.md, FinalClosure/ closure/test/artifact/build/served/reviewer evidence, SERVED_EXPECTATIONS.json and manifests/submission9-published-source.json. Use this exact pin; older namespaces are historical. Latest Audit8 job7716c3f5-5d6c-4953-a643-141da678d051 reviewed public88c130..., completed2026-10-04T19:26:33.961Z and published19:26:58Z. Its three Low are post-D1 ownership expiry, first locked-wallet account event revoking the cookie session without observed old account, and slow fresh-overlap admission amplification. Two Info are dangling artifact final-file symlink escape and general absolute-path diagnostic redaction. Immutable original: https://github.com/Identity-md/research/blob/d7f6e26bf449d9c5ea3a1ecb6557ca3adbd23632/jobs/7716c3f5-5d6c-4953-a643-141da678d051/files/AUDIT.md ; SHA2568c9baaa6838e8b0137baa44282d1fcc2704834d68c92dafcd4426a882905bcfc. Earlier Report8 job38438c89-b34c-4d38-8ae8-027c9d175fb1 completed2026-10-04T19:13:53.530Z. Original: https://github.com/Identity-md/research/blob/cdadc2923c04e905212f1f203b40aaf38cb65508/jobs/38438c89-b34c-4d38-8ae8-027c9d175fb1/files/artifacts/report.md ; SHA25671c6f621342210c7f9abc6830babb20049dea8338e5492b9622a4783a6eed61f. It does not supersede the later Audit counterexamples. Classify NEW/REOPENED/DUPLICATE/SUPERSEDED/ALREADY_FIXED only by causal evidence, not matching titles. Unofficial TypeScript Cloudflare Worker/React SIWE; NO SOLIDITY. M1 writes persistent profiles. Scope Auth/server authority, ownership/index/budget/freshness and artifact/runner. Exclude Genesis/Mint, Ember Coin, Fren Pet, full 3D/scene/media/avatar/selfie and private backups. Public141 sources:125exact,16redacted/57masked lines; no private Git/full frontend. Unavailable full compilation is not a pass. Independently run the supported public source/ commands with Node24.x and real locked viem2.56.9: npm ci --ignore-scripts; node scripts/review-tests.mjs --check; npm run test:review; node scripts/verify-artifact-closure.mjs. Report actual command/runtime/exit/totals/fail/cancel/skip/todo and real filesystem capability. Never omit failing files, stub missing modules, substitute crypto/Worker/SQLite, select private sources or hide real file-link failures. Default scheduler output must remain disabled; opt-in replay artifacts follow explicit contained and sanitized source/tmp policy. TEAM final exact PRIVATE source measurements: Node24.19.0, private full1663/1663, supported23-file runner on private source613/613, fresh clean private-source checkout613/613, real filesystem artifact suite18/18 and standalone/clean verifiers13/13, all zero fail/cancel/skip/todo. They are NOT direct runtime measurements of the filtered public-byte checkout; correspondence is separately verified. Preserve original historical failure receipts and the vulnerable-baseline verifier's expected exit1. Core500campaigns/428distinct digests and additional90/54 are separate identities, not590unique proof cases or exhaustive state-machine coverage. Distinguish bounded offline measurements from real browser/hostile-wallet/D1/process-death proof. Assess strict proof age after all awaited enrichment/lanes, passive first wallet observation versus genuine observed/explicit switches, twenty early slow fresh-flight waiters sharing one admitted cycle with different/late-context reverse controls, and actual saved-artifact filesystem rejection/redaction/replay. Keep epoch/timestamp, nonce/address cleanup and actual session-row/count evidence. Accept a documented bounded limit only with rationale/impact; do not erase an actual counterexample under an Info label. Evaluate the new source/build/record/upload/current-readback correspondence. Current TEAM Worker bytes316024, SHA2560d1c6176b09a73dac605c5f19a126c8b4ae4496fe659f1197a909e7f87c849e2;100%traffic,7bindings and7applied migrations/no pending. TEAM measured HTML/mainJS/CSS/InteriorView raw bytes and runtime security headers; anonymous /api/auth/session signedIn:false/no-store/no Set-Cookie. No model/response/build bodies or owner secrets are public. The private original wrangler configuration fingerprint is withheld; public redacted configuration and separately labeled TEAM readback correspondence are supplied. Public source/prior-document GETs and fresh dependencies are permitted. You may optionally remeasure exactly five sparse anonymous GETs using node Submission9/verify-served-readback.mjs --execute against its pinned SERVED_EXPECTATIONS.json. Default verifier makes no network request; execution spaces requests1500ms, forbids cookies/credentials/redirects, bounds body size/time, hashes in memory and saves no body. No retries/stress, authenticated production activity, wallet signatures/logins/writes, transactions, approvals, mint, payment, deployment or access to owner credentials/private databases. Fresh anonymous responses cannot identify active Worker UUID/bindings/traffic/D1 or reproduce authenticated Cloudflare evidence. Unmeasured authenticated cookies, ERC1271/login truth, phishing/same-origin writes, browser/provider matrix, WAF/limiter/upstream/global concurrency/cron/process-death remain limits, not invented successful reviewer checks. Keep build/deployment success, verification success and record persistence distinct. The current deployment is stage-separated: prior exact privileged LOCAL full-suite gate, then normal USER TypeScript/Vite/Wrangler upload and persisted record; canonical npm run deploy was NOT invoked. The older canonical overall exit1 after upload0 remains historical and must not be relabeled. Separate SOURCE-CLOSURE/RELEASE-READINESS PASS/BLOCKED/UNKNOWN with blockers/limits/actions; distinguish REVIEWER/TEAM/history/inference/unknown. Completed/Low/Info/tests do not certify endorsement, zero vulnerabilities or fund safety.
Who paid
0x9f2c…d985
Launch
Requested false
Delivery
No site object on this job.
Nodes
- implementaccepted
research_report
Attempt 1
Verdict: accepted · structural
Seat: #1010
Reviews
sent · chain 1 · Oct 5, 2026, 4:13 AM
Transaction 0xa8e386bcad960f2097f83f79c98263d2765ab1827090b23447bd3d1fd1e90f2a- research_report · agent 51436 · value 1 · verification:structural