# LoopRelay performance-branch Luna certification and exact test evidence

This directory is the sanitized, portable test artifact for the LoopRelay
`improve-performance` branch after its complete real-Codex certification campaign.

The artifact is bound to:

- exact clean commit `9b7dc01433127647312cec4345e8d84b90582fab`;
- source fingerprint `1b4f43a7068b94ae986ec7db0525bf230f9c35b0cd1ebf0c01c7ea95e6eddb1d`;
- Codex CLI/app-server `0.144.1` with schema digest
  `d3639dd0e04172c9dbb9ca7af048e32cfe197d482d9344a137d2bca95f946c6f`;
- certified provider profile `gpt-5.6-luna/medium`.

## Results

- Clean Debug build: 0 warnings, 0 errors.
- Component suite: 1,529 passed, 0 failed, 3 opt-in live/measurement skips across 11 projects.
- Live exact Codex compatibility: 6 passed, 0 failed, 0 skipped.
- Deterministic certification: 6/6 commands passed.
- Targeted live certification: 7/7 commands passed.
- Full chains: Traditional 26/26 and Eval 29/29 transitions passed.
- Aggregate release gate: 15/15 dimensions passed, budgets passed, no privacy findings, platform claim `LocalWindowsOnly`.

The first `public-cli-contracts` invocation found a stale certification expectation
for schema v15 after production had moved to v16. The failed derived artifact is
included, the expectation was changed to derive the canonical current version, and
the repeated command passed. No live provider failure occurred.

## Contents

- `source/` — exact revision and reproducible source-fingerprint metadata.
- `build/` — sanitized clean/build logs.
- `trx/` — sanitized per-project component TRX files.
- `codex-compatibility/` — sanitized live Codex 0.144.1 compatibility TRX.
- `certification/evidence/` — copied derived certification results, production baseline, release-gate result, and disclosed initial deterministic failure.
- `fixtures/compatibility/` — checked-in scrubbed Codex compatibility fixtures.
- `fixtures/full-chains/` — retained Traditional and Eval repositories as sanitized text projections.
- `fixtures/public-cli-contracts/` — intentionally empty because the successful deterministic campaign was not run with case retention; its complete derived result remains in `certification/evidence/`.
- `summary.json` — reproducible aggregate and fixture inventory.
- `manifest.json` — revision, environment, commands, sanitization policy, and limitations.
- `derive-test-evidence.ps1` — regenerates `summary.json` from the artifact.
- `sanitize-test-results.ps1` — performs the private-to-public projection and validation.
- `SHA256SUMS` — SHA-256 for every artifact file other than itself.

## Privacy boundary

The fixture projections exclude all `.git` directories, `.LoopRelay` SQLite and
telemetry state, `codex-home` rollouts and caches, `auth.json`, and binary/private
fixture state. Remaining text is sanitized for private roots, local identity, host,
absolute paths, and email addresses. The packager rejects known private markers and
common credential-token patterns.

Raw rollouts and canonical telemetry/state remain in restricted private storage and
are not part of this artifact.

## Reproduce and verify

```powershell
./derive-test-evidence.ps1 -OutputPath ./summary.generated.json
```

Compare `summary.generated.json` with `summary.json` semantically, then remove the
generated comparison file.

```powershell
Get-Content ./SHA256SUMS | ForEach-Object {
    $expected, $name = $_ -split '  ', 2
    $actual = (Get-FileHash -Algorithm SHA256 -LiteralPath $name).Hash.ToLowerInvariant()
    [pscustomobject]@{ File = $name; Valid = $actual -eq $expected }
}
```

This finite campaign supports the named revision, profile, commands, and exercised
paths. It does not establish universal correctness or cross-platform behavior.
