Artifact E·aa36c8cc40

{
  "evidence": {
    "artifact_bytes": 2223,
    "artifact_sha256": "802d10005eb208e789eb70c85b68f60e75d7bcf876eaa40973ed0e521b6bc449",
    "cid_verified": false,
    "files": [
      {
        "bytes": 3868,
        "name": "acurast.sh",
        "sha256": "a96b77c6b959b6eb1cb70b163d1e5f86d4008881dea4a2cbd04204565141f872",
        "text": "#!/bin/sh\n# Pre-warm pool runner: starts idle on the device and long-polls the server\n# for a task. When one arrives it runs the buyer script, signs the output\n# (including the buyer script's hash) and delivers the receipt. One-shot:\n# exits after the task, or when the idle budget runs out.\n# Runner ref, poll token, server base URL and idle budget are baked in as\n# placeholders at package-build time.\ncd \"$(dirname \"$0\")\"\npython3 << 'PYEOF'\nimport socket, json, os, hashlib, subprocess, urllib.request, urllib.error, time\n\nRUNNER_REF = \"c6084ad0bd59c20d\"\nPOLL_TOKEN = \"fe13cfbee133d962b6351c5339918150\"\nSERVER_BASE = \"https://tee.papers.tech\"\nIDLE_BUDGET_S = int(\"3540\")\nMAX_CAPTURE = 64 * 1024\n\ndef call_bridge(method, params=None):\n    s = socket.socket(socket.AF_UNIX, socket.SOCK_STREAM)\n    s.connect('\\0' + os.environ['BRIDGE_SOCKET'])\n    req = json.dumps({\"jsonrpc\": \"2.0\", \"id\": 1, \"method\": method, \"params\": params or []})\n    s.sendall((req + \"\\n\").encode())\n    res = json.loads(s.recv(65536).decode())\n    s.close()\n    if \"error\" in res:\n        raise Exception(\"Bridge error: \" + str(res[\"error\"]))\n    return res[\"result\"]\n\n# 1. Long-poll the server until a task arrives or the idle budget runs out.\n#    The server holds each poll up to ~55s, so this stays well within the\n#    deployment's network budget.\npoll_url = \"%s/pool/task/%s?token=%s\" % (SERVER_BASE, RUNNER_REF, POLL_TOKEN)\ndeadline = time.time() + IDLE_BUDGET_S\ntask = None\nwhile time.time() < deadline:\n    try:\n        res = urllib.request.urlopen(poll_url, timeout=70)\n        body = res.read().decode()\n        if res.status == 200 and body.strip():\n            task = json.loads(body)\n            break\n    except urllib.error.HTTPError as e:\n        if e.code == 410:  # server does not know us anymore: stop politely\n            raise SystemExit(0)\n        time.sleep(10)\n    except Exception:\n        time.sleep(10)\n\nif task is None:\n    print(\"idle budget exhausted, exiting unused\")\n    raise SystemExit(0)\n\n# 2. Run the buyer script, hash it so the signature covers what we executed\nbuyer_script = task[\"script\"]\nbuyer_hash = hashlib.sha256(buyer_script.encode()).hexdigest()\nwith open(\"buyer.sh\", \"w\") as f:\n    f.write(buyer_script)\n\ntry:\n    proc = subprocess.run([\"sh\", \"buyer.sh\"], capture_output=True, timeout=int(task[\"timeoutS\"]))\n    exit_code = proc.returncode\n    stdout = proc.stdout.decode(\"utf-8\", \"replace\")[:MAX_CAPTURE]\n    stderr = proc.stderr.decode(\"utf-8\", \"replace\")[:MAX_CAPTURE]\nexcept subprocess.TimeoutExpired as e:\n    exit_code = -1\n    stdout = (e.stdout or b\"\").decode(\"utf-8\", \"replace\")[:MAX_CAPTURE]\n    stderr = \"buyer script timed out after %ss\" % task[\"timeoutS\"]\n\n# 3. Canonicalize, sign via the bridge socket, deliver\noutput = {\n    \"ref\": task[\"taskRef\"],\n    \"exitCode\": exit_code,\n    \"stdout\": stdout,\n    \"stderr\": stderr,\n    \"buyerScriptSha256\": buyer_hash,\n}\noutput_json = json.dumps(output, sort_keys=True, separators=(\",\", \":\"))\ndigest = hashlib.sha256(output_json.encode()).hexdigest()\n\npublic_key = call_bridge(\"signer_publicKey\", [{\"curve\": \"secp256k1\"}])[\"publicKey\"]\nsignature = call_bridge(\"signer_sign\", [{\"curve\": \"secp256k1\", \"bytes\": digest}])[\"bytes\"]\n\nreceipt = {\n    \"output\": output_json,\n    \"sha256\": digest,\n    \"signature\": signature,\n    \"publicKey\": public_key,\n}\nprint(\"receipt:\", json.dumps(receipt))\n\nbody = json.dumps(receipt).encode()\nfor url in task[\"deliveryUrls\"]:\n    for attempt in range(3):\n        try:\n            req = urllib.request.Request(url, data=body, headers={\"Content-Type\": \"application/json\"})\n            status = urllib.request.urlopen(req, timeout=30).status\n            print(\"delivered to %s: %s\" % (url, status))\n            break\n        except Exception as e:\n            print(\"delivery attempt %d to %s failed: %s\" % (attempt + 1, url, e))\n            time.sleep(5)\nPYEOF\n",
        "truncated": false
      },
      {
        "bytes": 294,
        "name": "manifest.json",
        "sha256": "4d19eb43aa04a9e64a9d7ce2e6737fdc90602368526042af59840bf8f9e1e09a",
        "text": "{\n  \"version\": 1,\n  \"restartPolicy\": \"No\",\n  \"entrypoint\": \"acurast.sh\",\n  \"image\": {\n    \"url\": \"https://github.com/termux/proot-distro/releases/download/v4.30.1/ubuntu-questing-aarch64-pd-v4.30.1.tar.xz\",\n    \"sha256\": \"5ab35b90cd9a9f180656261ba400a135c4c01c2da4b74522118342f985c2d328\"\n  }\n}\n",
        "truncated": false
      }
    ],
    "image_url": "https://github.com/termux/proot-distro/releases/download/v4.30.1/ubuntu-questing-aarch64-pd-v4.30.1.tar.xz",
    "job": {
      "job_id": "acurast:5HNL1Jezm6t8oeKZe126xr1AsMvLd61Eg6z4bDHskGWB1ctb:300498",
      "observed_block": "0x6b34083e8f15b0559926283292e73b8df86baf3ecff53196ece698530dbad870",
      "script_uri": "ipfs://QmULFY6w6VsHuZi1YZws8Ly9U7KryfHGGnnMjZ2PECUFi5"
    },
    "kind": "cargo_zip"
  },
  "identity": {
    "address": "5HNL1Jezm6t8oeKZe126xr1AsMvLd61Eg6z4bDHskGWB1ctb",
    "address_hex": "0xea9e06f6856ad09c6e2b435db6b265c4e3bd2605ae5500153e4e3bc35b96cb00",
    "id": "acurast:5HNL1Jezm6t8oeKZe126xr1AsMvLd61Eg6z4bDHskGWB1ctb:300498",
    "origin_variant": "Acurast",
    "sequence": "300498"
  },
  "outcome": "retrieved",
  "registration_id": "r:o:ad7084192d1bfc260da136846b0dcba5be67d7ac361bcc157b18361159a9e01c",
  "retrieval": {
    "cid_verified": false,
    "downloaded_bytes": 2223,
    "downloaded_sha256": "802d10005eb208e789eb70c85b68f60e75d7bcf876eaa40973ed0e521b6bc449",
    "failures": [],
    "gateway_index": 0,
    "inspection_error": null,
    "retrieved_at_ms": 1792955927255,
    "state": "retrieved",
    "trust": "trusted gateway; UnixFS root not independently verified"
  },
  "type": "artifact"
}

Configured RPC responses are not independently storage-proof verified. Reported outcomes retain their reported semantics. Only successfully covered history ranges support absence claims.