From 5dc8de909be85f23240ad8d932dcea770abe0000 Mon Sep 17 00:00:00 2001
From: James Ross <james@flyingrobots.dev>
Date: Wed, 29 Jul 2026 13:05:20 -0700
Subject: [PATCH 1/8] test: require typed greeting result evidence

---
 tests/runtime.sh | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/tests/runtime.sh b/tests/runtime.sh
index 00aa046..c33236d 100755
--- a/tests/runtime.sh
+++ b/tests/runtime.sh
@@ -55,6 +55,12 @@ assert_common_witness() {
     --arg lawpack_manifest_sha256 "$lawpack_manifest_sha256" \
     '
     .operation == "examples.hello_echo@1.createGreeting"
+    and .applicationResult.projectionIdentity
+      == "791fb36bb4d42273eb558ce4d03d68d90a678d15891fb9cbe4ad8a20bb56fa82"
+    and .applicationResult.outputType
+      == "examples.hello_echo@1.GreetingCreated"
+    and (.applicationResult.canonicalBytesHex | test("^([0-9a-f]{2})+$"))
+    and (.applicationResult.resultIdentity | test("^[0-9a-f]{64}$"))
     and .artifacts.package.algorithm == "sha256"
     and .artifacts.package.digestHex == $package_sha256
     and .artifacts.verificationReport.algorithm == "sha256"
@@ -69,6 +75,7 @@ assert_common_witness() {
     and .recovery.stateRecovered == true
     and .recovery.outcomeRecovered == true
     and .recovery.receiptRecovered == true
+    and .recovery.applicationResultRecovered == true
     and .recovery.mutatedInitialStateRefusal == "echo-operation-execution-mismatch/action-basis"
     and .duplicate.obstruction == "causal.cell@1.AlreadyExists"
     and (.duplicate.applicationStateRootBefore | test("^[0-9a-f]{64}$"))
@@ -102,6 +109,10 @@ jq -e '
   .causalSite.basis == "u0"
   and .causalSite.nodeKey == "greeting"
   and .state.valueUtf8 == "Hello Echo"
+  and .applicationResult.canonicalBytesHex
+    == "a2636b6579686772656574696e67676d6573736167656a48656c6c6f204563686f"
+  and .applicationResult.resultIdentity
+    == "bfc50f30e68ac57742ef0fb0ccc41506c1af4a9ecdeca32c0b934a1adccb9860"
 ' "$golden_witness" >/dev/null
 
 # Identical source, closure, input, and empty-WAL basis produce identical evidence.

From cd9cd0333a2dc9991e53f7b5ba97334f8c21b1d0 Mon Sep 17 00:00:00 2001
From: James Ross <james@flyingrobots.dev>
Date: Wed, 29 Jul 2026 13:06:19 -0700
Subject: [PATCH 2/8] fix: pin projected result artifacts

---
 tests/runtime.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/tests/runtime.sh b/tests/runtime.sh
index c33236d..9b92ae4 100755
--- a/tests/runtime.sh
+++ b/tests/runtime.sh
@@ -15,8 +15,8 @@ mkdir -p "$runtime_root"
 package_file=.build/application/executable-operation-package.cbor
 verification_report_file=.build/application/verification-report.cbor
 lawpack_manifest_file=vendor/causal-cell/manifest.cbor
-expected_package_sha256=67dc6d23e223e78b6aa774a2f57c86db2eff4981ea793975d39c66f731f02fd1
-expected_verification_report_sha256=8a5153b4ec25ebe979f0ceab373d03969e30a64d7973b3a83e3c84877c5aa564
+expected_package_sha256=3665d692cdd120f116f18067f2fd583e841448d057b5e35515f57264f853d0f6
+expected_verification_report_sha256=2541c8263d95fdad52f4f5a3bbfed48fdefd9f20969156c3c3fd56be912b66dd
 expected_lawpack_manifest_sha256=7bb901c984a92ed50795f8b5f7efe8d0648124574fa82250c6373a30e94333c9
 
 sha256_file() {

From 155636b04ea0d63dfc54f8becc65b206ed11499b Mon Sep 17 00:00:00 2001
From: James Ross <james@flyingrobots.dev>
Date: Wed, 29 Jul 2026 13:06:42 -0700
Subject: [PATCH 3/8] docs: describe typed result recovery

---
 README.md       |  6 +++++-
 docs/roadmap.md | 15 ++++++++++-----
 2 files changed, 15 insertions(+), 6 deletions(-)

diff --git a/README.md b/README.md
index 00a38d7..9824fd6 100644
--- a/README.md
+++ b/README.md
@@ -75,7 +75,11 @@ The structured witness proves:
 - one scheduler-selected Action in one atomic Tick;
 - decided-Tick recovery of Action, Tick, state, outcome, and Receipt by
   reopening that persisted WAL in another fresh host;
-- successful greeting state derived from typed input;
+- the exact package-declared
+  `examples.hello_echo@1.GreetingCreated { key, message }` result as canonical
+  evidence, including recovery of the same result without native
+  reconstruction;
+- successful greeting state derived from the same typed input;
 - package-declared `causal.cell@1.AlreadyExists` obstruction on duplicate
   creation, with equal canonical application-state roots and typed target-value
   digests independently demonstrating no hidden mutation;
diff --git a/docs/roadmap.md b/docs/roadmap.md
index 738ec96..9309961 100644
--- a/docs/roadmap.md
+++ b/docs/roadmap.md
@@ -70,20 +70,25 @@ Prove the existing compiler and runtime seam without external effects:
 5. obstruct duplicate submission while exposing equal before/after
    application-state roots and typed target-value digests;
 6. refuse an altered pre-Tick basis; and
-7. prove replay equivalence.
+7. prove replay equivalence; and
+8. retain the exact compiler-authored typed application result through
+   independent verification, scheduler evaluation, and WAL recovery.
 
 Roadmap A ends when the standalone witness passes without a runtime fake,
 native application callback, handwritten package, or host-checkout path.
 
-The standalone witness now covers all seven steps with one Action in one Tick.
+The standalone witness now covers all eight steps with one Action in one Tick.
 The generic runner reopens one persisted WAL for pending and decided recovery;
 the external suite separately proves byte-identical deterministic reruns from
 the same empty-WAL basis. Duplicate no-mutation proof compares Echo-produced
 graph-only application-state roots and typed target-value digests; it does not
 mistake the legitimately extended WAL, Tick history, or Receipt evidence for
-application mutation. This is a singleton scheduler proof, not a claim that the
-permanent multi-Action Tick model is complete. Roadmap A.1 begins only after the
-runtime witness lands on `main`.
+application mutation. The application result remains the exact canonical
+`GreetingCreated { key, message }` value declared by Edict; Echo reports and
+recovers generic typed bytes without application-specific reconstruction. This
+is a singleton scheduler proof, not a claim that the permanent multi-Action
+Tick model is complete. Roadmap A.1 begins only after the runtime witness lands
+on `main`.
 
 ## Roadmap A.1 — Hello Effect
 

From 8037dcb9d4d6b575bb1219058acbc22672cd4f02 Mon Sep 17 00:00:00 2001
From: James Ross <james@flyingrobots.dev>
Date: Wed, 29 Jul 2026 13:06:52 -0700
Subject: [PATCH 4/8] docs: record typed result witness

---
 CHANGELOG.md | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index c4d88b6..8e6e007 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -23,6 +23,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/).
 
 ### Changed
 
+- Require the runtime witness to retain the exact Edict-authored
+  `GreetingCreated { key, message }` result identity and canonical bytes through
+  generic Echo evaluation and WAL recovery.
 - Distinguished producer-satisfied review findings from stale or
   unreproducible findings, bounded operator-authorized remediation without
   resetting the autonomous budget, and made disposition-only closure

From 874aaa7b3477763982eec3131c6ec24e18be51b1 Mon Sep 17 00:00:00 2001
From: James Ross <james@flyingrobots.dev>
Date: Wed, 29 Jul 2026 13:20:06 -0700
Subject: [PATCH 5/8] test: compare recovered greeting results

---
 tests/runtime.sh | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/tests/runtime.sh b/tests/runtime.sh
index 9b92ae4..86da95c 100755
--- a/tests/runtime.sh
+++ b/tests/runtime.sh
@@ -76,6 +76,8 @@ assert_common_witness() {
     and .recovery.outcomeRecovered == true
     and .recovery.receiptRecovered == true
     and .recovery.applicationResultRecovered == true
+    and .recovery.freshHostApplicationResult == .applicationResult
+    and .recovery.walApplicationResult == .applicationResult
     and .recovery.mutatedInitialStateRefusal == "echo-operation-execution-mismatch/action-basis"
     and .duplicate.obstruction == "causal.cell@1.AlreadyExists"
     and (.duplicate.applicationStateRootBefore | test("^[0-9a-f]{64}$"))

From 60c5d776b1524628a6c9a0acd13efd4e48df76c0 Mon Sep 17 00:00:00 2001
From: James Ross <james@flyingrobots.dev>
Date: Wed, 29 Jul 2026 13:20:18 -0700
Subject: [PATCH 6/8] docs: compare recovered result evidence

---
 README.md       | 4 ++--
 docs/roadmap.md | 9 +++++----
 2 files changed, 7 insertions(+), 6 deletions(-)

diff --git a/README.md b/README.md
index 9824fd6..4f0a8c3 100644
--- a/README.md
+++ b/README.md
@@ -77,8 +77,8 @@ The structured witness proves:
   reopening that persisted WAL in another fresh host;
 - the exact package-declared
   `examples.hello_echo@1.GreetingCreated { key, message }` result as canonical
-  evidence, including recovery of the same result without native
-  reconstruction;
+  evidence, including independent equality of the applied, fresh-host, and
+  WAL-recovered generic result records without native reconstruction;
 - successful greeting state derived from the same typed input;
 - package-declared `causal.cell@1.AlreadyExists` obstruction on duplicate
   creation, with equal canonical application-state roots and typed target-value
diff --git a/docs/roadmap.md b/docs/roadmap.md
index 9309961..088dff6 100644
--- a/docs/roadmap.md
+++ b/docs/roadmap.md
@@ -85,10 +85,11 @@ graph-only application-state roots and typed target-value digests; it does not
 mistake the legitimately extended WAL, Tick history, or Receipt evidence for
 application mutation. The application result remains the exact canonical
 `GreetingCreated { key, message }` value declared by Edict; Echo reports and
-recovers generic typed bytes without application-specific reconstruction. This
-is a singleton scheduler proof, not a claim that the permanent multi-Action
-Tick model is complete. Roadmap A.1 begins only after the runtime witness lands
-on `main`.
+recovers generic typed bytes without application-specific reconstruction. The
+external suite independently requires the applied, fresh-host, and
+WAL-recovered result records to be exactly equal. This is a singleton scheduler
+proof, not a claim that the permanent multi-Action Tick model is complete.
+Roadmap A.1 begins only after the runtime witness lands on `main`.
 
 ## Roadmap A.1 — Hello Effect
 

From ca81bd7b0be42b988e8cbfb15cb529ffaa552eec Mon Sep 17 00:00:00 2001
From: James Ross <james@flyingrobots.dev>
Date: Wed, 29 Jul 2026 13:20:30 -0700
Subject: [PATCH 7/8] docs: record comparable recovery results

---
 CHANGELOG.md | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 8e6e007..4aafc94 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -25,7 +25,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/).
 
 - Require the runtime witness to retain the exact Edict-authored
   `GreetingCreated { key, message }` result identity and canonical bytes through
-  generic Echo evaluation and WAL recovery.
+  generic Echo evaluation and to compare the applied, fresh-host, and
+  WAL-recovered result records exactly.
 - Distinguished producer-satisfied review findings from stale or
   unreproducible findings, bounded operator-authorized remediation without
   resetting the autonomous budget, and made disposition-only closure

From 2db8229b5c01e550011b5c00961cf8c91ee20de9 Mon Sep 17 00:00:00 2001
From: James Ross <james@flyingrobots.dev>
Date: Wed, 29 Jul 2026 13:29:26 -0700
Subject: [PATCH 8/8] test: bind every result to its case

---
 tests/runtime.sh                 | 27 +++++++++++++---
 tests/typed-result-fixtures.json | 54 ++++++++++++++++++++++++++++++++
 2 files changed, 77 insertions(+), 4 deletions(-)
 create mode 100644 tests/typed-result-fixtures.json

diff --git a/tests/runtime.sh b/tests/runtime.sh
index 86da95c..8a83245 100755
--- a/tests/runtime.sh
+++ b/tests/runtime.sh
@@ -15,6 +15,7 @@ mkdir -p "$runtime_root"
 package_file=.build/application/executable-operation-package.cbor
 verification_report_file=.build/application/verification-report.cbor
 lawpack_manifest_file=vendor/causal-cell/manifest.cbor
+typed_result_fixtures=tests/typed-result-fixtures.json
 expected_package_sha256=3665d692cdd120f116f18067f2fd583e841448d057b5e35515f57264f853d0f6
 expected_verification_report_sha256=2541c8263d95fdad52f4f5a3bbfed48fdefd9f20969156c3c3fd56be912b66dd
 expected_lawpack_manifest_sha256=7bb901c984a92ed50795f8b5f7efe8d0648124574fa82250c6373a30e94333c9
@@ -103,18 +104,27 @@ assert_common_witness() {
   ' "$witness" >/dev/null
 }
 
+assert_typed_result() {
+  witness=$1
+  case_name=$2
+  expected_result=$(jq -e --arg case_name "$case_name" '.[$case_name]' \
+    "$typed_result_fixtures")
+  jq -e \
+    --argjson expected_result "$expected_result" \
+    '.applicationResult.canonicalBytesHex == $expected_result.canonicalBytesHex
+      and .applicationResult.resultIdentity == $expected_result.resultIdentity' \
+    "$witness" >/dev/null
+}
+
 # Golden path: exact compiler output enters the generic durable runner.
 run_case golden tests/create-greeting.json
 golden_witness="$runtime_root/golden/witness.json"
 assert_common_witness "$golden_witness"
+assert_typed_result "$golden_witness" golden
 jq -e '
   .causalSite.basis == "u0"
   and .causalSite.nodeKey == "greeting"
   and .state.valueUtf8 == "Hello Echo"
-  and .applicationResult.canonicalBytesHex
-    == "a2636b6579686772656574696e67676d6573736167656a48656c6c6f204563686f"
-  and .applicationResult.resultIdentity
-    == "bfc50f30e68ac57742ef0fb0ccc41506c1af4a9ecdeca32c0b934a1adccb9860"
 ' "$golden_witness" >/dev/null
 
 # Identical source, closure, input, and empty-WAL basis produce identical evidence.
@@ -123,6 +133,12 @@ jq -e '
 run_case deterministic-rerun tests/create-greeting.json
 cmp "$golden_witness" "$runtime_root/deterministic-rerun/witness.json"
 
+# A stale golden result cannot satisfy another case's application-owned fixture.
+if assert_typed_result "$golden_witness" property-1; then
+  echo "golden result unexpectedly satisfied the first property case" >&2
+  exit 1
+fi
+
 # The witness is portable evidence and must not disclose checkout paths.
 edict_repo_root=$(CDPATH='' cd -- "$EDICT_REPO" && pwd -P)
 echo_repo_root=$(CDPATH='' cd -- "$ECHO_REPO" && pwd -P)
@@ -172,6 +188,7 @@ jq -n --arg value "$(jq -nr '"x" * 256')" \
   >"$runtime_root/maximum-input.json"
 run_case maximum "$runtime_root/maximum-input.json"
 assert_common_witness "$runtime_root/maximum/witness.json"
+assert_typed_result "$runtime_root/maximum/witness.json" maximum
 test "$(jq -r '.state.valueUtf8 | length' "$runtime_root/maximum/witness.json")" -eq 256
 
 jq -n --arg value "$(jq -nr '"x" * 257')" \
@@ -210,6 +227,7 @@ do
   run_case "$property_name" "$property_input"
   property_witness="$runtime_root/$property_name/witness.json"
   assert_common_witness "$property_witness"
+  assert_typed_result "$property_witness" "$property_name"
   jq -e \
     --arg basis "$property_name" \
     --arg key "key-$property_ordinal" \
@@ -234,6 +252,7 @@ while test "$stress_ordinal" -le "$stress_count"; do
     >"$stress_input"
   run_case "$stress_name" "$stress_input"
   assert_common_witness "$runtime_root/$stress_name/witness.json"
+  assert_typed_result "$runtime_root/$stress_name/witness.json" "$stress_name"
   stress_ordinal=$((stress_ordinal + 1))
 done
 
diff --git a/tests/typed-result-fixtures.json b/tests/typed-result-fixtures.json
new file mode 100644
index 0000000..b2c335a
--- /dev/null
+++ b/tests/typed-result-fixtures.json
@@ -0,0 +1,54 @@
+{
+  "golden": {
+    "canonicalBytesHex": "a2636b6579686772656574696e67676d6573736167656a48656c6c6f204563686f",
+    "resultIdentity": "bfc50f30e68ac57742ef0fb0ccc41506c1af4a9ecdeca32c0b934a1adccb9860"
+  },
+  "maximum": {
+    "canonicalBytesHex": "a2636b6579676d6178696d756d676d65737361676579010078787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878787878",
+    "resultIdentity": "23a35065ba12e133c9654b4b0a7fe7f672ec1670415545d252c8442dfc8e1ca3"
+  },
+  "property-1": {
+    "canonicalBytesHex": "a2636b6579656b65792d31676d65737361676570736565642d36393630332d616c706861",
+    "resultIdentity": "6837506000b2639bf7508e9dd4847393d19764dfebacb94a7a152cd50fde293e"
+  },
+  "property-2": {
+    "canonicalBytesHex": "a2636b6579656b65792d32676d6573736167657827736565642d36393630332d73706163657320616e642070756e6374756174696f6e3a205b5d7b7d",
+    "resultIdentity": "c98cd1e33957be688161806dd778c9c010ebb55d152f1ba905b313ce2b6279cf"
+  },
+  "property-3": {
+    "canonicalBytesHex": "a2636b6579656b65792d33676d65737361676575736565642d36393630332d756e69636f64652dcea9",
+    "resultIdentity": "7d35e3a66bd948a31c2cd6bfd677152be9f17c5d952e2bb164462ad4222997cc"
+  },
+  "stress-1": {
+    "canonicalBytesHex": "a2636b65796a6772656574696e672d31676d6573736167656c48656c6c6f204563686f2031",
+    "resultIdentity": "d843deac03c618c1a5ba8062ea044e12e0c1915aff018a2947ba3643be5b7d17"
+  },
+  "stress-2": {
+    "canonicalBytesHex": "a2636b65796a6772656574696e672d32676d6573736167656c48656c6c6f204563686f2032",
+    "resultIdentity": "ad211b1f6ba8b864543a68a7640b7f399b8d3d8c912cb852e139db94431765d3"
+  },
+  "stress-3": {
+    "canonicalBytesHex": "a2636b65796a6772656574696e672d33676d6573736167656c48656c6c6f204563686f2033",
+    "resultIdentity": "e7b71532a260d7923427f0750963b7e1637233e98728c5ca5c9adf8bd6b5b138"
+  },
+  "stress-4": {
+    "canonicalBytesHex": "a2636b65796a6772656574696e672d34676d6573736167656c48656c6c6f204563686f2034",
+    "resultIdentity": "a56aca24544811874ceb682c50998454c2d2778a5ea6849a0f1c2cdc293a71ac"
+  },
+  "stress-5": {
+    "canonicalBytesHex": "a2636b65796a6772656574696e672d35676d6573736167656c48656c6c6f204563686f2035",
+    "resultIdentity": "a84d156aa97622794c2b4705ef624caf3a9b6ee652dc4a09dd8b701d21f382bd"
+  },
+  "stress-6": {
+    "canonicalBytesHex": "a2636b65796a6772656574696e672d36676d6573736167656c48656c6c6f204563686f2036",
+    "resultIdentity": "65f87332356d98ef69a331f2aa5318bb9f3ed1b110cf9b16fcd97c1c97004411"
+  },
+  "stress-7": {
+    "canonicalBytesHex": "a2636b65796a6772656574696e672d37676d6573736167656c48656c6c6f204563686f2037",
+    "resultIdentity": "0312fea260f2b2f33c806871274cc1499a9e2d11a9812c0f759435596337892d"
+  },
+  "stress-8": {
+    "canonicalBytesHex": "a2636b65796a6772656574696e672d38676d6573736167656c48656c6c6f204563686f2038",
+    "resultIdentity": "f20f7aa1532ca315ebda57d2ce2b0b69b023e3514e2e94941690f04ecae5a7de"
+  }
+}