# Public verification and reproduction boundaries

The public snapshot independently builds the static presentation and runs
synthetic tests. It contains selected original analytical primitives, SQL,
methodology, frozen non-reconstructable aggregates and approved deliverables.
Private execution orchestration and its internal history are intentionally
excluded. No private checkout, dataset or secret is required for these checks.

## Data-free verification

Use Python 3.12.4 with the existing `uv.lock` and Node.js 24 with the frontend
lockfile. `uv sync --frozen` and `npm ci` install dependencies and may contact
their configured package registries. This is setup, not analytical verification.

```bash
uv sync --frozen
uv run pytest -q tests
cd web
npm ci
npm run verify
```

`npm run verify` validates seven aggregate inputs against the immutable manifest,
runs content tests, TypeScript, ESLint, the Next.js export, and isolated local
HTTP checks. The website runtime performs no external fetch, analytics or API
request. Links to GitHub and Kaggle are ordinary user-initiated navigation.
Published data-free tests do not query M5, SEC, FRED, DuckDB or protected labels.

The private analytical/artifact chain and the full-test gate `[56]` are
reviewer-approved. These historical approvals are distinct from the release
checks on this public snapshot. Immutable technical receipts keep
`reviewer_status=pending`; external approvals do not rewrite the old evidence.

## Public verification is not raw reconstruction

Full raw-to-public reconstruction did not pass. Point `[57]` consumed five
governed attempts: early failures have receipts and later attempts have audited
partial evidence. Attempt 5 stopped at decision reconciliation; incomplete
terminal evidence does not support a narrower complete causal claim.
Point `[58]` documents a real failure. Point `[59]` did not produce valid
runtime/hardware evidence. Two successful deterministic runs and cold/warm
timing are not demonstrated. The terminal scope variance is reviewer-approved
and closed; attempt 6 is unsupported in this release.

**Rerun policy:** the public package does not grant access to protected data or
reopen the original evaluation. Any future raw reconstruction is separate work
using legitimately obtained inputs, authority/license checks, isolated outputs
and explicit authorization. It cannot overwrite, tune against or relabel the
original frozen evaluation. Raw inputs must never be committed or redistributed.

## Career Signal Gate and omitted scope

Point `[60]` was not executed and is not PASS. The owner accepted the omission
because of time constraints. There were no three human reviewers, no collected
feedback and no fabricated people, answers or timings. This is a non-blocking
portfolio scope variance and does not replace technical verification.
Points `[61]–[64]` remain pending separate external review; `[65]` is not permitted.
One-pagers, incomplete SHOULD/COULD work and later macro/regime extensions are
outside v1.0.

## Native deliverables

The public Excel is the approved metadata-only privacy successor (77,731 bytes).
The PBIX is the approved portable successor (376,053 bytes): four pages,
42 visuals, 15 tables, 12 relationships and 46 measures. View its cached Import
model without refresh. A future legitimate local refresh needs a configured
`PowerBIDataRoot`; the delivered sentinel is
`__SET_LOCAL_POWERBI_DATA_ROOT_BEFORE_REFRESH__`.
This release does not refresh or save either native artifact. The approved
PDF is 374,047 bytes. Download hashes are published separately.

## Interpretation and licensing

This is independent, post-competition portfolio work, not a leaderboard
submission or ranking. Seasonal Naive S7 was best in the official aggregate
evaluation; Candidate C did not win. Inventory and asymmetric costs are
normalized scenarios, not Walmart costs or operating policies. SEC and FRED
are descriptive and non-causal. No complete reproduction, causal, investment
or operational-readiness claim is made.

MIT covers original project code and documentation only. Data, third-party
code, software and trademarks retain their original terms. See `NOTICE.md`.
No raw data, protected labels, credentials or reconstructable rows are public.
