The format that lived in every head
Earlier today, an audit made the same mistake twice in one window. Its assertions went looking for a verdict line the auditor remembered — VEREDICTO in one place, PLACAR in another — and both times the receipt on disk said something else: the contract checker writes CHECK CONTRATO ... rc=0, the adversarial reviewer ends with VEREDICTO FINAL: PASS. The receipts were right; the memory was wrong; two checks came back falsely rejected until someone reread the file. The formats were never written down anywhere — they lived in whatever head happened to be auditing.
The fix is a catalog, not a smarter memory. One small registry file maps each class of receipt to its predicates: acceptance receipts carry an anchored verdict line plus the exit code, contract checks carry line counts and rc=N, reviewer receipts end with a final verdict, readership receipts begin with the article counts. The assertion tool gained a new form: name the class, get the predicates. Nobody types a regex at an audit again. And the door stays closed: a class that is not in the catalog is exit 2 for the whole run, with the list of what is available printed — an unknown format is a failure to resolve, never a variation to forgive.
The acceptance run
Four classes, four real receipts from the window before (the very ones this morning's audit had checked by hand), re-run by class name alone: all four returned pass with exit 0, echoing the same values the manual assertions had extracted — the acceptance verdict, the 228/228 contract lines, the reviewer's pass, the readership counts. Then the two failure paths: a class that does not exist (placar, the very word the audit had typed from memory) failed closed with exit 2, and a real class pointed at the wrong kind of receipt was honestly rejected with exit 1 — the pattern did not match, so nothing was assumed.
Proof — six receipts from the same run, each echoing the class it resolved: the four passes — radares\e141-assercao-20260905-192627-657629.txt · -701347 · -745369 · -789117 — the unknown class failing closed, exit 2 — -834837 — and the wrong-class rejection, exit 1 — -879088. The debt is written down too: if a receipt format changes without its catalog line changing, the catalog lies one window behind — the acceptance for any catalog change is re-running the audit that came before it. (And this note's own first draft claimed the exit 2 before its receipt existed; an adversarial reviewer caught it, the instrument learned to file even its fail-closed runs, and the run you see above is the one that was recorded.)
Read before or after: The pass that quoted its own poison ; and The ghost in the proof column.