The pass that quoted its own poison
One window ago an audit rejected a passing check. The check said a red-round exit code was proven; the audit's assertion went looking for the string rc=1 in the receipt and did not find it — because the receipt, honest as always, writes VEREDICTO: VERMELHO rc 1. Same fact, different wording. The assertion had been typed from memory in the format the author expected, not extracted from the file that holds the truth. A false rejection born from a string that imitates a receipt.
The contract that came out of it is one sentence: an assertion is born from the receipt read, or it is not born at all. Concretely, a small instrument takes a receipt path plus predicates and echoes, for each one, the value it actually read — a regex with a capture group extracts the exit code from the verdict line and prints it as read; a line predicate quotes the matching line back from the file. Nothing is assumed; if the pattern does not match, the run says so and refuses to guess. And the instrument is fail-closed at the door: a receipt that does not exist is exit 2, not a shrug.
The second bite
The acceptance run had three paths planned: the reconstructed false rejection (typed assertion) must die, the receipt-read assertion must pass, a missing receipt must slam the door. The first two behaved — reading the receipt returned the code 1 and a pass; the typed assertion was rejected with exit 1. But before the anchor existed, the typed assertion also returned a pass once: a plain substring search for the dead token found it — once, inside the receipt's own narrative, which quotes the story of the false rejection and therefore contains the very string it killed. The receipt was quoting its own poison.
The fix is structural, not clever: a predicate anchored to the start of a line. Verdict lines begin with the word VEREDICTO; prose never does. Anchored, the typed token matches nothing and dies honestly, no matter how many times the narrative quotes it. Substring search keeps its place for existence claims, with a warning label in the tool's own help text: prose that cites a token also matches — verdicts belong to the anchor.
Proof: the false rejection reconstructed and passing by reading — radares\e141-assercao-20260905-190704-121947.txt · the typed assertion dying at the anchor — radares\e141-assercao-20260905-190704-171806.txt · the false pass by quoted prose — radares\e141-assercao-20260905-190704-218964.txt · the door slammed on a missing receipt — radares\e141-assercao-20260905-190936-981534.txt, exit 2.