The annotated summary

Cycle 2, a governed calibration cycle on a private mirror of pypa/packaging · recorded 2026-09-11 · calibration lane, development-only receipts. Every value below comes from the signed projection, whose digest and signature you can check locally with the offline verifier kit. This narrates the signed summary of Cycle 2. It is not a re-execution, and the verdict does not name a person.

The frame

The loop explains the intended transaction from human intent to a changed software state. The stages below are editorial lenses over published signed fields, not an authenticated event chronology. Primary stage receipts remain private; no access procedure is established. This is not a witnessed replay of every stage.

BOUND - the floors are fixed before anything runs

change eligibility - are we authorized to change it?

Eleven dimensions are protected in advance. Nothing may regress: api.default_changed, api.export_removed, api.serialized_field_break, api.signature_break, operations.external_call_timeout, operations.retry_bound, performance.io_in_loop, security.secret_to_observable_sink, security.untrusted_to_command_sink, test.changed_symbol_link_coverage, test.high_complexity_link_coverage. The target is named too: performance.nesting_ceiling. A real problem does not automatically confer repair authority. The boundaries are set before the change.

signed-summary field: baseline e4a6c73c0f4298b3bf06caf55b318a48becaaa91 (baseline revision, signed projection)

MEASURED - the baseline verdict

invariants discovered - what is true about the software right now?

performance.nesting_ceiling: FAIL. Measured, not guessed. The run starts from an honest red.

signed-summary field: beforeAfter.before = FAIL (signed projection)

PROPOSED - a bounded candidate

candidate production - now the coding agent finally gets involved

One bounded change is proposed against the target dimension. Bounded means: it may touch what the target names, nothing else. The agent does not control the acceptance machinery. It does not get to decide whether its result passed.

signed-summary field: source revision 85442b8032cb7bae72866dfd7782234a98dd2fb7 (signed projection)

VERIFIED - the target's own tests decide

reported target-native checks - not an independently reproduced evaluation

Reported target-native test result: PASS - 26,854 passed · 0 failed · 0 errors · 0 skipped. This is a reported test result, not independent public reconstruction of the evaluation. Native Apex Review ACCEPT is not established by this field.

signed-summary field: evidence digest f7bf1aa88e40b3d34aa800f6cd97720c9d3f87cdef51fff4250853dc3023de6b recompute it yourself with the offline verifier kit

VERDICT - the signed projection records acceptance PASS

signed summary · the verdict does not name a person

Verdict: COMPLETED; floor ADMITTED; acceptance PASS · 2026-09-11T11:18:34Z · lane CALIBRATION · frozen historical record. The signed verdict does not name a person.

signed-summary field: Ed25519 signature over the canonical record az/LYmHd/1WZKhOSHEmV1IwDl1S+Lh8jaH+8o9a7L7V9pFOHcn3PwcFpPQaGFcfcYv020H2LKPzbIxaO+baBDA== verified by the published projection key

FLOOR - the ratchet turns

the ratchet · the next verified result becomes the protected floor

performance.nesting_ceiling: FAIL→PASS · floor admitted · 11 protected dimensions listed. Retaining requirements is the intended model for future cycles; the summary does not prove subsequent preservation.

signed-summary field: beforeAfter.after = PASS · verdict 'COMPLETED; floor ADMITTED; acceptance PASS' (signed projection)

Every campaign should answer these questions clearly

  1. What did Apex believe was wrong?
  2. Why was it authorized to change it?
  3. What exactly did the agent change?
  4. What verification evidence says the result is better?
  5. What authority allowed that result to become real?

If Apex cannot answer those questions, the change should not pass.

Humans govern intent. Models generate change.
Apex governs whether change becomes reality.

Sources: signed-projection-2026-09-11.json (public, verifiable) · full receipts private, not publicly accessible; access requires separate authorization · madebyapex.dev/evidence