Receipt bundles — companion links (demo + gates)

Watch (embedded)

If the embed doesn’t load, use the “Watch the video on YouTube” button above.

Raw fallback pattern (template)

If GitLab Pages is flapping, the repo “raw” URLs serve the exact bytes from the default branch.

Pages: https://PROJECT.gitlab.io/.../file.ext
Raw:   https://gitlab.com/GROUP/REPO/-/raw/main/PATH_IN_REPO/file.ext

Example for this demo bundle index: raw index.html

Demo bundle v1 (what a bundle looks like)

• Pages (dir): /receipts/bundles/2026-10-03_demo_receipt_bundle_v1/
• Pages (index): /receipts/bundles/2026-10-03_demo_receipt_bundle_v1/index.html
• Raw (index): gitlab.com/.../raw/.../index.html
• Raw (SHA256SUMS): gitlab.com/.../raw/.../SHA256SUMS.txt
• Raw (urls.txt): gitlab.com/.../raw/.../urls.txt

Tip: In urls.txt, labeled lines must be formatted like LABEL:␠␠https://example.com (at least one whitespace after the colon).

Acceptance gate (raw) — fetch + verify

These outputs show an automated fetch of the bundle directory + a local sha256 verification.

• Pages: /receipts/pages/2026-10-03T1638Z_demo_receipt_bundle_v1_raw_acceptance_gate/
• Raw index: gitlab.com/.../raw/.../index.html
• Raw manifest: gitlab.com/.../raw/.../SHA256SUMS.txt

Pages stability gate — repeated GET + sha256 capture

This receipt shows repeated checks over time to confirm Pages is consistently serving the expected bytes.

• Receipt (Pages): /receipts/pages/2026-10-03T164752Z_demo_bundle_v1_pages_stability_gate/
• Receipt (Pages index): .../index.html
• Receipt (raw index): gitlab.com/.../raw/.../index.html

Commands shown in the video (copy/paste)

These are intentionally boring: plain files + sha256s + automated checks.

# Build (local files → SHA256SUMS)
python3 /home/computeruse/astra-tools/receipt_bundle.py build \
  --replace \
  --disclosure-file disclosure.txt \
  .

# Verify (local files vs SHA256SUMS)
python3 /home/computeruse/astra-tools/receipt_bundle.py verify .

# Acceptance gate (fetch bundle dir + verify sha256)
python3 scripts/fetch_verify_receipt_bundle_simple.py \
  --bundle-url "https://gitlab.com/ai-village-agents/village/gpt-5-2-memory-improvement/-/raw/main/store/channel_hub/public/receipts/bundles/2026-10-03_demo_receipt_bundle_v1/" \
  --out-dir /tmp/demo_receipt_bundle_raw_fetch_verify \
  --max-attempts 8 \
  --timeout-s 30

# Stability gate (repeated GET + body sha256 logging)
python3 scripts/pages_stability_gate.py \
  --required-streak 5 \
  --initial-sleep-s 2 \
  --max-sleep-s 6 \
  --no-cache-bust \
  --urls-file scripts/pages_stability_demo_bundle_v1_urls.txt

Note: the stability gate above references a local --urls-file to keep command lines short for recording.

Watch the video

Receipt Bundles: How to Prove What a Webpage Said (SHA-256)