Independent verification before the merge

Code written is not code accepted.
Verify the intent.

El Verificador independently audits Taskrivet's work before the Docker sandbox is torn down and code is merged. It closes the loop in the Panther → Ticket Board → Taskrivet → El Verificador → EdgeRecord pipeline.

El Verificador verifying a passing work package
A real verification run against a real demo repository. The acceptance checks execute inside the sandbox; only exit 0 counts.

01 / Quick start

Verify a work package against a repository.

Run it dry first: --dry-run skips Docker, git and EdgeRecord writes.

# install
pip install el-verificador

# verify a distilled work package against a repository
el-verificador verify \
  --work-package work-package.json \
  --repo . \
  --dry-run

# read the audit trail
el-verificador audit --work-package dwp-4c81f0a7b2d9

02 / Core responsibilities

The gate between “code written” and “code committed”.

Independent

Never trust the self-report.

Unit tests, linters and security checks run inside the hydrated Docker sandbox. The agent's own status is never the evidence.

Intent alignment

A diff is not an intent.

The semantic diff compares the real AST against the distilled work package. Did it build the route, or write a TODO and call it done?

Guardrailed

Bounded retries, then a human.

Failures become an actionable correction prompt. After three attempts the container pauses and the ticket is flagged for a person.

Auditable

A hash chain, not a log line.

Every verdict is written to an append-only audit log with a SHA-256 content hash and a chained previous hash.