Proof Bundles

A Helix proof kit is a self-contained, deterministic replay bundle. Anyone can run it to reproduce exactly what we saw, verify all outputs cryptographically, and detect any drift.

Proof Kit (single ZIP, investor handoff)

Use this when you need to hand someone a single archive that replays one session end-to-end and produces a canonical receipt for diffing.

Build:

python tools/build_proof_kit.py \
  --session path/to/session.helix.json \
  --out-dir helix-proof-kit \
  --image ghcr.io/ORG/IMAGE@sha256:<digest> \
  --freeze-docker \
  --zip helix-proof-kit.zip \
  --overwrite

Verify:

unzip helix-proof-kit.zip
cd helix-proof-kit
make run
make verify

Contract (canonical root): provenance/replay_receipt.v1.json

What they are

• Portable, offline-verifiable evidence packs that bind runs, headers, run graphs, and divergence reports by hash.
• Produced by CI for two pillars:
  • GPU determinism envelope (gpu-envelope-proof)
  • Explainable divergence (divergence-proof)

Where to download

• From GitHub Actions artifacts on main (artifact retention: 30 days):
  • gpu-envelope-proof
  • divergence-proof
• (If mirrored in releases, the same bundles will appear as release assets.)

Verify (copy/paste)

helix verify gpu_envelope_proof/manifest.json
helix verify divergence_proof/proof/manifest.json

Trust toolchain (for your own runs)

helix trust fingerprint
helix trust explain --a path_to_bundleA --b path_to_bundleB
helix trust divergence --a path_to_bundleA --b path_to_bundleB --bundle proof_dir
helix verify proof_dir/manifest.json