carlos / platform Public

The console's evidence chooser fails, rather than skips, a receipt it can't verify (no-process receipts) open

Found during the roster-binding code review on claim-empty-cohort-done (Astra, and the fix-round builder's trace, 2026-10-20).

No-process stop receipts were never accepted by the console's unchanged verifiers: their kind, and their missing fence and drain fields, are rejected. That predates the binding build.

Static tracing found no production path that sends one to those verifiers today. The three producers are internal/host/claimwakestop.go:319, relocationeffects.go:273 and claimservinglegacy.go:48. Their receipts are either checked on the box or skipped by the wake-reset verifier.

The latent hazard: the console's evidence chooser (internal/hostops/evidence.go:156-197) FAILS, rather than skips, on a receipt it can't verify. If a no-process receipt ever landed under a purge or park op's evidence/ prefix, that op would block.

Fix options:

  • the chooser skips receipt kinds it doesn't handle;
  • or the no-process producers write somewhere the chooser never lists.

Either is a console-side change, so it waits for a console release. This is owed before production cohorts.