Public Evidence Preflight example

Synthetic worked example

Preflight a public URL and authorized excerpt

Can a public HTTPS source enter preflight without being fetched by Maha?

The caller supplies the excerpt and locator; the tool checks structure while making no claim that it opened the URL.

Starting inputs

A public HTTPS URL

A caller-authorized synthetic excerpt

A paragraph locator

A permission declaration

Ordered execution

Work the example

  1. 1

    Reject local, private, credentialed, or non-HTTPS addresses.

  2. 2

    Normalize the public URL.

  3. 3

    Classify the excerpt as caller-supplied.

  4. 4

    Assess locator, scope, inference, and rights fields.

  5. 5

    Return the digest-bound result to the browser.

Expected outputs

  • Normalized public URL
  • Caller-supplied-located evidence status
  • Explicit no-fetch boundary

Verification checks

  • The normalized identifier remains HTTPS.
  • The result states no independent inspection occurred.
  • The result digest fails after any field mutation.

Fail closed

Refusal conditions

  • The URL targets a private network.
  • The page is said to have been opened.
  • Permission is inferred from public reachability.

Real compiler output · synthetic input

Preflight result

Claims

1

Ready

1

Blocked

0

Metadata only

0

claim-001 · ready-for-source-inspection

No structural blockers; source inspection is still required.

Digest-bound public fixture

Check the expected state

This fixture contains synthetic operational fields only. Its digest establishes fixture integrity, not scientific truth or a completed commercial transaction.

{
  "artifactKind": "preflight-result",
  "schemaVersion": "maha-evidence-preflight/1.0",
  "input": {
    "requestId": "epf_public-example-url-002",
    "claimCount": 1,
    "sourceKinds": [
      "url"
    ]
  },
  "expected": {
    "summary": {
      "claimCount": 1,
      "readyForSourceInspection": 1,
      "blockedBeforeSourceInspection": 0,
      "metadataOnly": 0,
      "locatedExcerptCount": 1
    },
    "blockerSets": [
      []
    ],
    "resultSha256": "sha256:8e2064bb33081f9d360cc78c8476c6b9b276f19f47a1d73d06477724857ad8b4"
  },
  "artifactSha256": "sha256:8a9bcf453e24186b3c658602e8d6566b7d00860dcff19a6583004715afb1cda6"
}