Public Evidence Preflight example

Synthetic worked example

Preflight a public URL and authorized excerpt

Can a public HTTPS source enter preflight without being fetched by Maha?

The caller supplies the excerpt and locator; the tool checks structure while making no claim that it opened the URL.

Starting inputs

A public HTTPS URL

A caller-authorized synthetic excerpt

A paragraph locator

A permission declaration

Ordered execution

Work the example

  1. 1

    Reject local, private, credentialed, or non-HTTPS addresses.

  2. 2

    Normalize the public URL.

  3. 3

    Classify the excerpt as caller-supplied.

  4. 4

    Assess locator, scope, inference, and rights fields.

  5. 5

    Return the digest-bound result to the browser.

Expected outputs

  • Normalized public URL
  • Caller-supplied-located evidence status
  • Explicit no-fetch boundary

Verification checks

  • The normalized identifier remains HTTPS.
  • The result states no independent inspection occurred.
  • The result digest fails after any field mutation.

Fail closed

Refusal conditions

  • The URL targets a private network.
  • The page is said to have been opened.
  • Permission is inferred from public reachability.

Real compiler output · synthetic input

Preflight result

Claims

1

Ready

1

Blocked

0

Metadata only

0

claim-001 · ready-for-source-inspection

No structural blockers; source inspection is still required.

Digest-bound public fixture

Check the expected state

This fixture contains synthetic operational fields only. Its digest establishes fixture integrity, not scientific truth or a completed commercial transaction.

{
  "artifactKind": "preflight-result",
  "schemaVersion": "maha-evidence-preflight/1.0",
  "input": {
    "requestId": "epf_public-example-url-002",
    "claimCount": 1,
    "sourceKinds": [
      "url"
    ]
  },
  "expected": {
    "summary": {
      "claimCount": 1,
      "readyForSourceInspection": 1,
      "blockedBeforeSourceInspection": 0,
      "metadataOnly": 0,
      "locatedExcerptCount": 1
    },
    "blockerSets": [
      []
    ],
    "resultSha256": "sha256:762ac5c0a03cc2c1ee67fda8d5039e0542638037d534558298d5ad4e37203524"
  },
  "artifactSha256": "sha256:67f382d22c362052bae2aecee1b11539b6b1f941d1a975767913054f1a18bf18"
}