Differences

This shows you the differences between two versions of the page.

--- provenance:security:tls_certificates [2026/08/27 13:49] – Working log for security:tls_certificates: fold, HAND_TASK, live probes, review accept/reject. Authored by Claude. karel.kubicek.claude
+++ provenance:security:tls_certificates [2026/09/21 14:00] (current) – Quote-check refresh 2026-09-21: re-ran report_tls_certificates.mjs; 52 FAILED -> 38 rescued from the PDF + 14 below threshold in both. Authored by Claude karel.kubicek.claude
@@ Line 5: / Line 5: @@
 **Run:** 2026-08-27. Corpus: 5,859 extracted papers, 7 venues, 2010–2026, ''data/extract/run1''. Item: drain ''wiki-measuretheweb'' / "security:tls_certificates (new)", claimed as ''cursor-drain-tls'', store id 220, run 58. Author of the page and this log: Cursor, not Claude Code. Reviews: three focused passes then one generic, all on **GPT 5.6 Luna medium** (''gpt-5.6-luna-medium''), the sitting's requested substitute for the spec's sonnet/fable split.
-**Creating, not extending.** ''node scripts/dw.mjs info security:tls_certificates'' — page did not exist. ''?do=export_raw'' on a missing page returns the HTML error page (not an existence test by byte count). ''dw.mjs pages'' does not list ''provenance:''. Neighbour [[security]] already linked the red child. Overlap judgement: write the promised child rather than widening [[design:mobile_and_app_measurement]] (pinning) or [[design:ip_classification]] (Censys-as-IP).
+**Creating, not extending.** ''node scripts/dw.mjs info security:tls_certificates'' — page did not exist. ''?do=export_raw'' on a missing page returns the HTML error page (not an existence test by byte count). ''dw.mjs pages'' does not list ''provenance:''. Neighbour [[:security]] already linked the red child. Overlap judgement: write the promised child rather than widening [[design:mobile_and_app_measurement]] (pinning) or [[design:ip_classification]] (Censys-as-IP).
 No ''~~DISCUSSION~~'' on this provenance page. Comments belong on the content page.
@@ Line 89: / Line 89: @@
 ===== Quotes spot-checked =====
-Detection ''evidence.quote'' vs ''paper.cols.txt'' on the 56: **192 exact**, **110 partial** (≥60% of 5-word windows), **52 FAILED**, 0 missing quotes, 0 missing ''.cols''. Below-threshold is not automatically unsupported — column splices do this. The content page does **not** publish the 52 as verbatim blockquotes.
+Detection ''evidence.quote'' on the 56, against the rendering the extractor read and then — for anything below threshold — against an independent ''pypdf'' rendering of the same ''paper.pdf''. **Re-run 2026-09-21**, see //Quote-check refresh, 2026-09-21// at the foot of this page: **192 exact**, **110 partial** (≥60% of 5-word windows), **38 RESCUED from the PDF**, **14 FAILED in both renderings**, 0 missing quotes, 0 missing ''.cols''.
+**The old figure was 52 FAILED, and 38 of those 52 are a defect in the stored text rather than in the extraction** — the column-splice mechanism this section already named, now measured rather than asserted. 14 are below threshold in both renderings. Below-threshold is still not automatically unsupported. The content page does **not** publish any of them as verbatim blockquotes.
 Published blockquotes, confirmed in ''.cols'':
@@ Line 175: / Line 177: @@
   * **Accept (lesser, applied):** handshake helper now emits Python and OpenSSL versions. Still a single-host demonstration, and the page already says so.
-No remaining GENERIC_REVIEW gap: this section is the log.
+No remaining placeholder for the generic pass: this section is the log.
+===== Markup sweep, 2026-09-17 =====
+Mechanical rendering repair only: a fresh live raw/XHTML export of 188 pages was checked with ''check_wrap.mjs'' and ''check_typography.mjs''. Affected plugin tags, CLI flags and heading markup were repaired; no figures or substantive prose were changed. The resulting source and rendered DOM were re-checked after saving.
+===== Quote-check refresh, 2026-09-21 =====
+The 2026-09-04 ''cols''-vs-PDF audit on [[:provenance:literature:corpus]] showed that 73.1% of evidence quotes that cannot be located in ''paper.cols.txt'' **are** present in an independent ''pypdf'' rendering of the same ''paper.pdf''. ''report_tls_certificates.mjs'' already carried the fallback in its quote check; what was stale was this page's figure and the content page's methodology note. Re-run, unedited summary line:
+<code>
+$ node scripts/report_tls_certificates.mjs
+exact: 192  partial(>=60% 5-word windows): 110  RESCUED from PDF: 38  FAILED in both renderings: 14
+</code>
+^ Figure ^ Was ^ Is ^ Why ^
+| exact | 192 | 192 | unchanged |
+| partial (≥60% of 5-word windows) | 110 | 110 | unchanged |
+| RESCUED from the PDF | — | **38** | these were inside the old 52 |
+| FAILED | **52** | **14** (below threshold in both) | 52 = 38 + 14 exactly |
+| missing quotes / missing ''.cols'' | 0 / 0 | 0 / 0 | unchanged |
+**Name the denominator.** These counts are over the detection evidence quotes of the **56** web-PKI papers this page is about, not over the corpus's 5,859 papers and not over the 158 fold candidates. The section heading already scopes it to "the 56"; the refresh does not change that.
+**Scope of this edit.** The //Quotes spot-checked// figure and the content page's methodology sentence. ''tls_fold.mjs'' and the rest of ''report_tls_certificates.mjs'' were re-run in the same invocation and **every other figure reproduced**; the 12 HAND_TASK overrides, the published blockquote table and the external probe (''crt.sh'' still HTTP 502 on this run) are untouched.
+^ Item ^ Value ^
+| Date | 2026-09-21, unsupervised |
+| Command | ''%%node scripts/report_tls_certificates.mjs%%'' |
+| Artifact | ''out/qc0921b/rep_tls.txt'' |
+| Script changes | none |
+| Reviewers | one ''sonnet'' figures-vs-script pass over this page and [[:security:tls_certificates]] |
+| Pages saved | this page, [[:security:tls_certificates]] |
+| Open | the 14 have not been read by hand |