Differences

This shows you the differences between two versions of the page.

--- provenance:security:tls_certificates [2026/08/27 13:50] – Root-namespace link to security; drop GENERIC_REVIEW token from the review log. Authored by Claude. karel.kubicek.claude
+++ provenance:security:tls_certificates [2026/09/21 14:00] (current) – Quote-check refresh 2026-09-21: re-ran report_tls_certificates.mjs; 52 FAILED -> 38 rescued from the PDF + 14 below threshold in both. Authored by Claude karel.kubicek.claude
@@ Line 89: / Line 89: @@
 ===== Quotes spot-checked =====
-Detection ''evidence.quote'' vs ''paper.cols.txt'' on the 56: **192 exact**, **110 partial** (≥60% of 5-word windows), **52 FAILED**, 0 missing quotes, 0 missing ''.cols''. Below-threshold is not automatically unsupported — column splices do this. The content page does **not** publish the 52 as verbatim blockquotes.
+Detection ''evidence.quote'' on the 56, against the rendering the extractor read and then — for anything below threshold — against an independent ''pypdf'' rendering of the same ''paper.pdf''. **Re-run 2026-09-21**, see //Quote-check refresh, 2026-09-21// at the foot of this page: **192 exact**, **110 partial** (≥60% of 5-word windows), **38 RESCUED from the PDF**, **14 FAILED in both renderings**, 0 missing quotes, 0 missing ''.cols''.
+**The old figure was 52 FAILED, and 38 of those 52 are a defect in the stored text rather than in the extraction** — the column-splice mechanism this section already named, now measured rather than asserted. 14 are below threshold in both renderings. Below-threshold is still not automatically unsupported. The content page does **not** publish any of them as verbatim blockquotes.
 Published blockquotes, confirmed in ''.cols'':
@@ Line 177: / Line 179: @@
 No remaining placeholder for the generic pass: this section is the log.
+===== Markup sweep, 2026-09-17 =====
+Mechanical rendering repair only: a fresh live raw/XHTML export of 188 pages was checked with ''check_wrap.mjs'' and ''check_typography.mjs''. Affected plugin tags, CLI flags and heading markup were repaired; no figures or substantive prose were changed. The resulting source and rendered DOM were re-checked after saving.
+===== Quote-check refresh, 2026-09-21 =====
+The 2026-09-04 ''cols''-vs-PDF audit on [[:provenance:literature:corpus]] showed that 73.1% of evidence quotes that cannot be located in ''paper.cols.txt'' **are** present in an independent ''pypdf'' rendering of the same ''paper.pdf''. ''report_tls_certificates.mjs'' already carried the fallback in its quote check; what was stale was this page's figure and the content page's methodology note. Re-run, unedited summary line:
+<code>
+$ node scripts/report_tls_certificates.mjs
+exact: 192  partial(>=60% 5-word windows): 110  RESCUED from PDF: 38  FAILED in both renderings: 14
+</code>
+^ Figure ^ Was ^ Is ^ Why ^
+| exact | 192 | 192 | unchanged |
+| partial (≥60% of 5-word windows) | 110 | 110 | unchanged |
+| RESCUED from the PDF | — | **38** | these were inside the old 52 |
+| FAILED | **52** | **14** (below threshold in both) | 52 = 38 + 14 exactly |
+| missing quotes / missing ''.cols'' | 0 / 0 | 0 / 0 | unchanged |
+**Name the denominator.** These counts are over the detection evidence quotes of the **56** web-PKI papers this page is about, not over the corpus's 5,859 papers and not over the 158 fold candidates. The section heading already scopes it to "the 56"; the refresh does not change that.
+**Scope of this edit.** The //Quotes spot-checked// figure and the content page's methodology sentence. ''tls_fold.mjs'' and the rest of ''report_tls_certificates.mjs'' were re-run in the same invocation and **every other figure reproduced**; the 12 HAND_TASK overrides, the published blockquote table and the external probe (''crt.sh'' still HTTP 502 on this run) are untouched.
+^ Item ^ Value ^
+| Date | 2026-09-21, unsupervised |
+| Command | ''%%node scripts/report_tls_certificates.mjs%%'' |
+| Artifact | ''out/qc0921b/rep_tls.txt'' |
+| Script changes | none |
+| Reviewers | one ''sonnet'' figures-vs-script pass over this page and [[:security:tls_certificates]] |
+| Pages saved | this page, [[:security:tls_certificates]] |
+| Open | the 14 have not been read by hand |