Sync B2 live proof evidence

docs/assets/agent-handoff-report.json

@@ -1,6 +1,6 @@
 {
   "schema": "proofframe.agent_handoff.v1",
-  "created_at": "2026-06-29T12:10:33Z",
+  "created_at": "2026-07-01T10:56:41Z",
   "ok": true,
   "mode": "handoff_ready",
   "repo_root": "/Users/junhaocheng/working-dir/ai-competitions/backblaze-proofframe",

docs/assets/agent-handoff-report.md

@@ -2,7 +2,7 @@
 
 Mode: `handoff_ready`
 OK: `true`
-Created: `2026-06-29T12:10:33Z`
+Created: `2026-07-01T10:56:41Z`
 Repo root: `/Users/junhaocheng/working-dir/ai-competitions/backblaze-proofframe`
 
 ## AGENTS.md

docs/assets/b2-live-proof-evidence.json

@@ -0,0 +1,56 @@
+{
+  "ok": true,
+  "base_url": "http://127.0.0.1:8088",
+  "generation_backend": "mock",
+  "storage_backend": "b2",
+  "judge_brief_schema": "proofframe.judge_brief.v1",
+  "judge_safe_to_submit": false,
+  "judge_crosswalk_schema": "proofframe.judge_crosswalk.v1",
+  "judge_crosswalk_mode": "pre_live_crosswalk_ready",
+  "judge_crosswalk_safe_to_submit": false,
+  "judge_crosswalk_rows": 4,
+  "judge_decision_brief_schema": "proofframe.judge_decision_brief.v1",
+  "judge_decision_brief_mode": "pre_live_decision_ready",
+  "judge_decision_brief_safe_to_submit": false,
+  "judge_decision_brief_checks": 6,
+  "judge_evidence_index_schema": "proofframe.judge_evidence_index.v1",
+  "judge_evidence_index_mode": "pre_live_evidence_index_ready",
+  "judge_evidence_index_safe_to_submit": false,
+  "judge_evidence_index_links": 18,
+  "judge_final_closeout_schema": "proofframe.final_closeout_status.v1",
+  "judge_final_closeout_mode": "waiting_for_credentials",
+  "judge_final_closeout_health_ok": true,
+  "judge_final_closeout_safe_to_submit": false,
+  "judge_final_closeout_gates": 12,
+  "judge_video_publish_kit_schema": "proofframe.final_video_publish_kit.v1",
+  "judge_video_publish_kit_mode": "ready_for_final_upload",
+  "judge_video_publish_kit_safe_to_submit": false,
+  "judge_video_publish_kit_final_video_ready": false,
+  "judge_video_publish_kit_upload_checks": 4,
+  "judge_recording_schema": "proofframe.recording_assets.v1",
+  "judge_recording_mode": "mock_recording_ready",
+  "judge_recording_final_video_ready": false,
+  "judge_recording_shots": 6,
+  "judge_devpost_schema": "proofframe.devpost_form_kit.v1",
+  "judge_devpost_mode": "pre_live_form_ready",
+  "judge_devpost_final_form_ready": false,
+  "judge_devpost_fields": 19,
+  "judge_submit_checklist_schema": "proofframe.devpost_submission_checklist.v1",
+  "judge_submit_checklist_mode": "pre_submit_blocked",
+  "judge_submit_checklist_safe_to_submit": false,
+  "judge_submit_checklist_preflight": 6,
+  "campaign_id": "cmp_eb50ee437435",
+  "asset_id": "ast_fd2992abc237",
+  "asset_provider": "mock",
+  "asset_model": "mock-svg-v1",
+  "asset_storage_backend": "b2",
+  "asset_storage_key": "campaigns/cmp_eb50ee437435/media/cmp_eb50ee437435-variant-1.svg",
+  "asset_public_url_present": false,
+  "asset_status": "approved",
+  "asset_sha256": "f9fa34f549049d8a7a3873dab0208092e55545e2919bf928c0c07c8f2a651f56",
+  "manifest_storage_backend": "b2",
+  "manifest_key": "campaigns/cmp_eb50ee437435/manifests/cmp_eb50ee437435-manifest.json",
+  "manifest_sha256": "052cd97c85012c95ce479033e48acca3901028e579c1f3217e60a0f26126f980",
+  "packet_bytes": 998,
+  "judge_demo_campaign_id": "cmp_2606dc339088"
+}

docs/assets/final-submission-control.json

@@ -1,6 +1,6 @@
 {
   "schema": "proofframe.final_submission_control.v1",
-  "created_at": "2026-07-01T10:54:27Z",
+  "created_at": "2026-07-01T11:26:25Z",
   "ok": true,
   "control_health_ok": true,
   "mode": "pre_live_control",
@@ -32,18 +32,18 @@
     "mode": "pre_live_safe",
     "summary": {
       "required": 6,
-      "done": 1,
+      "done": 2,
       "blocked": 0,
-      "doing": 2,
+      "doing": 1,
       "todo": 3,
       "missing": 0
     },
     "evidence_status": "missing",
-    "b2_evidence_status": "missing",
+    "b2_evidence_status": "verified",
     "packet_status": "pre_live_packet_pending"
   },
   "task_statuses": {
-    "T020": "doing",
+    "T020": "done",
     "T021": "doing",
     "T040": "done",
     "T041": "todo",
@@ -325,23 +325,16 @@
       "active_role_cwd_ok": null
     },
     "b2_live_evidence": {
-      "ok": false,
-      "status": "missing",
+      "ok": true,
+      "status": "verified",
       "path": "docs/assets/b2-live-proof-evidence.json",
-      "findings": [
-        {
-          "field": "docs/assets/b2-live-proof-evidence.json",
-          "detail": "Evidence file is missing or invalid JSON."
-        }
-      ]
+      "findings": []
     },
     "credential_handoff": {
       "present": true,
       "mode": "missing_live_env",
       "ready": false,
       "missing_ids": [
-        "b2_key_id",
-        "b2_application_key",
         "genblaze_api_key"
       ],
       "secret_policy": "Report records only variable names and presence; credential values are never printed."
@@ -458,8 +451,8 @@
     {
       "id": "b2_live_proof",
       "label": "Backblaze B2 live proof captured",
-      "ok": false,
-      "detail": "T020 is doing; B2 evidence status is missing; final evidence status is missing.",
+      "ok": true,
+      "detail": "T020 is done; B2 evidence status is verified; final evidence status is missing.",
       "evidence": "tasks.json, docs/assets/b2-live-proof-evidence.json, and docs/assets/final-live-proof-evidence.json"
     },
     {
@@ -473,7 +466,7 @@
       "id": "credential_handoff",
       "label": "Live credential handoff is ready",
       "ok": false,
-      "detail": "Credential handoff mode is missing_live_env; missing ids: b2_key_id, b2_application_key, genblaze_api_key.",
+      "detail": "Credential handoff mode is missing_live_env; missing ids: genblaze_api_key.",
       "evidence": "docs/assets/live-credential-handoff.json"
     },
     {
@@ -534,13 +527,6 @@
       "detail": "Devpost submission checklist mode is pre_submit_blocked; safe_to_submit is False.",
       "evidence": "docs/assets/devpost-submission-checklist.json"
     },
-    {
-      "id": "b2_live_proof",
-      "label": "Backblaze B2 live proof captured",
-      "ok": false,
-      "detail": "T020 is doing; B2 evidence status is missing; final evidence status is missing.",
-      "evidence": "tasks.json, docs/assets/b2-live-proof-evidence.json, and docs/assets/final-live-proof-evidence.json"
-    },
     {
       "id": "genblaze_live_proof",
       "label": "Genblaze live proof captured",
@@ -552,7 +538,7 @@
       "id": "credential_handoff",
       "label": "Live credential handoff is ready",
       "ok": false,
-      "detail": "Credential handoff mode is missing_live_env; missing ids: b2_key_id, b2_application_key, genblaze_api_key.",
+      "detail": "Credential handoff mode is missing_live_env; missing ids: genblaze_api_key.",
       "evidence": "docs/assets/live-credential-handoff.json"
     },
     {
@@ -601,13 +587,13 @@
   "warnings": [],
   "next_actions": [
     "Complete .env.final.local with B2_KEY_ID, B2_APPLICATION_KEY, and Genblaze/GMI API key values.",
-    "Run the B2 live proof runner and save sanitized B2 evidence.",
     "Run the final B2 plus Genblaze proof runner and save sanitized final evidence.",
     "Record and upload the public demo video after live proof is captured.",
     "Verify the public video URL with python scripts/public_video_check.py --verify-url --strict-final.",
     "Regenerate the final Devpost submission checklist after the form kit and final control gates are current.",
     "Run and mark the final secret scan after live evidence/video assets are ready.",
-    "Run final submission audit after proof, video, and secret scan pass."
+    "Run final submission audit after proof, video, and secret scan pass.",
+    "Submit Devpost after every preceding control item is green, then generate the public submission receipt."
   ],
   "operator_commands": [
     "python scripts/final_env_wizard.py --prefill-non-secret --output .env.final.local",

docs/assets/final-submission-control.md

@@ -3,7 +3,7 @@
 Mode: `pre_live_control`
 Control health OK: `true`
 Safe to submit: `false`
-Created: `2026-07-01T10:54:27Z`
+Created: `2026-07-01T11:26:25Z`
 Public demo: https://adjcjh-backblaze-proofframe.hf.space/?judge=1
 Repository: https://github.com/adjcjh777/backblaze-proofframe
 
@@ -19,8 +19,8 @@ Repository: https://github.com/adjcjh777/backblaze-proofframe
 ## Submission Gate
 
 - Mode: `pre_live_safe`
-- Tasks: `1 / 6` done
-- B2 evidence: `missing`
+- Tasks: `2 / 6` done
+- B2 evidence: `verified`
 - Live evidence: `missing`
 - Devpost packet: `pre_live_packet_pending`
 
@@ -49,9 +49,9 @@ Repository: https://github.com/adjcjh777/backblaze-proofframe
 | OK | Final launch plan exposes the current operator step | Launch plan mode is ready_for_credential_entry; current phase is credential_entry; next command is python scripts/final_env_wizard.py --output .env.final.local --missing-only --force. | `docs/assets/final-launch-plan.json` |
 | OK | Recording assets are ready | Recording assets mode is mock_recording_ready; public mock verified is False. | `docs/assets/recording-assets.json` |
 | OK | Control input reports match expected schemas | All input report schemas are current. | `docs/assets/*.json readiness reports` |
-| PENDING | Backblaze B2 live proof captured | T020 is doing; B2 evidence status is missing; final evidence status is missing. | `tasks.json, docs/assets/b2-live-proof-evidence.json, and docs/assets/final-live-proof-evidence.json` |
+| OK | Backblaze B2 live proof captured | T020 is done; B2 evidence status is verified; final evidence status is missing. | `tasks.json, docs/assets/b2-live-proof-evidence.json, and docs/assets/final-live-proof-evidence.json` |
 | PENDING | Genblaze live proof captured | T021 is doing; final evidence status is missing. | `tasks.json and docs/assets/final-live-proof-evidence.json` |
-| PENDING | Live credential handoff is ready | Credential handoff mode is missing_live_env; missing ids: b2_key_id, b2_application_key, genblaze_api_key. | `docs/assets/live-credential-handoff.json` |
+| PENDING | Live credential handoff is ready | Credential handoff mode is missing_live_env; missing ids: genblaze_api_key. | `docs/assets/live-credential-handoff.json` |
 | PENDING | Final public demo video URL is ready | Storyboard mode is mock_storyboard_ready; public video ready is False. | `docs/assets/demo-storyboard.json` |
 | PENDING | Final public demo video URL is accessible and safe | Public video check mode is pending_video_url; safe_to_submit is False. | `docs/assets/public-video-check.json` |
 | PENDING | Final recording gate is ready | Demo readiness mode is pre_live_mock_ready; final recording ready is False. | `docs/assets/demo-readiness-report.json` |
@@ -63,13 +63,13 @@ Repository: https://github.com/adjcjh777/backblaze-proofframe
 ## Next Actions
 
 - Complete .env.final.local with B2_KEY_ID, B2_APPLICATION_KEY, and Genblaze/GMI API key values.
-- Run the B2 live proof runner and save sanitized B2 evidence.
 - Run the final B2 plus Genblaze proof runner and save sanitized final evidence.
 - Record and upload the public demo video after live proof is captured.
 - Verify the public video URL with python scripts/public_video_check.py --verify-url --strict-final.
 - Regenerate the final Devpost submission checklist after the form kit and final control gates are current.
 - Run and mark the final secret scan after live evidence/video assets are ready.
 - Run final submission audit after proof, video, and secret scan pass.
+- Submit Devpost after every preceding control item is green, then generate the public submission receipt.
 
 ## Operator Commands
 

docs/assets/live-credential-handoff.json

@@ -60,25 +60,30 @@
     {
       "id": "b2_key_id",
       "label": "Backblaze B2 key id",
-      "ok": false,
+      "ok": true,
       "accepted_names": [
         "B2_KEY_ID"
       ],
-      "present_names": [],
+      "present_names": [
+        "B2_KEY_ID"
+      ],
       "expected": null,
-      "remediation": "Set B2_KEY_ID for a least-privilege application key."
+      "remediation": ""
     },
     {
       "id": "b2_application_key",
       "label": "Backblaze B2 application key",
-      "ok": false,
+      "ok": true,
       "accepted_names": [
         "B2_APPLICATION_KEY",
         "B2_APP_KEY"
       ],
-      "present_names": [],
+      "present_names": [
+        "B2_APPLICATION_KEY",
+        "B2_APP_KEY"
+      ],
       "expected": null,
-      "remediation": "Set B2_APPLICATION_KEY or B2_APP_KEY."
+      "remediation": ""
     },
     {
       "id": "genblaze_api_key",
@@ -157,8 +162,6 @@
     }
   ],
   "missing_ids": [
-    "b2_key_id",
-    "b2_application_key",
     "genblaze_api_key"
   ],
   "next_commands": [

docs/assets/live-credential-handoff.md

@@ -12,10 +12,8 @@ This report records only variable names and presence checks. It never prints, ha
 - OK ProofFrame generation backend mode: `PROOFFRAME_GENERATION_BACKEND`; present `PROOFFRAME_GENERATION_BACKEND`; expected `genblaze`.
 - OK Backblaze B2 S3 endpoint: `B2_ENDPOINT_URL`, `B2_S3_ENDPOINT_URL`; present `B2_ENDPOINT_URL`.
 - OK Backblaze B2 bucket: `B2_BUCKET`; present `B2_BUCKET`.
-- MISSING Backblaze B2 key id: `B2_KEY_ID`; present none.
-  Remediation: Set B2_KEY_ID for a least-privilege application key.
-- MISSING Backblaze B2 application key: `B2_APPLICATION_KEY`, `B2_APP_KEY`; present none.
-  Remediation: Set B2_APPLICATION_KEY or B2_APP_KEY.
+- OK Backblaze B2 key id: `B2_KEY_ID`; present `B2_KEY_ID`.
+- OK Backblaze B2 application key: `B2_APPLICATION_KEY`, `B2_APP_KEY`; present `B2_APPLICATION_KEY`, `B2_APP_KEY`.
 - MISSING Genblaze/GMI API key: `GENBLAZE_API_KEY`, `GMI_API_KEY`; present none.
   Remediation: Set GENBLAZE_API_KEY or GMI_API_KEY.
 - OK Genblaze image model: `GENBLAZE_IMAGE_MODEL`; present `GENBLAZE_IMAGE_MODEL`.

docs/assets/public-api-smoke-evidence.json

@@ -39,18 +39,18 @@
   "judge_submit_checklist_mode": "pre_submit_blocked",
   "judge_submit_checklist_safe_to_submit": false,
   "judge_submit_checklist_preflight": 6,
-  "campaign_id": "cmp_6471fa12b0c3",
-  "asset_id": "ast_9c6f1373b25e",
+  "campaign_id": "cmp_10428c4206cc",
+  "asset_id": "ast_00b8d0a4c815",
   "asset_provider": "mock",
   "asset_model": "mock-svg-v1",
   "asset_storage_backend": "local",
-  "asset_storage_key": "cmp_6471fa12b0c3/cmp_6471fa12b0c3-variant-1.svg",
+  "asset_storage_key": "cmp_10428c4206cc/cmp_10428c4206cc-variant-1.svg",
   "asset_public_url_present": true,
   "asset_status": "approved",
-  "asset_sha256": "139ad9b66ba750f9b6a2d599eef3a98230a6609ca23740f4f140611d3c759bf6",
+  "asset_sha256": "b6bd6098e34e84c2d2785c1a0c7a06f772e9b84bf38c09b9227dd81b2308eb55",
   "manifest_storage_backend": "local",
-  "manifest_key": "cmp_6471fa12b0c3/cmp_6471fa12b0c3-manifest.json",
-  "manifest_sha256": "1118c75292558341d24bdbfa1503bdaef24f66588d59302d3ffdfef5c507178b",
-  "packet_bytes": 1534,
-  "judge_demo_campaign_id": "cmp_7a59286c3003"
+  "manifest_key": "cmp_10428c4206cc/cmp_10428c4206cc-manifest.json",
+  "manifest_sha256": "cb8bdec32a26e905303c22283f981527915167cb10456d8d7c7fc58bb2e2510b",
+  "packet_bytes": 1533,
+  "judge_demo_campaign_id": "cmp_f991d6029dfb"
 }

docs/assets/public-space-sync-report.json

@@ -1,17 +1,17 @@
 {
   "schema": "proofframe.public_space_sync.v1",
-  "created_at": "2026-07-01T10:48:58Z",
+  "created_at": "2026-07-01T10:56:54Z",
   "ok": true,
   "mode": "public_space_synced",
   "space_id": "ADJCJH/backblaze-proofframe",
   "public_host": "https://adjcjh-backblaze-proofframe.hf.space",
-  "expected_sha": "54d801e018357c408fbfa2436cab014ad3300a14",
+  "expected_sha": "abb09ea8fa92cae185fb08d65ae6419d85bc3c0e",
   "observed": {
-    "space_sha": "54d801e018357c408fbfa2436cab014ad3300a14",
-    "runtime_sha": "54d801e018357c408fbfa2436cab014ad3300a14",
+    "space_sha": "abb09ea8fa92cae185fb08d65ae6419d85bc3c0e",
+    "runtime_sha": "abb09ea8fa92cae185fb08d65ae6419d85bc3c0e",
     "runtime_stage": "RUNNING",
     "domain_ready": true,
-    "last_modified": "2026-06-30T10:35:25.000Z",
+    "last_modified": "2026-07-01T10:55:40.000Z",
     "health": {
       "ready": true,
       "storage_backend": "local",
@@ -32,9 +32,9 @@
     },
     "handoff_mode": "handoff_ready",
     "event_snapshot": {
-      "checked_at": "2026-06-30T05:12:10Z",
-      "age_days": 1,
-      "participant_count_observed": 404,
+      "checked_at": "2026-07-01T10:54:19Z",
+      "age_days": 0,
+      "participant_count_observed": 439,
       "submission_open": true,
       "requirements_ok": true,
       "criteria_ok": true
@@ -215,14 +215,14 @@
       "id": "space_metadata",
       "label": "Space metadata points at the expected commit",
       "ok": true,
-      "detail": "Space sha is 54d801e018357c408fbfa2436cab014ad3300a14; expected 54d801e018357c408fbfa2436cab014ad3300a14.",
+      "detail": "Space sha is abb09ea8fa92cae185fb08d65ae6419d85bc3c0e; expected abb09ea8fa92cae185fb08d65ae6419d85bc3c0e.",
       "evidence": "https://huggingface.co/api/spaces/ADJCJH/backblaze-proofframe"
     },
     {
       "id": "runtime_ready",
       "label": "Space runtime is running the expected commit",
       "ok": true,
-      "detail": "Runtime stage is RUNNING; runtime sha is 54d801e018357c408fbfa2436cab014ad3300a14; domain ready is True.",
+      "detail": "Runtime stage is RUNNING; runtime sha is abb09ea8fa92cae185fb08d65ae6419d85bc3c0e; domain ready is True.",
       "evidence": "https://huggingface.co/api/spaces/ADJCJH/backblaze-proofframe/runtime"
     },
     {
@@ -236,7 +236,7 @@
       "id": "raw_event_snapshot",
       "label": "Raw Devpost event snapshot is public and fresh",
       "ok": true,
-      "detail": "Event snapshot schema is proofframe.devpost_event_snapshot.v1; submission_open=True; age_days=1; participants=404.",
+      "detail": "Event snapshot schema is proofframe.devpost_event_snapshot.v1; submission_open=True; age_days=0; participants=439.",
       "evidence": "https://huggingface.co/spaces/ADJCJH/backblaze-proofframe/raw/main/docs/assets/devpost-event-snapshot.json"
     },
     {

docs/assets/public-space-sync-report.md

@@ -2,21 +2,21 @@
 
 Mode: `public_space_synced`
 OK: `true`
-Created: `2026-07-01T10:48:58Z`
+Created: `2026-07-01T10:56:54Z`
 Space: `ADJCJH/backblaze-proofframe`
 Public host: https://adjcjh-backblaze-proofframe.hf.space
-Expected sha: `54d801e018357c408fbfa2436cab014ad3300a14`
-Runtime sha: `54d801e018357c408fbfa2436cab014ad3300a14`
+Expected sha: `abb09ea8fa92cae185fb08d65ae6419d85bc3c0e`
+Runtime sha: `abb09ea8fa92cae185fb08d65ae6419d85bc3c0e`
 Runtime stage: `RUNNING`
 
 ## Checks
 
 | Status | Check | Detail | Evidence |
 | --- | --- | --- | --- |
-| OK | Space metadata points at the expected commit | Space sha is 54d801e018357c408fbfa2436cab014ad3300a14; expected 54d801e018357c408fbfa2436cab014ad3300a14. | https://huggingface.co/api/spaces/ADJCJH/backblaze-proofframe |
-| OK | Space runtime is running the expected commit | Runtime stage is RUNNING; runtime sha is 54d801e018357c408fbfa2436cab014ad3300a14; domain ready is True. | https://huggingface.co/api/spaces/ADJCJH/backblaze-proofframe/runtime |
+| OK | Space metadata points at the expected commit | Space sha is abb09ea8fa92cae185fb08d65ae6419d85bc3c0e; expected abb09ea8fa92cae185fb08d65ae6419d85bc3c0e. | https://huggingface.co/api/spaces/ADJCJH/backblaze-proofframe |
+| OK | Space runtime is running the expected commit | Runtime stage is RUNNING; runtime sha is abb09ea8fa92cae185fb08d65ae6419d85bc3c0e; domain ready is True. | https://huggingface.co/api/spaces/ADJCJH/backblaze-proofframe/runtime |
 | OK | Raw handoff report is public and ready | Handoff schema is proofframe.agent_handoff.v1; mode is handoff_ready. | https://huggingface.co/spaces/ADJCJH/backblaze-proofframe/raw/main/docs/assets/agent-handoff-report.json |
-| OK | Raw Devpost event snapshot is public and fresh | Event snapshot schema is proofframe.devpost_event_snapshot.v1; submission_open=True; age_days=1; participants=404. | https://huggingface.co/spaces/ADJCJH/backblaze-proofframe/raw/main/docs/assets/devpost-event-snapshot.json |
+| OK | Raw Devpost event snapshot is public and fresh | Event snapshot schema is proofframe.devpost_event_snapshot.v1; submission_open=True; age_days=0; participants=439. | https://huggingface.co/spaces/ADJCJH/backblaze-proofframe/raw/main/docs/assets/devpost-event-snapshot.json |
 | OK | Raw final launch plan is public and phase-aware | Launch plan schema is proofframe.final_launch_plan.v1; mode is ready_for_credential_entry; current phase is credential_entry. | https://huggingface.co/spaces/ADJCJH/backblaze-proofframe/raw/main/docs/assets/final-launch-plan.json |
 | OK | Raw B2 key scope checklist is public and no-secret | Checklist schema is proofframe.b2_key_scope_checklist.v1; safe_to_commit=True; bucket=proofframe-demo-a6b4e49; prefix=campaigns/; confirmation=required_before_key_creation; required=['listAllBucketNames', 'writeFiles']. | https://huggingface.co/spaces/ADJCJH/backblaze-proofframe/raw/main/docs/assets/b2-key-scope-checklist.json |
 | OK | Raw judge brief is public and claim-safe | Judge brief schema is proofframe.judge_brief.v1; safe_to_submit is False. | https://huggingface.co/spaces/ADJCJH/backblaze-proofframe/raw/main/docs/assets/judge-brief.json |

docs/assets/public-space-upload-report.json

@@ -1,6 +1,6 @@
 {
   "schema": "proofframe.public_space_upload.v1",
-  "created_at": "2026-06-30T10:35:27Z",
+  "created_at": "2026-07-01T10:55:49Z",
   "mode": "uploaded",
   "ok": true,
   "execute": true,
@@ -8,7 +8,7 @@
   "repo_type": "space",
   "revision": "main",
   "space_raw_base": "https://huggingface.co/spaces/ADJCJH/backblaze-proofframe/raw/main",
-  "commit_message": "Sync ProofFrame public Space after final handoff waits",
+  "commit_message": "Sync ProofFrame public Space after event refresh",
   "ignore_patterns": [
     ".git/**",
     ".venv/**",
@@ -51,9 +51,9 @@
     ]
   },
   "file_plan": {
-    "total_files": 14924,
-    "included_count": 209,
-    "excluded_count": 14715,
+    "total_files": 14982,
+    "included_count": 210,
+    "excluded_count": 14772,
     "included_samples": [
       ".dockerignore",
       ".env.example",
@@ -125,8 +125,8 @@
   "upload": {
     "attempted": true,
     "ok": true,
-    "commit_url": "https://huggingface.co/spaces/ADJCJH/backblaze-proofframe/commit/54d801e018357c408fbfa2436cab014ad3300a14",
-    "commit_oid": "54d801e018357c408fbfa2436cab014ad3300a14"
+    "commit_url": "https://huggingface.co/spaces/ADJCJH/backblaze-proofframe/commit/abb09ea8fa92cae185fb08d65ae6419d85bc3c0e",
+    "commit_oid": "abb09ea8fa92cae185fb08d65ae6419d85bc3c0e"
   },
   "secret_probe": {
     "attempted": true,

docs/assets/public-space-upload-report.md

@@ -3,7 +3,7 @@
 Mode: `uploaded`
 OK: `true`
 Execute: `true`
-Created: `2026-06-30T10:35:27Z`
+Created: `2026-07-01T10:55:49Z`
 Repo: `ADJCJH/backblaze-proofframe`
 Revision: `main`
 Raw base: https://huggingface.co/spaces/ADJCJH/backblaze-proofframe/raw/main
@@ -11,8 +11,8 @@ Raw base: https://huggingface.co/spaces/ADJCJH/backblaze-proofframe/raw/main
 ## Safety
 
 - Required ignore patterns OK: `true`
-- Included files: `209`
-- Excluded files: `14715`
+- Included files: `210`
+- Excluded files: `14772`
 - Included sensitive files: `none`
 
 ## Sensitive File Checks
@@ -25,8 +25,8 @@ Raw base: https://huggingface.co/spaces/ADJCJH/backblaze-proofframe/raw/main
 ## Upload
 
 - Upload OK: `true`
-- Commit: `54d801e018357c408fbfa2436cab014ad3300a14`
-- Commit URL: https://huggingface.co/spaces/ADJCJH/backblaze-proofframe/commit/54d801e018357c408fbfa2436cab014ad3300a14
+- Commit: `abb09ea8fa92cae185fb08d65ae6419d85bc3c0e`
+- Commit URL: https://huggingface.co/spaces/ADJCJH/backblaze-proofframe/commit/abb09ea8fa92cae185fb08d65ae6419d85bc3c0e
 
 ## Secret Probe
 

docs/assets/secret-scan-report.json

@@ -1,15 +1,15 @@
 {
   "schema": "proofframe.secret_scan.v1",
-  "created_at": "2026-07-01T10:54:28Z",
+  "created_at": "2026-07-01T11:26:36Z",
   "mode": "clear",
   "ok": true,
   "root": ".",
   "findings": [],
   "counts": {
-    "scanned_text_files": 234,
+    "scanned_text_files": 236,
     "inventoried_binary_files": 6,
     "skipped_local_secret_files": 1,
-    "skipped_hard_files": 14562,
+    "skipped_hard_files": 14652,
     "findings": 0
   },
   "coverage": {
@@ -40,6 +40,7 @@
     "docs/assets/award-readiness-report.md",
     "docs/assets/b2-key-scope-checklist.json",
     "docs/assets/b2-key-scope-checklist.md",
+    "docs/assets/b2-live-proof-evidence.json",
     "docs/assets/b2-live-setup.json",
     "docs/assets/b2-live-setup.md",
     "docs/assets/demo-readiness-report.json",
@@ -228,6 +229,7 @@
     "tests/test_submission_bundle.py",
     "tests/test_submission_gate.py",
     "tests/test_task_cli.py",
+    "var/live-proof/b2-uvicorn.log",
     "var/storage/cmp_0fd2f50b9713/cmp_0fd2f50b9713-manifest.json",
     "var/storage/cmp_16201908a885/cmp_16201908a885-manifest.json",
     "var/storage/cmp_1917ba0aa34c/cmp_1917ba0aa34c-manifest.json",

docs/assets/secret-scan-report.md

@@ -2,11 +2,11 @@
 
 Mode: `clear`
 OK: `true`
-Created: `2026-07-01T10:54:28Z`
+Created: `2026-07-01T11:26:36Z`
 
 ## Counts
 
-- Scanned text files: `234`
+- Scanned text files: `236`
 - Inventoried binary files: `6`
 - Skipped local secret files: `1`
 - Findings: `0`

docs/assets/submission-audit-report.json

@@ -1,6 +1,6 @@
 {
   "schema": "proofframe.submission_audit.v1",
-  "created_at": "2026-07-01T10:54:27Z",
+  "created_at": "2026-07-01T11:26:25Z",
   "mode": "pre_submit_audit_blocked",
   "ok": false,
   "root": ".",
@@ -15,7 +15,7 @@
     "T042"
   ],
   "task_statuses": {
-    "T020": "doing",
+    "T020": "done",
     "T021": "doing",
     "T040": "done",
     "T041A": "todo",
@@ -24,7 +24,7 @@
   },
   "final_evidence_path": "docs/assets/final-live-proof-evidence.json",
   "section_counts": {
-    "tasks": 3,
+    "tasks": 2,
     "files": 0,
     "schemas": 0,
     "final_evidence": 1,
@@ -34,12 +34,6 @@
     "final_control": 1
   },
   "findings": [
-    {
-      "gate": "T020",
-      "status": "doing",
-      "detail": "Integrate Backblaze B2-compatible storage is not done.",
-      "evidence": "tasks.json"
-    },
     {
       "gate": "T021",
       "status": "doing",
@@ -133,7 +127,7 @@
     {
       "gate": "final_submission_control.blocking_items",
       "status": "blocked",
-      "detail": "Unexpected blockers remain before audit sign-off: b2_live_proof, credential_handoff, devpost_submission_checklist, final_recording, final_secret_scan, genblaze_live_proof, public_video, public_video_check",
+      "detail": "Unexpected blockers remain before audit sign-off: credential_handoff, devpost_submission_checklist, final_recording, final_secret_scan, genblaze_live_proof, public_video, public_video_check",
       "evidence": "docs/assets/final-submission-control.json"
     }
   ],

docs/assets/submission-audit-report.md

@@ -2,12 +2,12 @@
 
 Mode: `pre_submit_audit_blocked`
 OK: `false`
-Created: `2026-07-01T10:54:27Z`
+Created: `2026-07-01T11:26:25Z`
 Final evidence: `docs/assets/final-live-proof-evidence.json`
 
 ## Task Statuses
 
-- T020: `doing`
+- T020: `done`
 - T021: `doing`
 - T040: `done`
 - T041A: `todo`
@@ -16,7 +16,7 @@ Final evidence: `docs/assets/final-live-proof-evidence.json`
 
 ## Section Findings
 
-- tasks: 3 finding(s)
+- tasks: 2 finding(s)
 - files: OK
 - schemas: OK
 - final_evidence: 1 finding(s)
@@ -27,7 +27,6 @@ Final evidence: `docs/assets/final-live-proof-evidence.json`
 
 ## Findings
 
-- `T020` [doing]: Integrate Backblaze B2-compatible storage is not done. Evidence: `tasks.json`
 - `T021` [doing]: Integrate Genblaze-compatible generation is not done. Evidence: `tasks.json`
 - `T041A` [todo]: Run final secret scan is not done. Evidence: `tasks.json`
 - `final-live-proof-evidence` [missing]: docs/assets/final-live-proof-evidence.json is missing or invalid JSON. Evidence: `docs/assets/final-live-proof-evidence.json`
@@ -43,7 +42,7 @@ Final evidence: `docs/assets/final-live-proof-evidence.json`
 - `demo_readiness.final_recording_ready` [incomplete]: Final recording readiness gate is not ready. Evidence: `docs/assets/demo-readiness-report.json`
 - `recording_assets.final_video_ready` [incomplete]: Recording assets do not verify the final public video. Evidence: `docs/assets/recording-assets.json`
 - `live_credential_handoff.ready_for_live_proof` [incomplete]: Live credential handoff is not ready. Evidence: `docs/assets/live-credential-handoff.json`
-- `final_submission_control.blocking_items` [blocked]: Unexpected blockers remain before audit sign-off: b2_live_proof, credential_handoff, devpost_submission_checklist, final_recording, final_secret_scan, genblaze_live_proof, public_video, public_video_check Evidence: `docs/assets/final-submission-control.json`
+- `final_submission_control.blocking_items` [blocked]: Unexpected blockers remain before audit sign-off: credential_handoff, devpost_submission_checklist, final_recording, final_secret_scan, genblaze_live_proof, public_video, public_video_check Evidence: `docs/assets/final-submission-control.json`
 
 ## Next Commands
 

docs/assets/submission-bundle-manifest.json

@@ -1,6 +1,6 @@
 {
   "schema": "proofframe.submission_bundle.v1",
-  "created_at": "2026-06-30T10:37:46Z",
+  "created_at": "2026-07-01T11:26:25Z",
   "project": "ProofFrame",
   "repository_url": "https://github.com/adjcjh777/backblaze-proofframe",
   "public_demo_url": "https://adjcjh-backblaze-proofframe.hf.space/?judge=1",
@@ -20,9 +20,9 @@
     "mode": "pre_live_safe",
     "summary": {
       "required": 6,
-      "done": 1,
+      "done": 2,
       "blocked": 0,
-      "doing": 2,
+      "doing": 1,
       "todo": 3,
       "missing": 0
     },
@@ -111,11 +111,11 @@
       ]
     },
     "next_actions": [
-      "Run a live Backblaze B2 asset and manifest proof.",
       "Run a live Genblaze generation proof and capture provider metadata.",
       "Run the final submission audit after live proofs are captured.",
       "Run the final secret scan before recording or submitting.",
-      "Submit the Devpost project after every preceding gate is done."
+      "Submit the Devpost project after every preceding gate is done.",
+      "Capture final live proof evidence JSON."
     ]
   },
   "closeout_gate": {
@@ -137,7 +137,7 @@
         "present": true,
         "schema": "proofframe.secret_scan.v1",
         "schema_ok": true,
-        "created_at": "2026-06-30T10:37:16Z",
+        "created_at": "2026-07-01T11:26:17Z",
         "ready": true,
         "fresh_after_receipt": true,
         "findings": []
@@ -148,7 +148,7 @@
         "present": true,
         "schema": "proofframe.final_submission_control.v1",
         "schema_ok": true,
-        "created_at": "2026-06-30T10:37:45Z",
+        "created_at": "2026-07-01T11:26:25Z",
         "ready": false,
         "fresh_after_receipt": true,
         "findings": [
@@ -162,7 +162,7 @@
         "present": true,
         "schema": "proofframe.final_closeout_status.v1",
         "schema_ok": true,
-        "created_at": "2026-06-30T10:37:46Z",
+        "created_at": "2026-07-01T10:54:27Z",
         "ready": false,
         "fresh_after_receipt": true,
         "findings": [
@@ -339,7 +339,7 @@
       "label": "Machine-readable Devpost event snapshot",
       "present": true,
       "bytes": 2492,
-      "sha256": "626886a6fcee619967fd84275ff6a8ad2fc1fb082bec6b8e399aa3a6f541ad6c"
+      "sha256": "5b7c1f2277d121b89dbc3c1d02ee646dbfbf9d52af4b2d481c5d270aba4f9d14"
     },
     {
       "id": "devpost_event_snapshot_md",
@@ -347,7 +347,7 @@
       "label": "Human-readable Devpost event snapshot",
       "present": true,
       "bytes": 1443,
-      "sha256": "b0389eded15376692857a921b235a548190ec1004c80028f3c6c88fc69a805f3"
+      "sha256": "cc2e49b18ae1776d0942e2dfedd8d2da093c61a5e086eb06b2e4033b1aaf9b9b"
     },
     {
       "id": "agent_handoff_script",
@@ -363,7 +363,7 @@
       "label": "Machine-readable Agent handoff report",
       "present": true,
       "bytes": 2253,
-      "sha256": "87711b3b8a5b15151a3ad911eb9b8fae75252654b42bd8e707b25e8f4a70a965"
+      "sha256": "d4912010b69b8a18efb7101abb4840e4fbce51afb6ea4cfe39d854e21815e9ca"
     },
     {
       "id": "agent_handoff_md",
@@ -371,7 +371,7 @@
       "label": "Human-readable Agent handoff report",
       "present": true,
       "bytes": 1571,
-      "sha256": "b64f0c7769d5867cb3a6c1079c51eb7911a7e817a0fd0bf0550cff17185fb6a6"
+      "sha256": "04348bf2d799f2f0fdc8d41b167f19b1bcbe63c27d433d27610ac576885e4de0"
     },
     {
       "id": "public_space_sync_script",
@@ -387,7 +387,7 @@
       "label": "Machine-readable public Space sync report",
       "present": true,
       "bytes": 20606,
-      "sha256": "e315ee991f39586ef9933bcce05e22e3effd4a7b13cc60d4f7b550b4b116672b"
+      "sha256": "ad473ba938336977638e60008c9c8fc82c7b6f529962ad65a34a5b1b0a49e8a8"
     },
     {
       "id": "public_space_sync_md",
@@ -395,7 +395,7 @@
       "label": "Human-readable public Space sync report",
       "present": true,
       "bytes": 8673,
-      "sha256": "68fb795359bcfd693f7e68f45ab88f2ccc80af4e76c6a15913bb34995d878bd7"
+      "sha256": "3ada1f215d807d27e5185d97c77ec68f5268a253ffe59c29cce8879ee55abff8"
     },
     {
       "id": "public_space_upload_script",
@@ -410,8 +410,8 @@
       "path": "docs/assets/public-space-upload-report.json",
       "label": "Machine-readable public Space upload report",
       "present": true,
-      "bytes": 4150,
-      "sha256": "588c3fb8d14733f4d8ec7d4e1b215b060d9a9a3c655f1032e1d9d8137402cc03"
+      "bytes": 4144,
+      "sha256": "f638daa8afd5ba7448632ca565afff9868c7c0822d6c33a8be6ca6a7d07f623e"
     },
     {
       "id": "public_space_upload_md",
@@ -419,7 +419,7 @@
       "label": "Human-readable public Space upload report",
       "present": true,
       "bytes": 1372,
-      "sha256": "0b35af876a813c9cb206ac37e0f83ed5a0bd3e7a483d3b7fc1675a8bd00c84cf"
+      "sha256": "cd5387813c1d989e496c494d95e04abc6f4d3b7b767dcfc4f132fe304c33b175"
     },
     {
       "id": "public_demo_screenshot_script",
@@ -802,16 +802,16 @@
       "path": "docs/assets/final-submission-control.json",
       "label": "Machine-readable final control report",
       "present": true,
-      "bytes": 24359,
-      "sha256": "d2cf3949ba984a2591a8f8cd4bd4ea5b8e695b30a6555e226d16a2363175932a"
+      "bytes": 23805,
+      "sha256": "599c0b971d58455bb5daa78e68e61fade629406021e96cb58e2731b89d558f9e"
     },
     {
       "id": "final_submission_control_md",
       "path": "docs/assets/final-submission-control.md",
       "label": "Human-readable final control report",
       "present": true,
-      "bytes": 7087,
-      "sha256": "04a3aa516b2281bf659760edd82b004122c4c3c11eb2f86894c0c37278896c29"
+      "bytes": 7096,
+      "sha256": "580504b86d270bfe7d4a40da3015394d1adca02d217f0fcf6c2b36230b7b7a9f"
     },
     {
       "id": "final_closeout_status_script",
@@ -827,7 +827,7 @@
       "label": "Machine-readable final closeout status",
       "present": true,
       "bytes": 12592,
-      "sha256": "ad81b91c1035a28350ae9ebfbb7474e13a3cb186b72b3e4770e7653f507ec693"
+      "sha256": "532bd71fdd7485ee1d6956f429304f8cec36b3af5b1623f8fba2945ecbe619bc"
     },
     {
       "id": "final_closeout_status_md",
@@ -922,16 +922,16 @@
       "path": "docs/assets/submission-audit-report.json",
       "label": "Machine-readable submission audit report",
       "present": true,
-      "bytes": 5925,
-      "sha256": "cf1121ff24b443e8088dfafb06844462c989559dcdefb3e0acc19c1f7a0cd86b"
+      "bytes": 5759,
+      "sha256": "1abdb4af1b0c4e9726be4d7d91d03c374ac4bc4f3061581d85ab5b8ae2621b09"
     },
     {
       "id": "submission_audit_md",
       "path": "docs/assets/submission-audit-report.md",
       "label": "Human-readable submission audit report",
       "present": true,
-      "bytes": 4459,
-      "sha256": "dd3ed9a5c89591bfb0ed6150c59b5db3246ffc8583aaa7dc0fdcee4b16e661c7"
+      "bytes": 4362,
+      "sha256": "fe2134a30bbfb05aa22d169f6eb4fed5a2ab8931c58d3f61f55660fe96fb6ed2"
     },
     {
       "id": "devpost_receipt_script",
@@ -1002,8 +1002,8 @@
       "path": "docs/assets/secret-scan-report.json",
       "label": "Machine-readable secret scan report",
       "present": true,
-      "bytes": 11871,
-      "sha256": "04215217a3a8693029819734db1f5ebe2530bd5ba47e75941ea758e1b1d9aa8e"
+      "bytes": 12005,
+      "sha256": "fa4482048de6bcc086601a110f091644e31e398d98ff5f7420183965c0e4ee5d"
     },
     {
       "id": "secret_scan_md",
@@ -1011,7 +1011,7 @@
       "label": "Human-readable secret scan report",
       "present": true,
       "bytes": 846,
-      "sha256": "4f93112233868372a86f6bf77c60f2f128a1f15173d462ebd9ed38e6e399e024"
+      "sha256": "d960c02de5417f75d8834ed0816056cb8e42440a4dd24bd9970982962fc42498"
     },
     {
       "id": "b2_live_setup_json",
@@ -1043,7 +1043,7 @@
       "label": "Machine-readable B2 key scope checklist",
       "present": true,
       "bytes": 8235,
-      "sha256": "bd2b9e0e10706fe768c43c32dda9e7870bc23cb056620f130c48dacb7cd9c3de"
+      "sha256": "b72f6e8b2cc55e1fb08b62adddae0d6b99e365fda32e81c645f56edc09892736"
     },
     {
       "id": "b2_key_scope_checklist_md",
@@ -1098,16 +1098,16 @@
       "path": "docs/assets/live-credential-handoff.json",
       "label": "Machine-readable live credential handoff",
       "present": true,
-      "bytes": 4548,
-      "sha256": "08b0b09e257f62535a0800e00c91a5ffb8537c9fef9015b7a7f1be1acbe95eb8"
+      "bytes": 4499,
+      "sha256": "b862543b787de78a63ed4d290441d766f1dd050777ed8039309c3e45000bca0c"
     },
     {
       "id": "live_env_handoff_md",
       "path": "docs/assets/live-credential-handoff.md",
       "label": "Human-readable live credential handoff",
       "present": true,
-      "bytes": 2261,
-      "sha256": "17742c751ea63313f1deccdd0c4260dddc539f190f4e0ff51db85e54bf9e590d"
+      "bytes": 2167,
+      "sha256": "dd631bc9450e50e56b6560d46e6f75066ccd5a6f1935d656e157361ce3568125"
     },
     {
       "id": "final_env_wizard",
@@ -1131,7 +1131,7 @@
       "label": "Machine-readable post-credential live proof plan",
       "present": true,
       "bytes": 8435,
-      "sha256": "30c716c29303c65accdf5678c8418262cb83652b248a9823994ba2d33f0aa23c"
+      "sha256": "58391cf9121b1711a67a005aa8f81c828cdb608f082b7fe412a5c6ee7778f232"
     },
     {
       "id": "post_credential_live_proof_md",
@@ -1139,7 +1139,7 @@
       "label": "Human-readable post-credential live proof plan",
       "present": true,
       "bytes": 2780,
-      "sha256": "81ae854b8b7294a4b48bc3ced4909188ec9da63b2213d3fd4a8433c9d9513cb0"
+      "sha256": "919c0e75c22a559c1fa6977ff95d327851e798399b2ce8cb47717f173fbff0a9"
     },
     {
       "id": "public_claim_lint",
@@ -1218,8 +1218,8 @@
       "path": "tasks.json",
       "label": "Machine-readable task board",
       "present": true,
-      "bytes": 72478,
-      "sha256": "76c2bf237562c2ec633d5c305c2140a408e22c789914981620a6231ddb9630bc"
+      "bytes": 72989,
+      "sha256": "74f1d6a55d1ee436747062ad0440aa4c780a41032ea628a0f3bebcb79d2f4919"
     },
     {
       "id": "local_ui_smoke",

docs/assets/submission-bundle-manifest.md

@@ -1,6 +1,6 @@
 # ProofFrame Submission Bundle
 
-Created: `2026-06-30T10:37:46Z`
+Created: `2026-07-01T11:26:25Z`
 Repository: https://github.com/adjcjh777/backblaze-proofframe
 Public mock demo: https://adjcjh-backblaze-proofframe.hf.space/?judge=1
 Devpost packet mode: `pre_live_safe`
@@ -9,7 +9,7 @@ Final gate ready: `false`
 
 ## Current Gate
 
-- Tasks: 1 done / 6 required; 2 doing, 0 blocked, 3 todo.
+- Tasks: 2 done / 6 required; 1 doing, 0 blocked, 3 todo.
 - Live evidence: `missing`
 - Devpost copy packet: `pre_live_packet_pending`
 - Final reports: `incomplete`
@@ -17,11 +17,11 @@ Final gate ready: `false`
 
 ## Next Actions
 
-- Run a live Backblaze B2 asset and manifest proof.
 - Run a live Genblaze generation proof and capture provider metadata.
 - Run the final submission audit after live proofs are captured.
 - Run the final secret scan before recording or submitting.
 - Submit the Devpost project after every preceding gate is done.
+- Capture final live proof evidence JSON.
 
 ## Artifacts
 
@@ -38,17 +38,17 @@ Final gate ready: `false`
 - `docs/assets/devpost-submission-packet.json` (6270 bytes, sha256 `92b06cc47f68c410...`) - Machine-readable Devpost copy
 - `docs/assets/devpost-submission-packet.md` (5159 bytes, sha256 `00e03e34b62dfdfc...`) - Human-readable Devpost copy
 - `scripts/devpost_event_snapshot.py` (19728 bytes, sha256 `1389e03af0d481ea...`) - Official Devpost event snapshot checker
-- `docs/assets/devpost-event-snapshot.json` (2492 bytes, sha256 `626886a6fcee6199...`) - Machine-readable Devpost event snapshot
-- `docs/assets/devpost-event-snapshot.md` (1443 bytes, sha256 `b0389eded1537669...`) - Human-readable Devpost event snapshot
+- `docs/assets/devpost-event-snapshot.json` (2492 bytes, sha256 `5b7c1f2277d121b8...`) - Machine-readable Devpost event snapshot
+- `docs/assets/devpost-event-snapshot.md` (1443 bytes, sha256 `cc2e49b18ae1776d...`) - Human-readable Devpost event snapshot
 - `scripts/agent_handoff_check.py` (14559 bytes, sha256 `3ef180b6a92eb987...`) - Agent Bus and Codex handoff path checker
-- `docs/assets/agent-handoff-report.json` (2253 bytes, sha256 `87711b3b8a5b1515...`) - Machine-readable Agent handoff report
-- `docs/assets/agent-handoff-report.md` (1571 bytes, sha256 `b64f0c7769d5867c...`) - Human-readable Agent handoff report
+- `docs/assets/agent-handoff-report.json` (2253 bytes, sha256 `d4912010b69b8a18...`) - Machine-readable Agent handoff report
+- `docs/assets/agent-handoff-report.md` (1571 bytes, sha256 `04348bf2d799f2f0...`) - Human-readable Agent handoff report
 - `scripts/public_space_sync.py` (84964 bytes, sha256 `52280330d9e7605b...`) - Public Hugging Face Space sync verifier
-- `docs/assets/public-space-sync-report.json` (20606 bytes, sha256 `e315ee991f39586e...`) - Machine-readable public Space sync report
-- `docs/assets/public-space-sync-report.md` (8673 bytes, sha256 `68fb795359bcfd69...`) - Human-readable public Space sync report
+- `docs/assets/public-space-sync-report.json` (20606 bytes, sha256 `ad473ba938336977...`) - Machine-readable public Space sync report
+- `docs/assets/public-space-sync-report.md` (8673 bytes, sha256 `3ada1f215d807d27...`) - Human-readable public Space sync report
 - `scripts/public_space_upload.py` (12920 bytes, sha256 `38e4c3e665478e0b...`) - No-secret public Hugging Face Space upload helper
-- `docs/assets/public-space-upload-report.json` (4150 bytes, sha256 `588c3fb8d14733f4...`) - Machine-readable public Space upload report
-- `docs/assets/public-space-upload-report.md` (1372 bytes, sha256 `0b35af876a813c9c...`) - Human-readable public Space upload report
+- `docs/assets/public-space-upload-report.json` (4144 bytes, sha256 `f638daa8afd5ba74...`) - Machine-readable public Space upload report
+- `docs/assets/public-space-upload-report.md` (1372 bytes, sha256 `cd5387813c1d989e...`) - Human-readable public Space upload report
 - `scripts/public_demo_screenshot.py` (8926 bytes, sha256 `3eb5b0a003e383dd...`) - Public judge-mode screenshot verifier
 - `docs/assets/public-demo-screenshot-report.json` (2421 bytes, sha256 `e8ce08735a86a920...`) - Machine-readable public screenshot report
 - `docs/assets/public-demo-screenshot-report.md` (1418 bytes, sha256 `dce44c3bc2188131...`) - Human-readable public screenshot report
@@ -96,10 +96,10 @@ Final gate ready: `false`
 - `docs/assets/award-readiness-report.json` (11377 bytes, sha256 `66417f6e0c2a15d9...`) - Machine-readable award readiness report
 - `docs/assets/award-readiness-report.md` (4390 bytes, sha256 `5be57ca5d9cab53d...`) - Human-readable award readiness report
 - `scripts/final_submission_control.py` (32644 bytes, sha256 `6514cbdf2bfe8998...`) - Final submission control tower
-- `docs/assets/final-submission-control.json` (24359 bytes, sha256 `d2cf3949ba984a25...`) - Machine-readable final control report
-- `docs/assets/final-submission-control.md` (7087 bytes, sha256 `04a3aa516b2281bf...`) - Human-readable final control report
+- `docs/assets/final-submission-control.json` (23805 bytes, sha256 `599c0b971d58455b...`) - Machine-readable final control report
+- `docs/assets/final-submission-control.md` (7096 bytes, sha256 `580504b86d270bfe...`) - Human-readable final control report
 - `scripts/final_closeout_status.py` (19027 bytes, sha256 `fef94acd01449141...`) - No-secret final closeout status report
-- `docs/assets/final-closeout-status.json` (12592 bytes, sha256 `ad81b91c1035a283...`) - Machine-readable final closeout status
+- `docs/assets/final-closeout-status.json` (12592 bytes, sha256 `532bd71fdd7485ee...`) - Machine-readable final closeout status
 - `docs/assets/final-closeout-status.md` (2467 bytes, sha256 `218ef848c482db51...`) - Human-readable final closeout status
 - `scripts/final_operator_brief.py` (15912 bytes, sha256 `1e01afa36b48d9b8...`) - No-secret final operator brief
 - `docs/assets/final-operator-brief.json` (10142 bytes, sha256 `4fb10abaa1f654cf...`) - Machine-readable final operator brief
@@ -111,8 +111,8 @@ Final gate ready: `false`
 - `docs/assets/final-rehearsal-checklist.json` (17103 bytes, sha256 `ae398d43c900e40f...`) - Machine-readable final rehearsal checklist
 - `docs/assets/final-rehearsal-checklist.md` (7404 bytes, sha256 `026e07a2a99bf616...`) - Human-readable final rehearsal checklist
 - `scripts/submission_audit.py` (20684 bytes, sha256 `0f9a378c203bf7b6...`) - Pre-submit audit gate
-- `docs/assets/submission-audit-report.json` (5925 bytes, sha256 `cf1121ff24b443e8...`) - Machine-readable submission audit report
-- `docs/assets/submission-audit-report.md` (4459 bytes, sha256 `dd3ed9a5c89591bf...`) - Human-readable submission audit report
+- `docs/assets/submission-audit-report.json` (5759 bytes, sha256 `1abdb4af1b0c4e97...`) - Machine-readable submission audit report
+- `docs/assets/submission-audit-report.md` (4362 bytes, sha256 `fe2134a30bbfb05a...`) - Human-readable submission audit report
 - `scripts/devpost_submission_receipt.py` (9209 bytes, sha256 `76c55e8ff1aeaa52...`) - Public-safe Devpost submission receipt generator
 - `docs/assets/devpost-submission-receipt.json` (1298 bytes, sha256 `bf646cf968665c8c...`) - Machine-readable Devpost submission receipt
 - `docs/assets/devpost-submission-receipt.md` (996 bytes, sha256 `af2fa18349d5c017...`) - Human-readable Devpost submission receipt
@@ -121,24 +121,24 @@ Final gate ready: `false`
 - `docs/verification.md` (12499 bytes, sha256 `c92fd26c877d5c5f...`) - Local, CI, Docker, and live proof runbook
 - `.env.final.example` (363 bytes, sha256 `fb5fad4f14e2b0ad...`) - Redacted final B2 plus Genblaze env template
 - `scripts/secret_scan.py` (11105 bytes, sha256 `02aec3a4a6e9fd47...`) - Final secret scanner
-- `docs/assets/secret-scan-report.json` (11871 bytes, sha256 `04215217a3a86930...`) - Machine-readable secret scan report
-- `docs/assets/secret-scan-report.md` (846 bytes, sha256 `4f93112233868372...`) - Human-readable secret scan report
+- `docs/assets/secret-scan-report.json` (12005 bytes, sha256 `fa4482048de6bcc0...`) - Machine-readable secret scan report
+- `docs/assets/secret-scan-report.md` (846 bytes, sha256 `d960c02de5417f75...`) - Human-readable secret scan report
 - `docs/assets/b2-live-setup.json` (719 bytes, sha256 `a377923f48e112b1...`) - Non-secret B2 bucket setup record
 - `docs/assets/b2-live-setup.md` (864 bytes, sha256 `863b2a02e3d2824f...`) - Human-readable B2 bucket setup record
 - `scripts/b2_key_scope_checklist.py` (17240 bytes, sha256 `bb1e6140f10aa3ac...`) - No-secret Backblaze B2 application key scope checklist
-- `docs/assets/b2-key-scope-checklist.json` (8235 bytes, sha256 `bd2b9e0e10706fe7...`) - Machine-readable B2 key scope checklist
+- `docs/assets/b2-key-scope-checklist.json` (8235 bytes, sha256 `b72f6e8b2cc55e1f...`) - Machine-readable B2 key scope checklist
 - `docs/assets/b2-key-scope-checklist.md` (4527 bytes, sha256 `2fa660a7e0e19d0e...`) - Human-readable B2 key scope checklist
 - `scripts/genblaze_contract_check.py` (12455 bytes, sha256 `58bf94bc7d994415...`) - No-secret Genblaze/B2 SDK contract checker
 - `docs/assets/genblaze-contract-report.json` (5919 bytes, sha256 `0e30a126a206f946...`) - Machine-readable Genblaze SDK contract report
 - `docs/assets/genblaze-contract-report.md` (3166 bytes, sha256 `6bb4bdb7c7a39915...`) - Human-readable Genblaze SDK contract report
 - `scripts/run_b2_live_proof.py` (5781 bytes, sha256 `9678c0292a70cc0b...`) - One-command B2 storage proof runner
 - `scripts/live_env_handoff.py` (9451 bytes, sha256 `39c8de0b58c132c3...`) - Redacted live credential handoff gate
-- `docs/assets/live-credential-handoff.json` (4548 bytes, sha256 `08b0b09e257f6253...`) - Machine-readable live credential handoff
-- `docs/assets/live-credential-handoff.md` (2261 bytes, sha256 `17742c751ea63313...`) - Human-readable live credential handoff
+- `docs/assets/live-credential-handoff.json` (4499 bytes, sha256 `b862543b787de78a...`) - Machine-readable live credential handoff
+- `docs/assets/live-credential-handoff.md` (2167 bytes, sha256 `dd631bc9450e50e5...`) - Human-readable live credential handoff
 - `scripts/final_env_wizard.py` (18690 bytes, sha256 `0fd664973da43311...`) - Local final credential env wizard
 - `scripts/post_credential_live_proof.py` (17600 bytes, sha256 `244d2ecd9bb2f791...`) - Post-credential live proof sequence runner
-- `docs/assets/post-credential-live-proof-plan.json` (8435 bytes, sha256 `30c716c29303c65a...`) - Machine-readable post-credential live proof plan
-- `docs/assets/post-credential-live-proof-plan.md` (2780 bytes, sha256 `81ae854b8b7294a4...`) - Human-readable post-credential live proof plan
+- `docs/assets/post-credential-live-proof-plan.json` (8435 bytes, sha256 `58391cf9121b1711...`) - Machine-readable post-credential live proof plan
+- `docs/assets/post-credential-live-proof-plan.md` (2780 bytes, sha256 `919c0e75c22a559c...`) - Human-readable post-credential live proof plan
 - `scripts/claim_lint.py` (5190 bytes, sha256 `d8e9f53dfee772a1...`) - Fail-closed public claim lint
 - `scripts/demo_readiness.py` (8661 bytes, sha256 `d38ad138a2ca0d78...`) - Demo recording readiness gate
 - `docs/assets/demo-readiness-report.json` (3893 bytes, sha256 `ebd13ea05535dba2...`) - Machine-readable demo readiness report
@@ -148,7 +148,7 @@ Final gate ready: `false`
 - `docs/assets/recording-assets.md` (3867 bytes, sha256 `e3d2ef5dd86dfe33...`) - Human-readable recording asset report
 - `scripts/run_final_live_proof.py` (5814 bytes, sha256 `c6b9dc2fc9d7c670...`) - One-command final B2 plus Genblaze proof runner
 - `docs/submission.md` (4000 bytes, sha256 `b702417f1345fe39...`) - Registration and submission plan
-- `tasks.json` (72478 bytes, sha256 `76c2bf237562c2ec...`) - Machine-readable task board
+- `tasks.json` (72989 bytes, sha256 `74f1d6a55d1ee436...`) - Machine-readable task board
 - `docs/assets/proofframe-local-ui-smoke.png` (364927 bytes, sha256 `cca671ad38bda4dc...`) - Local UI screenshot
 - `docs/assets/proofframe-review-console-smoke.png` (343618 bytes, sha256 `30620a33e3c7ab28...`) - Review console screenshot
 - `docs/assets/proofframe-hf-public-smoke.png` (741074 bytes, sha256 `5d6f68f7a4a2fdee...`) - Public mock demo screenshot

docs/todo.md

@@ -34,6 +34,18 @@ python3 scripts/task.py doing T020 --note "Live B2 proof in progress"
 5. Run the final secret scan, strict form/storyboard/readiness gates, and `python scripts/submission_audit.py --strict-final`.
 6. Keep public claims frozen with `docs/public_claim_freeze.md` until real B2 and Genblaze evidence exists and the strict audit is green.
 
+## Current Final Gate Status
+
+Last refreshed: `2026-07-01`.
+
+| Task | True status | Evidence |
+| --- | --- | --- |
+| T020 | `done` | B2 live proof passed with scoped standard key against bucket `proofframe-demo-a6b4e49` and prefix `campaigns/`; sanitized evidence is saved at `docs/assets/b2-live-proof-evidence.json`. Generation remains mock until T021. |
+| T021 | `doing` | Genblaze adapter and SDK packages are ready; live proof still waits for local `GENBLAZE_API_KEY` entry. |
+| T041 | `todo` | `docs/assets/submission-audit-report.json` is regenerated in `pre_submit_audit_blocked` mode with 17 findings. |
+| T041A | `todo` | `docs/assets/secret-scan-report.json` is clear for the current pre-final tree; final scan remains after live proof, final public video, and Devpost artifacts exist. |
+| T042 | `todo` | Official Devpost snapshot is fresh, `submission_open=true`, and observed participants are `439`; final submission waits for live proof, public video, strict audit, and receipt capture. |
+
 ## Recently Completed
 
 | Task | Result |

src/proofframe/storage.py

@@ -24,6 +24,13 @@ def _manifest_bytes(manifest: CampaignManifest) -> bytes:
     return manifest.model_dump_json(indent=2).encode("utf-8")
 
 
+def _endpoint_with_scheme(endpoint_url: str) -> str:
+    endpoint = endpoint_url.strip()
+    if endpoint and "://" not in endpoint:
+        return f"https://{endpoint}"
+    return endpoint
+
+
 class LocalStorageBackend:
     """Filesystem storage used for tests and credential-free demos."""
 
@@ -90,6 +97,9 @@ class B2StorageBackend:
 
     name = "b2"
 
+    def __post_init__(self) -> None:
+        self.endpoint_url = _endpoint_with_scheme(self.endpoint_url)
+
     @classmethod
     def from_settings(cls, settings: Settings) -> "B2StorageBackend":
         settings.require_b2()

tasks.json

@@ -1,6 +1,6 @@
 {
   "project": "ProofFrame",
-  "updated_at": "2026-06-30T10:34:17Z",
+  "updated_at": "2026-07-01T11:25:32Z",
   "tasks": [
     {
       "id": "T001",
@@ -115,9 +115,9 @@
       "title": "Integrate Backblaze B2-compatible storage",
       "phase": "P2 Integrations",
       "owner": "executor",
-      "status": "doing",
+      "status": "done",
       "done_criteria": "B2 backend stores an asset and manifest using env-only credentials.",
-      "notes": "B2 S3-compatible backend implemented with fake-client tests; Backblaze account registered and private bucket proofframe-demo-a6b4e49 created with endpoint s3.us-west-004.backblazeb2.com; scoped application key form is prepared but key creation/live verification still requires explicit confirmation."
+      "notes": "B2 live proof passed with scoped standard key against bucket proofframe-demo-a6b4e49 and prefix campaigns/; sanitized evidence saved at docs/assets/b2-live-proof-evidence.json. Generation remains mock until T021."
     },
     {
       "id": "T021",
@@ -126,7 +126,7 @@
       "owner": "executor",
       "status": "doing",
       "done_criteria": "Generation adapter records provider/model metadata and fails closed without config.",
-      "notes": "Genblaze/GMICloud image provider adapter implemented with official Pipeline API; live credentials/package run still required for final public claim."
+      "notes": "Genblaze/GMI adapter and SDK packages remain ready; 2026-07-01 final proof preflight confirms model and genblaze_core/genblaze_gmicloud/genblaze_s3 are available, but live proof is still blocked by missing local GENBLAZE_API_KEY."
     },
     {
       "id": "T084",
@@ -675,7 +675,7 @@
       "owner": "reviewer",
       "status": "todo",
       "done_criteria": "Reviewer signs off on rules, secrets, claims, and public artifacts.",
-      "notes": ""
+      "notes": "2026-07-01 submission audit report regenerated in pre_submit_audit_blocked mode with 17 findings; final audit cannot pass until B2/Genblaze live evidence, final video, final secret scan, and Devpost receipt exist."
     },
     {
       "id": "T041A",
@@ -684,7 +684,7 @@
       "owner": "reviewer",
       "status": "todo",
       "done_criteria": "Secret scan covers repo, docs, screenshots, exported manifests, logs, and demo evidence before submission.",
-      "notes": "No B2, Genblaze, provider, Devpost, cookie, signed URL, or test account secret may be committed or shown."
+      "notes": "2026-07-01 pre-final secret scan report is clear and committed; final secret scan remains todo after live proof, final public video, and Devpost submission artifacts are generated."
     },
     {
       "id": "T041B",
@@ -711,7 +711,7 @@
       "owner": "controller",
       "status": "todo",
       "done_criteria": "Devpost submission is accepted before 2026-08-04 05:00 Asia/Shanghai.",
-      "notes": ""
+      "notes": "Devpost submission remains todo; official event snapshot refreshed 2026-07-01 with submission_open=true and observed participants=439, but final submission must wait for live proof, public video, strict audit, and receipt capture."
     },
     {
       "id": "T042A",

tests/test_integrations.py

@@ -162,3 +162,15 @@ def test_b2_backend_puts_media_and_manifest_with_fake_client():
     assert len(fake.puts) == 2
     assert fake.puts[0]["Bucket"] == "proof-bucket"
     assert fake.puts[0]["Metadata"]["sha256"] == stored_media.sha256
+
+
+def test_b2_backend_normalizes_endpoint_without_scheme():
+    backend = B2StorageBackend(
+        endpoint_url="s3.us-west-004.backblazeb2.com",
+        bucket="proof-bucket",
+        key_id="key-id",
+        application_key="application-key",
+        client=FakeS3Client(),
+    )
+
+    assert backend.endpoint_url == "https://s3.us-west-004.backblazeb2.com"