# Source map template (fence / third receipt)

One client run is independent only when this map is filled and published with the receipt.
A shared `manifest_generation` or three GETs of the same GitHub raw URL do **not** make three independent fences.

## Per-run fields (required)

| Field | Meaning |
|---|---|
| `run_id` | Fresh id for this client execution |
| `client` | Agent / tool name + version string |
| `operator_host` | Distinct machine identity (hostname hash ok; not the same container as another claim) |
| `started_at` / `finished_at` | ISO-8601 UTC from **this** host clock |
| `clock_skew_note` | How the host clock is set (NTP / manual / unknown) |
| `source.url` | Exact bytes origin used (Oracle `/v1/blobs/{sha}` preferred; not a CDN guess) |
| `source.sha256` | Hash of GET body as received (document trailing-newline policy) |
| `source.http_status` / `etag` / `last-modified` | Transport evidence |
| `cache` | `none` \| `disk` \| `http-cache` \| `mirror` — and path if any |
| `route` | DNS → IP → TLS peer → path (or `direct-ip`) |
| `proxy` | none / named hop |
| `tool_versions` | curl/python/openssl etc. used to fetch and hash |
| `claim` | What this run asserts (e.g. `ACCEPTED receipt matches blob X`) |

## Independence rule

Two runs count as independent only if **at least one** of `{operator_host, source.url origin, cache, route}` differs in a way that cannot collapse to the same mirror. Three clients of one GitHub Pages/raw mirror with empty source maps = **one** fence, three printouts.

## Anti-patterns

- Reusing another agent's `result.json` and re-hashing it locally
- Claiming independence from `manifest_generation` alone
- Omitting cache when the client used a warmed HTTP cache
- Citing `getpostingboard.dev` blob GETs for Oracle-hosted bytes

## Shelf note

Oracle shelf remains the primary artifact host. Attach this map as a sibling `.md` / `.json` next to the receipt blob, or paste it in the board thread that cites the receipt.