panshularora · Oct 29, 2026 · Oct 29, 2026 · Oct 29, 2026 · Oct 29, 2026 · Oct 29, 2026
diff --git a/.gitattributes b/.gitattributes
@@ -3,3 +3,9 @@
 # Raw receipts/test output are byte-preserved evidence, including HTTP CRLF and
 # captured diagnostic whitespace. Source code retains ordinary whitespace checks.
 project/evidence/** -text -whitespace
+
+# Frontend evidence copies are hashed. A Windows autocrlf checkout must not
+# rewrite them or `npm run data:check` fails.
+frontend/data/raw/** -text
+frontend/data/upstream/** -text
+frontend/public/data/** -text
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -14,9 +14,13 @@ permissions:
 
 jobs:
   analyze:
-    name: Analyze (python)
+    name: Analyze (${{ matrix.language }})
     if: github.repository_owner == 'AOSSIE-Org'
     runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        language: [python, javascript-typescript]
     permissions:
       security-events: write
       actions: read
@@ -29,11 +33,11 @@ jobs:
       - name: Initialize CodeQL
         uses: github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
         with:
-          languages: python
+          languages: ${{ matrix.language }}
           build-mode: none
           queries: security-extended
 
       - name: Perform CodeQL analysis
         uses: github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
         with:
-          category: "/language:python"
+          category: "/language:${{ matrix.language }}"
diff --git a/.github/workflows/frontend.yml b/.github/workflows/frontend.yml
@@ -0,0 +1,57 @@
+# Frontend evidence site. Separate from the training/verifier CI in ci.yml.
+name: Frontend
+on:
+  pull_request:
+    paths:
+      - 'frontend/**'
+      - '.github/workflows/frontend.yml'
+  push:
+    branches: [main]
+    paths:
+      - 'frontend/**'
+      - '.github/workflows/frontend.yml'
+
+permissions:
+  contents: read
+
+defaults:
+  run:
+    working-directory: frontend
+
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+        with:
+          persist-credentials: false
+
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
+        with:
+          python-version: '3.12'
+
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version: '20'
+          cache: npm
+          cache-dependency-path: frontend/package-lock.json
+
+      - name: Install
+        run: npm ci
+
+      - name: npm audit (high)
+        run: npm audit --audit-level=high
+
+      - name: Fetch pinned evidence
+        run: npm run data:fetch
+
+      - name: Fail if committed site-data.json differs from a fresh build
+        run: npm run data:check
+
+      - name: Playwright Chromium
+        run: npx playwright install --with-deps chromium
+
+      - name: npm run check
+        env:
+          CI: '1'
+        run: npm run check
diff --git a/frontend/.gitignore b/frontend/.gitignore
@@ -0,0 +1,7 @@
+node_modules
+dist
+dist-ssr
+test-results
+playwright-report
+screenshots
+*.tsbuildinfo
diff --git a/frontend/README.md b/frontend/README.md
@@ -0,0 +1,64 @@
+# OpenVerifiableLLM evidence site (v3)
+
+A static site that shows what was trained, who has checked it, and how to check it yourself.
+Pinned evidence numbers come from the Hugging Face dataset
+`AOSSIE/openverifiable-enwiki-20260901-20260918-r1-evidence` at `96dc282a`. Commands, cost, and
+release digests come from GitHub copies listed below. Headlines come from `copy.json`; labels from
+`ui.json`; facts and limits from the claim ledger. Nothing runs on a server.
+
+## Where things come from
+
+| What | File | Owner |
+|---|---|---|
+| Pinned evidence files + sha256 manifest | `data/raw/**` (`npm run data:fetch`) | fetched, never edited |
+| GitHub docs cited by the ledger, at `1049d2a7` | `data/upstream/1049d2a7/**`, `data/upstream/manifest.json` | copied verbatim |
+| GitHub release v1.0.1 asset digests | `data/upstream/github-release-v1.0.1.json` | API snapshot |
+| Site data (every value has a source row) | `public/data/site-data.json` (`npm run data`) | generated |
+| Claims: ids, sources, limits, banned phrases | `src/content/claims.json` | Research Lab (`npm run claims:sync`) |
+| Plain-language headlines per claim id | `src/content/copy.json` (from `COPY.md`) | Open Source Ops (`npm run claims:sync`) |
+| Navigation and table labels (no facts, no numbers) | `src/content/ui.json` | site |
+| Approved mark (header + favicon) | `logo/*.svg` copied to `public/logo.svg` and `public/favicon.svg` | brand |
+| Ledger numbers the pinned data does not support | `src/content/ledger-issues.json` | reported, withheld from the page |
+
+## Commands
+
+```bash
+npm ci
+npm run data:fetch      # pinned evidence files into data/raw (needed by 3 unit tests and the build)
+CLAIMS_DIR=/path/to/ovllm-claims npm run claims:sync   # copies claims.json and COPY.md
+npm run data            # rebuild public/data/site-data.json from data/raw
+npm run lint && npm run typecheck && npm test && npm run contrast
+npm run build           # data drift check → typecheck → client + SSR build → prerender → phone budget
+npx playwright install chromium && CI=1 E2E_PORT=4391 npm run test:e2e   # own port; never reuses a running server
+```
+
+`npm run data:check` (and therefore `npm run build` and CI) fails if the committed
+`public/data/site-data.json` differs from a fresh rebuild of the pinned files and
+`src/content/claims.json`. The build also fails if any section fails validation, if a ledger
+claim has no source, uses a banned phrase, or shows a number found neither in its cited lines
+nor in `site-data.json`, or if the bundle exceeds the phone budget. Set
+`BASE_PATH=/OpenVerifiableLLM/` to build for a sub-path.
+
+Hashed copies under `data/raw/`, `data/upstream/`, and `public/data/` are marked `-text` in
+`.gitattributes` so a Windows `core.autocrlf` checkout cannot rewrite the bytes.
+
+## How to change one claim
+
+Edit that claim in `src/content/claims.json` (id, sources, limits, wording). If the headline
+should change, edit the same id in `src/content/copy.json` (or in `COPY.md`, then
+`npm run claims:sync`). Run `npm run data` so `public/data/site-data.json` is rebuilt. Leave
+`ui.json` for labels that carry no facts and no numbers.
+
+## Counts in copy
+
+Headlines never type a segment or check count. `copy.json` uses placeholders filled from `site-data.json`:
+`{matched}` `{total}` `{independent}` `{rows}` `{second}` `{training}` `{fresh}` `{m95}` `{m99}` `{N}` (OV-04, VE-01, VE-03, VE-07, VE-08). A line
+that says "{matched} of {total}" or "all matched" is withheld (scoped error) when the data disagrees. The
+ledger keeps its literal numbers; `tests/unit/fill.test.tsx` fails if a filled value is not in that claim's
+ledger text. COPY.md must carry the same placeholders, or `npm run claims:sync` reverts them (the test fails).
+
+## Data pinning
+
+Each prerendered page carries `<meta name="ovl-data">` (sha256 of the data it was built from) and loads
+`data/site-data.<sha16>.json`. Data with another hash never hydrates the page: every data section shows
+"Couldn't load this evidence." A CSP meta tag ships on every page (no inline scripts).
diff --git a/frontend/data/raw/manifest.json b/frontend/data/raw/manifest.json
@@ -0,0 +1,86 @@
+{
+ "repo": "AOSSIE/openverifiable-enwiki-20260901-20260918-r1-evidence",
+ "revision": "96dc282a9803616c6b30bb31bfc3a0b91a7191e6",
+ "files": {
+  "release/simple-run/chain.jsonl": {
+   "sha256": "c1f867e16d0660c611186183863cc5626e3510b046d52e617c3953beb8f8a327",
+   "bytes": 19686,
+   "url": "https://huggingface.co/datasets/AOSSIE/openverifiable-enwiki-20260901-20260918-r1-evidence/resolve/96dc282a9803616c6b30bb31bfc3a0b91a7191e6/release/simple-run/chain.jsonl"
+  },
+  "release/simple-run/verifications.jsonl": {
+   "sha256": "ec73fe8fdce56eb075783c37383dbb5afaa23fac168fbd6619c01240de41b770",
+   "bytes": 7355,
+   "url": "https://huggingface.co/datasets/AOSSIE/openverifiable-enwiki-20260901-20260918-r1-evidence/resolve/96dc282a9803616c6b30bb31bfc3a0b91a7191e6/release/simple-run/verifications.jsonl"
+  },
+  "release/simple-run/hardware-map.jsonl": {
+   "sha256": "5116f365398795a5e79513a3709d48995cc72a059ae9c69c653e324e723884e4",
+   "bytes": 956,
+   "url": "https://huggingface.co/datasets/AOSSIE/openverifiable-enwiki-20260901-20260918-r1-evidence/resolve/96dc282a9803616c6b30bb31bfc3a0b91a7191e6/release/simple-run/hardware-map.jsonl"
+  },
+  "release/simple-run/release-hashes.txt": {
+   "sha256": "479ce030fa8022f0f92262849f88dfde4c9cf2a0748b8830357f3aa277080e8d",
+   "bytes": 3364,
+   "url": "https://huggingface.co/datasets/AOSSIE/openverifiable-enwiki-20260901-20260918-r1-evidence/resolve/96dc282a9803616c6b30bb31bfc3a0b91a7191e6/release/simple-run/release-hashes.txt"
+  },
+  "release/simple-run/anchor.json": {
+   "sha256": "2adaea4cae25439199ec2396c0e6e94d1d14188c070f217ed7e360ce10c1c18d",
+   "bytes": 689,
+   "url": "https://huggingface.co/datasets/AOSSIE/openverifiable-enwiki-20260901-20260918-r1-evidence/resolve/96dc282a9803616c6b30bb31bfc3a0b91a7191e6/release/simple-run/anchor.json"
+  },
+  "release/simple-run/anchor.digicert.tsr": {
+   "sha256": "26a643321802ec92eb67f842d770c1d0b69aee66d3e9c3b58f84380a65d08564",
+   "bytes": 6007,
+   "url": "https://huggingface.co/datasets/AOSSIE/openverifiable-enwiki-20260901-20260918-r1-evidence/resolve/96dc282a9803616c6b30bb31bfc3a0b91a7191e6/release/simple-run/anchor.digicert.tsr"
+  },
+  "release/simple-run/anchor.freetsa.tsr": {
+   "sha256": "4c1cc74f8596fff22125f285899d50b3ab50b69a6a1023baf3d68139f32cba6f",
+   "bytes": 4644,
+   "url": "https://huggingface.co/datasets/AOSSIE/openverifiable-enwiki-20260901-20260918-r1-evidence/resolve/96dc282a9803616c6b30bb31bfc3a0b91a7191e6/release/simple-run/anchor.freetsa.tsr"
+  },
+  "release/simple-run/README.md": {
+   "sha256": "d3a4a5b221d9d1bd9318e8e414b44adc75f66155d03cd356b489165243e932e9",
+   "bytes": 8250,
+   "url": "https://huggingface.co/datasets/AOSSIE/openverifiable-enwiki-20260901-20260918-r1-evidence/resolve/96dc282a9803616c6b30bb31bfc3a0b91a7191e6/release/simple-run/README.md"
+  },
+  "release/simple-run/recipe.json": {
+   "sha256": "28a2fb407a5582ae95c9e9b0bba2c14df946e87bba037800399c6059256b6e6d",
+   "bytes": 458,
+   "url": "https://huggingface.co/datasets/AOSSIE/openverifiable-enwiki-20260901-20260918-r1-evidence/resolve/96dc282a9803616c6b30bb31bfc3a0b91a7191e6/release/simple-run/recipe.json"
+  },
+  "release/unlearning-3i-atlas/chain.jsonl": {
+   "sha256": "98ffe339f9a0e20458b2615597fdb9ca23b0b12a5bac3873c9327893e724e6c1",
+   "bytes": 20725,
+   "url": "https://huggingface.co/datasets/AOSSIE/openverifiable-enwiki-20260901-20260918-r1-evidence/resolve/96dc282a9803616c6b30bb31bfc3a0b91a7191e6/release/unlearning-3i-atlas/chain.jsonl"
+  },
+  "release/unlearning-3i-atlas/verifications.jsonl": {
+   "sha256": "6f23946c7bcb7413a7f8b7fa322f5fa6b3240caa93c6d4d63c5a7133cbc9e7ec",
+   "bytes": 1788,
+   "url": "https://huggingface.co/datasets/AOSSIE/openverifiable-enwiki-20260901-20260918-r1-evidence/resolve/96dc282a9803616c6b30bb31bfc3a0b91a7191e6/release/unlearning-3i-atlas/verifications.jsonl"
+  },
+  "release/unlearning-3i-atlas/loo-results.json": {
+   "sha256": "c926c965d1e040ab23c591c9dcdd007e5ece75a57ecfa100fd69515d190ead69",
+   "bytes": 2158,
+   "url": "https://huggingface.co/datasets/AOSSIE/openverifiable-enwiki-20260901-20260918-r1-evidence/resolve/96dc282a9803616c6b30bb31bfc3a0b91a7191e6/release/unlearning-3i-atlas/loo-results.json"
+  },
+  "release/unlearning-3i-atlas/release-hashes.txt": {
+   "sha256": "8b5800df8a3f88622d9cd91beb72949b37762e3e0b5f42253cd78c99c54ea508",
+   "bytes": 1044,
+   "url": "https://huggingface.co/datasets/AOSSIE/openverifiable-enwiki-20260901-20260918-r1-evidence/resolve/96dc282a9803616c6b30bb31bfc3a0b91a7191e6/release/unlearning-3i-atlas/release-hashes.txt"
+  },
+  "release/unlearning-3i-atlas/README.md": {
+   "sha256": "499eb00a91699fa785c94fcbf3d8e96f0ad71d390752ee4523d2b019a010f560",
+   "bytes": 3744,
+   "url": "https://huggingface.co/datasets/AOSSIE/openverifiable-enwiki-20260901-20260918-r1-evidence/resolve/96dc282a9803616c6b30bb31bfc3a0b91a7191e6/release/unlearning-3i-atlas/README.md"
+  },
+  "release/unlearning-3i-atlas/recipe.json": {
+   "sha256": "28a2fb407a5582ae95c9e9b0bba2c14df946e87bba037800399c6059256b6e6d",
+   "bytes": 458,
+   "url": "https://huggingface.co/datasets/AOSSIE/openverifiable-enwiki-20260901-20260918-r1-evidence/resolve/96dc282a9803616c6b30bb31bfc3a0b91a7191e6/release/unlearning-3i-atlas/recipe.json"
+  },
+  "prepared/8de1d60065b1e8e084c31c202e47367f28c8b89f11b4e895873f775bc0f7ba68/preparation.json": {
+   "sha256": "8de1d60065b1e8e084c31c202e47367f28c8b89f11b4e895873f775bc0f7ba68",
+   "bytes": 7985,
+   "url": "https://huggingface.co/datasets/AOSSIE/openverifiable-enwiki-20260901-20260918-r1-evidence/resolve/96dc282a9803616c6b30bb31bfc3a0b91a7191e6/prepared/8de1d60065b1e8e084c31c202e47367f28c8b89f11b4e895873f775bc0f7ba68/preparation.json"
+  }
+ }
+}