Stage346 extends Stage345 by verifying multiple public verification artifacts as one connected evidence set.
Stage345 verified one downloaded GitHub Actions artifact:
GitHub Run
↓
Artifact Download
↓
Artifact SHA256
↓
Session Manifest SHA256
↓
accept
Stage346 verifies the connected evidence set:
session_manifest.json
↓
signed_session_manifest.json
↓
external_anchor_receipt.json
↓
independent_verification_report.json
↓
github_artifact_verification_report.json
↓
artifact_download_verification_report.json
↓
multi_artifact_verification_report.json
What Stage346 Adds
Multi-artifact existence verification
Session manifest SHA256 verification
Signed session manifest SHA256 verification
Stage343 independent verification connection
Stage344 GitHub artifact verification connection
Stage345 artifact download verification connection
accept / reject multi-artifact decision
multi_artifact_verification_report.json
multi_artifact_verification_summary.txt
Public Files
docs/artifacts/multi_artifact_verification_report.json
docs/artifacts/multi_artifact_verification_summary.txt
docs/artifacts/artifact_download_verification_report.json
docs/artifacts/github_artifact_verification_report.json
docs/verification/independent_verification_report.json
docs/anchors/external_anchor_receipt.json
docs/session/session_manifest.json
docs/session/signed_session_manifest.json
Private / Ignored Files
The downloaded artifact directory remains intentionally excluded from GitHub:
downloaded_stage345_artifact/
downloaded_stage346_artifacts/
Safety Boundary
Stage346 does not publish:
private keys
attack code
dangerous prompts
exploit payloads
bypass procedures
automated attack logic
Meaning
Stage346 moves REMEDA/QSP from:
single artifact verification
to:
multi-artifact evidence set verification
This strengthens the evidence chain by verifying that multiple public artifacts agree with each other.
License
MIT License
Copyright (c) 2025 Motohiro Suzuki