Every generated artifact in the resume tree carries a SHA-256 checksum. Identical PG state produces identical packet bytes, determinism is a property of the artifact, not a promise from the model.
Same WO as Recovery. Generated artifact ledger lives inside the resume packet, one row per packet/overlay with checksum=sha256:<hex>.
The resume packet is rendered deterministically from PG state. Each render emits a SHA-256 over the packet bytes; the hash is stored alongside the file path. Replaying the render at the same PG snapshot produces the identical hash.
WO: wo:demo:platform-cleanup Stand-down history (8 events): gen 1 sha256:42a501d5faeec04ead89bb952928300b80499e9713093757393f0f4e6fa6eb67 gen 2 sha256:c08b895b1020f56ca78a370fbda2a8d22b09f6c8c115c29aadef231877de8d24 gen 3 sha256:a1b0c59fbd27f14dc63d4aaef93051ebdc9ef474f5d1b9bef878d3ad2d4db313 gen 4 sha256:907501eaad84e489485843ea4cb5a8ddc999d1013518192c322d911f291e2d07 gen 5 sha256:dcc82b7966200841e136aea08ee66021935f4727176141401d32f7481bc7365b gen 6–8 sha256:… Same PG state → same SHA-256. Determinism is a property of the bytes, not a promise from the model.
Every entry in the evidence library is backed by an artifact with reproducible commands. If you want to put your own work through AgentOS, get started below.