{"upl":"UPL-TECH-26-243670-EN","title":"Worker_demi_proxy_V5_9_1_CORE_RELIABILITY","author":"Skydle","publisher":"UplitAU Pty Ltd","environment":"real","payment_verified":true,"tier":"starter","payment":"eth","payment_ref":"0xfb40eee8d73c1426e98ec98fb4645d7b86403bcae2bdddf29f9621dfa7975f04","amount_aud":"9.01","timestamp":"2026-10-16T23:08:19.052Z","registered_at":"2026-10-16T23:08:19.167Z","language":"en","file_name":"Worker_demi_proxy_V5_9_1(1).js","file_sha256":"558e51a987899e4ddebf5a6d0abc52d3bcb1478710828735a9da0f797530d8af","extract_sha256":"b8af4fd5dbbe73f34602bfa7dd918816cf349f03ba0921e96f90b8019da8eff5","derived_from":"UPL-TECH-26-395542-EN","description":null,"demi_core":{"core_statement":"Worker V5.9.1 of the DEMI Registry fixes a failure mode where a Conceptual Core could be missing or misreported on a certificate, by adding AI-call reliability measures and a verified '/core-again' re-formation endpoint.","propositions":"T1: AI Core call has a 50-second timeout, 4000-token limit, one retry on network error/429/5xx/529/invalid JSON, and pre-return validation | T2: '/core-again' endpoint accepts owner-pasted passage only if SHA-256 matches record's extract fingerprint, fills missing Core only, enforces 3 attempts/record/day, logs to core_changes, adds fingerprint to index and next Ethereum anchor, and gates publication on operator token for ETH-wallet payments | T3: Display layer shows 'Not formed yet' with re-formation link for failed Cores, labels operator as UplitAU and record originator as Publisher, flags early records as EARLY REGISTRATION, returns matched file hash from verify_fingerprint, and sets nosniff and referrer headers with optional rate limiting | T4: V5.9.1 fix corrects a broken page script in V5.9.0 that prevented '/core-again' from running in a browser; validated live on record UPL-TECH-26-667079-EN on 16 October 2026","constraints":"Registration flow, payment handling, Ethereum anchoring, index format and five MCP tools are unchanged from prior versions | 44 local tests must pass and output must be at parity with V5.8.8 | '/core-again' requires passage SHA-256 to equal the stored extract fingerprint | Existing Cores must never be overwritten | Attempt cap is 3 per record per day | ETH-wallet payment records require operator token before Core is published | V5.9.1 subsumes V5.9.0 changes","mechanisms":"T1: Inject a network error, a 429 and a 5xx response in turn and confirm single retry each; inject a non-JSON AI response and confirm retry; confirm rejection after two consecutive failures; measure response under 50-second cut-off with a 4000-token reply | T2: Submit correct and incorrect SHA-256 passages and confirm accept/reject; attempt Core re-formation on a record with an existing Core and confirm no change; submit 4 attempts in one day and confirm the fourth is blocked; check core_changes log after a successful fill; confirm fingerprint appears in index and Ethereum anchor queue; submit as ETH-wallet owner without operator token and confirm Core is withheld | T3: Load a record with missing Core and confirm 'Not formed yet' text and link render; inspect certificate of an early record for EARLY REGISTRATION label; call verify_fingerprint and confirm returned value is the matched file's hash; inspect HTTP headers for nosniff and referrer-policy values | T4: Load '/core-again' page in a real browser under V5.9.1 and confirm script executes; verify UPL-TECH-26-667079-EN now carries a published Core dated 16 October 2026","boundaries":"Operator token scope is limited to UplitAU's own records (expansion out of scope) | Index storage in a database is not yet implemented | Deployment on a dedicated domain is not yet done | Owner-key verification for the Vault is not yet built | Certificate wording corrections beyond display-layer changes are not described | OPEN: when operator token scope will be extended; database index migration path; domain acquisition timeline; design of owner-key check for the Vault"},"core_withheld":false,"core_publication_basis":"Self-registration: UplitAU registering its own work from its own wallet. The author is known to the Registry operator because they are the same party; the Ethereum payment itself identifies no one.","costs":{"claude_aud":null,"openai_aud":null,"service_aud":null,"total_aud":null},"landing_page":"https://demi-proxy.flat-bonus-ffc5.workers.dev/registry/UPL-TECH-26-243670-EN/index.html","visibility":"listed","product":"capsule","core_requested":true,"provenance_manifest":{"scheme":"DEMI-Provenance-Manifest/1","algorithm":"SHA-256","computed":"in the author's browser","files_listed":1,"files":[{"name":"Worker_demi_proxy_V5_9_0(1).js","size_bytes":268314,"sha256":"3f69270fc340ffe89afb8139dda2efece756601a7d83c55dfa0fed0426f19368"}],"note":"These files were fingerprinted by the registrant and were never uploaded. The registration time applies to each fingerprint: a fingerprint cannot be produced without the file it describes. This record does not establish authorship or ownership of the files named."},"activation_reference":"DEMI:1042:UPL-TECH-26-243670-EN:4","ai_fetchable":true,"amount_eth":0.002445,"payment_value_aud":9,"payment_rate_aud_per_eth":3683,"payment_rate_source":"etherscan ethprice","core_sha256":"4bd2dc2969eb6f7426336f55a4399746b65e07d023c54e0ef7e236121900f693","core_status":"formed","anchor_tx":"0xc1db5a0b68c7648342fcbb262c5b513c97bb66cafa6bcd3269571da73e30bb51","anchor_submitted_at":"2026-10-16T23:08:24.918Z","anchor":{"status":"confirmed","tx_hash":"0xc1db5a0b68c7648342fcbb262c5b513c97bb66cafa6bcd3269571da73e30bb51","etherscan_url":"https://etherscan.io/tx/0xc1db5a0b68c7648342fcbb262c5b513c97bb66cafa6bcd3269571da73e30bb51","block_number":26208290,"block_time_utc":"2026-10-16T23:08:35.000Z","submitted_at":"2026-10-16T23:08:24.918Z","digest":"29626005d93a60e25b1f2a77f026e1ca5714b618c488ea4ec4c2840db5a03654","snapshot_url":"https://demi-proxy.flat-bonus-ffc5.workers.dev/registry/anchor/29626005d93a60e25b1f2a77f026e1ca5714b618c488ea4ec4c2840db5a03654.json"}}