Hour audit: 2026-10-28T05
back to the files for this hour · how the archive is audited
Every number on this page is a stored measurement read from this hour's own records: its
2026-10-28T05.manifest.json, its witness
statistics sidecar, and the corpus attestation. Nothing here is computed from the served
bytes at the time you load the page, so no line below claims the bytes are correct. The
digest and the one command that checks them are printed instead.
No findings
Every check that could be evaluated for this hour passed. That is not the same as the hour being perfect: it means the records this archive keeps about it agree with each other and with the corpus ledger.
4 checks could not be evaluated for this hour, listed with the reason in the block below. A check we could not run is recorded as exactly that, and never counted as a pass.
The report
POLYMARKET ORDERBOOK ARCHIVE — HOUR AUDIT
hour 2026-10-28T05 · corpus v3.1 · verdict AUDIT PENDING
COVERAGE not measured (this hour is not in the corpus attestation, so we have not looked at it)
VOLUME 62,903,431 rows · 7 products, all holding rows
WITNESSES iop — 3 machines contributed rows
captured p: 124,924,925 · i: 124,889,924 · o: 124,734,145 (each machine's own feed; these overlap and do not sum to the file)
supplied p: 124,924,763 (99.55%) · i: 284,857 (0.23%) · o: 275,036 (0.22%) (rows of the merged file that came from it; these partition it)
3 product-machine pairs publish no supplied count, and the figures above do not reconcile to the file's row count, so the split is incomplete by an unrecorded amount
INTEGRITY not measured (the manifest publishes no digest for this file)
checksum ledger not read
joined 125,485,652 to merged 125,484,656, minus 996 (minus 0.0008%)
boundary drops 996 · guard cache
SIDECARS none: this hour's manifest has no v31 key. The v3.1 sidecars are optional, and hours before them have none
MARKETS not measured (the per-hour market census runs on the capture host and its output is not published per hour)
HISTORY layout union-event-sorted-v1
re-merges not measured (the merge ledger records the merge that produced this file, not the history of attempts)
supersessions not measured (supersession is recorded per corpus in the storage registry, not in the hour manifest)
CHECKS 4/8 pass, 4 not evaluated
PASS all products present
PASS row counts reconcile
SKIPPED the byte ranges could not be checked
PASS the merge delta is explained
SKIPPED which machines were expected is not published beside this hour
SKIPPED the checksum ledger could not be read
SKIPPED the hour's minutes have not been measured
PASS a boundary guard ran
UPSTREAM status feed unobserved for this hour. Our incident register was last checked against the venue's feed at 2026-09-23T20:35Z, before this hour ended, so nothing has looked yet. This is a could-not-look and never an all-clear.The words in this report
Each line in the CHECKS block states what was found, not what was
hoped for: a check that passes is named for the thing that is true, and a check that does
not is renamed to the thing that is wrong. So FINDING never sits beside a
sentence asserting the opposite of the one below it.
The report above is fixed-width text, so nothing in it can be clicked. The same terms are linked here instead. Its verdict is a statement about minutes and nothing else. The row it reports comes from this hour's own manifest and its witness-statistics sidecar, and the completeness line comes from the corpus attestation. The gap between the joined and merged counts is deduplication, not loss, and the boundary drops are the duplicates discarded at the seam with the hour before. Where the history line names a supersession, this hour was rebuilt to a better state after it was first published. The precision is the timestamp resolution these files carry.
Detail
The same records, per product. A product holding no rows renders its zero rather than
being dropped: dropped and empty are indistinguishable to a reader, and only one of them is
a defect. A cell reading not meas. is one nothing published, which is a third
thing again and never a zero.
The class column is the merger's own verdict for that product, and it is
keyed to CONTRIBUTION rather than presence. FULL means every machine expected to
be capturing this hour delivered rows for that product; PARTIAL means some did
and some did not; SINGLE-BY-DESIGN means only one machine was ever expected, and
SINGLE-BY-DEFECT means several were and one delivered. So PARTIAL
here is a statement about the fleet, not about the product being damaged or truncated: the
rows that are present are whole.
PRODUCT rows bytes row groups sha256 best_bid_ask 8,075,742 not meas. not meas. not published book 484,962 not meas. not meas. not published last_trade_price 50,532 not meas. not meas. not published market_resolved 662 not meas. not meas. not published new_market 1,146 not meas. not meas. not published price_change 54,288,195 not meas. not meas. not published tick_size_change 2,192 not meas. not meas. not published EVENT MIX count share price_change 54,288,195 86.30% best_bid_ask 8,075,742 12.84% book 484,962 0.77% last_trade_price 50,532 0.08% tick_size_change 2,192 <0.01% new_market 1,146 <0.01% market_resolved 662 <0.01% PER PRODUCT joined merged boundary exception mkts class best_bid_ask 15,874,278 15,874,160 118 104 FULL book 979,940 979,676 264 198,326 FULL last_trade_price 50,532 50,532 0 4 FULL market_resolved 662 662 0 11 FULL new_market 1,146 1,146 0 0 FULL price_change 108,576,902 108,576,288 614 51 FULL tick_size_change 2,192 2,192 0 2 FULL ARRIVAL SKEW m rows won p50 p90 p99 max unmeasurable interpretation best_bid_ask i 15,858,516 659 22ms 25ms 68ms 3.2s 0 not stated best_bid_ask o 15,861,946 11,493 5ms 12ms 53ms 5.0s 0 not stated best_bid_ask p 15,862,010 15,862,008 5ms 10ms 41ms 3.6s 0 not stated book i 544,137 276,162 8.0min 3.3d 66.6d 151.3d 0 not stated book o 331,236 168,487 34.8s 19.6min 2.0h 9.0h 0 not stated book p 535,177 535,027 8.2min 3.2d 66.6d 151.3d 0 not stated last_trade_price i 50,336 51 23ms 30ms 195ms 1.7s 0 not stated last_trade_price o 50,423 102 7ms 14ms 151ms 2.6s 0 not stated last_trade_price p 50,379 50,379 6ms 13ms 148ms 1.6s 0 not stated market_resolved i 539 not meas. 22ms 55ms 27.8s 31.1s 0 not stated market_resolved o 546 123 6ms 17.7s 2.1min 2.4min 0 not stated market_resolved p 539 539 5ms 17ms 43.1s 46.2s 0 not stated new_market i 784 219 85ms 17.0s 29.4s 1.3min 0 not stated new_market o 784 143 53ms 14.6s 50.5s 1.7min 0 not stated new_market p 784 784 22ms 19.3s 58.0s 1.6min 0 not stated price_change i 108,433,420 7,766 22ms 26ms 125ms 3.5s 0 not stated price_change o 108,487,026 94,688 6ms 12ms 101ms 5.5s 0 not stated price_change p 108,473,844 108,473,834 5ms 10ms 86ms 4.4s 0 not stated tick_size_change i 2,192 not meas. 22ms 25ms 30ms 56ms 0 not stated tick_size_change o 2,184 not meas. 6ms 12ms 19ms 227ms 0 not stated tick_size_change p 2,192 2,192 5ms 8ms 12ms 14ms 0 not stated
Captured and supplied are different numbers
Captured is how many rows each machine's own feed carried. Redundant capture means these OVERLAP, heavily and on purpose, so they do not partition the file and their sum is larger than it. Two machines each capturing nearly every event is the archive working, not double counting.
Supplied is how many rows of the merged file actually came from that machine. This one does partition: it sums to the file's row count exactly. But it is decided by the merge's tie-break, so a machine can capture almost everything and supply almost nothing. Read alone, either number tells a false story about the fleet, which is why both are printed and neither is called "the witness share".
What the skew columns mean
Arrival skew is the receipt timestamp minus the venue timestamp, in milliseconds. For six of the seven products the sidecar interprets it as transport latency, and marks that interpretation assumed: it rests on the venue timestamp being emit time, which we cannot verify from outside.
book is not latency and must not be read as latency. Its
venue timestamp is the last time the book changed, so the sidecar interprets it as book
staleness and warns in its own note that large values mean a quiet book rather than slow
transport. Its maximum runs to weeks for that reason. This is why the table above gives a
row per product per machine and never one figure for the hour: percentiles do not average,
and these seven do not measure the same quantity.
Check it yourself
The digest above is a claim. This is how you refuse to take our word for it:
curl -O https://archive.pendulumflow.com/v3.1/2026-10-28/05/ sha256sum # compare with the sha256 line in the report above
A range digest certifies bytes. That those bytes are the product the manifest names comes from the manifest, which is why both are published and both are checkable.