Hour audit: 2026-10-28T08
back to the files for this hour · how the archive is audited
Every number on this page is a stored measurement read from this hour's own records: its
2026-10-28T08.manifest.json, its witness
statistics sidecar, and the corpus attestation. Nothing here is computed from the served
bytes at the time you load the page, so no line below claims the bytes are correct. The
digest and the one command that checks them are printed instead.
No findings
Every check that could be evaluated for this hour passed. That is not the same as the hour being perfect: it means the records this archive keeps about it agree with each other and with the corpus ledger.
4 checks could not be evaluated for this hour, listed with the reason in the block below. A check we could not run is recorded as exactly that, and never counted as a pass.
The report
POLYMARKET ORDERBOOK ARCHIVE — HOUR AUDIT
hour 2026-10-28T08 · corpus v3.1 · verdict AUDIT PENDING
COVERAGE not measured (this hour is not in the corpus attestation, so we have not looked at it)
VOLUME 61,048,887 rows · 7 products, all holding rows
WITNESSES iop — 3 machines contributed rows
captured i: 121,439,828 · p: 121,351,511 · o: 121,268,799 (each machine's own feed; these overlap and do not sum to the file)
supplied i: 264,392 (0.22%) · p: 121,351,471 (99.63%) · o: 180,532 (0.15%) (rows of the merged file that came from it; these partition it)
2 product-machine pairs publish no supplied count, and the figures above do not reconcile to the file's row count, so the split is incomplete by an unrecorded amount
INTEGRITY not measured (the manifest publishes no digest for this file)
checksum ledger not read
joined 121,797,018 to merged 121,796,395, minus 623 (minus 0.0005%)
boundary drops 623 · guard cache
SIDECARS none: this hour's manifest has no v31 key. The v3.1 sidecars are optional, and hours before them have none
MARKETS not measured (the per-hour market census runs on the capture host and its output is not published per hour)
HISTORY layout union-event-sorted-v1
re-merges not measured (the merge ledger records the merge that produced this file, not the history of attempts)
supersessions not measured (supersession is recorded per corpus in the storage registry, not in the hour manifest)
CHECKS 4/8 pass, 4 not evaluated
PASS all products present
PASS row counts reconcile
SKIPPED the byte ranges could not be checked
PASS the merge delta is explained
SKIPPED which machines were expected is not published beside this hour
SKIPPED the checksum ledger could not be read
SKIPPED the hour's minutes have not been measured
PASS a boundary guard ran
UPSTREAM status feed unobserved for this hour. Our incident register was last checked against the venue's feed at 2026-09-23T20:35Z, before this hour ended, so nothing has looked yet. This is a could-not-look and never an all-clear.The words in this report
Each line in the CHECKS block states what was found, not what was
hoped for: a check that passes is named for the thing that is true, and a check that does
not is renamed to the thing that is wrong. So FINDING never sits beside a
sentence asserting the opposite of the one below it.
The report above is fixed-width text, so nothing in it can be clicked. The same terms are linked here instead. Its verdict is a statement about minutes and nothing else. The row it reports comes from this hour's own manifest and its witness-statistics sidecar, and the completeness line comes from the corpus attestation. The gap between the joined and merged counts is deduplication, not loss, and the boundary drops are the duplicates discarded at the seam with the hour before. Where the history line names a supersession, this hour was rebuilt to a better state after it was first published. The precision is the timestamp resolution these files carry.
Detail
The same records, per product. A product holding no rows renders its zero rather than
being dropped: dropped and empty are indistinguishable to a reader, and only one of them is
a defect. A cell reading not meas. is one nothing published, which is a third
thing again and never a zero.
The class column is the merger's own verdict for that product, and it is
keyed to CONTRIBUTION rather than presence. FULL means every machine expected to
be capturing this hour delivered rows for that product; PARTIAL means some did
and some did not; SINGLE-BY-DESIGN means only one machine was ever expected, and
SINGLE-BY-DEFECT means several were and one delivered. So PARTIAL
here is a statement about the fleet, not about the product being damaged or truncated: the
rows that are present are whole.
PRODUCT rows bytes row groups sha256 best_bid_ask 7,366,493 not meas. not meas. not published book 356,736 not meas. not meas. not published last_trade_price 57,234 not meas. not meas. not published market_resolved 591 not meas. not meas. not published new_market 723 not meas. not meas. not published price_change 53,264,510 not meas. not meas. not published tick_size_change 2,600 not meas. not meas. not published EVENT MIX count share price_change 53,264,510 87.25% best_bid_ask 7,366,493 12.07% book 356,736 0.58% last_trade_price 57,234 0.09% tick_size_change 2,600 <0.01% new_market 723 <0.01% market_resolved 591 <0.01% PER PRODUCT joined merged boundary exception mkts class best_bid_ask 14,505,366 14,505,314 52 52 FULL book 701,071 701,025 46 177,415 FULL last_trade_price 57,235 57,234 1 1 FULL market_resolved 591 591 0 3 FULL new_market 723 723 0 0 FULL price_change 106,529,432 106,528,908 524 36 FULL tick_size_change 2,600 2,600 0 0 FULL ARRIVAL SKEW m rows won p50 p90 p99 max unmeasurable interpretation best_bid_ask i 14,495,158 183 22ms 26ms 70ms 2.6s 0 not stated best_bid_ask o 14,498,800 6,013 6ms 13ms 46ms 7.3s 0 not stated best_bid_ask p 14,499,120 14,499,118 5ms 11ms 40ms 6.4s 0 not stated book i 445,097 259,523 6.9min 2.4d 66.8d 151.4d 0 not stated book o 238,935 98,285 1.4s 34.8min 2.1h 5.5h 0 not stated book p 343,241 343,217 2.9min 2.1d 64.8d 151.4d 0 not stated last_trade_price i 57,087 28 24ms 35ms 190ms 2.1s 0 not stated last_trade_price o 57,129 175 7ms 14ms 143ms 7.1s 0 not stated last_trade_price p 57,031 57,031 6ms 13ms 118ms 2.1s 0 not stated market_resolved i 481 15 22ms 197ms 45.3s 50.9s 0 not stated market_resolved o 484 94 6ms 16.1s 56.4s 2.5min 0 not stated market_resolved p 482 482 5ms 14ms 40.7s 43.5s 0 not stated new_market i 533 39 82ms 13.7s 20.0s 1.8min 0 not stated new_market o 533 151 49ms 12.2s 1.1min 1.7min 0 not stated new_market p 533 533 28ms 13.2s 53.7s 1.6min 0 not stated price_change i 106,438,872 4,604 22ms 26ms 93ms 3.1s 0 not stated price_change o 106,470,318 75,814 6ms 13ms 57ms 7.4s 0 not stated price_change p 106,448,504 106,448,490 5ms 11ms 51ms 15.7s 0 not stated tick_size_change i 2,600 not meas. 22ms 25ms 34ms 278ms 0 not stated tick_size_change o 2,600 not meas. 6ms 13ms 27ms 251ms 0 not stated tick_size_change p 2,600 2,600 5ms 11ms 23ms 253ms 0 not stated
Captured and supplied are different numbers
Captured is how many rows each machine's own feed carried. Redundant capture means these OVERLAP, heavily and on purpose, so they do not partition the file and their sum is larger than it. Two machines each capturing nearly every event is the archive working, not double counting.
Supplied is how many rows of the merged file actually came from that machine. This one does partition: it sums to the file's row count exactly. But it is decided by the merge's tie-break, so a machine can capture almost everything and supply almost nothing. Read alone, either number tells a false story about the fleet, which is why both are printed and neither is called "the witness share".
What the skew columns mean
Arrival skew is the receipt timestamp minus the venue timestamp, in milliseconds. For six of the seven products the sidecar interprets it as transport latency, and marks that interpretation assumed: it rests on the venue timestamp being emit time, which we cannot verify from outside.
book is not latency and must not be read as latency. Its
venue timestamp is the last time the book changed, so the sidecar interprets it as book
staleness and warns in its own note that large values mean a quiet book rather than slow
transport. Its maximum runs to weeks for that reason. This is why the table above gives a
row per product per machine and never one figure for the hour: percentiles do not average,
and these seven do not measure the same quantity.
Check it yourself
The digest above is a claim. This is how you refuse to take our word for it:
curl -O https://archive.pendulumflow.com/v3.1/2026-10-28/08/ sha256sum # compare with the sha256 line in the report above
A range digest certifies bytes. That those bytes are the product the manifest names comes from the manifest, which is why both are published and both are checkable.