Hour audit: 2026-10-28T16
back to the files for this hour · how the archive is audited
Every number on this page is a stored measurement read from this hour's own records: its
2026-10-28T16.manifest.json, its witness
statistics sidecar, and the corpus attestation. Nothing here is computed from the served
bytes at the time you load the page, so no line below claims the bytes are correct. The
digest and the one command that checks them are printed instead.
No findings
Every check that could be evaluated for this hour passed. That is not the same as the hour being perfect: it means the records this archive keeps about it agree with each other and with the corpus ledger.
4 checks could not be evaluated for this hour, listed with the reason in the block below. A check we could not run is recorded as exactly that, and never counted as a pass.
The report
POLYMARKET ORDERBOOK ARCHIVE — HOUR AUDIT
hour 2026-10-28T16 · corpus v3.1 · verdict AUDIT PENDING
COVERAGE not measured (this hour is not in the corpus attestation, so we have not looked at it)
VOLUME 69,636,577 rows · 7 products, all holding rows
WITNESSES iop — 3 machines contributed rows
captured p: 138,878,837 · i: 138,861,853 · o: 138,859,384 (each machine's own feed; these overlap and do not sum to the file)
supplied p: 138,878,777 (99.96%) · i: 24,966 (0.02%) · o: 30,316 (0.02%) (rows of the merged file that came from it; these partition it)
2 product-machine pairs publish no supplied count, and the figures above do not reconcile to the file's row count, so the split is incomplete by an unrecorded amount
INTEGRITY not measured (the manifest publishes no digest for this file)
checksum ledger not read
joined 138,934,660 to merged 138,934,059, minus 601 (minus 0.0004%)
boundary drops 601 · guard cache
SIDECARS none: this hour's manifest has no v31 key. The v3.1 sidecars are optional, and hours before them have none
MARKETS not measured (the per-hour market census runs on the capture host and its output is not published per hour)
HISTORY layout union-event-sorted-v1
re-merges not measured (the merge ledger records the merge that produced this file, not the history of attempts)
supersessions not measured (supersession is recorded per corpus in the storage registry, not in the hour manifest)
CHECKS 4/8 pass, 4 not evaluated
PASS all products present
PASS row counts reconcile
SKIPPED the byte ranges could not be checked
PASS the merge delta is explained
SKIPPED which machines were expected is not published beside this hour
SKIPPED the checksum ledger could not be read
SKIPPED the hour's minutes have not been measured
PASS a boundary guard ran
UPSTREAM status feed unobserved for this hour. Our incident register was last checked against the venue's feed at 2026-09-23T20:35Z, before this hour ended, so nothing has looked yet. This is a could-not-look and never an all-clear.The words in this report
Each line in the CHECKS block states what was found, not what was
hoped for: a check that passes is named for the thing that is true, and a check that does
not is renamed to the thing that is wrong. So FINDING never sits beside a
sentence asserting the opposite of the one below it.
The report above is fixed-width text, so nothing in it can be clicked. The same terms are linked here instead. Its verdict is a statement about minutes and nothing else. The row it reports comes from this hour's own manifest and its witness-statistics sidecar, and the completeness line comes from the corpus attestation. The gap between the joined and merged counts is deduplication, not loss, and the boundary drops are the duplicates discarded at the seam with the hour before. Where the history line names a supersession, this hour was rebuilt to a better state after it was first published. The precision is the timestamp resolution these files carry.
Detail
The same records, per product. A product holding no rows renders its zero rather than
being dropped: dropped and empty are indistinguishable to a reader, and only one of them is
a defect. A cell reading not meas. is one nothing published, which is a third
thing again and never a zero.
The class column is the merger's own verdict for that product, and it is
keyed to CONTRIBUTION rather than presence. FULL means every machine expected to
be capturing this hour delivered rows for that product; PARTIAL means some did
and some did not; SINGLE-BY-DESIGN means only one machine was ever expected, and
SINGLE-BY-DEFECT means several were and one delivered. So PARTIAL
here is a statement about the fleet, not about the product being damaged or truncated: the
rows that are present are whole.
PRODUCT rows bytes row groups sha256 best_bid_ask 8,191,394 not meas. not meas. not published book 97,389 not meas. not meas. not published last_trade_price 66,340 not meas. not meas. not published market_resolved 1,385 not meas. not meas. not published new_market 7,309 not meas. not meas. not published price_change 61,267,996 not meas. not meas. not published tick_size_change 4,764 not meas. not meas. not published EVENT MIX count share price_change 61,267,996 87.98% best_bid_ask 8,191,394 11.76% book 97,389 0.14% last_trade_price 66,340 0.10% new_market 7,309 0.01% tick_size_change 4,764 <0.01% market_resolved 1,385 <0.01% PER PRODUCT joined merged boundary exception mkts class best_bid_ask 16,134,460 16,134,392 68 58 FULL book 184,355 184,355 0 19,231 FULL last_trade_price 66,341 66,340 1 1 FULL market_resolved 1,385 1,385 0 2 FULL new_market 7,309 7,309 0 3 FULL price_change 122,536,046 122,535,514 532 66 FULL tick_size_change 4,764 4,764 0 0 FULL ARRIVAL SKEW m rows won p50 p90 p99 max unmeasurable interpretation best_bid_ask i 16,131,567 606 23ms 33ms 337ms 40.8s 0 not stated best_bid_ask o 16,131,926 1,045 7ms 18ms 392ms 51.3s 0 not stated best_bid_ask p 16,132,751 16,132,741 6ms 14ms 371ms 51.2s 0 not stated book i 154,687 12,032 29ms 3.0s 2.4d 133.3d 0 not stated book o 156,375 13,623 10ms 3.7s 6.2d 151.8d 0 not stated book p 158,700 158,700 10ms 5.9s 4.3d 133.3d 0 not stated last_trade_price i 66,201 20 24ms 104ms 698ms 8.4s 0 not stated last_trade_price o 66,218 26 8ms 33ms 616ms 26.1s 0 not stated last_trade_price p 66,294 66,294 8ms 30ms 548ms 29.6s 0 not stated market_resolved i 1,199 84 25ms 19.9s 51.0s 51.9s 0 not stated market_resolved o 1,197 102 8ms 90ms 53.1s 54.4s 0 not stated market_resolved p 1,199 1,199 7ms 230ms 44.9s 45.4s 0 not stated new_market i 5,171 594 173ms 1.5min 2.8min 3.3min 0 not stated new_market o 5,170 1,546 121ms 1.4min 2.8min 476.9d 0 not stated new_market p 5,169 5,169 215ms 1.5min 2.8min 3.3min 0 not stated price_change i 122,498,264 11,630 23ms 42ms 373ms 44.8s 0 not stated price_change o 122,493,734 13,974 7ms 21ms 423ms 51.3s 0 not stated price_change p 122,509,960 122,509,910 7ms 17ms 400ms 51.2s 0 not stated tick_size_change i 4,764 not meas. 22ms 27ms 278ms 644ms 0 not stated tick_size_change o 4,764 not meas. 7ms 13ms 234ms 478ms 0 not stated tick_size_change p 4,764 4,764 6ms 12ms 228ms 579ms 0 not stated
Captured and supplied are different numbers
Captured is how many rows each machine's own feed carried. Redundant capture means these OVERLAP, heavily and on purpose, so they do not partition the file and their sum is larger than it. Two machines each capturing nearly every event is the archive working, not double counting.
Supplied is how many rows of the merged file actually came from that machine. This one does partition: it sums to the file's row count exactly. But it is decided by the merge's tie-break, so a machine can capture almost everything and supply almost nothing. Read alone, either number tells a false story about the fleet, which is why both are printed and neither is called "the witness share".
What the skew columns mean
Arrival skew is the receipt timestamp minus the venue timestamp, in milliseconds. For six of the seven products the sidecar interprets it as transport latency, and marks that interpretation assumed: it rests on the venue timestamp being emit time, which we cannot verify from outside.
book is not latency and must not be read as latency. Its
venue timestamp is the last time the book changed, so the sidecar interprets it as book
staleness and warns in its own note that large values mean a quiet book rather than slow
transport. Its maximum runs to weeks for that reason. This is why the table above gives a
row per product per machine and never one figure for the hour: percentiles do not average,
and these seven do not measure the same quantity.
Check it yourself
The digest above is a claim. This is how you refuse to take our word for it:
curl -O https://archive.pendulumflow.com/v3.1/2026-10-28/16/ sha256sum # compare with the sha256 line in the report above
A range digest certifies bytes. That those bytes are the product the manifest names comes from the manifest, which is why both are published and both are checkable.