Hour audit: 2026-10-29T18
back to the files for this hour · how the archive is audited
Every number on this page is a stored measurement read from this hour's own records: its
2026-10-29T18.manifest.json, its witness
statistics sidecar, and the corpus attestation. Nothing here is computed from the served
bytes at the time you load the page, so no line below claims the bytes are correct. The
digest and the one command that checks them are printed instead.
No findings
Every check that could be evaluated for this hour passed. That is not the same as the hour being perfect: it means the records this archive keeps about it agree with each other and with the corpus ledger.
4 checks could not be evaluated for this hour, listed with the reason in the block below. A check we could not run is recorded as exactly that, and never counted as a pass.
The report
POLYMARKET ORDERBOOK ARCHIVE — HOUR AUDIT
hour 2026-10-29T18 · corpus v3.1 · verdict AUDIT PENDING
COVERAGE not measured (this hour is not in the corpus attestation, so we have not looked at it)
VOLUME 1,254,247 rows · 7 products, 1 holding no rows
WITNESSES iop — 3 machines contributed rows
captured o: 2,247,684 · p: 2,244,384 · i: 2,235,219 (each machine's own feed; these overlap and do not sum to the file)
supplied o: 136,163 (5.44%) · p: 2,244,286 (89.69%) · i: 121,780 (4.87%) (rows of the merged file that came from it; these partition it)
3 product-machine pairs publish no supplied count, and the figures above do not reconcile to the file's row count, so the split is incomplete by an unrecorded amount
INTEGRITY not measured (the manifest publishes no digest for this file)
checksum ledger not read
joined 2,502,441 to merged 2,502,229, minus 212 (minus 0.0085%)
boundary drops 212 · guard cache
SIDECARS none: this hour's manifest has no v31 key. The v3.1 sidecars are optional, and hours before them have none
MARKETS not measured (the per-hour market census runs on the capture host and its output is not published per hour)
HISTORY layout union-event-sorted-v1
re-merges not measured (the merge ledger records the merge that produced this file, not the history of attempts)
supersessions not measured (supersession is recorded per corpus in the storage registry, not in the hour manifest)
CHECKS 4/8 pass, 4 not evaluated
PASS all products present
PASS row counts reconcile
SKIPPED the byte ranges could not be checked
PASS the merge delta is explained
SKIPPED which machines were expected is not published beside this hour
SKIPPED the checksum ledger could not be read
SKIPPED the hour's minutes have not been measured
PASS a boundary guard ran
UPSTREAM an incident recorded by the venue intersects this hour: Exchange in cancel-only mode for an hour after a third-party provider was compromised, 2026-10-29T18:05Z to 2026-10-29T19:05ZThe words in this report
Each line in the CHECKS block states what was found, not what was
hoped for: a check that passes is named for the thing that is true, and a check that does
not is renamed to the thing that is wrong. So FINDING never sits beside a
sentence asserting the opposite of the one below it.
The report above is fixed-width text, so nothing in it can be clicked. The same terms are linked here instead. Its verdict is a statement about minutes and nothing else. The row it reports comes from this hour's own manifest and its witness-statistics sidecar, and the completeness line comes from the corpus attestation. The gap between the joined and merged counts is deduplication, not loss, and the boundary drops are the duplicates discarded at the seam with the hour before. Where the history line names a supersession, this hour was rebuilt to a better state after it was first published. The precision is the timestamp resolution these files carry.
Detail
The same records, per product. A product holding no rows renders its zero rather than
being dropped: dropped and empty are indistinguishable to a reader, and only one of them is
a defect. A cell reading not meas. is one nothing published, which is a third
thing again and never a zero.
The class column is the merger's own verdict for that product, and it is
keyed to CONTRIBUTION rather than presence. FULL means every machine expected to
be capturing this hour delivered rows for that product; PARTIAL means some did
and some did not; SINGLE-BY-DESIGN means only one machine was ever expected, and
SINGLE-BY-DEFECT means several were and one delivered. So PARTIAL
here is a statement about the fleet, not about the product being damaged or truncated: the
rows that are present are whole.
PRODUCT rows bytes row groups sha256 best_bid_ask 129,274 not meas. not meas. not published book 220,648 not meas. not meas. not published last_trade_price 0 not meas. not meas. not published market_resolved 1,213 not meas. not meas. not published new_market 2,345 not meas. not meas. not published price_change 899,951 not meas. not meas. not published tick_size_change 816 not meas. not meas. not published EVENT MIX count share price_change 899,951 71.75% book 220,648 17.59% best_bid_ask 129,274 10.31% new_market 2,345 0.19% market_resolved 1,213 0.10% tick_size_change 816 0.07% last_trade_price 0 0.00% PER PRODUCT joined merged boundary exception mkts class best_bid_ask 256,538 256,538 0 19 FULL book 441,721 441,509 212 164,321 FULL last_trade_price 0 0 0 0 NO-SOURCE market_resolved 1,213 1,213 0 11 FULL new_market 2,345 2,345 0 0 FULL price_change 1,799,808 1,799,808 0 28 FULL tick_size_change 816 816 0 0 FULL ARRIVAL SKEW m rows won p50 p90 p99 max unmeasurable interpretation best_bid_ask i 256,476 not meas. 21ms 29ms 245ms 59.5s 0 not stated best_bid_ask o 256,524 4 11ms 32ms 196ms 3.2s 0 not stated best_bid_ask p 256,534 256,534 18ms 25ms 140ms 2.7s 0 not stated book i 175,970 121,398 37.1min 2.1d 68.2d 152.9d 0 not stated book o 188,060 135,442 35.5min 2.1d 68.2d 152.8d 0 not stated book p 184,767 184,669 37.2min 2.1d 68.2d 152.9d 0 not stated market_resolved i 971 47 20ms 12.6s 43.8s 45.6s 0 not stated market_resolved o 980 195 11ms 38.9s 1.0min 1.3min 0 not stated market_resolved p 971 971 17ms 28ms 49.0s 49.3s 0 not stated new_market i 1,644 331 207ms 50.9s 2.1min 2.6min 0 not stated new_market o 1,644 370 131ms 43.8s 2.0min 2.6min 0 not stated new_market p 1,644 1,644 34ms 44.7s 2.0min 2.6min 0 not stated price_change i 1,799,342 4 20ms 43ms 258ms 59.5s 0 not stated price_change o 1,799,660 152 11ms 33ms 167ms 3.3s 0 not stated price_change p 1,799,652 1,799,652 18ms 29ms 122ms 2.9s 0 not stated tick_size_change i 816 not meas. 20ms 21ms 23ms 492ms 0 not stated tick_size_change o 816 not meas. 10ms 13ms 33ms 72ms 0 not stated tick_size_change p 816 816 15ms 20ms 24ms 34ms 0 not stated
Captured and supplied are different numbers
Captured is how many rows each machine's own feed carried. Redundant capture means these OVERLAP, heavily and on purpose, so they do not partition the file and their sum is larger than it. Two machines each capturing nearly every event is the archive working, not double counting.
Supplied is how many rows of the merged file actually came from that machine. This one does partition: it sums to the file's row count exactly. But it is decided by the merge's tie-break, so a machine can capture almost everything and supply almost nothing. Read alone, either number tells a false story about the fleet, which is why both are printed and neither is called "the witness share".
What the skew columns mean
Arrival skew is the receipt timestamp minus the venue timestamp, in milliseconds. For six of the seven products the sidecar interprets it as transport latency, and marks that interpretation assumed: it rests on the venue timestamp being emit time, which we cannot verify from outside.
book is not latency and must not be read as latency. Its
venue timestamp is the last time the book changed, so the sidecar interprets it as book
staleness and warns in its own note that large values mean a quiet book rather than slow
transport. Its maximum runs to weeks for that reason. This is why the table above gives a
row per product per machine and never one figure for the hour: percentiles do not average,
and these seven do not measure the same quantity.
Check it yourself
The digest above is a claim. This is how you refuse to take our word for it:
curl -O https://archive.pendulumflow.com/v3.1/2026-10-29/18/ sha256sum # compare with the sha256 line in the report above
A range digest certifies bytes. That those bytes are the product the manifest names comes from the manifest, which is why both are published and both are checkable.