Hour audit: 2026-11-01T09
back to the files for this hour · how the archive is audited
Every number on this page is a stored measurement read from this hour's own records: its
2026-11-01T09.manifest.json, its witness
statistics sidecar, and the corpus attestation. Nothing here is computed from the served
bytes at the time you load the page, so no line below claims the bytes are correct. The
digest and the one command that checks them are printed instead.
No findings
Every check that could be evaluated for this hour passed. That is not the same as the hour being perfect: it means the records this archive keeps about it agree with each other and with the corpus ledger.
4 checks could not be evaluated for this hour, listed with the reason in the block below. A check we could not run is recorded as exactly that, and never counted as a pass.
The report
POLYMARKET ORDERBOOK ARCHIVE — HOUR AUDIT
hour 2026-11-01T09 · corpus v3.1 · verdict AUDIT PENDING
COVERAGE not measured (this hour is not in the corpus attestation, so we have not looked at it)
VOLUME 81,495,052 rows · 7 products, all holding rows
WITNESSES iop — 3 machines contributed rows
captured p: 125,458,763 · o: 125,452,239 · i: 125,433,490 (each machine's own feed; these overlap and do not sum to the file)
supplied p: 125,458,763 (99.86%) · o: 22,718 (0.02%) · i: 157,237 (0.13%) (rows of the merged file that came from it; these partition it)
2 product-machine pairs publish no supplied count, and the figures above do not reconcile to the file's row count, so the split is incomplete by an unrecorded amount
INTEGRITY not measured (the manifest publishes no digest for this file)
checksum ledger not read
joined 125,639,517 to merged 125,638,718, minus 799 (minus 0.0006%)
boundary drops 799 · guard cache
SIDECARS none: this hour's manifest has no v31 key. The v3.1 sidecars are optional, and hours before them have none
MARKETS not measured (the per-hour market census runs on the capture host and its output is not published per hour)
HISTORY layout union-event-sorted-v1
re-merges not measured (the merge ledger records the merge that produced this file, not the history of attempts)
supersessions not measured (supersession is recorded per corpus in the storage registry, not in the hour manifest)
CHECKS 4/8 pass, 4 not evaluated
PASS all products present
PASS row counts reconcile
SKIPPED the byte ranges could not be checked
PASS the merge delta is explained
SKIPPED which machines were expected is not published beside this hour
SKIPPED the checksum ledger could not be read
SKIPPED the hour's minutes have not been measured
PASS a boundary guard ran
UPSTREAM status feed unobserved for this hour. Our incident register was last checked against the venue's feed at 2026-09-23T20:35Z, before this hour ended, so nothing has looked yet. This is a could-not-look and never an all-clear.The words in this report
Each line in the CHECKS block states what was found, not what was
hoped for: a check that passes is named for the thing that is true, and a check that does
not is renamed to the thing that is wrong. So FINDING never sits beside a
sentence asserting the opposite of the one below it.
The report above is fixed-width text, so nothing in it can be clicked. The same terms are linked here instead. Its verdict is a statement about minutes and nothing else. The row it reports comes from this hour's own manifest and its witness-statistics sidecar, and the completeness line comes from the corpus attestation. The gap between the joined and merged counts is deduplication, not loss, and the boundary drops are the duplicates discarded at the seam with the hour before. Where the history line names a supersession, this hour was rebuilt to a better state after it was first published. The precision is the timestamp resolution these files carry.
Detail
The same records, per product. A product holding no rows renders its zero rather than
being dropped: dropped and empty are indistinguishable to a reader, and only one of them is
a defect. A cell reading not meas. is one nothing published, which is a third
thing again and never a zero.
The class column is the merger's own verdict for that product, and it is
keyed to CONTRIBUTION rather than presence. FULL means every machine expected to
be capturing this hour delivered rows for that product; PARTIAL means some did
and some did not; SINGLE-BY-DESIGN means only one machine was ever expected, and
SINGLE-BY-DEFECT means several were and one delivered. So PARTIAL
here is a statement about the fleet, not about the product being damaged or truncated: the
rows that are present are whole.
PRODUCT rows bytes row groups sha256 best_bid_ask 9,736,089 not meas. not meas. not published book 170,749 not meas. not meas. not published last_trade_price 41,913 not meas. not meas. not published market_resolved 1,128 not meas. not meas. not published new_market 2,657 not meas. not meas. not published price_change 71,539,456 not meas. not meas. not published tick_size_change 3,060 not meas. not meas. not published EVENT MIX count share price_change 71,539,456 87.78% best_bid_ask 9,736,089 11.95% book 170,749 0.21% last_trade_price 41,913 0.05% tick_size_change 3,060 <0.01% new_market 2,657 <0.01% market_resolved 1,128 <0.01% PER PRODUCT joined merged boundary exception mkts class best_bid_ask 16,086,605 16,086,526 79 51 FULL book 252,088 252,088 0 77,199 FULL last_trade_price 41,915 41,913 2 3 FULL market_resolved 1,128 1,128 0 0 FULL new_market 2,657 2,657 0 0 FULL price_change 109,252,064 109,251,346 718 25 FULL tick_size_change 3,060 3,060 0 1 FULL ARRIVAL SKEW m rows won p50 p90 p99 max unmeasurable interpretation best_bid_ask i 16,066,939 108 19ms 23ms 683ms 2.1min 0 not stated best_bid_ask o 16,085,762 723 12ms 16ms 150ms 6.8s 0 not stated best_bid_ask p 16,085,695 16,085,695 4ms 5ms 110ms 6.8s 0 not stated book i 242,916 153,798 1.0min 3.2d 70.8d 155.5d 0 not stated book o 92,807 5,153 13ms 306ms 3.2d 136.9d 0 not stated book p 93,137 93,137 5ms 356ms 2.3d 137.0d 0 not stated last_trade_price i 41,836 12 20ms 30ms 1.2s 17.8s 0 not stated last_trade_price o 41,839 73 13ms 19ms 252ms 3.3s 0 not stated last_trade_price p 41,828 41,828 4ms 7ms 242ms 3.0s 0 not stated market_resolved i 872 184 19ms 18.0s 54.3s 55.3s 0 not stated market_resolved o 872 72 13ms 22.3s 54.0s 54.4s 0 not stated market_resolved p 872 872 3ms 825ms 38.9s 48.1s 0 not stated new_market i 1,753 517 379ms 47.3s 1.5min 1.9min 0 not stated new_market o 1,753 387 89ms 46.8s 1.6min 2.1min 0 not stated new_market p 1,753 1,753 39ms 46.1s 1.7min 2.2min 0 not stated price_change i 109,076,118 2,618 19ms 24ms 818ms 2.1min 0 not stated price_change o 109,226,146 16,310 12ms 16ms 176ms 7.1s 0 not stated price_change p 109,232,418 109,232,418 4ms 6ms 141ms 6.8s 0 not stated tick_size_change i 3,056 not meas. 19ms 22ms 406ms 690ms 0 not stated tick_size_change o 3,060 not meas. 12ms 15ms 110ms 607ms 0 not stated tick_size_change p 3,060 3,060 4ms 5ms 114ms 253ms 0 not stated
Captured and supplied are different numbers
Captured is how many rows each machine's own feed carried. Redundant capture means these OVERLAP, heavily and on purpose, so they do not partition the file and their sum is larger than it. Two machines each capturing nearly every event is the archive working, not double counting.
Supplied is how many rows of the merged file actually came from that machine. This one does partition: it sums to the file's row count exactly. But it is decided by the merge's tie-break, so a machine can capture almost everything and supply almost nothing. Read alone, either number tells a false story about the fleet, which is why both are printed and neither is called "the witness share".
What the skew columns mean
Arrival skew is the receipt timestamp minus the venue timestamp, in milliseconds. For six of the seven products the sidecar interprets it as transport latency, and marks that interpretation assumed: it rests on the venue timestamp being emit time, which we cannot verify from outside.
book is not latency and must not be read as latency. Its
venue timestamp is the last time the book changed, so the sidecar interprets it as book
staleness and warns in its own note that large values mean a quiet book rather than slow
transport. Its maximum runs to weeks for that reason. This is why the table above gives a
row per product per machine and never one figure for the hour: percentiles do not average,
and these seven do not measure the same quantity.
Check it yourself
The digest above is a claim. This is how you refuse to take our word for it:
curl -O https://archive.pendulumflow.com/v3.1/2026-11-01/09/ sha256sum # compare with the sha256 line in the report above
A range digest certifies bytes. That those bytes are the product the manifest names comes from the manifest, which is why both are published and both are checkable.