Buyer golden path (procurement evidence packet)

CI-gated in-silico path for technical buyers: evaluator → outcome → spectrum → audit → procurement handoff, packaged as a deterministic evidence zip competitors cannot match with ELN exports alone.

Default competitor frame: Benchling (platform-of-record incumbent) plus a duct-tape stack (ELN + spreadsheets + notebooks + scripts + slide decks).

One-command export

make buyer-export-evidence

Equivalent CLI:

helix buyer export-evidence

Writes export_receipt.v1.json with explicit nested digests (cutPackSha256, primePackSha256, batchBundleSha256, packetSha256, goldenProfile).

Studio menu: File → Export buyer evidence packet… (options dialog: prime off-target profile, optional batch pair leg)

Optional batch pair leg:

helix buyer export-evidence --include-batch-pair

Suite legs (default)

Run the suite only:

make buyer-golden-path-all
# omit batch leg:
PYTHONPATH=src python3 tools/buyer_golden_path_suite.py --skip-batch

Golden profiles (catalog)

Four supported export profiles are locked in the golden profile catalog. Discover them from a source checkout:

helix buyer list-golden-profiles
# or JSON:
helix buyer list-golden-profiles --json-out golden_profile_catalog.json
make buyer-export-golden-profile-catalog
# writes artifacts/demos/golden_profile_catalog.v1.json
PYTHONPATH=src python3 tools/buyer_golden_profile_catalog.py

Catalog sync verifies live packet and export receipt digests against these locked values.

Catalog artifact sync verifies the exported golden_profile_catalog.v1.json on disk matches the locked in-code catalog payload byte-for-byte (canonical JSON + sha256).

Procurement verify artifact sync round-trips the written procurement_verify.v1.json against the live unified verify payload (canonical JSON + sha256).

Procurement replay verify artifact sync round-trips the written procurement_replay_verify.v1.json against the live replay verify payload (canonical JSON + sha256).

Procurement replay manifest sync verifies the exported procurement_replay_manifest.v1.json lists sha256 digests for every receipt JSON and profile artifact file on disk.

Procurement replay manifest contents verify checks each manifest-listed file path on disk matches its claimed sha256 — the offline bundle gate for downloaded CI artifacts. The contents verify receipt digest itself is listed in the manifest and checked via manifest sync rather than self-referential contents verify.

procurement_replay_manifest_contents_verify.v1.json is the machine-readable receipt (helix.buyer.procurement_replay_manifest_contents_verify.v1) for manifest-listed file sha256 verification, with round-trip artifact sync after write.

Procurement replay (export + unified verify)

Replay every profile export and run the unified offline procurement gate:

make buyer-procurement-replay

For local replay plus procurement CI summary markdown in one command:

make buyer-procurement-replay-ci

This chains:

buyer-procurement-replay

1. make buyer-golden-path-all-profiles — export default + all variant profiles
2. make buyer-export-golden-profile-catalog — write artifacts/demos/golden_profile_catalog.v1.json
3. make buyer-verify-procurement — unified verify-all-profiles + catalog sync + catalog artifact sync, then round-trip the procurement verify artifact
4. make buyer-verify-procurement-replay — verify-only gate for the full replay tree (no re-export), then round-trip the replay verify artifact
5. make buyer-export-procurement-replay-manifest — write artifacts/demos/procurement_replay_manifest.v1.json, round-trip manifest digests, verify manifest-listed file contents, and persist the contents verify and unified manifest verify receipts
6. make buyer-verify-procurement-replay-manifest — unified offline manifest verify gate (digest sync, manifest-listed file contents, contents verify artifact round-trip, unified manifest verify artifact round-trip) without re-export; finalizes manifest digest listings, then persists post-finalize procurement_replay_manifest_verify.v1.json and artifact sync receipt
7. make buyer-finalize-procurement-replay-manifest — idempotent digest chain: finalize manifest, refresh post-finalize unified verify inner gates, persist artifact sync receipt, and finalize again (also invoked at the end of step 6)

buyer-procurement-replay-ci

Runs buyer-procurement-replay then buyer-write-procurement-ci-summary to emit procurement-summary.md locally. GitHub Actions runs contract tests between these steps, so CI uses the targets separately.

Equivalent CLI or standalone tools:

helix buyer verify-procurement
helix buyer verify-procurement --json-out artifacts/demos/procurement_verify.v1.json
helix buyer verify-procurement-replay
PYTHONPATH=src python3 tools/buyer_procurement_verify.py
PYTHONPATH=src python3 tools/buyer_procurement_replay_verify.py
PYTHONPATH=src python3 tools/buyer_procurement_replay_manifest.py
PYTHONPATH=src python3 tools/buyer_procurement_replay_manifest_verify.py
PYTHONPATH=src python3 tools/buyer_procurement_replay_manifest_finalize.py
helix buyer verify-procurement-replay-manifest
helix buyer finalize-procurement-replay-manifest

Standalone verify targets:

make buyer-verify-all-profiles
make buyer-verify-catalog
make buyer-verify-procurement
make buyer-verify-procurement-replay
make buyer-export-procurement-replay-manifest
make buyer-verify-procurement-replay-manifest

procurement_replay_manifest.v1.json is the digest manifest (helix.buyer.procurement_replay_manifest.v1) listing receipt JSON paths (including procurement_replay_manifest_contents_verify.v1.json, procurement_replay_manifest_verify.v1.json, and procurement_replay_manifest_verify_artifact_sync.v1.json), and per-profile packet, receipt, and verdict sha256 values for offline verification of downloaded CI artifacts.

procurement_verify.v1.json is the machine-readable receipt (helix.buyer.procurement_verify.v1) nested with verify-all-profiles, catalog-sync, and catalog-artifact-sync payloads.

procurement_replay_verify.v1.json is the verify-only replay receipt (helix.buyer.procurement_replay_verify.v1) nested with procurement-verify and procurement-artifact-sync payloads for offline verification of downloaded CI artifacts.

procurement_replay_manifest_verify.v1.json is the unified manifest verify receipt (helix.buyer.procurement_replay_manifest_verify.v1) nesting manifest sync, manifest contents verify, contents verify artifact sync, and manifest verify artifact sync for offline verification of downloaded CI artifacts.

procurement_replay_manifest_verify_artifact_sync.v1.json is the machine-readable receipt (helix.buyer.procurement_replay_manifest_verify_artifact_sync.v1) for unified manifest verify artifact round-trip sync.

Evidence packet layout

Default output path:

artifacts/demos/buyer_golden_path_suite/helix_buyer_evidence_packet_v1.zip

Each profile artifact dir also contains:

• verdict.json — suite verdict JSON
• summary.md — procurement-readable markdown summary
• export_receipt.v1.json — nested digest receipt with goldenProfile
• helix_buyer_evidence_packet_v1.zip — deterministic evidence packet

Packet contents:

• suite_verdict.v1.json — canonical cut + prime + batch verdict (packet-relative paths)
• export_receipt.v1.json — embedded export receipt (cross-checked against standalone receipt)
• summary.md — procurement-readable markdown summary
• cut_outcome_audit_pack.zip — nested cut outcome audit pack
• prime_outcome_audit_pack.zip — nested prime outcome audit pack
• batch_helix_batch_report.zip — nested batch sweep bundle (when batch leg included)
• manifest.json — sha256 per file + receipts (cutPackSha256, primePackSha256, batchBundleSha256, goldenProfile)
• README.txt — scope + verify instructions

Verify offline

helix verify buyer-evidence artifacts/demos/buyer_golden_path_suite
helix verify buyer-evidence-packet artifacts/demos/buyer_golden_path_suite/helix_buyer_evidence_packet_v1.zip
helix verify buyer-evidence-packet artifacts/demos/buyer_golden_path_suite/helix_buyer_evidence_packet_v1.zip --golden-profile default
helix buyer verify-procurement

helix verify buyer-evidence and helix verify buyer-evidence-packet compare packet and receipt digests against the profile golden fixtures unless --skip-golden is passed.

Makefile shortcut (suite + summary + packet + pack verification):

make demo-buyer-verdict

Locked nested digest examples (default profile)

Re-run stability: execute make buyer-export-evidence twice on a clean tree and confirm the packet and receipt sha256 values match the golden catalog exactly.

CI gate

GitHub Actions workflow: .github/workflows/buyer-golden-path.yml

• Runs make buyer-procurement-replay
• Runs gated make buyer-write-procurement-ci-summary (manifest verify chain, idempotent digest chain finalize, post-finalize summary markdown; workflow fails on non-zero exit)
• Uploads all four profile artifact dirs plus procurement replay JSON receipts (procurement_verify.v1.json through procurement_replay_manifest_verify_artifact_sync.v1.json), golden_profile_catalog.v1.json, and CI summary markdown (procurement-summary.md, summary.md)
• Contract tests lock packet, receipt, and nested bundle digests

Scope boundary

In-silico only: simulated edits, scoring functions, deterministic pipelines, verification, and artifact generation. Receipts prove computational provenance and integrity — not biological truth.

Related docs

• AUROC delta demo
• Enterprise evaluation guide
• Government-ready product surface