short-drama-delivery-audit

Run the audit script against the run directory containing script.txt, receipt JSON sidecars, and MP4 files. It parses active shots, validates provider receipts, probes videos with ffprobe, and returns a JSON verdict of verified, degraded, or blocked.

The audit invokes ffprobe with -show_entries format=duration:stream=codec_type,duration and JSON output. It confirms a video stream exists, extracts the maximum finite duration, and compares it against expected shot and final durations within a 0.75-second tolerance.

It means provider acceptance and billing cannot be proven for that asset because the receipt is missing, malformed, or not bound to the current run by a SHA-256 proof. The verdict advises checking provider history before starting a replacement generation.

No. The audit is fully deterministic: it never contacts a media provider and never invokes a model. It only reads local script, receipt, and video files, plus bounded scheduler-supplied disposition data passed on stdin.

This occurs when a conclusive receipt sidecar exists but its SHA-256 digest was not carried by the exact bundled paid subprocess in the current run. Stale or forged workspace sidecars can never upgrade an asset disposition to confirmed.

It supports at most 10 contiguous shots, requires ffprobe and Python on the host, and only accepts the fixed disposition vocabulary safe_no_submit, maybe_accepted, and receipt. It is an internal machine-owned gate, not user-invocable, and cannot prove billing without current-run receipt proofs.