# Phase 1 Provenance Check — Partial

**Checked**: 2026-07-12

## Source State

- Local repository HEAD before uncommitted Phase 1 work: `b3eec341586551023b05db7a82bf19446186c768`
- Accepted Phase 1 source revision: `ebaa2e721954f793dc166ccb1bafd37c6f48765d`.
- `origin/main` was verified at that exact revision after push.
- The unrelated untracked `how-it-flows.gif` was excluded from the commit.

## Local ISO Evidence

| Path | Size | SHA-256 | Result |
|---|---:|---|---|
| `cezen-ai-ubuntu2204.iso` | 0 bytes | `e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855` | Placeholder; invalid evidence |
| `autoinstall/cezen-ai-ubuntu2204.iso` | 0 bytes | `e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855` | Placeholder; invalid evidence |

No local Workstation ISO artifact exists. Build scripts remain separate for Server and Workstation.

## Build-Host Check

Authenticated read-only verification succeeded against `cezen@172.16.10.145` at
`/home/cezen/aipackage/cgit`. No remote state changed.

| Artifact | Size | Timestamp (UTC) | SHA-256 |
|---|---:|---|---|
| `autoinstall/cezen-ai-ubuntu2204.iso` | 2,136,397,824 bytes | 2026-07-09 05:52:52 | `bb2d0ab26c34f179dba9e34e8610d8a17763f8d2e38f948900509bfb8fd83b5d` |
| `cezen-ai-ubuntu2204.iso` | 2,136,397,824 bytes | 2026-07-09 05:53:40 | `bb2d0ab26c34f179dba9e34e8610d8a17763f8d2e38f948900509bfb8fd83b5d` |

No `cezen-ai-workstation-ubuntu2204.iso` artifact exists in either checked build-host location.
The host is Ubuntu with approximately 8.0 GB free on `/`; capacity must be monitored during rebuild.
The existing Server ISO predates the uncommitted Phase 1 implementation and is not valid provenance
evidence for this feature.

## Remaining Evidence

- Complete representative Workstation and Server install/recovery journeys.

T036 and T037 remain incomplete.

## Authorized Rebuild Results — 2026-07-12

The accepted source was synchronized to `/home/cezen/aipackage/cgit` with Git metadata,
credentials, caches, unrelated `how-it-flows.gif`, and existing ISO binaries excluded. Both builds
completed and their internal `md5sum.txt` manifests verified successfully.

| Artifact | Size | Timestamp (UTC) | SHA-256 |
|---|---:|---|---|
| `autoinstall/cezen-ai-ubuntu2204.iso` | 2,136,397,824 bytes | 2026-07-12 06:37:08 | `b7ba156e9eae6de5595fa85354468836d582db093d1c3cb85eceb9caaca5dfcf` |
| `autoinstall/cezen-ai-workstation-ubuntu2204.iso` | 2,136,399,872 bytes | 2026-07-12 06:39:55 | `46c0ec277a711e7075082e362bcf5f5882812e8cbf9baf6ca35c4b5afc68e171` |

The older root-level `cezen-ai-ubuntu2204.iso` remains unchanged with SHA-256
`bb2d0ab26c34f179dba9e34e8610d8a17763f8d2e38f948900509bfb8fd83b5d`; it MUST NOT be confused with
the rebuilt Server artifact.

### Online package provenance

Both online installer images clone `https://cgit.cezentech.com/jinojose/aipackage.git` during first
boot. The accepted Phase 1 source was committed and pushed, and `refs/heads/main` was verified at
`ebaa2e721954f793dc166ccb1bafd37c6f48765d`. Build-host hashes for the backend, browser setup,
console setup, and shared portal experience file matched the accepted synced source. A first boot now
resolves to the Phase 1 package revision.

T038 is complete. T036–T037 remain pending real representative installs; successful builds and
manifests are not substitutes for appliance journey validation.