From cd419cbdaf2291851ac7c97edb7254485d8cefd5 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Daniel=20Jacob=20Read=20IV=20=E2=80=94=20Creator=20of=20?=
 =?UTF-8?q?=C4=80ML=E2=84=A2?= <aruintelligence@gmail.com>
Date: Tue, 13 Oct 2026 20:42:50 -0700
Subject: [PATCH] Version atlas script by content for reliable deployment

---
 docs/dispatch-matrix.html         | 2 +-
 test/dispatch-matrix-view.test.js | 5 +++++
 2 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/docs/dispatch-matrix.html b/docs/dispatch-matrix.html
index d13fa9af..4917a53e 100644
--- a/docs/dispatch-matrix.html
+++ b/docs/dispatch-matrix.html
@@ -34,6 +34,6 @@
       <section class="method" aria-labelledby="method-title"><h2 id="method-title">What was actually checked?</h2><div><p>The Node runner calls the reference <code>dispatchAction</code> for all 192 local fixtures. A separate project-authored Python oracle checks each row, including receipt, digest, claim consumption, callback target, and marker write. CI rejects four deliberately falsified reports.</p><p>Reproduce with <code>node pilots/action-boundary/dispatch-matrix.mjs --check</code> and <code>python3 pilots/action-boundary/verify_dispatch_matrix.py docs/action-dispatch-matrix.json</code>. <a href="https://github.com/aruintelligence/aml-core/blob/main/pilots/action-boundary/DISPATCH_MATRIX.md">Read the method and limits ↗</a></p><p><strong>Scope:</strong> Finite project-authored callbacks, no human approval, provider call, arbitrary interleavings, real delivery, outside witness, or formal proof of production safety. A browser view of the report does not independently verify its provenance. Never silently retry an unknown result.</p></div></section>
     </main><footer class="foot">ĀML™ / ĀRU Intelligence Inc. · Local evidence, inspectable limits. <a href="https://github.com/aruintelligence/aml-core/blob/main/CLAIMS.md">Claims and evidence ↗</a></footer>
   </div>
-  <script type="module" src="dispatch-matrix.js"></script>
+  <script type="module" src="dispatch-matrix.js?v=fb499a0e3d36"></script>
 </body>
 </html>
diff --git a/test/dispatch-matrix-view.test.js b/test/dispatch-matrix-view.test.js
index d057e434..25d46dc7 100644
--- a/test/dispatch-matrix-view.test.js
+++ b/test/dispatch-matrix-view.test.js
@@ -1,4 +1,5 @@
 import assert from "node:assert/strict";
+import { createHash } from "node:crypto";
 import { readFileSync } from "node:fs";
 import test from "node:test";
 import { inspectMatrix, MATRIX_AXES, matrixGroupSlots, matrixIndex, matrixInsights, matrixSelection, matrixUrl,
@@ -6,6 +7,7 @@ import { inspectMatrix, MATRIX_AXES, matrixGroupSlots, matrixIndex, matrixInsigh
 
 const report = JSON.parse(readFileSync(new URL("../docs/action-dispatch-matrix.json", import.meta.url), "utf8"));
 const page = readFileSync(new URL("../docs/dispatch-matrix.html", import.meta.url), "utf8");
+const script = readFileSync(new URL("../docs/dispatch-matrix.js", import.meta.url));
 
 test("the atlas indexes every vector and filters the actual checked-in outcomes", () => {
   assert.deepEqual(inspectMatrix(report), { blocked: 140, dispatched: 26, unknown: 26 });
@@ -55,4 +57,7 @@ test("the viewer rejects malformed axes or totals and marks its evidence boundar
     "does not independently verify its provenance", "dispatch-matrix.js"]) {
     assert.match(page.toLowerCase(), new RegExp(required.toLowerCase()));
   }
+  const version = createHash("sha256").update(script).digest("hex").slice(0, 12);
+  assert.ok(page.includes(`src="dispatch-matrix.js?v=${version}"`),
+    "the browser must fetch the JavaScript paired with this page");
 });