RECEIPT-MATRIX.md

Receipt matrix — quick index

Additive quick-index only. This is a navigational summary table; it does not replace the dense per-platform narratives in README.md ("Status (honest)"), the image ledger in IMAGE-PROVENANCE.md, or the raw evidence under logs/<dir>/. Those are the evidence; this is the table of contents. 19 receipts across 17 ecology rows: 18 admitted + 1 typed non-admission. The canonical findings narrative lives in the plan's T16.5b.1…17 results table; the canonical in-repo ecology table is docs/tzdb-release-ecology.md.

Admission + ecology axes

Receipt (platform)	Admit	Lineage	zic version	Tier	Bloat dflt	Packaging model	Source authority	Production mode	Log dir
linux_glibc_host_x86_64	✅	host /usr/bin/zic	host tzcode	—	—	host	host pkg	host_local_emitted	logs/linux_glibc_host_x86_64/
freebsd_14_x86_64	✅	iana_tzcode	2022g	modern (4/5)	slim	base system	os_base_release (data 2026b)	host_assembled_from_vm_measured_values	logs/freebsd_14_x86_64/
openbsd_79_x86_64	✅	tzcode fork (old)	none (--version✗)	old-fork (3/5)	n/a (no -b)	base system	source_header 2023cgtz	operator_run_console_captured	logs/openbsd_79_x86_64/
netbsd_101_x86_64	✅	iana_tzcode	2022g	modern (4/5)	slim	base system	byte_witness 2026b	operator_run_console_captured	logs/netbsd_101_x86_64/
dragonfly_642_x86_64	✅	tzcode fork (oldest)	none (-y era)	old-fork (3/5)	n/a	base system	unknown (ships only zone.tab)	operator_run_console_captured	logs/dragonfly_642_x86_64/
omnios_illumos_x86_64	✅	iana_tzcode	2025a	modern (4/5)	slim	SUNWcs OS pkg	package_identity zoneinfo@2026.1	operator_run_console_captured	logs/omnios_illumos_x86_64/
smartos_20260528_x86_64	✅	iana_tzcode	2025a	modern (4/5)	slim	RAM platform image	byte_witness 2026b	operator_run_console_captured	logs/smartos_20260528_x86_64/
openindiana_hipster_20260430_x86_64	✅	iana_tzcode	2025a	modern (4/5)	slim	IPS pkg	package_identity 2026.1	operator_run_console_captured	logs/openindiana_hipster_20260430_x86_64/
alpine_3234_x86_64	✅	iana_tzcode (musl)	2026b	modern (4/5)	slim	tzdata-utils apk	package tzdata-utils-2026b	operator_run_console_captured	logs/alpine_3234_x86_64/
debian_13_x86_64	✅	glibc_zic	GLIBC 2.41	modern (4/5)	slim	libc-bin	package tzdata-2026b	operator_run_console_captured	logs/debian_13_x86_64/
nixos_2511_x86_64	✅	glibc_zic	GNU libc 2.40	modern (4/5)	slim	/nix/store (content-addressed)	package nixpkgs-tzdata-2026a	operator_run_console_captured	logs/nixos/
ubuntu_2404_x86_64	✅	glibc_zic	GLIBC 2.39	old-fork (3/5)	fat	libc-bin	package ubuntu-tzdata-2026a	in_vm_autorun_emitted (cloud-init)	logs/ubuntu/
almalinux_9_x86_64	✅	glibc_zic	GNU libc 2.34	old-fork (3/5)	fat	glibc-common (RPM)	package almalinux-tzdata-2026a	in_vm_autorun_emitted (cloud-init)	logs/almalinux/
gentoo_20260531_x86_64	✅	iana_tzcode	2026a	modern (4/5)	fat	sys-libs/timezone-data	package timezone-data-2026a	operator_run_console_captured	logs/gentoo/
opensuse_leap_16_x86_64	✅	iana_tzcode	2025b	modern (4/5)	slim	timezone RPM	package timezone-2025b	in_vm_autorun_emitted (cloud-init)	logs/opensuse/
sles_15sp7_x86_64	✅	iana_tzcode	2025b	modern (4/5)	slim	timezone RPM	package timezone-2025b-150600	container_emitted (SUSE BCI, podman)	logs/sles/
archlinux_x86_64	✅	iana_tzcode	2026b	modern (4/5)	slim	tzdata pacman pkg	package tzdata-2026b-1	container_emitted (Arch image, podman)	logs/archlinux/
yocto_poky_buildhost_native_zic_x86_64	✅	iana_tzcode	2026b	modern (4/5)	slim	OE-core tzcode-native recipe	recipe SRC_URI (sha-verified)	recipe_built_lab_emitted	logs/yocto-poky/
yocto_poky_target_runtime_x86_64	❌ non-admit	— (no on-device zic)	—	—	—	core-image-* (consumer)	recipe design (consumer ships only data)	recipe_derived_non_admission	logs/yocto-poky/

Log-dir note (do-not-collapse with the receipt token): most log directories use the exact platform token; eight are family-named (logs/{almalinux, archlinux, gentoo, nixos, opensuse, sles, ubuntu, yocto-poky}) and the two Yocto/Poky receipts share logs/yocto-poky/. The Log dir column above is the authoritative receipt→evidence mapping. (See the corrected convention sentence in IMAGE-PROVENANCE.md.)

receipt_production_mode vocabulary (derived from the README narratives; not a schema field — yet)

How each receipt's evidence was actually produced (a future matrix renderer / receipt-schema axis; recorded here in prose so it isn't lost). Tracked for T16.6.x / T17.

Mode	Meaning	Rows
host_local_emitted	run-oracle.sh ran the host's own zic directly (pipeline proof, not vendor breadth)	host
in_vm_autorun_emitted	VM booted; cloud-init runcmd ran the corpus and emitted the receipt unattended	Ubuntu · AlmaLinux · openSUSE
operator_run_console_captured	VM/live-image booted; operator ran the corpus in an interactive console / live shell; values captured over nc/curl/wget	OpenBSD · NetBSD · DragonFly · OmniOS · SmartOS · OpenIndiana · Alpine · Debian · NixOS · Gentoo
host_assembled_from_vm_measured_values	corpus ran in-VM, but the JSON envelope was assembled host-side from the real measured values (the console wouldn't copy the long line)	FreeBSD
container_emitted	run in a container (podman --network=none), no VM	SLES (SUSE BCI) · Arch
recipe_built_lab_emitted	zic built in-lab per the upstream recipe (source SRC_URI sha-verified), corpus run on it; behaviour version-authentic, binary not extracted from a bitbake tmp/work	Yocto/Poky build-host
recipe_derived_non_admission	a typed non-admission derived from recipe design (no booted-image measurement) — the target image is a TZif consumer with no on-device zic	Yocto/Poky target-runtime

Every mode above is an honest production-provenance label: nothing was fabricated; where a receipt's envelope was assembled host-side or its binary was lab-built per recipe, the table says so plainly.

Out of campaign scope (not counted in the matrix)

• macOS and OpenWrt were dropped from the campaign (operator call — not pertinent to deep zic infrastructure). They remain valid reference-platform / consumer taxonomy values; they are not harvested rows and are not counted in the 17/19. Recorded here so their absence is explicit, not a gap.