D2 distribution proof

Abizor CI Proof is listed as a GitHub Actions Marketplace action.

This proof records the D2 gate for Abizor/ci-proof-action@v1. A real target pull request used the Marketplace action, installed abizor==0.1.7 from PyPI, reached the CI proof merge boundary, published an Abizor Check, uploaded artifacts, passed abizor verify-proof, and was closed without merge.

Date2026-06-12

Action ref@v1

Target PRpublic proof target #10 closed

Resultready_for_merge

Marketplace evidence

The listing is public and points users at the v1 action.

Marketplace listing: https://github.com/marketplace/actions/abizor-ci-proof

Listing title: Abizor CI Proof

Provider: Abizor

Latest version: v1

Categories: continuous-integration and code-quality

Action source: Abizor/ci-proof-action

Target proof

The copied @v1 workflow ran on a real pull request.

Target repository: Abizor/abizor-public-proof-target

Pull request: #10

PR closure: closed

Reason: proof-only target PR closed without merge after evidence was recorded.

Head commit: a32f14e103dcaca668a46e1f2b9727b5a5127f21

Action resolved to commit: c0f4fe3317698ddad2fde172ccc0be1ad78258d0

Original proof release tag: v1.0.0 at 80bcf0f72f9014ab9848299e2183a7a7c170c5ec

Actions run: 27428576472

Abizor Check run: 81072861765

What passed

The action reproduced the proven CI proof path.

Action refuses: Abizor/ci-proof-action@v1

Install sourceCollecting abizor==0.1.7 from PyPI.

Proof statusmerge_boundary with final status ready_for_merge.

Local verifierverified: event log, manifest, and Change Record artifacts match.

Check projectionOne live Abizor GitHub Check was published.

Artifact namesabizor-events, abizor-artifacts, abizor-summary, abizor-pr-comment-body, abizor-change-record, abizor-live-check-proof, and abizor-feedback-export.

Artifact hashes

The downloaded proof bundle was hash recorded.

Event log SHA-256: af9a626ce1b0ee9e751cca9989626a52ca6b2eae43fc95227cc29f864eaf04a6

Manifest SHA-256: 9924d576869d24d1fac671462d40953653a17920580f94308b60a918f867983a

Change Record JSON SHA-256: c7e4f123cf3b55fa8036c88f885c3268fb35d9683466b4a4ee443b066b8795aa

Change Record Markdown SHA-256: 3d8ce45f11263223f1d0e50460f1354b55c636778e4a48ce0dcab193f1853df9

Summary and PR comment body SHA-256: acf3ffaf5c5229fd55ec8dfbaa00b2a447dac00bd863e45814c6f756ad7a3285

Live Check proof JSON SHA-256: 1818936dc74a4f018ddc8dd57fdbcd413a3559dc9de94cc59ba0a87810313c63

Boundary

What this proof does not claim.

This proof did not create, merge, or deploy a pull request.

The target PR was proof-only and was closed without merge after evidence was recorded.

It does not claim hosted app, hosted API, dashboard, billing, GitHub App, hosted merge automation, or hosted test execution behavior.

It does not make the GitHub Check canonical state. The Abizor event log remains canonical truth.