#!/usr/bin/env python3
"""One original log-write branch under fake transport, not real bank acceptance."""
import hashlib
import json
import subprocess
import sys
from pathlib import Path
import integrate_20261010 as tool
from integrate_20261011_batches46_48 import item

def verify():
    p = tool.ROOT.parent / 'worktrees/dm8-compat-20261012/private-prepay-harness/review-bank1581/verify_independent.py'
    assert hashlib.sha256(p.read_bytes()).hexdigest() == '7d48fa90f8d7499bde5cb6466005388b4ca345c12c713db5fdcc428d32dfddec'
    r = json.loads(subprocess.check_output([sys.executable, '-B', str(p)]))
    assert r['passed'] and r['checks'] == 14729 and r['manifest_files'] == 6429
    assert r['new_SQL'] == r['new_HTTP'] == 0
    assert [r['sides'][s]['total'] for s in ['B', 'C']] == [61, 69]

if __name__ == '__main__':
    audit = Path(__file__).with_name('integration-20261014-bank1581.json')
    assert not audit.exists(), 'Never replay main'
    report = 'work/2026-09-28-smart-canteen-dm8-poc/matrix-integration/ROOT_BANK1581_ACCEPTANCE_20261014.md'
    tool.main([item('ai_api', 'POST', '/api/bank/oauthAppAuth', '', evidence=report,
        scope='owned-school-fake-lowest-transport-original-SM2-SM4-log-I1-empty-relation-only',
        risk='original-owned-log-write-no-real-OAuth-login-permission-or-money',
        success_case='partial-evidence-original-log-insert-affected1-full14-column-readback-empty-binding',
        readback='tested-pass-triple-owned-log14-native-types-fresh-PDO-old1181-full-rows-unchanged',
        parity='partial-evidence-full-original11-field-data-system-user-id0-empty-token-no-real-bank-claim',
        cleanup='one-owned-log-per-side-retained-private-worker-stopped-no-write-replay')], audit, verify)