Implementation observation: 2026-09-08. This page describes the shipped profile and proof pipeline; it does not display a live candidate, proof raster, ledger, or exported snapshot. Any proof-manifest or snapshot time belongs to that artifact, not to this observation.
The V1 SVG profile is an intake boundary, not an aesthetic verdict. It accepts a deliberately small static geometry language, turns it into canonical bytes, and attaches reproducible proof artifacts before a candidate can enter human review. Passing the profile says that the input is structurally safe and renderable under the configured profile; it does not make the icon selected, approved, or released. Source: iconomatix-extracted/iconomix/iconloom-1.0.0/iconloom-1.0.0/docs/INTERNALS.md:51-72; iconomatix-extracted/iconomix/iconloom-1.0.0/iconloom-1.0.0/src/svg/profile.ts:314-380.
flowchart LR A["Raw SVG submission"] --> B["Restricted parse and canonicalization"] B --> C["Canonical candidate hash"] C --> D["Isolated raster proofs"] D --> E["Validation report and proof manifest"] E --> F["Immutable candidate record"] E --> G["Measured evidence"] F --> H["Live human review"] I["Inferred critique"] --> H
Restricted SVG V1
| Layer | Accepted | Deliberately excluded |
|---|---|---|
| Root | One svg root with viewBox and, when needed, xmlns, fill, stroke, color, or opacity. | Nested SVG, root geometry presentation settings such as stroke-width, and extra root metadata or behavior. |
| Geometry | Flat direct children: path, rect, circle, ellipse, line, polyline, and polygon. Geometry and presentation attributes belong on these children. | Groups, transforms, arbitrary attributes, unsupported elements, or a geometry-free SVG. |
| Execution and dependencies | Static local geometry only. | Scripts, event attributes, processing instructions, DOCTYPE/entities, links, external references, data URLs, images, text/fonts, CSS/style, animation, filters, masks, patterns, gradients, and clip paths. |
| Bounded input | Valid finite viewBox and numeric geometry subject to profile caps for bytes, nodes, attributes, paths, numeric tokens, coordinate magnitude, and raster work. | Excessive, non-finite, malformed, or out-of-range numeric/path input. |
The parser also requires a root viewBox; a run’s Constitution then checks it against the frozen expected view box. The profile’s element and attribute allowlists are enforced code, not a documentation convention. Source: iconomatix-extracted/iconomix/iconloom-1.0.0/iconloom-1.0.0/src/svg/profile.ts:6-32,219-295,314-380; iconomatix-extracted/iconomix/iconloom-1.0.0/iconloom-1.0.0/src/core/validation.ts:75-99.
A submission is a concurrency transaction
A builder receives the live values through iconloom_context and submits one lane attempt. The opaque lease and idempotency key are live secrets/operational values and are intentionally not reproduced in this public reference.
| Contract field | Invariant | Meaning of a refusal |
|---|---|---|
| Run, lease, lane | The run is still generating and the lease is current for that run and lane. | Invalid, revoked, expired, or non-generating state: stop and read fresh context; do not guess a replacement. |
| Attempt, expected revision | First submission for a lane is attempt 1; later attempts advance in order from the last accepted attempt. The revision must match the current lane state. | A stale or wrong attempt/revision cannot silently overwrite a newer lane result. |
| Idempotency key | A replay may return the original accepted result only when its recorded run, lane, and attempt match exactly. | A key used with a mismatched tuple is an integrity error, not permission to create another candidate. |
| Frozen parent hashes | A refine has one parent; a mix has two parents in their frozen run order. | Missing, foreign, stale, or reordered parents are rejected before lineage can be rewritten. |
| Plan and raw SVG | The supplied lane declaration and SVG must satisfy the frozen contract and restricted profile. | accepted: false creates no new candidate; diagnostics identify the failed precondition or exact duplicate. |
Candidate caps, lease checks, stale revisions, idempotency replay checks, and parent ordering are enforced inside the project transaction. The server then sanitizes and canonicalizes the SVG, produces proof artifacts, validates it, detects exact and perceptual duplicates, and persists an immutable record. A near-duplicate can be stored with quarantined: true; quarantine is neither a selection nor an approval. Source: iconomatix-extracted/iconomix/iconloom-1.0.0/iconloom-1.0.0/src/core/project.ts:529-727; iconomatix-extracted/iconomix/iconloom-1.0.0/iconloom-1.0.0/src/extension.ts:1010-1089.
Proof is the review substrate
- Canonical SVG bytes receive the candidate hash. The validation report has its own hash. The proof manifest binds those identifiers to the proof recipe, renderer/profile versions, and every artifact digest.
- The worker sanitizes, canonicalizes, renders configured native-size proof rasters, validates the result, and returns the SVG, report, and artifacts as one result. The shipped defaults cover 16, 20, 24, and 32 px over transparent, light, dark, and monochrome surfaces; live context remains authoritative if configuration differs.
- PNG bytes plus their proof manifest are the authoritative visual evidence. ANSI/terminal previews and HTML indexes are navigation aids, not substitutes for pixel evidence.
Source: iconomatix-extracted/iconomix/iconloom-1.0.0/iconloom-1.0.0/src/worker/proof-worker.ts:58-93; iconomatix-extracted/iconomix/iconloom-1.0.0/iconloom-1.0.0/src/svg/render.ts:77-108,234-370; iconomatix-extracted/iconomix/iconloom-1.0.0/iconloom-1.0.0/src/constants.ts:8-16,47-51; iconomatix-extracted/iconomix/iconloom-1.0.0/iconloom-1.0.0/docs/USAGE.md:93-99.
Three evidence classes, no composite score
| Class | Producer and content | Authority boundary |
|---|---|---|
measured | Deterministic validator output tied to the candidate and report; it can carry a reproducible blocker, warning, or note. | A blocker is an observed constraint failure, not a model preference or a vote. |
inferred | A critic’s concrete advisory finding. The write tool always stamps this kind and permits only warning or note, with evaluator and confidence fields. | It cannot become measured, human, or a blocker by wording it more strongly; a confidence value alone does not prove calibration. |
human | A live human observation or authorized decision record in the review path. | It remains distinct from machine critique and deterministic validator facts. |
The arena keeps subjective machine critique hidden until a human’s initial blind impression when one is available, and it surfaces evaluator disagreement rather than averaging views. There is no magic score across evidence kinds. Deterministic blockers remain intact: the present core rejects any attempted override. Source: iconomatix-extracted/iconomix/iconloom-1.0.0/iconloom-1.0.0/src/types.ts:1-2,98-165; iconomatix-extracted/iconomix/iconloom-1.0.0/iconloom-1.0.0/docs/USAGE.md:148-166; iconomatix-extracted/iconomix/iconloom-1.0.0/iconloom-1.0.0/src/extension.ts:1094-1138; iconomatix-extracted/iconomix/iconloom-1.0.0/iconloom-1.0.0/src/core/validation.ts:15-50,75-99; iconomatix-extracted/iconomix/iconloom-1.0.0/iconloom-1.0.0/src/core/decisions.ts:277-304.
Related: index, architecture, agents, commands, sets-and-state, search-and-decisions, private page (sign-in required).