From ac6731b2dd5666e50312e42eedb7407192943e24 Mon Sep 17 00:00:00 2001
From: igneum-labs <337424239+igneum-labs@users.noreply.github.com>
Date: Tue, 6 Oct 2026 16:52:12 +0000
Subject: [PATCH] Ember proof playbook (reads only): the installed app's power
 cap lines, the helper log, the task's action, nvidia-smi, the consent.exe
 count, the cards' state

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
---
 relay/playbooks/ember-proof-collect-pc1.ps1 | 30 +++++++++++++++++++++
 1 file changed, 30 insertions(+)
 create mode 100644 relay/playbooks/ember-proof-collect-pc1.ps1

diff --git a/relay/playbooks/ember-proof-collect-pc1.ps1 b/relay/playbooks/ember-proof-collect-pc1.ps1
new file mode 100644
index 000000000..3db3b7e83
--- /dev/null
+++ b/relay/playbooks/ember-proof-collect-pc1.ps1
@@ -0,0 +1,30 @@
+# Ember: the no-prompt proof read from PC 1 (6 October 2026). Reads only: the installed app's power cap lines, the
+# helper's log, the task's action and state, nvidia-smi's limits, and the count of consent.exe (UAC) starts in the
+# last two hours from the Security log. Never writes, quits, pauses or resumes anything.
+$ErrorActionPreference = 'Continue'
+$a = Join-Path $env:LOCALAPPDATA 'igneum\app'
+$l = Get-ChildItem (Join-Path $a 'logs') -Filter 'app-*.log' -ErrorAction SilentlyContinue | Sort-Object LastWriteTime -Descending | Select-Object -First 1
+if ($l) {
+  Write-Output ('RESULT PROOF log=' + $l.FullName)
+  Get-Content -LiteralPath $l.FullName | Where-Object { $_ -match 'power cap|Power Helper|elevat|UAC|runas|tune' } | Select-Object -Last 24 | ForEach-Object { Write-Output ('RESULT PROOF applog ' + $_) }
+}
+$h = Join-Path $a 'sweep\helper.log'
+if (Test-Path -LiteralPath $h) { Get-Content -LiteralPath $h | Select-Object -Last 15 | ForEach-Object { Write-Output ('RESULT PROOF helper ' + $_) } } else { Write-Output 'RESULT PROOF helper none' }
+$t = Get-ScheduledTask -TaskName 'Igneum Power Helper' -ErrorAction SilentlyContinue
+if ($t) { Write-Output ('RESULT PROOF task action=' + $t.Actions[0].Execute + ' ' + $t.Actions[0].Arguments + ' state=' + $t.State + ' runlevel=' + $t.Principal.RunLevel + ' user=' + $t.Principal.UserId) } else { Write-Output 'RESULT PROOF task none' }
+$smi = Join-Path $env:ProgramFiles 'NVIDIA Corporation\NVSMI\nvidia-smi.exe'
+if (-not (Test-Path $smi)) { $smi = Join-Path $env:SystemRoot 'System32\nvidia-smi.exe' }
+if (Test-Path $smi) { Write-Output ('RESULT PROOF nvidia ' + ((& $smi --query-gpu=index,name,power.draw,power.limit,clocks.gr,clocks.mem --format=csv,noheader 2>&1 | Out-String) -replace "`r?`n", ' | ')) }
+try {
+  $ev = @(Get-WinEvent -FilterHashtable @{ LogName = 'Security'; Id = 4688; StartTime = (Get-Date).AddHours(-2) } -ErrorAction Stop | Where-Object { $_.Message -match 'consent\.exe' })
+  Write-Output ('RESULT PROOF consent_exe_starts_last_2h=' + $ev.Count + ' ' + (($ev | ForEach-Object { $_.TimeCreated.ToUniversalTime().ToString('HH:mm:ss') }) -join ','))
+} catch { Write-Output ('RESULT PROOF consent_exe_starts_last_2h=unreadable (' + $_.Exception.Message + ')') }
+$u = Join-Path $a 'app.url'
+if (Test-Path -LiteralPath $u) {
+  try {
+    $js = (Invoke-WebRequest -Uri ((Get-Content -LiteralPath $u -Raw).Trim() + 'api/state') -UseBasicParsing -TimeoutSec 5).Content | ConvertFrom-Json
+    foreach ($c in @($js.mining.cards)) { Write-Output ('RESULT PROOF card ' + $c.key + ' ' + $c.name + ' mhs=' + $c.mhs + ' power_w=' + $c.power_w + ' power_pct=' + $c.power_pct + ' note=' + $c.power_note + ' tune=' + $c.tune_line) }
+    Write-Output ('RESULT PROOF settings power_control=' + $js.settings.power_control + ' note=' + $js.settings.power_note)
+  } catch { Write-Output ('RESULT PROOF state unreadable: ' + $_.Exception.Message) }
+}
+exit 0