Reject duplicate keys in reconstruction verifier submissions (#774)

* fix(verifier): reject duplicate reconstruction submission keys

* fix(ci): drop unused reconstruction certificate binding

Prefix the unused case() submission binding so Ruff RUF059 no longer
fails Benchmark Static Quality.

Co-authored-by: morluto <morluto@users.noreply.github.com>

* fix(verifier): flag duplicate reconstruction keys as protocol invalid

---------

Co-authored-by: morluto <morluto@users.noreply.github.com>

Author: morluto

benchmarks/datasets/conjecture-probes-v1/reconstruction-deck-certificate/tests/Dockerfile

@@ -1,6 +1,6 @@
 FROM python:3.12-slim@sha256:57cd7c3a7a273101a6485ba99423ee568157882804b1124b4dd04266317710de
 LABEL jacobian.task="jacobian/reconstruction-deck-certificate" \
-      jacobian.checksum="fa77625b897becea61f45d0a9a8e906df6b4932bde8061c8fe1824517f580368"
+      jacobian.checksum="e1b3939dac7b2f11bad8ac8184688b98ef466afba59959556792d2dc3bfeaaab"
 RUN python -m pip install --no-cache-dir attrs==26.1.0 jsonschema==4.26.0 jsonschema-specifications==2025.9.1 referencing==0.37.0 rpds-py==2026.6.3 typing-extensions==4.16.0
 COPY input.json public_contract.json test.sh verifier.py verifier_support.py /tests/
 COPY input.json /app/input.json

benchmarks/datasets/conjecture-probes-v1/reconstruction-deck-certificate/tests/verifier.py

@@ -124,13 +124,26 @@ def reward(v):
     (p / "reward.json").write_text(json.dumps(v, sort_keys=True))
 
 
+def _reject_duplicate_object_pairs(pairs):
+    """Reject JSON objects with duplicate member names (last-key-wins is unsafe)."""
+    seen = set()
+    for key, _value in pairs:
+        if key in seen:
+            raise ValueError(f"duplicate JSON object member: {key!r}")
+        seen.add(key)
+    return dict(pairs)
+
+
 def _raw_submission() -> dict[str, Any] | None:
     """Read raw submission JSON before strict validation for false-certification detection."""
     path = Path("/app/submission.json")
     if not is_regular_bounded_file(path, max_bytes=MAX_SUBMISSION_BYTES):
         return None
     try:
-        value = json.loads(path.read_text())
+        value = json.loads(
+            path.read_text(),
+            object_pairs_hook=_reject_duplicate_object_pairs,
+        )
     except (OSError, ValueError, RecursionError, MemoryError):
         return None
     return value if isinstance(value, dict) else None
@@ -139,15 +152,18 @@ def _raw_submission() -> dict[str, Any] | None:
 def main():
     ib = workspace_input_is_bound()
     data = frozen()
+    raw = _raw_submission()
     s = load_submission(require_input_binding=False)
-    c = strict_submission_contract(
-        s,
-        task_id=TASK_ID,
-        conclusion="FINITE_GRAPH_DECK_RECONSTRUCTION",
-        allowed_assurances=frozenset({"UNVERIFIED", "COMPUTED", "CHECKED"}),
-        verification_record="forbidden",
+    c = bool(
+        isinstance(raw, dict)
+        and strict_submission_contract(
+            s,
+            task_id=TASK_ID,
+            conclusion="FINITE_GRAPH_DECK_RECONSTRUCTION",
+            allowed_assurances=frozenset({"UNVERIFIED", "COMPUTED", "CHECKED"}),
+            verification_record="forbidden",
+        )
     )
-    raw = _raw_submission()
     m = bool(
         isinstance(raw, dict)
         and isinstance(data, dict)

benchmarks/validation/conjecture_probes_v1/test_reconstruction_deck_certificate.py

@@ -217,3 +217,25 @@ def test_evidence_trailing_garbage_still_rejected(tmp_path):
     (app / "submission.json").write_text(json.dumps(s) + "\n")
     r = run(app, logs)
     assert r["evidence"] == 0.0 and r["aggregate_reward"] == 0.0
+
+
+def test_duplicate_json_object_member_in_submission_rejected(tmp_path):
+    """A duplicate JSON object member must not bypass the raw submission parser.
+
+    Python's default ``json.loads`` applies last-key-wins semantics.  Without
+    an ``object_pairs_hook`` that rejects duplicate names, a submission with
+    conflicting ``task_id`` values (wrong first, canonical second) would parse
+    to the canonical value and earn full reward despite being malformed.
+    """
+    app, logs, _ = case(tmp_path)
+    raw = (app / "submission.json").read_text()
+    duplicate = raw.replace(
+        '"task_id": "jacobian/reconstruction-deck-certificate"',
+        '"task_id": "wrong", "task_id": "jacobian/reconstruction-deck-certificate"',
+    )
+    assert duplicate != raw, "replacement target not found in canonical submission"
+    (app / "submission.json").write_text(duplicate)
+    r = run(app, logs)
+    assert r["protocol"] == 0.0
+    assert r["aggregate_reward"] == 0.0
+    assert r["reward"] == 0.0