`sandbox demo` and `sandbox confidential` run no unit: they build a run
report and seal it to show the receipt and attestation formats. They
sealed literal records — CPU measured_uj Some(2_000) and GPU Some(50_000),
both HwShunt — so every receipt claimed hardware readings of work that
never happened (SPEC §6.3: HwShunt is read from a hardware interface for
that device class).
Each record is now `illustrative()`: the same estimated figure, graded
Estimator, with no measured figure. The demo says it is illustrative, its
measured line says "none (illustrative figures, sealed as estimates)"
rather than "partial", and confidential prints each sealed run's energy
record so its grade is visible. run-wasm, which meters a real unit, is
unchanged.
Tests: a unit test checks both reports carry only Estimator records with
no measured figure; tests/illustrative_runs.rs runs the built binary and
checks every printed record is [Estimator], none carries meas=, and no
line says HwShunt.
Co-Authored-By: Claude Opus 5.5 <[email protected]>
ce5690bbf2