test: remove the last raw-byte fixture pin, keep the framing check

every_vector_file_is_byte_frozen in admission_tests.rs was the same
sha256(raw file bytes) == literal pattern deleted repo-wide in 0c6e192 --
it escaped that sweep by wearing a different name. Byte-freezing in-repo
fixtures is git's job, and CI now enforces v1/v2 as append-only by path.

What the suite genuinely owes its fixtures is framing, so the test
survives as every_vector_file_is_one_canonical_record: each file must
hold exactly one canonical JSON record with one trailing LF. The ten
EXPECTED_*_RAW_SHA256 literals and the raw_sha256 helper are gone; the
derivation goldens (EXPECTED_SOURCE_FACT_ID and friends), which pin the
system's own canonicalization rather than file bytes, stay untouched.

Kept deliberately: vector_suite_is_byte_frozen_and_advertises_every_
pinned_digest in ledger_epoch_tests.rs -- despite its name it is a
golden canonicalization test (encode_canonical(expected) == fixture),
and its digests are field values of the vector, not raw-byte pins.

Claude-Session: https://claude.ai/code/session_01BxEBa1v242Fo1AJJGftFnZ

Author: scottmeyer

src/evidence_ledger/admission_tests.rs

@@ -50,27 +50,6 @@ const VECTOR_SUITE: &[u8] =
 /// Exact canonical redacted bytes every vector in this suite refers to.
 const CANONICAL_PAYLOAD: &[u8] = br#"{"provider_event":"push","revision":"sha256:abc"}"#;
 
-const EXPECTED_CANDIDATE_RAW_SHA256: &str =
-    "3993c4ef269c25c82e8f8da840f9bb10e9f1af701502bfdbb9d7f0b3e6ef3d8d";
-const EXPECTED_LOCATORS_RAW_SHA256: &str =
-    "243f8a6d465932aa9d4aef517dddaaaa2330525f84906647b93a10a0ae82eff2";
-const EXPECTED_STATEMENT_RAW_SHA256: &str =
-    "1306a29f3ff3a5f82224d73343a2ab18db4f81f7aa8bd4fc806168ed63c225d8";
-const EXPECTED_NEGATIVE_SCOPE_RAW_SHA256: &str =
-    "62f9b93b6031d38fd760442616c7628d9fd7167601306b752acf29302717c315";
-const EXPECTED_NEGATIVE_CONNECTOR_RAW_SHA256: &str =
-    "141358f379b04a2cc3d08d2c2d1c6bd6dce6a855136bcbba6a1a79208486ca2c";
-const EXPECTED_NEGATIVE_RESOURCE_RAW_SHA256: &str =
-    "fe4039fea1c23d00e02960e575286302569a4fdbc85b63135512347bab593feb";
-const EXPECTED_NEGATIVE_STORAGE_RAW_SHA256: &str =
-    "14cf85256fa89ca907bf237dccdb8b39613cd671ee467cedda2527ad1a6c1a55";
-const EXPECTED_NEGATIVE_CLOCK_RAW_SHA256: &str =
-    "3692a95e2ffa55125927e7d36cb97cb69418fa2ac24fb9bbcf83b6689923edea";
-const EXPECTED_NEGATIVE_PRIVATE_RAW_SHA256: &str =
-    "25b79ca655d9b2768aec7c4f149f0cf9a48d9e4ff7d03c3149f6f2f58ff18bbe";
-const EXPECTED_VECTOR_SUITE_RAW_SHA256: &str =
-    "041dc592fc3ce73c786fff2a3b11b71b50cd17c916a1e430839108c6adf242a8";
-
 const EXPECTED_SOURCE_FACT_ID: &str =
     "22fa8ce6eb7eeaf3cd0514d91ef1b0a47acd89668587f44b82ff5683b1936cab";
 const EXPECTED_REPRESENTATION_KEY: &str =
@@ -92,10 +71,6 @@ fn record(artifact: &'static [u8]) -> &'static [u8] {
     body
 }
 
-fn raw_sha256(artifact: &[u8]) -> String {
-    hex::encode(Sha256::digest(artifact))
-}
-
 fn target_package() -> SemanticallyClosedStage4Package {
     let manifest = ManifestVerifiedRegistryPackage::decode(
         record(TARGET_PACKAGE),
@@ -382,30 +357,22 @@ fn the_frozen_vectors_admit_to_the_frozen_statement() {
 }
 
 #[test]
-fn every_vector_file_is_byte_frozen() {
-    for (artifact, expected) in [
-        (INGRESS_CANDIDATE, EXPECTED_CANDIDATE_RAW_SHA256),
-        (INGRESS_LOCATORS, EXPECTED_LOCATORS_RAW_SHA256),
-        (ADMITTED_STATEMENT, EXPECTED_STATEMENT_RAW_SHA256),
-        (NEGATIVE_PAYLOAD_SCOPE, EXPECTED_NEGATIVE_SCOPE_RAW_SHA256),
-        (
-            NEGATIVE_FOREIGN_CONNECTOR,
-            EXPECTED_NEGATIVE_CONNECTOR_RAW_SHA256,
-        ),
-        (
-            NEGATIVE_RESOURCE_IDENTITY,
-            EXPECTED_NEGATIVE_RESOURCE_RAW_SHA256,
-        ),
-        (
-            NEGATIVE_STORAGE_IDENTITY,
-            EXPECTED_NEGATIVE_STORAGE_RAW_SHA256,
-        ),
-        (NEGATIVE_CLOCK_INVERSION, EXPECTED_NEGATIVE_CLOCK_RAW_SHA256),
-        (NEGATIVE_PRIVATE_RAW, EXPECTED_NEGATIVE_PRIVATE_RAW_SHA256),
-        (VECTOR_SUITE, EXPECTED_VECTOR_SUITE_RAW_SHA256),
+fn every_vector_file_is_one_canonical_record() {
+    // Byte-freezing these fixtures is git's job (and CI enforces v1/v2 as
+    // append-only by path). What this suite owes them is FRAMING: each file
+    // must hold exactly one canonical JSON record with one trailing LF.
+    for artifact in [
+        INGRESS_CANDIDATE,
+        INGRESS_LOCATORS,
+        ADMITTED_STATEMENT,
+        NEGATIVE_PAYLOAD_SCOPE,
+        NEGATIVE_FOREIGN_CONNECTOR,
+        NEGATIVE_RESOURCE_IDENTITY,
+        NEGATIVE_STORAGE_IDENTITY,
+        NEGATIVE_CLOCK_INVERSION,
+        NEGATIVE_PRIVATE_RAW,
+        VECTOR_SUITE,
     ] {
-        assert_eq!(raw_sha256(artifact), expected);
-        // One canonical record and exactly one framing LF.
         let _ = record(artifact);
     }
 }