# queue: what the machine decided, and what a person still has to

Three append-only JSON-lines files, written by `pnpm judge … --record` and `pnpm sign`:

| File | Holds | Source |
| --- | --- | --- |
| `pending.jsonl` | Cases waiting for a person: every `to_person` route, plus the sampled share of `act_alone` | inferred |
| `closed.jsonl` | Cases the machine closed alone, under `thresholds.yaml`, with the probability it had | inferred |
| `signed.jsonl` | Cases a person closed, with who signed, the label they gave, and whether they agreed with the machine. `signature` is `declared`: the name was typed by whoever ran `rail sign`, and nothing here proves it | declared |

A signature is also a row in `eval/examples.csv` (`source=declared`). A dispute (the person's
label differs from the machine's) is the most valuable row there is; it is how the test set grows.
Nothing here is deleted. A case id is used once.

The intended design is that the steward's key signs an RCAN approval over each signed entry
(`signature: attested`); contributors' signatures stay declared and the steward's review vouches for
them. It is not built. Until it is, a console must render a signature as declared, never as proven.