short-drama-delivery-audit

Internal machine-owned gate used immediately before meta-short-drama publishes its final video. It does not call a model and never contacts a media provider.

The helper parses the canonical script.txt to identify active shots and their content durations. It then requires sanitized real-provider receipts for the reference image, every active shot image, and every active shot video; rejects placeholders, missing provider request/job IDs, and any runtime fallback substitution; and uses ffprobe to confirm that shot MP4s and the final MP4 are decodable and have the promised durations.

When Seedance rejects a shot under provider policy, its sidecar contains only the bounded reason provider_policy_rejected and an allowlisted policy code. The audit preserves those two fields, marks the shot not generated, and reports VIDEO_POLICY_REJECTED; raw provider text, signed URLs, request IDs, and secrets are discarded before this boundary.