{
  "schema": "nutricoach-v150-v10-independent-compositional-audit-v1",
  "status": "PASS",
  "scope": "terminal independent read-only compositional pre-execution audit",
  "candidate_digest": "066a794d44861d2cd0fe8c1ea14c0050e00219b38a2d2026b389772783056dad",
  "seal": {
    "preseal_root": "/home/cube/.hermes/migrations/nutricoach-v1.5.0-combined/live-transaction-preseal-v10-user-bus-environment",
    "package_digest": "e6ddec2ecc8802cb6bf94daa39a03672a19c61ae485d5e64ab387fbddb8f30c7",
    "package_sha256": "248540f47ce08aac56e311cdca47b782aa0c05f9d27db700671ae33bf9f7cd2b",
    "manifest_sha256": "20cc15b768622b180eeeb3e5a0a390b68cfcd855582b6509f614fac3bd50c5b8",
    "protected_snapshot_sha256": "97731e7704607e5c876eb95432d32d7e2046965bb2f89ebfa665f9fde51ac43a",
    "controller_closure": "sha256:895b2354b8c8b19ac2a8444ac508bddcec33b30e7368608d7a3b54ebbb8e65e6",
    "detached_verifier": "V10_USER_BUS_ENVIRONMENT_PRESEAL_VERIFIED",
    "closure_files": 35,
    "bound_hashes_recomputed": 84,
    "bound_hash_mismatches": 0,
    "sealed_verification_evidence": {
      "tests": 70,
      "ruff": "PASS",
      "basedpyright": "0 errors, 0 warnings, 0 notes",
      "ty": "PASS"
    }
  },
  "criteria": {
    "supersession_and_authority_roots": {
      "status": "PASS",
      "legacy_predecessors_non_authorizable": 11,
      "superseded_packages_non_reusable": 11,
      "v9_authorization_operationally_spent": true,
      "v10_global_ledger_absent": true,
      "v10_execution_root_absent": true
    },
    "operational_delta_from_v9": {
      "status": "PASS",
      "v9_and_v10_runtime_source_hashes_match_their_respective_seals": true,
      "sealed_controller_execute_body_byte_identical": true,
      "launcher_delta": [
        "import os",
        "set XDG_RUNTIME_DIR to /run/user/{os.getuid()}"
      ],
      "bootstrap_delta": "rebinds the immutable preseal root from V9 to V10",
      "controller_delta": "rebinds the immutable sealed-target path from V9 to V10",
      "dbus_session_bus_address": "unset",
      "all_other_sandbox_argv_bytes_unchanged": true,
      "nontransaction_closure_changes": [
        "preseal preparation",
        "sealed regression test",
        "V9 verifier inclusion"
      ]
    },
    "user_bus_environment": {
      "status": "PASS",
      "sandbox_argv_assertions_sha256": "822a6ef330790f0300e0cd59abebdc2f7f5139f459b6f93c7b389da588830103",
      "read_only_xdg_probe_sha256": "97b48e0e3f5bd54ad9dc2f0680342cf777ff038609bc995af2da2ca54e025899",
      "clearenv": true,
      "network_namespace": "unshared",
      "read_only_root": true,
      "tmpfs_tmp": true,
      "isolated_dev": true,
      "xdg_runtime_dir": "/run/user/1000",
      "dbus_session_bus_address": "unset",
      "real_read_only_user_manager_socket_probe": true
    },
    "inherited_v9_transaction_assurance": {
      "status": "PASS",
      "rehearsal_receipt_sha256": "1ba9230695d13d7fad62699f466b675dcc61b5b757eb7185ed9639ca5e460e5d",
      "cleanup_receipt_sha256": "8b3af58b9d1ef9cf7ce7f12bc496f3f5f3ddc9be3d81eaf0df798345bae99f1a",
      "committed_successes": 2,
      "stage_baseexception_cases": 66,
      "durable_faults_and_signals": "PASS",
      "same_and_alternate_root_replay": "zero second mutation",
      "capacity": 5,
      "channel_inbox_authorized": false,
      "append_tolerant_logs": [
        "logs/agent.log",
        "logs/errors.log",
        "logs/gateway.log"
      ],
      "external_events": 0,
      "cleanup_retained_files": 7,
      "historical_archive_note": "The sealed artifact named v9-independent-audit.json is a V8-scope superseded stale-state audit; it is lineage evidence only and was not used as the V9 transaction PASS proof."
    },
    "topology_limit_and_compositional_decision": {
      "status": "PASS",
      "nested_exact_overlay_blocker_sha256": "fbb47f38cf6a23873d704ee7ea498f7b1459a9354e42316b44cba866519e6623",
      "nested_cleanup_sha256": "c8f2f2184ea479cab0c301269c7d6c16439f0537619ae2a6dada6a17420ee24d",
      "single_namespace_blocker_sha256": "3f11001a9026326823208ffaf0b237b5694e31ae257a9336fcd71e271ea10472",
      "single_namespace_cleanup_sha256": "215139fb05876e1f500d9f75fecb456192acde41a7bf64da0bbb4f2c45661bd4",
      "nested_attempts_stop_before_controller_authority_or_clone_mutation": true,
      "single_namespace_projection_not_executed": true,
      "single_namespace_attempt_stops_before_controller_authority_or_live_mutation": true,
      "both_cleanups_preserve_live_state_and_absent_v10_roots": true,
      "host_limitation": "An exact full clone cannot coexist with zero-live-use under the mandatory nested namespace and user-manager IPC constraints.",
      "compositional_decision": "PASS: byte-identical V9 transaction assurance plus the independently verified XDG-only V10 boundary is sufficient; the missing full V10 clone is explained by an evidence-backed host topology limit rather than untested transaction behavior."
    },
    "fresh_current_live_boundary": {
      "status": "PASS",
      "read_only_boundary_gate": "passed",
      "target_stable_digest": "34858ea2dfad5930b32984233d5f6188848117e25dd712f0d84202af54072b29",
      "contract_digest": "487687442c9733ce81a23fad0a179796e78ad2a9fa7fc2fb275e2280a783cf32",
      "critical_sha256": {
        "config": "e9ee8f1c3a4913bcde64f4832dcbec6620173ca0de39ffd1a32c4b0c55c6a162",
        "registry": "bd61ed95f80737ba8013db262fd0242a600e540f43f6627f5b9708a599660b29",
        "unit": "90fbab66354811448427286b87f0305955a25df8f08a202a15b5ac3541700af7",
        "dropin": "33bc59bdaf6a4261abc7ce43ae7faf452f724353ee24f6a54b2a92ed5b1ca0d8"
      },
      "service": {
        "ActiveState": "active",
        "SubState": "running",
        "MainPID": "571685",
        "ExecMainStartTimestampMonotonic": "2234547821498"
      },
      "drift_probe": "not applicable: no-write boundary passed"
    }
  },
  "v9_preledger_failure_receipt_sha256": "4a7ef0fe624d3fdeb459d309e167a56c9d4c03183dbfbae92776db5e36b6cc58",
  "audit_mutations": {
    "live_profile": 0,
    "service": 0,
    "approval": 0,
    "network": 0,
    "new_rehearsals": 0
  }
}