{
  "schema": "nutricoach-v150-v8-independent-pre-exec-audit-v1",
  "status": "BLOCK",
  "scope": "read-only independent pre-execution audit",
  "candidate_digest": "066a794d44861d2cd0fe8c1ea14c0050e00219b38a2d2026b389772783056dad",
  "package_digest": "1835ddff25c2db60a4e2f8ea991f59051a0a3b1c89dcbc6a12f76cd08015c3f5",
  "package_sha256": "801d6fb6a2780bf7aecb715e58cc6510d2fbe1edb7d25e0ad8b2846552505a82",
  "preseal_manifest_sha256": "88f5663750c4017ea779bcef334cb0033f8f9d2b95cda9bb87c4ace801feae22",
  "controller_closure": "sha256:631da0d9ca15db1f200f019cdfbb4ae831869e6e34c5f514e20a474e9c8d5243",
  "rehearsal_receipt_sha256": "a0066988edecd637ad75f1f37dc7f61d2256bf6c0915a17f08b9febc06fbc9df",
  "cleanup_receipt_sha256": "88838fc1992275e67a9761c906aa829b632e15cb73ab00d260c32a8b2ac9952a",
  "passed_criteria": {
    "seal_package_controller_target_closure": {
      "bound_hashes_recomputed": 74,
      "hash_mismatches": 0,
      "permission_evidence_hash_mismatches": 0,
      "detached_verifier": "V8_DEVICE_SANDBOX_PRESEAL_VERIFIED",
      "global_approval_ledger": "absent",
      "execution_root": "absent"
    },
    "authority_rollback_crash_recovery": {
      "stages": 11,
      "stage_baseexception_cases": 66,
      "error_families": [
        "AssertionError",
        "KeyboardInterrupt",
        "OSError",
        "RuntimeError",
        "SystemExit",
        "ValueError"
      ],
      "all_cases_restored_and_running": true,
      "same_root_replay": "blocked_without_second_mutation",
      "alternate_replay": "blocked_without_mutation",
      "durable_faults_and_signals": "PASS"
    },
    "rehearsal_privacy_network_cleanup": {
      "offline_install": "PASS",
      "bubblewrap_network_gate": "PASS",
      "raw_trace_af_inet_or_af_inet6_connects": 0,
      "provider_events": 0,
      "telegram_events": 0,
      "customer_events": 0,
      "temporary_clones": "absent",
      "retained_evidence_files": 7
    }
  },
  "blockers": [
    {
      "criterion": "current_live_immutability",
      "status": "FAIL",
      "evidence": {
        "read_only_command_result": "DENIED:stale_protected_bytes",
        "exit_code": 2,
        "sealed_stable_digest": "bbb8a1df580b039320e479484f18a03c2c4c534bca1400ce0aa7cf1629016046",
        "sealed_contract_digest": "487687442c9733ce81a23fad0a179796e78ad2a9fa7fc2fb275e2280a783cf32",
        "service_state_matches_seal": {
          "active_state": "active",
          "sub_state": "running",
          "main_pid": 571685,
          "exec_main_start_timestamp_monotonic": 2234547821498
        },
        "volatile_append_logs_not_causal": true,
        "changed_path": "not probed; audit remained read-only"
      },
      "required_resolution": "Regenerate and independently verify a sealed preflight snapshot against the current protected profile/contract state, or restore the exact sealed state through an authorized recovery procedure; then rerun this audit."
    }
  ],
  "audit_mutations": {
    "live_profile": 0,
    "service": 0,
    "approval_consumption": 0,
    "network": 0
  }
}