{
  "schema": "task26-hands-on-offline-final-candidate-v1",
  "status": "FAIL",
  "recorded_at_utc": "2026-08-14T08:45:10Z",
  "scope": "Final Task26 hands-on/offline QA only for requested candidate 96e1a264fedca02b6fd47417fea08d5f1df617f9fe1448cc050b055c4d8c678e. No release, activation, or live-operation authorization is granted.",
  "candidate": {
    "digest": "96e1a264fedca02b6fd47417fea08d5f1df617f9fe1448cc050b055c4d8c678e",
    "checkpoint_path": ".omo/evidence/task26/task26-owner-v1-readiness-checkpoint-v2.redacted.json",
    "checkpoint_sha256": "489a601545cefe3313105eff06598eada48717af8b41712649be3a4af51f260f",
    "checkpoint_mode": "0600",
    "checkpoint_status": "READY_FOR_TASK26_SECURITY_READONLY_REAUDIT",
    "candidate_manifest_path": "/home/cube/projects/richard/hermes-agent/owner_v1/release/candidate-manifest.json",
    "checkpoint_declared_manifest_sha256": "30c9655d89a62da6a7ccb4cb4b2097599873db709bd43705986e5472f9bd91de",
    "initial_observation": "The manifest and all seven checkpoint-referenced private artifacts matched their declared hashes and modes before the candidate tree disappeared.",
    "final_authentication": "FAIL: the owner_v1 tree and all seven checkpoint-referenced candidate artifacts were absent on the required stable-source observation. The digest cannot be authenticated as a runnable stable candidate."
  },
  "blocking_findings": [
    {
      "code": "CANDIDATE_TREE_MISSING",
      "severity": "blocking",
      "detail": "owner_v1/, its release manifest, sealed wheel, fixture, source closure, scripts, and candidate tests are no longer present at the paths sealed by the v2 checkpoint."
    },
    {
      "code": "STABLE_SOURCE_REQUIREMENT_UNMET",
      "severity": "blocking",
      "detail": "Because the sealed inputs disappeared between authentication observations, candidate-bound Task24/Task25 execution would not test the requested digest."
    }
  ],
  "not_run_after_authentication_failure": {
    "task24_bwrap_production_handler_exact_counts": true,
    "task24_terminal_replay_and_adverse_callbacks": true,
    "task25_cleanup_archive_and_noop_checks": true,
    "mutation_zero_execution_audit": true
  },
  "read_only_preflight_preserved": {
    "task24_append_only_index_sha256": "4df0f8712887f2125e100ba8d7585914b7b8810a298c37f9a32584b31fabe04d",
    "task24_index_artifacts_verified": 7,
    "task25_append_only_index_sha256": "c3c40ff9406dbb2609ee7ef89be2fdc20fa139064b5d65e494c6efc8b2a80ed2",
    "task25_index_artifacts_verified": 5,
    "archive_tree_aggregate_sha256": "0f64ba495fcb683a594709c9e6d2206c3f56cc5c8f02bfdbfb710759a46ef4c2",
    "note": "These historical read-only checks do not cure the missing candidate tree and are not execution attestation for the requested digest."
  },
  "non_actions": {
    "external_network_calls": 0,
    "telegram_mutations": 0,
    "provider_mutations": 0,
    "service_mutations": 0,
    "live_profile_mutations": 0,
    "delivery_mutations": 0,
    "git_actions": 0,
    "commit_push_release_activation_actions": 0,
    "task27_actions": 0
  },
  "privacy": "Redacted: no customer prose, raw callback data, route identifiers, credentials, or raw profile payloads are retained."
}