{
  "schema": "task26-hands-on-offline-final-candidate-v1",
  "status": "PASS",
  "recorded_at_utc": "2026-08-14T08:30:40Z",
  "scope": "Final Task26 hands-on/offline QA only for candidate c3b1ea6877bc1a2ecc510de70610552fd397e13a73719df4bb82a943f2373f95. This is not a release, activation, or live-operation authorization.",
  "candidate": {
    "digest": "c3b1ea6877bc1a2ecc510de70610552fd397e13a73719df4bb82a943f2373f95",
    "manifest_path": "/home/cube/projects/richard/hermes-agent/owner_v1/release/candidate-manifest.json",
    "manifest_sha256": "347c3467ae508ec423a7f1a2b744a094b7292c6df0f54641aa00d10da5b12ce8",
    "core_digest_recomputed": "c3b1ea6877bc1a2ecc510de70610552fd397e13a73719df4bb82a943f2373f95",
    "candidate_leaf_entries_checked": 21,
    "candidate_leaf_aggregate_sha256_before_and_after": "29c0766b2a24ec9f032899afca59d096fe7b01c64501d715cd6801cfcf8770c8"
  },
  "checkpoint": {
    "path": ".omo/evidence/task26/task26-owner-v1-readiness-checkpoint.redacted.json",
    "sha256": "079adecbea34e80c69e3536dfb25472bc97b389ae141e32b87afe783a21a0563",
    "mode": "0600",
    "status": "READY_FOR_TASK26_SECURITY_READONLY_REAUDIT",
    "candidate_digest_matches": true,
    "referenced_private_artifacts_checked": 7,
    "referenced_artifact_hash_and_mode_mismatches": 0
  },
  "task24": {
    "command": "PYTHONDONTWRITEBYTECODE=1 PYTHONHASHSEED=0 TZ=UTC UV_OFFLINE=1 .venv/bin/python -B -m pytest -q -p no:cacheprovider -m integration tests/gateway/test_task24_preflight_integration.py",
    "result": "2 passed, 1 deselected in 0.18s",
    "isolation": "Each full-path and terminal-replay invocation is executed by the candidate test harness in bwrap --unshare-net against a copied tmp_path fixture.",
    "full_path_exact_real_handler_counts": {
      "callback_ack_count": 12,
      "card_edit_count": 12,
      "customer_send_count": 1,
      "staff_send_count": 2,
      "draft_created_event_delta": 2,
      "draft_edited_event_delta": 1,
      "draft_approved_event_delta": 1,
      "draft_sent_event_delta": 1,
      "new_draft_count": 2,
      "new_review_card_count": 2,
      "terminal_child_card_count": 1,
      "terminal_delivery_status": "sent_audited",
      "stale_repeat_wrong_role_extra_durable_mutations": 0,
      "stale_repeat_wrong_role_extra_customer_sends": 0,
      "post_restart_duplicate_sends": 0
    },
    "terminal_replay": {
      "customer_send_count": 0,
      "durable_state": "sent_audited",
      "durable_state_changed": false,
      "network_calls": 0
    }
  },
  "task25": {
    "command": "bwrap --unshare-net ... .venv/bin/python -B -m pytest -q -p no:cacheprovider selected owner-v1 preclean, cleanup-fence, cleanup-race, and successor-binding tests",
    "result": "4 passed in 0.08s",
    "isolation": "The selected cleanup checks ran in bwrap --unshare-net with a read-only source tree and tmpfs /tmp; all state changes were confined to copied fixtures.",
    "checks": {
      "preclean_fixture_candidate_bound_private_and_sanitized": true,
      "future_callback_after_cleanup_rejected_without_send": true,
      "cleanup_wins_before_inflight_transport_and_finalization": true,
      "tampered_successor_archive_binding_rejected": true
    },
    "historical_archive_read_only_verification": {
      "valid": true,
      "archive_id": "2009ac177177839cefddb98f285e27fa",
      "archive_digest": "644d74b05bc8115f9e3aeeba035188da195a7de18f1bc737648931d64bf43bcf",
      "archived_scope_count": 23,
      "file_count": 106,
      "tree_aggregate_sha256_before_and_after": "0f64ba495fcb683a594709c9e6d2206c3f56cc5c8f02bfdbfb710759a46ef4c2",
      "manifest_sha256": "ca4811444e114a06749620b9a44e05c8bd62bc3223ec80b1b5740c832c4a84c1",
      "receipt_sha256": "e81a84a8584400401f83aace36283dee18660144ede11e854758e725796e7fb3",
      "source_draft_ledger_sha256": "509ba81dc6356134f61d31d33f664ca0531391c62abe7f785aeb51122a2fe4a1"
    }
  },
  "historical_artifact_index_integrity": {
    "task24_index_sha256": "4df0f8712887f2125e100ba8d7585914b7b8810a298c37f9a32584b31fabe04d",
    "task24_index_artifacts_checked": 7,
    "task25_index_sha256": "c3c40ff9406dbb2609ee7ef89be2fdc20fa139064b5d65e494c6efc8b2a80ed2",
    "task25_index_artifacts_checked": 5,
    "hash_or_mode_mismatches": 0
  },
  "non_actions": {
    "external_network_calls": 0,
    "telegram_mutations": 0,
    "provider_mutations": 0,
    "service_mutations": 0,
    "live_profile_mutations": 0,
    "delivery_mutations_outside_disposable_fixtures": 0,
    "git_actions": 0,
    "commit_push_release_activation_actions": 0
  },
  "privacy": "Redacted: no customer prose, raw callback data, route identifiers, credentials, or raw profile payloads are retained. Archive verification was read-only and reported only integrity digests."
}