{"authentication":{"atomic_candidate_observation":"fail","candidate_drift_observed":true,"candidate_root_present_at_final_authentication":false,"checkpoint_hash_mode_type":"pass","checkpoint_required_status":"pass","initial_referenced_hash_observation":"pass"},"candidate_digest":"96e1a264fedca02b6fd47417fea08d5f1df617f9fe1448cc050b055c4d8c678e","checkpoint_sha256":"489a601545cefe3313105eff06598eada48717af8b41712649be3a4af51f260f","controls":{"bwrap":"not_run_after_authentication_failure","candidate_graph":"not_run_after_authentication_failure","cleanup_fence":"not_run_after_authentication_failure","fixture":"not_run_after_authentication_failure","four_repaired_blockers":"not_adjudicated_after_authentication_failure","runtime_closure":"not_run_after_authentication_failure","sealed_inventory":"not_run_after_authentication_failure","task22":"not_run_after_authentication_failure","wheel":"not_run_after_authentication_failure"},"fail_rule_applied":"Any candidate drift or missing referenced leaf is a decisive failure before security execution.","mode_required":"0600","operations":{"delivery_actions":0,"external_network_calls":0,"git_commands":0,"git_mutations":0,"live_profile_mutations":0,"live_profile_reads":0,"product_source_edits":0,"service_actions":0,"task27_actions":0,"telegram_or_provider_actions":0},"privacy":{"raw_callback_data":false,"raw_customer_or_model_text":false,"raw_route_identifiers":false,"secrets":false},"recorded_at_utc":"2026-08-14T08:45:35Z","schema":"task26-owner-v1-final-security-privacy-reaudit-v2","sealed_inventory_sha256":"31f1118c224285e7ddf82c2901c3885a2eda105d882f763ed8c113cd909eb56f","security_blockers":[{"code":"CANDIDATE_DRIFT_DURING_AUTHENTICATION","detail":"The checkpoint-referenced candidate files existed and matched during the initial read, but the execution candidate root disappeared before the atomic graph and digest authentication completed. The checkpoint therefore cannot authenticate one stable candidate observation.","gate_ids":["TFV1-CLOSURE-001","TFV1-CANDIDATE-001"]}],"status":"SECURITY_REPAIR_FAIL","verdict":"FAIL"}