{"authentication":{"candidate_digest_recomputed":"pass","candidate_manifest_declared_entries":"pass","checkpoint_required_fields":"pass","declared_head":"pass","post_execution_candidate_drift":0,"referenced_hashes_modes_types":"pass","status_snapshot_hash_and_count":"pass"},"candidate_digest":"c3b1ea6877bc1a2ecc510de70610552fd397e13a73719df4bb82a943f2373f95","checkpoint_sha256":"079adecbea34e80c69e3536dfb25472bc97b389ae141e32b87afe783a21a0563","controls":{"bwrap_execution":{"deselected":1,"network_namespace":"unshared","passed":2,"status":"pass"},"bwrap_real_handler_attestation":{"status":"fail"},"candidate_completeness":{"required_unbound_inputs":2,"status":"fail","unbound_runtime_caches":4},"cleanup_fence":{"post_cleanup_sends":0,"status":"pass","terminal_state":"held"},"fixture_integrity":{"destination_records":3,"hash_mode_symlink_mismatches":0,"source_records":3,"status":"pass"},"fixture_successor_derivation":{"status":"fail"},"offline_unit_set":{"deselected":2,"passed":15,"status":"pass"},"owner_authority_schema_cas_receipt_bindings":{"status":"pass"},"production_wheel":{"double_build_identical":true,"installed_entrypoint":"pass","members":9,"retained_wheel_identical":true,"sha256":"db3409f30e1986ccaacd9e8415e08cbd61252b977ec8ce33e78a66b95968ebbf","status":"pass"},"receipt_privacy":{"status":"pass"},"static_runtime_closure":{"entries":6,"forbidden_matches":0,"status":"pass","unexpected_dynamic_project_modules":0},"successor_projection_hash_chain":{"forbidden_matches":0,"records":3,"status":"pass"},"task22_permissions_and_hashes":{"mismatches":0,"status":"pass"}},"mode_required":"0600","operations":{"delivery_actions":0,"external_network_calls":0,"git_commands":0,"git_mutations":0,"live_profile_mutations":0,"live_profile_reads":0,"product_source_edits":0,"service_actions":0,"telegram_or_provider_actions":0},"privacy":{"raw_callback_data":false,"raw_customer_or_model_text":false,"raw_route_identifiers":false,"secrets":false},"quality_scope_note":"Only the checkpoint-declared source type-check and compile scopes were used; unrelated repository-wide quality was not used for this security verdict.","recorded_at_utc":"2026-08-14T08:30:41Z","schema":"task26-owner-v1-final-security-privacy-reaudit-v1","sealed_inventory_sha256":"31f1118c224285e7ddf82c2901c3885a2eda105d882f763ed8c113cd909eb56f","security_blockers":[{"code":"UNBOUND_EXECUTABLE_INPUTS","detail":"The wheel build executable and the candidate-seal test used by the declared verification lane are absent from the candidate manifest and checkpoint hash graph.","gate_ids":["TFV1-CLOSURE-001","TFV1-CANDIDATE-001"],"paths":["scripts/reproducible-wheel-build","tests/test_owner_v1_candidate_seal.py"]},{"code":"UNBOUND_RUNTIME_BYTECODE","detail":"Four executable bytecode cache leaves exist under the source package, are not candidate-bound, and can be read by the source-based bwrap handler execution.","gate_ids":["TFV1-CLOSURE-001","TFV1-CANDIDATE-001"]},{"code":"SYNTHETIC_HANDLER_COUNTS","detail":"The bwrap harness passes callbacks to the gateway, but its card generation, acknowledgement, card-edit, staff-send, draft, and review-card counts are test-local counter increments rather than outcomes produced by a production handler. The passing bwrap tests therefore do not satisfy the sealed real-handler matrix.","gate_ids":["TFV1-FIXTURE-001","TFV1-REGRESSION-001"]},{"code":"FIXTURE_DERIVATION_NOT_EXECUTABLE","detail":"The fixture builder creates an independent synthetic state and embeds fixed successor hash metadata; it does not consume or deterministically project the authenticated successor records. Hash linkage passes, but fixture derivation from the successor projection is not established.","gate_ids":["TFV1-ARCHIVE-001","TFV1-FIXTURE-001"]}],"status":"SECURITY_REPAIR_FAIL","verdict":"FAIL"}