{
  "schema": "task26-provenance-e880-security-v3-supersession-v1",
  "recorded_at_utc": "2026-08-14T09:13:32Z",
  "verdict": "FAIL",
  "verdict_scope": "Task26 provenance supersession only. e880 is barred from final provenance PASS; this receipt creates no authoritative graph, candidate seal, release binding, or Task27 action.",
  "candidate": {
    "snapshot_digest": "e880717efeb8c56b81fe80454263f4b8b25f6aec7f4c3c01e2a6d03f159c59ed",
    "snapshot_manifest_sha256": "c9fdac787b46ad1575de4300bb3aacba28901eb1821459972721e1efc84e689b",
    "source_candidate_digest": "96e1a264fedca02b6fd47417fea08d5f1df617f9fe1448cc050b055c4d8c678e",
    "classification": "SUPERSEDED_NON_AUTHORITATIVE_AFTER_SECURITY_V3_FAIL",
    "v3_checkpoint": {
      "path": ".omo/evidence/task26/task26-owner-v1-recovery-readiness-checkpoint-v3.redacted.json",
      "sha256": "13143e28934a331a671bc89cadd6cdf05848e676bd58ef093f92d4a1ae940b0c",
      "bytes": 2353,
      "mode": "0600"
    }
  },
  "security_v3": {
    "path": ".omo/evidence/task26/task26-owner-v1-final-security-privacy-reaudit-v3.redacted.json",
    "sha256": "8975656a415151aa208be8345de1ff1ad092d92cbf3305b779f24446ad0753df",
    "bytes": 4238,
    "mode": "0600",
    "status": "SECURITY_REPAIR_FAIL",
    "blocker_codes": [
      "REAL_HANDLER_COUNTS_NOT_BACKED_BY_HANDLER_STATE",
      "ACKNOWLEDGEMENT_DOES_NOT_PRECEDE_DELIVERY_WORK"
    ],
    "blockers": [
      {
        "code": "REAL_HANDLER_COUNTS_NOT_BACKED_BY_HANDLER_STATE",
        "gate_ids": [
          "TFV1-FIXTURE-001"
        ],
        "detail": "The production-owned Task24 handler reports two new drafts and two draft-created event deltas, but its generation path only appends lightweight in-memory records. After the full path, durable gateway state still contains one draft and only the approval/send events. Acknowledgement and card-edit counts are likewise local booleans rather than emitted handler-boundary outcomes."
      },
      {
        "code": "ACKNOWLEDGEMENT_DOES_NOT_PRECEDE_DELIVERY_WORK",
        "gate_ids": [
          "TFV1-REGRESSION-001"
        ],
        "detail": "The handler calls the gateway before creating its acknowledgement outcome. During the eighth callback customer transport, only seven prior outcomes existed; the acknowledgement for the send callback was recorded only after transport returned."
      }
    ]
  },
  "prior_provenance_review": {
    "path": ".omo/evidence/task26/task26-provenance-final-e880717e-fail.redacted.json",
    "sha256": "f06d33f7cb4a8c82f75c6d84c0db4d77e7e9e42de46a556adb79a6ff24f08fc2",
    "bytes": 5412,
    "mode": "0600",
    "verdict": "FAIL",
    "classification": "retained and not rewritten; security-v3 provides an additional decisive supersession basis"
  },
  "snapshot_preservation": {
    "root": "/home/cube/projects/richard/hermes-agent/.task26-evidence/task26-owner-v1-96e1a264-recovered-v1",
    "root_mode": "0500",
    "snapshot_mode": "0500",
    "manifest_sha256": "c9fdac787b46ad1575de4300bb3aacba28901eb1821459972721e1efc84e689b",
    "manifest_mode": "0400",
    "entry_count": 37,
    "mutated": false
  },
  "preseal_abort": {
    "authoritative_v3_graph_created": false,
    "authoritative_provenance_pass_published": false,
    "candidate_sealed_or_moved": false,
    "candidate_deleted": false,
    "task27_started": false
  },
  "required_next_gate": "Do not reuse e880. Wait for a new immutable candidate checkpoint that closes both semantic blockers, then rerun every Task26 lane against that one stable snapshot and require all PASS before any authoritative provenance decision.",
  "non_actions": {
    "snapshot_mutations": 0,
    "candidate_moves_or_deletions": 0,
    "git_actions": 0,
    "live_profile_service_telegram_provider_delivery_actions": 0,
    "task27_actions": 0
  },
  "redaction": "No customer prose, model output, raw callback data, route identifiers, credentials, or live-profile payloads are included.",
  "mode_required": "0600",
  "receipt_digest": "053a09ddcbb5cbb13bc8c4c5e6b82a802857967db68d4057abf908183776ea3f"
}