{
  "schema": "task26-provenance-v5-aborted-snapshot-drift-v1",
  "recorded_at_utc": "2026-08-14T10:01:06Z",
  "verdict": "FAIL",
  "verdict_scope": "Task26 v5 final provenance audit stop record. No authoritative PASS, final candidate graph, release binding, or Task27 action is created.",
  "candidate": {
    "digest": "80700cc03e0e94ed065d45b4a647316d0cdd1ae5b5a9a39e8a36ad1460b9a2a6",
    "candidate_manifest_sha256": "963e44c1c8caf76cd232e3304e294e3c2d856e732843beb27fe4d9dbb9ec06d3",
    "snapshot_root": "/home/cube/projects/richard/hermes-agent/.task26-owner-v1-snapshots/task26-owner-v1-80700cc03e0-v5",
    "snapshot_manifest_sha256": "dd6c2a43f0fff219013e55d26b701a37b3ccda65db950d06e16667f1e32ed319",
    "snapshot_digest": "b8130f69307992ec7b886c013b39f7dc2a063a4ab227c254a79d0336333d6290",
    "readiness_checkpoint": {
      "path": "snapshot/bindings/task26-owner-v1-v5-readiness-checkpoint.redacted.json",
      "sha256": "4d6786815153c3dff9dc97e0d835bfb30e5ce19ba43f34a0ca6e3c9b4447c352",
      "bytes": 2541,
      "mode": "0400"
    }
  },
  "authenticated_before_abort": {
    "snapshot_inventory_and_graph": "PASS before subsequent drift: 52 committed leaves, append-only graph hash 2c8f028d, graph digest 3bbf7aed, and no symlinks/cache leaves",
    "historical_scope_limits": "PASS: graph retains 124 historical receipts, 21 adverse/superseded records, and explicitly does not claim Task22-25 lifecycle execution on v5",
    "historical_mode_correction": "PASS: 58 ordinary references match; the sole 0700-to-0600 verifier-mode difference is the sealed append-only correction with unchanged bytes and no historical rewrite",
    "synchronization_inputs": "PASS_AS_PREPARED_ONLY: handoff/ledger inputs are correctly pinned but explicitly prepared_no_mutation, not applied synchronization",
    "candidate_wheel_fixture_successor_and_closure": "PASS before abort in disposable/read-only checks"
  },
  "blocking_findings": [
    {
      "code": "DUAL_DIGEST_NOT_REPRODUCIBLE_FROM_SEALED_SNAPSHOT",
      "severity": "blocking",
      "detail": "The stored dual-digest agreement claims candidate 80700cc, but an independent read-only execution of the committed recompute_candidate_digest.py against the committed absolute wheel returns a4447c19868833ed59d3dae7d36496ea3c29003641ea4543ffa51b80870404b8. The recomputation consumes the seal-normalized 0400 leaf modes while the candidate algorithm includes original candidate modes. The dual digest therefore cannot be independently reproduced from the immutable snapshot."
    },
    {
      "code": "SNAPSHOT_PERMISSION_DRIFT_DURING_AUDIT",
      "severity": "blocking",
      "detail": "A direct seal_candidate.py invocation against the sealed snapshot was erroneous and failed before wheel build because the sealed build executable is 0400. Before failing, it changed owner_v1 and release directories from 0500 to 0700 and production-roots.json from manifest-committed 0400 to 0600. The production-roots bytes remain unchanged, but the immutable-snapshot permission commitment no longer authenticates. No restoration was attempted."
    },
    {
      "code": "FIVE_FINAL_LANES_PENDING",
      "severity": "blocking",
      "detail": "The candidate-v5 readiness checkpoint and binding graph both explicitly state that objective, quality, security/privacy, hands-on QA, and provenance independent candidate-v5-bound PASS receipts are pending and task26_pass is false."
    },
    {
      "code": "SYNCHRONIZATION_NOT_APPLIED",
      "severity": "blocking",
      "detail": "Handoff and ledger are deliberately only baseline-pinned prepared_no_mutation inputs. They remain NO-GO and no authorized synchronization has occurred."
    }
  ],
  "atomic_graph_decision": {
    "authoritative_final_graph_created": false,
    "readiness_binding_graph_retained": {
      "path": "snapshot/bindings/task26-v5-append-only-candidate-binding-graph.redacted.json",
      "sha256": "2c8f028db30183162de11222c431a03b4f4e566a8f25842194e85e4a0e17dd11",
      "bytes": 46923,
      "mode": "0400"
    },
    "reason": "Fail-closed: fresh dual-digest reproducibility, immutable permission authentication, all five final lane PASS receipts, and synchronization are absent."
  },
  "preservation_state": {
    "manifest_bytes_unchanged": true,
    "production_roots_bytes_unchanged": true,
    "production_roots_expected_mode": "0400",
    "production_roots_observed_mode": "0600",
    "owner_v1_directory_observed_mode": "0700",
    "release_directory_observed_mode": "0700",
    "candidate_moves_or_deletions": 0,
    "restoration_attempted": false
  },
  "non_actions": {
    "git_actions": 0,
    "task27_actions": 0,
    "live_profile_service_telegram_provider_delivery_actions": 0,
    "network_actions": 0,
    "candidate_moves_or_deletions": 0,
    "candidate_byte_writes": 0
  },
  "redaction": "No customer prose, model output, raw callback data, route identifiers, credentials, or live-profile payloads are included.",
  "mode_required": "0600",
  "receipt_digest": "9c7ed9f0594364970b5bd8577837726d6232b24b58dbcb49da544ce59b07c512"
}