{"approved_actions_if_and_only_if_all_blockers_closed":["authenticated archive-first pre-reset","controlled exact-candidate wheel deployment/service rebind","exactly one canonical invite","one actor private-DM Start","bounded normal-path synthetic lifecycle and exactly one explicit delivery","final disable","authenticated archive-first cleanup reset"],"approved_non_actions":["no product/test/profile/runtime/archive/service/Git mutation","no service start/stop/reset-failed","no install/deploy/rebind","no process or lock removal","no invite creation","no observer/watcher start","no Telegram request/message/getUpdates/cursor action","no provider/network request","no reset/cleanup/restore/prepopulation","no arm/controller action"],"blockers":[{"detail":"/home/cube/.hermes/profiles/dualcoachtest/gateway.lock remains for absent PID 4091167. The no-lock prerequisite is false; removal is a mutation and was not authorized for this preflight.","id":"B1_STALE_GATEWAY_LOCK"},{"detail":"No permission-sealed archive-first reset executable compatible with the current customer-bootstrap ledger and candidate 2e is present. The candidate wheel omits reset modules; the retained predecessor implementation is unsealed/mutable and its scope contract omits telegram-customer-bootstrap-v1.","id":"B2_RESET_ARTIFACT_MISSING_OR_INCOMPATIBLE"},{"detail":"Exact current provider readiness cannot be proven under the permitted no-state-change boundary. The supported active Codex probe is billable and always persists profile receipt/index changes; historical auth evidence is stale and candidate-mismatched.","id":"B3_PROVIDER_AUTH_NOT_READONLY_PROVABLE"},{"detail":"Golden Path and Recovery Runbook still identify candidate 19ed0e... and planned interfaces, so no sealed exact-candidate deployment/reset/rollback procedure exists for 2e0894.../af4a9d0a....","id":"B4_RUNBOOKS_NOT_REBOUND"},{"detail":"All five archive roots are private and unreachable, and Task25 v4 is bound. However, four predecessor archive schemas cannot be conclusively reverified with a current sealed executable: candidate 2e omits the reset/verifier module and the retained predecessor verifier does not cover the current v4/schema set.","id":"B5_ALL_HISTORICAL_ARCHIVES_NOT_CONCLUSIVELY_REVERIFIED"}],"candidate_digest":"2e0894eac92bc396cc4723bf1f18ebc653b95018dd41574df435941c235da925","checks":[{"evidence":"ledger event same-actor-live-rehearsal-authorized; plan SHA matches 7ace03c6dad33d2fc3ef223621cbca68a150fde8429932138e252fb8498ac582","id":"authorization","status":"PASS"},{"evidence":"sealed verifier exit 0; candidate 2e0894eac92bc396cc4723bf1f18ebc653b95018dd41574df435941c235da925; immutable 0500/0400 tree","id":"candidate_integrity","status":"PASS"},{"evidence":"SHA af4a9d0a1ffffb6eb7551c1d6dc2b32853ca6d024332a4f8f5702bbf992f141b; ZIP CRC clean; py3-none-any; Python >=3.11,<3.14; hermes and dualcoach_admin entry points present","id":"wheel_integrity_executable","status":"PASS"},{"evidence":"wheel can be read from sealed 0400 candidate and installed into separate/current runtime without writing candidate; current installed controller bytes differ and require rebind","id":"candidate_nonmutation_deployability","status":"PASS_WITH_BLOCKED_EXECUTION"},{"evidence":"systemd inactive/dead MainPID=0 Result=success and no profile process/open flock/watcher, but profile/gateway.lock exists mode 0600 for absent PID 4091167","id":"service_process_state","status":"FAIL"},{"evidence":"3/3 terminal EXPIRED; claims=0; recovery_attempts=0; no live invite","id":"bootstrap_sessions","status":"PASS"},{"evidence":"registry=0; room bootstrap=0; service states=0; publication normal/emergency=0; cron=0; no live customer-state/generation/draft/card/delivery authority files","id":"live_authorities_empty","status":"PASS"},{"evidence":"no live delivery ledger/outbox records and no unknown_delivery/pending provider result in current lifecycle authorities","id":"delivery_provider_outcomes","status":"PASS_FOR_DURABLE_EMPTY_STATE"},{"evidence":"actor 8527916639 differs from owner/operator 8693203710; bootstrap contract requires private DM Start; staff review route is group topic and operator card route is owner DM; no trainer route in current candidate acceptance","id":"actor_and_topology","status":"PASS"},{"evidence":"Privacy/unreachability is proven and Task25 v4 is candidate-bound, but the four earlier live archives have only self-contained manifests/receipts; no currently sealed compatible verifier exists to recompute and authenticate every schema.","id":"historical_archives","status":"FAIL_INCONCLUSIVE_ALL_ARCHIVES"},{"evidence":"two consecutive content/mode snapshots stable: physique-coach e04e3a0a953346f767863a1a6d8227907c68853ae5a8e0ae0573ecba5107ed84; quarantine 9ec0b0f36c63cf0840a0b01b7a3070e183579acb5a41eab1c0b9840f3f7ecf3c","id":"other_profiles_stable","status":"PASS"},{"evidence":"candidate uses drop_pending_updates=False for polling/webhook deletion; plan forbids raw getUpdates and cursor edits; normal gateway ingress receipts remain authority","id":"ingress_backlog_plan","status":"PASS"},{"evidence":"openai-codex cannot be conclusively authenticated locally; active proof is billable and provider_auth_check always writes a receipt plus index. Existing latest receipt is historical and bound to candidate digest f9a461..., not exact candidate 2e0894...","id":"provider_auth_readonly_preflight","status":"FAIL"},{"evidence":"candidate wheel/source contain no gateway.platforms.rehearsal_reset or hermes_cli.rehearsal_reset; retained predecessor module is mutable mode 0664 and supports stale scope contract that omits telegram-customer-bootstrap-v1; Task25 controller is one-use/hard-coded to old terminal state and source paths","id":"archive_first_reset_artifact","status":"FAIL"},{"evidence":"Golden Path and Recovery Runbook metadata remain bound to candidate 19ed0e... and label reset/provider interfaces planned; no exact 2e deployment/reset/rebind sequence is sealed","id":"runbook_rebind","status":"FAIL"},{"evidence":"filesystem authority ledgers can be watched with an event subscription established before invite creation; normal gateway receipt/ledger observers can be established before private-DM Start; no observer was started","id":"pre_action_observers","status":"PASS_CAPABILITY_ONLY"},{"evidence":"cannot approve bounded pre/post reset or rollback commands until an exact-layout permission-sealed reset implementation exists and stale gateway lock is reconciled under separate authorization","id":"bounded_rollback_cleanup","status":"FAIL"}],"inputs":{"candidate_checkpoint":{"mode":"0400","nlink":1,"path":".omo/evidence/task26/task26-repaired-archive-successor-2e0894eac92bc396cc4723bf1f18ebc653b95018dd41574df435941c235da925/candidate-checkpoint.json","sha256":"5ae5b75bc10fdbe86d13d18f9204b5a4def17d5c5b6dc90da5fb8534fccea102","size":975},"candidate_manifest":{"mode":"0400","nlink":1,"path":".omo/evidence/task26/task26-repaired-archive-successor-2e0894eac92bc396cc4723bf1f18ebc653b95018dd41574df435941c235da925/candidate-manifest.json","sha256":"7b6d0d6e275426fada6bc585989052e03fdc056587fc2051764e47c61756752d","size":128217},"candidate_verifier":{"mode":"0400","nlink":1,"path":".omo/evidence/task26/task26-repaired-archive-successor-2e0894eac92bc396cc4723bf1f18ebc653b95018dd41574df435941c235da925/verify_candidate.py","sha256":"b852482350129dd025f0c4c79539e04a71c4758c9ec336e2c5bcda44676791f6","size":16883},"candidate_verifier_input":{"mode":"0400","nlink":1,"path":".omo/evidence/task26/task26-repaired-archive-successor-2e0894eac92bc396cc4723bf1f18ebc653b95018dd41574df435941c235da925/verifier-input.json","sha256":"cd9e080ab886d503a205e7a7335eb23942b161daeaa2028a6e8f63492a99ba68","size":509},"cron_jobs":{"mode":"0600","nlink":1,"path":"/home/cube/.hermes/profiles/dualcoachtest/cron/jobs.json","sha256":"01e031381f53f4ad30d03d771dc64c7449ff6e6845d5fb661fd2c4c1dd5473ce","size":68},"customer_bootstrap_ledger":{"mode":"0600","nlink":1,"path":"/home/cube/.hermes/profiles/dualcoachtest/data/onboarding/telegram-customer-bootstrap-v1/ledger.json","sha256":"7004dac922f92f7eaf55e7e9dc4aa740b8e4f467ff1229365c5e291d121cdae9","size":3627},"freeze_receipt":{"mode":"0400","nlink":1,"path":".omo/evidence/task26/task26-repaired-archive-successor-freeze-2e0894eac92bc396cc4723bf1f18ebc653b95018dd41574df435941c235da925.json","sha256":"002c8c64e79d757b38c13251475ec2b6a5ff70c0fc01222cf29066a060fbd521","size":1876},"gateway_lock":{"mode":"0600","nlink":1,"path":"/home/cube/.hermes/profiles/dualcoachtest/gateway.lock","sha256":"28420d4aa8fc1ee1298c9fe93a69e47aa187c0d2777ca672fb603cfbebc569cf","size":297},"gateway_state":{"mode":"0600","nlink":1,"path":"/home/cube/.hermes/profiles/dualcoachtest/gateway_state.json","sha256":"82d467407a1a0041543686c7c1ad7f3932ccfac26411245e83ffaa1ebb4e1c45","size":558},"golden_path":{"mode":"0664","nlink":1,"path":".omo/evidence/dualcoach-golden-path-contract.md","sha256":"32a379d855c6e5af978bd9886e3bf49c616c7c20f1c1d5f100c19d8adfc5eb4a","size":10935},"ledger":{"mode":"0664","nlink":1,"path":".omo/start-work/ledger.jsonl","sha256":"81706f4472f92dd1b7cc446c7e09b5e11bdfafe96a07af8211b4df47c4d19920","size":201565},"plan":{"mode":"0664","nlink":1,"path":".omo/plans/dualcoach-production-readiness.md","sha256":"7ace03c6dad33d2fc3ef223621cbca68a150fde8429932138e252fb8498ac582","size":49814},"provider_index":{"mode":"0600","nlink":1,"path":"/home/cube/.hermes/profiles/dualcoachtest/data/dualcoach-provider-auth/index.json","sha256":"b65af48f39be0e0179e8bf5e606053cdd8b08032862f9655ed0c433ab561c40b","size":297},"publication_emergency":{"mode":"0600","nlink":1,"path":"/home/cube/.hermes/profiles/dualcoachtest/data/onboarding/telegram-publication-outbox-v1/emergency.json","sha256":"8df495c29a91042a06dc8824092760b999408328d972639595bbbc9083a50e48","size":78},"publication_outbox":{"mode":"0600","nlink":1,"path":"/home/cube/.hermes/profiles/dualcoachtest/data/onboarding/telegram-publication-outbox-v1/ledger.json","sha256":"8df495c29a91042a06dc8824092760b999408328d972639595bbbc9083a50e48","size":78},"recovery_runbook":{"mode":"0664","nlink":1,"path":".omo/evidence/dualcoach-recovery-runbook.md","sha256":"ae2f5f9046c06f8f0b42693be5aa0d9c31cada8024ae1e5ab8ba19a3cf10f6fc","size":10238},"registry":{"mode":"0600","nlink":1,"path":"/home/cube/.hermes/profiles/dualcoachtest/customers/registry.json","sha256":"9eb1b5ae0e511dbafbed6b683ec7baa2ffb15518637d8ad63200567c4009a518","size":163},"room_bootstrap_ledger":{"mode":"0600","nlink":1,"path":"/home/cube/.hermes/profiles/dualcoachtest/data/onboarding/telegram-room-bootstrap-v1/ledger.json","sha256":"87a6df5656fdfd1b66806c63034df9205279d12f7093fe47a76c0fd1094b70ff","size":138},"service_state":{"mode":"0600","nlink":1,"path":"/home/cube/.hermes/profiles/dualcoachtest/data/owner-actions/customer-service-state.json","sha256":"81c1e581cb84aac6f44044747e0e8e77a2d7498c71d626f1f9b5ec2f9d09a261","size":135},"systemd_unit":{"mode":"0664","nlink":1,"path":"/home/cube/.config/systemd/user/hermes-gateway-dualcoachtest.service","sha256":"0b46e887fc12c45f12814f4ef025c10101ed36e5df0ac35f70abb1862c0c1db2","size":918},"task25_controller":{"mode":"0700","nlink":1,"path":".omo/evidence/dualcoach-task-25-cleanup-controller.py","sha256":"81b036bac5273945ce042befe4a738f729efeea5fd3cca87f393268ab7003527","size":26278},"task25_evidence":{"mode":"0600","nlink":1,"path":".omo/evidence/dualcoach-task-25-evidence.json","sha256":"3e4a89c954652e7bcc260e7bf7edcd993674cc02a3f49be0584bb2e7ec8f9919","size":3590},"task25_index":{"mode":"0600","nlink":1,"path":".omo/evidence/dualcoach-task-25-evidence-index.json","sha256":"c3c40ff9406dbb2609ee7ef89be2fdc20fa139064b5d65e494c6efc8b2a80ed2","size":2357},"wheel":{"mode":"0400","nlink":1,"path":".omo/evidence/task26/task26-repaired-archive-successor-2e0894eac92bc396cc4723bf1f18ebc653b95018dd41574df435941c235da925/artifacts/hermes_agent-0.17.0-py3-none-any.whl","sha256":"af4a9d0a1ffffb6eb7551c1d6dc2b32853ca6d024332a4f8f5702bbf992f141b","size":8105936}},"privacy":"private redacted; no secrets, invite token, raw customer content, provider token, or Telegram message body","ready_for_archive_first_pre_reset":false,"recorded_at_utc":"2026-08-15T12:00:36.332935Z","schema":"task26-same-actor-readonly-preflight-receipt-v1","task_id":"st_01a00547","verdict":"FAIL","wheel_sha256":"af4a9d0a1ffffb6eb7551c1d6dc2b32853ca6d024332a4f8f5702bbf992f141b"}