# Strict-rerun customer-surface capture

This sealed harness performs no network, provider, product, service, config, live-state, OCR, Git, plan, todo, or ledger action. It captures exactly one operator-supplied local PNG/JPEG as protected evidence and emits a redacted metadata receipt. The receipt contains no customer answers and no delivered message text.

## Place the Mac screenshot on Linux

1. On the Mac, save the screenshot as a PNG or JPEG file.
2. Transfer it out-of-band (for example `scp`) into a private Linux directory owned by the operator. Example from the Mac:
   `scp '/Users/OPERATOR/Desktop/task26.png' 'cube@LINUX_HOST:/home/cube/private/task26-final.png'`
3. On Linux, run `chmod 600 /home/cube/private/task26-final.png` and use its **absolute Linux filesystem path** below. A screenshot pasted or attached in chat is not filesystem evidence and cannot be consumed by this harness.
4. Confirm visually that exactly one visible customer message matches the durable delivered text for provider message 232 at `2026-08-17T14:47:21.037712+09:00`. Do not run OCR.

## Exact future command template (one use)

```sh
python3 '/home/cube/projects/richard/traning coach/.omo/evidence/task26/task26-strict-rerun-customer-surface-capture-st_01a00ed6/capture.py' '/ABSOLUTE/LINUX/PATH/TO/task26-final.png' --attest I_ATTEST_EXACTLY_ONE_VISIBLE_MESSAGE_MATCHES_THE_DURABLE_DELIVERED_TEXT
```

Then independently verify:

```sh
python3 '/home/cube/projects/richard/traning coach/.omo/evidence/task26/task26-strict-rerun-customer-surface-capture-st_01a00ed6/independent_verify.py'
```

The first command refuses symlinks, hard links, executable/group/world-writable files, malformed/oversize/polyglot images, wrong image modes, and any second capture. It copies exact bytes atomically into a mode-0600 vault with complete-write and fsync durability.