I read this as an independent verification audit - I will recompute and cross-check the sealed candidate without modifying it.


I read this as an independent immutable-candidate audit - PASS with no artifact mismatches.

- Candidate authority: `2e0894eac92bc396cc4723bf1f18ebc653b95018dd41574df435941c235da925`
  - Core: `a8d099d5372b1ac87c9b47e7d5b47c8bb4cdff7681e093bb3cd79d0303e6e88e`
  - Manifest SHA-256: `7b6d0d6e275426fada6bc585989052e03fdc056587fc2051764e47c61756752d`
  - Checkpoint SHA-256: `5ae5b75bc10fdbe86d13d18f9204b5a4def17d5c5b6dc90da5fb8534fccea102`
  - Freeze SHA-256: `002c8c64e79d757b38c13251475ec2b6a5ff70c0fc01222cf29066a060fbd521`
  - Full/core digest formula, checkpoint derivation, verifier-input pins, and freeze pins all recompute exactly.

- Immutable tree: 43 files (`0400`, single-link), 8 directories (`0500`), no symlinks.
  - Tree fingerprint: `2e6f8639a3863f6b86c50abffe6855c5ee1444fb133fe529ca55851dc52a15a8`
  - Content-tree fingerprint: `906b14127494e95600bd0ee9f7a0f9c1df3ce2ec827e3d717de5e585a394b91f`
  - Predecessor `653...`: 19 files, 7 directories; tree `69f79395...`, content tree `5d186291...`.

- Product parity with `653cc2f0...`:
  - Closure artifact SHA: `c3e443f0e3a14ac7a786c15e2d5aff4d368581f3e868e12ebae356adb3354380`
  - 2,374 entries; entries digest `7d7fb32d...`; byte-identical to predecessor.
  - Exact source delta: `[]`, canonical SHA `4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945`.
  - Wheel is byte-identical: `af4a9d0a...`, 8,105,936 bytes, 860 members, member digest `cf69ab35...`, reproducible timestamps only `(2000,1,1,00:00:00)`.
  - Status pre/post byte-identical: 1,294 NUL entries, `ca1ce270...`.

- Exact envelope-only delta:
  - Canonical envelope-delta digest: `68065f15e8b3cf45dd84d29afada9f7ebdd3f7ea4e746a7d6a47ef04dd8c1f69`.
  - Added exactly 24 files: one trainer binding plus 23 historical trainer-free leaves.
  - Changed exactly seven control/copy files: four regenerated candidate controls and three predecessor copies.
  - No removed paths; no product-source, wheel, archive, or reconciliation changes.

- Archive/reconciliation:
  - Archive binding raw SHA `0f388e58...`; binding digest `b6f459ad...`.
  - Archive canonical digest `644d74b0...`; 23 scopes; scope digest `86478968...`.
  - Reconciliation raw SHA `7594fcfc...`; 4 indexes, digest `419511b6...`; all copied index hashes match and `historical_execution_retargeted_to_successor=false`.

- Trainer-free v4:
  - Binding raw SHA `f63110ac...`; canonical binding digest `2e46a3ba...`.
  - 23 copied leaves, inventory digest `28a3761f...`.
  - Bundle has 21 physical input leaves / 20 self-excluding manifest entries; binding entry digest `bf11991c...`; bundle digest `d2e5d95a...`.
  - All 23 checkpoint fields are unique, `PASS_INPUT`, checkpoint-bound, and digest `c6f094d1...`.
  - The sole required absence control has all six count fields at zero; digest `ed230209...`.
  - Rehashed indexed inputs: 19 predecessor-envelope + 719 closure + 18 bundle receipt + 5 fixture + 2 contract leaves = 763/763 valid hash, size, mode, regular-file checks.

- Pin/recursion audit:
  - Current authority is only `2e...`: root name, manifest, checkpoint, verifier input, and freeze agree.
  - All trainer-free source pins are explicitly `653...`: binding, bundle, checkpoint, re-audit, input index, and runtime closure.
  - Both authority-denial flags are false; the old checkpoint says `SUCCESSOR_SEAL_INPUT_ONLY_NOT_TASK26_PASS`.
  - The current digest does not occur inside the historical trainer-free inputs, so there is no self-reference or historical candidate treated as current authority.
  - FAIL/unversioned artifacts are classified `superseded_history`; READY v3/v4 inputs are classified `successor_seal_input` but explicitly `READY_FOR_SUCCESSOR_SEAL_NOT_TASK26_PASS`, never current authority.

Verification commands included an isolated bundled verifier:

```bash
bwrap --die-with-parent --unshare-net --ro-bind / / --tmpfs /tmp \
  --setenv PYTHONDONTWRITEBYTECODE 1 \
  /usr/bin/python3 -B "$C/verify_candidate.py" "$C/verifier-input.json"
```

It returned `{"status":"PASS",...}`. Independent canonical-hash/tree/ZIP/index checks also returned `PASS` with 15/15 control groups clean.

No files were edited. No profile/runtime/archive/service/network/Telegram/provider/Git action occurred. The verifier ran read-only in a network-isolated bubblewrap sandbox; its tmpfs was discarded automatically.

`2e...` is ready for a fresh **current-candidate** trainer-free re-audit. It is not itself a Task26 PASS or release authority; the existing trainer-free re-audit remains correctly scoped to predecessor `653...`.