I read this as implementation - I’ll inspect the sealed artifacts and service environment, build the isolated offline runtime, verify it without activation or mutation, and leave only the requested sealed evidence.


The sealed hashes and service interpreter are confirmed. I’m now creating a clean venv from that interpreter and attempting a normal dependency-resolved offline install from the trusted local cache; no source-path inheritance or PYTHONPATH overlay will be used.


The cache lacked one declared dependency, so the runtime now uses a private local dependency snapshot from the trusted service/profile environments rather than inherited paths; the two candidate distributions were then uninstalled and normally reinstalled from the exact wheels. Dependency checking is clean. I’m adding the independent verifier, then I’ll run parity, smoke, purity, and focused installed-wheel tests once.


The verifier now proves local wheel origins, 1,033 RECORD hashes, isolated imports, redacted actual-profile preflight with a byte/metadata inventory unchanged across the call, pure API drivers, and inactive service state. I’m at the final execution checks: four help surfaces and copied focused tests running against the installed wheel modules from outside both source trees.


All requested runtime checks are green. I’m sealing the three-file evidence set and performing the final post-seal re-verification and process/unit baseline check; no service has been started and no controller has been generated.


I read this as implementation - the isolated runtime is built, sealed, and verified without launch or live actions.

`READY_ISOLATED_RUNTIME`

- Runtime: `/home/cube/.hermes/profiles/dualcoachtest/.strict-runtime/dac4e812` (`0700`)
- Python: `/home/cube/.hermes/profiles/dualcoachtest/.strict-runtime/dac4e812/venv/bin/python`
- Service interpreter: `/home/cube/projects/richard/hermes-agent/.venv/bin/python`
- No `PYTHONPATH`, editable/source imports, system-site packages, or inherited dependency paths.
- Offline dependencies were privately copied from trusted existing venvs; no network or lock changes.

Exact wheel install command:

```bash
env -u PYTHONPATH UV_OFFLINE=1 /home/cube/.local/bin/uv pip install \
  --offline --no-deps \
  --python /home/cube/.hermes/profiles/dualcoachtest/.strict-runtime/dac4e812/venv/bin/python \
  '/home/cube/projects/richard/traning coach/.omo/evidence/task26/task26-strict-final-candidate-successor-v3-st_01a00f35/artifacts/hermes_agent-0.17.0-py3-none-any.whl' \
  '/home/cube/projects/richard/traning coach/.omo/evidence/task26/task26-strict-final-candidate-successor-v3-st_01a00f35/artifacts/physique_checkin_cli-0.1.0-py3-none-any.whl'
```

Origins and parity:

- `hermes-agent==0.17.0`
  - Direct URL: exact sealed Hermes wheel
  - SHA-256: `ee787fb...8ea742`
  - RECORD files: `983`, mismatches: `0`
- `physique-checkin-cli==0.1.0`
  - Direct URL: exact sealed profile wheel
  - SHA-256: `fb48a193...5560d`
  - RECORD files: `50`, mismatches: `0`

Verification:

- `pip check`: 111 distributions compatible
- Focused installed-wheel tests: `27 passed`
- All four help checks: exit `0`
- Actual-profile preflight: zero inventory mutation
- Config: mode `0600`, SHA-256 `f93106b...071af87`
- Redacted credential identity returned; token disclosure: `0`
- Membership/capability pure drivers passed
- Service: `inactive/dead/MainPID0`
- Runtime processes/transient units/customer/network/service actions: `0`
- Independent verifier: PASS, diagnostics clean

Evidence:

- Receipt: `.omo/evidence/task26/task26-isolated-runtime-dac4e812-st_01a0122b/runtime-receipt.json`
- Seal: `.omo/evidence/task26/task26-isolated-runtime-dac4e812-st_01a0122b/SEAL.json`
- Seal SHA-256: `6283a4cf71ba9982c8e75bce88f09997f6eb786a88b788f7858199aeaadb27a9`

Exact future command template, not executed:

```bash
systemd-run --user --unit=dualcoach-strict-observer-dac4e812 --collect --property=Type=exec /usr/bin/journalctl --user --follow --unit=hermes-gateway-dualcoachtest-strict-dac4e812.service --output=json-seq

systemd-run --user --unit=hermes-gateway-dualcoachtest-strict-dac4e812 --collect --property=Type=simple --property=WorkingDirectory=/home/cube/.hermes/profiles/dualcoachtest --setenv=HERMES_HOME=/home/cube/.hermes/profiles/dualcoachtest --setenv=VIRTUAL_ENV=/home/cube/.hermes/profiles/dualcoachtest/.strict-runtime/dac4e812/venv --setenv=PATH=/home/cube/.hermes/profiles/dualcoachtest/.strict-runtime/dac4e812/venv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin /home/cube/.hermes/profiles/dualcoachtest/.strict-runtime/dac4e812/venv/bin/python -m hermes_cli.main --profile dualcoachtest gateway run
```