I read this as a read-only final security audit of the v19 candidate - I will inspect the candidate artifacts and provenance, reattack each named authorization and lifecycle path, run only offline verification, and report a verdict with the ledger correction.


I read this as a final offline security audit of the sealed v19 candidate - I am verifying the candidate artifacts and executing focused revocation and authority-path reattacks without modifying them.


type: cancelled

previous_status: running

reason: Candidate invalidated by production capability CLI and direct service-start authority bypasses