I read this as a security review - I’ll inspect the candidate diff and receipt/callback paths, then run focused negative tests without editing.


type: cancelled

previous_status: running

reason: Source changed after discovering valid repeated acknowledgements must be idempotent; candidate digest will be regenerated.