I read this as implementation - I’ll inspect the prior authority/evidence and current closure, then build and fully verify a distinct immutable V13 package without touching live state.


The V12 lifecycle and V13 scaffolding are present, but this source tree is a detached working copy rather than an active Git worktree. I’m now deriving V13 from the sealed V12 format and binding the rollback evidence plus the weekly-authority delta.


The V13 verifier contract is now test-driven and enforces distinct roots, semantic weekly authority, exact V12 consumed/rolled-back/postcommit evidence, and non-reusable V12 approval. I’m freezing the detached documents next, then the read-only clone-based preflight will produce the only mutable output.


The distinct V13 preflight completed against the live read-only boundary and clone-only rehearsal helper, producing digest `5f75774f...73836`; no authorization was consumed. I’m at the full verification phase now, before writing the self-excluding immutable package manifest.


The package is frozen and the read-only verifier passes. I’m doing one final non-mutating static/verifier replay after the last regression-test cleanup so the reported results all correspond to the exact sealed hashes.


I read this as implementation - V13 is frozen, verified, and awaiting new authorization with live state unchanged.

## Result

- Status: `FROZEN_AWAITING_NEW_AUTHORIZATION`
- Verifier: `V13_WEEKLY_AUTHORITY_PRESEAL_VERIFIED`
- Package digest: `25ca8f7708eb5c30d43984af8f73ebeafe191b7faeee37de1e7aead2bf7baae4`
- Approval phrase, **not executed**:
  `AUTHORIZE NUTRICOACH V1.5 LIVE UPGRADE 25ca8f7708eb5c30d43984af8f73ebeafe191b7faeee37de1e7aead2bf7baae4`

## Hashes

- Package SHA-256: `71c3dd0078ceceda56491ead201f124352394502d28c74c7f5055217984e3614`
- Preseal content digest: `6d4b80489dd33cbc7f4f79c682fb30d56ac0a2bb35685c0eec95932e00dfe188`
- Package manifest SHA-256: `fb629bba68ce4ccbcea108dc780502946697ce1e97f33a899d344eb9889f1311`
- V13 verifier SHA-256: `3fb87ca86907cae88ab6108d2b0b2c24fd8b448f091f3450c4a06b5f2f09b030`
- Controller source manifest SHA-256: `accfb84bdb403ae5d564f66376a5241bd3040ab07ef07b2cf3cbbda9c620e656`
- Controller closure digest: `sha256:0b4d2c01391e3b3a67d2aa7a8593b1a9541e7532590a8f6484c7c7e09cb651a5`
- Controller derivation: `7fb5e288a0d14742cc14ef07ab67573aaa8e3e998bcb71246f0a1f47cd164242`
- Sealed target SHA-256: `7370967fb5ca036bada3374c185e626e807d4113377c381dcdf8c29e76d7c869`

## Roots

- Preflight: `/home/cube/.hermes/migrations/nutricoach-v1.5.0-combined/preflight-v13-weekly-authority`
- Preseal: `/home/cube/.hermes/migrations/nutricoach-v1.5.0-combined/live-transaction-preseal-v13-weekly-authority`
- V13 ledger leaf: absent
- V13 execution leaf: absent
- No rehearsal or live execution was performed.

## Live equality

Service before and after:

- `ActiveState=active`
- `SubState=running`
- `MainPID=3470183`
- `ExecMainStartTimestampMonotonic=2437286710935`

Critical hashes before and after were identical:

- Config: `e9ee8f1c3a4913bcde64f4832dcbec6620173ca0de39ffd1a32c4b0c55c6a162`
- Registry: `bd61ed95f80737ba8013db262fd0242a600e540f43f6627f5b9708a599660b29`
- Unit: `90fbab66354811448427286b87f0305955a25df8f08a202a15b5ac3541700af7`
- Drop-in: `33bc59bdaf6a4261abc7ce43ae7faf452f724353ee24f6a54b2a92ed5b1ca0d8`
- Successor runtime remains absent.

## Verification

- All `test_nutricoach_v150*.py`: `79 passed`
- Ruff format: `44 files already formatted`
- Ruff lint: `All checks passed`
- basedpyright: `0 errors, 0 warnings, 0 notes`
- ty: `All checks passed`
- No-excuse: `no violations in 44 file(s)`
- LSP: no diagnostics on controller, weekly authority, and V13 verifier
- V13 verifier: passed on final frozen hashes

The regression suite now explicitly denies:

- V12 approval reuse
- V12 authorization/execution path rebinding
- Weekly-authority closure tampering

## Preseal files

`README.md`, `authorization-consumed.json`, `controller-derivation.json`, `controller-source-manifest.json`, `package-manifest.json`, `package-supersession.json`, `phase-rolled-back.json`, `postcommit-rollback-receipt.json`, `predecessor-package-supersession.json`, `sealed-target.json`, `superseded-predecessors.json`, `target-contract.json`, `transaction-plan-v13.json`, `v12-preseal-manifest.json`, `v12-terminal-outcome.json`, `v7-reference-sources.json`, `verification-evidence.json`, `verifier-source.json`.

Preflight files:

`awaiting-authorization.json`, `clean-boundary.json`, `migration-dry-run.json`, `package.json`, `red-to-green.json`, `rollback-rehearsal.json`, `snapshot-after.json`, `snapshot-before.json`.

Source additions/adjustments include the V13 verifier and regression test, plus Ruff formatting of the newly introduced weekly-authority fixture/module/support/tests. No commit or push was made.

## Blockers

None. The supplied source directory has no active `.git` metadata, but this did not block closure hashing, package construction, or verification.