I read this as hands-on QA execution - I will derive and expand the test matrix, run the mandated high-risk checks only in disposable clones, preserve evidence, and report the verified verdict.


I read this as a decisive read-only regression audit - I will independently inspect the live registry and all non-mutating V13 preflight predicates, then identify any separate blockers without executing the controller.


message: WebSocket error

stop_reason: error


I read this as a new integrity blocker in the read-only audit - I will identify the exact sealed-closure drift and distinguish it from the independently confirmed registry rejection.


I read this as a release-goal audit - I independently confirmed the live blockers and completed clone-only QA evidence/cleanup.

<verdict>FAIL</verdict>

- Decisive blocker: live registry has 2 customers but only 1 enabled. Frozen V13 builder rejects this as `weekly_authority:disabled_customer_startup_contract`.
- Independent reproduction: exact frozen builder on a disposable copy of the live registry denied before creating authority state.
- Additional blocker: current source has drift in 7/43 sealed-closure files; the V13 verifier now fails with `closure_drift`. Preseal package entries remain intact (0/17 drift).
- No other read-only live blocker found: protected preflight, clean boundary, capacity postimage, Inbox OFF, absent V13 roots/successor, and predecessor service state all passed.
- Clone QA: 34 scenarios planned (P0 15, P1 11, P2 8), 6 augmentations; all 15 P0 and 7 selected P1 clone scenarios passed. Targeted clone suite: `79 passed`.
- Live mutable hashes matched the pre-QA baseline; no live execute, provider, Telegram, network, systemd mutation, profile mutation, or customer mutation occurred.
- Disposable clone cleanup confirmed: `/tmp/nutricoach-v13-qa-st_01a0484d` absent.

Evidence:
- `.../st_01a0484d-v13-hands-on-qa/goal-audit.md`
- `live-read-only-preflight-audit.json`
- `disposable-live-registry-builder-denial.json`
- `source-closure-drift.json`
- `hands-on-results.json`
- `targeted-pytest-clone-remapped.txt`
- `commands.json` and `evidence-index.sha256`