I read this as a read-only release audit - I’ll trace the candidate, preseal, and rehearsal artifacts end to end, verify every named invariant from immutable evidence, and return a decisive PASS/FAIL without invoking operational paths or modifying files.


I read this as finalizing the read-only audit - the static and retained rehearsal evidence is complete, so I’m running only the package’s declared read-only verifier and then rechecking that it created no bytecode or authority state.


I read this as a decisive release audit - I verified the sealed chain, recovery semantics, and retained rehearsal evidence without invoking any operational path.

# Final verdict: PASS

Candidate `8662b60d57023b909d8edfb56b84b11009affff1fd43b297134b188212acee07` and V14 r13 preseal satisfy the requested release gates.

## Immutable closure

- Candidate: 324/324 exact files; 0 missing, extra, hash-mismatched, writable, symlinked, or multiply-linked files.
- Candidate digest independently recomputed exactly as `8662b60d...acee07`.
- Preseal: 326/326 manifest entries plus the self-excluded manifest; 0 drift or writable files.
- Controller closure: 318/318 exact files, closure digest:
  `sha256:94327d25574251820adef635b1a1f1577665af52087ad3fafa150be58df0a3f1`
- Controller derivation independently recomputed:
  `5770528386d77850fd07b1d3b6b9a936d1494b3d547334bb9b9ed82694fe2bee`
- Candidate manifest SHA:
  `bdb2df7bb585575dd7b9ede3b5106a77811ed83cd47b1a04bc1ee4ade723189b`
- Zero bytecode/cache entries in candidate, preseal, or all four wheel archives.

## Package and binding

- Read-only verifier returned:
  `V14_LIVE_REPRESENTATIVE_PRESEAL_VERIFIED`
- Package digest recomputed exactly:
  `14f80dbe8977fbac1ec641f8f3bed287c3ba88072f31187ad852c2a2bee5dda5`
- Package SHA:
  `04948b7620c345c8bcb7d8e295a85612a9467f51687e1abaccaa388de4d60752`
- Protected inventory claimed/actual SHA:
  `d2c084be0865f8e9844452a7b683f97800e31af9bc7e1a113241109a283aada5`
- Registry SHA agrees across live bytes, shape, package, and target:
  `bd61ed95f80737ba8013db262fd0242a600e540f43f6627f5b9708a599660b29`
- Registry shape digest:
  `bb911adcae1efd5888b853a62925ac2461b7d1978666e0cdfb67f4de52a15be5`
- Launcher -> r13 bootstrap -> worker -> r13 sealed controller -> r13 target paths all agree; candidate and preseal copies have identical hashes.

## Authority and recovery

- Global reservation uses `O_CREAT|O_EXCL`; consumed authority rejects reuse before a new phase journal is written.
- No-phase pending reservation recovery consumes `FAILED` and writes `ROLLED_BACK`.
- `PREPARING`, `RESERVED`, and `STOPPING` share the pre-snapshot recovery branch: load durable recovery manifest, avoid nonexistent snapshot loading, restore/restart, consume `FAILED`, finish `ROLLED_BACK`.
- `COMMITTING` plus `SUCCEEDED` recovers to `COMMITTED`.
- Live authority root, execution root, and successor runtime remained absent before and after verification.

## Rehearsal

Report SHA:
`209a543146fba47185c6beededa14fe9635674893d1b464b680def9c88203cef`

All 12 rejected-replay rollback cases remain `ROLLED_BACK`:

`stop`, `post_stop_snapshot`, `stopped_probe`, `install_exact_wheels`, `off_smoke_channel_inbox_off`, `capacity_dry_run`, `weekly_and_capacity_apply`, `weekly_startup_smoke`, `switch_unit_dropin`, `reload`, `start`, `post_fence`.

For every case:

- Phase SHA: `8e429e77dd1bdf4c463ac27b23125b9c05543a598559ac91cbe19a6b3d3e3e7d`
- Ledger: `CONSUMED/FAILED`
- Ledger SHA: `fb65a87d637c28dc92d5c9dbce34d0d03ed6c71a22ea8cf5c92133364c93a1d6`
- Reservation absent.
- All four recovery-manifest preflight hashes exact.
- Eleven post-stop cases restored all four snapshots exactly; `stop` correctly failed before snapshot capture.
- Created successor/authority/event paths were removed.

Success remains:

- Phase: `COMMITTED`
- Phase SHA: `4e5ff24c555205b9bfe7417cc02f70c375254065c70d6073a4025faf53b8ec9d`
- Ledger: `CONSUMED/SUCCEEDED`
- Success receipt:
  `sha256:e1bea57acf1c5e1ac80ce5c3a04c54b6070a526ce970bab3341ebb289d8435a4`

No authorization, live execution, network, Telegram, provider, customer, service, commit, or push action was invoked. No files were modified.