I read this as a read-only release gate audit - I’ll inspect the complete r17 artifact chain, replay every stated r16 blocker check without mutation, and return a single PASS/FAIL with exact evidence.


I read this as a read-only release gate audit - all specified r17 invariants and prior r16 blockers were rechecked directly.

# PASS

- **r17 verifier:** exit `0`
  - Candidate: `ab3a61dd7fc45720cfe357ce10985048ba3efe61731168b522e8d76f08481f7a`
  - Package: `04ab3bcbb9e3ce3e1f4ddf7395162f2b97ba2a9cd5db9baf7a40d4251396ca7f`
  - Package SHA-256: `30f7a694bdb21c68d7bc46d883d596c9b4e4e4aee16d38b2243b6f5f942b3342`
  - Closure: `sha256:87143ca429ee1c23d3a62f622adaa736b5bb8ce72ded199c31c0e0ed1b56b88d`

- **Physical inventory and immutability:**
  - Candidate: exactly `327/327` files; `312` source + `6` input + `4` wheel + `3` evidence + `2` self; no extra, missing, or hash-drifted entries.
  - Preseal: exactly `327/327` files; `326` package entries plus self; no extra, missing, or hash-drifted entries.
  - Controller closure: exactly `318/318`; no extra, missing, or drifted entries.
  - Candidate: `22` directories, all mode `0555`; `0` writable, `0` symlinks, `0` `.pyc`, `0` `__pycache__`.
  - Preseal: `16` directories, all mode `0555`; `0` writable, `0` symlinks, `0` `.pyc`, `0` `__pycache__`.

- **Launcher/bootstrap/controller r17 binding:**
  - Launcher SHA-256 `5ca1bedf1c1a53b5eeb5ce7f634b643ecc2f4a63a5160aa3b6b69eba78a4e49c`; line 21 targets `...-r17`.
  - Bootstrap SHA-256 `530851e5c7248b0176041ccc54884055ab411a56ff8a501098b8d10694921aec`; line 17 targets `...-r17`.
  - Controller SHA-256 `e8a4611e4fad5dacbe6c573ff526ce580dbe5906a67e0c3107ded71d1967c113`; line 43 targets r17 and line 235 states `V14 r17`.
  - Worktree/preseal copies match; candidate bootstrap/controller copies match. No r13/r14/r16 literals occur in these r17 surfaces.

- **Canonical hashes:**
  - Candidate canonical derivation equals claim: `ab3a61dd7fc45720cfe357ce10985048ba3efe61731168b522e8d76f08481f7a`.
  - Candidate manifest SHA-256: `19cdb7e37286b0e4b3c348e03c10ac315e2b0b81a354f0b61e0a71cc15bfdd3d`.
  - Package canonical payload equals claim: `04ab3bcbb9e3ce3e1f4ddf7395162f2b97ba2a9cd5db9baf7a40d4251396ca7f`.
  - Controller derivation canonical hash equals claim: `572b2a7267cee5f2bd0fba86c3cbf10999bcca212cebfb12e37dab013c609e4f`.
  - Package manifest SHA-256: `02f770daa3edf4848c8a7e82f88fe3e37b1529f9e2e2355a5f03ef91740efa27`.
  - Controller-source manifest SHA-256: `cfc88890babc3203bf0c34cb5345c4da9a4ddee0977b08741813611fca67471a`.

- **Wheels and RECORD:**
  - All four wheels mode `0444`, link count `1`, with byte-identical build pairs.
  - Hermes wheel: `7769edae877d4f373107ba2aa74e2d71c6b703c1382ddf3f4e21d36d2ac11825`; RECORD `bec67407a4a31221f2c5d16c1770418ab5c012516bff79dbd098938d1bd3121e`; `1041/1041` rows valid.
  - Profile wheel: `7651bc8bc939268274dc5b0231a09208ed6bf646d22e97e81f4a29e9d1c9d9af`; RECORD `21165d7e7a520c4724e0b9bd0d58394c0319c3ad890b334957d3539ee0cb6fbc`; `122/122` rows valid.
  - Rehearsal installed RECORDs: Hermes `1050` rows and profile `126` rows; all hashes, sizes, and paths valid.

- **Successor overlay:**
  - Overlay SHA-256: `3e158635835fbf37b0c0728d179703a1756bedb6dc94b22eace432a0014715ad`.
  - `customer_admin.py`: `027c03b4ebf7e7f911f3b538b7c9608de8fbfd049eee139e80bf16868875cd86`.
  - `test_multi_customer_migration.py`: `76b1b7a980f91cbf834faefd1c6161f02bf7af09d3dd3e03868b15e7949ee7dc`.
  - Overlay, source inventory, source bytes, and profile-wheel member agree.

- **Supersession:**
  - r13 `14f80d...`, r14 `7a6050...`, and r16 `734f9d...` each have `"approval_phrase_reusable": false`.
  - r13 authority is durably `CONSUMED/SUCCEEDED`.
  - r14 tombstone SHA-256: `941d51ebacacdb087e7d18a972205ab26c1d9db113fd4a9c5c5ee7f96e02e8b5`.
  - Exact old r14 verifier result: `DENIED:authority_touched`, exit `2`.
  - Old r16 verifier also denies current reuse with `candidate physical inventory mismatch`, exit `1`.

- **r17 roots remain absent:**
  - `.../live-authorization-v14/nutricoach-v150-v14-live-representative-56-ab3a61dd`
  - `.../live-executions-v14/nutricoach-v150-v14-live-representative-56-ab3a61dd`
  - `.../.strict-runtime/ab3a61dd-v150`

- **Rehearsal:**
  - Report SHA-256: `70ea7c2fd8f5c0f6234c36967d11d6f233389cfb74b99092574a0a9df6ded784`.
  - `13/13` cases PASS; success is `COMMITTED` with `CONSUMED/SUCCEEDED`; all 12 fault cases are `ROLLED_BACK` with `CONSUMED/FAILED`.
  - Success receipt: `sha256:1627510bf84f8c2684298590932805d2c2960d3b6548259444c7ec216162d649`.
  - `live_source_unchanged=true`; network namespace `loopback-only`; successor service/drop-in bind `ab3a61dd-v150`.