{
  "version": 1,
  "messageId": "70dcccb4-8874-4be7-a3ee-498222442692",
  "from": "transaction-rehearsal",
  "to": "lead",
  "kind": "message",
  "body": "V10 STOPPED AT RAW REHEARSAL-ENVIRONMENT BLOCKER before sealed controller/authority. Exact verifier PASS: `V10_USER_BUS_ENVIRONMENT_PRESEAL_VERIFIED`; package `248540f47ce08aac56e311cdca47b782aa0c05f9d27db700671ae33bf9f7cd2b`, manifest `20cc15b768622b180eeeb3e5a0a390b68cfcd855582b6509f614fac3bd50c5b8`, snapshot `97731e7704607e5c876eb95432d32d7e2046965bb2f89ebfa665f9fde51ac43a`, closure `sha256:895b2354b8c8b19ac2a8444ac508bddcec33b30e7368608d7a3b54ebbb8e65e6`. Two unrelated exact clone overlays invoked the unmodified REAL sealed entrypoint with outer clearenv containing only PATH + `XDG_RUNTIME_DIR=/run/user/1000` and no `DBUS_SESSION_BUS_ADDRESS`; each entrypoint's mandatory inner Bubblewrap failed immediately: `bwrap: No permissions to create new namespace`. Neither reached bootstrap/controller, reserved authority, consumed approval, stopped service, or mutated clone/live. Three materially distinct outer strategies were exhausted without authority use: ordinary outer bwrap -> nested namespace denied; root-mapped nested bwrap -> Operation not permitted; `unshare --user --map-root-user --mount` -> uid_map denied. This host therefore cannot combine exact hardcoded-path overlays with a second real-entrypoint namespace. Related V10 tests still 57 passed. Live remains PID 571685/start 2234547821498 active/running with four hashes exact; V10 live roots absent; V9 failure receipt `4a7ef0...` verified. Immutable blocker receipt SHA256 `fbb47f38cf6a23873d704ee7ea498f7b1459a9354e42316b44cba866519e6623`. Cleanup receipt SHA256 `c8f2f2184ea479cab0c301269c7d6c16439f0537619ae2a6dada6a17420ee24d`. Raw traces A `0dad4f130aecfd01df7e1dc193fd97626e41b5a44103b528fb784f7ad78b131c`, B `301e421a65698618c6512c9a0aaef59fa4ff3cbaa890bd89489c0f22af38f0f8`; stderr both `f584d723d6016799815da1fe797c1cb4d40b556ab350e3d7b78d3d12d7febf46`. Final root exactly eight mode-0444 evidence files; clones/caches/sources removed.",
  "timestamp": 1787885684319,
  "summary": "V10 blocked before authority by nested namespace policy"
}