{
  "version": 1,
  "messageId": "c35536d3-5e6b-4b0c-8285-355dcf4cfa8e",
  "from": "transaction-rehearsal",
  "to": "lead",
  "kind": "message",
  "body": "V10 fourth approach STOPPED safely at distinct preauthorization blocker. Imported sealed `sandbox_command(exact_approval)` on host; exact argv assertions passed for --unshare-net, --clearenv, --ro-bind / /, --tmpfs /tmp, --dev /dev, PATH=/usr/bin:/bin, XDG_RUNTIME_DIR=/run/user/1000, DBUS absent. Programmatic projection proof shows only bind SOURCE indexes 12,15,18 differ and every destination/other argv byte remains exact. However unchanged transaction `SystemdService` calls absolute `/usr/bin/systemctl --user stop/start/daemon-reload`. Real read-only XDG-only probe decisively connected to live user manager: `connect(AF_UNIX, /run/user/1000/systemd/private) = 0`, targeting `org.freedesktop.systemd1` and live unit `hermes-gateway-dualcoachtest.service`. Thus filesystem-source projection does not isolate the systemd IPC endpoint; executing projected argv would violate no-live-mutation. Projected transaction intentionally not invoked, no approval/ledger/controller, zero clones/caches/ledgers. New immutable blocker SHA `3f11001a9026326823208ffaf0b237b5694e31ae257a9336fcd71e271ea10472`; cleanup SHA `215139fb05876e1f500d9f75fecb456192acde41a7bf64da0bbb4f2c45661bd4`; probe SHA `97b48e0e3f5bd54ad9dc2f0680342cf777ff038609bc995af2da2ca54e025899`; projection assertions SHA `822a6ef330790f0300e0cd59abebdc2f7f5139f459b6f93c7b389da588830103`. Evidence root `live-transaction-rehearsal-v10-single-namespace-projection`, exactly six 0444 files. Prior blocker `fbb47...` and cleanup `c8f2...` both reverified unchanged. Live remains PID 571685/start 2234547821498 active/running, four hashes exact, V10 roots absent.",
  "timestamp": 1787885999266,
  "summary": "Fourth V10 approach blocked by live systemd IPC"
}