{
  "version": 1,
  "messageId": "6251af84-39aa-46a5-b85e-29911f287517",
  "from": "transaction-rehearsal",
  "to": "lead",
  "kind": "message",
  "body": "TRANSACTION REHEARSAL PASS. Evidence root: `/home/cube/.hermes/migrations/nutricoach-v1.5.0-combined/live-transaction-rehearsal` (exactly 5 files, zero subdirs/clones/caches). Canonical evidence: `rehearsal-evidence.json`, SHA256 `5f4c9d37e9a57b6ae1960f1e49c2c4f873b3921a015adb0a0b4d4153319925f8`. Two fresh full-operation PASS receipts: snapshot manifests `sha256:5c1ab12d09f774e730c7deeb7f85f5984db98e62ead4fe19ef8d6ced39032e94` and `sha256:e32c9655643207d9998c1fa52c00a88239d5890994afabfb6dbe4091a905f8c6`; both exact sequence stop/stopped_probe/install/OFF smoke/migration dry-run/apply/systemd switch/reload/start/post-fence, capacity=5, weekly authority active, Channel Inbox OFF, installed origins in successor venv, approval consumed only inside disposable roots. Rollback matrix 11/11 PASS including all ten stages + KeyboardInterrupt; every case restored exact mutable bytes/modes, prior synthetic service active, removed successor/weekly authority, recorded FAILED disposable consumption. Approval/tamper matrix 11/11 PASS: old, wrong, wrong candidate, stale manifest, wrong package/runtime/capacity, weekly disabled, inbox enabled, wheel hash tamper, duplicate; pre-reservation cases wrote no authority and duplicate had no host stages. Current-state drift 1/1 PASS with exact pre-attempt drifted-state restoration. Network proof PASS: AF_INET/6 connect count 0, raw trace SHA `2e3cf461bcfb4078ff8b984ba30d056bfe331eea44ca19a3a8d3c463187ca0ed`. Live protected profile registry/config/runtime RECORDs, unit/drop-in/credentials contract, PID 571685/start identity, runtime v1.3.2 and active/running state unchanged; live approval remains unreserved/unconsumed. Only observed live drift was active Gateway appending `logs/agent.log` and `logs/errors.log`, explicitly separated as background log drift. Preseal hashes all match and verifier PRESEAL_VERIFIED. Implementation gates before evidence-only retention: Ruff pass, basedpyright 0/0/0, compile pass, help exit 0. See `verification-summary.json`.",
  "timestamp": 1787837849176,
  "summary": "v1.5 transaction rehearsal PASS"
}