{
  "version": 1,
  "messageId": "4720b993-8794-4f6b-8b4d-1618fba16642",
  "from": "lead",
  "to": "live-controller",
  "kind": "message",
  "body": "HARDENING 11/11 is GREEN and both immutable RED receipts hash-verified. One RED family remains incomplete: `Capture migration runtime systemd RED proofs`. Before V3 sealing, add failing-first tests/receipt for exact unit + every operative drop-in + candidate-bound credential postimages and real service observations (`ActiveState=active`, `SubState=running`, nonzero MainPID, exact ExecStart/runtime/import origins, fresh start timestamp). The test must fail current synthetic/string-only behavior for the right reason. Also add actual subprocess SIGTERM/SIGKILL recovery rehearsal entrypoints if not already present; a PhaseJournal unit test alone does not satisfy the full matrix. Return RED receipt then minimal GREEN. Do not weaken this into synthetic booleans. No live/systemd operation: use a faithful disposable systemd driver/recorded command contract until rehearsal.",
  "timestamp": 1787843740511,
  "summary": "Add missing systemd and credential RED before seal"
}