{
  "version": 1,
  "messageId": "dc03b511-812e-438d-97f7-7c9fa0973145",
  "from": "lead",
  "to": "live-controller",
  "kind": "message",
  "body": "ADDITIONAL REQUIRED BINDING: inspected `/preflight-v2/package.json`; payload contains only candidate/evidence/snapshots/target and does NOT bind controller/preseal/transaction hashes. V3 owner approval must bind a non-circular `controller_derivation_sha256` (canonical source manifest + v7 reference hashes + concrete target contract excluding package digest + wheel hashes + global ledger contract). Then v3 sealed-target binds the resulting permission package digest back. Include tamper tests proving same package cannot authorize altered controller/source/target/ledger; no arbitrary controller pairing.",
  "timestamp": 1787840111730
}