{
  "version": 1,
  "messageId": "8608f162-042a-4d79-b340-14015703c2e2",
  "from": "lead",
  "to": "transaction-rehearsal",
  "kind": "message",
  "body": "REHEARSE V5 SAME ROLE. Preseal `/home/cube/.hermes/migrations/nutricoach-v1.5.0-combined/live-transaction-preseal-v5-bound-controller`; package `/home/cube/.hermes/migrations/nutricoach-v1.5.0-combined/preflight-v5-bound-controller/package.json`; digest `6033ff140f60822c34e588fefffbf64c6630ea17a8c74f8aa524408b7313cd25`; package SHA `54fcd21be7375099900061287e2c92279c7fc1f38f75ebec22556d2a69cbfc2f`; manifest SHA `a8502c641231680276052cb44ca2b7d423a4a3ae743e8dd13ec2dfd9d14289a3`; closure `sha256:aca260472d10f4d0c0496cece797a65e892f7ad80a9aa538b6558f8bcd2ad16d`; verifier `V5_BOUND_CONTROLLER_PRESEAL_VERIFIED`. V3 attempt and V4 phrase non-reusable. Exercise the UNMODIFIED V5 bootstrap→worker→controller authority binding without source rewrite or approval monkeypatch: use disposable mount-namespace overlays at the exact hardcoded absolute profile/systemd/migration paths so all writes/ledger/execution land only in clones while exact V5 bytes/phrase execute. Prove V5 approval reaches transaction, real bwrap gate passes, direct host denies. Then two unrelated success clones, exact wheels/RECORD/scripts/imports, weekly capacity5/Inbox OFF, 66 stage×BaseException, durable faults, SIGTERM/SIGKILL, replay, zero external events, exact live before/after, live V5 ledger/execution absent. Evidence-only cleanup in a NEW V5 rehearsal root. Stop on first raw blocker; no live execution.",
  "timestamp": 1787874290099,
  "summary": "Rehearse V5 bound controller without monkeypatching authority"
}