#!/usr/bin/env bash

FIX7 P0 rollback-validator HARDENING packet -- executable gate runner.

Staging/paper evidence only. Mutates nothing in production; touches no

PG/Directus/registry-row/system_issues; no REAL_RUN/QT001/cutover.

Proves: (1) hardened validator selftest passes (real T1 evidence PASS +

fabricated no-mutation rollback fails closed); (2) the 7 hardening probes

all fail closed.

set -u cd "$(dirname "$0")"

echo "== FIX7 P0 ROLLBACK-VALIDATOR HARDENING -- commands.sh =="

python3 hardened_dryrun_validator.py --selftest S_EXIT=$? echo "selftest_exit=${S_EXIT}"

python3 hardened_bad_input_probes.py P_EXIT=$? echo "probes_exit=${P_EXIT}"

OVERALL="PASS" if [ "${S_EXIT}" -ne 0 ] || [ "${P_EXIT}" -ne 0 ]; then OVERALL="FAIL" fi

if [ -f exit_codes.json ]; then EXP_S=$(python3 -c "import json;print(json.load(open('exit_codes.json'))['hardened_dryrun_validator_selftest'])") EXP_P=$(python3 -c "import json;print(json.load(open('exit_codes.json'))['hardened_bad_input_probes.py'])") if [ "${S_EXIT}" = "${EXP_S}" ] && [ "${P_EXIT}" = "${EXP_P}" ]; then echo "EXIT_CODES_MATCH: YES" else echo "EXIT_CODES_MATCH: NO (got ${S_EXIT}/${P_EXIT} expected ${EXP_S}/${EXP_P})" OVERALL="FAIL" fi fi

echo "OVERALL_RESULT: ${OVERALL}" [ "${OVERALL}" = "PASS" ] && exit 0 || exit 1