{ "any_fail_open": false, "base_evidence": "valid_evidence_recheck.json (real frozen T1 staging rollback evidence)", "control_pass": true, "date": "2026-06-11", "doc": "fix7-p0-rollback-validator-hardening-probe-results", "fail_closed": 7, "hardened_rule": "T2-REC-ROLLBACK-HARDENING-1: after_apply_hash != before_hash required on every claimed staging mutation", "new_guard_codes": [ "ROLLBACK_APPLY_DID_NOT_MUTATE", "ROLLBACK_NOT_RESTORED_TO_PIN" ], "results": [ { "codes": [ "ROLLBACK_APPLY_DID_NOT_MUTATE:RB-3" ], "expected_prefix": [ "ROLLBACK_APPLY_DID_NOT_MUTATE" ], "fail_closed": true, "leak": [], "probe": "P1 apply==before (fabricated, no real mutation)" }, { "codes": [ "ROLLBACK_ENTRY_MISSING_HASH:RB-3:after_apply_hash" ], "expected_prefix": [ "ROLLBACK_ENTRY_MISSING_HASH:RB-3:after_apply_hash" ], "fail_closed": true, "leak": [], "probe": "P2 missing after_apply_hash" }, { "codes": [ "ROLLBACK_ENTRY_MISSING_HASH:RB-3:before_hash", "ROLLBACK_NOT_RESTORED:RB-3" ], "expected_prefix": [ "ROLLBACK_ENTRY_MISSING_HASH:RB-3:before_hash" ], "fail_closed": true, "leak": [], "probe": "P3 missing before_hash" }, { "codes": [ "ROLLBACK_ENTRY_MISSING_HASH:RB-3:after_rollback_hash", "ROLLBACK_NOT_RESTORED:RB-3", "ROLLBACK_NOT_RESTORED_TO_PIN:RB-3" ], "expected_prefix": [ "ROLLBACK_ENTRY_MISSING_HASH:RB-3:after_rollback_hash" ], "fail_closed": true, "leak": [], "probe": "P4 missing after_rollback_hash" }, { "codes": [ "PRODUCTION_ROLLBACK_CLAIMED" ], "expected_prefix": [ "PRODUCTION_ROLLBACK_CLAIMED" ], "fail_closed": true, "leak": [], "probe": "P5 production rollback claimed" }, { "codes": [ "ROLLBACK_PROVEN_BUT_NO_MUTATION", "ROLLBACK_PROVEN_NO_ENTRIES" ], "expected_prefix": [ "ROLLBACK_PROVEN_BUT_NO_MUTATION", "ROLLBACK_PROVEN_NO_ENTRIES" ], "fail_closed": true, "leak": [], "probe": "P6 PROVEN claimed but no rollback step/mutation" }, { "codes": [], "expected_prefix": [ "(none: must pass)" ], "fail_closed": true, "leak": [], "probe": "P7 valid T1 evidence still passes" } ], "superset_note": "hardened validator removes no original gate; it only adds the rollback-mutation guard, so all original defect classes remain caught.", "total": 7 }