{ "doc": "fix7-p0-rollback-validator-hardening-valid-evidence-recheck", "date": "2026-06-11", "authority_of_this_doc": "PRE_EXECUTION_HARDENING_NON_AUTHORITY; recheck only; authorizes nothing; no production mutation", "purpose": "Prove the existing, frozen T1 staging rollback evidence still PASSES under the hardened validator (after_apply_hash != before_hash guard added). The entries below are copied byte-for-byte from the source of record.", "source_of_record": { "file": "rollback-recovery-proof.json", "packet": "fix7-p0-dryrun-and-execution-readiness-packet-2026-06-11", "packet_tree_sha256": "02b200e5a3c7a21c2e620b293fbf28ccc81731a983430c3e5a202798c05e94e6", "file_sha256": "07acdf19f01769068f007c640a372f5266a88c3dab78384abe52bbc5385c37ba" }, "expected_result_under_hardened_validator": "PASS (check_rollback_proof returns no fail codes)", "note_absent_sentinel": "RB-2 and RB-4 are additive surfaces: before/after_rollback = ABSENT (file did not exist). after_apply_hash is a real distinct hash, so the hardened after_apply != before guard holds (real hash != ABSENT). RB-3 mutates a temp copy: before 49c386a9.., apply 91c520d9.., restore back to 49c386a9.. == pin.", "rollback_evidence": { "rollback_proof_status": "PROVEN_IN_STAGING", "staging_mutation_occurred": true, "production_rollback_status": "NOT_APPLICABLE", "production_rollback_reason": "no production surface was mutated in this dry-run; production rollback proof can only exist after a separately-authorized production phase", "entries": [ { "id": "RB-2", "surface": "operative blueprint doc (new temp file)", "method": "additive doc -> delete (no production state)", "before_hash": "ABSENT", "after_apply_hash": "30bdca6e5562d0b412d32fb19542b3fa44bd73594393b763a578801f810afca4", "after_rollback_hash": "ABSENT", "restored_match": true, "verify_after_rollback": "file absent after rollback", "log": "logs/DR2_DR3_DR4_rollback.log" }, { "id": "RB-3", "surface": "canonicalizer operative-status marker (temp copy)", "method": "revert marker edit; body returns to 38756 bytes / sha256 49c386a9..b734d0", "before_hash": "49c386a9b9666c09786fc4f89bc79776b6046eaee6f4da6d8537d2c753b734d0", "after_apply_hash": "91c520d94cb0f6eac3e024416a6a75a9664fa4a3c189af81a3c0d9c6bd55d864", "after_rollback_hash": "49c386a9b9666c09786fc4f89bc79776b6046eaee6f4da6d8537d2c753b734d0", "expected_restored_hash": "49c386a9b9666c09786fc4f89bc79776b6046eaee6f4da6d8537d2c753b734d0", "restored_match": true, "verify_after_rollback": "P7 verify_pin PASS on restored body (sha256==pin, bytes==38756)", "log": "logs/DR2_DR3_DR4_rollback.log" }, { "id": "RB-4", "surface": "governance addendum (temp stub)", "method": "additive addendum -> delete; canonical registry JSON/MD never modified", "before_hash": "ABSENT", "after_apply_hash": "1cddd95e11f4a1a08dda84d33d6fd6ea3fcccd5d8b3e11178b4e80859b377d4b", "after_rollback_hash": "ABSENT", "restored_match": true, "verify_after_rollback": "addendum stub absent; registry untouched", "log": "logs/DR2_DR3_DR4_rollback.log" } ] } }