{
  "actor": "controls-architect",
  "artifacts": [
    {
      "path": "tools/campaign.py",
      "sha256": "54aba1ec42f9c2f495e29a103254ed30c1529b8bad615a3992660b57f5e2aeb4"
    },
    {
      "path": "tools/run_agent.py",
      "sha256": "7ca44ace935426df5e2fa8a16ef8252178f538864d0ab423b60e679229d00b8b"
    },
    {
      "path": "campaign/contract.schema.json",
      "sha256": "a2c76ec042ca097a57c3c05c1e519e392d498d387a31808c7d0f70482d43c201"
    },
    {
      "path": "verify/campaign/test_controls.py",
      "sha256": "52f93be6eb4147e93deef76e353e55abfb69b1b33297b534acc62bde9ac8847e"
    }
  ],
  "basis": "1167f2f44aa39b1b6453e9af3e5046c4653ecea9bdee5281f4fcaea60b16e9a9",
  "contract": "controls-bootstrap",
  "id": "177cfb68c95114436c939aaa",
  "model": "openai/gpt-6-astra",
  "next_action": "Run python3 -m unittest discover -s verify/campaign -p test_*.py -v and repair ordinary failures.",
  "role": "architecture-review",
  "schema": "sots-checkpoint/1",
  "session": "rollout-controls-repairs",
  "summary": "Pre-test checkpoint: implemented source_binding engine/re actual Git file content digest, canonical integrated paths, immutable binaries/inputs and per-criterion outcomes; source-binding CLI; canonical RE artifact references with secret/escape rejection. Runner now separates old recovery from fresh end checkpoints, resolution-only Astra blocked launches, role authority, expanded prompt/effective config hashing, under-lock baseline recheck, config drift detection, successful stop step/session and error-event checks. Added adversarial tests; not executed yet. Owned modified source identities attached. Bootstrap canonical exclusive ownership; same baseline commits as prior checkpoint. No lab/resources/delegation/commits. Logical session rollout-controls-repairs; actual harness session ID unavailable. Decisions R4/R6 implemented pending tests and documentation.",
  "timestamp": "2026-09-09T21:47:48.364874+00:00"
}