{
  "actor": "controls-architect",
  "contract": "controls-bootstrap",
  "decision": "d-42c6d0b4ee5114e6f2e07c99",
  "id": "s-410e48d5ae6cc4da0a6ae649",
  "model": "openai/gpt-6-astra",
  "probe": "Introduce an immutable typed acceptance package binding candidate/integrated source manifests, built binary, inputs and per-criterion results; change source bytes at unchanged HEAD and require integration/acceptance rejection.",
  "role": "architecture-review",
  "schema": "sots-surprise/1",
  "status": "resolved",
  "summary": "Independent review R4: lifecycle source binding checks baseline path/commit and artifact hashes, but not the actual candidate/integrated source manifest. Implementation bytes can change at the same HEAD without invalidating the current evidence/verdict. This requires a cross-cutting evidence package/interface decision with publishing and gate owners.",
  "timestamp": "2026-09-09T21:34:52.829937+00:00"
}