{
  "actor": "rollout-lead",
  "contract": "controls-bootstrap",
  "explanation": "Integrated review now receives source-identical paired worktrees, not baseline-only smoke trees. Created clean linked sots-final-engine/re worktrees and populated actual uncommitted integration source with campaign/rollout/sync_verifier_snapshot.py. Recomputed canonical and paired content digests independently: engine ccd8e02083e8d2e2b3e97976ace2273c8f924dfc02a39e919004eaf3544c50fd; RE 6696fd5201e144843617cbf6d78b41b5287ad5dcc9fa1e8aaa861d52b64e72e8 match exactly. Actual code/fixtures are present. Canonical tested bytes, input and binary hashes did not change; reuse prior 37-test artifact. Refresh verdict over source-identical handoff and final package; no user-repository commits needed.",
  "id": "d-d2aeed91781c4da6057f00a7",
  "invalidated_checkpoint": "campaign/runtime/checkpoints/controls-bootstrap-711ee56eb917dc02eafc1f8a.json",
  "invalidated_evidence": [
    {
      "axis": "control-tests",
      "binaries": [
        {
          "path": "tools/campaign.py",
          "sha256": "c7b7c7a30d907bba8e59386dee8704d7f3f5e978fcf709b686e37996fa465c31"
        },
        {
          "path": "tools/run_agent.py",
          "sha256": "0f5ccb53dcde59b64fe999768737b6cbd2dabcc1272e5605c1f1ecd86e5d5d2b"
        }
      ],
      "id": "controls-suite",
      "inputs": [
        {
          "path": "verify/campaign/test_controls.py",
          "sha256": "108460f4e90c4cb7036642e85de581e31fd70c478533c32364691260461814fc"
        },
        {
          "path": "campaign/contract.schema.json",
          "sha256": "a2c76ec042ca097a57c3c05c1e519e392d498d387a31808c7d0f70482d43c201"
        },
        {
          "path": "campaign/rollout/controls_evidence.py",
          "sha256": "bfaf4e523b2ca39c0ecdab94adf0b2b19a3da68aab8a0fcba69a613aed46588a"
        }
      ],
      "integrated": true,
      "outcomes": [
        {
          "artifact": {
            "path": "campaign/evidence/controls-suite-1788991911311171323.json",
            "sha256": "bd6ae3eba3d3df606e0410676819db47a46094571d0680edbf9b907bf90d693e"
          },
          "criterion": "controls-negative-paths",
          "status": "pass"
        }
      ],
      "path": "campaign/evidence/controls-suite-1788991911311171323.json",
      "sha256": "bd6ae3eba3d3df606e0410676819db47a46094571d0680edbf9b907bf90d693e",
      "source": {
        "engine": {
          "commit": "7741d42fc5e4e761e6449bdaf0e4a61d00036a23",
          "path": "/home/alex/sots-engine"
        },
        "re": {
          "commit": "3bfde5a70d874a723e797a695bbd847fd82c0aa7",
          "path": "/home/alex/sots-re"
        }
      },
      "source_binding": {
        "engine": {
          "commit": "7741d42fc5e4e761e6449bdaf0e4a61d00036a23",
          "path": "/home/alex/sots-engine",
          "sha256": "ccd8e02083e8d2e2b3e97976ace2273c8f924dfc02a39e919004eaf3544c50fd"
        },
        "re": {
          "commit": "3bfde5a70d874a723e797a695bbd847fd82c0aa7",
          "path": "/home/alex/sots-re",
          "sha256": "6696fd5201e144843617cbf6d78b41b5287ad5dcc9fa1e8aaa861d52b64e72e8"
        }
      }
    }
  ],
  "model": "openai/gpt-6-astra",
  "probe": "Verifier runs from /tmp/opencode/sots-final-re, confirms paired/canonical content SHA agreement and required code/fixtures present, reproduces controls criterion there, and then signs the current package if valid.",
  "role": "lead",
  "schema": "sots-decision/1",
  "surprise": "s-abd1c3613c9922cc94c608d5",
  "timestamp": "2026-09-09T22:29:14.622614+00:00"
}