{
  "path": ".spt/preserved/hertz-attachment-NO4JJOEL/admit-cohort.ps1",
  "changes": "Created candidate/END-authority-gated admission harness with exact owned-first-root enforcement, fresh CreateNew receipt/ancestry/control paths, preserved ancestry predicate and five CI status axes, separator-safe execution census, retained-handle cmd /d /q /c pause positive control, creation-time/image matching, unreadable HOLD semantics and explicit sample-not-lease receipts.",
  "receipt_contract": "Top-level candidate, verdict, authority_file, authority_sha256, roots, tag, utc, utc_start, utc_end; authority object and execution.roots also included.",
  "verification": "No execution or validation performed, as expressly required. Original scripts and all product/test sources unchanged.",
  "risks": [
    "Redirected-stdin pause behavior and CIM creation-time precision remain unexecuted; either control failure produces HOLD rather than CLEAR.",
    "KnownUnreadable citations retain the historical caller-supplied prior-evidence rule; exclusion additionally requires creation more than 30 minutes before sample start.",
    "Root completeness, ownership/cleanliness, explicit Doyle END authenticity and pool claims remain Main responsibilities. Admission is only a sample, never a lease.",
    "Concurrent output-path reservation races refuse through CreateNew and may leave incomplete fresh evidence files; those paths cannot be reused."
  ]
}