{
  "file": ".spt/preserved/hertz-fp-driver-review/d2/provision-promote-DJNQQ2RA.ps1",
  "implemented": "Complete D10-D15/E16 instrument: frozen A receipt admission; pinned native apply; genuine pending/applied transitions; separately owned foreground run; initial and final fresh native membership observations; generation/parent/birth/path/hash/promotion checks; exclusive owned stop publication; confirmed job disappearance; exact breadcrumb retirement; structured promotion receipt and compatibility provenance.",
  "interface": "Mandatory RigRoot, Deadline, OutputRoot, SupportRoot, StagingReceipt; no additional arguments. Consumes Main frozen fields plus A's agreed evidence extensions. Emits RUN_DAEMON_READY=YES only after verified durable promotion and final fresh custody observation, then stops its own run.",
  "schemas": [
    "crates/spt-daemon/src/applyhost.rs:126-293 — BrainOnly gate, rollback aside and applied-pending with prior_version null.",
    "crates/spt-daemon/src/relcache.rs:84-113,426-479 — numeric version, phase, legacy applied.json and last-outcome.json schemas.",
    "crates/spt-daemon/src/release.rs:95-105,137-199,336-350 — artifact_sha256, signed metadata envelope and public trust keys.",
    "crates/spt-daemon/src/brainproc.rs:700-706,1038-1061,1208-1220 — actual promotion writes and rejection of unverified executable bytes.",
    "launch-v2.cs:440-518,599-613,659-784 — native shutdown/accounting, expected daemon exit124 with launcher exit0, fresh anchored membership."
  ],
  "evidence_outputs": "Shared OutputRoot: unique promotion-* native records, captures, before/pending/applied snapshots, readiness/shutdown verification, breadcrumb retirement and promotion-complete.json. RigRoot/home/provenance.json points applied_evidence to actual product-owned home/releases/applied-state.json. Only breadcrumb move destination is RigRoot/evidence/provision-daemon.pid.retired.",
  "verification": "No validation, parser, build, tests, scripts or product programs executed, as explicitly instructed. Only assigned file created/edited.",
  "caveats": [
    "Instrument uses FileStream.ReadExactly and SHA256.HashData, requiring modern installed PowerShell/.NET runtime (PowerShell 7.3+); Main should use its current modern pwsh.",
    "Initial SPT census fails closed if any spt.exe executable path is unreadable; it never terminates census processes.",
    "Breadcrumb handle excludes writes/deletes while alive through owned shutdown; after close, identity timestamp/hash/owner checks precede no-overwrite move and destination hash/owner checks follow. It does not claim a native handle-based rename.",
    "All successful job-member births are discharged by retained native COMPLETE coverage plus active_processes=0, not PID sweeps. No operational field GO is granted."
  ]
}