comment #302
**NEEDS-OPERATOR — #302 STEP 1 field staging on ENLYZEAM is ready; the binary swap is operator-run.**

Everything up to the swap is built, proven and blind-verified (doyle, 2026-09-16 09:40Z). The `flag` verb is refused on a GREENLIT request, so this comment is the operator flag.

**What is staged (HFENDULEAM, `.spt/preserved/302/`):**
- Release diagnostic build of `diag/302-net-worker-stamps` @ `3142753a` (opt-level 3, line-tables-only, strip none; source unchanged vs base `39241675`, 14 files +2023/-83). Profile ruled release because debug inflates Rust-side CPU and can manufacture the starvation under test.
- `spt.exe` sha256 `67dbe7113554af073d20b0cb7fd9c8ceb613c70574ed68d9e705f572b78ab140`; matched `spt.pdb` `61b41db2…` (CodeView GUID `64E2A01E-CD61-4576-B9F5-DA6F8F1AAFB2` age 1, verified by independent PE parse).
- ENLYZEAM-matched OS symbols: 15 PDBs pulled from msdl by CodeView GUID/age of ENLYZEAM's own 19045.6466 DLLs (VersionInfo 19041.x, distinct from HFENDULEAM's 26100), manifest `6431f18c…`.
- Operator ZIP `302-operator-3142753a.zip` (187,740,252 bytes, sha256 `03f1d9c755591ba089f5fa9615778900bd4a9ca283a4151f70065a6736e17928`): release pair, flat OS PDBs, symbol manifest, staging manifest, collector.
- Runbook: `.spt/preserved/302/STAGING-KIT.md` (sha256 `01246ff6…`), sections 0–7: transfer/extract, bounded helpers, preflight+backup, quiesce ball-b/engine-room via their extension owners, exact task/daemon stop, install, USER env `SPT_RC_HITCH_DIAG=1` + `SPT_NET_DIAG_SYMBOL_DIR=<new dir>`, `schtasks /Run "spt-core daemon"`, fresh-START verification, rollback, 180 s collector.

**Proofs behind it:**
- todlando release proofs (`todlando-release/handoff.json` `46435106…`): knob-unset seams 255/255, resume units 3/3, smoke parses under frozen analyzer `6f36563c…`, forced capture 18/18 serialized pairs with raw capture spans 0 ms and processing 11–43 ms.
- hertz actual-daemon rehearsal on isolated HFENDULEAM homes, 4/4 arms (debug/release × knob unset/set): unset emits zero NET_DIAG records; set emits fresh START + IF_ENUM/GATEWAY/NTP boundaries; all analyzer exits INSUFFICIENT_EVIDENCE on the intentionally short windows (plumbing proof, not a mechanism verdict). No resident or ENLYZEAM mutation occurred.

**Operator gates the kit cannot prove for you:** the scheduled task is registered `InteractiveToken`, so USER-scope env reaching the task-launched daemon must be verified on the NEW process (Process Explorer environment page); if either variable is missing there, rollback per section 6. ENLYZEAM has ~15 GB free; kit enforces a 5 GiB reserve. No debug-channel pin exists on ENLYZEAM, so this is the manual swap, not `spt update apply`.

**After the swap:** run ONE collector (section 7). Verdict from the frozen analyzer decides STEP 2; STEP 2 is conditional on CONFIRMED. If the field window cannot be granted, #302 relocates (never drops) before the v0.71.0 golden head.