{
  "date": "2026-10-03",
  "workplan": "USER-WP-0037-T02",
  "source_commit": "0d0751d",
  "image_digest": "sha256:030fe90232e20bb02b372e3d16b8ff659a5407d54f6405eb85754262b9ad7dc6",
  "canon_commit": "db319335b27b61b855382ee5af5d690f06eeb010",
  "approved_document_sha256": "33a2ae086385028db1b654aa5646b7a98bcde1c5878c804e19315dadc3f87248",
  "initialization": {
    "actual_grant": false,
    "baseline_initially_absent": true,
    "baseline_receipt_matched": true,
    "empty_no_grant_document": true,
    "empty_record_returns_no_grant": true,
    "failure_preserves_baseline": true,
    "fresh_authenticated_owner_read": true,
    "initialized_from_authenticated_receipt": true,
    "injected_read_failure_returns_no_grant": true,
    "ok": true,
    "other_tenant_returns_no_grant": true,
    "owner_read_clock_aware": true,
    "reconnect_preserves_baseline": true,
    "record_id_matched": true,
    "record_revision": 1,
    "runtime_enabled": true,
    "same_revision_mutation_preserves_baseline": true,
    "wrong_audience_login_denied": true
  },
  "after_controlled_pod_restart": {
    "actual_grant": false,
    "baseline_initially_absent": false,
    "baseline_receipt_matched": true,
    "baseline_survives_actual_pod_restart": true,
    "capability_probe_read_at": "2026-10-03T18:30:58.194568+00:00",
    "capability_probe_read_digest_matched": true,
    "custody_write_denied": true,
    "custody_write_denied_http_status": 403,
    "empty_no_grant_document": true,
    "empty_record_returns_no_grant": true,
    "existing_baseline_receipt_matched": true,
    "failure_preserves_baseline": true,
    "fixture_service_serializes_live_empty_root_grant_null": true,
    "fresh_authenticated_owner_read": true,
    "hub_private_route_acceptance_claimed": false,
    "injected_read_failure_returns_no_grant": true,
    "metadata_list_denied": true,
    "metadata_list_denied_http_status": 403,
    "ok": true,
    "other_tenant_returns_no_grant": true,
    "owner_read_clock_aware": true,
    "read_request_id": "91cd7235-9cfe-06c3-57a6-64a013d1cfcb",
    "reader_login_request_id": "29a2fac4-8108-7ca5-d0a6-682c4a31f48d",
    "reconnect_preserves_baseline": true,
    "record_id_matched": true,
    "record_revision": 1,
    "runtime_enabled": true,
    "same_revision_mutation_preserves_baseline": true,
    "sibling_read_denied": true,
    "sibling_read_denied_http_status": 403,
    "wrong_audience_login_denied": true
  },
  "limitations": [
    "No actual root grant exists: approved entries[] record.",
    "Read failure and same-revision mutation are injected consumer checks, not production OpenBao outage or mutation.",
    "Service serialization uses in-memory synthetic accounts/authorization harness against live authenticated empty custody source; no private Hub caller admission claimed.",
    "Producer recovery/restore/audit completeness remains with railiance-platform; request IDs are correlation references, not inspected audit-log receipts."
  ]
}