{
  "release": "RC14",
  "revision": "R1",
  "release_date": "2026-10-01",
  "source_archive": "HALTSEAL_CTO_Handover_RC14_R1.zip",
  "source_archive_sha256": "26290da6c2013768032efebe61606b096a32a3e505ea492a1edde7522857d21a",
  "evidence_origin": "Local implementation, spawned processes and provider-contract fixtures",
  "reported_validation": {
    "unit_tests_passed": 48,
    "process_campaigns_passed": 12,
    "evidence_mutations_rejected": 10,
    "known_out_of_scope_limit_reproduced": 1
  },
  "local_recheck": {
    "date": "2026-10-02",
    "unit_test_skips": 0,
    "unit_tests_passed": 48,
    "process_campaigns_passed": 12,
    "evidence_mutations_rejected": 10,
    "known_out_of_scope_limit_reproduced": 1
  },
  "observed_cases": [
    {
      "situation": "Original response lost",
      "result": "Replacement held while the original effect remained possible"
    },
    {
      "situation": "Previous executor returns after ownership handoff",
      "result": "No additional release granted to the stale executor"
    },
    {
      "situation": "Replacement creation or funding response lost",
      "result": "Next protected path held while the replacement effect remained possible"
    },
    {
      "situation": "Authoritative no-effect closure and fresh current checks",
      "result": "One fresh successor release allowed in the declared local case"
    }
  ],
  "provider_candidates": "Stripe and a Wise sandbox candidate; the next protected path is not a third provider.",
  "external_coverage": {
    "native_provider_calls": 0,
    "actual_customer_paths_verified": 0,
    "actual_separate_physical_hosts_tested": 0,
    "independent_bank_settlement_proven": false
  },
  "limits": [
    "Native provider acceptance and the integrated native workflow remain blocked or not run.",
    "Selected restarts and recovery cases were checked locally. Host migration is not validated; separate-host failover and production disaster recovery are not validated.",
    "Joint-history rollback is not protected. Additional exposure was reproduced outside the protected scope. No general crash-recovery or durability guarantee is established.",
    "The public supplier-payment demo illustrates the principle; RC14 has not natively validated that workflow.",
    "Counts are separate test populations, not independent reliability samples. No reliability percentage is measured.",
    "Hashes identify bytes; local semantic checks are not signatures, independent attestation or customer validation."
  ],
  "production": "NO_GO",
  "supporting_records": "Full source and original records available by request under agreed scope and terms",
  "schema": "haltseal.public-engineering-summary.v2",
  "public_summary_revision": 2,
  "public_summary_updated": "2026-10-07",
  "candidate_scope": "Own-account USD cash movement; not supplier payment. Full-amount local examples only.",
  "customer_acceptance": {
    "native_status": "NOT_RUN",
    "required_before_customer_approval": "Authoritative provider outcomes, coverage of every in-scope release path, an accepted recovery plan and customer sign-off require separate qualification.",
    "detailed_records": "Available within an agreed technical review"
  }
}