{
  "release": "RC15",
  "revision": "R1",
  "release_date": "2026-10-02",
  "source_archive": "HALTSEAL_CTO_Handover_RC15_R1.zip",
  "source_archive_sha256": "76ba6815e65446bbf702bb44af6aac3f74fc45485a917567bd75b6f695d6c7b6",
  "evidence_origin": "Local implementation, spawned processes and provider-contract fixtures; no native-provider execution",
  "reported_validation": {
    "unit_tests_passed": 98,
    "process_campaigns_passed": 12,
    "qualification_contract_campaigns_passed": 4,
    "evidence_mutations_rejected": 28,
    "known_out_of_scope_limit_reproduced": 1
  },
  "local_recheck": {
    "date": "2026-10-05",
    "timezone": "America/New_York",
    "unit_test_skips": 0,
    "unit_tests_passed": 98,
    "process_campaigns_passed": 12,
    "qualification_contract_campaigns_passed": 4,
    "evidence_mutations_rejected": 28,
    "known_out_of_scope_limit_reproduced": 1
  },
  "observed_cases": [
    {
      "situation": "Original response lost",
      "result": "Replacement held while the original effect remained possible"
    },
    {
      "situation": "Previous executor returns after ownership handoff",
      "result": "No additional release granted to the stale executor"
    },
    {
      "situation": "Replacement creation or funding response lost",
      "result": "Next protected path held while the replacement effect remained possible"
    },
    {
      "situation": "Authoritative no-effect closure and fresh current checks",
      "result": "One fresh successor release allowed in the declared local case"
    }
  ],
  "provider_candidates": "Stripe and a Wise sandbox candidate; the next protected path is not a third provider.",
  "external_coverage": {
    "native_provider_calls": 0,
    "actual_customer_paths_verified": 0,
    "actual_separate_physical_hosts_tested": 0,
    "independent_bank_settlement_proven": false
  },
  "limits": [
    "Native provider acceptance is blocked or not run; the integrated native workflow and separate physical-host acceptance have not run.",
    "Selected restarts and recovery cases were checked locally. Host migration is not implemented; separate-host failover and production disaster recovery are not validated.",
    "Joint-history rollback is not protected. Additional exposure was reproduced outside the protected scope. No general crash-recovery or durability guarantee is established.",
    "The public supplier-payment model illustrates the principle. RC15 has not natively validated that workflow, or intake of an already-submitted external payment.",
    "Counts are separate test populations, not independent reliability samples. No reliability percentage is measured.",
    "Hashes identify bytes. Local semantic checks are not signatures, independent attestation, provider authentication or customer validation."
  ],
  "production": "NO_GO",
  "supporting_records": "Full source and original records available by request under agreed scope and terms",
  "completed_payment_case": {
    "origin": "Local full-amount fixture reproduction",
    "original_state": "PAID",
    "available_minor": 0,
    "replacement_decision": "HOLD",
    "replacement_transfer_count": 0,
    "interpretation": "Completed exposure consumes the capacity. The public model is not a released API response contract."
  },
  "schema": "haltseal.public-engineering-summary.v2",
  "public_summary_revision": 2,
  "public_summary_updated": "2026-10-07",
  "candidate_scope": "Own-account USD cash movement; not supplier payment. Full-amount local examples only.",
  "customer_acceptance": {
    "native_status": "NOT_RUN",
    "required_before_customer_approval": "Authoritative provider outcomes, coverage of every in-scope release path, an accepted recovery plan and customer sign-off require separate qualification.",
    "detailed_records": "Available within an agreed technical review"
  }
}