{
  "schema": "aa-b6-offhost-restore-evidence-v2",
  "status": "OFFHOST_RESTORE_PASS",
  "recordedAt": "2026-09-19T13:08:12.032Z",
  "releaseSha": "a68aff5a53f5dc9387e1976031b0f54ff0d3f676",
  "snapshot": "20260919T130005Z",
  "notBeforeUtc": "2026-09-19T12:58:20.017Z",
  "ciphertextSha256": "3502dd29a01dc9304bf3b248d7f46ae8d6b450f9d64292049ceba88aa8938b5f",
  "manifestSha256": "b38c65cbd8db2fb03582dd4ad71b0f9b6260371274b53ec8420d34682ce4ccc9",
  "originalDbSha256": "f817e73c92b11974aace8ca016d774ee5012ebe521d44e51ced534b0c55b88a7",
  "restore": {
    "at": "2026-09-19T13:02:34.4447177Z",
    "verifierVersion": "b6.restore-verifier-v2",
    "verifierModuleDigest": "254cb29d39aff2ae2b7d8c1cb884f55ee202a1b685dde74731673f7c432b27bd",
    "buildManifestDigest": "21d81f9448cc81abe92533dda9c221fddc32b7c1766e8ece53f4363f311c08c7",
    "verifiedBuildFiles": 145,
    "verifiedModuleClosure": 17,
    "sourceFingerprint": "fd3d3dcdc14efb78e0fa9918d3b05984e496994bf90add19ed6ab5a528c690c1",
    "sourceLedgerCompared": "target",
    "sourceLedgerMatch": true,
    "epochBefore": 0,
    "epochAfter": 1,
    "recoveryMode": "recovery_readonly",
    "effectsDenied": true,
    "liveDatabaseModified": false
  },
  "tamper": {
    "status": "BACKUP_TAMPER_REJECTED",
    "at": "2026-09-19T13:02:35.5256398Z",
    "sourceCiphertextSha256": "3502dd29a01dc9304bf3b248d7f46ae8d6b450f9d64292049ceba88aa8938b5f",
    "tamperedCiphertextSha256": "d2185abda39c900eb78b4b4aed3da2433b92d93635f7c35cae899c207164f409",
    "decryptRejected": true,
    "opensslExitCode": 4
  },
  "verification": {
    "independentChecksPassed": 22,
    "independentChecksTotal": 22,
    "taskLastResult": 0,
    "targetArchivedWithIdenticalBytes": true,
    "targetSha256": "1d8355377727f20d9bed8b05a9b0ca10b297752b565345b4880682e338bab1b7",
    "ownedPlaintextScratchDirectoriesRemaining": 0,
    "liveOperatorStatusAfterDrill": "completed",
    "liveSourceFingerprintAfterDrill": "fd3d3dcdc14efb78e0fa9918d3b05984e496994bf90add19ed6ab5a528c690c1",
    "evidenceSha256": "d7ed99abeb14f7cc28403e7a0dfb3cd4adc9f61b5c877e2d0003d7a89a8370f3"
  },
  "note": "Records the explicit post-B4 target drill. Plaintext backups, keys, credentials and session logs are not published."
}