{
  "schema_version": 1,
  "kind": "signalbridge-native-receipt-promotion",
  "run_id": "4a5748dcc7a74525a7469dc8d802438a",
  "promoted_file": "receipt.json",
  "private_receipt_sha256": "e5c35e1e67fbd6dd42636c427ce32afc7ea16ef89ca0344406a7fc0a04bd44d6",
  "promoted_on": "2026-10-03",
  "note": "Verbatim copy of the retained private run receipt; raw logs, credentials and databases stay private.",
  "receipt": {
    "acceptance_passed": true,
    "approval_reference": "20261003-owner-claude-wazuh-recovery-1",
    "capacity_before": {
      "available_host_memory_bytes": 15136976896,
      "free_disk_bytes": 66405404672
    },
    "continuous_delivery_verified": false,
    "execution_policy": "wazuh-preserve-baseline-v1",
    "finished_at": "2026-10-03T18:09:06.327554+00:00",
    "image_id": "sha256:f74021c1275393aa094b6f6bb57f9bac240cba7ddb35f2a841e430341f5fc6a0",
    "image_reference": "wazuh/wazuh-manager@sha256:f74021c1275393aa094b6f6bb57f9bac240cba7ddb35f2a841e430341f5fc6a0",
    "independent_shutdown": {
      "late_operation_drain_elapsed_ms": 60000,
      "late_operation_drain_seconds": 60,
      "late_operation_drain_verified": true,
      "preservation_final": {
        "engine_digest": "24fb7dd0c8c00a1ac2aa7fd5700b6c9c07cb53179eb806665833ee565fdcc0e1",
        "owned_count": 1,
        "owned_running_count": 0,
        "preservation_digest": "4882de04dc0aad8608de516605e7e9574cb1ab2d019d5e3b6aa02b399134e75d",
        "preserved_count": 0,
        "preserved_digest": "f0a23a9447feeddf6a17ae11b7c154cca32f90360ec7a1601f80f675527c7af6",
        "running_count": 0,
        "running_digest": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945"
      },
      "preservation_verified": true,
      "reason": "launcher_finished",
      "run_id": "4a5748dcc7a74525a7469dc8d802438a",
      "shutdown_verified": true,
      "stopped_at": "2026-10-03T18:09:05.933952+00:00",
      "stopped_component_count": 1
    },
    "independent_shutdown_verified": true,
    "kind": "signalbridge-native-wazuh-ready-publication",
    "limits": [
      "Finite source-bound replay with one deliberate logcollector stop/restart and one same-path input rotation; not continuous delivery, crash recovery or Wazuh output-file rotation.",
      "The R3 signal is forwarded from SignalBridge, not rediscovered independently by Wazuh.",
      "Trusted local-operator evidence; not attestation against a local administrator.",
      "Preservation verifies sampled nonsecret envelopes, not uninterrupted application health."
    ],
    "main_shutdown": {
      "run_id": "4a5748dcc7a74525a7469dc8d802438a",
      "shutdown_verified": true,
      "stopped_component_count": 1
    },
    "main_shutdown_verified": true,
    "native_proof": {
      "continuous_delivery_verified": false,
      "coverage": {
        "alerted_logical_inputs": 8,
        "archived_logical_inputs": 24,
        "bootstrap_counts_match": true,
        "continuous_delivery_verified": false,
        "distinct_alert_tool_ids": 8,
        "distinct_archive_tool_ids": 24,
        "expected_alert_inputs": 8,
        "expected_logical_inputs": 24,
        "extra_alert_copies": 0,
        "extra_archive_copies": 0,
        "forwarded_detections_are_independent_wazuh_rediscovery": false,
        "genuine_source_execution_verified": false,
        "missing_alert_inputs": 0,
        "missing_archive_inputs": 0,
        "native_record_format_verified": true,
        "native_runtime_execution_verified": false,
        "partial_native_files": {
          "alert": false,
          "archive": false
        },
        "physical_alert_copies": 8,
        "physical_archive_copies": 24,
        "repeated_alert_tool_ids": 0,
        "repeated_archive_tool_ids": 0,
        "unexpected_noncustom_alerts": 0
      },
      "durable_capture_revalidated": true,
      "kernel_controls": {
        "capabilities": [
          "SETGID",
          "SETUID",
          "SYS_CHROOT"
        ],
        "cgroup_version": 2,
        "cpu_quota_equals_period": true,
        "disposable_root_and_evidence_writable": true,
        "gid": 0,
        "memory_bytes": 1610612736,
        "network_interfaces": [
          "lo"
        ],
        "no_new_privileges": true,
        "pids": 256,
        "seccomp_filter": true,
        "source_and_four_inputs_readonly": true,
        "swap_bytes": 0,
        "uid": 0
      },
      "native_raw_receipts_revalidated": true,
      "native_runtime_execution_verified": false,
      "owned_daemons_stopped": true,
      "raw_receipt_sha256": {
        "analysisd-config.log": "ee3a567d50c34022568b4c93d27f1642b469bff1473201bc2fb9bd2298023b7f",
        "capture.sqlite3": "336b16767e49eacd58968476960319362f4182c09e06826a39e97aff95d092e6",
        "collector-ready-state.json": "469f544e709076762e51743fe0eb700d84e65d6cac01ae30f18621f1bc1523ac",
        "collector-ready.json": "977605a23aced2ee1c148c6a531a6e9a196bae2827e2635094302b44aa70346e",
        "collector-stopped.json": "e02c77ab13b4a3aeeef3efc01a67004493dc4e5c72e38965b85f4d0dad9fcca4",
        "effective-config.xml": "020f46a81b08a837734c109b593f3de361f99b97c382ab526264cb596921595b",
        "effective-internal-options.conf": "4a329a7b96663d5742b069c58a040c5cfa481b206cda6a533dbefa4e9f4bbfbe",
        "heartbeat.json": "195bd2076ce302ff1e3bfc6d0587fbaf2b0877ad6abb5f6328c157859aa754e6",
        "kernel-observed.json": "e8ae2f0d40ecd7dce997045bfc08095d073cf8bb4798e2b28d20ee2504a586ff",
        "manifest.json": "8681ce30de751d9b33ce1bd46e724a9e70320f2d965d701b2b0a45fe294105bf",
        "native-alerts.jsonl": "f1d6f2cecb1cfd81823b95ce59487399b157d7ec81b4a229e7d85f008b3eba99",
        "native-archives.jsonl": "2de0f67f7f250f48329511c3aeaa3f265ff3ec3ac2b90ab42574688c9ea60dbb",
        "native-report.json": "85ade520b51bb595ad919a2d6060fd939a008d068065b850f1322d10897d20c7",
        "publication-complete.json": "3f303628fcff4cac72b04f4b080f6aee0d57218b20f8c3bc17b2e4e1f4eba4a4",
        "publication-initial.json": "4f12d82163f179d7e31a8fa06a3de913b7cca9b21f3e031f0c2f587180e25a7b",
        "run-context.json": "464ae01bf071537d3161cb60744862e1682bc41f01039c7ed51d5695ba70bc68",
        "source-manifest.json": "538b507b7e9da8d74b8af2d4f40a7939d40eb0b120e5314ae47fd94043a2af8e",
        "wazuh-analysisd.log": "abaa4d8e0cefc6f2cf2672f9f5732af89f6d963794cf6e652fe49e03a472ebd0",
        "wazuh-db.log": "c113cf2480e5c506c4f6666e6082573e4e52c4d556d718722ce45065ac2c0dec",
        "wazuh-logcollector-restart.log": "d45c69e8b02ab1fdcf40e959de751bc3ece57f837a08f254c722810daf80c943",
        "wazuh-logcollector.log": "3bedbcec731ad23665a0bc29133c21785003f5ee8307f1813c55253c2dd84ff9"
      }
    },
    "native_runtime_execution_verified": true,
    "owned_container_id": "3db01d79089080f810ee66007d31ad87177b0e89bb3230cc7b0ff5d7294231e5",
    "plan_sha256": "d31b7781422e20f0b5763170067a95ca6a520adc0dcf2527c95e806a1094853d",
    "preservation_digest": "4882de04dc0aad8608de516605e7e9574cb1ab2d019d5e3b6aa02b399134e75d",
    "preservation_final": {
      "engine_digest": "24fb7dd0c8c00a1ac2aa7fd5700b6c9c07cb53179eb806665833ee565fdcc0e1",
      "owned_count": 1,
      "owned_running_count": 0,
      "preservation_digest": "4882de04dc0aad8608de516605e7e9574cb1ab2d019d5e3b6aa02b399134e75d",
      "preserved_count": 0,
      "preserved_digest": "f0a23a9447feeddf6a17ae11b7c154cca32f90360ec7a1601f80f675527c7af6",
      "running_count": 0,
      "running_digest": "4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945"
    },
    "preservation_verified": true,
    "preserved_count": 0,
    "profile": "recovery_rotation",
    "publication": {
      "backlog_records": 13,
      "initial_sha256": "4e4be5ba7f13412ef79d2eacc43a41b11925f7e8586e4a41bd44a01f2b774e69",
      "kind": "signalbridge-wazuh-recovery-publication-v1",
      "native_execution_verified": false,
      "plan_sha256": "d31b7781422e20f0b5763170067a95ca6a520adc0dcf2527c95e806a1094853d",
      "published_records": 24,
      "rotated_name": "documents/observation/observations-000.jsonl.rotated-1",
      "rotation_relative": "documents/observation/observations-000.jsonl",
      "run_id": "4a5748dcc7a74525a7469dc8d802438a",
      "stopped_sha256": "3e78ece1885d1e82ea3c685e92714381630f53fdfa56b768bddc09ac863090c1",
      "tool_receipt_verified": false
    },
    "reviewed_plan_sha256": "4db2b1a262e94ca174b7ca1a4941ee046fde14d306b5fb8d916cf325531b06db",
    "run_id": "4a5748dcc7a74525a7469dc8d802438a",
    "runner_exit_code": 0,
    "runtime_isolation_verified": true,
    "schema_version": 1,
    "source_binding": {
      "engine_source_sha256": "658418f050b9d2877202211e99409cdc58d923490a1baefadb7d614f9e1e4cd0",
      "expected_packets_sha256": "06e57444b697d067cd9da21b1f2cd8580dce40917e0ef541d4dc506ee037f5d5",
      "forwarded_core_signals": 1,
      "independent_wazuh_r3_rediscovery": false,
      "logical_observations": 23,
      "manifest_sha256": "8681ce30de751d9b33ce1bd46e724a9e70320f2d965d701b2b0a45fe294105bf",
      "native_case_id": "1576faa9-6deb-4511-804c-81dafa8bb648",
      "native_source_receipt_sha256": "c254c2099077fdcb129902748a1f302476751605ea4c1b485fbfad1d7c608cc0",
      "native_source_run_id": "b8667b816ce8419da7f3d5d9ac9d6ad6",
      "native_source_selected_sha256": "6a0b6fb937544bb51fa673b34cb99a0cd5f522f3ac84871c609c379a89ff1471",
      "snapshot_run_id": "88ce9f77-2d7f-4b1d-9d36-26f698c2c01a",
      "source_inputs_match_revalidated_reference_run": true
    },
    "stage_growth_ceiling_bytes": 32212254720,
    "stage_plan": "integrations/wazuh_enterprise/ready-publication-acl-review-stage-plan.json",
    "started_at": "2026-10-03T18:07:43.162386+00:00",
    "status": "passed"
  }
}