{
  "schemaVersion": "niko-public-redacted-incident-evidence-v1",
  "sourcePacketSha256": "4649077f8065a675472ec34b7099b6f925a98835e6f66a553ec16046bd4147ae",
  "publicationState": "PROPOSED_NOT_DEPLOYED",
  "packet": {
    "schemaVersion": "niko-community-publishing-incident-evidence-v1",
    "incident": "2026-09-28-stale-diagnostic-edition",
    "edition": {
      "id": "iez-2026-09-28-v1",
      "contentSha256": "5364239cbf101cbca847b49ecd98f2cc5355a72e8dc98c09fb25d261fc02c61f",
      "containedForbiddenDiagnostic": true,
      "publishedAtField": "2026-09-28T15:00:00.000Z",
      "evidenceAsOfUtc": "2026-09-28T16:29:47.054Z"
    },
    "timeline": [
      {
        "at": "2026-09-28T16:29:49.214Z",
        "event": "24 delivery rows queued"
      },
      {
        "at": "2026-09-28T16:29:50.905Z",
        "event": "first provider acceptance recorded"
      },
      {
        "at": "2026-09-28T16:30:22.308Z",
        "event": "last provider acceptance recorded"
      },
      {
        "at": "2026-09-28T16:30:22.311Z",
        "event": "scheduler run recorded ok"
      },
      {
        "at": "2026-09-28T20:40:13Z",
        "event": "SQLite-safe containment backups started"
      },
      {
        "at": "2026-09-28T20:42:06.773333057Z",
        "event": "Watch restarted with sends disabled"
      }
    ],
    "effect": {
      "targeted": 24,
      "queued": 24,
      "providerAccepted": 24,
      "failed": 0,
      "retry": 0,
      "suppressedOrSkipped": 0,
      "providerAcceptanceIsDelivery": false,
      "deliveryProven": 0,
      "unsubscribedEventsBefore": 2,
      "unsubscribedEventsAfter": 0,
      "currentlyActiveOriginalRecipients": 24,
      "currentlySuppressedOriginalRecipients": 0
    },
    "automationBoundary": {
      "sendEnabledAtEffect": true,
      "schedulerStart": "createWatchSubscriberService(... startScheduler:true) -> publisher.start()",
      "runPath": "CommunityPublisher.runDue -> publishDate -> saveEdition -> queueEditionDeliveries -> deliverPending",
      "exactPerEditionApprovalPresent": false,
      "exactPerEditionGrantPresent": false,
      "finding": "The broad automation flag and schedule enabled routine sends; neither constituted human approval of this exact edition or content. The Prime Agent workflow created and executed the edition without a human instruction to send this exact edition/content."
    },
    "rootCause": {
      "projection": "publicSnapshotFromExperimentStatus copied status.worker health/lastError into verifiedChanges as Worker state",
      "rendering": "editionText rendered every verifiedChanges item into the shared email body",
      "guardGap": "validation checked freshness/shape and private-data boundaries but had no email contract excluding internal diagnostics or requiring reader value",
      "staleness": "a transient internal diagnostic was presented as a current subscriber update"
    },
    "sourceEvidence": [
      {
        "commit": "33cc332ae1a227e3e25f354fc7d8576aaecefbb2",
        "path": "niko-mail/server/community-editions.mjs",
        "sha256": "dcf99eae18a5745dc43710c7eb3f36ab3964747891f859fb30a1b7d029a6a593",
        "lines": [
          93,
          103,
          183,
          185,
          210,
          213,
          292
        ]
      },
      {
        "commit": "33cc332ae1a227e3e25f354fc7d8576aaecefbb2",
        "path": "niko-mail/server/watch-subscriber-service.mjs",
        "sha256": "e0efac8e1a82b6154fa37a416732d1d05c861f03a3ac94337d1323281f897ba1",
        "lines": [
          61,
          145,
          152
        ]
      }
    ],
    "containment": {
      "backupPath": "/srv/niko/deploy-backups/20260928T204013Z-community-content-containment",
      "watchBackupSha256": "af905d8de25db5db7645b0095c15c6528883f4f978aa0874ac9ac53fa47a9460",
      "mailBackupSha256": "d19d529e92e01762cc510199d417c73db22fbac801f2bf889f7632e1838c992b",
      "sendEnabledAfter": false,
      "watchHealthHttp": 200,
      "subscriberCountsUnchanged": true,
      "deliveriesBefore": 120,
      "deliveriesAfter": 120,
      "workerAndMailNotRestarted": true
    },
    "uncertainties": [
      "Provider acceptance does not prove inbox delivery, reading, or attention.",
      "No provider delivery receipt exists in the authoritative stores.",
      "Two unsubscribe events existed before the send, but one subscriber had resubscribed; one subscriber is currently unsubscribed.",
      "The exposed signed-link subscriber was identified separately without recording credentials in this packet; per-subscriber revocation is under correction."
    ],
    "redaction": {
      "addresses": true,
      "tokens": true,
      "prompts": true,
      "credentials": true,
      "bodies": true,
      "fullEnvironment": true
    }
  }
}