D2-PREP (doyle YARBDARU ~07:04:14Z): on hertz PREP request, ONLY measure exe + capture hashes, answer PREPARED/NOT_STARTED. No invocation, no elevated action. GO = doyle.
hertz FSEZANAF ~07:04:32Z: doyle ADMITTED one PREP-ONLY attempt, frozen driver 2fd7d689, conditional on liam session confirm right before launch. PREP unelevated, hertz launches. Driver writes PREPARED request -> ACK ONLY, run nothing. Receipt 4 whole lines: PREPARED / NOT_STARTED / executable_sha256=<mine of pinned spt.exe> / capture_sha256=<mine of bundle d2_capture.ps1>. Not prepared -> in WORDS, never bare NOT_PREPARED line. Executor must NOT answer GO request (doyle's).
doyle G55HVNWD ~07:04:39Z: success receipt = BOTH PREPARED and NOT_STARTED lines + both exact measured hash fields + request NONCE line. Unready/mismatch -> report failure, do NOT assert PREPARED.
CLOSED by doyle 6XDBWFUD ~07:08:22Z: D2 PREP ended before any handoff or GO; window released, grants spent; no receipt/action requested from liam. liam measured/wrote nothing for it.
FRESH PREP attempt (doyle XMVZUZJG ~07:10:54Z): confirm session to hertz; readiness receipt w/ both measured hashes + NEW nonce; no GO, no product invocation. Prior attempt's nonce NOT reusable.
hertz Z3HSE7BI ~07:11:12Z: fresh PREP pinned to driver e093e80dcf41247e0a855408661092602709131bdf34b44c072b41d81ac6575b (prior halted at request-text defect pre-handoff). Renewed session confirmed 2026-09-13T07:11:26Z.
doyle SSLBJQ7S ~07:11:32Z: extra 'nonce: <NEW nonce>' line PERMITTED (checks need 4 exact whole lines, don't forbid extras). Hash values immediately after '=', no spaces/placeholders. Availability confirmed; no recheck unless it changes.
hertz I3AYFIFJ ~07:11:52Z: nonce line REQUIRED (handoff_await: EXACTLY ONE whole line 'nonce: <request nonce>', quoted exactly). PREPARED check: whole-line presence of PREPARED / NOT_STARTED / executable_sha256=<hash> / capture_sha256=<hash>; other lines ignored. PLAN: receipt = exactly these 5 lines, nothing else.
doyle MPHHGTFI ~07:18:52Z: leg 003 SPENT. Preserve console/stamps/exits/receipt. PSModulePath = hypothesis, do not investigate/repair. My 5470 no-listener sample != baseline equality (hertz guard owns). Await ONLY run-bound cleanup request admitted by gates. Preserved: leg-003-console.txt, leg-runner.sh (hashes above in ledger).