required_stages = ["impl", "unit", "int"]  # ACTIVATED F-025 item 1a + final-wave int (todlando). AMENDMENT 2026-07-27, RE-PINNED by the builder (FIELD-TRUTH W1 leg D): impl = KIND_COORDINATOR_IMAGE_ANNOUNCE/_REPLY + KIND_COORDINATOR_IMAGE/_REPLY + the three DTOs (msg.rs) → run_brain announces {env!("CARGO_PKG_VERSION"), generation} post-hello via Brain::announce_coordinator_image (brainproc.rs/brain.rs) → broker records it ONLY on an exact match with brainproc::supervised_generation() (the AtomicU64 supervise_brain publishes at every spawn), gated by the pure coordinator_announce_accepted / answered by the pure recorded_coordinator_image, both re-checked at READ time so a superseded generation stops reporting (broker.rs) → Brain::coordinator_image_version client (brain.rs) → cmd_daemon_status queries it on the SAME handle and prints render_coordinator_image_line FIRST, with render_broker_image_line de-fanged to informational (no warning verb, no remedy) + JSON coordinator_image/coordinator_stale, stale None on query failure AND on an unreported coordinator (unknown ≠ stale) (cli.rs). DISCRIMINATOR NOTE: role cannot identify the coordinator — recv_hello(.., Role::Brain) admits every client incl. the CLI's own Brain::cold_start — and BRAIN_PROMOTED's version is disk-sourced + trial-path-only, so neither could carry this. unit = coordinator_image_line_is_the_only_stale_warning (matched / stale→warn + refresh-only, never stop+start / unreported→no warning / stale broker under a matched coordinator raises NOTHING) + broker_image_line_reports_without_warning_or_remedy (all three cells: no remedy, no nag) + only_the_supervised_generation_can_claim_the_coordinator_image (the pure announce + read gates: impostor generations refused, superseded record not reported). int = the_running_coordinator_reports_its_compiled_image_and_no_impostor_can (a REAL supervised `spt daemon brain` child announces to a REAL broker over the production socket; a CLI-shaped client reads back its compiled version, and the same client's own announce is refused without disturbing the record). Original evidence below stands for the broker leg. impl = KIND_BROKER_IMAGE/_REPLY + BrokerImageReply (msg.rs) → broker self-report dispatch_broker_image from env!("CARGO_PKG_VERSION") (broker.rs) + Brain::broker_image_version client reading the reply, KIND_ERROR (old broker's `unknown command kind`) → None (brain.rs) + cmd_daemon_status queries both net-status and the image on ONE handle and renders render_broker_image_line beside the installed version; JSON broker_image + broker_stale (final-wave tightening: broker_stale is None on a query FAILURE — Err, not a false-positive true — vs a definite bool only after a successful Ok query) (cli.rs). unit = broker_image_line_flags_a_stale_running_daemon (matched→"matches installed" no-nag / mismatch names both + restart recovery / None still flags older + recovery / no internal-marker leak). int = broker_reports_its_compiled_image_version_over_ipc (a Brain connected to a live served broker round-trips KIND_BROKER_IMAGE → Some(the broker's compiled CARGO_PKG_VERSION); the old-broker→None leg rides the router unknown-kind default, caught client-side).