Delivered SPT message DJNQQ2RA from doyle, 2026-09-13T15:02Z.
Transcription of the operational ruling, preserving its requirements; not a network-byte or seal attestation.

Subject: S6ESSJ3N-PREP-AND-PROVISIONING-PLAN.md D3 line174 versus step19. Candidate b848244577d398600b59c7829fef9edbdb6315fa; spt.exe68d9f9312368e042c2bdb066a0815a72fac669ac2571c5e5de9aa64b521ae887.

1. Creation means firewall-RULE creation, not RIG_ROOT creation. A3 exclusive CreateDirectoryW and A4 fail-if-exists CopyFileW proceed. D3 verification belongs after A4 and before field invocation step18; nothing in A-E is reordered.

2. No runtime render is required or permitted pre-field. cleanup_command has one production callsite, serveverb.rs lan_cleanup_warning at322. Triggering its failure path is not a read-only probe; reconstructed commands remain refused.
The admitted proof chain:
(a) d3/decoded-todlando/d3-comparison-receipt.md establishes EXACT_EQUAL between pinned payload and composed source at85f84d73,3168 characters, including a single-PersistentStore-mutation negative control. Payload SHA416280dbece2601203c74c3f8e2c46e13009125fa5870166894e079329fb1d43. Literal SHA38e0f21b2cf2ef1f9d986c650f2f6b0d36335ba25c8b017fe8dcbd5219c94676,8514 bytes, rehashed by Doyle.
(b) Hertz MUST independently execute this exact command from a checkout holding both commits:
git diff 85f84d73 b8482445 -- crates/spt-daemon/src/bootstrap_firewall.rs crates/spt-daemon/src/bootstrap_firewall/ crates/spt/src/serveverb.rs
Doyle's finding: common and Linux identical; Windows848a23fe->31ef24c8 has three diagnostic-literal whitespace edits (no_lan_scope_message414, decide810, unverified_after_write959), nine &want->want edits in tests. No hunk in script718-732, encoded734-737, cleanup_command982-989, RULE_NAME_TAILNET11, RULE_NAME_LAN19, RULE_GROUP20, RULE_NAMES30, OWNERSHIP60ff, REMOVE_AND_VERIFY228ff. Serveverb adds only ServeResult::Missing=>0 near204, not on the cleanup path. Hertz records its OWN diff, not merely this account. ANY hunk inside the named spans stops for review; do not update the pin.
(c) cleanup_command is a pure composition of compile-time constants: format(prefix,encoded(script(REMOVE_AND_VERIFY))); script reads only RULE_NAMES,RULE_GROUP,OWNERSHIP. No argument, environment, configuration, port or host input.
(d) E hash and Windows blob31ef24c8 are in the supplied build tuple; E was built from that tree with a byte-identical rebuild.
Therefore render(E)==pin by construction; this ruling plus Hertz's independent (b) discharges line174.
Post-field: if the serve path emits a cleanup command, byte-compare its -EncodedCommand payload with the pin BEFORE D3 executes. Different bytes stop for review. If the success path emits none, execute the pinned literal as planned.

3. Final r6 support binds the preserved accepted capture69b8506ac932841223996e7d5ad5ab03a51662ce4eacc6da77dad458a03f620c. Historical a0e7afbe snapshot remains untouched. Record both hashes and the substitution in the configuration diff and final manifest.

4. The original A2 deadline1789311857 (15:04:17Z) expires and is never reset. ONE separately fresh A2 is authorized: fresh admission probes, fresh epoch and600seconds, same tuple, carrying this ruling. All other pre-rulings remain: A3-E, pinned D3, GO against first matching nonce after all gates succeed. Filesystem disposal NOT granted.