EZA-001-LINUX-EXPERIMENTAL-EVIDENCE-001-public.2
SEPARATE PRIVACY-MINIMIZED CANDIDATE — UNSIGNED — NOT PUBLISHED

This edition preserves the five saved native cases and their original authority
states, decisions, receipts and 22 substantive ledger rows. Journald and physical
record wrappers containing operational identity are explicitly derived privacy
projections. They are not unchanged original files or newly signed attestations.
PUBLIC2-OPAQUE-* values are synthetic correlation labels, never historical values.
Original Release 220 and public.1 remain unchanged and private review inputs.

Native protocol: PASS within the five exact saved cases and recorded trust model.
Manual four-file denial: INCONCLUSIVE. Isolated scope enforcement: INCONCLUSIVE.
Live same-tick mutation: NOT EXECUTED. Overall adversarial isolation: INCONCLUSIVE.
No production certification or new historical execution is claimed.

Start with PUBLICATION-LINEAGE.json, then PROJECTION-INVENTORY.json,
PUBLIC1-DISPOSITION.jsonl, REPRODUCTION.txt and DISCLOSURE.json. All source and
projection digests have distinct scopes. Original signatures cover original
manifest/container bytes, not projections or this edition. Verification reports
are unsigned saved-evidence assessments, not independent execution witnesses.

All 470 accepted SSH authentication records, duplicated maintenance raw output,
and full maintenance replay inputs are omitted. Full saved maintenance replay is
no longer publicly reproducible. Historical maintenance PASS statements retained
in other records describe prior assessments whose full inputs are unavailable in
this edition. Consult HISTORICAL-REFERENCE-STATUS.json before following old paths.
Native UID/GID roles, relevant process/unit/invocation/ticket correlations and
native MESSAGE payloads remain inspectable. Some implementation source and
historical reports contain identity-only projections: never execute them as the
historical observer. Core protocol implementation files are unchanged.

No native dependencies, complete runtime, complete installation history or
original container tree is supplied. The edition cannot reproduce the runtime
or independently prove nested ancestry from the old signature alone. Exact
original-byte aliases are in INCLUDED-ORIGINAL-MEMBERS.jsonl; every other original
occurrence is in OMITTED-ORIGINAL-MEMBERS.jsonl, including projected source bytes.

LICENSE and NOTICE apply within the recorded owner-held/authorized rights.
New metadata, projections and the offline verifier are marked separately.
Separate independent acceptance is pending. Do not sign before that review.
No publication destination, deployed registry, indexing or website gate is active.

EVIDENCE IS RETRIEVABLE. PERMISSION IS NOT INFERRED.
Reading, retrieval, learning and license permissions confer no protected execution
authority. Only the trusted enforcement boundary may establish such permission.
