BOUNDARY | VERDICT | EVIDENCE AND VERIFICATION

Native custodian identity | PASS | 206 startup observations; 218 final-physical process status; current-physical.json: UID/GID 5200 in all four process-ID fields, PID 27309 and unchanged service invocation.
Native executor identity | PASS | trusted journal fields _UID/_GID=5206, one matching ticket row per case; distinct recorded PIDs/invocations. Saved raw journals independently matched to receipts and ledger results.
Grant issuance and single-use consumption | PASS | ledger 2–4 contains the sole issuer registration/start/result; 217 before/after payload has one grant, consumed_roots changes from empty to one, prepared handle removed; current state unchanged.
Authorized protected effect | PASS | 217 NATIVE-RECEIPT.json, transaction afb5ee4b06542befa8edf27e773bc7f4, receipt SHA-256 44699ea8daa6e0fbcc90927eb1566d060720a716203b08b5c18dcbb0cf5364b9; ledger result 10, exact object:X value linux-isolation-207-authorized; object:Y remains initial; exactly one access.
No-authority action | PASS | 218/no-authority, ledger result 13; FAIL_SAFELY / EZA-OBJECTIVE-UNFULFILLABLE-WITHIN-AUTHORITY, blocking reason EZA-AUTHORITY-ABSENT; zero protected effects.
Consumed-grant replay | PASS | 218/consumed-grant, ledger result 19; EZA-REPLAY-DETECTED; zero protected effects, no renewed authority.
Spent-handle attempt | PASS | 218/spent-handle, ledger result 22; EZA-REQUEST-BINDING-MISMATCH; zero protected effects. Claim limited to the exact attempted request.
Out-of-scope attempt refusal | PASS | 218/out-of-scope, ledger result 16; EZA-REPLAY-DETECTED; zero protected effects.
Independent scope enforcement | INCONCLUSIVE | Replay refusal occurred before an isolated scope check; no fresh-grant scope experiment established.
Ledger/witness/authority consistency | PASS | independent canonical hash-chain and receipt-binding checks; existing native observer verified idle witness/DB and ledger proof; 22 ledger records, witness sequence 28, revision 7; current equals 219.
Installed security and runtime | PASS | unchanged security.py digest; current native verify_install includes verify_runtime; 3,658 installation entries verified by native mechanism, 170 non-runtime source/preparation identities matched to packaged candidate.
Maintenance | PASS | historical 218 and current existing verifier outputs replay identically on host; VERIFIED, no reasons; 26 masks and 27 owned-resource identities. Historical package audit remains historical; no new package campaign.
Physical ledger/checkpoint preservation | PASS | 23 entries independently match saved hashes, device/inodes, UID/GID, modes and ACLs. This is identity preservation, not attack-execution evidence.
Current protected-file configuration | PASS | current-physical.json records UID/GID 5200, mode 0600 and owner-only ACLs for sampled custody files. No write-open attempted by this review; no historical denial inferred.
Manual four-file UID 5206 test | INCONCLUSIVE | owner reports PASS; two sudo sessions name UID 5206. Exact code/paths/errno/results and four-target physical before-state not established. See MANUAL-TEST-EVIDENCE.json.
Historical same-tick live mutation | NOT EXECUTED | no live execution record established; fixture scenarios are not substituted.
Other adversarial techniques | NOT EXECUTED | no additional technique claimed or executed in this final review.

Native protocol verdict: PASS within the exact preserved cases. Full adversarial-boundary verdict: INCONCLUSIVE. No demonstrated native failure was found in these cases; preserved observer/schema failures and prior historical refusals remain in the evidence.
