{
  "runner_sha256": "1f0b10b9067ba9d6e3a457e8f6b0439f75856657b53fb6826cf608961328d97f",
  "package_files_exact": 416,
  "binary_hash_matches_archive": true,
  "external_addons": 7,
  "external_fingerprint_records_changed_since_package_cache": [],
  "native_processes_at_review": [],
  "verdict": "No launch blocker found for bounded isolated empty-server startup; recheck run-time gates at launch",
  "review": [
    "Package and binary are read-only mounts and hash-verified before launch; current external records exactly match cached package fingerprints.",
    "Home/tmp/run are masked, environment cleared, private writable run directory only; network/PID namespaces, loopback-only preflight and noBackend/noSound prevent ordinary network/display/audio activity.",
    "Nonblocking shared dedicated lock, prelaunch native process scan, parent serialized execution;110s run with owned process-group cleanup5s TERM then5s KILL and PID namespace child containment.",
    "Result correctly marks0real players and multiplayer/release unproven."
  ],
  "limitations": [
    "Existing process check is a snapshot, not a universal cross-runner lock; parent serialization remains necessary.",
    "Mounted vanilla game data is read-only but not comprehensively hashed by this script.",
    "Source bindings external_addons.py and dedicated_native.PROBE are imported from working tree; script archives itself but not those helper hashes.",
    "Cleanup result records supervisor reap rather than separate post-run descendant inventory; parent should verify process absence after run."
  ]
}