No study yet: this module has no plate position.
What it does for you: It runs a Slice's frozen checks against a sealed Candidate and keeps what it saw. For each check it hands the sandbox one side's own files as the program (the unchanged code or the Candidate) and the one fixture input the check names, and nothing else: the expected output stays on the host as a digest. It refuses to be set up if anything the Factory must keep private sits where the sandbox can read, and checks that again before each run, along with whether it still owns the work, what the gate says, the runtime and the time left. It finds such a thing whether it is named directly, through a link, or through the Data volume's second names for system folders. Every run, started or not, becomes one stored Evidence record (it stops storing, and starts nothing more, if a write fails or it no longer owns the work), so a refusal, timeout or lost run can only make the result Inconclusive, never a pass or a fail. Beside it, a small store keeps each frozen fixture input once and checks it again on every read.
It refuses before anything runs if the Candidate was sealed for another Slice, store or set of checks.
How it links: It runs programs only through the Confined executor, stores records in the Evidence store for Repository Assurance to judge, and checks its owner's hold with the Attempt fence. It takes a sealed Candidate and the unchanged code from Repository, but never touches Git or the journal itself.
Honest limits:
- Nothing calls it yet: the delivery flow that will pass it the gate and judge its records is not built, and no real Slice has been checked with it.
- It runs each check once. There is no retry and no fallback to running code outside the sandbox.
- Its privacy check compares names and file identities at setup and before every run. It does not find a second hard link to a private file, a link made during a run is caught only before the next one, and anyone who can write the stores can forge records.
- If its owner's hold ends during a run, the run still finishes; only then is nothing more stored or started.
Status: Accepted as step 1, increment 3, on independent review (build review), but nothing uses it yet. This is local development only, not a release or a customer benefit, and all 27 epics remain open.