Harden source inventory and authority policy classification without exemptions. Reset live health at lock acquisition, validate persisted schema and lock-directory invariants, and clarify setup recovery guidance. Verify Debian payload digests and all package relationship metadata while sharing one legacy vocabulary authority across audits.