The observer-client-contract manifest pins solstone/apps/observer/routes.py and solstone/apps/observer/utils.py by digest under producer.observer_routes and producer.observer_utils. Routing ingest auth rejections through the accountant changes both hashes, so `make check-openapi` goes red without regenerating the bundle. Bump bundle_semver 4.0.1 -> 4.0.2 and regenerate. The change is patch-level: only the manifest differs, and only in pinned input digests. The projection, vectors, wire-behavior fixtures, and consumer audit all regenerate byte identical, so no wire-visible surface moved. Precedent: f7cfe2a85 did the same re-pin after the chat watchdog change, and 996a67fa4 after an earlier change to solstone/apps/observer/utils.py. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>