Source: MIZOKI audit 2026-09-06 (pinned fc8b03f9) → work-order backlog 2026-09-08 (docs/audits/AUDIT_WORK_ORDERS_2026-09-08.md). Findings are hypotheses until reproduced on current main (WO-00).

Finding: Actuator registration can assert rollback_demonstrated=True; promotion trusts it without a drill [R6]. Files: services/service-action-runner/main.py; tests/governance/test_action_runner.py, test_decision_control_plane.py; ops/remediation/live_proof.py. Fix: promotion requires a stored proof artifact (drill ID, tenant, account, action class, timestamp, outcome) per tenant/account/action; registration flags are advisory only. Acceptance: promotion with flag=True and no artifact → refused; with artifact for a different action class → refused. Depends on: WO-05.