system.stats on archi-dev-box returns host_secrets with verdict 'per-node' and three evidence lines (machine-id anchor 2026-04-09; every SSH host key and the TLS key newer than the anchor). Previously proven against the file contract in unit tests only. Honest limitation: this is one node, not the dev pair — archy-x250-dev has been offline for two days, so the second node is unreachable, not skipped. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>