=== ROUTER STEP FACTS CONTRACT VALIDATION ===
step=STEP_049B_0420_REFRESH_CRON_FORENSIC_AUDIT
decision=STOP
all_ok=False
structure_ok=True
success_ok=False
expected_absence_ok=True
blockers_ok=True
success_checks_count=17
expected_absence_count=0

false_success_checks:
  - has_active_hmn_refresh_cron_line
  - legacy_cron_call_removed

warnings:
  - PASS here means forensic data was collected safely, not that nightly refresh is fixed.
  - No refresh was executed by this step.
  - Do not run broad refresh until cron command and safe wrapper behavior are understood.