Before successful postcheck restore the three prior files, remove the new canonical file, and restore exact runtime hashes. Late publication failures do not roll back verified core source changes.