The controller on dbcaa29 parses manifests strictly and refuses `bus` on an artifact and `max-age-days` on a log, both in the re-land group's catalogue. The SDK's conformance events are captured again at the pinned commit, as testdata/beside/CAPTURED asks; they are unchanged.