test: align Linux replay guard with reviewed production source

scripts/validation/opcua-server-lifecycle-linux/README.md

@@ -51,8 +51,11 @@ verified diagnostic), RID `linux-arm64`, self-contained runtime 10.0.14, explici
 `UseAppHost=true`, `PublishSingleFile=false`, `PublishTrimmed=false`, one MSBuild
 node, and an external task-owned artifacts directory. All runtime packs were
 already cached. No production or test source is patched during publish. The
-launcher requires an empty production/package source diff against `7b353d7b` and
+launcher requires an empty production/package source diff against the reviewed
+`cd60e469` production tree and
 records the actual published revision separately from the launcher revision.
+The reference was advanced from `7b353d7b` after source review of comment-only
+production edits; historical receipts retain their actual source/reference hashes.
 That is source equivalence, not a claim that separately built Linux and macOS
 assemblies have identical hashes. The full publish file hashes, exact test source
 hash, runtimeconfig and SDK dependency versions are retained.

scripts/validation/opcua-server-lifecycle-linux/run.py

@@ -17,7 +17,7 @@ ROOT = HERE.parents[2]
 PROJECT = ROOT / 'tests/Server/ZB.MOM.WW.OtOpcUa.OpcUaServer.IntegrationTests/ZB.MOM.WW.OtOpcUa.OpcUaServer.IntegrationTests.csproj'
 APPNAME = 'ZB.MOM.WW.OtOpcUa.OpcUaServer.IntegrationTests'
 TARGET = 'Repeated_lifecycles_return_resources_to_a_steady_baseline'
-BASE = '7b353d7bae5311a2f0a33c0a82c88d2c5b49d76f'
+BASE = 'cd60e469a100412ee08f598accad07a6959778ba'
 
 
 def write(path, value):
@@ -97,7 +97,7 @@ def main():
     revision = subprocess.check_output(['git', '-C', str(ROOT), 'rev-parse', 'HEAD'], text=True).strip()
     production_diff = subprocess.check_output(['git', '-C', str(ROOT), 'diff', BASE, 'HEAD', '--', 'src', 'Directory.Packages.props', 'Directory.Build.props'], text=True)
     if production_diff:
-        raise RuntimeError('Production/package source differs from recorded 7b353d7b compatibility build; review required')
+        raise RuntimeError('Production/package source differs from reviewed cd60e469 source; review required')
     image = json.loads(subprocess.check_output(['docker', 'image', 'inspect', args.image, '--format', '{{json .}}'], text=True))
     if image['Architecture'] != 'arm64' or image['Os'] != 'linux':
         raise RuntimeError('Expected cached official Linux ARM64 image')