@@ -43,6 +43,9 @@ world.
    can shift a coordinate by one bit and reject an otherwise intact artifact.
 3. The B1 launcher binds the matrix to its frozen run, episode, scene, dataset,
    semantic evidence, Node-profile digest, and seed before starting Control.
+   Before Control starts, the launcher also reconstructs the spatial profile
+   from the exact Node config files and rejects any changed endpoint identity
+   or capability value, even if the profile's unkeyed digest was recomputed.
    The Controller loads the bounded matrix as an optional deployment-owned
    source and checks its schema, content digest, endpoint coverage, reset
    positions, and decision consistency. The source is not Mission Grounding,
 
@@ -193,6 +193,24 @@ def load_spatial_profile_snapshot(path: Path) -> tuple[FloorTransitionProfile, .
         raise IntegrationError(f"cannot admit deployment spatial profile: {error}") from error
 
 
+def verify_spatial_profile_sources(path: Path, node_configs: tuple[tuple[int, Path], ...]) -> None:
+    """Require the frozen profile to equal the exact configured Node declarations.
+
+    The Habitat Python 3.9 child checks source byte digests but cannot parse TOML
+    with its standard library. This deployment preflight runs under Python 3.11
+    before Control starts, so a recomputed snapshot digest cannot substitute
+    different capability facts or endpoint identities for the Node sources.
+    """
+    load_spatial_profile_snapshot(path)
+    try:
+        document = json.loads(path.read_text(encoding="utf-8"))
+        expected = build_spatial_profile_snapshot(node_configs)
+    except (OSError, ValueError, TypeError) as error:
+        raise IntegrationError(f"cannot verify deployment spatial profile: {error}") from error
+    if document != expected:
+        raise IntegrationError("deployment spatial profile differs from configured Node sources")
+
+
 def assess_spatial_feasibility(
     habitat_env: Any,
     agent_id: int,
@@ -322,13 +340,18 @@ def _digest(value: dict[str, object]) -> str:
 
 
 def main() -> None:
-    """Build an exact run-local Node registration snapshot with Python 3.11+."""
+    """Build or verify a run-local Node registration snapshot with Python 3.11+."""
     parser = argparse.ArgumentParser(description="Freeze Node spatial capability facts")
     parser.add_argument("--node-a", type=Path, required=True)
     parser.add_argument("--node-b", type=Path, required=True)
     parser.add_argument("--output", type=Path, required=True)
+    parser.add_argument("--verify-sources", action="store_true")
     arguments = parser.parse_args()
-    document = build_spatial_profile_snapshot(((0, arguments.node_a), (1, arguments.node_b)))
+    node_configs = ((0, arguments.node_a), (1, arguments.node_b))
+    if arguments.verify_sources:
+        verify_spatial_profile_sources(arguments.output, node_configs)
+        return
+    document = build_spatial_profile_snapshot(node_configs)
     write_text_atomic(arguments.output, json.dumps(document, sort_keys=True, indent=2) + "\n")
 
 
 
@@ -25,9 +25,11 @@
 from habitat_local_eaios.shared_world import SharedEmosStage2Runtime  # noqa: E402
 from habitat_local_eaios.spatial_feasibility import (  # noqa: E402
     FloorTransitionProfile,
+    _digest,
     assess_spatial_feasibility,
     build_spatial_profile_snapshot,
     load_spatial_profile_snapshot,
+    verify_spatial_profile_sources,
 )
 
 _ROOT = Path(__file__).parents[3]
@@ -127,6 +129,7 @@ def test_exact_node_registration_snapshot_round_trip_and_source_change(tmp_path:
     profiles = load_spatial_profile_snapshot(snapshot)
     assert [profile.node_id for profile in profiles] == ["e1-shared-node-a", "e1-shared-node-b"]
     assert [profile.support_for("mobility.move@v1") for profile in profiles] == [True, False]
+    verify_spatial_profile_sources(snapshot, ((0, a), (1, b)))
     tampered = json.loads(snapshot.read_text(encoding="utf-8"))
     tampered["agents"][1]["operation_support"]["mobility.move@v1"] = True
     snapshot.write_text(json.dumps(tampered), encoding="utf-8")
@@ -141,6 +144,34 @@ def test_exact_node_registration_snapshot_round_trip_and_source_change(tmp_path:
         load_spatial_profile_snapshot(snapshot)
 
 
+@pytest.mark.parametrize("field", ["operation_support", "node_id", "agent_id"])
+def test_resealed_spatial_profile_cannot_replace_node_source_facts(
+    tmp_path: Path, field: str
+) -> None:
+    """A fresh digest cannot replace exact Node capability or endpoint declarations."""
+    source = _ROOT / "scenarios/e1-shared-world-episode-51"
+    a = tmp_path / "a.toml"
+    b = tmp_path / "b.toml"
+    a.write_bytes((source / "node-a.toml").read_bytes())
+    b.write_bytes((source / "node-b.toml").read_bytes())
+    snapshot = tmp_path / "profile.json"
+    document = build_spatial_profile_snapshot(((0, a), (1, b)))
+    second = cast(dict[str, Any], cast(list[Any], document["agents"])[1])
+    if field == "operation_support":
+        support = cast(dict[str, bool], second["operation_support"])
+        support["mobility.move@v1"] = True
+    elif field == "node_id":
+        second["node_id"] = "substituted-node"
+    else:
+        second["agent_id"] = 2
+    body = {key: value for key, value in document.items() if key != "digest"}
+    document["digest"] = _digest(body)
+    snapshot.write_text(json.dumps(document), encoding="utf-8")
+    load_spatial_profile_snapshot(snapshot)
+    with pytest.raises(IntegrationError, match="differs from configured Node sources"):
+        verify_spatial_profile_sources(snapshot, ((0, a), (1, b)))
+
+
 @pytest.mark.parametrize(
     ("support", "expected"),
     [(False, "incompatible"), (True, "compatible"), (None, "unknown")],
 
@@ -242,6 +242,11 @@ wait_http http://127.0.0.1:28102/v1/health 30 ONLINE
 uv run --project "$REPO" python -m roboguide_eval.b1_planning_source \
     "$RUN" --check-artifact \
     || { FAILURE_REASON=planning_world_evidence_unavailable; exit 1; }
+PYTHONPATH="$REPO/integrations/habitat-local-eaios" python3 -m \
+    habitat_local_eaios.spatial_feasibility \
+    --node-a "$RUN/node-a.toml" --node-b "$RUN/node-b.toml" \
+    --output "$RUN/spatial-profile.json" --verify-sources \
+    || { FAILURE_REASON=spatial_profile_source_mismatch; exit 1; }
 uv run --project "$REPO" python -m roboguide_eval.b1_deployment_feasibility "$RUN" \
     || { FAILURE_REASON=preassignment_feasibility_unavailable; exit 1; }