Capability-proving self-verification of a distributed resilience-measurement agent, distinguishing process liveness from operational capability and reporting a degraded state that names the lost capability; and a customer-initiated diagnostic-to-signed-remediation loop in which a sanitized diagnostic bundle is produced at the customer, a cryptographically signed corrective package is verified and applied by an agent that never contacts the vendor, and the entire cycle remains auditable solely from the customer's own records