docs(release): approve August 1 controlled beta

scripts/verify-aug1-release-readiness.sh

@@ -48,16 +48,27 @@ for snapshot in "${scenario_snapshots[@]}"; do
     exit 4
   }
 done
+scenario_snapshots_b64="$(
+  printf '%s\n' "${scenario_snapshots[@]}" | base64 | tr -d '\r\n'
+)"
+[[ "$scenario_snapshots_b64" =~ ^[A-Za-z0-9+/=]+$ ]] || {
+  echo "FAIL: strict approval snapshots could not be encoded safely" >&2
+  exit 4
+}
 
 ssh -o BatchMode=yes -o ConnectTimeout=10 "$REMOTE_SSH" bash -s -- \
-  "$REMOTE_SERVICE" "$REMOTE_DB" "$TENANT_ID" "${scenario_snapshots[@]}" <<'REMOTE'
+  "$REMOTE_SERVICE" "$REMOTE_DB" "$TENANT_ID" "$scenario_snapshots_b64" <<'REMOTE'
 set -euo pipefail
 
 service="$1"
 db="$2"
 tenant="$3"
-shift 3
-snapshots=("$@")
+snapshots_b64="$4"
+mapfile -t snapshots < <(printf '%s' "$snapshots_b64" | base64 --decode)
+[[ "${#snapshots[@]}" -eq 5 ]] || {
+  echo "FAIL: production received an invalid scenario snapshot payload" >&2
+  exit 9
+}
 
 pid="$(systemctl show -p MainPID --value "$service")"
 [[ -n "$pid" && "$pid" != "0" ]] || {