Hard gate for self-modification restarts: a green-build credential bound to the git HEAD, checked before any restart of the running instance