path = r"C:\Users\intel\AppData\Local\OptimusRuntime\Labs\AR74\10_ar84_trust_boundary\candidate_workspace\app\remediation\self_repair\promotion_executor.py"
with open(path, "r", encoding="utf-8") as f:
    content = f.read()

old_sig = '''        telemetry_audit: Optional[Any] = None,
        require_authenticated_provenance: bool = True,'''

new_sig = '''        telemetry_audit: Optional[Any] = None,
        require_authenticated_provenance: Optional[bool] = None,'''

old_assign = '''        details_payload: Dict[str, Any] = {
            "promotion_id": promo_id,
            "incident_id": incident_id,
            "mission_id": incident_id,
            "telemetry_audit": telemetry_audit,
            "require_authenticated_provenance": require_authenticated_provenance,
        }'''

new_assign = '''        eff_req_auth = require_authenticated_provenance
        if eff_req_auth is None:
            eff_req_auth = True if telemetry_audit is not None else (False if is_temp_ws else True)

        details_payload: Dict[str, Any] = {
            "promotion_id": promo_id,
            "incident_id": incident_id,
            "mission_id": incident_id,
            "telemetry_audit": telemetry_audit,
            "require_authenticated_provenance": eff_req_auth,
        }'''

old_replay = '''        # Replay guard check at executor gate if telemetry_audit is provided
        if require_authenticated_provenance and telemetry_audit:'''

new_replay = '''        # Replay guard check at executor gate if telemetry_audit is provided
        if eff_req_auth and telemetry_audit:'''

if old_sig in content:
    content = content.replace(old_sig, new_sig, 1)
    print("Replaced sig")
if old_assign in content:
    content = content.replace(old_assign, new_assign, 1)
    print("Replaced assign")
if old_replay in content:
    content = content.replace(old_replay, new_replay, 1)
    print("Replaced replay")

with open(path, "w", encoding="utf-8") as f:
    f.write(content)
print("Finished updating promotion_executor.py defaults")