Rule: On the Hetzner box, several critical scheduled scripts exist as TWO files that have diverged: <name>.py and <name>_box.py. The systemd unit's ExecStart runs the _box.py variant. Patching <name>.py does NOT change production behavior.
Why this matters (hard-won 2026-05-17): Fixing the recurring Weber SL false-ping, I patched sl_active_deal_sweeper.py (680 lines) and "proved" it via dry-run on that file — but the live skyrun-sl-active-deal-sweeper.timer runs sl_active_deal_sweeper_box.py (628 lines, a separate diverged copy). The non-_box dry-run was green while production was still broken. Verify-then-claim (running the proof against the exact systemd ExecStart path) caught the near-overclaim before it was reported as fixed.
How to apply:
1. Before patching ANY box scheduled script, run cat /etc/systemd/system/skyrun-<unit>.service | grep ExecStart and patch the EXACT file it names (almost always *_box.py).
2. Prove the fix by invoking the exact ExecStart command (same python, env: SKYRUN_BRIDGE=cloud SKYRUN_CDP_URL=http://127.0.0.1:9222, --dry-run where supported), not the non-_box twin.
3. Confirmed dual-copy examples: sl_active_deal_sweeper(.py / _box.py), extract_smartlead_metrics(.py / _box.py). Assume others follow the pattern until checked.
4. The non-_box .py twins are stale dev copies — a maintenance hazard. Long-term fix (not yet done): make _box.py the only file or a thin import of the shared module. Until then, treat _box.py as canonical/production.