diff --git a/internal/hub/contract_test.go b/internal/hub/contract_test.go
index 108d8ea..11e8c7f 100644
--- a/internal/hub/contract_test.go
+++ b/internal/hub/contract_test.go
@@ -57,6 +57,10 @@ func TestHostReport_ContractMatchesGolden(t *testing.T) {
 			{
 				SourceArchive: "local:backup/x.tar.zst", SourceTier: "local", ScratchVMID: 990000,
 				Pass: true, Verified: "boot+running", TestedAt: "2026-06-09T11:05:00Z", DurationSeconds: 1,
+				// slice-7 (v0.7.0): warnings + warnings_recognized must appear in the marshaled
+				// shape so the bidirectional key-set guard exercises the new wire keys.
+				Warnings:           []string{"WARN: Systemd 257 detected. You may need to enable nesting."},
+				WarningsRecognized: true,
 			},
 		},
 		PBSSnapshots: []PBSSnapshot{
diff --git a/internal/hub/testdata/host-report.golden.json b/internal/hub/testdata/host-report.golden.json
index 5f66eb9..695f894 100644
--- a/internal/hub/testdata/host-report.golden.json
+++ b/internal/hub/testdata/host-report.golden.json
@@ -108,7 +108,11 @@
       "pass": true,
       "verified": "boot+running",
       "tested_at": "2026-06-09T11:05:00Z",
-      "duration_seconds": 38.2
+      "duration_seconds": 38.2,
+      "warnings": [
+        "WARN: Systemd 257 detected. You may need to enable nesting."
+      ],
+      "warnings_recognized": true
     }
   ],
   "pbs_snapshots": [