diff --git a/red-queen-architecture/control-plane/cp2a2_2b/rq-historical b/red-queen-architecture/control-plane/cp2a2_2b/rq-historical
index e695156..8577de5 100755
--- a/red-queen-architecture/control-plane/cp2a2_2b/rq-historical
+++ b/red-queen-architecture/control-plane/cp2a2_2b/rq-historical
@@ -1676,6 +1676,10 @@ verify_runner_remediation_image() {
   req_ok; expect_zero "$@"
   echo "=== VERIFY-RUNNER-REMEDIATION-IMAGE (Candidate vs Host-SoT / Recovery-Gold) ==="
   remediation_session || die "verify: keine gueltige Build-Session mit FULL_IMAGE_ID (zuerst build-runner-remediation) (FAIL CLOSED)"
+  # (RAIN Hotfix) Source-State-Variablen (REMEDIATION_SESSION_ID u.a.) deterministisch aus
+  # autorisiertem Recovery-Source-State initialisieren, bevor sie unten verwendet werden.
+  # Ohne diesen Aufruf ist REMEDIATION_SESSION_ID unter set -u unbound -> Exit 1.
+  load_remediation_source_state
   local imgid; imgid="$(remediation_full_image_id)"
   echo "  REMEDIATION_FULL_IMAGE_ID=$imgid (aus Session, NICHT nur Tag)"
   docker image inspect "$imgid" >/dev/null 2>&1 || die "verify: Image-ID nicht inspectable (FAIL CLOSED)"