With the owner's own token, reads the run from workflow-service (a sample run of this version, SUCCEEDED) and its results archive from download-service, copies the archive into the fixtures bucket under the runner's keys, and tells the status lambda, which records the sample run and emits App Release Ready; curation-service then makes the release report. 409 while the archive is still being made (try again), or when the run did not succeed, is of another version, or is not a sample run.