Dry is not safe
Updated
On this page6
The inversion, stated plainly
A syrup is safe because its water activity is too low for anything to grow. A nut butter has a water activity just as low and is not safe on that basis. The difference is that a syrup is also hot filled, and a nut butter typically is not, so nothing in the jar has ever killed anything.
Salmonella survives in it for a long time
It does not multiply, which is the fact people reach for, and it persists. In a dry high-fat matrix it can remain viable for months, so a contamination event upstream reaches the consumer intact however long the jar has been on a shelf. Time is not a control here.
And the dryness makes it harder to kill
This is the part that surprises people. Salmonella becomes more heat resistant as water activity falls. Published work puts a five-log reduction at 140 degrees F at under five minutes in a food at a water activity of 0.99, and around fifty minutes in one at 0.85. The fat adds to that. A heat treatment that would be comfortably sufficient in a wet food is nowhere near sufficient here.
It has happened at scale
The multistate outbreak associated with peanut butter and peanut butter-containing products in 2008 and 2009 is the reference case, and it is why this product class attracts the attention it does from regulators and from wholesale buyers. The question about your roast is not hypothetical and it will be asked.
So the control is upstream and it is the only one
There is no acid, no sugar concentration, no process in the jar. The roast, or somebody else’s roast, is the kill step, and everything after it is about not recontaminating a product that has no way to recover.