{ "schema": "source-integration-counterexample/v1", "native_execution": false, "target_manifest_sha256": "41cda74ab32384c789ea8a760475671aadad4e5121335c8f60567ff53d66665b", "case": "actual consumer permits purpose café<&>; full canonical request hash differs from Go HTML escaping", "synthetic_only": true, "actual_compiler_and_consumer_parser_accepted": true, "python_request_digest": "sha256:09bef6f94ad1caf77b9cb39139c59a337b954608da4e205831962cce23050568", "go_request_digest": "sha256:dcaff2c7d48e04a78ca49f2b0e7c19da3d01868bf432a9ac56170511ae125465", "policy_effect": "deny", "policy_reason": "initiating_provider_unadmitted", "request_contains_tokens": false, "fixture_sha256": "3ba1337dc913076286b6c018b2f60026d906699aa3fe6d4d50d712a64ac27c2e", "go_result_sha256": "dc652292bfbb56528aa5c9b47057d64473b62951680f1a532f7ffdd662d5002d", "scope_note": "Compiler catalogue fingerprint matches actual Secrets local target helper. Full request digest mismatch is separate Python/Go canonical join integration blocker, not compiler authority bypass." }