Record the 0.2.6 role-token rerun.

Codex, Claude, and Grok use session-owner and zone-engine on the two cases. The unsigned draft names that rerun and stays unsubmitted. RISK-F-0015 stays open.

Assistant: grok
Assistant-Session: 01a10286-9185-7bb2-b411-89cf6ab4c0c6
This commit is contained in:
tegwick 2026-10-03 23:14:31 +02:00
parent cd9602c9d9
commit d8ec3c00a7
10 changed files with 303 additions and 12 deletions

View file

@ -799,3 +799,25 @@ the earlier receipt carries no authority. None uses the fixture role label
RISK-F-0015 stays open. T07 has not accepted the evidence. T02, T05, T07,
T08, T09, and T10 stay **wait**. The plan stays **blocked**. No DoD-Ok is
claimed.
## Role-token rerun — knowledge 0.2.6, 2026-10-03
The probe prompt at `cd9602c` asks for the fixture token `session-owner`
when the card names that role. Reran only `zones` and `model-switch` on
sealed 0.2.6, digest
`8d1d6a9d4d07fec7b619618de7dfe2be2254c1790f85f4198c7fe19db9751c02`.
The prompt change does not change the seal. Startup and access markers
matched and the reported version was 0.2.6. This is not the 28-case corpus.
Implementing review found no unsafe recommendation. All three use route
`zone-engine` and deny a live authorization endpoint. All three use route
`session-owner` for the provider-switch reload, keep `glas-harness` in
sources, and say the earlier receipt carries no authority. Some source
lists are wider than the fixture's single source. Codex has no server model
in the event stream. Evidence:
`docs/evidence/2026-10-03-026-role-token-rerun.md`.
RISK-F-0015 stays open. These two route tokens match, and T07 has not
accepted a complete current-release corpus. T02, T05, T07, T08, T09, and
T10 stay **wait**. The plan stays **blocked**. No DoD-Ok is claimed.