fix: validate sandbox consumer actors early

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a0233b-178d-7162-b92f-31a31ea8ca9b

docs/intakes/residuals.md

@@ -101,3 +101,31 @@ description: |
   legacy identifiers without C-35 or C-31 warnings.
 state_hub_intake_id: "01a02b78-adff-70b5-8088-594784edff23"
 ```
+
+## GLAS-IN-0004 — Align the mandated ad hoc convention with identifier canon
+
+```yaml
+id: GLAS-IN-0004
+kind: intake
+title: "Make ADHOC workplans valid under the fleet identifier canon"
+lane: green
+status: todo
+priority: medium
+owner: repo-manager
+repo: glas-harness
+origin: residual
+origin_ref: GLAS-WP-0006
+description: |
+  The repository's generated agent instructions mandate
+  workplans/ADHOC-YYYY-MM-DD.md with ADHOC-YYYY-MM-DD-Txx task ids for small,
+  low-risk fixes. On 2026-08-23, statehub fix-consistency accepted the task id
+  but Repo Manager identity preflight raised C-35 because the matching
+  ADHOC-2026-08-23 workplan id is absent from the canon kind registry.
+
+  Align the generated convention, Repo Manager identity preflight, and State
+  Hub synchronization. Either register the documented ad hoc workplan form or
+  replace the generated instruction with one canonical representation. Prove
+  the chosen form through registrar-reconcile without a contradictory identity
+  warning. Do not grandfather the one discarded local attempt; no UUID was
+  assigned and GLAS-WP-0006 is the authoritative record for that work.
+```