docs: record attended login containment evidence

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a0290b-3241-74c3-b868-6049545af836

docs/evidence/RAILIANCE-WP-0026-T01-ops-warden-receipt.json

@@ -0,0 +1,37 @@
+{
+  "interface": "railiance.attended-login-containment-receipt",
+  "version": 1,
+  "task_id": "RAILIANCE-WP-0026-T01",
+  "owner": "ops-warden",
+  "source_repo": "ops-warden",
+  "source_revision": "0fae0904ce8d8694338dd53a8a79abec5fec788d",
+  "created_at": "2026-08-22T23:31:17Z",
+  "disposition": "ready_for_owner_review",
+  "focused_test": {
+    "command": "uv run pytest -q tests/test_proxy.py tests/test_plan.py",
+    "passed": true,
+    "passed_count": 42,
+    "failed_count": 0
+  },
+  "repository_verification": {
+    "command": "uv run pytest -q",
+    "passed": true,
+    "passed_count": 390,
+    "deselected_count": 4,
+    "lint_command": "uv run ruff check .",
+    "lint_passed": true
+  },
+  "acceptance_outcomes": {
+    "private_helper_preflight_before_auth": true,
+    "read_only_home_refused_before_oidc": true,
+    "login_child_and_revocation_stdio_contained": true,
+    "unexpected_stdout_and_stderr_fail_closed": true,
+    "possible_issuance_triggers_contained_self_revocation": true,
+    "helper_cleanup_is_deterministic": true,
+    "persistent_login_only_handoff_refused": true
+  },
+  "live_oidc_performed": false,
+  "live_drill_authorized": false,
+  "secret_values_observed": false,
+  "sensitive_material_recorded": false
+}