fix: reject broken runtime launchers and preserve failed proof evidence

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e387-534d-70e3-ad53-4ea05676db8c

docs/evidence/2026-09-27-metered-native-resume.json

@@ -0,0 +1,63 @@
+{
+  "status": "attempt_failed",
+  "phase": "one_exec_returned",
+  "observed_at": "2026-09-27T20:01:30.849242+00:00",
+  "actions": [
+    {
+      "catalog": "glas-claude-agent-dev-anthropic",
+      "action": "exec",
+      "approval_id": "7b32443a-a817-400c-a130-01b9ef04c8ee",
+      "exit_code": 1
+    },
+    {
+      "catalog": "activity-core-metered-worker-token",
+      "action": "exec",
+      "approval_id": "dc22666a-d5d7-46bc-9490-ebe9fe09dc38",
+      "exit_code": 1
+    }
+  ],
+  "automatic_retry": false,
+  "prior_receipt": "execution.json",
+  "completed_actions_not_replayed": [
+    "provider/apply",
+    "worker/apply",
+    "provider/verify",
+    "worker/verify",
+    "queue/trigger"
+  ],
+  "trigger": {
+    "workflow_id": "activity-5bae5505-77f1-5ba3-8dfa-2e10ed15531e:manual-dab6c4c7-db03-4887-a17b-9d99b752482e",
+    "trigger_key": "manual-dab6c4c7-db03-4887-a17b-9d99b752482e"
+  },
+  "queued_run": {
+    "id": "6efa9436-6a91-47c0-94e5-b31b5a0e7e3a",
+    "state": "open",
+    "attempt": 0,
+    "claim_owner": null,
+    "target_repo": "hfact-glas-proof",
+    "harness_profile_ref": "harness.agent-dev-local@1.1.1",
+    "repository_grant": {
+      "publish": false,
+      "version": "1",
+      "commit_count": {
+        "max": 1,
+        "min": 1
+      },
+      "allowed_paths": [
+        "PROOF.md"
+      ]
+    },
+    "triggering_event_id": "manual-dab6c4c7-db03-4887-a17b-9d99b752482e"
+  },
+  "exec_exit_code": 1,
+  "owner_results": [
+    {
+      "ok": false,
+      "claimed": true,
+      "empty": false,
+      "run_id": "6efa9436-6a91-47c0-94e5-b31b5a0e7e3a",
+      "ops_state": "failed"
+    }
+  ],
+  "private_runtime_removed": true
+}