fix: reject broken runtime launchers and preserve failed proof evidence

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e387-534d-70e3-ad53-4ea05676db8c

workplans/REINAH-WP-0003-governed-runtime-integrity.md

@@ -985,3 +985,56 @@ backend delivery/consume, natural execution and recovery acceptance. T04's
 existing tenant-owner gates remain. The plan stays blocked; no new task or
 workplan was opened. The previous unsigned-spend/requester-mandate blockers above
 are superseded by the confirmed evidence in this return.
+
+### Native activation, one failed attempt, and implemented fixes — 2026-09-27
+
+All six human dispositions were accepted and confirmed. Both scoped credential
+lanes passed native apply and positive/negative verification, including sibling
+and metadata denial and revoked-token rejection. Each of the six exact native
+approvals was consumed once. Exec delivery sessions both revoked successfully;
+the attended Warden sessions exited and no private credential files remain.
+
+Installed the approved renewed owner/spend pins after exclusively checking the
+old ledger's three tables were empty. The old ledger and configuration backups
+are preserved. No prior liability was discarded and old dispatch pins were retired.
+
+The single trigger exposed a deployed Activity Core mismatch: its older worker
+dropped the definition's typed repository grant. Corrected only its image to
+the already-deployed grant-aware API artifact, using the existing GitOps parent
+and child. Source commits: Activity Core `428f2d7`, Platform `c3607ff`. Both
+applications are healthy/synced. A guarded, row-locked repair copied only the
+existing definition's exact grant to the same unclaimed attempt-zero job. It
+created no task/trigger and did not infer authority from text. Nine guard tests
+and 21 Activity Core carriage tests pass; actual image carriage checks pass.
+
+Resumed only the two unused exec approvals. Job
+`6efa9436-6a91-47c0-94e5-b31b5a0e7e3a` reached attempt 1 and closed `failed`
+with its lease cleared. No provider request reservation was created. The
+installed `b6e4e8a4` artifact's uv shell launchers retained a vanished temporary
+build interpreter. The real bwrap no-credential probe reproduces exit 127 for
+rein and Glas with zero provider forwards. The prior direct-Claude fixture did
+not exercise these Python entrypoints and cannot stand in for this evidence.
+
+Fixed Sand-boxer's builder to relocate direct and long-path/space-containing
+shell launchers (commit `81b5fcf`, 12 builder tests and focused lint pass).
+Added pre-claim launcher validation and actual in-sandbox entrypoint checks in
+rein. Accounting refusal now preserves bounded gateway stage/cleanup evidence
+without copying raw provider errors; it still holds the liability and prevents
+artifact import or another claim. The approved immutable artifact was not edited.
+
+Postflight: original repository clean at `679d23e0`, lock available, sandbox
+`b67907f1`/workspace removed, request route revoked, no pending/quarantined close
+outbox records, and no private credential directories. The parent EUR 10
+reservation remains held for owner reconciliation; no billing figure or refund
+is inferred. There was no retry, publication, extra queue job, or new workplan.
+
+Evidence: `docs/native-metered-proof.md` and
+`docs/evidence/2026-09-27-metered-{acceptance-confirmations,native-consumes,native-execution,native-resume,postflight,queue-grant-reconciliation,renewal-installation}.json`;
+worker rollout is `docs/evidence/2026-09-27-grant-aware-worker-rollout.json`.
+
+T05/T06 remain `wait`, and the workplan remains `blocked`: a corrected immutable
+artifact/pin admission, reconciliation of the held reservation, and separately
+authorized successful model/tool/commit acceptance remain. The accepted decisions
+must not be requested again as though still pending; they are consumed historical
+authority. T04's FI/Binky owner gates remain unchanged. These residuals stay in
+the existing REINAH-WP-0003, SAND-WP-0015-T04 and SECRETS-WP-0009-T03 records.