{
  "schema": "squad.conformance.manifest/1",
  "title": "AINA Fresh 45-Case Candidate-Binary Conformance Battery",
  "execution": {
    "started_at": "2026-11-01T15:36:20.004453+00:00",
    "finished_at": "2026-11-01T15:38:18.758029+00:00",
    "duration_seconds": 118.753576,
    "exit_code": 0,
    "artifact": "conformance-output.json",
    "artifact_sha256": "b0a52861f15c2a8705d474b6d67ff6d5ab9deb7a0920489243dc9c049fd1ed16",
    "source_capture_sha256": "36a74aa36066c3b5d6eadef90b4ff51ad06344b14e2345c26a24531369645499"
  },
  "candidate": {
    "label": "squad.exe",
    "bytes": 56239616,
    "sha256": "94d26802c3744182a6cb93ac4e47250c6140b6ff92e0902a7c415ab13e59f4b5",
    "published": false
  },
  "total_cases": 45,
  "passed_cases": 45,
  "failed_cases": 0,
  "governance_case_count": 25,
  "evidence_case_count": 20,
  "assurance_ceiling": "Author-controlled end-to-end release qualification against the candidate binary in isolated throwaway state; not independent third-party certification.",
  "cases": [
    {
      "case_number": 1,
      "case_id": "impersonation_refused",
      "category": "session_identity",
      "input_vector_summary": "Session bound to 'package-mcp-smoke' invokes squad_task action='create' with owner='intruder-agent'",
      "protected_boundary": "Session-bound actor identity and authority namespace",
      "expected_disposition": "REFUSE",
      "expected_reason_code": "impersonation_refused",
      "source_test_identifier": "squad_connector::package::mcp::conformance::case_impersonation",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "a bound session cannot act as another owner",
      "observed_execution_summary": "squad error: impersonation_refused: this MCP session is bound to 'package-mcp-smoke' (agent_token); squad_task was called with owner='intruder-agent'. Identity comes from the connection, not from an argument."
    },
    {
      "case_number": 2,
      "case_id": "altered_proposal_conflict",
      "category": "operation_identity",
      "input_vector_summary": "Re-submitting an edit under an already registered operation_id with substituted payload ('v2\\n' instead of 'v1\\n')",
      "protected_boundary": "Idempotent operation identity pinning and payload immutability",
      "expected_disposition": "REFUSE",
      "expected_reason_code": "operation_identity_conflict",
      "source_test_identifier": "squad_connector::package::mcp::conformance::case_altered_proposal",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "an operation id cannot change its payload",
      "observed_execution_summary": "squad error: operation_identity_conflict: request ID cannot change payload, authority or session"
    },
    {
      "case_number": 3,
      "case_id": "stale_generation_refused",
      "category": "lease_fencing",
      "input_vector_summary": "Attempting squad_edit declaring expected_generation=8 against a task scope held at generation=1",
      "protected_boundary": "Generation-fenced monotonic lease counter",
      "expected_disposition": "REFUSE",
      "expected_reason_code": "stale_lease_generation",
      "source_test_identifier": "squad_connector::package::mcp::conformance::case_stale_generation",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "an edit fencing an old ownership generation is rejected",
      "observed_execution_summary": "squad error: stale_lease_generation: expected 8, current 1"
    },
    {
      "case_number": 4,
      "case_id": "concurrent_edit_conflict",
      "category": "concurrency_exclusion",
      "input_vector_summary": "Second registered agent ('conformance-agent-2') attempts to acquire a file scope held by active agent",
      "protected_boundary": "Single-writer kernel lease exclusion across distinct agent identities",
      "expected_disposition": "REFUSE",
      "expected_reason_code": "scope_held_by_other_agent / task_blocked",
      "source_test_identifier": "squad_connector::package::mcp::conformance::case_concurrent_edit",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "a scope held by another agent cannot be acquired",
      "observed_execution_summary": "{\n  \"status\": \"blocked\",\n  \"id\": \"task_20261101_083625_16dc5972\",\n  \"scope\": \"<fixture>\\\\Desktop\\\\AI Laptop Chat\\\\squad-connector\\\\target-package\\\\mcp-smoke-202611010836236540700-22936\\\\concurrent.txt\",\n  \"blocked_by\": \"package-mcp-smoke\",\n  \"reason\": \"scope '<fixture>\\\\Des...<truncated>"
    },
    {
      "case_number": 5,
      "case_id": "interrupted_call_blocks_target",
      "category": "crash_recovery",
      "input_vector_summary": "Pre-planting an unresolved prepared file operation in file_operations directory and calling squad_edit on same target",
      "protected_boundary": "Target reconciliation requirement for interrupted/in-doubt writes",
      "expected_disposition": "REFUSE",
      "expected_reason_code": "target_reconciliation_required",
      "source_test_identifier": "squad_connector::package::mcp::conformance::case_interrupted_call",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "an unresolved prepared operation holds its target for reconciliation",
      "observed_execution_summary": "squad error: target_reconciliation_required: unresolved operation \"conf-interrupted-planted\""
    },
    {
      "case_number": 6,
      "case_id": "damaged_recovery_refused",
      "category": "vault_integrity",
      "input_vector_summary": "Calling squad_vault action='restore' declaring incorrect hash ('0'*64) and restored against a physically corrupted vault object",
      "protected_boundary": "Dual-tier vault hash verification and physical content-hash sidecar",
      "expected_disposition": "REFUSE",
      "expected_reason_code": "restore_artifact_hash_mismatch / primary_content_hash_mismatch",
      "source_test_identifier": "squad_connector::package::mcp::conformance::case_damaged_recovery",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "a mismatched or damaged recovery object never reaches the target; an intact one restores and reads back",
      "observed_execution_summary": "declared: squad error: restore_artifact_hash_mismatch: declared 0000000000000000000000000000000000000000000000000000000000000000 differs from the verified primary copy 2d27fbdf4e8ca207afbfa388ca9172fbcc6c70e534af2476b3b704f87debadcf | damaged: squad error: primary_content_hash_mismatch: <fixture>\\Desktop\\AI Laptop Chat\\squad-connector\\target-package\\mcp-smoke-202611010836267000700-22936\\.squad\\vault\\bfefce8999d4476b\\1793547388488-420800-5d3fe93a__recovery-damaged.txt differs from its recorded hash; refuse and re-baseline | intact: {\n  \"path\": \"<fixture>/desktop/ai laptop chat/squad-connector/target-package/mcp-smoke-202611010836267000700-22936/recovery-damaged.txt\",\n  \"bytes_written\": 3,\n  \"snapshot_id\": \"snap_20261101_083629_af14aff6\",\n  \"owner\": \"package-mcp-smoke\",\n  \"gated\": true,\n  \"ownership\": {\n    \"scope\": ...<truncated> | copies: 2"
    },
    {
      "case_number": 7,
      "case_id": "acceptance_failed_keeps_task_open",
      "category": "task_governance",
      "input_vector_summary": "Calling squad_task action='done' on a task whose acceptance predicate ('file_exists' for missing file) fails",
      "protected_boundary": "Autonomous task closure gate / acceptance predicate verification",
      "expected_disposition": "REFUSE",
      "expected_reason_code": "acceptance_failed",
      "source_test_identifier": "squad_connector::package::mcp::conformance::case_acceptance_gate",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "a completion whose acceptance check fails against the actual artifact is refused",
      "observed_execution_summary": "squad error: task task_20261101_083630_2db39f5a acceptance FAILED (1 of 1): file_exists; task stays open - fix the artifacts and resubmit done, or record the failure with task block/note. An executor receipt is not acceptance. The measured results are recorded on the task."
    },
    {
      "case_number": 8,
      "case_id": "reader_roster_denied",
      "category": "information_flow",
      "input_vector_summary": "Sending message to or reading message from an agent outside the owner-selected Room reader roster",
      "protected_boundary": "Room confidentiality boundary and graph read grants",
      "expected_disposition": "REFUSE",
      "expected_reason_code": "wake_recipient_outside_owner_roster / graph_room_scope_denied",
      "source_test_identifier": "squad_connector::package::mcp::conformance::case_reader_scope",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "a recipient outside the owner graph readers receives no delivery and reads nothing",
      "observed_execution_summary": "send: squad error: wake_recipient_outside_owner_roster: conf-reader-scope content is not authorized for 'conformance-agent-2': room_owner_scope_denied: actor is outside the owner-selected Room roster | read: squad error: graph_room_scope_denied: owner read grant missing"
    },
    {
      "case_number": 9,
      "case_id": "cross_project_read_refused",
      "category": "project_isolation",
      "input_vector_summary": "Task claimed in one project directory attempts to read file belonging to another opened project",
      "protected_boundary": "Project root confinement and path scoping",
      "expected_disposition": "REFUSE",
      "expected_reason_code": "project_scope_denied",
      "source_test_identifier": "squad_connector::package::mcp::conformance::case_cross_project_read",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "a task of one project reads its own file and is refused another open project's file, whose content is not returned",
      "observed_execution_summary": "seed: {\n  \"path\": \"<fixture>/desktop/ai laptop chat/squad-connector/target-package/mcp-smoke-202611010836325500700-22936/own-record.txt\",\n  \"bytes_written\": 19,\n  \"snapshot_id\": \"snap_20261101_083633_886650ca\",\n  \"owner\": \"package-mcp-smoke\",\n  \"gated\": true,\n  \"ownership\": {\n    \"scope\": \"<path>/\\...<truncated> | own: {\n  \"path\": \"<fixture>/desktop/ai laptop chat/squad-connector/target-package/mcp-smoke-202611010836325500700-22936/own-record.txt\",\n  \"bytes\": 19,\n  \"content\": \"own-project-record\\n\"\n} | other: squad error: project_scope_denied: target is outside the opened project"
    },
    {
      "case_number": 10,
      "case_id": "destination_call_outside_task_scope_refused",
      "category": "destination_fencing",
      "input_vector_summary": "Invoking squad_record_change directly against an SQLite database row not covered by claimed task scope",
      "protected_boundary": "External destination row-level tenancy and task scope binding",
      "expected_disposition": "REFUSE",
      "expected_reason_code": "record_task_scope_denied",
      "source_test_identifier": "squad_connector::package::mcp::conformance::case_direct_destination_call",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "a record change named directly under a task not claimed for that row is refused and the row is unchanged",
      "observed_execution_summary": "preview: squad error: record_task_scope_denied: the task must be claimed at exactly sessio<path>//sqlite.records/<fixture>\\Desktop\\AI Laptop Chat\\squad-connector\\target-package\\mcp-smoke-202611010836340280700-22936\\records.db#accounts#id=482 | submit: squad error: record_task_scope_denied: the task must be claimed at exactly sessio<path>//sqlite.records/<fixture>\\Desktop\\AI Laptop Chat\\squad-connector\\target-package\\mcp-smoke-202611010836340280700-22936\\records.db#accounts#id=482 | row before: (19, \"Denver\") | row after: (19, \"Denver\")"
    },
    {
      "case_number": 11,
      "case_id": "junction_and_spelling_redirect_refused",
      "category": "filesystem_boundary",
      "input_vector_summary": "Attempting squad_edit through NTFS directory junction pointing outside project and via parent-traversal (..\\..)",
      "protected_boundary": "Canonical path resolution and symlink/junction escape prevention",
      "expected_disposition": "REFUSE",
      "expected_reason_code": "project_scope_denied / invalid_file_scope",
      "source_test_identifier": "squad_connector::package::mcp::conformance::case_redirected_target",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "a scope or write that resolves through a junction to a directory outside the project is refused, the outside file is unchanged, and a parent-traversal spelling is refused",
      "observed_execution_summary": "seed: {\n  \"path\": \"<fixture>/desktop/ai laptop chat/squad-connector/target-package/mcp-smoke-202611010836352760700-22936/held.txt\",\n  \"bytes_written\": 3,\n  \"snapshot_id\": \"snap_20261101_083636_4d3614a2\",\n  \"owner\": \"package-mcp-smoke\",\n  \"gated\": true,\n  \"ownership\": {\n    \"scope\": \"<path>/\\Users\\\\...<truncated> | scope through junction: squad error: project_scope_denied: open an explicit project containing the task scope | write through junction: squad error: agent 'package-mcp-smoke' does not hold an active File lock on '<fixture>/desktop/ai laptop chat/squad-connector/target-package/mcp-smoke-202611010836352760700-22936-outside/record.txt'; acquire this task scope before editing | traversal scope: squad error: invalid_file_scope: parent traversal is not a canonical target | outside unchanged: true"
    },
    {
      "case_number": 12,
      "case_id": "native_write_without_lease_refused",
      "category": "lease_exclusion",
      "input_vector_summary": "Attempting squad_edit on a file after releasing active lease while task remains claimed",
      "protected_boundary": "Mandatory active lease prerequisite for file mutation",
      "expected_disposition": "REFUSE",
      "expected_reason_code": "lock_violation",
      "source_test_identifier": "squad_connector::package::mcp::conformance::case_native_write_refused",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "with the seed written through the gate and the task still open, a write with no active lease never reaches the file",
      "observed_execution_summary": "seed: {\n  \"path\": \"<fixture>/desktop/ai laptop chat/squad-connector/target-package/mcp-smoke-202611010836368630700-22936/ungated.txt\",\n  \"bytes_written\": 3,\n  \"snapshot_id\": \"snap_20261101_083638_0222585e\",\n  \"owner\": \"package-mcp-smoke\",\n  \"gated\": true,\n  \"ownership\": {\n    \"scope\": \"<path>/\\User...<truncated> | release: {\n  \"released\": \"<fixture>\\\\Desktop\\\\AI Laptop Chat\\\\squad-connector\\\\target-package\\\\mcp-smoke-202611010836368630700-22936\\\\ungated.txt\",\n  \"owner\": \"package-mcp-smoke\",\n  \"was_held\": true,\n  \"expired\": false,\n  \"amber\": {\n    \"archived\": true,\n    \"sha256\": \"2d27fbdf4e8ca207afbfa388ca...<truncated> | write: squad error: agent 'package-mcp-smoke' does not hold an active File lock on '<fixture>/desktop/ai laptop chat/squad-connector/target-package/mcp-smoke-202611010836368630700-22936/ungated.txt'; acquire this task scope before editing | unchanged: true"
    },
    {
      "case_number": 13,
      "case_id": "doc_source_drift_refused",
      "category": "evidence_fidelity",
      "input_vector_summary": "Reading or task-binding a registered document after physical file content on disk has drifted",
      "protected_boundary": "Cryptographic binding to registered source content hash",
      "expected_disposition": "REFUSE",
      "expected_reason_code": "doc_source_drifted",
      "source_test_identifier": "squad_connector::package::mcp::conformance::case_doc_source_fidelity",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "registered documents serve only their exact content; drift refuses reads and task bindings",
      "observed_execution_summary": "read_ok=true; drift_refused=true; bind_refused=true; squad error: doc_source_drifted: <fixture>/desktop/ai laptop chat/squad-connector/target-package/mcp-smoke-202611010836384020700-22936/governing-doc.md content changed (registered 037e5e584331974416de089b5a427923b6a68431accfb3ca06fb5b7047f13350, current 50654410d4cdcfd52a9cc7fe7a09924dbb7...<truncated>"
    },
    {
      "case_number": 14,
      "case_id": "cooldown_deferred_work_retained",
      "category": "job_lifecycle",
      "input_vector_summary": "Spawning work during rate-limit cooldown, asserting job is retained as sealed rather than failing to poison",
      "protected_boundary": "Job retention across rate-limiting and temporary dispatch dampers",
      "expected_disposition": "ADMIT",
      "expected_reason_code": "cooldown_retained",
      "source_test_identifier": "squad_connector::package::mcp::conformance::case_cooldown_retention",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "typed damper deferral retains the exact sealed second-send job; retries never poison retained work",
      "observed_execution_summary": "{\"stimulus\":\"owned fixture current-time wake clock; production gates unchanged\",\"first\":{\"is_error\":false,\"text\":\"{\\n  \\\"room\\\": \\\"conf-cooldown\\\",\\n  \\\"from\\\": \\\"package-mcp-smoke\\\",\\n  \\\"seq\\\": 1,\\n  \\\"to\\\": \\\"conformance-agent-2\\\",\\n  \\\"obligation_targets\\\": [\\n    \\\"conformance-agent-2\\\"\\n  ],\\n  \\\"obligations_recorded\\\": true,\\n  \\\"polling_recipients\\\": [],\\n  \\\"delivery_confirmed\\\": [],\\n  \\\"completed\\\": [],\\n  \\\"failed\\\": [],\\n  \\\"timed_out\\\": [],\\n  \\\"unavailable\\\": [],\\n  \\\"indoubt\\\": [],\\n  \\\"recovered_late\\\": 0,\\n  \\\"rejected\\\": null,\\n  \\\"skipped_sender\\\": true,\\n  \\\"woken\\\": [],\\n  \\\"wake_skipped\\\": [],\\n  \\\"wake_deferred\\\": [\\n    {\\n      \\\"agent\\\": \\\"conformance-agent-2\\\",\\n      \\\"dispatch\\\": {\\n        \\\"agent\\\": \\\"conformance-agent-2\\\",\\n        \\\"room\\\": \\\"conf-cooldown\\\",\\n        \\\"path\\\": \\\"auto\\\",\\n        \\\"source_event\\\": \\\"evt_000000006ae75c8a_14686870\\\",\\n        \\\"job\\\": \\\"<path>/\\\\\\Users\\\\\\\\Blayne Aina\\\\\\\\Desktop\\\\\\\\AI Laptop Chat\\\\\\\\squad-connector\\\\\\\\target-package\\\\\\\\mcp-smoke-202611010836406580700-22936\\\\\\\\.squad\\\\\\\\room-wake-jobs\\\\\\\\wake-9b5533f6e41e5764c3a37fcb067f737a537666ff2d181ce25c3e16a50d09c115.json\\\",\\n        \\\"status\\\": \\\"deferred\\\",\\n        \\\"reason\\\": \\\"room wake worker dispatch refused: shipped runtime is not fresh (publisher code identity unverified, dist/skill manifest hash mismatch, package-result schema mismatch, package-result skill artifact role mismatch, package-result skill artifact metadata contract mismatch, package-result hash mismatch, package-result room hash mismatch, package-result skill hash mismatch, package-result inject-chat dist hash mismatch, package-result inject-chat skill hash mismatch, package-result missing MCP metadata, package-result missing MCP refresh proof, package-result MCP refresh proof failed, package-result not passed, dist/squad.exe missing, dist/squad-room.exe missing, package release squad-room.exe missing, dist/inject-chat.exe missing, skill bin/inject-chat.exe missing, dist/squad-room.exe does not match package release squad-room.exe, skill bin/squad.exe missing)\\\",\\n        \\\"terminal\\\": \\\"pending\\\",\\n        \\\"proof\\\": {\\n          \\\"proven\\\": false,\\n          \\\"kind\\\": \\\"runtime_not_current_deferred\\\",\\n          \\\"reason\\\": \\\"wake was deferred before an agent could receive or answer it\\\"\\n        }\\n      }\\n    }\\n  ],\\n  \\\"wake_deferred_count\\\": 1,\\n  \\\"wake_errors\\\": [],\\n  \\\"retry_command\\\": \\\"1 deferred wake(s) remain held; reconcile source obligations and current authorization before explicit dispatch. Package publication never retries wakes\\\",\\n  \\\"note\\\": \\\"authorized assignments and obligations are recorded; supported wakes are dispatched or deferred separately; polling recipients await an authorized read; no dispatch confirms receipt, reply or task completion\\\"\\n}\"},\"second\":{\"is_error\":false,\"text\":\"{\\n  \\\"room\\\": \\\"conf-cooldown\\\",\\n  \\\"from\\\": \\\"package-mcp-smoke\\\",\\n  \\\"seq\\\": 2,\\n  \\\"to\\\": \\\"conformance-agent-2\\\",\\n  \\\"obligation_targets\\\": [\\n    \\\"conformance-agent-2\\\"\\n  ],\\n  \\\"obligations_recorded\\\": true,\\n  \\\"polling_recipients\\\": [],\\n  \\\"delivery_confirmed\\\": [],\\n  \\\"completed\\\": [],\\n  \\\"failed\\\": [],\\n  \\\"timed_out\\\": [],\\n  \\\"unavailable\\\": [],\\n  \\\"indoubt\\\": [],\\n  \\\"recovered_late\\\": 0,\\n  \\\"rejected\\\": null,\\n  \\\"skipped_sender\\\": true,\\n  \\\"woken\\\": [],\\n  \\\"wake_skipped\\\": [],\\n  \\\"wake_deferred\\\": [\\n    {\\n      \\\"agent\\\": \\\"conformance-agent-2\\\",\\n      \\\"path\\\": \\\"send\\\",\\n      \\\"status\\\": \\\"cooldown\\\",\\n      \\\"reason\\\": \\\"thrash_damper\\\"\\n    }\\n  ],\\n  \\\"wake_deferred_count\\\": 1,\\n  \\\"wake_errors\\\": [],\\n  \\\"retry_command\\\": \\\"1 deferred wake(s) remain held; reconcile source obligations and current authorization before explicit dispatch. Package publication never retries wakes\\\",\\n  \\\"note\\\": \\\"authorized assignments and obligations are recorded; supported wakes are dispatched or deferred separately; polling recipients await an authorized read; no dispatch confirms receipt, reply or task completion\\\"\\n}\"},\"retry\":{\"status\":\"deferred\",\"runtime_fresh\":false,\"reason\":\"room wake retry refused: shipped runtime is not fresh (publisher code identity unverified, dist/skill manifest hash mismatch, package-result schema mismatch, package-result skill artifact role mismatch, package-result skill artifact metadata contract mismatch, package-result hash mismatch, package-result room hash mismatch, package-result skill hash mismatch, package-result inject-chat dist hash mismatch, package-result inject-chat skill hash mismatch, package-result missing MCP metadata, package-result missing MCP refresh proof, package-result MCP refresh proof failed, package-result not passed, dist/squad.exe missing, dist/squad-room.exe missing, package release squad-room.exe missing, dist/inject-chat.exe missing, skill bin/inject-chat.exe missing, dist/squad-room.exe does not match package release squad-room.exe, skill bin/squad.exe missing)\",\"retried\":[],\"errors\":[]},\"jobs_before\":[{\"path\":\"<fixture>\\\\Desktop\\\\AI Laptop Chat\\\\squad-connector\\\\target-package\\\\mcp-smoke-202611010836406580700-22936\\\\.squad\\\\room-wake-jobs\\\\wake-9b5533f6e41e5764c3a37fcb067f737a537666ff2d181ce25c3e16a50d09c115.json\",\"job\":{\"schema\":\"room-wake-job-v3\",\"room\":\"conf-cooldown\",\"agent\":\"conformance-agent-2\",\"from\":\"package-mcp-smoke\",\"source_event\":\"evt_000000006ae75c8a_14686870\",\"path\":\"auto\",\"prompt\":\"You are agent 'conformance-agent-2' in THE ROOM (room 'conf-cooldown'). --- Recent room context ---\\n[2026-11-01T08:36:42.342-07:00] package-mcp-smoke: replied evt_000000006ae75c8a_14686870 -> unlinked\\n--- End context ---\\n\\npackage-mcp-smoke sent you this message: cooldown probe one @conformance-agent-2\\n\\nReply via squad_room MCP tool: squad_room action=say room=conf-cooldown from=conformance-agent-2 message=<your reply>. To address live participants too, add broadcast=true.\\n\\nTool tier: Mutating. Before acting, call squad_room action=enter room=conf-cooldown id=conformance-agent-2. Before editing any file, create then claim a task for that exact scope (squad_task action=create --scope <file>, then action=claim); edits require the task, current generation and preimage hash. To pass work to another agent, call squad_room action=handoff --to <agent>.\\n\\nIdentity: the SQUAD_AGENT env var holds your name (conformance-agent-2). Always pass --from conformance-agent-2 or --owner conformance-agent-2 to squad tools. Never omit identity or impersonate another agent.\\n\\nRules: room name is 'conf-cooldown' (not 'THE ROOM'). One reply per wake. Reply directly to the message, be concise. Recent room context is shown above for situational awareness. Full system context: <fixture>\\\\Desktop\\\\AI Laptop Chat\\\\squad-connector\\\\target-package\\\\mcp-smoke-202611010836406580700-22936\\\\AGENTS.md (owner-governed instructions). Send your reply, then stop.\",\"mention_ids\":[\"evt_000000006ae75c8a_169fdd30\"],\"obligation_ids\":[\"evt_000000006ae75c8a_16a02254\"],\"pulse_message\":\"New message in room 'conf-cooldown' from package-mcp-smoke. Check: squad_room action=feed room=conf-cooldown\",\"deadline_ms\":60000,\"dispatch_status\":\"deferred_runtime_not_current\",\"created_at\":\"2026-11-01T08:36:42.540-07:00\",\"attempts\":0,\"room_authority\":{\"owner_grant\":{\"grant_sha256\":\"639ca50a2714befd7d6b3098de15ebaef03221dde2349be45daa8c40a5d9a43b\",\"expires_at\":\"2026-11-01T16:36:41Z\",\"scope\":{\"kind\":\"coordination\"}},\"revision\":1,\"reset_at\":null,\"session\":null},\"registration_sha256\":\"f358a175e95c6f149389e601a0ca3954ad4fd6087e0a99a936f577c4771a2075\",\"control_epoch\":0,\"not_after\":\"2026-11-01T08:37:42.540-07:00\",\"binding_sha256\":\"de0d83b5e96c013c0b1456926dfe5341e6f205d3601001dde7b8eda53fc32361\",\"updated_at\":\"2026-11-01T08:36:44.181-07:00\",\"last_error\":\"room wake worker dispatch refused: shipped runtime is not fresh (publisher code identity unverified, dist/skill manifest hash mismatch, package-result schema mismatch, package-result skill artifact role mismatch, package-result skill artifact metadata contract mismatch, package-result hash mismatch, package-result room hash mismatch, package-result skill hash mismatch, package-result inject-chat dist hash mismatch, package-result inject-chat skill hash mismatch, package-result missing MCP metadata, package-result missing MCP refresh proof, package-result MCP refresh proof failed, package-result not passed, dist/squad.exe missing, dist/squad-room.exe missing, package release squad-room.exe missing, dist/inject-chat.exe missing, skill bin/inject-chat.exe missing, dist/squad-room.exe does not match package release squad-room.exe, skill bin/squad.exe missing)\"}}],\"jobs_after_second\":[{\"path\":\"<fixture>\\\\Desktop\\\\AI Laptop Chat\\\\squad-connector\\\\target-package\\\\mcp-smoke-202611010836406580700-22936\\\\.squad\\\\room-wake-jobs\\\\wake-9b5533f6e41e5764c3a37fcb067f737a537666ff2d181ce25c3e16a50d09c115.json\",\"job\":{\"schema\":\"room-wake-job-v3\",\"room\":\"conf-cooldown\",\"agent\":\"conformance-agent-2\",\"from\":\"package-mcp-smoke\",\"source_event\":\"evt_000000006ae75c8a_14686870\",\"path\":\"auto\",\"prompt\":\"You are agent 'conformance-agent-2' in THE ROOM (room 'conf-cooldown'). --- Recent room context ---\\n[2026-11-01T08:36:42.342-07:00] package-mcp-smoke: replied evt_000000006ae75c8a_14686870 -> unlinked\\n--- End context ---\\n\\npackage-mcp-smoke sent you this message: cooldown probe one @conformance-agent-2\\n\\nReply via squad_room MCP tool: squad_room action=say room=conf-cooldown from=conformance-agent-2 message=<your reply>. To address live participants too, add broadcast=true.\\n\\nTool tier: Mutating. Before acting, call squad_room action=enter room=conf-cooldown id=conformance-agent-2. Before editing any file, create then claim a task for that exact scope (squad_task action=create --scope <file>, then action=claim); edits require the task, current generation and preimage hash. To pass work to another agent, call squad_room action=handoff --to <agent>.\\n\\nIdentity: the SQUAD_AGENT env var holds your name (conformance-agent-2). Always pass --from conformance-agent-2 or --owner conformance-agent-2 to squad tools. Never omit identity or impersonate another agent.\\n\\nRules: room name is 'conf-cooldown' (not 'THE ROOM'). One reply per wake. Reply directly to the message, be concise. Recent room context is shown above for situational awareness. Full system context: <fixture>\\\\Desktop\\\\AI Laptop Chat\\\\squad-connector\\\\target-package\\\\mcp-smoke-202611010836406580700-22936\\\\AGENTS.md (owner-governed instructions). Send your reply, then stop.\",\"mention_ids\":[\"evt_000000006ae75c8a_169fdd30\"],\"obligation_ids\":[\"evt_000000006ae75c8a_16a02254\"],\"pulse_message\":\"New message in room 'conf-cooldown' from package-mcp-smoke. Check: squad_room action=feed room=conf-cooldown\",\"deadline_ms\":60000,\"dispatch_status\":\"deferred_runtime_not_current\",\"created_at\":\"2026-11-01T08:36:42.540-07:00\",\"attempts\":0,\"room_authority\":{\"owner_grant\":{\"grant_sha256\":\"639ca50a2714befd7d6b3098de15ebaef03221dde2349be45daa8c40a5d9a43b\",\"expires_at\":\"2026-11-01T16:36:41Z\",\"scope\":{\"kind\":\"coordination\"}},\"revision\":1,\"reset_at\":null,\"session\":null},\"registration_sha256\":\"f358a175e95c6f149389e601a0ca3954ad4fd6087e0a99a936f577c4771a2075\",\"control_epoch\":0,\"not_after\":\"2026-11-01T08:37:42.540-07:00\",\"binding_sha256\":\"de0d83b5e96c013c0b1456926dfe5341e6f205d3601001dde7b8eda53fc32361\",\"updated_at\":\"2026-11-01T08:36:44.181-07:00\",\"last_error\":\"room wake worker dispatch refused: shipped runtime is not fresh (publisher code identity unverified, dist/skill manifest hash mismatch, package-result schema mismatch, package-result skill artifact role mismatch, package-result skill artifact metadata contract mismatch, package-result hash mismatch, package-result room hash mismatch, package-result skill hash mismatch, package-result inject-chat dist hash mismatch, package-result inject-chat skill hash mismatch, package-result missing MCP metadata, package-result missing MCP refresh proof, package-result MCP refresh proof failed, package-result not passed, dist/squad.exe missing, dist/squad-room.exe missing, package release squad-room.exe missing, dist/inject-chat.exe missing, skill bin/inject-chat.exe missing, dist/squad-room.exe does not match package release squad-room.exe, skill bin/squad.exe missing)\"}},{\"path\":\"<fixture>\\\\Desktop\\\\AI Laptop Chat\\\\squad-connector\\\\target-package\\\\mcp-smoke-202611010836406580700-22936\\\\.squad\\\\room-wake-jobs\\\\wake-bd368d5e635e380e5b12af589e47c95f3dd7d2fc391bbb36a758bab2a7bcd79d.json\",\"job\":{\"schema\":\"room-wake-job-v3\",\"room\":\"conf-cooldown\",\"agent\":\"conformance-agent-2\",\"from\":\"package-mcp-smoke\",\"source_event\":\"evt_000000006ae75c8c_29a2d6e4\",\"path\":\"send\",\"prompt\":\"cooldown probe two @conformance-agent-2\",\"mention_ids\":[\"evt_000000006ae75c8c_2bf695d4\"],\"obligation_ids\":[\"evt_000000006ae75c8c_2bf6b8fc\"],\"pulse_message\":null,\"deadline_ms\":60000,\"dispatch_status\":\"deferred_cooldown\",\"created_at\":\"2026-11-01T08:36:44.826-07:00\",\"attempts\":0,\"room_authority\":{\"owner_grant\":{\"grant_sha256\":\"639ca50a2714befd7d6b3098de15ebaef03221dde2349be45daa8c40a5d9a43b\",\"expires_at\":\"2026-11-01T16:36:41Z\",\"scope\":{\"kind\":\"coordination\"}},\"revision\":1,\"reset_at\":null,\"session\":null},\"registration_sha256\":\"f358a175e95c6f149389e601a0ca3954ad4fd6087e0a99a936f577c4771a2075\",\"control_epoch\":0,\"not_after\":\"2026-11-01T08:37:44.826-07:00\",\"binding_sha256\":\"17ef6d3c42a6b393c57a5cd54315462c2aaacedac239892ec21a153885cee174\",\"updated_at\":\"2026-11-01T08:36:44.853-07:00\",\"last_error\":\"thrash_damper\"}}],\"jobs_after_retry\":[{\"path\":\"<fixture>\\\\Desktop\\\\AI Laptop Chat\\\\squad-connector\\\\target-package\\\\mcp-smoke-202611010836406580700-22936\\\\.squad\\\\room-wake-jobs\\\\wake-9b5533f6e41e5764c3a37fcb067f737a537666ff2d181ce25c3e16a50d09c115.json\",\"job\":{\"schema\":\"room-wake-job-v3\",\"room\":\"conf-cooldown\",\"agent\":\"conformance-agent-2\",\"from\":\"package-mcp-smoke\",\"source_event\":\"evt_000000006ae75c8a_14686870\",\"path\":\"auto\",\"prompt\":\"You are agent 'conformance-agent-2' in THE ROOM (room 'conf-cooldown'). --- Recent room context ---\\n[2026-11-01T08:36:42.342-07:00] package-mcp-smoke: replied evt_000000006ae75c8a_14686870 -> unlinked\\n--- End context ---\\n\\npackage-mcp-smoke sent you this message: cooldown probe one @conformance-agent-2\\n\\nReply via squad_room MCP tool: squad_room action=say room=conf-cooldown from=conformance-agent-2 message=<your reply>. To address live participants too, add broadcast=true.\\n\\nTool tier: Mutating. Before acting, call squad_room action=enter room=conf-cooldown id=conformance-agent-2. Before editing any file, create then claim a task for that exact scope (squad_task action=create --scope <file>, then action=claim); edits require the task, current generation and preimage hash. To pass work to another agent, call squad_room action=handoff --to <agent>.\\n\\nIdentity: the SQUAD_AGENT env var holds your name (conformance-agent-2). Always pass --from conformance-agent-2 or --owner conformance-agent-2 to squad tools. Never omit identity or impersonate another agent.\\n\\nRules: room name is 'conf-cooldown' (not 'THE ROOM'). One reply per wake. Reply directly to the message, be concise. Recent room context is shown above for situational awareness. Full system context: <fixture>\\\\Desktop\\\\AI Laptop Chat\\\\squad-connector\\\\target-package\\\\mcp-smoke-202611010836406580700-22936\\\\AGENTS.md (owner-governed instructions). Send your reply, then stop.\",\"mention_ids\":[\"evt_000000006ae75c8a_169fdd30\"],\"obligation_ids\":[\"evt_000000006ae75c8a_16a02254\"],\"pulse_message\":\"New message in room 'conf-cooldown' from package-mcp-smoke. Check: squad_room action=feed room=conf-cooldown\",\"deadline_ms\":60000,\"dispatch_status\":\"deferred_runtime_not_current\",\"created_at\":\"2026-11-01T08:36:42.540-07:00\",\"attempts\":0,\"room_authority\":{\"owner_grant\":{\"grant_sha256\":\"639ca50a2714befd7d6b3098de15ebaef03221dde2349be45daa8c40a5d9a43b\",\"expires_at\":\"2026-11-01T16:36:41Z\",\"scope\":{\"kind\":\"coordination\"}},\"revision\":1,\"reset_at\":null,\"session\":null},\"registration_sha256\":\"f358a175e95c6f149389e601a0ca3954ad4fd6087e0a99a936f577c4771a2075\",\"control_epoch\":0,\"not_after\":\"2026-11-01T08:37:42.540-07:00\",\"binding_sha256\":\"de0d83b5e96c013c0b1456926dfe5341e6f205d3601001dde7b8eda53fc32361\",\"updated_at\":\"2026-11-01T08:36:44.181-07:00\",\"last_error\":\"room wake worker dispatch refused: shipped runtime is not fresh (publisher code identity unverified, dist/skill manifest hash mismatch, package-result schema mismatch, package-result skill artifact role mismatch, package-result skill artifact metadata contract mismatch, package-result hash mismatch, package-result room hash mismatch, package-result skill hash mismatch, package-result inject-chat dist hash mismatch, package-result inject-chat skill hash mismatch, package-result missing MCP metadata, package-result missing MCP refresh proof, package-result MCP refresh proof failed, package-result not passed, dist/squad.exe missing, dist/squad-room.exe missing, package release squad-room.exe missing, dist/inject-chat.exe missing, skill bin/inject-chat.exe missing, dist/squad-room.exe does not match package release squad-room.exe, skill bin/squad.exe missing)\"}},{\"path\":\"<fixture>\\\\Desktop\\\\AI Laptop Chat\\\\squad-connector\\\\target-package\\\\mcp-smoke-202611010836406580700-22936\\\\.squad\\\\room-wake-jobs\\\\wake-bd368d5e635e380e5b12af589e47c95f3dd7d2fc391bbb36a758bab2a7bcd79d.json\",\"job\":{\"schema\":\"room-wake-job-v3\",\"room\":\"conf-cooldown\",\"agent\":\"conformance-agent-2\",\"from\":\"package-mcp-smoke\",\"source_event\":\"evt_000000006ae75c8c_29a2d6e4\",\"path\":\"send\",\"prompt\":\"cooldown probe two @conformance-agent-2\",\"mention_ids\":[\"evt_000000006ae75c8c_2bf695d4\"],\"obligation_ids\":[\"evt_000000006ae75c8c_2bf6b8fc\"],\"pulse_message\":null,\"deadline_ms\":60000,\"dispatch_status\":\"deferred_cooldown\",\"created_at\":\"2026-11-01T08:36:44.826-07:00\",\"attempts\":0,\"room_authority\":{\"owner_grant\":{\"grant_sha256\":\"639ca50a2714befd7d6b3098de15ebaef03221dde2349be45daa8c40a5d9a43b\",\"expires_at\":\"2026-11-01T16:36:41Z\",\"scope\":{\"kind\":\"coordination\"}},\"revision\":1,\"reset_at\":null,\"session\":null},\"registration_sha256\":\"f358a175e95c6f149389e601a0ca3954ad4fd6087e0a99a936f577c4771a2075\",\"control_epoch\":0,\"not_after\":\"2026-11-01T08:37:44.826-07:00\",\"binding_sha256\":\"17ef6d3c42a6b393c57a5cd54315462c2aaacedac239892ec21a153885cee174\",\"updated_at\":\"2026-11-01T08:36:44.853-07:00\",\"last_error\":\"thrash_damper\"}}],\"clock\":{\"count\":1,\"first\":{\"at_ms\":1793547404271,\"index_revision\":4,\"authority_revision\":1},\"last\":{\"at_ms\":1793547404271,\"index_revision\":4,\"authority_revision\":1},\"concurrent_index_writer\":false,\"future_timestamps_used\":false,\"second_send_elapsed_ms\":624},\"jobs_before_first\":[],\"index_before_stimulus\":{\"room\":\"conf-cooldown\",\"participants\":[\"package-mcp-smoke\",\"conformance-agent-2\"],\"active\":[\"package-mcp-smoke\",\"conformance-agent-2\"],\"seq\":1,\"turns_completed\":1,\"sealed\":false,\"cancelled\":false,\"default_mode\":\"planning\",\"index_revision\":3,\"authority_revision\":1,\"last_turn_completed_ms\":1793547402329,\"last_activity\":\"2026-11-01T08:36:44.224-07:00\",\"last_wake_conformance_agent_2\":1793547404224},\"index_after_stimulus\":{\"room\":\"conf-cooldown\",\"participants\":[\"package-mcp-smoke\",\"conformance-agent-2\"],\"active\":[\"package-mcp-smoke\",\"conformance-agent-2\"],\"seq\":2,\"turns_completed\":2,\"sealed\":false,\"cancelled\":false,\"default_mode\":\"planning\",\"index_revision\":5,\"authority_revision\":1,\"last_turn_completed_ms\":1793547404686,\"last_activity\":\"2026-11-01T08:36:44.686-07:00\",\"last_wake_conformance_agent_2\":1793547404271},\"events_after_second\":[{\"schema_version\":1,\"event_id\":\"evt_000000006ae75c89_0ccb3cf0\",\"agent_id\":\"operator\",\"ts\":\"2026-11-01T08:36:41.214-07:00\",\"stage\":\"Effect\",\"kind\":\"room_created\",\"scope\":null,\"idempotency_key\":null,\"parent_id\":null,\"payload\":{\"by\":\"operator\",\"participants\":[\"package-mcp-smoke\",\"conformance-agent-2\"],\"default_mode\":\"planning\",\"roster_replaced\":false,\"displaced\":[],\"room\":\"conf-cooldown\",\"system_writer\":\"controller\"},\"prev_hash\":\"c651231c02289ae9f856c82d3b4cc4bfee18394e0572c7a639ea8372f14e32d3\",\"hash\":\"226dad11b7134403f175c4a66b9cde725cf283c1037b79e9a09e9efb5656aaf9\",\"parents\":[],\"hlc\":\"1793547401219:0:controller\"},{\"schema_version\":1,\"event_id\":\"evt_000000006ae75c8a_14686870\",\"agent_id\":\"package-mcp-smoke\",\"ts\":\"2026-11-01T08:36:42.342-07:00\",\"stage\":\"Effect\",\"kind\":\"room_response\",\"scope\":null,\"idempotency_key\":null,\"parent_id\":null,\"payload\":{\"agent\":\"package-mcp-smoke\",\"message\":\"cooldown probe one @conformance-agent-2\",\"success\":true,\"sender_label\":\"package-mcp-smoke\",\"mode\":\"planning\",\"scope\":\"fil<path>//room/conf-cooldown\",\"participants\":[\"conformance-agent-2\"],\"task\":null,\"no_task\":true,\"room\":\"conf-cooldown\"},\"prev_hash\":\"243a4b48949032c07c39c0888745d7492bdd620b43eeb57999174d599772fc5f\",\"hash\":\"7b0e1bd6735873d8df8e09e5d646e9eabfa0526e1c2cea36c12cba08a12d6e76\",\"parents\":[],\"hlc\":\"1793547402372:0:package-mcp-smoke\"},{\"schema_version\":1,\"event_id\":\"evt_000000006ae75c8a_169fdd30\",\"agent_id\":\"room\",\"ts\":\"2026-11-01T08:36:42.379-07:00\",\"stage\":\"Effect\",\"kind\":\"room_mention_created\",\"scope\":null,\"idempotency_key\":null,\"parent_id\":null,\"payload\":{\"from\":\"package-mcp-smoke\",\"to\":\"conformance-agent-2\",\"source_event\":\"evt_000000006ae75c8a_14686870\",\"message\":\"cooldown probe one @conformance-agent-2\",\"status\":\"pending\",\"intent\":\"mention\",\"visible_mentions\":[\"conformance-agent-2\"],\"room\":\"conf-cooldown\"},\"prev_hash\":\"ad1e8463f9a76aeffa2c4a52b8e86a7c86e00d9d15de2d6e0cf4678f4fe2c458\",\"hash\":\"a52c1044dc8fb6d0c65b2790094e003a4b14f4b572b1eef049461ec7f70ed622\",\"parents\":[\"evt_000000006ae75c8a_14686870\"],\"hlc\":\"1793547402418:0:package-mcp-smoke\"},{\"schema_version\":1,\"event_id\":\"evt_000000006ae75c8a_16a02254\",\"agent_id\":\"room\",\"ts\":\"2026-11-01T08:36:42.379-07:00\",\"stage\":\"Effect\",\"kind\":\"room_obligation_created\",\"scope\":null,\"idempotency_key\":null,\"parent_id\":null,\"payload\":{\"from\":\"package-mcp-smoke\",\"to\":\"conformance-agent-2\",\"source_event\":\"evt_000000006ae75c8a_14686870\",\"message\":\"cooldown probe one @conformance-agent-2\",\"seq\":1,\"status\":\"pending\",\"intent\":\"turn\",\"room\":\"conf-cooldown\"},\"prev_hash\":\"9f73beded9e1a43f39a1046a08640b0ae7217df295345c9cb7dda4bf7c0a7c44\",\"hash\":\"e8a847a18915d41f5e782830209c190417ece7bf0e20b2928b41986138d57427\",\"parents\":[\"evt_000000006ae75c8a_14686870\"],\"hlc\":\"1793547402418:1:package-mcp-smoke\"},{\"schema_version\":1,\"event_id\":\"evt_000000006ae75c8a_19d5b68c\",\"agent_id\":\"room\",\"ts\":\"2026-11-01T08:36:42.433-07:00\",\"stage\":\"Effect\",\"kind\":\"room_wake_queued\",\"scope\":null,\"idempotency_key\":null,\"parent_id\":null,\"payload\":{\"from\":\"package-mcp-smoke\",\"path\":\"auto\",\"status\":\"queued\",\"mention_ids\":[\"evt_000000006ae75c8a_169fdd30\"],\"obligation_ids\":[\"evt_000000006ae75c8a_16a02254\"],\"deadline_ms\":60000,\"agent\":\"conformance-agent-2\",\"to\":\"conformance-agent-2\",\"source_event\":\"evt_000000006ae75c8a_14686870\",\"room\":\"conf-cooldown\",\"system_writer\":\"wake_dispatcher\"},\"prev_hash\":\"8f1f5e406563818195edbf82983fd685b724b6b215fdd97b325c76216b59a09c\",\"hash\":\"989b4e0485ae7843f10467d0fb01e28dc4ce45c3fd8db70d7b6ac46cb2efef86\",\"parents\":[\"evt_000000006ae75c8a_14686870\",\"evt_000000006ae75c8a_169fdd30\",\"evt_000000006ae75c8a_16a02254\"],\"hlc\":\"1793547402437:0:wake_dispatcher\"},{\"schema_version\":1,\"event_id\":\"evt_000000006ae75c8c_0b46bea4\",\"agent_id\":\"room\",\"ts\":\"2026-11-01T08:36:44.189-07:00\",\"stage\":\"Effect\",\"kind\":\"room_wake_deferred\",\"scope\":null,\"idempotency_key\":null,\"parent_id\":null,\"payload\":{\"from\":\"package-mcp-smoke\",\"path\":\"auto\",\"status\":\"runtime_not_current\",\"mention_ids\":[\"evt_000000006ae75c8a_169fdd30\"],\"obligation_ids\":[\"evt_000000006ae75c8a_16a02254\"],\"job\":\"<fixture>\\\\Desktop\\\\AI Laptop Chat\\\\squad-connector\\\\target-package\\\\mcp-smoke-202611010836406580700-22936\\\\.squad\\\\room-wake-jobs\\\\wake-9b5533f6e41e5764c3a37fcb067f737a537666ff2d181ce25c3e16a50d09c115.json\",\"reason\":\"room wake worker dispatch refused: shipped runtime is not fresh (publisher code identity unverified, dist/skill manifest hash mismatch, package-result schema mismatch, package-result skill artifact role mismatch, package-result skill artifact metadata contract mismatch, package-result hash mismatch, package-result room hash mismatch, package-result skill hash mismatch, package-result inject-chat dist hash mismatch, package-result inject-chat skill hash mismatch, package-result missing MCP metadata, package-result missing MCP refresh proof, package-result MCP refresh proof failed, package-result not passed, dist/squad.exe missing, dist/squad-room.exe missing, package release squad-room.exe missing, dist/inject-chat.exe missing, skill bin/inject-chat.exe missing, dist/squad-room.exe does not match package release squad-room.exe, skill bin/squad.exe missing)\",\"agent\":\"conformance-agent-2\",\"to\":\"conformance-agent-2\",\"source_event\":\"evt_000000006ae75c8a_14686870\",\"room\":\"conf-cooldown\",\"system_writer\":\"wake_dispatcher\"},\"prev_hash\":\"9f857b54a5e345d26fbc1ee375999e11cc7598080754ba912647b59d48a9cf5c\",\"hash\":\"9e2bc31c979629f812fb60daaec11bf275a61bbef77391eb78a65e72a0baa48e\",\"parents\":[\"evt_000000006ae75c8a_14686870\",\"evt_000000006ae75c8a_169fdd30\",\"evt_000000006ae75c8a_16a02254\"],\"hlc\":\"1793547404194:0:wake_dispatcher\"},{\"schema_version\":1,\"event_id\":\"evt_000000006ae75c8c_29a2d6e4\",\"agent_id\":\"package-mcp-smoke\",\"ts\":\"2026-11-01T08:36:44.698-07:00\",\"stage\":\"Effect\",\"kind\":\"room_response\",\"scope\":null,\"idempotency_key\":null,\"parent_id\":null,\"payload\":{\"agent\":\"package-mcp-smoke\",\"message\":\"cooldown probe two @conformance-agent-2\",\"success\":true,\"sender_label\":\"package-mcp-smoke\",\"mode\":\"planning\",\"scope\":\"fil<path>//room/conf-cooldown\",\"participants\":[\"conformance-agent-2\"],\"task\":null,\"no_task\":true,\"room\":\"conf-cooldown\"},\"prev_hash\":\"3e666a776d283ab0be36dcb940c58f272b8603a78d42cb745d7f4e484bf275da\",\"hash\":\"dba92ec16d5ed9ccc3cda731f0b10177d055204a67f6bc849a19868784c445f8\",\"parents\":[\"evt_000000006ae75c8a_14686870\"],\"hlc\":\"1793547404730:0:package-mcp-smoke\"},{\"schema_version\":1,\"event_id\":\"evt_000000006ae75c8c_2bf695d4\",\"agent_id\":\"room\",\"ts\":\"2026-11-01T08:36:44.737-07:00\",\"stage\":\"Effect\",\"kind\":\"room_mention_created\",\"scope\":null,\"idempotency_key\":null,\"parent_id\":null,\"payload\":{\"from\":\"package-mcp-smoke\",\"to\":\"conformance-agent-2\",\"source_event\":\"evt_000000006ae75c8c_29a2d6e4\",\"message\":\"cooldown probe two @conformance-agent-2\",\"status\":\"pending\",\"intent\":\"mention\",\"visible_mentions\":[\"conformance-agent-2\"],\"room\":\"conf-cooldown\"},\"prev_hash\":\"024fcf1247934d4cb060ad844c977f97e437f3baa5d7aa4f087bc29426962d3d\",\"hash\":\"b5c23f2c7b1b8301f3d29602cc4ecca7460795174a9c4502951ebe5991c5fe45\",\"parents\":[\"evt_000000006ae75c8c_29a2d6e4\"],\"hlc\":\"1793547404775:0:package-mcp-smoke\"},{\"schema_version\":1,\"event_id\":\"evt_000000006ae75c8c_2bf6b8fc\",\"agent_id\":\"room\",\"ts\":\"2026-11-01T08:36:44.737-07:00\",\"stage\":\"Effect\",\"kind\":\"room_obligation_created\",\"scope\":null,\"idempotency_key\":null,\"parent_id\":null,\"payload\":{\"from\":\"package-mcp-smoke\",\"to\":\"conformance-agent-2\",\"source_event\":\"evt_000000006ae75c8c_29a2d6e4\",\"message\":\"cooldown probe two @conformance-agent-2\",\"seq\":2,\"status\":\"pending\",\"intent\":\"turn\",\"room\":\"conf-cooldown\"},\"prev_hash\":\"c14b058ea4d5d804818912ddd44f965a7081faf3783f4f73d68e33f453397534\",\"hash\":\"b78a8a86db1ed0262a01cb7aab4f48bfc8609d2b2d6c76ff594fe07fa561a8ab\",\"parents\":[\"evt_000000006ae75c8c_29a2d6e4\"],\"hlc\":\"1793547404775:1:package-mcp-smoke\"},{\"schema_version\":1,\"event_id\":\"evt_000000006ae75c8c_33129ebc\",\"agent_id\":\"room\",\"ts\":\"2026-11-01T08:36:44.856-07:00\",\"stage\":\"Effect\",\"kind\":\"room_wake_deferred\",\"scope\":null,\"idempotency_key\":null,\"parent_id\":null,\"payload\":{\"from\":\"package-mcp-smoke\",\"path\":\"send\",\"status\":\"cooldown\",\"mention_ids\":[\"evt_000000006ae75c8c_2bf695d4\"],\"obligation_ids\":[\"evt_000000006ae75c8c_2bf6b8fc\"],\"reason\":\"thrash_damper\",\"agent\":\"conformance-agent-2\",\"to\":\"conformance-agent-2\",\"source_event\":\"evt_000000006ae75c8c_29a2d6e4\",\"room\":\"conf-cooldown\",\"system_writer\":\"wake_dispatcher\"},\"prev_hash\":\"f815e94a07e3f833103ce8721ab9e414918301b08d854ac0da35d24700675fec\",\"hash\":\"90c0b607297ee02dded38734f5fb4c74abea3a278c6ad1180cf59d65e56c3ab8\",\"parents\":[\"evt_000000006ae75c8c_29a2d6e4\",\"evt_000000006ae75c8c_2bf695d4\",\"evt_000000006ae75c8c_2bf6b8fc\"],\"hlc\":\"1793547404860:0:wake_dispatcher\"}],\"exact_job_before_retry\":{\"schema\":\"room-wake-job-v3\",\"room\":\"conf-cooldown\",\"agent\":\"conformance-agent-2\",\"from\":\"package-mcp-smoke\",\"source_event\":\"evt_000000006ae75c8c_29a2d6e4\",\"path\":\"send\",\"prompt\":\"cooldown probe two @conformance-agent-2\",\"mention_ids\":[\"evt_000000006ae75c8c_2bf695d4\"],\"obligation_ids\":[\"evt_000000006ae75c8c_2bf6b8fc\"],\"pulse_message\":null,\"deadline_ms\":60000,\"dispatch_status\":\"deferred_cooldown\",\"created_at\":\"2026-11-01T08:36:44.826-07:00\",\"attempts\":0,\"room_authority\":{\"owner_grant\":{\"grant_sha256\":\"639ca50a2714befd7d6b3098de15ebaef03221dde2349be45daa8c40a5d9a43b\",\"expires_at\":\"2026-11-01T16:36:41Z\",\"scope\":{\"kind\":\"coordination\"}},\"revision\":1,\"reset_at\":null,\"session\":null},\"registration_sha256\":\"f358a175e95c6f149389e601a0ca3954ad4fd6087e0a99a936f577c4771a2075\",\"control_epoch\":0,\"not_after\":\"2026-11-01T08:37:44.826-07:00\",\"binding_sha256\":\"17ef6d3c42a6b393c57a5cd54315462c2aaacedac239892ec21a153885cee174\",\"updated_at\":\"2026-11-01T08:36:44.853-07:00\",\"last_error\":\"thrash_damper\"},\"typed_defer\":true,\"retained_exact_binding\":true,\"exact_job_after_retry\":{\"schema\":\"room-wake-job-v3\",\"room\":\"conf-cooldown\",\"agent\":\"conformance-agent-2\",\"from\":\"package-mcp-smoke\",\"source_event\":\"evt_000000006ae75c8c_29a2d6e4\",\"path\":\"send\",\"prompt\":\"cooldown probe two @conformance-agent-2\",\"mention_ids\":[\"evt_000000006ae75c8c_2bf695d4\"],\"obligation_ids\":[\"evt_000000006ae75c8c_2bf6b8fc\"],\"pulse_message\":null,\"deadline_ms\":60000,\"dispatch_status\":\"deferred_cooldown\",\"created_at\":\"2026-11-01T08:36:44.826-07:00\",\"attempts\":0,\"room_authority\":{\"owner_grant\":{\"grant_sha256\":\"639ca50a2714befd7d6b3098de15ebaef03221dde2349be45daa8c40a5d9a43b\",\"expires_at\":\"2026-11-01T16:36:41Z\",\"scope\":{\"kind\":\"coordination\"}},\"revision\":1,\"reset_at\":null,\"session\":null},\"registration_sha256\":\"f358a175e95c6f149389e601a0ca3954ad4fd6087e0a99a936f577c4771a2075\",\"control_epoch\":0,\"not_after\":\"2026-11-01T08:37:44.826-07:00\",\"binding_sha256\":\"17ef6d3c42a6b393c57a5cd54315462c2aaacedac239892ec21a153885cee174\",\"updated_at\":\"2026-11-01T08:36:44.853-07:00\",\"last_error\":\"thrash_damper\"},\"runtime_fresh\":false,\"retryable\":false,\"held_not_poisoned\":true}"
    },
    {
      "case_number": 15,
      "case_id": "tier_ceiling_refused",
      "category": "privilege_levels",
      "input_vector_summary": "Invoking mutating tool squad_task action='create' from a session initialized with tier='safe_read'",
      "protected_boundary": "Hierarchical MCP tool tier classifier and permission ceiling",
      "expected_disposition": "REFUSE",
      "expected_reason_code": "tier_ceiling_refused",
      "source_test_identifier": "squad_connector::package::mcp::conformance::case_tier_ceiling",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "a safe_read session cannot invoke a mutating tool",
      "observed_execution_summary": "{\"code\":-32001,\"message\":\"tier denied: tool 'squad_task' requires tier 'mutating' but session tier is 'safe_read'\"}"
    },
    {
      "case_number": 16,
      "case_id": "post_cancellation_refused",
      "category": "breakglass_containment",
      "input_vector_summary": "Attempting controlled actions after an emergency stop latch has been engaged",
      "protected_boundary": "Break-glass containment latch exclusion on new effects",
      "expected_disposition": "REFUSE",
      "expected_reason_code": "break_glass_contained",
      "source_test_identifier": "squad_connector::package::mcp::conformance::case_post_cancellation",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "after the stop is pulled no new controlled action executes",
      "observed_execution_summary": "{\"code\":-32001,\"message\":\"fleet_frozen: level 'freeze': the fleet ceiling clamps every session to 'safe_read', so 'squad_edit' (tier 'mutating') is refused: break_glass_contained: emergency state FREEZE_REQUESTED (latch 'machine-stop' scope 'machine': conformance post-cancellation probe). Renew the ...<truncated>"
    },
    {
      "case_number": 17,
      "case_id": "stopped_authority_cannot_revive",
      "category": "epoch_revocation",
      "input_vector_summary": "Engaging scoped stop for Project A, verifying Project A is refused while Project B continues unaffected",
      "protected_boundary": "Fine-grained scoped control epoch invalidation",
      "expected_disposition": "REFUSE",
      "expected_reason_code": "break_glass_contained",
      "source_test_identifier": "squad_connector::package::mcp::conformance::case_stopped_lineage",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "a project stop refuses its project, spares other projects, and its pre-stop lease stays dead after clearance while fresh tenancy writes",
      "observed_execution_summary": "lineage: Some(1) | latched: squad error: break_glass_contained: protected write to '<fixture>/desktop/ai laptop chat/squad-connector/target-package/mcp-smoke-202611010836519780700-22936/proj-stopped/a.txt' refused: emergency state FREEZE_REQUESTED (latch 'latch_20261101_083653_636e6e88.json' scope 'projec<path>/\\?\\<path>/Us...<truncated> | other project: {\n  \"path\": \"<fixture>/desktop/ai laptop chat/squad-connector/target-package/mcp-smoke-202611010836519780700-22936/proj-other/b.txt\",\n  \"bytes_written\": 3,\n  \"snapshot_id\": \"snap_20261101_083654_38e5dccc\",\n  \"owner\": \"package-mcp-smoke\",\n  \"gated\": true,\n  \"ownership\": {\n    \"scope\": \"<path>/...<truncated> | pre-stop after clearance: squad error: stale_control_epoch: authority issued at 0 was revoked by 'projec<path>/\\?\\<fixture>\\Desktop\\AI Laptop Chat\\squad-connector\\target-package\\mcp-smoke-202611010836519780700-22936\\proj-stopped' at 1; release it and acquire a new tenancy | fresh: {\n  \"path\": \"<fixture>/desktop/ai laptop chat/squad-connector/target-package/mcp-smoke-202611010836519780700-22936/proj-stopped/a.txt\",\n  \"bytes_written\": 3,\n  \"snapshot_id\": \"snap_20261101_083654_102b539f\",\n  \"owner\": \"package-mcp-smoke\",\n  \"gated\": true,\n  \"ownership\": {\n    \"scope\": \"C...<truncated>"
    },
    {
      "case_number": 18,
      "case_id": "room_control_operator_required",
      "category": "room_governance",
      "input_vector_summary": "Bound non-operator participant attempts to execute administrative room control operations",
      "protected_boundary": "Operator privilege requirement for Room control plane",
      "expected_disposition": "REFUSE",
      "expected_reason_code": "operator_required / permission_denied",
      "source_test_identifier": "squad_connector::package::mcp::conformance::case_room_control_standing",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "an ordinary room participant cannot run a room control act",
      "observed_execution_summary": "squad error: room_repair_operator_required: 'package-mcp-smoke' is not a trusted operator; repair changes what every participant in this room can do, and control/trusted-operators.json is where that standing is granted"
    },
    {
      "case_number": 19,
      "case_id": "room_recreate_roster_refused",
      "category": "room_immutability",
      "input_vector_summary": "Attempting to overwrite or recreate an existing Room's roster without following governance protocol",
      "protected_boundary": "Room lifecycle and roster immutability",
      "expected_disposition": "REFUSE",
      "expected_reason_code": "room_already_exists",
      "source_test_identifier": "squad_connector::package::mcp::conformance::case_room_recreate_roster",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "re-creating a room refuses instead of replacing its roster, a deliberate replacement needs operator standing, and the roster survives both",
      "observed_execution_summary": "recreate_refused=true room_exists=true replace_refused=true recompose_operator_required=true roster_intact=true | squad error: room_exists: 'mcp-smoke' already has an index with 1 participant(s); creating it again would REPLACE that roster and evict whoever is left out. Add a participant with room a...<truncated>"
    },
    {
      "case_number": 20,
      "case_id": "exec_start_takeover_refused",
      "category": "process_confinement",
      "input_vector_summary": "Agent 2 attempts to restart or take over a paused execution lane initiated by Agent 1",
      "protected_boundary": "Execution lane tenancy and ownership binding",
      "expected_disposition": "REFUSE",
      "expected_reason_code": "lane_takeover_denied",
      "source_test_identifier": "squad_connector::package::mcp::conformance::case_exec_start_takeover",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "a paused execution cannot be restarted, and so taken over, by another agent",
      "observed_execution_summary": "start_ok=true pause_ok=true rival_refused=true exec_start_denied=true | rival: squad error: exec_start_denied: the execution for task 'task_20261101_083658_416a175e' was started by another agent; an execution is driven by the agent that started it or by a trusted operator"
    },
    {
      "case_number": 21,
      "case_id": "planning_wake_target_bound",
      "category": "planning_governance",
      "input_vector_summary": "squad_plan mutation naming an unauthorized external wake target or intruder agent lane",
      "protected_boundary": "Task plan wake target validation and authority containment",
      "expected_disposition": "REFUSE",
      "expected_reason_code": "wake_target_refused",
      "source_test_identifier": "squad_connector::package::mcp::conformance::case_planning_wake_target",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "a planning mutation naming no wake target plans no wake, and one naming another lane is refused as a wake request rather than as impersonation",
      "observed_execution_summary": "absent_ok=true no_wake_planned=true named_refused=true refusal_is_wake_identity=true not_impersonation=true | named: squad error: planning_wake_identity_refused: a planning verb wakes its own caller ('package-mcp-smoke'), not 'intruder-agent'; waking another lane is delegation - use delegate --paren...<truncated>"
    },
    {
      "case_number": 22,
      "case_id": "profile_credential_owner_surface",
      "category": "credential_protection",
      "input_vector_summary": "Worker agent calling squad_profile action='credential-unset' or inspecting master fleet credentials",
      "protected_boundary": "Operator interactive console requirement for credential store management",
      "expected_disposition": "REFUSE",
      "expected_reason_code": "operator_surface_required",
      "source_test_identifier": "squad_connector::package::mcp::conformance::case_profile_owner_surface",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "the credential store and its fleet diagnostics require operator standing, a profile view is bound to the caller, and a worker can still ask what it needs itself",
      "observed_execution_summary": "status_refused=true unset_refused=true owner_required=true launch_refused=true subject_bound=true own_view_ok=true | status: squad error: profile_credential_status: owner_control_required: 'package-mcp-smoke' is not a trusted operator (control/trusted-operators.json); restriction-plane changes are o...<truncated>"
    },
    {
      "case_number": 23,
      "case_id": "session_lane_bound",
      "category": "adapter_isolation",
      "input_vector_summary": "Calling squad_session_operation to send commands into another agent's IDE session lane",
      "protected_boundary": "Session lane isolation and cross-lane command injection fencing",
      "expected_disposition": "REFUSE",
      "expected_reason_code": "session_lane_bound_refused",
      "source_test_identifier": "squad_connector::package::mcp::conformance::case_session_lane_bound",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "driving another agent's IDE lane is refused, and naming your own lane is not refused for that reason",
      "observed_execution_summary": "other_refused=true refusal_is_session_lane=true own_not_lane_refused=true | other: squad error: session_lane_refused: this connection acts as 'package-mcp-smoke'; driving lane 'intruder-agent' would deliver into, read, or rebind another agent's live session"
    },
    {
      "case_number": 24,
      "case_id": "prompt_redaction_holds",
      "category": "telemetry_privacy",
      "input_vector_summary": "Planned Room wake prompt embedding Anthropic/GitHub/AWS/RSA secret patterns inspected for redaction",
      "protected_boundary": "Automated regex credential scanner on outbound prompt streams",
      "expected_disposition": "ADMIT",
      "expected_reason_code": "redacted_delivered",
      "source_test_identifier": "squad_connector::package::mcp::conformance::case_prompt_redaction",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "a planned room wake prompt carries a redaction marker for every universal credential shape and none of the secret bodies; the prompt is delivered, not withheld",
      "observed_execution_summary": "call_ok=true planned=true prompt_bytes=1373 missing_markers=[] leaked_fragments=[] withheld=false"
    },
    {
      "case_number": 25,
      "case_id": "tool_result_redaction_holds",
      "category": "telemetry_privacy",
      "input_vector_summary": "Writing credential-shaped message to Room feed and verifying that note receipt, feed, and error echo strip secrets",
      "protected_boundary": "Inbound and outbound tool result credential filtering and JSON stream safety",
      "expected_disposition": "ADMIT",
      "expected_reason_code": "redacted_sanitized",
      "source_test_identifier": "squad_connector::package::mcp::conformance::case_tool_result_redaction",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "a credential-shaped Room message comes back redacted in the note receipt and the Room feed, an echoing error carries the key marker, no secret body survives, the feed stays valid JSON, and nothing is withheld",
      "observed_execution_summary": "note_ok=true read_ok=true error_refused=true note_marked=true feed_marked=true error_marked=true feed_parses=true leaked=[] withheld=false"
    },
    {
      "case_number": 26,
      "case_id": "evidence_jcs_rfc8785_vectors",
      "category": "evidence_canonicalization",
      "input_vector_summary": "Serializing official RFC 8785 test vectors through squad_evidence action='canonicalize'",
      "protected_boundary": "RFC 8785 JSON Canonicalization Scheme mathematical compliance",
      "expected_disposition": "ADMIT",
      "expected_reason_code": "jcs_verified",
      "source_test_identifier": "squad_connector::package::mcp::evidence_conformance::case_jcs",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "RFC 8785 serializations match the RFC's own vectors",
      "observed_execution_summary": "20 of 20 vectors match"
    },
    {
      "case_number": 27,
      "case_id": "evidence_corpus_through_mcp",
      "category": "evidence_parsing",
      "input_vector_summary": "Reading multi-format document corpus (HTML, Markdown, PDF, XML, RTF, Email) node-by-node via squad_doc_source",
      "protected_boundary": "Zero-trust parser worker sandboxing and extraction schema conformity",
      "expected_disposition": "ADMIT",
      "expected_reason_code": "corpus_nodes_verified",
      "source_test_identifier": "squad_connector::package::mcp::evidence_conformance::case_corpus",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "every corpus document reads through the parser worker as its case expects, node by node",
      "observed_execution_summary": "37 of 37 corpus documents pass"
    },
    {
      "case_number": 28,
      "case_id": "evidence_governing_pdf_six_pages",
      "category": "evidence_parsing",
      "input_vector_summary": "Extracting all 6 pages of Room Workflow Governance.pdf through parser worker into server-cut views",
      "protected_boundary": "Complete page-by-page text operator extraction and resource bounds",
      "expected_disposition": "ADMIT",
      "expected_reason_code": "pdf_pages_verified",
      "source_test_identifier": "squad_connector::package::mcp::evidence_conformance::case_governing_pdf",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "the governing PDF yields its six pages of text through squad_doc_source read",
      "observed_execution_summary": "pages [(\"page1\", 3373), (\"page2\", 3550), (\"page3\", 3437), (\"page4\", 3685), (\"page5\", 3262), (\"page6\", 4383)]; inventory_total 6; extraction complete_for_profile; 21700 chars served in 1 page(s) of delivery; phrases present true"
    },
    {
      "case_number": 29,
      "case_id": "evidence_repeated_text_resolves_each_node",
      "category": "evidence_addressing",
      "input_vector_summary": "Citing identical repeated sentence across document nodes with occurrence ordinal disambiguation",
      "protected_boundary": "Ambiguity detection on repeated text and unique node handle issuance",
      "expected_disposition": "ADMIT",
      "expected_reason_code": "node_occurrence_resolved",
      "source_test_identifier": "squad_connector::package::mcp::evidence_conformance::case_repeated",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "repeated text is ambiguous until an occurrence is named, then each handle resolves to its own node",
      "observed_execution_summary": "unnamed occurrence: refused: squad error: quote_ambiguous: the quotation occurs 2 times in the served content; name one with occurrence: [{\"occurrence\":1,\"node\":\"text/l2\"},{\"occurrence\":2,\"node\":\"text/l4\"}]; occurrence 1 -> text/l2 \"The timeout is 60 seconds.\"; occurrence 2 -> text/l4 \"The timeout is 60 seconds.\""
    },
    {
      "case_number": 30,
      "case_id": "evidence_drift_refused",
      "category": "evidence_integrity",
      "input_vector_summary": "Resolving handle ev_bca56ab5... after physical source file has had bytes appended outside the engine",
      "protected_boundary": "Source revision byte integrity and drift detection",
      "expected_disposition": "REFUSE",
      "expected_reason_code": "drifted / doc_source_drifted",
      "source_test_identifier": "squad_connector::package::mcp::evidence_conformance::case_drift",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "altered source bytes refuse resolution (drifted) and reading",
      "observed_execution_summary": "before: {\"handle\":\"ev_75c30e743a6d4fd9399c9d8ce825b3b4\",\"envelope\":{\"version\":1,\"source_revision\":\"doc_20261101_083744_eaee6520\",\"view_digest\":\"7b61ecbd783546930ab2ef728ddb9cb6914fd9fa5a3cb02b1dbcbd3357f1e751\",\"node_id\":\"text/l2\",\"selector\":{\"kind\":\"whole_node\"},\"source_native_locator\":{\"kind\":\"line\",\"line\"...<truncated>; after: refused: squad error: drifted: <fixture>/desktop/ai laptop chat/squad-connector/target-package/mcp-smoke-202611010837054740700-22936/evidence-corpus/er-drift.txt no longer holds the registered bytes (registered bf15f8633e85350430adf1bbc47a47154965d3a7f28e4ebad25d6a39ecaa2f8c, current cfd3689122bb3...<truncated>; read: refused: squad error: doc_source_drifted: <fixture>/desktop/ai laptop chat/squad-connector/target-package/mcp-smoke-202611010837054740700-22936/evidence-corpus/er-drift.txt content changed (registered bf15f8633e85350430adf1bbc47a47154965d3a7f28e4ebad25d6a39ecaa2f8c, current cfd3689122bb3d380e649d7...<truncated>"
    },
    {
      "case_number": 31,
      "case_id": "evidence_tampered_view_refused",
      "category": "evidence_integrity",
      "input_vector_summary": "Resolving citation whose underlying committed Room graph view JSON blob underwent a single-bit flip on disk",
      "protected_boundary": "Cryptographic view_digest verification against physical blob bytes",
      "expected_disposition": "REFUSE",
      "expected_reason_code": "view_digest_mismatch",
      "source_test_identifier": "squad_connector::package::mcp::evidence_conformance::case_tamper",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "a tampered committed view refuses with view_digest_mismatch",
      "observed_execution_summary": "tampered 1 stored view artifact(s); resolve: refused: squad error: view_digest_mismatch: graph_artifact_integrity: indexed length or content hash does not match observed bytes"
    },
    {
      "case_number": 32,
      "case_id": "evidence_old_view_survives_extraction_change",
      "category": "evidence_immutability",
      "input_vector_summary": "Re-extracting document under new parser configuration, proving old handle still resolves original view digest",
      "protected_boundary": "Historical view immutability across parser / config migrations",
      "expected_disposition": "ADMIT",
      "expected_reason_code": "historical_view_preserved",
      "source_test_identifier": "squad_connector::package::mcp::evidence_conformance::case_extraction_change",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "a new extraction identity is a new view; the old handle still resolves the old view",
      "observed_execution_summary": "reading the same bytes under a tighter extraction budget (limits digest eda0434d227c5cf092ba7066a3619c0a042bf4fa9593705272e258ccf3d4a554) committed view 4f1a313da79436f0dffdc0c3fbf254466d04be1c322679d08281fc695effab4f, not 6aff1c717f835e8c033f1586a44bc995aa4fe9cb01b4216e995edd3c3a9f5a54; the old handle still resolves view 6aff1c717f835e8c033f1586a44bc995aa4fe9cb01b4216e995edd3c3a9f5a54 with its own text. A parser-digest change is keyed identically: view identity binds the parser digest and the limits digest together."
    },
    {
      "case_number": 33,
      "case_id": "evidence_bad_selector_refused",
      "category": "evidence_fencing",
      "input_vector_summary": "Submitting unquoted strings, raw hashes, paths, unknown ev_ handles, and out-of-bounds scalar subranges",
      "protected_boundary": "Strict server-side validation of EvidenceRef structure and coordinates",
      "expected_disposition": "REFUSE",
      "expected_reason_code": "quote_not_found / not_a_path / agent_manufactured_ref / ev_unknown / selector_out_of_bounds / offset_unit_reserved",
      "source_test_identifier": "squad_connector::package::mcp::evidence_conformance::case_bad_selector",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "bad selectors, paths, raw hashes, unknown handles and reserved extensions are refused by name",
      "observed_execution_summary": "quote: refused: squad error: quote_not_found: the exact quotation does not occur in the content this receipt served | path: refused: squad error: not_a_path: an evidence ref is a Room-issued ev_ handle, never a path or URL; register or capture the source and cite through the Room | raw hash: refused: squad error: agent_manufactured_ref: raw hashes, character offsets and hand-built envelopes are not evidence refs; cite through a served receipt to receive a handle | unknown: refused: squad error: ev_unknown: ev_00000000000000000000000000000000 was not issued by the Room | out of bounds: refused: squad error: selector_out_of_bounds: range 0..9999 exceeds the node's 26 characters | reserved unit: refused: squad error: offset_unit_reserved: 'utf16_code_unit' is reserved for a later envelope version | genuine envelope recognized: true | hand-built envelope as ref: refused: squad error: agent_manufactured_ref: raw hashes, character offsets and hand-built envelopes are not evidence refs; cite through a served receipt to receive a handle"
    },
    {
      "case_number": 34,
      "case_id": "evidence_unauthorized_dereference_refused",
      "category": "evidence_access_control",
      "input_vector_summary": "Agent D (coordination room only) attempts to dereference document registered in Project Room",
      "protected_boundary": "Room project-scoped reader grant enforcement",
      "expected_disposition": "REFUSE",
      "expected_reason_code": "room_project_grant_missing",
      "source_test_identifier": "squad_connector::package::mcp::evidence_conformance::case_access",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "a caller outside the Room's owner roster is refused access",
      "observed_execution_summary": "resolve: refused: squad error: access_denied: doc_source_project_standing_required: 'conformance-evidence-d' holds no grant in the project that contains this source; a Coordination Room's roster admits the Room, not every project read through it. Allowed route: a project record is served to a trusted operator, a hold...<truncated> | read: refused: squad error: access_denied: doc_source_project_standing_required: 'conformance-evidence-d' holds no grant in the project that contains this source; a Coordination Room's roster admits the Room, not every project read through it. Allowed route: a project record is served to a trusted operator, a hold...<truncated>"
    },
    {
      "case_number": 35,
      "case_id": "evidence_truncation_in_delivery_status",
      "category": "evidence_delivery",
      "input_vector_summary": "Reading document with max_chars limit smaller than document length, checking delivery status metadata",
      "protected_boundary": "Explicit delivery truncation/chunking disclosure in receipt",
      "expected_disposition": "ADMIT",
      "expected_reason_code": "chunked_delivery_accounted",
      "source_test_identifier": "squad_connector::package::mcp::evidence_conformance::case_truncation",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "a bounded delivery says chunked or truncated, with counts",
      "observed_execution_summary": "read delivery {\"status\":\"chunked\",\"offset\":0,\"delivered_chars\":10,\"total_chars\":65,\"next_offset\":10} | resolve delivery {\"status\":\"truncated\",\"delivered_chars\":5,\"total_chars\":26,\"next_offset\":5}"
    },
    {
      "case_number": 36,
      "case_id": "evidence_excerpt_stays_distinct",
      "category": "evidence_lineage",
      "input_vector_summary": "Submitting an agent-supplied text excerpt as evidence, asserting it retains agent_supplied role and cannot become a requirement",
      "protected_boundary": "Strict separation between server-cut evidence and agent-supplied commentary",
      "expected_disposition": "ADMIT",
      "expected_reason_code": "excerpt_role_segregated",
      "source_test_identifier": "squad_connector::package::mcp::evidence_conformance::case_excerpt",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "an agent-supplied excerpt stays agent_supplied and never takes the requirement role",
      "observed_execution_summary": "excerpt kind \"agent_supplied_excerpt\" origin \"agent_supplied\"; cited origin \"agent_supplied\"; as requirement: refused: squad error: role_ineligible: only a registered document can anchor a requirement; research captures and agent-supplied material never take the requirement role; registered-document requirement: {\"task\":\"task_20261101_083752_69f1c93f\",\"requirement\":{\"req\":\"R1\",\"rev\":1,\"handle\":\"ev_5eadab557bee4d4f38124615692da610\",\"statement\":\"The timeout is sixty seconds.\",\"revision\":\"reqrev_4fb8dc2b12d88645b3f6a6a32e4ff9a3\",\"room\":\"conf-evidence\",\"supersedes\":null},\"requires_reassessment\":[]}"
    },
    {
      "case_number": 37,
      "case_id": "evidence_echo_lineage_preserved",
      "category": "evidence_lineage",
      "input_vector_summary": "Recording citations that reference peer Room messages citing source evidence, tracking echo chain",
      "protected_boundary": "Provenance DAG preservation across inter-agent quotation hops",
      "expected_disposition": "ADMIT",
      "expected_reason_code": "echo_lineage_bound",
      "source_test_identifier": "squad_connector::package::mcp::evidence_conformance::case_echo",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "echo citations are recorded as echoes resting on the first-hand origin",
      "observed_execution_summary": "note {\"room\":\"conf-evidence\",\"from\":\"package-mcp-smoke\",\"noted\":\"status: timeout confirmed\",\"evt\":\"evt_000000006ae75cd1_02811080\",\"blocking\":false,\"woken\":[],\"wake_deferred\":[],\"wake_deferred_count\":0,\"wake_errors\":[]}; B {\"finding\":\"fnd_0700448e92a1f7a44ee4a8a311cc1683\",\"kind\":\"finding\",\"room\":\"conf-evidence\",\"status\":\"passed\",\"evaluation\":\"evl_c1099137f3bdfbee577e12338487b8cb\",\"results\":[],\"absence\":null,\"addresses\":null,\"visibility\":\"all\",\"staging_note\":null}; C {\"finding\":\"fnd_319329ff8341696e093430708ddd96b3\",\"kind\":\"finding\",\"room\":\"conf-evidence\",\"status\":\"passed\",\"evaluation\":\"evl_f6bad1c9ed7afd85567ece454c947375\",\"results\":[],\"absence\":null,\"addresses\":null,\"visibility\":\"all\",\"staging_note\":null}; coverage {\"room\":\"conf-evidence\",\"view_digest\":\"6aff1c717f835e8c033f1586a44bc995aa4fe9cb01b4216e995edd3c3a9f5a54\",\"node\":\"text/l2\",\"citations\":3,\"records_by_kind\":{\"finding\":2,\"room_message\":1},\"first_hand_citers\":[\"package-mcp-smoke\"],\"echo_citations\":[{\"citer\":\"conformance-evidence-b\",\"rests_on\":\"package-m...<truncated>"
    },
    {
      "case_number": 38,
      "case_id": "evidence_distinct_origins_through_three_hops",
      "category": "evidence_consensus",
      "input_vector_summary": "Evaluating origin counting: three records through echo citations count as one origin; second reader makes two",
      "protected_boundary": "Consensus origin counting and anti-sybil citation discounting",
      "expected_disposition": "ADMIT",
      "expected_reason_code": "distinct_origins_counted",
      "source_test_identifier": "squad_connector::package::mcp::evidence_conformance::case_three_hop",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "three records through echoes are one origin; a second first-hand reader makes two",
      "observed_execution_summary": "after three records through echoes: 3 citations, 1 origin(s); after B was served and cited: 2 origin(s) [\"conformance-evidence-b\",\"package-mcp-smoke\"]"
    },
    {
      "case_number": 39,
      "case_id": "evidence_false_predicate_fails_receipt",
      "category": "evidence_evaluation",
      "input_vector_summary": "Submitting finding evaluated against false predicate, verifying receipt records failed matter without throwing panic",
      "protected_boundary": "Deterministic evaluation receipt failure recording",
      "expected_disposition": "REFUSE",
      "expected_reason_code": "predicate_eval_failed",
      "source_test_identifier": "squad_connector::package::mcp::evidence_conformance::case_false_predicate",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "a false typed predicate fails the evaluation receipt and the finding is kept as failed matter",
      "observed_execution_summary": "false text: refused: squad error: predicate_false: an assertion is false against the committed view; finding fnd_ed0c219441f0e43a8192ab019df9e221 is kept as failed matter with evaluation evl_3f57de627ce9cda78d250405e750e284: {\"finding\":\"fnd_ed0c219441f0e43a8192ab019df9e221\",\"kind\":\"finding\",\"room\":\"conf-evidence\",\"statu...<truncated> | true text: {\"finding\":\"fnd_e5420efefab6efe3a0838d425f754798\",\"kind\":\"finding\",\"room\":\"conf-evidence\",\"status\":\"passed\",\"evaluation\":\"evl_40e922d3228d92b0f61d5267f93d7cb1\",\"results\":[{\"predicate\":{\"predicate\":\"equals\",\"handle\":\"ev_66533679968fa4e237849810c6d92243\",\"value\":\"The timeout is 60 seconds.\"},\"result\":...<truncated> | in range: {\"finding\":\"fnd_e2c4a6f26629b20f67674560ffe3b146\",\"kind\":\"finding\",\"room\":\"conf-evidence\",\"status\":\"passed\",\"evaluation\":\"evl_329990d0cad055c42805fd6a98767215\",\"results\":[{\"predicate\":{\"predicate\":\"in_range\",\"handle\":\"ev_ec624325b149f89bae41b8ecdbce5574\",\"min\":100.0,\"max\":200.0},\"result\":\"true\",\"obs...<truncated> | out of range: refused: squad error: predicate_false: an assertion is false against the committed view; finding fnd_27b1eb57029db1ddecaa62a0a2740c8b is kept as failed matter with evaluation evl_fa9f0e90f76c1d9d7be35205cb06d158: {\"finding\":\"fnd_27b1eb57029db1ddecaa62a0a2740c8b\",\"kind\":\"finding\",\"room\":\"conf-evidence\",\"statu...<truncated> | failed findings kept: 2"
    },
    {
      "case_number": 40,
      "case_id": "evidence_absence_requires_complete_inventory",
      "category": "evidence_negation",
      "input_vector_summary": "Asserting negative fact / absence claim before acknowledging unknown-coverage gaps in document inventory",
      "protected_boundary": "Mandatory gap acknowledgment prerequisite for negative evidence",
      "expected_disposition": "REFUSE",
      "expected_reason_code": "absence_unsupported",
      "source_test_identifier": "squad_connector::package::mcp::evidence_conformance::case_absence",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "an absence claim is refused until every unknown-coverage marker is acknowledged",
      "observed_execution_summary": "unknown coverage [\"omission/1\", \"child:object%204%200\"]; unacknowledged: refused: squad error: absence_unsupported: the claimed scope has unknown coverage; an absence claim must acknowledge each marker at its narrowest known location: omission/1, child:object%204%200; acknowledged: {\"finding\":\"fnd_36b5fcc6f66b6f066707c00310daa085\",\"kind\":\"finding\",\"room\":\"conf-evidence\",\"status\":\"passed\",\"evaluation\":\"evl_082c879884bbfd2e541f055ba5744a3d\",\"results\":[],\"absence\":{\"result\":\"true\",\"scope\":\"document\",\"examined_stories\":[\"page1\",\"page1.layout\",\"page1.ocr\"],\"acknowledged_unknown_cov...<truncated>"
    },
    {
      "case_number": 41,
      "case_id": "evidence_correspondence_keeps_old_handle",
      "category": "evidence_correspondence",
      "input_vector_summary": "Adopting revised source correspondence, asserting new handle issues for revised node while old handle remains bound to old view",
      "protected_boundary": "Dual-handle stability across source document revisions",
      "expected_disposition": "ADMIT",
      "expected_reason_code": "correspondence_adopted",
      "source_test_identifier": "squad_connector::package::mcp::evidence_conformance::case_correspondence",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "a corresponds_to adoption issues a new handle and leaves the old one on its old view",
      "observed_execution_summary": "candidate {\"node\":\"text/l3\",\"selector\":{\"kind\":\"whole_node\"},\"method\":\"exact_text\",\"text\":\"The timeout is 60 seconds.\"}; new handle resolves {\"handle\":\"ev_e825edc90951e730caceb0e4023d6293\",\"envelope\":{\"version\":1,\"source_revision\":\"doc_20261101_083804_af5eb5ee\",\"view_digest\":\"6044bd9481cb5831563906b2db6d3a3febc70f004a71a798f46fc254ce2ea90a\",\"node_id\":\"text/l3\",\"selector\":{\"kind\":\"whole_node\"},\"source_native_locator\":{\"kind\":\"line\",\"line\"...<truncated>; old handle for readers: refused: squad error: drifted: <fixture>/desktop/ai laptop chat/squad-connector/target-package/mcp-smoke-202611010837054740700-22936/evidence-corpus/er-corr.txt no longer holds the registered bytes (registered 1561e81f1b2f035ec5bec2c5124485febdaf69476728f06e5186907f799df2a3, current ffde20912e8beb...<truncated>; old handle on the owner's historical path resolves view 017b610f2702f7fe8b4ea0fb70db9dd7216e7f7234df30a5e4da426691534e62 (committed 017b610f2702f7fe8b4ea0fb70db9dd7216e7f7234df30a5e4da426691534e62); "
    },
    {
      "case_number": 42,
      "case_id": "evidence_reassessment_flags",
      "category": "evidence_lifecycle",
      "input_vector_summary": "Modifying underlying source document and requirement statement, checking that dependent findings are flagged for reassessment",
      "protected_boundary": "Automated reassessment flagging across DAG dependency edges",
      "expected_disposition": "ADMIT",
      "expected_reason_code": "reassessment_flagged",
      "source_test_identifier": "squad_connector::package::mcp::evidence_conformance::case_reassessment",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "source and requirement revisions flag their dependents until answered",
      "observed_execution_summary": "source flag {\"flag\":{\"schema\":\"squad.evidence.reassessment/1\",\"dependent\":\"fnd_1206feafb7a9c563cb860a6e2660d6c5\",\"dependent_kind\":\"finding\",\"reason\":\"source_revised\",\"cause\":{\"old_view\":\"017b610f2702f7fe8b4ea0fb70db9dd7216e7f7234df30a5e4da426691534e62\",\"old_revision\":\"doc_20261101_083802_85dedae5\",\"new_view\":\"6...<truncated>; after evaluation resolved=true; challenge {\"finding\":\"fnd_d9e961dde2aa91ced99add94e2a31dd8\",\"kind\":\"challenge\",\"room\":\"conf-evidence\",\"status\":\"passed\",\"evaluation\":\"evl_eb7bb79692d01fab3367f0d57798a113\",\"results\":[],\"absence\":null,\"addresses\":\"rel_d03999d422e8971ec396ce3359666585\",\"visibility\":\"all\",\"staging_note\":null}; amendment {\"task\":\"task_20261101_083752_69f1c93f\",\"requirement\":{\"req\":\"R1\",\"rev\":2,\"handle\":\"ev_3270affb0117324ae2df2dd97a84dc5c\",\"statement\":\"The timeout is sixty seconds (second statement governs).\",\"revision\":\"reqrev_213352653240ad9c22061c9f5342a75c\",\"room\":\"conf-evidence\",\"supersedes\":\"reqrev_4fb8dc2b12d...<truncated>"
    },
    {
      "case_number": 43,
      "case_id": "evidence_staged_visibility_reveal",
      "category": "evidence_privacy",
      "input_vector_summary": "Submitting finding with collaborative_pass visibility, asserting it is withheld from peer until explicit reveal action",
      "protected_boundary": "Independent pass staging and non-retractable reveal gate",
      "expected_disposition": "ADMIT",
      "expected_reason_code": "staged_revealed",
      "source_test_identifier": "squad_connector::package::mcp::evidence_conformance::case_staged",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "a collaborative_pass finding is withheld until revealed, and the reveal states its limit",
      "observed_execution_summary": "before reveal: withheld 1 and resolve refused: squad error: visibility_staged: this evidence belongs to a staged challenge that has not been revealed; reveal {\"finding\":\"fnd_afb70aaf504b85e0f16c1de121d3a1f2\",\"revealed\":true,\"reveal\":\"rvl_3cd3547ade02b6b1a0a302616557d69f\",\"limit\":\"revealing makes this finding visible to Room reads and deliveries from now on; it cannot retract or un-deliver anything any reader was already shown, in an IDE conversation or e...<truncated>; after: resolve {\"handle\":\"ev_a35239a16c69ba1d719ed7e343f2d738\",\"envelope\":{\"version\":1,\"source_revision\":\"doc_20261101_083743_85b84176\",\"view_digest\":\"6aff1c717f835e8c033f1586a44bc995aa4fe9cb01b4216e995edd3c3a9f5a54\",\"node_id\":\"text/l3\",\"selector\":{\"kind\":\"whole_node\"},\"source_native_locator\":{\"kind\":\"line\",\"line\"...<truncated>"
    },
    {
      "case_number": 44,
      "case_id": "evidence_origin_gate",
      "category": "task_governance",
      "input_vector_summary": "Calling squad_task action='done' before requirement is grounded by the mandatory number of independent first-hand origins",
      "protected_boundary": "Multi-origin evidence grounding prerequisite for task completion",
      "expected_disposition": "REFUSE",
      "expected_reason_code": "acceptance_failed",
      "source_test_identifier": "squad_connector::package::mcp::evidence_conformance::case_origin_gate",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "task completion is refused until a requirement rests on the required distinct origins",
      "observed_execution_summary": "claim {\"status\":\"claimed\",\"id\":\"task_20261101_083752_69f1c93f\",\"owner\":\"package-mcp-smoke\",\"via\":\"claim\",\"scope\":null,\"vault_saved\":false,\"no_vault\":false,\"coordination_only\":true,\"lock_required\":false,\"task\":{\"id\":\"task_20261101_083752_69f1c93f\",\"title\":\"evidence acceptance task\",\"body\":\"\",\"owner\":\"packa...<truncated>; early done: refused: squad error: task task_20261101_083752_69f1c93f acceptance FAILED (1 of 1): evidence_origins; task stays open - fix the artifacts and resubmit done, or record the failure with task block/note. An executor receipt is not acceptance. The measured results are recorded on the task.; after two first-hand origins: {\"status\":\"done\",\"id\":\"task_20261101_083752_69f1c93f\",\"by\":\"package-mcp-smoke\",\"task_already_done\":false,\"task\":{\"id\":\"task_20261101_083752_69f1c93f\",\"title\":\"evidence acceptance task\",\"body\":\"\",\"owner\":\"package-mcp-smoke\",\"priority\":\"normal\",\"authority_epoch\":0,\"status\":\"done\",\"created_at\":\"2026-11...<truncated>"
    },
    {
      "case_number": 45,
      "case_id": "evidence_capture_provenance_chain",
      "category": "evidence_capture",
      "input_vector_summary": "Executing live HTTP capture following 302 -> 301 -> 200 redirect chain, verifying security headers and rejecting unallowed egress host",
      "protected_boundary": "Full hop-by-hop HTTP provenance recording and sandbox egress policy",
      "expected_disposition": "ADMIT",
      "expected_reason_code": "capture_provenance_verified",
      "source_test_identifier": "squad_connector::package::mcp::evidence_conformance::case_capture",
      "recorded_execution_status": "PASS",
      "expected_terminal_behavior": "a capture records every redirect hop with status, location and security headers; each hop is egress-authorized",
      "observed_execution_summary": "capture: {\"schema\":\"squad.evidence.capture/1\",\"kind\":\"response_body\",\"origin\":\"room_captured\",\"room\":\"conf-evidence\",\"collector\":\"package-mcp-smoke\",\"method\":\"GET\",\"origin_url\":\"htt<path>//127.0.0.1:60026/start\",\"hops\":[{\"url\":\"htt<path>//127.0.0.1:60026/start\",\"status\":302,\"location\":\"/hop\",\"security_headers\":{\"x-c...<truncated> | redirect to an unallowed host: refused: squad error: egress_denied: host 'localhost' is not in the owner allowlist (control/egress-policy.json) | reserved kind: refused: squad error: capture_kind_reserved: 'screenshot' is reserved: no browser runs in the production lane"
    }
  ]
}
