C1 STAGING — CLAUDE R3 HARD SELF-GATE (Codex-equivalent hostile self-review)

• Session: C1-STAGING-CLAUDE-R3-HARD-SELF-GATE-2026-06-23
• Path under review: /opt/incomex/staging/c1/
• Verdict in: C1_STAGING_CODEX_R2_FIXES_READY_FOR_CODEX_R3
• Verdict out: CLAUDE_R3_SELF_GATE_PASS_READY_FOR_EXTERNAL_CODEX_R3
• Date: 2026-06-23

What this is

The owner required that Codex NOT be used as Claude's primary tester. Before sending the R2-fix patch to an external Codex R3 review, Claude ran a full Codex-style hostile review against its own current patch, split into Role A (Builder) and Role B (Hostile Reviewer). Role B did not trust the Builder summary; it inspected code/SQL/plan/registry/ledger/docs and ran live no-write tests.

Outcome in one line

One MEDIUM defect was found and fixed (R3-SELF-1: the dry-run plan could drop a sandbox it did not create on a same-minute concurrency collision). After the fix, the entire self-gate was re-run: 35/35 matrix rows PASS, 18/18 attacks refuted/NA, official runtime before == after, staging_DBs = 0, dry-run NOT executed, no staging DB created.

Hard locks honored

Dry-run NOT executed · no staging DB created · official runtime untouched · official dot_tools / CAT-006 / dot_agent_api_contract untouched · APR-0415 not approved/executed · dot-apr-approve not used · nothing promoted. Only mutation: 4 files under /opt/incomex/staging/c1/ (the fix).

Files in this package

• 00-index.md — this file
• 01-input-state-and-r2-fix-summary.md — Role A builder summary + R2 fixes + before-snapshot
• 02-hostile-review-matrix.md — the 35-row review matrix (attack/evidence/expected/actual/verdict)
• 03-shell-injection-review.md — injection greps + 14 live guard self-tests (A1/A2/A7/A8 refuted by exit code)
• 04-sbx-and-plan-exit-review.md — SBX validation/propagation, P1 partial cleanup, --force, plan exit matrix
• 05-p5-p6-oracle-and-evidence-review.md — P5 bad-input oracle + P6 false-PASS firewall (A9–A12, A16)
• 06-dot-stamp-and-ledger-review.md — DOT stamping per phase + registry/ledger sha256 consistency
• 07-official-runtime-unchanged-proof.md — before==after snapshot, staging_DBs=0, db-list hash
• 08-defects-found-and-fixes-if-any.md — R3-SELF-1 finding, fix, changed-file sha256, re-validation
• 09-final-gate-decision.md — verdict, 18-attack summary, full final-report fields

Capability used (real, authoritative)

Bash SSH root@38.242.240.89 → vmi3080463 (exit 0); docker exec postgres psql -U directus (PG16). All official reads were SELECT-only; no official write path exists in the staging primitives.

Next step

External Codex R3 review only. Do NOT run the dry-run until external Codex returns CODEX_PASS_C1_STAGING_READY_FOR_FAST_DRY_RUN.