<!-- DOC_STATUS: ACTIVE_NON_AUTHORITY -->

FIX7 — N7/N8/P7 Authority-Input Bad-Input Probes Report (2026-06-11)

• Host: T1 / Claude Code · Codex consulted: NO · Production mutation: NO
• Harness: bad_input_probes.py in …/fix7-n7-n8-p7-authority-input-packet-2026-06-11/
• Command: python3 bad_input_probes.py . (cwd = packet) · Exit: 0 · Result: 10/10 fail-closed

Each probe clones the GOOD packet, mutates exactly one input, and asserts the validator (and where relevant the stale-prose detector) rejects with a specific code. A probe that is ACCEPTED, or rejected with the wrong code, fails the run.

Probe	Mutation	Expected	Actual	Verdict
P1	remove N6 certificate	reject	AUTHINPUT_N6_CERT_MISSING	FAIL-CLOSED
P2	pre-ratification SEAL_REAL_N6_NOT_AVAILABLE as current status	reject / block readiness	AUTHINPUT_N6_FALSELY_OFFICIAL (and STALE_N6_CURRENT_STATUS in detector)	FAIL-CLOSED
P3	mark N6 candidate as official seal	reject	AUTHINPUT_N6_FALSELY_OFFICIAL	FAIL-CLOSED
P4	fabricate owner approval (current_decision=APPROVED, unsigned)	reject	AUTHINPUT_OWNER_APPROVAL_FABRICATED	FAIL-CLOSED
P5	fabricate N8 signer (sealed_by)	reject	AUTHINPUT_N8_SIGNER_FABRICATED	FAIL-CLOSED
P6	fabricate P7 official ID (is_official_p7=true)	reject	AUTHINPUT_P7_OFFICIAL_FABRICATED	FAIL-CLOSED
P7	omit A1..A5 but ready_to_author=true	reject	AUTHINPUT_READY_WITH_MISSING_INPUTS	FAIL-CLOSED
P8	old membership (N1) label	reject	AUTHINPUT_STALE_N1_MEMBERSHIP_LABEL	FAIL-CLOSED
P9	unratified N-number table (PROPOSED)	reject	AUTHINPUT_NNUMBER_NOT_RATIFIED	FAIL-CLOSED
P10	author official P7 seal artifact (authority_seal_pin_sha256)	reject	AUTHINPUT_SEAL_AUTHORED_IN_INPUT_PACKET	FAIL-CLOSED

Result: BAD-INPUT-PROBES: 10/10 fail-closed -> PASS. No probe was accepted; no probe produced a seal, an approval, or a promotion. The validator selftest additionally exercises 14 internal adversarial mutations, each rejected with its specific code (AUTHORITY-INPUT-VALIDATOR SELFTEST: PASS).

These probes map 1:1 to Workstream F items 1–10 of the macro.