<!-- DOC_STATUS: ACTIVE_NON_AUTHORITY -->

FIX7 P0 — Dry-Run Bad-Input Probes (2026-06-11)

• Authority: DRYRUN_NON_AUTHORITY. Executable: packet bad_input_probes.py against dryrun_validator.py. Machine form (byte-identical): fix7-p0-dryrun-bad-input-probes-2026-06-11.json = packet bad-input-probes.json.

python3 bad_input_probes.py → BAD_INPUT_PROBES: 20/20 fail-closed; controls_pass=True; any_fail_open=False (exit 0). Each probe injects exactly one defect into the good packet data and asserts the matching gate fails closed; positive controls confirm the unmodified packet passes every gate.

#	injected defect	gate fail-code	result
P1	missing P7	MISSING_P7 / P7_DIGEST_MISMATCH	FAIL-CLOSED
P2	wrong P7 digest	P7_DIGEST_MISMATCH	FAIL-CLOSED
P3	missing N8	MISSING_N8 / N8_DIGEST_MISMATCH	FAIL-CLOSED
P4	stale planning packet tree	STALE_PLANNING_PACKET_TREE	FAIL-CLOSED
P5	production target path	DRYRUN_TARGETS_PRODUCTION	FAIL-CLOSED
P6	production PG connection	ISOLATION_PROD_CONNECTION	FAIL-CLOSED
P7	REAL_RUN requested	FORBIDDEN_ACTION_ENABLED:REAL_RUN	FAIL-CLOSED
P8	QT001/apply requested	FORBIDDEN_ACTION_ENABLED:QT001	FAIL-CLOSED
P9	permit requested	FORBIDDEN_ACTION_ENABLED:permit	FAIL-CLOSED
P10	activation/repoint/cutover requested	FORBIDDEN_ACTION_ENABLED:cutover	FAIL-CLOSED
P11	rollback proof claimed without rollback	ROLLBACK_PROVEN_BUT_NO_MUTATION	FAIL-CLOSED
P12	exit-code mismatch (verdict PASS)	DRYRUN_EXIT_CODE_MISMATCH	FAIL-CLOSED
P13	missing log	DRYRUN_STEP_FIELD_MISSING	FAIL-CLOSED
P14	missing hash (mutating step)	DRYRUN_MUTATING_STEP_NO_HASH	FAIL-CLOSED
P15	missing no-vector pointer	MISSING_NO_VECTOR_POINTER	FAIL-CLOSED
P16	orphan object	ORPHAN_OBJECT	FAIL-CLOSED
P17	semantic Text-as-Code PASS overclaim	TKT_BASE_OVERCLAIM	FAIL-CLOSED
P18	implementation execution authorized	REVIEW_CLAIMS_IMPL_EXEC_AUTHORIZED	FAIL-CLOSED
P19	duplicate object id	DUPLICATE_OBJECT_ID	FAIL-CLOSED
P20	report PASS but file evidence missing	REPORT_PASS_BUT_NO_EVIDENCE	FAIL-CLOSED

All 20 required defect classes covered; every invalid input fails closed and emits no PASS/digest/cert/seal-like output.