{ "all_fail_closed": true, "any_fail_open": false, "date": "2026-06-12", "doc": "fix7-p0-final-pre-real-data-bad-input-probes", "forbidden_tokens_checked": [ "PRODUCTION_PASS", "PRODUCTION_OK", "REAL_RUN_AUTHORIZED", "REAL_RUN_OK", "QT001_AUTHORIZED", "CUTOVER_AUTHORIZED", "PERMIT_GRANTED", "ACTIVATION_AUTHORIZED", "REPOINT_AUTHORIZED", "SEAL_AUTHORED" ], "forbidden_tokens_leaked": [], "probe_count": 12, "probes": [ { "description": "db without surrogate_provenance is refused", "fail_closed_as_expected": true, "probe": "P1", "rejection_detail": "REJECT_NOT_A_SURROGATE: surrogate_provenance table missing" }, { "description": "provenance claiming real_production_data=YES is refused", "fail_closed_as_expected": true, "probe": "P2", "rejection_detail": "REJECT_SURROGATE_PROVENANCE_INVALID: real_production_data/contains_secrets/contains_pii must all be NO" }, { "description": "wrong provenance marker string is refused", "fail_closed_as_expected": true, "probe": "P3", "rejection_detail": "REJECT_SURROGATE_PROVENANCE_INVALID: marker mismatch" }, { "description": "birth with approvals=0 proposal is refused", "fail_closed_as_expected": true, "probe": "P4", "rejection_detail": "REJECT_TIER0_GATE_NOT_SATISFIED: proposal SURR-PROPOSAL-UNAPPROVED" }, { "description": "birth with db_target!=directus is refused", "fail_closed_as_expected": true, "probe": "P5", "rejection_detail": "REJECT_TIER0_GATE_NOT_SATISFIED: proposal SURR-PROPOSAL-WRONG-DB" }, { "description": "production-like token in target path is refused", "fail_closed_as_expected": true, "probe": "P6", "rejection_detail": "REJECT_TARGET_LOOKS_PRODUCTION_LIKE: token 'prod' in path" }, { "description": "target outside staging roots is refused", "fail_closed_as_expected": true, "probe": "P7", "rejection_detail": "REJECT_TARGET_NOT_IN_STAGING_ROOT: /Users/nmhuyen/somewhere/clone.db" }, { "description": "no-mutation rollback evidence fails closed", "fail_closed_as_expected": true, "probe": "P8", "rejection_detail": "['ROLLBACK_APPLY_DID_NOT_MUTATE:RB-SURR-1']" }, { "description": "non-restored rollback evidence fails closed", "fail_closed_as_expected": true, "probe": "P9", "rejection_detail": "['ROLLBACK_NOT_RESTORED:RB-SURR-1', 'ROLLBACK_NOT_RESTORED_TO_PIN:RB-SURR-1']" }, { "description": "claimed production rollback proof fails closed", "fail_closed_as_expected": true, "probe": "P10", "rejection_detail": "['PRODUCTION_ROLLBACK_CLAIMED']" }, { "description": "missing rollback evidence -> wrapper exits nonzero without PASS", "fail_closed_as_expected": true, "probe": "P11", "rejection_detail": "rc=1" }, { "description": "restored hash != explicit pin fails closed", "fail_closed_as_expected": true, "probe": "P12", "rejection_detail": "['ROLLBACK_NOT_RESTORED_TO_PIN:RB-SURR-1']" } ], "production_contact": false }