{ "any_fail_open": false, "control_pass": true, "date": "2026-06-12", "doc": "fix7-p0-no-production-implementation-execution-bad-input-probes", "fail_closed": 15, "guard": "evaluate_execution_request (fail-closed; rollback defects delegated to hardened_dryrun_validator.check_rollback_proof)", "note": "All invalid execution requests fail closed and emit no PASS/digest/cert/seal token. Authorizes nothing; no production mutation.", "results": [ { "codes": [ "REJECT_PRODUCTION_TARGET:production", "REJECT_SUCCESS_CLAIM_WITH_FORBIDDEN_SURFACE" ], "expected_prefix": [ "REJECT_PRODUCTION_TARGET" ], "fail_closed": true, "leak": [], "probe": "E1 production target requested" }, { "codes": [ "REJECT_FORBIDDEN_ACTION:REAL_RUN", "REJECT_SUCCESS_CLAIM_WITH_FORBIDDEN_SURFACE" ], "expected_prefix": [ "REJECT_FORBIDDEN_ACTION:REAL_RUN" ], "fail_closed": true, "leak": [], "probe": "E2 REAL_RUN requested" }, { "codes": [ "REJECT_FORBIDDEN_ACTION:QT001", "REJECT_SUCCESS_CLAIM_WITH_FORBIDDEN_SURFACE" ], "expected_prefix": [ "REJECT_FORBIDDEN_ACTION:QT001" ], "fail_closed": true, "leak": [], "probe": "E3 QT001/apply requested" }, { "codes": [ "REJECT_FORBIDDEN_ACTION:cutover", "REJECT_SUCCESS_CLAIM_WITH_FORBIDDEN_SURFACE" ], "expected_prefix": [ "REJECT_FORBIDDEN_ACTION:cutover" ], "fail_closed": true, "leak": [], "probe": "E4 cutover requested" }, { "codes": [ "REJECT_PRODUCTION_PG", "REJECT_SUCCESS_CLAIM_WITH_FORBIDDEN_SURFACE" ], "expected_prefix": [ "REJECT_PRODUCTION_PG" ], "fail_closed": true, "leak": [], "probe": "E5 production PG URL" }, { "codes": [ "REJECT_PRODUCTION_DIRECTUS", "REJECT_SUCCESS_CLAIM_WITH_FORBIDDEN_SURFACE" ], "expected_prefix": [ "REJECT_PRODUCTION_DIRECTUS" ], "fail_closed": true, "leak": [], "probe": "E6 production Directus target" }, { "codes": [ "REJECT_PRODUCTION_SYSTEM_ISSUES", "REJECT_SUCCESS_CLAIM_WITH_FORBIDDEN_SURFACE" ], "expected_prefix": [ "REJECT_PRODUCTION_SYSTEM_ISSUES" ], "fail_closed": true, "leak": [], "probe": "E7 production system_issues mutation" }, { "codes": [ "REJECT_PRODUCTION_CI_DEPLOY", "REJECT_SUCCESS_CLAIM_WITH_FORBIDDEN_SURFACE" ], "expected_prefix": [ "REJECT_PRODUCTION_CI_DEPLOY" ], "fail_closed": true, "leak": [], "probe": "E8 production CI/deploy" }, { "codes": [ "REJECT_SECRETS_CHANGE", "REJECT_SUCCESS_CLAIM_WITH_FORBIDDEN_SURFACE" ], "expected_prefix": [ "REJECT_SECRETS_CHANGE" ], "fail_closed": true, "leak": [], "probe": "E9 secrets/credential change" }, { "codes": [ "REJECT_EVIDENCE_DELETION", "REJECT_SUCCESS_CLAIM_WITH_FORBIDDEN_SURFACE" ], "expected_prefix": [ "REJECT_EVIDENCE_DELETION" ], "fail_closed": true, "leak": [], "probe": "E10 evidence deletion" }, { "codes": [ "REJECT_NO_OWNER_DELEGATION" ], "expected_prefix": [ "REJECT_NO_OWNER_DELEGATION" ], "fail_closed": true, "leak": [], "probe": "E11 owner delegation missing" }, { "codes": [ "ROLLBACK_PROVEN_BUT_NO_MUTATION", "ROLLBACK_PROVEN_NO_ENTRIES" ], "expected_prefix": [ "ROLLBACK_PROVEN_BUT_NO_MUTATION", "ROLLBACK_PROVEN_NO_ENTRIES" ], "fail_closed": true, "leak": [], "probe": "E12 rollback claim with no mutation" }, { "codes": [ "ROLLBACK_APPLY_DID_NOT_MUTATE:RB-EXEC-1" ], "expected_prefix": [ "ROLLBACK_APPLY_DID_NOT_MUTATE" ], "fail_closed": true, "leak": [], "probe": "E13 after_apply_hash == before_hash" }, { "codes": [ "REJECT_MISSING_ROLLBACK_PROOF" ], "expected_prefix": [ "REJECT_MISSING_ROLLBACK_PROOF" ], "fail_closed": true, "leak": [], "probe": "E14 missing rollback proof" }, { "codes": [ "REJECT_PRODUCTION_CI_DEPLOY", "REJECT_SUCCESS_CLAIM_WITH_FORBIDDEN_SURFACE" ], "expected_prefix": [ "REJECT_SUCCESS_CLAIM_WITH_FORBIDDEN_SURFACE" ], "fail_closed": true, "leak": [], "probe": "E15 PASS while forbidden surface attempted" } ], "total": 15 }