KB-5C4A

FIX7 P0 Production-Rehearsal-Only — rehearsal-bad-input-probes.json

4 min read Revision 1
tool-kiem-thufix7p0production-rehearsal-onlyrollback-packet2026-06-12

{ "doc": "fix7-p0-production-rehearsal-only-bad-input-probes", "date": "2026-06-12", "harness_scope": "PURELY_LOCAL_STATIC_NO_PRODUCTION_CONTACT", "probe_count": 10, "fail_closed_count": 10, "any_fail_open": false, "forbidden_token_leaked": false, "control": { "id": "C_VALID_REHEARSAL", "allowed": true, "controls_pass": true }, "results": [ { "id": "B1_PRODUCTION_TARGET", "verdict": "BLOCK_FAIL_CLOSED", "allow": false, "fail_open": false, "token_leaked": false, "reasons": [ "target not a proven isolated clone", "forbidden production/irreversible action: production_apply", "production target forbidden", "missing required grant(s): PRODUCTION_EXECUTION_OPT4" ] }, { "id": "B2_REAL_RUN", "verdict": "BLOCK_FAIL_CLOSED", "allow": false, "fail_open": false, "token_leaked": false, "reasons": [ "forbidden production/irreversible action: real_run", "missing required grant(s): REAL_RUN" ] }, { "id": "B3_QT001_APPLY", "verdict": "BLOCK_FAIL_CLOSED", "allow": false, "fail_open": false, "token_leaked": false, "reasons": [ "forbidden production/irreversible action: qt001_apply", "missing required grant(s): QT001_APPLY" ] }, { "id": "B4_CUTOVER", "verdict": "BLOCK_FAIL_CLOSED", "allow": false, "fail_open": false, "token_leaked": false, "reasons": [ "forbidden production/irreversible action: cutover", "missing required grant(s): CUTOVER" ] }, { "id": "B5_CI_DEPLOY", "verdict": "BLOCK_FAIL_CLOSED", "allow": false, "fail_open": false, "token_leaked": false, "reasons": [ "target not a proven isolated clone", "forbidden production/irreversible action: ci_deploy_production", "production target forbidden", "missing required grant(s): CI_DEPLOY_PRODUCTION" ] }, { "id": "B6_SECRETS_CHANGE", "verdict": "BLOCK_FAIL_CLOSED", "allow": false, "fail_open": false, "token_leaked": false, "reasons": [ "forbidden production/irreversible action: secrets_change", "missing required grant(s): SECRETS_CHANGE" ] }, { "id": "B7_MISSING_ROLLBACK_PROOF", "verdict": "BLOCK_FAIL_CLOSED", "allow": false, "fail_open": false, "token_leaked": false, "reasons": [ "rollback proof claimed but absent" ] }, { "id": "B8_FAKE_ROLLBACK_NO_MUTATION", "verdict": "BLOCK_FAIL_CLOSED", "allow": false, "fail_open": false, "token_leaked": false, "reasons": [ "rollback fabricated: after_apply == before (no mutation)" ] }, { "id": "B9_PASS_WITHOUT_ISOLATION", "verdict": "BLOCK_FAIL_CLOSED", "allow": false, "fail_open": false, "token_leaked": false, "reasons": [ "target not a proven isolated clone", "PASS requested without proven clone isolation" ] }, { "id": "B10_PRODUCTION_PASS_FROM_REHEARSAL", "verdict": "BLOCK_FAIL_CLOSED", "allow": false, "fail_open": false, "token_leaked": false, "reasons": [ "target not a proven isolated clone", "forbidden production/irreversible action: production_apply", "production target forbidden", "PASS requested without proven clone isolation", "missing required grant(s): PRODUCTION_EXECUTION_OPT4" ] } ], "verdict": "ALL_FAIL_CLOSED", "production_mutation": false }

Back to Knowledge Hub knowledge/dev/reports/architecture/fix7-p0-production-rehearsal-only-rollback-packet-2026-06-12/rehearsal-bad-input-probes.json