# User Review Required - m-iop-owned-single-request-agent-execution/25+23,24_claude_smoke_qualification

## Requested At

2026-08-08

## Status

USER_REVIEW

## Reason

- Type: external-execution
- Target: exactly one new guarded Claude Code `--run` on `toki@toki-labs.com` against `/Users/toki/agent-work/iop-s12-managed-validation-20260808`, with Claude calling only IOP and Gemini plan/review plus Ornith-fast work remaining IOP-owned routes
- Current review number: 15
- Final verdict: FAIL
- Summary: the repository-owned Claude 2.1.177 compatibility boundary and provider-free managed IOP validation now pass, but S12 requires a real execution. The previous authorization was consumed by the single call finalized as `sole-live-2.rc-69`, so another live call cannot be made safely without a new explicit authorization.

## Loop History

| Plan | Review | Verdict | Note |
|------|--------|---------|------|
| `plan_cloud_G08_0.log` | `code_review_cloud_G08_0.log` | unknown | Initial legacy review stub ended without an appended verdict. |
| `plan_cloud_G08_1.log` | `code_review_cloud_G08_1.log` | unknown | Legacy follow-up review stub ended without an appended verdict. |
| `plan_cloud_G08_2.log` | `code_review_cloud_G08_2.log` | FAIL | Required synchronized runner and external live environment were unavailable. |
| `plan_cloud_G10_3.log` | `code_review_cloud_G10_3.log` | FAIL | Claude base-URL composition and a race-sensitive assertion required repository repair. |
| `plan_cloud_G09_4.log` | `code_review_cloud_G09_4.log` | FAIL | Origin-based preflight and deterministic ordering repairs remained. |
| `plan_cloud_G09_5.log` | `code_review_cloud_G09_5.log` | FAIL | A new non-retriable external authorization was required. |
| `plan_cloud_G10_6.log` | `code_review_cloud_G10_6.log` | FAIL | Claude credential/account readiness and live authorization were not closed. |
| `plan_cloud_G10_7.log` | `code_review_cloud_G10_7.log` | FAIL | The Claude CLI argument contract required a provider-free repository fix. |
| `plan_cloud_G05_8.log` | `code_review_cloud_G05_8.log` | FAIL | Repository gates passed, but the next sole live authorization was still external. |
| `plan_cloud_G10_9.log` | `code_review_cloud_G10_9.log` | FAIL | Authenticated model admission and closed failure classification required repair. |
| `plan_cloud_G10_10.log` | `code_review_cloud_G10_10.log` | FAIL | The IOP caller credential strategy required a user decision. |
| `plan_cloud_G10_11.log` | `code_review_cloud_G10_11.log` | FAIL | A disposable managed dev runtime still had to be provisioned and validated. |
| `plan_cloud_G10_12.log` | `code_review_cloud_G10_12.log` | FAIL | The first guarded live call failed HTTP 400 before ingress; context-management compatibility was missing. |
| `plan_cloud_G09_13.log` | `code_review_cloud_G09_13.log` | FAIL | Context-management compatibility and provider-free gates passed; one new guarded live call remained. |
| `plan_cloud_G10_14.log` | `code_review_cloud_G10_14.log` | FAIL | The second guarded live call failed HTTP 400 before ingress; prompt-caching-scope compatibility was missing. |
| `plan_cloud_G10_15.log` | `code_review_cloud_G10_15.log` | FAIL | Prompt-caching-scope compatibility now passes HTTP 200 through IOP with zero generation; only a newly authorized real S12 run remains. |

## Blocking Evidence

- Problem: S12 still lacks one admitted Claude request with ingress 1, ordered Gemini plan -> Ornith-fast work -> Gemini review/repair, verified workspace output, cleanup, one terminal, and redacted stage/total timing evidence.
- Current archived plan: `plan_cloud_G10_15.log`
- Current archived review: `code_review_cloud_G10_15.log`
- Verification command: no live command was run in Plan 15; focused/race tests, the exact SOPS-authenticated IOP catalog/count-token probe, and harness `--preflight-only` are recorded in the archived review.
- Actual output: local and macOS tests passed; the exact prompt-caching-scope provider-free probe changed from HTTP 400 before the repair to HTTP 200 after it; selected model count was 1; Claude process, single-request ingress, hot-path stage/dispatch/terminal, observation/model-output, workspace result, and manifest deltas were all zero; preflight passed without a Claude invocation.
- Blocking rationale: both prior live calls are durably finalized as `sole-live.rc-69` and `sole-live-2.rc-69`. Reusing the consumed authorization would violate the no-retry/exact-cardinality boundary even though the repository-owned precondition is now repaired.

## Required User Action

- [ ] Explicitly authorize exactly one new Claude Code live execution through the repaired disposable IOP runtime. This authorizes a distinct third guard and one call only, with no retry regardless of outcome; Gemini and Ornith remain internal IOP routes and are never called directly.

## Resume Condition

- The user explicitly states that one new guarded Claude-through-IOP execution is authorized. The next plan archives this stop as `user_review_5.log`, creates a fresh one-run packet with a distinct third guard, passes provider-free preflight, and then performs exactly one call without retry.

## Next Execution Hint

- After authorization, invoke the `plan` skill for this exact task path to resolve the external-execution stop and route the one-run packet. Do not ask for a Gemini/Ornith routing choice; use the already declared IOP-owned stage bindings.

## Closure Rules

- If the recorded user action and evidence resolve this stop as complete/PASS, update `USER_REVIEW.md` to the resolved state, write `complete.log` from `agent-ops/skills/common/code-review/templates/complete-log-template.md`, and move the task directory to the archive.
- If new implementation is required, the `plan` skill archives `USER_REVIEW.md` as `user_review_N.log` before writing a new `PLAN-*-G??.md` / `CODE_REVIEW-*-G??.md` pair.
