# User Review Required - m-iop-owned-single-request-agent-execution/25+23,24_claude_smoke_qualification

## Requested At

2026-08-08

## Status

RESOLVED

## Reason

- Type: external-execution
- Target: exactly one new guarded Claude Code `--run` on `toki@toki-labs.com` against `/Users/toki/agent-work/iop-s12-managed-validation-20260808`, with Claude calling only IOP and Gemini plan/review plus Ornith-fast work remaining IOP-owned internal routes
- Current review number: 19
- Final verdict: FAIL
- Summary: the fourth authorized call was consumed exactly once as `sole-live-4.rc-69` and failed HTTP 400 before ingress. The newly proven Claude 2.1.177 thinking-redaction beta/display boundary is now repaired and passes provider-free validation, but S12 requires an actual admitted execution. Reusing the consumed authorization would violate the exact-cardinality/no-retry boundary.

## Loop History

| Plan | Review | Verdict | Note |
|------|--------|---------|------|
| `plan_cloud_G08_0.log` | `code_review_cloud_G08_0.log` | unknown | Initial legacy review stub ended without an appended verdict. |
| `plan_cloud_G08_1.log` | `code_review_cloud_G08_1.log` | unknown | Legacy follow-up review stub ended without an appended verdict. |
| `plan_cloud_G08_2.log` | `code_review_cloud_G08_2.log` | FAIL | Required synchronized runner and external live environment were unavailable. |
| `plan_cloud_G10_3.log` | `code_review_cloud_G10_3.log` | FAIL | Claude base-URL composition and a race-sensitive assertion required repository repair. |
| `plan_cloud_G09_4.log` | `code_review_cloud_G09_4.log` | FAIL | Origin-based preflight and deterministic ordering repairs remained. |
| `plan_cloud_G09_5.log` | `code_review_cloud_G09_5.log` | FAIL | A new non-retriable external authorization was required. |
| `plan_cloud_G10_6.log` | `code_review_cloud_G10_6.log` | FAIL | Claude credential/account readiness and live authorization were not closed. |
| `plan_cloud_G10_7.log` | `code_review_cloud_G10_7.log` | FAIL | The Claude CLI argument contract required a provider-free repository fix. |
| `plan_cloud_G05_8.log` | `code_review_cloud_G05_8.log` | FAIL | Repository gates passed, but the next sole live authorization was still external. |
| `plan_cloud_G10_9.log` | `code_review_cloud_G10_9.log` | FAIL | Authenticated model admission and closed failure classification required repair. |
| `plan_cloud_G10_10.log` | `code_review_cloud_G10_10.log` | FAIL | The IOP caller credential strategy required a user decision. |
| `plan_cloud_G10_11.log` | `code_review_cloud_G10_11.log` | FAIL | A disposable managed dev runtime still had to be provisioned and validated. |
| `plan_cloud_G10_12.log` | `code_review_cloud_G10_12.log` | FAIL | The first guarded live call failed HTTP 400 before ingress; context-management compatibility was missing. |
| `plan_cloud_G09_13.log` | `code_review_cloud_G09_13.log` | FAIL | Context-management compatibility and provider-free gates passed; one new guarded live call remained. |
| `plan_cloud_G10_14.log` | `code_review_cloud_G10_14.log` | FAIL | The second guarded live call failed HTTP 400 before ingress; prompt-caching-scope compatibility was missing. |
| `plan_cloud_G10_15.log` | `code_review_cloud_G10_15.log` | FAIL | Prompt-caching-scope compatibility passed; a third explicit live authorization remained. |
| `plan_cloud_G10_16.log` | `code_review_cloud_G10_16.log` | FAIL | The third guarded live call failed HTTP 400 before ingress; tool-search beta and `defer_loading` compatibility were missing. |
| `plan_cloud_G10_17.log` | `code_review_cloud_G10_17.log` | FAIL | Tool-search compatibility and provider-free readiness passed; a fourth explicit live authorization remained. |
| `plan_cloud_G10_18.log` | `code_review_cloud_G10_18.log` | FAIL | The fourth guarded live call failed HTTP 400 before ingress; thinking-redaction beta/display compatibility was missing. |
| `plan_cloud_G10_19.log` | `code_review_cloud_G10_19.log` | FAIL | Thinking-redaction compatibility, isolated rebuild, exact provider-free matrix, and preflight now pass; only a newly authorized real S12 run remains. |

## Blocking Evidence

- Problem: S12 still lacks one admitted Claude request with ingress 1, ordered Gemini plan -> Ornith-fast work -> Gemini review/repair, verified workspace output, cleanup, one terminal, and redacted stage/total timing evidence.
- Current archived plan: `plan_cloud_G10_19.log`
- Current archived review: `code_review_cloud_G10_19.log`
- Verification command: local and remote focused/race tests; authenticated IOP catalog plus seven `/count_tokens` boundary probes; isolated Edge rebuild; harness `--preflight-only` against the rebuilt disposable runtime.
- Actual output: local/remote tests passed after one transparently isolated unrelated race retry; baseline/redacted-beta/display-omitted/display-summarized returned 200; invalid-display/strict/eager-input-streaming returned 400; catalog selected the public model exactly once; ingress delta was 0; Edge 16840, Node 8790, and Control Plane 8782 were healthy; preflight passed without a Claude invocation; Claude process count was 0; all four finalized guards remained unchanged; result and manifest were absent.
- Blocking rationale: `sole-live-4.rc-69` durably consumed the user's latest one-call authorization. The repository and disposable IOP preconditions are repaired, but another live call is an external execution that must not be inferred or retried automatically.

## Required User Action

- [x] Explicitly authorize exactly one new Claude Code live execution through the repaired disposable IOP runtime. This authorizes one distinct fifth guard and one call only, with no retry regardless of outcome; Gemini and Ornith remain internal IOP routes and are never called directly.

## Resolution Evidence

- User decision: `승인할테니 시작해`
- Interpretation: authorize exactly one fifth guarded Claude-through-IOP execution after fresh provider-free readiness; no retry or direct provider request.
- Recorded at: 2026-08-08 KST.

## Resume Condition

- The user explicitly states that one new guarded Claude-through-IOP execution is authorized. The next plan archives this stop as `user_review_7.log`, creates a fresh one-run packet with `sole-live-5`, reruns provider-free preflight, and performs exactly one call without retry.

## Next Execution Hint

- After authorization, invoke the `plan` skill for this exact task path to resolve the external-execution stop and route the fifth one-run packet. Do not request a Gemini/Ornith routing choice; use the already declared IOP-owned stage bindings.

## Closure Rules

- If the recorded user action and evidence resolve this stop as complete/PASS, update `USER_REVIEW.md` to the resolved state, write `complete.log` from `agent-ops/skills/common/code-review/templates/complete-log-template.md`, and move the task directory to the archive.
- If new implementation is required, the `plan` skill archives `USER_REVIEW.md` as `user_review_N.log` before writing a new `PLAN-*-G??.md` / `CODE_REVIEW-*-G??.md` pair.
