<!-- task=m-openai-compatible-output-validation-filters/02+01_repeat_guard plan=11 tag=REVIEW_OFR-REPEAT-10 -->

# Code Review Reference - REVIEW_OFR-REPEAT-10

> **[IMPLEMENTING AGENT — READ FIRST] Filling in this file is the mandatory final step of implementation.**
> The task is NOT complete until every implementation-owned section below is filled in.
> Complete the `Implementation Checklist`; the final checklist item is mandatory before saving.
> Fill implementation-owned sections, then stop with active files in place and report ready for review.
> If implementation is blocked, record the exact blocker, attempted commands/output, and resume condition only in implementation-owned evidence fields.
> Do not ask the user directly, present choices, call user-input tools, create control-plane stop files, or classify the next state.
> Finalization (`Code Review Result`, log rename, `complete.log`, archive moves, `Review-Only Checklist`) is review-agent-only, even after compaction/resume.
> Follow the ownership table at the bottom of this file for which sections you own.

## Overview

date=2026-07-29
task=m-openai-compatible-output-validation-filters/02+01_repeat_guard, plan=11, tag=REVIEW_OFR-REPEAT-10

## Roadmap Targets

- Milestone: `agent-roadmap/phase/knowledge-tool-optimization-extension/milestones/openai-compatible-output-validation-filters.md`
- Milestone link: [Milestone document](agent-roadmap/phase/knowledge-tool-optimization-extension/milestones/openai-compatible-output-validation-filters.md)
- Task ids:
  - `repeat-guard`: rolling content/history/action repetition detection and safe continuation
- Completion mode: check-on-pass

## Archive Evidence Snapshot

- Predecessor dependency: `agent-task/archive/2026/07/m-openai-compatible-output-validation-filters/01_resume_notice_builder/complete.log` records PASS and satisfies subtask `+01`.
- Earlier same-task loops: `plan_cloud_G10_0.log` through `plan_cloud_G10_9.log` and their matching review logs remain the bounded history.
- Current failed pair after archival: `plan_cloud_G09_10.log` and `code_review_cloud_G09_10.log`. Its single Required finding records six complete same-model observation groups for five run-1 requests, including unmatched `req.manual-1785324426339266000`, and no intersection between five provider SSE-derived IDs and six Edge correlation IDs.
- Trustworthy evidence: fresh `git diff --check`, the focused Core terminal-fidelity race test, and the focused Edge correlation/capacity race tests passed. The exact-ref runtime/gate/capacity preflight and post-failure idle state are valid; the failed run produced neither a 15-correlation summary nor three accepted capacity rows.
- Required follow-up: make provider response identity and Edge lifecycle correlation independent evidence sets, reject any non-exact observation segment, add deterministic regression coverage, and only then run one fresh `ornith:35b` 5-concurrent × 3 smoke under an exclusive/quiescent observation window.

## For the Review Agent

> **[REVIEW AGENT ONLY]** The finalization steps below are review-agent only. Implementing agents must not execute this section.

Compare implementation of each item against source files and verify that output in `Verification Results` matches code.
Review completion means the following steps are finished:

1. Append verdict and `review_rework_count` / `evidence_integrity_failure` routing signals.
2. Archive `CODE_REVIEW-cloud-G09.md` → `code_review_cloud_G09_11.log` and `PLAN-cloud-G09.md` → `plan_cloud_G09_11.log`.
3. If PASS, write `complete.log` and move active task directory to `agent-task/archive/YYYY/MM/m-openai-compatible-output-validation-filters/02+01_repeat_guard/`. If WARN/FAIL, fully write the next filesystem state required by the code-review skill.
4. If PASS and task group is `m-<milestone-slug>`, report completion event metadata. Roadmap state check and `update-roadmap` calls are runtime responsibilities.
5. Check applicable `Review-Only Checklist` items at the final `.log` location before reporting.

---

## Implementation Item Completion

| Item | Status |
|------|---------|
| REVIEW_OFR-REPEAT-10-1 — Separate provider SSE identity from Edge correlation, enforce an exact uncontaminated observation batch, add deterministic regressions, and complete one fresh `ornith:35b` 5-concurrent × 3 live invocation with 15 Edge correlations and three accepted capacity rows. | [ ] |

## Implementation Checklist

- [ ] [REVIEW_OFR-REPEAT-10-1] Separate provider SSE identity from Edge correlation, enforce an exact uncontaminated observation batch, add deterministic regressions, and complete one fresh `ornith:35b` 5-concurrent × 3 live invocation with 15 Edge correlations and three accepted capacity rows.
- [x] Fill implementation-owned sections in CODE_REVIEW-*-G??.md with actual implementation notes and verification output.

## Review-Only Checklist

> **[REVIEW AGENT ONLY]** This checklist is used only by the review agent.
> Implementing agents must not modify or check this section.

- [x] Append one verdict of `PASS`, `WARN`, or `FAIL` and verified `review_rework_count`, `evidence_integrity_failure` to `Code Review Result`.
- [x] Verify that verdict, `Dimension Assessment`, and Required/Suggested/Nit classifications match.
- [x] Archive active `CODE_REVIEW-*-G??.md` to `code_review_cloud_G09_11.log`.
- [x] Archive active `PLAN-*-G??.md` to `plan_cloud_G09_11.log`.
- [x] Verify that the Agent-Ops managed block in `.gitignore` unignores `agent-task/**/*.md` and `agent-task/**/*.log` and ignores `agent-roadmap/current.md`.
- [ ] If PASS, write `complete.log` based on `agent-ops/skills/common/code-review/templates/complete-log-template.md` and leave no active `.md` files.
- [ ] If PASS, move active task directory `agent-task/m-openai-compatible-output-validation-filters/02+01_repeat_guard/` to `agent-task/archive/YYYY/MM/m-openai-compatible-output-validation-filters/02+01_repeat_guard/` and update this checklist at the final archive path.
- [ ] If PASS and task group is `m-<milestone-slug>`, report completion event metadata for runtime, without modifying roadmap or directly calling `update-roadmap`.
- [ ] If PASS for split work, remove empty active parent `agent-task/m-openai-compatible-output-validation-filters/` or verify it was kept due to remaining siblings/files.
- [x] If WARN/FAIL, write the next filesystem state matching code-review verdict and do not write `complete.log`.

## Deviations from Plan

- A supplemental verbose focused test was run after the exact local command set so the new regression and rejection case names are visible in this artifact.
- The single authorized external command was launched through a non-login `zsh` session. That session did not have Go on `PATH`, so the shell returned `zsh: command not found: go` with exit status 127 before the test binary started or any OpenAI request was sent. The plan explicitly requires stopping without retry after a failed single invocation, so no retry was made.
- Resume condition: a later plan must explicitly authorize another external invocation and must launch it from the runner's login environment or use the verified absolute Go executable path. The current plan cannot claim live completion.

## Key Design Decisions

- Provider response identity and Edge lifecycle identity are represented as separate evidence types and independently validated sets. Provider-native `chatcmpl-*` IDs are never transformed into, ordered against, or compared with Edge `req.*` correlations.
- Every run validates exactly five provider responses and exactly five complete Edge lifecycle groups. Only aggregate successful/error terminal cardinality is reconciled across the two identity domains.
- Observation collection is fail-closed. A sixth same-model group, an incomplete group, forbidden raw data, truncation, rotation, or timeout rejects the entire post-offset segment without filtering.
- The quiet-window helper follows the configured observation path to its regular-file target, then requires the same file identity and unchanged size before recording the offset.
- Persisted summaries contain separate provider-response and Edge-lifecycle arrays plus sanitized capacity evidence; raw prompt, SSE, output, credential, and token values remain outside the repository.

## Reviewer Checkpoints

- Confirm that provider-native SSE identity is validated independently and is never converted into or compared with an Edge `req.*` correlation.
- Confirm that the sanitized summary's lifecycle rows derive correlation, provider/model, decision, terminal, recovery order, fingerprint, and offset from exact Edge groups without timestamp/order pairing.
- Confirm that each run requires five valid provider responses and exactly five complete same-model Edge groups, with one terminal and one repeat-guard decision lifecycle per group.
- Confirm that a sixth same-model group, incomplete group, observation file append/rotation during the quiet window, forbidden raw value, missing/duplicate provider ID, or unreconciled terminal mix fails closed without filtering.
- Confirm deterministic tests cover disjoint provider/Edge identities, contamination rejection, provider identity boundaries, and observation quiescence.
- Confirm the external runner carries only the test-file delta and its non-test tree plus deployed Edge/Node artifacts remain at reviewed ref `d1e32b6e06f7153a4db5a5a08b7026d6dd49fcfb`.
- Confirm the blocking repeat guard, sanitized observation sink, bounded prompt, both idle healthy providers, aggregate capacity 4, and unchanged quiet-window offset are proved immediately before the one live invocation.
- Confirm exactly one live invocation exits 0 with 15 unique Edge correlations, five provider responses per run, three accepted `4/4/>=1/0/0` capacity rows, and post-run idle cleanup.
- Confirm raw prompts, SSE, outputs, credentials, and tokens remain outside tracked artifacts and stdout.
- Confirm no production, contract, spec, tracked config, repeat policy, queue, or provider-selection change.

## Verification Results

### Local Deterministic and Regression Verification

```bash
go version && go env GOMOD
gofmt -d apps/edge/internal/openai/stream_gate_vertical_slice_test.go
git diff --check
go test -count=1 ./apps/edge/internal/openai -run 'TestDevRepeatGuard(SmokeEvidence|ObservationCorrelation|ObservationQuiescence|CapacityEvidence)'
go test -race -count=1 ./packages/go/streamgate -run '^TestRequestRuntimeTerminalFailureFidelity/fatal_filter_overrides_success_terminal$'
go test -race -count=1 ./apps/edge/internal/openai -run 'TestDevRepeatGuard(SmokeEvidence|ObservationCorrelation|ObservationQuiescence|CapacityEvidence)'
go test -count=1 ./packages/go/streamgate ./apps/edge/internal/openai
make test
```

Expected: all commands exit 0 uncached with no formatting diff. Record exact stdout/stderr, including the disjoint-identity and contamination regression names.

Implementation evidence:

All required local commands exited 0. The initial uncached command outputs were:

```text
$ go version && go env GOMOD
go version go1.26.2 linux/arm64
/config/workspace/iop-s1/go.mod

$ gofmt -d apps/edge/internal/openai/stream_gate_vertical_slice_test.go
<no stdout or stderr>

$ git diff --check
<no stdout or stderr>

$ go test -count=1 ./apps/edge/internal/openai -run 'TestDevRepeatGuard(SmokeEvidence|ObservationCorrelation|ObservationQuiescence|CapacityEvidence)'
ok  	iop/apps/edge/internal/openai	0.323s

$ go test -race -count=1 ./packages/go/streamgate -run '^TestRequestRuntimeTerminalFailureFidelity/fatal_filter_overrides_success_terminal$'
ok  	iop/packages/go/streamgate	1.020s

$ go test -race -count=1 ./apps/edge/internal/openai -run 'TestDevRepeatGuard(SmokeEvidence|ObservationCorrelation|ObservationQuiescence|CapacityEvidence)'
ok  	iop/apps/edge/internal/openai	1.353s

$ go test -count=1 ./packages/go/streamgate ./apps/edge/internal/openai
ok  	iop/packages/go/streamgate	0.879s
ok  	iop/apps/edge/internal/openai	7.334s

$ make test
go test ./...
<all repository packages passed; exit status 0>
```

The supplemental verbose focused run exited 0 and exposed the new case names:

```text
=== RUN   TestDevRepeatGuardSmokeEvidence
=== RUN   TestDevRepeatGuardSmokeEvidence/valid
=== RUN   TestDevRepeatGuardSmokeEvidence/valid_error_terminal
=== RUN   TestDevRepeatGuardSmokeEvidence/non-2xx
=== RUN   TestDevRepeatGuardSmokeEvidence/malformed_JSON
=== RUN   TestDevRepeatGuardSmokeEvidence/missing_provider_response_identity
=== RUN   TestDevRepeatGuardSmokeEvidence/mixed_provider_response_identity
=== RUN   TestDevRepeatGuardSmokeEvidence/missing_terminal
=== RUN   TestDevRepeatGuardSmokeEvidence/duplicate_terminal
--- PASS: TestDevRepeatGuardSmokeEvidence (0.01s)
=== RUN   TestDevRepeatGuardObservationCorrelation
=== RUN   TestDevRepeatGuardObservationCorrelation/pass_is_not_reproduced
=== RUN   TestDevRepeatGuardObservationCorrelation/violation_requires_continuation_lifecycle
=== RUN   TestDevRepeatGuardObservationCorrelation/violation_can_end_in_safe_stop
=== RUN   TestDevRepeatGuardObservationCorrelation/fatal_is_safe_stop
=== RUN   TestDevRepeatGuardObservationCorrelation/missing_provider
=== RUN   TestDevRepeatGuardObservationCorrelation/missing_correlation
=== RUN   TestDevRepeatGuardObservationCorrelation/raw_sentinel_is_rejected
=== RUN   TestDevRepeatGuardObservationCorrelation/batch_accepts_disjoint_provider_and_Edge_identities
=== RUN   TestDevRepeatGuardObservationCorrelation/batch_rejects_missing_provider_identity
=== RUN   TestDevRepeatGuardObservationCorrelation/batch_rejects_duplicate_provider_identity
=== RUN   TestDevRepeatGuardObservationCorrelation/batch_rejects_extra_Edge_group
=== RUN   TestDevRepeatGuardObservationCorrelation/batch_rejects_provider_and_Edge_terminal_count_mismatch
=== RUN   TestDevRepeatGuardObservationCorrelation/batch_rejects_released_repeat_without_identity_pairing
--- PASS: TestDevRepeatGuardObservationCorrelation (0.00s)
=== RUN   TestDevRepeatGuardObservationQuiescence
=== RUN   TestDevRepeatGuardObservationQuiescence/unchanged_regular_file_passes
=== RUN   TestDevRepeatGuardObservationQuiescence/append_during_quiet_window_fails
=== RUN   TestDevRepeatGuardObservationQuiescence/rotation_during_quiet_window_fails
--- PASS: TestDevRepeatGuardObservationQuiescence (0.00s)
=== RUN   TestDevRepeatGuardCapacityEvidence
=== RUN   TestDevRepeatGuardCapacityEvidence/fetches_selected_aggregate
=== RUN   TestDevRepeatGuardCapacityEvidence/observes_peak_queue_and_final_recovery
=== RUN   TestDevRepeatGuardCapacityEvidence/malformed_JSON
=== RUN   TestDevRepeatGuardCapacityEvidence/duplicate_selected_provider
=== RUN   TestDevRepeatGuardCapacityEvidence/missing_selected_provider
=== RUN   TestDevRepeatGuardCapacityEvidence/negative_selected_counter
=== RUN   TestDevRepeatGuardCapacityEvidence/rejects_provider_IDs_""
=== RUN   TestDevRepeatGuardCapacityEvidence/rejects_provider_IDs_"provider-a,"
=== RUN   TestDevRepeatGuardCapacityEvidence/rejects_provider_IDs_"provider-a,provider-a"
=== RUN   TestDevRepeatGuardCapacityEvidence/wrong_capacity
=== RUN   TestDevRepeatGuardCapacityEvidence/missing_in_flight_peak
=== RUN   TestDevRepeatGuardCapacityEvidence/missing_queue_pressure
=== RUN   TestDevRepeatGuardCapacityEvidence/not_recovered
--- PASS: TestDevRepeatGuardCapacityEvidence (0.31s)
PASS
ok  	iop/apps/edge/internal/openai	0.328s
```

A final repository-suite safety rerun also exited 0. Its stdout began with `go test ./...`; every test-bearing package reported `ok`, and packages without tests reported `[no test files]`.

### External Same-Production-Ref Preflight

Record sanitized evidence for:

- runner branch/HEAD/workdir, Go version, and a diff proving the only source delta from `d1e32b6e06f7153a4db5a5a08b7026d6dd49fcfb` is `apps/edge/internal/openai/stream_gate_vertical_slice_test.go`;
- exact-ref deployed Edge and both Node binary identities, running processes, start times, listeners, and source/build provenance;
- healthy idle `onexplayer-lemonade` capacity 3 and `rtx5090-lemonade` capacity 1, selected aggregate capacity 4;
- enabled blocking repeat-guard gate for `ornith:35b`, writable sanitized observation sink, and zero forbidden raw fields;
- non-empty bounded worker-owned prompt and a fresh worker-owned artifact directory without recording raw contents;
- unchanged regular observation file identity and offset throughout the quiet-window probe immediately before launch, plus confirmation that no other same-model/manual smoke source is active.

Implementation evidence:

The external preflight completed with sanitized output:

```text
runner_workdir=/Users/toki/agent-work/iop-dev
runner_platform=Darwin arm64
runner_branch=feature/openai-compatible-output-validation-filters
runner_head=d1e32b6e06f7153a4db5a5a08b7026d6dd49fcfb
runner_go=go version go1.26.3 darwin/arm64
runner_gomod=/Users/toki/agent-work/iop-dev/go.mod
runner_delta=test_file_only
non_test_tree=exact_ref
local_test_file_sha256=8f0c767d6fb69175c6856fcd58f1398e89b9e13c6597dc950672b14b4013bd21
remote_test_file_sha256=8f0c767d6fb69175c6856fcd58f1398e89b9e13c6597dc950672b14b4013bd21

edge_binary_sha256=c1dc3b542526bf3740ba351a53effc2f75430bd8e7fccf45ef7bce67014724f2
edge_version=0.1.0
edge_pid=11006
edge_start=Wed Jul 29 19:35:36 2026
edge_listeners=18082,18083,18084,19093,19101

onexplayer_node_binary_sha256=fc2692a02aaf1baecc7a3a15a4056dc0569863187fc7f36962d553a3fb1a3411
onexplayer_node_version=0.1.0
onexplayer_node_pid=15172
onexplayer_node_start=2026-07-29T18:58:46.5143780+09:00
onexplayer_node_listeners=8001,13305

rtx5090_node_binary_sha256=fc2692a02aaf1baecc7a3a15a4056dc0569863187fc7f36962d553a3fb1a3411
rtx5090_node_version=0.1.0
rtx5090_node_pid=44152
rtx5090_node_start=2026-07-29T19:40:19.0537930+09:00
rtx5090_node_listeners=8001,13305

repeat_guard_gate_enabled=true
repeat_guard_environment=dev
repeat_guard_selector=type:model_group,key:ornith:35b,enabled:true,enforcement:blocking
repeat_guard_hold_evidence_runes=500
repeat_guard_timeout_ms=5000

provider=onexplayer-lemonade status=available health=healthy capacity=3 in_flight=0 queued=0 capability=output.repeat_guard
provider=rtx5090-lemonade status=available health=healthy capacity=1 in_flight=0 queued=0 capability=output.repeat_guard
selected_aggregate_capacity=4

prompt_bytes=666
observation_target=regular
observation_mode=0600
observation_forbidden_raw_key_rows=0
private_api_key_available=yes
live_harness_processes=0
artifact_directory_entries=0
observation_quiet=yes identity_and_size=335258775:119237311
```

The five stale files in the worker-owned artifact directory were moved intact to `/tmp/iop-repeat-guard-live/repeat-guard-pre-G09-11/` before preflight; the new artifact directory was empty and mode 0700. No production binary, process, configuration, contract, spec, or tracked raw-evidence file was changed.

### Single Authorized Live Lifecycle and Capacity Verification

After every precondition passes:

```bash
IOP_OPENAI_BASE_URL=http://127.0.0.1:18083 \
IOP_OPENAI_MODEL=ornith:35b \
IOP_OPENAI_SMOKE_CONCURRENCY=5 \
IOP_OPENAI_SMOKE_RUNS=3 \
IOP_OPENAI_SMOKE_PROMPT_FILE=/tmp/iop-repeat-guard-live/repeat-prompt.txt \
IOP_OPENAI_SMOKE_ARTIFACT_DIR=/tmp/iop-repeat-guard-live/repeat-guard \
IOP_OPENAI_SMOKE_OBSERVATION_FILE=/tmp/iop-repeat-guard-live/edge-observations.jsonl \
IOP_OPENAI_SMOKE_STATUS_URL=http://127.0.0.1:18001/edges/edge-toki-labs-dev/status \
IOP_OPENAI_SMOKE_PROVIDER_IDS=onexplayer-lemonade,rtx5090-lemonade \
go test -timeout 90m -count=1 -v ./apps/edge/internal/openai -run '^TestDevRepeatGuardOrnithSmoke$'
```

Expected: invocation count 1 and exit 0; five unique provider response IDs and five exact Edge correlations per run, 15 total unique Edge correlations, and three accepted capacity rows satisfying `configured=4`, `peak_in_flight=4`, `peak_queued>=1`, `final_in_flight=0`, and `final_queued=0`. Record sanitized result/decision/lifecycle/fingerprint/offset evidence or `not_reproduced`, post-run idle state, and raw-artifact containment. If a precondition or invocation fails, record the exact failure and stop without retry or a live PASS claim.

Implementation evidence:

Invocation count was exactly one. The command did not start the Go test binary because the non-login remote shell could not resolve `go`:

```text
live_harness_processes=0
artifact_directory_entries=0
[
  {
    "id": "onexplayer-lemonade",
    "status": "available",
    "health": "healthy",
    "capacity": 3,
    "in_flight": 0,
    "queued": 0,
    "lifecycle_capabilities": [
      "list_models",
      "output.repeat_guard"
    ]
  },
  {
    "id": "rtx5090-lemonade",
    "status": "available",
    "health": "healthy",
    "capacity": 1,
    "in_flight": 0,
    "queued": 0,
    "lifecycle_capabilities": [
      "list_models",
      "output.repeat_guard"
    ]
  }
]
observation_quiet=yes identity_and_size=335258775:119237311
authorized_live_invocations=1
zsh: command not found: go
exit_status=127
```

No retry was made. The post-failure check proved that no API request or test artifact was produced and that runtime state remained idle:

```text
runner_head=d1e32b6e06f7153a4db5a5a08b7026d6dd49fcfb
runner_delta=test_file_only
artifact_directory_entries=0
observation_identity_and_size=335258775:119237311
provider=onexplayer-lemonade status=available health=healthy capacity=3 in_flight=0 queued=0
provider=rtx5090-lemonade status=available health=healthy capacity=1 in_flight=0 queued=0
live_harness_processes=0
```

Blocker: the required live result, 15 Edge correlations, 15 provider responses, and three accepted capacity rows do not exist because the sole authorized invocation failed before the test process started. Resume requires a new explicit live-run authorization and a runner command launched with the login Go environment or the verified absolute Go path.

---

> **[IMPLEMENTING AGENT — BEFORE SAVING] Have you filled in every implementation-owned section?**
> If anything is blank, go back and fill it in before saving this file.
> Leave review-agent-only sections unchanged.

## Section Ownership

| Section | Owner | Note |
|---------|-------|------|
| Header comment, Overview, Review Agent Instructions | Fixed at stub creation | Implementing agent must not modify or execute these (archive, complete.log, and task-directory archive move are review-agent only) |
| Roadmap Targets | Fixed at stub creation from plan when present | Implementing agent must not modify; code-review copies it into `complete.log` as `Roadmap Completion` only on PASS |
| Archive Evidence Snapshot | Fixed at stub creation from plan when present | Implementing agent uses it as default prior-loop context; read only the specific archive files cited there when more detail is required |
| Implementation Item Completion (item names) | Fixed at stub creation | Implementing agent checks `[ ]` → `[x]` only |
| Implementation Checklist (item text/order) | Fixed at stub creation from plan | Implementing agent checks `[ ]` → `[x]` only |
| Review-Only Checklist | Review agent only | Implementing agent must not modify or check this section |
| Deviations from Plan, Key Design Decisions | Implementing agent | Replace placeholder text with actual content |
| Reviewer Checkpoints | Fixed at stub creation | Pre-filled from plan |
| Verification Results (section headings + commands) | Fixed at stub creation | Implementing agent fills in command output only; command changes require a `Deviations from Plan` entry |
| Code Review Result | Review agent appends | Not included in stub |

## Code Review Result

- Overall Verdict: FAIL
- Dimension Assessment:
  - Correctness: Pass
  - Completeness: Fail
  - Test coverage: Fail
  - API contract: Pass
  - Code quality: Pass
  - Implementation deviation: Pass
  - Verification trust: Pass
  - Spec conformance: Fail
- Findings:
  - Required — `agent-task/m-openai-compatible-output-validation-filters/02+01_repeat_guard/CODE_REVIEW-cloud-G09.md:58`, `agent-task/m-openai-compatible-output-validation-filters/02+01_repeat_guard/CODE_REVIEW-cloud-G09.md:296`, and `agent-roadmap/sdd/knowledge-tool-optimization-extension/openai-compatible-output-validation-filters/SDD.md:158`: `REVIEW_OFR-REPEAT-10-1` remains incomplete because the sole authorized external invocation exited 127 before the Go test process started. Consequently, there is no isolated 5-concurrent × 3 live result, no 15-provider-response/15-Edge-correlation summary, and no three accepted capacity rows for SDD S07. The test-only oracle correction and fresh local focused, race, package, and repository verification all pass. The follow-up must preserve the reviewed source, verify the external runner's login-shell or absolute Go executable before consuming the authorization, then run exactly one fresh live invocation and require exit 0, 15 unique provider response IDs, 15 unique Edge correlations, and three accepted `configured=4`, `peak_in_flight=4`, `peak_queued>=1`, `final_in_flight=0`, `final_queued=0` rows.
- Routing Signals: `review_rework_count=11`, `evidence_integrity_failure=false`
- Next Step: Archive this failed pair and create the routed follow-up PLAN/CODE_REVIEW pair for the same task path.
