<!-- task=m-iop-owned-single-request-agent-execution/25+23,24_claude_smoke_qualification plan=25 tag=REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_API milestone-task=workspace-binding,claude-smoke -->

# Repair live observation trust and complete the next guarded Claude-through-IOP qualification

## For the Implementing Agent

Repair the harness observation-source gate and closed pre-ingress transport classification, refresh the disposable managed TLS, pass all local/dev/provider-free checks, then execute exactly one eighth guarded Claude-through-IOP call. The user's `이후작업은 완료될때까지 쭉진행해 사용승인은 이번 작업에 한해 승인` is task-scoped continuing authorization; it removes another user-review stop but does not permit direct provider calls, retries, guard reuse, or bypassing diagnosis/readiness gates.

## Background

The seventh guard is consumed as `sole-live-7.rc-69`. One harness invocation returned generic `api-error` with ingress and provider deltas zero. Review established that the harness was given process stdout `runtime/edge.log`, while structured service events are written to `runtime/edge-runtime.log`; the regular-file-only check accepted this incompatible source. A provider-free invalid-caller Claude probe with the same executable, fresh config, managed CA, and IOP base reached the expected 401, so the installed CLI/config path is functional. The disposable leaf also expires at `2026-08-08 10:51:48 UTC` and must be refreshed before another multi-stage call.

## Archive Evidence Snapshot

- Prior pair: `plan_cloud_G10_24.log` / `code_review_cloud_G10_24.log`; verdict `FAIL`, Required R19-R22, `review_rework_count=23`, `evidence_integrity_failure=true`.
- Guards through `sole-live-7.rc-69` are immutable; no `.started` guard, Claude process, workspace result, or manifest remains.
- Managed runtime is `/Users/toki/agent-work/iop-s12-managed-validation-20260808/runtime`; canonical `/Users/toki/agent-work/iop-dev` remains read-only.

## Finding Resolution Map

| Finding | Resolution | Acceptance evidence |
|---|---|---|
| R19 | Validate that the observation source contains bounded structured Edge events; point the dev wrapper at `edge-runtime.log` | Positive structured source, negative stdout/plain source, preserved identity/prefix/rotation tests |
| R20 | Refresh only disposable managed CA/leaves with recoverable backups and reconnect CP/Edge/Node | Validity margin, exact binary/config identities, catalog/fleet readiness, zero generation |
| R21 | Classify closed connection/TLS failures before generic API rejection | Fake tests for `connection-error` and `tls-certificate`, no raw text leakage |
| R22 | Use continuing task-scoped approval for one distinct eighth guard after all gates | One invocation, no wrapper retry, child retry zero, PASS-only publication |

## Execution Boundary

- Runner/source/workspace: `toki@toki-labs.com`; `/Users/toki/agent-work/iop-s12-validation-20260808/source`; `/Users/toki/agent-work/iop-s12-validation-20260808/workspace`.
- Claude `/opt/homebrew/lib/node_modules/@anthropic-ai/claude-code/bin/claude.exe` calls only IOP at `https://127.0.0.1:18483`, public model `iop-single-request-light`.
- The SOPS `tokens.toki-dev-cline` caller remains only in process memory. Gemini and Ornith credentials/routes remain internal to IOP.
- No canonical dev mutation, direct provider endpoint, unlimited retry, raw prompt/output persistence, or partial success publication.

## Implementation Checklist

- [x] Add semantic structured-observation validation and self-tests; use `edge-runtime.log` in dev execution.
- [x] Add redaction-safe `connection-error` and `tls-certificate` failure classes and self-tests.
- [x] Run format/syntax/diff, focused ordinary/race tests, and harness self-test locally and in the isolated dev source.
- [x] Refresh disposable TLS, restart/reconnect only managed CP/Edge/Node, and atomically refresh runtime evidence if identities change.
- [x] Pass fresh certificate/fleet/catalog/count-token/metrics/structured-log/harness-preflight gates with zero live activity.
- [x] Atomically create `sole-live-8.started`, invoke the harness once with a fresh config and correct structured observation file, and finalize `sole-live-8.rc-N` unconditionally.
- [x] On complete S12 PASS, validate/publish the manifest and success-only spec/roadmap owners; otherwise retain only closed evidence and continue under a new guard after diagnosis.
- [x] Fill implementation-owned review sections and stop for official review.

## Final Verification

1. Local and remote harness self-tests prove incompatible observation sources fail before a Claude child and transport classes remain raw-free.
2. Disposable TLS has a safe lifetime margin and managed fleet identities/readiness are internally consistent.
3. Provider-free preflight uses `edge-runtime.log`, leaves ingress/provider/stage/Claude/guard/artifact cardinality unchanged, and rejects `edge.log`.
4. Exactly one eighth guarded invocation occurs; success requires ingress delta 1, ordered Gemini -> Ornith-fast -> Gemini observations, verified workspace result/cleanup, one terminal, and schema-valid atomic publication.

After implementation, fill `CODE_REVIEW-cloud-G10.md` and leave the active pair for official review.
