<!-- task=m-iop-agent-cli-runtime/25+19,21,22,23,24_logged_smoke_closure plan=1 tag=REVIEW_TEST -->

# Authoritative Task Runtime and Logged-in macOS Smoke Closure

## For the Implementing Agent

Run every verification command, fill the implementation-owned sections in `CODE_REVIEW-cloud-G10.md` with actual notes and raw output, keep the active pair in place, and report ready for review. Finalization belongs only to the code-review workflow. If the macOS field runner or login state is unavailable, record the exact runner, preflight command/output, authorization state, and resume condition in `Verification Results`; do not ask the user directly, create stop files, archive artifacts, or write `complete.log`.

## Background

The first review failed because the smoke harness, manifest contract, Make targets, and field evidence were absent. It also found a dependency cycle: the smoke was scheduled before the production task-loop composition that it must exercise. This follow-up moves authoritative standalone composition into this packet, keeps parity inventory and skill cutover in the dependent `26+19,21,22,23,25_parity_cutover` packet, and closes S10/S14 only through the real binary path.

## Archive Evidence Snapshot

- Prior task: `agent-task/m-iop-agent-cli-runtime/25+19,21,22,23,24_logged_smoke_closure`
- Prior plan: `agent-task/m-iop-agent-cli-runtime/25+19,21,22,23,24_logged_smoke_closure/plan_cloud_G09_0.log`
- Prior review: `agent-task/m-iop-agent-cli-runtime/25+19,21,22,23,24_logged_smoke_closure/code_review_cloud_G09_0.log`
- Verdict: FAIL
- Required findings: the harness/schema and Make targets were absent; implementation evidence was placeholder-only; `apps/agent/cmd/agent/main.go` and `apps/agent/internal/bootstrap/module.go` still failed closed because no authoritative task runtime was composed; the original `25 -> 26` split therefore formed a verification dependency cycle.
- Verification evidence: Linux arm64 returned `missing` for both planned smoke files, both Make probes exited 2, and `TestRunLifecycleFailsClosed` passed, confirming the unavailable production boundary.
- Roadmap carryover: this packet remains the sole completion owner for `logged-smoke`; `parity-cutover` remains owned by task 26.

## Roadmap Targets

- Milestone: `agent-roadmap/phase/automation-runtime-bridge/milestones/iop-agent-cli-runtime.md`
- Milestone link: [Milestone document](agent-roadmap/phase/automation-runtime-bridge/milestones/iop-agent-cli-runtime.md)
- Task ids:
  - `logged-smoke`: authenticated macOS discovery-through-completion multi-project field validation
- Completion mode: check-on-pass

## Analysis

### Files Read

- `agent-task/m-iop-agent-cli-runtime/25+19,21,22,23,24_logged_smoke_closure/PLAN-cloud-G09.md`
- `agent-task/m-iop-agent-cli-runtime/25+19,21,22,23,24_logged_smoke_closure/CODE_REVIEW-cloud-G09.md`
- `agent-task/m-iop-agent-cli-runtime/26+19,21,22,23,25_parity_cutover/PLAN-cloud-G10.md`
- `agent-task/m-iop-agent-cli-runtime/26+19,21,22,23,25_parity_cutover/CODE_REVIEW-cloud-G10.md`
- `agent-roadmap/phase/automation-runtime-bridge/PHASE.md`
- `agent-roadmap/phase/automation-runtime-bridge/milestones/iop-agent-cli-runtime.md`
- `agent-roadmap/sdd/automation-runtime-bridge/iop-agent-cli-runtime/SDD.md`
- `agent-contract/inner/agent-runtime.md`
- `agent-contract/inner/iop-agent-cli-runtime.md`
- `agent-spec/runtime/edge-node-execution.md`
- `apps/agent/cmd/agent/main.go`
- `apps/agent/cmd/agent/main_test.go`
- `apps/agent/internal/bootstrap/module.go`
- `apps/agent/internal/bootstrap/module_test.go`
- `apps/agent/internal/command/root.go`
- `apps/agent/internal/command/service.go`
- `packages/go/agenttask/ports.go`
- `packages/go/agenttask/types.go`
- `packages/go/agenttask/manager.go`
- `packages/go/agentstate/store.go`
- `Makefile`
- `agent-test/local/rules.md`
- `agent-test/local/platform-common-smoke.md`
- `agent-test/local/testing-smoke.md`

### SDD Criteria

- SDD: `agent-roadmap/sdd/automation-runtime-bridge/iop-agent-cli-runtime/SDD.md`; status `[approved]`; lock released.
- Target scenario S14 maps to `logged-smoke` and requires an actual logged-in provider, two registered project clones, discovery, execution/stream, quota/status, cancellation, a new invocation, restart/recovery, completion, redacted project-local evidence, and sibling isolation.
- S10 is a prerequisite behavior boundary: the binary must no longer return the documented runtime-unavailable sentinel for registered-project selection, lifecycle, preview, and live status.
- Evidence Map driver: PASS requires `logged-smoke` Roadmap Completion plus one schema-valid redacted macOS manifest. Local fakes and Linux preflight are supporting evidence only.

### Verification Context

- No neutral verification handoff was supplied. Repository-native sources were the local test rules, platform-common/testing profiles, Makefile, contracts, SDD, current CLI/daemon tests, and the fresh reviewer probes.
- Current host: `/config/workspace/iop-s0`, Linux arm64, Go 1.26.2. It can verify syntax, deterministic adapter tests, lifecycle tests, build, Darwin cross-build, manifest rejection/redaction, cleanup, and the required Darwin preflight failure. It cannot satisfy S14.
- External Verification Preflight:
  - runner: logged-in Darwin arm64 or amd64 host controlled by the execution lane;
  - repo root/workdir: a clean clone at the reviewed commit, never either provider workspace;
  - source state: exact expected HEAD and no untracked/dirty files before build;
  - binary: locally built `build/bin/iop-agent`, checksum recorded after build;
  - config: exact repo-global, user-local, and catalog revisions; user-local project paths point to two distinct clean clones;
  - runtime identity: one owner-only state root/socket and no pre-existing daemon;
  - provider state: every selected catalog profile passes binary/version/auth/readiness probes without printing credentials;
  - setup/resume: sync the reviewed commit, rebuild, prepare owner-only local state/config, verify both CLI logins, then rerun the exact field command.
- Confidence: high for the dependency-cycle diagnosis and local missing implementation; S14 remains externally contingent until the manifest exists.

### Test Coverage Gaps

- Existing `main_test.go` and `module_test.go` prove fail-closed behavior, not authoritative manager composition.
- Shared `agenttask` tests cover manager algorithms, but no standalone adapter test maps project artifacts, provider execution, recovery, review, integration, and project logs into those ports.
- No harness/schema tests cover bounded evidence, credential/path rejection, timeout diagnostics, exact-PID cleanup, or two-project lifecycle.
- No logged-in macOS result currently covers S14.

### Symbol References

- Remove the production use of `errRuntimeUnavailable` in `apps/agent/cmd/agent/main.go` and `ErrTaskRuntimeUnavailable` in `apps/agent/internal/bootstrap/module.go`; update their exact fail-closed assertions in `main_test.go` and `module_test.go`.
- Preserve `command.Service`, `agenttask.AgentTaskManager`, `localcontrol.StateReader`, and `localcontrol.ProjectController` signatures; composition must adapt to them rather than duplicate lifecycle state.

### Split Judgment

This follow-up is indivisible. The field harness cannot PASS against a binary that still rejects every authoritative task-runtime operation, and composition cannot claim S14 without the actual field sequence. The dependent parity packet now owns only disposition, thin operator cutover, static guards, and disposal evidence; it no longer owns the manager/host adapters implemented here.

Predecessors are satisfied by:

- `agent-task/archive/2026/07/m-iop-agent-cli-runtime/19+14,16,18_cli_binary_contract/complete.log`
- `agent-task/archive/2026/07/m-iop-agent-cli-runtime/21+13,17,20_project_log_sink/complete.log`
- `agent-task/archive/2026/07/m-iop-agent-cli-runtime/22+16_local_control/complete.log`
- `agent-task/archive/2026/07/m-iop-agent-cli-runtime/23+14,16,22_client_process_manager/complete.log`
- `agent-task/archive/2026/07/m-iop-agent-cli-runtime/24+19,21,22,23_daemon_wiring/complete.log`

### Scope Rationale

Do not implement parity inventory, rewrite the orchestration skill, delete Python references, change Node wire behavior, alter shared manager algorithms, add UI/client behavior, download provider CLIs, store raw field output in tracked files, or use the working checkout as a provider workspace. This packet composes existing common contracts, adds standalone host adapters and tests, and proves them through a bounded external harness.

### Final Routing

- evaluation_mode: `isolated-reassessment`
- finalizer: `finalize-task-policy.sh pair`
- build closures: scope/context/verification/ownership/decision closed; current-host field evidence false with a concrete logged-in macOS execution resolution; route basis `capability-gap`
- build grade scores: `2/2/2/2/2`; route `cloud-G10`; filename `PLAN-cloud-G10.md`
- review grade scores: `2/2/2/2/2`; route `official-review`; filename `CODE_REVIEW-cloud-G10.md`
- large_indivisible_context: `true`
- positive loop risks: `temporal_state`, `concurrent_consistency`, `boundary_contract`, `structured_interpretation`, `variant_product` (count `5`)
- recovery signals: `review_rework_count=1`, `evidence_integrity_failure=true`
- capability-gap evidence: current Linux host cannot execute authenticated Darwin lifecycle; the routed executor must provide the exact macOS/login environment or record a concrete external blocker.

## Implementation Checklist

- [ ] Implement and test standalone project workflow, provider, recovery, evidence, review, integration, and event adapters over the existing shared runtime contracts.
- [ ] Compose one authoritative task runtime into the CLI and daemon so selection, preview, start/stop/resume, status, local control, restart recovery, and project logs use persisted manager state.
- [ ] Add a fail-fast, cleanup-safe macOS S14 harness and bounded manifest schema covering the complete two-project lifecycle and redaction contract.
- [ ] Add stable Make targets and run fresh local syntax, package, race, build, cross-build, preflight, manifest rejection/redaction, cleanup, and diff verification.
- [ ] Run the exact harness on an actual logged-in macOS runner, attach the schema-valid redacted manifest, and update the standalone contract with the implemented S10/S14 sources and evidence.
- [ ] Fill implementation-owned sections in CODE_REVIEW-*-G??.md with actual implementation notes and verification output.

### [REVIEW_TEST-1] Implement Standalone Task Runtime Adapters

#### Problem

`packages/go/agenttask/ports.go:19-349` requires every execution port, while `apps/agent` has no `taskloop` package. The common manager cannot be safely constructed with nil ports or a canonical-workspace fallback.

#### Solution

Create host adapters that parse only registered project artifacts, delegate target policy/provider execution to existing common packages, preserve opaque locators, apply provider-neutral evidence matching, submit official review, freeze/integrate change sets, and project committed events into the completed project-log sink. Keep shared state transitions, admission, continuation, and integration ordering in `agenttask.Manager`.

```go
// Before: packages/go/agenttask/manager.go:281-284
if store == nil || workflow == nil || selector == nil || isolation == nil ||
    invoker == nil || recovery == nil || evidence == nil || reviewer == nil || integrator == nil {
    return nil, errors.New("agenttask: every execution port is required; unsafe fallback is disabled")
}
```

```go
// After: apps/agent/internal/taskloop/module.go
manager, err := agenttask.NewManager(config, nil, store, workflow, selector,
    isolation, invoker, recovery, evidence, reviewer, integrator, eventSink)
```

#### Modified Files and Checklist

- [ ] `apps/agent/internal/taskloop/workflow.go` — normalize registered project PLAN/review/dependency/completion artifacts.
- [ ] `apps/agent/internal/taskloop/workflow_test.go` — cover active, complete, malformed, missing, and ambiguous dependency fixtures.
- [ ] `apps/agent/internal/taskloop/provider.go` — bind catalog/common provider execution without raw child launch.
- [ ] `apps/agent/internal/taskloop/provider_test.go` — prove confinement handle and locator ownership.
- [ ] `apps/agent/internal/taskloop/recovery.go` — inspect exact persisted process/session/artifact locators.
- [ ] `apps/agent/internal/taskloop/recovery_test.go` — cover live, submitted, exited, stale, and ambiguous observations.
- [ ] `apps/agent/internal/taskloop/evidence.go` — observe provider-neutral artifacts and bounded Pi repair intent.
- [ ] `apps/agent/internal/taskloop/evidence_test.go` — cover matched, placeholder, identity mismatch, and repair denial.
- [ ] `apps/agent/internal/taskloop/review.go` — invoke official review through the common provider boundary.
- [ ] `apps/agent/internal/taskloop/review_test.go` — reject premature and identity-mismatched review.
- [ ] `apps/agent/internal/taskloop/integration.go` — bind immutable change-set and serial integration ports.
- [ ] `apps/agent/internal/taskloop/integration_test.go` — cover clean, conflict, retained blocker, and queue continuation.
- [ ] `apps/agent/internal/taskloop/module.go` — construct the manager and expose one host-facing runtime.
- [ ] `apps/agent/internal/taskloop/module_test.go` — cover manual start, explicit dependency, cancel, restart, multi-project isolation, and terminal completion.

#### Test Strategy

Add deterministic table-driven unit and integration tests with fake provider/reviewer processes. Assert no test launches a real provider CLI and use race coverage for manager/adaptor ordering.

#### Verification

```bash
go test -count=1 ./apps/agent/internal/taskloop
go test -count=1 -race ./apps/agent/internal/taskloop ./packages/go/agenttask ./packages/go/agentstate
```

Expected: every adapter invariant passes with zero real-provider invocation.

### [REVIEW_TEST-2] Compose CLI and Daemon Ownership

#### Problem

`apps/agent/cmd/agent/main.go:71-76,175-205,252-277` returns a stable unavailable sentinel, and `apps/agent/internal/bootstrap/module.go:305-363` does the same for local-control reads and mutations.

#### Solution

Construct one runtime from the same immutable config/catalog/state store used by `serve`; delegate CLI reads/mutations and the daemon bridge to that runtime. Start reconciliation only inside the sustained daemon lifecycle, keep one device owner, and close runtime/client/socket components in reverse order.

```go
// Before: apps/agent/cmd/agent/main.go:260-263
// The selection is present, but the shared runtime that would honor a start
// intent is not wired yet.
return command.StartResponse{}, errRuntimeUnavailable
```

```go
// After: apps/agent/cmd/agent/main.go
result, err := a.runtime(req.Config).StartProject(ctx, req.Project)
return command.StartResponse{Project: req.Project, Status: result.Status}, err
```

#### Modified Files and Checklist

- [ ] `apps/agent/cmd/agent/main.go` — replace fail-closed registered-project operations with runtime delegation.
- [ ] `apps/agent/cmd/agent/main_test.go` — add full headless S10 transcript, unknown/unselected safety, cancel, restart, and signal cleanup.
- [ ] `apps/agent/internal/bootstrap/module.go` — compose task runtime before local control and project logs.
- [ ] `apps/agent/internal/bootstrap/module_test.go` — prove authoritative local-control projections, mutations, rollback, and one owner.
- [ ] `agent-contract/inner/iop-agent-cli-runtime.md` — replace partial S10/pending source notes with exact implemented sources and evidence.

#### Test Strategy

Replace the existing unavailable assertions with persisted state and service-level lifecycle assertions. Preserve exact unknown-project and no-unselected-start behavior.

#### Verification

```bash
go test -count=1 ./apps/agent/cmd/agent ./apps/agent/internal/bootstrap ./apps/agent/internal/command
go test -count=1 -race ./apps/agent/cmd/agent ./apps/agent/internal/bootstrap ./apps/agent/internal/taskloop
go vet ./apps/agent/cmd/agent ./apps/agent/internal/bootstrap ./apps/agent/internal/taskloop
```

Expected: registered-project operations use authoritative state; no unavailable sentinel remains in production.

### [REVIEW_TEST-3] Add the S14 Harness and Manifest Contract

#### Problem

The original plan's `scripts/e2e-iop-agent-logged-smoke.sh` and `scripts/fixtures/iop-agent-smoke-manifest.schema.json` do not exist, so S14 has no executable evidence boundary.

#### Solution

Add an explicit-flag harness that fails before provider calls on OS/source/binary/config/login/workspace/socket/process mismatch; installs exact-PID cleanup before process start; applies bounded deadlines; runs discovery, preview/start, stream/log, quota/status, cancel, sibling continuation, new invocation, daemon restart/recovery, and terminal completion; and writes only a bounded redacted manifest. Validate allow-listed fields, size, enums, hashes, relative locators, and forbidden key/value patterns.

#### Modified Files and Checklist

- [ ] `scripts/e2e-iop-agent-logged-smoke.sh` — implement preflight, lifecycle, deadlines, diagnostics, cleanup, and validation modes.
- [ ] `scripts/fixtures/iop-agent-smoke-manifest.schema.json` — define the bounded redacted manifest.

#### Test Strategy

Run shell syntax/help, deterministic Linux OS-gate, safe/unsafe synthetic manifest fixtures under `/tmp`, and cleanup probes with fixture PIDs. The actual logged-in macOS run remains mandatory.

#### Verification

```bash
bash -n scripts/e2e-iop-agent-logged-smoke.sh
scripts/e2e-iop-agent-logged-smoke.sh --help
make test-iop-agent-logged-smoke-preflight
```

Expected: syntax/help pass; Linux stops exactly at the Darwin gate before login/process calls; fixture validation and cleanup checks pass.

### [REVIEW_TEST-4] Add Stable Make and Local Verification

#### Problem

`Makefile:1-99` has no logged-smoke targets; both required `make -n` probes currently exit 2.

#### Solution

Add `test-iop-agent-logged-smoke-preflight` and `test-iop-agent-logged-smoke`. The preflight target runs only safe local checks. The field target requires every explicit path/identity variable and never creates synthetic provider workspaces.

#### Modified Files and Checklist

- [ ] `Makefile` — add both phony targets and strict environment checks.

#### Test Strategy

Exercise `make -n`, local preflight, focused/race suites, builds, forbidden-symbol searches, and diff checks. Cached Go output is not accepted.

#### Verification

```bash
make -n test-iop-agent-logged-smoke-preflight
make -n test-iop-agent-logged-smoke
make build-agent
GOOS=darwin GOARCH=arm64 go build -trimpath -o /tmp/iop-agent-darwin-arm64 ./apps/agent/cmd/agent
rg -n --sort path 'standalone runtime lifecycle is not wired|task runtime is unavailable' apps/agent && exit 1 || true
git diff --check
```

Expected: targets resolve, builds pass, production unavailable sentinels have zero matches, and the diff is clean.

### [REVIEW_TEST-5] Execute and Record the Field Closure

#### Problem

S14 requires an actual logged-in macOS manifest. Linux package evidence cannot establish provider authentication, daemon restart, or independent multi-project behavior.

#### Solution

On the declared macOS runner, prove exact source/binary/config revisions and two distinct clean clones, then execute the field target. Copy only the schema-valid redacted manifest and exact bounded command output into the review artifact; keep raw provider logs in the operator-owned output root.

#### Modified Files and Checklist

- [ ] `agent-task/m-iop-agent-cli-runtime/25+19,21,22,23,24_logged_smoke_closure/CODE_REVIEW-cloud-G10.md` — attach actual local and field outputs plus the redacted manifest.

#### Test Strategy

The real field run is the test. One project must be cancelled or fail while the sibling advances; a new invocation and daemon restart must recover exact identities and both terminal archives.

#### Verification

```bash
scripts/e2e-iop-agent-logged-smoke.sh \
  --binary "$PWD/build/bin/iop-agent" \
  --repo-config "$PWD/configs/iop-agent.runtime.yaml" \
  --local-config "$IOP_AGENT_SMOKE_LOCAL_CONFIG" \
  --provider-catalog "$PWD/configs/iop-agent.providers.yaml" \
  --project-a "$IOP_AGENT_SMOKE_PROJECT_A" \
  --project-b "$IOP_AGENT_SMOKE_PROJECT_B" \
  --expected-head "$(git rev-parse HEAD)" \
  --output "$IOP_AGENT_SMOKE_OUTPUT"
scripts/e2e-iop-agent-logged-smoke.sh --validate-manifest "$IOP_AGENT_SMOKE_OUTPUT/manifest.json"
rg -n -i 'authorization|bearer|api[_-]?key|token|/Users/|/home/' "$IOP_AGENT_SMOKE_OUTPUT/manifest.json" && exit 1 || true
```

Expected: the field command exits 0, schema validation passes, forbidden evidence has zero matches, and the manifest proves S14.

## Dependencies and Execution Order

The five predecessor completions listed in `Analysis > Split Judgment` are satisfied. Implement REVIEW_TEST-1 before REVIEW_TEST-2, then REVIEW_TEST-3/4. Run REVIEW_TEST-5 only after the reviewed source is stable and every local check passes. Task `26+19,21,22,23,25_parity_cutover` remains dependency-waiting on this task.

## Modified Files Summary

| File | Item |
|------|------|
| `apps/agent/internal/taskloop/workflow.go` | REVIEW_TEST-1 |
| `apps/agent/internal/taskloop/workflow_test.go` | REVIEW_TEST-1 |
| `apps/agent/internal/taskloop/provider.go` | REVIEW_TEST-1 |
| `apps/agent/internal/taskloop/provider_test.go` | REVIEW_TEST-1 |
| `apps/agent/internal/taskloop/recovery.go` | REVIEW_TEST-1 |
| `apps/agent/internal/taskloop/recovery_test.go` | REVIEW_TEST-1 |
| `apps/agent/internal/taskloop/evidence.go` | REVIEW_TEST-1 |
| `apps/agent/internal/taskloop/evidence_test.go` | REVIEW_TEST-1 |
| `apps/agent/internal/taskloop/review.go` | REVIEW_TEST-1 |
| `apps/agent/internal/taskloop/review_test.go` | REVIEW_TEST-1 |
| `apps/agent/internal/taskloop/integration.go` | REVIEW_TEST-1 |
| `apps/agent/internal/taskloop/integration_test.go` | REVIEW_TEST-1 |
| `apps/agent/internal/taskloop/module.go` | REVIEW_TEST-1 |
| `apps/agent/internal/taskloop/module_test.go` | REVIEW_TEST-1 |
| `apps/agent/cmd/agent/main.go` | REVIEW_TEST-2 |
| `apps/agent/cmd/agent/main_test.go` | REVIEW_TEST-2 |
| `apps/agent/internal/bootstrap/module.go` | REVIEW_TEST-2 |
| `apps/agent/internal/bootstrap/module_test.go` | REVIEW_TEST-2 |
| `agent-contract/inner/iop-agent-cli-runtime.md` | REVIEW_TEST-2 |
| `scripts/e2e-iop-agent-logged-smoke.sh` | REVIEW_TEST-3 |
| `scripts/fixtures/iop-agent-smoke-manifest.schema.json` | REVIEW_TEST-3 |
| `Makefile` | REVIEW_TEST-4 |
| `agent-task/m-iop-agent-cli-runtime/25+19,21,22,23,24_logged_smoke_closure/CODE_REVIEW-cloud-G10.md` | REVIEW_TEST-5 |

## Final Verification

```bash
gofmt -w apps/agent/internal/taskloop/*.go apps/agent/cmd/agent/*.go apps/agent/internal/bootstrap/*.go
bash -n scripts/e2e-iop-agent-logged-smoke.sh
go test -count=1 ./apps/agent/internal/taskloop ./apps/agent/cmd/agent ./apps/agent/internal/bootstrap ./apps/agent/internal/command
go test -count=1 -race ./apps/agent/internal/taskloop ./apps/agent/cmd/agent ./apps/agent/internal/bootstrap ./packages/go/agenttask ./packages/go/agentstate
go vet ./apps/agent/internal/taskloop ./apps/agent/cmd/agent ./apps/agent/internal/bootstrap ./packages/go/...
make build-agent
GOOS=darwin GOARCH=arm64 go build -trimpath -o /tmp/iop-agent-darwin-arm64 ./apps/agent/cmd/agent
make test-iop-agent-logged-smoke-preflight
scripts/e2e-iop-agent-logged-smoke.sh \
  --binary "$PWD/build/bin/iop-agent" \
  --repo-config "$PWD/configs/iop-agent.runtime.yaml" \
  --local-config "$IOP_AGENT_SMOKE_LOCAL_CONFIG" \
  --provider-catalog "$PWD/configs/iop-agent.providers.yaml" \
  --project-a "$IOP_AGENT_SMOKE_PROJECT_A" \
  --project-b "$IOP_AGENT_SMOKE_PROJECT_B" \
  --expected-head "$(git rev-parse HEAD)" \
  --output "$IOP_AGENT_SMOKE_OUTPUT"
scripts/e2e-iop-agent-logged-smoke.sh --validate-manifest "$IOP_AGENT_SMOKE_OUTPUT/manifest.json"
rg -n -i 'authorization|bearer|api[_-]?key|token|/Users/|/home/' "$IOP_AGENT_SMOKE_OUTPUT/manifest.json" && exit 1 || true
go test -count=1 ./...
git diff --check
```

Expected: fresh local/race/vet/build/cross-build/preflight checks pass; the exact logged-in macOS run exits 0; the bounded manifest validates with no forbidden evidence; all Go packages and the diff check pass.

After completing all code changes, fill implementation-owned sections in `CODE_REVIEW-*-G??.md`.
