# User Review Required - m-iop-owned-single-request-agent-execution/25+23,24_claude_smoke_qualification

## Requested At

2026-08-08

## Status

RESOLVED

## Reason

- Type: external-execution
- Target: `toki@toki-labs.com` disposable S12 candidate at `/Users/toki/agent-work/iop-s12-validation-20260808/source`, approved workspace `/Users/toki/agent-work/iop-s12-validation-20260808/workspace`, Edge `127.0.0.1:18083`, metrics `127.0.0.1:19101`, and canonical Claude executable `/opt/homebrew/lib/node_modules/@anthropic-ai/claude-code/bin/claude.exe`
- Current review number: 6
- Final verdict: FAIL
- Summary: Repository fixes, deterministic race coverage, disposable candidate refresh, identity reconciliation, and zero-child preflight are clean. SDD S12 still requires one actual Claude request and redacted end-to-end evidence, but the previously authorized single live invocation was consumed and the current packet expressly forbids another `--run` without new user authorization.

## Loop History

| Plan | Review | Verdict | Note |
|------|--------|---------|------|
| `plan_cloud_G08_0.log` | `code_review_cloud_G08_0.log` | unknown | Superseded before implementation because the proposed evidence path would move with PASS archival and the matching input-surface owner was absent. |
| `plan_cloud_G08_1.log` | `code_review_cloud_G08_1.log` | unknown | Superseded before implementation after correcting Milestone contribution metadata and closed engine-family evidence. |
| `plan_cloud_G08_2.log` | `code_review_cloud_G08_2.log` | FAIL | Local preflight had no selected external runner/runtime inputs; no Claude invocation or manifest occurred, and user-controlled runner/credential/location decisions were required. |
| `plan_cloud_G10_3.log` | `code_review_cloud_G10_3.log` | FAIL | The one authorized live invocation exited before Edge ingress because the base URL composed `/v1/v1/messages`; a required race result was also contradicted by fresh review. |
| `plan_cloud_G09_4.log` | `code_review_cloud_G09_4.log` | FAIL | Origin routing and registry isolation were repaired, but a deterministic tool-observation ordering race remained and remote refresh/preflight were not accepted. |
| `plan_cloud_G09_5.log` | `code_review_cloud_G09_5.log` | FAIL | The ordering repair and all local/remote preflight gates pass; actual S12 Claude execution remains absent and needs renewed one-run authorization. |

## Blocking Evidence

- Problem: Required R1 — SDD S12 requires actual-Claude request-count=1 end-to-end/elapsed evidence, but current evidence stops at zero-child preflight.
- Current archived plan: `plan_cloud_G09_5.log`
- Current archived review: `code_review_cloud_G09_5.log`
- Verification command: the required harness `--run` invocation was not executed because the prior exactly-one live authorization was consumed and the current plan forbids another provider invocation.
- Actual output: fresh review passed the synchronous-continuation race regression 100 times, the dedicated HTTP observation regression 20 times, three consecutive required race matrices, harness self-test, full Go suite, protobuf reproducibility, `go vet`, formatting, and diff hygiene. Read-only remote verification passed with matching reviewed source hashes, Edge PID 35091, unchanged Node PID 25114, health 200, exact route distinction, ingress 0, writable workspace, and no result or manifest.
- Blocking rationale: The declared runner, transport, source, workspace, Edge/Node identity, credential source, and zero-child preflight are concrete and usable, but the next required step is an external provider execution expressly outside current authorization. Automatic continuation would violate the one-invocation boundary.

## Required User Action

- [x] Explicitly authorize exactly one new non-retriable live Claude S12 invocation on the selected disposable candidate, using `ANTHROPIC_API_KEY` from `/config/workspace/iop/token/.claude` only in the runner process environment and preserving the existing no-secret/no-raw-payload evidence rules.

## Resolution

- Resolved at: 2026-08-08
- Decision: The user confirmed that the prior runner, credential, dev rebuild, and API-key decisions were already final and explicitly directed the work to continue. This authorizes exactly one new live Claude invocation on the existing disposable dev candidate, with no automatic retry.
- Preserved constraints: The selected remote is the dev runner at `toki@toki-labs.com`; macOS is incidental runtime evidence rather than a functional requirement; `/config/workspace/iop/token/.claude` is read only as `ANTHROPIC_API_KEY` input to the runner process; no secret or raw provider/tool/workspace content may enter tracked evidence or model logs.

## Resume Condition

- Record the new one-run authorization. Then resume this task through a freshly routed external-verification plan that first revalidates the unchanged candidate and `--preflight-only`, performs exactly one `--run` with no automatic retry, and accepts completion only if the redacted manifest proves ingress POST 1, ordered `gemini -> ornith-fast -> gemini`, stage/total timing, final workspace mutation and verification, and terminal 1.

## Next Execution Hint

- After authorization is recorded, re-run the code-review skill for `agent-task/m-iop-owned-single-request-agent-execution/25+23,24_claude_smoke_qualification/USER_REVIEW.md`. Because new external verification is required, it should archive this stop as the next `user_review_N.log` and invoke the plan skill for a fresh external-verification pair; it must not close the task from authorization alone.

## Closure Rules

- If the recorded user action and evidence resolve this stop as complete/PASS, update `USER_REVIEW.md` to the resolved state, write `complete.log` from `agent-ops/skills/common/code-review/templates/complete-log-template.md`, and move the task directory to the archive.
- If new implementation is required, the `plan` skill archives `USER_REVIEW.md` to `user_review_N.log` before writing a new `PLAN-*-G??.md` / `CODE_REVIEW-*-G??.md` pair.
