# User Review Required - m-iop-owned-single-request-agent-execution/25+23,24_claude_smoke_qualification

## Requested At

2026-08-08

## Status

RESOLVED

## Reason

- Type: external-execution
- Target: exactly one new guarded Claude Code `--run` on `toki@toki-labs.com` against `/Users/toki/agent-work/iop-s12-managed-validation-20260808`, with Claude calling only IOP and Gemini plan/review plus Ornith-fast work remaining IOP-owned internal routes
- Current review number: 23
- Final verdict: FAIL
- Summary: the sixth authorization was consumed as `sole-live-6.rc-69`. Its one harness invocation admitted two sequential requests because installed Claude retried the first malformed-plan 502 internally; neither reached work/review/final. R16 now fixes the supervised child at zero retries, and R17 gives Gemini an Edge-owned strict plan JSON Schema plus distinct raw-free buffered/streaming terminal evidence. All local/remote/provider-free/preflight gates pass, but S12 still requires one successful real execution.

## Loop History

| Plan | Review | Verdict | Note |
|------|--------|---------|------|
| `plan_cloud_G08_0.log` | `code_review_cloud_G08_0.log` | unknown | Initial legacy review stub ended without an appended verdict. |
| `plan_cloud_G08_1.log` | `code_review_cloud_G08_1.log` | unknown | Legacy follow-up review stub ended without an appended verdict. |
| `plan_cloud_G08_2.log` | `code_review_cloud_G08_2.log` | FAIL | Required synchronized runner and external live environment were unavailable. |
| `plan_cloud_G10_3.log` | `code_review_cloud_G10_3.log` | FAIL | Claude base-URL composition and a race-sensitive assertion required repository repair. |
| `plan_cloud_G09_4.log` | `code_review_cloud_G09_4.log` | FAIL | Origin-based preflight and deterministic ordering repairs remained. |
| `plan_cloud_G09_5.log` | `code_review_cloud_G09_5.log` | FAIL | A new non-retriable external authorization was required. |
| `plan_cloud_G10_6.log` | `code_review_cloud_G10_6.log` | FAIL | Claude credential/account readiness and live authorization were not closed. |
| `plan_cloud_G10_7.log` | `code_review_cloud_G10_7.log` | FAIL | The Claude CLI argument contract required a provider-free repository fix. |
| `plan_cloud_G05_8.log` | `code_review_cloud_G05_8.log` | FAIL | Repository gates passed, but the next sole live authorization was still external. |
| `plan_cloud_G10_9.log` | `code_review_cloud_G10_9.log` | FAIL | Authenticated model admission and closed failure classification required repair. |
| `plan_cloud_G10_10.log` | `code_review_cloud_G10_10.log` | FAIL | The IOP caller credential strategy required a user decision. |
| `plan_cloud_G10_11.log` | `code_review_cloud_G10_11.log` | FAIL | A disposable managed dev runtime still had to be provisioned and validated. |
| `plan_cloud_G10_12.log` | `code_review_cloud_G10_12.log` | FAIL | The first guarded live call failed HTTP 400 before ingress; context-management compatibility was missing. |
| `plan_cloud_G09_13.log` | `code_review_cloud_G09_13.log` | FAIL | Context-management compatibility and provider-free gates passed; one new guarded live call remained. |
| `plan_cloud_G10_14.log` | `code_review_cloud_G10_14.log` | FAIL | The second guarded live call failed HTTP 400 before ingress; prompt-caching-scope compatibility was missing. |
| `plan_cloud_G10_15.log` | `code_review_cloud_G10_15.log` | FAIL | Prompt-caching-scope compatibility passed; a third explicit live authorization remained. |
| `plan_cloud_G10_16.log` | `code_review_cloud_G10_16.log` | FAIL | The third guarded live call failed HTTP 400 before ingress; tool-search beta and `defer_loading` compatibility were missing. |
| `plan_cloud_G10_17.log` | `code_review_cloud_G10_17.log` | FAIL | Tool-search compatibility and provider-free readiness passed; a fourth explicit live authorization remained. |
| `plan_cloud_G10_18.log` | `code_review_cloud_G10_18.log` | FAIL | The fourth guarded live call failed HTTP 400 before ingress; thinking-redaction beta/display compatibility was missing. |
| `plan_cloud_G10_19.log` | `code_review_cloud_G10_19.log` | FAIL | Thinking-redaction compatibility, isolated rebuild, exact provider-free matrix, and preflight passed; one new guarded execution remained. |
| `plan_cloud_G10_20.log` | `code_review_cloud_G10_20.log` | FAIL | The fifth guarded live call failed HTTP 400 before ingress; the harness still exposed Claude's ambient experimental request variants. |
| `plan_cloud_G10_21.log` | `code_review_cloud_G10_21.log` | FAIL | Child-only experimental freeze, closed diagnostics, isolated rebuild, non-leak probe, provider-free matrix, and preflight passed; only a newly authorized real execution remained. |
| `plan_cloud_G10_22.log` | `code_review_cloud_G10_22.log` | FAIL | The sixth guarded call reached Gemini plan twice because Claude retried a malformed-plan 502; S12 cardinality and stage completion failed. |
| `plan_cloud_G10_23.log` | `code_review_cloud_G10_23.log` | FAIL | Child retry is fixed at zero, Gemini plan output is schema-constrained, buffered/streaming terminal evidence is distinct, and dev provider-free readiness passes; only a newly authorized real execution remains. |

## Blocking Evidence

- Problem: S12 still lacks one admitted Claude request with ingress exactly 1, ordered Gemini plan -> Ornith-fast work -> Gemini review/repair, verified workspace output and cleanup, one terminal, and redacted stage/total timing evidence.
- Current archived plan: `plan_cloud_G10_23.log`
- Current archived review: `code_review_cloud_G10_23.log`
- Verification command: local/remote ordinary and race Go tests; local/remote harness self-tests; isolated Edge rebuild and runtime-evidence refresh; SOPS-authenticated IOP catalog, frozen/unsupported count-token probes, and harness `--preflight-only`; fleet, process, guard, ingress, provider/stage delta, certificate, and artifact checks.
- Actual output: all code gates passed; final Edge PID `81305` and Node PID `47260` are live; catalog/frozen/unsupported statuses are `200/200/400`; preflight passed; ingress stayed `0 -> 0`; provider/stage deltas stayed 0; six finalized guards and zero `.started` guards remain; Claude process count is 0; result and manifest are absent.
- Blocking rationale: the user's latest `승인할테니 바로해` authorized and consumed the sixth guarded call. It cannot also authorize a seventh call. The repaired runtime is provider-free ready, but a new external execution cannot be inferred or guaranteed to succeed. If it fails, the new fixed terminal event will distinguish `malformed` from `validation` without retaining raw output.

## Required User Action

- [x] Explicitly authorize exactly one seventh Claude Code live execution through the repaired disposable IOP runtime. This authorizes one distinct seventh guard and one call only, with no retry regardless of outcome; Gemini and Ornith remain internal IOP routes and are never called directly.

## Resolution Evidence

- User decision: `승인하니 실행해`
- Interpretation: authorize exactly one seventh guarded Claude-through-IOP execution against the repaired disposable dev runtime, with no retry or direct provider request.
- Recorded at: 2026-08-08 KST.

## Resume Condition

- The user explicitly states that one new guarded Claude-through-IOP execution is authorized. The next plan archives this stop as `user_review_9.log`, reruns fresh provider-free readiness, creates `sole-live-7`, and performs exactly one call without retry.

## Next Execution Hint

- After authorization, invoke the `plan` skill for this exact task path to resolve the external-execution stop and route the seventh one-run packet. Do not request a Gemini/Ornith routing choice; use the already declared IOP-owned stage bindings.

## Closure Rules

- If the recorded user action and evidence resolve this stop as complete/PASS, update `USER_REVIEW.md` to the resolved state, write `complete.log` from `agent-ops/skills/common/code-review/templates/complete-log-template.md`, and move the task directory to the archive.
- If new implementation is required, the `plan` skill archives `USER_REVIEW.md` as `user_review_N.log` before writing a new `PLAN-*-G??.md` / `CODE_REVIEW-*-G??.md` pair.
