<!-- task=m-iop-owned-single-request-agent-execution/25+23,24_claude_smoke_qualification plan=27 tag=REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_API milestone-task=workspace-binding,claude-smoke -->

# Code Review Reference - Private reasoning discard and tenth qualification

## Overview

date=2026-08-08
task=m-iop-owned-single-request-agent-execution/25+23,24_claude_smoke_qualification, plan=27

## Archive Evidence Snapshot

- Prior pair: `plan_cloud_G10_26.log` / `code_review_cloud_G10_26.log`; verdict `FAIL`, Required R26/R27.
- Nine prior guards are immutable; ninth evidence proves ingress cardinality exactly one.

## Implementation Item Completion

| Item | Status |
|---|---|
| reasoning-discard | [x] |
| local-remote-validation | [x] |
| tenth-call | [x] |
| publication | [x] |

## Implementation Checklist

- [x] Add and test private reasoning discard across all stages.
- [x] Pass local/remote ordinary/race/harness/diff checks.
- [x] Rebuild/restart managed Edge and refresh readiness evidence.
- [x] Execute/finalize exactly one tenth guard with no retry.
- [x] Publish only complete S12 success evidence; no partial evidence was published.
- [x] Fill implementation fields and stop for official review.

## Review-Only Checklist

- [x] Append one verdict and routing signals.
- [x] Verify R26/R27, privacy, cardinality, and S12 publication.
- [x] Archive and materialize next state.

## Deviations from Plan

- The tenth call retained exact ingress cardinality but still failed the Plan response as malformed. The accepted optional `reasoning_content` was therefore one real compatibility gap but not the last Gemini 3 envelope extension.
- Post-call official-document inspection identified Gemini 3 thought signatures as the next bounded mismatch. Google documents OpenAI-compatible `extra_content.google.thought_signature` on tool calls and requires exact replay during Gemini 3 function-calling continuations; the current private Plan message and Review tool-call codecs reject that member.

## Key Design Decisions

- Optional `reasoning_content` is typed as string-or-null by Go's `*string`, accepted at the exact message key, and never copied into stage results, artifacts, resumed messages, caller output, or observations.
- Shared final-response fixtures and tool-call fixtures carry private reasoning sentinels. Existing exact result/artifact/body assertions prove the sentinels are discarded; object, array, and numeric variants fail closed.
- The tenth guard is immutable as `sole-live-10.rc-69`. No wrapper retry or direct Claude/Gemini/Ornith provider call occurred.

## Verification Results

- Local: harness self-test passed; OpenAI/service ordinary tests passed (`8.350s`, `8.206s`); exact artifact lifecycle passed 10 race iterations (`1.539s`); focused race passed (`1.825s`, `3.356s`); scoped diff check passed.
- Isolated dev: harness self-test passed; ordinary tests passed (`8.788s`, `9.067s`); exact artifact lifecycle passed 10 race iterations (`2.031s`); focused race passed (`2.623s`, `3.651s`); scoped diff check passed.
- Managed Edge rebuilt as `sha256:bbb316ec57088bfc435596c1ec26bca452c2573b45da6d7ff04bad41354fedc3`, restarted as PID `20797`, and reconnected to the existing Control Plane and Node. Runtime evidence was atomically rebound to worktree `sha256:bb7d410d26105d8dd87095eaf91234f45db00078604463c59cbed3443100628d`.
- Provider-free readiness: wrong observation source rejected with 69; TLS margin exceeded one hour; supported count-token returned 200, unsupported context-hint returned 400; ingress remained `0 -> 0`, provider tunnels `5 -> 5`, Claude `0 -> 0`; nine finalized guards and no result/manifest were present.
- Tenth execution: one harness invocation, guard `sole-live-10.rc-69`, ingress `0 -> 1`, provider tunnels `5 -> 6`, Claude `0 -> 0`, no result/manifest. Fresh structured events were one request success, one Plan validation error, one cleanup success, one validation terminal, and one malformed HTTP 502 rejection.

## Code Review Result

### Overall Verdict

FAIL

### Dimension Assessment

| Dimension | Assessment | Evidence |
|---|---|---|
| Correctness | Fail | R26 is closed, but the tenth real Gemini Plan response still fails the private envelope before content parsing. |
| Completeness | Fail | Work, Review, workspace result, successful terminal, and manifest remain absent. |
| Test coverage | Pass | Local/remote ordinary, race, harness, wrong-log, count-token, runtime, guard, and one-call checks all passed. |
| API contract | Fail | Gemini 3 thought-signature `extra_content` is not represented by the Plan/Review private codecs. |
| Code quality | Pass | Reasoning is narrowly typed and discarded with no authority or privacy expansion. |
| Verification trust | Pass | Guard, ingress, provider tunnel, process, artifact, and structured observation evidence agree. |
| Spec conformance | Fail | S12 still lacks the ordered successful stage and workspace evidence. |

### Findings

- Required R28 — add a strict typed Gemini `extra_content.google.thought_signature` envelope for Plan message responses and Review tool-call responses. Discard a terminal text signature; preserve a Review function-call signature only in the private resumed Gemini message as required by Google's OpenAI-compatibility contract. Reject unknown nested fields, empty/wrong-type signatures, and any result/artifact/log leakage.
- Required R29 — rebuild the disposable Edge, repeat provider-free readiness with ten finalized guards, then use the continuing task-scoped authorization for one distinct `sole-live-11` Claude-through-IOP invocation. Never reuse the tenth guard or call a provider directly; publish only complete schema-valid S12 evidence.

### Routing Signals

- `evaluation_mode=isolated-reassessment`
- `verdict=FAIL`
- `review_rework_count=26`
- `evidence_integrity_failure=false`
- `next_state=plan`
- `finalizer=finalize-task-policy.sh`
- `finalizer_mode=pair`
- build route `worker/cloud/G10`; review route `review/cloud/G10`
