<!-- task=m-iop-owned-single-request-agent-execution/25+23,24_claude_smoke_qualification plan=29 tag=REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_REVIEW_API milestone-task=workspace-binding,claude-smoke -->

# Re-admit the live Ornith route immediately before the twelfth guarded qualification

## For the Implementing Agent

Run the verification below, fill every implementation-owned section of the matching `CODE_REVIEW-cloud-G10.md`, keep the active pair in place, and report ready for official review. Do not append a verdict, archive task files, write `complete.log`, or create a user-review state. No repository source change is planned. If any preflight fails, create no guard and invoke no model; record the exact fixed-format blocker and resume condition. If preflight passes, execute exactly one `sole-live-12` Claude-through-IOP run with no wrapper retry.

## Background

Plan 28 closed the Gemini thought-signature gap: `sole-live-11` reached a successful Plan stage. Work then failed in 5 ms because the managed Mac Node received `no route to host` for the declared RTX5090 Ornith endpoint. The RTX stack now reports ready and the Mac again receives HTTP 200 health and the exact Ornith catalog, so the failed external precondition has materially changed and one new guarded verification is meaningful.

## Archive Evidence Snapshot

- Prior pair: `plan_cloud_G10_28.log` / `code_review_cloud_G10_28.log`; verdict `FAIL`, Required R29, `review_rework_count=27`, `evidence_integrity_failure=false`.
- `sole-live-11.rc-69` is immutable: ingress `0 -> 1`, provider tunnels `6 -> 8`, Plan success 1, Work provider error 1, cleanup success 1, terminal provider error 1, no result/manifest, and no retry.
- Current changed prerequisite: direct RTX status reports ready with the exact profile/listener/Edge connection; the managed Mac receives HTTP 200 from health and `/v1/models`, and the catalog contains the exact Ornith model.

## Finding Resolution Map

| Finding | Mode | Exact resolution | Changed precondition and acceptance evidence |
|---|---|---|---|
| R29 | direct-fix | Gate guard creation on fresh RTX status plus managed-Mac health and exact Ornith catalog admission, then execute one new non-retriable Claude-through-IOP run | `sole-live-11` saw `no route to host`; current status/health/catalog all pass. Qualification still requires ingress delta 1, ordered Gemini -> Ornith -> Gemini stages, verified workspace output, successful terminal, privacy, and a schema-valid manifest. |

## Scope and Safety

- Canonical `/Users/toki/agent-work/iop-dev` remains read-only. Use only the isolated source, managed runtime, and disposable workspace already bound by runtime evidence.
- Claude calls only `https://127.0.0.1:18483`; Gemini and Ornith inference remain behind IOP-owned routes. Direct RTX checks are limited to non-generating status, health, TCP, and model-catalog admission.
- Decrypt only SOPS `tokens.toki-dev-cline` into process memory. Do not print, persist, or forward it outside the declared IOP caller boundary.
- Require eleven finalized guard directories, zero `.started` directories, no workspace result, and no manifest before the new guard.
- A failed `sole-live-12` is final for this plan. Finalize its guard with the exit code, retain only fixed diagnostics and structured counts, and do not retry.

## Modified Files Summary

| Target | Change |
|---|---|
| Repository source | None planned; reuse the Plan 28 tested/rebuilt candidate byte-for-byte |
| Disposable dev runtime | Refresh expiring disposable TLS only if the one-hour margin fails; otherwise preserve current binaries/config/runtime evidence |
| Guard/evidence state | Create exactly one `sole-live-12` guard and publish only the harness-owned result/manifest on complete success |

## Implementation Checklist

- [x] Prove RTX5090 status is ready from the declared direct host route and the managed Mac currently receives health 200 plus exact Ornith `/v1/models` admission.
- [x] Reconfirm TLS margin, managed fleet connections, runtime-evidence identity, eleven finalized guards, zero started guards, zero output artifacts, count-token compatibility, and harness preflight without model generation.
- [x] Snapshot ingress, provider tunnels, Claude processes, and structured-log offset immediately before creating `sole-live-12.started`.
- [x] Invoke the harness `--run` exactly once through IOP, capture only fixed diagnostics, and atomically finalize `sole-live-12.rc-N` without retry.
- [x] On success, validate the manifest schema, exact workspace result, ingress delta 1, ordered Gemini/Ornith/Gemini stages, cleanup, terminal success, runtime binding, and redaction; correctly skipped because the run failed before publication.
- [x] On failure, prove no partial manifest was published and record only safe structured counts and the closed failure class.
- [x] Fill implementation-owned review fields and stop for official review.

## Final Verification

1. All non-generating provider and IOP readiness checks pass immediately before guard creation and leave ingress/provider-tunnel/Claude counts unchanged.
2. Exactly one twelfth Claude invocation occurs, uses the declared IOP base URL/public model, and leaves no `.started` guard or child process.
3. PASS requires a schema-valid redacted manifest proving one ingress, successful Plan/Work/Review in order, verified workspace mutation, cleanup, terminal success, exact runtime identities, and zero forbidden raw evidence.
4. Any non-zero run publishes no manifest, is not retried, and returns to official review with immutable `sole-live-12.rc-N` evidence.
