Migrated from private source issue alphazede/bran-dev#15
Follow-up from #14 (merged as 39abfdc).
The live external AGY-host smoke test has never been run against the grounded claim-validation path. BRAN_EXTERNAL_HOST* configuration was unavailable in the environment where #14 was developed and reviewed.
Accepted as residual risk at merge because the boundary fails closed on every path and the grounded negative suite covers stale digests, invented support, degenerate spans, answer/claim mismatch, uncited locators, non-material claims, unattested execution, post-validation SQZ rewrite, and traversal/symlinked locators. The smoke test exercises host integration, not the enforcement boundary.
Required before any external-host release. Blocking for that release, not for further development.
Follow-up from #14 (merged as 39abfdc).
The live external AGY-host smoke test has never been run against the grounded claim-validation path.
BRAN_EXTERNAL_HOST*configuration was unavailable in the environment where #14 was developed and reviewed.Accepted as residual risk at merge because the boundary fails closed on every path and the grounded negative suite covers stale digests, invented support, degenerate spans, answer/claim mismatch, uncited locators, non-material claims, unattested execution, post-validation SQZ rewrite, and traversal/symlinked locators. The smoke test exercises host integration, not the enforcement boundary.
Required before any external-host release. Blocking for that release, not for further development.