[yasyf]

API-authenticated workers need hook judges to use their process credentials. Route marked actors through a per-event evaluator with an explicit provider, one inference attempt, and a deadline that reserves time for child cleanup. Move credentials out of the evaluator environment before loading hooks, and report typed failure metadata without provider error bodies. Unmarked workers keep the resident route.

Apply the current guard-completion contract to the actor route. An incomplete guard produces the existing skip note, while a settled block, explicit deny envelope, or exit 2 remains authoritative. Preserve the current runtime and wire protocol behavior, including background-hook completion within the event deadline.

Require the published spawnllm 0.16.0. Explicit HTTP judges keep their endpoint authentication while receiving the same attempt, timeout, and error handling. Claude judge models with an effort suffix, including the unset Sonnet xhigh default, are refused because the SDK has no Claude effort channel. A transient provider error ends the single attempt.

Synthetic coverage includes credential isolation, error privacy, one-attempt behavior, cleanup, effort refusal, incomplete guards, and settled blocking verdicts. The source worker passed 26 actor Python tests and 24 scoped Go tests; three mutation checks failed as expected. Additional upstream comparison tests recorded 143 passes and one process-limit failure that also reproduced on a 4980 source copy in the same sandbox. CI grades the full current-main candidate. Real authenticated hook execution remains unverified.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	pypi/​spawnllm@​0.15.0 ⏵ 0.16.0	+1

View full report