{
  "checks": [
    {
      "detail": "status packet names the evidence and residual interpretation",
      "name": "status packet present",
      "status": "PASS"
    },
    {
      "detail": "all required guard default tests are present",
      "name": "guard default tests present",
      "status": "PASS"
    },
    {
      "detail": "status=PASS deny={'by': 'monitor', 'disposition': 'TERMINAL', 'kind': 'DENY', 'reason': 'POLICY_BLOCK'} allow={'by': 'monitor', 'kind': 'ALLOW'}",
      "name": "mcp stdio adjudication",
      "status": "PASS"
    },
    {
      "detail": "status=DENIED_EXPECTED reason=DEFAULT_DENY",
      "name": "structured git gate git_add",
      "status": "PASS"
    },
    {
      "detail": "status=DENIED_EXPECTED reason=DEFAULT_DENY",
      "name": "structured git gate git_commit",
      "status": "PASS"
    },
    {
      "detail": "status=DENIED_EXPECTED reason=POLICY_BLOCK",
      "name": "structured git gate git_push",
      "status": "PASS"
    },
    {
      "detail": "audit=WARN actionability=PASS workspace_stop_failures=69 active_consecutive=0 reasons=[] residual=['HISTORICAL_GIT_WRITE_BEFORE_STRUCTURED_GATE', 'HOST_SHELL_OPACITY'] post_gate={}",
      "name": "historical codex/dos actionability",
      "status": "PASS"
    },
    {
      "detail": "status=PASS sessions=16 calls=231 verdicts={'ALLOW': 177, 'DENY': 51} tags={'DENY_OR_BLOCKED_FEEDBACK': 20, 'HOOK_OR_API_WALL_FEEDBACK': 20, 'HOST_PERMISSION_INTERRUPT': 20, 'LARGE_RESULT': 7, 'SHELL_HEAVY_SESSION': 11, 'TOOL_ERROR_RECOVERY': 20} remediation={'align_policy_with_real_tool_shapes': 20, 'cap_or_summarize_large_outputs': 7, 'clear_hook_or_api_wall_feedback': 20, 'fix_tool_contract_or_error_recovery_loop': 20, 'reduce_permission_interruptions_or_scope_policy': 20, 'replace_shell_with_path_visible_tools': 11} leaked_payload=False",
      "name": "claude code historical replay",
      "status": "PASS"
    },
    {
      "detail": "status=PASS same_session=True",
      "name": "claude code live pilot",
      "status": "PASS"
    },
    {
      "detail": "status=PASS denied=True continued=True",
      "name": "codex mcp live pilot",
      "status": "PASS"
    },
    {
      "detail": "demo and captured output prove deny/run/quarantine mapping",
      "name": "openai agents adapter proof",
      "status": "PASS"
    },
    {
      "detail": "status=PARTIAL blockers=['importable agents module is not an installed OpenAI Agents SDK distribution', 'openai-agents distribution is not installed'] secret_leak=False",
      "name": "openai hosted live prereqs",
      "status": "PASS"
    },
    {
      "detail": "status=PASS blockers=[] secret_leak=False",
      "name": "openai hosted live pilot",
      "status": "PASS"
    }
  ],
  "default_blockers": [
    {
      "code": "CODEX_HOST_SHELL_OPACITY",
      "evidence": {
        "shell_family_counts": {
          "build_test": 253,
          "git_read": 523,
          "git_write": 45,
          "other_shell": 491,
          "powershell_inspect": 49,
          "powershell_read": 496,
          "python_test": 68,
          "search_rg": 281
        },
        "shell_no_write_target_detected": 2290,
        "shell_remediation_counts": {
          "keep_repo_context_but_expose_workspace_scope": 844,
          "non_shell_tool_already_structured": 408,
          "opaque_shell_needs_tool_or_path_metadata": 474,
          "replace_path_bearing_write_with_apply_patch_or_artifact_tool": 31,
          "replace_with_path_visible_read_tool": 826,
          "route_git_write_through_structured_gate": 45,
          "split_script_or_redirect_into_structured_steps": 107
        },
        "shell_shape_counts": {
          "non_shell_tool": 408,
          "shell_in_tree_or_safe_write_target": 37,
          "shell_no_write_target_detected": 2290
        },
        "unknown_tree_warning_rate": 0.169815
      },
      "next_action": "Work the shell remediation buckets: path-visible read/search tools first, explicit workspace-scoped test/git-read tools second, then split scripts and redirects into structured apply/artifact steps.",
      "rank": 20,
      "status": "ACTIVE_DEBT",
      "surface": "codex_hooks"
    },
    {
      "code": "CLAUDE_ALL_ACCOUNT_OPERATIONAL_FRICTION",
      "evidence": {
        "evidence_tag_counts": {
          "DENY_OR_BLOCKED_FEEDBACK": 20,
          "HOOK_OR_API_WALL_FEEDBACK": 20,
          "HOST_PERMISSION_INTERRUPT": 20,
          "LARGE_RESULT": 7,
          "SHELL_HEAVY_SESSION": 11,
          "TOOL_ERROR_RECOVERY": 20
        },
        "marker_line_counts": {
          "deny_or_blocked": 448,
          "error_recovery": 1463,
          "hook_or_api_wall": 509,
          "permission": 440
        },
        "max_result_chars": 55614,
        "reason_counts": {
          "DEFAULT_DENY": 42,
          "POLICY_BLOCK": 9
        },
        "remediation_session_counts": {
          "align_policy_with_real_tool_shapes": 20,
          "cap_or_summarize_large_outputs": 7,
          "clear_hook_or_api_wall_feedback": 20,
          "fix_tool_contract_or_error_recovery_loop": 20,
          "reduce_permission_interruptions_or_scope_policy": 20,
          "replace_shell_with_path_visible_tools": 11
        },
        "root_count": 10,
        "sessions_audited": 16,
        "sessions_discovered": 20,
        "tool_calls_seen": 231,
        "top_friction_sessions": [
          {
            "evidence_tags": [
              "HOOK_OR_API_WALL_FEEDBACK",
              "HOST_PERMISSION_INTERRUPT",
              "DENY_OR_BLOCKED_FEEDBACK",
              "TOOL_ERROR_RECOVERY",
              "SHELL_HEAVY_SESSION",
              "LARGE_RESULT"
            ],
            "marker_lines": 1659,
            "max_result_chars": 26764,
            "root_label": ".claude/C--work-fak",
            "session_digest": "a585f940822d0d52",
            "tool_calls": 140
          },
          {
            "evidence_tags": [
              "HOOK_OR_API_WALL_FEEDBACK",
              "HOST_PERMISSION_INTERRUPT",
              "DENY_OR_BLOCKED_FEEDBACK",
              "TOOL_ERROR_RECOVERY",
              "SHELL_HEAVY_SESSION",
              "LARGE_RESULT"
            ],
            "marker_lines": 222,
            "max_result_chars": 20399,
            "root_label": ".claude/C--work-fak",
            "session_digest": "5bc67363724625d9",
            "tool_calls": 24
          },
          {
            "evidence_tags": [
              "HOOK_OR_API_WALL_FEEDBACK",
              "HOST_PERMISSION_INTERRUPT",
              "DENY_OR_BLOCKED_FEEDBACK",
              "TOOL_ERROR_RECOVERY",
              "SHELL_HEAVY_SESSION",
              "LARGE_RESULT"
            ],
            "marker_lines": 77,
            "max_result_chars": 21302,
            "root_label": ".claude-4e449ab2/C--work-fak",
            "session_digest": "3ce3bdae26a0fe0e",
            "tool_calls": 2
          },
          {
            "evidence_tags": [
              "HOOK_OR_API_WALL_FEEDBACK",
              "HOST_PERMISSION_INTERRUPT",
              "DENY_OR_BLOCKED_FEEDBACK",
              "TOOL_ERROR_RECOVERY",
              "LARGE_RESULT"
            ],
            "marker_lines": 138,
            "max_result_chars": 55614,
            "root_label": ".claude/C--work-fak",
            "session_digest": "9b2bbc8a51e22227",
            "tool_calls": 16
          },
          {
            "evidence_tags": [
              "HOOK_OR_API_WALL_FEEDBACK",
              "HOST_PERMISSION_INTERRUPT",
              "DENY_OR_BLOCKED_FEEDBACK",
              "TOOL_ERROR_RECOVERY",
              "LARGE_RESULT"
            ],
            "marker_lines": 118,
            "max_result_chars": 55614,
            "root_label": ".claude/C--work-fak",
            "session_digest": "4b2e843b571dedd8",
            "tool_calls": 22
          }
        ],
        "verdict_counts": {
          "ALLOW": 177,
          "DENY": 51
        }
      },
      "next_action": "Work the Claude remediation buckets: clear hook/API-wall feedback and permission interruptions first, then reduce tool-error loops, large results, and shell-heavy sessions.",
      "rank": 30,
      "status": "ACTIVE_DEBT",
      "surface": "claude_code"
    },
    {
      "code": "HISTORICAL_OPAQUE_GIT_WRITE_BEFORE_GATE",
      "evidence": {
        "git_gate_status": "PASS",
        "post_gate_shell_family_counts": {},
        "post_repair_mutating_shell_family_counts": {
          "git_write": 45
        },
        "proved_at": "2026-06-25T22:38:12.037688Z"
      },
      "next_action": "Keep structured git gates in place; this is not current actionability unless git_write reappears after the gate proof timestamp.",
      "rank": 60,
      "status": "HISTORICAL",
      "surface": "codex_hooks"
    },
    {
      "code": "OPENAI_AGENTS_SDK_NOT_INSTALLED",
      "evidence": {
        "blockers": [
          "openai-agents distribution is not installed",
          "importable agents module is not an installed OpenAI Agents SDK distribution"
        ],
        "codex_login_ready": true,
        "hosted_openai_ready": true,
        "status": "PARTIAL"
      },
      "next_action": "Install the OpenAI Agents SDK only when the hosted Agents path is the target; Codex-login hosted pilot already passes without it.",
      "rank": 70,
      "status": "EXTERNAL_PREREQ",
      "surface": "openai_hosted"
    }
  ],
  "failures": [],
  "schema": "fak-guard-mcp-status-audit/1",
  "status": "PASS",
  "summary": {
    "active_default_blockers": 2,
    "default_blockers": 4,
    "failed": 0,
    "passed": 13,
    "total": 13
  }
}
