# 三个孤儿门:独立 job recovered-suites
source_commit=aeec4b9c130e6439feb622b1d2213f9f8f61d1fb
base(current main)=034f00647d42d38d5086d7fc057eb7824a441791

锚点即被测代码那一版;本文件是它的 report-only 子提交。

## 本次按 CI job 里逐字相同的命令跑(test224 带 --network none)
### test224-grok-preview-security
```
PASS: targeted Docker context contains no host auth/config state
[L1] exact child environment + durable text boundaries
PASS: real child env equals the reviewed set; text boundaries redact; config/session dirs are 0700 and files are 0600
[L2] build candidate package payloads without network
PASS: candidate tarballs contain runnable entrypoints and force publishConfig.tag=preview
[L3] synthetic credential leakage scan
PASS: tarballs, extracted payloads, build output, test output, and report contain zero synthetic marker bytes
candidate_tarball_sha256=0577f72aa6f629039770491af4996006d4b3a26a1a57ab7e3674899b834cb3af file=sleep2agi-agent-node-2.5.0-preview.31.tgz
candidate_tarball_sha256=1d07a3b3831a4ababeb028e34a503e310f431e5202650a43f1ea393bc9c9c30c file=sleep2agi-agent-network-2.3.0-preview.39.tgz
Summary: PASS (Docker-only; runtime executed with network disabled; no real credential was read)
```
### test597-dashboard-slash-namespace
```
(pass) Dashboard native slash migration notice > failed native replies still surface the migration notice and the failure [0.09ms]
(pass) reply filtering uses authenticated message provenance > a short presence reply to an authenticated Dashboard human task is delivered [0.12ms]
(pass) reply filtering uses authenticated message provenance > the same low-value class remains filtered for agent-to-agent tasks [0.07ms]
(pass) reply filtering uses authenticated message provenance > a provenance flag cannot bypass filtering for a non-task message type [0.05ms]

 18 pass
 0 fail
 117 expect() calls
Ran 18 tests across 3 files. [1.88s]
RESULT: PASS
```
### test679-task-trace
```

  worker.js  2.29 MB  (entry point)


[javascript-obfuscator-cli] Obfuscating file: dist/bin/cli.js... 

[javascript-obfuscator-cli] Obfuscating file: dist/src/client.js... 

[javascript-obfuscator-cli] Obfuscating file: dist/src/node-server.js... 
RESULT: PASS
```
## --network none 的对照(为什么这个 flag 必须有)
同一镜像,带与不带 --network none 两次都 rc=0,且都打印
「Summary: PASS (Docker-only; runtime executed with network disabled; ...)」,
差异只有时间戳和 tarball sha256。套件用一行硬编码 log "network: disabled by runner"
**声明**前提而不探测它 —— 所以「网络确实被禁用」这件事只能由调用方保证。

## NOT COVERED
1. 上面那条「声明而不验证」我没改,那是改别人的门,交 owner;
2. test224/test597 用可变 oven/bun tag 而非 pinned digest(codex P1,成立,属套件自身);
3. 套件写在容器内的 report 被 --rm 丢掉,CI 未挂载/上传(codex P1,成立,属套件自身);
4. 不传 build-arg 时只有 test224 fail-closed,test597/test679 声明了 SOURCE_COMMIT 却不强制。
