Reject unrelated edits and command mentions, normalize the private workspace path, and replay retained paid evidence offline without another prompt.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Reject auto as exact model evidence, release native leases on early workspace failure, and reject pending metadata requests immediately when the provider exits or sends malformed output. Extend early cleanup to the real-service probe.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Handle a missing child PID and broken stdin during early launch failure, retaining the no-prompt failed result and cleanup proof.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Prepare isolated single-turn denial and detached-command oracles with exact native option identities, marker timing, explicit model admission and process cleanup. Credential-free tests do not claim live qualification.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
