{
  "schemaVersion": 1,
  "sourceCommit": "6de1711",
  "purpose": "Green characterization of known provider-parity defects; owning tasks must invert these assertions before fixing them.",
  "generated": false,
  "environmentValuesCaptured": false,
  "prompt": {
    "knownDefect": true,
    "invertInTask": 8,
    "sentinel": "OPEN_CLAUDIA_PROMPT_PARITY_SENTINEL",
    "observed": "raw-user-prompt-only",
    "target": "provider-neutral core instructions plus dynamic context plus the user sentinel"
  },
  "environment": {
    "knownDefect": true,
    "invertInTask": 4,
    "capture": "boolean-key-presence-only",
    "keys": [
      "AGENTSPACE_POD_TOKEN",
      "ANTHROPIC_API_KEY",
      "BOT_CONTROL_TOKEN",
      "CLAUDE_CODE_OAUTH_TOKEN",
      "CLAUDE_CONFIG_DIR",
      "CODEX_HOME",
      "CURSOR_API_KEY",
      "ELEVENLABS_API_KEY",
      "KAZEE_BOT_TOKEN",
      "OC_SEND_TOKEN",
      "OPENAI_API_KEY",
      "OPEN_CLAUDIA_KEYRING_CANARY",
      "TELEGRAM_BOT_TOKEN",
      "VOICE_BRIDGE_TOKEN",
      "WEB_PASSWORD"
    ],
    "observed": {
      "claude": {
        "AGENTSPACE_POD_TOKEN": true,
        "ANTHROPIC_API_KEY": true,
        "BOT_CONTROL_TOKEN": false,
        "CLAUDE_CODE_OAUTH_TOKEN": true,
        "CLAUDE_CONFIG_DIR": true,
        "CODEX_HOME": true,
        "CURSOR_API_KEY": true,
        "ELEVENLABS_API_KEY": true,
        "KAZEE_BOT_TOKEN": false,
        "OC_SEND_TOKEN": true,
        "OPENAI_API_KEY": true,
        "OPEN_CLAUDIA_KEYRING_CANARY": true,
        "TELEGRAM_BOT_TOKEN": false,
        "VOICE_BRIDGE_TOKEN": true,
        "WEB_PASSWORD": true
      },
      "codex": {
        "AGENTSPACE_POD_TOKEN": true,
        "ANTHROPIC_API_KEY": true,
        "BOT_CONTROL_TOKEN": false,
        "CLAUDE_CODE_OAUTH_TOKEN": true,
        "CLAUDE_CONFIG_DIR": true,
        "CODEX_HOME": true,
        "CURSOR_API_KEY": true,
        "ELEVENLABS_API_KEY": true,
        "KAZEE_BOT_TOKEN": false,
        "OC_SEND_TOKEN": true,
        "OPENAI_API_KEY": true,
        "OPEN_CLAUDIA_KEYRING_CANARY": true,
        "TELEGRAM_BOT_TOKEN": false,
        "VOICE_BRIDGE_TOKEN": true,
        "WEB_PASSWORD": true
      }
    },
    "target": {
      "claude": {
        "AGENTSPACE_POD_TOKEN": false,
        "ANTHROPIC_API_KEY": true,
        "BOT_CONTROL_TOKEN": false,
        "CLAUDE_CODE_OAUTH_TOKEN": true,
        "CLAUDE_CONFIG_DIR": true,
        "CODEX_HOME": false,
        "CURSOR_API_KEY": false,
        "ELEVENLABS_API_KEY": false,
        "KAZEE_BOT_TOKEN": false,
        "OC_SEND_TOKEN": false,
        "OPENAI_API_KEY": false,
        "OPEN_CLAUDIA_KEYRING_CANARY": false,
        "TELEGRAM_BOT_TOKEN": false,
        "VOICE_BRIDGE_TOKEN": false,
        "WEB_PASSWORD": false
      },
      "codex": {
        "AGENTSPACE_POD_TOKEN": false,
        "ANTHROPIC_API_KEY": false,
        "BOT_CONTROL_TOKEN": false,
        "CLAUDE_CODE_OAUTH_TOKEN": false,
        "CLAUDE_CONFIG_DIR": false,
        "CODEX_HOME": true,
        "CURSOR_API_KEY": false,
        "ELEVENLABS_API_KEY": false,
        "KAZEE_BOT_TOKEN": false,
        "OC_SEND_TOKEN": false,
        "OPENAI_API_KEY": true,
        "OPEN_CLAUDIA_KEYRING_CANARY": false,
        "TELEGRAM_BOT_TOKEN": false,
        "VOICE_BRIDGE_TOKEN": false,
        "WEB_PASSWORD": false
      }
    },
    "scopedRuntimeTokenDecision": "Task 4 must remove ambient OC_SEND_TOKEN; any later delivery capability must be explicitly scoped without restoring generic provider credential inheritance.",
    "securityScope": "Environment isolation only; native same-UID child processes are not filesystem-isolated."
  },
  "codexResumedPlan": {
    "knownDefect": true,
    "invertInTask": 7,
    "sessionId": "resume-session-sentinel",
    "promptSentinel": "OPEN_CLAUDIA_PROMPT_PARITY_SENTINEL",
    "observedArgv": [
      "exec",
      "resume",
      "resume-session-sentinel",
      "--json",
      "--skip-git-repo-check",
      "--sandbox",
      "read-only",
      "OPEN_CLAUDIA_PROMPT_PARITY_SENTINEL"
    ],
    "targetConstraints": {
      "configurationFlag": "-c",
      "configurationValue": "sandbox_mode=\"read-only\"",
      "configurationBeforeSessionId": true,
      "forbiddenResumeFlag": "--sandbox"
    }
  }
}