Fixed real-provider runtime, independently verified read-only. Head under runtime test: 597823c8ad18a4870c39d834e907b5ef56476e4e Server 16663 / web 8623; isolated worktree .t3; real acplause v0.202610.0, deliberately invalid nonsecret key. Browser actions and visible outcomes supplied by primary integrated pass. {"route": "fresh acplause thread (resumed)", "status": "failed", "startedAt": "2026-10-22T00:46:05.602Z", "completedAt": "2026-10-22T00:46:05.860Z", "failureItems": [{"class": "provider_error", "message": "Missing Authentication header"}], "visibleOutcome": "Provider error / Missing Authentication header"} Failure item count for latest provider turn: 1 {"route": "Codex-to-acplause handoff", "status": "failed", "startedAt": "2026-10-22T00:47:18.207Z", "completedAt": "2026-10-22T00:47:18.342Z", "failureItems": [{"class": "provider_error", "message": "Missing Authentication header"}], "visibleOutcome": "Provider error / Missing Authentication header"} Failure item count for latest provider turn: 1 Provider log files were inspected: retained logs contain only earlier baseline traffic, so they do not independently establish the fixed outcome. Fixed status and error are proven by the latest durable projection rows and primary browser pass. Scope: invalid-auth failure reproduced with real provider. Success/cancellation and following-agent-work are deterministic fixture controls, not successful real-provider calls with this invalid key. No raw prompts beyond Reply hello, seeded data, credentials, pairing URLs, or tokens included. {"route": "fresh resumed", "durableProviderTurnTransitions": ["running", "failed"], "failedTransitionCount": 1} {"route": "provider handoff", "durableProviderTurnTransitions": ["running", "failed"], "failedTransitionCount": 1}