{
  "head": "640e856accd015147714f87f4400a5a0de023389",
  "base": "5307c233b1f0ae72b8894dd39d94019aaf9e7cb8",
  "capturedAt": "2026-10-19T16:55:59.877029+00:00",
  "runtime": "Headless Linux Chromium, real Claude CLI 2.1.303, isolated T3 dev state",
  "freshProcess": {
    "startedAt": "2026-10-19T16:53:43Z",
    "sourceModifiedAt": "2026-10-19T16:43:31Z",
    "sourceSHA256": "b7c301f67ddae02b822cc13e142042a840bab6e6a8d2f57cc58cc44a15faef52"
  },
  "flow": [
    "Unrestricted preflight opens bypass query and enters plan mode.",
    "Project settings now disable bypass and Auto. First restored bypass is accepted before CLI watches settings; Bash then forwards approval; decline leaves first marker absent.",
    "Same restricted query enters plan mode again.",
    "Following turn recovers to default and forwards Bash approval; approve creates recovery marker.",
    "Next turn still asks; decline leaves next marker absent."
  ],
  "protocol": [
    {
      "type": "query.open",
      "permissionMode": "bypassPermissions"
    },
    {
      "type": "system",
      "subtype": "init",
      "permissionMode": "bypassPermissions"
    },
    {
      "type": "system",
      "subtype": "status",
      "permissionMode": "plan"
    },
    {
      "type": "result",
      "subtype": "success",
      "isError": false
    },
    {
      "type": "query.set_permission_mode",
      "mode": "bypassPermissions",
      "note": "Runner logs successful calls only; rejected bypass calls are not emitted."
    },
    {
      "type": "system",
      "subtype": "status",
      "permissionMode": "bypassPermissions"
    },
    {
      "type": "system",
      "subtype": "init",
      "permissionMode": "bypassPermissions"
    },
    {
      "type": "system",
      "subtype": "status",
      "permissionMode": "default"
    },
    {
      "type": "result",
      "subtype": "success",
      "isError": false
    },
    {
      "type": "system",
      "subtype": "init",
      "permissionMode": "default"
    },
    {
      "type": "system",
      "subtype": "status",
      "permissionMode": "plan"
    },
    {
      "type": "result",
      "subtype": "success",
      "isError": false
    },
    {
      "type": "query.set_permission_mode",
      "mode": "default",
      "note": "Runner logs successful calls only; rejected bypass calls are not emitted."
    },
    {
      "type": "system",
      "subtype": "status",
      "permissionMode": "default"
    },
    {
      "type": "system",
      "subtype": "init",
      "permissionMode": "default"
    },
    {
      "type": "result",
      "subtype": "success",
      "isError": false
    },
    {
      "type": "system",
      "subtype": "init",
      "permissionMode": "default"
    },
    {
      "type": "result",
      "subtype": "success",
      "isError": false
    }
  ],
  "queryOpenCount": 1,
  "markers": {
    "firstMarkerExists": false,
    "recoveryMarker": "RECOVERED",
    "nextMarkerExists": false
  },
  "tests": {
    "pinnedMain": 286,
    "replacement": 291,
    "r4Before": {
      "pass": 289,
      "assertionFailures": 2
    },
    "r4After": {
      "pass": 291,
      "fail": 0
    },
    "assertionCountPreserved": 795,
    "scopedLintFormat": "pass",
    "serverTypecheck": "pass"
  },
  "review": "Four parallel Sol/Opus rounds; final both no actionable findings. Human feature/policy approval remains missing.",
  "limits": [
    "Failed resolver recovery proven by focused tests, not real CLI live injection.",
    "No enterprise account, policyHelper, native MDM, macOS, Windows, iOS, Android, Electron desktop or relay/tunnel execution.",
    "Successful policy reads cache at session/cwd scope; a newly imposed restriction can prompt without a notice.",
    "Replay tests outside focused adapter can depend on host policy."
  ]
}