[object Object]

← back to Ticket System

close zero-cost legacy-panel proof gap

09aeede097a229cfc6cdf97416986dbbe0669017 · 2026-09-03 07:20:14 -0700 · Steve Abrams

Files touched

Diff

commit 09aeede097a229cfc6cdf97416986dbbe0669017
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Thu Sep 3 07:20:14 2026 -0700

    close zero-cost legacy-panel proof gap
---
 scripts/verify-zero-cost-dtd.sh      |  3 +++
 test/yoloforever-zero-cost-dtd.sh    |  3 +++
 verification/TK-11170-e2e-proof.json | 52 ++++++++++++++++++++++++++++++++++++
 3 files changed, 58 insertions(+)

diff --git a/scripts/verify-zero-cost-dtd.sh b/scripts/verify-zero-cost-dtd.sh
index 4fe8ea0d..8d82d73a 100755
--- a/scripts/verify-zero-cost-dtd.sh
+++ b/scripts/verify-zero-cost-dtd.sh
@@ -109,8 +109,11 @@ DTD_COST_MODE_FILE="$TMP/redirected-cost-mode" DTD_DIR="$TMP/redirected" bash "$
 redirected_panel_rc=$?
 DTD_COST_MODE_FILE="$TMP/redirected-cost-mode" bash "$AGENTS_POST" "$TMP/agents" A >/dev/null 2>&1
 redirected_post_rc=$?
+DTD_COST_MODE_FILE="$TMP/redirected-cost-mode" DTD_DIR="$TMP/redirected-legacy" bash "$CLAUDE_PANEL" "Choose A or B" >/dev/null 2>&1
+redirected_legacy_rc=$?
 set -e
 [[ "$redirected_panel_rc" == 78 ]]
 [[ "$redirected_post_rc" == 78 ]]
+[[ "$redirected_legacy_rc" == 78 ]]
 [[ ! -s "$TMP/calls.log" ]]
 echo "PASS zero-cost DTD preflight"
diff --git a/test/yoloforever-zero-cost-dtd.sh b/test/yoloforever-zero-cost-dtd.sh
index c2c5fe89..100368c3 100755
--- a/test/yoloforever-zero-cost-dtd.sh
+++ b/test/yoloforever-zero-cost-dtd.sh
@@ -92,9 +92,12 @@ DTD_COST_MODE_FILE="$TMP/redirected-mode" DTD_DIR="$TMP/redirected-mode-run" bas
 redirected_panel_rc=$?
 DTD_COST_MODE_FILE="$TMP/redirected-mode" bash "$AGENTS_POST" "$TMP/agents-zero" A >/dev/null 2>&1
 redirected_post_rc=$?
+DTD_COST_MODE_FILE="$TMP/redirected-mode" DTD_DIR="$TMP/redirected-legacy-run" bash "$CLAUDE_PANEL" "Choose A or B" >/dev/null 2>&1
+redirected_legacy_rc=$?
 set -e
 [[ "$redirected_panel_rc" == 78 ]]
 [[ "$redirected_post_rc" == 78 ]]
+[[ "$redirected_legacy_rc" == 78 ]]
 [[ ! -s "$TMP/calls.log" ]]
 
 bash -n "$AGENTS_PANEL" "$AGENTS_POST" "$CLAUDE_PANEL"
diff --git a/verification/TK-11170-e2e-proof.json b/verification/TK-11170-e2e-proof.json
new file mode 100644
index 00000000..535f4459
--- /dev/null
+++ b/verification/TK-11170-e2e-proof.json
@@ -0,0 +1,52 @@
+{
+  "intent": "Prevent any yoloforever delegated child from reaching paid DTD providers when DTD_ZERO_COST is absent.",
+  "risk_tier": "R1 local policy and runner boundary",
+  "environment": "Mac2 local; LaunchAgent disabled and STOPPED during proof",
+  "build_identity": {
+    "ticket_system": ["a1f7d32", "8dea1d9", "44846a5"],
+    "legacy_dtd_panel": ["bd848b1", "87aacb6"]
+  },
+  "baseline": "A prior delegated turn lacked DTD_ZERO_COST. Cody then reproduced four forbidden paid-route attempts when DTD_COST_MODE_FILE was redirected to a readable PAID_ALLOWED file; all attempts used stubs and made no provider call.",
+  "journey": [
+    {
+      "boundary": "canonical policy",
+      "assertion": "config/dtd-cost-mode is readable and exactly ZERO_COST_REQUIRED",
+      "verdict": "PASS"
+    },
+    {
+      "boundary": "child environment",
+      "assertion": "With DTD_ZERO_COST unset and poison provider keys present, both installed panel paths and the mandatory post-decision script invoke local Codex only; no Claude or paid endpoint",
+      "evidence": "bash test/yoloforever-zero-cost-dtd.sh",
+      "verdict": "PASS"
+    },
+    {
+      "boundary": "policy redirection",
+      "assertion": "A readable non-canonical PAID_ALLOWED guard is rejected by panel and post-decision entry points with exit 78 before any command",
+      "evidence": "bash scripts/verify-zero-cost-dtd.sh",
+      "verdict": "PASS"
+    },
+    {
+      "boundary": "artifact drift and launch",
+      "assertion": "Exact installed hashes pass; unguarded or drifted scripts stop the isolated runner before Codex; clean boundary carries zero-cost controls",
+      "evidence": "bash test/yoloforever-preflight-boundary.sh",
+      "verdict": "PASS"
+    },
+    {
+      "boundary": "ticket system",
+      "assertion": "Canonical lifecycle and A2A behavior remain intact",
+      "evidence": "npm test: 29/29 PASS; ticketmaster urgency: 14/14 PASS",
+      "verdict": "PASS"
+    }
+  ],
+  "negative_checks": [
+    "DTD_ZERO_COST absent",
+    "provider secrets present but poisoned",
+    "readable redirected PAID_ALLOWED guard",
+    "missing/non-canonical guard",
+    "unguarded panel fixture",
+    "one-byte hash drift"
+  ],
+  "external_side_effects": "None. Provider interactions were stubbed; no customer, production, DNS, Shopify, dw_unified, publish, send, remote-push, identity, or spend action occurred.",
+  "cleanup": "Temporary test directories auto-removed. Canonical ZERO_COST_REQUIRED policy intentionally retained. Runner remains STOPPED until Cody, final DTD, and prior-cycle drain complete.",
+  "verdict": "PASS for remediation; restart pending gates"
+}

← 44846a55 pin the canonical DTD cost guard  ·  back to Ticket System  ·  preserve TK-10928 diagnostic cycle proof bac53bc6 →