{
 "round": "two-frontiers-cove-r1",
 "gate": "G-EGRESS",
 "verdict": "PASS",
 "detail": "3 external hosts receive text in this round, and the fourth destination is a box on this estate whose traffic does not leave it",
 "started_utc": "2026-09-06T13:30:22Z",
 "finished_utc": "2026-09-06T13:30:22Z",
 "evidence": {
  "matrix_is_by_host_not_by_family": "the two counts differ by six: seven judging families and one arm reach their models through ONE shelf. A matrix by family would count seven independent parties where there are three.",
  "hosts": {
   "the hosted shelf": {
    "receives": [
     "the cloud-glm-5-3 arm's sealed prompts and its exact completion text",
     "all six judge sheets, in which that completion appears as a lettered reply beside every other arm's",
     "the outside read's copy of the pre-registration"
    ],
    "under": "one provider's terms and one account",
    "key_origin_allowlist": [
     "ollama.com"
    ],
    "consequence": "one external party holds both an arm's replies and every sheet that letters them, so that arm's letter→arm mapping is recoverable there by string equality and the rest narrow by elimination: the blind holds against the seven models and NOT against the shelf that serves them."
   },
   "the hosted API": {
    "receives": [
     "one arm's prompts and completions"
    ],
    "under": "that provider's terms",
    "key_origin_allowlist": [
     "api.openai.com"
    ]
   },
   "the vendor CLI's own endpoint": {
    "receives": [
     "one arm's prompts and completions"
    ],
    "under": "the subscription's terms",
    "argv_note": "on this transport the bundle's system half rides argv — the vendor offers no stdin channel for a system prompt — so it is visible in this box's own process table for the duration of each call, which is one reason no other lane runs beside this round. The record receipts that element as a LENGTH and a sha256, never a head."
   },
   "the local seat": {
    "receives": [
     "one arm's prompts and completions"
    ],
    "under": "nothing: the traffic leaves no box",
    "endpoint": "named by $COVE_LOCAL_BASE_URL and written into no committed file"
   }
  },
  "external_host_count": 3,
  "transmission_limit": "the exam cannot be sat without sending it. The sealed bundles — including the persona blocks the kit withholds — go to the three hosted arms; every judged reply and the served fence go to the seven judging seats. What we control is what we ADD to that traffic: no person's name, no account, no box name, no path, no port. The five fence lines that named a person rode August's sheets and do not ride ours.",
  "connection_sample": "taken during a warmup and recorded on that call's own attempt record, which carries the host it dialled",
  "problems": []
 },
 "arms": {},
 "records": [],
 "withheld": {
  "rule": "a receipt publishes in the kit, so these fields are removed here rather than at kit time — and named, because a field quietly absent from a receipt is indistinguishable from a gate that never read it."
 },
 "note": "written by harness/cove/gates_cove.py. Every generation call rides the same send() the scored run uses; a gate that hand-rolled its own call would receipt a field the run never sent."
}