{
 "round": "two-frontiers-r1",
 "probe": "g-effort",
 "gate": "G-EFFORT",
 "arm_id": "cli-claude-fable-5-1",
 "verdict": "PASS",
 "detail": "239 reasoning/thinking tokens at effort 'high'",
 "started_utc": "2026-09-05T14:04:34Z",
 "finished_utc": "2026-09-05T14:04:42Z",
 "evidence": {
  "prompt_path": "(a path on the bench box; described, not printed)",
  "prompt_chars": 120454,
  "prompt_sha256": "23562ab025665f5bad81e07728b17c8a904a1c05324ee5cf1baa15db4a1d00c3",
  "prompt_tokens_estimated_chars_over_4": 30113,
  "prompt_tokens_reported": 2,
  "context_ratio_reported_over_estimated": 0.0001,
  "context_ratio_rule": "PLAN §4 Leg C ports the 0.80 rule: an arm whose REPORTED prompt tokens fall below 0.80 of our estimate on an item prints CONTEXT-TRUNCATED for that cell.",
  "reasoning_or_thinking_tokens": 239,
  "token_field_reported": true,
  "effort": "high",
  "wall_ms": 8001,
  "latency_class": "harness-wall",
  "collection_state": "COLLECTED"
 },
 "records": [
  {
   "round": "two-frontiers-r1",
   "leg": "probe",
   "arm_id": "cli-claude-fable-5-1",
   "model": "claude-fable-5-1",
   "transport_class": "agent-harness-cli",
   "dispatch_id": "g-effort",
   "attempt": 1,
   "collected": true,
   "collection_state": "COLLECTED",
   "collection_detail": null,
   "stamped_utc": "2026-09-05T14:04:42Z",
   "prompt_sha256": "23562ab025665f5bad81e07728b17c8a904a1c05324ee5cf1baa15db4a1d00c3",
   "system_sha256": "a88adcfc26e337934c246990d813a7510c8828a8f4df019c324b2f25df2985b3",
   "response_sha256": "8daa42a964a4d2cacc709408eb0664015d13dc177a41a30633c26bdaec5b0304",
   "response_text": "Both rulings are present in the notes (each appears as a stray fragment interrupting the surrounding text — one inside the index near the \"Loo\" entry, the other mid-sentence in the Bridge \"Method of Playing\" section — so they are not part of the book's normal rules for those games):\n\n1. **Overseer Harwich** — **85 points** — **Preference**: \"Overseer Harwich's ruling: a false declaration during the scoring phase in Preference forfeits exactly 85 points to the pool.\"\n\n2. **Examiner Trentham** — **56 points** — **Cinch**: \"Examiner Trentham's amendment: abandoning a hand after viewing the widow in Cinch forfeits exactly 56 points to the pool.\"\n\nSource: the Hoyle/\"Encyclopedia of Indoor Games\" notes provided above (index section and the Bridge \"Method of Playing\" section, respectively).",
   "response_chars": 794,
   "response_empty": false,
   "redaction": {
    "applied": false,
    "rule": "every email-shaped string and every bare account local part -> [REDACTED-EMAIL], at write time, in one function",
    "response_sha256_as_received": "8daa42a964a4d2cacc709408eb0664015d13dc177a41a30633c26bdaec5b0304",
    "response_chars_as_received": 794,
    "note": "response_sha256 is over the PUBLISHED text, so a reader can verify it against the text in this row. response_sha256_as_received is over the bytes the arm returned; those bytes live only in the quarantined raw stream, so that hash is checkable on this box and nowhere else."
   },
   "latency": {
    "class": "harness-wall",
    "ms": 8001,
    "harness_wall_ms": 8001,
    "duration_ms_reported": 7830,
    "duration_api_ms": 7817,
    "ttft_ms": 4507,
    "note": "harness-wall: a whole process spawn, not a socket round trip. Published as a labelled UPPER BOUND and never beside a serving figure (PLAN §8.2)."
   },
   "usage": {
    "input_tokens": 2,
    "output_tokens": 533,
    "cache_creation_input_tokens": 43742,
    "cache_read_input_tokens": 0,
    "thinking_tokens": 239,
    "thinking_tokens_reported": true,
    "service_tier": "standard",
    "note": "the CLI's own result.usage. thinking_tokens is None when no output_tokens_details block was reported and 0 when one was reported with a zero - G-EFFORT's receipt is '> 0', so the two must not collapse."
   },
   "thinking": {
    "tokens": 239,
    "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
    "chars": 0,
    "blocks": 1,
    "text_stored": false,
    "why": "this arc records the LENGTH of a chain of thought and never its words; the raw stream is quarantined under results/raw-streams/ and excluded from the kit and from seal-manifest.json."
   },
   "cost": {
    "usd": 0.90151,
    "state": "no-figure-held",
    "label": "list-rate estimate, not a receipt",
    "why": "this arm rides a consumer subscription (OAuth), so the CLI's own total_cost_usd is a LIST-RATE ESTIMATE of what the same tokens would have cost on the API, not a receipt for what was paid."
   },
   "law_record": {
    "seal": "agent-harness-cli",
    "argv": [
     "(a path on the bench box; described, not printed)",
     "-p",
     "--safe-mode",
     "--model",
     "claude-fable-5-1",
     "--effort",
     "high",
     "--tools",
     "",
     "--allowedTools",
     "",
     "--strict-mcp-config",
     "--mcp-config",
     "{\"mcpServers\":{}}",
     "--no-session-persistence",
     "--setting-sources",
     "",
     "--disable-slash-commands",
     "--system-prompt",
     "<system-prompt 132 chars: You are answering one question from the notes below. Cite the note you used. If the notes do not say, say that the notes do not say.>",
     "--output-format",
     "stream-json",
     "--verbose"
    ],
    "argv_carries_the_prompt": false,
    "prompt_channel": "stdin (bytes)",
    "prompt_bytes": 122019,
    "system_bytes": 132,
    "system_bytes_limit": 16384,
    "argv_element_wall_bytes": 131072,
    "system_channel": "argv (--system-prompt). Refused over 16,384 bytes: a single argv element dies at 131,072 on this box, measured, and execve raises before a process exists.",
    "effort": "high",
    "effort_channel": "argv only (--effort); no CLAUDE_* env var reaches the child",
    "sampler": "not settable on this transport (disclosed, never approximated)",
    "output_cap": "none settable",
    "g_tools": {
     "asserted": [
      "init.model",
      "init.tools == []",
      "init.mcp_servers == []",
      "init.slash_commands == []",
      "init.apiKeySource == 'none' (the OAuth/subscription value)",
      "no content block of ANY tool-shaped type, anywhere in the stream (census)",
      "no unknown content block type (fail-closed)",
      "result.usage.server_tool_use counters all zero",
      "result.permission_denials == []",
      "the scratch cwd is still empty after the call"
     ],
     "breaches": [],
     "unverifiable": [],
     "failures": [],
     "verdict": "PASS"
    },
    "stream": {
     "records": 8,
     "unparsed_lines": 0,
     "block_type_census": {
      "thinking": 1,
      "text": 1
     },
     "known_block_types": [
      "text",
      "thinking",
      "redacted_thinking"
     ],
     "tool_shaped_block_types": [],
     "unknown_block_types": [],
     "string_content_records": 0,
     "unshaped_blocks": 0,
     "tool_use_blocks": 0,
     "server_tool_use": {
      "web_search_requests": 0,
      "web_fetch_requests": 0
     },
     "result_subtype": "success",
     "result_is_error": false,
     "stop_reason": "end_turn",
     "num_turns": 1,
     "api_key_source": "none",
     "rate_limit_status": "allowed",
     "rate_limit_status_recognised": true,
     "rate_limit_statuses_known": [
      "allowed",
      "allowed_warning",
      "rejected"
     ]
    }
   },
   "artifacts": {
    "leak_markers_found": [],
    "reply_chars": 794,
    "reply_empty": false,
    "reply_sha256": "8daa42a964a4d2cacc709408eb0664015d13dc177a41a30633c26bdaec5b0304"
   },
   "cli_version": "2.1.261 (Claude Code)",
   "cli_executable": "(a path on the bench box; described, not printed)",
   "cwd": "(a path on the bench box; described, not printed)",
   "cwd_entries_after_call": [],
   "cwd_entries_after_call_asserted": true,
   "returncode": 0,
   "stderr_first_line": null,
   "init_receipt": {
    "type": "system",
    "subtype": "init",
    "model": "claude-fable-5-1",
    "tools": [],
    "mcp_servers": [],
    "slash_commands": [],
    "apiKeySource": "none",
    "permissionMode": "default",
    "claude_code_version": "2.1.261",
    "output_style": "default",
    "agents": [
     "claude",
     "Explore",
     "general-purpose",
     "Plan"
    ],
    "skills": [],
    "plugins": [],
    "analytics_disabled": true,
    "product_feedback_disabled": true,
    "capabilities": [
     "interrupt_receipt_v1",
     "interrupt_cancel_queued_v1",
     "msg_lifecycle_v1"
    ],
    "fast_mode_state": "off",
    "fast_mode_disabled_reason": "sdk_opt_in_required",
    "session_id": "58492549-c310-4095-a66a-810436980c26",
    "cwd": "(a path on the bench box; described, not printed)"
   },
   "init_receipt_keys_published": [
    "type",
    "subtype",
    "model",
    "tools",
    "mcp_servers",
    "slash_commands",
    "apiKeySource",
    "permissionMode",
    "claude_code_version",
    "output_style",
    "agents",
    "skills",
    "plugins",
    "analytics_disabled",
    "product_feedback_disabled",
    "capabilities",
    "fast_mode_state",
    "fast_mode_disabled_reason",
    "session_id",
    "cwd"
   ],
   "init_receipt_keys_dropped": [
    "messaging_socket_path",
    "uuid"
   ],
   "init_receipt_note": "the init record, reduced to the keys this round publishes. The dropped keys are named, never withheld silently: memory_paths and messaging_socket_path carry the orchestrator's own session paths and are evidence about nothing the seal claims. The whole record survives in the quarantined raw stream.",
   "env_receipt": {
    "names_passed": [
     "CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC",
     "DISABLE_AUTOUPDATER",
     "DISABLE_BUG_COMMAND",
     "DISABLE_ERROR_REPORTING",
     "DISABLE_TELEMETRY",
     "HOME",
     "LANG",
     "PATH",
     "TERM",
     "USER"
    ],
    "flags": {
     "CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC": "1",
     "DISABLE_TELEMETRY": "1",
     "DISABLE_ERROR_REPORTING": "1",
     "DISABLE_AUTOUPDATER": "1",
     "DISABLE_BUG_COMMAND": "1"
    },
    "allowlist": [
     "PATH",
     "HOME",
     "USER",
     "LANG",
     "TERM"
    ],
    "extra_declared": [],
    "dropped_count": 70,
    "dropped_names": [
     "AI_AGENT",
     "ATUIN_HISTORY_ID",
     "ATUIN_PREEXEC_BACKEND",
     "ATUIN_SESSION",
     "ATUIN_SHLVL",
     "ATUIN_TMUX_POPUP",
     "CLAUDECODE",
     "CLAUDE_CODE_CHILD_SESSION",
     "CLAUDE_CODE_ENTRYPOINT",
     "CLAUDE_CODE_EXECPATH",
     "CLAUDE_CODE_MESSAGING_SOCKET",
     "CLAUDE_CODE_MESSAGING_TOKEN",
     "CLAUDE_CODE_SESSION_ID",
     "CLAUDE_EFFORT",
     "CLAUDE_PID",
     "COLORTERM",
     "COREPACK_ENABLE_AUTO_PIN",
     "DBUS_SESSION_BUS_ADDRESS",
     "DEBUGINFOD_URLS",
     "DESKTOP_SESSION",
     "DISPLAY",
     "GDMSESSION",
     "GHOSTTY_BIN_DIR",
     "GHOSTTY_RESOURCES_DIR",
     "GHOSTTY_SHELL_FEATURES",
     "GIT_EDITOR",
     "GNOME_DESKTOP_SESSION_ID",
     "GNOME_KEYRING_CONTROL",
     "GNOME_SETUP_DISPLAY",
     "GPG_AGENT_INFO",
     "GTK_MODULES",
     "HISTCONTROL",
     "IM_CONFIG_ENTRY",
     "LESSCLOSE",
     "LESSOPEN",
     "LOGNAME",
     "LS_COLORS",
     "MANAGERPID",
     "MANAGERPIDFDID",
     "MCP_TIMEOUT",
     "MEMORY_PRESSURE_WATCH",
     "MEMORY_PRESSURE_WRITE",
     "NoDefaultCurrentDirectoryInExePath",
     "OLDPWD",
     "PWD",
     "PYTHONDONTWRITEBYTECODE",
     "QT_ACCESSIBILITY",
     "QT_IM_MODULE",
     "QT_IM_MODULES",
     "SHELL",
     "SHLVL",
     "SSH_AUTH_SOCK",
     "SYSTEMD_EXEC_PID",
     "TERMINFO",
     "TERM_PROGRAM",
     "TERM_PROGRAM_VERSION",
     "USERNAME",
     "WAYLAND_DISPLAY",
     "XAUTHORITY",
     "XDG_CONFIG_DIRS",
     "XDG_CURRENT_DESKTOP",
     "XDG_DATA_DIRS",
     "XDG_MENU_PREFIX",
     "XDG_RUNTIME_DIR",
     "XDG_SESSION_CLASS",
     "XDG_SESSION_DESKTOP",
     "XDG_SESSION_EXTRA_DEVICE_ACCESS",
     "XDG_SESSION_TYPE",
     "XMODIFIERS",
     "_"
    ],
    "cwd": "(a path on the bench box; described, not printed)",
    "note": "an ALLOWLIST, derived from the env this driver actually passed. G-EGRESS receipts the ENV alongside the host list: an interactive-grade CLI does analytics, error reporting, plugin-stats fetches and an autoupdate check unless the five flags are set -- and inherits an IPC socket, a session id, an effort override and any exported API key unless the environment is an allowlist. NAMES are recorded, never values."
   },
   "rate_limit_receipt": {
    "status": "allowed",
    "resetsAt": 1788627600,
    "rateLimitType": "five_hour",
    "overageStatus": "rejected",
    "overageDisabledReason": "org_level_disabled",
    "isUsingOverage": false,
    "unifiedWindows": {
     "five_hour": {
      "utilization": 0.75,
      "resetsAt": 1788627600
     },
     "seven_day": {
      "utilization": 0.36,
      "resetsAt": 1789005600
     },
     "seven_day_overage_included": {
      "utilization": 0.55,
      "resetsAt": 1789005600
     }
    }
   },
   "raw_stream_path": "(a path on the bench box; described, not printed)",
   "attempt_file": "(a path on the bench box; described, not printed)",
   "truthful_path_fields": [
    "cwd",
    "cli_executable",
    "raw_stream_path",
    "attempt_file"
   ],
   "truthful_path_fields_round": [
    "cwd",
    "cli_executable",
    "raw_stream_path",
    "attempt_file",
    "sent_file",
    "base_url",
    "planted_at",
    "path",
    "projects_dir",
    "prompt_path",
    "receipts_dir",
    "receipt_path"
   ]
  }
 ],
 "note": "written by harness/probes.py, through the same send() the scored run uses. A probe that hand-rolled its own call would receipt a field the run never sent."
}
