TEST 088

TEST-088

Stimulus

Run D1 and D2 with a different harness digest, with networking enabled, with a writable input directory or file, with an unexpected environment variable, or with a hypervisor device, Docker socket, or GitHub credential present, including at a path the harness does not check; corrupt, drop, duplicate, or reorder a predecessor record; present pending cleanup; inject secret canaries.

Required observation

The launcher refuses an unattested sandbox; the station refuses to judge or reports UNKNOWN/FAIL, binds the last verified predecessor even when it does not pass, never mutates inputs or resources, and emits only redacted allowed fields. A Docker-to-Docker synthetic run passes only for the exact well-formed chain and is labeled as harness conformance, not qualification.