ruling-2026-08-26-deferral-unit6-smokesInstalled is not authenticated. sovereign-agent doctor reports Claude Code,
Codex and Cursor as available on a machine where all three are on PATH. That
establishes the executable exists and answers --help. It establishes nothing
about whether a credential works, whether a real session completes, or whether a
live provider honours the workspace boundary.
Conflating the two would be the defect this line spent Unit 6.5 removing: a green signal standing in for a fact it does not measure.
probe / build_invocation / parse_event; invocations are argv arrays
with no shell string anywhere; capability claims come from probing the
installed CLI and fail closed when unprovable; fixtures are deterministic and
integration tests use fake executables.live marker and deselected by default: three installed-CLI probes that
submit no work, and six assignment smokes (read-only and workspace-write for
each provider) gated behind SOVEREIGN_AGENT_LIVE_ASSIGNMENTS=1.Running them requires credentials this environment does not hold, and they consume provider credits. A smoke that cannot be run is honestly deferred; a smoke reported as passing because the CLI is installed is a lie of exactly the kind this project teaches learners to detect.
python -m pytest -q -m live # probes only
SOVEREIGN_AGENT_LIVE_ASSIGNMENTS=1 python -m pytest -q -m live # + assignments
Each assignment smoke uses a disposable fixture repository and proves its trunk commit did not move.