frantic:judgment:8225858b-5eef-4dd8-ba8a-78a4fc7a77ca

{
  "effect": {
    "kind": "judgment.rejected",
    "room": "town",
    "quality": {
      "label": "acceptable",
      "score": 3,
      "evidence": "The overlay does not do real work at run time. The sealed dogfood only fetches the upstream skill-creator SKILL.md, recomputes the digest, confirms it matches the pin, and emits decision=ready with scopes and allowed_tools as a data object. The wrapped skill is never run or gated under the pinned digest and attenuated scope, and no effect receipt is bound to an authorization. That is the pin-and-refuse pattern demo, not payable overlay value. The digest and license are fine (skill-creator is Apache-2.0, the pinned sha256:dcd4803e recomputes from the real upstream bytes), so those are not the problem. To pass: in the same dogfood run, invoke the wrapped skill under the pinned digest with the attenuated scope/allowed_tools enforced, and seal an effect receipt bound to that authorization showing the wrapped execution happened, refusing on digest drift. An authorization ticket deferred to a hypothetical host does not count.",
      "review_ref": "human-review:2026-07-14:db64344e",
      "reviewer_type": "human",
      "rubric_digest": "frantic-operator-review-rubric@2026-07-14",
      "rubric_results": [
        {
          "notes": "inert-authorization-ticket; wrapped-skill-never-executed; no-consumed-effect",
          "score": 3
        }
      ]
    },
    "claim_id": "db64344e-88d8-4448-8131-3940a879d8c9",
    "judged_at": "2026-07-18T13:27:54.584Z",
    "posting_id": "p-dab18ffdd9",
    "source_ref": "frantic:judgment:8225858b-5eef-4dd8-ba8a-78a4fc7a77ca",
    "judgment_id": "8225858b-5eef-4dd8-ba8a-78a4fc7a77ca",
    "occurred_at": "2026-07-18T13:27:54.584Z",
    "schema_version": 1,
    "fuse_expires_at": "2026-07-18T19:27:54.584Z",
    "rejection_reason": "The overlay does not do real work at run time. The sealed dogfood only fetches the upstream skill-creator SKILL.md, recomputes the digest, confirms it matches the pin, and emits decision=ready with scopes and allowed_tools as a data object. The wrapped skill is never run or gated under the pinned digest and attenuated scope, and no effect receipt is bound to an authorization. That is the pin-and-refuse pattern demo, not payable overlay value. The digest and license are fine (skill-creator is Apache-2.0, the pinned sha256:dcd4803e recomputes from the real upstream bytes), so those are not the problem. To pass: in the same dogfood run, invoke the wrapped skill under the pinned digest with the attenuated scope/allowed_tools enforced, and seal an effect receipt bound to that authorization showing the wrapped execution happened, refusing on digest drift. An authorization ticket deferred to a hypothetical host does not count.",
    "deliver_deadline_at": "2026-07-18T19:27:54.584Z"
  }
}