inc-0011
degraded
citable URL: https://halobench.com/records/inc-0011/ — this address never moves; the anchor /records/#inc-0011 keeps resolving
Authorized energy join handoff was omitted before full-STRIX evidence closure
detected
2026-08-30 · window 2026-08-29T22:29:21Z → 2026-08-30T12:20:04Z · by publication-hold-and-post-hoc-energy-recovery · lag The first publication package correctly exposed a structured-unjoined state, but review treated the runner's lack of Home Assistant authorization as a terminal evidence disposition instead of routing the retained edges to hborchestrator.
signature: The runner was told to join energy but had no authorized Home Assistant reader; package-r2 sealed an unjoined disposition even though exact UTC edges and live Home Assistant history remained recoverable.
should have caught it
Campaign closure should have required a predeclared meter entity, method and authorized join owner after exact UTC edges landed and before final evidence review.
diagnosis
initial: A structured unjoined reason was sufficient because the hardware runner could not access the wall-meter history.
actual: Credential separation was correct; workflow ownership was not. Hbrunner should retain exact UTC edges and hand off the join to authorized hborchestrator before evidence review. Final review may accept joined receipts or an explicit reviewed unjoined reason, but may not silently close a pending handoff.
false-path cost: One publication package was held and a post-hoc evidence addendum was required; no benchmark rerun or model output change was needed.
falsified by: Retained Tau2 edge receipts, exact-card lease/process receipts, a fresh read-only Home Assistant history query, and the v1 raw/derived addendum receipts.
actual: Credential separation was correct; workflow ownership was not. Hbrunner should retain exact UTC edges and hand off the join to authorized hborchestrator before evidence review. Final review may accept joined receipts or an explicit reviewed unjoined reason, but may not silently close a pending handoff.
false-path cost: One publication package was held and a post-hoc evidence addendum was required; no benchmark rerun or model output change was needed.
falsified by: Retained Tau2 edge receipts, exact-card lease/process receipts, a fresh read-only Home Assistant history query, and the v1 raw/derived addendum receipts.
blast radius
configs affected: cfg-0180
lesson
Keep Home Assistant credentials with hborchestrator. Every campaign must predeclare meter entity/method/join owner, persist exact UTC edges, and close an authorized join handoff before final evidence review. The executable closure check rejects pending handoffs and credential-like artifact material.
state
resolved · class data