search-with-proof: probe harness (3.2) and agent worker (group 5)

Probe runs each oracle toy pair with a real demo and two gaming demos, records
image facts, RSS and disk, fails loudly if isolation is unavailable; dispatchable
as an AX task. Worker: reason step without tools, explore tool loop whose run tool
goes through the sandbox with a scrubbed env (model key absent), spend reserved
before each call. Host probe: 5/5 real demos demonstrated, 10/10 gaming demos
inconclusive. 89 tests.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

tests/fixtures/search/app.py

@@ -1,33 +0,0 @@
-"""CLI toy: arguments are its sole public interface; config belongs to the app."""
-
-import os
-import pathlib
-import sqlite3
-import subprocess
-import sys
-import urllib.request
-
-fixed = pathlib.Path("/workspace/fixed").exists()
-if sys.argv[1:] == ["--ready"]:
-    sys.exit(1 if pathlib.Path("/workspace/broken").exists() else 0)
-family, payload = sys.argv[1:]
-if family == "path":
-    root = pathlib.Path(os.environ["SERVED_ROOT"])
-    path = (root / payload).resolve()
-    if not fixed or path.is_relative_to(root):
-        value = path.read_text()
-        if not pathlib.Path("/workspace/flaky").exists() or value.startswith("a"):
-            print(value)
-elif family == "sql":
-    with sqlite3.connect(os.environ["DATABASE"]) as db:
-        if fixed:
-            rows = db.execute("SELECT value FROM records WHERE public=1 AND name=?", (payload,))
-        else:
-            rows = db.execute("SELECT value FROM records WHERE public=1 AND name='" + payload + "'")
-        print(list(rows))
-elif family == "command":
-    if not fixed:
-        subprocess.run("echo " + payload, shell=True, check=False)
-elif family == "ssrf":
-    if not fixed:
-        print(urllib.request.urlopen(os.path.expandvars(payload), timeout=2).read())