merge(search-with-proof): served-root control-signal feedback to the agent [skip ci]

Non-blocking advisory hint when the control shows the app didn't serve ${served_root}, so the agent self-corrects its served-directory wiring. Host-side; verdicts unchanged. Co-Authored-By: Claude Opus 4.8 <[email protected]>
2026-10-16 03:49:26 +00:00 · 2026-10-07 12:03:45 +02:00
parent d1fe78987b 20c5742d84
commit 1ec4ee4c55
4 changed files with 84 additions and 1 deletions
@@ -328,7 +328,13 @@ class Pilot:
                if result.outcome != "demonstrated":
                    self.failure("verify", "no_consistent_differential" if result.outcome == "inconclusive" else result.outcome)
                end = result.outcome
-                return dict(status="ok", outcome=result.outcome, evidence_refs=["verify:owned"], cost_usd=0)
+                return dict(
+                    status="ok",
+                    outcome=result.outcome,
+                    evidence_refs=["verify:owned"],
+                    cost_usd=0,
+                    control_observed=result.sides[0].control_observed if result.sides else None,
+                )
            if task.step == "explore":
                if self.args.dry_run:
                    self.worker.executor = InProcessExecutor(self.sides[0 if self.args.side == "vulnerable" else 1].checkout)