# Send Sandbox Gate

Date: 2026-07-10
Node: R6c online sandbox-send evidence gate

## Local constraint

The local development environment cannot log in to iSphere / IMPlatformClient because it has no reachable service endpoint. Therefore R6c cannot be completed by a local live send.

Decision for this loop: prepare a returnable online sandbox evidence package instead of attempting any local send.

## Package produced

Script:

```powershell
powershell -NoProfile -ExecutionPolicy Bypass -File scripts\package-send-sandbox-gate.ps1
```

Verification:

```powershell
powershell -NoProfile -ExecutionPolicy Bypass -File scripts\verify-send-sandbox-gate-package.ps1
```

Generated package:

```text
runs/send-sandbox-gate-package/
runs/send-sandbox-gate-package.zip
```

Companion capability-test package:

```powershell
powershell -NoProfile -ExecutionPolicy Bypass -File scripts\package-send-capability-test.ps1
powershell -NoProfile -ExecutionPolicy Bypass -File scripts\verify-send-capability-test-package.ps1
```

```text
runs/send-capability-test-package/
runs/send-capability-test-package.zip
```

The capability-test package is local/offline safe. It runs `isphere-capability-smoke.exe`, confirms the nine-tool MCP surface, exercises receive/search/file-list against synthetic fixtures, verifies send preview, and confirms `production_send_enabled=false`.

The package embeds the existing read-only live probe recorder under:

```text
recorder/ISphereLiveProbeRecorder.exe
recorder/variants/ISphereLiveProbeRecorder-x86.exe
```

## Package files

| File | Purpose |
| --- | --- |
| `README.txt` | Explains local login limitation, online sandbox requirement, and one-send rule. |
| `OPERATOR-STEPS.md` | Step-by-step operator procedure. |
| `SANDBOX-SEND-INPUTS.template.json` | Template for sandbox target, content hash, idempotency key, and observed result. |
| `EXPECTED-RETURN-FILES.txt` | Return package acceptance checklist. |
| `RUN-RECORDING-SUITE.bat` | Top-level guided before/manual-send/after/return-zip flow. |
| `01-run-before-recorder.bat` | Numbered wrapper for before recording. |
| `02-run-after-recorder.bat` | Numbered wrapper for after recording. |
| `03-make-return-zip.bat` | Numbered wrapper for return zip creation. |
| `RECORDING-PACKAGE-MANIFEST.json` | Machine-readable package manifest and one-send markers. |
| `run-before-recorder.bat` | Runs read-only recorder before the manual sandbox send. |
| `run-after-recorder.bat` | Runs read-only recorder after the manual sandbox send. |
| `compute-content-hash.ps1` | Computes SHA256 for the exact test message body. |
| `make-return-zip.ps1` | Creates the return zip after before/after recordings and input JSON are present. |

## Operator rules

The package encodes these explicit markers:

```text
LOCAL_LOGIN_UNAVAILABLE
ONLINE_SANDBOX_REQUIRED
MANUAL_ONE_SEND_ONLY
DO_NOT_SEND_SECOND_TIME
content_sha256
idempotency_key
success_ack_or_sent_record
```

Required online procedure:

1. Log in normally on an online/internal sandbox machine.
2. Fill `SANDBOX-SEND-INPUTS.json` from the template.
3. Run `RUN-RECORDING-SUITE.bat` for the guided all-in-one flow, or run `01-run-before-recorder.bat`.
4. Manually send exactly one message to the declared sandbox target.
5. Record `success_ack_or_sent_record`.
6. Do not send a second copy.
7. Continue the guided flow, or run `02-run-after-recorder.bat`.
8. Continue the guided flow, or run `03-make-return-zip.bat`.
9. Return the generated zip.

## Safety boundary

The package does not:

- send messages automatically;
- upload files;
- click or type;
- inject or hook;
- capture network traffic;
- enable production send.

The only send action is the operator's one manual sandbox send inside the official client.

## Acceptance gate

R6c can pass only after a returned package proves all of the following:

- explicit sandbox target;
- exactly one content hash;
- exactly one idempotency key;
- observed success/ack or local sent-record evidence;
- confirmation that no second send was made;
- before/after read-only recorder outputs are present.

## Current decision

R6c local-preparation slice is complete, including the consolidated recording suite and the separate offline capability-test package. The full online evidence gate is not passed yet.

Production `isphere_send_message` remains blocked.

Next node: **R6d returned sandbox evidence intake** after the user returns the generated package.