Send Sandbox Gate

Date: 2026-07-10 Node: R6c online sandbox-send evidence gate

Local constraint

The local development environment cannot log in to iSphere / IMPlatformClient because it has no reachable service endpoint. Therefore R6c cannot be completed by a local live send.

Decision for this loop: prepare a returnable online sandbox evidence package instead of attempting any local send.

Package produced

Script:

powershell -NoProfile -ExecutionPolicy Bypass -File scripts\package-send-sandbox-gate.ps1

Verification:

powershell -NoProfile -ExecutionPolicy Bypass -File scripts\verify-send-sandbox-gate-package.ps1

Generated package:

runs/send-sandbox-gate-package/
runs/send-sandbox-gate-package.zip

The package embeds the existing read-only live probe recorder under:

recorder/ISphereLiveProbeRecorder.exe
recorder/variants/ISphereLiveProbeRecorder-x86.exe

Package files

File	Purpose
`README.txt`	Explains local login limitation, online sandbox requirement, and one-send rule.
`OPERATOR-STEPS.md`	Step-by-step operator procedure.
`SANDBOX-SEND-INPUTS.template.json`	Template for sandbox target, content hash, idempotency key, and observed result.
`EXPECTED-RETURN-FILES.txt`	Return package acceptance checklist.
`run-before-recorder.bat`	Runs read-only recorder before the manual sandbox send.
`run-after-recorder.bat`	Runs read-only recorder after the manual sandbox send.
`compute-content-hash.ps1`	Computes SHA256 for the exact test message body.
`make-return-zip.ps1`	Creates the return zip after before/after recordings and input JSON are present.

Operator rules

The package encodes these explicit markers:

LOCAL_LOGIN_UNAVAILABLE
ONLINE_SANDBOX_REQUIRED
MANUAL_ONE_SEND_ONLY
DO_NOT_SEND_SECOND_TIME
content_sha256
idempotency_key
success_ack_or_sent_record

Required online procedure:

Log in normally on an online/internal sandbox machine.
Fill SANDBOX-SEND-INPUTS.json from the template.
Run run-before-recorder.bat.
Manually send exactly one message to the declared sandbox target.
Record success_ack_or_sent_record.
Do not send a second copy.
Run run-after-recorder.bat.
Run make-return-zip.ps1.
Return the generated zip.

Safety boundary

The package does not:

send messages automatically;
upload files;
click or type;
inject or hook;
capture network traffic;
enable production send.

The only send action is the operator's one manual sandbox send inside the official client.

Acceptance gate

R6c can pass only after a returned package proves all of the following:

explicit sandbox target;
exactly one content hash;
exactly one idempotency key;
observed success/ack or local sent-record evidence;
confirmation that no second send was made;
before/after read-only recorder outputs are present.

Current decision

R6c local-preparation slice is complete, but the full online evidence gate is not passed yet.

Production isphere_send_message remains blocked.

Next node: R6d returned sandbox evidence intake after the user returns the generated package.

3.1 KiB Raw Blame History