# Designated Linux gate — black-box substrate tier

## Provenance (captured BEFORE the run, from the clean commit under test)
git rev-parse HEAD : 148f117277da567599e2e21c74a043d3b45fe14d
git status --porcelain:
<empty — clean worktree>
run-started-utc     : 2026-07-29T23:30:51Z

## Host
uname -srm: Linux 7.0.0-28-generic x86_64
kernel.unprivileged_userns_clone: 1
bwrap: /usr/bin/bwrap — bubblewrap 0.9.0
prerequisite probe (bwrap --unshare-all --die-with-parent --ro-bind / / true): PASS (rc 0 — bwrap confines)

## Six-test tier
```
============================= test session starts ==============================
collecting ... collected 6 items

tests/test_access_sandbox_blackbox.py::test_state_sandboxed_full_runs_confined PASSED [ 16%]
tests/test_access_sandbox_blackbox.py::test_state_off_bypass_runs_unsandboxed PASSED [ 33%]
tests/test_access_sandbox_blackbox.py::test_state_degraded_soft_falls_and_runs PASSED [ 50%]
tests/test_access_sandbox_blackbox.py::test_state_refused_denies_run PASSED [ 66%]
tests/test_access_sandbox_blackbox.py::test_convention_import_smoke_runs_genuinely_confined PASSED [ 83%]
tests/test_access_sandbox_blackbox.py::test_black_box_states_cover_every_substrate_descriptor PASSED [100%]

============================== 6 passed in 0.75s ===============================
```

run-finished-utc: 2026-07-29T23:30:52Z
