baseline: green
M01 killed  widen tools: bash added; shipped-file equality test fails
M02 killed  widen tools: write added (a write tool, which waits for I4); equality test fails
M03 killed  widen network: api-only to open; equality test fails
M04 killed  widen withinRole: role.launch within-role; equality test fails
M05 killed  widen withinRole: task.create within-role; equality test and classify test fail
M06 killed  widen crossRole: task.scope.change; equality test fails
M07 killed  widen credentials: gitea scope; business fixture refuses the instance (no matching credential ref) and equality test fails
M08 killed  narrow withinRole: message.send dropped; equality and classify (within for message.send) tests fail
M09 killed  widen through limits: a limits.authority grant adds gated actions to withinRole; the limits-grant test (task.create, role.launch stay gated) must fail
