test(#829): regress claudex bypass and per-tool coverage gaps

docs/scratchpads/829-mutator-gate.md

@@ -64,3 +64,10 @@ Carried authority chain also verified/read for the locked T-B gate contract: SPE
 - Consume WI-1 VERIFIED-lease state; do not re-derive kernel identity, ancestry, sessions, or token authentication.
 - Minimum 85% new-code coverage; full suite, lint, typecheck, and format checks green.
 - Build only: no self-review and no merge. Open a PR containing `closes #829`, report its exact 40-character head, then exit.
+
+## Remediation — terra CODE comment 18091
+
+- Coordinator correction: terra returned REQUEST CHANGES at head `77b137ccc04b5be035cac5ca21bbbf3df8b94f97`; Opus SECREV was GO and CI green, but no evidence transfers to the remediated head.
+- BLOCKER 1 verified: first-class Claude/Pi route through `execLeaseGatedRuntime`, while the supported Claudex path preserves isolation but directly invokes `claude`; it therefore registers no anchor, injects no lease session, and the isolated config has no guaranteed all-tools gate hook.
+- BLOCKER 2 accepted: prior 88% was aggregate evidence. Remediation must produce independently measured branch coverage of at least 85% for each new executable (`launch-runtime.py`, `mutator-gate.py`, and daemon delta evidence), including successful exec-boundary collection and validation/error branches.
+- Remediation discipline: RED tests first; preserve the reviewed-good broker lock/state-transition ordering; update PR #837 on the same branch; no self-review or merge.