Task 4 HOST-001 frequency-proof remediation GREEN
UTC date: 2026-09-29

Focused command:
docker run --rm --network none -e CARGO_HOME=/cargo-cache -e RUSTUP_TOOLCHAIN=1.90.0-x86_64-unknown-linux-gnu -v "$PWD:/workspace" -v hippocamp-task4-cargo:/cargo-cache -v hippocamp-task4-target:/workspace/target -w /workspace hippocamp-task4-rust:local /usr/local/cargo/bin/cargo test -p realtime-noise-tools --test host_evidence --test host_frequency_evidence --test benchmark_receipt --locked --offline

Exit status: 0

Focused result:
- `benchmark_receipt`: 1 passed.
- `host_evidence`: 9 passed, including rejection of opaque provenance plus a caller-claimed minimum.
- `host_frequency_evidence`: 15 passed.
- Mutation coverage rejects truncated, sparse, duplicated, out-of-order, non-finite, below-threshold,
  wrong-logical-CPU, wrong-package/core topology, missing-core, partial affinity, unrelated provenance,
  oversized inputs, and excessive observations.

Fresh final verification:
- `cargo fmt --all -- --check`: passed.
- `cargo test -p realtime-noise-tools --test host_evidence --test host_frequency_evidence --test benchmark_receipt --locked --offline`: 25 passed.
- `cargo clippy -p realtime-noise-tools --all-targets --locked --offline -- -D warnings`: passed.
- `cargo test --workspace --all-features --locked --offline`: passed.
- `cargo build --workspace --all-features --locked --offline`: passed.
- `scripts/check-offline.sh` in the network-disabled pinned-toolchain container: passed.
- `bash tests/check-offline.sh`: all eight fail-closed scenarios passed.

Native `scripts/check-offline.sh` truthfully returned exit status 2 and
`BLOCKED_OFFLINE_DEPENDENCY` for cargo, rustc 1.90.0, rustfmt, and Clippy. No network access or
installation was attempted.

Workspace-wide strict Clippy still reaches two pre-existing warnings in untouched model files:
- `crates/model/src/archive_adversarial_tests.rs`: `items_after_statements`.
- `crates/model/tests/m0_adversarial.rs`: `uninlined_format_args`.
