{
  "schema":"hella.exp018.summary.v1",
  "policy_lock_commit":"2e611875f",
  "harness_preregister_commit":"c4ea04bea",
  "trials":{"benign":24,"incident":24},
  "metrics":{
    "benign_hard_freeze_rate":0.125,
    "benign_pacing_rate":0.166667,
    "incident_premature_freeze_rate":0.208333,
    "incident_first_freeze_at_or_after_compromise_rate":0.791667,
    "detection_delay_median_nonpremature_phases":0,
    "clean_recovery_rate":1.0,
    "checkpoint0_rate":0.083333
  },
  "key_breakdown":{
    "scheduled_cache_refresh":{"freeze":0,"pace":3,"trials":3},
    "unscheduled_cache_refresh":{"freeze":3,"pace":0,"trials":3},
    "intent_abuse":{"incident_trials":6,"incident_phase_scope_check":"all out-of-scope destructive mutations remained FREEZE candidates"}
  },
  "finding":"A scoped trusted change-intent lease removed hard freezes for planned cache refresh by downgrading containment to PACE, while out-of-scope intent-abuse mutations remained subject to FREEZE. Unscheduled legitimate cache refresh remained ambiguous and still hard-froze.",
  "truth_boundary":"Prospective controlled lab challenge on a real disposable iSCSI path. Intent lease is external lab metadata, not a cryptographically signed production credential."
}