randomayzer/agents/codex/inbox/2026-10-19-smoke-mock-fix.md

Audit-loop fix — prevent mock data as live VK evidence

Base/reviewed SHA: 17faecd962 Original task authorizes coder/audit repair loop. Independent auditor1 MEDIUM: explicit USE_VK_MOCK=true can make live smoke D/F/G/H report generated data as real VK. Scope: forbid mock-provider selection in production; expose nonsecret provider mode in preview/import response; require LIVE mode in smoke and nonempty import before reporting subscription check; add exact reproducer regression in new test file. Preserve all existing tests except previously authorized seed assertions. No credentials/production host changes. Definition of Done: mock PoC fails safely; live-mode fixture passes automated checks, B remains MANUAL; full gates and independent rereview.