[andersalm]

A hosted model connection now activates through the native provider's strict Init schema. Runtime removes its egress_contract authority marker from the projected offer while it keeps saved connection authority and credentials in private operator configuration.

The isolated installed Home passed Continue setup, Check key, actual Inbox approval, Save and Use in Assistant. Save returned HTTP 200 after the native Init refresh, and Assistant advertised the same saved offer. Saved authority and the private credential reference stayed intact; owned processes stopped at the end. Installed proof in #143 includes exact source, artifact and receipt hashes. Readable automated media are separate from human UX acceptance.

Candidate ef292436d293745b70da73566df14fe0c4aa7c1a targets approved develop@de1db928063425856498785476809fe939663738. CI run 36796945194 passed all eight required checks; release publication was skipped. Four basic gates and 11 focused hosted hint/projection tests passed. The current task diff SHA256 30e6176467f393afb5587944bd88ccf3ac1e08f3581e8d58712b721a5056f130 exactly matches the accepted independent security review.

Required human reviewer: irzhywau. #143 remains open until the required human review and reviewed merge pass.

[andersalm]

Independent adversarial review (Claude Opus, run by the operator for Anders, 2 October; different model family from the author).
VERDICT: PASS. Egress authority is read only from the private operator offers; every Init path goes through materialize_provider_offer; the test fails without the fix.
Non-blocking: the test checks JSON only, not deserialization into the provider's strict config.