- The engagement probe no longer counts an invalid_policy block as an
external credential takeover (review F4): auth/config commands were
answering "credentials are provided externally" for a mistyped
LARKSUITE_CLI_DEFAULT_AS/STRICT_MODE, while whoami correctly said
invalid_argument. The probe skips such blocks; the command's own
resolution then surfaces the precise typed error.
- config show overrides the parent gate entirely: it inspects the SAVED
config only (its help promises "saved config, not current usage"),
so the currently effective credential source must not decide whether
it runs (review delivery finding). The blocked-commands pin drops
show and a command-level test locks the bypass.
- AccountDirect is now an enforced contract, not a comment (review F5):
only the builtin env provider may declare it, and gather fails fast
otherwise instead of producing self-contradictory diagnostics. The
SPI documents the reservation.
e28f91794a