✕Unverified value reaches a skill input candidate.level is rewritten by Interviewer agent, then feeds rubric-scorer.rubric_id with no deterministic validation.
!Agent exit not wired Interviewer agent · candidate_quit has no target
!Latency over budget on one path Via hint-ladder: agent-turn P95 1.4 s, budget 1.2 s
✓Disclosure precedes any capture Every path to Verify candidate passes Recording disclosure
✓No PII in agent context candidate.email and candidate.phone denied to all agent regions
✓Skills pinned to certified versions hint-ladder v1.4 (beta) allowed by workspace exception
✓Every node has an owner 9 nodes · 2 policy-owned by Compliance