running_without_owner
Domain:Fleet / Infrastructure
Failure mode:Orphaned process consuming resources, no accountability
Suppressor:crew token + manifest ownership gate
CRITICAL
partial_trust_gid_token
Domain:Identity / Auth
Failure mode:Privilege escalation via half-authorized session
Suppressor:GID binary gate — granted or denied, no middle
CRITICAL
deployed_without_baseline
Domain:Deployment / DevOps
Failure mode:Running code with no known-good reference — untestable drift
Suppressor:pemos baseline gate before any deploy
CRITICAL
mcp_endpoint_without_feedback
Domain:Proprioception / MCP
Failure mode:Tool calls fire, results ignored — system can't learn from outcomes
Suppressor:FastMCP tool-result webhook (TRABR-V13-WEBHOOK-FULCRUM-001)
CRITICAL
crew_active_without_wall
Domain:Fleet Governance
Failure mode:Crew operating outside SOSTLE — ungoverned authority
Suppressor:SOSTLE wall activation + crew token
HIGH
graph_node_without_provenance
Domain:PEMCLAU / GraphRAG
Failure mode:Hallucinated graph edges — untraceable knowledge drift
Suppressor:corpus/journal distinction + FC ingest gate
HIGH
half_graduated_bug
Domain:Bug Pipeline L1-L5
Failure mode:Bug promoted without completing all 5 pipeline stages
Suppressor:L5 = Type G gate — cannot skip stages
HIGH
secret_exists_without_route
Domain:Vault / Secrets
Failure mode:Secret accessible without live intent — credential exposure path
Suppressor:ADA/Tang/LUKS + intent mesh gate
HIGH
tool_registered_without_policy
Domain:MCP / Tooling
Failure mode:Tool callable without authorization policy — uncontrolled capability
Suppressor:MCP registry + ADA + tool-result feedback loop
HIGH
high_influence_without_gid
Domain:Diamond Goat / Users
Failure mode:High-influence user with no formal GID class — invisible authority
Suppressor:GID token + SOSTLE wall + trial record
HIGH
key_rotation_both_active_beyond_ttl
Domain:Crypto / Key Mgmt
Failure mode:Old and new key both valid — ambiguous authentication window
Suppressor:TTL expiry + graph edge removal on old key
HIGH
wiki_page_published_without_tier
Domain:MLW / Wiki
Failure mode:Sovereign/private content exposed at public tier
Suppressor:SOSTLE wall + MLW scanner + FC queue tier gate
HIGH
mounted_without_intent
Domain:Storage / Volumes
Failure mode:Volume mounted with no active workload — silent data exposure
Suppressor:intent mesh + mount TTL + ownership gate
MEDIUM
deferred_raincheque_forgotten
Domain:Decision / Debt Engine
Failure mode:"We'll revisit" becomes never — option silently expires
Suppressor:debt engine trigger + raincheque TTL + review queue
MEDIUM
stale_context_still_trusted
Domain:Context Battery / AI
Failure mode:Outdated session context treated as current — wrong decisions
Suppressor:colin-expires + source-hash diff + context TTL
MEDIUM
summary_impersonating_history
Domain:Memory / PEMCLAU
Failure mode:Lossy summary treated as original event — provenance destroyed
Suppressor:corpus/journal distinction — raw utterance vs curated memory
MEDIUM
dashboard_pretending_live
Domain:Monitoring / Coasters
Failure mode:Stale dashboard shows as live — false operational confidence
Suppressor:source-hash + TTL + baseline freshness gate
MEDIUM
failed_route_still_warm
Domain:Proprioception / Routing
Failure mode:Failed route not inhibited — system retries known-bad path
Suppressor:FastMCP tool-result webhook → route inhibition
MEDIUM
at_floor_but_not_real
Domain:Market Floors / γ₁
Failure mode:Fake floor support mimics γ₁ — market structure fraud
Suppressor:G1/G2/G3/GU gate + floor proof verification
MEDIUM
claim_asserted_unproven
Domain:Legal / CLO
Failure mode:Legal assertion without evidence chain — unenforceable claim
Suppressor:CLO/ARB/TRB evidence chain — claim unfiled OR filed-with-evidence
MEDIUM