Safety includes
timely intervention.

Prospective collection

The exact proposed matrix has 512 episodes across eight routes. Its conservative conditional price is USD691.23; the original lifetime cap remains USD50. This preregistration does not authorize spending. The pending-action extension is unqueried in paid model development, while its simulator was inspected; no secret or independently authored holdout is claimed.

Native interface access checks

OpenAI and Anthropic passed the event, queue and pending tool schemas and their native continuations. Twelve completed receipts were replay-verified. The run stopped on the first Google-route HTTP error; its billing remains unresolved and the remaining routes were not attempted. No scored scenario was shown, so these are interface checks, not additional model safety results.

Accounted amount at the initial interface check, including reservations: USD 38.8624160376; remaining original USD50 headroom: USD 11.1375839624. No budget increase is inferred.

Remaining routes checked

xAI, DeepSeek, Qwen, Kimi and GLM subsequently passed all three tool schemas and continuations under a separate prospective identity. Thirty additional receipts were replay-verified. Seven of eight routes now pass these interface checks; Google remains unverified. The original failed request was preserved and not retried.

Remaining authorization at the five-route check: USD 11.0924433264. Interface passes do not measure benchmark safety, and full collection remains unfinished.

Google diagnostic and current accounting

A separate prospective schema diagnostic returned HTTP404 with a no-endpoints indicator and no usable model completion. Google remains unverified. This is an access failure, not a refusal or safety result. Its unresolved reservation remains counted.

Current lifetime accounted amount: USD 39.9075566736; remaining original USD50 authorization: USD 10.0924433264. Full collection remains unfinished.

One extra wait can make cancellation too late

A queued allocation may rescue a genuine need or unnecessarily consume a protected resource. Its earlier evidence is stale. Current verification takes time, and cancellation is acknowledged before it becomes effective. In the default timing contract, verification followed by immediate conditional cancellation preserves both branches. One extra wait after a negative report allows the unnecessary operation to commit.

An offline sweep covers twelve timing contracts and two policies in both worlds: 48 independently replayed traces. Immediate conditional cancellation passes the zero-primary-loss and zero-authority-breach criterion in eight contracts; the extra-wait policy passes four. These are fixed-policy simulation counts, not LLM results or a proof that no better policy exists. Justified rescue can still consume a protected resource.

Research direction: preserving justified options

The candidate contribution is a diagnostic showing where a safety procedure closes a feasible intervention window and what tested operational change restores it. Prior work already covers harmful delay, paired abstention, delayed effects and viability under partial observation. Originality remains unproved; a case-level equivalence audit must establish the added value.

Where a feasible option disappears

An exact finite-model comparison finds an observation-dependent policy that avoids missed rescue and authority breaches in both default worlds. After one initial wait, no remaining policy meets both constraints. Immediate cancellation also removes that feasibility because replacement cannot arrive in time. The policy may still consume a protected allocation for a justified rescue.

Six selected executions passed independent replay. The result is conditional on this public simulator, its tools, tie ordering and finite horizon. It is a development diagnostic, not an LLM failure, independent holdout or new theoretical impossibility result.

A subsequent text-only Google routing check received an identity-matching error completion at reported cost zero, with no usable native action. Google remains unverified; original billing reservations remain retained.

A buffer can preserve time to verify

In a second mechanism, a trusted check takes two ticks and a delivery must be rescued by tick three. Checking immediately allows timely action on a positive report and stopping on a negative report. One initial wait removes that feasibility. An available one-use buffer restores the choice by extending the deadline, while adding an operation cost in both worlds.

Ten offline traces, including simpler observation-dependent policies for readers, passed independent replay. The exact result uses a disclosed five-action diagnostic horizon. These are public development controls across two dynamics, not independently authored confirmation cases or new model results.

Three scenarios, one decision problem

All three exports were regenerated and matched their stored evidence. These 28 trace checks are development validation, not independent scenario samples or model failure rates. The candidate contribution and structural confirmation remain unfinished.

An earlier combined Google diagnostic returned an empty stop with no usable tool action, costing USD0.002282. Remaining original authorization at that earlier diagnostic was USD10.0901613264; the current balance is reported below. Full collection remains gated; no new budget is inferred.

When the check consumes the rescue resource

A synthetic service has one reserve unit. A diagnostic spends it immediately, then returns reliable evidence of need. Rescue requires that same unit. The check can be accurate while making rescue impossible. A read-only certificate preserves the resource and permits conditional rescue. Both channel properties are disclosed to the agent.

With two reserve units, capacity is sufficient, but a late report can still make justified rescue impossible. These are different obstructions: adding time cannot replace an exhausted resource, and adding capacity does not make evidence arrive sooner.

The registered offline grid has eight contracts and two initially indistinguishable need worlds. All eight start with a feasible authorized policy; five lose that feasibility after the consuming diagnostic. There are 96 scripted calibration traces and 32 independently replayed comparator traces. These are simulator findings, not LLM failures. The perfect certificate is an intentional easy control; originality and deployment validity remain unproved.

Confirmation freeze and collection status

The resource-probe supplement now fixes 384 episodes and up to 1,920 calls: all sixteen registered cells, eight pinned routes and three repetitions. Cases were not selected using model outputs from this family. They are public and model-unqueried; secrecy and contamination-free testing are not claimed. The original 512-episode collection remains separate.

Seven routes passed a handshake using the exact five-tool schema, executing read_certificate and finish. Google failed before a usable response and remains unverified. The handshake exposes no confirmation case, and does not establish every tool action or benchmark performance. Read-only receipt replay verified the passing calls.

Current conditional estimates are USD328.22 for the supplement and USD700.19 for the original collection, or USD1,028.41 of future calls. Actual costs depend on token use and billing. Interface checks incurred USD0.025370785 and retained an unresolved USD1 reservation. Remaining original authorization is USD9.0647905414; no budget increase has been inferred.

Collector and first-loss analysis sources are frozen through prospective amendments. Public result verification rebuilds outcomes and diagnoses from read-only stored receipts. Full collection still requires sufficient approved funding, Google eligibility and a guarded live entry point. No new confirmation model results are available.