Verify bounded real AI and OSS access without dialing

docs/evidence/real-ai-oss-one-shot-20261003.md

@@ -0,0 +1,8 @@
+# One authorized real-provider diagnostic — 2026-10-03
+
+Scope: one real AI request and one new OSS object, using synthetic test data. **No call, customer audio, carrier, real SaaS, or production acceptance.** The user authorized this bounded test; no existing object was overwritten or deleted.
+
+- Existing private inputs: `.local/provider-ai.env` and `aliyun-oss.env`, both mode `0600`. Only required fields were mapped in process memory; credential values, signed URLs, object names, prompt/response text and raw provider errors were not printed or committed. These legacy files are **not** current approved SaaS task/provider snapshots or Dispatcher OSS JSON configuration.
+- **AI:** one HTTPS OpenAI-compatible Bailian `qwen-plus` request through the current `ai.Binding.Complete` SDK path, with SDK retries disabled, an explicit 16-token limit and harmless synthetic text. Passed in 0.32 s; reply length 2 bytes, SHA-256 `565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3`. This checks real LLM credentials and connectivity only; it does **not** verify ASR, TTS, their compatibility with the current approved provider schema, or an actual call.
+- **OSS:** one HTTPS presigned PUT using the existing official OSS v2 signer and Agent uploader. A cryptographically unique key under the isolated integration-test prefix prevented replacement of any previous object. The synthetic 27,648-byte payload was accepted, and the uploader confirmed local SHA-256 `c6fce42774195e84f761abfbb0d8cbb6a94c7a00d85479cd170faf819f6c22e2`. The test object is retained; no GET, deletion, real recording, or SaaS receipt was claimed. The test has a 45-second deadline and does not blindly retry an uncertain PUT.
+- `make check` passed; business unit coverage **70.5%**. Its Mock checks do **not** run these separately opted-in external requests. Current real-call entry remains Mock-only, the current test host lacks tcpdump and ARI/HTTP configuration, and the required capture gate still forbids dialing. Historical `agent --call-once` and its ARI runtime were removed; this diagnostic does not restore them.