test: harden lighthouse mirror fail-closed checks

modules/fifth-domain-lighthouse-sanitized-mirror/module.lock.hdlp

@@ -2,7 +2,7 @@ schema: tcs.module-lock/v1
 module_id: TCS-AGENT-SANITIZED-MIRROR-001
 module_source_sha256: 1210b30c7dabc56b8b989763230a3cf56c0fe02a3b409be5f3833dee9853d771
 module_gir_sha256: 0e7b1bbd5f3f8dbc83df6c72e4a1e0532b6f44beed21c8c8315f85cc76096712
-runtime_sha256: cf4b328c308163683595af8c29b7e545c42f831503b1d2667349cbb8ae7d559c
+runtime_sha256: b5c87c3a4d71e5c095e0b4f43c4c26f2b27afde19d972906f383587c7dcdefa4
 mirror_map_sha256: a03b5ba9e06f5fd3f626301305d75add0332ae06948a67c8bcd03c3cab248fe1
 protocol_source_sha256: cf198e7939e4ab70828b74cef8a2b84c2dac2ff262582bb3d5663904d602d71b
 protocol_gir_sha256: 69f1a2a5cfc5ee61bdc2bf2065751d9cc41b9f662b28c35e61b393fd2187e1dc

modules/fifth-domain-lighthouse-sanitized-mirror/receipts/self-test.hdlp

@@ -0,0 +1,16 @@
+schema: tcs.module-self-test-receipt/v1
+module_id: TCS-AGENT-SANITIZED-MIRROR-001
+result: PASS
+tests: 7/7
+verified:
+  - committed architecture projection contains no private absolute path
+  - missing persona share decision creates no candidate
+  - private human data requires human consent
+  - sanitization produces quarantine only and never publication
+  - mother acceptance is required before team review
+  - both reviews bind the exact candidate hash and use independent reviewers
+  - replay with changed content and review hash drift are rejected
+repository_regression: node --test 483/483 PASS
+tcs_root_regression: 5/5 PASS
+external_publication: NOT_PERFORMED
+server_deployment: NOT_PERFORMED