{
  "_comment": "task-2556 §11 token boundary — OWNER token 부재 시 TokenBoundaryViolation.",
  "_scenario": "scheduler env 에 OWNER_GEMINI_TRIGGER_TOKEN 미설정 또는 BOT_GITHUB_TOKEN/GH_TOKEN 등 금지 token 만 존재. run_one_cycle 진입 시 fail-closed.",
  "env_cases": [
    {
      "label": "missing_owner_token",
      "env": {},
      "expected_exception": "TokenBoundaryViolation",
      "expected_message_contains": "OWNER_GEMINI_TRIGGER_TOKEN"
    },
    {
      "label": "forbidden_bot_token_present",
      "env": {
        "BOT_GITHUB_TOKEN": "ghp_bot_fake_value",
        "OWNER_GEMINI_TRIGGER_TOKEN": "ghp_owner_fake_value"
      },
      "expected_exception": "TokenBoundaryViolation",
      "expected_message_contains": "BOT_GITHUB_TOKEN"
    },
    {
      "label": "forbidden_gh_token_present",
      "env": {
        "GH_TOKEN": "ghp_gh_fake_value",
        "OWNER_GEMINI_TRIGGER_TOKEN": "ghp_owner_fake_value"
      },
      "expected_exception": "TokenBoundaryViolation",
      "expected_message_contains": "GH_TOKEN"
    },
    {
      "label": "empty_owner_token",
      "env": {
        "OWNER_GEMINI_TRIGGER_TOKEN": ""
      },
      "expected_exception": "TokenBoundaryViolation",
      "expected_message_contains": "empty"
    }
  ]
}