Harness coverage: under-credits authz on IDOR-shaped findings #85

Context

Filed from Track A smoke / Research nits on #83 (head 5572a1f). Not a merge blocker — Track A landed with YES-WITH-NITS.

Problem

Coverage ledger heuristics can under-credit authorization / access-control surface when the finding path is IDOR-shaped (object-level authz), so a run that did check authz may still look thin on that unit in the ledger.

Desired

When the hunter/verifier path exercises IDOR-style object access, the coverage unit(s) for authz / access-control should credit that work (or document an explicit taxonomy rule so scoring stays honest).

Notes

• Verify-before-claim and findings schema were PASS on smoke.
• Track B (KBotEpisodeAdapter) stays stub / parked on Track B: agentic swarm (≥10 roles) + team scoring eval #82.

Source

SLM Desk + Research dogfood notes from 24 Sep 2026 smoke on #83.