test: restore isolated trusted Strix fixture runtime

[seonghobae]

Carry the missing trusted fixture runtime delta from #2291 onto current main. Specialized fixtures copied the gate and model helper into consumer roots without the binder, producing exit code 2. Reuse the existing three-file materializer in a separate trusted-source directory and pass STRIX_REPO_ROOT explicitly for 24 specialized fixtures plus the base fixture. Strengthen the boundary regression to catch direct copying as well as helper-based consumer-root materialization. Update three stale OpenCode coverage assertions for materialization folded into validate-pr-metadata, retaining credential, artifact and exact-commit checks. Verification: 43 Strix tests passed with GITHUB_ACTIONS=true; bash syntax and diff checks passed. The full shell harness is still running against frozen matching bytes; no terminal pass is claimed. Keep draft until that run concludes. This is partial carryover and does not retire all unique deltas in #2291.

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[seonghobae]

Full shell-harness session 19584 terminated with exit 0 and final test_strix_quick_gate: PASS on frozen source 0d83b45. Both the harness and production gate matched their start-time SHA-256 receipt after completion. The preceding full run had four failures in the source-preservation case; those were repaired, not ignored.

Fresh main eb1bdc9 was integrated without conflict. Final candidate 5095d01 preserves byte-identical tested harness and gate; all 44 boundary/runtime/binder tests pass again after integration. Whitespace checks pass.

This repairs missing trusted fixture carryover and obsolete OpenCode harness contracts. It does not retire every unique delta of #2291, or establish actual provider scan success. Hosted checks and independent approval must be reported accurately; maintainer-authorized queue bypass is separate from green protected delivery.