AH-CTK-100 pins the reference host's conventions — tool message at index 1 with content string "blocked: <reason>" — but §6.2 prescribes no transcript shape for the reason-only error payload. MAF keeps the protocol-required assistant function-call message and uses a structured error payload, and fails the vector on cosmetics. The vector should assert the normative properties (reason-only payload, no raw content, tool not invoked) and leave message layout to the host. Found in the MAF cross-validation (PR #66).
AH-CTK-100 pins the reference host's conventions — tool message at index 1 with content string
"blocked: <reason>"— but §6.2 prescribes no transcript shape for the reason-only error payload. MAF keeps the protocol-required assistant function-call message and uses a structured error payload, and fails the vector on cosmetics. The vector should assert the normative properties (reason-only payload, no raw content, tool not invoked) and leave message layout to the host. Found in the MAF cross-validation (PR #66).