Source: MIZOKI audit 2026-09-06 (pinned fc8b03f9) → work-order backlog 2026-09-08 (docs/audits/AUDIT_WORK_ORDERS_2026-09-08.md). Findings are hypotheses until reproduced on current main (WO-00).

Finding: Experiment sufficiency depends on a proposer boolean; a nonblank holdout ID at the adapter does not prove pre-exposure registration [R4]. Files: services/service-action-runner/execution_adapters/base.py, meta_ads.py (holdout checks); DCP. Fix: adapter resolves holdout ID against the experiment registry; requires registered_at < first_exposure_at and a matching tenant. Acceptance: unregistered ID, post-exposure registration, other-tenant registration → refused. Depends on: WO-03.