Token IS transmitted by HM (confirmed); the agent didn't enforce it because AM hadn't deployed the image containing the §5 check to production. So the debug log is unnecessary — removed. Contract §0.1 updated: token-check is "code-ready, pending AM prod image", not a HM gap. UI access-token/direct-URL display kept. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>