fix(plugin): keep model-authored runtime status out of finalized reports

plugins/codex-security/examples/completed-scan/report.md

@@ -12,7 +12,6 @@ The scan reviewed the canonical include paths and exclusions listed below.
 - Inventory strategy: repository
 - Included paths: .
 - Excluded paths: none
-- Runtime or test status: not recorded
 
 ### Scan Summary
 

plugins/codex-security/scripts/report_projection.py

@@ -828,7 +828,6 @@ def build_report_markdown(
         f"- Inventory strategy: {coverage['inventoryStrategy']}",
         f"- Included paths: {', '.join(include_paths) or 'none'}",
         f"- Excluded paths: {', '.join(exclude_paths) or 'none'}",
-        f"- Runtime or test status: {_text(scope.get('runtimeStatus'), 'not recorded')}",
     ]
     artifacts_reviewed = _strings(scope.get("artifactsReviewed"))
     if artifacts_reviewed:

plugins/codex-security/tests/test_finalize_scan_contract.py

@@ -1874,6 +1874,20 @@ def test_finalize_generates_unsealed_reports_from_canonical_json(self) -> None:
             self.assertIn(expected, report)
         self.assertFalse((self.scan_dir / "report.html").exists())
 
+    def test_finalize_does_not_project_model_authored_runtime_status(self) -> None:
+        stale_status = "SDK finalization and sealing intentionally pending."
+        self.manifest["scan"]["scope"]["runtimeStatus"] = stale_status
+        self.write_scan()
+
+        FINALIZER.finalize_scan(self.scan_dir)
+
+        manifest = self.read_json("scan-manifest.json")
+        report = (self.scan_dir / "report.md").read_text(encoding="utf-8")
+        self.assertEqual(manifest["scan"]["status"], "completed")
+        self.assertEqual(manifest["scan"]["sealedAt"], "2026-05-31T18:09:00Z")
+        self.assertNotIn(stale_status, report)
+        self.assertNotIn("Runtime or test status", report)
+
     def test_finalize_accepts_legacy_unstructured_report_semantics(self) -> None:
         finding = self.findings["findings"][0]
         finding["validation"] = {"evidence": "legacy validation evidence"}