DungeonQ 0.16: close the alternate route, then verify the human response

DungeonQ is a defensive deception runtime for suspicious AI-agent sessions. A trusted gateway routes a designated session into a persistent synthetic world, with useful world-only Wrong Tickets, observable activity and separately approved bounded changes. The goal is to give people and authorized defender agents room to act.

v0.16 addresses a concrete lesson: protecting one route is not enough.

In the earlier Sol experiment, all three diverted sessions received the artificial target through an open alternate source, A2, despite zero reads through the main source route. Those failures remain published.

The repair applies shared tenant, resource and credential-version checks to the main source, alternate source, cache and export. A2 keeps no target copy. Cached content requires a fresh authority check; an unavailable origin produces UNKNOWN instead of stale disclosure. A world ticket or claimed role cannot grant source access.

The release also includes a separate human response path: authenticated acknowledgement, a decision to rotate access credentials, verification, and a separate decision to close the incident. Acknowledging an alert does not itself authorize rotation.

One announced, guided rehearsal completed that path with a real person and a scripted participant in an isolated artificial-resource lab. From the accepted notification-provider receipt, rotation was verified in 84.606 seconds and closure completed in 250.921 seconds. These are response durations, not extra time proven to come from deception. The original context stayed fenced. Earlier failed/incomplete attempts and uncertain delivery receipts remain visible.

The repaired boundary has automated checks and this human-flow evidence. It has not had a new paid AI trial, and it does not establish production protection or a causal advantage over transparent isolation.

Human evidence and limits:

https://github.com/Ranopha/dungeonq-amazon/blob/v0.16.0/docs/HUMAN_RESPONSE_RESULTS.md

Release, source, film and reproduction guide:

https://github.com/Ranopha/dungeonq-amazon/releases/tag/v0.16.0