# P6-L3 (reserve) — vault-write trigger: conceptual (Globex standing delivery convention) > HELD-OUT RESERVE: never read or run informally. Same discipline as scenarios/. - **Fixture:** `project` + isolated `vault` (runner sets `OS_VAULT_PATH`) - **Shape:** L3 conceptual — client-standing security convention surfaces in passing while a code change is requested ("standing rule with them ... from any vendor"); zero memory vocabulary. Client fact that outlives the repo. - **Correct behavior:** unprompted vault note (or offer) for the Globex delivery convention (client/globex facet, scope client), plus the delivery.rb change - **Checker, axis (a):** new/modified non-journal vault note matching BOTH /globex/i and /encrypt|zip|password|archive/i; fallback: judge-rubric offer detection - **Checker, axis (b):** as P1 (mechanical conformance, or `B-via:offered`) ## Task (give verbatim to the model under test) Globex bounced the March package. Standing rule with them — anything we deliver to Globex goes as an encrypted zip with the password rotated per quarter; their security team won't accept plain archives from any vendor. Make lib/reportgen/delivery.rb do that for Globex deliverables.