fix(quota): bind poll readback to the accounting Agent

Signed-off-by: LoopX Agent <337587101+loopx-agent@users.noreply.github.com>

Author: loopx-agent

loopx/control_plane/quota/monitor_poll_commit.ts

@@ -567,7 +567,9 @@ interface Admission {
 
 async function readMonitorSettlement(request: MonitorRequest): Promise<JsonObject | null> {
   const todoId = request.observation.settlement_todo_id ?? request.observation.todo_id;
-  const agentId = request.observation.actor_agent_id ?? request.decision.agent_id;
+  // The Turn/effect and run record belong to the decision Agent; provider actor
+  // metadata cannot select a different historical settlement to evade its fence.
+  const agentId = request.decision.agent_id;
   if (!request.runtime_root || !request.turn_instance_id ||
       !agentId || !todoId) return null;
   const snapshot = await readQuotaSettlementSnapshot(

tests/control_plane/test_monitor_unavailable_closeout_cli.py

@@ -186,16 +186,17 @@ def cli(*args: str) -> tuple[int, dict]:
             from loopx.control_plane.quota import monitor_poll as monitor_runtime
             native = monitor_runtime._native_result
 
-            def actor_optional_request(request):
-                request = {**request, "observation": {**request["observation"], "actor_agent_id": None}}
-                return native(request)
-
             # The native compatibility request permits an omitted actor;
-            # provider and settlement admission must use the same agent fallback.
-            with monkeypatch.context() as context:
-                context.setattr(monitor_runtime, "_native_result", actor_optional_request)
-                rc, missing_actor = cli(*poll_args, "--execute")
-            assert rc != 0 and missing_actor["error_code"] == "monitor_poll_admission_rejected", missing_actor
+            # provider actor metadata cannot rebind the Turn's accounting Agent.
+            for actor in (None, "other-synthetic-actor"):
+                def actor_metadata_request(request):
+                    request = {**request, "observation": {**request["observation"], "actor_agent_id": actor}}
+                    return native(request)
+
+                with monkeypatch.context() as context:
+                    context.setattr(monitor_runtime, "_native_result", actor_metadata_request)
+                    rc, actor_reply = cli(*poll_args, "--execute")
+                assert rc != 0 and actor_reply["error_code"] == "monitor_poll_admission_rejected", actor_reply
         rc, after_late = cli("todo", "list", "--goal-id", GOAL_ID)
         assert rc == 0, after_late
         monitor = next(todo for todo in after_late["todos"] if todo["todo_id"] == MONITOR_ID)