--- a/mrjunejune/test/production_inference_bundle_test.sh	Fri Aug 07 07:34:12 2026 -0700
+++ b/mrjunejune/test/production_inference_bundle_test.sh	Fri Aug 07 10:50:30 2026 -0700
@@ -41,6 +41,10 @@
 entrypoint="$(find -L "$bundle" -type f -name production_entrypoint.sh -print -quit)"
 bash -n "$entrypoint"
 grep -q 'mrjunejune_server_binary' "$entrypoint"
+if grep -q 'MRJUNEJUNE_ALLOW_.*INFERENCE' "$entrypoint"; then
+  echo "Production entrypoint must not override guest policy from .config" >&2
+  exit 1
+fi
 
 sidecar="$(find -L "$bundle" -type f -path '*/mrjunejune/inference/copilot_sidecar.zip' -print -quit)"
 litellm="$(find -L "$bundle" -type f -path '*/mrjunejune/inference/litellm_proxy.zip' -print -quit)"
@@ -49,6 +53,34 @@
 state="$(mktemp -d)"
 trap 'rm -rf "$state"' EXIT
 
+sidecar_files="$(unzip -Z1 "$sidecar")"
+for required in \
+  'mrjunejune/inference/public_knowledge.py' \
+  'mrjunejune/assistant/common.md' \
+  'mrjunejune/assistant/public_visitor.md' \
+  'mrjunejune/assistant/invited_friend.md' \
+  'mrjunejune/assistant/june_admin.md' \
+  'mrjunejune/assistant/knowledge/public_facts.json'; do
+  if ! grep -q "$required" <<<"$sidecar_files"; then
+    echo "Copilot sidecar is missing assistant prompt data: $required" >&2
+    exit 1
+  fi
+done
+
+facts_path="$(
+  grep 'mrjunejune/assistant/knowledge/public_facts.json$' \
+    <<<"$sidecar_files"
+)"
+facts="$(unzip -p "$sidecar" "$facts_path")"
+grep -q '"visibility": "public"' <<<"$facts"
+grep -q '"status": "verified"' <<<"$facts"
+if grep -Eqi \
+    '[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}|650-531-1728|437-580-8026' \
+    <<<"$facts"; then
+  echo "Copilot sidecar public knowledge contains contact data" >&2
+  exit 1
+fi
+
 output="$(
   printf '%s\n' '{"command":"shutdown","request_id":"bundle-test","conversation_id":null}' |
     COPILOT_SIDECAR_HOME="$state/copilot" \
@@ -58,4 +90,7 @@
     "$python" "$sidecar" "$copilot_cli"
 )"
 grep -q '"type":"ready"' <<<"$output"
+grep -q '"public_visitor"' <<<"$output"
+grep -q '"invited_friend"' <<<"$output"
+grep -q '"june_admin"' <<<"$output"
 "$python" "$litellm" --help >/dev/null