Admit checked restricted artifacts without individual code approvals

restricted-execution/service.test.mjs

@@ -437,15 +437,21 @@ test("bounded FIFO rejects overload without losing active or queued frames", asy
 test("queue wait consumes the deadline and cancelled work never reaches its ports", async () => {
   const f = await fixture(
     registry("return await channel({portId:'read',action:{kind:'state',primitive:'read'},input:null});"),
-    { deadlineMs: 350, maxActive: 1 },
+    { deadlineMs: 4000, maxActive: 1 },
   );
   try {
     const first = f.start();
-    await f.receive();
-    const queued = f.start();
-    const replies = [await f.receive(), await f.receive()];
-    assert.deepEqual(new Set(replies.map((x) => x.invocation)), new Set([first.invocation, queued.invocation]));
-    assert.ok(replies.every((x) => x.error.code === "RESTRICTED_DEADLINE"));
+    assert.equal((await f.receive()).kind, "port");
+    // Expire while the first call is deliberately blocked. Two equal relative
+    // deadlines let fast startup legitimately begin the queued call first.
+    const queued = f.start(null, { root: "queued-deadline", deadlineMs: 50, depth: 1, calls: 10 });
+    const expired = await f.receive();
+    assert.equal(expired.invocation, queued.invocation);
+    assert.equal(expired.error.code, "RESTRICTED_DEADLINE");
+    f.send({ kind: "cancel", ...first });
+    const cancelled = await f.receive();
+    assert.equal(cancelled.invocation, first.invocation);
+    assert.equal(cancelled.kind, "cancelled");
     const fresh = f.start();
     const port = await f.receive();
     assert.equal(port.invocation, fresh.invocation);