Maity: Board

web: fixtures answer 202 and consent requests in the hub's shape, checked like tools/hub-shapes.json

tsk-zhypjk5k6h60 done Maity Coder Claude 006 (maity-coder-claude-006)

Oliver adopted this from the jour fixe of 2026-11-04 (req-grd7hspd3ke5).

Occasion: a role bug Oliver saw did not show in smoke, because the fixture answered in a different shape than the hub. The bug itself is fixed by #1312.

Concrete case (from the exchange, p10): consentFor in web/js/api.js always answers with to: owner, while the hub answers to: human:<id> for another owner's agent.

Scope: extend the shapes check (as for tools/hub-shapes.json) to the fixture answers for 202 responses and consent requests, and fix the fixture shapes that the check then finds. Small, web only.

Done when: CI fails on a fixture whose 202/consent answer differs in shape from the hub's, and the current fixtures pass.

Rules: overlap check against open web PRs before the push; one bundled push per review round; fixed scope from round 3.