no-mistakes(review): Split retired-alias audit into fail vs warn; fix key claim

tests/test_audit_hermes_config_alias.py

@@ -132,17 +132,20 @@ def test_retired_alias_in_custom_providers_is_rejected(tmp_path):
     assert "RESULT: FAIL" in out
 
 
-def test_raw_alias_is_rejected(tmp_path):
-    """Raw-but-live model names must fail too, pointing at the stable alias."""
+def test_raw_but_live_alias_warns_but_passes(tmp_path):
+    """Raw-but-live names resolve (200), so they warn only; failing them rejects valid configs."""
     code, out = _run_config(
         tmp_path,
         "raw-qwen.yaml",
-        BASE.format(alias="gpu-vision").replace("default: syslog-auto", "default: qwen3.6-27B-code"),
+        BASE.format(alias="gpu-vision").replace(
+            "delegation:\n  provider: harness",
+            "delegation:\n  provider: harness\n  model: qwen3.6-27B-code",
+        ),
     )
-    assert code == 1, out
-    assert "model.default = 'qwen3.6-27B-code'" in out
-    assert "gpu-dense" in out
-    assert "RESULT: FAIL" in out
+    assert code == 0, out
+    assert "delegation.model = 'qwen3.6-27B-code' is a raw-but-live model name" in out
+    assert "prefer the stable alias gpu-dense" in out
+    assert "RESULT: PASS" in out
 
 
 def test_retired_alias_in_fallback_providers_is_rejected(tmp_path):