test(evm-wallet-experiment): add delegation twin docker e2e test

Runs run-delegation-twin-e2e.mjs inside the away container as part of
the Docker E2E suite. Covers local cumulativeSpend enforcement and
chain-side rejection of an expired timestamp delegation.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: grypez

packages/evm-wallet-experiment/test/e2e/docker/docker-e2e.test.ts

@@ -13,6 +13,7 @@ import type {
 } from './helpers/docker-e2e-kernel-services.ts';
 import {
   callVat,
+  dockerExec,
   evmRpc,
   isStackHealthy,
   readContracts,
@@ -321,6 +322,27 @@ describe('Docker E2E', () => {
           expectations[delegationMode]();
         });
       });
+
+      // -------------------------------------------------------------------------
+      // Delegation twin
+      // -------------------------------------------------------------------------
+
+      describe('delegation twin', () => {
+        it('enforces cumulativeSpend locally; chain enforces expired timestamp', () => {
+          const delegate = resolveOnChainDelegateAddress({
+            delegationMode,
+            home: homeResult,
+            away: awayResult,
+          });
+          const scriptPath =
+            '/app/packages/evm-wallet-experiment/test/e2e/docker/run-delegation-twin-e2e.mjs';
+          const output = dockerExec(
+            kernelServices.away,
+            `node --conditions development ${scriptPath} ${delegationMode} ${homeResult.kref} ${awayResult.kref} ${delegate}`,
+          );
+          expect(output).toContain('All delegation twin tests passed');
+        }, 180_000);
+      });
     },
   );
 });