From bc4e94166de0b0d024ca9e61eb5eacdfb94ea2bf Mon Sep 17 00:00:00 2001
From: Lena <lena@mosaicstack.dev>
Date: Sat, 24 Oct 2026 04:59:10 -0500
Subject: [PATCH] row 296: record scoped scratch acceptance and mutant evidence
 (#1802)

---
 BUILD-LOG.md                                  |  9 +++
 agents/lena/work/queue-296/BUILD.md           | 57 ++++++++++++++++++
 agents/lena/work/queue-296/MANIFEST.md        | 20 ++++---
 agents/lena/work/queue-296/MANIFEST.sha256    | 28 +++++++--
 agents/lena/work/queue-296/run-r2/M1.exit     |  1 +
 agents/lena/work/queue-296/run-r2/M1.log      | 59 ++++++++++++++++++
 agents/lena/work/queue-296/run-r2/M1.tmpdir   |  1 +
 agents/lena/work/queue-296/run-r2/M2.exit     |  1 +
 agents/lena/work/queue-296/run-r2/M2.log      | 60 +++++++++++++++++++
 agents/lena/work/queue-296/run-r2/M2.tmpdir   |  1 +
 .../lena/work/queue-296/run-r2/killed-1.exit  |  1 +
 .../lena/work/queue-296/run-r2/killed-1.log   | 41 +++++++++++++
 .../work/queue-296/run-r2/killed-1.tmpdir     |  1 +
 .../lena/work/queue-296/run-r2/patch-ids.txt  |  8 +++
 .../lena/work/queue-296/run-r2/plain-1.exit   |  1 +
 agents/lena/work/queue-296/run-r2/plain-1.log | 10 ++++
 .../lena/work/queue-296/run-r2/plain-1.tmpdir |  1 +
 .../work/queue-296/run-r2/pre-mutants.sha256  |  2 +
 .../lena/work/queue-296/run-r2/range-diff.txt | 31 ++++++++++
 .../work/queue-296/run-r2/tmpdir-cleanup.txt  |  5 ++
 .../work/queue-296/run-r2/whole-file.exit     |  1 +
 .../lena/work/queue-296/run-r2/whole-file.log |  9 +++
 .../work/queue-296/run-r2/whole-file.tmpdir   |  1 +
 docs/SESSIONS.md                              |  1 +
 24 files changed, 339 insertions(+), 11 deletions(-)
 create mode 100644 agents/lena/work/queue-296/run-r2/M1.exit
 create mode 100644 agents/lena/work/queue-296/run-r2/M1.log
 create mode 100644 agents/lena/work/queue-296/run-r2/M1.tmpdir
 create mode 100644 agents/lena/work/queue-296/run-r2/M2.exit
 create mode 100644 agents/lena/work/queue-296/run-r2/M2.log
 create mode 100644 agents/lena/work/queue-296/run-r2/M2.tmpdir
 create mode 100644 agents/lena/work/queue-296/run-r2/killed-1.exit
 create mode 100644 agents/lena/work/queue-296/run-r2/killed-1.log
 create mode 100644 agents/lena/work/queue-296/run-r2/killed-1.tmpdir
 create mode 100644 agents/lena/work/queue-296/run-r2/patch-ids.txt
 create mode 100644 agents/lena/work/queue-296/run-r2/plain-1.exit
 create mode 100644 agents/lena/work/queue-296/run-r2/plain-1.log
 create mode 100644 agents/lena/work/queue-296/run-r2/plain-1.tmpdir
 create mode 100644 agents/lena/work/queue-296/run-r2/pre-mutants.sha256
 create mode 100644 agents/lena/work/queue-296/run-r2/range-diff.txt
 create mode 100644 agents/lena/work/queue-296/run-r2/tmpdir-cleanup.txt
 create mode 100644 agents/lena/work/queue-296/run-r2/whole-file.exit
 create mode 100644 agents/lena/work/queue-296/run-r2/whole-file.log
 create mode 100644 agents/lena/work/queue-296/run-r2/whole-file.tmpdir

diff --git a/BUILD-LOG.md b/BUILD-LOG.md
index c3887e812..591017252 100644
--- a/BUILD-LOG.md
+++ b/BUILD-LOG.md
@@ -5483,3 +5483,12 @@ Before: R4 and R6 landed in base 45dca69f6; no scratch two-instance acceptance s
 Plan: preserve Quackerjack handoff c6ab9bdc9, add isolated script/CLI test harness with real
 Console proof in transient user services, map assertions and two mutants for Filbert.
 Untested: all Node/tests and shared gate wait for Sage CLEAR; no production or live state changes.
+
+## 2026-10-24 — Lena, row 296 / #1802 scoped acceptance verified
+
+After: lena/row296-r2 rebased onto e0c6142f3 with both append logs preserved and row source
+unchanged. Own root/webui npm ci (128/2 packages), canonical dependencies untouched. Sage-4035
+slot: plain acceptance 1/1, killed-driver cleanup expected exit1 with cleanup verified, M1/M2
+both killed by named assertions with product hashes restored, whole new file intentionally
+skips outside its script. No unexpected first-run red, no old test change, no full/shared gate
+claim. Receipts and limitations in agents/lena/work/queue-296/BUILD.md and run-r2/.
diff --git a/agents/lena/work/queue-296/BUILD.md b/agents/lena/work/queue-296/BUILD.md
index f4357684c..e48156988 100644
--- a/agents/lena/work/queue-296/BUILD.md
+++ b/agents/lena/work/queue-296/BUILD.md
@@ -264,3 +264,60 @@ federation-acceptance.test.mjs and its fixture host/human children. They do not
 stack-release or the whole CLI suite. Existing helpers are imported; no old test module is run.
 Asked Researcher to confirm against row216. Full CLI suite remains a later Sage gate requirement,
 outside the targeted T3 command list. All test resources are unique scratch state.
+
+### R2 rebase and slot start, 2026-10-24, sage-4035/4036/4038
+
+New branch lena/row296-r2, base e0c6142f3a411ed70e32b2c50d01930e0b0641c8.
+Original branch remains a1321f8f9; no force push. Rebased tip before evidence: 17e421cf4.
+Only conflicts were append-only BUILD-LOG.md and docs/SESSIONS.md: retained all new-base bytes
+and appended this row's original suffix. All other row files byte-identical to a1321f8f9.
+Range-diff receipt: run-r2/range-diff.txt. Patch IDs: run-r2/patch-ids.txt.
+Mapping: ad84c1e45=4a16ebaa4, f06a1f78c→6418b1b12 (only append-log context),
+e855f82e1=bbc38067f, a1321f8f9=17e421cf4. Stable patch IDs match for 1/3/4;
+commit 2 differs because patch-id includes changed append-log context. No source delta.
+
+The prior local root node_modules symlink was unlinked without following it. Own-worktree root
+npm ci --ignore-scripts --no-audit --no-fund: exit 0, 128 packages. Own-worktree webui same
+command: exit 0, 2 packages. Both node_modules are real local directories. Canonical dependencies
+were never installed, removed or changed. This supersedes the earlier link-based setup note.
+
+Root install had completed before sage-4036 arrived. Exact queue command from worktree refused
+linked-worktree policy; reported as lena-0013 and held tests. Sage-4038 authorized queue verbs
+only in canonical; no npm/rm there. All further tests run in this worktree under short scratch
+TMPDIR, serially: plain script, killed-driver negative exercise, M1, M2, touched new test whole.
+Filbert cleared C1 on a1321f8f9 (filbert-296-c1-cleared); rebase preserves those source bytes.
+
+### Scoped acceptance results, 2026-10-24 09:55–09:57Z
+
+Queue start succeeded: lena-296-start rev3888, briefed→in-progress, through the authorized
+canonical queue route. Earlier retries refused Sage assignment locks; no lock bypass occurred.
+
+Commands ran serially in this worktree, each with a newly created six-character external TMPDIR
+under /mnt/storage/scratch/tmp and timeout -k 10. The script itself additionally creates its own
+unique r7.* root and owns child group cleanup. All five external TMPDIRs were empty and removed
+afterward (run-r2/tmpdir-cleanup.txt). No product/test source changed to obtain these results.
+
+| Run | Exit | Node pass/fail/skip/cancel | Evidence |
+| --- | --- | --- | --- |
+| plain script, timeout 600 | 0 | 1/0/0/0 | run-r2/plain-1.log, 3.788 s Node duration |
+| --kill-after-start, timeout 600 | 1 expected; negative wrapper 0 | 0/1/0/0 expected SIGKILL | run-r2/killed-1.log, both-Consoles-started marker and cleanup line |
+| M1 driver, timeout 600 | 0 (script 1 expected) | 0/1/0/0 expected mutation | run-r2/M1.log, KILLED by R7 ungranted project must not appear |
+| M2 driver, timeout 600 | 0 (script 1 expected) | 0/1/0/0 expected mutation | run-r2/M2.log, KILLED by R7 revoke must end the claim as access-revoked |
+| new test whole without script context, timeout 60 | 0 | 0/0/1/0 | run-r2/whole-file.log, expected dedicated-script skip |
+
+Every script run printed exactly `R7 cleanup: no child groups, ports or sockets remain; no units
+created`. The killed-driver run exercised shell cleanup with no Node teardown hooks. M1 and M2
+failed on assertions, not startup failure or timeout; the runner found the named assertion and
+cleanup marker. pre-mutants.sha256 checked after each mutation: access.mjs and broker.mjs both
+restored byte-for-byte. git diff against e0c6142f3 confirms neither product path changed.
+
+No unexpected first-run red: plain acceptance passed on its first run. Only the deliberate killed
+and mutated runs failed. The ordinary-file skip is intentional; the plain script ran its full test
+without skips. Module-mocking experimental/deprecation warnings are fixture-only. No old test
+was run or changed, so no mos-1272 placement was needed. N3 and N6 remain optional diagnostics;
+N1's documented spawn-to-ledger SIGKILL gap remains outside the killed-driver scenario.
+
+Scope per sage-4035: dedicated script, touched new test whole, both mutants and cleanup checks.
+No full CLI suite, unrelated package suite, webui build or other scripts/test-*.sh ran in this slot.
+Those broader earlier review/gate requirements remain for Sage's integration gate; no full gate
+claim is made here. R8/live acceptance, real ancestry proof and deployment remain out of scope.
diff --git a/agents/lena/work/queue-296/MANIFEST.md b/agents/lena/work/queue-296/MANIFEST.md
index 888d60b8f..96f173c3c 100644
--- a/agents/lena/work/queue-296/MANIFEST.md
+++ b/agents/lena/work/queue-296/MANIFEST.md
@@ -1,9 +1,9 @@
-# Row 296 / #1802 — C1 follow-up candidate (Untested)
+# Row 296 / #1802 — R2 scoped acceptance verified; review pending
 
-Base: 45dca69f6. Branch: lena/row296. Reviewer: Filbert. Gate owner: Sage.
-Handoff: c6ab9bdc9 preserved as ad84c1e45, including
+Base: e0c6142f3a411ed70e32b2c50d01930e0b0641c8. Branch: lena/row296-r2. Reviewer: Filbert. Gate owner: Sage.
+Handoff: c6ab9bdc9 preserved as ad84c1e45, rebased as 4a16ebaa4, including
 agents/quackerjack/work/queue-296/BUILD.md. Every changed path is in MANIFEST.sha256,
-except this manifest and the checksum file itself. No product file or pre-existing test changed.
+except the checksum file itself (self-hash is excluded). No product file or pre-existing test changed.
 Pre-existing test numstat: empty. BUILD-LOG.md and docs/SESSIONS.md are append-only additions.
 
 Binding ruling: sage-3625 replaces the brief's transient-unit start with plain child Consoles and
@@ -45,7 +45,7 @@ packages/cli/tests/federation-acceptance.test.mjs.
 | Normal cleanup | EXIT trap terminates only recorded pid/startTime-checked groups; checks no live group member, no recorded TCP/Unix listener, no other scratch Unix listener, removes scratch directory/socket files |
 | Killed-driver cleanup | --kill-after-start prints both-Consoles-started marker then SIGKILLs test driver; shell performs the same independent cleanup; expected nonzero run with successful cleanup line |
 
-## Verification commands (held for Sage CLEAR)
+## Verification commands (executed on sage-4035 CLEAR)
 
 - scripts/test-federation-acceptance.sh — must exit 0, one acceptance test passes, cleanup line present.
 - scripts/test-federation-acceptance.sh --kill-after-start — must exit nonzero, print the explicit
@@ -54,9 +54,9 @@ packages/cli/tests/federation-acceptance.test.mjs.
   `R7 ungranted project must not appear` and verify cleanup, then restore original source bytes. Python relies on the shell's own run deadline and cleanup; no outer killing timeout.
 - python3 agents/lena/work/queue-296/mutants.py M2 — once-only R4 claim end omitted; must fail
   `R7 revoke must end the claim as access-revoked` before shutdown, verify cleanup and restore bytes.
-- Sage's gate: the new script plus every scripts/test-*.sh; full applicable suites per Sage's slot.
+- Sage integration gate remains separate: every scripts/test-*.sh and full applicable suites per Sage; not run in this scoped slot.
 
-Status: no Node, acceptance or mutant run. Static Bash syntax, Python parsing and diff checks only.
+Status: scoped gate passed: plain 1/1 (exit 0), killed-driver expected exit 1 with verified cleanup, M1/M2 drivers exit 0 with named assertion kills and source restoration; normal whole-file invocation exit 0 with one intentional dedicated-script skip. All cancellations 0. Receipts in run-r2/; counts and commands in BUILD.md.
 The script never silently skips a missing tool/sandbox/provider: prerequisites fail the acceptance.
 Ordinary CLI suites skip the dedicated test until invoked by its owning script.
 
@@ -65,3 +65,9 @@ cannot SIGKILL the shell before EXIT cleanup. N2 moves the named claim-history a
 the process-end wait. N1's spawn-to-ledger SIGKILL gap is retained and documented in BUILD.md;
 --kill-after-start exercises the fully recorded groups. N3 remains a cosmetic fixture limitation.
 N4 indentation corrected. N5 scratch-bootstrap config overwrite is explicitly fixture-only.
+
+R2 provenance: source identical to the statically cleared a1321f8f9. Rebase mapping/range-diff
+and stable patch IDs are in run-r2/. Only append-log conflict context changed. No unexpected
+first-run failure, no old test changed/run, and no broader suite or shared gate claimed.
+Manifest coverage is the complete changed-path set over e0c6142f3..candidate, including all
+text evidence and this description; only MANIFEST.sha256 itself is excluded from its own hash.
diff --git a/agents/lena/work/queue-296/MANIFEST.sha256 b/agents/lena/work/queue-296/MANIFEST.sha256
index 601f44e53..b71ac1da5 100644
--- a/agents/lena/work/queue-296/MANIFEST.sha256
+++ b/agents/lena/work/queue-296/MANIFEST.sha256
@@ -1,8 +1,28 @@
-6e0193ba91cbd20edd3acfbc57ae9af2f016e6d2c3587b434a9085b3a02c493c  BUILD-LOG.md
-72029331a22f33433ad14ff08fe8b24d59f79e784009b12fd9c5b74c9e524f13  docs/SESSIONS.md
-87239327014c49abbe130c17881bb48e13d96545bf9f3e09b6f4aed46e11453b  agents/quackerjack/work/queue-296/BUILD.md
-6f32d7e5e0c2c1ee086949a68b176a9d1fefb8ad0df562f5ce72b0c01d21e7a0  agents/lena/work/queue-296/BUILD.md
+97a7d3518ac0e3f823c631d6616cea3de277040c673acd016f5bb0efd627938f  BUILD-LOG.md
+5d040043c9ef15a5343ac4bc8382051c67c6bce13f273b7b16071e9e16e42c5d  agents/lena/work/queue-296/BUILD.md
+1b853af963c754152466ae77a27e2136087192abd8cc912045b6d95c4c094e11  agents/lena/work/queue-296/MANIFEST.md
 bd6e9fd9e3f7aa0ee6702401776ef7bd3e39562059a11b87aaaf2a427904381b  agents/lena/work/queue-296/mutants.py
+9a271f2a916b0b6ee6cecb2426f0b3206ef074578be55d9bc94f6f3fe3ab86aa  agents/lena/work/queue-296/run-r2/M1.exit
+50ac6f0ea22cc671e4056385fc2feb4d015bfe853a9393a60a6cb38a10ad6cb2  agents/lena/work/queue-296/run-r2/M1.log
+5079eaa8fcc6964072f7ba20333ba77607fa25729697182151bb3739f3ab15f8  agents/lena/work/queue-296/run-r2/M1.tmpdir
+9a271f2a916b0b6ee6cecb2426f0b3206ef074578be55d9bc94f6f3fe3ab86aa  agents/lena/work/queue-296/run-r2/M2.exit
+793b40f72e600ca71d6a29d058b2f11b4aaa0388dd80e8e6f8a925f46af589d7  agents/lena/work/queue-296/run-r2/M2.log
+01ef19b3acc3ac7f8cf0e69e31b8a0ef5413264109be154987993e0c8ce845d5  agents/lena/work/queue-296/run-r2/M2.tmpdir
+4355a46b19d348dc2f57c046f8ef63d4538ebb936000f3c9ee954a27460dd865  agents/lena/work/queue-296/run-r2/killed-1.exit
+6333824a3def94fc983f4d9ede08ae3301dd31921fae350cec77e9b7c220c963  agents/lena/work/queue-296/run-r2/killed-1.log
+67809d95a8b102392c23ed05e347ad461fc6eee8b66b0a732251be476ca99f08  agents/lena/work/queue-296/run-r2/killed-1.tmpdir
+c8a0c8d9d9a2c723aab5cfcb973713903a0914ec46394215533531f17a7eeeaf  agents/lena/work/queue-296/run-r2/patch-ids.txt
+9a271f2a916b0b6ee6cecb2426f0b3206ef074578be55d9bc94f6f3fe3ab86aa  agents/lena/work/queue-296/run-r2/plain-1.exit
+ae2d6a16a97907384f992ef847be503eae0124bd378648fd620717450d56f2f7  agents/lena/work/queue-296/run-r2/plain-1.log
+254a104ac320b5b8e7ed792b373e5ca3af0febb94d705dc62b54fc6545fe9395  agents/lena/work/queue-296/run-r2/plain-1.tmpdir
+97858a98531f635813404f1c2a149f9e3d620444ca4cddb49b1e035cb91fa73d  agents/lena/work/queue-296/run-r2/pre-mutants.sha256
+f431f734d74169b9c0932dedadf4cb2bac7ecc37e0ee93f1009b90c5b7bf6541  agents/lena/work/queue-296/run-r2/range-diff.txt
+36d4dcb2e1a816b5bdde0c1f47510d7e059f86810b75f6e10a5ca91c8341fe4b  agents/lena/work/queue-296/run-r2/tmpdir-cleanup.txt
+9a271f2a916b0b6ee6cecb2426f0b3206ef074578be55d9bc94f6f3fe3ab86aa  agents/lena/work/queue-296/run-r2/whole-file.exit
+615834d38c4b90b0dc04529c6fc7f280a6e30e1b81c1658bd2e7d5a55e932e01  agents/lena/work/queue-296/run-r2/whole-file.log
+6e9863193aa62750f7ce89f17484973d5d85ef61980782d353c7ad6bd255b130  agents/lena/work/queue-296/run-r2/whole-file.tmpdir
+87239327014c49abbe130c17881bb48e13d96545bf9f3e09b6f4aed46e11453b  agents/quackerjack/work/queue-296/BUILD.md
+04512fb4693bc135131857f204addfcc4968c660a00327c2589f5a107f591a2b  docs/SESSIONS.md
 89a15e62aa6f951596b764993afeff7e33eeaa3a4f45d31599eba7d27a4000ad  packages/cli/tests/federation-acceptance.test.mjs
 86b76565f5afe9efdd076ef61cc54e40c447d235f77b95818d0d601ce036effa  packages/cli/tests/fixtures/federation-host.mjs
 b12a9bad4be083f2439c3363738b9763fa0061228f84d501a385ade48fea90e4  packages/cli/tests/fixtures/federation-human.mjs
diff --git a/agents/lena/work/queue-296/run-r2/M1.exit b/agents/lena/work/queue-296/run-r2/M1.exit
new file mode 100644
index 000000000..573541ac9
--- /dev/null
+++ b/agents/lena/work/queue-296/run-r2/M1.exit
@@ -0,0 +1 @@
+0
diff --git a/agents/lena/work/queue-296/run-r2/M1.log b/agents/lena/work/queue-296/run-r2/M1.log
new file mode 100644
index 000000000..ffe7061d0
--- /dev/null
+++ b/agents/lena/work/queue-296/run-r2/M1.log
@@ -0,0 +1,59 @@
+✖ FED R7 scratch two-instance acceptance (1924.232002ms)
+ℹ tests 1
+ℹ suites 0
+ℹ pass 0
+ℹ fail 1
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 2002.66244
+
+✖ failing tests:
+
+test at packages/cli/tests/federation-acceptance.test.mjs:143:1
+✖ FED R7 scratch two-instance acceptance (1924.232002ms)
+  AssertionError [ERR_ASSERTION]: R7 ungranted project must not appear
+  + actual - expected
+  
+    [
+      'd27c7d26-5ea3-446c-b1ce-f54183e16c8a',
+  +   'c1cb5a81-e752-4932-be3c-d849e5a34284'
+    ]
+  
+      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/lena-row296/packages/cli/tests/federation-acceptance.test.mjs:185:10)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3) {
+    generatedMessage: false,
+    code: 'ERR_ASSERTION',
+    actual: [ 'd27c7d26-5ea3-446c-b1ce-f54183e16c8a', 'c1cb5a81-e752-4932-be3c-d849e5a34284' ],
+    expected: [ 'd27c7d26-5ea3-446c-b1ce-f54183e16c8a' ],
+    operator: 'deepStrictEqual',
+    diff: 'simple'
+  }
+R7 diagnostic: factory-console.log
+Mosaic Console: http://127.0.0.1:43315/
+Board: http://127.0.0.1:1
+Bus: factory
+Sign-in: https://factory.example.test/ (--sso), reads and human writes (--send), grant Approve and Deny
+Sign-in provider: test-op issuer https://127.0.0.1:35689/factory/ subjects 1 (ready)
+Proxy: proxy proof off
+Ctrl-C stops this server.
+R7 diagnostic: factory-host.log
+(node:889203) ExperimentalWarning: Module mocking is an experimental feature and might change at any time
+(Use `node --trace-warnings ...` to show where the warning was created)
+(node:889203) DeprecationWarning: mock.module(): options.namedExports is deprecated. Use options.exports instead.
+R7 diagnostic: hub-console.log
+Mosaic Console: http://127.0.0.1:34081/
+Board: http://127.0.0.1:1
+Bus: hub
+Sign-in: https://hub.example.test/ (--sso), reads and human writes (--send), grant Approve and Deny
+Sign-in provider: test-op issuer https://127.0.0.1:35689/hub/ subjects 1 (ready)
+Proxy: proxy proof off
+Ctrl-C stops this server.
+R7 diagnostic: hub-host.log
+(node:889107) ExperimentalWarning: Module mocking is an experimental feature and might change at any time
+(Use `node --trace-warnings ...` to show where the warning was created)
+(node:889107) DeprecationWarning: mock.module(): options.namedExports is deprecated. Use options.exports instead.
+R7 cleanup: no child groups, ports or sockets remain; no units created
+M1: KILLED by R7 ungranted project must not appear
diff --git a/agents/lena/work/queue-296/run-r2/M1.tmpdir b/agents/lena/work/queue-296/run-r2/M1.tmpdir
new file mode 100644
index 000000000..6376c164d
--- /dev/null
+++ b/agents/lena/work/queue-296/run-r2/M1.tmpdir
@@ -0,0 +1 @@
+/mnt/storage/scratch/tmp/9Uoj48
diff --git a/agents/lena/work/queue-296/run-r2/M2.exit b/agents/lena/work/queue-296/run-r2/M2.exit
new file mode 100644
index 000000000..573541ac9
--- /dev/null
+++ b/agents/lena/work/queue-296/run-r2/M2.exit
@@ -0,0 +1 @@
+0
diff --git a/agents/lena/work/queue-296/run-r2/M2.log b/agents/lena/work/queue-296/run-r2/M2.log
new file mode 100644
index 000000000..650564bf3
--- /dev/null
+++ b/agents/lena/work/queue-296/run-r2/M2.log
@@ -0,0 +1,60 @@
+✖ FED R7 scratch two-instance acceptance (3143.370798ms)
+ℹ tests 1
+ℹ suites 0
+ℹ pass 0
+ℹ fail 1
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 3218.651521
+
+✖ failing tests:
+
+test at packages/cli/tests/federation-acceptance.test.mjs:143:1
+✖ FED R7 scratch two-instance acceptance (3143.370798ms)
+  AssertionError [ERR_ASSERTION]: R7 revoke must end the claim as access-revoked
+      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/lena-row296/packages/cli/tests/federation-acceptance.test.mjs:226:10)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3) {
+    generatedMessage: false,
+    code: 'ERR_ASSERTION',
+    actual: false,
+    expected: true,
+    operator: '==',
+    diff: 'simple'
+  }
+R7 diagnostic: factory-console.log
+Mosaic Console: http://127.0.0.1:40569/
+Board: http://127.0.0.1:1
+Bus: factory
+Sign-in: https://factory.example.test/ (--sso), reads and human writes (--send), grant Approve and Deny
+Sign-in provider: test-op issuer https://127.0.0.1:37617/factory/ subjects 1 (ready)
+Proxy: proxy proof off
+Ctrl-C stops this server.
+2026-10-24T09:56:19.857Z sso refused code=subject-unknown provider=test-op iss="https://127.0.0.1:37617/factory/" sub="jason-test-sub"
+R7 diagnostic: factory-host.log
+(node:892054) ExperimentalWarning: Module mocking is an experimental feature and might change at any time
+(Use `node --trace-warnings ...` to show where the warning was created)
+(node:892054) DeprecationWarning: mock.module(): options.namedExports is deprecated. Use options.exports instead.
+R7 diagnostic: hub-console.log
+Mosaic Console: http://127.0.0.1:44529/
+Board: http://127.0.0.1:1
+Bus: hub
+Sign-in: https://hub.example.test/ (--sso), reads and human writes (--send), grant Approve and Deny
+Sign-in provider: test-op issuer https://127.0.0.1:37617/hub/ subjects 1 (ready)
+Proxy: proxy proof off
+Ctrl-C stops this server.
+2026-10-24T09:56:19.257Z chat action=createThread user="jason-test" id=58f85ce3-825f-42ea-9b19-e407157147f1
+2026-10-24T09:56:19.387Z chat action=send user="jason-test" id=3e803a2f-e10d-4ede-b80e-c7ca3fcc564b
+2026-10-24T09:56:19.836Z chat action=createThread user="jason-test" error=access-refused
+2026-10-24T09:56:20.395Z sso refused code=user-revoked provider=test-op user="jason-test"
+2026-10-24T09:56:20.401Z sso refused code=subject-unknown provider=test-op iss="https://127.0.0.1:37617/hub/" sub="jason-test-sub"
+R7 diagnostic: hub-host.log
+(node:892013) ExperimentalWarning: Module mocking is an experimental feature and might change at any time
+(Use `node --trace-warnings ...` to show where the warning was created)
+(node:892013) DeprecationWarning: mock.module(): options.namedExports is deprecated. Use options.exports instead.
+usage: {"event":"usage-unknown","business":"hub","run":"r892d587abe73","instance":"assistant","turn":"3e803a2f-e10d-4ede-b80e-c7ca3fcc564b","source":"@none","code":"baseline-unknown"}
+mosaic-bus: run r892d587abe73 (assistant) ended: stopped
+R7 cleanup: no child groups, ports or sockets remain; no units created
+M2: KILLED by R7 revoke must end the claim as access-revoked
diff --git a/agents/lena/work/queue-296/run-r2/M2.tmpdir b/agents/lena/work/queue-296/run-r2/M2.tmpdir
new file mode 100644
index 000000000..48b2ec3b8
--- /dev/null
+++ b/agents/lena/work/queue-296/run-r2/M2.tmpdir
@@ -0,0 +1 @@
+/mnt/storage/scratch/tmp/wPuOGf
diff --git a/agents/lena/work/queue-296/run-r2/killed-1.exit b/agents/lena/work/queue-296/run-r2/killed-1.exit
new file mode 100644
index 000000000..d00491fd7
--- /dev/null
+++ b/agents/lena/work/queue-296/run-r2/killed-1.exit
@@ -0,0 +1 @@
+1
diff --git a/agents/lena/work/queue-296/run-r2/killed-1.log b/agents/lena/work/queue-296/run-r2/killed-1.log
new file mode 100644
index 000000000..27990ca38
--- /dev/null
+++ b/agents/lena/work/queue-296/run-r2/killed-1.log
@@ -0,0 +1,41 @@
+R7 interruption: both Consoles started; killing test driver
+✖ packages/cli/tests/federation-acceptance.test.mjs (2055.463978ms)
+ℹ tests 1
+ℹ suites 0
+ℹ pass 0
+ℹ fail 1
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 2061.099035
+
+✖ failing tests:
+
+test at packages/cli/tests/federation-acceptance.test.mjs:1:1
+✖ packages/cli/tests/federation-acceptance.test.mjs (2055.463978ms)
+  'test failed'
+R7 diagnostic: factory-console.log
+Mosaic Console: http://127.0.0.1:42937/
+Board: http://127.0.0.1:1
+Bus: factory
+Sign-in: https://factory.example.test/ (--sso), reads and human writes (--send), grant Approve and Deny
+Sign-in provider: test-op issuer https://127.0.0.1:40605/factory/ subjects 1 (ready)
+Proxy: proxy proof off
+Ctrl-C stops this server.
+R7 diagnostic: factory-host.log
+(node:887305) ExperimentalWarning: Module mocking is an experimental feature and might change at any time
+(Use `node --trace-warnings ...` to show where the warning was created)
+(node:887305) DeprecationWarning: mock.module(): options.namedExports is deprecated. Use options.exports instead.
+R7 diagnostic: hub-console.log
+Mosaic Console: http://127.0.0.1:42267/
+Board: http://127.0.0.1:1
+Bus: hub
+Sign-in: https://hub.example.test/ (--sso), reads and human writes (--send), grant Approve and Deny
+Sign-in provider: test-op issuer https://127.0.0.1:40605/hub/ subjects 1 (ready)
+Proxy: proxy proof off
+Ctrl-C stops this server.
+R7 diagnostic: hub-host.log
+(node:887261) ExperimentalWarning: Module mocking is an experimental feature and might change at any time
+(Use `node --trace-warnings ...` to show where the warning was created)
+(node:887261) DeprecationWarning: mock.module(): options.namedExports is deprecated. Use options.exports instead.
+R7 cleanup: no child groups, ports or sockets remain; no units created
diff --git a/agents/lena/work/queue-296/run-r2/killed-1.tmpdir b/agents/lena/work/queue-296/run-r2/killed-1.tmpdir
new file mode 100644
index 000000000..4323ccd18
--- /dev/null
+++ b/agents/lena/work/queue-296/run-r2/killed-1.tmpdir
@@ -0,0 +1 @@
+/mnt/storage/scratch/tmp/bZhAyq
diff --git a/agents/lena/work/queue-296/run-r2/patch-ids.txt b/agents/lena/work/queue-296/run-r2/patch-ids.txt
new file mode 100644
index 000000000..890062a7a
--- /dev/null
+++ b/agents/lena/work/queue-296/run-r2/patch-ids.txt
@@ -0,0 +1,8 @@
+old ad84c1e45cf2327b9584c38328db02fb9d5dfc63 af9d89f4c65a791b0aeabe7bf1f19c6709c50bfb
+old f06a1f78cf135b0cd749e4602b28f6e63c177c85 da6478f871cd450ff3ee43e14b4f6a1d1a1deb59
+old e855f82e1846f094927c3de69aea1a801253736a 6065440666f6fc49254352e259ecbc5b0a4b40c3
+old a1321f8f90b41295245859ec92bb5ec4801ede84 d1a7f19fabc3f0c604eda8051312ef1efb50e74e
+rebased 4a16ebaa4ac96bfac2a0e3787f4437467a13650b af9d89f4c65a791b0aeabe7bf1f19c6709c50bfb
+rebased 6418b1b12382186e82048cf9aa223b851a23d4d0 2d2d8a223bce50d30fc3525da5f1cda9c38254cd
+rebased bbc38067f2d6100e58020bc197a84e6251fef83d 6065440666f6fc49254352e259ecbc5b0a4b40c3
+rebased 17e421cf4c9a3fd0cf432de0205cc1efff7f6044 d1a7f19fabc3f0c604eda8051312ef1efb50e74e
diff --git a/agents/lena/work/queue-296/run-r2/plain-1.exit b/agents/lena/work/queue-296/run-r2/plain-1.exit
new file mode 100644
index 000000000..573541ac9
--- /dev/null
+++ b/agents/lena/work/queue-296/run-r2/plain-1.exit
@@ -0,0 +1 @@
+0
diff --git a/agents/lena/work/queue-296/run-r2/plain-1.log b/agents/lena/work/queue-296/run-r2/plain-1.log
new file mode 100644
index 000000000..378b93629
--- /dev/null
+++ b/agents/lena/work/queue-296/run-r2/plain-1.log
@@ -0,0 +1,10 @@
+✔ FED R7 scratch two-instance acceptance (3684.148824ms)
+ℹ tests 1
+ℹ suites 0
+ℹ pass 1
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 3787.998681
+R7 cleanup: no child groups, ports or sockets remain; no units created
diff --git a/agents/lena/work/queue-296/run-r2/plain-1.tmpdir b/agents/lena/work/queue-296/run-r2/plain-1.tmpdir
new file mode 100644
index 000000000..3bc66d865
--- /dev/null
+++ b/agents/lena/work/queue-296/run-r2/plain-1.tmpdir
@@ -0,0 +1 @@
+/mnt/storage/scratch/tmp/vgwsGf
diff --git a/agents/lena/work/queue-296/run-r2/pre-mutants.sha256 b/agents/lena/work/queue-296/run-r2/pre-mutants.sha256
new file mode 100644
index 000000000..1f07c79d6
--- /dev/null
+++ b/agents/lena/work/queue-296/run-r2/pre-mutants.sha256
@@ -0,0 +1,2 @@
+c4949a16173d11f9d32d10d3ddd58a181631848b259bef1998820a78f5694808  packages/cli/src/access.mjs
+71b32ee4afa322793aad81231441ee7badc3e5aff65ff008c6cc0f7f63b72781  packages/bus/src/broker.mjs
diff --git a/agents/lena/work/queue-296/run-r2/range-diff.txt b/agents/lena/work/queue-296/run-r2/range-diff.txt
new file mode 100644
index 000000000..d1db94704
--- /dev/null
+++ b/agents/lena/work/queue-296/run-r2/range-diff.txt
@@ -0,0 +1,31 @@
+1:  ad84c1e45 = 1:  4a16ebaa4 row 296 handoff: FED R7 design notes to lena/row296 (mos-1503, Q245)
+2:  f06a1f78c ! 2:  6418b1b12 Untested: row 296 scratch two-instance acceptance (#1802)
+    @@ Commit message
+         Untested: row 296 scratch two-instance acceptance (#1802)
+     
+      ## BUILD-LOG.md ##
+    -@@ BUILD-LOG.md: Row 299 (573, #1806, Gander, Filbert): before, the P10 band test timed a fault r
+    - 2026-10-23T17:29:46Z | Gyro Vikunja571 sage-3542 Connections amendment | Branch gyro/editor-connections-design cut exactly from landed PRD1.17 30e6bb680; read REQ-LIB-5 in that PRD. Replaced stale J-b waits in parent and W4. Proposed W8 owns current authorized Markdown/DOCX links/backlinks list, labels, versioned refresh, leakage refusals and fixture tests. Build order under mos-1470/comment961 is W7 closed routing candidate, W8 landing, then W7 human first-real-import opening. No REQ-LIB-8 condition or acceptance change. Q234/mos-1363/S0 M1-M14 and post-10-27/MVP priority fixed. Static diff, twelve brief sections and append-only checks pass. No repo Node, tests, build, browser, queue mutation or live action. Fenton reviews after authorized docs branch push; Sage lands on approval.
+    +@@ BUILD-LOG.md: remain; no live state, schema or bus policy change.
+      
+    - 2026-10-23T17:32:37Z | Gyro sage-3544 fenton-0016 N1/N2 delta | Before: W7 Gate/final real-conversion list omit the W8 build-order cross-reference and W8 human-view filtering cites agent settings. After: both locations explicitly put W8 landing before human opening as mos-1470 build order, not acceptance; comment/tracked-deletion links are not current story links and never appear in the human Connections view regardless of agent settings. New commit atop approved 5af060fb5, no amend. Static diff and append-only checks pass. Docs only, no repo Node/tests/live action. Fenton checks only this delta.
+    + 2026-10-24 | Goldie | Row265 / #1770 verified (mos-1567, sage-3942) | Approved correction adds solely address import pin + Row265 comment to project-runtime.test and one pure-source RUNNER_FILES mount; new block checks parser has no imports. Serialized fresh-short-TMP timeout-k10: unchanged sandbox10/10, parser15/15, rooms18/18, full bus957/957, twelve named refusal mutants killed (each Node1, driver0), restored parser15/15 + rooms18/18. All positives zero fail/skip/cancel; every mutation restored full broker SHA71b32ee4. Old first-red evidence retained, no other old-test change. Slot returned goldie-0034; Boyd packet explicitly includes mount-list review, candidate push next.
+    + 2026-10-24T07:18:53Z | Sage | Row 327 (#1825, Bradford, Poe and Dewey) LANDED 68c08b4e7. Before: refactor at 94d9e90a6; the push guard was a scratch script with no reviewed-binary check. After: scripts/push-check.sh and scripts/test-push-check.sh on refactor, 3 commits cherry-picked onto 6a5e12511 with blobs equal to the round 3 tip d858c9f8b, plus doc commits 76f84465f and 68c08b4e7. Binaries are found by numstat or a NUL in the first 8000 committed bytes, regardless of attributes; each needs its sha256 and path in an approved latest-round candidate; an unconfirmed queue tail exits 2. Reviews: Poe c31525 rev 3882, Dewey c31526 rev 3883. Gate: 1st run 06:57Z RED, not the candidate: canonical node_modules was empty from 05:45:15Z (sage-4023). Rerun with its own root npm ci GREEN 07:15:49Z: 17 package suites 0 failures (cli 986, plugins 119, webui 418), 11 scripts exit 0, push-check 6 mutants KILLED; skips are the queue canonical-root check and the row 244 live provider cases. The landed push-check.sh passed its own push (NO_BINARY, NO_ATTRIBUTION, PUSH_READY). mos-1575: gates install their own node_modules; canonical restored with npm ci (128 packages).
+     +
+     +## 2026-10-23 — Lena, row 296 / #1802 FED R7 start
+     +
+    @@ agents/lena/work/queue-296/mutants.py (new)
+     
+      ## docs/SESSIONS.md ##
+     @@ docs/SESSIONS.md: are never rewritten or removed; corrections are new entries.
+    - 2026-10-23T17:48:43Z | Scrooge (629b6cd3) | Row 252 Console inbox Approve and Deny (#1753) | Rebased onto 306 landing as 580037105 (range-diff all =), slot run bus 907/0 webui 410/0 cli 943/0, in-review revs 3608/3609, Webby r1 APPROVE, J1-J19 specs to Sage; Sage landed 45ea3fa0d (done rev 3616). Part 1 mutant results were never in BUILD.md; they went to Sage by T3 (scrooge-0252-mutant-specs).
+    - 2026-10-23 | Sage (1ef1e4f8) | Rows 308 and 252 landings, 571 Connections design amendment, Vikunja 597 | 308 (PRD 1.17, #1815) landed 30e6bb680 and 252 (#1753) landed 45ea3fa0d (replay of 580037105 onto 30e6bb680, range-diff all =), each after a full gate on the landed tree (252 also J1-J19, J11c and J18 equivalent); Gyro's 571 amendment (Fenton APPROVE) landed e8bb13df8; Vikunja 570, 435 and 597 done, canonical webui esbuild 0.28.2; queue revs 3589-3616 committed 59f013247
+    - 2026-10-23 | Sage (1ef1e4f8) | Vikunja 571 W build rows; rows 13, 42, 257 and 289 check | Filed the design's ten W rows as queue rows 309-318 (revs 3617-3626, owners set to unassigned 3627-3636, queue commit 293b42fee pushed); Vikunja 571 done (comment 994). Row 13's candidate fd72d2689 is on refactor, gate is Monday's row 7 ledger run; 42 paused under mos-1184; 257 post-v1; 289 waits on 214 and 288. Slot released 17:56Z.
+    + 2026-10-24T04:27Z | Goldie (a13dd6d5-5e73-4b7d-8318-02abeff24940) | Row265 / #1770 C2-09b rooms | Goldie owns build, Boyd reviews under sage-3915. New goldie/row265 worktree at ec86f2c84, claim rev3814; room verbs/parser/new tests prepared, no old tests changed. Sage-3932 slot: new parser14/14 and rooms18/18 passed; whole bus in progress before refusal mutants, stop rule active.
+    + 2026-10-24T04:35Z | Goldie (a13dd6d5-5e73-4b7d-8318-02abeff24940) | Row265 / #1770 verified | First slot stopped at project-runtime import pin. mos-1567 narrowly authorizes pin and pure-source mount correction. sage-3942 rerun: sandbox10/10, parser15/15, rooms18/18, bus957/957, twelve refusal mutants killed/restored SHA71b32ee4, parser15/15 + rooms18/18 again. Slot returned goldie-0034; no further test runs. Boyd reviews RUNNER_FILES alongside rooms; own-branch push/claimant in-review next.
+    + 2026-10-24T07:18:53Z | Sage (1ef1e4f8) | Row 327 / #1825 push guard landed (mos-1572 option A, mos-1575) | Gate went red 06:57Z on an empty canonical node_modules (Glomgold's webui npm ci through a link to canonical, glomgold-0011); rerun with its own npm ci GREEN 07:15:49Z on 1bd214e38; pushed 68c08b4e7 07:18:03Z; #1825 closed c31530; canonical restored (128 packages); brief template rule 4db23a51f | landed
+     +- 2026-10-23 — lena (Codex, db27faca): row 296 / #1802 FED R7; recovered Quackerjack design on lena/row296, inspecting acceptance paths; Node/tests held pending Sage CLEAR, no live changes.
+     
+      ## packages/cli/tests/federation-acceptance.test.mjs (new) ##
+3:  e855f82e1 = 3:  bbc38067f Untested: preserve R7 shell cleanup during mutant runs (#1802)
+4:  a1321f8f9 = 4:  17e421cf4 Untested: record R7 reload ordering and slot boundaries (#1802)
diff --git a/agents/lena/work/queue-296/run-r2/tmpdir-cleanup.txt b/agents/lena/work/queue-296/run-r2/tmpdir-cleanup.txt
new file mode 100644
index 000000000..de03f9d50
--- /dev/null
+++ b/agents/lena/work/queue-296/run-r2/tmpdir-cleanup.txt
@@ -0,0 +1,5 @@
+M1: external TMPDIR removed (empty)
+M2: external TMPDIR removed (empty)
+killed-1: external TMPDIR removed (empty)
+plain-1: external TMPDIR removed (empty)
+whole-file: external TMPDIR removed (empty)
diff --git a/agents/lena/work/queue-296/run-r2/whole-file.exit b/agents/lena/work/queue-296/run-r2/whole-file.exit
new file mode 100644
index 000000000..573541ac9
--- /dev/null
+++ b/agents/lena/work/queue-296/run-r2/whole-file.exit
@@ -0,0 +1 @@
+0
diff --git a/agents/lena/work/queue-296/run-r2/whole-file.log b/agents/lena/work/queue-296/run-r2/whole-file.log
new file mode 100644
index 000000000..b26866102
--- /dev/null
+++ b/agents/lena/work/queue-296/run-r2/whole-file.log
@@ -0,0 +1,9 @@
+﹣ FED R7 scratch two-instance acceptance (0.501837ms) # run scripts/test-federation-acceptance.sh
+ℹ tests 1
+ℹ suites 0
+ℹ pass 0
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 1
+ℹ todo 0
+ℹ duration_ms 77.634961
diff --git a/agents/lena/work/queue-296/run-r2/whole-file.tmpdir b/agents/lena/work/queue-296/run-r2/whole-file.tmpdir
new file mode 100644
index 000000000..ea46678ab
--- /dev/null
+++ b/agents/lena/work/queue-296/run-r2/whole-file.tmpdir
@@ -0,0 +1 @@
+/mnt/storage/scratch/tmp/DRs04b
diff --git a/docs/SESSIONS.md b/docs/SESSIONS.md
index bf75593ad..e27a84e52 100644
--- a/docs/SESSIONS.md
+++ b/docs/SESSIONS.md
@@ -1627,3 +1627,4 @@ are never rewritten or removed; corrections are new entries.
 2026-10-24T04:35Z | Goldie (a13dd6d5-5e73-4b7d-8318-02abeff24940) | Row265 / #1770 verified | First slot stopped at project-runtime import pin. mos-1567 narrowly authorizes pin and pure-source mount correction. sage-3942 rerun: sandbox10/10, parser15/15, rooms18/18, bus957/957, twelve refusal mutants killed/restored SHA71b32ee4, parser15/15 + rooms18/18 again. Slot returned goldie-0034; no further test runs. Boyd reviews RUNNER_FILES alongside rooms; own-branch push/claimant in-review next.
 2026-10-24T07:18:53Z | Sage (1ef1e4f8) | Row 327 / #1825 push guard landed (mos-1572 option A, mos-1575) | Gate went red 06:57Z on an empty canonical node_modules (Glomgold's webui npm ci through a link to canonical, glomgold-0011); rerun with its own npm ci GREEN 07:15:49Z on 1bd214e38; pushed 68c08b4e7 07:18:03Z; #1825 closed c31530; canonical restored (128 packages); brief template rule 4db23a51f | landed
 - 2026-10-23 — lena (Codex, db27faca): row 296 / #1802 FED R7; recovered Quackerjack design on lena/row296, inspecting acceptance paths; Node/tests held pending Sage CLEAR, no live changes.
+- 2026-10-24 — lena (db27faca), row 296 / #1802: r2 rebased onto e0c6142f3; scoped acceptance plain 1/1, killed-driver cleanup verified, M1/M2 assertion kills/restored, dedicated-file skip verified; own dependency installs, no old tests/live changes; reviewer and Sage gate pending.