fix(install): close refused peers and reset inherited Docker cache (#1652)

(cherry picked from commit 60d78e44e1e66cfb506bbae7399abc581729c97e)

BUILD-LOG.md

@@ -5412,8 +5412,58 @@ Row 299 (573, #1806, Gander, Filbert): before, the P10 band test timed a fault r
 
 2026-10-23T17:32:37Z | Gyro sage-3544 fenton-0016 N1/N2 delta | Before: W7 Gate/final real-conversion list omit the W8 build-order cross-reference and W8 human-view filtering cites agent settings. After: both locations explicitly put W8 landing before human opening as mos-1470 build order, not acceptance; comment/tracked-deletion links are not current story links and never appear in the human Connections view regardless of agent settings. New commit atop approved 5af060fb5, no amend. Static diff and append-only checks pass. Docs only, no repo Node/tests/live action. Fenton checks only this delta.
 
-2026-10-23 | Fethry | Row 225 C2-10b (#1726), handoff recovery. Before: Morgana's untested candidate 9a131e956 replaces renderItems with renderReply and adds Console citation/notice/status rendering and status/revert routes. Continuing that exact history on fethry/row225; preserving A1-A5 and the accepted file deviations. Remaining: confirm limits contract, review/test candidate under Sage CLEAR, obtain Mos OK through Sage for inherited old-test changes, manifest and Dewey review. No Node/tests run in this session and no green claim.
+2026-10-23 | Gladstone | Gitea #1816 / Vikunja 614 hostcheck item 5 and bundle verification | Before: dpkg's correct 750 form falsely fails item 5, and two run-sheet bundle verifies require a missing repository. Draft after: exact root/mosaic/path with octal 0750 equivalence; stat/output unchanged; both verifies use cleaned-up bare scratch repos. Three additive-only test blocks, two planned mutants. Untested under Sage-3738; Sage-3740 authorizes untested branch push for static review. Queue row pending; Sage owns gate and landing.
 
-2026-10-23 | Fethry | Row 225 T1 lane A (sage-3641/3647). Before: nested replyLimits fallback/problem omitted, wrong-project revert receipt accepted, invalid library mapping hidden. After RED: these three local behaviors corrected; three assertions in the new handoff test files corrected against existing route/mapping/Boolean behavior, each explained in BUILD.md. Whole-file GREEN: renderer 9/0, routes 13/0, browser 9/0; full library 81/0, channel-proof 2/0. Approved old-test numstats remain 80/66 and 3/1. Full webui/build and full integration gate have not run. Isolated mutants next within the authorized 19:38Z hard stop; no completion claim.
+2026-10-23 | Gladstone | #1816 / Vikunja 614 scope amendment mos-1534, sage-3741 | F1 narrowed to exact 750/0750 and single spaces; F3 allows @ in absolute unit paths with unsafe-character refusals retained; F4 moves copy_tree to / after path resolution. AS_USER audit found git -C and stack-release's existing checkout cd cover the other steps. Added new unit and unreadable-cwd copy tests only. Untested under Sage's no-Node hold; no live action.
 
-2026-10-23 | Fethry | Row 225 T1 expanded evidence complete (sage-3647). Full library81/0 and channel-proof2/0; final targeted renderer9/0, routes13/0, browser9/0. Isolated kit14/14 assertion kills on507901277, every target restored/hash-checked, candidate hashes unchanged. First attempt stopped at a wait-based failure, recorded as not killed; corrected the new test's repaint wait, baseline9/0, and reran the whole kit. No processes left; lane A returned around19:29Z. Source manifest for Dewey prepared; full webui/build and Sage's integration/scripts gate still pending. Raw logs preserved in scratch, normalized display copies and raw SHA256 provenance in agent evidence.
+2026-10-23 | Gladstone | #1816 / Vikunja 614 F5 draft (mos-1536) | Before: the run sheet omits the explicit notify decision and precheck misses a bus-start refusal. After: section 9a creates a private null-binding decision as mosaic; precheck directly reuses readNotifyConfig and private_dir, and new tests cover accepted and refused decisions. Existing fixture setup additions await Mos approval through Sage; installer unchanged. Untested under no-Node hold.
+
+2026-10-23 | Gladstone | #1816 / Vikunja 614 fixture ruling mos-1537 | Added only three setup lines each to host(t)/world(t) for the explicit null notifier decision. Existing assertions/fakes/lines intact. New install test checks decision bytes/mode preserved and missing decision remains absent. F5 missing-file fault removes the setup file. Untested under Sage's hold; separate follow-up atop 33950cf9b.
+
+2026-10-23 | Gladstone | #1816 / Vikunja 614 F6 and notify parent (mos-1537) | Before: the run sheet's copy check lacks its required CLI wrapper; mkdir -p -m does not guarantee the notify parent mode. After: a separately Mos-gated wrapper --create step follows install and precedes check, as mosaic from cwd /; section 9a explicitly creates both notify directories at 0700. Docs only, no live action; Node/tests still held.
+
+2026-10-23 | Gladstone | Row320 / #1816 first review CHANGES (morgana-0217) | Reviewer run: hostcheck19/19, unit47/47, install24/24, copy17/18; seven of eight mutants killed, M4 survived because both base/mutant failed only cleanup. Fixed this row's F4 test to enter cwd then chmod000, assert no read/search, pass an absolute outside bundle, and restore0700 in finally. Existing tests/setup and production scripts unchanged. Correction untested locally pending Morgana's focused rerun; no acceptance claim.
+
+2026-10-23 | Boyd | Row 298 (#1804, Q228), before implementation completion | Took over Megavolt 7a141269c on boyd/row298 at 45dca69f6 under mos-1496/1502. Approved D1-D6 govern human-only grants.scope.set, empty fallback, in-scope close/evidence and spend recheck. All inherited code UNTESTED; no Node/tests until Sage CLEAR. Plan and static gaps recorded in agents/boyd/work/queue-298/BUILD.md; no live grant or credential access.
+
+2026-10-23 | Boyd | Row 298 (#1804, Q228), targeted verification | On sage-3642 T1 lane B, five whole files serial: business scope 7/0, bus scope 14/0, scope runtime 1/0, CLI scope 4/0, project runtime 3/0 (29/0, no skips). Initial bus fixture typo recorded and corrected. M1-M10 killed by named assertions, source restored and final files green. Dewey dewey-0933 positive control and notes addressed; manifest and evidence in agents/boyd/work/queue-298/BUILD.md. Full package/script gate remains Sage's. No live scope set.
+
+2026-10-23T22:41:07Z | Boyd | Row 298 (#1804), rebase after row 239 | Rebased onto 833ec1cc8d7c11842efb82e57c1a0b256c8d22d7 on boyd/row298-r2 without altering published boyd/row298. Only append-log conflicts; upstream bytes preserved and Boyd suffixes appended. Product merges automatic; row 239 writer-lock revoke and post-revoke error handling preserved, organization.mjs unchanged from new base. Static checks only; UNTESTED on new base pending Sage CLEAR. Details in Boyd BUILD.md.
+
+2026-10-23 | Goldie | Row 322 / #1818 F8/F9 before | The library installer runs the clone importer, whose yaml dependency is absent on fresh clones, and tail -n 1 hides uncaught errors behind Node's version banner. Plan: run the same-commit copy importer, include it in COPY_PATHS, keep the first error line with last-line fallback, append isolated regression coverage. Mos-1550 approves setup-only world(t) additions and the one-path copy-file pin addition. No tests run yet; Sage slot required.
+
+2026-10-23 | Goldie | Row 322 / #1818 F8/F9 after | Importer now runs from the same-commit dependency-equipped copy; COPY_PATHS includes it. One-line refusal selects an actual Error/ERR_ line, avoiding Node's source excerpt/banner, with last-line fallback. Mos-1550-approved fixture setup and one-file pin changes; two append-only regression tests. Under sage-3808 CLEAR, serialized timeout -k 10 runs in /mnt/storage/scratch/tmp/goldieuQ2664: install26/26, copy18/18, pinned-copy10/10; new tests2/2 first run and restored; N installer expected-red2/2, F8 and F9 mutants killed, installer SHA256 restored each time. No unexpected red. Evidence and exact old-test changes in agents/goldie/work/queue-322/BUILD.md; full gate and Morgana review belong to Sage.
+
+2026-10-23 | Goldie | Row 324 / #1820 before (Q247, mos-1555) | New branch goldie/row324 at row298 approved860afc2b6. Design/readers audit in agents/goldie/work/queue-324/BUILD.md: normalize omitted tracker to null, preserve present validation, guard sync readers/adapter config; runtime/instance-settings/broker checks already optional. Existing business.test.mjs98 explicitly requires tracker, so implementation held for Mos approval of removing that one list entry; no old test or product edit, no tests run.
+
+2026-10-23 | Goldie | Row 324 / #1820 draft built (sage-3836, mos-1556) | Claim rev3759. Omitted tracker normalizes null; present including null/malformed stays validated. Loader, business validate, bootConfig trackerFor and Console sync reader handle absence. Row298's guarded runtime/instance-settings/broker paths preserved. Two new test files (9 planned tests); sole old-test edit drops tracker from required-key list under mos-1556. node --check6/6 and diff check pass. No tests run: untested branch push expressly ordered before CLEAR; Duckworth review and Sage gate pending.
+
+2026-10-23 | Goldie | Row 324 / #1820 rebased verification (sage-3850) | Rebased onto3569bf54f as7e59ba8b3; only append-log conflicts, eight manifest files byte-equal. Serialized timeout-k10 scratch TMPDIR goldieOdgIjr: new business5/5, new CLI4/4 (includes Console absent read), existing business21/21; presence mutant killed, bytes restored, new files rerun5/5 and4/4. No unexpected red. Published rebased branch goldie/row324-r2 preserves original remote draft without force-push. Evidence/mutant diff/reader list in BUILD.md; review/full gate pending.
+
+2026-10-23 | Goldie | Row 323 / #1819 before | Case 1 lacks a committed business file. Brief requires actual .53 values and refuses guessing. New branch goldie/row323 from local refactor da537e7d1; source review shows project root, literal human id, tracker sync identity/reference metadata and launch model values absent from DESIGN, plus nonempty launch.instances requires another role. Asked Sage (goldie-0008); no config or test written, no test run. Details agents/goldie/work/queue-323/BUILD.md.
+
+2026-10-23 | Goldie | Row 323 / #1819 static blocker (sage-3823) | Mos-1554 requires no bot and an absent, never-created tracker token path. Static tracing confirms this refuses install validation (business cli84-97, credentials78-83) and bus boot (runtime131/157, bus credentials225-228), even without tracker.baseUrl; unset env also refuses at bus credentials278. Reported Sage goldie-0009; no JSON/test/credential written, no tests. Accepted source values/role and refusal-test rulings are recorded in BUILD.md; waiting for product-boundary resolution.
+
+2026-10-24 | Goldie | Row 323 / #1819 resumed draft (sage-3859) | Rebasing prior notes onto Q247 landing dd6cb5872 resolved only append logs. Added trackerless .53 factory JSON: jason, approved project root, chief+assistant for required nonempty launch.instances, claude-code/Opus5.5/high, tester on. No credentials or token placeholder. Seven new tests prepare exact-doc loading plus scratch real validate/install/boot and three refusal paths; one restoring tester-switch mutant prepared. No old test edits; no tests before Sage CLEAR. Source choices/rulings in BUILD.md.
+
+2026-10-24 | Goldie | Row 323 / #1819 pre-test commit (sage-3861 CLEAR) | Sage explicitly requests commit before runs; JSON/new7-case test/restoring mutant and field provenance committed untested before slot work. Exact sources distinguish mos-1554 human/no-bot intent, sage-3820 roles, sage-3822 project/model, and Q247 tracker omission. No old test edits. Next runs: new file, business whole, CLI whole, mutant/restored file, serialized scratch TMPDIR timeout-k10.
+
+2026-10-24 | Goldie | Row 323 / #1819 first slot STOP (sage-3861) | On committed571376c30: new file7/7 and business261/261 green; whole CLI hit unchanged revoke-window.test.mjs170 (test579, row306 R4), no RESULT after20.1s at ask167/Promise.all194. Stopped suite on observing red, cleaned only positively identified own scratch fixture. Partial631 pass/1 fail before termination, not full-suite green. No mutant/restored run, no old-test edit/rerun. Manifest unchanged; Sage notified goldie-0016 and slot returned. Evidence local under queue-323, awaits ruling.
+
+2026-10-24 | Goldie | Row 323 / #1819 second red STOP (mos-1560, sage-3864) | Isolated revoke-window whole-file run1 on unchanged571376c30 failed0/1 after20.126s, same no RESULT at ask167/test194. Start00:24:22Z, load1.46/1.68/2.70, busyhelperCLEAR, fresh scratch goldieBObDQ9. No run2/3/CLI retry/mutant/restored run; no source/old-test edit. Sage goldie-0018 has log/load/error; slot returned, awaits base-dd6cb5872 root cause. Remote remains unverified571.
+
+2026-10-24 | Goldie | Row 323 / #1819 accepted evidence (mos-1561, sage-3869) | Sage traced revoke-window reds to37-byte TMPDIR making109-byte tools.sock >107 limit (session.mjs278), not Codex. Fresh31-byte /scratch/tmp/XXXXXX confirmation passes1/1 in0.84s. On unchanged571376c30 serialized timeout-k10: business261/261, new7/7, tester-switch mutant killed/restored SHA85e6b9ac, restored new7/7. Every log starts UTC/load/helperCLEAR; all positive runs0 fail/skip/cancel. CLI whole acceptance comes from Sage gate under mos-1561; no local CLI rerun. Evidence-only notes/log commit follows, no old test/source changes.
+
+2026-10-24 | Goldie | Row325 / #1821 before (mos-1563/1564) | Real .mosaic/project.json idstack disagrees with Case1 project's mosaic-stack key; row323 scratch fixture omitted project file and only warned. New goldie/row325 at99930362e changes only that JSON key and expressly authorized old assertion key; new real-byte project-copy validation tests require valid and reject old key. Mutant prepared; no tests before Sage CLEAR, no queue writes/host actions.
+
+2026-10-24 | Goldie | Row325 / #1821 after (sage-3882 CLEAR) | Only Case1 projects key becomesstack; only old test70 expected key updated under mos-1564. New3-case test copies real .mosaic/project.json bytes, requires CLI project valid, rejects old key. Serialized shortTMP timeout-k10: new3/3, business264/264, old-key mutant killed/restored SHA9e43bfef, restored new3/3; all positive0 fail/skip/cancel. Manifest4/4 verifies including unchanged project document. Logs/load lines and mutant diff in BUILD.md; no queue writes/host action, Gladstone review/Sage gate pending.
+
+2026-10-24 | Bentina | Row157 / #1652 before (sage-3906, Q246, mos-1566) | Recovered seat/brief/design at ec86f2c84 on bentina/row157. Canonical queue next flags stale brief pin. Outbound audit finds broker gitea-grant node:https and web DNS-pinned node:https paths, triggering I2 explicit stop rule. Sage notified bentina-0001; BUILD.md records shifted cited sites. No implementation/test/Docker/credential/live-state action; awaiting lead re-pin and transport ruling.
+
+2026-10-24 | Bentina | Row157 / #1652 first slot STOP (sage-3910) | New config/helper31/31 and proxy11/11 green. test-config exit1:55 pass/1 old output regression; new install20/20 green. Validator added absent install key to JSON. Stopped before Docker/install suite; slot returned Sage bentina-0004. sage-3916 authorizes preserving absent output shape/defaulting env to local: fixed own loader/new test only, no rerun before next CLEAR. test-config diff +4/-0. No commit/push; seat BUILD and01/02/03 logs.
+
+2026-10-24 | Bentina | Row157 / #1652 after (sage-3919, sage-3923) | Absent install JSON shape preserved; helper defaults local. Existing config56/56, helper/config31/31, final proxy12/12, final test-install exit0 with three release0.0.12 rootless builds/pins, internal TLS/deny/DNS checks and real Vikunja publicGET200/notifier REST dummyGET401 through services proxy. Upstream-reset correction verified. Slot returned bentina-0007; no broader suites by Sage direction. Boyd then Darkwing review, Mos provider-host measurement and Sage landing gate pending. Evidence in seat BUILD and04-08 logs; only bentina/row157 candidate push authorized.
+
+2026-10-24 | Bentina | Row157 / #1652 round2 before (boyd-0023, sage-3933) | Read reproduced B1 half-open refusal socket retention and B2 same-PID exec inherited cache bypass. Added two new regression files; no existing assertion edits. Proxy drains then destroys refused sockets with1s fallback; helper clears inherited cache/export attributes at source. No tests before CLEAR; Goldie holds slot. Source/causes recorded in seat BUILD.
+
+2026-10-24 | Bentina | Row157 / #1652 round2 after (sage-3936) | B1 refused sockets now drain/destroy with1s bound; B2 source clears inherited cache/export attributes. Archived a14+new regressions red as intended (5controls pass/7defects fail), fixed12/12, helper/config33/33, egress22/22, rootless install exit0 incl image pins/network/services dummyGET. Logs09-13 in seat work. No existing test/assertion edit for round2. Slot returned bentina-0014; followup own-branch commit/manifest for Boyd re-review; Mos and Sage landing gates pending.

README.md

@@ -76,6 +76,16 @@ Rules enforced by `scripts/mosaic-config.mjs`:
 
 Run paths (`build/hello/verify/reset`) fail closed when configuration is missing or invalid; they never invent it.
 
+The optional `install` key selects the containerized install explicitly:
+`"install": {"mode":"containerized","endpoint":"unix:///run/user/1000/docker.sock"}`.
+An absent key defaults to local mode and remains absent in validation output.
+Local mode forbids `endpoint`;
+containerized mode requires a Unix socket endpoint without whitespace
+(the actual pattern is `^unix:///[^\s]+\.sock$`). Unknown install keys or
+modes refuse with exit 2 without changing the config. Validation contacts no
+daemon; the endpoint helper checks rootless status before engine use. Keep
+existing live configs unchanged until the install rollout is authorized.
+
 ## Missions & tasks (M2)
 
 Missions and tasks are validated JSON data (strict schemas, version-pinned). The M2 layer is host-side only: mission directives are recorded for provenance but do not yet reach the runtime system prompt (capability/policy layer comes later).

agents/beakley/README.md

@@ -0,0 +1,8 @@
+# Beakley
+
+Builder seat, Codex gpt-6.1-sol, started by Mos under Q245 (mos-1506). Owns row 217 (C2-06, handed over from Launchpad).
+
+No launcher in this directory. The seat runs as a T3 thread (thread 88b97f65) and works in its own worktree. It has no
+credentials of its own; it pushes only its own `beakley/*` branches through the repository credential helper (mos-0981),
+never `refactor`, `main` or another seat's branch. Claude seats orchestrate and review (Q245). Registered by Sage on
+2026-10-23 so the queue can name the seat as row owner (store.mjs isSeatDir).

agents/bentina/README.md

@@ -0,0 +1,10 @@
+# Bentina
+
+Builder seat, Codex gpt-6.1-sol, started by Sage under Q246 and mos-1566. Owns row 157, I2: the install images, the
+install config key, the endpoint helper and the egress proxy (docs/plans/2026-10-18_containerized-install-rows.md),
+reassigned from Researcher so the coding runs on Codex.
+
+No launcher in this directory. The seat runs as a T3 thread and works in its own worktree. It has no credentials of its
+own; it pushes only its own `bentina/*` branches through the repository credential helper (mos-0981), never `refactor`,
+`main` or another seat's branch. Claude seats orchestrate and review the install path (mos-1542 rule 4). Registered by
+Sage on 2026-10-24 so the queue can name the seat as row owner (store.mjs isSeatDir).

agents/bentina/work/queue-157/01-install-unit.log

@@ -0,0 +1,43 @@
+2026-10-24T04:05:53Z
+ 23:05:53 up 10 days, 14:25,  2 users,  load average: 2.29, 2.31, 1.89
+CLEAR sage-3910 TMPDIR=/mnt/storage/scratch/tmp/lEvgx1
+✔ install: absent (28.959485ms)
+✔ install: local (24.660305ms)
+✔ install: local endpoint (26.210523ms)
+✔ install: containerized missing endpoint (25.495263ms)
+✔ install: bad endpoint "tcp://localhost:2375" (28.62092ms)
+✔ install: bad endpoint "ssh://host/run/docker.sock" (32.126399ms)
+✔ install: bad endpoint "run/docker.sock" (26.69995ms)
+✔ install: bad endpoint "unix://relative.sock" (33.36326ms)
+✔ install: bad endpoint "unix:///a b.sock" (30.579866ms)
+✔ install: bad endpoint "unix:///a.sock\n" (40.844622ms)
+✔ install: bad endpoint "unix:///a" (36.371215ms)
+✔ install: bad endpoint "" (31.603044ms)
+✔ install: bad endpoint null (29.645166ms)
+✔ install: bad endpoint 4 (30.638453ms)
+✔ install: valid endpoint (28.088952ms)
+✔ install: unknown mode (28.182929ms)
+✔ install: missing mode (26.297287ms)
+✔ install: unknown key (27.205488ms)
+✔ install: null (29.189475ms)
+✔ install: array (30.347371ms)
+✔ helper refuses rootful (76.082505ms)
+✔ helper refuses missing (58.354463ms)
+✔ helper refuses substring (86.830586ms)
+✔ helper refuses object (108.0825ms)
+✔ helper refuses invalid JSON (85.203357ms)
+✔ helper refuses null success (85.225204ms)
+✔ helper refuses rootless output but failed (67.840402ms)
+✔ helper checks once and explicitly names host for both calls (119.763305ms)
+✔ local mode refuses before Docker null (35.42747ms)
+✔ local mode refuses before Docker {"mode":"local"} (30.531767ms)
+✔ invalid config refuses before Docker (30.092363ms)
+ℹ tests 31
+ℹ suites 0
+ℹ pass 31
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 833.790665
+EXIT=0

agents/bentina/work/queue-157/02-egress.log

@@ -0,0 +1,23 @@
+2026-10-24T04:06:01Z
+ 23:06:01 up 10 days, 14:25,  2 users,  load average: 2.27, 2.30, 1.89
+CLEAR sage-3910 TMPDIR=/mnt/storage/scratch/tmp/lfgV9z
+✔ allows exact host and port, fragmented headers, and preserves tunnel head (21.273322ms)
+✔ unlisted host (1.324735ms)
+✔ unlisted port (1.081626ms)
+✔ GET (0.948442ms)
+✔ invalid port (0.95243ms)
+✔ userinfo (0.874803ms)
+✔ bad header (0.782898ms)
+✔ slow client has a total header deadline (81.829907ms)
+✔ oversized header refuses (1.267008ms)
+✔ missing, invalid and unknown lists fail closed (0.491274ms)
+✔ refused upstream returns 502 while retaining one allowed decision (1.716299ms)
+ℹ tests 11
+ℹ suites 0
+ℹ pass 11
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 156.342618
+EXIT=0

agents/bentina/work/queue-157/03-config.log

@@ -0,0 +1,90 @@
+2026-10-24T04:06:08Z
+ 23:06:08 up 10 days, 14:25,  2 users,  load average: 2.53, 2.36, 1.91
+CLEAR sage-3910 TMPDIR=/mnt/storage/scratch/tmp/6eJjJz
+OK    absent adapter defaults to pi
+OK    adapter mock validates (exit 0)
+OK    unsupported adapter exits 2 (exit 2)
+OK    env exports adapter
+OK    bootstrap creates default when absent (exit 0)
+OK    bootstrap wrote config file
+OK    bootstrap is idempotent on existing config (exit 0)
+OK    bootstrap did not rewrite existing config
+OK    validate missing config exits 3 (exit 3)
+OK    malformed JSON exits 2 (exit 2)
+OK    unsupported configVersion exits 2 (exit 2)
+OK    unknown top-level key exits 2 (exit 2)
+OK    unknown execution key exits 2 (exit 2)
+OK    unsupported backend exits 2 (exit 2)
+OK    unsupported environment exits 2 (exit 2)
+OK    relative dataRoot exits 2 (exit 2)
+OK    non-canonical dataRoot exits 2 (exit 2)
+OK    filesystem root dataRoot exits 2 (exit 2)
+OK    home directory dataRoot exits 2 (exit 2)
+OK    dataRoot containing config dir exits 2 (exit 2)
+OK    control character in provider exits 2 (exit 2)
+OK    symlinked config file exits 2 (exit 2)
+OK    env exports resolve correctly
+OK    valid console.sso loads and is in the output
+OK    console.sso HS256 alg exits 2 naming the path (exit 2)
+OK    console.sso alg none exits 2 naming the path (exit 2)
+OK    console.sso missing slot field exits 2 naming the path (exit 2)
+OK    console.sso slot name outside the pattern exits 2 naming the path (exit 2)
+OK    unknown key under console exits 2 naming the path (exit 2)
+OK    valid federation key loads and is in the output
+OK    federation unknown sub-key exits 2 naming the key (exit 2)
+OK    federation peer unknown sub-key exits 2 naming the key (exit 2)
+OK    federation peer origin over http exits 2 naming the key (exit 2)
+OK    federation peer origin with a path exits 2 naming the key (exit 2)
+OK    federation peer origin with userinfo exits 2 naming the key (exit 2)
+OK    federation peer id equal to self exits 2 naming the key (exit 2)
+OK    federation peer label empty exits 2 naming the key (exit 2)
+OK    federation not an object exits 2 naming the key (exit 2)
+OK    federation self pattern exits 2 naming the key (exit 2)
+OK    federation peers not an array exits 2 naming the key (exit 2)
+OK    federation peer not an object exits 2 naming the key (exit 2)
+OK    federation peer id pattern exits 2 naming the key (exit 2)
+OK    federation peer label over 80 characters exits 2 naming the key (exit 2)
+OK    federation duplicate peer id exits 2 naming the key (exit 2)
+OK    federation peer origin with a trailing slash exits 2 naming the key (exit 2)
+OK    federation self missing exits 2 naming the key (exit 2)
+OK    federation peer id missing exits 2 naming the key (exit 2)
+OK    federation peer label missing exits 2 naming the key (exit 2)
+OK    config without federation loads and has no federation output
+FAIL config without console loads with unchanged output
+OK    compactionReadBytes 8388608 loads and is in the output as written
+OK    compactionReadBytes "x" loads and is in the output as written
+OK    compactionStreams 2048 loads and is in the output as written
+OK    compactionStreams "x" loads and is in the output as written
+OK    failed validation modified nothing
+
+✔ install: absent (28.022711ms)
+✔ install: local (26.314077ms)
+✔ install: local endpoint (27.030768ms)
+✔ install: containerized missing endpoint (26.036164ms)
+✔ install: bad endpoint "tcp://localhost:2375" (29.311242ms)
+✔ install: bad endpoint "ssh://host/run/docker.sock" (28.012086ms)
+✔ install: bad endpoint "run/docker.sock" (26.941261ms)
+✔ install: bad endpoint "unix://relative.sock" (26.90999ms)
+✔ install: bad endpoint "unix:///a b.sock" (23.646272ms)
+✔ install: bad endpoint "unix:///a.sock\n" (26.383344ms)
+✔ install: bad endpoint "unix:///a" (24.914913ms)
+✔ install: bad endpoint "" (24.320663ms)
+✔ install: bad endpoint null (25.688262ms)
+✔ install: bad endpoint 4 (26.934437ms)
+✔ install: valid endpoint (27.504294ms)
+✔ install: unknown mode (27.111833ms)
+✔ install: missing mode (26.365767ms)
+✔ install: unknown key (26.974983ms)
+✔ install: null (25.910901ms)
+✔ install: array (25.507423ms)
+ℹ tests 20
+ℹ suites 0
+ℹ pass 20
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 584.03015
+OK    install configuration cases
+selftest: 55 passed, 1 failed
+EXIT=1

agents/bentina/work/queue-157/04-install-unit-fixed.log

@@ -0,0 +1,43 @@
+2026-10-24T04:08:52Z
+ 23:08:52 up 10 days, 14:28,  2 users,  load average: 2.16, 2.49, 2.04
+CLEAR sage-3919 TMPDIR=/mnt/storage/scratch/tmp/o2n7Db
+✔ install: absent (31.8592ms)
+✔ install: local (29.807282ms)
+✔ install: local endpoint (24.009896ms)
+✔ install: containerized missing endpoint (26.296453ms)
+✔ install: bad endpoint "tcp://localhost:2375" (26.404525ms)
+✔ install: bad endpoint "ssh://host/run/docker.sock" (27.486365ms)
+✔ install: bad endpoint "run/docker.sock" (24.280876ms)
+✔ install: bad endpoint "unix://relative.sock" (24.363468ms)
+✔ install: bad endpoint "unix:///a b.sock" (24.920898ms)
+✔ install: bad endpoint "unix:///a.sock\n" (25.784031ms)
+✔ install: bad endpoint "unix:///a" (27.89803ms)
+✔ install: bad endpoint "" (28.939674ms)
+✔ install: bad endpoint null (26.129602ms)
+✔ install: bad endpoint 4 (27.601233ms)
+✔ install: valid endpoint (29.310223ms)
+✔ install: unknown mode (30.307014ms)
+✔ install: missing mode (26.432375ms)
+✔ install: unknown key (29.208115ms)
+✔ install: null (29.793ms)
+✔ install: array (28.956899ms)
+✔ helper refuses rootful (88.440017ms)
+✔ helper refuses missing (49.868469ms)
+✔ helper refuses substring (76.03165ms)
+✔ helper refuses object (77.494513ms)
+✔ helper refuses invalid JSON (78.525159ms)
+✔ helper refuses null success (79.166999ms)
+✔ helper refuses rootless output but failed (52.195589ms)
+✔ helper checks once and explicitly names host for both calls (124.380922ms)
+✔ local mode refuses before Docker null (28.199092ms)
+✔ local mode refuses before Docker {"mode":"local"} (29.618143ms)
+✔ invalid config refuses before Docker (27.543884ms)
+ℹ tests 31
+ℹ suites 0
+ℹ pass 31
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 762.528877
+EXIT=0

agents/bentina/work/queue-157/05-config-fixed.log

@@ -0,0 +1,90 @@
+2026-10-24T04:09:01Z
+ 23:09:01 up 10 days, 14:28,  2 users,  load average: 2.28, 2.50, 2.05
+CLEAR sage-3919 TMPDIR=/mnt/storage/scratch/tmp/hYypHU
+OK    absent adapter defaults to pi
+OK    adapter mock validates (exit 0)
+OK    unsupported adapter exits 2 (exit 2)
+OK    env exports adapter
+OK    bootstrap creates default when absent (exit 0)
+OK    bootstrap wrote config file
+OK    bootstrap is idempotent on existing config (exit 0)
+OK    bootstrap did not rewrite existing config
+OK    validate missing config exits 3 (exit 3)
+OK    malformed JSON exits 2 (exit 2)
+OK    unsupported configVersion exits 2 (exit 2)
+OK    unknown top-level key exits 2 (exit 2)
+OK    unknown execution key exits 2 (exit 2)
+OK    unsupported backend exits 2 (exit 2)
+OK    unsupported environment exits 2 (exit 2)
+OK    relative dataRoot exits 2 (exit 2)
+OK    non-canonical dataRoot exits 2 (exit 2)
+OK    filesystem root dataRoot exits 2 (exit 2)
+OK    home directory dataRoot exits 2 (exit 2)
+OK    dataRoot containing config dir exits 2 (exit 2)
+OK    control character in provider exits 2 (exit 2)
+OK    symlinked config file exits 2 (exit 2)
+OK    env exports resolve correctly
+OK    valid console.sso loads and is in the output
+OK    console.sso HS256 alg exits 2 naming the path (exit 2)
+OK    console.sso alg none exits 2 naming the path (exit 2)
+OK    console.sso missing slot field exits 2 naming the path (exit 2)
+OK    console.sso slot name outside the pattern exits 2 naming the path (exit 2)
+OK    unknown key under console exits 2 naming the path (exit 2)
+OK    valid federation key loads and is in the output
+OK    federation unknown sub-key exits 2 naming the key (exit 2)
+OK    federation peer unknown sub-key exits 2 naming the key (exit 2)
+OK    federation peer origin over http exits 2 naming the key (exit 2)
+OK    federation peer origin with a path exits 2 naming the key (exit 2)
+OK    federation peer origin with userinfo exits 2 naming the key (exit 2)
+OK    federation peer id equal to self exits 2 naming the key (exit 2)
+OK    federation peer label empty exits 2 naming the key (exit 2)
+OK    federation not an object exits 2 naming the key (exit 2)
+OK    federation self pattern exits 2 naming the key (exit 2)
+OK    federation peers not an array exits 2 naming the key (exit 2)
+OK    federation peer not an object exits 2 naming the key (exit 2)
+OK    federation peer id pattern exits 2 naming the key (exit 2)
+OK    federation peer label over 80 characters exits 2 naming the key (exit 2)
+OK    federation duplicate peer id exits 2 naming the key (exit 2)
+OK    federation peer origin with a trailing slash exits 2 naming the key (exit 2)
+OK    federation self missing exits 2 naming the key (exit 2)
+OK    federation peer id missing exits 2 naming the key (exit 2)
+OK    federation peer label missing exits 2 naming the key (exit 2)
+OK    config without federation loads and has no federation output
+OK    config without console loads with unchanged output
+OK    compactionReadBytes 8388608 loads and is in the output as written
+OK    compactionReadBytes "x" loads and is in the output as written
+OK    compactionStreams 2048 loads and is in the output as written
+OK    compactionStreams "x" loads and is in the output as written
+OK    failed validation modified nothing
+
+✔ install: absent (33.602997ms)
+✔ install: local (27.76628ms)
+✔ install: local endpoint (28.360207ms)
+✔ install: containerized missing endpoint (26.872508ms)
+✔ install: bad endpoint "tcp://localhost:2375" (27.729466ms)
+✔ install: bad endpoint "ssh://host/run/docker.sock" (29.663768ms)
+✔ install: bad endpoint "run/docker.sock" (28.875798ms)
+✔ install: bad endpoint "unix://relative.sock" (27.427064ms)
+✔ install: bad endpoint "unix:///a b.sock" (30.77649ms)
+✔ install: bad endpoint "unix:///a.sock\n" (34.03786ms)
+✔ install: bad endpoint "unix:///a" (31.459666ms)
+✔ install: bad endpoint "" (26.221924ms)
+✔ install: bad endpoint null (31.982463ms)
+✔ install: bad endpoint 4 (34.408275ms)
+✔ install: valid endpoint (30.184118ms)
+✔ install: unknown mode (26.58596ms)
+✔ install: missing mode (26.563043ms)
+✔ install: unknown key (28.663535ms)
+✔ install: null (26.567284ms)
+✔ install: array (24.756494ms)
+ℹ tests 20
+ℹ suites 0
+ℹ pass 20
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 640.201326
+OK    install configuration cases
+selftest: 56 passed, 0 failed
+EXIT=0

agents/bentina/work/queue-157/06-install.log

@@ -0,0 +1,245 @@
+2026-10-24T04:09:14Z
+ 23:09:14 up 10 days, 14:29,  2 users,  load average: 2.58, 2.56, 2.08
+CLEAR sage-3919 TMPDIR=/mnt/storage/scratch/tmp/7xUNh5
+✔ install: absent (28.837858ms)
+✔ install: local (28.328967ms)
+✔ install: local endpoint (26.178892ms)
+✔ install: containerized missing endpoint (25.578947ms)
+✔ install: bad endpoint "tcp://localhost:2375" (24.988885ms)
+✔ install: bad endpoint "ssh://host/run/docker.sock" (25.850327ms)
+✔ install: bad endpoint "run/docker.sock" (26.499708ms)
+✔ install: bad endpoint "unix://relative.sock" (42.276491ms)
+✔ install: bad endpoint "unix:///a b.sock" (32.161423ms)
+✔ install: bad endpoint "unix:///a.sock\n" (26.834457ms)
+✔ install: bad endpoint "unix:///a" (30.552354ms)
+✔ install: bad endpoint "" (28.938768ms)
+✔ install: bad endpoint null (27.00598ms)
+✔ install: bad endpoint 4 (29.63046ms)
+✔ install: valid endpoint (28.707851ms)
+✔ install: unknown mode (25.507911ms)
+✔ install: missing mode (27.101142ms)
+✔ install: unknown key (32.316453ms)
+✔ install: null (27.273355ms)
+✔ install: array (25.503395ms)
+✔ helper refuses rootful (81.447175ms)
+✔ helper refuses missing (49.32616ms)
+✔ helper refuses substring (80.299191ms)
+✔ helper refuses object (96.465808ms)
+✔ helper refuses invalid JSON (89.854499ms)
+✔ helper refuses null success (79.934412ms)
+✔ helper refuses rootless output but failed (61.053445ms)
+✔ helper checks once and explicitly names host for both calls (120.469053ms)
+✔ local mode refuses before Docker null (28.252291ms)
+✔ local mode refuses before Docker {"mode":"local"} (32.631557ms)
+✔ invalid config refuses before Docker (28.529643ms)
+ℹ tests 31
+ℹ suites 0
+ℹ pass 31
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 798.423992
+✔ allows exact host and port, fragmented headers, and preserves tunnel head (18.932222ms)
+✔ unlisted host (1.309946ms)
+✔ unlisted port (1.067401ms)
+✔ GET (0.988233ms)
+✔ invalid port (0.919738ms)
+✔ userinfo (0.832286ms)
+✔ bad header (0.761085ms)
+✔ slow client has a total header deadline (80.345593ms)
+✔ oversized header refuses (1.044536ms)
+✔ missing, invalid and unknown lists fail closed (0.486134ms)
+✔ refused upstream returns 502 while retaining one allowed decision (1.562662ms)
+ℹ tests 11
+ℹ suites 0
+ℹ pass 11
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 149.849801
+#0 building with "default" instance using docker driver
+
+#1 [internal] load build definition from Dockerfile
+#1 transferring dockerfile: 454B done
+#1 DONE 0.0s
+
+#2 [internal] load metadata for docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
+#2 DONE 1.6s
+
+#3 [internal] load .dockerignore
+#3 transferring context: 2B done
+#3 DONE 0.0s
+
+#4 [1/9] FROM docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
+#4 resolve docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20 done
+#4 ...
+
+#5 [internal] load build context
+#5 transferring context: 31.36MB 0.1s done
+#5 DONE 0.2s
+
+#4 [1/9] FROM docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
+#4 sha256:08489011619dfda982191cb9cc0418dc48ea3b1341588aeef534e4db0ab4d3d0 447B / 447B 0.1s done
+#4 sha256:1a0cf4b1ffc8dd659bb8c6e90471bc8fec24620e4fdb68bb2b6faa56154ae146 0B / 1.71MB 0.2s
+#4 sha256:11ffcabe0f772f0f1a9c80b4b290b5ec0de54f11c671f0fa10e5844f9b52d17a 0B / 50.86MB 0.2s
+#4 sha256:517d640e32835287653c4b15eb5d9f6bcf48e103baea4f7e29bac937002f649b 3.31kB / 3.31kB 0.2s done
+#4 sha256:1a0cf4b1ffc8dd659bb8c6e90471bc8fec24620e4fdb68bb2b6faa56154ae146 1.71MB / 1.71MB 0.3s done
+#4 sha256:7fd1ebe418b5079d4aa36f416af9b143d127bc75b0155d71cb5fd559b5e04d39 3.15MB / 28.25MB 0.3s
+#4 sha256:11ffcabe0f772f0f1a9c80b4b290b5ec0de54f11c671f0fa10e5844f9b52d17a 6.29MB / 50.86MB 0.5s
+#4 sha256:7fd1ebe418b5079d4aa36f416af9b143d127bc75b0155d71cb5fd559b5e04d39 11.53MB / 28.25MB 0.5s
+#4 sha256:11ffcabe0f772f0f1a9c80b4b290b5ec0de54f11c671f0fa10e5844f9b52d17a 14.68MB / 50.86MB 0.6s
+#4 sha256:7fd1ebe418b5079d4aa36f416af9b143d127bc75b0155d71cb5fd559b5e04d39 19.92MB / 28.25MB 0.6s
+#4 sha256:11ffcabe0f772f0f1a9c80b4b290b5ec0de54f11c671f0fa10e5844f9b52d17a 24.12MB / 50.86MB 0.8s
+#4 sha256:7fd1ebe418b5079d4aa36f416af9b143d127bc75b0155d71cb5fd559b5e04d39 28.25MB / 28.25MB 0.8s done
+#4 sha256:11ffcabe0f772f0f1a9c80b4b290b5ec0de54f11c671f0fa10e5844f9b52d17a 49.28MB / 50.86MB 1.1s
+#4 extracting sha256:7fd1ebe418b5079d4aa36f416af9b143d127bc75b0155d71cb5fd559b5e04d39
+#4 sha256:11ffcabe0f772f0f1a9c80b4b290b5ec0de54f11c671f0fa10e5844f9b52d17a 50.86MB / 50.86MB 1.1s done
+#4 extracting sha256:7fd1ebe418b5079d4aa36f416af9b143d127bc75b0155d71cb5fd559b5e04d39 0.7s done
+#4 DONE 1.6s
+
+#4 [1/9] FROM docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
+#4 extracting sha256:517d640e32835287653c4b15eb5d9f6bcf48e103baea4f7e29bac937002f649b 0.0s done
+#4 extracting sha256:11ffcabe0f772f0f1a9c80b4b290b5ec0de54f11c671f0fa10e5844f9b52d17a
+#4 extracting sha256:11ffcabe0f772f0f1a9c80b4b290b5ec0de54f11c671f0fa10e5844f9b52d17a 1.0s done
+#4 DONE 2.6s
+
+#4 [1/9] FROM docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
+#4 extracting sha256:1a0cf4b1ffc8dd659bb8c6e90471bc8fec24620e4fdb68bb2b6faa56154ae146 0.0s done
+#4 extracting sha256:08489011619dfda982191cb9cc0418dc48ea3b1341588aeef534e4db0ab4d3d0 done
+#4 DONE 2.7s
+
+#6 [2/9] WORKDIR /opt/mosaic
+#6 DONE 0.0s
+
+#7 [3/9] COPY package.json package-lock.json ./
+#7 DONE 0.0s
+
+#8 [4/9] RUN npm ci --omit=dev --ignore-scripts --no-audit --no-fund && npm cache clean --force
+#8 1.008 npm warn deprecated [email protected]: Use your platform's native DOMException instead
+#8 2.464 
+#8 2.464 added 128 packages in 2s
+#8 2.465 npm notice
+#8 2.465 npm notice New major version of npm available! 11.19.0 -> 12.2.1
+#8 2.465 npm notice Changelog: https://github.com/npm/cli/releases/tag/v12.2.1
+#8 2.465 npm notice To update run: npm install -g [email protected]
+#8 2.465 npm notice
+#8 2.562 npm warn using --force Recommended protections disabled.
+#8 DONE 2.7s
+
+#9 [5/9] COPY packages/ packages/
+#9 DONE 0.1s
+
+#10 [6/9] COPY scripts/ scripts/
+#10 DONE 0.0s
+
+#11 [7/9] COPY contracts/ contracts/
+#11 DONE 0.0s
+
+#12 [8/9] COPY roles/ roles/
+#12 DONE 0.0s
+
+#13 [9/9] COPY RELEASE ./
+#13 DONE 0.0s
+
+#14 exporting to image
+#14 exporting layers
+#14 exporting layers 3.3s done
+#14 exporting manifest sha256:b288643bbe89b43f6ffe7890598fe70801933c9e1e5d64efbfc6d87bbc502389 done
+#14 exporting config sha256:c8e137b79bfd807d4d9fc37d5ac211476decc3cc3c8db1e39b2e5dedf5471191 done
+#14 exporting attestation manifest sha256:5f2e757dd0fc2a424c78eb4bdd2ddd3039067afb54bc76bc03d6a6f9f1e2ac75 done
+#14 exporting manifest list sha256:7b4fa741d785225148156d1962a1770b40ab84b55ce8ffde5a3485b316f93b3a done
+#14 naming to docker.io/library/mosaic-core:0.0.12 done
+#14 unpacking to docker.io/library/mosaic-core:0.0.12
+#14 unpacking to docker.io/library/mosaic-core:0.0.12 1.6s done
+#14 DONE 4.9s
+#0 building with "default" instance using docker driver
+
+#1 [internal] load build definition from Dockerfile
+#1 transferring dockerfile: 424B done
+#1 WARN: InvalidDefaultArgInFrom: Default value for ARG ${CORE_IMAGE} results in empty or invalid base image name (line 2)
+#1 DONE 0.0s
+
+#2 [internal] load metadata for docker.io/library/mosaic-core:0.0.12
+#2 DONE 0.0s
+
+#3 [internal] load .dockerignore
+#3 transferring context: 2B done
+#3 DONE 0.0s
+
+#4 [1/2] FROM docker.io/library/mosaic-core:0.0.12@sha256:7b4fa741d785225148156d1962a1770b40ab84b55ce8ffde5a3485b316f93b3a
+#4 resolve docker.io/library/mosaic-core:0.0.12@sha256:7b4fa741d785225148156d1962a1770b40ab84b55ce8ffde5a3485b316f93b3a done
+#4 DONE 0.0s
+
+#5 [2/2] RUN npm install -g --no-audit --no-fund @anthropic-ai/[email protected] @earendil-works/[email protected]  && npm cache clean --force && rm -rf /root/.npm /tmp/*
+#5 1.716 npm warn deprecated [email protected]: Use your platform's native DOMException instead
+#5 6.031 
+#5 6.031 added 167 packages in 6s
+#5 6.032 npm warn install-scripts 4 packages have install scripts not yet covered by allowScripts:
+#5 6.032 npm warn install-scripts   @anthropic-ai/[email protected] (postinstall: node install.cjs)
+#5 6.032 npm warn install-scripts   @google/[email protected] (preinstall: echo 'preinstall: no-op')
+#5 6.032 npm warn install-scripts   [email protected] (postinstall: node install.js)
+#5 6.032 npm warn install-scripts   [email protected] (postinstall: node scripts/postinstall)
+#5 6.032 npm warn install-scripts
+#5 6.032 npm warn install-scripts Run `npm install -g --allow-scripts=@anthropic-ai/claude-code,@google/genai,esbuild,protobufjs` to allow these scripts once, or `npm config set allow-scripts=@anthropic-ai/claude-code,@google/genai,esbuild,protobufjs --location=user` to allow them for all global installs.
+#5 6.119 npm warn using --force Recommended protections disabled.
+#5 DONE 6.3s
+
+#6 exporting to image
+#6 exporting layers
+#6 exporting layers 18.7s done
+#6 exporting manifest sha256:16af90e8e3291626f37fb5b2e78904d87126d875e7bcc240dd2ba453ca62bc10 done
+#6 exporting config sha256:ad269f0a84c0b1c5833b787793a45df782c1aae86e37f6216782a12a01f4557b done
+#6 exporting attestation manifest sha256:436490e0d139cb0db83f260c42ac3364377971160b2418cd03ee07c18873a5f6 done
+#6 exporting manifest list sha256:bc95495952e58a005c275a9d00842242c17965d0d9c2a83c476048cbfc110946 done
+#6 naming to docker.io/library/mosaic-session:0.0.12 done
+#6 unpacking to docker.io/library/mosaic-session:0.0.12
+#6 unpacking to docker.io/library/mosaic-session:0.0.12 5.3s done
+#6 DONE 24.0s
+
+ 1 warning found (use docker --debug to expand):
+ - InvalidDefaultArgInFrom: Default value for ARG ${CORE_IMAGE} results in empty or invalid base image name (line 2)
+#0 building with "default" instance using docker driver
+
+#1 [internal] load build definition from Dockerfile
+#1 transferring dockerfile: 299B done
+#1 DONE 0.0s
+
+#2 [internal] load metadata for docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
+#2 DONE 0.0s
+
+#3 [internal] load .dockerignore
+#3 transferring context: 2B done
+#3 DONE 0.0s
+
+#4 [1/4] FROM docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
+#4 resolve docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20 done
+#4 DONE 0.0s
+
+#5 [2/4] WORKDIR /opt/mosaic
+#5 CACHED
+
+#6 [internal] load build context
+#6 transferring context: 459B 0.0s done
+#6 DONE 0.0s
+
+#7 [3/4] COPY packages/egress/ packages/egress/
+#7 DONE 0.0s
+
+#8 [4/4] COPY contracts/egress.json contracts/egress.json
+#8 DONE 0.0s
+
+#9 exporting to image
+#9 exporting layers 0.0s done
+#9 exporting manifest sha256:f3f318ddc871b5a5f953aa0709cf69194260e633e26b15daafefe40572a36f27 done
+#9 exporting config sha256:c315f86a3be49d29aa7cad287a1653424206adb43683a34b91633b9bb8a14c6b done
+#9 exporting attestation manifest sha256:d41ee39a55170821cf46236fbf6069519e52c7386e27259ee17113777fa348e1 done
+#9 exporting manifest list sha256:af29f552efea177d706779ed9afb43c89763b58de913da0a570208cdda619d50 done
+#9 naming to docker.io/library/mosaic-egress:0.0.12 done
+#9 unpacking to docker.io/library/mosaic-egress:0.0.12 0.0s done
+#9 DONE 0.1s
+internal network: listed TLS reached, unlisted host/port refused, external DNS refused
+Vikunja client public GET 200; notifier REST dummy-token GET 401
+test-install: PASS (provider-host measurement remains Mos gate)
+EXIT=0

agents/bentina/work/queue-157/07-egress-final.log

@@ -0,0 +1,24 @@
+2026-10-24T04:13:52Z
+ 23:13:52 up 10 days, 14:33,  2 users,  load average: 2.19, 2.69, 2.26
+CLEAR sage-3923 TMPDIR=/mnt/storage/scratch/tmp/5Tw4Jn
+✔ allows exact host and port, fragmented headers, and preserves tunnel head (17.065009ms)
+✔ unlisted host (1.179696ms)
+✔ unlisted port (4.182798ms)
+✔ GET (0.916554ms)
+✔ invalid port (0.897474ms)
+✔ userinfo (0.772938ms)
+✔ bad header (0.737254ms)
+✔ slow client has a total header deadline (81.64527ms)
+✔ oversized header refuses (1.073337ms)
+✔ missing, invalid and unknown lists fail closed (0.464571ms)
+✔ refused upstream returns 502 while retaining one allowed decision (1.555082ms)
+✔ upstream reset after CONNECT closes the tunnel without a second HTTP response (21.757224ms)
+ℹ tests 12
+ℹ suites 0
+ℹ pass 12
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 173.90579
+EXIT=0

agents/bentina/work/queue-157/08-install-final.log

@@ -0,0 +1,207 @@
+2026-10-24T04:13:56Z
+ 23:13:56 up 10 days, 14:33,  2 users,  load average: 2.18, 2.67, 2.26
+CLEAR sage-3923 TMPDIR=/mnt/storage/scratch/tmp/Yb2lkZ
+✔ install: absent (26.874578ms)
+✔ install: local (25.86789ms)
+✔ install: local endpoint (24.545469ms)
+✔ install: containerized missing endpoint (26.458263ms)
+✔ install: bad endpoint "tcp://localhost:2375" (24.315713ms)
+✔ install: bad endpoint "ssh://host/run/docker.sock" (27.113397ms)
+✔ install: bad endpoint "run/docker.sock" (24.399221ms)
+✔ install: bad endpoint "unix://relative.sock" (26.259544ms)
+✔ install: bad endpoint "unix:///a b.sock" (24.051655ms)
+✔ install: bad endpoint "unix:///a.sock\n" (23.493287ms)
+✔ install: bad endpoint "unix:///a" (25.527734ms)
+✔ install: bad endpoint "" (24.647712ms)
+✔ install: bad endpoint null (24.029319ms)
+✔ install: bad endpoint 4 (22.545369ms)
+✔ install: valid endpoint (24.217907ms)
+✔ install: unknown mode (22.578207ms)
+✔ install: missing mode (26.668685ms)
+✔ install: unknown key (25.239503ms)
+✔ install: null (26.507504ms)
+✔ install: array (23.325961ms)
+✔ helper refuses rootful (83.142099ms)
+✔ helper refuses missing (48.938896ms)
+✔ helper refuses substring (74.574145ms)
+✔ helper refuses object (69.21506ms)
+✔ helper refuses invalid JSON (71.320245ms)
+✔ helper refuses null success (70.397988ms)
+✔ helper refuses rootless output but failed (50.077162ms)
+✔ helper checks once and explicitly names host for both calls (116.70882ms)
+✔ local mode refuses before Docker null (26.523468ms)
+✔ local mode refuses before Docker {"mode":"local"} (26.276186ms)
+✔ invalid config refuses before Docker (26.092328ms)
+ℹ tests 31
+ℹ suites 0
+ℹ pass 31
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 707.332707
+✔ allows exact host and port, fragmented headers, and preserves tunnel head (15.694598ms)
+✔ unlisted host (1.162772ms)
+✔ unlisted port (1.047448ms)
+✔ GET (0.913924ms)
+✔ invalid port (0.930799ms)
+✔ userinfo (0.750312ms)
+✔ bad header (0.739214ms)
+✔ slow client has a total header deadline (81.348784ms)
+✔ oversized header refuses (0.992296ms)
+✔ missing, invalid and unknown lists fail closed (0.441271ms)
+✔ refused upstream returns 502 while retaining one allowed decision (1.4408ms)
+✔ upstream reset after CONNECT closes the tunnel without a second HTTP response (21.481904ms)
+ℹ tests 12
+ℹ suites 0
+ℹ pass 12
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 169.285852
+#0 building with "default" instance using docker driver
+
+#1 [internal] load build definition from Dockerfile
+#1 transferring dockerfile: 454B done
+#1 DONE 0.0s
+
+#2 [internal] load metadata for docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
+#2 DONE 0.0s
+
+#3 [internal] load .dockerignore
+#3 transferring context: 2B done
+#3 DONE 0.0s
+
+#4 [1/9] FROM docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
+#4 resolve docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20 done
+#4 DONE 0.0s
+
+#5 [internal] load build context
+#5 transferring context: 31.37MB 0.1s done
+#5 DONE 0.1s
+
+#6 [3/9] COPY package.json package-lock.json ./
+#6 CACHED
+
+#7 [2/9] WORKDIR /opt/mosaic
+#7 CACHED
+
+#8 [4/9] RUN npm ci --omit=dev --ignore-scripts --no-audit --no-fund && npm cache clean --force
+#8 CACHED
+
+#9 [5/9] COPY packages/ packages/
+#9 DONE 0.1s
+
+#10 [6/9] COPY scripts/ scripts/
+#10 DONE 0.0s
+
+#11 [7/9] COPY contracts/ contracts/
+#11 DONE 0.0s
+
+#12 [8/9] COPY roles/ roles/
+#12 DONE 0.0s
+
+#13 [9/9] COPY RELEASE ./
+#13 DONE 0.0s
+
+#14 exporting to image
+#14 exporting layers
+#14 exporting layers 0.4s done
+#14 exporting manifest sha256:065dd55d59585806e540929e2ea66df397d47292cc84160bb7be491ecd2b9d59 done
+#14 exporting config sha256:3d97362dc6b6242fc540f08f538068b91ec28b1d3c9a34d7bc2bebff137a7a40 done
+#14 exporting attestation manifest sha256:f66bf47e4ec5b67db64f44d8554192f646111116e165ec3bc017b5a2b011204b done
+#14 exporting manifest list sha256:d840b0ec16ce6548549d18fb8bfc6b13c76ee77e9131a317582f919c61dcaf7f done
+#14 naming to docker.io/library/mosaic-core:0.0.12 done
+#14 unpacking to docker.io/library/mosaic-core:0.0.12
+#14 unpacking to docker.io/library/mosaic-core:0.0.12 0.2s done
+#14 DONE 0.6s
+#0 building with "default" instance using docker driver
+
+#1 [internal] load build definition from Dockerfile
+#1 transferring dockerfile: 424B done
+#1 WARN: InvalidDefaultArgInFrom: Default value for ARG ${CORE_IMAGE} results in empty or invalid base image name (line 2)
+#1 DONE 0.0s
+
+#2 [internal] load metadata for docker.io/library/mosaic-core:0.0.12
+#2 DONE 0.0s
+
+#3 [internal] load .dockerignore
+#3 transferring context: 2B done
+#3 DONE 0.0s
+
+#4 [1/2] FROM docker.io/library/mosaic-core:0.0.12@sha256:d840b0ec16ce6548549d18fb8bfc6b13c76ee77e9131a317582f919c61dcaf7f
+#4 resolve docker.io/library/mosaic-core:0.0.12@sha256:d840b0ec16ce6548549d18fb8bfc6b13c76ee77e9131a317582f919c61dcaf7f done
+#4 DONE 0.0s
+
+#5 [2/2] RUN npm install -g --no-audit --no-fund @anthropic-ai/[email protected] @earendil-works/[email protected]  && npm cache clean --force && rm -rf /root/.npm /tmp/*
+#5 1.700 npm warn deprecated [email protected]: Use your platform's native DOMException instead
+#5 5.518 
+#5 5.518 added 167 packages in 5s
+#5 5.519 npm warn install-scripts 4 packages have install scripts not yet covered by allowScripts:
+#5 5.519 npm warn install-scripts   @anthropic-ai/[email protected] (postinstall: node install.cjs)
+#5 5.519 npm warn install-scripts   @google/[email protected] (preinstall: echo 'preinstall: no-op')
+#5 5.519 npm warn install-scripts   [email protected] (postinstall: node install.js)
+#5 5.519 npm warn install-scripts   [email protected] (postinstall: node scripts/postinstall)
+#5 5.519 npm warn install-scripts
+#5 5.519 npm warn install-scripts Run `npm install -g --allow-scripts=@anthropic-ai/claude-code,@google/genai,esbuild,protobufjs` to allow these scripts once, or `npm config set allow-scripts=@anthropic-ai/claude-code,@google/genai,esbuild,protobufjs --location=user` to allow them for all global installs.
+#5 5.590 npm warn using --force Recommended protections disabled.
+#5 DONE 5.7s
+
+#6 exporting to image
+#6 exporting layers
+#6 exporting layers 16.9s done
+#6 exporting manifest sha256:d4c83e350da6f18bfa7f3dbcef9ab078d72ef7f1f957a2926726e17973969e6a done
+#6 exporting config sha256:8afa310f48e06614963dcbcdc9c3ac497d9e4bad4ddd0524062ba8a52bc3cda2 done
+#6 exporting attestation manifest sha256:b7f082a8cd17d2c90eb27a81359aea66186b80d56a6d0c5e89d29187a2f78ed4 done
+#6 exporting manifest list sha256:2b6299e5a329adf85ea36038cb0407f2328e72e848dbfe95a17bd1fefbf9cf92 done
+#6 naming to docker.io/library/mosaic-session:0.0.12 done
+#6 unpacking to docker.io/library/mosaic-session:0.0.12
+#6 unpacking to docker.io/library/mosaic-session:0.0.12 4.7s done
+#6 DONE 21.7s
+
+ 1 warning found (use docker --debug to expand):
+ - InvalidDefaultArgInFrom: Default value for ARG ${CORE_IMAGE} results in empty or invalid base image name (line 2)
+#0 building with "default" instance using docker driver
+
+#1 [internal] load build definition from Dockerfile
+#1 transferring dockerfile: 299B done
+#1 DONE 0.0s
+
+#2 [internal] load metadata for docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
+#2 DONE 0.0s
+
+#3 [internal] load .dockerignore
+#3 transferring context: 2B done
+#3 DONE 0.0s
+
+#4 [1/4] FROM docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
+#4 resolve docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20 done
+#4 DONE 0.0s
+
+#5 [internal] load build context
+#5 transferring context: 459B 0.0s done
+#5 DONE 0.0s
+
+#6 [2/4] WORKDIR /opt/mosaic
+#6 CACHED
+
+#7 [3/4] COPY packages/egress/ packages/egress/
+#7 DONE 0.0s
+
+#8 [4/4] COPY contracts/egress.json contracts/egress.json
+#8 DONE 0.0s
+
+#9 exporting to image
+#9 exporting layers 0.0s done
+#9 exporting manifest sha256:e47c86064470f291d2ea468a1002f1e5f9b2e682e42940d06bd33d4e39945a6e done
+#9 exporting config sha256:ba520eadeb66ccfa2dbd3170744fca08affb4dac377d6cf2d26ec27d98d4ee25 done
+#9 exporting attestation manifest sha256:93cbd2f8a7fb1afb858b7b1a35a3020af8e9623e3a98be71d04e9d746c25d148 done
+#9 exporting manifest list sha256:a55e9d5ec6da74933bbefac6816efd0ea5246e825f61eaa4297e7baf7b09501c done
+#9 naming to docker.io/library/mosaic-egress:0.0.12 done
+#9 unpacking to docker.io/library/mosaic-egress:0.0.12 0.0s done
+#9 DONE 0.1s
+internal network: listed TLS reached, unlisted host/port refused, external DNS refused
+Vikunja client public GET 200; notifier REST dummy-token GET 401
+test-install: PASS (provider-host measurement remains Mos gate)
+EXIT=0

agents/bentina/work/queue-157/09-r2-archived-red.log

@@ -0,0 +1,165 @@
+2026-10-24T04:29:25Z
+ 23:29:25 up 10 days, 14:49,  2 users,  load average: 2.63, 2.97, 2.72
+CLEAR sage-3936 TMPDIR=/mnt/storage/scratch/tmp/jcNy2F archived=a14fdc443 expected RED
+✔ refusal 408 releases server socket (allowHalfOpen=false) (62.262337ms)
+✖ refusal 408 releases server socket (allowHalfOpen=true) (552.049114ms)
+✔ refusal 400 releases server socket (allowHalfOpen=false) (12.304169ms)
+✖ refusal 400 releases server socket (allowHalfOpen=true) (509.122366ms)
+✔ refusal 403 releases server socket (allowHalfOpen=false) (11.566877ms)
+✖ refusal 403 releases server socket (allowHalfOpen=true) (508.134074ms)
+✔ refusal 431 releases server socket (allowHalfOpen=false) (11.339612ms)
+✖ refusal 431 releases server socket (allowHalfOpen=true) (507.396552ms)
+✔ refusal 502 releases server socket (allowHalfOpen=false) (11.812225ms)
+✖ refusal 502 releases server socket (allowHalfOpen=true) (509.521901ms)
+✖ inherited cache is discarded; private cache stays unexported (rootless=false) (49.005306ms)
+✖ inherited cache is discarded; private cache stays unexported (rootless=true) (42.961333ms)
+ℹ tests 12
+ℹ suites 0
+ℹ pass 5
+ℹ fail 7
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 2739.328587
+
+✖ failing tests:
+
+test at ../../../../../../mnt/storage/scratch/tmp/jcNy2F/legacy/packages/egress/tests/refusal.test.mjs:11:79
+✖ refusal 408 releases server socket (allowHalfOpen=true) (552.049114ms)
+  AssertionError [ERR_ASSERTION]: refused peer must not retain a server socket
+  
+  1 !== 0
+  
+      at TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/jcNy2F/legacy/packages/egress/tests/refusal.test.mjs:30:10)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: false,
+    code: 'ERR_ASSERTION',
+    actual: 1,
+    expected: 0,
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
+
+test at ../../../../../../mnt/storage/scratch/tmp/jcNy2F/legacy/packages/egress/tests/refusal.test.mjs:11:79
+✖ refusal 400 releases server socket (allowHalfOpen=true) (509.122366ms)
+  AssertionError [ERR_ASSERTION]: refused peer must not retain a server socket
+  
+  1 !== 0
+  
+      at TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/jcNy2F/legacy/packages/egress/tests/refusal.test.mjs:30:10)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: false,
+    code: 'ERR_ASSERTION',
+    actual: 1,
+    expected: 0,
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
+
+test at ../../../../../../mnt/storage/scratch/tmp/jcNy2F/legacy/packages/egress/tests/refusal.test.mjs:11:79
+✖ refusal 403 releases server socket (allowHalfOpen=true) (508.134074ms)
+  AssertionError [ERR_ASSERTION]: refused peer must not retain a server socket
+  
+  1 !== 0
+  
+      at TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/jcNy2F/legacy/packages/egress/tests/refusal.test.mjs:30:10)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: false,
+    code: 'ERR_ASSERTION',
+    actual: 1,
+    expected: 0,
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
+
+test at ../../../../../../mnt/storage/scratch/tmp/jcNy2F/legacy/packages/egress/tests/refusal.test.mjs:11:79
+✖ refusal 431 releases server socket (allowHalfOpen=true) (507.396552ms)
+  AssertionError [ERR_ASSERTION]: refused peer must not retain a server socket
+  
+  1 !== 0
+  
+      at TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/jcNy2F/legacy/packages/egress/tests/refusal.test.mjs:30:10)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: false,
+    code: 'ERR_ASSERTION',
+    actual: 1,
+    expected: 0,
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
+
+test at ../../../../../../mnt/storage/scratch/tmp/jcNy2F/legacy/packages/egress/tests/refusal.test.mjs:11:79
+✖ refusal 502 releases server socket (allowHalfOpen=true) (509.521901ms)
+  AssertionError [ERR_ASSERTION]: refused peer must not retain a server socket
+  
+  1 !== 0
+  
+      at TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/jcNy2F/legacy/packages/egress/tests/refusal.test.mjs:30:10)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: false,
+    code: 'ERR_ASSERTION',
+    actual: 1,
+    expected: 0,
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
+
+test at ../../../../../../mnt/storage/scratch/tmp/jcNy2F/legacy/scripts/install-tests/review-cache.test.mjs:10:36
+✖ inherited cache is discarded; private cache stays unexported (rootless=false) (49.005306ms)
+  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:
+  
+  0 !== 2
+  
+      at TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/jcNy2F/legacy/scripts/install-tests/review-cache.test.mjs:19:10)
+      at Test.runInAsyncScope (node:async_hooks:226:14)
+      at Test.run (node:internal/test_runner/test:1402:25)
+      at Test.start (node:internal/test_runner/test:1262:17)
+      at startSubtestAfterBootstrap (node:internal/test_runner/harness:387:17) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: 0,
+    expected: 2,
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
+
+test at ../../../../../../mnt/storage/scratch/tmp/jcNy2F/legacy/scripts/install-tests/review-cache.test.mjs:10:36
+✖ inherited cache is discarded; private cache stays unexported (rootless=true) (42.961333ms)
+  AssertionError [ERR_ASSERTION]: Expected values to be strictly deep-equal:
+  + actual - expected
+  
+    [
+      '--host',
+  +   'unix:///inherited.sock',
+  +   'ps'
+  -   'unix:///configured.sock',
+  -   'info',
+  -   '--format',
+  -   '{{json .SecurityOptions}}'
+    ]
+  
+      at TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/jcNy2F/legacy/scripts/install-tests/review-cache.test.mjs:20:10)
+      at Test.runInAsyncScope (node:async_hooks:226:14)
+      at Test.run (node:internal/test_runner/test:1402:25)
+      at Test.processPendingSubtests (node:internal/test_runner/test:974:18)
+      at Test.postRun (node:internal/test_runner/test:1542:19)
+      at Test.run (node:internal/test_runner/test:1467:12)
+      at async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: [ '--host', 'unix:///inherited.sock', 'ps' ],
+    expected: [ '--host', 'unix:///configured.sock', 'info', '--format', '{{json .SecurityOptions}}' ],
+    operator: 'deepStrictEqual',
+    diff: 'simple'
+  }
+EXIT=1 (expected 1 for reproduced defects)

agents/bentina/work/queue-157/10-r2-regressions-green.log

@@ -0,0 +1,24 @@
+2026-10-24T04:29:39Z
+ 23:29:39 up 10 days, 14:49,  2 users,  load average: 2.20, 2.85, 2.69
+CLEAR sage-3936 TMPDIR=/mnt/storage/scratch/tmp/0gZQZl
+✔ refusal 408 releases server socket (allowHalfOpen=false) (53.837502ms)
+✔ refusal 408 releases server socket (allowHalfOpen=true) (42.030239ms)
+✔ refusal 400 releases server socket (allowHalfOpen=false) (1.261482ms)
+✔ refusal 400 releases server socket (allowHalfOpen=true) (0.904817ms)
+✔ refusal 403 releases server socket (allowHalfOpen=false) (0.917847ms)
+✔ refusal 403 releases server socket (allowHalfOpen=true) (0.804008ms)
+✔ refusal 431 releases server socket (allowHalfOpen=false) (0.718814ms)
+✔ refusal 431 releases server socket (allowHalfOpen=true) (0.668466ms)
+✔ refusal 502 releases server socket (allowHalfOpen=false) (1.344911ms)
+✔ refusal 502 releases server socket (allowHalfOpen=true) (0.979004ms)
+✔ inherited cache is discarded; private cache stays unexported (rootless=false) (82.339935ms)
+✔ inherited cache is discarded; private cache stays unexported (rootless=true) (112.830463ms)
+ℹ tests 12
+ℹ suites 0
+ℹ pass 12
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 245.761199
+EXIT=0

agents/bentina/work/queue-157/11-r2-install-units.log

@@ -0,0 +1,45 @@
+2026-10-24T04:29:49Z
+ 23:29:49 up 10 days, 14:49,  2 users,  load average: 2.09, 2.81, 2.68
+CLEAR sage-3936 TMPDIR=/mnt/storage/scratch/tmp/tUdE4l
+✔ install: absent (26.366604ms)
+✔ install: local (22.63247ms)
+✔ install: local endpoint (22.799393ms)
+✔ install: containerized missing endpoint (25.600693ms)
+✔ install: bad endpoint "tcp://localhost:2375" (23.03486ms)
+✔ install: bad endpoint "ssh://host/run/docker.sock" (23.131519ms)
+✔ install: bad endpoint "run/docker.sock" (24.109097ms)
+✔ install: bad endpoint "unix://relative.sock" (23.350143ms)
+✔ install: bad endpoint "unix:///a b.sock" (25.171936ms)
+✔ install: bad endpoint "unix:///a.sock\n" (23.993281ms)
+✔ install: bad endpoint "unix:///a" (23.480143ms)
+✔ install: bad endpoint "" (24.103262ms)
+✔ install: bad endpoint null (22.669641ms)
+✔ install: bad endpoint 4 (24.019575ms)
+✔ install: valid endpoint (24.603314ms)
+✔ install: unknown mode (24.602796ms)
+✔ install: missing mode (23.797819ms)
+✔ install: unknown key (22.998491ms)
+✔ install: null (25.129192ms)
+✔ install: array (24.482115ms)
+✔ helper refuses rootful (69.872106ms)
+✔ helper refuses missing (48.024972ms)
+✔ helper refuses substring (75.261764ms)
+✔ helper refuses object (69.618809ms)
+✔ helper refuses invalid JSON (69.071543ms)
+✔ helper refuses null success (72.882659ms)
+✔ helper refuses rootless output but failed (53.345431ms)
+✔ helper checks once and explicitly names host for both calls (102.552473ms)
+✔ local mode refuses before Docker null (26.011087ms)
+✔ local mode refuses before Docker {"mode":"local"} (28.185416ms)
+✔ invalid config refuses before Docker (27.514422ms)
+✔ inherited cache is discarded; private cache stays unexported (rootless=false) (75.055951ms)
+✔ inherited cache is discarded; private cache stays unexported (rootless=true) (109.227515ms)
+ℹ tests 33
+ℹ suites 0
+ℹ pass 33
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 690.153576
+EXIT=0

agents/bentina/work/queue-157/12-r2-egress-suite.log

@@ -0,0 +1,34 @@
+2026-10-24T04:29:59Z
+ 23:29:59 up 10 days, 14:49,  2 users,  load average: 1.93, 2.75, 2.66
+CLEAR sage-3936 TMPDIR=/mnt/storage/scratch/tmp/TviERP
+✔ allows exact host and port, fragmented headers, and preserves tunnel head (23.927026ms)
+✔ unlisted host (1.732173ms)
+✔ unlisted port (1.604846ms)
+✔ GET (1.184716ms)
+✔ invalid port (1.343703ms)
+✔ userinfo (1.188622ms)
+✔ bad header (1.150055ms)
+✔ slow client has a total header deadline (81.793054ms)
+✔ oversized header refuses (1.244104ms)
+✔ missing, invalid and unknown lists fail closed (0.57805ms)
+✔ refused upstream returns 502 while retaining one allowed decision (1.746501ms)
+✔ upstream reset after CONNECT closes the tunnel without a second HTTP response (22.237884ms)
+✔ refusal 408 releases server socket (allowHalfOpen=false) (55.691211ms)
+✔ refusal 408 releases server socket (allowHalfOpen=true) (43.646383ms)
+✔ refusal 400 releases server socket (allowHalfOpen=false) (1.568816ms)
+✔ refusal 400 releases server socket (allowHalfOpen=true) (1.105107ms)
+✔ refusal 403 releases server socket (allowHalfOpen=false) (1.202959ms)
+✔ refusal 403 releases server socket (allowHalfOpen=true) (1.016559ms)
+✔ refusal 431 releases server socket (allowHalfOpen=false) (0.914639ms)
+✔ refusal 431 releases server socket (allowHalfOpen=true) (0.889516ms)
+✔ refusal 502 releases server socket (allowHalfOpen=false) (1.698346ms)
+✔ refusal 502 releases server socket (allowHalfOpen=true) (1.234793ms)
+ℹ tests 22
+ℹ suites 0
+ℹ pass 22
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 183.862745
+EXIT=0

agents/bentina/work/queue-157/13-r2-install.log

@@ -0,0 +1,219 @@
+2026-10-24T04:30:08Z
+ 23:30:08 up 10 days, 14:49,  2 users,  load average: 1.79, 2.69, 2.64
+CLEAR sage-3936 TMPDIR=/mnt/storage/scratch/tmp/qmqk7B
+✔ install: absent (25.729884ms)
+✔ install: local (27.889152ms)
+✔ install: local endpoint (24.35751ms)
+✔ install: containerized missing endpoint (32.226985ms)
+✔ install: bad endpoint "tcp://localhost:2375" (36.932763ms)
+✔ install: bad endpoint "ssh://host/run/docker.sock" (30.311354ms)
+✔ install: bad endpoint "run/docker.sock" (25.198808ms)
+✔ install: bad endpoint "unix://relative.sock" (26.143708ms)
+✔ install: bad endpoint "unix:///a b.sock" (26.182728ms)
+✔ install: bad endpoint "unix:///a.sock\n" (24.78053ms)
+✔ install: bad endpoint "unix:///a" (25.183076ms)
+✔ install: bad endpoint "" (26.038913ms)
+✔ install: bad endpoint null (28.122111ms)
+✔ install: bad endpoint 4 (25.273681ms)
+✔ install: valid endpoint (24.978162ms)
+✔ install: unknown mode (25.362867ms)
+✔ install: missing mode (30.700943ms)
+✔ install: unknown key (25.157537ms)
+✔ install: null (25.311198ms)
+✔ install: array (22.791684ms)
+✔ helper refuses rootful (73.335956ms)
+✔ helper refuses missing (58.142601ms)
+✔ helper refuses substring (76.536037ms)
+✔ helper refuses object (71.066459ms)
+✔ helper refuses invalid JSON (75.615304ms)
+✔ helper refuses null success (74.72487ms)
+✔ helper refuses rootless output but failed (56.316538ms)
+✔ helper checks once and explicitly names host for both calls (116.375519ms)
+✔ local mode refuses before Docker null (33.189488ms)
+✔ local mode refuses before Docker {"mode":"local"} (33.416869ms)
+✔ invalid config refuses before Docker (33.260841ms)
+✔ inherited cache is discarded; private cache stays unexported (rootless=false) (77.918846ms)
+✔ inherited cache is discarded; private cache stays unexported (rootless=true) (125.24254ms)
+ℹ tests 33
+ℹ suites 0
+ℹ pass 33
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 751.025142
+✔ allows exact host and port, fragmented headers, and preserves tunnel head (21.619769ms)
+✔ unlisted host (1.449654ms)
+✔ unlisted port (1.146495ms)
+✔ GET (1.037357ms)
+✔ invalid port (0.994228ms)
+✔ userinfo (0.84581ms)
+✔ bad header (0.834734ms)
+✔ slow client has a total header deadline (81.37968ms)
+✔ oversized header refuses (1.096351ms)
+✔ missing, invalid and unknown lists fail closed (0.499339ms)
+✔ refused upstream returns 502 while retaining one allowed decision (1.730862ms)
+✔ upstream reset after CONNECT closes the tunnel without a second HTTP response (21.825124ms)
+✔ refusal 408 releases server socket (allowHalfOpen=false) (55.028256ms)
+✔ refusal 408 releases server socket (allowHalfOpen=true) (42.613145ms)
+✔ refusal 400 releases server socket (allowHalfOpen=false) (1.348936ms)
+✔ refusal 400 releases server socket (allowHalfOpen=true) (1.104981ms)
+✔ refusal 403 releases server socket (allowHalfOpen=false) (1.097498ms)
+✔ refusal 403 releases server socket (allowHalfOpen=true) (0.965577ms)
+✔ refusal 431 releases server socket (allowHalfOpen=false) (0.806917ms)
+✔ refusal 431 releases server socket (allowHalfOpen=true) (0.752832ms)
+✔ refusal 502 releases server socket (allowHalfOpen=false) (1.582846ms)
+✔ refusal 502 releases server socket (allowHalfOpen=true) (1.14509ms)
+ℹ tests 22
+ℹ suites 0
+ℹ pass 22
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 181.752441
+#0 building with "default" instance using docker driver
+
+#1 [internal] load build definition from Dockerfile
+#1 transferring dockerfile: 454B done
+#1 DONE 0.0s
+
+#2 [internal] load metadata for docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
+#2 DONE 0.7s
+
+#3 [internal] load .dockerignore
+#3 transferring context: 2B done
+#3 DONE 0.0s
+
+#4 [1/9] FROM docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
+#4 resolve docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20 done
+#4 DONE 0.0s
+
+#5 [internal] load build context
+#5 transferring context: 31.38MB 0.1s done
+#5 DONE 0.1s
+
+#6 [2/9] WORKDIR /opt/mosaic
+#6 CACHED
+
+#7 [3/9] COPY package.json package-lock.json ./
+#7 CACHED
+
+#8 [4/9] RUN npm ci --omit=dev --ignore-scripts --no-audit --no-fund && npm cache clean --force
+#8 CACHED
+
+#9 [5/9] COPY packages/ packages/
+#9 DONE 0.1s
+
+#10 [6/9] COPY scripts/ scripts/
+#10 DONE 0.0s
+
+#11 [7/9] COPY contracts/ contracts/
+#11 DONE 0.0s
+
+#12 [8/9] COPY roles/ roles/
+#12 DONE 0.0s
+
+#13 [9/9] COPY RELEASE ./
+#13 DONE 0.0s
+
+#14 exporting to image
+#14 exporting layers
+#14 exporting layers 0.4s done
+#14 exporting manifest sha256:cfd93bac400adc7580134f6177efd9d748e4b4ad65b0ff22515ca3b3ffafa530 done
+#14 exporting config sha256:bda6c7420c2df9510f081d28f50d205083867d0ce907c12290fff226c020fe38 done
+#14 exporting attestation manifest sha256:79c61e7daf7794a3db88121ce6260fafab69f182ef89773914c41ca75a44574c done
+#14 exporting manifest list sha256:82fc7a3df060c3e58799cca4f89dbd57dc007c5534fdedce54d3de637cc83b67 done
+#14 naming to docker.io/library/mosaic-core:0.0.12 done
+#14 unpacking to docker.io/library/mosaic-core:0.0.12
+#14 unpacking to docker.io/library/mosaic-core:0.0.12 0.2s done
+#14 DONE 0.7s
+#0 building with "default" instance using docker driver
+
+#1 [internal] load build definition from Dockerfile
+#1 transferring dockerfile: 424B done
+#1 WARN: InvalidDefaultArgInFrom: Default value for ARG ${CORE_IMAGE} results in empty or invalid base image name (line 2)
+#1 DONE 0.0s
+
+#2 [internal] load metadata for docker.io/library/mosaic-core:0.0.12
+#2 DONE 0.0s
+
+#3 [internal] load .dockerignore
+#3 transferring context: 2B done
+#3 DONE 0.0s
+
+#4 [1/2] FROM docker.io/library/mosaic-core:0.0.12@sha256:82fc7a3df060c3e58799cca4f89dbd57dc007c5534fdedce54d3de637cc83b67
+#4 resolve docker.io/library/mosaic-core:0.0.12@sha256:82fc7a3df060c3e58799cca4f89dbd57dc007c5534fdedce54d3de637cc83b67 done
+#4 DONE 0.0s
+
+#5 [2/2] RUN npm install -g --no-audit --no-fund @anthropic-ai/[email protected] @earendil-works/[email protected]  && npm cache clean --force && rm -rf /root/.npm /tmp/*
+#5 1.920 npm warn deprecated [email protected]: Use your platform's native DOMException instead
+#5 6.054 
+#5 6.054 added 167 packages in 6s
+#5 6.055 npm warn install-scripts 4 packages have install scripts not yet covered by allowScripts:
+#5 6.055 npm warn install-scripts   @anthropic-ai/[email protected] (postinstall: node install.cjs)
+#5 6.055 npm warn install-scripts   @google/[email protected] (preinstall: echo 'preinstall: no-op')
+#5 6.055 npm warn install-scripts   [email protected] (postinstall: node install.js)
+#5 6.055 npm warn install-scripts   [email protected] (postinstall: node scripts/postinstall)
+#5 6.055 npm warn install-scripts
+#5 6.055 npm warn install-scripts Run `npm install -g --allow-scripts=@anthropic-ai/claude-code,@google/genai,esbuild,protobufjs` to allow these scripts once, or `npm config set allow-scripts=@anthropic-ai/claude-code,@google/genai,esbuild,protobufjs --location=user` to allow them for all global installs.
+#5 6.127 npm warn using --force Recommended protections disabled.
+#5 DONE 6.3s
+
+#6 exporting to image
+#6 exporting layers
+#6 exporting layers 19.5s done
+#6 exporting manifest sha256:8b6b7de22cf08845f8fc02961c9677afb9faf0ddc4efe04ab4073a822a60518b done
+#6 exporting config sha256:94013fda37e404bc26b7b15281138cd60afbfea672cae2d2187acc0a7c3a0d7e done
+#6 exporting attestation manifest sha256:127fcf7ecd51a985d22f5a33d5c441d8fa1e246f88dc6e990c01197b46a61427 done
+#6 exporting manifest list sha256:9a272acf49ab376fa9739f66453979487ea8ab259bc43e56f6553e2da7b20835 done
+#6 naming to docker.io/library/mosaic-session:0.0.12 done
+#6 unpacking to docker.io/library/mosaic-session:0.0.12
+#6 unpacking to docker.io/library/mosaic-session:0.0.12 5.2s done
+#6 DONE 24.8s
+
+ 1 warning found (use docker --debug to expand):
+ - InvalidDefaultArgInFrom: Default value for ARG ${CORE_IMAGE} results in empty or invalid base image name (line 2)
+#0 building with "default" instance using docker driver
+
+#1 [internal] load build definition from Dockerfile
+#1 transferring dockerfile: 299B done
+#1 DONE 0.0s
+
+#2 [internal] load metadata for docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
+#2 DONE 0.0s
+
+#3 [internal] load .dockerignore
+#3 transferring context: 2B done
+#3 DONE 0.0s
+
+#4 [1/4] FROM docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
+#4 resolve docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20 done
+#4 DONE 0.0s
+
+#5 [internal] load build context
+#5 transferring context: 517B 0.0s done
+#5 DONE 0.0s
+
+#6 [2/4] WORKDIR /opt/mosaic
+#6 CACHED
+
+#7 [3/4] COPY packages/egress/ packages/egress/
+#7 DONE 0.0s
+
+#8 [4/4] COPY contracts/egress.json contracts/egress.json
+#8 DONE 0.0s
+
+#9 exporting to image
+#9 exporting layers 0.0s done
+#9 exporting manifest sha256:db3e8991a9330374257298a4a5d4ff36779e8c8d0b00c8b8ead47fc82e32fada done
+#9 exporting config sha256:e7d66f4f785e49a6529b3ed4b708e3b985f4e737d03a66a2c861666288d435d9 done
+#9 exporting attestation manifest sha256:8d2362ebe73a0b71b175ea4d9571ab841c6f5b0913e8fa265d1f4544307987d2 done
+#9 exporting manifest list sha256:36d0bbeb3abc92fc099d95e1fac416df5cc29edf147fcfc4d8743cbe1d60e592 done
+#9 naming to docker.io/library/mosaic-egress:0.0.12 done
+#9 unpacking to docker.io/library/mosaic-egress:0.0.12 0.0s done
+#9 DONE 0.1s
+internal network: listed TLS reached, unlisted host/port refused, external DNS refused
+Vikunja client public GET 200; notifier REST dummy-token GET 401
+test-install: PASS (provider-host measurement remains Mos gate)
+EXIT=0

agents/bentina/work/queue-157/BUILD.md

@@ -0,0 +1,363 @@
+# Row 157 / I2 / #1652 — Bentina build record
+
+## 2026-10-24 — recovery and pre-build hold
+
+Authority: Sage sage-3906 under Q246 / mos-1566. Seat thread:
+`d1ae468e-51ba-40c4-9513-b39ebbb40450`. Branch `bentina/row157`,
+base `ec86f2c84` (required registration commit), initially clean.
+Read root AGENTS.md, agents/bentina/README.md, the I2 brief and its shared
+rules, and the approved containerized-install design. CURRENT.md is a
+historical narrative; queue and Sage's assignment select this row. Goal
+order recovered from 2026-09-27_goals-review.md. Boyd first review, then
+Darkwing install-path review, per Sage's newer assignment.
+
+### Queue boundary
+
+The initial worktree `scripts/mosaic queue next bentina` refused because
+queue commands require the canonical checkout. Retried the same read using
+`/mnt/storage/src/mosaic-stack/scripts/mosaic` in that checkout (the documented
+queue location, without changing its configuration):
+
+```
+start row 157: I2 install images, the install config key, the endpoint helper and the egress proxy; brief docs/plans/2026-10-18_containerized-install-rows.md § I2 install images, the install config key, the endpoint helper and the egress proxy; brief differs from pinned blob; ask the lead to re-pin
+```
+
+No claimant move until Sage resolves the stale brief pin. No other queue
+write authorized. Sent Sage bentina-0001 with this refusal and the outbound
+path findings below. Implementation has not started.
+
+### Re-read of the I2 brief's cited files at ec86f2c84
+
+| Cited file / old site | Current observation |
+|---|---|
+| scripts/hello.sh:24 | Calls processing-control/src/container-cli.mjs:25; Docker moved behind processing control. |
+| scripts/build.sh:13 | Still ambient `docker compose build`:13. |
+| scripts/release.sh:39,122 | Still ambient image inspect:39 and compose build:122. |
+| scripts/agent.sh:208 | Now execs processing-control/src/container-cli.mjs --tty:209. |
+| scripts/verify.sh:36,39,45 | Ambient image inspect:37 and compose build:40; request now uses processing-control container CLI:46. |
+| scripts/land-work.sh:87-88 | Ambient network inspect/remove unchanged at 87-88. |
+| scripts/test-release.sh:58 | Docker probes now at 78,129; cleanup network rm:25; network checks:131,133. |
+| scripts/test-task.sh:139,395,442,517 | Docker probes now at 166,422,470,513,557,579; cleanup network rm:21 and network checks:581,583. |
+| scripts/mosaic-task.mjs:396 | Now calls runContainer:402, imported from processing control, rather than directly spawning Docker. |
+| packages/cli/src/git-socket.mjs:243 | dropNetwork now spawns ambient docker network rm:266; I6 retains ownership. |
+| scripts/mosaic-config.mjs:109-160 / :115 | Loader expanded for instances, Console, federation and compaction settings. validate starts:293; allowed-key expression:304 retains a prefix used by stack-release-fixture.mjs. No install key yet. |
+
+The design says to read via scripts/load_config; this is a function, not a
+file. Actual entry is scripts/common.sh:16 `load_config`, invoking
+mosaic-config.mjs env, then exporting four existing variables. No install
+mode/endpoint exports yet. No modification made.
+
+Design sections 3/4/7 re-read: exact base digest
+`node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20`;
+three release-tagged images; optional install with local default; exact
+rootless SecurityOptions array element check; baked agents/services CONNECT
+lists; JSON decision log. Spike proxy source re-read: one-chunk request
+parsing, no slow-client bound, environment allowlist; it needs the reviewed
+implementation required by I2, not a direct copy. package.json pins pi
+0.85.1; spike Dockerfile.clis pins Claude Code 2.1.296 (current session-code
+pin still needs checking before implementation).
+
+### Outbound stop condition (brief What ships; design section 7)
+
+The brief explicitly says: “If one doesn't, stop and tell Sage before
+adding a dependency.” Not all broker outbound paths use fetch at this base:
+
+- packages/bus/src/gitea-grant.mjs:11 imports node:https request;
+  send():91-140 calls httpsRequest:115 with `agent: false`, auth header,
+  optional CA, timeout and bounded response. It is not the measured fetch
+  path. runtime.mjs imports and wires the grant executor.
+- packages/bus/src/web.mjs delegates to packages/discord/src/web.mjs.
+  That implementation imports node:https/node:http:23-24, resolves public
+  addresses and pins the connection to a vetted address (:161 onward).
+  Changing it to fetch without preserving that fence would be a boundary
+  change. Its arbitrary public destinations also need reconciliation with
+  the design's fixed services host list; do not widen the list speculatively.
+- packages/tasks/src/vikunja.mjs:30,41 uses injected/default global fetch,
+  redirect:error, and processing cancellation/deadline.
+- packages/cli/src/notifier-process.mjs:41-46 supplies global fetch to
+  openDirect. packages/discord/src/notify.mjs:17 builds REST only; it
+  explicitly does not run the gateway. packages/discord/src/rest.mjs:45
+  calls injected fetch. The separate Discord connector gateway uses native
+  WebSocket (gateway.mjs:193); do not claim the notifier needs that gateway.
+- No NODE_USE_ENV_PROXY or HTTPS_PROXY setup found in host.mjs,
+  notifier-process.mjs or bus/process.mjs. I6 owns container startup;
+  I2's eventual image/process verification must demonstrate the actual path
+  with dummy credentials, after the transport ruling and a CLEAR slot.
+
+Recommendation sent to Sage: re-pin the approved brief and rule on the
+bounded handling/ownership of non-fetch paths before implementation. No new
+dependency, host-list expansion, or replacement of DNS pinning authorized.
+
+### Environment and evidence limits
+
+`/run/user/1000/docker.sock` exists as a Unix socket owned by jwoltje.
+Existence is not a rootless attestation. No Docker command or endpoint probe
+has been run. All test execution requires Sage CLEAR; none requested yet
+because there is no implementation candidate. No test, image build,
+credential read, live config/data access, daemon/volume/unit change, commit
+or push. Once unblocked, implement within the owned file list, add required
+acceptance cases, then request a concrete CLEAR with paths and suites;
+use fresh /mnt/storage/scratch/tmp/XXXXXX TMPDIR and timeout -k 10 for each
+scripts/test-*.sh. Old-test changes require Sage authorization before edits.
+Provider-host measurement ships with expected output for Mos; no real token
+will be used here.
+
+## sage-3907 — stop resolved; implementation draft
+
+Sage confirms only I6 changed since the brief pin, and will re-pin row 157.
+I2 must not change non-fetch security transports or add a dependency. Record
+all gaps, retain each named service host and code path in the contract with
+an explicit note, and build the rest. Sage owns the transport ruling before
+broker rollout in later rows. This supersedes the pre-build transport hold;
+the queue claim still awaits a current pin. No queue move attempted.
+
+Additional non-fetch broker paths found:
+
+- runtime.mjs:511 calls seat/src/working.mjs:461 publishRemote, which runs
+  git ls-remote/push at :479/:490 with credential helper input on fd 3.
+  checkout.mjs:80 gitEnv emits a fixed environment without HTTPS_PROXY.
+  This is Git HTTPS, not fetch; core's no-git design also prevents it from
+  working today. The Gitea host entry retains this caveat.
+- runtime.mjs:292 wires hostGrant; host-grant.mjs:174 spawns ssh-keyscan
+  to read public host keys at the registered address/port. It uses fixed
+  PATH-only env, not fetch or HTTP CONNECT. runtime.mjs:435 wires
+  hostExecutor; host-run.mjs:30-45 sshArgs explicitly sets
+  ProxyCommand=none and ProxyJump=none, then ssh to run authorized commands
+  using a pinned host key and private agent. Neither routes through an env
+  HTTP proxy. Hosts/ports are per registry and may be SSH, so no fabricated
+  :443 allowlist entry or network expansion was added.
+- Search-source plug-ins delegate to discord/src/web.mjs. searxng-url
+  sends search GETs to the operator's configured host; searxng-bundled points
+  at 127.0.0.1:8888. Both are non-fetch and depend on the existing DNS checks.
+  No fixed host can be truthfully named for arbitrary web.fetch or operator
+  search; no wildcard entry was added. These are documented gaps, not
+  claims of proxy coverage.
+- Separate Discord connector gateway uses native WebSocket; retained
+  gateway.discord.gg:443 with a NOT PROXIED note, as Sage directs. Notifier
+  is REST-only; no gateway test or live connector run added.
+
+Choices: dependency-free net proxy; exact list lookup; 8192-byte/5s total
+header bounds, 10s upstream connect/120s tunnel idle bounds. JSON allowed
+means the contract permitted the destination, not that upstream succeeded.
+Images use exact I1 base, core has NODE_USE_ENV_PROXY=1, session globally
+installs Claude 2.1.296 and package.json pi pin. Source context includes only
+tracked runtime paths plus explicit new I2 runtime paths, never agent work
+or host node_modules/.git. Tags derive from RELEASE. Core receives no git.
+The zai host candidate api.z.ai is confirmed by the pinned dependency's
+providers/zai.js:9 in canonical node_modules; real-token measurement remains
+Mos's gate. OpenAI candidate is from S6 and is only measured when configured.
+No live model-table config was read.
+
+New tests cover config exit/immutability; helper rootful, null/nonzero,
+substring, wrong type/JSON, exact rootless and hostile DOCKER_HOST; proxy
+fragmentation/pipelined data, deny/port/malformed/slow/oversize and JSON logs.
+test-install additionally builds, inspects pins and exercises an internal
+network plus actual Vikunja/public GET and notifier REST/dummy GET with
+proxy log evidence. The generic S5 fetch test is not repeated.
+
+Old-suite change is prepared as test-config.patch (adds new config cases
+before the existing summary). It has NOT been applied: Sage's old-test
+change rule requires approval first. No old tests changed. No tests run.
+
+## sage-3910 — first CLEAR
+
+Authorized four serialized runs exactly as requested, plus applying the
+addition-only test-config.patch. No broader suites; Sage supplies the
+landing gate. Return slot on run 4 completion or an actual stop.
+
+Additional paths retained under Sage's explicit ruling:
+- scripts/install-tests/config.test.mjs: table of install schema/exit/byte
+  preservation cases, reused by test-config.sh and test-install.sh.
+- scripts/install-tests/helper.test.mjs: fake Docker executable to assert
+  exact argv and rootless refusal before the requested call, without a daemon.
+- scripts/install-tests/network-probe.mjs: actual internal-network tunnel,
+  TLS, unlisted host/port and external DNS refusal in a core image.
+- scripts/install-tests/services-probe.mjs: actual Vikunja and notifier REST
+  client functions, public GET plus invalid dummy token, with proxy log proof.
+All are new files; no old assertion changes.
+
+## First CLEAR result and sage-3916 correction
+
+Run 1: exit 0, config/helper 31/31, zero fail/skip/cancel,
+01-install-unit.log. Run 2: exit 0, proxy 11/11, zero fail/skip/cancel,
+02-egress.log. Run 3: exit 1, config selftest 55 pass / 1 fail; new install
+cases 20/20, 03-config.log. Each log records UTC/load/CLEAR/fresh scratch TMPDIR.
+Run 4 NOT RUN: no Docker command, probe or build. Slot returned to Sage in
+bentina-0004 before any rerun.
+
+Old red: config without console loads with unchanged output
+(test-config.sh:266; log:53). Cause: this implementation unconditionally
+added install:{mode:local} to resolved JSON. Sage-3916 approves the source-only
+fix: omit output key when input omits it (optional-key convention), default
+env export to local. Applied this fix to mosaic-config.mjs and adjusted only
+the new absent-key case. No old assertion changed. No verification after fix:
+Poe has the current slot, Bentina runs next only on a new CLEAR. Run order
+will be 1, 3, 4; no reason to rerun unchanged proxy unit tests separately.
+
+The approved test-config patch is addition-only: git diff --numstat reports
+4 added, 0 removed lines for scripts/test-config.sh. No existing line or
+assertion changed. git diff --stat before first run:
+
+```
+ BUILD-LOG.md              |  2 ++
+ README.md                 |  9 +++++++++
+ docs/SESSIONS.md          |  2 ++
+ docs/TOOLS.md             | 38 ++++++++++++++++++++++++++++++++++++++
+ scripts/mosaic-config.mjs | 20 +++++++++++++++++++-
+ scripts/test-config.sh    |  4 ++++
+ 6 files changed, 74 insertions(+), 1 deletion(-)
+```
+
+New untracked paths are not included by git diff --stat; see explicit paths
+above. Claim bentina-0003 initially refused queue-lock-held; same op retried.
+Sage reports re-pin rev 3808 (sage-3913).
+
+## sage-3919 — corrected acceptance green, slot returned
+
+Run 1 exit 0, helper/config 31/31 (04-install-unit-fixed.log); run 3 exit 0,
+config selftest 56/56 plus new install 20/20 (05-config-fixed.log); run 4
+exit 0 (06-install.log), helper/config 31/31 and proxy 11/11, images built
+at RELEASE 0.0.12, rootless endpoint explicitly attested, image version
+checks passed, internal-network TLS to listed host reached, unlisted host
+and port refused, external DNS refused. Actual Vikunja public GET returned
+200 and notifier REST dummy-token GET returned 401; services proxy logs
+show both host decisions. No real token or broker started. Test-owned
+networks/containers cleaned by suite. Slot returned bentina-0005. No broader
+suites: Sage's landing gate supplies them. Claim bentina-0003 acknowledged
+rev 3812 briefed -> in-progress. No queue files changed in this worktree.
+
+Post-pass source review found one small correctness defect before handoff:
+upstream errors after a successful CONNECT would append a plaintext 502 to
+an established TLS tunnel. Corrected to close an established tunnel and
+reserve 502 for establishment errors. Added a local reset-after-CONNECT
+regression alongside the existing establishment-error test. This creates
+a new verification need: request a new CLEAR for egress units and install
+rebuild/probe before committing. Existing green logs above predate this fix;
+do not claim them for the final proxy bytes.
+
+## sage-3923 — final proxy and install evidence
+
+07-egress-final.log: exit 0, 12/12, zero fail/skip/cancel, including upstream
+reset after a CONNECT200 closes the tunnel without a second HTTP response.
+08-install-final.log: exit 0, 31/31 config/helper and 12/12 proxy,
+zero fail/skip/cancel, three images rebuilt, version checks passed,
+internal-network listed TLS200/unlisted host403/unlisted port403/external
+DNS refused, Vikunja public GET200 and notifier REST dummy-token GET401
+through services proxy; JSON log decisions verified. Explicit endpoint
+unix:///run/user/1000/docker.sock passed rootless check. Suite removed only
+its named i2 containers/networks. Slot returned to Sage in bentina-0007.
+
+No runtime source change after these final reruns. Mos-only measurement
+runner was statically hardened to report a fixed message on malformed
+credential JSON, avoiding JSON.parse's error snippet echoing private input.
+The runner and provider script have not been executed here: Mos owns the
+real-token/provider-model-table check and its output must land on #1652.
+No claim of completed provider-host measurement or final host-list approval.
+
+Acceptance accounting:
+- Install validator cases and unchanged config bytes: new 20 cases green;
+  entire existing config suite 56/56 (05-config-fixed.log); absent output
+  shape preserved; env/helper default local proven by helper's absent test.
+- Rootless guard: exact argv/array membership/status/type/refusal fake
+  cases plus real rootless check in 08-install-final.log. No ambient Docker
+  context used by new code. Other scripts' migration remains I6.
+- Images: exact base digest in Dockerfiles, release 0.0.12 tags, core node
+  24.21.0/no-git/RELEASE assertion; session Claude2.1.296/pi0.85.1 assertions;
+  all built through the helper on the explicit rootless endpoint.
+- Proxy: allow/deny/port/malformed/slow/fragmented/header-bound/upstream-error
+  and structured logs verified in final unit suite; actual TLS tunnel and
+  internal-network denials plus services client fetch paths verified by
+  install suite. The generic S5 fetch probe was not repeated.
+- Non-fetch broker/gateway/SSH/Git/web paths remain documented gaps under
+  sage-3907, not modified or silently claimed to be covered. All fixed
+  service hosts retain entries and code-path notes. No dependency added.
+- Full suites: not run here per sage-3910; Sage's landing gate supplies
+  broader coverage. Reviewer and Mos gates still pending.
+
+Static source diff whitespace check passed (excluding captured .log files
+and unified .patch context). Raw build logs retain Docker/npm output
+including whitespace; no evidence was normalized or rewritten. Old-suite
+change remains +4/-0 and every prior assertion byte-identical. No queue
+file changed here. No secret read, token test, live state/unit operation,
+daemon/volume/restart action, protected-branch push, or integration.
+
+Candidate handoff: base ec86f2c84; commit only this I2 work and receipts on
+bentina/row157, push through configured repository helper, then send Sage
+and Boyd the tip/base/manifest for first review. Darkwing follows Boyd.
+The manifest lists each changed path except its own self-reference.
+
+## Round 2 — Boyd B1/B2 (boyd-0023; Sage sage-3933)
+
+First candidate a14fdc443, manifest b0ed8395, CHANGES on #1652 comment31494.
+Read Boyd's exact scratch harnesses and logs under /mnt/storage/scratch/tmp/IyNqMs.
+B1 reproduction: normal peer control releases its socket, allowHalfOpen peer
+receives408 but getConnections still reports1 after100ms (assertion1 != 0).
+Root cause: refusal end sends FIN but clears the only deadline and leaves the
+read side open. B2 reproduction: same-PID exec inherits exported checked_pid
+and endpoint; fake rootful Docker sees ps on inherited.sock, no info; rc0 vs
+expected2. Root cause: source initializes neither cache validity nor endpoint.
+These findings agree with source inspection and require no design departure.
+No local tests were run while Goldie holds the slot.
+
+Added tests before fixes, adapted from the reviewer with explicit cleanup:
+- packages/egress/tests/refusal.test.mjs: real loopback sockets, normal and
+  half-open controls for every400/403/408/431 refusal; asserts server socket
+  count reaches0, one denial log, expected response. Removing destruction
+  after flush should fail half-open cases while normal controls still pass.
+- scripts/install-tests/review-cache.test.mjs: same-PID exec with inherited
+  exported cache, fake rootful/rootless Docker, actual loader/helper; asserts
+  first call is info at configured.sock, refusal or exact once-per-process
+  cache behavior, and no cache keys in Docker's child environment. Removing
+  source-time reset should fail; no real engine, config or credentials used.
+No existing test file or assertion edited.
+
+Minimal fixes: proxy uses endAndClose for all refusal responses, including
+upstream establishment502: destroy after the small response flushes, plus a
+fixed1s drain deadline cleared on close. Established-tunnel reset behavior
+stays unchanged. Helper unsets checked_pid/endpoint/mode on every source,
+clearing inherited export attributes; ordinary function calls still reuse
+only an attestation obtained in the current process. No dependency, contract,
+host-list or authority change. Request CLEAR for new regression red/green,
+full targeted units and test-install rebuild before commit. Old-test red
+still stops and returns slot. Sage's broader landing gate remains separate.
+
+Sage-3935 approves the five-run plan including archived red-first proof;
+Goldie holds the slot and Bentina is next. Still no node/docker test run.
+The new refusal test also includes normal/half-open502 establishment failures
+on a closed loopback port, exercising the shared termination helper on that
+path (allowed log stays true for an approved destination whose upstream fails).
+This stays within the named new regression file and approved commands.
+
+## Round 2 verified — sage-3936 slot returned
+
+Claimant move bentina-0012 acknowledged rev3825 in-review -> in-progress,
+before the correction commit. Five serialized runs, each fresh short scratch
+TMPDIR/UTC/load/CLEAR and timeout -k10:
+
+| Run | Log (this directory) | Exit | Evidence |
+|---|---|---|---|
+| 1 old archived runtime + new tests | 09-r2-archived-red.log | 1 expected | 12 tests:5 normal-peer controls pass;7 intended failures (five half-open400/403/408/431/502 cases, two inherited-cache cases);0skip/cancel |
+| 2 fixed regressions | 10-r2-regressions-green.log | 0 | 12/12,0fail/skip/cancel |
+| 3 install unit suite | 11-r2-install-units.log | 0 | 33/33,0fail/skip/cancel |
+| 4 egress suite | 12-r2-egress-suite.log | 0 | 22/22,0fail/skip/cancel |
+| 5 install images/network/services | 13-r2-install.log | 0 | 33+22 unit tests green;three images rebuilt/version pins checked;explicit rootless guard;listed TLS200,unlisted host/port403,external DNS refused;Vikunja publicGET200/notifier REST dummyGET401;JSON decisions verified |
+
+Run1 unpacked git archive of a14fdc443 into its own scratch directory and
+overlaid only the two new tests; it did not revert or modify the builder
+worktree. Failures were exact behavioral assertions, not infrastructure or
+syntax errors. All test sockets cleaned in t.after; the install suite
+removed only its i2-prefixed containers/networks. Slot returned to Sage in
+bentina-0014. No existing test file/assertion changed for round2. No code
+change after verification. Earlier config56/56 evidence remains in05 log;
+loader/config unchanged for this review. No broader suites authorized here.
+
+The round2 manifest MANIFEST-r2.sha256 covers the full candidate delta from
+original base ec86f2c84, including the unchanged historical round1 manifest;
+it excludes only its own self-reference (its hash is supplied in the review
+message). Historical round1 manifest still describes a14fdc443 and is not
+rewritten to describe later source. New manifest, candidate tip/base and
+receipts go to Sage and Boyd, then Darkwing follows Boyd's approve. The
+owner's automated review-request credential boundary still belongs to Sage;
+no token read or identity substitution is authorized. Mos provider evidence
+and Sage's broader landing gate remain required. No protected-branch push,
+real-token test, live config/state/unit action or daemon/volume operation.

agents/bentina/work/queue-157/MANIFEST-r2.sha256

@@ -0,0 +1,44 @@
+58e473e1783a9f64f6b1a696f747925b9a444d85dbe72e48e7a0dcbd62a2d4e5  BUILD-LOG.md
+67bd811b3030ba0355af2316d02e8b2931b4b2c5a74c5be904b5311de6ef81dd  README.md
+6161cc0505bf0be33ba0e7c7f0f07382cca0ec2b5ace65ac54e16c4d1e3424fc  agents/bentina/work/queue-157/01-install-unit.log
+f13213941dab22955841108d85e62f67ede2ddbc95c25a7b351f30070b035a85  agents/bentina/work/queue-157/02-egress.log
+b46c3fb5f252100f3e2de5b97bd0efc0c1fbbef26230252945f7bb309d359f5e  agents/bentina/work/queue-157/03-config.log
+fc76e5f9b19a31b494ebf4a128ef5f171f1f0712dc3928bebb6556815577015c  agents/bentina/work/queue-157/04-install-unit-fixed.log
+c9a46d969c5d28814addccd7cafe8e734d15c02a407ee80434d4e3e70a3fa4b7  agents/bentina/work/queue-157/05-config-fixed.log
+1d5505a6aba0078e7cf9936fb683e06ac900af12e9e8faf224099a5e2d825fc7  agents/bentina/work/queue-157/06-install.log
+c684dfdd8a460a915e15291fc0f92c9ba30f38d3d3dfa5fa190e7835fbcd448f  agents/bentina/work/queue-157/07-egress-final.log
+5c3efacdbcda5628882045644c32169b7020a6e49d6b89b273aba20ae042898b  agents/bentina/work/queue-157/08-install-final.log
+d2f7bd37b5ac8cc781fae1308a5b047e0ed0d1b63f8d5e22d56e0efa328c4883  agents/bentina/work/queue-157/09-r2-archived-red.log
+4230f9fcc91d1670df0d975e9c5794edb7aa9b21b24c4f415d1594373e769da4  agents/bentina/work/queue-157/10-r2-regressions-green.log
+3e5cd8d154b01ede9a9533f4ff40ac29b4e8193131fd63ba04707df51217d0bb  agents/bentina/work/queue-157/11-r2-install-units.log
+4d23ae4a6d3247a498bd446960c075235f632474fba9e8db374a32aaf4760219  agents/bentina/work/queue-157/12-r2-egress-suite.log
+a4652f0eb6dfcc177c24c5d85d7ec08096e9f49304085f817828d7ef451acd64  agents/bentina/work/queue-157/13-r2-install.log
+5b595798fa8184b15412276d070a0891fdf5cb629eabb8b7bb5f6b3d2b69b3a5  agents/bentina/work/queue-157/BUILD.md
+b0ed8395108ad398f5c9c08fbac8a1b5ca02f579a5d7b709d19d3aaf0860f9ae  agents/bentina/work/queue-157/MANIFEST.sha256
+21f9783dcfe2cac00a49d0d7930a57134bc59ec19dd7bf2e96950f79fae5b1b1  agents/bentina/work/queue-157/PROVIDER-EXPECTED.md
+6518c574291db5816057fbbc438435d0571e088c8f26d1a47ec03ff3047a5efa  agents/bentina/work/queue-157/provider-hosts.sh
+6dbef8d20ede98a9311ba47137b587c07cbc03e921b2a8429652fe362aeb4b85  agents/bentina/work/queue-157/provider-runner.mjs
+e7cb4d0c67eadec557a25385b4ea9803970818354a9e8b0780ac4de07cf34911  agents/bentina/work/queue-157/test-config.patch
+cb2b251342f0020764b7b757b22567d52380053fc15f0e1c7e665a5ec1838f24  contracts/egress.json
+58107cfa274b7551ae163ea77c56d08df530e7f08e06539ddd2999c22252d749  docs/SESSIONS.md
+edcaa526bf0a518716d4e87895d49920b8912295688809a25102ce6b9d6ebdc3  docs/TOOLS.md
+6bd1dc7c244cfb4134d813e0b149ef1182a810eb99f01a95d548f0885b216437  images/README.md
+9c6c3d5736f1ed7eb6dcdb893761b937b7108e29730daf28fe8dd0064df73740  images/core/Dockerfile
+0179d84a7b9321832efb1d90c0290c8f2f6de03db3b2b6d8379672aca598c2a0  images/egress/Dockerfile
+e246e3e3da1065f3c8cf24cc1f7ae15290f3e4c6508f0c6f17a4889a77f2d591  images/session/Dockerfile
+3930764cf5848571507eec3e5b3eda2ebb8aa2d9642f83615b462bf5035e0e75  packages/egress/README.md
+2c45bfed1f19f8a42e05552f8a10584feed8d25ccc506252d55a9a3b6c90a21c  packages/egress/package.json
+257058faee55a429d98955b6253d6b8a0bb058c50446764566586b06a8f76b61  packages/egress/src/cli.mjs
+ce3adb0515ca7e9041f36d7a82df355a3fc97e2a96fc6811ea3b9b47e464787b  packages/egress/src/proxy.mjs
+5c4e778ec9ec5b93ab681d615a2240cd342d09adfe4df1634f3d6abbf16a405b  packages/egress/tests/proxy.test.mjs
+258e954ad7e441a7dd7d25ca9208691ea167e9cb7f34d7d689ed11005adeb4b4  packages/egress/tests/refusal.test.mjs
+86e0152120b04fcfe2a4081b7686f179a139c5370027828c79572033f3cf81c3  scripts/images.sh
+3647b06df02b4d9c0a74b62c774ecdff9272e68a84c06cd85861d7bf18655d5a  scripts/install-tests/config.test.mjs
+21e05bc3e0639427f5a9d4cf166d2991964134845272df76c712ad00ea8033b6  scripts/install-tests/helper.test.mjs
+aa5328566d3e5b46fee587657dac146712735dca0aca90d3d0ad84bc20e313e1  scripts/install-tests/network-probe.mjs
+45274f6745cf931f3002e6c36dcfc46a96c8f09e01e6243c18659749673752fd  scripts/install-tests/review-cache.test.mjs
+72ae66696ad2faaf258c832fdfdf680efc8fca7099359e58da1ee01a88541d8a  scripts/install-tests/services-probe.mjs
+79a8ecfc5ab279111031d5a44906450b732b517fe98511992cafd873ab7a84d3  scripts/lib/docker.sh
+7398bb289d2f28ed15a2984bdeee7e30a704890a33b5e2a5c9f7554115aca8f9  scripts/mosaic-config.mjs
+dcf1799238141689c9d80adc6680694a609e5fb9deef7b78d6b3f4765163e3fe  scripts/test-config.sh
+08be25f67d8fc6676218b1014d34a2ce36a939231f58b657972d856ee26169b2  scripts/test-install.sh

agents/bentina/work/queue-157/MANIFEST.sha256

@@ -0,0 +1,36 @@
+6995aa3bcdf50e2441142cc9b6fc9ec84853e353e7a408bbc877ee7e188e73c4  BUILD-LOG.md
+67bd811b3030ba0355af2316d02e8b2931b4b2c5a74c5be904b5311de6ef81dd  README.md
+6161cc0505bf0be33ba0e7c7f0f07382cca0ec2b5ace65ac54e16c4d1e3424fc  agents/bentina/work/queue-157/01-install-unit.log
+f13213941dab22955841108d85e62f67ede2ddbc95c25a7b351f30070b035a85  agents/bentina/work/queue-157/02-egress.log
+b46c3fb5f252100f3e2de5b97bd0efc0c1fbbef26230252945f7bb309d359f5e  agents/bentina/work/queue-157/03-config.log
+fc76e5f9b19a31b494ebf4a128ef5f171f1f0712dc3928bebb6556815577015c  agents/bentina/work/queue-157/04-install-unit-fixed.log
+c9a46d969c5d28814addccd7cafe8e734d15c02a407ee80434d4e3e70a3fa4b7  agents/bentina/work/queue-157/05-config-fixed.log
+1d5505a6aba0078e7cf9936fb683e06ac900af12e9e8faf224099a5e2d825fc7  agents/bentina/work/queue-157/06-install.log
+c684dfdd8a460a915e15291fc0f92c9ba30f38d3d3dfa5fa190e7835fbcd448f  agents/bentina/work/queue-157/07-egress-final.log
+5c3efacdbcda5628882045644c32169b7020a6e49d6b89b273aba20ae042898b  agents/bentina/work/queue-157/08-install-final.log
+f4755f24d626dc69b8159c6934e4213a907659dbb4d46d29d82efc0405b50152  agents/bentina/work/queue-157/BUILD.md
+21f9783dcfe2cac00a49d0d7930a57134bc59ec19dd7bf2e96950f79fae5b1b1  agents/bentina/work/queue-157/PROVIDER-EXPECTED.md
+6518c574291db5816057fbbc438435d0571e088c8f26d1a47ec03ff3047a5efa  agents/bentina/work/queue-157/provider-hosts.sh
+6dbef8d20ede98a9311ba47137b587c07cbc03e921b2a8429652fe362aeb4b85  agents/bentina/work/queue-157/provider-runner.mjs
+e7cb4d0c67eadec557a25385b4ea9803970818354a9e8b0780ac4de07cf34911  agents/bentina/work/queue-157/test-config.patch
+cb2b251342f0020764b7b757b22567d52380053fc15f0e1c7e665a5ec1838f24  contracts/egress.json
+d6239336e48b6a78b80680c88e83ba4b67f8cbed99bf2ee3a697b1b0611e54e9  docs/SESSIONS.md
+edcaa526bf0a518716d4e87895d49920b8912295688809a25102ce6b9d6ebdc3  docs/TOOLS.md
+6bd1dc7c244cfb4134d813e0b149ef1182a810eb99f01a95d548f0885b216437  images/README.md
+9c6c3d5736f1ed7eb6dcdb893761b937b7108e29730daf28fe8dd0064df73740  images/core/Dockerfile
+0179d84a7b9321832efb1d90c0290c8f2f6de03db3b2b6d8379672aca598c2a0  images/egress/Dockerfile
+e246e3e3da1065f3c8cf24cc1f7ae15290f3e4c6508f0c6f17a4889a77f2d591  images/session/Dockerfile
+3930764cf5848571507eec3e5b3eda2ebb8aa2d9642f83615b462bf5035e0e75  packages/egress/README.md
+2c45bfed1f19f8a42e05552f8a10584feed8d25ccc506252d55a9a3b6c90a21c  packages/egress/package.json
+257058faee55a429d98955b6253d6b8a0bb058c50446764566586b06a8f76b61  packages/egress/src/cli.mjs
+2ec533e8a2c9ace2d2dc17ac9efe75a9930ae50e93f6700e3de8aa0475b42295  packages/egress/src/proxy.mjs
+5c4e778ec9ec5b93ab681d615a2240cd342d09adfe4df1634f3d6abbf16a405b  packages/egress/tests/proxy.test.mjs
+86e0152120b04fcfe2a4081b7686f179a139c5370027828c79572033f3cf81c3  scripts/images.sh
+3647b06df02b4d9c0a74b62c774ecdff9272e68a84c06cd85861d7bf18655d5a  scripts/install-tests/config.test.mjs
+21e05bc3e0639427f5a9d4cf166d2991964134845272df76c712ad00ea8033b6  scripts/install-tests/helper.test.mjs
+aa5328566d3e5b46fee587657dac146712735dca0aca90d3d0ad84bc20e313e1  scripts/install-tests/network-probe.mjs
+72ae66696ad2faaf258c832fdfdf680efc8fca7099359e58da1ee01a88541d8a  scripts/install-tests/services-probe.mjs
+e524a285dcebe2a6350e7690650c2796e54661225ce00a67b4559e519f9e3fea  scripts/lib/docker.sh
+7398bb289d2f28ed15a2984bdeee7e30a704890a33b5e2a5c9f7554115aca8f9  scripts/mosaic-config.mjs
+dcf1799238141689c9d80adc6680694a609e5fb9deef7b78d6b3f4765163e3fe  scripts/test-config.sh
+08be25f67d8fc6676218b1014d34a2ce36a939231f58b657972d856ee26169b2  scripts/test-install.sh

agents/bentina/work/queue-157/PROVIDER-EXPECTED.md

@@ -0,0 +1,37 @@
+# Mos provider-host gate (not run by Bentina)
+
+Run only after candidate images build and Mos authorizes the real-token calls.
+Use a scratch config with install.mode containerized and the rootless endpoint;
+do not change the live config. Provide one JSON object on stdin with
+`claudeOAuth` and `zai`, plus optional `anthropic` / `openai` keys if those
+providers are in the actual model table. The script opens no host token file.
+Never paste the input or raw CLI output on the issue. It prints success flags
+and the proxy's host decisions only. Wrap in `timeout -k 10 600`.
+
+From the checkout:
+
+```
+Mos-private-json-producer | MOSAIC_CONFIG=/path/to/scratch-config.json agents/bentina/work/queue-157/provider-hosts.sh
+```
+
+Expected required output (with just Claude Code and pi/zai):
+
+```
+{"case":"claude","ok":true}
+{"case":"pi-zai","ok":true}
+{"hosts":["api.anthropic.com:443","api.z.ai:443"],"denied":[]}
+```
+
+Optional pi/anthropic adds `{"case":"pi-anthropic","ok":true}` and no
+host. Optional pi/openai adds `{"case":"pi-openai","ok":true}` and
+`api.openai.com:443` to sorted hosts. All cases must return ok true, exit 0,
+and denied empty. Model names are explicit candidates; Mos must reconcile
+them to the actual model table without broadening a host list on failure.
+A new host, refusal, failure, or different model requirement returns to Sage;
+there is no wildcard or automatic discovery/update. The baked agents list
+remains provisional until Mos posts matching output on #1652.
+
+Each resource name begins i2-provider; cleanup removes only this run's two
+networks and two containers. No volumes, daemon or restart operations. The
+measurement uses container root as the design requires; I5 still owns the
+full root filesystem re-measurement and final session limits.

agents/bentina/work/queue-157/provider-hosts.sh

@@ -0,0 +1,36 @@
+#!/usr/bin/env bash
+# Mos runs this explicitly with a caller-supplied scratch MOSAIC_CONFIG and
+# credential JSON on stdin. This script reads no host credential file.
+set -euo pipefail
+REPO="$(cd "$(dirname "${BASH_SOURCE[0]}")/../../../.." && pwd)"
+cd "$REPO"
+source scripts/lib/docker.sh
+mosaic_docker version >/dev/null
+release="$(tr -d '[:space:]' < RELEASE)"
+prefix="i2-provider-$(date -u +%s)-$$"
+nets=("$prefix-internal" "$prefix-egress")
+cleanup(){
+ rc=$?; trap - EXIT
+ mosaic_docker container rm -f "$prefix-session" "$prefix-proxy" >/dev/null 2>&1 || true
+ for net in "${nets[@]}"; do mosaic_docker network rm "$net" >/dev/null 2>&1 || true; done
+ exit "$rc"
+}
+trap cleanup EXIT
+mosaic_docker network create --internal "${nets[0]}" >/dev/null
+mosaic_docker network create "${nets[1]}" >/dev/null
+mosaic_docker create --name "$prefix-proxy" --network "${nets[1]}" --read-only --cap-drop ALL --security-opt no-new-privileges --pids-limit 64 --memory 128m --memory-swap 128m --cpus 0.5 "mosaic-egress:$release" agents >/dev/null
+mosaic_docker network connect --alias proxy "${nets[0]}" "$prefix-proxy"
+mosaic_docker start "$prefix-proxy" >/dev/null
+ready=0
+for attempt in {1..50}; do
+ if mosaic_docker exec "$prefix-proxy" node -e 'const s=require("node:net").connect(3128,"127.0.0.1");s.on("connect",()=>{s.destroy();process.exit(0)});s.on("error",()=>process.exit(1))'; then ready=1; break; fi
+ sleep 0.1
+done
+[ "$ready" = 1 ] || { echo proxy-not-ready >&2; exit 1; }
+rc=0
+# Token travels only in stdin and the CLI child's env; never an engine env or log.
+mosaic_docker run --rm --init -i --name "$prefix-session" --network "${nets[0]}" --log-driver none --read-only --tmpfs /root:rw,nosuid --tmpfs /tmp:rw,noexec,nosuid --cap-drop ALL --security-opt no-new-privileges --pids-limit 512 --memory 4g --memory-swap 4g --cpus 2 \
+ --mount "type=bind,src=$REPO/agents/bentina/work/queue-157/provider-runner.mjs,dst=/opt/mosaic/provider-runner.mjs,readonly" \
+ "mosaic-session:$release" node provider-runner.mjs || rc=$?
+mosaic_docker logs "$prefix-proxy" | node -e 'let s="";process.stdin.on("data",c=>s+=c).on("end",()=>{const rows=s.trim().split("\n").filter(Boolean).map(JSON.parse);const deny=rows.filter(r=>r.host&&!r.allowed);console.log(JSON.stringify({hosts:[...new Set(rows.filter(r=>r.allowed).map(r=>r.host+":"+r.port))].sort(),denied:[...new Set(deny.map(r=>r.host+":"+r.port))].sort()}));if(deny.length)process.exitCode=1})' || rc=$?
+exit "$rc"

agents/bentina/work/queue-157/provider-runner.mjs

@@ -0,0 +1,17 @@
+// Mos-only real-token measurement. Reads one JSON object on stdin. Never logs CLI output.
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+const exec = promisify(execFile);
+let input='';for await(const chunk of process.stdin){input+=chunk;if(input.length>65536)throw new Error('measurement-input-too-large');}
+let keys;try{keys=JSON.parse(input);}catch{input='';process.stderr.write('measurement-input-invalid\n');process.exit(2);}input='';
+if(!keys.claudeOAuth||!keys.zai)throw new Error('measurement-needs-claudeOAuth-and-zai');
+const prompt='Reply with exactly I2_PROVIDER_OK and no other text.';
+const env={PATH:process.env.PATH,HOME:'/root',HTTPS_PROXY:'http://proxy:3128',HTTP_PROXY:'http://proxy:3128',NODE_USE_ENV_PROXY:'1',CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC:'1'};
+const pi=['--no-session','--no-tools','--no-approve','--no-extensions','--no-skills','--no-prompt-templates','--no-themes','--no-context-files'];
+const cases=[['claude','claude',['-p',prompt,'--tools',''],{CLAUDE_CODE_OAUTH_TOKEN:keys.claudeOAuth}],['pi-zai','pi',[...pi,'--provider','zai','--model','glm-5.3-flash','-p',prompt],{ZAI_API_KEY:keys.zai}]];
+if(keys.anthropic)cases.push(['pi-anthropic','pi',[...pi,'--provider','anthropic','--model','claude-sonnet-5-5','-p',prompt],{ANTHROPIC_API_KEY:keys.anthropic}]);
+if(keys.openai)cases.push(['pi-openai','pi',[...pi,'--provider','openai','--model','gpt-5.4','-p',prompt],{OPENAI_API_KEY:keys.openai}]);
+for(const [name,bin,args,secrets] of cases){
+ let ok=false;try{const {stdout}=await exec(bin,args,{env:{...env,...secrets},timeout:120000,killSignal:'SIGKILL',maxBuffer:1024*1024});ok=stdout.includes('I2_PROVIDER_OK');}catch{}
+ console.log(JSON.stringify({case:name,ok}));if(!ok)process.exitCode=1;
+}

agents/bentina/work/queue-157/test-config.patch

@@ -0,0 +1,12 @@
+--- a/scripts/test-config.sh
++++ b/scripts/test-config.sh
+@@ -291,5 +291,9 @@
+ fi
+ 
+ echo
++# I2: each install shape asserts its exit code and config-byte preservation.
++node --test scripts/install-tests/config.test.mjs
++check "install configuration cases" $?
++
+ echo "selftest: $PASS passed, $FAIL failed"
+ [ "$FAIL" -eq 0 ]

agents/boyd/README.md

@@ -0,0 +1,8 @@
+# Boyd
+
+Builder seat, Codex gpt-6.1-sol, started by Mos under Q245 (mos-1506). Owns row 298 (the chief-of-staff grant scope, handed over from Megavolt).
+
+No launcher in this directory. The seat runs as a T3 thread (thread 48a3ae38) and works in its own worktree. It has no
+credentials of its own; it pushes only its own `boyd/*` branches through the repository credential helper (mos-0981),
+never `refactor`, `main` or another seat's branch. Claude seats orchestrate and review (Q245). Registered by Sage on
+2026-10-23 so the queue can name the seat as row owner (store.mjs isSeatDir).

agents/boyd/work/queue-298/BUILD.md

@@ -0,0 +1,272 @@
+# Row 298 (#1804, Q228): chief-of-staff grant scope
+
+Owner Boyd (48a3ae38), reviewer Dewey. Branch `boyd/row298`, base `45dca69f6`.
+Assignment: mos-1496/Q245. Handoff: Megavolt megavolt-0203, local `7a141269c`;
+cherry-picked as `4de3cec27` (design) and `7cea739de` (UNTESTED code).
+Brief: `docs/plans/2026-10-23_mvp-readiness-rows.md`, chief-of-staff grant scope.
+Megavolt's original design remains in `agents/megavolt/work/queue-298/BUILD.md`.
+
+## Authority and accepted design
+
+Sage sage-3594, restated in sage-3612: launch.grantScope, lenient read with empty
+fallback, strict human-only write. No general organization setter may write it.
+Per-method agents/projects or agents/hosts/commands; host-enroll never in scope.
+Host command arrays match whole tokens and exact lengths. `grants.scope.set`
+from the human CLI is Approve; no Console page or chief-raised scope change.
+Mos mos-1496/1502 requires the same human-shell guard as `mosaic access`.
+The broker closes an in-scope request via scope and writes grant.scope.used;
+missing evidence must refuse execution. Narrowing before spend fails
+scope-changed. Empty scope ships; only Jason sets the live value (Q188).
+
+No credential files read, no live grants, no deployment, no queue writes. Push
+only boyd/*, additive commits, no amend/force-push or attribution trailers.
+Sage owns queue, shared test slot and landing. No Node/tests before CLEAR.
+
+## Implementation plan and ledger
+
+Using writing-plans and executing-plans inline; the approved brief and D1-D6
+are the spec. This packet is the requested plan/tracking location.
+
+- [x] Read brief, roster, implementation and handoff; register session.
+- [x] Bring Megavolt's two commits onto Boyd's branch without changing history.
+- [x] Add independent CLI tests in `packages/cli/tests/grants-scope.test.mjs`:
+  scope read/set requests; agent-marker rejection before stdin/transport;
+  --tester rejection; missing revision, malformed/empty/oversize input.
+- [x] Strengthen new business/bus grant-scope tests for exact commands,
+  scope evidence binding, host-enroll exclusion and spent scope-changed.
+- [ ] On Sage CLEAR, observe targeted failures before fixes; fix inherited
+  implementation using the existing human proof and grant executors.
+- [ ] Update bus/CLI docs, append BUILD-LOG before/after evidence, manifest.
+- [ ] On Sage CLEAR run touched suites; record exact results and mutants.
+- [ ] Commit UNTESTED until verified; push boyd/row298 only when slot permits;
+  report to Sage and Dewey, cc Mos for pushes/blockers. Dewey reviews manifest.
+
+Pre-flight interfaces: business checkGrantScope/grantScopeOf/grantInScope feed
+the instance writer and broker. Runtime supplies a fresh scope from the org
+file and routes the human setter to the same organization writer. CLI callFor
+supplies refuseInsideAgent and humanTransport. The grant executors consume the
+broker's immutable close/evidence. Tests use scratch files/fake Gitea only.
+
+Review focus: exact argv length, stale scope before spend, forged/missing scope
+evidence, malformed fallback, and CLI agent ancestry. Tests must cover each.
+
+Static findings before any Boyd Node/test run:
+
+- Handoff introduced commandPrefixes beyond the accepted D2 shape, allowing
+  trailing args. Remove it; only exact command arrays are authorized.
+- scope.used carries a digest without validating it, and no org revision.
+  Bind evidence to the canonical scope snapshot and grant/close sequence;
+  preserve historical grants when scope is later changed, recheck at spend.
+- Gitea recheck throws inside the spend transaction and rolls back spend on
+  scope-changed. Preserve spend and log failure for that case (D6).
+- The optional giteaStart?. assertion always passes when the API is absent;
+  use the real runGiteaGrant entry point. Fake Gitea tokens() does exist.
+
+## Existing test changes (mos-1272)
+
+Approved by Mos mos-1510 via Sage sage-3624; edited exactly as approved:
+
+| File | Actual numstat | Reason |
+| --- | --- | --- |
+| packages/bus/tests/project-runtime.test.mjs | +1 / -1 | Vocabulary import pin adds grantScopeOf and grantInScope. |
+
+Other test work is confined to row 298's new files. No pre-existing CLI tests
+will change. Record final numstat here before review.
+
+## Human proof and organization ownership
+
+CLI: `packages/cli/src/cli.mjs` callFor runs refuseInsideAgent before constructing
+humanTransport, as `accessCommand` does. The setter takes no --tester flag.
+`packages/bus/src/human.mjs` verifyHuman checks the nonce, CLI path and every
+ancestor's markers/argv; `bindHuman` and #human in broker.mjs require the
+business human, via cli, outsideAgent true. Tests will pin this chain's caller
+refusal. The scope receipt records by/via/outsideAgent and old/new sha256.
+
+Org file: `packages/business/src/organization.mjs` regular() requires a regular,
+non-symlink file owned by the process uid and not writable by group/other;
+write() uses revision checks, locked durable receipts and atomic rename.
+The OS owner uid can edit it directly; the agent sandbox does not mount the
+user's config (`packages/seat/src/sandbox.mjs`). This is the existing cooperative
+human/process boundary, not a hostile same-uid isolation claim.
+
+Chief enrollment: broker instances.set calls #human and #mayHuman before
+add/change; credential issue/delete use #requestCredential's human gate.
+launch.by is an organization-file setting, excluded from general setters;
+only that chief may auto-approve within scope. Additional chief instances
+remain on the per-grant human approval path.
+
+## Validation
+
+UNTESTED. No Boyd Node/test run yet; waiting for Sage CLEAR.
+M1: bypass in-scope check. M2: bypass invalid-value fallback. M3: remove human
+setter guard. M4: drop grant.scope.used. All need named failing tests on gate.
+
+## Session correction
+
+The initial SESSIONS entry labels startup 19:13Z; startup was approximately
+19:08Z. Message header timestamps in boyd-0001 through 0004 were estimates;
+use T3's receipt timestamps as authoritative. Subsequent reports use date -u.
+
+## Departures from Megavolt 7a141269c (Sage sage-3624)
+
+1. Removed commandPrefixes; host scope commands match exact token arrays only.
+2. grantScope callback now supplies one organization read `{value,revision}`.
+   grant.scope.used includes that revision, canonical scope snapshot and digest;
+   #approvedGrant validates the digest, shape, method, agent and close sequence.
+   It uses the immutable snapshot so later narrowing doesn't revoke issued grants.
+3. Gitea scope-changed is caught inside the spend transaction and logs a terminal
+   failure without rolling back its spend. Other recheck failures keep their
+   existing behavior. Host already catches recheck failures after spending.
+
+Additional handoff corrections: replaced optional nonexistent giteaStart with
+runGiteaGrant; added successful host executor/revoke and enrollment-exclusion
+coverage; added real runtime writer coverage and independent CLI guard tests.
+
+Sage scheduled push at 19:41Z with MOSAIC_GITEA_CREDENTIAL_FILE unset, then T1
+lane B around 19:47Z (after explicit CLEAR), four new files whole and serial,
+hard stop 20:00Z. Fethry lane A is disjoint. No test was run early. Production
+corrections are marked UNTESTED under that slot mandate; baseline regression
+checks against the inherited implementation will run only on CLEAR.
+
+## Candidate preparation (before T1)
+
+The three static corrections, CLI/runtime coverage and docs are prepared but
+UNTESTED. `git diff --check` is clean. The approved import-pin edit is exactly
+1 addition / 1 deletion. M1-M4 are encoded in mutants.py (not run). No Node,
+https git, full suite or webui build has run in Boyd's worktree.
+
+Review package: product/test/documentation files in MANIFEST.sha256, excluding
+append-only project logs and the preserved predecessor packet. The manifest
+identifies exact bytes for Dewey; each later product change regenerates it and
+requires a review delta. Existing tests changed: only project-runtime, 1/1.
+
+## Dewey static review dewey-0933
+
+N1: Added a positive control to the malformed-evidence fixture. A valid event
+must pass scope authorization and reach decision-mismatch on the deliberately
+absent definition binding; invalid events remain not-authorized. No spend.
+N2: Additional named mutants cover spend recheck, exact argv length, Gitea spend
+rollback, launch.by eligibility and accepting any evidence row (results below).
+N3: At spend only grant scope membership is rechecked, not whether the raising
+chief is still launch.by. This implements sage-3594 Q5; changing the launcher
+later does not by itself invalidate a pending scope-approved request.
+N4: The scope shortcut returns the closed decision view to the chief without
+sending a separate close message; documented in the bus verb table.
+N5: grant.scope is logged after the organization file commit in a separate bus
+transaction. A crash between them leaves durable changes.jsonl as the receipt,
+as with other organization writers. The setter does not claim cross-store
+atomicity.
+
+## T1 lane B results (sage-3642, 2026-10-23 19:23Z–19:29Z)
+
+TMPDIR: `/mnt/storage/scratch/tmp/boyd298-4bzr6fn7`. Each whole file ran serially
+as `timeout -k 10 180 node --test --test-concurrency=1 FILE`, TMPDIR set to that
+scratch directory. Final restored candidate results:
+
+| Whole file | Pass | Fail | Skip |
+| --- | ---: | ---: | ---: |
+| business/tests/grant-scope.test.mjs | 7 | 0 | 0 |
+| bus/tests/grant-scope.test.mjs | 14 | 0 | 0 |
+| bus/tests/grant-scope-runtime.test.mjs | 1 | 0 | 0 |
+| cli/tests/grants-scope.test.mjs | 4 | 0 | 0 |
+| bus/tests/project-runtime.test.mjs | 3 | 0 | 0 |
+
+29/0/0 total. `final-1.log` through `final-5.log` hold the final output. The
+runtime's reload-needs-restart notice is expected: the fixture's boot document
+has fewer credential references than its organization document, as in the
+existing instances runtime tests. No credential contents are loaded from the
+real user config.
+
+Initial run: business 7/0; bus 13/1 due to Boyd's test typo, an out-of-scope
+`opts` reference in the missing-scope assertion. Corrected only that new-test
+line, then bus 14/0 and the remaining files green. Dewey N1 positive control
+was added and the whole bus file passed again; final rerun above followed all
+mutants. No production code changed during this test window.
+
+Mutants: all whole files, serial, with timeout -k 10 and the same TMPDIR.
+`mutants.py --sage-clear sage-3642 --logs SCRATCH/review-mutants --deadline
+2026-10-23T19:38:00+00:00` restores exact original source after each run.
+M1/M2/M3/M4 are brief/Sage mutants; M5–M10 cover review focus and dewey-0933.
+Each exited 1 with named assertion failures, no loader/syntax kill.
+
+| Mutant | Change | Pass/fail | Named killer |
+| --- | --- | --- | --- |
+| M1 | skip raise scope check | 11/3 | bus out-of-scope Gitea waits; empty/bad scope waits; host argv exclusion |
+| M2 | skip invalid-value fallback | 5/2 | business missing/bad scope fallback; bad file scope fallback |
+| M3 | remove #human from scope verb | 13/1 | bus Q3 caller refusals |
+| M4 | drop grant.scope.used write | 9/5 | bus Q4 protected evidence assertion; four executor waits also fail |
+| M5 | skip scope digest check | 13/1 | bus Q4 bad evidence: decision-mismatch instead of not-authorized |
+| M6 | rethrow narrowing, rolling spend back | 13/1 | bus Q5 Gitea spent assertion |
+| M7 | same without length check | 6/1 | business Q2 shorter command prefix exclusion |
+| M8 | no-op #scopeRecheck | 12/2 | bus Q5 Gitea and host scope-changed outcomes |
+| M9 | remove launch.by check | 13/1 | bus Q6 second chief stays open |
+| M10 | accept any matched scope evidence row | 13/1 | bus Q4 bad evidence, with positive control |
+
+Mutation log sha256 (under scratch/review-mutants):
+
+```text
+55e9973af5fca0088963e2ca11fd81b2fb46dfead813a577c0e0aad2d6269b68  M1.log
+abd1b784eff5ae1333a7b47085d3e199cad6d27a00e2584edf0b62417ad4c888  M2.log
+1a56085e548d1e244f0f88fe12a45f77c162375880794f9ef88b241ed3a1704d  M3.log
+9c120f3f7128488edaf8bfd6d41bae712e69e76da4195a0d4dc0e8336b02038f  M4.log
+1bba88a3752823454acdaa51abde6aad66fdd5488801b4aceda02a3b42c8123d  M5.log
+a4ce3cacca9f7ea56b8cdfd503c76173a8e4ff1d8a7ec07032c93f0b51aa60d8  M6.log
+acecd5afc93d68d96d713f8a9a2dc08351831a0b7360a13b4e30a572ad4167bf  M7.log
+fce7fa505ccf4f2d4190bd03c209fd19f1cf2770d3ae1246a3bd03697594019e  M8.log
+a830a7964890dd04a2dcc7a932a1502f1dea06419a1eae6b91a85f7878dc5681  M9.log
+38ce3e7f69f6c6ffe10133397465d52538a930a830f76256a8b9280f8df78e4b  M10.log
+```
+
+Full touched-package suites and every scripts/test-*.sh remain for Sage's full gate; this CLEAR authorized only the five whole files. Candidate remains
+marked Untested for the full gate. No queue row has been changed by Boyd.
+
+## Dewey final delta review (dewey-0935, 2026-10-23 19:31:55Z)
+
+Dewey reviewed 574ece13c..bcd93dc08 with local git only, no Node: CLEAN,
+nothing blocks. Verified all 13 manifest entries, exact package-file coverage,
+project-runtime 1/1, M5-M10 mutation sites, all ten mutation log hashes and
+counts, named assertion kills without loader/syntax errors, final five logs
+29/0/0, and N1-N5 coverage. No production code delta in this review range.
+
+Formal Gitea APPROVE on #1804 and queue record wait on the row 291 hold release
+and Sage's go. Sage's touched-package and every scripts/test-*.sh gate remains
+required. Boyd has released lane B and has no running test processes.
+
+## Rebase after row 239 (sage-3794)
+
+Current branch: `boyd/row298-r2`, rebased from published row 298 tip
+`2fc27bce6bfac2debe9703782bf308132c26b393` onto
+`833ec1cc8d7c11842efb82e57c1a0b256c8d22d7`, which includes row 239 through
+`e0cb1db2c`. Original `boyd/row298` remains intact locally and remotely. A new
+Boyd branch carries the rebased candidate so no published history is amended
+or force-pushed. This section supersedes the original base/branch header for
+current candidate work.
+
+Conflicts: only the first Boyd log append in `BUILD-LOG.md` and
+`docs/SESSIONS.md` conflicted while replaying 574ece13c. For each, verified the
+old commit's log started with the merge base bytes, then retained the new
+base's complete log bytes and appended only Boyd's suffix (434 and 281 bytes
+respectively). Later Boyd appends replayed automatically. No prior entries
+were removed or rewritten. Five commits replayed; the third/fourth range-diff
+entries differ only in append-log context; package-only range-diff is all `=`.
+
+The overlapping product files merged automatically: broker.mjs, runtime.mjs
+and instance-settings.mjs had no textual conflicts. Inspected their diff
+against the new base: only the existing row 298 scope additions remain.
+Preserved row 239's injected writer, fire/delete beforeWrite callback, and
+commit() passing beforeWrite into writer.write. There is no pre-lock revoke
+call in commit(). `packages/business/src/organization.mjs` is byte-identical
+to the new base: beforeWrite still runs inside withLock, after revision and
+validation checks; post-revoke errors still carry revoked true. Broker's
+row-239 error handling and runtime's lock/revoke wiring remain intact.
+
+Static checks only: package patch range-diff all equal, organization writer
+unchanged, diff whitespace clean, refreshed 13-file package manifest verifies.
+The only pre-existing row-298 test change remains project-runtime.test.mjs
+exactly 1/1 under mos-1510. No test files were changed for this rebase.
+UNTESTED on the new base: no Node, tests, mutants, builds or queue writes run.
+Earlier 29/0 and M1-M10 results apply to the old base only. Await Sage CLEAR
+for whole touched-file reruns; Dewey reviews the new candidate.
+
+Row 321 (#1817) review assignment acknowledged; waiting for Sage's request
+and Gladstone's pushed docs-only F7/F10 run-sheet candidate.

agents/boyd/work/queue-298/MANIFEST.sha256

@@ -0,0 +1,13 @@
+612488b705853e75e6f8952e41552526f4d07dd297d7619d608d434ed75121d6  packages/bus/README.md
+63fdf6c048f0994af3551510119eeb294c71f8116702772844214930b827cc56  packages/bus/src/broker.mjs
+65425ead353017c99e04f1e0bcc3f85c4ba60054da293badaa0360e681e418dc  packages/bus/src/runtime.mjs
+e7065db949cacfd4679a1031eebf5cde09ed196ce85612e8400ae563f02a0f18  packages/bus/tests/grant-scope-runtime.test.mjs
+4030cf584481a1db12d9e6f744015c48fdebd468335d065ead3e90180858d366  packages/bus/tests/grant-scope.test.mjs
+bc432d8d430433b9d84c00883584dc53d4b27afb5e93f739fe3ca28e80f01efa  packages/bus/tests/project-runtime.test.mjs
+84d6dd15d5ca2926d8f7a34548c70c3e7a3c58e692f0b009414f1af35cb096cc  packages/business/src/business.mjs
+e3b425f9ad2a0d4e6e0b55bd48827e144015662d95ace4163fe6474e5f98da81  packages/business/src/instance-settings.mjs
+fed4177325f65a2b9823a40a9c35c01d60c0520e3ff40b4574c3cf2c29cc096b  packages/business/src/vocabulary.mjs
+b7f96e45b9ffca2a7ebc18dc446f0adcaac72d3900f098c60157cf6cbf1bfc13  packages/business/tests/grant-scope.test.mjs
+60fc267b7f8f9e83eeb0d0207c8abdef68d554f32b08d508e98dbf59b442a366  packages/cli/README.md
+b586907ca8f351f60dc19ec2683df75d2d70ddb12955d09fb14560c9d3bed3dc  packages/cli/src/grants.mjs
+fb7c30b31facd887b03ff02dd6734d48a815978481b33bb21ec48604a51c5ff5  packages/cli/tests/grants-scope.test.mjs

agents/boyd/work/queue-298/mutants.py

@@ -0,0 +1,105 @@
+#!/usr/bin/env python3
+"""Row 298 mutants. Run only with Sage's explicit CLEAR in Boyd's slot.
+
+Each mutation is applied to this worktree, runs one whole new test file,
+then restores the exact original bytes, including after an interruption.
+Logs go to a caller-supplied scratch directory, never the repository root.
+"""
+import argparse
+import datetime
+import pathlib
+import subprocess
+
+ROOT = pathlib.Path(__file__).resolve().parents[4]
+BROKER = ROOT / 'packages/bus/src/broker.mjs'
+VOCABULARY = ROOT / 'packages/business/src/vocabulary.mjs'
+BUS_TEST = 'packages/bus/tests/grant-scope.test.mjs'
+BUSINESS_TEST = 'packages/business/tests/grant-scope.test.mjs'
+
+
+def replace_once(source, old, new):
+    if source.count(old) != 1:
+        raise RuntimeError(f'expected exactly one mutant site, found {source.count(old)}')
+    return source.replace(old, new, 1)
+
+
+def mutate(name, source):
+    if name == 'M1':
+        return replace_once(source,
+            'if (!raise?.grant || !grantInScope(scope, raise.grant)) return view;',
+            'if (!raise?.grant) return view;')
+    if name == 'M2':
+        return replace_once(source,
+            'return scope === null ? { scope: GRANT_SCOPE_EMPTY, fallback: true } : { scope, fallback: false };',
+            'return { scope: scope ?? value, fallback: false };')
+    if name == 'M3':
+        return replace_once(source,
+            '  #grantScopeVerb(s, verb, a) {\n    this.#human(s);',
+            '  #grantScopeVerb(s, verb, a) {')
+    if name == 'M4':
+        old = """    this.#grantEvent(s.business, {
+      action: 'grant.scope.used', grantDecision: d.id, decisionSeq: seq, method: raise.grant.method,
+      agent: raise.grant.agent, scope, revision, scopeSha256: sha256(JSON.stringify(scope)),
+    }, d.id);"""
+        return replace_once(source, old, '    // MUTANT: scope evidence omitted.')
+    if name == 'M5':
+        return replace_once(source,
+            "evidence.agent === grant.agent && evidence.scopeSha256 === sha256(JSON.stringify(checked.scope)) &&",
+            "evidence.agent === grant.agent &&")
+    if name == 'M6':
+        start = source.index("        checked = this.#store.transaction(() => {\n          const consumed = this.#consumeGrant")
+        end = source.index('\n      } catch (e) {', start)
+        return source[:start] + "        checked = this.#store.transaction(() => this.#giteaRecheck(business, decision, this.#consumeGrant(business, decision, 'gitea')));" + source[end:]
+    if name == 'M7':
+        return replace_once(source,
+            'const same = (a, b) => a.length === b.length && a.every((x, i) => x === b[i]);',
+            'const same = (a, b) => a.every((x, i) => x === b[i]);')
+    if name == 'M8':
+        return replace_once(source,
+            "    if (this.#closed(decision)?.via === 'scope' && !grantInScope(this.#scopeNow(business).scope, g)) fail('scope-changed');",
+            "    // MUTANT: no spend-time scope recheck.")
+    if name == 'M9':
+        return replace_once(source,
+            '    if (s.role !== this.#business(s.business).launch?.by) return view;',
+            '    // MUTANT: any chief instance can use scope.')
+    if name == 'M10':
+        start = source.index('    const evidence = JSON.parse(row.body);', source.index('  #scopeUsed('))
+        end = source.index('\n  }', start)
+        return source[:start] + '    return true;' + source[end:]
+    raise ValueError(name)
+
+
+def main():
+    parser = argparse.ArgumentParser(description=__doc__)
+    parser.add_argument('--sage-clear', required=True, help='CLEAR message key; required before any Node run')
+    parser.add_argument('--logs', type=pathlib.Path, required=True)
+    parser.add_argument('--mutant', choices=['M1', 'M2', 'M3', 'M4', 'M5', 'M6', 'M7', 'M8', 'M9', 'M10', 'all'], default='all')
+    parser.add_argument('--deadline', default='2026-10-23T19:38:00+00:00')
+    args = parser.parse_args()
+    deadline = datetime.datetime.fromisoformat(args.deadline)
+    args.logs.mkdir(parents=True, exist_ok=True)
+    names = ['M1', 'M2', 'M3', 'M4', 'M5', 'M6', 'M7', 'M8', 'M9', 'M10'] if args.mutant == 'all' else [args.mutant]
+    for name in names:
+        remaining = (deadline - datetime.datetime.now(datetime.timezone.utc)).total_seconds()
+        if remaining <= 15:
+            raise RuntimeError('Sage slot deadline reached; no new test run')
+        path, test = (VOCABULARY, BUSINESS_TEST) if name in ['M2', 'M7'] else (BROKER, BUS_TEST)
+        original = path.read_bytes()
+        mutated = mutate(name, original.decode())
+        log = args.logs / f'{name}.log'
+        try:
+            path.write_text(mutated)
+            with log.open('w') as output:
+                result = subprocess.run(['timeout', '-k', '10', str(int(min(180, remaining - 13))), 'node', '--test', '--test-concurrency=1', test],
+                    cwd=ROOT, stdout=output, stderr=subprocess.STDOUT,
+                    timeout=min(195, remaining - 1), check=False)
+            print(f'{name}: exit={result.returncode} log={log}', flush=True)
+        finally:
+            path.write_bytes(original)
+        # Exit 1 needs human inspection of the failing test names; errors are not kills.
+        if result.returncode == 0:
+            raise RuntimeError(f'{name} survived')
+
+
+if __name__ == '__main__':
+    main()

agents/bubba/README.md

@@ -0,0 +1,8 @@
+# Bubba
+
+Builder seat, Codex gpt-6.1-sol, started by Mos under Q245 (mos-1506). Owns row 288 (agent write notices and library revert, handed over from Honker).
+
+No launcher in this directory. The seat runs as a T3 thread (thread 3d6672b5) and works in its own worktree. It has no
+credentials of its own; it pushes only its own `bubba/*` branches through the repository credential helper (mos-0981),
+never `refactor`, `main` or another seat's branch. Claude seats orchestrate and review (Q245). Registered by Sage on
+2026-10-23 so the queue can name the seat as row owner (store.mjs isSeatDir).

agents/duckworth/work/row239/ROUND1-r4-e0cb1db2c.md

@@ -0,0 +1,30 @@
+# Row 239 round 1 verdict: honker/row239-r4 e0cb1db2c (duckworth-0295)
+
+Request: honker-0206 (in-review round 1, rev 3719). Candidate: e0cb1db2c on refactor 546366f4a.
+Method: git reads of local objects only. No node, no tests, no fetch, no queue reads.
+
+## Verdict: APPROVE
+
+- **The replay is exact.** `git range-diff 93694c518..5b8492b0f 546366f4a..0cae2dad5` gives four `=`
+  lines. None of the 16 manifest paths changed between 93694c518 and 546366f4a, and
+  `git diff 5b8492b0f 0cae2dad5` over those 16 paths is empty. My r3 read (REBASE-r3-5b8492b0f.md,
+  duckworth-0292) applies unchanged, and so do the 0165 design approval and the 0168 code approval with
+  C1 and C2 met.
+- **e0cb1db2c is doc only.** It appends 26 lines to agents/honker/work/queue-239/BUILD.md. No test reads
+  that file.
+- **Pins at e0cb1db2c.** All four 64-hex pins in channel-proof.test.mjs match the files' sha256:
+  human.mjs, human-cli.mjs, transport.mjs and webui bus.mjs (e3f52172…). Upstream changed library
+  src/index.mjs and business src/index.mjs, and no test or script pins them. The only hit in my grep
+  is a basename collision (`cli.mjs` matched `human-cli.mjs`).
+- **The run, as Honker reported it (sage-3773 CLEAR, on 0cae2dad5. I didn't rerun it):**
+  - The six touched test files ran whole: 65/65, 0 skipped, no first-run red.
+  - Mutants M1-M3g: 9/9 killed as assertion failures in their named tests.
+  - M3f killed T6, which matches my static trace in 0292.
+  - Every restore matched by sha256, and the tree was clean afterwards.
+  Running on the replay rather than r3's base was right, because bus runtime.mjs imports library
+  src/index.mjs and the cli imports business src/index.mjs, and both changed upstream.
+- **What remains is Sage's.** The full gate runs on the replay at landing (sage-3730). Sage's call.
+
+## Notes
+
+- None new. 0168 N1 (endsWith access-revoked) stands as recorded.

agents/duckworth/work/row323/ROUND1-6a0f0f4f8.md

@@ -0,0 +1,74 @@
+# Row 323 round 1 verdict: goldie/row323 6a0f0f4f8 (duckworth-0300)
+
+Request: sage-3865 (early look at draft 571376c30) and sage-3870 (candidate 6a0f0f4f8, base dd6cb5872,
+manifest 903ef0225f2f…cda79f). Brief: docs/plans/2026-10-23_case1-business-file-brief.md, section "Brief:
+the Case 1 factory business file".
+Method: static. Git reads of local objects only. No node, no tests, no fetch, no queue reads.
+
+## Verdict: APPROVE (static), with one condition
+
+- **The manifest matches.** MANIFEST.sha256 hashes to 903ef0225f2f…cda79f, and both of its blobs match at
+  6a0f0f4f8: the JSON 85e6b9ac… and the test aecd1c0f…. Neither file changed between 571376c30 and
+  6a0f0f4f8. The rest of that range is BUILD.md, logs, BUILD-LOG and SESSIONS. dd6cb5872 is an ancestor.
+  No existing test or source file changed.
+- **Fields against the brief and the cited rulings:**
+  - id `mosaic-stack` (DESIGN section 7). `vars.bus.tester` true. There is no `library` key and no
+    library project.
+  - human `jason`. I can't read mos-1554 myself, so this rests on Sage's relay in sage-3823. BUILD.md is
+    explicit that this is the only literal value that comes from mos-1554.
+  - The project root /srv/mosaic/src/mosaic-stack is under the DESIGN home /srv/mosaic, and the value
+    comes from sage-3822. It passes the normalized-absolute check at business.mjs:274. A missing project
+    file there only gives a warning in validate (cli.mjs:73-77), so the path doesn't need to exist at
+    install.
+  - Roles are chief (chief-of-staff) and assistant. The assistant is needed because checkLaunch requires
+    `launch.instances` to be nonempty and to exclude the launcher (business.mjs:186-190). BUILD.md names
+    that check, as the brief asks. Both arbiters are chief, under sage-3820. launch.by is chief, which
+    F7 (case1-accept.sh:545-559) reads.
+  - Claude only. `plugins.harness` is [claude-code] and both roles use harness claude-code. There is no
+    pi.
+  - No tracker, no credentials, no library, and no credential value or reference anywhere in the file.
+    Q247 covers the tracker by omission.
+- **The model, provider and effort have sources.**
+  - The model claude-opus-5-5 is Sage's ruling in sage-3822.
+  - The provider mapping anthropic/claude-opus-5-5 matches packages/business/README.md:185.
+  - `thinking: high` is one of the claude-code LEVELS (index.mjs:28) and matches the chief convention at
+    session-launch.test.mjs:83.
+  - With no `launch.limits`, there is no ceiling: limitHit (launch.mjs:137-155) checks only the limits
+    that are defined. That is a valid choice, and N1 records it.
+- **The tests read the shipped bytes.**
+  - DOCUMENT is `REPO/docs/guides/case1-business.mosaic-stack.json`. Case 1 writes those exact bytes,
+    loads them through loadBusiness, checks the bytes didn't change, and then asserts every field.
+  - The validate, install, boot and refusal cases copy the document and change only the project root,
+    under sage-3820. Since an absent root only warns, the copy differs from the shipped file only in a
+    way validate doesn't refuse.
+  - The brief's three tests are all there:
+    - (1) The loader case.
+    - (2) The real case2-install.sh factory profile with `--business-file`, with only stack-copy stubbed.
+    - (3) `bus-tester-off`, the literal library key through the final validate (sage-3820), and the
+      library project through `profile-library-business`.
+  - The boot case also covers the 324 boundary: bootConfig gives no trackers, credentials.status() is
+    [], and the reader's credentials are [].
+- **The tester-switch mutant is a real kill target.**
+  - mutant.py asserts that the needle `"bus.tester": true` occurs exactly once, flips only that value,
+    and restores in a finally block with a byte-equality check.
+  - The value is asserted at test :66. mutant.log shows `not ok 1`, `false !== true`, `# fail 1`, and the
+    restored sha256 85e6b9ac… equals the manifest.
+  - The flip would also make the install case at :95 fail, because the install refuses with
+    bus-tester-off.
+- **The run, as Goldie reported it (sage-3869 CLEAR, 31-byte TMPDIRs, on 571376c30). I didn't rerun it.**
+  - The new file passed 7/7, the business suite 261/261, and the restored file 7/7 again.
+  - The mutant was killed.
+  - The earlier revoke-window red is the tools.sock length limit (session.mjs:278, dda2d07b4). It fails
+    the same way on the bare base dd6cb5872, so it isn't this row's.
+
+## Condition
+
+- C1. Under mos-1561, the cli suite counts only from Sage's full gate on 6a0f0f4f8. This approval
+  depends on that gate passing with no new failures.
+
+## Notes
+
+- N1 (doc). `launch` has no `limits`, so the business has no session ceiling. If Mos wants a cap on .53,
+  it's a later launch-settings edit and doesn't need a new file.
+- N2 (doc). An install on .53 with no project file at /srv/mosaic/src/mosaic-stack still passes. It
+  warns "no project variables" (cli.mjs:76), which the run sheet could mention.

agents/duckworth/work/row324/ROUND1-dbdfcfd52.md

@@ -0,0 +1,56 @@
+# Row 324 round 1 verdict: goldie/row324-r2 dbdfcfd52 (duckworth-0298)
+
+Request: sage-3853 (#1820, comment 31469, round 1, rev 3768/3769). Candidate: dbdfcfd52 on refactor
+3569bf54f, code commit 7e59ba8b3. Brief: docs/plans/2026-10-23_optional-tracker-brief.md.
+Method: static. Git reads of local objects only. No node, no tests, no fetch, no queue reads.
+
+## Verdict: APPROVE (static)
+
+- **The manifest matches.** agents/goldie/work/queue-324/MANIFEST.sha256 hashes to 52874356…2b473d,
+  the digest Sage gave. All 8 listed blobs match the files at dbdfcfd52.
+- **The loader change is narrow.**
+  - business.mjs:239 drops "tracker" from the required-key loop.
+  - business.mjs:296 is `Object.hasOwn(document, "tracker") ? checkTracker(document.tracker, file) : null`.
+    Omission gives `tracker: null`. A present key always goes through checkTracker.
+  - business.mjs:298 guards the role tracker comparison on `tracker &&`. An absent business tracker
+    doesn't waive the role pm tracker check, and the new test covers that.
+- **A present null still refuses.** checkTracker (business.mjs:85) calls requireObject first, so a
+  present null, false, [] or a non-object refuses. {} and {sync:{}} refuse further in. The new
+  refusal test covers each of them.
+- **Every business.tracker reader handles absence.** I read each hit in Goldie's reader-audit.txt and
+  the two outside it in scripts:
+  - bus runtime.mjs:131 registers `<business>/@sync` only under `b.tracker?.sync?.credentials`. An
+    absent tracker registers nothing.
+  - bus runtime.mjs:247 hashes `b.tracker?.sync ?? null`.
+  - broker.mjs:6242 reads `b.tracker?.sync?.bot`. Broker 3969 and 4497 read the role-level tracker
+    only.
+  - cli.mjs:85 and webui reads.mjs:166 use `tracker?.sync?.credentials ?? {}`. The
+    `b.tracker.sync.bot` inside the reads.mjs loop runs only when there are entries.
+  - cli config.mjs:58 trackerFor returns null on an absent tracker before the vars check. bootConfig
+    (config.mjs:138-139) sets config.trackers only for a non-null result.
+  - tasks/adapter.mjs loads only for configured trackers (process.mjs:136), and its settings refuse
+    with tracker-config at :25 before the :35 and :81 reads.
+  - instance-settings.mjs:127 reads `old.tracker?.sync`.
+  - stack-release.sh:2074 and :2120 use `b.tracker?.sync?.credentials`.
+  - launch-settings, resolve, instances.mjs and public/bus.js:785 read role-level trackers only.
+    conversation/controller exec.tracker is a different object.
+- **Writers don't serialize the loader's null.** The setters build `next` from the raw file bytes
+  (organization.mjs:88-93), not from the loaded object, and validate before writing
+  (organization.mjs:201, :208). A business file without a tracker stays without one.
+- **The brief's tests are there.**
+  - business/tests/optional-tracker.test.mjs has 5 tests: omission loads null, CLI validate with the
+    sync file gone, a present tracker preserved and frozen, the refusal set, and the role pm check.
+  - cli/tests/optional-tracker.test.mjs has 4 tests: no trackers from bootConfig with tracker vars
+    set, startBroker with no @sync credential, businessView with no credentials, and a present
+    tracker with a missing token refusing credential-file.
+  - The existing-tracker case runs through business.test.mjs unchanged apart from :98.
+- **The one old-test edit is in bounds.** business.test.mjs:98 drops "tracker" from the
+  required-key loop, as mos-1556 allows.
+- **The run, as Goldie reported it (sage-3850 CLEAR, I didn't rerun it):** 5/5, 4/4 and
+  business.test 21/21. The presence mutant at business.mjs:296 is killed, and the restore matched
+  sha256 e76db421.
+
+## Notes
+
+- N1 (doc). The 'undefined' refusal case only exists in memory. A JSON file can't carry undefined,
+  so on disk it is the same as omission. The test is still correct.

agents/fethry/README.md

@@ -0,0 +1,8 @@
+# Fethry
+
+Builder seat, Codex gpt-6.1-sol, started by Mos under Q245 (mos-1506). Owns row 225 (C2-10b, handed over from Morgana).
+
+No launcher in this directory. The seat runs as a T3 thread (thread 14f80e3c) and works in its own worktree. It has no
+credentials of its own; it pushes only its own `fethry/*` branches through the repository credential helper (mos-0981),
+never `refactor`, `main` or another seat's branch. Claude seats orchestrate and review (Q245). Registered by Sage on
+2026-10-23 so the queue can name the seat as row owner (store.mjs isSeatDir).

agents/fethry/work/queue-225/BUILD.md

@@ -1,376 +0,0 @@
-# Row 225 (C2-10b) Console chat: replies, citations, write notices, status line
-
-Owner: Morgana, from sage-3582 (18:53Z 10-23). Base: origin/refactor 45dca69f6. Branch: morgana/row225.
-Brief: docs/plans/2026-10-20_case2-rows.md, C2-10b. Design: agents/gosalyn/work/case2/DESIGN.md 7.4,
-5.2 (the reply schema and the check result) and the write notice and `library.revert` (about line 286).
-
-## Ruling on the dependency gap (sage-3591)
-
-225 builds against the design contracts. `renderReply` stays pure, and the caller supplies the answers
-it can't know. The revert route proxies to the bus verb and shows the refusal code until the verb
-exists. Landing order: 225 lands after 217 (C2-06), not after 288 (C2-02). Sage adds `after 217` to
-row 225. Before 288 lands, the Revert button gets the bus's refusal and shows its code, as the brief
-allows.
-
-## A1. The check result I assume (to 217, Launchpad)
-
-The broker stores one check result with each agent-to-human message the guard passes. The Console reads
-it on the message row that `/api/chat/threads/<id>/messages` returns, under the key `check`:
-
-```json
-{
-  "check": {
-    "citations": [
-      { "scope": "canon", "agent": null },
-      { "scope": "supporting", "agent": "acme/scribe" },
-      { "scope": "web", "agent": null }
-    ]
-  }
-}
-```
-
-- `check` is `null` or absent on a message the guard didn't check: a human's message, a free-text reply,
-  a notice, or a message from before 217.
-- `check.citations` has one entry per entry of the body's `citations`, in the same order.
-- `scope` is one of `canon`, `playground`, `supporting` and `web`. A url cite is `web`.
-- `agent` is the `Mosaic-Agent` trailer value, `<business>/<instance>`, from
-  `git log -1 --format=%(trailers:key=Mosaic-Agent,valueonly) <commit> -- <path>`, or `null` when the
-  file's last commit at `commit` carries none. A url cite has `agent: null`. The Console shows the
-  agent-written label when `agent` is a nonempty string, and names the agent.
-
-The Console trusts nothing in the body for scope or label. A cite with no matching check entry renders
-with no badge and no label. It doesn't fall back to a scope it worked out itself.
-
-If 217 uses other names, I change mine to theirs before either of us pushes (sage-3591 item 1).
-
-## A2. The revert verb I assume (to 288, Honker)
-
-- Verb: `library.revert`. A human verb (design M4): from an agent session it refuses `human-required`,
-  like `library.status` (`broker.mjs:5133`).
-- Args: `{ "project": <business project name>, "commit": <40 lowercase hex> }`. The design writes
-  `library.revert {commit}`. `project` is added to match the other library verbs, and like theirs it is the
-  key of `business.projects` (`mirror.mjs:31`), which is the chat project's `repo` link, not its UUID. Both are required, and no other key
-  is allowed (`invalid-request`), as the other library verbs check with `keys(args, ...)`.
-- Result: `{ "project", "path", "reverted": <the commit given>, "commit": <the new commit> }`.
-- Refusal codes the Console shows by name:
-  - `library-revert-not-agent`: `commit` has no `Mosaic-Agent` trailer for this business, or isn't
-    reachable from the served commit.
-  - `stale-base`: a later commit changed that path.
-  - `human-required`, `invalid-request`, `project-not-configured`.
-  - Before 288 lands, the bus refuses the verb (expected `unknown-verb`, `broker.mjs:6578`), and the Console
-    shows that code.
-- HTTP status in the Console (`packages/webui/src/bus.mjs` `busStatus`): `stale-base` and
-  `library-revert-not-agent` map to 409. Every other code keeps the existing mapping.
-
-## A3. The status line
-
-`GET /api/library/status?project=<id>` proxies `library.status {project}` through the existing
-`libraryStatus` option. `cli.mjs:110` already passes that option, but `startServer` doesn't read it.
-The status line shows:
-
-- the served commit (7 characters) and its age;
-- `library-diverged` when the sync state names it;
-- the fetch error code;
-- the reply limits in force, and the keys that fell back;
-- the count of R-problems, linking to the list.
-
-It reads the fields `readSyncState` returns at the base (`packages/library/src/mirror.mjs:232`). It shows
-any field 217 adds (the limits) only when present.
-
-## A4. "Changed since" (ruled sage-3596)
-
-Sage ruled that 217 supplies `last`. On a `thread.messages` row that carries `check`, each path cite's
-entry gets `last`, the file's last commit at the served tip, read when the message is read. When `last`
-is absent the Console marks nothing changed, and a test pins that.
-
-One more field is needed, raised in morgana-0200. The cited `commit` is a library commit, not the
-file's own last commit, so a cite made at a commit that didn't touch the file would differ from `last`
-while the file is unchanged. I asked 217 to also store `file`, the file's last commit at the cited
-commit. That's `%H` from the same `git log -1 <commit> -- <path>` call that reads the trailer, so it
-costs no extra git call. The Console marks a cite changed when both `file` and `last` are 40-hex and
-differ. The cited commit is reachable from the served one (5.2), so `file` is an ancestor of `last`,
-and differing means newer. A missing or malformed `file` or `last` marks nothing.
-
-The entry the Console reads, in full: `{ scope, agent, file?, last? }`.
-
-## A5. `no-cited-answer` retires
-
-`renderItems` and its `NOTICES` (`no-cited-answer`, `no-answer`, `turn-failed`) go. 217 sends the
-runner's fixed texts as plain bodies (design 5.2, "Runner texts"), and renderReply shows those as free
-text. Design 7.4 names no other notice than `library-write`, so nothing is lost (sage-3596 item 3).
-
-## Files
-
-Both deviations below were accepted in sage-3596 and are named in the manifest for Dewey. The brief owns these:
-
-- `packages/library/src/render.mjs`: `renderReply` replaces `renderItems`.
-- `packages/library/src/index.mjs`: the export.
-- `packages/library/README.md`: the section.
-- `packages/library/tests/render.test.mjs`.
-
-It also owns `bus.js`, its stylesheet, `serve.mjs` (only the two routes) and new webui tests. Two
-deviations, both recorded here:
-
-- The chat view's message list is `packages/webui/src/public/chat.js:85` (`window.MosaicChat`), not
-  `bus.js`. The reply, notice and Revert rendering goes in `chat.js` and `chat.css`. The status line
-  goes in the chat thread view, so it is also in `chat.js`.
-- `packages/webui/src/console-bus.mjs` and `cli.mjs` each get one `libraryRevert` line, beside the
-  existing `libraryStatus` wiring.
-
-## Overlap with row 220 (C2-10a, Researcher, 3ef6da90d)
-
-220 changes one line each in the webui tests discord.test.mjs, fixture.mjs, history-fixture.mjs,
-relaunch.test.mjs and return-flow.test.mjs. Its other paths are in control-board, conversation, discord
-and business. 225 doesn't touch those five files or those packages. Its webui tests are new files.
-
-## Handoff to Fethry (mos-1501, Q245)
-
-The row moved to Fethry (Codex, fethry/row225). Everything below is **untested**: no suite or single file
-has run on it, since a run needs Sage's CLEAR. Each changed file passes `node --check`.
-
-Done in the handoff commit:
-
-- `render.mjs` `renderReply(body, {check, changed, name})`; index export; README section;
-  `render.test.mjs` rewritten. `renderItems` is gone from every package.
-- `serve.mjs`: `/render.mjs` static entry (owner and user file maps), `GET /api/library/status`
-  (one `project` query, answer must name that project), `POST /api/library/revert` (save's boundary,
-  strict `{project, commit}`, refusal shows the code, lost or unusable answer is `outcome-unknown`,
-  never retried). Both are nulled for a granted user, and `userRoute` keeps them owner-only. The tester
-  listener refuses `libraryRevert`.
-- `bus.mjs`: `library-revert-not-agent: 409`. That re-pins `packages/webui/src/bus.mjs` in
-  `packages/bus/tests/channel-proof.test.mjs`, with a comment line, as row 254 did. It's a third deviation,
-  in another package's test.
-- `console-bus.mjs` and `cli.mjs`: `libraryRevert`, beside `libraryStatus`.
-- `chat.js`: dynamic `import('/render.mjs')` (CSP is `script-src 'self'`); body text until it loads.
-  Cites with a scope badge, the agent-written label, "changed since" from `file`/`last`, links only for
-  https with `rel="noopener noreferrer"`. A notice gets a Revert button behind `confirm()`. The library
-  status line goes under the thread heading.
-- `chat.css`: cite, badge, notice and status styles.
-- New tests: `packages/webui/tests/library-routes.test.mjs` and
-  `packages/webui/tests/chat-replies-browser.test.mjs`. 220's five files are untouched.
-
-Decisions made in the build:
-
-- The library name is the chat project's `repo`. A project with no repo reads no status and its
-  Revert does nothing.
-- These codes hide the status line: `project-not-declared`, `library-mapping-invalid`,
-  `project-not-configured`, `not-configured` and `owner-only`.
-  - Otherwise every code-repo thread, and every granted user, would show "unavailable".
-  - Cost: a broken library mapping also hides the line. `library.status` from the CLI still shows it.
-- "Age" is the time since `lastFetch` ("fetched 5 min ago"), not the served commit's age, which the
-  status doesn't carry.
-- The limits fields are assumed to be `replyLimits {requireCitation, citationsPerReply}` and
-  `replyLimitsFallback [keys]`, and are shown only when present. **Not agreed with 217.** Confirm with
-  Beakley and rename.
-- A notice body's shape is all the renderer checks. An agent in a business without a library could
-  send a body that looks like a notice. The page would show it, but `library.revert` still refuses it.
-
-Left:
-
-1. Get CLEAR and run the webui and library suites, `channel-proof.test.mjs`, and the two new files whole.
-   The browser test's selectors and waits have never run.
-2. Agree the limits field names with 217 (Beakley).
-3. Granted-user R6 G5 (`granted-user.test.mjs:252`) lists owner verbs by hand. Add `library.revert`
-   once 288 lands.
-4. BUILD.md: the mutant list and the mos-1275 timeout plan.
-5. The manifest names the three deviations: chat.js and chat.css in place of bus.js, the console-bus and
-   cli lines, and the channel-proof re-pin.
-
-## Fethry continuation (2026-10-23, Q245)
-
-Owner: Fethry, thread 14f80e3c-ace7-4793-a577-e1275ca09b0b. Branch fethry/row225.
-This file carries Morgana's complete BUILD.md above unchanged, recovered from 9a131e956
-(base 45dca69f6). Morgana stopped editing 225 at that handoff. Issue #1726; Dewey reviews.
-Sage owns queue moves, test slots, gate and landing. No Node/tests until Sage CLEAR
-(sage-3611); commits/pushes before the gate are explicitly Untested. No credential files read.
-
-### Confirmed interfaces and rulings
-
-- Beakley beakley-0004 confirms ordered check.citations {scope, agent, file, last}; a missing
-  or malformed file/last means no changed marker. Fetched age accurately describes lastFetch.
-- Beakley's concrete library.status shape is replyLimits:
-  {requireCitation, citationsPerReply, fallback: [keys], problem: 'reply-limits-unreadable' | null}.
-  The inherited top-level replyLimitsFallback assumption is superseded. Show nested fallback and
-  problem, with a browser regression test for each. No broker or policy change in this row.
-- Bubba bubba-0002 confirms A2 and the exact broker notice shape. fethry-0005 forwards the
-  project-key correction: project is chat project.repo, not the chat UUID.
-- Keep the inherited ordinary-code-repo/granted-user status hiding behavior for now, but a
-  library-mapping-invalid error should stay visible: hiding an invalid mapping hides diagnosis.
-  Confirm this local UI choice through regression coverage and tell Sage/Dewey.
-
-### Continuation plan and acceptance evidence
-
-Spec: docs/plans/2026-10-20_case2-rows.md C2-10b; design 5.2 and 7.4;
-standing rulings sage-3591, sage-3596 and sage-3611. Implement inline in this existing isolated
-T3 worktree; use the existing candidate and tests, never restart the implementation.
-
-1. Static audit the handoff against the contracts and inherited tests. Add failing coverage for
-   nested limits fallback/problem, wrong-project revert receipts, missing file/last and invalid
-   mapping visibility. Existing tests require Mos approval through Sage before further edits.
-2. On Sage CLEAR, run the new files whole and library renderer tests with per-test deadlines;
-   record RED before changing uncovered behavior. Fix only demonstrated local defects. Run
-   targeted GREEN, then the full relevant suites only within the authorized slot.
-3. Record exact commands, timings and output paths. Prepare mutant kill list below; run only on
-   CLEAR, using isolated copies so the candidate is never temporarily changed for mutation.
-4. Freeze a manifest containing all source/test/doc changes and all three handoff deviations.
-   Push only fethry/*, as additional commits. Send exact head/results to Dewey and Sage; cc Mos
-   on pushes/blockers. Sage performs queue moves, gate and landing. No merge/release/live changes.
-
-### Existing test changes requiring Mos OK through Sage (mos-1272)
-
-Diff against 45dca69f6, inherited from Morgana 9a131e956:
-
-| File | Added | Removed | Reason |
-| --- | ---: | ---: | --- |
-| packages/library/tests/render.test.mjs | 80 | 66 | Brief requires retiring renderItems and replacing its tests with renderReply coverage |
-| packages/bus/tests/channel-proof.test.mjs | 3 | 1 | bus.mjs gains library-revert-not-agent:409; refresh that source hash and document why |
-
-No further edits to these files pending approval. No edits to row220's five tests.
-The new webui test files are additions against the row base.
-
-### Timeout plan (mos-1275)
-
-Every Node test run uses --test-concurrency=1 and --test-timeout=30000, under an outer timeout.
-New library/route files: outer 120s each; new browser file: outer 240s. Full library and channel-proof:
-outer 180s; full webui: outer 900s, MOSAIC_REQUIRE_EDITOR_BUILD=1. Full webui requires its own
-packages/webui npm ci per agents/README.md and Sage CLEAR. Output redirects to an evidence log;
-inspect tail, failure names and summary, never claim green from an exit alone. A timeout is a
-failed run: stop, report the exact command/phase/last output, and diagnose before retrying.
-Sage's gate owns every scripts/test-*.sh; no implicit slot or test authority from this plan.
-
-### Mutant plan (pending CLEAR)
-
-- M1: drop a path badge or the supporting label; cite browser assertions must fail.
-- M2: allow http/javascript links; renderer and browser safe-link assertions must fail.
-- M3: compare cited library commit to last instead of file to last, or treat a missing file/last as
-  changed; changed-since assertions must fail, including same-file/different-library-commit.
-- M4: ignore nested fallback/problem; status browser tests must fail.
-- M5: remove a revert fence (send, identity, exact Origin or Fetch Metadata), strict key/commit
-  validation or wrong-project receipt validation; route tests must fail with zero unexpected calls.
-- M6: retry a refused/unknown revert; single-call route/browser assertions must fail.
-- M7: remove granted-user library-route fence; owner-only route coverage must fail.
-
-Progress: handoff and interfaces recovered; candidate untested. No completion claim.
-
-Static evidence correction: the first pushed patch artifact used ordinary context lines, whose
-single-space blank context lines make git diff --check report whitespace in the artifact. Regenerated
-inherited-old-tests.patch with --unified=0; it is the same exact two-file change, applicable with
-git apply --unidiff-zero. No source or existing test changed for this correction.
-
-Mutation kit authored at mutants.py (11 concrete mutations across M1-M7), Python AST parse only.
-It archives the committed packages plus their tracked fixture dependencies into disposable snapshots,
-links the existing dependency install read-only in practice (tests do not install), enforces exactly
-one mutation anchor and requires an assertion failure for a kill. It records source hashes before
-and after. It has not run; anchors for the planned fixes intentionally require those fixes first.
-No Node/tests/build/browser work has run in Fethry's session pending Sage CLEAR.
-
-### Old-test approval and preservation condition (mos-1510, sage-3623)
-
-Mos approves render.test.mjs +80/-66 and channel-proof.test.mjs +3/-1 exactly. No additional edits
-are permitted to either file without a new Mos OK through Sage. The condition on the renderer:
-
-- The old malformed-body fixed-line behavior no longer applies. Design 5.2 now says any body
-  outside the cited-object schema is free text whose text is the whole body. Rejecting it into a
-  fixed line would hide human/free-text/older messages and the four fixed runner texts. The new
-  render.test.mjs tests “free text renders as itself with no citations” and “a body without the
-  reply or notice shape is free text: the whole body, no citations” explicitly cover this new rule.
-- The old no-options path-badge behavior still applies. The new render.test.mjs test “without a
-  check result a path cite has no badge, no label and is never changed” covers it, and the browser
-  test checks an unchecked path cite has no badge/label. No path inference fallback was added.
-
-Dewey checks both against the frozen old-test delta. The two numstats remain 80/66 and 3/1.
-
-### Test slot and shared protocol (sage-3623, beakley-0006)
-
-Targeted lane A slot is planned around 19:47Z, after Gosalyn's 226 run and Sage's queue gap.
-Wait for explicit CLEAR; the scheduled time alone grants nothing. Hard stop 20:00Z for Sage's
-226 gate. Boyd's lane B bus/cli/business work is disjoint and does not count as a busy lane A.
-The three requested files are the library renderer test and the two new webui files, whole/serial.
-
-Beakley confirms reply-protocol.mjs exports only GUARD_CODES (the seven guard refusal codes) and
-FIXED_TEXTS {empty, failed, uncited, tooLong}. It has no scope/notice constants or validator.
-renderReply defines none of those codes or runner texts: it already renders the fixed bodies as free
-text. It therefore needs no protocol import and no extra browser module route (beakley-0006).
-Do not add unused imports or redefine those shared codes/texts later.
-
-2026-10-23T19:21:07Z dependency update (bubba-0006): Bubba's first static row288 push is
-origin/bubba/row288 c867cada9, explicitly Untested with no Node run. A2 library.revert uses the
-business.projects key; broker notice retains the exact agreed body. Bubba adds librarySave only
-in console-bus.mjs/cli.mjs and leaves libraryRevert wiring owned by 225. Preserve both callback
-changes when Sage integrates. No dependency merge or test run performed here; 225 still lands
-after 217 and may show unknown-verb until 288 lands.
-
-## T1 targeted RED to GREEN (sage-3641, 2026-10-23T19:23Z)
-
-All three files ran whole and serial, with TMPDIR=/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2,
---test-concurrency=1 --test-timeout=30000 and outer timeout -k 10 (120s renderer, 120s routes,
-240s browser). Initial renderer 9/0 (0.105s), routes 9/3 (0.226s), browser 5/3 (5.630s).
-Final renderer 9/0 (0.105s), routes 12/0 (0.212s), browser 8/0 (5.284s). Logs in evidence/.
-
-Production fixes after RED:
-- Reject a library.revert receipt with the wrong project as outcome-unknown; no retry.
-- Read replyLimits.fallback and display replyLimits.problem per beakley-0004/0006.
-- Show library-mapping-invalid in the status line; its hidden-status branch is covered by the
-  browser refusal matrix once the nested-limits assertion passes. This diagnosis was made statically;
-  the first RED exits that matrix at the preceding fallback assertion, so visibility itself has only
-  a GREEN run, unlike the fallback/problem and wrong-project fixes.
-
-Three assertion corrections in NEW handoff files (not pre-existing tests, per sage-3647):
-1. library-routes.test.mjs: POST /api/library/status in preview mode expects 403, because the existing
-   global preview write fence runs before the GET-only route and returns read-only. The route remains
-   GET-only and no callback fires on that POST. Do not weaken or bypass the fence to get 405.
-2. library-routes.test.mjs: project-not-declared expects 400, which busStatus already maps at the
-   row base. The inherited 502 expectation contradicted that existing map. No production map change.
-3. chat-replies-browser.test.mjs: coerce the whole “img element OR window.injected” expression to a
-   Boolean. With no injected node/code the old expression returns undefined, not false. Assertions
-   still require neither DOM injection nor executed handler. All preceding cite/link assertions pass.
-
-Frozen pre-existing test deltas still render.test.mjs 80/66 and channel-proof.test.mjs 3/1.
-No Node/Chromium process with this slot TMPDIR remained after targeted tests (checked /proc).
-
-Expanded CLEAR sage-3647: full library, then channel-proof whole, then isolated mutants that fit;
-still hard stop 19:38Z. No full webui suite, npm ci or editor build authorized in this window.
-
-Expanded-slot evidence: full library 81/0 (9.179s), channel-proof 2/0 (0.573s), whole/serial,
---test-timeout=30000, outer timeout -k 10 180, same TMPDIR. Logs copied to evidence/.
-To exercise invalid-mapping visibility independently, added its own browser case and temporarily
-restored only the hidden-mapping branch. Whole browser RED: 7/2 (8.810s); the direct assertion sees
-null instead of the diagnostic, and the refusal-matrix wait also fails. Finally restored the exact
-corrected source before the next run. This supersedes the earlier visibility “GREEN only” note.
-
-Final targeted coverage before mutation: browser 9/0 (6014.970ms runner duration), routes 13/0.
-Added an independent send-off test with a configured libraryRevert callback: absence of --send
-still refuses with zero callback calls. This makes the send fence independently mutation-testable.
-The kit now has 14 concrete mutations, including agent-label, unreadable-limits problem and send.
-Each isolated target is restored to its candidate SHA256, and worktree hashes are checked before
-continuing to the next mutant (sage-3647). Runner uses TAP so assertion failures can be distinguished
-from timeouts/import/process failures. Full webui/build and the integration gate remain pending.
-
-Dependency update beakley-0008: row217 first push origin/beakley/row217 c25f5b8da is UNTESTED,
-continued from Launchpad e25ef0373. No dependency merge here; its protocol/module mount belongs to
-217 and renderReply needs none of those codes/texts. Integration acceptance remains Sage's gate.
-
-First isolated-mutant attempt stopped honestly at M3-wrong-commit: M1 badge, M1 agent label and M2
-https-only link mutants were killed by assertions; M3 failed via the browser's expected-state wait,
-so the strict runner did NOT count it as a kill. Every target restored/hash-checked and candidate
-hashes unchanged. Logs retained in evidence/mutants-attempt1/. Corrected the new browser test to wait
-for a completed repaint (independent of desired output), then assert changed-marker count. Whole
-browser baseline remains 9/0. No production change. Re-run the whole isolated kit against this test.
-
-## T1 complete: isolated mutants and source-review handoff
-
-sage-3647 final kit on source candidate 507901277: 14/14 assertion kills, no timeout/import/process
-failure counted. Each mutant matched one anchor, restored the target SHA256 and checked the three
-candidate source hashes before the next. evidence/mutants-final/summary.json records every result;
-final worktreeUnchanged=true. Logs name the failing tests, including M3's direct assertion after the
-refresh wait correction. /proc inspection found no remaining Node/Chromium process with the slot
-TMPDIR. Returned lane A to Sage as fethry-0016 at about19:29Z, before the19:38Z hard stop.
-
-Checked-in TAP display copies remove trailing whitespace so the diff is clean. Their raw SHA256
-values are recorded in evidence/raw-log-provenance.json; original byte-for-byte logs remain under
-/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2. This changes evidence presentation only, never tests.
-
-MANIFEST.md and manifest.r1.sha256 freeze the13 changed package files for Dewey. All three handoff
-deviations and Mos1510's two preservation conditions are explicit. Old-test numstats remain80/66 and3/1.
-No full webui/npm ci/build was run; Sage explicitly reserved it for a later window. Full package/script
-and dependency integration gate remains required before landing. No queue move, merge or live action.

agents/fethry/work/queue-225/MANIFEST.md

@@ -1,67 +0,0 @@
-# Row 225 review packet — C2-10b (#1726)
-
-Owner Fethry (14f80e3c), reviewer Dewey (84fb346c). Base 45dca69f6.
-Source candidate 507901277 continues Morgana 66f7becf2 and 9a131e956; no rewritten history.
-Status: targeted tests and full library green; full webui/build and Sage's full gate still pending.
-This packet requests source/manifest review, not landing or a full-green claim.
-
-## Behavior and contracts
-
-The Console shows reply text and citations with path/line/quote, scope and agent-written labels,
-marks a changed file only with valid differing check.file/check.last, links only https URLs, shows
-write/delete notices and explicit Revert results, and displays library status, fetch age, divergence,
-fetch errors, nested replyLimits metadata and R-problems. Invalid library mappings remain visible.
-Revert validates {project,commit}, preserves refusal codes and reports uncertain/wrong-project
-receipts as outcome-unknown without retry. The project is chat project.repo (business.projects key).
-
-A1-A5 are in BUILD.md. Dependency contracts: row217 ordered check.citations and nested replyLimits;
-row288 A2 revert result/notice. No dependency merge in this candidate. Landing order is 217 then225;
-unknown-verb is expected until288 lands. Beakley's GUARD_CODES/FIXED_TEXTS need no renderer import:
-renderReply defines neither and renders those fixed bodies as free text.
-
-## Frozen implementation and tests
-
-manifest.r1.sha256 freezes the 13 changed package paths, including the two approved existing-test
-changes. Check from repository root with `sha256sum -c agents/fethry/work/queue-225/manifest.r1.sha256`.
-All other changed files are BUILD/session records, handoff/approval evidence and this review packet.
-No role, policy, schema, secret, live instance, deployment or queue change is included.
-
-Three departures from the brief, carried from Morgana's handoff:
-
-1. Chat rendering/status live in public/chat.js and chat.css, where the message list is, instead of
-   bus.js and its stylesheet (sage-3596). serve.mjs serves the same pure render.mjs module to owner
-   and granted-user pages; no duplicated browser renderer and no generated asset.
-2. console-bus.mjs and cli.mjs wire libraryRevert beside libraryStatus (sage-3596). --send still
-   independently gates Revert. Preserve row288's separate librarySave wiring at integration.
-3. webui/src/bus.mjs maps library-revert-not-agent to409; bus/tests/channel-proof.test.mjs re-pins
-   only that source's hash and documents why. Mos read and approved this exact +3/-1 (mos-1510).
-
-Existing-test authority: Mos1510 via Sage3623 approves render.test.mjs +80/-66 and channel-proof +3/-1.
-Both exact numstats are unchanged. The malformed-body fixed-line rule is superseded by design5.2's
-whole-body free text, covered by two replacement renderer tests. The old no-options path-badge rule
-is retained and covered by the replacement test plus unchecked-cite browser coverage. BUILD.md
-explains these two preservation conditions and the three new-file assertion corrections in detail.
-
-## Verification and remaining gate
-
-Evidence logs are under evidence/; commands, deadlines, failures and corrections are in BUILD.md.
-Targeted whole-file tests: renderer9/0, routes13/0, browser9/0. Full library81/0, channel-proof2/0.
-No skips/cancellations. Invalid-mapping visibility also has an independent RED then GREEN.
-All 14 isolated mutants were killed by assertions on source candidate507901277; each mutation
-matched one anchor, restored its source hash, and verified unchanged candidate hashes before the next
-mutation. Summary: evidence/mutants-final/summary.json. The first attempt stopped at an expected-state
-wait (not counted as a kill), then the new browser test was improved and the whole kit rerun.
-Raw logs remain under the scratch root; checked-in display copies trim trailing whitespace and record
-raw digests in evidence/raw-log-provenance.json.
-
-Before landing, Sage still runs full webui with MOSAIC_REQUIRE_EDITOR_BUILD=1 after the worktree-local
-webui npm ci, every applicable package/script suite and integration against217. No full webui/build
-in T1 (sage-3647). Dewey approval and Sage's gate/landing remain required; queue moves belong to Sage.
-
-Static audit: the channel-proof source pin matches webui bus.mjs; no hash pin of bus.js, serve.mjs
-or library render.mjs was found. packages' only remaining renderItems match is an explanatory comment
-in the frozen replacement test; no runtime export, import or call remains. No no-cited-answer match.
-
-Review focus: stored check metadata versus untrusted body, missing/malformed file/last, https-only
-links and inert hostile text, Revert authority/receipt uncertainty, async route/sign-out isolation,
-and status diagnostics without owner transport leakage to a granted user.

agents/fethry/work/queue-225/evidence/browser-final.tap

@@ -1,64 +0,0 @@
-TAP version 13
-# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
-ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
-  ---
-  duration_ms: 704.129155
-  type: 'test'
-  ...
-# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
-ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
-  ---
-  duration_ms: 690.249337
-  type: 'test'
-  ...
-# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
-ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
-  ---
-  duration_ms: 595.036289
-  type: 'test'
-  ...
-# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
-ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
-  ---
-  duration_ms: 627.082447
-  type: 'test'
-  ...
-# Subtest: chat status line: limits when the status carries them, no problems, and refusals
-ok 5 - chat status line: limits when the status carries them, no problems, and refusals
-  ---
-  duration_ms: 787.799722
-  type: 'test'
-  ...
-# Subtest: chat status line: a project with no repository link reads no library status
-ok 6 - chat status line: a project with no repository link reads no library status
-  ---
-  duration_ms: 587.311743
-  type: 'test'
-  ...
-# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
-ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
-  ---
-  duration_ms: 618.209773
-  type: 'test'
-  ...
-# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
-ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
-  ---
-  duration_ms: 633.838649
-  type: 'test'
-  ...
-# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
-ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
-  ---
-  duration_ms: 619.313248
-  type: 'test'
-  ...
-1..9
-# tests 9
-# suites 0
-# pass 9
-# fail 0
-# cancelled 0
-# skipped 0
-# todo 0
-# duration_ms 6014.970062

agents/fethry/work/queue-225/evidence/browser-final2.tap

@@ -1,64 +0,0 @@
-TAP version 13
-# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
-ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
-  ---
-  duration_ms: 636.096036
-  type: 'test'
-  ...
-# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
-ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
-  ---
-  duration_ms: 741.239029
-  type: 'test'
-  ...
-# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
-ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
-  ---
-  duration_ms: 568.879998
-  type: 'test'
-  ...
-# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
-ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
-  ---
-  duration_ms: 641.929005
-  type: 'test'
-  ...
-# Subtest: chat status line: limits when the status carries them, no problems, and refusals
-ok 5 - chat status line: limits when the status carries them, no problems, and refusals
-  ---
-  duration_ms: 870.041985
-  type: 'test'
-  ...
-# Subtest: chat status line: a project with no repository link reads no library status
-ok 6 - chat status line: a project with no repository link reads no library status
-  ---
-  duration_ms: 648.87451
-  type: 'test'
-  ...
-# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
-ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
-  ---
-  duration_ms: 566.725897
-  type: 'test'
-  ...
-# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
-ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
-  ---
-  duration_ms: 611.150846
-  type: 'test'
-  ...
-# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
-ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
-  ---
-  duration_ms: 618.488891
-  type: 'test'
-  ...
-1..9
-# tests 9
-# suites 0
-# pass 9
-# fail 0
-# cancelled 0
-# skipped 0
-# todo 0
-# duration_ms 6014.364529

agents/fethry/work/queue-225/evidence/browser-green.tap

@@ -1,16 +0,0 @@
-✔ chat replies: free text, cites with badges, the agent label, changed since and safe links (583.234335ms)
-✔ chat replies: a write notice reads as its line with a Revert; a refused revert shows its code (634.71741ms)
-✔ chat replies: a read-only Console shows the notice with Revert disabled (574.836149ms)
-✔ chat status line: served commit and age, divergence, fetch error and the problems one click away (607.74749ms)
-✔ chat status line: limits when the status carries them, no problems, and refusals (861.034669ms)
-✔ chat status line: a project with no repository link reads no library status (611.433469ms)
-✔ chat status line: unreadable reply limits show their problem and both fallback keys (606.380675ms)
-✔ chat replies: unchanged file at a different library commit and incomplete checks stay unmarked (650.947719ms)
-ℹ tests 8
-ℹ suites 0
-ℹ pass 8
-ℹ fail 0
-ℹ cancelled 0
-ℹ skipped 0
-ℹ todo 0
-ℹ duration_ms 5251.735356

agents/fethry/work/queue-225/evidence/browser-red.tap

@@ -1,78 +0,0 @@
-✖ chat replies: free text, cites with badges, the agent label, changed since and safe links (980.914799ms)
-✔ chat replies: a write notice reads as its line with a Revert; a refused revert shows its code (753.988771ms)
-✔ chat replies: a read-only Console shows the notice with Revert disabled (672.814814ms)
-✔ chat status line: served commit and age, divergence, fetch error and the problems one click away (622.859977ms)
-✖ chat status line: limits when the status carries them, no problems, and refusals (583.956229ms)
-✔ chat status line: a project with no repository link reads no library status (635.758222ms)
-✖ chat status line: unreadable reply limits show their problem and both fallback keys (581.636121ms)
-✔ chat replies: unchanged file at a different library commit and incomplete checks stay unmarked (653.788881ms)
-ℹ tests 8
-ℹ suites 0
-ℹ pass 5
-ℹ fail 3
-ℹ cancelled 0
-ℹ skipped 0
-ℹ todo 0
-ℹ duration_ms 5597.371605
-
-✖ failing tests:
-
-test at packages/webui/tests/chat-replies-browser.test.mjs:81:1
-✖ chat replies: free text, cites with badges, the agent label, changed since and safe links (980.914799ms)
-  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:
-  + actual - expected
-
-  + undefined
-  - false
-
-      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/chat-replies-browser.test.mjs:102:10)
-      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
-      at async Test.run (node:internal/test_runner/test:1409:7)
-      at async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3) {
-    generatedMessage: true,
-    code: 'ERR_ASSERTION',
-    actual: undefined,
-    expected: false,
-    operator: 'strictEqual',
-    diff: 'simple'
-  }
-
-test at packages/webui/tests/chat-replies-browser.test.mjs:152:1
-✖ chat status line: limits when the status carries them, no problems, and refusals (583.956229ms)
-  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:
-  + actual - expected
-
-  + 'Library at ccccccc · fetched 5 min ago · citations required, up to 4 per reply · no problems'
-  - 'Library at ccccccc · fetched 5 min ago · citations required, up to 4 per reply · limits fell back: citationsPerReply · no problems'
-
-      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/chat-replies-browser.test.mjs:156:10)
-      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
-      at async Test.run (node:internal/test_runner/test:1409:7)
-      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
-    generatedMessage: true,
-    code: 'ERR_ASSERTION',
-    actual: 'Library at ccccccc · fetched 5 min ago · citations required, up to 4 per reply · no problems',
-    expected: 'Library at ccccccc · fetched 5 min ago · citations required, up to 4 per reply · limits fell back: citationsPerReply · no problems',
-    operator: 'strictEqual',
-    diff: 'simple'
-  }
-
-test at packages/webui/tests/chat-replies-browser.test.mjs:173:1
-✖ chat status line: unreadable reply limits show their problem and both fallback keys (581.636121ms)
-  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:
-  + actual - expected
-
-  + 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · no problems'
-  - 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · reply-limits-unreadable · no problems'
-
-      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/chat-replies-browser.test.mjs:179:10)
-      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
-      at async Test.run (node:internal/test_runner/test:1409:7)
-      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
-    generatedMessage: true,
-    code: 'ERR_ASSERTION',
-    actual: 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · no problems',
-    expected: 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · reply-limits-unreadable · no problems',
-    operator: 'strictEqual',
-    diff: 'simple'
-  }

agents/fethry/work/queue-225/evidence/channel-proof.tap

@@ -1,22 +0,0 @@
-TAP version 13
-# Subtest: channel conversion preserves the four proof/transport byte baselines and modules cannot import a proof caller
-ok 1 - channel conversion preserves the four proof/transport byte baselines and modules cannot import a proof caller
-  ---
-  duration_ms: 4.280459
-  type: 'test'
-  ...
-# Subtest: channel recovery still requires the same shim path and rejects an absent or forged proof
-ok 2 - channel recovery still requires the same shim path and rejects an absent or forged proof
-  ---
-  duration_ms: 413.032186
-  type: 'test'
-  ...
-1..2
-# tests 2
-# suites 0
-# pass 2
-# fail 0
-# cancelled 0
-# skipped 0
-# todo 0
-# duration_ms 539.602759

agents/fethry/work/queue-225/evidence/library-full.tap

@@ -1,496 +0,0 @@
-TAP version 13
-# Subtest: resolver step 1: a path from the repo root, with or without .md
-ok 1 - resolver step 1: a path from the repo root, with or without .md
-  ---
-  duration_ms: 1.051208
-  type: 'test'
-  ...
-# Subtest: resolver step 2: the same path with vaultPrefix/ stripped
-ok 2 - resolver step 2: the same path with vaultPrefix/ stripped
-  ---
-  duration_ms: 0.164795
-  type: 'test'
-  ...
-# Subtest: resolver step 3: a path relative to the linking file, never above the repo root
-ok 3 - resolver step 3: a path relative to the linking file, never above the repo root
-  ---
-  duration_ms: 0.192765
-  type: 'test'
-  ...
-# Subtest: resolver step 4: a base name that matches exactly one indexed file
-ok 4 - resolver step 4: a base name that matches exactly one indexed file
-  ---
-  duration_ms: 0.201611
-  type: 'test'
-  ...
-# Subtest: a link into another of her repos resolves to nothing
-ok 5 - a link into another of her repos resolves to nothing
-  ---
-  duration_ms: 0.130282
-  type: 'test'
-  ...
-# Subtest: wikilink forms, embeds, and links skipped inside code
-ok 6 - wikilink forms, embeds, and links skipped inside code
-  ---
-  duration_ms: 1.445011
-  type: 'test'
-  ...
-# Subtest: only a body embed whose target has an extension other than .md, in any case, is an attachment
-ok 7 - only a body embed whose target has an extension other than .md, in any case, is an attachment
-  ---
-  duration_ms: 0.25003
-  type: 'test'
-  ...
-# Subtest: the fixture mapping checks and comes back frozen
-ok 8 - the fixture mapping checks and comes back frozen
-  ---
-  duration_ms: 1.772928
-  type: 'test'
-  ...
-# Subtest: C2-01c: a prefix inside or holding another entry's book refuses library-playground-other-universe
-ok 9 - C2-01c: a prefix inside or holding another entry's book refuses library-playground-other-universe
-  ---
-  duration_ms: 0.735312
-  type: 'test'
-  ...
-# Subtest: C2-01c: a prefix equal to a book folder, or holding its own, refuses library-mapping-invalid
-ok 10 - C2-01c: a prefix equal to a book folder, or holding its own, refuses library-mapping-invalid
-  ---
-  duration_ms: 0.532498
-  type: 'test'
-  ...
-# Subtest: C2-01c: universe-level prefixes lie outside every book, in a plain universe and in a hybrid with no books
-ok 11 - C2-01c: universe-level prefixes lie outside every book, in a plain universe and in a hybrid with no books
-  ---
-  duration_ms: 0.668173
-  type: 'test'
-  ...
-# Subtest: C2-01c: a draft takes kind, name and playground only, and comes back frozen with books []
-ok 12 - C2-01c: a draft takes kind, name and playground only, and comes back frozen with books []
-  ---
-  duration_ms: 1.032507
-  type: 'test'
-  ...
-# Subtest: no playground prefix holds another, and no book folder holds another
-ok 13 - no playground prefix holds another, and no book folder holds another
-  ---
-  duration_ms: 0.507943
-  type: 'test'
-  ...
-# Subtest: shape refusals: kind, remote, branch, unknown keys, types, manuscript, folder names
-ok 14 - shape refusals: kind, remote, branch, unknown keys, types, manuscript, folder names
-  ---
-  duration_ms: 0.740368
-  type: 'test'
-  ...
-# Subtest: C2-03a sage-2021: user is optional, kept when given, and must be a plain account name
-ok 15 - C2-03a sage-2021: user is optional, kept when given, and must be a plain account name
-  ---
-  duration_ms: 0.659277
-  type: 'test'
-  ...
-# Subtest: a hybrid universe is a shape the query code can take (1.4), with sources that must exist
-ok 16 - a hybrid universe is a shape the query code can take (1.4), with sources that must exist
-  ---
-  duration_ms: 0.695117
-  type: 'test'
-  ...
-# Subtest: a caller-supplied fail receives the code, as business file loading will pass it (C2-04)
-ok 17 - a caller-supplied fail receives the code, as business file loading will pass it (C2-04)
-  ---
-  duration_ms: 0.392362
-  type: 'test'
-  ...
-# Subtest: scope comes from the path alone (design 1.2)
-ok 18 - scope comes from the path alone (design 1.2)
-  ---
-  duration_ms: 0.466406
-  type: 'test'
-  ...
-# Subtest: C2-04 mirror: exact default path, bare without checkout or remote, and idempotent initialization
-ok 19 - C2-04 mirror: exact default path, bare without checkout or remote, and idempotent initialization
-  ---
-  duration_ms: 46.645994
-  type: 'test'
-  ...
-# Subtest: C2-04 mirror: simultaneous creators publish one intact mirror and leave no staging paths
-ok 20 - C2-04 mirror: simultaneous creators publish one intact mirror and leave no staging paths
-  ---
-  duration_ms: 32.763959
-  type: 'test'
-  ...
-# Subtest: C2-04 mirror: skipped publication accepts both coreutils statuses without removing the winner
-ok 21 - C2-04 mirror: skipped publication accepts both coreutils statuses without removing the winner
-  ---
-  duration_ms: 109.751094
-  type: 'test'
-  ...
-# Subtest: C2-04 mirror: preserve occupied directories and reject symlink ancestors and code overlaps
-ok 22 - C2-04 mirror: preserve occupied directories and reject symlink ancestors and code overlaps
-  ---
-  duration_ms: 20.129293
-  type: 'test'
-  ...
-# Subtest: C2-04 mirror: existing metadata accepts only bare Git plus state and the precreated lock
-ok 23 - C2-04 mirror: existing metadata accepts only bare Git plus state and the precreated lock
-  ---
-  duration_ms: 24.021555
-  type: 'test'
-  ...
-# Subtest: C2-04 state: missing state is empty only while the served ref is absent
-ok 24 - C2-04 state: missing state is empty only while the served ref is absent
-  ---
-  duration_ms: 37.436349
-  type: 'test'
-  ...
-# Subtest: C2-04 state: valid problems and sync metadata return no content and change no state bytes
-ok 25 - C2-04 state: valid problems and sync metadata return no content and change no state bytes
-  ---
-  duration_ms: 37.681315
-  type: 'test'
-  ...
-# Subtest: C2-04 state: strict keys, types, times, branch, commit and fixed R messages fail closed
-ok 26 - C2-04 state: strict keys, types, times, branch, commit and fixed R messages fail closed
-  ---
-  duration_ms: 105.483341
-  type: 'test'
-  ...
-# Subtest: C2-04 state: symlink, hardlink, non-private state and missing lock refuse without replacement
-ok 27 - C2-04 state: symlink, hardlink, non-private state and missing lock refuse without replacement
-  ---
-  duration_ms: 29.562786
-  type: 'test'
-  ...
-# Subtest: C2-04 file: served commit, not HEAD or a caller commit, owns the exact returned text
-ok 28 - C2-04 file: served commit, not HEAD or a caller commit, owns the exact returned text
-  ---
-  duration_ms: 74.057232
-  type: 'test'
-  ...
-# Subtest: C2-04 file: R1, R2 and R7 exclusions and never-synced mirrors cannot return file bodies
-ok 29 - C2-04 file: R1, R2 and R7 exclusions and never-synced mirrors cannot return file bodies
-  ---
-  duration_ms: 80.573844
-  type: 'test'
-  ...
-# Subtest: C2-04 lock: a first-sync and fast-forward reader wait for a consistent pair across processes
-ok 30 - C2-04 lock: a first-sync and fast-forward reader wait for a consistent pair across processes
-  ---
-  duration_ms: 253.247948
-  type: 'test'
-  ...
-# Subtest: C2-04 lock: same-process waits, timeout code, callback expiry and throw release
-ok 31 - C2-04 lock: same-process waits, timeout code, callback expiry and throw release
-  ---
-  duration_ms: 5031.462795
-  type: 'test'
-  ...
-# Subtest: C2-04 lock: owner death releases the kernel lock without replacing its file
-ok 32 - C2-04 lock: owner death releases the kernel lock without replacing its file
-  ---
-  duration_ms: 61.533295
-  type: 'test'
-  ...
-# Subtest: C2-04 lock: a missing flock binary becomes a handled refusal
-ok 33 - C2-04 lock: a missing flock binary becomes a handled refusal
-  ---
-  duration_ms: 57.176644
-  type: 'test'
-  ...
-# Subtest: C2-04 lock: an unawaited scoped read drains before the lock is released
-ok 34 - C2-04 lock: an unawaited scoped read drains before the lock is released
-  ---
-  duration_ms: 22.766874
-  type: 'test'
-  ...
-# Subtest: the fixture reads clean: every resolver step, appears_in and relationships wikilinks indexed
-ok 35 - the fixture reads clean: every resolver step, appears_in and relationships wikilinks indexed
-  ---
-  duration_ms: 33.888061
-  type: 'test'
-  ...
-# Subtest: R1: executables, symlinks, gitlinks, blobs over 1 MiB and non-UTF-8 text are not indexed
-ok 36 - R1: executables, symlinks, gitlinks, blobs over 1 MiB and non-UTF-8 text are not indexed
-  ---
-  duration_ms: 68.951498
-  type: 'test'
-  ...
-# Subtest: R2: unmapped paths are reported and not indexed
-ok 37 - R2: unmapped paths are reported and not indexed
-  ---
-  duration_ms: 25.70771
-  type: 'test'
-  ...
-# Subtest: R3: front matter not fully parsed stays raw, with the line where parsing stopped
-ok 38 - R3: front matter not fully parsed stays raw, with the line where parsing stopped
-  ---
-  duration_ms: 26.059427
-  type: 'test'
-  ...
-# Subtest: front matter forms the reader accepts and refuses
-ok 39 - front matter forms the reader accepts and refuses
-  ---
-  duration_ms: 0.448293
-  type: 'test'
-  ...
-# Subtest: R4: a link to no file, to more than one, or into another repo is reported and not followed
-ok 40 - R4: a link to no file, to more than one, or into another repo is reported and not followed
-  ---
-  duration_ms: 26.225692
-  type: 'test'
-  ...
-# Subtest: a block list link carries its item line, a scalar or flow link its key line, and problems follow
-ok 41 - a block list link carries its item line, a scalar or flow link its key line, and problems follow
-  ---
-  duration_ms: 22.565103
-  type: 'test'
-  ...
-# Subtest: an unresolved attachment embed gives no problem; a link or front matter value to one is R4; a note embed resolves
-ok 42 - an unresolved attachment embed gives no problem; a link or front matter value to one is R4; a note embed resolves
-  ---
-  duration_ms: 20.903777
-  type: 'test'
-  ...
-# Subtest: an indexed Dr.Quinn.md resolves as a body link, a block list link and an embed
-ok 43 - an indexed Dr.Quinn.md resolves as a body link, a block list link and an embed
-  ---
-  duration_ms: 25.42747
-  type: 'test'
-  ...
-# Subtest: R5: a canon file that refers into the playground is reported, and the link still goes by path
-ok 44 - R5: a canon file that refers into the playground is reported, and the link still goes by path
-  ---
-  duration_ms: 27.37119
-  type: 'test'
-  ...
-# Subtest: R6: a canon file that refers into another universe is reported; a hybrid may refer into its sources
-ok 45 - R6: a canon file that refers into another universe is reported; a hybrid may refer into its sources
-  ---
-  duration_ms: 30.585458
-  type: 'test'
-  ...
-# Subtest: R7: two paths that differ only in case are both left out
-ok 46 - R7: two paths that differ only in case are both left out
-  ---
-  duration_ms: 40.709509
-  type: 'test'
-  ...
-# Subtest: the reader reads the commit, never the working tree, and refuses a bad commit id
-ok 47 - the reader reads the commit, never the working tree, and refuses a bad commit id
-  ---
-  duration_ms: 33.579454
-  type: 'test'
-  ...
-# Subtest: a bare mirror reads the same as the clone
-ok 48 - a bare mirror reads the same as the clone
-  ---
-  duration_ms: 38.368686
-  type: 'test'
-  ...
-# Subtest: free text renders as itself with no citations
-ok 49 - free text renders as itself with no citations
-  ---
-  duration_ms: 1.571777
-  type: 'test'
-  ...
-# Subtest: a cited reply renders its text, then each cite with the badge from the check result
-ok 50 - a cited reply renders its text, then each cite with the badge from the check result
-  ---
-  duration_ms: 0.537429
-  type: 'test'
-  ...
-# Subtest: a parsed body renders as its string does
-ok 51 - a parsed body renders as its string does
-  ---
-  duration_ms: 0.304068
-  type: 'test'
-  ...
-# Subtest: without a check result a path cite has no badge, no label and is never changed
-ok 52 - without a check result a path cite has no badge, no label and is never changed
-  ---
-  duration_ms: 0.184363
-  type: 'test'
-  ...
-# Subtest: the label and the badge come from the check result only, never from a bad entry
-ok 53 - the label and the badge come from the check result only, never from a bad entry
-  ---
-  duration_ms: 0.180581
-  type: 'test'
-  ...
-# Subtest: a web cite is a link only for https
-ok 54 - a web cite is a link only for https
-  ---
-  duration_ms: 0.293669
-  type: 'test'
-  ...
-# Subtest: a write notice renders its fixed line
-ok 55 - a write notice renders its fixed line
-  ---
-  duration_ms: 0.277197
-  type: 'test'
-  ...
-# Subtest: a body without the reply or notice shape is free text: the whole body, no citations
-ok 56 - a body without the reply or notice shape is free text: the whole body, no citations
-  ---
-  duration_ms: 0.345807
-  type: 'test'
-  ...
-# Subtest: an empty citations list is a reply with no cites
-ok 57 - an empty citations list is a reply with no cites
-  ---
-  duration_ms: 0.187354
-  type: 'test'
-  ...
-# Subtest: C2-01c: each level gives its universe, and its book or null
-ok 58 - C2-01c: each level gives its universe, and its book or null
-  ---
-  duration_ms: 3.363132
-  type: 'test'
-  ...
-# Subtest: C2-01c: prefixes come first: in a book that holds a prefix, a file outside it is canon and one under it playground
-ok 59 - C2-01c: prefixes come first: in a book that holds a prefix, a file outside it is canon and one under it playground
-  ---
-  duration_ms: 0.480483
-  type: 'test'
-  ...
-# Subtest: C2-01c: a canon file linking into a draft gives R6, and into its own universe-level prefix gives R5
-ok 60 - C2-01c: a canon file linking into a draft gives R6, and into its own universe-level prefix gives R5
-  ---
-  duration_ms: 44.606565
-  type: 'test'
-  ...
-# Subtest: the survey prints folder names, counts, key sets and link-form counts, and never text
-ok 61 - the survey prints folder names, counts, key sets and link-form counts, and never text
-  ---
-  duration_ms: 37.28555
-  type: 'test'
-  ...
-# Subtest: folder names print DEL, C1 and bidi controls, U+061C among them, as escapes
-ok 62 - folder names print DEL, C1 and bidi controls, U+061C among them, as escapes
-  ---
-  duration_ms: 26.222951
-  type: 'test'
-  ...
-# Subtest: an embed of an attachment counts as an embed and as an attachment; a plain link to one does not
-ok 63 - an embed of an attachment counts as an embed and as an attachment; a plain link to one does not
-  ---
-  duration_ms: 26.23793
-  type: 'test'
-  ...
-# Subtest: with --mapping the survey adds scope, resolver step and problem counts
-ok 64 - with --mapping the survey adds scope, resolver step and problem counts
-  ---
-  duration_ms: 41.437066
-  type: 'test'
-  ...
-# Subtest: survey exit codes: usage 4, bad mapping 3, unreadable repo 2
-ok 65 - survey exit codes: usage 4, bad mapping 3, unreadable repo 2
-  ---
-  duration_ms: 17.463059
-  type: 'test'
-  ...
-# Subtest: scripts/mosaic library survey reaches the survey
-ok 66 - scripts/mosaic library survey reaches the survey
-  ---
-  duration_ms: 77.634947
-  type: 'test'
-  ...
-# Subtest: C2-03a argv: the fixed sequence, one https allow, no other protocol key
-ok 67 - C2-03a argv: the fixed sequence, one https allow, no other protocol key
-  ---
-  duration_ms: 1.605597
-  type: 'test'
-  ...
-# Subtest: C2-03a argv: only an https URL with a plain host, no userinfo, and a plain user
-ok 68 - C2-03a argv: only an https URL with a plain host, no userinfo, and a plain user
-  ---
-  duration_ms: 0.713147
-  type: 'test'
-  ...
-# Subtest: C2-03a helper: answers only the exact prompts for the configured host and user (dewey-0765)
-ok 69 - C2-03a helper: answers only the exact prompts for the configured host and user (dewey-0765)
-  ---
-  duration_ms: 31.590474
-  type: 'test'
-  ...
-# Subtest: C2-03a first sync: served is the fetched tip, HEAD is served, the survey reads it, and the token stays in the slot
-ok 70 - C2-03a first sync: served is the fetched tip, HEAD is served, the survey reads it, and the token stays in the slot
-  ---
-  duration_ms: 135.075159
-  type: 'test'
-  ...
-# Subtest: C2-03a fast-forward: served moves, problems are rebuilt, and a repeat changes only lastFetch
-ok 71 - C2-03a fast-forward: served moves, problems are rebuilt, and a repeat changes only lastFetch
-  ---
-  duration_ms: 225.707972
-  type: 'test'
-  ...
-# Subtest: C2-03a Filbert N2: a read that took served before a sync still finds its objects after served moves
-ok 72 - C2-03a Filbert N2: a read that took served before a sync still finds its objects after served moves
-  ---
-  duration_ms: 205.10431
-  type: 'test'
-  ...
-# Subtest: C2-03a overlap: a reader during a sync sees the old pair or the new one, never a mix
-ok 73 - C2-03a overlap: a reader during a sync sees the old pair or the new one, never a mix
-  ---
-  duration_ms: 175.907929
-  type: 'test'
-  ...
-# Subtest: C2-03a diverged: a non-fast-forward keeps serving and holds until a human accepts the tip
-ok 74 - C2-03a diverged: a non-fast-forward keeps serving and holds until a human accepts the tip
-  ---
-  duration_ms: 431.553812
-  type: 'test'
-  ...
-# Subtest: C2-03a accept starts the record over, so a changed branch gets a fresh state
-ok 75 - C2-03a accept starts the record over, so a changed branch gets a fresh state
-  ---
-  duration_ms: 195.011432
-  type: 'test'
-  ...
-# Subtest: C2-03a fetch failure: a wrong token keeps serving and records the error, lastFetch unchanged
-ok 76 - C2-03a fetch failure: a wrong token keeps serving and records the error, lastFetch unchanged
-  ---
-  duration_ms: 192.898644
-  type: 'test'
-  ...
-# Subtest: C2-03a a failed first fetch records the error with nothing served
-ok 77 - C2-03a a failed first fetch records the error with nothing served
-  ---
-  duration_ms: 61.594695
-  type: 'test'
-  ...
-# Subtest: C2-03a a 302 to another host fails the fetch and the other host sees nothing
-ok 78 - C2-03a a 302 to another host fails the fetch and the other host sees nothing
-  ---
-  duration_ms: 64.82991
-  type: 'test'
-  ...
-# Subtest: C2-03a the slot: missing or unsafe refuses before git, and sync never opens it
-ok 79 - C2-03a the slot: missing or unsafe refuses before git, and sync never opens it
-  ---
-  duration_ms: 59.167725
-  type: 'test'
-  ...
-# Subtest: C2-03a sage-2021: an entry with no user refuses library-remote-invalid and runs no git
-ok 80 - C2-03a sage-2021: an entry with no user refuses library-remote-invalid and runs no git
-  ---
-  duration_ms: 35.37205
-  type: 'test'
-  ...
-# Subtest: C2-03a one sync per mirror: an overlapping call refuses library-sync-busy
-ok 81 - C2-03a one sync per mirror: an overlapping call refuses library-sync-busy
-  ---
-  duration_ms: 118.260687
-  type: 'test'
-  ...
-1..81
-# tests 81
-# suites 0
-# pass 81
-# fail 0
-# cancelled 0
-# skipped 0
-# todo 0
-# duration_ms 9149.325891

agents/fethry/work/queue-225/evidence/mapping-red.tap

@@ -1,48 +0,0 @@
-✔ chat replies: free text, cites with badges, the agent label, changed since and safe links (633.807074ms)
-✔ chat replies: a write notice reads as its line with a Revert; a refused revert shows its code (621.95095ms)
-✔ chat replies: a read-only Console shows the notice with Revert disabled (577.638161ms)
-✔ chat status line: served commit and age, divergence, fetch error and the problems one click away (555.847899ms)
-✖ chat status line: limits when the status carries them, no problems, and refusals (3725.696272ms)
-✔ chat status line: a project with no repository link reads no library status (657.572856ms)
-✔ chat status line: unreadable reply limits show their problem and both fallback keys (663.163445ms)
-✔ chat replies: unchanged file at a different library commit and incomplete checks stay unmarked (616.184063ms)
-✖ chat status line: an invalid library mapping remains visible for diagnosis (597.976623ms)
-ℹ tests 9
-ℹ suites 0
-ℹ pass 7
-ℹ fail 2
-ℹ cancelled 0
-ℹ skipped 0
-ℹ todo 0
-ℹ duration_ms 8782.679569
-
-✖ failing tests:
-
-test at packages/webui/tests/chat-replies-browser.test.mjs:152:1
-✖ chat status line: limits when the status carries them, no problems, and refusals (3725.696272ms)
-  Error: Uncaught (in promise) Error: window.__statusReads.length && document.querySelector(".chat-conversation") && document.querySelector(".chat-library")?.textContent==="Library status unavailable (library-mapping-invalid).": undefined
-      at Object.evaluate (file:///home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/browser.mjs:49:35)
-      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
-      at async TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/chat-replies-browser.test.mjs:162:5)
-      at async Test.run (node:internal/test_runner/test:1409:7)
-      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
-
-test at packages/webui/tests/chat-replies-browser.test.mjs:200:1
-✖ chat status line: an invalid library mapping remains visible for diagnosis (597.976623ms)
-  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:
-  + actual - expected
-
-  + null
-  - 'Library status unavailable (library-mapping-invalid).'
-
-      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/chat-replies-browser.test.mjs:203:10)
-      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
-      at async Test.run (node:internal/test_runner/test:1409:7)
-      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
-    generatedMessage: true,
-    code: 'ERR_ASSERTION',
-    actual: null,
-    expected: 'Library status unavailable (library-mapping-invalid).',
-    operator: 'strictEqual',
-    diff: 'simple'
-  }

agents/fethry/work/queue-225/evidence/mutants-attempt1-run.log

@@ -1,4 +0,0 @@
-{"mutant": "M1-badges", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants/M1-badges.tap"}
-{"mutant": "M1-agent-label", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants/M1-agent-label.tap"}
-{"mutant": "M2-http-links", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants/M2-http-links.tap"}
-{"mutant": "M3-wrong-commit", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": false, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants/M3-wrong-commit.tap"}

agents/fethry/work/queue-225/evidence/mutants-attempt1/M1-agent-label.tap

@@ -1,192 +0,0 @@
-TAP version 13
-# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
-not ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
-  ---
-  duration_ms: 627.180675
-  type: 'test'
-  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-9ui_vkk0/M1-agent-label/packages/webui/tests/chat-replies-browser.test.mjs:81:1'
-  failureType: 'testCodeFailure'
-  error: |-
-    Expected values to be strictly deep-equal:
-    + actual - expected
-    ... Skipped lines
-
-      [
-        {
-          agent: null,
-          badge: 'canon',
-          changed: false,
-    ...
-        {
-    +     agent: null,
-    -     agent: 'agent-written: acme/scribe',
-          badge: 'supporting',
-          changed: false,
-          href: null,
-          quote: 'green eyes',
-          ref: 'Notes/Eyes.md:9-10 @aaaaaaa',
-
-  code: 'ERR_ASSERTION'
-  name: 'AssertionError'
-  expected:
-    0:
-      badge: 'canon'
-      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
-      href: ~
-      rel: ~
-      quote: 'her grey eyes'
-      agent: ~
-      changed: false
-    1:
-      badge: 'playground'
-      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
-      href: ~
-      rel: ~
-      quote: 'a storm'
-      agent: ~
-      changed: true
-    2:
-      badge: 'supporting'
-      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
-      href: ~
-      rel: ~
-      quote: 'green eyes'
-      agent: 'agent-written: acme/scribe'
-      changed: false
-    3:
-      badge: 'web'
-      ref: 'https://example.invalid/tides'
-      href: 'https://example.invalid/tides'
-      rel: 'noopener noreferrer'
-      quote: 'spring tides'
-      agent: ~
-      changed: false
-    4:
-      badge: 'web'
-      ref: 'http://example.invalid/plain'
-      href: ~
-      rel: ~
-      quote: 'plain http'
-      agent: ~
-      changed: false
-    5:
-      badge: 'web'
-      ref: 'javascript:window.injected=2'
-      href: ~
-      rel: ~
-      quote: 'script'
-      agent: ~
-      changed: false
-  actual:
-    0:
-      badge: 'canon'
-      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
-      href: ~
-      rel: ~
-      quote: 'her grey eyes'
-      agent: ~
-      changed: false
-    1:
-      badge: 'playground'
-      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
-      href: ~
-      rel: ~
-      quote: 'a storm'
-      agent: ~
-      changed: true
-    2:
-      badge: 'supporting'
-      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
-      href: ~
-      rel: ~
-      quote: 'green eyes'
-      agent: ~
-      changed: false
-    3:
-      badge: 'web'
-      ref: 'https://example.invalid/tides'
-      href: 'https://example.invalid/tides'
-      rel: 'noopener noreferrer'
-      quote: 'spring tides'
-      agent: ~
-      changed: false
-    4:
-      badge: 'web'
-      ref: 'http://example.invalid/plain'
-      href: ~
-      rel: ~
-      quote: 'plain http'
-      agent: ~
-      changed: false
-    5:
-      badge: 'web'
-      ref: 'javascript:window.injected=2'
-      href: ~
-      rel: ~
-      quote: 'script'
-      agent: ~
-      changed: false
-  operator: 'deepStrictEqual'
-  stack: |-
-    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-9ui_vkk0/M1-agent-label/packages/webui/tests/chat-replies-browser.test.mjs:90:10)
-    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
-    async Test.run (node:internal/test_runner/test:1409:7)
-    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
-  ...
-# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
-ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
-  ---
-  duration_ms: 778.572201
-  type: 'test'
-  ...
-# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
-ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
-  ---
-  duration_ms: 641.728604
-  type: 'test'
-  ...
-# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
-ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
-  ---
-  duration_ms: 629.327348
-  type: 'test'
-  ...
-# Subtest: chat status line: limits when the status carries them, no problems, and refusals
-ok 5 - chat status line: limits when the status carries them, no problems, and refusals
-  ---
-  duration_ms: 837.886073
-  type: 'test'
-  ...
-# Subtest: chat status line: a project with no repository link reads no library status
-ok 6 - chat status line: a project with no repository link reads no library status
-  ---
-  duration_ms: 613.037186
-  type: 'test'
-  ...
-# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
-ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
-  ---
-  duration_ms: 651.026507
-  type: 'test'
-  ...
-# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
-ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
-  ---
-  duration_ms: 735.546636
-  type: 'test'
-  ...
-# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
-ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
-  ---
-  duration_ms: 712.174542
-  type: 'test'
-  ...
-1..9
-# tests 9
-# suites 0
-# pass 8
-# fail 1
-# cancelled 0
-# skipped 0
-# todo 0
-# duration_ms 6353.090574

agents/fethry/work/queue-225/evidence/mutants-attempt1/M1-badges.tap

@@ -1,206 +0,0 @@
-TAP version 13
-# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
-not ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
-  ---
-  duration_ms: 638.589537
-  type: 'test'
-  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-9ui_vkk0/M1-badges/packages/webui/tests/chat-replies-browser.test.mjs:81:1'
-  failureType: 'testCodeFailure'
-  error: |-
-    Expected values to be strictly deep-equal:
-    + actual - expected
-    ... Skipped lines
-
-      [
-        {
-          agent: null,
-    +     badge: null,
-    -     badge: 'canon',
-          changed: false,
-          href: null,
-          quote: 'her grey eyes',
-          ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa',
-          rel: null
-    ...
-          agent: null,
-    +     badge: null,
-    -     badge: 'playground',
-          changed: true,
-          href: null,
-          quote: 'a storm',
-          ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa',
-          rel: null
-    ...
-          agent: 'agent-written: acme/scribe',
-    +     badge: null,
-    -     badge: 'supporting',
-          changed: false,
-          href: null,
-          quote: 'green eyes',
-          ref: 'Notes/Eyes.md:9-10 @aaaaaaa',
-          rel: null
-
-  code: 'ERR_ASSERTION'
-  name: 'AssertionError'
-  expected:
-    0:
-      badge: 'canon'
-      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
-      href: ~
-      rel: ~
-      quote: 'her grey eyes'
-      agent: ~
-      changed: false
-    1:
-      badge: 'playground'
-      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
-      href: ~
-      rel: ~
-      quote: 'a storm'
-      agent: ~
-      changed: true
-    2:
-      badge: 'supporting'
-      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
-      href: ~
-      rel: ~
-      quote: 'green eyes'
-      agent: 'agent-written: acme/scribe'
-      changed: false
-    3:
-      badge: 'web'
-      ref: 'https://example.invalid/tides'
-      href: 'https://example.invalid/tides'
-      rel: 'noopener noreferrer'
-      quote: 'spring tides'
-      agent: ~
-      changed: false
-    4:
-      badge: 'web'
-      ref: 'http://example.invalid/plain'
-      href: ~
-      rel: ~
-      quote: 'plain http'
-      agent: ~
-      changed: false
-    5:
-      badge: 'web'
-      ref: 'javascript:window.injected=2'
-      href: ~
-      rel: ~
-      quote: 'script'
-      agent: ~
-      changed: false
-  actual:
-    0:
-      badge: ~
-      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
-      href: ~
-      rel: ~
-      quote: 'her grey eyes'
-      agent: ~
-      changed: false
-    1:
-      badge: ~
-      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
-      href: ~
-      rel: ~
-      quote: 'a storm'
-      agent: ~
-      changed: true
-    2:
-      badge: ~
-      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
-      href: ~
-      rel: ~
-      quote: 'green eyes'
-      agent: 'agent-written: acme/scribe'
-      changed: false
-    3:
-      badge: 'web'
-      ref: 'https://example.invalid/tides'
-      href: 'https://example.invalid/tides'
-      rel: 'noopener noreferrer'
-      quote: 'spring tides'
-      agent: ~
-      changed: false
-    4:
-      badge: 'web'
-      ref: 'http://example.invalid/plain'
-      href: ~
-      rel: ~
-      quote: 'plain http'
-      agent: ~
-      changed: false
-    5:
-      badge: 'web'
-      ref: 'javascript:window.injected=2'
-      href: ~
-      rel: ~
-      quote: 'script'
-      agent: ~
-      changed: false
-  operator: 'deepStrictEqual'
-  stack: |-
-    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-9ui_vkk0/M1-badges/packages/webui/tests/chat-replies-browser.test.mjs:90:10)
-    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
-    async Test.run (node:internal/test_runner/test:1409:7)
-    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
-  ...
-# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
-ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
-  ---
-  duration_ms: 770.070531
-  type: 'test'
-  ...
-# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
-ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
-  ---
-  duration_ms: 519.328288
-  type: 'test'
-  ...
-# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
-ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
-  ---
-  duration_ms: 647.667301
-  type: 'test'
-  ...
-# Subtest: chat status line: limits when the status carries them, no problems, and refusals
-ok 5 - chat status line: limits when the status carries them, no problems, and refusals
-  ---
-  duration_ms: 999.237447
-  type: 'test'
-  ...
-# Subtest: chat status line: a project with no repository link reads no library status
-ok 6 - chat status line: a project with no repository link reads no library status
-  ---
-  duration_ms: 676.088845
-  type: 'test'
-  ...
-# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
-ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
-  ---
-  duration_ms: 634.472637
-  type: 'test'
-  ...
-# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
-ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
-  ---
-  duration_ms: 655.963182
-  type: 'test'
-  ...
-# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
-ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
-  ---
-  duration_ms: 578.819646
-  type: 'test'
-  ...
-1..9
-# tests 9
-# suites 0
-# pass 8
-# fail 1
-# cancelled 0
-# skipped 0
-# todo 0
-# duration_ms 6239.022812

agents/fethry/work/queue-225/evidence/mutants-attempt1/M2-http-links.tap

@@ -1,204 +0,0 @@
-TAP version 13
-# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
-not ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
-  ---
-  duration_ms: 655.901619
-  type: 'test'
-  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-9ui_vkk0/M2-http-links/packages/webui/tests/chat-replies-browser.test.mjs:81:1'
-  failureType: 'testCodeFailure'
-  error: |-
-    Expected values to be strictly deep-equal:
-    + actual - expected
-    ... Skipped lines
-
-      [
-        {
-          agent: null,
-          badge: 'canon',
-          changed: false,
-    ...
-          changed: false,
-    +     href: 'http://example.invalid/plain',
-    -     href: null,
-          quote: 'plain http',
-          ref: 'http://example.invalid/plain',
-    +     rel: 'noopener noreferrer'
-    -     rel: null
-        },
-        {
-          agent: null,
-          badge: 'web',
-          changed: false,
-    +     href: 'javascript:window.injected=2',
-    -     href: null,
-          quote: 'script',
-          ref: 'javascript:window.injected=2',
-    +     rel: 'noopener noreferrer'
-    -     rel: null
-        }
-      ]
-
-  code: 'ERR_ASSERTION'
-  name: 'AssertionError'
-  expected:
-    0:
-      badge: 'canon'
-      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
-      href: ~
-      rel: ~
-      quote: 'her grey eyes'
-      agent: ~
-      changed: false
-    1:
-      badge: 'playground'
-      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
-      href: ~
-      rel: ~
-      quote: 'a storm'
-      agent: ~
-      changed: true
-    2:
-      badge: 'supporting'
-      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
-      href: ~
-      rel: ~
-      quote: 'green eyes'
-      agent: 'agent-written: acme/scribe'
-      changed: false
-    3:
-      badge: 'web'
-      ref: 'https://example.invalid/tides'
-      href: 'https://example.invalid/tides'
-      rel: 'noopener noreferrer'
-      quote: 'spring tides'
-      agent: ~
-      changed: false
-    4:
-      badge: 'web'
-      ref: 'http://example.invalid/plain'
-      href: ~
-      rel: ~
-      quote: 'plain http'
-      agent: ~
-      changed: false
-    5:
-      badge: 'web'
-      ref: 'javascript:window.injected=2'
-      href: ~
-      rel: ~
-      quote: 'script'
-      agent: ~
-      changed: false
-  actual:
-    0:
-      badge: 'canon'
-      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
-      href: ~
-      rel: ~
-      quote: 'her grey eyes'
-      agent: ~
-      changed: false
-    1:
-      badge: 'playground'
-      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
-      href: ~
-      rel: ~
-      quote: 'a storm'
-      agent: ~
-      changed: true
-    2:
-      badge: 'supporting'
-      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
-      href: ~
-      rel: ~
-      quote: 'green eyes'
-      agent: 'agent-written: acme/scribe'
-      changed: false
-    3:
-      badge: 'web'
-      ref: 'https://example.invalid/tides'
-      href: 'https://example.invalid/tides'
-      rel: 'noopener noreferrer'
-      quote: 'spring tides'
-      agent: ~
-      changed: false
-    4:
-      badge: 'web'
-      ref: 'http://example.invalid/plain'
-      href: 'http://example.invalid/plain'
-      rel: 'noopener noreferrer'
-      quote: 'plain http'
-      agent: ~
-      changed: false
-    5:
-      badge: 'web'
-      ref: 'javascript:window.injected=2'
-      href: 'javascript:window.injected=2'
-      rel: 'noopener noreferrer'
-      quote: 'script'
-      agent: ~
-      changed: false
-  operator: 'deepStrictEqual'
-  stack: |-
-    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-9ui_vkk0/M2-http-links/packages/webui/tests/chat-replies-browser.test.mjs:90:10)
-    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
-    async Test.run (node:internal/test_runner/test:1409:7)
-    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
-  ...
-# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
-ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
-  ---
-  duration_ms: 741.122544
-  type: 'test'
-  ...
-# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
-ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
-  ---
-  duration_ms: 616.728572
-  type: 'test'
-  ...
-# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
-ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
-  ---
-  duration_ms: 625.818493
-  type: 'test'
-  ...
-# Subtest: chat status line: limits when the status carries them, no problems, and refusals
-ok 5 - chat status line: limits when the status carries them, no problems, and refusals
-  ---
-  duration_ms: 867.033773
-  type: 'test'
-  ...
-# Subtest: chat status line: a project with no repository link reads no library status
-ok 6 - chat status line: a project with no repository link reads no library status
-  ---
-  duration_ms: 655.587703
-  type: 'test'
-  ...
-# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
-ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
-  ---
-  duration_ms: 615.997516
-  type: 'test'
-  ...
-# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
-ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
-  ---
-  duration_ms: 648.263681
-  type: 'test'
-  ...
-# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
-ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
-  ---
-  duration_ms: 624.323397
-  type: 'test'
-  ...
-1..9
-# tests 9
-# suites 0
-# pass 8
-# fail 1
-# cancelled 0
-# skipped 0
-# todo 0
-# duration_ms 6168.633364

agents/fethry/work/queue-225/evidence/mutants-attempt1/M3-wrong-commit.tap

@@ -1,74 +0,0 @@
-TAP version 13
-# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
-ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
-  ---
-  duration_ms: 640.32042
-  type: 'test'
-  ...
-# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
-ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
-  ---
-  duration_ms: 694.233373
-  type: 'test'
-  ...
-# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
-ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
-  ---
-  duration_ms: 611.500508
-  type: 'test'
-  ...
-# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
-ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
-  ---
-  duration_ms: 606.581119
-  type: 'test'
-  ...
-# Subtest: chat status line: limits when the status carries them, no problems, and refusals
-ok 5 - chat status line: limits when the status carries them, no problems, and refusals
-  ---
-  duration_ms: 896.462474
-  type: 'test'
-  ...
-# Subtest: chat status line: a project with no repository link reads no library status
-ok 6 - chat status line: a project with no repository link reads no library status
-  ---
-  duration_ms: 666.798177
-  type: 'test'
-  ...
-# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
-ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
-  ---
-  duration_ms: 629.105559
-  type: 'test'
-  ...
-# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
-not ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
-  ---
-  duration_ms: 3654.057789
-  type: 'test'
-  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-9ui_vkk0/M3-wrong-commit/packages/webui/tests/chat-replies-browser.test.mjs:184:1'
-  failureType: 'testCodeFailure'
-  error: 'Uncaught (in promise) Error: document.querySelectorAll(".chat-changed").length===0: undefined'
-  code: 'ERR_TEST_FAILURE'
-  stack: |-
-    Object.evaluate (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-9ui_vkk0/M3-wrong-commit/packages/webui/tests/browser.mjs:49:35)
-    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
-    async TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-9ui_vkk0/M3-wrong-commit/packages/webui/tests/chat-replies-browser.test.mjs:195:3)
-    async Test.run (node:internal/test_runner/test:1409:7)
-    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
-  ...
-# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
-ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
-  ---
-  duration_ms: 656.44095
-  type: 'test'
-  ...
-1..9
-# tests 9
-# suites 0
-# pass 8
-# fail 1
-# cancelled 0
-# skipped 0
-# todo 0
-# duration_ms 9179.328916

agents/fethry/work/queue-225/evidence/mutants-attempt1/summary.json

@@ -1,47 +0,0 @@
-{
-  "head": "77172ce3b46eb289409068518b7022fc7be47ebe",
-  "clear": "sage-3647",
-  "worktreeUnchanged": true,
-  "results": [
-    {
-      "mutant": "M1-badges",
-      "anchorHits": 1,
-      "restored": true,
-      "worktreeUnchanged": true,
-      "exit": 1,
-      "killed": true,
-      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
-      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants/M1-badges.tap"
-    },
-    {
-      "mutant": "M1-agent-label",
-      "anchorHits": 1,
-      "restored": true,
-      "worktreeUnchanged": true,
-      "exit": 1,
-      "killed": true,
-      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
-      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants/M1-agent-label.tap"
-    },
-    {
-      "mutant": "M2-http-links",
-      "anchorHits": 1,
-      "restored": true,
-      "worktreeUnchanged": true,
-      "exit": 1,
-      "killed": true,
-      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
-      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants/M2-http-links.tap"
-    },
-    {
-      "mutant": "M3-wrong-commit",
-      "anchorHits": 1,
-      "restored": true,
-      "worktreeUnchanged": true,
-      "exit": 1,
-      "killed": false,
-      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
-      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants/M3-wrong-commit.tap"
-    }
-  ]
-}

agents/fethry/work/queue-225/evidence/mutants-final-run.log

@@ -1,14 +0,0 @@
-{"mutant": "M1-badges", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M1-badges.tap"}
-{"mutant": "M1-agent-label", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M1-agent-label.tap"}
-{"mutant": "M2-http-links", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M2-http-links.tap"}
-{"mutant": "M3-wrong-commit", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M3-wrong-commit.tap"}
-{"mutant": "M3-missing-file", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M3-missing-file.tap"}
-{"mutant": "M4-fallback", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M4-fallback.tap"}
-{"mutant": "M4-problem", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M4-problem.tap"}
-{"mutant": "M5-send", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/library-routes.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M5-send.tap"}
-{"mutant": "M5-project-receipt", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/library-routes.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M5-project-receipt.tap"}
-{"mutant": "M5-commit-input", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/library-routes.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M5-commit-input.tap"}
-{"mutant": "M5-origin", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/library-routes.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M5-origin.tap"}
-{"mutant": "M5-fetch-metadata", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/library-routes.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M5-fetch-metadata.tap"}
-{"mutant": "M6-duplicate-call", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/library-routes.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M6-duplicate-call.tap"}
-{"mutant": "M7-user-fence", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/library-routes.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M7-user-fence.tap"}

agents/fethry/work/queue-225/evidence/mutants-final/M1-agent-label.tap

@@ -1,192 +0,0 @@
-TAP version 13
-# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
-not ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
-  ---
-  duration_ms: 646.851404
-  type: 'test'
-  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M1-agent-label/packages/webui/tests/chat-replies-browser.test.mjs:81:1'
-  failureType: 'testCodeFailure'
-  error: |-
-    Expected values to be strictly deep-equal:
-    + actual - expected
-    ... Skipped lines
-
-      [
-        {
-          agent: null,
-          badge: 'canon',
-          changed: false,
-    ...
-        {
-    +     agent: null,
-    -     agent: 'agent-written: acme/scribe',
-          badge: 'supporting',
-          changed: false,
-          href: null,
-          quote: 'green eyes',
-          ref: 'Notes/Eyes.md:9-10 @aaaaaaa',
-
-  code: 'ERR_ASSERTION'
-  name: 'AssertionError'
-  expected:
-    0:
-      badge: 'canon'
-      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
-      href: ~
-      rel: ~
-      quote: 'her grey eyes'
-      agent: ~
-      changed: false
-    1:
-      badge: 'playground'
-      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
-      href: ~
-      rel: ~
-      quote: 'a storm'
-      agent: ~
-      changed: true
-    2:
-      badge: 'supporting'
-      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
-      href: ~
-      rel: ~
-      quote: 'green eyes'
-      agent: 'agent-written: acme/scribe'
-      changed: false
-    3:
-      badge: 'web'
-      ref: 'https://example.invalid/tides'
-      href: 'https://example.invalid/tides'
-      rel: 'noopener noreferrer'
-      quote: 'spring tides'
-      agent: ~
-      changed: false
-    4:
-      badge: 'web'
-      ref: 'http://example.invalid/plain'
-      href: ~
-      rel: ~
-      quote: 'plain http'
-      agent: ~
-      changed: false
-    5:
-      badge: 'web'
-      ref: 'javascript:window.injected=2'
-      href: ~
-      rel: ~
-      quote: 'script'
-      agent: ~
-      changed: false
-  actual:
-    0:
-      badge: 'canon'
-      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
-      href: ~
-      rel: ~
-      quote: 'her grey eyes'
-      agent: ~
-      changed: false
-    1:
-      badge: 'playground'
-      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
-      href: ~
-      rel: ~
-      quote: 'a storm'
-      agent: ~
-      changed: true
-    2:
-      badge: 'supporting'
-      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
-      href: ~
-      rel: ~
-      quote: 'green eyes'
-      agent: ~
-      changed: false
-    3:
-      badge: 'web'
-      ref: 'https://example.invalid/tides'
-      href: 'https://example.invalid/tides'
-      rel: 'noopener noreferrer'
-      quote: 'spring tides'
-      agent: ~
-      changed: false
-    4:
-      badge: 'web'
-      ref: 'http://example.invalid/plain'
-      href: ~
-      rel: ~
-      quote: 'plain http'
-      agent: ~
-      changed: false
-    5:
-      badge: 'web'
-      ref: 'javascript:window.injected=2'
-      href: ~
-      rel: ~
-      quote: 'script'
-      agent: ~
-      changed: false
-  operator: 'deepStrictEqual'
-  stack: |-
-    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M1-agent-label/packages/webui/tests/chat-replies-browser.test.mjs:90:10)
-    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
-    async Test.run (node:internal/test_runner/test:1409:7)
-    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
-  ...
-# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
-ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
-  ---
-  duration_ms: 667.90945
-  type: 'test'
-  ...
-# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
-ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
-  ---
-  duration_ms: 588.346681
-  type: 'test'
-  ...
-# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
-ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
-  ---
-  duration_ms: 485.882289
-  type: 'test'
-  ...
-# Subtest: chat status line: limits when the status carries them, no problems, and refusals
-ok 5 - chat status line: limits when the status carries them, no problems, and refusals
-  ---
-  duration_ms: 709.847041
-  type: 'test'
-  ...
-# Subtest: chat status line: a project with no repository link reads no library status
-ok 6 - chat status line: a project with no repository link reads no library status
-  ---
-  duration_ms: 544.885551
-  type: 'test'
-  ...
-# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
-ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
-  ---
-  duration_ms: 514.410016
-  type: 'test'
-  ...
-# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
-ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
-  ---
-  duration_ms: 542.746154
-  type: 'test'
-  ...
-# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
-ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
-  ---
-  duration_ms: 582.608663
-  type: 'test'
-  ...
-1..9
-# tests 9
-# suites 0
-# pass 8
-# fail 1
-# cancelled 0
-# skipped 0
-# todo 0
-# duration_ms 5409.980177

agents/fethry/work/queue-225/evidence/mutants-final/M1-badges.tap

@@ -1,206 +0,0 @@
-TAP version 13
-# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
-not ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
-  ---
-  duration_ms: 621.562133
-  type: 'test'
-  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M1-badges/packages/webui/tests/chat-replies-browser.test.mjs:81:1'
-  failureType: 'testCodeFailure'
-  error: |-
-    Expected values to be strictly deep-equal:
-    + actual - expected
-    ... Skipped lines
-
-      [
-        {
-          agent: null,
-    +     badge: null,
-    -     badge: 'canon',
-          changed: false,
-          href: null,
-          quote: 'her grey eyes',
-          ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa',
-          rel: null
-    ...
-          agent: null,
-    +     badge: null,
-    -     badge: 'playground',
-          changed: true,
-          href: null,
-          quote: 'a storm',
-          ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa',
-          rel: null
-    ...
-          agent: 'agent-written: acme/scribe',
-    +     badge: null,
-    -     badge: 'supporting',
-          changed: false,
-          href: null,
-          quote: 'green eyes',
-          ref: 'Notes/Eyes.md:9-10 @aaaaaaa',
-          rel: null
-
-  code: 'ERR_ASSERTION'
-  name: 'AssertionError'
-  expected:
-    0:
-      badge: 'canon'
-      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
-      href: ~
-      rel: ~
-      quote: 'her grey eyes'
-      agent: ~
-      changed: false
-    1:
-      badge: 'playground'
-      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
-      href: ~
-      rel: ~
-      quote: 'a storm'
-      agent: ~
-      changed: true
-    2:
-      badge: 'supporting'
-      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
-      href: ~
-      rel: ~
-      quote: 'green eyes'
-      agent: 'agent-written: acme/scribe'
-      changed: false
-    3:
-      badge: 'web'
-      ref: 'https://example.invalid/tides'
-      href: 'https://example.invalid/tides'
-      rel: 'noopener noreferrer'
-      quote: 'spring tides'
-      agent: ~
-      changed: false
-    4:
-      badge: 'web'
-      ref: 'http://example.invalid/plain'
-      href: ~
-      rel: ~
-      quote: 'plain http'
-      agent: ~
-      changed: false
-    5:
-      badge: 'web'
-      ref: 'javascript:window.injected=2'
-      href: ~
-      rel: ~
-      quote: 'script'
-      agent: ~
-      changed: false
-  actual:
-    0:
-      badge: ~
-      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
-      href: ~
-      rel: ~
-      quote: 'her grey eyes'
-      agent: ~
-      changed: false
-    1:
-      badge: ~
-      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
-      href: ~
-      rel: ~
-      quote: 'a storm'
-      agent: ~
-      changed: true
-    2:
-      badge: ~
-      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
-      href: ~
-      rel: ~
-      quote: 'green eyes'
-      agent: 'agent-written: acme/scribe'
-      changed: false
-    3:
-      badge: 'web'
-      ref: 'https://example.invalid/tides'
-      href: 'https://example.invalid/tides'
-      rel: 'noopener noreferrer'
-      quote: 'spring tides'
-      agent: ~
-      changed: false
-    4:
-      badge: 'web'
-      ref: 'http://example.invalid/plain'
-      href: ~
-      rel: ~
-      quote: 'plain http'
-      agent: ~
-      changed: false
-    5:
-      badge: 'web'
-      ref: 'javascript:window.injected=2'
-      href: ~
-      rel: ~
-      quote: 'script'
-      agent: ~
-      changed: false
-  operator: 'deepStrictEqual'
-  stack: |-
-    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M1-badges/packages/webui/tests/chat-replies-browser.test.mjs:90:10)
-    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
-    async Test.run (node:internal/test_runner/test:1409:7)
-    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
-  ...
-# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
-ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
-  ---
-  duration_ms: 731.101767
-  type: 'test'
-  ...
-# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
-ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
-  ---
-  duration_ms: 633.163696
-  type: 'test'
-  ...
-# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
-ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
-  ---
-  duration_ms: 637.761161
-  type: 'test'
-  ...
-# Subtest: chat status line: limits when the status carries them, no problems, and refusals
-ok 5 - chat status line: limits when the status carries them, no problems, and refusals
-  ---
-  duration_ms: 847.929653
-  type: 'test'
-  ...
-# Subtest: chat status line: a project with no repository link reads no library status
-ok 6 - chat status line: a project with no repository link reads no library status
-  ---
-  duration_ms: 635.512979
-  type: 'test'
-  ...
-# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
-ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
-  ---
-  duration_ms: 645.427688
-  type: 'test'
-  ...
-# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
-ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
-  ---
-  duration_ms: 672.272209
-  type: 'test'
-  ...
-# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
-ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
-  ---
-  duration_ms: 629.043251
-  type: 'test'
-  ...
-1..9
-# tests 9
-# suites 0
-# pass 8
-# fail 1
-# cancelled 0
-# skipped 0
-# todo 0
-# duration_ms 6169.954716

agents/fethry/work/queue-225/evidence/mutants-final/M2-http-links.tap

@@ -1,204 +0,0 @@
-TAP version 13
-# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
-not ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
-  ---
-  duration_ms: 582.248796
-  type: 'test'
-  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M2-http-links/packages/webui/tests/chat-replies-browser.test.mjs:81:1'
-  failureType: 'testCodeFailure'
-  error: |-
-    Expected values to be strictly deep-equal:
-    + actual - expected
-    ... Skipped lines
-
-      [
-        {
-          agent: null,
-          badge: 'canon',
-          changed: false,
-    ...
-          changed: false,
-    +     href: 'http://example.invalid/plain',
-    -     href: null,
-          quote: 'plain http',
-          ref: 'http://example.invalid/plain',
-    +     rel: 'noopener noreferrer'
-    -     rel: null
-        },
-        {
-          agent: null,
-          badge: 'web',
-          changed: false,
-    +     href: 'javascript:window.injected=2',
-    -     href: null,
-          quote: 'script',
-          ref: 'javascript:window.injected=2',
-    +     rel: 'noopener noreferrer'
-    -     rel: null
-        }
-      ]
-
-  code: 'ERR_ASSERTION'
-  name: 'AssertionError'
-  expected:
-    0:
-      badge: 'canon'
-      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
-      href: ~
-      rel: ~
-      quote: 'her grey eyes'
-      agent: ~
-      changed: false
-    1:
-      badge: 'playground'
-      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
-      href: ~
-      rel: ~
-      quote: 'a storm'
-      agent: ~
-      changed: true
-    2:
-      badge: 'supporting'
-      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
-      href: ~
-      rel: ~
-      quote: 'green eyes'
-      agent: 'agent-written: acme/scribe'
-      changed: false
-    3:
-      badge: 'web'
-      ref: 'https://example.invalid/tides'
-      href: 'https://example.invalid/tides'
-      rel: 'noopener noreferrer'
-      quote: 'spring tides'
-      agent: ~
-      changed: false
-    4:
-      badge: 'web'
-      ref: 'http://example.invalid/plain'
-      href: ~
-      rel: ~
-      quote: 'plain http'
-      agent: ~
-      changed: false
-    5:
-      badge: 'web'
-      ref: 'javascript:window.injected=2'
-      href: ~
-      rel: ~
-      quote: 'script'
-      agent: ~
-      changed: false
-  actual:
-    0:
-      badge: 'canon'
-      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
-      href: ~
-      rel: ~
-      quote: 'her grey eyes'
-      agent: ~
-      changed: false
-    1:
-      badge: 'playground'
-      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
-      href: ~
-      rel: ~
-      quote: 'a storm'
-      agent: ~
-      changed: true
-    2:
-      badge: 'supporting'
-      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
-      href: ~
-      rel: ~
-      quote: 'green eyes'
-      agent: 'agent-written: acme/scribe'
-      changed: false
-    3:
-      badge: 'web'
-      ref: 'https://example.invalid/tides'
-      href: 'https://example.invalid/tides'
-      rel: 'noopener noreferrer'
-      quote: 'spring tides'
-      agent: ~
-      changed: false
-    4:
-      badge: 'web'
-      ref: 'http://example.invalid/plain'
-      href: 'http://example.invalid/plain'
-      rel: 'noopener noreferrer'
-      quote: 'plain http'
-      agent: ~
-      changed: false
-    5:
-      badge: 'web'
-      ref: 'javascript:window.injected=2'
-      href: 'javascript:window.injected=2'
-      rel: 'noopener noreferrer'
-      quote: 'script'
-      agent: ~
-      changed: false
-  operator: 'deepStrictEqual'
-  stack: |-
-    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M2-http-links/packages/webui/tests/chat-replies-browser.test.mjs:90:10)
-    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
-    async Test.run (node:internal/test_runner/test:1409:7)
-    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
-  ...
-# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
-ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
-  ---
-  duration_ms: 640.769563
-  type: 'test'
-  ...
-# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
-ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
-  ---
-  duration_ms: 572.506418
-  type: 'test'
-  ...
-# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
-ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
-  ---
-  duration_ms: 519.031091
-  type: 'test'
-  ...
-# Subtest: chat status line: limits when the status carries them, no problems, and refusals
-ok 5 - chat status line: limits when the status carries them, no problems, and refusals
-  ---
-  duration_ms: 743.513043
-  type: 'test'
-  ...
-# Subtest: chat status line: a project with no repository link reads no library status
-ok 6 - chat status line: a project with no repository link reads no library status
-  ---
-  duration_ms: 676.282756
-  type: 'test'
-  ...
-# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
-ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
-  ---
-  duration_ms: 595.166769
-  type: 'test'
-  ...
-# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
-ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
-  ---
-  duration_ms: 626.475981
-  type: 'test'
-  ...
-# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
-ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
-  ---
-  duration_ms: 596.828198
-  type: 'test'
-  ...
-1..9
-# tests 9
-# suites 0
-# pass 8
-# fail 1
-# cancelled 0
-# skipped 0
-# todo 0
-# duration_ms 5658.889854

agents/fethry/work/queue-225/evidence/mutants-final/M3-missing-file.tap

@@ -1,81 +0,0 @@
-TAP version 13
-# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
-ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
-  ---
-  duration_ms: 639.027823
-  type: 'test'
-  ...
-# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
-ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
-  ---
-  duration_ms: 693.772757
-  type: 'test'
-  ...
-# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
-ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
-  ---
-  duration_ms: 683.094789
-  type: 'test'
-  ...
-# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
-ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
-  ---
-  duration_ms: 637.029355
-  type: 'test'
-  ...
-# Subtest: chat status line: limits when the status carries them, no problems, and refusals
-ok 5 - chat status line: limits when the status carries them, no problems, and refusals
-  ---
-  duration_ms: 772.100011
-  type: 'test'
-  ...
-# Subtest: chat status line: a project with no repository link reads no library status
-ok 6 - chat status line: a project with no repository link reads no library status
-  ---
-  duration_ms: 599.342035
-  type: 'test'
-  ...
-# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
-ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
-  ---
-  duration_ms: 574.320042
-  type: 'test'
-  ...
-# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
-not ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
-  ---
-  duration_ms: 621.466015
-  type: 'test'
-  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M3-missing-file/packages/webui/tests/chat-replies-browser.test.mjs:184:1'
-  failureType: 'testCodeFailure'
-  error: |-
-    Expected values to be strictly equal:
-
-    1 !== 0
-
-  code: 'ERR_ASSERTION'
-  name: 'AssertionError'
-  expected: 0
-  actual: 1
-  operator: 'strictEqual'
-  stack: |-
-    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M3-missing-file/packages/webui/tests/chat-replies-browser.test.mjs:196:10)
-    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
-    async Test.run (node:internal/test_runner/test:1409:7)
-    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
-  ...
-# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
-ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
-  ---
-  duration_ms: 590.165121
-  type: 'test'
-  ...
-1..9
-# tests 9
-# suites 0
-# pass 8
-# fail 1
-# cancelled 0
-# skipped 0
-# todo 0
-# duration_ms 5921.651346

agents/fethry/work/queue-225/evidence/mutants-final/M3-wrong-commit.tap

@@ -1,81 +0,0 @@
-TAP version 13
-# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
-ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
-  ---
-  duration_ms: 704.141588
-  type: 'test'
-  ...
-# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
-ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
-  ---
-  duration_ms: 816.229452
-  type: 'test'
-  ...
-# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
-ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
-  ---
-  duration_ms: 697.826745
-  type: 'test'
-  ...
-# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
-ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
-  ---
-  duration_ms: 638.579753
-  type: 'test'
-  ...
-# Subtest: chat status line: limits when the status carries them, no problems, and refusals
-ok 5 - chat status line: limits when the status carries them, no problems, and refusals
-  ---
-  duration_ms: 850.914117
-  type: 'test'
-  ...
-# Subtest: chat status line: a project with no repository link reads no library status
-ok 6 - chat status line: a project with no repository link reads no library status
-  ---
-  duration_ms: 634.004327
-  type: 'test'
-  ...
-# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
-ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
-  ---
-  duration_ms: 585.469632
-  type: 'test'
-  ...
-# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
-not ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
-  ---
-  duration_ms: 673.386968
-  type: 'test'
-  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M3-wrong-commit/packages/webui/tests/chat-replies-browser.test.mjs:184:1'
-  failureType: 'testCodeFailure'
-  error: |-
-    Expected values to be strictly equal:
-
-    1 !== 0
-
-  code: 'ERR_ASSERTION'
-  name: 'AssertionError'
-  expected: 0
-  actual: 1
-  operator: 'strictEqual'
-  stack: |-
-    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M3-wrong-commit/packages/webui/tests/chat-replies-browser.test.mjs:196:10)
-    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
-    async Test.run (node:internal/test_runner/test:1409:7)
-    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
-  ...
-# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
-ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
-  ---
-  duration_ms: 579.53998
-  type: 'test'
-  ...
-1..9
-# tests 9
-# suites 0
-# pass 8
-# fail 1
-# cancelled 0
-# skipped 0
-# todo 0
-# duration_ms 6292.579267

agents/fethry/work/queue-225/evidence/mutants-final/M4-fallback.tap

@@ -1,102 +0,0 @@
-TAP version 13
-# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
-ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
-  ---
-  duration_ms: 683.334532
-  type: 'test'
-  ...
-# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
-ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
-  ---
-  duration_ms: 686.685624
-  type: 'test'
-  ...
-# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
-ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
-  ---
-  duration_ms: 612.757087
-  type: 'test'
-  ...
-# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
-ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
-  ---
-  duration_ms: 584.651483
-  type: 'test'
-  ...
-# Subtest: chat status line: limits when the status carries them, no problems, and refusals
-not ok 5 - chat status line: limits when the status carries them, no problems, and refusals
-  ---
-  duration_ms: 637.405759
-  type: 'test'
-  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M4-fallback/packages/webui/tests/chat-replies-browser.test.mjs:152:1'
-  failureType: 'testCodeFailure'
-  error: |-
-    Expected values to be strictly equal:
-    + actual - expected
-
-    + 'Library at ccccccc · fetched 5 min ago · citations required, up to 4 per reply · no problems'
-    - 'Library at ccccccc · fetched 5 min ago · citations required, up to 4 per reply · limits fell back: citationsPerReply · no problems'
-
-  code: 'ERR_ASSERTION'
-  name: 'AssertionError'
-  expected: 'Library at ccccccc · fetched 5 min ago · citations required, up to 4 per reply · limits fell back: citationsPerReply · no problems'
-  actual: 'Library at ccccccc · fetched 5 min ago · citations required, up to 4 per reply · no problems'
-  operator: 'strictEqual'
-  stack: |-
-    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M4-fallback/packages/webui/tests/chat-replies-browser.test.mjs:156:10)
-    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
-    async Test.run (node:internal/test_runner/test:1409:7)
-    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
-  ...
-# Subtest: chat status line: a project with no repository link reads no library status
-ok 6 - chat status line: a project with no repository link reads no library status
-  ---
-  duration_ms: 626.790802
-  type: 'test'
-  ...
-# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
-not ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
-  ---
-  duration_ms: 643.680732
-  type: 'test'
-  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M4-fallback/packages/webui/tests/chat-replies-browser.test.mjs:173:1'
-  failureType: 'testCodeFailure'
-  error: |-
-    Expected values to be strictly equal:
-    + actual - expected
-
-    + 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · reply-limits-unreadable · no problems'
-    - 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · reply-limits-unreadable · no problems'
-
-  code: 'ERR_ASSERTION'
-  name: 'AssertionError'
-  expected: 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · reply-limits-unreadable · no problems'
-  actual: 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · reply-limits-unreadable · no problems'
-  operator: 'strictEqual'
-  stack: |-
-    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M4-fallback/packages/webui/tests/chat-replies-browser.test.mjs:179:10)
-    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
-    async Test.run (node:internal/test_runner/test:1409:7)
-    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
-  ...
-# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
-ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
-  ---
-  duration_ms: 645.032205
-  type: 'test'
-  ...
-# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
-ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
-  ---
-  duration_ms: 616.242947
-  type: 'test'
-  ...
-1..9
-# tests 9
-# suites 0
-# pass 7
-# fail 2
-# cancelled 0
-# skipped 0
-# todo 0
-# duration_ms 5845.226677

agents/fethry/work/queue-225/evidence/mutants-final/M4-problem.tap

@@ -1,83 +0,0 @@
-TAP version 13
-# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
-ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
-  ---
-  duration_ms: 663.005514
-  type: 'test'
-  ...
-# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
-ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
-  ---
-  duration_ms: 662.360161
-  type: 'test'
-  ...
-# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
-ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
-  ---
-  duration_ms: 620.68694
-  type: 'test'
-  ...
-# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
-ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
-  ---
-  duration_ms: 744.825035
-  type: 'test'
-  ...
-# Subtest: chat status line: limits when the status carries them, no problems, and refusals
-ok 5 - chat status line: limits when the status carries them, no problems, and refusals
-  ---
-  duration_ms: 826.418848
-  type: 'test'
-  ...
-# Subtest: chat status line: a project with no repository link reads no library status
-ok 6 - chat status line: a project with no repository link reads no library status
-  ---
-  duration_ms: 549.365993
-  type: 'test'
-  ...
-# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
-not ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
-  ---
-  duration_ms: 589.776762
-  type: 'test'
-  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M4-problem/packages/webui/tests/chat-replies-browser.test.mjs:173:1'
-  failureType: 'testCodeFailure'
-  error: |-
-    Expected values to be strictly equal:
-    + actual - expected
-
-    + 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · no problems'
-    - 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · reply-limits-unreadable · no problems'
-
-  code: 'ERR_ASSERTION'
-  name: 'AssertionError'
-  expected: 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · reply-limits-unreadable · no problems'
-  actual: 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · no problems'
-  operator: 'strictEqual'
-  stack: |-
-    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M4-problem/packages/webui/tests/chat-replies-browser.test.mjs:179:10)
-    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
-    async Test.run (node:internal/test_runner/test:1409:7)
-    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
-  ...
-# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
-ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
-  ---
-  duration_ms: 590.919434
-  type: 'test'
-  ...
-# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
-ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
-  ---
-  duration_ms: 545.326381
-  type: 'test'
-  ...
-1..9
-# tests 9
-# suites 0
-# pass 8
-# fail 1
-# cancelled 0
-# skipped 0
-# todo 0
-# duration_ms 5914.325706

agents/fethry/work/queue-225/evidence/mutants-final/M5-commit-input.tap

@@ -1,105 +0,0 @@
-TAP version 13
-# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
-ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
-  ---
-  duration_ms: 16.128237
-  type: 'test'
-  ...
-# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
-ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
-  ---
-  duration_ms: 5.987607
-  type: 'test'
-  ...
-# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
-not ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
-  ---
-  duration_ms: 4.805637
-  type: 'test'
-  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M5-commit-input/packages/webui/tests/library-routes.test.mjs:64:1'
-  failureType: 'testCodeFailure'
-  error: |-
-    {"project":"books","commit":"abc"}
-
-    200 !== 400
-
-  code: 'ERR_ASSERTION'
-  name: 'AssertionError'
-  expected: 400
-  actual: 200
-  operator: 'strictEqual'
-  stack: |-
-    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M5-commit-input/packages/webui/tests/library-routes.test.mjs:69:12)
-    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
-    async Test.run (node:internal/test_runner/test:1409:7)
-    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
-  ...
-# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
-ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
-  ---
-  duration_ms: 6.383811
-  type: 'test'
-  ...
-# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
-ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
-  ---
-  duration_ms: 4.000988
-  type: 'test'
-  ...
-# Subtest: the status read takes one project query and answers the bus result for that project
-ok 6 - the status read takes one project query and answers the bus result for that project
-  ---
-  duration_ms: 2.487122
-  type: 'test'
-  ...
-# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
-ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
-  ---
-  duration_ms: 4.9292
-  type: 'test'
-  ...
-# Subtest: the status read needs no send; a read-only Console still has no revert
-ok 8 - the status read needs no send; a read-only Console still has no revert
-  ---
-  duration_ms: 1.266317
-  type: 'test'
-  ...
-# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
-ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
-  ---
-  duration_ms: 0.443059
-  type: 'test'
-  ...
-# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
-ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
-  ---
-  duration_ms: 1.048018
-  type: 'test'
-  ...
-# Subtest: a revert receipt for another project is unknown and is never retried
-ok 11 - a revert receipt for another project is unknown and is never retried
-  ---
-  duration_ms: 0.864934
-  type: 'test'
-  ...
-# Subtest: a granted-user HTTP session cannot reach owner library callbacks
-ok 12 - a granted-user HTTP session cannot reach owner library callbacks
-  ---
-  duration_ms: 1.064626
-  type: 'test'
-  ...
-# Subtest: a configured revert callback remains unreachable when send is off
-ok 13 - a configured revert callback remains unreachable when send is off
-  ---
-  duration_ms: 0.803048
-  type: 'test'
-  ...
-1..13
-# tests 13
-# suites 0
-# pass 12
-# fail 1
-# cancelled 0
-# skipped 0
-# todo 0
-# duration_ms 153.3549

agents/fethry/work/queue-225/evidence/mutants-final/M5-fetch-metadata.tap

@@ -1,105 +0,0 @@
-TAP version 13
-# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
-ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
-  ---
-  duration_ms: 20.271342
-  type: 'test'
-  ...
-# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
-not ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
-  ---
-  duration_ms: 5.700968
-  type: 'test'
-  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M5-fetch-metadata/packages/webui/tests/library-routes.test.mjs:48:1'
-  failureType: 'testCodeFailure'
-  error: |-
-    sec-fetch-site
-
-    200 !== 403
-
-  code: 'ERR_ASSERTION'
-  name: 'AssertionError'
-  expected: 403
-  actual: 200
-  operator: 'strictEqual'
-  stack: |-
-    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M5-fetch-metadata/packages/webui/tests/library-routes.test.mjs:57:12)
-    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
-    async Test.run (node:internal/test_runner/test:1409:7)
-    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
-  ...
-# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
-ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
-  ---
-  duration_ms: 6.427935
-  type: 'test'
-  ...
-# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
-ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
-  ---
-  duration_ms: 7.39929
-  type: 'test'
-  ...
-# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
-ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
-  ---
-  duration_ms: 5.425467
-  type: 'test'
-  ...
-# Subtest: the status read takes one project query and answers the bus result for that project
-ok 6 - the status read takes one project query and answers the bus result for that project
-  ---
-  duration_ms: 2.634037
-  type: 'test'
-  ...
-# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
-ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
-  ---
-  duration_ms: 5.727409
-  type: 'test'
-  ...
-# Subtest: the status read needs no send; a read-only Console still has no revert
-ok 8 - the status read needs no send; a read-only Console still has no revert
-  ---
-  duration_ms: 1.317954
-  type: 'test'
-  ...
-# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
-ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
-  ---
-  duration_ms: 0.583799
-  type: 'test'
-  ...
-# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
-ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
-  ---
-  duration_ms: 1.207375
-  type: 'test'
-  ...
-# Subtest: a revert receipt for another project is unknown and is never retried
-ok 11 - a revert receipt for another project is unknown and is never retried
-  ---
-  duration_ms: 0.956772
-  type: 'test'
-  ...
-# Subtest: a granted-user HTTP session cannot reach owner library callbacks
-ok 12 - a granted-user HTTP session cannot reach owner library callbacks
-  ---
-  duration_ms: 1.147745
-  type: 'test'
-  ...
-# Subtest: a configured revert callback remains unreachable when send is off
-ok 13 - a configured revert callback remains unreachable when send is off
-  ---
-  duration_ms: 0.819337
-  type: 'test'
-  ...
-1..13
-# tests 13
-# suites 0
-# pass 12
-# fail 1
-# cancelled 0
-# skipped 0
-# todo 0
-# duration_ms 166.134058

agents/fethry/work/queue-225/evidence/mutants-final/M5-origin.tap

@@ -1,105 +0,0 @@
-TAP version 13
-# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
-ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
-  ---
-  duration_ms: 16.249491
-  type: 'test'
-  ...
-# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
-not ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
-  ---
-  duration_ms: 5.463985
-  type: 'test'
-  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M5-origin/packages/webui/tests/library-routes.test.mjs:48:1'
-  failureType: 'testCodeFailure'
-  error: |-
-    origin
-
-    200 !== 403
-
-  code: 'ERR_ASSERTION'
-  name: 'AssertionError'
-  expected: 403
-  actual: 200
-  operator: 'strictEqual'
-  stack: |-
-    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M5-origin/packages/webui/tests/library-routes.test.mjs:57:12)
-    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
-    async Test.run (node:internal/test_runner/test:1409:7)
-    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
-  ...
-# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
-ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
-  ---
-  duration_ms: 6.035196
-  type: 'test'
-  ...
-# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
-ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
-  ---
-  duration_ms: 5.621744
-  type: 'test'
-  ...
-# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
-ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
-  ---
-  duration_ms: 4.928333
-  type: 'test'
-  ...
-# Subtest: the status read takes one project query and answers the bus result for that project
-ok 6 - the status read takes one project query and answers the bus result for that project
-  ---
-  duration_ms: 2.455282
-  type: 'test'
-  ...
-# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
-ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
-  ---
-  duration_ms: 4.838747
-  type: 'test'
-  ...
-# Subtest: the status read needs no send; a read-only Console still has no revert
-ok 8 - the status read needs no send; a read-only Console still has no revert
-  ---
-  duration_ms: 1.235209
-  type: 'test'
-  ...
-# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
-ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
-  ---
-  duration_ms: 0.436399
-  type: 'test'
-  ...
-# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
-ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
-  ---
-  duration_ms: 1.100574
-  type: 'test'
-  ...
-# Subtest: a revert receipt for another project is unknown and is never retried
-ok 11 - a revert receipt for another project is unknown and is never retried
-  ---
-  duration_ms: 0.943474
-  type: 'test'
-  ...
-# Subtest: a granted-user HTTP session cannot reach owner library callbacks
-ok 12 - a granted-user HTTP session cannot reach owner library callbacks
-  ---
-  duration_ms: 1.176957
-  type: 'test'
-  ...
-# Subtest: a configured revert callback remains unreachable when send is off
-ok 13 - a configured revert callback remains unreachable when send is off
-  ---
-  duration_ms: 0.861834
-  type: 'test'
-  ...
-1..13
-# tests 13
-# suites 0
-# pass 12
-# fail 1
-# cancelled 0
-# skipped 0
-# todo 0
-# duration_ms 150.969641

agents/fethry/work/queue-225/evidence/mutants-final/M5-project-receipt.tap

@@ -1,105 +0,0 @@
-TAP version 13
-# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
-ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
-  ---
-  duration_ms: 18.918199
-  type: 'test'
-  ...
-# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
-ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
-  ---
-  duration_ms: 7.26916
-  type: 'test'
-  ...
-# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
-ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
-  ---
-  duration_ms: 5.352342
-  type: 'test'
-  ...
-# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
-ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
-  ---
-  duration_ms: 6.134713
-  type: 'test'
-  ...
-# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
-ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
-  ---
-  duration_ms: 4.288914
-  type: 'test'
-  ...
-# Subtest: the status read takes one project query and answers the bus result for that project
-ok 6 - the status read takes one project query and answers the bus result for that project
-  ---
-  duration_ms: 2.745385
-  type: 'test'
-  ...
-# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
-ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
-  ---
-  duration_ms: 5.739155
-  type: 'test'
-  ...
-# Subtest: the status read needs no send; a read-only Console still has no revert
-ok 8 - the status read needs no send; a read-only Console still has no revert
-  ---
-  duration_ms: 1.264793
-  type: 'test'
-  ...
-# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
-ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
-  ---
-  duration_ms: 0.471965
-  type: 'test'
-  ...
-# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
-ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
-  ---
-  duration_ms: 1.045204
-  type: 'test'
-  ...
-# Subtest: a revert receipt for another project is unknown and is never retried
-not ok 11 - a revert receipt for another project is unknown and is never retried
-  ---
-  duration_ms: 1.531252
-  type: 'test'
-  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M5-project-receipt/packages/webui/tests/library-routes.test.mjs:145:1'
-  failureType: 'testCodeFailure'
-  error: |-
-    Expected values to be strictly equal:
-
-    200 !== 503
-
-  code: 'ERR_ASSERTION'
-  name: 'AssertionError'
-  expected: 503
-  actual: 200
-  operator: 'strictEqual'
-  stack: |-
-    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M5-project-receipt/packages/webui/tests/library-routes.test.mjs:148:10)
-    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
-    async Test.run (node:internal/test_runner/test:1409:7)
-    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
-  ...
-# Subtest: a granted-user HTTP session cannot reach owner library callbacks
-ok 12 - a granted-user HTTP session cannot reach owner library callbacks
-  ---
-  duration_ms: 1.60161
-  type: 'test'
-  ...
-# Subtest: a configured revert callback remains unreachable when send is off
-ok 13 - a configured revert callback remains unreachable when send is off
-  ---
-  duration_ms: 0.816068
-  type: 'test'
-  ...
-1..13
-# tests 13
-# suites 0
-# pass 12
-# fail 1
-# cancelled 0
-# skipped 0
-# todo 0
-# duration_ms 171.289003

agents/fethry/work/queue-225/evidence/mutants-final/M5-send.tap

@@ -1,106 +0,0 @@
-TAP version 13
-# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
-ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
-  ---
-  duration_ms: 18.930067
-  type: 'test'
-  ...
-# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
-ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
-  ---
-  duration_ms: 7.470645
-  type: 'test'
-  ...
-# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
-ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
-  ---
-  duration_ms: 6.646929
-  type: 'test'
-  ...
-# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
-ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
-  ---
-  duration_ms: 6.637697
-  type: 'test'
-  ...
-# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
-ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
-  ---
-  duration_ms: 4.174441
-  type: 'test'
-  ...
-# Subtest: the status read takes one project query and answers the bus result for that project
-ok 6 - the status read takes one project query and answers the bus result for that project
-  ---
-  duration_ms: 2.513131
-  type: 'test'
-  ...
-# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
-ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
-  ---
-  duration_ms: 5.145692
-  type: 'test'
-  ...
-# Subtest: the status read needs no send; a read-only Console still has no revert
-ok 8 - the status read needs no send; a read-only Console still has no revert
-  ---
-  duration_ms: 1.182362
-  type: 'test'
-  ...
-# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
-ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
-  ---
-  duration_ms: 0.471806
-  type: 'test'
-  ...
-# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
-ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
-  ---
-  duration_ms: 1.064814
-  type: 'test'
-  ...
-# Subtest: a revert receipt for another project is unknown and is never retried
-ok 11 - a revert receipt for another project is unknown and is never retried
-  ---
-  duration_ms: 0.910004
-  type: 'test'
-  ...
-# Subtest: a granted-user HTTP session cannot reach owner library callbacks
-ok 12 - a granted-user HTTP session cannot reach owner library callbacks
-  ---
-  duration_ms: 1.16191
-  type: 'test'
-  ...
-# 2026-10-23T19:28:51.488Z library-revert user="jason" project="books" commit="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" commit=bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb
-# Subtest: a configured revert callback remains unreachable when send is off
-not ok 13 - a configured revert callback remains unreachable when send is off
-  ---
-  duration_ms: 1.624909
-  type: 'test'
-  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M5-send/packages/webui/tests/library-routes.test.mjs:175:1'
-  failureType: 'testCodeFailure'
-  error: |-
-    Expected values to be strictly equal:
-
-    200 !== 403
-
-  code: 'ERR_ASSERTION'
-  name: 'AssertionError'
-  expected: 403
-  actual: 200
-  operator: 'strictEqual'
-  stack: |-
-    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M5-send/packages/webui/tests/library-routes.test.mjs:181:10)
-    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
-    async Test.run (node:internal/test_runner/test:1409:7)
-    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
-  ...
-1..13
-# tests 13
-# suites 0
-# pass 12
-# fail 1
-# cancelled 0
-# skipped 0
-# todo 0
-# duration_ms 165.919088

agents/fethry/work/queue-225/evidence/mutants-final/M6-duplicate-call.tap

@@ -1,177 +0,0 @@
-TAP version 13
-# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
-not ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
-  ---
-  duration_ms: 17.922489
-  type: 'test'
-  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M6-duplicate-call/packages/webui/tests/library-routes.test.mjs:40:1'
-  failureType: 'testCodeFailure'
-  error: |-
-    Expected values to be strictly deep-equal:
-    + actual - expected
-
-      [
-        {
-          commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa',
-          project: 'books'
-        },
-    +   {
-    +     commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa',
-    +     project: 'books'
-    +   }
-      ]
-
-  code: 'ERR_ASSERTION'
-  name: 'AssertionError'
-  expected:
-    0:
-      project: 'books'
-      commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
-  actual:
-    0:
-      project: 'books'
-      commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
-    1:
-      project: 'books'
-      commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
-  operator: 'deepStrictEqual'
-  stack: |-
-    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M6-duplicate-call/packages/webui/tests/library-routes.test.mjs:43:10)
-    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
-    async Test.run (node:internal/test_runner/test:1409:7)
-    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
-  ...
-# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
-ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
-  ---
-  duration_ms: 7.053366
-  type: 'test'
-  ...
-# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
-ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
-  ---
-  duration_ms: 5.869486
-  type: 'test'
-  ...
-# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
-ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
-  ---
-  duration_ms: 6.852952
-  type: 'test'
-  ...
-# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
-not ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
-  ---
-  duration_ms: 2.870452
-  type: 'test'
-  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M6-duplicate-call/packages/webui/tests/library-routes.test.mjs:88:1'
-  failureType: 'testCodeFailure'
-  error: |-
-    Expected values to be strictly equal:
-
-    2 !== 1
-
-  code: 'ERR_ASSERTION'
-  name: 'AssertionError'
-  expected: 1
-  actual: 2
-  operator: 'strictEqual'
-  stack: |-
-    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M6-duplicate-call/packages/webui/tests/library-routes.test.mjs:96:12)
-    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
-    async Test.run (node:internal/test_runner/test:1409:7)
-    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
-  ...
-# Subtest: the status read takes one project query and answers the bus result for that project
-ok 6 - the status read takes one project query and answers the bus result for that project
-  ---
-  duration_ms: 2.904694
-  type: 'test'
-  ...
-# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
-ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
-  ---
-  duration_ms: 5.7962
-  type: 'test'
-  ...
-# Subtest: the status read needs no send; a read-only Console still has no revert
-ok 8 - the status read needs no send; a read-only Console still has no revert
-  ---
-  duration_ms: 1.518332
-  type: 'test'
-  ...
-# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
-ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
-  ---
-  duration_ms: 0.563294
-  type: 'test'
-  ...
-# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
-ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
-  ---
-  duration_ms: 1.17446
-  type: 'test'
-  ...
-# Subtest: a revert receipt for another project is unknown and is never retried
-not ok 11 - a revert receipt for another project is unknown and is never retried
-  ---
-  duration_ms: 1.258633
-  type: 'test'
-  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M6-duplicate-call/packages/webui/tests/library-routes.test.mjs:145:1'
-  failureType: 'testCodeFailure'
-  error: |-
-    Expected values to be strictly deep-equal:
-    + actual - expected
-
-      [
-        {
-          commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa',
-          project: 'books'
-        },
-    +   {
-    +     commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa',
-    +     project: 'books'
-    +   }
-      ]
-
-  code: 'ERR_ASSERTION'
-  name: 'AssertionError'
-  expected:
-    0:
-      project: 'books'
-      commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
-  actual:
-    0:
-      project: 'books'
-      commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
-    1:
-      project: 'books'
-      commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
-  operator: 'deepStrictEqual'
-  stack: |-
-    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M6-duplicate-call/packages/webui/tests/library-routes.test.mjs:151:10)
-    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
-    async Test.run (node:internal/test_runner/test:1409:7)
-    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
-  ...
-# Subtest: a granted-user HTTP session cannot reach owner library callbacks
-ok 12 - a granted-user HTTP session cannot reach owner library callbacks
-  ---
-  duration_ms: 1.362877
-  type: 'test'
-  ...
-# Subtest: a configured revert callback remains unreachable when send is off
-ok 13 - a configured revert callback remains unreachable when send is off
-  ---
-  duration_ms: 0.848309
-  type: 'test'
-  ...
-1..13
-# tests 13
-# suites 0
-# pass 10
-# fail 3
-# cancelled 0
-# skipped 0
-# todo 0
-# duration_ms 169.162917

agents/fethry/work/queue-225/evidence/mutants-final/M7-user-fence.tap

@@ -1,126 +0,0 @@
-TAP version 13
-# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
-ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
-  ---
-  duration_ms: 18.215173
-  type: 'test'
-  ...
-# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
-ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
-  ---
-  duration_ms: 6.416847
-  type: 'test'
-  ...
-# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
-ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
-  ---
-  duration_ms: 5.529629
-  type: 'test'
-  ...
-# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
-ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
-  ---
-  duration_ms: 6.92431
-  type: 'test'
-  ...
-# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
-ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
-  ---
-  duration_ms: 4.588509
-  type: 'test'
-  ...
-# Subtest: the status read takes one project query and answers the bus result for that project
-ok 6 - the status read takes one project query and answers the bus result for that project
-  ---
-  duration_ms: 2.817257
-  type: 'test'
-  ...
-# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
-ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
-  ---
-  duration_ms: 6.020444
-  type: 'test'
-  ...
-# Subtest: the status read needs no send; a read-only Console still has no revert
-ok 8 - the status read needs no send; a read-only Console still has no revert
-  ---
-  duration_ms: 1.377224
-  type: 'test'
-  ...
-# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
-not ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
-  ---
-  duration_ms: 1.015984
-  type: 'test'
-  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M7-user-fence/packages/webui/tests/library-routes.test.mjs:132:1'
-  failureType: 'testCodeFailure'
-  error: |-
-    /api/library/status
-
-    true !== false
-
-  code: 'ERR_ASSERTION'
-  name: 'AssertionError'
-  expected: false
-  actual: true
-  operator: 'strictEqual'
-  stack: |-
-    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M7-user-fence/packages/webui/tests/library-routes.test.mjs:133:106)
-    Test.runInAsyncScope (node:async_hooks:226:14)
-    Test.run (node:internal/test_runner/test:1402:25)
-    Test.processPendingSubtests (node:internal/test_runner/test:974:18)
-    Test.postRun (node:internal/test_runner/test:1542:19)
-    Test.run (node:internal/test_runner/test:1467:12)
-    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
-    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
-  ...
-# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
-ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
-  ---
-  duration_ms: 1.695555
-  type: 'test'
-  ...
-# Subtest: a revert receipt for another project is unknown and is never retried
-ok 11 - a revert receipt for another project is unknown and is never retried
-  ---
-  duration_ms: 1.378325
-  type: 'test'
-  ...
-# Subtest: a granted-user HTTP session cannot reach owner library callbacks
-not ok 12 - a granted-user HTTP session cannot reach owner library callbacks
-  ---
-  duration_ms: 1.178045
-  type: 'test'
-  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M7-user-fence/packages/webui/tests/library-routes.test.mjs:155:1'
-  failureType: 'testCodeFailure'
-  error: |-
-    Expected values to be strictly equal:
-
-    503 !== 403
-
-  code: 'ERR_ASSERTION'
-  name: 'AssertionError'
-  expected: 403
-  actual: 503
-  operator: 'strictEqual'
-  stack: |-
-    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M7-user-fence/packages/webui/tests/library-routes.test.mjs:167:12)
-    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
-    async Test.run (node:internal/test_runner/test:1409:7)
-    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
-  ...
-# Subtest: a configured revert callback remains unreachable when send is off
-ok 13 - a configured revert callback remains unreachable when send is off
-  ---
-  duration_ms: 1.057394
-  type: 'test'
-  ...
-1..13
-# tests 13
-# suites 0
-# pass 11
-# fail 2
-# cancelled 0
-# skipped 0
-# todo 0
-# duration_ms 176.864112

agents/fethry/work/queue-225/evidence/mutants-final/summary.json

@@ -1,147 +0,0 @@
-{
-  "head": "50790127716002f97154800ecbfb968690a9d644",
-  "clear": "sage-3647",
-  "worktreeUnchanged": true,
-  "results": [
-    {
-      "mutant": "M1-badges",
-      "anchorHits": 1,
-      "restored": true,
-      "worktreeUnchanged": true,
-      "exit": 1,
-      "killed": true,
-      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
-      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M1-badges.tap"
-    },
-    {
-      "mutant": "M1-agent-label",
-      "anchorHits": 1,
-      "restored": true,
-      "worktreeUnchanged": true,
-      "exit": 1,
-      "killed": true,
-      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
-      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M1-agent-label.tap"
-    },
-    {
-      "mutant": "M2-http-links",
-      "anchorHits": 1,
-      "restored": true,
-      "worktreeUnchanged": true,
-      "exit": 1,
-      "killed": true,
-      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
-      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M2-http-links.tap"
-    },
-    {
-      "mutant": "M3-wrong-commit",
-      "anchorHits": 1,
-      "restored": true,
-      "worktreeUnchanged": true,
-      "exit": 1,
-      "killed": true,
-      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
-      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M3-wrong-commit.tap"
-    },
-    {
-      "mutant": "M3-missing-file",
-      "anchorHits": 1,
-      "restored": true,
-      "worktreeUnchanged": true,
-      "exit": 1,
-      "killed": true,
-      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
-      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M3-missing-file.tap"
-    },
-    {
-      "mutant": "M4-fallback",
-      "anchorHits": 1,
-      "restored": true,
-      "worktreeUnchanged": true,
-      "exit": 1,
-      "killed": true,
-      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
-      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M4-fallback.tap"
-    },
-    {
-      "mutant": "M4-problem",
-      "anchorHits": 1,
-      "restored": true,
-      "worktreeUnchanged": true,
-      "exit": 1,
-      "killed": true,
-      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
-      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M4-problem.tap"
-    },
-    {
-      "mutant": "M5-send",
-      "anchorHits": 1,
-      "restored": true,
-      "worktreeUnchanged": true,
-      "exit": 1,
-      "killed": true,
-      "test": "packages/webui/tests/library-routes.test.mjs",
-      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M5-send.tap"
-    },
-    {
-      "mutant": "M5-project-receipt",
-      "anchorHits": 1,
-      "restored": true,
-      "worktreeUnchanged": true,
-      "exit": 1,
-      "killed": true,
-      "test": "packages/webui/tests/library-routes.test.mjs",
-      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M5-project-receipt.tap"
-    },
-    {
-      "mutant": "M5-commit-input",
-      "anchorHits": 1,
-      "restored": true,
-      "worktreeUnchanged": true,
-      "exit": 1,
-      "killed": true,
-      "test": "packages/webui/tests/library-routes.test.mjs",
-      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M5-commit-input.tap"
-    },
-    {
-      "mutant": "M5-origin",
-      "anchorHits": 1,
-      "restored": true,
-      "worktreeUnchanged": true,
-      "exit": 1,
-      "killed": true,
-      "test": "packages/webui/tests/library-routes.test.mjs",
-      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M5-origin.tap"
-    },
-    {
-      "mutant": "M5-fetch-metadata",
-      "anchorHits": 1,
-      "restored": true,
-      "worktreeUnchanged": true,
-      "exit": 1,
-      "killed": true,
-      "test": "packages/webui/tests/library-routes.test.mjs",
-      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M5-fetch-metadata.tap"
-    },
-    {
-      "mutant": "M6-duplicate-call",
-      "anchorHits": 1,
-      "restored": true,
-      "worktreeUnchanged": true,
-      "exit": 1,
-      "killed": true,
-      "test": "packages/webui/tests/library-routes.test.mjs",
-      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M6-duplicate-call.tap"
-    },
-    {
-      "mutant": "M7-user-fence",
-      "anchorHits": 1,
-      "restored": true,
-      "worktreeUnchanged": true,
-      "exit": 1,
-      "killed": true,
-      "test": "packages/webui/tests/library-routes.test.mjs",
-      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M7-user-fence.tap"
-    }
-  ]
-}

agents/fethry/work/queue-225/evidence/raw-log-provenance.json

@@ -1,155 +0,0 @@
-{
-  "rawRoot": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2",
-  "logs": [
-    {
-      "path": "evidence/browser-final.tap",
-      "rawSha256": "4e6d5874786aa5d407b59d0b701652d419d0fecda5402ede40f52b313def12b0",
-      "normalization": "trailing whitespace removed from display copy"
-    },
-    {
-      "path": "evidence/browser-final2.tap",
-      "rawSha256": "194b3150e59868aab023d9ccfc75c69b82e43afba38c1b12e87a1fb3d68fe821",
-      "normalization": "trailing whitespace removed from display copy"
-    },
-    {
-      "path": "evidence/browser-green.tap",
-      "rawSha256": "030d7a5c9af70d4a7ade177906fb971b29fa4cf1fc5efd39f35643ed1969cd01",
-      "normalization": "trailing whitespace removed from display copy"
-    },
-    {
-      "path": "evidence/browser-red.tap",
-      "rawSha256": "db00bee89b4353efe7d324b17417347b30964f79ad4469a5dc98c6d125691f55",
-      "normalization": "trailing whitespace removed from display copy"
-    },
-    {
-      "path": "evidence/channel-proof.tap",
-      "rawSha256": "cb7c0398af2a2a0e7cae24ee2c8167601cbf7e3f9cf3ed7479b2a6ef65f5da8a",
-      "normalization": "trailing whitespace removed from display copy"
-    },
-    {
-      "path": "evidence/library-full.tap",
-      "rawSha256": "5447e3fce497a0dfb03ddd3eb2795dc2a179554f794e4c37458219c70736a645",
-      "normalization": "trailing whitespace removed from display copy"
-    },
-    {
-      "path": "evidence/mapping-red.tap",
-      "rawSha256": "8ca7310e46df2d35fa96e3aba378721ad388dce41f003ee133b684eeb7eaf245",
-      "normalization": "trailing whitespace removed from display copy"
-    },
-    {
-      "path": "evidence/mutants-attempt1/M1-agent-label.tap",
-      "rawSha256": "db7ab1c64bc05b719e5164ed4ce1dd8b79ad53309d9b8e3e1ca0cc8867bca70f",
-      "normalization": "trailing whitespace removed from display copy"
-    },
-    {
-      "path": "evidence/mutants-attempt1/M1-badges.tap",
-      "rawSha256": "08351b9061351812008ebd7067a9aed24a9e5386d8f6284fb44ae0f59c8f2eca",
-      "normalization": "trailing whitespace removed from display copy"
-    },
-    {
-      "path": "evidence/mutants-attempt1/M2-http-links.tap",
-      "rawSha256": "69921707c219d19fb2c33a3995268b6442d783ec702050b32f78d8d2db6fb581",
-      "normalization": "trailing whitespace removed from display copy"
-    },
-    {
-      "path": "evidence/mutants-attempt1/M3-wrong-commit.tap",
-      "rawSha256": "fe9fb027efae26799e2dfac539e0986402cefe806ca31479f52420e67a8df423",
-      "normalization": "trailing whitespace removed from display copy"
-    },
-    {
-      "path": "evidence/mutants-final/M1-agent-label.tap",
-      "rawSha256": "afbab60cbc12348c4d0c4be1a8c4590dd157c71f9ffc7375bbde82facb9868bb",
-      "normalization": "trailing whitespace removed from display copy"
-    },
-    {
-      "path": "evidence/mutants-final/M1-badges.tap",
-      "rawSha256": "3bb9fb9dcf74a398934d6de48c2ca99ab2eab618fb944297b3d7db00eec0e69f",
-      "normalization": "trailing whitespace removed from display copy"
-    },
-    {
-      "path": "evidence/mutants-final/M2-http-links.tap",
-      "rawSha256": "8909921fcf602fcafa94edd19c1167a8f91ed970a3e649110e3503836690e567",
-      "normalization": "trailing whitespace removed from display copy"
-    },
-    {
-      "path": "evidence/mutants-final/M3-missing-file.tap",
-      "rawSha256": "3fd2749ea5bc4245f7d49f585b82eae60f61ed150ab4dd22e8148a1e9467c8c7",
-      "normalization": "trailing whitespace removed from display copy"
-    },
-    {
-      "path": "evidence/mutants-final/M3-wrong-commit.tap",
-      "rawSha256": "85696c155f0a2844ee903c8fb38cab0a0fb6b0610c8b9ee8aa77a08cb6012ca2",
-      "normalization": "trailing whitespace removed from display copy"
-    },
-    {
-      "path": "evidence/mutants-final/M4-fallback.tap",
-      "rawSha256": "6f59f2845e0130d4d2fe1cb4aa7a435502f6043e11ed4efd67339c12e986103a",
-      "normalization": "trailing whitespace removed from display copy"
-    },
-    {
-      "path": "evidence/mutants-final/M4-problem.tap",
-      "rawSha256": "61ab08b823eb08cbb9c9eeaac82b297ea5d1272bb5dc64e9598734688b55eb80",
-      "normalization": "trailing whitespace removed from display copy"
-    },
-    {
-      "path": "evidence/mutants-final/M5-commit-input.tap",
-      "rawSha256": "b703ee5ca47e5c64749aab3edfb5ae2e085367921ffa75337f4f0e5c7b3dc404",
-      "normalization": "trailing whitespace removed from display copy"
-    },
-    {
-      "path": "evidence/mutants-final/M5-fetch-metadata.tap",
-      "rawSha256": "6951725340e4d74764552e7e406e0fc4bafeec35172de56d13bca852b92daa1a",
-      "normalization": "trailing whitespace removed from display copy"
-    },
-    {
-      "path": "evidence/mutants-final/M5-origin.tap",
-      "rawSha256": "95fcb5a92e82fa7de2972fd8f78c4f0f6d1c5f49885123e01fb1b69c3b62ba21",
-      "normalization": "trailing whitespace removed from display copy"
-    },
-    {
-      "path": "evidence/mutants-final/M5-project-receipt.tap",
-      "rawSha256": "a86806a189ef73f61ddd88479336321964eadef0793c7b45da6573ccd3e38801",
-      "normalization": "trailing whitespace removed from display copy"
-    },
-    {
-      "path": "evidence/mutants-final/M5-send.tap",
-      "rawSha256": "4cce523356a3e2041197156412eb35088f8b6d38fcceca2d9b76b6098ad17627",
-      "normalization": "trailing whitespace removed from display copy"
-    },
-    {
-      "path": "evidence/mutants-final/M6-duplicate-call.tap",
-      "rawSha256": "6dda962389fbc7379ac7e7bc79cc24b68db00d4f9bb649ab73e75eaa87a5da00",
-      "normalization": "trailing whitespace removed from display copy"
-    },
-    {
-      "path": "evidence/mutants-final/M7-user-fence.tap",
-      "rawSha256": "abec36c65c3ece6e7d0c4dfd41eede62c9a585f07b3ed4cb3b8d05f0dbabaed3",
-      "normalization": "trailing whitespace removed from display copy"
-    },
-    {
-      "path": "evidence/render-green.tap",
-      "rawSha256": "98463ac3d1262f84758def8bbdc27c46fa7c674bb8e8c20b9c752083163d0864",
-      "normalization": "trailing whitespace removed from display copy"
-    },
-    {
-      "path": "evidence/render-red.tap",
-      "rawSha256": "03645c7a5ba0c3d285e58e1d6fd05dc58a1174b463a258b01bcf258b2141a85e",
-      "normalization": "trailing whitespace removed from display copy"
-    },
-    {
-      "path": "evidence/routes-final.tap",
-      "rawSha256": "f2b58a97c301dc9e57458d82785bd50debb2254df5d411d8e8c4e6b9c0aa00d2",
-      "normalization": "trailing whitespace removed from display copy"
-    },
-    {
-      "path": "evidence/routes-green.tap",
-      "rawSha256": "c34451a0eef5f82fe6ddcbbf370179d8e8a14e36168175bdeff5b32e2072e9d6",
-      "normalization": "trailing whitespace removed from display copy"
-    },
-    {
-      "path": "evidence/routes-red.tap",
-      "rawSha256": "5ca5bafe2465209128508e5459f4826c34d00de86d1e79671196dc4e5c57f874",
-      "normalization": "trailing whitespace removed from display copy"
-    }
-  ]
-}

agents/fethry/work/queue-225/evidence/render-green.tap

@@ -1,17 +0,0 @@
-✔ free text renders as itself with no citations (1.332106ms)
-✔ a cited reply renders its text, then each cite with the badge from the check result (0.493062ms)
-✔ a parsed body renders as its string does (0.2706ms)
-✔ without a check result a path cite has no badge, no label and is never changed (0.175324ms)
-✔ the label and the badge come from the check result only, never from a bad entry (0.171275ms)
-✔ a web cite is a link only for https (0.254363ms)
-✔ a write notice renders its fixed line (0.201038ms)
-✔ a body without the reply or notice shape is free text: the whole body, no citations (0.315846ms)
-✔ an empty citations list is a reply with no cites (0.167552ms)
-ℹ tests 9
-ℹ suites 0
-ℹ pass 9
-ℹ fail 0
-ℹ cancelled 0
-ℹ skipped 0
-ℹ todo 0
-ℹ duration_ms 70.188818

agents/fethry/work/queue-225/evidence/render-red.tap

@@ -1,17 +0,0 @@
-✔ free text renders as itself with no citations (1.211164ms)
-✔ a cited reply renders its text, then each cite with the badge from the check result (0.457937ms)
-✔ a parsed body renders as its string does (0.255138ms)
-✔ without a check result a path cite has no badge, no label and is never changed (0.189285ms)
-✔ the label and the badge come from the check result only, never from a bad entry (0.162195ms)
-✔ a web cite is a link only for https (0.231665ms)
-✔ a write notice renders its fixed line (0.167596ms)
-✔ a body without the reply or notice shape is free text: the whole body, no citations (0.283804ms)
-✔ an empty citations list is a reply with no cites (0.145774ms)
-ℹ tests 9
-ℹ suites 0
-ℹ pass 9
-ℹ fail 0
-ℹ cancelled 0
-ℹ skipped 0
-ℹ todo 0
-ℹ duration_ms 73.226696

agents/fethry/work/queue-225/evidence/routes-final.tap

@@ -1,88 +0,0 @@
-TAP version 13
-# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
-ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
-  ---
-  duration_ms: 18.873338
-  type: 'test'
-  ...
-# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
-ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
-  ---
-  duration_ms: 7.061714
-  type: 'test'
-  ...
-# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
-ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
-  ---
-  duration_ms: 6.45503
-  type: 'test'
-  ...
-# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
-ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
-  ---
-  duration_ms: 6.964122
-  type: 'test'
-  ...
-# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
-ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
-  ---
-  duration_ms: 5.745801
-  type: 'test'
-  ...
-# Subtest: the status read takes one project query and answers the bus result for that project
-ok 6 - the status read takes one project query and answers the bus result for that project
-  ---
-  duration_ms: 2.815134
-  type: 'test'
-  ...
-# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
-ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
-  ---
-  duration_ms: 7.105984
-  type: 'test'
-  ...
-# Subtest: the status read needs no send; a read-only Console still has no revert
-ok 8 - the status read needs no send; a read-only Console still has no revert
-  ---
-  duration_ms: 2.002948
-  type: 'test'
-  ...
-# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
-ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
-  ---
-  duration_ms: 0.708324
-  type: 'test'
-  ...
-# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
-ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
-  ---
-  duration_ms: 1.553573
-  type: 'test'
-  ...
-# Subtest: a revert receipt for another project is unknown and is never retried
-ok 11 - a revert receipt for another project is unknown and is never retried
-  ---
-  duration_ms: 1.371025
-  type: 'test'
-  ...
-# Subtest: a granted-user HTTP session cannot reach owner library callbacks
-ok 12 - a granted-user HTTP session cannot reach owner library callbacks
-  ---
-  duration_ms: 1.586864
-  type: 'test'
-  ...
-# Subtest: a configured revert callback remains unreachable when send is off
-ok 13 - a configured revert callback remains unreachable when send is off
-  ---
-  duration_ms: 1.226995
-  type: 'test'
-  ...
-1..13
-# tests 13
-# suites 0
-# pass 13
-# fail 0
-# cancelled 0
-# skipped 0
-# todo 0
-# duration_ms 177.384993

agents/fethry/work/queue-225/evidence/routes-green.tap

@@ -1,20 +0,0 @@
-✔ a signed-in same-origin revert reaches exactly one library.revert and returns the new commit (19.266366ms)
-✔ a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata (7.415028ms)
-✔ a revert takes a project and a 40-hex commit, nothing else, before the bus is asked (6.176121ms)
-✔ a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal (7.325625ms)
-✔ a revert whose answer is lost or unusable is reported unknown and is never retried (5.0635ms)
-✔ the status read takes one project query and answers the bus result for that project (3.008847ms)
-✔ a status answer for another project or of the wrong shape is refused; a refusal keeps its status (6.314096ms)
-✔ the status read needs no send; a read-only Console still has no revert (1.440122ms)
-✔ library routes are the owner's: a granted user is refused them, and the tester never reverts (0.563979ms)
-✔ the page gets the one library renderer, byte for byte, as a JavaScript module (1.180551ms)
-✔ a revert receipt for another project is unknown and is never retried (1.12255ms)
-✔ a granted-user HTTP session cannot reach owner library callbacks (1.351581ms)
-ℹ tests 12
-ℹ suites 0
-ℹ pass 12
-ℹ fail 0
-ℹ cancelled 0
-ℹ skipped 0
-ℹ todo 0
-ℹ duration_ms 182.202771

agents/fethry/work/queue-225/evidence/routes-red.tap

@@ -1,76 +0,0 @@
-✔ a signed-in same-origin revert reaches exactly one library.revert and returns the new commit (18.853567ms)
-✔ a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata (6.491576ms)
-✔ a revert takes a project and a 40-hex commit, nothing else, before the bus is asked (5.647113ms)
-✔ a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal (6.08423ms)
-✔ a revert whose answer is lost or unusable is reported unknown and is never retried (5.445934ms)
-✖ the status read takes one project query and answers the bus result for that project (3.470803ms)
-✖ a status answer for another project or of the wrong shape is refused; a refusal keeps its status (5.42219ms)
-✔ the status read needs no send; a read-only Console still has no revert (1.428304ms)
-✔ library routes are the owner's: a granted user is refused them, and the tester never reverts (0.509039ms)
-✔ the page gets the one library renderer, byte for byte, as a JavaScript module (1.123365ms)
-✖ a revert receipt for another project is unknown and is never retried (1.209291ms)
-✔ a granted-user HTTP session cannot reach owner library callbacks (1.398731ms)
-ℹ tests 12
-ℹ suites 0
-ℹ pass 9
-ℹ fail 3
-ℹ cancelled 0
-ℹ skipped 0
-ℹ todo 0
-ℹ duration_ms 198.061254
-
-✖ failing tests:
-
-test at packages/webui/tests/library-routes.test.mjs:100:1
-✖ the status read takes one project query and answers the bus result for that project (3.470803ms)
-  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:
-
-  403 !== 405
-
-      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/library-routes.test.mjs:107:10)
-      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
-      at async Test.run (node:internal/test_runner/test:1409:7)
-      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
-    generatedMessage: true,
-    code: 'ERR_ASSERTION',
-    actual: 403,
-    expected: 405,
-    operator: 'strictEqual',
-    diff: 'simple'
-  }
-
-test at packages/webui/tests/library-routes.test.mjs:111:1
-✖ a status answer for another project or of the wrong shape is refused; a refusal keeps its status (5.42219ms)
-  AssertionError [ERR_ASSERTION]: project-not-declared
-
-  400 !== 502
-
-      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/library-routes.test.mjs:119:12)
-      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
-      at async Test.run (node:internal/test_runner/test:1409:7)
-      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
-    generatedMessage: false,
-    code: 'ERR_ASSERTION',
-    actual: 400,
-    expected: 502,
-    operator: 'strictEqual',
-    diff: 'simple'
-  }
-
-test at packages/webui/tests/library-routes.test.mjs:145:1
-✖ a revert receipt for another project is unknown and is never retried (1.209291ms)
-  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:
-
-  200 !== 503
-
-      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/library-routes.test.mjs:148:10)
-      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
-      at async Test.run (node:internal/test_runner/test:1409:7)
-      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
-    generatedMessage: true,
-    code: 'ERR_ASSERTION',
-    actual: 200,
-    expected: 503,
-    operator: 'strictEqual',
-    diff: 'simple'
-  }

agents/fethry/work/queue-225/inherited-old-tests.patch

@@ -1,170 +0,0 @@
-diff --git a/packages/bus/tests/channel-proof.test.mjs b/packages/bus/tests/channel-proof.test.mjs
-index ba0179832..435d8fa2d 100644
---- a/packages/bus/tests/channel-proof.test.mjs
-+++ b/packages/bus/tests/channel-proof.test.mjs
-@@ -11,0 +12,2 @@
-+// Row 225 (C2-10b) re-pins webui bus.mjs for one STATUS entry, library-revert-not-agent: 409; no proof
-+// or transport change.
-@@ -32 +34 @@ const baselines = {
-- "packages/webui/src/bus.mjs": "604092cb706b152d458f299ff1071f6cd488774629012f96b672f7e9a16c0b2c",
-+ "packages/webui/src/bus.mjs": "9f33e9ca4feb7265ae33fd3ddf0ead0b75375d07ecbe9d8e55c618d29edea658",
-diff --git a/packages/library/tests/render.test.mjs b/packages/library/tests/render.test.mjs
-index b07e26d25..9c861bfe9 100644
---- a/packages/library/tests/render.test.mjs
-+++ b/packages/library/tests/render.test.mjs
-@@ -3 +3 @@ import assert from 'node:assert/strict';
--import { renderItems, UNREADABLE } from '../src/index.mjs';
-+import { renderReply } from '../src/index.mjs';
-@@ -4,0 +5 @@ import { renderItems, UNREADABLE } from '../src/index.mjs';
-+// Row 225 (C2-10b): renderReply replaces renderItems (design 7.4, the reply schema of 5.2).
-@@ -6,6 +7,12 @@ const A = 'a'.repeat(40), B = 'b'.repeat(40);
--const cite = (path, lines, quote, commit = A) => ({ path, commit, lines, quote });
--const options = {
--  scopeOf: path => path.includes('/Playground/') ? 'playground' : path.endsWith('.md') ? 'canon' : undefined,
--  changed: ({ path, commit }) => path === 'Book One/Characters/Mara Vell.md' && commit === A,
--};
--const render = items => renderItems(JSON.stringify({ items }), options);
-+const cite = (path, lines, quote, commit = A, extra = {}) => ({ path, commit, lines, quote, ...extra });
-+const web = (url, quote = 'spring tides') => ({ url, quote });
-+const reply = (text, citations) => JSON.stringify({ text, citations });
-+const CITED = reply("Mara's eyes are grey in chapter 3.", [
-+  cite('Book One/Chapters/Chapter 03.md', [41, 41], 'her grey eyes', A, { as: 'canon' }),
-+  cite('Book One/Playground/What If.md', [5, 6], 'a storm', B),
-+  cite('Notes/Eyes.md', [9, 10], 'green eyes'),
-+  web('https://example.invalid/tides'),
-+]);
-+const CHECK = { citations: [{ scope: 'canon', agent: null }, { scope: 'playground', agent: null },
-+  { scope: 'supporting', agent: 'acme/scribe' }, { scope: 'web', agent: null }] };
-+const changed = ({ path, commit }) => path === 'Notes/Eyes.md' && commit === A;
-@@ -13,21 +20,4 @@ const render = items => renderItems(JSON.stringify({ items }), options);
--// One snapshot per item kind: the plain text both channels show.
--const SNAPSHOTS = {
--  fact: [{ kind: 'fact', text: 'Tomas is the ferryman.', cites: [cite('Book One/Characters/Tomas.md', [3, 3], 'the ferryman', B)] }],
--  finding: [{ kind: 'finding', text: 'Eye colour differs.', cites: [cite('Book One/Chapters/Chapter 01.md', [41, 41], 'her grey eyes'),
--    cite('Book One/Characters/Mara Vell.md', [9, 10], 'green eyes')] }],
--  correction: [{ kind: 'correction', text: 'Chapter 1 says grey.', from: 'green eyes', to: 'grey eyes',
--    cites: [cite('Book One/Characters/Mara Vell.md', [9, 9], 'green eyes', B)] }],
--  question: [{ kind: 'question', text: 'Is the harbor north of the town?', cites: [cite('Book One/Places/Harbor Town.md', [2, 4], 'the harbor', B)] }],
--  idea: [{ kind: 'idea', text: 'A storm could close the harbor.', cites: [cite('Book One/Playground/What If.md', [5, 5], 'a storm', B),
--    { url: 'https://example.invalid/tides', quote: 'spring tides' }] }],
--};
--const EXPECTED = {
--  fact: '1. Fact: Tomas is the ferryman.\n   [canon] Book One/Characters/Tomas.md:3 @bbbbbbb "the ferryman"',
--  finding: '1. Finding: Eye colour differs.\n   [canon] Book One/Chapters/Chapter 01.md:41 @aaaaaaa "her grey eyes"\n'
--    + '   [canon] Book One/Characters/Mara Vell.md:9-10 @aaaaaaa "green eyes" (changed since)',
--  correction: '1. Correction: Chapter 1 says grey.\n   From: "green eyes"\n   To: "grey eyes"\n'
--    + '   [canon] Book One/Characters/Mara Vell.md:9 @bbbbbbb "green eyes"',
--  question: '1. Question: Is the harbor north of the town?\n   [canon] Book One/Places/Harbor Town.md:2-4 @bbbbbbb "the harbor"',
--  idea: '1. Idea: A storm could close the harbor.\n   [playground] Book One/Playground/What If.md:5 @bbbbbbb "a storm"\n'
--    + '   [web] https://example.invalid/tides "spring tides"',
--};
-+test('free text renders as itself with no citations', () => {
-+  for (const body of ['Grey, in chapter 3.', '', '"a JSON string"', '[1, 2]', '42', 'null'])
-+    assert.deepEqual(renderReply(body, { check: CHECK }), { kind: 'text', text: body, plain: body });
-+});
-@@ -35,8 +25,15 @@ const EXPECTED = {
--for (const kind of Object.keys(SNAPSHOTS)) {
--  test(`renderItems snapshot: ${kind}`, () => {
--    const out = render(SNAPSHOTS[kind]);
--    assert.equal(out.kind, 'items');
--    assert.equal(out.text, EXPECTED[kind]);
--    assert.equal(out.items[0].kind, kind);
--  });
--}
-+test('a cited reply renders its text, then each cite with the badge from the check result', () => {
-+  const out = renderReply(CITED, { check: CHECK, changed });
-+  assert.equal(out.kind, 'reply');
-+  assert.equal(out.text, "Mara's eyes are grey in chapter 3.");
-+  assert.deepEqual(out.citations.map(c => c.badge), ['canon', 'playground', 'supporting', 'web']);
-+  assert.equal(out.plain, "Mara's eyes are grey in chapter 3.\n"
-+    + '   [canon] Book One/Chapters/Chapter 03.md:41 @aaaaaaa "her grey eyes"\n'
-+    + '   [playground] Book One/Playground/What If.md:5-6 @bbbbbbb "a storm"\n'
-+    + '   [supporting] Notes/Eyes.md:9-10 @aaaaaaa "green eyes" (agent-written: acme/scribe) (changed since)\n'
-+    + '   [web] https://example.invalid/tides "spring tides"');
-+  assert.deepEqual(out.citations[0], { badge: 'canon', path: 'Book One/Chapters/Chapter 03.md', commit: A, lines: [41, 41],
-+    ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa', quote: 'her grey eyes', canon: true, agent: null, changed: false });
-+  assert.deepEqual(out.citations[3], { badge: 'web', url: 'https://example.invalid/tides', link: 'https://example.invalid/tides',
-+    ref: 'https://example.invalid/tides', quote: 'spring tides', agent: null, changed: false });
-+});
-@@ -44,6 +41,2 @@ for (const kind of Object.keys(SNAPSHOTS)) {
--test('renderItems numbers several items and takes a parsed body as well as a string', () => {
--  const items = [...SNAPSHOTS.fact, ...SNAPSHOTS.question];
--  const out = renderItems({ items }, options);
--  assert.equal(out.text, `${EXPECTED.fact}\n${EXPECTED.question.replace(/^1\./, '2.')}`);
--  assert.deepEqual(out.items[1].cites[0], { badge: 'canon', path: 'Book One/Places/Harbor Town.md', commit: B, lines: [2, 4],
--    ref: 'Book One/Places/Harbor Town.md:2-4 @bbbbbbb', quote: 'the harbor', changed: false });
-+test('a parsed body renders as its string does', () => {
-+  assert.deepEqual(renderReply(JSON.parse(CITED), { check: CHECK, changed }), renderReply(CITED, { check: CHECK, changed }));
-@@ -52,4 +45,4 @@ test('renderItems numbers several items and takes a parsed body as well as a str
--test('without options a path cite has no badge and is never marked changed', () => {
--  assert.equal(renderItems({ items: SNAPSHOTS.finding }).text,
--    '1. Finding: Eye colour differs.\n   Book One/Chapters/Chapter 01.md:41 @aaaaaaa "her grey eyes"\n'
--    + '   Book One/Characters/Mara Vell.md:9-10 @aaaaaaa "green eyes"');
-+test('without a check result a path cite has no badge, no label and is never changed', () => {
-+  const out = renderReply(CITED);
-+  assert.deepEqual(out.citations.map(c => [c.badge, c.agent, c.changed]),
-+    [[null, null, false], [null, null, false], [null, null, false], ['web', null, false]]);
-@@ -58,6 +51,6 @@ test('without options a path cite has no badge and is never marked changed', ()
--const NOTICE_SNAPSHOTS = { 'no-cited-answer': 'No cited answer', 'no-answer': 'No answer', 'turn-failed': 'The turn failed' };
--for (const [notice, text] of Object.entries(NOTICE_SNAPSHOTS)) {
--  test(`renderItems snapshot: notice ${notice}`, () => {
--    assert.deepEqual(renderItems(JSON.stringify({ items: [], notice }), options), { kind: 'notice', notice, text });
--  });
--}
-+test('the label and the badge come from the check result only, never from a bad entry', () => {
-+  const bad = { citations: [{ scope: 'web', agent: '' }, { scope: 'story', agent: 7 }, null, { scope: 'canon', agent: 'x/y' }] };
-+  const out = renderReply(CITED, { check: bad });
-+  // A path cite can't be web; a url cite is web by its shape whatever the check says, and never agent-written.
-+  assert.deepEqual(out.citations.map(c => [c.badge, c.agent]), [[null, null], [null, null], [null, null], ['web', null]]);
-+});
-@@ -65,14 +58,8 @@ for (const [notice, text] of Object.entries(NOTICE_SNAPSHOTS)) {
--test('a body without the reply shape shows a fixed line and none of its text', () => {
--  const secret = 'free prose the guard would refuse';
--  const bodies = [secret, JSON.stringify(secret), '{"items": [], "notice": "other"}', JSON.stringify({ items: [], notice: 'no-answer', extra: secret }),
--    JSON.stringify({ items: [] }), JSON.stringify({ items: [{ kind: 'story', text: secret, cites: [] }] }),
--    JSON.stringify({ items: [{ kind: 'fact', text: secret }] }), JSON.stringify({ items: SNAPSHOTS.fact, prose: secret }),
--    JSON.stringify({ items: [{ kind: 'correction', text: secret, cites: [] }] }),
--    JSON.stringify({ items: [{ kind: 'fact', text: secret, cites: [cite('a.md', [2, 1], 'q')] }] }),
--    JSON.stringify({ items: [{ kind: 'fact', text: secret, cites: [{ path: 'a.md', commit: 'abc', lines: [1, 1], quote: 'q' }] }] }),
--    JSON.stringify({ items: [{ kind: 'fact', text: secret, cites: [{ url: 'https://x.invalid', path: 'a.md', quote: 'q' }] }] }),
--    null, 42, '[]'];
--  for (const body of bodies) {
--    const out = renderItems(body, options);
--    assert.deepEqual(out, { kind: 'unreadable', text: UNREADABLE }, String(body));
--    assert.ok(!JSON.stringify(out).includes(secret));
-+test('a web cite is a link only for https', () => {
-+  const urls = { 'https://example.invalid/a': 'https://example.invalid/a', 'http://example.invalid/a': null,
-+    'javascript:alert(1)': null, 'JAVASCRIPT:alert(1)': null, 'data:text/html,x': null, 'not a url': null, '//example.invalid': null };
-+  for (const [url, link] of Object.entries(urls)) {
-+    const out = renderReply(reply('t', [web(url)]));
-+    assert.equal(out.kind, 'reply', url);
-+    assert.equal(out.citations[0].link, link, url);
-+    assert.equal(out.citations[0].ref, url);
-@@ -80,0 +68,27 @@ test('a body without the reply shape shows a fixed line and none of its text', (
-+
-+test('a write notice renders its fixed line', () => {
-+  const body = op => JSON.stringify({ notice: 'library-write', op, path: 'Notes/Eyes.md', commit: B });
-+  assert.deepEqual(renderReply(body('write'), { name: 'Scribe' }),
-+    { kind: 'notice', op: 'write', path: 'Notes/Eyes.md', commit: B, text: 'Scribe wrote Notes/Eyes.md @bbbbbbb', plain: 'Scribe wrote Notes/Eyes.md @bbbbbbb' });
-+  assert.equal(renderReply(body('delete'), { name: 'Scribe' }).text, 'Scribe deleted Notes/Eyes.md @bbbbbbb');
-+  assert.equal(renderReply(body('write')).text, 'An agent wrote Notes/Eyes.md @bbbbbbb');
-+});
-+
-+test('a body without the reply or notice shape is free text: the whole body, no citations', () => {
-+  const bodies = [
-+    JSON.stringify({ text: 't' }), JSON.stringify({ citations: [] }), JSON.stringify({ text: 1, citations: [] }),
-+    JSON.stringify({ text: 't', citations: [], extra: 1 }), JSON.stringify({ items: [] }),
-+    reply('t', [cite('a.md', [2, 1], 'q')]), reply('t', [cite('a.md', [0, 1], 'q')]), reply('t', [cite('a.md', [1], 'q')]),
-+    reply('t', [{ path: 'a.md', commit: 'abc', lines: [1, 1], quote: 'q' }]), reply('t', [cite('a.md', [1, 1], 'q', A, { as: 'playground' })]),
-+    reply('t', [cite('a.md', [1, 1], 'q', A, { scope: 'canon' })]), reply('t', [{ url: 'https://x.invalid', path: 'a.md', quote: 'q' }]),
-+    reply('t', [{ url: 'https://x.invalid' }]), reply('t', [{ url: 'https://x.invalid', quote: 'q', agent: 'x/y' }]),
-+    JSON.stringify({ notice: 'library-write', op: 'move', path: 'a.md', commit: A }),
-+    JSON.stringify({ notice: 'library-write', op: 'write', path: 'a.md', commit: 'abc' }),
-+    JSON.stringify({ notice: 'library-write', op: 'write', path: 'a.md', commit: A, by: 'x' }),
-+  ];
-+  for (const body of bodies) assert.deepEqual(renderReply(body, { check: CHECK }), { kind: 'text', text: body, plain: body }, body);
-+});
-+
-+test('an empty citations list is a reply with no cites', () => {
-+  assert.deepEqual(renderReply(reply('Grey.', [])), { kind: 'reply', text: 'Grey.', citations: [], plain: 'Grey.' });
-+});

agents/fethry/work/queue-225/manifest.r1.sha256

@@ -1,13 +0,0 @@
-6bdaf870be3d8d03a68eb03f5f6916150bb1b3db134ffbe84018e91d47e6434d  packages/bus/tests/channel-proof.test.mjs
-0385fc49b445ff730021eb11c20b29027631e0d27350e4591d5a0936ffbdccf6  packages/library/README.md
-653ff444ba66cb73e1ca4df1f6037f15a2ec7d3d009cf614a0dc51deabda4b50  packages/library/src/index.mjs
-dfcc9f271afc7afdab908395a7f3c402100fa89b4994b20d5bcae3140d5c335e  packages/library/src/render.mjs
-f3c213f3b0bd080d0bc5837f741a29e324acb91cf0c27144dee08a4113262210  packages/library/tests/render.test.mjs
-9f33e9ca4feb7265ae33fd3ddf0ead0b75375d07ecbe9d8e55c618d29edea658  packages/webui/src/bus.mjs
-f1a0c9a55b1ae933e205c7e2b9753afe0c2f1fc9b0faa2cf18765396f99ac8dd  packages/webui/src/cli.mjs
-bf49a22147be0535076640d20149116a744dad9b0b32dd667ee297a061d56134  packages/webui/src/console-bus.mjs
-793e7dd9edbe5a55c2deab3c8aef4fbd5b4c838e132e2ac9294043c7176ec6f7  packages/webui/src/public/chat.css
-af3a6f382e0d40cf2b28c31db7cb58ba775f1e242651ba42c7426bda99dc0d89  packages/webui/src/public/chat.js
-6412fe34bc640433e9cf7610f65d3574a3415c934354d8cb52e056793a81948f  packages/webui/src/serve.mjs
-f191752f867a112c867ca24268f70aa99ca0903c9208f76bc4bb4c1587cb55df  packages/webui/tests/chat-replies-browser.test.mjs
-df4ff385ac4ca8244ffa00faf82fcca1f4fcdac8da02a4f4d71233d4df8e1157  packages/webui/tests/library-routes.test.mjs

agents/fethry/work/queue-225/mutants.py

@@ -1,96 +0,0 @@
-#!/usr/bin/env python3
-"""Run row225 mutants in disposable snapshots, only on Sage CLEAR.
-
-Commit the tested candidate first. Never change the worktree or shared dependencies.
-A timeout, import failure or process failure is not a mutation kill.
-"""
-import argparse
-import hashlib
-import json
-import os
-from pathlib import Path
-import shutil
-import subprocess
-import tarfile
-import tempfile
-
-BROWSER = 'packages/webui/tests/chat-replies-browser.test.mjs'
-ROUTES = 'packages/webui/tests/library-routes.test.mjs'
-CHAT = 'packages/webui/src/public/chat.js'
-SERVE = 'packages/webui/src/serve.mjs'
-RENDER = 'packages/library/src/render.mjs'
-MUTANTS = [
-    ('M1-badges', RENDER, 'badge: scope, path:', 'badge: null, path:', BROWSER),
-    ('M1-agent-label', RENDER, 'canon: c.canon, agent,', 'canon: c.canon, agent: null,', BROWSER),
-    ('M2-http-links', RENDER, "new URL(url).protocol === 'https:' ? url : null", 'url', BROWSER),
-    ('M3-wrong-commit', CHAT, 'e.file !== e.last', 'cite.commit !== e.last', BROWSER),
-    ('M3-missing-file', CHAT, "SHA.test(e?.file ?? '') && SHA.test(e?.last ?? '')", "SHA.test(e?.last ?? '')", BROWSER),
-    ('M4-fallback', CHAT, 'Array.isArray(limits.fallback) ? limits.fallback.filter', 'Array.isArray(v.replyLimitsFallback) ? v.replyLimitsFallback.filter', BROWSER),
-    ('M4-problem', CHAT, "if (CODE.test(limits.problem ?? '')) parts.push(`<code>${txt(limits.problem)}</code>`);", '', BROWSER),
-    ('M5-send', SERVE, 'if (!send || !libraryRevert || !named)', 'if (!libraryRevert || !named)', ROUTES),
-    ('M5-project-receipt', SERVE, 'result.project !== value.project || ', '', ROUTES),
-    ('M5-commit-input', SERVE, '!COMMIT.test(value.commit)', 'false', ROUTES),
-    ('M5-origin', SERVE, "if (one(req, 'origin') !== ownOrigin(preview)) return refuse(403, 'cross-origin request refused', 'a revert needs the Console\\'s own Origin');", '', ROUTES),
-    ('M5-fetch-metadata', SERVE, "if (one(req, 'sec-fetch-site') !== 'same-origin') return refuse(403, 'cross-site request refused', 'a revert needs same-origin Fetch Metadata');", '', ROUTES),
-    ('M6-duplicate-call', SERVE, 'result = await libraryRevert({ project: value.project, commit: value.commit });', 'result = await libraryRevert({ project: value.project, commit: value.commit }); await libraryRevert({ project: value.project, commit: value.commit });', ROUTES),
-    ('M7-user-fence', SERVE, "if (path === '/api/chat' || path.startsWith('/api/chat/')) return true;", "if (path.startsWith('/api/library/')) return true; if (path === '/api/chat' || path.startsWith('/api/chat/')) return true;", ROUTES),
-]
-
-
-def digest(path):
-    return hashlib.sha256(path.read_bytes()).hexdigest()
-
-
-def main():
-    parser = argparse.ArgumentParser(description=__doc__)
-    parser.add_argument('--clear', required=True, help='Sage CLEAR authorizing this run')
-    parser.add_argument('--output', required=True, type=Path)
-    args = parser.parse_args()
-    repo = Path(subprocess.check_output(['git', 'rev-parse', '--show-toplevel'], text=True).strip())
-    if subprocess.check_output(['git', 'status', '--porcelain', '--', 'packages'], text=True).strip():
-        raise SystemExit('Commit tested packages first: snapshot must match candidate.')
-    head = subprocess.check_output(['git', 'rev-parse', 'HEAD'], text=True).strip()
-    before = {p: digest(repo / p) for p in [CHAT, SERVE, RENDER]}
-    args.output.mkdir(parents=True, exist_ok=True)
-    results = []
-    with tempfile.TemporaryDirectory(prefix='mosaic-row225-mutants-') as directory:
-        scratch = Path(directory)
-        archive = scratch / 'candidate.tar'
-        with archive.open('wb') as stream:
-            subprocess.run(['git', 'archive', 'HEAD', 'packages', 'roles', 'contracts', 'tasks', 'missions', 'package.json', 'RELEASE'], stdout=stream, check=True)
-        for name, target, old, new, test in MUTANTS:
-            tree = scratch / name
-            tree.mkdir()
-            with tarfile.open(archive) as bundle:
-                bundle.extractall(tree, filter='data')
-            (tree / 'node_modules').symlink_to((repo / 'node_modules').resolve(), target_is_directory=True)
-            path = tree / target
-            source = path.read_text()
-            hits = source.count(old)
-            if hits != 1:
-                raise SystemExit(f'{name}: expected one anchor, found {hits}')
-            path.write_text(source.replace(old, new, 1))
-            command = ['timeout', '-k', '10', '240' if test == BROWSER else '120', 'node', '--test', '--test-reporter=tap', '--test-concurrency=1', '--test-timeout=30000', test]
-            run = subprocess.run(command, cwd=tree, stdout=subprocess.PIPE, stderr=subprocess.STDOUT, text=True, env=os.environ)
-            log = args.output / f'{name}.tap'
-            log.write_text(run.stdout)
-            path.write_text(source)
-            restored = digest(path) == hashlib.sha256(source.encode()).hexdigest()
-            worktree_clean = before == {p: digest(repo / p) for p in before}
-            if not restored or not worktree_clean:
-                raise SystemExit(f'{name}: restore/hash check failed')
-            killed = run.returncode == 1 and 'ERR_ASSERTION' in run.stdout and 'not ok ' in run.stdout
-            results.append({'mutant': name, 'anchorHits': hits, 'restored': restored, 'worktreeUnchanged': worktree_clean, 'exit': run.returncode, 'killed': killed, 'test': test, 'log': str(log)})
-            print(json.dumps(results[-1]), flush=True)
-            shutil.rmtree(tree)
-            if not killed:
-                break
-    after = {p: digest(repo / p) for p in before}
-    report = {'head': head, 'clear': args.clear, 'worktreeUnchanged': before == after, 'results': results}
-    (args.output / 'summary.json').write_text(json.dumps(report, indent=2) + '\n')
-    if before != after or len(results) != len(MUTANTS) or not all(r['killed'] for r in results):
-        raise SystemExit(1)
-
-
-if __name__ == '__main__':
-    main()

agents/gladstone/README.md

@@ -0,0 +1,9 @@
+# Gladstone
+
+Builder seat, Codex gpt-6.1-sol, started by Mos (mos-1531, mos-1532). Owns the Case 1/2 host fixes for the 433 P1 rerun,
+F1 to F6 (#1816, Vikunja 614).
+
+No launcher in this directory. The seat runs as a T3 thread (thread 433058fc) and works in its own worktree. It has no
+credentials of its own; it pushes only its own `gladstone/*` branches through the repository credential helper (mos-0981),
+never `refactor`, `main` or another seat's branch. Claude seats orchestrate and review (Q245). Registered by Sage on
+2026-10-23 so the queue can name the seat as row owner (store.mjs isSeatDir).

agents/gladstone/work/queue-320/BUILD.md

@@ -0,0 +1,304 @@
+# Hostcheck item 5 and bundle verification (Gitea #1816, Vikunja 614)
+
+Queue row pending from Sage. Owner Gladstone, reviewer Morgana, gate/landing Sage.
+Base: fetched origin/refactor 93694c5185d0a7f989d2fe78fb620e44599b744e;
+branch gladstone/hostcheck-item5. Scope: mos-1531 / ops-0256, sage-3738 and sage-3740.
+
+## Before and after
+
+Ubuntu 24.04 dpkg 1.22.6ubuntu6.6 prints `root mosaic 750 /usr/bin/bwrap`.
+Item 5 compared the literal `0750`, falsely refusing a correctly configured host;
+--enforce would unload the profile, close bwrap and record DRIFT.
+The candidate accepts exactly four fields, root, mosaic, octal 0750, and $BWRAP.
+`0*750` represents all octal spellings numerically equal to 0750 without arithmetic
+conversion/overflow. Horizontal whitespace separates fields; extra fields and
+embedded newlines refuse. Owner, group and path remain exact. The stat comparison
+and existing output strings remain unchanged. Only the item 5 comment also changes.
+
+The two release-transport bundle checks previously ran outside any repository.
+Each now creates an empty bare scratch repository, verifies with git -C, and removes
+the scratch directory using an EXIT trap. A failure exits the shell before cloning
+or fetching. No other run-sheet text changes.
+
+## Tests and mutants
+
+Only packages/cli/tests/case1-hostcheck.test.mjs changes among tests, by appending
+three new test() blocks; the existing passing 0750 fake and failing fake are intact.
+The pass test exercises 750, 0750 and 000750. The enforce test checks no unload,
+chown, chmod, DRIFT or hostcheck log for 750. Refusals independently cover 755,
+0755, 4750, 75, 7500, 075, non-octal strings, other owner/group/path, missing path,
+extra fields, multiple lines, blank/empty output and a missing fixture file.
+
+| Mutant | Change | Killer | Result |
+|---|---|---|---|
+| M1 | Restore the old literal root mosaic 0750 comparison (drop 750) | new check pass test | Unrun |
+| M2 | Accept any mode while preserving owner/group/path | new refusal test | Unrun |
+
+Mutant procedure: preserve script bytes, assert one replacement, run the named
+killer alone, require failure for its intended assertion, restore in finally and
+check the original bytes/hash. Run the original targeted file again after restore.
+
+## Verification status
+
+Untested. Sage-3738 prohibits all Node until CLEAR because the joint full gate
+runs alone. Sage-3740 explicitly directs pushing this untested build for Morgana's
+static review before CLEAR. This supersedes test-first execution for this draft;
+no Node, tests, node --check, full suites or live-host operations have run.
+Queue next refused linked-worktree execution; Sage owns queue creation/movement.
+Push only gladstone/*, with MOSAIC_GITEA_CREDENTIAL_FILE unset; no amend/force.
+
+Static draft receipt: `git diff --check` passed. Test-file numstat against the
+base is `46 0 packages/cli/tests/case1-hostcheck.test.mjs` (added/deleted).
+
+## Scope and implementation amendment (mos-1534, sage-3741)
+
+F1 correction: Sage requires precisely `750` or `0750` and exactly single spaces,
+so the candidate now uses `0?750` and literal spaces. It refuses 00750/000750,
+a doubled space and a tab. This supersedes the initial numeric-equivalence design
+above. Only this row's own appended tests change; no base test line changes.
+
+F3: case2-unit.sh plain() adds @. abs_plain is its only caller and requires an
+absolute normalized path, so @ cannot become an ExecStart prefix. In sed @ is
+ordinary replacement text (the delimiter is |); &, backslash and | still refuse.
+Environment=MOSAIC_CLAUDE_BIN carries @ literally; the parser compares the complete
+value, with no shell evaluation. @anthropic-ai also cannot match the residual
+@[A-Z_]+@ token check. Tests render/reinstall with a regular executable under
+@anthropic-ai, checking Environment and the new copy's WorkingDirectory. Since a
+nonroot test cannot create root ownership, a stat fake models root:0755 only for
+that file and its ancestor chain. The real file type/executable checks, render,
+installed-unit parser, and all other stat calls remain active. A separate block
+refuses space, %, $, both quote characters, backslash, & and |.
+
+F4: copy_tree changes to / before archive/npm/find, after all its path arguments
+are absolute. copy_bundle retains its existing relative-bundle resolution before
+calling copy_tree. Checkout copies have absolute REPO and COPIES too. Source-only
+use from stack-release.sh changes no cwd because copy_tree is not called there.
+Audit of every AS_USER command in stack-upgrade.sh: fetch and merge use git -C;
+plan, gate, revert, confirm-rollback, stage (activate/rollback), confirm and rehearse
+invoke stack-release.sh, which changes to its checkout at line 34. No other
+AS_USER command needs a fix. The new test enters a directory mode 0111, verifies
+that ls cannot read it, then runs both a relative-bundle copy and checkout copy,
+asserting success, no find restore error, and an immutable completed copy.
+
+Additional mutants (unrun under the same no-Node hold):
+
+| Mutant | Change | Killer | Result |
+|---|---|---|---|
+| M3 | Drop @ from plain() | new factory scoped Claude-path test | Unrun |
+| M4 | Remove copy_tree's cd / | new unreadable-cwd copy test | Unrun |
+
+All four fixes remain untested. Follow-up is an additive commit on the pushed
+branch, per sage-3741, with no amend or force. Morgana's static F1/F2 read of
+f30c74b12 was CLEAN (morgana-0205); F3/F4 and execution remain open.
+
+Morgana N1: the outer bundle-verification failure now prints
+`STOP: bundle verify failed; do not continue` instead of exiting the interactive
+root shell. The subshell still returns failure and cleans up. This follows the
+sheet's human read-and-stop convention and avoids sending remaining pasted lines
+to a parent shell after exiting sudo -i. Inner mktemp failure still exits only the
+subshell. This supersedes the initial outer-shell failure behavior noted above.
+
+## File numstat against 93694c518 (added / deleted)
+
+| File | Added | Deleted |
+|---|---:|---:|
+| `BUILD-LOG.md` | 4 | 0 |
+| `agents/gladstone/work/hostcheck-item5/BUILD.md` | 114 | 0 |
+| `docs/SESSIONS.md` | 1 | 0 |
+| `docs/guides/host-run-sheet.md` | 12 | 2 |
+| `packages/cli/tests/case1-hostcheck.test.mjs` | 48 | 0 |
+| `packages/cli/tests/case2-unit.test.mjs` | 29 | 0 |
+| `packages/cli/tests/stack-copy.test.mjs` | 16 | 0 |
+| `scripts/case1-hostcheck.sh` | 2 | 2 |
+| `scripts/case2-unit.sh` | 1 | 1 |
+| `scripts/stack-copy.sh` | 3 | 0 |
+
+## F5 (mos-1536 / ops-0260): explicit notifier decision
+
+Before: no run-sheet step creates the required notifier decision, and precheck
+accepts a host whose bus will refuse missing notify.json. After: section 9a
+requires the mosaic user to create its business notify directory at 0700 and an
+explicit {"notifyVersion": 1, "binding": null} file at 0600 before section 10.
+The shell runs with cwd / and umask 077; noclobber refuses an existing decision.
+Named binding is explicitly a later per-host choice requiring Mos's go.
+case2-install.sh is unchanged and makes no silent default.
+
+case2-precheck.sh's existing facts helper dynamically imports readNotifyConfig
+from cli.mjs and calls it directly. File type, uid, exact 0600 mode, JSON keys,
+version and binding-name validation therefore stay identical to the bus. The
+shell checks the business notify directory with existing private_dir (same uid,
+not a symlink, exactly 0700) and prints the new notifier config line. No notifier
+is started and no configuration is written. Tests append pass cases for null and
+a valid named binding, and refusal cases for missing file, 0644, 0755 directory,
+extra key, malformed JSON, invalid binding/version and a symlinked file.
+
+M5 (unrun): remove the notifier shell check, including its refusal branch; the
+new notifier refusal test must fail. Also include Morgana's F3 negative mutant
+M3b (allow $ in plain), killed by the new unsafe-character test.
+
+Existing positive precheck tests need an explicit notify fixture. Approval
+requested via Sage in gladstone-0006/-0007 for minimal setup-only additions to
+case2-unit.test.mjs host(t) and case2-install.test.mjs world(t); assertions remain
+unchanged. Those additions are not yet applied. Correction to gladstone-0007:
+case1-accept.test.mjs also names case2-precheck.sh, but uses a stand-in; it does
+not execute the changed script and needs no fixture amendment.
+
+Execution remains held by Sage: no Node/tests run. Morgana-0207 static F1-F4
+verdict on a75532db1 is CLEAN; execution and F5 review are still open.
+
+F5 acceptance from mos-1536 (for review):
+1. Before section 10, as mosaic, explicitly create <dataRoot>/notify/<business>
+   at 0700 and notify.json at 0600 with default binding null; a later named
+   binding needs Mos's go. Do not make case2-install.sh write it.
+2. Precheck must refuse missing file, non-0600 file, directory looser than 0700
+   and a document outside the CLI's exact shape. Reuse/match cli.mjs validation,
+   and name the new line in this run-sheet step's Precheck entry.
+3. Append-only test blocks cover pass, missing, 0644, 0755 dir, extra key; record
+   a skip-check mutant, the touched test file and its numstat.
+4. F3/F4 precede F5, each follow-up commit stays on gladstone/hostcheck-item5;
+   send pushes to Sage/Morgana with Mos cc. No Node until Sage CLEAR.
+
+Static F5 draft receipt: git diff --check passed. Existing fixture approvals
+remain pending; F5's new pass test creates its own explicit decisions. No claim
+that the old positive precheck tests pass without the pending setup changes.
+
+## F5 candidate file numstat against 93694c518 (added / deleted)
+
+| File | Added | Deleted |
+|---|---:|---:|
+| `BUILD-LOG.md` | 6 | 0 |
+| `agents/gladstone/work/hostcheck-item5/BUILD.md` | 179 | 0 |
+| `docs/SESSIONS.md` | 1 | 0 |
+| `docs/guides/host-run-sheet.md` | 34 | 2 |
+| `packages/cli/tests/case1-hostcheck.test.mjs` | 48 | 0 |
+| `packages/cli/tests/case2-unit.test.mjs` | 65 | 0 |
+| `packages/cli/tests/stack-copy.test.mjs` | 16 | 0 |
+| `scripts/case1-hostcheck.sh` | 2 | 2 |
+| `scripts/case2-precheck.sh` | 19 | 0 |
+| `scripts/case2-unit.sh` | 1 | 1 |
+| `scripts/stack-copy.sh` | 3 | 0 |
+
+## Fixture approval and separate follow-up (mos-1537)
+
+Mos approved exactly setup-only additions to case2-unit.test.mjs host(t) and
+case2-install.test.mjs world(t): each gets three added lines for a 0700
+notify/acme directory and 0600 notify.json with {"notifyVersion":1,"binding":null}.
+No existing line, fake or assertion changes or is deleted. F5's missing-file
+negative case removes the file after setup, so the new default cannot mask it.
+The newly appended install test checks preserved bytes and mode after success,
+and separately removes the decision before install and checks it stays absent.
+case1-accept.test.mjs is unchanged. This follow-up is committed separately on
+33950cf9b as directed, with no amend. No Node/tests run; suite claims remain open.
+Morgana-0211 found F5 source/run sheet CLEAN statically; the setup prerequisite B1
+is addressed by this approved fixture patch, pending execution.
+
+Additional planned mutants from Morgana-0211 (unrun): M5b drops private_dir,
+killed by the directory fault; M5c prints NOTIFY ok unconditionally, killed by
+the document faults. Existing test preservation is checked by git diff showing
+only additions (numstat below).
+
+Fixture follow-up numstat: case2-unit.test.mjs +3/-0,
+case2-install.test.mjs +18/-0. Against the original base: case1-hostcheck.test.mjs
++48/-0, case2-unit.test.mjs +68/-0, stack-copy.test.mjs +16/-0,
+case2-install.test.mjs +18/-0. git diff --check passed.
+
+## F6 and notify parent correction (mos-1537 / ops-0261)
+
+Before: install creates a copy but no human CLI wrapper; the sheet's
+stack-copy.sh check --units external therefore fails even with correct units.
+After: the sheet explicitly places a wrapper step after successful install and
+before that check. On Mos's separate live-step go, mosaic changes cwd to /,
+creates $HOME/.npm-global/bin if absent, then invokes its clone's stack-copy.sh
+wrapper <sha> --create. Existing wrappers refuse and require review; install is
+unchanged. This is documentation of a gated host action, not execution of it.
+There are no tests pinning these sheet steps to adjust.
+
+Section 9a now explicitly creates/chmods <dataRoot>/notify and then its business
+leaf, each 0700. This addresses ops-0261's observation that mkdir -p -m only
+controls the leaf. The existing umask 077 remains. All exits are inside the
+unprivileged shell, so no failure exits the operator's interactive root shell.
+
+Static receipt: git diff --check passed. No Node, tests or live action. F6 and
+this parent-directory documentation correction are a separate commit after the
+approved fixture-only 5fd2328b6 follow-up. Reviewer should retain the earlier
+F1-F5 source verdicts and inspect this delta. Queue row still pending from Sage.
+
+## F6 candidate file numstat against 93694c518 (added / deleted)
+
+| File | Added | Deleted |
+|---|---:|---:|
+| `BUILD-LOG.md` | 10 | 0 |
+| `agents/gladstone/work/hostcheck-item5/BUILD.md` | 241 | 0 |
+| `docs/SESSIONS.md` | 1 | 0 |
+| `docs/guides/host-run-sheet.md` | 51 | 2 |
+| `packages/cli/tests/case1-hostcheck.test.mjs` | 48 | 0 |
+| `packages/cli/tests/case2-install.test.mjs` | 18 | 0 |
+| `packages/cli/tests/case2-unit.test.mjs` | 68 | 0 |
+| `packages/cli/tests/stack-copy.test.mjs` | 16 | 0 |
+| `scripts/case1-hostcheck.sh` | 2 | 2 |
+| `scripts/case2-precheck.sh` | 19 | 0 |
+| `scripts/case2-unit.sh` | 1 | 1 |
+| `scripts/stack-copy.sh` | 3 | 0 |
+
+## F6 gate citation (sage-3747)
+
+Added scripts/stack-copy.sh:3 to the F6 wrapper step's explicit Mos-go requirement.
+This is doc-only; commands and tests are unchanged. Sage ruled the delete-after-
+setup missing-file negative meets mos-1537, so no fixture change is needed.
+Morgana-0213 found the fixture/F6 deltas CLEAN statically. No Node/tests run;
+Morgana's eventual run waits for Sage's row and CLEAR after the 220+216 landing.
+Numstat for this follow-up: host-run-sheet.md +1/-1; BUILD.md +9/-0.
+Static receipt: git diff --check passed.
+
+Correction: 0f3d874d4 added 10 BUILD.md lines, not 9; the git numstat is authoritative.
+
+## First review run and F4 test correction (morgana-0217)
+
+Morgana ran af201b4a9 (6fa47e07d only relocates this file) under her authorized
+slot with timeout -k 10 and TMPDIR under /mnt/storage/scratch/tmp. Receipts:
+/mnt/storage/scratch/morgana-g320-out/base-summary.txt and mutants-summary.txt.
+
+| Targeted file | Passed | Failed |
+|---|---:|---:|
+| case1-hostcheck.test.mjs | 19 | 0 |
+| case2-unit.test.mjs | 47 | 0 |
+| case2-install.test.mjs | 24 | 0 |
+| stack-copy.test.mjs | 17 | 1 |
+
+Seven of eight mutants were killed: M1 literal0750, M2 anymode, M3a drop@,
+M3b allow$, M5 drop shell block, M5b drop private_dir, M5c always NOTIFY ok.
+M4 drop cd / SURVIVED: base and mutant both failed only setup's cleanup hook.
+This is a test defect, not a green acceptance result. The 0111 cwd retained
+search permission and did not reproduce the inaccessible inherited cwd. It
+also blocked setup's chmod -R cleanup because the directory remained unreadable.
+
+B1 correction touches only this row's appended F4 test: the child shell enters
+an initially searchable directory, chmods it 000, checks both ! -r and ! -x, then
+execs stack-copy. The parent asserts all read/search bits remain cleared. The
+bundle now lives outside cwd and is passed absolutely, matching the real flow;
+existing row232 coverage still tests relative bundles from an accessible cwd.
+Both bundle and checkout paths remain covered.
+B2 correction: each child run/assertion sequence has a finally that restores the
+cwd to0700 before setup's existing cleanup. No old setup/test lines change.
+Production scripts are unchanged; the cd / fix remains correct by static review.
+
+Correction is untested locally: no builder Node/test CLEAR was given. Morgana
+will rerun stack-copy whole, M4 and residue cleanup on the pushed correction;
+other files need no rerun unless changed. git diff --check passed.
+
+## F4 corrected candidate numstat against 93694c518 (added / deleted)
+
+| File | Added | Deleted |
+|---|---:|---:|
+| `BUILD-LOG.md` | 12 | 0 |
+| `agents/gladstone/work/queue-320/BUILD.md` | 304 | 0 |
+| `docs/SESSIONS.md` | 1 | 0 |
+| `docs/guides/host-run-sheet.md` | 51 | 2 |
+| `packages/cli/tests/case1-hostcheck.test.mjs` | 48 | 0 |
+| `packages/cli/tests/case2-install.test.mjs` | 18 | 0 |
+| `packages/cli/tests/case2-unit.test.mjs` | 68 | 0 |
+| `packages/cli/tests/stack-copy.test.mjs` | 22 | 0 |
+| `scripts/case1-hostcheck.sh` | 2 | 2 |
+| `scripts/case2-precheck.sh` | 19 | 0 |
+| `scripts/case2-unit.sh` | 1 | 1 |
+| `scripts/stack-copy.sh` | 3 | 0 |

agents/gladstone/work/queue-321/BUILD.md

@@ -0,0 +1,171 @@
+# Row 321: F7 wrapper environment and F10 first adoption (#1817)
+
+Owner Gladstone; reviewer Boyd (separate Codex thread); queue/review/landing Sage.
+Authorized by sage-3791. Branch gladstone/row321 starts at fetched origin/refactor
+833ec1cc8d7c11842efb82e57c1a0b256c8d22d7. The row320 branch is unchanged.
+Brief: docs/plans/2026-10-23_host-fixes-1816-brief.md, section
+"Brief: F7, the wrapper step's PATH and umask under sudo", including F10;
+verified blob 7333f94ba9cfd58f87c5a3580d428b84c65845b6 (requested pin 7333f94ba9cf).
+Only the run sheet and this BUILD.md change. No scripts, tests, config, credentials,
+queue state, deployment or live host operation changed. No tests or Node commands run.
+
+## Before and after
+
+F7: sudo secure_path omits the pinned Node directory, so wrapper creation reaches
+instance.sh's bare node and exits127. An inherited umask can leave the bin dir0775.
+The MOSAIC_WRAPPER heredoc now sets umask077 and the sheet's existing pinned Node
+PATH before mkdir. One sentence names secure_path and why the step sets both.
+The existing Mos go remains explicit. No wrapper command is executed here.
+
+F10: first install omits adoption, so the first activate refuses no-pointer.
+The release-transport section now places explicit adoption after both units are
+running (section10) and before any activate/upgrade, run as mosaic on Mos's go by
+Jason or Mos, citing stack-release.sh:14. It uses the configured dev instance and
+external units, with the same pinned Node PATH under sudo.
+Adjacent to the upgrade command, the sheet now says only the first upgrade after
+adopt takes --no-rehearsal: adopt writes no backup; missing flag refuses no-backup;
+later upgrades omit it, because a backup with that flag refuses rehearsal-required.
+Source checks: stack-release.sh pointer_for_business refuses no-pointer and directs
+adopt; stack-upgrade.sh rehearse handles rc3/no-backup and rc0/rehearsal-required.
+This records existing behavior and authority; it adds no requirement or live go.
+
+## Test-reference grep (negative and positive control)
+
+The required negative grep covers both F7 and F10 because neither is read by any
+matched test. The positive control locates the precheck path that the unit/install
+tests actually execute, showing the pathspecs reach their test files.
+
+Negative grep:
+
+```sh
+git grep -n 'host-run-sheet' -- 'packages/*/tests/*' 'scripts/test-*.sh'
+# exit 1
+# no matches
+```
+
+Positive control:
+
+```sh
+git grep -n 'case2-precheck.sh' -- 'packages/*/tests/*' 'scripts/test-*.sh'
+# exit 0
+packages/cli/tests/case1-accept.test.mjs:26:const PRECHECK = `${HOME}/.local/share/mosaic-stack/copies/${COPY}/scripts/case2-precheck.sh`;
+packages/cli/tests/case2-install.test.mjs:2:// scripts/case2-precheck.sh's library checks and --library-status mode. Brief:
+packages/cli/tests/case2-install.test.mjs:23:const PRECHECK = join(REPO, "scripts", "case2-precheck.sh");
+packages/cli/tests/case2-install.test.mjs:271:// ---- case2-precheck.sh, the library profile (D6a) ----
+packages/cli/tests/case2-install.test.mjs:334:// ---- case2-precheck.sh --library-status (D6b) ----
+packages/cli/tests/case2-unit.test.mjs:2:// and scripts/case2-precheck.sh checks the host before they start. Brief: docs/plans/2026-10-20_case2-rows.md
+packages/cli/tests/case2-unit.test.mjs:20:const PRECHECK = join(REPO, "scripts", "case2-precheck.sh");
+packages/cli/tests/case2-unit.test.mjs:588:// ---- case2-precheck.sh ----
+```
+
+## Run-sheet diff against the pinned base (git diff --unified=0)
+
+```diff
+diff --git a/docs/guides/host-run-sheet.md b/docs/guides/host-run-sheet.md
+index d2ba28d7c..96fd4f363 100644
+--- a/docs/guides/host-run-sheet.md
++++ b/docs/guides/host-run-sheet.md
+@@ -209,0 +210,9 @@ sudo -u mosaic -H git clone -q -b refactor /srv/mosaic/incoming/<sha>.bundle /sr
++After a first install, once both units are running (section 10), adopt the installed copy before
++any activate or upgrade. This step runs only on Mos's go, with Jason or Mos running it
++(`scripts/stack-release.sh:14`):
++
++```sh
++sudo -u mosaic -H env PATH=/opt/mosaic-stack/node-<v>/bin:/usr/sbin:/usr/bin:/sbin:/bin \
++  /srv/mosaic/src/mosaic-stack/scripts/stack-release.sh adopt <business> --instance dev --units external
++```
++
+@@ -211,0 +221,4 @@ Each upgrade, before `stack-upgrade.sh upgrade`:
++Only the first upgrade after adopt takes `--no-rehearsal`: append it to the upgrade command below.
++Adopt writes no backup, so omitting the flag then refuses `no-backup`. Subsequent upgrades omit it;
++when a backup exists, supplying it refuses `rehearsal-required`.
++
+@@ -246,0 +260 @@ step requiring Mos's go (`scripts/stack-copy.sh:3`); the install does not create
++The step runs under sudo's `secure_path`, so it sets its own PATH and umask.
+@@ -250,0 +265,2 @@ cd / || exit 1
++umask 077
++PATH=/opt/mosaic-stack/node-<v>/bin:/usr/sbin:/usr/bin:/sbin:/bin; export PATH
+```
+
+## Verification
+
+No matching test reads the changed lines, so the stop condition did not apply.
+No test run or slot is required under sage-3791. Verification is static: the
+required grep and positive control above, exact brief/base pins, scoped diff,
+and git diff --check. Reviewer Boyd and Sage own review/landing; no approval
+or landing is claimed here.
+
+Receipt correction: the first commit embedded ordinary diff context lines that
+contain a single space. git diff --check flagged those as trailing whitespace.
+This follow-up uses the exact zero-context diff instead. The run sheet is
+unchanged, no tests or Node commands run, and no amend or force-push is used.
+
+## F11 addition (sage-3805, mos-1549, ops-0275)
+
+The brief was extended after F7/F10 drafting and re-pinned at revision3733:
+canonical local commit a9bae9af2, same F7 section anchor, full verified blob
+0e684ef2103447dcc2013b6bf81b1c4ca5bbc0bd (requested pin0e684ef21034).
+Read using git show from the canonical checkout; no fetch, rebase or queue write
+is required. This new pin supersedes the earlier brief pin for this follow-up.
+
+Defect: a precheck one second after unit start found no bus.sqlite yet.
+Section10 now requires loopback healthz success after a unit start before any
+case2-precheck.sh, including section9's --library-status. It uses the same
+127.0.0.1:<port>/healthz curl form as scripts/case1-accept.sh:458. The subshell
+tries at most30 times, each curl capped at2 seconds, with1 second between failed
+attempts (at most89 seconds plus scheduling overhead). Exhaustion prints STOP
+and exits only the subshell. The instruction says to stop before precheck/adopt;
+it does not exit the interactive operator shell. The section9 library-gitea row
+now explicitly requires this bounded wait before --library-status. <port> is the
+installed Console unit's --port, not an assumed port or business name.
+No host action, test, Node command or credential access occurred.
+
+Required grep repeated for the widened scope:
+
+```sh
+git grep -n 'host-run-sheet' -- 'packages/*/tests/*' 'scripts/test-*.sh'
+# exit1, no matches
+git grep -n 'case2-precheck.sh' -- 'packages/*/tests/*' 'scripts/test-*.sh'
+# exit0, positive control; output follows
+packages/cli/tests/case1-accept.test.mjs:26:const PRECHECK = `${HOME}/.local/share/mosaic-stack/copies/${COPY}/scripts/case2-precheck.sh`;
+packages/cli/tests/case2-install.test.mjs:2:// scripts/case2-precheck.sh's library checks and --library-status mode. Brief:
+packages/cli/tests/case2-install.test.mjs:23:const PRECHECK = join(REPO, "scripts", "case2-precheck.sh");
+packages/cli/tests/case2-install.test.mjs:271:// ---- case2-precheck.sh, the library profile (D6a) ----
+packages/cli/tests/case2-install.test.mjs:334:// ---- case2-precheck.sh --library-status (D6b) ----
+packages/cli/tests/case2-unit.test.mjs:2:// and scripts/case2-precheck.sh checks the host before they start. Brief: docs/plans/2026-10-20_case2-rows.md
+packages/cli/tests/case2-unit.test.mjs:20:const PRECHECK = join(REPO, "scripts", "case2-precheck.sh");
+packages/cli/tests/case2-unit.test.mjs:588:// ---- case2-precheck.sh ----
+```
+
+No test reads the changed run-sheet lines; the stop condition does not apply.
+No test run is needed under the docs-only brief. Static verification checks both
+locations, retry limit/timeout, the loopback URL, unchanged F7/F10 and scoped diff.
+
+F11 delta against d9400f0d3 (git diff --unified=0):
+
+```diff
+diff --git a/docs/guides/host-run-sheet.md b/docs/guides/host-run-sheet.md
+index 96fd4f363..e9fa87f24 100644
+--- a/docs/guides/host-run-sheet.md
++++ b/docs/guides/host-run-sheet.md
+@@ -322 +322 @@ file with `stat -c '%U %a %n' PATH`, never `cat`. `<business>` is the host's bus
+-| `/srv/mosaic/.config/mosaic-dev/secrets/<business>/` | `library-gitea` | 0600 | mosaic | library | `case2-precheck.sh --business <business> --library-status`, after the bus is up: `library-last-error library-credential-missing` until it's placed, then `library <project> last fetched ...` |
++| `/srv/mosaic/.config/mosaic-dev/secrets/<business>/` | `library-gitea` | 0600 | mosaic | library | After a unit start, wait for loopback `/healthz` with the bounded retry in section 10 before `case2-precheck.sh --business <business> --library-status`: `library-last-error library-credential-missing` until it's placed, then `library <project> last fetched ...` |
+@@ -357,0 +358,16 @@ None by hand. I2's `case2-unit.sh` enables both units, starts the bus, then the
++After a unit start, wait for the Console's loopback `/healthz` to succeed before running
++`case2-precheck.sh`, including `--library-status` in section 9. Replace `<port>` with the installed
++Console unit's `--port`. This retry is bounded to 30 attempts, each with a 2-second timeout, with
++1 second between failed attempts. If it prints STOP, stop here; do not run the precheck or adopt.
++
++```sh
++(
++  attempts=0
++  until curl -fsS --max-time 2 -o /dev/null 'http://127.0.0.1:<port>/healthz'; do
++    attempts=$((attempts + 1))
++    [ "$attempts" -lt 30 ] || { echo "STOP: loopback healthz did not become ready; do not continue" >&2; exit 1; }
++    sleep 1
++  done
++)
++```
++
+```

agents/goldie/README.md

@@ -0,0 +1,9 @@
+# Goldie
+
+Builder seat, Codex gpt-6.1-sol, started by Sage under mos-1542 and mos-1546. Owns F8 and F9, the library persona
+import in `scripts/case2-install.sh` (#1818), for the 433 Run B rerun.
+
+No launcher in this directory. The seat runs as a T3 thread and works in its own worktree. It has no credentials of its
+own; it pushes only its own `goldie/*` branches through the repository credential helper (mos-0981), never `refactor`,
+`main` or another seat's branch. Claude seats orchestrate and review the install path (mos-1542 rule 4). Registered by
+Sage on 2026-10-23 so the queue can name the seat as row owner (store.mjs isSeatDir).

agents/goldie/work/queue-322/BUILD.md

@@ -0,0 +1,69 @@
+# Row 322 / #1818 — F8 and F9
+
+Goldie, 2026-10-23. Branch goldie/row322, base 833ec1cc8d7c11842efb82e57c1a0b256c8d22d7.
+Brief: docs/plans/2026-10-23_host-fixes-1816-brief.md, F8/F9 section at 7333f94ba9cf.
+Issue #1818 is supplied by Sage; no new issue is needed. Reviewer Morgana; Sage owns landing/full gate.
+
+## Implementation and authority
+
+F8 runs the importer from `$COPIES/$COMMIT/scripts/case2-persona-import.mjs`. This uses Node's normal ESM resolution, finding yaml beside the copy and the relative harness module in that same commit. It avoids a custom loader or ambient resolution setting. The copy closure already includes harness/src and business/src, but omitted the importer itself; COPY_PATHS now includes that one script. No new dependency or dependency version change.
+
+F9 selects the first line beginning with an Error type (including TypeError etc.) or ERR_, falling back to the last line for the importer's handled refusal. awk exits after the first matching line and emits exactly one line, keeping the stack and version banner out of the install refusal. Anchoring avoids selecting Node's earlier `throw new ERR_MODULE_NOT_FOUND(...)` source excerpt instead of the actual Error line.
+
+Mos-1550 authorizes the copy-path addition, setup-only additions to world(t), and adding the single new filename to any existing copy-file pin. Existing test edits outside the appended row-322 block:
+
+- case2-install.test.mjs: the fake stack-copy setup gains a loop copying the importer, harness bundle.mjs/tools.mjs, and business vocabulary.mjs; it copies yaml into the fake copy's node_modules. The existing last template-string line is extended to add those setup commands. No existing assertion changes.
+- packages/webui/tests/pinned-copy.test.mjs:76: the scripts file-list assertion gains only `case2-persona-import.mjs`, in sorted order. No other change in this test.
+
+The new append-only block builds a scratch clone outside the repository with no node_modules, real installer and importer, stubbed bootstrap/business validation, and a copy with the real importer, relative module closure and yaml. F8 checks installed persona bytes/mode; F9 removes yaml from that copy to produce a real uncaught Node missing-package error, then checks one refusal line carries the cause and no stack/banner. Existing tests missed F8 because the real importer ran from the development checkout, which has yaml installed; the fake copy held only scripts/mosaic. The old fixtures thus never exercised the dependency boundary or an uncaught importer load error.
+
+## Class check and copy-test audit
+
+Before change:
+
+```
+grep -n 'node "$REPO/' scripts/case2-install.sh scripts/case2-precheck.sh scripts/stack-copy.sh
+scripts/case2-install.sh:185:        out="$(node "$REPO/scripts/case2-persona-import.mjs" ...
+```
+
+After change: same grep has no hits (exit 1). Direct clone-side .mjs entry points in the three scripts with a bare package import: **scripts/case2-persona-import.mjs → yaml**, moved to the copy by F8. No other direct entry point imports a bare package. Precheck's inline Node programs dynamically import cli/src/config.mjs, business/src/index.mjs, library/src/index.mjs and cli/src/cli.mjs; those entry files import builtins/relative modules only. Library reader.mjs uses its own front-matter parser and has no yaml import. stack-copy sources instance.sh, whose mosaic-config.mjs imports builtins only. Installer bootstrap likewise runs mosaic-config.mjs, and business validation runs business/src/cli.mjs, also no direct bare imports. No other product fix made.
+
+Audit commands (read-only):
+
+```
+rg -n 'COPY_PATHS|copy carries|copy.*(hash|sha256|files|file set)|sha256.*copy' packages/*/tests/* scripts/test-*.sh
+rg -n 'COPY_PATHS|stack-copy\.sh|readdirSync|sha256|deepEqual' packages/webui/tests/pinned-copy.test.mjs packages/cli/tests/stack-copy.test.mjs
+```
+
+Relevant hits: cli/tests/stack-copy.test.mjs:35-47 checks harness file closure (positive control: COPY_PATHS at :36), :52 asserts a required-file subset, :248-264 computes hashes/modes and compares bundle/check-out copy trees dynamically, :274 compares another bundle tree. None freezes a complete path list/hash. webui/tests/pinned-copy.test.mjs:75 pins top-level entries (unchanged), :76 pins scripts' exact file set (approved one-path update). Other readdir hits in those files check cleanup/existing-target behavior, not COPY_PATHS identity. Broad initial grep also hits business/tests/helpers.mjs:33, cli/tests/stack-upgrade.test.mjs:295, webui/tests/views.test.mjs:172, cli/tests/stack-release.test.mjs:1751 and :1987; inspected contexts are unrelated comments/UI copy or different fixture copies. No scripts/test-*.sh hit for these path/hash patterns.
+
+## Verification plan
+
+Pending Sage CLEAR before any test: run new tests on fixed build first, then whole case2-install.test.mjs, whole stack-copy.test.mjs and webui pinned-copy.test.mjs. Demonstrate expected failure at 094124b4e with new block applied (baseline importer path), and kill the `$REPO` reversion mutant. Record all outcomes. First unexpected new-test red is recorded/reported under mos-1272; existing-test edits outside mos-1550 or a second unexpected red stop for Sage.
+
+No tests run yet. No commit/push yet. No host changes, live state, secrets, deploy or release actions.
+
+## Verified results — sage-3808 CLEAR, 2026-10-23T22:47Z
+
+All runs were serialized with `TMPDIR=/mnt/storage/scratch/tmp/goldieuQ2664` (created by `mktemp -d /mnt/storage/scratch/tmp/goldieXXXXXX`), using `timeout -k 10 90` for focused tests and `timeout -k 10 180` for whole files/negative-proof driver. Node v26.8.1. Dependencies were read through the ignored, uncommitted node_modules symlink approved by sage-3804; each scratch clone had no node_modules. No /tmp fixture was used.
+
+| Run | Result | Evidence |
+| --- | --- | --- |
+| New tests, first run | 2/2 pass, exit 0 | test-new.log |
+| Whole case2-install.test.mjs | 26/26 pass, exit 0 | test-install.log |
+| Whole stack-copy.test.mjs | 18/18 pass, exit 0 | test-copy.log |
+| Whole webui pinned-copy.test.mjs | 10/10 pass, exit 0 | test-pinned-copy.log |
+| Installer from 094124b4e, new tests | 0/2 pass, exit 1, expected red | baseline-094124b4e.log |
+| F8 mutant: restore `$REPO` importer path only | 0/1 pass, exit 1, killed | mutant-F8.log |
+| F9 mutant: restore tail-only refusal only | 0/1 pass, exit 1, killed | mutant-F9.log |
+| Fixed installer restored, new tests rerun | 2/2 pass, exit 0 | test-restored.log |
+
+The baseline proof temporarily installs the exact installer bytes from `git show 094124b4e:scripts/case2-install.sh`, retaining the newly appended tests and approved fixture setup. Relevant installer/importer/copy/test source paths have no changes between N and the branch base 833ec1cc8 (`git diff 094124b4e 833ec1cc8 --` those paths is empty). It is a targeted baseline proof, not a full checkout/suite run at N. Baseline failures show `persona-import: Node.js v26.8.1`; the F8-only mutant exposes the underlying `Error [ERR_MODULE_NOT_FOUND]: Cannot find package 'yaml'` from the scratch clone. F9-only mutant again prints the banner. All expected failures are deliberate acceptance checks; no unexpected first-run red occurred.
+
+negative-proof.py records each run, checks the expected failure count/exit, restores in a finally block, and verifies fixed installer bytes after each run. Restored SHA-256 each time: `c23a08324528cc29895014093c661948a5c8eb40316c7b2e21c6f833cf5d6462`. Final focused green confirms restoration. git diff --check passed.
+
+`git diff --numstat -- packages/cli/tests/case2-install.test.mjs`: **57 additions, 1 deletion**. Outside the new appended block, original line 70's template-string close moves after four new setup lines: the existing mkdir/empty mosaic/echo command is unchanged, followed by the `for file ...` line, mkdir/cp loop body, `done`, and mkdir/cp yaml line. All pre-existing assertions remain byte-for-byte unchanged. The only pre-existing assertion edit anywhere is the expressly approved one-filename addition at packages/webui/tests/pinned-copy.test.mjs:76.
+
+Sage's full package/script gate and Morgana's review remain pending. This builder ran only the approved three whole test files and targeted acceptance checks. Sage retains queue transition/review posting and integration authority; no PR was created by Goldie.
+
+Evidence log lines have trailing whitespace removed for git diff --check; test content and outcomes are unchanged.

agents/goldie/work/queue-322/MANIFEST.sha256

@@ -0,0 +1,4 @@
+c23a08324528cc29895014093c661948a5c8eb40316c7b2e21c6f833cf5d6462  scripts/case2-install.sh
+cb1a4fef997b9696406e324878d7a0e5181892622162c9ce77a8fd625b5cd59a  scripts/stack-copy.sh
+a7b02af4b5df92e6d727fe8c67565ea0483d6d57531765dee68f54fd97e7c23f  packages/cli/tests/case2-install.test.mjs
+2574b414459f4cfb187de64b9a2fbe34ab4b4d64f582caae8baf6a1985e8cd3c  packages/webui/tests/pinned-copy.test.mjs

agents/goldie/work/queue-322/baseline-094124b4e.log

@@ -0,0 +1,70 @@
+TAP version 13
+# Subtest: row 322 F8: library personas install from the copy with no clone node_modules
+not ok 1 - row 322 F8: library personas install from the copy with no clone node_modules
+  ---
+  duration_ms: 90.885888
+  type: 'test'
+  location: '/home/jwoltje/.t3/worktrees/mosaic-stack/goldie-row322/packages/cli/tests/case2-install.test.mjs:451:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    case2-install: config /mnt/storage/scratch/tmp/goldieuQ2664/case2-install-rQM4ct/home/.config/mosaic-dev/config.json
+    case2-install: copy /mnt/storage/scratch/tmp/goldieuQ2664/case2-install-rQM4ct/home/.local/share/mosaic-stack/copies/cccccccccccccccccccccccccccccccccccccccc
+    case2-install: refused: persona-import: Node.js v26.8.1
+
+
+    1 !== 0
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 0
+  actual: 1
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/goldie-row322/packages/cli/tests/case2-install.test.mjs:454:10)
+    Test.runInAsyncScope (node:async_hooks:226:14)
+    Test.run (node:internal/test_runner/test:1402:25)
+    Test.start (node:internal/test_runner/test:1262:17)
+    startSubtestAfterBootstrap (node:internal/test_runner/harness:387:17)
+  ...
+# Subtest: row 322 F9: importer refusal keeps the error line rather than the Node banner
+not ok 2 - row 322 F9: importer refusal keeps the error line rather than the Node banner
+  ---
+  duration_ms: 91.239243
+  type: 'test'
+  location: '/home/jwoltje/.t3/worktrees/mosaic-stack/goldie-row322/packages/cli/tests/case2-install.test.mjs:462:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    The input did not match the regular expression /persona-import: Error \[ERR_MODULE_NOT_FOUND\]: Cannot find package 'yaml'/. Input:
+
+    'case2-install: config /mnt/storage/scratch/tmp/goldieuQ2664/case2-install-O6VWs2/home/.config/mosaic-dev/config.json\n' +
+      'case2-install: copy /mnt/storage/scratch/tmp/goldieuQ2664/case2-install-O6VWs2/home/.local/share/mosaic-stack/copies/cccccccccccccccccccccccccccccccccccccccc\n' +
+      'case2-install: refused: persona-import: Node.js v26.8.1\n'
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected:
+  actual: |-
+    case2-install: config /mnt/storage/scratch/tmp/goldieuQ2664/case2-install-O6VWs2/home/.config/mosaic-dev/config.json
+    case2-install: copy /mnt/storage/scratch/tmp/goldieuQ2664/case2-install-O6VWs2/home/.local/share/mosaic-stack/copies/cccccccccccccccccccccccccccccccccccccccc
+    case2-install: refused: persona-import: Node.js v26.8.1
+
+  operator: 'match'
+  stack: |-
+    refused (file:///home/jwoltje/.t3/worktrees/mosaic-stack/goldie-row322/packages/cli/tests/case2-install.test.mjs:137:10)
+    TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/goldie-row322/packages/cli/tests/case2-install.test.mjs:469:3)
+    Test.runInAsyncScope (node:async_hooks:226:14)
+    Test.run (node:internal/test_runner/test:1402:25)
+    Test.processPendingSubtests (node:internal/test_runner/test:974:18)
+    Test.postRun (node:internal/test_runner/test:1542:19)
+    Test.run (node:internal/test_runner/test:1467:12)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  ...
+1..2
+# tests 2
+# suites 0
+# pass 0
+# fail 2
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 287.462723

agents/goldie/work/queue-322/mutant-F8.log

@@ -0,0 +1,37 @@
+TAP version 13
+# Subtest: row 322 F8: library personas install from the copy with no clone node_modules
+not ok 1 - row 322 F8: library personas install from the copy with no clone node_modules
+  ---
+  duration_ms: 90.468116
+  type: 'test'
+  location: '/home/jwoltje/.t3/worktrees/mosaic-stack/goldie-row322/packages/cli/tests/case2-install.test.mjs:451:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    case2-install: config /mnt/storage/scratch/tmp/goldieuQ2664/case2-install-bzVkal/home/.config/mosaic-dev/config.json
+    case2-install: copy /mnt/storage/scratch/tmp/goldieuQ2664/case2-install-bzVkal/home/.local/share/mosaic-stack/copies/cccccccccccccccccccccccccccccccccccccccc
+    case2-install: refused: persona-import: Error [ERR_MODULE_NOT_FOUND]: Cannot find package 'yaml' imported from /mnt/storage/scratch/tmp/goldieuQ2664/case2-install-bzVkal/clone/scripts/case2-persona-import.mjs
+
+
+    1 !== 0
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 0
+  actual: 1
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/goldie-row322/packages/cli/tests/case2-install.test.mjs:454:10)
+    Test.runInAsyncScope (node:async_hooks:226:14)
+    Test.run (node:internal/test_runner/test:1402:25)
+    Test.start (node:internal/test_runner/test:1262:17)
+    startSubtestAfterBootstrap (node:internal/test_runner/harness:387:17)
+  ...
+1..1
+# tests 1
+# suites 0
+# pass 0
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 194.231229

agents/goldie/work/queue-322/mutant-F9.log

@@ -0,0 +1,41 @@
+TAP version 13
+# Subtest: row 322 F9: importer refusal keeps the error line rather than the Node banner
+not ok 1 - row 322 F9: importer refusal keeps the error line rather than the Node banner
+  ---
+  duration_ms: 92.814376
+  type: 'test'
+  location: '/home/jwoltje/.t3/worktrees/mosaic-stack/goldie-row322/packages/cli/tests/case2-install.test.mjs:462:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    The input did not match the regular expression /persona-import: Error \[ERR_MODULE_NOT_FOUND\]: Cannot find package 'yaml'/. Input:
+
+    'case2-install: config /mnt/storage/scratch/tmp/goldieuQ2664/case2-install-6HcR0m/home/.config/mosaic-dev/config.json\n' +
+      'case2-install: copy /mnt/storage/scratch/tmp/goldieuQ2664/case2-install-6HcR0m/home/.local/share/mosaic-stack/copies/cccccccccccccccccccccccccccccccccccccccc\n' +
+      'case2-install: refused: persona-import: Node.js v26.8.1\n'
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected:
+  actual: |-
+    case2-install: config /mnt/storage/scratch/tmp/goldieuQ2664/case2-install-6HcR0m/home/.config/mosaic-dev/config.json
+    case2-install: copy /mnt/storage/scratch/tmp/goldieuQ2664/case2-install-6HcR0m/home/.local/share/mosaic-stack/copies/cccccccccccccccccccccccccccccccccccccccc
+    case2-install: refused: persona-import: Node.js v26.8.1
+
+  operator: 'match'
+  stack: |-
+    refused (file:///home/jwoltje/.t3/worktrees/mosaic-stack/goldie-row322/packages/cli/tests/case2-install.test.mjs:137:10)
+    TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/goldie-row322/packages/cli/tests/case2-install.test.mjs:469:3)
+    Test.runInAsyncScope (node:async_hooks:226:14)
+    Test.run (node:internal/test_runner/test:1402:25)
+    Test.start (node:internal/test_runner/test:1262:17)
+    startSubtestAfterBootstrap (node:internal/test_runner/harness:387:17)
+  ...
+1..1
+# tests 1
+# suites 0
+# pass 0
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 200.516406

agents/goldie/work/queue-322/negative-proof.log

@@ -0,0 +1,6 @@
+baseline-094124b4e: exit 1, expected failures 2
+restored sha256 c23a08324528cc29895014093c661948a5c8eb40316c7b2e21c6f833cf5d6462
+mutant-F8: exit 1, expected failures 1
+restored sha256 c23a08324528cc29895014093c661948a5c8eb40316c7b2e21c6f833cf5d6462
+mutant-F9: exit 1, expected failures 1
+restored sha256 c23a08324528cc29895014093c661948a5c8eb40316c7b2e21c6f833cf5d6462

agents/goldie/work/queue-322/negative-proof.py

@@ -0,0 +1,39 @@
+"""Run row-322 expected-red proofs, always restoring installer bytes."""
+import hashlib
+import os
+from pathlib import Path
+import subprocess
+
+root = Path(__file__).resolve().parents[4]
+installer = root / 'scripts/case2-install.sh'
+logs = Path(__file__).resolve().parent
+fixed = installer.read_bytes()
+baseline = subprocess.check_output(['git', 'show', '094124b4e:scripts/case2-install.sh'], cwd=root)
+f8 = fixed.replace(b'$COPIES/$COMMIT/scripts/case2-persona-import.mjs', b'$REPO/scripts/case2-persona-import.mjs')
+assert f8 != fixed
+old_error = baseline.splitlines()[185]
+new_error = fixed.splitlines()[185]
+f9 = fixed.replace(new_error, old_error)
+assert f9 != fixed
+try:
+    for label, source, pattern, failures in [
+        ('baseline-094124b4e', baseline, 'row 322', 2),
+        ('mutant-F8', f8, 'row 322 F8', 1),
+        ('mutant-F9', f9, 'row 322 F9', 1),
+    ]:
+        installer.write_bytes(source)
+        result = subprocess.run([
+            'timeout', '-k', '10', '90', 'node', '--test', '--test-reporter=tap',
+            f'--test-name-pattern={pattern}', 'packages/cli/tests/case2-install.test.mjs',
+        ], cwd=root, env=os.environ, text=True, stdout=subprocess.PIPE, stderr=subprocess.STDOUT)
+        (logs / f'{label}.log').write_text(result.stdout)
+        print(f'{label}: exit {result.returncode}, expected failures {failures}', flush=True)
+        assert result.returncode == 1, result.stdout
+        assert f'# fail {failures}\n' in result.stdout, result.stdout
+        assert 'ERR_MODULE_NOT_FOUND' in result.stdout, result.stdout
+        installer.write_bytes(fixed)
+        assert installer.read_bytes() == fixed
+        print('restored sha256 ' + hashlib.sha256(fixed).hexdigest(), flush=True)
+finally:
+    installer.write_bytes(fixed)
+    assert installer.read_bytes() == fixed

agents/goldie/work/queue-322/test-copy.log

@@ -0,0 +1,26 @@
+✔ a copy carries every file the harness modules read from it (891.310838ms)
+✔ shared copy: npm ci, pushed reachability, readonly/existing copy, webui delegation (537.82282ms)
+✔ wrapper preserves Q81 lease and marker, rejects foreign/symlink; check uses effective roots (713.621566ms)
+✔ row 190 N6: check --instance passes only when the wrapper exports the instance's MOSAIC_CONFIG (657.082198ms)
+✔ bus unit copy/pm pins, install refuses all busy states and failed reads, drop-in refusal (799.380065ms)
+✔ missing package manifest refuses before npm; npm failure removes the unpublished temp copy (499.872009ms)
+✔ real pinned install loads bus and Console; same-copy mosaic talk passes proof, other trees refuse (3824.368055ms)
+✔ bus status reads effective copy/pm/drop-ins without writes; check refuses an overridden ExecStart (668.500662ms)
+✔ drop-ins in either override field and malformed metadata refuse; uninstall also checks --no-reload (399.490955ms)
+✔ install never shows a template name on systemd 261; template drop-ins still refuse (318.110324ms)
+✔ unlisted instance drop-in is found in another unit lookup directory; path discovery errors refuse (347.788225ms)
+✔ inherited mosaic-.service.d override refuses without changing the unit (403.142763ms)
+✔ inherited service.d override refuses without changing the unit (384.337811ms)
+✔ inherited drop-in unreadable directory or file refuses before writing (370.630432ms)
+✔ row 232: copy --bundle copies a SHA the bundle's refactor reaches, byte-identical to copy SHA, and refuses the rest (2257.394077ms)
+✔ row 232: wrapper --create writes the first wrapper only, the same bytes wrapper ID writes, and refuses over any file (779.276348ms)
+✔ row 232: check --units external reads the system units, the default reads the user units (641.792634ms)
+✔ Vikunja 614: bundle and checkout copy leave an unreadable caller directory before find (1047.143772ms)
+ℹ tests 18
+ℹ suites 0
+ℹ pass 18
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 15638.417631

agents/goldie/work/queue-322/test-install.log

@@ -0,0 +1,34 @@
+✔ the library install writes the business file, personas and slot dir, makes the copy and starts nothing (258.707115ms)
+✔ a library re-run passes and leaves every file as it was (391.278216ms)
+✔ a re-run refuses business-file-differs and leaves the file unchanged (274.686097ms)
+✔ a re-run refuses persona-differs when an installed persona isn't the staged one, and writes nothing (274.084555ms)
+✔ the factory install writes no library mapping, persona or slot dir (175.791904ms)
+✔ the factory install refuses a library project and bus.tester off, before anything is written (72.301025ms)
+✔ the library install refuses bus.tester on and a persona var in the input (76.469642ms)
+✔ the install refuses root, a business id mismatch, another --home and a config dir with group bits (57.89739ms)
+✔ the library install needs --personas (5.495139ms)
+✔ a validate refusal removes the business file this run wrote (230.311754ms)
+✔ N4: a validate refusal on a re-run leaves the matching business file in place, byte for byte (397.123924ms)
+✔ a clean library host passes the precheck with no mirror yet (404.408689ms)
+✔ the library precheck refuses a persona file at 0644 (399.17119ms)
+✔ the library precheck refuses a persona whose digest isn't persona.sha256 (402.47159ms)
+✔ the library precheck refuses a persona dir with group bits (390.108413ms)
+✔ the library precheck refuses a business file at 0644 (402.829663ms)
+✔ the library precheck refuses a changes.jsonl at 0644 (573.861228ms)
+✔ the library precheck refuses a Discord binding (386.405794ms)
+✔ --library-status refuses library-mirror-missing before the bus has made the mirror (309.213305ms)
+✔ --library-status refuses library-never-synced on a fresh mirror (330.922116ms)
+✔ --library-status names a recorded lastError before the null lastFetch it leaves (N3) (335.576032ms)
+✔ --library-status prints each R-problem's path as an escaped JSON string, then the count, and passes (379.69927ms)
+✔ --library-status takes no --profile (5.544173ms)
+✔ Vikunja 614: install preserves the explicit notifier decision bytes and mode and creates none when absent (465.015156ms)
+✔ row 322 F8: library personas install from the copy with no clone node_modules (139.662489ms)
+✔ row 322 F9: importer refusal keeps the error line rather than the Node banner (95.452368ms)
+ℹ tests 26
+ℹ suites 0
+ℹ pass 26
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 7340.739711

agents/goldie/work/queue-322/test-new.log

@@ -0,0 +1,10 @@
+✔ row 322 F8: library personas install from the copy with no clone node_modules (178.794273ms)
+✔ row 322 F9: importer refusal keeps the error line rather than the Node banner (101.739988ms)
+ℹ tests 2
+ℹ suites 0
+ℹ pass 2
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 394.59041

agents/goldie/work/queue-322/test-pinned-copy.log

@@ -0,0 +1,18 @@
+✔ copy writes the Console paths at the full id, read-only, and leaves an existing copy alone (872.104795ms)
+✔ copy refuses a commit off refactor, an unknown one, a worktree and a bad copies directory (1245.376299ms)
+✔ copy writes nothing when an archived path is missing at the commit (409.033887ms)
+✔ a copy that loses the rename race leaves no read-only temp directory behind (548.743561ms)
+✔ a copy whose rename fails with no target refuses, writes no copy and leaves no temp directory (534.468073ms)
+✔ a copy that meets a target holding files says exists: and moves nothing into it (541.303916ms)
+✔ a copy that meets an empty target directory replaces it by rename, not by moving into it (547.966283ms)
+✔ serve runs from a copy: /healthz 200, the config check, roles and RELEASE from the copy, the queue from --checkout (856.865742ms)
+✔ serve refuses a --checkout that is not an absolute directory path (274.552284ms)
+✔ consoleReads runs the queue read under queueRoot and reads RELEASE under root (49.311324ms)
+ℹ tests 10
+ℹ suites 0
+ℹ pass 10
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 6003.825092

agents/goldie/work/queue-322/test-restored.log

@@ -0,0 +1,10 @@
+✔ row 322 F8: library personas install from the copy with no clone node_modules (148.410784ms)
+✔ row 322 F9: importer refusal keeps the error line rather than the Node banner (94.205865ms)
+ℹ tests 2
+ℹ suites 0
+ℹ pass 2
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 344.990842

agents/goldie/work/queue-323/BUILD.md

@@ -0,0 +1,141 @@
+# Row 323 / #1819 — Case 1 factory business file
+
+Goldie, 2026-10-23. New isolated worktree `/home/jwoltje/.t3/worktrees/mosaic-stack/goldie-row323`, branch `goldie/row323`, base local refactor `da537e7d159be0bf39a36eaaa65cd16c20373b72` (descends from brief commit 68f3bded5). Row322 worktree remains unchanged.
+
+## Sources and input boundary
+
+Read brief docs/plans/2026-10-23_case1-business-file-brief.md, row195 DESIGN.md (host values sections1/2/6/7), installer factory HELPER, precheck profile checks, case1-accept F3/F7, business loader and credentials/launch checks, role definitions and business fixture helpers. No host access or credential read.
+
+DESIGN fixes business `mosaic-stack`, OS user mosaic, home `/srv/mosaic`, config `/srv/mosaic/.config/mosaic-dev`, data `/srv/mosaic/.mosaic-dev`, Claude only, tester on. Human id is explicitly left to the go (:82/:300), no project root is named. Business loader requires at least one project/root (:261-275), tracker.sync bot/botId/Vikunja credential reference (:85-94), launch.models and nonempty launch.instances excluding launcher (:186-193). These host/business values are not supplied by DESIGN. Per sage-3815 and brief, stop configuration rather than guess. Asked Sage in goldie-0008 for exact values.
+
+Recommended minimal role set: chief-of-staff instance chief with claude-code harness plus credential-free assistant solely because launch.instances must contain a declared non-launcher. Both arbiters may reference chief; no additional PM/CTO role credential required. This remains a recommendation pending input, not a written host config.
+
+Literal top-level `library` is ignored by the installer plan and rejected later by business validation as unsupported key; a library project is refused by the factory plan as profile-library-business. Asked Sage which intended refusal assertion to use; recommend covering both through their real paths without a product change.
+
+## Authority and status
+
+Sage-3815 explicitly authorizes claimant queue moves despite brief's generic no-queue-writes boundary. Claim op goldie-0323-start-1 retries every20s on lock contention per sage-3814; no lock touched. Tests and mutant require new Sage CLEAR; none run. No business JSON or test written yet. No commit/push yet. BUILD/SESSIONS/BUILD-LOG notes record investigation only.
+
+## Rulings and static blocker, 23:02Z
+
+Sage-3820 accepts chief + credential-free assistant because launch.instances must be nonempty and exclude chief, both arbiters chief. It accepts literal library-key rejection through final real business validation and library-project rejection through factory planning, no production change. Sage-3822 supplies project mosaic-stack at /srv/mosaic/src/mosaic-stack and model claude-opus-5-5 (provider/thinking to be sourced). Sage-3823 relays Mos-1554: human jason, no real tracker bot, token path must be absent and never created; stop immediately if this refuses boot/launch.
+
+Static trace proves refusal, reported to Sage in goldie-0009:
+
+- cli/src/config.mjs:127 loads business. trackerFor :60 returns null without tracker.baseUrl; :137-138 suppresses only config.trackers, not business tracker.sync.
+- bus/src/runtime.mjs:131 registers business tracker.sync credentials under business/@sync; :157 constructs Credentials regardless of config.trackers.
+- bus/src/credentials.mjs:134-139 eagerly reads every reference. Ordinary ref.file lstat/realpath failure at :225-228 throws credential-file during boot, before chief can launch.
+- The business credential check warns for unset env, but bus/src/credentials.mjs:268 sends undefined to #format; :278 rejects credential-format. An env reference is not a bypass and is outside the brief's file requirement.
+- Install refuses even earlier: business/src/cli.mjs:84-88 checks tracker.sync references, business/src/credentials.mjs:78-83 records a missing ordinary file as a problem, CLI :95-97 exits2. case2-install.sh:217-220 wraps validate refusal and removes the business file it created.
+- business/src/business.mjs:41 requires tracker bot names to begin bot-, :42 requires positive botId. Mos's illustrative no-bot-mosaic-stack-sync would fail that shape; a bot-no-bot marker still cannot solve the absent-file refusal.
+
+Status: real fail-closed product boundary. No business JSON, test, placeholder credential, host action or tests written/run. Await Sage/Mos resolution; do not bypass by inventing a token or expanding product scope. Only investigation notes exist in this worktree. Claim attempts continue separately under the queue window's explicit retry instruction.
+
+## Resumed after Q247 landing — sage-3859
+
+Current base is pushed `dd6cb5872b972bcabb99b82589b2905e4e47dd3e`. Preserved earlier investigation as a notes-only commit, then rebased onto that tip; only append-only BUILD-LOG/SESSIONS conflicts, resolved retaining the entire landed files and appending this row's original suffix. Earlier equivalent local refactor doc commits were skipped by git as already applied. No other row323 source existed before this resume.
+
+Q247 removes the static blocker: this file now omits tracker entirely, with no dummy bot/token/reference. No tracker credential or token file is required or created. The separate Claude session login file remains the operator's run-sheet step, as described in DESIGN section3; this document contains no credential value or reference, and this work reads no credential.
+
+Approved values and minimal role set:
+
+- business mosaic-stack, factory bus.tester true, no library key/project (DESIGN sections1/2/7).
+- human jason (Mos-1554, sage-3823); project mosaic-stack at /srv/mosaic/src/mosaic-stack (sage-3822).
+- chief-of-staff chief and credential-free assistant, both arbiters chief, launch.by chief, launch.instances [assistant] (sage-3820). The loader requires nonempty launch.instances excluding the launcher (business.mjs:186-191), so a chief-only document cannot load. No other role is needed.
+- Both roles use claude-code; plugins.harness enables only claude-code. No pi route or fallback.
+- chief model claude-opus-5-5 is Sage's explicit choice (sage-3822). Provider anthropic/model claude-opus-5-5 is the repository model mapping at packages/business/README.md:185. There is no separate per-model default thinking catalog in the implementation: choose high from the Claude harness's supported LEVELS at packages/plugins/harness/claude-code/index.mjs:28, following the existing chief route convention at packages/cli/tests/session-launch.test.mjs:83. Both roles use that one declared model/effort; no extra model or capacity policy is introduced.
+
+One new file packages/business/tests/case1-business-file.test.mjs has seven cases. It first loads the shipped JSON bytes unchanged from a temporary business-file location (loader checks shape, no host path access). Its runtime/CLI/install cases copy the document into a scratch input and replace only the project root with a scratch fixture root, per sage-3820's instruction to use test fixture paths. The real factory installer takes that input via --business-file and uses its real bootstrap/business validation, with only stack-copy stubbed (no clone/install/network). The boot case uses bootConfig + actual startBroker and asserts no tracker config or credential status. Negative cases cover bus.tester false (bus-tester-off), literal library (final validate unsupported key, per sage-3820), and a library project (factory plan profile-library-business). No pre-existing test changed.
+
+The new tester-switch mutant flips only bus.tester in the shipped JSON, targets the new exact-document assertion, then restores/checks bytes in finally. Prepared but not run. Tests and mutant remain held until Sage CLEAR; only syntax/diff/static JSON checks have run. Row323 claimant is still in-progress from rev3749.
+
+## Field provenance and pre-test commit — sage-3861
+
+Sage-3861 CLEAR explicitly requires committing the draft before any run, so test counts attach to a commit. This is a specific exception to the usual green-before-commit rule. Until recorded below, this commit is untested. No old test is modified.
+
+| Document field | Value and source |
+| --- | --- |
+| businessVersion | 1, business loader's version requirement (business/src/business.mjs:233). Schema value, not a mos-1554 host choice. |
+| id | mosaic-stack, row195 DESIGN section7 (sage-1813), restated by row323 brief. |
+| human | jason, mos-1554 relayed by sage-3823. |
+| arbiters.delivery / arbiters.technical | chief / chief, sage-3820's explicit minimal-role ruling; both reference the chief-of-staff definition. |
+| projects.mosaic-stack.root | /srv/mosaic/src/mosaic-stack, sage-3822's explicit project-id/root decision. DESIGN supplied /srv/mosaic as home but did not supply this root. |
+| vars.bus.tester | true, DESIGN section2 factory profile and installer bus-tester-off requirement. |
+| plugins.harness | [claude-code], brief's Claude-only/P19 mos-0865 boundary and DESIGN section3. |
+| roles.chief.definition | chief-of-staff, brief/roles/chief-of-staff.json; no credential or tracker bot. |
+| roles.assistant.definition | assistant, sage-3820 acceptance of this one extra credential-free role, required because launch.instances must be nonempty and exclude chief. |
+| roles.*.vars.harness | claude-code for both; same Claude-only rule, no fallback route. |
+| roles.*.vars.model | claude-opus-5-5 for both, chief model explicitly chosen in sage-3822; reuse the single declared model for assistant to avoid adding another model decision. |
+| roles.*.vars.thinking | high, supported effort in packages/plugins/harness/claude-code/index.mjs:28; existing chief convention packages/cli/tests/session-launch.test.mjs:83. The repository has no per-model default-effort catalog; this is an explicit supported-convention choice, not an invented catalog default. |
+| launch.by | chief, brief and F7's requirement to name the chief launch; sage-3820. |
+| launch.instances | [assistant], sage-3820 and business.mjs:186-191's nonempty/non-launcher rule. |
+| launch.models.claude-opus-5-5.provider / model | anthropic / claude-opus-5-5, repository model mapping packages/business/README.md:185 and sage-3822. The model id is also the map key so no extra alias is introduced. |
+| Omitted tracker / credentials / library | Q247/mos-1555 and sage-3859 supersede mos-1554's proposed absent-token placeholder; no bot, token path, credential value or library project/key is present. |
+
+Only human=jason is a literal field value supplied by mos-1554. The no-bot intent also comes from mos-1554; Q247 implements it by omission. Other fields deliberately cite the actual design/schema/Sage source rather than attributing them to mos-1554.
+
+Planned runs under sage-3861: new file whole; business suite whole; CLI suite whole; tester-switch mutant; restored new file whole. Fresh scratch TMPDIR and timeout-k10 for each, one process at a time. Existing-test red or any additional old-test edit stops work; first-run new red is recorded and reported. Push remains own branch goldie/row323 after the test sequence/report evidence is concrete.
+
+## First slot result — stopped on existing CLI test red
+
+Committed draft before any test: `571376c30e77f46bbe41069633390cc001f57ac8` (base dd6cb5872b972bcabb99b82589b2905e4e47dd3e), per sage-3861. Fresh TMPDIR `/mnt/storage/scratch/tmp/goldielKvBJv`, allocated by mktemp under the mandated scratch parent. All runs serialized with timeout -k 10. Source and test bytes remained unchanged throughout.
+
+| Run | Command after TMPDIR/timeout | Outcome |
+| --- | --- | --- |
+| New whole file | timeout -k 10 180 node --test --test-reporter=tap packages/business/tests/case1-business-file.test.mjs | 7/7 pass, 0 fail/skip/cancel; test-new.log |
+| Whole business suite | timeout -k 10 600 node --test --test-reporter=tap --test-concurrency=1 packages/business/tests/ | 261/261 pass, 0 fail/skip/cancel; test-business-suite.log |
+| Whole CLI suite | timeout -k 10 1200 node --test --test-reporter=tap --test-concurrency=1 packages/cli/tests/ | Interrupted on existing-test failure; 631 top-level passes/1 failure recorded before termination, no final full-suite totals; test-cli-suite.log |
+| Tester-switch mutant | Not run | Stop rule reached first |
+| Restored new file | Not run | Mutant not run; source already matches manifest |
+
+Existing failure: CLI test579, packages/cli/tests/revoke-window.test.mjs:170: `row 306 REQ-LAUNCH-1 R4 a revoked run whose call lands before the SIGTERM ends stopped/0; a run the human stopped in the same window still ends session-invalid/22`. After 20111.683685ms it failed `no RESULT on 61c275d4-42f9-4a92-8a43-1ae94c25b730`, ask assertion at167, Promise.all index1, test at194. This file has no changes from base. No cause or flakiness claim is established.
+
+On observing the red in the suite log, sent SIGTERM to this run's verified timeout process; the suite ended exit1 with `Interrupted while running: packages/cli/tests/stack-release-external.test.mjs` (it had progressed while output was being inspected). One remaining process was positively identified by an argument under this exact scratch TMPDIR and cleaned with SIGTERM; no live host process/state touched. No further tests or reruns, no old test changes.
+
+Reported immediately to Sage as goldie-0016, returned slot, requested the bounded investigation/retry ruling. JSON/new-test manifest still verifies. Candidate is not verified/ready for review and has not been pushed as such. These failure notes/logs remain local evidence until Sage's ruling; no mutant acceptance claim.
+
+## Mos-1560 isolated rerun — second red, stopped
+
+Sage-3864 CLEAR authorized three whole-file revoke-window runs on unchanged571376c30, followed only on three passes by CLI/mutant/restored runs. Every run had to begin with date -u, uptime and the last line of sage-busy-now.sh. Only run1 occurred; it failed, reaching the second-red stop condition.
+
+Log: revoke-window-run-1.log. Exact start/load lines:
+
+```
+Sat Oct 24 00:24:22 UTC 2026
+ 19:24:22 up 10 days, 10:44,  2 users,  load average: 1.46, 1.68, 2.70
+CLEAR
+TMPDIR=/mnt/storage/scratch/tmp/goldieBObDQ9
+```
+
+Command: `TMPDIR=<fresh mktemp above> timeout -k 10 180 node --test --test-reporter=tap packages/cli/tests/revoke-window.test.mjs`.
+
+Whole file result: 0/1 pass, 1 failure, exit1, no skips/cancellations. Same unchanged row306 R4 test at revoke-window.test.mjs:170 failed after20126.967034ms: `no RESULT on dc4ccc94-4d08-4da1-bc66-2f4fcfc098dc`, ask167, Promise.all index1, test194. No edits, no run2/3, no full CLI rerun, no mutant/restored run. No remaining process with this exact run's scratch path was found after the file finished. Manifest still matches. This proves repeat failure under the recorded CLEAR/load conditions, not a root cause.
+
+Reported to Sage as goldie-0018 with full log path, time/load/busy lines, test and error. Slot returned; holding for root-cause assignment/ruling on base dd6cb5872. Remote goldie/row323 stays the unverified draft571376c30; post-run failure evidence remains local. All row323 product/test sources are still exactly those committed before the first slot.
+
+## Root cause correction and accepted evidence — mos-1561, sage-3869
+
+The repeated revoke-window red was caused by TMPDIR length, not Codex. Sage identified and reproduced it (sage-3869; recorded in their local dda2d07b4): newRun rejects a tools.sock path exceeding107 bytes at packages/seat/src/session.mjs:278. The 37-byte `/mnt/storage/scratch/tmp/goldieXXXXXX` combined with revoke-window's fixture root produces109 bytes, while Sage's35-byte prefix fits107. The test drops the launcher refusal log, so the symptom was a20s no-RESULT wait. The detached base dd6cb5872 also failed0/1 after20106.869486ms with long TMPDIR (log copied as revoke-window-detached-base.log). Prior messages attributing the difference to an unspecified environment are superseded by this diagnosis; no product/old-test fix is needed for row323.
+
+From now on every suite uses `export TMPDIR=$(mktemp -d /mnt/storage/scratch/tmp/XXXXXX)` (31bytes). Under sage-3869 CLEAR, all source/test bytes remained exactly571376c30; each run got its own fresh31-byte TMPDIR and began with date-u, uptime, and busy-helper's last line:
+
+| Run / log | UTC start | Load averages | Busy | Result |
+| --- | --- | --- | --- | --- |
+| revoke-window-short-tmp.log | 2026-10-24 00:36:41 | 1.01,1.34,1.91 | CLEAR | Whole file1/1 pass; test703.937594ms, file838.51754ms; TMPDIR lCsnmg |
+| test-business-short-tmp.log | 2026-10-24 00:36:50 | 1.08,1.35,1.91 | CLEAR | Whole suite261/261 pass, 6415.261266ms; TMPDIR flQGnB |
+| test-new-short-tmp.log | 2026-10-24 00:37:03 | 1.37,1.40,1.92 | CLEAR | Whole new file7/7 pass, 611.516605ms; TMPDIR HNhoti |
+| mutant-driver.log + mutant.log | 2026-10-24 00:37:12 | 1.38,1.41,1.92 | CLEAR | Mutant killed: targeted exact-document test0/1, expected exit1; driver exit0; TMPDIR XAmmxp |
+| test-new-restored.log | 2026-10-24 00:37:25 | 1.61,1.46,1.93 | CLEAR | Restored new file7/7 pass, 616.699665ms; TMPDIR IVLOcQ |
+
+All TMPDIRs above are under /mnt/storage/scratch/tmp/. Every run used timeout-k10 (180s limit, business suite600s), one run at a time. Positive runs have0 failures/skips/cancellations. These are fresh accepted row323 results on committed571376c30. No full CLI rerun was authorized or performed: under mos-1561, Sage's landing gate supplies the CLI suite acceptance/counts, while Goldie's evidence is the business suite, new file and mutant. The earlier partial CLI log remains diagnostic evidence, not a passing-suite claim.
+
+Required tester-switch mutant:
+
+```diff
+-    "bus.tester": true
++    "bus.tester": false
+```
+
+It fails the new committed-document assertion at case1-business-file.test.mjs:66 (`false !== true`). mutant.py restores exact original bytes in finally; restored JSON SHA256 `85e6b9ac62785734fb9d854ea70ea550e171b5060b5cad0417e2f42f0b60c59e`. Both manifest entries verify after restoration, and the whole new file passes again. No pre-existing test or production source changed. git diff --check passes.
+
+Committing these notes and preserved logs is evidence-only on top of the tested571376c30. The product manifest remains the same two paths/digests. Duckworth's static review and Sage's integration/full gate remain their authority. Logs have trailing whitespace removed for git diff --check; substantive output/results are unchanged. Earlier stopped runs remain recorded honestly above and in their logs.

agents/goldie/work/queue-323/MANIFEST.sha256

@@ -0,0 +1,2 @@
+85e6b9ac62785734fb9d854ea70ea550e171b5060b5cad0417e2f42f0b60c59e  docs/guides/case1-business.mosaic-stack.json
+aecd1c0f0fe1eb46800a7dea6f1f2f6a965f1daa33a39f9837bb1e2c19e0abfc  packages/business/tests/case1-business-file.test.mjs

agents/goldie/work/queue-323/mutant-driver.log

@@ -0,0 +1,6 @@
+Sat Oct 24 00:37:12 UTC 2026
+ 19:37:12 up 10 days, 10:57,  2 users,  load average: 1.38, 1.41, 1.92
+CLEAR
+TMPDIR=/mnt/storage/scratch/tmp/XAmmxp bytes=31
+bus.tester mutant: exit 1
+restored sha256 85e6b9ac62785734fb9d854ea70ea550e171b5060b5cad0417e2f42f0b60c59e

agents/goldie/work/queue-323/mutant.log

@@ -0,0 +1,34 @@
+TAP version 13
+# Subtest: row 323: committed Case 1 document loads unchanged through the business loader
+not ok 1 - row 323: committed Case 1 document loads unchanged through the business loader
+  ---
+  duration_ms: 4.020549
+  type: 'test'
+  location: '/home/jwoltje/.t3/worktrees/mosaic-stack/goldie-row323/packages/business/tests/case1-business-file.test.mjs:57:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+
+    false !== true
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: true
+  actual: false
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/goldie-row323/packages/business/tests/case1-business-file.test.mjs:66:10)
+    Test.runInAsyncScope (node:async_hooks:226:14)
+    Test.run (node:internal/test_runner/test:1402:25)
+    Test.start (node:internal/test_runner/test:1262:17)
+    startSubtestAfterBootstrap (node:internal/test_runner/harness:387:17)
+  ...
+1..1
+# tests 1
+# suites 0
+# pass 0
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 113.96636

agents/goldie/work/queue-323/mutant.py

@@ -0,0 +1,26 @@
+"""Row 323 tester-switch mutant; run only after Sage CLEAR."""
+import hashlib
+import os
+from pathlib import Path
+import subprocess
+
+root = Path(__file__).resolve().parents[4]
+source = root / 'docs/guides/case1-business.mosaic-stack.json'
+fixed = source.read_bytes()
+needle = b'"bus.tester": true'
+assert fixed.count(needle) == 1
+try:
+    source.write_bytes(fixed.replace(needle, b'"bus.tester": false'))
+    result = subprocess.run([
+        'timeout', '-k', '10', '90', 'node', '--test', '--test-reporter=tap',
+        '--test-name-pattern=row 323: committed Case 1 document loads',
+        'packages/business/tests/case1-business-file.test.mjs',
+    ], cwd=root, env=os.environ, text=True, stdout=subprocess.PIPE, stderr=subprocess.STDOUT)
+    Path(__file__).with_suffix('.log').write_text(result.stdout)
+    print(f'bus.tester mutant: exit {result.returncode}', flush=True)
+    assert result.returncode == 1, result.stdout
+    assert '# fail 1\n' in result.stdout and 'false !== true' in result.stdout, result.stdout
+finally:
+    source.write_bytes(fixed)
+    assert source.read_bytes() == fixed
+    print('restored sha256 ' + hashlib.sha256(fixed).hexdigest(), flush=True)

agents/goldie/work/queue-323/revoke-window-detached-base.log

@@ -0,0 +1,39 @@
+Sat Oct 24 00:29:57 UTC 2026
+ 19:29:57 up 10 days, 10:49,  2 users,  load average: 1.29, 1.30, 2.21
+CLEAR
+TMPDIR=/mnt/storage/scratch/tmp/goldieccUVab
+dd6cb5872b972bcabb99b82589b2905e4e47dd3e
+v26.8.1
+/usr/bin/node
+TAP version 13
+# Subtest: row 306 REQ-LAUNCH-1 R4 a revoked run whose call lands before the SIGTERM ends stopped/0; a run the human stopped in the same window still ends session-invalid/22
+not ok 1 - row 306 REQ-LAUNCH-1 R4 a revoked run whose call lands before the SIGTERM ends stopped/0; a run the human stopped in the same window still ends session-invalid/22
+  ---
+  duration_ms: 20106.869486
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/goldie-base2qHbGq/worktree/packages/cli/tests/revoke-window.test.mjs:170:1'
+  failureType: 'testCodeFailure'
+  error: 'no RESULT on 94ddbce3-5e46-49a7-8f63-60af8995c10d'
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: true
+  operator: '=='
+  stack: |-
+    ask (file:///mnt/storage/scratch/tmp/goldie-base2qHbGq/worktree/packages/cli/tests/revoke-window.test.mjs:167:10)
+    runNextTicks (node:internal/process/task_queues:65:5)
+    listOnTimeout (node:internal/timers:644:9)
+    process.processTimers (node:internal/timers:618:7)
+    async Promise.all (index 1)
+    async TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/goldie-base2qHbGq/worktree/packages/cli/tests/revoke-window.test.mjs:194:3)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  ...
+1..1
+# tests 1
+# suites 0
+# pass 0
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 20235.90436

agents/goldie/work/queue-323/revoke-window-run-1.log

@@ -0,0 +1,33 @@
+Sat Oct 24 00:24:22 UTC 2026
+ 19:24:22 up 10 days, 10:44,  2 users,  load average: 1.46, 1.68, 2.70
+CLEAR
+TMPDIR=/mnt/storage/scratch/tmp/goldieBObDQ9
+TAP version 13
+# Subtest: row 306 REQ-LAUNCH-1 R4 a revoked run whose call lands before the SIGTERM ends stopped/0; a run the human stopped in the same window still ends session-invalid/22
+not ok 1 - row 306 REQ-LAUNCH-1 R4 a revoked run whose call lands before the SIGTERM ends stopped/0; a run the human stopped in the same window still ends session-invalid/22
+  ---
+  duration_ms: 20126.967034
+  type: 'test'
+  location: '/home/jwoltje/.t3/worktrees/mosaic-stack/goldie-row323/packages/cli/tests/revoke-window.test.mjs:170:1'
+  failureType: 'testCodeFailure'
+  error: 'no RESULT on dc4ccc94-4d08-4da1-bc66-2f4fcfc098dc'
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: true
+  operator: '=='
+  stack: |-
+    ask (file:///home/jwoltje/.t3/worktrees/mosaic-stack/goldie-row323/packages/cli/tests/revoke-window.test.mjs:167:10)
+    async Promise.all (index 1)
+    async TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/goldie-row323/packages/cli/tests/revoke-window.test.mjs:194:3)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  ...
+1..1
+# tests 1
+# suites 0
+# pass 0
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 20266.295192

agents/goldie/work/queue-323/revoke-window-short-tmp.log

@@ -0,0 +1,22 @@
+Sat Oct 24 00:36:41 UTC 2026
+ 19:36:41 up 10 days, 10:56,  2 users,  load average: 1.01, 1.34, 1.91
+CLEAR
+TMPDIR=/mnt/storage/scratch/tmp/lCsnmg bytes=31
+TAP version 13
+# usage: {"event":"usage-unknown","business":"acme","run":"r73cb69bf7381","instance":"assistant","turn":"7b64df9d-f571-4f43-a678-dbd5ce7714a9","source":"@none","code":"baseline-unknown"}
+# usage: {"event":"usage-unknown","business":"acme","run":"r89b03e6f1158","instance":"assistant","turn":"aaa36964-0a78-4ba1-9442-d6f0aa35f18e","source":"@none","code":"baseline-unknown"}
+# Subtest: row 306 REQ-LAUNCH-1 R4 a revoked run whose call lands before the SIGTERM ends stopped/0; a run the human stopped in the same window still ends session-invalid/22
+ok 1 - row 306 REQ-LAUNCH-1 R4 a revoked run whose call lands before the SIGTERM ends stopped/0; a run the human stopped in the same window still ends session-invalid/22
+  ---
+  duration_ms: 703.937594
+  type: 'test'
+  ...
+1..1
+# tests 1
+# suites 0
+# pass 1
+# fail 0
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 838.51754