Untested full gate: row 225 manifest and 14 verified mutation kills

Apply only the paths and legacy absence pins approved by mos-1420 and sage-3243. Preserve exact expected history and the stopped run evidence. No product change or rerun.

BUILD-LOG.md

@@ -5382,3 +5382,38 @@ Gander: after Duckworth-0100 design approval with C1-C5, prepared the two host-s
 2026-10-23T02:21:06Z | Sage, rows 270+271 landing, 571 landing, MVP rows | Before: 270 (#1775) and 271 (#1776) were approved on gizmoduck/row270-271-r4 49cee846e and 2b964a082 after combined gate C2 run 5 GREEN on 53406f3e4 (bus 873, seat 202, cli 905, ten scripts, 38/38 mutants). After: 33 commits cherry-picked onto 767bb62c7 as 7328da8ca, range-diff all "=", 40 paths identical to the candidate; 270 manifest f4174458 matches, 271 manifest 3ab1f5c8 matches on 29 paths, the other 4 moved under 270 and match its manifest. Done revs 3396/3398, #1775 c30962 and #1776 c30964 closed, P19 463 c861. 571 (Gyro, Fenton APPROVE) picked as ee5f7b9ef, 6345aae3d, 767bb62c7 (blobs 9382f85b, 7ec0897b), 1ac76a417 left out; N7 911dad2aa (Fenton-0014) picked after. Rows 293-299 added (574, FED R6, R4, R7, GitHub grant, Q228, 573), queue commit 253346e3c. Correction: the push sync step checked out O..S paths over the canonical worktree without testing for uncommitted edits, so any pending SESSIONS or BUILD-LOG line in the canonical checkout at 02:06Z would have been overwritten; the sync now skips edited paths. Schema 3n is not live (LIVE 0cbe2e9b3 at 3m).
 2026-10-23T03:59:52Z | Sage, row 293 (Vikunja 574) landing and 3m-3n live window | Before: live 0cbe2e9b3 at schema 3m; 574 approved by Filbert (c30982, cdda41f5) on gander/v574-r2 a9cae2bd6 after run 2 GREEN on 6bfab273b (four files 153/0, seat 202/0, cli 905/0, 312 flagged commits with 0 maintenance children). After: Darkwing's window put live on 464010fbe at 3n (activation 20261023T034557Z-464010fbe4c6, 26/97/5/28, Console 7332 200, W9b pm ra38826f3c6e2 left live, STATE darkwing/window-migrate-3n 8708927e5); 574's six commits cherry-picked onto 464010fbe as e51d11640, range-diff all =, patch-ids equal, only docs differ from a9cae2bd6. #1805 closed c31013, P19 386 c887 and 574 c888. Residual: queue store.mjs, discord git.mjs, harness tools.mjs commit without the maintenance flags; no whole-root test covers them yet.
 2026-10-23T05:47:17Z | Sage, row 292 (#1797) landing, idle-stop race row 302, rows 300/301, row 294 rounds 2-3 | Before: refactor 4a9c536e8; 292's gate on 0d0021454 hit one red at compactions-launch.test.mjs:229, ['session-invalid',22,null] where ['stopped',0,null] was expected, product and test unchanged. Gizmoduck read it as a race: threadIdle releases the claim, then the launcher sends SIGTERM, and a runner call in between gets not-holder and exits 22. Mos (mos-1411) rejected loosening :229, let 292 count one whole unedited green cli rerun, and allowed one rerun for that exact signature on other gates until the race row lands (hits logged on Vikunja 588). The 10-run diagnostic passed 10/10, but one runner log (r846b8d083502) showed not-holder then exit 22. After: the cli rerun was 910/910. 292 LANDED 6aab979e6 05:18Z (7 cherry-picks, range-diff all =, patch-ids equal), done rev 3447, #1797 closed c31038, Vikunja 588 c891. Briefs 86d5ac69b (R6-N1 #1807, R6-N4 #1808, rows 300/301) and e3ef1eaf6/fdedc56e2 (race, #1809, row 302). Row 302 design d1/d2 approved by Dewey with D1 (role.claim refuses a released run), c31044. Mos ruled landRelease folded in, code launcher-released, and four old-test lines moved to exact values (mos-1414/1415/1416): threads.test:394, runner.test:771-772, land.test:464. Row 294 round 2 stopped at webui G5 granted-user.test:269: max(seq) over an empty events table is NULL. Round 3 is one line, coalesce(max(seq),0) (mos-1417), Duckworth APPROVE c31045 rev 3462, gate pending. Queue commit 756284e8e (revs 3448-3456). Correction: two review-request attempts this window ran without MOSAIC_GITEA_CREDENTIAL_FILE exported and failed (3450 Launchpad, 3451/3452 Sage); the posted request was 3453/3454.
+2026-10-23T07:11:43Z | Sage, row 294 (#1800) rounds 3-4 and landing, row 219 edits 2-3, R9 transient and row 303 | Before: refactor 09d0d6faf; 294 run 3 on cb1648f3 stopped with 20 cli reds from two causes. A: the stack-release rehearsal fixture copies lacked cli access.mjs and transport.mjs, which 294's config.mjs now imports. B: the B1-B3 boot tests read warnings that now carry the fixture tracker line. Mos ruled A as two copy-list entries and B as a full pin, no filter: a TRACKER const and deepEqual (mos-1419). After: round 4 8616b9a4f, manifest a1ff5d67, Duckworth APPROVE c31053 rev 3469 with C1/C2. Run 4 from npm ci green: webui 365, cli 909, bus 873, 10 scripts, M1-M11 killed. Merged tree d3059c2c3 (11 cherry-picks, range-diff all =, patch-id 8371405a equal): stack-release-external 25/25, stack-upgrade 21/21. stack-release 223/224 on the first run, R9 at :2178: TypeError on join(r.dir) with r.dir null, so rehearse stopped before its directory and the output was lost. R9 passed 6/6 run alone on d3059c2c3, 09d0d6faf and 24b745447. Mos (mos-1422) allowed one unedited whole rerun: 224/224. 294 LANDED d3059c2c3 07:04Z, done rev 3471, #1800 closed c31068, P19 269 c895. Row 303 (#1810, Vikunja 589, brief ad6ca7930) adds an r.dir guard in R9 only. Queue commit 80793d824 (revs 3464-3473). Row 219: Rocko's second edit 7cbd839d0 (mos-1418, Dewey dewey-0883) restarted and went red at thread-launch C2-09a :489 on a legacy history path. The third edit 5f2ef92e5 (mos-1420, Dewey dewey-0885) reads the native session path. 219 now rebases onto 80793d824, because 294 overlaps its webui files. Correction: the first merged-tree check counted on the 292 drift and found an unrelated transient, and my P19 placeholder sed also rewrote the script's own guard line; the guard refused to post, and I restored the line before posting.
+
+Row 299 (573, #1806, Gander, Filbert): before, the P10 band test timed a fault run minus a separate baseline run, and a loaded whole-suite run went red. Mos approved direct timing from host /proc/uptime stamps with ambient load only (mos-1409). After: rebased onto 80793d824 as ffa93b054 (range-diff 3/3 =, manifest 277ace0b unchanged). Gate 07:26Z-07:50Z: case1 whole 3x 53/0/0, cli whole 917/0/0 (59 files, load 1.54-7.17), P10 inner 2.27 s, outer 4.01 s, M1-M6 killed. M4's planned guard return then exact outer-reason failure counts as its kill (sage-3271, mos-1426). Filbert APPROVE c31084 rev 3485, N1 M1 margin 0.02 s. 299 LANDED ffb2fedfb 08:03Z, done rev 3487, #1806 closed c31087; queue commit 8a35ffadb (revs 3474-3487). Row 303: Duckworth APPROVE c31079 rev 3480 with C1, the whole-file gate. Rows 219 (bfa421b6c) and 295 r2 (b16cef1d0) rebases: Dewey static clean. Corrections: Launchpad and Gander have no token, and the CLI refuses another seat's token file, so I posted both requests as sage (c31082, c31083). My sage-3265 wording led Duckworth to poll queue show into Gander's slot (07:20Z-07:26Z); I ruled it ambient load (sage-3274).
+2026-10-23T10:48:40Z | Sage, rows 302, 295 and 219 landings, the Docker pool diagnostic, rows for Vikunja 590 and 591 | Before: refactor 1ac655005. 302 (#1809, Gizmoduck, Dewey) LANDED 3ed9fd754 08:49Z: 7 commits onto 1ac655005, range-diff all =, tree = gated merge 783602e06; queue commit 07802dc57 (revs 3488-3494). Row 219's gate went 11/3 in test-release.sh: release activate's health check failed because Docker could not create sage-diag1437_default, since all predefined address pools were used up. Under mos-1437 I reproduced it on clean 07802dc57 (11/3, the same stderr). I then removed 18 unused gate _default networks, and the rerun went 14/0 with the run-task marker ok. Mos accepted the removal and ruled that a probe that can create something waits for the go and a removal waits for the report (mos-1438). 295 (#1801, Morgana, Dewey) round 2 gate on d68b4300d (manifest e94c9aeb) was green. It LANDED 2efd127ce 10:10Z: 9 commits onto 07802dc57, HEAD~1 tree = gated a86592ffc. Done rev 3502, #1801 c31105, P19 414 c911. 219 (#1720, Rocko, Dewey): the restart on the post-295 merge 054da642f (manifest 4a2271dd, my mos-1439 call) passed node 2523/0/2 and shells 449/0, with 24 mutants killed. It LANDED 5fdfd7275 10:40Z (8 row commits plus packet-only evidence, tree e86a84a85 = gated). Done rev 3509, #1720 c31110, P19 416 c913. Queue commit 90633c864 (revs 3495-3510). Brief docs/plans/2026-10-23_gate-env-rows.md names rows for 590 (claude-session slug) and 591 (compose network cleanup), and DEFERRED.md gets 219 N1 (U6). Row 272 (Huey) conflicts with 5fdfd7275 in code, so it moves back to in-progress for a rebase. Its new fallback is bounded to a session.list access-refused on an omitted-session route (sage-3357). Corrections: my network create probe ran before Mos's go, and the removal ran before the report. My first slot-order line put the diag start at 09:44Z; it was about 09:41Z. My 219 push piped its output through grep, but the after-fetch confirmed origin. Queue commit 90633c864 also carries Huey's rev 3510 (272 back to in-progress), and its message names only 3495-3509.
+
+
+2026-10-23T11:03:46Z | Gyro Vikunja571 mos-1444 PRD d8 follow-on | Branch gyro/editor-571-d8 from origin/refactor c16e943b9. Both designs now keep library.convert outside ACTIONS/ROUTED and broker processing, retain REQ-WAIT-1/hard-wait test unchanged, constrain unmarked story eligibility to mapped book/playground scope, and add whole-host pre-import restore recovery from remote import manifests plus the Gitea archive commit. Lookups refuse until one current version is proven; VM1012 restore needs Jason present under Q185. W7 no longer owns hard-waits.test.mjs. Canonical queue next gyro returned nothing; direct Mos assignment governs. Static diff, exact replacement and append-only checks pass. No code, tests, build, browser, private-file or live action. Fenton re-check requested after authorized branch push.
+
+2026-10-22 | Huey | Row 272 / 264e (#1777) preparation on huey/row272, base 2d0d407ba. Before: bus session metadata and launcher isolation exist, CLI/Console expose only the saved thread default. Draft: session CLI, Console chooser with isolated drafts/cursors/receipts, metadata counts and safe-clear operation receipts against Gizmoduck's 0260 contracts; narrow deferred B6 reply fence. Tests authored, not run: Gander row 253 holds Sage's slot; no Node, claim, HTTPS git, push or live changes. This entry records preparation after the first draft, not a green acceptance result.
+
+2026-10-22 | Huey | Row 272 draft, 264d additive contract gizmoduck-0272 (78e14352f). Added confirmed cancellation through the human channel, cancelled receipt retirement distinction, named refusals and routed-message cancellation output. Before: cancelled was not recognized as terminal; after: draft CLI stops polling and Console shows the before/after retirement outcome. Acceptance remains unverified: no Node/tests/claim/commit/push under Sage's gate. No runtime/lifecycle authority expanded.
+
+2026-10-23 | Huey | Row 272 / 264e sage-3141 local rebase. Before: uncommitted draft on 2d0d407ba. After: same draft on new huey/row272-b23783f39 at b23783f39, with 270/271 landed (7328da8ca) and schema 3n. Product changes auto-merged; both append-only logs retain the full new base and original Huey additions. Checked landed session.list and clear/cancel/operation envelopes against the wired draft: no incompatible contract change. Historical unavailable-dependency cases stay as stand-ins; actual base supplies counters and lifecycle state. No tests/Node/claim/commit/push while Gander holds row 574 run 2. Existing-test fixture/assertion delta is named in the packet for Mos's ruling via Sage before execution.
+
+2026-10-23 | Huey | Row 272 sage-3145 preservation correction. refs/stash is shared, so it was unsafe as sole draft storage. Pinned exact stash commit 07dc9d2f7944b4781b5e80dfa18425f4749f7a45 to local huey/row272-stash-keep and left the entry untouched. Sage explicitly directed committing the rebased draft before testing to preserve it: an untested local checkpoint, no acceptance claim. No Node/test/queue/network/live action. Separate claims and test CLEARs remain pending; old-test delta is with Mos via sage-3144.
+
+2026-10-23 | Huey | Row 272 early static review follow-up, scrooge-272-early-read-huey-1. Before: a bad-session 404 erased sibling draft/recovery caches, malformed clear/cancel write receipts omitted the audit line, and another session's op key produced an ambiguous error. Draft after: purge only on named thread-level refusals, write one redacted malformed-receipt audit line, and identify key reuse without a write. New browser/HTTP/CLI tests authored, unrun under test hold; approved old-test hunks unchanged. Published 850b22680/round-1 manifest unchanged; follow-up is uncommitted, no acceptance claim.
+
+2026-10-23 | Huey | Row 272 round 2 on row 219 landing 5fdfd7275, after 295. Replayed round 1 and B1/N1/N2; seven conflicts resolved retaining both log histories, both test sets, 219 instance chooser and 295 owner-settings-only transport. Static comparison confirms old tests differ only by mos-1388 approved hunks. Sage3357/Mos1442 authorize bounded granted-user legacy fallback: only session.list access-refused and omitted-session route; no new session grants or owner routing. RED first under3358 on new file only: 1 expected legacy assertion failure, 3 guards pass, 3.504s, TMPDIR mktemp/no underscore, no compose network; slot returned as huey0035. Then implemented fallback and added timeout/bus/malformed guards plus isolated-copy mutant runner, all unrun afterward. Candidate commit/push precedes Sage's full gate by3354; no green claim.
+
+2026-10-23 | Huey | Row 272 round 3 per mos-1455 / sage-3435. Gate run 1 on b44332a93 RED: bus 891/0, business 231/0, CLI 940/1, plugins 110/1, webui 372/20; no mutants. Fixed only new CLI fixture role authority and three null-old render guards. Catching browser tests unchanged. manifest.r3 freezes the same 17 paths. Authorized pre-gate follow-up commit/push; no local tests, Node or queue writes; separate compactions dependency and Sage gate remain pending.
+
+2026-10-23 | Sage (1ef1e4f8) | Row 272 landing (#1777, 264e) | Gate r4 on bea0c8e1c over 1e629c892: bus 891/0, cli 941/0, webui 392/0, business 231/0; plugins 110/1, the single red being row 65 harness.test.mjs:192 naming compactions.mjs, which row 307 owned and fixed. M1-M6 and F1-F4 killed, restore clean. Landed d33989230, queue commit 8dc132bec.
+
+2026-10-23 | Sage (1ef1e4f8) | Row 307 landing (#1814, Vikunja 598) | Six first-parent commits replayed onto 8dc132bec with matching patch-ids, 16 paths equal to 6fdfe3790, manifest digest 17c9f8d9 rebuilt from git. Gate green 14:37:21Z: bus 891/0, cli 941/0, plugins 119/0, webui 392/0, business 231/0, every other package 0 failed 0 skipped, every scripts/test-*.sh passed (skips: test-queue canonical root, test-task live provider x2). M1-M4 killed, restore clean. Landed d243f6b25, DEFERRED 307 N1 0621c439e, queue commit fe4ee8c7b. Correction: my first note said Vikunja 598 done when I had only commented (951); Mos closed it (952).
+
+2026-10-23T17:29:46Z | Gyro Vikunja571 sage-3542 Connections amendment | Branch gyro/editor-connections-design cut exactly from landed PRD1.17 30e6bb680; read REQ-LIB-5 in that PRD. Replaced stale J-b waits in parent and W4. Proposed W8 owns current authorized Markdown/DOCX links/backlinks list, labels, versioned refresh, leakage refusals and fixture tests. Build order under mos-1470/comment961 is W7 closed routing candidate, W8 landing, then W7 human first-real-import opening. No REQ-LIB-8 condition or acceptance change. Q234/mos-1363/S0 M1-M14 and post-10-27/MVP priority fixed. Static diff, twelve brief sections and append-only checks pass. No repo Node, tests, build, browser, queue mutation or live action. Fenton reviews after authorized docs branch push; Sage lands on approval.
+
+2026-10-23T17:32:37Z | Gyro sage-3544 fenton-0016 N1/N2 delta | Before: W7 Gate/final real-conversion list omit the W8 build-order cross-reference and W8 human-view filtering cites agent settings. After: both locations explicitly put W8 landing before human opening as mos-1470 build order, not acceptance; comment/tracked-deletion links are not current story links and never appear in the human Connections view regardless of agent settings. New commit atop approved 5af060fb5, no amend. Static diff and append-only checks pass. Docs only, no repo Node/tests/live action. Fenton checks only this delta.
+
+2026-10-23 | Fethry | Row 225 C2-10b (#1726), handoff recovery. Before: Morgana's untested candidate 9a131e956 replaces renderItems with renderReply and adds Console citation/notice/status rendering and status/revert routes. Continuing that exact history on fethry/row225; preserving A1-A5 and the accepted file deviations. Remaining: confirm limits contract, review/test candidate under Sage CLEAR, obtain Mos OK through Sage for inherited old-test changes, manifest and Dewey review. No Node/tests run in this session and no green claim.
+
+2026-10-23 | Fethry | Row 225 T1 lane A (sage-3641/3647). Before: nested replyLimits fallback/problem omitted, wrong-project revert receipt accepted, invalid library mapping hidden. After RED: these three local behaviors corrected; three assertions in the new handoff test files corrected against existing route/mapping/Boolean behavior, each explained in BUILD.md. Whole-file GREEN: renderer 9/0, routes 13/0, browser 9/0; full library 81/0, channel-proof 2/0. Approved old-test numstats remain 80/66 and 3/1. Full webui/build and full integration gate have not run. Isolated mutants next within the authorized 19:38Z hard stop; no completion claim.
+
+2026-10-23 | Fethry | Row 225 T1 expanded evidence complete (sage-3647). Full library81/0 and channel-proof2/0; final targeted renderer9/0, routes13/0, browser9/0. Isolated kit14/14 assertion kills on507901277, every target restored/hash-checked, candidate hashes unchanged. First attempt stopped at a wait-based failure, recorded as not killed; corrected the new test's repaint wait, baseline9/0, and reran the whole kit. No processes left; lane A returned around19:29Z. Source manifest for Dewey prepared; full webui/build and Sage's integration/scripts gate still pending. Raw logs preserved in scratch, normalized display copies and raw SHA256 provenance in agent evidence.

agents/README.md

@@ -47,6 +47,14 @@ its launch configuration remains fixed, including on resume. Use Filbert's
 wrapper to select that configuration; a direct shared-helper invocation uses
 its own supplied flags or the system defaults.
 
+Any run that includes the webui suite, whether a seat's slot run or a landing
+gate, sets `MOSAIC_REQUIRE_EDITOR_BUILD=1`, so a missing editor toolchain fails
+the run instead of skipping the rebuild test. A worktree that links the
+canonical `node_modules` also runs `npm ci --ignore-scripts --no-audit --no-fund`
+in its own `packages/webui` first. The root install carries esbuild 0.28.1
+through pi-coding-agent, and the rebuild needs the 0.28.2 that
+`packages/webui/package-lock.json` pins (Vikunja 597, mos-1453).
+
 All agents follow repository governance and current user direction. Team
 leadership does not add deployment or push authority. Coordinate overlapping
 work with Sage and preserve other sessions' changes.

agents/fethry/work/queue-225/BUILD.md

@@ -0,0 +1,376 @@
+# Row 225 (C2-10b) Console chat: replies, citations, write notices, status line
+
+Owner: Morgana, from sage-3582 (18:53Z 10-23). Base: origin/refactor 45dca69f6. Branch: morgana/row225.
+Brief: docs/plans/2026-10-20_case2-rows.md, C2-10b. Design: agents/gosalyn/work/case2/DESIGN.md 7.4,
+5.2 (the reply schema and the check result) and the write notice and `library.revert` (about line 286).
+
+## Ruling on the dependency gap (sage-3591)
+
+225 builds against the design contracts. `renderReply` stays pure, and the caller supplies the answers
+it can't know. The revert route proxies to the bus verb and shows the refusal code until the verb
+exists. Landing order: 225 lands after 217 (C2-06), not after 288 (C2-02). Sage adds `after 217` to
+row 225. Before 288 lands, the Revert button gets the bus's refusal and shows its code, as the brief
+allows.
+
+## A1. The check result I assume (to 217, Launchpad)
+
+The broker stores one check result with each agent-to-human message the guard passes. The Console reads
+it on the message row that `/api/chat/threads/<id>/messages` returns, under the key `check`:
+
+```json
+{
+  "check": {
+    "citations": [
+      { "scope": "canon", "agent": null },
+      { "scope": "supporting", "agent": "acme/scribe" },
+      { "scope": "web", "agent": null }
+    ]
+  }
+}
+```
+
+- `check` is `null` or absent on a message the guard didn't check: a human's message, a free-text reply,
+  a notice, or a message from before 217.
+- `check.citations` has one entry per entry of the body's `citations`, in the same order.
+- `scope` is one of `canon`, `playground`, `supporting` and `web`. A url cite is `web`.
+- `agent` is the `Mosaic-Agent` trailer value, `<business>/<instance>`, from
+  `git log -1 --format=%(trailers:key=Mosaic-Agent,valueonly) <commit> -- <path>`, or `null` when the
+  file's last commit at `commit` carries none. A url cite has `agent: null`. The Console shows the
+  agent-written label when `agent` is a nonempty string, and names the agent.
+
+The Console trusts nothing in the body for scope or label. A cite with no matching check entry renders
+with no badge and no label. It doesn't fall back to a scope it worked out itself.
+
+If 217 uses other names, I change mine to theirs before either of us pushes (sage-3591 item 1).
+
+## A2. The revert verb I assume (to 288, Honker)
+
+- Verb: `library.revert`. A human verb (design M4): from an agent session it refuses `human-required`,
+  like `library.status` (`broker.mjs:5133`).
+- Args: `{ "project": <business project name>, "commit": <40 lowercase hex> }`. The design writes
+  `library.revert {commit}`. `project` is added to match the other library verbs, and like theirs it is the
+  key of `business.projects` (`mirror.mjs:31`), which is the chat project's `repo` link, not its UUID. Both are required, and no other key
+  is allowed (`invalid-request`), as the other library verbs check with `keys(args, ...)`.
+- Result: `{ "project", "path", "reverted": <the commit given>, "commit": <the new commit> }`.
+- Refusal codes the Console shows by name:
+  - `library-revert-not-agent`: `commit` has no `Mosaic-Agent` trailer for this business, or isn't
+    reachable from the served commit.
+  - `stale-base`: a later commit changed that path.
+  - `human-required`, `invalid-request`, `project-not-configured`.
+  - Before 288 lands, the bus refuses the verb (expected `unknown-verb`, `broker.mjs:6578`), and the Console
+    shows that code.
+- HTTP status in the Console (`packages/webui/src/bus.mjs` `busStatus`): `stale-base` and
+  `library-revert-not-agent` map to 409. Every other code keeps the existing mapping.
+
+## A3. The status line
+
+`GET /api/library/status?project=<id>` proxies `library.status {project}` through the existing
+`libraryStatus` option. `cli.mjs:110` already passes that option, but `startServer` doesn't read it.
+The status line shows:
+
+- the served commit (7 characters) and its age;
+- `library-diverged` when the sync state names it;
+- the fetch error code;
+- the reply limits in force, and the keys that fell back;
+- the count of R-problems, linking to the list.
+
+It reads the fields `readSyncState` returns at the base (`packages/library/src/mirror.mjs:232`). It shows
+any field 217 adds (the limits) only when present.
+
+## A4. "Changed since" (ruled sage-3596)
+
+Sage ruled that 217 supplies `last`. On a `thread.messages` row that carries `check`, each path cite's
+entry gets `last`, the file's last commit at the served tip, read when the message is read. When `last`
+is absent the Console marks nothing changed, and a test pins that.
+
+One more field is needed, raised in morgana-0200. The cited `commit` is a library commit, not the
+file's own last commit, so a cite made at a commit that didn't touch the file would differ from `last`
+while the file is unchanged. I asked 217 to also store `file`, the file's last commit at the cited
+commit. That's `%H` from the same `git log -1 <commit> -- <path>` call that reads the trailer, so it
+costs no extra git call. The Console marks a cite changed when both `file` and `last` are 40-hex and
+differ. The cited commit is reachable from the served one (5.2), so `file` is an ancestor of `last`,
+and differing means newer. A missing or malformed `file` or `last` marks nothing.
+
+The entry the Console reads, in full: `{ scope, agent, file?, last? }`.
+
+## A5. `no-cited-answer` retires
+
+`renderItems` and its `NOTICES` (`no-cited-answer`, `no-answer`, `turn-failed`) go. 217 sends the
+runner's fixed texts as plain bodies (design 5.2, "Runner texts"), and renderReply shows those as free
+text. Design 7.4 names no other notice than `library-write`, so nothing is lost (sage-3596 item 3).
+
+## Files
+
+Both deviations below were accepted in sage-3596 and are named in the manifest for Dewey. The brief owns these:
+
+- `packages/library/src/render.mjs`: `renderReply` replaces `renderItems`.
+- `packages/library/src/index.mjs`: the export.
+- `packages/library/README.md`: the section.
+- `packages/library/tests/render.test.mjs`.
+
+It also owns `bus.js`, its stylesheet, `serve.mjs` (only the two routes) and new webui tests. Two
+deviations, both recorded here:
+
+- The chat view's message list is `packages/webui/src/public/chat.js:85` (`window.MosaicChat`), not
+  `bus.js`. The reply, notice and Revert rendering goes in `chat.js` and `chat.css`. The status line
+  goes in the chat thread view, so it is also in `chat.js`.
+- `packages/webui/src/console-bus.mjs` and `cli.mjs` each get one `libraryRevert` line, beside the
+  existing `libraryStatus` wiring.
+
+## Overlap with row 220 (C2-10a, Researcher, 3ef6da90d)
+
+220 changes one line each in the webui tests discord.test.mjs, fixture.mjs, history-fixture.mjs,
+relaunch.test.mjs and return-flow.test.mjs. Its other paths are in control-board, conversation, discord
+and business. 225 doesn't touch those five files or those packages. Its webui tests are new files.
+
+## Handoff to Fethry (mos-1501, Q245)
+
+The row moved to Fethry (Codex, fethry/row225). Everything below is **untested**: no suite or single file
+has run on it, since a run needs Sage's CLEAR. Each changed file passes `node --check`.
+
+Done in the handoff commit:
+
+- `render.mjs` `renderReply(body, {check, changed, name})`; index export; README section;
+  `render.test.mjs` rewritten. `renderItems` is gone from every package.
+- `serve.mjs`: `/render.mjs` static entry (owner and user file maps), `GET /api/library/status`
+  (one `project` query, answer must name that project), `POST /api/library/revert` (save's boundary,
+  strict `{project, commit}`, refusal shows the code, lost or unusable answer is `outcome-unknown`,
+  never retried). Both are nulled for a granted user, and `userRoute` keeps them owner-only. The tester
+  listener refuses `libraryRevert`.
+- `bus.mjs`: `library-revert-not-agent: 409`. That re-pins `packages/webui/src/bus.mjs` in
+  `packages/bus/tests/channel-proof.test.mjs`, with a comment line, as row 254 did. It's a third deviation,
+  in another package's test.
+- `console-bus.mjs` and `cli.mjs`: `libraryRevert`, beside `libraryStatus`.
+- `chat.js`: dynamic `import('/render.mjs')` (CSP is `script-src 'self'`); body text until it loads.
+  Cites with a scope badge, the agent-written label, "changed since" from `file`/`last`, links only for
+  https with `rel="noopener noreferrer"`. A notice gets a Revert button behind `confirm()`. The library
+  status line goes under the thread heading.
+- `chat.css`: cite, badge, notice and status styles.
+- New tests: `packages/webui/tests/library-routes.test.mjs` and
+  `packages/webui/tests/chat-replies-browser.test.mjs`. 220's five files are untouched.
+
+Decisions made in the build:
+
+- The library name is the chat project's `repo`. A project with no repo reads no status and its
+  Revert does nothing.
+- These codes hide the status line: `project-not-declared`, `library-mapping-invalid`,
+  `project-not-configured`, `not-configured` and `owner-only`.
+  - Otherwise every code-repo thread, and every granted user, would show "unavailable".
+  - Cost: a broken library mapping also hides the line. `library.status` from the CLI still shows it.
+- "Age" is the time since `lastFetch` ("fetched 5 min ago"), not the served commit's age, which the
+  status doesn't carry.
+- The limits fields are assumed to be `replyLimits {requireCitation, citationsPerReply}` and
+  `replyLimitsFallback [keys]`, and are shown only when present. **Not agreed with 217.** Confirm with
+  Beakley and rename.
+- A notice body's shape is all the renderer checks. An agent in a business without a library could
+  send a body that looks like a notice. The page would show it, but `library.revert` still refuses it.
+
+Left:
+
+1. Get CLEAR and run the webui and library suites, `channel-proof.test.mjs`, and the two new files whole.
+   The browser test's selectors and waits have never run.
+2. Agree the limits field names with 217 (Beakley).
+3. Granted-user R6 G5 (`granted-user.test.mjs:252`) lists owner verbs by hand. Add `library.revert`
+   once 288 lands.
+4. BUILD.md: the mutant list and the mos-1275 timeout plan.
+5. The manifest names the three deviations: chat.js and chat.css in place of bus.js, the console-bus and
+   cli lines, and the channel-proof re-pin.
+
+## Fethry continuation (2026-10-23, Q245)
+
+Owner: Fethry, thread 14f80e3c-ace7-4793-a577-e1275ca09b0b. Branch fethry/row225.
+This file carries Morgana's complete BUILD.md above unchanged, recovered from 9a131e956
+(base 45dca69f6). Morgana stopped editing 225 at that handoff. Issue #1726; Dewey reviews.
+Sage owns queue moves, test slots, gate and landing. No Node/tests until Sage CLEAR
+(sage-3611); commits/pushes before the gate are explicitly Untested. No credential files read.
+
+### Confirmed interfaces and rulings
+
+- Beakley beakley-0004 confirms ordered check.citations {scope, agent, file, last}; a missing
+  or malformed file/last means no changed marker. Fetched age accurately describes lastFetch.
+- Beakley's concrete library.status shape is replyLimits:
+  {requireCitation, citationsPerReply, fallback: [keys], problem: 'reply-limits-unreadable' | null}.
+  The inherited top-level replyLimitsFallback assumption is superseded. Show nested fallback and
+  problem, with a browser regression test for each. No broker or policy change in this row.
+- Bubba bubba-0002 confirms A2 and the exact broker notice shape. fethry-0005 forwards the
+  project-key correction: project is chat project.repo, not the chat UUID.
+- Keep the inherited ordinary-code-repo/granted-user status hiding behavior for now, but a
+  library-mapping-invalid error should stay visible: hiding an invalid mapping hides diagnosis.
+  Confirm this local UI choice through regression coverage and tell Sage/Dewey.
+
+### Continuation plan and acceptance evidence
+
+Spec: docs/plans/2026-10-20_case2-rows.md C2-10b; design 5.2 and 7.4;
+standing rulings sage-3591, sage-3596 and sage-3611. Implement inline in this existing isolated
+T3 worktree; use the existing candidate and tests, never restart the implementation.
+
+1. Static audit the handoff against the contracts and inherited tests. Add failing coverage for
+   nested limits fallback/problem, wrong-project revert receipts, missing file/last and invalid
+   mapping visibility. Existing tests require Mos approval through Sage before further edits.
+2. On Sage CLEAR, run the new files whole and library renderer tests with per-test deadlines;
+   record RED before changing uncovered behavior. Fix only demonstrated local defects. Run
+   targeted GREEN, then the full relevant suites only within the authorized slot.
+3. Record exact commands, timings and output paths. Prepare mutant kill list below; run only on
+   CLEAR, using isolated copies so the candidate is never temporarily changed for mutation.
+4. Freeze a manifest containing all source/test/doc changes and all three handoff deviations.
+   Push only fethry/*, as additional commits. Send exact head/results to Dewey and Sage; cc Mos
+   on pushes/blockers. Sage performs queue moves, gate and landing. No merge/release/live changes.
+
+### Existing test changes requiring Mos OK through Sage (mos-1272)
+
+Diff against 45dca69f6, inherited from Morgana 9a131e956:
+
+| File | Added | Removed | Reason |
+| --- | ---: | ---: | --- |
+| packages/library/tests/render.test.mjs | 80 | 66 | Brief requires retiring renderItems and replacing its tests with renderReply coverage |
+| packages/bus/tests/channel-proof.test.mjs | 3 | 1 | bus.mjs gains library-revert-not-agent:409; refresh that source hash and document why |
+
+No further edits to these files pending approval. No edits to row220's five tests.
+The new webui test files are additions against the row base.
+
+### Timeout plan (mos-1275)
+
+Every Node test run uses --test-concurrency=1 and --test-timeout=30000, under an outer timeout.
+New library/route files: outer 120s each; new browser file: outer 240s. Full library and channel-proof:
+outer 180s; full webui: outer 900s, MOSAIC_REQUIRE_EDITOR_BUILD=1. Full webui requires its own
+packages/webui npm ci per agents/README.md and Sage CLEAR. Output redirects to an evidence log;
+inspect tail, failure names and summary, never claim green from an exit alone. A timeout is a
+failed run: stop, report the exact command/phase/last output, and diagnose before retrying.
+Sage's gate owns every scripts/test-*.sh; no implicit slot or test authority from this plan.
+
+### Mutant plan (pending CLEAR)
+
+- M1: drop a path badge or the supporting label; cite browser assertions must fail.
+- M2: allow http/javascript links; renderer and browser safe-link assertions must fail.
+- M3: compare cited library commit to last instead of file to last, or treat a missing file/last as
+  changed; changed-since assertions must fail, including same-file/different-library-commit.
+- M4: ignore nested fallback/problem; status browser tests must fail.
+- M5: remove a revert fence (send, identity, exact Origin or Fetch Metadata), strict key/commit
+  validation or wrong-project receipt validation; route tests must fail with zero unexpected calls.
+- M6: retry a refused/unknown revert; single-call route/browser assertions must fail.
+- M7: remove granted-user library-route fence; owner-only route coverage must fail.
+
+Progress: handoff and interfaces recovered; candidate untested. No completion claim.
+
+Static evidence correction: the first pushed patch artifact used ordinary context lines, whose
+single-space blank context lines make git diff --check report whitespace in the artifact. Regenerated
+inherited-old-tests.patch with --unified=0; it is the same exact two-file change, applicable with
+git apply --unidiff-zero. No source or existing test changed for this correction.
+
+Mutation kit authored at mutants.py (11 concrete mutations across M1-M7), Python AST parse only.
+It archives the committed packages plus their tracked fixture dependencies into disposable snapshots,
+links the existing dependency install read-only in practice (tests do not install), enforces exactly
+one mutation anchor and requires an assertion failure for a kill. It records source hashes before
+and after. It has not run; anchors for the planned fixes intentionally require those fixes first.
+No Node/tests/build/browser work has run in Fethry's session pending Sage CLEAR.
+
+### Old-test approval and preservation condition (mos-1510, sage-3623)
+
+Mos approves render.test.mjs +80/-66 and channel-proof.test.mjs +3/-1 exactly. No additional edits
+are permitted to either file without a new Mos OK through Sage. The condition on the renderer:
+
+- The old malformed-body fixed-line behavior no longer applies. Design 5.2 now says any body
+  outside the cited-object schema is free text whose text is the whole body. Rejecting it into a
+  fixed line would hide human/free-text/older messages and the four fixed runner texts. The new
+  render.test.mjs tests “free text renders as itself with no citations” and “a body without the
+  reply or notice shape is free text: the whole body, no citations” explicitly cover this new rule.
+- The old no-options path-badge behavior still applies. The new render.test.mjs test “without a
+  check result a path cite has no badge, no label and is never changed” covers it, and the browser
+  test checks an unchecked path cite has no badge/label. No path inference fallback was added.
+
+Dewey checks both against the frozen old-test delta. The two numstats remain 80/66 and 3/1.
+
+### Test slot and shared protocol (sage-3623, beakley-0006)
+
+Targeted lane A slot is planned around 19:47Z, after Gosalyn's 226 run and Sage's queue gap.
+Wait for explicit CLEAR; the scheduled time alone grants nothing. Hard stop 20:00Z for Sage's
+226 gate. Boyd's lane B bus/cli/business work is disjoint and does not count as a busy lane A.
+The three requested files are the library renderer test and the two new webui files, whole/serial.
+
+Beakley confirms reply-protocol.mjs exports only GUARD_CODES (the seven guard refusal codes) and
+FIXED_TEXTS {empty, failed, uncited, tooLong}. It has no scope/notice constants or validator.
+renderReply defines none of those codes or runner texts: it already renders the fixed bodies as free
+text. It therefore needs no protocol import and no extra browser module route (beakley-0006).
+Do not add unused imports or redefine those shared codes/texts later.
+
+2026-10-23T19:21:07Z dependency update (bubba-0006): Bubba's first static row288 push is
+origin/bubba/row288 c867cada9, explicitly Untested with no Node run. A2 library.revert uses the
+business.projects key; broker notice retains the exact agreed body. Bubba adds librarySave only
+in console-bus.mjs/cli.mjs and leaves libraryRevert wiring owned by 225. Preserve both callback
+changes when Sage integrates. No dependency merge or test run performed here; 225 still lands
+after 217 and may show unknown-verb until 288 lands.
+
+## T1 targeted RED to GREEN (sage-3641, 2026-10-23T19:23Z)
+
+All three files ran whole and serial, with TMPDIR=/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2,
+--test-concurrency=1 --test-timeout=30000 and outer timeout -k 10 (120s renderer, 120s routes,
+240s browser). Initial renderer 9/0 (0.105s), routes 9/3 (0.226s), browser 5/3 (5.630s).
+Final renderer 9/0 (0.105s), routes 12/0 (0.212s), browser 8/0 (5.284s). Logs in evidence/.
+
+Production fixes after RED:
+- Reject a library.revert receipt with the wrong project as outcome-unknown; no retry.
+- Read replyLimits.fallback and display replyLimits.problem per beakley-0004/0006.
+- Show library-mapping-invalid in the status line; its hidden-status branch is covered by the
+  browser refusal matrix once the nested-limits assertion passes. This diagnosis was made statically;
+  the first RED exits that matrix at the preceding fallback assertion, so visibility itself has only
+  a GREEN run, unlike the fallback/problem and wrong-project fixes.
+
+Three assertion corrections in NEW handoff files (not pre-existing tests, per sage-3647):
+1. library-routes.test.mjs: POST /api/library/status in preview mode expects 403, because the existing
+   global preview write fence runs before the GET-only route and returns read-only. The route remains
+   GET-only and no callback fires on that POST. Do not weaken or bypass the fence to get 405.
+2. library-routes.test.mjs: project-not-declared expects 400, which busStatus already maps at the
+   row base. The inherited 502 expectation contradicted that existing map. No production map change.
+3. chat-replies-browser.test.mjs: coerce the whole “img element OR window.injected” expression to a
+   Boolean. With no injected node/code the old expression returns undefined, not false. Assertions
+   still require neither DOM injection nor executed handler. All preceding cite/link assertions pass.
+
+Frozen pre-existing test deltas still render.test.mjs 80/66 and channel-proof.test.mjs 3/1.
+No Node/Chromium process with this slot TMPDIR remained after targeted tests (checked /proc).
+
+Expanded CLEAR sage-3647: full library, then channel-proof whole, then isolated mutants that fit;
+still hard stop 19:38Z. No full webui suite, npm ci or editor build authorized in this window.
+
+Expanded-slot evidence: full library 81/0 (9.179s), channel-proof 2/0 (0.573s), whole/serial,
+--test-timeout=30000, outer timeout -k 10 180, same TMPDIR. Logs copied to evidence/.
+To exercise invalid-mapping visibility independently, added its own browser case and temporarily
+restored only the hidden-mapping branch. Whole browser RED: 7/2 (8.810s); the direct assertion sees
+null instead of the diagnostic, and the refusal-matrix wait also fails. Finally restored the exact
+corrected source before the next run. This supersedes the earlier visibility “GREEN only” note.
+
+Final targeted coverage before mutation: browser 9/0 (6014.970ms runner duration), routes 13/0.
+Added an independent send-off test with a configured libraryRevert callback: absence of --send
+still refuses with zero callback calls. This makes the send fence independently mutation-testable.
+The kit now has 14 concrete mutations, including agent-label, unreadable-limits problem and send.
+Each isolated target is restored to its candidate SHA256, and worktree hashes are checked before
+continuing to the next mutant (sage-3647). Runner uses TAP so assertion failures can be distinguished
+from timeouts/import/process failures. Full webui/build and the integration gate remain pending.
+
+Dependency update beakley-0008: row217 first push origin/beakley/row217 c25f5b8da is UNTESTED,
+continued from Launchpad e25ef0373. No dependency merge here; its protocol/module mount belongs to
+217 and renderReply needs none of those codes/texts. Integration acceptance remains Sage's gate.
+
+First isolated-mutant attempt stopped honestly at M3-wrong-commit: M1 badge, M1 agent label and M2
+https-only link mutants were killed by assertions; M3 failed via the browser's expected-state wait,
+so the strict runner did NOT count it as a kill. Every target restored/hash-checked and candidate
+hashes unchanged. Logs retained in evidence/mutants-attempt1/. Corrected the new browser test to wait
+for a completed repaint (independent of desired output), then assert changed-marker count. Whole
+browser baseline remains 9/0. No production change. Re-run the whole isolated kit against this test.
+
+## T1 complete: isolated mutants and source-review handoff
+
+sage-3647 final kit on source candidate 507901277: 14/14 assertion kills, no timeout/import/process
+failure counted. Each mutant matched one anchor, restored the target SHA256 and checked the three
+candidate source hashes before the next. evidence/mutants-final/summary.json records every result;
+final worktreeUnchanged=true. Logs name the failing tests, including M3's direct assertion after the
+refresh wait correction. /proc inspection found no remaining Node/Chromium process with the slot
+TMPDIR. Returned lane A to Sage as fethry-0016 at about19:29Z, before the19:38Z hard stop.
+
+Checked-in TAP display copies remove trailing whitespace so the diff is clean. Their raw SHA256
+values are recorded in evidence/raw-log-provenance.json; original byte-for-byte logs remain under
+/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2. This changes evidence presentation only, never tests.
+
+MANIFEST.md and manifest.r1.sha256 freeze the13 changed package files for Dewey. All three handoff
+deviations and Mos1510's two preservation conditions are explicit. Old-test numstats remain80/66 and3/1.
+No full webui/npm ci/build was run; Sage explicitly reserved it for a later window. Full package/script
+and dependency integration gate remains required before landing. No queue move, merge or live action.

agents/fethry/work/queue-225/MANIFEST.md

@@ -0,0 +1,67 @@
+# Row 225 review packet — C2-10b (#1726)
+
+Owner Fethry (14f80e3c), reviewer Dewey (84fb346c). Base 45dca69f6.
+Source candidate 507901277 continues Morgana 66f7becf2 and 9a131e956; no rewritten history.
+Status: targeted tests and full library green; full webui/build and Sage's full gate still pending.
+This packet requests source/manifest review, not landing or a full-green claim.
+
+## Behavior and contracts
+
+The Console shows reply text and citations with path/line/quote, scope and agent-written labels,
+marks a changed file only with valid differing check.file/check.last, links only https URLs, shows
+write/delete notices and explicit Revert results, and displays library status, fetch age, divergence,
+fetch errors, nested replyLimits metadata and R-problems. Invalid library mappings remain visible.
+Revert validates {project,commit}, preserves refusal codes and reports uncertain/wrong-project
+receipts as outcome-unknown without retry. The project is chat project.repo (business.projects key).
+
+A1-A5 are in BUILD.md. Dependency contracts: row217 ordered check.citations and nested replyLimits;
+row288 A2 revert result/notice. No dependency merge in this candidate. Landing order is 217 then225;
+unknown-verb is expected until288 lands. Beakley's GUARD_CODES/FIXED_TEXTS need no renderer import:
+renderReply defines neither and renders those fixed bodies as free text.
+
+## Frozen implementation and tests
+
+manifest.r1.sha256 freezes the 13 changed package paths, including the two approved existing-test
+changes. Check from repository root with `sha256sum -c agents/fethry/work/queue-225/manifest.r1.sha256`.
+All other changed files are BUILD/session records, handoff/approval evidence and this review packet.
+No role, policy, schema, secret, live instance, deployment or queue change is included.
+
+Three departures from the brief, carried from Morgana's handoff:
+
+1. Chat rendering/status live in public/chat.js and chat.css, where the message list is, instead of
+   bus.js and its stylesheet (sage-3596). serve.mjs serves the same pure render.mjs module to owner
+   and granted-user pages; no duplicated browser renderer and no generated asset.
+2. console-bus.mjs and cli.mjs wire libraryRevert beside libraryStatus (sage-3596). --send still
+   independently gates Revert. Preserve row288's separate librarySave wiring at integration.
+3. webui/src/bus.mjs maps library-revert-not-agent to409; bus/tests/channel-proof.test.mjs re-pins
+   only that source's hash and documents why. Mos read and approved this exact +3/-1 (mos-1510).
+
+Existing-test authority: Mos1510 via Sage3623 approves render.test.mjs +80/-66 and channel-proof +3/-1.
+Both exact numstats are unchanged. The malformed-body fixed-line rule is superseded by design5.2's
+whole-body free text, covered by two replacement renderer tests. The old no-options path-badge rule
+is retained and covered by the replacement test plus unchecked-cite browser coverage. BUILD.md
+explains these two preservation conditions and the three new-file assertion corrections in detail.
+
+## Verification and remaining gate
+
+Evidence logs are under evidence/; commands, deadlines, failures and corrections are in BUILD.md.
+Targeted whole-file tests: renderer9/0, routes13/0, browser9/0. Full library81/0, channel-proof2/0.
+No skips/cancellations. Invalid-mapping visibility also has an independent RED then GREEN.
+All 14 isolated mutants were killed by assertions on source candidate507901277; each mutation
+matched one anchor, restored its source hash, and verified unchanged candidate hashes before the next
+mutation. Summary: evidence/mutants-final/summary.json. The first attempt stopped at an expected-state
+wait (not counted as a kill), then the new browser test was improved and the whole kit rerun.
+Raw logs remain under the scratch root; checked-in display copies trim trailing whitespace and record
+raw digests in evidence/raw-log-provenance.json.
+
+Before landing, Sage still runs full webui with MOSAIC_REQUIRE_EDITOR_BUILD=1 after the worktree-local
+webui npm ci, every applicable package/script suite and integration against217. No full webui/build
+in T1 (sage-3647). Dewey approval and Sage's gate/landing remain required; queue moves belong to Sage.
+
+Static audit: the channel-proof source pin matches webui bus.mjs; no hash pin of bus.js, serve.mjs
+or library render.mjs was found. packages' only remaining renderItems match is an explanatory comment
+in the frozen replacement test; no runtime export, import or call remains. No no-cited-answer match.
+
+Review focus: stored check metadata versus untrusted body, missing/malformed file/last, https-only
+links and inert hostile text, Revert authority/receipt uncertainty, async route/sign-out isolation,
+and status diagnostics without owner transport leakage to a granted user.

agents/fethry/work/queue-225/evidence/browser-final.tap

@@ -0,0 +1,64 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 704.129155
+  type: 'test'
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 690.249337
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 595.036289
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 627.082447
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 787.799722
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 587.311743
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 618.209773
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 633.838649
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 619.313248
+  type: 'test'
+  ...
+1..9
+# tests 9
+# suites 0
+# pass 9
+# fail 0
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 6014.970062

agents/fethry/work/queue-225/evidence/browser-final2.tap

@@ -0,0 +1,64 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 636.096036
+  type: 'test'
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 741.239029
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 568.879998
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 641.929005
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 870.041985
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 648.87451
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 566.725897
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 611.150846
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 618.488891
+  type: 'test'
+  ...
+1..9
+# tests 9
+# suites 0
+# pass 9
+# fail 0
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 6014.364529

agents/fethry/work/queue-225/evidence/browser-green.tap

@@ -0,0 +1,16 @@
+✔ chat replies: free text, cites with badges, the agent label, changed since and safe links (583.234335ms)
+✔ chat replies: a write notice reads as its line with a Revert; a refused revert shows its code (634.71741ms)
+✔ chat replies: a read-only Console shows the notice with Revert disabled (574.836149ms)
+✔ chat status line: served commit and age, divergence, fetch error and the problems one click away (607.74749ms)
+✔ chat status line: limits when the status carries them, no problems, and refusals (861.034669ms)
+✔ chat status line: a project with no repository link reads no library status (611.433469ms)
+✔ chat status line: unreadable reply limits show their problem and both fallback keys (606.380675ms)
+✔ chat replies: unchanged file at a different library commit and incomplete checks stay unmarked (650.947719ms)
+ℹ tests 8
+ℹ suites 0
+ℹ pass 8
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 5251.735356

agents/fethry/work/queue-225/evidence/browser-red.tap

@@ -0,0 +1,78 @@
+✖ chat replies: free text, cites with badges, the agent label, changed since and safe links (980.914799ms)
+✔ chat replies: a write notice reads as its line with a Revert; a refused revert shows its code (753.988771ms)
+✔ chat replies: a read-only Console shows the notice with Revert disabled (672.814814ms)
+✔ chat status line: served commit and age, divergence, fetch error and the problems one click away (622.859977ms)
+✖ chat status line: limits when the status carries them, no problems, and refusals (583.956229ms)
+✔ chat status line: a project with no repository link reads no library status (635.758222ms)
+✖ chat status line: unreadable reply limits show their problem and both fallback keys (581.636121ms)
+✔ chat replies: unchanged file at a different library commit and incomplete checks stay unmarked (653.788881ms)
+ℹ tests 8
+ℹ suites 0
+ℹ pass 5
+ℹ fail 3
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 5597.371605
+
+✖ failing tests:
+
+test at packages/webui/tests/chat-replies-browser.test.mjs:81:1
+✖ chat replies: free text, cites with badges, the agent label, changed since and safe links (980.914799ms)
+  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:
+  + actual - expected
+
+  + undefined
+  - false
+
+      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/chat-replies-browser.test.mjs:102:10)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: undefined,
+    expected: false,
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
+
+test at packages/webui/tests/chat-replies-browser.test.mjs:152:1
+✖ chat status line: limits when the status carries them, no problems, and refusals (583.956229ms)
+  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:
+  + actual - expected
+
+  + 'Library at ccccccc · fetched 5 min ago · citations required, up to 4 per reply · no problems'
+  - 'Library at ccccccc · fetched 5 min ago · citations required, up to 4 per reply · limits fell back: citationsPerReply · no problems'
+
+      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/chat-replies-browser.test.mjs:156:10)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: 'Library at ccccccc · fetched 5 min ago · citations required, up to 4 per reply · no problems',
+    expected: 'Library at ccccccc · fetched 5 min ago · citations required, up to 4 per reply · limits fell back: citationsPerReply · no problems',
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
+
+test at packages/webui/tests/chat-replies-browser.test.mjs:173:1
+✖ chat status line: unreadable reply limits show their problem and both fallback keys (581.636121ms)
+  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:
+  + actual - expected
+
+  + 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · no problems'
+  - 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · reply-limits-unreadable · no problems'
+
+      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/chat-replies-browser.test.mjs:179:10)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · no problems',
+    expected: 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · reply-limits-unreadable · no problems',
+    operator: 'strictEqual',
+    diff: 'simple'
+  }

agents/fethry/work/queue-225/evidence/channel-proof.tap

@@ -0,0 +1,22 @@
+TAP version 13
+# Subtest: channel conversion preserves the four proof/transport byte baselines and modules cannot import a proof caller
+ok 1 - channel conversion preserves the four proof/transport byte baselines and modules cannot import a proof caller
+  ---
+  duration_ms: 4.280459
+  type: 'test'
+  ...
+# Subtest: channel recovery still requires the same shim path and rejects an absent or forged proof
+ok 2 - channel recovery still requires the same shim path and rejects an absent or forged proof
+  ---
+  duration_ms: 413.032186
+  type: 'test'
+  ...
+1..2
+# tests 2
+# suites 0
+# pass 2
+# fail 0
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 539.602759

agents/fethry/work/queue-225/evidence/library-full.tap

@@ -0,0 +1,496 @@
+TAP version 13
+# Subtest: resolver step 1: a path from the repo root, with or without .md
+ok 1 - resolver step 1: a path from the repo root, with or without .md
+  ---
+  duration_ms: 1.051208
+  type: 'test'
+  ...
+# Subtest: resolver step 2: the same path with vaultPrefix/ stripped
+ok 2 - resolver step 2: the same path with vaultPrefix/ stripped
+  ---
+  duration_ms: 0.164795
+  type: 'test'
+  ...
+# Subtest: resolver step 3: a path relative to the linking file, never above the repo root
+ok 3 - resolver step 3: a path relative to the linking file, never above the repo root
+  ---
+  duration_ms: 0.192765
+  type: 'test'
+  ...
+# Subtest: resolver step 4: a base name that matches exactly one indexed file
+ok 4 - resolver step 4: a base name that matches exactly one indexed file
+  ---
+  duration_ms: 0.201611
+  type: 'test'
+  ...
+# Subtest: a link into another of her repos resolves to nothing
+ok 5 - a link into another of her repos resolves to nothing
+  ---
+  duration_ms: 0.130282
+  type: 'test'
+  ...
+# Subtest: wikilink forms, embeds, and links skipped inside code
+ok 6 - wikilink forms, embeds, and links skipped inside code
+  ---
+  duration_ms: 1.445011
+  type: 'test'
+  ...
+# Subtest: only a body embed whose target has an extension other than .md, in any case, is an attachment
+ok 7 - only a body embed whose target has an extension other than .md, in any case, is an attachment
+  ---
+  duration_ms: 0.25003
+  type: 'test'
+  ...
+# Subtest: the fixture mapping checks and comes back frozen
+ok 8 - the fixture mapping checks and comes back frozen
+  ---
+  duration_ms: 1.772928
+  type: 'test'
+  ...
+# Subtest: C2-01c: a prefix inside or holding another entry's book refuses library-playground-other-universe
+ok 9 - C2-01c: a prefix inside or holding another entry's book refuses library-playground-other-universe
+  ---
+  duration_ms: 0.735312
+  type: 'test'
+  ...
+# Subtest: C2-01c: a prefix equal to a book folder, or holding its own, refuses library-mapping-invalid
+ok 10 - C2-01c: a prefix equal to a book folder, or holding its own, refuses library-mapping-invalid
+  ---
+  duration_ms: 0.532498
+  type: 'test'
+  ...
+# Subtest: C2-01c: universe-level prefixes lie outside every book, in a plain universe and in a hybrid with no books
+ok 11 - C2-01c: universe-level prefixes lie outside every book, in a plain universe and in a hybrid with no books
+  ---
+  duration_ms: 0.668173
+  type: 'test'
+  ...
+# Subtest: C2-01c: a draft takes kind, name and playground only, and comes back frozen with books []
+ok 12 - C2-01c: a draft takes kind, name and playground only, and comes back frozen with books []
+  ---
+  duration_ms: 1.032507
+  type: 'test'
+  ...
+# Subtest: no playground prefix holds another, and no book folder holds another
+ok 13 - no playground prefix holds another, and no book folder holds another
+  ---
+  duration_ms: 0.507943
+  type: 'test'
+  ...
+# Subtest: shape refusals: kind, remote, branch, unknown keys, types, manuscript, folder names
+ok 14 - shape refusals: kind, remote, branch, unknown keys, types, manuscript, folder names
+  ---
+  duration_ms: 0.740368
+  type: 'test'
+  ...
+# Subtest: C2-03a sage-2021: user is optional, kept when given, and must be a plain account name
+ok 15 - C2-03a sage-2021: user is optional, kept when given, and must be a plain account name
+  ---
+  duration_ms: 0.659277
+  type: 'test'
+  ...
+# Subtest: a hybrid universe is a shape the query code can take (1.4), with sources that must exist
+ok 16 - a hybrid universe is a shape the query code can take (1.4), with sources that must exist
+  ---
+  duration_ms: 0.695117
+  type: 'test'
+  ...
+# Subtest: a caller-supplied fail receives the code, as business file loading will pass it (C2-04)
+ok 17 - a caller-supplied fail receives the code, as business file loading will pass it (C2-04)
+  ---
+  duration_ms: 0.392362
+  type: 'test'
+  ...
+# Subtest: scope comes from the path alone (design 1.2)
+ok 18 - scope comes from the path alone (design 1.2)
+  ---
+  duration_ms: 0.466406
+  type: 'test'
+  ...
+# Subtest: C2-04 mirror: exact default path, bare without checkout or remote, and idempotent initialization
+ok 19 - C2-04 mirror: exact default path, bare without checkout or remote, and idempotent initialization
+  ---
+  duration_ms: 46.645994
+  type: 'test'
+  ...
+# Subtest: C2-04 mirror: simultaneous creators publish one intact mirror and leave no staging paths
+ok 20 - C2-04 mirror: simultaneous creators publish one intact mirror and leave no staging paths
+  ---
+  duration_ms: 32.763959
+  type: 'test'
+  ...
+# Subtest: C2-04 mirror: skipped publication accepts both coreutils statuses without removing the winner
+ok 21 - C2-04 mirror: skipped publication accepts both coreutils statuses without removing the winner
+  ---
+  duration_ms: 109.751094
+  type: 'test'
+  ...
+# Subtest: C2-04 mirror: preserve occupied directories and reject symlink ancestors and code overlaps
+ok 22 - C2-04 mirror: preserve occupied directories and reject symlink ancestors and code overlaps
+  ---
+  duration_ms: 20.129293
+  type: 'test'
+  ...
+# Subtest: C2-04 mirror: existing metadata accepts only bare Git plus state and the precreated lock
+ok 23 - C2-04 mirror: existing metadata accepts only bare Git plus state and the precreated lock
+  ---
+  duration_ms: 24.021555
+  type: 'test'
+  ...
+# Subtest: C2-04 state: missing state is empty only while the served ref is absent
+ok 24 - C2-04 state: missing state is empty only while the served ref is absent
+  ---
+  duration_ms: 37.436349
+  type: 'test'
+  ...
+# Subtest: C2-04 state: valid problems and sync metadata return no content and change no state bytes
+ok 25 - C2-04 state: valid problems and sync metadata return no content and change no state bytes
+  ---
+  duration_ms: 37.681315
+  type: 'test'
+  ...
+# Subtest: C2-04 state: strict keys, types, times, branch, commit and fixed R messages fail closed
+ok 26 - C2-04 state: strict keys, types, times, branch, commit and fixed R messages fail closed
+  ---
+  duration_ms: 105.483341
+  type: 'test'
+  ...
+# Subtest: C2-04 state: symlink, hardlink, non-private state and missing lock refuse without replacement
+ok 27 - C2-04 state: symlink, hardlink, non-private state and missing lock refuse without replacement
+  ---
+  duration_ms: 29.562786
+  type: 'test'
+  ...
+# Subtest: C2-04 file: served commit, not HEAD or a caller commit, owns the exact returned text
+ok 28 - C2-04 file: served commit, not HEAD or a caller commit, owns the exact returned text
+  ---
+  duration_ms: 74.057232
+  type: 'test'
+  ...
+# Subtest: C2-04 file: R1, R2 and R7 exclusions and never-synced mirrors cannot return file bodies
+ok 29 - C2-04 file: R1, R2 and R7 exclusions and never-synced mirrors cannot return file bodies
+  ---
+  duration_ms: 80.573844
+  type: 'test'
+  ...
+# Subtest: C2-04 lock: a first-sync and fast-forward reader wait for a consistent pair across processes
+ok 30 - C2-04 lock: a first-sync and fast-forward reader wait for a consistent pair across processes
+  ---
+  duration_ms: 253.247948
+  type: 'test'
+  ...
+# Subtest: C2-04 lock: same-process waits, timeout code, callback expiry and throw release
+ok 31 - C2-04 lock: same-process waits, timeout code, callback expiry and throw release
+  ---
+  duration_ms: 5031.462795
+  type: 'test'
+  ...
+# Subtest: C2-04 lock: owner death releases the kernel lock without replacing its file
+ok 32 - C2-04 lock: owner death releases the kernel lock without replacing its file
+  ---
+  duration_ms: 61.533295
+  type: 'test'
+  ...
+# Subtest: C2-04 lock: a missing flock binary becomes a handled refusal
+ok 33 - C2-04 lock: a missing flock binary becomes a handled refusal
+  ---
+  duration_ms: 57.176644
+  type: 'test'
+  ...
+# Subtest: C2-04 lock: an unawaited scoped read drains before the lock is released
+ok 34 - C2-04 lock: an unawaited scoped read drains before the lock is released
+  ---
+  duration_ms: 22.766874
+  type: 'test'
+  ...
+# Subtest: the fixture reads clean: every resolver step, appears_in and relationships wikilinks indexed
+ok 35 - the fixture reads clean: every resolver step, appears_in and relationships wikilinks indexed
+  ---
+  duration_ms: 33.888061
+  type: 'test'
+  ...
+# Subtest: R1: executables, symlinks, gitlinks, blobs over 1 MiB and non-UTF-8 text are not indexed
+ok 36 - R1: executables, symlinks, gitlinks, blobs over 1 MiB and non-UTF-8 text are not indexed
+  ---
+  duration_ms: 68.951498
+  type: 'test'
+  ...
+# Subtest: R2: unmapped paths are reported and not indexed
+ok 37 - R2: unmapped paths are reported and not indexed
+  ---
+  duration_ms: 25.70771
+  type: 'test'
+  ...
+# Subtest: R3: front matter not fully parsed stays raw, with the line where parsing stopped
+ok 38 - R3: front matter not fully parsed stays raw, with the line where parsing stopped
+  ---
+  duration_ms: 26.059427
+  type: 'test'
+  ...
+# Subtest: front matter forms the reader accepts and refuses
+ok 39 - front matter forms the reader accepts and refuses
+  ---
+  duration_ms: 0.448293
+  type: 'test'
+  ...
+# Subtest: R4: a link to no file, to more than one, or into another repo is reported and not followed
+ok 40 - R4: a link to no file, to more than one, or into another repo is reported and not followed
+  ---
+  duration_ms: 26.225692
+  type: 'test'
+  ...
+# Subtest: a block list link carries its item line, a scalar or flow link its key line, and problems follow
+ok 41 - a block list link carries its item line, a scalar or flow link its key line, and problems follow
+  ---
+  duration_ms: 22.565103
+  type: 'test'
+  ...
+# Subtest: an unresolved attachment embed gives no problem; a link or front matter value to one is R4; a note embed resolves
+ok 42 - an unresolved attachment embed gives no problem; a link or front matter value to one is R4; a note embed resolves
+  ---
+  duration_ms: 20.903777
+  type: 'test'
+  ...
+# Subtest: an indexed Dr.Quinn.md resolves as a body link, a block list link and an embed
+ok 43 - an indexed Dr.Quinn.md resolves as a body link, a block list link and an embed
+  ---
+  duration_ms: 25.42747
+  type: 'test'
+  ...
+# Subtest: R5: a canon file that refers into the playground is reported, and the link still goes by path
+ok 44 - R5: a canon file that refers into the playground is reported, and the link still goes by path
+  ---
+  duration_ms: 27.37119
+  type: 'test'
+  ...
+# Subtest: R6: a canon file that refers into another universe is reported; a hybrid may refer into its sources
+ok 45 - R6: a canon file that refers into another universe is reported; a hybrid may refer into its sources
+  ---
+  duration_ms: 30.585458
+  type: 'test'
+  ...
+# Subtest: R7: two paths that differ only in case are both left out
+ok 46 - R7: two paths that differ only in case are both left out
+  ---
+  duration_ms: 40.709509
+  type: 'test'
+  ...
+# Subtest: the reader reads the commit, never the working tree, and refuses a bad commit id
+ok 47 - the reader reads the commit, never the working tree, and refuses a bad commit id
+  ---
+  duration_ms: 33.579454
+  type: 'test'
+  ...
+# Subtest: a bare mirror reads the same as the clone
+ok 48 - a bare mirror reads the same as the clone
+  ---
+  duration_ms: 38.368686
+  type: 'test'
+  ...
+# Subtest: free text renders as itself with no citations
+ok 49 - free text renders as itself with no citations
+  ---
+  duration_ms: 1.571777
+  type: 'test'
+  ...
+# Subtest: a cited reply renders its text, then each cite with the badge from the check result
+ok 50 - a cited reply renders its text, then each cite with the badge from the check result
+  ---
+  duration_ms: 0.537429
+  type: 'test'
+  ...
+# Subtest: a parsed body renders as its string does
+ok 51 - a parsed body renders as its string does
+  ---
+  duration_ms: 0.304068
+  type: 'test'
+  ...
+# Subtest: without a check result a path cite has no badge, no label and is never changed
+ok 52 - without a check result a path cite has no badge, no label and is never changed
+  ---
+  duration_ms: 0.184363
+  type: 'test'
+  ...
+# Subtest: the label and the badge come from the check result only, never from a bad entry
+ok 53 - the label and the badge come from the check result only, never from a bad entry
+  ---
+  duration_ms: 0.180581
+  type: 'test'
+  ...
+# Subtest: a web cite is a link only for https
+ok 54 - a web cite is a link only for https
+  ---
+  duration_ms: 0.293669
+  type: 'test'
+  ...
+# Subtest: a write notice renders its fixed line
+ok 55 - a write notice renders its fixed line
+  ---
+  duration_ms: 0.277197
+  type: 'test'
+  ...
+# Subtest: a body without the reply or notice shape is free text: the whole body, no citations
+ok 56 - a body without the reply or notice shape is free text: the whole body, no citations
+  ---
+  duration_ms: 0.345807
+  type: 'test'
+  ...
+# Subtest: an empty citations list is a reply with no cites
+ok 57 - an empty citations list is a reply with no cites
+  ---
+  duration_ms: 0.187354
+  type: 'test'
+  ...
+# Subtest: C2-01c: each level gives its universe, and its book or null
+ok 58 - C2-01c: each level gives its universe, and its book or null
+  ---
+  duration_ms: 3.363132
+  type: 'test'
+  ...
+# Subtest: C2-01c: prefixes come first: in a book that holds a prefix, a file outside it is canon and one under it playground
+ok 59 - C2-01c: prefixes come first: in a book that holds a prefix, a file outside it is canon and one under it playground
+  ---
+  duration_ms: 0.480483
+  type: 'test'
+  ...
+# Subtest: C2-01c: a canon file linking into a draft gives R6, and into its own universe-level prefix gives R5
+ok 60 - C2-01c: a canon file linking into a draft gives R6, and into its own universe-level prefix gives R5
+  ---
+  duration_ms: 44.606565
+  type: 'test'
+  ...
+# Subtest: the survey prints folder names, counts, key sets and link-form counts, and never text
+ok 61 - the survey prints folder names, counts, key sets and link-form counts, and never text
+  ---
+  duration_ms: 37.28555
+  type: 'test'
+  ...
+# Subtest: folder names print DEL, C1 and bidi controls, U+061C among them, as escapes
+ok 62 - folder names print DEL, C1 and bidi controls, U+061C among them, as escapes
+  ---
+  duration_ms: 26.222951
+  type: 'test'
+  ...
+# Subtest: an embed of an attachment counts as an embed and as an attachment; a plain link to one does not
+ok 63 - an embed of an attachment counts as an embed and as an attachment; a plain link to one does not
+  ---
+  duration_ms: 26.23793
+  type: 'test'
+  ...
+# Subtest: with --mapping the survey adds scope, resolver step and problem counts
+ok 64 - with --mapping the survey adds scope, resolver step and problem counts
+  ---
+  duration_ms: 41.437066
+  type: 'test'
+  ...
+# Subtest: survey exit codes: usage 4, bad mapping 3, unreadable repo 2
+ok 65 - survey exit codes: usage 4, bad mapping 3, unreadable repo 2
+  ---
+  duration_ms: 17.463059
+  type: 'test'
+  ...
+# Subtest: scripts/mosaic library survey reaches the survey
+ok 66 - scripts/mosaic library survey reaches the survey
+  ---
+  duration_ms: 77.634947
+  type: 'test'
+  ...
+# Subtest: C2-03a argv: the fixed sequence, one https allow, no other protocol key
+ok 67 - C2-03a argv: the fixed sequence, one https allow, no other protocol key
+  ---
+  duration_ms: 1.605597
+  type: 'test'
+  ...
+# Subtest: C2-03a argv: only an https URL with a plain host, no userinfo, and a plain user
+ok 68 - C2-03a argv: only an https URL with a plain host, no userinfo, and a plain user
+  ---
+  duration_ms: 0.713147
+  type: 'test'
+  ...
+# Subtest: C2-03a helper: answers only the exact prompts for the configured host and user (dewey-0765)
+ok 69 - C2-03a helper: answers only the exact prompts for the configured host and user (dewey-0765)
+  ---
+  duration_ms: 31.590474
+  type: 'test'
+  ...
+# Subtest: C2-03a first sync: served is the fetched tip, HEAD is served, the survey reads it, and the token stays in the slot
+ok 70 - C2-03a first sync: served is the fetched tip, HEAD is served, the survey reads it, and the token stays in the slot
+  ---
+  duration_ms: 135.075159
+  type: 'test'
+  ...
+# Subtest: C2-03a fast-forward: served moves, problems are rebuilt, and a repeat changes only lastFetch
+ok 71 - C2-03a fast-forward: served moves, problems are rebuilt, and a repeat changes only lastFetch
+  ---
+  duration_ms: 225.707972
+  type: 'test'
+  ...
+# Subtest: C2-03a Filbert N2: a read that took served before a sync still finds its objects after served moves
+ok 72 - C2-03a Filbert N2: a read that took served before a sync still finds its objects after served moves
+  ---
+  duration_ms: 205.10431
+  type: 'test'
+  ...
+# Subtest: C2-03a overlap: a reader during a sync sees the old pair or the new one, never a mix
+ok 73 - C2-03a overlap: a reader during a sync sees the old pair or the new one, never a mix
+  ---
+  duration_ms: 175.907929
+  type: 'test'
+  ...
+# Subtest: C2-03a diverged: a non-fast-forward keeps serving and holds until a human accepts the tip
+ok 74 - C2-03a diverged: a non-fast-forward keeps serving and holds until a human accepts the tip
+  ---
+  duration_ms: 431.553812
+  type: 'test'
+  ...
+# Subtest: C2-03a accept starts the record over, so a changed branch gets a fresh state
+ok 75 - C2-03a accept starts the record over, so a changed branch gets a fresh state
+  ---
+  duration_ms: 195.011432
+  type: 'test'
+  ...
+# Subtest: C2-03a fetch failure: a wrong token keeps serving and records the error, lastFetch unchanged
+ok 76 - C2-03a fetch failure: a wrong token keeps serving and records the error, lastFetch unchanged
+  ---
+  duration_ms: 192.898644
+  type: 'test'
+  ...
+# Subtest: C2-03a a failed first fetch records the error with nothing served
+ok 77 - C2-03a a failed first fetch records the error with nothing served
+  ---
+  duration_ms: 61.594695
+  type: 'test'
+  ...
+# Subtest: C2-03a a 302 to another host fails the fetch and the other host sees nothing
+ok 78 - C2-03a a 302 to another host fails the fetch and the other host sees nothing
+  ---
+  duration_ms: 64.82991
+  type: 'test'
+  ...
+# Subtest: C2-03a the slot: missing or unsafe refuses before git, and sync never opens it
+ok 79 - C2-03a the slot: missing or unsafe refuses before git, and sync never opens it
+  ---
+  duration_ms: 59.167725
+  type: 'test'
+  ...
+# Subtest: C2-03a sage-2021: an entry with no user refuses library-remote-invalid and runs no git
+ok 80 - C2-03a sage-2021: an entry with no user refuses library-remote-invalid and runs no git
+  ---
+  duration_ms: 35.37205
+  type: 'test'
+  ...
+# Subtest: C2-03a one sync per mirror: an overlapping call refuses library-sync-busy
+ok 81 - C2-03a one sync per mirror: an overlapping call refuses library-sync-busy
+  ---
+  duration_ms: 118.260687
+  type: 'test'
+  ...
+1..81
+# tests 81
+# suites 0
+# pass 81
+# fail 0
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 9149.325891

agents/fethry/work/queue-225/evidence/mapping-red.tap

@@ -0,0 +1,48 @@
+✔ chat replies: free text, cites with badges, the agent label, changed since and safe links (633.807074ms)
+✔ chat replies: a write notice reads as its line with a Revert; a refused revert shows its code (621.95095ms)
+✔ chat replies: a read-only Console shows the notice with Revert disabled (577.638161ms)
+✔ chat status line: served commit and age, divergence, fetch error and the problems one click away (555.847899ms)
+✖ chat status line: limits when the status carries them, no problems, and refusals (3725.696272ms)
+✔ chat status line: a project with no repository link reads no library status (657.572856ms)
+✔ chat status line: unreadable reply limits show their problem and both fallback keys (663.163445ms)
+✔ chat replies: unchanged file at a different library commit and incomplete checks stay unmarked (616.184063ms)
+✖ chat status line: an invalid library mapping remains visible for diagnosis (597.976623ms)
+ℹ tests 9
+ℹ suites 0
+ℹ pass 7
+ℹ fail 2
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 8782.679569
+
+✖ failing tests:
+
+test at packages/webui/tests/chat-replies-browser.test.mjs:152:1
+✖ chat status line: limits when the status carries them, no problems, and refusals (3725.696272ms)
+  Error: Uncaught (in promise) Error: window.__statusReads.length && document.querySelector(".chat-conversation") && document.querySelector(".chat-library")?.textContent==="Library status unavailable (library-mapping-invalid).": undefined
+      at Object.evaluate (file:///home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/browser.mjs:49:35)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/chat-replies-browser.test.mjs:162:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+
+test at packages/webui/tests/chat-replies-browser.test.mjs:200:1
+✖ chat status line: an invalid library mapping remains visible for diagnosis (597.976623ms)
+  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:
+  + actual - expected
+
+  + null
+  - 'Library status unavailable (library-mapping-invalid).'
+
+      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/chat-replies-browser.test.mjs:203:10)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: null,
+    expected: 'Library status unavailable (library-mapping-invalid).',
+    operator: 'strictEqual',
+    diff: 'simple'
+  }

agents/fethry/work/queue-225/evidence/mutants-attempt1-run.log

@@ -0,0 +1,4 @@
+{"mutant": "M1-badges", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants/M1-badges.tap"}
+{"mutant": "M1-agent-label", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants/M1-agent-label.tap"}
+{"mutant": "M2-http-links", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants/M2-http-links.tap"}
+{"mutant": "M3-wrong-commit", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": false, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants/M3-wrong-commit.tap"}

agents/fethry/work/queue-225/evidence/mutants-attempt1/M1-agent-label.tap

@@ -0,0 +1,192 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+not ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 627.180675
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-9ui_vkk0/M1-agent-label/packages/webui/tests/chat-replies-browser.test.mjs:81:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly deep-equal:
+    + actual - expected
+    ... Skipped lines
+
+      [
+        {
+          agent: null,
+          badge: 'canon',
+          changed: false,
+    ...
+        {
+    +     agent: null,
+    -     agent: 'agent-written: acme/scribe',
+          badge: 'supporting',
+          changed: false,
+          href: null,
+          quote: 'green eyes',
+          ref: 'Notes/Eyes.md:9-10 @aaaaaaa',
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected:
+    0:
+      badge: 'canon'
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: 'playground'
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: 'supporting'
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: 'agent-written: acme/scribe'
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: ~
+      rel: ~
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: ~
+      rel: ~
+      quote: 'script'
+      agent: ~
+      changed: false
+  actual:
+    0:
+      badge: 'canon'
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: 'playground'
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: 'supporting'
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: ~
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: ~
+      rel: ~
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: ~
+      rel: ~
+      quote: 'script'
+      agent: ~
+      changed: false
+  operator: 'deepStrictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-9ui_vkk0/M1-agent-label/packages/webui/tests/chat-replies-browser.test.mjs:90:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 778.572201
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 641.728604
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 629.327348
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 837.886073
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 613.037186
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 651.026507
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 735.546636
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 712.174542
+  type: 'test'
+  ...
+1..9
+# tests 9
+# suites 0
+# pass 8
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 6353.090574

agents/fethry/work/queue-225/evidence/mutants-attempt1/M1-badges.tap

@@ -0,0 +1,206 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+not ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 638.589537
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-9ui_vkk0/M1-badges/packages/webui/tests/chat-replies-browser.test.mjs:81:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly deep-equal:
+    + actual - expected
+    ... Skipped lines
+
+      [
+        {
+          agent: null,
+    +     badge: null,
+    -     badge: 'canon',
+          changed: false,
+          href: null,
+          quote: 'her grey eyes',
+          ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa',
+          rel: null
+    ...
+          agent: null,
+    +     badge: null,
+    -     badge: 'playground',
+          changed: true,
+          href: null,
+          quote: 'a storm',
+          ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa',
+          rel: null
+    ...
+          agent: 'agent-written: acme/scribe',
+    +     badge: null,
+    -     badge: 'supporting',
+          changed: false,
+          href: null,
+          quote: 'green eyes',
+          ref: 'Notes/Eyes.md:9-10 @aaaaaaa',
+          rel: null
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected:
+    0:
+      badge: 'canon'
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: 'playground'
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: 'supporting'
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: 'agent-written: acme/scribe'
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: ~
+      rel: ~
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: ~
+      rel: ~
+      quote: 'script'
+      agent: ~
+      changed: false
+  actual:
+    0:
+      badge: ~
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: ~
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: ~
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: 'agent-written: acme/scribe'
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: ~
+      rel: ~
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: ~
+      rel: ~
+      quote: 'script'
+      agent: ~
+      changed: false
+  operator: 'deepStrictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-9ui_vkk0/M1-badges/packages/webui/tests/chat-replies-browser.test.mjs:90:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 770.070531
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 519.328288
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 647.667301
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 999.237447
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 676.088845
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 634.472637
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 655.963182
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 578.819646
+  type: 'test'
+  ...
+1..9
+# tests 9
+# suites 0
+# pass 8
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 6239.022812

agents/fethry/work/queue-225/evidence/mutants-attempt1/M2-http-links.tap

@@ -0,0 +1,204 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+not ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 655.901619
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-9ui_vkk0/M2-http-links/packages/webui/tests/chat-replies-browser.test.mjs:81:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly deep-equal:
+    + actual - expected
+    ... Skipped lines
+
+      [
+        {
+          agent: null,
+          badge: 'canon',
+          changed: false,
+    ...
+          changed: false,
+    +     href: 'http://example.invalid/plain',
+    -     href: null,
+          quote: 'plain http',
+          ref: 'http://example.invalid/plain',
+    +     rel: 'noopener noreferrer'
+    -     rel: null
+        },
+        {
+          agent: null,
+          badge: 'web',
+          changed: false,
+    +     href: 'javascript:window.injected=2',
+    -     href: null,
+          quote: 'script',
+          ref: 'javascript:window.injected=2',
+    +     rel: 'noopener noreferrer'
+    -     rel: null
+        }
+      ]
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected:
+    0:
+      badge: 'canon'
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: 'playground'
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: 'supporting'
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: 'agent-written: acme/scribe'
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: ~
+      rel: ~
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: ~
+      rel: ~
+      quote: 'script'
+      agent: ~
+      changed: false
+  actual:
+    0:
+      badge: 'canon'
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: 'playground'
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: 'supporting'
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: 'agent-written: acme/scribe'
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: 'http://example.invalid/plain'
+      rel: 'noopener noreferrer'
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: 'javascript:window.injected=2'
+      rel: 'noopener noreferrer'
+      quote: 'script'
+      agent: ~
+      changed: false
+  operator: 'deepStrictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-9ui_vkk0/M2-http-links/packages/webui/tests/chat-replies-browser.test.mjs:90:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 741.122544
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 616.728572
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 625.818493
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 867.033773
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 655.587703
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 615.997516
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 648.263681
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 624.323397
+  type: 'test'
+  ...
+1..9
+# tests 9
+# suites 0
+# pass 8
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 6168.633364

agents/fethry/work/queue-225/evidence/mutants-attempt1/M3-wrong-commit.tap

@@ -0,0 +1,74 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 640.32042
+  type: 'test'
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 694.233373
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 611.500508
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 606.581119
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 896.462474
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 666.798177
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 629.105559
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+not ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 3654.057789
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-9ui_vkk0/M3-wrong-commit/packages/webui/tests/chat-replies-browser.test.mjs:184:1'
+  failureType: 'testCodeFailure'
+  error: 'Uncaught (in promise) Error: document.querySelectorAll(".chat-changed").length===0: undefined'
+  code: 'ERR_TEST_FAILURE'
+  stack: |-
+    Object.evaluate (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-9ui_vkk0/M3-wrong-commit/packages/webui/tests/browser.mjs:49:35)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-9ui_vkk0/M3-wrong-commit/packages/webui/tests/chat-replies-browser.test.mjs:195:3)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 656.44095
+  type: 'test'
+  ...
+1..9
+# tests 9
+# suites 0
+# pass 8
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 9179.328916

agents/fethry/work/queue-225/evidence/mutants-attempt1/summary.json

@@ -0,0 +1,47 @@
+{
+  "head": "77172ce3b46eb289409068518b7022fc7be47ebe",
+  "clear": "sage-3647",
+  "worktreeUnchanged": true,
+  "results": [
+    {
+      "mutant": "M1-badges",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants/M1-badges.tap"
+    },
+    {
+      "mutant": "M1-agent-label",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants/M1-agent-label.tap"
+    },
+    {
+      "mutant": "M2-http-links",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants/M2-http-links.tap"
+    },
+    {
+      "mutant": "M3-wrong-commit",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": false,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants/M3-wrong-commit.tap"
+    }
+  ]
+}

agents/fethry/work/queue-225/evidence/mutants-final-run.log

@@ -0,0 +1,14 @@
+{"mutant": "M1-badges", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M1-badges.tap"}
+{"mutant": "M1-agent-label", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M1-agent-label.tap"}
+{"mutant": "M2-http-links", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M2-http-links.tap"}
+{"mutant": "M3-wrong-commit", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M3-wrong-commit.tap"}
+{"mutant": "M3-missing-file", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M3-missing-file.tap"}
+{"mutant": "M4-fallback", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M4-fallback.tap"}
+{"mutant": "M4-problem", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/chat-replies-browser.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M4-problem.tap"}
+{"mutant": "M5-send", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/library-routes.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M5-send.tap"}
+{"mutant": "M5-project-receipt", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/library-routes.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M5-project-receipt.tap"}
+{"mutant": "M5-commit-input", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/library-routes.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M5-commit-input.tap"}
+{"mutant": "M5-origin", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/library-routes.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M5-origin.tap"}
+{"mutant": "M5-fetch-metadata", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/library-routes.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M5-fetch-metadata.tap"}
+{"mutant": "M6-duplicate-call", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/library-routes.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M6-duplicate-call.tap"}
+{"mutant": "M7-user-fence", "anchorHits": 1, "restored": true, "worktreeUnchanged": true, "exit": 1, "killed": true, "test": "packages/webui/tests/library-routes.test.mjs", "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M7-user-fence.tap"}

agents/fethry/work/queue-225/evidence/mutants-final/M1-agent-label.tap

@@ -0,0 +1,192 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+not ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 646.851404
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M1-agent-label/packages/webui/tests/chat-replies-browser.test.mjs:81:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly deep-equal:
+    + actual - expected
+    ... Skipped lines
+
+      [
+        {
+          agent: null,
+          badge: 'canon',
+          changed: false,
+    ...
+        {
+    +     agent: null,
+    -     agent: 'agent-written: acme/scribe',
+          badge: 'supporting',
+          changed: false,
+          href: null,
+          quote: 'green eyes',
+          ref: 'Notes/Eyes.md:9-10 @aaaaaaa',
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected:
+    0:
+      badge: 'canon'
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: 'playground'
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: 'supporting'
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: 'agent-written: acme/scribe'
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: ~
+      rel: ~
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: ~
+      rel: ~
+      quote: 'script'
+      agent: ~
+      changed: false
+  actual:
+    0:
+      badge: 'canon'
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: 'playground'
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: 'supporting'
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: ~
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: ~
+      rel: ~
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: ~
+      rel: ~
+      quote: 'script'
+      agent: ~
+      changed: false
+  operator: 'deepStrictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M1-agent-label/packages/webui/tests/chat-replies-browser.test.mjs:90:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 667.90945
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 588.346681
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 485.882289
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 709.847041
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 544.885551
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 514.410016
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 542.746154
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 582.608663
+  type: 'test'
+  ...
+1..9
+# tests 9
+# suites 0
+# pass 8
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 5409.980177

agents/fethry/work/queue-225/evidence/mutants-final/M1-badges.tap

@@ -0,0 +1,206 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+not ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 621.562133
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M1-badges/packages/webui/tests/chat-replies-browser.test.mjs:81:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly deep-equal:
+    + actual - expected
+    ... Skipped lines
+
+      [
+        {
+          agent: null,
+    +     badge: null,
+    -     badge: 'canon',
+          changed: false,
+          href: null,
+          quote: 'her grey eyes',
+          ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa',
+          rel: null
+    ...
+          agent: null,
+    +     badge: null,
+    -     badge: 'playground',
+          changed: true,
+          href: null,
+          quote: 'a storm',
+          ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa',
+          rel: null
+    ...
+          agent: 'agent-written: acme/scribe',
+    +     badge: null,
+    -     badge: 'supporting',
+          changed: false,
+          href: null,
+          quote: 'green eyes',
+          ref: 'Notes/Eyes.md:9-10 @aaaaaaa',
+          rel: null
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected:
+    0:
+      badge: 'canon'
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: 'playground'
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: 'supporting'
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: 'agent-written: acme/scribe'
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: ~
+      rel: ~
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: ~
+      rel: ~
+      quote: 'script'
+      agent: ~
+      changed: false
+  actual:
+    0:
+      badge: ~
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: ~
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: ~
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: 'agent-written: acme/scribe'
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: ~
+      rel: ~
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: ~
+      rel: ~
+      quote: 'script'
+      agent: ~
+      changed: false
+  operator: 'deepStrictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M1-badges/packages/webui/tests/chat-replies-browser.test.mjs:90:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 731.101767
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 633.163696
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 637.761161
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 847.929653
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 635.512979
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 645.427688
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 672.272209
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 629.043251
+  type: 'test'
+  ...
+1..9
+# tests 9
+# suites 0
+# pass 8
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 6169.954716

agents/fethry/work/queue-225/evidence/mutants-final/M2-http-links.tap

@@ -0,0 +1,204 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+not ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 582.248796
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M2-http-links/packages/webui/tests/chat-replies-browser.test.mjs:81:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly deep-equal:
+    + actual - expected
+    ... Skipped lines
+
+      [
+        {
+          agent: null,
+          badge: 'canon',
+          changed: false,
+    ...
+          changed: false,
+    +     href: 'http://example.invalid/plain',
+    -     href: null,
+          quote: 'plain http',
+          ref: 'http://example.invalid/plain',
+    +     rel: 'noopener noreferrer'
+    -     rel: null
+        },
+        {
+          agent: null,
+          badge: 'web',
+          changed: false,
+    +     href: 'javascript:window.injected=2',
+    -     href: null,
+          quote: 'script',
+          ref: 'javascript:window.injected=2',
+    +     rel: 'noopener noreferrer'
+    -     rel: null
+        }
+      ]
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected:
+    0:
+      badge: 'canon'
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: 'playground'
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: 'supporting'
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: 'agent-written: acme/scribe'
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: ~
+      rel: ~
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: ~
+      rel: ~
+      quote: 'script'
+      agent: ~
+      changed: false
+  actual:
+    0:
+      badge: 'canon'
+      ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'her grey eyes'
+      agent: ~
+      changed: false
+    1:
+      badge: 'playground'
+      ref: 'Book One/Playground/What If.md:5-6 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'a storm'
+      agent: ~
+      changed: true
+    2:
+      badge: 'supporting'
+      ref: 'Notes/Eyes.md:9-10 @aaaaaaa'
+      href: ~
+      rel: ~
+      quote: 'green eyes'
+      agent: 'agent-written: acme/scribe'
+      changed: false
+    3:
+      badge: 'web'
+      ref: 'https://example.invalid/tides'
+      href: 'https://example.invalid/tides'
+      rel: 'noopener noreferrer'
+      quote: 'spring tides'
+      agent: ~
+      changed: false
+    4:
+      badge: 'web'
+      ref: 'http://example.invalid/plain'
+      href: 'http://example.invalid/plain'
+      rel: 'noopener noreferrer'
+      quote: 'plain http'
+      agent: ~
+      changed: false
+    5:
+      badge: 'web'
+      ref: 'javascript:window.injected=2'
+      href: 'javascript:window.injected=2'
+      rel: 'noopener noreferrer'
+      quote: 'script'
+      agent: ~
+      changed: false
+  operator: 'deepStrictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M2-http-links/packages/webui/tests/chat-replies-browser.test.mjs:90:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 640.769563
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 572.506418
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 519.031091
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 743.513043
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 676.282756
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 595.166769
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 626.475981
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 596.828198
+  type: 'test'
+  ...
+1..9
+# tests 9
+# suites 0
+# pass 8
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 5658.889854

agents/fethry/work/queue-225/evidence/mutants-final/M3-missing-file.tap

@@ -0,0 +1,81 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 639.027823
+  type: 'test'
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 693.772757
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 683.094789
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 637.029355
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 772.100011
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 599.342035
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 574.320042
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+not ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 621.466015
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M3-missing-file/packages/webui/tests/chat-replies-browser.test.mjs:184:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+
+    1 !== 0
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 0
+  actual: 1
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M3-missing-file/packages/webui/tests/chat-replies-browser.test.mjs:196:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 590.165121
+  type: 'test'
+  ...
+1..9
+# tests 9
+# suites 0
+# pass 8
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 5921.651346

agents/fethry/work/queue-225/evidence/mutants-final/M3-wrong-commit.tap

@@ -0,0 +1,81 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 704.141588
+  type: 'test'
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 816.229452
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 697.826745
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 638.579753
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 850.914117
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 634.004327
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 585.469632
+  type: 'test'
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+not ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 673.386968
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M3-wrong-commit/packages/webui/tests/chat-replies-browser.test.mjs:184:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+
+    1 !== 0
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 0
+  actual: 1
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M3-wrong-commit/packages/webui/tests/chat-replies-browser.test.mjs:196:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 579.53998
+  type: 'test'
+  ...
+1..9
+# tests 9
+# suites 0
+# pass 8
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 6292.579267

agents/fethry/work/queue-225/evidence/mutants-final/M4-fallback.tap

@@ -0,0 +1,102 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 683.334532
+  type: 'test'
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 686.685624
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 612.757087
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 584.651483
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+not ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 637.405759
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M4-fallback/packages/webui/tests/chat-replies-browser.test.mjs:152:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+    + actual - expected
+
+    + 'Library at ccccccc · fetched 5 min ago · citations required, up to 4 per reply · no problems'
+    - 'Library at ccccccc · fetched 5 min ago · citations required, up to 4 per reply · limits fell back: citationsPerReply · no problems'
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 'Library at ccccccc · fetched 5 min ago · citations required, up to 4 per reply · limits fell back: citationsPerReply · no problems'
+  actual: 'Library at ccccccc · fetched 5 min ago · citations required, up to 4 per reply · no problems'
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M4-fallback/packages/webui/tests/chat-replies-browser.test.mjs:156:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 626.790802
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+not ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 643.680732
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M4-fallback/packages/webui/tests/chat-replies-browser.test.mjs:173:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+    + actual - expected
+
+    + 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · reply-limits-unreadable · no problems'
+    - 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · reply-limits-unreadable · no problems'
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · reply-limits-unreadable · no problems'
+  actual: 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · reply-limits-unreadable · no problems'
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M4-fallback/packages/webui/tests/chat-replies-browser.test.mjs:179:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 645.032205
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 616.242947
+  type: 'test'
+  ...
+1..9
+# tests 9
+# suites 0
+# pass 7
+# fail 2
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 5845.226677

agents/fethry/work/queue-225/evidence/mutants-final/M4-problem.tap

@@ -0,0 +1,83 @@
+TAP version 13
+# Subtest: chat replies: free text, cites with badges, the agent label, changed since and safe links
+ok 1 - chat replies: free text, cites with badges, the agent label, changed since and safe links
+  ---
+  duration_ms: 663.005514
+  type: 'test'
+  ...
+# Subtest: chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+ok 2 - chat replies: a write notice reads as its line with a Revert; a refused revert shows its code
+  ---
+  duration_ms: 662.360161
+  type: 'test'
+  ...
+# Subtest: chat replies: a read-only Console shows the notice with Revert disabled
+ok 3 - chat replies: a read-only Console shows the notice with Revert disabled
+  ---
+  duration_ms: 620.68694
+  type: 'test'
+  ...
+# Subtest: chat status line: served commit and age, divergence, fetch error and the problems one click away
+ok 4 - chat status line: served commit and age, divergence, fetch error and the problems one click away
+  ---
+  duration_ms: 744.825035
+  type: 'test'
+  ...
+# Subtest: chat status line: limits when the status carries them, no problems, and refusals
+ok 5 - chat status line: limits when the status carries them, no problems, and refusals
+  ---
+  duration_ms: 826.418848
+  type: 'test'
+  ...
+# Subtest: chat status line: a project with no repository link reads no library status
+ok 6 - chat status line: a project with no repository link reads no library status
+  ---
+  duration_ms: 549.365993
+  type: 'test'
+  ...
+# Subtest: chat status line: unreadable reply limits show their problem and both fallback keys
+not ok 7 - chat status line: unreadable reply limits show their problem and both fallback keys
+  ---
+  duration_ms: 589.776762
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M4-problem/packages/webui/tests/chat-replies-browser.test.mjs:173:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+    + actual - expected
+
+    + 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · no problems'
+    - 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · reply-limits-unreadable · no problems'
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · reply-limits-unreadable · no problems'
+  actual: 'Library at ccccccc · fetched 5 min ago · citations optional, up to 8 per reply · limits fell back: requireCitation, citationsPerReply · no problems'
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M4-problem/packages/webui/tests/chat-replies-browser.test.mjs:179:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+ok 8 - chat replies: unchanged file at a different library commit and incomplete checks stay unmarked
+  ---
+  duration_ms: 590.919434
+  type: 'test'
+  ...
+# Subtest: chat status line: an invalid library mapping remains visible for diagnosis
+ok 9 - chat status line: an invalid library mapping remains visible for diagnosis
+  ---
+  duration_ms: 545.326381
+  type: 'test'
+  ...
+1..9
+# tests 9
+# suites 0
+# pass 8
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 5914.325706

agents/fethry/work/queue-225/evidence/mutants-final/M5-commit-input.tap

@@ -0,0 +1,105 @@
+TAP version 13
+# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+  ---
+  duration_ms: 16.128237
+  type: 'test'
+  ...
+# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+  ---
+  duration_ms: 5.987607
+  type: 'test'
+  ...
+# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+not ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+  ---
+  duration_ms: 4.805637
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M5-commit-input/packages/webui/tests/library-routes.test.mjs:64:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    {"project":"books","commit":"abc"}
+
+    200 !== 400
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 400
+  actual: 200
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M5-commit-input/packages/webui/tests/library-routes.test.mjs:69:12)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+  ---
+  duration_ms: 6.383811
+  type: 'test'
+  ...
+# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
+ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
+  ---
+  duration_ms: 4.000988
+  type: 'test'
+  ...
+# Subtest: the status read takes one project query and answers the bus result for that project
+ok 6 - the status read takes one project query and answers the bus result for that project
+  ---
+  duration_ms: 2.487122
+  type: 'test'
+  ...
+# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+  ---
+  duration_ms: 4.9292
+  type: 'test'
+  ...
+# Subtest: the status read needs no send; a read-only Console still has no revert
+ok 8 - the status read needs no send; a read-only Console still has no revert
+  ---
+  duration_ms: 1.266317
+  type: 'test'
+  ...
+# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
+ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
+  ---
+  duration_ms: 0.443059
+  type: 'test'
+  ...
+# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
+ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
+  ---
+  duration_ms: 1.048018
+  type: 'test'
+  ...
+# Subtest: a revert receipt for another project is unknown and is never retried
+ok 11 - a revert receipt for another project is unknown and is never retried
+  ---
+  duration_ms: 0.864934
+  type: 'test'
+  ...
+# Subtest: a granted-user HTTP session cannot reach owner library callbacks
+ok 12 - a granted-user HTTP session cannot reach owner library callbacks
+  ---
+  duration_ms: 1.064626
+  type: 'test'
+  ...
+# Subtest: a configured revert callback remains unreachable when send is off
+ok 13 - a configured revert callback remains unreachable when send is off
+  ---
+  duration_ms: 0.803048
+  type: 'test'
+  ...
+1..13
+# tests 13
+# suites 0
+# pass 12
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 153.3549

agents/fethry/work/queue-225/evidence/mutants-final/M5-fetch-metadata.tap

@@ -0,0 +1,105 @@
+TAP version 13
+# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+  ---
+  duration_ms: 20.271342
+  type: 'test'
+  ...
+# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+not ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+  ---
+  duration_ms: 5.700968
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M5-fetch-metadata/packages/webui/tests/library-routes.test.mjs:48:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    sec-fetch-site
+
+    200 !== 403
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 403
+  actual: 200
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M5-fetch-metadata/packages/webui/tests/library-routes.test.mjs:57:12)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+  ---
+  duration_ms: 6.427935
+  type: 'test'
+  ...
+# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+  ---
+  duration_ms: 7.39929
+  type: 'test'
+  ...
+# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
+ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
+  ---
+  duration_ms: 5.425467
+  type: 'test'
+  ...
+# Subtest: the status read takes one project query and answers the bus result for that project
+ok 6 - the status read takes one project query and answers the bus result for that project
+  ---
+  duration_ms: 2.634037
+  type: 'test'
+  ...
+# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+  ---
+  duration_ms: 5.727409
+  type: 'test'
+  ...
+# Subtest: the status read needs no send; a read-only Console still has no revert
+ok 8 - the status read needs no send; a read-only Console still has no revert
+  ---
+  duration_ms: 1.317954
+  type: 'test'
+  ...
+# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
+ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
+  ---
+  duration_ms: 0.583799
+  type: 'test'
+  ...
+# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
+ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
+  ---
+  duration_ms: 1.207375
+  type: 'test'
+  ...
+# Subtest: a revert receipt for another project is unknown and is never retried
+ok 11 - a revert receipt for another project is unknown and is never retried
+  ---
+  duration_ms: 0.956772
+  type: 'test'
+  ...
+# Subtest: a granted-user HTTP session cannot reach owner library callbacks
+ok 12 - a granted-user HTTP session cannot reach owner library callbacks
+  ---
+  duration_ms: 1.147745
+  type: 'test'
+  ...
+# Subtest: a configured revert callback remains unreachable when send is off
+ok 13 - a configured revert callback remains unreachable when send is off
+  ---
+  duration_ms: 0.819337
+  type: 'test'
+  ...
+1..13
+# tests 13
+# suites 0
+# pass 12
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 166.134058

agents/fethry/work/queue-225/evidence/mutants-final/M5-origin.tap

@@ -0,0 +1,105 @@
+TAP version 13
+# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+  ---
+  duration_ms: 16.249491
+  type: 'test'
+  ...
+# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+not ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+  ---
+  duration_ms: 5.463985
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M5-origin/packages/webui/tests/library-routes.test.mjs:48:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    origin
+
+    200 !== 403
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 403
+  actual: 200
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M5-origin/packages/webui/tests/library-routes.test.mjs:57:12)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+  ---
+  duration_ms: 6.035196
+  type: 'test'
+  ...
+# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+  ---
+  duration_ms: 5.621744
+  type: 'test'
+  ...
+# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
+ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
+  ---
+  duration_ms: 4.928333
+  type: 'test'
+  ...
+# Subtest: the status read takes one project query and answers the bus result for that project
+ok 6 - the status read takes one project query and answers the bus result for that project
+  ---
+  duration_ms: 2.455282
+  type: 'test'
+  ...
+# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+  ---
+  duration_ms: 4.838747
+  type: 'test'
+  ...
+# Subtest: the status read needs no send; a read-only Console still has no revert
+ok 8 - the status read needs no send; a read-only Console still has no revert
+  ---
+  duration_ms: 1.235209
+  type: 'test'
+  ...
+# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
+ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
+  ---
+  duration_ms: 0.436399
+  type: 'test'
+  ...
+# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
+ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
+  ---
+  duration_ms: 1.100574
+  type: 'test'
+  ...
+# Subtest: a revert receipt for another project is unknown and is never retried
+ok 11 - a revert receipt for another project is unknown and is never retried
+  ---
+  duration_ms: 0.943474
+  type: 'test'
+  ...
+# Subtest: a granted-user HTTP session cannot reach owner library callbacks
+ok 12 - a granted-user HTTP session cannot reach owner library callbacks
+  ---
+  duration_ms: 1.176957
+  type: 'test'
+  ...
+# Subtest: a configured revert callback remains unreachable when send is off
+ok 13 - a configured revert callback remains unreachable when send is off
+  ---
+  duration_ms: 0.861834
+  type: 'test'
+  ...
+1..13
+# tests 13
+# suites 0
+# pass 12
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 150.969641

agents/fethry/work/queue-225/evidence/mutants-final/M5-project-receipt.tap

@@ -0,0 +1,105 @@
+TAP version 13
+# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+  ---
+  duration_ms: 18.918199
+  type: 'test'
+  ...
+# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+  ---
+  duration_ms: 7.26916
+  type: 'test'
+  ...
+# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+  ---
+  duration_ms: 5.352342
+  type: 'test'
+  ...
+# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+  ---
+  duration_ms: 6.134713
+  type: 'test'
+  ...
+# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
+ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
+  ---
+  duration_ms: 4.288914
+  type: 'test'
+  ...
+# Subtest: the status read takes one project query and answers the bus result for that project
+ok 6 - the status read takes one project query and answers the bus result for that project
+  ---
+  duration_ms: 2.745385
+  type: 'test'
+  ...
+# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+  ---
+  duration_ms: 5.739155
+  type: 'test'
+  ...
+# Subtest: the status read needs no send; a read-only Console still has no revert
+ok 8 - the status read needs no send; a read-only Console still has no revert
+  ---
+  duration_ms: 1.264793
+  type: 'test'
+  ...
+# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
+ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
+  ---
+  duration_ms: 0.471965
+  type: 'test'
+  ...
+# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
+ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
+  ---
+  duration_ms: 1.045204
+  type: 'test'
+  ...
+# Subtest: a revert receipt for another project is unknown and is never retried
+not ok 11 - a revert receipt for another project is unknown and is never retried
+  ---
+  duration_ms: 1.531252
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M5-project-receipt/packages/webui/tests/library-routes.test.mjs:145:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+
+    200 !== 503
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 503
+  actual: 200
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M5-project-receipt/packages/webui/tests/library-routes.test.mjs:148:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: a granted-user HTTP session cannot reach owner library callbacks
+ok 12 - a granted-user HTTP session cannot reach owner library callbacks
+  ---
+  duration_ms: 1.60161
+  type: 'test'
+  ...
+# Subtest: a configured revert callback remains unreachable when send is off
+ok 13 - a configured revert callback remains unreachable when send is off
+  ---
+  duration_ms: 0.816068
+  type: 'test'
+  ...
+1..13
+# tests 13
+# suites 0
+# pass 12
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 171.289003

agents/fethry/work/queue-225/evidence/mutants-final/M5-send.tap

@@ -0,0 +1,106 @@
+TAP version 13
+# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+  ---
+  duration_ms: 18.930067
+  type: 'test'
+  ...
+# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+  ---
+  duration_ms: 7.470645
+  type: 'test'
+  ...
+# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+  ---
+  duration_ms: 6.646929
+  type: 'test'
+  ...
+# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+  ---
+  duration_ms: 6.637697
+  type: 'test'
+  ...
+# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
+ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
+  ---
+  duration_ms: 4.174441
+  type: 'test'
+  ...
+# Subtest: the status read takes one project query and answers the bus result for that project
+ok 6 - the status read takes one project query and answers the bus result for that project
+  ---
+  duration_ms: 2.513131
+  type: 'test'
+  ...
+# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+  ---
+  duration_ms: 5.145692
+  type: 'test'
+  ...
+# Subtest: the status read needs no send; a read-only Console still has no revert
+ok 8 - the status read needs no send; a read-only Console still has no revert
+  ---
+  duration_ms: 1.182362
+  type: 'test'
+  ...
+# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
+ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
+  ---
+  duration_ms: 0.471806
+  type: 'test'
+  ...
+# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
+ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
+  ---
+  duration_ms: 1.064814
+  type: 'test'
+  ...
+# Subtest: a revert receipt for another project is unknown and is never retried
+ok 11 - a revert receipt for another project is unknown and is never retried
+  ---
+  duration_ms: 0.910004
+  type: 'test'
+  ...
+# Subtest: a granted-user HTTP session cannot reach owner library callbacks
+ok 12 - a granted-user HTTP session cannot reach owner library callbacks
+  ---
+  duration_ms: 1.16191
+  type: 'test'
+  ...
+# 2026-10-23T19:28:51.488Z library-revert user="jason" project="books" commit="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" commit=bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb
+# Subtest: a configured revert callback remains unreachable when send is off
+not ok 13 - a configured revert callback remains unreachable when send is off
+  ---
+  duration_ms: 1.624909
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M5-send/packages/webui/tests/library-routes.test.mjs:175:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+
+    200 !== 403
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 403
+  actual: 200
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M5-send/packages/webui/tests/library-routes.test.mjs:181:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+1..13
+# tests 13
+# suites 0
+# pass 12
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 165.919088

agents/fethry/work/queue-225/evidence/mutants-final/M6-duplicate-call.tap

@@ -0,0 +1,177 @@
+TAP version 13
+# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+not ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+  ---
+  duration_ms: 17.922489
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M6-duplicate-call/packages/webui/tests/library-routes.test.mjs:40:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly deep-equal:
+    + actual - expected
+
+      [
+        {
+          commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa',
+          project: 'books'
+        },
+    +   {
+    +     commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa',
+    +     project: 'books'
+    +   }
+      ]
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected:
+    0:
+      project: 'books'
+      commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
+  actual:
+    0:
+      project: 'books'
+      commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
+    1:
+      project: 'books'
+      commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
+  operator: 'deepStrictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M6-duplicate-call/packages/webui/tests/library-routes.test.mjs:43:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  ...
+# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+  ---
+  duration_ms: 7.053366
+  type: 'test'
+  ...
+# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+  ---
+  duration_ms: 5.869486
+  type: 'test'
+  ...
+# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+  ---
+  duration_ms: 6.852952
+  type: 'test'
+  ...
+# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
+not ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
+  ---
+  duration_ms: 2.870452
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M6-duplicate-call/packages/webui/tests/library-routes.test.mjs:88:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+
+    2 !== 1
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 1
+  actual: 2
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M6-duplicate-call/packages/webui/tests/library-routes.test.mjs:96:12)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: the status read takes one project query and answers the bus result for that project
+ok 6 - the status read takes one project query and answers the bus result for that project
+  ---
+  duration_ms: 2.904694
+  type: 'test'
+  ...
+# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+  ---
+  duration_ms: 5.7962
+  type: 'test'
+  ...
+# Subtest: the status read needs no send; a read-only Console still has no revert
+ok 8 - the status read needs no send; a read-only Console still has no revert
+  ---
+  duration_ms: 1.518332
+  type: 'test'
+  ...
+# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
+ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
+  ---
+  duration_ms: 0.563294
+  type: 'test'
+  ...
+# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
+ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
+  ---
+  duration_ms: 1.17446
+  type: 'test'
+  ...
+# Subtest: a revert receipt for another project is unknown and is never retried
+not ok 11 - a revert receipt for another project is unknown and is never retried
+  ---
+  duration_ms: 1.258633
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M6-duplicate-call/packages/webui/tests/library-routes.test.mjs:145:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly deep-equal:
+    + actual - expected
+
+      [
+        {
+          commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa',
+          project: 'books'
+        },
+    +   {
+    +     commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa',
+    +     project: 'books'
+    +   }
+      ]
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected:
+    0:
+      project: 'books'
+      commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
+  actual:
+    0:
+      project: 'books'
+      commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
+    1:
+      project: 'books'
+      commit: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
+  operator: 'deepStrictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M6-duplicate-call/packages/webui/tests/library-routes.test.mjs:151:10)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: a granted-user HTTP session cannot reach owner library callbacks
+ok 12 - a granted-user HTTP session cannot reach owner library callbacks
+  ---
+  duration_ms: 1.362877
+  type: 'test'
+  ...
+# Subtest: a configured revert callback remains unreachable when send is off
+ok 13 - a configured revert callback remains unreachable when send is off
+  ---
+  duration_ms: 0.848309
+  type: 'test'
+  ...
+1..13
+# tests 13
+# suites 0
+# pass 10
+# fail 3
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 169.162917

agents/fethry/work/queue-225/evidence/mutants-final/M7-user-fence.tap

@@ -0,0 +1,126 @@
+TAP version 13
+# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+  ---
+  duration_ms: 18.215173
+  type: 'test'
+  ...
+# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+  ---
+  duration_ms: 6.416847
+  type: 'test'
+  ...
+# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+  ---
+  duration_ms: 5.529629
+  type: 'test'
+  ...
+# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+  ---
+  duration_ms: 6.92431
+  type: 'test'
+  ...
+# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
+ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
+  ---
+  duration_ms: 4.588509
+  type: 'test'
+  ...
+# Subtest: the status read takes one project query and answers the bus result for that project
+ok 6 - the status read takes one project query and answers the bus result for that project
+  ---
+  duration_ms: 2.817257
+  type: 'test'
+  ...
+# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+  ---
+  duration_ms: 6.020444
+  type: 'test'
+  ...
+# Subtest: the status read needs no send; a read-only Console still has no revert
+ok 8 - the status read needs no send; a read-only Console still has no revert
+  ---
+  duration_ms: 1.377224
+  type: 'test'
+  ...
+# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
+not ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
+  ---
+  duration_ms: 1.015984
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M7-user-fence/packages/webui/tests/library-routes.test.mjs:132:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    /api/library/status
+
+    true !== false
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: false
+  actual: true
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M7-user-fence/packages/webui/tests/library-routes.test.mjs:133:106)
+    Test.runInAsyncScope (node:async_hooks:226:14)
+    Test.run (node:internal/test_runner/test:1402:25)
+    Test.processPendingSubtests (node:internal/test_runner/test:974:18)
+    Test.postRun (node:internal/test_runner/test:1542:19)
+    Test.run (node:internal/test_runner/test:1467:12)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
+ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
+  ---
+  duration_ms: 1.695555
+  type: 'test'
+  ...
+# Subtest: a revert receipt for another project is unknown and is never retried
+ok 11 - a revert receipt for another project is unknown and is never retried
+  ---
+  duration_ms: 1.378325
+  type: 'test'
+  ...
+# Subtest: a granted-user HTTP session cannot reach owner library callbacks
+not ok 12 - a granted-user HTTP session cannot reach owner library callbacks
+  ---
+  duration_ms: 1.178045
+  type: 'test'
+  location: '/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M7-user-fence/packages/webui/tests/library-routes.test.mjs:155:1'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+
+    503 !== 403
+
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: 403
+  actual: 503
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mosaic-row225-mutants-e6t705gk/M7-user-fence/packages/webui/tests/library-routes.test.mjs:167:12)
+    process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
+  ...
+# Subtest: a configured revert callback remains unreachable when send is off
+ok 13 - a configured revert callback remains unreachable when send is off
+  ---
+  duration_ms: 1.057394
+  type: 'test'
+  ...
+1..13
+# tests 13
+# suites 0
+# pass 11
+# fail 2
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 176.864112

agents/fethry/work/queue-225/evidence/mutants-final/summary.json

@@ -0,0 +1,147 @@
+{
+  "head": "50790127716002f97154800ecbfb968690a9d644",
+  "clear": "sage-3647",
+  "worktreeUnchanged": true,
+  "results": [
+    {
+      "mutant": "M1-badges",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M1-badges.tap"
+    },
+    {
+      "mutant": "M1-agent-label",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M1-agent-label.tap"
+    },
+    {
+      "mutant": "M2-http-links",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M2-http-links.tap"
+    },
+    {
+      "mutant": "M3-wrong-commit",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M3-wrong-commit.tap"
+    },
+    {
+      "mutant": "M3-missing-file",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M3-missing-file.tap"
+    },
+    {
+      "mutant": "M4-fallback",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M4-fallback.tap"
+    },
+    {
+      "mutant": "M4-problem",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/chat-replies-browser.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M4-problem.tap"
+    },
+    {
+      "mutant": "M5-send",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M5-send.tap"
+    },
+    {
+      "mutant": "M5-project-receipt",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M5-project-receipt.tap"
+    },
+    {
+      "mutant": "M5-commit-input",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M5-commit-input.tap"
+    },
+    {
+      "mutant": "M5-origin",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M5-origin.tap"
+    },
+    {
+      "mutant": "M5-fetch-metadata",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M5-fetch-metadata.tap"
+    },
+    {
+      "mutant": "M6-duplicate-call",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M6-duplicate-call.tap"
+    },
+    {
+      "mutant": "M7-user-fence",
+      "anchorHits": 1,
+      "restored": true,
+      "worktreeUnchanged": true,
+      "exit": 1,
+      "killed": true,
+      "test": "packages/webui/tests/library-routes.test.mjs",
+      "log": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2/mutants-final/M7-user-fence.tap"
+    }
+  ]
+}

agents/fethry/work/queue-225/evidence/raw-log-provenance.json

@@ -0,0 +1,155 @@
+{
+  "rawRoot": "/mnt/storage/scratch/tmp/fethry-row225-KEmw8wQ2",
+  "logs": [
+    {
+      "path": "evidence/browser-final.tap",
+      "rawSha256": "4e6d5874786aa5d407b59d0b701652d419d0fecda5402ede40f52b313def12b0",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/browser-final2.tap",
+      "rawSha256": "194b3150e59868aab023d9ccfc75c69b82e43afba38c1b12e87a1fb3d68fe821",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/browser-green.tap",
+      "rawSha256": "030d7a5c9af70d4a7ade177906fb971b29fa4cf1fc5efd39f35643ed1969cd01",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/browser-red.tap",
+      "rawSha256": "db00bee89b4353efe7d324b17417347b30964f79ad4469a5dc98c6d125691f55",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/channel-proof.tap",
+      "rawSha256": "cb7c0398af2a2a0e7cae24ee2c8167601cbf7e3f9cf3ed7479b2a6ef65f5da8a",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/library-full.tap",
+      "rawSha256": "5447e3fce497a0dfb03ddd3eb2795dc2a179554f794e4c37458219c70736a645",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mapping-red.tap",
+      "rawSha256": "8ca7310e46df2d35fa96e3aba378721ad388dce41f003ee133b684eeb7eaf245",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-attempt1/M1-agent-label.tap",
+      "rawSha256": "db7ab1c64bc05b719e5164ed4ce1dd8b79ad53309d9b8e3e1ca0cc8867bca70f",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-attempt1/M1-badges.tap",
+      "rawSha256": "08351b9061351812008ebd7067a9aed24a9e5386d8f6284fb44ae0f59c8f2eca",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-attempt1/M2-http-links.tap",
+      "rawSha256": "69921707c219d19fb2c33a3995268b6442d783ec702050b32f78d8d2db6fb581",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-attempt1/M3-wrong-commit.tap",
+      "rawSha256": "fe9fb027efae26799e2dfac539e0986402cefe806ca31479f52420e67a8df423",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-final/M1-agent-label.tap",
+      "rawSha256": "afbab60cbc12348c4d0c4be1a8c4590dd157c71f9ffc7375bbde82facb9868bb",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-final/M1-badges.tap",
+      "rawSha256": "3bb9fb9dcf74a398934d6de48c2ca99ab2eab618fb944297b3d7db00eec0e69f",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-final/M2-http-links.tap",
+      "rawSha256": "8909921fcf602fcafa94edd19c1167a8f91ed970a3e649110e3503836690e567",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-final/M3-missing-file.tap",
+      "rawSha256": "3fd2749ea5bc4245f7d49f585b82eae60f61ed150ab4dd22e8148a1e9467c8c7",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-final/M3-wrong-commit.tap",
+      "rawSha256": "85696c155f0a2844ee903c8fb38cab0a0fb6b0610c8b9ee8aa77a08cb6012ca2",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-final/M4-fallback.tap",
+      "rawSha256": "6f59f2845e0130d4d2fe1cb4aa7a435502f6043e11ed4efd67339c12e986103a",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-final/M4-problem.tap",
+      "rawSha256": "61ab08b823eb08cbb9c9eeaac82b297ea5d1272bb5dc64e9598734688b55eb80",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-final/M5-commit-input.tap",
+      "rawSha256": "b703ee5ca47e5c64749aab3edfb5ae2e085367921ffa75337f4f0e5c7b3dc404",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-final/M5-fetch-metadata.tap",
+      "rawSha256": "6951725340e4d74764552e7e406e0fc4bafeec35172de56d13bca852b92daa1a",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-final/M5-origin.tap",
+      "rawSha256": "95fcb5a92e82fa7de2972fd8f78c4f0f6d1c5f49885123e01fb1b69c3b62ba21",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-final/M5-project-receipt.tap",
+      "rawSha256": "a86806a189ef73f61ddd88479336321964eadef0793c7b45da6573ccd3e38801",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-final/M5-send.tap",
+      "rawSha256": "4cce523356a3e2041197156412eb35088f8b6d38fcceca2d9b76b6098ad17627",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-final/M6-duplicate-call.tap",
+      "rawSha256": "6dda962389fbc7379ac7e7bc79cc24b68db00d4f9bb649ab73e75eaa87a5da00",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/mutants-final/M7-user-fence.tap",
+      "rawSha256": "abec36c65c3ece6e7d0c4dfd41eede62c9a585f07b3ed4cb3b8d05f0dbabaed3",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/render-green.tap",
+      "rawSha256": "98463ac3d1262f84758def8bbdc27c46fa7c674bb8e8c20b9c752083163d0864",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/render-red.tap",
+      "rawSha256": "03645c7a5ba0c3d285e58e1d6fd05dc58a1174b463a258b01bcf258b2141a85e",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/routes-final.tap",
+      "rawSha256": "f2b58a97c301dc9e57458d82785bd50debb2254df5d411d8e8c4e6b9c0aa00d2",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/routes-green.tap",
+      "rawSha256": "c34451a0eef5f82fe6ddcbbf370179d8e8a14e36168175bdeff5b32e2072e9d6",
+      "normalization": "trailing whitespace removed from display copy"
+    },
+    {
+      "path": "evidence/routes-red.tap",
+      "rawSha256": "5ca5bafe2465209128508e5459f4826c34d00de86d1e79671196dc4e5c57f874",
+      "normalization": "trailing whitespace removed from display copy"
+    }
+  ]
+}

agents/fethry/work/queue-225/evidence/render-green.tap

@@ -0,0 +1,17 @@
+✔ free text renders as itself with no citations (1.332106ms)
+✔ a cited reply renders its text, then each cite with the badge from the check result (0.493062ms)
+✔ a parsed body renders as its string does (0.2706ms)
+✔ without a check result a path cite has no badge, no label and is never changed (0.175324ms)
+✔ the label and the badge come from the check result only, never from a bad entry (0.171275ms)
+✔ a web cite is a link only for https (0.254363ms)
+✔ a write notice renders its fixed line (0.201038ms)
+✔ a body without the reply or notice shape is free text: the whole body, no citations (0.315846ms)
+✔ an empty citations list is a reply with no cites (0.167552ms)
+ℹ tests 9
+ℹ suites 0
+ℹ pass 9
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 70.188818

agents/fethry/work/queue-225/evidence/render-red.tap

@@ -0,0 +1,17 @@
+✔ free text renders as itself with no citations (1.211164ms)
+✔ a cited reply renders its text, then each cite with the badge from the check result (0.457937ms)
+✔ a parsed body renders as its string does (0.255138ms)
+✔ without a check result a path cite has no badge, no label and is never changed (0.189285ms)
+✔ the label and the badge come from the check result only, never from a bad entry (0.162195ms)
+✔ a web cite is a link only for https (0.231665ms)
+✔ a write notice renders its fixed line (0.167596ms)
+✔ a body without the reply or notice shape is free text: the whole body, no citations (0.283804ms)
+✔ an empty citations list is a reply with no cites (0.145774ms)
+ℹ tests 9
+ℹ suites 0
+ℹ pass 9
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 73.226696

agents/fethry/work/queue-225/evidence/routes-final.tap

@@ -0,0 +1,88 @@
+TAP version 13
+# Subtest: a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+ok 1 - a signed-in same-origin revert reaches exactly one library.revert and returns the new commit
+  ---
+  duration_ms: 18.873338
+  type: 'test'
+  ...
+# Subtest: a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+ok 2 - a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata
+  ---
+  duration_ms: 7.061714
+  type: 'test'
+  ...
+# Subtest: a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+ok 3 - a revert takes a project and a 40-hex commit, nothing else, before the bus is asked
+  ---
+  duration_ms: 6.45503
+  type: 'test'
+  ...
+# Subtest: a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+ok 4 - a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal
+  ---
+  duration_ms: 6.964122
+  type: 'test'
+  ...
+# Subtest: a revert whose answer is lost or unusable is reported unknown and is never retried
+ok 5 - a revert whose answer is lost or unusable is reported unknown and is never retried
+  ---
+  duration_ms: 5.745801
+  type: 'test'
+  ...
+# Subtest: the status read takes one project query and answers the bus result for that project
+ok 6 - the status read takes one project query and answers the bus result for that project
+  ---
+  duration_ms: 2.815134
+  type: 'test'
+  ...
+# Subtest: a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+ok 7 - a status answer for another project or of the wrong shape is refused; a refusal keeps its status
+  ---
+  duration_ms: 7.105984
+  type: 'test'
+  ...
+# Subtest: the status read needs no send; a read-only Console still has no revert
+ok 8 - the status read needs no send; a read-only Console still has no revert
+  ---
+  duration_ms: 2.002948
+  type: 'test'
+  ...
+# Subtest: library routes are the owner's: a granted user is refused them, and the tester never reverts
+ok 9 - library routes are the owner's: a granted user is refused them, and the tester never reverts
+  ---
+  duration_ms: 0.708324
+  type: 'test'
+  ...
+# Subtest: the page gets the one library renderer, byte for byte, as a JavaScript module
+ok 10 - the page gets the one library renderer, byte for byte, as a JavaScript module
+  ---
+  duration_ms: 1.553573
+  type: 'test'
+  ...
+# Subtest: a revert receipt for another project is unknown and is never retried
+ok 11 - a revert receipt for another project is unknown and is never retried
+  ---
+  duration_ms: 1.371025
+  type: 'test'
+  ...
+# Subtest: a granted-user HTTP session cannot reach owner library callbacks
+ok 12 - a granted-user HTTP session cannot reach owner library callbacks
+  ---
+  duration_ms: 1.586864
+  type: 'test'
+  ...
+# Subtest: a configured revert callback remains unreachable when send is off
+ok 13 - a configured revert callback remains unreachable when send is off
+  ---
+  duration_ms: 1.226995
+  type: 'test'
+  ...
+1..13
+# tests 13
+# suites 0
+# pass 13
+# fail 0
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 177.384993

agents/fethry/work/queue-225/evidence/routes-green.tap

@@ -0,0 +1,20 @@
+✔ a signed-in same-origin revert reaches exactly one library.revert and returns the new commit (19.266366ms)
+✔ a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata (7.415028ms)
+✔ a revert takes a project and a 40-hex commit, nothing else, before the bus is asked (6.176121ms)
+✔ a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal (7.325625ms)
+✔ a revert whose answer is lost or unusable is reported unknown and is never retried (5.0635ms)
+✔ the status read takes one project query and answers the bus result for that project (3.008847ms)
+✔ a status answer for another project or of the wrong shape is refused; a refusal keeps its status (6.314096ms)
+✔ the status read needs no send; a read-only Console still has no revert (1.440122ms)
+✔ library routes are the owner's: a granted user is refused them, and the tester never reverts (0.563979ms)
+✔ the page gets the one library renderer, byte for byte, as a JavaScript module (1.180551ms)
+✔ a revert receipt for another project is unknown and is never retried (1.12255ms)
+✔ a granted-user HTTP session cannot reach owner library callbacks (1.351581ms)
+ℹ tests 12
+ℹ suites 0
+ℹ pass 12
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 182.202771

agents/fethry/work/queue-225/evidence/routes-red.tap

@@ -0,0 +1,76 @@
+✔ a signed-in same-origin revert reaches exactly one library.revert and returns the new commit (18.853567ms)
+✔ a revert needs send, the named Host, the user, the exact Origin and same-origin Fetch Metadata (6.491576ms)
+✔ a revert takes a project and a 40-hex commit, nothing else, before the bus is asked (5.647113ms)
+✔ a bus refusal is reported as not reverted with its code; before C2-02 that is the verb refusal (6.08423ms)
+✔ a revert whose answer is lost or unusable is reported unknown and is never retried (5.445934ms)
+✖ the status read takes one project query and answers the bus result for that project (3.470803ms)
+✖ a status answer for another project or of the wrong shape is refused; a refusal keeps its status (5.42219ms)
+✔ the status read needs no send; a read-only Console still has no revert (1.428304ms)
+✔ library routes are the owner's: a granted user is refused them, and the tester never reverts (0.509039ms)
+✔ the page gets the one library renderer, byte for byte, as a JavaScript module (1.123365ms)
+✖ a revert receipt for another project is unknown and is never retried (1.209291ms)
+✔ a granted-user HTTP session cannot reach owner library callbacks (1.398731ms)
+ℹ tests 12
+ℹ suites 0
+ℹ pass 9
+ℹ fail 3
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 198.061254
+
+✖ failing tests:
+
+test at packages/webui/tests/library-routes.test.mjs:100:1
+✖ the status read takes one project query and answers the bus result for that project (3.470803ms)
+  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:
+
+  403 !== 405
+
+      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/library-routes.test.mjs:107:10)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: 403,
+    expected: 405,
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
+
+test at packages/webui/tests/library-routes.test.mjs:111:1
+✖ a status answer for another project or of the wrong shape is refused; a refusal keeps its status (5.42219ms)
+  AssertionError [ERR_ASSERTION]: project-not-declared
+
+  400 !== 502
+
+      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/library-routes.test.mjs:119:12)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: false,
+    code: 'ERR_ASSERTION',
+    actual: 400,
+    expected: 502,
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
+
+test at packages/webui/tests/library-routes.test.mjs:145:1
+✖ a revert receipt for another project is unknown and is never retried (1.209291ms)
+  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:
+
+  200 !== 503
+
+      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/fethry-row225/packages/webui/tests/library-routes.test.mjs:148:10)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: 200,
+    expected: 503,
+    operator: 'strictEqual',
+    diff: 'simple'
+  }

agents/fethry/work/queue-225/inherited-old-tests.patch

@@ -0,0 +1,170 @@
+diff --git a/packages/bus/tests/channel-proof.test.mjs b/packages/bus/tests/channel-proof.test.mjs
+index ba0179832..435d8fa2d 100644
+--- a/packages/bus/tests/channel-proof.test.mjs
++++ b/packages/bus/tests/channel-proof.test.mjs
+@@ -11,0 +12,2 @@
++// Row 225 (C2-10b) re-pins webui bus.mjs for one STATUS entry, library-revert-not-agent: 409; no proof
++// or transport change.
+@@ -32 +34 @@ const baselines = {
+- "packages/webui/src/bus.mjs": "604092cb706b152d458f299ff1071f6cd488774629012f96b672f7e9a16c0b2c",
++ "packages/webui/src/bus.mjs": "9f33e9ca4feb7265ae33fd3ddf0ead0b75375d07ecbe9d8e55c618d29edea658",
+diff --git a/packages/library/tests/render.test.mjs b/packages/library/tests/render.test.mjs
+index b07e26d25..9c861bfe9 100644
+--- a/packages/library/tests/render.test.mjs
++++ b/packages/library/tests/render.test.mjs
+@@ -3 +3 @@ import assert from 'node:assert/strict';
+-import { renderItems, UNREADABLE } from '../src/index.mjs';
++import { renderReply } from '../src/index.mjs';
+@@ -4,0 +5 @@ import { renderItems, UNREADABLE } from '../src/index.mjs';
++// Row 225 (C2-10b): renderReply replaces renderItems (design 7.4, the reply schema of 5.2).
+@@ -6,6 +7,12 @@ const A = 'a'.repeat(40), B = 'b'.repeat(40);
+-const cite = (path, lines, quote, commit = A) => ({ path, commit, lines, quote });
+-const options = {
+-  scopeOf: path => path.includes('/Playground/') ? 'playground' : path.endsWith('.md') ? 'canon' : undefined,
+-  changed: ({ path, commit }) => path === 'Book One/Characters/Mara Vell.md' && commit === A,
+-};
+-const render = items => renderItems(JSON.stringify({ items }), options);
++const cite = (path, lines, quote, commit = A, extra = {}) => ({ path, commit, lines, quote, ...extra });
++const web = (url, quote = 'spring tides') => ({ url, quote });
++const reply = (text, citations) => JSON.stringify({ text, citations });
++const CITED = reply("Mara's eyes are grey in chapter 3.", [
++  cite('Book One/Chapters/Chapter 03.md', [41, 41], 'her grey eyes', A, { as: 'canon' }),
++  cite('Book One/Playground/What If.md', [5, 6], 'a storm', B),
++  cite('Notes/Eyes.md', [9, 10], 'green eyes'),
++  web('https://example.invalid/tides'),
++]);
++const CHECK = { citations: [{ scope: 'canon', agent: null }, { scope: 'playground', agent: null },
++  { scope: 'supporting', agent: 'acme/scribe' }, { scope: 'web', agent: null }] };
++const changed = ({ path, commit }) => path === 'Notes/Eyes.md' && commit === A;
+@@ -13,21 +20,4 @@ const render = items => renderItems(JSON.stringify({ items }), options);
+-// One snapshot per item kind: the plain text both channels show.
+-const SNAPSHOTS = {
+-  fact: [{ kind: 'fact', text: 'Tomas is the ferryman.', cites: [cite('Book One/Characters/Tomas.md', [3, 3], 'the ferryman', B)] }],
+-  finding: [{ kind: 'finding', text: 'Eye colour differs.', cites: [cite('Book One/Chapters/Chapter 01.md', [41, 41], 'her grey eyes'),
+-    cite('Book One/Characters/Mara Vell.md', [9, 10], 'green eyes')] }],
+-  correction: [{ kind: 'correction', text: 'Chapter 1 says grey.', from: 'green eyes', to: 'grey eyes',
+-    cites: [cite('Book One/Characters/Mara Vell.md', [9, 9], 'green eyes', B)] }],
+-  question: [{ kind: 'question', text: 'Is the harbor north of the town?', cites: [cite('Book One/Places/Harbor Town.md', [2, 4], 'the harbor', B)] }],
+-  idea: [{ kind: 'idea', text: 'A storm could close the harbor.', cites: [cite('Book One/Playground/What If.md', [5, 5], 'a storm', B),
+-    { url: 'https://example.invalid/tides', quote: 'spring tides' }] }],
+-};
+-const EXPECTED = {
+-  fact: '1. Fact: Tomas is the ferryman.\n   [canon] Book One/Characters/Tomas.md:3 @bbbbbbb "the ferryman"',
+-  finding: '1. Finding: Eye colour differs.\n   [canon] Book One/Chapters/Chapter 01.md:41 @aaaaaaa "her grey eyes"\n'
+-    + '   [canon] Book One/Characters/Mara Vell.md:9-10 @aaaaaaa "green eyes" (changed since)',
+-  correction: '1. Correction: Chapter 1 says grey.\n   From: "green eyes"\n   To: "grey eyes"\n'
+-    + '   [canon] Book One/Characters/Mara Vell.md:9 @bbbbbbb "green eyes"',
+-  question: '1. Question: Is the harbor north of the town?\n   [canon] Book One/Places/Harbor Town.md:2-4 @bbbbbbb "the harbor"',
+-  idea: '1. Idea: A storm could close the harbor.\n   [playground] Book One/Playground/What If.md:5 @bbbbbbb "a storm"\n'
+-    + '   [web] https://example.invalid/tides "spring tides"',
+-};
++test('free text renders as itself with no citations', () => {
++  for (const body of ['Grey, in chapter 3.', '', '"a JSON string"', '[1, 2]', '42', 'null'])
++    assert.deepEqual(renderReply(body, { check: CHECK }), { kind: 'text', text: body, plain: body });
++});
+@@ -35,8 +25,15 @@ const EXPECTED = {
+-for (const kind of Object.keys(SNAPSHOTS)) {
+-  test(`renderItems snapshot: ${kind}`, () => {
+-    const out = render(SNAPSHOTS[kind]);
+-    assert.equal(out.kind, 'items');
+-    assert.equal(out.text, EXPECTED[kind]);
+-    assert.equal(out.items[0].kind, kind);
+-  });
+-}
++test('a cited reply renders its text, then each cite with the badge from the check result', () => {
++  const out = renderReply(CITED, { check: CHECK, changed });
++  assert.equal(out.kind, 'reply');
++  assert.equal(out.text, "Mara's eyes are grey in chapter 3.");
++  assert.deepEqual(out.citations.map(c => c.badge), ['canon', 'playground', 'supporting', 'web']);
++  assert.equal(out.plain, "Mara's eyes are grey in chapter 3.\n"
++    + '   [canon] Book One/Chapters/Chapter 03.md:41 @aaaaaaa "her grey eyes"\n'
++    + '   [playground] Book One/Playground/What If.md:5-6 @bbbbbbb "a storm"\n'
++    + '   [supporting] Notes/Eyes.md:9-10 @aaaaaaa "green eyes" (agent-written: acme/scribe) (changed since)\n'
++    + '   [web] https://example.invalid/tides "spring tides"');
++  assert.deepEqual(out.citations[0], { badge: 'canon', path: 'Book One/Chapters/Chapter 03.md', commit: A, lines: [41, 41],
++    ref: 'Book One/Chapters/Chapter 03.md:41 @aaaaaaa', quote: 'her grey eyes', canon: true, agent: null, changed: false });
++  assert.deepEqual(out.citations[3], { badge: 'web', url: 'https://example.invalid/tides', link: 'https://example.invalid/tides',
++    ref: 'https://example.invalid/tides', quote: 'spring tides', agent: null, changed: false });
++});
+@@ -44,6 +41,2 @@ for (const kind of Object.keys(SNAPSHOTS)) {
+-test('renderItems numbers several items and takes a parsed body as well as a string', () => {
+-  const items = [...SNAPSHOTS.fact, ...SNAPSHOTS.question];
+-  const out = renderItems({ items }, options);
+-  assert.equal(out.text, `${EXPECTED.fact}\n${EXPECTED.question.replace(/^1\./, '2.')}`);
+-  assert.deepEqual(out.items[1].cites[0], { badge: 'canon', path: 'Book One/Places/Harbor Town.md', commit: B, lines: [2, 4],
+-    ref: 'Book One/Places/Harbor Town.md:2-4 @bbbbbbb', quote: 'the harbor', changed: false });
++test('a parsed body renders as its string does', () => {
++  assert.deepEqual(renderReply(JSON.parse(CITED), { check: CHECK, changed }), renderReply(CITED, { check: CHECK, changed }));
+@@ -52,4 +45,4 @@ test('renderItems numbers several items and takes a parsed body as well as a str
+-test('without options a path cite has no badge and is never marked changed', () => {
+-  assert.equal(renderItems({ items: SNAPSHOTS.finding }).text,
+-    '1. Finding: Eye colour differs.\n   Book One/Chapters/Chapter 01.md:41 @aaaaaaa "her grey eyes"\n'
+-    + '   Book One/Characters/Mara Vell.md:9-10 @aaaaaaa "green eyes"');
++test('without a check result a path cite has no badge, no label and is never changed', () => {
++  const out = renderReply(CITED);
++  assert.deepEqual(out.citations.map(c => [c.badge, c.agent, c.changed]),
++    [[null, null, false], [null, null, false], [null, null, false], ['web', null, false]]);
+@@ -58,6 +51,6 @@ test('without options a path cite has no badge and is never marked changed', ()
+-const NOTICE_SNAPSHOTS = { 'no-cited-answer': 'No cited answer', 'no-answer': 'No answer', 'turn-failed': 'The turn failed' };
+-for (const [notice, text] of Object.entries(NOTICE_SNAPSHOTS)) {
+-  test(`renderItems snapshot: notice ${notice}`, () => {
+-    assert.deepEqual(renderItems(JSON.stringify({ items: [], notice }), options), { kind: 'notice', notice, text });
+-  });
+-}
++test('the label and the badge come from the check result only, never from a bad entry', () => {
++  const bad = { citations: [{ scope: 'web', agent: '' }, { scope: 'story', agent: 7 }, null, { scope: 'canon', agent: 'x/y' }] };
++  const out = renderReply(CITED, { check: bad });
++  // A path cite can't be web; a url cite is web by its shape whatever the check says, and never agent-written.
++  assert.deepEqual(out.citations.map(c => [c.badge, c.agent]), [[null, null], [null, null], [null, null], ['web', null]]);
++});
+@@ -65,14 +58,8 @@ for (const [notice, text] of Object.entries(NOTICE_SNAPSHOTS)) {
+-test('a body without the reply shape shows a fixed line and none of its text', () => {
+-  const secret = 'free prose the guard would refuse';
+-  const bodies = [secret, JSON.stringify(secret), '{"items": [], "notice": "other"}', JSON.stringify({ items: [], notice: 'no-answer', extra: secret }),
+-    JSON.stringify({ items: [] }), JSON.stringify({ items: [{ kind: 'story', text: secret, cites: [] }] }),
+-    JSON.stringify({ items: [{ kind: 'fact', text: secret }] }), JSON.stringify({ items: SNAPSHOTS.fact, prose: secret }),
+-    JSON.stringify({ items: [{ kind: 'correction', text: secret, cites: [] }] }),
+-    JSON.stringify({ items: [{ kind: 'fact', text: secret, cites: [cite('a.md', [2, 1], 'q')] }] }),
+-    JSON.stringify({ items: [{ kind: 'fact', text: secret, cites: [{ path: 'a.md', commit: 'abc', lines: [1, 1], quote: 'q' }] }] }),
+-    JSON.stringify({ items: [{ kind: 'fact', text: secret, cites: [{ url: 'https://x.invalid', path: 'a.md', quote: 'q' }] }] }),
+-    null, 42, '[]'];
+-  for (const body of bodies) {
+-    const out = renderItems(body, options);
+-    assert.deepEqual(out, { kind: 'unreadable', text: UNREADABLE }, String(body));
+-    assert.ok(!JSON.stringify(out).includes(secret));
++test('a web cite is a link only for https', () => {
++  const urls = { 'https://example.invalid/a': 'https://example.invalid/a', 'http://example.invalid/a': null,
++    'javascript:alert(1)': null, 'JAVASCRIPT:alert(1)': null, 'data:text/html,x': null, 'not a url': null, '//example.invalid': null };
++  for (const [url, link] of Object.entries(urls)) {
++    const out = renderReply(reply('t', [web(url)]));
++    assert.equal(out.kind, 'reply', url);
++    assert.equal(out.citations[0].link, link, url);
++    assert.equal(out.citations[0].ref, url);
+@@ -80,0 +68,27 @@ test('a body without the reply shape shows a fixed line and none of its text', (
++
++test('a write notice renders its fixed line', () => {
++  const body = op => JSON.stringify({ notice: 'library-write', op, path: 'Notes/Eyes.md', commit: B });
++  assert.deepEqual(renderReply(body('write'), { name: 'Scribe' }),
++    { kind: 'notice', op: 'write', path: 'Notes/Eyes.md', commit: B, text: 'Scribe wrote Notes/Eyes.md @bbbbbbb', plain: 'Scribe wrote Notes/Eyes.md @bbbbbbb' });
++  assert.equal(renderReply(body('delete'), { name: 'Scribe' }).text, 'Scribe deleted Notes/Eyes.md @bbbbbbb');
++  assert.equal(renderReply(body('write')).text, 'An agent wrote Notes/Eyes.md @bbbbbbb');
++});
++
++test('a body without the reply or notice shape is free text: the whole body, no citations', () => {
++  const bodies = [
++    JSON.stringify({ text: 't' }), JSON.stringify({ citations: [] }), JSON.stringify({ text: 1, citations: [] }),
++    JSON.stringify({ text: 't', citations: [], extra: 1 }), JSON.stringify({ items: [] }),
++    reply('t', [cite('a.md', [2, 1], 'q')]), reply('t', [cite('a.md', [0, 1], 'q')]), reply('t', [cite('a.md', [1], 'q')]),
++    reply('t', [{ path: 'a.md', commit: 'abc', lines: [1, 1], quote: 'q' }]), reply('t', [cite('a.md', [1, 1], 'q', A, { as: 'playground' })]),
++    reply('t', [cite('a.md', [1, 1], 'q', A, { scope: 'canon' })]), reply('t', [{ url: 'https://x.invalid', path: 'a.md', quote: 'q' }]),
++    reply('t', [{ url: 'https://x.invalid' }]), reply('t', [{ url: 'https://x.invalid', quote: 'q', agent: 'x/y' }]),
++    JSON.stringify({ notice: 'library-write', op: 'move', path: 'a.md', commit: A }),
++    JSON.stringify({ notice: 'library-write', op: 'write', path: 'a.md', commit: 'abc' }),
++    JSON.stringify({ notice: 'library-write', op: 'write', path: 'a.md', commit: A, by: 'x' }),
++  ];
++  for (const body of bodies) assert.deepEqual(renderReply(body, { check: CHECK }), { kind: 'text', text: body, plain: body }, body);
++});
++
++test('an empty citations list is a reply with no cites', () => {
++  assert.deepEqual(renderReply(reply('Grey.', [])), { kind: 'reply', text: 'Grey.', citations: [], plain: 'Grey.' });
++});

agents/fethry/work/queue-225/manifest.r1.sha256

@@ -0,0 +1,13 @@
+6bdaf870be3d8d03a68eb03f5f6916150bb1b3db134ffbe84018e91d47e6434d  packages/bus/tests/channel-proof.test.mjs
+0385fc49b445ff730021eb11c20b29027631e0d27350e4591d5a0936ffbdccf6  packages/library/README.md
+653ff444ba66cb73e1ca4df1f6037f15a2ec7d3d009cf614a0dc51deabda4b50  packages/library/src/index.mjs
+dfcc9f271afc7afdab908395a7f3c402100fa89b4994b20d5bcae3140d5c335e  packages/library/src/render.mjs
+f3c213f3b0bd080d0bc5837f741a29e324acb91cf0c27144dee08a4113262210  packages/library/tests/render.test.mjs
+9f33e9ca4feb7265ae33fd3ddf0ead0b75375d07ecbe9d8e55c618d29edea658  packages/webui/src/bus.mjs
+f1a0c9a55b1ae933e205c7e2b9753afe0c2f1fc9b0faa2cf18765396f99ac8dd  packages/webui/src/cli.mjs
+bf49a22147be0535076640d20149116a744dad9b0b32dd667ee297a061d56134  packages/webui/src/console-bus.mjs
+793e7dd9edbe5a55c2deab3c8aef4fbd5b4c838e132e2ac9294043c7176ec6f7  packages/webui/src/public/chat.css
+af3a6f382e0d40cf2b28c31db7cb58ba775f1e242651ba42c7426bda99dc0d89  packages/webui/src/public/chat.js
+6412fe34bc640433e9cf7610f65d3574a3415c934354d8cb52e056793a81948f  packages/webui/src/serve.mjs
+f191752f867a112c867ca24268f70aa99ca0903c9208f76bc4bb4c1587cb55df  packages/webui/tests/chat-replies-browser.test.mjs
+df4ff385ac4ca8244ffa00faf82fcca1f4fcdac8da02a4f4d71233d4df8e1157  packages/webui/tests/library-routes.test.mjs

agents/fethry/work/queue-225/mutants.py

@@ -0,0 +1,96 @@
+#!/usr/bin/env python3
+"""Run row225 mutants in disposable snapshots, only on Sage CLEAR.
+
+Commit the tested candidate first. Never change the worktree or shared dependencies.
+A timeout, import failure or process failure is not a mutation kill.
+"""
+import argparse
+import hashlib
+import json
+import os
+from pathlib import Path
+import shutil
+import subprocess
+import tarfile
+import tempfile
+
+BROWSER = 'packages/webui/tests/chat-replies-browser.test.mjs'
+ROUTES = 'packages/webui/tests/library-routes.test.mjs'
+CHAT = 'packages/webui/src/public/chat.js'
+SERVE = 'packages/webui/src/serve.mjs'
+RENDER = 'packages/library/src/render.mjs'
+MUTANTS = [
+    ('M1-badges', RENDER, 'badge: scope, path:', 'badge: null, path:', BROWSER),
+    ('M1-agent-label', RENDER, 'canon: c.canon, agent,', 'canon: c.canon, agent: null,', BROWSER),
+    ('M2-http-links', RENDER, "new URL(url).protocol === 'https:' ? url : null", 'url', BROWSER),
+    ('M3-wrong-commit', CHAT, 'e.file !== e.last', 'cite.commit !== e.last', BROWSER),
+    ('M3-missing-file', CHAT, "SHA.test(e?.file ?? '') && SHA.test(e?.last ?? '')", "SHA.test(e?.last ?? '')", BROWSER),
+    ('M4-fallback', CHAT, 'Array.isArray(limits.fallback) ? limits.fallback.filter', 'Array.isArray(v.replyLimitsFallback) ? v.replyLimitsFallback.filter', BROWSER),
+    ('M4-problem', CHAT, "if (CODE.test(limits.problem ?? '')) parts.push(`<code>${txt(limits.problem)}</code>`);", '', BROWSER),
+    ('M5-send', SERVE, 'if (!send || !libraryRevert || !named)', 'if (!libraryRevert || !named)', ROUTES),
+    ('M5-project-receipt', SERVE, 'result.project !== value.project || ', '', ROUTES),
+    ('M5-commit-input', SERVE, '!COMMIT.test(value.commit)', 'false', ROUTES),
+    ('M5-origin', SERVE, "if (one(req, 'origin') !== ownOrigin(preview)) return refuse(403, 'cross-origin request refused', 'a revert needs the Console\\'s own Origin');", '', ROUTES),
+    ('M5-fetch-metadata', SERVE, "if (one(req, 'sec-fetch-site') !== 'same-origin') return refuse(403, 'cross-site request refused', 'a revert needs same-origin Fetch Metadata');", '', ROUTES),
+    ('M6-duplicate-call', SERVE, 'result = await libraryRevert({ project: value.project, commit: value.commit });', 'result = await libraryRevert({ project: value.project, commit: value.commit }); await libraryRevert({ project: value.project, commit: value.commit });', ROUTES),
+    ('M7-user-fence', SERVE, "if (path === '/api/chat' || path.startsWith('/api/chat/')) return true;", "if (path.startsWith('/api/library/')) return true; if (path === '/api/chat' || path.startsWith('/api/chat/')) return true;", ROUTES),
+]
+
+
+def digest(path):
+    return hashlib.sha256(path.read_bytes()).hexdigest()
+
+
+def main():
+    parser = argparse.ArgumentParser(description=__doc__)
+    parser.add_argument('--clear', required=True, help='Sage CLEAR authorizing this run')
+    parser.add_argument('--output', required=True, type=Path)
+    args = parser.parse_args()
+    repo = Path(subprocess.check_output(['git', 'rev-parse', '--show-toplevel'], text=True).strip())
+    if subprocess.check_output(['git', 'status', '--porcelain', '--', 'packages'], text=True).strip():
+        raise SystemExit('Commit tested packages first: snapshot must match candidate.')
+    head = subprocess.check_output(['git', 'rev-parse', 'HEAD'], text=True).strip()
+    before = {p: digest(repo / p) for p in [CHAT, SERVE, RENDER]}
+    args.output.mkdir(parents=True, exist_ok=True)
+    results = []
+    with tempfile.TemporaryDirectory(prefix='mosaic-row225-mutants-') as directory:
+        scratch = Path(directory)
+        archive = scratch / 'candidate.tar'
+        with archive.open('wb') as stream:
+            subprocess.run(['git', 'archive', 'HEAD', 'packages', 'roles', 'contracts', 'tasks', 'missions', 'package.json', 'RELEASE'], stdout=stream, check=True)
+        for name, target, old, new, test in MUTANTS:
+            tree = scratch / name
+            tree.mkdir()
+            with tarfile.open(archive) as bundle:
+                bundle.extractall(tree, filter='data')
+            (tree / 'node_modules').symlink_to((repo / 'node_modules').resolve(), target_is_directory=True)
+            path = tree / target
+            source = path.read_text()
+            hits = source.count(old)
+            if hits != 1:
+                raise SystemExit(f'{name}: expected one anchor, found {hits}')
+            path.write_text(source.replace(old, new, 1))
+            command = ['timeout', '-k', '10', '240' if test == BROWSER else '120', 'node', '--test', '--test-reporter=tap', '--test-concurrency=1', '--test-timeout=30000', test]
+            run = subprocess.run(command, cwd=tree, stdout=subprocess.PIPE, stderr=subprocess.STDOUT, text=True, env=os.environ)
+            log = args.output / f'{name}.tap'
+            log.write_text(run.stdout)
+            path.write_text(source)
+            restored = digest(path) == hashlib.sha256(source.encode()).hexdigest()
+            worktree_clean = before == {p: digest(repo / p) for p in before}
+            if not restored or not worktree_clean:
+                raise SystemExit(f'{name}: restore/hash check failed')
+            killed = run.returncode == 1 and 'ERR_ASSERTION' in run.stdout and 'not ok ' in run.stdout
+            results.append({'mutant': name, 'anchorHits': hits, 'restored': restored, 'worktreeUnchanged': worktree_clean, 'exit': run.returncode, 'killed': killed, 'test': test, 'log': str(log)})
+            print(json.dumps(results[-1]), flush=True)
+            shutil.rmtree(tree)
+            if not killed:
+                break
+    after = {p: digest(repo / p) for p in before}
+    report = {'head': head, 'clear': args.clear, 'worktreeUnchanged': before == after, 'results': results}
+    (args.output / 'summary.json').write_text(json.dumps(report, indent=2) + '\n')
+    if before != after or len(results) != len(MUTANTS) or not all(r['killed'] for r in results):
+        raise SystemExit(1)
+
+
+if __name__ == '__main__':
+    main()

agents/gander/work/queue-299/ASSERTION-PRESERVATION.json

@@ -0,0 +1,47 @@
+{
+  "authority": "mos-1409 via sage-3181",
+  "base": "4a9c536e8",
+  "path": "packages/cli/tests/case1-accept.test.mjs",
+  "old_line_replacements": [
+    {
+      "old": "  if(fault==='inner')assert.ok(probeSeconds>=1.25&&probeSeconds<2.75,`${mode}: probe ${probeSeconds}s after baseline ${baselineSeconds}s`);",
+      "new": "  if(fault==='inner')assert.ok(probeSeconds>=1.25&&probeSeconds<2.75,`${mode}: direct probe ${probeSeconds}s; baseline ${baselineSeconds}s is diagnostic only`);",
+      "change": "diagnostic message only; numeric comparisons and strictness unchanged"
+    },
+    {
+      "old": "   assert.ok(probeSeconds>=3.25&&probeSeconds<4.75,`${mode}: probe ${probeSeconds}s after baseline ${baselineSeconds}s`);",
+      "new": "   assert.ok(probeSeconds>=3.25&&probeSeconds<4.75,`${mode}: direct probe ${probeSeconds}s; baseline ${baselineSeconds}s is diagnostic only`);",
+      "change": "diagnostic message only; numeric comparisons and strictness unchanged"
+    },
+    {
+      "old": "  const probeSeconds=seconds-baselineSeconds;",
+      "new": "  let probeSeconds=seconds;\n  if(timingFile)assert.doesNotThrow(()=>{probeSeconds=readProbeSeconds(read(timingFile));},'P10 observer pair is required');",
+      "change": "approved observer plumbing or probeSeconds source"
+    },
+    {
+      "old": "function run(h, extra = {}, argv = [\"--business\", \"mosaic-stack\", \"--args\", \"/etc/mosaic-stack/dev.args\", \"--claude-pin\", CLAUDE_PIN, \"--node-pin\", NODE_PIN, \"--root\", h.root]) {",
+      "new": "function run(h, extra = {}, argv = [\"--business\", \"mosaic-stack\", \"--args\", \"/etc/mosaic-stack/dev.args\", \"--claude-pin\", CLAUDE_PIN, \"--node-pin\", NODE_PIN, \"--root\", h.root], script = SCRIPT) {",
+      "change": "approved observer plumbing or probeSeconds source"
+    },
+    {
+      "old": "  const r = spawnSync(SCRIPT, argv, {",
+      "new": "  const r = spawnSync(script, argv, {",
+      "change": "approved observer plumbing or probeSeconds source"
+    },
+    {
+      "old": "  const start=performance.now(),r=run(h),seconds=(performance.now()-start)/1000;capture();",
+      "new": "  const start=performance.now(),r=run(h,timingFile?{ROW299_TIMING_FILE:timingFile}:{},undefined,observedScript),seconds=(performance.now()-start)/1000;capture();",
+      "change": "fault run selects private copy only for inner/outer; default SCRIPT and overflow remain"
+    }
+  ],
+  "only_removed_assertion_lines_are_two_diagnostic_messages": true,
+  "numeric_bands_unchanged": {
+    "inner": "[1.25,2.75)",
+    "outer": "[3.25,4.75)"
+  },
+  "baseline_status_and_clean_session_lines_byte_identical": true,
+  "all_other_original_assertion_lines_preserved": true,
+  "guard_7000_unchanged": true,
+  "new_assertions": "copy reversal, observer variable isolation, stream/status/EXIT preservation, strict records, required pair",
+  "runtime_status": "NOT RUN; no Node or test until CLEAR"
+}

agents/gander/work/queue-299/BASE.json

@@ -0,0 +1,28 @@
+{
+  "row": 299,
+  "issue": 1806,
+  "vikunja": 573,
+  "base": "4a9c536e861f1d9f9a018019b3ac4519d65eccf0",
+  "branch": "gander/row299-p10",
+  "status": "IMPLEMENTED STATIC; source 1ec2b9765; no Node/test/push",
+  "authority": "mos-1409, sage-3181; Filbert implementation review pending",
+  "files": [
+    {
+      "path": "packages/cli/tests/case1-accept.test.mjs",
+      "git_blob": "c196b40981056963ed924a09f649cfe8e99b34c6",
+      "sha256": "1e8af0656707d93dedade923bf60556022dc7121c43761876a5d7e02731c14aa"
+    },
+    {
+      "path": "packages/cli/tests/case-sudo-fixture.mjs",
+      "git_blob": "866c6c0d229a1fc1e9401ee8bb5522ac8cb01ebc",
+      "sha256": "eac5c83f43056bdeb5781101307e17d4bc01f03e97e02f4f5e930436d7e43535"
+    },
+    {
+      "path": "scripts/case1-accept.sh",
+      "git_blob": "05cb249ea2217d1a542438b597d382669acf8a9b",
+      "sha256": "89b45bb84e8365f32f08fd055c7db8a0259533f23fe7ab03f484acb25bee92c2"
+    }
+  ],
+  "source": "1ec2b97650849b90f41a8e1d1190f609de312d49",
+  "execution": "HELD for Sage CLEAR; no stress process; ambient load >=4 is target only"
+}

agents/gander/work/queue-299/BUILD.md

@@ -0,0 +1,98 @@
+# Row 299 / Vikunja 573: direct P10 timing
+
+> Execution method: Gander implements inline after Mos's old-test ruling and Filbert's static read. No delegation. Static implementation authorized by mos-1409 / sage-3181. Every runtime step remains held for CLEAR.
+
+**Goal:** Measure whether P10 takes its two-second inner path or four-second outer path under load, without subtracting unrelated work from another run.
+
+**Architecture:** Add a test helper that makes a private, instrumented copy of the current acceptance script. Two root-side observer statements bracket only the P10 capture's actual bounded wait. Read a complete monotonic begin/end pair from a separate fixture file, while all existing refusal, residual and cleanup assertions still examine the real acceptance output.
+
+**Tech stack:** Existing Node test runner, Bash builtins, Linux /proc/uptime. No new package, interpreter, product hook or live host action.
+
+**Spec:** docs/plans/2026-10-23_mvp-readiness-rows.md, "Brief: 573, the P10 hop band"; sage-3175. Base 4a9c536e8, branch gander/row299-p10. Reviewer Filbert; gate owner Sage. Row 293 is done. Queue claim is held because it executes Node, forbidden in the present slot.
+
+## Constraints and current status
+
+- Static implementation only, authorized by mos-1409. No Node, tests, HTTPS Git, queue call or push has run for 299. No production edit.
+- Mos approved the measurement semantics in mos-1409 via sage-3181 under mos-1272. The numeric bands stay unchanged.
+- All script/supervisor bytes, 2/4-second budgets, 128-byte cap, exact reason assertions, no-observed assertion, hop residual assertion and cleanup assertions remain authoritative.
+- Keep the same healthy baseline status and `baseline leaves no session` assertions. It may remain as an independent healthy control and diagnostic; it no longer supplies the clock value being asserted.
+- No extra retry, smoothing, percentile selection, ignored red, clock fallback, or widened band. Missing clock evidence fails.
+- Tests use a short TMPDIR directly under /mnt/storage/scratch/tmp/gXXXXXX, never /tmp. No live units, ports, credentials or instance state.
+
+## Source of the band and evidence
+
+1. The original row 253 test timed the full acceptance run. Row 276 exposed it after adding stdout spooling: the old inner `<4 s` whole-run bound already failed 2/5 before that delta and 5/5 after it. Mos's mos-1350 ruled that tests 9 and 10 must measure the probe's cost, offering probe stamps or a same-mode no-fault baseline. See agents/gander/work/queue-276/BUILD.md:120-145 and ASSERTION-PRESERVATION.json.
+2. We chose baseline subtraction in 135bb8fae (original source 6f8c5653a). e06130fc0 added the required clean baseline check. Current test lines 371-388 measure two separate full runs and compute `probeSeconds=seconds-baselineSeconds`.
+3. The adopted windows are inner [1.25,2.75) and outer [3.25,4.75): 0.75 s around the configured 2/4 s budgets, with 0.5 s between windows. Duckworth-0218 accepted them; the isolated proof in queue-276/BUILD.md reported inner exec 2.033..2.171, inner hop 2.055..2.135, outer exec 3.758..3.961, outer hop 3.736..3.911. Those are historical evidence, not a new run or carried result.
+4. The recorded failure is agents/gizmoduck/work/queue-270/BUILD.md:629-636: run 3 on 53406f3e4 had CLI 904/905, inner hop estimate 1.08 below 1.25. The file was unchanged. Its isolated whole rerun passed 50/50 at load 3.19 (mos-1367). No other seat's scratch has been read for this packet.
+5. Production is scripts/case1-accept.sh:744, `tester_capture 2 4 128`. Its inner timer is after the uid drop; its outer timeout is started at :238 and waited at :244. The capture validates tools and creates its private files at :233-235, before the timer is armed. Exact refusal mapping is :224-229. The stalled-supervisor case remains an explicit same-uid residual.
+
+Static mechanism: let H be the healthy probe cost, I the true faulty wait and U the rest of the full run, including scheduling delays. The current estimate is `(I + U_fault) - (H + U_baseline)`. It contains `U_fault-U_baseline-H`, so it can underestimate I when the baseline gets more delay. The 1.08 report is consistent with that mechanism; we do not invent the separate component timings absent from the committed record. A direct bracket removes the unrelated subtraction; execution must still establish its margins under the agreed load.
+
+## Approaches considered
+
+- Repeat baselines or use a median: reduces some noise but still subtracts two unrelated schedules and adds work to every whole-file gate. Reject as the fix.
+- Stamp in the peer Python or sudo fake: the inner/outer timer is already armed before a delayed child reaches the stamp, so it can measure only the remaining budget and undercount again. Reject.
+- **Recommend a direct root-side bracket in a private script copy.** Begin immediately before the actual outer timeout launch, after validation; end immediately after its wait, before unrelated post-checks. Includes sudo dispatch, the inner wait and its cleanup, or the outer timeout. Excludes preceding functional checks, the healthy run, metadata work before capture, and tool-validation cost. It measures the same timing distinction, using both existing fake sudo modes.
+
+Mos approved this approach in mos-1409. Timing still includes kernel scheduling and inner cleanup. Arbitrary starvation cannot be given a hard wall-time guarantee; an overshoot remains a red for placement, not permission to retune.
+
+## Proposed files and interfaces
+
+- New packages/cli/tests/case-p10-timing-fixture.mjs: `instrumentP10Probe(source)` returns a copy of the current script with exactly two observer blocks; `readProbeSeconds(text)` returns `(end-begin)` in seconds from two validated centisecond readings.
+- Existing packages/cli/tests/case1-accept.test.mjs: an optional script-path argument to run(), defaulting to SCRIPT for every current caller. Only inner/outer P10 fault runs execute the private copy. The baseline still uses SCRIPT. Overflow stays on SCRIPT and unchanged.
+- agents/gander/work/queue-299/: plan, assertion-preservation record, manifest, raw logs, load/timing receipts and mutant records after authorization. No production path in the candidate manifest.
+
+Observer details:
+
+1. Locate exactly one `tester_capture() (` function, scoped before the unique row276-legacy marker. Each insertion anchor must occur once within that slice. Never apply an unscoped global replace.
+2. Just before :238 and just after :244, use shell `read` on /proc/uptime plus `printf` to append `begin <uptime>` / `end <uptime>` to ROW299_TIMING_FILE, only when `maximum` is 128. Selecting the existing probe cap, rather than the 2/4 budgets, keeps the observer active when a timer mutant changes a budget. Config query uses 4096 and emits no probe pair.
+3. Read and printf are Bash builtins: no new process or Python/Node startup inside the timed span. Preserve `$rc` and every original command, redirection and heredoc byte. Do not emit observer bytes on stdout/stderr. The file is private fixture evidence, not a product authority channel.
+4. The copy retains the original absolute /proc reads and the --root fixture seam. The script has no relative self-path imports. Write the copy under h.dir with executable mode and pass the private timing path only to that run. No product script is rewritten.
+5. Reverse the two recorded insertions and assert byte equality with freshly read SCRIPT. This applies to the current script, including a deliberately mutated source, rather than a stale frozen healthy copy. The same source/copy comparison and unique anchors fail closed on drift.
+6. Parser requires exactly one newline-terminated begin and end pair, in that order, each `<integer>.<two digits>`, and end strictly above begin. No extra pair, missing value, NaN or negative interval is accepted. Use integer centiseconds before converting to seconds. A 10 ms clock resolution is much smaller than the existing 0.5 s window gap.
+7. Keep inner [1.25,2.75) and outer [3.25,4.75) exactly. Change only the source of probeSeconds and its diagnostic description. Preserve every existing status/reason/no-observed/residual/cleanup assertion, including the healthy baseline checks. The existing 7 s fixture safety guard stays unchanged and remains cleanup only, never proof of an outer timeout. If it intervenes or masks a measurement, stop for Sage/Mos; do not silently extend it.
+
+## Review focus
+
+- A delayed healthy baseline cannot change the measured interval: it is diagnostic only. No baseline value enters readProbeSeconds or a timing assertion.
+- A child delayed after timer arming is not used as the start observer. The begin read precedes timer launch in the root-side capture copy.
+- Missing/duplicated/reversed records fail before a band assertion. Add named observer-record tests; no fallback to the old arithmetic.
+- A timer mutant reaches the actual observer copy. Source reconstruction and cap-based selection prevent budgets changed to 1/3 seconds from disabling observation.
+- Observer code must not change stdout, refusal status, cleanup or trust. Preserve original source bytes by inverse comparison and all original non-timing assertion lines by an assertion-preservation receipt.
+
+## Implementation and evidence sequence (held)
+
+- [x] Proposal sent in gander-0183; mos-1409 / sage-3181 approve the measurement change. Filbert accepts the observation points and supplies implementation checks I1-I5.
+- [x] Source 1ec2b9765 adds the helper and observer wiring, plus source/variable, streams/status/trap, and record-validation tests. ASSERTION-PRESERVATION.json lists all six old line replacements; only two original assertion messages change. No runtime or syntax claim.
+- [ ] Static review on the committed candidate and manifest. Prove scripts/case1-accept.sh and scripts/case2-unit.sh are byte-identical to the approved base, and no unrelated assertion moved. Finalize all mutant anchors with exactly-one checks.
+- [ ] On Sage CLEAR, first record a passing named base for each killer and then M1-M6 from MUTANT-PLAN.json. Report the actual assertion killed. Every restore is byte-identical and git status is checked. A timeout or survivor stops for placement, not a kill.
+- [ ] Run case1-accept.test.mjs whole at least three times under load, then CLI whole, as the brief requires. Record ambient load at each of the three starts and throughout each file; >=4 is a target, never a wait condition (mos-1409). No stress process. The whole CLI suite is the required loaded proof; record its load and all exec/hop direct intervals, plus min/max. Do not hold the slot for load.
+- [ ] Record all timeout limits before launch: per-node-file timeout -k 10; use at least ceil(3x longest receipt)+120, with 900 s for an unknown file. Whole case1 gets 1200 s from the row293 receipt; stack-release 2400 s from its 683.647 s historical receipt; recheck measured maxima before the current gate. Print the full CLI file list and run the package whole with its normal test-file concurrency, so the suite itself supplies the required loaded proof. Use timeout -k 10 5400 around that whole invocation: 3x the row293 1367.764 s CLI receipt plus 120 is 4224 s, below 5400. TMPDIR is fresh short scratch. No runs are authorized now.
+- [ ] Any old-test red, reason mismatch, fixture-guard intervention, timeout, or survivor goes to Sage/Mos before edits or retry. No carried result from row293. Commit and publish records only in Sage's gap, claimant review move only in a queue gap. Filbert reviews; Sage gates and lands.
+
+## Static self-review
+
+The proposal meets the brief's source/fix/mutant items and preserves the 2/4 s distinction and separated numeric windows. No runtime or load-stability claim is made. Timing-copy instrumentation is the main review risk: Filbert must approve the two exact observation points and source-byte reconstruction before execution. Mos approved the changed old-test measurement semantics in mos-1409. The 7 s whole-run fixture guard and scheduling overshoot remain explicit risks to measure, not hidden assertions to relax. No other test or supervisor repair is bundled.
+
+
+## Implemented static: mos-1409 / sage-3181 and Filbert I1-I5
+
+Source 1ec2b9765 on base 4a9c536e8. The two observers use `read -r row299_up row299_spare < /proc/uptime`, never the fixture root. Both guard cap 128 and a nonempty `${ROW299_TIMING_FILE-}`. printf is redirected to that absolute private fixture file; grouped stderr goes to /dev/null; errors leave absent evidence which the parser refuses. No observer assigns a production capture variable, changes rc, or touches a trap. New tests assert row299-only read targets and no other assignment; preserve explicit stdout/stderr bytes, exit 87 and the EXIT trap; and reject missing begin/end, duplicate pair, reversed order, nonnumeric/equal/backward readings, and a missing/extra final newline.
+
+Only inner/outer fault runs receive the absolute timing path and executable 0700 private copy. Every such run reverses its two insertions and compares to a fresh read of SCRIPT, including any timer mutant. Baseline and overflow use SCRIPT; baseline status and clean-session assertions remain unchanged. The clock pair is required by assert.doesNotThrow before applying the unchanged bands. baselineSeconds stays diagnostic only. Capture launch insertion keys on its unique LC_ALL=C prefix rather than the timeout command itself, so M4 (outer removal) reaches execution instead of an anchor refusal.
+
+M1-M6 have one target each in their defined scope. M5 now suppresses only the begin printf, preserving the constant block and reversal check so the named inner test must reject an end-only record. M6 admits equal readings so the record-validation test must catch it. M1 retains the known startup-overhead risk: save its interval and stop on a survivor, without changing the ruled bands. All production/shared fixture bytes are unchanged. Manifest is the two test/helper paths only. No Node, syntax preflight, test, mutant, queue call, or HTTPS operation has run. The implementation is unverified until Filbert's static read and Sage CLEAR.
+
+
+## sage-3255 integration, static only
+
+Rebased all three commits from 4a9c536e8 onto 80793d824 under new branch gander/row299-8079, preserving gander/row299-p10. No conflict. The range-diff has three equal pairs and all per-commit stable patch-ids match. Source is e6751ecab; both manifest blobs equal the approved 1ec2b9765 blobs, so digest 277ace0b is unchanged. Direct test/helper, product case1 script, shared CLI helper and sudo-fixture paths have zero drift over 4a9c536e8..80793d824. Row294's CLI config/access and stack-release-test changes are in the new base and covered by the required full CLI suite. No package/source/test implementation changed in this integration. Full records in integration-8079/.
+
+Gate remains held for CLEAR. Ambient load >=4 remains a target, not a wait condition under mos-1409; no stress process. Record each of three whole case1 starts and the whole CLI suite's load and per-mode direct timings. Numeric windows and the 7 s guard remain fixed. Any red, guard intervention, timeout, survivor or overshoot stops to Sage for Mos before edits or retry.
+
+## Gate run 1: sage-3268, 2026-10-23
+
+GREEN on ffa93b054 / 277ace0b. Three whole case1 runs 53/0/0 each; whole CLI 917/0/0 across 59 files. Total 1076/0/0, no cancelled/todo. M1-M6 all killed at their intended assertions, with byte-identical clean restores. No unmutated guard intervention, external timeout, retry or carry. UTC run 07:26:52–07:50:16 (1404 s). CLI load reached 7.17; direct CLI intervals inner exec/hop 2.27/2.27, outer exec/hop 4.01/4.01.
+
+M4 follows sage-3273 / mos-1426: the 7 s fixture guard returned, then exact outer-reason assertion at case1-accept.test.mjs:445 failed on probe-inner-command. No timeout or cleanup-only kill. M1 measured 1.23 s, preserving the noted narrow kill margin. Sweep found zero gate residuals; four MCP harness processes predate this run. Full records, load samples, assertion locations and named base evidence are in run1/RESULTS.md and run1/results.json. Manifest remains unchanged.

agents/gander/work/queue-299/MANIFEST.sha256

@@ -0,0 +1,2 @@
+7ac9d29281d4076bf2e00b7a07294cd4519d7ae9f97c4f6ddc1d22440c9b071a  packages/cli/tests/case-p10-timing-fixture.mjs
+685cf69c741540240c5b414e1907e624cbc59656541316f178d377472fad34a2  packages/cli/tests/case1-accept.test.mjs

agents/gander/work/queue-299/MUTANT-PLAN.json

@@ -0,0 +1,73 @@
+{
+  "status": "Static definitions finalized; no mutant executed",
+  "mutants": [
+    {
+      "id": "M1",
+      "path": "scripts/case1-accept.sh",
+      "old": "tester_capture 2 4 128",
+      "new": "tester_capture 1 4 128",
+      "killer": "row253 C4 P10 inner reason holds under both sudo models",
+      "expected": "exact inner-timeout reason remains valid, but direct probe interval is below 1.25 s; ERR_ASSERTION on the existing lower-band check",
+      "static_anchor_count": 1,
+      "source_sha256": "89b45bb84e8365f32f08fd055c7db8a0259533f23fe7ab03f484acb25bee92c2",
+      "receipt_requirement": "Record direct interval even if it survives; startup overhead can erase the 0.25 s kill margin. Survivor stops to Sage/Mos; bands unchanged."
+    },
+    {
+      "id": "M2",
+      "path": "scripts/case1-accept.sh",
+      "old": "tester_capture 2 4 128",
+      "new": "tester_capture 3 4 128",
+      "killer": "row253 C4 P10 inner reason holds under both sudo models",
+      "expected": "exact inner-timeout reason remains valid, but direct interval exceeds the unchanged 2.75 s top; ERR_ASSERTION on upper-band check",
+      "static_anchor_count": 1,
+      "source_sha256": "89b45bb84e8365f32f08fd055c7db8a0259533f23fe7ab03f484acb25bee92c2"
+    },
+    {
+      "id": "M3",
+      "path": "scripts/case1-accept.sh",
+      "old": "tester_capture 2 4 128",
+      "new": "tester_capture 2 3 128",
+      "killer": "row253 C4 P10 outer reason holds under both sudo models",
+      "expected": "stalled supervisor still gives exact outer-timeout, but direct interval falls below 3.25 s; ERR_ASSERTION on outer lower-band check",
+      "static_anchor_count": 1,
+      "source_sha256": "89b45bb84e8365f32f08fd055c7db8a0259533f23fe7ab03f484acb25bee92c2"
+    },
+    {
+      "id": "M4",
+      "path": "scripts/case1-accept.sh",
+      "scope": "tester_capture function only",
+      "description": "Remove the trusted outer GNU timeout from the capture invocation, keeping the fixture guard",
+      "killer": "row253 C4 P10 outer reason holds under both sudo models",
+      "expected": "the fixture safety guard permits return but the exact probe-outer-timeout assertion fails; never count external command timeout or cleanup alone as a kill",
+      "scope_begin": "tester_capture() (\n",
+      "scope_end": "# row276-legacy-begin",
+      "old": "LC_ALL=C \"$TS_TIMEOUT\" --verbose --signal=KILL \"${outer}s\" \"$TS_BASH\" -c ",
+      "new": "LC_ALL=C \"$TS_BASH\" -c ",
+      "static_anchor_count": 1,
+      "source_sha256": "89b45bb84e8365f32f08fd055c7db8a0259533f23fe7ab03f484acb25bee92c2"
+    },
+    {
+      "id": "M5",
+      "path": "packages/cli/tests/case-p10-timing-fixture.mjs",
+      "description": "Suppress the begin printf while retaining the inserted begin block and reversal check",
+      "killer": "row253 C4 P10 inner reason holds under both sudo models",
+      "expected": "the existing inner test requires a valid pair with assert.doesNotThrow; end-only evidence fails ERR_ASSERTION",
+      "old": "printf 'begin %s\\\\n' \"$row299_up\" >> \"$ROW299_TIMING_FILE\";",
+      "new": ":;",
+      "static_anchor_count": 1,
+      "source_sha256": "7ac9d29281d4076bf2e00b7a07294cd4519d7ae9f97c4f6ddc1d22440c9b071a"
+    },
+    {
+      "id": "M6",
+      "path": "packages/cli/tests/case-p10-timing-fixture.mjs",
+      "description": "Accept an equal begin/end clock pair",
+      "killer": "row299 P10 observer records are complete and ordered",
+      "expected": "the equal-readings case in the named record test expects refusal and fails ERR_ASSERTION",
+      "old": "end <= begin",
+      "new": "end < begin",
+      "static_anchor_count": 1,
+      "source_sha256": "7ac9d29281d4076bf2e00b7a07294cd4519d7ae9f97c4f6ddc1d22440c9b071a"
+    }
+  ],
+  "restore": "Restore byte-identical source/test/helper files and require clean git status between cases. Timeout is a stop, never a kill."
+}

agents/gander/work/queue-299/PACKET.sha256

@@ -0,0 +1,7 @@
+b0ca08db7968e92d417960e58112d767d54902e4d1121f97d4eef2152a2340eb  agents/gander/work/queue-299/ASSERTION-PRESERVATION.json
+3cc775b0c0e78d0aca5396aba4380a0bdd38d421b144dceea4124323ddfd1bc4  agents/gander/work/queue-299/BASE.json
+132cd793d5f9daa93c879d073dd1fa1d1568b07851b707a3c0b519ed64e9a63a  agents/gander/work/queue-299/BUILD.md
+277ace0b4274970d5bd4c05cf8fe99aa1e7ebc469a719e4cefcb334a75d3865d  agents/gander/work/queue-299/MANIFEST.sha256
+ff72c99b4b73cfe2acbaf79eb9aed442c855f011fe662722acba7f8a388d3f9b  agents/gander/work/queue-299/MUTANT-PLAN.json
+7657e629dab262aaeb46004526ede586a167675558a72b6177abf7e646ce6885  agents/gander/work/queue-299/integration-8079/CHECKS.json
+b6632cb58ccfc79262f98322682cfd2887e102436cdd1af9e8ac37d2a482b9d8  agents/gander/work/queue-299/integration-8079/range-diff.txt

agents/gander/work/queue-299/integration-8079/CHECKS.json

@@ -0,0 +1,35 @@
+{
+  "base": "80793d824e05baaef4820f4be7790aba55971b6f",
+  "rebased_source": "e6751ecab",
+  "rebased_tip_before_records": "bc7da6814",
+  "conflicts": [],
+  "range_diff": "all three pairs equal",
+  "patch_ids": [
+    {
+      "old": "31c847580",
+      "new": "482adc255",
+      "patch_id": "224e6ce7677320cf362189ad2746c481176c3429"
+    },
+    {
+      "old": "1ec2b9765",
+      "new": "e6751ecab",
+      "patch_id": "dec31bc01820a54fa4001fda4886905576a6b692"
+    },
+    {
+      "old": "9872b5ab5",
+      "new": "bc7da6814",
+      "patch_id": "f335941005f9c113aa09a800a3569d2447be3464"
+    }
+  ],
+  "checked_paths": [
+    "packages/cli/tests/case1-accept.test.mjs",
+    "packages/cli/tests/case-p10-timing-fixture.mjs",
+    "scripts/case1-accept.sh",
+    "packages/cli/tests/helpers.mjs",
+    "packages/cli/tests/case-sudo-fixture.mjs"
+  ],
+  "drift": "",
+  "manifest": "277ace0b4274970d5bd4c05cf8fe99aa1e7ebc469a719e4cefcb334a75d3865d",
+  "test_blobs_match_static_approved_1ec2b9765": true,
+  "runtime": "Not run; awaiting Sage CLEAR. No queue/Node/tests executed."
+}

agents/gander/work/queue-299/integration-8079/range-diff.txt

@@ -0,0 +1,3 @@
+1:  31c847580 = 1:  482adc255 docs(row299): propose direct P10 wait timing for mos-1272 review
+2:  1ec2b9765 = 2:  e6751ecab test(case): observe P10 wait directly under mos-1409
+3:  9872b5ab5 = 3:  bc7da6814 docs(row299): record mos-1409 preservation and static candidate

agents/gander/work/queue-299/run1/M1-syntax.busy.log

@@ -0,0 +1 @@
+CLEAR

agents/gander/work/queue-299/run1/M1-syntax.command.json

@@ -0,0 +1,18 @@
+{
+  "label": "M1-syntax",
+  "argv": [
+    "timeout",
+    "-k",
+    "10",
+    "120",
+    "bash",
+    "-n",
+    "scripts/case1-accept.sh"
+  ],
+  "limit_seconds": 120,
+  "tmpdir": "/mnt/storage/scratch/tmp/gh8s2Og",
+  "started_utc": "2026-10-23T07:49:28Z",
+  "start_load": "1.51 2.50 2.68 3/5810 1153451",
+  "log": "/mnt/storage/scratch/tmp/gABO62Q/records/M1-syntax.log",
+  "expected_red": false
+}

agents/gander/work/queue-299/run1/M1-syntax.load.json

@@ -0,0 +1,7 @@
+[
+  {
+    "wall_seconds": 0.0,
+    "utc": "2026-10-23T07:49:28Z",
+    "load": "1.51 2.50 2.68 2/5811 1153452"
+  }
+]

agents/gander/work/queue-299/run1/M1.busy.log

@@ -0,0 +1 @@
+CLEAR

agents/gander/work/queue-299/run1/M1.command.json

@@ -0,0 +1,21 @@
+{
+  "label": "M1",
+  "argv": [
+    "timeout",
+    "-k",
+    "10",
+    "1200",
+    "node",
+    "--test",
+    "--test-reporter=tap",
+    "--test-name-pattern",
+    "^row253 C4 P10 inner reason holds under both sudo models$",
+    "packages/cli/tests/case1-accept.test.mjs"
+  ],
+  "limit_seconds": 1200,
+  "tmpdir": "/mnt/storage/scratch/tmp/gxjj9Vd",
+  "started_utc": "2026-10-23T07:49:30Z",
+  "start_load": "1.51 2.50 2.68 1/5816 1156782",
+  "log": "/mnt/storage/scratch/tmp/gABO62Q/records/M1.log",
+  "expected_red": true
+}

agents/gander/work/queue-299/run1/M1.load.json

@@ -0,0 +1,7 @@
+[
+  {
+    "wall_seconds": 0.0,
+    "utc": "2026-10-23T07:49:30Z",
+    "load": "1.51 2.50 2.68 3/5817 1156783"
+  }
+]

agents/gander/work/queue-299/run1/M1.log

@@ -0,0 +1,29 @@
+TAP version 13
+# Subtest: row253 C4 P10 inner reason holds under both sudo models
+not ok 1 - row253 C4 P10 inner reason holds under both sudo models
+  ---
+  duration_ms: 4641.831075
+  type: 'test'
+  location: '/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:421:49'
+  failureType: 'testCodeFailure'
+  error: 'exec: direct probe 1.23s; baseline 1.764558389s is diagnostic only'
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: true
+  actual: false
+  operator: '=='
+  stack: |-
+    TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:450:29)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  ...
+# {"fault":"inner","mode":"exec","baselineSeconds":1.764558389,"faultSeconds":2.8568522200000004,"probeSeconds":1.23}
+1..1
+# tests 1
+# suites 0
+# pass 0
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 4737.590412

agents/gander/work/queue-299/run1/M2-syntax.busy.log

@@ -0,0 +1 @@
+CLEAR

agents/gander/work/queue-299/run1/M2-syntax.command.json

@@ -0,0 +1,18 @@
+{
+  "label": "M2-syntax",
+  "argv": [
+    "timeout",
+    "-k",
+    "10",
+    "120",
+    "bash",
+    "-n",
+    "scripts/case1-accept.sh"
+  ],
+  "limit_seconds": 120,
+  "tmpdir": "/mnt/storage/scratch/tmp/gZ30EQX",
+  "started_utc": "2026-10-23T07:49:36Z",
+  "start_load": "1.47 2.48 2.67 1/5822 1162481",
+  "log": "/mnt/storage/scratch/tmp/gABO62Q/records/M2-syntax.log",
+  "expected_red": false
+}

agents/gander/work/queue-299/run1/M2-syntax.load.json

@@ -0,0 +1,7 @@
+[
+  {
+    "wall_seconds": 0.0,
+    "utc": "2026-10-23T07:49:36Z",
+    "load": "1.47 2.48 2.67 3/5823 1162482"
+  }
+]

agents/gander/work/queue-299/run1/M2.busy.log

@@ -0,0 +1 @@
+CLEAR

agents/gander/work/queue-299/run1/M2.command.json

@@ -0,0 +1,21 @@
+{
+  "label": "M2",
+  "argv": [
+    "timeout",
+    "-k",
+    "10",
+    "1200",
+    "node",
+    "--test",
+    "--test-reporter=tap",
+    "--test-name-pattern",
+    "^row253 C4 P10 inner reason holds under both sudo models$",
+    "packages/cli/tests/case1-accept.test.mjs"
+  ],
+  "limit_seconds": 1200,
+  "tmpdir": "/mnt/storage/scratch/tmp/gYr4G6o",
+  "started_utc": "2026-10-23T07:49:37Z",
+  "start_load": "1.47 2.48 2.67 1/5823 1165689",
+  "log": "/mnt/storage/scratch/tmp/gABO62Q/records/M2.log",
+  "expected_red": true
+}

agents/gander/work/queue-299/run1/M2.load.json

@@ -0,0 +1,12 @@
+[
+  {
+    "wall_seconds": 0.0,
+    "utc": "2026-10-23T07:49:37Z",
+    "load": "1.47 2.48 2.67 3/5824 1165690"
+  },
+  {
+    "wall_seconds": 5.001,
+    "utc": "2026-10-23T07:49:42Z",
+    "load": "1.43 2.45 2.66 3/5865 1168855"
+  }
+]

agents/gander/work/queue-299/run1/M2.log

@@ -0,0 +1,29 @@
+TAP version 13
+# Subtest: row253 C4 P10 inner reason holds under both sudo models
+not ok 1 - row253 C4 P10 inner reason holds under both sudo models
+  ---
+  duration_ms: 6624.625527
+  type: 'test'
+  location: '/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:421:49'
+  failureType: 'testCodeFailure'
+  error: 'exec: direct probe 3.24s; baseline 1.754618234s is diagnostic only'
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: true
+  actual: false
+  operator: '=='
+  stack: |-
+    TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:450:29)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  ...
+# {"fault":"inner","mode":"exec","baselineSeconds":1.754618234,"faultSeconds":4.849417662,"probeSeconds":3.24}
+1..1
+# tests 1
+# suites 0
+# pass 0
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 6718.852297

agents/gander/work/queue-299/run1/M3-syntax.busy.log

@@ -0,0 +1,6 @@
+CLEAR
+/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1169351/cmdline: No such file or directory
+/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1169352/cmdline: No such file or directory
+/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1169353/cmdline: No such file or directory
+/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1169354/cmdline: No such file or directory
+/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1169382/cmdline: No such file or directory

agents/gander/work/queue-299/run1/M3-syntax.command.json

@@ -0,0 +1,18 @@
+{
+  "label": "M3-syntax",
+  "argv": [
+    "timeout",
+    "-k",
+    "10",
+    "120",
+    "bash",
+    "-n",
+    "scripts/case1-accept.sh"
+  ],
+  "limit_seconds": 120,
+  "tmpdir": "/mnt/storage/scratch/tmp/gwCkjzX",
+  "started_utc": "2026-10-23T07:49:45Z",
+  "start_load": "1.40 2.43 2.66 2/5844 1172866",
+  "log": "/mnt/storage/scratch/tmp/gABO62Q/records/M3-syntax.log",
+  "expected_red": false
+}

agents/gander/work/queue-299/run1/M3-syntax.load.json

@@ -0,0 +1,7 @@
+[
+  {
+    "wall_seconds": 0.0,
+    "utc": "2026-10-23T07:49:45Z",
+    "load": "1.40 2.43 2.66 4/5845 1172867"
+  }
+]

agents/gander/work/queue-299/run1/M3.busy.log

@@ -0,0 +1,7 @@
+CLEAR
+/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1172650/cmdline: No such file or directory
+/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1172687/cmdline: No such file or directory
+/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1172732/cmdline: No such file or directory
+/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1172780/cmdline: No such file or directory
+/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1172825/cmdline: No such file or directory
+/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1172863/cmdline: No such file or directory

agents/gander/work/queue-299/run1/M3.command.json

@@ -0,0 +1,21 @@
+{
+  "label": "M3",
+  "argv": [
+    "timeout",
+    "-k",
+    "10",
+    "1200",
+    "node",
+    "--test",
+    "--test-reporter=tap",
+    "--test-name-pattern",
+    "^row253 C4 P10 outer reason holds under both sudo models$",
+    "packages/cli/tests/case1-accept.test.mjs"
+  ],
+  "limit_seconds": 1200,
+  "tmpdir": "/mnt/storage/scratch/tmp/g6TrU8V",
+  "started_utc": "2026-10-23T07:49:46Z",
+  "start_load": "1.40 2.43 2.66 2/5868 1176268",
+  "log": "/mnt/storage/scratch/tmp/gABO62Q/records/M3.log",
+  "expected_red": true
+}

agents/gander/work/queue-299/run1/M3.load.json

@@ -0,0 +1,12 @@
+[
+  {
+    "wall_seconds": 0.0,
+    "utc": "2026-10-23T07:49:46Z",
+    "load": "1.40 2.43 2.66 4/5869 1176269"
+  },
+  {
+    "wall_seconds": 5.001,
+    "utc": "2026-10-23T07:49:51Z",
+    "load": "1.44 2.42 2.65 1/5889 1179184"
+  }
+]

agents/gander/work/queue-299/run1/M3.log

@@ -0,0 +1,29 @@
+TAP version 13
+# Subtest: row253 C4 P10 outer reason holds under both sudo models
+not ok 1 - row253 C4 P10 outer reason holds under both sudo models
+  ---
+  duration_ms: 6474.774742
+  type: 'test'
+  location: '/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:421:49'
+  failureType: 'testCodeFailure'
+  error: 'exec: direct probe 3.01s; baseline 1.7982556909999998s is diagnostic only'
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: true
+  actual: false
+  operator: '=='
+  stack: |-
+    TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:452:11)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  ...
+# {"fault":"outer","mode":"exec","baselineSeconds":1.7982556909999998,"faultSeconds":4.664919980999999,"probeSeconds":3.01}
+1..1
+# tests 1
+# suites 0
+# pass 0
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 6573.218398

agents/gander/work/queue-299/run1/M4-syntax.busy.log

@@ -0,0 +1 @@
+CLEAR

agents/gander/work/queue-299/run1/M4-syntax.command.json

@@ -0,0 +1,18 @@
+{
+  "label": "M4-syntax",
+  "argv": [
+    "timeout",
+    "-k",
+    "10",
+    "120",
+    "bash",
+    "-n",
+    "scripts/case1-accept.sh"
+  ],
+  "limit_seconds": 120,
+  "tmpdir": "/mnt/storage/scratch/tmp/gRPd59t",
+  "started_utc": "2026-10-23T07:49:54Z",
+  "start_load": "1.41 2.40 2.64 3/5836 1182894",
+  "log": "/mnt/storage/scratch/tmp/gABO62Q/records/M4-syntax.log",
+  "expected_red": false
+}

agents/gander/work/queue-299/run1/M4-syntax.load.json

@@ -0,0 +1,7 @@
+[
+  {
+    "wall_seconds": 0.0,
+    "utc": "2026-10-23T07:49:54Z",
+    "load": "1.41 2.40 2.64 7/5837 1182895"
+  }
+]

agents/gander/work/queue-299/run1/M4.busy.log

@@ -0,0 +1,3 @@
+CLEAR
+/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1182788/cmdline: No such file or directory
+/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1182883/cmdline: No such file or directory

agents/gander/work/queue-299/run1/M4.command.json

@@ -0,0 +1,21 @@
+{
+  "label": "M4",
+  "argv": [
+    "timeout",
+    "-k",
+    "10",
+    "1200",
+    "node",
+    "--test",
+    "--test-reporter=tap",
+    "--test-name-pattern",
+    "^row253 C4 P10 outer reason holds under both sudo models$",
+    "packages/cli/tests/case1-accept.test.mjs"
+  ],
+  "limit_seconds": 1200,
+  "tmpdir": "/mnt/storage/scratch/tmp/gAKhO44",
+  "started_utc": "2026-10-23T07:49:56Z",
+  "start_load": "1.41 2.40 2.64 8/5839 1186447",
+  "log": "/mnt/storage/scratch/tmp/gABO62Q/records/M4.log",
+  "expected_red": true
+}

agents/gander/work/queue-299/run1/M4.load.json

@@ -0,0 +1,12 @@
+[
+  {
+    "wall_seconds": 0.001,
+    "utc": "2026-10-23T07:49:56Z",
+    "load": "1.41 2.40 2.64 8/5838 1186448"
+  },
+  {
+    "wall_seconds": 5.001,
+    "utc": "2026-10-23T07:50:01Z",
+    "load": "1.54 2.41 2.64 5/5866 1190264"
+  }
+]

agents/gander/work/queue-299/run1/M4.log

@@ -0,0 +1,92 @@
+TAP version 13
+# Subtest: row253 C4 P10 outer reason holds under both sudo models
+not ok 1 - row253 C4 P10 outer reason holds under both sudo models
+  ---
+  duration_ms: 8880.927284
+  type: 'test'
+  location: '/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:421:49'
+  failureType: 'testCodeFailure'
+  error: |-
+    The input did not match the regular expression /P10 tester-socket-squat unnamed boundary=failed reason=probe-outer-timeout /. Input:
+    
+    'F1 units-user pass [email protected] and mosaic-webui.service are active as mosaic (uid 997)\n' +
+      'F2 console-loopback pass healthz answers, and 732 is bound to 127.0.0.1 only, by MainPID 200\n' +
+      'F3 tester-reply pass chief replied to case1-accept-e61888cb4c54\n' +
+      'F4 precheck pass case2-precheck.sh --profile factory exits 0\n' +
+      "F5 bwrap-label pass bwrap 300 reads 'bwrap (enforce)' and its claude descendant 302 reads 'bwrap//&unpriv_bwrap (enforce)'\n" +
+      "F6 claude-pin pass /opt/mosaic-stack/claude-2.1.0/node_modules/@anthropic-ai/claude-code/bin/claude.exe prints '2.1.0 (Claude Code)'\n" +
+      'F7 pm-live pass one live launch: pm run r-0002\n' +
+      "F8 credential-file pass /srv/mosaic/.config/mosaic-dev/secrets/claude-session.env is 'mosaic 600 regular file'\n" +
+      'F9 autoupdater-off pass /etc/claude-code/managed-settings.json is root:root 0644 with env.DISABLE_AUTOUPDATER "1"\n' +
+      'F10 node-pin pass /opt/mosaic-stack/node-v24.1.0/bin/node prints v24.1.0\n' +
+      'F11 no-discord pass /srv/mosaic/.mosaic-dev/discord is absent\n' +
+      'P1 mosaic-sudo closed sudo -l: User mosaic is not allowed to run sudo on dev-53.\n' +
+      "P2 mosaic-groups-keys closed id -G is '997'; authorized_keys is absent\n" +
+      'P3 localadmin-sudo accepted Q183 sudo -l -U localadmin lists 1 NOPASSWD lines\n' +
+      "P4 pve-root-pbs accepted Q182+Q183 root on pve over VM 1008, and PBS backups that hold /srv/mosaic with the credential; this script can't see pve\n" +
+      'P5 jarvis-reach closed jarvis is in none of sudo, docker and lxd (groups: jarvis)\n' +
+      'P6 group-members closed sudo holds only localadmin, and docker and lxd have no members\n' +
+      'P7 sudoers-d closed no file under /etc/sudoers.d names mosaic\n' +
+      'P8 lan-listeners closed 732 is on 127.0.0.1 only by MainPID 200; no TCP listener on 7331 or 7333; tester uses /srv/mosaic/.mosaic-dev/console/tester.sock\n' +
+      'P9 bwrap-userns accepted mos-1096 hostcheck items 1-6 ok, jarvis is denied bwrap, and group mosaic has no other member\n' +
+      'P10 tester-socket-squat unnamed boundary=failed reason=probe-inner-command path=/srv/mosaic/.mosaic-dev/console/tester.sock MainPID=200; hostile same-uid substitution remains\n' +
+      'P11 hostcheck-before-bus closed mosaic-hostcheck.service is enabled, and its Before= names [email protected]\n' +
+      'count pass 11\n' +
+      'count FAIL 0\n' +
+      'count closed 7\n' +
+      'count accepted Q182+Q183 1\n' +
+      'count accepted Q183 1\n' +
+      'count accepted mos-1096 1\n' +
+      'count unnamed 1\n' +
+      'case1-accept: every F check passes; send the whole output to Duckworth, and each unnamed line to Mos\n'
+    
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected:
+  actual: |-
+    F1 units-user pass [email protected] and mosaic-webui.service are active as mosaic (uid 997)
+    F2 console-loopback pass healthz answers, and 732 is bound to 127.0.0.1 only, by MainPID 200
+    F3 tester-reply pass chief replied to case1-accept-e61888cb4c54
+    F4 precheck pass case2-precheck.sh --profile factory exits 0
+    F5 bwrap-label pass bwrap 300 reads 'bwrap (enforce)' and its claude descendant 302 reads 'bwrap//&unpriv_bwrap (enforce)'
+    F6 claude-pin pass /opt/mosaic-stack/claude-2.1.0/node_modules/@anthropic-ai/claude-code/bin/claude.exe prints '2.1.0 (Claude Code)'
+    F7 pm-live pass one live launch: pm run r-0002
+    F8 credential-file pass /srv/mosaic/.config/mosaic-dev/secrets/claude-session.env is 'mosaic 600 regular file'
+    F9 autoupdater-off pass /etc/claude-code/managed-settings.json is root:root 0644 with env.DISABLE_AUTOUPDATER "1"
+    F10 node-pin pass /opt/mosaic-stack/node-v24.1.0/bin/node prints v24.1.0
+    F11 no-discord pass /srv/mosaic/.mosaic-dev/discord is absent
+    P1 mosaic-sudo closed sudo -l: User mosaic is not allowed to run sudo on dev-53.
+    P2 mosaic-groups-keys closed id -G is '997'; authorized_keys is absent
+    P3 localadmin-sudo accepted Q183 sudo -l -U localadmin lists 1 NOPASSWD lines
+    P4 pve-root-pbs accepted Q182+Q183 root on pve over VM 1008, and PBS backups that hold /srv/mosaic with the credential; this script can't see pve
+    P5 jarvis-reach closed jarvis is in none of sudo, docker and lxd (groups: jarvis)
+    P6 group-members closed sudo holds only localadmin, and docker and lxd have no members
+    P7 sudoers-d closed no file under /etc/sudoers.d names mosaic
+    P8 lan-listeners closed 732 is on 127.0.0.1 only by MainPID 200; no TCP listener on 7331 or 7333; tester uses /srv/mosaic/.mosaic-dev/console/tester.sock
+    P9 bwrap-userns accepted mos-1096 hostcheck items 1-6 ok, jarvis is denied bwrap, and group mosaic has no other member
+    P10 tester-socket-squat unnamed boundary=failed reason=probe-inner-command path=/srv/mosaic/.mosaic-dev/console/tester.sock MainPID=200; hostile same-uid substitution remains
+    P11 hostcheck-before-bus closed mosaic-hostcheck.service is enabled, and its Before= names [email protected]
+    count pass 11
+    count FAIL 0
+    count closed 7
+    count accepted Q182+Q183 1
+    count accepted Q183 1
+    count accepted mos-1096 1
+    count unnamed 1
+    case1-accept: every F check passes; send the whole output to Duckworth, and each unnamed line to Mos
+    
+  operator: 'match'
+  stack: |-
+    TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:445:10)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  ...
+1..1
+# tests 1
+# suites 0
+# pass 0
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 8984.292623

agents/gander/work/queue-299/run1/M5-syntax.busy.log

@@ -0,0 +1,2 @@
+CLEAR
+/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1193437/cmdline: No such file or directory

agents/gander/work/queue-299/run1/M5-syntax.command.json

@@ -0,0 +1,18 @@
+{
+  "label": "M5-syntax",
+  "argv": [
+    "timeout",
+    "-k",
+    "10",
+    "120",
+    "node",
+    "--check",
+    "packages/cli/tests/case-p10-timing-fixture.mjs"
+  ],
+  "limit_seconds": 120,
+  "tmpdir": "/mnt/storage/scratch/tmp/g8waDyO",
+  "started_utc": "2026-10-23T07:50:06Z",
+  "start_load": "1.65 2.42 2.65 2/5826 1197030",
+  "log": "/mnt/storage/scratch/tmp/gABO62Q/records/M5-syntax.log",
+  "expected_red": false
+}

agents/gander/work/queue-299/run1/M5-syntax.load.json

@@ -0,0 +1,7 @@
+[
+  {
+    "wall_seconds": 0.0,
+    "utc": "2026-10-23T07:50:06Z",
+    "load": "1.65 2.42 2.65 4/5827 1197031"
+  }
+]

agents/gander/work/queue-299/run1/M5.busy.log

@@ -0,0 +1,2 @@
+CLEAR
+/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1197017/cmdline: No such file or directory

agents/gander/work/queue-299/run1/M5.command.json

@@ -0,0 +1,21 @@
+{
+  "label": "M5",
+  "argv": [
+    "timeout",
+    "-k",
+    "10",
+    "1200",
+    "node",
+    "--test",
+    "--test-reporter=tap",
+    "--test-name-pattern",
+    "^row253 C4 P10 inner reason holds under both sudo models$",
+    "packages/cli/tests/case1-accept.test.mjs"
+  ],
+  "limit_seconds": 1200,
+  "tmpdir": "/mnt/storage/scratch/tmp/gdAgQSv",
+  "started_utc": "2026-10-23T07:50:07Z",
+  "start_load": "1.65 2.42 2.65 2/5824 1200489",
+  "log": "/mnt/storage/scratch/tmp/gABO62Q/records/M5.log",
+  "expected_red": true
+}

agents/gander/work/queue-299/run1/M5.load.json

@@ -0,0 +1,12 @@
+[
+  {
+    "wall_seconds": 0.0,
+    "utc": "2026-10-23T07:50:07Z",
+    "load": "1.65 2.42 2.65 6/5827 1200493"
+  },
+  {
+    "wall_seconds": 5.001,
+    "utc": "2026-10-23T07:50:12Z",
+    "load": "1.60 2.40 2.64 2/5882 1203150"
+  }
+]

agents/gander/work/queue-299/run1/M5.log

@@ -0,0 +1,38 @@
+TAP version 13
+# Subtest: row253 C4 P10 inner reason holds under both sudo models
+not ok 1 - row253 C4 P10 inner reason holds under both sudo models
+  ---
+  duration_ms: 5653.123684
+  type: 'test'
+  location: '/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:421:49'
+  failureType: 'testCodeFailure'
+  error: |-
+    Got unwanted exception: P10 observer pair is required
+    Actual message: "P10 observer needs exactly one complete ordered pair"
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  actual:
+  error: 'P10 observer needs exactly one complete ordered pair'
+  stack: |-
+    readProbeSeconds (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case-p10-timing-fixture.mjs:56:42)
+    file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:448:55
+    getActual (node:assert:580:5)
+    strict.doesNotThrow (node:assert:748:32)
+    TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:448:24)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  operator: 'doesNotThrow'
+  stack: |-
+    TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:448:24)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  ...
+1..1
+# tests 1
+# suites 0
+# pass 0
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 5762.289353

agents/gander/work/queue-299/run1/M6-syntax.busy.log

@@ -0,0 +1 @@
+CLEAR

agents/gander/work/queue-299/run1/M6-syntax.command.json

@@ -0,0 +1,18 @@
+{
+  "label": "M6-syntax",
+  "argv": [
+    "timeout",
+    "-k",
+    "10",
+    "120",
+    "node",
+    "--check",
+    "packages/cli/tests/case-p10-timing-fixture.mjs"
+  ],
+  "limit_seconds": 120,
+  "tmpdir": "/mnt/storage/scratch/tmp/gD2IEb2",
+  "started_utc": "2026-10-23T07:50:15Z",
+  "start_load": "1.63 2.39 2.63 1/5845 1206646",
+  "log": "/mnt/storage/scratch/tmp/gABO62Q/records/M6-syntax.log",
+  "expected_red": false
+}

agents/gander/work/queue-299/run1/M6-syntax.load.json

@@ -0,0 +1,7 @@
+[
+  {
+    "wall_seconds": 0.0,
+    "utc": "2026-10-23T07:50:15Z",
+    "load": "1.63 2.39 2.63 4/5846 1206647"
+  }
+]

agents/gander/work/queue-299/run1/M6.busy.log

@@ -0,0 +1 @@
+CLEAR

agents/gander/work/queue-299/run1/M6.command.json

@@ -0,0 +1,21 @@
+{
+  "label": "M6",
+  "argv": [
+    "timeout",
+    "-k",
+    "10",
+    "1200",
+    "node",
+    "--test",
+    "--test-reporter=tap",
+    "--test-name-pattern",
+    "^row299 P10 observer records are complete and ordered$",
+    "packages/cli/tests/case1-accept.test.mjs"
+  ],
+  "limit_seconds": 1200,
+  "tmpdir": "/mnt/storage/scratch/tmp/gAZq1pv",
+  "started_utc": "2026-10-23T07:50:16Z",
+  "start_load": "1.63 2.39 2.63 2/5837 1210084",
+  "log": "/mnt/storage/scratch/tmp/gABO62Q/records/M6.log",
+  "expected_red": true
+}

agents/gander/work/queue-299/run1/M6.load.json

@@ -0,0 +1,7 @@
+[
+  {
+    "wall_seconds": 0.0,
+    "utc": "2026-10-23T07:50:16Z",
+    "load": "1.63 2.39 2.63 2/5838 1210085"
+  }
+]

agents/gander/work/queue-299/run1/M6.log

@@ -0,0 +1,29 @@
+TAP version 13
+# Subtest: row299 P10 observer records are complete and ordered
+not ok 1 - row299 P10 observer records are complete and ordered
+  ---
+  duration_ms: 1.544819
+  type: 'test'
+  location: '/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:405:1'
+  failureType: 'testCodeFailure'
+  error: 'Missing expected exception: equal readings'
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected:
+  operator: 'throws'
+  stack: |-
+    TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:418:58)
+    Test.runInAsyncScope (node:async_hooks:226:14)
+    Test.run (node:internal/test_runner/test:1402:25)
+    Test.start (node:internal/test_runner/test:1262:17)
+    startSubtestAfterBootstrap (node:internal/test_runner/harness:387:17)
+  ...
+1..1
+# tests 1
+# suites 0
+# pass 0
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 97.805057

agents/gander/work/queue-299/run1/RECORDS.sha256

@@ -0,0 +1,78 @@
+ba45d57c9b255311bb220598f90c1a4fb01b420511974c28f102881cbd7df21a  agents/gander/work/queue-299/run1/M1-syntax.busy.log
+0e86c022784e85084f08044940ec6623e736e2eea3e87afe994cebcdaa18c016  agents/gander/work/queue-299/run1/M1-syntax.command.json
+6552beee45c19264b36614eb09e49f4c24e66521732071036c194b7ab5b6c3ee  agents/gander/work/queue-299/run1/M1-syntax.load.json
+e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  agents/gander/work/queue-299/run1/M1-syntax.log
+ba45d57c9b255311bb220598f90c1a4fb01b420511974c28f102881cbd7df21a  agents/gander/work/queue-299/run1/M1.busy.log
+9bfeb9cb89dde406b0b8997250139dc1eb925fb17a7d308c59ab628bd46f175d  agents/gander/work/queue-299/run1/M1.command.json
+c834b00bfe2b7fca539cd93a428b7d92b377a93d6a3aad65e33916735e4fca4e  agents/gander/work/queue-299/run1/M1.load.json
+6566b6d9f613a5904d85b0d0032a0dcd29aa81dcdfd363234537594006c1c5d4  agents/gander/work/queue-299/run1/M1.log
+ba45d57c9b255311bb220598f90c1a4fb01b420511974c28f102881cbd7df21a  agents/gander/work/queue-299/run1/M2-syntax.busy.log
+4c04e5dcd4e7620a50436f09b60dfb5e0177978d765e5f14fc3da301cb91c729  agents/gander/work/queue-299/run1/M2-syntax.command.json
+827351dfdde96da9bc13133600a6d2997299ed442df774e1c7718c34f02259c1  agents/gander/work/queue-299/run1/M2-syntax.load.json
+e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  agents/gander/work/queue-299/run1/M2-syntax.log
+ba45d57c9b255311bb220598f90c1a4fb01b420511974c28f102881cbd7df21a  agents/gander/work/queue-299/run1/M2.busy.log
+4f0f7aef97edc93582921f5b15745bc72b3aae8ba7a71aaa145cd7d78b080af6  agents/gander/work/queue-299/run1/M2.command.json
+d1ccdfc399964b4a9f61f2ff8eb5304b9556033e1e255467b0887460e56f5ae0  agents/gander/work/queue-299/run1/M2.load.json
+b80762fb0b571cadaad5fcf5e43e040c533d2aca1cf939ea4247c5c8f50bd176  agents/gander/work/queue-299/run1/M2.log
+8e62af85b120ec37099cfba76475359132a1ec673b55350da4442a2356f18fb4  agents/gander/work/queue-299/run1/M3-syntax.busy.log
+019d63399b36b47bdf38730229aabd8edb5c25e27f7f78f462c70963a02aca69  agents/gander/work/queue-299/run1/M3-syntax.command.json
+d31ae584602d69e1c6d68e1186b45d518741028e5f9ca289ddba6b472638e634  agents/gander/work/queue-299/run1/M3-syntax.load.json
+e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  agents/gander/work/queue-299/run1/M3-syntax.log
+2d80452846bb5af54c76122f0647cb850bbf22ed114e17f9fb883b2c41f3d82e  agents/gander/work/queue-299/run1/M3.busy.log
+5619bd5a00679fc783d1f0ef8111570268238fc5cfc3b0586539fece039a0d14  agents/gander/work/queue-299/run1/M3.command.json
+3ac8b2e351f5b3e016114f7ff45cc71a1d6287c4dc8d52640c6233424afdc59b  agents/gander/work/queue-299/run1/M3.load.json
+d5f21e277400f33779ea94940979bc89ae54c7484a762f373027bf837b98a47a  agents/gander/work/queue-299/run1/M3.log
+ba45d57c9b255311bb220598f90c1a4fb01b420511974c28f102881cbd7df21a  agents/gander/work/queue-299/run1/M4-syntax.busy.log
+c6f7857ef123cddd6190eba9e6b9a3356821bb0b3a797a1b05a2e19d108c5ec7  agents/gander/work/queue-299/run1/M4-syntax.command.json
+f983475d9ea0c5cbff43d0de9f8514488d20e2d7732af8d050ca10b9fb81c061  agents/gander/work/queue-299/run1/M4-syntax.load.json
+e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  agents/gander/work/queue-299/run1/M4-syntax.log
+d2361f293ed1242c07568092784e830638a3da691d01019a18beaff859d96b2a  agents/gander/work/queue-299/run1/M4.busy.log
+f66ae61b9ed0ea5a720f5c2457ecfb8cc610e192cd619ee5433f24af25f17f85  agents/gander/work/queue-299/run1/M4.command.json
+cd20239485328874f8bbe30acd9470c3874011ef5bb6f39f33ed210b7c4a4f27  agents/gander/work/queue-299/run1/M4.load.json
+e64c363e8f11574be893acce37a4152c90c31f5547ca6d48780160c556f0db70  agents/gander/work/queue-299/run1/M4.log
+7c3a3b6bcf027e99e0f3903215f4ffca88d8bff9fb3a8ef92d3b28bfa68ba52a  agents/gander/work/queue-299/run1/M5-syntax.busy.log
+3e0f4c82616fa3fa7274ad91ec3f2baa86b7b22288d7507730e66c8e4809c681  agents/gander/work/queue-299/run1/M5-syntax.command.json
+e0093f4ad39d9d4342b43c0ed2d7671747870d6d6166d0692eecbf3dc8033645  agents/gander/work/queue-299/run1/M5-syntax.load.json
+e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  agents/gander/work/queue-299/run1/M5-syntax.log
+f104c336fdfa56a241f1b769938b71eafbfb237a88b3089309671eb5a8db4f0e  agents/gander/work/queue-299/run1/M5.busy.log
+35f7ce5f6e56047d600633a0e27826f6f54aa585552593bfb4954f8469238f7a  agents/gander/work/queue-299/run1/M5.command.json
+059de490b1a31be3a8c9a02ff49f84b744d057f66d4f55508e637e6b0896b670  agents/gander/work/queue-299/run1/M5.load.json
+42e0a43b161e61775b0d4bdde73be4c131a8d6edb4aabf14422755e553272a3f  agents/gander/work/queue-299/run1/M5.log
+ba45d57c9b255311bb220598f90c1a4fb01b420511974c28f102881cbd7df21a  agents/gander/work/queue-299/run1/M6-syntax.busy.log
+867359f0e7ebf5516ae1e1147327e9f6e20d48cb2993b46866f9d90a9ebdbecb  agents/gander/work/queue-299/run1/M6-syntax.command.json
+8d1d69b01dffda714da78c7f08e14b7d1db12a788c812ab02d3a3faa6c52d8a6  agents/gander/work/queue-299/run1/M6-syntax.load.json
+e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  agents/gander/work/queue-299/run1/M6-syntax.log
+ba45d57c9b255311bb220598f90c1a4fb01b420511974c28f102881cbd7df21a  agents/gander/work/queue-299/run1/M6.busy.log
+3e46e6d020a0fe9782b3e84462f634daed0885c0e992e482f7d815524fe2294e  agents/gander/work/queue-299/run1/M6.command.json
+24e987a747661e01b9e2a28b0580a0be5b16fad57da5c8c35f41b82835ea76ed  agents/gander/work/queue-299/run1/M6.load.json
+8a0f18ea13b69c71a742a755eb7437d06e49679b777880a8db7b4297ae9849d9  agents/gander/work/queue-299/run1/M6.log
+e8efed810462567a977a64235454f5d59e92dbfb570d5537652c8deb52b9de66  agents/gander/work/queue-299/run1/RESULTS.md
+e055720cf64d62331a1e957d285d2583bfb3708fc1b9bf951ab8a99a25c5b2e4  agents/gander/work/queue-299/run1/ambient-overlap.json
+ba45d57c9b255311bb220598f90c1a4fb01b420511974c28f102881cbd7df21a  agents/gander/work/queue-299/run1/case1-whole-1.busy.log
+16ea379e1482e79b380c9a7be82703e735bea7ef80f1e785a032af9198b26c35  agents/gander/work/queue-299/run1/case1-whole-1.command.json
+d87a93023d545cd38fcf0a77577c88326897700325fbecd84fd8287a26b33864  agents/gander/work/queue-299/run1/case1-whole-1.load.json
+c4d7cf6a001a6741af3aa0e0615989327f63fe92999e8fb6d46c2d30f8c08f09  agents/gander/work/queue-299/run1/case1-whole-1.log
+ba45d57c9b255311bb220598f90c1a4fb01b420511974c28f102881cbd7df21a  agents/gander/work/queue-299/run1/case1-whole-2.busy.log
+4b69775fb03d9fa56a9eef0c9dc8f3cb00013aa4d601f433519ef1dafcc2544c  agents/gander/work/queue-299/run1/case1-whole-2.command.json
+62c4cc338455841d9faf1198acddc3f3204346800e2db7222d1fc33aba189fe3  agents/gander/work/queue-299/run1/case1-whole-2.load.json
+2ed90fe79a18f794363c47e34440b877a3ffa1256f9a5badb31b317ecbc2fb7b  agents/gander/work/queue-299/run1/case1-whole-2.log
+56d73910ed8d6773724be75e02506a365e5e03c4c98be07a32d49957f24b3e4a  agents/gander/work/queue-299/run1/case1-whole-3.busy.log
+a9225b3ae990e328d739d9259b5dfce0391d5054dedd074f53b81c92e7225c1a  agents/gander/work/queue-299/run1/case1-whole-3.command.json
+dc440ef86b769bf498ed9fcaa178ef9098f7bb9233dd625579d344464c00b11a  agents/gander/work/queue-299/run1/case1-whole-3.load.json
+a803a8e73902337b63d229d0703d45ec9fccd7a1930e192d322d4cc79b9774d6  agents/gander/work/queue-299/run1/case1-whole-3.log
+ba45d57c9b255311bb220598f90c1a4fb01b420511974c28f102881cbd7df21a  agents/gander/work/queue-299/run1/cli-whole.busy.log
+e3ea8c0434fb979a4943f1bfab1984ff8b919bb062945803e1ddcaa61170d1a5  agents/gander/work/queue-299/run1/cli-whole.command.json
+db54ea06016fa065f25ed62f5704757a727ff37009e010fa43b1e297bfb2b51b  agents/gander/work/queue-299/run1/cli-whole.load.json
+5222a0807a5ed3d8548711d09e7d3b09504f18b5f3f095c2529b4eedf5a2846b  agents/gander/work/queue-299/run1/cli-whole.log
+d58a500c8e125540aeee461cde68aa6bfe65ab386ae15c9af7dfe363a73a9fd2  agents/gander/work/queue-299/run1/controller.log
+906c08da89e164e214464014edb672f8d389cb3eab70929d994bcff2794ff45a  agents/gander/work/queue-299/run1/results.json
+b7450a29a470bb48c300d630cd8079be283187d372b9bafd0fbaaafb261e9639  agents/gander/work/queue-299/run1/sweep.json
+ba45d57c9b255311bb220598f90c1a4fb01b420511974c28f102881cbd7df21a  agents/gander/work/queue-299/run1/syntax-1.busy.log
+03471d51f50a2607f65bc6bfc5764119421fedd003bd569b5fc9ce7fa57c6be6  agents/gander/work/queue-299/run1/syntax-1.command.json
+e429b112499bf432c8f561b02119025476f57f03208ee67a85282802a431de2d  agents/gander/work/queue-299/run1/syntax-1.load.json
+e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  agents/gander/work/queue-299/run1/syntax-1.log
+ba45d57c9b255311bb220598f90c1a4fb01b420511974c28f102881cbd7df21a  agents/gander/work/queue-299/run1/syntax-2.busy.log
+287a012953621602eaf7eb129a836b2e3be076b72d6da7131b5e605d2bb5c4ff  agents/gander/work/queue-299/run1/syntax-2.command.json
+795e4a257a3836bfe65ddfa5a734ed239145d1add7d543d52263707467e2345d  agents/gander/work/queue-299/run1/syntax-2.load.json
+e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  agents/gander/work/queue-299/run1/syntax-2.log
+13987615007f93b11780d44e827ce6a9a57e4373f0074a838ca87b762758d053  agents/gander/work/queue-299/run1/window.py

agents/gander/work/queue-299/run1/RESULTS.md

@@ -0,0 +1,38 @@
+# Row 299 gate run 1
+
+Grant sage-3268. Candidate ffa93b054f28852a75017928d8478bdf9046e717, base 80793d824, manifest 277ace0b4274970d5bd4c05cf8fe99aa1e7ebc469a719e4cefcb334a75d3865d. Run 2026-10-23T07:26:52Z to 2026-10-23T07:50:16Z, 1404 seconds by UTC timestamps. No carried result or retry.
+
+The preflight passed. All three case1 files and all 59 CLI files ran whole. Unmutated total: 1076 pass, 0 fail, 0 skip, 0 cancelled, 0 todo. Mutants: 6/6 killed by named assertions, no external timeout. All six restores match their original SHA256 and have clean git status. Sweep: 0 gate residuals; four MCP harness processes predate the gate, with start times in sweep.json.
+
+| Stage | Pass | Fail | Skip | Wall seconds | Start load |
+| --- | ---: | ---: | ---: | ---: | --- |
+| case1-whole-1 | 53 | 0 | 0 | 239.134 | 1.05 |
+| case1-whole-2 | 53 | 0 | 0 | 240.044 | 3.41 |
+| case1-whole-3 | 53 | 0 | 0 | 235.011 | 2.08 |
+| cli-whole | 917 | 0 | 0 | 631.848 | 1.91 |
+
+CLI sampled 1-minute load range: 1.54 to 7.17. Ambient >=4 was a target, not a wait condition. No stress process. Each of the three case1 start loads and the CLI start/load samples are recorded. The direct readings below come from the test diagnostics, with fixed inner [1.25,2.75) and outer [3.25,4.75) bands.
+
+| Stage | Inner exec | Inner hop | Outer exec | Outer hop |
+| --- | ---: | ---: | ---: | ---: |
+| case1-whole-1 | 2.25 | 2.27 | 4 | 4 |
+| case1-whole-2 | 2.29 | 2.28 | 4 | 4.01 |
+| case1-whole-3 | 2.25 | 2.26 | 4 | 4 |
+| cli-whole | 2.27 | 2.27 | 4.01 | 4.01 |
+
+| Mutant | Named killer | Assertion | Direct interval | Wall seconds |
+| --- | --- | --- | --- | ---: |
+| M1 | row253 C4 P10 inner reason holds under both sudo models | case1-accept.test.mjs:450 lower band | 1.23 | 4.774 |
+| M2 | row253 C4 P10 inner reason holds under both sudo models | case1-accept.test.mjs:450 upper band | 3.24 | 6.768 |
+| M3 | row253 C4 P10 outer reason holds under both sudo models | case1-accept.test.mjs:452 outer lower band | 3.01 | 6.618 |
+| M4 | row253 C4 P10 outer reason holds under both sudo models | case1-accept.test.mjs:445 exact probe-outer-timeout reason | not reached | 9.023 |
+| M5 | row253 C4 P10 inner reason holds under both sudo models | case1-accept.test.mjs:448 required complete pair (doesNotThrow) | not reached | 5.816 |
+| M6 | row299 P10 observer records are complete and ordered | case1-accept.test.mjs:418 equal readings must refuse (throws) | not reached | 0.164 |
+
+M1 measured 1.23 s, below 1.25 by only 0.02 s. This is the anticipated startup-overhead risk. It died at the intended lower-band assertion; no tuning or retry was used.
+
+M4 classification follows sage-3271, sage-3273 and mos-1426. The unchanged 7000 ms fixture guard returned; the named outer test failed with ERR_ASSERTION / match at line 445 because P10 reported reason=probe-inner-command instead of exact reason=probe-outer-timeout. It returned rc 1 in 9.023 s including the baseline. No external command timeout or cleanup-only failure was counted. Raw evidence: M4.log, M4.command.json, results.json guard_return_receipt and clean restore.
+
+sage-3274 reported a read-only canonical queue polling overlap for receipts window 07:20–07:26Z. It wrote nothing and touched no worktree or test path. This is accepted ambient load, not a rerun condition; ambient-overlap.json keeps the report.
+
+All raw logs, command headers with timeout -k 10, TMPDIRs, per-stage load samples, controller, results, and restores are in this directory. Every run used a fresh short TMPDIR directly under /mnt/storage/scratch/tmp. No source or assertion changed during the gate.