launchpad: row 301 (#1808 ): library-cli and thread-claims bus.mjs fixtures export throwing busBusiness and userCaller stubs (mos-1451 under mos-1272); BUILD.md repaired with run 1 and the ruling; manifest seven paths; unrun

launchpad: row 301 (#1808 ): channel-proof re-pins webui bus.mjs at 39fcb27c for the user transport fold, humanCall unchanged (mos-1449 under mos-1272); unrun
launchpad: row 301 (#1808 ): R6-N4, user-bus.mjs folded into bus.mjs beside humanCall, unchanged; channel-proof re-pin held for Mos's go; unrun
2026-10-23 07:14:09 -05:00 · 2026-10-23 06:47:27 -05:00 · 2026-10-23 06:44:24 -05:00 · 2026-10-23 06:41:07 -05:00 · 2026-10-23 06:27:36 -05:00 · 2026-10-23 06:21:31 -05:00
375 changed files with 89497 additions and 229 deletions
@@ -5382,3 +5382,10 @@ Gander: after Duckworth-0100 design approval with C1-C5, prepared the two host-s
 2026-10-23T02:21:06Z | Sage, rows 270+271 landing, 571 landing, MVP rows | Before: 270 (#1775) and 271 (#1776) were approved on gizmoduck/row270-271-r4 49cee846e and 2b964a082 after combined gate C2 run 5 GREEN on 53406f3e4 (bus 873, seat 202, cli 905, ten scripts, 38/38 mutants). After: 33 commits cherry-picked onto 767bb62c7 as 7328da8ca, range-diff all "=", 40 paths identical to the candidate; 270 manifest f4174458 matches, 271 manifest 3ab1f5c8 matches on 29 paths, the other 4 moved under 270 and match its manifest. Done revs 3396/3398, #1775 c30962 and #1776 c30964 closed, P19 463 c861. 571 (Gyro, Fenton APPROVE) picked as ee5f7b9ef, 6345aae3d, 767bb62c7 (blobs 9382f85b, 7ec0897b), 1ac76a417 left out; N7 911dad2aa (Fenton-0014) picked after. Rows 293-299 added (574, FED R6, R4, R7, GitHub grant, Q228, 573), queue commit 253346e3c. Correction: the push sync step checked out O..S paths over the canonical worktree without testing for uncommitted edits, so any pending SESSIONS or BUILD-LOG line in the canonical checkout at 02:06Z would have been overwritten; the sync now skips edited paths. Schema 3n is not live (LIVE 0cbe2e9b3 at 3m).
 2026-10-23T03:59:52Z | Sage, row 293 (Vikunja 574) landing and 3m-3n live window | Before: live 0cbe2e9b3 at schema 3m; 574 approved by Filbert (c30982, cdda41f5) on gander/v574-r2 a9cae2bd6 after run 2 GREEN on 6bfab273b (four files 153/0, seat 202/0, cli 905/0, 312 flagged commits with 0 maintenance children). After: Darkwing's window put live on 464010fbe at 3n (activation 20261023T034557Z-464010fbe4c6, 26/97/5/28, Console 7332 200, W9b pm ra38826f3c6e2 left live, STATE darkwing/window-migrate-3n 8708927e5); 574's six commits cherry-picked onto 464010fbe as e51d11640, range-diff all =, patch-ids equal, only docs differ from a9cae2bd6. #1805 closed c31013, P19 386 c887 and 574 c888. Residual: queue store.mjs, discord git.mjs, harness tools.mjs commit without the maintenance flags; no whole-root test covers them yet.
 2026-10-23T05:47:17Z | Sage, row 292 (#1797) landing, idle-stop race row 302, rows 300/301, row 294 rounds 2-3 | Before: refactor 4a9c536e8; 292's gate on 0d0021454 hit one red at compactions-launch.test.mjs:229, ['session-invalid',22,null] where ['stopped',0,null] was expected, product and test unchanged. Gizmoduck read it as a race: threadIdle releases the claim, then the launcher sends SIGTERM, and a runner call in between gets not-holder and exits 22. Mos (mos-1411) rejected loosening :229, let 292 count one whole unedited green cli rerun, and allowed one rerun for that exact signature on other gates until the race row lands (hits logged on Vikunja 588). The 10-run diagnostic passed 10/10, but one runner log (r846b8d083502) showed not-holder then exit 22. After: the cli rerun was 910/910. 292 LANDED 6aab979e6 05:18Z (7 cherry-picks, range-diff all =, patch-ids equal), done rev 3447, #1797 closed c31038, Vikunja 588 c891. Briefs 86d5ac69b (R6-N1 #1807, R6-N4 #1808, rows 300/301) and e3ef1eaf6/fdedc56e2 (race, #1809, row 302). Row 302 design d1/d2 approved by Dewey with D1 (role.claim refuses a released run), c31044. Mos ruled landRelease folded in, code launcher-released, and four old-test lines moved to exact values (mos-1414/1415/1416): threads.test:394, runner.test:771-772, land.test:464. Row 294 round 2 stopped at webui G5 granted-user.test:269: max(seq) over an empty events table is NULL. Round 3 is one line, coalesce(max(seq),0) (mos-1417), Duckworth APPROVE c31045 rev 3462, gate pending. Queue commit 756284e8e (revs 3448-3456). Correction: two review-request attempts this window ran without MOSAIC_GITEA_CREDENTIAL_FILE exported and failed (3450 Launchpad, 3451/3452 Sage); the posted request was 3453/3454.
+2026-10-23T07:11:43Z | Sage, row 294 (#1800) rounds 3-4 and landing, row 219 edits 2-3, R9 transient and row 303 | Before: refactor 09d0d6faf; 294 run 3 on cb1648f3 stopped with 20 cli reds from two causes. A: the stack-release rehearsal fixture copies lacked cli access.mjs and transport.mjs, which 294's config.mjs now imports. B: the B1-B3 boot tests read warnings that now carry the fixture tracker line. Mos ruled A as two copy-list entries and B as a full pin, no filter: a TRACKER const and deepEqual (mos-1419). After: round 4 8616b9a4f, manifest a1ff5d67, Duckworth APPROVE c31053 rev 3469 with C1/C2. Run 4 from npm ci green: webui 365, cli 909, bus 873, 10 scripts, M1-M11 killed. Merged tree d3059c2c3 (11 cherry-picks, range-diff all =, patch-id 8371405a equal): stack-release-external 25/25, stack-upgrade 21/21. stack-release 223/224 on the first run, R9 at :2178: TypeError on join(r.dir) with r.dir null, so rehearse stopped before its directory and the output was lost. R9 passed 6/6 run alone on d3059c2c3, 09d0d6faf and 24b745447. Mos (mos-1422) allowed one unedited whole rerun: 224/224. 294 LANDED d3059c2c3 07:04Z, done rev 3471, #1800 closed c31068, P19 269 c895. Row 303 (#1810, Vikunja 589, brief ad6ca7930) adds an r.dir guard in R9 only. Queue commit 80793d824 (revs 3464-3473). Row 219: Rocko's second edit 7cbd839d0 (mos-1418, Dewey dewey-0883) restarted and went red at thread-launch C2-09a :489 on a legacy history path. The third edit 5f2ef92e5 (mos-1420, Dewey dewey-0885) reads the native session path. 219 now rebases onto 80793d824, because 294 overlaps its webui files. Correction: the first merged-tree check counted on the 292 drift and found an unrelated transient, and my P19 placeholder sed also rewrote the script's own guard line; the guard refused to post, and I restored the line before posting.
+
+Row 299 (573, #1806, Gander, Filbert): before, the P10 band test timed a fault run minus a separate baseline run, and a loaded whole-suite run went red. Mos approved direct timing from host /proc/uptime stamps with ambient load only (mos-1409). After: rebased onto 80793d824 as ffa93b054 (range-diff 3/3 =, manifest 277ace0b unchanged). Gate 07:26Z-07:50Z: case1 whole 3x 53/0/0, cli whole 917/0/0 (59 files, load 1.54-7.17), P10 inner 2.27 s, outer 4.01 s, M1-M6 killed. M4's planned guard return then exact outer-reason failure counts as its kill (sage-3271, mos-1426). Filbert APPROVE c31084 rev 3485, N1 M1 margin 0.02 s. 299 LANDED ffb2fedfb 08:03Z, done rev 3487, #1806 closed c31087; queue commit 8a35ffadb (revs 3474-3487). Row 303: Duckworth APPROVE c31079 rev 3480 with C1, the whole-file gate. Rows 219 (bfa421b6c) and 295 r2 (b16cef1d0) rebases: Dewey static clean. Corrections: Launchpad and Gander have no token, and the CLI refuses another seat's token file, so I posted both requests as sage (c31082, c31083). My sage-3265 wording led Duckworth to poll queue show into Gander's slot (07:20Z-07:26Z); I ruled it ambient load (sage-3274).
+2026-10-23T10:48:40Z | Sage, rows 302, 295 and 219 landings, the Docker pool diagnostic, rows for Vikunja 590 and 591 | Before: refactor 1ac655005. 302 (#1809, Gizmoduck, Dewey) LANDED 3ed9fd754 08:49Z: 7 commits onto 1ac655005, range-diff all =, tree = gated merge 783602e06; queue commit 07802dc57 (revs 3488-3494). Row 219's gate went 11/3 in test-release.sh: release activate's health check failed because Docker could not create sage-diag1437_default, since all predefined address pools were used up. Under mos-1437 I reproduced it on clean 07802dc57 (11/3, the same stderr). I then removed 18 unused gate _default networks, and the rerun went 14/0 with the run-task marker ok. Mos accepted the removal and ruled that a probe that can create something waits for the go and a removal waits for the report (mos-1438). 295 (#1801, Morgana, Dewey) round 2 gate on d68b4300d (manifest e94c9aeb) was green. It LANDED 2efd127ce 10:10Z: 9 commits onto 07802dc57, HEAD~1 tree = gated a86592ffc. Done rev 3502, #1801 c31105, P19 414 c911. 219 (#1720, Rocko, Dewey): the restart on the post-295 merge 054da642f (manifest 4a2271dd, my mos-1439 call) passed node 2523/0/2 and shells 449/0, with 24 mutants killed. It LANDED 5fdfd7275 10:40Z (8 row commits plus packet-only evidence, tree e86a84a85 = gated). Done rev 3509, #1720 c31110, P19 416 c913. Queue commit 90633c864 (revs 3495-3510). Brief docs/plans/2026-10-23_gate-env-rows.md names rows for 590 (claude-session slug) and 591 (compose network cleanup), and DEFERRED.md gets 219 N1 (U6). Row 272 (Huey) conflicts with 5fdfd7275 in code, so it moves back to in-progress for a rebase. Its new fallback is bounded to a session.list access-refused on an omitted-session route (sage-3357). Corrections: my network create probe ran before Mos's go, and the removal ran before the report. My first slot-order line put the diag start at 09:44Z; it was about 09:41Z. My 219 push piped its output through grep, but the after-fetch confirmed origin. Queue commit 90633c864 also carries Huey's rev 3510 (272 back to in-progress), and its message names only 3495-3509.
+
+
+2026-10-23T11:03:46Z | Gyro Vikunja571 mos-1444 PRD d8 follow-on | Branch gyro/editor-571-d8 from origin/refactor c16e943b9. Both designs now keep library.convert outside ACTIONS/ROUTED and broker processing, retain REQ-WAIT-1/hard-wait test unchanged, constrain unmarked story eligibility to mapped book/playground scope, and add whole-host pre-import restore recovery from remote import manifests plus the Gitea archive commit. Lookups refuse until one current version is proven; VM1012 restore needs Jason present under Q185. W7 no longer owns hard-waits.test.mjs. Canonical queue next gyro returned nothing; direct Mos assignment governs. Static diff, exact replacement and append-only checks pass. No code, tests, build, browser, private-file or live action. Fenton re-check requested after authorized branch push.
@@ -0,0 +1,47 @@
+{
+  "authority": "mos-1409 via sage-3181",
+  "base": "4a9c536e8",
+  "path": "packages/cli/tests/case1-accept.test.mjs",
+  "old_line_replacements": [
+    {
+      "old": "  if(fault==='inner')assert.ok(probeSeconds>=1.25&&probeSeconds<2.75,`${mode}: probe ${probeSeconds}s after baseline ${baselineSeconds}s`);",
+      "new": "  if(fault==='inner')assert.ok(probeSeconds>=1.25&&probeSeconds<2.75,`${mode}: direct probe ${probeSeconds}s; baseline ${baselineSeconds}s is diagnostic only`);",
+      "change": "diagnostic message only; numeric comparisons and strictness unchanged"
+    },
+    {
+      "old": "   assert.ok(probeSeconds>=3.25&&probeSeconds<4.75,`${mode}: probe ${probeSeconds}s after baseline ${baselineSeconds}s`);",
+      "new": "   assert.ok(probeSeconds>=3.25&&probeSeconds<4.75,`${mode}: direct probe ${probeSeconds}s; baseline ${baselineSeconds}s is diagnostic only`);",
+      "change": "diagnostic message only; numeric comparisons and strictness unchanged"
+    },
+    {
+      "old": "  const probeSeconds=seconds-baselineSeconds;",
+      "new": "  let probeSeconds=seconds;\n  if(timingFile)assert.doesNotThrow(()=>{probeSeconds=readProbeSeconds(read(timingFile));},'P10 observer pair is required');",
+      "change": "approved observer plumbing or probeSeconds source"
+    },
+    {
+      "old": "function run(h, extra = {}, argv = [\"--business\", \"mosaic-stack\", \"--args\", \"/etc/mosaic-stack/dev.args\", \"--claude-pin\", CLAUDE_PIN, \"--node-pin\", NODE_PIN, \"--root\", h.root]) {",
+      "new": "function run(h, extra = {}, argv = [\"--business\", \"mosaic-stack\", \"--args\", \"/etc/mosaic-stack/dev.args\", \"--claude-pin\", CLAUDE_PIN, \"--node-pin\", NODE_PIN, \"--root\", h.root], script = SCRIPT) {",
+      "change": "approved observer plumbing or probeSeconds source"
+    },
+    {
+      "old": "  const r = spawnSync(SCRIPT, argv, {",
+      "new": "  const r = spawnSync(script, argv, {",
+      "change": "approved observer plumbing or probeSeconds source"
+    },
+    {
+      "old": "  const start=performance.now(),r=run(h),seconds=(performance.now()-start)/1000;capture();",
+      "new": "  const start=performance.now(),r=run(h,timingFile?{ROW299_TIMING_FILE:timingFile}:{},undefined,observedScript),seconds=(performance.now()-start)/1000;capture();",
+      "change": "fault run selects private copy only for inner/outer; default SCRIPT and overflow remain"
+    }
+  ],
+  "only_removed_assertion_lines_are_two_diagnostic_messages": true,
+  "numeric_bands_unchanged": {
+    "inner": "[1.25,2.75)",
+    "outer": "[3.25,4.75)"
+  },
+  "baseline_status_and_clean_session_lines_byte_identical": true,
+  "all_other_original_assertion_lines_preserved": true,
+  "guard_7000_unchanged": true,
+  "new_assertions": "copy reversal, observer variable isolation, stream/status/EXIT preservation, strict records, required pair",
+  "runtime_status": "NOT RUN; no Node or test until CLEAR"
+}
@@ -0,0 +1,28 @@
+{
+  "row": 299,
+  "issue": 1806,
+  "vikunja": 573,
+  "base": "4a9c536e861f1d9f9a018019b3ac4519d65eccf0",
+  "branch": "gander/row299-p10",
+  "status": "IMPLEMENTED STATIC; source 1ec2b9765; no Node/test/push",
+  "authority": "mos-1409, sage-3181; Filbert implementation review pending",
+  "files": [
+    {
+      "path": "packages/cli/tests/case1-accept.test.mjs",
+      "git_blob": "c196b40981056963ed924a09f649cfe8e99b34c6",
+      "sha256": "1e8af0656707d93dedade923bf60556022dc7121c43761876a5d7e02731c14aa"
+    },
+    {
+      "path": "packages/cli/tests/case-sudo-fixture.mjs",
+      "git_blob": "866c6c0d229a1fc1e9401ee8bb5522ac8cb01ebc",
+      "sha256": "eac5c83f43056bdeb5781101307e17d4bc01f03e97e02f4f5e930436d7e43535"
+    },
+    {
+      "path": "scripts/case1-accept.sh",
+      "git_blob": "05cb249ea2217d1a542438b597d382669acf8a9b",
+      "sha256": "89b45bb84e8365f32f08fd055c7db8a0259533f23fe7ab03f484acb25bee92c2"
+    }
+  ],
+  "source": "1ec2b97650849b90f41a8e1d1190f609de312d49",
+  "execution": "HELD for Sage CLEAR; no stress process; ambient load >=4 is target only"
+}
@@ -0,0 +1,98 @@
+# Row 299 / Vikunja 573: direct P10 timing
+
+> Execution method: Gander implements inline after Mos's old-test ruling and Filbert's static read. No delegation. Static implementation authorized by mos-1409 / sage-3181. Every runtime step remains held for CLEAR.
+
+**Goal:** Measure whether P10 takes its two-second inner path or four-second outer path under load, without subtracting unrelated work from another run.
+
+**Architecture:** Add a test helper that makes a private, instrumented copy of the current acceptance script. Two root-side observer statements bracket only the P10 capture's actual bounded wait. Read a complete monotonic begin/end pair from a separate fixture file, while all existing refusal, residual and cleanup assertions still examine the real acceptance output.
+
+**Tech stack:** Existing Node test runner, Bash builtins, Linux /proc/uptime. No new package, interpreter, product hook or live host action.
+
+**Spec:** docs/plans/2026-10-23_mvp-readiness-rows.md, "Brief: 573, the P10 hop band"; sage-3175. Base 4a9c536e8, branch gander/row299-p10. Reviewer Filbert; gate owner Sage. Row 293 is done. Queue claim is held because it executes Node, forbidden in the present slot.
+
+## Constraints and current status
+
+- Static implementation only, authorized by mos-1409. No Node, tests, HTTPS Git, queue call or push has run for 299. No production edit.
+- Mos approved the measurement semantics in mos-1409 via sage-3181 under mos-1272. The numeric bands stay unchanged.
+- All script/supervisor bytes, 2/4-second budgets, 128-byte cap, exact reason assertions, no-observed assertion, hop residual assertion and cleanup assertions remain authoritative.
+- Keep the same healthy baseline status and `baseline leaves no session` assertions. It may remain as an independent healthy control and diagnostic; it no longer supplies the clock value being asserted.
+- No extra retry, smoothing, percentile selection, ignored red, clock fallback, or widened band. Missing clock evidence fails.
+- Tests use a short TMPDIR directly under /mnt/storage/scratch/tmp/gXXXXXX, never /tmp. No live units, ports, credentials or instance state.
+
+## Source of the band and evidence
+
+1. The original row 253 test timed the full acceptance run. Row 276 exposed it after adding stdout spooling: the old inner `<4 s` whole-run bound already failed 2/5 before that delta and 5/5 after it. Mos's mos-1350 ruled that tests 9 and 10 must measure the probe's cost, offering probe stamps or a same-mode no-fault baseline. See agents/gander/work/queue-276/BUILD.md:120-145 and ASSERTION-PRESERVATION.json.
+2. We chose baseline subtraction in 135bb8fae (original source 6f8c5653a). e06130fc0 added the required clean baseline check. Current test lines 371-388 measure two separate full runs and compute `probeSeconds=seconds-baselineSeconds`.
+3. The adopted windows are inner [1.25,2.75) and outer [3.25,4.75): 0.75 s around the configured 2/4 s budgets, with 0.5 s between windows. Duckworth-0218 accepted them; the isolated proof in queue-276/BUILD.md reported inner exec 2.033..2.171, inner hop 2.055..2.135, outer exec 3.758..3.961, outer hop 3.736..3.911. Those are historical evidence, not a new run or carried result.
+4. The recorded failure is agents/gizmoduck/work/queue-270/BUILD.md:629-636: run 3 on 53406f3e4 had CLI 904/905, inner hop estimate 1.08 below 1.25. The file was unchanged. Its isolated whole rerun passed 50/50 at load 3.19 (mos-1367). No other seat's scratch has been read for this packet.
+5. Production is scripts/case1-accept.sh:744, `tester_capture 2 4 128`. Its inner timer is after the uid drop; its outer timeout is started at :238 and waited at :244. The capture validates tools and creates its private files at :233-235, before the timer is armed. Exact refusal mapping is :224-229. The stalled-supervisor case remains an explicit same-uid residual.
+
+Static mechanism: let H be the healthy probe cost, I the true faulty wait and U the rest of the full run, including scheduling delays. The current estimate is `(I + U_fault) - (H + U_baseline)`. It contains `U_fault-U_baseline-H`, so it can underestimate I when the baseline gets more delay. The 1.08 report is consistent with that mechanism; we do not invent the separate component timings absent from the committed record. A direct bracket removes the unrelated subtraction; execution must still establish its margins under the agreed load.
+
+## Approaches considered
+
+- Repeat baselines or use a median: reduces some noise but still subtracts two unrelated schedules and adds work to every whole-file gate. Reject as the fix.
+- Stamp in the peer Python or sudo fake: the inner/outer timer is already armed before a delayed child reaches the stamp, so it can measure only the remaining budget and undercount again. Reject.
+- **Recommend a direct root-side bracket in a private script copy.** Begin immediately before the actual outer timeout launch, after validation; end immediately after its wait, before unrelated post-checks. Includes sudo dispatch, the inner wait and its cleanup, or the outer timeout. Excludes preceding functional checks, the healthy run, metadata work before capture, and tool-validation cost. It measures the same timing distinction, using both existing fake sudo modes.
+
+Mos approved this approach in mos-1409. Timing still includes kernel scheduling and inner cleanup. Arbitrary starvation cannot be given a hard wall-time guarantee; an overshoot remains a red for placement, not permission to retune.
+
+## Proposed files and interfaces
+
+- New packages/cli/tests/case-p10-timing-fixture.mjs: `instrumentP10Probe(source)` returns a copy of the current script with exactly two observer blocks; `readProbeSeconds(text)` returns `(end-begin)` in seconds from two validated centisecond readings.
+- Existing packages/cli/tests/case1-accept.test.mjs: an optional script-path argument to run(), defaulting to SCRIPT for every current caller. Only inner/outer P10 fault runs execute the private copy. The baseline still uses SCRIPT. Overflow stays on SCRIPT and unchanged.
+- agents/gander/work/queue-299/: plan, assertion-preservation record, manifest, raw logs, load/timing receipts and mutant records after authorization. No production path in the candidate manifest.
+
+Observer details:
+
+1. Locate exactly one `tester_capture() (` function, scoped before the unique row276-legacy marker. Each insertion anchor must occur once within that slice. Never apply an unscoped global replace.
+2. Just before :238 and just after :244, use shell `read` on /proc/uptime plus `printf` to append `begin <uptime>` / `end <uptime>` to ROW299_TIMING_FILE, only when `maximum` is 128. Selecting the existing probe cap, rather than the 2/4 budgets, keeps the observer active when a timer mutant changes a budget. Config query uses 4096 and emits no probe pair.
+3. Read and printf are Bash builtins: no new process or Python/Node startup inside the timed span. Preserve `$rc` and every original command, redirection and heredoc byte. Do not emit observer bytes on stdout/stderr. The file is private fixture evidence, not a product authority channel.
+4. The copy retains the original absolute /proc reads and the --root fixture seam. The script has no relative self-path imports. Write the copy under h.dir with executable mode and pass the private timing path only to that run. No product script is rewritten.
+5. Reverse the two recorded insertions and assert byte equality with freshly read SCRIPT. This applies to the current script, including a deliberately mutated source, rather than a stale frozen healthy copy. The same source/copy comparison and unique anchors fail closed on drift.
+6. Parser requires exactly one newline-terminated begin and end pair, in that order, each `<integer>.<two digits>`, and end strictly above begin. No extra pair, missing value, NaN or negative interval is accepted. Use integer centiseconds before converting to seconds. A 10 ms clock resolution is much smaller than the existing 0.5 s window gap.
+7. Keep inner [1.25,2.75) and outer [3.25,4.75) exactly. Change only the source of probeSeconds and its diagnostic description. Preserve every existing status/reason/no-observed/residual/cleanup assertion, including the healthy baseline checks. The existing 7 s fixture safety guard stays unchanged and remains cleanup only, never proof of an outer timeout. If it intervenes or masks a measurement, stop for Sage/Mos; do not silently extend it.
+
+## Review focus
+
+- A delayed healthy baseline cannot change the measured interval: it is diagnostic only. No baseline value enters readProbeSeconds or a timing assertion.
+- A child delayed after timer arming is not used as the start observer. The begin read precedes timer launch in the root-side capture copy.
+- Missing/duplicated/reversed records fail before a band assertion. Add named observer-record tests; no fallback to the old arithmetic.
+- A timer mutant reaches the actual observer copy. Source reconstruction and cap-based selection prevent budgets changed to 1/3 seconds from disabling observation.
+- Observer code must not change stdout, refusal status, cleanup or trust. Preserve original source bytes by inverse comparison and all original non-timing assertion lines by an assertion-preservation receipt.
+
+## Implementation and evidence sequence (held)
+
+- [x] Proposal sent in gander-0183; mos-1409 / sage-3181 approve the measurement change. Filbert accepts the observation points and supplies implementation checks I1-I5.
+- [x] Source 1ec2b9765 adds the helper and observer wiring, plus source/variable, streams/status/trap, and record-validation tests. ASSERTION-PRESERVATION.json lists all six old line replacements; only two original assertion messages change. No runtime or syntax claim.
+- [ ] Static review on the committed candidate and manifest. Prove scripts/case1-accept.sh and scripts/case2-unit.sh are byte-identical to the approved base, and no unrelated assertion moved. Finalize all mutant anchors with exactly-one checks.
+- [ ] On Sage CLEAR, first record a passing named base for each killer and then M1-M6 from MUTANT-PLAN.json. Report the actual assertion killed. Every restore is byte-identical and git status is checked. A timeout or survivor stops for placement, not a kill.
+- [ ] Run case1-accept.test.mjs whole at least three times under load, then CLI whole, as the brief requires. Record ambient load at each of the three starts and throughout each file; >=4 is a target, never a wait condition (mos-1409). No stress process. The whole CLI suite is the required loaded proof; record its load and all exec/hop direct intervals, plus min/max. Do not hold the slot for load.
+- [ ] Record all timeout limits before launch: per-node-file timeout -k 10; use at least ceil(3x longest receipt)+120, with 900 s for an unknown file. Whole case1 gets 1200 s from the row293 receipt; stack-release 2400 s from its 683.647 s historical receipt; recheck measured maxima before the current gate. Print the full CLI file list and run the package whole with its normal test-file concurrency, so the suite itself supplies the required loaded proof. Use timeout -k 10 5400 around that whole invocation: 3x the row293 1367.764 s CLI receipt plus 120 is 4224 s, below 5400. TMPDIR is fresh short scratch. No runs are authorized now.
+- [ ] Any old-test red, reason mismatch, fixture-guard intervention, timeout, or survivor goes to Sage/Mos before edits or retry. No carried result from row293. Commit and publish records only in Sage's gap, claimant review move only in a queue gap. Filbert reviews; Sage gates and lands.
+
+## Static self-review
+
+The proposal meets the brief's source/fix/mutant items and preserves the 2/4 s distinction and separated numeric windows. No runtime or load-stability claim is made. Timing-copy instrumentation is the main review risk: Filbert must approve the two exact observation points and source-byte reconstruction before execution. Mos approved the changed old-test measurement semantics in mos-1409. The 7 s whole-run fixture guard and scheduling overshoot remain explicit risks to measure, not hidden assertions to relax. No other test or supervisor repair is bundled.
+
+
+## Implemented static: mos-1409 / sage-3181 and Filbert I1-I5
+
+Source 1ec2b9765 on base 4a9c536e8. The two observers use `read -r row299_up row299_spare < /proc/uptime`, never the fixture root. Both guard cap 128 and a nonempty `${ROW299_TIMING_FILE-}`. printf is redirected to that absolute private fixture file; grouped stderr goes to /dev/null; errors leave absent evidence which the parser refuses. No observer assigns a production capture variable, changes rc, or touches a trap. New tests assert row299-only read targets and no other assignment; preserve explicit stdout/stderr bytes, exit 87 and the EXIT trap; and reject missing begin/end, duplicate pair, reversed order, nonnumeric/equal/backward readings, and a missing/extra final newline.
+
+Only inner/outer fault runs receive the absolute timing path and executable 0700 private copy. Every such run reverses its two insertions and compares to a fresh read of SCRIPT, including any timer mutant. Baseline and overflow use SCRIPT; baseline status and clean-session assertions remain unchanged. The clock pair is required by assert.doesNotThrow before applying the unchanged bands. baselineSeconds stays diagnostic only. Capture launch insertion keys on its unique LC_ALL=C prefix rather than the timeout command itself, so M4 (outer removal) reaches execution instead of an anchor refusal.
+
+M1-M6 have one target each in their defined scope. M5 now suppresses only the begin printf, preserving the constant block and reversal check so the named inner test must reject an end-only record. M6 admits equal readings so the record-validation test must catch it. M1 retains the known startup-overhead risk: save its interval and stop on a survivor, without changing the ruled bands. All production/shared fixture bytes are unchanged. Manifest is the two test/helper paths only. No Node, syntax preflight, test, mutant, queue call, or HTTPS operation has run. The implementation is unverified until Filbert's static read and Sage CLEAR.
+
+
+## sage-3255 integration, static only
+
+Rebased all three commits from 4a9c536e8 onto 80793d824 under new branch gander/row299-8079, preserving gander/row299-p10. No conflict. The range-diff has three equal pairs and all per-commit stable patch-ids match. Source is e6751ecab; both manifest blobs equal the approved 1ec2b9765 blobs, so digest 277ace0b is unchanged. Direct test/helper, product case1 script, shared CLI helper and sudo-fixture paths have zero drift over 4a9c536e8..80793d824. Row294's CLI config/access and stack-release-test changes are in the new base and covered by the required full CLI suite. No package/source/test implementation changed in this integration. Full records in integration-8079/.
+
+Gate remains held for CLEAR. Ambient load >=4 remains a target, not a wait condition under mos-1409; no stress process. Record each of three whole case1 starts and the whole CLI suite's load and per-mode direct timings. Numeric windows and the 7 s guard remain fixed. Any red, guard intervention, timeout, survivor or overshoot stops to Sage for Mos before edits or retry.
+
+## Gate run 1: sage-3268, 2026-10-23
+
+GREEN on ffa93b054 / 277ace0b. Three whole case1 runs 53/0/0 each; whole CLI 917/0/0 across 59 files. Total 1076/0/0, no cancelled/todo. M1-M6 all killed at their intended assertions, with byte-identical clean restores. No unmutated guard intervention, external timeout, retry or carry. UTC run 07:26:52–07:50:16 (1404 s). CLI load reached 7.17; direct CLI intervals inner exec/hop 2.27/2.27, outer exec/hop 4.01/4.01.
+
+M4 follows sage-3273 / mos-1426: the 7 s fixture guard returned, then exact outer-reason assertion at case1-accept.test.mjs:445 failed on probe-inner-command. No timeout or cleanup-only kill. M1 measured 1.23 s, preserving the noted narrow kill margin. Sweep found zero gate residuals; four MCP harness processes predate this run. Full records, load samples, assertion locations and named base evidence are in run1/RESULTS.md and run1/results.json. Manifest remains unchanged.
@@ -0,0 +1,2 @@
+7ac9d29281d4076bf2e00b7a07294cd4519d7ae9f97c4f6ddc1d22440c9b071a  packages/cli/tests/case-p10-timing-fixture.mjs
+685cf69c741540240c5b414e1907e624cbc59656541316f178d377472fad34a2  packages/cli/tests/case1-accept.test.mjs
@@ -0,0 +1,73 @@
+{
+  "status": "Static definitions finalized; no mutant executed",
+  "mutants": [
+    {
+      "id": "M1",
+      "path": "scripts/case1-accept.sh",
+      "old": "tester_capture 2 4 128",
+      "new": "tester_capture 1 4 128",
+      "killer": "row253 C4 P10 inner reason holds under both sudo models",
+      "expected": "exact inner-timeout reason remains valid, but direct probe interval is below 1.25 s; ERR_ASSERTION on the existing lower-band check",
+      "static_anchor_count": 1,
+      "source_sha256": "89b45bb84e8365f32f08fd055c7db8a0259533f23fe7ab03f484acb25bee92c2",
+      "receipt_requirement": "Record direct interval even if it survives; startup overhead can erase the 0.25 s kill margin. Survivor stops to Sage/Mos; bands unchanged."
+    },
+    {
+      "id": "M2",
+      "path": "scripts/case1-accept.sh",
+      "old": "tester_capture 2 4 128",
+      "new": "tester_capture 3 4 128",
+      "killer": "row253 C4 P10 inner reason holds under both sudo models",
+      "expected": "exact inner-timeout reason remains valid, but direct interval exceeds the unchanged 2.75 s top; ERR_ASSERTION on upper-band check",
+      "static_anchor_count": 1,
+      "source_sha256": "89b45bb84e8365f32f08fd055c7db8a0259533f23fe7ab03f484acb25bee92c2"
+    },
+    {
+      "id": "M3",
+      "path": "scripts/case1-accept.sh",
+      "old": "tester_capture 2 4 128",
+      "new": "tester_capture 2 3 128",
+      "killer": "row253 C4 P10 outer reason holds under both sudo models",
+      "expected": "stalled supervisor still gives exact outer-timeout, but direct interval falls below 3.25 s; ERR_ASSERTION on outer lower-band check",
+      "static_anchor_count": 1,
+      "source_sha256": "89b45bb84e8365f32f08fd055c7db8a0259533f23fe7ab03f484acb25bee92c2"
+    },
+    {
+      "id": "M4",
+      "path": "scripts/case1-accept.sh",
+      "scope": "tester_capture function only",
+      "description": "Remove the trusted outer GNU timeout from the capture invocation, keeping the fixture guard",
+      "killer": "row253 C4 P10 outer reason holds under both sudo models",
+      "expected": "the fixture safety guard permits return but the exact probe-outer-timeout assertion fails; never count external command timeout or cleanup alone as a kill",
+      "scope_begin": "tester_capture() (\n",
+      "scope_end": "# row276-legacy-begin",
+      "old": "LC_ALL=C \"$TS_TIMEOUT\" --verbose --signal=KILL \"${outer}s\" \"$TS_BASH\" -c ",
+      "new": "LC_ALL=C \"$TS_BASH\" -c ",
+      "static_anchor_count": 1,
+      "source_sha256": "89b45bb84e8365f32f08fd055c7db8a0259533f23fe7ab03f484acb25bee92c2"
+    },
+    {
+      "id": "M5",
+      "path": "packages/cli/tests/case-p10-timing-fixture.mjs",
+      "description": "Suppress the begin printf while retaining the inserted begin block and reversal check",
+      "killer": "row253 C4 P10 inner reason holds under both sudo models",
+      "expected": "the existing inner test requires a valid pair with assert.doesNotThrow; end-only evidence fails ERR_ASSERTION",
+      "old": "printf 'begin %s\\\\n' \"$row299_up\" >> \"$ROW299_TIMING_FILE\";",
+      "new": ":;",
+      "static_anchor_count": 1,
+      "source_sha256": "7ac9d29281d4076bf2e00b7a07294cd4519d7ae9f97c4f6ddc1d22440c9b071a"
+    },
+    {
+      "id": "M6",
+      "path": "packages/cli/tests/case-p10-timing-fixture.mjs",
+      "description": "Accept an equal begin/end clock pair",
+      "killer": "row299 P10 observer records are complete and ordered",
+      "expected": "the equal-readings case in the named record test expects refusal and fails ERR_ASSERTION",
+      "old": "end <= begin",
+      "new": "end < begin",
+      "static_anchor_count": 1,
+      "source_sha256": "7ac9d29281d4076bf2e00b7a07294cd4519d7ae9f97c4f6ddc1d22440c9b071a"
+    }
+  ],
+  "restore": "Restore byte-identical source/test/helper files and require clean git status between cases. Timeout is a stop, never a kill."
+}
@@ -0,0 +1,7 @@
+b0ca08db7968e92d417960e58112d767d54902e4d1121f97d4eef2152a2340eb  agents/gander/work/queue-299/ASSERTION-PRESERVATION.json
+3cc775b0c0e78d0aca5396aba4380a0bdd38d421b144dceea4124323ddfd1bc4  agents/gander/work/queue-299/BASE.json
+132cd793d5f9daa93c879d073dd1fa1d1568b07851b707a3c0b519ed64e9a63a  agents/gander/work/queue-299/BUILD.md
+277ace0b4274970d5bd4c05cf8fe99aa1e7ebc469a719e4cefcb334a75d3865d  agents/gander/work/queue-299/MANIFEST.sha256
+ff72c99b4b73cfe2acbaf79eb9aed442c855f011fe662722acba7f8a388d3f9b  agents/gander/work/queue-299/MUTANT-PLAN.json
+7657e629dab262aaeb46004526ede586a167675558a72b6177abf7e646ce6885  agents/gander/work/queue-299/integration-8079/CHECKS.json
+b6632cb58ccfc79262f98322682cfd2887e102436cdd1af9e8ac37d2a482b9d8  agents/gander/work/queue-299/integration-8079/range-diff.txt
@@ -0,0 +1,35 @@
+{
+  "base": "80793d824e05baaef4820f4be7790aba55971b6f",
+  "rebased_source": "e6751ecab",
+  "rebased_tip_before_records": "bc7da6814",
+  "conflicts": [],
+  "range_diff": "all three pairs equal",
+  "patch_ids": [
+    {
+      "old": "31c847580",
+      "new": "482adc255",
+      "patch_id": "224e6ce7677320cf362189ad2746c481176c3429"
+    },
+    {
+      "old": "1ec2b9765",
+      "new": "e6751ecab",
+      "patch_id": "dec31bc01820a54fa4001fda4886905576a6b692"
+    },
+    {
+      "old": "9872b5ab5",
+      "new": "bc7da6814",
+      "patch_id": "f335941005f9c113aa09a800a3569d2447be3464"
+    }
+  ],
+  "checked_paths": [
+    "packages/cli/tests/case1-accept.test.mjs",
+    "packages/cli/tests/case-p10-timing-fixture.mjs",
+    "scripts/case1-accept.sh",
+    "packages/cli/tests/helpers.mjs",
+    "packages/cli/tests/case-sudo-fixture.mjs"
+  ],
+  "drift": "",
+  "manifest": "277ace0b4274970d5bd4c05cf8fe99aa1e7ebc469a719e4cefcb334a75d3865d",
+  "test_blobs_match_static_approved_1ec2b9765": true,
+  "runtime": "Not run; awaiting Sage CLEAR. No queue/Node/tests executed."
+}
@@ -0,0 +1,3 @@
+1:  31c847580 = 1:  482adc255 docs(row299): propose direct P10 wait timing for mos-1272 review
+2:  1ec2b9765 = 2:  e6751ecab test(case): observe P10 wait directly under mos-1409
+3:  9872b5ab5 = 3:  bc7da6814 docs(row299): record mos-1409 preservation and static candidate
@@ -0,0 +1 @@
+CLEAR
@@ -0,0 +1,18 @@
+{
+  "label": "M1-syntax",
+  "argv": [
+    "timeout",
+    "-k",
+    "10",
+    "120",
+    "bash",
+    "-n",
+    "scripts/case1-accept.sh"
+  ],
+  "limit_seconds": 120,
+  "tmpdir": "/mnt/storage/scratch/tmp/gh8s2Og",
+  "started_utc": "2026-10-23T07:49:28Z",
+  "start_load": "1.51 2.50 2.68 3/5810 1153451",
+  "log": "/mnt/storage/scratch/tmp/gABO62Q/records/M1-syntax.log",
+  "expected_red": false
+}
@@ -0,0 +1,7 @@
+[
+  {
+    "wall_seconds": 0.0,
+    "utc": "2026-10-23T07:49:28Z",
+    "load": "1.51 2.50 2.68 2/5811 1153452"
+  }
+]
@@ -0,0 +1 @@
+CLEAR
@@ -0,0 +1,21 @@
+{
+  "label": "M1",
+  "argv": [
+    "timeout",
+    "-k",
+    "10",
+    "1200",
+    "node",
+    "--test",
+    "--test-reporter=tap",
+    "--test-name-pattern",
+    "^row253 C4 P10 inner reason holds under both sudo models$",
+    "packages/cli/tests/case1-accept.test.mjs"
+  ],
+  "limit_seconds": 1200,
+  "tmpdir": "/mnt/storage/scratch/tmp/gxjj9Vd",
+  "started_utc": "2026-10-23T07:49:30Z",
+  "start_load": "1.51 2.50 2.68 1/5816 1156782",
+  "log": "/mnt/storage/scratch/tmp/gABO62Q/records/M1.log",
+  "expected_red": true
+}
@@ -0,0 +1,7 @@
+[
+  {
+    "wall_seconds": 0.0,
+    "utc": "2026-10-23T07:49:30Z",
+    "load": "1.51 2.50 2.68 3/5817 1156783"
+  }
+]
@@ -0,0 +1,29 @@
+TAP version 13
+# Subtest: row253 C4 P10 inner reason holds under both sudo models
+not ok 1 - row253 C4 P10 inner reason holds under both sudo models
+  ---
+  duration_ms: 4641.831075
+  type: 'test'
+  location: '/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:421:49'
+  failureType: 'testCodeFailure'
+  error: 'exec: direct probe 1.23s; baseline 1.764558389s is diagnostic only'
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: true
+  actual: false
+  operator: '=='
+  stack: |-
+    TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:450:29)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  ...
+# {"fault":"inner","mode":"exec","baselineSeconds":1.764558389,"faultSeconds":2.8568522200000004,"probeSeconds":1.23}
+1..1
+# tests 1
+# suites 0
+# pass 0
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 4737.590412
@@ -0,0 +1 @@
+CLEAR
@@ -0,0 +1,18 @@
+{
+  "label": "M2-syntax",
+  "argv": [
+    "timeout",
+    "-k",
+    "10",
+    "120",
+    "bash",
+    "-n",
+    "scripts/case1-accept.sh"
+  ],
+  "limit_seconds": 120,
+  "tmpdir": "/mnt/storage/scratch/tmp/gZ30EQX",
+  "started_utc": "2026-10-23T07:49:36Z",
+  "start_load": "1.47 2.48 2.67 1/5822 1162481",
+  "log": "/mnt/storage/scratch/tmp/gABO62Q/records/M2-syntax.log",
+  "expected_red": false
+}
@@ -0,0 +1,7 @@
+[
+  {
+    "wall_seconds": 0.0,
+    "utc": "2026-10-23T07:49:36Z",
+    "load": "1.47 2.48 2.67 3/5823 1162482"
+  }
+]
@@ -0,0 +1 @@
+CLEAR
@@ -0,0 +1,21 @@
+{
+  "label": "M2",
+  "argv": [
+    "timeout",
+    "-k",
+    "10",
+    "1200",
+    "node",
+    "--test",
+    "--test-reporter=tap",
+    "--test-name-pattern",
+    "^row253 C4 P10 inner reason holds under both sudo models$",
+    "packages/cli/tests/case1-accept.test.mjs"
+  ],
+  "limit_seconds": 1200,
+  "tmpdir": "/mnt/storage/scratch/tmp/gYr4G6o",
+  "started_utc": "2026-10-23T07:49:37Z",
+  "start_load": "1.47 2.48 2.67 1/5823 1165689",
+  "log": "/mnt/storage/scratch/tmp/gABO62Q/records/M2.log",
+  "expected_red": true
+}
@@ -0,0 +1,12 @@
+[
+  {
+    "wall_seconds": 0.0,
+    "utc": "2026-10-23T07:49:37Z",
+    "load": "1.47 2.48 2.67 3/5824 1165690"
+  },
+  {
+    "wall_seconds": 5.001,
+    "utc": "2026-10-23T07:49:42Z",
+    "load": "1.43 2.45 2.66 3/5865 1168855"
+  }
+]
@@ -0,0 +1,29 @@
+TAP version 13
+# Subtest: row253 C4 P10 inner reason holds under both sudo models
+not ok 1 - row253 C4 P10 inner reason holds under both sudo models
+  ---
+  duration_ms: 6624.625527
+  type: 'test'
+  location: '/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:421:49'
+  failureType: 'testCodeFailure'
+  error: 'exec: direct probe 3.24s; baseline 1.754618234s is diagnostic only'
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: true
+  actual: false
+  operator: '=='
+  stack: |-
+    TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:450:29)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  ...
+# {"fault":"inner","mode":"exec","baselineSeconds":1.754618234,"faultSeconds":4.849417662,"probeSeconds":3.24}
+1..1
+# tests 1
+# suites 0
+# pass 0
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 6718.852297
@@ -0,0 +1,6 @@
+CLEAR
+/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1169351/cmdline: No such file or directory
+/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1169352/cmdline: No such file or directory
+/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1169353/cmdline: No such file or directory
+/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1169354/cmdline: No such file or directory
+/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1169382/cmdline: No such file or directory
@@ -0,0 +1,18 @@
+{
+  "label": "M3-syntax",
+  "argv": [
+    "timeout",
+    "-k",
+    "10",
+    "120",
+    "bash",
+    "-n",
+    "scripts/case1-accept.sh"
+  ],
+  "limit_seconds": 120,
+  "tmpdir": "/mnt/storage/scratch/tmp/gwCkjzX",
+  "started_utc": "2026-10-23T07:49:45Z",
+  "start_load": "1.40 2.43 2.66 2/5844 1172866",
+  "log": "/mnt/storage/scratch/tmp/gABO62Q/records/M3-syntax.log",
+  "expected_red": false
+}
@@ -0,0 +1,7 @@
+[
+  {
+    "wall_seconds": 0.0,
+    "utc": "2026-10-23T07:49:45Z",
+    "load": "1.40 2.43 2.66 4/5845 1172867"
+  }
+]
@@ -0,0 +1,7 @@
+CLEAR
+/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1172650/cmdline: No such file or directory
+/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1172687/cmdline: No such file or directory
+/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1172732/cmdline: No such file or directory
+/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1172780/cmdline: No such file or directory
+/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1172825/cmdline: No such file or directory
+/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1172863/cmdline: No such file or directory
@@ -0,0 +1,21 @@
+{
+  "label": "M3",
+  "argv": [
+    "timeout",
+    "-k",
+    "10",
+    "1200",
+    "node",
+    "--test",
+    "--test-reporter=tap",
+    "--test-name-pattern",
+    "^row253 C4 P10 outer reason holds under both sudo models$",
+    "packages/cli/tests/case1-accept.test.mjs"
+  ],
+  "limit_seconds": 1200,
+  "tmpdir": "/mnt/storage/scratch/tmp/g6TrU8V",
+  "started_utc": "2026-10-23T07:49:46Z",
+  "start_load": "1.40 2.43 2.66 2/5868 1176268",
+  "log": "/mnt/storage/scratch/tmp/gABO62Q/records/M3.log",
+  "expected_red": true
+}
@@ -0,0 +1,12 @@
+[
+  {
+    "wall_seconds": 0.0,
+    "utc": "2026-10-23T07:49:46Z",
+    "load": "1.40 2.43 2.66 4/5869 1176269"
+  },
+  {
+    "wall_seconds": 5.001,
+    "utc": "2026-10-23T07:49:51Z",
+    "load": "1.44 2.42 2.65 1/5889 1179184"
+  }
+]
@@ -0,0 +1,29 @@
+TAP version 13
+# Subtest: row253 C4 P10 outer reason holds under both sudo models
+not ok 1 - row253 C4 P10 outer reason holds under both sudo models
+  ---
+  duration_ms: 6474.774742
+  type: 'test'
+  location: '/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:421:49'
+  failureType: 'testCodeFailure'
+  error: 'exec: direct probe 3.01s; baseline 1.7982556909999998s is diagnostic only'
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: true
+  actual: false
+  operator: '=='
+  stack: |-
+    TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:452:11)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  ...
+# {"fault":"outer","mode":"exec","baselineSeconds":1.7982556909999998,"faultSeconds":4.664919980999999,"probeSeconds":3.01}
+1..1
+# tests 1
+# suites 0
+# pass 0
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 6573.218398
@@ -0,0 +1 @@
+CLEAR
@@ -0,0 +1,18 @@
+{
+  "label": "M4-syntax",
+  "argv": [
+    "timeout",
+    "-k",
+    "10",
+    "120",
+    "bash",
+    "-n",
+    "scripts/case1-accept.sh"
+  ],
+  "limit_seconds": 120,
+  "tmpdir": "/mnt/storage/scratch/tmp/gRPd59t",
+  "started_utc": "2026-10-23T07:49:54Z",
+  "start_load": "1.41 2.40 2.64 3/5836 1182894",
+  "log": "/mnt/storage/scratch/tmp/gABO62Q/records/M4-syntax.log",
+  "expected_red": false
+}
@@ -0,0 +1,7 @@
+[
+  {
+    "wall_seconds": 0.0,
+    "utc": "2026-10-23T07:49:54Z",
+    "load": "1.41 2.40 2.64 7/5837 1182895"
+  }
+]
@@ -0,0 +1,3 @@
+CLEAR
+/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1182788/cmdline: No such file or directory
+/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1182883/cmdline: No such file or directory
@@ -0,0 +1,21 @@
+{
+  "label": "M4",
+  "argv": [
+    "timeout",
+    "-k",
+    "10",
+    "1200",
+    "node",
+    "--test",
+    "--test-reporter=tap",
+    "--test-name-pattern",
+    "^row253 C4 P10 outer reason holds under both sudo models$",
+    "packages/cli/tests/case1-accept.test.mjs"
+  ],
+  "limit_seconds": 1200,
+  "tmpdir": "/mnt/storage/scratch/tmp/gAKhO44",
+  "started_utc": "2026-10-23T07:49:56Z",
+  "start_load": "1.41 2.40 2.64 8/5839 1186447",
+  "log": "/mnt/storage/scratch/tmp/gABO62Q/records/M4.log",
+  "expected_red": true
+}
@@ -0,0 +1,12 @@
+[
+  {
+    "wall_seconds": 0.001,
+    "utc": "2026-10-23T07:49:56Z",
+    "load": "1.41 2.40 2.64 8/5838 1186448"
+  },
+  {
+    "wall_seconds": 5.001,
+    "utc": "2026-10-23T07:50:01Z",
+    "load": "1.54 2.41 2.64 5/5866 1190264"
+  }
+]
@@ -0,0 +1,92 @@
+TAP version 13
+# Subtest: row253 C4 P10 outer reason holds under both sudo models
+not ok 1 - row253 C4 P10 outer reason holds under both sudo models
+  ---
+  duration_ms: 8880.927284
+  type: 'test'
+  location: '/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:421:49'
+  failureType: 'testCodeFailure'
+  error: |-
+    The input did not match the regular expression /P10 tester-socket-squat unnamed boundary=failed reason=probe-outer-timeout /. Input:
+    
+    'F1 units-user pass [email protected] and mosaic-webui.service are active as mosaic (uid 997)\n' +
+      'F2 console-loopback pass healthz answers, and 732 is bound to 127.0.0.1 only, by MainPID 200\n' +
+      'F3 tester-reply pass chief replied to case1-accept-e61888cb4c54\n' +
+      'F4 precheck pass case2-precheck.sh --profile factory exits 0\n' +
+      "F5 bwrap-label pass bwrap 300 reads 'bwrap (enforce)' and its claude descendant 302 reads 'bwrap//&unpriv_bwrap (enforce)'\n" +
+      "F6 claude-pin pass /opt/mosaic-stack/claude-2.1.0/node_modules/@anthropic-ai/claude-code/bin/claude.exe prints '2.1.0 (Claude Code)'\n" +
+      'F7 pm-live pass one live launch: pm run r-0002\n' +
+      "F8 credential-file pass /srv/mosaic/.config/mosaic-dev/secrets/claude-session.env is 'mosaic 600 regular file'\n" +
+      'F9 autoupdater-off pass /etc/claude-code/managed-settings.json is root:root 0644 with env.DISABLE_AUTOUPDATER "1"\n' +
+      'F10 node-pin pass /opt/mosaic-stack/node-v24.1.0/bin/node prints v24.1.0\n' +
+      'F11 no-discord pass /srv/mosaic/.mosaic-dev/discord is absent\n' +
+      'P1 mosaic-sudo closed sudo -l: User mosaic is not allowed to run sudo on dev-53.\n' +
+      "P2 mosaic-groups-keys closed id -G is '997'; authorized_keys is absent\n" +
+      'P3 localadmin-sudo accepted Q183 sudo -l -U localadmin lists 1 NOPASSWD lines\n' +
+      "P4 pve-root-pbs accepted Q182+Q183 root on pve over VM 1008, and PBS backups that hold /srv/mosaic with the credential; this script can't see pve\n" +
+      'P5 jarvis-reach closed jarvis is in none of sudo, docker and lxd (groups: jarvis)\n' +
+      'P6 group-members closed sudo holds only localadmin, and docker and lxd have no members\n' +
+      'P7 sudoers-d closed no file under /etc/sudoers.d names mosaic\n' +
+      'P8 lan-listeners closed 732 is on 127.0.0.1 only by MainPID 200; no TCP listener on 7331 or 7333; tester uses /srv/mosaic/.mosaic-dev/console/tester.sock\n' +
+      'P9 bwrap-userns accepted mos-1096 hostcheck items 1-6 ok, jarvis is denied bwrap, and group mosaic has no other member\n' +
+      'P10 tester-socket-squat unnamed boundary=failed reason=probe-inner-command path=/srv/mosaic/.mosaic-dev/console/tester.sock MainPID=200; hostile same-uid substitution remains\n' +
+      'P11 hostcheck-before-bus closed mosaic-hostcheck.service is enabled, and its Before= names [email protected]\n' +
+      'count pass 11\n' +
+      'count FAIL 0\n' +
+      'count closed 7\n' +
+      'count accepted Q182+Q183 1\n' +
+      'count accepted Q183 1\n' +
+      'count accepted mos-1096 1\n' +
+      'count unnamed 1\n' +
+      'case1-accept: every F check passes; send the whole output to Duckworth, and each unnamed line to Mos\n'
+    
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected:
+  actual: |-
+    F1 units-user pass [email protected] and mosaic-webui.service are active as mosaic (uid 997)
+    F2 console-loopback pass healthz answers, and 732 is bound to 127.0.0.1 only, by MainPID 200
+    F3 tester-reply pass chief replied to case1-accept-e61888cb4c54
+    F4 precheck pass case2-precheck.sh --profile factory exits 0
+    F5 bwrap-label pass bwrap 300 reads 'bwrap (enforce)' and its claude descendant 302 reads 'bwrap//&unpriv_bwrap (enforce)'
+    F6 claude-pin pass /opt/mosaic-stack/claude-2.1.0/node_modules/@anthropic-ai/claude-code/bin/claude.exe prints '2.1.0 (Claude Code)'
+    F7 pm-live pass one live launch: pm run r-0002
+    F8 credential-file pass /srv/mosaic/.config/mosaic-dev/secrets/claude-session.env is 'mosaic 600 regular file'
+    F9 autoupdater-off pass /etc/claude-code/managed-settings.json is root:root 0644 with env.DISABLE_AUTOUPDATER "1"
+    F10 node-pin pass /opt/mosaic-stack/node-v24.1.0/bin/node prints v24.1.0
+    F11 no-discord pass /srv/mosaic/.mosaic-dev/discord is absent
+    P1 mosaic-sudo closed sudo -l: User mosaic is not allowed to run sudo on dev-53.
+    P2 mosaic-groups-keys closed id -G is '997'; authorized_keys is absent
+    P3 localadmin-sudo accepted Q183 sudo -l -U localadmin lists 1 NOPASSWD lines
+    P4 pve-root-pbs accepted Q182+Q183 root on pve over VM 1008, and PBS backups that hold /srv/mosaic with the credential; this script can't see pve
+    P5 jarvis-reach closed jarvis is in none of sudo, docker and lxd (groups: jarvis)
+    P6 group-members closed sudo holds only localadmin, and docker and lxd have no members
+    P7 sudoers-d closed no file under /etc/sudoers.d names mosaic
+    P8 lan-listeners closed 732 is on 127.0.0.1 only by MainPID 200; no TCP listener on 7331 or 7333; tester uses /srv/mosaic/.mosaic-dev/console/tester.sock
+    P9 bwrap-userns accepted mos-1096 hostcheck items 1-6 ok, jarvis is denied bwrap, and group mosaic has no other member
+    P10 tester-socket-squat unnamed boundary=failed reason=probe-inner-command path=/srv/mosaic/.mosaic-dev/console/tester.sock MainPID=200; hostile same-uid substitution remains
+    P11 hostcheck-before-bus closed mosaic-hostcheck.service is enabled, and its Before= names [email protected]
+    count pass 11
+    count FAIL 0
+    count closed 7
+    count accepted Q182+Q183 1
+    count accepted Q183 1
+    count accepted mos-1096 1
+    count unnamed 1
+    case1-accept: every F check passes; send the whole output to Duckworth, and each unnamed line to Mos
+    
+  operator: 'match'
+  stack: |-
+    TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:445:10)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  ...
+1..1
+# tests 1
+# suites 0
+# pass 0
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 8984.292623
@@ -0,0 +1,2 @@
+CLEAR
+/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1193437/cmdline: No such file or directory
@@ -0,0 +1,18 @@
+{
+  "label": "M5-syntax",
+  "argv": [
+    "timeout",
+    "-k",
+    "10",
+    "120",
+    "node",
+    "--check",
+    "packages/cli/tests/case-p10-timing-fixture.mjs"
+  ],
+  "limit_seconds": 120,
+  "tmpdir": "/mnt/storage/scratch/tmp/g8waDyO",
+  "started_utc": "2026-10-23T07:50:06Z",
+  "start_load": "1.65 2.42 2.65 2/5826 1197030",
+  "log": "/mnt/storage/scratch/tmp/gABO62Q/records/M5-syntax.log",
+  "expected_red": false
+}
@@ -0,0 +1,7 @@
+[
+  {
+    "wall_seconds": 0.0,
+    "utc": "2026-10-23T07:50:06Z",
+    "load": "1.65 2.42 2.65 4/5827 1197031"
+  }
+]
@@ -0,0 +1,2 @@
+CLEAR
+/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1197017/cmdline: No such file or directory
@@ -0,0 +1,21 @@
+{
+  "label": "M5",
+  "argv": [
+    "timeout",
+    "-k",
+    "10",
+    "1200",
+    "node",
+    "--test",
+    "--test-reporter=tap",
+    "--test-name-pattern",
+    "^row253 C4 P10 inner reason holds under both sudo models$",
+    "packages/cli/tests/case1-accept.test.mjs"
+  ],
+  "limit_seconds": 1200,
+  "tmpdir": "/mnt/storage/scratch/tmp/gdAgQSv",
+  "started_utc": "2026-10-23T07:50:07Z",
+  "start_load": "1.65 2.42 2.65 2/5824 1200489",
+  "log": "/mnt/storage/scratch/tmp/gABO62Q/records/M5.log",
+  "expected_red": true
+}
@@ -0,0 +1,12 @@
+[
+  {
+    "wall_seconds": 0.0,
+    "utc": "2026-10-23T07:50:07Z",
+    "load": "1.65 2.42 2.65 6/5827 1200493"
+  },
+  {
+    "wall_seconds": 5.001,
+    "utc": "2026-10-23T07:50:12Z",
+    "load": "1.60 2.40 2.64 2/5882 1203150"
+  }
+]
@@ -0,0 +1,38 @@
+TAP version 13
+# Subtest: row253 C4 P10 inner reason holds under both sudo models
+not ok 1 - row253 C4 P10 inner reason holds under both sudo models
+  ---
+  duration_ms: 5653.123684
+  type: 'test'
+  location: '/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:421:49'
+  failureType: 'testCodeFailure'
+  error: |-
+    Got unwanted exception: P10 observer pair is required
+    Actual message: "P10 observer needs exactly one complete ordered pair"
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  actual:
+  error: 'P10 observer needs exactly one complete ordered pair'
+  stack: |-
+    readProbeSeconds (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case-p10-timing-fixture.mjs:56:42)
+    file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:448:55
+    getActual (node:assert:580:5)
+    strict.doesNotThrow (node:assert:748:32)
+    TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:448:24)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  operator: 'doesNotThrow'
+  stack: |-
+    TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:448:24)
+    async Test.run (node:internal/test_runner/test:1409:7)
+    async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
+  ...
+1..1
+# tests 1
+# suites 0
+# pass 0
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 5762.289353
@@ -0,0 +1 @@
+CLEAR
@@ -0,0 +1,18 @@
+{
+  "label": "M6-syntax",
+  "argv": [
+    "timeout",
+    "-k",
+    "10",
+    "120",
+    "node",
+    "--check",
+    "packages/cli/tests/case-p10-timing-fixture.mjs"
+  ],
+  "limit_seconds": 120,
+  "tmpdir": "/mnt/storage/scratch/tmp/gD2IEb2",
+  "started_utc": "2026-10-23T07:50:15Z",
+  "start_load": "1.63 2.39 2.63 1/5845 1206646",
+  "log": "/mnt/storage/scratch/tmp/gABO62Q/records/M6-syntax.log",
+  "expected_red": false
+}
@@ -0,0 +1,7 @@
+[
+  {
+    "wall_seconds": 0.0,
+    "utc": "2026-10-23T07:50:15Z",
+    "load": "1.63 2.39 2.63 4/5846 1206647"
+  }
+]
@@ -0,0 +1 @@
+CLEAR
@@ -0,0 +1,21 @@
+{
+  "label": "M6",
+  "argv": [
+    "timeout",
+    "-k",
+    "10",
+    "1200",
+    "node",
+    "--test",
+    "--test-reporter=tap",
+    "--test-name-pattern",
+    "^row299 P10 observer records are complete and ordered$",
+    "packages/cli/tests/case1-accept.test.mjs"
+  ],
+  "limit_seconds": 1200,
+  "tmpdir": "/mnt/storage/scratch/tmp/gAZq1pv",
+  "started_utc": "2026-10-23T07:50:16Z",
+  "start_load": "1.63 2.39 2.63 2/5837 1210084",
+  "log": "/mnt/storage/scratch/tmp/gABO62Q/records/M6.log",
+  "expected_red": true
+}
@@ -0,0 +1,7 @@
+[
+  {
+    "wall_seconds": 0.0,
+    "utc": "2026-10-23T07:50:16Z",
+    "load": "1.63 2.39 2.63 2/5838 1210085"
+  }
+]
@@ -0,0 +1,29 @@
+TAP version 13
+# Subtest: row299 P10 observer records are complete and ordered
+not ok 1 - row299 P10 observer records are complete and ordered
+  ---
+  duration_ms: 1.544819
+  type: 'test'
+  location: '/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:405:1'
+  failureType: 'testCodeFailure'
+  error: 'Missing expected exception: equal readings'
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected:
+  operator: 'throws'
+  stack: |-
+    TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:418:58)
+    Test.runInAsyncScope (node:async_hooks:226:14)
+    Test.run (node:internal/test_runner/test:1402:25)
+    Test.start (node:internal/test_runner/test:1262:17)
+    startSubtestAfterBootstrap (node:internal/test_runner/harness:387:17)
+  ...
+1..1
+# tests 1
+# suites 0
+# pass 0
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 97.805057
@@ -0,0 +1,78 @@
+ba45d57c9b255311bb220598f90c1a4fb01b420511974c28f102881cbd7df21a  agents/gander/work/queue-299/run1/M1-syntax.busy.log
+0e86c022784e85084f08044940ec6623e736e2eea3e87afe994cebcdaa18c016  agents/gander/work/queue-299/run1/M1-syntax.command.json
+6552beee45c19264b36614eb09e49f4c24e66521732071036c194b7ab5b6c3ee  agents/gander/work/queue-299/run1/M1-syntax.load.json
+e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  agents/gander/work/queue-299/run1/M1-syntax.log
+ba45d57c9b255311bb220598f90c1a4fb01b420511974c28f102881cbd7df21a  agents/gander/work/queue-299/run1/M1.busy.log
+9bfeb9cb89dde406b0b8997250139dc1eb925fb17a7d308c59ab628bd46f175d  agents/gander/work/queue-299/run1/M1.command.json
+c834b00bfe2b7fca539cd93a428b7d92b377a93d6a3aad65e33916735e4fca4e  agents/gander/work/queue-299/run1/M1.load.json
+6566b6d9f613a5904d85b0d0032a0dcd29aa81dcdfd363234537594006c1c5d4  agents/gander/work/queue-299/run1/M1.log
+ba45d57c9b255311bb220598f90c1a4fb01b420511974c28f102881cbd7df21a  agents/gander/work/queue-299/run1/M2-syntax.busy.log
+4c04e5dcd4e7620a50436f09b60dfb5e0177978d765e5f14fc3da301cb91c729  agents/gander/work/queue-299/run1/M2-syntax.command.json
+827351dfdde96da9bc13133600a6d2997299ed442df774e1c7718c34f02259c1  agents/gander/work/queue-299/run1/M2-syntax.load.json
+e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  agents/gander/work/queue-299/run1/M2-syntax.log
+ba45d57c9b255311bb220598f90c1a4fb01b420511974c28f102881cbd7df21a  agents/gander/work/queue-299/run1/M2.busy.log
+4f0f7aef97edc93582921f5b15745bc72b3aae8ba7a71aaa145cd7d78b080af6  agents/gander/work/queue-299/run1/M2.command.json
+d1ccdfc399964b4a9f61f2ff8eb5304b9556033e1e255467b0887460e56f5ae0  agents/gander/work/queue-299/run1/M2.load.json
+b80762fb0b571cadaad5fcf5e43e040c533d2aca1cf939ea4247c5c8f50bd176  agents/gander/work/queue-299/run1/M2.log
+8e62af85b120ec37099cfba76475359132a1ec673b55350da4442a2356f18fb4  agents/gander/work/queue-299/run1/M3-syntax.busy.log
+019d63399b36b47bdf38730229aabd8edb5c25e27f7f78f462c70963a02aca69  agents/gander/work/queue-299/run1/M3-syntax.command.json
+d31ae584602d69e1c6d68e1186b45d518741028e5f9ca289ddba6b472638e634  agents/gander/work/queue-299/run1/M3-syntax.load.json
+e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  agents/gander/work/queue-299/run1/M3-syntax.log
+2d80452846bb5af54c76122f0647cb850bbf22ed114e17f9fb883b2c41f3d82e  agents/gander/work/queue-299/run1/M3.busy.log
+5619bd5a00679fc783d1f0ef8111570268238fc5cfc3b0586539fece039a0d14  agents/gander/work/queue-299/run1/M3.command.json
+3ac8b2e351f5b3e016114f7ff45cc71a1d6287c4dc8d52640c6233424afdc59b  agents/gander/work/queue-299/run1/M3.load.json
+d5f21e277400f33779ea94940979bc89ae54c7484a762f373027bf837b98a47a  agents/gander/work/queue-299/run1/M3.log
+ba45d57c9b255311bb220598f90c1a4fb01b420511974c28f102881cbd7df21a  agents/gander/work/queue-299/run1/M4-syntax.busy.log
+c6f7857ef123cddd6190eba9e6b9a3356821bb0b3a797a1b05a2e19d108c5ec7  agents/gander/work/queue-299/run1/M4-syntax.command.json
+f983475d9ea0c5cbff43d0de9f8514488d20e2d7732af8d050ca10b9fb81c061  agents/gander/work/queue-299/run1/M4-syntax.load.json
+e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  agents/gander/work/queue-299/run1/M4-syntax.log
+d2361f293ed1242c07568092784e830638a3da691d01019a18beaff859d96b2a  agents/gander/work/queue-299/run1/M4.busy.log
+f66ae61b9ed0ea5a720f5c2457ecfb8cc610e192cd619ee5433f24af25f17f85  agents/gander/work/queue-299/run1/M4.command.json
+cd20239485328874f8bbe30acd9470c3874011ef5bb6f39f33ed210b7c4a4f27  agents/gander/work/queue-299/run1/M4.load.json
+e64c363e8f11574be893acce37a4152c90c31f5547ca6d48780160c556f0db70  agents/gander/work/queue-299/run1/M4.log
+7c3a3b6bcf027e99e0f3903215f4ffca88d8bff9fb3a8ef92d3b28bfa68ba52a  agents/gander/work/queue-299/run1/M5-syntax.busy.log
+3e0f4c82616fa3fa7274ad91ec3f2baa86b7b22288d7507730e66c8e4809c681  agents/gander/work/queue-299/run1/M5-syntax.command.json
+e0093f4ad39d9d4342b43c0ed2d7671747870d6d6166d0692eecbf3dc8033645  agents/gander/work/queue-299/run1/M5-syntax.load.json
+e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  agents/gander/work/queue-299/run1/M5-syntax.log
+f104c336fdfa56a241f1b769938b71eafbfb237a88b3089309671eb5a8db4f0e  agents/gander/work/queue-299/run1/M5.busy.log
+35f7ce5f6e56047d600633a0e27826f6f54aa585552593bfb4954f8469238f7a  agents/gander/work/queue-299/run1/M5.command.json
+059de490b1a31be3a8c9a02ff49f84b744d057f66d4f55508e637e6b0896b670  agents/gander/work/queue-299/run1/M5.load.json
+42e0a43b161e61775b0d4bdde73be4c131a8d6edb4aabf14422755e553272a3f  agents/gander/work/queue-299/run1/M5.log
+ba45d57c9b255311bb220598f90c1a4fb01b420511974c28f102881cbd7df21a  agents/gander/work/queue-299/run1/M6-syntax.busy.log
+867359f0e7ebf5516ae1e1147327e9f6e20d48cb2993b46866f9d90a9ebdbecb  agents/gander/work/queue-299/run1/M6-syntax.command.json
+8d1d69b01dffda714da78c7f08e14b7d1db12a788c812ab02d3a3faa6c52d8a6  agents/gander/work/queue-299/run1/M6-syntax.load.json
+e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  agents/gander/work/queue-299/run1/M6-syntax.log
+ba45d57c9b255311bb220598f90c1a4fb01b420511974c28f102881cbd7df21a  agents/gander/work/queue-299/run1/M6.busy.log
+3e46e6d020a0fe9782b3e84462f634daed0885c0e992e482f7d815524fe2294e  agents/gander/work/queue-299/run1/M6.command.json
+24e987a747661e01b9e2a28b0580a0be5b16fad57da5c8c35f41b82835ea76ed  agents/gander/work/queue-299/run1/M6.load.json
+8a0f18ea13b69c71a742a755eb7437d06e49679b777880a8db7b4297ae9849d9  agents/gander/work/queue-299/run1/M6.log
+e8efed810462567a977a64235454f5d59e92dbfb570d5537652c8deb52b9de66  agents/gander/work/queue-299/run1/RESULTS.md
+e055720cf64d62331a1e957d285d2583bfb3708fc1b9bf951ab8a99a25c5b2e4  agents/gander/work/queue-299/run1/ambient-overlap.json
+ba45d57c9b255311bb220598f90c1a4fb01b420511974c28f102881cbd7df21a  agents/gander/work/queue-299/run1/case1-whole-1.busy.log
+16ea379e1482e79b380c9a7be82703e735bea7ef80f1e785a032af9198b26c35  agents/gander/work/queue-299/run1/case1-whole-1.command.json
+d87a93023d545cd38fcf0a77577c88326897700325fbecd84fd8287a26b33864  agents/gander/work/queue-299/run1/case1-whole-1.load.json
+c4d7cf6a001a6741af3aa0e0615989327f63fe92999e8fb6d46c2d30f8c08f09  agents/gander/work/queue-299/run1/case1-whole-1.log
+ba45d57c9b255311bb220598f90c1a4fb01b420511974c28f102881cbd7df21a  agents/gander/work/queue-299/run1/case1-whole-2.busy.log
+4b69775fb03d9fa56a9eef0c9dc8f3cb00013aa4d601f433519ef1dafcc2544c  agents/gander/work/queue-299/run1/case1-whole-2.command.json
+62c4cc338455841d9faf1198acddc3f3204346800e2db7222d1fc33aba189fe3  agents/gander/work/queue-299/run1/case1-whole-2.load.json
+2ed90fe79a18f794363c47e34440b877a3ffa1256f9a5badb31b317ecbc2fb7b  agents/gander/work/queue-299/run1/case1-whole-2.log
+56d73910ed8d6773724be75e02506a365e5e03c4c98be07a32d49957f24b3e4a  agents/gander/work/queue-299/run1/case1-whole-3.busy.log
+a9225b3ae990e328d739d9259b5dfce0391d5054dedd074f53b81c92e7225c1a  agents/gander/work/queue-299/run1/case1-whole-3.command.json
+dc440ef86b769bf498ed9fcaa178ef9098f7bb9233dd625579d344464c00b11a  agents/gander/work/queue-299/run1/case1-whole-3.load.json
+a803a8e73902337b63d229d0703d45ec9fccd7a1930e192d322d4cc79b9774d6  agents/gander/work/queue-299/run1/case1-whole-3.log
+ba45d57c9b255311bb220598f90c1a4fb01b420511974c28f102881cbd7df21a  agents/gander/work/queue-299/run1/cli-whole.busy.log
+e3ea8c0434fb979a4943f1bfab1984ff8b919bb062945803e1ddcaa61170d1a5  agents/gander/work/queue-299/run1/cli-whole.command.json
+db54ea06016fa065f25ed62f5704757a727ff37009e010fa43b1e297bfb2b51b  agents/gander/work/queue-299/run1/cli-whole.load.json
+5222a0807a5ed3d8548711d09e7d3b09504f18b5f3f095c2529b4eedf5a2846b  agents/gander/work/queue-299/run1/cli-whole.log
+d58a500c8e125540aeee461cde68aa6bfe65ab386ae15c9af7dfe363a73a9fd2  agents/gander/work/queue-299/run1/controller.log
+906c08da89e164e214464014edb672f8d389cb3eab70929d994bcff2794ff45a  agents/gander/work/queue-299/run1/results.json
+b7450a29a470bb48c300d630cd8079be283187d372b9bafd0fbaaafb261e9639  agents/gander/work/queue-299/run1/sweep.json
+ba45d57c9b255311bb220598f90c1a4fb01b420511974c28f102881cbd7df21a  agents/gander/work/queue-299/run1/syntax-1.busy.log
+03471d51f50a2607f65bc6bfc5764119421fedd003bd569b5fc9ce7fa57c6be6  agents/gander/work/queue-299/run1/syntax-1.command.json
+e429b112499bf432c8f561b02119025476f57f03208ee67a85282802a431de2d  agents/gander/work/queue-299/run1/syntax-1.load.json
+e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  agents/gander/work/queue-299/run1/syntax-1.log
+ba45d57c9b255311bb220598f90c1a4fb01b420511974c28f102881cbd7df21a  agents/gander/work/queue-299/run1/syntax-2.busy.log
+287a012953621602eaf7eb129a836b2e3be076b72d6da7131b5e605d2bb5c4ff  agents/gander/work/queue-299/run1/syntax-2.command.json
+795e4a257a3836bfe65ddfa5a734ed239145d1add7d543d52263707467e2345d  agents/gander/work/queue-299/run1/syntax-2.load.json
+e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  agents/gander/work/queue-299/run1/syntax-2.log
+13987615007f93b11780d44e827ce6a9a57e4373f0074a838ca87b762758d053  agents/gander/work/queue-299/run1/window.py
@@ -0,0 +1,38 @@
+# Row 299 gate run 1
+
+Grant sage-3268. Candidate ffa93b054f28852a75017928d8478bdf9046e717, base 80793d824, manifest 277ace0b4274970d5bd4c05cf8fe99aa1e7ebc469a719e4cefcb334a75d3865d. Run 2026-10-23T07:26:52Z to 2026-10-23T07:50:16Z, 1404 seconds by UTC timestamps. No carried result or retry.
+
+The preflight passed. All three case1 files and all 59 CLI files ran whole. Unmutated total: 1076 pass, 0 fail, 0 skip, 0 cancelled, 0 todo. Mutants: 6/6 killed by named assertions, no external timeout. All six restores match their original SHA256 and have clean git status. Sweep: 0 gate residuals; four MCP harness processes predate the gate, with start times in sweep.json.
+
+| Stage | Pass | Fail | Skip | Wall seconds | Start load |
+| --- | ---: | ---: | ---: | ---: | --- |
+| case1-whole-1 | 53 | 0 | 0 | 239.134 | 1.05 |
+| case1-whole-2 | 53 | 0 | 0 | 240.044 | 3.41 |
+| case1-whole-3 | 53 | 0 | 0 | 235.011 | 2.08 |
+| cli-whole | 917 | 0 | 0 | 631.848 | 1.91 |
+
+CLI sampled 1-minute load range: 1.54 to 7.17. Ambient >=4 was a target, not a wait condition. No stress process. Each of the three case1 start loads and the CLI start/load samples are recorded. The direct readings below come from the test diagnostics, with fixed inner [1.25,2.75) and outer [3.25,4.75) bands.
+
+| Stage | Inner exec | Inner hop | Outer exec | Outer hop |
+| --- | ---: | ---: | ---: | ---: |
+| case1-whole-1 | 2.25 | 2.27 | 4 | 4 |
+| case1-whole-2 | 2.29 | 2.28 | 4 | 4.01 |
+| case1-whole-3 | 2.25 | 2.26 | 4 | 4 |
+| cli-whole | 2.27 | 2.27 | 4.01 | 4.01 |
+
+| Mutant | Named killer | Assertion | Direct interval | Wall seconds |
+| --- | --- | --- | --- | ---: |
+| M1 | row253 C4 P10 inner reason holds under both sudo models | case1-accept.test.mjs:450 lower band | 1.23 | 4.774 |
+| M2 | row253 C4 P10 inner reason holds under both sudo models | case1-accept.test.mjs:450 upper band | 3.24 | 6.768 |
+| M3 | row253 C4 P10 outer reason holds under both sudo models | case1-accept.test.mjs:452 outer lower band | 3.01 | 6.618 |
+| M4 | row253 C4 P10 outer reason holds under both sudo models | case1-accept.test.mjs:445 exact probe-outer-timeout reason | not reached | 9.023 |
+| M5 | row253 C4 P10 inner reason holds under both sudo models | case1-accept.test.mjs:448 required complete pair (doesNotThrow) | not reached | 5.816 |
+| M6 | row299 P10 observer records are complete and ordered | case1-accept.test.mjs:418 equal readings must refuse (throws) | not reached | 0.164 |
+
+M1 measured 1.23 s, below 1.25 by only 0.02 s. This is the anticipated startup-overhead risk. It died at the intended lower-band assertion; no tuning or retry was used.
+
+M4 classification follows sage-3271, sage-3273 and mos-1426. The unchanged 7000 ms fixture guard returned; the named outer test failed with ERR_ASSERTION / match at line 445 because P10 reported reason=probe-inner-command instead of exact reason=probe-outer-timeout. It returned rc 1 in 9.023 s including the baseline. No external command timeout or cleanup-only failure was counted. Raw evidence: M4.log, M4.command.json, results.json guard_return_receipt and clean restore.
+
+sage-3274 reported a read-only canonical queue polling overlap for receipts window 07:20–07:26Z. It wrote nothing and touched no worktree or test path. This is accepted ambient load, not a rerun condition; ambient-overlap.json keeps the report.
+
+All raw logs, command headers with timeout -k 10, TMPDIRs, per-stage load samples, controller, results, and restores are in this directory. Every run used a fresh short TMPDIR directly under /mnt/storage/scratch/tmp. No source or assertion changed during the gate.
@@ -0,0 +1,10 @@
+{
+  "source": "sage-3274",
+  "reported_utc": "2026-10-23T07:27:24Z",
+  "window_utc": [
+    "2026-10-23T07:20:00Z",
+    "2026-10-23T07:26:00Z"
+  ],
+  "activity": "Read-only canonical queue show 303 every 20 seconds by Duckworth, stopped; no writes or test/worktree paths touched",
+  "classification": "Allowed ambient overlap under mos-1409, no rerun or recheck"
+}
@@ -0,0 +1 @@
+CLEAR
@@ -0,0 +1,19 @@
+{
+  "label": "case1-whole-1",
+  "argv": [
+    "timeout",
+    "-k",
+    "10",
+    "1200",
+    "node",
+    "--test",
+    "--test-reporter=tap",
+    "packages/cli/tests/case1-accept.test.mjs"
+  ],
+  "limit_seconds": 1200,
+  "tmpdir": "/mnt/storage/scratch/tmp/geSGqXZ",
+  "started_utc": "2026-10-23T07:26:57Z",
+  "start_load": "1.05 1.69 2.00 1/6640 205920",
+  "log": "/mnt/storage/scratch/tmp/gABO62Q/records/case1-whole-1.log",
+  "expected_red": false
+}
@@ -0,0 +1,242 @@
+[
+  {
+    "wall_seconds": 0.0,
+    "utc": "2026-10-23T07:26:57Z",
+    "load": "1.05 1.69 2.00 5/6641 205921"
+  },
+  {
+    "wall_seconds": 5.001,
+    "utc": "2026-10-23T07:27:02Z",
+    "load": "1.05 1.68 1.99 2/6664 208983"
+  },
+  {
+    "wall_seconds": 10.001,
+    "utc": "2026-10-23T07:27:07Z",
+    "load": "1.12 1.69 1.99 4/6679 212072"
+  },
+  {
+    "wall_seconds": 15.001,
+    "utc": "2026-10-23T07:27:12Z",
+    "load": "1.19 1.69 1.99 4/6676 215231"
+  },
+  {
+    "wall_seconds": 20.001,
+    "utc": "2026-10-23T07:27:17Z",
+    "load": "1.26 1.70 1.99 2/6696 218364"
+  },
+  {
+    "wall_seconds": 25.002,
+    "utc": "2026-10-23T07:27:22Z",
+    "load": "1.24 1.69 1.99 2/6689 221537"
+  },
+  {
+    "wall_seconds": 30.002,
+    "utc": "2026-10-23T07:27:27Z",
+    "load": "1.22 1.67 1.98 2/6683 224753"
+  },
+  {
+    "wall_seconds": 35.002,
+    "utc": "2026-10-23T07:27:32Z",
+    "load": "1.36 1.70 1.99 3/6686 228651"
+  },
+  {
+    "wall_seconds": 40.002,
+    "utc": "2026-10-23T07:27:37Z",
+    "load": "1.33 1.68 1.98 3/6709 231645"
+  },
+  {
+    "wall_seconds": 45.003,
+    "utc": "2026-10-23T07:27:42Z",
+    "load": "1.22 1.66 1.97 2/6719 234495"
+  },
+  {
+    "wall_seconds": 50.003,
+    "utc": "2026-10-23T07:27:47Z",
+    "load": "1.21 1.64 1.97 3/6710 235979"
+  },
+  {
+    "wall_seconds": 55.003,
+    "utc": "2026-10-23T07:27:52Z",
+    "load": "1.27 1.65 1.97 3/6724 238345"
+  },
+  {
+    "wall_seconds": 60.003,
+    "utc": "2026-10-23T07:27:57Z",
+    "load": "1.33 1.66 1.97 4/6734 240013"
+  },
+  {
+    "wall_seconds": 65.004,
+    "utc": "2026-10-23T07:28:02Z",
+    "load": "1.38 1.66 1.97 1/6730 240697"
+  },
+  {
+    "wall_seconds": 70.004,
+    "utc": "2026-10-23T07:28:07Z",
+    "load": "1.43 1.67 1.97 4/6727 243478"
+  },
+  {
+    "wall_seconds": 75.004,
+    "utc": "2026-10-23T07:28:12Z",
+    "load": "1.48 1.67 1.97 2/6745 245706"
+  },
+  {
+    "wall_seconds": 80.004,
+    "utc": "2026-10-23T07:28:17Z",
+    "load": "1.44 1.66 1.96 2/6741 247933"
+  },
+  {
+    "wall_seconds": 85.005,
+    "utc": "2026-10-23T07:28:22Z",
+    "load": "1.48 1.67 1.97 1/6742 249267"
+  },
+  {
+    "wall_seconds": 90.005,
+    "utc": "2026-10-23T07:28:27Z",
+    "load": "1.53 1.68 1.97 1/6710 251793"
+  },
+  {
+    "wall_seconds": 95.005,
+    "utc": "2026-10-23T07:28:32Z",
+    "load": "1.48 1.66 1.96 2/6712 253250"
+  },
+  {
+    "wall_seconds": 100.005,
+    "utc": "2026-10-23T07:28:37Z",
+    "load": "1.53 1.67 1.96 4/6719 256547"
+  },
+  {
+    "wall_seconds": 105.006,
+    "utc": "2026-10-23T07:28:42Z",
+    "load": "1.56 1.68 1.96 5/6721 259938"
+  },
+  {
+    "wall_seconds": 110.006,
+    "utc": "2026-10-23T07:28:47Z",
+    "load": "1.68 1.70 1.97 4/6762 263119"
+  },
+  {
+    "wall_seconds": 115.006,
+    "utc": "2026-10-23T07:28:52Z",
+    "load": "1.86 1.74 1.98 3/6741 266483"
+  },
+  {
+    "wall_seconds": 120.006,
+    "utc": "2026-10-23T07:28:57Z",
+    "load": "2.20 1.81 2.00 2/6714 269932"
+  },
+  {
+    "wall_seconds": 125.006,
+    "utc": "2026-10-23T07:29:02Z",
+    "load": "2.42 1.86 2.02 6/6713 274031"
+  },
+  {
+    "wall_seconds": 130.007,
+    "utc": "2026-10-23T07:29:07Z",
+    "load": "2.55 1.90 2.03 3/6718 277881"
+  },
+  {
+    "wall_seconds": 135.007,
+    "utc": "2026-10-23T07:29:12Z",
+    "load": "2.58 1.91 2.03 2/6741 281990"
+  },
+  {
+    "wall_seconds": 140.007,
+    "utc": "2026-10-23T07:29:17Z",
+    "load": "2.62 1.93 2.04 4/6740 286159"
+  },
+  {
+    "wall_seconds": 145.007,
+    "utc": "2026-10-23T07:29:22Z",
+    "load": "2.73 1.97 2.05 2/6748 290530"
+  },
+  {
+    "wall_seconds": 150.008,
+    "utc": "2026-10-23T07:29:27Z",
+    "load": "2.99 2.04 2.07 2/6701 294400"
+  },
+  {
+    "wall_seconds": 155.008,
+    "utc": "2026-10-23T07:29:32Z",
+    "load": "3.07 2.07 2.08 3/6694 297610"
+  },
+  {
+    "wall_seconds": 160.008,
+    "utc": "2026-10-23T07:29:37Z",
+    "load": "3.15 2.10 2.09 5/6705 300813"
+  },
+  {
+    "wall_seconds": 165.008,
+    "utc": "2026-10-23T07:29:42Z",
+    "load": "3.05 2.10 2.09 2/6703 304321"
+  },
+  {
+    "wall_seconds": 170.008,
+    "utc": "2026-10-23T07:29:47Z",
+    "load": "3.05 2.11 2.10 3/6739 307613"
+  },
+  {
+    "wall_seconds": 175.009,
+    "utc": "2026-10-23T07:29:52Z",
+    "load": "2.97 2.11 2.10 2/6745 310850"
+  },
+  {
+    "wall_seconds": 180.009,
+    "utc": "2026-10-23T07:29:57Z",
+    "load": "2.89 2.11 2.09 4/6709 314125"
+  },
+  {
+    "wall_seconds": 185.009,
+    "utc": "2026-10-23T07:30:02Z",
+    "load": "3.14 2.17 2.12 4/6698 317556"
+  },
+  {
+    "wall_seconds": 190.009,
+    "utc": "2026-10-23T07:30:07Z",
+    "load": "3.93 2.35 2.17 2/6708 321964"
+  },
+  {
+    "wall_seconds": 195.009,
+    "utc": "2026-10-23T07:30:12Z",
+    "load": "3.93 2.38 2.18 2/6713 325120"
+  },
+  {
+    "wall_seconds": 200.01,
+    "utc": "2026-10-23T07:30:17Z",
+    "load": "3.78 2.38 2.18 3/6721 328405"
+  },
+  {
+    "wall_seconds": 205.01,
+    "utc": "2026-10-23T07:30:22Z",
+    "load": "3.80 2.40 2.19 2/6725 331643"
+  },
+  {
+    "wall_seconds": 210.01,
+    "utc": "2026-10-23T07:30:27Z",
+    "load": "3.89 2.45 2.21 5/6714 335757"
+  },
+  {
+    "wall_seconds": 215.01,
+    "utc": "2026-10-23T07:30:32Z",
+    "load": "3.74 2.44 2.21 2/6706 339141"
+  },
+  {
+    "wall_seconds": 220.01,
+    "utc": "2026-10-23T07:30:37Z",
+    "load": "3.60 2.43 2.20 3/6722 342107"
+  },
+  {
+    "wall_seconds": 225.011,
+    "utc": "2026-10-23T07:30:42Z",
+    "load": "3.63 2.46 2.21 4/6716 345179"
+  },
+  {
+    "wall_seconds": 230.011,
+    "utc": "2026-10-23T07:30:47Z",
+    "load": "3.66 2.48 2.22 2/6740 349322"
+  },
+  {
+    "wall_seconds": 235.011,
+    "utc": "2026-10-23T07:30:52Z",
+    "load": "3.53 2.47 2.22 3/6745 352500"
+  }
+]
@@ -0,0 +1,332 @@
+TAP version 13
+# Subtest: row253 socket observation uses configured root, metadata and the Console peer without sending bytes
+ok 1 - row253 socket observation uses configured root, metadata and the Console peer without sending bytes
+  ---
+  duration_ms: 1855.818133
+  type: 'test'
+  ...
+# Subtest: row253 P10 refuses unsafe metadata, wrong peers and an unsafe Python without claiming closure
+ok 2 - row253 P10 refuses unsafe metadata, wrong peers and an unsafe Python without claiming closure
+  ---
+  duration_ms: 29336.896059
+  type: 'test'
+  ...
+# Subtest: row253 acceptance rejects bad config and unsupported copies before talk
+ok 3 - row253 acceptance rejects bad config and unsupported copies before talk
+  ---
+  duration_ms: 1492.589344
+  type: 'test'
+  ...
+# Subtest: row253 stalled peer observation ends within its bound without leaving a reader
+ok 4 - row253 stalled peer observation ends within its bound without leaving a reader
+  ---
+  duration_ms: 3995.592937
+  type: 'test'
+  ...
+# Subtest: row253 P8 refuses both retired TCP and board listeners
+ok 5 - row253 P8 refuses both retired TCP and board listeners
+  ---
+  duration_ms: 3885.105115
+  type: 'test'
+  ...
+# Subtest: row253 C4 acceptance query inner reason holds under both sudo models
+ok 6 - row253 C4 acceptance query inner reason holds under both sudo models
+  ---
+  duration_ms: 10722.031738
+  type: 'test'
+  ...
+# Subtest: row253 C4 acceptance query outer reason discards stdout and names residual cleanup
+ok 7 - row253 C4 acceptance query outer reason discards stdout and names residual cleanup
+  ---
+  duration_ms: 14183.471618
+  type: 'test'
+  ...
+# Subtest: row253 C4 acceptance query overflow is output-limit in both models
+ok 8 - row253 C4 acceptance query overflow is output-limit in both models
+  ---
+  duration_ms: 492.660764
+  type: 'test'
+  ...
+# Subtest: row299 P10 timing copy preserves shipped bytes and isolates observer variables
+ok 9 - row299 P10 timing copy preserves shipped bytes and isolates observer variables
+  ---
+  duration_ms: 0.874413
+  type: 'test'
+  ...
+# Subtest: row299 P10 observers preserve stdout stderr status and the EXIT trap
+ok 10 - row299 P10 observers preserve stdout stderr status and the EXIT trap
+  ---
+  duration_ms: 3.117643
+  type: 'test'
+  ...
+# Subtest: row299 P10 observer records are complete and ordered
+ok 11 - row299 P10 observer records are complete and ordered
+  ---
+  duration_ms: 0.494254
+  type: 'test'
+  ...
+# Subtest: row253 C4 P10 inner reason holds under both sudo models
+ok 12 - row253 C4 P10 inner reason holds under both sudo models
+  ---
+  duration_ms: 11837.509919
+  type: 'test'
+  ...
+# {"fault":"inner","mode":"exec","baselineSeconds":1.8914214159999974,"faultSeconds":3.974223306999993,"probeSeconds":2.25}
+# {"fault":"inner","mode":"hop","baselineSeconds":1.8980776110000006,"faultSeconds":4.004310756999999,"probeSeconds":2.27}
+# Subtest: row253 C4 P10 outer reason holds under both sudo models
+ok 13 - row253 C4 P10 outer reason holds under both sudo models
+  ---
+  duration_ms: 15238.957947
+  type: 'test'
+  ...
+# {"fault":"outer","mode":"exec","baselineSeconds":1.8725320299999875,"faultSeconds":5.715126132999998,"probeSeconds":4}
+# {"fault":"outer","mode":"hop","baselineSeconds":1.8715896639999992,"faultSeconds":5.726812752999991,"probeSeconds":4}
+# Subtest: row253 C4 P10 overflow reason holds under both sudo models
+ok 14 - row253 C4 P10 overflow reason holds under both sudo models
+  ---
+  duration_ms: 3757.733977
+  type: 'test'
+  ...
+# Subtest: row 195 accept: every check passing exits 0, with each P mark and counts that match the lines
+ok 15 - row 195 accept: every check passing exits 0, with each P mark and counts that match the lines
+  ---
+  duration_ms: 1879.003371
+  type: 'test'
+  ...
+# Subtest: row 195 accept: exits 1 with each F check failing alone, and its line names it
+ok 16 - row 195 accept: exits 1 with each F check failing alone, and its line names it
+  ---
+  duration_ms: 21149.551708
+  type: 'test'
+  ...
+# Subtest: row 195 accept: F3 fails on exit 0 with no reply line, and its evidence takes talk's error
+ok 17 - row 195 accept: F3 fails on exit 0 with no reply line, and its evidence takes talk's error
+  ---
+  duration_ms: 3936.849005
+  type: 'test'
+  ...
+# Subtest: row 195 accept: F1 fails on a unit that isn't active or isn't User=mosaic
+ok 18 - row 195 accept: F1 fails on a unit that isn't active or isn't User=mosaic
+  ---
+  duration_ms: 3519.175544
+  type: 'test'
+  ...
+# Subtest: row 195 accept: F2 fails when healthz doesn't answer and when another pid holds the port
+ok 19 - row 195 accept: F2 fails when healthz doesn't answer and when another pid holds the port
+  ---
+  duration_ms: 3846.383271
+  type: 'test'
+  ...
+# Subtest: row 195 accept: F5 fails on unpriv_bwrap (enforce), on complain and on a trailing space
+ok 20 - row 195 accept: F5 fails on unpriv_bwrap (enforce), on complain and on a trailing space
+  ---
+  duration_ms: 8775.592742
+  type: 'test'
+  ...
+# Subtest: row 195 accept: F5 fails with no bwrap of mosaic's, and passes on comm alone
+ok 21 - row 195 accept: F5 fails with no bwrap of mosaic's, and passes on comm alone
+  ---
+  duration_ms: 4053.330344
+  type: 'test'
+  ...
+# Subtest: row 195 accept: F6 fails on a stub that prints nothing, on a path outside claude-<pin> and on a .. segment
+ok 22 - row 195 accept: F6 fails on a stub that prints nothing, on a path outside claude-<pin> and on a .. segment
+  ---
+  duration_ms: 5151.877925
+  type: 'test'
+  ...
+# Subtest: row 195 accept: F7 fails on two live PM launches, one for another business, and no launch.by
+ok 23 - row 195 accept: F7 fails on two live PM launches, one for another business, and no launch.by
+  ---
+  duration_ms: 5579.901611
+  type: 'test'
+  ...
+# Subtest: row 195 accept: F8 fails on 0640, on another owner and on a symlink, and never prints the credential
+ok 24 - row 195 accept: F8 fails on 0640, on another owner and on a symlink, and never prints the credential
+  ---
+  duration_ms: 5585.627061
+  type: 'test'
+  ...
+# Subtest: row 195 accept: F9 fails on another owner, a group-writable mode and a number for the flag
+ok 25 - row 195 accept: F9 fails on another owner, a group-writable mode and a number for the flag
+  ---
+  duration_ms: 5536.898215
+  type: 'test'
+  ...
+# Subtest: row 195 accept: F9 won't run --node as root off the pin path or with a writable directory above it
+ok 26 - row 195 accept: F9 won't run --node as root off the pin path or with a writable directory above it
+  ---
+  duration_ms: 5246.446744
+  type: 'test'
+  ...
+# Subtest: row 195 accept: F11 fails on one *.json under discord/ and passes on an empty directory
+ok 27 - row 195 accept: F11 fails on one *.json under discord/ and passes on an empty directory
+  ---
+  duration_ms: 3711.063365
+  type: 'test'
+  ...
+# Subtest: row 195 accept: each P check reports unnamed on its fault, and the exit stays 0
+ok 28 - row 195 accept: each P check reports unnamed on its fault, and the exit stays 0
+  ---
+  duration_ms: 16646.70564
+  type: 'test'
+  ...
+# Subtest: row 195 accept: P2 is unnamed with a supplementary group, and P5 names docker
+ok 29 - row 195 accept: P2 is unnamed with a supplementary group, and P5 names docker
+  ---
+  duration_ms: 3728.983
+  type: 'test'
+  ...
+# Subtest: row 195 accept: P5 is closed with no jarvis account, and P2 with an empty authorized_keys
+ok 30 - row 195 accept: P5 is closed with no jarvis account, and P2 with an empty authorized_keys
+  ---
+  duration_ms: 1843.108704
+  type: 'test'
+  ...
+# Subtest: row 195 accept: P9 is unnamed once for each item missing
+ok 31 - row 195 accept: P9 is unnamed once for each item missing
+  ---
+  duration_ms: 9276.56305
+  type: 'test'
+  ...
+# Subtest: row253 accept: P10 fails its observation with another peer; P11 with the unit disabled
+ok 32 - row253 accept: P10 fails its observation with another peer; P11 with the unit disabled
+  ---
+  duration_ms: 3822.919805
+  type: 'test'
+  ...
+# Subtest: row 195 accept: every P check unnamed together still exits 0
+ok 33 - row 195 accept: every P check unnamed together still exits 0
+  ---
+  duration_ms: 1656.312404
+  type: 'test'
+  ...
+# Subtest: row 195 accept: a bad args file refuses with exit 2 before any check, each for its own reason
+ok 34 - row 195 accept: a bad args file refuses with exit 2 before any check, each for its own reason
+  ---
+  duration_ms: 97.36437
+  type: 'test'
+  ...
+# Subtest: row 195 accept: usage errors and a run without --root as a user exit 2
+ok 35 - row 195 accept: usage errors and a run without --root as a user exit 2
+  ---
+  duration_ms: 10.881957
+  type: 'test'
+  ...
+# Subtest: row 195 accept: every in-instance call goes through sudo -u mosaic -H env PATH=<node dir>:...
+ok 36 - row 195 accept: every in-instance call goes through sudo -u mosaic -H env PATH=<node dir>:...
+  ---
+  duration_ms: 1850.760145
+  type: 'test'
+  ...
+# Subtest: row 195 accept: the host check runs with --check and never --enforce
+ok 37 - row 195 accept: the host check runs with --check and never --enforce
+  ---
+  duration_ms: 1869.942933
+  type: 'test'
+  ...
+# Subtest: row276 legacy call inventory pins every production bound and the conversation contract
+ok 38 - row276 legacy call inventory pins every production bound and the conversation contract
+  ---
+  duration_ms: 0.366334
+  type: 'test'
+  ...
+# Subtest: row276 talk legacy inner timeout cleans both sudo models
+ok 39 - row276 talk legacy inner timeout cleans both sudo models
+  ---
+  duration_ms: 1692.158566
+  type: 'test'
+  ...
+# Subtest: row276 precheck legacy inner timeout cleans both sudo models
+ok 40 - row276 precheck legacy inner timeout cleans both sudo models
+  ---
+  duration_ms: 1720.136504
+  type: 'test'
+  ...
+# Subtest: row276 claude-version legacy inner timeout cleans both sudo models
+ok 41 - row276 claude-version legacy inner timeout cleans both sudo models
+  ---
+  duration_ms: 1702.886014
+  type: 'test'
+  ...
+# Subtest: row276 pm-list legacy inner timeout cleans both sudo models
+ok 42 - row276 pm-list legacy inner timeout cleans both sudo models
+  ---
+  duration_ms: 1710.920935
+  type: 'test'
+  ...
+# Subtest: row276 node-version legacy inner timeout cleans both sudo models
+ok 43 - row276 node-version legacy inner timeout cleans both sudo models
+  ---
+  duration_ms: 1712.683898
+  type: 'test'
+  ...
+# Subtest: row276 legacy streams and display status preserve failures without granting success
+ok 44 - row276 legacy streams and display status preserve failures without granting success
+  ---
+  duration_ms: 2671.771328
+  type: 'test'
+  ...
+# Subtest: row276 trailer grammar cannot make supervisor failure pass
+ok 45 - row276 trailer grammar cannot make supervisor failure pass
+  ---
+  duration_ms: 2089.079622
+  type: 'test'
+  ...
+# Subtest: row276 earlier forged trailer and appended zero remain failures
+ok 46 - row276 earlier forged trailer and appended zero remain failures
+  ---
+  duration_ms: 513.433074
+  type: 'test'
+  ...
+# Subtest: row276 precheck outer bound discards success status and fixture cleans residual
+ok 47 - row276 precheck outer bound discards success status and fixture cleans residual
+  ---
+  duration_ms: 2173.848153
+  type: 'test'
+  ...
+# Subtest: row276 case1 capture and legacy tools refuse unsafe system tools
+ok 48 - row276 case1 capture and legacy tools refuse unsafe system tools
+  ---
+  duration_ms: 76.5521
+  type: 'test'
+  ...
+# Subtest: row276 stderr retention is bounded and keeps the final diagnostic
+ok 49 - row276 stderr retention is bounded and keeps the final diagnostic
+  ---
+  duration_ms: 278.525167
+  type: 'test'
+  ...
+# Subtest: row276 version and PM checks refuse successful-looking stdout on supervisor failure
+ok 50 - row276 version and PM checks refuse successful-looking stdout on supervisor failure
+  ---
+  duration_ms: 15.742297
+  type: 'test'
+  ...
+# Subtest: row276 full acceptance keeps all five healthy calls in both sudo models
+ok 51 - row276 full acceptance keeps all five healthy calls in both sudo models
+  ---
+  duration_ms: 3757.894895
+  type: 'test'
+  ...
+# Subtest: row276 vanished pid stat read returns 3 with empty stderr in both scripts
+ok 52 - row276 vanished pid stat read returns 3 with empty stderr in both scripts
+  ---
+  duration_ms: 4.785932
+  type: 'test'
+  ...
+# Subtest: row276 legacy stdout snapshot preserves exact bytes on success and command failure
+ok 53 - row276 legacy stdout snapshot preserves exact bytes on success and command failure
+  ---
+  duration_ms: 3281.165451
+  type: 'test'
+  ...
+1..53
+# tests 53
+# suites 0
+# pass 53
+# fail 0
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 239100.197017
@@ -0,0 +1 @@
+CLEAR
@@ -0,0 +1,19 @@
+{
+  "label": "case1-whole-2",
+  "argv": [
+    "timeout",
+    "-k",
+    "10",
+    "1200",
+    "node",
+    "--test",
+    "--test-reporter=tap",
+    "packages/cli/tests/case1-accept.test.mjs"
+  ],
+  "limit_seconds": 1200,
+  "tmpdir": "/mnt/storage/scratch/tmp/gd0qwWL",
+  "started_utc": "2026-10-23T07:30:57Z",
+  "start_load": "3.41 2.47 2.22 4/6666 357541",
+  "log": "/mnt/storage/scratch/tmp/gABO62Q/records/case1-whole-2.log",
+  "expected_red": false
+}
@@ -0,0 +1,247 @@
+[
+  {
+    "wall_seconds": 0.0,
+    "utc": "2026-10-23T07:30:57Z",
+    "load": "3.41 2.47 2.22 8/6667 357542"
+  },
+  {
+    "wall_seconds": 5.001,
+    "utc": "2026-10-23T07:31:02Z",
+    "load": "3.21 2.44 2.21 6/6697 360865"
+  },
+  {
+    "wall_seconds": 10.001,
+    "utc": "2026-10-23T07:31:07Z",
+    "load": "3.44 2.50 2.23 2/6704 364103"
+  },
+  {
+    "wall_seconds": 15.001,
+    "utc": "2026-10-23T07:31:12Z",
+    "load": "3.24 2.48 2.23 2/6696 367319"
+  },
+  {
+    "wall_seconds": 20.001,
+    "utc": "2026-10-23T07:31:17Z",
+    "load": "3.14 2.47 2.23 8/6721 370622"
+  },
+  {
+    "wall_seconds": 25.002,
+    "utc": "2026-10-23T07:31:22Z",
+    "load": "3.05 2.46 2.22 3/6707 373850"
+  },
+  {
+    "wall_seconds": 30.002,
+    "utc": "2026-10-23T07:31:27Z",
+    "load": "2.89 2.44 2.22 2/6664 377071"
+  },
+  {
+    "wall_seconds": 35.002,
+    "utc": "2026-10-23T07:31:32Z",
+    "load": "2.73 2.41 2.21 2/6679 380056"
+  },
+  {
+    "wall_seconds": 40.002,
+    "utc": "2026-10-23T07:31:37Z",
+    "load": "2.52 2.37 2.20 4/6709 384877"
+  },
+  {
+    "wall_seconds": 45.002,
+    "utc": "2026-10-23T07:31:42Z",
+    "load": "2.71 2.42 2.21 3/6727 386330"
+  },
+  {
+    "wall_seconds": 50.003,
+    "utc": "2026-10-23T07:31:47Z",
+    "load": "2.58 2.39 2.21 1/6740 387775"
+  },
+  {
+    "wall_seconds": 55.003,
+    "utc": "2026-10-23T07:31:52Z",
+    "load": "2.69 2.42 2.22 9/6763 389481"
+  },
+  {
+    "wall_seconds": 60.003,
+    "utc": "2026-10-23T07:31:57Z",
+    "load": "2.56 2.39 2.21 3/6722 390241"
+  },
+  {
+    "wall_seconds": 65.003,
+    "utc": "2026-10-23T07:32:02Z",
+    "load": "2.43 2.37 2.20 4/6732 391752"
+  },
+  {
+    "wall_seconds": 70.004,
+    "utc": "2026-10-23T07:32:07Z",
+    "load": "2.40 2.36 2.20 9/6738 395390"
+  },
+  {
+    "wall_seconds": 75.004,
+    "utc": "2026-10-23T07:32:12Z",
+    "load": "2.44 2.38 2.21 6/6731 398840"
+  },
+  {
+    "wall_seconds": 80.004,
+    "utc": "2026-10-23T07:32:17Z",
+    "load": "2.57 2.40 2.22 3/6790 402895"
+  },
+  {
+    "wall_seconds": 85.004,
+    "utc": "2026-10-23T07:32:22Z",
+    "load": "2.60 2.41 2.22 1/6721 405197"
+  },
+  {
+    "wall_seconds": 90.005,
+    "utc": "2026-10-23T07:32:27Z",
+    "load": "2.48 2.39 2.21 6/6682 407571"
+  },
+  {
+    "wall_seconds": 95.005,
+    "utc": "2026-10-23T07:32:32Z",
+    "load": "2.44 2.38 2.21 3/6688 408595"
+  },
+  {
+    "wall_seconds": 100.005,
+    "utc": "2026-10-23T07:32:37Z",
+    "load": "2.32 2.36 2.21 4/6690 411784"
+  },
+  {
+    "wall_seconds": 105.005,
+    "utc": "2026-10-23T07:32:42Z",
+    "load": "2.38 2.37 2.21 2/6695 414989"
+  },
+  {
+    "wall_seconds": 110.006,
+    "utc": "2026-10-23T07:32:47Z",
+    "load": "2.27 2.35 2.20 2/6747 418296"
+  },
+  {
+    "wall_seconds": 115.006,
+    "utc": "2026-10-23T07:32:52Z",
+    "load": "2.16 2.32 2.20 3/6725 421487"
+  },
+  {
+    "wall_seconds": 120.006,
+    "utc": "2026-10-23T07:32:57Z",
+    "load": "2.31 2.35 2.21 2/6717 424642"
+  },
+  {
+    "wall_seconds": 125.006,
+    "utc": "2026-10-23T07:33:02Z",
+    "load": "2.37 2.36 2.21 2/6711 427881"
+  },
+  {
+    "wall_seconds": 130.007,
+    "utc": "2026-10-23T07:33:07Z",
+    "load": "2.34 2.36 2.21 8/6702 431078"
+  },
+  {
+    "wall_seconds": 135.007,
+    "utc": "2026-10-23T07:33:12Z",
+    "load": "2.55 2.40 2.22 4/6715 434482"
+  },
+  {
+    "wall_seconds": 140.007,
+    "utc": "2026-10-23T07:33:17Z",
+    "load": "2.59 2.41 2.23 8/6722 437629"
+  },
+  {
+    "wall_seconds": 145.007,
+    "utc": "2026-10-23T07:33:22Z",
+    "load": "3.10 2.52 2.27 5/6730 441654"
+  },
+  {
+    "wall_seconds": 150.008,
+    "utc": "2026-10-23T07:33:27Z",
+    "load": "2.93 2.50 2.26 3/6688 445391"
+  },
+  {
+    "wall_seconds": 155.008,
+    "utc": "2026-10-23T07:33:32Z",
+    "load": "2.86 2.49 2.26 2/6720 449750"
+  },
+  {
+    "wall_seconds": 160.008,
+    "utc": "2026-10-23T07:33:37Z",
+    "load": "2.63 2.45 2.24 3/6720 454134"
+  },
+  {
+    "wall_seconds": 165.008,
+    "utc": "2026-10-23T07:33:42Z",
+    "load": "2.58 2.44 2.24 3/6705 458552"
+  },
+  {
+    "wall_seconds": 170.008,
+    "utc": "2026-10-23T07:33:47Z",
+    "load": "2.53 2.43 2.24 2/6751 462649"
+  },
+  {
+    "wall_seconds": 175.009,
+    "utc": "2026-10-23T07:33:52Z",
+    "load": "2.49 2.42 2.24 2/6728 466002"
+  },
+  {
+    "wall_seconds": 180.009,
+    "utc": "2026-10-23T07:33:57Z",
+    "load": "2.37 2.40 2.23 4/6684 469149"
+  },
+  {
+    "wall_seconds": 185.009,
+    "utc": "2026-10-23T07:34:02Z",
+    "load": "2.50 2.43 2.24 10/6506 472229"
+  },
+  {
+    "wall_seconds": 190.009,
+    "utc": "2026-10-23T07:34:07Z",
+    "load": "2.78 2.49 2.26 3/6479 475928"
+  },
+  {
+    "wall_seconds": 195.01,
+    "utc": "2026-10-23T07:34:12Z",
+    "load": "2.64 2.46 2.26 3/6479 479085"
+  },
+  {
+    "wall_seconds": 200.01,
+    "utc": "2026-10-23T07:34:17Z",
+    "load": "2.51 2.44 2.25 3/6502 482380"
+  },
+  {
+    "wall_seconds": 205.01,
+    "utc": "2026-10-23T07:34:22Z",
+    "load": "2.63 2.46 2.26 4/6485 486156"
+  },
+  {
+    "wall_seconds": 210.01,
+    "utc": "2026-10-23T07:34:27Z",
+    "load": "2.50 2.44 2.25 2/6457 489465"
+  },
+  {
+    "wall_seconds": 215.011,
+    "utc": "2026-10-23T07:34:32Z",
+    "load": "2.38 2.41 2.25 2/6462 492613"
+  },
+  {
+    "wall_seconds": 220.011,
+    "utc": "2026-10-23T07:34:37Z",
+    "load": "2.27 2.39 2.24 2/6495 494796"
+  },
+  {
+    "wall_seconds": 225.011,
+    "utc": "2026-10-23T07:34:42Z",
+    "load": "2.08 2.35 2.23 1/6512 496267"
+  },
+  {
+    "wall_seconds": 230.011,
+    "utc": "2026-10-23T07:34:47Z",
+    "load": "2.00 2.33 2.22 2/6527 499579"
+  },
+  {
+    "wall_seconds": 235.012,
+    "utc": "2026-10-23T07:34:52Z",
+    "load": "2.00 2.32 2.22 2/6514 502183"
+  },
+  {
+    "wall_seconds": 240.012,
+    "utc": "2026-10-23T07:34:57Z",
+    "load": "2.00 2.32 2.22 8/6467 505173"
+  }
+]
@@ -0,0 +1,332 @@
+TAP version 13
+# Subtest: row253 socket observation uses configured root, metadata and the Console peer without sending bytes
+ok 1 - row253 socket observation uses configured root, metadata and the Console peer without sending bytes
+  ---
+  duration_ms: 1878.940051
+  type: 'test'
+  ...
+# Subtest: row253 P10 refuses unsafe metadata, wrong peers and an unsafe Python without claiming closure
+ok 2 - row253 P10 refuses unsafe metadata, wrong peers and an unsafe Python without claiming closure
+  ---
+  duration_ms: 29659.298682
+  type: 'test'
+  ...
+# Subtest: row253 acceptance rejects bad config and unsupported copies before talk
+ok 3 - row253 acceptance rejects bad config and unsupported copies before talk
+  ---
+  duration_ms: 1402.898543
+  type: 'test'
+  ...
+# Subtest: row253 stalled peer observation ends within its bound without leaving a reader
+ok 4 - row253 stalled peer observation ends within its bound without leaving a reader
+  ---
+  duration_ms: 3999.716359
+  type: 'test'
+  ...
+# Subtest: row253 P8 refuses both retired TCP and board listeners
+ok 5 - row253 P8 refuses both retired TCP and board listeners
+  ---
+  duration_ms: 3772.509207
+  type: 'test'
+  ...
+# Subtest: row253 C4 acceptance query inner reason holds under both sudo models
+ok 6 - row253 C4 acceptance query inner reason holds under both sudo models
+  ---
+  duration_ms: 10718.848845
+  type: 'test'
+  ...
+# Subtest: row253 C4 acceptance query outer reason discards stdout and names residual cleanup
+ok 7 - row253 C4 acceptance query outer reason discards stdout and names residual cleanup
+  ---
+  duration_ms: 14188.226585
+  type: 'test'
+  ...
+# Subtest: row253 C4 acceptance query overflow is output-limit in both models
+ok 8 - row253 C4 acceptance query overflow is output-limit in both models
+  ---
+  duration_ms: 508.639752
+  type: 'test'
+  ...
+# Subtest: row299 P10 timing copy preserves shipped bytes and isolates observer variables
+ok 9 - row299 P10 timing copy preserves shipped bytes and isolates observer variables
+  ---
+  duration_ms: 0.798822
+  type: 'test'
+  ...
+# Subtest: row299 P10 observers preserve stdout stderr status and the EXIT trap
+ok 10 - row299 P10 observers preserve stdout stderr status and the EXIT trap
+  ---
+  duration_ms: 3.117025
+  type: 'test'
+  ...
+# Subtest: row299 P10 observer records are complete and ordered
+ok 11 - row299 P10 observer records are complete and ordered
+  ---
+  duration_ms: 0.531705
+  type: 'test'
+  ...
+# Subtest: row253 C4 P10 inner reason holds under both sudo models
+ok 12 - row253 C4 P10 inner reason holds under both sudo models
+  ---
+  duration_ms: 12501.629468
+  type: 'test'
+  ...
+# {"fault":"inner","mode":"exec","baselineSeconds":1.9894229939999932,"faultSeconds":4.213512103000001,"probeSeconds":2.29}
+# {"fault":"inner","mode":"hop","baselineSeconds":2.056171266999998,"faultSeconds":4.169351735999997,"probeSeconds":2.28}
+# Subtest: row253 C4 P10 outer reason holds under both sudo models
+ok 13 - row253 C4 P10 outer reason holds under both sudo models
+  ---
+  duration_ms: 15355.835698
+  type: 'test'
+  ...
+# {"fault":"outer","mode":"exec","baselineSeconds":1.9589971570000053,"faultSeconds":5.726783651999998,"probeSeconds":4}
+# {"fault":"outer","mode":"hop","baselineSeconds":1.879084925999996,"faultSeconds":5.732443853999998,"probeSeconds":4.01}
+# Subtest: row253 C4 P10 overflow reason holds under both sudo models
+ok 14 - row253 C4 P10 overflow reason holds under both sudo models
+  ---
+  duration_ms: 3793.194421
+  type: 'test'
+  ...
+# Subtest: row 195 accept: every check passing exits 0, with each P mark and counts that match the lines
+ok 15 - row 195 accept: every check passing exits 0, with each P mark and counts that match the lines
+  ---
+  duration_ms: 1868.627362
+  type: 'test'
+  ...
+# Subtest: row 195 accept: exits 1 with each F check failing alone, and its line names it
+ok 16 - row 195 accept: exits 1 with each F check failing alone, and its line names it
+  ---
+  duration_ms: 21072.838361
+  type: 'test'
+  ...
+# Subtest: row 195 accept: F3 fails on exit 0 with no reply line, and its evidence takes talk's error
+ok 17 - row 195 accept: F3 fails on exit 0 with no reply line, and its evidence takes talk's error
+  ---
+  duration_ms: 3708.467117
+  type: 'test'
+  ...
+# Subtest: row 195 accept: F1 fails on a unit that isn't active or isn't User=mosaic
+ok 18 - row 195 accept: F1 fails on a unit that isn't active or isn't User=mosaic
+  ---
+  duration_ms: 3517.599317
+  type: 'test'
+  ...
+# Subtest: row 195 accept: F2 fails when healthz doesn't answer and when another pid holds the port
+ok 19 - row 195 accept: F2 fails when healthz doesn't answer and when another pid holds the port
+  ---
+  duration_ms: 4025.946308
+  type: 'test'
+  ...
+# Subtest: row 195 accept: F5 fails on unpriv_bwrap (enforce), on complain and on a trailing space
+ok 20 - row 195 accept: F5 fails on unpriv_bwrap (enforce), on complain and on a trailing space
+  ---
+  duration_ms: 8845.119954
+  type: 'test'
+  ...
+# Subtest: row 195 accept: F5 fails with no bwrap of mosaic's, and passes on comm alone
+ok 21 - row 195 accept: F5 fails with no bwrap of mosaic's, and passes on comm alone
+  ---
+  duration_ms: 4126.5763
+  type: 'test'
+  ...
+# Subtest: row 195 accept: F6 fails on a stub that prints nothing, on a path outside claude-<pin> and on a .. segment
+ok 22 - row 195 accept: F6 fails on a stub that prints nothing, on a path outside claude-<pin> and on a .. segment
+  ---
+  duration_ms: 5137.178557
+  type: 'test'
+  ...
+# Subtest: row 195 accept: F7 fails on two live PM launches, one for another business, and no launch.by
+ok 23 - row 195 accept: F7 fails on two live PM launches, one for another business, and no launch.by
+  ---
+  duration_ms: 5691.366549
+  type: 'test'
+  ...
+# Subtest: row 195 accept: F8 fails on 0640, on another owner and on a symlink, and never prints the credential
+ok 24 - row 195 accept: F8 fails on 0640, on another owner and on a symlink, and never prints the credential
+  ---
+  duration_ms: 5730.966972
+  type: 'test'
+  ...
+# Subtest: row 195 accept: F9 fails on another owner, a group-writable mode and a number for the flag
+ok 25 - row 195 accept: F9 fails on another owner, a group-writable mode and a number for the flag
+  ---
+  duration_ms: 5621.584201
+  type: 'test'
+  ...
+# Subtest: row 195 accept: F9 won't run --node as root off the pin path or with a writable directory above it
+ok 26 - row 195 accept: F9 won't run --node as root off the pin path or with a writable directory above it
+  ---
+  duration_ms: 5316.258522
+  type: 'test'
+  ...
+# Subtest: row 195 accept: F11 fails on one *.json under discord/ and passes on an empty directory
+ok 27 - row 195 accept: F11 fails on one *.json under discord/ and passes on an empty directory
+  ---
+  duration_ms: 3764.13795
+  type: 'test'
+  ...
+# Subtest: row 195 accept: each P check reports unnamed on its fault, and the exit stays 0
+ok 28 - row 195 accept: each P check reports unnamed on its fault, and the exit stays 0
+  ---
+  duration_ms: 16622.156132
+  type: 'test'
+  ...
+# Subtest: row 195 accept: P2 is unnamed with a supplementary group, and P5 names docker
+ok 29 - row 195 accept: P2 is unnamed with a supplementary group, and P5 names docker
+  ---
+  duration_ms: 3681.147919
+  type: 'test'
+  ...
+# Subtest: row 195 accept: P5 is closed with no jarvis account, and P2 with an empty authorized_keys
+ok 30 - row 195 accept: P5 is closed with no jarvis account, and P2 with an empty authorized_keys
+  ---
+  duration_ms: 1837.622854
+  type: 'test'
+  ...
+# Subtest: row 195 accept: P9 is unnamed once for each item missing
+ok 31 - row 195 accept: P9 is unnamed once for each item missing
+  ---
+  duration_ms: 9351.705376
+  type: 'test'
+  ...
+# Subtest: row253 accept: P10 fails its observation with another peer; P11 with the unit disabled
+ok 32 - row253 accept: P10 fails its observation with another peer; P11 with the unit disabled
+  ---
+  duration_ms: 3724.049411
+  type: 'test'
+  ...
+# Subtest: row 195 accept: every P check unnamed together still exits 0
+ok 33 - row 195 accept: every P check unnamed together still exits 0
+  ---
+  duration_ms: 1644.081467
+  type: 'test'
+  ...
+# Subtest: row 195 accept: a bad args file refuses with exit 2 before any check, each for its own reason
+ok 34 - row 195 accept: a bad args file refuses with exit 2 before any check, each for its own reason
+  ---
+  duration_ms: 93.429959
+  type: 'test'
+  ...
+# Subtest: row 195 accept: usage errors and a run without --root as a user exit 2
+ok 35 - row 195 accept: usage errors and a run without --root as a user exit 2
+  ---
+  duration_ms: 10.484275
+  type: 'test'
+  ...
+# Subtest: row 195 accept: every in-instance call goes through sudo -u mosaic -H env PATH=<node dir>:...
+ok 36 - row 195 accept: every in-instance call goes through sudo -u mosaic -H env PATH=<node dir>:...
+  ---
+  duration_ms: 1850.954185
+  type: 'test'
+  ...
+# Subtest: row 195 accept: the host check runs with --check and never --enforce
+ok 37 - row 195 accept: the host check runs with --check and never --enforce
+  ---
+  duration_ms: 1829.605146
+  type: 'test'
+  ...
+# Subtest: row276 legacy call inventory pins every production bound and the conversation contract
+ok 38 - row276 legacy call inventory pins every production bound and the conversation contract
+  ---
+  duration_ms: 0.390713
+  type: 'test'
+  ...
+# Subtest: row276 talk legacy inner timeout cleans both sudo models
+ok 39 - row276 talk legacy inner timeout cleans both sudo models
+  ---
+  duration_ms: 1671.508097
+  type: 'test'
+  ...
+# Subtest: row276 precheck legacy inner timeout cleans both sudo models
+ok 40 - row276 precheck legacy inner timeout cleans both sudo models
+  ---
+  duration_ms: 1671.245175
+  type: 'test'
+  ...
+# Subtest: row276 claude-version legacy inner timeout cleans both sudo models
+ok 41 - row276 claude-version legacy inner timeout cleans both sudo models
+  ---
+  duration_ms: 1675.495392
+  type: 'test'
+  ...
+# Subtest: row276 pm-list legacy inner timeout cleans both sudo models
+ok 42 - row276 pm-list legacy inner timeout cleans both sudo models
+  ---
+  duration_ms: 1661.382885
+  type: 'test'
+  ...
+# Subtest: row276 node-version legacy inner timeout cleans both sudo models
+ok 43 - row276 node-version legacy inner timeout cleans both sudo models
+  ---
+  duration_ms: 1692.3437
+  type: 'test'
+  ...
+# Subtest: row276 legacy streams and display status preserve failures without granting success
+ok 44 - row276 legacy streams and display status preserve failures without granting success
+  ---
+  duration_ms: 2545.7498
+  type: 'test'
+  ...
+# Subtest: row276 trailer grammar cannot make supervisor failure pass
+ok 45 - row276 trailer grammar cannot make supervisor failure pass
+  ---
+  duration_ms: 2097.946825
+  type: 'test'
+  ...
+# Subtest: row276 earlier forged trailer and appended zero remain failures
+ok 46 - row276 earlier forged trailer and appended zero remain failures
+  ---
+  duration_ms: 521.451262
+  type: 'test'
+  ...
+# Subtest: row276 precheck outer bound discards success status and fixture cleans residual
+ok 47 - row276 precheck outer bound discards success status and fixture cleans residual
+  ---
+  duration_ms: 2170.592563
+  type: 'test'
+  ...
+# Subtest: row276 case1 capture and legacy tools refuse unsafe system tools
+ok 48 - row276 case1 capture and legacy tools refuse unsafe system tools
+  ---
+  duration_ms: 76.678871
+  type: 'test'
+  ...
+# Subtest: row276 stderr retention is bounded and keeps the final diagnostic
+ok 49 - row276 stderr retention is bounded and keeps the final diagnostic
+  ---
+  duration_ms: 261.872028
+  type: 'test'
+  ...
+# Subtest: row276 version and PM checks refuse successful-looking stdout on supervisor failure
+ok 50 - row276 version and PM checks refuse successful-looking stdout on supervisor failure
+  ---
+  duration_ms: 16.458898
+  type: 'test'
+  ...
+# Subtest: row276 full acceptance keeps all five healthy calls in both sudo models
+ok 51 - row276 full acceptance keeps all five healthy calls in both sudo models
+  ---
+  duration_ms: 3762.37926
+  type: 'test'
+  ...
+# Subtest: row276 vanished pid stat read returns 3 with empty stderr in both scripts
+ok 52 - row276 vanished pid stat read returns 3 with empty stderr in both scripts
+  ---
+  duration_ms: 4.628196
+  type: 'test'
+  ...
+# Subtest: row276 legacy stdout snapshot preserves exact bytes on success and command failure
+ok 53 - row276 legacy stdout snapshot preserves exact bytes on success and command failure
+  ---
+  duration_ms: 3223.67506
+  type: 'test'
+  ...
+1..53
+# tests 53
+# suites 0
+# pass 53
+# fail 0
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 240011.017536
@@ -0,0 +1,3 @@
+CLEAR
+/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/445652/cmdline: No such file or directory
+/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/505165/cmdline: No such file or directory
@@ -0,0 +1,19 @@
+{
+  "label": "case1-whole-3",
+  "argv": [
+    "timeout",
+    "-k",
+    "10",
+    "1200",
+    "node",
+    "--test",
+    "--test-reporter=tap",
+    "packages/cli/tests/case1-accept.test.mjs"
+  ],
+  "limit_seconds": 1200,
+  "tmpdir": "/mnt/storage/scratch/tmp/gdjuph7",
+  "started_utc": "2026-10-23T07:34:59Z",
+  "start_load": "2.08 2.33 2.22 4/6464 509071",
+  "log": "/mnt/storage/scratch/tmp/gABO62Q/records/case1-whole-3.log",
+  "expected_red": false
+}
@@ -0,0 +1,237 @@
+[
+  {
+    "wall_seconds": 0.0,
+    "utc": "2026-10-23T07:34:59Z",
+    "load": "2.08 2.33 2.22 8/6465 509072"
+  },
+  {
+    "wall_seconds": 5.001,
+    "utc": "2026-10-23T07:35:04Z",
+    "load": "2.23 2.36 2.23 4/6481 514861"
+  },
+  {
+    "wall_seconds": 10.001,
+    "utc": "2026-10-23T07:35:09Z",
+    "load": "2.13 2.33 2.22 3/6475 518876"
+  },
+  {
+    "wall_seconds": 15.001,
+    "utc": "2026-10-23T07:35:14Z",
+    "load": "2.04 2.31 2.22 3/6502 522276"
+  },
+  {
+    "wall_seconds": 20.001,
+    "utc": "2026-10-23T07:35:19Z",
+    "load": "2.04 2.31 2.22 3/6502 525490"
+  },
+  {
+    "wall_seconds": 25.001,
+    "utc": "2026-10-23T07:35:24Z",
+    "load": "2.04 2.30 2.21 5/6478 528962"
+  },
+  {
+    "wall_seconds": 30.002,
+    "utc": "2026-10-23T07:35:29Z",
+    "load": "2.03 2.30 2.21 3/6458 532409"
+  },
+  {
+    "wall_seconds": 35.002,
+    "utc": "2026-10-23T07:35:34Z",
+    "load": "2.03 2.29 2.21 2/6481 535342"
+  },
+  {
+    "wall_seconds": 40.002,
+    "utc": "2026-10-23T07:35:39Z",
+    "load": "2.03 2.29 2.21 3/6483 537759"
+  },
+  {
+    "wall_seconds": 45.002,
+    "utc": "2026-10-23T07:35:44Z",
+    "load": "1.86 2.25 2.20 5/6511 539004"
+  },
+  {
+    "wall_seconds": 50.003,
+    "utc": "2026-10-23T07:35:49Z",
+    "load": "1.72 2.21 2.19 2/6524 540002"
+  },
+  {
+    "wall_seconds": 55.003,
+    "utc": "2026-10-23T07:35:54Z",
+    "load": "1.58 2.17 2.17 2/6482 540672"
+  },
+  {
+    "wall_seconds": 60.003,
+    "utc": "2026-10-23T07:35:59Z",
+    "load": "1.53 2.15 2.17 4/6471 541194"
+  },
+  {
+    "wall_seconds": 65.003,
+    "utc": "2026-10-23T07:36:04Z",
+    "load": "1.81 2.20 2.18 2/6474 541568"
+  },
+  {
+    "wall_seconds": 70.003,
+    "utc": "2026-10-23T07:36:09Z",
+    "load": "2.31 2.30 2.21 4/6503 545391"
+  },
+  {
+    "wall_seconds": 75.004,
+    "utc": "2026-10-23T07:36:14Z",
+    "load": "2.28 2.29 2.21 4/6517 548112"
+  },
+  {
+    "wall_seconds": 80.004,
+    "utc": "2026-10-23T07:36:19Z",
+    "load": "2.42 2.32 2.22 3/6526 551314"
+  },
+  {
+    "wall_seconds": 85.004,
+    "utc": "2026-10-23T07:36:24Z",
+    "load": "2.38 2.31 2.22 23/6474 553438"
+  },
+  {
+    "wall_seconds": 90.004,
+    "utc": "2026-10-23T07:36:29Z",
+    "load": "2.27 2.29 2.21 3/6475 556781"
+  },
+  {
+    "wall_seconds": 95.005,
+    "utc": "2026-10-23T07:36:34Z",
+    "load": "2.25 2.29 2.21 4/6460 559513"
+  },
+  {
+    "wall_seconds": 100.005,
+    "utc": "2026-10-23T07:36:39Z",
+    "load": "2.79 2.40 2.25 4/6488 566252"
+  },
+  {
+    "wall_seconds": 105.005,
+    "utc": "2026-10-23T07:36:44Z",
+    "load": "2.81 2.41 2.25 4/6480 569779"
+  },
+  {
+    "wall_seconds": 110.005,
+    "utc": "2026-10-23T07:36:49Z",
+    "load": "2.66 2.39 2.25 3/6489 572874"
+  },
+  {
+    "wall_seconds": 115.006,
+    "utc": "2026-10-23T07:36:54Z",
+    "load": "2.61 2.38 2.25 3/6447 576109"
+  },
+  {
+    "wall_seconds": 120.006,
+    "utc": "2026-10-23T07:36:59Z",
+    "load": "2.64 2.39 2.25 3/6433 579360"
+  },
+  {
+    "wall_seconds": 125.006,
+    "utc": "2026-10-23T07:37:04Z",
+    "load": "2.59 2.38 2.25 6/6448 582606"
+  },
+  {
+    "wall_seconds": 130.006,
+    "utc": "2026-10-23T07:37:09Z",
+    "load": "2.54 2.38 2.25 5/6451 585750"
+  },
+  {
+    "wall_seconds": 135.006,
+    "utc": "2026-10-23T07:37:14Z",
+    "load": "2.42 2.35 2.24 3/6464 588554"
+  },
+  {
+    "wall_seconds": 140.007,
+    "utc": "2026-10-23T07:37:19Z",
+    "load": "2.31 2.33 2.23 5/6469 591375"
+  },
+  {
+    "wall_seconds": 145.007,
+    "utc": "2026-10-23T07:37:24Z",
+    "load": "2.20 2.31 2.23 3/6436 594632"
+  },
+  {
+    "wall_seconds": 150.007,
+    "utc": "2026-10-23T07:37:29Z",
+    "load": "2.10 2.29 2.22 4/6408 597793"
+  },
+  {
+    "wall_seconds": 155.007,
+    "utc": "2026-10-23T07:37:34Z",
+    "load": "2.02 2.27 2.21 6/6423 601114"
+  },
+  {
+    "wall_seconds": 160.008,
+    "utc": "2026-10-23T07:37:39Z",
+    "load": "1.93 2.24 2.21 5/6420 604470"
+  },
+  {
+    "wall_seconds": 165.008,
+    "utc": "2026-10-23T07:37:44Z",
+    "load": "1.86 2.22 2.20 4/6456 608664"
+  },
+  {
+    "wall_seconds": 170.008,
+    "utc": "2026-10-23T07:37:49Z",
+    "load": "1.87 2.22 2.20 4/6455 612187"
+  },
+  {
+    "wall_seconds": 175.008,
+    "utc": "2026-10-23T07:37:54Z",
+    "load": "2.04 2.25 2.21 4/6441 616556"
+  },
+  {
+    "wall_seconds": 180.009,
+    "utc": "2026-10-23T07:37:59Z",
+    "load": "2.36 2.31 2.23 5/6417 620859"
+  },
+  {
+    "wall_seconds": 185.009,
+    "utc": "2026-10-23T07:38:04Z",
+    "load": "2.25 2.29 2.22 4/6428 625167"
+  },
+  {
+    "wall_seconds": 190.009,
+    "utc": "2026-10-23T07:38:09Z",
+    "load": "2.15 2.27 2.21 3/6424 629560"
+  },
+  {
+    "wall_seconds": 195.009,
+    "utc": "2026-10-23T07:38:14Z",
+    "load": "2.06 2.25 2.21 3/6441 632894"
+  },
+  {
+    "wall_seconds": 200.009,
+    "utc": "2026-10-23T07:38:19Z",
+    "load": "1.97 2.22 2.20 4/6447 636095"
+  },
+  {
+    "wall_seconds": 205.01,
+    "utc": "2026-10-23T07:38:24Z",
+    "load": "1.97 2.22 2.20 3/6421 639217"
+  },
+  {
+    "wall_seconds": 210.01,
+    "utc": "2026-10-23T07:38:29Z",
+    "load": "2.06 2.23 2.20 3/6413 642341"
+  },
+  {
+    "wall_seconds": 215.01,
+    "utc": "2026-10-23T07:38:34Z",
+    "load": "1.89 2.20 2.19 2/6452 644528"
+  },
+  {
+    "wall_seconds": 220.01,
+    "utc": "2026-10-23T07:38:39Z",
+    "load": "1.98 2.21 2.20 5/6458 646052"
+  },
+  {
+    "wall_seconds": 225.011,
+    "utc": "2026-10-23T07:38:44Z",
+    "load": "1.90 2.19 2.19 3/6453 648762"
+  },
+  {
+    "wall_seconds": 230.011,
+    "utc": "2026-10-23T07:38:49Z",
+    "load": "1.99 2.20 2.19 3/6456 650851"
+  }
+]
@@ -0,0 +1,332 @@
+TAP version 13
+# Subtest: row253 socket observation uses configured root, metadata and the Console peer without sending bytes
+ok 1 - row253 socket observation uses configured root, metadata and the Console peer without sending bytes
+  ---
+  duration_ms: 1953.256427
+  type: 'test'
+  ...
+# Subtest: row253 P10 refuses unsafe metadata, wrong peers and an unsafe Python without claiming closure
+ok 2 - row253 P10 refuses unsafe metadata, wrong peers and an unsafe Python without claiming closure
+  ---
+  duration_ms: 29343.328577
+  type: 'test'
+  ...
+# Subtest: row253 acceptance rejects bad config and unsupported copies before talk
+ok 3 - row253 acceptance rejects bad config and unsupported copies before talk
+  ---
+  duration_ms: 1354.971037
+  type: 'test'
+  ...
+# Subtest: row253 stalled peer observation ends within its bound without leaving a reader
+ok 4 - row253 stalled peer observation ends within its bound without leaving a reader
+  ---
+  duration_ms: 3964.438002
+  type: 'test'
+  ...
+# Subtest: row253 P8 refuses both retired TCP and board listeners
+ok 5 - row253 P8 refuses both retired TCP and board listeners
+  ---
+  duration_ms: 3689.613255
+  type: 'test'
+  ...
+# Subtest: row253 C4 acceptance query inner reason holds under both sudo models
+ok 6 - row253 C4 acceptance query inner reason holds under both sudo models
+  ---
+  duration_ms: 10712.630086
+  type: 'test'
+  ...
+# Subtest: row253 C4 acceptance query outer reason discards stdout and names residual cleanup
+ok 7 - row253 C4 acceptance query outer reason discards stdout and names residual cleanup
+  ---
+  duration_ms: 14177.055814
+  type: 'test'
+  ...
+# Subtest: row253 C4 acceptance query overflow is output-limit in both models
+ok 8 - row253 C4 acceptance query overflow is output-limit in both models
+  ---
+  duration_ms: 492.274319
+  type: 'test'
+  ...
+# Subtest: row299 P10 timing copy preserves shipped bytes and isolates observer variables
+ok 9 - row299 P10 timing copy preserves shipped bytes and isolates observer variables
+  ---
+  duration_ms: 0.683633
+  type: 'test'
+  ...
+# Subtest: row299 P10 observers preserve stdout stderr status and the EXIT trap
+ok 10 - row299 P10 observers preserve stdout stderr status and the EXIT trap
+  ---
+  duration_ms: 3.307686
+  type: 'test'
+  ...
+# Subtest: row299 P10 observer records are complete and ordered
+ok 11 - row299 P10 observer records are complete and ordered
+  ---
+  duration_ms: 0.539265
+  type: 'test'
+  ...
+# Subtest: row253 C4 P10 inner reason holds under both sudo models
+ok 12 - row253 C4 P10 inner reason holds under both sudo models
+  ---
+  duration_ms: 11734.519359
+  type: 'test'
+  ...
+# {"fault":"inner","mode":"exec","baselineSeconds":1.8627637730000133,"faultSeconds":3.9948855329999935,"probeSeconds":2.25}
+# {"fault":"inner","mode":"hop","baselineSeconds":1.8459824050000024,"faultSeconds":3.963717149000004,"probeSeconds":2.26}
+# Subtest: row253 C4 P10 outer reason holds under both sudo models
+ok 13 - row253 C4 P10 outer reason holds under both sudo models
+  ---
+  duration_ms: 15259.754291
+  type: 'test'
+  ...
+# {"fault":"outer","mode":"exec","baselineSeconds":1.8736066859999991,"faultSeconds":5.7249899409999925,"probeSeconds":4}
+# {"fault":"outer","mode":"hop","baselineSeconds":1.8894593350000068,"faultSeconds":5.709737833999999,"probeSeconds":4}
+# Subtest: row253 C4 P10 overflow reason holds under both sudo models
+ok 14 - row253 C4 P10 overflow reason holds under both sudo models
+  ---
+  duration_ms: 3822.763403
+  type: 'test'
+  ...
+# Subtest: row 195 accept: every check passing exits 0, with each P mark and counts that match the lines
+ok 15 - row 195 accept: every check passing exits 0, with each P mark and counts that match the lines
+  ---
+  duration_ms: 1879.591109
+  type: 'test'
+  ...
+# Subtest: row 195 accept: exits 1 with each F check failing alone, and its line names it
+ok 16 - row 195 accept: exits 1 with each F check failing alone, and its line names it
+  ---
+  duration_ms: 20490.628667
+  type: 'test'
+  ...
+# Subtest: row 195 accept: F3 fails on exit 0 with no reply line, and its evidence takes talk's error
+ok 17 - row 195 accept: F3 fails on exit 0 with no reply line, and its evidence takes talk's error
+  ---
+  duration_ms: 3653.736213
+  type: 'test'
+  ...
+# Subtest: row 195 accept: F1 fails on a unit that isn't active or isn't User=mosaic
+ok 18 - row 195 accept: F1 fails on a unit that isn't active or isn't User=mosaic
+  ---
+  duration_ms: 3442.442361
+  type: 'test'
+  ...
+# Subtest: row 195 accept: F2 fails when healthz doesn't answer and when another pid holds the port
+ok 19 - row 195 accept: F2 fails when healthz doesn't answer and when another pid holds the port
+  ---
+  duration_ms: 3683.514446
+  type: 'test'
+  ...
+# Subtest: row 195 accept: F5 fails on unpriv_bwrap (enforce), on complain and on a trailing space
+ok 20 - row 195 accept: F5 fails on unpriv_bwrap (enforce), on complain and on a trailing space
+  ---
+  duration_ms: 8437.165336
+  type: 'test'
+  ...
+# Subtest: row 195 accept: F5 fails with no bwrap of mosaic's, and passes on comm alone
+ok 21 - row 195 accept: F5 fails with no bwrap of mosaic's, and passes on comm alone
+  ---
+  duration_ms: 3900.598202
+  type: 'test'
+  ...
+# Subtest: row 195 accept: F6 fails on a stub that prints nothing, on a path outside claude-<pin> and on a .. segment
+ok 22 - row 195 accept: F6 fails on a stub that prints nothing, on a path outside claude-<pin> and on a .. segment
+  ---
+  duration_ms: 4987.50038
+  type: 'test'
+  ...
+# Subtest: row 195 accept: F7 fails on two live PM launches, one for another business, and no launch.by
+ok 23 - row 195 accept: F7 fails on two live PM launches, one for another business, and no launch.by
+  ---
+  duration_ms: 5425.289834
+  type: 'test'
+  ...
+# Subtest: row 195 accept: F8 fails on 0640, on another owner and on a symlink, and never prints the credential
+ok 24 - row 195 accept: F8 fails on 0640, on another owner and on a symlink, and never prints the credential
+  ---
+  duration_ms: 5477.40542
+  type: 'test'
+  ...
+# Subtest: row 195 accept: F9 fails on another owner, a group-writable mode and a number for the flag
+ok 25 - row 195 accept: F9 fails on another owner, a group-writable mode and a number for the flag
+  ---
+  duration_ms: 5434.786414
+  type: 'test'
+  ...
+# Subtest: row 195 accept: F9 won't run --node as root off the pin path or with a writable directory above it
+ok 26 - row 195 accept: F9 won't run --node as root off the pin path or with a writable directory above it
+  ---
+  duration_ms: 5126.262984
+  type: 'test'
+  ...
+# Subtest: row 195 accept: F11 fails on one *.json under discord/ and passes on an empty directory
+ok 27 - row 195 accept: F11 fails on one *.json under discord/ and passes on an empty directory
+  ---
+  duration_ms: 3711.251951
+  type: 'test'
+  ...
+# Subtest: row 195 accept: each P check reports unnamed on its fault, and the exit stays 0
+ok 28 - row 195 accept: each P check reports unnamed on its fault, and the exit stays 0
+  ---
+  duration_ms: 16470.538016
+  type: 'test'
+  ...
+# Subtest: row 195 accept: P2 is unnamed with a supplementary group, and P5 names docker
+ok 29 - row 195 accept: P2 is unnamed with a supplementary group, and P5 names docker
+  ---
+  duration_ms: 3660.364965
+  type: 'test'
+  ...
+# Subtest: row 195 accept: P5 is closed with no jarvis account, and P2 with an empty authorized_keys
+ok 30 - row 195 accept: P5 is closed with no jarvis account, and P2 with an empty authorized_keys
+  ---
+  duration_ms: 1799.768335
+  type: 'test'
+  ...
+# Subtest: row 195 accept: P9 is unnamed once for each item missing
+ok 31 - row 195 accept: P9 is unnamed once for each item missing
+  ---
+  duration_ms: 9047.041702
+  type: 'test'
+  ...
+# Subtest: row253 accept: P10 fails its observation with another peer; P11 with the unit disabled
+ok 32 - row253 accept: P10 fails its observation with another peer; P11 with the unit disabled
+  ---
+  duration_ms: 3624.70672
+  type: 'test'
+  ...
+# Subtest: row 195 accept: every P check unnamed together still exits 0
+ok 33 - row 195 accept: every P check unnamed together still exits 0
+  ---
+  duration_ms: 1628.049695
+  type: 'test'
+  ...
+# Subtest: row 195 accept: a bad args file refuses with exit 2 before any check, each for its own reason
+ok 34 - row 195 accept: a bad args file refuses with exit 2 before any check, each for its own reason
+  ---
+  duration_ms: 96.211247
+  type: 'test'
+  ...
+# Subtest: row 195 accept: usage errors and a run without --root as a user exit 2
+ok 35 - row 195 accept: usage errors and a run without --root as a user exit 2
+  ---
+  duration_ms: 11.078071
+  type: 'test'
+  ...
+# Subtest: row 195 accept: every in-instance call goes through sudo -u mosaic -H env PATH=<node dir>:...
+ok 36 - row 195 accept: every in-instance call goes through sudo -u mosaic -H env PATH=<node dir>:...
+  ---
+  duration_ms: 1819.893166
+  type: 'test'
+  ...
+# Subtest: row 195 accept: the host check runs with --check and never --enforce
+ok 37 - row 195 accept: the host check runs with --check and never --enforce
+  ---
+  duration_ms: 1818.576075
+  type: 'test'
+  ...
+# Subtest: row276 legacy call inventory pins every production bound and the conversation contract
+ok 38 - row276 legacy call inventory pins every production bound and the conversation contract
+  ---
+  duration_ms: 0.367599
+  type: 'test'
+  ...
+# Subtest: row276 talk legacy inner timeout cleans both sudo models
+ok 39 - row276 talk legacy inner timeout cleans both sudo models
+  ---
+  duration_ms: 1643.944453
+  type: 'test'
+  ...
+# Subtest: row276 precheck legacy inner timeout cleans both sudo models
+ok 40 - row276 precheck legacy inner timeout cleans both sudo models
+  ---
+  duration_ms: 1647.187165
+  type: 'test'
+  ...
+# Subtest: row276 claude-version legacy inner timeout cleans both sudo models
+ok 41 - row276 claude-version legacy inner timeout cleans both sudo models
+  ---
+  duration_ms: 1658.311785
+  type: 'test'
+  ...
+# Subtest: row276 pm-list legacy inner timeout cleans both sudo models
+ok 42 - row276 pm-list legacy inner timeout cleans both sudo models
+  ---
+  duration_ms: 1662.34616
+  type: 'test'
+  ...
+# Subtest: row276 node-version legacy inner timeout cleans both sudo models
+ok 43 - row276 node-version legacy inner timeout cleans both sudo models
+  ---
+  duration_ms: 1691.506329
+  type: 'test'
+  ...
+# Subtest: row276 legacy streams and display status preserve failures without granting success
+ok 44 - row276 legacy streams and display status preserve failures without granting success
+  ---
+  duration_ms: 2558.787354
+  type: 'test'
+  ...
+# Subtest: row276 trailer grammar cannot make supervisor failure pass
+ok 45 - row276 trailer grammar cannot make supervisor failure pass
+  ---
+  duration_ms: 1998.18351
+  type: 'test'
+  ...
+# Subtest: row276 earlier forged trailer and appended zero remain failures
+ok 46 - row276 earlier forged trailer and appended zero remain failures
+  ---
+  duration_ms: 502.525144
+  type: 'test'
+  ...
+# Subtest: row276 precheck outer bound discards success status and fixture cleans residual
+ok 47 - row276 precheck outer bound discards success status and fixture cleans residual
+  ---
+  duration_ms: 2166.851271
+  type: 'test'
+  ...
+# Subtest: row276 case1 capture and legacy tools refuse unsafe system tools
+ok 48 - row276 case1 capture and legacy tools refuse unsafe system tools
+  ---
+  duration_ms: 74.697527
+  type: 'test'
+  ...
+# Subtest: row276 stderr retention is bounded and keeps the final diagnostic
+ok 49 - row276 stderr retention is bounded and keeps the final diagnostic
+  ---
+  duration_ms: 241.007102
+  type: 'test'
+  ...
+# Subtest: row276 version and PM checks refuse successful-looking stdout on supervisor failure
+ok 50 - row276 version and PM checks refuse successful-looking stdout on supervisor failure
+  ---
+  duration_ms: 16.132196
+  type: 'test'
+  ...
+# Subtest: row276 full acceptance keeps all five healthy calls in both sudo models
+ok 51 - row276 full acceptance keeps all five healthy calls in both sudo models
+  ---
+  duration_ms: 3685.474118
+  type: 'test'
+  ...
+# Subtest: row276 vanished pid stat read returns 3 with empty stderr in both scripts
+ok 52 - row276 vanished pid stat read returns 3 with empty stderr in both scripts
+  ---
+  duration_ms: 4.365639
+  type: 'test'
+  ...
+# Subtest: row276 legacy stdout snapshot preserves exact bytes on success and command failure
+ok 53 - row276 legacy stdout snapshot preserves exact bytes on success and command failure
+  ---
+  duration_ms: 3188.820303
+  type: 'test'
+  ...
+1..53
+# tests 53
+# suites 0
+# pass 53
+# fail 0
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 234980.293151
@@ -0,0 +1 @@
+CLEAR
@@ -0,0 +1,77 @@
+{
+  "label": "cli-whole",
+  "argv": [
+    "timeout",
+    "-k",
+    "10",
+    "5400",
+    "node",
+    "--test",
+    "--test-reporter=tap",
+    "packages/cli/tests/access-boot.test.mjs",
+    "packages/cli/tests/access.test.mjs",
+    "packages/cli/tests/app.test.mjs",
+    "packages/cli/tests/boot-status.test.mjs",
+    "packages/cli/tests/case1-accept.test.mjs",
+    "packages/cli/tests/case1-hostcheck.test.mjs",
+    "packages/cli/tests/case2-persona-import.test.mjs",
+    "packages/cli/tests/case2-unit.test.mjs",
+    "packages/cli/tests/channel-cli.test.mjs",
+    "packages/cli/tests/channel-recovery.test.mjs",
+    "packages/cli/tests/cli.test.mjs",
+    "packages/cli/tests/compactions-launch.test.mjs",
+    "packages/cli/tests/config.test.mjs",
+    "packages/cli/tests/credentials.test.mjs",
+    "packages/cli/tests/follow.test.mjs",
+    "packages/cli/tests/format.test.mjs",
+    "packages/cli/tests/gate-lane-auth.test.mjs",
+    "packages/cli/tests/gate-lane-fixtures.test.mjs",
+    "packages/cli/tests/gate-lane-image.test.mjs",
+    "packages/cli/tests/gate-lane-state.test.mjs",
+    "packages/cli/tests/gate-lane.test.mjs",
+    "packages/cli/tests/git-socket.test.mjs",
+    "packages/cli/tests/grants.test.mjs",
+    "packages/cli/tests/host.test.mjs",
+    "packages/cli/tests/hosts.test.mjs",
+    "packages/cli/tests/instances.test.mjs",
+    "packages/cli/tests/launch-account.test.mjs",
+    "packages/cli/tests/launch-limit-checks.test.mjs",
+    "packages/cli/tests/launch-limits.test.mjs",
+    "packages/cli/tests/launch-routes.test.mjs",
+    "packages/cli/tests/launcher.test.mjs",
+    "packages/cli/tests/lifecycle.test.mjs",
+    "packages/cli/tests/limits-tokens.test.mjs",
+    "packages/cli/tests/limits.test.mjs",
+    "packages/cli/tests/mark-read.test.mjs",
+    "packages/cli/tests/names.test.mjs",
+    "packages/cli/tests/notifier.test.mjs",
+    "packages/cli/tests/other-tree.test.mjs",
+    "packages/cli/tests/processing-cli.test.mjs",
+    "packages/cli/tests/project-name-repo.test.mjs",
+    "packages/cli/tests/project.test.mjs",
+    "packages/cli/tests/publish-socket.test.mjs",
+    "packages/cli/tests/session-clear.test.mjs",
+    "packages/cli/tests/session-launch.test.mjs",
+    "packages/cli/tests/stack-copy.test.mjs",
+    "packages/cli/tests/stack-instances.test.mjs",
+    "packages/cli/tests/stack-release-external.test.mjs",
+    "packages/cli/tests/stack-release.test.mjs",
+    "packages/cli/tests/stack-upgrade.test.mjs",
+    "packages/cli/tests/tester-http.test.mjs",
+    "packages/cli/tests/tester-reads.test.mjs",
+    "packages/cli/tests/tester-threads.test.mjs",
+    "packages/cli/tests/tester.test.mjs",
+    "packages/cli/tests/thread-cli.test.mjs",
+    "packages/cli/tests/thread-launch.test.mjs",
+    "packages/cli/tests/trackers-boot.test.mjs",
+    "packages/cli/tests/transport.test.mjs",
+    "packages/cli/tests/usage.test.mjs",
+    "packages/cli/tests/verbs.test.mjs"
+  ],
+  "limit_seconds": 5400,
+  "tmpdir": "/mnt/storage/scratch/tmp/gebsaIr",
+  "started_utc": "2026-10-23T07:38:55Z",
+  "start_load": "1.91 2.18 2.19 1/6404 656161",
+  "log": "/mnt/storage/scratch/tmp/gABO62Q/records/cli-whole.log",
+  "expected_red": false
+}
@@ -0,0 +1,637 @@
+[
+  {
+    "wall_seconds": 0.0,
+    "utc": "2026-10-23T07:38:55Z",
+    "load": "1.91 2.18 2.19 4/6405 656162"
+  },
+  {
+    "wall_seconds": 5.001,
+    "utc": "2026-10-23T07:39:00Z",
+    "load": "3.52 2.51 2.29 20/6571 665258"
+  },
+  {
+    "wall_seconds": 10.001,
+    "utc": "2026-10-23T07:39:05Z",
+    "load": "4.36 2.70 2.36 17/6696 672370"
+  },
+  {
+    "wall_seconds": 15.001,
+    "utc": "2026-10-23T07:39:10Z",
+    "load": "5.05 2.88 2.41 32/6707 679808"
+  },
+  {
+    "wall_seconds": 20.001,
+    "utc": "2026-10-23T07:39:15Z",
+    "load": "5.77 3.06 2.48 20/6712 687650"
+  },
+  {
+    "wall_seconds": 25.002,
+    "utc": "2026-10-23T07:39:20Z",
+    "load": "6.59 3.28 2.55 21/6675 696103"
+  },
+  {
+    "wall_seconds": 30.002,
+    "utc": "2026-10-23T07:39:25Z",
+    "load": "6.78 3.37 2.58 13/6627 705121"
+  },
+  {
+    "wall_seconds": 35.002,
+    "utc": "2026-10-23T07:39:30Z",
+    "load": "6.56 3.38 2.59 4/6596 713973"
+  },
+  {
+    "wall_seconds": 40.003,
+    "utc": "2026-10-23T07:39:35Z",
+    "load": "6.59 3.44 2.62 4/6582 722361"
+  },
+  {
+    "wall_seconds": 45.003,
+    "utc": "2026-10-23T07:39:40Z",
+    "load": "6.71 3.52 2.64 5/6573 729968"
+  },
+  {
+    "wall_seconds": 50.003,
+    "utc": "2026-10-23T07:39:45Z",
+    "load": "6.81 3.59 2.67 9/6577 737845"
+  },
+  {
+    "wall_seconds": 55.003,
+    "utc": "2026-10-23T07:39:50Z",
+    "load": "6.67 3.62 2.69 6/6627 744813"
+  },
+  {
+    "wall_seconds": 60.004,
+    "utc": "2026-10-23T07:39:55Z",
+    "load": "7.01 3.74 2.73 4/6582 752028"
+  },
+  {
+    "wall_seconds": 65.004,
+    "utc": "2026-10-23T07:40:00Z",
+    "load": "7.17 3.83 2.76 5/6551 763533"
+  },
+  {
+    "wall_seconds": 70.004,
+    "utc": "2026-10-23T07:40:05Z",
+    "load": "7.08 3.86 2.78 5/6568 774263"
+  },
+  {
+    "wall_seconds": 75.004,
+    "utc": "2026-10-23T07:40:10Z",
+    "load": "6.99 3.90 2.80 4/6564 781529"
+  },
+  {
+    "wall_seconds": 80.004,
+    "utc": "2026-10-23T07:40:15Z",
+    "load": "6.91 3.93 2.82 4/6556 787135"
+  },
+  {
+    "wall_seconds": 85.005,
+    "utc": "2026-10-23T07:40:20Z",
+    "load": "6.68 3.93 2.82 5/6548 793267"
+  },
+  {
+    "wall_seconds": 90.005,
+    "utc": "2026-10-23T07:40:25Z",
+    "load": "6.46 3.94 2.83 2/6525 799740"
+  },
+  {
+    "wall_seconds": 95.005,
+    "utc": "2026-10-23T07:40:30Z",
+    "load": "6.19 3.92 2.83 3/6566 805494"
+  },
+  {
+    "wall_seconds": 100.005,
+    "utc": "2026-10-23T07:40:35Z",
+    "load": "7.05 4.14 2.91 4/6526 810900"
+  },
+  {
+    "wall_seconds": 105.006,
+    "utc": "2026-10-23T07:40:40Z",
+    "load": "6.57 4.09 2.90 3/6492 813663"
+  },
+  {
+    "wall_seconds": 110.006,
+    "utc": "2026-10-23T07:40:45Z",
+    "load": "6.12 4.03 2.89 6/6526 817202"
+  },
+  {
+    "wall_seconds": 115.006,
+    "utc": "2026-10-23T07:40:50Z",
+    "load": "5.71 3.98 2.88 4/6542 820365"
+  },
+  {
+    "wall_seconds": 120.006,
+    "utc": "2026-10-23T07:40:55Z",
+    "load": "5.49 3.97 2.88 3/6504 824801"
+  },
+  {
+    "wall_seconds": 125.006,
+    "utc": "2026-10-23T07:41:00Z",
+    "load": "5.13 3.92 2.87 5/6520 829672"
+  },
+  {
+    "wall_seconds": 130.007,
+    "utc": "2026-10-23T07:41:05Z",
+    "load": "4.96 3.90 2.87 5/6491 835347"
+  },
+  {
+    "wall_seconds": 135.007,
+    "utc": "2026-10-23T07:41:10Z",
+    "load": "4.81 3.89 2.87 6/6515 841325"
+  },
+  {
+    "wall_seconds": 140.007,
+    "utc": "2026-10-23T07:41:15Z",
+    "load": "4.66 3.87 2.87 3/6533 846943"
+  },
+  {
+    "wall_seconds": 145.007,
+    "utc": "2026-10-23T07:41:20Z",
+    "load": "4.53 3.86 2.87 6/6537 852457"
+  },
+  {
+    "wall_seconds": 150.008,
+    "utc": "2026-10-23T07:41:25Z",
+    "load": "4.81 3.93 2.90 5/6497 857183"
+  },
+  {
+    "wall_seconds": 155.008,
+    "utc": "2026-10-23T07:41:30Z",
+    "load": "4.74 3.93 2.91 9/6493 862111"
+  },
+  {
+    "wall_seconds": 160.008,
+    "utc": "2026-10-23T07:41:35Z",
+    "load": "4.52 3.89 2.90 3/6484 867180"
+  },
+  {
+    "wall_seconds": 165.008,
+    "utc": "2026-10-23T07:41:40Z",
+    "load": "4.88 3.98 2.93 3/6494 874705"
+  },
+  {
+    "wall_seconds": 170.009,
+    "utc": "2026-10-23T07:41:45Z",
+    "load": "4.57 3.93 2.92 5/6513 879949"
+  },
+  {
+    "wall_seconds": 175.009,
+    "utc": "2026-10-23T07:41:50Z",
+    "load": "4.36 3.90 2.92 3/6532 885364"
+  },
+  {
+    "wall_seconds": 180.009,
+    "utc": "2026-10-23T07:41:55Z",
+    "load": "4.09 3.85 2.91 4/6518 889649"
+  },
+  {
+    "wall_seconds": 185.009,
+    "utc": "2026-10-23T07:42:00Z",
+    "load": "4.33 3.90 2.93 3/6500 895045"
+  },
+  {
+    "wall_seconds": 190.01,
+    "utc": "2026-10-23T07:42:05Z",
+    "load": "4.22 3.89 2.93 5/6497 900591"
+  },
+  {
+    "wall_seconds": 195.01,
+    "utc": "2026-10-23T07:42:10Z",
+    "load": "4.28 3.91 2.94 6/6500 906203"
+  },
+  {
+    "wall_seconds": 200.01,
+    "utc": "2026-10-23T07:42:15Z",
+    "load": "4.18 3.89 2.94 3/6513 911214"
+  },
+  {
+    "wall_seconds": 205.01,
+    "utc": "2026-10-23T07:42:20Z",
+    "load": "4.00 3.86 2.94 3/6521 916524"
+  },
+  {
+    "wall_seconds": 210.011,
+    "utc": "2026-10-23T07:42:25Z",
+    "load": "4.56 3.98 2.98 4/6507 921377"
+  },
+  {
+    "wall_seconds": 215.011,
+    "utc": "2026-10-23T07:42:30Z",
+    "load": "4.84 4.04 3.01 2/6517 926031"
+  },
+  {
+    "wall_seconds": 220.011,
+    "utc": "2026-10-23T07:42:35Z",
+    "load": "4.61 4.01 3.00 2/6512 930921"
+  },
+  {
+    "wall_seconds": 225.011,
+    "utc": "2026-10-23T07:42:40Z",
+    "load": "4.72 4.04 3.02 5/6513 936830"
+  },
+  {
+    "wall_seconds": 230.011,
+    "utc": "2026-10-23T07:42:45Z",
+    "load": "5.07 4.13 3.05 6/6527 943593"
+  },
+  {
+    "wall_seconds": 235.012,
+    "utc": "2026-10-23T07:42:50Z",
+    "load": "4.90 4.11 3.05 4/6524 949131"
+  },
+  {
+    "wall_seconds": 240.012,
+    "utc": "2026-10-23T07:42:55Z",
+    "load": "4.75 4.09 3.05 3/6538 954091"
+  },
+  {
+    "wall_seconds": 245.012,
+    "utc": "2026-10-23T07:43:00Z",
+    "load": "4.53 4.05 3.04 4/6526 957569"
+  },
+  {
+    "wall_seconds": 250.012,
+    "utc": "2026-10-23T07:43:05Z",
+    "load": "4.49 4.05 3.05 4/6512 961428"
+  },
+  {
+    "wall_seconds": 255.013,
+    "utc": "2026-10-23T07:43:10Z",
+    "load": "4.21 4.00 3.04 2/6514 964580"
+  },
+  {
+    "wall_seconds": 260.013,
+    "utc": "2026-10-23T07:43:15Z",
+    "load": "4.03 3.97 3.03 3/6520 969453"
+  },
+  {
+    "wall_seconds": 265.013,
+    "utc": "2026-10-23T07:43:20Z",
+    "load": "3.95 3.95 3.03 2/6510 972206"
+  },
+  {
+    "wall_seconds": 270.013,
+    "utc": "2026-10-23T07:43:25Z",
+    "load": "3.71 3.90 3.02 4/6485 974717"
+  },
+  {
+    "wall_seconds": 275.013,
+    "utc": "2026-10-23T07:43:30Z",
+    "load": "3.49 3.85 3.01 2/6458 976947"
+  },
+  {
+    "wall_seconds": 280.014,
+    "utc": "2026-10-23T07:43:35Z",
+    "load": "3.29 3.81 3.00 2/6480 979354"
+  },
+  {
+    "wall_seconds": 285.014,
+    "utc": "2026-10-23T07:43:40Z",
+    "load": "3.11 3.76 2.99 2/6484 981777"
+  },
+  {
+    "wall_seconds": 290.014,
+    "utc": "2026-10-23T07:43:45Z",
+    "load": "2.94 3.71 2.98 9/6503 984183"
+  },
+  {
+    "wall_seconds": 295.014,
+    "utc": "2026-10-23T07:43:50Z",
+    "load": "2.86 3.68 2.97 2/6530 986646"
+  },
+  {
+    "wall_seconds": 300.015,
+    "utc": "2026-10-23T07:43:55Z",
+    "load": "2.72 3.64 2.96 2/6518 989821"
+  },
+  {
+    "wall_seconds": 305.015,
+    "utc": "2026-10-23T07:44:00Z",
+    "load": "2.66 3.61 2.95 2/6504 993303"
+  },
+  {
+    "wall_seconds": 310.015,
+    "utc": "2026-10-23T07:44:05Z",
+    "load": "2.77 3.62 2.96 3/6379 996998"
+  },
+  {
+    "wall_seconds": 315.015,
+    "utc": "2026-10-23T07:44:10Z",
+    "load": "2.78 3.61 2.96 3/6398 1000446"
+  },
+  {
+    "wall_seconds": 320.015,
+    "utc": "2026-10-23T07:44:15Z",
+    "load": "2.72 3.58 2.95 3/6378 1003966"
+  },
+  {
+    "wall_seconds": 325.016,
+    "utc": "2026-10-23T07:44:20Z",
+    "load": "2.90 3.61 2.97 1/6404 1007129"
+  },
+  {
+    "wall_seconds": 330.016,
+    "utc": "2026-10-23T07:44:25Z",
+    "load": "2.75 3.56 2.96 2/6357 1009536"
+  },
+  {
+    "wall_seconds": 335.016,
+    "utc": "2026-10-23T07:44:30Z",
+    "load": "2.69 3.54 2.95 3/6346 1011941"
+  },
+  {
+    "wall_seconds": 340.016,
+    "utc": "2026-10-23T07:44:35Z",
+    "load": "2.56 3.49 2.94 2/6359 1014274"
+  },
+  {
+    "wall_seconds": 345.017,
+    "utc": "2026-10-23T07:44:40Z",
+    "load": "2.43 3.45 2.93 2/6364 1016643"
+  },
+  {
+    "wall_seconds": 350.017,
+    "utc": "2026-10-23T07:44:45Z",
+    "load": "2.24 3.39 2.91 2/6385 1019039"
+  },
+  {
+    "wall_seconds": 355.017,
+    "utc": "2026-10-23T07:44:50Z",
+    "load": "2.14 3.35 2.90 2/6398 1021488"
+  },
+  {
+    "wall_seconds": 360.017,
+    "utc": "2026-10-23T07:44:55Z",
+    "load": "2.12 3.33 2.90 1/6372 1024145"
+  },
+  {
+    "wall_seconds": 365.018,
+    "utc": "2026-10-23T07:45:00Z",
+    "load": "2.03 3.29 2.89 2/6356 1026540"
+  },
+  {
+    "wall_seconds": 370.018,
+    "utc": "2026-10-23T07:45:05Z",
+    "load": "2.03 3.27 2.88 4/6367 1028881"
+  },
+  {
+    "wall_seconds": 375.018,
+    "utc": "2026-10-23T07:45:10Z",
+    "load": "2.03 3.25 2.88 4/6356 1031296"
+  },
+  {
+    "wall_seconds": 380.018,
+    "utc": "2026-10-23T07:45:15Z",
+    "load": "2.43 3.31 2.90 4/6364 1034002"
+  },
+  {
+    "wall_seconds": 385.019,
+    "utc": "2026-10-23T07:45:20Z",
+    "load": "2.47 3.31 2.90 4/6431 1037181"
+  },
+  {
+    "wall_seconds": 390.019,
+    "utc": "2026-10-23T07:45:25Z",
+    "load": "2.52 3.30 2.90 3/6366 1040453"
+  },
+  {
+    "wall_seconds": 395.019,
+    "utc": "2026-10-23T07:45:30Z",
+    "load": "2.71 3.33 2.91 2/6356 1043515"
+  },
+  {
+    "wall_seconds": 400.019,
+    "utc": "2026-10-23T07:45:35Z",
+    "load": "2.58 3.29 2.90 2/6353 1047043"
+  },
+  {
+    "wall_seconds": 405.019,
+    "utc": "2026-10-23T07:45:40Z",
+    "load": "2.61 3.29 2.90 3/6371 1050590"
+  },
+  {
+    "wall_seconds": 410.02,
+    "utc": "2026-10-23T07:45:45Z",
+    "load": "2.56 3.26 2.90 4/6371 1054393"
+  },
+  {
+    "wall_seconds": 415.02,
+    "utc": "2026-10-23T07:45:50Z",
+    "load": "2.44 3.23 2.89 2/6391 1057424"
+  },
+  {
+    "wall_seconds": 420.02,
+    "utc": "2026-10-23T07:45:55Z",
+    "load": "2.40 3.21 2.88 2/6381 1059953"
+  },
+  {
+    "wall_seconds": 425.02,
+    "utc": "2026-10-23T07:46:00Z",
+    "load": "2.53 3.22 2.89 6/6361 1062385"
+  },
+  {
+    "wall_seconds": 430.021,
+    "utc": "2026-10-23T07:46:05Z",
+    "load": "2.49 3.20 2.88 5/6347 1064852"
+  },
+  {
+    "wall_seconds": 435.021,
+    "utc": "2026-10-23T07:46:10Z",
+    "load": "2.37 3.16 2.87 4/6362 1067362"
+  },
+  {
+    "wall_seconds": 440.021,
+    "utc": "2026-10-23T07:46:15Z",
+    "load": "2.26 3.13 2.86 2/6373 1069948"
+  },
+  {
+    "wall_seconds": 445.021,
+    "utc": "2026-10-23T07:46:20Z",
+    "load": "2.16 3.09 2.85 2/6397 1072349"
+  },
+  {
+    "wall_seconds": 450.022,
+    "utc": "2026-10-23T07:46:25Z",
+    "load": "2.22 3.09 2.85 3/6359 1075002"
+  },
+  {
+    "wall_seconds": 455.022,
+    "utc": "2026-10-23T07:46:30Z",
+    "load": "2.21 3.07 2.85 2/6341 1077533"
+  },
+  {
+    "wall_seconds": 460.022,
+    "utc": "2026-10-23T07:46:35Z",
+    "load": "2.19 3.05 2.85 2/6351 1080042"
+  },
+  {
+    "wall_seconds": 465.022,
+    "utc": "2026-10-23T07:46:40Z",
+    "load": "2.26 3.05 2.85 2/6353 1084865"
+  },
+  {
+    "wall_seconds": 470.022,
+    "utc": "2026-10-23T07:46:45Z",
+    "load": "2.23 3.03 2.84 2/6375 1087473"
+  },
+  {
+    "wall_seconds": 475.023,
+    "utc": "2026-10-23T07:46:50Z",
+    "load": "2.30 3.03 2.84 5/6406 1090849"
+  },
+  {
+    "wall_seconds": 480.023,
+    "utc": "2026-10-23T07:46:55Z",
+    "load": "3.07 3.18 2.89 2/6380 1094664"
+  },
+  {
+    "wall_seconds": 485.023,
+    "utc": "2026-10-23T07:47:00Z",
+    "load": "3.07 3.18 2.89 4/6352 1098090"
+  },
+  {
+    "wall_seconds": 490.023,
+    "utc": "2026-10-23T07:47:05Z",
+    "load": "3.06 3.17 2.89 7/6377 1101587"
+  },
+  {
+    "wall_seconds": 495.024,
+    "utc": "2026-10-23T07:47:10Z",
+    "load": "3.06 3.17 2.89 6/6350 1104939"
+  },
+  {
+    "wall_seconds": 500.024,
+    "utc": "2026-10-23T07:47:15Z",
+    "load": "2.97 3.15 2.89 4/6368 1107224"
+  },
+  {
+    "wall_seconds": 505.024,
+    "utc": "2026-10-23T07:47:20Z",
+    "load": "2.89 3.13 2.88 2/6386 1109380"
+  },
+  {
+    "wall_seconds": 510.024,
+    "utc": "2026-10-23T07:47:25Z",
+    "load": "3.22 3.20 2.91 1/6387 1110174"
+  },
+  {
+    "wall_seconds": 515.024,
+    "utc": "2026-10-23T07:47:30Z",
+    "load": "3.12 3.18 2.90 4/6370 1111210"
+  },
+  {
+    "wall_seconds": 520.025,
+    "utc": "2026-10-23T07:47:35Z",
+    "load": "2.95 3.14 2.89 3/6330 1112228"
+  },
+  {
+    "wall_seconds": 525.025,
+    "utc": "2026-10-23T07:47:40Z",
+    "load": "2.72 3.09 2.88 1/6328 1112851"
+  },
+  {
+    "wall_seconds": 530.025,
+    "utc": "2026-10-23T07:47:45Z",
+    "load": "2.58 3.05 2.87 1/6357 1113559"
+  },
+  {
+    "wall_seconds": 535.025,
+    "utc": "2026-10-23T07:47:50Z",
+    "load": "2.45 3.02 2.86 1/6366 1114165"
+  },
+  {
+    "wall_seconds": 540.026,
+    "utc": "2026-10-23T07:47:55Z",
+    "load": "2.26 2.97 2.84 1/6356 1114925"
+  },
+  {
+    "wall_seconds": 545.026,
+    "utc": "2026-10-23T07:48:00Z",
+    "load": "2.16 2.94 2.83 3/6326 1115379"
+  },
+  {
+    "wall_seconds": 550.026,
+    "utc": "2026-10-23T07:48:05Z",
+    "load": "1.98 2.89 2.81 1/6330 1115933"
+  },
+  {
+    "wall_seconds": 555.026,
+    "utc": "2026-10-23T07:48:10Z",
+    "load": "1.90 2.86 2.80 5/6348 1117979"
+  },
+  {
+    "wall_seconds": 560.026,
+    "utc": "2026-10-23T07:48:15Z",
+    "load": "1.75 2.81 2.79 5/6352 1119958"
+  },
+  {
+    "wall_seconds": 565.027,
+    "utc": "2026-10-23T07:48:20Z",
+    "load": "1.69 2.78 2.78 3/6395 1121255"
+  },
+  {
+    "wall_seconds": 570.027,
+    "utc": "2026-10-23T07:48:25Z",
+    "load": "1.63 2.75 2.77 2/6344 1122878"
+  },
+  {
+    "wall_seconds": 575.027,
+    "utc": "2026-10-23T07:48:30Z",
+    "load": "1.58 2.72 2.76 2/6330 1125425"
+  },
+  {
+    "wall_seconds": 580.027,
+    "utc": "2026-10-23T07:48:35Z",
+    "load": "1.54 2.69 2.75 3/6307 1128035"
+  },
+  {
+    "wall_seconds": 585.028,
+    "utc": "2026-10-23T07:48:40Z",
+    "load": "1.81 2.73 2.76 3/6395 1131079"
+  },
+  {
+    "wall_seconds": 590.028,
+    "utc": "2026-10-23T07:48:45Z",
+    "load": "1.75 2.70 2.75 2/6324 1133629"
+  },
+  {
+    "wall_seconds": 595.028,
+    "utc": "2026-10-23T07:48:50Z",
+    "load": "1.77 2.69 2.75 2/6354 1135983"
+  },
+  {
+    "wall_seconds": 600.028,
+    "utc": "2026-10-23T07:48:55Z",
+    "load": "1.71 2.66 2.74 2/6317 1138250"
+  },
+  {
+    "wall_seconds": 605.029,
+    "utc": "2026-10-23T07:49:00Z",
+    "load": "1.65 2.63 2.73 2/6307 1140569"
+  },
+  {
+    "wall_seconds": 610.029,
+    "utc": "2026-10-23T07:49:05Z",
+    "load": "1.68 2.62 2.72 2/5871 1142432"
+  },
+  {
+    "wall_seconds": 615.029,
+    "utc": "2026-10-23T07:49:10Z",
+    "load": "1.70 2.61 2.72 2/5858 1144385"
+  },
+  {
+    "wall_seconds": 620.029,
+    "utc": "2026-10-23T07:49:15Z",
+    "load": "1.57 2.57 2.71 1/5860 1145308"
+  },
+  {
+    "wall_seconds": 625.03,
+    "utc": "2026-10-23T07:49:20Z",
+    "load": "1.60 2.56 2.70 2/5872 1147140"
+  },
+  {
+    "wall_seconds": 630.03,
+    "utc": "2026-10-23T07:49:25Z",
+    "load": "1.55 2.53 2.69 2/5844 1149434"
+  }
+]
@@ -0,0 +1,909 @@
+{
+  "grant": "sage-3268",
+  "m4_ruling": "sage-3273 / mos-1426",
+  "head": "ffa93b054f28852a75017928d8478bdf9046e717",
+  "manifest": "277ace0b4274970d5bd4c05cf8fe99aa1e7ebc469a719e4cefcb334a75d3865d",
+  "status": "GREEN",
+  "cli_file_list": [
+    "packages/cli/tests/access-boot.test.mjs",
+    "packages/cli/tests/access.test.mjs",
+    "packages/cli/tests/app.test.mjs",
+    "packages/cli/tests/boot-status.test.mjs",
+    "packages/cli/tests/case1-accept.test.mjs",
+    "packages/cli/tests/case1-hostcheck.test.mjs",
+    "packages/cli/tests/case2-persona-import.test.mjs",
+    "packages/cli/tests/case2-unit.test.mjs",
+    "packages/cli/tests/channel-cli.test.mjs",
+    "packages/cli/tests/channel-recovery.test.mjs",
+    "packages/cli/tests/cli.test.mjs",
+    "packages/cli/tests/compactions-launch.test.mjs",
+    "packages/cli/tests/config.test.mjs",
+    "packages/cli/tests/credentials.test.mjs",
+    "packages/cli/tests/follow.test.mjs",
+    "packages/cli/tests/format.test.mjs",
+    "packages/cli/tests/gate-lane-auth.test.mjs",
+    "packages/cli/tests/gate-lane-fixtures.test.mjs",
+    "packages/cli/tests/gate-lane-image.test.mjs",
+    "packages/cli/tests/gate-lane-state.test.mjs",
+    "packages/cli/tests/gate-lane.test.mjs",
+    "packages/cli/tests/git-socket.test.mjs",
+    "packages/cli/tests/grants.test.mjs",
+    "packages/cli/tests/host.test.mjs",
+    "packages/cli/tests/hosts.test.mjs",
+    "packages/cli/tests/instances.test.mjs",
+    "packages/cli/tests/launch-account.test.mjs",
+    "packages/cli/tests/launch-limit-checks.test.mjs",
+    "packages/cli/tests/launch-limits.test.mjs",
+    "packages/cli/tests/launch-routes.test.mjs",
+    "packages/cli/tests/launcher.test.mjs",
+    "packages/cli/tests/lifecycle.test.mjs",
+    "packages/cli/tests/limits-tokens.test.mjs",
+    "packages/cli/tests/limits.test.mjs",
+    "packages/cli/tests/mark-read.test.mjs",
+    "packages/cli/tests/names.test.mjs",
+    "packages/cli/tests/notifier.test.mjs",
+    "packages/cli/tests/other-tree.test.mjs",
+    "packages/cli/tests/processing-cli.test.mjs",
+    "packages/cli/tests/project-name-repo.test.mjs",
+    "packages/cli/tests/project.test.mjs",
+    "packages/cli/tests/publish-socket.test.mjs",
+    "packages/cli/tests/session-clear.test.mjs",
+    "packages/cli/tests/session-launch.test.mjs",
+    "packages/cli/tests/stack-copy.test.mjs",
+    "packages/cli/tests/stack-instances.test.mjs",
+    "packages/cli/tests/stack-release-external.test.mjs",
+    "packages/cli/tests/stack-release.test.mjs",
+    "packages/cli/tests/stack-upgrade.test.mjs",
+    "packages/cli/tests/tester-http.test.mjs",
+    "packages/cli/tests/tester-reads.test.mjs",
+    "packages/cli/tests/tester-threads.test.mjs",
+    "packages/cli/tests/tester.test.mjs",
+    "packages/cli/tests/thread-cli.test.mjs",
+    "packages/cli/tests/thread-launch.test.mjs",
+    "packages/cli/tests/trackers-boot.test.mjs",
+    "packages/cli/tests/transport.test.mjs",
+    "packages/cli/tests/usage.test.mjs",
+    "packages/cli/tests/verbs.test.mjs"
+  ],
+  "cli_file_count": 59,
+  "stages": [
+    {
+      "label": "syntax-1",
+      "argv": [
+        "timeout",
+        "-k",
+        "10",
+        "120",
+        "node",
+        "--check",
+        "packages/cli/tests/case-p10-timing-fixture.mjs"
+      ],
+      "limit_seconds": 120,
+      "tmpdir": "/mnt/storage/scratch/tmp/g6MkUyY",
+      "started_utc": "2026-10-23T07:26:54Z",
+      "start_load": "1.05 1.69 2.00 5/6642 199026",
+      "log": "/mnt/storage/scratch/tmp/gABO62Q/records/syntax-1.log",
+      "expected_red": false,
+      "rc": 0,
+      "wall_seconds": 0.032,
+      "finished_utc": "2026-10-23T07:26:54Z",
+      "end_load": "1.05 1.69 2.00 3/6641 199047",
+      "counts": {},
+      "metrics": [],
+      "skip_lines": [],
+      "external_timeout": false
+    },
+    {
+      "label": "syntax-2",
+      "argv": [
+        "timeout",
+        "-k",
+        "10",
+        "120",
+        "node",
+        "--check",
+        "packages/cli/tests/case1-accept.test.mjs"
+      ],
+      "limit_seconds": 120,
+      "tmpdir": "/mnt/storage/scratch/tmp/gbr1O5v",
+      "started_utc": "2026-10-23T07:26:55Z",
+      "start_load": "1.05 1.69 2.00 2/6651 202505",
+      "log": "/mnt/storage/scratch/tmp/gABO62Q/records/syntax-2.log",
+      "expected_red": false,
+      "rc": 0,
+      "wall_seconds": 0.032,
+      "finished_utc": "2026-10-23T07:26:55Z",
+      "end_load": "1.05 1.69 2.00 1/6651 202515",
+      "counts": {},
+      "metrics": [],
+      "skip_lines": [],
+      "external_timeout": false
+    },
+    {
+      "label": "case1-whole-1",
+      "argv": [
+        "timeout",
+        "-k",
+        "10",
+        "1200",
+        "node",
+        "--test",
+        "--test-reporter=tap",
+        "packages/cli/tests/case1-accept.test.mjs"
+      ],
+      "limit_seconds": 1200,
+      "tmpdir": "/mnt/storage/scratch/tmp/geSGqXZ",
+      "started_utc": "2026-10-23T07:26:57Z",
+      "start_load": "1.05 1.69 2.00 1/6640 205920",
+      "log": "/mnt/storage/scratch/tmp/gABO62Q/records/case1-whole-1.log",
+      "expected_red": false,
+      "rc": 0,
+      "wall_seconds": 239.134,
+      "finished_utc": "2026-10-23T07:30:56Z",
+      "end_load": "3.41 2.47 2.22 1/6690 353962",
+      "counts": {
+        "tests": 53,
+        "pass": 53,
+        "fail": 0,
+        "cancelled": 0,
+        "skipped": 0,
+        "todo": 0
+      },
+      "metrics": [
+        {
+          "fault": "inner",
+          "mode": "exec",
+          "baselineSeconds": 1.8914214159999974,
+          "faultSeconds": 3.974223306999993,
+          "probeSeconds": 2.25
+        },
+        {
+          "fault": "inner",
+          "mode": "hop",
+          "baselineSeconds": 1.8980776110000006,
+          "faultSeconds": 4.004310756999999,
+          "probeSeconds": 2.27
+        },
+        {
+          "fault": "outer",
+          "mode": "exec",
+          "baselineSeconds": 1.8725320299999875,
+          "faultSeconds": 5.715126132999998,
+          "probeSeconds": 4
+        },
+        {
+          "fault": "outer",
+          "mode": "hop",
+          "baselineSeconds": 1.8715896639999992,
+          "faultSeconds": 5.726812752999991,
+          "probeSeconds": 4
+        }
+      ],
+      "skip_lines": [],
+      "external_timeout": false
+    },
+    {
+      "label": "case1-whole-2",
+      "argv": [
+        "timeout",
+        "-k",
+        "10",
+        "1200",
+        "node",
+        "--test",
+        "--test-reporter=tap",
+        "packages/cli/tests/case1-accept.test.mjs"
+      ],
+      "limit_seconds": 1200,
+      "tmpdir": "/mnt/storage/scratch/tmp/gd0qwWL",
+      "started_utc": "2026-10-23T07:30:57Z",
+      "start_load": "3.41 2.47 2.22 4/6666 357541",
+      "log": "/mnt/storage/scratch/tmp/gABO62Q/records/case1-whole-2.log",
+      "expected_red": false,
+      "rc": 0,
+      "wall_seconds": 240.044,
+      "finished_utc": "2026-10-23T07:34:57Z",
+      "end_load": "2.00 2.32 2.22 1/6458 505199",
+      "counts": {
+        "tests": 53,
+        "pass": 53,
+        "fail": 0,
+        "cancelled": 0,
+        "skipped": 0,
+        "todo": 0
+      },
+      "metrics": [
+        {
+          "fault": "inner",
+          "mode": "exec",
+          "baselineSeconds": 1.9894229939999932,
+          "faultSeconds": 4.213512103000001,
+          "probeSeconds": 2.29
+        },
+        {
+          "fault": "inner",
+          "mode": "hop",
+          "baselineSeconds": 2.056171266999998,
+          "faultSeconds": 4.169351735999997,
+          "probeSeconds": 2.28
+        },
+        {
+          "fault": "outer",
+          "mode": "exec",
+          "baselineSeconds": 1.9589971570000053,
+          "faultSeconds": 5.726783651999998,
+          "probeSeconds": 4
+        },
+        {
+          "fault": "outer",
+          "mode": "hop",
+          "baselineSeconds": 1.879084925999996,
+          "faultSeconds": 5.732443853999998,
+          "probeSeconds": 4.01
+        }
+      ],
+      "skip_lines": [],
+      "external_timeout": false
+    },
+    {
+      "label": "case1-whole-3",
+      "argv": [
+        "timeout",
+        "-k",
+        "10",
+        "1200",
+        "node",
+        "--test",
+        "--test-reporter=tap",
+        "packages/cli/tests/case1-accept.test.mjs"
+      ],
+      "limit_seconds": 1200,
+      "tmpdir": "/mnt/storage/scratch/tmp/gdjuph7",
+      "started_utc": "2026-10-23T07:34:59Z",
+      "start_load": "2.08 2.33 2.22 4/6464 509071",
+      "log": "/mnt/storage/scratch/tmp/gABO62Q/records/case1-whole-3.log",
+      "expected_red": false,
+      "rc": 0,
+      "wall_seconds": 235.011,
+      "finished_utc": "2026-10-23T07:38:54Z",
+      "end_load": "1.91 2.18 2.19 2/6403 652743",
+      "counts": {
+        "tests": 53,
+        "pass": 53,
+        "fail": 0,
+        "cancelled": 0,
+        "skipped": 0,
+        "todo": 0
+      },
+      "metrics": [
+        {
+          "fault": "inner",
+          "mode": "exec",
+          "baselineSeconds": 1.8627637730000133,
+          "faultSeconds": 3.9948855329999935,
+          "probeSeconds": 2.25
+        },
+        {
+          "fault": "inner",
+          "mode": "hop",
+          "baselineSeconds": 1.8459824050000024,
+          "faultSeconds": 3.963717149000004,
+          "probeSeconds": 2.26
+        },
+        {
+          "fault": "outer",
+          "mode": "exec",
+          "baselineSeconds": 1.8736066859999991,
+          "faultSeconds": 5.7249899409999925,
+          "probeSeconds": 4
+        },
+        {
+          "fault": "outer",
+          "mode": "hop",
+          "baselineSeconds": 1.8894593350000068,
+          "faultSeconds": 5.709737833999999,
+          "probeSeconds": 4
+        }
+      ],
+      "skip_lines": [],
+      "external_timeout": false
+    },
+    {
+      "label": "cli-whole",
+      "argv": [
+        "timeout",
+        "-k",
+        "10",
+        "5400",
+        "node",
+        "--test",
+        "--test-reporter=tap",
+        "packages/cli/tests/access-boot.test.mjs",
+        "packages/cli/tests/access.test.mjs",
+        "packages/cli/tests/app.test.mjs",
+        "packages/cli/tests/boot-status.test.mjs",
+        "packages/cli/tests/case1-accept.test.mjs",
+        "packages/cli/tests/case1-hostcheck.test.mjs",
+        "packages/cli/tests/case2-persona-import.test.mjs",
+        "packages/cli/tests/case2-unit.test.mjs",
+        "packages/cli/tests/channel-cli.test.mjs",
+        "packages/cli/tests/channel-recovery.test.mjs",
+        "packages/cli/tests/cli.test.mjs",
+        "packages/cli/tests/compactions-launch.test.mjs",
+        "packages/cli/tests/config.test.mjs",
+        "packages/cli/tests/credentials.test.mjs",
+        "packages/cli/tests/follow.test.mjs",
+        "packages/cli/tests/format.test.mjs",
+        "packages/cli/tests/gate-lane-auth.test.mjs",
+        "packages/cli/tests/gate-lane-fixtures.test.mjs",
+        "packages/cli/tests/gate-lane-image.test.mjs",
+        "packages/cli/tests/gate-lane-state.test.mjs",
+        "packages/cli/tests/gate-lane.test.mjs",
+        "packages/cli/tests/git-socket.test.mjs",
+        "packages/cli/tests/grants.test.mjs",
+        "packages/cli/tests/host.test.mjs",
+        "packages/cli/tests/hosts.test.mjs",
+        "packages/cli/tests/instances.test.mjs",
+        "packages/cli/tests/launch-account.test.mjs",
+        "packages/cli/tests/launch-limit-checks.test.mjs",
+        "packages/cli/tests/launch-limits.test.mjs",
+        "packages/cli/tests/launch-routes.test.mjs",
+        "packages/cli/tests/launcher.test.mjs",
+        "packages/cli/tests/lifecycle.test.mjs",
+        "packages/cli/tests/limits-tokens.test.mjs",
+        "packages/cli/tests/limits.test.mjs",
+        "packages/cli/tests/mark-read.test.mjs",
+        "packages/cli/tests/names.test.mjs",
+        "packages/cli/tests/notifier.test.mjs",
+        "packages/cli/tests/other-tree.test.mjs",
+        "packages/cli/tests/processing-cli.test.mjs",
+        "packages/cli/tests/project-name-repo.test.mjs",
+        "packages/cli/tests/project.test.mjs",
+        "packages/cli/tests/publish-socket.test.mjs",
+        "packages/cli/tests/session-clear.test.mjs",
+        "packages/cli/tests/session-launch.test.mjs",
+        "packages/cli/tests/stack-copy.test.mjs",
+        "packages/cli/tests/stack-instances.test.mjs",
+        "packages/cli/tests/stack-release-external.test.mjs",
+        "packages/cli/tests/stack-release.test.mjs",
+        "packages/cli/tests/stack-upgrade.test.mjs",
+        "packages/cli/tests/tester-http.test.mjs",
+        "packages/cli/tests/tester-reads.test.mjs",
+        "packages/cli/tests/tester-threads.test.mjs",
+        "packages/cli/tests/tester.test.mjs",
+        "packages/cli/tests/thread-cli.test.mjs",
+        "packages/cli/tests/thread-launch.test.mjs",
+        "packages/cli/tests/trackers-boot.test.mjs",
+        "packages/cli/tests/transport.test.mjs",
+        "packages/cli/tests/usage.test.mjs",
+        "packages/cli/tests/verbs.test.mjs"
+      ],
+      "limit_seconds": 5400,
+      "tmpdir": "/mnt/storage/scratch/tmp/gebsaIr",
+      "started_utc": "2026-10-23T07:38:55Z",
+      "start_load": "1.91 2.18 2.19 1/6404 656161",
+      "log": "/mnt/storage/scratch/tmp/gABO62Q/records/cli-whole.log",
+      "expected_red": false,
+      "rc": 0,
+      "wall_seconds": 631.848,
+      "finished_utc": "2026-10-23T07:49:27Z",
+      "end_load": "1.55 2.53 2.69 1/5811 1150227",
+      "counts": {
+        "tests": 917,
+        "pass": 917,
+        "fail": 0,
+        "cancelled": 0,
+        "skipped": 0,
+        "todo": 0
+      },
+      "metrics": [
+        {
+          "fault": "inner",
+          "mode": "exec",
+          "baselineSeconds": 2.0945929310000064,
+          "faultSeconds": 4.18209504700001,
+          "probeSeconds": 2.27
+        },
+        {
+          "fault": "inner",
+          "mode": "hop",
+          "baselineSeconds": 1.9464092949999903,
+          "faultSeconds": 4.171354483000003,
+          "probeSeconds": 2.27
+        },
+        {
+          "fault": "outer",
+          "mode": "exec",
+          "baselineSeconds": 1.9332695270000113,
+          "faultSeconds": 5.785670190999998,
+          "probeSeconds": 4.01
+        },
+        {
+          "fault": "outer",
+          "mode": "hop",
+          "baselineSeconds": 1.8855918230000097,
+          "faultSeconds": 5.739914212000003,
+          "probeSeconds": 4.01
+        }
+      ],
+      "skip_lines": [],
+      "external_timeout": false
+    },
+    {
+      "label": "M1-syntax",
+      "argv": [
+        "timeout",
+        "-k",
+        "10",
+        "120",
+        "bash",
+        "-n",
+        "scripts/case1-accept.sh"
+      ],
+      "limit_seconds": 120,
+      "tmpdir": "/mnt/storage/scratch/tmp/gh8s2Og",
+      "started_utc": "2026-10-23T07:49:28Z",
+      "start_load": "1.51 2.50 2.68 3/5810 1153451",
+      "log": "/mnt/storage/scratch/tmp/gABO62Q/records/M1-syntax.log",
+      "expected_red": false,
+      "rc": 0,
+      "wall_seconds": 0.008,
+      "finished_utc": "2026-10-23T07:49:28Z",
+      "end_load": "1.51 2.50 2.68 1/5810 1153455",
+      "counts": {},
+      "metrics": [],
+      "skip_lines": [],
+      "external_timeout": false
+    },
+    {
+      "label": "M1",
+      "argv": [
+        "timeout",
+        "-k",
+        "10",
+        "1200",
+        "node",
+        "--test",
+        "--test-reporter=tap",
+        "--test-name-pattern",
+        "^row253 C4 P10 inner reason holds under both sudo models$",
+        "packages/cli/tests/case1-accept.test.mjs"
+      ],
+      "limit_seconds": 1200,
+      "tmpdir": "/mnt/storage/scratch/tmp/gxjj9Vd",
+      "started_utc": "2026-10-23T07:49:30Z",
+      "start_load": "1.51 2.50 2.68 1/5816 1156782",
+      "log": "/mnt/storage/scratch/tmp/gABO62Q/records/M1.log",
+      "expected_red": true,
+      "rc": 1,
+      "wall_seconds": 4.774,
+      "finished_utc": "2026-10-23T07:49:34Z",
+      "end_load": "1.47 2.48 2.67 2/5828 1159225",
+      "counts": {
+        "tests": 1,
+        "pass": 0,
+        "fail": 1,
+        "cancelled": 0,
+        "skipped": 0,
+        "todo": 0
+      },
+      "metrics": [
+        {
+          "fault": "inner",
+          "mode": "exec",
+          "baselineSeconds": 1.764558389,
+          "faultSeconds": 2.8568522200000004,
+          "probeSeconds": 1.23
+        }
+      ],
+      "skip_lines": [],
+      "external_timeout": false,
+      "killed": true,
+      "kill_test": "row253 C4 P10 inner reason holds under both sudo models",
+      "mutated_sha256": "83fc6e5d93d9dbe8c40995c4e1445a3b61312df3a988a7ad0f7b63c762d2bf3f"
+    },
+    {
+      "label": "M2-syntax",
+      "argv": [
+        "timeout",
+        "-k",
+        "10",
+        "120",
+        "bash",
+        "-n",
+        "scripts/case1-accept.sh"
+      ],
+      "limit_seconds": 120,
+      "tmpdir": "/mnt/storage/scratch/tmp/gZ30EQX",
+      "started_utc": "2026-10-23T07:49:36Z",
+      "start_load": "1.47 2.48 2.67 1/5822 1162481",
+      "log": "/mnt/storage/scratch/tmp/gABO62Q/records/M2-syntax.log",
+      "expected_red": false,
+      "rc": 0,
+      "wall_seconds": 0.008,
+      "finished_utc": "2026-10-23T07:49:36Z",
+      "end_load": "1.47 2.48 2.67 1/5822 1162485",
+      "counts": {},
+      "metrics": [],
+      "skip_lines": [],
+      "external_timeout": false
+    },
+    {
+      "label": "M2",
+      "argv": [
+        "timeout",
+        "-k",
+        "10",
+        "1200",
+        "node",
+        "--test",
+        "--test-reporter=tap",
+        "--test-name-pattern",
+        "^row253 C4 P10 inner reason holds under both sudo models$",
+        "packages/cli/tests/case1-accept.test.mjs"
+      ],
+      "limit_seconds": 1200,
+      "tmpdir": "/mnt/storage/scratch/tmp/gYr4G6o",
+      "started_utc": "2026-10-23T07:49:37Z",
+      "start_load": "1.47 2.48 2.67 1/5823 1165689",
+      "log": "/mnt/storage/scratch/tmp/gABO62Q/records/M2.log",
+      "expected_red": true,
+      "rc": 1,
+      "wall_seconds": 6.768,
+      "finished_utc": "2026-10-23T07:49:44Z",
+      "end_load": "1.40 2.43 2.66 5/5879 1169357",
+      "counts": {
+        "tests": 1,
+        "pass": 0,
+        "fail": 1,
+        "cancelled": 0,
+        "skipped": 0,
+        "todo": 0
+      },
+      "metrics": [
+        {
+          "fault": "inner",
+          "mode": "exec",
+          "baselineSeconds": 1.754618234,
+          "faultSeconds": 4.849417662,
+          "probeSeconds": 3.24
+        }
+      ],
+      "skip_lines": [],
+      "external_timeout": false,
+      "killed": true,
+      "kill_test": "row253 C4 P10 inner reason holds under both sudo models",
+      "mutated_sha256": "269e550da358457cbc85df637f02c323bfc09c21cedea2bc9f4968bedd5c71a4"
+    },
+    {
+      "label": "M3-syntax",
+      "argv": [
+        "timeout",
+        "-k",
+        "10",
+        "120",
+        "bash",
+        "-n",
+        "scripts/case1-accept.sh"
+      ],
+      "limit_seconds": 120,
+      "tmpdir": "/mnt/storage/scratch/tmp/gwCkjzX",
+      "started_utc": "2026-10-23T07:49:45Z",
+      "start_load": "1.40 2.43 2.66 2/5844 1172866",
+      "log": "/mnt/storage/scratch/tmp/gABO62Q/records/M3-syntax.log",
+      "expected_red": false,
+      "rc": 0,
+      "wall_seconds": 0.008,
+      "finished_utc": "2026-10-23T07:49:45Z",
+      "end_load": "1.40 2.43 2.66 2/5844 1172870",
+      "counts": {},
+      "metrics": [],
+      "skip_lines": [],
+      "external_timeout": false
+    },
+    {
+      "label": "M3",
+      "argv": [
+        "timeout",
+        "-k",
+        "10",
+        "1200",
+        "node",
+        "--test",
+        "--test-reporter=tap",
+        "--test-name-pattern",
+        "^row253 C4 P10 outer reason holds under both sudo models$",
+        "packages/cli/tests/case1-accept.test.mjs"
+      ],
+      "limit_seconds": 1200,
+      "tmpdir": "/mnt/storage/scratch/tmp/g6TrU8V",
+      "started_utc": "2026-10-23T07:49:46Z",
+      "start_load": "1.40 2.43 2.66 2/5868 1176268",
+      "log": "/mnt/storage/scratch/tmp/gABO62Q/records/M3.log",
+      "expected_red": true,
+      "rc": 1,
+      "wall_seconds": 6.618,
+      "finished_utc": "2026-10-23T07:49:53Z",
+      "end_load": "1.41 2.40 2.64 2/5827 1179333",
+      "counts": {
+        "tests": 1,
+        "pass": 0,
+        "fail": 1,
+        "cancelled": 0,
+        "skipped": 0,
+        "todo": 0
+      },
+      "metrics": [
+        {
+          "fault": "outer",
+          "mode": "exec",
+          "baselineSeconds": 1.7982556909999998,
+          "faultSeconds": 4.664919980999999,
+          "probeSeconds": 3.01
+        }
+      ],
+      "skip_lines": [],
+      "external_timeout": false,
+      "killed": true,
+      "kill_test": "row253 C4 P10 outer reason holds under both sudo models",
+      "mutated_sha256": "21143aeb637ef864cdcb71086b3149c9817b5af752bc431e963c51a04f01b498"
+    },
+    {
+      "label": "M4-syntax",
+      "argv": [
+        "timeout",
+        "-k",
+        "10",
+        "120",
+        "bash",
+        "-n",
+        "scripts/case1-accept.sh"
+      ],
+      "limit_seconds": 120,
+      "tmpdir": "/mnt/storage/scratch/tmp/gRPd59t",
+      "started_utc": "2026-10-23T07:49:54Z",
+      "start_load": "1.41 2.40 2.64 3/5836 1182894",
+      "log": "/mnt/storage/scratch/tmp/gABO62Q/records/M4-syntax.log",
+      "expected_red": false,
+      "rc": 0,
+      "wall_seconds": 0.008,
+      "finished_utc": "2026-10-23T07:49:54Z",
+      "end_load": "1.41 2.40 2.64 3/5840 1182903",
+      "counts": {},
+      "metrics": [],
+      "skip_lines": [],
+      "external_timeout": false
+    },
+    {
+      "label": "M4",
+      "argv": [
+        "timeout",
+        "-k",
+        "10",
+        "1200",
+        "node",
+        "--test",
+        "--test-reporter=tap",
+        "--test-name-pattern",
+        "^row253 C4 P10 outer reason holds under both sudo models$",
+        "packages/cli/tests/case1-accept.test.mjs"
+      ],
+      "limit_seconds": 1200,
+      "tmpdir": "/mnt/storage/scratch/tmp/gAKhO44",
+      "started_utc": "2026-10-23T07:49:56Z",
+      "start_load": "1.41 2.40 2.64 8/5839 1186447",
+      "log": "/mnt/storage/scratch/tmp/gABO62Q/records/M4.log",
+      "expected_red": true,
+      "rc": 1,
+      "wall_seconds": 9.023,
+      "finished_utc": "2026-10-23T07:50:05Z",
+      "end_load": "1.65 2.42 2.65 2/5832 1193403",
+      "counts": {
+        "tests": 1,
+        "pass": 0,
+        "fail": 1,
+        "cancelled": 0,
+        "skipped": 0,
+        "todo": 0
+      },
+      "metrics": [],
+      "skip_lines": [],
+      "external_timeout": false,
+      "guard_return_receipt": {
+        "ruling": "sage-3273 / mos-1426",
+        "configured_ms": 7000,
+        "named_command_returned": true,
+        "rc": 1,
+        "wall_seconds": 9.023,
+        "actual_refusal": "probe-inner-command",
+        "external_timeout": false,
+        "evidence": "named outer-reason ERR_ASSERTION in raw log after the unchanged safety guard returns; guard itself has no log channel"
+      },
+      "killed": true,
+      "kill_test": "row253 C4 P10 outer reason holds under both sudo models",
+      "mutated_sha256": "cde2e58596794ff7c185c46979e2f7abcb3032ec6903653b7043fe17ef54baee"
+    },
+    {
+      "label": "M5-syntax",
+      "argv": [
+        "timeout",
+        "-k",
+        "10",
+        "120",
+        "node",
+        "--check",
+        "packages/cli/tests/case-p10-timing-fixture.mjs"
+      ],
+      "limit_seconds": 120,
+      "tmpdir": "/mnt/storage/scratch/tmp/g8waDyO",
+      "started_utc": "2026-10-23T07:50:06Z",
+      "start_load": "1.65 2.42 2.65 2/5826 1197030",
+      "log": "/mnt/storage/scratch/tmp/gABO62Q/records/M5-syntax.log",
+      "expected_red": false,
+      "rc": 0,
+      "wall_seconds": 0.032,
+      "finished_utc": "2026-10-23T07:50:06Z",
+      "end_load": "1.65 2.42 2.65 2/5838 1197071",
+      "counts": {},
+      "metrics": [],
+      "skip_lines": [],
+      "external_timeout": false
+    },
+    {
+      "label": "M5",
+      "argv": [
+        "timeout",
+        "-k",
+        "10",
+        "1200",
+        "node",
+        "--test",
+        "--test-reporter=tap",
+        "--test-name-pattern",
+        "^row253 C4 P10 inner reason holds under both sudo models$",
+        "packages/cli/tests/case1-accept.test.mjs"
+      ],
+      "limit_seconds": 1200,
+      "tmpdir": "/mnt/storage/scratch/tmp/gdAgQSv",
+      "started_utc": "2026-10-23T07:50:07Z",
+      "start_load": "1.65 2.42 2.65 2/5824 1200489",
+      "log": "/mnt/storage/scratch/tmp/gABO62Q/records/M5.log",
+      "expected_red": true,
+      "rc": 1,
+      "wall_seconds": 5.816,
+      "finished_utc": "2026-10-23T07:50:13Z",
+      "end_load": "1.63 2.39 2.63 2/5844 1203280",
+      "counts": {
+        "tests": 1,
+        "pass": 0,
+        "fail": 1,
+        "cancelled": 0,
+        "skipped": 0,
+        "todo": 0
+      },
+      "metrics": [],
+      "skip_lines": [],
+      "external_timeout": false,
+      "killed": true,
+      "kill_test": "row253 C4 P10 inner reason holds under both sudo models",
+      "mutated_sha256": "e8a42dc79c14ada3e3339b372af75f2b4688a43ec8748b4cf3acb8bec32a3a23"
+    },
+    {
+      "label": "M6-syntax",
+      "argv": [
+        "timeout",
+        "-k",
+        "10",
+        "120",
+        "node",
+        "--check",
+        "packages/cli/tests/case-p10-timing-fixture.mjs"
+      ],
+      "limit_seconds": 120,
+      "tmpdir": "/mnt/storage/scratch/tmp/gD2IEb2",
+      "started_utc": "2026-10-23T07:50:15Z",
+      "start_load": "1.63 2.39 2.63 1/5845 1206646",
+      "log": "/mnt/storage/scratch/tmp/gABO62Q/records/M6-syntax.log",
+      "expected_red": false,
+      "rc": 0,
+      "wall_seconds": 0.032,
+      "finished_utc": "2026-10-23T07:50:15Z",
+      "end_load": "1.63 2.39 2.63 2/5845 1206656",
+      "counts": {},
+      "metrics": [],
+      "skip_lines": [],
+      "external_timeout": false
+    },
+    {
+      "label": "M6",
+      "argv": [
+        "timeout",
+        "-k",
+        "10",
+        "1200",
+        "node",
+        "--test",
+        "--test-reporter=tap",
+        "--test-name-pattern",
+        "^row299 P10 observer records are complete and ordered$",
+        "packages/cli/tests/case1-accept.test.mjs"
+      ],
+      "limit_seconds": 1200,
+      "tmpdir": "/mnt/storage/scratch/tmp/gAZq1pv",
+      "started_utc": "2026-10-23T07:50:16Z",
+      "start_load": "1.63 2.39 2.63 2/5837 1210084",
+      "log": "/mnt/storage/scratch/tmp/gABO62Q/records/M6.log",
+      "expected_red": true,
+      "rc": 1,
+      "wall_seconds": 0.164,
+      "finished_utc": "2026-10-23T07:50:16Z",
+      "end_load": "1.63 2.39 2.63 1/5837 1210101",
+      "counts": {
+        "tests": 1,
+        "pass": 0,
+        "fail": 1,
+        "cancelled": 0,
+        "skipped": 0,
+        "todo": 0
+      },
+      "metrics": [],
+      "skip_lines": [],
+      "external_timeout": false,
+      "killed": true,
+      "kill_test": "row299 P10 observer records are complete and ordered",
+      "mutated_sha256": "a4256c6ffdc55c8047693e80114361d9c9ad97898fe58125299d967f5badf417"
+    }
+  ],
+  "restores": [
+    {
+      "id": "M1",
+      "path": "scripts/case1-accept.sh",
+      "before_sha256": "89b45bb84e8365f32f08fd055c7db8a0259533f23fe7ab03f484acb25bee92c2",
+      "restored_sha256": "89b45bb84e8365f32f08fd055c7db8a0259533f23fe7ab03f484acb25bee92c2",
+      "git_status": "",
+      "identical": true
+    },
+    {
+      "id": "M2",
+      "path": "scripts/case1-accept.sh",
+      "before_sha256": "89b45bb84e8365f32f08fd055c7db8a0259533f23fe7ab03f484acb25bee92c2",
+      "restored_sha256": "89b45bb84e8365f32f08fd055c7db8a0259533f23fe7ab03f484acb25bee92c2",
+      "git_status": "",
+      "identical": true
+    },
+    {
+      "id": "M3",
+      "path": "scripts/case1-accept.sh",
+      "before_sha256": "89b45bb84e8365f32f08fd055c7db8a0259533f23fe7ab03f484acb25bee92c2",
+      "restored_sha256": "89b45bb84e8365f32f08fd055c7db8a0259533f23fe7ab03f484acb25bee92c2",
+      "git_status": "",
+      "identical": true
+    },
+    {
+      "id": "M4",
+      "path": "scripts/case1-accept.sh",
+      "before_sha256": "89b45bb84e8365f32f08fd055c7db8a0259533f23fe7ab03f484acb25bee92c2",
+      "restored_sha256": "89b45bb84e8365f32f08fd055c7db8a0259533f23fe7ab03f484acb25bee92c2",
+      "git_status": "",
+      "identical": true
+    },
+    {
+      "id": "M5",
+      "path": "packages/cli/tests/case-p10-timing-fixture.mjs",
+      "before_sha256": "7ac9d29281d4076bf2e00b7a07294cd4519d7ae9f97c4f6ddc1d22440c9b071a",
+      "restored_sha256": "7ac9d29281d4076bf2e00b7a07294cd4519d7ae9f97c4f6ddc1d22440c9b071a",
+      "git_status": "",
+      "identical": true
+    },
+    {
+      "id": "M6",
+      "path": "packages/cli/tests/case-p10-timing-fixture.mjs",
+      "before_sha256": "7ac9d29281d4076bf2e00b7a07294cd4519d7ae9f97c4f6ddc1d22440c9b071a",
+      "restored_sha256": "7ac9d29281d4076bf2e00b7a07294cd4519d7ae9f97c4f6ddc1d22440c9b071a",
+      "git_status": "",
+      "identical": true
+    }
+  ],
+  "started_utc": "2026-10-23T07:26:52Z",
+  "finished_utc": "2026-10-23T07:50:16Z"
+}
@@ -0,0 +1,38 @@
+{
+  "utc": "2026-10-23T07:50:47Z",
+  "count": 0,
+  "matches": [],
+  "scope": "All recorded stage TMPDIRs by cwd or argv, and node/tee/FIFO commands with worktree cwd; controller ancestors excluded",
+  "all_matches_count": 4,
+  "preexisting_harness": [
+    {
+      "pid": 14082,
+      "cwd": "/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196",
+      "cmd": "/usr/bin/node /mnt/storage/src/t3-comms/t3-code-agent-mcp/dist/cli.js ",
+      "started_utc": "2026-10-23T07:10:47.750000+00:00",
+      "predates_gate": true
+    },
+    {
+      "pid": 14243,
+      "cwd": "/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196",
+      "cmd": "node /home/jwoltje/.npm/_npx/de2bd410102f5eda/node_modules/.bin/mcp-server-sequential-thinking ",
+      "started_utc": "2026-10-23T07:10:48.770000+00:00",
+      "predates_gate": true
+    },
+    {
+      "pid": 14282,
+      "cwd": "/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196",
+      "cmd": "/usr/bin/node /home/jwoltje/.npm/_npx/15c61037b1978c83/node_modules/chrome-devtools-mcp/build/src/telemetry/watchdog/main.js --parent-pid=14259 --app-version=1.12.0 --os-type=3 ",
+      "started_utc": "2026-10-23T07:10:49.120000+00:00",
+      "predates_gate": true
+    },
+    {
+      "pid": 14383,
+      "cwd": "/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196",
+      "cmd": "node /home/jwoltje/.npm/_npx/9833c18b2d85bc59/node_modules/.bin/playwright-mcp ",
+      "started_utc": "2026-10-23T07:10:49.540000+00:00",
+      "predates_gate": true
+    }
+  ],
+  "classification": "Four MCP harness processes predate the gate; zero gate-created residuals. No processes killed."
+}
@@ -0,0 +1 @@
+CLEAR
@@ -0,0 +1,18 @@
+{
+  "label": "syntax-1",
+  "argv": [
+    "timeout",
+    "-k",
+    "10",
+    "120",
+    "node",
+    "--check",
+    "packages/cli/tests/case-p10-timing-fixture.mjs"
+  ],
+  "limit_seconds": 120,
+  "tmpdir": "/mnt/storage/scratch/tmp/g6MkUyY",
+  "started_utc": "2026-10-23T07:26:54Z",
+  "start_load": "1.05 1.69 2.00 5/6642 199026",
+  "log": "/mnt/storage/scratch/tmp/gABO62Q/records/syntax-1.log",
+  "expected_red": false
+}
@@ -0,0 +1,7 @@
+[
+  {
+    "wall_seconds": 0.0,
+    "utc": "2026-10-23T07:26:54Z",
+    "load": "1.05 1.69 2.00 7/6643 199027"
+  }
+]
@@ -0,0 +1 @@
+CLEAR
@@ -0,0 +1,18 @@
+{
+  "label": "syntax-2",
+  "argv": [
+    "timeout",
+    "-k",
+    "10",
+    "120",
+    "node",
+    "--check",
+    "packages/cli/tests/case1-accept.test.mjs"
+  ],
+  "limit_seconds": 120,
+  "tmpdir": "/mnt/storage/scratch/tmp/gbr1O5v",
+  "started_utc": "2026-10-23T07:26:55Z",
+  "start_load": "1.05 1.69 2.00 2/6651 202505",
+  "log": "/mnt/storage/scratch/tmp/gABO62Q/records/syntax-2.log",
+  "expected_red": false
+}
@@ -0,0 +1,7 @@
+[
+  {
+    "wall_seconds": 0.0,
+    "utc": "2026-10-23T07:26:55Z",
+    "load": "1.05 1.69 2.00 4/6652 202506"
+  }
+]
@@ -0,0 +1,104 @@
+import os,sys,json,time,re,pathlib,subprocess,shlex,hashlib,signal
+REPO=pathlib.Path('/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196')
+ROOT=pathlib.Path(__file__).parent; OUT=ROOT/'records'; OUT.mkdir(exist_ok=True)
+CASE='packages/cli/tests/case1-accept.test.mjs'
+HELPER='packages/cli/tests/case-p10-timing-fixture.mjs'
+HEAD='ffa93b054f28852a75017928d8478bdf9046e717'
+DIGEST='277ace0b4274970d5bd4c05cf8fe99aa1e7ebc469a719e4cefcb334a75d3865d'
+FILES=sorted(str(p.relative_to(REPO)) for p in (REPO/'packages/cli/tests').glob('*.test.mjs'))
+PLAN=json.loads((REPO/'agents/gander/work/queue-299/MUTANT-PLAN.json').read_text())['mutants']
+STATE={'grant':'sage-3268','m4_ruling':'sage-3273 / mos-1426','head':HEAD,'manifest':DIGEST,'status':'PREPARED','cli_file_list':FILES,'cli_file_count':len(FILES),'stages':[],'restores':[]}
+def utc():return time.strftime('%Y-%m-%dT%H:%M:%SZ',time.gmtime())
+def git(*args):return subprocess.check_output(['git',*args],cwd=REPO,text=True).strip()
+def save(): (OUT/'results.json').write_text(json.dumps(STATE,indent=2)+'\n')
+def stop(reason):
+ STATE['status']='STOP';STATE['reason']=reason;STATE['stopped_utc']=utc();save();print('STOP '+reason,flush=True);raise SystemExit(1)
+def load(): return pathlib.Path('/proc/loadavg').read_text().strip()
+def busy(label):
+ r=subprocess.run(['bash','/mnt/storage/scratch/sage-busy-now.sh'],capture_output=True,text=True)
+ (OUT/(label+'.busy.log')).write_text(r.stdout+r.stderr)
+ if r.returncode or r.stdout.strip().splitlines()[-1:]!=['CLEAR']:stop('busy refusal before '+label)
+def parse_metrics(text):
+ result=[]
+ for line in text.splitlines():
+  m=re.match(r'^\s*#\s*(\{.*\})\s*$',line)
+  if m:
+   try:
+    item=json.loads(m[1])
+    if 'probeSeconds' in item:result.append(item)
+   except json.JSONDecodeError:pass
+ return result
+def execute(label,args,limit,expected_red=False,syntax=False):
+ busy(label)
+ tmp=subprocess.check_output(['mktemp','-d','/mnt/storage/scratch/tmp/gXXXXXX'],text=True).strip()
+ env=os.environ.copy();env['TMPDIR']=tmp
+ argv=['timeout','-k','10',str(limit),*args]
+ meta={'label':label,'argv':argv,'limit_seconds':limit,'tmpdir':tmp,'started_utc':utc(),'start_load':load(),'log':str(OUT/(label+'.log')),'expected_red':expected_red}
+ (OUT/(label+'.command.json')).write_text(json.dumps(meta,indent=2)+'\n')
+ STATE['active']=meta;save();print('START '+json.dumps(meta),flush=True)
+ shell='set -o pipefail\n'+shlex.join(argv)+' 2>&1 | tee '+shlex.quote(meta['log'])
+ start=time.monotonic();samples=[];p=subprocess.Popen(['bash','-c',shell],cwd=REPO,env=env,start_new_session=True)
+ while True:
+  samples.append({'wall_seconds':round(time.monotonic()-start,3),'utc':utc(),'load':load()})
+  try:rc=p.wait(timeout=5);break
+  except subprocess.TimeoutExpired:
+   if time.monotonic()-start>limit+30:
+    os.killpg(p.pid,signal.SIGKILL);p.wait();stop('outer controller timeout '+label)
+ text=pathlib.Path(meta['log']).read_text();seconds=round(time.monotonic()-start,3)
+ counts={}
+ for key in ['tests','pass','fail','cancelled','skipped','todo']:
+  matches=re.findall(r'^# '+key+r' (\d+)\s*$',text,re.M)
+  if matches:counts[key]=int(matches[-1])
+ row={**meta,'rc':rc,'wall_seconds':seconds,'finished_utc':utc(),'end_load':load(),'counts':counts,'metrics':parse_metrics(text),'skip_lines':[s for s in text.splitlines() if '# SKIP' in s],'external_timeout':rc in (124,137)}
+ (OUT/(label+'.load.json')).write_text(json.dumps(samples,indent=2)+'\n')
+ STATE['stages'].append(row);STATE.pop('active',None);save();print('END '+json.dumps(row),flush=True)
+ if row['external_timeout']:stop('timeout '+label)
+ if not expected_red and rc!=0:stop('unexpected red '+label)
+ if not expected_red and not syntax:
+  if len(row['metrics'])!=4:stop('missing direct P10 diagnostics '+label)
+  for m in row['metrics']:
+   lo,hi=(1.25,2.75) if m['fault']=='inner' else (3.25,4.75)
+   if not lo<=m['probeSeconds']<hi:stop('band overshoot '+label)
+ return row,text
+save()
+if len(sys.argv)<2 or sys.argv[1]!='run':sys.exit(0)
+if git('rev-parse','HEAD')!=HEAD or git('status','--porcelain'):stop('candidate/tree mismatch')
+manifest=(REPO/'agents/gander/work/queue-299/MANIFEST.sha256').read_bytes()
+if hashlib.sha256(manifest).hexdigest()!=DIGEST:stop('manifest mismatch')
+for m in PLAN:
+ data=(REPO/m['path']).read_text()
+ if hashlib.sha256(data.encode()).hexdigest()!=m['source_sha256']:stop('source sha mismatch '+m['id'])
+ if m.get('scope_begin'):data=data[data.index(m['scope_begin']):data.index(m['scope_end'])]
+ if data.count(m['old'])!=1:stop('nonunique target '+m['id'])
+STATE['status']='RUNNING';STATE['started_utc']=utc();save()
+print('PREAMBLE '+json.dumps({'head':HEAD,'manifest':DIGEST,'source':'e6751ecab','case_limit':1200,'cli_limit':5400,'cli_file_count':len(FILES),'cli_files':FILES,'ambient_load_is_target_only':True}),flush=True)
+for i,path in enumerate([HELPER,CASE]):execute('syntax-'+str(i+1),['node','--check',path],120,syntax=True)
+for i in range(1,4):execute('case1-whole-'+str(i),['node','--test','--test-reporter=tap',CASE],1200)
+execute('cli-whole',['node','--test','--test-reporter=tap',*FILES],5400)
+for m in PLAN:
+ original=(REPO/m['path']).read_bytes(); before=hashlib.sha256(original).hexdigest();text=original.decode()
+ if m.get('scope_begin'):
+  start=text.index(m['scope_begin']);end=text.index(m['scope_end']);part=text[start:end];changed=text[:start]+part.replace(m['old'],m['new'],1)+text[end:]
+ else:changed=text.replace(m['old'],m['new'],1)
+ row=None;output=''
+ try:
+  (REPO/m['path']).write_text(changed)
+  ext=m['path'].rsplit('.',1)[-1];syntax=['bash','-n',m['path']] if ext=='sh' else ['node','--check',m['path']]
+  execute(m['id']+'-syntax',syntax,120,syntax=True)
+  row,output=execute(m['id'],['node','--test','--test-reporter=tap','--test-name-pattern','^'+m['killer']+'$',CASE],1200,expected_red=True)
+ finally:
+  (REPO/m['path']).write_bytes(original)
+  restored=hashlib.sha256((REPO/m['path']).read_bytes()).hexdigest();status=git('status','--porcelain')
+  STATE['restores'].append({'id':m['id'],'path':m['path'],'before_sha256':before,'restored_sha256':restored,'git_status':status,'identical':before==restored});save()
+  if before!=restored or status:stop('restore drift '+m['id'])
+ if row is None:stop('no result '+m['id'])
+ if row['rc']==0:stop('survivor '+m['id'])
+ named=bool(re.search(r'^not ok \d+ - '+re.escape(m['killer'])+r'\s*$',output,re.M))
+ assertion='ERR_ASSERTION' in output
+ if not named or not assertion:stop('wrong failure '+m['id'])
+ if m['id'] in ['M1','M2','M3'] and not ('direct probe ' in output and row['metrics']):stop('wrong timing kill '+m['id'])
+ if m['id']=='M4':
+  if 'probe-outer-timeout' not in output or 'probe-inner-command' not in output:stop('wrong outer-reason failure M4')
+  row['guard_return_receipt']={'ruling':'sage-3273 / mos-1426','configured_ms':7000,'named_command_returned':True,'rc':row['rc'],'wall_seconds':row['wall_seconds'],'actual_refusal':'probe-inner-command','external_timeout':False,'evidence':'named outer-reason ERR_ASSERTION in raw log after the unchanged safety guard returns; guard itself has no log channel'}
+ row['killed']=True;row['kill_test']=m['killer'];row['mutated_sha256']=hashlib.sha256(changed.encode()).hexdigest();save()
+STATE['status']='GREEN';STATE['finished_utc']=utc();save();print('GREEN all whole stages and M1-M6',flush=True)
@@ -0,0 +1,111 @@
+# Row 302 (#1809): assertion preservation
+
+Base 0e30a85fa. `git diff 0e30a85fa -- 'packages/*/tests/*'` on an existing file changes four lines
+and nothing else. Each one is ruled by Mos (mos-1414, amended by mos-1415 and mos-1416, relayed in
+sage-3206, sage-3209 and sage-3210). No assertion is removed or loosened. Each one now pins the new
+code or exit for the same call.
+
+## 1. packages/bus/tests/threads.test.mjs:394 (mos-1414 a)
+
+Old:
+
+```
+  assert.throws(() => call('a', 'message.receive'), { code: 'not-holder' });
+```
+
+New:
+
+```
+  assert.throws(() => call('a', 'message.receive'), { code: 'launcher-released' });
+```
+
+:392 (threadIdle's own second refusal, not-holder) and :395 (the pending check) are unchanged.
+
+## 2. packages/harness/tests/runner.test.mjs:771 (mos-1415)
+
+Old:
+
+```
+  assert.equal(out.code, EXIT.session, out.stderr);
+```
+
+New:
+
+```
+  assert.equal(out.code, 0, out.stderr);
+```
+
+out.stderr stays as the message.
+
+## 3. packages/harness/tests/runner.test.mjs:772 (mos-1415)
+
+Old:
+
+```
+  assert.match(out.stderr, new RegExp(`runner: landing turn 1 for decision ${d1.id} \\(vikunja:1/2\\): ok\n[\\s\\S]*runner: session stopped working: not-holder\n`));
+```
+
+New:
+
+```
+  assert.match(out.stderr, new RegExp(`runner: landing turn 1 for decision ${d1.id} \\(vikunja:1/2\\): ok\n[\\s\\S]*runner: session released by the launcher\n`));
+```
+
+Only the last line of the pattern changes. The landing-turn part is the same, word for word.
+
+## 4. packages/bus/tests/land.test.mjs:464 (mos-1416)
+
+Old:
+
+```
+  assert.throws(() => w.call('merge-gate', 'message.receive'), /not-holder/);
+```
+
+New:
+
+```
+  assert.throws(() => w.call('merge-gate', 'message.receive'), /launcher-released/);
+```
+
+:457, :463 and :466 are unchanged.
+
+## The not-holder grep, rerun on the build (mos-1414)
+
+`git grep -n "not-holder\|session stopped working\|session-invalid"` over packages/cli, seat and harness
+tests and scripts/, outside the new files:
+
+- runner.test.mjs:558, `session stopped working: unauthenticated`. Not a release. Stays.
+- runner.test.mjs:628 (a comment) and :647, the limit stop. The limit revoke isn't threadIdle or
+  landRelease, so it stays not-holder and exit 22 (Dewey Q3).
+- session.test.mjs:116, a list of end reasons. No call.
+
+In packages/bus/tests, only end-launch, land and threads call threadIdle or landRelease. Their other
+not-holder pins: end-launch:198, threads:383-385 and :392, land:457 and :463 are the ops' own refusals.
+threads:493 follows assistant.stop. threads:416 releases a2-run as the test's last line. The fix reaches
+none of them, so no hit goes to Mos.
+
+## 5. packages/bus/tests/launcher-released.test.mjs:89, a new test's own line (d6, sage-3294, Mos ruling sage-3293)
+
+This file is new in row 302, so nothing at the base changes. The line changed between the pushed tests
+commit f799e8b15 and d6, after the first gate run went red on it (gizmoduck-0388). It's recorded here
+because the change narrows what the line counts.
+
+Old:
+
+```
+  assert.equal(store.get('SELECT count(*) AS n FROM deliveries WHERE message=?', later.id).n, 0, 'nothing delivered to the released run');
+```
+
+New:
+
+```
+  assert.equal(store.get('SELECT count(*) AS n FROM deliveries WHERE message=? AND holder_run=?', later.id, 'a-run').n, 0, 'nothing delivered to the released run');
+  assert.deepEqual(store.all('SELECT op, holder_run FROM deliveries WHERE message=?', later.id).map((r) => ({ ...r })), [{ op: 'routed', holder_run: null }]);
+```
+
+The old line counted every delivery row for the message. `#route` (broker.mjs:6482) writes one routed
+row for each message, and `#recipient` (:832-834) gives it holder_run null when no run holds the role.
+After threadIdle no run holds thread A, so the count was 1, with no row for a-run. The first new line
+keeps the claim it was meant to make: no row names the released run. The second pins the whole set,
+one routed row held by nobody. That is tighter than the old line on everything except the null-holder
+row, which it requires.
@@ -0,0 +1,444 @@
+# Row 302 (#1809, Vikunja 588): the idle-stop race
+
+Owner Gizmoduck. Reviewer Dewey. Gate owner Sage. Brief:
+docs/plans/2026-10-23_idle-stop-race-row.md, "Brief: the idle-stop race (Vikunja 588)". Base 0e30a85fa.
+This is the design, written static only. Nothing gets built until Dewey approves it (sage-3200).
+
+## The race, as the code has it at 0e30a85fa
+
+- `packages/cli/src/launcher.mjs:703-717`. The idle tick calls the `threadIdle` op. On `released` it adds
+  the run to `stopping`, records `thread-idle`, and only then sends SIGTERM (:716).
+- `packages/bus/src/broker.mjs:1044-1057`. `threadIdle` releases the claim in the same synchronous call
+  (`#claimEnd(..., 'release', null)`, :1055). The comment at :1040-1043 says the order is deliberate:
+  row 121 r2, Dewey's F3 in 28591.
+- `broker.mjs:1002-1008`. `#agent` is the only place a thread run's own call gets `not-holder`, because
+  its session's latest claim row isn't a `claim` of its generation. `message.receive` (:5586-5591) and
+  `state` (:5805-5807) both go through it, and so do `message.send` and `message.read`.
+- `packages/harness/src/runner.mjs:55`. `SESSION_GONE` holds `unauthenticated`, `not-holder` and
+  `run-ended`. Four sites set `code = EXIT.session` (22) on any of them, without checking `stopping`:
+  the landing `state` (:500-506), `message.receive` (:526-531), the turn's `state` (:545-552) and the
+  reply (:575-582).
+- `packages/seat/src/session.mjs:340` maps 22 to `session-invalid`.
+
+So if a runner call reaches the broker after the release and before SIGTERM sets `stopping`, the run
+exits 22 by itself and ends `session-invalid`. A call already in flight when the release lands counts
+too. Row 292's diagnostic saw this once in about 100 idle stops. The clear test's run r846b8d083502 logged
+`not-holder` and then `exiting 22`.
+
+## Design: a distinct answer for a run the idle stop released (Mos's suggestion, adopted)
+
+### Broker (`packages/bus/src/broker.mjs`)
+
+1. Add a new in-memory set, `#idled`, keyed `business:run`, next to `#ended`, `#received` and `#stops`.
+   `threadIdle` adds the run's key in the same synchronous call that releases it, and only when it
+   returns `{released:true}`. Release and mark happen together, so no call can be answered between them.
+2. In `#agent`, the refusal becomes
+   `fail(this.#idled.has(s.business + ':' + s.run) ? 'idle-released' : 'not-holder')`. Nothing else in
+   `#agent` changes. A run the idle stop released now gets `idle-released` at every call after the
+   release, whether it's a receive, `state`, a send or a read, and whether or not another run has
+   claimed the session since. Every other path that takes a claim away still answers `not-holder`:
+   - `assistant.stop` (:5975), `instance.end` (:6009), the chief lifecycle revoke (:4682) and
+     `role.revoke` (:5230, :5235)
+   - the session clear (:1146)
+   - the limit stop (`#limitStop`, :4842-4855). It releases a thread claim and then refuses
+     `not-holder` on purpose, so that the run exits 22.
+   - another run's newer generation, where the run wasn't idle-released
+3. `endLaunch` (:1300) drops the key along with `#ended.add`. After the end, the run's caps are gone and
+   its calls answer `unauthenticated`, as they do today. The set lives only in memory, like `#runs`. A
+   broker that restarts loses `#runs` too, so an old run's calls answer `unauthenticated` there either
+   way.
+4. `threadIdle`'s own refusals don't change. A second `threadIdle` on a released run is still
+   `not-holder` (threads.test:392). The answer comes from the `#agent` path only, for the run's own
+   calls.
+
+Why a new code and not a flag on `not-holder`: the wire carries only `error: <code>`
+(server.mjs:96-160), and the client accepts only `^[a-z-]{1,64}$` (client.mjs:42-43). A new code changes
+neither of them. Tools and docs that switch on `not-holder` keep their meaning, because `not-holder`
+still means "your claim was taken away".
+
+### Runner (`packages/harness/src/runner.mjs`)
+
+5. A new constant, `IDLE_RELEASED = "idle-released"`. It is not added to `SESSION_GONE`. At each of the
+   four sites, `idle-released` is checked before `SESSION_GONE`. The runner logs
+   `runner: session released by the launcher's idle stop`, leaves `code` at `EXIT.stopped` (0), sets a
+   local `released`, and leaves the loop the same way the site does for `SESSION_GONE` today.
+6. The `role.release` at exit (:589-595) is skipped when `released`. The claim is already released, so
+   the call would only be refused and logged.
+7. If the runner didn't handle the code, the receive loop would count `idle-released` as an
+   unreachable broker and retry (:532-537). The run would then end at SIGTERM (0), or after 30 polls
+   (23). Every site handles it so that neither of those decides how the run ends.
+
+How this meets mos-1411 condition 1: `unauthenticated` (the caps went at the end), `run-ended`, and every
+`not-holder` that isn't an idle release still exit 22 and end `session-invalid`. Only the broker's own
+record that `threadIdle` released this run maps to `stopped/0`. The launcher's `stopping` set and SIGTERM
+play no part in the mapping. That also covers a poll that lands before the signal, and a call that was
+in flight when the release landed.
+
+### Launcher and session.mjs
+
+8. No change. The runner exits 0 by itself, and SIGTERM's start-time check (:716) then finds no process,
+   which the code already handles. `endReason(0)` is `stopped`.
+
+## Tests
+
+### The forcing test (mos-1411 condition 2): new file `packages/cli/tests/idle-stop-race.test.mjs`
+
+This is a thread launch on the same fixture shape as thread-launch.test.mjs (`start(t, prepared, { ops })`
+replaces launch ops, :78-101), with `sessionDefaults.pollInterval` set to 100. The test replaces the
+`threadIdle` op:
+
+```js
+threadIdle: async (m) => {
+  const r = runtime.threadIdle(m.record);
+  if (r.released) window.set(m.record.run, await held(m.record.run)); // returns only after the runner's own exit, or 20 s
+  return r;
+}
+```
+
+`held(run)` waits for two things, in order. First, an `action.refused` event whose actor is `run` and
+whose seq is after the release's `thread_claims` row. That proves a runner call reached the broker inside
+the window. Second, the runner's own exit (the run's `runner: exiting N` line in runner.log, or its pid
+gone), with no SIGTERM sent. The launcher sends SIGTERM only after the op returns, so the window stays
+open until the runner has decided how it ends. The test then asserts all of the following:
+
+- `held` saw a refusal from the run after the release, and the runner exited before the op returned.
+- The refusal's code is `idle-released`.
+- The run's launch `end` event is `['stopped', 0, null]`.
+- runner.log has the idle-released line and no `session stopped working:` line.
+
+Against the code today, the refusal is `not-holder`, the runner exits 22 inside the window, and the end
+is `['session-invalid', 22, null]`. The test fails, and fails every time, not at some rate: the
+window is held open until a call has landed in it. If the runner fix is dropped, the runner retries and
+doesn't exit inside the window, so `held` times out and the "exited before the op returned" assertion
+fails. If the broker fix is dropped, the end is 22.
+
+A control test in the same file: after an idle release, a `role.revoke` the human approved on another
+thread's run (or `assistant.stop`) still ends that run `['session-invalid', 22, null]`. That shows a
+real not-holder still exits 22.
+
+### Bus: new tests in `packages/bus/tests/idle-release.test.mjs` (a new file, so no existing assertion moves)
+
+- After `threadIdle` releases a-run, a-run's `message.receive`, `state`, `message.send` and
+  `message.read` each refuse `idle-released`. Each writes an `action.refused` event with code
+  `idle-released`, and none of them delivers a message or writes a receipt.
+- `not-holder` still comes back for: a run released by `assistant.stop`, a run released by a session
+  clear, a limit stop (stop then receive), a run whose session another run claimed without any idle
+  release, and a second `threadIdle` on a released run. After `endLaunch`, the idle-released run's
+  calls get `unauthenticated`, as today (its caps go at :1310-1311).
+- A role run's `role.release` followed by its own receive still gets `not-holder` (no idle).
+
+### Harness: no new runner.test case
+
+runner.test.mjs's `setup` (:105) binds role runs only, and its claims sit in `role_claims` (:876), so it
+can't reach `threadIdle`. The runner's own exit at receive is covered by the cli forcing test above,
+which runs the real runner. The forcing test reaches only the site that lands in the window, which in
+practice is the receive poll. The landing `state`, the turn's `state` and the reply sites get the same
+four lines, but no test forces each one. Q4 asks whether Dewey wants a per-site case. The existing 22
+tests (:539-560, :630-647, :772) stay unchanged and pass unchanged.
+
+## The one existing assertion that changes (goes to Mos through Sage, per the brief)
+
+`packages/bus/tests/threads.test.mjs:394`,
+`assert.throws(() => call('a', 'message.receive'), { code: 'not-holder' })`. This is a receive by the run
+that `threadIdle` released at :388, so under this design it answers `idle-released`. The assertion is
+changed, not loosened: the new pin is `{ code: 'idle-released' }`, and the property right below it
+(:395, the message stays `pending` for the next holder) stays. I've found no other existing assertion
+that pins `not-holder` for an idle-released run's own call. The build reruns
+`git grep -n "not-holder" 'packages/*/tests/*'` against every idle path before in-review, and names any
+other hit for Mos first.
+
+## Docs
+
+- packages/bus/README.md:320-326 (threadIdle). Add: after a release, the run's own calls answer
+  `idle-released`, not `not-holder`. Also say why.
+- packages/harness/README.md:295-302, the exit table. Row 0 becomes "stopped, by a signal, or because the
+  launcher's idle stop released the session (`idle-released`)". Row 22 is unchanged.
+- packages/bus/README.md:207 (`assistant.stop`): no change. It still gives `not-holder`.
+
+## Open questions for Dewey
+
+- Q1. `landRelease` (broker.mjs:4144-4165, launcher.mjs:876-889) has the same shape for a role run's
+  land-relaunch: it releases, then the launcher sends SIGTERM, so a poll in between ends the run 22. I
+  recommend folding it in. That means one line in `landRelease` (add to `#idled` on release), one bus
+  assertion, and one cli forcing case like the one above. It falls outside this brief's words, so it
+  needs Sage's yes. If the answer is no, I'll write it up as a follow-up row with the same evidence.
+- Q2. The code name `idle-released`. It names the cause, and if Q1 is yes it covers land-relaunch too,
+  since that is also a release made by the launcher. A more general name like `launcher-released` would
+  fit both. I prefer `released-by-launcher` only if Q1 is yes. Dewey picks.
+- Q3. A limit stop on a run that was already idle-released. `#limitStop` (:4842-4855) finds no claim to
+  end and refuses `not-holder`, so the run ends 22. I'd leave that alone: a limit hit is a real stop and
+  ends session-invalid, as it does today. It's possible only if the limit checker answers inside the
+  window.
+
+- Q4. Per-site coverage in the runner. Only the receive site is forced. I can add a cli case per site
+  (hold the window until the run's landing `state`, or a turn's `state`, lands in it), at about one
+  fixture each. I'd add them only if Dewey asks, since all four sites share one helper in the build.
+
+## Gate (brief)
+
+Dewey approves this design, then the manifest. Runs: the new forcing test, then
+compactions-launch.test.mjs whole, then the bus, cli and harness suites whole, then every
+`scripts/test-*.sh`. The mos-1411 point 4 rerun rule doesn't apply to this row's own gate.
+
+Mutants. Each one must die on the forcing test, with the bus test also named where it applies:
+
+- M1. `threadIdle` doesn't add to `#idled`. Dies on the forcing test (end 22) and the bus test.
+- M2. `#agent` ignores `#idled`. Same deaths as M1.
+- M3. The runner drops the `idle-released` branch at receive. Dies on the forcing test (no exit inside
+  the window).
+- M4. The runner maps `idle-released` to `EXIT.session`. Dies on the forcing test (end 22).
+- M5. `#claimEnd` marks every release, not just threadIdle's. Dies on the bus not-holder controls and
+  the cli control.
+- M6. `endLaunch` doesn't drop the key. This is not a correctness mutant: caps are gone, so the answer
+  is `unauthenticated` either way. I'll drop it unless Dewey wants an assertion on it, and record it as
+  an equivalent mutant.
+
+Limits will be set in the run plan after the design round (mos-1275: `timeout -k 10` at three times or
+more the longest run).
+
+## After Dewey's d1 review (dewey-0875, 05:32Z): APPROVE on D1, folded here before any build
+
+D1 (required). role.claim's thread branch (broker.mjs:5154-5173) doesn't go through `#agent` and
+refuses only `run-revoked`, the session fence and `thread-already-held`. So an idle-released run could
+claim its free session again. Its key would still be in `#idled`, and a later real not-holder on that
+claim would answer `idle-released` and exit 0. Fix: the thread branch of role.claim refuses
+`idle-released` for a run in `#idled`, before the insert. The key stays, because the run's claim is over.
+Bus assertion: after threadIdle releases a-run, a-run's role.claim refuses `idle-released`, and no
+thread_claims row is added. Mutant M7: drop that check. It dies on that assertion.
+
+Correction to "Harness: no new runner.test case". That's true for threadIdle only. runner.test reaches
+landRelease, which is a role-run path: :742-772 releases coder-run with `ctx.broker.landRelease` and no
+launcher, and pins `out.code === EXIT.session` (:771) and `session stopped working: not-holder` (:772).
+If Q1 is yes, those two lines change (to stopped/0 and the released line). They go to Mos through Sage
+with threads.test:394, and runner.test:742-772 then serves as the land-relaunch forcing case. No launcher means no
+SIGTERM, so the receive always lands after the release. The cli case for land-relaunch is dropped. If Q1
+is no, the follow-up row cites runner.test:771-772 as its evidence.
+
+Q2. The code is `launcher-released` if Q1 is yes, and `idle-released` if Q1 is no. Every name in this
+file reads that way.
+
+Q3. Agreed. A limit stop on an idled run stays not-holder and exits 22.
+
+Q4. No per-site cases. Both ops return `released:false` while a delivered message is unread
+(threadIdle via `t.unread`, landRelease via its count). The runner reads only after the reply
+(runner.mjs:575-580), so a run can't be released mid-turn. landRelease keeps a run that hasn't received
+yet (`landing:true`), and thread runs have no landing. So only the receive site can see the code. All
+four sites keep the shared helper, and the three unreachable ones get a one-line comment saying why.
+
+N1. The cli control must reach the runner before any launcher signal. It uses a role.revoke on the run
+(no launcher stop), or holds the signal the same way the forcing test does. assistant.stop gets checked
+first in case it goes through a launcher stop. It also asserts the run's runner.log has
+`session stopped working: not-holder` and `exiting 22`.
+N2. The control keeps "after an idle release", so `#idled` isn't empty when M5 runs.
+N3. M6 is equivalent. The key drop in endLaunch stays, so the set doesn't grow.
+N4. The other-pin grep also covers runner.test `session stopped working`. :558 (unauthenticated) and
+:647 (revoke) stay, and :772 changes only under Q1.
+Docs: if Q1 is yes, landRelease joins the bus README line and the harness exit-table row 0.
+
+## Round d2 (sage-3204, 05:32Z)
+
+Line numbers. Sage's check against 0e30a85fa is right, and the references above are now corrected. The
+second threadIdle not-holder pin is threads.test:392 and stays. The receive pin that changes is :394,
+and the pending check is :395 and stays. The idle release is at :388.
+
+Sage asked for a grep of the land-relaunch tests for a not-holder pin on the relaunched run's own call.
+`git grep -l "landRelease\|land-relaunch" 'packages/*/tests/*'` lists 8 files. In those files,
+`not-holder|session stopped working|EXIT.session|session-invalid` hits only land.test.mjs and
+runner.test.mjs:
+
+- land.test.mjs:464, `assert.throws(() => w.call('merge-gate', 'message.receive'), /not-holder/)`. This is
+  the released run's own receive after `landRelease` released it (:458). Under Q1 yes, it answers
+  `launcher-released`, and the regex fails. That's a third old-test change for Mos through Sage. The new
+  pin is `/launcher-released/`.
+- land.test.mjs:457 (a non-holder run's landRelease) and :463 (a second landRelease) are landRelease's
+  own refusals. They stay not-holder, the same as threads.test:392.
+- runner.test.mjs:771-772 change under Q1, as in the section above. runner.test.mjs:548, :557-558 and
+  :646-647 are unauthenticated, unauthenticated and a limit stop. They stay.
+- The six cli files have no hit.
+
+So under Q1 yes, the Mos package is threads.test:394, land.test:464 and runner.test:771-772. Under Q1 no,
+it's threads.test:394 alone. Nothing gets built until Mos rules and Sage gives the go.
+
+## Round d3: as built (after mos-1414/1415/1416 and sage-3220)
+
+Q1 is yes, so the code is `launcher-released` everywhere. The broker set is `#launcherReleased`, not
+`#idled`. Every `idle-released` above reads `launcher-released`.
+
+### Correction to d1: message.send doesn't go through `#agent`
+
+d1 said `message.send` and `message.read` both go through `#agent`. `message.read` does. `message.send`
+doesn't. So a released run's send isn't refused `launcher-released`. Only `message.receive`, `state`,
+`message.read` and `role.claim` answer it, and the bus test asserts exactly those four. That narrows
+what Dewey approved in d1, so I'm sending it to Dewey directly (sage-3220).
+
+### Broker (packages/bus/src/broker.mjs)
+
+- `#launcherReleased = new Set()`, keyed `business:run`, next to `#stops`, with a comment.
+- threadIdle and landRelease add the key after their release transaction.
+- `#agent` refuses `launcher-released` for a run in the set, and `not-holder` otherwise.
+- role.claim (D1) refuses `launcher-released` right after the `agent-required` check, before the thread
+  and role branches. So it covers landRelease's role runs as well as thread runs.
+- endLaunch deletes the key after `#ended.add(key)`.
+- Q3 needs no code. A limit stop runs `#limitStop` (broker.mjs:4482) before any `#agent` check, and it
+  fails `not-holder` itself (:4862), so a limit stop after a launcher release still exits 22.
+
+### Runner (packages/harness/src/runner.mjs)
+
+- `const LAUNCHER_RELEASED = "launcher-released"`.
+- The shared helper `ended(err, say = true)`. For `launcher-released`, it logs
+  `runner: session released by the launcher`, sets `released` and leaves the exit code at
+  `EXIT.stopped`. For the SESSION_GONE codes it keeps the old behaviour (`EXIT.session`, and the log
+  line unless `say` is false).
+- It's used at the landing state check, receive, the turn state check and the reply. The reply site
+  passes `say = false`, so its logging is the same as before. The three sites that can't see the code
+  (Q4) carry a comment saying why.
+- At exit, the final `role.release` is skipped when `released`, because the launcher already released.
+
+### Tests as built
+
+- `packages/cli/tests/idle-stop-race.test.mjs`. This is the threadIdle forcing case. Inside the first
+  released run's held threadIdle op, the human's `assistant.stop` revokes the other thread's holder
+  (N1: no launcher signal can come while the op is held, launcher.mjs:662-663). The op waits for both
+  runners' verdicts and end events. The idle run logs `session released by the launcher`, ends
+  `["stopped", 0, null]` before its thread-idle line, and has `exiting 0` and no `session stopped working`.
+  The control logs `session stopped working: not-holder`, ends `["session-invalid", 22, null]` and
+  has `exiting 22`. The Store shows `launcher-released` and no `not-holder` refusals for the idle run,
+  and `not-holder` for the control.
+- `packages/bus/tests/launcher-released.test.mjs` (renamed from idle-release.test.mjs). It has three
+  tests. (1) threadIdle: receive, state, read and role.claim refuse `launcher-released`, role.claim adds
+  no thread_claims row, the four refusals are logged, nothing is delivered, threadIdle's own second
+  refusal stays not-holder, and after endLaunch the answer is unauthenticated. (2) The control (N2:
+  after an idle release): assistant.stop's run answers not-holder and run-revoked, pm's own role.release
+  answers not-holder, and a new holder for the released thread doesn't change the released run's answer.
+  (3) landRelease: receive and state refuse `launcher-released`, role.claim refuses and adds no
+  role_claims row, landRelease's own second refusal stays not-holder, and coder's own role.release
+  answers not-holder.
+- runner.test.mjs:742-772 is the land-relaunch forcing case (mos-1415). There's no cli land-relaunch case.
+- The four old lines Mos ruled are in ASSERTION-PRESERVATION.md. The diff on old test files is those four
+  lines and nothing else.
+
+### Docs
+
+The bus README's threadIdle paragraph names `launcher-released`, the four calls that answer it,
+landRelease, and that every other lost claim stays not-holder. The cli README's land-relaunch paragraph
+says calls between the release and the signal refuse `launcher-released` and the runner exits 0. The
+harness README's exit table row 0 names the launcher release.
+
+### Red first (mos-1415)
+
+There are two commits. The first holds only the tests and the four ruled pin edits. The second holds the
+fix (broker.mjs, runner.mjs) and the READMEs. The gate's first stage runs on the tests-only commit, and
+these two must fail there:
+
+- idle-stop-race.test.mjs: the idle run ends `["session-invalid", 22, null]`, or its verdict is
+  `session stopped working: not-holder`, whichever lands first.
+- runner.test.mjs, the case at :742: out.code is 22, not 0.
+
+The bus test files and threads.test:394 and land.test:464 fail there too, and the packet records them.
+The red run doesn't count as the gate.
+
+### Mutants (each run against the fix commit, restored and checked by sha256 after)
+
+- M1. threadIdle doesn't add the key. Dies: idle-stop-race (end 22), launcher-released.test test 1,
+  threads.test:394.
+- M2. `#agent` ignores the set. Dies: the same as M1, plus launcher-released.test test 3,
+  land.test:464 and runner.test:771.
+- M3. The runner's helper drops the `launcher-released` branch. Dies: idle-stop-race (the run doesn't
+  exit in the window, so `window.idle` is null) and runner.test:771-772.
+- M4. The runner maps `launcher-released` to `EXIT.session`. Dies: idle-stop-race (end 22) and
+  runner.test:771.
+- M5. `#agent` answers `launcher-released` for every lost claim. Dies: the idle-stop-race control
+  (verdict and end 22), launcher-released.test test 2, and test 3's coder line.
+- M6. endLaunch doesn't drop the key. Equivalent (N3), not run.
+- M7. role.claim drops the D1 check. Dies: launcher-released.test tests 1 and 3 (the claim succeeds).
+- M8. landRelease doesn't add the key. Dies: runner.test:771-772, land.test:464 and
+  launcher-released.test test 3.
+
+### Run plan (mos-1275 limits, `timeout -k 10`)
+
+1. idle-stop-race.test.mjs alone, 600 s. Then runner.test.mjs whole, 900 s.
+2. compactions-launch.test.mjs whole, 600 s.
+3. The bus, harness and cli suites whole: bus 1200 s, harness 1200 s, cli 2100 s. 292's cli suite took
+   630 s.
+4. Every scripts/test-*.sh, 900 s each.
+5. M1-M5, M7 and M8, each on its named files at the limits above.
+
+TMPDIR comes from `mktemp -d /mnt/storage/scratch/tmp/gXXX`. Every run is slot work and starts only on a
+CLEAR from Sage.
+
+## Round d4: Dewey's early static read (dewey-0878, 05:47Z)
+
+C1. The d3 "correction" about message.send was wrong, and d1 was right. `message.send` calls
+`#consumeAuthority` (broker.mjs:5506), which calls `#checkAuthority`, which calls `#agent` (:3749).
+So a released run's send refuses `launcher-released`, and so does every verb that reaches `#agent`. There
+are 29 call sites, including role.release and every authority check. role.claim refuses it before the
+claim (D1). I misread the send path in d3, and no code depended on that reading. The runner's reply site
+already handles the code. The bus README now says "every call that needs the claim", not a list of four.
+Bus test 1 adds a message.send refusal, so the refused list is five `launcher-released`.
+
+N1. Nothing killed a mutant that drops `&& !released` at runner exit (runner.mjs:596). That run calls
+role.release, logs `runner: role.release: launcher-released` and still exits 0. idle-stop-race now
+asserts the idle run's runner.log has no `runner: role.release:` line.
+- M9. Drop `&& !released` at runner.mjs:596. It dies on idle-stop-race (the new doesNotMatch).
+
+N2. idle-stop-race waits for the whole held window (`"revoked" in window`), then asserts
+`window.control` is non-null with a message. If the other thread's run isn't holding when A's first
+release lands, the test now fails with that message instead of a bare "timed out waiting".
+
+The mutants to run are M1-M5, M7, M8 and M9. These test edits are in a third commit, after the fix.
+ad9fa9f16 stays the red-first commit for the two forcing cases mos-1415 names.
+
+## Round d5: red-first reordered (sage-3225, 05:49Z)
+
+Sage pointed out that 8cf2c6d54 changed idle-stop-race.test.mjs and launcher-released.test.mjs after
+ad9fa9f16. So a red run on ad9fa9f16 would test older copies than the ones that land. I took the first of
+Sage's two options and reordered the commits locally, before any push. The order is now:
+
+1. Tests: the final test files and this packet, over unfixed product files.
+2. The fix: broker.mjs, runner.mjs and the three READMEs.
+
+ad9fa9f16, 6e5f782ae and 8cf2c6d54 are superseded and were never pushed. The old tip is kept locally as
+gizmoduck/row302-pre-reorder. The fix commit's tree matches 8cf2c6d54's except for this BUILD.md note.
+The "third commit" in d4 now lives in these two commits.
+
+The red run uses the tests commit as it stands, with these test blobs (identical in the fix commit):
+
+| Blob | File |
+| --- | --- |
+| 52343932b231691ba2b4fc117547ea7f6f504704 | packages/bus/tests/land.test.mjs |
+| 6c83c9ede41247fd50d40eeac3e8a16a75efacbf | packages/bus/tests/launcher-released.test.mjs |
+| 27193a745c4ed8d4936de96c1768ab010a572856 | packages/bus/tests/threads.test.mjs |
+| 9dfacfea15a487c4e7056ebae3e311cb514b0467 | packages/cli/tests/idle-stop-race.test.mjs |
+| 0792431b60314a17ed74b3df0c5b3748dc3c1286 | packages/harness/tests/runner.test.mjs |
+
+The red run checks these blobs with `git rev-parse HEAD:<path>` before it starts.
+
+## Round d6: the first gate run's red in launcher-released.test.mjs:89 (gizmoduck-0388, sage-3294)
+
+The slot opened at 08:15Z (sage-3289). The gate tree was 649ec67ab, a local merge of 64f6558ee onto
+origin/refactor 1ac655005. The red stage on f799e8b15 passed: seven expected reds, with the pins at
+threads.test.mjs:394, land.test.mjs:464 and runner.test.mjs:771 (:772 sits behind :771 in one test).
+On 649ec67ab, idle-stop-race 1/1, runner.test 40/40 and compactions-launch 5/5 went green. The bus
+suite then had 875 of 876 pass. The one red was this row's own test, at launcher-released.test.mjs:89,
+1 !== 0. The gate stopped there, and the red went to Sage before any fix or rerun.
+
+The test was wrong. `#route` (broker.mjs:6482) writes one routed delivery row for every message.
+After threadIdle no run holds thread A, so `#recipient` (:832-834) returns null and `#delivery`
+(:6612) writes holder_run null. The line counted every row for the message. Nothing was delivered to
+a-run. ASSERTION-PRESERVATION.md entry 5 has the old and new lines.
+
+The fix narrows the count to rows for a-run and adds the line Sage made mandatory: the message has
+exactly one row, routed, holder_run null. bus rows come from node:sqlite with a null prototype, and the
+tests use assert/strict, so the second line spreads each row before deepEqual. That is the idiom in
+sessions.test.mjs:385 and session-clear.test.mjs:564. Sage's draft compared store.all directly, which
+would fail on the prototype alone.
+
+Packaging (sage-3294): this is a third commit on gizmoduck/row302 after the pushed f799e8b15 and
+64f6558ee. It touches only that test line, this note and ASSERTION-PRESERVATION.md. It goes out as a
+fast-forward push in a gap Sage names, after Mos rules (sage-3293). Then:
+
+1. The red run uses the final test files over f799e8b15's product: f799e8b15 checked out detached, with
+   the five test files from the new tip checked out on top. The script checks the new blobs first.
+2. The whole gate runs again on a fresh merge of the new tip onto origin/refactor.
+
+Dewey reviews the delta. The first run's logs stay in gizmo-302-out/gate-run1/.
@@ -0,0 +1,112 @@
+# Row 302 (#1809): gate results
+
+The slot ran from 08:15Z on 2026-10-23 (sage-3289), with Sage as gate owner and Dewey as reviewer.
+Logs: run1/gate-run.log and run2/gate-run.log. Script: run2/run-gate.sh and run2/mutants.py. The
+full per-file logs stay in /mnt/storage/scratch/gizmo-302-out/gate-run1/ and gate/.
+
+## Commits
+
+| Commit | What |
+| --- | --- |
+| f799e8b15 | red first: the tests over unfixed product (d5) |
+| 64f6558ee | the fix |
+| 5b63ea323 | d6: launcher-released.test.mjs:89, Mos ruling mos-1430 (relayed in sage-3297) |
+
+The 5b63ea323 subject still says "Mos ruling pending sage-3293; local, not pushed". I wrote it before
+mos-1430 arrived, and Sage said not to amend. The ruling is mos-1430, and the commit was pushed as a
+fast-forward at about 08:23Z.
+
+## Run 1 (08:18Z): stopped on a red outside the four pins
+
+- Gate tree: 649ec67ab, a local merge of 64f6558ee onto origin/refactor 1ac655005.
+- Red stage: as expected (the same reds as run 2).
+- Green on 649ec67ab: idle-stop-race 1/1, runner.test 40/40 and compactions-launch 5/5. Then bus had
+  875 of 876 pass. The red was this row's own test, at launcher-released.test.mjs:89, 1 !== 0.
+- It stopped at 08:19:28Z and went to Sage (gizmoduck-0388), then Mos. BUILD.md d6 has the cause.
+
+## Run 2 (08:23:41Z to 08:38:14Z, 873 s)
+
+The gate tree was 783602e06ed92f99c7c71d1e9c016a0f9e2c9b28, a local merge (not pushed). Parent 1 is
+origin/refactor 1ac655005, and parent 2 is 5b63ea323. The 12 row paths equal 5b63ea323's, and none
+of them changes in 0e30a85fa..1ac655005.
+
+### Red: f799e8b15's product with the final test files from 5b63ea323
+
+The five final test blobs:
+
+| Blob | File |
+| --- | --- |
+| 52343932b231691ba2b4fc117547ea7f6f504704 | packages/bus/tests/land.test.mjs |
+| 6fb6e15c2fd34f742f9aab718ff654ab2704e198 | packages/bus/tests/launcher-released.test.mjs (new in d6) |
+| 27193a745c4ed8d4936de96c1768ab010a572856 | packages/bus/tests/threads.test.mjs |
+| 9dfacfea15a487c4e7056ebae3e311cb514b0467 | packages/cli/tests/idle-stop-race.test.mjs |
+| 0792431b60314a17ed74b3df0c5b3748dc3c1286 | packages/harness/tests/runner.test.mjs |
+
+The script checked each blob with hash-object on the red tree. Only launcher-released differs from
+f799e8b15, and no product file differs from it.
+
+There were seven reds, and nothing else failed:
+
+- idle-stop-race: the released run ended with 'session stopped working: not-holder', exit 22 not 0
+- runner.test landing case: pin :771, with 22 vs 0
+- threads.test threadIdle case: pin :394
+- land.test landRelease case: pin :464
+- launcher-released: all three tests
+
+On the bus files, 33 of 38 passed and 5 failed.
+
+Pin :772 sits after :771 in the same test, so :771 stops the test first. :771's message is out.stderr,
+and that shows the old "session stopped working: not-holder" line and no "session released by the
+launcher" line. :89's two new lines never run on red, because the earlier refusals fail first. Run 2's
+green bus stage is their first green.
+
+### Green on 783602e06
+
+| Run | Result | Wall |
+| --- | --- | --- |
+| idle-stop-race | 1/1 | 2 s |
+| runner.test whole | 40/40 | 12 s |
+| compactions-launch | 5/5 | 14 s |
+| bus | 876/876 | 24 s |
+| harness | 151/151 | 13 s |
+| cli | 918/918 | 615 s |
+| test-auth | 15 | |
+| test-conductor | 17 | |
+| test-config | 55 | |
+| test-discord | 81 | |
+| test-extension-package | 18 | |
+| test-foundation | 44 | |
+| test-land-work | 86 | |
+| test-queue | node 156/156, suite 28 | |
+| test-release | 14 | |
+| test-task | 91 | |
+
+Every scripts/test-*.sh ended with rc 0 and 0 failed. The node suites skipped nothing and left no
+todo. The tree was clean after the tests.
+
+The shell scripts skipped two things:
+
+- test-queue: "queue verify and render --check: this checkout is not the queue's canonical root".
+  The gate runs in a worktree, not /mnt/storage/src/mosaic-stack.
+- test-task: "live provider cases (row 244: no provider call in the gate)", printed twice. It printed
+  no other skip line, so no Docker group was skipped.
+
+### Mutants on 783602e06
+
+Each kill file ran whole, and every listed test name had to fail. After each mutant the file was
+checked out again and matched its sha256. At the end, broker.mjs was 0c6dbbc5… and runner.mjs was
+72ec39eb…, both equal to 5b63ea323's, and the tree was clean.
+
+| Mutant | Change | Killed by |
+| --- | --- | --- |
+| M1 | no add after threadIdle's release | launcher-released (threadIdle), idle-stop-race |
+| M2 | #agent always not-holder | land, launcher-released (threadIdle, landRelease), idle-stop-race, runner landing case |
+| M3 | runner ignores launcher-released | idle-stop-race, runner landing case |
+| M4 | a released run exits session | idle-stop-race, runner landing case |
+| M5 | every lost claim reads launcher-released | launcher-released (other way), idle-stop-race |
+| M7 | role.claim's D1 check removed | launcher-released (threadIdle, landRelease) |
+| M8 | no add after landRelease's release | land, launcher-released (landRelease), runner landing case |
+| M9 | exit releases a launcher-released run | idle-stop-race |
+
+All eight were killed by rule, and none survived. When the run ended, no node process had its cwd in
+the worktree.
@@ -0,0 +1,57 @@
+blobs: the five d5 test blobs match in f799e8b15561ea2c0f0735e5328ba149c7a1a7b5 and 649ec67abcd315ac877bbad65742017b998137e4
+merge: 649ec67abcd315ac877bbad65742017b998137e4 = 64f6558ee4cc536447c720eb20b1f675f32ffbf0 onto 1ac655005e611157605a0dcc5adf7a37f9bca2b0; 12 row paths equal to 64f6558ee4cc536447c720eb20b1f675f32ffbf0, none touched in 0e30a85fa..1ac655005e611157605a0dcc5adf7a37f9bca2b0
+TIP 649ec67abcd315ac877bbad65742017b998137e4 (merge) FIX 64f6558ee4cc536447c720eb20b1f675f32ffbf0 RED f799e8b15561ea2c0f0735e5328ba149c7a1a7b5 base 0e30a85fa onto 1ac655005e611157605a0dcc5adf7a37f9bca2b0 origin/refactor 1ac655005e611157605a0dcc5adf7a37f9bca2b0 start 2026-10-23T08:18:31Z
+loadavg: 1.63 1.48 1.89 5/6323 1532949
+== 1. red first on f799e8b15561ea2c0f0735e5328ba149c7a1a7b5 (unfixed product, final tests)
+  TMPDIR /mnt/storage/scratch/tmp/ggiJ
+idle-stop-race rc=1 ℹ tests 1 ℹ pass 0 ℹ fail 1 ℹ cancelled 0 ℹ skipped 0 ℹ todo 0 
+  TMPDIR /mnt/storage/scratch/tmp/g2U9
+runner-land rc=1 ℹ tests 1 ℹ pass 0 ℹ fail 1 ℹ cancelled 0 ℹ skipped 0 ℹ todo 0 
+  TMPDIR /mnt/storage/scratch/tmp/g3Lr
+bus rc=1 ℹ tests 38 ℹ pass 33 ℹ fail 5 ℹ cancelled 0 ℹ skipped 0 ℹ todo 0 
+    ✖ failing tests:
+    ✖ landRelease releases the holding run by land-relaunch once it has asked message.receive and nothing delivered to it is unread, and waiting messages go to the next holder (34.180349ms)
+    ✖ REQ-THREAD-2 REQ-LAUNCH-1: threadIdle releases only a thread with nothing waiting, and only for its holder (33.321208ms)
+    ✖ row 302 a run landRelease released answers launcher-released, and claims nothing again (36.389735ms)
+    ✖ row 302 a run threadIdle released answers launcher-released on receive, state, read and send, logs each, and claims nothing again (39.497664ms)
+    ✖ row 302 with a run launcher-released, a run that lost its claim another way still answers not-holder (39.379523ms)
+    17:  AssertionError [ERR_ASSERTION]: runner: acme/assistant claimed by run ra10cf293beb6
+    21:  + actual - expected
+    32:    actual: 'session stopped working: not-holder',
+    33:    expected: 'session released by the launcher',
+    15:  AssertionError [ERR_ASSERTION]: runner: demo/coder claimed by run coder-run
+    35:    actual: 22,
+    36:    expected: 0,
+  pin red at threads.test.mjs:394:
+  pin red at land.test.mjs:464:
+  pin red at runner.test.mjs:771:
+  :772 pattern absent from stderr (old not-holder line present)
+  every red on f799e8b15561ea2c0f0735e5328ba149c7a1a7b5:
+    ✖ a run in a landing turn isn't released for a second held decision until its landing turns end and it has read its messages (602.229598ms)
+    ✖ failing tests:
+    ✖ landRelease releases the holding run by land-relaunch once it has asked message.receive and nothing delivered to it is unread, and waiting messages go to the next holder (34.180349ms)
+    ✖ REQ-THREAD-2 REQ-LAUNCH-1: threadIdle releases only a thread with nothing waiting, and only for its holder (33.321208ms)
+    ✖ row 302 a run landRelease released answers launcher-released, and claims nothing again (36.389735ms)
+    ✖ row 302 a run threadIdle released answers launcher-released on receive, state, read and send, logs each, and claims nothing again (39.497664ms)
+    ✖ row 302 REQ-THREAD-2 an idle-released run whose call lands before the SIGTERM ends stopped/0; a run whose claim the human revoked in the same window still ends session-invalid/22 (1672.44448ms)
+    ✖ row 302 with a run launcher-released, a run that lost its claim another way still answers not-holder (39.379523ms)
+  red stage: both forcing cases and the four pins red
+  wall 5 s
+== 2. green on 649ec67abcd315ac877bbad65742017b998137e4
+  TMPDIR /mnt/storage/scratch/tmp/gaYE
+idle-stop-race rc=0 ℹ tests 1 ℹ pass 1 ℹ fail 0 ℹ cancelled 0 ℹ skipped 0 ℹ todo 0 
+  wall 1 s
+  TMPDIR /mnt/storage/scratch/tmp/g9t4
+runner rc=0 ℹ tests 40 ℹ pass 40 ℹ fail 0 ℹ cancelled 0 ℹ skipped 0 ℹ todo 0 
+  wall 12 s
+  TMPDIR /mnt/storage/scratch/tmp/gwAp
+compactions-launch rc=0 ℹ tests 5 ℹ pass 5 ℹ fail 0 ℹ cancelled 0 ℹ skipped 0 ℹ todo 0 
+  wall 15 s
+  TMPDIR /mnt/storage/scratch/tmp/gPAB
+bus rc=1 ℹ tests 876 ℹ pass 875 ℹ fail 1 ℹ cancelled 0 ℹ skipped 0 ℹ todo 0 
+RED: bus, stop at 2026-10-23T08:19:28Z, wall 57 s
+430:✖ row 302 a run threadIdle released answers launcher-released on receive, state, read and send, logs each, and claims nothing again (81.984434ms)
+931:✖ failing tests:
+934:✖ row 302 a run threadIdle released answers launcher-released on receive, state, read and send, logs each, and claims nothing again (81.984434ms)
+935:  AssertionError [ERR_ASSERTION]: nothing delivered to the released run
+exit 1
@@ -0,0 +1,187 @@
+blobs: the five final test blobs (d5, launcher-released from d6) match in 5b63ea3236d82e14956594b41a00cbd7f7dc5f71 and 783602e06ed92f99c7c71d1e9c016a0f9e2c9b28
+merge: 783602e06ed92f99c7c71d1e9c016a0f9e2c9b28 = 5b63ea3236d82e14956594b41a00cbd7f7dc5f71 onto 1ac655005e611157605a0dcc5adf7a37f9bca2b0; 12 row paths equal to 5b63ea3236d82e14956594b41a00cbd7f7dc5f71, none touched in 0e30a85fa..1ac655005e611157605a0dcc5adf7a37f9bca2b0
+TIP 783602e06ed92f99c7c71d1e9c016a0f9e2c9b28 (merge) FIX 5b63ea3236d82e14956594b41a00cbd7f7dc5f71 RED f799e8b15561ea2c0f0735e5328ba149c7a1a7b5 base 0e30a85fa onto 1ac655005e611157605a0dcc5adf7a37f9bca2b0 origin/refactor 1ac655005e611157605a0dcc5adf7a37f9bca2b0 start 2026-10-23T08:23:41Z
+loadavg: 1.49 1.75 1.94 4/6320 1592551
+== 1. red first: f799e8b15561ea2c0f0735e5328ba149c7a1a7b5 product with the final test files from 5b63ea3236d82e14956594b41a00cbd7f7dc5f71 checked out on top
+  red tree: product of f799e8b15561ea2c0f0735e5328ba149c7a1a7b5, tests of 5b63ea3236d82e14956594b41a00cbd7f7dc5f71: packages/bus/tests/launcher-released.test.mjs 
+  TMPDIR /mnt/storage/scratch/tmp/gHpj
+idle-stop-race rc=1 ℹ tests 1 ℹ pass 0 ℹ fail 1 ℹ cancelled 0 ℹ skipped 0 ℹ todo 0 
+  TMPDIR /mnt/storage/scratch/tmp/gIww
+runner-land rc=1 ℹ tests 1 ℹ pass 0 ℹ fail 1 ℹ cancelled 0 ℹ skipped 0 ℹ todo 0 
+  TMPDIR /mnt/storage/scratch/tmp/g8I5
+bus rc=1 ℹ tests 38 ℹ pass 33 ℹ fail 5 ℹ cancelled 0 ℹ skipped 0 ℹ todo 0 
+    ✖ failing tests:
+    ✖ landRelease releases the holding run by land-relaunch once it has asked message.receive and nothing delivered to it is unread, and waiting messages go to the next holder (37.255433ms)
+    ✖ REQ-THREAD-2 REQ-LAUNCH-1: threadIdle releases only a thread with nothing waiting, and only for its holder (30.900781ms)
+    ✖ row 302 a run landRelease released answers launcher-released, and claims nothing again (36.454968ms)
+    ✖ row 302 a run threadIdle released answers launcher-released on receive, state, read and send, logs each, and claims nothing again (40.167008ms)
+    ✖ row 302 with a run launcher-released, a run that lost its claim another way still answers not-holder (38.485853ms)
+    17:  AssertionError [ERR_ASSERTION]: runner: acme/assistant claimed by run r3f96e5142838
+    21:  + actual - expected
+    32:    actual: 'session stopped working: not-holder',
+    33:    expected: 'session released by the launcher',
+    15:  AssertionError [ERR_ASSERTION]: runner: demo/coder claimed by run coder-run
+    35:    actual: 22,
+    36:    expected: 0,
+  pin red at threads.test.mjs:394:
+  pin red at land.test.mjs:464:
+  pin red at runner.test.mjs:771:
+  :772 pattern absent from stderr (old not-holder line present)
+  every red on f799e8b15561ea2c0f0735e5328ba149c7a1a7b5:
+    ✖ a run in a landing turn isn't released for a second held decision until its landing turns end and it has read its messages (604.606436ms)
+    ✖ failing tests:
+    ✖ landRelease releases the holding run by land-relaunch once it has asked message.receive and nothing delivered to it is unread, and waiting messages go to the next holder (37.255433ms)
+    ✖ REQ-THREAD-2 REQ-LAUNCH-1: threadIdle releases only a thread with nothing waiting, and only for its holder (30.900781ms)
+    ✖ row 302 a run landRelease released answers launcher-released, and claims nothing again (36.454968ms)
+    ✖ row 302 a run threadIdle released answers launcher-released on receive, state, read and send, logs each, and claims nothing again (40.167008ms)
+    ✖ row 302 REQ-THREAD-2 an idle-released run whose call lands before the SIGTERM ends stopped/0; a run whose claim the human revoked in the same window still ends session-invalid/22 (1604.296753ms)
+    ✖ row 302 with a run launcher-released, a run that lost its claim another way still answers not-holder (38.485853ms)
+  red stage: both forcing cases and the four pins red
+  wall 4 s
+== 2. green on 783602e06ed92f99c7c71d1e9c016a0f9e2c9b28
+  TMPDIR /mnt/storage/scratch/tmp/gMtc
+idle-stop-race rc=0 ℹ tests 1 ℹ pass 1 ℹ fail 0 ℹ cancelled 0 ℹ skipped 0 ℹ todo 0 
+  wall 2 s
+  TMPDIR /mnt/storage/scratch/tmp/gLSw
+runner rc=0 ℹ tests 40 ℹ pass 40 ℹ fail 0 ℹ cancelled 0 ℹ skipped 0 ℹ todo 0 
+  wall 12 s
+  TMPDIR /mnt/storage/scratch/tmp/gTQ3
+compactions-launch rc=0 ℹ tests 5 ℹ pass 5 ℹ fail 0 ℹ cancelled 0 ℹ skipped 0 ℹ todo 0 
+  wall 14 s
+  TMPDIR /mnt/storage/scratch/tmp/gAbg
+bus rc=0 ℹ tests 876 ℹ pass 876 ℹ fail 0 ℹ cancelled 0 ℹ skipped 0 ℹ todo 0 
+  wall 24 s
+  TMPDIR /mnt/storage/scratch/tmp/gzOd
+harness rc=0 ℹ tests 151 ℹ pass 151 ℹ fail 0 ℹ cancelled 0 ℹ skipped 0 ℹ todo 0 
+  wall 13 s
+  TMPDIR /mnt/storage/scratch/tmp/gxSF
+cli rc=0 ℹ tests 918 ℹ pass 918 ℹ fail 0 ℹ cancelled 0 ℹ skipped 0 ℹ todo 0 
+  wall 615 s
+  TMPDIR /mnt/storage/scratch/tmp/gL7z
+test-auth rc=0 
+    
+    selftest: 15 passed, 0 failed
+  wall 1 s
+  TMPDIR /mnt/storage/scratch/tmp/ghcv
+test-conductor rc=0 
+    
+    selftest: 17 passed, 0 failed
+  wall 6 s
+  TMPDIR /mnt/storage/scratch/tmp/gCsn
+test-config rc=0 
+    
+    selftest: 55 passed, 0 failed
+  wall 3 s
+  TMPDIR /mnt/storage/scratch/tmp/guh1
+test-discord rc=0 
+    
+    discord suite: 81 passed, 0 failed
+  wall 7 s
+  TMPDIR /mnt/storage/scratch/tmp/gVDP
+test-extension-package rc=0 
+    
+    extension package selftest: 18 passed, 0 failed
+  wall 1 s
+  TMPDIR /mnt/storage/scratch/tmp/g1V8
+test-foundation rc=0 
+    
+    selftest: 44 passed, 0 failed
+  wall 38 s
+  TMPDIR /mnt/storage/scratch/tmp/gYsp
+test-land-work rc=0 
+    ---
+    land-work selftests: 86 passed, 0 failed
+  wall 11 s
+  TMPDIR /mnt/storage/scratch/tmp/gucV
+test-queue rc=0 ℹ tests 156 ℹ pass 156 ℹ fail 0 
+    
+    queue suite: 28 passed, 0 failed
+  wall 21 s
+  TMPDIR /mnt/storage/scratch/tmp/gGva
+test-release rc=0 
+    
+    selftest: 14 passed, 0 failed
+  wall 3 s
+  TMPDIR /mnt/storage/scratch/tmp/g4vO
+test-task rc=0 
+    
+    selftest: 91 passed, 0 failed
+  wall 16 s
+after tests: clean
+== skips
+suite/test-queue.log:skip  queue verify and render --check: this checkout (/mnt/storage/scratch/gizmo-302) is not the queue's canonical root (/mnt/storage/src/mosaic-stack)
+suite/test-task.log:skip live provider cases (row 244: no provider call in the gate)
+suite/test-task.log:skip live provider cases (row 244: no provider call in the gate)
+== 3. mutants
+  TMPDIR /mnt/storage/scratch/tmp/gDiY
+M1.launcher-released rc=1 ℹ tests 3 ℹ pass 1 ℹ fail 2 ℹ cancelled 0 ℹ skipped 0 ℹ todo 0 
+  killed: row 302 a run threadIdle released answers launcher-released
+  TMPDIR /mnt/storage/scratch/tmp/glVj
+M1.idle-stop-race rc=1 ℹ tests 1 ℹ pass 0 ℹ fail 1 ℹ cancelled 0 ℹ skipped 0 ℹ todo 0 
+  killed: row 302 REQ-THREAD-2 an idle-released run
+M1 KILLED by rule
+  wall 2 s
+  TMPDIR /mnt/storage/scratch/tmp/grHO
+M2.land rc=1 ℹ tests 18 ℹ pass 17 ℹ fail 1 ℹ cancelled 0 ℹ skipped 0 ℹ todo 0 
+  killed: landRelease releases the holding run by land-relaunch
+  TMPDIR /mnt/storage/scratch/tmp/giID
+M2.launcher-released rc=1 ℹ tests 3 ℹ pass 0 ℹ fail 3 ℹ cancelled 0 ℹ skipped 0 ℹ todo 0 
+  killed: row 302 a run threadIdle released answers launcher-released
+  killed: row 302 a run landRelease released answers launcher-released
+  TMPDIR /mnt/storage/scratch/tmp/gXTo
+M2.idle-stop-race rc=1 ℹ tests 1 ℹ pass 0 ℹ fail 1 ℹ cancelled 0 ℹ skipped 0 ℹ todo 0 
+  killed: row 302 REQ-THREAD-2 an idle-released run
+  TMPDIR /mnt/storage/scratch/tmp/gTkJ
+M2.runner rc=1 ℹ tests 40 ℹ pass 39 ℹ fail 1 ℹ cancelled 0 ℹ skipped 0 ℹ todo 0 
+  killed: a run in a landing turn isn't released for a second held decision
+M2 KILLED by rule
+  wall 15 s
+  TMPDIR /mnt/storage/scratch/tmp/ge9B
+M3.idle-stop-race rc=1 ℹ tests 1 ℹ pass 0 ℹ fail 1 ℹ cancelled 0 ℹ skipped 0 ℹ todo 0 
+  killed: row 302 REQ-THREAD-2 an idle-released run
+  TMPDIR /mnt/storage/scratch/tmp/gYUi
+M3.runner rc=1 ℹ tests 40 ℹ pass 39 ℹ fail 1 ℹ cancelled 0 ℹ skipped 0 ℹ todo 0 
+  killed: a run in a landing turn isn't released for a second held decision
+M3 KILLED by rule
+  wall 33 s
+  TMPDIR /mnt/storage/scratch/tmp/gw5X
+M4.idle-stop-race rc=1 ℹ tests 1 ℹ pass 0 ℹ fail 1 ℹ cancelled 0 ℹ skipped 0 ℹ todo 0 
+  killed: row 302 REQ-THREAD-2 an idle-released run
+  TMPDIR /mnt/storage/scratch/tmp/g90Y
+M4.runner rc=1 ℹ tests 40 ℹ pass 39 ℹ fail 1 ℹ cancelled 0 ℹ skipped 0 ℹ todo 0 
+  killed: a run in a landing turn isn't released for a second held decision
+M4 KILLED by rule
+  wall 14 s
+  TMPDIR /mnt/storage/scratch/tmp/gNlw
+M5.launcher-released rc=1 ℹ tests 3 ℹ pass 1 ℹ fail 2 ℹ cancelled 0 ℹ skipped 0 ℹ todo 0 
+  killed: row 302 with a run launcher-released, a run that lost its claim
+  TMPDIR /mnt/storage/scratch/tmp/gCk7
+M5.idle-stop-race rc=1 ℹ tests 1 ℹ pass 0 ℹ fail 1 ℹ cancelled 0 ℹ skipped 0 ℹ todo 0 
+  killed: row 302 REQ-THREAD-2 an idle-released run
+M5 KILLED by rule
+  wall 2 s
+  TMPDIR /mnt/storage/scratch/tmp/gaHU
+M7.launcher-released rc=1 ℹ tests 3 ℹ pass 1 ℹ fail 2 ℹ cancelled 0 ℹ skipped 0 ℹ todo 0 
+  killed: row 302 a run threadIdle released answers launcher-released
+  killed: row 302 a run landRelease released answers launcher-released
+M7 KILLED by rule
+  wall 1 s
+  TMPDIR /mnt/storage/scratch/tmp/g3K9
+M8.land rc=1 ℹ tests 18 ℹ pass 17 ℹ fail 1 ℹ cancelled 0 ℹ skipped 0 ℹ todo 0 
+  killed: landRelease releases the holding run by land-relaunch
+  TMPDIR /mnt/storage/scratch/tmp/ge6z
+M8.launcher-released rc=1 ℹ tests 3 ℹ pass 2 ℹ fail 1 ℹ cancelled 0 ℹ skipped 0 ℹ todo 0 
+  killed: row 302 a run landRelease released answers launcher-released
+  TMPDIR /mnt/storage/scratch/tmp/gWPU
+M8.runner rc=1 ℹ tests 40 ℹ pass 39 ℹ fail 1 ℹ cancelled 0 ℹ skipped 0 ℹ todo 0 
+  killed: a run in a landing turn isn't released for a second held decision
+M8 KILLED by rule
+  wall 13 s
+  TMPDIR /mnt/storage/scratch/tmp/gqwU
+M9.idle-stop-race rc=1 ℹ tests 1 ℹ pass 0 ℹ fail 1 ℹ cancelled 0 ℹ skipped 0 ℹ todo 0 
+  killed: row 302 REQ-THREAD-2 an idle-released run
+M9 KILLED by rule
+  wall 2 s
+end 2026-10-23T08:38:14Z wall 873 s
+node with cwd in the worktree: 0
+exit 0
@@ -0,0 +1,47 @@
+#!/usr/bin/env python3
+# Row 302 (#1809) mutants, from BUILD.md d3 and d4. Each replaces one exact string, once, in one file.
+# Kill rule: every (test file, failing test name) listed fails in that file's run.
+#   mutants.py list | apply M | file M | kills M
+import sys
+
+BROKER = "packages/bus/src/broker.mjs"
+RUNNER = "packages/harness/src/runner.mjs"
+ADD = "    this.#launcherReleased.add(key);\n"
+
+IDLE = ("packages/cli/tests/idle-stop-race.test.mjs", "row 302 REQ-THREAD-2 an idle-released run")
+LR1 = ("packages/bus/tests/launcher-released.test.mjs", "row 302 a run threadIdle released answers launcher-released")
+LR2 = ("packages/bus/tests/launcher-released.test.mjs", "row 302 with a run launcher-released, a run that lost its claim")
+LR3 = ("packages/bus/tests/launcher-released.test.mjs", "row 302 a run landRelease released answers launcher-released")
+LAND = ("packages/bus/tests/land.test.mjs", "landRelease releases the holding run by land-relaunch")
+RUN = ("packages/harness/tests/runner.test.mjs", "a run in a landing turn isn't released for a second held decision")
+
+M = {
+    "M1": (BROKER, "this.#claimEnd(session, this.#own(session), 'release', null));\n" + ADD,
+           "this.#claimEnd(session, this.#own(session), 'release', null));\n", [IDLE, LR1]),
+    "M2": (BROKER, "fail(this.#launcherReleased.has(s.business + ':' + s.run) ? 'launcher-released' : 'not-holder');",
+           "fail('not-holder');", [IDLE, LR1, LR3, LAND, RUN]),
+    "M3": (RUNNER, "    if (err.code === LAUNCHER_RELEASED) {", "    if (false) {", [IDLE, RUN]),
+    "M4": (RUNNER, "      released = true;\n      return true;", "      released = true;\n      code = EXIT.session;\n      return true;", [IDLE, RUN]),
+    "M5": (BROKER, "? 'launcher-released' : 'not-holder')", "? 'launcher-released' : 'launcher-released')", [IDLE, LR2]),
+    "M7": (BROKER, "        if (this.#launcherReleased.has(s.business + ':' + s.run)) fail('launcher-released');\n", "", [LR1, LR3]),
+    "M8": (BROKER, "'land-relaunch'));\n" + ADD, "'land-relaunch'));\n", [LR3, LAND, RUN]),
+    "M9": (RUNNER, "if (code === EXIT.stopped && !released) {", "if (code === EXIT.stopped) {", [IDLE]),
+}
+
+cmd = sys.argv[1]
+if cmd == "list":
+    print(" ".join(M))
+elif cmd == "file":
+    print(M[sys.argv[2]][0])
+elif cmd == "kills":
+    for f, name in M[sys.argv[2]][3]:
+        print(f + "\t" + name)
+elif cmd == "apply":
+    path, old, new, _ = M[sys.argv[2]]
+    s = open(path).read()
+    if s.count(old) != 1:
+        sys.exit(f"{sys.argv[2]}: anchor found {s.count(old)} times in {path}")
+    open(path, "w").write(s.replace(old, new))
+    print(path)
+else:
+    sys.exit("usage: mutants.py list|apply M|file M|kills M")
@@ -0,0 +1,147 @@
+#!/bin/bash
+# Row 302 (#1809, Vikunja 588) gate. Plan: agents/gizmoduck/work/queue-302/BUILD.md d3 "Run plan", d4, d5.
+#  0. Preflight: worktree at TIP and clean, the five test blobs from d5. TIP is the local merge of 64f6558ee
+#     onto origin/refactor 1ac655005 (sage-3289); the 12 row paths are unchanged in BASE..1ac655005.
+#  1. Red (mos-1415): f799e8b15 (final tests, unfixed product). idle-stop-race and the runner.test land case
+#     must fail. The bus files are run and recorded. A green forcing case here is a STOP.
+#  2. On TIP: idle-stop-race alone 600 s, runner.test whole 900 s, compactions-launch whole 600 s,
+#     bus 1200 s, harness 1200 s, cli 2100 s, then the scripts/test-*.sh at 900 s each.
+#  3. M1-M5, M7, M8, M9 (mutants.py). Each kill-listed file runs whole; every listed test name must fail.
+#     After each: git checkout, sha256 equal to the candidate's, tree clean. A survivor is a STOP to Sage.
+# mos-1272: a first-run red in a new test is placed and reported after; any other red stops the run.
+set -o pipefail
+WT=/mnt/storage/scratch/gizmo-302
+# Run 2 (BUILD d6): FIX is the d6 tip; TIP is a fresh merge of it onto ONTO, set when the run is cleared.
+TIP=${TIP:?set TIP to the run-2 merge sha}
+FIX=5b63ea3236d82e14956594b41a00cbd7f7dc5f71
+ONTO=${ONTO:?set ONTO to origin/refactor at the merge}
+BR=gizmoduck/row302-gate
+RED=f799e8b15561ea2c0f0735e5328ba149c7a1a7b5
+BASE=0e30a85fa
+OUT=/mnt/storage/scratch/gizmo-302-out/gate
+PY=/mnt/storage/scratch/gizmo-302-out/mutants.py
+cd "$WT" || exit 9
+[ "$(git rev-parse HEAD)" = "$TIP" ] || { echo "not on the gate commit"; exit 9; }
+[ -z "$(git status --porcelain --untracked-files=no)" ] || { echo "dirty"; exit 9; }
+TESTS=""
+while read -r blob f; do
+  [ "$(git rev-parse "$TIP:$f")" = "$blob" ] && [ "$(git rev-parse "$FIX:$f")" = "$blob" ] || { echo "blob mismatch $f"; exit 9; }
+  TESTS="$TESTS $f"
+done <<'EOF'
+52343932b231691ba2b4fc117547ea7f6f504704 packages/bus/tests/land.test.mjs
+6fb6e15c2fd34f742f9aab718ff654ab2704e198 packages/bus/tests/launcher-released.test.mjs
+27193a745c4ed8d4936de96c1768ab010a572856 packages/bus/tests/threads.test.mjs
+9dfacfea15a487c4e7056ebae3e311cb514b0467 packages/cli/tests/idle-stop-race.test.mjs
+0792431b60314a17ed74b3df0c5b3748dc3c1286 packages/harness/tests/runner.test.mjs
+EOF
+echo "blobs: the five final test blobs (d5, launcher-released from d6) match in $FIX and $TIP"
+[ -L node_modules ] || ln -s /mnt/storage/src/mosaic-stack/node_modules node_modules
+[ -L node_modules ] || { echo "no node_modules link"; exit 8; }
+[ "$(git rev-parse $TIP^1) $(git rev-parse $TIP^2)" = "$ONTO $FIX" ] || { echo "merge parents wrong"; exit 9; }
+paths=$(git diff --name-only $BASE $FIX)
+[ "$(echo "$paths" | wc -l)" -eq 12 ] || { echo "row paths not 12"; exit 9; }
+over=$(git diff --name-only $BASE $ONTO -- $paths)
+[ -z "$over" ] || { echo "BASE..ONTO touches row paths:"; echo "$over"; exit 9; }
+git diff --quiet $FIX $TIP -- $paths || { echo "merge changed a row path"; exit 9; }
+echo "merge: $TIP = $FIX onto $ONTO; 12 row paths equal to $FIX, none touched in $BASE..$ONTO"
+[ -e "$OUT" ] && { echo "$OUT exists; move it first"; exit 9; }
+mkdir -p "$OUT/red" "$OUT/suite" "$OUT/mut"
+newtmp() { export TMPDIR=$(mktemp -d /mnt/storage/scratch/tmp/gXXX); echo "  TMPDIR $TMPDIR"; }
+echo "TIP $TIP (merge) FIX $FIX RED $RED base $BASE onto $ONTO origin/refactor $(git rev-parse origin/refactor) start $(date -u +%FT%TZ)"; echo "loadavg: $(cat /proc/loadavg)"
+T0=$SECONDS; t0=$SECONDS; lap() { echo "  wall $((SECONDS - t0)) s"; t0=$SECONDS; }
+counts() { grep -E '^ℹ (tests|pass|fail|cancelled|skipped|todo) ' "$1" | tr '\n' ' '; echo; }
+timed() { # log dir limit args... ; sets rc
+  local log=$1 dir=$2 lim=$3; shift 3
+  newtmp
+  (cd "$dir" && timeout -k 10 "$lim" "$@") > "$log" 2>&1
+  rc=$?
+  if [ $rc -eq 124 ] || [ $rc -eq 137 ]; then
+    echo "TIMEOUT after $lim s: $(basename "$log" .log). To Sage."
+    case $(basename "$log") in test-*.log) echo "SHELL-PHASE TIMEOUT (mos-1275): to Mos unplaced";; esac
+  fi
+  echo "$(basename "$log" .log) rc=$rc $(counts "$log")"
+}
+green() { # log dir limit args... ; any red stops
+  timed "$@"
+  if [ $rc -ne 0 ]; then
+    echo "RED: $(basename "$1" .log), stop at $(date -u +%FT%TZ), wall $((SECONDS - T0)) s"
+    grep -nE '^not ok|✖|AssertionError|Error:' "$1" | head -40
+    exit 1
+  fi
+}
+
+echo "== 1. red first: $RED product with the final test files from $FIX checked out on top"
+git checkout -q --detach "$RED" || exit 9
+git checkout -q "$FIX" -- $TESTS || exit 9
+while read -r f; do [ "$(git hash-object "$f")" = "$(git rev-parse "$FIX:$f")" ] || { echo "red tree blob wrong $f"; exit 9; }; done < <(echo $TESTS | tr ' ' '\n')
+[ -z "$(git diff --name-only HEAD -- 'packages/*/src/*')" ] || exit 9
+echo "  red tree: product of $RED, tests of $FIX: $(git diff --cached --name-only HEAD | tr '\n' ' ')"
+[ -z "$(git diff --name-only $BASE HEAD -- 'packages/*/src/*')" ] || { echo "red commit changes product files"; git checkout -q $BR; exit 9; }
+timed "$OUT/red/idle-stop-race.log" "$WT/packages/cli" 600 node --test tests/idle-stop-race.test.mjs; r1=$rc
+timed "$OUT/red/runner-land.log" "$WT/packages/harness" 600 node --test --test-name-pattern="^a run in a landing turn isn't released for a second held decision" tests/runner.test.mjs; r2=$rc
+timed "$OUT/red/bus.log" "$WT/packages/bus" 600 node --test tests/launcher-released.test.mjs tests/threads.test.mjs tests/land.test.mjs
+grep -E '✖ ' "$OUT/red/bus.log" | sort -u | sed 's/^/    /' | head -20
+git reset -q --hard "$RED" && git checkout -q $BR || exit 9
+[ "$(git rev-parse HEAD)" = "$TIP" ] && [ -z "$(git status --porcelain --untracked-files=no)" ] || { echo "not back on TIP clean"; exit 9; }
+red_ok=1
+[ $r1 -ne 0 ] && grep -qF "✖ row 302 REQ-THREAD-2 an idle-released run" "$OUT/red/idle-stop-race.log" || { echo "  idle-stop-race NOT red on $RED"; red_ok=0; }
+[ $r2 -ne 0 ] && grep -qF "✖ a run in a landing turn isn't released for a second held decision" "$OUT/red/runner-land.log" || { echo "  runner.test land case NOT red on $RED"; red_ok=0; }
+grep -nE 'AssertionError|actual|expected' "$OUT/red/idle-stop-race.log" | head -12 | sed 's/^/    /'
+grep -nE 'AssertionError|actual|expected' "$OUT/red/runner-land.log" | head -8 | sed 's/^/    /'
+# The four ruled pins (mos-1414/1415/1416). :772 sits after :771 in one test, so :771 stops it first;
+# :771's message is out.stderr, so the log shows the old "stopped working: not-holder" line and no
+# "released by the launcher" line, which is the line :772 now pins.
+grep -qF "✖ REQ-THREAD-2 REQ-LAUNCH-1: threadIdle releases only a thread with nothing waiting" "$OUT/red/bus.log" || { echo "  threads.test threadIdle case NOT red"; red_ok=0; }
+grep -qF "✖ landRelease releases the holding run by land-relaunch" "$OUT/red/bus.log" || { echo "  land.test landRelease case NOT red"; red_ok=0; }
+for pin in "threads.test.mjs:394:" "land.test.mjs:464:"; do
+  grep -qF "$pin" "$OUT/red/bus.log" && echo "  pin red at $pin" || { echo "  pin $pin not in the failure stacks"; red_ok=0; }
+done
+grep -qF "runner.test.mjs:771:" "$OUT/red/runner-land.log" && echo "  pin red at runner.test.mjs:771:" || { echo "  pin runner.test.mjs:771 not in the failure stack"; red_ok=0; }
+grep -qF "session stopped working: not-holder" "$OUT/red/runner-land.log" && ! grep -qF "session released by the launcher" "$OUT/red/runner-land.log" \
+  && echo "  :772 pattern absent from stderr (old not-holder line present)" || { echo "  :772 evidence missing"; red_ok=0; }
+echo "  every red on $RED:"; cat "$OUT"/red/*.log | grep -E '^✖ |^  ✖ |✖ ' | sed 's/^ *//' | sort -u | sed 's/^/    /'
+[ $red_ok -eq 1 ] && echo "  red stage: both forcing cases and the four pins red" || { echo "STOP: red stage failed, to Sage"; exit 3; }
+lap
+
+echo "== 2. green on $TIP"
+green "$OUT/suite/idle-stop-race.log" "$WT/packages/cli" 600 node --test tests/idle-stop-race.test.mjs; lap
+green "$OUT/suite/runner.log" "$WT/packages/harness" 900 node --test tests/runner.test.mjs; lap
+green "$OUT/suite/compactions-launch.log" "$WT/packages/cli" 600 node --test tests/compactions-launch.test.mjs; lap
+green "$OUT/suite/bus.log" "$WT/packages/bus" 1200 node --test tests/*.test.mjs; lap
+green "$OUT/suite/harness.log" "$WT/packages/harness" 1200 node --test tests/*.test.mjs; lap
+green "$OUT/suite/cli.log" "$WT/packages/cli" 2100 node --test tests/*.test.mjs; lap
+for s in "$WT"/scripts/test-*.sh; do
+  n=$(basename "$s" .sh)
+  green "$OUT/suite/$n.log" "$WT" 900 bash "$s"
+  tail -2 "$OUT/suite/$n.log" | sed 's/^/    /'; lap
+done
+[ -z "$(git status --porcelain --untracked-files=no)" ] && echo "after tests: clean" || { echo "after tests: DIRTY"; exit 1; }
+echo "== skips"
+grep -HE '^ℹ skipped [1-9]|^ℹ todo [1-9]' "$OUT"/suite/*.log | sed "s#$OUT/##"
+grep -HiE '^(skip|# skip|SKIP)|skipped' "$OUT"/suite/test-*.log | grep -v '^ℹ' | sed "s#$OUT/##" | head -40
+
+echo "== 3. mutants"
+limit() { case $1 in *cli/*) echo 600;; *runner.test*) echo 900;; *) echo 600;; esac; }
+for m in $(python3 -B "$PY" list); do
+  src=$(python3 -B "$PY" file "$m")
+  sum=$(git show "HEAD:$src" | sha256sum | cut -c1-64)
+  python3 -B "$PY" apply "$m" >/dev/null || { echo "$m apply-failed"; git checkout -- "$src"; exit 8; }
+  git diff > "$OUT/mut/$m.diff"
+  ok=1
+  for f in $(python3 -B "$PY" kills "$m" | cut -f1 | sort -u); do
+    pkg=${f%%/tests/*}; rel=tests/${f#*/tests/}
+    log="$OUT/mut/$m.$(basename "$f" .test.mjs).log"
+    timed "$log" "$WT/$pkg" "$(limit "$f")" node --test "$rel"
+    [ $rc -ne 0 ] || { echo "  $m survived in $f"; ok=0; }
+    while IFS=$'\t' read -r kf name; do
+      [ "$kf" = "$f" ] || continue
+      grep -qF "✖ $name" "$log" && echo "  killed: $name" || { echo "  NOT failing: $name"; ok=0; }
+    done < <(python3 -B "$PY" kills "$m")
+  done
+  git checkout -- "$src"
+  [ "$(sha256sum "$WT/$src" | cut -c1-64)" = "$sum" ] && [ -z "$(git status --porcelain --untracked-files=no)" ] || { echo "$m restore-failed"; exit 7; }
+  if [ $ok -eq 1 ]; then echo "$m KILLED by rule"; else echo "STOP: $m kill rule not met, to Sage"; exit 4; fi
+  lap
+done
+echo "end $(date -u +%FT%TZ) wall $((SECONDS - T0)) s"
+cd /; echo "node with cwd in the worktree: $(for p in $(pgrep -x node); do readlink /proc/$p/cwd; done 2>/dev/null | grep -c "$WT")"
@@ -0,0 +1,67 @@
+# Row 301 build notes (Launchpad): R6-N4, fold user-bus.mjs back into bus.mjs (#1808)
+
+Brief: docs/plans/2026-10-23_r6-followup-rows.md § Brief: R6-N4. Reviewer Duckworth, gate owner Sage.
+Base e551cd846 (refactor after row 303). Branch launchpad/row301.
+
+## Change
+
+- packages/webui/src/bus.mjs: the user transport moves in beside humanCall, after `busReader`:
+  `USER_CLI`, `userCall`, `busBusiness` and `userCaller`, byte for byte from user-bus.mjs (checked
+  with diff), under a three-line header. One import is added, `fileURLToPath` from node:url.
+  `readHostState`, `spawn`, `randomBytes` and `BusReadError` were already in bus.mjs. humanCall and
+  busCaller are untouched.
+- packages/webui/src/user-bus.mjs: deleted.
+- packages/webui/src/cli.mjs: the two imports become one, from './bus.mjs'.
+- packages/webui/src/console-bus.mjs: a comment names bus.mjs instead of user-bus.mjs.
+- packages/webui/tests/granted-user.test.mjs:22-23: the two imports become one, from '../src/bus.mjs'.
+  Only the import path changes. Mos ruled (mos-1449, via sage-3399) that this is covered by "update
+  its imports" and is not an old-test change.
+
+No other reference to user-bus.mjs remains under packages/. tools/agent-watch's "user-bus" means
+something unrelated. The 294 packet's mutants name the old file as history only.
+
+## Re-pin
+
+channel-proof.test.mjs:28 pinned packages/webui/src/bus.mjs at 15e8123f…3313. After the fold the
+file hashes to 39fcb27c82e917ef05e1a7a650d522c9f3c656bf8dbade87b8ddb3661b67ad6c. A pin change is an
+old-test change. Mos approved it under mos-1272 in mos-1449 (via sage-3399), as its own commit, with
+row 301 making its own re-pin window. Mos checked fd4b8c36e read-only: bus.mjs hashes to 39fcb27c,
+its diff removes no lines, user-bus.mjs from `export const USER_CLI` to the end is in it byte for
+byte, and nothing else imports user-bus.mjs. The second commit changes that one value and adds one
+comment line in the row 165/171/194 style.
+
+## Gate
+
+Duckworth approves the manifest. channel-proof.test, the webui suite and the 294 user-transport
+tests (granted-user.test.mjs) run whole and green, on Sage's CLEAR.
+
+MANIFEST.sha256 lists the changed paths. DELETED.txt names the one removed path.
+
+## Run 1 (sage-3408 CLEAR, 12:08Z, head 04a179740)
+
+npm ci root and webui green. channel-proof.test whole 2 pass 0 fail. The webui suite whole went
+374 tests, 372 pass, 2 fail, 0 skipped, so the gate stopped. granted-user.test whole, run after the
+stop to see whether the stop hid another red: 19 pass 0 fail. No file changed.
+
+Both reds were in old tests: library-cli.test.mjs:10 (C2-04) and thread-claims.test.mjs:54 (row278
+Console adapter). Each failed with `SyntaxError: The requested module './bus.mjs' does not provide an
+export named 'busBusiness'` at cli.mjs:5. Each test spawns cli.mjs with a registerHooks load hook
+that replaces /webui/src/bus.mjs with a fixture exporting only BusReadError and busCaller. Before
+the fold, cli.mjs took busBusiness and userCaller from the real user-bus.mjs. Now they come from the
+stubbed bus.mjs, so cli.mjs fails to link. cli.mjs calls them only under --sso (:98, :103), and
+neither test passes --sso. A URL-keyed stub is not an import, so the "nothing else imports
+user-bus.mjs" check and the static reviews missed it. `git grep "webui/src/bus.mjs" --
+'packages/*/tests/*'` finds exactly channel-proof, library-cli and thread-claims.
+
+## Fixture change (mos-1451 under mos-1272, via sage-3418)
+
+Mos approved option A with one change and refused option B, a namespace import in cli.mjs. Each
+of the two busSource template strings (library-cli.test.mjs:17, thread-claims.test.mjs:58) gets
+this appended, and nothing else changes in either file:
+
+    export const busBusiness=()=>{throw Error('busBusiness outside --sso')};export const userCaller=()=>{throw Error('userCaller outside --sso')};
+
+The stubs throw rather than return null, so a test that reaches them outside --sso fails loudly.
+The text has no backtick, `${` or backslash, so the template literal carries it unchanged. The
+manifest goes from five paths to seven. Sage's gate: webui 374/0, channel-proof 2/0,
+granted-user 19/0. Any other red stops the gate and goes to Mos.
@@ -0,0 +1 @@
+deleted  packages/webui/src/user-bus.mjs
@@ -0,0 +1,7 @@
+db1f05e312b9bee7ece7df7df78047a2965024109a297cb8a24112135a6e5f04  packages/bus/tests/channel-proof.test.mjs
+39fcb27c82e917ef05e1a7a650d522c9f3c656bf8dbade87b8ddb3661b67ad6c  packages/webui/src/bus.mjs
+0862b2b5bf6511d2c5deca1f318eee643edaee489c0ce8c83e57364f2f54a3d8  packages/webui/src/cli.mjs
+653d2087c0796a35c3884b7243d1adf8a78c52950a4924049317063f2d3c0974  packages/webui/src/console-bus.mjs
+34b6d052855369c8f7cf1faf8bab3c59ddf96ccd4c42731bd86a4e61e5e70640  packages/webui/tests/granted-user.test.mjs
+7e782c2b6b46b6b8b6e58cd3d148bf041d49e8fbf2cbbed51080cdb02fc11d89  packages/webui/tests/library-cli.test.mjs
+dd1e62d14a59bb8fe7cd4654dd1de8e518270c36d104ee356e165faee7f95a02  packages/webui/tests/thread-claims.test.mjs
@@ -0,0 +1,26 @@
+# Row 303 build notes (Launchpad): R9 shows its output when rehearse makes no directory (#1810)
+
+Brief: docs/plans/2026-10-23_r9-guard-row.md (Vikunja 589). Reviewer Duckworth, gate owner Sage.
+Base 80793d824 (refactor after row 294 landed at d3059c2c3). Branch launchpad/row303.
+
+## Change
+
+One added line in packages/cli/tests/stack-release.test.mjs, R9 only, at :2178:
+
+    assert.ok(r.dir!==null, r.out+r.err);
+
+It sits right after R9's exit-code check and right before the `includes` check whose message builds
+`join(r.dir,'placeholders')`. rehearse() (:2040) sets `dir` to null when the output has no
+`rehearsal directory:` line, so the guard fails first and its message carries the rehearsal's
+output and stderr, including the FAIL line that stopped it. This is a test-only change to a
+pre-existing test, approved under mos-1272 and mos-1316 (mos-1422 point 2). It adds an assertion
+and changes none. No other line in R9 or any other test changes. The lines the brief names (:2058,
+:2113, :2126, :2267, :2280) put r.dir in a template, where a null prints as `null` and the message
+still carries r.out, so they get no guard.
+
+MANIFEST.sha256 lists the one changed path, hashed from the commit that adds this file.
+
+## Gate
+
+Duckworth approves the diff. stack-release.test.mjs runs whole and green on Sage's gate, in a gap.
+Not run yet.
@@ -0,0 +1 @@
+e936808bb12361acf164b675fe40ead416720dfd48c5d51ea5bfee1e1893cc33  packages/cli/tests/stack-release.test.mjs
Author	SHA1	Message	Date
jason.woltje	acc97fb9c5	launchpad: row 301 (#1808 ): library-cli and thread-claims bus.mjs fixtures export throwing busBusiness and userCaller stubs (mos-1451 under mos-1272); BUILD.md repaired with run 1 and the ruling; manifest seven paths; unrun	2026-10-23 07:14:09 -05:00
jason.woltje	04a1797405	launchpad: row 301 (#1808 ): channel-proof re-pins webui bus.mjs at 39fcb27c for the user transport fold, humanCall unchanged (mos-1449 under mos-1272); unrun	2026-10-23 06:47:27 -05:00
jason.woltje	fd4b8c36ef	launchpad: row 301 (#1808 ): R6-N4, user-bus.mjs folded into bus.mjs beside humanCall, unchanged; channel-proof re-pin held for Mos's go; unrun	2026-10-23 06:44:24 -05:00
jason.woltje	e551cd8466	launchpad: row 303 (#1810 ): R9 asserts the rehearsal directory is set before the placeholders check joins it, so a null shows the rehearsal output (mos-1422, Vikunja 589)	2026-10-23 06:41:07 -05:00
jason.woltje	c13c337e16	queue: revs 3521-3530: rows 304 and 305 claimed (rocko 3521, gizmoduck 3522); row 305 in-review on `7e8218a2e` (gizmoduck 3523), request failed without a token (gizmoduck 3524), sage's request posted c31126 (3525/3526); row 304 in-review on `5e8354ebb` (rocko 3527), request failed without a token (rocko 3528), sage's request posted c31128 (3529/3530); queue only	2026-10-23 06:27:36 -05:00
jason.woltje	435a7458d3	sage: PRD 1.17 draft 8 (343cff6f), d7 plus Mos's d8 fix list mos-1443 (R1-R14, M1-M45, J-i to J-l) and the mos-1446 choices (M10 default, M15 quotes Q235 in full, M40 both sentences); M15 and M16 cite `b99ca86b9`. Webby APPROVE round 5 webby-0210, no B items; N15-N17 carry to d9	2026-10-23 06:21:31 -05:00
jason.woltje	b99ca86b9c	docs: align editor conversion boundary and host restore with PRD d8	2026-10-23 06:08:20 -05:00
jason.woltje	0e057e05eb	queue: revs 3511-3520: rows 304, 305 and 306 added and briefed (sage 3511-3516); row 272 round 2 in-review on `b44332a93` (huey 3517), request failed without a token (huey 3518), sage's request posted c31120 (3519/3520); queue only (sage)	2026-10-23 06:02:42 -05:00
jason.woltje	c16e943b90	briefs: mos-1442 approvals for the 590 and 591 rows (#1811 , #1812 ), the 295 N1 revoke-window row (#1813 ); DEFERRED 295 N1 (sage)	2026-10-23 05:51:16 -05:00
jason.woltje	ac1644e1ce	BUILD-LOG and SESSIONS: rows 302, 295 and 219 landings, the Docker pool diagnostic; DEFERRED 219 N1 (U6); brief for the Vikunja 590 and 591 rows (sage)	2026-10-23 05:48:40 -05:00
jason.woltje	90633c8648	queue: revs 3495-3509: row 295 round 2 in-progress and in-review (morgana 3495-3497), sage's request posted (3498/3499), dewey approve record (3500), row 295 landing note and done at `2efd127ce` (sage 3501/3502); row 219 in-review on `b899095e4` (rocko 3503/3504, request failed without a token), sage's request posted c31107 (3505/3506), dewey approve record c31108 (3507), row 219 landing note and done at `5fdfd7275` (sage 3508/3509); queue only	2026-10-23 05:45:46 -05:00
Rocko	5fdfd7275c	docs: preserve row 219 full gate on the post-295 merge	2026-10-23 05:37:44 -05:00
Rocko	a236dbc30a	docs: preserve row 219 mos-1429 short-run evidence	2026-10-23 05:37:44 -05:00
Rocko	312260db7b	test: prepare row 219 admission pins under mos-1429	2026-10-23 05:37:43 -05:00
Rocko	d7b4967ed0	docs: record row 219 rebase after granted-user Console	2026-10-23 05:37:43 -05:00
Rocko	90a3c03cfb	test: assert creative history in its native session store Apply only the paths and legacy absence pins approved by mos-1420 and sage-3243. Preserve exact expected history and the stopped run evidence. No product change or rerun.	2026-10-23 05:37:43 -05:00
Rocko	282f5b4e45	test: pin the compaction audit before the persona refusal Apply the exact two-row fixture assertion approved by mos-1418 and sage-3232. Preserve earlier red logs; no product change and no rerun before review.	2026-10-23 05:37:43 -05:00
Rocko	781fd509c4	test: give row 219 persona fixture its explicit session Apply mos-1408 and sage-3178 without creating the directory being asserted. Preserve the first red evidence and select TAP explicitly for the next approved run.	2026-10-23 05:37:43 -05:00
Rocko	52a73e83bd	docs: rebase row 219 gate packet and record run bounds	2026-10-23 05:37:43 -05:00
Rocko	049214486b	wip: publish unverified row 219 inspection candidate Preserve the draft for inspection under sage-3113. Tests and mutants have not run. Old-test adaptations approved in mos-1316 and mos-1317 are recorded in OLD-TEST-CHANGES.md.	2026-10-23 05:37:43 -05:00
jason.woltje	2efd127ce6	morgana: row 295 r2 gate results on d68b4300d (sage-3338, sage-3340): red first, green, M8 count, whole files, suites, script limits and skips, M1-M16 killed	2026-10-23 05:06:14 -05:00
jason.woltje	fdbe95d88d	morgana: row 295 r2 narrow alice grant (Dewey F1, sage-3333): aliceAccess(ref) names only the test's project, set after project.create; asserts and bindLaunch lines byte-identical; BUILD.md preservation record updated	2026-10-23 05:06:14 -05:00
jason.woltje	cb96220b53	morgana: row 295 r2 old-test setup (mos-1436 option a): message-filter's :117 and governance-pin tests get an alice collaborator access document, spec-fixtures fixture() takes an optional access (null default); asserts and bindLaunch lines byte-identical; BUILD.md gate record, assertion preservation, N1 revoke window	2026-10-23 05:06:14 -05:00
jason.woltje	6408dcec4f	morgana: row 295 r2 first-run reds placed (mos-1272): claim rows spread off the store's null prototype in access-revoke and thread-revoke, demo switches the pi harness on for startBroker, Alice binds at her first call in thread-revoke	2026-10-23 05:06:14 -05:00
jason.woltje	0c8f12ea20	morgana: row 295 r2 rebase on `80793d824` (sage-3256): accessFor comment is stamp-cached (dewey-0871 N3); BUILD.md rebase note	2026-10-23 05:06:14 -05:00
jason.woltje	24f8f5d739	morgana: row 295 r2: wrap the launcher's revoked comment (dewey-0874 nit)	2026-10-23 05:06:14 -05:00
jason.woltje	31da9dcb85	morgana: row 295 r2 (dewey-0871): threadsState ends an expired grant's held claim from the cached read by access-expiry (B1, D7, M16, M11 claim row); access.reload scope as D8 (N1); bus README access.reload, revoked and revocation (N2); tests unrun	2026-10-23 05:06:14 -05:00
jason.woltje	ff54a15563	morgana: row 295 FED R4 revocation (#1801 ): 30 s access timer, access.reload, one-transaction claim end on a loss, threadsState revoked, launcher SIGTERM and no start, CLI reload after grant/revoke; tests unrun (no CLEAR yet)	2026-10-23 05:06:14 -05:00
jason.woltje	249d42dfc5	morgana: row 295 plan (FED R4 revocation, #1801 ): sweep on timer, access.reload and user requests; threadsState revoked; launcher skip and SIGTERM; bindLaunch and role.claim refuse thread-revoked	2026-10-23 05:06:14 -05:00
jason.woltje	07802dc57a	queue: revs 3488-3494: row 302 (#1809 ) in-review on `2a8281a6f` (gizmoduck 3488), gizmoduck's request failed without a token (3489), sage's request posted c31091 (3490/3491), dewey approve record c31092 (3492); row 302 landing note and done move at `3ed9fd754` (sage 3493/3494); queue only	2026-10-23 03:53:06 -05:00
jason.woltje	3ed9fd754a	gizmoduck: row 302 (#1809 ) gate results: run 1 stopped on launcher-released.test:89 (d6, mos-1430); run 2 on merge 783602e06 (`5b63ea323` onto `1ac655005`) red as ruled, suites green, M1-M5 M7-M9 killed; RESULTS.md and logs, packet only	2026-10-23 03:47:38 -05:00
jason.woltje	c9fcf9b5af	gizmoduck: row 302 (#1809 ) d6: launcher-released.test:89 counts only a-run's delivery rows and pins the one routed row with holder_run null; #route writes that row for every message (gizmoduck-0388, sage-3294, sage-3296, Mos ruling pending sage-3293); local, not pushed	2026-10-23 03:47:38 -05:00
jason.woltje	2b6111a176	row 302 (#1809 , Vikunja 588): a run threadIdle or landRelease released answers launcher-released on every call needing the claim until it ends, role.claim refuses it (Dewey D1), and the runner exits stopped without releasing again	2026-10-23 03:47:38 -05:00
jason.woltje	4a827edb0c	row 302 (#1809 , Vikunja 588): red first, the final forcing tests and the four pins Mos ruled (mos-1414/1415/1416), over unfixed product files; BUILD.md d3-d5 and ASSERTION-PRESERVATION	2026-10-23 03:47:38 -05:00
jason.woltje	908f92b039	gizmoduck: row 302 design d2: threads.test pins are :392/:394/:395 (sage-3204), land-relaunch grep finds land.test:464 as a third old pin under Q1	2026-10-23 03:47:38 -05:00
jason.woltje	62470a3ec3	gizmoduck: row 302 BUILD.md folds Dewey's d1 approval (dewey-0875): D1 role.claim refuses a released run, landRelease reaches runner.test:742-772 so Q1 moves :771-772, Q2-Q4 and N1-N4 settled	2026-10-23 03:47:38 -05:00
jason.woltje	fee08d7ab9	gizmoduck: row 302 (#1809 , Vikunja 588) idle-stop race design round d1 for Dewey: idle-released code from the broker's own record of threadIdle's release, runner maps it to stopped/0, forcing cli test holds the window open until a call lands, threads.test:393 is the one changed pin (sage-3200, mos-1411)	2026-10-23 03:47:38 -05:00
jason.woltje	1ac655005e	BUILD-LOG and SESSIONS: row 299 gate and landing, row 303 review, 219 and 295 rebases (sage)	2026-10-23 03:10:29 -05:00
jason.woltje	8a35ffadb4	queue: revs 3474-3487: row 303 (#1810 ) in-progress and in-review on 3c3be5d3 (launchpad 3474/3475), launchpad's request failed without a token (3476), sage's request posted c31082 (3477/3478), duckworth approve record c31079 (3480); row 299 (#1806 ) claim (gander 3479), in-review on 277ace0b (gander 3481), gander's request failed without a token (3482), sage's request posted c31083 (3483/3484), filbert approve record c31084 (3485); row 299 landing note and done move at `ffb2fedfb` (sage 3486/3487); queue only	2026-10-23 03:07:32 -05:00
jason.woltje	ffb2fedfbc	docs(row299): record fresh timing gate and six assertion kills	2026-10-23 03:03:09 -05:00
jason.woltje	11d1e2e0ce	docs(row299): record clean integration on `80793d824`	2026-10-23 03:03:09 -05:00
jason.woltje	ed81f6eba0	docs(row299): record mos-1409 preservation and static candidate	2026-10-23 03:03:09 -05:00
jason.woltje	e14164ab49	test(case): observe P10 wait directly under mos-1409	2026-10-23 03:03:09 -05:00
jason.woltje	10113b04f5	docs(row299): propose direct P10 wait timing for mos-1272 review	2026-10-23 03:03:09 -05:00
jason.woltje	c1f910b4cc	SESSIONS: filbert row 299 manifest round 1 approve (c31084, rev 3485)	2026-10-23 03:00:12 -05:00
jason.woltje	15e688cc01	BUILD-LOG and SESSIONS: row 294 rounds 3-4 and landing, R9 transient and row 303, row 219 edits 2-3 (sage)	2026-10-23 02:11:43 -05:00
				`@@ -0,0 +1 @@`
				`e936808bb12361acf164b675fe40ead416720dfd48c5d51ea5bfee1e1893cc33 packages/cli/tests/stack-release.test.mjs`