docs: row 290 landing record and session line (doc only)

docs: clarify setup sheet notices and agent identity
docs: keep chat guidance within Q226 brief
2026-10-24 09:56:03 -05:00 · 2026-10-24 09:54:29 -05:00 · 2026-10-24 09:54:29 -05:00 · 2026-10-24 09:54:29 -05:00 · 2026-10-24 09:54:29 -05:00 · 2026-10-24 09:46:14 -05:00
1124 changed files with 84605 additions and 108827 deletions
@@ -5475,23 +5475,62 @@ remain; no live state, schema or bus policy change.
 2026-10-24 | Goldie | Row265 / #1770 first slot STOP (sage-3932) | New parser14/14, rooms18/18 green; serialized bus stops at old project-runtime.test.mjs:14 import-closure pin, partial619 ok/1 not ok. New pure address.mjs import is absent from expected imports. Static trace also needs address.mjs in seat RUNNER_FILES. No old-test/product correction, no mutant/restored run, no green commit/push; old-pin and out-of-owned-files mount change sent to Sage for ruling. Audit prose missed the direct source pin despite raw grep hit; correction recorded in BUILD.md.

 2026-10-24 | Goldie | Row265 / #1770 verified (mos-1567, sage-3942) | Approved correction adds solely address import pin + Row265 comment to project-runtime.test and one pure-source RUNNER_FILES mount; new block checks parser has no imports. Serialized fresh-short-TMP timeout-k10: unchanged sandbox10/10, parser15/15, rooms18/18, full bus957/957, twelve named refusal mutants killed (each Node1, driver0), restored parser15/15 + rooms18/18. All positives zero fail/skip/cancel; every mutation restored full broker SHA71b32ee4. Old first-red evidence retained, no other old-test change. Slot returned goldie-0034; Boyd packet explicitly includes mount-list review, candidate push next.
+2026-10-24T07:18:53Z | Sage | Row 327 (#1825, Bradford, Poe and Dewey) LANDED 68c08b4e7. Before: refactor at 94d9e90a6; the push guard was a scratch script with no reviewed-binary check. After: scripts/push-check.sh and scripts/test-push-check.sh on refactor, 3 commits cherry-picked onto 6a5e12511 with blobs equal to the round 3 tip d858c9f8b, plus doc commits 76f84465f and 68c08b4e7. Binaries are found by numstat or a NUL in the first 8000 committed bytes, regardless of attributes; each needs its sha256 and path in an approved latest-round candidate; an unconfirmed queue tail exits 2. Reviews: Poe c31525 rev 3882, Dewey c31526 rev 3883. Gate: 1st run 06:57Z RED, not the candidate: canonical node_modules was empty from 05:45:15Z (sage-4023). Rerun with its own root npm ci GREEN 07:15:49Z: 17 package suites 0 failures (cli 986, plugins 119, webui 418), 11 scripts exit 0, push-check 6 mutants KILLED; skips are the queue canonical-root check and the row 244 live provider cases. The landed push-check.sh passed its own push (NO_BINARY, NO_ATTRIBUTION, PUSH_READY). mos-1575: gates install their own node_modules; canonical restored with npm ci (128 packages).

-## 2026-10-24 — W2 row 310 / #1824 started (Gyro)
+## 2026-10-23 — Lena, row 296 / #1802 FED R7 start

-Before: only Louie's evaluation artifact and S0 conditional baseline review exist. Sage assigned the owned source import, offline pinned restricted web build and root-independent output/CSP evidence under Q246/mos-1571. Implementation plan and subsequent measurements live in agents/gyro/work/queue-310/BUILD.md. No build/test, serving route or live change at start.
+Before: R4 and R6 landed in base 45dca69f6; no scratch two-instance acceptance script.
+Plan: preserve Quackerjack handoff c6ab9bdc9, add isolated script/CLI test harness with real
+Console proof in transient user services, map assertions and two mutants for Filbert.
+Untested: all Node/tests and shared gate wait for Sage CLEAR; no production or live state changes.

-## 2026-10-24 — W2 row 310 / #1824 bounded scratch measurement (Gyro)
+## 2026-10-24 — Lena, row 296 / #1802 scoped acceptance verified

-After sage-3992: 534 existing cached registry archives extract to 24,844 files / 611,577,974 bytes, or 614,049,226 bytes with generated checksums. A full 538-package lock vendor set adds 329 identities beyond S0's 209. In isolated scratch, with the three already-reviewed git inputs and approved local workspace reduction, exact S0 199/209 package closures matched; baseline release measurement succeeded offline with networking disabled. Valid absolute-nice19/four-job environment retry: 397.864805 s; four runtime files total 44,142,800 bytes, scratch Git blob pack 16,720,159 bytes. Initial 388.757578 s attempt had an inherited-priority defect and is retained as limited evidence. Receipt and caveats: agents/gyro/work/queue-310/BUILD.md, “Full-lock measurement results (sage-3992)”. No full-lock repository import, runtime output commit/push, serving or live change. W2 remains incomplete at the packaging boundary; no M1–M14/CSP/reproducibility acceptance claimed.
+After: lena/row296-r2 rebased onto e0c6142f3 with both append logs preserved and row source
+unchanged. Own root/webui npm ci (128/2 packages), canonical dependencies untouched. Sage-4035
+slot: plain acceptance 1/1, killed-driver cleanup expected exit1 with cleanup verified, M1/M2
+both killed by named assertions with product hashes restored, whole new file intentionally
+skips outside its script. No unexpected first-run red, no old test change, no full/shared gate
+claim. Receipts and limitations in agents/lena/work/queue-296/BUILD.md and run-r2/.
+2026-10-23 | Beakley (88b97f65) | Row 217 #1718 takeover, before implementation | Clean base 45dca69f6 on beakley/row217. Recovering Launchpad handoff for citation guard, live settings, page store and runner retry. Acceptance is C2-06/design 5.2 plus sage-3595/3599/3602. Tracking agents/beakley/work/queue-217/BUILD.md; no product changes or Node/tests; Sage CLEAR required.

-## 2026-10-24 — W2 row 310 / #1824 223-source packaging evidence (Gyro)
+2026-10-23 | Beakley (88b97f65) | Row 217 #1718 untested draft checkpoint | Continued Launchpad e25ef0373; added runner retry/text/note implementation, pure protocol constants and sage-3640 approved single read-only mount, CLI documentation and new acceptance test files. Static checks caught missing projects compatibility, async request mutation and Git pathspec matching; bounded fixes and regression tests authored. git diff --check clean. No Node/test/mutant executed; Sage holds CLEAR. 283/216/285 dependency checks and all acceptance execution remain open. Packet agents/beakley/work/queue-217/MANIFEST.md.

-Under sage-4008/4010, exactly209+14 source packages measured in scratch: total11,201 files /145,260,334 bytes and26,538,894-byte independent blob pack; extra14 total702 files /14,523,104 bytes and1,720,566-byte blob pack. Original pinned lock refused with --locked after existing cfg-filter script; one authorized automatic offline lock regeneration produced a strict subset (558→226 entries,332 removed,0 added,0 changed). Original lock untouched. Per-package source/archive/license/notice inventory and exact errors are in agents/gyro/work/queue-310/BUILD.md, “223-source measurement — sage-4008 and sage-4010”. Release measurement approved but awaits CLEAR after row327 gate (sage-4011). This evidence commit contains plain text only, no imported crate source or runtime outputs; packaging/landing choice remains held under Vikunja618, and source/notice review goes to Gladstone.
+2026-10-23 | Beakley (88b97f65) | Row 217 early-look follow-up, Untested | Webby 0939c0682 E1 adds ordinary mallory human-swap test; E2 adds stored trailer-derived agent/file event evidence; E6 creative-sender matrix and E7 runtime readRaw tests authored. Sage-3668/3670 accepts direct writer substitution because setter keys exclude replyLimits (organization.set exists, correcting review premise), and requires distinct availability refusal for E4. Real held-lock/socket and runner-reason regressions plus M5 authored before that production fix; expected RED awaits Sage CLEAR. No Node/tests/mutants, no old-test edits, no green claim.

-## 2026-10-24 — W2 row310 / #1824 223-vendor release measurement (Gyro)
+2026-10-24 | Beakley (88b97f65) | Row 217 round 2, sage-4037 | Rebased published dde5b8496 onto e0c6142f3 on new beakley/row217-r2; both append-log histories retained. Conflicts preserve landed grant dispatch, revocation hook and lookup exports. Added E4 citation-unavailable product path and real supporting-scope/index comparison tests after row283 8d2856ee3. Untested: no Node/npm/tests/mutants/build; ready for Sage CLEAR after Lena296. Full range-diff and honest discarded local rebase correction in agents/beakley/work/queue-217/BUILD.md.

-sage-4014 CLEAR run: frozen/offline scratch build exit0 in380.674036s, actual nice19/four jobs/cores/CPUs, no external network interface, no retry. Four outputs total44,137,258 bytes; WASM43,952,335 bytes SHA2560322beb9e58b9abeed6b6e05125879bfb3eccbebb05094e191df3542a74007ea differs from the full-lock build. Exact S0 package closures passed preflight; original lock unchanged, pruned lock remains3401363e.... Slot released immediately for Bradford in gyro-0018. Gladstone supplemental review of14 additions found10 PASS/4 CONCERN (not adoption approval); embedded W3C notices/attribution, dpi full-source conjunction/copyrights, explicit spirv standard-text map and winit example PNG inventory are now documented in plain-text evidence. Details: agents/gyro/work/queue-310/BUILD.md, “223 release result and notice supplement — sage-4014”. No crate sources/binaries/runtime route committed or served; row held for Vikunja618 and all implementation/CSP gates remain open.
+2026-10-24T10:21Z | Beakley (88b97f65) | Row 217 round2 slot verified, sage-4042/4043 | Source 2d274a5b6: touched57/57, whole library142/142 business270/270 bus974/974 cli988/988 harness172/172 seat218/218, all zero fail/skip/cancel. M1-M5 killed, controls/restored controls green, product hashes restored after each; E4 RED stand-in observed. Only first-red was new runtime fixture invalid-authority, corrected and retained in receipts; no old test failed/edited. Local root/webui npm ci, short TMPDIR, timeout-k10; no canonical npm/rm or module link. Full evidence agents/beakley/work/queue-217/run-r2; Sage owns scripts landing gate and formal review.
+2026-10-24T11:15:29Z | Sage | Rows 296 (#1802, Lena, Filbert) and 217 (#1718, Beakley, Webby) LANDED d0a6a87cd. Before: refactor at e0c6142f3 (local 98235fdb3). After: 296's 5 commits (range-diff 5 =, blobs equal b43156fd9 on 28 paths) and 217's 9 commits (5 = and 4 !, the ! are BUILD-LOG/SESSIONS append conflicts kept both sides; blobs equal 96659ccf4 on 79 paths) on 98235fdb3, with doc commits b19ffa04f and 98235fdb3. Reviews: Filbert c31547 rev 3896, Webby c31549 rev 3901. Gate: 1st run 10:57:16Z RED on one rule only, the gate's "cli skipped 0": 296's FED R7 test skips in the cli suite by design and runs only through scripts/test-federation-acceptance.sh, which passed 1/1 in the same run. Mos ruled that a RED gate doesn't land (mos-1583). The gate now allows a cli skip only from an explicit list (test file, test name, runner script) whose runner ran in the same gate with rc 0, at least 1 pass, 0 skipped and the named test passed; any unlisted skip stays RED; checked against a wrong-file and a runner-skip control, both RED. Rerun GREEN 11:14:53Z with its own npm ci: 17 package suites 0 failures (cli 989/988 pass, the allowed FED R7 skip; plugins 119; webui 418), every scripts/test-*.sh rc 0, federation-acceptance cleanup line present; skips otherwise are the queue canonical-root check and the row 244 live provider cases. push-check SECRETS_CLEAN, NO_ATTRIBUTION, PUSH_READY. #1802 closed c31557, #1718 closed c31559, Vikunja 533 comment 1054 (design task, left open for Q29). Row 286's approved manifest shares broker.mjs, runtime.mjs and library/src/index.mjs with 217, so 286 needs a rebase round before its gate. Brief template gains the skip-list rule.
+2026-10-24T10:02Z | Magica | Row 285 / #1790 r3 before/after (sage-4039, mos-1542) | Before: assigned magica/row285-r3 at b19ffa04f, Scrooge r2 untested at 53db6b7ca. After: seven commits cherry-picked through 644bcaa16; five named overlaps auto-merge preserving newer base changes. Range-diff six '=', one context-only '!'; six patch IDs identical, fixture patch ID differs with upstream import context, exact test added/removed-line comparison identical for all changed tests. business.mjs equals base; Scrooge BUILD equals r2. CREATIVE_KINDS absent in packages/roles/scripts; no 64-hex changed-path pin; 291 conservative reader candidates recorded. No npm or tests before Sage CLEAR; N1 remains follow-up. Own-branch evidence push next, not accepted/green or landed.

-## 2026-10-24 — W2 row310 supplemental notice collection recheck recorded (Gyro)
+2026-10-24T09:58:36Z | Magica | Row 285 timestamp correction | The preceding Magica entry marked 10:02Z used an incorrect timestamp; replay/evidence commit 87b7547f8 occurred before the measured 09:58:22Z push start. Technical evidence is unchanged.

-Gladstone-0027 at9522d2356 independently passes the four corrected collection/mapping gaps, with earlier ten package source/notice PASS results standing. Bundle4d8e2aac... and all12 incremental path hashes verified. This is supplemental evidence only: W3C/M13/license adoption, pruned lock, packaging/size, Worker/native runtime, WASM difference and implementation/CSP gates remain uncleared; row310 stays held. Details: agents/gyro/work/queue-310/BUILD.md, “Supplemental notice recheck — gladstone-0027”. No build or source/notice/runtime change.
+2026-10-24T10:32:02Z | Magica | Row285 / #1790 gate STOP (sage-4048) | Before: pushed66a800e15, no tests. After: own root/webui npm ci, short scratch TMPDIR, whole files serial timeout-k10; bus958/958 green (108 files), business partial80pass/4fail, first red old row323 case1-business-file tests57/86/95/105 because committed Case1 chief lacks required gitea ref. No more tests/mutants or source edits. Static diagnosis also finds old empty-credential assertions81/112/114, requiring a specific owner ruling. Sage notified magica-0002. No in-review move or green claim.
+
+2026-10-24T10:42:28Z | Magica | Row285 / #1790 Amendment1 before/after | Before: unconditional chief gitea broke row323. After: chief-only library conditional plus named required-reference refusal, checkCredentialMap unchanged; new three-case test file; own helper/resolve fixture hunks restored to base, own chief/business/identity hunks reconciled under sage-4060. Case1 doc/test byte-identical. M10 planned against new no-library positive and old Case1 doc test. No tests run under held slot; not green/accepted. Residual base library fixture references need authority alignment before re-CLEAR.
+
+2026-10-24T10:59:43Z | Magica | Row285 / #1790 B1 before/after | Before: Amendment1 candidatebabae6adc with missing refs in base library/creative fixtures. After: 26 data-only credential insertions across13 direct-reader files; original callback lines preserved, one expressly allowed credentials?.vikunja setup guard. Every other byte reconstructs prior candidate exactly; no base assertion edits. Base and candidate put role set is pm,cto,coder,reviewer; chief lacks vikunja. Literal e0c6142f3 word diffs and known preexisting r2 hunks recorded. No tests, green claim or queue move; next whole gate +M10 waits for Sage CLEAR.
+
+2026-10-24T11:24:17Z | Magica | Row285 / #1790 r4 before/after | Before: r3 eee8ad776 on b19ffa04f, gate unverified after amendments. After: new r4 from landed296+217 base d0a6a87cd, twelve commits replayed; only append logs conflicted, complete base prefixes preserved. Product/test patch lines identical across assigned bases; tests byte-equal r3; replyLimits and broker citation work retained. Regenerated range-diff and e0c6142f3 base word/line diffs. No npm/tests or queue moves; own-branch push explicitly authorized by sage-4078.
+
+2026-10-24T12:09:17Z | Magica | Row285 / #1790 r4 C1 diagnostic result | Before: valid landed-base candidate0f6cdc861; first old citation-runtime red. After: mos-1584/sage-4086 full unchanged collection, six suites2950 tests2937pass/12fail/1skip/0cancel; WebUI418 and plugins119 green, all12 script suites exit0, dedicated federation1/1. CLI release300s runner cap interrupted; retained and resolved via unchanged1800s retry224/224 in599.6s. Failures: citation-runtime1, instance-settings2, lifecycle-settings1, launcher1, harnesscreative7. Static root causes/fix classes and r3 parity in agents/magica/work/queue-285/BUILD.md. No source/test edits or fix round/mutants; no final manifest or in-review; owner ruling required.
+
+2026-10-24T13:02:03Z | Magica | Row285 / #1790 r4 VERIFIED | Before: C1 collection12 failures. After: approved three data corrections, actual-bound-ref guard, duplicate-before-eligibility hire, data-derived creative equal-service retention/listing with validator first; no old assertion edits. Own fresh128/2 installs, editor-required shortTMP serialized final gate: bus975/975 business282/282 cli988pass/1expectedskip webui418/418 harness172/172 plugins119/119, all12 scripts exit0.13 mutations14 independent checks killed; each SHA256/Git blob restored; restored controls136/136. Case1 doc/test/helper base-identical; N1 deferred. Own r4 candidate for Poe/Webby review, no landing/live action.
+
+2026-10-24T13:33:42Z | Sage | Row 285 (#1790, C2-08b, Magica on Codex, Poe and Webby) LANDED 1f3d0350f. Before: refactor at 25874bc86. After: r4 candidate 2e4503dc7's 14 commits cherry-picked onto 25874bc86. The one conflict (9f7adb03e, BUILD-LOG.md and SESSIONS.md) is append-only and kept both sides, with 0 lines removed against either parent. Apart from the logs, the tree equals the candidate except on the 7 paths 25874bc86 and 4c6190645 had changed. Reviews: Poe first review c31568 rev 3919, Webby landing review c31569 rev 3920, both static. Sage posted both because neither seat has a token. Gate GREEN 13:28:46Z with its own root and webui npm ci (mos-1575): 17 package suites, 4236 tests, 0 fail, 1 skip, which is the allowed FED R7 entry whose runner passed 1/1 (mos-1583). All 12 scripts/test-*.sh rc 0. The other skips are the queue canonical-root check and the row 244 live provider cases. Brief gate: no CREATIVE_KINDS in packages, roles or scripts; no test or script pins the old or new sha256 or blob of a changed role file (positive control found chief-of-staff.json readers); role JSONs match mos-1309 item 5 design 4, with gitea scopes added (read for the chief, read:user and write:repository for the creative roles). Before the push, the in-review overlap sweep found only row 286 (broker.mjs), which rebases as r5. push-check FF_OK, NO_BINARY, SECRETS_CLEAN, NO_ATTRIBUTION. #1790 closed with c31580, Vikunja 546 c1056 (already done). Queue note rev 3921, done rev 3922. Correction to my own rulings: sage-2921 (285's #giteaRole refuses the chief) and sage-2947 (286's T7/T9 mint the chief's grant through the real raise, no SQL staging) conflict now that 285 has landed (rockerduck-0008). sage-4100 keeps the refusal and has T7/T9 seed a read-only chief grant as labeled fixture data, with an assertion that the real path refuses and with revoke and fire still on the real verbs. The tradeoff is that the chief mint goes untested until C2-21 (row 287), whose brief now replaces the seeds. Dewey confirms in 286's round-2 delta. Brief template gains the mos-1584 businessDoc library chief-ref line. The C2-02 brief gains webby-0282 N1 (tool names match the creative contracts). Follow-up webby-0282 N3: business.mjs uses the literal "chief-of-staff" instead of STAFF_TO. The live stack is not re-pinned.
+- 2026-10-24 (rockerduck, row 286 / #1791, r3 before gate): transplanted Ludwig 45dca69f6..573fa0be0 onto b19ffa04f, preserved newer exports in sole index.mjs conflict; plain-text range-diff, patch IDs and reader/pin drift inventory in agents/rockerduck/work/queue-286/BUILD.md. UNTESTED by sage-4040: no setup or tests until CLEAR.
+
+- 2026-10-24 (rockerduck, row 286 / #1791, r3 after sage-4054 CLEAR): own-worktree installs; library 140/140 and bus 963/963; M1 forced-refspec and M2 missing-inode-compare killed at semantic assertions, restored before final suites; all gate-output fixture searches zero. Four first-run reds only in new credential test; setup corrections and intermediate findings recorded in agents/rockerduck/work/queue-286/BUILD.md. No old test edited during gate; shell/CLI suites remain Sage landing gate.
+
+- 2026-10-24 (rockerduck, row286 / #1791, r4 before gate, sage-4079): all 15 r3 commits transplanted to d0a6a87cd on new rockerduck/row286-r4. Three product overlaps auto-merged with row217 preserved; two append-log conflicts retain both histories. Range-diff and adjacent hunk evidence in agents/rockerduck/work/queue-286/BUILD.md. UNTESTED r4: Git-only until own-branch push, library/bus rerun waits for CLEAR after row285.
+
+- 2026-10-24 (rockerduck, row286 / #1791, r5 before gate, sage-4097/4100): transplanted r4 onto 1f3d0350f; kept row285 library.write routing and chief write-grant refusal plus both append-log histories. Chief fixture refs added; T7/T9 mint setup now pins real refusal then seeds read-only fixture as explicitly ruled, keeping real revoke/fire assertions. Scratch role declaration mutation removed; range-diff/drift evidence recorded. No r5 tests yet; CLEAR starts after own-branch push.
+
+- 2026-10-24 (rockerduck, row286 / #1791 r5 gate, sage-4097/4100): own-worktree installs; touched credential6/6 and sync24/24; whole library151/151 and bus981/981, zero fail/skip/cancel. P1 forced refspec, P2 missing inode compare and B285-M1 chief write-grant guard each killed on ERR_ASSERTION with green before/after controls and exact restoration hashes. All gate-output fixture searches zero. No normal red; source unchanged after pre-gate push045eec61a. Plain text evidence in agents/rockerduck/work/queue-286/BUILD.md and gate-r5; round2 candidate push follows.
+
+- 2026-10-24 (rockerduck, row286 / #1791 r6, sage-4112 / #1825): corrected only two fixture constants to unique19-character values after the landing secrets check refused r5. No waiver/guard/assertion/product change. Added-package-lines secrets grep empty; touched6/6+24/24, library151/151, bus981/981 on fresh shortTMP timeout-k10; both exact new values absent from all four outputs. Mutants not rerun as directed. Plain evidence in agents/rockerduck/work/queue-286/BUILD.md and gate-r6; new manifest/push and round3 follow.
+
+2026-10-24T14:37:02Z | Sage | Row 286 (#1791, C2-03b, Rockerduck on Codex, Boyd and Dewey) LANDED 5d7801dc1. Before: refactor at d55944edb. After: r6 candidate 75f6d56b1's 19 commits cherry-picked onto d55944edb. The one conflict (64f1ff950, BUILD-LOG.md and SESSIONS.md) is append-only and kept both sides, with 0 lines removed against either parent. Apart from the logs, the tree equals the candidate except on the 6 paths of my doc commit d55944edb. Reviews: round 2 (r5 ec8cb10c0) Boyd c31584 rev 3928, Dewey c31585 rev 3929; round 3 (r6) Boyd c31587 rev 3942, Dewey c31588 rev 3943. Sage posted the requests (c31583, c31586) because Rockerduck has no token. Gate GREEN on r5's tree e9c73ab96 at 14:14:11Z, then the push stopped at push-check STOP secrets. The guard came in today with #1825. Two added fixture constants (SLOT_TOKEN in library-credential.test.mjs, SEAT_TOKEN in sync.test.mjs) were 31 characters and matched its token-assignment pattern. sage-4112: no waiver (mos-1570) and no guard edit; r6 shortened only those two values to 19 characters, with reviewers confirming the delta. Gate GREEN again on 5d7801dc1 at 14:36:42Z with its own npm ci: 17 package suites, 4251 tests, 0 fail, 1 skip, which is the allowed FED R7 entry whose runner passed 1/1. All 12 scripts/test-*.sh rc 0. Neither old nor new fixture values appear in any of the 29 run outputs. Mutants: Rockerduck killed P1, P2 and B285-M1 (gitea-grant X-G1). For Dewey's N1 I also ran B285-M1 against library-credential.test.mjs; T7 and T9 failed (4/6) and passed after the restore. sage-4100 (chief grant seeded as fixture until C2-21) is recorded in the 285 entry. Overlap sweep found no in-review row on the 9 code paths. push-check FF_OK, NO_BINARY, SECRETS_CLEAN, NO_ATTRIBUTION. #1791 closed with c31591. No P19 task names row 286, so there is no Vikunja task to close. Brief template gains a sage-4112 line: test credentials stay under 24 characters. The live stack is not re-pinned.
+
+2026-10-24T14:55:11Z | Sage | Row 290 (#1795, C2-12b, the setup sheet rewrite, Louie on Codex, Webby) LANDED 3d7dff345. Before: refactor at 18334d713. After: Louie's r2 candidate 22510988d (four doc commits on 963303403) cherry-picked onto 18334d713. The commits match by patch-id and range-diff, and docs/case2/SETUP-SHEET.md is blob 37b451c6, the text Webby approved in rounds 2-3 (42b75e484) and again on the rebase (round 4, webby/reviews 0006f03f4). Sage posted the request (c31595, revs 3952-3953) because Louie has no token; Webby's verdict is c31596, recorded at rev 3954. Gate from the brief, doc only: a grep of packages/*/tests, scripts/test-*.sh and tests/ for SETUP-SHEET finds nothing, and a positive-control grep does find matches. Louie checked that the sheet's two setting names match broker.mjs:5341. No suite ran: no test reads the file (decision 137), so the mos-1455 all-suites gate, which covers code rows, doesn't apply, and Fethry's slot for row 225 stays untouched. push-check FF_OK, SECRETS_CLEAN, NO_ATTRIBUTION. #1795 closed with c31597. No P19 task names row 290. The live stack is not re-pinned.
@@ -6,3 +6,6 @@ No launcher in this directory. The seat runs as a T3 thread (thread 88b97f65) an
 credentials of its own; it pushes only its own `beakley/*` branches through the repository credential helper (mos-0981),
 never `refactor`, `main` or another seat's branch. Claude seats orchestrate and review (Q245). Registered by Sage on
 2026-10-23 so the queue can name the seat as row owner (store.mjs isSeatDir).
+
+Reports go to Sage's T3 thread (1ef1e4f8-3ead-4208-beca-38f9f1add079) and the next seat's, per the brief's Handoffs.
+Mos's thread gets a copy only when Mos has a step (mos-1579, 2026-10-24).
@@ -0,0 +1,314 @@
+# Row 217 — C2-06 citation guard, page store and runner retry
+
+Owner: Beakley (88b97f65-97db-4f05-8c6e-081f92bc3501), assigned by Mos Q245.
+Issue: #1718. Reviewer: Webby. Current branch: `beakley/row217-r2` (original `beakley/row217` preserved).
+Brief: `docs/plans/2026-10-20_case2-rows.md`, C2-06.
+Status: six whole suites green and M1–M5 killed under sage-4042/4043; ready for formal review. Landing scripts and integration remain Sage's.
+
+## Plan and boundaries
+
+Continue Launchpad's implementation from its handed-off ref. Complete the guard,
+live reply limits and M11 writer fence, broker page store and check evidence,
+CLI setter and runner retry/note behavior against the brief and design 5.2.
+Supply acceptance tests and mutants, then request Sage's test slot and Webby's
+review. Sage owns queue movement, gate and landing. Push only `beakley/*`, add
+commits without amend/force or attribution lines. No credential reads.
+
+## Standing rulings received from Sage (sage-3610)
+
+- sage-3595: stub supporting scope until row 283 lands, then rebase onto it and
+  add real-fixture tests. Landing follows 283. `runtime.mjs` wiring approved.
+- Check evidence belongs in an `action.allowed` event in the same transaction
+  as message insertion; no new event kind. Read the library at the cited commit.
+- In library businesses only, JSON over 32,768 characters gets the
+  `request-too-large` retry. `role.claim` adds `library` only for a library business.
+- Store `check.citations` entries with `scope`, `agent`, and `file` (the file's
+  last commit at the cited commit). On `thread.messages`, add `last` at the served
+  tip, one git call per distinct path per read. Scope/agent are broker evidence.
+- sage-3599: optional `BusError.reason`, guard refusals only, capped at 300
+  characters. Add bus server/client to manifest. Reasonless envelopes stay
+  byte-identical.
+- `render.mjs` obsolete notice hits belong to row 225.
+- Node and tests require Sage CLEAR (sage-3610 supersedes the initial permission
+  for targeted new tests). Full suites, webui builds and gate require shared slot.
+- Existing test edits require Mos GO through Sage; list every file and numstat
+  below before seeking that approval.
+
+## Recovery and coordination
+
+Initial base `45dca69f6`, clean. `scripts/mosaic queue next beakley` refused:
+linked worktrees cannot run the queue. Reported to Sage/Mos in beakley-0001;
+Sage will change ownership at a queue gap. No queue files changed.
+Read AGENTS.md, agents/README.md, C2-06 brief, design 5.2 and the row 225 BUILD
+contract. Requested Launchpad handoff in beakley-0002. Its header timestamp was
+mistakenly typed ahead of the actual clock; sequence key identifies the message.
+
+## Existing test changes
+
+None yet. No tests or Node commands run.
+
+
+## Handoff adopted and independent work (2026-10-23)
+
+Fast-forwarded `beakley/row217` to Launchpad `e25ef0373` on `45dca69f6`.
+The full original handoff/rulings remain at
+`agents/launchpad/work/queue-217/BUILD.md`. No handoff code was rebuilt from scratch.
+
+Implemented the runner path: role.claim library switch; exact fixed texts; note
+inside JSON text with citations retained and no JSON clip; fixed texts defer
+notes; one same-session retry for guard codes and both existing size caps;
+retry fallback chosen from the second refusal; separate usage turn id for retry.
+Outside library businesses the existing send path remains intact.
+
+Added the CLI README usage paragraph. New acceptance tests cover library parsing,
+real Git reachability/quotes/scope/origin, settings fallback, M11 direct writer
+and serialization, CLI dispatch, broker insert/check atomicity, live settings,
+page bounds/lifecycle, socket reasons, per-path last reads, request snapshots,
+and runner RESULT/typed send_message, fixed texts, long JSON and unslop behavior.
+These are authored evidence only: none has executed.
+
+Static defects corrected locally: a missing projects object now means no library;
+the guard sends its captured request arguments after the asynchronous check;
+origin/last Git logs use literal pathspecs; a web quote can match any retained
+fetch of the cited URL. Each has new-file regression coverage.
+
+## Scope additions and cross-row contract
+
+- `packages/library/src/reply-protocol.mjs`: shared GUARD_CODES/FIXED_TEXTS,
+  import-free, so runner imports do not reach host Git modules. guard.mjs
+  reexports them to preserve Launchpad's API. Fethry confirmed no renderer import
+  is needed when the renderer simply displays fixed texts as ordinary text.
+- `packages/seat/src/sandbox.mjs`: one RUNNER_FILES entry for that pure file,
+  approved by sage-3640. No other mount change. The existing sandbox.test.mjs
+  import-closure test must pass unchanged; seat joins the gate list.
+- Runtime hunks remain exactly Launchpad's import and library guard/limits/last
+  adapters, plus library.limits.set dispatch. Drift checks wait on 216 and 285.
+- Status contract confirmed with Fethry (beakley-0004, fethry-0009): nested
+  `replyLimits: {requireCitation, citationsPerReply, fallback: [keys],
+  problem: "reply-limits-unreadable" | null}`. Check entries remain ordered
+  `scope/agent/file`, plus `last` on reads; no changed boolean.
+
+## Verification and remaining acceptance
+
+- Static `git diff --check`: clean so far. No Node, suite, test or mutant run.
+- Existing test file edits: none (numstat 0/0 for every pre-existing test).
+  All new test files are listed in manifest.r1.sha256; no Mos approval requested.
+- `mutants.py` is authored for isolated HEAD archives with green controls:
+  M1 remove both writer fences; M2 compare incoming human; M3 split evidence
+  from insert; M4 drop client reason. Not executed.
+- Still required: Sage CLEAR for targeted runs; fix first-run failures; supporting
+  scope acceptance against row 283; 216 index/readLibrary fixture comparison;
+  285/runtime drift check; full library/business/bus/cli/harness/seat suites and
+  every scripts/test-*.sh on Sage's gate; mutant execution; Webby approval.
+- Before in-review, perform brief's obsolete-code/key search and report outside
+  ownership hits to Sage. render.mjs/render.test.mjs hits belong to 225.
+- No queue changes, protected branch pushes, gate claims or acceptance claims.
+
+Static obsolete-code/key search completed: only packages/library/src/render.mjs:6 and packages/library/tests/render.test.mjs:58 match no-cited-answer; both belong to row 225 per standing ruling. No owned-path hit. Repeat before in-review after dependency changes.
+
+
+## Webby early look 0939c0682 / webby-0249 and sage-3668/3670
+
+This remains an untested draft. The follow-up adds tests only; production E4
+changes wait for the held-lock regression's first RED under Sage CLEAR.
+
+- E1: added an ordinary actor `mallory` that sets both `human` to itself and
+  `replyLimits`. The existing role/tester actors did not distinguish M2 because
+  the actor-shape exclusions rejected them independently of the human comparison.
+  M2 is still unrun; no kill claimed.
+- E2: added a real bus event assertion for `agent: "acme/scribe"` from a file's
+  Mosaic-Agent trailer. The cited tip includes a later unrelated commit, so the
+  event must store the file commit rather than the library tip. thread.messages
+  must show `last === file` for that unchanged path. Supporting scope still waits
+  for row 283's real fixture, as ruled.
+- E3: sage-3668 accepts direct writer.write tests under chief and tester actors
+  as substitutes for the brief's setter cases (brief lines 483-491 at base
+  45dca69f6). Correction to the early-look premise: organization.set DOES exist,
+  broker.mjs:4701/4709, but ORGANIZATION_KEYS excludes replyLimits; instances.set
+  also cannot carry it. Direct writes exercise the shared M11 boundary those
+  setters cannot reach with that input. Sage confirmed the accurate reason in
+  sage-3670; the unrelated actor case remains required.
+- E4: traced readSyncState -> withLibraryLock -> library-sync-busy after five
+  seconds -> servedMirror catch-all -> null served -> misleading citation-invalid.
+  New real-flock/socket test first proves the cite valid, holds the lock, asserts
+  the exact citation-unavailable reason the agent receives, verifies no insert,
+  and checks fixed fallback delivery and recovery after unlock. Additional tests
+  distinguish malformed sync state from absent/new mirrors, and assert that the
+  actual runner retry request contains that reason. These tests are expected RED
+  until the fix. Planned production change: only an absent mirror or legitimate
+  empty state yields null; other failures become GuardError citation-unavailable;
+  bodies without path cites do not require the mirror lock. Add the code to
+  GUARD_CODES so the runner sends the agent that reason on its one retry. Per
+  sage-3670, existing four fallback bodies can remain only if that delivery is
+  verified. M5 restores catch-all behavior; authored, not run.
+- E5: first-library-project selection is a Launchpad handoff implementation
+  choice, not a validated rule that a business can only have one library.
+  Cites into another library remain a limitation. No mapping/schema rule added.
+- E6: the broker's full guard table now runs as both coder and research.
+- E7: new citation-runtime.test.mjs starts the real runtime, reads limits from
+  the real organization file, then changes, corrupts and removes that fixture
+  file and checks library.status without replacing the library adapter.
+
+No Node, tests or mutants ran. No test that predated row 217 changed.
+
+
+## Webby follow-up 192049c98 / webby-0258
+
+E1, E2, E6 and E7 closed statically; no executed acceptance claimed. E3 correction and E5 limitation accepted. E4 tests accepted statically; real RED then production fix/green remain on hold for Sage CLEAR, with supporting scope waiting on 283. F1: citation-helpers status now uses its mutable served value, matching guard/last after setServed instead of reporting the original fixture commit. Test-only fixture correction, unrun. manifest.r3.sha256 records the updated helper; no production or old-test changes.
+
+
+## Round 2 / sage-4037 — 2026-10-24, Untested
+
+New branch `beakley/row217-r2` from published `dde5b8496`, rebased exactly onto
+`origin/refactor` at `e0c6142f3` (109 upstream commits since `45dca69f6`). The
+published original branch is unchanged; no amend or force-push. The replayed
+four commits are b9ef816ff, 7400509ba, a447880cb, 2655ec010. Full range-diff:
+`rebase-r2.range-diff.txt`. Last commit is `=`, the first three are `!` from
+conflict context/indentation and append-log placement described below.
+
+Conflict resolutions:
+- broker.mjs: retained landed grants.scope/grants.scope.set dispatch and added
+  library.limits.set to the organization verb dispatch; neither path removed.
+- runtime.mjs: retained grants.scope.set and added library.limits.set alongside
+  it; retained query/sync wiring and all new base lifecycle behavior.
+- organization.mjs: retained row 239's beforeWrite/revoked wrapper, placing both
+  M11 fences before validations/revocation as on the old candidate. A refused
+  reply-limit write cannot invoke beforeWrite.
+- library/index.mjs: retained C2-05a buildIndex/query exports and added the guard
+  and reply-limits exports.
+- BUILD-LOG.md and docs/SESSIONS.md: retained upstream appends followed by all
+  Beakley appends. Static byte-prefix checks prove the entire e0c6142f3 log
+  histories survive; all original Beakley entries also survive.
+- business.mjs, cli README and sandbox.mjs auto-merged. Static diff against the
+  target confirms only this row's TOP_KEYS addition, README paragraph and one
+  import-free protocol mount; landed supporting scope and room-address mount
+  remain intact. runtime diff contains only the approved import, injected
+  guard/limits/last adapters and setter dispatch, now beside grants.scope.set.
+
+Correction recorded honestly: the first unpublished rebase attempt used an
+unbounded marker regex that removed code after a conflict. The diff stat caught
+it immediately; aborted the rebase and repeated with bounded markers. No result
+from that discarded attempt was pushed. The successful first replay matches the
+original 589 insertions/20 deletions; no broad deletions remain.
+
+Implemented E4 under sage-4037's explicit direction to make the product fix
+while keeping all tests unrun. This supersedes the earlier planned RED-first
+execution order; no RED or green has been observed. The existing regression
+cases predate the fix. GUARD_CODES now includes citation-unavailable. Only a
+mirror confirmed absent by lstat, or readSyncState's legitimate empty state,
+yields no served commit. Other read/lock/metadata errors give the fixed safe
+reason: "The library is busy or unavailable. Retry the answer when the library
+is available." The runner receives it through BusError.reason and includes it
+in its one retry request. The existing four fallback bodies remain. Plain,
+web-only and fixed replies require no mirror read, so a busy mirror cannot
+block the runner's fixed fallback. M5's real production anchor now exists.
+
+Supporting scope after row 283 (`8d2856ee3`): added two broker tests using real
+mapping/reader classification, not a scope stub. A path in both supporting and
+playground refuses as canon; an agent-committed supporting path stores
+scope=supporting, agent=acme/scribe and its file commit in message.checked.
+
+C2-05a comparison: index-build.mjs builds its file map directly from readLibrary
+files; indexFor calls that same reader at the requested commit. Added a real
+fixture test comparing the index set, readLibrary set and libraryReader.lines
+admission, including supporting, unmapped Markdown and .canvas. This comparison
+is authored and statically traced, not executed; numerical results wait on CLEAR.
+
+Current packet: manifest.r4.sha256, relative to e0c6142f3. No test file already
+present at that base was edited. No Node, npm, tests, mutants or webui build run.
+Ready for CLEAR after Lena's row 296. On CLEAR, install with npm ci
+--ignore-scripts --no-audit --no-fund in THIS worktree root and packages/webui;
+never link to canonical node_modules or run npm/rm in the canonical checkout.
+Use short mktemp TMPDIR and timeout -k 10. Any old-test red goes to Sage before
+an edit. Full green gate, mutants and Webby verdict remain outstanding.
+
+Range-diff receipt rendering trims trailing whitespace on diff separator lines; no substantive range-diff content changed. This removes whitespace warnings caused by embedding raw diff output in a tracked text file.
+
+Final base-to-candidate whitespace check found a trailing blank line inherited from Launchpad in limits.mjs; removed it without behavior changes. manifest.r5.sha256 supersedes r4 for the exact candidate file hashes.
+
+
+## CLEAR sage-4042/4043 — execution started 2026-10-24
+
+Queue beakley-217-start initially refused Lena's review-outcome lock twice;
+same-op retry succeeded at rev3894 (briefed→in-progress). No queue bypass.
+Short TMPDIR /mnt/storage/scratch/tmp/tNoueZ. Worktree-local npm ci at root
+(128 packages) and packages/webui (2) completed; neither path was a symlink.
+No npm/rm command ran in canonical. All test commands use timeout -k 10.
+
+E4 current file: 3 pass/0 fail/0 skip. M5 isolated pre-fix stand-in: 1 pass,
+2 expected assertion failures (citation-invalid instead of citation-unavailable),
+exit1. Restored product bytes and checkout product hashes, then E4 restored
+control 3/3. Receipts under run-r2/m5-red. M1 six-space anchors both match
+exactly once on the eight-space lines.
+
+Touched test files first run: 56 pass/1 fail, zero skip/cancel. The sole first-red
+was NEW citation-runtime.test.mjs invalid-authority at Broker.checkBusiness:
+validator output has unresolved roles and is not the host's broker projection.
+Adjusted that new fixture only, following limits-runtime.test.mjs: minimal
+empty-authority coder, validated real project mappings, real organization adapter
+and systemFor(root). Single rerun 1/1, then all touched files 57/57. No base test
+failure or edit. First log retained as run-r2/touched-first.log and reported to
+Sage in beakley-0014. No production change was required.
+
+The isolated mutant driver now wraps each node run in timeout -k 10, refuses a
+symlinked root node_modules, restores mutated files in finally, verifies original
+checkout product hashes after every mutant and reruns the restored control.
+Optional name filters allow the E4 M5 RED before the full mutant pass. No
+canonical dependency link is used; isolated copies link only this worktree's
+own dependency install.
+
+
+## Final slot results / 2026-10-24 10:21Z
+
+All requested runs completed serially under sage-4042/4043 on source revision
+`2d274a5b6`. Final receipt commits change only tracking and logs, not packages.
+
+| Whole suite | Pass | Fail / skip / cancel |
+| --- | ---: | --- |
+| library | 142 | 0 / 0 / 0 |
+| business | 270 | 0 / 0 / 0 |
+| bus | 974 | 0 / 0 / 0 |
+| cli | 988 | 0 / 0 / 0 |
+| harness | 172 | 0 / 0 / 0 |
+| seat | 218 | 0 / 0 / 0 |
+
+Total 2,764 whole-suite tests. Touched files rerun 57/57. The unchanged
+RUNNER_FILES import-closure test passed in seat (seat-suite.log:153). The only
+first-run failure was the NEW runtime fixture already recorded above; no old
+test failed and no test present at e0c6142f3 was edited.
+
+M1–M5 all killed by the intended assertion, each with Node exit1, a green
+control and green restored control. Driver exit0. M1 catches missing writer
+refusals; M2 is killed by mallory's human swap; M3 detects one message left
+behind after evidence failure; M4 detects the missing reason; M5 detects
+citation-invalid in place of citation-unavailable on contention and bad state.
+Every mutation was in a disposable HEAD archive. Each changed file was restored,
+checkout product hashes checked after every mutant, and the restored control
+rerun. All five final restored.sha256 certificates match current product files.
+M5 also ran separately before the whole suites as the authorized pre-fix RED
+stand-in; its held-lock and malformed-state assertions failed, then restored
+E4 passed 3/3. Full raw controls/negatives/restores are retained.
+
+Receipts: run-r2/summary.json and summary.txt; *-suite.log; touched-first.log,
+touched-rerun.log; availability-green.log; runtime-fixture-retry.log; npm-root.log
+and npm-webui.log; m1-anchors.txt; m5-red/ and mutants/. All are text, no binary
+artifact added. All Node/mutant/npm runs used the short TMPDIR and timeout -k 10.
+Both node_modules trees are local npm ci installs. No canonical npm/rm or
+canonical dependency link. No further runtime/source changes after the tests.
+
+Acceptance formerly waiting on dependencies is executed: real row283 supporting
+canon refusal and supporting/agent event pass; the C2-05a readLibrary/index set
+comparison passes; runtime readRaw live/corrupt/missing-file test passes; runner
+retry request carries the E4 availability reason. The repeat obsolete-name
+search finds only render.mjs:6 and render.test.mjs:58, owned by row225; no owned
+hit. First-library selection remains the accepted E5 limitation. Webby-0274 N1
+is a nonblocking wording limitation: configuration faults share the safe
+busy-or-unavailable retry text. No policy/schema restriction was invented.
+
+Current complete changed-file manifest over e0c6142f3..candidate is
+candidate-manifest.sha256, excluding itself to avoid a circular hash. It includes
+source, tests, records and evidence. Earlier numbered manifests are historical.
+Formal Webby verdict and all scripts/test-*.sh at landing remain Sage's steps;
+this is verified for review, not an integration/deployment claim.
+
+Exact negative-test logs retain Node's whitespace-only diagnostic lines. Whole diff --check reports those 12 blank-line padding warnings in run-r2 logs; source/docs diff --check excluding captured run-r2 evidence is clean. No source whitespace problem or test failure is hidden by that exclusion.
@@ -0,0 +1,61 @@
+# Row 217 round 2 — verified for review
+
+Issue #1718, C2-06. Base e0c6142f3; branch beakley/row217-r2. Continued
+Launchpad e25ef0373 through the preserved original dde5b8496 branch. Range-diff,
+conflict resolutions and acceptance receipts are in BUILD.md. Tested source
+revision: 2d274a5b6; the final commits add records/evidence only.
+
+The broker checks agent-to-human citations before insertion, stores trusted
+scope/agent/file evidence atomically with the message, and supplies per-path last
+on thread reads. It keeps session-local fetched pages and reads reply settings
+live through the M11 human-only writer. The runner preserves cited JSON, defers
+notes on fixed replies, and retries once with the refusal code and safe reason.
+E4 adds citation-unavailable for mirror/state/lock faults; uncited/web-only/fixed
+bodies do not need the mirror lock. Supporting scope uses landed row283 code.
+
+## Product and test scope
+
+The package paths listed in candidate-manifest.sha256 are exactly this row's
+base-to-candidate changes. Fourteen product paths cover library guard/limits/
+protocol/exports; business validation/writer; bus broker/runtime/server/client;
+CLI command/README; runner; and the single approved pure-protocol sandbox mount.
+Nine test/helper/fixture paths are additions. No existing test is modified.
+The mounted protocol stays import-free. Runtime retains the landed grant/query/
+sync behavior; the writer retains beforeWrite/revoked handling and fences before
+revocation. No SQL schema, event kind, role authority or credential change.
+
+## Executed evidence
+
+| Whole suite | Pass | Fail / skip / cancel |
+| --- | ---: | --- |
+| library | 142 | 0 / 0 / 0 |
+| business | 270 | 0 / 0 / 0 |
+| bus | 974 | 0 / 0 / 0 |
+| cli | 988 | 0 / 0 / 0 |
+| harness | 172 | 0 / 0 / 0 |
+| seat | 218 | 0 / 0 / 0 |
+
+Touched files 57/57; total whole suites 2,764. First run was 56/57 due solely
+to a new runtime fixture missing the broker's resolved authority shape. Only
+that new fixture changed; single and full touched reruns passed. No old test
+failed. First-red evidence remains in run-r2/touched-first.log.
+
+M1–M5 killed: missing M11 fences, incoming-human trust, split check transaction,
+dropped client reason, and hidden library availability. Every negative run has
+green control/restored runs and matching restored product certificates. M5 is
+also the authorized E4 pre-fix RED stand-in. Supporting canon refusal, stored
+supporting/agent evidence, the C2-05a index comparison, runtime raw settings and
+agent-visible E4 retry reason all pass. The unchanged sandbox closure test passes.
+
+Commands ran serially under Sage CLEAR with short TMPDIR and timeout -k 10.
+Root/webui dependencies came from local npm ci, never canonical links. Full logs,
+summary.json and mutant certificates are in run-r2/. The complete changed-file
+manifest candidate-manifest.sha256 covers e0c6142f3..candidate, excluding itself;
+its SHA256 is supplied with the pushed tip. Historical manifests stay untouched.
+
+## Remaining boundaries
+
+Sage runs every scripts/test-*.sh at landing and posts the formal Webby review
+request. No merge/deployment performed. First-library selection remains the
+accepted limitation; configuration faults share the safe unavailable reason
+(Webby N1, nonblocking). Obsolete-name search hits only row225's render files.
@@ -0,0 +1,80 @@
+74398edcedf16a3d856ab9e7ea900eb61a4df7f726f04b74b2ff123e7536e9c1  BUILD-LOG.md
+87880c30c2be0180e6eec4dbe203f86e93ae2b1b4be44031b6a4903c6245a0ec  agents/beakley/work/queue-217/BUILD.md
+e7ecf624ccb2b918efb08001ae9da36380fe918f8c27db704860809b6792e6f2  agents/beakley/work/queue-217/MANIFEST.md
+f4a042b5d6d393d2be62b107d7157ae51dd8fbf36f4360f5cd8cf07c03c74251  agents/beakley/work/queue-217/manifest.r1.sha256
+53f051a4e416a34181ad9bcc7687f0d686274542b06d9758e2db7eb81e848811  agents/beakley/work/queue-217/manifest.r2.sha256
+f96fccc566d01d70db32188574d0b5331ef3c90bce66558449a51b3f21da1b29  agents/beakley/work/queue-217/manifest.r3.sha256
+faf8ec3e0ab458fe95120345ec93e077b0dcad9458c0f2683a20effb6ce3ed93  agents/beakley/work/queue-217/manifest.r4.sha256
+a58f0e273b60508b95c833cbace26799d7aa935117fd1f9a27812fba65b93d54  agents/beakley/work/queue-217/manifest.r5.sha256
+120b15db5eb75897095fe3d0759553e482365d58061d763beba7754a6e0d0734  agents/beakley/work/queue-217/manifest.r6.sha256
+04a9d0585b5ae4818d87d67ac27f838355f1a6f586625a16cf01d91d7bb6d4a0  agents/beakley/work/queue-217/mutants.py
+4a5f7b3373fd3ff46e2d6a5f7ee7106ad76a71c9034ca5a44b9e7340f0cc4cff  agents/beakley/work/queue-217/rebase-r2.range-diff.txt
+630070b0d682120ba64b382ab3b47b3fa3e8f0bcfc695ca09432d01d705fbcb3  agents/beakley/work/queue-217/run-r2/README.md
+c4245272d5fc89c5fd3a9ea979e7d65727ea76e24364190af57556c59ad2fe34  agents/beakley/work/queue-217/run-r2/availability-green.log
+700fff38b0a99ffdb44863f13015673cb459e5e645c5df46580eafbc407c95c8  agents/beakley/work/queue-217/run-r2/bus-suite.log
+ef216d0af325c2b6647eb8405e5de70ebb5a0e7a28bb3d8fe3abc6a289a8d3d2  agents/beakley/work/queue-217/run-r2/business-suite.log
+af173117f83359ebba62c5c00eadc749bb179551a8e290bcf55bbe39b1e7272c  agents/beakley/work/queue-217/run-r2/cli-suite.log
+a615f69ba60859e9d7817f3353b0d7c71e6c12eecc3ecf0f630d473be21e5fef  agents/beakley/work/queue-217/run-r2/harness-suite.log
+acaa08001101fd69a12cae377984e0d469c2cedc2affb5ccf9af426a72549dcc  agents/beakley/work/queue-217/run-r2/library-suite.log
+5414ce5b94e7ac7918ed64f62e5fd2b921d49c7e93cf73042b9187d014069934  agents/beakley/work/queue-217/run-r2/m1-anchors.txt
+7d7138b25568adb98932bbe180a337fe6798c3eddcd7134ce7278c24fea48818  agents/beakley/work/queue-217/run-r2/m5-driver.log
+de7dd716d3981fd9fa1d114882e60f9a83736cdb8f8e2096c3913c9f8620238a  agents/beakley/work/queue-217/run-r2/m5-red/M5-hide-library-unavailable-control.log
+6b98d3943d04d99f3ef212f11901d2257422410c477abec27ed3100a0d20dad9  agents/beakley/work/queue-217/run-r2/m5-red/M5-hide-library-unavailable-restored-green.log
+a58f0e273b60508b95c833cbace26799d7aa935117fd1f9a27812fba65b93d54  agents/beakley/work/queue-217/run-r2/m5-red/M5-hide-library-unavailable-restored.sha256
+d852a464fd624ce12d8d6bdc9800402639bb500a6d40c628cb836ca1bcf1e326  agents/beakley/work/queue-217/run-r2/m5-red/M5-hide-library-unavailable.log
+7d7138b25568adb98932bbe180a337fe6798c3eddcd7134ce7278c24fea48818  agents/beakley/work/queue-217/run-r2/m5-red/summary.txt
+1c405f1f15d2ce2db37b5809cdf5eaff68f18c99c5621e1c43262a289c5e35c4  agents/beakley/work/queue-217/run-r2/mutants-driver.log
+c96487e87c1ae9e34a7222b04701c5efcce25fe201f03a0213b989f7cde2c376  agents/beakley/work/queue-217/run-r2/mutants/M1-writer-fence-control.log
+8b294ecc057ad64ace7f520a1785b54df7df5a9eddf962813c3e5f8fa723ffd4  agents/beakley/work/queue-217/run-r2/mutants/M1-writer-fence-restored-green.log
+120b15db5eb75897095fe3d0759553e482365d58061d763beba7754a6e0d0734  agents/beakley/work/queue-217/run-r2/mutants/M1-writer-fence-restored.sha256
+be749486956e85a71f08107139613e09b62c53b58e8cc10e0fbe807e95d079a6  agents/beakley/work/queue-217/run-r2/mutants/M1-writer-fence.log
+525da1cc780dfea1a66f95739d444516bd16271c7ec539d615012ec9c8e7c139  agents/beakley/work/queue-217/run-r2/mutants/M2-incoming-human-control.log
+3546705980bb4a73295f16e42ab55f38c6adca9a5c53252264ae4ef66c595dfc  agents/beakley/work/queue-217/run-r2/mutants/M2-incoming-human-restored-green.log
+120b15db5eb75897095fe3d0759553e482365d58061d763beba7754a6e0d0734  agents/beakley/work/queue-217/run-r2/mutants/M2-incoming-human-restored.sha256
+77352c22c459c516ff47ff1caa42fe9763fe201a04079646b0ccc0da6a145804  agents/beakley/work/queue-217/run-r2/mutants/M2-incoming-human.log
+58de145ec0384de4f560b28dcfa76e98c384be5c771d6561fb1054f07ea8166b  agents/beakley/work/queue-217/run-r2/mutants/M3-split-check-transaction-control.log
+6a4cd0ef36b0d2318ef71c941ce300d215b6d2f87d0b4328c461ba53d812434c  agents/beakley/work/queue-217/run-r2/mutants/M3-split-check-transaction-restored-green.log
+120b15db5eb75897095fe3d0759553e482365d58061d763beba7754a6e0d0734  agents/beakley/work/queue-217/run-r2/mutants/M3-split-check-transaction-restored.sha256
+2deb72f2d442f413fd06e205093f6fa3f955ec6ef707b7ca65b86be8c8883f9b  agents/beakley/work/queue-217/run-r2/mutants/M3-split-check-transaction.log
+31cac91f43c8b7ebe0431f27a038b0fcd554a12b232592747f3972213cfa192b  agents/beakley/work/queue-217/run-r2/mutants/M4-drop-client-reason-control.log
+e06c1da8dcd9e7eb013a4597b14369e296e21b812476bd6d88c7a7aa040d4065  agents/beakley/work/queue-217/run-r2/mutants/M4-drop-client-reason-restored-green.log
+120b15db5eb75897095fe3d0759553e482365d58061d763beba7754a6e0d0734  agents/beakley/work/queue-217/run-r2/mutants/M4-drop-client-reason-restored.sha256
+66d8f72df3bc0428624dab437cb04923ecab42055d29c6ffde43af98d47f32ae  agents/beakley/work/queue-217/run-r2/mutants/M4-drop-client-reason.log
+3f74fbd3b4297868b9bb637a7924739363470964873a4bd3dc2f5daf2d0e9c8a  agents/beakley/work/queue-217/run-r2/mutants/M5-hide-library-unavailable-control.log
+96d95a45d5326e614328531a7dadebce5d3ce70e40ec23dd49a66c1a676b45be  agents/beakley/work/queue-217/run-r2/mutants/M5-hide-library-unavailable-restored-green.log
+120b15db5eb75897095fe3d0759553e482365d58061d763beba7754a6e0d0734  agents/beakley/work/queue-217/run-r2/mutants/M5-hide-library-unavailable-restored.sha256
+fa57189e9de99c4a76be27da3b857c07fc76706f7d0ee7409ba4efd43c3642b7  agents/beakley/work/queue-217/run-r2/mutants/M5-hide-library-unavailable.log
+1c405f1f15d2ce2db37b5809cdf5eaff68f18c99c5621e1c43262a289c5e35c4  agents/beakley/work/queue-217/run-r2/mutants/summary.txt
+862418d3d4124871ca5fcaf35e16c318a04e2888da83836751ddfea110efeb06  agents/beakley/work/queue-217/run-r2/npm-root.log
+38b75d8bddacf8d227883a29dd8a10f87a7f02d8a95f3f8809cb966fc9c8cf7a  agents/beakley/work/queue-217/run-r2/npm-webui.log
+7f29b5a328fd6be61ebc4110a048305b50856810ab97a7798cd427924d74e8c9  agents/beakley/work/queue-217/run-r2/runtime-fixture-retry.log
+3bd51fe222a61412e8285eb522a2f7b5c1b0b035f7dca0e9ff66190bd53e6706  agents/beakley/work/queue-217/run-r2/seat-suite.log
+8b98c6ba76de46ddd858b4b95bae7bce2d1bf969edb85901ad8819e1280869a1  agents/beakley/work/queue-217/run-r2/summary.json
+e374cb7ab28a46dd560b267b0fe6691b11c0c2fabd00087c4e49a02ab1bf8086  agents/beakley/work/queue-217/run-r2/summary.txt
+ad2022c7ccdfa151e029eed92cd309369a97f197d9304775f6d2be3dc5f11080  agents/beakley/work/queue-217/run-r2/touched-first.log
+e1fe5ebae1a36f196470848bf27b99c21d316c9236a1d1328d7bcaca0ee4d3e9  agents/beakley/work/queue-217/run-r2/touched-rerun.log
+0c1b1f079b4b993e8d1aeb730d743e28696413eae8be6dd79731d749d1d45d0b  agents/launchpad/work/queue-217/BUILD.md
+76b0a5785f134c09cda677e8f5fb3e7454b39883c4a6f55360d9d277476fcd2c  docs/SESSIONS.md
+eeca81ab965f9e94f930ee5f51d16f019af6368bc6c3994895e204f7a54ec8d2  packages/bus/src/broker.mjs
+ad3c686a089f67f3c89610937c6fc9b32367cea5d9735125d89bef042082d4e8  packages/bus/src/client.mjs
+36b05dd3119e5929211aa1cc5d45c5043f5a1c34567ddc7cac8f002835d44abe  packages/bus/src/runtime.mjs
+66b26d131a19f4f411686427274936850c1ff0aed11e9b281ae4aadcf4b289fc  packages/bus/src/server.mjs
+cdd0304ec25ef1ad3e31c52502fa46f2c80bd77c8d3c2e13f8ed4b5328f342c9  packages/bus/tests/citation-availability.test.mjs
+2e05074cd9d15d810103658af3858161cee2af78b0a2e1ba910222fab3e84401  packages/bus/tests/citation-guard.test.mjs
+2c7a2102e2e0244876e41b664f4f706baefe3375100b956655551db1230f5da3  packages/bus/tests/citation-helpers.mjs
+9768b6dc5ae078c5cc4f76473097287b74c5bc5853d39e1f57f153e646f861af  packages/bus/tests/citation-runtime.test.mjs
+abaeac64f2c3bf8ba83c9a4488edd9105c4707a6564560c5333d5421445653af  packages/business/src/business.mjs
+3a6044de5d1ca2cc35c5285b460c3e402b4274837e5d88b97f489797f6004903  packages/business/src/organization.mjs
+4d2eb11beaa80175e524af1b95c81e7164990fba1d3e1754f5ba06eee390a14f  packages/business/tests/reply-limits.test.mjs
+a2bb98734bcc2556f8b2168f0faf8a89f7064c3f0aa49feb7d1975d596192f09  packages/cli/README.md
+2f291a71f490f2741edada7a3e3788500f8976a08eb8ab1411f6c5982f778260  packages/cli/src/limits.mjs
+f38af2d46d5f5f6388f599912507b94b87a0bf9dcc2104bb2187c38ee35118d5  packages/cli/tests/reply-limits.test.mjs
+6ad72b4245e0a66e32725941900c1ece64c2e5de2fb73d65c8e042b4f3a691a6  packages/harness/src/runner.mjs
+a5ef1b65230239a7baf6d0e8f2b8a51c0516348c7c4339a55b3f0a1a6ff531ba  packages/harness/tests/citation-runner.test.mjs
+330bc71bf6c7e64d3ddb70440903d2d9acf7878d44a49d7e30c2352ee4c807ec  packages/harness/tests/fixtures/citation-adapter.mjs
+f710d9600a17f6e2989a289cfe84e58f161d86c7306605946ce05fa71b364eb2  packages/library/src/guard.mjs
+c0d630798914e300e461c247340533328e97119e54909c6a9406340e61fed8b7  packages/library/src/index.mjs
+98ef45ed61144aaea44d8aea1ac43082b6d340297e46846d01772da38728e530  packages/library/src/limits.mjs
+7b46f47b5e9d6b554b5d39bce2cd95c4610f5f35b8ab8fdc5a2864b3214be809  packages/library/src/reply-protocol.mjs
+406146ebbce3710f308243b684a1c17e7626c1b65a4468489364317e31537a48  packages/library/tests/guard.test.mjs
+39c8e6c8250a13fa43015fb2c407195e30ee642f729a9f6a644c38b4ea758a72  packages/seat/src/sandbox.mjs
@@ -0,0 +1,21 @@
+68c05644d29188b897e2d4695d8e7025e143d424d69a91bc07bc950f589d34bf  packages/bus/src/broker.mjs
+ad3c686a089f67f3c89610937c6fc9b32367cea5d9735125d89bef042082d4e8  packages/bus/src/client.mjs
+49e01e5e73cc3e830ad48a1b6b13fe4d06a38950f17847dc049b75209d6d3f0a  packages/bus/src/runtime.mjs
+66b26d131a19f4f411686427274936850c1ff0aed11e9b281ae4aadcf4b289fc  packages/bus/src/server.mjs
+29114051a9bc5271e48978a9552d64b51b0ac4810f94a1f98940bf617b148df8  packages/bus/tests/citation-guard.test.mjs
+dc2d5836f10f591fc174aaf9587a3bff793b24ac29efe9ab68c6a9243d1d1c2c  packages/bus/tests/citation-helpers.mjs
+825da818ba3cf45a4837f0f15a9c2cdba55a3d0bbb4479d55236f35799427c6f  packages/business/src/business.mjs
+dbd79a4dfc926620d034b540f98f39336d81e4c79f214424c3cf19250c1d1f8d  packages/business/src/organization.mjs
+bec04a894bc2af000548283ed7719e4de1c6d56688f42238a113390e9b2d3fbe  packages/business/tests/reply-limits.test.mjs
+1f1bea250f694a2aae9b9dc856b3c3424ceca153ccf826c99ccb98e6ea9cd394  packages/cli/README.md
+2f291a71f490f2741edada7a3e3788500f8976a08eb8ab1411f6c5982f778260  packages/cli/src/limits.mjs
+f38af2d46d5f5f6388f599912507b94b87a0bf9dcc2104bb2187c38ee35118d5  packages/cli/tests/reply-limits.test.mjs
+6ad72b4245e0a66e32725941900c1ece64c2e5de2fb73d65c8e042b4f3a691a6  packages/harness/src/runner.mjs
+ec7ef0cbf493217eb9229895cae2fe7ef603f41913840e59a73220df387c81ca  packages/harness/tests/citation-runner.test.mjs
+330bc71bf6c7e64d3ddb70440903d2d9acf7878d44a49d7e30c2352ee4c807ec  packages/harness/tests/fixtures/citation-adapter.mjs
+0365114cf5773cbaa9fba196fbd1e773b2ec5ad2300c40231c357ca58884b9e3  packages/library/src/guard.mjs
+aaa8f7ba60a729a88a6ef57b3d5ff5a69bcf0e17b60e7db51a8dc5a697627b6c  packages/library/src/index.mjs
+3e04fa25a64334d33ffbec704205b32cd01992f2d341e908f933a345199beee0  packages/library/src/limits.mjs
+c9e682eff87e822647921288d7fce0ebdc7b09f0a6dfdd6528f10249ae26e81b  packages/library/src/reply-protocol.mjs
+dd056409712113eb9c1b70e29b21022f5b30df6ffbfb2658e293edd6ec7195c7  packages/library/tests/guard.test.mjs
+2f3ec99129d16394d4458e252b9cba4e38ff66cd9393e3889f8afc3140e15a8e  packages/seat/src/sandbox.mjs
@@ -0,0 +1,23 @@
+68c05644d29188b897e2d4695d8e7025e143d424d69a91bc07bc950f589d34bf  packages/bus/src/broker.mjs
+ad3c686a089f67f3c89610937c6fc9b32367cea5d9735125d89bef042082d4e8  packages/bus/src/client.mjs
+49e01e5e73cc3e830ad48a1b6b13fe4d06a38950f17847dc049b75209d6d3f0a  packages/bus/src/runtime.mjs
+66b26d131a19f4f411686427274936850c1ff0aed11e9b281ae4aadcf4b289fc  packages/bus/src/server.mjs
+cdd0304ec25ef1ad3e31c52502fa46f2c80bd77c8d3c2e13f8ed4b5328f342c9  packages/bus/tests/citation-availability.test.mjs
+8dc344b8a905c58d544b031ca84adb7eb869d9de88eb8e6b0fc1d9190702a38a  packages/bus/tests/citation-guard.test.mjs
+62d8a55945d4b700e22c8c49b6420a5e25719d266901a2ad20c72514735e65e9  packages/bus/tests/citation-helpers.mjs
+168dcac99d9bfdfdf5ff0eaa2c0fff91595b351b4d0092dc299532c9c32869f0  packages/bus/tests/citation-runtime.test.mjs
+825da818ba3cf45a4837f0f15a9c2cdba55a3d0bbb4479d55236f35799427c6f  packages/business/src/business.mjs
+dbd79a4dfc926620d034b540f98f39336d81e4c79f214424c3cf19250c1d1f8d  packages/business/src/organization.mjs
+4d2eb11beaa80175e524af1b95c81e7164990fba1d3e1754f5ba06eee390a14f  packages/business/tests/reply-limits.test.mjs
+1f1bea250f694a2aae9b9dc856b3c3424ceca153ccf826c99ccb98e6ea9cd394  packages/cli/README.md
+2f291a71f490f2741edada7a3e3788500f8976a08eb8ab1411f6c5982f778260  packages/cli/src/limits.mjs
+f38af2d46d5f5f6388f599912507b94b87a0bf9dcc2104bb2187c38ee35118d5  packages/cli/tests/reply-limits.test.mjs
+6ad72b4245e0a66e32725941900c1ece64c2e5de2fb73d65c8e042b4f3a691a6  packages/harness/src/runner.mjs
+a5ef1b65230239a7baf6d0e8f2b8a51c0516348c7c4339a55b3f0a1a6ff531ba  packages/harness/tests/citation-runner.test.mjs
+330bc71bf6c7e64d3ddb70440903d2d9acf7878d44a49d7e30c2352ee4c807ec  packages/harness/tests/fixtures/citation-adapter.mjs
+0365114cf5773cbaa9fba196fbd1e773b2ec5ad2300c40231c357ca58884b9e3  packages/library/src/guard.mjs
+aaa8f7ba60a729a88a6ef57b3d5ff5a69bcf0e17b60e7db51a8dc5a697627b6c  packages/library/src/index.mjs
+3e04fa25a64334d33ffbec704205b32cd01992f2d341e908f933a345199beee0  packages/library/src/limits.mjs
+c9e682eff87e822647921288d7fce0ebdc7b09f0a6dfdd6528f10249ae26e81b  packages/library/src/reply-protocol.mjs
+dd056409712113eb9c1b70e29b21022f5b30df6ffbfb2658e293edd6ec7195c7  packages/library/tests/guard.test.mjs
+2f3ec99129d16394d4458e252b9cba4e38ff66cd9393e3889f8afc3140e15a8e  packages/seat/src/sandbox.mjs
@@ -0,0 +1,23 @@
+68c05644d29188b897e2d4695d8e7025e143d424d69a91bc07bc950f589d34bf  packages/bus/src/broker.mjs
+ad3c686a089f67f3c89610937c6fc9b32367cea5d9735125d89bef042082d4e8  packages/bus/src/client.mjs
+49e01e5e73cc3e830ad48a1b6b13fe4d06a38950f17847dc049b75209d6d3f0a  packages/bus/src/runtime.mjs
+66b26d131a19f4f411686427274936850c1ff0aed11e9b281ae4aadcf4b289fc  packages/bus/src/server.mjs
+cdd0304ec25ef1ad3e31c52502fa46f2c80bd77c8d3c2e13f8ed4b5328f342c9  packages/bus/tests/citation-availability.test.mjs
+8dc344b8a905c58d544b031ca84adb7eb869d9de88eb8e6b0fc1d9190702a38a  packages/bus/tests/citation-guard.test.mjs
+8a2d4b636f8d4f926c484254c33ecf7b7e4722acef3250d2730593984d5ac06b  packages/bus/tests/citation-helpers.mjs
+168dcac99d9bfdfdf5ff0eaa2c0fff91595b351b4d0092dc299532c9c32869f0  packages/bus/tests/citation-runtime.test.mjs
+825da818ba3cf45a4837f0f15a9c2cdba55a3d0bbb4479d55236f35799427c6f  packages/business/src/business.mjs
+dbd79a4dfc926620d034b540f98f39336d81e4c79f214424c3cf19250c1d1f8d  packages/business/src/organization.mjs
+4d2eb11beaa80175e524af1b95c81e7164990fba1d3e1754f5ba06eee390a14f  packages/business/tests/reply-limits.test.mjs
+1f1bea250f694a2aae9b9dc856b3c3424ceca153ccf826c99ccb98e6ea9cd394  packages/cli/README.md
+2f291a71f490f2741edada7a3e3788500f8976a08eb8ab1411f6c5982f778260  packages/cli/src/limits.mjs
+f38af2d46d5f5f6388f599912507b94b87a0bf9dcc2104bb2187c38ee35118d5  packages/cli/tests/reply-limits.test.mjs
+6ad72b4245e0a66e32725941900c1ece64c2e5de2fb73d65c8e042b4f3a691a6  packages/harness/src/runner.mjs
+a5ef1b65230239a7baf6d0e8f2b8a51c0516348c7c4339a55b3f0a1a6ff531ba  packages/harness/tests/citation-runner.test.mjs
+330bc71bf6c7e64d3ddb70440903d2d9acf7878d44a49d7e30c2352ee4c807ec  packages/harness/tests/fixtures/citation-adapter.mjs
+0365114cf5773cbaa9fba196fbd1e773b2ec5ad2300c40231c357ca58884b9e3  packages/library/src/guard.mjs
+aaa8f7ba60a729a88a6ef57b3d5ff5a69bcf0e17b60e7db51a8dc5a697627b6c  packages/library/src/index.mjs
+3e04fa25a64334d33ffbec704205b32cd01992f2d341e908f933a345199beee0  packages/library/src/limits.mjs
+c9e682eff87e822647921288d7fce0ebdc7b09f0a6dfdd6528f10249ae26e81b  packages/library/src/reply-protocol.mjs
+dd056409712113eb9c1b70e29b21022f5b30df6ffbfb2658e293edd6ec7195c7  packages/library/tests/guard.test.mjs
+2f3ec99129d16394d4458e252b9cba4e38ff66cd9393e3889f8afc3140e15a8e  packages/seat/src/sandbox.mjs
@@ -0,0 +1,23 @@
+eeca81ab965f9e94f930ee5f51d16f019af6368bc6c3994895e204f7a54ec8d2  packages/bus/src/broker.mjs
+ad3c686a089f67f3c89610937c6fc9b32367cea5d9735125d89bef042082d4e8  packages/bus/src/client.mjs
+36b05dd3119e5929211aa1cc5d45c5043f5a1c34567ddc7cac8f002835d44abe  packages/bus/src/runtime.mjs
+66b26d131a19f4f411686427274936850c1ff0aed11e9b281ae4aadcf4b289fc  packages/bus/src/server.mjs
+cdd0304ec25ef1ad3e31c52502fa46f2c80bd77c8d3c2e13f8ed4b5328f342c9  packages/bus/tests/citation-availability.test.mjs
+2e05074cd9d15d810103658af3858161cee2af78b0a2e1ba910222fab3e84401  packages/bus/tests/citation-guard.test.mjs
+2c7a2102e2e0244876e41b664f4f706baefe3375100b956655551db1230f5da3  packages/bus/tests/citation-helpers.mjs
+168dcac99d9bfdfdf5ff0eaa2c0fff91595b351b4d0092dc299532c9c32869f0  packages/bus/tests/citation-runtime.test.mjs
+abaeac64f2c3bf8ba83c9a4488edd9105c4707a6564560c5333d5421445653af  packages/business/src/business.mjs
+3a6044de5d1ca2cc35c5285b460c3e402b4274837e5d88b97f489797f6004903  packages/business/src/organization.mjs
+4d2eb11beaa80175e524af1b95c81e7164990fba1d3e1754f5ba06eee390a14f  packages/business/tests/reply-limits.test.mjs
+a2bb98734bcc2556f8b2168f0faf8a89f7064c3f0aa49feb7d1975d596192f09  packages/cli/README.md
+2f291a71f490f2741edada7a3e3788500f8976a08eb8ab1411f6c5982f778260  packages/cli/src/limits.mjs
+f38af2d46d5f5f6388f599912507b94b87a0bf9dcc2104bb2187c38ee35118d5  packages/cli/tests/reply-limits.test.mjs
+6ad72b4245e0a66e32725941900c1ece64c2e5de2fb73d65c8e042b4f3a691a6  packages/harness/src/runner.mjs
+a5ef1b65230239a7baf6d0e8f2b8a51c0516348c7c4339a55b3f0a1a6ff531ba  packages/harness/tests/citation-runner.test.mjs
+330bc71bf6c7e64d3ddb70440903d2d9acf7878d44a49d7e30c2352ee4c807ec  packages/harness/tests/fixtures/citation-adapter.mjs
+f710d9600a17f6e2989a289cfe84e58f161d86c7306605946ce05fa71b364eb2  packages/library/src/guard.mjs
+c0d630798914e300e461c247340533328e97119e54909c6a9406340e61fed8b7  packages/library/src/index.mjs
+3e04fa25a64334d33ffbec704205b32cd01992f2d341e908f933a345199beee0  packages/library/src/limits.mjs
+7b46f47b5e9d6b554b5d39bce2cd95c4610f5f35b8ab8fdc5a2864b3214be809  packages/library/src/reply-protocol.mjs
+406146ebbce3710f308243b684a1c17e7626c1b65a4468489364317e31537a48  packages/library/tests/guard.test.mjs
+39c8e6c8250a13fa43015fb2c407195e30ee642f729a9f6a644c38b4ea758a72  packages/seat/src/sandbox.mjs
@@ -0,0 +1,23 @@
+eeca81ab965f9e94f930ee5f51d16f019af6368bc6c3994895e204f7a54ec8d2  packages/bus/src/broker.mjs
+ad3c686a089f67f3c89610937c6fc9b32367cea5d9735125d89bef042082d4e8  packages/bus/src/client.mjs
+36b05dd3119e5929211aa1cc5d45c5043f5a1c34567ddc7cac8f002835d44abe  packages/bus/src/runtime.mjs
+66b26d131a19f4f411686427274936850c1ff0aed11e9b281ae4aadcf4b289fc  packages/bus/src/server.mjs
+cdd0304ec25ef1ad3e31c52502fa46f2c80bd77c8d3c2e13f8ed4b5328f342c9  packages/bus/tests/citation-availability.test.mjs
+2e05074cd9d15d810103658af3858161cee2af78b0a2e1ba910222fab3e84401  packages/bus/tests/citation-guard.test.mjs
+2c7a2102e2e0244876e41b664f4f706baefe3375100b956655551db1230f5da3  packages/bus/tests/citation-helpers.mjs
+168dcac99d9bfdfdf5ff0eaa2c0fff91595b351b4d0092dc299532c9c32869f0  packages/bus/tests/citation-runtime.test.mjs
+abaeac64f2c3bf8ba83c9a4488edd9105c4707a6564560c5333d5421445653af  packages/business/src/business.mjs
+3a6044de5d1ca2cc35c5285b460c3e402b4274837e5d88b97f489797f6004903  packages/business/src/organization.mjs
+4d2eb11beaa80175e524af1b95c81e7164990fba1d3e1754f5ba06eee390a14f  packages/business/tests/reply-limits.test.mjs
+a2bb98734bcc2556f8b2168f0faf8a89f7064c3f0aa49feb7d1975d596192f09  packages/cli/README.md
+2f291a71f490f2741edada7a3e3788500f8976a08eb8ab1411f6c5982f778260  packages/cli/src/limits.mjs
+f38af2d46d5f5f6388f599912507b94b87a0bf9dcc2104bb2187c38ee35118d5  packages/cli/tests/reply-limits.test.mjs
+6ad72b4245e0a66e32725941900c1ece64c2e5de2fb73d65c8e042b4f3a691a6  packages/harness/src/runner.mjs
+a5ef1b65230239a7baf6d0e8f2b8a51c0516348c7c4339a55b3f0a1a6ff531ba  packages/harness/tests/citation-runner.test.mjs
+330bc71bf6c7e64d3ddb70440903d2d9acf7878d44a49d7e30c2352ee4c807ec  packages/harness/tests/fixtures/citation-adapter.mjs
+f710d9600a17f6e2989a289cfe84e58f161d86c7306605946ce05fa71b364eb2  packages/library/src/guard.mjs
+c0d630798914e300e461c247340533328e97119e54909c6a9406340e61fed8b7  packages/library/src/index.mjs
+98ef45ed61144aaea44d8aea1ac43082b6d340297e46846d01772da38728e530  packages/library/src/limits.mjs
+7b46f47b5e9d6b554b5d39bce2cd95c4610f5f35b8ab8fdc5a2864b3214be809  packages/library/src/reply-protocol.mjs
+406146ebbce3710f308243b684a1c17e7626c1b65a4468489364317e31537a48  packages/library/tests/guard.test.mjs
+39c8e6c8250a13fa43015fb2c407195e30ee642f729a9f6a644c38b4ea758a72  packages/seat/src/sandbox.mjs
@@ -0,0 +1,23 @@
+eeca81ab965f9e94f930ee5f51d16f019af6368bc6c3994895e204f7a54ec8d2  packages/bus/src/broker.mjs
+ad3c686a089f67f3c89610937c6fc9b32367cea5d9735125d89bef042082d4e8  packages/bus/src/client.mjs
+36b05dd3119e5929211aa1cc5d45c5043f5a1c34567ddc7cac8f002835d44abe  packages/bus/src/runtime.mjs
+66b26d131a19f4f411686427274936850c1ff0aed11e9b281ae4aadcf4b289fc  packages/bus/src/server.mjs
+cdd0304ec25ef1ad3e31c52502fa46f2c80bd77c8d3c2e13f8ed4b5328f342c9  packages/bus/tests/citation-availability.test.mjs
+2e05074cd9d15d810103658af3858161cee2af78b0a2e1ba910222fab3e84401  packages/bus/tests/citation-guard.test.mjs
+2c7a2102e2e0244876e41b664f4f706baefe3375100b956655551db1230f5da3  packages/bus/tests/citation-helpers.mjs
+9768b6dc5ae078c5cc4f76473097287b74c5bc5853d39e1f57f153e646f861af  packages/bus/tests/citation-runtime.test.mjs
+abaeac64f2c3bf8ba83c9a4488edd9105c4707a6564560c5333d5421445653af  packages/business/src/business.mjs
+3a6044de5d1ca2cc35c5285b460c3e402b4274837e5d88b97f489797f6004903  packages/business/src/organization.mjs
+4d2eb11beaa80175e524af1b95c81e7164990fba1d3e1754f5ba06eee390a14f  packages/business/tests/reply-limits.test.mjs
+a2bb98734bcc2556f8b2168f0faf8a89f7064c3f0aa49feb7d1975d596192f09  packages/cli/README.md
+2f291a71f490f2741edada7a3e3788500f8976a08eb8ab1411f6c5982f778260  packages/cli/src/limits.mjs
+f38af2d46d5f5f6388f599912507b94b87a0bf9dcc2104bb2187c38ee35118d5  packages/cli/tests/reply-limits.test.mjs
+6ad72b4245e0a66e32725941900c1ece64c2e5de2fb73d65c8e042b4f3a691a6  packages/harness/src/runner.mjs
+a5ef1b65230239a7baf6d0e8f2b8a51c0516348c7c4339a55b3f0a1a6ff531ba  packages/harness/tests/citation-runner.test.mjs
+330bc71bf6c7e64d3ddb70440903d2d9acf7878d44a49d7e30c2352ee4c807ec  packages/harness/tests/fixtures/citation-adapter.mjs
+f710d9600a17f6e2989a289cfe84e58f161d86c7306605946ce05fa71b364eb2  packages/library/src/guard.mjs
+c0d630798914e300e461c247340533328e97119e54909c6a9406340e61fed8b7  packages/library/src/index.mjs
+98ef45ed61144aaea44d8aea1ac43082b6d340297e46846d01772da38728e530  packages/library/src/limits.mjs
+7b46f47b5e9d6b554b5d39bce2cd95c4610f5f35b8ab8fdc5a2864b3214be809  packages/library/src/reply-protocol.mjs
+406146ebbce3710f308243b684a1c17e7626c1b65a4468489364317e31537a48  packages/library/tests/guard.test.mjs
+39c8e6c8250a13fa43015fb2c407195e30ee642f729a9f6a644c38b4ea758a72  packages/seat/src/sandbox.mjs
@@ -0,0 +1,90 @@
+#!/usr/bin/env python3
+"""Run only on Sage CLEAR. Mutate isolated HEAD archives; never edit the checkout.
+
+A green control run is required before each negative result counts as a kill.
+Usage: python3 agents/beakley/work/queue-217/mutants.py OUTPUT_DIRECTORY
+"""
+from pathlib import Path
+import io
+import hashlib
+import os
+import subprocess
+import sys
+import tarfile
+import tempfile
+
+ROOT = Path(__file__).resolve().parents[4]
+OUT = Path(sys.argv[1]).resolve()
+OUT.mkdir(parents=True, exist_ok=True)
+WRITER = "packages/business/src/organization.mjs"
+BROKER = "packages/bus/src/broker.mjs"
+CLIENT = "packages/bus/src/client.mjs"
+ATOMIC = "if (check) this.#event(s, 'action.allowed', { action: 'message.checked', message: mid, check }, mid, checkEventId(mid));"
+REENTER = "return this.#reenter(cap, s, { verb: 'message.send', args }, check);"
+SPLIT = """const result = this.#reenter(cap, s, { verb: 'message.send', args }, check);
+    if (check) this.#store.transaction(() => this.#event(s, 'action.allowed', { action: 'message.checked', message: result.id, check }, result.id, checkEventId(result.id)));
+    return result;"""
+MUTANTS = [
+    ("M1-writer-fence", [(WRITER, "      replyLimitsFence(old, document, actor);", ""),
+                           (WRITER, "      replyLimitsFence(old, written, actor);", "")],
+     ["packages/business/tests/reply-limits.test.mjs"]),
+    ("M2-incoming-human", [(WRITER, "actor === old.human", "actor === document.human")],
+     ["packages/business/tests/reply-limits.test.mjs"]),
+    ("M3-split-check-transaction", [(BROKER, ATOMIC, ""), (BROKER, REENTER, SPLIT)],
+     ["packages/bus/tests/citation-guard.test.mjs"]),
+    ("M5-hide-library-unavailable", [("packages/library/src/guard.mjs",
+     "refuse('citation-unavailable', 'The library is busy or unavailable. Retry the answer when the library is available.');",
+     "served = null;")], ["packages/bus/tests/citation-availability.test.mjs"]),
+    ("M4-drop-client-reason", [(CLIENT, "new BusError(r.error, typeof r.reason === 'string' ? r.reason.slice(0, 300) : undefined)", "new BusError(r.error)")],
+     ["packages/bus/tests/citation-guard.test.mjs"]),
+]
+
+archive = subprocess.check_output(["git", "archive", "HEAD", "packages", "roles", "scripts", "tools", "docs", "package.json", "RELEASE"], cwd=ROOT)
+summary = []
+selected = set(sys.argv[2:])
+product_files = [line.split('  ', 1)[1] for line in (ROOT / 'agents/beakley/work/queue-217/manifest.r5.sha256').read_text().splitlines()]
+def hashes(base, files):
+    return {file: hashlib.sha256((base / file).read_bytes()).hexdigest() for file in files}
+original_products = hashes(ROOT, product_files)
+for name, changes, tests in MUTANTS:
+    if selected and name not in selected:
+        continue
+    with tempfile.TemporaryDirectory(prefix="row217-mutant-") as directory:
+        work = Path(directory)
+        with tarfile.open(fileobj=io.BytesIO(archive)) as source:
+            source.extractall(work, filter="data")
+        modules = ROOT / "node_modules"
+        if modules.is_symlink():
+            raise SystemExit('root node_modules must be a local install, never a canonical link')
+        if modules.exists():
+            os.symlink(modules.resolve(), work / "node_modules", target_is_directory=True)
+        cmd = ["timeout", "-k", "10", "120", "node", "--test", *tests]
+        with (OUT / f"{name}-control.log").open("w") as log:
+            control = subprocess.run(cmd, cwd=work, stdout=log, stderr=subprocess.STDOUT, timeout=120)
+        if control.returncode:
+            raise SystemExit(f"{name}: control RED, no mutant result claimed")
+        originals = {file: (work / file).read_bytes() for file, _, _ in changes}
+        try:
+            for file, before, after in changes:
+                path = work / file
+                text = path.read_text()
+                if text.count(before) != 1:
+                    raise SystemExit(f"{name}: expected exactly one mutation anchor in {file}")
+                path.write_text(text.replace(before, after))
+            with (OUT / f"{name}.log").open("w") as log:
+                mutant = subprocess.run(cmd, cwd=work, stdout=log, stderr=subprocess.STDOUT, timeout=140)
+            if mutant.returncode != 1:
+                raise SystemExit(f"{name}: expected assertion failure exit 1, got {mutant.returncode}")
+        finally:
+            for file, content in originals.items():
+                (work / file).write_bytes(content)
+            assert all((work / file).read_bytes() == content for file, content in originals.items())
+            assert hashes(ROOT, product_files) == original_products, 'checkout product hashes changed'
+            (OUT / f"{name}-restored.sha256").write_text(''.join(f'{digest}  {file}\n' for file, digest in sorted(original_products.items())))
+        with (OUT / f"{name}-restored-green.log").open("w") as log:
+            restored = subprocess.run(cmd, cwd=work, stdout=log, stderr=subprocess.STDOUT, timeout=140)
+        if restored.returncode:
+            raise SystemExit(f"{name}: restored control RED")
+        summary.append(f"{name}: killed (control green, mutant exit {mutant.returncode}, hashes restored, restored green)")
+        (OUT / "summary.txt").write_text("\n".join(summary) + "\n")
+        print(summary[-1], flush=True)
@@ -0,0 +1,112 @@
+1:  e25ef0373 ! 1:  b9ef816ff launchpad: row 217 C2-06 work in progress, UNTESTED, handed to Beakley (mos-1500)
+    @@ packages/bus/src/broker.mjs: export class Broker {
+            if (CREDENTIAL_VERBS.includes(request.verb)) return this.#requestCredential(s, request.verb, structuredClone(args));
+            if (request.verb === 'instance.hire' || request.verb === 'instance.fire')
+              return this.#chiefLifecycle(s, request.verb, structuredClone(args));
+    +       if (request.verb === 'grants.scope' || request.verb === 'grants.scope.set')
+    +         return this.#grantScopeVerb(s, request.verb, structuredClone(args));
+     -      if (["limits", "limits.set", "organization.set", "organization.revision", "plugins", "plugins.set", "instances", "instances.set", "routes", "routes.set", "veto.set"].includes(request.verb)) {
+     +      if (["limits", "limits.set", "organization.set", "organization.revision", "plugins", "plugins.set", "instances", "instances.set", "routes", "routes.set", "veto.set", "library.limits.set"].includes(request.verb)) {
+              // Row 123 (#1617, REQ-COS-1, REQ-LIMIT-1): organization.set is limits.set for a role whose
+    @@ packages/bus/src/runtime.mjs: export async function startBroker({
+            project: {
+              readSpec: context => projectModule.readSpec({ ...context, dataRoot }),
+     @@ packages/bus/src/runtime.mjs: export async function startBroker({
+    -         else if(verb==='plugins.set')result=plugins.set(id,args,actor);
+    -         // Row 194 (#1692, V6): the human's keep and noHire lists, through the instance writer.
+              else if(verb==='veto.set')result=instances.veto(id,args,actor);
+    +         // Row 298: the human's grant scope, through the instance writer.
+    +         else if(verb==='grants.scope.set')result=instances.grantScope(id,args,actor);
+     +        // C2-06 M11: the human's replyLimits, through the organization writer's fence.
+     +        else if(verb==='library.limits.set')result=setReplyLimits(organizationWriter({dir:organization.dir,rolesDir:organization.rolesDir}),id,args,actor);
+              // Row 194 (D2.1, D2.2): the chief's hire and fire, with the reason in the change context.
+    @@ packages/business/src/organization.mjs: export function organizationWriter({ dir
+          const parent = join(dir, "businesses");
+          directory(evidence);
+     @@ packages/business/src/organization.mjs: export function organizationWriter({ dir, rolesDir, barrier = () => {} }) {
+    -       // mapping, including library playgrounds and hybrid universes.
+    -       if (canonicalJson(document?.projects) !== canonicalJson(old.projects))
+    -         fail('organization-projects-protected');
+    -+      replyLimitsFence(old, document, actor);
+    -       validateBusinessDocument(document, file, { rolesDir });
+    -       const bytes = JSON.stringify(document, null, 2) + "\n";
+    -       // Check and log exactly what lands on disk, for every setter: a value JSON
+    +         // mapping, including library playgrounds and hybrid universes.
+    +         if (canonicalJson(document?.projects) !== canonicalJson(old.projects))
+    +           fail('organization-projects-protected');
+    ++        replyLimitsFence(old, document, actor);
+    +         validateBusinessDocument(document, file, { rolesDir });
+    +         const bytes = JSON.stringify(document, null, 2) + "\n";
+    +         // Check and log exactly what lands on disk, for every setter: a value JSON
+     @@ packages/business/src/organization.mjs: export function organizationWriter({ dir, rolesDir, barrier = () => {} }) {
+    -       const written = JSON.parse(bytes);
+    -       if (canonicalJson(written.projects) !== canonicalJson(old.projects))
+    -         fail('organization-projects-protected');
+    -+      replyLimitsFence(old, written, actor);
+    -       validateBusinessDocument(written, file, { rolesDir });
+    -       const after = sha256(bytes);
+    -       const transaction = randomUUID();
+    +         const written = JSON.parse(bytes);
+    +         if (canonicalJson(written.projects) !== canonicalJson(old.projects))
+    +           fail('organization-projects-protected');
+    ++        replyLimitsFence(old, written, actor);
+    +         validateBusinessDocument(written, file, { rolesDir });
+    +         if (beforeWrite) {
+    +           beforeWrite();
+     @@ packages/business/src/organization.mjs: export function organizationWriter({ dir, rolesDir, barrier = () => {} }) {
+          });
+        }
+    @@ packages/library/src/guard.mjs (new)
+     +}
+
+      ## packages/library/src/index.mjs ##
+    -@@ packages/library/src/index.mjs: export { renderItems, KINDS, NOTICES, UNREADABLE } from './render.mjs';
+    - export { survey, formatSurvey, surveyMain } from './survey.mjs';
+    - export { SYNC_STATE_FILE, mirrorPath, ensureMirror, withLibraryLock, servedCommit, readSyncState, libraryStatus, readLibraryFile } from './mirror.mjs';
+    +@@ packages/library/src/index.mjs: export { SYNC_STATE_FILE, mirrorPath, ensureMirror, withLibraryLock, servedCommi
+      export { syncCommand, sync, ASKPASS, SLOT, SYNC_INTERVAL_MS } from './sync.mjs';
+    + export { buildIndex, indexFor, clearIndexCache, indexCacheSize } from './index-build.mjs';
+    + export { sees, find, get, search, manuscript, universeInfo, QUERY_REPLY_CAP, LOOKUP_LIMIT, MANUSCRIPT_LINES } from './query.mjs';
+     +export { REPLY_LIMITS, resolveReplyLimits, checkReplyLimits } from './limits.mjs';
+     +export { GUARD_CODES, FIXED_TEXTS, WEB_CITE_DEFINITIONS, REASON_MAX, GuardError, parseReply, checkReply, libraryReader, guardReply, lastCommits } from './guard.mjs';
+
+2:  c25f5b8da ! 2:  7400509ba row 217: citation runner retry and acceptance draft (Untested)
+    @@ Commit message
+         row 217: citation runner retry and acceptance draft (Untested)
+
+      ## BUILD-LOG.md ##
+    -@@ BUILD-LOG.md: Row 299 (573, #1806, Gander, Filbert): before, the P10 band test timed a fault r
+    - 2026-10-23T17:29:46Z | Gyro Vikunja571 sage-3542 Connections amendment | Branch gyro/editor-connections-design cut exactly from landed PRD1.17 30e6bb680; read REQ-LIB-5 in that PRD. Replaced stale J-b waits in parent and W4. Proposed W8 owns current authorized Markdown/DOCX links/backlinks list, labels, versioned refresh, leakage refusals and fixture tests. Build order under mos-1470/comment961 is W7 closed routing candidate, W8 landing, then W7 human first-real-import opening. No REQ-LIB-8 condition or acceptance change. Q234/mos-1363/S0 M1-M14 and post-10-27/MVP priority fixed. Static diff, twelve brief sections and append-only checks pass. No repo Node, tests, build, browser, queue mutation or live action. Fenton reviews after authorized docs branch push; Sage lands on approval.
+    +@@ BUILD-LOG.md: remain; no live state, schema or bus policy change.
+
+    - 2026-10-23T17:32:37Z | Gyro sage-3544 fenton-0016 N1/N2 delta | Before: W7 Gate/final real-conversion list omit the W8 build-order cross-reference and W8 human-view filtering cites agent settings. After: both locations explicitly put W8 landing before human opening as mos-1470 build order, not acceptance; comment/tracked-deletion links are not current story links and never appear in the human Connections view regardless of agent settings. New commit atop approved 5af060fb5, no amend. Static diff and append-only checks pass. Docs only, no repo Node/tests/live action. Fenton checks only this delta.
+    -+
+    + 2026-10-24 | Goldie | Row265 / #1770 verified (mos-1567, sage-3942) | Approved correction adds solely address import pin + Row265 comment to project-runtime.test and one pure-source RUNNER_FILES mount; new block checks parser has no imports. Serialized fresh-short-TMP timeout-k10: unchanged sandbox10/10, parser15/15, rooms18/18, full bus957/957, twelve named refusal mutants killed (each Node1, driver0), restored parser15/15 + rooms18/18. All positives zero fail/skip/cancel; every mutation restored full broker SHA71b32ee4. Old first-red evidence retained, no other old-test change. Slot returned goldie-0034; Boyd packet explicitly includes mount-list review, candidate push next.
+    + 2026-10-24T07:18:53Z | Sage | Row 327 (#1825, Bradford, Poe and Dewey) LANDED 68c08b4e7. Before: refactor at 94d9e90a6; the push guard was a scratch script with no reviewed-binary check. After: scripts/push-check.sh and scripts/test-push-check.sh on refactor, 3 commits cherry-picked onto 6a5e12511 with blobs equal to the round 3 tip d858c9f8b, plus doc commits 76f84465f and 68c08b4e7. Binaries are found by numstat or a NUL in the first 8000 committed bytes, regardless of attributes; each needs its sha256 and path in an approved latest-round candidate; an unconfirmed queue tail exits 2. Reviews: Poe c31525 rev 3882, Dewey c31526 rev 3883. Gate: 1st run 06:57Z RED, not the candidate: canonical node_modules was empty from 05:45:15Z (sage-4023). Rerun with its own root npm ci GREEN 07:15:49Z: 17 package suites 0 failures (cli 986, plugins 119, webui 418), 11 scripts exit 0, push-check 6 mutants KILLED; skips are the queue canonical-root check and the row 244 live provider cases. The landed push-check.sh passed its own push (NO_BINARY, NO_ATTRIBUTION, PUSH_READY). mos-1575: gates install their own node_modules; canonical restored with npm ci (128 packages).
+     +2026-10-23 | Beakley (88b97f65) | Row 217 #1718 takeover, before implementation | Clean base 45dca69f6 on beakley/row217. Recovering Launchpad handoff for citation guard, live settings, page store and runner retry. Acceptance is C2-06/design 5.2 plus sage-3595/3599/3602. Tracking agents/beakley/work/queue-217/BUILD.md; no product changes or Node/tests; Sage CLEAR required.
+     +
+     +2026-10-23 | Beakley (88b97f65) | Row 217 #1718 untested draft checkpoint | Continued Launchpad e25ef0373; added runner retry/text/note implementation, pure protocol constants and sage-3640 approved single read-only mount, CLI documentation and new acceptance test files. Static checks caught missing projects compatibility, async request mutation and Git pathspec matching; bounded fixes and regression tests authored. git diff --check clean. No Node/test/mutant executed; Sage holds CLEAR. 283/216/285 dependency checks and all acceptance execution remain open. Packet agents/beakley/work/queue-217/MANIFEST.md.
+    @@ agents/beakley/work/queue-217/mutants.py (new)
+
+      ## docs/SESSIONS.md ##
+     @@ docs/SESSIONS.md: are never rewritten or removed; corrections are new entries.
+    - 2026-10-23T17:48:43Z | Scrooge (629b6cd3) | Row 252 Console inbox Approve and Deny (#1753) | Rebased onto 306 landing as 580037105 (range-diff all =), slot run bus 907/0 webui 410/0 cli 943/0, in-review revs 3608/3609, Webby r1 APPROVE, J1-J19 specs to Sage; Sage landed 45ea3fa0d (done rev 3616). Part 1 mutant results were never in BUILD.md; they went to Sage by T3 (scrooge-0252-mutant-specs).
+    - 2026-10-23 | Sage (1ef1e4f8) | Rows 308 and 252 landings, 571 Connections design amendment, Vikunja 597 | 308 (PRD 1.17, #1815) landed 30e6bb680 and 252 (#1753) landed 45ea3fa0d (replay of 580037105 onto 30e6bb680, range-diff all =), each after a full gate on the landed tree (252 also J1-J19, J11c and J18 equivalent); Gyro's 571 amendment (Fenton APPROVE) landed e8bb13df8; Vikunja 570, 435 and 597 done, canonical webui esbuild 0.28.2; queue revs 3589-3616 committed 59f013247
+    - 2026-10-23 | Sage (1ef1e4f8) | Vikunja 571 W build rows; rows 13, 42, 257 and 289 check | Filed the design's ten W rows as queue rows 309-318 (revs 3617-3626, owners set to unassigned 3627-3636, queue commit 293b42fee pushed); Vikunja 571 done (comment 994). Row 13's candidate fd72d2689 is on refactor, gate is Monday's row 7 ledger run; 42 paused under mos-1184; 257 post-v1; 289 waits on 214 and 288. Slot released 17:56Z.
+    + 2026-10-24T04:27Z | Goldie (a13dd6d5-5e73-4b7d-8318-02abeff24940) | Row265 / #1770 C2-09b rooms | Goldie owns build, Boyd reviews under sage-3915. New goldie/row265 worktree at ec86f2c84, claim rev3814; room verbs/parser/new tests prepared, no old tests changed. Sage-3932 slot: new parser14/14 and rooms18/18 passed; whole bus in progress before refusal mutants, stop rule active.
+    + 2026-10-24T04:35Z | Goldie (a13dd6d5-5e73-4b7d-8318-02abeff24940) | Row265 / #1770 verified | First slot stopped at project-runtime import pin. mos-1567 narrowly authorizes pin and pure-source mount correction. sage-3942 rerun: sandbox10/10, parser15/15, rooms18/18, bus957/957, twelve refusal mutants killed/restored SHA71b32ee4, parser15/15 + rooms18/18 again. Slot returned goldie-0034; no further test runs. Boyd reviews RUNNER_FILES alongside rooms; own-branch push/claimant in-review next.
+    + 2026-10-24T07:18:53Z | Sage (1ef1e4f8) | Row 327 / #1825 push guard landed (mos-1572 option A, mos-1575) | Gate went red 06:57Z on an empty canonical node_modules (Glomgold's webui npm ci through a link to canonical, glomgold-0011); rerun with its own npm ci GREEN 07:15:49Z on 1bd214e38; pushed 68c08b4e7 07:18:03Z; #1825 closed c31530; canonical restored (128 packages); brief template rule 4db23a51f | landed
+     +
+     +2026-10-23 | Beakley (88b97f65, Codex gpt-6.1-sol) | Row 217 #1718 takeover under Q245 | Registered beakley/row217; read brief/design and standing Sage rulings; awaiting Launchpad ref before implementation. Queue next refused linked worktree; reported to Sage. Untested, no Node/test run pending CLEAR.
+
+3:  b6c3129d2 ! 3:  a447880cb row 217: early-review coverage and availability RED cases (Untested)
+    @@ Commit message
+         row 217: early-review coverage and availability RED cases (Untested)
+
+      ## BUILD-LOG.md ##
+    -@@ BUILD-LOG.md: Row 299 (573, #1806, Gander, Filbert): before, the P10 band test timed a fault r
+    +@@ BUILD-LOG.md: remain; no live state, schema or bus policy change.
+      2026-10-23 | Beakley (88b97f65) | Row 217 #1718 takeover, before implementation | Clean base 45dca69f6 on beakley/row217. Recovering Launchpad handoff for citation guard, live settings, page store and runner retry. Acceptance is C2-06/design 5.2 plus sage-3595/3599/3602. Tracking agents/beakley/work/queue-217/BUILD.md; no product changes or Node/tests; Sage CLEAR required.
+
+      2026-10-23 | Beakley (88b97f65) | Row 217 #1718 untested draft checkpoint | Continued Launchpad e25ef0373; added runner retry/text/note implementation, pure protocol constants and sage-3640 approved single read-only mount, CLI documentation and new acceptance test files. Static checks caught missing projects compatibility, async request mutation and Git pathspec matching; bounded fixes and regression tests authored. git diff --check clean. No Node/test/mutant executed; Sage holds CLEAR. 283/216/285 dependency checks and all acceptance execution remain open. Packet agents/beakley/work/queue-217/MANIFEST.md.
+4:  dde5b8496 = 4:  2655ec010 row 217: keep fixture status on its current served tip (Untested)
@@ -0,0 +1,30 @@
+# Row217 round2 test receipts
+
+Sage CLEAR sage-4042/4043, 2026-10-24. Source revision 2d274a5b6. All runs
+serialized; source files stayed unchanged through the whole-suite and mutant pass.
+Commands used TMPDIR=/mnt/storage/scratch/tmp/tNoueZ and timeout -k 10.
+
+- npm ci --ignore-scripts --no-audit --no-fund at the worktree root (300s bound),
+  then packages/webui (300s). Actual directories, no canonical links.
+- node --test packages/bus/tests/citation-availability.test.mjs (180s).
+- python3 agents/beakley/work/queue-217/mutants.py <m5-red> M5-hide-library-unavailable
+  (420s). Green control, the authorized pre-fix RED stand-in, restore+green.
+- node --test --test-concurrency=1 with the seven new test files (900s):
+  library/guard, business/reply-limits, cli/reply-limits, bus/citation-availability,
+  bus/citation-guard, bus/citation-runtime and harness/citation-runner. Whole files.
+- First attempt 56/57: new runtime fixture invalid-authority. Only that fixture
+  was corrected to the established broker projection. runtime-fixture-retry.log
+  is its 1/1 rerun (180s); touched-rerun.log is the whole-file 57/57 rerun.
+- npm test in packages/library, then business (900s each), bus and cli (1200s
+  each), harness and seat (900s each). Never overlapped package runs.
+- python3 agents/beakley/work/queue-217/mutants.py <mutants> (900s).
+  The driver wraps each Node run in timeout -k 10 120. Each negative exits1,
+  is preceded by a green control, restores its product bytes/hashes and then
+  reruns the restored control green. No checkout product file is mutated.
+
+summary.json holds complete counts; summary.txt is the short version. M1 anchors
+are recorded in m1-anchors.txt. The five *-restored.sha256 files match current
+product files. Full outputs are retained, including the first new-test failure.
+Negative logs intentionally keep Node's whitespace-only diagnostic padding;
+standard git diff --check flags that padding, not source code. No binary logs.
+No old test failed or was edited. Sage runs scripts/test-*.sh at landing.
@@ -0,0 +1,11 @@
+✔ C2-06 held library lock gives the agent citation-unavailable and its retry reason (5142.976705ms)
+✔ C2-06 malformed sync state is availability failure, never a fabricated invalid cite (33.874404ms)
+✔ C2-06 no mirror or freshly initialized empty mirror still means no served citation (33.746516ms)
+ℹ tests 3
+ℹ suites 0
+ℹ pass 3
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 5307.376982
@@ -0,0 +1,280 @@
+npm notice run @mosaic/[email protected] test
+npm notice run node --test tests/
+✔ a grant's level is collaborator or viewer (2.351697ms)
+✔ any other level refuses with the key path named (1.505284ms)
+✔ covers tells a viewer grant from a collaborator grant (0.605812ms)
+✔ covers refuses a call with no level, so a viewer grant can't slip past a collaborator check (0.247487ms)
+✔ a viewer grant still needs its business, project, instance and expiry to cover (0.247397ms)
+✔ a valid document passes and comes back frozen (4.146183ms)
+✔ checkAccess does not freeze or alias the caller's document (0.552481ms)
+✔ LEVELS is the single allowed level set, collaborator and viewer (row 193a) (0.259109ms)
+✔ accessFilePath is access.json in the config directory (0.495701ms)
+✔ top level: object, unknown keys, accessVersion, revision, arrays (2.131141ms)
+✔ users: unknown keys and the id rule (0.609866ms)
+✔ users: human, tester and any business's human are refused (0.455944ms)
+✔ users: home is a given peer or local (0.372673ms)
+✔ users: subjects, provider, sub, uniqueness and owner subjects (2.126611ms)
+✔ grants: unknown keys, id, user and business (0.897075ms)
+✔ grants: projects is ["*"] or distinct lowercase UUIDs (1.199677ms)
+✔ grants: instances is ["*"] or distinct declared instances of that business (0.889396ms)
+✔ grants: any level other than collaborator or viewer refuses, naming grants[i].level (1.13158ms)
+✔ grants: expires is optional ISO time, and a past expiry is not refused (0.979808ms)
+✔ the context is required and checked (1.713394ms)
+✔ loadAccess reads a valid file and checks it (0.755936ms)
+✔ loadAccess refuses a missing file, a symlink and a directory with exit 4 (0.519376ms)
+✔ loadAccess refuses another owner and group or other write (0.581157ms)
+✔ loadAccess refuses bad JSON and a bad document with exit 2 (1.841309ms)
+✔ covers: * and listed ids match (0.340508ms)
+✔ covers: an unlisted project, instance or business doesn't match (0.20254ms)
+✔ covers: an expired grant doesn't match, at and after the instant (0.698261ms)
+✔ covers: level is the least level asked for (row 193a) (0.213107ms)
+✔ covers: a missing or unknown level throws (row 193a, N1) (0.385188ms)
+✔ covers: a grant with an unknown level covers nothing (row 193a) (0.191435ms)
+✔ covers: now must be a valid Date (0.21008ms)
+✔ today's files load unchanged: identity, publish and remote are optional (11.61814ms)
+✔ a granted agent loads with its identity, grant and the project's upstream (4.906248ms)
+✔ N10: publish needs identity and a gitea definition, and the error names the grant (9.522958ms)
+✔ publish names declared projects that have a remote, each once (7.911234ms)
+✔ identity fields are checked (14.073433ms)
+✔ D9c: the upstream must be its own normalized form, exactly /OWNER/REPO (29.451403ms)
+✔ D9c: one .git is stripped, and the fork is built from the stripped name (1.733511ms)
+✔ D9c: gitea.url names the instance only (10.698646ms)
+✔ the upstream's host and port must be the agent's Gitea's (4.064711ms)
+✔ remote-not-fork: an upstream the agent's own user owns, compared without case (10.115713ms)
+✔ store references: own path only (design D1, D3a) (0.50611ms)
+✔ the role file loads and resolves through loadBusiness (18.165733ms)
+✔ the shipped file is exactly the approved list (1.392044ms)
+✔ the assistant's authority is message.send and record.write within role (4.312182ms)
+✔ the assistant talks to the user and the chief of staff only, and no other shipped role is limited (0.978023ms)
+✔ a business grant through limits does not widen the role (6.715605ms)
+✔ a launch block whose by is the assistant is refused (3.553443ms)
+✔ the instance takes no credential references and no tracker (9.975785ms)
+✔ an arbiter whose role definition declares messaging lists is refused, for each kind (8.992963ms)
+✔ an arbiter without messaging lists is accepted beside the limited assistant (3.104416ms)
+✔ the contract passes work to the chief of staff and directs no one (0.788753ms)
+✔ REQ-HARN-2: the assistant, companion and research hold the web grant, and no other role file does (1.683056ms)
+✔ C2-04: library mappings load without roots, remain frozen, and retain mapping refusals (31.538067ms)
+✔ C2-04: an otherwise valid publish grant cannot name a library repo (4.356759ms)
+✔ config directory and file path follow MOSAIC_CONFIG (0.467526ms)
+✔ the fixture business validates and comes back frozen (4.106001ms)
+✔ two instances may share a definition (2.097865ms)
+✔ top-level refusals (6.537312ms)
+✔ arbiters and projects (24.968268ms)
+✔ role instances (9.057417ms)
+✔ Vikunja bots (29.820456ms)
+✔ a role without Vikunja takes no tracker block (9.629575ms)
+✔ credential references match the definition's services (11.680645ms)
+✔ launch (31.945766ms)
+✔ REQ-THREAD-2 REQ-LAUNCH-1 launch.threadIdleSeconds: absent is the default, a positive integer is used, anything else refuses (34.141496ms)
+✔ loadBusiness: file checks (12.995702ms)
+✔ loadBusiness: not a regular file (111.510997ms)
+✔ loading writes nothing (1.787307ms)
+✔ names that are Object.prototype properties don't count as declared (5.786433ms)
+✔ the shipped example refuses as written and validates once filled in (2.551686ms)
+✔ persona vars: agent layer, creative definition only, both or neither (26.121282ms)
+✔ row 194 keep, noHire and retired validate, and a file without them loads as before (4.607715ms)
+✔ row 194 each bad keep, noHire or retired entry refuses (19.966409ms)
+✔ row 323: committed Case 1 document loads unchanged through the business loader (10.685638ms)
+✔ row 323: real business validate accepts the Case 1 fixture without tracker credentials (226.106251ms)
+✔ row 323: real factory install accepts the document's scratch input and writes it unchanged (294.937207ms)
+✔ row 323: the Case 1 business boots without a tracker or @sync credential (60.850375ms)
+✔ row 323: factory install refuses bus.tester false before writing (39.485453ms)
+✔ row 323: literal library key refuses through final business validation (176.986326ms)
+✔ row 323: a library project refuses through the factory profile plan (36.685902ms)
+✔ row 325: the Case 1 project's sole key matches the repository project id (7.063988ms)
+✔ row 325: real business validate reports the copied repository project valid (203.591785ms)
+✔ row 325: the old mosaic-stack project key refuses against those same project bytes (227.47487ms)
+✔ the role file loads and resolves through loadBusiness (22.21166ms)
+✔ the shipped file is exactly the approved list (0.355811ms)
+✔ the resolved record matches the approved list, so a widened file fails (4.433743ms)
+✔ the chief of staff holds role.launch, message.send, role.end, organization.change, record.write, instance.name, role.hire and role.fire; every other action is gated (6.025087ms)
+✔ the pm does not hold role.launch (7.814194ms)
+✔ a business grant of a gated action through limits does not widen the role (5.309288ms)
+✔ a limit that drops role.launch leaves the chief of staff with no launch block (5.488981ms)
+✔ a launch block whose by is the pm instance is refused (4.031539ms)
+✔ the contract names no duty to talk to the human and the pm contract no launch (1.077581ms)
+✔ the instance takes no credential references and no tracker (7.111256ms)
+✔ C2-04: business validate and resolve skip a library before code projects and credential checks (581.819531ms)
+✔ usage errors exit 4 (330.347677ms)
+✔ validate: a good business exits 0 and prints instance digests (80.712835ms)
+✔ validate: project files (358.68705ms)
+✔ validate: missing files and a broken system config (272.747082ms)
+✔ validate: credential reference problems exit 2 and name each one (75.47514ms)
+✔ validate: a not-issued store agent dated today passes, and an issued one with a past expiry fails (152.378642ms)
+✔ validate: a token file inside the repository is refused (76.459487ms)
+✔ validate: role definitions come from MOSAIC_ROLES_DIR (210.323656ms)
+✔ resolve: prints one instance's record (260.543734ms)
+✔ resolve: refusals (375.881441ms)
+✔ parse: exactly one of file or env, plus the service's date (3.551882ms)
+✔ check: a good file has no problems (1.2198ms)
+✔ check never opens the file: a write-only token passes (0.477268ms)
+✔ check: file problems (1.60977ms)
+✔ check: token files can't live in the repository or dataRoot, even through a linked directory (1.508979ms)
+✔ check: dates and environment references (0.686041ms)
+✔ each definition loads, with a contract file, and is exactly the approved list (4.83466ms)
+✔ an organization file that declares them passes, and each resolves to least privilege (10.307081ms)
+✔ the chief of staff launches each one; no other role does (11.082937ms)
+✔ a C-suite role can't be made the launcher: launch.by must hold role.launch (5.052598ms)
+✔ limits can narrow a C-suite role but never widen it (4.524289ms)
+✔ any unknown key, tool, action or version in a role file is refused (4.904699ms)
+✔ row 298: checkGrantScope takes the D2 shape and refuses anything else (2.752624ms)
+✔ row 298: a missing scope is empty and a bad one falls back to empty, which covers nothing (0.482721ms)
+✔ row 298: a Gitea grant is in scope only when its agent and every project are listed (0.341447ms)
+✔ row 298 (sage-3594 Q2): host commands match whole argv tokens, and enrollment is never in scope (0.467524ms)
+✔ row 298: a bad grantScope in the file still loads, and the read shows the fallback (18.355754ms)
+✔ row 298: the writer checks the scope, logs the change and removes the key for {} (142.313501ms)
+✔ row 298 (sage-3594 Q1): the general writers can't write grantScope (25.353249ms)
+✔ REQ-WAIT-1: GATED_ONLY is exactly the hard waits; the new actions are in the vocabulary (1.86466ms)
+✔ REQ-ROLE-2: END_PROTECTED includes the assistant's thread definition (0.234237ms)
+✔ REQ-COS-3: role.hire and role.fire are routed, not hard waits (0.300439ms)
+✔ REQ-WAIT-3: every action is routed or a hard wait, never both, and the routed list names only actions (0.967731ms)
+✔ REQ-WAIT-3: instance.name is routed under REQ-MSG-2 (1.5), not a hard wait (row 141, sage-0589) (1.313696ms)
+✔ REQ-WAIT-2: a role listing a hard wait at either class is refused; the actions that left can be granted (5.343386ms)
+✔ S1: the business file refuses hosts at the top level and in a role, and host.<id> references (56.500208ms)
+✔ T1: address, user and host key checks, which the enrollment raise uses (11.374442ms)
+✔ T26: no wildcard and no shell, runner or interpreter as a prefix (2.722004ms)
+✔ D6: argv shape and the literal prefix match (0.922698ms)
+✔ C2-04: instance settings skip a library while checking a later code project (98.596648ms)
+✔ row 165 read lists each instance and the definitions add accepts (16.615936ms)
+✔ row 165 add: two instances join, validate exits 0, the log names the human, and the writer asks for no restart (row 194, D3) (308.207149ms)
+✔ row 165 change: definition, vars and launch membership log before and after; none asks for a restart, the bus reloads (row 194, D3) (180.35178ms)
+✔ row 165 refuses each validation failure and leaves the file's bytes alone (44.040709ms)
+✔ T19 add of a credentialed definition writes store references dated today, names its bot, and validate exits 0 (101.60641ms)
+✔ T19 add of a definition that declares host writes references for its token services only (12.273146ms)
+✔ row 165 refuses a definition change to or from one that declares credentials (6.011439ms)
+✔ row 165 a vars or launch change on an instance with its binding succeeds and keeps the binding (87.081633ms)
+✔ row 165 refuses an END_PROTECTED definition and every change to a protected instance (9.425714ms)
+✔ row 165 refuses while a project file doesn't resolve, as validate would (21.508015ms)
+✔ row 165 refuses a stale revision and leaves the file's bytes alone (13.794117ms)
+✔ row 65 an instance write refuses harness-off, thinking-unsupported, an unknown model and a partial fallback (38.79158ms)
+✔ row 213 a creative instance is the human's: add, vars and definition changes, persona digest only (105.47603ms)
+✔ row 256 T1-T3, T5 the human deletes a creative instance, no other actor does, and the assistant stays (106.119319ms)
+✔ row 256 T4 the human's delete of the only listed instance, a creative one, is the last-listed refusal (3.635722ms)
+✔ REQ-LIMIT-1 schema: every scope unset or zero, adjustable above four, bad values and unknown models refuse (27.767213ms)
+✔ REQ-LIMIT-1 counts each exact scope at/over limit, unlimited and old tuple after model reassignment (1.218782ms)
+✔ REQ-ROLE-3 writer: atomic validated revision, immutable previous bytes and authenticated actor/old/new receipt (65.935591ms)
+✔ REQ-ROLE-3 writer: pre-rename fault leaves old file, post-rename recovery records commit, conflicting recovery refuses (42.79247ms)
+✔ REQ-LIMIT-1 / decision145 migration prints only, preserves values, rejects ambiguity, and is idempotent (20.740471ms)
+✔ REQ-LIMIT-1 shared settings validates the complete proposed selection and logs exact actor (73.013224ms)
+✔ REQ-LIMIT-1 provider is table data: another provider routes separately and aliases share exact counts (5.530215ms)
+✔ REQ-ROLE-3 refuses live writer locks, symlink targets and uncertain recovery without changing bytes (31.489428ms)
+✔ Q169 assistants: vars and definition change and log the actor; tracker null leaves no tracker (74.510885ms)
+✔ Q169 assistants: refuses other instances, other definitions, holder and credentials, empty entries, a tracker the definition has no credential for and a stale revision (46.648048ms)
+✔ Q169 assistants: a definition with a vikunja credential takes a tracker change and refuses its removal or a used bot (28.59175ms)
+✔ row 65 routes lists every instance with harness, model, thinking and fallback, the switched-on harnesses, the model keys and each harness's levels (4.496203ms)
+✔ row 65 setRoutes saves a harness, model, thinking and whole fallback, reads each back from the file, logs the actor, and a null fallback clears all three (28.880486ms)
+✔ row 65 setRoutes refuses a partial fallback, a switched-off harness, a level the harness doesn't apply, an unloaded module, an unknown model or instance, a malformed route, no change and a stale revision, with the file unchanged (33.617502ms)
+✔ row 65 a file with harness vars and no plugins.harness loads and its views read; a model change still saves, and a route change refuses harness-off (15.471063ms)
+✔ B7 kept instance: the models keys it names and the instances key are the human's (32.512862ms)
+✔ B7 kept instance: its route is the human's (13.733689ms)
+✔ M10 creative instance: models keys it names, the instances key and its route are the human's (41.972839ms)
+✔ C2-04 M9: changed playground and hybrid entries leave business and changes.jsonl byte-identical (75.744651ms)
+✔ C2-04 M9: code projects, additions, deletions and array changes are protected too (73.935851ms)
+✔ C2-04 M9: canonical key order is allowed and a non-project setter still records its change (53.997154ms)
+✔ C2-04 M9: a serialization hook cannot change projects after the canonical comparison (29.857522ms)
+✔ M7/M8: library seats come from library businesses, creative seats from their creative definitions (20.881147ms)
+✔ M8: a business with no library project puts no seat in either set (19.190367ms)
+✔ M7/M8: a business file that is not valid JSON throws; no empty set (7.135915ms)
+✔ M7/M8: an absent businesses directory gives empty sets (1.688414ms)
+✔ M7/M8: a businesses path that is not a directory throws; no empty set (4.583153ms)
+✔ M7/M8: a businesses symlink to a missing target throws; no empty set (2.208552ms)
+✔ M7/M8: a config directory under a regular file throws (lstat fails with ENOTDIR); no empty set (0.601986ms)
+✔ M7/M8: a business file that can't be read throws; no empty set (12.318486ms)
+✔ T6 delete refuses in the design's order and leaves the file's bytes alone (104.896221ms)
+✔ T6 delete refuses the last listed instance (7.490182ms)
+✔ T6 a clean delete removes the entry and its own references, adds retired, and the name can't come back (213.690055ms)
+✔ T7 veto: keep, unkeep, nohire and hire each write once, a repeat is no change, and the log names the human (171.894178ms)
+✔ T7 veto refuses an unknown or END_PROTECTED keep, a bad request, a stale revision and a business without launch (26.238526ms)
+✔ D2.2 hire adds and lists a new instance, logs the chief's context, and sets only model and limits (92.062371ms)
+✔ D2.2 hire refuses noHire, a kept name and a listed name, and re-lists a fired one only as it was (29.586421ms)
+✔ D2.2 fire delists and keeps the entry, a repeat is done with no write, and each refusal holds (88.451593ms)
+✔ row 256 checkDelete passes the human's creative delete and refuses another actor's; fire still refuses (5.294872ms)
+✔ row 239 T1 a fire on a revision that goes stale before the writer's lock refuses there and revokes nothing (5.756058ms)
+✔ row 239 T2 a write after the revoke refused before publication carries revoked, and the file keeps the edit (7.753057ms)
+✔ row 239 T3 any error after the revoke carries revoked, for a fire and a delete; a revoke that throws carries nothing (32.403692ms)
+✔ Q247: omitting tracker loads as null and preserves independent role bots (10.793015ms)
+✔ Q247: real business validate passes without a sync credential reference or file (168.186763ms)
+✔ Q247: present tracker retains its values and validation without mutating the input (9.372029ms)
+✔ Q247: present null, undefined and malformed trackers still refuse (18.314895ms)
+✔ Q247: absent business tracker does not waive a role's Vikunja bot requirement (2.859494ms)
+✔ REQ-PLUG-1 schema: plugins is optional, names known kinds and checked module names (40.546579ms)
+✔ REQ-PLUG-1 REQ-ROLE-3 the setter writes plugins through the organization writer and logs old and new names (92.751615ms)
+✔ vikunja:19/309 a patch changes only the kinds it names; null removes one kind, explicitly and in the trail (100.494327ms)
+✔ vikunja:19/309 an unknown kind (set or removed), a bad module, an empty patch and null on the wrong shape are refused, nothing written (9.927988ms)
+✔ REQ-PLUG-1 REQ-ROLE-3 the writer checks the bytes it writes: a Date in plugins is refused there too (19.985103ms)
+✔ REQ-PLUG-1 REQ-ROLE-3 a refused setter write throws a code, changes nothing and logs nothing (4.143331ms)
+✔ vikunja:19/305 with an exists check, the setter refuses a module no tree file answers to, before anything is written (18.273494ms)
+✔ optional project repo is preserved and must be a normalized absolute path (32.895793ms)
+✔ loaded business project repo cannot be nested in any declared code checkout (6.807091ms)
+✔ path and load (3.706713ms)
+✔ refusals (1.897981ms)
+✔ record.write is within-role for the eleven approved v2 agents, never gated-only (3.85853ms)
+✔ C2-06 M11 human replacement works; omitted settings return to defaults (98.331729ms)
+✔ C2-06 M11 agents and tester cannot change settings, including by changing human (55.766765ms)
+✔ C2-06 M11 serialization cannot replace settings after the first fence (17.47904ms)
+✔ C2-06 M11 an unrelated actor cannot appoint itself human and change reply limits (16.039248ms)
+✔ C2-06 invalid setter values preserve the business and changes.jsonl (17.259974ms)
+✔ C2-06 validator accepts hand-edited settings; raw reader fails closed on invalid files (19.048524ms)
+✔ C2-04: a library first in projects does not hide a later project layer (21.880181ms)
+✔ systemVars flattens the validated config (1.820728ms)
+✔ precedence: system, business, project, project role, agent (10.989776ms)
+✔ limits narrow the definition and never widen it (8.400306ms)
+✔ role.launch stays within-role only for the instance the launch block names (18.468852ms)
+✔ limits.authority without role.launch leaves the launcher with no launch block (13.185333ms)
+✔ limits.authority narrows cross-role actions too (2.699689ms)
+✔ classify (6.249491ms)
+✔ the record carries what the broker and launcher need (4.7922ms)
+✔ digest: key order doesn't matter, any value change does (12.395981ms)
+✔ refusals (3.790542ms)
+✔ the four shipped version 2 roles load (5.229965ms)
+✔ shipped role scopes match addendum B section 2 and the SR runbook (2.178782ms)
+✔ shipped authority follows the note's table (13.291498ms)
+✔ every role file in roles/ loads through the validator, and a v2 contract exists (2.100731ms)
+✔ version 1 files keep loading with no authority (1.521097ms)
+✔ the conductor policy isn't a role (0.302424ms)
+✔ a missing role file is exit 4, a symbolic link too (0.564721ms)
+✔ version 2 refusals (3.788273ms)
+✔ authority: closed vocabulary, no gated-only action, no overlap (3.881951ms)
+✔ messaging: optional, role definitions and human, never the tester (1.949889ms)
+✔ row 64 skills: optional, distinct skill directory names, none on version 1 (2.255987ms)
+✔ credentials: Gitea scopes (1.343013ms)
+✔ credentials: Vikunja scopes are a group-to-verbs map from the grantable list (1.709889ms)
+✔ credentials: services (0.759517ms)
+✔ contract: a non-empty regular Markdown file beside the role file (0.838905ms)
+✔ the six creative roles load: read tools, message.send only, messaging with the human only (0.693212ms)
+✔ M1: a creative role file wider than read and answer is refused (1.897832ms)
+✔ hireable: HIRE_ALLOWED is exactly the six plain work actions, and every one is routed (0.173708ms)
+✔ hireable: a list naming a definition that holds any refused action refuses at load, one case per action (18.133668ms)
+✔ hireable: a mixed definition refuses, a clean list loads, and the named file's own hireable isn't read (1.146869ms)
+✔ hireable: a missing, version 1, duplicate or badly named entry refuses, and the key is optional (3.734122ms)
+✔ the pm and the cto check a saved spec against settled decisions and work in flight, and answer with a BLOCK or an accept (11.616694ms)
+✔ the chief of staff relays a BLOCK or an accept to the assistant as a reply to the message that carried it (1.277302ms)
+✔ the assistant summarizes a spec review in its own words and doesn't repeat the chief of staff's text (0.70976ms)
+✔ REQ-LIMIT-3 schema: each subject kind, limit 0 and no ceiling are accepted; bad limits, times, keys and undeclared instances refuse (49.216064ms)
+✔ REQ-LIMIT-3 the writer stamps since: a new limit gets now, a changed one keeps its time, a different time is refused (85.0223ms)
+✔ REQ-LIMIT-3 only tokens.* at schema depth holds token limits: agent limits named `limit` save as sent, and a token limit named `limit` is stamped and reset (67.775561ms)
+✔ REQ-LIMIT-3 a reset moves since to now, is logged with its actor, and refuses a path that is not a limit (34.296428ms)
+✔ REQ-LIMIT-2 schema: launch.account names a credential set; a daily quota needs a reset and an IANA zone and names the account (33.871693ms)
+✔ REQ-LIMIT-2 the writer stamps a daily quota's since, keeps its reset and zone, and a reset moves since (33.845575ms)
+✔ every key names known layers and a merge rule (1.726458ms)
+✔ unknown keys and wrong layers refuse (1.084085ms)
+✔ types (3.275461ms)
+✔ merge: defaults, then the most specific layer wins (0.419589ms)
+✔ merge: limits only narrow, and provenance lists each source (0.757115ms)
+✔ merge doesn't change its inputs (0.206627ms)
+✔ web.searxng takes https anywhere and http on loopback, so Jason's 127.0.0.1:8888 passes (0.262745ms)
+✔ both definitions load, with a contract file, and are exactly the approved lists (5.013658ms)
+✔ security-reviewer has no write or shell tool and classifies only the verdict as its own (9.066819ms)
+✔ merge-gate's only grant is git.merge.protected cross-role, and it has no write tool (3.470869ms)
+✔ neither role can be an arbiter: its messaging lists refuse the business file (row 133) (8.498658ms)
+✔ every role contract carries the proactive line in its Authority section (1.099286ms)
+✔ pm and chief-of-staff say where a raise goes under REQ-DEC-2 (0.851681ms)
+✔ the merge landing takes two runs: merge-gate, cto and chief-of-staff each say their part (0.660442ms)
+ℹ tests 270
+ℹ suites 0
+ℹ pass 270
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 2873.146579
@@ -0,0 +1,182 @@
+npm notice run test
+npm notice run node --test tests/*.test.mjs
+✔ sessionModel: the route is the instance's own vars, and a missing one refuses no-route by name (37.340888ms)
+✔ a pi bundle: prompt, policy, tools and manifest, 0600 in a 0700 directory (10.573131ms)
+✔ a chief-of-staff bundle lists launch among the bus tools and the manifest's typed tools (4.412373ms)
+✔ a chief-of-staff bundle lists end_run, change_organization and set_name as typed and nothing untyped, for either harness (8.193363ms)
+✔ the stop line names end_run for a role.end holder, and every other role keeps today's text (13.648406ms)
+✔ a claude-code bundle adds the wrapped gate hook and the MCP config (7.875641ms)
+✔ the prompt's built-in tools line is the harness's own names, as the manifest lists them (22.548582ms)
+✔ the prompt names the project clones in the workspace, and none when there are none (13.290253ms)
+✔ the prompt explains the review loop to a role with push_working, and reviews to one with fetch_review (15.420914ms)
+✔ the prompt explains landing to a role with land_work, and to no other (9.918107ms)
+✔ the prompt tells the pm to ask the chief of staff for sessions, and no other role (18.356673ms)
+✔ a bundle is written once: an existing file refuses (3.135889ms)
+✔ a path with a single quote can't go into the hook command (3.86973ms)
+✔ web grant on pi: the bundle has web_search and web_fetch, and no built-in web tool (4.927453ms)
+✔ no web grant on pi: no web tool in the bundle, and the gate blocks a web call (4.535472ms)
+✔ web grant on claude-code: the bundle has web_search and web_fetch, and no built-in web tool (4.409455ms)
+✔ no web grant on claude-code: no web tool in the bundle, and the gate blocks a web call (7.034483ms)
+✔ a granted session's gate lets the typed web tools through and still blocks the built-ins (6.471178ms)
+✔ search-source searxng-url: a granted role gets the typed broker tools and no harness web tool; an ungranted role gets nothing (12.185523ms)
+✔ search-source searxng-bundled: a granted role gets the typed broker tools and no harness web tool; an ungranted role gets nothing (11.958441ms)
+✔ search-source harness-builtin: claude-code gets WebSearch and WebFetch and no typed web tool, only when granted (12.933659ms)
+✔ search-source harness-builtin is refused for a granted pi role, which has no built-in web tool (4.064682ms)
+✔ C2-06 RESULT reply-invalid retries once, delivers only the valid answer and names reason (351.396996ms)
+✔ C2-06 RESULT citation-missing retries once, delivers only the valid answer and names reason (256.673143ms)
+✔ C2-06 RESULT citations-over-limit retries once, delivers only the valid answer and names reason (222.852677ms)
+✔ C2-06 RESULT citation-invalid retries once, delivers only the valid answer and names reason (261.389143ms)
+✔ C2-06 RESULT playground-cited-as-canon retries once, delivers only the valid answer and names reason (268.849657ms)
+✔ C2-06 RESULT citation-cross-universe retries once, delivers only the valid answer and names reason (231.674929ms)
+✔ C2-06 RESULT citation-unfetched retries once, delivers only the valid answer and names reason (216.064282ms)
+✔ C2-06 RESULT two guard refusals use the citation fixed text and exactly one retry (188.874138ms)
+✔ C2-06 RESULT JSON 34000 characters retries with a shorter valid answer (236.68605ms)
+✔ C2-06 RESULT JSON 70000 characters retries with a shorter valid answer (234.722358ms)
+✔ C2-06 RESULT two oversized JSON bodies use the length fixed text with citations required (193.029509ms)
+✔ C2-06 multibyte plain bodies also receive the one request-size retry (223.988818ms)
+✔ C2-06 two multibyte plain bodies use the length fallback (205.649902ms)
+✔ C2-06 RESULT a length refusal then citation refusal shares one retry and citation fallback (206.128944ms)
+✔ C2-06 fixed empty/failed replies defer unslop note until the next cited reply (295.722008ms)
+✔ C2-06 cited JSON above the old 32000 clip retains its citations and text (189.724785ms)
+✔ C2-06 a flagged cited answer keeps the note inside text and citations whole (192.59344ms)
+✔ C2-06 send_message typed tool runs every guard code before the valid RESULT (262.703841ms)
+✔ C2-06 outside library the old failed text, clip and unslop behavior hold (208.584382ms)
+✔ C2-06 outside library a refused send keeps the existing no-retry behavior (159.048751ms)
+✔ C2-06 the retry turn delivers citation-unavailable reason to the agent (190.203749ms)
+✔ allow exits 0, a deny exits 2 with the reason on stderr (211.158287ms)
+✔ a missing or wrong policy, or a bad event, exits 2 (113.877105ms)
+✔ the bundle's wrapped command: a missing gate or node still blocks (1104.288151ms)
+✔ claude: typed tools through MCP, the hook blocks, builtins outside --tools don't exist (1070.940549ms)
+✔ claude: the hook alone blocks a path outside the workspace (568.174554ms)
+✔ claude: a second turn resumes the first turn's session (940.097062ms)
+✔ claude adapter: --restricted is always passed (6.108878ms)
+✔ claude adapter: MOSAIC_CLAUDE_BIN wins over PATH and must be an absolute executable (19.555633ms)
+✔ claude adapter: a directory pin exits 2 before it runs; a pin with a space runs (6.450898ms)
+✔ claude: CLAUDE.md files and auto-memory don't reach the model; without --restricted they do (912.426727ms)
+✔ claude: a missing hook or MCP file refuses before claude starts (8.255308ms)
+✔ claude: row 66 a reply with a tell gets the correction notice on the next turn, a clean reply gets none, and the counts read after (1813.719749ms)
+✔ claude: row 66 a broken lists.json gives no clean verdict, the operator is told once, and the session still answers (861.243377ms)
+✔ M2: the gate refuses write, edit and bash to every creative role on pi and claude-code (58.57362ms)
+✔ M6: no creative session gets raise_decision; the assistant and the chief of staff keep it (27.01682ms)
+✔ web: research and companion get the broker's typed web tools, and a harness-builtin source refuses web-source-not-allowed (34.87358ms)
+✔ persona: the block sits between the contract and ## This session, fenced, with the name and digest (10.05189ms)
+✔ persona: each unsafe or unpinned file refuses before the bundle directory is made (30.976676ms)
+✔ adapters pass the prompt file's absolute path; the persona and the prompt text never sit in argv (48.053085ms)
+✔ the pi adapter refuses a missing, unreadable or directory prompt file before pi starts (13.20329ms)
+✔ pi: policy tools and typed tools pass, anything else is blocked (4.524582ms)
+✔ claude: builtins map from pi names, typed tools need the mcp prefix (1.1263ms)
+✔ file tool paths must resolve inside the workspace (4.02957ms)
+✔ pi's own path normalisation can't be used to step out (1.586245ms)
+✔ a symlink inside the workspace that points out is outside (1.300474ms)
+✔ a dangling symlink is refused at any depth, in both harnesses (5.091178ms)
+✔ read is checked under every spelling pi's read would open, in both harnesses (29.6566ms)
+✔ other spellings cover directories, dangling links and pi's cwd (2.651598ms)
+✔ a relative path climbs from the workspace's real path, in both harnesses (9.557314ms)
+✔ claude path fields per tool (1.146391ms)
+✔ glob patterns stay inside the workspace (1.220629ms)
+✔ a path that can't be checked is blocked (0.713439ms)
+✔ fetch_review's have lists the working refs before origin's, and no more than HAVE_MAX (358.466429ms)
+✔ fetch_review's have orders the working refs newest first within each clone, one clone after another (177.220281ms)
+✔ a runner git past its time: SIGTERM reaches its process group, and SIGKILL follows after the grace period (1810.093816ms)
+✔ once a signalled runner git has closed, its group gets SIGKILL, so a process that ignored SIGTERM dies too (303.717292ms)
+✔ land_work sends one land line and resolves the host's started answer (3.694332ms)
+✔ initialize, ping and tools/list (73.055562ms)
+✔ tools/call goes through the tool socket; a refusal is an isError result (66.566638ms)
+✔ replies are compact JSON; over the cap a tool error names the size and the cap (60.558157ms)
+✔ unknown tools and methods are JSON-RPC errors and never reach the socket (52.967178ms)
+✔ a missing argument is a usage error (35.244954ms)
+✔ pi: typed tools reach the socket, the gate blocks, agent_end writes the marker (676.072372ms)
+✔ pi: a reply over the cap is a tool error naming the size and the cap; list_tasks asks for open tasks (532.762084ms)
+✔ pi: a write through a dangling symlink is blocked, and nothing appears outside (479.264215ms)
+✔ pi: a read is refused when pi would open another spelling outside (479.008336ms)
+✔ pi: a relative path climbs from the real path of a workspace behind a symlink (495.496517ms)
+✔ pi: a relative path climbs from the real path of a dataRoot behind a symlink (458.873867ms)
+✔ pi: a missing extension refuses before any model call (6.358156ms)
+✔ pi: an extension without its configuration fails pi's start (380.653357ms)
+✔ pi: row 66 a reply with a tell gets the correction notice on the next turn, a clean reply gets none, and the counts read after (1353.463628ms)
+✔ pi: row 66 a broken lists.json gives no clean verdict, the operator is told once, and the session still answers (748.010347ms)
+✔ raise_decision offers domain as technical or delivery only, optional, and says where a raise goes (23.00088ms)
+✔ raise_decision forwards domain to decision.raise, and a call without it sends none (100.23044ms)
+✔ founderCheck: founder variables, then a needed service without a usable token (3.039179ms)
+✔ turnRequest names the sender, class, reply and decision (0.355597ms)
+✔ turnRequest says a tester's message is a test and never Jason's instruction (0.317095ms)
+✔ turnRequest says a user's message is a granted user's and never the owner's instruction (0.277911ms)
+✔ turnRequest shows the message's own sent time, a day old as well as new (0.227187ms)
+✔ stateBlock names the launch state with its time and event, and the open tasks with the cap (0.334368ms)
+✔ a message becomes a turn, the answer goes back as a RESULT, SIGTERM releases and exits 0 (257.255462ms)
+✔ launches revoked and then restored: the turn's block reads allowed and gives the restore time (272.592717ms)
+✔ a task closed on the tracker is missing from the next turn's open list (239.571073ms)
+✔ a message read a day after it was sent shows the time it was sent (148.998515ms)
+✔ a decision the human resolves becomes a turn citing the decision and the answer (196.043584ms)
+✔ a failed state read fails the turn: no adapter runs, the sender hears why, the message is read (103.372577ms)
+✔ a SIGTERM before the claim stops the runner with exit 0 and no claim (91.622163ms)
+✔ typed tools carry the runner's capability; launch goes to the host's launch socket (336.226718ms)
+✔ end_run, organization_revision and change_organization reach the broker with the tool's arguments, and refusals keep their codes (429.635331ms)
+✔ set_name reaches the broker's name.set with the tool's arguments, and refusals keep their codes (182.337097ms)
+✔ a RESULT gets no automatic reply; failed turns reply with the reason (1269.003752ms)
+✔ the bus's launch notice is one turn with no reply, and is not taken again (269.091562ms)
+✔ SIGTERM during a turn kills the turn's process group and still exits 0 (122.399792ms)
+✔ founder credentials stop before the claim (20) (162.909348ms)
+✔ a refused claim exits 21; an ended run's capability exits 22 (165.231771ms)
+✔ the launch ending under a running session exits 22 (134.851141ms)
+✔ a broker that stays unreachable exits 23 after brokerRetries polls (234.508622ms)
+✔ a broker that is down at the claim exits 23, not 21 (78.168597ms)
+✔ no capability, or a malformed one, on stdin exits 2 (194.303544ms)
+✔ a missing or malformed policy exits 2 before the claim (120.576748ms)
+✔ REQ-LIMIT-4 runner brackets its actual harness turn before the reply and read receipt (194.53726ms)
+✔ REQ-LIMIT-4 a runner at its limit stops at the end of its turn: RESULT and read first, then exit 22 and a limit-check revoke (168.261307ms)
+✔ landingRequest is the fixed template, with the decision and task ref and nothing else (0.147237ms)
+✔ each landing entry is one turn before any message, with the state block and the fixed request; it sends nothing and reads nothing (226.715761ms)
+✔ an empty landing takes no landing turn: the message is turn 1 (195.475495ms)
+✔ a run in a landing turn isn't released for a second held decision until its landing turns end and it has read its messages (596.516739ms)
+✔ a malformed landing exits 2 before the claim, with no turn (568.856934ms)
+✔ row 65 a session.json without a turnEnd of marker or exit, or a harnessEnv of strings, exits 2 before the claim (269.597797ms)
+✔ row 65 harnessEnv reaches the adapter, and an exit harness needs no turn marker (141.169295ms)
+✔ row 66 the adapter gets the run's unslop log, and a flagged reply's note rides that reply's RESULT, once (300.426996ms)
+✔ row 66 a turn with no reply holds its note for the next reply; a broken check is told once (345.164969ms)
+✔ row 66 unslopNotes keeps a note until sent(), reads only whole lines, and unslopCounts reads a log after the session (1.68702ms)
+✔ row 66 a clipped answer with both note parts stays under the bus's body limit, and the note under 600 (161.518813ms)
+✔ row 66 a refused send keeps the note: it rides the next RESULT the session sends (264.81696ms)
+✔ each repo role's prompt carries exactly its listed skills, each file as the bundle copy and the source (69.791416ms)
+✔ a skill's files go into the prompt in sorted path order, sub-directories included (9.238961ms)
+✔ a role with no skills gets no Skills section, no skills directory and an empty manifest list (11.39746ms)
+✔ an enabled skill the role doesn't list stays out of the prompt (8.706347ms)
+✔ the bundle copy outlives the source: deactivating a skill after the build leaves the run's copy (4.473957ms)
+✔ a listed skill that isn't enabled refuses skill-not-enabled, naming the activate command (9.541232ms)
+✔ a skill directory that isn't plain refuses: a symlinked skill, SKILL.md or sub-file, or a non-file entry (2.643822ms)
+✔ a skill file that can't go into the prompt refuses: a bad name, non-UTF-8 bytes, or the end marker (3.518581ms)
+✔ a role's skills over SKILL_BYTES together refuse, naming the skill that crossed it (10.193929ms)
+✔ each adapter passes the skills only in the prompt file, with skill discovery off (59.00799ms)
+✔ every role sees read_spec, record writer follows its grant, citation schemas stay strict (25.138022ms)
+✔ typed socket forwards read content/history and agent record writes, and cannot write a spec (172.529974ms)
+✔ the PM gets its task verbs and the reads, and no launch (11.972118ms)
+✔ send_message offers the BLOCK class, beside the classes it already had (3.837774ms)
+✔ the chief of staff gets launch, send_message, end_run, hire, fire, change_organization and set_name, and no task verbs (4.871494ms)
+✔ hire and fire send instance.hire and instance.fire under role.hire and role.fire, only for a holder of the grant (22.751702ms)
+✔ request_staff is the pm's alone: staff.request over message.send, roles and counts bounded (15.291362ms)
+✔ end_run sends role and reason, no decision; change_organization sends revision and the organization keys (2.689052ms)
+✔ set_name sends instance and name to name.set under instance.name, only for a holder of that grant (12.695737ms)
+✔ the organization keys change_organization takes are the broker's ORGANIZATION_KEYS and the settings' SETTINGS_KEYS (0.178758ms)
+✔ a role without role.end or organization.change gets none of the three tools, and each follows its own grant (12.115972ms)
+✔ no role's tools send instances or instances.set, and change_organization takes no instance write keys (10.7825ms)
+✔ the assistant gets send_message, the reads and the web tools (it holds the web grant), no launch (2.17462ms)
+✔ list_requirements reads the requirement ids, for a task.create holder with a tracker (3.939398ms)
+✔ a coder gets no launch, no resolve_decision, and no task tools without a tracker (3.125698ms)
+✔ a coder with a tracker gets its own task tools and no task_reassign (2.258296ms)
+✔ launch only when the business's launch block names the instance as launcher (3.280204ms)
+✔ an action outside the instance's authority has no tool (1.994949ms)
+✔ the review loop: push_working and request_review for the coder, fetch_review and review_verdict for the reviewer, none for the PM (7.387015ms)
+✔ land_work is there only with land, after push_working, with the task and the decision (4.431191ms)
+✔ callTool: one JSON line out, the result back, a refusal rejects (16.610729ms)
+✔ list_tasks takes the broker's filters and pages; get_task takes a task_ref (4.144909ms)
+✔ callTool sends list_tasks done false unless the session names done; other tools as given (3.985977ms)
+✔ replyText: compact JSON up to the cap, an error naming the size and the cap over it (1.008682ms)
+✔ web_search's query maxLength is the web layer's SEARCH_MAX_QUERY_CHARS (4.810935ms)
+ℹ tests 172
+ℹ suites 0
+ℹ pass 172
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 12131.328093
@@ -0,0 +1,153 @@
+npm notice run @mosaic/[email protected] test
+npm notice run node --test tests/*.test.mjs
+✔ C2-06 reply schema: free bodies, exact objects and safe refusal reasons (31.081491ms)
+✔ C2-06 citation setting and all four exact fixed texts (27.31137ms)
+✔ C2-06 default citation cap passes 20 and refuses 21, even with optional citations (144.940253ms)
+✔ C2-06 real Git citation scope, reachability, lines and normalized quotes (71.988432ms)
+✔ C2-06 playground cites pass but cannot state canon (42.141068ms)
+✔ C2-06 independent universes refuse; a hybrid and only its sources pass (69.134397ms)
+✔ C2-06 web cites require allowed definition, this session fetch and kept quote (17.090852ms)
+✔ C2-06 file origin is the path commit and trailer, while last follows served changes (51.160201ms)
+✔ C2-06 origin uses literal paths even when a filename contains a glob (35.841257ms)
+✔ C2-06 cited-commit guard reads exactly the C2-05a indexed file set with supporting scope (79.711572ms)
+✔ C2-06 reply limits fall back independently without coercion or inherited keys (0.78046ms)
+✔ the same commit, repo path and mapping return the same index, and only mapped files are in it (53.330474ms)
+✔ a different repo path, mapping or commit gets its own index (73.465944ms)
+✔ the cache holds at most eight indexes and evicts the least recently used (93.355098ms)
+✔ a failed read is not kept in the cache (19.15839ms)
+✔ a missing or unchecked mapping is refused before any read (18.591276ms)
+✔ a 3,000-file rebuild completes and its time is reported (3339.384537ms)
+ℹ 3,000-file index rebuild: 3093 ms
+✔ resolver step 1: a path from the repo root, with or without .md (2.003164ms)
+✔ resolver step 2: the same path with vaultPrefix/ stripped (0.323373ms)
+✔ resolver step 3: a path relative to the linking file, never above the repo root (0.278534ms)
+✔ resolver step 4: a base name that matches exactly one indexed file (0.322938ms)
+✔ a link into another of her repos resolves to nothing (0.213594ms)
+✔ wikilink forms, embeds, and links skipped inside code (1.24016ms)
+✔ only a body embed whose target has an extension other than .md, in any case, is an attachment (0.455416ms)
+✔ the fixture mapping checks and comes back frozen (2.830981ms)
+✔ C2-01c: a prefix inside or holding another entry's book refuses library-playground-other-universe (1.34922ms)
+✔ C2-01c: a prefix equal to a book folder, or holding its own, refuses library-mapping-invalid (0.74756ms)
+✔ C2-01c: universe-level prefixes lie outside every book, in a plain universe and in a hybrid with no books (1.203696ms)
+✔ C2-01c: a draft takes kind, name and playground only, and comes back frozen with books [] (1.782129ms)
+✔ C2-01d: supporting prefixes at book level, universe level, in a hybrid and in a draft, [] when absent (0.643444ms)
+✔ C2-01d: each supporting prefix rule refuses with its code (2.880363ms)
+✔ C2-01d: between the lists, a supporting prefix may equal its own playground, and a playground may hold its own supporting (0.978814ms)
+✔ C2-01d: editor is optional, kept when given, and refuses anything but a plain name and email (5.417269ms)
+✔ C2-01d: an accepted editor round-trips through a real git commit unchanged (22.81842ms)
+✔ no playground prefix holds another, and no book folder holds another (1.309845ms)
+✔ shape refusals: kind, remote, branch, unknown keys, types, manuscript, folder names (1.68793ms)
+✔ C2-03a sage-2021: user is optional, kept when given, and must be a plain account name (0.986251ms)
+✔ a hybrid universe is a shape the query code can take (1.4), with sources that must exist (1.600445ms)
+✔ a caller-supplied fail receives the code, as business file loading will pass it (C2-04) (0.396233ms)
+✔ scope comes from the path alone (design 1.2) (2.453311ms)
+✔ C2-04 mirror: exact default path, bare without checkout or remote, and idempotent initialization (82.599485ms)
+✔ C2-04 mirror: simultaneous creators publish one intact mirror and leave no staging paths (49.399699ms)
+✔ C2-04 mirror: skipped publication accepts both coreutils statuses without removing the winner (174.577156ms)
+✔ C2-04 mirror: preserve occupied directories and reject symlink ancestors and code overlaps (20.556264ms)
+✔ C2-04 mirror: existing metadata accepts only bare Git plus state and the precreated lock (34.414614ms)
+✔ C2-04 state: missing state is empty only while the served ref is absent (54.101069ms)
+✔ C2-04 state: valid problems and sync metadata return no content and change no state bytes (57.832223ms)
+✔ C2-04 state: strict keys, types, times, branch, commit and fixed R messages fail closed (158.515834ms)
+✔ C2-04 state: symlink, hardlink, non-private state and missing lock refuse without replacement (57.609887ms)
+✔ C2-04 file: served commit, not HEAD or a caller commit, owns the exact returned text (113.829438ms)
+✔ C2-04 file: R1, R2 and R7 exclusions and never-synced mirrors cannot return file bodies (124.255784ms)
+✔ C2-04 lock: a first-sync and fast-forward reader wait for a consistent pair across processes (314.221744ms)
+✔ C2-04 lock: same-process waits, timeout code, callback expiry and throw release (5038.833094ms)
+✔ C2-04 lock: owner death releases the kernel lock without replacing its file (54.543028ms)
+✔ C2-04 lock: a missing flock binary becomes a handled refusal (49.73045ms)
+✔ C2-04 lock: an unawaited scoped read drains before the lock is released (20.869629ms)
+✔ the query reply cap equals the harness reply cap (1.544541ms)
+✔ find is bound to its universe and refuses a call without one (70.281377ms)
+✔ every result carries its scope, and playground appears only when asked for (39.878964ms)
+✔ unmapped files never appear in any reply (35.123505ms)
+✔ a hybrid sees its sources canon, minus exclusions, and no playground (39.679182ms)
+✔ a hybrid gets a source file it can see, and not an excluded or foreign one (54.602693ms)
+✔ get lists visible links both ways and drops a target another universe cannot see (50.638492ms)
+✔ a long list pages by position, never cuts an item, and returns 50 per page (193.227492ms)
+✔ a page stays under the reply cap when items are large (91.885035ms)
+✔ a search line too long to fit alone comes back marked, with no excerpt, and the other hits still return (33.20163ms)
+✔ a find item that cannot fit alone is refused, not cut (46.447292ms)
+✔ get pages its lines, and the next line picks up where the page stopped (39.12526ms)
+✔ get refuses a file whose front matter alone is over the cap, and a line alone is over the cap (36.804238ms)
+✔ get pages the links of a hub note, every page carries the front matter, and the pages add up (1107.995321ms)
+✔ get rejects a bad links_from (34.377162ms)
+✔ search returns scoped line hits, case-insensitively, and refuses empty text (30.729667ms)
+✔ a manuscript call returns one chapter, at most 400 lines, and names its next line (47.791378ms)
+✔ a manuscript call without a chapter returns the first chapter in path order and names the next (26.366902ms)
+✔ a chapter name that matches two visible files is refused (25.448584ms)
+✔ a hybrid reads a source chapter through its declared sources only (39.969561ms)
+✔ universe info reports a hybrid sources, constraints and notes, and refuses an unknown universe (15.657923ms)
+✔ an exclusion hides what it names from a hybrid and from nothing else (39.404555ms)
+✔ PRD 1.14: a lookup that names a book leaves book-null files out (34.647951ms)
+✔ PRD 1.14: library_manuscript never reads a book-null file (32.637362ms)
+✔ PRD 1.14: a draft universe has no canon, so its lookups return files only with scope playground (32.338176ms)
+✔ PRD 1.14: library_universe on a draft returns its kind, name and prefixes (15.442774ms)
+✔ a hybrid gets a source playground file as null, while the source gets it with scope playground (42.674554ms)
+✔ the fixture reads clean: every resolver step, appears_in and relationships wikilinks indexed (63.033383ms)
+✔ R1: executables, symlinks, gitlinks, blobs over 1 MiB and non-UTF-8 text are not indexed (95.339567ms)
+✔ R2: unmapped paths are reported and not indexed (31.564751ms)
+✔ R3: front matter not fully parsed stays raw, with the line where parsing stopped (36.896696ms)
+✔ front matter forms the reader accepts and refuses (1.596508ms)
+✔ R4: a link to no file, to more than one, or into another repo is reported and not followed (35.504393ms)
+✔ a block list link carries its item line, a scalar or flow link its key line, and problems follow (37.229678ms)
+✔ an unresolved attachment embed gives no problem; a link or front matter value to one is R4; a note embed resolves (33.783255ms)
+✔ an indexed Dr.Quinn.md resolves as a body link, a block list link and an embed (33.230236ms)
+✔ R5: a canon file that refers into the playground is reported, and the link still goes by path (29.709099ms)
+✔ R6: a canon file that refers into another universe is reported; a hybrid may refer into its sources (30.970646ms)
+✔ R7: two paths that differ only in case are both left out (41.126208ms)
+✔ the reader reads the commit, never the working tree, and refuses a bad commit id (41.98282ms)
+✔ a bare mirror reads the same as the clone (53.445984ms)
+✔ renderItems snapshot: fact (1.786386ms)
+✔ renderItems snapshot: finding (0.299155ms)
+✔ renderItems snapshot: correction (0.259329ms)
+✔ renderItems snapshot: question (0.218182ms)
+✔ renderItems snapshot: idea (0.223821ms)
+✔ renderItems numbers several items and takes a parsed body as well as a string (1.090019ms)
+✔ without options a path cite has no badge and is never marked changed (0.280013ms)
+✔ renderItems snapshot: notice no-cited-answer (0.237711ms)
+✔ renderItems snapshot: notice no-answer (0.198705ms)
+✔ renderItems snapshot: notice turn-failed (0.337126ms)
+✔ a body without the reply shape shows a fixed line and none of its text (0.613863ms)
+✔ C2-01c: each level gives its universe, and its book or null (4.092943ms)
+✔ C2-01c: prefixes come first: in a book that holds a prefix, a file outside it is canon and one under it playground (0.607188ms)
+✔ C2-01c: a canon file linking into a draft gives R6, and into its own universe-level prefix gives R5 (65.023589ms)
+✔ C2-01d: each supporting level gives its universe, and its book or null (0.8244ms)
+✔ C2-01d: supporting comes before playground; a folder in both lists is supporting, one in the playground only stays playground (0.633065ms)
+✔ C2-01d: only .md files are supporting; a .canvas or .base under a supporting prefix is unmapped (0.517375ms)
+✔ C2-01d: a path passes at book level, universe level, in a draft and in a folder in both lists (2.312377ms)
+✔ C2-01d: a path of exactly 1024 bytes passes, and 1025 bytes made of multi-byte characters refuses (0.98988ms)
+✔ C2-01d: a path outside the universe's supporting folders refuses (0.763326ms)
+✔ C2-01d: malformed paths refuse by class, in order (0.710036ms)
+✔ C2-01d: a symlink or gitlink on the way, or at the path itself, refuses (0.383033ms)
+✔ C2-01d: a name that differs from a tree name only in case or Unicode form refuses, at the file or any folder (0.99427ms)
+✔ the survey prints folder names, counts, key sets and link-form counts, and never text (65.469359ms)
+✔ folder names print DEL, C1 and bidi controls, U+061C among them, as escapes (37.571162ms)
+✔ an embed of an attachment counts as an embed and as an attachment; a plain link to one does not (24.053267ms)
+✔ with --mapping the survey adds scope, resolver step and problem counts (51.551822ms)
+✔ C2-01d: with --mapping the survey counts supporting files (49.232972ms)
+✔ survey exit codes: usage 4, bad mapping 3, unreadable repo 2 (19.679523ms)
+✔ scripts/mosaic library survey reaches the survey (97.237921ms)
+✔ C2-03a argv: the fixed sequence, one https allow, no other protocol key (2.539459ms)
+✔ C2-03a argv: only an https URL with a plain host, no userinfo, and a plain user (1.147619ms)
+✔ C2-03a helper: answers only the exact prompts for the configured host and user (dewey-0765) (43.662638ms)
+✔ C2-03a first sync: served is the fetched tip, HEAD is served, the survey reads it, and the token stays in the slot (199.624214ms)
+✔ C2-03a fast-forward: served moves, problems are rebuilt, and a repeat changes only lastFetch (272.12795ms)
+✔ C2-03a Filbert N2: a read that took served before a sync still finds its objects after served moves (255.892244ms)
+✔ C2-03a overlap: a reader during a sync sees the old pair or the new one, never a mix (220.077465ms)
+✔ C2-03a diverged: a non-fast-forward keeps serving and holds until a human accepts the tip (511.485441ms)
+✔ C2-03a accept starts the record over, so a changed branch gets a fresh state (204.895458ms)
+✔ C2-03a fetch failure: a wrong token keeps serving and records the error, lastFetch unchanged (210.171392ms)
+✔ C2-03a a failed first fetch records the error with nothing served (57.52009ms)
+✔ C2-03a a 302 to another host fails the fetch and the other host sees nothing (68.211135ms)
+✔ C2-03a the slot: missing or unsafe refuses before git, and sync never opens it (65.636096ms)
+✔ C2-03a sage-2021: an entry with no user refuses library-remote-invalid and runs no git (34.004871ms)
+✔ C2-03a one sync per mirror: an overlapping call refuses library-sync-busy (129.134012ms)
+ℹ tests 142
+ℹ suites 0
+ℹ pass 142
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 6490.060843
@@ -0,0 +1,2 @@
+1 match: replyLimitsFence(old, document, actor);
+1 match: replyLimitsFence(old, written, actor);
@@ -0,0 +1 @@
+M5-hide-library-unavailable: killed (control green, mutant exit 1, hashes restored, restored green)
@@ -0,0 +1,11 @@
+✔ C2-06 held library lock gives the agent citation-unavailable and its retry reason (5151.319291ms)
+✔ C2-06 malformed sync state is availability failure, never a fabricated invalid cite (37.53806ms)
+✔ C2-06 no mirror or freshly initialized empty mirror still means no served citation (35.257703ms)
+ℹ tests 3
+ℹ suites 0
+ℹ pass 3
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 5310.30031
@@ -0,0 +1,11 @@
+✔ C2-06 held library lock gives the agent citation-unavailable and its retry reason (5147.642347ms)
+✔ C2-06 malformed sync state is availability failure, never a fabricated invalid cite (32.256875ms)
+✔ C2-06 no mirror or freshly initialized empty mirror still means no served citation (31.701926ms)
+ℹ tests 3
+ℹ suites 0
+ℹ pass 3
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 5295.499085
@@ -0,0 +1,23 @@
+eeca81ab965f9e94f930ee5f51d16f019af6368bc6c3994895e204f7a54ec8d2  packages/bus/src/broker.mjs
+ad3c686a089f67f3c89610937c6fc9b32367cea5d9735125d89bef042082d4e8  packages/bus/src/client.mjs
+36b05dd3119e5929211aa1cc5d45c5043f5a1c34567ddc7cac8f002835d44abe  packages/bus/src/runtime.mjs
+66b26d131a19f4f411686427274936850c1ff0aed11e9b281ae4aadcf4b289fc  packages/bus/src/server.mjs
+cdd0304ec25ef1ad3e31c52502fa46f2c80bd77c8d3c2e13f8ed4b5328f342c9  packages/bus/tests/citation-availability.test.mjs
+2e05074cd9d15d810103658af3858161cee2af78b0a2e1ba910222fab3e84401  packages/bus/tests/citation-guard.test.mjs
+2c7a2102e2e0244876e41b664f4f706baefe3375100b956655551db1230f5da3  packages/bus/tests/citation-helpers.mjs
+168dcac99d9bfdfdf5ff0eaa2c0fff91595b351b4d0092dc299532c9c32869f0  packages/bus/tests/citation-runtime.test.mjs
+abaeac64f2c3bf8ba83c9a4488edd9105c4707a6564560c5333d5421445653af  packages/business/src/business.mjs
+3a6044de5d1ca2cc35c5285b460c3e402b4274837e5d88b97f489797f6004903  packages/business/src/organization.mjs
+4d2eb11beaa80175e524af1b95c81e7164990fba1d3e1754f5ba06eee390a14f  packages/business/tests/reply-limits.test.mjs
+a2bb98734bcc2556f8b2168f0faf8a89f7064c3f0aa49feb7d1975d596192f09  packages/cli/README.md
+2f291a71f490f2741edada7a3e3788500f8976a08eb8ab1411f6c5982f778260  packages/cli/src/limits.mjs
+f38af2d46d5f5f6388f599912507b94b87a0bf9dcc2104bb2187c38ee35118d5  packages/cli/tests/reply-limits.test.mjs
+6ad72b4245e0a66e32725941900c1ece64c2e5de2fb73d65c8e042b4f3a691a6  packages/harness/src/runner.mjs
+a5ef1b65230239a7baf6d0e8f2b8a51c0516348c7c4339a55b3f0a1a6ff531ba  packages/harness/tests/citation-runner.test.mjs
+330bc71bf6c7e64d3ddb70440903d2d9acf7878d44a49d7e30c2352ee4c807ec  packages/harness/tests/fixtures/citation-adapter.mjs
+f710d9600a17f6e2989a289cfe84e58f161d86c7306605946ce05fa71b364eb2  packages/library/src/guard.mjs
+c0d630798914e300e461c247340533328e97119e54909c6a9406340e61fed8b7  packages/library/src/index.mjs
+98ef45ed61144aaea44d8aea1ac43082b6d340297e46846d01772da38728e530  packages/library/src/limits.mjs
+7b46f47b5e9d6b554b5d39bce2cd95c4610f5f35b8ab8fdc5a2864b3214be809  packages/library/src/reply-protocol.mjs
+406146ebbce3710f308243b684a1c17e7626c1b65a4468489364317e31537a48  packages/library/tests/guard.test.mjs
+39c8e6c8250a13fa43015fb2c407195e30ee642f729a9f6a644c38b4ea758a72  packages/seat/src/sandbox.mjs
@@ -0,0 +1,68 @@
+✖ C2-06 held library lock gives the agent citation-unavailable and its retry reason (5108.905478ms)
+✖ C2-06 malformed sync state is availability failure, never a fabricated invalid cite (40.518617ms)
+✔ C2-06 no mirror or freshly initialized empty mirror still means no served citation (37.68422ms)
+ℹ tests 3
+ℹ suites 0
+ℹ pass 1
+ℹ fail 2
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 5261.169843
+
+✖ failing tests:
+
+test at packages/bus/tests/citation-availability.test.mjs:13:1
+✖ C2-06 held library lock gives the agent citation-unavailable and its retry reason (5108.905478ms)
+  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:
+  + actual - expected
+  
+  + 'citation-invalid'
+  - 'citation-unavailable'
+              ^
+  
+      at Object.<anonymous> (file:///mnt/storage/scratch/tmp/tNoueZ/row217-mutant-pd3x2htc/packages/bus/tests/citation-availability.test.mjs:29:14)
+      at expectedException (node:assert:547:17)
+      at expectsError (node:assert:672:21)
+      at strict.rejects (node:assert:738:3)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async file:///mnt/storage/scratch/tmp/tNoueZ/row217-mutant-pd3x2htc/packages/bus/tests/citation-availability.test.mjs:28:5
+      at async withLibraryLock (file:///mnt/storage/scratch/tmp/tNoueZ/row217-mutant-pd3x2htc/packages/library/src/mirror.mjs:171:18)
+      at async TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/tNoueZ/row217-mutant-pd3x2htc/packages/bus/tests/citation-availability.test.mjs:27:3)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: 'citation-invalid',
+    expected: 'citation-unavailable',
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
+
+test at packages/bus/tests/citation-availability.test.mjs:40:1
+✖ C2-06 malformed sync state is availability failure, never a fabricated invalid cite (40.518617ms)
+  AssertionError [ERR_ASSERTION]: Expected values to be strictly deep-equal:
+  + actual - expected
+  
+    Comparison {
+  +   code: 'citation-invalid'
+  -   code: 'citation-unavailable'
+    }
+  
+      at async TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/tNoueZ/row217-mutant-pd3x2htc/packages/bus/tests/citation-availability.test.mjs:45:3)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: Error: citation-invalid: citation 1 (Book One/Characters/Mara Vell.md) isn't an indexed file at a commit reachable from the served commit
+        at refuse (file:///mnt/storage/scratch/tmp/tNoueZ/row217-mutant-pd3x2htc/packages/library/src/guard.mjs:24:42)
+        at checkReply (file:///mnt/storage/scratch/tmp/tNoueZ/row217-mutant-pd3x2htc/packages/library/src/guard.mjs:80:25)
+        at async waitForActual (node:assert:615:5)
+        at async strict.rejects (node:assert:738:25)
+        at async TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/tNoueZ/row217-mutant-pd3x2htc/packages/bus/tests/citation-availability.test.mjs:45:3)
+        at async Test.run (node:internal/test_runner/test:1409:7)
+        at async Test.processPendingSubtests (node:internal/test_runner/test:974:7),
+    expected: { code: 'citation-unavailable' },
+    operator: 'rejects',
+    diff: 'simple'
+  }
@@ -0,0 +1 @@
+M5-hide-library-unavailable: killed (control green, mutant exit 1, hashes restored, restored green)
@@ -0,0 +1,5 @@
+M1-writer-fence: killed (control green, mutant exit 1, hashes restored, restored green)
+M2-incoming-human: killed (control green, mutant exit 1, hashes restored, restored green)
+M3-split-check-transaction: killed (control green, mutant exit 1, hashes restored, restored green)
+M5-hide-library-unavailable: killed (control green, mutant exit 1, hashes restored, restored green)
+M4-drop-client-reason: killed (control green, mutant exit 1, hashes restored, restored green)
@@ -0,0 +1,14 @@
+✔ C2-06 M11 human replacement works; omitted settings return to defaults (29.278355ms)
+✔ C2-06 M11 agents and tester cannot change settings, including by changing human (22.040025ms)
+✔ C2-06 M11 serialization cannot replace settings after the first fence (8.805323ms)
+✔ C2-06 M11 an unrelated actor cannot appoint itself human and change reply limits (8.829275ms)
+✔ C2-06 invalid setter values preserve the business and changes.jsonl (9.171416ms)
+✔ C2-06 validator accepts hand-edited settings; raw reader fails closed on invalid files (10.423621ms)
+ℹ tests 6
+ℹ suites 0
+ℹ pass 6
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 139.016448
@@ -0,0 +1,14 @@
+✔ C2-06 M11 human replacement works; omitted settings return to defaults (27.397407ms)
+✔ C2-06 M11 agents and tester cannot change settings, including by changing human (23.565905ms)
+✔ C2-06 M11 serialization cannot replace settings after the first fence (8.312613ms)
+✔ C2-06 M11 an unrelated actor cannot appoint itself human and change reply limits (8.050944ms)
+✔ C2-06 invalid setter values preserve the business and changes.jsonl (8.746752ms)
+✔ C2-06 validator accepts hand-edited settings; raw reader fails closed on invalid files (11.061782ms)
+ℹ tests 6
+ℹ suites 0
+ℹ pass 6
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 137.787038
@@ -0,0 +1,23 @@
+eeca81ab965f9e94f930ee5f51d16f019af6368bc6c3994895e204f7a54ec8d2  packages/bus/src/broker.mjs
+ad3c686a089f67f3c89610937c6fc9b32367cea5d9735125d89bef042082d4e8  packages/bus/src/client.mjs
+36b05dd3119e5929211aa1cc5d45c5043f5a1c34567ddc7cac8f002835d44abe  packages/bus/src/runtime.mjs
+66b26d131a19f4f411686427274936850c1ff0aed11e9b281ae4aadcf4b289fc  packages/bus/src/server.mjs
+cdd0304ec25ef1ad3e31c52502fa46f2c80bd77c8d3c2e13f8ed4b5328f342c9  packages/bus/tests/citation-availability.test.mjs
+2e05074cd9d15d810103658af3858161cee2af78b0a2e1ba910222fab3e84401  packages/bus/tests/citation-guard.test.mjs
+2c7a2102e2e0244876e41b664f4f706baefe3375100b956655551db1230f5da3  packages/bus/tests/citation-helpers.mjs
+9768b6dc5ae078c5cc4f76473097287b74c5bc5853d39e1f57f153e646f861af  packages/bus/tests/citation-runtime.test.mjs
+abaeac64f2c3bf8ba83c9a4488edd9105c4707a6564560c5333d5421445653af  packages/business/src/business.mjs
+3a6044de5d1ca2cc35c5285b460c3e402b4274837e5d88b97f489797f6004903  packages/business/src/organization.mjs
+4d2eb11beaa80175e524af1b95c81e7164990fba1d3e1754f5ba06eee390a14f  packages/business/tests/reply-limits.test.mjs
+a2bb98734bcc2556f8b2168f0faf8a89f7064c3f0aa49feb7d1975d596192f09  packages/cli/README.md
+2f291a71f490f2741edada7a3e3788500f8976a08eb8ab1411f6c5982f778260  packages/cli/src/limits.mjs
+f38af2d46d5f5f6388f599912507b94b87a0bf9dcc2104bb2187c38ee35118d5  packages/cli/tests/reply-limits.test.mjs
+6ad72b4245e0a66e32725941900c1ece64c2e5de2fb73d65c8e042b4f3a691a6  packages/harness/src/runner.mjs
+a5ef1b65230239a7baf6d0e8f2b8a51c0516348c7c4339a55b3f0a1a6ff531ba  packages/harness/tests/citation-runner.test.mjs
+330bc71bf6c7e64d3ddb70440903d2d9acf7878d44a49d7e30c2352ee4c807ec  packages/harness/tests/fixtures/citation-adapter.mjs
+f710d9600a17f6e2989a289cfe84e58f161d86c7306605946ce05fa71b364eb2  packages/library/src/guard.mjs
+c0d630798914e300e461c247340533328e97119e54909c6a9406340e61fed8b7  packages/library/src/index.mjs
+98ef45ed61144aaea44d8aea1ac43082b6d340297e46846d01772da38728e530  packages/library/src/limits.mjs
+7b46f47b5e9d6b554b5d39bce2cd95c4610f5f35b8ab8fdc5a2864b3214be809  packages/library/src/reply-protocol.mjs
+406146ebbce3710f308243b684a1c17e7626c1b65a4468489364317e31537a48  packages/library/tests/guard.test.mjs
+39c8e6c8250a13fa43015fb2c407195e30ee642f729a9f6a644c38b4ea758a72  packages/seat/src/sandbox.mjs
@@ -0,0 +1,73 @@
+✔ C2-06 M11 human replacement works; omitted settings return to defaults (26.703775ms)
+✖ C2-06 M11 agents and tester cannot change settings, including by changing human (12.156717ms)
+✖ C2-06 M11 serialization cannot replace settings after the first fence (11.431272ms)
+✖ C2-06 M11 an unrelated actor cannot appoint itself human and change reply limits (14.308135ms)
+✔ C2-06 invalid setter values preserve the business and changes.jsonl (9.043165ms)
+✔ C2-06 validator accepts hand-edited settings; raw reader fails closed on invalid files (9.576698ms)
+ℹ tests 6
+ℹ suites 0
+ℹ pass 3
+ℹ fail 3
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 131.91294
+
+✖ failing tests:
+
+test at packages/business/tests/reply-limits.test.mjs:34:1
+✖ C2-06 M11 agents and tester cannot change settings, including by changing human (12.156717ms)
+  AssertionError [ERR_ASSERTION]: Missing expected exception.
+      at refused (file:///mnt/storage/scratch/tmp/tNoueZ/row217-mutant-m6rnq3wd/packages/business/tests/reply-limits.test.mjs:22:10)
+      at TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/tNoueZ/row217-mutant-m6rnq3wd/packages/business/tests/reply-limits.test.mjs:37:5)
+      at Test.runInAsyncScope (node:async_hooks:226:14)
+      at Test.run (node:internal/test_runner/test:1402:25)
+      at Test.processPendingSubtests (node:internal/test_runner/test:974:18)
+      at Test.postRun (node:internal/test_runner/test:1542:19)
+      at Test.run (node:internal/test_runner/test:1467:12)
+      at async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3) {
+    generatedMessage: false,
+    code: 'ERR_ASSERTION',
+    actual: undefined,
+    expected: { code: 'organization-reply-limits-human-only' },
+    operator: 'throws',
+    diff: 'simple'
+  }
+
+test at packages/business/tests/reply-limits.test.mjs:43:1
+✖ C2-06 M11 serialization cannot replace settings after the first fence (11.431272ms)
+  AssertionError [ERR_ASSERTION]: Missing expected exception.
+      at refused (file:///mnt/storage/scratch/tmp/tNoueZ/row217-mutant-m6rnq3wd/packages/business/tests/reply-limits.test.mjs:22:10)
+      at TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/tNoueZ/row217-mutant-m6rnq3wd/packages/business/tests/reply-limits.test.mjs:45:3)
+      at Test.runInAsyncScope (node:async_hooks:226:14)
+      at Test.run (node:internal/test_runner/test:1402:25)
+      at Test.processPendingSubtests (node:internal/test_runner/test:974:18)
+      at Test.postRun (node:internal/test_runner/test:1542:19)
+      at Test.run (node:internal/test_runner/test:1467:12)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: false,
+    code: 'ERR_ASSERTION',
+    actual: undefined,
+    expected: { code: 'organization-reply-limits-human-only' },
+    operator: 'throws',
+    diff: 'simple'
+  }
+
+test at packages/business/tests/reply-limits.test.mjs:52:1
+✖ C2-06 M11 an unrelated actor cannot appoint itself human and change reply limits (14.308135ms)
+  AssertionError [ERR_ASSERTION]: Missing expected exception.
+      at refused (file:///mnt/storage/scratch/tmp/tNoueZ/row217-mutant-m6rnq3wd/packages/business/tests/reply-limits.test.mjs:22:10)
+      at TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/tNoueZ/row217-mutant-m6rnq3wd/packages/business/tests/reply-limits.test.mjs:54:3)
+      at Test.runInAsyncScope (node:async_hooks:226:14)
+      at Test.run (node:internal/test_runner/test:1402:25)
+      at Test.processPendingSubtests (node:internal/test_runner/test:974:18)
+      at Test.postRun (node:internal/test_runner/test:1542:19)
+      at Test.run (node:internal/test_runner/test:1467:12)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: false,
+    code: 'ERR_ASSERTION',
+    actual: undefined,
+    expected: { code: 'organization-reply-limits-human-only' },
+    operator: 'throws',
+    diff: 'simple'
+  }
@@ -0,0 +1,14 @@
+✔ C2-06 M11 human replacement works; omitted settings return to defaults (31.955623ms)
+✔ C2-06 M11 agents and tester cannot change settings, including by changing human (22.832309ms)
+✔ C2-06 M11 serialization cannot replace settings after the first fence (9.274775ms)
+✔ C2-06 M11 an unrelated actor cannot appoint itself human and change reply limits (8.69039ms)
+✔ C2-06 invalid setter values preserve the business and changes.jsonl (8.733202ms)
+✔ C2-06 validator accepts hand-edited settings; raw reader fails closed on invalid files (10.441869ms)
+ℹ tests 6
+ℹ suites 0
+ℹ pass 6
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 143.570268
@@ -0,0 +1,14 @@
+✔ C2-06 M11 human replacement works; omitted settings return to defaults (29.948602ms)
+✔ C2-06 M11 agents and tester cannot change settings, including by changing human (22.139351ms)
+✔ C2-06 M11 serialization cannot replace settings after the first fence (9.054641ms)
+✔ C2-06 M11 an unrelated actor cannot appoint itself human and change reply limits (8.381635ms)
+✔ C2-06 invalid setter values preserve the business and changes.jsonl (9.081946ms)
+✔ C2-06 validator accepts hand-edited settings; raw reader fails closed on invalid files (10.33004ms)
+ℹ tests 6
+ℹ suites 0
+ℹ pass 6
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 141.370383
@@ -0,0 +1,23 @@
+eeca81ab965f9e94f930ee5f51d16f019af6368bc6c3994895e204f7a54ec8d2  packages/bus/src/broker.mjs
+ad3c686a089f67f3c89610937c6fc9b32367cea5d9735125d89bef042082d4e8  packages/bus/src/client.mjs
+36b05dd3119e5929211aa1cc5d45c5043f5a1c34567ddc7cac8f002835d44abe  packages/bus/src/runtime.mjs
+66b26d131a19f4f411686427274936850c1ff0aed11e9b281ae4aadcf4b289fc  packages/bus/src/server.mjs
+cdd0304ec25ef1ad3e31c52502fa46f2c80bd77c8d3c2e13f8ed4b5328f342c9  packages/bus/tests/citation-availability.test.mjs
+2e05074cd9d15d810103658af3858161cee2af78b0a2e1ba910222fab3e84401  packages/bus/tests/citation-guard.test.mjs
+2c7a2102e2e0244876e41b664f4f706baefe3375100b956655551db1230f5da3  packages/bus/tests/citation-helpers.mjs
+9768b6dc5ae078c5cc4f76473097287b74c5bc5853d39e1f57f153e646f861af  packages/bus/tests/citation-runtime.test.mjs
+abaeac64f2c3bf8ba83c9a4488edd9105c4707a6564560c5333d5421445653af  packages/business/src/business.mjs
+3a6044de5d1ca2cc35c5285b460c3e402b4274837e5d88b97f489797f6004903  packages/business/src/organization.mjs
+4d2eb11beaa80175e524af1b95c81e7164990fba1d3e1754f5ba06eee390a14f  packages/business/tests/reply-limits.test.mjs
+a2bb98734bcc2556f8b2168f0faf8a89f7064c3f0aa49feb7d1975d596192f09  packages/cli/README.md
+2f291a71f490f2741edada7a3e3788500f8976a08eb8ab1411f6c5982f778260  packages/cli/src/limits.mjs
+f38af2d46d5f5f6388f599912507b94b87a0bf9dcc2104bb2187c38ee35118d5  packages/cli/tests/reply-limits.test.mjs
+6ad72b4245e0a66e32725941900c1ece64c2e5de2fb73d65c8e042b4f3a691a6  packages/harness/src/runner.mjs
+a5ef1b65230239a7baf6d0e8f2b8a51c0516348c7c4339a55b3f0a1a6ff531ba  packages/harness/tests/citation-runner.test.mjs
+330bc71bf6c7e64d3ddb70440903d2d9acf7878d44a49d7e30c2352ee4c807ec  packages/harness/tests/fixtures/citation-adapter.mjs
+f710d9600a17f6e2989a289cfe84e58f161d86c7306605946ce05fa71b364eb2  packages/library/src/guard.mjs
+c0d630798914e300e461c247340533328e97119e54909c6a9406340e61fed8b7  packages/library/src/index.mjs
+98ef45ed61144aaea44d8aea1ac43082b6d340297e46846d01772da38728e530  packages/library/src/limits.mjs
+7b46f47b5e9d6b554b5d39bce2cd95c4610f5f35b8ab8fdc5a2864b3214be809  packages/library/src/reply-protocol.mjs
+406146ebbce3710f308243b684a1c17e7626c1b65a4468489364317e31537a48  packages/library/tests/guard.test.mjs
+39c8e6c8250a13fa43015fb2c407195e30ee642f729a9f6a644c38b4ea758a72  packages/seat/src/sandbox.mjs
@@ -0,0 +1,35 @@
+✔ C2-06 M11 human replacement works; omitted settings return to defaults (28.334896ms)
+✔ C2-06 M11 agents and tester cannot change settings, including by changing human (22.541196ms)
+✔ C2-06 M11 serialization cannot replace settings after the first fence (8.304131ms)
+✖ C2-06 M11 an unrelated actor cannot appoint itself human and change reply limits (11.712463ms)
+✔ C2-06 invalid setter values preserve the business and changes.jsonl (8.875517ms)
+✔ C2-06 validator accepts hand-edited settings; raw reader fails closed on invalid files (9.882976ms)
+ℹ tests 6
+ℹ suites 0
+ℹ pass 5
+ℹ fail 1
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 140.418146
+
+✖ failing tests:
+
+test at packages/business/tests/reply-limits.test.mjs:52:1
+✖ C2-06 M11 an unrelated actor cannot appoint itself human and change reply limits (11.712463ms)
+  AssertionError [ERR_ASSERTION]: Missing expected exception.
+      at refused (file:///mnt/storage/scratch/tmp/tNoueZ/row217-mutant-_aqjby1c/packages/business/tests/reply-limits.test.mjs:22:10)
+      at TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/tNoueZ/row217-mutant-_aqjby1c/packages/business/tests/reply-limits.test.mjs:54:3)
+      at Test.runInAsyncScope (node:async_hooks:226:14)
+      at Test.run (node:internal/test_runner/test:1402:25)
+      at Test.processPendingSubtests (node:internal/test_runner/test:974:18)
+      at Test.postRun (node:internal/test_runner/test:1542:19)
+      at Test.run (node:internal/test_runner/test:1467:12)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: false,
+    code: 'ERR_ASSERTION',
+    actual: undefined,
+    expected: { code: 'organization-reply-limits-human-only' },
+    operator: 'throws',
+    diff: 'simple'
+  }
@@ -0,0 +1,21 @@
+✔ C2-06 coder send_message guard covers every table refusal; inserts nothing (118.943843ms)
+✔ C2-06 research send_message guard covers every table refusal; inserts nothing (94.790271ms)
+✔ C2-06 stored check carries the file author trailer at an unrelated cited tip (65.901789ms)
+✔ C2-06 supporting cite cannot state canon, including a folder also marked playground (41.908138ms)
+✔ C2-06 supporting file stores supporting scope and its real agent trailer (48.179621ms)
+✔ C2-06 check evidence and insert are atomic when storing evidence fails (41.94764ms)
+✔ C2-06 live limits change both directions; unreadable file keeps checks and exact fixed texts (56.521104ms)
+✔ C2-06 page store is session-local, caps 20 fetches and 200 KiB, drops at disconnect (88.283371ms)
+✔ C2-06 transport passes safe capped guard reason; ordinary refusal envelope is byte-identical (55.47311ms)
+✔ C2-06 non-library businesses retain role.claim shape and unguarded free sends (26.321347ms)
+✔ C2-06 thread messages carry file/last evidence with one read per distinct path (77.5591ms)
+✔ C2-06 guarded request snapshot cannot change between check and insert (24.639839ms)
+✔ C2-06 library.limits.set is human-only and invalid settings leave file and receipts unchanged (42.159103ms)
+ℹ tests 13
+ℹ suites 0
+ℹ pass 13
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 866.146033
@@ -0,0 +1,21 @@
+✔ C2-06 coder send_message guard covers every table refusal; inserts nothing (162.15169ms)
+✔ C2-06 research send_message guard covers every table refusal; inserts nothing (151.110586ms)
+✔ C2-06 stored check carries the file author trailer at an unrelated cited tip (100.984805ms)
+✔ C2-06 supporting cite cannot state canon, including a folder also marked playground (81.389166ms)
+✔ C2-06 supporting file stores supporting scope and its real agent trailer (92.148118ms)
+✔ C2-06 check evidence and insert are atomic when storing evidence fails (78.197117ms)
+✔ C2-06 live limits change both directions; unreadable file keeps checks and exact fixed texts (168.055107ms)
+✔ C2-06 page store is session-local, caps 20 fetches and 200 KiB, drops at disconnect (271.850306ms)
+✔ C2-06 transport passes safe capped guard reason; ordinary refusal envelope is byte-identical (92.491602ms)
+✔ C2-06 non-library businesses retain role.claim shape and unguarded free sends (61.315017ms)
+✔ C2-06 thread messages carry file/last evidence with one read per distinct path (126.633466ms)
+✔ C2-06 guarded request snapshot cannot change between check and insert (61.436932ms)
+✔ C2-06 library.limits.set is human-only and invalid settings leave file and receipts unchanged (118.486786ms)
+ℹ tests 13
+ℹ suites 0
+ℹ pass 13
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 1649.634687
@@ -0,0 +1,23 @@
+eeca81ab965f9e94f930ee5f51d16f019af6368bc6c3994895e204f7a54ec8d2  packages/bus/src/broker.mjs
+ad3c686a089f67f3c89610937c6fc9b32367cea5d9735125d89bef042082d4e8  packages/bus/src/client.mjs
+36b05dd3119e5929211aa1cc5d45c5043f5a1c34567ddc7cac8f002835d44abe  packages/bus/src/runtime.mjs
+66b26d131a19f4f411686427274936850c1ff0aed11e9b281ae4aadcf4b289fc  packages/bus/src/server.mjs
+cdd0304ec25ef1ad3e31c52502fa46f2c80bd77c8d3c2e13f8ed4b5328f342c9  packages/bus/tests/citation-availability.test.mjs
+2e05074cd9d15d810103658af3858161cee2af78b0a2e1ba910222fab3e84401  packages/bus/tests/citation-guard.test.mjs
+2c7a2102e2e0244876e41b664f4f706baefe3375100b956655551db1230f5da3  packages/bus/tests/citation-helpers.mjs
+9768b6dc5ae078c5cc4f76473097287b74c5bc5853d39e1f57f153e646f861af  packages/bus/tests/citation-runtime.test.mjs
+abaeac64f2c3bf8ba83c9a4488edd9105c4707a6564560c5333d5421445653af  packages/business/src/business.mjs
+3a6044de5d1ca2cc35c5285b460c3e402b4274837e5d88b97f489797f6004903  packages/business/src/organization.mjs
+4d2eb11beaa80175e524af1b95c81e7164990fba1d3e1754f5ba06eee390a14f  packages/business/tests/reply-limits.test.mjs
+a2bb98734bcc2556f8b2168f0faf8a89f7064c3f0aa49feb7d1975d596192f09  packages/cli/README.md
+2f291a71f490f2741edada7a3e3788500f8976a08eb8ab1411f6c5982f778260  packages/cli/src/limits.mjs
+f38af2d46d5f5f6388f599912507b94b87a0bf9dcc2104bb2187c38ee35118d5  packages/cli/tests/reply-limits.test.mjs
+6ad72b4245e0a66e32725941900c1ece64c2e5de2fb73d65c8e042b4f3a691a6  packages/harness/src/runner.mjs
+a5ef1b65230239a7baf6d0e8f2b8a51c0516348c7c4339a55b3f0a1a6ff531ba  packages/harness/tests/citation-runner.test.mjs
+330bc71bf6c7e64d3ddb70440903d2d9acf7878d44a49d7e30c2352ee4c807ec  packages/harness/tests/fixtures/citation-adapter.mjs
+f710d9600a17f6e2989a289cfe84e58f161d86c7306605946ce05fa71b364eb2  packages/library/src/guard.mjs
+c0d630798914e300e461c247340533328e97119e54909c6a9406340e61fed8b7  packages/library/src/index.mjs
+98ef45ed61144aaea44d8aea1ac43082b6d340297e46846d01772da38728e530  packages/library/src/limits.mjs
+7b46f47b5e9d6b554b5d39bce2cd95c4610f5f35b8ab8fdc5a2864b3214be809  packages/library/src/reply-protocol.mjs
+406146ebbce3710f308243b684a1c17e7626c1b65a4468489364317e31537a48  packages/library/tests/guard.test.mjs
+39c8e6c8250a13fa43015fb2c407195e30ee642f729a9f6a644c38b4ea758a72  packages/seat/src/sandbox.mjs
@@ -0,0 +1,41 @@
+✔ C2-06 coder send_message guard covers every table refusal; inserts nothing (121.738375ms)
+✔ C2-06 research send_message guard covers every table refusal; inserts nothing (94.199334ms)
+✔ C2-06 stored check carries the file author trailer at an unrelated cited tip (59.307121ms)
+✔ C2-06 supporting cite cannot state canon, including a folder also marked playground (41.252933ms)
+✔ C2-06 supporting file stores supporting scope and its real agent trailer (48.700382ms)
+✖ C2-06 check evidence and insert are atomic when storing evidence fails (42.434516ms)
+✔ C2-06 live limits change both directions; unreadable file keeps checks and exact fixed texts (56.552861ms)
+✔ C2-06 page store is session-local, caps 20 fetches and 200 KiB, drops at disconnect (88.426285ms)
+✔ C2-06 transport passes safe capped guard reason; ordinary refusal envelope is byte-identical (54.352185ms)
+✔ C2-06 non-library businesses retain role.claim shape and unguarded free sends (26.064514ms)
+✔ C2-06 thread messages carry file/last evidence with one read per distinct path (81.176348ms)
+✔ C2-06 guarded request snapshot cannot change between check and insert (25.324993ms)
+✔ C2-06 library.limits.set is human-only and invalid settings leave file and receipts unchanged (42.147552ms)
+ℹ tests 13
+ℹ suites 0
+ℹ pass 12
+ℹ fail 1
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 872.02572
+
+✖ failing tests:
+
+test at packages/bus/tests/citation-guard.test.mjs:71:1
+✖ C2-06 check evidence and insert are atomic when storing evidence fails (42.434516ms)
+  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:
+  
+  1 !== 0
+  
+      at TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/tNoueZ/row217-mutant-etkv3bqf/packages/bus/tests/citation-guard.test.mjs:76:10)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: 1,
+    expected: 0,
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
@@ -0,0 +1,21 @@
+✔ C2-06 coder send_message guard covers every table refusal; inserts nothing (107.311079ms)
+✔ C2-06 research send_message guard covers every table refusal; inserts nothing (92.235404ms)
+✔ C2-06 stored check carries the file author trailer at an unrelated cited tip (59.017311ms)
+✔ C2-06 supporting cite cannot state canon, including a folder also marked playground (41.107066ms)
+✔ C2-06 supporting file stores supporting scope and its real agent trailer (47.696908ms)
+✔ C2-06 check evidence and insert are atomic when storing evidence fails (41.214066ms)
+✔ C2-06 live limits change both directions; unreadable file keeps checks and exact fixed texts (54.665908ms)
+✔ C2-06 page store is session-local, caps 20 fetches and 200 KiB, drops at disconnect (86.001777ms)
+✔ C2-06 transport passes safe capped guard reason; ordinary refusal envelope is byte-identical (55.168942ms)
+✔ C2-06 non-library businesses retain role.claim shape and unguarded free sends (26.744539ms)
+✔ C2-06 thread messages carry file/last evidence with one read per distinct path (79.212003ms)
+✔ C2-06 guarded request snapshot cannot change between check and insert (24.722314ms)
+✔ C2-06 library.limits.set is human-only and invalid settings leave file and receipts unchanged (41.933148ms)
+ℹ tests 13
+ℹ suites 0
+ℹ pass 13
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 841.716764
@@ -0,0 +1,21 @@
+✔ C2-06 coder send_message guard covers every table refusal; inserts nothing (110.781773ms)
+✔ C2-06 research send_message guard covers every table refusal; inserts nothing (91.548051ms)
+✔ C2-06 stored check carries the file author trailer at an unrelated cited tip (57.119223ms)
+✔ C2-06 supporting cite cannot state canon, including a folder also marked playground (40.819326ms)
+✔ C2-06 supporting file stores supporting scope and its real agent trailer (47.776616ms)
+✔ C2-06 check evidence and insert are atomic when storing evidence fails (41.268825ms)
+✔ C2-06 live limits change both directions; unreadable file keeps checks and exact fixed texts (53.375873ms)
+✔ C2-06 page store is session-local, caps 20 fetches and 200 KiB, drops at disconnect (82.822565ms)
+✔ C2-06 transport passes safe capped guard reason; ordinary refusal envelope is byte-identical (54.131458ms)
+✔ C2-06 non-library businesses retain role.claim shape and unguarded free sends (26.350984ms)
+✔ C2-06 thread messages carry file/last evidence with one read per distinct path (80.819295ms)
+✔ C2-06 guarded request snapshot cannot change between check and insert (26.401011ms)
+✔ C2-06 library.limits.set is human-only and invalid settings leave file and receipts unchanged (41.116925ms)
+ℹ tests 13
+ℹ suites 0
+ℹ pass 13
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 839.688386
@@ -0,0 +1,23 @@
+eeca81ab965f9e94f930ee5f51d16f019af6368bc6c3994895e204f7a54ec8d2  packages/bus/src/broker.mjs
+ad3c686a089f67f3c89610937c6fc9b32367cea5d9735125d89bef042082d4e8  packages/bus/src/client.mjs
+36b05dd3119e5929211aa1cc5d45c5043f5a1c34567ddc7cac8f002835d44abe  packages/bus/src/runtime.mjs
+66b26d131a19f4f411686427274936850c1ff0aed11e9b281ae4aadcf4b289fc  packages/bus/src/server.mjs
+cdd0304ec25ef1ad3e31c52502fa46f2c80bd77c8d3c2e13f8ed4b5328f342c9  packages/bus/tests/citation-availability.test.mjs
+2e05074cd9d15d810103658af3858161cee2af78b0a2e1ba910222fab3e84401  packages/bus/tests/citation-guard.test.mjs
+2c7a2102e2e0244876e41b664f4f706baefe3375100b956655551db1230f5da3  packages/bus/tests/citation-helpers.mjs
+9768b6dc5ae078c5cc4f76473097287b74c5bc5853d39e1f57f153e646f861af  packages/bus/tests/citation-runtime.test.mjs
+abaeac64f2c3bf8ba83c9a4488edd9105c4707a6564560c5333d5421445653af  packages/business/src/business.mjs
+3a6044de5d1ca2cc35c5285b460c3e402b4274837e5d88b97f489797f6004903  packages/business/src/organization.mjs
+4d2eb11beaa80175e524af1b95c81e7164990fba1d3e1754f5ba06eee390a14f  packages/business/tests/reply-limits.test.mjs
+a2bb98734bcc2556f8b2168f0faf8a89f7064c3f0aa49feb7d1975d596192f09  packages/cli/README.md
+2f291a71f490f2741edada7a3e3788500f8976a08eb8ab1411f6c5982f778260  packages/cli/src/limits.mjs
+f38af2d46d5f5f6388f599912507b94b87a0bf9dcc2104bb2187c38ee35118d5  packages/cli/tests/reply-limits.test.mjs
+6ad72b4245e0a66e32725941900c1ece64c2e5de2fb73d65c8e042b4f3a691a6  packages/harness/src/runner.mjs
+a5ef1b65230239a7baf6d0e8f2b8a51c0516348c7c4339a55b3f0a1a6ff531ba  packages/harness/tests/citation-runner.test.mjs
+330bc71bf6c7e64d3ddb70440903d2d9acf7878d44a49d7e30c2352ee4c807ec  packages/harness/tests/fixtures/citation-adapter.mjs
+f710d9600a17f6e2989a289cfe84e58f161d86c7306605946ce05fa71b364eb2  packages/library/src/guard.mjs
+c0d630798914e300e461c247340533328e97119e54909c6a9406340e61fed8b7  packages/library/src/index.mjs
+98ef45ed61144aaea44d8aea1ac43082b6d340297e46846d01772da38728e530  packages/library/src/limits.mjs
+7b46f47b5e9d6b554b5d39bce2cd95c4610f5f35b8ab8fdc5a2864b3214be809  packages/library/src/reply-protocol.mjs
+406146ebbce3710f308243b684a1c17e7626c1b65a4468489364317e31537a48  packages/library/tests/guard.test.mjs
+39c8e6c8250a13fa43015fb2c407195e30ee642f729a9f6a644c38b4ea758a72  packages/seat/src/sandbox.mjs
@@ -0,0 +1,47 @@
+✔ C2-06 coder send_message guard covers every table refusal; inserts nothing (109.280676ms)
+✔ C2-06 research send_message guard covers every table refusal; inserts nothing (94.019544ms)
+✔ C2-06 stored check carries the file author trailer at an unrelated cited tip (58.84355ms)
+✔ C2-06 supporting cite cannot state canon, including a folder also marked playground (42.275234ms)
+✔ C2-06 supporting file stores supporting scope and its real agent trailer (48.954969ms)
+✔ C2-06 check evidence and insert are atomic when storing evidence fails (41.628985ms)
+✔ C2-06 live limits change both directions; unreadable file keeps checks and exact fixed texts (54.367118ms)
+✔ C2-06 page store is session-local, caps 20 fetches and 200 KiB, drops at disconnect (85.049228ms)
+✖ C2-06 transport passes safe capped guard reason; ordinary refusal envelope is byte-identical (53.346085ms)
+✔ C2-06 non-library businesses retain role.claim shape and unguarded free sends (26.218776ms)
+✔ C2-06 thread messages carry file/last evidence with one read per distinct path (78.373306ms)
+✔ C2-06 guarded request snapshot cannot change between check and insert (24.622347ms)
+✔ C2-06 library.limits.set is human-only and invalid settings leave file and receipts unchanged (41.8227ms)
+ℹ tests 13
+ℹ suites 0
+ℹ pass 12
+ℹ fail 1
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 840.560306
+
+✖ failing tests:
+
+test at packages/bus/tests/citation-guard.test.mjs:116:1
+✖ C2-06 transport passes safe capped guard reason; ordinary refusal envelope is byte-identical (53.346085ms)
+  AssertionError [ERR_ASSERTION]: The validation function is expected to return "true". Received false
+  
+  Caught error:
+  
+  Error: citation-invalid
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/tNoueZ/row217-mutant-db3vgbd1/packages/bus/tests/citation-guard.test.mjs:121:3)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: Error: citation-invalid
+        at Socket.<anonymous> (file:///mnt/storage/scratch/tmp/tNoueZ/row217-mutant-db3vgbd1/packages/bus/src/client.mjs:45:17)
+        at Socket.emit (node:events:514:20)
+        at addChunk (node:internal/streams/readable:575:12)
+        at readableAddChunkPushByteMode (node:internal/streams/readable:526:3)
+        at Readable.push (node:internal/streams/readable:406:5)
+        at Pipe.onStreamRead (node:internal/stream_base_commons:189:23),
+    operator: 'rejects',
+    diff: 'simple'
+  }
@@ -0,0 +1,11 @@
+✔ C2-06 held library lock gives the agent citation-unavailable and its retry reason (5143.590096ms)
+✔ C2-06 malformed sync state is availability failure, never a fabricated invalid cite (33.560438ms)
+✔ C2-06 no mirror or freshly initialized empty mirror still means no served citation (31.849587ms)
+ℹ tests 3
+ℹ suites 0
+ℹ pass 3
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 5290.343804
@@ -0,0 +1,11 @@
+✔ C2-06 held library lock gives the agent citation-unavailable and its retry reason (5131.56715ms)
+✔ C2-06 malformed sync state is availability failure, never a fabricated invalid cite (32.560014ms)
+✔ C2-06 no mirror or freshly initialized empty mirror still means no served citation (31.756895ms)
+ℹ tests 3
+ℹ suites 0
+ℹ pass 3
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 5271.350019
@@ -0,0 +1,23 @@
+eeca81ab965f9e94f930ee5f51d16f019af6368bc6c3994895e204f7a54ec8d2  packages/bus/src/broker.mjs
+ad3c686a089f67f3c89610937c6fc9b32367cea5d9735125d89bef042082d4e8  packages/bus/src/client.mjs
+36b05dd3119e5929211aa1cc5d45c5043f5a1c34567ddc7cac8f002835d44abe  packages/bus/src/runtime.mjs
+66b26d131a19f4f411686427274936850c1ff0aed11e9b281ae4aadcf4b289fc  packages/bus/src/server.mjs
+cdd0304ec25ef1ad3e31c52502fa46f2c80bd77c8d3c2e13f8ed4b5328f342c9  packages/bus/tests/citation-availability.test.mjs
+2e05074cd9d15d810103658af3858161cee2af78b0a2e1ba910222fab3e84401  packages/bus/tests/citation-guard.test.mjs
+2c7a2102e2e0244876e41b664f4f706baefe3375100b956655551db1230f5da3  packages/bus/tests/citation-helpers.mjs
+9768b6dc5ae078c5cc4f76473097287b74c5bc5853d39e1f57f153e646f861af  packages/bus/tests/citation-runtime.test.mjs
+abaeac64f2c3bf8ba83c9a4488edd9105c4707a6564560c5333d5421445653af  packages/business/src/business.mjs
+3a6044de5d1ca2cc35c5285b460c3e402b4274837e5d88b97f489797f6004903  packages/business/src/organization.mjs
+4d2eb11beaa80175e524af1b95c81e7164990fba1d3e1754f5ba06eee390a14f  packages/business/tests/reply-limits.test.mjs
+a2bb98734bcc2556f8b2168f0faf8a89f7064c3f0aa49feb7d1975d596192f09  packages/cli/README.md
+2f291a71f490f2741edada7a3e3788500f8976a08eb8ab1411f6c5982f778260  packages/cli/src/limits.mjs
+f38af2d46d5f5f6388f599912507b94b87a0bf9dcc2104bb2187c38ee35118d5  packages/cli/tests/reply-limits.test.mjs
+6ad72b4245e0a66e32725941900c1ece64c2e5de2fb73d65c8e042b4f3a691a6  packages/harness/src/runner.mjs
+a5ef1b65230239a7baf6d0e8f2b8a51c0516348c7c4339a55b3f0a1a6ff531ba  packages/harness/tests/citation-runner.test.mjs
+330bc71bf6c7e64d3ddb70440903d2d9acf7878d44a49d7e30c2352ee4c807ec  packages/harness/tests/fixtures/citation-adapter.mjs
+f710d9600a17f6e2989a289cfe84e58f161d86c7306605946ce05fa71b364eb2  packages/library/src/guard.mjs
+c0d630798914e300e461c247340533328e97119e54909c6a9406340e61fed8b7  packages/library/src/index.mjs
+98ef45ed61144aaea44d8aea1ac43082b6d340297e46846d01772da38728e530  packages/library/src/limits.mjs
+7b46f47b5e9d6b554b5d39bce2cd95c4610f5f35b8ab8fdc5a2864b3214be809  packages/library/src/reply-protocol.mjs
+406146ebbce3710f308243b684a1c17e7626c1b65a4468489364317e31537a48  packages/library/tests/guard.test.mjs
+39c8e6c8250a13fa43015fb2c407195e30ee642f729a9f6a644c38b4ea758a72  packages/seat/src/sandbox.mjs
@@ -0,0 +1,70 @@
+✖ C2-06 held library lock gives the agent citation-unavailable and its retry reason (5104.72293ms)
+✖ C2-06 malformed sync state is availability failure, never a fabricated invalid cite (35.117198ms)
+✔ C2-06 no mirror or freshly initialized empty mirror still means no served citation (31.286656ms)
+ℹ tests 3
+ℹ suites 0
+ℹ pass 1
+ℹ fail 2
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 5250.151124
+
+✖ failing tests:
+
+test at packages/bus/tests/citation-availability.test.mjs:13:1
+✖ C2-06 held library lock gives the agent citation-unavailable and its retry reason (5104.72293ms)
+  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:
+  + actual - expected
+  
+  + 'citation-invalid'
+  - 'citation-unavailable'
+              ^
+  
+      at Object.<anonymous> (file:///mnt/storage/scratch/tmp/tNoueZ/row217-mutant-xglaeqeb/packages/bus/tests/citation-availability.test.mjs:29:14)
+      at expectedException (node:assert:547:17)
+      at expectsError (node:assert:672:21)
+      at strict.rejects (node:assert:738:3)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async file:///mnt/storage/scratch/tmp/tNoueZ/row217-mutant-xglaeqeb/packages/bus/tests/citation-availability.test.mjs:28:5
+      at async withLibraryLock (file:///mnt/storage/scratch/tmp/tNoueZ/row217-mutant-xglaeqeb/packages/library/src/mirror.mjs:171:18)
+      at async TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/tNoueZ/row217-mutant-xglaeqeb/packages/bus/tests/citation-availability.test.mjs:27:3)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: 'citation-invalid',
+    expected: 'citation-unavailable',
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
+
+test at packages/bus/tests/citation-availability.test.mjs:40:1
+✖ C2-06 malformed sync state is availability failure, never a fabricated invalid cite (35.117198ms)
+  AssertionError [ERR_ASSERTION]: Expected values to be strictly deep-equal:
+  + actual - expected
+  
+    Comparison {
+  +   code: 'citation-invalid'
+  -   code: 'citation-unavailable'
+    }
+  
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/tNoueZ/row217-mutant-xglaeqeb/packages/bus/tests/citation-availability.test.mjs:45:3)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: Error: citation-invalid: citation 1 (Book One/Characters/Mara Vell.md) isn't an indexed file at a commit reachable from the served commit
+        at refuse (file:///mnt/storage/scratch/tmp/tNoueZ/row217-mutant-xglaeqeb/packages/library/src/guard.mjs:24:42)
+        at checkReply (file:///mnt/storage/scratch/tmp/tNoueZ/row217-mutant-xglaeqeb/packages/library/src/guard.mjs:80:25)
+        at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+        at async waitForActual (node:assert:615:5)
+        at async strict.rejects (node:assert:738:25)
+        at async TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/tNoueZ/row217-mutant-xglaeqeb/packages/bus/tests/citation-availability.test.mjs:45:3)
+        at async Test.run (node:internal/test_runner/test:1409:7)
+        at async Test.processPendingSubtests (node:internal/test_runner/test:974:7),
+    expected: { code: 'citation-unavailable' },
+    operator: 'rejects',
+    diff: 'simple'
+  }
@@ -0,0 +1,5 @@
+M1-writer-fence: killed (control green, mutant exit 1, hashes restored, restored green)
+M2-incoming-human: killed (control green, mutant exit 1, hashes restored, restored green)
+M3-split-check-transaction: killed (control green, mutant exit 1, hashes restored, restored green)
+M5-hide-library-unavailable: killed (control green, mutant exit 1, hashes restored, restored green)
+M4-drop-client-reason: killed (control green, mutant exit 1, hashes restored, restored green)
@@ -0,0 +1,3 @@
+npm warn deprecated [email protected]: Use your platform's native DOMException instead
+
+added 128 packages in 2s
@@ -0,0 +1,2 @@
+
+added 2 packages in 205ms
@@ -0,0 +1,9 @@
+✔ C2-06 runtime reads changed and unreadable reply limits without restarting (118.083931ms)
+ℹ tests 1
+ℹ suites 0
+ℹ pass 1
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 227.817729
@@ -0,0 +1,234 @@
+npm notice run @mosaic/[email protected] test
+npm notice run node --test tests/
+✔ C2-04: ensureCheckouts skips a library before a real clone and leaves no books path (66.766764ms)
+✔ a first launch clones the root at its branch, with the root's path as origin (47.521672ms)
+✔ the clone is not at its place until git clone has finished (31.999361ms)
+✔ a later launch fast-forwards a clean clone after a commit to the root, then finds it current (87.563022ms)
+✔ a clone ahead of the root keeps its commits and counts as current (53.447311ms)
+▶ a dirty clone and one on another branch are fetched, and nothing but refs/remotes moves
+  ✔ a modified file (53.258759ms)
+  ✔ an untracked file (52.286642ms)
+  ✔ a staged file (55.132154ms)
+  ✔ another branch (53.48074ms)
+  ✔ a detached HEAD (54.504119ms)
+✔ a dirty clone and one on another branch are fetched, and nothing but refs/remotes moves (269.989404ms)
+✔ a diverged clone gets the fetch into refs/remotes and is kept, not-fast-forward (53.461206ms)
+▶ a clone kept before the branch check, or for a failed status, gets no fetch
+  ✔ not-a-clone (27.485728ms)
+  ✔ hooks-present (31.094616ms)
+  ✔ submodule (38.060187ms)
+  ✔ config-changed (36.195255ms)
+  ✔ root-unreadable (36.385271ms)
+  ✔ root-detached (39.627905ms)
+  ✔ status-failed, on the root's branch and clean (42.704327ms)
+  ✔ status-failed, dirty (44.881211ms)
+✔ a clone kept before the branch check, or for a failed status, gets no fetch (297.899967ms)
+✔ a dirty clone whose fetch fails is kept, fetch-failed, exactly as it was (47.755395ms)
+✔ every git call the host makes, for a new clone and an existing one, carries maintenance.auto=false and gc.auto=0 (57.603139ms)
+✔ a clone with loose objects enough for gc --auto gets no maintenance or gc from the fetch and the merge (89.466874ms)
+▶ a clone with user.name or user.email in its config is kept, and git runs nothing in it
+  ✔ user.name (28.628791ms)
+  ✔ user.email (30.423895ms)
+✔ a clone with user.name or user.email in its config is kept, and git runs nothing in it (59.627127ms)
+✔ a commit git can't read after the fast-forward is null (57.084762ms)
+✔ a new clone whose commit can't be read refuses the launch and leaves nothing behind (21.081119ms)
+▶ a clone the session rigged is kept, and git runs nothing and writes nothing outside it
+  ✔ core.fsmonitor (39.453854ms)
+  ✔ core.hooksPath (34.616469ms)
+  ✔ a hook file (35.090442ms)
+  ✔ include.path (34.527401ms)
+  ✔ includeIf (35.13899ms)
+  ✔ a filter driver (34.195382ms)
+  ✔ origin moved (37.391948ms)
+  ✔ a second origin url (35.731817ms)
+  ✔ the origin url twice, both the root (33.999145ms)
+  ✔ an ext:: origin (31.652835ms)
+  ✔ a branch tracking another remote (33.3147ms)
+  ✔ a branch merging a tag (33.72502ms)
+  ✔ a fetch line onto local branches (34.126505ms)
+  ✔ no origin (32.973963ms)
+  ✔ a config file over the size cap (30.967833ms)
+  ✔ config a symlink to /dev/zero (31.51332ms)
+  ✔ the clone a symlink to the bait (32.976685ms)
+  ✔ the clone a file (39.528201ms)
+  ✔ the clone a plain directory (32.193931ms)
+  ✔ .git a gitdir: file (31.732811ms)
+  ✔ .git a symlink (36.499471ms)
+  ✔ .git/logs a symlink (34.327705ms)
+  ✔ .git/refs/heads a symlink (30.308688ms)
+  ✔ .git/objects a symlink (28.895664ms)
+  ✔ a reflog hard-linked to a file outside (28.33422ms)
+  ✔ HEAD a fifo (29.791372ms)
+  ✔ a commondir file (30.182546ms)
+  ✔ an alternates file (30.414863ms)
+  ✔ a gitlink staged, no .gitmodules (42.003032ms)
+  ✔ a gitlink and .gitmodules staged (47.484582ms)
+  ✔ a gitlink to a repository with its own gitlink (53.625899ms)
+  ✔ a gitlink and .gitmodules committed (45.90129ms)
+  ✔ a gitlink and submodule.active in config (43.005636ms)
+  ✔ a .git/modules with no gitlink (31.240083ms)
+✔ a clone the session rigged is kept, and git runs nothing and writes nothing outside it (1201.693467ms)
+▶ a root that can't be cloned refuses with the project id and leaves nothing behind
+  ✔ missing (9.543898ms)
+  ✔ not a repository (9.15995ms)
+  ✔ a plain directory inside another repository (13.291966ms)
+  ✔ unreadable (10.409599ms)
+  ✔ on no branch (11.130486ms)
+  ✔ missing an object (14.936384ms)
+✔ a root that can't be cloned refuses with the project id and leaves nothing behind (69.273079ms)
+✔ a clone whose root is on no branch, or gone, is kept and named (28.705151ms)
+✔ no credential or forge remote of the root reaches a clone (46.990023ms)
+✔ every project in the business file gets its own clone at its own branch (32.655381ms)
+✔ a clone past its time gets SIGTERM and refuses the launch, with nothing left in the workspace (514.003804ms)
+✔ a clone that ignores SIGTERM gets SIGKILL once the grace period is over (1016.843724ms)
+✔ a timeout signals git's process group, so a process git started dies with it (515.051887ms)
+✔ once a signalled git has closed, its group gets SIGKILL, so a process that ignored SIGTERM dies too (514.556145ms)
+✔ the budget is the setting's whole number of bytes from 1 MiB to 1 GiB, and the default for anything else (1.567727ms)
+✔ a stream past the default budget is not-collected with a lower bound, and a later collection catches up (65.101994ms)
+✔ a budget smaller than the streams counts over several collections, once each, and is known when it catches up (2.599724ms)
+✔ a line split across reads counts once (9.33078ms)
+✔ Claude history from before the ledger makes the first Pi collection harness-unsupported, for good (1.440992ms)
+✔ an empty claude-projects/ is no Claude history, and one filled after the ledger exists isn't checked (1.428192ms)
+✔ a claude-projects/ that can't be read records nothing, and the next collection checks again (1.330216ms)
+✔ the stream cap is the setting's whole number from 32 to 65536, and the default for anything else (0.16791ms)
+✔ more streams than the cap is not-collected, with cursors only for the streams opened, and a larger cap catches up (2.344595ms)
+✔ the default cap opens STREAMS streams and writes no more cursor lines than that (52.65919ms)
+✔ row 307 the known ledger row 270 wrote reads the same count (4.720302ms)
+✔ row 307 after the known ledger, one collection through pi's module answers the next count (3.122956ms)
+✔ row 307 the store-incomplete ledger row 270 wrote reads the same count (1.172174ms)
+✔ row 307 after the store-incomplete ledger, one collection through pi's module answers the next count (1.473641ms)
+✔ row 307 the store-unreadable ledger row 270 wrote reads the same count (1.233218ms)
+✔ row 307 after the store-unreadable ledger, one collection through pi's module answers the next count (1.478165ms)
+✔ row 307 the not-collected ledger row 270 wrote reads the same count (1.059533ms)
+✔ row 307 after the not-collected ledger, one collection through pi's module answers the next count (2.381792ms)
+✔ row 307 the claude-code ledger row 270 wrote reads the same count (1.16785ms)
+✔ row 307 after the claude-code ledger, one collection through pi's module answers the next count (1.422304ms)
+✔ row 307 the claude-history ledger row 270 wrote reads the same count (2.943093ms)
+✔ row 307 after the claude-history ledger, one collection through pi's module answers the next count (1.5333ms)
+✔ row 307 the torn ledger row 270 wrote reads the same count (1.006203ms)
+✔ row 307 after the torn ledger, one collection through pi's module answers the next count (2.284545ms)
+✔ row 307 core refuses an answer outside the contract and appends nothing (8.468181ms)
+✔ row 307 the module gets the store's two native directories, a copy of the cursors, the budget, the cap and first (2.320411ms)
+✔ an empty store, a store with no compaction and a failed start count 0, known (7.138038ms)
+✔ one and three completed compactions (2.441636ms)
+✔ a compaction copied into a branched stream counts once, under the stream it was first seen in (3.056ms)
+✔ one collection over two streams holding the same copy counts it once and writes it once (1.831681ms)
+✔ the same entry id at another time in another stream is another compaction (1.582065ms)
+✔ resume: each collection reads past its cursor and writes a key once (2.114301ms)
+✔ a partial trailing line waits for its newline (1.624959ms)
+✔ a missing ledger is not-collected and an unreadable one store-unreadable, never 0 (1.322325ms)
+✔ a symlinked ledger is store-unreadable and is not written through (1.293154ms)
+✔ a torn last ledger line makes the count unknown, a lower bound, and stays so (2.167108ms)
+✔ a bad ledger line in the middle makes the count unknown (3.331232ms)
+▶ a stream that shrank, changed under its cursor or went away is store-incomplete for good
+  ✔ shrink (2.038847ms)
+  ✔ rewrite (1.477185ms)
+  ✔ remove (1.974024ms)
+✔ a stream that shrank, changed under its cursor or went away is store-incomplete for good (6.254361ms)
+✔ a stream that isn't a regular file or a Pi session is store-unreadable, and that passes (1.252704ms)
+✔ a first line that isn't a session header is store-unreadable (1.120253ms)
+✔ a Claude run is harness-unsupported, and stays so after a Pi run (1.273691ms)
+✔ storeDir is the store sessionStore makes, without making it (1.538256ms)
+✔ the ledger is under no sandbox mount (5.456112ms)
+✔ rootHits: a top-level file, a new top-level directory, src/ and v1/ are the root; paths under known directories aren't (1.861197ms)
+✔ gateEnv keeps the named variables that are strings and drops everything else (0.310846ms)
+✔ isMosaicStack: a checkout whose HEAD descends from the root commit and has node_modules; nothing else (76.743834ms)
+✔ gateSteps: each package with tests but queue in name order, then each scripts/test-*.sh (2.377262ms)
+✔ runGate: every step passes, each with its own log and a summary line, under the environment it was given (211.160741ms)
+✔ runGate: the first failing step stops the gate and names its log (269.569796ms)
+✔ runGate: an abort stops the running step and everything in its group, and runs nothing after it (185.986993ms)
+✔ the CLI: root-file prints the hits and exits 2, or exits 0; gate exits 0, or 2 with the step and its log; anything else is usage (661.443234ms)
+✔ T3: publish pushes the work commit by oid to <user>/<branch> on the fork, with the token only through the helper (318.365034ms)
+✔ T3: the token is never in git's argv, the fork URL included; it reaches git on fd 3 only (157.63501ms)
+✔ T3: a moved fork branch refuses non-fast-forward; no + and no force (173.077055ms)
+✔ T3: D9a: an empty fork and an unrelated fork refuse remote-unrelated; a missing fork refuses fork-unavailable (379.595919ms)
+✔ T3: a fork past main refuses remote-unrelated until root catches up (152.254688ms)
+✔ T3: a wrong token refuses fork-unavailable; git's stderr isn't in the refusal (102.972548ms)
+✔ T3: a 302 is not followed: fork-unavailable, and the target sees no request (113.352932ms)
+✔ T3: the helper answers only the fork's host and port: a fork on another port gets no token (95.099891ms)
+✔ T3: a fork that echoes the token refuses credential-leak (131.28193ms)
+✔ T3: no tls parameter, no trust: the scratch CA reaches git only through it (91.935601ms)
+✔ D9 steps 3 and 4: ref-moved and identity-mismatch refuse before any request (143.070058ms)
+✔ publishRemote refuses a fork, user or destination that isn't shell- and ref-safe before any git (88.646013ms)
+✔ RUNNER_FILES is exactly what the runner and the harness sources it starts import (7.032234ms)
+✔ sandboxProblem names a missing bwrap and a bwrap that fails (15.78888ms)
+✔ every bind says why; the bundle and session file stay read-only over the run directory (2.196421ms)
+✔ row 65 a harness module's mounts bind read-only after the adapter, each with the module's reason (2.143393ms)
+✔ REQ-THREAD-2 a thread store binds its session directory and Claude transcripts, and nothing more (1.644658ms)
+✔ the host's git socket is bound only when given, read-only and before the writable binds (1.090126ms)
+✔ the git identity is the instance's, at <instance>@<business>.mosaic.invalid, and sandboxArgv refuses without it (1.690862ms)
+✔ a confined session's shell reaches its own workspace and run directory and nothing of the founder's or another session's (2106.854649ms)
+✔ a bind that exposes a stand-in, or a missing workspace bind, fails the matching check (2924.249794ms)
+✔ a confined session that runs tester-cli.mjs is refused as tester, and the same shim outside the sandbox binds (300.518853ms)
+✔ resolveSeat: by name under --repo resolves the repo layout (2.419588ms)
+✔ resolveSeat: by path resolves the fleet layout (0.765582ms)
+✔ resolveSeat: refusals for missing dir, missing launch.sh, non-executable launch.sh, invalid name, and unknown layout (1.626754ms)
+✔ tmuxContext: outside tmux, default socket, custom socket, and exec failure (1.236572ms)
+✔ makeRegistration produces a record that validates; each shape violation throws SeatError (1.593741ms)
+✔ writeRegistration/readRegistration: round trip, permissions, absence, and malformed records (2.34318ms)
+✔ updateTask: changes task, taskSetBy and updatedAt only, and refuses appropriately (2.203796ms)
+✔ CLI launch: registers, execs the fake launch script, and passes args through (66.404825ms)
+✔ CLI launch: --harness lands in the record (50.392752ms)
+✔ CLI launch: the launch script's own exit code passes through (46.659659ms)
+✔ CLI launch: relaunching a seat rewrites the one registration record (89.26575ms)
+✔ CLI launch: omitting --task records an empty string, not null (39.318048ms)
+✔ CLI seat task: updates only the task after a launch, and refuses on an unlaunched seat (96.331713ms)
+✔ CLI refusals: no args, unknown flag, missing config, already-registered env, and exec failure (164.27632ms)
+✔ samePath: equal paths, symlinked dirs, distinct dirs, and non-strings (0.422092ms)
+✔ resolveSetBy: explicit --by wins over the environment; absent or empty environment gives unknown; invalid explicit or environment values refuse with exit 4 (0.590318ms)
+✔ validateRegistration/readRegistration: taskSetBy is optional; a record without it (written before #1511) still loads unchanged; an invalid one is refused; the version does not change (0.734057ms)
+✔ updateTask: records setBy, preserves startedAt and every unrelated field, upgrades an old record in place only when the task is set, and replaces a previous attribution (0.906133ms)
+✔ CLI seat task: --by beats MOSAIC_AGENT_NAME, the environment beats nothing, empty environment is unknown, invalid --by or environment refuses with exit 4 and leaves the record byte for byte (330.90649ms)
+✔ REQ-THREAD-2 sessionStore: a legacy session keeps the thread's store, any other gets sessions/<s>/, each segment checked first (5.360486ms)
+✔ REQ-THREAD-2 sessionStore refuses legacy-store-unmapped for a thread whose old store no legacy session maps (1.608175ms)
+✔ REQ-THREAD-2 sessionWorkspace: private directories per session, unsafe segments and overlaps refused (3.523108ms)
+✔ REQ-THREAD-2 lockSessionWorkspace: one writer; a live host or run holds it, a stale lock is taken over, an unreadable one holds (15.189866ms)
+✔ REQ-THREAD-2 sessions.json v2: entries carry session and workspace, running() keys on the session, a v1 file still reads (1.889362ms)
+✔ REQ-LIMIT-1: family substring matching is no longer exported (1.378459ms)
+✔ sessionEnv passes only the allowlist, the repo's bin on PATH, and the run id (1.063207ms)
+✔ ZAI_API_KEY passes the session allowlist, and ZAI_TOKEN does not (0.239826ms)
+✔ sessionExit gives a runner's signal death back as the signal; a session credential is one whole set of nonempty variables (0.405172ms)
+✔ newRun: short ids, 0700 directories, and a refusal when the socket path won't fit (2.727102ms)
+✔ session file and launch log: 0600, the session file written once (2.111664ms)
+✔ endReason maps the runner's exit codes; a signal is killed (0.220582ms)
+✔ Registry mirrors to sessions.json; readSessions marks live entries; bad files refuse (2.216711ms)
+✔ a read-only Registry never writes sessions.json, refuses add() and leaves the file on remove() (2.154331ms)
+✔ REQ-THREAD-1 Registry.running keys a thread run by business, instance and thread (1.027065ms)
+✔ REQ-THREAD-2 REQ-LAUNCH-1 threadStore checks both segments before the join and refuses an unsafe directory (2.628544ms)
+✔ stopSession refuses an unknown run, reports a stale one, and won't signal a pid that isn't a runner (1.552738ms)
+✔ a session runs in its sandbox as pid 1 of its namespace, claims, answers, and stops on mosaic stop (293.088316ms)
+✔ workRef and validBranch take only what a ref name can hold (2.280976ms)
+✔ a push lands as the task's work ref, a fast-forward lands after it, and main is the root's (187.443563ms)
+✔ a rewritten branch refuses non-fast-forward and the work ref stays (124.192671ms)
+✔ a branch with no history in common with main refuses unrelated-history (60.579235ms)
+✔ a bundle that needs commits the working repository lacks refuses missing-prerequisite (51.079109ms)
+✔ the root is fetched again before each push and main follows it, so a clone of a newer root pushes (129.47937ms)
+✔ a root moved back after the clone leaves the push's base unknown: missing-prerequisite (78.854404ms)
+✔ a commit with a broken object refuses invalid-bundle, and only because fsck is on (86.468293ms)
+✔ only a v2 bundle with the named branch is read (64.914471ms)
+✔ a branch named main, or named for another task, moves only this task's work ref (102.371349ms)
+✔ a record that throws moves the work ref back, or removes a new one (141.771502ms)
+✔ a work ref that can't go back refuses rollback-failed, naming the ref and the commit (362.776758ms)
+✔ a root that can't be read refuses root-unreadable (28.853641ms)
+✔ a git past its time gets SIGTERM, leaves no ref lock, and the next push lands (2132.860162ms)
+✔ a git that ignores SIGTERM gets SIGKILL once the grace period is over (1025.936026ms)
+✔ a working repository path that isn't a directory refuses (23.030329ms)
+✔ review bundles a pushed commit as refs/mosaic/review, leaving out what the reviewer has (120.899663ms)
+✔ review of a project with no working repository refuses unknown-commit (14.031146ms)
+✔ the runner's git tools hold the host's limits and branch rule (1.219295ms)
+✔ a reseed moves root but leaves a landed main, and main forwards once root contains it (184.469774ms)
+✔ after a landing, a push built on the root still lands and main stays where the landing put it (126.530409ms)
+✔ once the root shares no history with a landed main, a push is checked against main, not the root (179.004093ms)
+✔ a landing squashes the reviewed diff onto main as the bus host and moves main only at finish (105.224989ms)
+✔ a landing refuses ref-moved, base-conflict and root-file before it makes a commit (308.132399ms)
+✔ a landing whose applied diff isn't the reviewed one refuses patch-drift and leaves no worktree (121.415385ms)
+✔ finish refuses base-moved when main moved, and a record that throws moves main back (242.643351ms)
+✔ halted push receipt rolls back only its unrecorded ref and cleans temporary refs (198.696687ms)
+ℹ tests 218
+ℹ suites 0
+ℹ pass 218
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 6318.071226
@@ -0,0 +1,202 @@
+{
+  "base": "e0c6142f3",
+  "testedRevision": "2d274a5b6c35c3e74b07206ffd724a6579bb149d",
+  "tmpdir": "/mnt/storage/scratch/tmp/tNoueZ",
+  "wholeSuites": {
+    "library": {
+      "tests": 142,
+      "pass": 142,
+      "fail": 0,
+      "cancelled": 0,
+      "skipped": 0
+    },
+    "business": {
+      "tests": 270,
+      "pass": 270,
+      "fail": 0,
+      "cancelled": 0,
+      "skipped": 0
+    },
+    "bus": {
+      "tests": 974,
+      "pass": 974,
+      "fail": 0,
+      "cancelled": 0,
+      "skipped": 0
+    },
+    "cli": {
+      "tests": 988,
+      "pass": 988,
+      "fail": 0,
+      "cancelled": 0,
+      "skipped": 0
+    },
+    "harness": {
+      "tests": 172,
+      "pass": 172,
+      "fail": 0,
+      "cancelled": 0,
+      "skipped": 0
+    },
+    "seat": {
+      "tests": 218,
+      "pass": 218,
+      "fail": 0,
+      "cancelled": 0,
+      "skipped": 0
+    }
+  },
+  "touched": {
+    "touched-first": {
+      "tests": 57,
+      "pass": 56,
+      "fail": 1,
+      "cancelled": 0,
+      "skipped": 0
+    },
+    "touched-rerun": {
+      "tests": 57,
+      "pass": 57,
+      "fail": 0,
+      "cancelled": 0,
+      "skipped": 0
+    },
+    "availability-green": {
+      "tests": 3,
+      "pass": 3,
+      "fail": 0,
+      "cancelled": 0,
+      "skipped": 0
+    },
+    "runtime-fixture-retry": {
+      "tests": 1,
+      "pass": 1,
+      "fail": 0,
+      "cancelled": 0,
+      "skipped": 0
+    }
+  },
+  "mutants": {
+    "M1-writer-fence": {
+      "control": {
+        "tests": 6,
+        "pass": 6,
+        "fail": 0,
+        "cancelled": 0,
+        "skipped": 0
+      },
+      "negative": {
+        "tests": 6,
+        "pass": 3,
+        "fail": 3,
+        "cancelled": 0,
+        "skipped": 0
+      },
+      "restored": {
+        "tests": 6,
+        "pass": 6,
+        "fail": 0,
+        "cancelled": 0,
+        "skipped": 0
+      },
+      "productHashesRestored": true
+    },
+    "M2-incoming-human": {
+      "control": {
+        "tests": 6,
+        "pass": 6,
+        "fail": 0,
+        "cancelled": 0,
+        "skipped": 0
+      },
+      "negative": {
+        "tests": 6,
+        "pass": 5,
+        "fail": 1,
+        "cancelled": 0,
+        "skipped": 0
+      },
+      "restored": {
+        "tests": 6,
+        "pass": 6,
+        "fail": 0,
+        "cancelled": 0,
+        "skipped": 0
+      },
+      "productHashesRestored": true
+    },
+    "M3-split-check-transaction": {
+      "control": {
+        "tests": 13,
+        "pass": 13,
+        "fail": 0,
+        "cancelled": 0,
+        "skipped": 0
+      },
+      "negative": {
+        "tests": 13,
+        "pass": 12,
+        "fail": 1,
+        "cancelled": 0,
+        "skipped": 0
+      },
+      "restored": {
+        "tests": 13,
+        "pass": 13,
+        "fail": 0,
+        "cancelled": 0,
+        "skipped": 0
+      },
+      "productHashesRestored": true
+    },
+    "M4-drop-client-reason": {
+      "control": {
+        "tests": 13,
+        "pass": 13,
+        "fail": 0,
+        "cancelled": 0,
+        "skipped": 0
+      },
+      "negative": {
+        "tests": 13,
+        "pass": 12,
+        "fail": 1,
+        "cancelled": 0,
+        "skipped": 0
+      },
+      "restored": {
+        "tests": 13,
+        "pass": 13,
+        "fail": 0,
+        "cancelled": 0,
+        "skipped": 0
+      },
+      "productHashesRestored": true
+    },
+    "M5-hide-library-unavailable": {
+      "control": {
+        "tests": 3,
+        "pass": 3,
+        "fail": 0,
+        "cancelled": 0,
+        "skipped": 0
+      },
+      "negative": {
+        "tests": 3,
+        "pass": 1,
+        "fail": 2,
+        "cancelled": 0,
+        "skipped": 0
+      },
+      "restored": {
+        "tests": 3,
+        "pass": 3,
+        "fail": 0,
+        "cancelled": 0,
+        "skipped": 0
+      },
+      "productHashesRestored": true
+    }
+  },
+  "totalWholeSuiteTests": 2764
+}
@@ -0,0 +1,9 @@
+library: 142/142 pass; fail=0 skipped=0 cancelled=0
+business: 270/270 pass; fail=0 skipped=0 cancelled=0
+bus: 974/974 pass; fail=0 skipped=0 cancelled=0
+cli: 988/988 pass; fail=0 skipped=0 cancelled=0
+harness: 172/172 pass; fail=0 skipped=0 cancelled=0
+seat: 218/218 pass; fail=0 skipped=0 cancelled=0
+Touched rerun 57/57; first run 56/57, new runtime fixture corrected.
+M1-M5 killed; each control/restored run green, hashes restored.
+No old test failed or was edited. scripts/test-*.sh left to Sage at landing.
@@ -0,0 +1,80 @@
+✔ C2-06 held library lock gives the agent citation-unavailable and its retry reason (5129.213097ms)
+✔ C2-06 malformed sync state is availability failure, never a fabricated invalid cite (32.312603ms)
+✔ C2-06 no mirror or freshly initialized empty mirror still means no served citation (31.769445ms)
+✔ C2-06 coder send_message guard covers every table refusal; inserts nothing (104.132156ms)
+✔ C2-06 research send_message guard covers every table refusal; inserts nothing (90.030314ms)
+✔ C2-06 stored check carries the file author trailer at an unrelated cited tip (57.202238ms)
+✔ C2-06 supporting cite cannot state canon, including a folder also marked playground (41.82067ms)
+✔ C2-06 supporting file stores supporting scope and its real agent trailer (47.52786ms)
+✔ C2-06 check evidence and insert are atomic when storing evidence fails (45.049883ms)
+✔ C2-06 live limits change both directions; unreadable file keeps checks and exact fixed texts (54.4217ms)
+✔ C2-06 page store is session-local, caps 20 fetches and 200 KiB, drops at disconnect (86.893454ms)
+✔ C2-06 transport passes safe capped guard reason; ordinary refusal envelope is byte-identical (55.019525ms)
+✔ C2-06 non-library businesses retain role.claim shape and unguarded free sends (26.383322ms)
+✔ C2-06 thread messages carry file/last evidence with one read per distinct path (76.778515ms)
+✔ C2-06 guarded request snapshot cannot change between check and insert (24.114008ms)
+✔ C2-06 library.limits.set is human-only and invalid settings leave file and receipts unchanged (47.161109ms)
+✖ C2-06 runtime reads changed and unreadable reply limits without restarting (78.402278ms)
+✔ C2-06 M11 human replacement works; omitted settings return to defaults (26.436831ms)
+✔ C2-06 M11 agents and tester cannot change settings, including by changing human (21.452407ms)
+✔ C2-06 M11 serialization cannot replace settings after the first fence (8.669666ms)
+✔ C2-06 M11 an unrelated actor cannot appoint itself human and change reply limits (8.204041ms)
+✔ C2-06 invalid setter values preserve the business and changes.jsonl (9.079346ms)
+✔ C2-06 validator accepts hand-edited settings; raw reader fails closed on invalid files (10.338142ms)
+✔ C2-06 CLI replies reads revision and sends only the JSON settings to the human verb (1.898838ms)
+✔ C2-06 CLI replies requires a file and refuses tester writes before a bus call (0.465972ms)
+✔ C2-06 RESULT reply-invalid retries once, delivers only the valid answer and names reason (222.089187ms)
+✔ C2-06 RESULT citation-missing retries once, delivers only the valid answer and names reason (200.104611ms)
+✔ C2-06 RESULT citations-over-limit retries once, delivers only the valid answer and names reason (197.834891ms)
+✔ C2-06 RESULT citation-invalid retries once, delivers only the valid answer and names reason (210.156515ms)
+✔ C2-06 RESULT playground-cited-as-canon retries once, delivers only the valid answer and names reason (213.835593ms)
+✔ C2-06 RESULT citation-cross-universe retries once, delivers only the valid answer and names reason (209.912186ms)
+✔ C2-06 RESULT citation-unfetched retries once, delivers only the valid answer and names reason (198.705684ms)
+✔ C2-06 RESULT two guard refusals use the citation fixed text and exactly one retry (182.386586ms)
+✔ C2-06 RESULT JSON 34000 characters retries with a shorter valid answer (213.370025ms)
+✔ C2-06 RESULT JSON 70000 characters retries with a shorter valid answer (199.782915ms)
+✔ C2-06 RESULT two oversized JSON bodies use the length fixed text with citations required (184.820165ms)
+✔ C2-06 multibyte plain bodies also receive the one request-size retry (201.829013ms)
+✔ C2-06 two multibyte plain bodies use the length fallback (182.03426ms)
+✔ C2-06 RESULT a length refusal then citation refusal shares one retry and citation fallback (183.540139ms)
+✔ C2-06 fixed empty/failed replies defer unslop note until the next cited reply (274.786836ms)
+✔ C2-06 cited JSON above the old 32000 clip retains its citations and text (167.141798ms)
+✔ C2-06 a flagged cited answer keeps the note inside text and citations whole (168.83631ms)
+✔ C2-06 send_message typed tool runs every guard code before the valid RESULT (230.565935ms)
+✔ C2-06 outside library the old failed text, clip and unslop behavior hold (197.472747ms)
+✔ C2-06 outside library a refused send keeps the existing no-retry behavior (151.296315ms)
+✔ C2-06 the retry turn delivers citation-unavailable reason to the agent (184.635398ms)
+✔ C2-06 reply schema: free bodies, exact objects and safe refusal reasons (14.759264ms)
+✔ C2-06 citation setting and all four exact fixed texts (9.899391ms)
+✔ C2-06 default citation cap passes 20 and refuses 21, even with optional citations (76.751112ms)
+✔ C2-06 real Git citation scope, reachability, lines and normalized quotes (41.360225ms)
+✔ C2-06 playground cites pass but cannot state canon (23.671961ms)
+✔ C2-06 independent universes refuse; a hybrid and only its sources pass (41.572641ms)
+✔ C2-06 web cites require allowed definition, this session fetch and kept quote (10.468249ms)
+✔ C2-06 file origin is the path commit and trailer, while last follows served changes (31.989388ms)
+✔ C2-06 origin uses literal paths even when a filename contains a glob (20.084358ms)
+✔ C2-06 cited-commit guard reads exactly the C2-05a indexed file set with supporting scope (44.687642ms)
+✔ C2-06 reply limits fall back independently without coercion or inherited keys (0.462948ms)
+ℹ tests 57
+ℹ suites 0
+ℹ pass 56
+ℹ fail 1
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 11101.06711
+
+✖ failing tests:
+
+test at packages/bus/tests/citation-runtime.test.mjs:12:1
+✖ C2-06 runtime reads changed and unreadable reply limits without restarting (78.402278ms)
+  Error: invalid-authority
+      at fail (file:///home/jwoltje/.t3/worktrees/mosaic-stack/beakley-row217/packages/bus/src/broker.mjs:215:9)
+      at checkBusiness (file:///home/jwoltje/.t3/worktrees/mosaic-stack/beakley-row217/packages/bus/src/broker.mjs:366:7)
+      at new Broker (file:///home/jwoltje/.t3/worktrees/mosaic-stack/beakley-row217/packages/bus/src/broker.mjs:537:63)
+      at startBroker (file:///home/jwoltje/.t3/worktrees/mosaic-stack/beakley-row217/packages/bus/src/runtime.mjs:274:14)
+      at async TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/beakley-row217/packages/bus/tests/citation-runtime.test.mjs:18:19)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3) {
+    code: 'invalid-authority'
+  }
@@ -0,0 +1,65 @@
+✔ C2-06 held library lock gives the agent citation-unavailable and its retry reason (5131.834326ms)
+✔ C2-06 malformed sync state is availability failure, never a fabricated invalid cite (31.609704ms)
+✔ C2-06 no mirror or freshly initialized empty mirror still means no served citation (31.510292ms)
+✔ C2-06 coder send_message guard covers every table refusal; inserts nothing (102.606635ms)
+✔ C2-06 research send_message guard covers every table refusal; inserts nothing (91.30209ms)
+✔ C2-06 stored check carries the file author trailer at an unrelated cited tip (55.686451ms)
+✔ C2-06 supporting cite cannot state canon, including a folder also marked playground (42.44166ms)
+✔ C2-06 supporting file stores supporting scope and its real agent trailer (48.386414ms)
+✔ C2-06 check evidence and insert are atomic when storing evidence fails (39.194827ms)
+✔ C2-06 live limits change both directions; unreadable file keeps checks and exact fixed texts (54.284625ms)
+✔ C2-06 page store is session-local, caps 20 fetches and 200 KiB, drops at disconnect (85.004961ms)
+✔ C2-06 transport passes safe capped guard reason; ordinary refusal envelope is byte-identical (54.117068ms)
+✔ C2-06 non-library businesses retain role.claim shape and unguarded free sends (26.131034ms)
+✔ C2-06 thread messages carry file/last evidence with one read per distinct path (76.437567ms)
+✔ C2-06 guarded request snapshot cannot change between check and insert (23.908928ms)
+✔ C2-06 library.limits.set is human-only and invalid settings leave file and receipts unchanged (39.656735ms)
+✔ C2-06 runtime reads changed and unreadable reply limits without restarting (113.293022ms)
+✔ C2-06 M11 human replacement works; omitted settings return to defaults (36.305063ms)
+✔ C2-06 M11 agents and tester cannot change settings, including by changing human (21.839826ms)
+✔ C2-06 M11 serialization cannot replace settings after the first fence (8.253422ms)
+✔ C2-06 M11 an unrelated actor cannot appoint itself human and change reply limits (7.674495ms)
+✔ C2-06 invalid setter values preserve the business and changes.jsonl (8.65299ms)
+✔ C2-06 validator accepts hand-edited settings; raw reader fails closed on invalid files (9.800617ms)
+✔ C2-06 CLI replies reads revision and sends only the JSON settings to the human verb (1.78485ms)
+✔ C2-06 CLI replies requires a file and refuses tester writes before a bus call (0.520156ms)
+✔ C2-06 RESULT reply-invalid retries once, delivers only the valid answer and names reason (220.792912ms)
+✔ C2-06 RESULT citation-missing retries once, delivers only the valid answer and names reason (195.400791ms)
+✔ C2-06 RESULT citations-over-limit retries once, delivers only the valid answer and names reason (196.181772ms)
+✔ C2-06 RESULT citation-invalid retries once, delivers only the valid answer and names reason (211.797981ms)
+✔ C2-06 RESULT playground-cited-as-canon retries once, delivers only the valid answer and names reason (212.360651ms)
+✔ C2-06 RESULT citation-cross-universe retries once, delivers only the valid answer and names reason (212.667005ms)
+✔ C2-06 RESULT citation-unfetched retries once, delivers only the valid answer and names reason (184.261348ms)
+✔ C2-06 RESULT two guard refusals use the citation fixed text and exactly one retry (184.957084ms)
+✔ C2-06 RESULT JSON 34000 characters retries with a shorter valid answer (216.343048ms)
+✔ C2-06 RESULT JSON 70000 characters retries with a shorter valid answer (198.338992ms)
+✔ C2-06 RESULT two oversized JSON bodies use the length fixed text with citations required (183.309434ms)
+✔ C2-06 multibyte plain bodies also receive the one request-size retry (198.411283ms)
+✔ C2-06 two multibyte plain bodies use the length fallback (182.244769ms)
+✔ C2-06 RESULT a length refusal then citation refusal shares one retry and citation fallback (184.948978ms)
+✔ C2-06 fixed empty/failed replies defer unslop note until the next cited reply (294.575418ms)
+✔ C2-06 cited JSON above the old 32000 clip retains its citations and text (169.454956ms)
+✔ C2-06 a flagged cited answer keeps the note inside text and citations whole (164.824669ms)
+✔ C2-06 send_message typed tool runs every guard code before the valid RESULT (213.365137ms)
+✔ C2-06 outside library the old failed text, clip and unslop behavior hold (198.225522ms)
+✔ C2-06 outside library a refused send keeps the existing no-retry behavior (155.955999ms)
+✔ C2-06 the retry turn delivers citation-unavailable reason to the agent (188.198987ms)
+✔ C2-06 reply schema: free bodies, exact objects and safe refusal reasons (17.723832ms)
+✔ C2-06 citation setting and all four exact fixed texts (11.590649ms)
+✔ C2-06 default citation cap passes 20 and refuses 21, even with optional citations (79.713842ms)
+✔ C2-06 real Git citation scope, reachability, lines and normalized quotes (41.208361ms)
+✔ C2-06 playground cites pass but cannot state canon (24.250695ms)
+✔ C2-06 independent universes refuse; a hybrid and only its sources pass (42.707909ms)
+✔ C2-06 web cites require allowed definition, this session fetch and kept quote (10.901286ms)
+✔ C2-06 file origin is the path commit and trailer, while last follows served changes (37.369269ms)
+✔ C2-06 origin uses literal paths even when a filename contains a glob (20.592546ms)
+✔ C2-06 cited-commit guard reads exactly the C2-05a indexed file set with supporting scope (51.682837ms)
+✔ C2-06 reply limits fall back independently without coercion or inherited keys (0.499884ms)
+ℹ tests 57
+ℹ suites 0
+ℹ pass 57
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 11134.473726
@@ -0,0 +1,10 @@
+# Bradford
+
+Builder seat, Codex gpt-6.1-sol, started by Sage under Q246 and mos-1572. Owns the push check row:
+`scripts/push-check.sh`, which passes a binary only when an approved review candidate lists its path and sha256
+(docs/plans/2026-10-24_push-guard-binary-manifest.md, #1825).
+
+No launcher in this directory. The seat runs as a T3 thread and works in its own worktree. It has no credentials of its
+own; it pushes only its own `bradford/*` branches through the repository credential helper (mos-0981), never `refactor`,
+`main` or another seat's branch. Poe gives the first Codex review and Dewey the Opus 5.5 landing review (mos-1542,
+mos-1571). Registered by Sage on 2026-10-24 so the queue can name the seat as row owner (store.mjs isSeatDir).
@@ -0,0 +1,162 @@
+# Row 327 — reviewed binary push check (#1825)
+
+2026-10-24 Bradford, branch bradford/row327, base b617b80f6.
+
+## Plan and boundaries
+
+Implement the scratch check's ordered tokens in scripts/push-check.sh, using an
+embedded Node program for byte-safe git paths and SHA-256 blob hashing. Bash is
+the public entry point; Node is already a repository requirement. Git commands
+use explicit resolved object IDs, disable external diff/textconv, and inspect
+committed bytes. No queue writes, hook changes, binary evidence, or live state.
+Fetch is opt-in. Read reviewed rows with the queue package rows() API rooted in
+the caller's repository; this preserves canonical/witness/replay checks.
+
+Only the latest round counts; any changes receipt blocks that round. A matching
+approval authorizes exactly the manifest path/hash, or a path changed from the
+commit candidate's first parent with matching committed blob hash and mode.
+Deleted binaries need no candidate. Multiple --row values form a union.
+
+Add scratch-only integration coverage in scripts/test-push-check.sh. Reuse queue
+test fixture helpers to bootstrap real scratch queues, then use queue verbs to
+open rounds and record receipts. All git writes, bare remotes and queues remain
+under TMPDIR. Test fail-closed ordering and five required mutants, generated as
+text copies in scratch. No old tests are modified. Add the TOOLS entry.
+
+Every run needs Sage CLEAR; run timeout -k 10. Record plain-text results here or
+in this packet. After green checks, commit and push only bradford/row327 through
+the repository helper, send Sage and Poe tip/base/path sha256 manifest, and move
+327 in-review. Sage owns request posting and landing; Dewey reviews once there.
+
+## Recovery and choices
+
+Initial worktree queue next refused linked-worktree access as designed. Queue
+claim is performed from the canonical checkout; production reads in the guard
+retain the same refusal rather than invent a worktree override.
+
+Requested Sage ruling on AGENTS log appends outside the brief's owned paths.
+
+Sage sage-3989: lead handles BUILD-LOG and SESSIONS at landing. Session entry:
+2026-10-24 Bradford — row 327 / #1825 — implementation and scratch verification
+in this packet; outcome to be appended after acceptance.
+
+Implementation note: commit candidates use an explicit first-parent diff (empty
+tree for a root commit), with rename detection disabled, like verify-commit.
+The changes-veto case has both an approval and a changes receipt; a veto mutant
+would otherwise still fail for lack of approval and provide false confidence.
+A receipt for another candidate cannot be produced through queue verbs: the
+suite corrupts only a scratch queue and expects the production reader to refuse.
+Diff color, external diff and textconv are disabled so scans inspect plain git
+output. Paths are read from NUL-delimited records (including spaces/tabs).
+
+## Verification (Sage CLEAR sage-3991)
+
+First new-suite run red: my whitespace-path fixture attempted a manifest path
+that the queue intentionally forbids. Corrected the fixture to a commit
+candidate, which can contain that git path. Production queue code and old tests
+remain unchanged. Raw first-run output is test-run-1.txt.
+
+Second run green: PASS push-check 22 checks; KILLED skip-hash,
+accept-changes, earlier-round, working-tree, no-row. test-run-2.txt holds the
+plain-text receipt. bash -n both scripts and git diff --check passed. Runs used
+TMPDIR recorded in tmpdir.txt and timeout -k 10 240; all generated binary bytes
+were in disposable scratch repositories, never in this checkout or evidence.
+The slot was used for only the authorized new suite and syntax/diff checks.
+No claim of the lead's full scripts/test-*.sh landing gate is made here.
+
+Final inspection after the first green run found a path-decoding concern: lossy
+UTF-8 decoding can conflate distinct git filenames. Hardened NUL-delimited path
+decoding to reject invalid UTF-8, and quote newline-containing paths in refusal
+output to preserve one STOP line. Added scratch cases for both. Requested a new
+CLEAR (bradford-0005) because the previous slot had already been released.
+
+Final run (sage-3994 CLEAR) green on final code: PASS push-check 24 checks,
+all five mutants KILLED again, bash -n both scripts and git diff --check passed.
+Receipt: test-run-3.txt. The guard rejects non-UTF-8 git paths as environment
+errors rather than comparing replacement characters; newline paths remain
+checkable through commit candidates and refusals quote them on one line.
+
+Acceptance for the builder stage: ordered tokens and stop behavior, explicit
+base/fetch, exact blob manifest/commit checks, latest-round/veto checks, deletion,
+log/FF/secrets/attribution refusals, and all required mutants are covered. Queue
+reads use rows() with production validation; tests use only scratch queues.
+Candidate-mismatched receipts are impossible through the queue API and are
+covered by a corrupt scratch queue refusing its read. The lead's full-suite gate,
+Poe first review, Dewey landing review, and adoption for Sage's next push remain
+landing stages. No hooks, role policy, credentials or other seats' paths changed.
+
+## Poe first review R1 (poe-0010) — changes
+
+cceea407e has a blocking subdirectory bypass: ls-tree without --full-tree can
+omit an existing binary outside the caller cwd, making it look deleted.
+Accepted the finding. Git now anchors all invocations at the repository root,
+ls-tree uses --full-tree, and diff/diff-tree use --no-relative. EXPECTED_LOG still
+resolves from the original caller cwd. Added outside-cwd and nested-binary cases
+under diff.relative=true: unreviewed stops, reviewed manifest/commit passes.
+No old test changed. New run requires Sage CLEAR before execution.
+
+R1 verification under sage-3999 CLEAR: test-run-4.txt records PASS 29 checks
+and KILLED all five required mutants. Syntax and diff whitespace checks passed.
+A second bounded run used the new suite against cceea407e's script copied under
+TMPDIR: r1-regression-red.txt records the outside-cwd unreviewed binary reaching
+NO_BINARY/PUSH_READY (actual exit 0, expected 1). Thus the new regression detects
+the reviewed bug, while the revised guard refuses it. No code changed between
+the green run and this old-candidate reproduction. All runs used timeout -k 10.
+
+Holding claimant queue writes per sage-3999 until Boyd finishes row 309's record.
+Last acknowledged row 327 state is in-progress (bradford-0010, revision 3868).
+
+## Dewey landing review B1 (dewey-0956) — changes
+
+Read the invited review body at /mnt/storage/scratch/tmp/dew327vWXloCT/body.md.
+B1 identifies a brief-level gap: numstat follows candidate/host git attributes,
+so *.bin diff makes a NUL-containing blob disappear from the binary-only set.
+The production script indeed filters numstat before reading any blob, consistent
+with that data flow. Proposed correction: enumerate every changed numstat path,
+skip absent/non-blob entries at SHA, classify binary when numstat says binary OR
+committed blob has NUL among first 8000 bytes. Read with cat-file, never worktree.
+Test committed .gitattributes, info/attributes, and core.attributesFile overrides
+in scratch; reject with no row, allow exact reviewed bytes; add NUL-scan mutant.
+Sage owns the brief amendment and next CLEAR/queue sequencing.
+
+N1 acknowledged: candidate-equality check is defense in depth; invalid receipt
+cannot pass queue replay, so the corrupt-queue case does not isolate that check.
+N2/N3 recorded as described in review, without optional secrets/reader changes.
+N4 planned hardening: refuse unconfirmed durable tail notes from rows() with
+exit 2, with a real scratch witness-prefix case rather than a test-only reader.
+No test run or queue write started for B1/N4 before Sage CLEAR.
+
+Sage sage-4013/4015 authorizes B1 and N4 within the brief; amendment committed on
+refactor at 9042754c4 (read with git show, no branch change). Fix and tests written
+before requesting CLEAR as directed. Tests cover all three attribute sources,
+approved manifest success under each override, exact 7999/8000 offset boundary,
+and a real prefix-witness rollback to yield an unconfirmed approval tail.
+Added only the requested sixth mutant, skip-nul-scan; the original five remain.
+No new production configuration knobs, no secrets-diff change, no queue writes.
+Will demonstrate red against the prior candidate using the new tests, then green
+against revised code, under the approved slot. Full landing gate remains Sage's.
+
+After Dewey's round-2 CHANGES record (comment 31522, rev3876), Sage sage-4016
+released only the claimant return to in-progress. Acknowledged:
+`ok bradford-0017 rev 3877 row 327 in-review→in-progress`.
+No other queue write before the next in-review candidate move.
+Test slot remains pending Sage CLEAR after Gyro's build.
+
+## Amendment 1 verification (sage-4017 CLEAR)
+
+b1-regression-red.txt: new tests against 704910ca3 reproduce attributes-hidden
+asset.bin reaching NO_BINARY/PUSH_READY with exit0 instead of exit1.
+n4-regression-red.txt: revised code with only the N4 check removed lets the real
+scratch unconfirmed approval tail reach BINARY_REVIEWED/PUSH_READY, exit0 rather
+than exit2. These are expected negative controls; neither changed committed code.
+
+Final full new-suite run is green: test-run-5.txt records PASS 38 checks and
+KILLED skip-hash, accept-changes, earlier-round, working-tree, no-row, skip-nul-scan.
+All runs used timeout -k 10 240 with the same scratch TMPDIR; no old tests were
+changed or run. bash -n both scripts and git diff --check also passed. No source
+changes followed this green run. Sage's full landing gate is still separate.
+
+Scope in the final delta: classify all changed present blobs using numstat OR
+first-8000-byte NUL; fail closed on queue unconfirmed-tail notes; regression cases
+and requested sixth mutant; TOOLS entry and this plain-text packet. B1's brief
+amendment is Sage's 9042754c4; this branch does not edit the brief or queue files.
@@ -0,0 +1,27 @@
+node:internal/modules/run_main:107
+    triggerUncaughtException(
+    ^
+
+AssertionError [ERR_ASSERTION]: LOG_OK
+FF_OK
+NO_BINARY
+SECRETS_CLEAN
+NO_ATTRIBUTION
+PUSH_READY ee394f31d1e52751716e2413049f41b2f3072e65..76acc948149e718091fcd3f3807257e752a6616e
+
+
+
+0 !== 1
+
+    at Object.check (file:///home/jwoltje/.t3/worktrees/mosaic-stack/bradford-row327/[eval1]:44:12)
+    at file:///home/jwoltje/.t3/worktrees/mosaic-stack/bradford-row327/[eval1]:100:7
+    at process.processTicksAndRejections (node:internal/process/task_queues:104:5) {
+  generatedMessage: false,
+  code: 'ERR_ASSERTION',
+  actual: 0,
+  expected: 1,
+  operator: 'strictEqual',
+  diff: 'simple'
+}
+
+Node.js v26.8.1
@@ -0,0 +1,27 @@
+node:internal/modules/run_main:107
+    triggerUncaughtException(
+    ^
+
+AssertionError [ERR_ASSERTION]: LOG_OK
+FF_OK
+BINARY_REVIEWED 1
+SECRETS_CLEAN
+NO_ATTRIBUTION
+PUSH_READY c1a8a1e9b8c3988874a8f7a35afab7c06aea94a5..325cd3671a7bf70b9a3aee60f4446bc93594a12a
+
+
+
+0 !== 2
+
+    at Object.check (file:///home/jwoltje/.t3/worktrees/mosaic-stack/bradford-row327/[eval1]:44:12)
+    at file:///home/jwoltje/.t3/worktrees/mosaic-stack/bradford-row327/[eval1]:121:7
+    at process.processTicksAndRejections (node:internal/process/task_queues:104:5) {
+  generatedMessage: false,
+  code: 'ERR_ASSERTION',
+  actual: 0,
+  expected: 2,
+  operator: 'strictEqual',
+  diff: 'simple'
+}
+
+Node.js v26.8.1
@@ -0,0 +1,27 @@
+node:internal/modules/run_main:107
+    triggerUncaughtException(
+    ^
+
+AssertionError [ERR_ASSERTION]: LOG_OK
+FF_OK
+NO_BINARY
+SECRETS_CLEAN
+NO_ATTRIBUTION
+PUSH_READY 896bdf0ef56596c67d2dc427275743c46026e832..ad9f9c86112fadafef4d4854f46bd9994fe2fe5d
+
+
+
+0 !== 1
+
+    at Object.check (file:///home/jwoltje/.t3/worktrees/mosaic-stack/bradford-row327/[eval1]:44:12)
+    at file:///home/jwoltje/.t3/worktrees/mosaic-stack/bradford-row327/[eval1]:130:7
+    at process.processTicksAndRejections (node:internal/process/task_queues:104:5) {
+  generatedMessage: false,
+  code: 'ERR_ASSERTION',
+  actual: 0,
+  expected: 1,
+  operator: 'strictEqual',
+  diff: 'simple'
+}
+
+Node.js v26.8.1
@@ -0,0 +1,21 @@
+node:internal/modules/run_main:107
+    triggerUncaughtException(
+    ^
+
+AssertionError [ERR_ASSERTION]: queue: candidate manifest path must be a repo-relative path: "space tab\tasset.bin"
+
+
+2 !== 1
+
+    at Object.round (file:///home/jwoltje/.t3/worktrees/mosaic-stack/bradford-row327/[eval1]:61:12)
+    at file:///home/jwoltje/.t3/worktrees/mosaic-stack/bradford-row327/[eval1]:116:7
+    at process.processTicksAndRejections (node:internal/process/task_queues:104:5) {
+  generatedMessage: false,
+  code: 'ERR_ASSERTION',
+  actual: 2,
+  expected: 1,
+  operator: 'strictEqual',
+  diff: 'simple'
+}
+
+Node.js v26.8.1
@@ -0,0 +1,6 @@
+PASS push-check 22 checks
+KILLED skip-hash
+KILLED accept-changes
+KILLED earlier-round
+KILLED working-tree
+KILLED no-row
@@ -0,0 +1,6 @@
+PASS push-check 24 checks
+KILLED skip-hash
+KILLED accept-changes
+KILLED earlier-round
+KILLED working-tree
+KILLED no-row
@@ -0,0 +1,6 @@
+PASS push-check 29 checks
+KILLED skip-hash
+KILLED accept-changes
+KILLED earlier-round
+KILLED working-tree
+KILLED no-row
@@ -0,0 +1,7 @@
+PASS push-check 38 checks
+KILLED skip-hash
+KILLED accept-changes
+KILLED earlier-round
+KILLED working-tree
+KILLED no-row
+KILLED skip-nul-scan
@@ -0,0 +1 @@
+/mnt/storage/scratch/tmp/YPrPwR
@@ -1,592 +0,0 @@
-# Row 310 W2 WordCraft restricted source build
-
-Started 2026-10-24 by Gyro, T3 thread 4c520dc8-238f-4f76-a973-28f2ef87310d.
-Issue #1824; branch gyro/row310; base d16958bcf.
-
-## Authority and constraints
-
-Sage dispatch sage-3970 implements the approved W2 brief under Q246/mos-1571.
-Read AGENTS.md, agents/gyro/README.md, D2/F4/D6-D9/G1/S0/W2 in
-`docs/plans/2026-10-21_q195-writing-editor.md`, S0 report/inventory and CSP
-measurement using `git show 74ec32013:<path>`, and Louie's pinned evaluation.
-S0 is evidence, never modified. Protected source is read-only at
-`e05b7fe86f3b85454000dffc321de638d7009817`, WordCraft 0.9.0.
-No source checkout builds, live services/configuration, credentials, private books,
-frame routes, shell CSP changes, policy expansion or dependency/tool changes.
-All build/test runs need Sage CLEAR and use low priority, at most four jobs,
-and TMPDIR freshly allocated beneath /mnt/storage/scratch/tmp.
-No commit before applicable checks pass; report source/vendor bytes before commit
-and every product binary path/size before first push. Push gyro/* only after ruling.
-
-## Implementation plan
-
-The existing approved design fixes the approach: immutable original import plus a
-reviewable patch applied to isolated build roots, offline vendor inputs and pinned
-tool hashes. An edited upstream import would lose the original-source receipt;
-Louie's built files cannot substitute for a reproducible source build.
-
- [ ] Inventory original tracked input paths/bytes/hashes; import via git archive
-  into third_party/wordcraft/upstream. Inventory 209 reviewed packages and exact
-  git pins from S0; vendor only approved inputs with license/source receipts.
- [ ] Write provenance/build refusal tests first: changed/missing inputs, extra
-  dependencies, wrong tools, non-offline build, unshipped runtime dependency,
-  inline bootstrap/styles and stale output manifests must refuse.
- [ ] Implement build.mjs/toolchain.json/PROVENANCE.json/NOTICE and source patch.
-  Build from copied owned source with path remapping, stable environment and
-  manifest verification; external frame HTML/CSS/module bootstrap; package all
-  runtime files under src/public/wordcraft without serving them.
- [ ] Carry M1-M14 explicitly through patch and acceptance inventory. Host hooks
-  replace rfd/picker/download/print; block raw drops, local font enumeration,
-  persisted prose/fonts and direct outbound navigation. W6 owns production
-  bridge/routes, host import watchdog/sandbox and malformed corpus integration;
-  no placeholder is counted as passing mitigation evidence.
- [ ] Request CLEAR for each build/test stage. Build twice at different absolute
-  roots offline with the pinned tools. Compare every integration output hash,
-  record bytes/tool hashes/timings and run each touched test file independently,
-  affected WebUI suite and required repository checks on the assigned slot.
- [ ] Use scratch fixtures to measure exact Q234 style-src 'self' CSP with full
-  function coverage including host-owned Print, zero violations, no rfd/file
-  picker/download fallback and no external traffic. Preserve plain-text receipts.
- [ ] Report source/vendor totals and product binary inventory to Sage. After
-  checks/ruling, commit, push gyro/row310 through helper, send Sage and Gladstone
-  base/tip plus sha256 for every changed path. Move only row 310 to in-review;
-  Sage posts Gitea request. Filbert rechecks inventory once at landing.
-
-## Acceptance risks to resolve
-
-1. Vendor resolution must match reviewed normal/build closure, while preserving
-   original Cargo.lock and accounting for workspace-only dependency resolution.
-2. Tool identity includes Rust target std and actual Trunk/wasm helper executables;
-   installed versions alone cannot establish tool identity.
-3. Removing one Services hook leaves UI/engine fallbacks; trace all before patching.
-4. Root-independent WASM includes generated build metadata; wasm-bindgen-shared's
-   git probing and absolute source paths need deterministic inputs/remapping.
-5. W2 scratch host coverage must be real bytes/function behavior; W6 mitigation
-   gates remain explicit where production bridge authority is not yet available.
-
-## Activity and evidence
-
- Initial worktree clean; HEAD d16958bcf, correct branch. Protected source HEAD
-  matches pin and git status is clean. No build or test has run.
- `scripts/mosaic queue next gyro` correctly refused in linked worktree. Retried
-  through canonical checkout as documented; operation still running at this note.
- Sage CLEAR sage-3973 covers new test red/green, offline metadata/tree/vendor prep
-  and one restricted release build with nice 19 / four jobs / fresh TMPDIR.
- Retried identical queue op gyro-0001 after Glomgold released lock: success,
-  revision 3857, row 310 briefed -> in-progress.
- Count reconciliation: F4's 199 counts third-party normal dependency edges for
-  wordcraft-web/wasm32-unknown-unknown. S0 adds 10 build-only dependencies, hence
-  209 third-party source/notice inputs, plus 15 local crates = 224 records.
-  These are distinct closures, not a dependency expansion. Current vendor is
-  exactly those 209 package identities, 10,499 files / 130,737,232 bytes before
-  final packaging corrections; upstream is 612 files / 26,913,076 bytes.
- New provenance/build tests ran individually under CLEAR; each has 2 expected
-  first-run failures because the owned verifier/builder does not exist yet.
- First offline metadata probe caught an error in my git-manifest normalization:
-  replacing version.workspace as a substring also changed rust-version.workspace.
-  No upstream input changed. Correcting anchored substitutions before repeating.
-
-### Build-only manifest reduction (sage-3974)
-
- Cargo.toml: members reduced to the 15 reviewed local crates; default member wordcraft-web. No runtime feature changes.
- crates/doc/Cargo.toml: remove [dev-dependencies] from isolated build copy; excluded dev/test or native-only resolution.
- crates/docbin/Cargo.toml: remove [dev-dependencies] from isolated build copy; excluded dev/test or native-only resolution.
- crates/docx/Cargo.toml: remove [dev-dependencies] from isolated build copy; excluded dev/test or native-only resolution.
- crates/engine/Cargo.toml: remove [target.'cfg(not(target_arch = "wasm32"))'.dependencies] from isolated build copy; excluded dev/test or native-only resolution.
- crates/engine/Cargo.toml: remove [dev-dependencies] from isolated build copy; excluded dev/test or native-only resolution.
- crates/formats/Cargo.toml: remove [dev-dependencies] from isolated build copy; excluded dev/test or native-only resolution.
- crates/pdf/Cargo.toml: remove [dev-dependencies] from isolated build copy; excluded dev/test or native-only resolution.
- crates/proof/Cargo.toml: remove [dev-dependencies] from isolated build copy; excluded dev/test or native-only resolution.
- crates/render/Cargo.toml: remove [target.'cfg(not(target_arch = "wasm32"))'.dependencies] from isolated build copy; excluded dev/test or native-only resolution.
- crates/ui-egui/Cargo.toml: remove [target.'cfg(target_os = "linux")'.dependencies] from isolated build copy; excluded dev/test or native-only resolution.
- crates/ui-egui/Cargo.toml: remove [dev-dependencies] from isolated build copy; excluded dev/test or native-only resolution.
- crates/zotero/Cargo.toml: remove [dev-dependencies] from isolated build copy; excluded dev/test or native-only resolution.
- sage-3976 permits proven-false target-section removal in THIRD-PARTY manifests
-  only in isolated build copies, with matching checksum rewrites. A three-valued
-  cfg analysis keeps unknown/custom flags/features unchanged and identifies 26
-  manifests / 57 false-target dependency sections; target-filter-plan.json lists
-  every crate/cfg/dependency. This is below the ~30-manifest stop boundary.
- The scratch-only filtered source still refuses: wgpu-core's dormant `angle`
-  feature references its removed Apple-only dependency. Stopped at the explicit
-  feature-definition boundary and sent gyro-0006 to Sage. No feature edited.
- Tool versions match all five pins; toolchain.json records their binary hashes
-  and the Rust compiler driver/wasm target support files. No release build yet.
- Current notice bundle includes 209 third-party package mappings, local source
-  license/attribution/font texts and self_cell/ryu Apache-2.0 elections. Source
-  verifier green: 2/2. Output/build acceptance remains red/unimplemented.
-
-### Original-source subset (sage-3976)
-
-Excluded whole directories assets/app-icon/, docs/images/ and packaging/macos/: web frame serves no icon; screenshots and macOS packaging are never build inputs. Every license/notice/copyright remains. Included files remain byte-identical; no vendor file removed. Exact excluded paths:
-
- assets/app-icon/hicolor/128x128/apps/ai.storyteller.wordcraft.png
- assets/app-icon/hicolor/16x16/apps/ai.storyteller.wordcraft.png
- assets/app-icon/hicolor/24x24/apps/ai.storyteller.wordcraft.png
- assets/app-icon/hicolor/256x256/apps/ai.storyteller.wordcraft.png
- assets/app-icon/hicolor/32x32/apps/ai.storyteller.wordcraft.png
- assets/app-icon/hicolor/48x48/apps/ai.storyteller.wordcraft.png
- assets/app-icon/hicolor/512x512/apps/ai.storyteller.wordcraft.png
- assets/app-icon/hicolor/64x64/apps/ai.storyteller.wordcraft.png
- assets/app-icon/hicolor/scalable/apps/ai.storyteller.wordcraft.svg
- assets/app-icon/wordcraft-1024.png
- assets/app-icon/wordcraft-macos-512.png
- assets/app-icon/wordcraft.icns
- assets/app-icon/wordcraft.ico
- assets/app-icon/wordcraft.svg
- docs/images/backstage.png
- docs/images/dark.png
- docs/images/design.png
- docs/images/hero.png
- docs/images/layout.png
- docs/images/references.png
- docs/images/review.png
- packaging/macos/Info.plist.in
- packaging/macos/dmg/README.md
- packaging/macos/dmg/background.svg
- packaging/macos/dmg/background.tiff
- packaging/macos/dmg/dmg-layout.DS_Store
- packaging/macos/dmg/generate.py
- packaging/macos/entitlements.plist
- packaging/macos/import-cert.sh
- packaging/macos/package.sh
- sage-3982 approved the 103 enumerated feature items across eight manifests,
-  mechanical script only, build copies only. Scratch application completed;
-  original vendor unchanged. A committed reproducible generator/test is pending
-  the packaging decision; no third-party source/feature edits are hand-applied.
- sage-3983 permits custom cfg fuzzing/loom/miri false under a sanitized,
-  refusing release environment. Third-party target inventory is now 28 manifests
-  / 59 sections. It narrows the feature gate to root-specific package/selected
-  feature closure equality: S0's workspace-unified 293-node feature metadata is
-  context, not an equality target. Exact 199 normal /209 normal+build identities
-  remain the acceptance sets.
- Following that reduction, metadata refuses on encoding_rs/simdutf8 under a
-  target_feature=simd128 cfg. Pinned rustc default cfg has no simd128. The filter
-  retained target-feature flags as unknown. Scope stop per sage-3983: one-page
-  PACKAGING-BOUNDARY.md and complete survey sent to Sage in gyro-0010. No further
-  cfg/dependency category changed. No release build, commit, push or live change.
- Mos mos-1572/1573 via sage-3979: landing held pending Jason/Vikunja618; gyro
-  review-branch push is allowed after validation, with full binary listing.
-  Whole-row and runtime-only pack-size measurements are required after a local
-  verified commit; offline tool availability/provenance/timing also requested.
-
-## Measured-cfg reduction under sage-3984g
-
-Pinned rustc cfg is rustc-wasm32-cfg.txt. releaseEnvironment refuses inherited flag variables and forwards only an allowlist to the cfg measurement. Filter evaluator and mechanical feature cleanup are in build.mjs; no optional normal dependency removed.
-
- aes-0.9.3: remove dependencies under cfg(any(target_arch = "aarch64", target_arch = "x86_64", target_arch = "x86")); dependencies cpufeatures.
- bytes-1.12.1: remove dev-dependencies under cfg(loom); dependencies loom.
- cmov-0.5.4: remove dev-dependencies under cfg(any(unix, windows)); dependencies proptest.
- eframe-0.36.2: remove dependencies under cfg(any(target_os = "macos")); dependencies objc2.
- eframe-0.36.2: remove dependencies under cfg(any(target_os = "macos")); dependencies objc2-app-kit.
- eframe-0.36.2: remove dependencies under cfg(any(target_os = "macos")); dependencies objc2-foundation.
- eframe-0.36.2: remove dependencies under cfg(any(target_os = "windows")); dependencies windows-sys.
- eframe-0.36.2: remove dependencies under cfg(not(target_arch = "wasm32")); dependencies egui-wgpu.
- eframe-0.36.2: remove dependencies under cfg(not(target_arch = "wasm32")); dependencies egui-winit.
- eframe-0.36.2: remove dependencies under cfg(not(target_arch = "wasm32")); dependencies glutin.
- eframe-0.36.2: remove dependencies under cfg(not(target_arch = "wasm32")); dependencies glutin-winit.
- eframe-0.36.2: remove dependencies under cfg(not(target_arch = "wasm32")); dependencies image.
- eframe-0.36.2: remove dependencies under cfg(not(target_arch = "wasm32")); dependencies pollster.
- eframe-0.36.2: remove dependencies under cfg(not(target_arch = "wasm32")); dependencies winit.
- eframe-0.36.2: remove dev-dependencies under cfg(not(target_arch = "wasm32")); dependencies directories.
- eframe-0.36.2: feature accesskit removes egui-winit/accesskit; dependency egui-winit removed under cfg(not(target_arch = "wasm32")).
- eframe-0.36.2: feature android-game-activity removes egui-winit/android-game-activity; dependency egui-winit removed under cfg(not(target_arch = "wasm32")).
- eframe-0.36.2: feature android-native-activity removes egui-winit/android-native-activity; dependency egui-winit removed under cfg(not(target_arch = "wasm32")).
- eframe-0.36.2: feature default removes winit/default; dependency winit removed under cfg(not(target_arch = "wasm32")).
- eframe-0.36.2: feature glow removes dep:glutin-winit; dependency glutin-winit removed under cfg(not(target_arch = "wasm32")).
- eframe-0.36.2: feature glow removes dep:glutin; dependency glutin removed under cfg(not(target_arch = "wasm32")).
- eframe-0.36.2: feature links removes egui-winit/links; dependency egui-winit removed under cfg(not(target_arch = "wasm32")).
- eframe-0.36.2: feature persistence removes egui-winit/serde; dependency egui-winit removed under cfg(not(target_arch = "wasm32")).
- eframe-0.36.2: feature wayland removes egui-winit/wayland; dependency egui-winit removed under cfg(not(target_arch = "wasm32")).
- eframe-0.36.2: feature wayland removes glutin?/wayland; dependency glutin removed under cfg(not(target_arch = "wasm32")).
- eframe-0.36.2: feature wayland removes glutin-winit?/wayland; dependency glutin-winit removed under cfg(not(target_arch = "wasm32")).
- eframe-0.36.2: feature wgpu_no_default_features removes dep:pollster; dependency pollster removed under cfg(not(target_arch = "wasm32")).
- eframe-0.36.2: feature x11 removes egui-winit/x11; dependency egui-winit removed under cfg(not(target_arch = "wasm32")).
- eframe-0.36.2: feature x11 removes glutin?/x11; dependency glutin removed under cfg(not(target_arch = "wasm32")).
- eframe-0.36.2: feature x11 removes glutin?/glx; dependency glutin removed under cfg(not(target_arch = "wasm32")).
- eframe-0.36.2: feature x11 removes glutin-winit?/x11; dependency glutin-winit removed under cfg(not(target_arch = "wasm32")).
- eframe-0.36.2: feature x11 removes glutin-winit?/glx; dependency glutin-winit removed under cfg(not(target_arch = "wasm32")).
- encoding_rs-0.8.42: remove dependencies under cfg(all(any(target_arch = "x86_64", target_arch = "x86"), not(all(target_feature = "avx2", target_feature = "bmi1")))); dependencies multiversion.
- encoding_rs-0.8.42: remove dependencies under cfg(any(target_arch = "x86_64", target_arch = "x86")); dependencies core_detect.
- encoding_rs-0.8.42: remove dependencies under cfg(any(target_arch = "x86_64", target_arch = "x86", target_arch = "aarch64", all(target_arch = "wasm32", target_feature = "simd128"))); dependencies simdutf8.
- encoding_rs-0.8.42: feature std removes dep:multiversion; dependency multiversion removed under cfg(all(any(target_arch = "x86_64", target_arch = "x86"), not(all(target_feature = "avx2", target_feature = "bmi1")))).
- getrandom-0.3.4: remove dependencies under cfg(all(any(target_os = "linux", target_os = "android"), not(any(all(target_os = "linux", target_env = ""), getrandom_backend = "custom", getrandom_backend = "linux_raw", getrandom_backend = "rdrand", getrandom_backend = "rndr")))); dependencies libc.
- getrandom-0.3.4: remove dependencies under cfg(all(target_arch = "wasm32", any(target_os = "unknown", target_os = "none"), target_feature = "atomics")); dependencies js-sys.
- getrandom-0.3.4: remove dependencies under cfg(all(target_arch = "wasm32", target_os = "wasi", target_env = "p2")); dependencies wasip2.
- getrandom-0.3.4: remove dependencies under cfg(all(target_os = "uefi", getrandom_backend = "efi_rng")); dependencies r-efi.
- getrandom-0.3.4: remove dependencies under cfg(any(target_os = "dragonfly", target_os = "freebsd", target_os = "hurd", target_os = "illumos", target_os = "cygwin", all(target_os = "horizon", target_arch = "arm"))); dependencies libc.
- getrandom-0.3.4: remove dependencies under cfg(any(target_os = "haiku", target_os = "redox", target_os = "nto", target_os = "aix")); dependencies libc.
- getrandom-0.3.4: remove dependencies under cfg(any(target_os = "ios", target_os = "visionos", target_os = "watchos", target_os = "tvos")); dependencies libc.
- getrandom-0.3.4: remove dependencies under cfg(any(target_os = "macos", target_os = "openbsd", target_os = "vita", target_os = "emscripten")); dependencies libc.
- getrandom-0.3.4: remove dependencies under cfg(target_os = "netbsd"); dependencies libc.
- getrandom-0.3.4: remove dependencies under cfg(target_os = "solaris"); dependencies libc.
- getrandom-0.3.4: remove dependencies under cfg(target_os = "vxworks"); dependencies libc.
- getrandom-0.3.4: feature wasm_js removes dep:js-sys; dependency js-sys removed under cfg(all(target_arch = "wasm32", any(target_os = "unknown", target_os = "none"), target_feature = "atomics")).
- half-2.7.1: remove dependencies under cfg(target_arch = "spirv"); dependencies crunchy.
- harfrust-0.12.0: remove dev-dependencies under cfg(target_vendor = "apple"); dependencies objc2-core-foundation.
- harfrust-0.12.0: remove dev-dependencies under cfg(target_vendor = "apple"); dependencies objc2-core-text.
- harfrust-0.13.3: remove dev-dependencies under cfg(target_vendor = "apple"); dependencies objc2-core-foundation.
- harfrust-0.13.3: remove dev-dependencies under cfg(target_vendor = "apple"); dependencies objc2-core-text.
- hashbrown-0.17.1: remove dependencies under cfg(any()); dependencies serde.
- hashbrown-0.17.1: remove dev-dependencies under cfg(unix); dependencies libc.
- hashbrown-0.17.1: feature serde removes dep:serde; dependency serde removed under cfg(any()).
- indexmap-2.14.2: remove dependencies under cfg(any()); dependencies serde.
- indexmap-2.14.2: feature serde removes dep:serde; dependency serde removed under cfg(any()).
- parking_lot_core-0.9.12: remove dependencies under cfg(target_os = "redox"); dependencies redox_syscall.
- parking_lot_core-0.9.12: remove dependencies under cfg(unix); dependencies libc.
- parking_lot_core-0.9.12: remove dependencies under cfg(windows); dependencies windows-link.
- png-0.18.1: remove dev-dependencies under cfg(not(target_arch = "wasm32")); dependencies criterion.
- rfd-0.17.2: remove dependencies under cfg(any(target_os = "linux", target_os = "freebsd", target_os = "dragonfly", target_os = "netbsd", target_os = "openbsd")); dependencies glib-sys.
- rfd-0.17.2: remove dependencies under cfg(any(target_os = "linux", target_os = "freebsd", target_os = "dragonfly", target_os = "netbsd", target_os = "openbsd")); dependencies gobject-sys.
- rfd-0.17.2: remove dependencies under cfg(any(target_os = "linux", target_os = "freebsd", target_os = "dragonfly", target_os = "netbsd", target_os = "openbsd")); dependencies gtk-sys.
- rfd-0.17.2: remove dependencies under cfg(any(target_os = "linux", target_os = "freebsd", target_os = "dragonfly", target_os = "netbsd", target_os = "openbsd")); dependencies libc.
- rfd-0.17.2: remove dependencies under cfg(any(target_os = "linux", target_os = "freebsd", target_os = "dragonfly", target_os = "netbsd", target_os = "openbsd")); dependencies percent-encoding.
- rfd-0.17.2: remove dependencies under cfg(any(target_os = "linux", target_os = "freebsd", target_os = "dragonfly", target_os = "netbsd", target_os = "openbsd")); dependencies pollster.
- rfd-0.17.2: remove dependencies under cfg(any(target_os = "linux", target_os = "freebsd", target_os = "dragonfly", target_os = "netbsd", target_os = "openbsd")); dependencies wayland-backend.
- rfd-0.17.2: remove dependencies under cfg(any(target_os = "linux", target_os = "freebsd", target_os = "dragonfly", target_os = "netbsd", target_os = "openbsd")); dependencies wayland-client.
- rfd-0.17.2: remove dependencies under cfg(any(target_os = "linux", target_os = "freebsd", target_os = "dragonfly", target_os = "netbsd", target_os = "openbsd")); dependencies wayland-protocols.
- rfd-0.17.2: remove dependencies under cfg(target_os = "macos"); dependencies block2.
- rfd-0.17.2: remove dependencies under cfg(target_os = "macos"); dependencies dispatch2.
- rfd-0.17.2: remove dependencies under cfg(target_os = "macos"); dependencies objc2.
- rfd-0.17.2: remove dependencies under cfg(target_os = "macos"); dependencies objc2-app-kit.
- rfd-0.17.2: remove dependencies under cfg(target_os = "macos"); dependencies objc2-core-foundation.
- rfd-0.17.2: remove dependencies under cfg(target_os = "macos"); dependencies objc2-foundation.
- rfd-0.17.2: remove dependencies under cfg(target_os = "windows"); dependencies windows-sys.
- rfd-0.17.2: feature common-controls-v6 removes windows-sys/Win32_UI_Controls; dependency windows-sys removed under cfg(target_os = "windows").
- rfd-0.17.2: feature gtk3 removes gtk-sys; dependency gtk-sys removed under cfg(any(target_os = "linux", target_os = "freebsd", target_os = "dragonfly", target_os = "netbsd", target_os = "openbsd")).
- rfd-0.17.2: feature gtk3 removes glib-sys; dependency glib-sys removed under cfg(any(target_os = "linux", target_os = "freebsd", target_os = "dragonfly", target_os = "netbsd", target_os = "openbsd")).
- rfd-0.17.2: feature gtk3 removes gobject-sys; dependency gobject-sys removed under cfg(any(target_os = "linux", target_os = "freebsd", target_os = "dragonfly", target_os = "netbsd", target_os = "openbsd")).
- rfd-0.17.2: feature wayland removes wayland-backend; dependency wayland-backend removed under cfg(any(target_os = "linux", target_os = "freebsd", target_os = "dragonfly", target_os = "netbsd", target_os = "openbsd")).
- rfd-0.17.2: feature wayland removes wayland-client; dependency wayland-client removed under cfg(any(target_os = "linux", target_os = "freebsd", target_os = "dragonfly", target_os = "netbsd", target_os = "openbsd")).
- rfd-0.17.2: feature wayland removes wayland-protocols; dependency wayland-protocols removed under cfg(any(target_os = "linux", target_os = "freebsd", target_os = "dragonfly", target_os = "netbsd", target_os = "openbsd")).
- rfd-0.17.2: feature xdg-portal removes pollster; dependency pollster removed under cfg(any(target_os = "linux", target_os = "freebsd", target_os = "dragonfly", target_os = "netbsd", target_os = "openbsd")).
- serde_core-1.0.229: remove dependencies under cfg(any()); dependencies serde_derive.
- serde_json-1.0.151: remove dependencies under cfg(any()); dependencies serde.
- sha1-0.11.0: remove dependencies under cfg(any(target_arch = "aarch64", target_arch = "x86", target_arch = "x86_64")); dependencies cpufeatures.
- sha2-0.11.0: remove dependencies under cfg(any(target_arch = "aarch64", target_arch = "x86_64", target_arch = "x86")); dependencies cpufeatures.
- sys-locale-0.3.2: remove dependencies under cfg(target_os = "android"); dependencies libc.
- uuid-1.27.0: remove dependencies under cfg(all(target_arch = "wasm32", any(target_os = "unknown", target_os = "none"), target_feature = "atomics")); dependencies js-sys.
- uuid-1.27.0: remove dependencies under cfg(not(all(target_arch = "wasm32", any(target_os = "unknown", target_os = "none")))); dependencies getrandom.
- uuid-1.27.0: remove dependencies under cfg(not(all(target_arch = "wasm32", any(target_os = "unknown", target_os = "none")))); dependencies rand.
- uuid-1.27.0: remove dev-dependencies under cfg(not(target_arch = "wasm32")); dependencies gungraun.
- uuid-1.27.0: feature fast-rng removes dep:rand; dependency rand removed under cfg(not(all(target_arch = "wasm32", any(target_os = "unknown", target_os = "none")))).
- uuid-1.27.0: feature js removes dep:js-sys; dependency js-sys removed under cfg(all(target_arch = "wasm32", any(target_os = "unknown", target_os = "none"), target_feature = "atomics")).
- uuid-1.27.0: feature rng removes dep:getrandom; dependency getrandom removed under cfg(not(all(target_arch = "wasm32", any(target_os = "unknown", target_os = "none")))).
- uuid-1.27.0: feature rng-getrandom removes dep:getrandom; dependency getrandom removed under cfg(not(all(target_arch = "wasm32", any(target_os = "unknown", target_os = "none")))).
- uuid-1.27.0: feature rng-rand removes dep:rand; dependency rand removed under cfg(not(all(target_arch = "wasm32", any(target_os = "unknown", target_os = "none")))).
- uuid-1.27.0: feature std removes js-sys?/std; dependency js-sys removed under cfg(all(target_arch = "wasm32", any(target_os = "unknown", target_os = "none"), target_feature = "atomics")).
- wasm-bindgen-0.2.129: remove dev-dependencies under cfg(all(target_os = "emscripten", wasm_bindgen_unstable_tokio)); dependencies tokio.
- wasm-bindgen-0.2.129: remove dev-dependencies under cfg(target_arch = "wasm64"); dependencies paste.
- wasm-bindgen-0.2.129: remove dev-dependencies under cfg(target_arch = "wasm64"); dependencies serde_derive.
- wasm-bindgen-futures-0.4.79: remove dependencies under cfg(all(target_os = "emscripten", wasm_bindgen_unstable_tokio)); dependencies tokio.
- web-time-1.1.0: remove dev-dependencies under cfg(all(target_family = "wasm", target_feature = "atomics")); dependencies futures-channel.
- web-time-1.1.0: remove dev-dependencies under cfg(all(target_family = "wasm", target_feature = "atomics")); dependencies futures-util.
- web-time-1.1.0: remove dev-dependencies under cfg(all(target_family = "wasm", target_feature = "atomics")); dependencies web-sys.
- web-time-1.1.0: remove dev-dependencies under cfg(not(target_family = "wasm")); dependencies pollster.
- wgpu-30.0.1: remove dependencies under cfg(not(target_arch = "wasm32")); dependencies smallvec.
- wgpu-30.0.1: remove dependencies under cfg(not(target_arch = "wasm32")); dependencies wgpu-core.
- wgpu-30.0.1: remove dependencies under cfg(not(target_arch = "wasm32")); dependencies wgpu-hal.
- wgpu-30.0.1: remove dependencies under cfg(not(target_has_atomic = "64")); dependencies portable-atomic.
- wgpu-30.0.1: remove dependencies under cfg(target_os = "emscripten"); dependencies smallvec.
- wgpu-30.0.1: remove dependencies under cfg(target_os = "emscripten"); dependencies wgpu-core.
- wgpu-30.0.1: remove dependencies under cfg(target_os = "emscripten"); dependencies wgpu-hal.
- wgpu-core-30.0.1: remove dependencies under cfg(any(windows, target_os = "linux", target_os = "android", target_os = "freebsd")); dependencies wgpu-core-deps-windows-linux-android.
- wgpu-core-30.0.1: remove dependencies under cfg(not(target_has_atomic = "64")); dependencies portable-atomic.
- wgpu-core-30.0.1: remove dependencies under cfg(target_os = "emscripten"); dependencies wgpu-core-deps-emscripten.
- wgpu-core-30.0.1: remove dependencies under cfg(target_vendor = "apple"); dependencies wgpu-core-deps-apple.
- wgpu-core-30.0.1: feature angle removes wgpu-core-deps-apple/angle; dependency wgpu-core-deps-apple removed under cfg(target_vendor = "apple").
- wgpu-core-30.0.1: feature drm removes wgpu-core-deps-windows-linux-android/drm; dependency wgpu-core-deps-windows-linux-android removed under cfg(any(windows, target_os = "linux", target_os = "android", target_os = "freebsd")).
- wgpu-core-30.0.1: feature dx12 removes wgpu-core-deps-windows-linux-android/dx12; dependency wgpu-core-deps-windows-linux-android removed under cfg(any(windows, target_os = "linux", target_os = "android", target_os = "freebsd")).
- wgpu-core-30.0.1: feature gles removes wgpu-core-deps-windows-linux-android/gles; dependency wgpu-core-deps-windows-linux-android removed under cfg(any(windows, target_os = "linux", target_os = "android", target_os = "freebsd")).
- wgpu-core-30.0.1: feature gles removes wgpu-core-deps-emscripten/gles; dependency wgpu-core-deps-emscripten removed under cfg(target_os = "emscripten").
- wgpu-core-30.0.1: feature metal removes wgpu-core-deps-apple/metal; dependency wgpu-core-deps-apple removed under cfg(target_vendor = "apple").
- wgpu-core-30.0.1: feature portable-atomic removes dep:portable-atomic; dependency portable-atomic removed under cfg(not(target_has_atomic = "64")).
- wgpu-core-30.0.1: feature renderdoc removes wgpu-core-deps-windows-linux-android/renderdoc; dependency wgpu-core-deps-windows-linux-android removed under cfg(any(windows, target_os = "linux", target_os = "android", target_os = "freebsd")).
- wgpu-core-30.0.1: feature vulkan removes wgpu-core-deps-windows-linux-android/vulkan; dependency wgpu-core-deps-windows-linux-android removed under cfg(any(windows, target_os = "linux", target_os = "android", target_os = "freebsd")).
- wgpu-core-30.0.1: feature vulkan-portability removes wgpu-core-deps-apple/vulkan-portability; dependency wgpu-core-deps-apple removed under cfg(target_vendor = "apple").
- wgpu-hal-30.0.1: remove dependencies under cfg(all(unix, not(target_vendor = "apple"), not(target_family = "wasm"))); dependencies drm.
- wgpu-hal-30.0.1: remove dependencies under cfg(all(windows, not(target_arch = "aarch64"), target_env = "msvc")); dependencies mach-dxcompiler-rs.
- wgpu-hal-30.0.1: remove dependencies under cfg(any(not(target_has_atomic = "64"), not(target_has_atomic = "ptr"))); dependencies portable-atomic.
- wgpu-hal-30.0.1: remove dev-dependencies under cfg(not(any(target_arch = "wasm32", target_os = "ios", target_os = "visionos", target_env = "ohos"))); dependencies glutin.
- wgpu-hal-30.0.1: remove dev-dependencies under cfg(not(any(target_arch = "wasm32", target_os = "ios", target_os = "visionos", target_env = "ohos"))); dependencies glutin-winit.
- wgpu-hal-30.0.1: remove dependencies under cfg(not(target_arch = "wasm32")); dependencies ash.
- wgpu-hal-30.0.1: remove dependencies under cfg(not(target_arch = "wasm32")); dependencies gpu-allocator.
- wgpu-hal-30.0.1: remove dependencies under cfg(not(target_arch = "wasm32")); dependencies khronos-egl.
- wgpu-hal-30.0.1: remove dependencies under cfg(not(target_arch = "wasm32")); dependencies libloading.
- wgpu-hal-30.0.1: remove dependencies under cfg(not(target_arch = "wasm32")); dependencies renderdoc-sys.
- wgpu-hal-30.0.1: remove dependencies under cfg(not(target_arch = "wasm32")); dependencies smallvec.
- wgpu-hal-30.0.1: remove dependencies under cfg(not(target_has_atomic = "ptr")); dependencies portable-atomic-util.
- wgpu-hal-30.0.1: remove dependencies under cfg(target_os = "android"); dependencies android_system_properties.
- wgpu-hal-30.0.1: remove dependencies under cfg(target_os = "android"); dependencies ndk-sys.
- wgpu-hal-30.0.1: remove dependencies under cfg(target_os = "emscripten"); dependencies khronos-egl.
- wgpu-hal-30.0.1: remove dependencies under cfg(target_os = "emscripten"); dependencies libloading.
- wgpu-hal-30.0.1: remove dependencies under cfg(target_vendor = "apple"); dependencies block2.
- wgpu-hal-30.0.1: remove dependencies under cfg(target_vendor = "apple"); dependencies bytemuck.
- wgpu-hal-30.0.1: remove dependencies under cfg(target_vendor = "apple"); dependencies objc2.
- wgpu-hal-30.0.1: remove dependencies under cfg(target_vendor = "apple"); dependencies objc2-core-foundation.
- wgpu-hal-30.0.1: remove dependencies under cfg(target_vendor = "apple"); dependencies objc2-core-graphics.
- wgpu-hal-30.0.1: remove dependencies under cfg(target_vendor = "apple"); dependencies objc2-foundation.
- wgpu-hal-30.0.1: remove dependencies under cfg(target_vendor = "apple"); dependencies objc2-metal.
- wgpu-hal-30.0.1: remove dependencies under cfg(target_vendor = "apple"); dependencies objc2-quartz-core.
- wgpu-hal-30.0.1: remove dependencies under cfg(target_vendor = "apple"); dependencies raw-window-metal.
- wgpu-hal-30.0.1: remove dependencies under cfg(unix); dependencies libc.
- wgpu-hal-30.0.1: remove dependencies under cfg(unix); dependencies wayland-sys.
- wgpu-hal-30.0.1: remove dependencies under cfg(windows); dependencies bit-set.
- wgpu-hal-30.0.1: remove dependencies under cfg(windows); dependencies glutin_wgl_sys.
- wgpu-hal-30.0.1: remove dependencies under cfg(windows); dependencies once_cell.
- wgpu-hal-30.0.1: remove dependencies under cfg(windows); dependencies range-alloc.
- wgpu-hal-30.0.1: remove dependencies under cfg(windows); dependencies windows.
- wgpu-hal-30.0.1: remove dependencies under cfg(windows); dependencies windows-core.
- wgpu-hal-30.0.1: remove dependencies under cfg(windows); dependencies windows-result.
- wgpu-hal-30.0.1: feature dx12 removes dep:bit-set; dependency bit-set removed under cfg(windows).
- wgpu-hal-30.0.1: feature dx12 removes dep:gpu-allocator; dependency gpu-allocator removed under cfg(not(target_arch = "wasm32")).
- wgpu-hal-30.0.1: feature dx12 removes dep:libloading; dependency libloading removed under cfg(not(target_arch = "wasm32")) / cfg(target_os = "emscripten").
- wgpu-hal-30.0.1: feature dx12 removes dep:once_cell; dependency once_cell removed under cfg(windows).
- wgpu-hal-30.0.1: feature dx12 removes dep:range-alloc; dependency range-alloc removed under cfg(windows).
- wgpu-hal-30.0.1: feature dx12 removes dep:windows-core; dependency windows-core removed under cfg(windows).
- wgpu-hal-30.0.1: feature dx12 removes gpu-allocator/d3d12; dependency gpu-allocator removed under cfg(not(target_arch = "wasm32")).
- wgpu-hal-30.0.1: feature dx12 removes once_cell/std; dependency once_cell removed under cfg(windows).
- wgpu-hal-30.0.1: feature dx12 removes windows/Win32_Devices_DeviceAndDriverInstallation; dependency windows removed under cfg(windows).
- wgpu-hal-30.0.1: feature dx12 removes windows/Win32_Devices_Display; dependency windows removed under cfg(windows).
- wgpu-hal-30.0.1: feature dx12 removes windows/Win32_Graphics_Direct3D_Dxc; dependency windows removed under cfg(windows).
- wgpu-hal-30.0.1: feature dx12 removes windows/Win32_Graphics_Direct3D_Fxc; dependency windows removed under cfg(windows).
- wgpu-hal-30.0.1: feature dx12 removes windows/Win32_Graphics_Direct3D; dependency windows removed under cfg(windows).
- wgpu-hal-30.0.1: feature dx12 removes windows/Win32_Graphics_Direct3D12; dependency windows removed under cfg(windows).
- wgpu-hal-30.0.1: feature dx12 removes windows/Win32_Graphics_DirectComposition; dependency windows removed under cfg(windows).
- wgpu-hal-30.0.1: feature dx12 removes windows/Win32_Graphics_Dxgi_Common; dependency windows removed under cfg(windows).
- wgpu-hal-30.0.1: feature dx12 removes windows/Win32_Graphics_Gdi; dependency windows removed under cfg(windows).
- wgpu-hal-30.0.1: feature dx12 removes windows/Win32_Security; dependency windows removed under cfg(windows).
- wgpu-hal-30.0.1: feature dx12 removes windows/Win32_System_Diagnostics_Debug; dependency windows removed under cfg(windows).
- wgpu-hal-30.0.1: feature dx12 removes windows/Win32_System_Kernel; dependency windows removed under cfg(windows).
- wgpu-hal-30.0.1: feature dx12 removes windows/Win32_System_Performance; dependency windows removed under cfg(windows).
- wgpu-hal-30.0.1: feature dx12 removes windows/Win32_System_Threading; dependency windows removed under cfg(windows).
- wgpu-hal-30.0.1: feature dx12 removes windows/Win32_UI_WindowsAndMessaging; dependency windows removed under cfg(windows).
- wgpu-hal-30.0.1: feature gles removes dep:glutin_wgl_sys; dependency glutin_wgl_sys removed under cfg(windows).
- wgpu-hal-30.0.1: feature gles removes dep:khronos-egl; dependency khronos-egl removed under cfg(not(target_arch = "wasm32")) / cfg(target_os = "emscripten").
- wgpu-hal-30.0.1: feature gles removes dep:libloading; dependency libloading removed under cfg(not(target_arch = "wasm32")) / cfg(target_os = "emscripten").
- wgpu-hal-30.0.1: feature gles removes dep:ndk-sys; dependency ndk-sys removed under cfg(target_os = "android").
- wgpu-hal-30.0.1: feature gles removes dep:objc2; dependency objc2 removed under cfg(target_vendor = "apple").
- wgpu-hal-30.0.1: feature gles removes dep:wayland-sys; dependency wayland-sys removed under cfg(unix).
- wgpu-hal-30.0.1: feature gles removes dep:windows-result; dependency windows-result removed under cfg(windows).
- wgpu-hal-30.0.1: feature gles removes windows-result/std; dependency windows-result removed under cfg(windows).
- wgpu-hal-30.0.1: feature gles removes windows/Win32_Graphics_Gdi; dependency windows removed under cfg(windows).
- wgpu-hal-30.0.1: feature gles removes windows/Win32_Graphics_OpenGL; dependency windows removed under cfg(windows).
- wgpu-hal-30.0.1: feature gles removes windows/Win32_System_LibraryLoader; dependency windows removed under cfg(windows).
- wgpu-hal-30.0.1: feature gles removes windows/Win32_UI_WindowsAndMessaging; dependency windows removed under cfg(windows).
- wgpu-hal-30.0.1: feature metal removes dep:block2; dependency block2 removed under cfg(target_vendor = "apple").
- wgpu-hal-30.0.1: feature metal removes dep:libloading; dependency libloading removed under cfg(not(target_arch = "wasm32")) / cfg(target_os = "emscripten").
- wgpu-hal-30.0.1: feature metal removes dep:objc2; dependency objc2 removed under cfg(target_vendor = "apple").
- wgpu-hal-30.0.1: feature metal removes dep:objc2-core-foundation; dependency objc2-core-foundation removed under cfg(target_vendor = "apple").
- wgpu-hal-30.0.1: feature metal removes dep:objc2-core-graphics; dependency objc2-core-graphics removed under cfg(target_vendor = "apple").
- wgpu-hal-30.0.1: feature metal removes dep:objc2-foundation; dependency objc2-foundation removed under cfg(target_vendor = "apple").
- wgpu-hal-30.0.1: feature metal removes dep:objc2-metal; dependency objc2-metal removed under cfg(target_vendor = "apple").
- wgpu-hal-30.0.1: feature metal removes dep:objc2-quartz-core; dependency objc2-quartz-core removed under cfg(target_vendor = "apple").
- wgpu-hal-30.0.1: feature metal removes dep:smallvec; dependency smallvec removed under cfg(not(target_arch = "wasm32")).
- wgpu-hal-30.0.1: feature metal removes dep:raw-window-metal; dependency raw-window-metal removed under cfg(target_vendor = "apple").
- wgpu-hal-30.0.1: feature portable-atomic removes dep:portable-atomic; dependency portable-atomic removed under cfg(any(not(target_has_atomic = "64"), not(target_has_atomic = "ptr"))).
- wgpu-hal-30.0.1: feature portable-atomic removes dep:portable-atomic-util; dependency portable-atomic-util removed under cfg(not(target_has_atomic = "ptr")).
- wgpu-hal-30.0.1: feature renderdoc removes dep:libloading; dependency libloading removed under cfg(not(target_arch = "wasm32")) / cfg(target_os = "emscripten").
- wgpu-hal-30.0.1: feature renderdoc removes dep:renderdoc-sys; dependency renderdoc-sys removed under cfg(not(target_arch = "wasm32")).
- wgpu-hal-30.0.1: feature static-dxc removes dep:mach-dxcompiler-rs; dependency mach-dxcompiler-rs removed under cfg(all(windows, not(target_arch = "aarch64"), target_env = "msvc")).
- wgpu-hal-30.0.1: feature vulkan removes dep:android_system_properties; dependency android_system_properties removed under cfg(target_os = "android").
- wgpu-hal-30.0.1: feature vulkan removes dep:ash; dependency ash removed under cfg(not(target_arch = "wasm32")).
- wgpu-hal-30.0.1: feature vulkan removes dep:libc; dependency libc removed under cfg(unix).
- wgpu-hal-30.0.1: feature vulkan removes dep:libloading; dependency libloading removed under cfg(not(target_arch = "wasm32")) / cfg(target_os = "emscripten").
- wgpu-hal-30.0.1: feature vulkan removes dep:raw-window-metal; dependency raw-window-metal removed under cfg(target_vendor = "apple").
- wgpu-hal-30.0.1: feature vulkan removes dep:smallvec; dependency smallvec removed under cfg(not(target_arch = "wasm32")).
- wgpu-hal-30.0.1: feature vulkan removes dep:windows; dependency windows removed under cfg(windows).
- wgpu-hal-30.0.1: feature vulkan removes gpu-allocator/vulkan; dependency gpu-allocator removed under cfg(not(target_arch = "wasm32")).
- wgpu-hal-30.0.1: feature vulkan removes windows/Win32; dependency windows removed under cfg(windows).
- wgpu-hal-30.0.1: feature vulkan removes windows/Win32_Devices_Display; dependency windows removed under cfg(windows).
- wgpu-hal-30.0.1: feature vulkan removes windows/Win32_Foundation; dependency windows removed under cfg(windows).
- wgpu-hal-30.0.1: feature vulkan removes windows/Win32_Graphics_Dxgi; dependency windows removed under cfg(windows).
- wgpu-hal-30.0.1: feature vulkan removes windows/Win32_Graphics_Dxgi_Common; dependency windows removed under cfg(windows).
- wgpu-hal-30.0.1: feature vulkan removes windows/Win32_Graphics_Gdi; dependency windows removed under cfg(windows).
- zerocopy-0.8.61: remove dependencies under cfg(any()); dependencies zerocopy-derive.
- zip-3.0.0: remove dependencies under cfg(fuzzing); dependencies arbitrary.
-
-Count correction: 28 changed manifests /121 individual TOML dependency table sections /109 feature items. Earlier57/59 counted grouped cfg+kind sections, not individual dependency tables. Initial indexmap failure exposed my filter treating a dev-dependency as preserving an optional normal dependency; fixed only that bookkeeping bug with a failing then passing regression. No inventory expansion.
-
-Resolution stop: vello_cpu0.1.0 optional normal glifo ^0.2.0 (locked0.2.0) is outside reviewed209 (reviewed glifo is0.3.0). No cfg-filtered section controls it. Stopped per sage-3984g; no import/fetch. Offline size receipt full-lock-cache-size.json: 538 third-party lock records =534 registry +4 git. Default cache175 present/359 missing,16,666,072 archive bytes; existing Louie toolchain cache534 present/0 missing,85,234,501 bytes; S0 cache412 present/122 missing,44,438,740 bytes. Sent Sage gyro-0011. Root closure/release/CSP acceptance is unproved.
-
-## Full-lock scratch measurement — sage-3992
-
-Scope is measurement only, entirely under
-`/mnt/storage/scratch/gyro-full-lock-measure-95ntu6t0`. No additional source,
-outputs or tool binaries imported into the repository; no commit/push. The
-restricted-runtime/security/CSP gates remain open. No further manifest surgery.
-
-Extraction from Louie's pre-existing cache verified every registry archive
-against the ORIGINAL Cargo.lock checksum, with no fetch. All four git lock
-records were excluded from this extraction. Registry results (534 packages):
-
- Original archive total: 85,234,501 bytes.
- Extracted archive content: 24,844 files / 611,577,974 bytes.
- Including 534 generated Cargo checksum files: 25,378 files / 614,049,226 bytes.
- Beyond the reviewed 209, the full 538 lock set adds 329 packages: 328 registry
-  plus one git package. The additional registry content alone is 15,005 files /
-  484,646,629 bytes including generated checksums. The fourth git package was
-  neither fetched nor copied. Full details: full-lock-extracted-size.json.
-
-For the measurement build, three ALREADY REVIEWED git packages were copied from
-owned cargo-vendor into scratch after registry extraction. No new git source
-was imported. Source is the owned source copy with the already approved local
-15-member workspace reduction and unchanged vendor manifests/features. The exact
-pinned original icon was restored only in scratch for the original Trunk index.
-This builds the baseline for size/timing; it is not the restricted adapter and
-cannot count as M1-M14 or zero-CSP evidence.
-
-Before compiling, offline cargo tree with normal edges exactly matched S0's
-199 third-party +15 local packages; normal,build exactly matched 209+15. The
-comparison refused on any added/missing pair. Scratch metadata/tree commands and
-the release command each run with unshare --user --map-root-user --net, nice19,
-four Cargo jobs, isolated HOME/CARGO_HOME and a fresh scratch TMPDIR. There is no
-connected network interface in these namespaces, only loopback; Cargo and Trunk
-also have offline enabled and Trunk update checks disabled. Inherited Rust flags
-are refused and none are set for this measurement. Release build started after
-those package-closure checks; result/timing/output pack measurement pending.
-
-Tool availability/provenance on this host:
-
- rustc/Cargo 1.99.1 and wasm32-unknown-unknown std: existing isolated rustup
-  stable toolchain under Louie's evaluation toolchain directory, installed Oct21;
-  rustup settings and target manifests identify it. No install repeated.
- Trunk0.22.0: existing isolated cargo install; .crates.toml records the exact
-  version and crates.io origin. No install repeated.
- wasm-bindgen0.2.129 and wasm-opt131: existing Trunk versioned helper cache,
-  copied to isolated scratch cache/PATH. No download. Their original download
-  commands are not present in Louie's evaluation report.
- Five executable versions/hashes and Rust support hashes: toolchain.json.
-  All required tools are already present; this build needs no network.
-
-### Measurement environment correction and retry
-
-The first measurement command succeeded in 388.757578 seconds (06:02:17.598Z
-through 06:08:46.356Z). The requested `nice -n19` was relative to inherited
-negative priority; compiler workers were initially nice15. I detected and set
-only this build's processes/threads absolutely to19 during compilation, then
-retained this result as a LIMITED timing, not a whole-run nice19 sample.
-Receipt: full-lock-release-limited.json and measurement-priority-correction.json.
-No baseline source change was made. Sage was told in gyro-0012 before retry.
-
-The one environment retry authorized in sage-3992 establishes absolute nice19
-before child spawn, uses a fresh target-retry directory, CARGO_BUILD_JOBS=4,
-BINARYEN_CORES=4 and a four-CPU affinity inherited by all build children.
-measurement-retry-priority.jsonl confirms Trunk/Cargo/rustc at19 on those CPUs.
-The harness separately reprioritizes the waiting Python launcher, so launcher
-priority alone is not the build-child measurement. The network namespace,
-offline flags and isolated source/vendor/tool environment are unchanged.
-
-### Full-lock measurement results (sage-3992)
-
-The valid environment retry succeeded, exit0, in **397.864805 seconds** (06:09:38.409Z–06:16:16.274Z), from a fresh target directory. Actual Trunk/Cargo/rustc/wasm-opt children were nice19, four-CPU affinity; Cargo jobs4 and Binaryen cores4. The waiting Python launcher was independently reprioritized to-4 by the harness; that is recorded separately and does not describe build child priority. Evidence: full-lock-release-measurement.json, measurement-retry-priority.jsonl and measurement-release.log. Three existing engine dead-code warnings; no build error.
-
-| Baseline measurement output | Bytes | SHA-256 |
-|---|---:|---|
-| index.html | 1604 | 299b76f4004bbc65204d561cc381b3fbb249d10069eaa50e88c7fba3b6c63cb8 |
-| wordcraft-fa59e09a3f921e03.ico | 18378 | 53a23dcf66260f44d87d4d143d633395f3e967f391eda47e6e9cc3a52f820225 |
-| wordcraft-web-832240fdc6ce872b_bg.wasm | 43957877 | c1c15050a9b394c21e7540aa57c9292b86d32bfea2476094a9976304dacf1de0 |
-| wordcraft-web-88f7089f25a3b338.js | 164941 | 866a1de6a33eff2ded8ae9588fd049aeacfc42557a3863ccd2107b3faf4d691e |
-
-Total runtime output: **44142800 bytes**. Output blobs alone pack to **16720159 bytes** using Git2.55.0: hash-object -w into a NEW scratch bare repo, sorted four blob IDs through pack-objects --stdout --threads=4. No git gc, no object writes in the Mosaic repository; count-objects receipts are in measurement-output-pack.json. The empty internal .trunk-lock is excluded. This is an independent four-blob pack, not a cross-version delta estimate and not the whole-row pack. Whole-row pack measurement remains unavailable because this work is not committed.
-
-**Network access was disabled:** every Cargo/Trunk command ran in a new isolated user/network namespace with no connected interface; the topology receipt shows only zero-traffic loopback. Cargo and Trunk offline flags and disabled Trunk version checks were also enforced. No fetch/install was needed. No host HOME, Cargo config or credentials were passed into the build environment.
-
-Read-only metadata observation: the unfiltered scratch resolver has238 package records; root tree joins give exactly214 normal and224 normal+build (199/209 third-party +15 local). Fourteen metadata-only extra packages total14,523,104 extracted bytes. measurement-resolution-extra-packages.json lists them for the packaging decision; no smaller vendor experiment/import was performed, and this does not clear additional source for landing.
-
-Both requested scratch measurements are complete. No full-lock vendor source or runtime output entered the repository, no commit/push, no serving route or live change. The packaging choice still waits on Mos/Jason; M1–M14, restricted adapter, two-root reproducibility, CSP/browser and full package checks are unproved. Row310 stays in-progress, not in-review.
-
-## 223-source measurement — sage-4008 and sage-4010
-
-Mos mos-1574 requested the209+14 comparison before Jason chooses (Vikunja618). Scratch only: /mnt/storage/scratch/gyro-223-measure-mzbp0x23. The source includes exactly223 packages: owned reviewed209 plus14 checksum-verified registry archives from the existing cache. No other package, no fetch, no source adoption. Original vendor manifests are preserved for sizing.
-
-| Pristine source set | Files incl checksums | Bytes incl checksums | Independent Git blob pack bytes |
-|---|---:|---:|---:|
-| Extra14 | 702 | 14523104 | 1720566 |
-| Total223 | 11201 | 145260334 | 26538894 |
-
-Packs use the prior output-pack method: source files hash-object -w --no-filters into a NEW scratch bare repository, then sorted unique blob IDs to pack-objects --stdout --threads=4, at nice19. No gc, tree/commit objects or cross-version delta estimate. Pack/input digests and count-objects: measurement-223-source-packs.json and measurement-223-input-manifest.json. Sizes include all original package files (no vendor pruning), plus generated .cargo-checksum.json.
-
-### Resolution and lock result
-
-Unfiltered223 with the original pin lock: metadata --offline --locked exits101 on missing native-only cpufeatures (exact error in measurement-223-unfiltered-resolution.json). Existing packet filterVendorManifest was then applied mechanically to the scratch copy:31 manifests /155 individual false-target dependency table sections /133 dangling feature items, including3 additional changed manifests from the14. No new algorithm or hand edits. Original reviewed209 source remains untouched. Filtered metadata --offline --locked exits101: cannot update Cargo.lock because --locked prevents this. Original lock remains06b745e43c13df3df7f048fa6a1981625ce7a5fe4cd484bc6254d0913d865b0b.
-
-sage-4010 separately authorized one cargo metadata --offline run WITHOUT --locked in another scratch source copy. It exited0 and generated a lock with226 entries against the original558: **332 removed,0 added,0 changed** when comparing name/version/source/checksum entry by entry. Pruned SHA2563401363e100783dc70c8f5ba09324947c0b6f8562f1ac1cbbc61a0497200c17f. Exact diff and generated lock are measurement-223-lock-diff.json and measurement-223-pruned-Cargo.lock.txt. The original source lock was not modified, and there were no manual lock edits.
-
-CLEAR request gyro-0015 covers one release measurement under --locked/--frozen with that generated lock, nice19,4 jobs/cores, isolated netns, fresh HOME/CARGO_HOME/TMPDIR/target and one environment-fault retry. sage-4011 approves the description but withholds CLEAR until row327 landing gate finishes (roughly06:45–06:55Z). **No223 release build has run.** Packaging choice and row310 remain held. Shipping a pruned lock is itself a packaging change needing S0 reviewer and Jason's choice; this measurement does not adopt it.
-
-### Fourteen-package source and notice inventory
-
-Every source is registry+https://github.com/rust-lang/crates.io-index. Exact archive SHA256/size and notice-file SHA256/size: measurement-223-inputs.json; all present notice text: measurement-14-notices.txt. No election or license approval is asserted.
-
-| Package | Version | Declared license expression | Notice/license files present |
-|---|---|---|---|
-| cursor-icon | 1.2.0 | MIT OR Apache-2.0 OR Zlib | LICENSE-APACHE, LICENSE-MIT, LICENSE-ZLIB |
-| dpi | 0.1.2 | Apache-2.0 AND MIT | LICENSE, LICENSE-LIBM-MIT |
-| futures-macro | 0.3.34 | MIT OR Apache-2.0 | LICENSE-APACHE, LICENSE-MIT |
-| glifo | 0.2.0 | Apache-2.0 OR MIT | LICENSE-APACHE, LICENSE-MIT |
-| ordered-float | 5.5.0 | MIT | LICENSE-MIT |
-| pin-project | 1.1.13 | Apache-2.0 OR MIT | LICENSE-APACHE, LICENSE-MIT |
-| pin-project-internal | 1.1.13 | Apache-2.0 OR MIT | LICENSE-APACHE, LICENSE-MIT |
-| smol_str | 0.2.2 | MIT OR Apache-2.0 | LICENSE-APACHE, LICENSE-MIT |
-| spirv | 0.4.0+sdk-1.4.341.0 | Apache-2.0 | **None present** |
-| termcolor | 1.4.1 | Unlicense OR MIT | COPYING, LICENSE-MIT, UNLICENSE |
-| tracing | 0.1.44 | MIT | LICENSE |
-| tracing-attributes | 0.1.31 | MIT | LICENSE |
-| tracing-core | 0.1.36 | MIT | LICENSE, src/spin/LICENSE |
-| winit | 0.30.13 | Apache-2.0 | LICENSE |
-
-spirv has no license/notice file in its archive despite declaring Apache-2.0; this needs Gladstone's notice review before adoption. dpi declares Apache-2.0 AND MIT and includes LICENSE-LIBM-MIT; tracing-core includes an additional src/spin/LICENSE. Both are inventoried, not flattened to a single default text. No source code or binaries from any crate are included in this plain-text evidence commit.
-
-Plain-text packet hygiene: trailing spaces in Node assertion transcripts normalized before commit (filter-dev-red.txt, cfg-red.txt, filter-red.txt); test outcomes and source/notice hashes unchanged.
-
-## 223 release result and notice supplement — sage-4014
-
-sage-4014 CLEAR supersedes the earlier slot hold. Build started06:31:53.099Z and finished06:38:13.773Z, exit0, **380.674036 seconds**. No retry used. Frozen+locked generated lock remains3401363e100783dc70c8f5ba09324947c0b6f8562f1ac1cbbc61a0497200c17f; original06b745e4... remains unchanged. Actual Trunk/Cargo/rustc/wasm-opt at nice19, CPUs12–15, Cargo jobs4/Binaryen cores4; fresh HOME/CARGO_HOME/TMPDIR/target; isolated netns with no external interface and offline/update-check-disabled tooling. No network access or fetch. Three existing engine dead-code warnings; no build error. Slot released to Sage for Bradford in gyro-0018 immediately after completion.
-
-Frozen/offline cargo-tree preflight exactly matches S0:214 normal and224 normal+build records (199/209 third-party plus15 local), no added/missing package identities. measurement-223-build-preflight.json records this.
-
-| Scratch baseline output | Bytes | SHA-256 |
-|---|---:|---|
-| index.html | 1604 | 28ce55d5c017d545aaac91bbd96f22e6ebd3b35af8d856315cdcb150a2a4a57d |
-| wordcraft-fa59e09a3f921e03.ico | 18378 | 53a23dcf66260f44d87d4d143d633395f3e967f391eda47e6e9cc3a52f820225 |
-| wordcraft-web-88f7089f25a3b338.js | 164941 | 866a1de6a33eff2ded8ae9588fd049aeacfc42557a3863ccd2107b3faf4d691e |
-| wordcraft-web-8e80c8f64c8671f7_bg.wasm | 43952335 | 0322beb9e58b9abeed6b6e05125879bfb3eccbebb05094e191df3542a74007ea |
-
-Total output **44137258 bytes**. The WASM SHA256 **does not equal** the full-lock build c1c15050a9b394c21e7540aa57c9292b86d32bfea2476094a9976304dacf1de0. No reproducibility or functional/CSP equivalence is asserted. Source roots and packaging differ; this run does not isolate the reason for the hash difference. Full result, child priority observations and log: measurement-223-build.json, measurement-223-build-priority.jsonl, measurement-223-release.log.
-
-### Gladstone supplemental review and notice response
-
-gladstone-0026 (06:37:48Z) independently checked the14 original archive checksums and original manifest/source/license inventory:10 supplemental PASS /4 CONCERN. This is not adoption or candidate approval. Checked flags: winit has one cfg-alias build script; futures-macro, pin-project-internal and tracing-attributes are proc-macros; winit has native cfg paths and Worker/Blob source. None of14 appears in the measured normal/build target closure. Source-level Worker/native flags do not imply permission to select those paths or relax Q234.
-
-The filename-only notice collector missed embedded W3C terms in cursor-icon/src/lib.rs and winit/src/keyboard.rs. After re-reading those actual headers, measurement-14-notices.txt now includes each complete embedded license, short notice, source document URI and attribution. measurement-14-notice-supplement.json records original source hashes/line spans and extracted text hashes. The added W3C form remains an explicit S0/license-adoption review gate, not silently folded into the root SPDX expressions.
-
-dpi remains **Apache-2.0 AND MIT** for the full-source inventory: both root LICENSE and LICENSE-LIBM-MIT retained, plus README feature explanation and complete libm copyright header added to the notice packet. No Apache-only election. tracing-core retains root LICENSE and distinct src/spin/LICENSE. spirv has no text file in its archive; supplemental mapping explicitly supplies the standard Apache-2.0 text from the pinned WordCraft LICENSE-APACHE, following S0 M13 missing-file treatment, with its source pin/hash recorded. This is an evidence mapping, not a shipping approval.
-
-measurement-14-binary-inputs.json now lists all four winit example PNGs: examples/data/cross.png159B, cross2.png129B, gradient.png229B, icon.png2950B, each with SHA256. No other non-UTF8/NUL payload among14. They remain scratch source inputs; no binary is in this evidence commit.
-
-All runtime outputs and all223 crate sources remain scratch-only. Only plain-text results/notices/metadata are committed. Shipping the pruned lock, the14 additions, new W3C notice form and repository size still require S0 reviewer/owner choices. Row310 stays held for Vikunja618; restricted adapter, M1–M14, two-root reproducibility and CSP/browser acceptance remain unproved.
-
-## Supplemental notice recheck — gladstone-0027
-
-Gladstone rechecked the collection delta at9522d2356 against1716f5a22 on
-2026-10-24T06:44:42Z. All four prior notice-collection/mapping gaps now PASS as
-supplemental evidence: cursor-icon embedded W3C text/attribution, dpi full-source
-conjunction/copyrights, spirv explicit standard Apache-2.0 text mapping, and
-winit embedded W3C text plus four example PNG records. The earlier ten package
-source/notice PASS results stand. tracing-core root/spin license texts remain
-complete. No additional collection gap was found in this requested delta.
-
-Reviewer independently verified original header/source hashes and extracted
-notice hashes, PNG/archive bytes, all12 incremental path hashes and changed-path
-set, UTF8/no-NUL boundary and diff whitespace check. Bundle SHA256
-4d8e2aac5de85d3f3145d5d3945924436d1c30bc043fb3e2d4391cd98b1adbde also matches
-this worktree's fresh hash check.
-
-This recheck is **not adoption or candidate approval**. New W3C terms still need
-explicit M13/license/owner adoption review; dpi conjunction and spirv mapping
-must carry into any shipped M13 bundle; PNG classification and future selection
-of Worker/native paths remain explicit gates. Gladstone did not rerun or
-functionally/CSP-validate the WASM. Its differing hash, the pruned lock and
-packaging/size choice remain uncleared. S0 M1–M14, Jason's choice/Vikunja618 and
-the row310 hold remain in force. No further build, source, notice-text or runtime
-change was made to record this result.
@@ -1,57 +0,0 @@
-# W2 offline packaging decision — 2026-10-24
-
-Sage requested this consolidated stop report in sage-3983. No additional
-category has been applied. No release build, commit or push has run.
-
-The original source/lock resolve packages outside the reviewed WASM target.
-The imported vendor tree contains exactly S0's 209 third-party identities:
-199 normal plus 10 build-only; the web root adds 15 local crates. Original
-source lock has 538 third-party records; S0 workspace metadata has 293 total
-resolved packages after target filtering. These are different sets.
-
-Approved and exercised only in scratch:
-
- Local workspace: 15 members/default web root; remove 12 dev/native sections.
-  Original included upstream bytes stay identical to the source pin. The local
-  manifest deltas are currently in source-build.patch and BUILD.md.
- Third-party target filtering: 28 manifests / 59 sections after adding explicit
-  false custom cfgs fuzzing/loom/miri (sage-3983); 26/57 before that ruling.
-  All other unknown cfgs remain unknown. target-filter-plan.json is the list.
- Dangling feature lists: 103 removed items across 8 manifests (sage-3982),
-  mechanically applied in scratch from dangling-features.json. Original vendor
-  bytes/checksums stay intact; scratch checksum updates touch only Cargo.toml.
- Release flags must refuse inherited RUSTFLAGS/CARGO_ENCODED_RUSTFLAGS/
-  RUSTDOCFLAGS/CARGO_TARGET_*_RUSTFLAGS/CARGO_BUILD_RUSTFLAGS. Not yet implemented.
- Gate narrowing from sage-3983: compare root-specific resolved package/selected
-  feature closures before/after packaging, not complete workspace-unified S0
-  feature text. Both package closures must match the 199/209 S0 sets. Still
-  unproved: pristine 209-only vendor itself cannot resolve the broader lock.
-
-The next refusal is an unresolved cfg category: encoding_rs 0.8.42 declares
-`simdutf8` 0.1.5 under cfg(any(x86_64,x86,aarch64,all(wasm32,simd128))).
-The default pinned wasm target has no simd128 feature, but the conservative
-filter retains unknown target_feature conditions rather than treating every
-potential target feature as false. No target_feature-based removal was made.
-The latest command/error is in offline-resolution.txt. Beyond that exact
-refusal, a static survey identifies 176 unconditional optional dependency
-entries (110 names across 82 manifests) absent from the 209; see
-unselected-dependency-resolution.json. These are not current errors and no
-such dependency was removed. They show why continued iterative reduction may
-require another category. This is a lower-bound survey, not a claim that
-removing all of those would make resolution succeed.
-
-Decision requested: continue reducing target-feature and unselected optional dependency metadata,
-or adopt the full-lock vendor tree with a separately identified resolution-only
-inventory. I recommend the full-lock vendor approach: it preserves upstream
-manifests/features and makes before/after root-closure comparison possible
-without accumulating more manifest surgery. It adds source/notice review and
-size; no extra package should enter the compiled web closure. This is not
-permission to fetch/import extra sources. Sage decides that boundary.
-
-Current tree sizes: upstream 582 files / 21,021,869 bytes; vendor 209 packages /
-10,499 files / 130,737,230 bytes; combined 151,759,099 bytes. Upstream exclusions
-are the authorized 30 icon/screenshot/macOS packaging paths, all enumerated in
-BUILD.md/PROVENANCE.json. No license/notice/copyright is omitted; no vendor file
-is dropped. Binary path/size inventory is binary-inputs.json (18 upstream and
-74 vendor non-text files). Source subset/integrity checks pass 3/3; build test
-is 1/2, with runtime-output check expected red because nothing is built yet.
@@ -1,370 +0,0 @@
-[
-  {
-    "path": "packages/webui/third_party/wordcraft/upstream/assets/fonts/Inter-Medium.ttf",
-    "bytes": 417300
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/upstream/assets/fonts/Inter-Regular.ttf",
-    "bytes": 411640
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/upstream/assets/fonts/Inter-SemiBold.ttf",
-    "bytes": 419744
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/upstream/assets/fonts/JetBrainsMono-Regular.ttf",
-    "bytes": 270224
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/upstream/assets/fonts/SourceSans3-Bold.ttf",
-    "bytes": 428176
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/upstream/assets/fonts/SourceSans3-It.ttf",
-    "bytes": 315812
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/upstream/assets/fonts/SourceSans3-Regular.ttf",
-    "bytes": 431196
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/upstream/assets/fonts/SourceSans3-Semibold.ttf",
-    "bytes": 425904
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/upstream/assets/fonts/SourceSerif4-Bold.ttf",
-    "bytes": 271568
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/upstream/assets/fonts/SourceSerif4-BoldIt.ttf",
-    "bytes": 191832
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/upstream/assets/fonts/SourceSerif4-It.ttf",
-    "bytes": 187808
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/upstream/assets/fonts/SourceSerif4-Regular.ttf",
-    "bytes": 261868
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/upstream/assets/fonts/SourceSerif4-Semibold.ttf",
-    "bytes": 272088
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/upstream/assets/hyphenation/en-us.dic",
-    "bytes": 432905
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/upstream/docs/brand/artcraft-logo-white.png",
-    "bytes": 32161
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/upstream/docs/brand/artcraft-logo.png",
-    "bytes": 31302
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/upstream/docs/brand/artcraft-mark-black.png",
-    "bytes": 26793
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/upstream/docs/brand/artcraft-mark.png",
-    "bytes": 24715
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/aes-0.9.3/tests/data/aes128.blb",
-    "bytes": 27420
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/aes-0.9.3/tests/data/aes192.blb",
-    "bytes": 41324
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/aes-0.9.3/tests/data/aes256.blb",
-    "bytes": 49596
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/brotli-decompressor-5.0.3/src/bin/ipsum.brotli",
-    "bytes": 1752
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/cfb-0.15.0/tests/infinite_loops_fuzzed/loop_in_alloc",
-    "bytes": 14106
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/cfb-0.15.0/tests/infinite_loops_fuzzed/loop_in_chain",
-    "bytes": 16959
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/cfb-0.15.0/tests/infinite_loops_fuzzed/loop_in_directory",
-    "bytes": 13954
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/cfb-0.15.0/tests/infinite_loops_fuzzed/loop_in_minialloc",
-    "bytes": 14336
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/cfb-0.15.0/tests/infinite_loops_fuzzed/loop_in_minichain",
-    "bytes": 13992
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/cfb-0.15.0/tests/infinite_loops_fuzzed/loop_in_open_1",
-    "bytes": 1049
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/cfb-0.15.0/tests/infinite_loops_fuzzed/loop_in_open_2",
-    "bytes": 13830
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/cfb-0.15.0/tests/panics_fuzzed/alloc_panic",
-    "bytes": 16928
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/cfb-0.15.0/tests/panics_fuzzed/minialloc_panic",
-    "bytes": 16909
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/cipher-0.5.2/tests/data/dummy_stream_cipher.blb",
-    "bytes": 84
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/digest-0.11.3/tests/data/fixed_hash_serialization.bin",
-    "bytes": 16
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/eframe-0.36.2/data/icon.png",
-    "bytes": 12052
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/epaint_default_fonts-0.36.2/fonts/Hack-Regular.ttf",
-    "bytes": 309408
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/epaint_default_fonts-0.36.2/fonts/NotoEmoji-Regular.ttf",
-    "bytes": 418804
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/epaint_default_fonts-0.36.2/fonts/Ubuntu-Light.ttf",
-    "bytes": 361676
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/epaint_default_fonts-0.36.2/fonts/emoji-icon-font.ttf",
-    "bytes": 324132
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/fdeflate-0.3.7/tests/input-chunking-sensitivity-example1.zz",
-    "bytes": 207
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/fdeflate-0.3.7/tests/input-chunking-sensitivity-example2.zz",
-    "bytes": 41
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/fdeflate-0.3.7/tests/input-chunking-sensitivity-example3.zz",
-    "bytes": 52
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/flate2-1.1.10/examples/hello_world.txt.gz",
-    "bytes": 33
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/flate2-1.1.10/tests/good-file.gz",
-    "bytes": 6766
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/flate2-1.1.10/tests/multi.gz",
-    "bytes": 53
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/hmac-0.13.0/tests/data/hmac_md5_rfc2104.blb",
-    "bytes": 246
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/hmac-0.13.0/tests/data/hmac_sha1_wycheproof.blb",
-    "bytes": 4877
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/hmac-0.13.0/tests/data/hmac_sha224_rfc4231.blb",
-    "bytes": 804
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/hmac-0.13.0/tests/data/hmac_sha256_rfc4231.blb",
-    "bytes": 832
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/hmac-0.13.0/tests/data/hmac_sha256_wycheproof.blb",
-    "bytes": 6155
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/hmac-0.13.0/tests/data/hmac_sha384_rfc4231.blb",
-    "bytes": 944
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/hmac-0.13.0/tests/data/hmac_sha384_wycheproof.blb",
-    "bytes": 7859
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/hmac-0.13.0/tests/data/hmac_sha512_rfc4231.blb",
-    "bytes": 1063
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/hmac-0.13.0/tests/data/hmac_sha512_wycheproof.blb",
-    "bytes": 9650
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/hmac-0.13.0/tests/data/hmac_streebog256_gost.blb",
-    "bytes": 85
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/hmac-0.13.0/tests/data/hmac_streebog512_gost.blb",
-    "bytes": 118
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/krilla-0.8.2/icc/sGrey-v2-magic.icc",
-    "bytes": 616
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/krilla-0.8.2/icc/sGrey-v4.icc",
-    "bytes": 360
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/krilla-0.8.2/icc/sRGB-v2-magic.icc",
-    "bytes": 736
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/krilla-0.8.2/icc/sRGB-v4.icc",
-    "bytes": 480
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/pdf-writer-0.15.0/examples/bear-1280x720.jpg",
-    "bytes": 67710
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/pdf-writer-0.15.0/examples/bear-1280x720.mp4",
-    "bytes": 715963
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/pdf-writer-0.15.0/examples/rhino.png",
-    "bytes": 215287
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/pdf-writer-0.15.0/examples/sRGB_v4.icc",
-    "bytes": 60960
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/pdf-writer-0.15.0/examples/tiger-cmyk.jpg",
-    "bytes": 945216
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/sha1-0.11.0/tests/data/sha1_kat.blb",
-    "bytes": 235
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/sha1-0.11.0/tests/data/sha1_serialization.bin",
-    "bytes": 92
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/sha2-0.11.0/tests/data/sha224_kat.blb",
-    "bytes": 179
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/sha2-0.11.0/tests/data/sha224_serialization.bin",
-    "bytes": 104
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/sha2-0.11.0/tests/data/sha256_kat.blb",
-    "bytes": 191
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/sha2-0.11.0/tests/data/sha256_serialization.bin",
-    "bytes": 104
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/sha2-0.11.0/tests/data/sha384_kat.blb",
-    "bytes": 239
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/sha2-0.11.0/tests/data/sha384_serialization.bin",
-    "bytes": 208
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/sha2-0.11.0/tests/data/sha512_224_kat.blb",
-    "bytes": 179
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/sha2-0.11.0/tests/data/sha512_224_serialization.bin",
-    "bytes": 208
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/sha2-0.11.0/tests/data/sha512_256_kat.blb",
-    "bytes": 191
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/sha2-0.11.0/tests/data/sha512_256_serialization.bin",
-    "bytes": 208
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/sha2-0.11.0/tests/data/sha512_kat.blb",
-    "bytes": 290
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/sha2-0.11.0/tests/data/sha512_serialization.bin",
-    "bytes": 208
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/tiff-0.11.3/tests/decodedata-rgb-3c-8b.tiff",
-    "bytes": 30180
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/ttf-parser-0.25.1/examples/wasm/TTC.ttc",
-    "bytes": 2608
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/ttf-parser-0.25.1/tests/fonts/bitmap.otb",
-    "bytes": 2072
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/ttf-parser-0.25.1/tests/fonts/colr_1.ttf",
-    "bytes": 21568
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/ttf-parser-0.25.1/tests/fonts/colr_1_variable.ttf",
-    "bytes": 53096
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/ttf-parser-0.25.1/tests/fonts/demo.ttf",
-    "bytes": 400
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/unicode-ident-1.0.26/tests/fst/xid_continue.fst",
-    "bytes": 78779
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/unicode-ident-1.0.26/tests/fst/xid_start.fst",
-    "bytes": 69927
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/vello_common-0.1.0/assets/probe.png",
-    "bytes": 877
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/vello_common-0.1.0/assets/probe.rgba",
-    "bytes": 10404
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/vello_common-0.2.0/assets/probe.png",
-    "bytes": 877
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/vello_common-0.2.0/assets/probe.rgba",
-    "bytes": 10404
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/zlib-rs-0.6.8/src/deflate/test-data/inflate_buf_error.dat",
-    "bytes": 67008
-  },
-  {
-    "path": "packages/webui/third_party/wordcraft/cargo-vendor/zlib-rs-0.6.8/src/deflate/test-data/paper-100k.pdf",
-    "bytes": 102400
-  }
-]
@@ -1,27 +0,0 @@
-✔ release build refuses a missing or mismatched pinned tool before compilation (4.631422ms)
-✖ shipped runtime is self-contained and matches every output receipt (0.349349ms)
-ℹ tests 2
-ℹ suites 0
-ℹ pass 1
-ℹ fail 1
-ℹ cancelled 0
-ℹ skipped 0
-ℹ todo 0
-ℹ duration_ms 48.123956
-
-✖ failing tests:
-
-test at packages/webui/tests/wordcraft-build.test.mjs:14:1
-✖ shipped runtime is self-contained and matches every output receipt (0.349349ms)
-  Error: ENOENT: no such file or directory, open '/home/jwoltje/.t3/worktrees/mosaic-stack/gyro-row310/packages/webui/wordcraft/BUILD.json'
-      at readFileSync (node:fs:621:20)
-      at readJSON (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gyro-row310/packages/webui/wordcraft/build.mjs:9:37)
-      at verifyOutputs (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gyro-row310/packages/webui/wordcraft/build.mjs:61:19)
-      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gyro-row310/packages/webui/tests/wordcraft-build.test.mjs:17:18)
-      at async Test.run (node:internal/test_runner/test:1409:7)
-      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
-    errno: -2,
-    code: 'ENOENT',
-    syscall: 'open',
-    path: '/home/jwoltje/.t3/worktrees/mosaic-stack/gyro-row310/packages/webui/wordcraft/BUILD.json'
-  }
@@ -1,46 +0,0 @@
-✖ release build refuses a missing or mismatched pinned tool before compilation (0.932948ms)
-✖ shipped runtime is self-contained and matches every output receipt (0.1963ms)
-ℹ tests 2
-ℹ suites 0
-ℹ pass 0
-ℹ fail 2
-ℹ cancelled 0
-ℹ skipped 0
-ℹ todo 0
-ℹ duration_ms 48.311391
-
-✖ failing tests:
-
-test at packages/webui/tests/wordcraft-build.test.mjs:7:1
-✖ release build refuses a missing or mismatched pinned tool before compilation (0.932948ms)
-  AssertionError [ERR_ASSERTION]: owned builder must exist
-      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gyro-row310/packages/webui/tests/wordcraft-build.test.mjs:8:10)
-      at Test.runInAsyncScope (node:async_hooks:226:14)
-      at Test.run (node:internal/test_runner/test:1402:25)
-      at Test.start (node:internal/test_runner/test:1262:17)
-      at startSubtestAfterBootstrap (node:internal/test_runner/harness:387:17) {
-    generatedMessage: false,
-    code: 'ERR_ASSERTION',
-    actual: false,
-    expected: true,
-    operator: '==',
-    diff: 'simple'
-  }
-
-test at packages/webui/tests/wordcraft-build.test.mjs:14:1
-✖ shipped runtime is self-contained and matches every output receipt (0.1963ms)
-  AssertionError [ERR_ASSERTION]: owned builder must exist
-      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gyro-row310/packages/webui/tests/wordcraft-build.test.mjs:15:10)
-      at Test.runInAsyncScope (node:async_hooks:226:14)
-      at Test.run (node:internal/test_runner/test:1402:25)
-      at Test.processPendingSubtests (node:internal/test_runner/test:974:18)
-      at Test.postRun (node:internal/test_runner/test:1542:19)
-      at Test.run (node:internal/test_runner/test:1467:12)
-      at async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3) {
-    generatedMessage: false,
-    code: 'ERR_ASSERTION',
-    actual: false,
-    expected: true,
-    operator: '==',
-    diff: 'simple'
-  }
@@ -1,10 +0,0 @@
-✔ release cfg evaluation follows pinned rustc and refuses inherited flags (7.782219ms)
-✔ pinned compiler reproduces the recorded wasm target cfg (10.432502ms)
-ℹ tests 2
-ℹ suites 0
-ℹ pass 2
-ℹ fail 0
-ℹ cancelled 0
-ℹ skipped 0
-ℹ todo 0
-ℹ duration_ms 59.893168
@@ -1,38 +0,0 @@
-✖ release cfg evaluation follows pinned rustc and refuses inherited flags (9.116481ms)
-✖ pinned compiler reproduces the recorded wasm target cfg (0.413075ms)
-ℹ tests 2
-ℹ suites 0
-ℹ pass 0
-ℹ fail 2
-ℹ cancelled 0
-ℹ skipped 0
-ℹ todo 0
-ℹ duration_ms 62.764015
-
-✖ failing tests:
-
-test at packages/webui/tests/wordcraft-build.test.mjs:25:1
-✖ release cfg evaluation follows pinned rustc and refuses inherited flags (9.116481ms)
-  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:
-  + actual - expected
-
-  + 'undefined'
-  - 'function'
-
-      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gyro-row310/packages/webui/tests/wordcraft-build.test.mjs:27:10)
-      at async Test.run (node:internal/test_runner/test:1409:7)
-      at async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3) {
-    generatedMessage: true,
-    code: 'ERR_ASSERTION',
-    actual: 'undefined',
-    expected: 'function',
-    operator: 'strictEqual',
-    diff: 'simple'
-  }
-
-test at packages/webui/tests/wordcraft-build.test.mjs:39:1
-✖ pinned compiler reproduces the recorded wasm target cfg (0.413075ms)
-  TypeError: releaseEnvironment is not a function
-      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gyro-row310/packages/webui/tests/wordcraft-build.test.mjs:43:121)
-      at async Test.run (node:internal/test_runner/test:1409:7)
-      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
@@ -1,517 +0,0 @@
-[
-  {
-    "crate": "eframe-0.36.2",
-    "feature": "accesskit",
-    "edge": "egui-winit/accesskit"
-  },
-  {
-    "crate": "eframe-0.36.2",
-    "feature": "android-game-activity",
-    "edge": "egui-winit/android-game-activity"
-  },
-  {
-    "crate": "eframe-0.36.2",
-    "feature": "android-native-activity",
-    "edge": "egui-winit/android-native-activity"
-  },
-  {
-    "crate": "eframe-0.36.2",
-    "feature": "default",
-    "edge": "winit/default"
-  },
-  {
-    "crate": "eframe-0.36.2",
-    "feature": "glow",
-    "edge": "dep:glutin-winit"
-  },
-  {
-    "crate": "eframe-0.36.2",
-    "feature": "glow",
-    "edge": "dep:glutin"
-  },
-  {
-    "crate": "eframe-0.36.2",
-    "feature": "links",
-    "edge": "egui-winit/links"
-  },
-  {
-    "crate": "eframe-0.36.2",
-    "feature": "persistence",
-    "edge": "egui-winit/serde"
-  },
-  {
-    "crate": "eframe-0.36.2",
-    "feature": "wayland",
-    "edge": "egui-winit/wayland"
-  },
-  {
-    "crate": "eframe-0.36.2",
-    "feature": "wayland",
-    "edge": "glutin?/wayland"
-  },
-  {
-    "crate": "eframe-0.36.2",
-    "feature": "wayland",
-    "edge": "glutin-winit?/wayland"
-  },
-  {
-    "crate": "eframe-0.36.2",
-    "feature": "wgpu_no_default_features",
-    "edge": "dep:pollster"
-  },
-  {
-    "crate": "eframe-0.36.2",
-    "feature": "x11",
-    "edge": "egui-winit/x11"
-  },
-  {
-    "crate": "eframe-0.36.2",
-    "feature": "x11",
-    "edge": "glutin?/x11"
-  },
-  {
-    "crate": "eframe-0.36.2",
-    "feature": "x11",
-    "edge": "glutin?/glx"
-  },
-  {
-    "crate": "eframe-0.36.2",
-    "feature": "x11",
-    "edge": "glutin-winit?/x11"
-  },
-  {
-    "crate": "eframe-0.36.2",
-    "feature": "x11",
-    "edge": "glutin-winit?/glx"
-  },
-  {
-    "crate": "encoding_rs-0.8.42",
-    "feature": "std",
-    "edge": "dep:multiversion"
-  },
-  {
-    "crate": "hashbrown-0.17.1",
-    "feature": "serde",
-    "edge": "dep:serde"
-  },
-  {
-    "crate": "indexmap-2.14.2",
-    "feature": "serde",
-    "edge": "dep:serde"
-  },
-  {
-    "crate": "rfd-0.17.2",
-    "feature": "common-controls-v6",
-    "edge": "windows-sys/Win32_UI_Controls"
-  },
-  {
-    "crate": "rfd-0.17.2",
-    "feature": "gtk3",
-    "edge": "gtk-sys"
-  },
-  {
-    "crate": "rfd-0.17.2",
-    "feature": "gtk3",
-    "edge": "glib-sys"
-  },
-  {
-    "crate": "rfd-0.17.2",
-    "feature": "gtk3",
-    "edge": "gobject-sys"
-  },
-  {
-    "crate": "rfd-0.17.2",
-    "feature": "wayland",
-    "edge": "wayland-backend"
-  },
-  {
-    "crate": "rfd-0.17.2",
-    "feature": "wayland",
-    "edge": "wayland-client"
-  },
-  {
-    "crate": "rfd-0.17.2",
-    "feature": "wayland",
-    "edge": "wayland-protocols"
-  },
-  {
-    "crate": "rfd-0.17.2",
-    "feature": "xdg-portal",
-    "edge": "pollster"
-  },
-  {
-    "crate": "uuid-1.27.0",
-    "feature": "fast-rng",
-    "edge": "dep:rand"
-  },
-  {
-    "crate": "uuid-1.27.0",
-    "feature": "rng",
-    "edge": "dep:getrandom"
-  },
-  {
-    "crate": "uuid-1.27.0",
-    "feature": "rng-getrandom",
-    "edge": "dep:getrandom"
-  },
-  {
-    "crate": "uuid-1.27.0",
-    "feature": "rng-rand",
-    "edge": "dep:rand"
-  },
-  {
-    "crate": "wgpu-core-30.0.1",
-    "feature": "angle",
-    "edge": "wgpu-core-deps-apple/angle"
-  },
-  {
-    "crate": "wgpu-core-30.0.1",
-    "feature": "drm",
-    "edge": "wgpu-core-deps-windows-linux-android/drm"
-  },
-  {
-    "crate": "wgpu-core-30.0.1",
-    "feature": "dx12",
-    "edge": "wgpu-core-deps-windows-linux-android/dx12"
-  },
-  {
-    "crate": "wgpu-core-30.0.1",
-    "feature": "gles",
-    "edge": "wgpu-core-deps-windows-linux-android/gles"
-  },
-  {
-    "crate": "wgpu-core-30.0.1",
-    "feature": "gles",
-    "edge": "wgpu-core-deps-emscripten/gles"
-  },
-  {
-    "crate": "wgpu-core-30.0.1",
-    "feature": "metal",
-    "edge": "wgpu-core-deps-apple/metal"
-  },
-  {
-    "crate": "wgpu-core-30.0.1",
-    "feature": "renderdoc",
-    "edge": "wgpu-core-deps-windows-linux-android/renderdoc"
-  },
-  {
-    "crate": "wgpu-core-30.0.1",
-    "feature": "vulkan",
-    "edge": "wgpu-core-deps-windows-linux-android/vulkan"
-  },
-  {
-    "crate": "wgpu-core-30.0.1",
-    "feature": "vulkan-portability",
-    "edge": "wgpu-core-deps-apple/vulkan-portability"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "dx12",
-    "edge": "dep:bit-set"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "dx12",
-    "edge": "dep:gpu-allocator"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "dx12",
-    "edge": "dep:libloading"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "dx12",
-    "edge": "dep:once_cell"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "dx12",
-    "edge": "dep:range-alloc"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "dx12",
-    "edge": "dep:windows-core"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "dx12",
-    "edge": "gpu-allocator/d3d12"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "dx12",
-    "edge": "once_cell/std"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "dx12",
-    "edge": "windows/Win32_Devices_DeviceAndDriverInstallation"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "dx12",
-    "edge": "windows/Win32_Devices_Display"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "dx12",
-    "edge": "windows/Win32_Graphics_Direct3D_Dxc"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "dx12",
-    "edge": "windows/Win32_Graphics_Direct3D_Fxc"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "dx12",
-    "edge": "windows/Win32_Graphics_Direct3D"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "dx12",
-    "edge": "windows/Win32_Graphics_Direct3D12"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "dx12",
-    "edge": "windows/Win32_Graphics_DirectComposition"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "dx12",
-    "edge": "windows/Win32_Graphics_Dxgi_Common"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "dx12",
-    "edge": "windows/Win32_Graphics_Gdi"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "dx12",
-    "edge": "windows/Win32_Security"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "dx12",
-    "edge": "windows/Win32_System_Diagnostics_Debug"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "dx12",
-    "edge": "windows/Win32_System_Kernel"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "dx12",
-    "edge": "windows/Win32_System_Performance"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "dx12",
-    "edge": "windows/Win32_System_Threading"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "dx12",
-    "edge": "windows/Win32_UI_WindowsAndMessaging"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "gles",
-    "edge": "dep:glutin_wgl_sys"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "gles",
-    "edge": "dep:khronos-egl"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "gles",
-    "edge": "dep:libloading"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "gles",
-    "edge": "dep:ndk-sys"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "gles",
-    "edge": "dep:objc2"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "gles",
-    "edge": "dep:wayland-sys"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "gles",
-    "edge": "dep:windows-result"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "gles",
-    "edge": "windows-result/std"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "gles",
-    "edge": "windows/Win32_Graphics_Gdi"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "gles",
-    "edge": "windows/Win32_Graphics_OpenGL"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "gles",
-    "edge": "windows/Win32_System_LibraryLoader"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "gles",
-    "edge": "windows/Win32_UI_WindowsAndMessaging"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "metal",
-    "edge": "dep:block2"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "metal",
-    "edge": "dep:libloading"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "metal",
-    "edge": "dep:objc2"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "metal",
-    "edge": "dep:objc2-core-foundation"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "metal",
-    "edge": "dep:objc2-core-graphics"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "metal",
-    "edge": "dep:objc2-foundation"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "metal",
-    "edge": "dep:objc2-metal"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "metal",
-    "edge": "dep:objc2-quartz-core"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "metal",
-    "edge": "dep:smallvec"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "metal",
-    "edge": "dep:raw-window-metal"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "renderdoc",
-    "edge": "dep:libloading"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "renderdoc",
-    "edge": "dep:renderdoc-sys"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "static-dxc",
-    "edge": "dep:mach-dxcompiler-rs"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "vulkan",
-    "edge": "dep:android_system_properties"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "vulkan",
-    "edge": "dep:ash"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "vulkan",
-    "edge": "dep:libc"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "vulkan",
-    "edge": "dep:libloading"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "vulkan",
-    "edge": "dep:raw-window-metal"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "vulkan",
-    "edge": "dep:smallvec"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "vulkan",
-    "edge": "dep:windows"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "vulkan",
-    "edge": "gpu-allocator/vulkan"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "vulkan",
-    "edge": "windows/Win32"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "vulkan",
-    "edge": "windows/Win32_Devices_Display"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "vulkan",
-    "edge": "windows/Win32_Foundation"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "vulkan",
-    "edge": "windows/Win32_Graphics_Dxgi"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "vulkan",
-    "edge": "windows/Win32_Graphics_Dxgi_Common"
-  },
-  {
-    "crate": "wgpu-hal-30.0.1",
-    "feature": "vulkan",
-    "edge": "windows/Win32_Graphics_Gdi"
-  }
-]
@@ -1,28 +0,0 @@
-✖ a dev dependency cannot preserve a removed optional feature dependency (9.223259ms)
-ℹ tests 1
-ℹ suites 0
-ℹ pass 0
-ℹ fail 1
-ℹ cancelled 0
-ℹ skipped 0
-ℹ todo 0
-ℹ duration_ms 55.624704
-
-✖ failing tests:
-
-test at packages/webui/tests/wordcraft-build.test.mjs:61:1
-✖ a dev dependency cannot preserve a removed optional feature dependency (9.223259ms)
-  AssertionError [ERR_ASSERTION]: The input did not match the regular expression /serde = \[\]/. Input:
-
-  '[features]\nserde = ["dep:serde"]\n[dev-dependencies.serde]\nversion = "1"\n'
-
-      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gyro-row310/packages/webui/tests/wordcraft-build.test.mjs:65:10)
-      at async Test.run (node:internal/test_runner/test:1409:7)
-      at async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3) {
-    generatedMessage: true,
-    code: 'ERR_ASSERTION',
-    actual: '[features]\nserde = ["dep:serde"]\n[dev-dependencies.serde]\nversion = "1"\n',
-    expected: /serde = \[\]/,
-    operator: 'match',
-    diff: 'simple'
-  }
@@ -1,14 +0,0 @@
-✔ release build refuses a missing or mismatched pinned tool before compilation (5.38916ms)
-✔ release cfg evaluation follows pinned rustc and refuses inherited flags (0.546102ms)
-✔ pinned compiler reproduces the recorded wasm target cfg (11.861748ms)
-✔ vendor filtering removes only false target sections and their dangling feature edges (1.475556ms)
-✔ a dev dependency cannot preserve a removed optional feature dependency (0.239783ms)
-✔ pristine vendor deterministically reproduces the recorded filter inventory and patch (49.412038ms)
-ℹ tests 6
-ℹ suites 0
-ℹ pass 6
-ℹ fail 0
-ℹ cancelled 0
-ℹ skipped 0
-ℹ todo 0
-ℹ duration_ms 117.789074
@@ -1,25 +0,0 @@
-✖ pristine vendor deterministically reproduces the recorded filter inventory and patch (77.792167ms)
-ℹ tests 1
-ℹ suites 0
-ℹ pass 0
-ℹ fail 1
-ℹ cancelled 0
-ℹ skipped 0
-ℹ todo 0
-ℹ duration_ms 126.569143
-
-✖ failing tests:
-
-test at packages/webui/tests/wordcraft-build.test.mjs:69:1
-✖ pristine vendor deterministically reproduces the recorded filter inventory and patch (77.792167ms)
-  AssertionError [ERR_ASSERTION]: patch must contain exactly the mechanically reproduced vendor changes
-      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gyro-row310/packages/webui/tests/wordcraft-build.test.mjs:99:12)
-      at async Test.run (node:internal/test_runner/test:1409:7)
-      at async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3) {
-    generatedMessage: false,
-    code: 'ERR_ASSERTION',
-    actual: false,
-    expected: true,
-    operator: '==',
-    diff: 'simple'
-  }
@@ -1,30 +0,0 @@
-✖ vendor filtering removes only false target sections and their dangling feature edges (7.574024ms)
-ℹ tests 1
-ℹ suites 0
-ℹ pass 0
-ℹ fail 1
-ℹ cancelled 0
-ℹ skipped 0
-ℹ todo 0
-ℹ duration_ms 49.047592
-
-✖ failing tests:
-
-test at packages/webui/tests/wordcraft-build.test.mjs:48:1
-✖ vendor filtering removes only false target sections and their dangling feature edges (7.574024ms)
-  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:
-  + actual - expected
-
-  + 'undefined'
-  - 'function'
-
-      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gyro-row310/packages/webui/tests/wordcraft-build.test.mjs:50:10)
-      at async Test.run (node:internal/test_runner/test:1409:7)
-      at async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3) {
-    generatedMessage: true,
-    code: 'ERR_ASSERTION',
-    actual: 'undefined',
-    expected: 'function',
-    operator: 'strictEqual',
-    diff: 'simple'
-  }
@@ -1,52 +0,0 @@
-{
-  "scratchRoot": "/mnt/storage/scratch/gyro-full-lock-measure-95ntu6t0",
-  "startUTC": "2026-10-24T06:02:17.598071+00:00",
-  "endUTC": "2026-10-24T06:08:46.355786+00:00",
-  "wallSeconds": 388.757577938959,
-  "exitCode": 0,
-  "network": "new user/network namespace for metadata, tree and release commands; only loopback exists, no connected interface",
-  "nice": 19,
-  "cargoJobs": 4,
-  "flags": "no inherited Rust flag variables; no configured Rust flags; isolated CARGO_HOME and HOME",
-  "source": "owned pinned upstream copy, approved 15-member local workspace reduction, original vendor manifests; pinned icon restored only in scratch for original Trunk HTML; baseline measurement, NOT restricted runtime/CSP evidence",
-  "command": [
-    "unshare",
-    "--user",
-    "--map-root-user",
-    "--net",
-    "nice",
-    "-n",
-    "19",
-    "/mnt/storage/scratch/louie-wordcraft-toolchain/trunk/bin/trunk",
-    "build",
-    "--release",
-    "--locked",
-    "--offline",
-    "--skip-version-check"
-  ],
-  "outputs": {
-    ".trunk-lock": {
-      "bytes": 0,
-      "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
-    },
-    "index.html": {
-      "bytes": 1604,
-      "sha256": "299b76f4004bbc65204d561cc381b3fbb249d10069eaa50e88c7fba3b6c63cb8"
-    },
-    "wordcraft-fa59e09a3f921e03.ico": {
-      "bytes": 18378,
-      "sha256": "53a23dcf66260f44d87d4d143d633395f3e967f391eda47e6e9cc3a52f820225"
-    },
-    "wordcraft-web-832240fdc6ce872b_bg.wasm": {
-      "bytes": 43957877,
-      "sha256": "c1c15050a9b394c21e7540aa57c9292b86d32bfea2476094a9976304dacf1de0"
-    },
-    "wordcraft-web-88f7089f25a3b338.js": {
-      "bytes": 164941,
-      "sha256": "866a1de6a33eff2ded8ae9588fd049aeacfc42557a3863ccd2107b3faf4d691e"
-    }
-  },
-  "validation": "timing invalid for wholly nice19 run: effective initial nice15; corrected to19 during compilation",
-  "initialEffectiveNice": 15,
-  "priorityCorrectionReceipt": "measurement-priority-correction.json"
-}
@@ -1,40 +0,0 @@
-{
-  "scratchRoot": "/mnt/storage/scratch/gyro-full-lock-measure-95ntu6t0",
-  "startUTC": "2026-10-24T06:09:38.408737+00:00",
-  "endUTC": "2026-10-24T06:16:16.273643+00:00",
-  "wallSeconds": 397.86480517999735,
-  "exitCode": 0,
-  "attempt": "one allowed environment retry after initial effective nice15 was detected",
-  "cpuAffinity": [
-    12,
-    13,
-    14,
-    15
-  ],
-  "cargoJobs": 4,
-  "binaryenCores": 4,
-  "targetCache": "fresh target-retry directory",
-  "network": "enforced isolated user/network namespace, no external interface; Cargo/Trunk offline; Trunk update checks disabled",
-  "source": "baseline owned source copy plus approved local workspace reduction; vendor manifests unfiltered. Not a restricted editor/CSP gate result.",
-  "outputs": {
-    "index.html": {
-      "bytes": 1604,
-      "sha256": "299b76f4004bbc65204d561cc381b3fbb249d10069eaa50e88c7fba3b6c63cb8"
-    },
-    "wordcraft-fa59e09a3f921e03.ico": {
-      "bytes": 18378,
-      "sha256": "53a23dcf66260f44d87d4d143d633395f3e967f391eda47e6e9cc3a52f820225"
-    },
-    "wordcraft-web-832240fdc6ce872b_bg.wasm": {
-      "bytes": 43957877,
-      "sha256": "c1c15050a9b394c21e7540aa57c9292b86d32bfea2476094a9976304dacf1de0"
-    },
-    "wordcraft-web-88f7089f25a3b338.js": {
-      "bytes": 164941,
-      "sha256": "866a1de6a33eff2ded8ae9588fd049aeacfc42557a3863ccd2107b3faf4d691e"
-    }
-  },
-  "launcherFinalNice": -4,
-  "buildChildNice": 19,
-  "priorityEvidence": "measurement-retry-priority.jsonl: Trunk/Cargo/rustc and wasm-opt all observed at19, CPUs12-15; launcher separately reprioritized by harness"
-}
@@ -1,34 +0,0 @@
-[
-  {
-    "name": "winit",
-    "version": "0.30.13",
-    "archivePath": "examples/data/cross.png",
-    "bytes": 159,
-    "sha256": "4db9fec917c6cb3196872073e4168d28c4f3e0ad04c5c41865407088abf279e4",
-    "scope": "example data only; not a committed evidence binary or runtime approval"
-  },
-  {
-    "name": "winit",
-    "version": "0.30.13",
-    "archivePath": "examples/data/cross2.png",
-    "bytes": 129,
-    "sha256": "fbeeb71e5d6f24898017739d088acefb522d85108a6f1f96183e60e6b4b1f6e6",
-    "scope": "example data only; not a committed evidence binary or runtime approval"
-  },
-  {
-    "name": "winit",
-    "version": "0.30.13",
-    "archivePath": "examples/data/gradient.png",
-    "bytes": 229,
-    "sha256": "8f80c21867a59959b84f9ced19ff3aba7bf4e1cf0e2c24dea2c8465c8705c7ca",
-    "scope": "example data only; not a committed evidence binary or runtime approval"
-  },
-  {
-    "name": "winit",
-    "version": "0.30.13",
-    "archivePath": "examples/data/icon.png",
-    "bytes": 2950,
-    "sha256": "4340d72fb8b5d95a10e3b2c02230f1060dff0950a137bd1d830c63dbc020dd45",
-    "scope": "example data only; not a committed evidence binary or runtime approval"
-  }
-]
@@ -1,46 +0,0 @@
-{
-  "review": "gladstone-0026",
-  "scope": "supplemental inventory corrections, no adoption/implementation approval",
-  "records": [
-    {
-      "crate": "cursor-icon-1.2.0",
-      "sourcePath": "src/lib.rs",
-      "sourceSha256": "2f649887b91d2ea059fcf64ef8512a16c0bde72e38ff0aeb14df0f119a9885cb",
-      "startLine": 34,
-      "endLine": 102,
-      "noticeTextSha256": "c54d5155b68d1bd2d3ba1f6b10ee15e3c08696461c3351aef1b71d6cf22cef5e",
-      "terms": "embedded W3C full license, short notice, document URI and attribution; additional to root SPDX expression",
-      "adoption": "pending S0/M13 review and owner packaging/license choice; not a policy election"
-    },
-    {
-      "crate": "winit-0.30.13",
-      "sourcePath": "src/keyboard.rs",
-      "sourceSha256": "fb1400750fb0c6d376415e642c837e0e8ded95f55ba03a8889d336d180620394",
-      "startLine": 3,
-      "endLine": 70,
-      "noticeTextSha256": "42fe72ba50223d1042803270ecaa191072fe2c41b0f2bd1d7b1a0e19a7bbba7b",
-      "terms": "embedded W3C full license, short notice, document URI and attribution; additional to root SPDX expression",
-      "adoption": "pending S0/M13 review and owner packaging/license choice; not a policy election"
-    },
-    {
-      "crate": "dpi-0.1.2",
-      "sourcePaths": [
-        "README.md",
-        "src/libm.rs"
-      ],
-      "licenseExpression": "Apache-2.0 AND MIT",
-      "noticeTextSha256": "a3432b00bcf66d370747a494ff8038788019340aaa8cb93c74d3b77d6c1ca025",
-      "retention": "LICENSE and LICENSE-LIBM-MIT remain in main notice bundle; README explanation and libm copyrights appended; no flattening/election"
-    },
-    {
-      "crate": "spirv-0.4.0+sdk-1.4.341.0",
-      "declared": "Apache-2.0",
-      "archiveNoticeFiles": [],
-      "mapping": "Apache-2.0 standard text, S0 M13 missing-file treatment",
-      "textSource": "WordCraft e05b7fe86f3b85454000dffc321de638d7009817:LICENSE-APACHE",
-      "textSha256": "0d542e0c8804e39aa7f37eb00da5a762149dc682d7829451287e11b938e94594",
-      "adoption": "explicit supplemental evidence mapping only; no shipping adoption or cleared notice verdict asserted"
-    }
-  ],
-  "bundleSha256": "4d8e2aac5de85d3f3145d5d3945924436d1c30bc043fb3e2d4391cd98b1adbde"
-}
@@ -1,44 +0,0 @@
-from pathlib import Path
-import os,subprocess,json,datetime,time,hashlib,re
-root=Path('/mnt/storage/scratch/gyro-223-measure-root.txt').read_text().strip();root=Path(root);work=Path('agents/gyro/work/queue-310');src=root/'pruned-source'
-assert hashlib.sha256((src/'Cargo.lock').read_bytes()).hexdigest()=='3401363e100783dc70c8f5ba09324947c0b6f8562f1ac1cbbc61a0497200c17f'
-for k in os.environ:
- if k in ['RUSTFLAGS','RUSTDOCFLAGS','CARGO_ENCODED_RUSTFLAGS','CARGO_BUILD_RUSTFLAGS'] or (k.startswith('CARGO_TARGET_') and k.endswith('_RUSTFLAGS')):raise RuntimeError('inherited flags refused: '+k)
-for name in ['build-home','build-cargo-home','build-target']:(root/name).mkdir()
-rust='/mnt/storage/scratch/louie-wordcraft-toolchain/rustup/toolchains/stable-x86_64-unknown-linux-gnu/bin'
-trunk='/mnt/storage/scratch/louie-wordcraft-toolchain/trunk/bin/trunk'
-env={'PATH':rust+':'+str(root/'cache/trunk/wasm-bindgen-0.2.129')+':'+str(root/'cache/trunk/wasm-opt-version_131/bin')+':/usr/bin:/bin','HOME':str(root/'build-home'),'CARGO_HOME':str(root/'build-cargo-home'),'XDG_CACHE_HOME':str(root/'cache'),'CARGO_NET_OFFLINE':'true','CARGO_BUILD_JOBS':'4','BINARYEN_CORES':'4','RUSTC':rust+'/rustc','CARGO_TARGET_DIR':str(root/'build-target'),'LC_ALL':'C','TZ':'UTC','TMPDIR':os.environ['TMPDIR'],'TRUNK_OFFLINE':'true','TRUNK_SKIP_VERSION_CHECK':'true','TRUNK_TOOLS_WASM_BINDGEN':'0.2.129','TRUNK_TOOLS_WASM_OPT':'version_131','SOURCE_DATE_EPOCH':'1792587600'}
-cpus=sorted(os.sched_getaffinity(0))[-4:]
-def limit():os.setpriority(os.PRIO_PROCESS,0,19);os.sched_setaffinity(0,cpus)
-base=['unshare','--user','--map-root-user','--net']
-expected=json.load(open(work/'measurement-root-closure.json'))['packages'];closures={}
-for edge in ['normal','normal,build']:
- cmd=base+[rust+'/cargo','tree','--offline','--frozen','--locked','-p','wordcraft-web','--target','wasm32-unknown-unknown','--edges',edge,'--prefix','none','--format','{p}']
- p=subprocess.run(cmd,cwd=src,env=env,preexec_fn=limit,capture_output=True,text=True)
- (root/('build-tree-'+edge.replace(',','-')+'.txt')).write_text(p.stdout+p.stderr)
- actual=set()
- for line in p.stdout.splitlines():
-  m=re.match(r'(\S+) v(\S+)',line)
-  if m:actual.add((m[1],m[2]))
- keys={(p['name'],p['version']) for p in expected if edge=='normal,build' or p['edge']=='normal'}
- closures[edge]={'exit':p.returncode,'count':len(actual),'added':sorted(actual-keys),'missing':sorted(keys-actual)}
- if p.returncode or actual!=keys:
-  (work/'measurement-223-build-preflight.json').write_text(json.dumps(closures,indent=2)+'\n');raise RuntimeError('closure check failed: '+edge)
-(work/'measurement-223-build-preflight.json').write_text(json.dumps(closures,indent=2)+'\n')
-start=datetime.datetime.now(datetime.timezone.utc).isoformat();t=time.monotonic();cmd=base+[trunk,'build','--release','--frozen','--locked','--offline','--skip-version-check']
-with (root/'release-build.log').open('w') as log:
- child=subprocess.Popen(cmd,cwd=src/'apps/wordcraft-web',env=env,preexec_fn=limit,stdout=log,stderr=subprocess.STDOUT)
- priority={'pid':child.pid,'nice':os.getpriority(os.PRIO_PROCESS,child.pid),'cpus':sorted(os.sched_getaffinity(child.pid))}
- assert priority['nice']==19 and len(priority['cpus'])==4
- (work/'measurement-223-build-start.json').write_text(json.dumps({'startUTC':start,'command':cmd,'priority':priority,'network':'new isolated user/network namespace; no external interface; offline/frozen/locked Cargo/Trunk'},indent=2)+'\n')
- print('release started '+start+' '+str(priority),flush=True)
- code=child.wait()
-seconds=time.monotonic()-t;end=datetime.datetime.now(datetime.timezone.utc).isoformat()
-result={'authority':'sage-4014 CLEAR; scratch measurement only','scratchRoot':str(root),'startUTC':start,'endUTC':end,'exitCode':code,'wallSeconds':seconds,'nice':19,'cpuAffinity':cpus,'cargoJobs':4,'binaryenCores':4,'freshDirectories':['HOME','CARGO_HOME','TMPDIR','target'],'lockSha256':hashlib.sha256((src/'Cargo.lock').read_bytes()).hexdigest(),'network':'isolated user/network namespace, no external interface; offline/frozen/locked and no Trunk update checks','source':'baseline measurement with existing packaging filter and cargo-generated pruned lock; not restricted adapter or CSP acceptance','outputs':{}}
-if code==0:
- for f in sorted((src/'dist/web').rglob('*')):
-  if f.is_file() and f.name!='.trunk-lock':result['outputs'][f.name]={'bytes':f.stat().st_size,'sha256':hashlib.sha256(f.read_bytes()).hexdigest()}
- old=json.load(open(work/'full-lock-release-measurement.json'));oldwasm=next(v['sha256'] for k,v in old['outputs'].items() if k.endswith('.wasm'));newwasm=next(v['sha256'] for k,v in result['outputs'].items() if k.endswith('.wasm'))
- result.update({'fullLockWasmSha256':oldwasm,'wasmSha256EqualsFullLock':oldwasm==newwasm})
-(root/'release-measurement.json').write_text(json.dumps(result,indent=2)+'\n');(work/'measurement-223-build.json').write_text(json.dumps(result,indent=2)+'\n')
-print(json.dumps(result,indent=2),flush=True)
@@ -1,14 +0,0 @@
-{
-  "normal": {
-    "exit": 0,
-    "count": 214,
-    "added": [],
-    "missing": []
-  },
-  "normal,build": {
-    "exit": 0,
-    "count": 224,
-    "added": [],
-    "missing": []
-  }
-}
@@ -1,2 +0,0 @@
-{"atUTC": "2026-10-24T06:34:09.192942+00:00", "processes": [{"pid": 2180936, "name": "trunk", "nice": 19, "cpus": [12, 13, 14, 15]}, {"pid": 2180947, "name": "cargo", "nice": 19, "cpus": [12, 13, 14, 15]}, {"pid": 2198782, "name": "rustc", "nice": 19, "cpus": [12, 13, 14, 15]}]}
-{"atUTC": "2026-10-24T06:36:42.030208+00:00", "processes": [{"pid": 2214200, "name": "wasm-opt", "nice": 19, "cpus": [12, 13, 14, 15], "threads": 5}]}
@@ -1,27 +0,0 @@
-{
-  "startUTC": "2026-10-24T06:31:53.099322+00:00",
-  "command": [
-    "unshare",
-    "--user",
-    "--map-root-user",
-    "--net",
-    "/mnt/storage/scratch/louie-wordcraft-toolchain/trunk/bin/trunk",
-    "build",
-    "--release",
-    "--frozen",
-    "--locked",
-    "--offline",
-    "--skip-version-check"
-  ],
-  "priority": {
-    "pid": 2180936,
-    "nice": 19,
-    "cpus": [
-      12,
-      13,
-      14,
-      15
-    ]
-  },
-  "network": "new isolated user/network namespace; no external interface; offline/frozen/locked Cargo/Trunk"
-}
@@ -1,46 +0,0 @@
-{
-  "authority": "sage-4014 CLEAR; scratch measurement only",
-  "scratchRoot": "/mnt/storage/scratch/gyro-223-measure-mzbp0x23",
-  "startUTC": "2026-10-24T06:31:53.099322+00:00",
-  "endUTC": "2026-10-24T06:38:13.773390+00:00",
-  "exitCode": 0,
-  "wallSeconds": 380.6740357100498,
-  "nice": 19,
-  "cpuAffinity": [
-    12,
-    13,
-    14,
-    15
-  ],
-  "cargoJobs": 4,
-  "binaryenCores": 4,
-  "freshDirectories": [
-    "HOME",
-    "CARGO_HOME",
-    "TMPDIR",
-    "target"
-  ],
-  "lockSha256": "3401363e100783dc70c8f5ba09324947c0b6f8562f1ac1cbbc61a0497200c17f",
-  "network": "isolated user/network namespace, no external interface; offline/frozen/locked and no Trunk update checks",
-  "source": "baseline measurement with existing packaging filter and cargo-generated pruned lock; not restricted adapter or CSP acceptance",
-  "outputs": {
-    "index.html": {
-      "bytes": 1604,
-      "sha256": "28ce55d5c017d545aaac91bbd96f22e6ebd3b35af8d856315cdcb150a2a4a57d"
-    },
-    "wordcraft-fa59e09a3f921e03.ico": {
-      "bytes": 18378,
-      "sha256": "53a23dcf66260f44d87d4d143d633395f3e967f391eda47e6e9cc3a52f820225"
-    },
-    "wordcraft-web-88f7089f25a3b338.js": {
-      "bytes": 164941,
-      "sha256": "866a1de6a33eff2ded8ae9588fd049aeacfc42557a3863ccd2107b3faf4d691e"
-    },
-    "wordcraft-web-8e80c8f64c8671f7_bg.wasm": {
-      "bytes": 43952335,
-      "sha256": "0322beb9e58b9abeed6b6e05125879bfb3eccbebb05094e191df3542a74007ea"
-    }
-  },
-  "fullLockWasmSha256": "c1c15050a9b394c21e7540aa57c9292b86d32bfea2476094a9976304dacf1de0",
-  "wasmSha256EqualsFullLock": false
-}
@@ -1,18 +0,0 @@
-import {readFileSync,writeFileSync,readdirSync} from 'node:fs';
-import {pathToFileURL} from 'node:url';
-const {filterVendorManifest,sha256}=await import(pathToFileURL(`${process.cwd()}/packages/webui/wordcraft/build.mjs`));
-const root=readFileSync('/mnt/storage/scratch/gyro-223-measure-root.txt','utf8').trim();
-const cfg=readFileSync('agents/gyro/work/queue-310/rustc-wasm32-cfg.txt','utf8');
-const inventory=[];
-for(const crate of readdirSync(`${root}/vendor`).sort()) {
- const path=`${root}/vendor/${crate}/Cargo.toml`;
- const original=readFileSync(path,'utf8');const result=filterVendorManifest(original,cfg);
- if(result.text===original)continue;
- writeFileSync(path,result.text);
- const checksum=JSON.parse(readFileSync(`${root}/vendor/${crate}/.cargo-checksum.json`,'utf8'));
- checksum.files['Cargo.toml']=sha256(Buffer.from(result.text));
- writeFileSync(`${root}/vendor/${crate}/.cargo-checksum.json`,JSON.stringify(checksum)+'\n');
- inventory.push({crate,sections:result.sections,features:result.features});
-}
-writeFileSync('agents/gyro/work/queue-310/measurement-223-filter-inventory.json',JSON.stringify(inventory,null,2)+'\n');
-console.log(JSON.stringify({manifests:inventory.length,sections:inventory.reduce((n,x)=>n+x.sections.length,0),featureItems:inventory.reduce((n,x)=>n+x.features.length,0)}));
@@ -1,315 +0,0 @@
-{
-  "scratchRoot": "/mnt/storage/scratch/gyro-223-measure-mzbp0x23",
-  "authority": "sage-4008 / mos-1574",
-  "originalLockSha256": "06b745e43c13df3df7f048fa6a1981625ce7a5fe4cd484bc6254d0913d865b0b",
-  "packages": 223,
-  "extraPackages": [
-    {
-      "name": "cursor-icon",
-      "version": "1.2.0",
-      "source": "registry+https://github.com/rust-lang/crates.io-index",
-      "archiveSha256": "f27ae1dd37df86211c42e150270f82743308803d90a6f6e6651cd730d5e1732f",
-      "archiveBytes": 14267,
-      "license": "MIT OR Apache-2.0 OR Zlib",
-      "licenseFile": null,
-      "noticeFiles": [
-        {
-          "path": "LICENSE-APACHE",
-          "bytes": 11346,
-          "sha256": "b59affd015e517ed998dd735757f9a3693643cd389609947ed54074234a10784"
-        },
-        {
-          "path": "LICENSE-MIT",
-          "bytes": 1059,
-          "sha256": "c138726a726ac37bae09d0f8a48e74e8e3aa8a8952fcd10fae0fb224cc1c05f1"
-        },
-        {
-          "path": "LICENSE-ZLIB",
-          "bytes": 844,
-          "sha256": "01e533bd94e8f1c32b2c2531e2c398de7d35d7804add3d574b4e1fe581d53537"
-        }
-      ],
-      "files": 14,
-      "bytes": 44329
-    },
-    {
-      "name": "dpi",
-      "version": "0.1.2",
-      "source": "registry+https://github.com/rust-lang/crates.io-index",
-      "archiveSha256": "d8b14ccef22fc6f5a8f4d7d768562a182c04ce9a3b3157b91390b52ddfdf1a76",
-      "archiveBytes": 14812,
-      "license": "Apache-2.0 AND MIT",
-      "licenseFile": null,
-      "noticeFiles": [
-        {
-          "path": "LICENSE",
-          "bytes": 11323,
-          "sha256": "6dc0e068dcf3a5bc8e054205b85b7720e1d49265bbc64bf515d2cf79197df69a"
-        },
-        {
-          "path": "LICENSE-LIBM-MIT",
-          "bytes": 2444,
-          "sha256": "9eff396a99bafd208e7126602420d6864f6066c08b84485a5b032320a9c01997"
-        }
-      ],
-      "files": 11,
-      "bytes": 64188
-    },
-    {
-      "name": "futures-macro",
-      "version": "0.3.34",
-      "source": "registry+https://github.com/rust-lang/crates.io-index",
-      "archiveSha256": "9fb9654ba8355388abeb8dcb4fc62f511300867002afc858860463bdd9fe0c44",
-      "archiveBytes": 11926,
-      "license": "MIT OR Apache-2.0",
-      "licenseFile": null,
-      "noticeFiles": [
-        {
-          "path": "LICENSE-APACHE",
-          "bytes": 10874,
-          "sha256": "275c491d6d1160553c32fd6127061d7f9606c3ea25abfad6ca3f6ed088785427"
-        },
-        {
-          "path": "LICENSE-MIT",
-          "bytes": 1094,
-          "sha256": "6652c868f35dfe5e8ef636810a4e576b9d663f3a17fb0f5613ad73583e1b88fd"
-        }
-      ],
-      "files": 12,
-      "bytes": 41731
-    },
-    {
-      "name": "glifo",
-      "version": "0.2.0",
-      "source": "registry+https://github.com/rust-lang/crates.io-index",
-      "archiveSha256": "ed4a1bb24121291d27230c1b1b44e07d6a9b28cefdb32fe1581dfb84e14f940a",
-      "archiveBytes": 55880,
-      "license": "Apache-2.0 OR MIT",
-      "licenseFile": null,
-      "noticeFiles": [
-        {
-          "path": "LICENSE-APACHE",
-          "bytes": 9723,
-          "sha256": "62c7a1e35f56406896d7aa7ca52d0cc0d272ac022b5d2796e7d6905db8a3636a"
-        },
-        {
-          "path": "LICENSE-MIT",
-          "bytes": 1057,
-          "sha256": "3252fc481fda4d2bad9e1ae675065889abd35c8abb500499ac01e70aaffa02b9"
-        }
-      ],
-      "files": 20,
-      "bytes": 222068
-    },
-    {
-      "name": "ordered-float",
-      "version": "5.5.0",
-      "source": "registry+https://github.com/rust-lang/crates.io-index",
-      "archiveSha256": "8c7c9e0d9b23589f26070720bac724174bfec1083e82f7854cdd0267518343c0",
-      "archiveBytes": 34706,
-      "license": "MIT",
-      "licenseFile": null,
-      "noticeFiles": [
-        {
-          "path": "LICENSE-MIT",
-          "bytes": 1057,
-          "sha256": "f7715d38a3fa1b4ac97c5729740752505a39cb92ee83ab5b102aeb5eaa7cdea4"
-        }
-      ],
-      "files": 14,
-      "bytes": 179606
-    },
-    {
-      "name": "pin-project",
-      "version": "1.1.13",
-      "source": "registry+https://github.com/rust-lang/crates.io-index",
-      "archiveSha256": "2466b2336ed02bcdca6b294417127b90ec92038d1d5c4fbeac971a922e0e0924",
-      "archiveBytes": 56345,
-      "license": "Apache-2.0 OR MIT",
-      "licenseFile": null,
-      "noticeFiles": [
-        {
-          "path": "LICENSE-APACHE",
-          "bytes": 10174,
-          "sha256": "0d542e0c8804e39aa7f37eb00da5a762149dc682d7829451287e11b938e94594"
-        },
-        {
-          "path": "LICENSE-MIT",
-          "bytes": 1023,
-          "sha256": "23f18e03dc49df91622fe2a76176497404e46ced8a715d9d2b67a7446571cca3"
-        }
-      ],
-      "files": 209,
-      "bytes": 476259
-    },
-    {
-      "name": "pin-project-internal",
-      "version": "1.1.13",
-      "source": "registry+https://github.com/rust-lang/crates.io-index",
-      "archiveSha256": "c96395f0a926bc13b1c17622aaddda1ecb55d49c8f1bf9777e4d877800a43f8b",
-      "archiveBytes": 29331,
-      "license": "Apache-2.0 OR MIT",
-      "licenseFile": null,
-      "noticeFiles": [
-        {
-          "path": "LICENSE-APACHE",
-          "bytes": 10174,
-          "sha256": "0d542e0c8804e39aa7f37eb00da5a762149dc682d7829451287e11b938e94594"
-        },
-        {
-          "path": "LICENSE-MIT",
-          "bytes": 1023,
-          "sha256": "23f18e03dc49df91622fe2a76176497404e46ced8a715d9d2b67a7446571cca3"
-        }
-      ],
-      "files": 15,
-      "bytes": 114911
-    },
-    {
-      "name": "smol_str",
-      "version": "0.2.2",
-      "source": "registry+https://github.com/rust-lang/crates.io-index",
-      "archiveSha256": "dd538fb6910ac1099850255cf94a94df6551fbdd602454387d0adb2d1ca6dead",
-      "archiveBytes": 15840,
-      "license": "MIT OR Apache-2.0",
-      "licenseFile": null,
-      "noticeFiles": [
-        {
-          "path": "LICENSE-APACHE",
-          "bytes": 10847,
-          "sha256": "a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2"
-        },
-        {
-          "path": "LICENSE-MIT",
-          "bytes": 1023,
-          "sha256": "23f18e03dc49df91622fe2a76176497404e46ced8a715d9d2b67a7446571cca3"
-        }
-      ],
-      "files": 14,
-      "bytes": 56395
-    },
-    {
-      "name": "spirv",
-      "version": "0.4.0+sdk-1.4.341.0",
-      "source": "registry+https://github.com/rust-lang/crates.io-index",
-      "archiveSha256": "d9571ea910ebd84c86af4b3ed27f9dbdc6ad06f17c5f96146b2b671e2976744f",
-      "archiveBytes": 41285,
-      "license": "Apache-2.0",
-      "licenseFile": null,
-      "noticeFiles": [],
-      "files": 9,
-      "bytes": 257440
-    },
-    {
-      "name": "termcolor",
-      "version": "1.4.1",
-      "source": "registry+https://github.com/rust-lang/crates.io-index",
-      "archiveSha256": "06794f8f6c5c898b3275aebefa6b8a1cb24cd2c6c79397ab15774837a0bc5755",
-      "archiveBytes": 18773,
-      "license": "Unlicense OR MIT",
-      "licenseFile": null,
-      "noticeFiles": [
-        {
-          "path": "COPYING",
-          "bytes": 126,
-          "sha256": "01c266bced4a434da0051174d6bee16a4c82cf634e2679b6155d40d75012390f"
-        },
-        {
-          "path": "LICENSE-MIT",
-          "bytes": 1081,
-          "sha256": "0f96a83840e146e43c0ec96a22ec1f392e0680e6c1226e6f3ba87e0740af850f"
-        },
-        {
-          "path": "UNLICENSE",
-          "bytes": 1211,
-          "sha256": "7e12e5df4bae12cb21581ba157ced20e1986a0508dd10d0e8a4ab9a4cf94e85c"
-        }
-      ],
-      "files": 12,
-      "bytes": 92727
-    },
-    {
-      "name": "tracing",
-      "version": "0.1.44",
-      "source": "registry+https://github.com/rust-lang/crates.io-index",
-      "archiveSha256": "63e71662fa4b2a2c3a26f570f037eb95bb1f85397f3cd8076caed2f026a6d100",
-      "archiveBytes": 463135,
-      "license": "MIT",
-      "licenseFile": null,
-      "noticeFiles": [
-        {
-          "path": "LICENSE",
-          "bytes": 1062,
-          "sha256": "898b1ae9821e98daf8964c8d6c7f61641f5f5aa78ad500020771c0939ee0dea1"
-        }
-      ],
-      "files": 94,
-      "bytes": 9827320
-    },
-    {
-      "name": "tracing-attributes",
-      "version": "0.1.31",
-      "source": "registry+https://github.com/rust-lang/crates.io-index",
-      "archiveSha256": "7490cfa5ec963746568740651ac6781f701c9c5ea257c58e057f3ba8cf69e8da",
-      "archiveBytes": 39733,
-      "license": "MIT",
-      "licenseFile": null,
-      "noticeFiles": [
-        {
-          "path": "LICENSE",
-          "bytes": 1062,
-          "sha256": "898b1ae9821e98daf8964c8d6c7f61641f5f5aa78ad500020771c0939ee0dea1"
-        }
-      ],
-      "files": 31,
-      "bytes": 184696
-    },
-    {
-      "name": "tracing-core",
-      "version": "0.1.36",
-      "source": "registry+https://github.com/rust-lang/crates.io-index",
-      "archiveSha256": "db97caf9d906fbde555dd62fa95ddba9eecfd14cb388e4f491a66d74cd5fb79a",
-      "archiveBytes": 63967,
-      "license": "MIT",
-      "licenseFile": null,
-      "noticeFiles": [
-        {
-          "path": "LICENSE",
-          "bytes": 1062,
-          "sha256": "898b1ae9821e98daf8964c8d6c7f61641f5f5aa78ad500020771c0939ee0dea1"
-        },
-        {
-          "path": "src/spin/LICENSE",
-          "bytes": 1085,
-          "sha256": "58545fed1565e42d687aecec6897d35c6d37ccb71479a137c0deb2203e125c79"
-        }
-      ],
-      "files": 29,
-      "bytes": 257879
-    },
-    {
-      "name": "winit",
-      "version": "0.30.13",
-      "source": "registry+https://github.com/rust-lang/crates.io-index",
-      "archiveSha256": "a6755fa58a9f8350bd1e472d4c3fcc25f824ec358933bba33306d0b63df5978d",
-      "archiveBytes": 605180,
-      "license": "Apache-2.0",
-      "licenseFile": null,
-      "noticeFiles": [
-        {
-          "path": "LICENSE",
-          "bytes": 11323,
-          "sha256": "6dc0e068dcf3a5bc8e054205b85b7720e1d49265bbc64bf515d2cf79197df69a"
-        }
-      ],
-      "files": 218,
-      "bytes": 2703555
-    }
-  ],
-  "extraFiles": 702,
-  "extraBytes": 14523104,
-  "totalFiles": 11201,
-  "totalBytes": 145260334,
-  "vendorManifestEdits": "none; original 209 packaging plus 14 checksum-verified archive extractions",
-  "sourceManifestEdits": "same approved local 15-member workspace reduction as prior packet, no additional changes"
-}
@@ -1,8 +0,0 @@
-command: unshare --user --map-root-user --net /mnt/storage/scratch/louie-wordcraft-toolchain/rustup/toolchains/stable-x86_64-unknown-linux-gnu/bin/cargo metadata --offline --locked --filter-platform wasm32-unknown-unknown --format-version 1
-exit: 101
-wallSeconds: 0.17994241300038993
-STDERR:
-error: cannot update the lock file /mnt/storage/scratch/gyro-223-measure-mzbp0x23/source/Cargo.lock because --locked was passed to prevent this
-help: to generate the lock file without accessing the network, remove the --locked flag and use --offline instead.
-
-STDOUT:
@@ -1,32 +0,0 @@
-from pathlib import Path
-import os,subprocess,json,hashlib
-root=Path('/mnt/storage/scratch/gyro-223-measure-root.txt').read_text().strip();root=Path(root);work=Path('agents/gyro/work/queue-310')
-os.setpriority(os.PRIO_PROCESS,0,19);os.sched_setaffinity(0,sorted(os.sched_getaffinity(0))[-4:])
-env={'PATH':'/usr/bin:/bin','HOME':str(root/'home'),'LC_ALL':'C','GIT_CONFIG_NOSYSTEM':'1','GIT_CONFIG_GLOBAL':'/dev/null'}
-def priority():os.setpriority(os.PRIO_PROCESS,0,19)
-def call(args,**kw):return subprocess.run(args,env=env,preexec_fn=priority,check=True,**kw)
-repo=root/'source-measurement.git';call(['git','init','--bare',str(repo)],capture_output=True)
-git=['git','--git-dir',str(repo)]
-inputs=json.load(open(work/'measurement-223-inputs.json'));extras={p['name']+'-'+p['version'] for p in inputs['extraPackages']}
-review=Path('packages/webui/third_party/wordcraft/cargo-vendor').resolve();prior=Path('/mnt/storage/scratch/gyro-full-lock-measure-95ntu6t0/vendor')
-files=[]
-for d in sorted(review.iterdir()):files.extend((f,False,d.name+'/'+f.relative_to(d).as_posix()) for f in sorted(d.rglob('*')) if f.is_file())
-for name in sorted(extras):
- d=prior/name;files.extend((f,True,name+'/'+f.relative_to(d).as_posix()) for f in sorted(d.rglob('*')) if f.is_file())
-assert len(files)==inputs['totalFiles'];assert sum(f.stat().st_size for f,_,_ in files)==inputs['totalBytes']
-assert all('\n' not in str(f) for f,_,_ in files)
-before=call(git+['count-objects','-v'],capture_output=True,text=True).stdout
-p=call(git+['hash-object','-w','--no-filters','--stdin-paths'],input='\n'.join(str(f) for f,_,_ in files)+'\n',capture_output=True,text=True)
-oids=p.stdout.splitlines();assert len(oids)==len(files)
-sets={'all223':sorted(set(oids)),'extra14':sorted({oid for oid,(_,extra,_) in zip(oids,files) if extra})}
-packs={}
-for name,ids in sets.items():
- f=root/(name+'-sources.pack')
- with f.open('wb') as out:call(git+['pack-objects','--stdout','--threads=4'],input='\n'.join(ids)+'\n',stdout=out,text=True)
- packs[name]={'packedBytes':f.stat().st_size,'uniqueBlobs':len(ids),'sha256':hashlib.sha256(f.read_bytes()).hexdigest()}
-after=call(git+['count-objects','-v'],capture_output=True,text=True).stdout
-report={'scratchRoot':str(root),'method':'pristine package files (not filtered build copy), git hash-object -w --no-filters --stdin-paths into scratch bare repo; each sorted unique blob set through pack-objects --stdout --threads=4; no gc; no tree/commit objects or cross-version deltas','all223Files':len(files),'all223Bytes':sum(f.stat().st_size for f,_,_ in files),'extra14Files':sum(extra for _,extra,_ in files),'extra14Bytes':sum(f.stat().st_size for f,extra,_ in files if extra),'packs':packs,'countObjectsBefore':before,'countObjectsAfter':after}
-(work/'measurement-223-source-packs.json').write_text(json.dumps(report,indent=2)+'\n')
-manifest=[{'path':path,'bytes':f.stat().st_size,'sha256':hashlib.sha256(f.read_bytes()).hexdigest(),'gitBlob':oid,'extra':extra} for oid,(f,extra,path) in zip(oids,files)]
-(work/'measurement-223-input-manifest.json').write_text(json.dumps(manifest,indent=2)+'\n')
-print(json.dumps(report,indent=2))
Author	SHA1	Message	Date
jason.woltje	c638019596	docs: row 290 landing record and session line (doc only)	2026-10-24 09:56:03 -05:00
jason.woltje	3d7dff3453	docs: clarify setup sheet notices and agent identity	2026-10-24 09:54:29 -05:00
jason.woltje	f8461e9ab5	docs: keep chat guidance within Q226 brief	2026-10-24 09:54:29 -05:00
jason.woltje	b6795f9a1c	docs: clarify setup sheet repo behavior	2026-10-24 09:54:29 -05:00
jason.woltje	ceb612a40f	docs: update Case 2 setup sheet for Q226	2026-10-24 09:54:29 -05:00
jason.woltje	18334d713b	agents: register Codex seat Steelbeak to build row 287 (C2-21, #1792 ) from megavolt/row287's design (mos-1576, mos-1542); doc only	2026-10-24 09:46:14 -05:00
jason.woltje	963303403e	queue: revs 3915-3945. Row 285 in-review (Magica 3915-3916), review request (3917-3918), Poe 3919 and Webby 3920 approvals, note and done (3921-3922). Row 286 r5 and r6 rounds (Rockerduck 3923-3925, 3937-3939), requests (3926-3927, 3940-3941), Boyd 3928/3942 and Dewey 3929/3943 approvals, note and done (3944-3945). Case2 brief re-pins for 225, 229, 284, 287-290 (3930-3936)	2026-10-24 09:41:11 -05:00
jason.woltje	72db194a43	docs: row 286 landing record and sage-4112 test-credential length line in the brief template (doc only)	2026-10-24 09:38:04 -05:00
jason.woltje	5d7801dc19	Row 286 r6: shorten two fixture values for secrets guard and record green reruns (sage-4112)	2026-10-24 09:20:22 -05:00
jason.woltje	af988f6526	Row 286 r5: record green read-grant fixtures, whole suites and restored semantic mutants	2026-10-24 09:20:22 -05:00
jason.woltje	5999872f5a	Row 286 r5: rebase onto row285 and seed chief read-grant fixtures under sage-4100	2026-10-24 09:20:22 -05:00
jason.woltje	b0690ae8c0	Row 286 r4: record transplant onto landed row217, hunk comparisons and refreshed untested manifest	2026-10-24 09:20:22 -05:00
jason.woltje	18eca02ae9	Row 286 r3: fix new credential fixtures and record green CLEAR gate with killed mutants	2026-10-24 09:20:22 -05:00
jason.woltje	a7aa4a4dab	Row 286 r3: record successful canonical queue start and pre-CLEAR push receipt	2026-10-24 09:20:22 -05:00
jason.woltje	fda535d97d	Row 286 r3: transplant evidence, conflict resolution and static reader drift; untested pending CLEAR	2026-10-24 09:20:22 -05:00
jason.woltje	337ccee2dc	Row 286 C2-03b r2: rebase onto `45dca69f6` (sage-3579). The range-diff is all =. Drift check of the paths the tests read is in BUILD.md. Unrun.	2026-10-24 09:20:21 -05:00
jason.woltje	d06ada4b8b	Row 286 C2-03b: BUILD.md notes for dewey-0869 and sage-2951 (fired-chief path :4308, marker-gated busy test, T9 scratch roles)	2026-10-24 09:20:21 -05:00
jason.woltje	105d26f1d9	Row 286 C2-03b: fold dewey-0869 and sage-2951 (marker-gated busy test, T9 scratch roles with a chief gitea credential, fired-chief path cited)	2026-10-24 09:20:21 -05:00
jason.woltje	efd43df9d3	Row 286 C2-03b: cite sage-2947 (T7 real verbs, R1 in this row, 285/286 rebase rule)	2026-10-24 09:20:21 -05:00
jason.woltje	f3030813ed	Row 286 C2-03b: fold dewey-0864 (T7/T9 through grants.revoke and instance.fire, race fetch takes the sync guard, two-chief code, id -u shim note)	2026-10-24 09:20:21 -05:00
jason.woltje	918bbddfb0	Row 286: library.status shows the credential (webby-0151 R3); fired chief revokes its row as row 281 does; unrun	2026-10-24 09:20:21 -05:00
jason.woltje	17d1123ea1	Row 286 C2-03b: library push, per-seat credentials, the chief's fetch credential, askpass fd check (#1791 , sage-2922/2925/2928, dewey-0860); unrun	2026-10-24 09:20:21 -05:00
jason.woltje	a5e7785476	Row 286 C2-03b: sage-2928 rulings (sh helper, chief by roles definition, departure noted)	2026-10-24 09:20:21 -05:00
jason.woltje	727cc0aa0c	Row 286 C2-03b: fold dewey-0860 (Q1 sh fd/inode check, Q2 chief by roles definition, N1-N3)	2026-10-24 09:20:21 -05:00
jason.woltje	7d0eb8d8d6	Row 286 C2-03b: sage-2925 Q4 ruling (humanCredential takes her login; editor.user is row 283's)	2026-10-24 09:20:21 -05:00
jason.woltje	0cada1be13	Row 286 C2-03b: sage-2922 files-owned extension; Q4 back to Sage (user is the bot fetch identity)	2026-10-24 09:20:21 -05:00
jason.woltje	ad6a8d99ea	Row 286 C2-03b: build plan and four scope questions (BUILD.md only)	2026-10-24 09:20:21 -05:00
jason.woltje	d55944edb1	docs: row 285 landing record, sage-4100 seed ruling in the C2-21 brief, webby-0282 N1 in the C2-02 brief, mos-1584 brief template line, Vikunja 546 comment script (doc only)	2026-10-24 08:40:20 -05:00
jason.woltje	1f3d0350f3	row 285: preserve credential bindings for approved creative changes and verify r4 (#1790 , mos-1585, mos-1586)	2026-10-24 08:12:02 -05:00
jason.woltje	c57a9425e9	docs: row 285 r4 replay and regenerated B1 evidence on landed 296 and 217 (sage-4078)	2026-10-24 08:12:02 -05:00
jason.woltje	edf06ca884	row 285: align library and creative fixture credential data under B1 (mos-1581, mos-1582)	2026-10-24 08:12:02 -05:00
jason.woltje	6ece68c975	row 285: require chief gitea exactly for library businesses (mos-1580, sage-4059, sage-4060)	2026-10-24 08:12:02 -05:00
jason.woltje	dc68d4f4ce	docs: trim range-diff evidence trailing whitespace	2026-10-24 08:12:02 -05:00
jason.woltje	6a0fa43837	docs: correct row 285 evidence timestamps with append-only receipts	2026-10-24 08:12:02 -05:00
jason.woltje	0c32e67f29	docs: row 285 r3 replay and static drift evidence before CLEAR (#1790 , sage-4039)	2026-10-24 08:12:02 -05:00
jason.woltje	076eda6a57	row 285: BUILD.md records N1, the creative-only library.write refusal as a follow-up, and the round scope (#1790 , sage-3593)	2026-10-24 08:12:02 -05:00
jason.woltje	63f3a69313	row 285: library.write joins ACTIONS and ROUTED in the business vocabulary and the broker under PRD 1.16 REQ-WAIT-3 and REQ-LIB-6, with a hard-waits test; BUILD.md records the r2 rebase, range-diff and drift check (#1790 , sage-3578)	2026-10-24 08:12:02 -05:00
jason.woltje	9c85f27fa5	row 285: mos-1333, withdraw the publish fence; N10 option (a) with an assistant instance; a chief with its gitea ref, identity and publish loads; restore the creative publish test; BUILD.md gate scope (sage-2946) (#1790 )	2026-10-24 08:12:02 -05:00
jason.woltje	e7038a4407	row 285: webby-0178 early read, drop the stale creative publish comment and name the example's test readers (#1790 )	2026-10-24 08:12:02 -05:00
jason.woltje	239033309c	row 285: a chief-of-staff or creative instance that names publish refuses at load, keeping today's N10 refusal; instance-settings :289 follows the companion's gitea (#1790 , mos-1332) The fence sits near business.mjs:166, clear of row 287's :283-291. Its message starts with the N10 text. An assistant-instance test keeps the no-gitea branch covered, and a creative-instance test covers the fence. Nothing here has run.	2026-10-24 08:12:02 -05:00
jason.woltje	54bdac257e	row 285: fixtures, example and README give the chief and creative instances their gitea reference (#1790 , mos-1330) Fixture data only, plus two named tests that a chief or creative instance without credentials.gitea refuses at load. chief-of-staff.test :88 and :155 change expected values and wait on Mos's mos-1272 ruling. Nothing here has run.	2026-10-24 08:12:02 -05:00
jason.woltje	752cc87ac1	row 285: C2-08b, creative roles hold library.write and the gitea credential, the chief of staff a read-scoped gitea credential; #giteaRole refuses the chief (#1790 , mos-1309 item 5, sage-2915, sage-2921) The creative role files declare gitea with SEAT_SCOPES, the scopes the Gitea grant mints. The chief declares read scopes only, so #giteaRole refuses it with gitea-not-declared until row 287 mints its declared scopes. library.write is not yet routed: it waits on PRD 1.16 (row #1796), and the fixture change waits on Mos's mos-1272 rulings. Nothing here has run.	2026-10-24 08:12:02 -05:00
jason.woltje	25874bc86c	docs: rows 296 and 217 landing record, mos-1583 cli skip-list rule in the brief template, Vikunja 533 comment script (doc only)	2026-10-24 06:24:51 -05:00
jason.woltje	4c6190645d	queue: revs 3886-3914 (sage assigns 285/286 to magica and rockerduck, 285 brief re-pin, reviewers 285/286, requests and resolve/abandon for 296/217/286, notes and done for 296 and 217; lena 296 in-progress/in-review/outcome; magica 285 start; rockerduck 286 start/in-review/outcome; beakley 217 start and in-review; filbert 296 approve; webby 217 approve; boyd and dewey 286 approve)	2026-10-24 06:24:39 -05:00
jason.woltje	d0a6a87cda	row 217: record six green suites and five killed mutants for review	2026-10-24 05:39:26 -05:00
jason.woltje	29f7287942	row 217: correct new runtime fixture and record first-run evidence	2026-10-24 05:39:26 -05:00
jason.woltje	2c244de380	row 217: trim inherited limits whitespace and refresh hashes (Untested)	2026-10-24 05:39:26 -05:00
jason.woltje	a44c1f884e	row 217: normalize range-diff receipt whitespace (Untested)	2026-10-24 05:39:26 -05:00
jason.woltje	5481478786	row 217: availability refusal and landed supporting scope (Untested)	2026-10-24 05:39:26 -05:00
jason.woltje	c2eac13ea5	row 217: keep fixture status on its current served tip (Untested)	2026-10-24 05:39:26 -05:00
jason.woltje	dab9f6cd4d	row 217: early-review coverage and availability RED cases (Untested)	2026-10-24 05:39:26 -05:00
jason.woltje	b3ca50c950	row 217: citation runner retry and acceptance draft (Untested)	2026-10-24 05:39:26 -05:00
jason.woltje	a1b72432cd	launchpad: row 217 C2-06 work in progress, UNTESTED, handed to Beakley (mos-1500) Guard, limits, M11 fence, broker guard/page store/check event, BusError reason, runtime wiring and the CLI replies verb. No runner work, no tests, nothing run. BUILD.md lists the rulings, the row 225 contract and what is left.	2026-10-24 05:39:16 -05:00
Lena	bc4e94166d	row 296: record scoped scratch acceptance and mutant evidence (#1802 )	2026-10-24 05:39:14 -05:00
Lena	35f32b0326	Untested: record R7 reload ordering and slot boundaries (#1802 )	2026-10-24 05:39:13 -05:00
Lena	fca8c68ccc	Untested: preserve R7 shell cleanup during mutant runs (#1802 )	2026-10-24 05:39:13 -05:00
Lena	4f7bb95b33	Untested: row 296 scratch two-instance acceptance (#1802 )	2026-10-24 05:39:13 -05:00
jason.woltje	d91b580c3b	row 296 handoff: FED R7 design notes to lena/row296 (mos-1503, Q245) Quackerjack stops row 296 here. BUILD.md holds the verified reads, the proposed harness design, the open decisions for Lena, and the R2 learning that R7 depends on. No test or code changes in this commit.	2026-10-24 05:39:13 -05:00
jason.woltje	98235fdb32	docs: row 285 brief amendment 1, the chief's gitea reference is required only when the business declares a library, row 323's Case 1 file and test stay byte-identical (mos-1580); Beakley reports go to Sage (mos-1579); doc only	2026-10-24 05:36:04 -05:00
jason.woltje	b19ffa04f8	agents: register Codex seats Magica (row 285) and Rockerduck (row 286) for the rebases onto refactor (mos-1576, mos-1542); doc only	2026-10-24 04:51:38 -05:00
jason.woltje	e0c6142f3a	queue: revs 3861-3885 (glomgold 309 and bradford 327 in-review moves and outcomes; sage review requests and resolve for 309 and 327; boyd 309 approve; poe and dewey 327 round 2 and 3 records; sage 327 note and done)	2026-10-24 02:23:20 -05:00
jason.woltje	42ba0f5bc0	docs: row 327 push guard landed at `68c08b4e7`, gate green on its own install after canonical node_modules was found empty, canonical restored (mos-1575); session and build log entries; doc only	2026-10-24 02:19:07 -05:00
jason.woltje	68c08b4e76	docs: brief template, builders never run npm or remove files in the canonical checkout, and every gate runs its own npm ci in its worktree (mos-1575); doc only	2026-10-24 02:16:26 -05:00
jason.woltje	76f84465fd	docs: size question records the collected notices for the 14 extra packages and the W3C form left for an owner decision (gyro-0019, gladstone-0027); doc only	2026-10-24 02:16:26 -05:00
jason.woltje	1bd214e382	Detect binaries despite git attributes and reject unconfirmed reviews (#1825 )	2026-10-24 01:40:50 -05:00
jason.woltje	56c1845505	Fix push-check binary checks from repository subdirectories (#1825 )	2026-10-24 01:40:50 -05:00
jason.woltje	72a3125a6e	Add reviewed-binary push check and scratch regression suite (#1825 )	2026-10-24 01:40:50 -05:00
jason.woltje	6a5e125113	docs: size question notes gyro/row310 is pushed; doc only	2026-10-24 01:39:05 -05:00
jason.woltje	529e121379	docs: size question adds the measured 209-plus-14 vendor option, 26.5 MB packed, builds offline with a cargo-pruned lock, four notice concerns (mos-1574, gyro-0016/0018, gladstone-0026); doc only	2026-10-24 01:38:59 -05:00
jason.woltje	9042754c47	docs: push-check brief amendment 1, binary detection adds a NUL scan of the committed blob so attributes can't hide a binary, and an unconfirmed queue tail fails closed (dewey-0955, row 327); doc only	2026-10-24 01:30:57 -05:00
jason.woltje	c98cd41d8d	docs: size question for Jason (Vikunja 618): W1 packs 17.5 MB, each W2 WASM rebuild packs 16.7 MB, offline release build 398 s, toolchain facts (mos-1572/1573); doc only	2026-10-24 01:20:38 -05:00
jason.woltje	94d9e90a6a	queue: revs 3845-3859+ (sage W row re-pins 309-311, issues, owners, reviewers, briefed for 309/310; glomgold 309 and gyro 310 in-progress; sage add and brief row 327, the push check)	2026-10-24 00:59:16 -05:00
jason.woltje	b617b80f68	agents: register Codex seat Bradford for the push check row (#1825 , mos-1572); doc only	2026-10-24 00:52:34 -05:00
jason.woltje	93200bb446	docs: brief for scripts/push-check.sh, the repo push check that passes a binary only when an approved review candidate lists its path and sha256 (mos-1572 option A); doc only	2026-10-24 00:52:13 -05:00
				`@@ -0,0 +1 @@`
				`M5-hide-library-unavailable: killed (control green, mutant exit 1, hashes restored, restored green)`