fix(install): close refused peers and reset inherited Docker cache (#1652 )

feat(install): add rootless image builds and reviewed egress proxy (#1652 )
docs: register Codex builder seats Bentina (row 157, I2) and Poe (row 208, 193d) under Q246 and mos-1566; doc only
2026-10-23 23:32:05 -05:00 · 2026-10-23 23:16:04 -05:00 · 2026-10-23 22:50:59 -05:00 · 2026-10-23 22:47:34 -05:00 · 2026-10-23 20:33:27 -05:00 · 2026-10-23 20:31:38 -05:00
1348 changed files with 405058 additions and 1546 deletions
@@ -5342,3 +5342,128 @@ Gander: after Duckworth-0100 design approval with C1-C5, prepared the two host-s
 2026-10-22T17:42:16Z | Sage | Row 253 (#1758, Gander, Duckworth) LANDED 48e450ce8. Before: refactor at aca16404c; case-sudo calls had no supervised session check and the M21 survivor hid behind a fast-exit fixture (mos-1297). After: a fast-forward of 22 commits; manifest 591020a1 rechecked with 0 mismatches; run 5 whole gate green with M1-M40 killed, the M38 PID equals SID assertion added under mos-1298; Duckworth APPROVE rev 3252, note rev 3253, done rev 3254; #1758 comment 30701 and closed; P19 416 comment 719. N1 (fast child reported as exit 85) is DEFERRED as Vikunja 532.

 2026-10-22T18:11:57Z | Sage | Row 275 (#1780, Morgana, Duckworth) LANDED 3410df7c3. Before: refactor at 48e450ce8; viewers had no verb list of their own and board reads were not refused to users. After: a fast-forward of 3 commits; manifest 39847b15 (4 paths) blobs match; gate 17:52:12Z-18:05:00Z green (whole files 7/22/6, bus 834, cli 861, harness 151, business 231, seat 167, 10 scripts with 3 named skips), M6 and M10 killed; Duckworth APPROVE rev 3260 (comment 30717); note and done by sage-2897; #1780 comment 30728 and closed. N1 (board refusal test as a loop over BOARD_VERBS) is non-blocking.
+
+2026-10-22 18:11:58 UTC | Gander row276 #1781 prepared, gate pending | Before: row253 left5legacy Case1 AS_USER calls unsupervised across sudo pty sessions. After: candidate uses its unchanged supervisor with per-call inner/outer budgets, separate streams, strict display-only failure trailer, fake-only paired process-model cases and15unique mutants. Duckworth0182 B1 corrected the plan before product code;0183 cleared build. Parse-only Bash checks pass; no Node, behavioral test, host, unit or config action. Runtime gate and publication await Sage.
+
+2026-10-22T22:51:32Z | Megavolt | Row 207 (193c, #1705): rebased onto 01983cd3f as 712f79c0a; gate green under sage-3041 (access.test 31/31, M1-M8 killed on named tests, cli 894/894, ten scripts under mos-1275 limits). Correction: the first run's kill check grepped TAP "not ok" against node's spec output and was stopped and rerun. Runs note in 9bb406c6c.
+
+2026-10-22T22:51:32Z | Sage | Row 207 (#1705, Megavolt, Duckworth) LANDED c4f77373f. Before: refactor at f0e3dcdf4; mosaic access had no user verbs. After: fast-forward of 4 commits, a cherry-pick of the gated 01983cd3f..9bb406c6c (range-diff 4/4 equal, patch-ids equal, the 4 manifest blobs equal; the base moved only by the #1797 brief, which no test reads; no open branch touches the manifest). Duckworth APPROVE c30849 rev 3356; done rev after the note. N1 (any-business refusal untested) DEFERRED. No live change. Correction: my first 207 review request ran under timeout 120, which killed it while it wrote the outcome; the comment (c30841) had posted, so I removed the dead lock and resolved it at rev 3350.
+
+2026-10-22T23:03:39Z | Gyro Q195 O2 rewrite, #1752 / Vikunja #448, mos-1356 | Before: landed O3 design 95e3f7166/blob 4cb59999. After: Q231/Q233 full WordCraft O2 design on gyro/editor-o2 from refactor c4f77373f; canonical git DOCX, original Markdown/wiki preservation, human cadence default 0 with instant accepted-save commits, full rich-feature first slice. Ten briefs include independent source/dependency security clearance before any build queue entry, exact editor-only CSP approval gate, restricted source/build/bridge, separate reviewed DOCX citation gate and flags-only agent access. Existing Case 2 semantics unchanged; any integration requirement change goes through Mos to Jason. Static checks: ten briefs/seven fields, independent reviewers, unique anchors, current source/base/blob pins, docs scope and append-only logs pass. No builds, browser/worker runs, code, queue or live changes. Fenton review pending; CSP and implementation gates remain closed.
+
+2026-10-22T23:03:53Z | Gyro Q195 O2 push guard | CI queue guard identity gyro / purpose push returned exit 0, documented degraded-pass: CANNOT_ASSERT credential-unresolvable. Audit: /mnt/storage/scratch/gyro-q195-ci-queue-audit.jsonl. No credential fallback or CI-green claim.
+
+2026-10-22T23:09:38Z | Gyro Q195 O2 fenton-0006 fixes | Before: e012bab0b left stale-source ambiguity, incomplete migration/shipping ownership, undefined typing transactions and an unmeasured CSP gate. After: D12 explicitly routes superseded-source/C2 reply notices to Mos/Jason and refuses adoption before W4b/notice path; Q2 remains open. F2-F6 add schema-edge placeholders and restore-accounting files, shipped runtime data/writing closure with no sandbox store mount, per-chapter DOCX and 2s-pause/15s-span save groups, volume/latency/growth gates, split-run clickable wikilinks and historical Obsidian graph warning, and S0 isolated existing-artifact CSP measurement before exact-header approval. Static ten-brief/ownership/settings/checklist checks pass. No build/browser run, product/queue/live change. Independent re-check pending.
+
+2026-10-22T23:09:50Z | Gyro fenton-0006 push guard | identity gyro, purpose push, exit 0 documented degraded-pass CANNOT_ASSERT credential-unresolvable; audit gyro-q195-ci-queue-audit.jsonl. No fallback credentials or CI-green claim.
+
+2026-10-22T23:10:14Z | Gyro mos-1358 ruling recorded | Q36 / Vikunja 562 keeps C2 superseded notices OPEN with Jason. Markdown adoption refusal until W4b PASS is now a separate settled Mos build-order ruling, not a Jason question. D12 and Q2 distinguish them; no notice build authorized.
+
+2026-10-22T23:13:27Z | Gyro Q195 O2 fenton-0007 F7/F8 | Named human-only editor.saveGroupPauseMs=2000 and editor.saveGroupMaxMs=15000 with integer/range/cross-field validation and W3a UI/CLI refusal tests. W3b owns production adoption refusal until W4b; isolated fixture conversion remains testable without request-flag bypass. W4b owns adoption module/API tests and reviewed lifting only with committed-reader/citation readiness and, if Q36 approves, the separate notice row PASS. Q36 unresolved stays closed. Static ten-brief, setting-key/bounds, refusal/lift ownership and two-question checks pass. Docs only; no build, browser/worker run, product/queue/live change. Fenton checks F7/F8 on next push.
+
+2026-10-22T23:13:48Z | Gyro mos-1359 / r3 push guard | D13 records save-group timing as Mos's accepted reading of Q226 F41, not Jason's ruling; both defaults remain human-only settings. Push guard identity gyro/purpose push: exit 0 documented degraded-pass, CANNOT_ASSERT credential-unresolvable; audit gyro-q195-ci-queue-audit.jsonl, no credential fallback or CI-green claim.
+
+2026-10-22T23:23:42Z | Rocko, W4 #1799 | Before, D24-D26 had no separate exact DOCX citation/access contract. After, 15e91538f proposed a versioned schema, parser/story/view/refusal rules, live authorization/sharing and generic/git/session bypass closure, compatibility gates and 22 acceptance rows. Two JSON examples parse, diff check clean; no code or implementation acceptance. Megavolt review pending.
+
+2026-10-22T23:55:11Z | Sage, W4 #1799 docs landing | Megavolt reviewed four rounds (CHANGES 15e91538f, 019a0ea5b, 54246cb32; APPROVE 994c3f7fb, #1799 c30868/c30870/c30876/c30884). Landed here as cherry-picks: docs/plans/2026-10-22_q195-docx-citations.md blob 2af460ab7 and docs/reviews/2026-10-22_q195-docx-citations.md blob bedde1716, both new files. 32 acceptance rows go to W4b; R4-N1 (re-migration after a pre-W4b restore keeps the rotated fence and needs owner confirmation) goes into W4b's brief and A32. W4 is design-approved only: its gate still needs Sage's W4b implementation brief, which waits for S0 (#1798) PASS. Q36 open, adoption closed. Docs only, no test reads these files.
+
+2026-10-23T00:52:58Z | Gyro Q235-Q237 policy rewrite started, Vikunja 571, mos-1366/1367 | Before: approved O2 e36bce352 keeps Markdown originals at their paths and Q36 notices open; landed W4 2af460ab7 has the same boundary. Imported that byte-identical W4 baseline as 1ac76a417, from refactor 062646487, to make the policy-only revision diff explicit. Prepared P1-P6/B1-B4: human one-way per-story import, human-set source-repo archive, DOCX current reader, scoped format map/archived non-canon reads, W7 conversion publication after W4b/approved PRD/10-27 and Jason first-real-book go. Q234 exact CSP, mos-1363 and S0 M1-M14 retained. W4 locator/extractor, shares and restore-fence blocks compare byte-identical to the approved baseline. Scope/source review ongoing; Mos impact map must be folded before Fenton handoff. No build/browser/worker run, code, queue, private-book or live action.
+
+2026-10-23T01:37:07Z | Gyro Vikunja571 final impact-map / mos-1372/1375 fold | Prepared parent/W4 rewrite against brain-redux d183246 impact map at stack 062646487. P1-P6/B1-B4 and engineering Q1-Q16 are mapped to eleven briefs. D9 replaces the earlier private O2-only context/per-document/share model: normal Case 2 access in any authorized thread/room, supporting writes intact, changed policy awaits PRD 1.17 approval. New DOCX story creation has the same opening gate as human per-story import. Host-only push to human-set off-host remote replaces the no-remote ban; remoteURL defaults unset and same-host bare is disallowed. W7 gates on Hermes #423 step5, W4b, PRD approval, post-10-27 and first-real-book go; owns conversion events COUNTED/--events/pre-conversion restore reconciliation, manifest order/next_chapter, creative role cite wording, archive/old-path edits and format/link/citation routing. Store+off-host acknowledgment precedes archive commit/push, then catalogue publication; post-push failures remain resumable pending with pinned source. Current checks pass: complete brief fields, policy/map coverage, exact Q234 CSP, locator/projection mechanics byte-equivalent except explicit authority wording, A01-A35 IDs, immutable map pin, four-doc scope and append-only logs. W4 authority/remote/recovery sections reopened for Fenton; older APPROVE not reused. No product/build/browser/worker/private-book/queue/live action. Earlier entry describing preserved shares/fence applies only to the pre-D9 intermediate draft; D9 now withdraws those unimplemented structures.
+
+2026-10-23T01:37:55Z | Gyro 571 push guard | identity gyro/purpose push: exit 0 documented degraded-pass CANNOT_ASSERT credential-unresolvable, scratch audit gyro-q195-ci-queue-audit.jsonl; no credential fallback or CI-green claim.
+
+2026-10-23T01:41:59Z | Gyro sage-3121 A1-A3 PRD alignment | Before: 8d209016b adds a current Connections graph, excludes new Markdown stories in converted books and defaults archiveFolder. After: parent/W4 align with PRD1.17 d6 sha256 886b93c571f87bfbb2f27ee3113b6800a32d8f89196d95ace33566031bee380a: clickable editor links only; graph/tests later pending J-b; new different-path Markdown in a converted book remains canon until import, only recreated converted old paths are unmapped; archive folder is human-set in library mapping with no default, missing folder refuses conversion. Static A1-A3/11-brief checks pass; W4 locator/extractor/access/remote/recovery blocks unchanged. Local commit only, push held for Sage's named gap while Gizmoduck holds 270+271 run5. No product/build/browser/worker/queue/live action. Fenton gets local SHA through shared object store.
+
+2026-10-23T01:49:08Z | Gyro fenton-0012 B1/B2 and N1-N6, mos-1379 | B1: off-host remote must deny the real shared jason.woltje seat-helper credential as well as seat identities until #431; private visibility/dummy-token denial is insufficient; W3b/A16/A26 require that future fixture proof. B2 follows mos-1379: human-only editor.agentReadComments and editor.agentReadTrackedDeletions both default false, comment/original/markup reads/resolves/index/context refuse when off; final access remains D9 and no role allowlist/per-document grant. N1 staging-ref allowlist and retained private refused/published audit refs; N2 URLs literal with fidelity-report loss and confirmation; N3 future paths marked new or predecessor row; N4 rename/sharing wording fixed; N5 historical thread text not refreshed; N6 protected VM1012 backup cited in P5. Static checks pass, locator JSON/package/projection mechanics retained. Local commit only; HTTPS push still held for Sage's named gap. No credentials tested/read/printed, no product/build/browser/worker/queue/live action. Fenton gets exact local SHA/blobs.
+
+2026-10-23T01:53:25Z | Gyro fenton-0013 N7 mixed-format chapter order | Fenton approved local 0f4fa4f93. D10 now explicitly orders every chapter ID regardless of Markdown/DOCX format, inserts new canon Markdown by row216 or human committed order, and preserves ID/position at import. W7 tests cover mixed traversal/insertion/import stability. Static diff/append-only checks and docs hook pass. Local commit only, narrow re-check requested, HTTPS push still held for Sage gap. No runtime, queue or live change.
+
+2026-10-23T02:21:06Z | Sage, rows 270+271 landing, 571 landing, MVP rows | Before: 270 (#1775) and 271 (#1776) were approved on gizmoduck/row270-271-r4 49cee846e and 2b964a082 after combined gate C2 run 5 GREEN on 53406f3e4 (bus 873, seat 202, cli 905, ten scripts, 38/38 mutants). After: 33 commits cherry-picked onto 767bb62c7 as 7328da8ca, range-diff all "=", 40 paths identical to the candidate; 270 manifest f4174458 matches, 271 manifest 3ab1f5c8 matches on 29 paths, the other 4 moved under 270 and match its manifest. Done revs 3396/3398, #1775 c30962 and #1776 c30964 closed, P19 463 c861. 571 (Gyro, Fenton APPROVE) picked as ee5f7b9ef, 6345aae3d, 767bb62c7 (blobs 9382f85b, 7ec0897b), 1ac76a417 left out; N7 911dad2aa (Fenton-0014) picked after. Rows 293-299 added (574, FED R6, R4, R7, GitHub grant, Q228, 573), queue commit 253346e3c. Correction: the push sync step checked out O..S paths over the canonical worktree without testing for uncommitted edits, so any pending SESSIONS or BUILD-LOG line in the canonical checkout at 02:06Z would have been overwritten; the sync now skips edited paths. Schema 3n is not live (LIVE 0cbe2e9b3 at 3m).
+2026-10-23T03:59:52Z | Sage, row 293 (Vikunja 574) landing and 3m-3n live window | Before: live 0cbe2e9b3 at schema 3m; 574 approved by Filbert (c30982, cdda41f5) on gander/v574-r2 a9cae2bd6 after run 2 GREEN on 6bfab273b (four files 153/0, seat 202/0, cli 905/0, 312 flagged commits with 0 maintenance children). After: Darkwing's window put live on 464010fbe at 3n (activation 20261023T034557Z-464010fbe4c6, 26/97/5/28, Console 7332 200, W9b pm ra38826f3c6e2 left live, STATE darkwing/window-migrate-3n 8708927e5); 574's six commits cherry-picked onto 464010fbe as e51d11640, range-diff all =, patch-ids equal, only docs differ from a9cae2bd6. #1805 closed c31013, P19 386 c887 and 574 c888. Residual: queue store.mjs, discord git.mjs, harness tools.mjs commit without the maintenance flags; no whole-root test covers them yet.
+2026-10-23T05:47:17Z | Sage, row 292 (#1797) landing, idle-stop race row 302, rows 300/301, row 294 rounds 2-3 | Before: refactor 4a9c536e8; 292's gate on 0d0021454 hit one red at compactions-launch.test.mjs:229, ['session-invalid',22,null] where ['stopped',0,null] was expected, product and test unchanged. Gizmoduck read it as a race: threadIdle releases the claim, then the launcher sends SIGTERM, and a runner call in between gets not-holder and exits 22. Mos (mos-1411) rejected loosening :229, let 292 count one whole unedited green cli rerun, and allowed one rerun for that exact signature on other gates until the race row lands (hits logged on Vikunja 588). The 10-run diagnostic passed 10/10, but one runner log (r846b8d083502) showed not-holder then exit 22. After: the cli rerun was 910/910. 292 LANDED 6aab979e6 05:18Z (7 cherry-picks, range-diff all =, patch-ids equal), done rev 3447, #1797 closed c31038, Vikunja 588 c891. Briefs 86d5ac69b (R6-N1 #1807, R6-N4 #1808, rows 300/301) and e3ef1eaf6/fdedc56e2 (race, #1809, row 302). Row 302 design d1/d2 approved by Dewey with D1 (role.claim refuses a released run), c31044. Mos ruled landRelease folded in, code launcher-released, and four old-test lines moved to exact values (mos-1414/1415/1416): threads.test:394, runner.test:771-772, land.test:464. Row 294 round 2 stopped at webui G5 granted-user.test:269: max(seq) over an empty events table is NULL. Round 3 is one line, coalesce(max(seq),0) (mos-1417), Duckworth APPROVE c31045 rev 3462, gate pending. Queue commit 756284e8e (revs 3448-3456). Correction: two review-request attempts this window ran without MOSAIC_GITEA_CREDENTIAL_FILE exported and failed (3450 Launchpad, 3451/3452 Sage); the posted request was 3453/3454.
+2026-10-23T07:11:43Z | Sage, row 294 (#1800) rounds 3-4 and landing, row 219 edits 2-3, R9 transient and row 303 | Before: refactor 09d0d6faf; 294 run 3 on cb1648f3 stopped with 20 cli reds from two causes. A: the stack-release rehearsal fixture copies lacked cli access.mjs and transport.mjs, which 294's config.mjs now imports. B: the B1-B3 boot tests read warnings that now carry the fixture tracker line. Mos ruled A as two copy-list entries and B as a full pin, no filter: a TRACKER const and deepEqual (mos-1419). After: round 4 8616b9a4f, manifest a1ff5d67, Duckworth APPROVE c31053 rev 3469 with C1/C2. Run 4 from npm ci green: webui 365, cli 909, bus 873, 10 scripts, M1-M11 killed. Merged tree d3059c2c3 (11 cherry-picks, range-diff all =, patch-id 8371405a equal): stack-release-external 25/25, stack-upgrade 21/21. stack-release 223/224 on the first run, R9 at :2178: TypeError on join(r.dir) with r.dir null, so rehearse stopped before its directory and the output was lost. R9 passed 6/6 run alone on d3059c2c3, 09d0d6faf and 24b745447. Mos (mos-1422) allowed one unedited whole rerun: 224/224. 294 LANDED d3059c2c3 07:04Z, done rev 3471, #1800 closed c31068, P19 269 c895. Row 303 (#1810, Vikunja 589, brief ad6ca7930) adds an r.dir guard in R9 only. Queue commit 80793d824 (revs 3464-3473). Row 219: Rocko's second edit 7cbd839d0 (mos-1418, Dewey dewey-0883) restarted and went red at thread-launch C2-09a :489 on a legacy history path. The third edit 5f2ef92e5 (mos-1420, Dewey dewey-0885) reads the native session path. 219 now rebases onto 80793d824, because 294 overlaps its webui files. Correction: the first merged-tree check counted on the 292 drift and found an unrelated transient, and my P19 placeholder sed also rewrote the script's own guard line; the guard refused to post, and I restored the line before posting.
+
+Row 299 (573, #1806, Gander, Filbert): before, the P10 band test timed a fault run minus a separate baseline run, and a loaded whole-suite run went red. Mos approved direct timing from host /proc/uptime stamps with ambient load only (mos-1409). After: rebased onto 80793d824 as ffa93b054 (range-diff 3/3 =, manifest 277ace0b unchanged). Gate 07:26Z-07:50Z: case1 whole 3x 53/0/0, cli whole 917/0/0 (59 files, load 1.54-7.17), P10 inner 2.27 s, outer 4.01 s, M1-M6 killed. M4's planned guard return then exact outer-reason failure counts as its kill (sage-3271, mos-1426). Filbert APPROVE c31084 rev 3485, N1 M1 margin 0.02 s. 299 LANDED ffb2fedfb 08:03Z, done rev 3487, #1806 closed c31087; queue commit 8a35ffadb (revs 3474-3487). Row 303: Duckworth APPROVE c31079 rev 3480 with C1, the whole-file gate. Rows 219 (bfa421b6c) and 295 r2 (b16cef1d0) rebases: Dewey static clean. Corrections: Launchpad and Gander have no token, and the CLI refuses another seat's token file, so I posted both requests as sage (c31082, c31083). My sage-3265 wording led Duckworth to poll queue show into Gander's slot (07:20Z-07:26Z); I ruled it ambient load (sage-3274).
+2026-10-23T10:48:40Z | Sage, rows 302, 295 and 219 landings, the Docker pool diagnostic, rows for Vikunja 590 and 591 | Before: refactor 1ac655005. 302 (#1809, Gizmoduck, Dewey) LANDED 3ed9fd754 08:49Z: 7 commits onto 1ac655005, range-diff all =, tree = gated merge 783602e06; queue commit 07802dc57 (revs 3488-3494). Row 219's gate went 11/3 in test-release.sh: release activate's health check failed because Docker could not create sage-diag1437_default, since all predefined address pools were used up. Under mos-1437 I reproduced it on clean 07802dc57 (11/3, the same stderr). I then removed 18 unused gate _default networks, and the rerun went 14/0 with the run-task marker ok. Mos accepted the removal and ruled that a probe that can create something waits for the go and a removal waits for the report (mos-1438). 295 (#1801, Morgana, Dewey) round 2 gate on d68b4300d (manifest e94c9aeb) was green. It LANDED 2efd127ce 10:10Z: 9 commits onto 07802dc57, HEAD~1 tree = gated a86592ffc. Done rev 3502, #1801 c31105, P19 414 c911. 219 (#1720, Rocko, Dewey): the restart on the post-295 merge 054da642f (manifest 4a2271dd, my mos-1439 call) passed node 2523/0/2 and shells 449/0, with 24 mutants killed. It LANDED 5fdfd7275 10:40Z (8 row commits plus packet-only evidence, tree e86a84a85 = gated). Done rev 3509, #1720 c31110, P19 416 c913. Queue commit 90633c864 (revs 3495-3510). Brief docs/plans/2026-10-23_gate-env-rows.md names rows for 590 (claude-session slug) and 591 (compose network cleanup), and DEFERRED.md gets 219 N1 (U6). Row 272 (Huey) conflicts with 5fdfd7275 in code, so it moves back to in-progress for a rebase. Its new fallback is bounded to a session.list access-refused on an omitted-session route (sage-3357). Corrections: my network create probe ran before Mos's go, and the removal ran before the report. My first slot-order line put the diag start at 09:44Z; it was about 09:41Z. My 219 push piped its output through grep, but the after-fetch confirmed origin. Queue commit 90633c864 also carries Huey's rev 3510 (272 back to in-progress), and its message names only 3495-3509.
+
+
+2026-10-23T11:03:46Z | Gyro Vikunja571 mos-1444 PRD d8 follow-on | Branch gyro/editor-571-d8 from origin/refactor c16e943b9. Both designs now keep library.convert outside ACTIONS/ROUTED and broker processing, retain REQ-WAIT-1/hard-wait test unchanged, constrain unmarked story eligibility to mapped book/playground scope, and add whole-host pre-import restore recovery from remote import manifests plus the Gitea archive commit. Lookups refuse until one current version is proven; VM1012 restore needs Jason present under Q185. W7 no longer owns hard-waits.test.mjs. Canonical queue next gyro returned nothing; direct Mos assignment governs. Static diff, exact replacement and append-only checks pass. No code, tests, build, browser, private-file or live action. Fenton re-check requested after authorized branch push.
+
+2026-10-22 | Huey | Row 272 / 264e (#1777) preparation on huey/row272, base 2d0d407ba. Before: bus session metadata and launcher isolation exist, CLI/Console expose only the saved thread default. Draft: session CLI, Console chooser with isolated drafts/cursors/receipts, metadata counts and safe-clear operation receipts against Gizmoduck's 0260 contracts; narrow deferred B6 reply fence. Tests authored, not run: Gander row 253 holds Sage's slot; no Node, claim, HTTPS git, push or live changes. This entry records preparation after the first draft, not a green acceptance result.
+
+2026-10-22 | Huey | Row 272 draft, 264d additive contract gizmoduck-0272 (78e14352f). Added confirmed cancellation through the human channel, cancelled receipt retirement distinction, named refusals and routed-message cancellation output. Before: cancelled was not recognized as terminal; after: draft CLI stops polling and Console shows the before/after retirement outcome. Acceptance remains unverified: no Node/tests/claim/commit/push under Sage's gate. No runtime/lifecycle authority expanded.
+
+2026-10-23 | Huey | Row 272 / 264e sage-3141 local rebase. Before: uncommitted draft on 2d0d407ba. After: same draft on new huey/row272-b23783f39 at b23783f39, with 270/271 landed (7328da8ca) and schema 3n. Product changes auto-merged; both append-only logs retain the full new base and original Huey additions. Checked landed session.list and clear/cancel/operation envelopes against the wired draft: no incompatible contract change. Historical unavailable-dependency cases stay as stand-ins; actual base supplies counters and lifecycle state. No tests/Node/claim/commit/push while Gander holds row 574 run 2. Existing-test fixture/assertion delta is named in the packet for Mos's ruling via Sage before execution.
+
+2026-10-23 | Huey | Row 272 sage-3145 preservation correction. refs/stash is shared, so it was unsafe as sole draft storage. Pinned exact stash commit 07dc9d2f7944b4781b5e80dfa18425f4749f7a45 to local huey/row272-stash-keep and left the entry untouched. Sage explicitly directed committing the rebased draft before testing to preserve it: an untested local checkpoint, no acceptance claim. No Node/test/queue/network/live action. Separate claims and test CLEARs remain pending; old-test delta is with Mos via sage-3144.
+
+2026-10-23 | Huey | Row 272 early static review follow-up, scrooge-272-early-read-huey-1. Before: a bad-session 404 erased sibling draft/recovery caches, malformed clear/cancel write receipts omitted the audit line, and another session's op key produced an ambiguous error. Draft after: purge only on named thread-level refusals, write one redacted malformed-receipt audit line, and identify key reuse without a write. New browser/HTTP/CLI tests authored, unrun under test hold; approved old-test hunks unchanged. Published 850b22680/round-1 manifest unchanged; follow-up is uncommitted, no acceptance claim.
+
+2026-10-23 | Huey | Row 272 round 2 on row 219 landing 5fdfd7275, after 295. Replayed round 1 and B1/N1/N2; seven conflicts resolved retaining both log histories, both test sets, 219 instance chooser and 295 owner-settings-only transport. Static comparison confirms old tests differ only by mos-1388 approved hunks. Sage3357/Mos1442 authorize bounded granted-user legacy fallback: only session.list access-refused and omitted-session route; no new session grants or owner routing. RED first under3358 on new file only: 1 expected legacy assertion failure, 3 guards pass, 3.504s, TMPDIR mktemp/no underscore, no compose network; slot returned as huey0035. Then implemented fallback and added timeout/bus/malformed guards plus isolated-copy mutant runner, all unrun afterward. Candidate commit/push precedes Sage's full gate by3354; no green claim.
+
+2026-10-23 | Huey | Row 272 round 3 per mos-1455 / sage-3435. Gate run 1 on b44332a93 RED: bus 891/0, business 231/0, CLI 940/1, plugins 110/1, webui 372/20; no mutants. Fixed only new CLI fixture role authority and three null-old render guards. Catching browser tests unchanged. manifest.r3 freezes the same 17 paths. Authorized pre-gate follow-up commit/push; no local tests, Node or queue writes; separate compactions dependency and Sage gate remain pending.
+
+2026-10-23 | Sage (1ef1e4f8) | Row 272 landing (#1777, 264e) | Gate r4 on bea0c8e1c over 1e629c892: bus 891/0, cli 941/0, webui 392/0, business 231/0; plugins 110/1, the single red being row 65 harness.test.mjs:192 naming compactions.mjs, which row 307 owned and fixed. M1-M6 and F1-F4 killed, restore clean. Landed d33989230, queue commit 8dc132bec.
+
+2026-10-23 | Sage (1ef1e4f8) | Row 307 landing (#1814, Vikunja 598) | Six first-parent commits replayed onto 8dc132bec with matching patch-ids, 16 paths equal to 6fdfe3790, manifest digest 17c9f8d9 rebuilt from git. Gate green 14:37:21Z: bus 891/0, cli 941/0, plugins 119/0, webui 392/0, business 231/0, every other package 0 failed 0 skipped, every scripts/test-*.sh passed (skips: test-queue canonical root, test-task live provider x2). M1-M4 killed, restore clean. Landed d243f6b25, DEFERRED 307 N1 0621c439e, queue commit fe4ee8c7b. Correction: my first note said Vikunja 598 done when I had only commented (951); Mos closed it (952).
+
+2026-10-23T17:29:46Z | Gyro Vikunja571 sage-3542 Connections amendment | Branch gyro/editor-connections-design cut exactly from landed PRD1.17 30e6bb680; read REQ-LIB-5 in that PRD. Replaced stale J-b waits in parent and W4. Proposed W8 owns current authorized Markdown/DOCX links/backlinks list, labels, versioned refresh, leakage refusals and fixture tests. Build order under mos-1470/comment961 is W7 closed routing candidate, W8 landing, then W7 human first-real-import opening. No REQ-LIB-8 condition or acceptance change. Q234/mos-1363/S0 M1-M14 and post-10-27/MVP priority fixed. Static diff, twelve brief sections and append-only checks pass. No repo Node, tests, build, browser, queue mutation or live action. Fenton reviews after authorized docs branch push; Sage lands on approval.
+
+2026-10-23T17:32:37Z | Gyro sage-3544 fenton-0016 N1/N2 delta | Before: W7 Gate/final real-conversion list omit the W8 build-order cross-reference and W8 human-view filtering cites agent settings. After: both locations explicitly put W8 landing before human opening as mos-1470 build order, not acceptance; comment/tracked-deletion links are not current story links and never appear in the human Connections view regardless of agent settings. New commit atop approved 5af060fb5, no amend. Static diff and append-only checks pass. Docs only, no repo Node/tests/live action. Fenton checks only this delta.
+
+2026-10-23 | Gladstone | Gitea #1816 / Vikunja 614 hostcheck item 5 and bundle verification | Before: dpkg's correct 750 form falsely fails item 5, and two run-sheet bundle verifies require a missing repository. Draft after: exact root/mosaic/path with octal 0750 equivalence; stat/output unchanged; both verifies use cleaned-up bare scratch repos. Three additive-only test blocks, two planned mutants. Untested under Sage-3738; Sage-3740 authorizes untested branch push for static review. Queue row pending; Sage owns gate and landing.
+
+2026-10-23 | Gladstone | #1816 / Vikunja 614 scope amendment mos-1534, sage-3741 | F1 narrowed to exact 750/0750 and single spaces; F3 allows @ in absolute unit paths with unsafe-character refusals retained; F4 moves copy_tree to / after path resolution. AS_USER audit found git -C and stack-release's existing checkout cd cover the other steps. Added new unit and unreadable-cwd copy tests only. Untested under Sage's no-Node hold; no live action.
+
+2026-10-23 | Gladstone | #1816 / Vikunja 614 F5 draft (mos-1536) | Before: the run sheet omits the explicit notify decision and precheck misses a bus-start refusal. After: section 9a creates a private null-binding decision as mosaic; precheck directly reuses readNotifyConfig and private_dir, and new tests cover accepted and refused decisions. Existing fixture setup additions await Mos approval through Sage; installer unchanged. Untested under no-Node hold.
+
+2026-10-23 | Gladstone | #1816 / Vikunja 614 fixture ruling mos-1537 | Added only three setup lines each to host(t)/world(t) for the explicit null notifier decision. Existing assertions/fakes/lines intact. New install test checks decision bytes/mode preserved and missing decision remains absent. F5 missing-file fault removes the setup file. Untested under Sage's hold; separate follow-up atop 33950cf9b.
+
+2026-10-23 | Gladstone | #1816 / Vikunja 614 F6 and notify parent (mos-1537) | Before: the run sheet's copy check lacks its required CLI wrapper; mkdir -p -m does not guarantee the notify parent mode. After: a separately Mos-gated wrapper --create step follows install and precedes check, as mosaic from cwd /; section 9a explicitly creates both notify directories at 0700. Docs only, no live action; Node/tests still held.
+
+2026-10-23 | Gladstone | Row320 / #1816 first review CHANGES (morgana-0217) | Reviewer run: hostcheck19/19, unit47/47, install24/24, copy17/18; seven of eight mutants killed, M4 survived because both base/mutant failed only cleanup. Fixed this row's F4 test to enter cwd then chmod000, assert no read/search, pass an absolute outside bundle, and restore0700 in finally. Existing tests/setup and production scripts unchanged. Correction untested locally pending Morgana's focused rerun; no acceptance claim.
+
+2026-10-23 | Boyd | Row 298 (#1804, Q228), before implementation completion | Took over Megavolt 7a141269c on boyd/row298 at 45dca69f6 under mos-1496/1502. Approved D1-D6 govern human-only grants.scope.set, empty fallback, in-scope close/evidence and spend recheck. All inherited code UNTESTED; no Node/tests until Sage CLEAR. Plan and static gaps recorded in agents/boyd/work/queue-298/BUILD.md; no live grant or credential access.
+
+2026-10-23 | Boyd | Row 298 (#1804, Q228), targeted verification | On sage-3642 T1 lane B, five whole files serial: business scope 7/0, bus scope 14/0, scope runtime 1/0, CLI scope 4/0, project runtime 3/0 (29/0, no skips). Initial bus fixture typo recorded and corrected. M1-M10 killed by named assertions, source restored and final files green. Dewey dewey-0933 positive control and notes addressed; manifest and evidence in agents/boyd/work/queue-298/BUILD.md. Full package/script gate remains Sage's. No live scope set.
+
+2026-10-23T22:41:07Z | Boyd | Row 298 (#1804), rebase after row 239 | Rebased onto 833ec1cc8d7c11842efb82e57c1a0b256c8d22d7 on boyd/row298-r2 without altering published boyd/row298. Only append-log conflicts; upstream bytes preserved and Boyd suffixes appended. Product merges automatic; row 239 writer-lock revoke and post-revoke error handling preserved, organization.mjs unchanged from new base. Static checks only; UNTESTED on new base pending Sage CLEAR. Details in Boyd BUILD.md.
+
+2026-10-23 | Goldie | Row 322 / #1818 F8/F9 before | The library installer runs the clone importer, whose yaml dependency is absent on fresh clones, and tail -n 1 hides uncaught errors behind Node's version banner. Plan: run the same-commit copy importer, include it in COPY_PATHS, keep the first error line with last-line fallback, append isolated regression coverage. Mos-1550 approves setup-only world(t) additions and the one-path copy-file pin addition. No tests run yet; Sage slot required.
+
+2026-10-23 | Goldie | Row 322 / #1818 F8/F9 after | Importer now runs from the same-commit dependency-equipped copy; COPY_PATHS includes it. One-line refusal selects an actual Error/ERR_ line, avoiding Node's source excerpt/banner, with last-line fallback. Mos-1550-approved fixture setup and one-file pin changes; two append-only regression tests. Under sage-3808 CLEAR, serialized timeout -k 10 runs in /mnt/storage/scratch/tmp/goldieuQ2664: install26/26, copy18/18, pinned-copy10/10; new tests2/2 first run and restored; N installer expected-red2/2, F8 and F9 mutants killed, installer SHA256 restored each time. No unexpected red. Evidence and exact old-test changes in agents/goldie/work/queue-322/BUILD.md; full gate and Morgana review belong to Sage.
+
+2026-10-23 | Goldie | Row 324 / #1820 before (Q247, mos-1555) | New branch goldie/row324 at row298 approved860afc2b6. Design/readers audit in agents/goldie/work/queue-324/BUILD.md: normalize omitted tracker to null, preserve present validation, guard sync readers/adapter config; runtime/instance-settings/broker checks already optional. Existing business.test.mjs98 explicitly requires tracker, so implementation held for Mos approval of removing that one list entry; no old test or product edit, no tests run.
+
+2026-10-23 | Goldie | Row 324 / #1820 draft built (sage-3836, mos-1556) | Claim rev3759. Omitted tracker normalizes null; present including null/malformed stays validated. Loader, business validate, bootConfig trackerFor and Console sync reader handle absence. Row298's guarded runtime/instance-settings/broker paths preserved. Two new test files (9 planned tests); sole old-test edit drops tracker from required-key list under mos-1556. node --check6/6 and diff check pass. No tests run: untested branch push expressly ordered before CLEAR; Duckworth review and Sage gate pending.
+
+2026-10-23 | Goldie | Row 324 / #1820 rebased verification (sage-3850) | Rebased onto3569bf54f as7e59ba8b3; only append-log conflicts, eight manifest files byte-equal. Serialized timeout-k10 scratch TMPDIR goldieOdgIjr: new business5/5, new CLI4/4 (includes Console absent read), existing business21/21; presence mutant killed, bytes restored, new files rerun5/5 and4/4. No unexpected red. Published rebased branch goldie/row324-r2 preserves original remote draft without force-push. Evidence/mutant diff/reader list in BUILD.md; review/full gate pending.
+
+2026-10-23 | Goldie | Row 323 / #1819 before | Case 1 lacks a committed business file. Brief requires actual .53 values and refuses guessing. New branch goldie/row323 from local refactor da537e7d1; source review shows project root, literal human id, tracker sync identity/reference metadata and launch model values absent from DESIGN, plus nonempty launch.instances requires another role. Asked Sage (goldie-0008); no config or test written, no test run. Details agents/goldie/work/queue-323/BUILD.md.
+
+2026-10-23 | Goldie | Row 323 / #1819 static blocker (sage-3823) | Mos-1554 requires no bot and an absent, never-created tracker token path. Static tracing confirms this refuses install validation (business cli84-97, credentials78-83) and bus boot (runtime131/157, bus credentials225-228), even without tracker.baseUrl; unset env also refuses at bus credentials278. Reported Sage goldie-0009; no JSON/test/credential written, no tests. Accepted source values/role and refusal-test rulings are recorded in BUILD.md; waiting for product-boundary resolution.
+
+2026-10-24 | Goldie | Row 323 / #1819 resumed draft (sage-3859) | Rebasing prior notes onto Q247 landing dd6cb5872 resolved only append logs. Added trackerless .53 factory JSON: jason, approved project root, chief+assistant for required nonempty launch.instances, claude-code/Opus5.5/high, tester on. No credentials or token placeholder. Seven new tests prepare exact-doc loading plus scratch real validate/install/boot and three refusal paths; one restoring tester-switch mutant prepared. No old test edits; no tests before Sage CLEAR. Source choices/rulings in BUILD.md.
+
+2026-10-24 | Goldie | Row 323 / #1819 pre-test commit (sage-3861 CLEAR) | Sage explicitly requests commit before runs; JSON/new7-case test/restoring mutant and field provenance committed untested before slot work. Exact sources distinguish mos-1554 human/no-bot intent, sage-3820 roles, sage-3822 project/model, and Q247 tracker omission. No old test edits. Next runs: new file, business whole, CLI whole, mutant/restored file, serialized scratch TMPDIR timeout-k10.
+
+2026-10-24 | Goldie | Row 323 / #1819 first slot STOP (sage-3861) | On committed571376c30: new file7/7 and business261/261 green; whole CLI hit unchanged revoke-window.test.mjs170 (test579, row306 R4), no RESULT after20.1s at ask167/Promise.all194. Stopped suite on observing red, cleaned only positively identified own scratch fixture. Partial631 pass/1 fail before termination, not full-suite green. No mutant/restored run, no old-test edit/rerun. Manifest unchanged; Sage notified goldie-0016 and slot returned. Evidence local under queue-323, awaits ruling.
+
+2026-10-24 | Goldie | Row 323 / #1819 second red STOP (mos-1560, sage-3864) | Isolated revoke-window whole-file run1 on unchanged571376c30 failed0/1 after20.126s, same no RESULT at ask167/test194. Start00:24:22Z, load1.46/1.68/2.70, busyhelperCLEAR, fresh scratch goldieBObDQ9. No run2/3/CLI retry/mutant/restored run; no source/old-test edit. Sage goldie-0018 has log/load/error; slot returned, awaits base-dd6cb5872 root cause. Remote remains unverified571.
+
+2026-10-24 | Goldie | Row 323 / #1819 accepted evidence (mos-1561, sage-3869) | Sage traced revoke-window reds to37-byte TMPDIR making109-byte tools.sock >107 limit (session.mjs278), not Codex. Fresh31-byte /scratch/tmp/XXXXXX confirmation passes1/1 in0.84s. On unchanged571376c30 serialized timeout-k10: business261/261, new7/7, tester-switch mutant killed/restored SHA85e6b9ac, restored new7/7. Every log starts UTC/load/helperCLEAR; all positive runs0 fail/skip/cancel. CLI whole acceptance comes from Sage gate under mos-1561; no local CLI rerun. Evidence-only notes/log commit follows, no old test/source changes.
+
+2026-10-24 | Goldie | Row325 / #1821 before (mos-1563/1564) | Real .mosaic/project.json idstack disagrees with Case1 project's mosaic-stack key; row323 scratch fixture omitted project file and only warned. New goldie/row325 at99930362e changes only that JSON key and expressly authorized old assertion key; new real-byte project-copy validation tests require valid and reject old key. Mutant prepared; no tests before Sage CLEAR, no queue writes/host actions.
+
+2026-10-24 | Goldie | Row325 / #1821 after (sage-3882 CLEAR) | Only Case1 projects key becomesstack; only old test70 expected key updated under mos-1564. New3-case test copies real .mosaic/project.json bytes, requires CLI project valid, rejects old key. Serialized shortTMP timeout-k10: new3/3, business264/264, old-key mutant killed/restored SHA9e43bfef, restored new3/3; all positive0 fail/skip/cancel. Manifest4/4 verifies including unchanged project document. Logs/load lines and mutant diff in BUILD.md; no queue writes/host action, Gladstone review/Sage gate pending.
+
+2026-10-24 | Bentina | Row157 / #1652 before (sage-3906, Q246, mos-1566) | Recovered seat/brief/design at ec86f2c84 on bentina/row157. Canonical queue next flags stale brief pin. Outbound audit finds broker gitea-grant node:https and web DNS-pinned node:https paths, triggering I2 explicit stop rule. Sage notified bentina-0001; BUILD.md records shifted cited sites. No implementation/test/Docker/credential/live-state action; awaiting lead re-pin and transport ruling.
+
+2026-10-24 | Bentina | Row157 / #1652 first slot STOP (sage-3910) | New config/helper31/31 and proxy11/11 green. test-config exit1:55 pass/1 old output regression; new install20/20 green. Validator added absent install key to JSON. Stopped before Docker/install suite; slot returned Sage bentina-0004. sage-3916 authorizes preserving absent output shape/defaulting env to local: fixed own loader/new test only, no rerun before next CLEAR. test-config diff +4/-0. No commit/push; seat BUILD and01/02/03 logs.
+
+2026-10-24 | Bentina | Row157 / #1652 after (sage-3919, sage-3923) | Absent install JSON shape preserved; helper defaults local. Existing config56/56, helper/config31/31, final proxy12/12, final test-install exit0 with three release0.0.12 rootless builds/pins, internal TLS/deny/DNS checks and real Vikunja publicGET200/notifier REST dummyGET401 through services proxy. Upstream-reset correction verified. Slot returned bentina-0007; no broader suites by Sage direction. Boyd then Darkwing review, Mos provider-host measurement and Sage landing gate pending. Evidence in seat BUILD and04-08 logs; only bentina/row157 candidate push authorized.
+
+2026-10-24 | Bentina | Row157 / #1652 round2 before (boyd-0023, sage-3933) | Read reproduced B1 half-open refusal socket retention and B2 same-PID exec inherited cache bypass. Added two new regression files; no existing assertion edits. Proxy drains then destroys refused sockets with1s fallback; helper clears inherited cache/export attributes at source. No tests before CLEAR; Goldie holds slot. Source/causes recorded in seat BUILD.
+
+2026-10-24 | Bentina | Row157 / #1652 round2 after (sage-3936) | B1 refused sockets now drain/destroy with1s bound; B2 source clears inherited cache/export attributes. Archived a14+new regressions red as intended (5controls pass/7defects fail), fixed12/12, helper/config33/33, egress22/22, rootless install exit0 incl image pins/network/services dummyGET. Logs09-13 in seat work. No existing test/assertion edit for round2. Slot returned bentina-0014; followup own-branch commit/manifest for Boyd re-review; Mos and Sage landing gates pending.
@@ -76,6 +76,16 @@ Rules enforced by `scripts/mosaic-config.mjs`:

 Run paths (`build/hello/verify/reset`) fail closed when configuration is missing or invalid; they never invent it.

+The optional `install` key selects the containerized install explicitly:
+`"install": {"mode":"containerized","endpoint":"unix:///run/user/1000/docker.sock"}`.
+An absent key defaults to local mode and remains absent in validation output.
+Local mode forbids `endpoint`;
+containerized mode requires a Unix socket endpoint without whitespace
+(the actual pattern is `^unix:///[^\s]+\.sock$`). Unknown install keys or
+modes refuse with exit 2 without changing the config. Validation contacts no
+daemon; the endpoint helper checks rootless status before engine use. Keep
+existing live configs unchanged until the install rollout is authorized.
+
 ## Missions & tasks (M2)

 Missions and tasks are validated JSON data (strict schemas, version-pinned). The M2 layer is host-side only: mission directives are recorded for provenance but do not yet reach the runtime system prompt (capability/policy layer comes later).
@@ -47,6 +47,14 @@ its launch configuration remains fixed, including on resume. Use Filbert's
 wrapper to select that configuration; a direct shared-helper invocation uses
 its own supplied flags or the system defaults.

+Any run that includes the webui suite, whether a seat's slot run or a landing
+gate, sets `MOSAIC_REQUIRE_EDITOR_BUILD=1`, so a missing editor toolchain fails
+the run instead of skipping the rebuild test. A worktree that links the
+canonical `node_modules` also runs `npm ci --ignore-scripts --no-audit --no-fund`
+in its own `packages/webui` first. The root install carries esbuild 0.28.1
+through pi-coding-agent, and the rebuild needs the 0.28.2 that
+`packages/webui/package-lock.json` pins (Vikunja 597, mos-1453).
+
 All agents follow repository governance and current user direction. Team
 leadership does not add deployment or push authority. Coordinate overlapping
 work with Sage and preserve other sessions' changes.
@@ -0,0 +1,8 @@
+# Beakley
+
+Builder seat, Codex gpt-6.1-sol, started by Mos under Q245 (mos-1506). Owns row 217 (C2-06, handed over from Launchpad).
+
+No launcher in this directory. The seat runs as a T3 thread (thread 88b97f65) and works in its own worktree. It has no
+credentials of its own; it pushes only its own `beakley/*` branches through the repository credential helper (mos-0981),
+never `refactor`, `main` or another seat's branch. Claude seats orchestrate and review (Q245). Registered by Sage on
+2026-10-23 so the queue can name the seat as row owner (store.mjs isSeatDir).
@@ -0,0 +1,10 @@
+# Bentina
+
+Builder seat, Codex gpt-6.1-sol, started by Sage under Q246 and mos-1566. Owns row 157, I2: the install images, the
+install config key, the endpoint helper and the egress proxy (docs/plans/2026-10-18_containerized-install-rows.md),
+reassigned from Researcher so the coding runs on Codex.
+
+No launcher in this directory. The seat runs as a T3 thread and works in its own worktree. It has no credentials of its
+own; it pushes only its own `bentina/*` branches through the repository credential helper (mos-0981), never `refactor`,
+`main` or another seat's branch. Claude seats orchestrate and review the install path (mos-1542 rule 4). Registered by
+Sage on 2026-10-24 so the queue can name the seat as row owner (store.mjs isSeatDir).
@@ -0,0 +1,43 @@
+2026-10-24T04:05:53Z
+ 23:05:53 up 10 days, 14:25,  2 users,  load average: 2.29, 2.31, 1.89
+CLEAR sage-3910 TMPDIR=/mnt/storage/scratch/tmp/lEvgx1
+✔ install: absent (28.959485ms)
+✔ install: local (24.660305ms)
+✔ install: local endpoint (26.210523ms)
+✔ install: containerized missing endpoint (25.495263ms)
+✔ install: bad endpoint "tcp://localhost:2375" (28.62092ms)
+✔ install: bad endpoint "ssh://host/run/docker.sock" (32.126399ms)
+✔ install: bad endpoint "run/docker.sock" (26.69995ms)
+✔ install: bad endpoint "unix://relative.sock" (33.36326ms)
+✔ install: bad endpoint "unix:///a b.sock" (30.579866ms)
+✔ install: bad endpoint "unix:///a.sock\n" (40.844622ms)
+✔ install: bad endpoint "unix:///a" (36.371215ms)
+✔ install: bad endpoint "" (31.603044ms)
+✔ install: bad endpoint null (29.645166ms)
+✔ install: bad endpoint 4 (30.638453ms)
+✔ install: valid endpoint (28.088952ms)
+✔ install: unknown mode (28.182929ms)
+✔ install: missing mode (26.297287ms)
+✔ install: unknown key (27.205488ms)
+✔ install: null (29.189475ms)
+✔ install: array (30.347371ms)
+✔ helper refuses rootful (76.082505ms)
+✔ helper refuses missing (58.354463ms)
+✔ helper refuses substring (86.830586ms)
+✔ helper refuses object (108.0825ms)
+✔ helper refuses invalid JSON (85.203357ms)
+✔ helper refuses null success (85.225204ms)
+✔ helper refuses rootless output but failed (67.840402ms)
+✔ helper checks once and explicitly names host for both calls (119.763305ms)
+✔ local mode refuses before Docker null (35.42747ms)
+✔ local mode refuses before Docker {"mode":"local"} (30.531767ms)
+✔ invalid config refuses before Docker (30.092363ms)
+ℹ tests 31
+ℹ suites 0
+ℹ pass 31
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 833.790665
+EXIT=0
@@ -0,0 +1,23 @@
+2026-10-24T04:06:01Z
+ 23:06:01 up 10 days, 14:25,  2 users,  load average: 2.27, 2.30, 1.89
+CLEAR sage-3910 TMPDIR=/mnt/storage/scratch/tmp/lfgV9z
+✔ allows exact host and port, fragmented headers, and preserves tunnel head (21.273322ms)
+✔ unlisted host (1.324735ms)
+✔ unlisted port (1.081626ms)
+✔ GET (0.948442ms)
+✔ invalid port (0.95243ms)
+✔ userinfo (0.874803ms)
+✔ bad header (0.782898ms)
+✔ slow client has a total header deadline (81.829907ms)
+✔ oversized header refuses (1.267008ms)
+✔ missing, invalid and unknown lists fail closed (0.491274ms)
+✔ refused upstream returns 502 while retaining one allowed decision (1.716299ms)
+ℹ tests 11
+ℹ suites 0
+ℹ pass 11
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 156.342618
+EXIT=0
@@ -0,0 +1,90 @@
+2026-10-24T04:06:08Z
+ 23:06:08 up 10 days, 14:25,  2 users,  load average: 2.53, 2.36, 1.91
+CLEAR sage-3910 TMPDIR=/mnt/storage/scratch/tmp/6eJjJz
+OK    absent adapter defaults to pi
+OK    adapter mock validates (exit 0)
+OK    unsupported adapter exits 2 (exit 2)
+OK    env exports adapter
+OK    bootstrap creates default when absent (exit 0)
+OK    bootstrap wrote config file
+OK    bootstrap is idempotent on existing config (exit 0)
+OK    bootstrap did not rewrite existing config
+OK    validate missing config exits 3 (exit 3)
+OK    malformed JSON exits 2 (exit 2)
+OK    unsupported configVersion exits 2 (exit 2)
+OK    unknown top-level key exits 2 (exit 2)
+OK    unknown execution key exits 2 (exit 2)
+OK    unsupported backend exits 2 (exit 2)
+OK    unsupported environment exits 2 (exit 2)
+OK    relative dataRoot exits 2 (exit 2)
+OK    non-canonical dataRoot exits 2 (exit 2)
+OK    filesystem root dataRoot exits 2 (exit 2)
+OK    home directory dataRoot exits 2 (exit 2)
+OK    dataRoot containing config dir exits 2 (exit 2)
+OK    control character in provider exits 2 (exit 2)
+OK    symlinked config file exits 2 (exit 2)
+OK    env exports resolve correctly
+OK    valid console.sso loads and is in the output
+OK    console.sso HS256 alg exits 2 naming the path (exit 2)
+OK    console.sso alg none exits 2 naming the path (exit 2)
+OK    console.sso missing slot field exits 2 naming the path (exit 2)
+OK    console.sso slot name outside the pattern exits 2 naming the path (exit 2)
+OK    unknown key under console exits 2 naming the path (exit 2)
+OK    valid federation key loads and is in the output
+OK    federation unknown sub-key exits 2 naming the key (exit 2)
+OK    federation peer unknown sub-key exits 2 naming the key (exit 2)
+OK    federation peer origin over http exits 2 naming the key (exit 2)
+OK    federation peer origin with a path exits 2 naming the key (exit 2)
+OK    federation peer origin with userinfo exits 2 naming the key (exit 2)
+OK    federation peer id equal to self exits 2 naming the key (exit 2)
+OK    federation peer label empty exits 2 naming the key (exit 2)
+OK    federation not an object exits 2 naming the key (exit 2)
+OK    federation self pattern exits 2 naming the key (exit 2)
+OK    federation peers not an array exits 2 naming the key (exit 2)
+OK    federation peer not an object exits 2 naming the key (exit 2)
+OK    federation peer id pattern exits 2 naming the key (exit 2)
+OK    federation peer label over 80 characters exits 2 naming the key (exit 2)
+OK    federation duplicate peer id exits 2 naming the key (exit 2)
+OK    federation peer origin with a trailing slash exits 2 naming the key (exit 2)
+OK    federation self missing exits 2 naming the key (exit 2)
+OK    federation peer id missing exits 2 naming the key (exit 2)
+OK    federation peer label missing exits 2 naming the key (exit 2)
+OK    config without federation loads and has no federation output
+FAIL config without console loads with unchanged output
+OK    compactionReadBytes 8388608 loads and is in the output as written
+OK    compactionReadBytes "x" loads and is in the output as written
+OK    compactionStreams 2048 loads and is in the output as written
+OK    compactionStreams "x" loads and is in the output as written
+OK    failed validation modified nothing
+
+✔ install: absent (28.022711ms)
+✔ install: local (26.314077ms)
+✔ install: local endpoint (27.030768ms)
+✔ install: containerized missing endpoint (26.036164ms)
+✔ install: bad endpoint "tcp://localhost:2375" (29.311242ms)
+✔ install: bad endpoint "ssh://host/run/docker.sock" (28.012086ms)
+✔ install: bad endpoint "run/docker.sock" (26.941261ms)
+✔ install: bad endpoint "unix://relative.sock" (26.90999ms)
+✔ install: bad endpoint "unix:///a b.sock" (23.646272ms)
+✔ install: bad endpoint "unix:///a.sock\n" (26.383344ms)
+✔ install: bad endpoint "unix:///a" (24.914913ms)
+✔ install: bad endpoint "" (24.320663ms)
+✔ install: bad endpoint null (25.688262ms)
+✔ install: bad endpoint 4 (26.934437ms)
+✔ install: valid endpoint (27.504294ms)
+✔ install: unknown mode (27.111833ms)
+✔ install: missing mode (26.365767ms)
+✔ install: unknown key (26.974983ms)
+✔ install: null (25.910901ms)
+✔ install: array (25.507423ms)
+ℹ tests 20
+ℹ suites 0
+ℹ pass 20
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 584.03015
+OK    install configuration cases
+selftest: 55 passed, 1 failed
+EXIT=1
@@ -0,0 +1,43 @@
+2026-10-24T04:08:52Z
+ 23:08:52 up 10 days, 14:28,  2 users,  load average: 2.16, 2.49, 2.04
+CLEAR sage-3919 TMPDIR=/mnt/storage/scratch/tmp/o2n7Db
+✔ install: absent (31.8592ms)
+✔ install: local (29.807282ms)
+✔ install: local endpoint (24.009896ms)
+✔ install: containerized missing endpoint (26.296453ms)
+✔ install: bad endpoint "tcp://localhost:2375" (26.404525ms)
+✔ install: bad endpoint "ssh://host/run/docker.sock" (27.486365ms)
+✔ install: bad endpoint "run/docker.sock" (24.280876ms)
+✔ install: bad endpoint "unix://relative.sock" (24.363468ms)
+✔ install: bad endpoint "unix:///a b.sock" (24.920898ms)
+✔ install: bad endpoint "unix:///a.sock\n" (25.784031ms)
+✔ install: bad endpoint "unix:///a" (27.89803ms)
+✔ install: bad endpoint "" (28.939674ms)
+✔ install: bad endpoint null (26.129602ms)
+✔ install: bad endpoint 4 (27.601233ms)
+✔ install: valid endpoint (29.310223ms)
+✔ install: unknown mode (30.307014ms)
+✔ install: missing mode (26.432375ms)
+✔ install: unknown key (29.208115ms)
+✔ install: null (29.793ms)
+✔ install: array (28.956899ms)
+✔ helper refuses rootful (88.440017ms)
+✔ helper refuses missing (49.868469ms)
+✔ helper refuses substring (76.03165ms)
+✔ helper refuses object (77.494513ms)
+✔ helper refuses invalid JSON (78.525159ms)
+✔ helper refuses null success (79.166999ms)
+✔ helper refuses rootless output but failed (52.195589ms)
+✔ helper checks once and explicitly names host for both calls (124.380922ms)
+✔ local mode refuses before Docker null (28.199092ms)
+✔ local mode refuses before Docker {"mode":"local"} (29.618143ms)
+✔ invalid config refuses before Docker (27.543884ms)
+ℹ tests 31
+ℹ suites 0
+ℹ pass 31
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 762.528877
+EXIT=0
@@ -0,0 +1,90 @@
+2026-10-24T04:09:01Z
+ 23:09:01 up 10 days, 14:28,  2 users,  load average: 2.28, 2.50, 2.05
+CLEAR sage-3919 TMPDIR=/mnt/storage/scratch/tmp/hYypHU
+OK    absent adapter defaults to pi
+OK    adapter mock validates (exit 0)
+OK    unsupported adapter exits 2 (exit 2)
+OK    env exports adapter
+OK    bootstrap creates default when absent (exit 0)
+OK    bootstrap wrote config file
+OK    bootstrap is idempotent on existing config (exit 0)
+OK    bootstrap did not rewrite existing config
+OK    validate missing config exits 3 (exit 3)
+OK    malformed JSON exits 2 (exit 2)
+OK    unsupported configVersion exits 2 (exit 2)
+OK    unknown top-level key exits 2 (exit 2)
+OK    unknown execution key exits 2 (exit 2)
+OK    unsupported backend exits 2 (exit 2)
+OK    unsupported environment exits 2 (exit 2)
+OK    relative dataRoot exits 2 (exit 2)
+OK    non-canonical dataRoot exits 2 (exit 2)
+OK    filesystem root dataRoot exits 2 (exit 2)
+OK    home directory dataRoot exits 2 (exit 2)
+OK    dataRoot containing config dir exits 2 (exit 2)
+OK    control character in provider exits 2 (exit 2)
+OK    symlinked config file exits 2 (exit 2)
+OK    env exports resolve correctly
+OK    valid console.sso loads and is in the output
+OK    console.sso HS256 alg exits 2 naming the path (exit 2)
+OK    console.sso alg none exits 2 naming the path (exit 2)
+OK    console.sso missing slot field exits 2 naming the path (exit 2)
+OK    console.sso slot name outside the pattern exits 2 naming the path (exit 2)
+OK    unknown key under console exits 2 naming the path (exit 2)
+OK    valid federation key loads and is in the output
+OK    federation unknown sub-key exits 2 naming the key (exit 2)
+OK    federation peer unknown sub-key exits 2 naming the key (exit 2)
+OK    federation peer origin over http exits 2 naming the key (exit 2)
+OK    federation peer origin with a path exits 2 naming the key (exit 2)
+OK    federation peer origin with userinfo exits 2 naming the key (exit 2)
+OK    federation peer id equal to self exits 2 naming the key (exit 2)
+OK    federation peer label empty exits 2 naming the key (exit 2)
+OK    federation not an object exits 2 naming the key (exit 2)
+OK    federation self pattern exits 2 naming the key (exit 2)
+OK    federation peers not an array exits 2 naming the key (exit 2)
+OK    federation peer not an object exits 2 naming the key (exit 2)
+OK    federation peer id pattern exits 2 naming the key (exit 2)
+OK    federation peer label over 80 characters exits 2 naming the key (exit 2)
+OK    federation duplicate peer id exits 2 naming the key (exit 2)
+OK    federation peer origin with a trailing slash exits 2 naming the key (exit 2)
+OK    federation self missing exits 2 naming the key (exit 2)
+OK    federation peer id missing exits 2 naming the key (exit 2)
+OK    federation peer label missing exits 2 naming the key (exit 2)
+OK    config without federation loads and has no federation output
+OK    config without console loads with unchanged output
+OK    compactionReadBytes 8388608 loads and is in the output as written
+OK    compactionReadBytes "x" loads and is in the output as written
+OK    compactionStreams 2048 loads and is in the output as written
+OK    compactionStreams "x" loads and is in the output as written
+OK    failed validation modified nothing
+
+✔ install: absent (33.602997ms)
+✔ install: local (27.76628ms)
+✔ install: local endpoint (28.360207ms)
+✔ install: containerized missing endpoint (26.872508ms)
+✔ install: bad endpoint "tcp://localhost:2375" (27.729466ms)
+✔ install: bad endpoint "ssh://host/run/docker.sock" (29.663768ms)
+✔ install: bad endpoint "run/docker.sock" (28.875798ms)
+✔ install: bad endpoint "unix://relative.sock" (27.427064ms)
+✔ install: bad endpoint "unix:///a b.sock" (30.77649ms)
+✔ install: bad endpoint "unix:///a.sock\n" (34.03786ms)
+✔ install: bad endpoint "unix:///a" (31.459666ms)
+✔ install: bad endpoint "" (26.221924ms)
+✔ install: bad endpoint null (31.982463ms)
+✔ install: bad endpoint 4 (34.408275ms)
+✔ install: valid endpoint (30.184118ms)
+✔ install: unknown mode (26.58596ms)
+✔ install: missing mode (26.563043ms)
+✔ install: unknown key (28.663535ms)
+✔ install: null (26.567284ms)
+✔ install: array (24.756494ms)
+ℹ tests 20
+ℹ suites 0
+ℹ pass 20
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 640.201326
+OK    install configuration cases
+selftest: 56 passed, 0 failed
+EXIT=0
@@ -0,0 +1,245 @@
+2026-10-24T04:09:14Z
+ 23:09:14 up 10 days, 14:29,  2 users,  load average: 2.58, 2.56, 2.08
+CLEAR sage-3919 TMPDIR=/mnt/storage/scratch/tmp/7xUNh5
+✔ install: absent (28.837858ms)
+✔ install: local (28.328967ms)
+✔ install: local endpoint (26.178892ms)
+✔ install: containerized missing endpoint (25.578947ms)
+✔ install: bad endpoint "tcp://localhost:2375" (24.988885ms)
+✔ install: bad endpoint "ssh://host/run/docker.sock" (25.850327ms)
+✔ install: bad endpoint "run/docker.sock" (26.499708ms)
+✔ install: bad endpoint "unix://relative.sock" (42.276491ms)
+✔ install: bad endpoint "unix:///a b.sock" (32.161423ms)
+✔ install: bad endpoint "unix:///a.sock\n" (26.834457ms)
+✔ install: bad endpoint "unix:///a" (30.552354ms)
+✔ install: bad endpoint "" (28.938768ms)
+✔ install: bad endpoint null (27.00598ms)
+✔ install: bad endpoint 4 (29.63046ms)
+✔ install: valid endpoint (28.707851ms)
+✔ install: unknown mode (25.507911ms)
+✔ install: missing mode (27.101142ms)
+✔ install: unknown key (32.316453ms)
+✔ install: null (27.273355ms)
+✔ install: array (25.503395ms)
+✔ helper refuses rootful (81.447175ms)
+✔ helper refuses missing (49.32616ms)
+✔ helper refuses substring (80.299191ms)
+✔ helper refuses object (96.465808ms)
+✔ helper refuses invalid JSON (89.854499ms)
+✔ helper refuses null success (79.934412ms)
+✔ helper refuses rootless output but failed (61.053445ms)
+✔ helper checks once and explicitly names host for both calls (120.469053ms)
+✔ local mode refuses before Docker null (28.252291ms)
+✔ local mode refuses before Docker {"mode":"local"} (32.631557ms)
+✔ invalid config refuses before Docker (28.529643ms)
+ℹ tests 31
+ℹ suites 0
+ℹ pass 31
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 798.423992
+✔ allows exact host and port, fragmented headers, and preserves tunnel head (18.932222ms)
+✔ unlisted host (1.309946ms)
+✔ unlisted port (1.067401ms)
+✔ GET (0.988233ms)
+✔ invalid port (0.919738ms)
+✔ userinfo (0.832286ms)
+✔ bad header (0.761085ms)
+✔ slow client has a total header deadline (80.345593ms)
+✔ oversized header refuses (1.044536ms)
+✔ missing, invalid and unknown lists fail closed (0.486134ms)
+✔ refused upstream returns 502 while retaining one allowed decision (1.562662ms)
+ℹ tests 11
+ℹ suites 0
+ℹ pass 11
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 149.849801
+#0 building with "default" instance using docker driver
+
+#1 [internal] load build definition from Dockerfile
+#1 transferring dockerfile: 454B done
+#1 DONE 0.0s
+
+#2 [internal] load metadata for docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
+#2 DONE 1.6s
+
+#3 [internal] load .dockerignore
+#3 transferring context: 2B done
+#3 DONE 0.0s
+
+#4 [1/9] FROM docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
+#4 resolve docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20 done
+#4 ...
+
+#5 [internal] load build context
+#5 transferring context: 31.36MB 0.1s done
+#5 DONE 0.2s
+
+#4 [1/9] FROM docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
+#4 sha256:08489011619dfda982191cb9cc0418dc48ea3b1341588aeef534e4db0ab4d3d0 447B / 447B 0.1s done
+#4 sha256:1a0cf4b1ffc8dd659bb8c6e90471bc8fec24620e4fdb68bb2b6faa56154ae146 0B / 1.71MB 0.2s
+#4 sha256:11ffcabe0f772f0f1a9c80b4b290b5ec0de54f11c671f0fa10e5844f9b52d17a 0B / 50.86MB 0.2s
+#4 sha256:517d640e32835287653c4b15eb5d9f6bcf48e103baea4f7e29bac937002f649b 3.31kB / 3.31kB 0.2s done
+#4 sha256:1a0cf4b1ffc8dd659bb8c6e90471bc8fec24620e4fdb68bb2b6faa56154ae146 1.71MB / 1.71MB 0.3s done
+#4 sha256:7fd1ebe418b5079d4aa36f416af9b143d127bc75b0155d71cb5fd559b5e04d39 3.15MB / 28.25MB 0.3s
+#4 sha256:11ffcabe0f772f0f1a9c80b4b290b5ec0de54f11c671f0fa10e5844f9b52d17a 6.29MB / 50.86MB 0.5s
+#4 sha256:7fd1ebe418b5079d4aa36f416af9b143d127bc75b0155d71cb5fd559b5e04d39 11.53MB / 28.25MB 0.5s
+#4 sha256:11ffcabe0f772f0f1a9c80b4b290b5ec0de54f11c671f0fa10e5844f9b52d17a 14.68MB / 50.86MB 0.6s
+#4 sha256:7fd1ebe418b5079d4aa36f416af9b143d127bc75b0155d71cb5fd559b5e04d39 19.92MB / 28.25MB 0.6s
+#4 sha256:11ffcabe0f772f0f1a9c80b4b290b5ec0de54f11c671f0fa10e5844f9b52d17a 24.12MB / 50.86MB 0.8s
+#4 sha256:7fd1ebe418b5079d4aa36f416af9b143d127bc75b0155d71cb5fd559b5e04d39 28.25MB / 28.25MB 0.8s done
+#4 sha256:11ffcabe0f772f0f1a9c80b4b290b5ec0de54f11c671f0fa10e5844f9b52d17a 49.28MB / 50.86MB 1.1s
+#4 extracting sha256:7fd1ebe418b5079d4aa36f416af9b143d127bc75b0155d71cb5fd559b5e04d39
+#4 sha256:11ffcabe0f772f0f1a9c80b4b290b5ec0de54f11c671f0fa10e5844f9b52d17a 50.86MB / 50.86MB 1.1s done
+#4 extracting sha256:7fd1ebe418b5079d4aa36f416af9b143d127bc75b0155d71cb5fd559b5e04d39 0.7s done
+#4 DONE 1.6s
+
+#4 [1/9] FROM docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
+#4 extracting sha256:517d640e32835287653c4b15eb5d9f6bcf48e103baea4f7e29bac937002f649b 0.0s done
+#4 extracting sha256:11ffcabe0f772f0f1a9c80b4b290b5ec0de54f11c671f0fa10e5844f9b52d17a
+#4 extracting sha256:11ffcabe0f772f0f1a9c80b4b290b5ec0de54f11c671f0fa10e5844f9b52d17a 1.0s done
+#4 DONE 2.6s
+
+#4 [1/9] FROM docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
+#4 extracting sha256:1a0cf4b1ffc8dd659bb8c6e90471bc8fec24620e4fdb68bb2b6faa56154ae146 0.0s done
+#4 extracting sha256:08489011619dfda982191cb9cc0418dc48ea3b1341588aeef534e4db0ab4d3d0 done
+#4 DONE 2.7s
+
+#6 [2/9] WORKDIR /opt/mosaic
+#6 DONE 0.0s
+
+#7 [3/9] COPY package.json package-lock.json ./
+#7 DONE 0.0s
+
+#8 [4/9] RUN npm ci --omit=dev --ignore-scripts --no-audit --no-fund && npm cache clean --force
+#8 1.008 npm warn deprecated [email protected]: Use your platform's native DOMException instead
+#8 2.464 
+#8 2.464 added 128 packages in 2s
+#8 2.465 npm notice
+#8 2.465 npm notice New major version of npm available! 11.19.0 -> 12.2.1
+#8 2.465 npm notice Changelog: https://github.com/npm/cli/releases/tag/v12.2.1
+#8 2.465 npm notice To update run: npm install -g [email protected]
+#8 2.465 npm notice
+#8 2.562 npm warn using --force Recommended protections disabled.
+#8 DONE 2.7s
+
+#9 [5/9] COPY packages/ packages/
+#9 DONE 0.1s
+
+#10 [6/9] COPY scripts/ scripts/
+#10 DONE 0.0s
+
+#11 [7/9] COPY contracts/ contracts/
+#11 DONE 0.0s
+
+#12 [8/9] COPY roles/ roles/
+#12 DONE 0.0s
+
+#13 [9/9] COPY RELEASE ./
+#13 DONE 0.0s
+
+#14 exporting to image
+#14 exporting layers
+#14 exporting layers 3.3s done
+#14 exporting manifest sha256:b288643bbe89b43f6ffe7890598fe70801933c9e1e5d64efbfc6d87bbc502389 done
+#14 exporting config sha256:c8e137b79bfd807d4d9fc37d5ac211476decc3cc3c8db1e39b2e5dedf5471191 done
+#14 exporting attestation manifest sha256:5f2e757dd0fc2a424c78eb4bdd2ddd3039067afb54bc76bc03d6a6f9f1e2ac75 done
+#14 exporting manifest list sha256:7b4fa741d785225148156d1962a1770b40ab84b55ce8ffde5a3485b316f93b3a done
+#14 naming to docker.io/library/mosaic-core:0.0.12 done
+#14 unpacking to docker.io/library/mosaic-core:0.0.12
+#14 unpacking to docker.io/library/mosaic-core:0.0.12 1.6s done
+#14 DONE 4.9s
+#0 building with "default" instance using docker driver
+
+#1 [internal] load build definition from Dockerfile
+#1 transferring dockerfile: 424B done
+#1 WARN: InvalidDefaultArgInFrom: Default value for ARG ${CORE_IMAGE} results in empty or invalid base image name (line 2)
+#1 DONE 0.0s
+
+#2 [internal] load metadata for docker.io/library/mosaic-core:0.0.12
+#2 DONE 0.0s
+
+#3 [internal] load .dockerignore
+#3 transferring context: 2B done
+#3 DONE 0.0s
+
+#4 [1/2] FROM docker.io/library/mosaic-core:0.0.12@sha256:7b4fa741d785225148156d1962a1770b40ab84b55ce8ffde5a3485b316f93b3a
+#4 resolve docker.io/library/mosaic-core:0.0.12@sha256:7b4fa741d785225148156d1962a1770b40ab84b55ce8ffde5a3485b316f93b3a done
+#4 DONE 0.0s
+
+#5 [2/2] RUN npm install -g --no-audit --no-fund @anthropic-ai/[email protected] @earendil-works/[email protected]  && npm cache clean --force && rm -rf /root/.npm /tmp/*
+#5 1.716 npm warn deprecated [email protected]: Use your platform's native DOMException instead
+#5 6.031 
+#5 6.031 added 167 packages in 6s
+#5 6.032 npm warn install-scripts 4 packages have install scripts not yet covered by allowScripts:
+#5 6.032 npm warn install-scripts   @anthropic-ai/[email protected] (postinstall: node install.cjs)
+#5 6.032 npm warn install-scripts   @google/[email protected] (preinstall: echo 'preinstall: no-op')
+#5 6.032 npm warn install-scripts   [email protected] (postinstall: node install.js)
+#5 6.032 npm warn install-scripts   [email protected] (postinstall: node scripts/postinstall)
+#5 6.032 npm warn install-scripts
+#5 6.032 npm warn install-scripts Run `npm install -g --allow-scripts=@anthropic-ai/claude-code,@google/genai,esbuild,protobufjs` to allow these scripts once, or `npm config set allow-scripts=@anthropic-ai/claude-code,@google/genai,esbuild,protobufjs --location=user` to allow them for all global installs.
+#5 6.119 npm warn using --force Recommended protections disabled.
+#5 DONE 6.3s
+
+#6 exporting to image
+#6 exporting layers
+#6 exporting layers 18.7s done
+#6 exporting manifest sha256:16af90e8e3291626f37fb5b2e78904d87126d875e7bcc240dd2ba453ca62bc10 done
+#6 exporting config sha256:ad269f0a84c0b1c5833b787793a45df782c1aae86e37f6216782a12a01f4557b done
+#6 exporting attestation manifest sha256:436490e0d139cb0db83f260c42ac3364377971160b2418cd03ee07c18873a5f6 done
+#6 exporting manifest list sha256:bc95495952e58a005c275a9d00842242c17965d0d9c2a83c476048cbfc110946 done
+#6 naming to docker.io/library/mosaic-session:0.0.12 done
+#6 unpacking to docker.io/library/mosaic-session:0.0.12
+#6 unpacking to docker.io/library/mosaic-session:0.0.12 5.3s done
+#6 DONE 24.0s
+
+ [33m1 warning found (use docker --debug to expand):
+[0m - InvalidDefaultArgInFrom: Default value for ARG ${CORE_IMAGE} results in empty or invalid base image name (line 2)
+#0 building with "default" instance using docker driver
+
+#1 [internal] load build definition from Dockerfile
+#1 transferring dockerfile: 299B done
+#1 DONE 0.0s
+
+#2 [internal] load metadata for docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
+#2 DONE 0.0s
+
+#3 [internal] load .dockerignore
+#3 transferring context: 2B done
+#3 DONE 0.0s
+
+#4 [1/4] FROM docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
+#4 resolve docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20 done
+#4 DONE 0.0s
+
+#5 [2/4] WORKDIR /opt/mosaic
+#5 CACHED
+
+#6 [internal] load build context
+#6 transferring context: 459B 0.0s done
+#6 DONE 0.0s
+
+#7 [3/4] COPY packages/egress/ packages/egress/
+#7 DONE 0.0s
+
+#8 [4/4] COPY contracts/egress.json contracts/egress.json
+#8 DONE 0.0s
+
+#9 exporting to image
+#9 exporting layers 0.0s done
+#9 exporting manifest sha256:f3f318ddc871b5a5f953aa0709cf69194260e633e26b15daafefe40572a36f27 done
+#9 exporting config sha256:c315f86a3be49d29aa7cad287a1653424206adb43683a34b91633b9bb8a14c6b done
+#9 exporting attestation manifest sha256:d41ee39a55170821cf46236fbf6069519e52c7386e27259ee17113777fa348e1 done
+#9 exporting manifest list sha256:af29f552efea177d706779ed9afb43c89763b58de913da0a570208cdda619d50 done
+#9 naming to docker.io/library/mosaic-egress:0.0.12 done
+#9 unpacking to docker.io/library/mosaic-egress:0.0.12 0.0s done
+#9 DONE 0.1s
+internal network: listed TLS reached, unlisted host/port refused, external DNS refused
+Vikunja client public GET 200; notifier REST dummy-token GET 401
+test-install: PASS (provider-host measurement remains Mos gate)
+EXIT=0
@@ -0,0 +1,24 @@
+2026-10-24T04:13:52Z
+ 23:13:52 up 10 days, 14:33,  2 users,  load average: 2.19, 2.69, 2.26
+CLEAR sage-3923 TMPDIR=/mnt/storage/scratch/tmp/5Tw4Jn
+✔ allows exact host and port, fragmented headers, and preserves tunnel head (17.065009ms)
+✔ unlisted host (1.179696ms)
+✔ unlisted port (4.182798ms)
+✔ GET (0.916554ms)
+✔ invalid port (0.897474ms)
+✔ userinfo (0.772938ms)
+✔ bad header (0.737254ms)
+✔ slow client has a total header deadline (81.64527ms)
+✔ oversized header refuses (1.073337ms)
+✔ missing, invalid and unknown lists fail closed (0.464571ms)
+✔ refused upstream returns 502 while retaining one allowed decision (1.555082ms)
+✔ upstream reset after CONNECT closes the tunnel without a second HTTP response (21.757224ms)
+ℹ tests 12
+ℹ suites 0
+ℹ pass 12
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 173.90579
+EXIT=0
@@ -0,0 +1,207 @@
+2026-10-24T04:13:56Z
+ 23:13:56 up 10 days, 14:33,  2 users,  load average: 2.18, 2.67, 2.26
+CLEAR sage-3923 TMPDIR=/mnt/storage/scratch/tmp/Yb2lkZ
+✔ install: absent (26.874578ms)
+✔ install: local (25.86789ms)
+✔ install: local endpoint (24.545469ms)
+✔ install: containerized missing endpoint (26.458263ms)
+✔ install: bad endpoint "tcp://localhost:2375" (24.315713ms)
+✔ install: bad endpoint "ssh://host/run/docker.sock" (27.113397ms)
+✔ install: bad endpoint "run/docker.sock" (24.399221ms)
+✔ install: bad endpoint "unix://relative.sock" (26.259544ms)
+✔ install: bad endpoint "unix:///a b.sock" (24.051655ms)
+✔ install: bad endpoint "unix:///a.sock\n" (23.493287ms)
+✔ install: bad endpoint "unix:///a" (25.527734ms)
+✔ install: bad endpoint "" (24.647712ms)
+✔ install: bad endpoint null (24.029319ms)
+✔ install: bad endpoint 4 (22.545369ms)
+✔ install: valid endpoint (24.217907ms)
+✔ install: unknown mode (22.578207ms)
+✔ install: missing mode (26.668685ms)
+✔ install: unknown key (25.239503ms)
+✔ install: null (26.507504ms)
+✔ install: array (23.325961ms)
+✔ helper refuses rootful (83.142099ms)
+✔ helper refuses missing (48.938896ms)
+✔ helper refuses substring (74.574145ms)
+✔ helper refuses object (69.21506ms)
+✔ helper refuses invalid JSON (71.320245ms)
+✔ helper refuses null success (70.397988ms)
+✔ helper refuses rootless output but failed (50.077162ms)
+✔ helper checks once and explicitly names host for both calls (116.70882ms)
+✔ local mode refuses before Docker null (26.523468ms)
+✔ local mode refuses before Docker {"mode":"local"} (26.276186ms)
+✔ invalid config refuses before Docker (26.092328ms)
+ℹ tests 31
+ℹ suites 0
+ℹ pass 31
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 707.332707
+✔ allows exact host and port, fragmented headers, and preserves tunnel head (15.694598ms)
+✔ unlisted host (1.162772ms)
+✔ unlisted port (1.047448ms)
+✔ GET (0.913924ms)
+✔ invalid port (0.930799ms)
+✔ userinfo (0.750312ms)
+✔ bad header (0.739214ms)
+✔ slow client has a total header deadline (81.348784ms)
+✔ oversized header refuses (0.992296ms)
+✔ missing, invalid and unknown lists fail closed (0.441271ms)
+✔ refused upstream returns 502 while retaining one allowed decision (1.4408ms)
+✔ upstream reset after CONNECT closes the tunnel without a second HTTP response (21.481904ms)
+ℹ tests 12
+ℹ suites 0
+ℹ pass 12
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 169.285852
+#0 building with "default" instance using docker driver
+
+#1 [internal] load build definition from Dockerfile
+#1 transferring dockerfile: 454B done
+#1 DONE 0.0s
+
+#2 [internal] load metadata for docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
+#2 DONE 0.0s
+
+#3 [internal] load .dockerignore
+#3 transferring context: 2B done
+#3 DONE 0.0s
+
+#4 [1/9] FROM docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
+#4 resolve docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20 done
+#4 DONE 0.0s
+
+#5 [internal] load build context
+#5 transferring context: 31.37MB 0.1s done
+#5 DONE 0.1s
+
+#6 [3/9] COPY package.json package-lock.json ./
+#6 CACHED
+
+#7 [2/9] WORKDIR /opt/mosaic
+#7 CACHED
+
+#8 [4/9] RUN npm ci --omit=dev --ignore-scripts --no-audit --no-fund && npm cache clean --force
+#8 CACHED
+
+#9 [5/9] COPY packages/ packages/
+#9 DONE 0.1s
+
+#10 [6/9] COPY scripts/ scripts/
+#10 DONE 0.0s
+
+#11 [7/9] COPY contracts/ contracts/
+#11 DONE 0.0s
+
+#12 [8/9] COPY roles/ roles/
+#12 DONE 0.0s
+
+#13 [9/9] COPY RELEASE ./
+#13 DONE 0.0s
+
+#14 exporting to image
+#14 exporting layers
+#14 exporting layers 0.4s done
+#14 exporting manifest sha256:065dd55d59585806e540929e2ea66df397d47292cc84160bb7be491ecd2b9d59 done
+#14 exporting config sha256:3d97362dc6b6242fc540f08f538068b91ec28b1d3c9a34d7bc2bebff137a7a40 done
+#14 exporting attestation manifest sha256:f66bf47e4ec5b67db64f44d8554192f646111116e165ec3bc017b5a2b011204b done
+#14 exporting manifest list sha256:d840b0ec16ce6548549d18fb8bfc6b13c76ee77e9131a317582f919c61dcaf7f done
+#14 naming to docker.io/library/mosaic-core:0.0.12 done
+#14 unpacking to docker.io/library/mosaic-core:0.0.12
+#14 unpacking to docker.io/library/mosaic-core:0.0.12 0.2s done
+#14 DONE 0.6s
+#0 building with "default" instance using docker driver
+
+#1 [internal] load build definition from Dockerfile
+#1 transferring dockerfile: 424B done
+#1 WARN: InvalidDefaultArgInFrom: Default value for ARG ${CORE_IMAGE} results in empty or invalid base image name (line 2)
+#1 DONE 0.0s
+
+#2 [internal] load metadata for docker.io/library/mosaic-core:0.0.12
+#2 DONE 0.0s
+
+#3 [internal] load .dockerignore
+#3 transferring context: 2B done
+#3 DONE 0.0s
+
+#4 [1/2] FROM docker.io/library/mosaic-core:0.0.12@sha256:d840b0ec16ce6548549d18fb8bfc6b13c76ee77e9131a317582f919c61dcaf7f
+#4 resolve docker.io/library/mosaic-core:0.0.12@sha256:d840b0ec16ce6548549d18fb8bfc6b13c76ee77e9131a317582f919c61dcaf7f done
+#4 DONE 0.0s
+
+#5 [2/2] RUN npm install -g --no-audit --no-fund @anthropic-ai/[email protected] @earendil-works/[email protected]  && npm cache clean --force && rm -rf /root/.npm /tmp/*
+#5 1.700 npm warn deprecated [email protected]: Use your platform's native DOMException instead
+#5 5.518 
+#5 5.518 added 167 packages in 5s
+#5 5.519 npm warn install-scripts 4 packages have install scripts not yet covered by allowScripts:
+#5 5.519 npm warn install-scripts   @anthropic-ai/[email protected] (postinstall: node install.cjs)
+#5 5.519 npm warn install-scripts   @google/[email protected] (preinstall: echo 'preinstall: no-op')
+#5 5.519 npm warn install-scripts   [email protected] (postinstall: node install.js)
+#5 5.519 npm warn install-scripts   [email protected] (postinstall: node scripts/postinstall)
+#5 5.519 npm warn install-scripts
+#5 5.519 npm warn install-scripts Run `npm install -g --allow-scripts=@anthropic-ai/claude-code,@google/genai,esbuild,protobufjs` to allow these scripts once, or `npm config set allow-scripts=@anthropic-ai/claude-code,@google/genai,esbuild,protobufjs --location=user` to allow them for all global installs.
+#5 5.590 npm warn using --force Recommended protections disabled.
+#5 DONE 5.7s
+
+#6 exporting to image
+#6 exporting layers
+#6 exporting layers 16.9s done
+#6 exporting manifest sha256:d4c83e350da6f18bfa7f3dbcef9ab078d72ef7f1f957a2926726e17973969e6a done
+#6 exporting config sha256:8afa310f48e06614963dcbcdc9c3ac497d9e4bad4ddd0524062ba8a52bc3cda2 done
+#6 exporting attestation manifest sha256:b7f082a8cd17d2c90eb27a81359aea66186b80d56a6d0c5e89d29187a2f78ed4 done
+#6 exporting manifest list sha256:2b6299e5a329adf85ea36038cb0407f2328e72e848dbfe95a17bd1fefbf9cf92 done
+#6 naming to docker.io/library/mosaic-session:0.0.12 done
+#6 unpacking to docker.io/library/mosaic-session:0.0.12
+#6 unpacking to docker.io/library/mosaic-session:0.0.12 4.7s done
+#6 DONE 21.7s
+
+ [33m1 warning found (use docker --debug to expand):
+[0m - InvalidDefaultArgInFrom: Default value for ARG ${CORE_IMAGE} results in empty or invalid base image name (line 2)
+#0 building with "default" instance using docker driver
+
+#1 [internal] load build definition from Dockerfile
+#1 transferring dockerfile: 299B done
+#1 DONE 0.0s
+
+#2 [internal] load metadata for docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
+#2 DONE 0.0s
+
+#3 [internal] load .dockerignore
+#3 transferring context: 2B done
+#3 DONE 0.0s
+
+#4 [1/4] FROM docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
+#4 resolve docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20 done
+#4 DONE 0.0s
+
+#5 [internal] load build context
+#5 transferring context: 459B 0.0s done
+#5 DONE 0.0s
+
+#6 [2/4] WORKDIR /opt/mosaic
+#6 CACHED
+
+#7 [3/4] COPY packages/egress/ packages/egress/
+#7 DONE 0.0s
+
+#8 [4/4] COPY contracts/egress.json contracts/egress.json
+#8 DONE 0.0s
+
+#9 exporting to image
+#9 exporting layers 0.0s done
+#9 exporting manifest sha256:e47c86064470f291d2ea468a1002f1e5f9b2e682e42940d06bd33d4e39945a6e done
+#9 exporting config sha256:ba520eadeb66ccfa2dbd3170744fca08affb4dac377d6cf2d26ec27d98d4ee25 done
+#9 exporting attestation manifest sha256:93cbd2f8a7fb1afb858b7b1a35a3020af8e9623e3a98be71d04e9d746c25d148 done
+#9 exporting manifest list sha256:a55e9d5ec6da74933bbefac6816efd0ea5246e825f61eaa4297e7baf7b09501c done
+#9 naming to docker.io/library/mosaic-egress:0.0.12 done
+#9 unpacking to docker.io/library/mosaic-egress:0.0.12 0.0s done
+#9 DONE 0.1s
+internal network: listed TLS reached, unlisted host/port refused, external DNS refused
+Vikunja client public GET 200; notifier REST dummy-token GET 401
+test-install: PASS (provider-host measurement remains Mos gate)
+EXIT=0
@@ -0,0 +1,165 @@
+2026-10-24T04:29:25Z
+ 23:29:25 up 10 days, 14:49,  2 users,  load average: 2.63, 2.97, 2.72
+CLEAR sage-3936 TMPDIR=/mnt/storage/scratch/tmp/jcNy2F archived=a14fdc443 expected RED
+✔ refusal 408 releases server socket (allowHalfOpen=false) (62.262337ms)
+✖ refusal 408 releases server socket (allowHalfOpen=true) (552.049114ms)
+✔ refusal 400 releases server socket (allowHalfOpen=false) (12.304169ms)
+✖ refusal 400 releases server socket (allowHalfOpen=true) (509.122366ms)
+✔ refusal 403 releases server socket (allowHalfOpen=false) (11.566877ms)
+✖ refusal 403 releases server socket (allowHalfOpen=true) (508.134074ms)
+✔ refusal 431 releases server socket (allowHalfOpen=false) (11.339612ms)
+✖ refusal 431 releases server socket (allowHalfOpen=true) (507.396552ms)
+✔ refusal 502 releases server socket (allowHalfOpen=false) (11.812225ms)
+✖ refusal 502 releases server socket (allowHalfOpen=true) (509.521901ms)
+✖ inherited cache is discarded; private cache stays unexported (rootless=false) (49.005306ms)
+✖ inherited cache is discarded; private cache stays unexported (rootless=true) (42.961333ms)
+ℹ tests 12
+ℹ suites 0
+ℹ pass 5
+ℹ fail 7
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 2739.328587
+
+✖ failing tests:
+
+test at ../../../../../../mnt/storage/scratch/tmp/jcNy2F/legacy/packages/egress/tests/refusal.test.mjs:11:79
+✖ refusal 408 releases server socket (allowHalfOpen=true) (552.049114ms)
+  AssertionError [ERR_ASSERTION]: refused peer must not retain a server socket
+  
+  1 !== 0
+  
+      at TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/jcNy2F/legacy/packages/egress/tests/refusal.test.mjs:30:10)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: false,
+    code: 'ERR_ASSERTION',
+    actual: 1,
+    expected: 0,
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
+
+test at ../../../../../../mnt/storage/scratch/tmp/jcNy2F/legacy/packages/egress/tests/refusal.test.mjs:11:79
+✖ refusal 400 releases server socket (allowHalfOpen=true) (509.122366ms)
+  AssertionError [ERR_ASSERTION]: refused peer must not retain a server socket
+  
+  1 !== 0
+  
+      at TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/jcNy2F/legacy/packages/egress/tests/refusal.test.mjs:30:10)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: false,
+    code: 'ERR_ASSERTION',
+    actual: 1,
+    expected: 0,
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
+
+test at ../../../../../../mnt/storage/scratch/tmp/jcNy2F/legacy/packages/egress/tests/refusal.test.mjs:11:79
+✖ refusal 403 releases server socket (allowHalfOpen=true) (508.134074ms)
+  AssertionError [ERR_ASSERTION]: refused peer must not retain a server socket
+  
+  1 !== 0
+  
+      at TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/jcNy2F/legacy/packages/egress/tests/refusal.test.mjs:30:10)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: false,
+    code: 'ERR_ASSERTION',
+    actual: 1,
+    expected: 0,
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
+
+test at ../../../../../../mnt/storage/scratch/tmp/jcNy2F/legacy/packages/egress/tests/refusal.test.mjs:11:79
+✖ refusal 431 releases server socket (allowHalfOpen=true) (507.396552ms)
+  AssertionError [ERR_ASSERTION]: refused peer must not retain a server socket
+  
+  1 !== 0
+  
+      at TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/jcNy2F/legacy/packages/egress/tests/refusal.test.mjs:30:10)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: false,
+    code: 'ERR_ASSERTION',
+    actual: 1,
+    expected: 0,
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
+
+test at ../../../../../../mnt/storage/scratch/tmp/jcNy2F/legacy/packages/egress/tests/refusal.test.mjs:11:79
+✖ refusal 502 releases server socket (allowHalfOpen=true) (509.521901ms)
+  AssertionError [ERR_ASSERTION]: refused peer must not retain a server socket
+  
+  1 !== 0
+  
+      at TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/jcNy2F/legacy/packages/egress/tests/refusal.test.mjs:30:10)
+      at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    generatedMessage: false,
+    code: 'ERR_ASSERTION',
+    actual: 1,
+    expected: 0,
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
+
+test at ../../../../../../mnt/storage/scratch/tmp/jcNy2F/legacy/scripts/install-tests/review-cache.test.mjs:10:36
+✖ inherited cache is discarded; private cache stays unexported (rootless=false) (49.005306ms)
+  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:
+  
+  0 !== 2
+  
+      at TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/jcNy2F/legacy/scripts/install-tests/review-cache.test.mjs:19:10)
+      at Test.runInAsyncScope (node:async_hooks:226:14)
+      at Test.run (node:internal/test_runner/test:1402:25)
+      at Test.start (node:internal/test_runner/test:1262:17)
+      at startSubtestAfterBootstrap (node:internal/test_runner/harness:387:17) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: 0,
+    expected: 2,
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
+
+test at ../../../../../../mnt/storage/scratch/tmp/jcNy2F/legacy/scripts/install-tests/review-cache.test.mjs:10:36
+✖ inherited cache is discarded; private cache stays unexported (rootless=true) (42.961333ms)
+  AssertionError [ERR_ASSERTION]: Expected values to be strictly deep-equal:
+  + actual - expected
+  
+    [
+      '--host',
+  +   'unix:///inherited.sock',
+  +   'ps'
+  -   'unix:///configured.sock',
+  -   'info',
+  -   '--format',
+  -   '{{json .SecurityOptions}}'
+    ]
+  
+      at TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/jcNy2F/legacy/scripts/install-tests/review-cache.test.mjs:20:10)
+      at Test.runInAsyncScope (node:async_hooks:226:14)
+      at Test.run (node:internal/test_runner/test:1402:25)
+      at Test.processPendingSubtests (node:internal/test_runner/test:974:18)
+      at Test.postRun (node:internal/test_runner/test:1542:19)
+      at Test.run (node:internal/test_runner/test:1467:12)
+      at async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: [ '--host', 'unix:///inherited.sock', 'ps' ],
+    expected: [ '--host', 'unix:///configured.sock', 'info', '--format', '{{json .SecurityOptions}}' ],
+    operator: 'deepStrictEqual',
+    diff: 'simple'
+  }
+EXIT=1 (expected 1 for reproduced defects)
@@ -0,0 +1,24 @@
+2026-10-24T04:29:39Z
+ 23:29:39 up 10 days, 14:49,  2 users,  load average: 2.20, 2.85, 2.69
+CLEAR sage-3936 TMPDIR=/mnt/storage/scratch/tmp/0gZQZl
+✔ refusal 408 releases server socket (allowHalfOpen=false) (53.837502ms)
+✔ refusal 408 releases server socket (allowHalfOpen=true) (42.030239ms)
+✔ refusal 400 releases server socket (allowHalfOpen=false) (1.261482ms)
+✔ refusal 400 releases server socket (allowHalfOpen=true) (0.904817ms)
+✔ refusal 403 releases server socket (allowHalfOpen=false) (0.917847ms)
+✔ refusal 403 releases server socket (allowHalfOpen=true) (0.804008ms)
+✔ refusal 431 releases server socket (allowHalfOpen=false) (0.718814ms)
+✔ refusal 431 releases server socket (allowHalfOpen=true) (0.668466ms)
+✔ refusal 502 releases server socket (allowHalfOpen=false) (1.344911ms)
+✔ refusal 502 releases server socket (allowHalfOpen=true) (0.979004ms)
+✔ inherited cache is discarded; private cache stays unexported (rootless=false) (82.339935ms)
+✔ inherited cache is discarded; private cache stays unexported (rootless=true) (112.830463ms)
+ℹ tests 12
+ℹ suites 0
+ℹ pass 12
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 245.761199
+EXIT=0
@@ -0,0 +1,45 @@
+2026-10-24T04:29:49Z
+ 23:29:49 up 10 days, 14:49,  2 users,  load average: 2.09, 2.81, 2.68
+CLEAR sage-3936 TMPDIR=/mnt/storage/scratch/tmp/tUdE4l
+✔ install: absent (26.366604ms)
+✔ install: local (22.63247ms)
+✔ install: local endpoint (22.799393ms)
+✔ install: containerized missing endpoint (25.600693ms)
+✔ install: bad endpoint "tcp://localhost:2375" (23.03486ms)
+✔ install: bad endpoint "ssh://host/run/docker.sock" (23.131519ms)
+✔ install: bad endpoint "run/docker.sock" (24.109097ms)
+✔ install: bad endpoint "unix://relative.sock" (23.350143ms)
+✔ install: bad endpoint "unix:///a b.sock" (25.171936ms)
+✔ install: bad endpoint "unix:///a.sock\n" (23.993281ms)
+✔ install: bad endpoint "unix:///a" (23.480143ms)
+✔ install: bad endpoint "" (24.103262ms)
+✔ install: bad endpoint null (22.669641ms)
+✔ install: bad endpoint 4 (24.019575ms)
+✔ install: valid endpoint (24.603314ms)
+✔ install: unknown mode (24.602796ms)
+✔ install: missing mode (23.797819ms)
+✔ install: unknown key (22.998491ms)
+✔ install: null (25.129192ms)
+✔ install: array (24.482115ms)
+✔ helper refuses rootful (69.872106ms)
+✔ helper refuses missing (48.024972ms)
+✔ helper refuses substring (75.261764ms)
+✔ helper refuses object (69.618809ms)
+✔ helper refuses invalid JSON (69.071543ms)
+✔ helper refuses null success (72.882659ms)
+✔ helper refuses rootless output but failed (53.345431ms)
+✔ helper checks once and explicitly names host for both calls (102.552473ms)
+✔ local mode refuses before Docker null (26.011087ms)
+✔ local mode refuses before Docker {"mode":"local"} (28.185416ms)
+✔ invalid config refuses before Docker (27.514422ms)
+✔ inherited cache is discarded; private cache stays unexported (rootless=false) (75.055951ms)
+✔ inherited cache is discarded; private cache stays unexported (rootless=true) (109.227515ms)
+ℹ tests 33
+ℹ suites 0
+ℹ pass 33
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 690.153576
+EXIT=0
@@ -0,0 +1,34 @@
+2026-10-24T04:29:59Z
+ 23:29:59 up 10 days, 14:49,  2 users,  load average: 1.93, 2.75, 2.66
+CLEAR sage-3936 TMPDIR=/mnt/storage/scratch/tmp/TviERP
+✔ allows exact host and port, fragmented headers, and preserves tunnel head (23.927026ms)
+✔ unlisted host (1.732173ms)
+✔ unlisted port (1.604846ms)
+✔ GET (1.184716ms)
+✔ invalid port (1.343703ms)
+✔ userinfo (1.188622ms)
+✔ bad header (1.150055ms)
+✔ slow client has a total header deadline (81.793054ms)
+✔ oversized header refuses (1.244104ms)
+✔ missing, invalid and unknown lists fail closed (0.57805ms)
+✔ refused upstream returns 502 while retaining one allowed decision (1.746501ms)
+✔ upstream reset after CONNECT closes the tunnel without a second HTTP response (22.237884ms)
+✔ refusal 408 releases server socket (allowHalfOpen=false) (55.691211ms)
+✔ refusal 408 releases server socket (allowHalfOpen=true) (43.646383ms)
+✔ refusal 400 releases server socket (allowHalfOpen=false) (1.568816ms)
+✔ refusal 400 releases server socket (allowHalfOpen=true) (1.105107ms)
+✔ refusal 403 releases server socket (allowHalfOpen=false) (1.202959ms)
+✔ refusal 403 releases server socket (allowHalfOpen=true) (1.016559ms)
+✔ refusal 431 releases server socket (allowHalfOpen=false) (0.914639ms)
+✔ refusal 431 releases server socket (allowHalfOpen=true) (0.889516ms)
+✔ refusal 502 releases server socket (allowHalfOpen=false) (1.698346ms)
+✔ refusal 502 releases server socket (allowHalfOpen=true) (1.234793ms)
+ℹ tests 22
+ℹ suites 0
+ℹ pass 22
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 183.862745
+EXIT=0
@@ -0,0 +1,219 @@
+2026-10-24T04:30:08Z
+ 23:30:08 up 10 days, 14:49,  2 users,  load average: 1.79, 2.69, 2.64
+CLEAR sage-3936 TMPDIR=/mnt/storage/scratch/tmp/qmqk7B
+✔ install: absent (25.729884ms)
+✔ install: local (27.889152ms)
+✔ install: local endpoint (24.35751ms)
+✔ install: containerized missing endpoint (32.226985ms)
+✔ install: bad endpoint "tcp://localhost:2375" (36.932763ms)
+✔ install: bad endpoint "ssh://host/run/docker.sock" (30.311354ms)
+✔ install: bad endpoint "run/docker.sock" (25.198808ms)
+✔ install: bad endpoint "unix://relative.sock" (26.143708ms)
+✔ install: bad endpoint "unix:///a b.sock" (26.182728ms)
+✔ install: bad endpoint "unix:///a.sock\n" (24.78053ms)
+✔ install: bad endpoint "unix:///a" (25.183076ms)
+✔ install: bad endpoint "" (26.038913ms)
+✔ install: bad endpoint null (28.122111ms)
+✔ install: bad endpoint 4 (25.273681ms)
+✔ install: valid endpoint (24.978162ms)
+✔ install: unknown mode (25.362867ms)
+✔ install: missing mode (30.700943ms)
+✔ install: unknown key (25.157537ms)
+✔ install: null (25.311198ms)
+✔ install: array (22.791684ms)
+✔ helper refuses rootful (73.335956ms)
+✔ helper refuses missing (58.142601ms)
+✔ helper refuses substring (76.536037ms)
+✔ helper refuses object (71.066459ms)
+✔ helper refuses invalid JSON (75.615304ms)
+✔ helper refuses null success (74.72487ms)
+✔ helper refuses rootless output but failed (56.316538ms)
+✔ helper checks once and explicitly names host for both calls (116.375519ms)
+✔ local mode refuses before Docker null (33.189488ms)
+✔ local mode refuses before Docker {"mode":"local"} (33.416869ms)
+✔ invalid config refuses before Docker (33.260841ms)
+✔ inherited cache is discarded; private cache stays unexported (rootless=false) (77.918846ms)
+✔ inherited cache is discarded; private cache stays unexported (rootless=true) (125.24254ms)
+ℹ tests 33
+ℹ suites 0
+ℹ pass 33
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 751.025142
+✔ allows exact host and port, fragmented headers, and preserves tunnel head (21.619769ms)
+✔ unlisted host (1.449654ms)
+✔ unlisted port (1.146495ms)
+✔ GET (1.037357ms)
+✔ invalid port (0.994228ms)
+✔ userinfo (0.84581ms)
+✔ bad header (0.834734ms)
+✔ slow client has a total header deadline (81.37968ms)
+✔ oversized header refuses (1.096351ms)
+✔ missing, invalid and unknown lists fail closed (0.499339ms)
+✔ refused upstream returns 502 while retaining one allowed decision (1.730862ms)
+✔ upstream reset after CONNECT closes the tunnel without a second HTTP response (21.825124ms)
+✔ refusal 408 releases server socket (allowHalfOpen=false) (55.028256ms)
+✔ refusal 408 releases server socket (allowHalfOpen=true) (42.613145ms)
+✔ refusal 400 releases server socket (allowHalfOpen=false) (1.348936ms)
+✔ refusal 400 releases server socket (allowHalfOpen=true) (1.104981ms)
+✔ refusal 403 releases server socket (allowHalfOpen=false) (1.097498ms)
+✔ refusal 403 releases server socket (allowHalfOpen=true) (0.965577ms)
+✔ refusal 431 releases server socket (allowHalfOpen=false) (0.806917ms)
+✔ refusal 431 releases server socket (allowHalfOpen=true) (0.752832ms)
+✔ refusal 502 releases server socket (allowHalfOpen=false) (1.582846ms)
+✔ refusal 502 releases server socket (allowHalfOpen=true) (1.14509ms)
+ℹ tests 22
+ℹ suites 0
+ℹ pass 22
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 181.752441
+#0 building with "default" instance using docker driver
+
+#1 [internal] load build definition from Dockerfile
+#1 transferring dockerfile: 454B done
+#1 DONE 0.0s
+
+#2 [internal] load metadata for docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
+#2 DONE 0.7s
+
+#3 [internal] load .dockerignore
+#3 transferring context: 2B done
+#3 DONE 0.0s
+
+#4 [1/9] FROM docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
+#4 resolve docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20 done
+#4 DONE 0.0s
+
+#5 [internal] load build context
+#5 transferring context: 31.38MB 0.1s done
+#5 DONE 0.1s
+
+#6 [2/9] WORKDIR /opt/mosaic
+#6 CACHED
+
+#7 [3/9] COPY package.json package-lock.json ./
+#7 CACHED
+
+#8 [4/9] RUN npm ci --omit=dev --ignore-scripts --no-audit --no-fund && npm cache clean --force
+#8 CACHED
+
+#9 [5/9] COPY packages/ packages/
+#9 DONE 0.1s
+
+#10 [6/9] COPY scripts/ scripts/
+#10 DONE 0.0s
+
+#11 [7/9] COPY contracts/ contracts/
+#11 DONE 0.0s
+
+#12 [8/9] COPY roles/ roles/
+#12 DONE 0.0s
+
+#13 [9/9] COPY RELEASE ./
+#13 DONE 0.0s
+
+#14 exporting to image
+#14 exporting layers
+#14 exporting layers 0.4s done
+#14 exporting manifest sha256:cfd93bac400adc7580134f6177efd9d748e4b4ad65b0ff22515ca3b3ffafa530 done
+#14 exporting config sha256:bda6c7420c2df9510f081d28f50d205083867d0ce907c12290fff226c020fe38 done
+#14 exporting attestation manifest sha256:79c61e7daf7794a3db88121ce6260fafab69f182ef89773914c41ca75a44574c done
+#14 exporting manifest list sha256:82fc7a3df060c3e58799cca4f89dbd57dc007c5534fdedce54d3de637cc83b67 done
+#14 naming to docker.io/library/mosaic-core:0.0.12 done
+#14 unpacking to docker.io/library/mosaic-core:0.0.12
+#14 unpacking to docker.io/library/mosaic-core:0.0.12 0.2s done
+#14 DONE 0.7s
+#0 building with "default" instance using docker driver
+
+#1 [internal] load build definition from Dockerfile
+#1 transferring dockerfile: 424B done
+#1 WARN: InvalidDefaultArgInFrom: Default value for ARG ${CORE_IMAGE} results in empty or invalid base image name (line 2)
+#1 DONE 0.0s
+
+#2 [internal] load metadata for docker.io/library/mosaic-core:0.0.12
+#2 DONE 0.0s
+
+#3 [internal] load .dockerignore
+#3 transferring context: 2B done
+#3 DONE 0.0s
+
+#4 [1/2] FROM docker.io/library/mosaic-core:0.0.12@sha256:82fc7a3df060c3e58799cca4f89dbd57dc007c5534fdedce54d3de637cc83b67
+#4 resolve docker.io/library/mosaic-core:0.0.12@sha256:82fc7a3df060c3e58799cca4f89dbd57dc007c5534fdedce54d3de637cc83b67 done
+#4 DONE 0.0s
+
+#5 [2/2] RUN npm install -g --no-audit --no-fund @anthropic-ai/[email protected] @earendil-works/[email protected]  && npm cache clean --force && rm -rf /root/.npm /tmp/*
+#5 1.920 npm warn deprecated [email protected]: Use your platform's native DOMException instead
+#5 6.054 
+#5 6.054 added 167 packages in 6s
+#5 6.055 npm warn install-scripts 4 packages have install scripts not yet covered by allowScripts:
+#5 6.055 npm warn install-scripts   @anthropic-ai/[email protected] (postinstall: node install.cjs)
+#5 6.055 npm warn install-scripts   @google/[email protected] (preinstall: echo 'preinstall: no-op')
+#5 6.055 npm warn install-scripts   [email protected] (postinstall: node install.js)
+#5 6.055 npm warn install-scripts   [email protected] (postinstall: node scripts/postinstall)
+#5 6.055 npm warn install-scripts
+#5 6.055 npm warn install-scripts Run `npm install -g --allow-scripts=@anthropic-ai/claude-code,@google/genai,esbuild,protobufjs` to allow these scripts once, or `npm config set allow-scripts=@anthropic-ai/claude-code,@google/genai,esbuild,protobufjs --location=user` to allow them for all global installs.
+#5 6.127 npm warn using --force Recommended protections disabled.
+#5 DONE 6.3s
+
+#6 exporting to image
+#6 exporting layers
+#6 exporting layers 19.5s done
+#6 exporting manifest sha256:8b6b7de22cf08845f8fc02961c9677afb9faf0ddc4efe04ab4073a822a60518b done
+#6 exporting config sha256:94013fda37e404bc26b7b15281138cd60afbfea672cae2d2187acc0a7c3a0d7e done
+#6 exporting attestation manifest sha256:127fcf7ecd51a985d22f5a33d5c441d8fa1e246f88dc6e990c01197b46a61427 done
+#6 exporting manifest list sha256:9a272acf49ab376fa9739f66453979487ea8ab259bc43e56f6553e2da7b20835 done
+#6 naming to docker.io/library/mosaic-session:0.0.12 done
+#6 unpacking to docker.io/library/mosaic-session:0.0.12
+#6 unpacking to docker.io/library/mosaic-session:0.0.12 5.2s done
+#6 DONE 24.8s
+
+ [33m1 warning found (use docker --debug to expand):
+[0m - InvalidDefaultArgInFrom: Default value for ARG ${CORE_IMAGE} results in empty or invalid base image name (line 2)
+#0 building with "default" instance using docker driver
+
+#1 [internal] load build definition from Dockerfile
+#1 transferring dockerfile: 299B done
+#1 DONE 0.0s
+
+#2 [internal] load metadata for docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
+#2 DONE 0.0s
+
+#3 [internal] load .dockerignore
+#3 transferring context: 2B done
+#3 DONE 0.0s
+
+#4 [1/4] FROM docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
+#4 resolve docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20 done
+#4 DONE 0.0s
+
+#5 [internal] load build context
+#5 transferring context: 517B 0.0s done
+#5 DONE 0.0s
+
+#6 [2/4] WORKDIR /opt/mosaic
+#6 CACHED
+
+#7 [3/4] COPY packages/egress/ packages/egress/
+#7 DONE 0.0s
+
+#8 [4/4] COPY contracts/egress.json contracts/egress.json
+#8 DONE 0.0s
+
+#9 exporting to image
+#9 exporting layers 0.0s done
+#9 exporting manifest sha256:db3e8991a9330374257298a4a5d4ff36779e8c8d0b00c8b8ead47fc82e32fada done
+#9 exporting config sha256:e7d66f4f785e49a6529b3ed4b708e3b985f4e737d03a66a2c861666288d435d9 done
+#9 exporting attestation manifest sha256:8d2362ebe73a0b71b175ea4d9571ab841c6f5b0913e8fa265d1f4544307987d2 done
+#9 exporting manifest list sha256:36d0bbeb3abc92fc099d95e1fac416df5cc29edf147fcfc4d8743cbe1d60e592 done
+#9 naming to docker.io/library/mosaic-egress:0.0.12 done
+#9 unpacking to docker.io/library/mosaic-egress:0.0.12 0.0s done
+#9 DONE 0.1s
+internal network: listed TLS reached, unlisted host/port refused, external DNS refused
+Vikunja client public GET 200; notifier REST dummy-token GET 401
+test-install: PASS (provider-host measurement remains Mos gate)
+EXIT=0
@@ -0,0 +1,363 @@
+# Row 157 / I2 / #1652 — Bentina build record
+
+## 2026-10-24 — recovery and pre-build hold
+
+Authority: Sage sage-3906 under Q246 / mos-1566. Seat thread:
+`d1ae468e-51ba-40c4-9513-b39ebbb40450`. Branch `bentina/row157`,
+base `ec86f2c84` (required registration commit), initially clean.
+Read root AGENTS.md, agents/bentina/README.md, the I2 brief and its shared
+rules, and the approved containerized-install design. CURRENT.md is a
+historical narrative; queue and Sage's assignment select this row. Goal
+order recovered from 2026-09-27_goals-review.md. Boyd first review, then
+Darkwing install-path review, per Sage's newer assignment.
+
+### Queue boundary
+
+The initial worktree `scripts/mosaic queue next bentina` refused because
+queue commands require the canonical checkout. Retried the same read using
+`/mnt/storage/src/mosaic-stack/scripts/mosaic` in that checkout (the documented
+queue location, without changing its configuration):
+
+```
+start row 157: I2 install images, the install config key, the endpoint helper and the egress proxy; brief docs/plans/2026-10-18_containerized-install-rows.md § I2 install images, the install config key, the endpoint helper and the egress proxy; brief differs from pinned blob; ask the lead to re-pin
+```
+
+No claimant move until Sage resolves the stale brief pin. No other queue
+write authorized. Sent Sage bentina-0001 with this refusal and the outbound
+path findings below. Implementation has not started.
+
+### Re-read of the I2 brief's cited files at ec86f2c84
+
+| Cited file / old site | Current observation |
+|---|---|
+| scripts/hello.sh:24 | Calls processing-control/src/container-cli.mjs:25; Docker moved behind processing control. |
+| scripts/build.sh:13 | Still ambient `docker compose build`:13. |
+| scripts/release.sh:39,122 | Still ambient image inspect:39 and compose build:122. |
+| scripts/agent.sh:208 | Now execs processing-control/src/container-cli.mjs --tty:209. |
+| scripts/verify.sh:36,39,45 | Ambient image inspect:37 and compose build:40; request now uses processing-control container CLI:46. |
+| scripts/land-work.sh:87-88 | Ambient network inspect/remove unchanged at 87-88. |
+| scripts/test-release.sh:58 | Docker probes now at 78,129; cleanup network rm:25; network checks:131,133. |
+| scripts/test-task.sh:139,395,442,517 | Docker probes now at 166,422,470,513,557,579; cleanup network rm:21 and network checks:581,583. |
+| scripts/mosaic-task.mjs:396 | Now calls runContainer:402, imported from processing control, rather than directly spawning Docker. |
+| packages/cli/src/git-socket.mjs:243 | dropNetwork now spawns ambient docker network rm:266; I6 retains ownership. |
+| scripts/mosaic-config.mjs:109-160 / :115 | Loader expanded for instances, Console, federation and compaction settings. validate starts:293; allowed-key expression:304 retains a prefix used by stack-release-fixture.mjs. No install key yet. |
+
+The design says to read via scripts/load_config; this is a function, not a
+file. Actual entry is scripts/common.sh:16 `load_config`, invoking
+mosaic-config.mjs env, then exporting four existing variables. No install
+mode/endpoint exports yet. No modification made.
+
+Design sections 3/4/7 re-read: exact base digest
+`node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20`;
+three release-tagged images; optional install with local default; exact
+rootless SecurityOptions array element check; baked agents/services CONNECT
+lists; JSON decision log. Spike proxy source re-read: one-chunk request
+parsing, no slow-client bound, environment allowlist; it needs the reviewed
+implementation required by I2, not a direct copy. package.json pins pi
+0.85.1; spike Dockerfile.clis pins Claude Code 2.1.296 (current session-code
+pin still needs checking before implementation).
+
+### Outbound stop condition (brief What ships; design section 7)
+
+The brief explicitly says: “If one doesn't, stop and tell Sage before
+adding a dependency.” Not all broker outbound paths use fetch at this base:
+
+- packages/bus/src/gitea-grant.mjs:11 imports node:https request;
+  send():91-140 calls httpsRequest:115 with `agent: false`, auth header,
+  optional CA, timeout and bounded response. It is not the measured fetch
+  path. runtime.mjs imports and wires the grant executor.
+- packages/bus/src/web.mjs delegates to packages/discord/src/web.mjs.
+  That implementation imports node:https/node:http:23-24, resolves public
+  addresses and pins the connection to a vetted address (:161 onward).
+  Changing it to fetch without preserving that fence would be a boundary
+  change. Its arbitrary public destinations also need reconciliation with
+  the design's fixed services host list; do not widen the list speculatively.
+- packages/tasks/src/vikunja.mjs:30,41 uses injected/default global fetch,
+  redirect:error, and processing cancellation/deadline.
+- packages/cli/src/notifier-process.mjs:41-46 supplies global fetch to
+  openDirect. packages/discord/src/notify.mjs:17 builds REST only; it
+  explicitly does not run the gateway. packages/discord/src/rest.mjs:45
+  calls injected fetch. The separate Discord connector gateway uses native
+  WebSocket (gateway.mjs:193); do not claim the notifier needs that gateway.
+- No NODE_USE_ENV_PROXY or HTTPS_PROXY setup found in host.mjs,
+  notifier-process.mjs or bus/process.mjs. I6 owns container startup;
+  I2's eventual image/process verification must demonstrate the actual path
+  with dummy credentials, after the transport ruling and a CLEAR slot.
+
+Recommendation sent to Sage: re-pin the approved brief and rule on the
+bounded handling/ownership of non-fetch paths before implementation. No new
+dependency, host-list expansion, or replacement of DNS pinning authorized.
+
+### Environment and evidence limits
+
+`/run/user/1000/docker.sock` exists as a Unix socket owned by jwoltje.
+Existence is not a rootless attestation. No Docker command or endpoint probe
+has been run. All test execution requires Sage CLEAR; none requested yet
+because there is no implementation candidate. No test, image build,
+credential read, live config/data access, daemon/volume/unit change, commit
+or push. Once unblocked, implement within the owned file list, add required
+acceptance cases, then request a concrete CLEAR with paths and suites;
+use fresh /mnt/storage/scratch/tmp/XXXXXX TMPDIR and timeout -k 10 for each
+scripts/test-*.sh. Old-test changes require Sage authorization before edits.
+Provider-host measurement ships with expected output for Mos; no real token
+will be used here.
+
+## sage-3907 — stop resolved; implementation draft
+
+Sage confirms only I6 changed since the brief pin, and will re-pin row 157.
+I2 must not change non-fetch security transports or add a dependency. Record
+all gaps, retain each named service host and code path in the contract with
+an explicit note, and build the rest. Sage owns the transport ruling before
+broker rollout in later rows. This supersedes the pre-build transport hold;
+the queue claim still awaits a current pin. No queue move attempted.
+
+Additional non-fetch broker paths found:
+
+- runtime.mjs:511 calls seat/src/working.mjs:461 publishRemote, which runs
+  git ls-remote/push at :479/:490 with credential helper input on fd 3.
+  checkout.mjs:80 gitEnv emits a fixed environment without HTTPS_PROXY.
+  This is Git HTTPS, not fetch; core's no-git design also prevents it from
+  working today. The Gitea host entry retains this caveat.
+- runtime.mjs:292 wires hostGrant; host-grant.mjs:174 spawns ssh-keyscan
+  to read public host keys at the registered address/port. It uses fixed
+  PATH-only env, not fetch or HTTP CONNECT. runtime.mjs:435 wires
+  hostExecutor; host-run.mjs:30-45 sshArgs explicitly sets
+  ProxyCommand=none and ProxyJump=none, then ssh to run authorized commands
+  using a pinned host key and private agent. Neither routes through an env
+  HTTP proxy. Hosts/ports are per registry and may be SSH, so no fabricated
+  :443 allowlist entry or network expansion was added.
+- Search-source plug-ins delegate to discord/src/web.mjs. searxng-url
+  sends search GETs to the operator's configured host; searxng-bundled points
+  at 127.0.0.1:8888. Both are non-fetch and depend on the existing DNS checks.
+  No fixed host can be truthfully named for arbitrary web.fetch or operator
+  search; no wildcard entry was added. These are documented gaps, not
+  claims of proxy coverage.
+- Separate Discord connector gateway uses native WebSocket; retained
+  gateway.discord.gg:443 with a NOT PROXIED note, as Sage directs. Notifier
+  is REST-only; no gateway test or live connector run added.
+
+Choices: dependency-free net proxy; exact list lookup; 8192-byte/5s total
+header bounds, 10s upstream connect/120s tunnel idle bounds. JSON allowed
+means the contract permitted the destination, not that upstream succeeded.
+Images use exact I1 base, core has NODE_USE_ENV_PROXY=1, session globally
+installs Claude 2.1.296 and package.json pi pin. Source context includes only
+tracked runtime paths plus explicit new I2 runtime paths, never agent work
+or host node_modules/.git. Tags derive from RELEASE. Core receives no git.
+The zai host candidate api.z.ai is confirmed by the pinned dependency's
+providers/zai.js:9 in canonical node_modules; real-token measurement remains
+Mos's gate. OpenAI candidate is from S6 and is only measured when configured.
+No live model-table config was read.
+
+New tests cover config exit/immutability; helper rootful, null/nonzero,
+substring, wrong type/JSON, exact rootless and hostile DOCKER_HOST; proxy
+fragmentation/pipelined data, deny/port/malformed/slow/oversize and JSON logs.
+test-install additionally builds, inspects pins and exercises an internal
+network plus actual Vikunja/public GET and notifier REST/dummy GET with
+proxy log evidence. The generic S5 fetch test is not repeated.
+
+Old-suite change is prepared as test-config.patch (adds new config cases
+before the existing summary). It has NOT been applied: Sage's old-test
+change rule requires approval first. No old tests changed. No tests run.
+
+## sage-3910 — first CLEAR
+
+Authorized four serialized runs exactly as requested, plus applying the
+addition-only test-config.patch. No broader suites; Sage supplies the
+landing gate. Return slot on run 4 completion or an actual stop.
+
+Additional paths retained under Sage's explicit ruling:
+- scripts/install-tests/config.test.mjs: table of install schema/exit/byte
+  preservation cases, reused by test-config.sh and test-install.sh.
+- scripts/install-tests/helper.test.mjs: fake Docker executable to assert
+  exact argv and rootless refusal before the requested call, without a daemon.
+- scripts/install-tests/network-probe.mjs: actual internal-network tunnel,
+  TLS, unlisted host/port and external DNS refusal in a core image.
+- scripts/install-tests/services-probe.mjs: actual Vikunja and notifier REST
+  client functions, public GET plus invalid dummy token, with proxy log proof.
+All are new files; no old assertion changes.
+
+## First CLEAR result and sage-3916 correction
+
+Run 1: exit 0, config/helper 31/31, zero fail/skip/cancel,
+01-install-unit.log. Run 2: exit 0, proxy 11/11, zero fail/skip/cancel,
+02-egress.log. Run 3: exit 1, config selftest 55 pass / 1 fail; new install
+cases 20/20, 03-config.log. Each log records UTC/load/CLEAR/fresh scratch TMPDIR.
+Run 4 NOT RUN: no Docker command, probe or build. Slot returned to Sage in
+bentina-0004 before any rerun.
+
+Old red: config without console loads with unchanged output
+(test-config.sh:266; log:53). Cause: this implementation unconditionally
+added install:{mode:local} to resolved JSON. Sage-3916 approves the source-only
+fix: omit output key when input omits it (optional-key convention), default
+env export to local. Applied this fix to mosaic-config.mjs and adjusted only
+the new absent-key case. No old assertion changed. No verification after fix:
+Poe has the current slot, Bentina runs next only on a new CLEAR. Run order
+will be 1, 3, 4; no reason to rerun unchanged proxy unit tests separately.
+
+The approved test-config patch is addition-only: git diff --numstat reports
+4 added, 0 removed lines for scripts/test-config.sh. No existing line or
+assertion changed. git diff --stat before first run:
+
+```
+ BUILD-LOG.md              |  2 ++
+ README.md                 |  9 +++++++++
+ docs/SESSIONS.md          |  2 ++
+ docs/TOOLS.md             | 38 ++++++++++++++++++++++++++++++++++++++
+ scripts/mosaic-config.mjs | 20 +++++++++++++++++++-
+ scripts/test-config.sh    |  4 ++++
+ 6 files changed, 74 insertions(+), 1 deletion(-)
+```
+
+New untracked paths are not included by git diff --stat; see explicit paths
+above. Claim bentina-0003 initially refused queue-lock-held; same op retried.
+Sage reports re-pin rev 3808 (sage-3913).
+
+## sage-3919 — corrected acceptance green, slot returned
+
+Run 1 exit 0, helper/config 31/31 (04-install-unit-fixed.log); run 3 exit 0,
+config selftest 56/56 plus new install 20/20 (05-config-fixed.log); run 4
+exit 0 (06-install.log), helper/config 31/31 and proxy 11/11, images built
+at RELEASE 0.0.12, rootless endpoint explicitly attested, image version
+checks passed, internal-network TLS to listed host reached, unlisted host
+and port refused, external DNS refused. Actual Vikunja public GET returned
+200 and notifier REST dummy-token GET returned 401; services proxy logs
+show both host decisions. No real token or broker started. Test-owned
+networks/containers cleaned by suite. Slot returned bentina-0005. No broader
+suites: Sage's landing gate supplies them. Claim bentina-0003 acknowledged
+rev 3812 briefed -> in-progress. No queue files changed in this worktree.
+
+Post-pass source review found one small correctness defect before handoff:
+upstream errors after a successful CONNECT would append a plaintext 502 to
+an established TLS tunnel. Corrected to close an established tunnel and
+reserve 502 for establishment errors. Added a local reset-after-CONNECT
+regression alongside the existing establishment-error test. This creates
+a new verification need: request a new CLEAR for egress units and install
+rebuild/probe before committing. Existing green logs above predate this fix;
+do not claim them for the final proxy bytes.
+
+## sage-3923 — final proxy and install evidence
+
+07-egress-final.log: exit 0, 12/12, zero fail/skip/cancel, including upstream
+reset after a CONNECT200 closes the tunnel without a second HTTP response.
+08-install-final.log: exit 0, 31/31 config/helper and 12/12 proxy,
+zero fail/skip/cancel, three images rebuilt, version checks passed,
+internal-network listed TLS200/unlisted host403/unlisted port403/external
+DNS refused, Vikunja public GET200 and notifier REST dummy-token GET401
+through services proxy; JSON log decisions verified. Explicit endpoint
+unix:///run/user/1000/docker.sock passed rootless check. Suite removed only
+its named i2 containers/networks. Slot returned to Sage in bentina-0007.
+
+No runtime source change after these final reruns. Mos-only measurement
+runner was statically hardened to report a fixed message on malformed
+credential JSON, avoiding JSON.parse's error snippet echoing private input.
+The runner and provider script have not been executed here: Mos owns the
+real-token/provider-model-table check and its output must land on #1652.
+No claim of completed provider-host measurement or final host-list approval.
+
+Acceptance accounting:
+- Install validator cases and unchanged config bytes: new 20 cases green;
+  entire existing config suite 56/56 (05-config-fixed.log); absent output
+  shape preserved; env/helper default local proven by helper's absent test.
+- Rootless guard: exact argv/array membership/status/type/refusal fake
+  cases plus real rootless check in 08-install-final.log. No ambient Docker
+  context used by new code. Other scripts' migration remains I6.
+- Images: exact base digest in Dockerfiles, release 0.0.12 tags, core node
+  24.21.0/no-git/RELEASE assertion; session Claude2.1.296/pi0.85.1 assertions;
+  all built through the helper on the explicit rootless endpoint.
+- Proxy: allow/deny/port/malformed/slow/fragmented/header-bound/upstream-error
+  and structured logs verified in final unit suite; actual TLS tunnel and
+  internal-network denials plus services client fetch paths verified by
+  install suite. The generic S5 fetch probe was not repeated.
+- Non-fetch broker/gateway/SSH/Git/web paths remain documented gaps under
+  sage-3907, not modified or silently claimed to be covered. All fixed
+  service hosts retain entries and code-path notes. No dependency added.
+- Full suites: not run here per sage-3910; Sage's landing gate supplies
+  broader coverage. Reviewer and Mos gates still pending.
+
+Static source diff whitespace check passed (excluding captured .log files
+and unified .patch context). Raw build logs retain Docker/npm output
+including whitespace; no evidence was normalized or rewritten. Old-suite
+change remains +4/-0 and every prior assertion byte-identical. No queue
+file changed here. No secret read, token test, live state/unit operation,
+daemon/volume/restart action, protected-branch push, or integration.
+
+Candidate handoff: base ec86f2c84; commit only this I2 work and receipts on
+bentina/row157, push through configured repository helper, then send Sage
+and Boyd the tip/base/manifest for first review. Darkwing follows Boyd.
+The manifest lists each changed path except its own self-reference.
+
+## Round 2 — Boyd B1/B2 (boyd-0023; Sage sage-3933)
+
+First candidate a14fdc443, manifest b0ed8395, CHANGES on #1652 comment31494.
+Read Boyd's exact scratch harnesses and logs under /mnt/storage/scratch/tmp/IyNqMs.
+B1 reproduction: normal peer control releases its socket, allowHalfOpen peer
+receives408 but getConnections still reports1 after100ms (assertion1 != 0).
+Root cause: refusal end sends FIN but clears the only deadline and leaves the
+read side open. B2 reproduction: same-PID exec inherits exported checked_pid
+and endpoint; fake rootful Docker sees ps on inherited.sock, no info; rc0 vs
+expected2. Root cause: source initializes neither cache validity nor endpoint.
+These findings agree with source inspection and require no design departure.
+No local tests were run while Goldie holds the slot.
+
+Added tests before fixes, adapted from the reviewer with explicit cleanup:
+- packages/egress/tests/refusal.test.mjs: real loopback sockets, normal and
+  half-open controls for every400/403/408/431 refusal; asserts server socket
+  count reaches0, one denial log, expected response. Removing destruction
+  after flush should fail half-open cases while normal controls still pass.
+- scripts/install-tests/review-cache.test.mjs: same-PID exec with inherited
+  exported cache, fake rootful/rootless Docker, actual loader/helper; asserts
+  first call is info at configured.sock, refusal or exact once-per-process
+  cache behavior, and no cache keys in Docker's child environment. Removing
+  source-time reset should fail; no real engine, config or credentials used.
+No existing test file or assertion edited.
+
+Minimal fixes: proxy uses endAndClose for all refusal responses, including
+upstream establishment502: destroy after the small response flushes, plus a
+fixed1s drain deadline cleared on close. Established-tunnel reset behavior
+stays unchanged. Helper unsets checked_pid/endpoint/mode on every source,
+clearing inherited export attributes; ordinary function calls still reuse
+only an attestation obtained in the current process. No dependency, contract,
+host-list or authority change. Request CLEAR for new regression red/green,
+full targeted units and test-install rebuild before commit. Old-test red
+still stops and returns slot. Sage's broader landing gate remains separate.
+
+Sage-3935 approves the five-run plan including archived red-first proof;
+Goldie holds the slot and Bentina is next. Still no node/docker test run.
+The new refusal test also includes normal/half-open502 establishment failures
+on a closed loopback port, exercising the shared termination helper on that
+path (allowed log stays true for an approved destination whose upstream fails).
+This stays within the named new regression file and approved commands.
+
+## Round 2 verified — sage-3936 slot returned
+
+Claimant move bentina-0012 acknowledged rev3825 in-review -> in-progress,
+before the correction commit. Five serialized runs, each fresh short scratch
+TMPDIR/UTC/load/CLEAR and timeout -k10:
+
+| Run | Log (this directory) | Exit | Evidence |
+|---|---|---|---|
+| 1 old archived runtime + new tests | 09-r2-archived-red.log | 1 expected | 12 tests:5 normal-peer controls pass;7 intended failures (five half-open400/403/408/431/502 cases, two inherited-cache cases);0skip/cancel |
+| 2 fixed regressions | 10-r2-regressions-green.log | 0 | 12/12,0fail/skip/cancel |
+| 3 install unit suite | 11-r2-install-units.log | 0 | 33/33,0fail/skip/cancel |
+| 4 egress suite | 12-r2-egress-suite.log | 0 | 22/22,0fail/skip/cancel |
+| 5 install images/network/services | 13-r2-install.log | 0 | 33+22 unit tests green;three images rebuilt/version pins checked;explicit rootless guard;listed TLS200,unlisted host/port403,external DNS refused;Vikunja publicGET200/notifier REST dummyGET401;JSON decisions verified |
+
+Run1 unpacked git archive of a14fdc443 into its own scratch directory and
+overlaid only the two new tests; it did not revert or modify the builder
+worktree. Failures were exact behavioral assertions, not infrastructure or
+syntax errors. All test sockets cleaned in t.after; the install suite
+removed only its i2-prefixed containers/networks. Slot returned to Sage in
+bentina-0014. No existing test file/assertion changed for round2. No code
+change after verification. Earlier config56/56 evidence remains in05 log;
+loader/config unchanged for this review. No broader suites authorized here.
+
+The round2 manifest MANIFEST-r2.sha256 covers the full candidate delta from
+original base ec86f2c84, including the unchanged historical round1 manifest;
+it excludes only its own self-reference (its hash is supplied in the review
+message). Historical round1 manifest still describes a14fdc443 and is not
+rewritten to describe later source. New manifest, candidate tip/base and
+receipts go to Sage and Boyd, then Darkwing follows Boyd's approve. The
+owner's automated review-request credential boundary still belongs to Sage;
+no token read or identity substitution is authorized. Mos provider evidence
+and Sage's broader landing gate remain required. No protected-branch push,
+real-token test, live config/state/unit action or daemon/volume operation.
@@ -0,0 +1,44 @@
+58e473e1783a9f64f6b1a696f747925b9a444d85dbe72e48e7a0dcbd62a2d4e5  BUILD-LOG.md
+67bd811b3030ba0355af2316d02e8b2931b4b2c5a74c5be904b5311de6ef81dd  README.md
+6161cc0505bf0be33ba0e7c7f0f07382cca0ec2b5ace65ac54e16c4d1e3424fc  agents/bentina/work/queue-157/01-install-unit.log
+f13213941dab22955841108d85e62f67ede2ddbc95c25a7b351f30070b035a85  agents/bentina/work/queue-157/02-egress.log
+b46c3fb5f252100f3e2de5b97bd0efc0c1fbbef26230252945f7bb309d359f5e  agents/bentina/work/queue-157/03-config.log
+fc76e5f9b19a31b494ebf4a128ef5f171f1f0712dc3928bebb6556815577015c  agents/bentina/work/queue-157/04-install-unit-fixed.log
+c9a46d969c5d28814addccd7cafe8e734d15c02a407ee80434d4e3e70a3fa4b7  agents/bentina/work/queue-157/05-config-fixed.log
+1d5505a6aba0078e7cf9936fb683e06ac900af12e9e8faf224099a5e2d825fc7  agents/bentina/work/queue-157/06-install.log
+c684dfdd8a460a915e15291fc0f92c9ba30f38d3d3dfa5fa190e7835fbcd448f  agents/bentina/work/queue-157/07-egress-final.log
+5c3efacdbcda5628882045644c32169b7020a6e49d6b89b273aba20ae042898b  agents/bentina/work/queue-157/08-install-final.log
+d2f7bd37b5ac8cc781fae1308a5b047e0ed0d1b63f8d5e22d56e0efa328c4883  agents/bentina/work/queue-157/09-r2-archived-red.log
+4230f9fcc91d1670df0d975e9c5794edb7aa9b21b24c4f415d1594373e769da4  agents/bentina/work/queue-157/10-r2-regressions-green.log
+3e5cd8d154b01ede9a9533f4ff40ac29b4e8193131fd63ba04707df51217d0bb  agents/bentina/work/queue-157/11-r2-install-units.log
+4d23ae4a6d3247a498bd446960c075235f632474fba9e8db374a32aaf4760219  agents/bentina/work/queue-157/12-r2-egress-suite.log
+a4652f0eb6dfcc177c24c5d85d7ec08096e9f49304085f817828d7ef451acd64  agents/bentina/work/queue-157/13-r2-install.log
+5b595798fa8184b15412276d070a0891fdf5cb629eabb8b7bb5f6b3d2b69b3a5  agents/bentina/work/queue-157/BUILD.md
+b0ed8395108ad398f5c9c08fbac8a1b5ca02f579a5d7b709d19d3aaf0860f9ae  agents/bentina/work/queue-157/MANIFEST.sha256
+21f9783dcfe2cac00a49d0d7930a57134bc59ec19dd7bf2e96950f79fae5b1b1  agents/bentina/work/queue-157/PROVIDER-EXPECTED.md
+6518c574291db5816057fbbc438435d0571e088c8f26d1a47ec03ff3047a5efa  agents/bentina/work/queue-157/provider-hosts.sh
+6dbef8d20ede98a9311ba47137b587c07cbc03e921b2a8429652fe362aeb4b85  agents/bentina/work/queue-157/provider-runner.mjs
+e7cb4d0c67eadec557a25385b4ea9803970818354a9e8b0780ac4de07cf34911  agents/bentina/work/queue-157/test-config.patch
+cb2b251342f0020764b7b757b22567d52380053fc15f0e1c7e665a5ec1838f24  contracts/egress.json
+58107cfa274b7551ae163ea77c56d08df530e7f08e06539ddd2999c22252d749  docs/SESSIONS.md
+edcaa526bf0a518716d4e87895d49920b8912295688809a25102ce6b9d6ebdc3  docs/TOOLS.md
+6bd1dc7c244cfb4134d813e0b149ef1182a810eb99f01a95d548f0885b216437  images/README.md
+9c6c3d5736f1ed7eb6dcdb893761b937b7108e29730daf28fe8dd0064df73740  images/core/Dockerfile
+0179d84a7b9321832efb1d90c0290c8f2f6de03db3b2b6d8379672aca598c2a0  images/egress/Dockerfile
+e246e3e3da1065f3c8cf24cc1f7ae15290f3e4c6508f0c6f17a4889a77f2d591  images/session/Dockerfile
+3930764cf5848571507eec3e5b3eda2ebb8aa2d9642f83615b462bf5035e0e75  packages/egress/README.md
+2c45bfed1f19f8a42e05552f8a10584feed8d25ccc506252d55a9a3b6c90a21c  packages/egress/package.json
+257058faee55a429d98955b6253d6b8a0bb058c50446764566586b06a8f76b61  packages/egress/src/cli.mjs
+ce3adb0515ca7e9041f36d7a82df355a3fc97e2a96fc6811ea3b9b47e464787b  packages/egress/src/proxy.mjs
+5c4e778ec9ec5b93ab681d615a2240cd342d09adfe4df1634f3d6abbf16a405b  packages/egress/tests/proxy.test.mjs
+258e954ad7e441a7dd7d25ca9208691ea167e9cb7f34d7d689ed11005adeb4b4  packages/egress/tests/refusal.test.mjs
+86e0152120b04fcfe2a4081b7686f179a139c5370027828c79572033f3cf81c3  scripts/images.sh
+3647b06df02b4d9c0a74b62c774ecdff9272e68a84c06cd85861d7bf18655d5a  scripts/install-tests/config.test.mjs
+21e05bc3e0639427f5a9d4cf166d2991964134845272df76c712ad00ea8033b6  scripts/install-tests/helper.test.mjs
+aa5328566d3e5b46fee587657dac146712735dca0aca90d3d0ad84bc20e313e1  scripts/install-tests/network-probe.mjs
+45274f6745cf931f3002e6c36dcfc46a96c8f09e01e6243c18659749673752fd  scripts/install-tests/review-cache.test.mjs
+72ae66696ad2faaf258c832fdfdf680efc8fca7099359e58da1ee01a88541d8a  scripts/install-tests/services-probe.mjs
+79a8ecfc5ab279111031d5a44906450b732b517fe98511992cafd873ab7a84d3  scripts/lib/docker.sh
+7398bb289d2f28ed15a2984bdeee7e30a704890a33b5e2a5c9f7554115aca8f9  scripts/mosaic-config.mjs
+dcf1799238141689c9d80adc6680694a609e5fb9deef7b78d6b3f4765163e3fe  scripts/test-config.sh
+08be25f67d8fc6676218b1014d34a2ce36a939231f58b657972d856ee26169b2  scripts/test-install.sh
@@ -0,0 +1,36 @@
+6995aa3bcdf50e2441142cc9b6fc9ec84853e353e7a408bbc877ee7e188e73c4  BUILD-LOG.md
+67bd811b3030ba0355af2316d02e8b2931b4b2c5a74c5be904b5311de6ef81dd  README.md
+6161cc0505bf0be33ba0e7c7f0f07382cca0ec2b5ace65ac54e16c4d1e3424fc  agents/bentina/work/queue-157/01-install-unit.log
+f13213941dab22955841108d85e62f67ede2ddbc95c25a7b351f30070b035a85  agents/bentina/work/queue-157/02-egress.log
+b46c3fb5f252100f3e2de5b97bd0efc0c1fbbef26230252945f7bb309d359f5e  agents/bentina/work/queue-157/03-config.log
+fc76e5f9b19a31b494ebf4a128ef5f171f1f0712dc3928bebb6556815577015c  agents/bentina/work/queue-157/04-install-unit-fixed.log
+c9a46d969c5d28814addccd7cafe8e734d15c02a407ee80434d4e3e70a3fa4b7  agents/bentina/work/queue-157/05-config-fixed.log
+1d5505a6aba0078e7cf9936fb683e06ac900af12e9e8faf224099a5e2d825fc7  agents/bentina/work/queue-157/06-install.log
+c684dfdd8a460a915e15291fc0f92c9ba30f38d3d3dfa5fa190e7835fbcd448f  agents/bentina/work/queue-157/07-egress-final.log
+5c3efacdbcda5628882045644c32169b7020a6e49d6b89b273aba20ae042898b  agents/bentina/work/queue-157/08-install-final.log
+f4755f24d626dc69b8159c6934e4213a907659dbb4d46d29d82efc0405b50152  agents/bentina/work/queue-157/BUILD.md
+21f9783dcfe2cac00a49d0d7930a57134bc59ec19dd7bf2e96950f79fae5b1b1  agents/bentina/work/queue-157/PROVIDER-EXPECTED.md
+6518c574291db5816057fbbc438435d0571e088c8f26d1a47ec03ff3047a5efa  agents/bentina/work/queue-157/provider-hosts.sh
+6dbef8d20ede98a9311ba47137b587c07cbc03e921b2a8429652fe362aeb4b85  agents/bentina/work/queue-157/provider-runner.mjs
+e7cb4d0c67eadec557a25385b4ea9803970818354a9e8b0780ac4de07cf34911  agents/bentina/work/queue-157/test-config.patch
+cb2b251342f0020764b7b757b22567d52380053fc15f0e1c7e665a5ec1838f24  contracts/egress.json
+d6239336e48b6a78b80680c88e83ba4b67f8cbed99bf2ee3a697b1b0611e54e9  docs/SESSIONS.md
+edcaa526bf0a518716d4e87895d49920b8912295688809a25102ce6b9d6ebdc3  docs/TOOLS.md
+6bd1dc7c244cfb4134d813e0b149ef1182a810eb99f01a95d548f0885b216437  images/README.md
+9c6c3d5736f1ed7eb6dcdb893761b937b7108e29730daf28fe8dd0064df73740  images/core/Dockerfile
+0179d84a7b9321832efb1d90c0290c8f2f6de03db3b2b6d8379672aca598c2a0  images/egress/Dockerfile
+e246e3e3da1065f3c8cf24cc1f7ae15290f3e4c6508f0c6f17a4889a77f2d591  images/session/Dockerfile
+3930764cf5848571507eec3e5b3eda2ebb8aa2d9642f83615b462bf5035e0e75  packages/egress/README.md
+2c45bfed1f19f8a42e05552f8a10584feed8d25ccc506252d55a9a3b6c90a21c  packages/egress/package.json
+257058faee55a429d98955b6253d6b8a0bb058c50446764566586b06a8f76b61  packages/egress/src/cli.mjs
+2ec533e8a2c9ace2d2dc17ac9efe75a9930ae50e93f6700e3de8aa0475b42295  packages/egress/src/proxy.mjs
+5c4e778ec9ec5b93ab681d615a2240cd342d09adfe4df1634f3d6abbf16a405b  packages/egress/tests/proxy.test.mjs
+86e0152120b04fcfe2a4081b7686f179a139c5370027828c79572033f3cf81c3  scripts/images.sh
+3647b06df02b4d9c0a74b62c774ecdff9272e68a84c06cd85861d7bf18655d5a  scripts/install-tests/config.test.mjs
+21e05bc3e0639427f5a9d4cf166d2991964134845272df76c712ad00ea8033b6  scripts/install-tests/helper.test.mjs
+aa5328566d3e5b46fee587657dac146712735dca0aca90d3d0ad84bc20e313e1  scripts/install-tests/network-probe.mjs
+72ae66696ad2faaf258c832fdfdf680efc8fca7099359e58da1ee01a88541d8a  scripts/install-tests/services-probe.mjs
+e524a285dcebe2a6350e7690650c2796e54661225ce00a67b4559e519f9e3fea  scripts/lib/docker.sh
+7398bb289d2f28ed15a2984bdeee7e30a704890a33b5e2a5c9f7554115aca8f9  scripts/mosaic-config.mjs
+dcf1799238141689c9d80adc6680694a609e5fb9deef7b78d6b3f4765163e3fe  scripts/test-config.sh
+08be25f67d8fc6676218b1014d34a2ce36a939231f58b657972d856ee26169b2  scripts/test-install.sh
@@ -0,0 +1,37 @@
+# Mos provider-host gate (not run by Bentina)
+
+Run only after candidate images build and Mos authorizes the real-token calls.
+Use a scratch config with install.mode containerized and the rootless endpoint;
+do not change the live config. Provide one JSON object on stdin with
+`claudeOAuth` and `zai`, plus optional `anthropic` / `openai` keys if those
+providers are in the actual model table. The script opens no host token file.
+Never paste the input or raw CLI output on the issue. It prints success flags
+and the proxy's host decisions only. Wrap in `timeout -k 10 600`.
+
+From the checkout:
+
+```
+Mos-private-json-producer | MOSAIC_CONFIG=/path/to/scratch-config.json agents/bentina/work/queue-157/provider-hosts.sh
+```
+
+Expected required output (with just Claude Code and pi/zai):
+
+```
+{"case":"claude","ok":true}
+{"case":"pi-zai","ok":true}
+{"hosts":["api.anthropic.com:443","api.z.ai:443"],"denied":[]}
+```
+
+Optional pi/anthropic adds `{"case":"pi-anthropic","ok":true}` and no
+host. Optional pi/openai adds `{"case":"pi-openai","ok":true}` and
+`api.openai.com:443` to sorted hosts. All cases must return ok true, exit 0,
+and denied empty. Model names are explicit candidates; Mos must reconcile
+them to the actual model table without broadening a host list on failure.
+A new host, refusal, failure, or different model requirement returns to Sage;
+there is no wildcard or automatic discovery/update. The baked agents list
+remains provisional until Mos posts matching output on #1652.
+
+Each resource name begins i2-provider; cleanup removes only this run's two
+networks and two containers. No volumes, daemon or restart operations. The
+measurement uses container root as the design requires; I5 still owns the
+full root filesystem re-measurement and final session limits.
@@ -0,0 +1,36 @@
+#!/usr/bin/env bash
+# Mos runs this explicitly with a caller-supplied scratch MOSAIC_CONFIG and
+# credential JSON on stdin. This script reads no host credential file.
+set -euo pipefail
+REPO="$(cd "$(dirname "${BASH_SOURCE[0]}")/../../../.." && pwd)"
+cd "$REPO"
+source scripts/lib/docker.sh
+mosaic_docker version >/dev/null
+release="$(tr -d '[:space:]' < RELEASE)"
+prefix="i2-provider-$(date -u +%s)-$$"
+nets=("$prefix-internal" "$prefix-egress")
+cleanup(){
+ rc=$?; trap - EXIT
+ mosaic_docker container rm -f "$prefix-session" "$prefix-proxy" >/dev/null 2>&1 || true
+ for net in "${nets[@]}"; do mosaic_docker network rm "$net" >/dev/null 2>&1 || true; done
+ exit "$rc"
+}
+trap cleanup EXIT
+mosaic_docker network create --internal "${nets[0]}" >/dev/null
+mosaic_docker network create "${nets[1]}" >/dev/null
+mosaic_docker create --name "$prefix-proxy" --network "${nets[1]}" --read-only --cap-drop ALL --security-opt no-new-privileges --pids-limit 64 --memory 128m --memory-swap 128m --cpus 0.5 "mosaic-egress:$release" agents >/dev/null
+mosaic_docker network connect --alias proxy "${nets[0]}" "$prefix-proxy"
+mosaic_docker start "$prefix-proxy" >/dev/null
+ready=0
+for attempt in {1..50}; do
+ if mosaic_docker exec "$prefix-proxy" node -e 'const s=require("node:net").connect(3128,"127.0.0.1");s.on("connect",()=>{s.destroy();process.exit(0)});s.on("error",()=>process.exit(1))'; then ready=1; break; fi
+ sleep 0.1
+done
+[ "$ready" = 1 ] || { echo proxy-not-ready >&2; exit 1; }
+rc=0
+# Token travels only in stdin and the CLI child's env; never an engine env or log.
+mosaic_docker run --rm --init -i --name "$prefix-session" --network "${nets[0]}" --log-driver none --read-only --tmpfs /root:rw,nosuid --tmpfs /tmp:rw,noexec,nosuid --cap-drop ALL --security-opt no-new-privileges --pids-limit 512 --memory 4g --memory-swap 4g --cpus 2 \
+ --mount "type=bind,src=$REPO/agents/bentina/work/queue-157/provider-runner.mjs,dst=/opt/mosaic/provider-runner.mjs,readonly" \
+ "mosaic-session:$release" node provider-runner.mjs || rc=$?
+mosaic_docker logs "$prefix-proxy" | node -e 'let s="";process.stdin.on("data",c=>s+=c).on("end",()=>{const rows=s.trim().split("\n").filter(Boolean).map(JSON.parse);const deny=rows.filter(r=>r.host&&!r.allowed);console.log(JSON.stringify({hosts:[...new Set(rows.filter(r=>r.allowed).map(r=>r.host+":"+r.port))].sort(),denied:[...new Set(deny.map(r=>r.host+":"+r.port))].sort()}));if(deny.length)process.exitCode=1})' || rc=$?
+exit "$rc"
@@ -0,0 +1,17 @@
+// Mos-only real-token measurement. Reads one JSON object on stdin. Never logs CLI output.
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+const exec = promisify(execFile);
+let input='';for await(const chunk of process.stdin){input+=chunk;if(input.length>65536)throw new Error('measurement-input-too-large');}
+let keys;try{keys=JSON.parse(input);}catch{input='';process.stderr.write('measurement-input-invalid\n');process.exit(2);}input='';
+if(!keys.claudeOAuth||!keys.zai)throw new Error('measurement-needs-claudeOAuth-and-zai');
+const prompt='Reply with exactly I2_PROVIDER_OK and no other text.';
+const env={PATH:process.env.PATH,HOME:'/root',HTTPS_PROXY:'http://proxy:3128',HTTP_PROXY:'http://proxy:3128',NODE_USE_ENV_PROXY:'1',CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC:'1'};
+const pi=['--no-session','--no-tools','--no-approve','--no-extensions','--no-skills','--no-prompt-templates','--no-themes','--no-context-files'];
+const cases=[['claude','claude',['-p',prompt,'--tools',''],{CLAUDE_CODE_OAUTH_TOKEN:keys.claudeOAuth}],['pi-zai','pi',[...pi,'--provider','zai','--model','glm-5.3-flash','-p',prompt],{ZAI_API_KEY:keys.zai}]];
+if(keys.anthropic)cases.push(['pi-anthropic','pi',[...pi,'--provider','anthropic','--model','claude-sonnet-5-5','-p',prompt],{ANTHROPIC_API_KEY:keys.anthropic}]);
+if(keys.openai)cases.push(['pi-openai','pi',[...pi,'--provider','openai','--model','gpt-5.4','-p',prompt],{OPENAI_API_KEY:keys.openai}]);
+for(const [name,bin,args,secrets] of cases){
+ let ok=false;try{const {stdout}=await exec(bin,args,{env:{...env,...secrets},timeout:120000,killSignal:'SIGKILL',maxBuffer:1024*1024});ok=stdout.includes('I2_PROVIDER_OK');}catch{}
+ console.log(JSON.stringify({case:name,ok}));if(!ok)process.exitCode=1;
+}
@@ -0,0 +1,12 @@
+--- a/scripts/test-config.sh
+++ b/scripts/test-config.sh
+@@ -291,5 +291,9 @@
+ fi
+ 
+ echo
+# I2: each install shape asserts its exit code and config-byte preservation.
+node --test scripts/install-tests/config.test.mjs
+check "install configuration cases" $?
+
+ echo "selftest: $PASS passed, $FAIL failed"
+ [ "$FAIL" -eq 0 ]
@@ -0,0 +1,8 @@
+# Boyd
+
+Builder seat, Codex gpt-6.1-sol, started by Mos under Q245 (mos-1506). Owns row 298 (the chief-of-staff grant scope, handed over from Megavolt).
+
+No launcher in this directory. The seat runs as a T3 thread (thread 48a3ae38) and works in its own worktree. It has no
+credentials of its own; it pushes only its own `boyd/*` branches through the repository credential helper (mos-0981),
+never `refactor`, `main` or another seat's branch. Claude seats orchestrate and review (Q245). Registered by Sage on
+2026-10-23 so the queue can name the seat as row owner (store.mjs isSeatDir).
@@ -0,0 +1,272 @@
+# Row 298 (#1804, Q228): chief-of-staff grant scope
+
+Owner Boyd (48a3ae38), reviewer Dewey. Branch `boyd/row298`, base `45dca69f6`.
+Assignment: mos-1496/Q245. Handoff: Megavolt megavolt-0203, local `7a141269c`;
+cherry-picked as `4de3cec27` (design) and `7cea739de` (UNTESTED code).
+Brief: `docs/plans/2026-10-23_mvp-readiness-rows.md`, chief-of-staff grant scope.
+Megavolt's original design remains in `agents/megavolt/work/queue-298/BUILD.md`.
+
+## Authority and accepted design
+
+Sage sage-3594, restated in sage-3612: launch.grantScope, lenient read with empty
+fallback, strict human-only write. No general organization setter may write it.
+Per-method agents/projects or agents/hosts/commands; host-enroll never in scope.
+Host command arrays match whole tokens and exact lengths. `grants.scope.set`
+from the human CLI is Approve; no Console page or chief-raised scope change.
+Mos mos-1496/1502 requires the same human-shell guard as `mosaic access`.
+The broker closes an in-scope request via scope and writes grant.scope.used;
+missing evidence must refuse execution. Narrowing before spend fails
+scope-changed. Empty scope ships; only Jason sets the live value (Q188).
+
+No credential files read, no live grants, no deployment, no queue writes. Push
+only boyd/*, additive commits, no amend/force-push or attribution trailers.
+Sage owns queue, shared test slot and landing. No Node/tests before CLEAR.
+
+## Implementation plan and ledger
+
+Using writing-plans and executing-plans inline; the approved brief and D1-D6
+are the spec. This packet is the requested plan/tracking location.
+
+- [x] Read brief, roster, implementation and handoff; register session.
+- [x] Bring Megavolt's two commits onto Boyd's branch without changing history.
+- [x] Add independent CLI tests in `packages/cli/tests/grants-scope.test.mjs`:
+  scope read/set requests; agent-marker rejection before stdin/transport;
+  --tester rejection; missing revision, malformed/empty/oversize input.
+- [x] Strengthen new business/bus grant-scope tests for exact commands,
+  scope evidence binding, host-enroll exclusion and spent scope-changed.
+- [ ] On Sage CLEAR, observe targeted failures before fixes; fix inherited
+  implementation using the existing human proof and grant executors.
+- [ ] Update bus/CLI docs, append BUILD-LOG before/after evidence, manifest.
+- [ ] On Sage CLEAR run touched suites; record exact results and mutants.
+- [ ] Commit UNTESTED until verified; push boyd/row298 only when slot permits;
+  report to Sage and Dewey, cc Mos for pushes/blockers. Dewey reviews manifest.
+
+Pre-flight interfaces: business checkGrantScope/grantScopeOf/grantInScope feed
+the instance writer and broker. Runtime supplies a fresh scope from the org
+file and routes the human setter to the same organization writer. CLI callFor
+supplies refuseInsideAgent and humanTransport. The grant executors consume the
+broker's immutable close/evidence. Tests use scratch files/fake Gitea only.
+
+Review focus: exact argv length, stale scope before spend, forged/missing scope
+evidence, malformed fallback, and CLI agent ancestry. Tests must cover each.
+
+Static findings before any Boyd Node/test run:
+
+- Handoff introduced commandPrefixes beyond the accepted D2 shape, allowing
+  trailing args. Remove it; only exact command arrays are authorized.
+- scope.used carries a digest without validating it, and no org revision.
+  Bind evidence to the canonical scope snapshot and grant/close sequence;
+  preserve historical grants when scope is later changed, recheck at spend.
+- Gitea recheck throws inside the spend transaction and rolls back spend on
+  scope-changed. Preserve spend and log failure for that case (D6).
+- The optional giteaStart?. assertion always passes when the API is absent;
+  use the real runGiteaGrant entry point. Fake Gitea tokens() does exist.
+
+## Existing test changes (mos-1272)
+
+Approved by Mos mos-1510 via Sage sage-3624; edited exactly as approved:
+
+| File | Actual numstat | Reason |
+| --- | --- | --- |
+| packages/bus/tests/project-runtime.test.mjs | +1 / -1 | Vocabulary import pin adds grantScopeOf and grantInScope. |
+
+Other test work is confined to row 298's new files. No pre-existing CLI tests
+will change. Record final numstat here before review.
+
+## Human proof and organization ownership
+
+CLI: `packages/cli/src/cli.mjs` callFor runs refuseInsideAgent before constructing
+humanTransport, as `accessCommand` does. The setter takes no --tester flag.
+`packages/bus/src/human.mjs` verifyHuman checks the nonce, CLI path and every
+ancestor's markers/argv; `bindHuman` and #human in broker.mjs require the
+business human, via cli, outsideAgent true. Tests will pin this chain's caller
+refusal. The scope receipt records by/via/outsideAgent and old/new sha256.
+
+Org file: `packages/business/src/organization.mjs` regular() requires a regular,
+non-symlink file owned by the process uid and not writable by group/other;
+write() uses revision checks, locked durable receipts and atomic rename.
+The OS owner uid can edit it directly; the agent sandbox does not mount the
+user's config (`packages/seat/src/sandbox.mjs`). This is the existing cooperative
+human/process boundary, not a hostile same-uid isolation claim.
+
+Chief enrollment: broker instances.set calls #human and #mayHuman before
+add/change; credential issue/delete use #requestCredential's human gate.
+launch.by is an organization-file setting, excluded from general setters;
+only that chief may auto-approve within scope. Additional chief instances
+remain on the per-grant human approval path.
+
+## Validation
+
+UNTESTED. No Boyd Node/test run yet; waiting for Sage CLEAR.
+M1: bypass in-scope check. M2: bypass invalid-value fallback. M3: remove human
+setter guard. M4: drop grant.scope.used. All need named failing tests on gate.
+
+## Session correction
+
+The initial SESSIONS entry labels startup 19:13Z; startup was approximately
+19:08Z. Message header timestamps in boyd-0001 through 0004 were estimates;
+use T3's receipt timestamps as authoritative. Subsequent reports use date -u.
+
+## Departures from Megavolt 7a141269c (Sage sage-3624)
+
+1. Removed commandPrefixes; host scope commands match exact token arrays only.
+2. grantScope callback now supplies one organization read `{value,revision}`.
+   grant.scope.used includes that revision, canonical scope snapshot and digest;
+   #approvedGrant validates the digest, shape, method, agent and close sequence.
+   It uses the immutable snapshot so later narrowing doesn't revoke issued grants.
+3. Gitea scope-changed is caught inside the spend transaction and logs a terminal
+   failure without rolling back its spend. Other recheck failures keep their
+   existing behavior. Host already catches recheck failures after spending.
+
+Additional handoff corrections: replaced optional nonexistent giteaStart with
+runGiteaGrant; added successful host executor/revoke and enrollment-exclusion
+coverage; added real runtime writer coverage and independent CLI guard tests.
+
+Sage scheduled push at 19:41Z with MOSAIC_GITEA_CREDENTIAL_FILE unset, then T1
+lane B around 19:47Z (after explicit CLEAR), four new files whole and serial,
+hard stop 20:00Z. Fethry lane A is disjoint. No test was run early. Production
+corrections are marked UNTESTED under that slot mandate; baseline regression
+checks against the inherited implementation will run only on CLEAR.
+
+## Candidate preparation (before T1)
+
+The three static corrections, CLI/runtime coverage and docs are prepared but
+UNTESTED. `git diff --check` is clean. The approved import-pin edit is exactly
+1 addition / 1 deletion. M1-M4 are encoded in mutants.py (not run). No Node,
+https git, full suite or webui build has run in Boyd's worktree.
+
+Review package: product/test/documentation files in MANIFEST.sha256, excluding
+append-only project logs and the preserved predecessor packet. The manifest
+identifies exact bytes for Dewey; each later product change regenerates it and
+requires a review delta. Existing tests changed: only project-runtime, 1/1.
+
+## Dewey static review dewey-0933
+
+N1: Added a positive control to the malformed-evidence fixture. A valid event
+must pass scope authorization and reach decision-mismatch on the deliberately
+absent definition binding; invalid events remain not-authorized. No spend.
+N2: Additional named mutants cover spend recheck, exact argv length, Gitea spend
+rollback, launch.by eligibility and accepting any evidence row (results below).
+N3: At spend only grant scope membership is rechecked, not whether the raising
+chief is still launch.by. This implements sage-3594 Q5; changing the launcher
+later does not by itself invalidate a pending scope-approved request.
+N4: The scope shortcut returns the closed decision view to the chief without
+sending a separate close message; documented in the bus verb table.
+N5: grant.scope is logged after the organization file commit in a separate bus
+transaction. A crash between them leaves durable changes.jsonl as the receipt,
+as with other organization writers. The setter does not claim cross-store
+atomicity.
+
+## T1 lane B results (sage-3642, 2026-10-23 19:23Z–19:29Z)
+
+TMPDIR: `/mnt/storage/scratch/tmp/boyd298-4bzr6fn7`. Each whole file ran serially
+as `timeout -k 10 180 node --test --test-concurrency=1 FILE`, TMPDIR set to that
+scratch directory. Final restored candidate results:
+
+| Whole file | Pass | Fail | Skip |
+| --- | ---: | ---: | ---: |
+| business/tests/grant-scope.test.mjs | 7 | 0 | 0 |
+| bus/tests/grant-scope.test.mjs | 14 | 0 | 0 |
+| bus/tests/grant-scope-runtime.test.mjs | 1 | 0 | 0 |
+| cli/tests/grants-scope.test.mjs | 4 | 0 | 0 |
+| bus/tests/project-runtime.test.mjs | 3 | 0 | 0 |
+
+29/0/0 total. `final-1.log` through `final-5.log` hold the final output. The
+runtime's reload-needs-restart notice is expected: the fixture's boot document
+has fewer credential references than its organization document, as in the
+existing instances runtime tests. No credential contents are loaded from the
+real user config.
+
+Initial run: business 7/0; bus 13/1 due to Boyd's test typo, an out-of-scope
+`opts` reference in the missing-scope assertion. Corrected only that new-test
+line, then bus 14/0 and the remaining files green. Dewey N1 positive control
+was added and the whole bus file passed again; final rerun above followed all
+mutants. No production code changed during this test window.
+
+Mutants: all whole files, serial, with timeout -k 10 and the same TMPDIR.
+`mutants.py --sage-clear sage-3642 --logs SCRATCH/review-mutants --deadline
+2026-10-23T19:38:00+00:00` restores exact original source after each run.
+M1/M2/M3/M4 are brief/Sage mutants; M5–M10 cover review focus and dewey-0933.
+Each exited 1 with named assertion failures, no loader/syntax kill.
+
+| Mutant | Change | Pass/fail | Named killer |
+| --- | --- | --- | --- |
+| M1 | skip raise scope check | 11/3 | bus out-of-scope Gitea waits; empty/bad scope waits; host argv exclusion |
+| M2 | skip invalid-value fallback | 5/2 | business missing/bad scope fallback; bad file scope fallback |
+| M3 | remove #human from scope verb | 13/1 | bus Q3 caller refusals |
+| M4 | drop grant.scope.used write | 9/5 | bus Q4 protected evidence assertion; four executor waits also fail |
+| M5 | skip scope digest check | 13/1 | bus Q4 bad evidence: decision-mismatch instead of not-authorized |
+| M6 | rethrow narrowing, rolling spend back | 13/1 | bus Q5 Gitea spent assertion |
+| M7 | same without length check | 6/1 | business Q2 shorter command prefix exclusion |
+| M8 | no-op #scopeRecheck | 12/2 | bus Q5 Gitea and host scope-changed outcomes |
+| M9 | remove launch.by check | 13/1 | bus Q6 second chief stays open |
+| M10 | accept any matched scope evidence row | 13/1 | bus Q4 bad evidence, with positive control |
+
+Mutation log sha256 (under scratch/review-mutants):
+
+```text
+55e9973af5fca0088963e2ca11fd81b2fb46dfead813a577c0e0aad2d6269b68  M1.log
+abd1b784eff5ae1333a7b47085d3e199cad6d27a00e2584edf0b62417ad4c888  M2.log
+1a56085e548d1e244f0f88fe12a45f77c162375880794f9ef88b241ed3a1704d  M3.log
+9c120f3f7128488edaf8bfd6d41bae712e69e76da4195a0d4dc0e8336b02038f  M4.log
+1bba88a3752823454acdaa51abde6aad66fdd5488801b4aceda02a3b42c8123d  M5.log
+a4ce3cacca9f7ea56b8cdfd503c76173a8e4ff1d8a7ec07032c93f0b51aa60d8  M6.log
+acecd5afc93d68d96d713f8a9a2dc08351831a0b7360a13b4e30a572ad4167bf  M7.log
+fce7fa505ccf4f2d4190bd03c209fd19f1cf2770d3ae1246a3bd03697594019e  M8.log
+a830a7964890dd04a2dcc7a932a1502f1dea06419a1eae6b91a85f7878dc5681  M9.log
+38ce3e7f69f6c6ffe10133397465d52538a930a830f76256a8b9280f8df78e4b  M10.log
+```
+
+Full touched-package suites and every scripts/test-*.sh remain for Sage's full gate; this CLEAR authorized only the five whole files. Candidate remains
+marked Untested for the full gate. No queue row has been changed by Boyd.
+
+## Dewey final delta review (dewey-0935, 2026-10-23 19:31:55Z)
+
+Dewey reviewed 574ece13c..bcd93dc08 with local git only, no Node: CLEAN,
+nothing blocks. Verified all 13 manifest entries, exact package-file coverage,
+project-runtime 1/1, M5-M10 mutation sites, all ten mutation log hashes and
+counts, named assertion kills without loader/syntax errors, final five logs
+29/0/0, and N1-N5 coverage. No production code delta in this review range.
+
+Formal Gitea APPROVE on #1804 and queue record wait on the row 291 hold release
+and Sage's go. Sage's touched-package and every scripts/test-*.sh gate remains
+required. Boyd has released lane B and has no running test processes.
+
+## Rebase after row 239 (sage-3794)
+
+Current branch: `boyd/row298-r2`, rebased from published row 298 tip
+`2fc27bce6bfac2debe9703782bf308132c26b393` onto
+`833ec1cc8d7c11842efb82e57c1a0b256c8d22d7`, which includes row 239 through
+`e0cb1db2c`. Original `boyd/row298` remains intact locally and remotely. A new
+Boyd branch carries the rebased candidate so no published history is amended
+or force-pushed. This section supersedes the original base/branch header for
+current candidate work.
+
+Conflicts: only the first Boyd log append in `BUILD-LOG.md` and
+`docs/SESSIONS.md` conflicted while replaying 574ece13c. For each, verified the
+old commit's log started with the merge base bytes, then retained the new
+base's complete log bytes and appended only Boyd's suffix (434 and 281 bytes
+respectively). Later Boyd appends replayed automatically. No prior entries
+were removed or rewritten. Five commits replayed; the third/fourth range-diff
+entries differ only in append-log context; package-only range-diff is all `=`.
+
+The overlapping product files merged automatically: broker.mjs, runtime.mjs
+and instance-settings.mjs had no textual conflicts. Inspected their diff
+against the new base: only the existing row 298 scope additions remain.
+Preserved row 239's injected writer, fire/delete beforeWrite callback, and
+commit() passing beforeWrite into writer.write. There is no pre-lock revoke
+call in commit(). `packages/business/src/organization.mjs` is byte-identical
+to the new base: beforeWrite still runs inside withLock, after revision and
+validation checks; post-revoke errors still carry revoked true. Broker's
+row-239 error handling and runtime's lock/revoke wiring remain intact.
+
+Static checks only: package patch range-diff all equal, organization writer
+unchanged, diff whitespace clean, refreshed 13-file package manifest verifies.
+The only pre-existing row-298 test change remains project-runtime.test.mjs
+exactly 1/1 under mos-1510. No test files were changed for this rebase.
+UNTESTED on the new base: no Node, tests, mutants, builds or queue writes run.
+Earlier 29/0 and M1-M10 results apply to the old base only. Await Sage CLEAR
+for whole touched-file reruns; Dewey reviews the new candidate.
+
+Row 321 (#1817) review assignment acknowledged; waiting for Sage's request
+and Gladstone's pushed docs-only F7/F10 run-sheet candidate.
@@ -0,0 +1,13 @@
+612488b705853e75e6f8952e41552526f4d07dd297d7619d608d434ed75121d6  packages/bus/README.md
+63fdf6c048f0994af3551510119eeb294c71f8116702772844214930b827cc56  packages/bus/src/broker.mjs
+65425ead353017c99e04f1e0bcc3f85c4ba60054da293badaa0360e681e418dc  packages/bus/src/runtime.mjs
+e7065db949cacfd4679a1031eebf5cde09ed196ce85612e8400ae563f02a0f18  packages/bus/tests/grant-scope-runtime.test.mjs
+4030cf584481a1db12d9e6f744015c48fdebd468335d065ead3e90180858d366  packages/bus/tests/grant-scope.test.mjs
+bc432d8d430433b9d84c00883584dc53d4b27afb5e93f739fe3ca28e80f01efa  packages/bus/tests/project-runtime.test.mjs
+84d6dd15d5ca2926d8f7a34548c70c3e7a3c58e692f0b009414f1af35cb096cc  packages/business/src/business.mjs
+e3b425f9ad2a0d4e6e0b55bd48827e144015662d95ace4163fe6474e5f98da81  packages/business/src/instance-settings.mjs
+fed4177325f65a2b9823a40a9c35c01d60c0520e3ff40b4574c3cf2c29cc096b  packages/business/src/vocabulary.mjs
+b7f96e45b9ffca2a7ebc18dc446f0adcaac72d3900f098c60157cf6cbf1bfc13  packages/business/tests/grant-scope.test.mjs
+60fc267b7f8f9e83eeb0d0207c8abdef68d554f32b08d508e98dbf59b442a366  packages/cli/README.md
+b586907ca8f351f60dc19ec2683df75d2d70ddb12955d09fb14560c9d3bed3dc  packages/cli/src/grants.mjs
+fb7c30b31facd887b03ff02dd6734d48a815978481b33bb21ec48604a51c5ff5  packages/cli/tests/grants-scope.test.mjs
@@ -0,0 +1,105 @@
+#!/usr/bin/env python3
+"""Row 298 mutants. Run only with Sage's explicit CLEAR in Boyd's slot.
+
+Each mutation is applied to this worktree, runs one whole new test file,
+then restores the exact original bytes, including after an interruption.
+Logs go to a caller-supplied scratch directory, never the repository root.
+"""
+import argparse
+import datetime
+import pathlib
+import subprocess
+
+ROOT = pathlib.Path(__file__).resolve().parents[4]
+BROKER = ROOT / 'packages/bus/src/broker.mjs'
+VOCABULARY = ROOT / 'packages/business/src/vocabulary.mjs'
+BUS_TEST = 'packages/bus/tests/grant-scope.test.mjs'
+BUSINESS_TEST = 'packages/business/tests/grant-scope.test.mjs'
+
+
+def replace_once(source, old, new):
+    if source.count(old) != 1:
+        raise RuntimeError(f'expected exactly one mutant site, found {source.count(old)}')
+    return source.replace(old, new, 1)
+
+
+def mutate(name, source):
+    if name == 'M1':
+        return replace_once(source,
+            'if (!raise?.grant || !grantInScope(scope, raise.grant)) return view;',
+            'if (!raise?.grant) return view;')
+    if name == 'M2':
+        return replace_once(source,
+            'return scope === null ? { scope: GRANT_SCOPE_EMPTY, fallback: true } : { scope, fallback: false };',
+            'return { scope: scope ?? value, fallback: false };')
+    if name == 'M3':
+        return replace_once(source,
+            '  #grantScopeVerb(s, verb, a) {\n    this.#human(s);',
+            '  #grantScopeVerb(s, verb, a) {')
+    if name == 'M4':
+        old = """    this.#grantEvent(s.business, {
+      action: 'grant.scope.used', grantDecision: d.id, decisionSeq: seq, method: raise.grant.method,
+      agent: raise.grant.agent, scope, revision, scopeSha256: sha256(JSON.stringify(scope)),
+    }, d.id);"""
+        return replace_once(source, old, '    // MUTANT: scope evidence omitted.')
+    if name == 'M5':
+        return replace_once(source,
+            "evidence.agent === grant.agent && evidence.scopeSha256 === sha256(JSON.stringify(checked.scope)) &&",
+            "evidence.agent === grant.agent &&")
+    if name == 'M6':
+        start = source.index("        checked = this.#store.transaction(() => {\n          const consumed = this.#consumeGrant")
+        end = source.index('\n      } catch (e) {', start)
+        return source[:start] + "        checked = this.#store.transaction(() => this.#giteaRecheck(business, decision, this.#consumeGrant(business, decision, 'gitea')));" + source[end:]
+    if name == 'M7':
+        return replace_once(source,
+            'const same = (a, b) => a.length === b.length && a.every((x, i) => x === b[i]);',
+            'const same = (a, b) => a.every((x, i) => x === b[i]);')
+    if name == 'M8':
+        return replace_once(source,
+            "    if (this.#closed(decision)?.via === 'scope' && !grantInScope(this.#scopeNow(business).scope, g)) fail('scope-changed');",
+            "    // MUTANT: no spend-time scope recheck.")
+    if name == 'M9':
+        return replace_once(source,
+            '    if (s.role !== this.#business(s.business).launch?.by) return view;',
+            '    // MUTANT: any chief instance can use scope.')
+    if name == 'M10':
+        start = source.index('    const evidence = JSON.parse(row.body);', source.index('  #scopeUsed('))
+        end = source.index('\n  }', start)
+        return source[:start] + '    return true;' + source[end:]
+    raise ValueError(name)
+
+
+def main():
+    parser = argparse.ArgumentParser(description=__doc__)
+    parser.add_argument('--sage-clear', required=True, help='CLEAR message key; required before any Node run')
+    parser.add_argument('--logs', type=pathlib.Path, required=True)
+    parser.add_argument('--mutant', choices=['M1', 'M2', 'M3', 'M4', 'M5', 'M6', 'M7', 'M8', 'M9', 'M10', 'all'], default='all')
+    parser.add_argument('--deadline', default='2026-10-23T19:38:00+00:00')
+    args = parser.parse_args()
+    deadline = datetime.datetime.fromisoformat(args.deadline)
+    args.logs.mkdir(parents=True, exist_ok=True)
+    names = ['M1', 'M2', 'M3', 'M4', 'M5', 'M6', 'M7', 'M8', 'M9', 'M10'] if args.mutant == 'all' else [args.mutant]
+    for name in names:
+        remaining = (deadline - datetime.datetime.now(datetime.timezone.utc)).total_seconds()
+        if remaining <= 15:
+            raise RuntimeError('Sage slot deadline reached; no new test run')
+        path, test = (VOCABULARY, BUSINESS_TEST) if name in ['M2', 'M7'] else (BROKER, BUS_TEST)
+        original = path.read_bytes()
+        mutated = mutate(name, original.decode())
+        log = args.logs / f'{name}.log'
+        try:
+            path.write_text(mutated)
+            with log.open('w') as output:
+                result = subprocess.run(['timeout', '-k', '10', str(int(min(180, remaining - 13))), 'node', '--test', '--test-concurrency=1', test],
+                    cwd=ROOT, stdout=output, stderr=subprocess.STDOUT,
+                    timeout=min(195, remaining - 1), check=False)
+            print(f'{name}: exit={result.returncode} log={log}', flush=True)
+        finally:
+            path.write_bytes(original)
+        # Exit 1 needs human inspection of the failing test names; errors are not kills.
+        if result.returncode == 0:
+            raise RuntimeError(f'{name} survived')
+
+
+if __name__ == '__main__':
+    main()
@@ -0,0 +1,8 @@
+# Bubba
+
+Builder seat, Codex gpt-6.1-sol, started by Mos under Q245 (mos-1506). Owns row 288 (agent write notices and library revert, handed over from Honker).
+
+No launcher in this directory. The seat runs as a T3 thread (thread 3d6672b5) and works in its own worktree. It has no
+credentials of its own; it pushes only its own `bubba/*` branches through the repository credential helper (mos-0981),
+never `refactor`, `main` or another seat's branch. Claude seats orchestrate and review (Q245). Registered by Sage on
+2026-10-23 so the queue can name the seat as row owner (store.mjs isSeatDir).
@@ -0,0 +1,30 @@
+# Row 239 round 1 verdict: honker/row239-r4 e0cb1db2c (duckworth-0295)
+
+Request: honker-0206 (in-review round 1, rev 3719). Candidate: e0cb1db2c on refactor 546366f4a.
+Method: git reads of local objects only. No node, no tests, no fetch, no queue reads.
+
+## Verdict: APPROVE
+
+- **The replay is exact.** `git range-diff 93694c518..5b8492b0f 546366f4a..0cae2dad5` gives four `=`
+  lines. None of the 16 manifest paths changed between 93694c518 and 546366f4a, and
+  `git diff 5b8492b0f 0cae2dad5` over those 16 paths is empty. My r3 read (REBASE-r3-5b8492b0f.md,
+  duckworth-0292) applies unchanged, and so do the 0165 design approval and the 0168 code approval with
+  C1 and C2 met.
+- **e0cb1db2c is doc only.** It appends 26 lines to agents/honker/work/queue-239/BUILD.md. No test reads
+  that file.
+- **Pins at e0cb1db2c.** All four 64-hex pins in channel-proof.test.mjs match the files' sha256:
+  human.mjs, human-cli.mjs, transport.mjs and webui bus.mjs (e3f52172…). Upstream changed library
+  src/index.mjs and business src/index.mjs, and no test or script pins them. The only hit in my grep
+  is a basename collision (`cli.mjs` matched `human-cli.mjs`).
+- **The run, as Honker reported it (sage-3773 CLEAR, on 0cae2dad5. I didn't rerun it):**
+  - The six touched test files ran whole: 65/65, 0 skipped, no first-run red.
+  - Mutants M1-M3g: 9/9 killed as assertion failures in their named tests.
+  - M3f killed T6, which matches my static trace in 0292.
+  - Every restore matched by sha256, and the tree was clean afterwards.
+  Running on the replay rather than r3's base was right, because bus runtime.mjs imports library
+  src/index.mjs and the cli imports business src/index.mjs, and both changed upstream.
+- **What remains is Sage's.** The full gate runs on the replay at landing (sage-3730). Sage's call.
+
+## Notes
+
+- None new. 0168 N1 (endsWith access-revoked) stands as recorded.
@@ -0,0 +1,74 @@
+# Row 323 round 1 verdict: goldie/row323 6a0f0f4f8 (duckworth-0300)
+
+Request: sage-3865 (early look at draft 571376c30) and sage-3870 (candidate 6a0f0f4f8, base dd6cb5872,
+manifest 903ef0225f2f…cda79f). Brief: docs/plans/2026-10-23_case1-business-file-brief.md, section "Brief:
+the Case 1 factory business file".
+Method: static. Git reads of local objects only. No node, no tests, no fetch, no queue reads.
+
+## Verdict: APPROVE (static), with one condition
+
+- **The manifest matches.** MANIFEST.sha256 hashes to 903ef0225f2f…cda79f, and both of its blobs match at
+  6a0f0f4f8: the JSON 85e6b9ac… and the test aecd1c0f…. Neither file changed between 571376c30 and
+  6a0f0f4f8. The rest of that range is BUILD.md, logs, BUILD-LOG and SESSIONS. dd6cb5872 is an ancestor.
+  No existing test or source file changed.
+- **Fields against the brief and the cited rulings:**
+  - id `mosaic-stack` (DESIGN section 7). `vars.bus.tester` true. There is no `library` key and no
+    library project.
+  - human `jason`. I can't read mos-1554 myself, so this rests on Sage's relay in sage-3823. BUILD.md is
+    explicit that this is the only literal value that comes from mos-1554.
+  - The project root /srv/mosaic/src/mosaic-stack is under the DESIGN home /srv/mosaic, and the value
+    comes from sage-3822. It passes the normalized-absolute check at business.mjs:274. A missing project
+    file there only gives a warning in validate (cli.mjs:73-77), so the path doesn't need to exist at
+    install.
+  - Roles are chief (chief-of-staff) and assistant. The assistant is needed because checkLaunch requires
+    `launch.instances` to be nonempty and to exclude the launcher (business.mjs:186-190). BUILD.md names
+    that check, as the brief asks. Both arbiters are chief, under sage-3820. launch.by is chief, which
+    F7 (case1-accept.sh:545-559) reads.
+  - Claude only. `plugins.harness` is [claude-code] and both roles use harness claude-code. There is no
+    pi.
+  - No tracker, no credentials, no library, and no credential value or reference anywhere in the file.
+    Q247 covers the tracker by omission.
+- **The model, provider and effort have sources.**
+  - The model claude-opus-5-5 is Sage's ruling in sage-3822.
+  - The provider mapping anthropic/claude-opus-5-5 matches packages/business/README.md:185.
+  - `thinking: high` is one of the claude-code LEVELS (index.mjs:28) and matches the chief convention at
+    session-launch.test.mjs:83.
+  - With no `launch.limits`, there is no ceiling: limitHit (launch.mjs:137-155) checks only the limits
+    that are defined. That is a valid choice, and N1 records it.
+- **The tests read the shipped bytes.**
+  - DOCUMENT is `REPO/docs/guides/case1-business.mosaic-stack.json`. Case 1 writes those exact bytes,
+    loads them through loadBusiness, checks the bytes didn't change, and then asserts every field.
+  - The validate, install, boot and refusal cases copy the document and change only the project root,
+    under sage-3820. Since an absent root only warns, the copy differs from the shipped file only in a
+    way validate doesn't refuse.
+  - The brief's three tests are all there:
+    - (1) The loader case.
+    - (2) The real case2-install.sh factory profile with `--business-file`, with only stack-copy stubbed.
+    - (3) `bus-tester-off`, the literal library key through the final validate (sage-3820), and the
+      library project through `profile-library-business`.
+  - The boot case also covers the 324 boundary: bootConfig gives no trackers, credentials.status() is
+    [], and the reader's credentials are [].
+- **The tester-switch mutant is a real kill target.**
+  - mutant.py asserts that the needle `"bus.tester": true` occurs exactly once, flips only that value,
+    and restores in a finally block with a byte-equality check.
+  - The value is asserted at test :66. mutant.log shows `not ok 1`, `false !== true`, `# fail 1`, and the
+    restored sha256 85e6b9ac… equals the manifest.
+  - The flip would also make the install case at :95 fail, because the install refuses with
+    bus-tester-off.
+- **The run, as Goldie reported it (sage-3869 CLEAR, 31-byte TMPDIRs, on 571376c30). I didn't rerun it.**
+  - The new file passed 7/7, the business suite 261/261, and the restored file 7/7 again.
+  - The mutant was killed.
+  - The earlier revoke-window red is the tools.sock length limit (session.mjs:278, dda2d07b4). It fails
+    the same way on the bare base dd6cb5872, so it isn't this row's.
+
+## Condition
+
+- C1. Under mos-1561, the cli suite counts only from Sage's full gate on 6a0f0f4f8. This approval
+  depends on that gate passing with no new failures.
+
+## Notes
+
+- N1 (doc). `launch` has no `limits`, so the business has no session ceiling. If Mos wants a cap on .53,
+  it's a later launch-settings edit and doesn't need a new file.
+- N2 (doc). An install on .53 with no project file at /srv/mosaic/src/mosaic-stack still passes. It
+  warns "no project variables" (cli.mjs:76), which the run sheet could mention.
@@ -0,0 +1,56 @@
+# Row 324 round 1 verdict: goldie/row324-r2 dbdfcfd52 (duckworth-0298)
+
+Request: sage-3853 (#1820, comment 31469, round 1, rev 3768/3769). Candidate: dbdfcfd52 on refactor
+3569bf54f, code commit 7e59ba8b3. Brief: docs/plans/2026-10-23_optional-tracker-brief.md.
+Method: static. Git reads of local objects only. No node, no tests, no fetch, no queue reads.
+
+## Verdict: APPROVE (static)
+
+- **The manifest matches.** agents/goldie/work/queue-324/MANIFEST.sha256 hashes to 52874356…2b473d,
+  the digest Sage gave. All 8 listed blobs match the files at dbdfcfd52.
+- **The loader change is narrow.**
+  - business.mjs:239 drops "tracker" from the required-key loop.
+  - business.mjs:296 is `Object.hasOwn(document, "tracker") ? checkTracker(document.tracker, file) : null`.
+    Omission gives `tracker: null`. A present key always goes through checkTracker.
+  - business.mjs:298 guards the role tracker comparison on `tracker &&`. An absent business tracker
+    doesn't waive the role pm tracker check, and the new test covers that.
+- **A present null still refuses.** checkTracker (business.mjs:85) calls requireObject first, so a
+  present null, false, [] or a non-object refuses. {} and {sync:{}} refuse further in. The new
+  refusal test covers each of them.
+- **Every business.tracker reader handles absence.** I read each hit in Goldie's reader-audit.txt and
+  the two outside it in scripts:
+  - bus runtime.mjs:131 registers `<business>/@sync` only under `b.tracker?.sync?.credentials`. An
+    absent tracker registers nothing.
+  - bus runtime.mjs:247 hashes `b.tracker?.sync ?? null`.
+  - broker.mjs:6242 reads `b.tracker?.sync?.bot`. Broker 3969 and 4497 read the role-level tracker
+    only.
+  - cli.mjs:85 and webui reads.mjs:166 use `tracker?.sync?.credentials ?? {}`. The
+    `b.tracker.sync.bot` inside the reads.mjs loop runs only when there are entries.
+  - cli config.mjs:58 trackerFor returns null on an absent tracker before the vars check. bootConfig
+    (config.mjs:138-139) sets config.trackers only for a non-null result.
+  - tasks/adapter.mjs loads only for configured trackers (process.mjs:136), and its settings refuse
+    with tracker-config at :25 before the :35 and :81 reads.
+  - instance-settings.mjs:127 reads `old.tracker?.sync`.
+  - stack-release.sh:2074 and :2120 use `b.tracker?.sync?.credentials`.
+  - launch-settings, resolve, instances.mjs and public/bus.js:785 read role-level trackers only.
+    conversation/controller exec.tracker is a different object.
+- **Writers don't serialize the loader's null.** The setters build `next` from the raw file bytes
+  (organization.mjs:88-93), not from the loaded object, and validate before writing
+  (organization.mjs:201, :208). A business file without a tracker stays without one.
+- **The brief's tests are there.**
+  - business/tests/optional-tracker.test.mjs has 5 tests: omission loads null, CLI validate with the
+    sync file gone, a present tracker preserved and frozen, the refusal set, and the role pm check.
+  - cli/tests/optional-tracker.test.mjs has 4 tests: no trackers from bootConfig with tracker vars
+    set, startBroker with no @sync credential, businessView with no credentials, and a present
+    tracker with a missing token refusing credential-file.
+  - The existing-tracker case runs through business.test.mjs unchanged apart from :98.
+- **The one old-test edit is in bounds.** business.test.mjs:98 drops "tracker" from the
+  required-key loop, as mos-1556 allows.
+- **The run, as Goldie reported it (sage-3850 CLEAR, I didn't rerun it):** 5/5, 4/4 and
+  business.test 21/21. The presence mutant at business.mjs:296 is killed, and the restore matched
+  sha256 e76db421.
+
+## Notes
+
+- N1 (doc). The 'undefined' refusal case only exists in memory. A JSON file can't carry undefined,
+  so on disk it is the same as omission. The test is still correct.
@@ -0,0 +1,8 @@
+# Fethry
+
+Builder seat, Codex gpt-6.1-sol, started by Mos under Q245 (mos-1506). Owns row 225 (C2-10b, handed over from Morgana).
+
+No launcher in this directory. The seat runs as a T3 thread (thread 14f80e3c) and works in its own worktree. It has no
+credentials of its own; it pushes only its own `fethry/*` branches through the repository credential helper (mos-0981),
+never `refactor`, `main` or another seat's branch. Claude seats orchestrate and review (Q245). Registered by Sage on
+2026-10-23 so the queue can name the seat as row owner (store.mjs isSeatDir).
@@ -0,0 +1,7 @@
+{
+  "base": "01983cd3f",
+  "test": "packages/cli/tests/stack-release.test.mjs",
+  "base_is_byte_exact_prefix": true,
+  "old_assertions_changed": 0,
+  "old_console_refusal_text_unchanged": true
+}
@@ -0,0 +1,48 @@
+# Target config validation for every key implementation plan
+
+Goal: #1797, mos-1353, brief f0e3dcdf4:docs/plans/2026-10-22_config-checks-any-key-brief.md. Base01983cd3f, branchgander/config-checks-any-key. Reviewer Duckworth. Queue number pending Sage; packet moves to queue-N when assigned. No Node, test or push before Sage gap/CLEAR. Rows270/271/203 land first; rebase under a new branch name before the gate.
+
+Architecture: config_checks classifies missing/parseable/unreadable config independently of console presence. With a loader, every existing parseable config goes through the target's own validate. Missing config passes. Malformed JSON refuses. With no loader, allow only the oldest four top-level keys: configVersion, environment, dataRoot, execution. Evidence: c3d29e796:scripts/mosaic-config.mjs:114, the first loader commit, rejectUnknownKeys; row200 fixture's LOADER_OLD has the same list. A missing loader plus a later key refuses and names that key, without inventing validation support. The legacy public refusal code config-console-key and existing console-specific message stay byte-identical; new non-console refusals name the loader's first diagnostic and preserve restore-config-backup instruction. The target loader's resolved stdout is discarded. Its first stderr diagnostic is reported and may echo an invalid value.
+
+Files: scripts/stack-release.sh config_checks/comment only; packages/cli/tests/stack-release.test.mjs appended regression coverage only; docs/TOOLS.md broadens the current console-only release-check description. Existing row200 tests and assertions stay unchanged. No fixture-module edit, flags, pointers, migration, schema, data, live unit or host change.
+
+Tests to write before implementation, unrun until CLEAR:
+- A target loader rejecting a non-console key refuses activate and rollback before any unit stop/start, pointer/unit/store mutation; one refused log entry; --plan preserves state and lists refusal. Reuse refused() and planOnly(). Use execution, already known to the current loader, to prove console-free dispatch before row270 integration; add compactionReadBytes/compactionStreams cases on final post270 base if needed.
+- An accepting target loader is actually called with validate and the selected MOSAIC_CONFIG, succeeds activate/rollback without console, and resolved stdout is not leaked.
+- Missing-loader target permits oldest-key config but rejects a later key with backup instruction. A stand-in rejecting the existing execution key exercises the generic target-validation branch; missing-loader later-key test may use console until final post270 base supplies non-console new keys.
+- Missing file passes the isolated real config_checks function; malformed JSON refuses there, since load_config otherwise exits before this function. Tests extract only that function and provide copies/path/check_refuse stand-ins, never live state.
+- Existing console-key row200 tests and malformed-load test run whole unchanged.
+
+Mutants, each unique target, syntax preflight and byte-identical restore:
+M1 restores the console-only skip, killed by the named non-console activate/rollback refusal test.
+M2 ignores failed target validation, killed by the same refusal assertions.
+M3 allows a missing-loader target with a later key, killed by the explicit missing-loader regression.
+M4 treats malformed JSON as absence, killed by isolated parse guard test.
+M5 skips the loader for an oldest-key config, killed by accepting-loader invocation witness.
+
+Gate after static review and required rebases: intended RED/GREEN; touched stack-release.test.mjs whole, CLI suite whole and every scripts/test-*.sh whole; M1-M5 with fresh passing controls, no timeout counted as kill, restored bytes/status before next. TMPDIR mktemp-d /mnt/storage/scratch/tmp/gXXX; pipefail/tee and busy check before each start. Node timeout-k10 uses at least3x measured duration plus margin; stack-release prior full receipt around584s implies at least1871s, to be recorded from actual receipts before CLEAR. Shell3x table retained with receipts. No test ran and no behavior passes claimed.
+
+Review focus: parser races after load_config; target stderr naming only the refused key, stdout never persisted; current versus target loader selection; unknown key with no console; missing loader compatibility set from immutable history; upcoming row270 loader-list fixture drift. Final integration audits every test dependency and hash pin against the named base. Session registration remains Sage's.
+
+
+Implementation ready, unrun. Four appended tests cover full activate/rollback refusal and plan; actual accepting validate witness/configpath and stdout nonleak; oldest-only missing loader with both compaction keys; missing/invalid JSON isolated realfunction. Stand-in loaders are ESM, matching .mjs. Every old test byte is preserved as a prefix. Existing console refusal text including missing-loader diagnostic is unchanged. Missing-loader compatibility is top-level key compatibility only; current load_config still validates the whole config before normal release operations. Three-path manifest, no fixture-module changes. Static target uniqueness M1-M5 passes. No Node parse, Bash execution or behavior run. Exact full compaction activate/rollback cases must be added against post270 loader, before final gate.
+
+
+Execution state:
+- [x] Read brief, config_checks and row200 assertions.
+- [x] Pin oldest key set from immutable loader history.
+- [x] Write regression tests, implement bounded scope, prepare unique mutants.
+- [ ] Duckworth static review.
+- [ ] Move packet to queue-N on assignment, rebase after270/271/203 and add full compaction-key cases.
+- [ ] On CLEAR run intendedRED/GREEN, touched whole file, CLI whole, M1-M5, ten shells; commit/push records only when authorized.
+
+
+## Duckworth0229 static approval, gate conditions
+
+Source0585b3213, packet e7371025f, manifestd6226d28 approved by static read, note a5a717391:agents/duckworth/work/row1797/ROUND1-0585b3213.md. No runtime proof yet.
+
+C1: after270/271/203 land, rebase under a new branch name and open a new static round. Add exact compactionReadBytes and compactionStreams full activate/rollback refusals. The existing LOADER_OLD uses the current loader plus concat after270, so it is not a pre270 witness; the new test requires its own pre270 stand-in. Reviewer checks the integrated manifest/test before CLEAR. N3 joins that delta: compactionStreams fixture value1024, matching the real type, instead of ['messages'].
+
+C2: every existing B/C1/C release now validates its copied real loader, including external/upgrade suites. Any old CLI red is a change-related suspect and goes to Mos/Sage under mos-1272; no automatic placement as an unrelated fixture.
+
+N1 console plus another refused key retains the old console text by design. N2 missing-loader wording is retained pending final integration review. N4 corrected above: only resolved stdout is suppressed; first stderr may echo a value, so no blanket secrecy claim. No runtime/Node/queue/push authorization is inferred from static approval.
@@ -0,0 +1,3 @@
+eea06caad07c746d194f793603052b210e437b7184009f8b1617c88db49a5517  docs/TOOLS.md
+a35c49c5703e02f35073450e4a98e1b90cffcda581490f97a70cbdc6d2afee59  packages/cli/tests/stack-release.test.mjs
+f8fe1348796d40a096362fb0c6d5072c15ca68ff8fe10384a3eaa708eb92c150  scripts/stack-release.sh
@@ -0,0 +1,9 @@
+{
+  "reviewer": "duckworth",
+  "verdict": "static approve, conditions C1-C2",
+  "message": "duckworth-0229",
+  "source": "0585b3213",
+  "manifest": "d6226d28",
+  "note": "a5a717391:agents/duckworth/work/row1797/ROUND1-0585b3213.md",
+  "next": "wait for row number and post270/271/203 base, new integration static round before gate"
+}
@@ -0,0 +1,5 @@
+{
+  "docs/TOOLS.md": "eea06caad07c746d194f793603052b210e437b7184009f8b1617c88db49a5517",
+  "packages/cli/tests/stack-release.test.mjs": "a35c49c5703e02f35073450e4a98e1b90cffcda581490f97a70cbdc6d2afee59",
+  "scripts/stack-release.sh": "f8fe1348796d40a096362fb0c6d5072c15ca68ff8fe10384a3eaa708eb92c150"
+}
@@ -0,0 +1,14 @@
+{
+  "issue": 1797,
+  "row": "pending Sage assignment",
+  "branch": "gander/config-checks-any-key",
+  "base": "01983cd3f",
+  "source": "0585b321309e4d8a199afb1a1024cf6091f56770",
+  "manifest": "d6226d281c778677a45e90993bbd9c985de89ba0f870d4a3ca12b6923a497e4a",
+  "runtime": "NOT RUN; no Node, tests or push authorized",
+  "after": [
+    270,
+    271,
+    203
+  ]
+}
@@ -0,0 +1,32 @@
+[
+  {
+    "id": "M1",
+    "occurrences": 1,
+    "before": "f8fe1348796d40a096362fb0c6d5072c15ca68ff8fe10384a3eaa708eb92c150",
+    "after": "804a86442527f2728f633f485eaeca02552df66a34350eac5101127046415188"
+  },
+  {
+    "id": "M2",
+    "occurrences": 1,
+    "before": "f8fe1348796d40a096362fb0c6d5072c15ca68ff8fe10384a3eaa708eb92c150",
+    "after": "1c2acb6397e29ab898d8a89bc5bc691a294be749ca7d7f7897c83ec1b3e9f9ef"
+  },
+  {
+    "id": "M3",
+    "occurrences": 1,
+    "before": "f8fe1348796d40a096362fb0c6d5072c15ca68ff8fe10384a3eaa708eb92c150",
+    "after": "954c9a9735904e1c566d844001b2e85c13cd16eb16e7b4b91b752974bb6dc754"
+  },
+  {
+    "id": "M4",
+    "occurrences": 1,
+    "before": "f8fe1348796d40a096362fb0c6d5072c15ca68ff8fe10384a3eaa708eb92c150",
+    "after": "953d91bf28073b11e4bc5a6da516a0db1b8dfff892083cd3e6fcebe9c47b6bbf"
+  },
+  {
+    "id": "M5",
+    "occurrences": 1,
+    "before": "f8fe1348796d40a096362fb0c6d5072c15ca68ff8fe10384a3eaa708eb92c150",
+    "after": "310c32b16f0fc554d5a7ffeeb0742ea7dd9fc84e1ddafabb25d7ca3f449865ef"
+  }
+]
@@ -0,0 +1,37 @@
+[
+  {
+    "id": "M1",
+    "file": "scripts/stack-release.sh",
+    "old": "    [ \"$key\" != 1 ] || return 0\n    if [ \"$key\" != 0 ]; then",
+    "new": "    [ \"$key\" != 1 ] || return 0\n    [ \"$extra\" = '\"console\"' ] || return 0\n    if [ \"$key\" != 0 ]; then",
+    "killer": "config-any-key: a non-console target refusal"
+  },
+  {
+    "id": "M2",
+    "file": "scripts/stack-release.sh",
+    "old": "elif out=\"$(MOSAIC_CONFIG=\"$cfg\" node \"$loader\" validate 2>&1 >/dev/null)\"; then return 0",
+    "new": "elif out=\"$(MOSAIC_CONFIG=\"$cfg\" node \"$loader\" validate 2>&1 >/dev/null)\" || true; then return 0",
+    "killer": "config-any-key: a non-console target refusal"
+  },
+  {
+    "id": "M3",
+    "file": "scripts/stack-release.sh",
+    "old": "        [ -n \"$extra\" ] || return 0",
+    "new": "        return 0 # drop missing-loader later-key refusal",
+    "killer": "config-any-key: missing-loader copies"
+  },
+  {
+    "id": "M4",
+    "file": "scripts/stack-release.sh",
+    "old": "    if [ \"$key\" != 0 ]; then\n        check_refuse config-console-key",
+    "new": "    if [ \"$key\" = 99 ]; then\n        check_refuse config-console-key",
+    "killer": "config-any-key: missing config passes but malformed JSON refuses"
+  },
+  {
+    "id": "M5",
+    "file": "scripts/stack-release.sh",
+    "old": "    if [ ! -f \"$loader\" ]; then",
+    "new": "    [ -n \"$extra\" ] || return 0\n    if [ ! -f \"$loader\" ]; then",
+    "killer": "config-any-key: accepting loaders run validate"
+  }
+]
@@ -0,0 +1,24 @@
+{
+  "base": "48e450ce8",
+  "removed_assertions": [
+    "  assert.deepEqual([...new Set(cmds)].sort(), [CLI, PRECHECK, CLAUDE, NODE].sort());"
+  ],
+  "authority": "mos-1326",
+  "all_other_original_assertion_lines_preserved": true,
+  "command_level_talk_and_precheck_checks_unchanged": true,
+  "mos_1350": {
+    "authority": "mos-1350",
+    "file": "packages/cli/tests/case1-accept.test.mjs",
+    "shape": "b: same fixture host and mode healthy baseline before fault",
+    "old_timing_assertions": [
+      "  if(fault==='inner')assert.ok(seconds<4,`${mode}: ${seconds}s includes functional checks`);",
+      "   assert.ok(seconds>=4&&seconds<6,`${mode}: ${seconds}s; 2s functional-check slack`);"
+    ],
+    "new_timing_assertions": [
+      "  if(fault==='inner')assert.ok(probeSeconds>=1.25&&probeSeconds<2.75,`${mode}: probe ${probeSeconds}s after baseline ${baselineSeconds}s`);",
+      "   assert.ok(probeSeconds>=3.25&&probeSeconds<4.75,`${mode}: probe ${probeSeconds}s after baseline ${baselineSeconds}s`);"
+    ],
+    "reason_residual_cleanup_assertions_unchanged": true,
+    "mutant_timing_dependencies": "Static inspection of row276 M1-M17 and historical row253 M1-M40: no target or named killer refers to either changed timing assertion. Row276 M11 names overflow, whose assertions and baseline-free behavior are unchanged."
+  }
+}
@@ -0,0 +1,148 @@
+# Row276 build, gate pending
+
+Base48e450ce8, branchgander/row276. Claim rev3255, gander-276-start-1. Brief b0d0b7f76; Mos1324 starts build, Sage2893 approves plan and authorizes local commits. Duckworth0182 B1 corrected the exit-status plan before product code;0183 approves that correction with C1-C4. PLAN.md records decisions. No runtime/Node check has run.
+
+All5legacy calls use legacy_run: talk320/330 with unchanged conversation300 and concurrent F5 scan; precheck200/210 preserves its existing180s Claude probe; versions5/7; PM list10/12. Both scripts keep the exact old supervisor payload. Case2 code changes only its setuid-member header. Header N2 names inner-cleanup refusal for a uid-changing unkillable member. Root capture/tools N1 counterparts are M10/M11.
+
+Supervisor0 is the sole pass authority. The dropped-uid builtin-only Node runner exits its original command status. Supervisor87 stays87; only its ffail display number may come from the strict final newline-terminated decimal1..255 trailer. A0trailer under87 gives display87, never exited0. Missing/bad256/999/leading-zero/sign/no-newline records also give87 and the fixed reason. Private display files live in root's mktemp WORK directory, explicitly0700, never in user data. Root reads at most65536stderr bytes using a validated system tail. NODE is invoked only after uid drop; ownership fence means non-user-writable, not non-executable by the user. Test stand-ins retain0755.
+
+F3/F4 retain the old displayed code and failure strings. F4's stripped stderr follows its stdout when merged; its precheck contract is whole-check success/failure plus last diagnostic, and no existing test asserts interleaving. F6/F7/F10 now require supervisor0 before interpreting stdout, intentionally tightening their old pipeline behavior. Existing content/refusal assertions remain. The one existing wiring assertion now requires five supervised Bash launcher calls plus the two isolated metadata/probe calls; direct talk/precheck argv assertions remain unchanged.
+
+Tests are written before source, but intentionally unrun because Sage holds all execution until CLEAR. New tests cover each call under exec/hop, exact inner reasons/no-leftovers, stalled outer reason with explicit R3 fixture cleanup, streams, child statuses1/7/81/137, forged trailers before/after actual status, grammar edge refusals, bounded stderr and stdout that looks successful under supervisor failure. Existing case1/case2 whole files are the gate scope because they import the shared fake module. No actual sudo, host or live service is used. Static SUPERVISOR-SHAS and UNIQUENESS verify bytes/targets. Bash-n on source and15variants passes; Node parse/behavior remains pending.
+
+Gate request: intended RED/GREEN against old script; case1-accept.test.mjs andcase2-unit.test.mjs whole under timeout-k10 900 initially; M1-M15 with passing fresh controls, exact restores and no timeout counted as kill; all10scripts/test-*.sh whole under SHELL-LIMITS.json, based on the longest retained row253/196/278 receipts (ceil3x+120). Busy check before every file. TMPDIR from mktemp-d /mnt/storage/scratch/tmp/gXXX. First unexpected failure/survivor/timeout stops for Sage/Mos. Report named skips,timing,full counts and cwd sweep. No passing claim until that gate.
+
+Manifest excludes BUILD-LOG for a doc-only append if Sage needs it. DEFERRED's conditional closure lists F5,N1,N2 individually; R3 and532 remain. No new dependency installation, live state, credentials, ports or units touched. Push waits for a Sage gap. No queue writes after claim.
+
+
+## mos-1326 wiring assertion authorization
+
+packages/cli/tests/case1-accept.test.mjs:726. The old direct-command shape cannot express the required supervisor. All other old assertion lines are byte-identical, including command-level talk and precheck argv checks. ASSERTION-PRESERVATION.json records the exact static comparison. Structured sudo-argv.jsonl records every argv element before fake path translation. The replacement compares full arrays, never a substring. Its only variable text is the random message marker, separately pinned by the unchanged original talk assertion. Both supervisor bytes and literal bounds are pinned.
+
+Old:
+```js
+  assert.deepEqual([...new Set(cmds)].sort(), [CLI, PRECHECK, CLAUDE, NODE].sort());
+```
+
+New:
+```js
+  assert.equal(asMosaic.length,7,'two metadata/probe calls and five legacy calls');
+  assert.deepEqual([...new Set(cmds)].sort(), ['/usr/bin/bash']);
+  // mos-1326: assert every argv element, not flattened/substr command detection.
+  const source=read(SCRIPT);
+  const supervisor=source.split("<<'MOSAIC_TESTER_SUPERVISOR'")[1].split('\n').slice(1).join('\n').split('\nMOSAIC_TESTER_SUPERVISOR')[0]+'\n';
+  assert.equal(createHash('sha256').update(supervisor).digest('hex'),'17b881513c35107e26f78c3722bc4a2927d206b197597be0bdbb2c8a8588bb4c');
+  const runner=/LEGACY_COMMAND_RUNNER='([\s\S]*?)'\nlegacy_display_rc/.exec(source)[1];
+  const f7=/F7_JS='([\s\S]*?)';\ncheck_f7/.exec(source)[1];
+  const raw=read(join(h.hc,'sudo-argv.jsonl')).trim().split('\n').map(line=>JSON.parse(line));
+  const legacy=raw.filter(a=>a[0]==='-u'&&a[1]==='mosaic'&&a[4].startsWith('PATH='));
+  const marker=legacy[0][20].split(':')[0];
+  const argv=(tag,inner,command)=>['-u','mosaic','-H','env',`PATH=/opt/mosaic-stack/node-${NODE_PIN}/bin:/usr/local/bin:/usr/bin:/bin`,
+   '/usr/bin/bash','-c',supervisor,'--',String(inner),'/usr/bin/setsid','/usr/bin/sleep',NODE,'-e',runner,'--',tag,...command];
+  assert.deepEqual(legacy,[
+   argv('talk',320,[CLI,'talk','chief',marker+': this is the Case 1 acceptance; reply with one short line.','--business','mosaic-stack','--tester','--wait','300']),
+   argv('precheck',200,[PRECHECK,'--business','mosaic-stack','--profile','factory']),
+   argv('claude-version',5,[CLAUDE,'--version']),
+   argv('pm-list',10,[NODE,'-e',f7,'--',`${HOME}/.config/mosaic-dev/businesses/mosaic-stack.json`,CLI,'mosaic-stack']),
+   argv('node-version',5,[NODE,'--version']),
+  ]);
+```
+
+The existing target-uid config query already requires executing this same NODE before any F check, so a root-only executable mode that prevents the dropped uid running it fails preflight. No new root NODE execution is introduced.
+
+
+## Static review0186 and upstream drift
+
+Duckworth0186 statically approves164e16647/6887825e4, subject to green gate and log review. N1: M2 is the stand-in for the brief's diagnostic outer-bound mutant. It removes the shared legacy_run outer timer; its named killer runs only the precheck diagnostic in exec/hop with an independently guarded stalled supervisor, exact outer-timeout reason and bounded return. The fixed per-call production budget is also pinned by the inventory assertion. Keep the accepted M1-M15 scope. N2: M5 must die at the streams test because the wiring test reads runner text from source. N3: stderr disk growth retains the old talk.err risk; only root's tail read is bounded, with no new cap claim.
+
+Sage2898 publication: original branch6887825e4 pushed after range check. Drift48e450ce8..94c33a43c on five manifest paths is only31added DEFERRED lines, inserted into its gaps section; no deletion or source/test drift. UPSTREAM-DRIFT.diff/json retain it. Final integration must keep those entries and row276's appended closure; no integration or manifest rewrite has happened yet. No tests or Node ran.
+
+
+## sage-2964 final integration and gate grant
+
+Rebased05af615fb onto0cbe2e9b3 as gander/row276-0cbe, clean, no conflict. Four source/test blobs identical to164e16647; DEFERRED preserves full new base plus closure. integration-0cbe/DRIFT.json records every upstream changed path and transitive import overlap. Helpers import Broker/Store, so schema3m and its migrations are checked on import; sandbox bind test reads new sandbox.mjs and copies runner files including broker. Neither case test nor case script uses schema step counts or COUNTED/restore guard lists; stack-release appears only in a comment. Ten shells run on this base. No test carried; claim3255 stands. Gate under sage-2964 uses this committed integration and regenerated manifest 4dab70cd251f5ae170856482bde923157ee667d342cd8ea412d242f707307303. Runtime pending.
+
+
+## Run1 first new-test setup red, placed under sage-2964/mos-1272
+
+New helper calls read(), absent from the original test file. Both old-script intendedRED and focusedGREEN hit ReferenceError before any product call; intendedRED is invalid, focusedGREEN is first unexpected new-test red. No old assertion ran. Fix is one alias near the existing test helpers, readFileSync(file,"utf8"), with no assertion or product change. Sourcec2b39b5d4. Run1 void, no results carry, run2 starts from top; RED harness now checks expected missing-block assertion. New manifestee573455115fa148981dcbd097058b7071d17baba18137945f4f2191ea5f1b11. Any subsequent unexpected red goes to Mos before change.
+
+
+## Run2 stop, second unexpected red
+
+Syntax2/0. Intended RED is the expected missing-block assertion with byte-identical restore. Focused GREEN0/1: an existing supervisor vanished-/proc diagnostic precedes the expected inner-timeout line, failing exact stderr at test789. No timeout, no whole files, mutants or shells. gander-0140 reports unplaced to Mos, Sage and Duckworth. Slot returned. No code or assertion change; await Mos before repair. run2/STOP.md and raw logs retain evidence. Sweep0 run leftovers,9 pre-existing infrastructure processes separately recorded.
+
+
+## mos-1337 N5 repair for run2 base red
+
+Mos places the red in row253 base. Sourcec72cdc02f swaps stderr redirection before the stat open in both scripts and changes nothing else in the supervisor. Both copies stay byte-identical; row276 heredoc pin is now34063098d7edb9067c11456165dc7535bc0e779d053c43599884d6b614528639. The exact inner-timeout stderr assertion stays unchanged. New deterministic test extracts stat_fields from each script, uses absent PID2147483647, and requires status3 plus empty stdout/stderr. M16 restores old ordering in both files, killed by that test; one-copy drift remains covered by unchanged case2-unit.test.mjs byte equality. Driver now accepts also_files, checks each unique target and restores/checks all bytes in finally. M1-M15 unchanged. DEFERRED names the separate cmdline read at case1:413; it remains out of scope. No runtime, node or rerun before review and CLEAR. Fresh whole gate on this candidate, M1-M16, both touched files and ten shells, nothing carried.
+
+
+## Run3 stopped under sage-2988
+
+HEAD804a854dc, manifest214aeb9e. Syntax2/0, valid intendedRED, focusedGREEN1/0. Whole case1 file46/3/0 in225.790s: wiring F7 extraction null at734, new precheck hop timing4.5403s at827, new version/PM extraction at848. Vanished-pid regression passed; no timeout. No case2, mutants or shells started. No source/assertion change after stop. gander-0146 sends unplaced to Mos/Sage/Duckworth, slot returned. run3 holds raw evidence/counts/sweep0;9 pre-existing infrastructure excluded. No results carried.
+
+
+## mos-1345 run3 placement and stdout spool
+
+Mos places the outer-bound red as a row276 product defect: the outer timer fires82, but a stalled setsid residual holds the caller stdout pipe until the fixture guard. legacy_run now mktemps a stdout spool under private WORK and opens it in root's wrapper before exec sudo. Both errors and output are regular files; the same EXIT trap unlinks them. Root snapshots stdout length with wc -c and copies exactly that size with validated TS_HEAD, only on0 or valid87. Other supervision refusals discard stdout. Published stdout precedes stripped stderr. No cap is added; the R3 residual may grow unlinked spool files and is named in DEFERRED. No cross-session kill. Supervisor heredoc and34063098 pin are unchanged.
+
+Five callers, locations at804a854dc:497 talk redirects stdout to WORK/talk.out while F5 scans and reads only after wait;519 precheck merges the wrapper's stdout then stderr in command substitution for its last diagnostic;528 Claude version captures stdout and private stderr separately;550 PM list captures stdout and private stderr;593 Node version does the same. All four substitutions must get EOF without residual help. F3/F4 existing diagnostic strings stay, and the3s hop regression stays exact.
+
+Row-owned extraction fixes:734 F7 delimiter removes the nonexistent semicolon;847 uses the shell '# The PM check' marker. Existing full argv and FAIL assertions remain exact. New real legacyCall bytes test checks no-terminal-newline stdout exactly on0 and87 in exec/hop, and suppresses a nonempty stalled stdout payload on82 with explicit residual cleanup. M17 restores inherited stdout, killed by the unchanged precheck hop under3s assertion. M1-M16 definitions unchanged. No repair runtime, Node or push before delta review/gap. Whole gate fresh, no carried results; any red goes to Mos.
+
+
+## sage-3004 run4 limits, recorded before launch
+
+Candidatef3a55ddf7, manifestd7466207. Fresh whole case1 then whole case2, M1-M17, ten shells; no carry and no push in slot. Both whole Node test files and each mutant killer use timeout -k 10 900 with outer930. Shell limits from unchanged SHELL-LIMITS.json (ceil3x maximum receipt +120):
+
+- scripts/test-auth.sh: timeout -k 10 126; longest recorded 1.9081228229999543s, receipt 3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained).
+
+- scripts/test-conductor.sh: timeout -k 10 145; longest recorded 8.057173820000026s, receipt 3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained).
+
+- scripts/test-config.sh: timeout -k 10 130; longest recorded 3.1678915339999367s, receipt 3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained).
+
+- scripts/test-discord.sh: timeout -k 10 147; longest recorded 8.776727847000002s, receipt 3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained).
+
+- scripts/test-extension-package.sh: timeout -k 10 130; longest recorded 3.01285702399991s, receipt 3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained).
+
+- scripts/test-foundation.sh: timeout -k 10 269; longest recorded 49.367s, receipt 3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained).
+
+- scripts/test-land-work.sh: timeout -k 10 171; longest recorded 16.854s, receipt 3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained).
+
+- scripts/test-queue.sh: timeout -k 10 226; longest recorded 35.155s, receipt 3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained).
+
+- scripts/test-release.sh: timeout -k 10 157; longest recorded 12.168674453999964s, receipt 3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained).
+
+- scripts/test-task.sh: timeout -k 10 231; longest recorded 36.783798266s, receipt 3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained).
+
+Estimate12-18minutes. Any unexpected result follows sage-3004/mos-1272.
+
+
+## Run4 old-test red and mos-1349 measurement
+
+Whole case1:49/1/0,247.951s. Only old P10 inner timing fails exec4.19657134 against4s. All own new tests, wiring, exact bytes and outer<3 regression pass. Driver stops before case2/M1-M17/shells; no timeout. gander-0151 reports unplaced. Sage3007/Mos1349 measurements: five alternating804a/f3a scratch runs, no code edits,900s limits/freshTMPDIR, before3/2 after0/5. Test durations and only actually printed exec timers in run4/timing/NOTE.md. Passing per-mode numbers unavailable without editing; not invented. gander-0153 sends table to Mos/Sage/Duckworth for ruling before more work. Sweeps0 test leftovers; no push.
+
+
+## mos-1350 old P10 timing correction, test-only
+
+Choose shape(b): each inner/outer mode runs the same host once with no fault and checks baseline status0, before installing the fault or starting its cleanup guard. Subtract that fresh per-mode duration from the fault run. No constant functional cost is assumed. Overflow behavior is unchanged. Exact reason, no-observed, hop-residual and cleanup assertions remain byte-identical. Diagnostics print baseline/fault/net for each mode so the ten repeated runs can be checked.
+
+Probe's configured timers are2s inner and4s outer. Use net windows[1.25,2.75) and[3.25,4.75), a0.75s margin around those timer costs and0.5s separation between inner top and outer floor. The baseline includes the healthy probe startup itself, so net values may sit slightly below the configured timer. Run4's failing whole costs4.0057..4.3695 and its healthy functional checks around2s show why the old whole-run heuristic is unsuitable; actual net values must be proved by10 isolated runs per test before run5. No timing proof is claimed yet. Bound widening on the whole run is not used.
+
+ASSERTION-PRESERVATION.json records the two Mos-authorized old timing replacements. M1-M17 have no target or killer dependent on those lines; M11's old P10 overflow killer is unchanged. Historical row253 inner/outer mutants require fresh proof if used again, and none is carried or claimed in row276. Test-only commit changes no product script. No runtime or timing run until Sage returns the slot after271r3 and Duckworth approves.
+
+
+## Duckworth0218 B1 and repeated-run condition
+
+After every baseline status0, require pollFixtureGone(files) empty with exact baseline leaves no session assertion. Thus a baseline cannot supply outer-hop residual evidence. No pre-existing reason/residual/cleanup assertion changed. Case1 observed247.951s plus four estimated3s baselines gives259.951s; ceil3x+120=900s, so existing timeout-k10 900 still covers the extended whole file. Recheck after isolated timings before whole launch. Case2 unchanged900; shell3x table unchanged. Ten repetitions per fault must report min/max probeSeconds per mode. Any red or any value within0.25s of either accepted window edge stops for Mos, with no window tuning. Execution remains held for static approval and Sage CLEAR.
+
+
+## sage-3023 isolated proof and pre-whole limits recheck
+
+Twenty isolated test invocations pass,10 per fault,40 mode measurements. Net min/max inner-exec2.033094/2.171078, inner-hop2.054551/2.135443, outer-exec3.757506/3.960917, outer-hop3.736194/3.910606. Closest edge0.486194s, above0.25 stop threshold. Raw diagnostics in run5/proof; no window tuning. Max measured baseline2.119750332s; prior whole247.951 plus4x baseline gives256.430s; ceil3x+120=890s, existing900s retained. Case2/shell tables unchanged. Fresh whole stage follows with no results carried from any prior gate.
+
+
+## Run5 GREEN, sage-3023
+
+518pass/0fail/3named skips (93whole,425shell), proof20/0 with40mode timings,17/17 assertion kills,10passing controls,0timeouts/survivors,522.311s whole phase. Sweep0 with9pre-existing infrastructure excluded. N9 passes verbatim in RESULTS. Raw per-step/kill table in run5/SUMMARY.json. Manifest5 blobs unchanged; no result carried. Slot returned gander-0161. Review packet ready.
@@ -0,0 +1,7 @@
+{
+  "docs/plans/DEFERRED.md": "9d40dfe1bc91f60cd9999b3224dcea5b44f46f79019678ec98c6987f815a5099",
+  "packages/cli/tests/case-sudo-fixture.mjs": "eac5c83f43056bdeb5781101307e17d4bc01f03e97e02f4f5e930436d7e43535",
+  "packages/cli/tests/case1-accept.test.mjs": "1e8af0656707d93dedade923bf60556022dc7121c43761876a5d7e02731c14aa",
+  "scripts/case1-accept.sh": "89b45bb84e8365f32f08fd055c7db8a0259533f23fe7ab03f484acb25bee92c2",
+  "scripts/case2-unit.sh": "f615d09cd0998bd3a109faff9a16a78ac3f414686300fadc282a7773ec08491a"
+}
@@ -0,0 +1,40 @@
+{
+  "whole_files": [
+    "packages/cli/tests/case1-accept.test.mjs",
+    "packages/cli/tests/case2-unit.test.mjs"
+  ],
+  "shells": [
+    "scripts/test-auth.sh",
+    "scripts/test-conductor.sh",
+    "scripts/test-config.sh",
+    "scripts/test-discord.sh",
+    "scripts/test-extension-package.sh",
+    "scripts/test-foundation.sh",
+    "scripts/test-land-work.sh",
+    "scripts/test-queue.sh",
+    "scripts/test-release.sh",
+    "scripts/test-task.sh"
+  ],
+  "mutants": [
+    "M1",
+    "M2",
+    "M3",
+    "M4",
+    "M5",
+    "M6",
+    "M7",
+    "M8",
+    "M9",
+    "M10",
+    "M11",
+    "M12",
+    "M13",
+    "M14",
+    "M15",
+    "M16",
+    "M17"
+  ],
+  "red_pattern": "row276 talk legacy inner timeout",
+  "node_seconds": 900,
+  "estimate_minutes": "12-18; no row276 measured runtime yet"
+}
@@ -0,0 +1,9 @@
+# Row276 manifest, unrun candidate
+
+Source 164e166479378caf0702ab8b1eb3871b54219da3, base48e450ce8, branchgander/row276. Five-path manifest digest b0fdd91183d7e1911ed327e32c03b8de7f0efd4c86bd143fa0ad54390358ee63. BUILD-LOG excluded for append-only doc sweep. SOURCE.json pins committed blobs; no Node or behavior run. Duckworth reviews candidate and15mutants (changes.json), including mos-1326 exact wiring and preserved old assertions. Gate scope and stop rules in BUILD.md; next publication waits for Sage gap.
+
+
+sage-2901 integration onto94c33a43c: source6b898fab465c200db14313a49c07c06b5dff285d, newbranchgander/row276-94c3; manifest2af7e8bafcbf0bb977a26ab1f57371b8453c7a6659dc7233a68f186ef7b5d5f2. Only DEFERRED changes among prior manifest entries. Four source/test blobs identical to164e16647. integration-94c3/BLOB-PROOF.json and range-diff.txt retain evidence. No execution.
+
+
+Current gated candidate4e76bd6fc, branchgander/row276-0cbe, base0cbe2e9b3. Five-path manifest8f30c19a530789df8b22a77bed24250a5ccd94f9eb0a38534f512d3dd0e82189. Run5 GREEN under sage-3023; RESULTS.md and run5/SUMMARY.json are the final evidence. Historical unrun entries above are superseded. BUILD-LOG remains excluded; Sage appends its phase tail separately.
@@ -0,0 +1,5 @@
+9d40dfe1bc91f60cd9999b3224dcea5b44f46f79019678ec98c6987f815a5099  docs/plans/DEFERRED.md
+eac5c83f43056bdeb5781101307e17d4bc01f03e97e02f4f5e930436d7e43535  packages/cli/tests/case-sudo-fixture.mjs
+1e8af0656707d93dedade923bf60556022dc7121c43761876a5d7e02731c14aa  packages/cli/tests/case1-accept.test.mjs
+89b45bb84e8365f32f08fd055c7db8a0259533f23fe7ab03f484acb25bee92c2  scripts/case1-accept.sh
+f615d09cd0998bd3a109faff9a16a78ac3f414686300fadc282a7773ec08491a  scripts/case2-unit.sh
@@ -0,0 +1,9 @@
+{
+  "base": "3c4c463da",
+  "source": "c72cdc02f",
+  "only_script_change": "single redirection order swap in each copy",
+  "existing_test_prefix_unchanged_except_authorized_pin": true,
+  "case2_test_unchanged": true,
+  "mutant": "M16 both-copy old-order restore",
+  "gate": "Pending static review and CLEAR; no runtime check"
+}
@@ -0,0 +1,14 @@
+[
+  {
+    "row": 253,
+    "count": 40,
+    "old_timing_targets": [],
+    "old_timing_killers": []
+  },
+  {
+    "row": 276,
+    "count": 17,
+    "old_timing_targets": [],
+    "old_timing_killers": []
+  }
+]
@@ -0,0 +1,23 @@
+# Supervised legacy Case calls implementation plan
+
+Goal: finish row253 F5 on base48e450ce8, brief docs/plans/2026-10-22_case-sudo-legacy-followup.md (b0d0b7f76), row276/#1781. Reviewer Duckworth. No live host, units, config, ports or credentials. Tests and Node wait for Sage CLEAR; publication waits for a gap.
+
+Architecture: keep TESTER_SUPERVISOR byte-identical in both scripts. A case1 legacy launcher uses the validated system Bash/setsid/sleep tools after sudo drops uid, with a separate trusted GNU-timeout outer bound and private notice channel. stdout stays streamed to the caller, stderr stays separate. No root import of copy code. All five original calls are covered; no exception remains.
+
+Bounds (inner/outer seconds): talk320/330, with its unchanged --wait300 conversation and concurrent F5 scan; precheck200/210, preserving its existing timeout180 Claude probe; Claude version5/7; PM launches10/12; Node version5/7. Test extraction substitutes shorter bounds, with tests pinning the production values. Root stderr notice distinguishes outer-timeout from child137. Existing supervisor codes/reasons apply.
+
+Exit-status compatibility (Duckworth0182 B1): the inline builtin-only Node runner exits with its command's own status. Supervisor0 is the only success authority. On87 (inner-command), root may parse a final stderr trailer only to save a display code for ffail text; legacy_run still returns87 even if that trailer says0. A missing/bad trailer gives display87 plus the fixed inner-command reason, never pass. All other supervisor reasons ignore the trailer. Root saves display-only status in a private WORK file so background talk/command substitutions can report original exit numbers without changing their pass condition. F3/F4 use that number only in existing failure text; no old assertion changes.
+
+Trailer grammar: one last, newline-terminated line `MOSAIC_LEGACY_STATUS=<decimal>` with canonical decimal0..255 (0 or nonzero-leading up to3 digits). The runner writes it after command stderr and exits with the actual status. A child/escaped descendant may spoof display diagnostics, but can never change supervisor failure into success. Tests cover an earlier forged0 then actual7, an appended forged0 after a real7, malformed/missing records and statuses137/81.
+
+Root bounds trailer processing to the last65536bytes through a root-validated system tail; oversized diagnostics are explicitly truncated. stdout remains streamed. stderr's retained tail is emitted without only the final valid trailer. On supervisor0 the trailer is ignored as status; on87 it can alter display only. F6/F7/F10 now check supervisor rc before considering stdout, while retaining their original successful output. They capture stderr privately; F4 merges emitted stdout and stripped stderr at its existing capture, so stderr is emitted after buffered capture. Talk keeps its two files. The NODE runner executes only after uid drop. Its existing F9 root-only path check means uid ownership/no group-or-other write, not owner-only execute; activation's executable mode remains required. Tests pin executable-as-user behavior.
+
+Files: scripts/case1-accept.sh (launcher, five call sites, header); scripts/case2-unit.sh (setuid-member header note only); packages/cli/tests/case-sudo-fixture.mjs (fake-mode cases/seams); packages/cli/tests/case1-accept.test.mjs (per-call tests and extraction); docs/plans/DEFERRED.md (bounded closure when acceptance passes). Row276 packet keeps manifest, mutants and test scope. Existing assertions remain.
+
+- [ ] Extend fake-only tests for all5 calls under exec and hop: healthy stdout/stderr and exit status, blocking descendants, PID/SID ownership, exact inner reason, no leftover; stalled supervisor outer reason and explicit fixture cleanup residual; status/trailer invalid refusal. Talk retains300s argv and separate diagnostics, background scan.
+- [ ] Implement legacy launcher and five call sites; remove the remaining AS_USER array. Preserve all row253 supervisor bytes and root-only command fences.
+- [ ] Add root-side capture/tools counterparts for case1 (row253 N1), header setuid-member inner-cleanup refusal (N2), and exact timeout-vs-child137 tests.
+- [ ] Prepare mutants: drop talk supervision; drop outer bound on one diagnostic; bypass individual call, wrong/unchecked SID, trailer0 turns failed supervision into success, missing stream/display-code preservation; case1 tools/capture mutants. Unique target and byte-identical restore checks.
+- [ ] Duckworth reads candidate/manifest/mutants. On Sage CLEAR, intended RED/GREEN, each touched test whole, all mutants with passing controls and no timeout counted as kill, ten whole shell suites under recorded3x bounds. Report counts,timing,skips,sweep; stop on unexpected red/survivor/timeout for ruling.
+
+Review focus: instant command exit retains fail-closed inner-session residual532; hostile same-uid setsid-away or killed/stalled supervisor remains row253 R3, never claimed cleanup; a member changing uid yields inner-cleanup; no stdout is treated as authority; no outer-timeout parsed from caller stderr.
@@ -0,0 +1,56 @@
+# Row276 run5: GREEN
+
+Candidate4e76bd6fc, base0cbe2e9b3, manifest8f30c19a, grant sage-3023. No result from run1-run4 is carried. Isolated proof20/0,40 mode timings. Whole gate518/0/3. M1-M17 all killed at ERR_ASSERTION, with10 fresh passing controls, no timeout or survivor. Sweep0;9 pre-existing infrastructure excluded.
+
+| File | Pass | Fail | Skip | Wall s |
+|---|---:|---:|---:|---:|
+|packages/cli/tests/case1-accept.test.mjs|50|0|0|237.717|
+|packages/cli/tests/case2-unit.test.mjs|43|0|0|66.260|
+|scripts/test-auth.sh|15|0|0|0.916|
+|scripts/test-conductor.sh|17|0|0|6.428|
+|scripts/test-config.sh|31|0|0|1.918|
+|scripts/test-discord.sh|81|0|0|9.389|
+|scripts/test-extension-package.sh|18|0|0|2.219|
+|scripts/test-foundation.sh|44|0|0|44.611|
+|scripts/test-land-work.sh|86|0|0|13.794|
+|scripts/test-queue.sh|28|0|1|28.228|
+|scripts/test-release.sh|14|0|0|3.121|
+|scripts/test-task.sh|91|0|2|15.448|
+
+Whole stage wall522.311s, including controls and mutations. Case1 237.717s, case2 66.260s, shells126.072s. Each Node test uses timeout-k10 900; shell command receipts show the unchanged mos-1275 table. No timeout fired.
+
+| Mutant | Named killer | Base s | Changed s | Outcome |
+|---|---|---:|---:|---|
+|M1|row276 talk legacy inner timeout|1.868|2.269|assertion kill|
+|M2|row276 precheck outer bound|2.369|4.724|assertion kill|
+|M3|row276 talk legacy inner timeout|1.868|2.369|assertion kill|
+|M4|row276 earlier forged trailer|0.665|0.415|assertion kill|
+|M5|row276 legacy streams and display status|2.670|0.665|assertion kill|
+|M6|row276 trailer grammar|2.168|0.665|assertion kill|
+|M7|row276 trailer grammar|2.168|1.166|assertion kill|
+|M8|row276 trailer grammar|2.168|1.918|assertion kill|
+|M9|row276 legacy streams and display status|2.670|0.415|assertion kill|
+|M10|row276 case1 capture and legacy tools|0.264|0.315|assertion kill|
+|M11|row253 C4 acceptance query overflow|0.665|0.415|assertion kill|
+|M12|row276 version and PM checks|0.214|0.214|assertion kill|
+|M13|row276 version and PM checks|0.214|0.164|assertion kill|
+|M14|row276 version and PM checks|0.214|0.214|assertion kill|
+|M15|row276 stderr retention is bounded|0.465|0.465|assertion kill|
+|M16|row276 vanished pid stat read|0.164|0.164|assertion kill|
+|M17|row276 precheck outer bound|2.369|5.827|assertion kill|
+
+M5 dies in streams/status assertion; M16 in vanished-PID empty-stderr assertion; M17 at the unchanged precheck hop<3 assertion (4.543492s). Driver finally restores every changed file byte-identically and compares tracked git status, including both files for M16. Final manifest5 paths match the gated commit.
+
+Named skips, verbatim:
+
+- scripts/test-queue.sh: `skip  queue verify and render --check: this checkout (/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196) is not the queue's canonical root (/mnt/storage/src/mosaic-stack)`
+- scripts/test-task.sh: `skip live provider cases (row 244: no provider call in the gate)`
+- scripts/test-task.sh: `skip live provider cases (row 244: no provider call in the gate)`
+
+N9 passed, no skip:
+
+`ok 43 - inside a session's sandbox a bind below 1024 fails with EACCES, and a bind on a free high port succeeds`
+
+Proof min/max seconds: inner exec2.033094..2.171078, hop2.054551..2.135443; outer exec3.757506..3.960917, hop3.736194..3.910606. Closest edge0.486194s. All baseline cleanup/reason/residual assertions pass. Raw results.json and logs in run5, proof/ and changes/. Summary computed from raw TAP/shell summaries, not guessed.
+
+Slot returned in gander-0161. No live units, ports or host state changed. Publication and claimant review move use Sage3035 gap.
@@ -0,0 +1,132 @@
+{
+  "authority": [
+    "mos-1275",
+    "sage-2659"
+  ],
+  "scope": "Own Gander row196 receipt set documented for row278, plus the complete row278 run3 shell phase. Row253 old C4 results do not carry. Receipts choose timeouts only.",
+  "consulted_records": [
+    "ec1e7fad8:agents/gander/work/queue-196/evidence/suite-results-run1.json",
+    "ec1e7fad8:agents/gander/work/queue-196/evidence/suite-results.json",
+    "ec1e7fad8:agents/gander/work/queue-196/r2/mutants/results.json",
+    "ec1e7fad8:agents/gander/work/queue-196/r2/run2/base-results.json",
+    "ec1e7fad8:agents/gander/work/queue-196/r2/run2/killers/results.json",
+    "ec1e7fad8:agents/gander/work/queue-196/r3/gate/base-results.json",
+    "ec1e7fad8:agents/gander/work/queue-196/r3/gate/killers/results.json",
+    "ec1e7fad8:agents/gander/work/queue-196/r3/gate/sso-results.json",
+    "ec1e7fad8:agents/gander/work/queue-196/r4/gate/base-results.json",
+    "ec1e7fad8:agents/gander/work/queue-196/r4/gate/killers/results.json",
+    "ec1e7fad8:agents/gander/work/queue-196/r4/gate/sso-results.json",
+    "ec1e7fad8:agents/gander/work/queue-196/r4/gate/whole-results.json",
+    "ec1e7fad8:agents/gander/work/queue-196/r5/gate/whole-results.json",
+    "ec1e7fad8:agents/gander/work/queue-196/r5/resume/summary.json",
+    "ec1e7fad8:agents/gander/work/queue-196/r5/resume/whole-results.json",
+    "ec1e7fad8:agents/gander/work/queue-196/r6/base-results.json",
+    "ec1e7fad8:agents/gander/work/queue-196/r6/first-attempt/results.json",
+    "ec1e7fad8:agents/gander/work/queue-196/r6/killers/results.json",
+    "ec1e7fad8:agents/gander/work/queue-196/r6/summary.json",
+    "ec1e7fad8:agents/gander/work/queue-196/r6/whole-results.json",
+    "385a7194c:agents/gander/work/queue-278/run3/whole/results.json"
+  ],
+  "scripts": {
+    "scripts/test-auth.sh": {
+      "recorded_duration_seconds": 1.9081228229999543,
+      "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+      "limit_seconds": 126,
+      "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+      "script_sha256": "dd4720cb0cbecd2fc523a318f2222d21d257c8c5889996a3d69e522ee971a707",
+      "previous_maximum_seconds": 1.9081228229999543,
+      "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r6/whole-results.json",
+      "row278_run3_seconds": 0.816
+    },
+    "scripts/test-conductor.sh": {
+      "recorded_duration_seconds": 8.057173820000026,
+      "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+      "limit_seconds": 145,
+      "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+      "script_sha256": "da84150467494a4c979759f400854411bd93a7efce981139757bf526d688a23b",
+      "previous_maximum_seconds": 8.057173820000026,
+      "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r6/whole-results.json",
+      "row278_run3_seconds": 6.078
+    },
+    "scripts/test-config.sh": {
+      "recorded_duration_seconds": 3.1678915339999367,
+      "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+      "limit_seconds": 130,
+      "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+      "script_sha256": "3301c1fabf616bb961d62f6decd0a46dadb0f399b8ba7f3c2ca60023d2b24c78",
+      "previous_maximum_seconds": 3.1678915339999367,
+      "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r6/whole-results.json",
+      "row278_run3_seconds": 1.868
+    },
+    "scripts/test-discord.sh": {
+      "recorded_duration_seconds": 8.776727847000002,
+      "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+      "limit_seconds": 147,
+      "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+      "script_sha256": "a5dcf783c51a5d5d184a357f91ebf9fa1c4e054f0cb84a3d1d7668f6156e025e",
+      "previous_maximum_seconds": 8.776727847000002,
+      "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r5/resume/whole-results.json",
+      "row278_run3_seconds": 7.431
+    },
+    "scripts/test-extension-package.sh": {
+      "recorded_duration_seconds": 3.01285702399991,
+      "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+      "limit_seconds": 130,
+      "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+      "script_sha256": "5d7b687f16fd1a9414b229501177d530ba3af4eadd3cac319b33f38fdba9bf99",
+      "previous_maximum_seconds": 3.01285702399991,
+      "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r5/resume/whole-results.json",
+      "row278_run3_seconds": 1.366
+    },
+    "scripts/test-foundation.sh": {
+      "recorded_duration_seconds": 49.367,
+      "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+      "limit_seconds": 269,
+      "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+      "script_sha256": "2e11038e7f784ec4f539eb768f63bab0fab9c9940334388a1fe2d47ab9e2b008",
+      "previous_maximum_seconds": 39.70872647900006,
+      "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r5/resume/whole-results.json",
+      "row278_run3_seconds": 39.901
+    },
+    "scripts/test-land-work.sh": {
+      "recorded_duration_seconds": 16.854,
+      "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+      "limit_seconds": 171,
+      "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+      "script_sha256": "c9d1d5c9b006d5c12e5f796a9828361059f8e0410846fc55c070c0148b15cef4",
+      "previous_maximum_seconds": 12.623263413000037,
+      "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r5/resume/whole-results.json",
+      "row278_run3_seconds": 11.338
+    },
+    "scripts/test-queue.sh": {
+      "recorded_duration_seconds": 35.155,
+      "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+      "limit_seconds": 226,
+      "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+      "script_sha256": "c270f181d1fa8b6d42ff4131c339beba786a8fd620bb66f8afdcec05e8b10868",
+      "previous_maximum_seconds": 23.443742031000088,
+      "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r5/resume/whole-results.json",
+      "row278_run3_seconds": 21.158
+    },
+    "scripts/test-release.sh": {
+      "recorded_duration_seconds": 12.168674453999964,
+      "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+      "limit_seconds": 157,
+      "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+      "script_sha256": "be706dff832257bd4781abeabd19faa4ac16edf9a4af0c96457e33cf3bb6deb3",
+      "previous_maximum_seconds": 12.168674453999964,
+      "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r5/resume/whole-results.json",
+      "row278_run3_seconds": 2.67
+    },
+    "scripts/test-task.sh": {
+      "recorded_duration_seconds": 36.783798266,
+      "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+      "limit_seconds": 231,
+      "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+      "script_sha256": "10c4abb70bf9b83e617089b06a5436cc7fa6b866a176458b22128c3a15163f94",
+      "previous_maximum_seconds": 36.783798266,
+      "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r5/resume/whole-results.json",
+      "row278_run3_seconds": 13.843
+    }
+  }
+}
@@ -0,0 +1,21 @@
+{
+  "source": "d7606c8c7b71368efcd7d73b2840c2d53677a6f9",
+  "base": "0cbe2e9b35e51fe06dedde69c022b46e040f98c0",
+  "branch": "gander/row276-0cbe",
+  "manifest": "8f30c19a530789df8b22a77bed24250a5ccd94f9eb0a38534f512d3dd0e82189",
+  "paths": {
+    "docs/plans/DEFERRED.md": "9d40dfe1bc91f60cd9999b3224dcea5b44f46f79019678ec98c6987f815a5099",
+    "packages/cli/tests/case-sudo-fixture.mjs": "eac5c83f43056bdeb5781101307e17d4bc01f03e97e02f4f5e930436d7e43535",
+    "packages/cli/tests/case1-accept.test.mjs": "1e8af0656707d93dedade923bf60556022dc7121c43761876a5d7e02731c14aa",
+    "scripts/case1-accept.sh": "89b45bb84e8365f32f08fd055c7db8a0259533f23fe7ab03f484acb25bee92c2",
+    "scripts/case2-unit.sh": "f615d09cd0998bd3a109faff9a16a78ac3f414686300fadc282a7773ec08491a"
+  },
+  "mutants": 17,
+  "tests": "Run5 GREEN:93/0 whole,425/0 shells with3named skips,proof20/0,17assertion kills; see RESULTS.md",
+  "static_checks": [
+    "git diff --check",
+    "both supervisor copies byte-identical except authorized delta from prior",
+    "unique mutant targets"
+  ],
+  "original_source": "164e166479378caf0702ab8b1eb3871b54219da3"
+}
@@ -0,0 +1,14 @@
+{
+  "base": "0cbe2e9b3",
+  "bytes": 2860,
+  "sha256": "7561aa5c21409b716d65de036aba19b4c7180328424aae88e25e2891650a2627",
+  "both_scripts_byte_identical": true,
+  "base_byte_identical": false,
+  "authorized_delta": "mos-1337 N5: only move stderr redirect before stat open in both scripts",
+  "previous": {
+    "base": "48e450ce8",
+    "bytes": 2763,
+    "sha256": "c828087085a1dfdade55c0fb1083f9a2dff8d9b72885708186136497711c9bae",
+    "both_scripts_and_base_byte_identical": true
+  }
+}
@@ -0,0 +1,128 @@
+[
+  {
+    "id": "M1",
+    "file": "scripts/case1-accept.sh",
+    "occurrences": 1,
+    "before": "89b45bb84e8365f32f08fd055c7db8a0259533f23fe7ab03f484acb25bee92c2",
+    "after": "f7994147a5eefb924630063cb3bba17bd8ed0b65e7c24d913ee1580f4a9a0b47"
+  },
+  {
+    "id": "M2",
+    "file": "scripts/case1-accept.sh",
+    "occurrences": 1,
+    "before": "89b45bb84e8365f32f08fd055c7db8a0259533f23fe7ab03f484acb25bee92c2",
+    "after": "8a93c378b1f91238a32c885180e70d7d33b6201d9a2f63f8dea8e39ad577ad01"
+  },
+  {
+    "id": "M3",
+    "file": "scripts/case1-accept.sh",
+    "occurrences": 1,
+    "before": "89b45bb84e8365f32f08fd055c7db8a0259533f23fe7ab03f484acb25bee92c2",
+    "after": "d3dadb97ca9a1ee26b92af01bd7451804e9b80346bf0673cf63dbad7e7bb5e78"
+  },
+  {
+    "id": "M4",
+    "file": "scripts/case1-accept.sh",
+    "occurrences": 1,
+    "before": "89b45bb84e8365f32f08fd055c7db8a0259533f23fe7ab03f484acb25bee92c2",
+    "after": "d6754f354b59135f377e8cabdd211553257722fe8298e7d1e65f0a3a5a0de113"
+  },
+  {
+    "id": "M5",
+    "file": "scripts/case1-accept.sh",
+    "occurrences": 1,
+    "before": "89b45bb84e8365f32f08fd055c7db8a0259533f23fe7ab03f484acb25bee92c2",
+    "after": "3ade5f4cbba5fa7bb2427ef7c5166033efe86231e4479c72a7a1f1b2186f4a73"
+  },
+  {
+    "id": "M6",
+    "file": "scripts/case1-accept.sh",
+    "occurrences": 1,
+    "before": "89b45bb84e8365f32f08fd055c7db8a0259533f23fe7ab03f484acb25bee92c2",
+    "after": "1a7cd233c86b9ed4bd05d57adb5e6b9c35b537e698615870523429f21dcf3170"
+  },
+  {
+    "id": "M7",
+    "file": "scripts/case1-accept.sh",
+    "occurrences": 1,
+    "before": "89b45bb84e8365f32f08fd055c7db8a0259533f23fe7ab03f484acb25bee92c2",
+    "after": "bdf3a911e8d287d2459f6b5d8ceb51d5202499b8091e97cf31b3c9c4dbe76058"
+  },
+  {
+    "id": "M8",
+    "file": "scripts/case1-accept.sh",
+    "occurrences": 1,
+    "before": "89b45bb84e8365f32f08fd055c7db8a0259533f23fe7ab03f484acb25bee92c2",
+    "after": "c0c21ac1bde823f28d5fd3937973128fa59eee042ba4a1e675b4dc7957713f2b"
+  },
+  {
+    "id": "M9",
+    "file": "scripts/case1-accept.sh",
+    "occurrences": 1,
+    "before": "89b45bb84e8365f32f08fd055c7db8a0259533f23fe7ab03f484acb25bee92c2",
+    "after": "bddfa558b71c12d5fd04782a746382d817008b7cc4cdb0b831afb9c5ec82a251"
+  },
+  {
+    "id": "M10",
+    "file": "scripts/case1-accept.sh",
+    "occurrences": 1,
+    "before": "89b45bb84e8365f32f08fd055c7db8a0259533f23fe7ab03f484acb25bee92c2",
+    "after": "9bd7b50361ef7b3cef92b02e206711418d831ebf7c6c46073a102991433c3f66"
+  },
+  {
+    "id": "M11",
+    "file": "scripts/case1-accept.sh",
+    "occurrences": 1,
+    "before": "89b45bb84e8365f32f08fd055c7db8a0259533f23fe7ab03f484acb25bee92c2",
+    "after": "db7c45d67d05f03fea863f50bb167c6d25ebcc2cf47c9f9e79aff07f41c73a64"
+  },
+  {
+    "id": "M12",
+    "file": "scripts/case1-accept.sh",
+    "occurrences": 1,
+    "before": "89b45bb84e8365f32f08fd055c7db8a0259533f23fe7ab03f484acb25bee92c2",
+    "after": "49e03600ed40deefa1389e50451d353c59f3493175f077e76d511bbabfb33987"
+  },
+  {
+    "id": "M13",
+    "file": "scripts/case1-accept.sh",
+    "occurrences": 1,
+    "before": "89b45bb84e8365f32f08fd055c7db8a0259533f23fe7ab03f484acb25bee92c2",
+    "after": "788cdbbe10f8056c94d4e9816388509cd1069f328c4e12e3ade8d7c706bcbc16"
+  },
+  {
+    "id": "M14",
+    "file": "scripts/case1-accept.sh",
+    "occurrences": 1,
+    "before": "89b45bb84e8365f32f08fd055c7db8a0259533f23fe7ab03f484acb25bee92c2",
+    "after": "7e6f382c9e51e67eb173d42ddb402178a6af49822c3c37d36332c08bd65c98a5"
+  },
+  {
+    "id": "M15",
+    "file": "scripts/case1-accept.sh",
+    "occurrences": 1,
+    "before": "89b45bb84e8365f32f08fd055c7db8a0259533f23fe7ab03f484acb25bee92c2",
+    "after": "a81acad889e36e7b405ac622fc8a75276d3933e07c490637d77007ad43cd6552"
+  },
+  {
+    "id": "M16",
+    "file": "scripts/case1-accept.sh",
+    "occurrences": 1,
+    "before": "89b45bb84e8365f32f08fd055c7db8a0259533f23fe7ab03f484acb25bee92c2",
+    "after": "a6956292666b7ef35bac215b8213344b29d48a969da60c075fa7c331bbb4e2e0"
+  },
+  {
+    "id": "M16",
+    "file": "scripts/case2-unit.sh",
+    "occurrences": 1,
+    "before": "f615d09cd0998bd3a109faff9a16a78ac3f414686300fadc282a7773ec08491a",
+    "after": "d2709a1da6c9a03f4c8b31bf57ad00df4c0ae62a5cbc0e7588cdceb9dc0e2aa1"
+  },
+  {
+    "id": "M17",
+    "file": "scripts/case1-accept.sh",
+    "occurrences": 1,
+    "before": "89b45bb84e8365f32f08fd055c7db8a0259533f23fe7ab03f484acb25bee92c2",
+    "after": "98f65d07e80b4bfd593e56c0d4a8dc693dc886bbe7296bc60cc278c5d1188e7c"
+  }
+]
@@ -0,0 +1,42 @@
+diff --git a/docs/plans/DEFERRED.md b/docs/plans/DEFERRED.md
+index 0baa52809..7e393b060 100644
+--- a/docs/plans/DEFERRED.md
+++ b/docs/plans/DEFERRED.md
+@@ -487,6 +487,37 @@ at every gate. Started 2026-09-12 during the control board MVP.
+   touches the webui build: install the pinned esbuild in the gate checkout
+   so the check runs, or record why it can't. (2026-10-22)
+ 
+- **The case supervisor reports a fast child as an inner-session failure.**
+  (Row 253 N1, mos-1297 item 5.) A child that exits before the supervisor
+  verifies its session is reaped first, so the supervisor exits 85
+  (inner-session) instead of the child's own code. Mos measured rc85 in 39
+  of 40 fast-child bash runs. It fails closed, so it is not a 10-27 defect;
+  row 253 fixed only its own fixture (PYTHON_STUB execs python3). The
+  product fix is Vikunja 532, after 10-27. (2026-10-22)
+
+- **boardSend /api/seen returns 400 for a scan failure after writeMark.**
+  (Webby N2 on row 198, ruled sage-2867.) The mark is written, then the
+  rescan fails, and the client gets 400 as if its request were bad. Webby
+  suggests 500. It does not hold the 198 gate; binds the next row that
+  touches serve.mjs. (2026-10-22)
+
+- **Stale "row 203" text in the access command.** (Quackerjack, row 203
+  BUILD.md follow-up.) packages/cli/src/access.mjs lines 26-27, its help
+  string at line 36 and line 44, and packages/cli/README.md line 1107 say
+  peer homes stay unread "until row 203" adds the federation key. Row 203
+  changes only scripts/mosaic-config.mjs and test-config.sh, so once it
+  lands those lines point at a row that did not do the work. Binds the next
+  row that edits access.mjs. (2026-10-22)
+
+- **A remote outage can make the first library lookup outlast the tool
+  timeout.** (Row 224 residual, sage-2819.) In each 60 s window the first
+  lookup still runs an inline fetch, and that fetch can take longer than the
+  60 s tool timeout. Bound the inline fetch in a later row. (2026-10-22)
+
+- **A sharee's session.list stays refused.** (Row 206, sage-2818, Q7.)
+  Whichever of row 193's session wiring or the share wiring lands second
+  wires it. (2026-10-22)
+
+ ## Queue
+ 
+ Moved to `docs/plans/QUEUE.md` on 2026-09-13. This file holds only gaps.
@@ -0,0 +1,12 @@
+{
+  "base": "48e450ce8",
+  "upstream": "94c33a43c",
+  "manifest": "b0fdd91183d7e1911ed327e32c03b8de7f0efd4c86bd143fa0ad54390358ee63",
+  "changed": [
+    "docs/plans/DEFERRED.md"
+  ],
+  "stat": " docs/plans/DEFERRED.md | 31 +++++++++++++++++++++++++++++++\n 1 file changed, 31 insertions(+)\n",
+  "source_test_path_drift": false,
+  "detail": "31 added lines, no deletions, inserted in upstream gaps section. This is not an exact-tail append. Preserve these upstream entries and append row276 conditional closure at final integration. No rebase performed yet; keep original branch.",
+  "tests": "NOT RUN"
+}
@@ -0,0 +1,15 @@
+{
+  "files": {
+    "packages/cli/tests/case1-accept.test.mjs": 900,
+    "packages/cli/tests/case2-unit.test.mjs": 900
+  },
+  "basis": "Case1 longest complete observed run4 247.951s; ceil(3x)+120=864s, existing900s exceeds it. Two new per-mode baselines in each of inner/outer add four healthy runs; conservative4x3s=12s gives ceil(3x259.951)+120=900s. Case2 retains900s; unchanged since row253/row276; no new runtime measurement. Revisit after10 isolated repetitions before whole gate.",
+  "mos_1275": {
+    "case1_recorded_seconds": 247.951,
+    "case1_receipt": "run4/results.json",
+    "case1_estimated_extra_seconds": 12,
+    "case1_sizing_seconds": 259.951,
+    "case1_three_x_plus_120": 900,
+    "actual_limit": 900
+  }
+}
@@ -0,0 +1,141 @@
+[
+  {
+    "id": "M1",
+    "file": "scripts/case1-accept.sh",
+    "old": "    # WORK is root's private mktemp directory. The dropped uid cannot write it.",
+    "new": "    # WORK is root's private mktemp directory. The dropped uid cannot write it.\n    [ \"$tag\" != talk ] || TESTER_SUPERVISOR='shift 3; exec \"$@\"'",
+    "killer": "packages/cli/tests/case1-accept.test.mjs",
+    "pattern": "row276 talk legacy inner timeout"
+  },
+  {
+    "id": "M2",
+    "file": "scripts/case1-accept.sh",
+    "old": "LC_ALL=C \"$TS_TIMEOUT\" --verbose --signal=KILL \"${outer}s\" \"$TS_BASH\" -c '\n        errors=",
+    "new": "LC_ALL=C \"$TS_BASH\" -c '\n        errors=",
+    "killer": "packages/cli/tests/case1-accept.test.mjs",
+    "pattern": "row276 precheck outer bound"
+  },
+  {
+    "id": "M3",
+    "file": "scripts/case1-accept.sh",
+    "old": "\"$setsid_bin\" \"$@\" & child=$!",
+    "new": "\"$@\" & child=$!",
+    "killer": "packages/cli/tests/case1-accept.test.mjs",
+    "pattern": "row276 talk legacy inner timeout"
+  },
+  {
+    "id": "M4",
+    "file": "scripts/case1-accept.sh",
+    "old": "if [ \"$rc\" = 87 ] && [ \"$valid\" = 1 ] && [ \"$display\" -gt 0 ]; then\n        printf '%s\\n' \"$display\" > \"$WORK/legacy-$tag.rc\"\n        exit 87",
+    "new": "if [ \"$rc\" = 87 ] && [ \"$valid\" = 1 ] && [ \"$display\" -ge 0 ]; then\n        printf '%s\\n' \"$display\" > \"$WORK/legacy-$tag.rc\"\n        exit \"$display\"",
+    "killer": "packages/cli/tests/case1-accept.test.mjs",
+    "pattern": "row276 earlier forged trailer"
+  },
+  {
+    "id": "M5",
+    "file": "scripts/case1-accept.sh",
+    "old": "process.exitCode=code;",
+    "new": "process.exitCode=0;",
+    "killer": "packages/cli/tests/case1-accept.test.mjs",
+    "pattern": "row276 legacy streams and display status"
+  },
+  {
+    "id": "M6",
+    "file": "scripts/case1-accept.sh",
+    "old": "&& [ \"${BASH_REMATCH[1]}\" -le 255 ]; then",
+    "new": "; then",
+    "killer": "packages/cli/tests/case1-accept.test.mjs",
+    "pattern": "row276 trailer grammar"
+  },
+  {
+    "id": "M7",
+    "file": "scripts/case1-accept.sh",
+    "old": "(0|[1-9][0-9]{0,2})$'\\n'$",
+    "new": "([0-9]{1,3})$'\\n'$",
+    "killer": "packages/cli/tests/case1-accept.test.mjs",
+    "pattern": "row276 trailer grammar"
+  },
+  {
+    "id": "M8",
+    "file": "scripts/case1-accept.sh",
+    "old": "(0|[1-9][0-9]{0,2})$'\\n'$",
+    "new": "(0|[1-9][0-9]{0,2})$'\\n'?$",
+    "killer": "packages/cli/tests/case1-accept.test.mjs",
+    "pattern": "row276 trailer grammar"
+  },
+  {
+    "id": "M9",
+    "file": "scripts/case1-accept.sh",
+    "old": "    printf '%s' \"$raw\" >&2",
+    "new": "    : # dropped stderr",
+    "killer": "packages/cli/tests/case1-accept.test.mjs",
+    "pattern": "row276 legacy streams and display status"
+  },
+  {
+    "id": "M10",
+    "file": "scripts/case1-accept.sh",
+    "old": "[ \"${st% *}\" = 0 ] && [[ \"${st#* }\" =~ ^[0-7]{3,4}$ ]] && (( (8#${st#* } & 8#022) == 0 )) || return 1",
+    "new": "[ \"${st% *}\" = 0 ] && [[ \"${st#* }\" =~ ^[0-7]{3,4}$ ]] || return 1",
+    "killer": "packages/cli/tests/case1-accept.test.mjs",
+    "pattern": "row276 case1 capture and legacy tools"
+  },
+  {
+    "id": "M11",
+    "file": "scripts/case1-accept.sh",
+    "old": "[ \"$(wc -c < \"$file\")\" -le \"$maximum\" ] || exit 83",
+    "new": ": # dropped capture byte limit",
+    "killer": "packages/cli/tests/case1-accept.test.mjs",
+    "pattern": "row253 C4 acceptance query overflow"
+  },
+  {
+    "id": "M12",
+    "file": "scripts/case1-accept.sh",
+    "old": "if [ \"$rc\" = 0 ] && [ \"$v\" = \"$CLAUDE_PIN (Claude Code)\" ];",
+    "new": "if [ \"$v\" = \"$CLAUDE_PIN (Claude Code)\" ];",
+    "killer": "packages/cli/tests/case1-accept.test.mjs",
+    "pattern": "row276 version and PM checks"
+  },
+  {
+    "id": "M13",
+    "file": "scripts/case1-accept.sh",
+    "old": "if [ \"$rc\" = 0 ] && [[ \"$out\" =~ ^ok\\ ",
+    "new": "if [[ \"$out\" =~ ^ok\\ ",
+    "killer": "packages/cli/tests/case1-accept.test.mjs",
+    "pattern": "row276 version and PM checks"
+  },
+  {
+    "id": "M14",
+    "file": "scripts/case1-accept.sh",
+    "old": "if [ \"$rc\" = 0 ] && [ \"$v\" = \"$NODE_PIN\" ];",
+    "new": "if [ \"$v\" = \"$NODE_PIN\" ];",
+    "killer": "packages/cli/tests/case1-accept.test.mjs",
+    "pattern": "row276 version and PM checks"
+  },
+  {
+    "id": "M15",
+    "file": "scripts/case1-accept.sh",
+    "old": "\"$TS_TAIL\" -c 65536 -- \"$errors\"",
+    "new": "\"$TS_TAIL\" -c 999999999 -- \"$errors\"",
+    "killer": "packages/cli/tests/case1-accept.test.mjs",
+    "pattern": "row276 stderr retention is bounded"
+  },
+  {
+    "id": "M16",
+    "file": "scripts/case1-accept.sh",
+    "also_files": [
+      "scripts/case2-unit.sh"
+    ],
+    "old": "IFS= read -r -d '' raw 2>/dev/null < \"/proc/$pid/stat\" || :",
+    "new": "IFS= read -r -d '' raw < \"/proc/$pid/stat\" 2>/dev/null || :",
+    "killer": "packages/cli/tests/case1-accept.test.mjs",
+    "pattern": "row276 vanished pid stat read"
+  },
+  {
+    "id": "M17",
+    "file": "scripts/case1-accept.sh",
+    "old": "exec \"$@\" > \"$output\" 2> \"$errors\"",
+    "new": "exec \"$@\" 2> \"$errors\"",
+    "killer": "packages/cli/tests/case1-accept.test.mjs",
+    "pattern": "row276 precheck outer bound"
+  }
+]
@@ -0,0 +1,116 @@
+#!/usr/bin/env python3
+"""Run explicit row276 changes only under Sage's grant. --static runs no tests."""
+import argparse
+import hashlib
+import json
+import os
+from pathlib import Path
+import signal
+import subprocess
+import time
+
+HERE = Path(__file__).resolve().parent
+REPO = HERE.parents[3]
+
+def digest(data):
+    return hashlib.sha256(data).hexdigest()
+
+def busy():
+    p = subprocess.run(['bash', '/mnt/storage/scratch/sage-busy-now.sh'], text=True, capture_output=True)
+    if p.returncode or p.stdout.splitlines()[-1:] != ['CLEAR']:
+        raise RuntimeError('busy refusal: ' + p.stdout + p.stderr)
+
+def run(command, path, seconds=60):
+    if command[:2] == ['node', '--test']:
+        limits = json.loads((HERE/'WHOLE-GATE-LIMITS.json').read_text())['files']
+        limit = limits.get(command[-1], 900)
+        command = ['timeout','-k','10',str(limit),*command]
+        seconds = limit + 30
+    busy()
+    started = time.monotonic()
+    command_file = path.with_suffix('.command.json')
+    command_file.write_text(json.dumps(command))
+    # Keep command text out of wrapper argv: the busy guard scans every argv.
+    # launch.py execs the structured command. bash owns a pipefail/tee pipeline.
+    p = subprocess.Popen(['bash','-o','pipefail','-c',
+        'python3 "$1" "$2" 2>&1 | tee "$3"', '--',str(HERE/'launch.py'),str(command_file),str(path)],
+        cwd=REPO,start_new_session=True)
+    expired = False
+    try:
+        code = p.wait(timeout=seconds)
+        expired = code in (124, 137)
+    except subprocess.TimeoutExpired:
+        expired = True
+        os.killpg(p.pid, signal.SIGKILL)
+        code = p.wait()
+    finally:
+        try:
+            os.killpg(p.pid, signal.SIGKILL)
+        except ProcessLookupError:
+            pass
+    return dict(code=code, timeout=expired, seconds=round(time.monotonic()-started, 3), log=str(path))
+
+def main():
+    ap = argparse.ArgumentParser()
+    ap.add_argument('--static', action='store_true')
+    ap.add_argument('--grant')
+    ap.add_argument('--out', type=Path)
+    args = ap.parse_args()
+    definitions = json.loads((HERE/'changes.json').read_text())
+    checked = []
+    for d in definitions:
+        for file in [d['file'], *d.get('also_files', [])]:
+            original = (REPO/file).read_bytes()
+            count = original.count(d['old'].encode())
+            if count != 1:
+                raise RuntimeError(f"{d['id']}: {file}: target occurs {count} times")
+            changed = original.replace(d['old'].encode(), d['new'].encode(), 1)
+            checked.append(dict(id=d['id'], file=file, occurrences=count,
+                                before=digest(original), after=digest(changed)))
+    if args.static:
+        print(json.dumps(checked, indent=2))
+        return
+    if not args.grant or not args.out:
+        ap.error('execution needs --grant and --out')
+    if not os.environ.get('TMPDIR', '').startswith('/mnt/storage/scratch/tmp/g'):
+        raise RuntimeError('TMPDIR must be the granted scratch directory')
+    status = subprocess.check_output(['git','status','--porcelain','--untracked-files=no'],cwd=REPO)
+    args.out.mkdir(parents=True, exist_ok=True)
+    results = dict(grant=args.grant, static=checked, bases={}, changes=[])
+    failures = 0
+    for d in definitions:
+        key = d['killer']+'|'+d['pattern']
+        command = ['node','--test','--test-reporter=tap','--test-name-pattern',d['pattern'],d['killer']]
+        if key not in results['bases']:
+            base = run(command, args.out/(d['id']+'-base.log'))
+            results['bases'][key] = base
+            (args.out/'results.json').write_text(json.dumps(results,indent=2)+'\n')
+            if base['code'] != 0 or base['seconds'] > 30:
+                raise RuntimeError('base failed or exceeded 30 seconds: '+d['id'])
+        originals = {REPO/file: (REPO/file).read_bytes() for file in [d['file'], *d.get('also_files', [])]}
+        try:
+            for target, original in originals.items():
+                target.write_bytes(original.replace(d['old'].encode(),d['new'].encode(),1))
+                pre = subprocess.run(['bash','-n',str(target)],capture_output=True)
+                if pre.returncode:
+                    raise RuntimeError('invalid syntax: '+d['id'])
+            result = run(command,args.out/(d['id']+'.log'))
+            result.update(id=d['id'], base_seconds=results['bases'][key]['seconds'],
+                          outcome='timeout' if result['timeout'] else 'killed' if result['code'] != 0 else 'survived')
+            results['changes'].append(result)
+            if result['timeout']:
+                raise RuntimeError('timeout requires Sage/Mos classification: '+d['id'])
+            if result['outcome'] != 'killed':
+                failures += 1
+        finally:
+            for target, original in originals.items():
+                target.write_bytes(original)
+                assert target.read_bytes() == original
+            assert subprocess.check_output(['git','status','--porcelain','--untracked-files=no'],cwd=REPO) == status
+            (args.out/'results.json').write_text(json.dumps(results,indent=2)+'\n')
+        if failures >= 1:
+            raise RuntimeError('first unexpected failure: end the row276 window')
+    print(json.dumps(results,indent=2))
+
+if __name__ == '__main__':
+    main()
@@ -0,0 +1,66 @@
+{
+  "base": "0cbe2e9b3",
+  "source": "24bdde7eedb3b3ecf01d426370f17648c2915a54",
+  "previous_tip": "05af615fba88f5b0df5ac60d9a60b33214f0d322",
+  "rebased_tip": "fe21ec0f70037310d769b5d11484ba4f779d4765",
+  "four_identical": {
+    "packages/cli/tests/case-sudo-fixture.mjs": "eac5c83f43056bdeb5781101307e17d4bc01f03e97e02f4f5e930436d7e43535",
+    "packages/cli/tests/case1-accept.test.mjs": "fe4bc897497d83ef247b229cd49acf78b1a607af44e803a8a0a866115ff8cf87",
+    "scripts/case1-accept.sh": "46245e2bc19c8bcab2ac4fbda16cc72f2dfbf656e4bad8db707bb5a254694900",
+    "scripts/case2-unit.sh": "d2709a1da6c9a03f4c8b31bf57ad00df4c0ae62a5cbc0e7588cdceb9dc0e2aa1"
+  },
+  "upstream_changed": [
+    "agents/gizmoduck/work/queue-269/BUILD.md",
+    "agents/launchpad/work/queue-206/BUILD.md",
+    "docs/plans/2026-10-22_prd-1-16-brief.md",
+    "docs/plans/DEFERRED.md",
+    "docs/plans/QUEUE.md",
+    "docs/plans/queue.json",
+    "docs/prd/mosaic-stack.md",
+    "packages/bus/README.md",
+    "packages/bus/schema.sql",
+    "packages/bus/src/broker.mjs",
+    "packages/bus/src/migrations/3l-3m.sql",
+    "packages/bus/src/store.mjs",
+    "packages/bus/tests/account-migration.test.mjs",
+    "packages/bus/tests/chief-of-staff.test.mjs",
+    "packages/bus/tests/comment-migration.test.mjs",
+    "packages/bus/tests/end-launch.test.mjs",
+    "packages/bus/tests/fixtures/schema-3l.sql",
+    "packages/bus/tests/gitea-migration.test.mjs",
+    "packages/bus/tests/grant-migration.test.mjs",
+    "packages/bus/tests/name-migration.test.mjs",
+    "packages/bus/tests/schema.test.mjs",
+    "packages/bus/tests/sessions.test.mjs",
+    "packages/bus/tests/spec-migration.test.mjs",
+    "packages/bus/tests/thread-migration.test.mjs",
+    "packages/bus/tests/thread-shares.test.mjs",
+    "packages/bus/tests/usage-migration.test.mjs",
+    "packages/bus/tests/user-principal.test.mjs",
+    "packages/cli/src/launcher.mjs",
+    "packages/cli/tests/fixtures/session-adapter.mjs",
+    "packages/cli/tests/session-launch.test.mjs",
+    "packages/cli/tests/stack-release.test.mjs",
+    "packages/cli/tests/thread-launch.test.mjs",
+    "packages/seat/src/sandbox.mjs",
+    "packages/seat/src/session.mjs",
+    "packages/seat/tests/session-workspace.test.mjs",
+    "packages/tasks/requirements.json",
+    "packages/tasks/tests/requirements.test.mjs",
+    "scripts/stack-release.sh"
+  ],
+  "transitive_import_overlap": [
+    "packages/bus/src/broker.mjs",
+    "packages/bus/src/store.mjs",
+    "packages/seat/src/sandbox.mjs"
+  ],
+  "explicit_dependencies": [
+    "packages/bus/schema.sql",
+    "packages/bus/src/migrations/3l-3m.sql",
+    "packages/bus/src/store.mjs",
+    "packages/bus/src/broker.mjs",
+    "packages/seat/src/sandbox.mjs"
+  ],
+  "assessment": "helpers imports Broker/Store; Store hash-checks schema/migrations at import. case2 sandboxProblem/prepareRun/binds consumes sandbox.mjs and copies RUNNER_FILES including broker. New schema3m is exercised on integrated base. case scripts never read COUNTED/restore guard lists or stack-release.sh; only a comment names pm_external. Config and webui CLI are generated stand-ins. All ten whole shell suites run on integrated base. No changed test pins schema step counts or restore guard lists. Claim3255 already stands; no redundant queue write.",
+  "manifest": "4dab70cd251f5ae170856482bde923157ee667d342cd8ea412d242f707307303"
+}
@@ -0,0 +1,4 @@
+1:  6b898fab4 = 1:  24bdde7ee fix(case1): supervise legacy user calls across sudo sessions
+2:  824e5de10 = 2:  de983422d docs(row276): pin supervised-call candidate and fifteen mutants
+3:  d65b89899 = 3:  8fa6e5f03 docs(row276): record static approval and upstream deferred drift
+4:  05af615fb = 4:  fe21ec0f7 docs(row276): pin integration on 94c33a43c and preserve upstream docs
@@ -0,0 +1,31 @@
+{
+  "base": "94c33a43c",
+  "source": "6b898fab465c200db14313a49c07c06b5dff285d",
+  "rebased_tip_before_records": "d65b898998f07b3a63024620b10b7566b362dd0a",
+  "old_source": "164e166479378caf0702ab8b1eb3871b54219da3",
+  "four_identical": {
+    "packages/cli/tests/case-sudo-fixture.mjs": {
+      "original_sha256": "eac5c83f43056bdeb5781101307e17d4bc01f03e97e02f4f5e930436d7e43535",
+      "integrated_sha256": "eac5c83f43056bdeb5781101307e17d4bc01f03e97e02f4f5e930436d7e43535"
+    },
+    "packages/cli/tests/case1-accept.test.mjs": {
+      "original_sha256": "fe4bc897497d83ef247b229cd49acf78b1a607af44e803a8a0a866115ff8cf87",
+      "integrated_sha256": "fe4bc897497d83ef247b229cd49acf78b1a607af44e803a8a0a866115ff8cf87"
+    },
+    "scripts/case1-accept.sh": {
+      "original_sha256": "46245e2bc19c8bcab2ac4fbda16cc72f2dfbf656e4bad8db707bb5a254694900",
+      "integrated_sha256": "46245e2bc19c8bcab2ac4fbda16cc72f2dfbf656e4bad8db707bb5a254694900"
+    },
+    "scripts/case2-unit.sh": {
+      "original_sha256": "d2709a1da6c9a03f4c8b31bf57ad00df4c0ae62a5cbc0e7588cdceb9dc0e2aa1",
+      "integrated_sha256": "d2709a1da6c9a03f4c8b31bf57ad00df4c0ae62a5cbc0e7588cdceb9dc0e2aa1"
+    }
+  },
+  "deferred_exact_new_base_plus_original_own_tail": true,
+  "build_log_exact_new_base_plus_original_own_tail": true,
+  "manifest": "2af7e8bafcbf0bb977a26ab1f57371b8453c7a6659dc7233a68f186ef7b5d5f2",
+  "changed_manifest_entries": [
+    "docs/plans/DEFERRED.md"
+  ],
+  "tests": "NOT RUN"
+}
@@ -0,0 +1,3 @@
+# sage-2901 integration
+
+Rebased old29996fb82 onto94c33a43c under newgander/row276-94c3, preserving old branch. DEFERRED auto-merged; only BUILD-LOG conflicted. Both are exact new-base prefixes followed by unchanged row276 tails. Four source/test blobs byte-identical to164e16647. Regenerated five-path manifest 2af7e8bafcbf0bb977a26ab1f57371b8453c7a6659dc7233a68f186ef7b5d5f2. No tests, Node or queue write. BUILD-LOG excluded.
@@ -0,0 +1,42 @@
+diff --git a/docs/plans/DEFERRED.md b/docs/plans/DEFERRED.md
+index 0baa52809..7e393b060 100644
+--- a/docs/plans/DEFERRED.md
+++ b/docs/plans/DEFERRED.md
+@@ -487,6 +487,37 @@ at every gate. Started 2026-09-12 during the control board MVP.
+   touches the webui build: install the pinned esbuild in the gate checkout
+   so the check runs, or record why it can't. (2026-10-22)
+ 
+- **The case supervisor reports a fast child as an inner-session failure.**
+  (Row 253 N1, mos-1297 item 5.) A child that exits before the supervisor
+  verifies its session is reaped first, so the supervisor exits 85
+  (inner-session) instead of the child's own code. Mos measured rc85 in 39
+  of 40 fast-child bash runs. It fails closed, so it is not a 10-27 defect;
+  row 253 fixed only its own fixture (PYTHON_STUB execs python3). The
+  product fix is Vikunja 532, after 10-27. (2026-10-22)
+
+- **boardSend /api/seen returns 400 for a scan failure after writeMark.**
+  (Webby N2 on row 198, ruled sage-2867.) The mark is written, then the
+  rescan fails, and the client gets 400 as if its request were bad. Webby
+  suggests 500. It does not hold the 198 gate; binds the next row that
+  touches serve.mjs. (2026-10-22)
+
+- **Stale "row 203" text in the access command.** (Quackerjack, row 203
+  BUILD.md follow-up.) packages/cli/src/access.mjs lines 26-27, its help
+  string at line 36 and line 44, and packages/cli/README.md line 1107 say
+  peer homes stay unread "until row 203" adds the federation key. Row 203
+  changes only scripts/mosaic-config.mjs and test-config.sh, so once it
+  lands those lines point at a row that did not do the work. Binds the next
+  row that edits access.mjs. (2026-10-22)
+
+- **A remote outage can make the first library lookup outlast the tool
+  timeout.** (Row 224 residual, sage-2819.) In each 60 s window the first
+  lookup still runs an inline fetch, and that fetch can take longer than the
+  60 s tool timeout. Bound the inline fetch in a later row. (2026-10-22)
+
+- **A sharee's session.list stays refused.** (Row 206, sage-2818, Q7.)
+  Whichever of row 193's session wiring or the share wiring lands second
+  wires it. (2026-10-22)
+
+ ## Queue
+ 
+ Moved to `docs/plans/QUEUE.md` on 2026-09-13. This file holds only gaps.
@@ -0,0 +1,15 @@
+1:  164e16647 ! 1:  6b898fab4 fix(case1): supervise legacy user calls across sudo sessions
+    @@ Commit message
+     
+      ## BUILD-LOG.md ##
+     @@ BUILD-LOG.md: Gander: after Duckworth-0100 design approval with C1-C5, prepared the two host-s
+    - 2026-10-22 14:45 UTC | Gander row253 focused27 on finalaca16404c base | Fresh0604d91fc / manifest573c51cf:27 whole files604/0/0, no timeout/retry, case134/0 in99.281s, case243/0 in66.418s, stack-release includingT46221/0 in583.453s. N9 sandbox bind ran and passed, no focused skips. Seven source blobs unchanged; sweep0 run-created leftovers, pre-existing infrastructure receipts retained. Whole gate and M1-M40 await separate Sage CLEAR after Duckworth rebase check. No live action.
+    + 2026-10-22T17:42:16Z | Sage | Row 253 (#1758, Gander, Duckworth) LANDED 48e450ce8. Before: refactor at aca16404c; case-sudo calls had no supervised session check and the M21 survivor hid behind a fast-exit fixture (mos-1297). After: a fast-forward of 22 commits; manifest 591020a1 rechecked with 0 mismatches; run 5 whole gate green with M1-M40 killed, the M38 PID equals SID assertion added under mos-1298; Duckworth APPROVE rev 3252, note rev 3253, done rev 3254; #1758 comment 30701 and closed; P19 416 comment 719. N1 (fast child reported as exit 85) is DEFERRED as Vikunja 532.
+      
+    - 2026-10-22 14:46 UTC | Gander correction to the row253 focused27 entry immediately above | stack-release whole was218/0/0, not221/0. The27-file sum604/0/0 and duration583.453s are unchanged; raw files/results.json and SUMMARY.json give the exact per-file totals.
+    + 2026-10-22T18:11:57Z | Sage | Row 275 (#1780, Morgana, Duckworth) LANDED 3410df7c3. Before: refactor at 48e450ce8; viewers had no verb list of their own and board reads were not refused to users. After: a fast-forward of 3 commits; manifest 39847b15 (4 paths) blobs match; gate 17:52:12Z-18:05:00Z green (whole files 7/22/6, bus 834, cli 861, harness 151, business 231, seat 167, 10 scripts with 3 named skips), M6 and M10 killed; Duckworth APPROVE rev 3260 (comment 30717); note and done by sage-2897; #1780 comment 30728 and closed. N1 (board refusal test as a loop over BOARD_VERBS) is non-blocking.
+     +
+     +2026-10-22 18:11:58 UTC | Gander row276 #1781 prepared, gate pending | Before: row253 left5legacy Case1 AS_USER calls unsupervised across sudo pty sessions. After: candidate uses its unchanged supervisor with per-call inner/outer budgets, separate streams, strict display-only failure trailer, fake-only paired process-model cases and15unique mutants. Duckworth0182 B1 corrected the plan before product code;0183 cleared build. Parse-only Bash checks pass; no Node, behavioral test, host, unit or config action. Runtime gate and publication await Sage.
+     
+2:  6887825e4 = 2:  824e5de10 docs(row276): pin supervised-call candidate and fifteen mutants
+3:  29996fb82 = 3:  d65b89899 docs(row276): record static approval and upstream deferred drift
@@ -0,0 +1,8 @@
+#!/usr/bin/env python3
+"""Exec a structured command without putting its text in wrapper argv."""
+import json
+import os
+import sys
+with open(sys.argv[1]) as source:
+    command = json.load(source)
+os.execvp(command[0], command)
@@ -0,0 +1,184 @@
+{
+  "grant": "sage-2964",
+  "head": "f8d44db2f9153a0e76aebcd0288d0fc74bf7c108",
+  "base": "0cbe2e9b3",
+  "manifest": "4dab70cd251f5ae170856482bde923157ee667d342cd8ea412d242f707307303",
+  "scope": {
+    "whole_files": [
+      "packages/cli/tests/case1-accept.test.mjs",
+      "packages/cli/tests/case2-unit.test.mjs"
+    ],
+    "shells": [
+      "scripts/test-auth.sh",
+      "scripts/test-conductor.sh",
+      "scripts/test-config.sh",
+      "scripts/test-discord.sh",
+      "scripts/test-extension-package.sh",
+      "scripts/test-foundation.sh",
+      "scripts/test-land-work.sh",
+      "scripts/test-queue.sh",
+      "scripts/test-release.sh",
+      "scripts/test-task.sh"
+    ],
+    "mutants": [
+      "M1",
+      "M2",
+      "M3",
+      "M4",
+      "M5",
+      "M6",
+      "M7",
+      "M8",
+      "M9",
+      "M10",
+      "M11",
+      "M12",
+      "M13",
+      "M14",
+      "M15"
+    ],
+    "red_pattern": "row276 talk legacy inner timeout",
+    "node_seconds": 900,
+    "estimate_minutes": "12-18; no row276 measured runtime yet"
+  },
+  "limits": {
+    "files": {
+      "packages/cli/tests/case1-accept.test.mjs": 900,
+      "packages/cli/tests/case2-unit.test.mjs": 900
+    },
+    "basis": "No row276 timing yet; initial900s per whole file; Sage may adjust before CLEAR."
+  },
+  "shell_limits": {
+    "authority": [
+      "mos-1275",
+      "sage-2659"
+    ],
+    "scope": "Own Gander row196 receipt set documented for row278, plus the complete row278 run3 shell phase. Row253 old C4 results do not carry. Receipts choose timeouts only.",
+    "consulted_records": [
+      "ec1e7fad8:agents/gander/work/queue-196/evidence/suite-results-run1.json",
+      "ec1e7fad8:agents/gander/work/queue-196/evidence/suite-results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r2/mutants/results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r2/run2/base-results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r2/run2/killers/results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r3/gate/base-results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r3/gate/killers/results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r3/gate/sso-results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r4/gate/base-results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r4/gate/killers/results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r4/gate/sso-results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r4/gate/whole-results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r5/gate/whole-results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r5/resume/summary.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r5/resume/whole-results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r6/base-results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r6/first-attempt/results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r6/killers/results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r6/summary.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r6/whole-results.json",
+      "385a7194c:agents/gander/work/queue-278/run3/whole/results.json"
+    ],
+    "scripts": {
+      "scripts/test-auth.sh": {
+        "recorded_duration_seconds": 1.9081228229999543,
+        "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+        "limit_seconds": 126,
+        "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+        "script_sha256": "dd4720cb0cbecd2fc523a318f2222d21d257c8c5889996a3d69e522ee971a707",
+        "previous_maximum_seconds": 1.9081228229999543,
+        "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r6/whole-results.json",
+        "row278_run3_seconds": 0.816
+      },
+      "scripts/test-conductor.sh": {
+        "recorded_duration_seconds": 8.057173820000026,
+        "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+        "limit_seconds": 145,
+        "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+        "script_sha256": "da84150467494a4c979759f400854411bd93a7efce981139757bf526d688a23b",
+        "previous_maximum_seconds": 8.057173820000026,
+        "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r6/whole-results.json",
+        "row278_run3_seconds": 6.078
+      },
+      "scripts/test-config.sh": {
+        "recorded_duration_seconds": 3.1678915339999367,
+        "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+        "limit_seconds": 130,
+        "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+        "script_sha256": "3301c1fabf616bb961d62f6decd0a46dadb0f399b8ba7f3c2ca60023d2b24c78",
+        "previous_maximum_seconds": 3.1678915339999367,
+        "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r6/whole-results.json",
+        "row278_run3_seconds": 1.868
+      },
+      "scripts/test-discord.sh": {
+        "recorded_duration_seconds": 8.776727847000002,
+        "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+        "limit_seconds": 147,
+        "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+        "script_sha256": "a5dcf783c51a5d5d184a357f91ebf9fa1c4e054f0cb84a3d1d7668f6156e025e",
+        "previous_maximum_seconds": 8.776727847000002,
+        "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r5/resume/whole-results.json",
+        "row278_run3_seconds": 7.431
+      },
+      "scripts/test-extension-package.sh": {
+        "recorded_duration_seconds": 3.01285702399991,
+        "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+        "limit_seconds": 130,
+        "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+        "script_sha256": "5d7b687f16fd1a9414b229501177d530ba3af4eadd3cac319b33f38fdba9bf99",
+        "previous_maximum_seconds": 3.01285702399991,
+        "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r5/resume/whole-results.json",
+        "row278_run3_seconds": 1.366
+      },
+      "scripts/test-foundation.sh": {
+        "recorded_duration_seconds": 49.367,
+        "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+        "limit_seconds": 269,
+        "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+        "script_sha256": "2e11038e7f784ec4f539eb768f63bab0fab9c9940334388a1fe2d47ab9e2b008",
+        "previous_maximum_seconds": 39.70872647900006,
+        "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r5/resume/whole-results.json",
+        "row278_run3_seconds": 39.901
+      },
+      "scripts/test-land-work.sh": {
+        "recorded_duration_seconds": 16.854,
+        "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+        "limit_seconds": 171,
+        "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+        "script_sha256": "c9d1d5c9b006d5c12e5f796a9828361059f8e0410846fc55c070c0148b15cef4",
+        "previous_maximum_seconds": 12.623263413000037,
+        "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r5/resume/whole-results.json",
+        "row278_run3_seconds": 11.338
+      },
+      "scripts/test-queue.sh": {
+        "recorded_duration_seconds": 35.155,
+        "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+        "limit_seconds": 226,
+        "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+        "script_sha256": "c270f181d1fa8b6d42ff4131c339beba786a8fd620bb66f8afdcec05e8b10868",
+        "previous_maximum_seconds": 23.443742031000088,
+        "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r5/resume/whole-results.json",
+        "row278_run3_seconds": 21.158
+      },
+      "scripts/test-release.sh": {
+        "recorded_duration_seconds": 12.168674453999964,
+        "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+        "limit_seconds": 157,
+        "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+        "script_sha256": "be706dff832257bd4781abeabd19faa4ac16edf9a4af0c96457e33cf3bb6deb3",
+        "previous_maximum_seconds": 12.168674453999964,
+        "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r5/resume/whole-results.json",
+        "row278_run3_seconds": 2.67
+      },
+      "scripts/test-task.sh": {
+        "recorded_duration_seconds": 36.783798266,
+        "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+        "limit_seconds": 231,
+        "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+        "script_sha256": "10c4abb70bf9b83e617089b06a5436cc7fa6b866a176458b22128c3a15163f94",
+        "previous_maximum_seconds": 36.783798266,
+        "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r5/resume/whole-results.json",
+        "row278_run3_seconds": 13.843
+      }
+    }
+  },
+  "carry": "NONE"
+}
@@ -0,0 +1 @@
+/mnt/storage/scratch/tmp/gfhk
@@ -0,0 +1 @@
+Run1 void: new-test first-run ReferenceError read is not defined. Intended RED failed for the same setup reason and is invalid evidence; focused GREEN is the first unexpected red. No old test assertion ran. Syntax2checks passed. No whole files/mutants/shells ran. Placed test-only alias under sage2964/mos1272, no assertion/product change. Fresh run2 from top.
@@ -0,0 +1,257 @@
+{
+  "grant": "sage-2964",
+  "head": "f8d44db2f9153a0e76aebcd0288d0fc74bf7c108",
+  "base": "0cbe2e9b3",
+  "manifest": "4dab70cd251f5ae170856482bde923157ee667d342cd8ea412d242f707307303",
+  "scope": {
+    "whole_files": [
+      "packages/cli/tests/case1-accept.test.mjs",
+      "packages/cli/tests/case2-unit.test.mjs"
+    ],
+    "shells": [
+      "scripts/test-auth.sh",
+      "scripts/test-conductor.sh",
+      "scripts/test-config.sh",
+      "scripts/test-discord.sh",
+      "scripts/test-extension-package.sh",
+      "scripts/test-foundation.sh",
+      "scripts/test-land-work.sh",
+      "scripts/test-queue.sh",
+      "scripts/test-release.sh",
+      "scripts/test-task.sh"
+    ],
+    "mutants": [
+      "M1",
+      "M2",
+      "M3",
+      "M4",
+      "M5",
+      "M6",
+      "M7",
+      "M8",
+      "M9",
+      "M10",
+      "M11",
+      "M12",
+      "M13",
+      "M14",
+      "M15"
+    ],
+    "red_pattern": "row276 talk legacy inner timeout",
+    "node_seconds": 900,
+    "estimate_minutes": "12-18; no row276 measured runtime yet"
+  },
+  "limits": {
+    "files": {
+      "packages/cli/tests/case1-accept.test.mjs": 900,
+      "packages/cli/tests/case2-unit.test.mjs": 900
+    },
+    "basis": "No row276 timing yet; initial900s per whole file; Sage may adjust before CLEAR."
+  },
+  "shell_limits": {
+    "authority": [
+      "mos-1275",
+      "sage-2659"
+    ],
+    "scope": "Own Gander row196 receipt set documented for row278, plus the complete row278 run3 shell phase. Row253 old C4 results do not carry. Receipts choose timeouts only.",
+    "consulted_records": [
+      "ec1e7fad8:agents/gander/work/queue-196/evidence/suite-results-run1.json",
+      "ec1e7fad8:agents/gander/work/queue-196/evidence/suite-results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r2/mutants/results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r2/run2/base-results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r2/run2/killers/results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r3/gate/base-results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r3/gate/killers/results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r3/gate/sso-results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r4/gate/base-results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r4/gate/killers/results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r4/gate/sso-results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r4/gate/whole-results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r5/gate/whole-results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r5/resume/summary.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r5/resume/whole-results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r6/base-results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r6/first-attempt/results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r6/killers/results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r6/summary.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r6/whole-results.json",
+      "385a7194c:agents/gander/work/queue-278/run3/whole/results.json"
+    ],
+    "scripts": {
+      "scripts/test-auth.sh": {
+        "recorded_duration_seconds": 1.9081228229999543,
+        "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+        "limit_seconds": 126,
+        "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+        "script_sha256": "dd4720cb0cbecd2fc523a318f2222d21d257c8c5889996a3d69e522ee971a707",
+        "previous_maximum_seconds": 1.9081228229999543,
+        "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r6/whole-results.json",
+        "row278_run3_seconds": 0.816
+      },
+      "scripts/test-conductor.sh": {
+        "recorded_duration_seconds": 8.057173820000026,
+        "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+        "limit_seconds": 145,
+        "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+        "script_sha256": "da84150467494a4c979759f400854411bd93a7efce981139757bf526d688a23b",
+        "previous_maximum_seconds": 8.057173820000026,
+        "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r6/whole-results.json",
+        "row278_run3_seconds": 6.078
+      },
+      "scripts/test-config.sh": {
+        "recorded_duration_seconds": 3.1678915339999367,
+        "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+        "limit_seconds": 130,
+        "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+        "script_sha256": "3301c1fabf616bb961d62f6decd0a46dadb0f399b8ba7f3c2ca60023d2b24c78",
+        "previous_maximum_seconds": 3.1678915339999367,
+        "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r6/whole-results.json",
+        "row278_run3_seconds": 1.868
+      },
+      "scripts/test-discord.sh": {
+        "recorded_duration_seconds": 8.776727847000002,
+        "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+        "limit_seconds": 147,
+        "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+        "script_sha256": "a5dcf783c51a5d5d184a357f91ebf9fa1c4e054f0cb84a3d1d7668f6156e025e",
+        "previous_maximum_seconds": 8.776727847000002,
+        "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r5/resume/whole-results.json",
+        "row278_run3_seconds": 7.431
+      },
+      "scripts/test-extension-package.sh": {
+        "recorded_duration_seconds": 3.01285702399991,
+        "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+        "limit_seconds": 130,
+        "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+        "script_sha256": "5d7b687f16fd1a9414b229501177d530ba3af4eadd3cac319b33f38fdba9bf99",
+        "previous_maximum_seconds": 3.01285702399991,
+        "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r5/resume/whole-results.json",
+        "row278_run3_seconds": 1.366
+      },
+      "scripts/test-foundation.sh": {
+        "recorded_duration_seconds": 49.367,
+        "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+        "limit_seconds": 269,
+        "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+        "script_sha256": "2e11038e7f784ec4f539eb768f63bab0fab9c9940334388a1fe2d47ab9e2b008",
+        "previous_maximum_seconds": 39.70872647900006,
+        "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r5/resume/whole-results.json",
+        "row278_run3_seconds": 39.901
+      },
+      "scripts/test-land-work.sh": {
+        "recorded_duration_seconds": 16.854,
+        "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+        "limit_seconds": 171,
+        "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+        "script_sha256": "c9d1d5c9b006d5c12e5f796a9828361059f8e0410846fc55c070c0148b15cef4",
+        "previous_maximum_seconds": 12.623263413000037,
+        "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r5/resume/whole-results.json",
+        "row278_run3_seconds": 11.338
+      },
+      "scripts/test-queue.sh": {
+        "recorded_duration_seconds": 35.155,
+        "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+        "limit_seconds": 226,
+        "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+        "script_sha256": "c270f181d1fa8b6d42ff4131c339beba786a8fd620bb66f8afdcec05e8b10868",
+        "previous_maximum_seconds": 23.443742031000088,
+        "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r5/resume/whole-results.json",
+        "row278_run3_seconds": 21.158
+      },
+      "scripts/test-release.sh": {
+        "recorded_duration_seconds": 12.168674453999964,
+        "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+        "limit_seconds": 157,
+        "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+        "script_sha256": "be706dff832257bd4781abeabd19faa4ac16edf9a4af0c96457e33cf3bb6deb3",
+        "previous_maximum_seconds": 12.168674453999964,
+        "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r5/resume/whole-results.json",
+        "row278_run3_seconds": 2.67
+      },
+      "scripts/test-task.sh": {
+        "recorded_duration_seconds": 36.783798266,
+        "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+        "limit_seconds": 231,
+        "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+        "script_sha256": "10c4abb70bf9b83e617089b06a5436cc7fa6b866a176458b22128c3a15163f94",
+        "previous_maximum_seconds": 36.783798266,
+        "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r5/resume/whole-results.json",
+        "row278_run3_seconds": 13.843
+      }
+    }
+  },
+  "carry": "NONE"
+}
+
+START syntax-0
+END syntax-0
+START syntax-1
+END syntax-1
+START intended-red
+TAP version 13
+# Subtest: row276 talk legacy inner timeout cleans both sudo models
+not ok 1 - row276 talk legacy inner timeout cleans both sudo models
+  ---
+  duration_ms: 9.361046
+  type: 'test'
+  location: '/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:780:33'
+  failureType: 'testCodeFailure'
+  error: 'read is not defined'
+  code: 'ERR_TEST_FAILURE'
+  name: 'ReferenceError'
+  stack: |-
+    legacyBody (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:763:15)
+    legacyCall (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:767:63)
+    TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:786:35)
+    Test.runInAsyncScope (node:async_hooks:226:14)
+    Test.run (node:internal/test_runner/test:1402:25)
+    Test.start (node:internal/test_runner/test:1262:17)
+    startSubtestAfterBootstrap (node:internal/test_runner/harness:387:17)
+  ...
+1..1
+# tests 1
+# suites 0
+# pass 0
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 118.685125
+END intended-red
+START focused-green
+TAP version 13
+# Subtest: row276 talk legacy inner timeout cleans both sudo models
+not ok 1 - row276 talk legacy inner timeout cleans both sudo models
+  ---
+  duration_ms: 9.91699
+  type: 'test'
+  location: '/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:780:33'
+  failureType: 'testCodeFailure'
+  error: 'read is not defined'
+  code: 'ERR_TEST_FAILURE'
+  name: 'ReferenceError'
+  stack: |-
+    legacyBody (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:763:15)
+    legacyCall (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:767:63)
+    TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:786:35)
+    Test.runInAsyncScope (node:async_hooks:226:14)
+    Test.run (node:internal/test_runner/test:1402:25)
+    Test.start (node:internal/test_runner/test:1262:17)
+    startSubtestAfterBootstrap (node:internal/test_runner/harness:387:17)
+  ...
+1..1
+# tests 1
+# suites 0
+# pass 0
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 105.850018
+Traceback (most recent call last):
+  File "/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/agents/gander/work/queue-276/run1/execute.py", line 19, in <module>
+    step('focused-green',['node','--test','--test-reporter=tap','--test-name-pattern','row276 talk legacy inner timeout','packages/cli/tests/case1-accept.test.mjs'])
+  File "/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/agents/gander/work/queue-276/run1/execute.py", line 9, in step
+    if v['timeout'] or (v['code']==0 if red else v['code']!=0):raise RuntimeError('unexpected result: stop and classify '+name)
+                                                               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+RuntimeError: unexpected result: stop and classify focused-green
@@ -0,0 +1,26 @@
+import datetime,hashlib,importlib.util,json,os,pathlib,subprocess,sys,time
+sys.dont_write_bytecode=True
+r=pathlib.Path(__file__).resolve().parent;p=r.parent
+spec=importlib.util.spec_from_file_location('row276_driver',p/'driver.py');d=importlib.util.module_from_spec(spec);spec.loader.exec_module(d)
+start=time.monotonic();results=dict(grant='sage-2964',steps=[])
+(r/'start.txt').write_text(datetime.datetime.now(datetime.timezone.utc).isoformat()+'\n');print((r/'HEADER.json').read_text(),flush=True)
+def step(name,cmd,red=False,seconds=1200):
+ print('START '+name,flush=True);v=d.run(cmd,r/(name+'.log'),seconds=seconds);v.update(name=name,expected_red=red);results['steps'].append(v);results['wall_seconds']=round(time.monotonic()-start,3);(r/'results.json').write_text(json.dumps(results,indent=2)+'\n')
+ if v['timeout'] or (v['code']==0 if red else v['code']!=0):raise RuntimeError('unexpected result: stop and classify '+name)
+ print('END '+name,flush=True)
+for f in ['packages/cli/tests/case1-accept.test.mjs','packages/cli/tests/case-sudo-fixture.mjs']:
+ step('syntax-'+str(len(results['steps'])),['timeout','-k','10','60','node','--check',f],seconds=90)
+target=d.REPO/'scripts/case1-accept.sh';original=target.read_bytes();status=subprocess.check_output(['git','status','--porcelain','--untracked-files=no'],cwd=d.REPO)
+try:
+ target.write_bytes(subprocess.check_output(['git','show','48e450ce8:scripts/case1-accept.sh'],cwd=d.REPO))
+ step('intended-red',['node','--test','--test-reporter=tap','--test-name-pattern','row276 talk legacy inner timeout','packages/cli/tests/case1-accept.test.mjs'],red=True)
+finally:
+ target.write_bytes(original);assert target.read_bytes()==original;assert subprocess.check_output(['git','status','--porcelain','--untracked-files=no'],cwd=d.REPO)==status
+step('focused-green',['node','--test','--test-reporter=tap','--test-name-pattern','row276 talk legacy inner timeout','packages/cli/tests/case1-accept.test.mjs'])
+scope=json.loads((p/'GATE-SCOPE.json').read_text())
+for i,f in enumerate(scope['whole_files']):step('whole-'+str(i+1),['node','--test','--test-reporter=tap',f])
+step('changes-controller',[sys.executable,str(p/'driver.py'),'--grant','sage-2964','--out',str(r/'changes')],seconds=900)
+limits=json.loads((p/'SHELL-LIMITS.json').read_text())['scripts']
+for i,f in enumerate(scope['shells']):
+ limit=limits[f]['limit_seconds'];step('shell-'+str(i+1),['timeout','-k','10',str(limit),'bash',f],seconds=limit+30)
+(r/'end.txt').write_text(datetime.datetime.now(datetime.timezone.utc).isoformat()+'\n');print('GATE COMPLETE',flush=True)
@@ -0,0 +1 @@
+["timeout", "-k", "10", "900", "node", "--test", "--test-reporter=tap", "--test-name-pattern", "row276 talk legacy inner timeout", "packages/cli/tests/case1-accept.test.mjs"]
@@ -0,0 +1,29 @@
+TAP version 13
+# Subtest: row276 talk legacy inner timeout cleans both sudo models
+not ok 1 - row276 talk legacy inner timeout cleans both sudo models
+  ---
+  duration_ms: 9.91699
+  type: 'test'
+  location: '/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:780:33'
+  failureType: 'testCodeFailure'
+  error: 'read is not defined'
+  code: 'ERR_TEST_FAILURE'
+  name: 'ReferenceError'
+  stack: |-
+    legacyBody (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:763:15)
+    legacyCall (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:767:63)
+    TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:786:35)
+    Test.runInAsyncScope (node:async_hooks:226:14)
+    Test.run (node:internal/test_runner/test:1402:25)
+    Test.start (node:internal/test_runner/test:1262:17)
+    startSubtestAfterBootstrap (node:internal/test_runner/harness:387:17)
+  ...
+1..1
+# tests 1
+# suites 0
+# pass 0
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 105.850018
@@ -0,0 +1 @@
+["timeout", "-k", "10", "900", "node", "--test", "--test-reporter=tap", "--test-name-pattern", "row276 talk legacy inner timeout", "packages/cli/tests/case1-accept.test.mjs"]
@@ -0,0 +1,29 @@
+TAP version 13
+# Subtest: row276 talk legacy inner timeout cleans both sudo models
+not ok 1 - row276 talk legacy inner timeout cleans both sudo models
+  ---
+  duration_ms: 9.361046
+  type: 'test'
+  location: '/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:780:33'
+  failureType: 'testCodeFailure'
+  error: 'read is not defined'
+  code: 'ERR_TEST_FAILURE'
+  name: 'ReferenceError'
+  stack: |-
+    legacyBody (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:763:15)
+    legacyCall (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:767:63)
+    TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:786:35)
+    Test.runInAsyncScope (node:async_hooks:226:14)
+    Test.run (node:internal/test_runner/test:1402:25)
+    Test.start (node:internal/test_runner/test:1262:17)
+    startSubtestAfterBootstrap (node:internal/test_runner/harness:387:17)
+  ...
+1..1
+# tests 1
+# suites 0
+# pass 0
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 118.685125
@@ -0,0 +1,38 @@
+{
+  "grant": "sage-2964",
+  "steps": [
+    {
+      "code": 0,
+      "timeout": false,
+      "seconds": 0.064,
+      "log": "/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/agents/gander/work/queue-276/run1/syntax-0.log",
+      "name": "syntax-0",
+      "expected_red": false
+    },
+    {
+      "code": 0,
+      "timeout": false,
+      "seconds": 0.064,
+      "log": "/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/agents/gander/work/queue-276/run1/syntax-1.log",
+      "name": "syntax-1",
+      "expected_red": false
+    },
+    {
+      "code": 1,
+      "timeout": false,
+      "seconds": 0.214,
+      "log": "/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/agents/gander/work/queue-276/run1/intended-red.log",
+      "name": "intended-red",
+      "expected_red": true
+    },
+    {
+      "code": 1,
+      "timeout": false,
+      "seconds": 0.164,
+      "log": "/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/agents/gander/work/queue-276/run1/focused-green.log",
+      "name": "focused-green",
+      "expected_red": false
+    }
+  ],
+  "wall_seconds": 5.977
+}
@@ -0,0 +1 @@
+2026-10-22T19:52:30.155247+00:00
@@ -0,0 +1 @@
+["timeout", "-k", "10", "60", "node", "--check", "packages/cli/tests/case1-accept.test.mjs"]
@@ -0,0 +1 @@
+["timeout", "-k", "10", "60", "node", "--check", "packages/cli/tests/case-sudo-fixture.mjs"]
@@ -0,0 +1,184 @@
+{
+  "grant": "sage-2964",
+  "head": "3c4c463da064f495d0315324299c4dabedd98658",
+  "base": "0cbe2e9b3",
+  "manifest": "ee573455115fa148981dcbd097058b7071d17baba18137945f4f2191ea5f1b11",
+  "scope": {
+    "whole_files": [
+      "packages/cli/tests/case1-accept.test.mjs",
+      "packages/cli/tests/case2-unit.test.mjs"
+    ],
+    "shells": [
+      "scripts/test-auth.sh",
+      "scripts/test-conductor.sh",
+      "scripts/test-config.sh",
+      "scripts/test-discord.sh",
+      "scripts/test-extension-package.sh",
+      "scripts/test-foundation.sh",
+      "scripts/test-land-work.sh",
+      "scripts/test-queue.sh",
+      "scripts/test-release.sh",
+      "scripts/test-task.sh"
+    ],
+    "mutants": [
+      "M1",
+      "M2",
+      "M3",
+      "M4",
+      "M5",
+      "M6",
+      "M7",
+      "M8",
+      "M9",
+      "M10",
+      "M11",
+      "M12",
+      "M13",
+      "M14",
+      "M15"
+    ],
+    "red_pattern": "row276 talk legacy inner timeout",
+    "node_seconds": 900,
+    "estimate_minutes": "12-18; no row276 measured runtime yet"
+  },
+  "limits": {
+    "files": {
+      "packages/cli/tests/case1-accept.test.mjs": 900,
+      "packages/cli/tests/case2-unit.test.mjs": 900
+    },
+    "basis": "No row276 timing yet; initial900s per whole file; Sage may adjust before CLEAR."
+  },
+  "shell_limits": {
+    "authority": [
+      "mos-1275",
+      "sage-2659"
+    ],
+    "scope": "Own Gander row196 receipt set documented for row278, plus the complete row278 run3 shell phase. Row253 old C4 results do not carry. Receipts choose timeouts only.",
+    "consulted_records": [
+      "ec1e7fad8:agents/gander/work/queue-196/evidence/suite-results-run1.json",
+      "ec1e7fad8:agents/gander/work/queue-196/evidence/suite-results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r2/mutants/results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r2/run2/base-results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r2/run2/killers/results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r3/gate/base-results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r3/gate/killers/results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r3/gate/sso-results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r4/gate/base-results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r4/gate/killers/results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r4/gate/sso-results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r4/gate/whole-results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r5/gate/whole-results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r5/resume/summary.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r5/resume/whole-results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r6/base-results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r6/first-attempt/results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r6/killers/results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r6/summary.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r6/whole-results.json",
+      "385a7194c:agents/gander/work/queue-278/run3/whole/results.json"
+    ],
+    "scripts": {
+      "scripts/test-auth.sh": {
+        "recorded_duration_seconds": 1.9081228229999543,
+        "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+        "limit_seconds": 126,
+        "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+        "script_sha256": "dd4720cb0cbecd2fc523a318f2222d21d257c8c5889996a3d69e522ee971a707",
+        "previous_maximum_seconds": 1.9081228229999543,
+        "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r6/whole-results.json",
+        "row278_run3_seconds": 0.816
+      },
+      "scripts/test-conductor.sh": {
+        "recorded_duration_seconds": 8.057173820000026,
+        "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+        "limit_seconds": 145,
+        "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+        "script_sha256": "da84150467494a4c979759f400854411bd93a7efce981139757bf526d688a23b",
+        "previous_maximum_seconds": 8.057173820000026,
+        "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r6/whole-results.json",
+        "row278_run3_seconds": 6.078
+      },
+      "scripts/test-config.sh": {
+        "recorded_duration_seconds": 3.1678915339999367,
+        "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+        "limit_seconds": 130,
+        "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+        "script_sha256": "3301c1fabf616bb961d62f6decd0a46dadb0f399b8ba7f3c2ca60023d2b24c78",
+        "previous_maximum_seconds": 3.1678915339999367,
+        "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r6/whole-results.json",
+        "row278_run3_seconds": 1.868
+      },
+      "scripts/test-discord.sh": {
+        "recorded_duration_seconds": 8.776727847000002,
+        "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+        "limit_seconds": 147,
+        "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+        "script_sha256": "a5dcf783c51a5d5d184a357f91ebf9fa1c4e054f0cb84a3d1d7668f6156e025e",
+        "previous_maximum_seconds": 8.776727847000002,
+        "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r5/resume/whole-results.json",
+        "row278_run3_seconds": 7.431
+      },
+      "scripts/test-extension-package.sh": {
+        "recorded_duration_seconds": 3.01285702399991,
+        "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+        "limit_seconds": 130,
+        "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+        "script_sha256": "5d7b687f16fd1a9414b229501177d530ba3af4eadd3cac319b33f38fdba9bf99",
+        "previous_maximum_seconds": 3.01285702399991,
+        "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r5/resume/whole-results.json",
+        "row278_run3_seconds": 1.366
+      },
+      "scripts/test-foundation.sh": {
+        "recorded_duration_seconds": 49.367,
+        "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+        "limit_seconds": 269,
+        "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+        "script_sha256": "2e11038e7f784ec4f539eb768f63bab0fab9c9940334388a1fe2d47ab9e2b008",
+        "previous_maximum_seconds": 39.70872647900006,
+        "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r5/resume/whole-results.json",
+        "row278_run3_seconds": 39.901
+      },
+      "scripts/test-land-work.sh": {
+        "recorded_duration_seconds": 16.854,
+        "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+        "limit_seconds": 171,
+        "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+        "script_sha256": "c9d1d5c9b006d5c12e5f796a9828361059f8e0410846fc55c070c0148b15cef4",
+        "previous_maximum_seconds": 12.623263413000037,
+        "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r5/resume/whole-results.json",
+        "row278_run3_seconds": 11.338
+      },
+      "scripts/test-queue.sh": {
+        "recorded_duration_seconds": 35.155,
+        "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+        "limit_seconds": 226,
+        "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+        "script_sha256": "c270f181d1fa8b6d42ff4131c339beba786a8fd620bb66f8afdcec05e8b10868",
+        "previous_maximum_seconds": 23.443742031000088,
+        "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r5/resume/whole-results.json",
+        "row278_run3_seconds": 21.158
+      },
+      "scripts/test-release.sh": {
+        "recorded_duration_seconds": 12.168674453999964,
+        "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+        "limit_seconds": 157,
+        "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+        "script_sha256": "be706dff832257bd4781abeabd19faa4ac16edf9a4af0c96457e33cf3bb6deb3",
+        "previous_maximum_seconds": 12.168674453999964,
+        "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r5/resume/whole-results.json",
+        "row278_run3_seconds": 2.67
+      },
+      "scripts/test-task.sh": {
+        "recorded_duration_seconds": 36.783798266,
+        "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+        "limit_seconds": 231,
+        "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+        "script_sha256": "10c4abb70bf9b83e617089b06a5436cc7fa6b866a176458b22128c3a15163f94",
+        "previous_maximum_seconds": 36.783798266,
+        "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r5/resume/whole-results.json",
+        "row278_run3_seconds": 13.843
+      }
+    }
+  },
+  "carry": "NONE; run1 void"
+}
@@ -0,0 +1,7 @@
+# Run2 stopped, unplaced
+
+Grant sage-2964. HEAD3c4c463da, manifestee573455. Two syntax preflights passed. Intended RED failed on the exact missing-supervisor-block assertion and the script was restored byte-identically. Focused GREEN failed its exact stderr assertion at case1-accept.test.mjs:789. Expected only `case1-accept: talk inner-timeout\n`; received a vanished `/proc/1540171/stat` diagnostic first. No timeout. No whole files, mutants or shells ran. This is the second unexpected red; no repair or rerun is authorized pending Mos placement. Report gander-0140 went directly to Mos, Sage and Duckworth; slot returned.
+
+Static lead only: existing supervisor stat_fields redirects stdin before stderr. Duckworth0113 N5 identified that ordering. This row preserved the supervisor bytes. No product or assertion change made after this stop.
+
+Read-only sweep:0 run leftovers,9 pre-existing MCP/npm/code-mode processes excluded by pre-run start ticks (19:49:17..29 UTC). Initial raw sweep and final classification retained. No processes signalled. All run2 evidence retained; no passing gate claim.
@@ -0,0 +1 @@
+/mnt/storage/scratch/tmp/gTa6
@@ -0,0 +1,273 @@
+{
+  "grant": "sage-2964",
+  "head": "3c4c463da064f495d0315324299c4dabedd98658",
+  "base": "0cbe2e9b3",
+  "manifest": "ee573455115fa148981dcbd097058b7071d17baba18137945f4f2191ea5f1b11",
+  "scope": {
+    "whole_files": [
+      "packages/cli/tests/case1-accept.test.mjs",
+      "packages/cli/tests/case2-unit.test.mjs"
+    ],
+    "shells": [
+      "scripts/test-auth.sh",
+      "scripts/test-conductor.sh",
+      "scripts/test-config.sh",
+      "scripts/test-discord.sh",
+      "scripts/test-extension-package.sh",
+      "scripts/test-foundation.sh",
+      "scripts/test-land-work.sh",
+      "scripts/test-queue.sh",
+      "scripts/test-release.sh",
+      "scripts/test-task.sh"
+    ],
+    "mutants": [
+      "M1",
+      "M2",
+      "M3",
+      "M4",
+      "M5",
+      "M6",
+      "M7",
+      "M8",
+      "M9",
+      "M10",
+      "M11",
+      "M12",
+      "M13",
+      "M14",
+      "M15"
+    ],
+    "red_pattern": "row276 talk legacy inner timeout",
+    "node_seconds": 900,
+    "estimate_minutes": "12-18; no row276 measured runtime yet"
+  },
+  "limits": {
+    "files": {
+      "packages/cli/tests/case1-accept.test.mjs": 900,
+      "packages/cli/tests/case2-unit.test.mjs": 900
+    },
+    "basis": "No row276 timing yet; initial900s per whole file; Sage may adjust before CLEAR."
+  },
+  "shell_limits": {
+    "authority": [
+      "mos-1275",
+      "sage-2659"
+    ],
+    "scope": "Own Gander row196 receipt set documented for row278, plus the complete row278 run3 shell phase. Row253 old C4 results do not carry. Receipts choose timeouts only.",
+    "consulted_records": [
+      "ec1e7fad8:agents/gander/work/queue-196/evidence/suite-results-run1.json",
+      "ec1e7fad8:agents/gander/work/queue-196/evidence/suite-results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r2/mutants/results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r2/run2/base-results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r2/run2/killers/results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r3/gate/base-results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r3/gate/killers/results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r3/gate/sso-results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r4/gate/base-results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r4/gate/killers/results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r4/gate/sso-results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r4/gate/whole-results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r5/gate/whole-results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r5/resume/summary.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r5/resume/whole-results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r6/base-results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r6/first-attempt/results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r6/killers/results.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r6/summary.json",
+      "ec1e7fad8:agents/gander/work/queue-196/r6/whole-results.json",
+      "385a7194c:agents/gander/work/queue-278/run3/whole/results.json"
+    ],
+    "scripts": {
+      "scripts/test-auth.sh": {
+        "recorded_duration_seconds": 1.9081228229999543,
+        "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+        "limit_seconds": 126,
+        "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+        "script_sha256": "dd4720cb0cbecd2fc523a318f2222d21d257c8c5889996a3d69e522ee971a707",
+        "previous_maximum_seconds": 1.9081228229999543,
+        "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r6/whole-results.json",
+        "row278_run3_seconds": 0.816
+      },
+      "scripts/test-conductor.sh": {
+        "recorded_duration_seconds": 8.057173820000026,
+        "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+        "limit_seconds": 145,
+        "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+        "script_sha256": "da84150467494a4c979759f400854411bd93a7efce981139757bf526d688a23b",
+        "previous_maximum_seconds": 8.057173820000026,
+        "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r6/whole-results.json",
+        "row278_run3_seconds": 6.078
+      },
+      "scripts/test-config.sh": {
+        "recorded_duration_seconds": 3.1678915339999367,
+        "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+        "limit_seconds": 130,
+        "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+        "script_sha256": "3301c1fabf616bb961d62f6decd0a46dadb0f399b8ba7f3c2ca60023d2b24c78",
+        "previous_maximum_seconds": 3.1678915339999367,
+        "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r6/whole-results.json",
+        "row278_run3_seconds": 1.868
+      },
+      "scripts/test-discord.sh": {
+        "recorded_duration_seconds": 8.776727847000002,
+        "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+        "limit_seconds": 147,
+        "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+        "script_sha256": "a5dcf783c51a5d5d184a357f91ebf9fa1c4e054f0cb84a3d1d7668f6156e025e",
+        "previous_maximum_seconds": 8.776727847000002,
+        "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r5/resume/whole-results.json",
+        "row278_run3_seconds": 7.431
+      },
+      "scripts/test-extension-package.sh": {
+        "recorded_duration_seconds": 3.01285702399991,
+        "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+        "limit_seconds": 130,
+        "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+        "script_sha256": "5d7b687f16fd1a9414b229501177d530ba3af4eadd3cac319b33f38fdba9bf99",
+        "previous_maximum_seconds": 3.01285702399991,
+        "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r5/resume/whole-results.json",
+        "row278_run3_seconds": 1.366
+      },
+      "scripts/test-foundation.sh": {
+        "recorded_duration_seconds": 49.367,
+        "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+        "limit_seconds": 269,
+        "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+        "script_sha256": "2e11038e7f784ec4f539eb768f63bab0fab9c9940334388a1fe2d47ab9e2b008",
+        "previous_maximum_seconds": 39.70872647900006,
+        "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r5/resume/whole-results.json",
+        "row278_run3_seconds": 39.901
+      },
+      "scripts/test-land-work.sh": {
+        "recorded_duration_seconds": 16.854,
+        "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+        "limit_seconds": 171,
+        "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+        "script_sha256": "c9d1d5c9b006d5c12e5f796a9828361059f8e0410846fc55c070c0148b15cef4",
+        "previous_maximum_seconds": 12.623263413000037,
+        "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r5/resume/whole-results.json",
+        "row278_run3_seconds": 11.338
+      },
+      "scripts/test-queue.sh": {
+        "recorded_duration_seconds": 35.155,
+        "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+        "limit_seconds": 226,
+        "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+        "script_sha256": "c270f181d1fa8b6d42ff4131c339beba786a8fd620bb66f8afdcec05e8b10868",
+        "previous_maximum_seconds": 23.443742031000088,
+        "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r5/resume/whole-results.json",
+        "row278_run3_seconds": 21.158
+      },
+      "scripts/test-release.sh": {
+        "recorded_duration_seconds": 12.168674453999964,
+        "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+        "limit_seconds": 157,
+        "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+        "script_sha256": "be706dff832257bd4781abeabd19faa4ac16edf9a4af0c96457e33cf3bb6deb3",
+        "previous_maximum_seconds": 12.168674453999964,
+        "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r5/resume/whole-results.json",
+        "row278_run3_seconds": 2.67
+      },
+      "scripts/test-task.sh": {
+        "recorded_duration_seconds": 36.783798266,
+        "receipt": "3b91cfdaf:agents/gander/work/queue-253/run5-gate/SUMMARY.json (with earlier maximum retained)",
+        "limit_seconds": 231,
+        "derivation": "ceil(3 * longest successful whole-file receipt) + 120s headroom",
+        "script_sha256": "10c4abb70bf9b83e617089b06a5436cc7fa6b866a176458b22128c3a15163f94",
+        "previous_maximum_seconds": 36.783798266,
+        "previous_receipt": "ec1e7fad8:agents/gander/work/queue-196/r5/resume/whole-results.json",
+        "row278_run3_seconds": 13.843
+      }
+    }
+  },
+  "carry": "NONE; run1 void"
+}
+
+START syntax-0
+END syntax-0
+START syntax-1
+END syntax-1
+START intended-red
+TAP version 13
+# Subtest: row276 talk legacy inner timeout cleans both sudo models
+not ok 1 - row276 talk legacy inner timeout cleans both sudo models
+  ---
+  duration_ms: 10.867344
+  type: 'test'
+  location: '/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:781:33'
+  failureType: 'testCodeFailure'
+  error: 'legacy supervisor block exists'
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: true
+  actual: false
+  operator: '=='
+  stack: |-
+    legacyBody (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:765:9)
+    legacyCall (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:768:63)
+    TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:787:35)
+    Test.runInAsyncScope (node:async_hooks:226:14)
+    Test.run (node:internal/test_runner/test:1402:25)
+    Test.start (node:internal/test_runner/test:1262:17)
+    startSubtestAfterBootstrap (node:internal/test_runner/harness:387:17)
+  ...
+1..1
+# tests 1
+# suites 0
+# pass 0
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 137.286411
+END intended-red
+START focused-green
+TAP version 13
+# Subtest: row276 talk legacy inner timeout cleans both sudo models
+not ok 1 - row276 talk legacy inner timeout cleans both sudo models
+  ---
+  duration_ms: 933.722299
+  type: 'test'
+  location: '/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:781:33'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+    + actual - expected
+    
+    + '--: line 7: /proc/1540171/stat: No such file or directory\n' +
+    +   'case1-accept: talk inner-timeout\n'
+    - 'case1-accept: talk inner-timeout\n'
+    
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: |-
+    case1-accept: talk inner-timeout
+    
+  actual: |-
+    --: line 7: /proc/1540171/stat: No such file or directory
+    case1-accept: talk inner-timeout
+    
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:789:10)
+    Test.runInAsyncScope (node:async_hooks:226:14)
+    Test.run (node:internal/test_runner/test:1402:25)
+    Test.start (node:internal/test_runner/test:1262:17)
+    startSubtestAfterBootstrap (node:internal/test_runner/harness:387:17)
+  ...
+1..1
+# tests 1
+# suites 0
+# pass 0
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 1030.268812
+Traceback (most recent call last):
+  File "/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/agents/gander/work/queue-276/run2/execute.py", line 20, in <module>
+    step('focused-green',['node','--test','--test-reporter=tap','--test-name-pattern','row276 talk legacy inner timeout','packages/cli/tests/case1-accept.test.mjs'])
+  File "/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/agents/gander/work/queue-276/run2/execute.py", line 9, in step
+    if v['timeout'] or (v['code']==0 if red else v['code']!=0):raise RuntimeError('unexpected result: stop and classify '+name)
+                                                               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+RuntimeError: unexpected result: stop and classify focused-green
@@ -0,0 +1 @@
+2026-10-22T19:59:17.245959+00:00
@@ -0,0 +1,27 @@
+import datetime,hashlib,importlib.util,json,os,pathlib,subprocess,sys,time
+sys.dont_write_bytecode=True
+r=pathlib.Path(__file__).resolve().parent;p=r.parent
+spec=importlib.util.spec_from_file_location('row276_driver',p/'driver.py');d=importlib.util.module_from_spec(spec);spec.loader.exec_module(d)
+start=time.monotonic();results=dict(grant='sage-2964',steps=[])
+(r/'start.txt').write_text(datetime.datetime.now(datetime.timezone.utc).isoformat()+'\n');print((r/'HEADER.json').read_text(),flush=True)
+def step(name,cmd,red=False,seconds=1200):
+ print('START '+name,flush=True);v=d.run(cmd,r/(name+'.log'),seconds=seconds);v.update(name=name,expected_red=red);results['steps'].append(v);results['wall_seconds']=round(time.monotonic()-start,3);(r/'results.json').write_text(json.dumps(results,indent=2)+'\n')
+ if v['timeout'] or (v['code']==0 if red else v['code']!=0):raise RuntimeError('unexpected result: stop and classify '+name)
+ if red and 'legacy supervisor block exists' not in (r/(name+'.log')).read_text():raise RuntimeError('wrong RED reason: stop and classify')
+ print('END '+name,flush=True)
+for f in ['packages/cli/tests/case1-accept.test.mjs','packages/cli/tests/case-sudo-fixture.mjs']:
+ step('syntax-'+str(len(results['steps'])),['timeout','-k','10','60','node','--check',f],seconds=90)
+target=d.REPO/'scripts/case1-accept.sh';original=target.read_bytes();status=subprocess.check_output(['git','status','--porcelain','--untracked-files=no'],cwd=d.REPO)
+try:
+ target.write_bytes(subprocess.check_output(['git','show','48e450ce8:scripts/case1-accept.sh'],cwd=d.REPO))
+ step('intended-red',['node','--test','--test-reporter=tap','--test-name-pattern','row276 talk legacy inner timeout','packages/cli/tests/case1-accept.test.mjs'],red=True)
+finally:
+ target.write_bytes(original);assert target.read_bytes()==original;assert subprocess.check_output(['git','status','--porcelain','--untracked-files=no'],cwd=d.REPO)==status
+step('focused-green',['node','--test','--test-reporter=tap','--test-name-pattern','row276 talk legacy inner timeout','packages/cli/tests/case1-accept.test.mjs'])
+scope=json.loads((p/'GATE-SCOPE.json').read_text())
+for i,f in enumerate(scope['whole_files']):step('whole-'+str(i+1),['node','--test','--test-reporter=tap',f])
+step('changes-controller',[sys.executable,str(p/'driver.py'),'--grant','sage-2964','--out',str(r/'changes')],seconds=900)
+limits=json.loads((p/'SHELL-LIMITS.json').read_text())['scripts']
+for i,f in enumerate(scope['shells']):
+ limit=limits[f]['limit_seconds'];step('shell-'+str(i+1),['timeout','-k','10',str(limit),'bash',f],seconds=limit+30)
+(r/'end.txt').write_text(datetime.datetime.now(datetime.timezone.utc).isoformat()+'\n');print('GATE COMPLETE',flush=True)
@@ -0,0 +1 @@
+["timeout", "-k", "10", "900", "node", "--test", "--test-reporter=tap", "--test-name-pattern", "row276 talk legacy inner timeout", "packages/cli/tests/case1-accept.test.mjs"]
@@ -0,0 +1,42 @@
+TAP version 13
+# Subtest: row276 talk legacy inner timeout cleans both sudo models
+not ok 1 - row276 talk legacy inner timeout cleans both sudo models
+  ---
+  duration_ms: 933.722299
+  type: 'test'
+  location: '/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:781:33'
+  failureType: 'testCodeFailure'
+  error: |-
+    Expected values to be strictly equal:
+    + actual - expected
+    
+    + '--: line 7: /proc/1540171/stat: No such file or directory\n' +
+    +   'case1-accept: talk inner-timeout\n'
+    - 'case1-accept: talk inner-timeout\n'
+    
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: |-
+    case1-accept: talk inner-timeout
+    
+  actual: |-
+    --: line 7: /proc/1540171/stat: No such file or directory
+    case1-accept: talk inner-timeout
+    
+  operator: 'strictEqual'
+  stack: |-
+    TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:789:10)
+    Test.runInAsyncScope (node:async_hooks:226:14)
+    Test.run (node:internal/test_runner/test:1402:25)
+    Test.start (node:internal/test_runner/test:1262:17)
+    startSubtestAfterBootstrap (node:internal/test_runner/harness:387:17)
+  ...
+1..1
+# tests 1
+# suites 0
+# pass 0
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 1030.268812
@@ -0,0 +1 @@
+["timeout", "-k", "10", "900", "node", "--test", "--test-reporter=tap", "--test-name-pattern", "row276 talk legacy inner timeout", "packages/cli/tests/case1-accept.test.mjs"]
@@ -0,0 +1,32 @@
+TAP version 13
+# Subtest: row276 talk legacy inner timeout cleans both sudo models
+not ok 1 - row276 talk legacy inner timeout cleans both sudo models
+  ---
+  duration_ms: 10.867344
+  type: 'test'
+  location: '/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:781:33'
+  failureType: 'testCodeFailure'
+  error: 'legacy supervisor block exists'
+  code: 'ERR_ASSERTION'
+  name: 'AssertionError'
+  expected: true
+  actual: false
+  operator: '=='
+  stack: |-
+    legacyBody (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:765:9)
+    legacyCall (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:768:63)
+    TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:787:35)
+    Test.runInAsyncScope (node:async_hooks:226:14)
+    Test.run (node:internal/test_runner/test:1402:25)
+    Test.start (node:internal/test_runner/test:1262:17)
+    startSubtestAfterBootstrap (node:internal/test_runner/harness:387:17)
+  ...
+1..1
+# tests 1
+# suites 0
+# pass 0
+# fail 1
+# cancelled 0
+# skipped 0
+# todo 0
+# duration_ms 137.286411
@@ -0,0 +1,38 @@
+{
+  "grant": "sage-2964",
+  "steps": [
+    {
+      "code": 0,
+      "timeout": false,
+      "seconds": 0.064,
+      "log": "/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/agents/gander/work/queue-276/run2/syntax-0.log",
+      "name": "syntax-0",
+      "expected_red": false
+    },
+    {
+      "code": 0,
+      "timeout": false,
+      "seconds": 0.064,
+      "log": "/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/agents/gander/work/queue-276/run2/syntax-1.log",
+      "name": "syntax-1",
+      "expected_red": false
+    },
+    {
+      "code": 1,
+      "timeout": false,
+      "seconds": 0.214,
+      "log": "/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/agents/gander/work/queue-276/run2/intended-red.log",
+      "name": "intended-red",
+      "expected_red": true
+    },
+    {
+      "code": 1,
+      "timeout": false,
+      "seconds": 1.116,
+      "log": "/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/agents/gander/work/queue-276/run2/focused-green.log",
+      "name": "focused-green",
+      "expected_red": false
+    }
+  ],
+  "wall_seconds": 6.99
+}
@@ -0,0 +1 @@
+2026-10-22T19:58:15.792523+00:00
@@ -0,0 +1,62 @@
+{
+  "timestamp": "2026-10-22T19:58:35.030134+00:00",
+  "count": 9,
+  "remaining": [
+    {
+      "pid": 1425557,
+      "comm": "npm exec @model",
+      "cwd": "/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196",
+      "started_utc": "2026-10-22T19:49:17.210000+00:00"
+    },
+    {
+      "pid": 1425563,
+      "comm": "node-MainThread",
+      "cwd": "/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196",
+      "started_utc": "2026-10-22T19:49:17.230000+00:00"
+    },
+    {
+      "pid": 1425568,
+      "comm": "npm exec @playw",
+      "cwd": "/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196",
+      "started_utc": "2026-10-22T19:49:17.240000+00:00"
+    },
+    {
+      "pid": 1425580,
+      "comm": "npm exec chrome",
+      "cwd": "/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196",
+      "started_utc": "2026-10-22T19:49:17.240000+00:00"
+    },
+    {
+      "pid": 1425769,
+      "comm": "chrome-devtools",
+      "cwd": "/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196",
+      "started_utc": "2026-10-22T19:49:18.330000+00:00"
+    },
+    {
+      "pid": 1425776,
+      "comm": "node-MainThread",
+      "cwd": "/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196",
+      "started_utc": "2026-10-22T19:49:18.360000+00:00"
+    },
+    {
+      "pid": 1425783,
+      "comm": "node-MainThread",
+      "cwd": "/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196",
+      "started_utc": "2026-10-22T19:49:18.440000+00:00"
+    },
+    {
+      "pid": 1425797,
+      "comm": "node-MainThread",
+      "cwd": "/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196",
+      "started_utc": "2026-10-22T19:49:18.660000+00:00"
+    },
+    {
+      "pid": 1426427,
+      "comm": "codex-code-mode",
+      "cwd": "/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196",
+      "started_utc": "2026-10-22T19:49:29.150000+00:00"
+    }
+  ],
+  "excluded_preexisting_infrastructure": [],
+  "note": "Read-only /proc cwd sweep, including deleted cwd under this run TMPDIR. Own ancestry excluded. Only known MCP/npm/code-mode infrastructure PIDs with pre-run start ticks are excluded. No signalling."
+}
@@ -0,0 +1,62 @@
+{
+  "timestamp": "2026-10-22T19:58:41.939818+00:00",
+  "count": 0,
+  "remaining": [],
+  "excluded_preexisting_infrastructure": [
+    {
+      "pid": 1425557,
+      "comm": "npm exec @model",
+      "cwd": "/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196",
+      "started_utc": "2026-10-22T19:49:17.210000+00:00"
+    },
+    {
+      "pid": 1425563,
+      "comm": "node-MainThread",
+      "cwd": "/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196",
+      "started_utc": "2026-10-22T19:49:17.230000+00:00"
+    },
+    {
+      "pid": 1425568,
+      "comm": "npm exec @playw",
+      "cwd": "/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196",
+      "started_utc": "2026-10-22T19:49:17.240000+00:00"
+    },
+    {
+      "pid": 1425580,
+      "comm": "npm exec chrome",
+      "cwd": "/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196",
+      "started_utc": "2026-10-22T19:49:17.240000+00:00"
+    },
+    {
+      "pid": 1425769,
+      "comm": "chrome-devtools",
+      "cwd": "/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196",
+      "started_utc": "2026-10-22T19:49:18.330000+00:00"
+    },
+    {
+      "pid": 1425776,
+      "comm": "node-MainThread",
+      "cwd": "/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196",
+      "started_utc": "2026-10-22T19:49:18.360000+00:00"
+    },
+    {
+      "pid": 1425783,
+      "comm": "node-MainThread",
+      "cwd": "/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196",
+      "started_utc": "2026-10-22T19:49:18.440000+00:00"
+    },
+    {
+      "pid": 1425797,
+      "comm": "node-MainThread",
+      "cwd": "/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196",
+      "started_utc": "2026-10-22T19:49:18.660000+00:00"
+    },
+    {
+      "pid": 1426427,
+      "comm": "codex-code-mode",
+      "cwd": "/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196",
+      "started_utc": "2026-10-22T19:49:29.150000+00:00"
+    }
+  ],
+  "note": "Read-only /proc cwd sweep, including deleted cwd under this run TMPDIR. Own ancestry excluded. Only known MCP/npm/code-mode infrastructure PIDs with pre-run start ticks are excluded. No signalling."
+}
@@ -0,0 +1,34 @@
+#!/usr/bin/env python3
+"""Read-only sweep of this worktree and focused TMPDIR, including deleted cwd."""
+import datetime
+import json
+import os
+from pathlib import Path
+HERE=Path(__file__).resolve().parent.parent
+REPO=HERE.parents[3]
+RUN=HERE/'run2'
+def main():
+    tmp=Path((RUN/'TMPDIR').read_text().strip())
+    started=datetime.datetime.fromisoformat((RUN/'start.txt').read_text().strip().replace('Z','+00:00')).timestamp()
+    boot=int(next(s.split()[1] for s in Path('/proc/stat').read_text().splitlines() if s.startswith('btime ')))
+    ancestors=set();pid=os.getpid()
+    while pid and pid not in ancestors:
+        ancestors.add(pid)
+        try:pid=int(next(s.split(':')[1] for s in Path(f'/proc/{pid}/status').read_text().splitlines() if s.startswith('PPid:')))
+        except (OSError,StopIteration):break
+    known={1425557,1425563,1425568,1425580,1425769,1425776,1425783,1425797,1426427,2880281,2880282,2880283,2880284,2880445,2880487,2880537,2883251,2880439,2469277,2469278,2469279,2469292,2469478,2469485,2469518,2469601,2470486}
+    remaining=[];excluded=[]
+    for proc in Path('/proc').iterdir():
+        if not proc.name.isdigit() or int(proc.name) in ancestors:continue
+        try:
+            rawcwd=os.readlink(proc/'cwd');cwd=Path(rawcwd.removesuffix(' (deleted)'))
+            if not(cwd==REPO or REPO in cwd.parents or cwd==tmp or tmp in cwd.parents):continue
+            stat=(proc/'stat').read_text().rsplit(') ',1)[1].split()
+            stamp=boot+int(stat[19])/os.sysconf('SC_CLK_TCK')
+            item=dict(pid=int(proc.name),comm=(proc/'comm').read_text().strip(),cwd=rawcwd,started_utc=datetime.datetime.fromtimestamp(stamp,datetime.timezone.utc).isoformat())
+            if int(proc.name) in known and stamp<started:excluded.append(item)
+            else:remaining.append(item)
+        except (OSError,ValueError,IndexError):continue
+    result=dict(timestamp=datetime.datetime.now(datetime.timezone.utc).isoformat(),count=len(remaining),remaining=remaining,excluded_preexisting_infrastructure=excluded,note='Read-only /proc cwd sweep, including deleted cwd under this run TMPDIR. Own ancestry excluded. Only known MCP/npm/code-mode infrastructure PIDs with pre-run start ticks are excluded. No signalling.')
+    (RUN/'sweep.json').write_text(json.dumps(result,indent=2)+'\n');print(json.dumps(result,indent=2))
+if __name__=='__main__':main()
@@ -0,0 +1 @@
+["timeout", "-k", "10", "60", "node", "--check", "packages/cli/tests/case1-accept.test.mjs"]
				`@@ -0,0 +1 @@`
				`Run1 void: new-test first-run ReferenceError read is not defined. Intended RED failed for the same setup reason and is invalid evidence; focused GREEN is the first unexpected red. No old test assertion ran. Syntax2checks passed. No whole files/mutants/shells ran. Placed test-only alias under sage2964/mos1272, no assertion/product change. Fresh run2 from top.`
				`@@ -0,0 +1 @@`
				`["timeout", "-k", "10", "900", "node", "--test", "--test-reporter=tap", "--test-name-pattern", "row276 talk legacy inner timeout", "packages/cli/tests/case1-accept.test.mjs"]`
				`@@ -0,0 +1 @@`
				`["timeout", "-k", "10", "60", "node", "--check", "packages/cli/tests/case1-accept.test.mjs"]`