docs(gyro): record supplemental notice collection recheck

docs(gyro): record 223 release measurement and supplemental notices
docs(gyro): measure row 310 223-package source and pruned lock
2026-10-24 01:45:35 -05:00 · 2026-10-24 01:41:42 -05:00 · 2026-10-24 01:29:58 -05:00 · 2026-10-24 00:26:11 -05:00 · 2026-10-24 00:19:05 -05:00 · 2026-10-24 00:16:26 -05:00
119 changed files with 111514 additions and 43 deletions
@@ -5469,3 +5469,29 @@ bus bypass refusals. Prior old-test draft regression fixed under sage-3918;
 missing root oauth4webapi corrected by pinned npm ci under sage-3924. Evidence:
 agents/poe/work/queue-208/BUILD.md. Independent reviews and Sage's global gate
 remain; no live state, schema or bus policy change.
+
+2026-10-24 | Goldie | Row265 / #1770 before, recorded during authorized verification | C2-09b has no project room verbs. On goldie/row265 at ec86f2c84, add only room.open/send/read, pure exported leading-tag parser, README verb rows and new bus tests. Sage-3921 fixes EOF-tag and message-only timestamp readings; tester list/helpers/schema stay unchanged. Claim rev3814; Sage-3932 CLEAR for serialized new files, whole bus and twelve refusal mutants. No old-test edits authorized; stop rules apply.
+
+2026-10-24 | Goldie | Row265 / #1770 first slot STOP (sage-3932) | New parser14/14, rooms18/18 green; serialized bus stops at old project-runtime.test.mjs:14 import-closure pin, partial619 ok/1 not ok. New pure address.mjs import is absent from expected imports. Static trace also needs address.mjs in seat RUNNER_FILES. No old-test/product correction, no mutant/restored run, no green commit/push; old-pin and out-of-owned-files mount change sent to Sage for ruling. Audit prose missed the direct source pin despite raw grep hit; correction recorded in BUILD.md.
+
+2026-10-24 | Goldie | Row265 / #1770 verified (mos-1567, sage-3942) | Approved correction adds solely address import pin + Row265 comment to project-runtime.test and one pure-source RUNNER_FILES mount; new block checks parser has no imports. Serialized fresh-short-TMP timeout-k10: unchanged sandbox10/10, parser15/15, rooms18/18, full bus957/957, twelve named refusal mutants killed (each Node1, driver0), restored parser15/15 + rooms18/18. All positives zero fail/skip/cancel; every mutation restored full broker SHA71b32ee4. Old first-red evidence retained, no other old-test change. Slot returned goldie-0034; Boyd packet explicitly includes mount-list review, candidate push next.
+
+## 2026-10-24 — W2 row 310 / #1824 started (Gyro)
+
+Before: only Louie's evaluation artifact and S0 conditional baseline review exist. Sage assigned the owned source import, offline pinned restricted web build and root-independent output/CSP evidence under Q246/mos-1571. Implementation plan and subsequent measurements live in agents/gyro/work/queue-310/BUILD.md. No build/test, serving route or live change at start.
+
+## 2026-10-24 — W2 row 310 / #1824 bounded scratch measurement (Gyro)
+
+After sage-3992: 534 existing cached registry archives extract to 24,844 files / 611,577,974 bytes, or 614,049,226 bytes with generated checksums. A full 538-package lock vendor set adds 329 identities beyond S0's 209. In isolated scratch, with the three already-reviewed git inputs and approved local workspace reduction, exact S0 199/209 package closures matched; baseline release measurement succeeded offline with networking disabled. Valid absolute-nice19/four-job environment retry: 397.864805 s; four runtime files total 44,142,800 bytes, scratch Git blob pack 16,720,159 bytes. Initial 388.757578 s attempt had an inherited-priority defect and is retained as limited evidence. Receipt and caveats: agents/gyro/work/queue-310/BUILD.md, “Full-lock measurement results (sage-3992)”. No full-lock repository import, runtime output commit/push, serving or live change. W2 remains incomplete at the packaging boundary; no M1–M14/CSP/reproducibility acceptance claimed.
+
+## 2026-10-24 — W2 row 310 / #1824 223-source packaging evidence (Gyro)
+
+Under sage-4008/4010, exactly209+14 source packages measured in scratch: total11,201 files /145,260,334 bytes and26,538,894-byte independent blob pack; extra14 total702 files /14,523,104 bytes and1,720,566-byte blob pack. Original pinned lock refused with --locked after existing cfg-filter script; one authorized automatic offline lock regeneration produced a strict subset (558→226 entries,332 removed,0 added,0 changed). Original lock untouched. Per-package source/archive/license/notice inventory and exact errors are in agents/gyro/work/queue-310/BUILD.md, “223-source measurement — sage-4008 and sage-4010”. Release measurement approved but awaits CLEAR after row327 gate (sage-4011). This evidence commit contains plain text only, no imported crate source or runtime outputs; packaging/landing choice remains held under Vikunja618, and source/notice review goes to Gladstone.
+
+## 2026-10-24 — W2 row310 / #1824 223-vendor release measurement (Gyro)
+
+sage-4014 CLEAR run: frozen/offline scratch build exit0 in380.674036s, actual nice19/four jobs/cores/CPUs, no external network interface, no retry. Four outputs total44,137,258 bytes; WASM43,952,335 bytes SHA2560322beb9e58b9abeed6b6e05125879bfb3eccbebb05094e191df3542a74007ea differs from the full-lock build. Exact S0 package closures passed preflight; original lock unchanged, pruned lock remains3401363e.... Slot released immediately for Bradford in gyro-0018. Gladstone supplemental review of14 additions found10 PASS/4 CONCERN (not adoption approval); embedded W3C notices/attribution, dpi full-source conjunction/copyrights, explicit spirv standard-text map and winit example PNG inventory are now documented in plain-text evidence. Details: agents/gyro/work/queue-310/BUILD.md, “223 release result and notice supplement — sage-4014”. No crate sources/binaries/runtime route committed or served; row held for Vikunja618 and all implementation/CSP gates remain open.
+
+## 2026-10-24 — W2 row310 supplemental notice collection recheck recorded (Gyro)
+
+Gladstone-0027 at9522d2356 independently passes the four corrected collection/mapping gaps, with earlier ten package source/notice PASS results standing. Bundle4d8e2aac... and all12 incremental path hashes verified. This is supplemental evidence only: W3C/M13/license adoption, pruned lock, packaging/size, Worker/native runtime, WASM difference and implementation/CSP gates remain uncleared; row310 stays held. Details: agents/gyro/work/queue-310/BUILD.md, “Supplemental notice recheck — gladstone-0027”. No build or source/notice/runtime change.
@@ -0,0 +1,78 @@
+# Row 208 (193d) second review: poe/row208 4a4bef6c1 (duckworth-0302)
+
+Request: sage-3934 (sage-3931 request, c31492 on #1706). Candidate: 4a4bef6c1 on ec86f2c84, one
+commit. Design: e2d161e2e:agents/morgana/work/queue-193/DESIGN.md section 8, sha256 dd7fcb41
+(matches). Scope under mos-1542: the guards only. The question is whether a viewer can widen
+authority.
+Method: static. Git reads, plus the mutant summary Sage sent by path. No node, no tests.
+
+## Verdict: APPROVE (static)
+
+The diff has no bus or schema change. Every write is still decided by the broker as it stood at the
+base. The webui adds routes and hints, and no authority.
+
+- **chat-http.mjs.**
+  - share and unshare are POST only. They come after the same write fences as every other write:
+    send and named mode, the SSO session or auth header, Origin, and sec-fetch-site.
+  - The body must be exactly `{to}`: a string of 1-200 characters with no CR, LF or NUL. Extra keys
+    (owner, verb) refuse 400, and the test covers that.
+  - shares is GET only and takes no query.
+  - The reply must echo thread, to and op exactly. Anything else is 503 outcome-unknown.
+  - The new STATUS codes map share-not-covered to 403, share-exists to 409 and share-not-found to 404.
+  - `?shared=` accepts only `true`.
+- **chat.mjs and the adapter.**
+  - The three verbs go over `createChannelCaller` to the webui adapter (index.mjs:12-14). The adapter
+    is an allowlist passthrough to the session's own `call`.
+  - A granted user's chat is rebound per session (serve.mjs:701), so share calls carry the user's
+    principal, never the owner's.
+  - The test fixture runs the real adapter and the real Broker.
+- **The broker decides each new path, unchanged from the base.**
+  - thread.share, thread.unshare and thread.shares are in USER_VERBS and not in VIEWER_VERBS, so
+    userLevel gives collaborator. A viewer gets access-refused at #grantedThread (broker.mjs:950).
+  - Each of the three goes through `#thread`'s owner check (broker.mjs:909-913). A sharee gets
+    thread-not-owned and can't reshare.
+  - share-not-covered applies to a `user:` target (broker.mjs:6559).
+  - Only thread.messages takes `#threadRead`, so a share gives read access and nothing else.
+- **The grant-hint predicate.**
+  - access.mjs `chatGrants` re-runs `lookup`, so the subject must still sign in as session.user with a
+    live grant. It then keeps only that user's grants in this business that cover at collaborator,
+    which is the same `covers` call as the broker's `#granted`.
+  - It returns only `{projects, instances}`. No ids, receipts, subjects or other users escape. Any
+    failure gives [].
+  - The client's `scopeWrites` requires the project and the instance to match within one grant
+    (`some(g => project && instance)`). It never pairs a project from one grant with an instance from
+    another, so mixed grants can't combine into a scope that no single grant has.
+  - `includes('*')` on the client is equivalent to covers' `[0] === '*'`, because checkScope
+    (business access.mjs:97-103) refuses `*` unless it is alone.
+  - The hint is never carried over: chatGrants starts at [] and is re-read from /api/config on each
+    user render. It is in /api/config only when `granted`.
+- **No client-only hiding stands in for a broker refusal.** Each hidden control maps to a refusal:
+
+  | Hidden control | Who | Broker refusal |
+  | --- | --- | --- |
+  | composer and resume | viewer | thread.send/open: access-refused |
+  | composer and resume | sharee | thread.send/open: thread-not-owned |
+  | share form | viewer | access-refused |
+  | share form | sharee | thread-not-owned |
+  | create thread | out of scope | collaborator check at create |
+  | create project | user | project.create isn't in USER_VERBS |
+  | session controls, clear, cancel | user | session.* isn't in USER_VERBS (tester-only) |
+
+  Test :136 POSTs create, send, open and share from the page with the UI bypassed, and checks four
+  403 access-refused responses, unchanged table counts, and that each verb reached the bus. Test :19
+  adds unshare and the shares read over HTTP. Test :154 covers the sharee's thread-not-owned on send,
+  open and share.
+- **Mutants, as reported (sage-3920 CLEAR, /mnt/storage/scratch/tmp/8UlAhS/poe-208-mutants.json, not
+  rerun).**
+  - There are four served-copy mutants: composer, open, share and create. Each one's anchor must exist,
+    or the fixture throws.
+  - Each mutant fails the UI-absence test with ERR_ASSERTION, and the bypass test passes under each
+    one, so the broker still refuses. That meets design section 8: "With each UI check removed, the
+    bus still refuses."
+  - The full webui suite passed 418/0 and plugins 119/0 (sage-3925), as reported.
+
+## Notes
+
+- N1 (outside guard scope). user.js:16 re-renders every 5 s while the tab is visible. Each render
+  re-reads /api/config, projects, threads and the shared list. This doesn't affect authority, but it
+  is steady load per open user tab.
@@ -0,0 +1,9 @@
+# Glomgold
+
+Builder seat, Codex gpt-6.1-sol, started by Sage under Q246 and mos-1571. Owns row 309, O2 W1: the reviewed local
+thesaurus data (docs/plans/2026-10-21_q195-writing-editor.md, "W1 reviewed local thesaurus data").
+
+No launcher in this directory. The seat runs as a T3 thread and works in its own worktree. It has no credentials of its
+own; it pushes only its own `glomgold/*` branches through the repository credential helper (mos-0981), never `refactor`,
+`main` or another seat's branch. Claude seats orchestrate and give the Opus 5.5 landing review (mos-1571). Registered by
+Sage on 2026-10-24 so the queue can name the seat as row owner (store.mjs isSeatDir).
@@ -0,0 +1,134 @@
+# Row 265 / #1770 — project rooms
+
+Current result: verified under sage-3942; slot returned in goldie-0034. Full bus 957/957, sandbox 10/10, parser 15/15, rooms 18/18, twelve mutants killed, restored files green. Review/push packet below includes mos-1567 closure scope.
+
+Goldie, 2026-10-24. Branch goldie/row265, base ec86f2c847f6154a0677c6ed23c87dabc2c665d0. Brief docs/plans/2026-10-20_case2-rows.md § C2-09b rooms at blob3a5ed91a4fb3462df67e6939ae6f18290ac9b453; design agents/gosalyn/work/case2/DESIGN.md §6. Sage-3915 transfers ownership from Rocko to Goldie and review from Dewey to Boyd. No old test edit authorized. All tests/mutants wait for Sage CLEAR; queued behind Poe, Bentina and Sage's326 gate.
+
+## Design and clarified readings
+
+A room is a bus project. Members are all loaded business instances whose definitions are in THREAD_DEFINITIONS, sorted by key. Canonical room threads have those keys as names and belong to the requesting human. open checks all name/instance/owner collisions before creating anything; it delegates missing inserts to existing thread.create dispatch, including default session metadata. send/read require the complete canonical set. No schema or migration change.
+
+Sage-3921 settles two brief readings: the single captured timestamp applies to the room.send MESSAGE rows; existing route/delivery/event helpers keep their own timestamps in the same dispatch transaction. They are unchanged. A final EOF-terminated @name is a tag, so bare @continuity is invalid-request rather than a broadcast. Leading whitespace is accepted. Pure parseAddress returns {tags,body}, where body is the unaddressed remainder; room.send stores the ORIGINAL input unchanged. Export it from the bus index and expose a separate reusable test table for C2-10c parity.
+
+send resolves tags against current #named results and member instance keys, deduplicates recipients, and refuses multiple member matches. It checks each target's current default-session fence and messaging rule, then inserts one normal INFO message, route and human.input per target under the existing request transaction. All message rows share one at. No tag broadcasts; tags after the first non-tag token remain plain text.
+
+read includes all sessions of the caller's canonical threads, globally ordered by messages.seq. Each entry retains first-message fields plus thread/session/instance and adds ids (every grouped message id) and to (each instance once). Only consecutive human rows with identical at/body/class group, and a repeated instance starts a new entry, so same-millisecond identical sends remain separate. Paging limit counts merged entries (THREAD_PAGE defaults/max); clients continue after the last ids element. Cursor must belong to a room thread. Bounded raw scan limit*memberCount+1 completes requested groups without reading unbounded history. Sage-3921 accepts these routine choices as proposed in goldie-0030.
+
+## Scope / steps
+
+1. Read current thread.create/send/messages, transaction wrapper, naming and messaging helpers; audit source readers/pins. Claim265 via queue after next. Done/read, claim recorded at rev 3814 with op goldie-0265-start-1 (same-op replay confirmed).
+2. Add parser + index export, only three room cases in broker, README verb rows and new bus tests/fixtures. Do not modify existing thread/messaging/ACL/helper behavior.
+3. New tests cover all brief cases, atomicity across message/route/input rows, ownership/projects, permissions, paging/grouping and session fences. No suites or test runs before CLEAR.
+4. Record exact refusal→test→mutant matrix here before requesting the slot; one targeted killed mutant per named refusal, restoration byte-checks. New files whole then bus suite under CLEAR, serial timeout-k10, fresh31-byte mktemp TMPDIR plus UTC/load/busy header.
+5. Before in-review, grep packages/*/tests for broker.mjs/TESTER_VERBS and changed-file pins. Push own branch and hand tip/base/manifest directly to Sage/Boyd. Sage owns request posting/landing.
+
+No Console/Discord/CLI room surface or cross-agent reply visibility added. No tester verb, role, schema or secret change. No host action or credential access.
+
+## New tests and refusal / mutant matrix
+
+Only new test files and a new reusable vector fixture are added. No pre-existing test changes. Parser table: address.test.mjs consumes address-cases.mjs, including final EOF tags, leading whitespace, tags after the first word, repetition and blank/tag-only remainder. Broker cases: rooms.test.mjs covers sorted/reused canonical threads, other-instance and other-owner collisions, all three verbs' human/tester gates, missing projects/member set, partial/foreign/wrong-instance rooms, key and current-name addressing, ambiguity/same-member name+key, unknown/non-member/old-name tags, tags-only bodies, one/many/broadcast targets, original bytes, shared message timestamp, routes/deliveries/human.input, denied last recipient, clearing last session, all-session merged reads, agent reply metadata, merged paging/default/max, foreign/noncanonical/absent cursors, and same-at repeated sends. Synthetic historical rows append valid rows; they do not rewrite evidence or clocks. The same-at batches repeat the first recipient at each boundary, proving identical sends remain distinct.
+
+Each named refusal has one mutation of its enforcement, run against the entire new rooms.test.mjs file. The driver mutants.py stores the exact original→mutant diff in logs/Mxx-*.diff, logs UTC/load/busy/TMPDIR, accepts only Node exit 1 with the named target test failing, and restores/verifies full broker bytes and SHA256 in finally. No mutation is retained. Generic pre-existing request/schema/argument policies are exercised through existing code; the matrix names the refusals added or deliberately inherited by these room cases.
+
+| Mutant | Refusal | Guard relaxed | Required failing new test |
+| --- | --- | --- | --- |
+| M01-human | human-required | remove common room human check | room verbs require the human |
+| M02-tester | tester-refused | add the three room verbs to TESTER_VERBS | room verbs require the human (explicit absence pin) |
+| M03-project | project-not-found | remove room project lookup check | room verbs refuse missing projects |
+| M04-members | thread-instance-missing | allow empty member set | room verbs refuse missing projects |
+| M05-collision | room-thread-name-taken | remove canonical owner/instance collision check | room.open preflights instance collisions |
+| M06-open | room-not-open | remove missing canonical thread check | send/read refuse a missing canonical member |
+| M07-body | invalid-request | allow empty parsed remainder | unknown or non-member addressees and tags-only bodies |
+| M08-unknown | unknown-addressee | allow zero member matches | unknown or non-member addressees and tags-only bodies |
+| M09-ambiguous | addressee-ambiguous | allow multiple member matches | a legacy name colliding with another member key |
+| M10-messaging | message-sender-refused | omit room target messaging check | messaging denial on the last target |
+| M11-cursor | message-not-found | unknown room cursor falls back to seq zero | room.read groups one send, pages |
+| M12-fence | session-clearing | omit room target session fence | a clearing last member fences the whole send |
+
+For M02, the existing human check remains a second barrier: the mutant deliberately relaxes only the tester allowlist; the new explicit absence assertion kills it without loosening or running the old pin. Existing helpers keep their full session-state behavior. No helper or schema mutation ships.
+
+## Reader / hash audit
+
+`rg -n 'broker\.mjs|TESTER_VERBS' packages/*/tests --glob '!fixtures/*'` produced reader-grep.txt (133 hits at audit time). These are imports except the concrete source read at bus/tests/limit-checks.test.mjs:323-326 (forbidden limit-check/token-limit imports) and the tester set assertions at bus/tests/tester-writes.test.mjs:18-32. The latter stays byte-for-byte unchanged. bus/tests/viewer.test.mjs:116 builds its coverage set from exported verb lists; rooms do not widen those lists. No old test needs an edit.
+
+Pin check: recursively inspect packages/*/tests plus scripts/test-*.sh for changed-file mentions (broker.mjs, address.mjs, packages/bus/README.md, packages/bus/src/index.mjs) with literal 64-hex values within eight lines: pin-context-grep.txt records no hits. A direct same-line hash/digest/sha256 grep finds registrySha256 imports only, which hash host registry data rather than broker bytes. The independent channel-proof.test.mjs baselines cover proof/transport files, none changed here. Positive control: pin-positive-control.txt records actual schema.sql / SCHEMA_SHA256 / createHash references in bus/tests/schema.test.mjs and bus/src/store.mjs. Schema bytes are unchanged.
+
+## Requested serialized slot plan (not run)
+
+At each run: fresh `TMPDIR=$(mktemp -d /mnt/storage/scratch/tmp/XXXXXX)`, date -u, uptime, and `bash /mnt/storage/scratch/sage-busy-now.sh 2>/dev/null | tail -1` in the log. No concurrent test runs. Ignored root node_modules symlink targets the canonical checkout; it will not be committed.
+
+1. `timeout -k 10 120 node --test packages/bus/tests/address.test.mjs` whole.
+2. `timeout -k 10 120 node --test packages/bus/tests/rooms.test.mjs` whole.
+3. `timeout -k 10 600 node --test --test-concurrency=1 packages/bus/tests/*.test.mjs` bus suite whole.
+4. `python3 agents/goldie/work/queue-265/mutants.py`: M01 through M12 serially, each runs `timeout -k 10 120 node --test packages/bus/tests/rooms.test.mjs` whole, fresh TMPDIR/header; stop on a live mutant or wrong failure. Record each diff and restoration digest.
+5. Restored address.test.mjs whole and rooms.test.mjs whole separately, same commands as 1/2 and fresh directories/header each.
+
+Estimate 5–10 minutes; bus timeout ceiling 10 minutes, individual new/mutant ceilings 2 minutes each. On first new-test red, record/report it. On any old-test red or need for old-test change, stop and ask Sage. Static node --check for new modules/tests and git diff --check passed; no tests or mutants run yet.
+
+## First slot STOP — sage-3932
+
+2026-10-24T04:27Z: stopped on an old-test red. No old test changed or rerun, no mutant executed, no product adjustment after the failure, no commit/push claiming verification.
+
+| Step | Exit | Counts / disposition | Log |
+| --- | --- | --- | --- |
+| 1 address whole | 0 | 14 pass, 0 fail/skip/cancel; 58.559 ms | logs/01-address.log |
+| 2 rooms whole | 0 | 18 pass, 0 fail/skip/cancel; 1067.524 ms | logs/02-rooms.log |
+| 3 bus whole | 1 (stopped) | partial 619 top-level ok, 1 not ok; not a completed-suite result | logs/03-bus.log |
+| 4 twelve mutants | not run | stop rule | none |
+| 5 restored files | not run | stop rule; no mutations were applied | none |
+
+All three run headers use UTC/date, uptime, helper CLEAR and distinct 31-byte scratch TMPDIRs. Bus began04:25:22Z at load2.80/2.91/2.61, TMPDIR /mnt/storage/scratch/tmp/LaZAaK. Parser used /mnt/storage/scratch/tmp/rqcTH7; rooms has its own header. Explicit TAP reporter was selected for rooms/bus and the mutant driver so failure detection/counts are stable across Node26's default spec reporter; this changes reporting only.
+
+The old red is project-runtime.test.mjs:12, assertion:14, test620, “Broker keeps the sandbox client import closure: only the listed imports, no lazy project import”. Actual imports include the new `import { parseAddress } from './address.mjs';`; the pinned array omits it. ERR_ASSERTION deepStrictEqual; individual duration2.469251ms. The full expected/actual/stack is in 03-bus.log. No other red was observed before stopping.
+
+Reader-audit correction: reader-grep.txt:100 already contains project-runtime.test.mjs:13, a direct broker source read. The earlier prose incorrectly described the import-closure assertion as a normal import; I missed this old source pin during inspection. This is not a hash pin. Follow-up static trace finds seat/src/sandbox.mjs:50-60 RUNNER_FILES includes broker and landing but not address; seat/tests/sandbox.test.mjs:45-53 compares this mount list to the recursively imported source closure. A parser dependency therefore also needs the one new RUNNER_FILES path. Both an old-test pin change and this out-of-owned-files product change require Sage/Mos approval before edits. Recommended bounded change: add only the parser import to the project-runtime expected imports, add only packages/bus/src/address.mjs beside broker in RUNNER_FILES, and leave the generic sandbox closure test unchanged.
+
+Broker bytes remain SHA256 71b32ee4afa322793aad81231441ee7badc3e5aff65ff008c6cc0f7f63b72781. git diff --check still passes. Slot returned in goldie-0032, pending ruling/new CLEAR; no reruns.
+
+## mos-1567 approved closure correction / second slot request
+
+Sage-3940 relays Mos's mos-1567 and widened row scope (sage-3939). Applied exactly the approved pre-existing-file edits: project-runtime.test.mjs adds two lines at17-18, one Row265 comment and the parser import in the pinned array, no other line changed (numstat2 added/0 deleted); seat/src/sandbox.mjs adds only `packages/bus/src/address.mjs` immediately after broker in RUNNER_FILES. seat/tests/sandbox.test.mjs stays byte-for-byte unchanged. The parser remains a separate pure module. A NEW block in address.test.mjs asserts `doesNotMatch(/\bimport\b/)` on its source, with a node:fs import in that new test file; no existing assertion is moved or weakened.
+
+Review packet must explicitly call out the RUNNER_FILES mount-list entry for Boyd's review. This is a read-only source-file mount needed by the broker's static dependency, with no new module dependency or role/verb authority. The first-run import pin failure remains recorded above and in logs/03-bus.log; new logs will have rerun-prefixed names, preserving first-slot bytes.
+
+Requested rerun order, awaiting CLEAR after Bentina: first `timeout -k 10 180 node --test --test-reporter=tap packages/seat/tests/sandbox.test.mjs` whole, then the original five steps again from step1: address whole (now15 cases), rooms whole, bus whole with concurrency1 (includes project-runtime whole), M01–M12 whole-room-file mutants, then restored address and rooms files separately. Explicit TAP reporter is used throughout for stable logs/kill matching; timeouts otherwise120 per new/mutant run and600 for bus. Each run still gets fresh short mktemp TMPDIR, date/uptime/busy header, serialized with the same stop rule. Estimate5–10minutes. Only static node --check and git diff --check run since the STOP; all pass. No new test run yet.
+
+## Verified result — sage-3942 CLEAR, slot returned goldie-0034
+
+All rerun positives exit 0 with zero failures, skips or cancellations. Full bus suite passed 957/957, including the approved project-runtime import pin. The unchanged sandbox test passed 10/10, including its recursive mount/import-closure assertion. New parser cases passed 15/15, rooms 18/18, and both passed again after restoration. No tests run after slot return.
+
+| Run | Exit | Pass / fail | Duration ms | UTC / load / helper | Log |
+| --- | --- | --- | --- | --- | --- |
+| rerun-00-sandbox | 0 | 10 / 0 | 5526.027699 | Sat Oct 24 04:31:35 UTC 2026; 23:31:35 up 10 days, 14:51,  2 users,  load average: 2.83, 2.91, 2.73; CLEAR | [log](logs/rerun-00-sandbox.log.gz) |
+| rerun-01-address | 0 | 15 / 0 | 54.634817 | Sat Oct 24 04:31:45 UTC 2026; 23:31:45 up 10 days, 14:51,  2 users,  load average: 2.54, 2.84, 2.71; CLEAR | [log](logs/rerun-01-address.log.gz) |
+| rerun-02-rooms | 0 | 18 / 0 | 921.788987 | Sat Oct 24 04:31:52 UTC 2026; 23:31:52 up 10 days, 14:51,  2 users,  load average: 2.42, 2.81, 2.70; CLEAR | [log](logs/rerun-02-rooms.log.gz) |
+| rerun-03-bus | 0 | 957 / 0 | 118397.418425 | Sat Oct 24 04:32:01 UTC 2026; 23:32:01 up 10 days, 14:51,  2 users,  load average: 2.28, 2.77, 2.68; CLEAR | [log](logs/rerun-03-bus.log.gz) |
+| rerun-05-restored-address | 0 | 15 / 0 | 54.587943 | Sat Oct 24 04:35:02 UTC 2026; 23:35:02 up 10 days, 14:54,  2 users,  load average: 3.10, 3.07, 2.83; CLEAR | [log](logs/rerun-05-restored-address.log.gz) |
+| rerun-05-restored-rooms | 0 | 18 / 0 | 991.877991 | Sat Oct 24 04:35:11 UTC 2026; 23:35:11 up 10 days, 14:55,  2 users,  load average: 3.17, 3.09, 2.84; CLEAR | [log](logs/rerun-05-restored-rooms.log.gz) |
+
+Mutant driver exit 0; all twelve target tests killed their guard relaxation with Node exit 1. Every mutant log records exact bytes restored to broker SHA256 `71b32ee4afa322793aad81231441ee7badc3e5aff65ff008c6cc0f7f63b72781`. Driver receipt: [rerun-04-mutants-driver.log](logs/rerun-04-mutants-driver.log.gz).
+
+| Mutant | Node exit | Pass / fail | Exact diff | Raw log |
+| --- | --- | --- | --- | --- |
+| M01-human | 1, killed | 16 / 2 | [diff](logs/M01-human.diff) | [log](logs/M01-human.log.gz) |
+| M02-tester | 1, killed | 17 / 1 | [diff](logs/M02-tester.diff) | [log](logs/M02-tester.log.gz) |
+| M03-project | 1, killed | 17 / 1 | [diff](logs/M03-project.diff) | [log](logs/M03-project.log.gz) |
+| M04-members | 1, killed | 17 / 1 | [diff](logs/M04-members.diff) | [log](logs/M04-members.log.gz) |
+| M05-collision | 1, killed | 14 / 4 | [diff](logs/M05-collision.diff) | [log](logs/M05-collision.log.gz) |
+| M06-open | 1, killed | 17 / 1 | [diff](logs/M06-open.diff) | [log](logs/M06-open.log.gz) |
+| M07-body | 1, killed | 17 / 1 | [diff](logs/M07-body.diff) | [log](logs/M07-body.log.gz) |
+| M08-unknown | 1, killed | 16 / 2 | [diff](logs/M08-unknown.diff) | [log](logs/M08-unknown.log.gz) |
+| M09-ambiguous | 1, killed | 17 / 1 | [diff](logs/M09-ambiguous.diff) | [log](logs/M09-ambiguous.log.gz) |
+| M10-messaging | 1, killed | 17 / 1 | [diff](logs/M10-messaging.diff) | [log](logs/M10-messaging.log.gz) |
+| M11-cursor | 1, killed | 17 / 1 | [diff](logs/M11-cursor.diff) | [log](logs/M11-cursor.log.gz) |
+| M12-fence | 1, killed | 17 / 1 | [diff](logs/M12-fence.diff) | [log](logs/M12-fence.log.gz) |
+
+## Final review scope and packet
+
+Boyd reviews the three room cases, pure parser/export, README rows, new parser/room tests, and **the added read-only RUNNER_FILES mount for packages/bus/src/address.mjs**. mos-1567 authorizes that one sandbox source line and the sole old-test delta: project-runtime.test.mjs:17-18 adds exactly the Row265 comment and parser import pin (numstat 2 added / 0 deleted). Byte comparison against base after removing those additions proves all other old-test bytes unchanged. Removing the single RUNNER_FILES addition likewise restores sandbox.mjs to base. sandbox.test.mjs has no byte change. New address.test.mjs block proves the mounted parser source has no import word.
+
+The widened changed-file hash-context audit includes sandbox.mjs: [pin-context-with-sandbox.txt](pin-context-with-sandbox.txt), zero 64-hex-near-reference hits. The original reader and positive-control receipts remain alongside it; the missed source pin and first STOP remain recorded, not concealed. No role/schema/tester allowlist or helper change ships. BUILD-LOG and SESSIONS only append tracking entries.
+
+Base: `ec86f2c847f6154a0677c6ed23c87dabc2c665d0`. Branch: `goldie/row265`. MANIFEST.sha256 lists every changed source/test/tracking/evidence file except itself, with repository-relative paths, and is verified before commit/push. Raw first-red logs are retained separately from green reruns.
+
+Evidence packaging: logs are stored losslessly as `.log.gz`; decompress with `gzip -cd`. Decompression was byte-compared with each raw run log before packing. This preserves the original failure/Node whitespace while keeping the committed diff whitespace-clean. The run driver recreates raw `.log` files when used. Mutant busy-check headers identify only their own Python driver PID3686656 as BUSY; positive runs report CLEAR. The driver held the assigned slot throughout, with serialized child tests.
@@ -0,0 +1,51 @@
+996e9d0c1e7a8436691ce5d5d89b4eb940b07aafb3386f63a9847d203f43d998  BUILD-LOG.md
+26b5821895a152ddac66a26f16585c6c48ec71d99ca7e7c2b9a4d5a71943c5b4  agents/goldie/work/queue-265/BUILD.md
+1289c0f9f4e857590490a0972b5300cc8fb1a86e3ef79fe63e47472709e982f6  agents/goldie/work/queue-265/logs/01-address.log.gz
+bc0ac95454ca4a4478641832e68caeb82bfe8b1fdc9abc0b80f1126ef42b7be5  agents/goldie/work/queue-265/logs/02-rooms.log.gz
+459a45bd772576847338a438b27f4f578a2a660be744e1404fd239d192c6957c  agents/goldie/work/queue-265/logs/03-bus.log.gz
+c30cecb149e98d64f285e81a82d07a0a89dad5ea223f9031b543230615663bb5  agents/goldie/work/queue-265/logs/M01-human.diff
+a75e02d91ff46fbfaf627beea943183b769e417bcb572bf11f778f0fca7fcf29  agents/goldie/work/queue-265/logs/M01-human.log.gz
+b78b1c5b205272411710f56a981acf58dc09c46333369924b98c4c8657dc949c  agents/goldie/work/queue-265/logs/M02-tester.diff
+6a680dcb1db461cce3a3a2e066aa1245e4f84aa6754354058009bc0f6ebf4185  agents/goldie/work/queue-265/logs/M02-tester.log.gz
+02a6cfab404405099fc39eb83413614c67a0c4c3f87cd23c3849a35d1055ddb0  agents/goldie/work/queue-265/logs/M03-project.diff
+8b7cd0c568510e49b61fa14fce7b2680025b773eda884e0a84163d240a124e39  agents/goldie/work/queue-265/logs/M03-project.log.gz
+18b2cb43f2799301cf934e4c327bc1a03e08ff8d11ff590cb9677c86dfd43ff0  agents/goldie/work/queue-265/logs/M04-members.diff
+195f9ec57c9494552566d2f8b87f3b17a210b811f8b556dd65db89814e237816  agents/goldie/work/queue-265/logs/M04-members.log.gz
+a773e214c76acf5285ac4ca17cdd90dd552ddc79157abe75ef6de7f67a0b6a70  agents/goldie/work/queue-265/logs/M05-collision.diff
+1148cda3f6aaa7f6aeaab2f95c932114ddeac5bfd9318a6b77a4148079d486ed  agents/goldie/work/queue-265/logs/M05-collision.log.gz
+56400065c9cdb6305763b2bff8c0e06e9ae1223fa89b4467634a9951622d3fbe  agents/goldie/work/queue-265/logs/M06-open.diff
+b8f9bd9a5c488e604d0afe3feda4a2602359a94a49c7fdbd2f0f6a421b0ca1ce  agents/goldie/work/queue-265/logs/M06-open.log.gz
+2c1b745a15602cdcaf194131e4d6e0f8fa349e9712ce2e8cb6e695699e4ec19d  agents/goldie/work/queue-265/logs/M07-body.diff
+4857461e7a2ceb01a6446acb4708a732949a0d8d1a85fa2f6d10bedde6b9e11b  agents/goldie/work/queue-265/logs/M07-body.log.gz
+e3480e69d016caea6c1fbcdfa022b18214a10e8deca4409d0dc2f72261d2ee92  agents/goldie/work/queue-265/logs/M08-unknown.diff
+3d0f347f21df3c388a4f39679d4694aadc9684ae8b8ad2d30bf0bb316e48dcb0  agents/goldie/work/queue-265/logs/M08-unknown.log.gz
+62420ed20affcab256facee05414b8b760a4c79a60f60be0c06c88abb61ec6ae  agents/goldie/work/queue-265/logs/M09-ambiguous.diff
+14a18d61344df592e885c46ace34e0c59914f4fbe591fa99eeb3d81fa8ef8bf1  agents/goldie/work/queue-265/logs/M09-ambiguous.log.gz
+0671bf77394f82df92252275171fd9edea2e5b2e7143387840d03bda544676bf  agents/goldie/work/queue-265/logs/M10-messaging.diff
+4202215d40999e0d1cc98ebfb5445f0c8fd4688e6ca968e85d225723076ca8a7  agents/goldie/work/queue-265/logs/M10-messaging.log.gz
+042598ecb551e761d37af898f69e17ec137d2f39687dbf81ce5e1eeb98a38202  agents/goldie/work/queue-265/logs/M11-cursor.diff
+deff3d0514c379bd3d9c6f6bbc60db59b9dce2baaafd6fa611711c98cc8365ce  agents/goldie/work/queue-265/logs/M11-cursor.log.gz
+780e70fbcb2328006c8d9ace75aa62fcd0d935b4d758b50b0f5c5d5c55604122  agents/goldie/work/queue-265/logs/M12-fence.diff
+b629b41a39c028b70d4b847c351d248d6d70e8175d6d27f563b0ed8817f89642  agents/goldie/work/queue-265/logs/M12-fence.log.gz
+1b8c3cec31b44ff018a1bc74fef95996bcbdd21d340e2d2605154ba645648040  agents/goldie/work/queue-265/logs/rerun-00-sandbox.log.gz
+d18c5a9432de06ebec36c937da7dfb1a3e79dc397b33ff624058af351eee24dd  agents/goldie/work/queue-265/logs/rerun-01-address.log.gz
+d10b83ccec56e47d8c7c74d8304fc4fc87b8ea92a50098380cd02b8012c32d09  agents/goldie/work/queue-265/logs/rerun-02-rooms.log.gz
+6ff5955fe5c85f51c1cf4daeb8eddd61ef1a30e170221f99bfb08da8304d7e4a  agents/goldie/work/queue-265/logs/rerun-03-bus.log.gz
+eeba0182f06cee0c06cd15ecf7ef43aaeffd7149b2202cc0653078c20bb46198  agents/goldie/work/queue-265/logs/rerun-04-mutants-driver.log.gz
+5fe9fe35af60ef951c5c68b040aa9bb6067d9c746e143bb5782eb428acd4e4fe  agents/goldie/work/queue-265/logs/rerun-05-restored-address.log.gz
+2b3f3305ff5f6926a0269bd6c88d5f2e4a89727eefcf99625bebb51a70abb649  agents/goldie/work/queue-265/logs/rerun-05-restored-rooms.log.gz
+f11ae40d923affad1936fe51d05981ac201a1051bc9f877d75fc1d544c6e38f1  agents/goldie/work/queue-265/mutants.py
+e9cdf16670a16a14f3dd722a69c63a1785e4deb3608ee05d519b0ec8c1a9ca0b  agents/goldie/work/queue-265/pin-context-grep.txt
+491ba3bb25e918049249178f3c6a67b2b4f56a197f0a67059acb2420cd03b73c  agents/goldie/work/queue-265/pin-context-with-sandbox.txt
+784fb42bff187c0eebcf7756942ec3cf56f8faa7b54ce4ad96181b81fe46f0e9  agents/goldie/work/queue-265/pin-positive-control.txt
+766ead519eefbde958bbdbf77bf858b10dd1e3d9dee8ab5d356fe821ce7602fe  agents/goldie/work/queue-265/reader-grep.txt
+6c3c44eb943f33d5bb547f542c77da4d6f04e738056466bc491c2f6fd5f67946  docs/SESSIONS.md
+1ba33af1f42c88a5346d25fe915a44ee70a27fbc6b9ab880db0866cbdad5d45d  packages/bus/README.md
+232a1c77c2f17011c53b55fc6052f70985598210769d41d7c2c0b535328aad23  packages/bus/src/address.mjs
+71b32ee4afa322793aad81231441ee7badc3e5aff65ff008c6cc0f7f63b72781  packages/bus/src/broker.mjs
+ed57d48d2af4a225259e0a44c86a30b12792ec9f725dd9c89251569b7dc89e5a  packages/bus/src/index.mjs
+a6725ffe30d44981a9b9d3a3c319f7e96a46ec7bd74f0c8d869d9a798eca1a81  packages/bus/tests/address-cases.mjs
+fae431bc3743b224f69da33c4cebe376b47257d67f52d25d3ab0cb59f224a607  packages/bus/tests/address.test.mjs
+8594e94384c1c8b7234cfa8bbc17456cff86d9adef936cd1059a0d5a60e4546b  packages/bus/tests/project-runtime.test.mjs
+892c3709393fa8962710bc07565d1097bbd79ea1fbfda34af5f9385db34ed0fa  packages/bus/tests/rooms.test.mjs
+83019fa6b39ad9fd79b84627856b4dec82683d8261b8cba9b9ac840e0c489268  packages/seat/src/sandbox.mjs
@@ -0,0 +1,10 @@
+--- broker.original
+++ M01-human
+@@ -6423,7 +6423,6 @@
+       case 'room.open':
+       case 'room.send':
+       case 'room.read': {
+-        this.#human(s);
+         const opening = verb === 'room.open';
+         const sending = verb === 'room.send';
+         keys(a, opening ? ['project'] : sending ? ['project', 'body'] : ['project', 'after', 'limit'],
@@ -0,0 +1,12 @@
+--- broker.original
+++ M02-tester
+@@ -122,7 +122,8 @@
+ // Row 175 (#1673, Q173): the test system's reads and two writes, name.set and project.create,
+ // each recorded with `tester` as its actor. The organization branch keeps its own list below.
+ // Row 177 (#1675, Q173): the tester's own threads, owner `tester`, and a stop of their runs.
+-export const TESTER_VERBS = Object.freeze(['message.send', 'message.receive', 'message.read', 'inbox', 'agents', 'tasks', 'trail', 'decisions', 'messages', 'replies',
+export const TESTER_VERBS = Object.freeze([
+  'room.open', 'room.send', 'room.read','message.send', 'message.receive', 'message.read', 'inbox', 'agents', 'tasks', 'trail', 'decisions', 'messages', 'replies',
+   'usage', 'names', 'limits', 'plugins', 'instances', 'project.list', 'thread.list', 'name.set', 'project.create', 'credentials',
+   'thread.create', 'thread.open', 'thread.send', 'thread.messages', 'assistant.stop',
+   // Row 194 (#1692, D4.1): launch and terminate, and the read of the requests they make.
@@ -0,0 +1,10 @@
+--- broker.original
+++ M03-project
+@@ -6429,7 +6429,6 @@
+         keys(a, opening ? ['project'] : sending ? ['project', 'body'] : ['project', 'after', 'limit'],
+           sending ? ['project', 'body'] : ['project']);
+         const project = identifier(a.project);
+-        if (!this.#store.get('SELECT 1 FROM projects WHERE id=? AND business=?', project, s.business)) fail('project-not-found');
+         const members = Object.keys(b.roles).filter((instance) => this.#threaded(s.business, instance)).sort();
+         if (!members.length) fail('thread-instance-missing');
+         const owner = this.#owner(s);
@@ -0,0 +1,10 @@
+--- broker.original
+++ M04-members
+@@ -6431,7 +6431,6 @@
+         const project = identifier(a.project);
+         if (!this.#store.get('SELECT 1 FROM projects WHERE id=? AND business=?', project, s.business)) fail('project-not-found');
+         const members = Object.keys(b.roles).filter((instance) => this.#threaded(s.business, instance)).sort();
+-        if (!members.length) fail('thread-instance-missing');
+         const owner = this.#owner(s);
+         // Preflight all collisions/missing threads before open creates or send writes anything.
+         const threads = members.map((instance) => {
@@ -0,0 +1,11 @@
+--- broker.original
+++ M05-collision
+@@ -6436,8 +6436,6 @@
+         // Preflight all collisions/missing threads before open creates or send writes anything.
+         const threads = members.map((instance) => {
+           const t = this.#store.get('SELECT * FROM threads WHERE project=? AND name=?', project, instance);
+-          if (t && (t.instance !== instance || t.owner !== owner))
+-            fail(opening ? 'room-thread-name-taken' : 'room-not-open');
+           if (!t && !opening) fail('room-not-open');
+           return t ?? { instance, name: instance };
+         });
@@ -0,0 +1,10 @@
+--- broker.original
+++ M06-open
+@@ -6438,7 +6438,6 @@
+           const t = this.#store.get('SELECT * FROM threads WHERE project=? AND name=?', project, instance);
+           if (t && (t.instance !== instance || t.owner !== owner))
+             fail(opening ? 'room-thread-name-taken' : 'room-not-open');
+-          if (!t && !opening) fail('room-not-open');
+           return t ?? { instance, name: instance };
+         });
+         if (opening) {
@@ -0,0 +1,10 @@
+--- broker.original
+++ M07-body
+@@ -6450,7 +6450,6 @@
+         if (sending) {
+           string(a.body, 32768);
+           const addressed = parseAddress(a.body);
+-          if (!addressed.body.trim()) fail('invalid-request');
+           const selected = new Set();
+           for (const tag of addressed.tags) {
+             const candidates = new Set([this.#named(s.business, tag), tag].filter((instance) => members.includes(instance)));
@@ -0,0 +1,10 @@
+--- broker.original
+++ M08-unknown
+@@ -6454,7 +6454,6 @@
+           const selected = new Set();
+           for (const tag of addressed.tags) {
+             const candidates = new Set([this.#named(s.business, tag), tag].filter((instance) => members.includes(instance)));
+-            if (!candidates.size) fail('unknown-addressee');
+             if (candidates.size > 1) fail('addressee-ambiguous');
+             selected.add([...candidates][0]);
+           }
@@ -0,0 +1,10 @@
+--- broker.original
+++ M09-ambiguous
+@@ -6455,7 +6455,6 @@
+           for (const tag of addressed.tags) {
+             const candidates = new Set([this.#named(s.business, tag), tag].filter((instance) => members.includes(instance)));
+             if (!candidates.size) fail('unknown-addressee');
+-            if (candidates.size > 1) fail('addressee-ambiguous');
+             selected.add([...candidates][0]);
+           }
+           const targets = threads.filter((t) => !addressed.tags.length || selected.has(t.instance));
@@ -0,0 +1,10 @@
+--- broker.original
+++ M10-messaging
+@@ -6462,7 +6462,6 @@
+           const sessions = targets.map((t) => {
+             const session = this.#defaultSession(t.id);
+             this.#sessionFence(session);
+-            this.#checkMessaging(s.business, 'human', t.instance);
+             return session;
+           });
+           const at = this.#now();
@@ -0,0 +1,11 @@
+--- broker.original
+++ M11-cursor
+@@ -6488,7 +6488,7 @@
+             `SELECT m.seq FROM messages m JOIN message_threads mt ON mt.message=m.id WHERE m.id=? AND m.business=? AND mt.thread IN (${placeholders})`,
+             identifier(a.after), s.business, ...tids,
+           )?.seq;
+-          if (after === undefined) fail('message-not-found');
+          if (after === undefined) after = 0;
+         }
+         // At most one row per instance joins a group; one lookahead row completes the last page.
+         const rows = this.#store.all(
@@ -0,0 +1,10 @@
+--- broker.original
+++ M12-fence
+@@ -6461,7 +6461,6 @@
+           const targets = threads.filter((t) => !addressed.tags.length || selected.has(t.instance));
+           const sessions = targets.map((t) => {
+             const session = this.#defaultSession(t.id);
+-            this.#sessionFence(session);
+             this.#checkMessaging(s.business, 'human', t.instance);
+             return session;
+           });
@@ -0,0 +1,67 @@
+#!/usr/bin/env python3
+"""Slot-only runner. Every mutation restores and verifies the complete broker bytes."""
+from pathlib import Path
+import hashlib, os, re, subprocess, sys
+
+ROOT = Path(__file__).resolve().parents[4]
+SOURCE = ROOT / 'packages/bus/src/broker.mjs'
+OUT = Path(__file__).resolve().parent / 'logs'
+MUTANTS = [
+    ('M01-human', 'human-required', 'room verbs require the human', '        this.#human(s);\n', ''),
+    ('M02-tester', 'tester-refused', 'room verbs require the human', None, None),
+    ('M03-project', 'project-not-found', 'room verbs refuse missing projects', "        if (!this.#store.get('SELECT 1 FROM projects WHERE id=? AND business=?', project, s.business)) fail('project-not-found');\n", ''),
+    ('M04-members', 'thread-instance-missing', 'room verbs refuse missing projects', "        if (!members.length) fail('thread-instance-missing');\n", ''),
+    ('M05-collision', 'room-thread-name-taken', 'room.open preflights instance collisions', "          if (t && (t.instance !== instance || t.owner !== owner))\n            fail(opening ? 'room-thread-name-taken' : 'room-not-open');\n", ''),
+    ('M06-open', 'room-not-open', 'send/read refuse a missing canonical member', "          if (!t && !opening) fail('room-not-open');\n", ''),
+    ('M07-body', 'invalid-request', 'unknown or non-member addressees and tags-only bodies', "          if (!addressed.body.trim()) fail('invalid-request');\n", ''),
+    ('M08-unknown', 'unknown-addressee', 'unknown or non-member addressees and tags-only bodies', "            if (!candidates.size) fail('unknown-addressee');\n", ''),
+    ('M09-ambiguous', 'addressee-ambiguous', 'a legacy name colliding with another member key', "            if (candidates.size > 1) fail('addressee-ambiguous');\n", ''),
+    ('M10-messaging', 'message-sender-refused', 'messaging denial on the last target', "            this.#checkMessaging(s.business, 'human', t.instance);\n", ''),
+    ('M11-cursor', 'message-not-found', 'room.read groups one send, pages', "          if (after === undefined) fail('message-not-found');\n", '          if (after === undefined) after = 0;\n'),
+    ('M12-fence', 'session-clearing', 'a clearing last member fences the whole send', '            this.#sessionFence(session);\n', ''),
+]
+
+def sha(data): return hashlib.sha256(data).hexdigest()
+
+def main():
+    OUT.mkdir(exist_ok=True)
+    original = SOURCE.read_bytes()
+    text = original.decode()
+    start = text.index("      case 'room.open':")
+    end = text.index("      // A thread belongs", start)
+    block = text[start:end]
+    for name, refusal, expected, old, new in MUTANTS:
+        if old is None:
+            needle = 'export const TESTER_VERBS = Object.freeze(['
+            assert text.count(needle) == 1
+            changed = text.replace(needle, needle + "\n  'room.open', 'room.send', 'room.read',", 1)
+        else:
+            assert block.count(old) == 1, (name, block.count(old))
+            changed = text[:start] + block.replace(old, new, 1) + text[end:]
+        # Save conventional original→mutant diff without relying on shell interpolation.
+        import difflib
+        (OUT / f'{name}.diff').write_text(''.join(difflib.unified_diff(text.splitlines(True), changed.splitlines(True), fromfile='broker.original', tofile=name)))
+        tmp = subprocess.check_output(['mktemp', '-d', '/mnt/storage/scratch/tmp/XXXXXX'], text=True).strip()
+        env = {**os.environ, 'TMPDIR': tmp}
+        log = OUT / f'{name}.log'
+        try:
+            SOURCE.write_text(changed)
+            with log.open('w') as stream:
+                for command in [['date', '-u'], ['uptime'], ['bash', '-c', 'bash /mnt/storage/scratch/sage-busy-now.sh 2>/dev/null | tail -1']]:
+                    subprocess.run(command, cwd=ROOT, env=env, stdout=stream, stderr=subprocess.STDOUT, check=True)
+                stream.write(f'TMPDIR={tmp}\nmutant={name} refusal={refusal} original_sha256={sha(original)}\n')
+                stream.flush()
+                result = subprocess.run(['timeout', '-k', '10', '120', 'node', '--test', '--test-reporter=tap', 'packages/bus/tests/rooms.test.mjs'],
+                                        cwd=ROOT, env=env, stdout=stream, stderr=subprocess.STDOUT)
+            output = log.read_text()
+            killed = result.returncode == 1 and re.search(r'(?m)^not ok \d+ - ' + re.escape(expected), output)
+            print(f'{name}: exit={result.returncode} target_killed={bool(killed)} log={log}', flush=True)
+            if not killed: return 1
+        finally:
+            SOURCE.write_bytes(original)
+            assert SOURCE.read_bytes() == original
+            assert sha(SOURCE.read_bytes()) == sha(original)
+            with log.open('a') as stream: stream.write(f'RESTORED sha256={sha(original)}\n')
+    return 0
+
+if __name__ == '__main__': sys.exit(main())
@@ -0,0 +1 @@
+No changed-file mention has a literal 64-hex digest within eight lines.
@@ -0,0 +1 @@
+No changed-product-file mention has a literal 64-hex digest within eight lines.
@@ -0,0 +1,6 @@
+packages/bus/src/store.mjs:15:const ddl = readFileSync(new URL('../schema.sql', import.meta.url), 'utf8');
+packages/bus/src/store.mjs:16:export const SCHEMA_SHA256 = 'a2ba3a46f12e56139ecae9e55227d00847842aedec50c1d92aaae28844ca48e7';
+packages/bus/src/store.mjs:106:const hex = (value) => createHash('sha256').update(value).digest('hex');
+packages/bus/src/store.mjs:107:if (hex(ddl) !== SCHEMA_SHA256) throw Error('schema-source-mismatch');
+packages/bus/tests/schema.test.mjs:17:  db.exec(readFileSync(new URL('../schema.sql', import.meta.url), 'utf8'));
+packages/bus/tests/schema.test.mjs:90:  const hex = (s) => createHash('sha256').update(s).digest('hex');
@@ -0,0 +1,133 @@
+packages/bus/tests/session-compactions.test.mjs:9:import { Broker } from '../src/broker.mjs';
+packages/bus/tests/console-decide.test.mjs:14:import { Broker, CONSOLE_VERBS } from '../src/broker.mjs';
+packages/harness/tests/runner.test.mjs:14:import { Broker, BusError } from "../../bus/src/broker.mjs";
+packages/bus/tests/project-files.test.mjs:8:import { PROJECT_FILE_VERBS } from '../src/broker.mjs';
+packages/cli/tests/lifecycle.test.mjs:19:import { BusError } from "../../bus/src/broker.mjs";
+packages/bus/tests/lifecycle-verbs.test.mjs:11:import { Broker, LIFECYCLE_REQUEST_MS, TESTER_VERBS } from '../src/broker.mjs';
+packages/bus/tests/lifecycle-verbs.test.mjs:74:  for (const verb of ['instance.launch', 'instance.end', 'instance.request']) assert.ok(TESTER_VERBS.includes(verb), verb);
+packages/bus/tests/lifecycle-verbs.test.mjs:75:  assert.equal(TESTER_VERBS.includes('instance.regenerate'), false);
+packages/bus/tests/tasks.test.mjs:9:import { Broker, BusError, TASK_VERBS } from '../src/broker.mjs';
+packages/harness/tests/tools.test.mjs:4:import { ORGANIZATION_KEYS as BROKER_ORGANIZATION_KEYS, TASK_PAGE, TASK_PAGE_MAX } from "../../bus/src/broker.mjs";
+packages/seat/tests/session.test.mjs:11:import { Broker } from "../../bus/src/broker.mjs";
+packages/bus/tests/decision-route.test.mjs:12:import { Broker } from '../src/broker.mjs';
+packages/cli/tests/thread-launch.test.mjs:19:import { BusError } from "../../bus/src/broker.mjs";
+packages/seat/tests/sandbox.test.mjs:15:import { Broker } from "../../bus/src/broker.mjs";
+packages/bus/tests/host-run.test.mjs:16:import { Broker, ORGANIZATION_KEYS } from '../src/broker.mjs';
+packages/bus/tests/host-run.test.mjs:181:  // organization.set reaches the writer as limits.set (broker.mjs:1379).
+packages/cli/tests/helpers.mjs:10:import { BusError, Broker } from "../../bus/src/broker.mjs";
+packages/tasks/tests/fields.test.mjs:10:import { TASK_VERBS } from '../../bus/src/broker.mjs';
+packages/tasks/tests/fields.test.mjs:226:      // decision back to that role (broker.mjs, decision.raise).
+packages/webui/tests/instances.test.mjs:15:import { BusError } from '../../bus/src/broker.mjs';
+packages/cli/tests/tester-threads.test.mjs:14:import { BusError, Broker } from "../../bus/src/broker.mjs";
+packages/bus/tests/staff-request.test.mjs:8:import { Broker } from '../src/broker.mjs';
+packages/tasks/tests/world.mjs:5:import { Broker } from '../../bus/src/broker.mjs';
+packages/cli/tests/processing-cli.test.mjs:7:import { Broker } from '../../bus/src/broker.mjs';
+packages/bus/tests/grant-host.test.mjs:10:import { Broker, registrySha256 } from '../src/broker.mjs';
+packages/business/tests/workflow-roles.test.mjs:115:    // Q169 (broker.mjs END_PROTECTED, #hardWait): revoking the assistant is a hard wait as well.
+packages/business/tests/workflow-roles.test.mjs:136:  // sage-0709: only recordLand spends a decision (broker.mjs #spent). checkLand refuses decision-consumed after
+packages/cli/tests/thread-revoke.test.mjs:18:import { BusError } from "../../bus/src/broker.mjs";
+packages/bus/tests/tester-writes.test.mjs:10:import { Broker, TESTER_VERBS, TESTER_ORGANIZATION_VERBS } from '../src/broker.mjs';
+packages/bus/tests/tester-writes.test.mjs:18:test('row 175: TESTER_VERBS and the organization branch tester set are pinned', () => {
+packages/bus/tests/tester-writes.test.mjs:19:  assert.deepEqual([...TESTER_VERBS], [
+packages/bus/tests/tester-writes.test.mjs:32:  assert.ok(Object.isFrozen(TESTER_VERBS) && Object.isFrozen(TESTER_ORGANIZATION_VERBS));
+packages/cli/tests/stack-release.test.mjs:1993: for(const [f,text] of [['packages/cli/src/cli.mjs',id===A?'// fixture host from before row 163\nprocess.exit(1);\n':script(rHost)],['packages/webui/src/cli.mjs',script(rConsole)],['packages/bus/src/store.mjs',rStore(v,froms)],['packages/bus/src/migrate-schema.mjs',script(rMigrate)],['packages/bus/src/broker.mjs','export class BusError extends Error { constructor(code) { super(code); this.code = code; } }\n']]){mkdirSync(dirname(join(d,f)),{recursive:true});writeFileSync(join(d,f),text)}
+packages/cli/tests/session-cli.test.mjs:94:  const { Broker } = await import('../../bus/src/broker.mjs');
+packages/cli/tests/session-launch.test.mjs:21:import { BusError } from "../../bus/src/broker.mjs";
+packages/cli/tests/revoke-window.test.mjs:19:import { BusError } from "../../bus/src/broker.mjs";
+packages/bus/tests/chief-of-staff.test.mjs:10:import { Broker, ACTIONS } from '../src/broker.mjs';
+packages/cli/tests/instances.test.mjs:13:import { BusError } from "../../bus/src/broker.mjs";
+packages/cli/tests/thread-cli.test.mjs:14:import { BusError, Broker } from "../../bus/src/broker.mjs";
+packages/bus/tests/processing.test.mjs:6:import { Broker } from '../src/broker.mjs';
+packages/cli/tests/idle-stop-race.test.mjs:17:import { BusError } from "../../bus/src/broker.mjs";
+packages/cli/tests/tester-reads.test.mjs:12:import { BusError } from "../../bus/src/broker.mjs";
+packages/cli/tests/session-clear.test.mjs:18:import { BusError } from "../../bus/src/broker.mjs";
+packages/bus/tests/names.test.mjs:8:import { Broker } from '../src/broker.mjs';
+packages/cli/tests/compactions-launch.test.mjs:24:import { BusError } from "../../bus/src/broker.mjs";
+packages/cli/tests/tester.test.mjs:7:import { BusError, Broker } from "../../bus/src/broker.mjs";
+packages/bus/tests/reload.test.mjs:9:import { Broker } from '../src/broker.mjs';
+packages/bus/tests/agents.test.mjs:9:import { Broker } from '../src/broker.mjs';
+packages/bus/tests/end-launch.test.mjs:9:import { Broker } from '../src/broker.mjs';
+packages/webui/tests/decide-browser.test.mjs:14:import { Broker } from '../../bus/src/broker.mjs';
+packages/bus/tests/credential-verbs.test.mjs:11:import { Broker, CREDENTIAL_VERBS } from '../src/broker.mjs';
+packages/webui/tests/send-browser.test.mjs:13:import { Broker } from '../../bus/src/broker.mjs';
+packages/bus/tests/launch-notice.test.mjs:8:import { Broker } from '../src/broker.mjs';
+packages/bus/tests/messages.test.mjs:3:import { Broker } from '../src/broker.mjs';
+packages/bus/tests/workflow-roles.test.mjs:11:import { Broker } from '../src/broker.mjs';
+packages/bus/tests/library-sync.test.mjs:11:import { Broker, LIBRARY_VERBS } from '../src/broker.mjs';
+packages/bus/tests/credential-status.test.mjs:12:import { Broker } from '../src/broker.mjs';
+packages/bus/tests/gitea-grant-docker.test.mjs:15:import { Broker, GRANT_EVIDENCE } from '../src/broker.mjs';
+packages/bus/tests/thread-migration.test.mjs:11:import { Broker } from '../src/broker.mjs';
+packages/bus/tests/comment-cursors.test.mjs:7:import { Broker } from '../src/broker.mjs';
+packages/bus/tests/thread-claims.test.mjs:11:import { Broker } from '../src/broker.mjs';
+packages/bus/tests/state.test.mjs:7:import { Broker, TASK_PAGE } from '../src/broker.mjs';
+packages/bus/tests/access-revoke.test.mjs:14:import { Broker } from '../src/broker.mjs';
+packages/bus/tests/plugins-verb.test.mjs:9:import { Broker } from '../src/broker.mjs';
+packages/bus/tests/transport.test.mjs:8:import { Broker } from '../src/broker.mjs';
+packages/bus/tests/publish.test.mjs:14:import { Broker } from '../src/broker.mjs';
+packages/bus/tests/publish.test.mjs:221:  const { ACTIONS, HARD_WAITS } = await import('../src/broker.mjs');
+packages/bus/tests/tester-threads.test.mjs:11:import { Broker } from '../src/broker.mjs';
+packages/bus/tests/tester-threads.test.mjs:284:  // The row #specNotice (broker.mjs) writes for a human save of the spec in project stack. The save
+packages/bus/tests/approval-binding.test.mjs:7:import { Broker } from '../src/broker.mjs';
+packages/bus/tests/fire-revokes-grants.test.mjs:15:import { Broker, GRANT_EVIDENCE, registrySha256 } from '../src/broker.mjs';
+packages/bus/tests/daily-quota-runtime.test.mjs:10:import { Broker } from '../src/broker.mjs';
+packages/bus/tests/limit-checks.test.mjs:323:  for (const file of ['../src/runtime.mjs', '../src/broker.mjs', '../src/process.mjs']) {
+packages/bus/tests/spec-fixtures.mjs:6:import { Broker } from '../src/broker.mjs';
+packages/bus/tests/decisions.test.mjs:9:import { Broker, RECENT } from '../src/broker.mjs';
+packages/bus/tests/peer-transport.test.mjs:9:import { BusError } from '../src/broker.mjs';
+packages/bus/tests/peer-transport.test.mjs:47: const {TASK_VERBS,BusError}=await import('../src/broker.mjs');
+packages/bus/tests/messaging.test.mjs:8:import { Broker } from '../src/broker.mjs';
+packages/bus/tests/rooms.test.mjs:8:import { Broker, THREAD_PAGE, THREAD_PAGE_MAX, TESTER_VERBS } from '../src/broker.mjs';
+packages/bus/tests/rooms.test.mjs:80:    assert.ok(!TESTER_VERBS.includes(verb));
+packages/bus/tests/web.test.mjs:8:import { Broker, BusError, WEB_UNTRUSTED } from '../src/broker.mjs';
+packages/bus/tests/replies.test.mjs:11:import { Broker, REPLIES } from '../src/broker.mjs';
+packages/bus/tests/thread-shares.test.mjs:14:import { Broker } from '../src/broker.mjs';
+packages/bus/tests/message-citation.test.mjs:6:import { Broker } from '../src/broker.mjs';
+packages/bus/tests/limits.test.mjs:7:import {Broker} from '../src/broker.mjs';
+packages/bus/tests/host-fixtures.mjs:6:import { registrySha256, writeGrantEvent } from '../src/broker.mjs';
+packages/bus/tests/gitea-grant.test.mjs:12:import { Broker, GRANT_EVIDENCE, writeGrantEvent } from '../src/broker.mjs';
+packages/bus/tests/csuite-messaging.test.mjs:12:import { Broker } from '../src/broker.mjs';
+packages/bus/tests/decision-close.test.mjs:9:import { Broker } from '../src/broker.mjs';
+packages/bus/tests/grant-scope.test.mjs:14:import { Broker, GRANT_EVIDENCE, writeGrantEvent } from '../src/broker.mjs';
+packages/bus/tests/project-await.test.mjs:7:import { Broker, BusError } from '../src/broker.mjs';
+packages/bus/tests/launcher-released.test.mjs:8:import { Broker } from '../src/broker.mjs';
+packages/bus/tests/limit-stop.test.mjs:12:import { Broker } from '../src/broker.mjs';
+packages/bus/tests/message-filter.test.mjs:12:import { Broker, REPLIES } from '../src/broker.mjs';
+packages/bus/tests/land.test.mjs:18:import { Broker } from '../src/broker.mjs';
+packages/bus/tests/single-use.test.mjs:7:import { Broker } from '../src/broker.mjs';
+packages/bus/tests/session-clear.test.mjs:10:import { Broker } from '../src/broker.mjs';
+packages/bus/tests/grant-migration.test.mjs:10:import { Broker } from '../src/broker.mjs';
+packages/bus/tests/usage-broker.test.mjs:7:import { Broker } from '../src/broker.mjs';
+packages/bus/tests/project-runtime.test.mjs:13:  const source = readFileSync(new URL('../src/broker.mjs', import.meta.url), 'utf8');
+packages/bus/tests/task-read.test.mjs:7:import { Broker } from '../src/broker.mjs';
+packages/bus/tests/library.test.mjs:8:import { Broker } from '../src/broker.mjs';
+packages/bus/tests/instances-verb.test.mjs:11:import { Broker, LIFECYCLE_HUMAN_VERBS, ORGANIZATION_KEYS, TESTER_ORGANIZATION_VERBS } from '../src/broker.mjs';
+packages/bus/tests/routes-verb.test.mjs:13:import { Broker, ORGANIZATION_KEYS } from '../src/broker.mjs';
+packages/bus/tests/broker.test.mjs:10:const { Broker } = await import('../src/broker.mjs').catch((e) => {
+packages/bus/tests/grant-enroll.test.mjs:10:import { Broker, BusError, writeGrantEvent, registrySha256 } from '../src/broker.mjs';
+packages/bus/tests/hard-waits.test.mjs:7:import { Broker, ACTIONS, HARD_WAITS } from '../src/broker.mjs';
+packages/bus/tests/requirements.test.mjs:10:import { Broker } from '../src/broker.mjs';
+packages/bus/tests/grant-executor.test.mjs:15:import { Broker, registrySha256, writeGrantEvent } from '../src/broker.mjs';
+packages/bus/tests/sessions.test.mjs:10:import { Broker } from '../src/broker.mjs';
+packages/bus/tests/user-principal.test.mjs:14:  Broker, ACTIONS, USER_VERBS, TESTER_VERBS, TASK_VERBS, WEB_VERBS, HOST_VERBS, HOSTS_VERBS, CREDENTIAL_VERBS,
+packages/bus/tests/user-principal.test.mjs:16:} from '../src/broker.mjs';
+packages/bus/tests/user-principal.test.mjs:137:    ...ACTIONS, ...TESTER_VERBS, ...TESTER_ORGANIZATION_VERBS, ...PROJECT_FILE_VERBS, ...LIBRARY_VERBS, ...CREDENTIAL_VERBS, ...HOSTS_VERBS,
+packages/bus/tests/tester.test.mjs:10:import { Broker, TASK_VERBS } from '../src/broker.mjs';
+packages/bus/tests/threads.test.mjs:9:import { Broker, THREAD_PAGE } from '../src/broker.mjs';
+packages/webui/tests/routes-browser.test.mjs:15:import {BusError} from '../../bus/src/broker.mjs';
+packages/bus/tests/creative.test.mjs:8:import { Broker } from '../src/broker.mjs';
+packages/webui/tests/granted-user.test.mjs:16:import { Broker } from '../../bus/src/broker.mjs';
+packages/bus/tests/task-page.test.mjs:7:import { Broker, TASK_PAGE, TASK_PAGE_MAX } from '../src/broker.mjs';
+packages/webui/tests/user-option-swap.test.mjs:14:import { Broker } from '../../bus/src/broker.mjs';
+packages/webui/tests/board-held.test.mjs:20:import { Broker } from '../../bus/src/broker.mjs';
+packages/webui/tests/chat-sessions-access.test.mjs:10:import { Broker } from '../../bus/src/broker.mjs';
+packages/bus/tests/review.test.mjs:14:import { Broker } from '../src/broker.mjs';
+packages/webui/tests/sso-browser.test.mjs:14:import { Broker } from '../../bus/src/broker.mjs';
+packages/bus/tests/revoke-window.test.mjs:13:import { Broker } from '../src/broker.mjs';
+packages/webui/tests/bus.test.mjs:13:import { Broker } from '../../bus/src/broker.mjs';
+packages/bus/tests/viewer.test.mjs:13:  Broker, ACTIONS, USER_VERBS, VIEWER_VERBS, BOARD_VERBS, TESTER_VERBS, TESTER_ORGANIZATION_VERBS, PROJECT_FILE_VERBS,
+packages/bus/tests/viewer.test.mjs:14:} from '../src/broker.mjs';
+packages/bus/tests/viewer.test.mjs:116:  const others = new Set([...ACTIONS, ...TESTER_VERBS, ...TESTER_ORGANIZATION_VERBS, ...PROJECT_FILE_VERBS, ...BOARD_VERBS, 'no.such.verb']);
+packages/webui/tests/tester-fixture.mjs:12:import { Broker, BusError } from '../../bus/src/broker.mjs';
+packages/webui/tests/routes.test.mjs:12:import { BusError } from '../../bus/src/broker.mjs';
+packages/webui/tests/chat.test.mjs:191:  const { Broker } = await import('../../bus/src/broker.mjs');
+packages/webui/tests/bus-browser.test.mjs:11:import { Broker } from '../../bus/src/broker.mjs';
@@ -0,0 +1,56 @@
+# Row 326 / #1822 — five run-sheet gaps
+
+Goldie, 2026-10-24. Branch goldie/row-run-sheet in /home/jwoltje/.t3/worktrees/mosaic-stack/goldie-row-run-sheet. Base local refactor4ec279dc43922b338a94718a2afdaba87ef89c15, explicitly assigned by sage-3893. Brief docs/plans/2026-10-24_run-sheet-doc-brief.md at4ec279dc4, blobce3e24fa, section Brief: five run-sheet gaps. Reviewer Gladstone; Sage posts review and owns landing/full gate.
+
+## Before / after and choices
+
+Before: the sheet omitted proof bytes/newline handling, treated render refusal without distinguishing metadata/content, omitted missing-project warning consequences and a pre-install key check, offered no first-install retry form, and omitted the bus-relative backup checksum form.
+
+After: the sheet covers all five cases in their existing sections6/9. Numbered section headings are unchanged. Only this BUILD.md and docs/guides/host-run-sheet.md are edited, per the brief's explicit two-file boundary. Session/build-phase registration and the manifest are recorded here rather than adding changes to SESSIONS.md, BUILD-LOG.md or a third manifest file. No host action or credential read. No suite or product command executed, and no CLEAR needed for this doc-only row (decision137).
+
+| Gap / claim | Source read and how it supports the text |
+| --- | --- |
+| Proof format, optional LF | webui/src/serve.mjs:257-267 opens no-follow, checks regular/uid/mode600-or400, strips exactly one trailing LF at263, then requires32+ ASCII base64url chars at264. Table states the allowed alphabet and one optional trailing LF. Extra newline/CR is outside that alphabet. |
+| Render versus start | case2-unit.sh:397-408 explicitly stats/realpaths the proof and never opens it. webui/src/serve.mjs:267 throws the content error; webui/src/cli.mjs:138-140 catches and sets exit2. Table now distinguishes metadata refusal at render from bad bytes at Console start. |
+| Missing project warning | business/src/cli.mjs:74-78 reports absent plus the no-project-variables warning, then continues. case2-install.sh:217-221 captures validate output and prints business-validates on success. Text makes that incomplete install possible and tells operators to stop on the missing-file warning, per Duckworth row323 N2. |
+| Pre-install key check | business/src/cli.mjs:71-82 checks every file-backed project, skips kind library, and requires loaded id==business key at80. Read-only inline Node uses only builtins and section2's pinned node, as mosaic. It reads the exact intended business input and files under each project's root, prints a match, and exits nonzero with STOP for read/JSON/id failure. Expected .53 output comes from .mosaic/project.json:3 and case1-business.mosaic-stack.json:10-11. Fixing business rather than project id is mos-1563. |
+| Why check before install | case2-install.sh:178 makes the copy before validation at217. New check is explicitly before case2-install.sh and needs no existing Mosaic config, npm modules or installed wrapper. |
+| Refused first-install residue | case2-install.sh:172/174 creates/bootstraps the config; bootstrap.sh:13 dispatches to mosaic-config.mjs, whose412-424 creates config.json or validates an existing one without rewriting it. case2-install.sh:200-211 may create businesses/file and library slots. case2-persona-import.mjs:300-308 may create library personas. Validation cleanup at case2-install.sh:217-219 removes only this run's new business file, retaining dirs. Copy may already exist under the path at install:80/178; stack-copy.sh:68 reuses an existing copy. |
+| Retry paths / refs | Mos-1565/ops-0291, as pinned in the brief, names exactly root checkout, mosaic clone and default config dir to move aside. UTC-suffixed mv is root-only documentation; no delete, chown or chmod. Destination collision/move failure prints STOP. Retry starts section6's first-install block again. The existing upgrade fetch targets only refs/remotes/origin/refactor; stack-copy.sh:44-48 requires reachability from both it and refs/heads/refactor. |
+| Credential re-placement | Existing sheet section9 names claude-session.env, library proof and library-gitea with owner/mode. Moving config aside preserves them but the new config needs Jason to re-place any already-filled files, under mos-1565. Existing per-agent slots still require credentials issue/Approve, never hand placement. No value or command to read a credential added. |
+| Backup hand check | stack-release.sh:475-482 creates activation/bus and writes SHA256SUMS from inside bus. restore at502 and rehearsal at2244 cd bus and check ../SHA256SUMS. New hand command does the same as mosaic, without --quiet so the expected bus.sqlite:OK is visible; ops-0292 records why checking in activation itself fails. |
+
+## Read-only grep gate
+
+Executed after editing, with no test/suite run:
+
+```
+git grep -n host-run-sheet -- 'packages/*/tests/*' 'scripts/*'
+# no output, exit1
+
+git grep -n case1-business.mosaic-stack.json -- 'packages/*/tests/*' 'scripts/*'
+packages/business/tests/case1-business-file.test.mjs:13:const DOCUMENT = join(REPO, "docs/guides/case1-business.mosaic-stack.json");
+packages/business/tests/case1-project-key.test.mjs:9:const CASE1 = join(REPO, "docs/guides/case1-business.mosaic-stack.json");
+# exit0: positive control, same command form, both tests read this document
+
+git grep -n -E '(host-run-sheet.*[0-9a-f]{64}|[0-9a-f]{64}.*host-run-sheet)' -- 'packages/*/tests/*'
+# no output, exit1: no 64-hex test pin beside the sheet name
+```
+
+An earlier positive control with case2-install.sh also found the real installer spawn in case1-business-file.test.mjs:39 and the CLI installer tests. The sheet-name search finds no reference at all in tests/scripts, stronger than just finding no same-line pin. No read/pin blocker.
+
+Static syntax only: extracted the three new shell snippets, replaced only the version placeholder for parsing, and ran bash-n3/3. Extracted Node heredoc parsed with node --check --input-type=module. No snippet body executed. git diff --check passes. Source citations checked against this base; no new em dash and section numbering unchanged.
+
+## Session / claimant receipt
+
+2026-10-24 | Goldie a13dd6d5-5e73-4b7d-8318-02abeff24940 | Row326/#1822 doc-only build | Five gaps documented with source lines and grep control; no suites/host/credential action. Claim goldie-0326-start-1 rev3793, briefed→in-progress. In-review follows the pushed candidate; expected tokenless pre-send failure will be handed to Sage.
+
+## Inline manifest
+
+Only the sheet needs a content pin; BUILD.md is this receipt in the same candidate commit. An inline manifest honors the brief's two-file limit:
+
+```
+e4c14516edff3bfbc81ea553a5a6ccebb6154942473540659d4681c2d56c9711  docs/guides/host-run-sheet.md
+```
+
+Reviewer validates the five source chains and operational order. Sage's landing gate owns suites. No code row265 work started; its brief comes separately.
@@ -0,0 +1,10 @@
+# Gyro
+
+Builder seat, Codex gpt-6.1-sol, started by Sage under Q246 and mos-1571, as the W2 brief names. Owns row 310, O2 W2:
+the WordCraft source import and reproducible restricted web build (docs/plans/2026-10-21_q195-writing-editor.md,
+"W2 WordCraft source import and reproducible restricted web build").
+
+No launcher in this directory. The seat runs as a T3 thread and works in its own worktree. It has no credentials of its
+own; it pushes only its own `gyro/*` branches through the repository credential helper (mos-0981), never `refactor`,
+`main` or another seat's branch. Claude seats orchestrate and give the Opus 5.5 landing review (mos-1571). Registered by
+Sage on 2026-10-24 so the queue can name the seat as row owner (store.mjs isSeatDir).
@@ -0,0 +1,592 @@
+# Row 310 W2 WordCraft restricted source build
+
+Started 2026-10-24 by Gyro, T3 thread 4c520dc8-238f-4f76-a973-28f2ef87310d.
+Issue #1824; branch gyro/row310; base d16958bcf.
+
+## Authority and constraints
+
+Sage dispatch sage-3970 implements the approved W2 brief under Q246/mos-1571.
+Read AGENTS.md, agents/gyro/README.md, D2/F4/D6-D9/G1/S0/W2 in
+`docs/plans/2026-10-21_q195-writing-editor.md`, S0 report/inventory and CSP
+measurement using `git show 74ec32013:<path>`, and Louie's pinned evaluation.
+S0 is evidence, never modified. Protected source is read-only at
+`e05b7fe86f3b85454000dffc321de638d7009817`, WordCraft 0.9.0.
+No source checkout builds, live services/configuration, credentials, private books,
+frame routes, shell CSP changes, policy expansion or dependency/tool changes.
+All build/test runs need Sage CLEAR and use low priority, at most four jobs,
+and TMPDIR freshly allocated beneath /mnt/storage/scratch/tmp.
+No commit before applicable checks pass; report source/vendor bytes before commit
+and every product binary path/size before first push. Push gyro/* only after ruling.
+
+## Implementation plan
+
+The existing approved design fixes the approach: immutable original import plus a
+reviewable patch applied to isolated build roots, offline vendor inputs and pinned
+tool hashes. An edited upstream import would lose the original-source receipt;
+Louie's built files cannot substitute for a reproducible source build.
+
+- [ ] Inventory original tracked input paths/bytes/hashes; import via git archive
+  into third_party/wordcraft/upstream. Inventory 209 reviewed packages and exact
+  git pins from S0; vendor only approved inputs with license/source receipts.
+- [ ] Write provenance/build refusal tests first: changed/missing inputs, extra
+  dependencies, wrong tools, non-offline build, unshipped runtime dependency,
+  inline bootstrap/styles and stale output manifests must refuse.
+- [ ] Implement build.mjs/toolchain.json/PROVENANCE.json/NOTICE and source patch.
+  Build from copied owned source with path remapping, stable environment and
+  manifest verification; external frame HTML/CSS/module bootstrap; package all
+  runtime files under src/public/wordcraft without serving them.
+- [ ] Carry M1-M14 explicitly through patch and acceptance inventory. Host hooks
+  replace rfd/picker/download/print; block raw drops, local font enumeration,
+  persisted prose/fonts and direct outbound navigation. W6 owns production
+  bridge/routes, host import watchdog/sandbox and malformed corpus integration;
+  no placeholder is counted as passing mitigation evidence.
+- [ ] Request CLEAR for each build/test stage. Build twice at different absolute
+  roots offline with the pinned tools. Compare every integration output hash,
+  record bytes/tool hashes/timings and run each touched test file independently,
+  affected WebUI suite and required repository checks on the assigned slot.
+- [ ] Use scratch fixtures to measure exact Q234 style-src 'self' CSP with full
+  function coverage including host-owned Print, zero violations, no rfd/file
+  picker/download fallback and no external traffic. Preserve plain-text receipts.
+- [ ] Report source/vendor totals and product binary inventory to Sage. After
+  checks/ruling, commit, push gyro/row310 through helper, send Sage and Gladstone
+  base/tip plus sha256 for every changed path. Move only row 310 to in-review;
+  Sage posts Gitea request. Filbert rechecks inventory once at landing.
+
+## Acceptance risks to resolve
+
+1. Vendor resolution must match reviewed normal/build closure, while preserving
+   original Cargo.lock and accounting for workspace-only dependency resolution.
+2. Tool identity includes Rust target std and actual Trunk/wasm helper executables;
+   installed versions alone cannot establish tool identity.
+3. Removing one Services hook leaves UI/engine fallbacks; trace all before patching.
+4. Root-independent WASM includes generated build metadata; wasm-bindgen-shared's
+   git probing and absolute source paths need deterministic inputs/remapping.
+5. W2 scratch host coverage must be real bytes/function behavior; W6 mitigation
+   gates remain explicit where production bridge authority is not yet available.
+
+## Activity and evidence
+
+- Initial worktree clean; HEAD d16958bcf, correct branch. Protected source HEAD
+  matches pin and git status is clean. No build or test has run.
+- `scripts/mosaic queue next gyro` correctly refused in linked worktree. Retried
+  through canonical checkout as documented; operation still running at this note.
+- Sage CLEAR sage-3973 covers new test red/green, offline metadata/tree/vendor prep
+  and one restricted release build with nice 19 / four jobs / fresh TMPDIR.
+- Retried identical queue op gyro-0001 after Glomgold released lock: success,
+  revision 3857, row 310 briefed -> in-progress.
+- Count reconciliation: F4's 199 counts third-party normal dependency edges for
+  wordcraft-web/wasm32-unknown-unknown. S0 adds 10 build-only dependencies, hence
+  209 third-party source/notice inputs, plus 15 local crates = 224 records.
+  These are distinct closures, not a dependency expansion. Current vendor is
+  exactly those 209 package identities, 10,499 files / 130,737,232 bytes before
+  final packaging corrections; upstream is 612 files / 26,913,076 bytes.
+- New provenance/build tests ran individually under CLEAR; each has 2 expected
+  first-run failures because the owned verifier/builder does not exist yet.
+- First offline metadata probe caught an error in my git-manifest normalization:
+  replacing version.workspace as a substring also changed rust-version.workspace.
+  No upstream input changed. Correcting anchored substitutions before repeating.
+
+### Build-only manifest reduction (sage-3974)
+
+- Cargo.toml: members reduced to the 15 reviewed local crates; default member wordcraft-web. No runtime feature changes.
+- crates/doc/Cargo.toml: remove [dev-dependencies] from isolated build copy; excluded dev/test or native-only resolution.
+- crates/docbin/Cargo.toml: remove [dev-dependencies] from isolated build copy; excluded dev/test or native-only resolution.
+- crates/docx/Cargo.toml: remove [dev-dependencies] from isolated build copy; excluded dev/test or native-only resolution.
+- crates/engine/Cargo.toml: remove [target.'cfg(not(target_arch = "wasm32"))'.dependencies] from isolated build copy; excluded dev/test or native-only resolution.
+- crates/engine/Cargo.toml: remove [dev-dependencies] from isolated build copy; excluded dev/test or native-only resolution.
+- crates/formats/Cargo.toml: remove [dev-dependencies] from isolated build copy; excluded dev/test or native-only resolution.
+- crates/pdf/Cargo.toml: remove [dev-dependencies] from isolated build copy; excluded dev/test or native-only resolution.
+- crates/proof/Cargo.toml: remove [dev-dependencies] from isolated build copy; excluded dev/test or native-only resolution.
+- crates/render/Cargo.toml: remove [target.'cfg(not(target_arch = "wasm32"))'.dependencies] from isolated build copy; excluded dev/test or native-only resolution.
+- crates/ui-egui/Cargo.toml: remove [target.'cfg(target_os = "linux")'.dependencies] from isolated build copy; excluded dev/test or native-only resolution.
+- crates/ui-egui/Cargo.toml: remove [dev-dependencies] from isolated build copy; excluded dev/test or native-only resolution.
+- crates/zotero/Cargo.toml: remove [dev-dependencies] from isolated build copy; excluded dev/test or native-only resolution.
+- sage-3976 permits proven-false target-section removal in THIRD-PARTY manifests
+  only in isolated build copies, with matching checksum rewrites. A three-valued
+  cfg analysis keeps unknown/custom flags/features unchanged and identifies 26
+  manifests / 57 false-target dependency sections; target-filter-plan.json lists
+  every crate/cfg/dependency. This is below the ~30-manifest stop boundary.
+- The scratch-only filtered source still refuses: wgpu-core's dormant `angle`
+  feature references its removed Apple-only dependency. Stopped at the explicit
+  feature-definition boundary and sent gyro-0006 to Sage. No feature edited.
+- Tool versions match all five pins; toolchain.json records their binary hashes
+  and the Rust compiler driver/wasm target support files. No release build yet.
+- Current notice bundle includes 209 third-party package mappings, local source
+  license/attribution/font texts and self_cell/ryu Apache-2.0 elections. Source
+  verifier green: 2/2. Output/build acceptance remains red/unimplemented.
+
+### Original-source subset (sage-3976)
+
+Excluded whole directories assets/app-icon/, docs/images/ and packaging/macos/: web frame serves no icon; screenshots and macOS packaging are never build inputs. Every license/notice/copyright remains. Included files remain byte-identical; no vendor file removed. Exact excluded paths:
+
+- assets/app-icon/hicolor/128x128/apps/ai.storyteller.wordcraft.png
+- assets/app-icon/hicolor/16x16/apps/ai.storyteller.wordcraft.png
+- assets/app-icon/hicolor/24x24/apps/ai.storyteller.wordcraft.png
+- assets/app-icon/hicolor/256x256/apps/ai.storyteller.wordcraft.png
+- assets/app-icon/hicolor/32x32/apps/ai.storyteller.wordcraft.png
+- assets/app-icon/hicolor/48x48/apps/ai.storyteller.wordcraft.png
+- assets/app-icon/hicolor/512x512/apps/ai.storyteller.wordcraft.png
+- assets/app-icon/hicolor/64x64/apps/ai.storyteller.wordcraft.png
+- assets/app-icon/hicolor/scalable/apps/ai.storyteller.wordcraft.svg
+- assets/app-icon/wordcraft-1024.png
+- assets/app-icon/wordcraft-macos-512.png
+- assets/app-icon/wordcraft.icns
+- assets/app-icon/wordcraft.ico
+- assets/app-icon/wordcraft.svg
+- docs/images/backstage.png
+- docs/images/dark.png
+- docs/images/design.png
+- docs/images/hero.png
+- docs/images/layout.png
+- docs/images/references.png
+- docs/images/review.png
+- packaging/macos/Info.plist.in
+- packaging/macos/dmg/README.md
+- packaging/macos/dmg/background.svg
+- packaging/macos/dmg/background.tiff
+- packaging/macos/dmg/dmg-layout.DS_Store
+- packaging/macos/dmg/generate.py
+- packaging/macos/entitlements.plist
+- packaging/macos/import-cert.sh
+- packaging/macos/package.sh
+- sage-3982 approved the 103 enumerated feature items across eight manifests,
+  mechanical script only, build copies only. Scratch application completed;
+  original vendor unchanged. A committed reproducible generator/test is pending
+  the packaging decision; no third-party source/feature edits are hand-applied.
+- sage-3983 permits custom cfg fuzzing/loom/miri false under a sanitized,
+  refusing release environment. Third-party target inventory is now 28 manifests
+  / 59 sections. It narrows the feature gate to root-specific package/selected
+  feature closure equality: S0's workspace-unified 293-node feature metadata is
+  context, not an equality target. Exact 199 normal /209 normal+build identities
+  remain the acceptance sets.
+- Following that reduction, metadata refuses on encoding_rs/simdutf8 under a
+  target_feature=simd128 cfg. Pinned rustc default cfg has no simd128. The filter
+  retained target-feature flags as unknown. Scope stop per sage-3983: one-page
+  PACKAGING-BOUNDARY.md and complete survey sent to Sage in gyro-0010. No further
+  cfg/dependency category changed. No release build, commit, push or live change.
+- Mos mos-1572/1573 via sage-3979: landing held pending Jason/Vikunja618; gyro
+  review-branch push is allowed after validation, with full binary listing.
+  Whole-row and runtime-only pack-size measurements are required after a local
+  verified commit; offline tool availability/provenance/timing also requested.
+
+## Measured-cfg reduction under sage-3984g
+
+Pinned rustc cfg is rustc-wasm32-cfg.txt. releaseEnvironment refuses inherited flag variables and forwards only an allowlist to the cfg measurement. Filter evaluator and mechanical feature cleanup are in build.mjs; no optional normal dependency removed.
+
+- aes-0.9.3: remove dependencies under cfg(any(target_arch = "aarch64", target_arch = "x86_64", target_arch = "x86")); dependencies cpufeatures.
+- bytes-1.12.1: remove dev-dependencies under cfg(loom); dependencies loom.
+- cmov-0.5.4: remove dev-dependencies under cfg(any(unix, windows)); dependencies proptest.
+- eframe-0.36.2: remove dependencies under cfg(any(target_os = "macos")); dependencies objc2.
+- eframe-0.36.2: remove dependencies under cfg(any(target_os = "macos")); dependencies objc2-app-kit.
+- eframe-0.36.2: remove dependencies under cfg(any(target_os = "macos")); dependencies objc2-foundation.
+- eframe-0.36.2: remove dependencies under cfg(any(target_os = "windows")); dependencies windows-sys.
+- eframe-0.36.2: remove dependencies under cfg(not(target_arch = "wasm32")); dependencies egui-wgpu.
+- eframe-0.36.2: remove dependencies under cfg(not(target_arch = "wasm32")); dependencies egui-winit.
+- eframe-0.36.2: remove dependencies under cfg(not(target_arch = "wasm32")); dependencies glutin.
+- eframe-0.36.2: remove dependencies under cfg(not(target_arch = "wasm32")); dependencies glutin-winit.
+- eframe-0.36.2: remove dependencies under cfg(not(target_arch = "wasm32")); dependencies image.
+- eframe-0.36.2: remove dependencies under cfg(not(target_arch = "wasm32")); dependencies pollster.
+- eframe-0.36.2: remove dependencies under cfg(not(target_arch = "wasm32")); dependencies winit.
+- eframe-0.36.2: remove dev-dependencies under cfg(not(target_arch = "wasm32")); dependencies directories.
+- eframe-0.36.2: feature accesskit removes egui-winit/accesskit; dependency egui-winit removed under cfg(not(target_arch = "wasm32")).
+- eframe-0.36.2: feature android-game-activity removes egui-winit/android-game-activity; dependency egui-winit removed under cfg(not(target_arch = "wasm32")).
+- eframe-0.36.2: feature android-native-activity removes egui-winit/android-native-activity; dependency egui-winit removed under cfg(not(target_arch = "wasm32")).
+- eframe-0.36.2: feature default removes winit/default; dependency winit removed under cfg(not(target_arch = "wasm32")).
+- eframe-0.36.2: feature glow removes dep:glutin-winit; dependency glutin-winit removed under cfg(not(target_arch = "wasm32")).
+- eframe-0.36.2: feature glow removes dep:glutin; dependency glutin removed under cfg(not(target_arch = "wasm32")).
+- eframe-0.36.2: feature links removes egui-winit/links; dependency egui-winit removed under cfg(not(target_arch = "wasm32")).
+- eframe-0.36.2: feature persistence removes egui-winit/serde; dependency egui-winit removed under cfg(not(target_arch = "wasm32")).
+- eframe-0.36.2: feature wayland removes egui-winit/wayland; dependency egui-winit removed under cfg(not(target_arch = "wasm32")).
+- eframe-0.36.2: feature wayland removes glutin?/wayland; dependency glutin removed under cfg(not(target_arch = "wasm32")).
+- eframe-0.36.2: feature wayland removes glutin-winit?/wayland; dependency glutin-winit removed under cfg(not(target_arch = "wasm32")).
+- eframe-0.36.2: feature wgpu_no_default_features removes dep:pollster; dependency pollster removed under cfg(not(target_arch = "wasm32")).
+- eframe-0.36.2: feature x11 removes egui-winit/x11; dependency egui-winit removed under cfg(not(target_arch = "wasm32")).
+- eframe-0.36.2: feature x11 removes glutin?/x11; dependency glutin removed under cfg(not(target_arch = "wasm32")).
+- eframe-0.36.2: feature x11 removes glutin?/glx; dependency glutin removed under cfg(not(target_arch = "wasm32")).
+- eframe-0.36.2: feature x11 removes glutin-winit?/x11; dependency glutin-winit removed under cfg(not(target_arch = "wasm32")).
+- eframe-0.36.2: feature x11 removes glutin-winit?/glx; dependency glutin-winit removed under cfg(not(target_arch = "wasm32")).
+- encoding_rs-0.8.42: remove dependencies under cfg(all(any(target_arch = "x86_64", target_arch = "x86"), not(all(target_feature = "avx2", target_feature = "bmi1")))); dependencies multiversion.
+- encoding_rs-0.8.42: remove dependencies under cfg(any(target_arch = "x86_64", target_arch = "x86")); dependencies core_detect.
+- encoding_rs-0.8.42: remove dependencies under cfg(any(target_arch = "x86_64", target_arch = "x86", target_arch = "aarch64", all(target_arch = "wasm32", target_feature = "simd128"))); dependencies simdutf8.
+- encoding_rs-0.8.42: feature std removes dep:multiversion; dependency multiversion removed under cfg(all(any(target_arch = "x86_64", target_arch = "x86"), not(all(target_feature = "avx2", target_feature = "bmi1")))).
+- getrandom-0.3.4: remove dependencies under cfg(all(any(target_os = "linux", target_os = "android"), not(any(all(target_os = "linux", target_env = ""), getrandom_backend = "custom", getrandom_backend = "linux_raw", getrandom_backend = "rdrand", getrandom_backend = "rndr")))); dependencies libc.
+- getrandom-0.3.4: remove dependencies under cfg(all(target_arch = "wasm32", any(target_os = "unknown", target_os = "none"), target_feature = "atomics")); dependencies js-sys.
+- getrandom-0.3.4: remove dependencies under cfg(all(target_arch = "wasm32", target_os = "wasi", target_env = "p2")); dependencies wasip2.
+- getrandom-0.3.4: remove dependencies under cfg(all(target_os = "uefi", getrandom_backend = "efi_rng")); dependencies r-efi.
+- getrandom-0.3.4: remove dependencies under cfg(any(target_os = "dragonfly", target_os = "freebsd", target_os = "hurd", target_os = "illumos", target_os = "cygwin", all(target_os = "horizon", target_arch = "arm"))); dependencies libc.
+- getrandom-0.3.4: remove dependencies under cfg(any(target_os = "haiku", target_os = "redox", target_os = "nto", target_os = "aix")); dependencies libc.
+- getrandom-0.3.4: remove dependencies under cfg(any(target_os = "ios", target_os = "visionos", target_os = "watchos", target_os = "tvos")); dependencies libc.
+- getrandom-0.3.4: remove dependencies under cfg(any(target_os = "macos", target_os = "openbsd", target_os = "vita", target_os = "emscripten")); dependencies libc.
+- getrandom-0.3.4: remove dependencies under cfg(target_os = "netbsd"); dependencies libc.
+- getrandom-0.3.4: remove dependencies under cfg(target_os = "solaris"); dependencies libc.
+- getrandom-0.3.4: remove dependencies under cfg(target_os = "vxworks"); dependencies libc.
+- getrandom-0.3.4: feature wasm_js removes dep:js-sys; dependency js-sys removed under cfg(all(target_arch = "wasm32", any(target_os = "unknown", target_os = "none"), target_feature = "atomics")).
+- half-2.7.1: remove dependencies under cfg(target_arch = "spirv"); dependencies crunchy.
+- harfrust-0.12.0: remove dev-dependencies under cfg(target_vendor = "apple"); dependencies objc2-core-foundation.
+- harfrust-0.12.0: remove dev-dependencies under cfg(target_vendor = "apple"); dependencies objc2-core-text.
+- harfrust-0.13.3: remove dev-dependencies under cfg(target_vendor = "apple"); dependencies objc2-core-foundation.
+- harfrust-0.13.3: remove dev-dependencies under cfg(target_vendor = "apple"); dependencies objc2-core-text.
+- hashbrown-0.17.1: remove dependencies under cfg(any()); dependencies serde.
+- hashbrown-0.17.1: remove dev-dependencies under cfg(unix); dependencies libc.
+- hashbrown-0.17.1: feature serde removes dep:serde; dependency serde removed under cfg(any()).
+- indexmap-2.14.2: remove dependencies under cfg(any()); dependencies serde.
+- indexmap-2.14.2: feature serde removes dep:serde; dependency serde removed under cfg(any()).
+- parking_lot_core-0.9.12: remove dependencies under cfg(target_os = "redox"); dependencies redox_syscall.
+- parking_lot_core-0.9.12: remove dependencies under cfg(unix); dependencies libc.
+- parking_lot_core-0.9.12: remove dependencies under cfg(windows); dependencies windows-link.
+- png-0.18.1: remove dev-dependencies under cfg(not(target_arch = "wasm32")); dependencies criterion.
+- rfd-0.17.2: remove dependencies under cfg(any(target_os = "linux", target_os = "freebsd", target_os = "dragonfly", target_os = "netbsd", target_os = "openbsd")); dependencies glib-sys.
+- rfd-0.17.2: remove dependencies under cfg(any(target_os = "linux", target_os = "freebsd", target_os = "dragonfly", target_os = "netbsd", target_os = "openbsd")); dependencies gobject-sys.
+- rfd-0.17.2: remove dependencies under cfg(any(target_os = "linux", target_os = "freebsd", target_os = "dragonfly", target_os = "netbsd", target_os = "openbsd")); dependencies gtk-sys.
+- rfd-0.17.2: remove dependencies under cfg(any(target_os = "linux", target_os = "freebsd", target_os = "dragonfly", target_os = "netbsd", target_os = "openbsd")); dependencies libc.
+- rfd-0.17.2: remove dependencies under cfg(any(target_os = "linux", target_os = "freebsd", target_os = "dragonfly", target_os = "netbsd", target_os = "openbsd")); dependencies percent-encoding.
+- rfd-0.17.2: remove dependencies under cfg(any(target_os = "linux", target_os = "freebsd", target_os = "dragonfly", target_os = "netbsd", target_os = "openbsd")); dependencies pollster.
+- rfd-0.17.2: remove dependencies under cfg(any(target_os = "linux", target_os = "freebsd", target_os = "dragonfly", target_os = "netbsd", target_os = "openbsd")); dependencies wayland-backend.
+- rfd-0.17.2: remove dependencies under cfg(any(target_os = "linux", target_os = "freebsd", target_os = "dragonfly", target_os = "netbsd", target_os = "openbsd")); dependencies wayland-client.
+- rfd-0.17.2: remove dependencies under cfg(any(target_os = "linux", target_os = "freebsd", target_os = "dragonfly", target_os = "netbsd", target_os = "openbsd")); dependencies wayland-protocols.
+- rfd-0.17.2: remove dependencies under cfg(target_os = "macos"); dependencies block2.
+- rfd-0.17.2: remove dependencies under cfg(target_os = "macos"); dependencies dispatch2.
+- rfd-0.17.2: remove dependencies under cfg(target_os = "macos"); dependencies objc2.
+- rfd-0.17.2: remove dependencies under cfg(target_os = "macos"); dependencies objc2-app-kit.
+- rfd-0.17.2: remove dependencies under cfg(target_os = "macos"); dependencies objc2-core-foundation.
+- rfd-0.17.2: remove dependencies under cfg(target_os = "macos"); dependencies objc2-foundation.
+- rfd-0.17.2: remove dependencies under cfg(target_os = "windows"); dependencies windows-sys.
+- rfd-0.17.2: feature common-controls-v6 removes windows-sys/Win32_UI_Controls; dependency windows-sys removed under cfg(target_os = "windows").
+- rfd-0.17.2: feature gtk3 removes gtk-sys; dependency gtk-sys removed under cfg(any(target_os = "linux", target_os = "freebsd", target_os = "dragonfly", target_os = "netbsd", target_os = "openbsd")).
+- rfd-0.17.2: feature gtk3 removes glib-sys; dependency glib-sys removed under cfg(any(target_os = "linux", target_os = "freebsd", target_os = "dragonfly", target_os = "netbsd", target_os = "openbsd")).
+- rfd-0.17.2: feature gtk3 removes gobject-sys; dependency gobject-sys removed under cfg(any(target_os = "linux", target_os = "freebsd", target_os = "dragonfly", target_os = "netbsd", target_os = "openbsd")).
+- rfd-0.17.2: feature wayland removes wayland-backend; dependency wayland-backend removed under cfg(any(target_os = "linux", target_os = "freebsd", target_os = "dragonfly", target_os = "netbsd", target_os = "openbsd")).
+- rfd-0.17.2: feature wayland removes wayland-client; dependency wayland-client removed under cfg(any(target_os = "linux", target_os = "freebsd", target_os = "dragonfly", target_os = "netbsd", target_os = "openbsd")).
+- rfd-0.17.2: feature wayland removes wayland-protocols; dependency wayland-protocols removed under cfg(any(target_os = "linux", target_os = "freebsd", target_os = "dragonfly", target_os = "netbsd", target_os = "openbsd")).
+- rfd-0.17.2: feature xdg-portal removes pollster; dependency pollster removed under cfg(any(target_os = "linux", target_os = "freebsd", target_os = "dragonfly", target_os = "netbsd", target_os = "openbsd")).
+- serde_core-1.0.229: remove dependencies under cfg(any()); dependencies serde_derive.
+- serde_json-1.0.151: remove dependencies under cfg(any()); dependencies serde.
+- sha1-0.11.0: remove dependencies under cfg(any(target_arch = "aarch64", target_arch = "x86", target_arch = "x86_64")); dependencies cpufeatures.
+- sha2-0.11.0: remove dependencies under cfg(any(target_arch = "aarch64", target_arch = "x86_64", target_arch = "x86")); dependencies cpufeatures.
+- sys-locale-0.3.2: remove dependencies under cfg(target_os = "android"); dependencies libc.
+- uuid-1.27.0: remove dependencies under cfg(all(target_arch = "wasm32", any(target_os = "unknown", target_os = "none"), target_feature = "atomics")); dependencies js-sys.
+- uuid-1.27.0: remove dependencies under cfg(not(all(target_arch = "wasm32", any(target_os = "unknown", target_os = "none")))); dependencies getrandom.
+- uuid-1.27.0: remove dependencies under cfg(not(all(target_arch = "wasm32", any(target_os = "unknown", target_os = "none")))); dependencies rand.
+- uuid-1.27.0: remove dev-dependencies under cfg(not(target_arch = "wasm32")); dependencies gungraun.
+- uuid-1.27.0: feature fast-rng removes dep:rand; dependency rand removed under cfg(not(all(target_arch = "wasm32", any(target_os = "unknown", target_os = "none")))).
+- uuid-1.27.0: feature js removes dep:js-sys; dependency js-sys removed under cfg(all(target_arch = "wasm32", any(target_os = "unknown", target_os = "none"), target_feature = "atomics")).
+- uuid-1.27.0: feature rng removes dep:getrandom; dependency getrandom removed under cfg(not(all(target_arch = "wasm32", any(target_os = "unknown", target_os = "none")))).
+- uuid-1.27.0: feature rng-getrandom removes dep:getrandom; dependency getrandom removed under cfg(not(all(target_arch = "wasm32", any(target_os = "unknown", target_os = "none")))).
+- uuid-1.27.0: feature rng-rand removes dep:rand; dependency rand removed under cfg(not(all(target_arch = "wasm32", any(target_os = "unknown", target_os = "none")))).
+- uuid-1.27.0: feature std removes js-sys?/std; dependency js-sys removed under cfg(all(target_arch = "wasm32", any(target_os = "unknown", target_os = "none"), target_feature = "atomics")).
+- wasm-bindgen-0.2.129: remove dev-dependencies under cfg(all(target_os = "emscripten", wasm_bindgen_unstable_tokio)); dependencies tokio.
+- wasm-bindgen-0.2.129: remove dev-dependencies under cfg(target_arch = "wasm64"); dependencies paste.
+- wasm-bindgen-0.2.129: remove dev-dependencies under cfg(target_arch = "wasm64"); dependencies serde_derive.
+- wasm-bindgen-futures-0.4.79: remove dependencies under cfg(all(target_os = "emscripten", wasm_bindgen_unstable_tokio)); dependencies tokio.
+- web-time-1.1.0: remove dev-dependencies under cfg(all(target_family = "wasm", target_feature = "atomics")); dependencies futures-channel.
+- web-time-1.1.0: remove dev-dependencies under cfg(all(target_family = "wasm", target_feature = "atomics")); dependencies futures-util.
+- web-time-1.1.0: remove dev-dependencies under cfg(all(target_family = "wasm", target_feature = "atomics")); dependencies web-sys.
+- web-time-1.1.0: remove dev-dependencies under cfg(not(target_family = "wasm")); dependencies pollster.
+- wgpu-30.0.1: remove dependencies under cfg(not(target_arch = "wasm32")); dependencies smallvec.
+- wgpu-30.0.1: remove dependencies under cfg(not(target_arch = "wasm32")); dependencies wgpu-core.
+- wgpu-30.0.1: remove dependencies under cfg(not(target_arch = "wasm32")); dependencies wgpu-hal.
+- wgpu-30.0.1: remove dependencies under cfg(not(target_has_atomic = "64")); dependencies portable-atomic.
+- wgpu-30.0.1: remove dependencies under cfg(target_os = "emscripten"); dependencies smallvec.
+- wgpu-30.0.1: remove dependencies under cfg(target_os = "emscripten"); dependencies wgpu-core.
+- wgpu-30.0.1: remove dependencies under cfg(target_os = "emscripten"); dependencies wgpu-hal.
+- wgpu-core-30.0.1: remove dependencies under cfg(any(windows, target_os = "linux", target_os = "android", target_os = "freebsd")); dependencies wgpu-core-deps-windows-linux-android.
+- wgpu-core-30.0.1: remove dependencies under cfg(not(target_has_atomic = "64")); dependencies portable-atomic.
+- wgpu-core-30.0.1: remove dependencies under cfg(target_os = "emscripten"); dependencies wgpu-core-deps-emscripten.
+- wgpu-core-30.0.1: remove dependencies under cfg(target_vendor = "apple"); dependencies wgpu-core-deps-apple.
+- wgpu-core-30.0.1: feature angle removes wgpu-core-deps-apple/angle; dependency wgpu-core-deps-apple removed under cfg(target_vendor = "apple").
+- wgpu-core-30.0.1: feature drm removes wgpu-core-deps-windows-linux-android/drm; dependency wgpu-core-deps-windows-linux-android removed under cfg(any(windows, target_os = "linux", target_os = "android", target_os = "freebsd")).
+- wgpu-core-30.0.1: feature dx12 removes wgpu-core-deps-windows-linux-android/dx12; dependency wgpu-core-deps-windows-linux-android removed under cfg(any(windows, target_os = "linux", target_os = "android", target_os = "freebsd")).
+- wgpu-core-30.0.1: feature gles removes wgpu-core-deps-windows-linux-android/gles; dependency wgpu-core-deps-windows-linux-android removed under cfg(any(windows, target_os = "linux", target_os = "android", target_os = "freebsd")).
+- wgpu-core-30.0.1: feature gles removes wgpu-core-deps-emscripten/gles; dependency wgpu-core-deps-emscripten removed under cfg(target_os = "emscripten").
+- wgpu-core-30.0.1: feature metal removes wgpu-core-deps-apple/metal; dependency wgpu-core-deps-apple removed under cfg(target_vendor = "apple").
+- wgpu-core-30.0.1: feature portable-atomic removes dep:portable-atomic; dependency portable-atomic removed under cfg(not(target_has_atomic = "64")).
+- wgpu-core-30.0.1: feature renderdoc removes wgpu-core-deps-windows-linux-android/renderdoc; dependency wgpu-core-deps-windows-linux-android removed under cfg(any(windows, target_os = "linux", target_os = "android", target_os = "freebsd")).
+- wgpu-core-30.0.1: feature vulkan removes wgpu-core-deps-windows-linux-android/vulkan; dependency wgpu-core-deps-windows-linux-android removed under cfg(any(windows, target_os = "linux", target_os = "android", target_os = "freebsd")).
+- wgpu-core-30.0.1: feature vulkan-portability removes wgpu-core-deps-apple/vulkan-portability; dependency wgpu-core-deps-apple removed under cfg(target_vendor = "apple").
+- wgpu-hal-30.0.1: remove dependencies under cfg(all(unix, not(target_vendor = "apple"), not(target_family = "wasm"))); dependencies drm.
+- wgpu-hal-30.0.1: remove dependencies under cfg(all(windows, not(target_arch = "aarch64"), target_env = "msvc")); dependencies mach-dxcompiler-rs.
+- wgpu-hal-30.0.1: remove dependencies under cfg(any(not(target_has_atomic = "64"), not(target_has_atomic = "ptr"))); dependencies portable-atomic.
+- wgpu-hal-30.0.1: remove dev-dependencies under cfg(not(any(target_arch = "wasm32", target_os = "ios", target_os = "visionos", target_env = "ohos"))); dependencies glutin.
+- wgpu-hal-30.0.1: remove dev-dependencies under cfg(not(any(target_arch = "wasm32", target_os = "ios", target_os = "visionos", target_env = "ohos"))); dependencies glutin-winit.
+- wgpu-hal-30.0.1: remove dependencies under cfg(not(target_arch = "wasm32")); dependencies ash.
+- wgpu-hal-30.0.1: remove dependencies under cfg(not(target_arch = "wasm32")); dependencies gpu-allocator.
+- wgpu-hal-30.0.1: remove dependencies under cfg(not(target_arch = "wasm32")); dependencies khronos-egl.
+- wgpu-hal-30.0.1: remove dependencies under cfg(not(target_arch = "wasm32")); dependencies libloading.
+- wgpu-hal-30.0.1: remove dependencies under cfg(not(target_arch = "wasm32")); dependencies renderdoc-sys.
+- wgpu-hal-30.0.1: remove dependencies under cfg(not(target_arch = "wasm32")); dependencies smallvec.
+- wgpu-hal-30.0.1: remove dependencies under cfg(not(target_has_atomic = "ptr")); dependencies portable-atomic-util.
+- wgpu-hal-30.0.1: remove dependencies under cfg(target_os = "android"); dependencies android_system_properties.
+- wgpu-hal-30.0.1: remove dependencies under cfg(target_os = "android"); dependencies ndk-sys.
+- wgpu-hal-30.0.1: remove dependencies under cfg(target_os = "emscripten"); dependencies khronos-egl.
+- wgpu-hal-30.0.1: remove dependencies under cfg(target_os = "emscripten"); dependencies libloading.
+- wgpu-hal-30.0.1: remove dependencies under cfg(target_vendor = "apple"); dependencies block2.
+- wgpu-hal-30.0.1: remove dependencies under cfg(target_vendor = "apple"); dependencies bytemuck.
+- wgpu-hal-30.0.1: remove dependencies under cfg(target_vendor = "apple"); dependencies objc2.
+- wgpu-hal-30.0.1: remove dependencies under cfg(target_vendor = "apple"); dependencies objc2-core-foundation.
+- wgpu-hal-30.0.1: remove dependencies under cfg(target_vendor = "apple"); dependencies objc2-core-graphics.
+- wgpu-hal-30.0.1: remove dependencies under cfg(target_vendor = "apple"); dependencies objc2-foundation.
+- wgpu-hal-30.0.1: remove dependencies under cfg(target_vendor = "apple"); dependencies objc2-metal.
+- wgpu-hal-30.0.1: remove dependencies under cfg(target_vendor = "apple"); dependencies objc2-quartz-core.
+- wgpu-hal-30.0.1: remove dependencies under cfg(target_vendor = "apple"); dependencies raw-window-metal.
+- wgpu-hal-30.0.1: remove dependencies under cfg(unix); dependencies libc.
+- wgpu-hal-30.0.1: remove dependencies under cfg(unix); dependencies wayland-sys.
+- wgpu-hal-30.0.1: remove dependencies under cfg(windows); dependencies bit-set.
+- wgpu-hal-30.0.1: remove dependencies under cfg(windows); dependencies glutin_wgl_sys.
+- wgpu-hal-30.0.1: remove dependencies under cfg(windows); dependencies once_cell.
+- wgpu-hal-30.0.1: remove dependencies under cfg(windows); dependencies range-alloc.
+- wgpu-hal-30.0.1: remove dependencies under cfg(windows); dependencies windows.
+- wgpu-hal-30.0.1: remove dependencies under cfg(windows); dependencies windows-core.
+- wgpu-hal-30.0.1: remove dependencies under cfg(windows); dependencies windows-result.
+- wgpu-hal-30.0.1: feature dx12 removes dep:bit-set; dependency bit-set removed under cfg(windows).
+- wgpu-hal-30.0.1: feature dx12 removes dep:gpu-allocator; dependency gpu-allocator removed under cfg(not(target_arch = "wasm32")).
+- wgpu-hal-30.0.1: feature dx12 removes dep:libloading; dependency libloading removed under cfg(not(target_arch = "wasm32")) / cfg(target_os = "emscripten").
+- wgpu-hal-30.0.1: feature dx12 removes dep:once_cell; dependency once_cell removed under cfg(windows).
+- wgpu-hal-30.0.1: feature dx12 removes dep:range-alloc; dependency range-alloc removed under cfg(windows).
+- wgpu-hal-30.0.1: feature dx12 removes dep:windows-core; dependency windows-core removed under cfg(windows).
+- wgpu-hal-30.0.1: feature dx12 removes gpu-allocator/d3d12; dependency gpu-allocator removed under cfg(not(target_arch = "wasm32")).
+- wgpu-hal-30.0.1: feature dx12 removes once_cell/std; dependency once_cell removed under cfg(windows).
+- wgpu-hal-30.0.1: feature dx12 removes windows/Win32_Devices_DeviceAndDriverInstallation; dependency windows removed under cfg(windows).
+- wgpu-hal-30.0.1: feature dx12 removes windows/Win32_Devices_Display; dependency windows removed under cfg(windows).
+- wgpu-hal-30.0.1: feature dx12 removes windows/Win32_Graphics_Direct3D_Dxc; dependency windows removed under cfg(windows).
+- wgpu-hal-30.0.1: feature dx12 removes windows/Win32_Graphics_Direct3D_Fxc; dependency windows removed under cfg(windows).
+- wgpu-hal-30.0.1: feature dx12 removes windows/Win32_Graphics_Direct3D; dependency windows removed under cfg(windows).
+- wgpu-hal-30.0.1: feature dx12 removes windows/Win32_Graphics_Direct3D12; dependency windows removed under cfg(windows).
+- wgpu-hal-30.0.1: feature dx12 removes windows/Win32_Graphics_DirectComposition; dependency windows removed under cfg(windows).
+- wgpu-hal-30.0.1: feature dx12 removes windows/Win32_Graphics_Dxgi_Common; dependency windows removed under cfg(windows).
+- wgpu-hal-30.0.1: feature dx12 removes windows/Win32_Graphics_Gdi; dependency windows removed under cfg(windows).
+- wgpu-hal-30.0.1: feature dx12 removes windows/Win32_Security; dependency windows removed under cfg(windows).
+- wgpu-hal-30.0.1: feature dx12 removes windows/Win32_System_Diagnostics_Debug; dependency windows removed under cfg(windows).
+- wgpu-hal-30.0.1: feature dx12 removes windows/Win32_System_Kernel; dependency windows removed under cfg(windows).
+- wgpu-hal-30.0.1: feature dx12 removes windows/Win32_System_Performance; dependency windows removed under cfg(windows).
+- wgpu-hal-30.0.1: feature dx12 removes windows/Win32_System_Threading; dependency windows removed under cfg(windows).
+- wgpu-hal-30.0.1: feature dx12 removes windows/Win32_UI_WindowsAndMessaging; dependency windows removed under cfg(windows).
+- wgpu-hal-30.0.1: feature gles removes dep:glutin_wgl_sys; dependency glutin_wgl_sys removed under cfg(windows).
+- wgpu-hal-30.0.1: feature gles removes dep:khronos-egl; dependency khronos-egl removed under cfg(not(target_arch = "wasm32")) / cfg(target_os = "emscripten").
+- wgpu-hal-30.0.1: feature gles removes dep:libloading; dependency libloading removed under cfg(not(target_arch = "wasm32")) / cfg(target_os = "emscripten").
+- wgpu-hal-30.0.1: feature gles removes dep:ndk-sys; dependency ndk-sys removed under cfg(target_os = "android").
+- wgpu-hal-30.0.1: feature gles removes dep:objc2; dependency objc2 removed under cfg(target_vendor = "apple").
+- wgpu-hal-30.0.1: feature gles removes dep:wayland-sys; dependency wayland-sys removed under cfg(unix).
+- wgpu-hal-30.0.1: feature gles removes dep:windows-result; dependency windows-result removed under cfg(windows).
+- wgpu-hal-30.0.1: feature gles removes windows-result/std; dependency windows-result removed under cfg(windows).
+- wgpu-hal-30.0.1: feature gles removes windows/Win32_Graphics_Gdi; dependency windows removed under cfg(windows).
+- wgpu-hal-30.0.1: feature gles removes windows/Win32_Graphics_OpenGL; dependency windows removed under cfg(windows).
+- wgpu-hal-30.0.1: feature gles removes windows/Win32_System_LibraryLoader; dependency windows removed under cfg(windows).
+- wgpu-hal-30.0.1: feature gles removes windows/Win32_UI_WindowsAndMessaging; dependency windows removed under cfg(windows).
+- wgpu-hal-30.0.1: feature metal removes dep:block2; dependency block2 removed under cfg(target_vendor = "apple").
+- wgpu-hal-30.0.1: feature metal removes dep:libloading; dependency libloading removed under cfg(not(target_arch = "wasm32")) / cfg(target_os = "emscripten").
+- wgpu-hal-30.0.1: feature metal removes dep:objc2; dependency objc2 removed under cfg(target_vendor = "apple").
+- wgpu-hal-30.0.1: feature metal removes dep:objc2-core-foundation; dependency objc2-core-foundation removed under cfg(target_vendor = "apple").
+- wgpu-hal-30.0.1: feature metal removes dep:objc2-core-graphics; dependency objc2-core-graphics removed under cfg(target_vendor = "apple").
+- wgpu-hal-30.0.1: feature metal removes dep:objc2-foundation; dependency objc2-foundation removed under cfg(target_vendor = "apple").
+- wgpu-hal-30.0.1: feature metal removes dep:objc2-metal; dependency objc2-metal removed under cfg(target_vendor = "apple").
+- wgpu-hal-30.0.1: feature metal removes dep:objc2-quartz-core; dependency objc2-quartz-core removed under cfg(target_vendor = "apple").
+- wgpu-hal-30.0.1: feature metal removes dep:smallvec; dependency smallvec removed under cfg(not(target_arch = "wasm32")).
+- wgpu-hal-30.0.1: feature metal removes dep:raw-window-metal; dependency raw-window-metal removed under cfg(target_vendor = "apple").
+- wgpu-hal-30.0.1: feature portable-atomic removes dep:portable-atomic; dependency portable-atomic removed under cfg(any(not(target_has_atomic = "64"), not(target_has_atomic = "ptr"))).
+- wgpu-hal-30.0.1: feature portable-atomic removes dep:portable-atomic-util; dependency portable-atomic-util removed under cfg(not(target_has_atomic = "ptr")).
+- wgpu-hal-30.0.1: feature renderdoc removes dep:libloading; dependency libloading removed under cfg(not(target_arch = "wasm32")) / cfg(target_os = "emscripten").
+- wgpu-hal-30.0.1: feature renderdoc removes dep:renderdoc-sys; dependency renderdoc-sys removed under cfg(not(target_arch = "wasm32")).
+- wgpu-hal-30.0.1: feature static-dxc removes dep:mach-dxcompiler-rs; dependency mach-dxcompiler-rs removed under cfg(all(windows, not(target_arch = "aarch64"), target_env = "msvc")).
+- wgpu-hal-30.0.1: feature vulkan removes dep:android_system_properties; dependency android_system_properties removed under cfg(target_os = "android").
+- wgpu-hal-30.0.1: feature vulkan removes dep:ash; dependency ash removed under cfg(not(target_arch = "wasm32")).
+- wgpu-hal-30.0.1: feature vulkan removes dep:libc; dependency libc removed under cfg(unix).
+- wgpu-hal-30.0.1: feature vulkan removes dep:libloading; dependency libloading removed under cfg(not(target_arch = "wasm32")) / cfg(target_os = "emscripten").
+- wgpu-hal-30.0.1: feature vulkan removes dep:raw-window-metal; dependency raw-window-metal removed under cfg(target_vendor = "apple").
+- wgpu-hal-30.0.1: feature vulkan removes dep:smallvec; dependency smallvec removed under cfg(not(target_arch = "wasm32")).
+- wgpu-hal-30.0.1: feature vulkan removes dep:windows; dependency windows removed under cfg(windows).
+- wgpu-hal-30.0.1: feature vulkan removes gpu-allocator/vulkan; dependency gpu-allocator removed under cfg(not(target_arch = "wasm32")).
+- wgpu-hal-30.0.1: feature vulkan removes windows/Win32; dependency windows removed under cfg(windows).
+- wgpu-hal-30.0.1: feature vulkan removes windows/Win32_Devices_Display; dependency windows removed under cfg(windows).
+- wgpu-hal-30.0.1: feature vulkan removes windows/Win32_Foundation; dependency windows removed under cfg(windows).
+- wgpu-hal-30.0.1: feature vulkan removes windows/Win32_Graphics_Dxgi; dependency windows removed under cfg(windows).
+- wgpu-hal-30.0.1: feature vulkan removes windows/Win32_Graphics_Dxgi_Common; dependency windows removed under cfg(windows).
+- wgpu-hal-30.0.1: feature vulkan removes windows/Win32_Graphics_Gdi; dependency windows removed under cfg(windows).
+- zerocopy-0.8.61: remove dependencies under cfg(any()); dependencies zerocopy-derive.
+- zip-3.0.0: remove dependencies under cfg(fuzzing); dependencies arbitrary.
+
+Count correction: 28 changed manifests /121 individual TOML dependency table sections /109 feature items. Earlier57/59 counted grouped cfg+kind sections, not individual dependency tables. Initial indexmap failure exposed my filter treating a dev-dependency as preserving an optional normal dependency; fixed only that bookkeeping bug with a failing then passing regression. No inventory expansion.
+
+Resolution stop: vello_cpu0.1.0 optional normal glifo ^0.2.0 (locked0.2.0) is outside reviewed209 (reviewed glifo is0.3.0). No cfg-filtered section controls it. Stopped per sage-3984g; no import/fetch. Offline size receipt full-lock-cache-size.json: 538 third-party lock records =534 registry +4 git. Default cache175 present/359 missing,16,666,072 archive bytes; existing Louie toolchain cache534 present/0 missing,85,234,501 bytes; S0 cache412 present/122 missing,44,438,740 bytes. Sent Sage gyro-0011. Root closure/release/CSP acceptance is unproved.
+
+## Full-lock scratch measurement — sage-3992
+
+Scope is measurement only, entirely under
+`/mnt/storage/scratch/gyro-full-lock-measure-95ntu6t0`. No additional source,
+outputs or tool binaries imported into the repository; no commit/push. The
+restricted-runtime/security/CSP gates remain open. No further manifest surgery.
+
+Extraction from Louie's pre-existing cache verified every registry archive
+against the ORIGINAL Cargo.lock checksum, with no fetch. All four git lock
+records were excluded from this extraction. Registry results (534 packages):
+
+- Original archive total: 85,234,501 bytes.
+- Extracted archive content: 24,844 files / 611,577,974 bytes.
+- Including 534 generated Cargo checksum files: 25,378 files / 614,049,226 bytes.
+- Beyond the reviewed 209, the full 538 lock set adds 329 packages: 328 registry
+  plus one git package. The additional registry content alone is 15,005 files /
+  484,646,629 bytes including generated checksums. The fourth git package was
+  neither fetched nor copied. Full details: full-lock-extracted-size.json.
+
+For the measurement build, three ALREADY REVIEWED git packages were copied from
+owned cargo-vendor into scratch after registry extraction. No new git source
+was imported. Source is the owned source copy with the already approved local
+15-member workspace reduction and unchanged vendor manifests/features. The exact
+pinned original icon was restored only in scratch for the original Trunk index.
+This builds the baseline for size/timing; it is not the restricted adapter and
+cannot count as M1-M14 or zero-CSP evidence.
+
+Before compiling, offline cargo tree with normal edges exactly matched S0's
+199 third-party +15 local packages; normal,build exactly matched 209+15. The
+comparison refused on any added/missing pair. Scratch metadata/tree commands and
+the release command each run with unshare --user --map-root-user --net, nice19,
+four Cargo jobs, isolated HOME/CARGO_HOME and a fresh scratch TMPDIR. There is no
+connected network interface in these namespaces, only loopback; Cargo and Trunk
+also have offline enabled and Trunk update checks disabled. Inherited Rust flags
+are refused and none are set for this measurement. Release build started after
+those package-closure checks; result/timing/output pack measurement pending.
+
+Tool availability/provenance on this host:
+
+- rustc/Cargo 1.99.1 and wasm32-unknown-unknown std: existing isolated rustup
+  stable toolchain under Louie's evaluation toolchain directory, installed Oct21;
+  rustup settings and target manifests identify it. No install repeated.
+- Trunk0.22.0: existing isolated cargo install; .crates.toml records the exact
+  version and crates.io origin. No install repeated.
+- wasm-bindgen0.2.129 and wasm-opt131: existing Trunk versioned helper cache,
+  copied to isolated scratch cache/PATH. No download. Their original download
+  commands are not present in Louie's evaluation report.
+- Five executable versions/hashes and Rust support hashes: toolchain.json.
+  All required tools are already present; this build needs no network.
+
+### Measurement environment correction and retry
+
+The first measurement command succeeded in 388.757578 seconds (06:02:17.598Z
+through 06:08:46.356Z). The requested `nice -n19` was relative to inherited
+negative priority; compiler workers were initially nice15. I detected and set
+only this build's processes/threads absolutely to19 during compilation, then
+retained this result as a LIMITED timing, not a whole-run nice19 sample.
+Receipt: full-lock-release-limited.json and measurement-priority-correction.json.
+No baseline source change was made. Sage was told in gyro-0012 before retry.
+
+The one environment retry authorized in sage-3992 establishes absolute nice19
+before child spawn, uses a fresh target-retry directory, CARGO_BUILD_JOBS=4,
+BINARYEN_CORES=4 and a four-CPU affinity inherited by all build children.
+measurement-retry-priority.jsonl confirms Trunk/Cargo/rustc at19 on those CPUs.
+The harness separately reprioritizes the waiting Python launcher, so launcher
+priority alone is not the build-child measurement. The network namespace,
+offline flags and isolated source/vendor/tool environment are unchanged.
+
+### Full-lock measurement results (sage-3992)
+
+The valid environment retry succeeded, exit0, in **397.864805 seconds** (06:09:38.409Z–06:16:16.274Z), from a fresh target directory. Actual Trunk/Cargo/rustc/wasm-opt children were nice19, four-CPU affinity; Cargo jobs4 and Binaryen cores4. The waiting Python launcher was independently reprioritized to-4 by the harness; that is recorded separately and does not describe build child priority. Evidence: full-lock-release-measurement.json, measurement-retry-priority.jsonl and measurement-release.log. Three existing engine dead-code warnings; no build error.
+
+| Baseline measurement output | Bytes | SHA-256 |
+|---|---:|---|
+| index.html | 1604 | 299b76f4004bbc65204d561cc381b3fbb249d10069eaa50e88c7fba3b6c63cb8 |
+| wordcraft-fa59e09a3f921e03.ico | 18378 | 53a23dcf66260f44d87d4d143d633395f3e967f391eda47e6e9cc3a52f820225 |
+| wordcraft-web-832240fdc6ce872b_bg.wasm | 43957877 | c1c15050a9b394c21e7540aa57c9292b86d32bfea2476094a9976304dacf1de0 |
+| wordcraft-web-88f7089f25a3b338.js | 164941 | 866a1de6a33eff2ded8ae9588fd049aeacfc42557a3863ccd2107b3faf4d691e |
+
+Total runtime output: **44142800 bytes**. Output blobs alone pack to **16720159 bytes** using Git2.55.0: hash-object -w into a NEW scratch bare repo, sorted four blob IDs through pack-objects --stdout --threads=4. No git gc, no object writes in the Mosaic repository; count-objects receipts are in measurement-output-pack.json. The empty internal .trunk-lock is excluded. This is an independent four-blob pack, not a cross-version delta estimate and not the whole-row pack. Whole-row pack measurement remains unavailable because this work is not committed.
+
+**Network access was disabled:** every Cargo/Trunk command ran in a new isolated user/network namespace with no connected interface; the topology receipt shows only zero-traffic loopback. Cargo and Trunk offline flags and disabled Trunk version checks were also enforced. No fetch/install was needed. No host HOME, Cargo config or credentials were passed into the build environment.
+
+Read-only metadata observation: the unfiltered scratch resolver has238 package records; root tree joins give exactly214 normal and224 normal+build (199/209 third-party +15 local). Fourteen metadata-only extra packages total14,523,104 extracted bytes. measurement-resolution-extra-packages.json lists them for the packaging decision; no smaller vendor experiment/import was performed, and this does not clear additional source for landing.
+
+Both requested scratch measurements are complete. No full-lock vendor source or runtime output entered the repository, no commit/push, no serving route or live change. The packaging choice still waits on Mos/Jason; M1–M14, restricted adapter, two-root reproducibility, CSP/browser and full package checks are unproved. Row310 stays in-progress, not in-review.
+
+## 223-source measurement — sage-4008 and sage-4010
+
+Mos mos-1574 requested the209+14 comparison before Jason chooses (Vikunja618). Scratch only: /mnt/storage/scratch/gyro-223-measure-mzbp0x23. The source includes exactly223 packages: owned reviewed209 plus14 checksum-verified registry archives from the existing cache. No other package, no fetch, no source adoption. Original vendor manifests are preserved for sizing.
+
+| Pristine source set | Files incl checksums | Bytes incl checksums | Independent Git blob pack bytes |
+|---|---:|---:|---:|
+| Extra14 | 702 | 14523104 | 1720566 |
+| Total223 | 11201 | 145260334 | 26538894 |
+
+Packs use the prior output-pack method: source files hash-object -w --no-filters into a NEW scratch bare repository, then sorted unique blob IDs to pack-objects --stdout --threads=4, at nice19. No gc, tree/commit objects or cross-version delta estimate. Pack/input digests and count-objects: measurement-223-source-packs.json and measurement-223-input-manifest.json. Sizes include all original package files (no vendor pruning), plus generated .cargo-checksum.json.
+
+### Resolution and lock result
+
+Unfiltered223 with the original pin lock: metadata --offline --locked exits101 on missing native-only cpufeatures (exact error in measurement-223-unfiltered-resolution.json). Existing packet filterVendorManifest was then applied mechanically to the scratch copy:31 manifests /155 individual false-target dependency table sections /133 dangling feature items, including3 additional changed manifests from the14. No new algorithm or hand edits. Original reviewed209 source remains untouched. Filtered metadata --offline --locked exits101: cannot update Cargo.lock because --locked prevents this. Original lock remains06b745e43c13df3df7f048fa6a1981625ce7a5fe4cd484bc6254d0913d865b0b.
+
+sage-4010 separately authorized one cargo metadata --offline run WITHOUT --locked in another scratch source copy. It exited0 and generated a lock with226 entries against the original558: **332 removed,0 added,0 changed** when comparing name/version/source/checksum entry by entry. Pruned SHA2563401363e100783dc70c8f5ba09324947c0b6f8562f1ac1cbbc61a0497200c17f. Exact diff and generated lock are measurement-223-lock-diff.json and measurement-223-pruned-Cargo.lock.txt. The original source lock was not modified, and there were no manual lock edits.
+
+CLEAR request gyro-0015 covers one release measurement under --locked/--frozen with that generated lock, nice19,4 jobs/cores, isolated netns, fresh HOME/CARGO_HOME/TMPDIR/target and one environment-fault retry. sage-4011 approves the description but withholds CLEAR until row327 landing gate finishes (roughly06:45–06:55Z). **No223 release build has run.** Packaging choice and row310 remain held. Shipping a pruned lock is itself a packaging change needing S0 reviewer and Jason's choice; this measurement does not adopt it.
+
+### Fourteen-package source and notice inventory
+
+Every source is registry+https://github.com/rust-lang/crates.io-index. Exact archive SHA256/size and notice-file SHA256/size: measurement-223-inputs.json; all present notice text: measurement-14-notices.txt. No election or license approval is asserted.
+
+| Package | Version | Declared license expression | Notice/license files present |
+|---|---|---|---|
+| cursor-icon | 1.2.0 | MIT OR Apache-2.0 OR Zlib | LICENSE-APACHE, LICENSE-MIT, LICENSE-ZLIB |
+| dpi | 0.1.2 | Apache-2.0 AND MIT | LICENSE, LICENSE-LIBM-MIT |
+| futures-macro | 0.3.34 | MIT OR Apache-2.0 | LICENSE-APACHE, LICENSE-MIT |
+| glifo | 0.2.0 | Apache-2.0 OR MIT | LICENSE-APACHE, LICENSE-MIT |
+| ordered-float | 5.5.0 | MIT | LICENSE-MIT |
+| pin-project | 1.1.13 | Apache-2.0 OR MIT | LICENSE-APACHE, LICENSE-MIT |
+| pin-project-internal | 1.1.13 | Apache-2.0 OR MIT | LICENSE-APACHE, LICENSE-MIT |
+| smol_str | 0.2.2 | MIT OR Apache-2.0 | LICENSE-APACHE, LICENSE-MIT |
+| spirv | 0.4.0+sdk-1.4.341.0 | Apache-2.0 | **None present** |
+| termcolor | 1.4.1 | Unlicense OR MIT | COPYING, LICENSE-MIT, UNLICENSE |
+| tracing | 0.1.44 | MIT | LICENSE |
+| tracing-attributes | 0.1.31 | MIT | LICENSE |
+| tracing-core | 0.1.36 | MIT | LICENSE, src/spin/LICENSE |
+| winit | 0.30.13 | Apache-2.0 | LICENSE |
+
+spirv has no license/notice file in its archive despite declaring Apache-2.0; this needs Gladstone's notice review before adoption. dpi declares Apache-2.0 AND MIT and includes LICENSE-LIBM-MIT; tracing-core includes an additional src/spin/LICENSE. Both are inventoried, not flattened to a single default text. No source code or binaries from any crate are included in this plain-text evidence commit.
+
+Plain-text packet hygiene: trailing spaces in Node assertion transcripts normalized before commit (filter-dev-red.txt, cfg-red.txt, filter-red.txt); test outcomes and source/notice hashes unchanged.
+
+## 223 release result and notice supplement — sage-4014
+
+sage-4014 CLEAR supersedes the earlier slot hold. Build started06:31:53.099Z and finished06:38:13.773Z, exit0, **380.674036 seconds**. No retry used. Frozen+locked generated lock remains3401363e100783dc70c8f5ba09324947c0b6f8562f1ac1cbbc61a0497200c17f; original06b745e4... remains unchanged. Actual Trunk/Cargo/rustc/wasm-opt at nice19, CPUs12–15, Cargo jobs4/Binaryen cores4; fresh HOME/CARGO_HOME/TMPDIR/target; isolated netns with no external interface and offline/update-check-disabled tooling. No network access or fetch. Three existing engine dead-code warnings; no build error. Slot released to Sage for Bradford in gyro-0018 immediately after completion.
+
+Frozen/offline cargo-tree preflight exactly matches S0:214 normal and224 normal+build records (199/209 third-party plus15 local), no added/missing package identities. measurement-223-build-preflight.json records this.
+
+| Scratch baseline output | Bytes | SHA-256 |
+|---|---:|---|
+| index.html | 1604 | 28ce55d5c017d545aaac91bbd96f22e6ebd3b35af8d856315cdcb150a2a4a57d |
+| wordcraft-fa59e09a3f921e03.ico | 18378 | 53a23dcf66260f44d87d4d143d633395f3e967f391eda47e6e9cc3a52f820225 |
+| wordcraft-web-88f7089f25a3b338.js | 164941 | 866a1de6a33eff2ded8ae9588fd049aeacfc42557a3863ccd2107b3faf4d691e |
+| wordcraft-web-8e80c8f64c8671f7_bg.wasm | 43952335 | 0322beb9e58b9abeed6b6e05125879bfb3eccbebb05094e191df3542a74007ea |
+
+Total output **44137258 bytes**. The WASM SHA256 **does not equal** the full-lock build c1c15050a9b394c21e7540aa57c9292b86d32bfea2476094a9976304dacf1de0. No reproducibility or functional/CSP equivalence is asserted. Source roots and packaging differ; this run does not isolate the reason for the hash difference. Full result, child priority observations and log: measurement-223-build.json, measurement-223-build-priority.jsonl, measurement-223-release.log.
+
+### Gladstone supplemental review and notice response
+
+gladstone-0026 (06:37:48Z) independently checked the14 original archive checksums and original manifest/source/license inventory:10 supplemental PASS /4 CONCERN. This is not adoption or candidate approval. Checked flags: winit has one cfg-alias build script; futures-macro, pin-project-internal and tracing-attributes are proc-macros; winit has native cfg paths and Worker/Blob source. None of14 appears in the measured normal/build target closure. Source-level Worker/native flags do not imply permission to select those paths or relax Q234.
+
+The filename-only notice collector missed embedded W3C terms in cursor-icon/src/lib.rs and winit/src/keyboard.rs. After re-reading those actual headers, measurement-14-notices.txt now includes each complete embedded license, short notice, source document URI and attribution. measurement-14-notice-supplement.json records original source hashes/line spans and extracted text hashes. The added W3C form remains an explicit S0/license-adoption review gate, not silently folded into the root SPDX expressions.
+
+dpi remains **Apache-2.0 AND MIT** for the full-source inventory: both root LICENSE and LICENSE-LIBM-MIT retained, plus README feature explanation and complete libm copyright header added to the notice packet. No Apache-only election. tracing-core retains root LICENSE and distinct src/spin/LICENSE. spirv has no text file in its archive; supplemental mapping explicitly supplies the standard Apache-2.0 text from the pinned WordCraft LICENSE-APACHE, following S0 M13 missing-file treatment, with its source pin/hash recorded. This is an evidence mapping, not a shipping approval.
+
+measurement-14-binary-inputs.json now lists all four winit example PNGs: examples/data/cross.png159B, cross2.png129B, gradient.png229B, icon.png2950B, each with SHA256. No other non-UTF8/NUL payload among14. They remain scratch source inputs; no binary is in this evidence commit.
+
+All runtime outputs and all223 crate sources remain scratch-only. Only plain-text results/notices/metadata are committed. Shipping the pruned lock, the14 additions, new W3C notice form and repository size still require S0 reviewer/owner choices. Row310 stays held for Vikunja618; restricted adapter, M1–M14, two-root reproducibility and CSP/browser acceptance remain unproved.
+
+## Supplemental notice recheck — gladstone-0027
+
+Gladstone rechecked the collection delta at9522d2356 against1716f5a22 on
+2026-10-24T06:44:42Z. All four prior notice-collection/mapping gaps now PASS as
+supplemental evidence: cursor-icon embedded W3C text/attribution, dpi full-source
+conjunction/copyrights, spirv explicit standard Apache-2.0 text mapping, and
+winit embedded W3C text plus four example PNG records. The earlier ten package
+source/notice PASS results stand. tracing-core root/spin license texts remain
+complete. No additional collection gap was found in this requested delta.
+
+Reviewer independently verified original header/source hashes and extracted
+notice hashes, PNG/archive bytes, all12 incremental path hashes and changed-path
+set, UTF8/no-NUL boundary and diff whitespace check. Bundle SHA256
+4d8e2aac5de85d3f3145d5d3945924436d1c30bc043fb3e2d4391cd98b1adbde also matches
+this worktree's fresh hash check.
+
+This recheck is **not adoption or candidate approval**. New W3C terms still need
+explicit M13/license/owner adoption review; dpi conjunction and spirv mapping
+must carry into any shipped M13 bundle; PNG classification and future selection
+of Worker/native paths remain explicit gates. Gladstone did not rerun or
+functionally/CSP-validate the WASM. Its differing hash, the pruned lock and
+packaging/size choice remain uncleared. S0 M1–M14, Jason's choice/Vikunja618 and
+the row310 hold remain in force. No further build, source, notice-text or runtime
+change was made to record this result.
@@ -0,0 +1,57 @@
+# W2 offline packaging decision — 2026-10-24
+
+Sage requested this consolidated stop report in sage-3983. No additional
+category has been applied. No release build, commit or push has run.
+
+The original source/lock resolve packages outside the reviewed WASM target.
+The imported vendor tree contains exactly S0's 209 third-party identities:
+199 normal plus 10 build-only; the web root adds 15 local crates. Original
+source lock has 538 third-party records; S0 workspace metadata has 293 total
+resolved packages after target filtering. These are different sets.
+
+Approved and exercised only in scratch:
+
+- Local workspace: 15 members/default web root; remove 12 dev/native sections.
+  Original included upstream bytes stay identical to the source pin. The local
+  manifest deltas are currently in source-build.patch and BUILD.md.
+- Third-party target filtering: 28 manifests / 59 sections after adding explicit
+  false custom cfgs fuzzing/loom/miri (sage-3983); 26/57 before that ruling.
+  All other unknown cfgs remain unknown. target-filter-plan.json is the list.
+- Dangling feature lists: 103 removed items across 8 manifests (sage-3982),
+  mechanically applied in scratch from dangling-features.json. Original vendor
+  bytes/checksums stay intact; scratch checksum updates touch only Cargo.toml.
+- Release flags must refuse inherited RUSTFLAGS/CARGO_ENCODED_RUSTFLAGS/
+  RUSTDOCFLAGS/CARGO_TARGET_*_RUSTFLAGS/CARGO_BUILD_RUSTFLAGS. Not yet implemented.
+- Gate narrowing from sage-3983: compare root-specific resolved package/selected
+  feature closures before/after packaging, not complete workspace-unified S0
+  feature text. Both package closures must match the 199/209 S0 sets. Still
+  unproved: pristine 209-only vendor itself cannot resolve the broader lock.
+
+The next refusal is an unresolved cfg category: encoding_rs 0.8.42 declares
+`simdutf8` 0.1.5 under cfg(any(x86_64,x86,aarch64,all(wasm32,simd128))).
+The default pinned wasm target has no simd128 feature, but the conservative
+filter retains unknown target_feature conditions rather than treating every
+potential target feature as false. No target_feature-based removal was made.
+The latest command/error is in offline-resolution.txt. Beyond that exact
+refusal, a static survey identifies 176 unconditional optional dependency
+entries (110 names across 82 manifests) absent from the 209; see
+unselected-dependency-resolution.json. These are not current errors and no
+such dependency was removed. They show why continued iterative reduction may
+require another category. This is a lower-bound survey, not a claim that
+removing all of those would make resolution succeed.
+
+Decision requested: continue reducing target-feature and unselected optional dependency metadata,
+or adopt the full-lock vendor tree with a separately identified resolution-only
+inventory. I recommend the full-lock vendor approach: it preserves upstream
+manifests/features and makes before/after root-closure comparison possible
+without accumulating more manifest surgery. It adds source/notice review and
+size; no extra package should enter the compiled web closure. This is not
+permission to fetch/import extra sources. Sage decides that boundary.
+
+Current tree sizes: upstream 582 files / 21,021,869 bytes; vendor 209 packages /
+10,499 files / 130,737,230 bytes; combined 151,759,099 bytes. Upstream exclusions
+are the authorized 30 icon/screenshot/macOS packaging paths, all enumerated in
+BUILD.md/PROVENANCE.json. No license/notice/copyright is omitted; no vendor file
+is dropped. Binary path/size inventory is binary-inputs.json (18 upstream and
+74 vendor non-text files). Source subset/integrity checks pass 3/3; build test
+is 1/2, with runtime-output check expected red because nothing is built yet.
@@ -0,0 +1,370 @@
+[
+  {
+    "path": "packages/webui/third_party/wordcraft/upstream/assets/fonts/Inter-Medium.ttf",
+    "bytes": 417300
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/upstream/assets/fonts/Inter-Regular.ttf",
+    "bytes": 411640
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/upstream/assets/fonts/Inter-SemiBold.ttf",
+    "bytes": 419744
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/upstream/assets/fonts/JetBrainsMono-Regular.ttf",
+    "bytes": 270224
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/upstream/assets/fonts/SourceSans3-Bold.ttf",
+    "bytes": 428176
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/upstream/assets/fonts/SourceSans3-It.ttf",
+    "bytes": 315812
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/upstream/assets/fonts/SourceSans3-Regular.ttf",
+    "bytes": 431196
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/upstream/assets/fonts/SourceSans3-Semibold.ttf",
+    "bytes": 425904
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/upstream/assets/fonts/SourceSerif4-Bold.ttf",
+    "bytes": 271568
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/upstream/assets/fonts/SourceSerif4-BoldIt.ttf",
+    "bytes": 191832
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/upstream/assets/fonts/SourceSerif4-It.ttf",
+    "bytes": 187808
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/upstream/assets/fonts/SourceSerif4-Regular.ttf",
+    "bytes": 261868
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/upstream/assets/fonts/SourceSerif4-Semibold.ttf",
+    "bytes": 272088
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/upstream/assets/hyphenation/en-us.dic",
+    "bytes": 432905
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/upstream/docs/brand/artcraft-logo-white.png",
+    "bytes": 32161
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/upstream/docs/brand/artcraft-logo.png",
+    "bytes": 31302
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/upstream/docs/brand/artcraft-mark-black.png",
+    "bytes": 26793
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/upstream/docs/brand/artcraft-mark.png",
+    "bytes": 24715
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/aes-0.9.3/tests/data/aes128.blb",
+    "bytes": 27420
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/aes-0.9.3/tests/data/aes192.blb",
+    "bytes": 41324
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/aes-0.9.3/tests/data/aes256.blb",
+    "bytes": 49596
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/brotli-decompressor-5.0.3/src/bin/ipsum.brotli",
+    "bytes": 1752
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/cfb-0.15.0/tests/infinite_loops_fuzzed/loop_in_alloc",
+    "bytes": 14106
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/cfb-0.15.0/tests/infinite_loops_fuzzed/loop_in_chain",
+    "bytes": 16959
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/cfb-0.15.0/tests/infinite_loops_fuzzed/loop_in_directory",
+    "bytes": 13954
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/cfb-0.15.0/tests/infinite_loops_fuzzed/loop_in_minialloc",
+    "bytes": 14336
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/cfb-0.15.0/tests/infinite_loops_fuzzed/loop_in_minichain",
+    "bytes": 13992
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/cfb-0.15.0/tests/infinite_loops_fuzzed/loop_in_open_1",
+    "bytes": 1049
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/cfb-0.15.0/tests/infinite_loops_fuzzed/loop_in_open_2",
+    "bytes": 13830
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/cfb-0.15.0/tests/panics_fuzzed/alloc_panic",
+    "bytes": 16928
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/cfb-0.15.0/tests/panics_fuzzed/minialloc_panic",
+    "bytes": 16909
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/cipher-0.5.2/tests/data/dummy_stream_cipher.blb",
+    "bytes": 84
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/digest-0.11.3/tests/data/fixed_hash_serialization.bin",
+    "bytes": 16
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/eframe-0.36.2/data/icon.png",
+    "bytes": 12052
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/epaint_default_fonts-0.36.2/fonts/Hack-Regular.ttf",
+    "bytes": 309408
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/epaint_default_fonts-0.36.2/fonts/NotoEmoji-Regular.ttf",
+    "bytes": 418804
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/epaint_default_fonts-0.36.2/fonts/Ubuntu-Light.ttf",
+    "bytes": 361676
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/epaint_default_fonts-0.36.2/fonts/emoji-icon-font.ttf",
+    "bytes": 324132
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/fdeflate-0.3.7/tests/input-chunking-sensitivity-example1.zz",
+    "bytes": 207
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/fdeflate-0.3.7/tests/input-chunking-sensitivity-example2.zz",
+    "bytes": 41
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/fdeflate-0.3.7/tests/input-chunking-sensitivity-example3.zz",
+    "bytes": 52
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/flate2-1.1.10/examples/hello_world.txt.gz",
+    "bytes": 33
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/flate2-1.1.10/tests/good-file.gz",
+    "bytes": 6766
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/flate2-1.1.10/tests/multi.gz",
+    "bytes": 53
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/hmac-0.13.0/tests/data/hmac_md5_rfc2104.blb",
+    "bytes": 246
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/hmac-0.13.0/tests/data/hmac_sha1_wycheproof.blb",
+    "bytes": 4877
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/hmac-0.13.0/tests/data/hmac_sha224_rfc4231.blb",
+    "bytes": 804
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/hmac-0.13.0/tests/data/hmac_sha256_rfc4231.blb",
+    "bytes": 832
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/hmac-0.13.0/tests/data/hmac_sha256_wycheproof.blb",
+    "bytes": 6155
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/hmac-0.13.0/tests/data/hmac_sha384_rfc4231.blb",
+    "bytes": 944
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/hmac-0.13.0/tests/data/hmac_sha384_wycheproof.blb",
+    "bytes": 7859
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/hmac-0.13.0/tests/data/hmac_sha512_rfc4231.blb",
+    "bytes": 1063
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/hmac-0.13.0/tests/data/hmac_sha512_wycheproof.blb",
+    "bytes": 9650
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/hmac-0.13.0/tests/data/hmac_streebog256_gost.blb",
+    "bytes": 85
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/hmac-0.13.0/tests/data/hmac_streebog512_gost.blb",
+    "bytes": 118
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/krilla-0.8.2/icc/sGrey-v2-magic.icc",
+    "bytes": 616
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/krilla-0.8.2/icc/sGrey-v4.icc",
+    "bytes": 360
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/krilla-0.8.2/icc/sRGB-v2-magic.icc",
+    "bytes": 736
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/krilla-0.8.2/icc/sRGB-v4.icc",
+    "bytes": 480
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/pdf-writer-0.15.0/examples/bear-1280x720.jpg",
+    "bytes": 67710
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/pdf-writer-0.15.0/examples/bear-1280x720.mp4",
+    "bytes": 715963
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/pdf-writer-0.15.0/examples/rhino.png",
+    "bytes": 215287
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/pdf-writer-0.15.0/examples/sRGB_v4.icc",
+    "bytes": 60960
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/pdf-writer-0.15.0/examples/tiger-cmyk.jpg",
+    "bytes": 945216
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/sha1-0.11.0/tests/data/sha1_kat.blb",
+    "bytes": 235
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/sha1-0.11.0/tests/data/sha1_serialization.bin",
+    "bytes": 92
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/sha2-0.11.0/tests/data/sha224_kat.blb",
+    "bytes": 179
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/sha2-0.11.0/tests/data/sha224_serialization.bin",
+    "bytes": 104
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/sha2-0.11.0/tests/data/sha256_kat.blb",
+    "bytes": 191
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/sha2-0.11.0/tests/data/sha256_serialization.bin",
+    "bytes": 104
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/sha2-0.11.0/tests/data/sha384_kat.blb",
+    "bytes": 239
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/sha2-0.11.0/tests/data/sha384_serialization.bin",
+    "bytes": 208
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/sha2-0.11.0/tests/data/sha512_224_kat.blb",
+    "bytes": 179
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/sha2-0.11.0/tests/data/sha512_224_serialization.bin",
+    "bytes": 208
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/sha2-0.11.0/tests/data/sha512_256_kat.blb",
+    "bytes": 191
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/sha2-0.11.0/tests/data/sha512_256_serialization.bin",
+    "bytes": 208
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/sha2-0.11.0/tests/data/sha512_kat.blb",
+    "bytes": 290
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/sha2-0.11.0/tests/data/sha512_serialization.bin",
+    "bytes": 208
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/tiff-0.11.3/tests/decodedata-rgb-3c-8b.tiff",
+    "bytes": 30180
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/ttf-parser-0.25.1/examples/wasm/TTC.ttc",
+    "bytes": 2608
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/ttf-parser-0.25.1/tests/fonts/bitmap.otb",
+    "bytes": 2072
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/ttf-parser-0.25.1/tests/fonts/colr_1.ttf",
+    "bytes": 21568
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/ttf-parser-0.25.1/tests/fonts/colr_1_variable.ttf",
+    "bytes": 53096
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/ttf-parser-0.25.1/tests/fonts/demo.ttf",
+    "bytes": 400
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/unicode-ident-1.0.26/tests/fst/xid_continue.fst",
+    "bytes": 78779
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/unicode-ident-1.0.26/tests/fst/xid_start.fst",
+    "bytes": 69927
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/vello_common-0.1.0/assets/probe.png",
+    "bytes": 877
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/vello_common-0.1.0/assets/probe.rgba",
+    "bytes": 10404
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/vello_common-0.2.0/assets/probe.png",
+    "bytes": 877
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/vello_common-0.2.0/assets/probe.rgba",
+    "bytes": 10404
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/zlib-rs-0.6.8/src/deflate/test-data/inflate_buf_error.dat",
+    "bytes": 67008
+  },
+  {
+    "path": "packages/webui/third_party/wordcraft/cargo-vendor/zlib-rs-0.6.8/src/deflate/test-data/paper-100k.pdf",
+    "bytes": 102400
+  }
+]
@@ -0,0 +1,27 @@
+✔ release build refuses a missing or mismatched pinned tool before compilation (4.631422ms)
+✖ shipped runtime is self-contained and matches every output receipt (0.349349ms)
+ℹ tests 2
+ℹ suites 0
+ℹ pass 1
+ℹ fail 1
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 48.123956
+
+✖ failing tests:
+
+test at packages/webui/tests/wordcraft-build.test.mjs:14:1
+✖ shipped runtime is self-contained and matches every output receipt (0.349349ms)
+  Error: ENOENT: no such file or directory, open '/home/jwoltje/.t3/worktrees/mosaic-stack/gyro-row310/packages/webui/wordcraft/BUILD.json'
+      at readFileSync (node:fs:621:20)
+      at readJSON (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gyro-row310/packages/webui/wordcraft/build.mjs:9:37)
+      at verifyOutputs (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gyro-row310/packages/webui/wordcraft/build.mjs:61:19)
+      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gyro-row310/packages/webui/tests/wordcraft-build.test.mjs:17:18)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
+    errno: -2,
+    code: 'ENOENT',
+    syscall: 'open',
+    path: '/home/jwoltje/.t3/worktrees/mosaic-stack/gyro-row310/packages/webui/wordcraft/BUILD.json'
+  }
@@ -0,0 +1,46 @@
+✖ release build refuses a missing or mismatched pinned tool before compilation (0.932948ms)
+✖ shipped runtime is self-contained and matches every output receipt (0.1963ms)
+ℹ tests 2
+ℹ suites 0
+ℹ pass 0
+ℹ fail 2
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 48.311391
+
+✖ failing tests:
+
+test at packages/webui/tests/wordcraft-build.test.mjs:7:1
+✖ release build refuses a missing or mismatched pinned tool before compilation (0.932948ms)
+  AssertionError [ERR_ASSERTION]: owned builder must exist
+      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gyro-row310/packages/webui/tests/wordcraft-build.test.mjs:8:10)
+      at Test.runInAsyncScope (node:async_hooks:226:14)
+      at Test.run (node:internal/test_runner/test:1402:25)
+      at Test.start (node:internal/test_runner/test:1262:17)
+      at startSubtestAfterBootstrap (node:internal/test_runner/harness:387:17) {
+    generatedMessage: false,
+    code: 'ERR_ASSERTION',
+    actual: false,
+    expected: true,
+    operator: '==',
+    diff: 'simple'
+  }
+
+test at packages/webui/tests/wordcraft-build.test.mjs:14:1
+✖ shipped runtime is self-contained and matches every output receipt (0.1963ms)
+  AssertionError [ERR_ASSERTION]: owned builder must exist
+      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gyro-row310/packages/webui/tests/wordcraft-build.test.mjs:15:10)
+      at Test.runInAsyncScope (node:async_hooks:226:14)
+      at Test.run (node:internal/test_runner/test:1402:25)
+      at Test.processPendingSubtests (node:internal/test_runner/test:974:18)
+      at Test.postRun (node:internal/test_runner/test:1542:19)
+      at Test.run (node:internal/test_runner/test:1467:12)
+      at async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3) {
+    generatedMessage: false,
+    code: 'ERR_ASSERTION',
+    actual: false,
+    expected: true,
+    operator: '==',
+    diff: 'simple'
+  }
@@ -0,0 +1,10 @@
+✔ release cfg evaluation follows pinned rustc and refuses inherited flags (7.782219ms)
+✔ pinned compiler reproduces the recorded wasm target cfg (10.432502ms)
+ℹ tests 2
+ℹ suites 0
+ℹ pass 2
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 59.893168
@@ -0,0 +1,38 @@
+✖ release cfg evaluation follows pinned rustc and refuses inherited flags (9.116481ms)
+✖ pinned compiler reproduces the recorded wasm target cfg (0.413075ms)
+ℹ tests 2
+ℹ suites 0
+ℹ pass 0
+ℹ fail 2
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 62.764015
+
+✖ failing tests:
+
+test at packages/webui/tests/wordcraft-build.test.mjs:25:1
+✖ release cfg evaluation follows pinned rustc and refuses inherited flags (9.116481ms)
+  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:
+  + actual - expected
+
+  + 'undefined'
+  - 'function'
+
+      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gyro-row310/packages/webui/tests/wordcraft-build.test.mjs:27:10)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: 'undefined',
+    expected: 'function',
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
+
+test at packages/webui/tests/wordcraft-build.test.mjs:39:1
+✖ pinned compiler reproduces the recorded wasm target cfg (0.413075ms)
+  TypeError: releaseEnvironment is not a function
+      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gyro-row310/packages/webui/tests/wordcraft-build.test.mjs:43:121)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async Test.processPendingSubtests (node:internal/test_runner/test:974:7)
@@ -0,0 +1,517 @@
+[
+  {
+    "crate": "eframe-0.36.2",
+    "feature": "accesskit",
+    "edge": "egui-winit/accesskit"
+  },
+  {
+    "crate": "eframe-0.36.2",
+    "feature": "android-game-activity",
+    "edge": "egui-winit/android-game-activity"
+  },
+  {
+    "crate": "eframe-0.36.2",
+    "feature": "android-native-activity",
+    "edge": "egui-winit/android-native-activity"
+  },
+  {
+    "crate": "eframe-0.36.2",
+    "feature": "default",
+    "edge": "winit/default"
+  },
+  {
+    "crate": "eframe-0.36.2",
+    "feature": "glow",
+    "edge": "dep:glutin-winit"
+  },
+  {
+    "crate": "eframe-0.36.2",
+    "feature": "glow",
+    "edge": "dep:glutin"
+  },
+  {
+    "crate": "eframe-0.36.2",
+    "feature": "links",
+    "edge": "egui-winit/links"
+  },
+  {
+    "crate": "eframe-0.36.2",
+    "feature": "persistence",
+    "edge": "egui-winit/serde"
+  },
+  {
+    "crate": "eframe-0.36.2",
+    "feature": "wayland",
+    "edge": "egui-winit/wayland"
+  },
+  {
+    "crate": "eframe-0.36.2",
+    "feature": "wayland",
+    "edge": "glutin?/wayland"
+  },
+  {
+    "crate": "eframe-0.36.2",
+    "feature": "wayland",
+    "edge": "glutin-winit?/wayland"
+  },
+  {
+    "crate": "eframe-0.36.2",
+    "feature": "wgpu_no_default_features",
+    "edge": "dep:pollster"
+  },
+  {
+    "crate": "eframe-0.36.2",
+    "feature": "x11",
+    "edge": "egui-winit/x11"
+  },
+  {
+    "crate": "eframe-0.36.2",
+    "feature": "x11",
+    "edge": "glutin?/x11"
+  },
+  {
+    "crate": "eframe-0.36.2",
+    "feature": "x11",
+    "edge": "glutin?/glx"
+  },
+  {
+    "crate": "eframe-0.36.2",
+    "feature": "x11",
+    "edge": "glutin-winit?/x11"
+  },
+  {
+    "crate": "eframe-0.36.2",
+    "feature": "x11",
+    "edge": "glutin-winit?/glx"
+  },
+  {
+    "crate": "encoding_rs-0.8.42",
+    "feature": "std",
+    "edge": "dep:multiversion"
+  },
+  {
+    "crate": "hashbrown-0.17.1",
+    "feature": "serde",
+    "edge": "dep:serde"
+  },
+  {
+    "crate": "indexmap-2.14.2",
+    "feature": "serde",
+    "edge": "dep:serde"
+  },
+  {
+    "crate": "rfd-0.17.2",
+    "feature": "common-controls-v6",
+    "edge": "windows-sys/Win32_UI_Controls"
+  },
+  {
+    "crate": "rfd-0.17.2",
+    "feature": "gtk3",
+    "edge": "gtk-sys"
+  },
+  {
+    "crate": "rfd-0.17.2",
+    "feature": "gtk3",
+    "edge": "glib-sys"
+  },
+  {
+    "crate": "rfd-0.17.2",
+    "feature": "gtk3",
+    "edge": "gobject-sys"
+  },
+  {
+    "crate": "rfd-0.17.2",
+    "feature": "wayland",
+    "edge": "wayland-backend"
+  },
+  {
+    "crate": "rfd-0.17.2",
+    "feature": "wayland",
+    "edge": "wayland-client"
+  },
+  {
+    "crate": "rfd-0.17.2",
+    "feature": "wayland",
+    "edge": "wayland-protocols"
+  },
+  {
+    "crate": "rfd-0.17.2",
+    "feature": "xdg-portal",
+    "edge": "pollster"
+  },
+  {
+    "crate": "uuid-1.27.0",
+    "feature": "fast-rng",
+    "edge": "dep:rand"
+  },
+  {
+    "crate": "uuid-1.27.0",
+    "feature": "rng",
+    "edge": "dep:getrandom"
+  },
+  {
+    "crate": "uuid-1.27.0",
+    "feature": "rng-getrandom",
+    "edge": "dep:getrandom"
+  },
+  {
+    "crate": "uuid-1.27.0",
+    "feature": "rng-rand",
+    "edge": "dep:rand"
+  },
+  {
+    "crate": "wgpu-core-30.0.1",
+    "feature": "angle",
+    "edge": "wgpu-core-deps-apple/angle"
+  },
+  {
+    "crate": "wgpu-core-30.0.1",
+    "feature": "drm",
+    "edge": "wgpu-core-deps-windows-linux-android/drm"
+  },
+  {
+    "crate": "wgpu-core-30.0.1",
+    "feature": "dx12",
+    "edge": "wgpu-core-deps-windows-linux-android/dx12"
+  },
+  {
+    "crate": "wgpu-core-30.0.1",
+    "feature": "gles",
+    "edge": "wgpu-core-deps-windows-linux-android/gles"
+  },
+  {
+    "crate": "wgpu-core-30.0.1",
+    "feature": "gles",
+    "edge": "wgpu-core-deps-emscripten/gles"
+  },
+  {
+    "crate": "wgpu-core-30.0.1",
+    "feature": "metal",
+    "edge": "wgpu-core-deps-apple/metal"
+  },
+  {
+    "crate": "wgpu-core-30.0.1",
+    "feature": "renderdoc",
+    "edge": "wgpu-core-deps-windows-linux-android/renderdoc"
+  },
+  {
+    "crate": "wgpu-core-30.0.1",
+    "feature": "vulkan",
+    "edge": "wgpu-core-deps-windows-linux-android/vulkan"
+  },
+  {
+    "crate": "wgpu-core-30.0.1",
+    "feature": "vulkan-portability",
+    "edge": "wgpu-core-deps-apple/vulkan-portability"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "dx12",
+    "edge": "dep:bit-set"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "dx12",
+    "edge": "dep:gpu-allocator"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "dx12",
+    "edge": "dep:libloading"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "dx12",
+    "edge": "dep:once_cell"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "dx12",
+    "edge": "dep:range-alloc"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "dx12",
+    "edge": "dep:windows-core"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "dx12",
+    "edge": "gpu-allocator/d3d12"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "dx12",
+    "edge": "once_cell/std"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "dx12",
+    "edge": "windows/Win32_Devices_DeviceAndDriverInstallation"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "dx12",
+    "edge": "windows/Win32_Devices_Display"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "dx12",
+    "edge": "windows/Win32_Graphics_Direct3D_Dxc"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "dx12",
+    "edge": "windows/Win32_Graphics_Direct3D_Fxc"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "dx12",
+    "edge": "windows/Win32_Graphics_Direct3D"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "dx12",
+    "edge": "windows/Win32_Graphics_Direct3D12"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "dx12",
+    "edge": "windows/Win32_Graphics_DirectComposition"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "dx12",
+    "edge": "windows/Win32_Graphics_Dxgi_Common"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "dx12",
+    "edge": "windows/Win32_Graphics_Gdi"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "dx12",
+    "edge": "windows/Win32_Security"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "dx12",
+    "edge": "windows/Win32_System_Diagnostics_Debug"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "dx12",
+    "edge": "windows/Win32_System_Kernel"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "dx12",
+    "edge": "windows/Win32_System_Performance"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "dx12",
+    "edge": "windows/Win32_System_Threading"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "dx12",
+    "edge": "windows/Win32_UI_WindowsAndMessaging"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "gles",
+    "edge": "dep:glutin_wgl_sys"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "gles",
+    "edge": "dep:khronos-egl"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "gles",
+    "edge": "dep:libloading"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "gles",
+    "edge": "dep:ndk-sys"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "gles",
+    "edge": "dep:objc2"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "gles",
+    "edge": "dep:wayland-sys"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "gles",
+    "edge": "dep:windows-result"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "gles",
+    "edge": "windows-result/std"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "gles",
+    "edge": "windows/Win32_Graphics_Gdi"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "gles",
+    "edge": "windows/Win32_Graphics_OpenGL"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "gles",
+    "edge": "windows/Win32_System_LibraryLoader"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "gles",
+    "edge": "windows/Win32_UI_WindowsAndMessaging"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "metal",
+    "edge": "dep:block2"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "metal",
+    "edge": "dep:libloading"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "metal",
+    "edge": "dep:objc2"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "metal",
+    "edge": "dep:objc2-core-foundation"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "metal",
+    "edge": "dep:objc2-core-graphics"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "metal",
+    "edge": "dep:objc2-foundation"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "metal",
+    "edge": "dep:objc2-metal"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "metal",
+    "edge": "dep:objc2-quartz-core"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "metal",
+    "edge": "dep:smallvec"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "metal",
+    "edge": "dep:raw-window-metal"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "renderdoc",
+    "edge": "dep:libloading"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "renderdoc",
+    "edge": "dep:renderdoc-sys"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "static-dxc",
+    "edge": "dep:mach-dxcompiler-rs"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "vulkan",
+    "edge": "dep:android_system_properties"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "vulkan",
+    "edge": "dep:ash"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "vulkan",
+    "edge": "dep:libc"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "vulkan",
+    "edge": "dep:libloading"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "vulkan",
+    "edge": "dep:raw-window-metal"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "vulkan",
+    "edge": "dep:smallvec"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "vulkan",
+    "edge": "dep:windows"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "vulkan",
+    "edge": "gpu-allocator/vulkan"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "vulkan",
+    "edge": "windows/Win32"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "vulkan",
+    "edge": "windows/Win32_Devices_Display"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "vulkan",
+    "edge": "windows/Win32_Foundation"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "vulkan",
+    "edge": "windows/Win32_Graphics_Dxgi"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "vulkan",
+    "edge": "windows/Win32_Graphics_Dxgi_Common"
+  },
+  {
+    "crate": "wgpu-hal-30.0.1",
+    "feature": "vulkan",
+    "edge": "windows/Win32_Graphics_Gdi"
+  }
+]
@@ -0,0 +1,28 @@
+✖ a dev dependency cannot preserve a removed optional feature dependency (9.223259ms)
+ℹ tests 1
+ℹ suites 0
+ℹ pass 0
+ℹ fail 1
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 55.624704
+
+✖ failing tests:
+
+test at packages/webui/tests/wordcraft-build.test.mjs:61:1
+✖ a dev dependency cannot preserve a removed optional feature dependency (9.223259ms)
+  AssertionError [ERR_ASSERTION]: The input did not match the regular expression /serde = \[\]/. Input:
+
+  '[features]\nserde = ["dep:serde"]\n[dev-dependencies.serde]\nversion = "1"\n'
+
+      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gyro-row310/packages/webui/tests/wordcraft-build.test.mjs:65:10)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: '[features]\nserde = ["dep:serde"]\n[dev-dependencies.serde]\nversion = "1"\n',
+    expected: /serde = \[\]/,
+    operator: 'match',
+    diff: 'simple'
+  }
@@ -0,0 +1,14 @@
+✔ release build refuses a missing or mismatched pinned tool before compilation (5.38916ms)
+✔ release cfg evaluation follows pinned rustc and refuses inherited flags (0.546102ms)
+✔ pinned compiler reproduces the recorded wasm target cfg (11.861748ms)
+✔ vendor filtering removes only false target sections and their dangling feature edges (1.475556ms)
+✔ a dev dependency cannot preserve a removed optional feature dependency (0.239783ms)
+✔ pristine vendor deterministically reproduces the recorded filter inventory and patch (49.412038ms)
+ℹ tests 6
+ℹ suites 0
+ℹ pass 6
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 117.789074
@@ -0,0 +1,25 @@
+✖ pristine vendor deterministically reproduces the recorded filter inventory and patch (77.792167ms)
+ℹ tests 1
+ℹ suites 0
+ℹ pass 0
+ℹ fail 1
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 126.569143
+
+✖ failing tests:
+
+test at packages/webui/tests/wordcraft-build.test.mjs:69:1
+✖ pristine vendor deterministically reproduces the recorded filter inventory and patch (77.792167ms)
+  AssertionError [ERR_ASSERTION]: patch must contain exactly the mechanically reproduced vendor changes
+      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gyro-row310/packages/webui/tests/wordcraft-build.test.mjs:99:12)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3) {
+    generatedMessage: false,
+    code: 'ERR_ASSERTION',
+    actual: false,
+    expected: true,
+    operator: '==',
+    diff: 'simple'
+  }
@@ -0,0 +1,30 @@
+✖ vendor filtering removes only false target sections and their dangling feature edges (7.574024ms)
+ℹ tests 1
+ℹ suites 0
+ℹ pass 0
+ℹ fail 1
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 49.047592
+
+✖ failing tests:
+
+test at packages/webui/tests/wordcraft-build.test.mjs:48:1
+✖ vendor filtering removes only false target sections and their dangling feature edges (7.574024ms)
+  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:
+  + actual - expected
+
+  + 'undefined'
+  - 'function'
+
+      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gyro-row310/packages/webui/tests/wordcraft-build.test.mjs:50:10)
+      at async Test.run (node:internal/test_runner/test:1409:7)
+      at async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3) {
+    generatedMessage: true,
+    code: 'ERR_ASSERTION',
+    actual: 'undefined',
+    expected: 'function',
+    operator: 'strictEqual',
+    diff: 'simple'
+  }
@@ -0,0 +1,52 @@
+{
+  "scratchRoot": "/mnt/storage/scratch/gyro-full-lock-measure-95ntu6t0",
+  "startUTC": "2026-10-24T06:02:17.598071+00:00",
+  "endUTC": "2026-10-24T06:08:46.355786+00:00",
+  "wallSeconds": 388.757577938959,
+  "exitCode": 0,
+  "network": "new user/network namespace for metadata, tree and release commands; only loopback exists, no connected interface",
+  "nice": 19,
+  "cargoJobs": 4,
+  "flags": "no inherited Rust flag variables; no configured Rust flags; isolated CARGO_HOME and HOME",
+  "source": "owned pinned upstream copy, approved 15-member local workspace reduction, original vendor manifests; pinned icon restored only in scratch for original Trunk HTML; baseline measurement, NOT restricted runtime/CSP evidence",
+  "command": [
+    "unshare",
+    "--user",
+    "--map-root-user",
+    "--net",
+    "nice",
+    "-n",
+    "19",
+    "/mnt/storage/scratch/louie-wordcraft-toolchain/trunk/bin/trunk",
+    "build",
+    "--release",
+    "--locked",
+    "--offline",
+    "--skip-version-check"
+  ],
+  "outputs": {
+    ".trunk-lock": {
+      "bytes": 0,
+      "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+    },
+    "index.html": {
+      "bytes": 1604,
+      "sha256": "299b76f4004bbc65204d561cc381b3fbb249d10069eaa50e88c7fba3b6c63cb8"
+    },
+    "wordcraft-fa59e09a3f921e03.ico": {
+      "bytes": 18378,
+      "sha256": "53a23dcf66260f44d87d4d143d633395f3e967f391eda47e6e9cc3a52f820225"
+    },
+    "wordcraft-web-832240fdc6ce872b_bg.wasm": {
+      "bytes": 43957877,
+      "sha256": "c1c15050a9b394c21e7540aa57c9292b86d32bfea2476094a9976304dacf1de0"
+    },
+    "wordcraft-web-88f7089f25a3b338.js": {
+      "bytes": 164941,
+      "sha256": "866a1de6a33eff2ded8ae9588fd049aeacfc42557a3863ccd2107b3faf4d691e"
+    }
+  },
+  "validation": "timing invalid for wholly nice19 run: effective initial nice15; corrected to19 during compilation",
+  "initialEffectiveNice": 15,
+  "priorityCorrectionReceipt": "measurement-priority-correction.json"
+}
@@ -0,0 +1,40 @@
+{
+  "scratchRoot": "/mnt/storage/scratch/gyro-full-lock-measure-95ntu6t0",
+  "startUTC": "2026-10-24T06:09:38.408737+00:00",
+  "endUTC": "2026-10-24T06:16:16.273643+00:00",
+  "wallSeconds": 397.86480517999735,
+  "exitCode": 0,
+  "attempt": "one allowed environment retry after initial effective nice15 was detected",
+  "cpuAffinity": [
+    12,
+    13,
+    14,
+    15
+  ],
+  "cargoJobs": 4,
+  "binaryenCores": 4,
+  "targetCache": "fresh target-retry directory",
+  "network": "enforced isolated user/network namespace, no external interface; Cargo/Trunk offline; Trunk update checks disabled",
+  "source": "baseline owned source copy plus approved local workspace reduction; vendor manifests unfiltered. Not a restricted editor/CSP gate result.",
+  "outputs": {
+    "index.html": {
+      "bytes": 1604,
+      "sha256": "299b76f4004bbc65204d561cc381b3fbb249d10069eaa50e88c7fba3b6c63cb8"
+    },
+    "wordcraft-fa59e09a3f921e03.ico": {
+      "bytes": 18378,
+      "sha256": "53a23dcf66260f44d87d4d143d633395f3e967f391eda47e6e9cc3a52f820225"
+    },
+    "wordcraft-web-832240fdc6ce872b_bg.wasm": {
+      "bytes": 43957877,
+      "sha256": "c1c15050a9b394c21e7540aa57c9292b86d32bfea2476094a9976304dacf1de0"
+    },
+    "wordcraft-web-88f7089f25a3b338.js": {
+      "bytes": 164941,
+      "sha256": "866a1de6a33eff2ded8ae9588fd049aeacfc42557a3863ccd2107b3faf4d691e"
+    }
+  },
+  "launcherFinalNice": -4,
+  "buildChildNice": 19,
+  "priorityEvidence": "measurement-retry-priority.jsonl: Trunk/Cargo/rustc and wasm-opt all observed at19, CPUs12-15; launcher separately reprioritized by harness"
+}
@@ -0,0 +1,34 @@
+[
+  {
+    "name": "winit",
+    "version": "0.30.13",
+    "archivePath": "examples/data/cross.png",
+    "bytes": 159,
+    "sha256": "4db9fec917c6cb3196872073e4168d28c4f3e0ad04c5c41865407088abf279e4",
+    "scope": "example data only; not a committed evidence binary or runtime approval"
+  },
+  {
+    "name": "winit",
+    "version": "0.30.13",
+    "archivePath": "examples/data/cross2.png",
+    "bytes": 129,
+    "sha256": "fbeeb71e5d6f24898017739d088acefb522d85108a6f1f96183e60e6b4b1f6e6",
+    "scope": "example data only; not a committed evidence binary or runtime approval"
+  },
+  {
+    "name": "winit",
+    "version": "0.30.13",
+    "archivePath": "examples/data/gradient.png",
+    "bytes": 229,
+    "sha256": "8f80c21867a59959b84f9ced19ff3aba7bf4e1cf0e2c24dea2c8465c8705c7ca",
+    "scope": "example data only; not a committed evidence binary or runtime approval"
+  },
+  {
+    "name": "winit",
+    "version": "0.30.13",
+    "archivePath": "examples/data/icon.png",
+    "bytes": 2950,
+    "sha256": "4340d72fb8b5d95a10e3b2c02230f1060dff0950a137bd1d830c63dbc020dd45",
+    "scope": "example data only; not a committed evidence binary or runtime approval"
+  }
+]
@@ -0,0 +1,46 @@
+{
+  "review": "gladstone-0026",
+  "scope": "supplemental inventory corrections, no adoption/implementation approval",
+  "records": [
+    {
+      "crate": "cursor-icon-1.2.0",
+      "sourcePath": "src/lib.rs",
+      "sourceSha256": "2f649887b91d2ea059fcf64ef8512a16c0bde72e38ff0aeb14df0f119a9885cb",
+      "startLine": 34,
+      "endLine": 102,
+      "noticeTextSha256": "c54d5155b68d1bd2d3ba1f6b10ee15e3c08696461c3351aef1b71d6cf22cef5e",
+      "terms": "embedded W3C full license, short notice, document URI and attribution; additional to root SPDX expression",
+      "adoption": "pending S0/M13 review and owner packaging/license choice; not a policy election"
+    },
+    {
+      "crate": "winit-0.30.13",
+      "sourcePath": "src/keyboard.rs",
+      "sourceSha256": "fb1400750fb0c6d376415e642c837e0e8ded95f55ba03a8889d336d180620394",
+      "startLine": 3,
+      "endLine": 70,
+      "noticeTextSha256": "42fe72ba50223d1042803270ecaa191072fe2c41b0f2bd1d7b1a0e19a7bbba7b",
+      "terms": "embedded W3C full license, short notice, document URI and attribution; additional to root SPDX expression",
+      "adoption": "pending S0/M13 review and owner packaging/license choice; not a policy election"
+    },
+    {
+      "crate": "dpi-0.1.2",
+      "sourcePaths": [
+        "README.md",
+        "src/libm.rs"
+      ],
+      "licenseExpression": "Apache-2.0 AND MIT",
+      "noticeTextSha256": "a3432b00bcf66d370747a494ff8038788019340aaa8cb93c74d3b77d6c1ca025",
+      "retention": "LICENSE and LICENSE-LIBM-MIT remain in main notice bundle; README explanation and libm copyrights appended; no flattening/election"
+    },
+    {
+      "crate": "spirv-0.4.0+sdk-1.4.341.0",
+      "declared": "Apache-2.0",
+      "archiveNoticeFiles": [],
+      "mapping": "Apache-2.0 standard text, S0 M13 missing-file treatment",
+      "textSource": "WordCraft e05b7fe86f3b85454000dffc321de638d7009817:LICENSE-APACHE",
+      "textSha256": "0d542e0c8804e39aa7f37eb00da5a762149dc682d7829451287e11b938e94594",
+      "adoption": "explicit supplemental evidence mapping only; no shipping adoption or cleared notice verdict asserted"
+    }
+  ],
+  "bundleSha256": "4d8e2aac5de85d3f3145d5d3945924436d1c30bc043fb3e2d4391cd98b1adbde"
+}
@@ -0,0 +1,44 @@
+from pathlib import Path
+import os,subprocess,json,datetime,time,hashlib,re
+root=Path('/mnt/storage/scratch/gyro-223-measure-root.txt').read_text().strip();root=Path(root);work=Path('agents/gyro/work/queue-310');src=root/'pruned-source'
+assert hashlib.sha256((src/'Cargo.lock').read_bytes()).hexdigest()=='3401363e100783dc70c8f5ba09324947c0b6f8562f1ac1cbbc61a0497200c17f'
+for k in os.environ:
+ if k in ['RUSTFLAGS','RUSTDOCFLAGS','CARGO_ENCODED_RUSTFLAGS','CARGO_BUILD_RUSTFLAGS'] or (k.startswith('CARGO_TARGET_') and k.endswith('_RUSTFLAGS')):raise RuntimeError('inherited flags refused: '+k)
+for name in ['build-home','build-cargo-home','build-target']:(root/name).mkdir()
+rust='/mnt/storage/scratch/louie-wordcraft-toolchain/rustup/toolchains/stable-x86_64-unknown-linux-gnu/bin'
+trunk='/mnt/storage/scratch/louie-wordcraft-toolchain/trunk/bin/trunk'
+env={'PATH':rust+':'+str(root/'cache/trunk/wasm-bindgen-0.2.129')+':'+str(root/'cache/trunk/wasm-opt-version_131/bin')+':/usr/bin:/bin','HOME':str(root/'build-home'),'CARGO_HOME':str(root/'build-cargo-home'),'XDG_CACHE_HOME':str(root/'cache'),'CARGO_NET_OFFLINE':'true','CARGO_BUILD_JOBS':'4','BINARYEN_CORES':'4','RUSTC':rust+'/rustc','CARGO_TARGET_DIR':str(root/'build-target'),'LC_ALL':'C','TZ':'UTC','TMPDIR':os.environ['TMPDIR'],'TRUNK_OFFLINE':'true','TRUNK_SKIP_VERSION_CHECK':'true','TRUNK_TOOLS_WASM_BINDGEN':'0.2.129','TRUNK_TOOLS_WASM_OPT':'version_131','SOURCE_DATE_EPOCH':'1792587600'}
+cpus=sorted(os.sched_getaffinity(0))[-4:]
+def limit():os.setpriority(os.PRIO_PROCESS,0,19);os.sched_setaffinity(0,cpus)
+base=['unshare','--user','--map-root-user','--net']
+expected=json.load(open(work/'measurement-root-closure.json'))['packages'];closures={}
+for edge in ['normal','normal,build']:
+ cmd=base+[rust+'/cargo','tree','--offline','--frozen','--locked','-p','wordcraft-web','--target','wasm32-unknown-unknown','--edges',edge,'--prefix','none','--format','{p}']
+ p=subprocess.run(cmd,cwd=src,env=env,preexec_fn=limit,capture_output=True,text=True)
+ (root/('build-tree-'+edge.replace(',','-')+'.txt')).write_text(p.stdout+p.stderr)
+ actual=set()
+ for line in p.stdout.splitlines():
+  m=re.match(r'(\S+) v(\S+)',line)
+  if m:actual.add((m[1],m[2]))
+ keys={(p['name'],p['version']) for p in expected if edge=='normal,build' or p['edge']=='normal'}
+ closures[edge]={'exit':p.returncode,'count':len(actual),'added':sorted(actual-keys),'missing':sorted(keys-actual)}
+ if p.returncode or actual!=keys:
+  (work/'measurement-223-build-preflight.json').write_text(json.dumps(closures,indent=2)+'\n');raise RuntimeError('closure check failed: '+edge)
+(work/'measurement-223-build-preflight.json').write_text(json.dumps(closures,indent=2)+'\n')
+start=datetime.datetime.now(datetime.timezone.utc).isoformat();t=time.monotonic();cmd=base+[trunk,'build','--release','--frozen','--locked','--offline','--skip-version-check']
+with (root/'release-build.log').open('w') as log:
+ child=subprocess.Popen(cmd,cwd=src/'apps/wordcraft-web',env=env,preexec_fn=limit,stdout=log,stderr=subprocess.STDOUT)
+ priority={'pid':child.pid,'nice':os.getpriority(os.PRIO_PROCESS,child.pid),'cpus':sorted(os.sched_getaffinity(child.pid))}
+ assert priority['nice']==19 and len(priority['cpus'])==4
+ (work/'measurement-223-build-start.json').write_text(json.dumps({'startUTC':start,'command':cmd,'priority':priority,'network':'new isolated user/network namespace; no external interface; offline/frozen/locked Cargo/Trunk'},indent=2)+'\n')
+ print('release started '+start+' '+str(priority),flush=True)
+ code=child.wait()
+seconds=time.monotonic()-t;end=datetime.datetime.now(datetime.timezone.utc).isoformat()
+result={'authority':'sage-4014 CLEAR; scratch measurement only','scratchRoot':str(root),'startUTC':start,'endUTC':end,'exitCode':code,'wallSeconds':seconds,'nice':19,'cpuAffinity':cpus,'cargoJobs':4,'binaryenCores':4,'freshDirectories':['HOME','CARGO_HOME','TMPDIR','target'],'lockSha256':hashlib.sha256((src/'Cargo.lock').read_bytes()).hexdigest(),'network':'isolated user/network namespace, no external interface; offline/frozen/locked and no Trunk update checks','source':'baseline measurement with existing packaging filter and cargo-generated pruned lock; not restricted adapter or CSP acceptance','outputs':{}}
+if code==0:
+ for f in sorted((src/'dist/web').rglob('*')):
+  if f.is_file() and f.name!='.trunk-lock':result['outputs'][f.name]={'bytes':f.stat().st_size,'sha256':hashlib.sha256(f.read_bytes()).hexdigest()}
+ old=json.load(open(work/'full-lock-release-measurement.json'));oldwasm=next(v['sha256'] for k,v in old['outputs'].items() if k.endswith('.wasm'));newwasm=next(v['sha256'] for k,v in result['outputs'].items() if k.endswith('.wasm'))
+ result.update({'fullLockWasmSha256':oldwasm,'wasmSha256EqualsFullLock':oldwasm==newwasm})
+(root/'release-measurement.json').write_text(json.dumps(result,indent=2)+'\n');(work/'measurement-223-build.json').write_text(json.dumps(result,indent=2)+'\n')
+print(json.dumps(result,indent=2),flush=True)
@@ -0,0 +1,14 @@
+{
+  "normal": {
+    "exit": 0,
+    "count": 214,
+    "added": [],
+    "missing": []
+  },
+  "normal,build": {
+    "exit": 0,
+    "count": 224,
+    "added": [],
+    "missing": []
+  }
+}
@@ -0,0 +1,2 @@
+{"atUTC": "2026-10-24T06:34:09.192942+00:00", "processes": [{"pid": 2180936, "name": "trunk", "nice": 19, "cpus": [12, 13, 14, 15]}, {"pid": 2180947, "name": "cargo", "nice": 19, "cpus": [12, 13, 14, 15]}, {"pid": 2198782, "name": "rustc", "nice": 19, "cpus": [12, 13, 14, 15]}]}
+{"atUTC": "2026-10-24T06:36:42.030208+00:00", "processes": [{"pid": 2214200, "name": "wasm-opt", "nice": 19, "cpus": [12, 13, 14, 15], "threads": 5}]}
@@ -0,0 +1,27 @@
+{
+  "startUTC": "2026-10-24T06:31:53.099322+00:00",
+  "command": [
+    "unshare",
+    "--user",
+    "--map-root-user",
+    "--net",
+    "/mnt/storage/scratch/louie-wordcraft-toolchain/trunk/bin/trunk",
+    "build",
+    "--release",
+    "--frozen",
+    "--locked",
+    "--offline",
+    "--skip-version-check"
+  ],
+  "priority": {
+    "pid": 2180936,
+    "nice": 19,
+    "cpus": [
+      12,
+      13,
+      14,
+      15
+    ]
+  },
+  "network": "new isolated user/network namespace; no external interface; offline/frozen/locked Cargo/Trunk"
+}
@@ -0,0 +1,46 @@
+{
+  "authority": "sage-4014 CLEAR; scratch measurement only",
+  "scratchRoot": "/mnt/storage/scratch/gyro-223-measure-mzbp0x23",
+  "startUTC": "2026-10-24T06:31:53.099322+00:00",
+  "endUTC": "2026-10-24T06:38:13.773390+00:00",
+  "exitCode": 0,
+  "wallSeconds": 380.6740357100498,
+  "nice": 19,
+  "cpuAffinity": [
+    12,
+    13,
+    14,
+    15
+  ],
+  "cargoJobs": 4,
+  "binaryenCores": 4,
+  "freshDirectories": [
+    "HOME",
+    "CARGO_HOME",
+    "TMPDIR",
+    "target"
+  ],
+  "lockSha256": "3401363e100783dc70c8f5ba09324947c0b6f8562f1ac1cbbc61a0497200c17f",
+  "network": "isolated user/network namespace, no external interface; offline/frozen/locked and no Trunk update checks",
+  "source": "baseline measurement with existing packaging filter and cargo-generated pruned lock; not restricted adapter or CSP acceptance",
+  "outputs": {
+    "index.html": {
+      "bytes": 1604,
+      "sha256": "28ce55d5c017d545aaac91bbd96f22e6ebd3b35af8d856315cdcb150a2a4a57d"
+    },
+    "wordcraft-fa59e09a3f921e03.ico": {
+      "bytes": 18378,
+      "sha256": "53a23dcf66260f44d87d4d143d633395f3e967f391eda47e6e9cc3a52f820225"
+    },
+    "wordcraft-web-88f7089f25a3b338.js": {
+      "bytes": 164941,
+      "sha256": "866a1de6a33eff2ded8ae9588fd049aeacfc42557a3863ccd2107b3faf4d691e"
+    },
+    "wordcraft-web-8e80c8f64c8671f7_bg.wasm": {
+      "bytes": 43952335,
+      "sha256": "0322beb9e58b9abeed6b6e05125879bfb3eccbebb05094e191df3542a74007ea"
+    }
+  },
+  "fullLockWasmSha256": "c1c15050a9b394c21e7540aa57c9292b86d32bfea2476094a9976304dacf1de0",
+  "wasmSha256EqualsFullLock": false
+}
@@ -0,0 +1,18 @@
+import {readFileSync,writeFileSync,readdirSync} from 'node:fs';
+import {pathToFileURL} from 'node:url';
+const {filterVendorManifest,sha256}=await import(pathToFileURL(`${process.cwd()}/packages/webui/wordcraft/build.mjs`));
+const root=readFileSync('/mnt/storage/scratch/gyro-223-measure-root.txt','utf8').trim();
+const cfg=readFileSync('agents/gyro/work/queue-310/rustc-wasm32-cfg.txt','utf8');
+const inventory=[];
+for(const crate of readdirSync(`${root}/vendor`).sort()) {
+ const path=`${root}/vendor/${crate}/Cargo.toml`;
+ const original=readFileSync(path,'utf8');const result=filterVendorManifest(original,cfg);
+ if(result.text===original)continue;
+ writeFileSync(path,result.text);
+ const checksum=JSON.parse(readFileSync(`${root}/vendor/${crate}/.cargo-checksum.json`,'utf8'));
+ checksum.files['Cargo.toml']=sha256(Buffer.from(result.text));
+ writeFileSync(`${root}/vendor/${crate}/.cargo-checksum.json`,JSON.stringify(checksum)+'\n');
+ inventory.push({crate,sections:result.sections,features:result.features});
+}
+writeFileSync('agents/gyro/work/queue-310/measurement-223-filter-inventory.json',JSON.stringify(inventory,null,2)+'\n');
+console.log(JSON.stringify({manifests:inventory.length,sections:inventory.reduce((n,x)=>n+x.sections.length,0),featureItems:inventory.reduce((n,x)=>n+x.features.length,0)}));
@@ -0,0 +1,315 @@
+{
+  "scratchRoot": "/mnt/storage/scratch/gyro-223-measure-mzbp0x23",
+  "authority": "sage-4008 / mos-1574",
+  "originalLockSha256": "06b745e43c13df3df7f048fa6a1981625ce7a5fe4cd484bc6254d0913d865b0b",
+  "packages": 223,
+  "extraPackages": [
+    {
+      "name": "cursor-icon",
+      "version": "1.2.0",
+      "source": "registry+https://github.com/rust-lang/crates.io-index",
+      "archiveSha256": "f27ae1dd37df86211c42e150270f82743308803d90a6f6e6651cd730d5e1732f",
+      "archiveBytes": 14267,
+      "license": "MIT OR Apache-2.0 OR Zlib",
+      "licenseFile": null,
+      "noticeFiles": [
+        {
+          "path": "LICENSE-APACHE",
+          "bytes": 11346,
+          "sha256": "b59affd015e517ed998dd735757f9a3693643cd389609947ed54074234a10784"
+        },
+        {
+          "path": "LICENSE-MIT",
+          "bytes": 1059,
+          "sha256": "c138726a726ac37bae09d0f8a48e74e8e3aa8a8952fcd10fae0fb224cc1c05f1"
+        },
+        {
+          "path": "LICENSE-ZLIB",
+          "bytes": 844,
+          "sha256": "01e533bd94e8f1c32b2c2531e2c398de7d35d7804add3d574b4e1fe581d53537"
+        }
+      ],
+      "files": 14,
+      "bytes": 44329
+    },
+    {
+      "name": "dpi",
+      "version": "0.1.2",
+      "source": "registry+https://github.com/rust-lang/crates.io-index",
+      "archiveSha256": "d8b14ccef22fc6f5a8f4d7d768562a182c04ce9a3b3157b91390b52ddfdf1a76",
+      "archiveBytes": 14812,
+      "license": "Apache-2.0 AND MIT",
+      "licenseFile": null,
+      "noticeFiles": [
+        {
+          "path": "LICENSE",
+          "bytes": 11323,
+          "sha256": "6dc0e068dcf3a5bc8e054205b85b7720e1d49265bbc64bf515d2cf79197df69a"
+        },
+        {
+          "path": "LICENSE-LIBM-MIT",
+          "bytes": 2444,
+          "sha256": "9eff396a99bafd208e7126602420d6864f6066c08b84485a5b032320a9c01997"
+        }
+      ],
+      "files": 11,
+      "bytes": 64188
+    },
+    {
+      "name": "futures-macro",
+      "version": "0.3.34",
+      "source": "registry+https://github.com/rust-lang/crates.io-index",
+      "archiveSha256": "9fb9654ba8355388abeb8dcb4fc62f511300867002afc858860463bdd9fe0c44",
+      "archiveBytes": 11926,
+      "license": "MIT OR Apache-2.0",
+      "licenseFile": null,
+      "noticeFiles": [
+        {
+          "path": "LICENSE-APACHE",
+          "bytes": 10874,
+          "sha256": "275c491d6d1160553c32fd6127061d7f9606c3ea25abfad6ca3f6ed088785427"
+        },
+        {
+          "path": "LICENSE-MIT",
+          "bytes": 1094,
+          "sha256": "6652c868f35dfe5e8ef636810a4e576b9d663f3a17fb0f5613ad73583e1b88fd"
+        }
+      ],
+      "files": 12,
+      "bytes": 41731
+    },
+    {
+      "name": "glifo",
+      "version": "0.2.0",
+      "source": "registry+https://github.com/rust-lang/crates.io-index",
+      "archiveSha256": "ed4a1bb24121291d27230c1b1b44e07d6a9b28cefdb32fe1581dfb84e14f940a",
+      "archiveBytes": 55880,
+      "license": "Apache-2.0 OR MIT",
+      "licenseFile": null,
+      "noticeFiles": [
+        {
+          "path": "LICENSE-APACHE",
+          "bytes": 9723,
+          "sha256": "62c7a1e35f56406896d7aa7ca52d0cc0d272ac022b5d2796e7d6905db8a3636a"
+        },
+        {
+          "path": "LICENSE-MIT",
+          "bytes": 1057,
+          "sha256": "3252fc481fda4d2bad9e1ae675065889abd35c8abb500499ac01e70aaffa02b9"
+        }
+      ],
+      "files": 20,
+      "bytes": 222068
+    },
+    {
+      "name": "ordered-float",
+      "version": "5.5.0",
+      "source": "registry+https://github.com/rust-lang/crates.io-index",
+      "archiveSha256": "8c7c9e0d9b23589f26070720bac724174bfec1083e82f7854cdd0267518343c0",
+      "archiveBytes": 34706,
+      "license": "MIT",
+      "licenseFile": null,
+      "noticeFiles": [
+        {
+          "path": "LICENSE-MIT",
+          "bytes": 1057,
+          "sha256": "f7715d38a3fa1b4ac97c5729740752505a39cb92ee83ab5b102aeb5eaa7cdea4"
+        }
+      ],
+      "files": 14,
+      "bytes": 179606
+    },
+    {
+      "name": "pin-project",
+      "version": "1.1.13",
+      "source": "registry+https://github.com/rust-lang/crates.io-index",
+      "archiveSha256": "2466b2336ed02bcdca6b294417127b90ec92038d1d5c4fbeac971a922e0e0924",
+      "archiveBytes": 56345,
+      "license": "Apache-2.0 OR MIT",
+      "licenseFile": null,
+      "noticeFiles": [
+        {
+          "path": "LICENSE-APACHE",
+          "bytes": 10174,
+          "sha256": "0d542e0c8804e39aa7f37eb00da5a762149dc682d7829451287e11b938e94594"
+        },
+        {
+          "path": "LICENSE-MIT",
+          "bytes": 1023,
+          "sha256": "23f18e03dc49df91622fe2a76176497404e46ced8a715d9d2b67a7446571cca3"
+        }
+      ],
+      "files": 209,
+      "bytes": 476259
+    },
+    {
+      "name": "pin-project-internal",
+      "version": "1.1.13",
+      "source": "registry+https://github.com/rust-lang/crates.io-index",
+      "archiveSha256": "c96395f0a926bc13b1c17622aaddda1ecb55d49c8f1bf9777e4d877800a43f8b",
+      "archiveBytes": 29331,
+      "license": "Apache-2.0 OR MIT",
+      "licenseFile": null,
+      "noticeFiles": [
+        {
+          "path": "LICENSE-APACHE",
+          "bytes": 10174,
+          "sha256": "0d542e0c8804e39aa7f37eb00da5a762149dc682d7829451287e11b938e94594"
+        },
+        {
+          "path": "LICENSE-MIT",
+          "bytes": 1023,
+          "sha256": "23f18e03dc49df91622fe2a76176497404e46ced8a715d9d2b67a7446571cca3"
+        }
+      ],
+      "files": 15,
+      "bytes": 114911
+    },
+    {
+      "name": "smol_str",
+      "version": "0.2.2",
+      "source": "registry+https://github.com/rust-lang/crates.io-index",
+      "archiveSha256": "dd538fb6910ac1099850255cf94a94df6551fbdd602454387d0adb2d1ca6dead",
+      "archiveBytes": 15840,
+      "license": "MIT OR Apache-2.0",
+      "licenseFile": null,
+      "noticeFiles": [
+        {
+          "path": "LICENSE-APACHE",
+          "bytes": 10847,
+          "sha256": "a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2"
+        },
+        {
+          "path": "LICENSE-MIT",
+          "bytes": 1023,
+          "sha256": "23f18e03dc49df91622fe2a76176497404e46ced8a715d9d2b67a7446571cca3"
+        }
+      ],
+      "files": 14,
+      "bytes": 56395
+    },
+    {
+      "name": "spirv",
+      "version": "0.4.0+sdk-1.4.341.0",
+      "source": "registry+https://github.com/rust-lang/crates.io-index",
+      "archiveSha256": "d9571ea910ebd84c86af4b3ed27f9dbdc6ad06f17c5f96146b2b671e2976744f",
+      "archiveBytes": 41285,
+      "license": "Apache-2.0",
+      "licenseFile": null,
+      "noticeFiles": [],
+      "files": 9,
+      "bytes": 257440
+    },
+    {
+      "name": "termcolor",
+      "version": "1.4.1",
+      "source": "registry+https://github.com/rust-lang/crates.io-index",
+      "archiveSha256": "06794f8f6c5c898b3275aebefa6b8a1cb24cd2c6c79397ab15774837a0bc5755",
+      "archiveBytes": 18773,
+      "license": "Unlicense OR MIT",
+      "licenseFile": null,
+      "noticeFiles": [
+        {
+          "path": "COPYING",
+          "bytes": 126,
+          "sha256": "01c266bced4a434da0051174d6bee16a4c82cf634e2679b6155d40d75012390f"
+        },
+        {
+          "path": "LICENSE-MIT",
+          "bytes": 1081,
+          "sha256": "0f96a83840e146e43c0ec96a22ec1f392e0680e6c1226e6f3ba87e0740af850f"
+        },
+        {
+          "path": "UNLICENSE",
+          "bytes": 1211,
+          "sha256": "7e12e5df4bae12cb21581ba157ced20e1986a0508dd10d0e8a4ab9a4cf94e85c"
+        }
+      ],
+      "files": 12,
+      "bytes": 92727
+    },
+    {
+      "name": "tracing",
+      "version": "0.1.44",
+      "source": "registry+https://github.com/rust-lang/crates.io-index",
+      "archiveSha256": "63e71662fa4b2a2c3a26f570f037eb95bb1f85397f3cd8076caed2f026a6d100",
+      "archiveBytes": 463135,
+      "license": "MIT",
+      "licenseFile": null,
+      "noticeFiles": [
+        {
+          "path": "LICENSE",
+          "bytes": 1062,
+          "sha256": "898b1ae9821e98daf8964c8d6c7f61641f5f5aa78ad500020771c0939ee0dea1"
+        }
+      ],
+      "files": 94,
+      "bytes": 9827320
+    },
+    {
+      "name": "tracing-attributes",
+      "version": "0.1.31",
+      "source": "registry+https://github.com/rust-lang/crates.io-index",
+      "archiveSha256": "7490cfa5ec963746568740651ac6781f701c9c5ea257c58e057f3ba8cf69e8da",
+      "archiveBytes": 39733,
+      "license": "MIT",
+      "licenseFile": null,
+      "noticeFiles": [
+        {
+          "path": "LICENSE",
+          "bytes": 1062,
+          "sha256": "898b1ae9821e98daf8964c8d6c7f61641f5f5aa78ad500020771c0939ee0dea1"
+        }
+      ],
+      "files": 31,
+      "bytes": 184696
+    },
+    {
+      "name": "tracing-core",
+      "version": "0.1.36",
+      "source": "registry+https://github.com/rust-lang/crates.io-index",
+      "archiveSha256": "db97caf9d906fbde555dd62fa95ddba9eecfd14cb388e4f491a66d74cd5fb79a",
+      "archiveBytes": 63967,
+      "license": "MIT",
+      "licenseFile": null,
+      "noticeFiles": [
+        {
+          "path": "LICENSE",
+          "bytes": 1062,
+          "sha256": "898b1ae9821e98daf8964c8d6c7f61641f5f5aa78ad500020771c0939ee0dea1"
+        },
+        {
+          "path": "src/spin/LICENSE",
+          "bytes": 1085,
+          "sha256": "58545fed1565e42d687aecec6897d35c6d37ccb71479a137c0deb2203e125c79"
+        }
+      ],
+      "files": 29,
+      "bytes": 257879
+    },
+    {
+      "name": "winit",
+      "version": "0.30.13",
+      "source": "registry+https://github.com/rust-lang/crates.io-index",
+      "archiveSha256": "a6755fa58a9f8350bd1e472d4c3fcc25f824ec358933bba33306d0b63df5978d",
+      "archiveBytes": 605180,
+      "license": "Apache-2.0",
+      "licenseFile": null,
+      "noticeFiles": [
+        {
+          "path": "LICENSE",
+          "bytes": 11323,
+          "sha256": "6dc0e068dcf3a5bc8e054205b85b7720e1d49265bbc64bf515d2cf79197df69a"
+        }
+      ],
+      "files": 218,
+      "bytes": 2703555
+    }
+  ],
+  "extraFiles": 702,
+  "extraBytes": 14523104,
+  "totalFiles": 11201,
+  "totalBytes": 145260334,
+  "vendorManifestEdits": "none; original 209 packaging plus 14 checksum-verified archive extractions",
+  "sourceManifestEdits": "same approved local 15-member workspace reduction as prior packet, no additional changes"
+}
@@ -0,0 +1,8 @@
+command: unshare --user --map-root-user --net /mnt/storage/scratch/louie-wordcraft-toolchain/rustup/toolchains/stable-x86_64-unknown-linux-gnu/bin/cargo metadata --offline --locked --filter-platform wasm32-unknown-unknown --format-version 1
+exit: 101
+wallSeconds: 0.17994241300038993
+STDERR:
+error: cannot update the lock file /mnt/storage/scratch/gyro-223-measure-mzbp0x23/source/Cargo.lock because --locked was passed to prevent this
+help: to generate the lock file without accessing the network, remove the --locked flag and use --offline instead.
+
+STDOUT:
@@ -0,0 +1,32 @@
+from pathlib import Path
+import os,subprocess,json,hashlib
+root=Path('/mnt/storage/scratch/gyro-223-measure-root.txt').read_text().strip();root=Path(root);work=Path('agents/gyro/work/queue-310')
+os.setpriority(os.PRIO_PROCESS,0,19);os.sched_setaffinity(0,sorted(os.sched_getaffinity(0))[-4:])
+env={'PATH':'/usr/bin:/bin','HOME':str(root/'home'),'LC_ALL':'C','GIT_CONFIG_NOSYSTEM':'1','GIT_CONFIG_GLOBAL':'/dev/null'}
+def priority():os.setpriority(os.PRIO_PROCESS,0,19)
+def call(args,**kw):return subprocess.run(args,env=env,preexec_fn=priority,check=True,**kw)
+repo=root/'source-measurement.git';call(['git','init','--bare',str(repo)],capture_output=True)
+git=['git','--git-dir',str(repo)]
+inputs=json.load(open(work/'measurement-223-inputs.json'));extras={p['name']+'-'+p['version'] for p in inputs['extraPackages']}
+review=Path('packages/webui/third_party/wordcraft/cargo-vendor').resolve();prior=Path('/mnt/storage/scratch/gyro-full-lock-measure-95ntu6t0/vendor')
+files=[]
+for d in sorted(review.iterdir()):files.extend((f,False,d.name+'/'+f.relative_to(d).as_posix()) for f in sorted(d.rglob('*')) if f.is_file())
+for name in sorted(extras):
+ d=prior/name;files.extend((f,True,name+'/'+f.relative_to(d).as_posix()) for f in sorted(d.rglob('*')) if f.is_file())
+assert len(files)==inputs['totalFiles'];assert sum(f.stat().st_size for f,_,_ in files)==inputs['totalBytes']
+assert all('\n' not in str(f) for f,_,_ in files)
+before=call(git+['count-objects','-v'],capture_output=True,text=True).stdout
+p=call(git+['hash-object','-w','--no-filters','--stdin-paths'],input='\n'.join(str(f) for f,_,_ in files)+'\n',capture_output=True,text=True)
+oids=p.stdout.splitlines();assert len(oids)==len(files)
+sets={'all223':sorted(set(oids)),'extra14':sorted({oid for oid,(_,extra,_) in zip(oids,files) if extra})}
+packs={}
+for name,ids in sets.items():
+ f=root/(name+'-sources.pack')
+ with f.open('wb') as out:call(git+['pack-objects','--stdout','--threads=4'],input='\n'.join(ids)+'\n',stdout=out,text=True)
+ packs[name]={'packedBytes':f.stat().st_size,'uniqueBlobs':len(ids),'sha256':hashlib.sha256(f.read_bytes()).hexdigest()}
+after=call(git+['count-objects','-v'],capture_output=True,text=True).stdout
+report={'scratchRoot':str(root),'method':'pristine package files (not filtered build copy), git hash-object -w --no-filters --stdin-paths into scratch bare repo; each sorted unique blob set through pack-objects --stdout --threads=4; no gc; no tree/commit objects or cross-version deltas','all223Files':len(files),'all223Bytes':sum(f.stat().st_size for f,_,_ in files),'extra14Files':sum(extra for _,extra,_ in files),'extra14Bytes':sum(f.stat().st_size for f,extra,_ in files if extra),'packs':packs,'countObjectsBefore':before,'countObjectsAfter':after}
+(work/'measurement-223-source-packs.json').write_text(json.dumps(report,indent=2)+'\n')
+manifest=[{'path':path,'bytes':f.stat().st_size,'sha256':hashlib.sha256(f.read_bytes()).hexdigest(),'gitBlob':oid,'extra':extra} for oid,(f,extra,path) in zip(oids,files)]
+(work/'measurement-223-input-manifest.json').write_text(json.dumps(manifest,indent=2)+'\n')
+print(json.dumps(report,indent=2))
@@ -0,0 +1,37 @@
+from pathlib import Path
+import os,json,tomllib,hashlib,tarfile,shutil,tempfile,subprocess,datetime,time
+os.setpriority(os.PRIO_PROCESS,0,19)
+root=Path(tempfile.mkdtemp(prefix='gyro-223-measure-',dir='/mnt/storage/scratch'))
+work=Path('agents/gyro/work/queue-310'); prior=Path('/mnt/storage/scratch/gyro-full-lock-measure-95ntu6t0')
+shutil.copytree('packages/webui/third_party/wordcraft/cargo-vendor',root/'vendor')
+lockfile=Path('packages/webui/third_party/wordcraft/upstream/Cargo.lock');lock=tomllib.loads(lockfile.read_text())
+bykey={(p['name'],p['version']):p for p in lock['package']}
+extra=json.load(open(work/'measurement-resolution-extra-packages.json'))['packages']
+cache=Path('/mnt/storage/scratch/louie-wordcraft-toolchain/cargo/registry/cache/index.crates.io-1949cf8c6b5b557f')
+inventory=[]
+for p in extra:
+ key=(p['name'],p['version']);pin=bykey[key];archive=cache/(key[0]+'-'+key[1]+'.crate')
+ assert hashlib.sha256(archive.read_bytes()).hexdigest()==pin['checksum']
+ with tarfile.open(archive) as tf:tf.extractall(root/'vendor',filter='data')
+ d=root/'vendor'/(key[0]+'-'+key[1]);fs=sorted(f for f in d.rglob('*') if f.is_file())
+ (d/'.cargo-checksum.json').write_text(json.dumps({'files':{f.relative_to(d).as_posix():hashlib.sha256(f.read_bytes()).hexdigest() for f in fs},'package':pin['checksum']},sort_keys=True)+'\n')
+ manifest=tomllib.loads((d/'Cargo.toml').read_text());licenses=[]
+ for f in sorted(d.rglob('*')):
+  if f.is_file() and any(k in f.name.lower() for k in ['license','notice','copying','copyright']):
+   licenses.append({'path':f.relative_to(d).as_posix(),'bytes':f.stat().st_size,'sha256':hashlib.sha256(f.read_bytes()).hexdigest()})
+ allfs=[f for f in d.rglob('*') if f.is_file()]
+ inventory.append({'name':key[0],'version':key[1],'source':pin['source'],'archiveSha256':pin['checksum'],'archiveBytes':archive.stat().st_size,'license':manifest['package'].get('license'),'licenseFile':manifest['package'].get('license-file'),'noticeFiles':licenses,'files':len(allfs),'bytes':sum(f.stat().st_size for f in allfs)})
+assert len(list((root/'vendor').iterdir()))==223
+shutil.copytree(prior/'source',root/'source')
+# Restore the original lock exactly, as Sage requested. Keep only the already
+# approved local-workspace reduction; vendor manifests are pristine/unfiltered.
+shutil.copyfile(lockfile,root/'source/Cargo.lock')
+for name in ['home','cargo-home']:(root/name).mkdir()
+shutil.copytree(prior/'cache',root/'cache')
+cfg=(root/'source/.cargo/config.toml').read_text().replace(str(prior/'vendor'),str(root/'vendor'))
+(root/'source/.cargo/config.toml').write_text(cfg)
+fs=[f for f in (root/'vendor').rglob('*') if f.is_file()]
+report={'scratchRoot':str(root),'authority':'sage-4008 / mos-1574','originalLockSha256':hashlib.sha256(lockfile.read_bytes()).hexdigest(),'packages':223,'extraPackages':inventory,'extraFiles':sum(p['files'] for p in inventory),'extraBytes':sum(p['bytes'] for p in inventory),'totalFiles':len(fs),'totalBytes':sum(f.stat().st_size for f in fs),'vendorManifestEdits':'none; original 209 packaging plus 14 checksum-verified archive extractions','sourceManifestEdits':'same approved local 15-member workspace reduction as prior packet, no additional changes'}
+(work/'measurement-223-inputs.json').write_text(json.dumps(report,indent=2)+'\n');(root/'measurement-inputs.json').write_text(json.dumps(report,indent=2)+'\n')
+Path('/mnt/storage/scratch/gyro-223-measure-root.txt').write_text(str(root)+'\n')
+print(json.dumps({k:v for k,v in report.items() if k!='extraPackages'},indent=2))
@@ -0,0 +1,25 @@
+from pathlib import Path
+import os,shutil,subprocess,json,tomllib,hashlib,time
+root=Path('/mnt/storage/scratch/gyro-223-measure-root.txt').read_text().strip();root=Path(root);work=Path('agents/gyro/work/queue-310')
+src=root/'pruned-source';shutil.copytree(root/'source',src)
+rust='/mnt/storage/scratch/louie-wordcraft-toolchain/rustup/toolchains/stable-x86_64-unknown-linux-gnu/bin'
+env={'PATH':rust+':/usr/bin:/bin','HOME':str(root/'home'),'CARGO_HOME':str(root/'cargo-home'),'CARGO_NET_OFFLINE':'true','CARGO_BUILD_JOBS':'4','RUSTC':rust+'/rustc','CARGO_TARGET_DIR':str(root/'target'),'LC_ALL':'C','TZ':'UTC','TMPDIR':os.environ['TMPDIR']}
+for k in os.environ:
+ if k in ['RUSTFLAGS','RUSTDOCFLAGS','CARGO_ENCODED_RUSTFLAGS','CARGO_BUILD_RUSTFLAGS'] or (k.startswith('CARGO_TARGET_') and k.endswith('_RUSTFLAGS')):raise RuntimeError('inherited flags refused: '+k)
+def priority():os.setpriority(os.PRIO_PROCESS,0,19)
+cmd=['unshare','--user','--map-root-user','--net',rust+'/cargo','metadata','--offline','--filter-platform','wasm32-unknown-unknown','--format-version','1']
+p=subprocess.run(cmd,cwd=src,env=env,preexec_fn=priority,capture_output=True,text=True)
+(root/'pruned-metadata.json').write_text(p.stdout);(work/'measurement-223-pruned-metadata.txt').write_text('command: '+' '.join(cmd)+'\nexit: '+str(p.returncode)+'\n'+p.stderr)
+original=(root/'source/Cargo.lock').read_bytes();new=(src/'Cargo.lock').read_bytes()
+a=tomllib.loads(original.decode());b=tomllib.loads(new.decode())
+def indexed(doc):return {(p['name'],p['version']):p for p in doc['package']}
+a=indexed(a);b=indexed(b)
+removed=[a[k] for k in sorted(a.keys()-b.keys())];added=[b[k] for k in sorted(b.keys()-a.keys())];changed=[]
+for k in sorted(a.keys()&b.keys()):
+ before={f:a[k].get(f) for f in ['name','version','source','checksum']};after={f:b[k].get(f) for f in ['name','version','source','checksum']}
+ if before!=after:changed.append({'before':before,'after':after})
+report={'authority':'sage-4010, scratch measurement only; shipping would be a packaging change needing S0 reviewer and Jason choice','scratchRoot':str(root),'source':str(src),'metadataExit':p.returncode,'stderr':p.stderr,'originalLockSha256':hashlib.sha256(original).hexdigest(),'prunedLockSha256':hashlib.sha256(new).hexdigest(),'originalEntries':len(a),'prunedEntries':len(b),'removedCount':len(removed),'addedCount':len(added),'changedCount':len(changed),'removed':[{f:r.get(f) for f in ['name','version','source','checksum']} for r in removed],'added':added,'changed':changed,'subsetPass':p.returncode==0 and not added and not changed}
+(work/'measurement-223-lock-diff.json').write_text(json.dumps(report,indent=2)+'\n');(root/'pruned-lock-diff.json').write_text(json.dumps(report,indent=2)+'\n')
+(work/'measurement-223-pruned-Cargo.lock.txt').write_bytes(new)
+print(json.dumps({k:v for k,v in report.items() if k not in ['removed','added','changed']},indent=2))
+assert hashlib.sha256((root/'source/Cargo.lock').read_bytes()).hexdigest()==report['originalLockSha256']
@@ -0,0 +1,2 @@
+command: unshare --user --map-root-user --net /mnt/storage/scratch/louie-wordcraft-toolchain/rustup/toolchains/stable-x86_64-unknown-linux-gnu/bin/cargo metadata --offline --filter-platform wasm32-unknown-unknown --format-version 1
+exit: 0
@@ -0,0 +1,251 @@
+2026-10-24T06:31:53.109215Z  INFO Starting trunk 0.22.0
+2026-10-24T06:31:53.109534Z  INFO starting build
+2026-10-24T06:31:53.109733Z  INFO node packages []
+   Compiling unicode-ident v1.0.26
+   Compiling proc-macro2 v1.0.107
+   Compiling quote v1.0.47
+   Compiling cfg-if v1.0.5
+   Compiling serde_core v1.0.229
+   Compiling once_cell v1.21.4
+   Compiling serde v1.0.229
+   Compiling libm v0.2.16
+   Compiling rustversion v1.0.23
+   Compiling autocfg v1.5.1
+   Compiling log v0.4.34
+   Compiling syn v3.0.6
+   Compiling wasm-bindgen-shared v0.2.129
+   Compiling num-traits v0.2.19
+   Compiling bitflags v2.13.2
+   Compiling thiserror v2.0.21
+   Compiling bumpalo v3.20.3
+   Compiling arrayvec v0.7.8
+   Compiling wasm-bindgen v0.2.129
+   Compiling foldhash v0.2.0
+   Compiling futures-task v0.3.34
+   Compiling hashbrown v0.17.1
+   Compiling slab v0.4.12
+   Compiling futures-core v0.3.34
+   Compiling pin-project-lite v0.2.17
+   Compiling futures-util v0.3.34
+   Compiling simd-adler32 v0.3.10
+   Compiling syn v2.0.119
+   Compiling zerocopy v0.8.61
+   Compiling crc32fast v1.5.2
+   Compiling adler2 v2.0.1
+   Compiling polycool v0.4.0
+   Compiling wasm-bindgen-macro-support v0.2.129
+   Compiling miniz_oxide v0.9.1
+   Compiling bytemuck_derive v1.12.1
+   Compiling serde_derive v1.0.229
+   Compiling thiserror-impl v2.0.21
+   Compiling bytemuck v1.25.2
+   Compiling zerocopy-derive v0.8.61
+   Compiling zlib-rs v0.6.8
+   Compiling wasm-bindgen-macro v0.2.129
+   Compiling smallvec v1.16.2
+   Compiling kurbo v0.13.1
+   Compiling equivalent v1.0.2
+   Compiling indexmap v2.14.2
+   Compiling js-sys v0.3.106
+   Compiling flate2 v1.1.10
+   Compiling font-types v0.12.6
+   Compiling memchr v2.8.3
+   Compiling zmij v1.0.23
+   Compiling miniz_oxide v0.8.9
+   Compiling scopeguard v1.2.0
+   Compiling version_check v0.9.5
+   Compiling half v2.7.1
+   Compiling fdeflate v0.3.7
+   Compiling cfg_aliases v0.2.2
+   Compiling serde_json v1.0.151
+   Compiling png v0.18.1
+   Compiling color v0.3.3
+   Compiling euclid v0.22.14
+   Compiling unicode-segmentation v1.13.3
+   Compiling linebender_resource_handle v0.1.1
+   Compiling typenum v1.20.1
+   Compiling peniko v0.6.1
+   Compiling guillotiere v0.7.0
+   Compiling hybrid-array v0.4.15
+   Compiling weezl v0.1.12
+   Compiling fearless_simd v0.4.1
+   Compiling quick-error v2.0.1
+   Compiling itoa v1.0.18
+   Compiling zune-core v0.5.3
+   Compiling read-fonts v0.41.0
+   Compiling zune-jpeg v0.5.15
+   Compiling byteorder-lite v0.1.0
+   Compiling parking_lot_core v0.9.12
+   Compiling color_quant v1.1.0
+   Compiling gif v0.14.2
+   Compiling image-webp v0.2.4
+   Compiling uuid v1.27.0
+   Compiling crypto-common v0.2.2
+   Compiling lock_api v0.4.14
+   Compiling fax v0.2.7
+   Compiling pxfm v0.1.30
+   Compiling tiff v0.11.3
+   Compiling web-sys v0.3.106
+   Compiling moxcms v0.8.1
+   Compiling skrifa v0.44.0
+   Compiling parking_lot v0.12.5
+   Compiling wordcraft-geom v0.9.0 (/mnt/storage/scratch/gyro-223-measure-mzbp0x23/pruned-source/crates/geom)
+   Compiling font-types v0.11.3
+   Compiling synstructure v0.14.0
+   Compiling rustc-hash v1.1.0
+   Compiling cmov v0.5.4
+   Compiling profiling v1.0.18
+   Compiling rustc-hash v2.1.3
+   Compiling unicode-script v0.5.8
+   Compiling ctutils v0.4.3
+   Compiling naga-types v30.0.1
+   Compiling wordcraft-doc v0.9.0 (/mnt/storage/scratch/gyro-223-measure-mzbp0x23/pruned-source/crates/doc)
+   Compiling read-fonts v0.39.2
+   Compiling image v0.25.10
+   Compiling web-time v1.1.0
+   Compiling block-buffer v0.12.1
+   Compiling naga v30.0.1
+   Compiling slotmap v1.1.1
+   Compiling unicode-width v0.2.2
+   Compiling bit-vec v0.9.1
+   Compiling const-oid v0.10.2
+   Compiling raw-window-handle v0.6.2
+   Compiling alloc-no-stdlib v2.0.4
+   Compiling brotli-decompressor v5.0.3
+   Compiling bit-set v0.10.0
+   Compiling digest v0.11.3
+   Compiling codespan-reporting v0.13.1
+   Compiling zerofrom-derive v0.1.8
+   Compiling ahash v0.8.12
+   Compiling read-fonts v0.44.0
+   Compiling read-fonts v0.43.3
+   Compiling core_maths v0.1.1
+   Compiling static_assertions v1.1.0
+   Compiling wordcraft-fonts v0.9.0 (/mnt/storage/scratch/gyro-223-measure-mzbp0x23/pruned-source/crates/fonts)
+   Compiling unicode-general-category v1.1.0
+   Compiling unicode-bidi v0.3.18
+   Compiling bytes v1.12.1
+   Compiling wgpu-types v30.0.1
+   Compiling wuff v0.2.9
+   Compiling ttf-parser v0.25.1
+   Compiling zerofrom v0.1.8
+   Compiling skrifa v0.47.0
+   Compiling harfrust v0.13.3
+   Compiling skrifa v0.42.1
+   Compiling write-fonts v0.48.1
+   Compiling yoke-derive v0.8.4
+   Compiling vello_common v0.1.0
+   Compiling wgpu-hal v30.0.1
+   Compiling emath v0.36.2
+   Compiling encoding_rs v0.8.42
+   Compiling strict-num v0.1.1
+   Compiling unicode-bidi-mirroring v0.4.0
+   Compiling fnv v1.0.7
+   Compiling stable_deref_trait v1.2.1
+   Compiling base64 v0.22.1
+   Compiling unicode-properties v0.1.4
+   Compiling unicode-ccc v0.4.0
+   Compiling arrayref v0.3.9
+   Compiling ryu v1.0.23
+   Compiling pdf-writer v0.15.0
+   Compiling tiny-skia-path v0.12.0
+   Compiling rustybuzz v0.20.1
+   Compiling vello_cpu v0.1.0
+   Compiling yoke v0.8.3
+   Compiling cfb v0.15.0
+   Compiling subsetter v0.2.6
+   Compiling ecolor v0.36.2
+   Compiling glow v0.17.0
+   Compiling wgpu-naga-bridge v30.0.1
+   Compiling zopfli v0.8.3
+   Compiling harfrust v0.12.0
+   Compiling vello_common v0.2.0
+   Compiling inout v0.2.2
+   Compiling wordcraft-proof v0.9.0 (/mnt/storage/scratch/gyro-223-measure-mzbp0x23/pruned-source/crates/proof)
+   Compiling float-cmp v0.9.0
+   Compiling nohash-hasher v0.2.0
+   Compiling unicode-linebreak v0.1.5
+   Compiling xmp-writer v0.3.3
+   Compiling getrandom v0.3.4
+   Compiling multiversion_no_op v1.0.0
+   Compiling imagesize v0.14.0
+   Compiling either v1.19.0
+   Compiling self_cell v1.3.0
+   Compiling epaint_default_fonts v0.36.2
+   Compiling siphasher v1.0.4
+   Compiling epaint v0.36.2
+   Compiling krilla v0.8.2 (https://github.com/storytold/craft-libs?rev=c3487320b2d1de657b860b3c8abb44e1f2b32bd8#c3487320)
+   Compiling itertools v0.15.0
+   Compiling wordcraft-layout v0.9.0 (/mnt/storage/scratch/gyro-223-measure-mzbp0x23/pruned-source/crates/layout)
+   Compiling glifo v0.3.0
+   Compiling cipher v0.5.2
+   Compiling zip v3.0.0
+   Compiling sha1 v0.11.0
+   Compiling accesskit v0.24.1
+   Compiling wgpu-core v30.0.1
+   Compiling aho-corasick v1.1.5
+   Compiling quick-xml v0.41.0
+   Compiling wordcraft-metafile v0.9.0 (/mnt/storage/scratch/gyro-223-measure-mzbp0x23/pruned-source/crates/metafile)
+   Compiling cpubits v0.1.1
+   Compiling regex-syntax v0.8.11
+   Compiling litrs v1.0.0
+   Compiling winnow v1.0.4
+   Compiling toml_parser v1.1.3+spec-1.1.0
+   Compiling document-features v0.2.12
+   Compiling aes v0.9.3
+   Compiling wgpu-core-deps-wasm v30.0.1
+   Compiling regex-automata v0.4.18
+   Compiling egui v0.36.2
+   Compiling vello_cpu v0.2.0
+   Compiling chardetng v1.0.0
+   Compiling craft-pdf v0.1.0 (https://github.com/storytold/craft-libs?rev=c3487320b2d1de657b860b3c8abb44e1f2b32bd8#c3487320)
+   Compiling toml_datetime v1.1.1+spec-1.1.0
+   Compiling serde_spanned v1.1.1
+   Compiling hmac v0.13.0
+   Compiling sha2 v0.11.0
+   Compiling wasm-bindgen-futures v0.4.79
+   Compiling wgpu v30.0.1
+   Compiling zeroize v1.9.1
+   Compiling toml_writer v1.1.2+spec-1.1.0
+   Compiling toml v1.1.6+spec-1.1.0
+   Compiling wordcraft-docx v0.9.0 (/mnt/storage/scratch/gyro-223-measure-mzbp0x23/pruned-source/crates/docx)
+   Compiling wordcraft-pdf v0.9.0 (/mnt/storage/scratch/gyro-223-measure-mzbp0x23/pruned-source/crates/pdf)
+   Compiling wordcraft-formats v0.9.0 (/mnt/storage/scratch/gyro-223-measure-mzbp0x23/pruned-source/crates/formats)
+   Compiling wordcraft-render v0.9.0 (/mnt/storage/scratch/gyro-223-measure-mzbp0x23/pruned-source/crates/render)
+   Compiling regex v1.13.1
+   Compiling wordcraft-docbin v0.9.0 (/mnt/storage/scratch/gyro-223-measure-mzbp0x23/pruned-source/crates/docbin)
+   Compiling wordcraft-engine v0.9.0 (/mnt/storage/scratch/gyro-223-measure-mzbp0x23/pruned-source/crates/engine)
+   Compiling wordcraft-ui-egui v0.9.0 (/mnt/storage/scratch/gyro-223-measure-mzbp0x23/pruned-source/crates/ui-egui)
+   Compiling type-map v0.5.1
+   Compiling rfd v0.17.2
+   Compiling craft-ui v0.1.0 (https://github.com/storytold/craft-libs?rev=d27646a5f7c8b4fc85d9dd3213b8c88b58e0088d#d27646a5)
+   Compiling sys-locale v0.3.2
+   Compiling percent-encoding v2.3.2
+warning: function `by_author` is never used
+   --> crates/engine/src/cmd/citations.rs:534:4
+    |
+534 | fn by_author(x: &Source) -> &str {
+    |    ^^^^^^^^^
+    |
+    = note: `#[warn(dead_code)]` (part of `#[warn(unused)]`) on by default
+
+warning: function `primary_tag` is never used
+   --> crates/engine/src/speech.rs:252:4
+    |
+252 | fn primary_tag(tag: &str) -> Option<String> {
+    |    ^^^^^^^^^^^
+
+warning: function `voice_language` is never used
+   --> crates/engine/src/speech.rs:260:4
+    |
+260 | fn voice_language(lang: Option<&str>, default: &str) -> Option<String> {
+    |    ^^^^^^^^^^^^^^
+
+   Compiling egui-wgpu v0.36.2
+   Compiling eframe v0.36.2
+   Compiling wordcraft-zotero v0.9.0 (/mnt/storage/scratch/gyro-223-measure-mzbp0x23/pruned-source/crates/zotero)
+warning: `wordcraft-engine` (lib) generated 3 warnings
+   Compiling wordcraft-web v0.9.0 (/mnt/storage/scratch/gyro-223-measure-mzbp0x23/pruned-source/apps/wordcraft-web)
+    Finished `release` profile [optimized] target(s) in 3m 16s
+2026-10-24T06:38:13.771065Z  INFO applying new distribution
+2026-10-24T06:38:13.771634Z  INFO success
@@ -0,0 +1,10 @@
+{
+  "scratchRoot": "/mnt/storage/scratch/gyro-223-measure-mzbp0x23",
+  "metadataExit": 101,
+  "metadataError": "error: cannot update the lock file /mnt/storage/scratch/gyro-223-measure-mzbp0x23/source/Cargo.lock because --locked was passed to prevent this\nhelp: to generate the lock file without accessing the network, remove the --locked flag and use --offline instead.\n",
+  "originalLockSha256": "06b745e43c13df3df7f048fa6a1981625ce7a5fe4cd484bc6254d0913d865b0b",
+  "lockUnchanged": true,
+  "network": "isolated network namespace with no external interface; offline Cargo; fresh HOME/CARGO_HOME",
+  "closures": {},
+  "resolves": false
+}
@@ -0,0 +1,31 @@
+from pathlib import Path
+import os,json,subprocess,re,time,hashlib
+root=Path('/mnt/storage/scratch/gyro-223-measure-root.txt').read_text().strip();root=Path(root);work=Path('agents/gyro/work/queue-310')
+rust='/mnt/storage/scratch/louie-wordcraft-toolchain/rustup/toolchains/stable-x86_64-unknown-linux-gnu/bin'
+for k in os.environ:
+ if k in ['RUSTFLAGS','RUSTDOCFLAGS','CARGO_ENCODED_RUSTFLAGS','CARGO_BUILD_RUSTFLAGS'] or (k.startswith('CARGO_TARGET_') and k.endswith('_RUSTFLAGS')):raise RuntimeError('inherited flags refused: '+k)
+env={'PATH':rust+':/usr/bin:/bin','HOME':str(root/'home'),'CARGO_HOME':str(root/'cargo-home'),'CARGO_NET_OFFLINE':'true','CARGO_BUILD_JOBS':'4','RUSTC':rust+'/rustc','CARGO_TARGET_DIR':str(root/'target'),'LC_ALL':'C','TZ':'UTC','TMPDIR':os.environ['TMPDIR']}
+def priority():os.setpriority(os.PRIO_PROCESS,0,19)
+def run(args,name):
+ command=['unshare','--user','--map-root-user','--net']+args;t=time.monotonic()
+ p=subprocess.run(command,cwd=root/'source',env=env,preexec_fn=priority,capture_output=True,text=True)
+ (root/(name+'.stdout')).write_text(p.stdout);(root/(name+'.stderr')).write_text(p.stderr)
+ (work/('measurement-223-'+name+'.txt')).write_text('command: '+' '.join(command)+'\nexit: '+str(p.returncode)+'\nwallSeconds: '+str(time.monotonic()-t)+'\nSTDERR:\n'+p.stderr+('\nSTDOUT:\n'+p.stdout if p.returncode else ''))
+ return p
+original=(root/'source/Cargo.lock').read_bytes()
+p=run([rust+'/cargo','metadata','--offline','--locked','--filter-platform','wasm32-unknown-unknown','--format-version','1'],'metadata')
+report={'scratchRoot':str(root),'metadataExit':p.returncode,'metadataError':p.stderr,'originalLockSha256':hashlib.sha256(original).hexdigest(),'lockUnchanged':original==(root/'source/Cargo.lock').read_bytes(),'network':'isolated network namespace with no external interface; offline Cargo; fresh HOME/CARGO_HOME','closures':{}}
+if p.returncode==0:
+ inv=json.load(open('packages/webui/third_party/wordcraft/PROVENANCE.json'))['packages']
+ for edge in ['normal','normal,build']:
+  p=run([rust+'/cargo','tree','--locked','--offline','-p','wordcraft-web','--target','wasm32-unknown-unknown','--edges',edge,'--prefix','none','--format','{p}'],'tree-'+edge.replace(',','-'))
+  actual=set()
+  for line in p.stdout.splitlines():
+   m=re.match(r'(\S+) v(\S+)',line)
+   if m:actual.add((m[1],m[2]))
+  expected={(x['name'],x['version']) for x in inv if edge=='normal,build' or x['edge']=='normal'}
+  report['closures'][edge]={'exit':p.returncode,'packages':len(actual),'added':sorted(actual-expected),'missing':sorted(expected-actual),'matchesS0':p.returncode==0 and actual==expected}
+ report['resolves']=all(x['matchesS0'] for x in report['closures'].values())
+else:report['resolves']=False
+(work/'measurement-223-resolution.json').write_text(json.dumps(report,indent=2)+'\n');(root/'resolution-result.json').write_text(json.dumps(report,indent=2)+'\n')
+print(json.dumps(report,indent=2))
@@ -0,0 +1,22 @@
+{
+  "scratchRoot": "/mnt/storage/scratch/gyro-223-measure-mzbp0x23",
+  "method": "pristine package files (not filtered build copy), git hash-object -w --no-filters --stdin-paths into scratch bare repo; each sorted unique blob set through pack-objects --stdout --threads=4; no gc; no tree/commit objects or cross-version deltas",
+  "all223Files": 11201,
+  "all223Bytes": 145260334,
+  "extra14Files": 702,
+  "extra14Bytes": 14523104,
+  "packs": {
+    "all223": {
+      "packedBytes": 26538894,
+      "uniqueBlobs": 10275,
+      "sha256": "70b06c31030057d7b994290b464f3ed7707d1ae5490140a0853ac520c7563304"
+    },
+    "extra14": {
+      "packedBytes": 1720566,
+      "uniqueBlobs": 691,
+      "sha256": "71e53a9af8dd368a56bb382cf313b2a8ead530055028e1a31f57fc8119071bd0"
+    }
+  },
+  "countObjectsBefore": "count: 0\nsize: 0\nin-pack: 0\npacks: 0\nsize-pack: 0\nprune-packable: 0\ngarbage: 0\nsize-garbage: 0\n",
+  "countObjectsAfter": "count: 10275\nsize: 66172\nin-pack: 0\npacks: 0\nsize-pack: 0\nprune-packable: 0\ngarbage: 0\nsize-garbage: 0\n"
+}
@@ -0,0 +1,10 @@
+{
+  "scratchRoot": "/mnt/storage/scratch/gyro-223-measure-mzbp0x23",
+  "metadataExit": 101,
+  "metadataError": "error: no matching package named `cpufeatures` found\nlocation searched: directory source `/mnt/storage/scratch/gyro-223-measure-mzbp0x23/vendor` (which is replacing registry `crates-io`)\nrequired by package `sha1 v0.11.0`\n    ... which satisfies dependency `sha1 = \"^0.11\"` (locked to 0.11.0) of package `wordcraft-docbin v0.9.0 (/mnt/storage/scratch/gyro-223-measure-mzbp0x23/source/crates/docbin)`\nnote: offline mode (via `--offline`) can sometimes cause surprising resolution failures\nhelp: if this error is too confusing you may wish to retry without `--offline`\n",
+  "originalLockSha256": "06b745e43c13df3df7f048fa6a1981625ce7a5fe4cd484bc6254d0913d865b0b",
+  "lockUnchanged": true,
+  "network": "isolated network namespace with no external interface; offline Cargo; fresh HOME/CARGO_HOME",
+  "closures": {},
+  "resolves": false
+}
@@ -0,0 +1,106 @@
+// Verbatim measurement routines from the W2 packet; no crate sources.
+// sage-3983/3984g: target cfgs are measured with a sanitized environment.
+// Keep release flags under builder control; ambient flags cannot widen the target.
+export function releaseEnvironment(input) {
+  const forbidden = key => ['RUSTFLAGS', 'CARGO_ENCODED_RUSTFLAGS', 'RUSTDOCFLAGS', 'CARGO_BUILD_RUSTFLAGS'].includes(key)
+    || /^CARGO_TARGET_.*_RUSTFLAGS$/.test(key);
+  for (const key of Object.keys(input)) {
+    if (forbidden(key)) throw new Error(`refusing inherited Rust flags: ${key}`);
+  }
+  const permitted = ['PATH', 'TMPDIR', 'LANG', 'LC_ALL', 'TZ'];
+  return Object.fromEntries(permitted.filter(key => input[key] !== undefined).map(key => [key, input[key]]));
+}
+
+export function evaluateCfg(expression, printCfg) {
+  const enabled = new Set(printCfg.split('\n').map(line => line.trim()).filter(Boolean));
+  const tokens = expression.match(/"(?:[^"\\]|\\.)*"|[A-Za-z_][A-Za-z_0-9]*|[(),=]|\S/g) ?? [];
+  let pos = 0;
+  const take = expected => {
+    if (tokens[pos++] !== expected) throw new Error(`invalid cfg expression: ${expression}`);
+  };
+  function parse() {
+    const name = tokens[pos++];
+    if (!/^[A-Za-z_][A-Za-z_0-9]*$/.test(name ?? '')) throw new Error(`invalid cfg name: ${expression}`);
+    if (tokens[pos] === '(') {
+      pos++;
+      const args = [];
+      while (tokens[pos] !== ')') {
+        args.push(parse());
+        if (tokens[pos] === ',') pos++;
+        else if (tokens[pos] !== ')') throw new Error(`invalid cfg arguments: ${expression}`);
+      }
+      take(')');
+      if (name === 'cfg' && args.length === 1) return args[0];
+      if (name === 'not' && args.length === 1) return !args[0];
+      if (name === 'all') return args.every(Boolean);
+      if (name === 'any') return args.some(Boolean);
+      throw new Error(`unsupported cfg operation: ${name}`);
+    }
+    if (tokens[pos] === '=') {
+      pos++;
+      const value = JSON.parse(tokens[pos++]);
+      return enabled.has(`${name}=${JSON.stringify(value)}`);
+    }
+    return enabled.has(name);
+  }
+  const result = parse();
+  if (pos !== tokens.length) throw new Error(`trailing cfg tokens: ${expression}`);
+  return result;
+}
+
+// Dependency-table parsing only: all edited TOML values are upstream string
+// arrays. Unknown syntax refuses instead of guessing or changing a dependency.
+function targetSection(part) {
+  const line = part.split('\n', 1)[0];
+  const match = /^\[target\.("(?:[^"\\]|\\.)*"|'[^']*'|[^.\]]+)\.(dependencies|build-dependencies|dev-dependencies)(?:\.([A-Za-z0-9_-]+))?\]$/.exec(line);
+  if (!match) return null;
+  const selector = match[1].startsWith('"') ? JSON.parse(match[1]) : match[1].replace(/^'|'$/g, '');
+  const names = match[3] ? [match[3]] : [...part.matchAll(/^([A-Za-z0-9_-]+)\s*=/gm)].map(m => m[1]);
+  return { cfg: selector, kind: match[2], dependencies: names };
+}
+
+export function filterVendorManifest(text, printCfg) {
+  const parts = text.split(/(?=^\[)/m);
+  const sections = [];
+  const retained = [];
+  for (const part of parts) {
+    const section = targetSection(part);
+    if (section?.cfg.startsWith('cfg(') && !evaluateCfg(section.cfg, printCfg)) sections.push(section);
+    else retained.push(part);
+  }
+  const remainingNames = new Set();
+  for (const part of retained) {
+    const section = targetSection(part);
+    if (section && section.kind !== 'dev-dependencies') section.dependencies.forEach(name => remainingNames.add(name));
+    else {
+      const header = /^\[(dependencies|build-dependencies)(?:\.([A-Za-z0-9_-]+))?\]/.exec(part);
+      if (header?.[2]) remainingNames.add(header[2]);
+      else if (header) for (const match of part.matchAll(/^([A-Za-z0-9_-]+)\s*=/gm)) remainingNames.add(match[1]);
+    }
+  }
+  const removed = new Map();
+  for (const section of sections) {
+    for (const name of section.dependencies) {
+      if (!remainingNames.has(name)) removed.set(name, [...(removed.get(name) ?? []), section.cfg]);
+    }
+  }
+  const features = [];
+  const output = retained.map(part => {
+    if (!part.startsWith('[features]')) return part;
+    return part.replace(/^([A-Za-z0-9_-]+)\s*=\s*\[([^\]]*)\]/gm, (whole, feature, body) => {
+      const noComments = body.replace(/#[^\n]*/g, '');
+      let items;
+      try { items = JSON.parse(`[${noComments.replace(/,\s*$/, '')}]`); }
+      catch { throw new Error(`unsupported feature array: ${feature}`); }
+      if (!items.every(item => typeof item === 'string')) throw new Error(`non-string feature item: ${feature}`);
+      const kept = items.filter(item => {
+        const dependency = item.replace(/^dep:/, '').split('/')[0].replace(/\?$/, '');
+        if (!removed.has(dependency)) return true;
+        features.push({ feature, item, dependency, cfg: removed.get(dependency) });
+        return false;
+      });
+      return kept.length === items.length ? whole : `${feature} = ${JSON.stringify(kept)}`;
+    });
+  }).join('');
+  return { text: output, sections, features };
+}
@@ -0,0 +1,251 @@
+2026-10-24T06:02:17.606436Z  INFO Starting trunk 0.22.0
+2026-10-24T06:02:17.608522Z  INFO starting build
+2026-10-24T06:02:17.609024Z  INFO node packages []
+   Compiling proc-macro2 v1.0.107
+   Compiling unicode-ident v1.0.26
+   Compiling quote v1.0.47
+   Compiling cfg-if v1.0.5
+   Compiling serde_core v1.0.229
+   Compiling once_cell v1.21.4
+   Compiling serde v1.0.229
+   Compiling libm v0.2.16
+   Compiling rustversion v1.0.23
+   Compiling wasm-bindgen-shared v0.2.129
+   Compiling syn v3.0.6
+   Compiling autocfg v1.5.1
+   Compiling log v0.4.34
+   Compiling num-traits v0.2.19
+   Compiling thiserror v2.0.21
+   Compiling bitflags v2.13.2
+   Compiling arrayvec v0.7.8
+   Compiling bumpalo v3.20.3
+   Compiling wasm-bindgen v0.2.129
+   Compiling foldhash v0.2.0
+   Compiling slab v0.4.12
+   Compiling hashbrown v0.17.1
+   Compiling futures-core v0.3.34
+   Compiling pin-project-lite v0.2.17
+   Compiling futures-task v0.3.34
+   Compiling futures-util v0.3.34
+   Compiling simd-adler32 v0.3.10
+   Compiling syn v2.0.119
+   Compiling zerocopy v0.8.61
+   Compiling crc32fast v1.5.2
+   Compiling adler2 v2.0.1
+   Compiling polycool v0.4.0
+   Compiling wasm-bindgen-macro-support v0.2.129
+   Compiling miniz_oxide v0.9.1
+   Compiling bytemuck_derive v1.12.1
+   Compiling serde_derive v1.0.229
+   Compiling thiserror-impl v2.0.21
+   Compiling bytemuck v1.25.2
+   Compiling zerocopy-derive v0.8.61
+   Compiling zlib-rs v0.6.8
+   Compiling wasm-bindgen-macro v0.2.129
+   Compiling smallvec v1.16.2
+   Compiling kurbo v0.13.1
+   Compiling equivalent v1.0.2
+   Compiling indexmap v2.14.2
+   Compiling flate2 v1.1.10
+   Compiling js-sys v0.3.106
+   Compiling font-types v0.12.6
+   Compiling memchr v2.8.3
+   Compiling zmij v1.0.23
+   Compiling miniz_oxide v0.8.9
+   Compiling version_check v0.9.5
+   Compiling scopeguard v1.2.0
+   Compiling fdeflate v0.3.7
+   Compiling half v2.7.1
+   Compiling serde_json v1.0.151
+   Compiling cfg_aliases v0.2.2
+   Compiling png v0.18.1
+   Compiling color v0.3.3
+   Compiling euclid v0.22.14
+   Compiling linebender_resource_handle v0.1.1
+   Compiling unicode-segmentation v1.13.3
+   Compiling typenum v1.20.1
+   Compiling peniko v0.6.1
+   Compiling guillotiere v0.7.0
+   Compiling hybrid-array v0.4.15
+   Compiling fearless_simd v0.4.1
+   Compiling quick-error v2.0.1
+   Compiling itoa v1.0.18
+   Compiling weezl v0.1.12
+   Compiling zune-core v0.5.3
+   Compiling zune-jpeg v0.5.15
+   Compiling read-fonts v0.41.0
+   Compiling parking_lot_core v0.9.12
+   Compiling byteorder-lite v0.1.0
+   Compiling color_quant v1.1.0
+   Compiling gif v0.14.2
+   Compiling image-webp v0.2.4
+   Compiling uuid v1.27.0
+   Compiling crypto-common v0.2.2
+   Compiling lock_api v0.4.14
+   Compiling fax v0.2.7
+   Compiling pxfm v0.1.30
+   Compiling tiff v0.11.3
+   Compiling web-sys v0.3.106
+   Compiling moxcms v0.8.1
+   Compiling skrifa v0.44.0
+   Compiling parking_lot v0.12.5
+   Compiling wordcraft-geom v0.9.0 (/mnt/storage/scratch/gyro-full-lock-measure-95ntu6t0/source/crates/geom)
+   Compiling font-types v0.11.3
+   Compiling synstructure v0.14.0
+   Compiling unicode-script v0.5.8
+   Compiling profiling v1.0.18
+   Compiling rustc-hash v2.1.3
+   Compiling cmov v0.5.4
+   Compiling rustc-hash v1.1.0
+   Compiling ctutils v0.4.3
+   Compiling naga-types v30.0.1
+   Compiling read-fonts v0.39.2
+   Compiling wordcraft-doc v0.9.0 (/mnt/storage/scratch/gyro-full-lock-measure-95ntu6t0/source/crates/doc)
+   Compiling image v0.25.10
+   Compiling web-time v1.1.0
+   Compiling block-buffer v0.12.1
+   Compiling naga v30.0.1
+   Compiling slotmap v1.1.1
+   Compiling unicode-width v0.2.2
+   Compiling bit-vec v0.9.1
+   Compiling raw-window-handle v0.6.2
+   Compiling alloc-no-stdlib v2.0.4
+   Compiling const-oid v0.10.2
+   Compiling digest v0.11.3
+   Compiling brotli-decompressor v5.0.3
+   Compiling bit-set v0.10.0
+   Compiling codespan-reporting v0.13.1
+   Compiling zerofrom-derive v0.1.8
+   Compiling ahash v0.8.12
+   Compiling read-fonts v0.44.0
+   Compiling read-fonts v0.43.3
+   Compiling core_maths v0.1.1
+   Compiling unicode-bidi v0.3.18
+   Compiling bytes v1.12.1
+   Compiling unicode-general-category v1.1.0
+   Compiling static_assertions v1.1.0
+   Compiling wordcraft-fonts v0.9.0 (/mnt/storage/scratch/gyro-full-lock-measure-95ntu6t0/source/crates/fonts)
+   Compiling wgpu-types v30.0.1
+   Compiling wuff v0.2.9
+   Compiling ttf-parser v0.25.1
+   Compiling zerofrom v0.1.8
+   Compiling skrifa v0.47.0
+   Compiling harfrust v0.13.3
+   Compiling skrifa v0.42.1
+   Compiling write-fonts v0.48.1
+   Compiling yoke-derive v0.8.4
+   Compiling vello_common v0.1.0
+   Compiling wgpu-hal v30.0.1
+   Compiling emath v0.36.2
+   Compiling encoding_rs v0.8.42
+   Compiling strict-num v0.1.1
+   Compiling base64 v0.22.1
+   Compiling fnv v1.0.7
+   Compiling stable_deref_trait v1.2.1
+   Compiling unicode-ccc v0.4.0
+   Compiling arrayref v0.3.9
+   Compiling ryu v1.0.23
+   Compiling unicode-properties v0.1.4
+   Compiling unicode-bidi-mirroring v0.4.0
+   Compiling rustybuzz v0.20.1
+   Compiling pdf-writer v0.15.0
+   Compiling tiny-skia-path v0.12.0
+   Compiling yoke v0.8.3
+   Compiling cfb v0.15.0
+   Compiling vello_cpu v0.1.0
+   Compiling subsetter v0.2.6
+   Compiling ecolor v0.36.2
+   Compiling glow v0.17.0
+   Compiling wgpu-naga-bridge v30.0.1
+   Compiling zopfli v0.8.3
+   Compiling harfrust v0.12.0
+   Compiling vello_common v0.2.0
+   Compiling inout v0.2.2
+   Compiling wordcraft-proof v0.9.0 (/mnt/storage/scratch/gyro-full-lock-measure-95ntu6t0/source/crates/proof)
+   Compiling float-cmp v0.9.0
+   Compiling self_cell v1.3.0
+   Compiling imagesize v0.14.0
+   Compiling epaint_default_fonts v0.36.2
+   Compiling xmp-writer v0.3.3
+   Compiling unicode-linebreak v0.1.5
+   Compiling nohash-hasher v0.2.0
+   Compiling multiversion_no_op v1.0.0
+   Compiling getrandom v0.3.4
+   Compiling either v1.19.0
+   Compiling siphasher v1.0.4
+   Compiling itertools v0.15.0
+   Compiling krilla v0.8.2 (https://github.com/storytold/craft-libs?rev=c3487320b2d1de657b860b3c8abb44e1f2b32bd8#c3487320)
+   Compiling epaint v0.36.2
+   Compiling wordcraft-layout v0.9.0 (/mnt/storage/scratch/gyro-full-lock-measure-95ntu6t0/source/crates/layout)
+   Compiling glifo v0.3.0
+   Compiling cipher v0.5.2
+   Compiling zip v3.0.0
+   Compiling sha1 v0.11.0
+   Compiling accesskit v0.24.1
+   Compiling wgpu-core v30.0.1
+   Compiling quick-xml v0.41.0
+   Compiling aho-corasick v1.1.5
+   Compiling wordcraft-metafile v0.9.0 (/mnt/storage/scratch/gyro-full-lock-measure-95ntu6t0/source/crates/metafile)
+   Compiling winnow v1.0.4
+   Compiling cpubits v0.1.1
+   Compiling regex-syntax v0.8.11
+   Compiling litrs v1.0.0
+   Compiling document-features v0.2.12
+   Compiling aes v0.9.3
+   Compiling toml_parser v1.1.3+spec-1.1.0
+   Compiling wgpu-core-deps-wasm v30.0.1
+   Compiling egui v0.36.2
+   Compiling vello_cpu v0.2.0
+   Compiling regex-automata v0.4.18
+   Compiling craft-pdf v0.1.0 (https://github.com/storytold/craft-libs?rev=c3487320b2d1de657b860b3c8abb44e1f2b32bd8#c3487320)
+   Compiling chardetng v1.0.0
+   Compiling toml_datetime v1.1.1+spec-1.1.0
+   Compiling serde_spanned v1.1.1
+   Compiling sha2 v0.11.0
+   Compiling hmac v0.13.0
+   Compiling wasm-bindgen-futures v0.4.79
+   Compiling wgpu v30.0.1
+   Compiling toml_writer v1.1.2+spec-1.1.0
+   Compiling zeroize v1.9.1
+   Compiling wordcraft-docx v0.9.0 (/mnt/storage/scratch/gyro-full-lock-measure-95ntu6t0/source/crates/docx)
+   Compiling toml v1.1.6+spec-1.1.0
+   Compiling wordcraft-formats v0.9.0 (/mnt/storage/scratch/gyro-full-lock-measure-95ntu6t0/source/crates/formats)
+   Compiling wordcraft-pdf v0.9.0 (/mnt/storage/scratch/gyro-full-lock-measure-95ntu6t0/source/crates/pdf)
+   Compiling regex v1.13.1
+   Compiling wordcraft-render v0.9.0 (/mnt/storage/scratch/gyro-full-lock-measure-95ntu6t0/source/crates/render)
+   Compiling wordcraft-docbin v0.9.0 (/mnt/storage/scratch/gyro-full-lock-measure-95ntu6t0/source/crates/docbin)
+   Compiling wordcraft-engine v0.9.0 (/mnt/storage/scratch/gyro-full-lock-measure-95ntu6t0/source/crates/engine)
+   Compiling wordcraft-ui-egui v0.9.0 (/mnt/storage/scratch/gyro-full-lock-measure-95ntu6t0/source/crates/ui-egui)
+   Compiling type-map v0.5.1
+   Compiling rfd v0.17.2
+   Compiling craft-ui v0.1.0 (https://github.com/storytold/craft-libs?rev=d27646a5f7c8b4fc85d9dd3213b8c88b58e0088d#d27646a5)
+   Compiling sys-locale v0.3.2
+   Compiling percent-encoding v2.3.2
+warning: function `by_author` is never used
+   --> crates/engine/src/cmd/citations.rs:534:4
+    |
+534 | fn by_author(x: &Source) -> &str {
+    |    ^^^^^^^^^
+    |
+    = note: `#[warn(dead_code)]` (part of `#[warn(unused)]`) on by default
+
+warning: function `primary_tag` is never used
+   --> crates/engine/src/speech.rs:252:4
+    |
+252 | fn primary_tag(tag: &str) -> Option<String> {
+    |    ^^^^^^^^^^^
+
+warning: function `voice_language` is never used
+   --> crates/engine/src/speech.rs:260:4
+    |
+260 | fn voice_language(lang: Option<&str>, default: &str) -> Option<String> {
+    |    ^^^^^^^^^^^^^^
+
+   Compiling egui-wgpu v0.36.2
+   Compiling eframe v0.36.2
+   Compiling wordcraft-zotero v0.9.0 (/mnt/storage/scratch/gyro-full-lock-measure-95ntu6t0/source/crates/zotero)
+warning: `wordcraft-engine` (lib) generated 3 warnings
+   Compiling wordcraft-web v0.9.0 (/mnt/storage/scratch/gyro-full-lock-measure-95ntu6t0/source/apps/wordcraft-web)
+    Finished `release` profile [optimized] target(s) in 3m 31s
+2026-10-24T06:08:46.350795Z  INFO applying new distribution
+2026-10-24T06:08:46.351536Z  INFO success
@@ -0,0 +1,3 @@
+Inter-|   Receive                                                |  Transmit
+ face |bytes    packets errs drop fifo frame compressed multicast|bytes    packets errs drop fifo colls carrier compressed
+    lo:       0       0    0    0    0     0          0         0        0       0    0    0    0     0       0          0
@@ -0,0 +1,29 @@
+{
+  "method": "git hash-object -w for four output blobs into new scratch bare repo; sorted blob ids piped into git pack-objects --stdout --threads=4; no gc, no repo-tree object writes",
+  "gitVersion": "git version 2.55.0",
+  "packedBytes": 16720159,
+  "unpackedOutputBytes": 44142800,
+  "excluded": ".trunk-lock (empty internal Trunk lock, not runtime artifact)",
+  "outputs": {
+    "index.html": {
+      "bytes": 1604,
+      "sha256": "299b76f4004bbc65204d561cc381b3fbb249d10069eaa50e88c7fba3b6c63cb8"
+    },
+    "wordcraft-fa59e09a3f921e03.ico": {
+      "bytes": 18378,
+      "sha256": "53a23dcf66260f44d87d4d143d633395f3e967f391eda47e6e9cc3a52f820225"
+    },
+    "wordcraft-web-832240fdc6ce872b_bg.wasm": {
+      "bytes": 43957877,
+      "sha256": "c1c15050a9b394c21e7540aa57c9292b86d32bfea2476094a9976304dacf1de0"
+    },
+    "wordcraft-web-88f7089f25a3b338.js": {
+      "bytes": 164941,
+      "sha256": "866a1de6a33eff2ded8ae9588fd049aeacfc42557a3863ccd2107b3faf4d691e"
+    }
+  },
+  "countObjectsBefore": "count: 0\nsize: 0\nin-pack: 0\npacks: 0\nsize-pack: 0\nprune-packable: 0\ngarbage: 0\nsize-garbage: 0\n",
+  "countObjectsAfterHash": "count: 4\nsize: 21628\nin-pack: 0\npacks: 0\nsize-pack: 0\nprune-packable: 0\ngarbage: 0\nsize-garbage: 0\n",
+  "countObjectsAfterPack": "count: 4\nsize: 21628\nin-pack: 0\npacks: 0\nsize-pack: 0\nprune-packable: 0\ngarbage: 0\nsize-garbage: 0\n",
+  "scratchRepo": "/mnt/storage/scratch/gyro-full-lock-measure-95ntu6t0/output-measurement.git"
+}
@@ -0,0 +1,26 @@
+{
+  "atUTC": "2026-10-24T06:05:25.404163+00:00",
+  "note": "nice -n 19 is relative; observed inherited priority resulted in nice15. Set owned build process/thread priorities absolutely to19 during the build. No other process affected.",
+  "processes": [
+    {
+      "pid": 1518443,
+      "before": -4,
+      "after": 19
+    },
+    {
+      "pid": 1518605,
+      "before": 15,
+      "after": 19
+    },
+    {
+      "pid": 1518655,
+      "before": 15,
+      "after": 19
+    },
+    {
+      "pid": 1538729,
+      "before": 15,
+      "after": 19
+    }
+  ]
+}
@@ -0,0 +1,251 @@
+2026-10-24T06:09:38.421692Z  INFO Starting trunk 0.22.0
+2026-10-24T06:09:38.423033Z  INFO starting build
+2026-10-24T06:09:38.423284Z  INFO node packages []
+   Compiling unicode-ident v1.0.26
+   Compiling proc-macro2 v1.0.107
+   Compiling quote v1.0.47
+   Compiling cfg-if v1.0.5
+   Compiling serde_core v1.0.229
+   Compiling once_cell v1.21.4
+   Compiling serde v1.0.229
+   Compiling libm v0.2.16
+   Compiling rustversion v1.0.23
+   Compiling wasm-bindgen-shared v0.2.129
+   Compiling autocfg v1.5.1
+   Compiling syn v3.0.6
+   Compiling log v0.4.34
+   Compiling num-traits v0.2.19
+   Compiling thiserror v2.0.21
+   Compiling bitflags v2.13.2
+   Compiling bumpalo v3.20.3
+   Compiling arrayvec v0.7.8
+   Compiling wasm-bindgen v0.2.129
+   Compiling foldhash v0.2.0
+   Compiling hashbrown v0.17.1
+   Compiling futures-task v0.3.34
+   Compiling slab v0.4.12
+   Compiling futures-core v0.3.34
+   Compiling pin-project-lite v0.2.17
+   Compiling simd-adler32 v0.3.10
+   Compiling futures-util v0.3.34
+   Compiling syn v2.0.119
+   Compiling zerocopy v0.8.61
+   Compiling crc32fast v1.5.2
+   Compiling adler2 v2.0.1
+   Compiling polycool v0.4.0
+   Compiling wasm-bindgen-macro-support v0.2.129
+   Compiling miniz_oxide v0.9.1
+   Compiling bytemuck_derive v1.12.1
+   Compiling serde_derive v1.0.229
+   Compiling bytemuck v1.25.2
+   Compiling thiserror-impl v2.0.21
+   Compiling zerocopy-derive v0.8.61
+   Compiling zlib-rs v0.6.8
+   Compiling wasm-bindgen-macro v0.2.129
+   Compiling smallvec v1.16.2
+   Compiling kurbo v0.13.1
+   Compiling equivalent v1.0.2
+   Compiling indexmap v2.14.2
+   Compiling js-sys v0.3.106
+   Compiling flate2 v1.1.10
+   Compiling font-types v0.12.6
+   Compiling memchr v2.8.3
+   Compiling zmij v1.0.23
+   Compiling miniz_oxide v0.8.9
+   Compiling half v2.7.1
+   Compiling scopeguard v1.2.0
+   Compiling version_check v0.9.5
+   Compiling fdeflate v0.3.7
+   Compiling cfg_aliases v0.2.2
+   Compiling serde_json v1.0.151
+   Compiling color v0.3.3
+   Compiling png v0.18.1
+   Compiling euclid v0.22.14
+   Compiling typenum v1.20.1
+   Compiling unicode-segmentation v1.13.3
+   Compiling linebender_resource_handle v0.1.1
+   Compiling peniko v0.6.1
+   Compiling hybrid-array v0.4.15
+   Compiling guillotiere v0.7.0
+   Compiling zune-core v0.5.3
+   Compiling fearless_simd v0.4.1
+   Compiling itoa v1.0.18
+   Compiling weezl v0.1.12
+   Compiling quick-error v2.0.1
+   Compiling zune-jpeg v0.5.15
+   Compiling read-fonts v0.41.0
+   Compiling color_quant v1.1.0
+   Compiling byteorder-lite v0.1.0
+   Compiling parking_lot_core v0.9.12
+   Compiling image-webp v0.2.4
+   Compiling gif v0.14.2
+   Compiling uuid v1.27.0
+   Compiling crypto-common v0.2.2
+   Compiling lock_api v0.4.14
+   Compiling pxfm v0.1.30
+   Compiling fax v0.2.7
+   Compiling tiff v0.11.3
+   Compiling web-sys v0.3.106
+   Compiling moxcms v0.8.1
+   Compiling skrifa v0.44.0
+   Compiling parking_lot v0.12.5
+   Compiling wordcraft-geom v0.9.0 (/mnt/storage/scratch/gyro-full-lock-measure-95ntu6t0/source/crates/geom)
+   Compiling font-types v0.11.3
+   Compiling synstructure v0.14.0
+   Compiling rustc-hash v1.1.0
+   Compiling unicode-script v0.5.8
+   Compiling cmov v0.5.4
+   Compiling rustc-hash v2.1.3
+   Compiling profiling v1.0.18
+   Compiling ctutils v0.4.3
+   Compiling naga-types v30.0.1
+   Compiling read-fonts v0.39.2
+   Compiling wordcraft-doc v0.9.0 (/mnt/storage/scratch/gyro-full-lock-measure-95ntu6t0/source/crates/doc)
+   Compiling image v0.25.10
+   Compiling web-time v1.1.0
+   Compiling block-buffer v0.12.1
+   Compiling naga v30.0.1
+   Compiling slotmap v1.1.1
+   Compiling alloc-no-stdlib v2.0.4
+   Compiling raw-window-handle v0.6.2
+   Compiling unicode-width v0.2.2
+   Compiling bit-vec v0.9.1
+   Compiling const-oid v0.10.2
+   Compiling bit-set v0.10.0
+   Compiling digest v0.11.3
+   Compiling codespan-reporting v0.13.1
+   Compiling brotli-decompressor v5.0.3
+   Compiling zerofrom-derive v0.1.8
+   Compiling ahash v0.8.12
+   Compiling read-fonts v0.44.0
+   Compiling read-fonts v0.43.3
+   Compiling core_maths v0.1.1
+   Compiling wordcraft-fonts v0.9.0 (/mnt/storage/scratch/gyro-full-lock-measure-95ntu6t0/source/crates/fonts)
+   Compiling bytes v1.12.1
+   Compiling unicode-general-category v1.1.0
+   Compiling unicode-bidi v0.3.18
+   Compiling static_assertions v1.1.0
+   Compiling wgpu-types v30.0.1
+   Compiling wuff v0.2.9
+   Compiling ttf-parser v0.25.1
+   Compiling zerofrom v0.1.8
+   Compiling skrifa v0.47.0
+   Compiling harfrust v0.13.3
+   Compiling skrifa v0.42.1
+   Compiling write-fonts v0.48.1
+   Compiling yoke-derive v0.8.4
+   Compiling vello_common v0.1.0
+   Compiling wgpu-hal v30.0.1
+   Compiling emath v0.36.2
+   Compiling encoding_rs v0.8.42
+   Compiling ryu v1.0.23
+   Compiling unicode-properties v0.1.4
+   Compiling base64 v0.22.1
+   Compiling arrayref v0.3.9
+   Compiling fnv v1.0.7
+   Compiling strict-num v0.1.1
+   Compiling unicode-bidi-mirroring v0.4.0
+   Compiling stable_deref_trait v1.2.1
+   Compiling unicode-ccc v0.4.0
+   Compiling rustybuzz v0.20.1
+   Compiling yoke v0.8.3
+   Compiling tiny-skia-path v0.12.0
+   Compiling cfb v0.15.0
+   Compiling subsetter v0.2.6
+   Compiling pdf-writer v0.15.0
+   Compiling vello_cpu v0.1.0
+   Compiling ecolor v0.36.2
+   Compiling glow v0.17.0
+   Compiling wgpu-naga-bridge v30.0.1
+   Compiling zopfli v0.8.3
+   Compiling harfrust v0.12.0
+   Compiling vello_common v0.2.0
+   Compiling inout v0.2.2
+   Compiling wordcraft-proof v0.9.0 (/mnt/storage/scratch/gyro-full-lock-measure-95ntu6t0/source/crates/proof)
+   Compiling float-cmp v0.9.0
+   Compiling siphasher v1.0.4
+   Compiling self_cell v1.3.0
+   Compiling xmp-writer v0.3.3
+   Compiling nohash-hasher v0.2.0
+   Compiling either v1.19.0
+   Compiling imagesize v0.14.0
+   Compiling epaint_default_fonts v0.36.2
+   Compiling multiversion_no_op v1.0.0
+   Compiling unicode-linebreak v0.1.5
+   Compiling getrandom v0.3.4
+   Compiling wordcraft-layout v0.9.0 (/mnt/storage/scratch/gyro-full-lock-measure-95ntu6t0/source/crates/layout)
+   Compiling epaint v0.36.2
+   Compiling krilla v0.8.2 (https://github.com/storytold/craft-libs?rev=c3487320b2d1de657b860b3c8abb44e1f2b32bd8#c3487320)
+   Compiling itertools v0.15.0
+   Compiling glifo v0.3.0
+   Compiling cipher v0.5.2
+   Compiling zip v3.0.0
+   Compiling sha1 v0.11.0
+   Compiling accesskit v0.24.1
+   Compiling wgpu-core v30.0.1
+   Compiling aho-corasick v1.1.5
+   Compiling quick-xml v0.41.0
+   Compiling wordcraft-metafile v0.9.0 (/mnt/storage/scratch/gyro-full-lock-measure-95ntu6t0/source/crates/metafile)
+   Compiling winnow v1.0.4
+   Compiling litrs v1.0.0
+   Compiling regex-syntax v0.8.11
+   Compiling cpubits v0.1.1
+   Compiling aes v0.9.3
+   Compiling document-features v0.2.12
+   Compiling toml_parser v1.1.3+spec-1.1.0
+   Compiling wgpu-core-deps-wasm v30.0.1
+   Compiling egui v0.36.2
+   Compiling vello_cpu v0.2.0
+   Compiling regex-automata v0.4.18
+   Compiling craft-pdf v0.1.0 (https://github.com/storytold/craft-libs?rev=c3487320b2d1de657b860b3c8abb44e1f2b32bd8#c3487320)
+   Compiling chardetng v1.0.0
+   Compiling toml_datetime v1.1.1+spec-1.1.0
+   Compiling serde_spanned v1.1.1
+   Compiling hmac v0.13.0
+   Compiling sha2 v0.11.0
+   Compiling wasm-bindgen-futures v0.4.79
+   Compiling wgpu v30.0.1
+   Compiling toml_writer v1.1.2+spec-1.1.0
+   Compiling zeroize v1.9.1
+   Compiling wordcraft-docx v0.9.0 (/mnt/storage/scratch/gyro-full-lock-measure-95ntu6t0/source/crates/docx)
+   Compiling toml v1.1.6+spec-1.1.0
+   Compiling regex v1.13.1
+   Compiling wordcraft-formats v0.9.0 (/mnt/storage/scratch/gyro-full-lock-measure-95ntu6t0/source/crates/formats)
+   Compiling wordcraft-pdf v0.9.0 (/mnt/storage/scratch/gyro-full-lock-measure-95ntu6t0/source/crates/pdf)
+   Compiling wordcraft-render v0.9.0 (/mnt/storage/scratch/gyro-full-lock-measure-95ntu6t0/source/crates/render)
+   Compiling wordcraft-docbin v0.9.0 (/mnt/storage/scratch/gyro-full-lock-measure-95ntu6t0/source/crates/docbin)
+   Compiling wordcraft-engine v0.9.0 (/mnt/storage/scratch/gyro-full-lock-measure-95ntu6t0/source/crates/engine)
+   Compiling wordcraft-ui-egui v0.9.0 (/mnt/storage/scratch/gyro-full-lock-measure-95ntu6t0/source/crates/ui-egui)
+   Compiling type-map v0.5.1
+   Compiling rfd v0.17.2
+   Compiling craft-ui v0.1.0 (https://github.com/storytold/craft-libs?rev=d27646a5f7c8b4fc85d9dd3213b8c88b58e0088d#d27646a5)
+   Compiling sys-locale v0.3.2
+   Compiling percent-encoding v2.3.2
+warning: function `by_author` is never used
+   --> crates/engine/src/cmd/citations.rs:534:4
+    |
+534 | fn by_author(x: &Source) -> &str {
+    |    ^^^^^^^^^
+    |
+    = note: `#[warn(dead_code)]` (part of `#[warn(unused)]`) on by default
+
+warning: function `primary_tag` is never used
+   --> crates/engine/src/speech.rs:252:4
+    |
+252 | fn primary_tag(tag: &str) -> Option<String> {
+    |    ^^^^^^^^^^^
+
+warning: function `voice_language` is never used
+   --> crates/engine/src/speech.rs:260:4
+    |
+260 | fn voice_language(lang: Option<&str>, default: &str) -> Option<String> {
+    |    ^^^^^^^^^^^^^^
+
+   Compiling egui-wgpu v0.36.2
+   Compiling wordcraft-zotero v0.9.0 (/mnt/storage/scratch/gyro-full-lock-measure-95ntu6t0/source/crates/zotero)
+   Compiling eframe v0.36.2
+warning: `wordcraft-engine` (lib) generated 3 warnings
+   Compiling wordcraft-web v0.9.0 (/mnt/storage/scratch/gyro-full-lock-measure-95ntu6t0/source/apps/wordcraft-web)
+    Finished `release` profile [optimized] target(s) in 3m 23s
+2026-10-24T06:16:16.271064Z  INFO applying new distribution
+2026-10-24T06:16:16.271692Z  INFO success
@@ -0,0 +1,105 @@
+{
+  "note": "read-only observation from full-lock scratch metadata, not a proposed/imported reduced vendor set; compiled normal/build closure remains exactly S0",
+  "count": 14,
+  "bytes": 14523104,
+  "packages": [
+    {
+      "name": "cursor-icon",
+      "version": "1.2.0",
+      "source": "registry+https://github.com/rust-lang/crates.io-index",
+      "files": 14,
+      "bytes": 44329
+    },
+    {
+      "name": "dpi",
+      "version": "0.1.2",
+      "source": "registry+https://github.com/rust-lang/crates.io-index",
+      "files": 11,
+      "bytes": 64188
+    },
+    {
+      "name": "futures-macro",
+      "version": "0.3.34",
+      "source": "registry+https://github.com/rust-lang/crates.io-index",
+      "files": 12,
+      "bytes": 41731
+    },
+    {
+      "name": "glifo",
+      "version": "0.2.0",
+      "source": "registry+https://github.com/rust-lang/crates.io-index",
+      "files": 20,
+      "bytes": 222068
+    },
+    {
+      "name": "ordered-float",
+      "version": "5.5.0",
+      "source": "registry+https://github.com/rust-lang/crates.io-index",
+      "files": 14,
+      "bytes": 179606
+    },
+    {
+      "name": "pin-project",
+      "version": "1.1.13",
+      "source": "registry+https://github.com/rust-lang/crates.io-index",
+      "files": 209,
+      "bytes": 476259
+    },
+    {
+      "name": "pin-project-internal",
+      "version": "1.1.13",
+      "source": "registry+https://github.com/rust-lang/crates.io-index",
+      "files": 15,
+      "bytes": 114911
+    },
+    {
+      "name": "smol_str",
+      "version": "0.2.2",
+      "source": "registry+https://github.com/rust-lang/crates.io-index",
+      "files": 14,
+      "bytes": 56395
+    },
+    {
+      "name": "spirv",
+      "version": "0.4.0+sdk-1.4.341.0",
+      "source": "registry+https://github.com/rust-lang/crates.io-index",
+      "files": 9,
+      "bytes": 257440
+    },
+    {
+      "name": "termcolor",
+      "version": "1.4.1",
+      "source": "registry+https://github.com/rust-lang/crates.io-index",
+      "files": 12,
+      "bytes": 92727
+    },
+    {
+      "name": "tracing",
+      "version": "0.1.44",
+      "source": "registry+https://github.com/rust-lang/crates.io-index",
+      "files": 94,
+      "bytes": 9827320
+    },
+    {
+      "name": "tracing-attributes",
+      "version": "0.1.31",
+      "source": "registry+https://github.com/rust-lang/crates.io-index",
+      "files": 31,
+      "bytes": 184696
+    },
+    {
+      "name": "tracing-core",
+      "version": "0.1.36",
+      "source": "registry+https://github.com/rust-lang/crates.io-index",
+      "files": 29,
+      "bytes": 257879
+    },
+    {
+      "name": "winit",
+      "version": "0.30.13",
+      "source": "registry+https://github.com/rust-lang/crates.io-index",
+      "files": 218,
+      "bytes": 2703555
+    }
+  ]
+}
@@ -0,0 +1,2 @@
+{"atUTC": "2026-10-24T06:10:11.225848+00:00", "processes": [{"pid": 1585414, "nice": 19, "cpus": [12, 13, 14, 15], "name": "trunk"}, {"pid": 1585433, "nice": 19, "cpus": [12, 13, 14, 15], "name": "cargo"}, {"pid": 1589366, "nice": 19, "cpus": [12, 13, 14, 15], "name": "rustc"}, {"pid": 1589563, "nice": 19, "cpus": [12, 13, 14, 15], "name": "rustc"}, {"pid": 1590336, "nice": 19, "cpus": [12, 13, 14, 15], "name": "rustc"}, {"pid": 1590472, "nice": 19, "cpus": [12, 13, 14, 15], "name": "rustc"}]}
+{"atUTC": "2026-10-24T06:13:38.818103+00:00", "processes": [{"pid": 1631174, "name": "wasm-opt", "nice": 19, "cpus": [12, 13, 14, 15], "threads": 5}]}
@@ -0,0 +1,12 @@
+command: cargo metadata --locked --offline --filter-platform wasm32-unknown-unknown --format-version 1
+exit: 101
+error: failed to select a version for the requirement `glifo = "^0.2.0"` (locked to 0.2.0)
+candidate versions found which didn't match: 0.3.0
+location searched: directory source `/mnt/storage/scratch/gyro-w2-resolution/cargo-vendor` (which is replacing registry `crates-io`)
+required by package `vello_cpu v0.1.0`
+    ... which satisfies dependency `vello_cpu = "^0.1.0"` (locked to 0.1.0) of package `epaint v0.36.2`
+    ... which satisfies dependency `epaint = "^0.36.2"` (locked to 0.36.2) of package `egui v0.36.2`
+    ... which satisfies dependency `egui = "^0.36"` (locked to 0.36.2) of package `wordcraft-web v0.9.0 (/mnt/storage/scratch/gyro-w2-resolution/source/apps/wordcraft-web)`
+note: perhaps a crate was updated and forgotten to be re-vendored?
+note: offline mode (via `--offline`) can sometimes cause surprising resolution failures
+help: if this error is too confusing you may wish to retry without `--offline`
@@ -0,0 +1,11 @@
+✔ WordCraft inputs have a verifiable offline source receipt (1793.67392ms)
+✔ input verifier refuses altered, missing and unrecorded files (1.797894ms)
+✔ included upstream subset equals the pinned protected git tree (51.472281ms)
+ℹ tests 3
+ℹ suites 0
+ℹ pass 3
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 1893.050007
@@ -0,0 +1,46 @@
+✖ WordCraft inputs have a verifiable offline source receipt (0.933599ms)
+✖ input verifier refuses altered, missing and unrecorded files (0.211521ms)
+ℹ tests 2
+ℹ suites 0
+ℹ pass 0
+ℹ fail 2
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 46.579384
+
+✖ failing tests:
+
+test at packages/webui/tests/wordcraft-provenance.test.mjs:9:1
+✖ WordCraft inputs have a verifiable offline source receipt (0.933599ms)
+  AssertionError [ERR_ASSERTION]: owned verifier must exist
+      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gyro-row310/packages/webui/tests/wordcraft-provenance.test.mjs:10:10)
+      at Test.runInAsyncScope (node:async_hooks:226:14)
+      at Test.run (node:internal/test_runner/test:1402:25)
+      at Test.start (node:internal/test_runner/test:1262:17)
+      at startSubtestAfterBootstrap (node:internal/test_runner/harness:387:17) {
+    generatedMessage: false,
+    code: 'ERR_ASSERTION',
+    actual: false,
+    expected: true,
+    operator: '==',
+    diff: 'simple'
+  }
+
+test at packages/webui/tests/wordcraft-provenance.test.mjs:18:1
+✖ input verifier refuses altered, missing and unrecorded files (0.211521ms)
+  AssertionError [ERR_ASSERTION]: owned verifier must exist
+      at TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gyro-row310/packages/webui/tests/wordcraft-provenance.test.mjs:19:10)
+      at Test.runInAsyncScope (node:async_hooks:226:14)
+      at Test.run (node:internal/test_runner/test:1402:25)
+      at Test.processPendingSubtests (node:internal/test_runner/test:974:18)
+      at Test.postRun (node:internal/test_runner/test:1542:19)
+      at Test.run (node:internal/test_runner/test:1467:12)
+      at async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3) {
+    generatedMessage: false,
+    code: 'ERR_ASSERTION',
+    actual: false,
+    expected: true,
+    operator: '==',
+    diff: 'simple'
+  }
@@ -0,0 +1,26 @@
+debug_assertions
+panic="abort"
+target_abi=""
+target_arch="wasm32"
+target_endian="little"
+target_env=""
+target_family="wasm"
+target_feature="bulk-memory"
+target_feature="multivalue"
+target_feature="mutable-globals"
+target_feature="nontrapping-fptoint"
+target_feature="reference-types"
+target_feature="sign-ext"
+target_has_atomic="16"
+target_has_atomic="32"
+target_has_atomic="64"
+target_has_atomic="8"
+target_has_atomic="ptr"
+target_has_atomic_primitive_alignment="16"
+target_has_atomic_primitive_alignment="32"
+target_has_atomic_primitive_alignment="64"
+target_has_atomic_primitive_alignment="8"
+target_has_atomic_primitive_alignment="ptr"
+target_os="unknown"
+target_pointer_width="32"
+target_vendor="unknown"
Author	SHA1	Message	Date
jason.woltje	1749728ca6	docs(gyro): record supplemental notice collection recheck	2026-10-24 01:45:35 -05:00
jason.woltje	9522d2356b	docs(gyro): record 223 release measurement and supplemental notices	2026-10-24 01:41:42 -05:00
jason.woltje	1716f5a22d	docs(gyro): measure row 310 223-package source and pruned lock	2026-10-24 01:29:58 -05:00
jason.woltje	d16958bcfd	docs: W brief D2 lets O2 rows build before 10-27 and land only on an idle slot, Opus 5.5 review once at landing (mos-1571); register Codex seats Glomgold (row 309, W1) and Gyro (row 310, W2); doc only	2026-10-24 00:26:11 -05:00
jason.woltje	48f1627be2	queue: revs 3789-3844 (sage briefs/reviewer moves 157/208/265, requests, notes and done for 208/326/265; goldie 265 and 326; poe 208; bentina 157 r1/r2; gladstone 208 approve; boyd 157 r1 changes, r2 approve, 265 approve; duckworth 208 approve; darkwing 157 r2 approve)	2026-10-24 00:19:05 -05:00
jason.woltje	17f056787f	docs: brief template, landed evidence is plain text with no gzip or binary waiver (mos-1570); doc only	2026-10-24 00:16:26 -05:00
jason.woltje	200dd396c4	feat(bus): add human project rooms with addressed sends (cherry picked from commit `ef4c938532`)	2026-10-23 23:57:31 -05:00
jason.woltje	537902d261	docs: DEFERRED closes ops-0282 B2-2 (row 326 landed) and carries row 208 N1, the 5 s user.js re-render; doc only	2026-10-23 23:56:43 -05:00
jason.woltje	f58049de02	duckworth: row 208 (193d) second review approve (static, guards) on `4a4bef6c1`, no bus change, every hidden control has a broker refusal, grant hint per-grant and self-only, N1 (duckworth-0302) (cherry picked from commit c36a0dc0d0a9f762bc74078dd53cce53df75642a)	2026-10-23 23:30:38 -05:00
jason.woltje	33f49f7d5a	docs(host): close five first-install run-sheet gaps (#1822 ) (cherry picked from commit `a1b13c60e1`)	2026-10-23 23:30:30 -05:00
				`@@ -0,0 +1 @@`
				`No changed-file mention has a literal 64-hex digest within eight lines.`
				`@@ -0,0 +1 @@`
				`No changed-product-file mention has a literal 64-hex digest within eight lines.`