kayg/infraternal
Watch
1
0
Fork
You've already forked infraternal
 0
Code Issues 356 Pull requests Projects Releases Packages Wiki Activity Actions

Reopening the app types terminal query answers into the shell (2RR1;10;0c) #160

New issue
Open
opened 2026-10-11 06:58:36 +00:00 by kayg · 148 comments
kayg commented 2026-10-11 06:58:36 +00:00
Owner
Copy link

Owner report (2026-10-11, iPhone PWA, production 1c08c4b7): every time the app is closed and reopened, more text like 2RR1;10;0c appears at the shell prompt of a monitor01 terminal (screenshots in the session: one repeat after the first reopen, three after more reopens).

These look like terminal answers to device queries (cursor position report ESC[…R, secondary device attributes ESC[>1;10;0c) being typed into the shell as input. Likely cause: on reattach the client replays the saved screen/scrollback, which still contains the original queries, and the client's terminal answers them again, sending the answers to the PTY. Each reopen adds one more.

Expected: replaying or restoring a screen never produces input. Only live output from the program may cause query answers, once.

Owner report (2026-10-11, iPhone PWA, production 1c08c4b7): every time the app is closed and reopened, more text like `2RR1;10;0c` appears at the shell prompt of a monitor01 terminal (screenshots in the session: one repeat after the first reopen, three after more reopens). These look like terminal answers to device queries (cursor position report `ESC[…R`, secondary device attributes `ESC[>1;10;0c`) being typed into the shell as input. Likely cause: on reattach the client replays the saved screen/scrollback, which still contains the original queries, and the client's terminal answers them again, sending the answers to the PTY. Each reopen adds one more. Expected: replaying or restoring a screen never produces input. Only live output from the program may cause query answers, once.
measure-controls.txt
2.4 KiB
reproduce.txt
1.6 KiB
real-perf-vm.log
312 B
red-terminal-query-viewers.log
3.7 KiB
late-query-browser.log
3.1 KiB
scanner-perf.log
683 B
scanner-perf-2.log
685 B
query-replies-real.png
51 KiB
browser-final.log
5 KiB
js-baseline.log
6.7 KiB
js-head.log
6.7 KiB
browser-perf-node.log
9.6 KiB
browser-perf-head.log
9.7 KiB
native-perf-baseline.log
1.4 KiB
native-perf-head.log
2.3 KiB
native-perf-repeat.log
2.3 KiB
native-perf-reverse.log
2.3 KiB
native-perf-untrimmed.log
1.2 KiB
query-replies-real-perf-vm.png
63 KiB
perf-cleanup-final.log
32 B
trim-final.log
17 KiB
size-ratchet.log
287 B
measurement-reproduction.txt
5.2 KiB
milestone.log
34 KiB
perf-cleanup-removed.log
109 B
final-fast-first.log
259 KiB
final-fast-second.log
279 KiB
final-fast-third.log
263 KiB
final-gate-reproduction.txt
2.6 KiB
final-fast.log
386 KiB
push.log
146 B
host-cleanup-audit.log
37 B
build-cleanup.log
903 B
renderer-review.log
2.2 KiB
property.log
2.8 KiB
order-contract.log
587 B
slices.log
12 KiB
renderer-checks.log
3.6 KiB
module-checks.log
4.4 KiB
lazy-collector-checks.log
3.6 KiB
browser-functional-vm.log
3 KiB
browser-perf.log
9.8 KiB
browser-perf-first-pairs.log
4.2 KiB
browser-perf-initial.log
2.2 KiB
browser-scoped-vm.log
32 KiB
control-cost-scoped.log
2.2 KiB
native-perf.log
32 KiB
measure-typing-scale.txt
4.1 KiB
query-replies-real.png
28 KiB
short-fixture-check.log
289 B
real-and-iterate-final-2.log
210 KiB
artifact-provenance.txt
847 B
performance-reproduction.txt
18 KiB
perf-cleanup-final.log
842 B
verify-fast-final.log
394 KiB
native-and-js-sizes.txt
1.2 KiB
author-review.txt
2.1 KiB
gate-driver.txt
966 B
test-runner.txt
406 B
private-fixture.txt
436 B
pushed-refs.txt
135 B
build-host-cleanup.txt
163 B
local-scratch-cleanup.txt
944 B
restart-fixture-check.log
815 B
failed-gate-cleanup.txt
98 B
renderer-review.log
550 B
head-size.txt
595 B
native-queries.log
1.9 KiB
real-review.log
781 B
focused.log
31 KiB
order-unit.log
1.2 KiB
order-batch.log
3.4 KiB
query-replies-real.png
28 KiB
comparison.log
19 KiB
size-comparison.txt
819 B
restart-canonical.log
206 B
final-size.txt
1.2 KiB
verify-fast.log
196 KiB
socket-namespace.log
202 B
cli-socket-namespace.log
178 B
verify-fast-final.log
162 KiB
restart-public-permissions.log
203 B
verify-fast-checked.log
165 KiB
cli-environment.log
178 B
verify-fast-complete.log
173 KiB
askpass-short-root.log
187 B
verify-fast-verified.log
256 KiB
native-preflight.log
200 KiB
inode-isolated.log
189 B
mouse-zig-path.log
181 B
renderer-final.log
4.4 KiB
ts-final.log
36 KiB
cleanup.json
365 B
reviewer-checklist.txt
1.9 KiB
findings.md
6.8 KiB
run-final.py.txt
1.1 KiB
test-runner.sh.txt
1.4 KiB
socket-test-ns.sh.txt
414 B
query-replies-real.png query-replies-real-perf-vm.png query-replies-real.png query-replies-real.png
kayg commented 2026-10-11 07:02:18 +00:00
Author
Owner
Copy link

Starting #160 on branch terminal-fidelity, based on prod-batch at ebcc73a0ec.

Starting #160 on branch terminal-fidelity, based on prod-batch at ebcc73a0ec22f8498a0466b2d8641ac569f87e77.
kayg commented 2026-10-11 07:10:07 +00:00
Author
Owner
Copy link

Finding: a reload restores the saved session with lastOutSeq=0 (apps/tracer/src/terminal.ts), the agent asks the shim for ReadFrom(0) (crates/infraternal-agent/src/daemon.rs), and retained PTY bytes are replayed as raw Output while the ring still covers them (crates/infraternal-shim/src/session.rs, contracts/shim.md §4). Ghostty's Terminal.writeInternal parses each write and synchronously emits every pending VT reply through onData; the tracer sends that event as PTY input (apps/tracer/vendor/ghostty-web/dist/ghostty-web.js, apps/tracer/src/terminal.ts). Thus a reload replays old queries as indistinguishable Output and answers them again.

Proposed additive contract: the shim emits an ordered ReplayComplete cursor after the bytes retained when ReadFrom is requested; the agent forwards it as a terminal.replay_complete event. The browser suppresses VT replies while writing replayed Output and while applying any Snapshot, then enables replies for live Output after the fence. This covers all renderer response types without query-specific filtering and keeps raw replay for fidelity.

Finding: a reload restores the saved session with `lastOutSeq=0` (`apps/tracer/src/terminal.ts`), the agent asks the shim for `ReadFrom(0)` (`crates/infraternal-agent/src/daemon.rs`), and retained PTY bytes are replayed as raw `Output` while the ring still covers them (`crates/infraternal-shim/src/session.rs`, `contracts/shim.md` §4). Ghostty's `Terminal.writeInternal` parses each write and synchronously emits every pending VT reply through `onData`; the tracer sends that event as PTY input (`apps/tracer/vendor/ghostty-web/dist/ghostty-web.js`, `apps/tracer/src/terminal.ts`). Thus a reload replays old queries as indistinguishable Output and answers them again. Proposed additive contract: the shim emits an ordered ReplayComplete cursor after the bytes retained when ReadFrom is requested; the agent forwards it as a `terminal.replay_complete` event. The browser suppresses VT replies while writing replayed Output and while applying any Snapshot, then enables replies for live Output after the fence. This covers all renderer response types without query-specific filtering and keeps raw replay for fidelity.
kayg commented 2026-10-11 07:17:26 +00:00
Author
Owner
Copy link

Design refinement before code: the existing shim Hello already gives the agent head_seq for each attachment. I will use that captured cursor as the replay fence, split any Output frame that crosses it, and emit an ordered terminal.replay_complete event on the existing wire Event frame. This avoids changing the frozen shim v1 protocol or requiring a new shim capability; Snapshot writes remain independently response-suppressed. The browser will enable replies after that fence only when restoring an existing session, while a freshly opened shell still answers its initial live output.

Design refinement before code: the existing shim Hello already gives the agent `head_seq` for each attachment. I will use that captured cursor as the replay fence, split any Output frame that crosses it, and emit an ordered `terminal.replay_complete` event on the existing wire Event frame. This avoids changing the frozen shim v1 protocol or requiring a new shim capability; Snapshot writes remain independently response-suppressed. The browser will enable replies after that fence only when restoring an existing session, while a freshly opened shell still answers its initial live output.
kayg commented 2026-10-11 07:51:05 +00:00
Author
Owner
Copy link

Production-build browser regression is red on the current path. The query fixture covers DA1/DA2, DSR/CPR, DECRQM, XTVERSION, OSC 10/11/12/4, DECRQSS and window-size query. One live pass delivered 59 input bytes; after a transport detach/reattach the shell accepted 89 (+30 replayed reply bytes). Raw fixture and echoed-input evidence are in $HOME/.cache/codex-scratch/terminal-fidelity/query-fixture.bin and query-live-input-echo.bin; the test output is captured in red-160-backend5911.log.

Production-build browser regression is red on the current path. The query fixture covers DA1/DA2, DSR/CPR, DECRQM, XTVERSION, OSC 10/11/12/4, DECRQSS and window-size query. One live pass delivered 59 input bytes; after a transport detach/reattach the shell accepted 89 (+30 replayed reply bytes). Raw fixture and echoed-input evidence are in `$HOME/.cache/codex-scratch/terminal-fidelity/query-fixture.bin` and `query-live-input-echo.bin`; the test output is captured in `red-160-backend5911.log`.
kayg commented 2026-10-11 09:07:00 +00:00
Author
Owner
Copy link

Production-build browser reproduction (TRACER_TEST_PORT=5802): temporarily disabling replay response suppression made terminal-query-replay.spec.ts fail after reload 2, with accepted input increasing 29 -> 87 bytes (29 extra bytes per replay). The test asserts each reload attaches at out_seq 0 and replays the 69-byte query fixture. Raw fixture and live reply stream are in $HOME/.cache/codex-scratch/terminal-fidelity/query-fixture.bin and query-live-input.bin. Path: saved tab session id -> initialSessionId -> AttachTerm(last_out_seq=0) -> agent ReadFrom replay -> Ghostty Terminal.write -> parser replies forwarded by the shared onData input handler.

Production-build browser reproduction (TRACER_TEST_PORT=5802): temporarily disabling replay response suppression made `terminal-query-replay.spec.ts` fail after reload 2, with accepted input increasing 29 -> 87 bytes (29 extra bytes per replay). The test asserts each reload attaches at out_seq 0 and replays the 69-byte query fixture. Raw fixture and live reply stream are in `$HOME/.cache/codex-scratch/terminal-fidelity/query-fixture.bin` and `query-live-input.bin`. Path: saved tab session id -> `initialSessionId` -> `AttachTerm(last_out_seq=0)` -> agent `ReadFrom` replay -> Ghostty `Terminal.write` -> parser replies forwarded by the shared `onData` input handler.
kayg commented 2026-10-11 09:19:50 +00:00
Author
Owner
Copy link

Client slice committed and pushed: bdd60b50. It gates Ghostty write-time replies during replay/Snapshot restoration and tests repeated reloads against the production build. Checks: bun run check passed; bun test src passed (142 pass, 0 fail, 10,901 assertions); browser spec passed (2/2). Transfer budget passed unchanged: critical JS gzip 290,590/307,200 B and brotli 241,555/256,000 B; deferred gzip 50,729/51,200 B and brotli 44,763/45,056 B; largest on-demand chunk gzip 14,999/20,480 B and brotli 13,330/18,432 B. Nerd symbols remain 223,748/235,520 B.

Client slice committed and pushed: bdd60b50. It gates Ghostty write-time replies during replay/Snapshot restoration and tests repeated reloads against the production build. Checks: `bun run check` passed; `bun test src` passed (142 pass, 0 fail, 10,901 assertions); browser spec passed (2/2). Transfer budget passed unchanged: critical JS gzip 290,590/307,200 B and brotli 241,555/256,000 B; deferred gzip 50,729/51,200 B and brotli 44,763/45,056 B; largest on-demand chunk gzip 14,999/20,480 B and brotli 13,330/18,432 B. Nerd symbols remain 223,748/235,520 B.
kayg commented 2026-10-11 09:40:15 +00:00
Author
Owner
Copy link

Agent fence slice committed and pushed: c4d42d6e. Each shim link captures Hello.head; Output frames crossing it are split and the ordered terminal.replay_complete Event precedes newer bytes. Snapshot repaint completion advances to its sequence. Rust checks passed: replay_prefix_stops_at_the_shim_hello_head and replay_complete_preserves_the_full_output_cursor_as_decimal (1/1 each, scratch target). No shim v1 frame or capability changed.

Agent fence slice committed and pushed: c4d42d6e. Each shim link captures Hello.head; Output frames crossing it are split and the ordered `terminal.replay_complete` Event precedes newer bytes. Snapshot repaint completion advances to its sequence. Rust checks passed: `replay_prefix_stops_at_the_shim_hello_head` and `replay_complete_preserves_the_full_output_cursor_as_decimal` (1/1 each, scratch target). No shim v1 frame or capability changed.
kayg commented 2026-10-11 09:43:43 +00:00
Author
Owner
Copy link

Expanded VT replay query coverage committed and pushed: 696074d1. The production-build spec passed 2/2 with DA1/DA2/DA3, DSR/CPR, DECRQM, XTVERSION, OSC 10/11/12/4 (two palette indexes), DECRQSS, XTGETTCAP, and CSI window/cell dimension requests. Three full page reloads replay the 69-byte fixture from out_seq 0 without increasing accepted PTY input; Snapshot repaint also adds zero input.

Expanded VT replay query coverage committed and pushed: 696074d1. The production-build spec passed 2/2 with DA1/DA2/DA3, DSR/CPR, DECRQM, XTVERSION, OSC 10/11/12/4 (two palette indexes), DECRQSS, XTGETTCAP, and CSI window/cell dimension requests. Three full page reloads replay the 69-byte fixture from out_seq 0 without increasing accepted PTY input; Snapshot repaint also adds zero input.
kayg commented 2026-10-11 09:45:40 +00:00
Author
Owner
Copy link

Wire contract update committed and pushed: bebc280a. contracts/wire.md now records the additive replay_complete Event and the exact Snapshot fence rule; the frozen shim v1 wire format remains unchanged.

Wire contract update committed and pushed: bebc280a. `contracts/wire.md` now records the additive replay_complete Event and the exact Snapshot fence rule; the frozen shim v1 wire format remains unchanged.
kayg commented 2026-10-11 09:49:42 +00:00
Author
Owner
Copy link

#160 browser checks completed at bebc280a: terminal-query-replay.spec.ts passed 2/2 with the expanded query fixture and three reloads; dead-session.spec.ts passed 4/4 against the production build. Earlier client gates remain green: tracer check, 142 bun test src tests/0 failures, and D188 transfer budget within existing limits.

#160 browser checks completed at bebc280a: `terminal-query-replay.spec.ts` passed 2/2 with the expanded query fixture and three reloads; `dead-session.spec.ts` passed 4/4 against the production build. Earlier client gates remain green: tracer check, 142 `bun test src` tests/0 failures, and D188 transfer budget within existing limits.
kayg commented 2026-10-11 12:05:02 +00:00
Author
Owner
Copy link

Agent-daemon oracle now waits for terminal.exited after the attach replay marker; clearing earlier events would hide the protocol ordering. Commit a79ff148 pushed. Targeted real-binary gate: 1 passed, 0 failed; 24 abrupt-stop/restart iterations completed in 41.86 s.

Agent-daemon oracle now waits for `terminal.exited` after the attach replay marker; clearing earlier events would hide the protocol ordering. Commit `a79ff148` pushed. Targeted real-binary gate: 1 passed, 0 failed; 24 abrupt-stop/restart iterations completed in 41.86 s.
kayg commented 2026-10-11 12:29:22 +00:00
Author
Owner
Copy link

The final fast run exposed a second fixture assumption from the replay fence: agent_queues expected only stream-close frames while a reattached stream delivered the expected Event frame (kind=0x33, terminal.replay_complete, stream 10). I’m updating the oracle to validate and skip only that replay marker; all other queue/output assertions remain active. Evidence is in the final gate log under the terminal-fidelity scratch directory.

The final fast run exposed a second fixture assumption from the replay fence: `agent_queues` expected only stream-close frames while a reattached stream delivered the expected Event frame (`kind=0x33`, `terminal.replay_complete`, stream 10). I’m updating the oracle to validate and skip only that replay marker; all other queue/output assertions remain active. Evidence is in the final gate log under the terminal-fidelity scratch directory.
kayg commented 2026-10-11 12:49:42 +00:00
Author
Owner
Copy link

Queue saturation oracle now validates and skips only session-matched terminal.replay_complete frames while preserving Ack, Output, close and Ping assertions. Commit 31241462 pushed. Targeted real-binary gate: 1 passed, 0 failed; 12 streams, 65 replay batches, exact payload preservation, dead-shim isolation and Ping all passed in 38.26 s.

Queue saturation oracle now validates and skips only session-matched `terminal.replay_complete` frames while preserving Ack, Output, close and Ping assertions. Commit `31241462` pushed. Targeted real-binary gate: 1 passed, 0 failed; 12 streams, 65 replay batches, exact payload preservation, dead-shim isolation and Ping all passed in 38.26 s.
kayg commented 2026-10-11 13:43:53 +00:00
Author
Owner
Copy link

Real-binary lifecycle fixtures now wait specifically for terminal.exited after the attach replay marker; queue, status and output assertions remain active. Commit 53151cec pushed. Targeted results: agent-daemon 1/1 (24 restart iterations, 41.30 s), session-retention 1/1 (1.86 s), detached final-exit recovery 1/1 (1.23 s), and session-count lifecycle 1/1 (6.56 s).

Real-binary lifecycle fixtures now wait specifically for `terminal.exited` after the attach replay marker; queue, status and output assertions remain active. Commit `53151cec` pushed. Targeted results: agent-daemon 1/1 (24 restart iterations, 41.30 s), session-retention 1/1 (1.86 s), detached final-exit recovery 1/1 (1.23 s), and session-count lifecycle 1/1 (6.56 s).
kayg commented 2026-10-11 13:55:48 +00:00
Author
Owner
Copy link

The final full gate exposed three more raw-frame oracles that reject the new ordered attach marker: verify-agent-writer-size.py and verify-agent-multi.py rejected Event kind 0x33; verify-agent-isolation.py received terminal.replay_complete on stream 3 while waiting for InputAck. I’m adding one shared validator that skips only session-matched replay markers and applying it to these readers. The attach-credit fixture also used a worktree target/ path that is absent when CARGO_TARGET_DIR is in the required scratch location; I’m moving that fixture state to the shared scratch helper.

The final full gate exposed three more raw-frame oracles that reject the new ordered attach marker: `verify-agent-writer-size.py` and `verify-agent-multi.py` rejected Event kind 0x33; `verify-agent-isolation.py` received `terminal.replay_complete` on stream 3 while waiting for InputAck. I’m adding one shared validator that skips only session-matched replay markers and applying it to these readers. The attach-credit fixture also used a worktree `target/` path that is absent when CARGO_TARGET_DIR is in the required scratch location; I’m moving that fixture state to the shared scratch helper.
kayg commented 2026-10-11 14:04:50 +00:00
Author
Owner
Copy link

Committed and pushed b896bc29: raw protocol readers now validate and skip only session-matched terminal.replay_complete markers; attach-credit fixture state follows the configured scratch root. Evidence: agent_review 8/8 passed in 41.55 s; agent_queues 1/1 passed in 37.08 s.

Committed and pushed b896bc29: raw protocol readers now validate and skip only session-matched terminal.replay_complete markers; attach-credit fixture state follows the configured scratch root. Evidence: agent_review 8/8 passed in 41.55 s; agent_queues 1/1 passed in 37.08 s.
kayg commented 2026-10-11 14:10:32 +00:00
Author
Owner
Copy link

Finding: the required fast gate stores Cargo artifacts outside the worktree, but crates/infraternal/tests/agent_sessions.rs:68 hard-codes ../../target. Reproduced with CARGO_TARGET_DIR=$HOME/.cache/codex-scratch/terminal-fidelity/target: cargo test -p infraternal --test agent_sessions failed immediately at line 69 with ENOENT. The test fixture path must follow Cargo’s configured target root.

Finding: the required fast gate stores Cargo artifacts outside the worktree, but `crates/infraternal/tests/agent_sessions.rs:68` hard-codes `../../target`. Reproduced with `CARGO_TARGET_DIR=$HOME/.cache/codex-scratch/terminal-fidelity/target`: `cargo test -p infraternal --test agent_sessions` failed immediately at line 69 with ENOENT. The test fixture path must follow Cargo’s configured target root.
kayg commented 2026-10-11 14:20:01 +00:00
Author
Owner
Copy link

Committed and pushed 15da0c0d: the detached-session fixture now uses INFRATERNAL_TEST_STATE_ROOT, preserving the AF_UNIX path bound when Cargo targets live in scratch. Red: targeted agent_sessions failed with ENOENT at line 69 under the relocated target. Green: targeted agent_sessions 1/1 passed in 0.25 s with the short fixture root; cargo fmt --all --check and git diff --check passed.

Committed and pushed 15da0c0d: the detached-session fixture now uses INFRATERNAL_TEST_STATE_ROOT, preserving the AF_UNIX path bound when Cargo targets live in scratch. Red: targeted agent_sessions failed with ENOENT at line 69 under the relocated target. Green: targeted agent_sessions 1/1 passed in 0.25 s with the short fixture root; cargo fmt --all --check and git diff --check passed.
kayg commented 2026-10-11 14:26:37 +00:00
Author
Owner
Copy link

Follow-up gate finding: commit 15da0c0d passed agent_sessions but full fast Clippy rejected map_unwrap_or in its fallback; replaced with map_or_else in 67642792. fmt --check and workspace Clippy now pass. The same fast run also had vt_credit fail with credit probe failed: t1-gate-approximate-1 at load start 38.28/40.03/32.74, end 21.12/32.77/31.01. I will compare the detached dev baseline if that test fails again after the lint fix.

Follow-up gate finding: commit 15da0c0d passed agent_sessions but full fast Clippy rejected map_unwrap_or in its fallback; replaced with map_or_else in 67642792. fmt --check and workspace Clippy now pass. The same fast run also had vt_credit fail with `credit probe failed: t1-gate-approximate-1` at load start 38.28/40.03/32.74, end 21.12/32.77/31.01. I will compare the detached dev baseline if that test fails again after the lint fix.
kayg commented 2026-10-11 14:37:26 +00:00
Author
Owner
Copy link

Fast gate at HEAD 67642792 passed fmt, VT native fmt, Clippy, cargo-deny, and all tests except vt_credit; that test failed twice in full-suite runs at credit probe failed: t1-gate-approximate-1 (4.74 s) with load start 30.83/29.80/29.77 and end 24.55/28.28/29.25. Following the #118 gate rule, I am comparing the detached dev baseline under the same weighted test scope. Static size remains the known D188 overrun.

Fast gate at HEAD 67642792 passed fmt, VT native fmt, Clippy, cargo-deny, and all tests except vt_credit; that test failed twice in full-suite runs at `credit probe failed: t1-gate-approximate-1` (4.74 s) with load start 30.83/29.80/29.77 and end 24.55/28.28/29.25. Following the #118 gate rule, I am comparing the detached dev baseline under the same weighted test scope. Static size remains the known D188 overrun.
kayg commented 2026-10-11 14:53:20 +00:00
Author
Owner
Copy link

Root cause of the vt_credit failure: its real-binary fixture treated every 0x33 Event as an application notice. The first approximate-credit case receives terminal.replay_complete on reattach, then fails no approximation is announced before forwarding; the saved stderr confirms this assertion. A detached dev run passed 1/1 in 22.66 s. A shared Cargo target mixed checkout artifacts, so I am rerunning the comparison with separate targets in one weighted scope before the fix.

Root cause of the vt_credit failure: its real-binary fixture treated every 0x33 Event as an application notice. The first approximate-credit case receives terminal.replay_complete on reattach, then fails `no approximation is announced before forwarding`; the saved stderr confirms this assertion. A detached dev run passed 1/1 in 22.66 s. A shared Cargo target mixed checkout artifacts, so I am rerunning the comparison with separate targets in one weighted scope before the fix.
kayg commented 2026-10-11 15:20:00 +00:00
Author
Owner
Copy link

Committed and pushed 30011d95. The shared real-binary fixture now validates replay-complete session/cursor metadata and omits that metadata from user-event observations; vt_credit evidence follows CARGO_TARGET_DIR. Red: before the fix, the first approximate-credit case failed no approximation is announced before forwarding because the marker was counted as an event. In one CPU-weighted scope, fixed branch passed vt_credit 1/1 in 22.51 s and detached dev ded3abd6 passed 1/1 in 23.69 s. All four branch probe modes passed; their 2 MiB producers completed in 340–386 ms.

Committed and pushed 30011d95. The shared real-binary fixture now validates replay-complete session/cursor metadata and omits that metadata from user-event observations; vt_credit evidence follows CARGO_TARGET_DIR. Red: before the fix, the first approximate-credit case failed `no approximation is announced before forwarding` because the marker was counted as an event. In one CPU-weighted scope, fixed branch passed vt_credit 1/1 in 22.51 s and detached dev ded3abd6 passed 1/1 in 23.69 s. All four branch probe modes passed; their 2 MiB producers completed in 340–386 ms.
kayg commented 2026-10-11 15:29:50 +00:00
Author
Owner
Copy link

The final fast rerun after the replay-marker fix passed fmt, VT native fmt, Clippy and cargo-deny, but agent_review failed 5/8: five concurrent terminal.open calls received resource_unavailable; the other three passed. Load was 15.40/30.70/28.90 at start and 18.42/26.32/27.68 at end. This is outside the permitted host-load baseline exceptions, so I am rerunning the agent_review suite and investigating the concurrent launch refusals. Static binary size remains the known D188 overrun.

The final fast rerun after the replay-marker fix passed fmt, VT native fmt, Clippy and cargo-deny, but agent_review failed 5/8: five concurrent terminal.open calls received resource_unavailable; the other three passed. Load was 15.40/30.70/28.90 at start and 18.42/26.32/27.68 at end. This is outside the permitted host-load baseline exceptions, so I am rerunning the agent_review suite and investigating the concurrent launch refusals. Static binary size remains the known D188 overrun.
kayg commented 2026-10-11 15:34:23 +00:00
Author
Owner
Copy link

Update: the isolated agent_review suite passed 8/8 in 23.29 s after the full run. The host showed 95.88% CPU pressure over 10 s when five concurrent opens were refused. I am rerunning the full gate with RUST_TEST_THREADS=4 to reduce test contention; no tests are skipped.

Update: the isolated agent_review suite passed 8/8 in 23.29 s after the full run. The host showed 95.88% CPU pressure over 10 s when five concurrent opens were refused. I am rerunning the full gate with RUST_TEST_THREADS=4 to reduce test contention; no tests are skipped.
kayg commented 2026-10-11 15:48:58 +00:00
Author
Owner
Copy link

Fast-gate step at 30011d951a: fmt, VT native fmt, Clippy, workspace tests, and cargo-deny pass with RUST_TEST_THREADS=4. Static build remains above the unchanged D188 cap at 20,084,464 / 16,404,816 bytes. Full summary will be included in the finish comment after tracer/browser gates.

Fast-gate step at 30011d951a1fca5da4aa708d14b0e27bb7daf8b8: fmt, VT native fmt, Clippy, workspace tests, and cargo-deny pass with RUST_TEST_THREADS=4. Static build remains above the unchanged D188 cap at 20,084,464 / 16,404,816 bytes. Full summary will be included in the finish comment after tracer/browser gates.
kayg commented 2026-10-11 16:00:06 +00:00
Author
Owner
Copy link

Finished at HEAD 30011d951a on branch terminal-fidelity; all commits are pushed. Issue remains open.

  • Existing-session restores now suppress terminal parser replies during renderer writes. The server's session/cursor replay fence is validated, and responses resume only after the fenced bytes have painted.
  • The production tracer build browser spec passed 2/2 on port 5801. It exercised DA1/DA2/DA3, DSR/CPR, DECRQM, XTVERSION, OSC color, DECRQSS, XTGETTCAP, and window-size queries; transport reattach and three reloads added no input bytes, and Snapshot repaint added none.
  • dead-session.spec.ts passed 4/4 on port 5802.
  • The real-binary vt_credit oracle now treats terminal.replay_complete as validated metadata. Fixed branch and detached dev baseline passed 1/1 in the same weighted scope; all four credit modes completed their 2 MiB producer in 340–386 ms.
  • Production locale captures: apps/tracer/captures/terminal-locale/tmux-before-1440x900.png and apps/tracer/captures/terminal-locale/tmux-after-1440x900.png.

The fast gate ran with RUST_TEST_THREADS=4 under host contention. Its Rust test row passed; the only failing row is the known static size overrun, with the D188 budget unchanged. Fast-gate summary, verbatim:

METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=301.59 p99_ms=311.25 result=PASS
binary exceeds the 16404816-byte size budget: 20084464 bytes
+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+
FAST_RUN exit=1 elapsed_s=735.0 load_start=35.56/36.44/32.40 load_end=23.92/30.70/32.30 log=/home/kayg/.cache/codex-scratch/terminal-fidelity/verify-fast.log
Finished at HEAD 30011d951a1fca5da4aa708d14b0e27bb7daf8b8 on branch terminal-fidelity; all commits are pushed. Issue remains open. - Existing-session restores now suppress terminal parser replies during renderer writes. The server's session/cursor replay fence is validated, and responses resume only after the fenced bytes have painted. - The production tracer build browser spec passed 2/2 on port 5801. It exercised DA1/DA2/DA3, DSR/CPR, DECRQM, XTVERSION, OSC color, DECRQSS, XTGETTCAP, and window-size queries; transport reattach and three reloads added no input bytes, and Snapshot repaint added none. - `dead-session.spec.ts` passed 4/4 on port 5802. - The real-binary `vt_credit` oracle now treats `terminal.replay_complete` as validated metadata. Fixed branch and detached dev baseline passed 1/1 in the same weighted scope; all four credit modes completed their 2 MiB producer in 340–386 ms. - Production locale captures: `apps/tracer/captures/terminal-locale/tmux-before-1440x900.png` and `apps/tracer/captures/terminal-locale/tmux-after-1440x900.png`. The fast gate ran with `RUST_TEST_THREADS=4` under host contention. Its Rust test row passed; the only failing row is the known static size overrun, with the D188 budget unchanged. Fast-gate summary, verbatim: ```text METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=301.59 p99_ms=311.25 result=PASS binary exceeds the 16404816-byte size budget: 20084464 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ FAST_RUN exit=1 elapsed_s=735.0 load_start=35.56/36.44/32.40 load_end=23.92/30.70/32.30 log=/home/kayg/.cache/codex-scratch/terminal-fidelity/verify-fast.log ```
kayg commented 2026-10-11 16:10:44 +00:00
Author
Owner
Copy link

Independent verification started on branch review-terminal-fidelity, based on merge base ebcc73a0ec22f8498a0466b2d8641ac569f87e77 (dev); reviewing target head 30011d951a1fca5da4aa708d14b0e27bb7daf8b8.

Independent verification started on branch `review-terminal-fidelity`, based on merge base `ebcc73a0ec22f8498a0466b2d8641ac569f87e77` (`dev`); reviewing target head `30011d951a1fca5da4aa708d14b0e27bb7daf8b8`.
kayg commented 2026-10-11 16:23:12 +00:00
Author
Owner
Copy link

Independent review step: production tracer query replay regression reran on review head 30011d951a1fca5da4aa708d14b0e27bb7daf8b8 (port 4360): 2/2 passed in 37.6 s, covering repeated reload replay and Snapshot suppression. No confirmed findings yet.

Independent review step: production tracer query replay regression reran on review head `30011d951a1fca5da4aa708d14b0e27bb7daf8b8` (port 4360): 2/2 passed in 37.6 s, covering repeated reload replay and Snapshot suppression. No confirmed findings yet.
kayg commented 2026-10-11 17:24:15 +00:00
Author
Owner
Copy link

P1 finding TF-001 confirmed on review head 30011d951a. The agent emits terminal.replay_complete on attach (crates/infraternal-agent/src/daemon.rs:672), but the server's strict TerminalNotice in crates/infraternal-server/src/embedded.rs:1097 rejects the unknown variant. process_incoming returns false, and the actor calls connection_lost at lines 656–660, dropping the embedded agent link.

Failing test: embedded::regressions::replay_complete_notice_is_accepted_by_embedded_server; it reports unknown variant terminal.replay_complete, expected one of terminal.snapshot, terminal.snapshot_unavailable, terminal.exited. Test committed on local review-terminal-fidelity as ae7b4314d6437e7cdfe05e2f84be53f885b03965.

P1 finding TF-001 confirmed on review head 30011d951a1fca5da4aa708d14b0e27bb7daf8b8. The agent emits `terminal.replay_complete` on attach (`crates/infraternal-agent/src/daemon.rs:672`), but the server's strict `TerminalNotice` in `crates/infraternal-server/src/embedded.rs:1097` rejects the unknown variant. `process_incoming` returns false, and the actor calls `connection_lost` at lines 656–660, dropping the embedded agent link. Failing test: `embedded::regressions::replay_complete_notice_is_accepted_by_embedded_server`; it reports `unknown variant terminal.replay_complete, expected one of terminal.snapshot, terminal.snapshot_unavailable, terminal.exited`. Test committed on local `review-terminal-fidelity` as `ae7b4314d6437e7cdfe05e2f84be53f885b03965`.
kayg commented 2026-10-11 17:26:46 +00:00
Author
Owner
Copy link

P2 finding TF-002 confirmed. In scripts/agent_fixture.py:372-382, Binary.fence() reads frames until Pong but places self.process(...) after an unconditional return, so every preceding non-Pong frame is discarded. The Rust regression daemon::readiness_tests::fixture_fence_processes_messages_before_the_control_pong failed: its Output frame was not processed. Test committed on local review-terminal-fidelity as 1a1aa27feb02370b7e10dccebe8dbeeef2c4963b.

P2 finding TF-002 confirmed. In `scripts/agent_fixture.py:372-382`, `Binary.fence()` reads frames until Pong but places `self.process(...)` after an unconditional return, so every preceding non-Pong frame is discarded. The Rust regression `daemon::readiness_tests::fixture_fence_processes_messages_before_the_control_pong` failed: its Output frame was not processed. Test committed on local `review-terminal-fidelity` as `1a1aa27feb02370b7e10dccebe8dbeeef2c4963b`.
kayg commented 2026-10-11 22:54:08 +00:00
Author
Owner
Copy link

Independent verification complete.

Verdict: HOLD — do not merge (P0/P1 present). Counts: P0=0, P1=1, P2=1, P3=0.
Target: 30011d951a; merge base: ebcc73a0ec. Local review branch head: 1a1aa27feb.

TF-001 P1: terminal.replay_complete is emitted on attach but rejected by the embedded server’s strict notice decoder; committed failing test embedded::regressions::replay_complete_notice_is_accepted_by_embedded_server.
TF-002 P2: Binary.fence drops non-Pong frames before its control Pong; committed failing test daemon::readiness_tests::fixture_fence_processes_messages_before_the_control_pong.

scripts/verify fast output on target head (verbatim):

METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=342.50 p99_ms=344.10 result=PASS
binary exceeds the 16404816-byte size budget: 20084432 bytes
+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | FAIL (101)   |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

The latency gate exited 1 (413 passed, 73 failed, 38 skipped). Native latency budgets also failed on merge base and head under variable host load; the 50 MB throughput delta was not reproducible (full head run -5.25%, merge base +1.29%, head rerun +5.21%). The 2 MiB VT credit probe passed all four modes at 358.2–465.5 ms.

Static binary size was 20,064,880 bytes on merge base and 20,084,432 bytes on head (+19,552 bytes, no dependency additions); the gate’s fixed older baseline is already below the current merge-base binary.

Evidence logs and detailed finding entries are in /home/kayg/.cache/codex-scratch/terminal-fidelity-review/ and /home/kayg/.local/state/codex-jobs/infraternal/review-terminal-fidelity/findings.md.

Independent verification complete. Verdict: HOLD — do not merge (P0/P1 present). Counts: P0=0, P1=1, P2=1, P3=0. Target: 30011d951a1fca5da4aa708d14b0e27bb7daf8b8; merge base: ebcc73a0ec22f8498a0466b2d8641ac569f87e77. Local review branch head: 1a1aa27feb02370b7e10dccebe8dbeeef2c4963b. TF-001 P1: `terminal.replay_complete` is emitted on attach but rejected by the embedded server’s strict notice decoder; committed failing test `embedded::regressions::replay_complete_notice_is_accepted_by_embedded_server`. TF-002 P2: `Binary.fence` drops non-Pong frames before its control Pong; committed failing test `daemon::readiness_tests::fixture_fence_processes_messages_before_the_control_pong`. `scripts/verify fast` output on target head (verbatim): ```text METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=342.50 p99_ms=344.10 result=PASS binary exceeds the 16404816-byte size budget: 20084432 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | FAIL (101) | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ``` The latency gate exited 1 (413 passed, 73 failed, 38 skipped). Native latency budgets also failed on merge base and head under variable host load; the 50 MB throughput delta was not reproducible (full head run -5.25%, merge base +1.29%, head rerun +5.21%). The 2 MiB VT credit probe passed all four modes at 358.2–465.5 ms. Static binary size was 20,064,880 bytes on merge base and 20,084,432 bytes on head (+19,552 bytes, no dependency additions); the gate’s fixed older baseline is already below the current merge-base binary. Evidence logs and detailed finding entries are in `/home/kayg/.cache/codex-scratch/terminal-fidelity-review/` and `/home/kayg/.local/state/codex-jobs/infraternal/review-terminal-fidelity/findings.md`.
kayg commented 2026-10-11 22:55:53 +00:00
Author
Owner
Copy link

Starting terminal-fidelity review repairs on branch terminal-fidelity, based on 30011d951a. I read the #160/#161 histories; proceeding with TF-001 notice handling and TF-002 fence frame retention from the review commits.

Starting terminal-fidelity review repairs on branch terminal-fidelity, based on 30011d951a1fca5da4aa708d14b0e27bb7daf8b8. I read the #160/#161 histories; proceeding with TF-001 notice handling and TF-002 fence frame retention from the review commits.
kayg commented 2026-10-11 23:21:59 +00:00
Author
Owner
Copy link

TF-001 reproduced at base 30011d951a with the unchanged review regression: replay_complete_notice_is_accepted_by_embedded_server failed because TerminalNotice reported unknown variant terminal.replay_complete. Embedded and remote links converge on the same process_incoming decoder; tracer already handles the notice and contracts/wire.md already specifies it.

TF-001 reproduced at base 30011d951a1fca5da4aa708d14b0e27bb7daf8b8 with the unchanged review regression: `replay_complete_notice_is_accepted_by_embedded_server` failed because TerminalNotice reported unknown variant `terminal.replay_complete`. Embedded and remote links converge on the same `process_incoming` decoder; tracer already handles the notice and contracts/wire.md already specifies it.
kayg commented 2026-10-11 23:39:43 +00:00
Author
Owner
Copy link

TF-001 committed and pushed as 5c6a6b66. The shared server decoder now accepts terminal.replay_complete and validates its canonical u64 decimal cursor; the wire contract was already current. Red: reviewer regression failed at 30011d95 with unknown variant. Green: default server test 1/1, remote-feature server test 1/1, fmt check, and server Clippy (--all-targets --features remote).

TF-001 committed and pushed as 5c6a6b66. The shared server decoder now accepts `terminal.replay_complete` and validates its canonical u64 decimal cursor; the wire contract was already current. Red: reviewer regression failed at 30011d95 with unknown variant. Green: default server test 1/1, remote-feature server test 1/1, fmt check, and server Clippy (`--all-targets --features remote`).
kayg commented 2026-10-11 23:40:32 +00:00
Author
Owner
Copy link

TF-002 reproduced on the branch with the unchanged review regression: fixture_fence_processes_messages_before_the_control_pong failed because Binary.fence() returned at the Pong with seen == []; the preceding Output frame was discarded. The Python fixture already validates replay-complete events in process(), so the repair can preserve all earlier frame handling through that existing path.

TF-002 reproduced on the branch with the unchanged review regression: `fixture_fence_processes_messages_before_the_control_pong` failed because `Binary.fence()` returned at the Pong with `seen == []`; the preceding Output frame was discarded. The Python fixture already validates replay-complete events in `process()`, so the repair can preserve all earlier frame handling through that existing path.
kayg commented 2026-10-11 23:41:24 +00:00
Author
Owner
Copy link

TF-002 committed and pushed as 27db08cf. Binary.fence() now processes each pre-Pong writer frame in socket order with credit refunds disabled. Red: reviewer test observed no processed Output frame. Green: fixture_fence_processes_messages_before_the_control_pong 1/1; agent Clippy (--all-targets), fmt check, and diff check passed. The tracer notice consumer already handles replay completion; no web/client code changed.

TF-002 committed and pushed as 27db08cf. `Binary.fence()` now processes each pre-Pong writer frame in socket order with credit refunds disabled. Red: reviewer test observed no processed Output frame. Green: `fixture_fence_processes_messages_before_the_control_pong` 1/1; agent Clippy (`--all-targets`), fmt check, and diff check passed. The tracer notice consumer already handles replay completion; no web/client code changed.
kayg commented 2026-10-12 00:33:57 +00:00
Author
Owner
Copy link

Supplemental cargo test -p infraternal-server --lib -- --test-threads=1 at 27db08cf finished 182 passed, 3 failed, 13 ignored in 572.40 s; embedded::regressions::replay_complete_notice_is_accepted_by_embedded_server passed. Unrelated auth socket failures: claude_review_watch_expires_host_made_visible_by_membership_edit (websocket closed unexpectedly), mesh_calls_and_subscriptions_deliver_scoped_live_inventory (mesh.list was not successful), and mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement (elapsed timeout). I am comparing these exact cases on detached origin/dev to separate host-load failures from branch behavior.

Supplemental `cargo test -p infraternal-server --lib -- --test-threads=1` at 27db08cf finished 182 passed, 3 failed, 13 ignored in 572.40 s; `embedded::regressions::replay_complete_notice_is_accepted_by_embedded_server` passed. Unrelated auth socket failures: `claude_review_watch_expires_host_made_visible_by_membership_edit` (websocket closed unexpectedly), `mesh_calls_and_subscriptions_deliver_scoped_live_inventory` (`mesh.list` was not successful), and `mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement` (elapsed timeout). I am comparing these exact cases on detached `origin/dev` to separate host-load failures from branch behavior.
kayg commented 2026-10-12 00:35:25 +00:00
Author
Owner
Copy link

Finished and pushed branch terminal-fidelity at 27db08cf8717596dee20d7de8e109ce69f03beb7.

  • TF-001: TerminalNotice now accepts terminal.replay_complete, validates its canonical decimal u64 cursor, checks the attached session as before, and retains deny_unknown_fields. Embedded and remote peers use the same process_incoming path. The notice and fence are already documented in contracts/wire.md; tracer code already handles the marker, so no contract or client change was needed. Default and remote server regressions passed 1/1 each; server Clippy and fmt passed.
  • TF-002: Binary.fence() now delivers all pre-Pong frames through the existing processor in wire order with credit refunds disabled. The reviewer regression passed 1/1; agent Clippy/fmt passed. Full agent library suite: 33 passed, 0 failed, 6 ignored.
  • Reviewer pass: strict notice allowlist remains; cursor accepts only canonical ASCII decimal in u64 range; session binding is enforced before forwarding; tracer validates its session/cursor fence; the fixture validates replay metadata through process(); fence preserves received order and credit accounting.
  • scripts/verify fast ran on infraternal-dev under systemd-run --user --scope -p CPUWeight=10000. RTT self-test passed (p50 294.41 ms, p99 348.79 ms). Its serial rerun stalled at restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control for 10m10s and was interrupted so later gates could finish. The earlier four-thread run also reported failures in cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null, real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin, early_hangup_is_queued_until_control_installs_its_handler, rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode, and restart_requests_use_the_servers_binary_and_reject_untrusted_paths; closed_reply_and_missing_reload_target_do_not_end_restart_control and default_restart_opens_the_receiver_target_exactly_once exceeded 60 seconds. These are in the pre-existing restart area. The final test row is marked failed by the explicit interrupt; no unrelated test binary was skipped silently.
  • Supplemental server library suite: 182 passed, 3 failed, 13 ignored in 572.40 s. The three auth socket failures were claude_review_watch_expires_host_made_visible_by_membership_edit, mesh_calls_and_subscriptions_deliver_scoped_live_inventory, and mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement; each passed individually on the branch after host load dropped (1/1 in 8.70 s, 0.70 s and 0.51 s).
  • Static x86_64 musl size is 20,092,880 bytes, +8,416 bytes from the 20,084,464-byte 30011d95 measurement. PT_INTERP is absent. The existing 16,404,816-byte cap remains unchanged.

Final scripts/verify fast output, verbatim:

METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=294.41 p99_ms=348.79 result=PASS
error: test failed, to rerun pass `-p infraternal --bin infraternal`
  process didn't exit successfully: `/home/kayg/.cache/codex-scratch/terminal-fidelity/target/debug/deps/infraternal-695a777d772bb491` (signal: 2, SIGINT: terminal interrupt signal)
advisories ok, bans ok, licenses ok, sources ok
PT_INTERP: absent; size: 20092880 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 20092880 bytes

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | FAIL (101)   |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+
Finished and pushed branch `terminal-fidelity` at `27db08cf8717596dee20d7de8e109ce69f03beb7`. - TF-001: `TerminalNotice` now accepts `terminal.replay_complete`, validates its canonical decimal u64 cursor, checks the attached session as before, and retains `deny_unknown_fields`. Embedded and remote peers use the same `process_incoming` path. The notice and fence are already documented in `contracts/wire.md`; tracer code already handles the marker, so no contract or client change was needed. Default and remote server regressions passed 1/1 each; server Clippy and fmt passed. - TF-002: `Binary.fence()` now delivers all pre-Pong frames through the existing processor in wire order with credit refunds disabled. The reviewer regression passed 1/1; agent Clippy/fmt passed. Full agent library suite: 33 passed, 0 failed, 6 ignored. - Reviewer pass: strict notice allowlist remains; cursor accepts only canonical ASCII decimal in u64 range; session binding is enforced before forwarding; tracer validates its session/cursor fence; the fixture validates replay metadata through `process()`; fence preserves received order and credit accounting. - `scripts/verify fast` ran on infraternal-dev under `systemd-run --user --scope -p CPUWeight=10000`. RTT self-test passed (p50 294.41 ms, p99 348.79 ms). Its serial rerun stalled at `restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control` for 10m10s and was interrupted so later gates could finish. The earlier four-thread run also reported failures in `cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null`, `real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin`, `early_hangup_is_queued_until_control_installs_its_handler`, `rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode`, and `restart_requests_use_the_servers_binary_and_reject_untrusted_paths`; `closed_reply_and_missing_reload_target_do_not_end_restart_control` and `default_restart_opens_the_receiver_target_exactly_once` exceeded 60 seconds. These are in the pre-existing restart area. The final test row is marked failed by the explicit interrupt; no unrelated test binary was skipped silently. - Supplemental server library suite: 182 passed, 3 failed, 13 ignored in 572.40 s. The three auth socket failures were `claude_review_watch_expires_host_made_visible_by_membership_edit`, `mesh_calls_and_subscriptions_deliver_scoped_live_inventory`, and `mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement`; each passed individually on the branch after host load dropped (1/1 in 8.70 s, 0.70 s and 0.51 s). - Static x86_64 musl size is 20,092,880 bytes, **+8,416 bytes** from the 20,084,464-byte `30011d95` measurement. PT_INTERP is absent. The existing 16,404,816-byte cap remains unchanged. Final `scripts/verify fast` output, verbatim: ```text METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=294.41 p99_ms=348.79 result=PASS error: test failed, to rerun pass `-p infraternal --bin infraternal` process didn't exit successfully: `/home/kayg/.cache/codex-scratch/terminal-fidelity/target/debug/deps/infraternal-695a777d772bb491` (signal: 2, SIGINT: terminal interrupt signal) advisories ok, bans ok, licenses ok, sources ok PT_INTERP: absent; size: 20092880 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 20092880 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | FAIL (101) | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```
kayg commented 2026-10-12 00:35:44 +00:00
Author
Owner
Copy link

Gate clarification: both fast runs stopped in the first infraternal CLI test binary at the known restart stall; later workspace test binaries therefore did not run in those fast invocations. The server and agent library suites ran separately. I am now running cargo test --workspace serially with only the seven restart tests observed failing/stalling in the fast run excluded; all other tests remain enabled.

Gate clarification: both fast runs stopped in the first `infraternal` CLI test binary at the known restart stall; later workspace test binaries therefore did not run in those fast invocations. The server and agent library suites ran separately. I am now running `cargo test --workspace` serially with only the seven restart tests observed failing/stalling in the fast run excluded; all other tests remain enabled.
kayg commented 2026-10-12 00:59:28 +00:00
Author
Owner
Copy link

Supplemental workspace coverage complete at 27db08cf87. cargo test --workspace --locked -- --test-threads=1 with the seven previously listed restart cases explicitly skipped completed all test binaries and doc tests: PASS, zero failures. The auth socket cases, vt_credit, terminal fidelity suite (74 passed, 13 ignored), and shim mouse probe passed. The first supplemental attempt stopped at the shim mouse test because zig was absent from PATH (FileNotFoundError); the repo-pinned Zig 0.15.2 was installed under this job's scratch target, and the full workspace command was rerun successfully. Clarification: scripts/verify fast stops in the CLI test binary on its known restart failures/stalls; this separate workspace run covers the remaining binaries. Branch head remains pushed at the SHA above.

Supplemental workspace coverage complete at 27db08cf8717596dee20d7de8e109ce69f03beb7. `cargo test --workspace --locked -- --test-threads=1` with the seven previously listed restart cases explicitly skipped completed all test binaries and doc tests: PASS, zero failures. The auth socket cases, `vt_credit`, terminal fidelity suite (74 passed, 13 ignored), and shim mouse probe passed. The first supplemental attempt stopped at the shim mouse test because `zig` was absent from PATH (`FileNotFoundError`); the repo-pinned Zig 0.15.2 was installed under this job's scratch target, and the full workspace command was rerun successfully. Clarification: `scripts/verify fast` stops in the CLI test binary on its known restart failures/stalls; this separate workspace run covers the remaining binaries. Branch head remains pushed at the SHA above.
kayg commented 2026-10-12 01:21:40 +00:00
Author
Owner
Copy link

Independent delta review started on local branch review-terminal-fidelity, based at target 27db08cf8717596dee20d7de8e109ce69f03beb7. Scope: 30011d95..27db08cf; merge base with dev: ebcc73a0ec22f8498a0466b2d8641ac569f87e77. The earlier TF-001 and TF-002 regression tests are present in the target delta and will be rerun.

Independent delta review started on local branch `review-terminal-fidelity`, based at target `27db08cf8717596dee20d7de8e109ce69f03beb7`. Scope: `30011d95..27db08cf`; merge base with `dev`: `ebcc73a0ec22f8498a0466b2d8641ac569f87e77`. The earlier TF-001 and TF-002 regression tests are present in the target delta and will be rerun.
kayg commented 2026-10-12 01:23:45 +00:00
Author
Owner
Copy link

Delta retest at 27db08cf8717596dee20d7de8e109ce69f03beb7: TF-001 passed (replay_complete_notice_is_accepted_by_embedded_server, 1/1); TF-002 passed (fixture_fence_processes_messages_before_the_control_pong, 1/1). Both prior regression tests are present in the target delta. Logs are in /home/kayg/.cache/codex-scratch/terminal-fidelity-review/.

Delta retest at `27db08cf8717596dee20d7de8e109ce69f03beb7`: TF-001 passed (`replay_complete_notice_is_accepted_by_embedded_server`, 1/1); TF-002 passed (`fixture_fence_processes_messages_before_the_control_pong`, 1/1). Both prior regression tests are present in the target delta. Logs are in `/home/kayg/.cache/codex-scratch/terminal-fidelity-review/`.
kayg commented 2026-10-12 01:26:20 +00:00
Author
Owner
Copy link

Additional TF-001 check at 27db08cf8717596dee20d7de8e109ce69f03beb7: replay_complete_notice_is_accepted_by_embedded_server also passes with the remote feature enabled (1/1). The embedded and remote paths compile against the same notice decoder.

Additional TF-001 check at `27db08cf8717596dee20d7de8e109ce69f03beb7`: `replay_complete_notice_is_accepted_by_embedded_server` also passes with the `remote` feature enabled (1/1). The embedded and remote paths compile against the same notice decoder.
kayg commented 2026-10-12 01:48:14 +00:00
Author
Owner
Copy link

Delta review complete at 27db08cf8717596dee20d7de8e109ce69f03beb7 on local branch review-terminal-fidelity, reviewing only 30011d95..27db08cf. TF-001 (prior P1) passes in default and remote builds (1/1 each); TF-002 (prior P2) passes (1/1). Both regression tests are already present in the target delta. No new findings: P0=0, P1=0, P2=0, P3=0.

Verdict: MERGE (no P0/P1).

scripts/verify fast ran on the reviewed head under CPUWeight=10000 with RUST_TEST_THREADS=4. Two existing restart tests exceeded 60 seconds; I interrupted the CLI test binary after about two minutes so remaining checks could finish. The x86_64 static binary measured 20,092,880 bytes against the 16,404,816-byte cap, matching the job report. Gate summary, verbatim:

METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=305.08 p99_ms=317.48 result=PASS
error: test failed, to rerun pass `-p infraternal --bin infraternal`

Caused by:
  process didn't exit successfully: `/home/kayg/.cache/codex-scratch/terminal-fidelity-review/target/debug/deps/infraternal-695a777d772bb491` (signal: 2, SIGINT: terminal interrupt signal)
advisories ok, bans ok, licenses ok, sources ok
PT_INTERP: absent; size: 20092880 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 20092880 bytes

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | FAIL (101)   |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+
Delta review complete at `27db08cf8717596dee20d7de8e109ce69f03beb7` on local branch `review-terminal-fidelity`, reviewing only `30011d95..27db08cf`. TF-001 (prior P1) passes in default and `remote` builds (1/1 each); TF-002 (prior P2) passes (1/1). Both regression tests are already present in the target delta. No new findings: P0=0, P1=0, P2=0, P3=0. Verdict: MERGE (no P0/P1). `scripts/verify fast` ran on the reviewed head under `CPUWeight=10000` with `RUST_TEST_THREADS=4`. Two existing restart tests exceeded 60 seconds; I interrupted the CLI test binary after about two minutes so remaining checks could finish. The x86_64 static binary measured 20,092,880 bytes against the 16,404,816-byte cap, matching the job report. Gate summary, verbatim: ```text METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=305.08 p99_ms=317.48 result=PASS error: test failed, to rerun pass `-p infraternal --bin infraternal` Caused by: process didn't exit successfully: `/home/kayg/.cache/codex-scratch/terminal-fidelity-review/target/debug/deps/infraternal-695a777d772bb491` (signal: 2, SIGINT: terminal interrupt signal) advisories ok, bans ok, licenses ok, sources ok PT_INTERP: absent; size: 20092880 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 20092880 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | FAIL (101) | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```
kayg commented 2026-10-12 01:55:06 +00:00
Author
Owner
Copy link

Starting the #160/#161 production-batch port on branch release-prod-3c, based on origin/release-prod-3b at 8cff05cdeee4b43c5b7234e09fb12296fb602ad8. The worktree is clean. origin/terminal-fidelity is 27db08cf8717596dee20d7de8e109ce69f03beb7; its review history records TF-001 and TF-002 repaired and a MERGE verdict. I will preserve the production lifecycle changes already in the base while resolving the three reported conflicts.

Starting the #160/#161 production-batch port on branch `release-prod-3c`, based on `origin/release-prod-3b` at `8cff05cdeee4b43c5b7234e09fb12296fb602ad8`. The worktree is clean. `origin/terminal-fidelity` is `27db08cf8717596dee20d7de8e109ce69f03beb7`; its review history records TF-001 and TF-002 repaired and a MERGE verdict. I will preserve the production lifecycle changes already in the base while resolving the three reported conflicts.
kayg commented 2026-10-12 01:57:35 +00:00
Author
Owner
Copy link

Finding from the branch comparison: origin/release-prod-3b checks lifecycle.rs with symlink_metadata(...).file_type().is_symlink() and adds nondumpable_process_keeps_its_authenticated_lifetime; origin/terminal-fidelity removes the followed /proc/<pid>/exe check because hardened shims deny following it. The production check inspects link metadata without following it, so I will retain that check and its regression test while preserving the terminal-fidelity locale and replay changes. The two script conflicts also differ: production counts the private rendezvous in /proc/<pid>/net/unix, while terminal-fidelity validates detach through a wire-level resize/ack and waits specifically for terminal.exited after the replay marker.

Finding from the branch comparison: `origin/release-prod-3b` checks `lifecycle.rs` with `symlink_metadata(...).file_type().is_symlink()` and adds `nondumpable_process_keeps_its_authenticated_lifetime`; `origin/terminal-fidelity` removes the followed `/proc/<pid>/exe` check because hardened shims deny following it. The production check inspects link metadata without following it, so I will retain that check and its regression test while preserving the terminal-fidelity locale and replay changes. The two script conflicts also differ: production counts the private rendezvous in `/proc/<pid>/net/unix`, while terminal-fidelity validates detach through a wire-level resize/ack and waits specifically for `terminal.exited` after the replay marker.
kayg commented 2026-10-12 02:12:16 +00:00
Author
Owner
Copy link

Tracer gate finding: the first bun test src run overlapped the Zig toolchain install and bun run check. It reported 148 passed / 2 failed / 10,921 assertions: the unrelated 1,000-node layout timing assertion measured 48.56 ms against <25 ms, and the random-grid test exceeded its 5 s timeout (8.30 s observed). No tests were skipped. I will rerun the same suite alone in a systemd-run --user --scope -p CPUWeight=10000 scope and record host load.

Tracer gate finding: the first `bun test src` run overlapped the Zig toolchain install and `bun run check`. It reported 148 passed / 2 failed / 10,921 assertions: the unrelated 1,000-node layout timing assertion measured 48.56 ms against <25 ms, and the random-grid test exceeded its 5 s timeout (8.30 s observed). No tests were skipped. I will rerun the same suite alone in a `systemd-run --user --scope -p CPUWeight=10000` scope and record host load.
kayg commented 2026-10-12 02:28:06 +00:00
Author
Owner
Copy link

Production browser gate finding on the staged merge tree (TRACER_TEST_PORT=4263, weighted scope): 24 passed / 5 failed in 8.3 min; no tests were skipped. Both new terminal-query-replay.spec.ts cases passed (live replay/reload and Snapshot suppression). Failures: dead-session.spec.ts exit-7 expected attach_count +1 but saw +2; reconnect between saved status and Close expected +2 but saw +4; sessions-canvas.spec.ts empty/loading/error exceeded 30 s; terminal.spec.ts sign-in connection exceeded 5 s; access-screen first-paint measured p50 1,770.50 ms / p99 2,922.30 ms against 1,000 ms and its screenshot exceeded 120 s. Load immediately before the run was 48.23/54.73/48.02. I am tracing the extra attaches and will rerun the timing-sensitive checks after isolating them. No failure is waived.

Production browser gate finding on the staged merge tree (`TRACER_TEST_PORT=4263`, weighted scope): 24 passed / 5 failed in 8.3 min; no tests were skipped. Both new `terminal-query-replay.spec.ts` cases passed (live replay/reload and Snapshot suppression). Failures: `dead-session.spec.ts` exit-7 expected attach_count +1 but saw +2; reconnect between saved status and Close expected +2 but saw +4; `sessions-canvas.spec.ts` empty/loading/error exceeded 30 s; `terminal.spec.ts` sign-in connection exceeded 5 s; access-screen first-paint measured p50 1,770.50 ms / p99 2,922.30 ms against 1,000 ms and its screenshot exceeded 120 s. Load immediately before the run was 48.23/54.73/48.02. I am tracing the extra attaches and will rerun the timing-sensitive checks after isolating them. No failure is waived.
kayg commented 2026-10-12 02:31:22 +00:00
Author
Owner
Copy link

Finding: openProduct() waited for the client-side data-connected flag, which is set before AttachTerm reaches the test double over the 300 ms latency proxy. Repro: isolated dead-session.spec.ts reported retired status 0 before=1 after=3 (expected +1); status 7 reported before=2 after=3. Add a wait for server-observed initial attach before taking retirement baselines.

Finding: `openProduct()` waited for the client-side `data-connected` flag, which is set before `AttachTerm` reaches the test double over the 300 ms latency proxy. Repro: isolated `dead-session.spec.ts` reported retired status 0 `before=1 after=3` (expected +1); status 7 reported `before=2 after=3`. Add a wait for server-observed initial attach before taking retirement baselines.
kayg commented 2026-10-12 02:34:50 +00:00
Author
Owner
Copy link

Resolved the attach-count race in apps/tracer/test/dead-session.spec.ts: openProduct() now waits for the test double to observe its initial AttachTerm before tests capture baselines. Isolated file rerun: 4/4 passed (1.2m); includes exit 7, exit 0 and interrupted final Close.

Resolved the attach-count race in `apps/tracer/test/dead-session.spec.ts`: `openProduct()` now waits for the test double to observe its initial AttachTerm before tests capture baselines. Isolated file rerun: 4/4 passed (1.2m); includes exit 7, exit 0 and interrupted final Close.
kayg commented 2026-10-12 02:42:18 +00:00
Author
Owner
Copy link

Gate step: cargo clippy --locked --all-targets --all-features -p infraternal-agent -p infraternal-shim -p infraternal-server -p infraternal -- -D warnings PASS; finished in 7m 02s. cargo fmt --all -- --check also PASS.

Gate step: `cargo clippy --locked --all-targets --all-features -p infraternal-agent -p infraternal-shim -p infraternal-server -p infraternal -- -D warnings` PASS; finished in 7m 02s. `cargo fmt --all -- --check` also PASS.
kayg commented 2026-10-12 02:44:00 +00:00
Author
Owner
Copy link

Test setup finding: the isolated CARGO_TARGET_DIR was correctly placed under scratch, but existing agent tests create fixture parents at ../../target relative to the crate. The first test command therefore had 8 ENOENT fixture setup failures (8 of 40 agent tests); no assertions ran in those cases. Added a temporary worktree target symlink to the scratch target so those existing relative fixture paths remain inside scratch; rerunning the unchanged code tests.

Test setup finding: the isolated CARGO_TARGET_DIR was correctly placed under scratch, but existing agent tests create fixture parents at `../../target` relative to the crate. The first test command therefore had 8 ENOENT fixture setup failures (8 of 40 agent tests); no assertions ran in those cases. Added a temporary worktree `target` symlink to the scratch target so those existing relative fixture paths remain inside scratch; rerunning the unchanged code tests.
kayg commented 2026-10-12 02:51:12 +00:00
Author
Owner
Copy link

Rust tests (default features) PASS after pointing existing ../../target fixture paths through a temporary symlink into scratch: agent 34 passed/6 ignored + 2 transport; server 187 passed/14 ignored plus its integration targets; shim 73 passed/13 ignored, detach 2/2, mouse 1/1. The TF-001 replay_complete_notice_is_accepted_by_embedded_server passed in the server suite. Initial ENOENT setup attempt is recorded above; no test was waived.

Rust tests (default features) PASS after pointing existing `../../target` fixture paths through a temporary symlink into scratch: agent 34 passed/6 ignored + 2 transport; server 187 passed/14 ignored plus its integration targets; shim 73 passed/13 ignored, detach 2/2, mouse 1/1. The TF-001 `replay_complete_notice_is_accepted_by_embedded_server` passed in the server suite. Initial ENOENT setup attempt is recorded above; no test was waived.
kayg commented 2026-10-12 02:56:05 +00:00
Author
Owner
Copy link

Real-shim session scripts PASS against the scratch-built CLI (INFRATERAL_TEST_STATE_ROOT under scratch): verify-session-exit-credit.py --exit-after-detach reported “Reaped shim final output and ordered exit survive delayed credit: PASS”; verify-session-retention.py reported “Bounded owned exit, unfunded notification, restarted reconnect status, retirement handshake race, unknown session: PASS”.

Real-shim session scripts PASS against the scratch-built CLI (`INFRATERAL_TEST_STATE_ROOT` under scratch): `verify-session-exit-credit.py --exit-after-detach` reported “Reaped shim final output and ordered exit survive delayed credit: PASS”; `verify-session-retention.py` reported “Bounded owned exit, unfunded notification, restarted reconnect status, retirement handshake race, unknown session: PASS”.
kayg commented 2026-10-12 03:06:04 +00:00
Author
Owner
Copy link

Production Playwright rerun (TRACER_TEST_PORT=4280, CPUWeight=10000): 26/29 passed, including dead-session 4/4 and terminal-query-replay 2/2. Remaining failures: sessions-canvas empty/loading/error flow hit its 30s test timeout; terminal first passkey connection poll timed out at 5s; access first-paint expected card did not appear before its test timed out. Access metrics: render p50 1984.50ms/p99 2986.80ms vs 1000ms budget; FCP p50 1655.60ms/p99 2760.30ms. Load average was 31.88/26.80/32.51 at start and 45.43/47.33/40.28 at end. No screenshots/error-contexts inspected. Investigating functional failures; none waived.

Production Playwright rerun (TRACER_TEST_PORT=4280, CPUWeight=10000): 26/29 passed, including dead-session 4/4 and terminal-query-replay 2/2. Remaining failures: sessions-canvas empty/loading/error flow hit its 30s test timeout; terminal first passkey connection poll timed out at 5s; access first-paint expected card did not appear before its test timed out. Access metrics: render p50 1984.50ms/p99 2986.80ms vs 1000ms budget; FCP p50 1655.60ms/p99 2760.30ms. Load average was 31.88/26.80/32.51 at start and 45.43/47.33/40.28 at end. No screenshots/error-contexts inspected. Investigating functional failures; none waived.
kayg commented 2026-10-12 03:10:35 +00:00
Author
Owner
Copy link

Finding: the sessions-canvas empty/loading/error test passed all stages when run with a 60s diagnostic ceiling, but needed 36.4s because it opens three canvases and holds the loading scene for 8s; the default 30s whole-test watchdog preempted it during the same shared load. Raised only this test's outer timeout to 60s; all existing per-stage limits/assertions remain unchanged. Rechecking the focused case.

Finding: the sessions-canvas empty/loading/error test passed all stages when run with a 60s diagnostic ceiling, but needed 36.4s because it opens three canvases and holds the loading scene for 8s; the default 30s whole-test watchdog preempted it during the same shared load. Raised only this test's outer timeout to 60s; all existing per-stage limits/assertions remain unchanged. Rechecking the focused case.
kayg commented 2026-10-12 03:15:50 +00:00
Author
Owner
Copy link

Baseline check: the same test/terminal.spec.ts first-run/passkey flow fails on detached origin/release-prod-3b at the same line 84, default 5s isConnected() poll (1/1 failed; 1.1m total). On this branch the catch-only diagnostic saw connected=true, attach_count=2, active_socket_count=1, socket_open_count=2, pageErrors=0 immediately after that poll failed. This gate remains recorded as failing; no waiver.

Baseline check: the same `test/terminal.spec.ts` first-run/passkey flow fails on detached `origin/release-prod-3b` at the same line 84, default 5s `isConnected()` poll (1/1 failed; 1.1m total). On this branch the catch-only diagnostic saw `connected=true`, `attach_count=2`, `active_socket_count=1`, `socket_open_count=2`, `pageErrors=0` immediately after that poll failed. This gate remains recorded as failing; no waiver.
kayg commented 2026-10-12 03:18:11 +00:00
Author
Owner
Copy link

Baseline comparison on detached origin/release-prod-3b, TRACER_TEST_PORT=4292, CPUWeight=10000, configured RTT 300ms: access first-paint test exits 1. Setup render p50/p99 1597.00/2025.60ms and sign-in 2029.60/2638.30ms, each vs the unchanged 1000ms budget. FCP reports setup 1423.30/1880.90ms, sign-in 1866.50/2415.70ms. This remains a failing performance gate on both base and integrated branch; not waived.

Baseline comparison on detached `origin/release-prod-3b`, `TRACER_TEST_PORT=4292`, CPUWeight=10000, configured RTT 300ms: access first-paint test exits 1. Setup render p50/p99 1597.00/2025.60ms and sign-in 2029.60/2638.30ms, each vs the unchanged 1000ms budget. FCP reports setup 1423.30/1880.90ms, sign-in 1866.50/2415.70ms. This remains a failing performance gate on both base and integrated branch; not waived.
kayg commented 2026-10-12 03:25:30 +00:00
Author
Owner
Copy link

Production batch 4 started on release-prod-4, base 1f77a449ed (live release-prod-3). Read issue/review histories and repository contracts. Merge terminal-fidelity 27db08cf then ended-sessions 14d01feb; preserve replay fencing, production lifetime authentication and event-driven census. Exclude audit-ca-update/release-prod-3b and 64d4e213. Required native/browser/static gates and three interleaved base/head perf-VM keystroke runs; push only release-prod-4, no deployment.

Production batch 4 started on release-prod-4, base 1f77a449ede540281319ba01d149a2f60d584f3b (live release-prod-3). Read issue/review histories and repository contracts. Merge terminal-fidelity 27db08cf then ended-sessions 14d01feb; preserve replay fencing, production lifetime authentication and event-driven census. Exclude audit-ca-update/release-prod-3b and 64d4e213. Required native/browser/static gates and three interleaved base/head perf-VM keystroke runs; push only release-prod-4, no deployment.
kayg commented 2026-10-12 03:32:34 +00:00
Author
Owner
Copy link

First merge conflict resolution: lifecycle.rs retains live-base symlink_metadata(/proc/PID/exe) and nondumpable lifetime regression; terminal-fidelity's followed-link removal is unnecessary on this production line. Session scripts use replay-aware terminal.exited waits and wire Resize/Ack detachment proof. Tracer check/src/build/transfer PASS: 150 tests, zero failures; critical gzip293658/Brotli244026B, deferred gzip48905/Brotli43227B. Replay browser initial run1/2 failed at HTTP fixture injection before server-observed Attach (text-output refused); unchanged rerun2/2 PASS (51.0s, port5254). Preserve initial output; add initial-attach barrier as separate fixture adaptation after merges. Rust cold compilation pending. No excluded branch merged.

First merge conflict resolution: lifecycle.rs retains live-base symlink_metadata(/proc/PID/exe) and nondumpable lifetime regression; terminal-fidelity's followed-link removal is unnecessary on this production line. Session scripts use replay-aware terminal.exited waits and wire Resize/Ack detachment proof. Tracer check/src/build/transfer PASS: 150 tests, zero failures; critical gzip293658/Brotli244026B, deferred gzip48905/Brotli43227B. Replay browser initial run1/2 failed at HTTP fixture injection before server-observed Attach (text-output refused); unchanged rerun2/2 PASS (51.0s, port5254). Preserve initial output; add initial-attach barrier as separate fixture adaptation after merges. Rust cold compilation pending. No excluded branch merged.
kayg commented 2026-10-12 04:00:01 +00:00
Author
Owner
Copy link

Fresh live-base control at 1f77a449: default stripped static x86 image20093776B, no PT_INTERP, SHA256 f5fcda1a36f2270e458a1598a35d444f542a826b6d49fc88f0f876497b25fed1. Production-build browser gate (port5264, CPUWeight10000, default300ms RTT)50PASS/5FAIL in14.2min. Failures: retired exit7 attach count, sessions-canvas30s watchdog, theme long-task assertion, first-run5s connection poll, access-screen120s watchdog (setup render p992651.40ms vs1000ms). Raw evidence/prod4/browser-base-1.log. First merge fmt/all-feature touched-crate clippy PASS; agent34PASS+2transport, server186PASS/13ignored, raw queue1PASS/review8PASS, VT credit1PASS, session discovery1PASS and all three session-script runs PASS; shim suite finishing. No waiver or budget change; head A/B follows second merge.

Fresh live-base control at 1f77a449: default stripped static x86 image20093776B, no PT_INTERP, SHA256 f5fcda1a36f2270e458a1598a35d444f542a826b6d49fc88f0f876497b25fed1. Production-build browser gate (port5264, CPUWeight10000, default300ms RTT)50PASS/5FAIL in14.2min. Failures: retired exit7 attach count, sessions-canvas30s watchdog, theme long-task assertion, first-run5s connection poll, access-screen120s watchdog (setup render p992651.40ms vs1000ms). Raw evidence/prod4/browser-base-1.log. First merge fmt/all-feature touched-crate clippy PASS; agent34PASS+2transport, server186PASS/13ignored, raw queue1PASS/review8PASS, VT credit1PASS, session discovery1PASS and all three session-script runs PASS; shim suite finishing. No waiver or budget change; head A/B follows second merge.
kayg commented 2026-10-12 04:05:07 +00:00
Author
Owner
Copy link

Completed first merge:69babc9237457a8dd30a20ba596c730b44414e79, terminal-fidelity27db08cf onto live1f77a449. fmt and touched-crate all-target/all-feature clippy PASS (20m02s cold); default agent34+2transport PASS, server186PASS/13ignored plus integration/doc targets, shim73PASS/13ignored plus detach2/mouse1 PASS. CLI discovery/VT credit1 each PASS; queue1PASS(36.68s)/review8PASS(23.36s); three session-script modes PASS; tracer150PASS/check/build/transfer PASS; replay browser2/2PASS after retained initial fixture-attach race. Second merge14d01feb now staged: resolve mock cursor+inventory, combine census/replay-aware readers and retention, retain production process identity and zero-timer event backend. Incoming raw evidence has whitespace; source-only diff check passes, raw logs preserved verbatim. Separate browser fixture adaptations follow, no deployment.

Completed first merge:69babc9237457a8dd30a20ba596c730b44414e79, terminal-fidelity27db08cf onto live1f77a449. fmt and touched-crate all-target/all-feature clippy PASS (20m02s cold); default agent34+2transport PASS, server186PASS/13ignored plus integration/doc targets, shim73PASS/13ignored plus detach2/mouse1 PASS. CLI discovery/VT credit1 each PASS; queue1PASS(36.68s)/review8PASS(23.36s); three session-script modes PASS; tracer150PASS/check/build/transfer PASS; replay browser2/2PASS after retained initial fixture-attach race. Second merge14d01feb now staged: resolve mock cursor+inventory, combine census/replay-aware readers and retention, retain production process identity and zero-timer event backend. Incoming raw evidence has whitespace; source-only diff check passes, raw logs preserved verbatim. Separate browser fixture adaptations follow, no deployment.
kayg commented 2026-10-12 04:13:09 +00:00
Author
Owner
Copy link

Production-batch restart fallback started on release-prod-4 at69babc9237457a8dd30a20ba596c730b44414e79, with ended-sessions14d01feb staged. Read all #174 comments; no parent linked. Unmodified restart::tests probe reproduces cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null FAILED and two>60s stalls (closed_reply/default_restart); owned120s guard returns124. Harness mode0775 under inherited umask0002, matching #174's strict validator fixture defect. evidence/prod4/restart-before.log preserves output. After the second merge, port only4fcba8a6 and e1749321 as separate logical test commits; existing #174 attach-credit/discovery state fixes are already present through terminal-fidelity. No unrelated dev history or production restart change.

Production-batch restart fallback started on release-prod-4 at69babc9237457a8dd30a20ba596c730b44414e79, with ended-sessions14d01feb staged. Read all #174 comments; no parent linked. Unmodified restart::tests probe reproduces cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null FAILED and two>60s stalls (closed_reply/default_restart); owned120s guard returns124. Harness mode0775 under inherited umask0002, matching #174's strict validator fixture defect. evidence/prod4/restart-before.log preserves output. After the second merge, port only4fcba8a6 and e1749321 as separate logical test commits; existing #174 attach-credit/discovery state fixes are already present through terminal-fidelity. No unrelated dev history or production restart change.
kayg commented 2026-10-12 04:42:13 +00:00
Author
Owner
Copy link

Second-merge checks:fmt/all-target/all-feature touched-crate clippy PASS; tracer159PASS/0FAIL,check/build/transfer PASS(critical gzip293781/Brotli244262B,deferred49714/43933B). Default agent42+2transport PASS; shim73+detach2/mouse1/pidfd2 PASS; queue1/review8 PASS. Two broad server runs each191PASS/1auth-socket-close FAIL; fresh_delete passes unchanged isolated1.44s and server_setup_echo passes unchanged isolated1.73s. Full unchanged server replay underway; failures retained, no waiver.
Imported restart-discovery fixture fails at agent_sessions.rs:197 with ENOENT because its hard-coded ended-sessions scratch parent is absent (same prerequisite recorded by author). With prerequisite present, agent_sessions3/3 and zero-idle/unsolicited-exit1/1 PASS(9.00s). Separate fixture adaptation will create the parent and honor the existing state root; no production change.
Fresh staged-head stripped x86 image20205936B (+112160B vs independently built live20093776B), no interpreter; ARM building. Full head browser55PASS/6FAIL: all7 ended-session cases, census-ordering and both query replay cases PASS. Four timing failures reproduce on live; addhost watchdog and manager extra-JS first-run failures are under interleaved controls. Invalid duplicate-port baseline attempt retained as browser-base-2-invalid.log; valid fresh-port baseline2 has2PASS/4knownFAIL. Query fixture setup barrier and in-worktree evidence path pass2/2(45.5s), queued as separate test commit. No deployment.

Second-merge checks:fmt/all-target/all-feature touched-crate clippy PASS; tracer159PASS/0FAIL,check/build/transfer PASS(critical gzip293781/Brotli244262B,deferred49714/43933B). Default agent42+2transport PASS; shim73+detach2/mouse1/pidfd2 PASS; queue1/review8 PASS. Two broad server runs each191PASS/1auth-socket-close FAIL; fresh_delete passes unchanged isolated1.44s and server_setup_echo passes unchanged isolated1.73s. Full unchanged server replay underway; failures retained, no waiver. Imported restart-discovery fixture fails at agent_sessions.rs:197 with ENOENT because its hard-coded ended-sessions scratch parent is absent (same prerequisite recorded by author). With prerequisite present, agent_sessions3/3 and zero-idle/unsolicited-exit1/1 PASS(9.00s). Separate fixture adaptation will create the parent and honor the existing state root; no production change. Fresh staged-head stripped x86 image20205936B (+112160B vs independently built live20093776B), no interpreter; ARM building. Full head browser55PASS/6FAIL: all7 ended-session cases, census-ordering and both query replay cases PASS. Four timing failures reproduce on live; addhost watchdog and manager extra-JS first-run failures are under interleaved controls. Invalid duplicate-port baseline attempt retained as browser-base-2-invalid.log; valid fresh-port baseline2 has2PASS/4knownFAIL. Query fixture setup barrier and in-worktree evidence path pass2/2(45.5s), queued as separate test commit. No deployment.
kayg commented 2026-10-12 05:13:52 +00:00
Author
Owner
Copy link

Confirmed additional #160 fidelity finding on merged production code: ByteQueue.peek() coalesces queued replay and later live Output. If the first replay write awaits paint, the next contiguous write can cross terminal.replay_complete's cursor; suppressReplayResponses stays true for that entire write, dropping fresh live query answers. Production-renderer failing-first test (port5344, default300ms RTT): two raw Unicode replay frames and a fresh query suffix arrive while real paint callbacks are held; received and painted cursors reach the full live suffix, but accepted_input_bytes remains0 for15s (expected>0). evidence/prod4/replay-live-fence-red-runtime.log. Existing two query scenarios remain unchanged.
Fix choice within existing contract: cap a replay write at the canonical received replay cursor. After that exact prefix paints, existing fence release enables replies for the remaining live suffix. Reuse ByteQueue; no protocol, renderer engine, runtime task, periodic wakeup or user interface primitive change. Separate client-fix and fixture/regression commits; measure the boundary and rerun tracer gates.

Confirmed additional #160 fidelity finding on merged production code: ByteQueue.peek() coalesces queued replay and later live Output. If the first replay write awaits paint, the next contiguous write can cross terminal.replay_complete's cursor; suppressReplayResponses stays true for that entire write, dropping fresh live query answers. Production-renderer failing-first test (port5344, default300ms RTT): two raw Unicode replay frames and a fresh query suffix arrive while real paint callbacks are held; received and painted cursors reach the full live suffix, but accepted_input_bytes remains0 for15s (expected>0). evidence/prod4/replay-live-fence-red-runtime.log. Existing two query scenarios remain unchanged. Fix choice within existing contract: cap a replay write at the canonical received replay cursor. After that exact prefix paints, existing fence release enables replies for the remaining live suffix. Reuse ByteQueue; no protocol, renderer engine, runtime task, periodic wakeup or user interface primitive change. Separate client-fix and fixture/regression commits; measure the boundary and rerun tracer gates.
kayg commented 2026-10-12 05:25:44 +00:00
Author
Owner
Copy link

Completed second merge494388821526f8be674eb24a43dab5f955cf28f9. Full default server replay192PASS/0FAIL/15ignored(490.99s), including both previously intermittent auth cases; raw failures retained, no waiver. Agent42+transport2, shim73+detach2/mouse1/pidfd2, queue1/review8, real-session3 and idle-exit1 pass.
Separate follow-ups:4a4ead30 ports reviewed private restart fixtures; e0fb30a9 ports bounded9s exec deadline; each fmt/CLI all-target/all-feature clippy PASS and16/16 restart tests PASS(7.36s/7.34s). c5dc93b0 reuses parent-creating state root: red ENOENT preserved, green3/3/16survivors discovered6ms.
Additional #160 queued-live-query finding repaired in8ab20914, regression/setup coverage38a09ea8. Before: full live suffix received/painted,0 reply bytes for15s. After: all3 production-renderer regressions PASS(56.8s), including exact fence; tracer159PASS/0FAIL/10958 assertions/check/build/transfer PASS. Critical gzip293817/Brotli244107B; deferred49717/43905B. No engine/wire/timer change. First attempted green run hit another job's backend port5355; fresh16404/16405 run is valid.
Code head38a09ea879d64145e8f4ed69213b0c6af7013df0. Rebuilding final x86/ARM images, remote-feature tests and full final browser replay underway; native interleaved perf-VM comparison and final fast gate remain. No deployment.

Completed second merge494388821526f8be674eb24a43dab5f955cf28f9. Full default server replay192PASS/0FAIL/15ignored(490.99s), including both previously intermittent auth cases; raw failures retained, no waiver. Agent42+transport2, shim73+detach2/mouse1/pidfd2, queue1/review8, real-session3 and idle-exit1 pass. Separate follow-ups:4a4ead30 ports reviewed private restart fixtures; e0fb30a9 ports bounded9s exec deadline; each fmt/CLI all-target/all-feature clippy PASS and16/16 restart tests PASS(7.36s/7.34s). c5dc93b0 reuses parent-creating state root: red ENOENT preserved, green3/3/16survivors discovered6ms. Additional #160 queued-live-query finding repaired in8ab20914, regression/setup coverage38a09ea8. Before: full live suffix received/painted,0 reply bytes for15s. After: all3 production-renderer regressions PASS(56.8s), including exact fence; tracer159PASS/0FAIL/10958 assertions/check/build/transfer PASS. Critical gzip293817/Brotli244107B; deferred49717/43905B. No engine/wire/timer change. First attempted green run hit another job's backend port5355; fresh16404/16405 run is valid. Code head38a09ea879d64145e8f4ed69213b0c6af7013df0. Rebuilding final x86/ARM images, remote-feature tests and full final browser replay underway; native interleaved perf-VM comparison and final fast gate remain. No deployment.
kayg commented 2026-10-12 05:45:03 +00:00
Author
Owner
Copy link

Native data-path comparison on infraternal-perf-test, Debian6.12.69, x86_64,4CPUs, CPUWeight10000, shared flock, identical real-PTY fixture, RTT0,1000samples/condition. Interleaved B1/H1/B2/H2/B3/H3. Base1f77a449 imageSHA256 f5fcda1a36f2270e458a1598a35d444f542a826b6d49fc88f0f876497b25fed1; code-head38a09ea8 image b8450a258fa701a2149a73747c8f0de4db787cf047611387fcc4fae23e3b02df.
PTY-echo p50/p99ms: B1 .31/.62, H1 .80/2.70; B2 .77/3.31,H2 .56/3.34; B3 .57/2.25,H3 .39/1.63. Median run p50 .57->.56; median run p99 2.25->2.70, within overlapping run variation (base .62..3.31/head1.63..3.34); all typing references below D41's5ms. No reproducible head slowdown beyond observed noise; no significance claim. All head runs pass native fixture budgets. Base3 fails same-session flood growth23.12ms>16.67ms; retained, not discarded. Median same-flood echo p99 base18.31/head16.12ms. VM load rose .33/.12/.03->1.02/.35/.11 during finite fixture flood bursts; all cleaned by existing fixture. Complete evidence: evidence/prod4/perf-interleaved.log; reproducible runner perf-interleaved.sh. No VM builds/account/host-key changes.

Native data-path comparison on infraternal-perf-test, Debian6.12.69, x86_64,4CPUs, CPUWeight10000, shared flock, identical real-PTY fixture, RTT0,1000samples/condition. Interleaved B1/H1/B2/H2/B3/H3. Base1f77a449 imageSHA256 f5fcda1a36f2270e458a1598a35d444f542a826b6d49fc88f0f876497b25fed1; code-head38a09ea8 image b8450a258fa701a2149a73747c8f0de4db787cf047611387fcc4fae23e3b02df. PTY-echo p50/p99ms: B1 .31/.62, H1 .80/2.70; B2 .77/3.31,H2 .56/3.34; B3 .57/2.25,H3 .39/1.63. Median run p50 .57->.56; median run p99 2.25->2.70, within overlapping run variation (base .62..3.31/head1.63..3.34); all typing references below D41's5ms. No reproducible head slowdown beyond observed noise; no significance claim. All head runs pass native fixture budgets. Base3 fails same-session flood growth23.12ms>16.67ms; retained, not discarded. Median same-flood echo p99 base18.31/head16.12ms. VM load rose .33/.12/.03->1.02/.35/.11 during finite fixture flood bursts; all cleaned by existing fixture. Complete evidence: evidence/prod4/perf-interleaved.log; reproducible runner perf-interleaved.sh. No VM builds/account/host-key changes.
kayg commented 2026-10-12 06:48:01 +00:00
Author
Owner
Copy link

Production batch 4 finished and pushed only release-prod-4 at 74305cc690; no deployment. Ordered merge commits 69babc92 (27db08cf) and 49438882 (14d01feb); excluded CA branches and 64d4e213. Follow-up commits retain production lifetime checks, repair replay/live query suppression with failing-first production-renderer coverage, port reviewed #174 restart fixture fixes, and fence census/Attach fixture setup races.

Final exact-head scripts/verify fast (exit 1, only unchanged historical static cap):

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Full exact-head raw output: /home/kayg/.cache/codex-scratch/prod4/fast-final-corrected-head.log. Committed complete milestone output: evidence/prod4/fast-milestone-retry.log. fmt/clippy and touched default/remote tests pass: agent 42/66, server 192/301, shim 73; 16 restart tests pass. Session scripts and zero-idle canary pass. Tracer check, 159 source tests/10958 assertions, build and transfer budget pass; separate TS fast 36 tests/34462 assertions pass. Raw gate outputs, screenshots and controls: evidence/prod4/; narrative: docs/verification/production-batch-4.md.

Browser final broad run 57/62: four persistent failures reproduce on live 1f77a449; fifth was saved-Close fixture Attach race, repaired and verified 7/7. Replay/query regression suite 3/3. No browser or product budget relaxed.

Perf VM interleaved B1/H1/B2/H2/B3/H3, 1000 samples/condition, flock + CPUWeight10000: PTY p50/p99 ms base .31/.62, .77/3.31, .57/2.25; head .80/2.70, .56/3.34, .39/1.63. Median run percentiles .57/2.25 -> .56/2.70; overlapping ranges and mixed paired deltas, no reproducible slowdown beyond observed noise. All head latency budgets pass. Zero daemon activations at 200 real sessions over 2.203s; RSS5452KiB; 200 exits p50/p99 8979/31935us, max42160us at load57.08/52.71/52.83.

Stripped static x86 base20093776 -> head20205936 bytes (+112160, +.558%); arm18010544 bytes, no PT_INTERP. Historical caps16404816/13817816 already exceeded on live base (x86); not changed. Review checklist recorded in report. Temporary baseline/build targets removed after preserving images/logs. Issues left open.

Production batch 4 finished and pushed only release-prod-4 at 74305cc690140d315772779076408e1371eaeb67; no deployment. Ordered merge commits 69babc92 (27db08cf) and 49438882 (14d01feb); excluded CA branches and 64d4e213. Follow-up commits retain production lifetime checks, repair replay/live query suppression with failing-first production-renderer coverage, port reviewed #174 restart fixture fixes, and fence census/Attach fixture setup races. Final exact-head scripts/verify fast (exit 1, only unchanged historical static cap): ```text +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ``` Full exact-head raw output: /home/kayg/.cache/codex-scratch/prod4/fast-final-corrected-head.log. Committed complete milestone output: evidence/prod4/fast-milestone-retry.log. fmt/clippy and touched default/remote tests pass: agent 42/66, server 192/301, shim 73; 16 restart tests pass. Session scripts and zero-idle canary pass. Tracer check, 159 source tests/10958 assertions, build and transfer budget pass; separate TS fast 36 tests/34462 assertions pass. Raw gate outputs, screenshots and controls: evidence/prod4/; narrative: docs/verification/production-batch-4.md. Browser final broad run 57/62: four persistent failures reproduce on live 1f77a449; fifth was saved-Close fixture Attach race, repaired and verified 7/7. Replay/query regression suite 3/3. No browser or product budget relaxed. Perf VM interleaved B1/H1/B2/H2/B3/H3, 1000 samples/condition, flock + CPUWeight10000: PTY p50/p99 ms base .31/.62, .77/3.31, .57/2.25; head .80/2.70, .56/3.34, .39/1.63. Median run percentiles .57/2.25 -> .56/2.70; overlapping ranges and mixed paired deltas, no reproducible slowdown beyond observed noise. All head latency budgets pass. Zero daemon activations at 200 real sessions over 2.203s; RSS5452KiB; 200 exits p50/p99 8979/31935us, max42160us at load57.08/52.71/52.83. Stripped static x86 base20093776 -> head20205936 bytes (+112160, +.558%); arm18010544 bytes, no PT_INTERP. Historical caps16404816/13817816 already exceeded on live base (x86); not changed. Review checklist recorded in report. Temporary baseline/build targets removed after preserving images/logs. Issues left open.
kayg commented 2026-10-12 06:52:53 +00:00
Author
Owner
Copy link

Starting Settings-return terminal replay verification on branch settings-roundtrip, based on origin/release-prod-4 at 74305cc690140d315772779076408e1371eaeb67. I read #160/#161 histories and the repo contracts. I will compare production base 1f77a449 with this branch across Settings/back, window switching, visibility changes and network reconnect, then run the requested client and browser gates.

Starting Settings-return terminal replay verification on branch `settings-roundtrip`, based on `origin/release-prod-4` at `74305cc690140d315772779076408e1371eaeb67`. I read #160/#161 histories and the repo contracts. I will compare production base `1f77a449` with this branch across Settings/back, window switching, visibility changes and network reconnect, then run the requested client and browser gates.
kayg commented 2026-10-12 07:26:40 +00:00
Author
Owner
Copy link

Finding: the desktop Settings → Shortcuts → About → Console path increased mock PTY accepted_input_bytes from 59 to 299 (+240) on commit 74305cc690. The new spec failed at test/settings-query-roundtrip.spec.ts:134 after one navigation cycle. I am capturing the new bytes to distinguish replayed VT replies from UI input before changing behavior.

Finding: the desktop Settings → Shortcuts → About → Console path increased mock PTY accepted_input_bytes from 59 to 299 (+240) on commit 74305cc690140d315772779076408e1371eaeb67. The new spec failed at test/settings-query-roundtrip.spec.ts:134 after one navigation cycle. I am capturing the new bytes to distinguish replayed VT replies from UI input before changing behavior.
kayg commented 2026-10-12 07:51:05 +00:00
Author
Owner
Copy link

Correction to the earlier input finding: the +240/+310 bytes came from the mock echoing DA2 replies back as terminal output, which created a test-only query loop. The fixture now disables echo, matching the requested stty -echo capture. With echo disabled, HEAD passed all five Settings/section/Console cycles and a reload produced a new cursor-zero attach while accepted_input_bytes and screen text stayed unchanged. The run then exposed a harness issue: Chromium's offline toggle alone did not close an already-open WebSocket. I added a deterministic socket drop while offline; reconnect verification is pending.

Correction to the earlier input finding: the +240/+310 bytes came from the mock echoing DA2 replies back as terminal output, which created a test-only query loop. The fixture now disables echo, matching the requested `stty -echo` capture. With echo disabled, HEAD passed all five Settings/section/Console cycles and a reload produced a new cursor-zero attach while accepted_input_bytes and screen text stayed unchanged. The run then exposed a harness issue: Chromium's offline toggle alone did not close an already-open WebSocket. I added a deterministic socket drop while offline; reconnect verification is pending.
kayg commented 2026-10-12 08:13:05 +00:00
Author
Owner
Copy link

Matched Settings-return regression comparison completed on production builds.

Base 1f77a449 fails both viewports at the first Settings → Shortcuts → About → Go to Console return, with shell echo disabled: mobile accepted PTY bytes 39 → 229 (+190); desktop 39 → 199 (+160).

Head 74305cc690 passes both viewports through five cycles, reload, visibility change and network reconnect: mobile and desktop each 29 → 29 accepted bytes, output sequence 160, cursor-zero replay observed on reload, reconnect attach delta 1, and unchanged screen text.

The first head failure was a test-fixture echo loop; the mock now models stty -echo. The test double also answers the product canvas's host.facts.read request so its socket stays attached. No product code fix was needed; the merged replay fence passed this path.

Matched Settings-return regression comparison completed on production builds. Base 1f77a449 fails both viewports at the first Settings → Shortcuts → About → Go to Console return, with shell echo disabled: mobile accepted PTY bytes 39 → 229 (+190); desktop 39 → 199 (+160). Head 74305cc690140d315772779076408e1371eaeb67 passes both viewports through five cycles, reload, visibility change and network reconnect: mobile and desktop each 29 → 29 accepted bytes, output sequence 160, cursor-zero replay observed on reload, reconnect attach delta 1, and unchanged screen text. The first head failure was a test-fixture echo loop; the mock now models stty -echo. The test double also answers the product canvas's host.facts.read request so its socket stays attached. No product code fix was needed; the merged replay fence passed this path.
kayg commented 2026-10-12 08:18:36 +00:00
Author
Owner
Copy link

Step complete: commit 66f83411 adds preview-only product-canvas probes and deterministic host facts in the test double. The full Settings roundtrip spec passed on HEAD on both viewports (29 → 29 accepted bytes; cursor-zero replay observed; reconnect attach delta 1). The matched base remains red on both at the first Settings return (+190 mobile, +160 desktop bytes). bun run check passed before commit.

Step complete: commit 66f83411 adds preview-only product-canvas probes and deterministic host facts in the test double. The full Settings roundtrip spec passed on HEAD on both viewports (29 → 29 accepted bytes; cursor-zero replay observed; reconnect attach delta 1). The matched base remains red on both at the first Settings return (+190 mobile, +160 desktop bytes). `bun run check` passed before commit.
kayg commented 2026-10-12 08:28:34 +00:00
Author
Owner
Copy link

Shared the terminal query output fixture between the live and replay specs, retaining DA3 and adding the extended keyboard query. Commit 9cf15781. The replay spec passed all 3 cases (live query, snapshot repaint, queued query); bun run check passed.

Shared the terminal query output fixture between the live and replay specs, retaining DA3 and adding the extended keyboard query. Commit 9cf15781. The replay spec passed all 3 cases (live query, snapshot repaint, queued query); bun run check passed.
kayg commented 2026-10-12 08:38:21 +00:00
Author
Owner
Copy link

Step 3 committed as f9f4b045. Added the product-canvas Settings roundtrip spec (five returns, window changes, cursor-zero reload, visibilitychange and reconnect). Matched run: base 1f77a449 accepts +200 bytes mobile/+180 desktop on the first return; head f9f4b045 remains 29→29 bytes in both. Head output sequence 164; reload cursor-zero and reconnect each add one attach; screen text stays unchanged. bun run check passed.

Step 3 committed as f9f4b045. Added the product-canvas Settings roundtrip spec (five returns, window changes, cursor-zero reload, visibilitychange and reconnect). Matched run: base 1f77a449 accepts +200 bytes mobile/+180 desktop on the first return; head f9f4b045 remains 29→29 bytes in both. Head output sequence 164; reload cursor-zero and reconnect each add one attach; screen text stays unchanged. `bun run check` passed.
kayg commented 2026-10-12 08:55:36 +00:00
Author
Owner
Copy link

Perf gate setup: NetBird SSH reaches infraternal-perf-test. /var/lock/perf-bench.lock is held by active processes (flock -n returns 1); no holder file is present, so the current holder is unknown. Waiting for that slot to release before transferring the build or running timing tests. No perf measurements have been taken on another host.

Perf gate setup: NetBird SSH reaches infraternal-perf-test. `/var/lock/perf-bench.lock` is held by active processes (`flock -n` returns 1); no holder file is present, so the current holder is unknown. Waiting for that slot to release before transferring the build or running timing tests. No perf measurements have been taken on another host.
kayg commented 2026-10-12 09:13:21 +00:00
Author
Owner
Copy link

Orchestrator: DEPLOYED to production at 09:13 UTC (14:43 IST): release-prod-4 @ 3aec316e = live 1f77a449 + terminal fidelity (#160/#161) + ended sessions (#168) + live web fixes (3w) + settings rows (text never collides). Binaries built from 61bdbd9f (later merges are web-only); sha256 prefixes x86 2af382ef / arm 8fd4d67f match on host. healthz 200, public 200, 0 errors in journal, 23 shims survived the restart. Settings round-trip evidence (#161): base 1f77a449 accepted 190-200 stray PTY bytes after Settings return; head 0 across five cycles, background/foreground and reconnect. Restart re-locked the CA: owner unlock needed. Perf VM latency A/B (prod-batch-4 report): p50/p99 0.57/2.25 → 0.56/2.70 ms, overlapping.

Orchestrator: DEPLOYED to production at 09:13 UTC (14:43 IST): release-prod-4 @ 3aec316e = live 1f77a449 + terminal fidelity (#160/#161) + ended sessions (#168) + live web fixes (3w) + settings rows (text never collides). Binaries built from 61bdbd9f (later merges are web-only); sha256 prefixes x86 2af382ef / arm 8fd4d67f match on host. healthz 200, public 200, 0 errors in journal, 23 shims survived the restart. Settings round-trip evidence (#161): base 1f77a449 accepted 190-200 stray PTY bytes after Settings return; head 0 across five cycles, background/foreground and reconnect. Restart re-locked the CA: owner unlock needed. Perf VM latency A/B (prod-batch-4 report): p50/p99 0.57/2.25 → 0.56/2.70 ms, overlapping.
kayg commented 2026-10-12 09:16:26 +00:00
Author
Owner
Copy link

Perf-VM finding (infraternal-perf-test, Intel i9-9900K KVM, 4 vCPUs; load 0.38/0.23/0.39): combined Playwright run on port 4817 passed all 7 dead-session cases, including the one-second inventory gate. Terminal sign-in p50/p99 was 3929.70/4012.00 ms (≤5000); reconnect p50/p99 was 695.90/963.40 ms (900 ms budget, FAIL). The final access-screen case hit a test-double socket hang-up. Isolating terminal.spec.ts on a fresh port to distinguish suite interaction; no product fix made.

Perf-VM finding (infraternal-perf-test, Intel i9-9900K KVM, 4 vCPUs; load 0.38/0.23/0.39): combined Playwright run on port 4817 passed all 7 dead-session cases, including the one-second inventory gate. Terminal sign-in p50/p99 was 3929.70/4012.00 ms (≤5000); reconnect p50/p99 was 695.90/963.40 ms (900 ms budget, FAIL). The final access-screen case hit a test-double socket hang-up. Isolating `terminal.spec.ts` on a fresh port to distinguish suite interaction; no product fix made.
kayg commented 2026-10-12 09:21:25 +00:00
Author
Owner
Copy link

Isolated terminal.spec.ts on infraternal-perf-test (Intel i9-9900K KVM, 4 vCPUs; load 0.25/0.39/0.42, port 4819, configured RTT 300 ms): 1/3 tests passed. Sign-in p50/p99 3975.70/5039.90 ms (5,000 ms limit); reconnect p50/p99 698.70/997.50 ms (900 ms limit); access-screen render upper-bound p99 setup/sign-in 2305.60/2194.90 ms (1,000 ms limit). Their first-contentful-paint p99s were 2242.90/2120.80 ms. Running the same suite with RTT 0 as a local-rendering diagnostic; the 300 ms profile failures remain recorded.

Isolated `terminal.spec.ts` on infraternal-perf-test (Intel i9-9900K KVM, 4 vCPUs; load 0.25/0.39/0.42, port 4819, configured RTT 300 ms): 1/3 tests passed. Sign-in p50/p99 3975.70/5039.90 ms (5,000 ms limit); reconnect p50/p99 698.70/997.50 ms (900 ms limit); access-screen render upper-bound p99 setup/sign-in 2305.60/2194.90 ms (1,000 ms limit). Their first-contentful-paint p99s were 2242.90/2120.80 ms. Running the same suite with RTT 0 as a local-rendering diagnostic; the 300 ms profile failures remain recorded.
kayg commented 2026-10-12 09:34:57 +00:00
Author
Owner
Copy link

verify fast cannot complete on infraternal-perf-test: after the initial make/perl prerequisite was satisfied from the job cache, the Rust gates reported cargo: command not found, the Zig native formatter was absent, and the static-build gate requires cargo. The VM has no Nix fallback. No Rust files changed. I’m running the required branch-head full gate on the worktree; the requested timing suites and bun test src were run on the perf VM.

`verify fast` cannot complete on infraternal-perf-test: after the initial make/perl prerequisite was satisfied from the job cache, the Rust gates reported `cargo: command not found`, the Zig native formatter was absent, and the static-build gate requires cargo. The VM has no Nix fallback. No Rust files changed. I’m running the required branch-head full gate on the worktree; the requested timing suites and `bun test src` were run on the perf VM.
kayg commented 2026-10-12 10:12:46 +00:00
Author
Owner
Copy link

Full scripts/verify fast finding at f9f4b045: fmt, VT native fmt, clippy and cargo-deny pass; agent_queues fails with terminal unavailable / resource_unavailable in saturated_terminal_queues_preserve_every_byte_and_daemon_liveness. The static build is 20,205,936 bytes against a 16,404,816-byte cap (baseline 16,142,672 + 262,144). This lane changes only tracer test harness/spec files; Rust files are unchanged from 74305cc6. I am checking reproducibility and the base build before handoff.

Full `scripts/verify fast` finding at `f9f4b045`: fmt, VT native fmt, clippy and cargo-deny pass; `agent_queues` fails with `terminal unavailable` / `resource_unavailable` in `saturated_terminal_queues_preserve_every_byte_and_daemon_liveness`. The static build is 20,205,936 bytes against a 16,404,816-byte cap (baseline 16,142,672 + 262,144). This lane changes only tracer test harness/spec files; Rust files are unchanged from `74305cc6`. I am checking reproducibility and the base build before handoff.
kayg commented 2026-10-12 10:16:16 +00:00
Author
Owner
Copy link

Follow-up to the full-gate finding: reran cargo test --locked -p infraternal --test agent_queues -- --nocapture on the branch in isolation; it passed (1 passed, 35.14s). The original full-gate failure is not yet attributed. Rust and build configuration files are unchanged from 74305cc6; I will rerun the full gate after correcting commit-message formatting. Static size remains 20,205,936 bytes vs 16,404,816 cap.

Follow-up to the full-gate finding: reran `cargo test --locked -p infraternal --test agent_queues -- --nocapture` on the branch in isolation; it passed (`1 passed`, 35.14s). The original full-gate failure is not yet attributed. Rust and build configuration files are unchanged from `74305cc6`; I will rerun the full gate after correcting commit-message formatting. Static size remains 20,205,936 bytes vs 16,404,816 cap.
kayg commented 2026-10-12 10:21:06 +00:00
Author
Owner
Copy link

Final-head gate rerun after commit-message cleanup at 051d0a40: agent_queues passes; one unrelated infraternal-agent unit test, daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write, fails in the parallel suite at daemon_readiness_tests.rs:273 (left: true, right: false). Rerunning that test alone passes (1 passed). The static release binary remains 20,205,936 bytes vs the 16,404,816-byte cap. This lane changes only apps/tracer/*; Rust/build configuration is unchanged. Exact final gate output is being retained for handoff.

Final-head gate rerun after commit-message cleanup at `051d0a40`: `agent_queues` passes; one unrelated `infraternal-agent` unit test, `daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write`, fails in the parallel suite at `daemon_readiness_tests.rs:273` (`left: true`, `right: false`). Rerunning that test alone passes (`1 passed`). The static release binary remains 20,205,936 bytes vs the 16,404,816-byte cap. This lane changes only `apps/tracer/*`; Rust/build configuration is unchanged. Exact final gate output is being retained for handoff.
kayg commented 2026-10-12 10:22:18 +00:00
Author
Owner
Copy link

Finished and pushed settings-roundtrip at 051d0a40c158270fdffb86bb4b87cd6d08419ac0.

The Settings roundtrip spec passes on mobile and desktop: 5 cycles each, input log 29 to 29, output sequence 164, cursor-zero reload and reconnect each attach once, and the screen remains unchanged. On base 1f77a449, the first return accepted +200 mobile and +180 desktop PTY bytes. bun run check, bun test src (159 passed), the query replay specs (3 passed), the new Settings spec (2 passed), and dead-session.spec.ts (7 passed) passed. The production build transfer budget passed.

The final full gate's Rust test row failed only in the parallel run at daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write; rerunning that test alone passed 1/1. agent_queues passed in the final full-gate run (its first run failed; isolated rerun also passed). Static binary size is 20,205,936 bytes against a 16,404,816-byte cap. This lane changes only apps/tracer/*; Rust and build configuration are unchanged.

Final scripts/verify fast output:

advisories ok, bans ok, licenses ok, sources ok

==> static builds
    Finished `release` profile [optimized] target(s) in 1.02s
/home/kayg/.cache/codex-scratch/settings-roundtrip/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 20205936 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 20205936 bytes

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | FAIL (101)   |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+
Finished and pushed `settings-roundtrip` at `051d0a40c158270fdffb86bb4b87cd6d08419ac0`. The Settings roundtrip spec passes on mobile and desktop: 5 cycles each, input log 29 to 29, output sequence 164, cursor-zero reload and reconnect each attach once, and the screen remains unchanged. On base `1f77a449`, the first return accepted +200 mobile and +180 desktop PTY bytes. `bun run check`, `bun test src` (159 passed), the query replay specs (3 passed), the new Settings spec (2 passed), and `dead-session.spec.ts` (7 passed) passed. The production build transfer budget passed. The final full gate's Rust test row failed only in the parallel run at `daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write`; rerunning that test alone passed 1/1. `agent_queues` passed in the final full-gate run (its first run failed; isolated rerun also passed). Static binary size is 20,205,936 bytes against a 16,404,816-byte cap. This lane changes only `apps/tracer/*`; Rust and build configuration are unchanged. Final `scripts/verify fast` output: ```text advisories ok, bans ok, licenses ok, sources ok ==> static builds Finished `release` profile [optimized] target(s) in 1.02s /home/kayg/.cache/codex-scratch/settings-roundtrip/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 20205936 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 20205936 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | FAIL (101) | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```
kayg commented 2026-10-12 10:22:54 +00:00
Author
Owner
Copy link

Additional measured evidence from infraternal-perf-test (Intel i9-9900K KVM, 4 vCPU; Bun 1.4.2, Node 22.23.3, Chromium 149.0.7827.55):

  • bun test src: 159 passed, 0 failed, 10,958 assertions; starting load average 0.01/0.32/0.50. The 1,000-node layout case measured 13.08 ms against 25 ms.
  • apps/tracer/test/dead-session.spec.ts: 7 passed at 300 ms mock RTT; starting load 0.50/0.61/0.57.
  • apps/tracer/test/terminal.spec.ts at 300 ms mock RTT, starting load 0.25/0.39/0.42: sign-in p99 5,039.9 ms vs 5,000 ms budget; reconnect p99 997.5 ms vs 900 ms; access-screen render p99 2,305.6 ms vs 1,000 ms. At RTT 0 the isolated access-screen case passes (render p99 439.7 ms setup, 199.3 ms sign-in; FCP p99 333.2/125.8 ms). The full RTT-0 terminal suite is not a valid timing pass because its predictive-echo test requires RTT above 60 ms.
  • Default production build bun run transfer-budget.ts: critical gzip 293,910/307,200 bytes and Brotli 244,178/256,000; deferred gzip 49,717/51,200 and Brotli 43,876/45,056; largest on-demand chunk gzip 15,093/20,480 and Brotli 13,402/18,432. Font bundles are under budget.

The Settings replay browser spec passes 2/2 on this VM; its assertions are functional, not timing budgets. See apps/tracer/test/settings-query-roundtrip.spec.ts, apps/tracer/test/dead-session.spec.ts, apps/tracer/test/terminal.spec.ts, and transfer-budget.ts.

Additional measured evidence from `infraternal-perf-test` (Intel i9-9900K KVM, 4 vCPU; Bun 1.4.2, Node 22.23.3, Chromium 149.0.7827.55): - `bun test src`: 159 passed, 0 failed, 10,958 assertions; starting load average 0.01/0.32/0.50. The 1,000-node layout case measured 13.08 ms against 25 ms. - `apps/tracer/test/dead-session.spec.ts`: 7 passed at 300 ms mock RTT; starting load 0.50/0.61/0.57. - `apps/tracer/test/terminal.spec.ts` at 300 ms mock RTT, starting load 0.25/0.39/0.42: sign-in p99 5,039.9 ms vs 5,000 ms budget; reconnect p99 997.5 ms vs 900 ms; access-screen render p99 2,305.6 ms vs 1,000 ms. At RTT 0 the isolated access-screen case passes (render p99 439.7 ms setup, 199.3 ms sign-in; FCP p99 333.2/125.8 ms). The full RTT-0 terminal suite is not a valid timing pass because its predictive-echo test requires RTT above 60 ms. - Default production build `bun run transfer-budget.ts`: critical gzip 293,910/307,200 bytes and Brotli 244,178/256,000; deferred gzip 49,717/51,200 and Brotli 43,876/45,056; largest on-demand chunk gzip 15,093/20,480 and Brotli 13,402/18,432. Font bundles are under budget. The Settings replay browser spec passes 2/2 on this VM; its assertions are functional, not timing budgets. See `apps/tracer/test/settings-query-roundtrip.spec.ts`, `apps/tracer/test/dead-session.spec.ts`, `apps/tracer/test/terminal.spec.ts`, and `transfer-budget.ts`.
kayg commented 2026-10-19 02:34:32 +00:00
Author
Owner
Copy link

Started query-replies (#206 item 1, #160) on branch query-replies, based on origin/dev at 6f7cde60a430590a20f0b9384fc423df465bde7f. The published origin/dev matches this base; no origin/query-replies branch exists. I’m tracing the current terminal input and query-answer paths before adding the multi-viewer, reconnect and late-reply regressions.

Started query-replies (#206 item 1, #160) on branch `query-replies`, based on `origin/dev` at `6f7cde60a430590a20f0b9384fc423df465bde7f`. The published `origin/dev` matches this base; no `origin/query-replies` branch exists. I’m tracing the current terminal input and query-answer paths before adding the multi-viewer, reconnect and late-reply regressions.
kayg commented 2026-10-19 02:35:27 +00:00
Author
Owner
Copy link

Started query-replies (#206 item 1, #160) on branch query-replies, based on origin/dev at 6f7cde60a430590a20f0b9384fc423df465bde7f. The published origin/dev matches this base; no origin/query-replies branch exists. I’m tracing the current terminal input and query-answer paths before adding the multi-viewer, reconnect and late-reply regressions.

Started query-replies (#206 item 1, #160) on branch `query-replies`, based on `origin/dev` at `6f7cde60a430590a20f0b9384fc423df465bde7f`. The published `origin/dev` matches this base; no `origin/query-replies` branch exists. I’m tracing the current terminal input and query-answer paths before adding the multi-viewer, reconnect and late-reply regressions.
kayg commented 2026-10-19 02:54:58 +00:00
Author
Owner
Copy link

Reproduced the duplicate path from #160 with a tracer browser build and test-double server: one viewer sends 15 query-reply bytes; with three attached viewers and the third typing last, accepted input deltas are [15, 15, 15] (expected [0, 0, 15]). A split CPR completed 1.1 seconds after its response window also sends 6 bytes (expected 0). These are browser-to-test-double measurements, not a real-shim PTY measurement. Evidence: three-viewer run, late-reply run.

Source review finds that terminal.onData sends both keystrokes and renderer replies as the same Input; leg A Input carries only in_seq and bytes, and the shim Input carries only bytes. With those frozen layouts, the shim/server cannot distinguish replies from typing or bind a reply to the output cursor that elicited it. A byte/timing heuristic could discard legitimate keystrokes and cannot safely reject a late reply after reconnect. The #206 brief requires stopping if a wire change is needed; the implementation is paused pending an owner decision on an additive reply marker carrying its originating output cursor and on query-expiry semantics.

Reproduced the duplicate path from #160 with a tracer browser build and test-double server: one viewer sends 15 query-reply bytes; with three attached viewers and the third typing last, accepted input deltas are `[15, 15, 15]` (expected `[0, 0, 15]`). A split CPR completed 1.1 seconds after its response window also sends 6 bytes (expected 0). These are browser-to-test-double measurements, not a real-shim PTY measurement. Evidence: [three-viewer run](https://git.kayg.org/attachments/4d7eba78-deb9-4598-97ef-b992b79fffad), [late-reply run](https://git.kayg.org/attachments/cc14f2eb-8c7d-4988-8d23-088d71f502c6). Source review finds that `terminal.onData` sends both keystrokes and renderer replies as the same `Input`; leg A `Input` carries only `in_seq` and bytes, and the shim `Input` carries only bytes. With those frozen layouts, the shim/server cannot distinguish replies from typing or bind a reply to the output cursor that elicited it. A byte/timing heuristic could discard legitimate keystrokes and cannot safely reject a late reply after reconnect. The #206 brief requires stopping if a wire change is needed; the implementation is paused pending an owner decision on an additive reply marker carrying its originating output cursor and on query-expiry semantics.
kayg commented 2026-10-19 02:59:37 +00:00
Author
Owner
Copy link

Follow-up to #160: the browser reproductions and source review are recorded on #206. The three-viewer test sees 15 accepted reply bytes from each viewer instead of only the last typist [0, 0, 15]; the late CPR test sends 6 bytes after its 1.1-second response window instead of 0. bun run check passed ($ bun x tsc --project tsconfig.json, exit 0). A reconnect-mid-query browser case is present in the worktree but remains unrun because all shared build slots were occupied. These measurements end at the test-double server, not a real shim PTY.

No product/protocol change or commit was made. Per the #206 brief, work stops at the frozen-wire blocker pending an owner decision on a parser-reply marker with its originating output cursor/query identity and reply-expiry semantics. scripts/verify fast was not run because no implementation is available to gate.

Follow-up to #160: the browser reproductions and source review are recorded on #206. The three-viewer test sees 15 accepted reply bytes from each viewer instead of only the last typist `[0, 0, 15]`; the late CPR test sends 6 bytes after its 1.1-second response window instead of 0. `bun run check` passed (`$ bun x tsc --project tsconfig.json`, exit 0). A reconnect-mid-query browser case is present in the worktree but remains unrun because all shared build slots were occupied. These measurements end at the test-double server, not a real shim PTY. No product/protocol change or commit was made. Per the #206 brief, work stops at the frozen-wire blocker pending an owner decision on a parser-reply marker with its originating output cursor/query identity and reply-expiry semantics. `scripts/verify fast` was not run because no implementation is available to gate.
kayg commented 2026-10-19 04:16:48 +00:00
Author
Owner
Copy link

Started query-replies-d307 from origin/query-replies 372ec87ca; merged origin/dev (D307) as 86eca8e1a5. Read #160 and #206 histories. Existing red browser specs cover duplicate replies and late split CPR.

Proposed additive contract: a reply-marked Input has its own terminal frame discriminator (legacy 0x10 bytes stay byte-for-byte unchanged), query identity = session output ESC byte offset, bounded reply body, and a separate unsequenced reply lane so refused replies cannot create typing cursor gaps. Capability negotiation gates the extension. Server tracks bounded query state before output delivery and admits one structurally matching response. Expiry starts at the query ESC, including fragmented queries; use 1 second (more than three 300 ms RTTs, matching the existing late-reply regression). Marked non-reply bytes are refused, never reclassified as typing. No reply content is logged. No new dependencies.

Started query-replies-d307 from origin/query-replies 372ec87ca; merged origin/dev (D307) as 86eca8e1a5d8714f7884ab0c0276224892e08aac. Read #160 and #206 histories. Existing red browser specs cover duplicate replies and late split CPR. Proposed additive contract: a reply-marked Input has its own terminal frame discriminator (legacy 0x10 bytes stay byte-for-byte unchanged), query identity = session output ESC byte offset, bounded reply body, and a separate unsequenced reply lane so refused replies cannot create typing cursor gaps. Capability negotiation gates the extension. Server tracks bounded query state before output delivery and admits one structurally matching response. Expiry starts at the query ESC, including fragmented queries; use 1 second (more than three 300 ms RTTs, matching the existing late-reply regression). Marked non-reply bytes are refused, never reclassified as typing. No reply content is logged. No new dependencies.
kayg commented 2026-10-19 04:20:07 +00:00
Author
Owner
Copy link

Contract 4ac003677 and codec 5878aaf46 completed (D307). Legacy 0x10 unchanged; optional browser Input.replyTo uses bounded 0x17. Rust protocol tests 8/8; browser codec 6/6, 87 assertions; protocol all-target Clippy, fmt and tracer check pass. Red regression failed with missing InputReply variant before implementation. No dependencies added. Query scanner/arbitration and independent PTY reply delivery remain in progress.

Contract 4ac003677 and codec 5878aaf46 completed (D307). Legacy 0x10 unchanged; optional browser Input.replyTo uses bounded 0x17. Rust protocol tests 8/8; browser codec 6/6, 87 assertions; protocol all-target Clippy, fmt and tracer check pass. Red regression failed with missing InputReply variant before implementation. No dependencies added. Query scanner/arbitration and independent PTY reply delivery remain in progress.
kayg commented 2026-10-19 04:30:45 +00:00
Author
Owner
Copy link

Review findings addressed in progress: (1) release query state on ordered terminal.exited, with a >4096 completed-session regression; (2) bind window/status/capability response types and validate all dynamic/palette color query fields; (3) older surviving shims cannot admit an independent reply without changing their frozen typing cursor/geometry. The additive shim capability is therefore required. Unsupported old sessions now emit one validated terminal.query_replies_unavailable notice telling the new browser to open a new shell, rather than silently dropping replies. Old browsers still send unchanged plain Input and never receive the new notice. No sessions are ended automatically.

Initial server query unit run passed 5/5 (duplicate fan-out/replay, incomplete-query deadline, invalid bytes, 100000 marked unknown replies allocating no sessions, completed-session slot release). Current working tree adds further grammar regressions and a real-server/PTY three-viewer spec. Full iteration gate is queued through build-slot.

Review findings addressed in progress: (1) release query state on ordered terminal.exited, with a >4096 completed-session regression; (2) bind window/status/capability response types and validate all dynamic/palette color query fields; (3) older surviving shims cannot admit an independent reply without changing their frozen typing cursor/geometry. The additive shim capability is therefore required. Unsupported old sessions now emit one validated terminal.query_replies_unavailable notice telling the new browser to open a new shell, rather than silently dropping replies. Old browsers still send unchanged plain Input and never receive the new notice. No sessions are ended automatically. Initial server query unit run passed 5/5 (duplicate fan-out/replay, incomplete-query deadline, invalid bytes, 100000 marked unknown replies allocating no sessions, completed-session slot release). Current working tree adds further grammar regressions and a real-server/PTY three-viewer spec. Full iteration gate is queued through build-slot.
kayg commented 2026-10-19 04:38:52 +00:00
Author
Owner
Copy link

Browser query-identity scanner committed at 17841f9ab: bounded streaming state, stable absolute ESC offsets across every byte split, control-string exclusion and OSC overflow recovery. Tracer check passes; scanner 4/4 tests, 65 assertions. Protocol plus scanner targeted tests pass 10/10, 155 assertions, including a new shared 0x17 golden vector above 2^53 (pending its own test commit). Full iterate now holds a build slot and is running.

Browser query-identity scanner committed at 17841f9ab: bounded streaming state, stable absolute ESC offsets across every byte split, control-string exclusion and OSC overflow recovery. Tracer check passes; scanner 4/4 tests, 65 assertions. Protocol plus scanner targeted tests pass 10/10, 155 assertions, including a new shared 0x17 golden vector above 2^53 (pending its own test commit). Full iterate now holds a build slot and is running.
kayg commented 2026-10-19 04:46:28 +00:00
Author
Owner
Copy link

First iterate found exhaustive-match updates required for the new reply command in agent queue tests and the new compatibility notice in the server secondary-route normalizer; also one literal-format lint. Those are repaired; the rerun is queued through build-slot. No failing gate is waived.

Lifecycle follow-up: an exited shell without viewers emits no browser exit event. Query-state retirement now also uses the existing authoritative embedded and remote session inventory watchers, scoped by host and reading the latest census under the output-admission mutex. This adds no timer and no database work to typing. A host-scope/watermark regression was added. Replies now retain their original expiry through the bounded host command queue; queued/expired replies cannot enter retained typing input.

First iterate found exhaustive-match updates required for the new reply command in agent queue tests and the new compatibility notice in the server secondary-route normalizer; also one literal-format lint. Those are repaired; the rerun is queued through build-slot. No failing gate is waived. Lifecycle follow-up: an exited shell without viewers emits no browser exit event. Query-state retirement now also uses the existing authoritative embedded and remote session inventory watchers, scoped by host and reading the latest census under the output-admission mutex. This adds no timer and no database work to typing. A host-scope/watermark regression was added. Replies now retain their original expiry through the bounded host command queue; queued/expired replies cannot enter retained typing input.
kayg commented 2026-10-19 04:58:29 +00:00
Author
Owner
Copy link

D307 scanner measurement on perf VM (4 vCPU, i9-9900K, Bun 1.4.2, load 0.09/0.03/0.00, lock + CPUWeight=10000), 31 samples × 1 MiB: plain p50 0.983212→0.016583 ms, p99 1.121142→0.089832 ms; styled p50 25.337297→11.420432 ms, p99 30.057942→14.217195 ms. Initial per-span search regressed styled output; final implementation searches plain whole chunks and avoids query classification for ordinary CSI finals. Typing latency comparison remains pending.
Initial receipt
Final receipt
Touched-crate fmt/clippy and native query tests pass, TS scanner/codec 11 tests / 157 assertions pass. Browser 8/9 passed; reconnect case failed before emitting its query because the fixture attributed new sockets using stale connection IDs. Replacing that inference with a per-page fixture label, then rerunning.

D307 scanner measurement on perf VM (4 vCPU, i9-9900K, Bun 1.4.2, load 0.09/0.03/0.00, lock + CPUWeight=10000), 31 samples × 1 MiB: plain p50 0.983212→0.016583 ms, p99 1.121142→0.089832 ms; styled p50 25.337297→11.420432 ms, p99 30.057942→14.217195 ms. Initial per-span search regressed styled output; final implementation searches plain whole chunks and avoids query classification for ordinary CSI finals. Typing latency comparison remains pending. [Initial receipt](https://git.kayg.org/attachments/3228af88-fbbe-4ffc-bbf9-fac8e734f9bc) [Final receipt](https://git.kayg.org/attachments/eef84f4f-fc0f-45f3-856c-fc33510933f2) Touched-crate fmt/clippy and native query tests pass, TS scanner/codec 11 tests / 157 assertions pass. Browser 8/9 passed; reconnect case failed before emitting its query because the fixture attributed new sockets using stale connection IDs. Replacing that inference with a per-page fixture label, then rerunning.
kayg commented 2026-10-19 05:00:34 +00:00
Author
Owner
Copy link

Completed atomic slices: 86cdd8def freezes the u64 marked-input shared golden vector and stable errors; 348d3b681 isolates shim replies from writer cursors/geometry; 67ad42d65 routes both infraternal-agent paths with explicit surviving-shim compatibility notice; f42a47575 adds server arbitration, original-deadline queue validation and host-census cleanup. Touched-crate fmt/clippy and tests pass (protocol 8; shim queue and fragmented bounds; terminal notice 3; server parser/state 9 plus deadline and compatibility tests). Independent incremental review found no new material correctness issue.
Reconnect browser fixture finding: after the third viewer types, its shared session input cursor was returned to all reconnecting viewers, disconnecting the two idle viewers. Added fixture-local viewer identity and individual cursor retention; production typing cursors already have separate ownership. Retry in progress. Full head gate/perf/size comparisons remain pending.

Completed atomic slices: 86cdd8def freezes the u64 marked-input shared golden vector and stable errors; 348d3b681 isolates shim replies from writer cursors/geometry; 67ad42d65 routes both infraternal-agent paths with explicit surviving-shim compatibility notice; f42a47575 adds server arbitration, original-deadline queue validation and host-census cleanup. Touched-crate fmt/clippy and tests pass (protocol 8; shim queue and fragmented bounds; terminal notice 3; server parser/state 9 plus deadline and compatibility tests). Independent incremental review found no new material correctness issue. Reconnect browser fixture finding: after the third viewer types, its shared session input cursor was returned to all reconnecting viewers, disconnecting the two idle viewers. Added fixture-local viewer identity and individual cursor retention; production typing cursors already have separate ownership. Retry in progress. Full head gate/perf/size comparisons remain pending.
kayg commented 2026-10-19 05:10:58 +00:00
Author
Owner
Copy link

a0bc91b20 adds the real server → infraternal agent → shim → raw PTY regression: browser + two protocol viewers attached; program reports exactly one CPR response, then ordinary input prints TYPING_OK after 10,000 unknown marked responses and known-query invalid marked text. Spec passes. Receipt includes the preceding fixture-only reconnect assertion failure; final full browser suite is running separately.
Real PTY result
Functional run receipt
Independent screenshot review confirms result and typing; observes an existing clipped Appearance control at the outer viewport and prompt marker blocks. No layout/component changes in this task.
b0ba693b0 commits renderer marking outside the typing/replay queues. Reconnect fixture now retains individual viewer cursors; expiry is explicit and duplicate count is asserted independently of variable-length CPR coordinates. Native/JS sizes and end-to-end typing measurements remain pending.

a0bc91b20 adds the real server → infraternal agent → shim → raw PTY regression: browser + two protocol viewers attached; program reports exactly one CPR response, then ordinary input prints TYPING_OK after 10,000 unknown marked responses and known-query invalid marked text. Spec passes. Receipt includes the preceding fixture-only reconnect assertion failure; final full browser suite is running separately. ![Real PTY result](https://git.kayg.org/attachments/2731ca00-72a9-4660-9567-e54720f2db99) [Functional run receipt](https://git.kayg.org/attachments/f6ac45ee-66bf-4a64-a7fe-9c36e08c1ecb) Independent screenshot review confirms result and typing; observes an existing clipped Appearance control at the outer viewport and prompt marker blocks. No layout/component changes in this task. b0ba693b0 commits renderer marking outside the typing/replay queues. Reconnect fixture now retains individual viewer cursors; expiry is explicit and duplicate count is asserted independently of variable-length CPR coordinates. Native/JS sizes and end-to-end typing measurements remain pending.
kayg commented 2026-10-19 05:14:29 +00:00
Author
Owner
Copy link

46900e0b9 completes the browser/test-double slice. All 9 affected specs pass: three viewers admit one response per query, reconnect preserves expiry and admits one fresh answer, late CPR is dropped, concurrent typing works, replay/reload/Snapshot stay suppressed, and mobile/desktop each preserve 29→29 input bytes over five Settings/background/reconnect cycles. Full log/size-comparison run is ongoing outside the checkout.
The reconnect fixture needed two fixes: independent retained cursors (the open-session fixture replaces the initially seeded session, so absent cursors must start at zero) and a typing-ack barrier before taking the query baseline. Duplicate count is asserted separately from CPR byte length, which changes with column digits. No expiry-window change was needed. The window remains one second from opening ESC: it covers the standard 300 ms RTT plus renderer scheduling margin while rejecting stale cursor replies; later fragments do not renew it.

46900e0b9 completes the browser/test-double slice. All 9 affected specs pass: three viewers admit one response per query, reconnect preserves expiry and admits one fresh answer, late CPR is dropped, concurrent typing works, replay/reload/Snapshot stay suppressed, and mobile/desktop each preserve 29→29 input bytes over five Settings/background/reconnect cycles. Full log/size-comparison run is ongoing outside the checkout. The reconnect fixture needed two fixes: independent retained cursors (the open-session fixture replaces the initially seeded session, so absent cursors must start at zero) and a typing-ack barrier before taking the query baseline. Duplicate count is asserted separately from CPR byte length, which changes with column digits. No expiry-window change was needed. The window remains one second from opening ESC: it covers the standard 300 ms RTT plus renderer scheduling margin while rejecting stale cursor replies; later fragments do not renew it.
kayg commented 2026-10-19 05:20:30 +00:00
Author
Owner
Copy link

b61e49907 adds the development-only terminal-query robustness target. Server parser-checks clippy passes; 10,000 generated samples and seeded deterministic unit cases pass. The smoke executable was not coverage-instrumented (the new target is available to the existing nightly workflow); an explicit query-family corpus will also be exercised before the final gate. No new shipping dependencies/features; shipping feature tree saved outside checkout.
Production JS compared with merge base f29713863 using the same default build recipe: critical identity 969,830→972,702 B (+2,872), gzip 300,185→301,188 B (+1,003), Brotli 250,153→250,919 B (+766); existing transfer budgets pass. Deferred identity unchanged at 141,031 B; on-demand identity unchanged at 219,874 B (compressed hash-import variation is in receipts).
Baseline transfer receipt
Head transfer receipt
Static x86_64 comparison is building; browser typing comparison is queued for the perf lock. No cap changes or deploy.

b61e49907 adds the development-only terminal-query robustness target. Server parser-checks clippy passes; 10,000 generated samples and seeded deterministic unit cases pass. The smoke executable was not coverage-instrumented (the new target is available to the existing nightly workflow); an explicit query-family corpus will also be exercised before the final gate. No new shipping dependencies/features; shipping feature tree saved outside checkout. Production JS compared with merge base f29713863 using the same default build recipe: critical identity 969,830→972,702 B (+2,872), gzip 300,185→301,188 B (+1,003), Brotli 250,153→250,919 B (+766); existing transfer budgets pass. Deferred identity unchanged at 141,031 B; on-demand identity unchanged at 219,874 B (compressed hash-import variation is in receipts). [Baseline transfer receipt](https://git.kayg.org/attachments/e547d4df-60a7-4982-b8cf-0f36a0e69d8e) [Head transfer receipt](https://git.kayg.org/attachments/efca56a8-0407-4b5f-9dbe-8503319b21b5) Static x86_64 comparison is building; browser typing comparison is queued for the perf lock. No cap changes or deploy.
kayg commented 2026-10-19 05:28:33 +00:00
Author
Owner
Copy link

Perf VM browser baseline (merge-base f29713863 production terminal artifact, current shared fixture, 300 ms RTT, Node 22.23.3, CPUWeight=10000; load 0.27/1.48/1.64→0.06/0.90/1.39): predicted glyph p50/p99 14.30/15.00 ms (17 ms budget passes), confirmed echo p50/p99 298.50/314.30 ms, prediction CPU p99 0.300 ms, browser CPU/key p99 0.200 ms. Non-predicted glyph p99 315.40 ms.
The complete probe exits nonzero on an unrelated baseline reconnect budget: p99 1479.90 ms vs 900 ms (typing assertions pass). Head comparison is running under the same fixture; no test budget is relaxed. Initial Bun-runner attempt ended with SIGTERM before metrics; matching host's Node 22.23.3 (official archive checksum verified) completes the measurements. Runtime stays inside the job's VM directory.
Static baseline exactly matches existing D243 x86_64 cap: 21,225,872 B. Head link is pending; cap unchanged.

Perf VM browser baseline (merge-base f29713863 production terminal artifact, current shared fixture, 300 ms RTT, Node 22.23.3, CPUWeight=10000; load 0.27/1.48/1.64→0.06/0.90/1.39): predicted glyph p50/p99 14.30/15.00 ms (17 ms budget passes), confirmed echo p50/p99 298.50/314.30 ms, prediction CPU p99 0.300 ms, browser CPU/key p99 0.200 ms. Non-predicted glyph p99 315.40 ms. The complete probe exits nonzero on an unrelated baseline reconnect budget: p99 1479.90 ms vs 900 ms (typing assertions pass). Head comparison is running under the same fixture; no test budget is relaxed. Initial Bun-runner attempt ended with SIGTERM before metrics; matching host's Node 22.23.3 (official archive checksum verified) completes the measurements. Runtime stays inside the job's VM directory. Static baseline exactly matches existing D243 x86_64 cap: 21,225,872 B. Head link is pending; cap unchanged.
kayg commented 2026-10-19 05:28:34 +00:00
Author
Owner
Copy link

D307 owner test:

  1. Attach two or three browsers to the same fresh shell; run a terminal program that requests cursor position, device attributes or colours. It must receive one answer per query, regardless of which browser last typed.
  2. Type in one viewer while another answers; typing continues without replay/cursor gaps. Reconnect a viewer and repeat; answers past the one-second window are discarded.
  3. Existing shells from pre-extension shims show “Open a new shell to enable terminal query replies after this update.” Open a new shell to use the independent reply lane; old browser Input remains ordinary input by contract.
D307 owner test: 1. Attach two or three browsers to the same fresh shell; run a terminal program that requests cursor position, device attributes or colours. It must receive one answer per query, regardless of which browser last typed. 2. Type in one viewer while another answers; typing continues without replay/cursor gaps. Reconnect a viewer and repeat; answers past the one-second window are discarded. 3. Existing shells from pre-extension shims show “Open a new shell to enable terminal query replies after this update.” Open a new shell to use the independent reply lane; old browser Input remains ordinary input by contract.
kayg commented 2026-10-19 05:34:07 +00:00
Author
Owner
Copy link

Static first candidate: baseline f29713863 = 21,225,872 B; D307 candidate = 21,254,032 B (+28,160 B, exceeds unchanged cap). Do not ship or raise the cap to fit it. Measuring the existing infraternal-agent orchestration package at opt-level z (previously s); transport, protocol, VT and cryptographic dependency profiles stay unchanged. Retain only if measured size fits and paired 50-session real-PTY typing tests preserve latency. This is a compiler-profile experiment, no library/engine choice or wire change. Candidate artifact retained outside checkout for comparison.
Browser perf VM comparison (300 ms RTT, same fixture/Node22.23.3/scheduling, 20 keys each): predicted glyph p50/p99 14.30/15.00→14.50/14.80 ms; confirmed echo p50/p99 298.50/314.30→298.30/309.90 ms; browser CPU/key p99 unchanged 0.200 ms; prediction CPU p99 0.300→0.200 ms. Non-predicted echo p99 315.40→316.10 ms. Typing remains within the same budgets; do not interpret sub-ms variation as a speedup.
The full probe exits nonzero on separate budgets: baseline reconnect p99 1479.90 ms, head1513.30 ms (900 ms); sign-in baseline4999.10 ms, head5003.50 ms (5000 ms). No budgets/assertions relaxed. Load start/end is in each raw receipt.
Browser baseline
Browser head

Static first candidate: baseline f29713863 = 21,225,872 B; D307 candidate = 21,254,032 B (+28,160 B, exceeds unchanged cap). Do not ship or raise the cap to fit it. Measuring the existing infraternal-agent orchestration package at opt-level z (previously s); transport, protocol, VT and cryptographic dependency profiles stay unchanged. Retain only if measured size fits and paired 50-session real-PTY typing tests preserve latency. This is a compiler-profile experiment, no library/engine choice or wire change. Candidate artifact retained outside checkout for comparison. Browser perf VM comparison (300 ms RTT, same fixture/Node22.23.3/scheduling, 20 keys each): predicted glyph p50/p99 14.30/15.00→14.50/14.80 ms; confirmed echo p50/p99 298.50/314.30→298.30/309.90 ms; browser CPU/key p99 unchanged 0.200 ms; prediction CPU p99 0.300→0.200 ms. Non-predicted echo p99 315.40→316.10 ms. Typing remains within the same budgets; do not interpret sub-ms variation as a speedup. The full probe exits nonzero on separate budgets: baseline reconnect p99 1479.90 ms, head1513.30 ms (900 ms); sign-in baseline4999.10 ms, head5003.50 ms (5000 ms). No budgets/assertions relaxed. Load start/end is in each raw receipt. [Browser baseline](https://git.kayg.org/attachments/5fb83255-616b-420e-b9a8-f68853158632) [Browser head](https://git.kayg.org/attachments/c7cd0120-d938-48cd-993b-c759cebd80cb)
kayg commented 2026-10-19 05:37:31 +00:00
Author
Owner
Copy link

Perf VM native baseline, real infraternal agent + 50 real shim PTYs, 200 sequential keys on one PTY, CPUWeight=10000, no synthetic CPU producers:

  • 0 ms RTT: ack p50/p99 0.22/0.58 ms; PTY echo 0.28/0.61 ms (34 ms budget). Daemon RSS 8,699,904 B; shims 6,012,190.72 B/session ×50 =300,609,536 B. Load0.06/0.44/1.05→0.45/0.51/1.07.
  • 300 ms RTT: ack302.46/323.45 ms; echo302.52/323.47 ms (334 ms budget). Daemon8,704,000 B; shims6,011,863.04 B/session ×50 =300,593,152 B. Load0.45/0.51/1.07→0.15/0.41/0.99. Both runs pass and authenticate/stop only their own shim PIDs.
    Native baseline receipt
    The profile experiment's first package test run failed in fixture setup: omitted short runtime env and missing legacy relative target fixture directory (NotFound/SUN_LEN). Corrected the runner and created the empty ignored fixture parent; Cargo outputs remain exclusively under the external job target. No production change for those failures. Retry and final size measurement pending.
Perf VM native baseline, real infraternal agent + 50 real shim PTYs, 200 sequential keys on one PTY, CPUWeight=10000, no synthetic CPU producers: - 0 ms RTT: ack p50/p99 0.22/0.58 ms; PTY echo 0.28/0.61 ms (34 ms budget). Daemon RSS 8,699,904 B; shims 6,012,190.72 B/session ×50 =300,609,536 B. Load0.06/0.44/1.05→0.45/0.51/1.07. - 300 ms RTT: ack302.46/323.45 ms; echo302.52/323.47 ms (334 ms budget). Daemon8,704,000 B; shims6,011,863.04 B/session ×50 =300,593,152 B. Load0.45/0.51/1.07→0.15/0.41/0.99. Both runs pass and authenticate/stop only their own shim PIDs. [Native baseline receipt](https://git.kayg.org/attachments/f42934c7-97d6-4385-8b49-51bb3960e3a8) The profile experiment's first package test run failed in fixture setup: omitted short runtime env and missing legacy relative target fixture directory (NotFound/SUN_LEN). Corrected the runner and created the empty ignored fixture parent; Cargo outputs remain exclusively under the external job target. No production change for those failures. Retry and final size measurement pending.
kayg commented 2026-10-19 05:48:49 +00:00
Author
Owner
Copy link

Resume state: branch head b61e49907; only uncommitted source change is Cargo.toml's infraternal-agent s→z size experiment. Rejected untrimmed D307 artifact is 21,254,032 B; unchanged cap21,225,872 B. No push/deploy. All nine affected browser specs and real PTY test pass; paired browser typing and 50-session native baseline receipts are on this issue.
Corrected runner is queued through build-slot since 07:36:46 CEST (PID3277770; script $HOME/.cache/codex-scratch/query-replies-d307/run-trim.sh, output evidence/trim-retry.log). All four host slots occupied by active jobs; no stale lock identified. The corrected 200-socket discovery unit test passes. Runner will check agent fmt/clippy/tests, measure x86_64 z artifact and build ARM only if x86 fits. Then measure native head0/300 RTT on perf VM, ratchet both exact size caps if smaller, commit the measured choice, and run final scripts/verify fast via run-final.sh. No capacity bypass or cap increase.

Resume state: branch head b61e49907; only uncommitted source change is Cargo.toml's infraternal-agent s→z size experiment. Rejected untrimmed D307 artifact is 21,254,032 B; unchanged cap21,225,872 B. No push/deploy. All nine affected browser specs and real PTY test pass; paired browser typing and 50-session native baseline receipts are on this issue. Corrected runner is queued through build-slot since 07:36:46 CEST (PID3277770; script $HOME/.cache/codex-scratch/query-replies-d307/run-trim.sh, output evidence/trim-retry.log). All four host slots occupied by active jobs; no stale lock identified. The corrected 200-socket discovery unit test passes. Runner will check agent fmt/clippy/tests, measure x86_64 z artifact and build ARM only if x86 fits. Then measure native head0/300 RTT on perf VM, ratchet both exact size caps if smaller, commit the measured choice, and run final scripts/verify fast via run-final.sh. No capacity bypass or cap increase.
kayg commented 2026-10-19 06:13:39 +00:00
Author
Owner
Copy link

D307 measured validation at b61e49907 with the proposed package-only host-orchestration s→z profile (ARM build and final gate pending). Perf VM: infraternal-perf-test, 4 vCPU, Intel i9-9900K, 8,069,112 KiB RAM. Each run held the shared measurement lock and CPUWeight=10000 scope; no synthetic CPU load. Raw receipts include load averages and all fixture PIDs returning gone.

50 real PTYs, 200 keys: baseline/head local echo p99 0.61/1.13 ms (budget 34 ms); 300 ms RTT echo p99 323.47/326.03 ms (budget 334 ms). Two 1,000-key local paired runs, reversing order, show baseline 0.39–0.41 ms vs head 0.47–0.52 ms. This is a small measured native increase, not identical latency. The untrimmed D307 s-profile control is 0.57 ms; z does not cause that increase. Head 50-session shim RSS 299,577,344 bytes locally (5,991,546.88/session), baseline 300,609,536 bytes; daemon 6,127,616 vs 8,699,904 bytes.

The earlier browser 300 ms RTT typing probes meet the 17 ms prediction budget: glyph p99 15.00→14.80 ms, CPU/key p99 0.200 ms both, confirmed echo p99 314.30→309.90 ms. The complete first-run probe also exercises unrelated sign-in/reconnect budgets and is not green: baseline reconnect 1479.90 ms vs 900 ms; head 1513.30 ms, and head sign-in 5003.50 ms vs 5000 ms. No thresholds were relaxed.

Final static x86 candidate is 21,223,696 bytes, 2,176 bytes below the same-recipe merge-base (21,225,872). The first candidate (21,254,032) was rejected rather than raising D243's ceiling. Package-only z saves 30,336 bytes; transport/protocol/VT/crypto speed profiles remain unchanged. Independent read-only review found no correctness or scope concern with the measured trim; ARM and full head gate remain required.

The shipping static x86 real-shim PTY check passed with 3 viewers and 10,000 invalid marked replies: QUERY_REPLIES:1 and TYPING_OK. Screenshot review confirms these markers; existing clipped Appearance chrome is outside this change. Cleanup receipt finds no remaining own processes.

native-perf-head.log
native-perf-repeat.log
native-perf-reverse.log
native-perf-untrimmed.log
real-perf-vm.log
query-replies-real-perf-vm.png
perf-cleanup-final.log

D307 measured validation at b61e49907 with the proposed package-only host-orchestration s→z profile (ARM build and final gate pending). Perf VM: infraternal-perf-test, 4 vCPU, Intel i9-9900K, 8,069,112 KiB RAM. Each run held the shared measurement lock and CPUWeight=10000 scope; no synthetic CPU load. Raw receipts include load averages and all fixture PIDs returning gone. 50 real PTYs, 200 keys: baseline/head local echo p99 0.61/1.13 ms (budget 34 ms); 300 ms RTT echo p99 323.47/326.03 ms (budget 334 ms). Two 1,000-key local paired runs, reversing order, show baseline 0.39–0.41 ms vs head 0.47–0.52 ms. This is a small measured native increase, not identical latency. The untrimmed D307 s-profile control is 0.57 ms; z does not cause that increase. Head 50-session shim RSS 299,577,344 bytes locally (5,991,546.88/session), baseline 300,609,536 bytes; daemon 6,127,616 vs 8,699,904 bytes. The earlier browser 300 ms RTT typing probes meet the 17 ms prediction budget: glyph p99 15.00→14.80 ms, CPU/key p99 0.200 ms both, confirmed echo p99 314.30→309.90 ms. The complete first-run probe also exercises unrelated sign-in/reconnect budgets and is not green: baseline reconnect 1479.90 ms vs 900 ms; head 1513.30 ms, and head sign-in 5003.50 ms vs 5000 ms. No thresholds were relaxed. Final static x86 candidate is 21,223,696 bytes, 2,176 bytes below the same-recipe merge-base (21,225,872). The first candidate (21,254,032) was rejected rather than raising D243's ceiling. Package-only z saves 30,336 bytes; transport/protocol/VT/crypto speed profiles remain unchanged. Independent read-only review found no correctness or scope concern with the measured trim; ARM and full head gate remain required. The shipping static x86 real-shim PTY check passed with 3 viewers and 10,000 invalid marked replies: QUERY_REPLIES:1 and TYPING_OK. Screenshot review confirms these markers; existing clipped Appearance chrome is outside this change. Cleanup receipt finds no remaining own processes. [native-perf-head.log](https://git.kayg.org/attachments/60361523-b516-4e74-94d6-78ef27eaa286) [native-perf-repeat.log](https://git.kayg.org/attachments/c23b1776-c4f2-45d2-9306-01c84ba0af35) [native-perf-reverse.log](https://git.kayg.org/attachments/46ed36f5-d735-44bc-b06b-b32a65c2ea66) [native-perf-untrimmed.log](https://git.kayg.org/attachments/bdc6c1de-3433-4345-9e69-179268947e3a) [real-perf-vm.log](https://git.kayg.org/attachments/c309d99f-1eb9-475b-83f1-66ec6057d43a) ![query-replies-real-perf-vm.png](https://git.kayg.org/attachments/fda18c69-a33d-436b-8966-e1a48032d4bc) [perf-cleanup-final.log](https://git.kayg.org/attachments/10248151-20e8-4ad3-a34c-16584e9dd6ed)
kayg commented 2026-10-19 06:17:07 +00:00
Author
Owner
Copy link

Completed measured profile/size step at 23723c0c8. Final static x86 21,223,696 bytes (merge-base 21,225,872; −2,176), ARM 19,415,776 bytes (previous ceiling 19,427,688; −11,912). Both exact D243 ceilings are ratcheted down in scripts/verify.d/rust.sh and docs/PROCESS.md. Boundary test passes exact size, rejects +1 byte, requires ratchet for smaller images and rejects unsupported targets. Agent fmt/clippy and 66 active tests pass. The final seeded parser check and scripts/verify fast are now running on this HEAD through the build-slot wrapper.

trim-final.log
size-ratchet.log

Completed measured profile/size step at 23723c0c8. Final static x86 21,223,696 bytes (merge-base 21,225,872; −2,176), ARM 19,415,776 bytes (previous ceiling 19,427,688; −11,912). Both exact D243 ceilings are ratcheted down in scripts/verify.d/rust.sh and docs/PROCESS.md. Boundary test passes exact size, rejects +1 byte, requires ratchet for smaller images and rejects unsupported targets. Agent fmt/clippy and 66 active tests pass. The final seeded parser check and scripts/verify fast are now running on this HEAD through the build-slot wrapper. [trim-final.log](https://git.kayg.org/attachments/175b1f58-cd91-4c7b-9b5f-4068edac4464) [size-ratchet.log](https://git.kayg.org/attachments/21c51763-3d8a-4f84-b354-a8f581ef652c)
kayg commented 2026-10-19 06:18:53 +00:00
Author
Owner
Copy link

Author review completed for the protocol/parser/terminal path: legacy Input and typing cursors unchanged; new wire kind capability-gated with 1–1024 reply bytes; 256-byte scanner controls, 64 pending queries/session and 4,096-session registry; unknown marked input allocates no query state; reply syntax and identity checked before atomic claim; expiry retained across fragments, fan-out, replay and the bounded host queue; inventory/final events retire session state; shim reply ownership cannot change geometry or acknowledge typing. Debug rejection records contain counters/reasons, no reply contents. No dependency or core special-case was added. Independent read-only review found no remaining correctness issue. Functional regressions cover the new paths with real PTY proof and nine browser cases; the raw passing browser receipt and performance reproducers are attached below. Final fast gate remains queued at 23723c0c8.

measurement-reproduction.txt
milestone.log

Author review completed for the protocol/parser/terminal path: legacy Input and typing cursors unchanged; new wire kind capability-gated with 1–1024 reply bytes; 256-byte scanner controls, 64 pending queries/session and 4,096-session registry; unknown marked input allocates no query state; reply syntax and identity checked before atomic claim; expiry retained across fragments, fan-out, replay and the bounded host queue; inventory/final events retire session state; shim reply ownership cannot change geometry or acknowledge typing. Debug rejection records contain counters/reasons, no reply contents. No dependency or core special-case was added. Independent read-only review found no remaining correctness issue. Functional regressions cover the new paths with real PTY proof and nine browser cases; the raw passing browser receipt and performance reproducers are attached below. Final fast gate remains queued at 23723c0c8. [measurement-reproduction.txt](https://git.kayg.org/attachments/7d54513c-6bcd-4390-bc7b-aedfcf986502) [milestone.log](https://git.kayg.org/attachments/9aeae57d-f065-4d2e-9af6-6dac8e171b56)
kayg commented 2026-10-19 06:20:21 +00:00
Author
Owner
Copy link

Perf VM phase finished: remaining_own_processes=[]; removed only /root/infraternal-bench/query-replies-d307 after preserving receipts. No benchmark process or installed runtime remains from this job. Final head gate is waiting for a shared build slot; no push or deployment yet.

perf-cleanup-removed.log

Perf VM phase finished: remaining_own_processes=[]; removed only /root/infraternal-bench/query-replies-d307 after preserving receipts. No benchmark process or installed runtime remains from this job. Final head gate is waiting for a shared build slot; no push or deployment yet. [perf-cleanup-removed.log](https://git.kayg.org/attachments/7a1f7420-fda6-4443-bb93-3aa6c67d7960)
kayg commented 2026-10-19 06:35:02 +00:00
Author
Owner
Copy link

First full head gate at 23723c0c8 did not pass: fmt, VT native fmt, CLI plugin compile-out, workspace clippy, cargo-deny and both static builds/linkage/key-memory/exact-size checks PASS; test row FAIL (101). The sole failure is unchanged crates/plugins/ssh/tests/install.rs:3483, review_inode_reuse_after_diagnostics_preserves_live_replacement: fixture could not reproduce inode reuse in 256 allocations (observed "absent", expected "reused"). Its 93 other active install tests passed. This is not a permitted host-load waiver, and is not being waived.

The original inode was 6194366; the fixture printed first allocations [6194717, 6193604, 6194237, 6194840, 6194858, 6194903, 6195004, 6195024]. All fixture files are on this job's disk-backed scratch, not tmpfs. Retrying the exact fixture alone and then the complete gate with RUST_TEST_THREADS=1 to reduce concurrent inode allocation. No product source, assertion or limit changed; no push yet. First complete receipt retained:

final-fast-first.log

First full head gate at 23723c0c8 did not pass: fmt, VT native fmt, CLI plugin compile-out, workspace clippy, cargo-deny and both static builds/linkage/key-memory/exact-size checks PASS; test row FAIL (101). The sole failure is unchanged crates/plugins/ssh/tests/install.rs:3483, review_inode_reuse_after_diagnostics_preserves_live_replacement: fixture could not reproduce inode reuse in 256 allocations (observed "absent", expected "reused"). Its 93 other active install tests passed. This is not a permitted host-load waiver, and is not being waived. The original inode was 6194366; the fixture printed first allocations [6194717, 6193604, 6194237, 6194840, 6194858, 6194903, 6195004, 6195024]. All fixture files are on this job's disk-backed scratch, not tmpfs. Retrying the exact fixture alone and then the complete gate with RUST_TEST_THREADS=1 to reduce concurrent inode allocation. No product source, assertion or limit changed; no push yet. First complete receipt retained: [final-fast-first.log](https://git.kayg.org/attachments/561c3239-f7a7-4675-9d40-49300c979fcf)
kayg commented 2026-10-19 06:41:40 +00:00
Author
Owner
Copy link

The exact SSH inode-reuse fixture passes alone, unchanged: 1 passed; 0 failed; 94 filtered out. The complete scripts/verify fast rerun is active at the same HEAD 23723c0c8 with RUST_TEST_THREADS=1 (no source, assertion or size-budget change). Initial fmt/VT fmt/CLI compile-out/clippy and the 99-test binary group plus 24-restart integration pass. This rerun must finish green before either branch is pushed; the first failed transcript remains attached.

The exact SSH inode-reuse fixture passes alone, unchanged: 1 passed; 0 failed; 94 filtered out. The complete scripts/verify fast rerun is active at the same HEAD 23723c0c8 with RUST_TEST_THREADS=1 (no source, assertion or size-budget change). Initial fmt/VT fmt/CLI compile-out/clippy and the 99-test binary group plus 24-restart integration pass. This rerun must finish green before either branch is pushed; the first failed transcript remains attached.
kayg commented 2026-10-19 06:47:34 +00:00
Author
Owner
Copy link

The complete serial run passes the earlier inode-reuse fixture (install: 94 passed, 0 failed, 1 ignored). It then exposes an existing Python harness prerequisite at crates/plugins/ssh/tests/previous_attempt_shell.py:25: 32 cases raise KeyError for unset INFRATERNAL_TEST_RUNTIME_HELPER. The Rust wrapper does not set it; tests/common/mod.rs:51 uses target/debug/examples/recovery-helper as its default elsewhere.

Configured that same existing built shipping-runtime example explicitly for the next exact ownership-shell test and complete serial scripts/verify fast. No product source, test assertion, timeout or limit changed. Both prior complete transcripts are preserved; final green run still required, no push yet.

final-fast-second.log

The complete serial run passes the earlier inode-reuse fixture (install: 94 passed, 0 failed, 1 ignored). It then exposes an existing Python harness prerequisite at crates/plugins/ssh/tests/previous_attempt_shell.py:25: 32 cases raise KeyError for unset INFRATERNAL_TEST_RUNTIME_HELPER. The Rust wrapper does not set it; tests/common/mod.rs:51 uses target/debug/examples/recovery-helper as its default elsewhere. Configured that same existing built shipping-runtime example explicitly for the next exact ownership-shell test and complete serial scripts/verify fast. No product source, test assertion, timeout or limit changed. Both prior complete transcripts are preserved; final green run still required, no push yet. [final-fast-second.log](https://git.kayg.org/attachments/47d38c6e-ce9f-493c-b263-3168fec02b92)
kayg commented 2026-10-19 07:00:06 +00:00
Author
Owner
Copy link

The configured full run passes ownership shell, then reaches three unchanged recovery_support fixtures that bind absolute Unix paths. They fail with AF_UNIX path too long / SUN_LEN, before their behavioral assertions. At this disk-backed scratch prefix the newline variant is 120 bytes (Linux limit 107); even a one-character cache directory remains 117 bytes. Earlier gate failure stopped before this test binary.

Provisioned a private mount namespace only for recovery_support: same uid 1001, bind this job’s cache/q307 to the existing /mnt in that namespace, drop all capabilities before executing the unchanged tests. All fixture files remain under cache; the host /mnt remains uid 0 mode 755 and its mounts are unchanged. The ordinary gate and all other test binaries stay in the original environment. No source, assertion or threshold changed. This is short-path fixture provisioning, not a waiver; the affected tests and complete head gate are queued again. Runtime helper remains the shipping recovery-helper example. Reproducer and final receipts will be attached.

final-fast-third.log

The configured full run passes ownership shell, then reaches three unchanged recovery_support fixtures that bind absolute Unix paths. They fail with AF_UNIX path too long / SUN_LEN, before their behavioral assertions. At this disk-backed scratch prefix the newline variant is 120 bytes (Linux limit 107); even a one-character cache directory remains 117 bytes. Earlier gate failure stopped before this test binary. Provisioned a private mount namespace only for recovery_support: same uid 1001, bind this job’s cache/q307 to the existing /mnt in that namespace, drop all capabilities before executing the unchanged tests. All fixture files remain under cache; the host /mnt remains uid 0 mode 755 and its mounts are unchanged. The ordinary gate and all other test binaries stay in the original environment. No source, assertion or threshold changed. This is short-path fixture provisioning, not a waiver; the affected tests and complete head gate are queued again. Runtime helper remains the shipping recovery-helper example. Reproducer and final receipts will be attached. [final-fast-third.log](https://git.kayg.org/attachments/cb713ee4-60cb-474a-82ab-226907d10bb5)
kayg commented 2026-10-19 07:07:00 +00:00
Author
Owner
Copy link

The configured complete head gate is now beyond all prior blockers: install 94 pass/1 ignored including inode reuse; ownership-shell harness PASS; recovery_support 11 pass/1 ignored using the private short-path mount. All other tests remain outside that namespace. It has reached the 626-test server group with no failure or waived row. Source still 23723c0c8. Exact environment/runner and cold-cache preparation:

final-gate-reproduction.txt

The configured complete head gate is now beyond all prior blockers: install 94 pass/1 ignored including inode reuse; ownership-shell harness PASS; recovery_support 11 pass/1 ignored using the private short-path mount. All other tests remain outside that namespace. It has reached the 626-test server group with no failure or waived row. Source still 23723c0c8. Exact environment/runner and cold-cache preparation: [final-gate-reproduction.txt](https://git.kayg.org/attachments/01bd690f-878f-4c30-bda0-20f9960bebdc)
kayg commented 2026-10-19 07:16:54 +00:00
Author
Owner
Copy link

Completed D307 at 23723c0c83. Pushed atomically to origin/query-replies-d307 and fast-forwarded origin/query-replies from 372ec87ca. Working tree clean; no deployment. #206 is the parent tracking request.

The additive capability-gated reply-marked Input binds renderer responses to the opening ESC output offset. The server admits one syntactically matching reply per query, retaining the original 1-second deadline through fan-out, replay and the bounded forwarding queue. One second covers the measured 300 ms link and browser/queue allowance while bounding stale answers; fragments and reconnect never renew it. Invalid marked text is refused without consuming the query, rather than risking typing it. Legacy unmarked Input remains ordinary typing. Unsupported surviving shims fail closed with a session notice asking for a new shell. Content-free cumulative drop diagnostics are sampled at powers of two.

Bounds: 256-byte controls, 64 pending queries/session, 4,096 sessions, 1–1,024 reply bytes. Marked unknown input creates no state; terminal exits and authoritative censuses retire state. Replies cannot advance typing acknowledgements or choose viewer geometry.

Validation: nine affected browser specs pass; real shipping static x86 PTY with three viewers, invalid marked bytes and 10,000 unknown replies produces QUERY_REPLIES:1 and TYPING_OK. Strict codec/golden vectors preserve u64 identities above JS's safe integer range; deterministic parser properties and the seeded 10,000-run smoke target pass (the smoke binary was not coverage-instrumented). Independent protocol/parser and screenshot review found no remaining change-specific correctness issue. Author checklist completed.

Perf VM only, 50 PTYs: at 300 ms RTT native echo p99 323.47→326.03 ms (334 ms budget); browser predicted glyph p99 15.00→14.80 ms (17 ms), CPU/key p99 0.200 ms both. Paired 1,000-key native local runs show baseline 0.39–0.41 ms vs head 0.47–0.52 ms, a measured +0.08–0.11 ms rather than identical latency. Untrimmed D307 control was 0.57 ms. Complete first-run browser probes retain separate failures: baseline/head reconnect p99 1479.90/1513.30 ms vs 900 ms; head sign-in 5003.50 ms vs 5000 ms. These were not waived or reported green.

Final static x86 21,223,696 bytes (same-recipe merge base 21,225,872; −2,176); ARM 19,415,776 (previous 19,427,688 ceiling; −11,912). Exact D243 ceilings ratcheted down. Only host orchestration changed s→z; no shipping dependency addition. Final JS critical identity 972,702 vs 969,830 (+2,872); gzip 301,185 vs 300,185 (+1,000); Brotli 250,935 vs 250,153 (+782). Both transfer budgets pass; compressed differences from the earlier candidate receipt are chunk-hash variation.

scripts/verify fast: exit 0 on this HEAD, no failed or waived row. Environment: RUST_TEST_THREADS=1; explicit existing recovery-helper example; short disk-backed scratch/TMPDIR. Only recovery_support uses the documented private mount namespace alias, same uid 1001 with capabilities dropped before executing unchanged assertions. The host mount is unchanged. Earlier failed transcripts remain attached: first inode fixture allocation, then missing helper setting, then overlong absolute socket names. All now pass in the complete run. Exact reproduction and full raw transcript:

final-fast.log
final-gate-reproduction.txt

Perf VM processes were gone and its entire job directory removed; own temporary baseline checkout, Cargo target, fixture roots and generated production bundle removed after verification. Raw evidence retained outside the checkout and attached above. No issues closed.

Final push and cleanup receipts:

push.log
host-cleanup-audit.log
build-cleanup.log

Verbatim scripts/verify fast output (exit 0) 

==> Repository artifact size gate
repository artifact gate: PASS (40 changed path(s), merge base f29713863e5d)

==> Release deployment functional checks
.....Release build failed for aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa; gate log retained
.Build deferred: host capacity limit reached
.........
----------------------------------------------------------------------
Ran 15 tests in 0.686s

OK
.
----------------------------------------------------------------------
Ran 1 test in 0.098s

OK
bun test v1.4.2 (744846f84)

scripts/release/deploy-review.test.ts:
REMOTE_ADMISSION unsigned_x86_payload=true refused=true
(pass) remote admission refuses an x86 payload outside the signed manifest [210.85ms]
{"state": "deployed", "ca_unlocked": true}
WEB_ONLY_RECORD candidate_binary_recorded=false
(pass) web-only deployment does not record the candidate as the running binary [208.53ms]
ALIAS_RECOVERY restart_requests=2
(pass) alias restoration failure still requests the retained warm rollback [190.09ms]

 3 pass
 0 fail
 3 expect() calls
Ran 3 tests across 1 file. [615.00ms]
METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=295.97 p99_ms=307.61 result=PASS

==> fmt
(fmt: 3s)

==> VT native fmt
(VT native fmt: 0s)

==> CLI plugin compile-out
disabled CLI plugin dependencies: absent from normal dependency graph
warning: function `print_progress` is never used
   --> crates/infraternal/src/cli/output.rs:592:8
    |
592 | pub fn print_progress<T: Serialize>(result: &CommandResult<T>, json: bool, to_stderr: bool) {
    |        ^^^^^^^^^^^^^^
    |
    = note: `#[warn(dead_code)]` (part of `#[warn(unused)]`) on by default

warning: function `write_output` is never used
   --> crates/infraternal/src/cli/output.rs:616:8
    |
616 | pub fn write_output(output: Result<String, serde_json::Error>, to_stderr: bool) {
    |        ^^^^^^^^^^^^

warning: `infraternal` (bin "infraternal" test) generated 2 warnings
    Finished `test` profile [unoptimized + debuginfo] target(s) in 0.14s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal-9c4fc48b971836fc)

running 37 tests
test cli::actions::default_build_tests::default_build_registers_no_unbuilt_command ... ok
test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok
test cli::actions::tests::agent_session_integration_target_is_gated_by_agent_plugin ... ok
test cli::actions::tests::compiled_out_mesh_has_no_registered_commands ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::no_default_plugins_register_no_component_commands ... ok
test cli::actions::tests::server_only_dependencies_are_removed_with_server_plugin ... ok
test cli::command_tree::tests::compiled_out_plugin_has_no_help_or_parse_path ... ok
test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test cli::command_tree::tests::node_build_omits_and_refuses_server_commands ... ok
test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok
test cli::command_tree::tests::public_help_is_plain_words ... ok
test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok
test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok
test cli::output::tests::a_failure_says_why_and_what_to_do ... ok
test cli::output::tests::exit_codes_follow_d303 ... ok
test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}}
{"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}}
ok
test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok
test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok
test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok
test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok
test cli::usage::tests::missing_arguments_are_listed_by_name ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok
test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok

test result: ok. 37 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.25s

    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Blocking waiting for file lock on package cache
    Finished `test` profile [unoptimized + debuginfo] target(s) in 0.53s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal-a2d65766d1f23d58)

running 100 tests
test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok
test cli::actions::hosted_tests::production_descriptors_share_cli_registry_and_skills ... ok
test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok
test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok
test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::hidden_ssh_session_bridge_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok
test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok
test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok
test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test cli::command_tree::tests::hidden_ssh_session_action_parses_existing_session_rendezvous ... ok
test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok
test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok
test cli::command_tree::tests::public_help_is_plain_words ... ok
test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok
test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok
test cli::output::tests::a_failure_says_why_and_what_to_do ... ok
test cli::output::tests::exit_codes_follow_d303 ... ok
test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}}
{"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}}
ok
test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok
test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok
test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok
test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok
test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok
test cli::usage::tests::missing_arguments_are_listed_by_name ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test remote::tests::join_re_enrolls_for_a_moved_server_but_not_a_renamed_one ... ok
test remote::tests::join_re_enrolls_the_same_hosts_identity_and_refuses_another_host ... ok
test remote::tests::join_refuses_the_same_host_id_from_another_server ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test remote::tests::replace_aborts_when_the_identity_changed_since_it_was_read ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test remote_service::tests::link_failure_does_not_wait_forever_for_blocking_work ... ok
test remote_service::tests::polling_panic_reaches_bounded_shutdown ... ok
test remote_service::tests::successful_link_return_is_a_service_failure ... ok
test restart::recovery_tests::verified_exec_and_late_refusal_preserve_listener_and_ca ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test restart::tests::deleted_path_review::relative_recovery_after_atomic_install_keeps_live_install_path ... ok
test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok
test restart::tests::path_review::late_recovery_from_path_invocation_keeps_install_target ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok
test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ok
test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok
test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok
test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ok
test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ok
test restart_binary::audit_tests::verification_twenty_megabytes ... ignored, optimized weighted 20 MiB signature and admission measurement
test restart_image::tests::probe_never_inherits_the_control_descriptor ... ok
test restart_image::tests::snapshot_refuses_every_mutation_and_preserves_source_offset ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok
test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok
test ssh_internal::tests::connect_requires_exactly_a_host_and_numeric_port ... ok
test ssh_internal::tests::connector_is_available_only_on_the_initiating_build ... ok
test ssh_internal::tests::session_accepts_only_the_two_spawned_shapes ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test startup_tests::shared_reactor_preserves_borrows_errors_and_panic_cleanup ... ok

test result: ok. 99 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 26.96s

    Blocking waiting for file lock on package cache
    Finished `test` profile [unoptimized + debuginfo] target(s) in 0.28s
     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal_agent-c0f5ee2d4c7be28c)

running 1 test
test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 72 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal_mesh-c7263890e5528429)

running 1 test
test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal_plugin_backup-63687278dacedd2d)

running 1 test
test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal_plugin_relay-05772b88ed06ec15)

running 1 test
test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal_plugin_ssh-8d15d5d3bffc0793)

running 1 test
test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 42 filtered out; finished in 0.00s

(CLI plugin compile-out: 28s)

==> clippy
    Blocking waiting for file lock on package cache
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.80s
(clippy: 1s)

==> test
    Finished `test` profile [unoptimized + debuginfo] target(s) in 0.70s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal-7de1f15af67158e9)

running 100 tests
test cli::actions::default_build_tests::default_build_registers_no_unbuilt_command ... ok
test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok
test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok
test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok
test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::hidden_ssh_session_bridge_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok
test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok
test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok
test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test cli::command_tree::tests::hidden_ssh_session_action_parses_existing_session_rendezvous ... ok
test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok
test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok
test cli::command_tree::tests::public_help_is_plain_words ... ok
test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok
test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok
test cli::output::tests::a_failure_says_why_and_what_to_do ... ok
test cli::output::tests::exit_codes_follow_d303 ... ok
test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}}
{"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}}
ok
test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok
test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok
test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok
test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok
test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok
test cli::usage::tests::missing_arguments_are_listed_by_name ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test remote::tests::join_re_enrolls_for_a_moved_server_but_not_a_renamed_one ... ok
test remote::tests::join_re_enrolls_the_same_hosts_identity_and_refuses_another_host ... ok
test remote::tests::join_refuses_the_same_host_id_from_another_server ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test remote::tests::replace_aborts_when_the_identity_changed_since_it_was_read ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test remote_service::tests::link_failure_does_not_wait_forever_for_blocking_work ... ok
test remote_service::tests::polling_panic_reaches_bounded_shutdown ... ok
test remote_service::tests::successful_link_return_is_a_service_failure ... ok
test restart::recovery_tests::verified_exec_and_late_refusal_preserve_listener_and_ca ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test restart::tests::deleted_path_review::relative_recovery_after_atomic_install_keeps_live_install_path ... ok
test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok
test restart::tests::path_review::late_recovery_from_path_invocation_keeps_install_target ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok
test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ok
test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok
test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok
test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ok
test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ok
test restart_binary::audit_tests::verification_twenty_megabytes ... ignored, optimized weighted 20 MiB signature and admission measurement
test restart_image::tests::probe_never_inherits_the_control_descriptor ... ok
test restart_image::tests::snapshot_refuses_every_mutation_and_preserves_source_offset ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok
test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok
test ssh_internal::tests::connect_requires_exactly_a_host_and_numeric_port ... ok
test ssh_internal::tests::connector_is_available_only_on_the_initiating_build ... ok
test ssh_internal::tests::session_accepts_only_the_two_spawned_shapes ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test startup_tests::shared_reactor_preserves_borrows_errors_and_panic_cleanup ... ok

test result: ok. 99 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 41.35s

     Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/agent_daemon-eace6b0012b5a1db)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 32.97s

     Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/agent_queues-165eb353c7531f59)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 35.17s

     Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/agent_review-3ad2a12c0615b84c)

running 8 tests
test initial_attach_requires_explicit_credit_before_replay ... ok
test last_typist_selects_its_own_real_pty_dimensions ... ok
test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok
test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 34.99s

     Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/agent_sessions-f2332706b84f8f8c)

running 3 tests
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok
test latency_fixture_accepts_the_unsolicited_startup_inventory ... ok
test restart_discovery_keeps_a_live_shim_and_drops_clean_exit_and_sigkill ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.63s

     Running tests/cli_envelope.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/cli_envelope-661ccc970097d9ee)

running 8 tests
test a_missing_server_is_not_found_exit_4 ... ok
test an_unknown_command_is_a_usage_envelope_that_does_not_echo_odd_input ... ok
test bare_infraternal_is_the_overview_and_points_to_help ... ok
test component_commands_fail_in_the_envelope_when_the_agent_is_not_there ... ok
test every_command_reports_a_usage_error_in_the_envelope_naming_the_argument ... ok
test read_only_commands_answer_in_the_envelope ... ok
test status_exits_0_on_a_machine_with_nothing_installed ... ok
test status_exits_5_when_something_that_should_run_is_down ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.37s

     Running tests/cli_review.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/cli_review-d55a30e0250e5756)

running 16 tests
test a_dry_run_plan_keeps_its_line_breaks ... ok
test a_dumb_terminal_gets_neither_colour_nor_marks ... ok
test a_failing_command_in_json_mode_prints_exactly_one_envelope ... ok
test a_group_with_one_command_says_so_in_the_singular ... ok
test a_malformed_host_id_is_a_usage_error_exit_2 ... ok
test a_missing_runtime_directory_is_not_called_a_bad_reply ... ok
test a_subcommand_does_not_advertise_options_it_ignores ... ok
test a_usage_error_in_text_mode_does_not_echo_the_odd_input ... ok
test an_empty_no_color_is_ignored ... ok
test an_unknown_skill_is_not_found_exit_4 ... ok
test ctrl_c_in_json_mode_ends_with_an_interrupted_envelope_and_exit_130 ... ok
test json_help_and_version_are_envelopes_too ... ok
test no_compiled_python_is_tracked ... ok
test root_help_fits_80_columns ... ok
test status_is_not_down_when_the_service_manager_cannot_be_asked ... ok
test user_facing_text_never_says_agent_alone ... ok

test result: ok. 16 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.02s

     Running tests/cli_review_r2.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/cli_review_r2-fb28189eb99511bc)

running 11 tests
test a_failed_later_page_emits_only_the_failure_envelope ... ok
test a_later_runtime_handler_is_not_bypassed_by_the_interrupt_handler ... ok
test a_mistyped_word_that_looks_like_a_token_is_not_echoed ... ok
test a_paged_listing_is_still_one_envelope ... ok
test an_unknown_skill_does_not_echo_what_was_typed ... ok
test ctrl_c_in_a_script_loop_stops_the_loop ... ok
test ctrl_c_while_the_result_is_being_written_never_leaves_a_broken_line ... ok
test help_and_version_under_json_are_one_envelope_and_exit_0 ... ok
test status_text_does_not_call_an_unanswered_unit_not_running ... ok
test three_pages_preserve_order_and_only_the_final_cursor ... ok
test usage_errors_under_json_are_one_envelope_and_exit_2 ... ok

test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.04s

     Running tests/cli_review_r3.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/cli_review_r3-ab163f75bc325020)

running 4 tests
test a_pending_blocked_interrupt_emits_notice_and_terminates_by_sigint ... ok
test a_pending_interrupt_during_final_output_preserves_result_and_sigint_status ... ok
test inherited_ignored_sigint_stays_ignored_during_cli_output ... ok
test signal_fixture ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.13s

     Running tests/cli_review_r3_arguments.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/cli_review_r3_arguments-48fd77d7d0173dff)

running 1 test
test inherited_fd_is_rejected_instead_of_ignored_by_remote_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/idle_canary-1e1ec5c3674e0f56)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.12s

     Running tests/key_memory.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/key_memory-db0b9ddee7c51dd5)

running 1 test
test diagnostic_requires_locked_pages_and_supports_json_without_public_help ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/remote_output-2e9aad8bb717b41b)

running 1 test
test remote_refusal_matches_its_declared_cli_output ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/session_bounds_review.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/session_bounds_review-c8d51c5accea5d04)

running 1 test
test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.97s

     Running tests/session_exit_events.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/session_exit_events-4b2712c16f493a8f)

running 1 test
test idle_daemon_discovers_unattached_and_adopted_shim_exit_without_requests ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.70s

     Running tests/session_retention.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/session_retention-19237533b041ac30)

running 1 test
test bounded_owned_exit_reconnects_as_ended_with_status ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.56s

     Running tests/setup_output.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/setup_output-8adba6b7d790f6d5)

running 1 test
test setup_output_keeps_legacy_and_versioned_readers ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/shim.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/shim-882f35597e3d6cb6)

running 24 tests
test attached_backpressure_and_detached_progress ... ok
test delivered_exit_cannot_release_another_owning_window ... ok
test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok
test detached_shell_exit_reaps_shim_within_one_second ... ok
test disallowed_signal_only_disconnects_peer ... ok
test double_fork_survives_parent_death ... ok
test dropped_deferred_peers_release_slots_before_the_pty_drains ... ok
test fresh_shared_peer_negotiates_while_another_shared_input_is_deferred ... ok
test independent_shared_writers_wait_for_the_same_global_queue ... ok
test legacy_output_subscription_unblocks_deferred_shared_input ... ok
test malformed_shared_successor_does_not_evict_the_live_shared_peer ... ok
test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok
test owned_exit_releases_promptly_on_window_close ... ok
test parked_shared_writer_does_not_stop_detached_pty_progress ... ok
test real_shell_reconnect_resize_and_delivered_exit ... ok
test replacement_connection_and_malformed_limit ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok
test shared_input_waits_for_global_queue_space_without_losing_the_suffix ... ok
test shared_writer_coexists_and_replayed_input_is_written_once ... ok
test shared_writer_refusals_and_full_peer_limit_preserve_the_live_writer ... ok
test shared_writer_restores_durable_geometry_after_another_writer_types ... ok
test unowned_normal_exit_retires_promptly_and_records_status ... ok
test user_scope_survives_parent_unit_stop ... active
ok
test writer_replacement_is_per_mode_and_fresh_ordinary_writers_stay_optional ... ok

test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 10.66s

     Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/ssh_askpass-0d42995889fdce36)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 2.81s

     Running tests/ssh_connector_policy.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/ssh_connector_policy-76f290ff1302b128)

running 1 test
test connector_preserves_configured_bind_address_refusal ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.01s

     Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/vt_credit-a8057c0d8d11dc74)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 19.50s

     Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/vt_reconnect-3d554a4e2b9bb78d)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 15.13s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal_agent-5e7905dce98d9204)

running 165 tests
test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok
test daemon::authenticated_tests::authenticated_uid_refusal_precedes_state_and_io ... ok
test daemon::census_retry_tests::full_control_lane_retries_retirement_census_on_capacity_without_requests ... ok
test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok
test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000
test daemon::liveness_tests::detached_ping_preserves_written_ack_without_output_credit ... ok
test daemon::liveness_tests::input_state_probe_preserves_written_ack_after_input ... ok
test daemon::liveness_tests::input_state_probe_preserves_written_ack_before_input ... ok
test daemon::liveness_tests::terminal_probe_waits_for_the_shim_fence_and_keeps_stream_identity ... ok
test daemon::readiness_exit_tests::ownership_eof_does_not_discard_private_terminal_output ... ok
test daemon::readiness_tests::a_saturated_census_queue_cannot_establish_the_open_fence ... ok
test daemon::readiness_tests::a_shut_down_peer_refuses_the_write_while_a_forked_copy_holds_it ... ok
test daemon::readiness_tests::census_and_open_result_share_fifo_order ... ok
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::readiness_tests::fixture_fence_processes_messages_before_the_control_pong ... ok
test daemon::readiness_tests::replay_complete_preserves_the_full_output_cursor_as_decimal ... ok
test daemon::readiness_tests::replay_prefix_stops_at_the_shim_hello_head ... ok
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test daemon::readiness_tests::saturated_action_replies_preserve_connection ... ok
test daemon::readiness_tests::saturated_ping_replies_preserve_connection ... ok
test daemon::readiness_tests::the_unhealthy_handoff_case_survives_concurrent_spawns ... ok
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test daemon::remote_tests::reattach_dispatch_serves_while_another_runtime_holds_the_lifetime_lock ... ok
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::session_commands::tests::probe_at_full_command_capacity_preserves_accepted_input ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks
test daemon::terminal_events::tests::census_uses_uuid_strings_and_replay_keeps_all_cursor_bits ... ok
test daemon::terminal_events::tests::ordinary_exit_omits_retired_and_snapshot_sequences_stay_numeric ... ok
test daemon::terminal_events::tests::reply_compatibility_notice_contains_only_session_identity ... ok
test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok
test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok
test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok
test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok
test plugin_control::tests::accepted_public_transaction_outlives_the_framing_deadline ... ok
test plugin_control::tests::admission_observes_the_same_plugin_settings_as_actions ... ok
test plugin_control::tests::dropping_a_listener_does_not_unlink_a_replacement_file ... ok
test plugin_control::tests::empty_catalog_preserves_control_contract_without_an_os_worker ... ok
test plugin_control::tests::local_frame_reader_retains_fragmentation_and_refuses_trailing_frames ... ok
test plugin_control::tests::local_public_actions_refuse_controls_and_active_socket_replacement ... ok
test plugin_control::tests::retained_path_and_observed_transport_cross_the_lazy_worker ... ok
test plugin_control::tests::retained_runtime_registry_keeps_lifetime_ownership_after_listener_abort ... ok
test plugin_control::tests::synchronous_plugin_work_does_not_park_the_current_thread_reactor ... ok
test plugin_control::tests::worker_preserves_trusted_context_and_writer_owned_effect ... ok
test process_exits::platform::tests::resource_failures_do_not_silently_disable_exit_tracking ... ok
test process_exits::platform::tests::unavailable_kernel_has_no_timer_or_descriptor ... ok
test process_exits_tests::exited_before_registration_is_not_a_live_registration ... ok
test process_exits_tests::process_descriptor_is_cloexec_and_rejects_invalid_pid ... ok
test process_exits_tests::shared_exit_queue_at_200_processes ... ignored, 200 live process lifetimes; run in a weighted benchmark scope
test process_exits_tests::shared_queue_detects_exit_and_does_not_repeat_or_retain_descriptors ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test remote_client::dial_runtime::tests::owned_driver_clock_advances_with_its_timer_runtime ... ok
test remote_client::server_path::tests::a_future_mesh_lease_and_silent_cut_keep_their_port_reserved ... ok
test remote_client::server_path::tests::a_latched_mesh_reply_wakes_retry_without_selecting_the_path ... ok
test remote_client::server_path::tests::backed_candidate_refusal_keeps_new_datagrams_on_mesh_discovery ... ok
test remote_client::server_path::tests::backed_discovery_ends_with_its_owned_session ... ok
test remote_client::server_path::tests::backed_discovery_keeps_control_cancellation_and_udp_recovery_bounded ... ok
test remote_client::server_path::tests::backup_published_during_candidate_proof_keeps_enrolled_control_live ... ok
test remote_client::server_path::tests::candidate_proof_keeps_probing_after_its_first_packet_is_lost ... ok
test remote_client::server_path::tests::component_down_activates_the_warm_fallback_without_a_new_connection ... ok
test remote_client::server_path::tests::component_down_keeps_its_reason_when_the_mesh_also_stops_answering ... ok
test remote_client::server_path::tests::component_down_proves_tcp_fallback_when_enrolled_udp_is_unavailable ... ok
test remote_client::server_path::tests::component_down_returns_the_live_connection_to_the_enrolled_address ... ok
test remote_client::server_path::tests::dropped_return_replies_keep_the_admitted_connection ... ok
test remote_client::server_path::tests::failed_control_worker_returns_to_retry_owner ... ok
test remote_client::server_path::tests::healthy_mesh_path_is_never_declared_interrupted ... ignored, Timing assertion: run on the perf VM under the shared benchmark lock.
test remote_client::server_path::tests::healthy_mesh_preserves_every_control_reply_on_the_admitted_connection ... ok
test remote_client::server_path::tests::interrupted_mesh_is_retried_on_the_same_connection ... ok
test remote_client::server_path::tests::invalid_mesh_hint_cannot_complete_fresh_path_proof ... ok
test remote_client::server_path::tests::pending_enrolled_proof_does_not_hide_a_latched_mesh_hint ... ok
test remote_client::server_path::tests::pending_enrolled_proof_does_not_hide_the_mesh_discovery_clock ... ok
test remote_client::server_path::tests::proposed_mesh_moves_the_live_connection_and_a_silent_cut_returns_it ... ok
test remote_client::server_path::tests::retained_mesh_proposal_connects_when_the_fallback_port_is_unavailable ... ok
test remote_client::server_path::tests::returning_publishes_the_selected_path_before_its_proof_finishes ... ok
test remote_client::server_path::tests::review_silent_mesh_interruption_returns_to_fallback_within_local_reconnect_budget ... ignored, Run alone on the perf VM under the shared benchmark lock.
test remote_client::server_path::tests::silent_mesh_handshake_keeps_the_shared_timeout_classification ... ok
test remote_client::server_path::tests::unadvertised_path_proof_keeps_the_existing_enrolled_connection ... ok
test remote_client::server_path::tests::unanswered_mesh_address_keeps_the_live_connection ... ok
test remote_client::server_path::tests::unavailable_credentials_do_not_end_server_link ... ok
test remote_client::server_path::tests::unnegotiated_backup_preserves_the_enrolled_retry_cooling ... ok
test remote_client::server_path::tests::untrusted_server_on_the_mesh_address_never_takes_the_connection ... ok
test remote_client::supervisor::review_tests::durable_state::acknowledged_network_access_survives_superseded_worker_completion ... ok
test remote_client::supervisor::review_tests::six_hour_server_outage_keeps_one_retry_owner_with_bounded_attempts ... ok
test remote_client::supervisor::review_tests::terminated_factory_is_replaced_without_overlapping_live_workers ... ok
test remote_client::supervisor::review_tests::watchdog_bounds_workers_when_local_path_discovery_stalls ... ok
test remote_client::supervisor::tests::a_burst_then_a_stable_link_is_summarised_by_the_timer ... ok
test remote_client::supervisor::tests::every_error_kind_and_successful_return_retries ... ok
test remote_client::supervisor::tests::failed_attempt_cost_does_not_extend_the_retry_period ... ok
test remote_client::supervisor::tests::healthy_link_has_no_watchdog_deadline ... ok
test remote_client::supervisor::tests::link_close_notes_print_once_per_window_and_summarise_repeats ... ok
test remote_client::supervisor::tests::watchdog_restarts_a_stalled_offline_attempt ... ok
test remote_client::tests::capability_fixture_retries_a_port_held_by_the_other_transport ... ok
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test remote_client::tests::idle_timers::copy_cost::fresh_admission_accepts_dormant_replies_but_refuses_pending_recovery ... ok
test remote_client::tests::idle_timers::copy_cost::fresh_copy_from_admission_at_one_thousand_transports ... ignored, Separate fresh-copy cohort on the perf VM under its shared benchmark lock.
test remote_client::tests::idle_timers::copy_cost::mesh_probe_and_copy_cost_at_one_thousand_transports ... ignored, Optimized transport-only measurement on the perf VM under its shared benchmark lock.
test remote_client::tests::idle_timers::copy_cost::physical_counters_include_both_source_paths ... ok
test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::monotonic_origin_bounds_fail_closed_without_losing_receive_receipts ... ok
test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::receive_diagnostic_counts_gro_and_only_fixed_sampled_ports ... ok
test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::receive_diagnostic_gap_bins_have_explicit_bounds ... ok
test remote_client::tests::idle_timers::copy_cost::runtime_configuration_trial_at_one_thousand_transports ... ignored, Explicit runtime scheduling control on the perf VM; ordinary runtime and guards unchanged.
test remote_client::tests::idle_timers::copy_cost::socket_configuration_trial_at_one_thousand_transports ... ignored, Explicit socket-configuration diagnostic on the perf VM; ordinary scale gates stay unchanged.
test remote_client::tests::idle_timers::copy_cost::udp_drop_receipt_counts_only_owned_live_sockets ... ok
test remote_client::tests::idle_timers::mesh_idle_timer_cost_at_one_thousand_connections ... ignored, Release-only perf VM measurement under the shared benchmark lock.
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test remote_client::tests::raw_tcp_control_preserves_mux_envelopes_and_buffered_suffix ... ok
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test remote_client::tests::server_path_capability_is_advertised_on_native_and_fallback_transports ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test remote_client::tests::unavailable_local_credentials_retry_without_creating_state ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test remote_cursor::tests::exact_unsigned_cursor_and_whole_object_are_required ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test remote_native_tests::primed::negotiated_connection_keeps_unmarked_new_writers_ordinary ... ok
test remote_native_tests::primed::ordinary_native_writer_refuses_the_additive_cursor_request ... ok
test remote_native_tests::primed::prime_marker_is_canonical_and_requires_negotiated_permission ... ok
test remote_native_tests::primed::primed_writer_acknowledges_before_reading_credit_funded_cursor ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok
test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok
test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok
test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok
test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test sessions::tests::ordinary_native_writer_negotiates_queue_backpressure_without_shared_selection ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test sessions::tests::shared_writer_helper_negotiates_before_sending_its_selector ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_kernel_latency ... ignored, Exact 50MiB kernel-latency control on the perf VM in an owned network namespace.
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap

test result: ok. 145 passed; 0 failed; 20 ignored; 0 measured; 0 filtered out; finished in 34.29s

     Running tests/transport.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/transport-779de0acdb61e1cf)

running 2 tests
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok
test oversized_header_and_truncated_frame_are_rejected ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal_mesh-e13f00facaa1692a)

running 1 test
test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/default_arrow-7b090aec0682bcd2)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/properties.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/properties-983aa249d0580584)

running 14 tests
test addresses_are_unique_stable_and_not_recycled ... ok
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test directional_grants_union_and_minimal_updates ... ok
test exhausted_versions_reject_mutations_without_changing_state ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test names_versions_and_backend_status ... ok
test overlaps_are_reported_without_silent_range_changes ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.92s

     Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/rotation_time-0cf88f58b3d13cb7)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal_plugin_api-c601f0a1c341cc23)

running 29 tests
test action::tests::any_of_permissions_are_machine_readable_and_empty_authority_is_rejected ... ok
test action::tests::command_result_schema_has_required_stable_fields_and_optional_next_step ... ok
test action::tests::command_result_schema_keeps_action_data_typed_inside_stable_envelope ... ok
test action::tests::only_hidden_internal_routes_may_use_the_reserved_prefix ... ok
test action::tests::registry_keeps_plugin_ownership_and_exact_command_paths ... ok
test action::tests::registry_rejects_inconsistent_json_schemas ... ok
test action::tests::registry_rejects_missing_action_guidance_and_command_collisions ... ok
test admission::tests::memory_refusal_round_trips_without_losing_legacy_error ... ok
test component_tests::component_declarations_cannot_create_servers ... ok
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok
test present::tests::a_table_fits_its_width_by_wrapping_only_the_last_column ... ok
test present::tests::a_table_has_a_header_only_from_two_rows ... ok
test present::tests::pairs_align_values_and_wrap_under_them ... ok
test present::tests::sizes_and_ages_use_units_a_person_would_say ... ok
test present::tests::tint_wraps_text_after_padding_is_measured ... ok
test present::tests::wide_leading_columns_are_cut_with_an_ellipsis ... ok
test release_version::tests::accepts_only_worker_version_forms ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok
test server_path::tests::legacy_link_omits_the_optional_source_port ... ok
test storage::tests::cancelled_begin_never_leaves_an_open_writer_transaction ... ok
test storage::tests::writer_begin_at_1000_nodes ... ignored, Measure only on the perf VM under its benchmark lock, 31 batches of 1000 writes.
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok
test tests::machine_actions_are_declared_without_entering_human_discovery ... ok
test tests::notifications_are_declared_json_bounded_and_drained_once ... ok
test tests::operator_presentation_cannot_follow_a_private_control_action ... ok
test tests::public_dispatch_cannot_call_a_machine_control_action ... ok
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test tests::registry_routes_only_declared_actions ... ok

test result: ok. 28 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/routing_review-fe80451ff0776d50)

running 2 tests
test review_topic_borrows_plain_and_owns_escaped ... ok
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal_plugin_backup-85810caed1a02b63)

running 1 test
test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal_plugin_host_facts-2cac1c439992c347)

running 14 tests
test memory::tests::custom_policy_rounds_up_and_validates_all_settings_before_use ... ok
test memory::tests::default_floor_refuses_only_below_headroom_even_above_128_sessions ... ok
test session_counts_tests::host_owned_session_counts_are_additive_and_refresh_on_request ... ok
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test tests::configured_memory_floor_refuses_with_current_host_counters ... ok
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok
test tests::static_facts_report_the_machines_hostname ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal_plugin_mesh-3681764fe0ea9465)

running 74 tests
test access_updates::tests::compact_rules_reconstruct_the_exact_config_and_preserve_server_access ... ok
test access_updates::tests::grouping_never_crosses_an_unchanged_protected_peer ... ok
test access_updates::tests::identity_changes_and_snapshots_keep_the_original_encoding ... ok
test access_updates::tests::malformed_ranges_refuse_before_any_rule_changes ... ok
test connection_state::tests::narrowing_depends_on_services_and_direction_not_the_fallback_label ... ok
test firewall::tests::already_removed_owned_table_does_not_block_component_cleanup ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::initial_apply_without_adoption_refuses_a_foreign_table ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::real_nft_ownership_atomicity_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::removal_plan_cannot_add_permissions_or_change_identity ... ok
test firewall::tests::rule_count_is_independent_of_membership_and_policy_data_is_in_sets ... ok
test iptables::tests::contiguous_open_members_use_ranges_without_opening_gaps ... ok
test iptables::tests::initiating_prefixes_cover_only_owned_intervals_even_at_family_boundaries ... ok
test iptables::tests::real_nf_tables_ownership_partial_family_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test iptables::tests::replacement_retains_established_rules_and_does_not_duplicate_hooks ... ok
test netlink::tests::connection_tuple_uses_initiating_service_and_refuses_ambiguous_selectors ... ok
test netlink::tests::host_prefix_decoder_refuses_ambiguous_or_malformed_ownership ... ok
test netlink::tests::malformed_lengths_and_padding_are_rejected ... ok
test netlink::tests::nested_attributes_roundtrip_without_copying_payloads ... ok
test netlink::tests::public_host_prefixes_decode_both_families_without_claiming_subnets ... ok
test node::rotation_tests::nf_tables_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173.
test node::rotation_tests::nft_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173.
test node::tests::chunked_snapshot_is_atomic_and_applies_1000_kernel_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN; use release for timing.
test node::tests::explicit_up_recovers_disabled_intent_before_reusing_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node::tests::externally_removed_interface_does_not_block_down ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node::tests::server_identity_cannot_change_inside_a_staged_snapshot ... ok
test node_actions::identity_upgrade_tests::ordinary_identity_reply_retains_the_legacy_shape ... ok
test node_actions::peer_page_tests::peer_pages_cover_every_peer_once_within_the_frame ... ok
test node_actions::peer_page_tests::poll_cost ... ignored, measurement
test node_actions::tests::applied_server_route_and_observed_link_survive_only_explicit_component_up ... ignored, Run inside a dedicated kernel namespace with CAP_NET_ADMIN.
test node_actions::tests::failed_cleanup_reports_stopping_and_reconnect_keeps_explicit_off ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node_actions::tests::node_actions_refuse_alternate_forms_duplicates_and_unbounded_input ... ok
test node_actions::tests::node_actions_register_without_kernel_work_and_hide_machine_calls ... ok
test node_coordination::tests::a_name_a_person_chose_is_kept ... ok
test node_coordination::tests::a_reported_hostname_names_a_host_added_by_address ... ok
test node_coordination::tests::explicit_off_waits_for_up_and_reconnect_requests_a_snapshot ... ok
test node_coordination::tests::peer_route_precedes_configuration_and_retires_with_the_node ... ok
test node_coordination::tests::placeholder_names_become_the_machines_names ... ok
test node_coordination::tests::refused_delta_recovers_immediately_and_closed_channel_retires_worker ... ok
test node_coordination::tests::refused_listener_replacement_preserves_the_current_lease ... ok
test node_coordination::tests::removed_binding_can_attach_only_after_authorized_reenrollment ... ok
test node_coordination::tests::server_listener_belongs_to_applied_enabled_worker ... ok
test node_presentation::tests::a_wide_table_stays_within_the_width ... ok
test node_presentation::tests::an_unproven_peer_gets_a_hint_that_names_it ... ok
test node_presentation::tests::legacy_status_remains_readable_and_invalid_link_is_refused ... ok
test node_presentation::tests::peers_show_units_ages_and_no_hint_when_every_path_is_direct ... ok
test node_presentation::tests::status_explains_the_observed_server_transport ... ok
test node_state::order_tests::accepted_snapshot_persistence_at_1000_peers ... ignored, Run release on the locked performance VM; public-state persistence at 1000 peers.
test node_state::order_tests::concurrent_workers_serialize_revision_check_and_publication ... ok
test node_state::order_tests::exact_legacy_binding_upgrade_preserves_the_revision_fence ... ok
test node_state::order_tests::explicit_off_can_replace_a_corrupt_public_snapshot ... ok
test node_state::order_tests::stale_and_conflicting_snapshots_cannot_replace_acknowledged_intent ... ok
test node_state::order_tests::worker_start_stop_apply_interleavings_never_decrease_acknowledged_revision ... ok
test node_state::restore_tests::public_restore_retains_large_intent_and_matches_reader ... ok
test node_state::restore_tests::public_state_restore_at_1000_peers ... ignored, Run only on the perf VM under its lock; INFRATERNAL_STATE_RESTORE_MODE=reader|slice, separate processes.
test node_state::restore_tests::restore_rejects_invalid_schema_trailing_data_and_unsafe_descriptors ... ok
test node_state::tests::explicit_off_survives_restart_and_snapshot_contains_only_public_fields ... ok
test node_state::tests::route_recording_preserves_the_legacy_accepted_state_format ... ok
test node_state::tests::unsafe_route_journal_and_existing_temporary_files_are_preserved ... ok
test node_state::tests::unsafe_snapshots_and_preexisting_temporary_files_are_not_followed_or_removed ... ok
test presence::tests::a_mesh_that_is_off_shows_nobody_online ... ok
test presence::tests::a_page_cursor_is_followed ... ok
test presence::tests::a_reading_expires_when_the_node_stops_answering ... ok
test presence::tests::a_recent_handshake_is_online_on_a_direct_path ... ok
test presence::tests::an_unreadable_node_is_no_reading ... ok
test presence::tests::no_handshake_a_stale_one_or_a_future_one_is_offline ... ok
test presence::tests::nodes_go_offline_twenty_seconds_after_the_last_good_reading ... ok
test presence::tests::receiving_a_keepalive_does_not_shorten_the_session_window ... ok
test presence::tests::replace_reports_only_visible_changes ... ok
test presence::tests::the_edge_of_the_session_window_is_still_online ... ok
test presence::tests::the_server_and_a_peer_passing_traffic_are_online ... ok
test presence::tests::traffic_proves_a_session_until_it_ends ... ok
test settings::tests::settings_objects_are_bounded_and_strict_before_storage ... ok
test store::naming_tests::a_numeric_or_invalid_address_gives_no_name ... ok
test store::naming_tests::an_address_or_hostname_gives_the_machines_name ... ok

test result: ok. 60 passed; 0 failed; 14 ignored; 0 measured; 0 filtered out; finished in 6.92s

     Running tests/access_updates.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/access_updates-53052323e562eb48)

running 8 tests
test compact_identity_support_requires_an_explicit_strict_probe ... ok
test default_tightening_at_1000_peers_fits_one_round_trip ... ok
test negotiated_access_chunk_is_accepted_by_the_strict_action_parser ... ok
test nf_tables_compact_delta_preserves_identity_and_refuses_invalid_bases ... ignored, Run in an isolated user/network namespace with CAP_NET_ADMIN.
test nft_compact_delta_preserves_identity_and_refuses_invalid_bases ... ignored, Run in an isolated user/network namespace with CAP_NET_ADMIN.
test ordinary_up_and_identity_keep_the_legacy_reply_shape ... ignored, requires an isolated user/network namespace
test range_objects_reject_unknown_duplicate_and_positional_fields ... ok
test uniform_changes_fit_one_frame_after_churn_with_distinct_kept_services ... ok

test result: ok. 5 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/authorized_local_binding.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/authorized_local_binding-b0ba79371698e19a)

running 2 tests
test nf_tables_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173.
test nft_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/canonical_host_binding.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/canonical_host_binding-e711cf3ceab9f605)

running 1 test
test enrollment_requires_canonical_host_uuid_spelling ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/configuration.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/configuration-1ba9aa134b7936fb)

running 5 tests
test chunks_fit_body_budget_and_one_peer_delta_does_not_repeat_the_snapshot ... ok
test compiled_chunks_identify_the_server_and_old_snapshots_have_no_proposal ... ok
test edition_default_is_explicit_and_build_selected ... ok
test large_valid_port_policy_is_split_without_a_port_count_cap ... ok
test port_grant_narrows_allow_opens_deny_and_preserves_direction ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.28s

     Running tests/kernel.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/kernel-b9d7e07e114cbf35)

running 6 tests
test bulk_retirement_preserves_identity_and_routes_at_1000_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test created_interface_is_marked_for_restart_adoption ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test policy_table_route_conflict_is_refused ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test real_kernel_chunked_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test real_kernel_ephemeral_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test retired_host_routes_can_be_replayed ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/naming.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/naming-d44028e80092ceee)

running 4 tests
test a_person_takes_an_automatic_name_and_the_machine_moves_aside ... ok
test a_squatter_yields_to_a_host_added_later_and_the_renames_are_audited ... ok
test a_viewer_without_host_facts_does_not_see_reported_hostnames ... ok
test the_servers_names_are_kept_for_the_server ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.22s

     Running tests/policy_enrollment_binding.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/policy_enrollment_binding-75c227a9fb54e935)

running 4 tests
test explicit_binding_preserves_identity_and_clears_removal_only_on_enrollment ... ok
test host_binding_requires_global_authority_and_existing_unrevoked_host ... ok
test noncanonical_host_binding_is_refused ... ok
test refused_enrollment_preserves_removal_and_revision ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.23s

     Running tests/policy_enrollment_identity.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/policy_enrollment_identity-69a7fa4673b70170)

running 1 test
test unbound_enrollment_public_key_is_not_host_authority ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s

     Running tests/policy_snapshot_ordering.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/policy_snapshot_ordering-c646b4259a478ea0)

running 6 tests
test nf_tables_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173.
test nf_tables_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173.
test nf_tables_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173.
test nft_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173.
test nft_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173.
test nft_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/presence.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/presence-ea261a44979699ea)

running 2 tests
test an_unchanged_reading_is_not_announced_and_a_lost_session_goes_offline ... ok
test nodes_the_server_sees_are_online_with_their_path_and_named_by_machine ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s

     Running tests/restart_route_ownership.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/restart_route_ownership-f91cbf3125e5a193)

running 1 test
test orphan_route_retirement_preserves_foreign_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_authorized_reenrollment.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/review_authorized_reenrollment-c652db1c78c36ccf)

running 2 tests
test nf_tables_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173.
test nft_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_endpoint_transaction.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/review_endpoint_transaction-ebc100d60783edf7)

running 1 test
test refused_endpoint_persistence_preserves_kernel_endpoint ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_firewall_marker.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/review_firewall_marker-6a53d4cc2a2b41d0)

running 2 tests
test nf_tables_marker_substring_is_not_chain_ownership ... ignored, Run in a disposable user/network namespace, #173.
test nft_marker_substring_is_not_table_ownership ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_ingress_translation.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/review_ingress_translation-26a8eb974397df0c)

running 2 tests
test nf_tables_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test nft_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_local_delivery.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/review_local_delivery-85a98c2a0de72b0d)

running 2 tests
test nf_tables_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test nft_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_mesh_presence_r4.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/review_mesh_presence_r4-c892e66f54b71d7b)

running 3 tests
test a_counter_reset_discards_the_previous_peers_keepalive_classification ... ok
test a_passive_keepalive_does_not_turn_later_silence_into_a_false_offline ... ok
test a_peer_with_25_second_keepalives_stays_online_when_server_keepalives_suppress_its_sends ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_mesh_view_truth.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/review_mesh_view_truth-71d42bc9f3c8b78a)

running 6 tests
test a_hand_set_name_equal_to_the_placeholder_is_kept ... ok
test a_host_record_name_beats_another_machines_reported_hostname ... ok
test a_peer_does_not_stay_online_past_its_session_when_the_server_node_stops_answering ... ok
test a_remote_machine_cannot_be_called_server ... ok
test a_remote_machine_cannot_take_the_servers_hostname ... ok
test an_address_that_is_an_ip_never_becomes_a_name ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.23s

     Running tests/review_mesh_view_truth_r2.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/review_mesh_view_truth_r2-80a2bad78c76cb80)

running 9 tests
test a_hex_ipv4_spelling_never_becomes_a_name ... ok
test a_node_moved_aside_keeps_its_name_on_its_next_attach ... ok
test a_person_can_take_a_name_a_machine_reported ... ok
test a_viewer_without_host_facts_still_sees_distinct_names ... ok
test an_idle_healthy_peer_without_its_own_keepalive_stays_online ... ok
test evidence_a_silent_peer_expires_with_its_session_without_flapping ... ok
test evidence_migration_0026_upgrades_a_realistic_database_without_churn ... ok
test no_viewer_sees_a_remote_machine_called_server ... ok
test the_previous_release_starts_on_a_database_this_release_migrated ... ignored, deploy gate, not code: production rollback restores the database copy (#236)

test result: ok. 8 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.28s

     Running tests/review_mesh_view_truth_r3.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/review_mesh_view_truth_r3-488341cccf25afa7)

running 5 tests
test a_dead_peer_expires_at_session_end_without_inferring_a_sending_promise ... ok
test a_node_moved_aside_by_a_person_is_audited_under_that_person ... ok
test a_non_owner_cannot_confirm_the_servers_hidden_hostname ... ok
test a_scoped_manager_cannot_rename_a_node_outside_their_scope_by_taking_its_name ... ok
test an_idle_peer_that_started_its_session_stays_online_until_it_rekeys ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.16s

     Running tests/review_mesh_view_truth_r4.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/review_mesh_view_truth_r4-a73cddfca2e93724)

running 7 tests
test a_global_manager_cannot_probe_a_hidden_name_by_exhausting_move_aside_names ... ok
test a_name_chosen_while_rewound_survives_rolling_forward_and_reattaching ... ok
test a_scoped_manager_cannot_confirm_a_hidden_reported_hostname ... ok
test evidence_a_refused_move_rolls_back_inventory_audit_and_revision ... ok
test evidence_server_hostname_moves_only_with_server_rename_authority ... ok
test hidden_names_are_indistinguishable_for_every_non_global_node_manager ... ok
test rewind_reconciles_same_spelling_choices_without_freezing_untouched_names ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.54s

     Running tests/review_restart_routes.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/review_restart_routes-c0c7e8b6c3834047)

running 1 test
test restart_retires_orphan_peer_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_retire_ownership.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/review_retire_ownership-21b36c1c525f1f38)

running 7 tests
test retire_checks_every_object_before_deleting_any ... ignored, Run as root in a disposable network namespace with nft.
test retire_decides_every_object_and_leaves_a_foreign_table ... ignored, Run as root in a disposable network namespace with WireGuard and nft.
test retire_leaves_a_foreign_interface_without_failing_the_uninstall ... ignored, Run as root in a disposable network namespace.
test retire_leaves_a_marked_interface_this_installation_never_recorded ... ignored, Run as root in a disposable network namespace.
test retire_leaves_another_installations_interface_and_filter ... ignored, Run as root in a disposable network namespace with WireGuard and nft.
test retire_removes_the_interface_and_filter_this_installation_created ... ignored, Run as root in a disposable network namespace with WireGuard and nft.
test retire_with_a_record_leaves_a_foreign_interface_and_names_it ... ignored, Run as root in a disposable network namespace with WireGuard and nft.

test result: ok. 0 passed; 0 failed; 7 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_reverse_recreation.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/review_reverse_recreation-6d38c3fb56765539)

running 4 tests
test nf_tables_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.
test nf_tables_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.
test nft_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.
test nft_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.

test result: ok. 0 passed; 0 failed; 4 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_revoked_host_policy.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/review_revoked_host_policy-493675b7a79ca70f)

running 1 test
test revoked_host_is_not_retained_in_compiled_peer_policy ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/review_route_inventory.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/review_route_inventory-2be052913f9e2e88)

running 2 tests
test refused_recovery_inventory_save_does_not_retire_kernel_peers_or_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test restart_preserves_unrecorded_direct_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_route_scope.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/review_route_scope-0539357dd2301f8b)

running 1 test
test restart_preserves_operator_gateway_host_route ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_shutdown_budget.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/review_shutdown_budget-1423441593702eda)

running 1 test
test shipping_mesh_down_1000_peers_finishes_within_one_second ... ignored, Run in a dedicated user/network namespace under CPUWeight=10000 with INFRATERNAL_BIN pointing to the shipping release binary.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_shutdown_restart.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/review_shutdown_restart-be3f21c60f64b594)

running 3 tests
test crash_child ... ignored, Child-only fixture for the weighted user/network namespace restart proof.
test refused_journal_retirement_keeps_stopping_until_explicit_retry ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000.
test restart_finishes_interrupted_down_at_1000_peers ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000.

test result: ok. 0 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/settings.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/settings-9e22846e3f8e68e0)

running 1 test
test default_switch_requires_owner_freshness_and_the_preview_revision ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/store.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/store-6d4f7b5c8e54fbb6)

running 6 tests
test absent_discovery_preserves_the_last_known_endpoint ... ok
test attach_cancelled_at_any_await_leaves_the_store_writable ... ok
test key_replacement_preserves_identity_and_addresses_after_restart ... ok
test removed_host_cannot_restore_membership_without_authorized_enrollment ... ok
test required_server_membership_cannot_be_deleted ... ok
test scale_preview_pages_do_not_allocate_the_pair_matrix ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.88s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal_plugin_relay-47b92256ba7e458c)

running 1 test
test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal_plugin_release-aec3b44056d5d9fc)

running 8 tests
test latest::tests::cancellation_joins_verification ... ok
test latest::tests::startup_reclaims_only_owned_inactive_private_metadata ... ok
test service::tests::api_setting_requires_owner_and_current_fresh_session ... ok
test service::tests::authority_is_rechecked_after_the_setting_write_before_commit ... ok
test service::tests::channel_reads_at_fifty_concurrent_callers ... ignored, run alone under CPUWeight=10000; measures SQLite action overhead, not terminal or full authenticated socket latency
test service::tests::default_stable_refuses_silent_edge_and_persists_explicit_opt_in ... ok
test service::tests::disabled_feature_starts_no_lookup_and_rejects_settings ... ok
test service::tests::object_input_rejects_duplicates_unknown_fields_and_alternate_representations ... ok

test result: ok. 7 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.61s

     Running tests/review_pool.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/review_pool-33b687260e254fc2)

running 1 test
test pending_channel_writers_preserve_authority_read_capacity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.59s

     Running tests/review_restart.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/review_restart-ca9f44eb8cb73b10)

running 4 tests
test lookup_creates_private_staging_under_owner_restrictive_umask ... ok
test partial_metadata_restart_child ... ignored, subprocess helper for metadata restart verification
test restarted_latest_reclaims_metadata_after_process_stop ... ok
test restricted_umask_lookup_child ... ignored, subprocess helper for restricted-umask lookup verification

test result: ok. 2 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.16s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal_plugin_remote-9d5cf8bf6727606f)

running 113 tests
test inventory::authority_tests::inventory_events_keep_the_subscription_generation ... ok
test inventory::authority_tests::revocation_cancels_a_result_waiting_for_socket_credit ... ok
test inventory::tests::inventory_descriptor_is_valid_for_server_startup ... ok
test inventory::tests::list_input_refuses_parallel_authority_and_noncanonical_cursors ... ok
test remote_bindings::receive_cost_tests::repeated_mesh_ingress_cost_at_one_thousand_retained_histories ... ignored, Component timing on the authorized perf VM under its fair lock; not transport acceptance.
test remote_bindings::tests::a_copy_poll_bounds_work_before_servicing_receive ... ok
test remote_bindings::tests::a_lease_added_while_waiting_is_polled_without_another_primary_datagram ... ok
test remote_bindings::tests::a_negotiated_peer_copies_output_without_a_worker_and_off_cancels_it ... ok
test remote_bindings::tests::admitted_path_proofs_survive_mesh_retirement_and_old_key_lease_drop ... ok
test remote_bindings::tests::alias_retirement_restores_the_previous_reply_socket ... ok
test remote_bindings::tests::alternating_fresh_hints_cannot_amplify_retained_ciphertext ... ok
test remote_bindings::tests::an_encrypted_duplicate_cannot_move_the_reply_route ... ok
test remote_bindings::tests::backup_withdrawal_reconciles_idle_peers_without_canceling_another_return ... ok
test remote_bindings::tests::dropping_one_peer_removes_alternative_work_while_another_peer_lives ... ok
test remote_bindings::tests::enrolled_dual_replies_preserve_primary_and_mesh_sources ... ok
test remote_bindings::tests::lease_installed_during_a_pending_poll_cannot_lose_the_receive_wakeup ... ok
test remote_bindings::tests::legacy_enrolled_return_replay_is_bounded_and_consumed_once ... ok
test remote_bindings::tests::negotiated_enrolled_return_replay_is_bounded_and_consumed_once ... ok
test remote_bindings::tests::peer_route_preserves_the_logical_tuple_and_replays_on_return ... ok
test remote_bindings::tests::replies_follow_the_last_heard_address_and_leases_retire_their_routes ... ok
test remote_bindings::tests::retiring_mesh_lease_cancels_only_queued_alternative_reply ... ok
test remote_bindings::tests::retiring_one_route_preserves_another_peers_enrolled_return ... ok
test remote_bindings::tests::unknown_mesh_reply_waits_for_duplicate_coordinates_and_off_retires_it ... ok
test remote_bindings::tests::wildcard_reply_uses_the_destination_of_the_latest_peer_packet ... ok
test remote_path_copies::tests::arming_after_pending_wakes_the_owned_endpoint_and_clear_drops_it ... ok
test remote_path_copies::tests::cancelling_retired_work_keeps_the_next_send_receive_wakeup ... ok
test remote_path_proof::tests::fixed_header_mac_matches_independent_sha256_vectors ... ok
test remote_path_proof::tests::mixed_aggregation_preserves_all_neighboring_quic_bytes ... ok
test remote_path_proof::tests::only_current_session_response_answers_a_sent_probe ... ok
test remote_path_socket::tests::a_delayed_probe_waiter_keeps_first_send_clock_after_ack_only_traffic ... ok
test remote_path_socket::tests::a_probe_request_latches_before_its_waiter_is_polled ... ok
test remote_path_socket::tests::an_old_ack_only_send_cannot_complete_probe_emission ... ok
test remote_path_socket::tests::an_old_ack_only_send_does_not_start_a_backpressured_probe_deadline ... ignored, timed watchdog ordering proof; run under the perf VM benchmark lock
test remote_path_socket::tests::an_unrelated_reply_cannot_discard_ciphertext_needed_after_a_cut ... ok
test remote_path_socket::tests::backpressure_never_starts_or_replaces_the_probe_send_clock ... ok
test remote_path_socket::tests::cancelling_old_requests_cannot_clear_a_new_probe_generation ... ok
test remote_path_socket::tests::dedicated_receive_preserves_segmented_sends_in_single_datagram_buffers ... ok
test remote_path_socket::tests::exporting_path_keys_never_holds_the_receive_proof_lock ... ok
test remote_path_socket::tests::mesh_route_maps_only_the_trusted_tuple_and_resends_unanswered_datagrams ... ok
test remote_path_socket::tests::negotiated_copies_use_the_enrolled_socket_and_retire_on_return ... ok
test remote_path_socket::tests::segmented_replay_evicts_enough_old_datagrams_to_keep_the_byte_bound ... ok
test remote_path_socket::tests::send_gate_releases_only_one_successful_transmission ... ok
test remote_peer_routes::bench::complete_tag_lookup_at_1000_peers ... ignored, Measure only on the perf VM under its benchmark lock.
test remote_peer_routes::bench::routing_lookup_at_1000_nodes ... ignored, Measure only on the perf VM under its benchmark lock.
test remote_peer_routes::copy_scan_tests::copy_poll_cost_at_one_thousand_retained_histories ... ignored, 31 bookkeeping samples per profile on the authorized perf VM under its fair lock; not transport acceptance.
test remote_peer_routes::copy_scan_tests::history_mutation_after_an_idle_poll_still_sends_every_due_datagram ... ok
test remote_peer_routes::tests::alternative_admission_never_evicts_pending_enrolled_return ... ok
test remote_peer_routes::tests::alternative_backpressure_keeps_one_copy_and_hints_preserve_its_deadline ... ok
test remote_peer_routes::tests::alternative_queue_shares_bounds_and_never_becomes_return_history ... ok
test remote_peer_routes::tests::ciphertext_history_at_1000_peers ... ignored, Measure only on the perf VM: 31 batches of 20000 fresh/duplicate pairs across 1000 peers.
test remote_peer_routes::tests::ciphertext_history_normalizes_gro_batches_and_stays_bounded ... ok
test remote_peer_routes::tests::completed_backup_copies_cannot_be_replayed_as_a_second_return_burst ... ok
test remote_peer_routes::tests::completed_return_entries_stay_consumed_when_new_mesh_history_arrives ... ok
test remote_peer_routes::tests::output_evicting_the_oldest_copy_still_copies_one_bounded_batch ... ok
test remote_peer_routes::tests::replay_is_bounded_for_large_segmented_transmits ... ok
test remote_peer_routes::tests::retiring_an_old_lease_cannot_remove_a_reused_tuple ... ok
test remote_peer_routes::tests::shared_copy_clock_preserves_each_datagrams_deadline ... ok
test remote_peer_routes::tests::unsuccessful_backups_preserve_originals_for_explicit_recovery ... ok
test remote_quic::design_scale_review::authenticated_mesh_health_at_design_scale ... ignored, Perf VM only: distinct physical tuple health at 1000 mTLS connections.
test remote_quic::design_scale_review::authenticated_mesh_health_at_design_scale_100ms ... ignored, Perf VM only: authenticated physical health at 100ms cadence.
test remote_quic::design_scale_review::review_fast_mesh_health_at_design_scale ... ignored, Perf VM only: fast detector at 1000 mTLS connections.
test remote_quic::design_scale_review::review_production_adaptive_health_at_design_scale ... ignored, Perf VM only: production adaptive detector at 1000 mTLS connections.
test remote_quic::mtu_tests::both_directions_keep_a_mesh_safe_payload_after_discovery ... ok
test remote_quic::probe_tests::a_queued_probe_cannot_expire_before_the_socket_emits_it ... ok
test remote_quic::probe_tests::copy_first_ack_only_probes_keep_authenticated_mesh_guard_live ... ignored, Physical 15ms/30ms guard comparison on the perf VM under its benchmark lock.
test remote_quic::probe_tests::copy_first_ack_only_requested_ack_delay_five_ms_comparison ... ignored, ACK-delay hypothesis comparison on the quiet perf VM under its benchmark lock.
test remote_quic::probe_tests::copy_first_real_mesh_originals_do_not_strand_the_authenticated_mesh_guard ... ok
test remote_quic::probe_tests::enrolled_copy_replies_cannot_keep_a_dead_mesh_path_alive ... ok
test remote_quic::probe_tests::healthy_path_proofs_keep_the_configured_polling_interval ... ok
test remote_quic::probe_tests::lost_path_proof_spends_its_reserved_retry_margin ... ok
test remote_quic::probe_tests::review_invalid_mesh_packets_cannot_borrow_enrolled_authentication ... ignored, Perf VM only: real socket scheduling and path-response deadline.
test remote_quic::tests::acknowledged_idle_survives_and_replayed_packets_cannot_mask_failure ... ok
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test remote_quic::tests::mesh_liveness_keeps_authentication_and_refuses_invalid_intervals ... ok
test remote_quic::tests::one_way_authenticated_output_keeps_the_path_fresh ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_renewal::tests::credential_snapshot_does_not_block_async_reconnect ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test remote_tls::tests::outgoing_tcp_detects_a_vanished_peer_without_application_traffic ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test runtime_lock::tests::a_live_legacy_runtime_cannot_publish_an_unheld_lifetime_file ... ok
test runtime_lock::tests::cleanup_admission_prevents_starting_even_if_runtime_lock_was_removed ... ok
test runtime_lock::tests::dump_datagrams_split_exactly ... ok
test runtime_lock::tests::dump_records_accept_only_known_shapes ... ok
test runtime_lock::tests::foreign_inode_twin_inner ... ignored, runs inside the namespace prepared by the foreign-inode test
test runtime_lock::tests::internal_dispatch_checks_exact_argument_counts ... 2
ok
test runtime_lock::tests::internal_dispatch_reads_only_the_normal_command_name ... ok
test runtime_lock::tests::legacy_bound_endpoint_on_a_split_device_filesystem_is_kept ... 
running 1 test
test runtime_lock::tests::split_device_inner ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 112 filtered out; finished in 0.00s

ok
test runtime_lock::tests::legacy_inspection_finds_a_real_bound_socket ... ok
test runtime_lock::tests::legacy_inspection_is_independent_of_the_bound_name ... ok
test runtime_lock::tests::lifetime_contention_preserves_would_block ... ok
test runtime_lock::tests::lifetime_precedes_bind_and_survives_until_last_description_closes ... ok
test runtime_lock::tests::lock_links_and_replacements_are_refused ... ok
test runtime_lock::tests::managed_start_refuses_another_host_and_an_unfinished_receipt ... ok
test runtime_lock::tests::session_inspection_finds_bound_endpoints_by_identity ... ok
test runtime_lock::tests::split_device_inner ... ignored, runs inside the namespace prepared by the split-device test
test runtime_lock::tests::stale_session_endpoint_is_not_held_live_by_a_foreign_inode_twin ... 
running 1 test
test runtime_lock::tests::foreign_inode_twin_inner ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 112 filtered out; finished in 0.00s

ok
test runtime_lock::tests::unavailable_lock_support_does_not_claim_a_live_holder ... ok
test uninstall::tests::a_failed_kernel_check_stops_cleanup_before_the_service ... ok
test uninstall::tests::accepted_handoff_runs_on_a_thread_without_an_async_runtime ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test uninstall::tests::file_removal_keeps_what_setup_did_not_create ... ok
test uninstall::tests::manual_uninstall_refuses_another_hosts_installation ... ok
test uninstall::tests::replies_name_the_objects_left_as_valid_json ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test uninstall::tests::review_failed_launcher_leaves_no_plan ... ok
test uninstall::tests::review_planted_plan_is_never_followed ... ok
test uninstall::tests::uninstall_and_setup_exclude_each_other ... ok
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok

test result: ok. 98 passed; 0 failed; 15 ignored; 0 measured; 0 filtered out; finished in 14.38s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal_plugin_ssh-9c4623776f228fdb)

running 46 tests
test auth_evidence::tests::later_local_key_receipt_supersedes_an_earlier_banner ... ok
test auth_evidence::tests::partial_and_malformed_receipts_are_not_method_evidence ... ok
test auth_evidence::tests::receipt_is_identical_at_every_chunk_boundary ... ok
test auth_evidence::tests::selected_local_authentication_diagnostics_keep_method_at_every_boundary ... ok
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok
test auth_order::tests::only_exact_generated_read_only_checks_can_choose_credentials ... ok
test bootstrap::proof_tests::failed_published_facts_clean_only_the_private_probe_and_never_commit ... ok
test bootstrap::proof_tests::published_proofs_start_together_and_commit_requires_both ... ok
test bootstrap::proof_tests::review_stopped_commit_channel_finishes_the_private_probe ... ok
test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test duplex::tests::closed_receipt_channel_is_reported_as_unreachable ... ok
test duplex::tests::duplex_preserves_binary_bytes_in_both_directions ... ok
test install::tests::compaction_drops_only_comment_lines_and_indentation ... ok
test install::tests::embedded_setup_programs_have_no_constructs_compaction_would_change ... ok
test install::tests::transfer_caps_accept_only_the_fixed_record ... ok
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok
test model::failure_serialization_tests::uuid_reference_uses_the_outcome_specific_wire_key ... ok
test model::failure_serialization_tests::wire_format_is_exact_and_failure_stays_small ... ok
test payload::tests::concurrent_adds_share_the_cached_digest_allocation ... ok
test payload::tests::payload_hash_cache_at_1600_adds ... ignored, #190 public payload hash/cache measurements on the locked perf VM only
test payload::tests::replacement_and_removal_never_reuse_a_path_name_digest ... ok
test payload::tests::same_size_in_place_edits_with_restored_mtime_invalidate_the_digest ... ok
test payload::tests::settings_changes_keep_at_most_four_entries ... ok
test payload_encoding::tests::binary_replacement_never_reuses_the_previous_encoding ... ok
test payload_encoding::tests::gzip_roundtrip_and_repeated_adds_share_one_encoding ... ok
test payload_encoding::tests::small_payloads_retain_raw_streaming ... ok
test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test prompt_image::tests::helper_identity_refuses_in_place_and_path_replacement ... ok
test session_bridge::tests::failed_dispatcher_does_not_publish_a_session ... ok
test session_bridge::tests::publication_and_dispatcher_greeting_share_the_first_write ... ok
test session_bridge::tests::publication_prefix_preserves_every_dispatcher_byte_across_reads ... ok
test setup::tests::exhausted_setup_failure_retains_reason_without_offering_retry ... ok
test setup::tests::host_status_outlives_its_subscriber_and_keeps_exact_identity ... ok
test socket_connector::tests::connected_socket_has_nodelay_before_any_application_bytes ... ok
test socket_connector::tests::descriptor_delivery_keeps_the_exact_peer_after_helper_copy_closes ... ok
test socket_connector::tests::invalid_endpoint_cannot_send_a_descriptor ... ok
test stdio::tests::pipes_preserve_bytes_and_do_not_escape_into_child_exec ... ok
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok

test result: ok. 44 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.17s

     Running tests/already_added_breakit.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/already_added_breakit-99b38edbed8cc7cb)

running 1 test
test a_host_key_challenge_never_serializes_as_a_host_id ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/auth_order-7f1c9d76494c5086)

running 11 tests
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test automatic_checked_channel_selects_bridge_after_read_only_authentication ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test manual_hosts_try_available_methods_without_a_separate_none_refusal ... ok
test manual_method_trust_refusal_never_loads_later_credentials ... ok
test only_exhausted_auth_returns_typed_choose_method ... ok
test ownership_check_fallback_repeats_only_the_allowlisted_read_only_command ... ok
test ownership_checks_authenticate_once_without_replaying_a_different_check ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok

test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/build_removal-36fc813e5dfe0bb4)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.32s

     Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/concurrency-1637a17738b74cc3)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test component_off_retires_a_real_native_helper ... ok
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/config_isolation-5136cd71a92e1d23)

running 2 tests
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok
test synthetic_master_socket_is_private_at_creation ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/credentials-3016d009da101052)

running 4 tests
test credential_helper_refuses_host_trust_and_permission_prompts ... ok
test kernel_running_helper_is_materialized_in_its_private_scope ... ok
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok
test password_socket_refuses_an_unrelated_same_user_process ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.06s

     Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/diagnostics-8016ef45d5daacbd)

running 12 tests
test bootstrap_status_mapping_covers_each_step_and_approved_mode ... ok
test control_probe_statuses_preserve_actionable_setup_messages ... ok
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok
test engine_failures_keep_their_ssh_boundary_without_remote_bytes ... ok
test every_failed_step_names_the_step_and_a_next_action ... ok
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok
test failure_diagnostics_distinguish_auth_trust_transport_and_channel_without_raw_text ... ok
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok
test script_status_diagnostics_are_honest_for_all_nonzero_codes ... ok
test status_mapping_preserves_authentication_and_missing_payload_classification ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/event_metadata-735e17f4e6c1e8dc)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/foreground-0f3aada5376df028)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/host_trust-f2c4b08665836335)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/install-41cb897cde3a5ed0)

running 95 tests
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test active_transaction_is_live_between_ssh_setup_commands ... ok
test breakit2_interrupted_lock_creation_allows_cleanup_and_retry ... ok
test breakit2_rollback_preserves_foreign_launcher_new ... ok
test breakit2_rollback_preserves_foreign_unit_new ... ok
test breakit2_stage_refuses_parent_that_cannot_be_rolled_back ... ok
test buffering_setup_reader_receives_no_payload_until_selection ... ok
test checked_staging_survives_a_buffering_payload_reader_and_reuses_the_cache ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test command_failure_names_upload_join_install_and_start_separately ... ok
test commit_signal_retains_journal_until_proof_and_on_cancel ... ok
test compound_activation_and_start_failures_keep_exact_step_and_rollback ... ok
test compound_join_failure_preserves_the_original_status_and_boundary ... ok
test compound_restaging_refuses_a_foreign_journal_before_upload ... ok
test compound_setup_keeps_owned_rollback_and_linger_warning ... ok
test compressed_stage_roundtrips_and_rejects_corruption_before_execution ... ok
test concurrent_attempts_cannot_replace_or_clean_each_others_transaction ... ok
test control_cleanup_never_follows_a_socket_symlink_or_removes_regular_data ... ok
test crash_mid_install_can_roll_back_and_retry ... ok
test declared_transfer_refuses_a_different_selection_or_a_named_refusal ... ok
test declared_transfer_sends_the_payload_before_any_selection_receipt ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test duplex_check_refuses_named_failures_and_oversized_records_before_staging ... ok
test earlier_attempt_classification_preserves_status_boundary_and_authentication ... ok
test earlier_attempt_records_reject_suffixes_truncation_and_unbounded_counts ... ok
test earlier_binary_cache_is_refreshed_before_owned_recovery ... ok
test earlier_control_socket_receipt_recovers_before_a_new_setup ... ok
test early_staging_preserves_canonical_foreign_root_refusal ... ok
test enrollment_process_exit_71_is_not_reported_as_directory_refusal ... ok
test every_setup_command_fits_one_kernel_argument_in_both_modes ... ok
test facts_timeout_retires_stale_plugin_control_socket_before_retry ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test foreign_data_refusal_retains_exit_status_and_actionable_directory ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test framed_join_refusal_keeps_status_separate_from_upload ... ok
test framed_receipts_preserve_upload_failures_and_reject_extra_output ... ok
test framed_upload_keeps_invitation_after_verified_raw_and_compressed_payloads ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test full_payload_restaging_preserves_the_running_session_build ... ok
test full_stage_frees_payload_before_allocating_a_cleanup_receipt ... ok
test installed_infraternal_agent_always_restarts_without_start_limit ... ok
test interrupted_acquisition_cleanup_receipt_can_resume ... ok
test interrupted_control_cleanup_is_resumed_only_by_its_original_attempt ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test known_failed_setup_finishes_without_a_second_confirmation ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test live_setup_retry_preserves_the_bridge_and_host_identity_state ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test missing_payload_preserves_the_bootstrap_binary_remedy ... ok
test negotiated_retry_reuses_only_a_verified_cache_after_activation_refusal ... ok
test negotiated_transfer_delivers_the_invitation_after_a_buffering_head ... ok
test one_command_channel_carries_check_verified_upload_and_bridge_bytes ... ok
test optional_session_payload_is_architecture_scoped_and_refuses_symlinks ... ok
test partial_full_upload_rebridges_from_a_verified_image ... ok
test payload_reuse_never_adopts_a_foreign_cache_directory ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test reported_cache_digest_selects_reuse_without_sending_payload ... ok
test restart_recovers_partial_stage_retirement ... ok
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test retry_resends_payload_when_cache_content_changes ... ok
test retry_reuses_verified_payload_after_owned_rollback ... ok
test review_inode_reuse_after_diagnostics_preserves_live_replacement ... ok
test review_interrupted_transaction_receipt_allows_owned_cleanup ... ok
test review_live_relative_control_socket_preserves_its_receipt ... ok
test review_restart_recovers_cleanup_after_base_retirement ... ok
test review_restart_recovers_cleanup_after_owner_retirement ... ok
test review_unrelated_user_relative_socket_does_not_block_stale_cleanup ... ignored, requires sudo -n to create an isolated listener as uid 65534
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok
test session_restaging_uses_one_compound_command ... ok
test setup_receipts_require_exact_order_and_preserve_failure_boundaries ... ok
test setup_transaction_holds_a_live_lock_between_shell_commands ... ok
test staged_shell_bridge_keeps_protocol_bytes_and_releases_setup_guard ... ok
test stale_previous_attempt_socket_can_be_retired_without_manual_cleanup ... ok
test start_fresh_resumes_the_same_attempt_after_owner_confirmation ... ok
test stopped_control_socket_modes_from_service_manager_are_recoverable ... ok
test streamed_digest_refuses_a_short_file_or_a_changed_stream_before_launch ... ok
test streaming::decoded_image_and_hash_advance_before_the_transfer_tail_is_released ... ok
test successful_stage_releases_the_parent_lock_from_its_lease_child ... ok
test turning_off_paused_host_provisioning_preserves_earlier_leftovers ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok

test result: ok. 94 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 36.28s

     Running tests/mesh_ssh.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/mesh_ssh-280b4a3d88f915bc)

running 1 test
test network_identity_connect_check_and_changed_key_refusal ... ignored, requires the Go interoperability fixture; run research/ssh-client/mesh-fixture/run

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/model.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/model-1495450aa1e090c5)

running 6 tests
test addresses_never_become_options_or_shell_syntax ... ok
test check_is_exact_bounded_and_rejects_every_truncation ... ok
test consent_and_credential_references_are_the_only_request_authority ... ok
test passwordless_sudo_keeps_default_rootless_without_explicit_consent ... ok
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok
test start_fresh_is_declared_as_an_owned_host_provisioning_action ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/payload_source.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/payload_source-2c319be05840be68)

running 2 tests
test stalled_download_retains_the_named_step_before_the_attempt_deadline ... ok
test verification_failure_names_step_and_stops_before_upload ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/previous_attempt_liveness_review.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/previous_attempt_liveness_review-48e389662ef4f40f)

running 1 test
test home_alias_keeps_open_setup_descriptor_live ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.35s

     Running tests/previous_attempt_shell.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/previous_attempt_shell-ea23fd99bd99c666)

running 1 test
test shared_ownership_shell_preserves_recovery_and_refusal_invariants ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.34s

     Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/probe_check-1c2c88386281f5f7)

running 3 tests
test breakit2_no_systemd_names_the_required_manager ... ok
test manager_availability_does_not_request_its_private_environment ... ok
test shell_startup_refusal_names_an_interactive_only_remedy ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/process.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/process-2394f677df3eba95)

running 10 tests
test cancellation_retires_the_helper_descendant_too ... ok
test completed_helper_retires_descendants_with_closed_pipes ... ok
test declared_payload_flows_before_receipts_and_private_input_waits ... ok
test declared_selection_mismatch_and_missing_verification_withhold_private_input ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok
test negotiated_sources_require_an_exact_receipt_before_private_input ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok
test review_compound_refusal_preserves_receipt_when_invitation_pipe_closes ... ok
test reviewer_ssh_helper_does_not_inherit_server_reload_mask ... ok
test unavailable_negotiated_codec_never_sends_invitation ... ok

test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.34s

     Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/proxy_policy-95eaca5955b4de54)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/publication.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/publication-c8f03565e3a56074)

running 4 tests
test encoding_warmup_resolves_admitted_source_images_instead_of_configured_paths ... ok
test refused_publication_reports_failure_to_the_waiting_wizard ... ok
test retry_reopens_ssh_after_transport_loss_and_keeps_the_published_shell ... ok
test signed_session_is_typable_before_full_resolution_and_late_failure_retries_the_same_shell ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/real_ssh-e4eb9fc1f871e6b5)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/recovery_support.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/recovery_support-04633aa0d48ae329)
Private socket fixture: uid=1001 scratch=/mnt; capabilities dropped before test

running 12 tests
test cleanup_holds_runtime_lock_until_all_receipts_retire ... ok
test cleanup_script_requires_the_shipped_helper_level ... ok
test legacy_control_socket_in_newline_home_preserves_receipt ... ok
test legacy_control_socket_in_spaced_home_preserves_receipt ... ok
test legacy_control_socket_through_absolute_alias_preserves_receipt ... ok
test private_legacy_control_socket_preserves_receipt ... ok
test review_bound_control_socket_before_listen_preserves_receipt ... ok
test review_cached_helper_without_session_mode_asks_for_a_refresh ... ok
test review_live_session_socket_in_newline_home_blocks_cleanup ... ok
test review_live_session_socket_in_plain_home_blocks_cleanup ... ok
test review_stale_receipt_recovers_without_host_python ... ignored, requires sudo -n Docker and the local debian:trixie-slim image
test unrelated_same_user_relative_socket_does_not_block_cleanup ... ok

test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 2.21s

     Running tests/shadow_banner.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/shadow_banner-390b0804ed5bea42)

running 1 test
test a_long_pre_authentication_banner_does_not_refuse_the_host ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/shell_quoting.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/shell_quoting-e6b49b46dffcbe90)

running 1 test
test nested_scripts_preserve_bytes_without_expanding_public_text ... ignored, run on the owned disposable target with all supported login shells installed

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/single_connection-82df5df57e5d8a67)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/source_completeness-17850d7f3f46c0fe)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/trust_round2-acef8625a04561d9)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 8 tests
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok
test stream_tests::split_mux_header_preserves_trailing_close ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok
test tests::marked_input_preserves_legacy_bytes_and_bounds_reply_body ... ok
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal_server-1b97e649abad9095)

running 626 tests
test auth::cookies::measurement::cookie_latency_at_50_sessions ... ignored, local optimized cookie reader measurement at 50 browser sessions
test auth::cookies::tests::duplicates_missing_invalid_and_nontext_fail_closed ... ok
test auth::cookies::tests::joined_split_reordered_and_other_cookies ... ok
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::migration_compat_tests::committed_retag_can_resume_after_interruption_and_concurrent_startup ... ok
test auth::migration_compat_tests::dev_history_keeps_its_mesh_checksum_and_data ... ok
test auth::migration_compat_tests::dirty_production_migration_is_refused_without_retagging ... ok
test auth::migration_compat_tests::fresh_history_has_unique_versions_and_both_schemas ... ok
test auth::migration_compat_tests::live_production_retirement_history_survives_dev_upgrade ... ok
test auth::migration_compat_tests::occupied_destination_leaves_the_production_ledger_unchanged ... ok
test auth::migration_compat_tests::production_history_keeps_index_checksum_and_data ... ok
test auth::migration_compat_tests::unrecognized_checksum_is_refused_without_retagging ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::tests::ca_administration_tests::audit_tests::private_copy_persistence_contains_only_ciphertext_and_public_metadata ... ok
test auth::tests::ca_administration_tests::audit_tests::unlock_audit_cost_at_1000_memberships ... ignored, real 100-unlock/1000-membership audit formatting diagnostic; no own builds or browsers
test auth::tests::ca_administration_tests::audit_tests::unlock_audit_records_principal_time_outcome_without_material ... ok
test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::audit_tests::ca_start_budget_is_shared_by_routes_and_cookies_but_not_status_or_finish ... ok
test auth::tests::ca_administration_tests::http_tests::audit_tests::sequential_unlock_starts_require_a_temporal_budget ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::signed_deploy_preserves_passkey_ca_and_live_sessions ... ignored, exclusive perf VM staging proof; requires signed run artifacts and systemd
test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::staging_browser_services_probes_between_commands ... ignored, root shipping binary functional proof; requires INFRATERNAL_TEST_BINARY and private CA test root
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::authority_stall_soak::authority_fast_read_echo_rtt ... ignored, measurement for #240; run explicitly on the perf VM
test auth::tests::socket_tests::authority_stall_soak::authority_stall_soak ... ignored, measurement for #240; run explicitly on the perf VM
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::close_logging::agent_stream_loss_logs_its_safe_close_reason_and_reaches_the_browser ... ok
test auth::tests::socket_tests::close_logging::authority_read_timeout_during_a_frame_logs_authority_unavailable ... ok
test auth::tests::socket_tests::close_logging::browser_websocket_close_logs_its_code_and_safe_reason_for_attached_sessions ... ok
test auth::tests::socket_tests::close_logging::failed_client_resume_attempt_logs_each_retained_session ... ok
test auth::tests::socket_tests::close_logging::rootless_attach_without_a_live_peer_logs_the_host_and_keeps_the_socket_up ... ok
test auth::tests::socket_tests::close_logging::session_lookup_store_error_logs_authority_unavailable ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::plugin_lifecycle::plugin_exchange_correlates_results_after_subscription_events ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok
test auth::tests::socket_tests::restart_open_liveness_review::responsive_socket_survives_a_held_terminal_open_with_an_existing_attachment ... ok
test auth::tests::socket_tests::review_authority_retry::renewing_retries_do_not_drain_the_pool_during_a_write_stall ... ok
test auth::tests::socket_tests::review_authority_retry::session_expiring_during_the_wait_is_not_revived_or_served ... ok
test auth::tests::socket_tests::review_close_log::attaches_to_unowned_session_ids_cannot_flood_the_close_log ... ok
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_input_credit::browser_input_overload_retires_only_the_terminal_stream ... ok
test auth::tests::socket_tests::review_input_credit::browser_output_credit_refusal_logs_the_stream_reason ... ok
test auth::tests::socket_tests::review_input_credit::idle_browser_probes_do_not_renew_or_poll_session_authority ... ok
test auth::tests::socket_tests::review_input_credit::idle_probe_authority_cancels_waiting_write_on_committed_revocation ... ok
test auth::tests::socket_tests::review_input_credit::idle_probe_authority_refreshes_expiry_after_authorized_activity ... ok
test auth::tests::socket_tests::review_input_credit::idle_server_probes_do_not_renew_session_authority ... ok
test auth::tests::socket_tests::review_input_credit::pending_browser_input_counts_against_slots_and_cancels_on_drop ... ok
test auth::tests::socket_tests::review_input_credit::pending_browser_input_has_a_wire_byte_bound ... ok
test auth::tests::socket_tests::review_input_credit::review_full_input_writer_preserves_browser_control_progress ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket ... ok
test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close ... ok
test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery ... ok
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::socket_tests::transient_authority_stall::authority_read_stall_beyond_the_wait_still_fails_closed ... ok
test auth::tests::socket_tests::transient_authority_stall::authority_read_stall_shorter_than_the_wait_keeps_the_socket_and_its_order ... ok
test auth::tests::socket_tests::transient_authority_stall::teardown_does_not_renew_the_session ... ok
test auth::tests::socket_tests::transient_authority_stall::teardown_with_a_busy_store_does_not_wait_for_authority ... ok
test auth::tests::socket_tests::transient_authority_stall::terminal_stream_survives_authority_stalls_without_loss_or_reorder ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser ... ok
test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies ... ok
test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test bootstrap_api::tests::setup_status_tests::late_setup_subscriber_receives_failure_and_retry_completion ... ok
test bootstrap_api::tests::setup_status_tests::setup_replay_outlives_its_socket_and_logout_retires_delivery ... ok
test bootstrap_api::tests::split_cookie_fields_preserve_bootstrap_owner_authority ... ok
test bootstrap_api::tests::start_fresh_request_is_bound_to_a_target_and_public_challenge ... ok
test bootstrap_runtime::failure_log_tests::one_line_contains_only_classified_public_coordinates ... ok
test bootstrap_runtime::failure_log_tests::start_fresh_logs_only_the_exact_public_ownership_journal_and_outcome ... ok
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test bootstrap_runtime::remote_backend::admission_tests::installed_admission_waits_for_the_active_route ... ok
test bootstrap_runtime::remote_backend::canary_tests::cancellation_keeps_the_owned_session_available_for_cleanup ... ok
test bootstrap_runtime::remote_backend::canary_tests::failed_attachment_finishes_the_private_command ... ok
test bootstrap_runtime::remote_backend::canary_tests::private_writers_reserve_the_browser_allocator_without_publishing_sessions ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_primary_exit_without_reattaching_to_a_retired_session ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::already_added_breakit::a_non_owner_session_never_learns_the_owners_host_id ... ok
test bootstrap_runtime::remote_backend::tests::already_added_breakit::a_revoked_host_never_names_its_id ... ok
test bootstrap_runtime::remote_backend::tests::already_added_breakit::the_typed_address_decides_which_host_is_named_when_two_match ... ok
test bootstrap_runtime::remote_backend::tests::automatic_cleanup_requires_the_exact_failed_server_host_binding ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_concurrent_same_destination_issues_only_one_invitation ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::breakit2_live_ssh_install_join_and_terminal ... ignored, #169 live disposable Docker target; invoke docs/verification/addhost-breakit2/measure.py
test bootstrap_runtime::remote_backend::tests::breakit2_live::compound_retry_fixture_reaches_install_boundary ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::live_fixture_keeps_authority_after_connection_retirement ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::live_fixture_keeps_the_full_image_and_selects_the_explicit_session_image ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::provisioning_https_uses_production_tcp_admission ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_unpublished_invitation_retires_durable_authority ... ok
test bootstrap_runtime::remote_backend::tests::cancelled_invitation_after_commit_retires_its_host_record ... ok
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::destination_reservation_admission_at_1600_pending_hosts ... ignored, #169 local bounded-journal scale evidence under CPUWeight scope
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_runtime::remote_backend::tests::retirement_contention::cancelled_invitation_retires_after_sqlite_busy_timeout ... ok
test bootstrap_runtime::remote_backend::tests::review_cleanup::review_cancelled_committed_invitation_survives_temporary_writer_contention ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok
test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test ca_handoff::shipping_tests::browser_client::tests::probes_are_answered_without_assertion_reads_and_drop_closes_the_socket ... ok
test ca_handoff::shipping_tests::shipping_child ... ok
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY
test ca_handoff::tests::exec_child ... ok
test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok
test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok
test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok
test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok
test ca_http::intake_tests::chunked_intake_is_bounded_before_parsing ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test ca_memory::tests::unavailable_secure_heap_refuses_root_and_warns_for_nonroot ... ok
test ca_update_audit_tests::every_ciphertext_byte_and_tag_mutation_refuses_without_material_in_errors ... ok
test ca_update_audit_tests::handoff_descriptor_is_close_on_exec_and_prepare_failure_preserves_source ... ok
test ca_update_audit_tests::handoff_memory_protection_failure_keeps_the_existing_signer ... ok
test ca_update_audit_tests::no_timer_locks_signing_and_wrong_issuer_cannot_replace_the_unlocked_source ... ok
test ca_update_audit_tests::secure_heap_capacity_at_10000_live_keys ... ignored, isolated secure heap sizing at 10000 live keys; run with no own builds/browser overlap
test ca_update_audit_tests::unlocked_signer_requires_persistent_locked_pages ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok
test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test embedded::exit_latency_tests::shim_sigkill_to_server_inventory_latency ... ignored, real daemon artifact and 200 shim exits; run with INFRATERNAL_BIN in a weighted scope
test embedded::priming::flights::tests::queued_sibling_failure_stays_owned_until_the_actor_observes_it ... ok
test embedded::priming::flights::tests::stop_preserves_finished_success_and_identifies_unpolled_cancellation ... ok
test embedded::priming::header_tests::blocked_promotion_header_does_not_stop_actor_control_progress ... ok
test embedded::priming::header_tests::promoted_owned_attach_opens_a_missing_native_writer_binding ... ok
test embedded::priming::header_tests::promotion_never_publishes_an_unstarted_shadow_flight_as_credited ... ok
test embedded::priming::tests::abandoned_preparation_cancels_even_before_the_owned_task_first_polls ... ok
test embedded::priming::tests::flow_control_blocked_shadow_does_not_stop_actor_control_progress ... ok
test embedded::priming::tests::later_input_is_hedged_without_resending_the_first_suffix ... ok
test embedded::priming::tests::overlap_and_stale_snapshot_do_not_spend_browser_credit ... ok
test embedded::priming::tests::shadow_input_and_snapshot_credit_have_independent_bounded_windows ... ok
test embedded::priming::tests::snapshot_notice_precedes_repaint_and_duplicates_spend_no_browser_credit ... ok
test embedded::priming::tests::stream_reuse_waits_for_the_retired_flight_to_join ... ok
test embedded::regressions::actor_batch_probes_every_ready_route_without_payload_notifications ... ok
test embedded::regressions::agent_link_loss_invalidates_the_last_live_session_snapshot ... ok
test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok
test embedded::regressions::credit_tests::retained_input_credit_parks_only_the_full_writer_until_its_ack ... ok
test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::expired_route_retires_full_consumer ... ok
test embedded::regressions::expired_route_waits_for_browser_authority_before_rebind ... ok
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test embedded::regressions::greeted_links_that_die_young_escalate_the_actor_retry_delay ... ok
test embedded::regressions::half_open_infraternal_agent_route_loses_inventory_without_eof ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test embedded::regressions::idle_route_proofs_do_not_queue_payload_notifications_at_capacity ... ok
test embedded::regressions::liveness_doubt_breakit_r2_tests::a_pinned_dead_host_retires_within_two_ceilings_without_doubt ... ok
test embedded::regressions::liveness_doubt_breakit_r2_tests::a_window_that_reconnects_mid_doubt_is_told_and_recovered ... ok
test embedded::regressions::liveness_doubt_breakit_r2_tests::doubt_retry_sends_one_notice_per_window_per_episode ... ok
test embedded::regressions::liveness_doubt_breakit_tests::a_window_full_at_doubt_start_is_told_on_a_later_tick ... ok
test embedded::regressions::liveness_doubt_breakit_tests::doubt_and_retire_times_per_rtt ... ok
test embedded::regressions::liveness_doubt_breakit_tests::inflated_host_link_still_retires_a_dead_host_within_four_seconds ... ok
test embedded::regressions::liveness_doubt_breakit_tests::queued_path_at_the_ceiling_does_not_flap_doubt_every_probe ... ok
test embedded::regressions::liveness_doubt_breakit_tests::retired_doubt_never_confirms_a_replacement_link_mid_replay ... ok
test embedded::regressions::native_input_retention_leaves_terminal_probes_to_the_route ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test embedded::regressions::path_tests::full_ack_releases_retention_and_duplicate_input_is_not_replayed ... ok
test embedded::regressions::path_tests::full_retention_replays_as_legal_frames_with_contiguous_offsets ... ok
test embedded::regressions::path_tests::initial_attachment_keeps_input_cut_through_before_its_first_ack ... ok
test embedded::regressions::path_tests::input_retention_cost_at_200_terminals ... ignored, Run alone on the perf VM under the shared benchmark lock.
test embedded::regressions::path_tests::input_retention_refuses_excess_before_advancing_the_cursor ... ok
test embedded::regressions::path_tests::replacement_replays_only_the_unacknowledged_suffix_and_queued_input ... ok
test embedded::regressions::path_tests::reply_queue_deadline_and_live_reply_do_not_change_typing_offsets ... ok
test embedded::regressions::path_tests::review_pending_input_limit_retires_only_its_attachment ... ok
test embedded::regressions::plugin_control_notice_preserves_capability_invalidation ... ok
test embedded::regressions::query_reply_compatibility_notice_is_strict_and_session_bound ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovered_route_ignores_stale_browser_rebind ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::replay_complete_notice_is_accepted_by_embedded_server ... ok
test embedded::regressions::resumed_writer_closes_previous_route_before_shared_stream_reuse ... ok
test embedded::regressions::resumed_writer_for_other_session_preserves_live_route ... ok
test embedded::regressions::saturated_control_pong_does_not_retire_connection ... ok
test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok
test embedded::writes::tests::bounded_lane_metadata_and_flight_sizes ... ok
test embedded::writes::tests::cached_promotion_ack_never_replays_inside_the_actor ... ok
test embedded::writes::tests::enabling_owned_writes_preserves_unsent_replacement_input ... ok
test embedded::writes::tests::full_control_lane_keeps_all_terminal_owner_slots_available ... ok
test embedded::writes::tests::promotion_headers_preserve_attach_credit_ack_input_order ... ok
test embedded::writes::tests::saturated_control_queue_preserves_fifo_and_shutdown_owns_flights ... ok
test embedded::writes::tests::socket_completion_cannot_spend_unacknowledged_writer_credit ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test enrollment::bootstrap_retirement::ownership_regression::retirement_requires_an_unfinished_intent ... ok
test enrollment::bootstrap_retirement::tests::proven_completion_is_owner_bound_and_survives_restart ... ok
test enrollment::bootstrap_retirement::tests::retirement_consumes_only_its_owned_intent_with_the_tombstone ... ok
test enrollment::bootstrap_retirement::tests::startup_preserves_a_published_live_session_and_its_setup_intent ... ok
test enrollment::bootstrap_retirement::tests::startup_retires_only_unfinished_provisioning_and_is_idempotent ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test liveness::tests::a_doubt_recovered_at_the_ceiling_pins_until_the_path_drains ... ok
test liveness::tests::a_recovered_doubt_below_the_ceiling_keeps_early_notice ... ok
test liveness::tests::a_reply_during_doubt_clears_it_and_renews_the_route ... ok
test liveness::tests::an_unanswered_host_link_retires_at_the_startup_grace_without_doubt ... ok
test liveness::tests::delayed_server_probe_does_not_expire_an_answered_route ... ok
test liveness::tests::healthy_reply_survives_a_150ms_server_stall ... ok
test liveness::tests::host_allowance_covers_one_loss_recovery_and_browser_routes_keep_theirs ... ok
test liveness::tests::host_allowance_has_a_floor_a_settled_long_haul_value_and_a_ceiling ... ok
test liveness::tests::host_link_doubts_on_the_first_miss_and_retires_on_the_second ... ok
test liveness::tests::jitter_allowance_decays_after_the_link_settles ... ok
test liveness::tests::late_native_probe_keeps_its_unissued_reply_allowance ... ok
test liveness::tests::missing_replies_expire_even_with_probes_in_flight ... ok
test liveness::tests::pipelined_requests_do_not_renew_an_outstanding_deadline ... ok
test liveness::tests::quiet_dead_peer_expires_within_floor_plus_one_interval ... ok
test liveness::tests::ready_reply_only_pulls_forward_an_answered_probe_after_one_tick ... ok
test liveness::tests::recent_application_progress_preserves_the_first_tick_cadence ... ok
test liveness::tests::restarting_monitoring_never_reuses_an_old_issued_probe ... ok
test liveness::tests::serial_probe_accepts_a_timely_rtt_step_without_renewing_unsolicited_replies ... ok
test liveness::tests::serial_probe_deadline_includes_only_one_gap_and_the_estimated_allowance ... ok
test liveness::tests::terminal_routes_still_end_their_lease_on_the_first_miss ... ok
test liveness::tests::variation_uses_the_previous_smoothed_sample ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test mesh_api_tests::storage_diagnostics::changed_storage_failure_reports_the_previous_count ... ok
test mesh_api_tests::storage_diagnostics::coordinator_clones_share_failure_counts_and_report_recovery ... ok
test mesh_api_tests::storage_diagnostics::coordinator_loading_preserves_missing_server_and_sql_reasons ... ok
test mesh_api_tests::storage_diagnostics::coordinator_stored_column_refuses_without_panic_and_recovers_after_repair ... ok
test mesh_api_tests::storage_diagnostics::invalid_stored_column_is_skipped_without_panicking ... ok
test mesh_api_tests::storage_diagnostics::invalid_stored_host_is_reported_once_by_id ... ok
test mesh_api_tests::storage_diagnostics::malformed_host_keeps_healthy_inventory_readable ... ok
test mesh_api_tests::storage_diagnostics::malformed_unrelated_host_preserves_scoped_inventory ... ok
test mesh_api_tests::storage_diagnostics::repeated_storage_failure_has_bounded_diagnostics ... ok
test mesh_api_tests::storage_diagnostics::settings_storage_failure_has_a_safe_original_reason ... ok
test mesh_api_tests::storage_diagnostics::sqlite_admission_failures_have_distinct_safe_reasons ... ok
test mesh_api_tests::storage_diagnostics::storage_failures_have_safe_reasons_and_recover_after_repair ... ok
test mesh_api_tests::storage_diagnostics::unrelated_success_does_not_reset_a_persistent_write_failure ... ok
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test plugins::node_lifecycle::tests::disabling_replacement_and_retirement_join_the_correct_node_worker ... ok
test release_build_tests::release_build_marker_is_explicit ... ok
test release_http::tests::bounded_body_status_and_existing_destination_are_refused ... ok
test release_http::tests::https_cannot_silently_accept_a_plaintext_bucket ... ok
test release_http::tests::unsupported_scheme_credentials_query_and_fragment_never_connect ... ok
test release_latest::tests::bench_bounded_metadata_verification ... ignored, local weighted-scope verification latency benchmark
test release_latest::tests::bench_latest_fifty_callers ... ignored, local weighted-scope 50-caller real-engine RSS measurement
test release_latest::tests::edge_pointer_is_verified_in_its_own_channel ... ok
test release_latest::tests::pointer_authenticates_signed_version_and_refuses_replays_tampering_and_duplicates ... ok
test release_latest::tests::stable_empty_reports_opt_in_without_edge_request ... ok
test release_manifest::tests::noncanonical_or_cross_channel_identity_is_refused ... ok
test release_manifest::tests::signed_identity_and_exact_bytes_are_required ... ok
test release_payload::tests::a_missing_payload_never_enables_development_fallback ... ok
test release_payload::tests::a_valid_older_release_replayed_under_the_requested_version_is_refused ... ok
test release_payload::tests::advertised_session_missing_digest_or_signature_never_falls_back ... ok
test release_payload::tests::cache_symlinks_and_shared_files_are_refused ... ok
test release_payload::tests::concurrent_session_requests_publish_one_verified_artifact ... ok
test release_payload::tests::cross_architecture_cold_and_warm_cache_measurements ... ignored, run release-profile measurements in a weighted scope
test release_payload::tests::dangling_session_cache_symlink_is_refused_without_publication ... ok
test release_payload::tests::development_session_fallback_only_uses_trusted_local_artifacts_for_missing_release ... ok
test release_payload::tests::edge_add_host_keeps_exact_server_version_and_verified_cache ... ok
test release_payload::tests::eight_concurrent_add_hosts_share_one_verified_download ... ok
test release_payload::tests::missing_wrong_version_tampered_network_and_development_only_fallback ... ok
test release_payload::tests::partial_download_restart_child ... ignored, subprocess helper for release-cache restart verification
test release_payload::tests::refused_session_release_never_uses_development_fallback ... ok
test release_payload::tests::resolver_startup_removes_only_owned_inactive_private_staging ... ok
test release_payload::tests::restarted_resolution_reclaims_partial_downloads_after_process_stop ... ok
test release_payload::tests::session_cache_refuses_shared_payloads_symlinks_and_unsafe_absence ... ok
test release_payload::tests::session_payloads_are_signed_on_both_architectures_and_reused_offline ... ok
test release_payload::tests::session_staging_cleanup_preserves_active_and_unknown_files ... ok
test release_payload::tests::signed_download_cache_hit_offline_and_tampered_cache ... ok
test release_payload::tests::signed_session_absence_is_cached_and_reauthenticated_offline ... ok
test release_payload::tests::signed_session_version_replay_and_untrusted_key_are_refused ... ok
test release_verify::tests::compiled_authorities_keep_production_and_isolate_staging ... ok
test release_verify::tests::openssh_signatures_preserve_descriptor_and_reject_every_byte_mutation ... ok
test release_verify::tests::per_run_signature_obeys_the_compiled_feature_boundary ... ok
test release_verify::tests::trust_namespace_hash_trailing_data_and_manifest_ambiguity_are_refused ... ok
test release_verify::tests::verification_twenty_megabytes_fifty_runs ... ignored, run release-profile measurements in a weighted scope
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test remote_guard::cut_tests::cancellation_survives_last_transport_until_durable_tombstone ... ok
test remote_guard::cut_tests::provisional_ssh_authority_requires_exact_pending_owner_and_uid ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test remote_inventory::pagination_tests::long_destinations_stay_bounded_and_all_pages_are_complete ... ok
test remote_inventory::tests::admitted_hosts_are_account_scoped_offline_and_revocation_filtered ... ok
test remote_inventory::tests::unredeemed_invitations_are_not_admitted_and_cursors_are_canonical ... ok
test remote_mesh_revocation_tests::committed_host_revocation_pushes_peer_withdrawal_without_polling ... ok
test remote_removal::review_tests::accepted_uninstall_names_the_objects_it_leaves ... ok
test remote_removal::review_tests::no_commands_for_a_host_setup_did_not_install ... ok
test remote_removal::review_tests::review_manual_commands_are_gated_on_this_hosts_bootstrap_owner ... ok
test remote_removal::review_tests::review_manual_commands_stop_only_this_installations_sessions ... ok
test remote_removal::review_tests::review_manual_rootful_commands_delete_only_marked_kernel_objects ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test remote_runtime::tests::additional_listeners::additional_listener_keeps_underlay_address_and_retires_with_its_lease ... ok
test remote_runtime::tests::additional_listeners::additional_listener_refuses_unenrolled_certificate_before_proof_reply ... ok
test remote_runtime::tests::additional_listeners::admitted_connection_moves_to_a_leased_address_and_back_without_readmission ... ok
test remote_runtime::tests::additional_listeners::initial_overlay_admission_has_no_underlay_guess ... ok
test remote_runtime::tests::additional_listeners::ipv6_wildcard_listener_reuses_binding_and_preserves_ipv4_discovery ... ok
test remote_runtime::tests::additional_listeners::leased_tcp_admits_current_identity_releases_lease_and_keeps_primary_usable ... ok
test remote_runtime::tests::additional_listeners::wildcard_listener_reuses_binding_and_tracks_destination_lease_counts ... ok
test remote_runtime::tests::cancelled_native_read_retains_dequeued_packet ... ok
test remote_runtime::tests::candidate_proofs::candidate_proof_refuses_a_second_probe_and_invalid_hello ... ok
test remote_runtime::tests::candidate_proofs::quic_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok
test remote_runtime::tests::candidate_proofs::tls_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::late_native_detach_after_peer_close_keeps_the_control_connection ... ok
test remote_runtime::tests::late_native_detach_after_peer_stop_keeps_the_control_connection ... ok
test remote_runtime::tests::ping_flood::primary_ping_during_terminal_flood ... ignored, 10-minute real PTY measurement; pinned VM lock and INFRATERNAL_PING_BINARY required
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::remote_peer_routing_capability_does_not_retain_the_host_registry ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok
test remote_runtime::tests::retired_native_writer_frames_cannot_close_or_ack_its_replacement ... ok
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::ssh_bridge::component_off_retires_ssh_fallback_after_installed_admission ... ok
test remote_runtime::tests::ssh_bridge::refused_installed_reattachment_restores_the_ssh_writer ... ok
test remote_runtime::tests::ssh_bridge::ssh_bridge_does_not_invent_node_path_capabilities ... ok
test remote_runtime::tests::ssh_bridge::ssh_bridge_retires_only_after_installed_writer_acknowledges ... ok
test remote_runtime::tests::ssh_bridge::ssh_greeting_keeps_full_capabilities_and_coalesced_frames ... ok
test remote_runtime::tests::ssh_bridge::ssh_greeting_refuses_invalid_first_frames_and_releases_its_master ... ok
test remote_runtime::tests::standby::a_second_parked_fallback_cannot_replace_the_first ... ok
test remote_runtime::tests::standby::control_pause::cancelled_control_packet_survives_pause_and_resumes_before_queued_sibling ... ok
test remote_runtime::tests::standby::control_queue::saturated_native_control_queue_does_not_hide_primary_terminal_output ... ok
test remote_runtime::tests::standby::control_queue::scheduled_probe_preserves_primary_at_full_native_control_capacity ... ok
test remote_runtime::tests::standby::detached_primed_writers_release_native_binding_budget ... ok
test remote_runtime::tests::standby::liveness_doubt::one_missed_primary_reply_shows_reconnecting_and_only_a_second_retires_the_link ... ok
test remote_runtime::tests::standby::parked_fallback_is_cancelled_by_ledger_revocation ... ok
test remote_runtime::tests::standby::parked_fallback_survives_greeting_deadline_and_activates_without_another_hello ... ok
test remote_runtime::tests::standby::primed_fallback_activates_after_the_primary_closes ... ok
test remote_runtime::tests::standby::primed_fallback_hedges_when_credit_arrives_behind_a_blocked_primary_write ... ok
test remote_runtime::tests::standby::primed_fallback_hedges_while_primary_native_send_buffer_is_full ... ok
test remote_runtime::tests::standby::primed_hedge_survives_blocked_control_call ... ok
test remote_runtime::tests::standby::primed_standby_greets_without_replacing_the_live_actor_before_activation ... ok
test remote_runtime::tests::standby::tcp_fallback_parks_without_a_host_actor_and_activates_on_the_existing_tls_channel ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_standby::tests::bounded_standby_options_reject_ambiguous_or_unrecognized_fields ... ok
test remote_standby::tests::cancelled_queue_admission_releases_parking_before_actor_poll ... ok
test remote_standby::tests::parking_is_per_identity_bounded_and_released_on_drop ... ok
test remote_standby_request::tests::requests_require_objects_and_exact_fields ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
test runtime::remote_demo_tests::cold_start::release_transition_recovers_enrolled_host_after_long_outage ... ignored, requires isolated release binaries and a ten-minute outage
test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test runtime::temporal_admission_tests::ca_budget_cost_at_capacity ... ignored, isolated debug admission diagnostic at 4096 principals; run without own build overlap
test runtime::temporal_admission_tests::windows_principals_and_capacity_remain_bounded ... ok
test runtime::tests::empty_no_color_does_not_disable_terminal_logs ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test stream_close::tests::a_close_naming_no_owned_session_prints_none_for_session_and_host ... ok
test stream_close::tests::a_dead_logger_is_counted_and_summarised_by_the_callers ... ok
test stream_close::tests::a_full_queue_drops_and_counts_instead_of_blocking ... ok
test stream_close::tests::a_full_table_keeps_rate_limiting_a_storm ... ok
test stream_close::tests::an_unavailable_agent_stream_is_reported_as_a_link_drop ... ok
test stream_close::tests::client_chosen_session_ids_share_their_accounts_window ... ok
test stream_close::tests::close_line_has_session_counters_and_never_copies_untrusted_close_text ... ok
test stream_close::tests::close_path_cost ... ignored, manual microbenchmark
test stream_close::tests::different_accounts_and_reason_categories_each_get_their_first_line ... ok
test stream_close::tests::mixed_reasons_and_closers_in_one_window_are_named_as_mixed ... ok
test stream_close::tests::one_close_line_and_one_summary_bound_an_account_storm ... ok
test stream_close::tests::the_thread_writes_the_first_close_and_summarises_the_rest_on_shutdown ... ok
test terminal_queries::census_tests::census_cleanup_is_host_scoped_and_preserves_detached_live_queries ... ok
test terminal_queries::corpus_tests::output_chunking_preserves_bounded_query_state ... ok
test terminal_queries::grammar_tests::binds_reply_kind_and_all_color_query_fields ... ok
test terminal_queries::lifecycle_tests::ended_sessions_release_query_slots ... ok
test terminal_queries::overflow_tests::oversized_osc_does_not_hide_the_next_query ... ok
test terminal_queries::tests::deadline_includes_incomplete_query ... ok
test terminal_queries::tests::marked_flood_never_allocates_queries ... ok
test terminal_queries::tests::only_one_reply_across_viewers_and_replay ... ok
test terminal_queries::tests::response_grammars_refuse_trailing_typing_and_wrong_kind ... ok
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test websocket::cookie_tests::duplicate_cookie_fields_deny_socket_session ... ok
test websocket::cookie_tests::split_cookie_fields_preserve_socket_session ... ok
test websocket::link_notice_tests::doubt_notices_reach_only_viewers_that_announced_them_and_never_await_an_ack ... ok
test websocket::receive_tests::browser_websocket_close_keeps_its_code_and_discards_unknown_reason_text ... ok
test websocket::receive_tests::buffered_control_frames_cannot_monopolize_a_transport_turn ... ok
test websocket::receive_tests::receive_failures_keep_protocol_size_and_idle_classifications ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test websocket::session_inventory_tests::available_snapshot_reports_live_rows_and_bounded_saved_exit_statuses ... ok
test websocket::session_inventory_tests::census_waiting_for_database_does_not_close_a_newly_created_live_session ... ok
test websocket::session_inventory_tests::inventory_reconciliation_at_200_sessions_and_50_accounts ... ignored, independent scale diagnostic; run in a weighted scope
test websocket::session_inventory_tests::pending_agent_inventory_hides_cached_rows_until_the_first_census ... ok
test websocket::session_inventory_tests::reconciliation_before_saved_exit_keeps_the_authoritative_exit_status ... ok
test websocket::session_inventory_tests::restart_reconciliation_keeps_live_rows_and_closes_missing_rows ... ok
test websocket::write_tests::a_stalled_group_has_one_absolute_write_budget ... ok
test websocket::write_tests::ready_proofs_keep_message_boundaries_and_order_with_one_flush ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_fails_closed_at_the_bounded_wait ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_keeps_its_connection_owner_runnable ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_rejects_expiry_committed_by_its_operation ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_rejects_revocation_committed_by_its_operation ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_stops_side_effects_at_expiry ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_stops_side_effects_on_revocation ... ok
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok
test websocket_transport::queue_tests::full_browser_transport_proof_queue_keeps_connection_usable ... ok
test websocket_transport::queue_tests::full_browser_wire_proof_queue_keeps_connection_usable ... ok
test websocket_transport::tests::each_receive_end_has_a_structured_terminal_close_reason ... ok
test websocket_transport::tests::no_probe_in_an_active_idle_active_window ... ok

test result: ok. 574 passed; 0 failed; 52 ignored; 0 measured; 0 filtered out; finished in 380.05s

     Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/catalog_startup-0cc2a21db5bdb009)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/enrollment-da6f6bc526730a8e)

running 6 tests
test concurrent_redemption_has_one_winner_and_one_certificate ... ok
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.44s

     Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/mesh_parser-53adbbeaac9bee95)

running 2 tests
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok
test review_grant_parser_rejects_unknown_nested_port_fields ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/mesh_review_plugin-2b5c5891c407e664)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/mesh_review_policy-b523d9249fd86f2a)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/mesh_review_role_scope-68bf054b7c4a424b)

running 2 tests
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok
test role_scopes_require_an_array_when_provided ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/native_probe_correlation_review.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/native_probe_correlation_review-48536fc69a9add81)

running 23 tests
test healthy_real_socket_survives_a_150ms_server_stall ... ok
test liveness::tests::a_doubt_recovered_at_the_ceiling_pins_until_the_path_drains ... ok
test liveness::tests::a_recovered_doubt_below_the_ceiling_keeps_early_notice ... ok
test liveness::tests::a_reply_during_doubt_clears_it_and_renews_the_route ... ok
test liveness::tests::an_unanswered_host_link_retires_at_the_startup_grace_without_doubt ... ok
test liveness::tests::delayed_server_probe_does_not_expire_an_answered_route ... ok
test liveness::tests::healthy_reply_survives_a_150ms_server_stall ... ok
test liveness::tests::host_allowance_covers_one_loss_recovery_and_browser_routes_keep_theirs ... ok
test liveness::tests::host_allowance_has_a_floor_a_settled_long_haul_value_and_a_ceiling ... ok
test liveness::tests::host_link_doubts_on_the_first_miss_and_retires_on_the_second ... ok
test liveness::tests::jitter_allowance_decays_after_the_link_settles ... ok
test liveness::tests::late_native_probe_keeps_its_unissued_reply_allowance ... ok
test liveness::tests::missing_replies_expire_even_with_probes_in_flight ... ok
test liveness::tests::pipelined_requests_do_not_renew_an_outstanding_deadline ... ok
test liveness::tests::quiet_dead_peer_expires_within_floor_plus_one_interval ... ok
test liveness::tests::ready_reply_only_pulls_forward_an_answered_probe_after_one_tick ... ok
test liveness::tests::recent_application_progress_preserves_the_first_tick_cadence ... ok
test liveness::tests::restarting_monitoring_never_reuses_an_old_issued_probe ... ok
test liveness::tests::serial_probe_accepts_a_timely_rtt_step_without_renewing_unsolicited_replies ... ok
test liveness::tests::serial_probe_deadline_includes_only_one_gap_and_the_estimated_allowance ... ok
test liveness::tests::terminal_routes_still_end_their_lease_on_the_first_miss ... ok
test liveness::tests::variation_uses_the_previous_smoothed_sample ... ok
test unissued_native_probe_reply_cannot_extend_readiness ... ok

test result: ok. 23 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.16s

     Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/plugin_host_review-7f78344df2b01660)

running 7 tests
test review_completed_call_survives_normal_worker_exit ... ok
test review_core_topic_remains_core_owned_even_when_declared ... ok
test review_disable_answers_inflight_call ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_exited_worker_ends_its_subscriptions ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_undeclared_topic_is_left_to_the_core ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.52s

     Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/plugin_settings_review-59a2888e459a1f74)

running 3 tests
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.55s

     Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/remote_plugin_contract-b49df6bb39ae4b7e)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.30s

     Running tests/review_mesh_host_removal.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/review_mesh_host_removal-e63b2314fa088e86)

running 1 test
test revoked_remote_host_is_withdrawn_from_mesh_peer_policy ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s

     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal_session-6640403118fc7305)

running 2 tests
test tests::fresh_exec_closes_dumpability_before_private_startup ... 
running 1 test
test tests::fresh_exec_closes_dumpability_before_private_startup ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 1 filtered out; finished in 0.00s

ok
test tests::unsupported_commands_cannot_start_operator_roles_or_open_state ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal_shim-022fbdb3b60fdd6e)

running 96 tests
test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::deferred_frame_keeps_its_borrowed_storage_and_ordered_trailing_bytes ... ok
test frame::checks::golden::every_frozen_message ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test frame::checks::maximum_deferred_frame_retries_without_growing_storage ... ok
test frame::checks::query_reply_extension_is_bounded_and_fragment_safe ... ok
test frame::checks::shared_writer_selector_is_fixed_length_and_fragment_safe ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok
test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok
test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok
test locale::tests::invalid_shell_expressions_are_ignored ... ok
test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok
test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok
test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok
test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok
test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok
test pty::child_locale_tests::spawned_login_shell_receives_selected_locale_without_other_host_variables ... ok
test pty::child_signal_tests::child_policy_closes_the_control_descriptor_before_direct_exec ... ok
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... 
running 1 test
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 95 filtered out; finished in 0.00s

ok
test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap
test ring::checks::tests::wrap_and_exact_offsets ... ok
test session::inputs::reply_tests::replies_preserve_selected_writer_cursor_and_geometry ... ok
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::sequenced_checks::a_completed_deferred_frame_gives_its_trailing_input_a_fresh_ticket ... ok
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::sequenced_checks::coalesced_probe_and_input_preserve_the_written_ack_in_both_orders ... ok
test session::sequenced_checks::negotiated_queue_deferral_validates_ranges_before_waiting ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_seeded_smoke ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok

test result: ok. 83 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 50.63s

     Running tests/detach.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/detach-8befbd8d3fa85e20)

running 2 tests
test closed_standard_descriptors_become_dev_null ... ok
test detached_child_restores_default_signals_without_changing_parent ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.35s

     Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/mouse-ea97bd9caecc8e0d)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.18s

     Running tests/process_exit_descriptor.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/process_exit_descriptor-50d77b6c4248f0f9)

running 2 tests
test descriptor_is_cloexec_and_observes_a_real_process_exit ... ok
test invalid_pid_never_creates_a_descriptor ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal_status-7910dde34bdac077)

running 12 tests
test tests::a_manager_that_does_not_answer_is_unknown_not_down ... ok
test tests::an_unanswering_manager_only_makes_its_own_unit_unknown ... ok
test tests::nothing_installed_says_so ... ok
test tests::production_server_is_a_running_server_with_two_mesh_peers ... ok
test tests::rootful_agent_is_a_host_with_its_own_state_directory ... ok
test tests::rootful_agent_reads_mesh_peers_from_its_state_directory ... ok
test tests::rootless_agent_is_read_from_the_user_manager ... ok
test tests::server_and_host_on_one_machine_is_both ... ok
test tests::snapshot_scan_counts_peers_through_nesting_strings_and_spacing ... ok
test tests::stopped_server_unit_is_stopped_not_unknown ... ok
test tests::the_headline_names_what_is_down_and_how_to_look ... ok
test tests::the_headline_says_how_to_join_when_nothing_is_installed ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.19s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_backup

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_relay

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_release

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_status

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

(test: 796s)

==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-d307/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   ├── infraternal-fuzz v0.1.0
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0 (*)
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   ├── infraternal-server v0.1.0 (*)
         │   │   │   │   └── infraternal-session v0.1.0
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-mesh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   └── infraternal-plugin-mesh v0.1.0
         │   │   │       ├── infraternal v0.1.0 (*)
         │   │   │       ├── infraternal-agent v0.1.0 (*)
         │   │   │       ├── infraternal-fuzz v0.1.0 (*)
         │   │   │       └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-backup v0.1.0
         │   │   │   └── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   ├── infraternal-plugin-relay v0.1.0
         │   │   │   └── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-release v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   ├── infraternal-plugin-release v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-d307/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   ├── infraternal-server v0.1.0 (*)
         │   └── infraternal-session v0.1.0
         ├── infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-mesh v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   └── infraternal-plugin-mesh v0.1.0
         │   │   │   │       ├── infraternal v0.1.0 (*)
         │   │   │   │       ├── infraternal-agent v0.1.0 (*)
         │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │       └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-backup v0.1.0
         │   │   │   │   └── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-relay v0.1.0
         │   │   │   │   └── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-release v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   ├── infraternal-plugin-release v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   ├── infraternal-plugin-ssh v0.1.0
                     │   │   ├── infraternal v0.1.0 (*)
                     │   │   ├── infraternal-fuzz v0.1.0 (*)
                     │   │   ├── infraternal-server v0.1.0
                     │   │   │   ├── infraternal v0.1.0 (*)
                     │   │   │   └── infraternal-fuzz v0.1.0 (*)
                     │   │   └── infraternal-session v0.1.0
                     │   └── infraternal-server v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   ├── infraternal-fuzz v0.1.0 (*)
                     │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-d307/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   ├── infraternal-server v0.1.0 (*)
     │   │   │       │   └── infraternal-session v0.1.0
     │   │   │       ├── infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │       ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │       ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-backup v0.1.0
     │   │   │       │   │   │   │   └── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-relay v0.1.0
     │   │   │       │   │   │   │   └── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-release v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-release v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── infraternal-plugin-remote v0.1.0 (*)
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.46
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.15
             └── rustls v0.23.46 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   ├── infraternal-fuzz v0.1.0 (*)
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   │   ├── infraternal-server v0.1.0
     │       │       │   │   │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   │   └── infraternal-session v0.1.0
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-mesh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │       └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-backup v0.1.0
     │       │       │   │   │   └── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-relay v0.1.0
     │       │       │   │   │   └── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-release v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-shim v0.1.0
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │       │       │   │   ├── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-session v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── infraternal-plugin-remote v0.1.0 (*)
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.46
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.15
     │               └── rustls v0.23.46 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-mesh v0.1.0 (*)
         ├── infraternal-plugin-release v0.1.0 (*)
         ├── infraternal-plugin-remote v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── (dev) infraternal-status v0.1.0
         │   └── infraternal v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-d307/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   │   ├── infraternal-server v0.1.0
     │       │   │   │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   │   └── infraternal-session v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-mesh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   └── infraternal-plugin-mesh v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       ├── infraternal-agent v0.1.0 (*)
     │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │       └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-backup v0.1.0
     │       │   │   │   └── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-relay v0.1.0
     │       │   │   │   └── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-release v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   ├── infraternal-plugin-release v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   ├── hyper v1.11.1
         │   │   ├── axum v0.8.9
         │   │   │   ├── infraternal-fuzz v0.1.0
         │   │   │   └── infraternal-server v0.1.0
         │   │   │       ├── infraternal v0.1.0
         │   │   │       └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── axum-server v0.8.0
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── hyper-util v0.1.21
         │   │   │   ├── axum v0.8.9 (*)
         │   │   │   ├── axum-server v0.8.0 (*)
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   │   ├── infraternal v0.1.0 (*)
         │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal v0.1.0 (*)
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   │   ├── infraternal-server v0.1.0 (*)
             │   │   │   │   └── infraternal-session v0.1.0
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-mesh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   └── infraternal-plugin-mesh v0.1.0
             │   │   │       ├── infraternal v0.1.0 (*)
             │   │   │       ├── infraternal-agent v0.1.0 (*)
             │   │   │       ├── infraternal-fuzz v0.1.0 (*)
             │   │   │       └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-backup v0.1.0
             │   │   │   └── infraternal v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   │   ├── infraternal-plugin-relay v0.1.0
             │   │   │   └── infraternal v0.1.0 (*)
             │   │   ├── infraternal-plugin-release v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   ├── infraternal-plugin-release v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-d307/Cargo.lock:199:1
    │  
199 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
200 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   ├── infraternal-fuzz v0.1.0 (*)
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   │   ├── infraternal-server v0.1.0
          │       │       │   │   │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   │   └── infraternal-session v0.1.0
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-mesh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │       └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-backup v0.1.0
          │       │       │   │   │   └── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-relay v0.1.0
          │       │       │   │   │   └── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-release v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-shim v0.1.0
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
          │       │       │   │   ├── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-session v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── infraternal-plugin-remote v0.1.0 (*)
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.46
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.15
          │               └── rustls v0.23.46 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-mesh v0.1.0 (*)
              ├── infraternal-plugin-release v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── (dev) infraternal-status v0.1.0
              │   └── infraternal v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-d307/Cargo.lock:201:1
    │  
201 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
202 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   ├── infraternal-plugin-ssh v0.1.0
              │   │   ├── infraternal v0.1.0 (*)
              │   │   ├── infraternal-fuzz v0.1.0 (*)
              │   │   ├── infraternal-server v0.1.0
              │   │   │   ├── infraternal v0.1.0 (*)
              │   │   │   └── infraternal-fuzz v0.1.0 (*)
              │   │   └── infraternal-session v0.1.0
              │   └── infraternal-server v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   ├── infraternal-fuzz v0.1.0 (*)
              │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-d307/Cargo.lock:204:1
    │  
204 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
205 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-d307/Cargo.lock:206:1
    │  
206 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
207 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
208 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │   └── infraternal-session v0.1.0
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │       ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │       ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │       │   │   │   │   └── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │       │   │   │   │   └── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-release v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   ├── infraternal-plugin-ssh v0.1.0
      │               │   │   ├── infraternal v0.1.0 (*)
      │               │   │   ├── infraternal-fuzz v0.1.0 (*)
      │               │   │   ├── infraternal-server v0.1.0
      │               │   │   │   ├── infraternal v0.1.0 (*)
      │               │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │               │   │   └── infraternal-session v0.1.0
      │               │   └── infraternal-server v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   ├── infraternal-fuzz v0.1.0 (*)
      │               │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │       ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │       └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-backup v0.1.0
      │   │       │       │   │   │   └── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-relay v0.1.0
      │   │       │       │   │   │   └── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-release v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-shim v0.1.0
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-session v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.46
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.15
      │   │               └── rustls v0.23.46 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── (dev) infraternal-status v0.1.0
      │       │   └── infraternal v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-d307/Cargo.lock:250:1
    │  
250 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
251 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   ├── infraternal-server v0.1.0 (*)
      │           │   │   └── infraternal-session v0.1.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── infraternal-shim v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   ├── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-session v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-mesh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │       │   ├── infraternal-plugin-backup v0.1.0
      │       │   │   └── infraternal v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   ├── infraternal-plugin-relay v0.1.0
      │       │   │   └── infraternal v0.1.0 (*)
      │       │   ├── infraternal-plugin-release v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-release v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   │   ├── infraternal-server v0.1.0
      │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │       │   │   └── infraternal-session v0.1.0
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-release v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       └── infraternal-shim v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0 (*)
      │           ├── infraternal-fuzz v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── infraternal-plugin-ssh v0.1.0 (*)
      │           ├── infraternal-server v0.1.0 (*)
      │           └── infraternal-session v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-mesh v0.1.0
      │   │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.46
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.15
      │       │   │           └── rustls v0.23.46 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-shim v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-release v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── (dev) infraternal-status v0.1.0
      │       │   │       │   └── infraternal v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.46 (*)
      │       │           └── rustls-webpki v0.103.15 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.46 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.2
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── (dev) infraternal v0.1.0 (*)
      │       ├── (dev) infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-remote v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-d307/Cargo.lock:253:1
    │  
253 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
254 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   ├── infraternal-server v0.1.0
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   └── infraternal-session v0.1.0
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │       ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-backup v0.1.0
      │       │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-relay v0.1.0
      │       │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-release v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-d307/Cargo.lock:256:1
    │  
256 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
257 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   ├── infraternal v0.1.0 (*)
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   ├── infraternal-server v0.1.0
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-session v0.1.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-fuzz v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-release v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   ├── infraternal-fuzz v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-d307/Cargo.lock:258:1
    │  
258 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
259 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   ├── infraternal v0.1.0 (*)
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal v0.1.0 (*)
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   ├── infraternal-plugin-ssh v0.1.0
          │       │   │   ├── infraternal v0.1.0 (*)
          │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │   │   ├── infraternal-server v0.1.0
          │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │   │   └── infraternal-session v0.1.0
          │       │   └── infraternal-server v0.1.0 (*)
          │       ├── infraternal-fuzz v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-backup v0.1.0
          │   │   │   │   └── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-relay v0.1.0
          │   │   │   │   └── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-release v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   ├── infraternal-plugin-release v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   ├── infraternal-fuzz v0.1.0 (*)
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-d307/Cargo.lock:316:1
    │  
316 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
317 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── infraternal-plugin-remote v0.1.0
          │   ├── infraternal v0.1.0
          │   ├── infraternal-agent v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0
          │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-server v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   └── infraternal-session v0.1.0
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── infraternal-fuzz v0.1.0 (*)
          │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.46
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.15
              └── rustls v0.23.46 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   ├── infraternal-plugin-ssh v0.1.0
      │               │       │   │   ├── infraternal v0.1.0 (*)
      │               │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   │   ├── infraternal-server v0.1.0
      │               │       │   │   │   ├── infraternal v0.1.0 (*)
      │               │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │               │       │   │   └── infraternal-session v0.1.0
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-release v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               ├── infraternal v0.1.0 (*)
      │               └── infraternal-shim v0.1.0
      │                   ├── infraternal v0.1.0 (*)
      │                   ├── infraternal-agent v0.1.0 (*)
      │                   ├── infraternal-fuzz v0.1.0 (*)
      │                   ├── infraternal-plugin-remote v0.1.0 (*)
      │                   ├── infraternal-plugin-ssh v0.1.0 (*)
      │                   ├── infraternal-server v0.1.0 (*)
      │                   └── infraternal-session v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.2
      │           ├── axum v0.8.9
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   ├── hyper v1.11.1
      │           │   │   ├── axum v0.8.9 (*)
      │           │   │   ├── axum-server v0.8.0 (*)
      │           │   │   ├── hyper-util v0.1.21
      │           │   │   │   ├── axum v0.8.9 (*)
      │           │   │   │   ├── axum-server v0.8.0 (*)
      │           │   │   │   ├── infraternal v0.1.0 (*)
      │           │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── (dev) infraternal v0.1.0 (*)
      │           ├── (dev) infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-mesh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-backup v0.1.0
      │           │   │   └── infraternal v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-relay v0.1.0
      │           │   │   └── infraternal v0.1.0 (*)
      │           │   ├── infraternal-plugin-release v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-release v0.1.0 (*)
      │           ├── (dev) infraternal-plugin-remote v0.1.0 (*)
      │           ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.2 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.2 (*)
      ├── tokio v1.53.2 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok
(cargo-deny: 2s)

==> static builds
x86_64-unknown-linux-musl: exact define removed; build directories remapped; explicit paths preserved; target override refused
aarch64-unknown-linux-musl: exact define removed; build directories remapped; explicit paths preserved; target override refused
x86_64 OpenSSL source: AVX-512 GCM dispatch removed idempotently
native compiler metadata: path independent; platform/date retained; unexpected syntax refused
Rust remapping: differently named checkout roots produce identical stripped artifacts
.
----------------------------------------------------------------------
Ran 1 test in 0.001s

OK
    Finished `release` profile [optimized] target(s) in 0.96s
AES-128-GCM NIST vector encrypt/decrypt passed
production trust: PASS (staging-trust authority absent)
/home/kayg/.cache/codex-scratch/query-replies-d307/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 21223696 bytes; cap: 21223696 bytes; delta: +0 bytes
key memory: x86_64-unknown-linux-musl; memlock=8388608 bytes
Key memory initialization=1; locked pages and dump exclusion enabled
    Finished `release` profile [optimized] target(s) in 0.76s
production trust: PASS (staging-trust authority absent)
/home/kayg/.cache/codex-scratch/query-replies-d307/target/aarch64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB executable, ARM aarch64, version 1 (SYSV), statically linked, stripped
PT_INTERP: absent; size: 19415776 bytes; cap: 19415776 bytes; delta: +0 bytes
key memory: aarch64-unknown-linux-musl runtime not checked (host x86_64; native execution required)
x86_64-unknown-linux-musl: exact 21223696-byte cap PASS; 21223697 bytes rejected PASS; smaller artifact requires ratchet PASS
aarch64-unknown-linux-musl: exact 19415776-byte cap PASS; 19415777 bytes rejected PASS; smaller artifact requires ratchet PASS
unsupported target: rejected PASS
bun test v1.4.2 (744846f84)

scripts/release/static-metadata-review.test.ts:
(pass) x86_64-unknown-linux-musl compiler metadata is independent of the checkout location [28.51ms]
(pass) aarch64-unknown-linux-musl compiler metadata is independent of the checkout location [26.15ms]

 2 pass
 0 fail
 10 expect() calls
Ran 2 tests across 1 file. [103.00ms]
server subcommand: exit 2, versioned JSON unavailable result
agent group: exit 0, one parsed versioned JSON listing of its commands
(static builds: 5s)

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | PASS         |
+---------------------------+--------------+

==> Compiler metadata generator checks
bun test v1.4.2 (744846f84)

scripts/release/build-metadata.test.ts:
(pass) native metadata canonicalization retains version fields and refuses changed syntax [49.02ms]
(pass) one compiler driver remaps all source roots and preserves argument boundaries [153.56ms]

 2 pass
 0 fail
 12 expect() calls
Ran 2 tests across 1 file. [215.00ms]

==> Vendored Ghostty artifact checksums
dist/ghostty-web.js: OK
dist/ghostty-vt.wasm: OK
dist/index.d.ts: OK

==> TypeScript protocol compiler
Saved lockfile

==> Tracer compiler, precompression and bundle transfer budget
bun install v1.4.2 (744846f84)

Checked 38 installs across 69 packages (no changes) [145.00ms]
$ bun x tsc --project tsconfig.json
bun test v1.4.2 (744846f84)

precompress.test.ts:
(pass) text sidecars round-trip deterministically; compressed formats remain identity [19.34ms]

browser-build.test.ts:
(pass) the browser renderer has no unresolved Vite Node-file shim request [17.76ms]

src/perf-detector.test.ts:
(pass) FrameDetector > estimates the refresh from the median and snaps it [0.78ms]
(pass) FrameDetector > nothing is a drop before the rate is known [0.07ms]
(pass) FrameDetector > a drop is over 1.5 refresh intervals, a freeze over 100 ms [0.27ms]
(pass) FrameDetector > the refresh only goes up: a slow page is not a slower display [0.26ms]
(pass) FrameDetector > the first frame after a pause is not an interval [0.07ms]
(pass) FrameDetector > fps, p95 and window read the ring [0.13ms]
(pass) FrameDetector > a throttled page (one frame a second) is neither a drop nor a freeze, and neither is its return [0.20ms]
(pass) FrameDetector > a lone long stall is still a freeze and is not a throttled run [0.05ms]

src/canvas/recency.test.ts:
(pass) touch moves an item to the front and never duplicates it [0.15ms]
(pass) repeating the front item changes nothing [0.06ms]
(pass) the list is capped, so the oldest items fall off [0.09ms]
(pass) top skips items that are no longer live, without losing them [0.12ms]
(pass) recentRows: five used windows in reverse order of use, from 54 windows [0.22ms]
(pass) recentRows: a view with three windows and no use shows them in order [0.08ms]
(pass) recentRows: used windows lead, the rest fill up to five in window order [0.08ms]

src/canvas/status.test.ts:
(pass) a lost server connection is an error toast, never a success tick [0.56ms]
(pass) routine connection states stay out of the toast [0.05ms]
(pass) repeated connection closes do not reopen the persistent reason toast [0.12ms]
(pass) a repeated close does not retake the shared toast after a newer message replaces it [0.22ms]
(pass) a close reason stays visible through a quick reconnect and clears after a stable attach [671.11ms]

src/canvas/toolbar/palette-actions.test.ts:
(pass) a deferred split:right selection retains its original window [0.27ms]
(pass) a deferred new:below selection retains its original window [0.02ms]
(pass) a deferred close selection retains its original window [0.02ms]

src/canvas/windows/details-facts.test.ts:
(pass) host facts become plain-language details rows [2.80ms]
(pass) unknown optional host facts stay absent instead of appearing as placeholders [0.29ms]
(pass) by default the machine tab shows the D126 facts under System, Resources and Access, with no More section [0.41ms]
(pass) extended info adds only init, virtualization, how it is reached, shell and locale [0.28ms]
(pass) facts the host did not report are omitted by default, not shown as unknown [0.18ms]
(pass) the header follows the machine's own facts, not the platform the host list guessed [0.14ms]
(pass) before facts arrive the host's platform names the header [0.06ms]
(pass) a reported system with no platform mark still names the header and shows no mark [0.04ms]

src/canvas/mesh/api-retry-budget.test.ts:
(pass) a retained watch outage bounds retry requests over two logical minutes [1.33ms]

src/canvas/mesh/protocol.test.ts:
(pass) the server's own list becomes nodes, tags and grants, by name [0.48ms]
(pass) without `access` (today's server) the person may view and may not edit [0.21ms]
(pass) fields the server does not send are absent, never invented [0.14ms]
(pass) a node the server sees passing traffic is online, on its path, under its machine's name [0.04ms]
(pass) anything that is not a list is refused, whole [2.19ms]
(pass) a node's own tag list and the tag table agree even when a server sends only one [0.12ms]
(pass) the subscription's events: a pushed list, a revision that invalidates, and the end of the subscription [0.27ms]
(pass) answers carry the new revision, and a create the new arrow's id [0.07ms]
(pass) endpoints go out as the server writes them: a node by id, a tag by name [0.06ms]

src/canvas/mesh/api-recovery.test.ts:
(pass) failed watch refreshes retain one subscription through retry and release it on disposal [1.22ms]
(pass) a synchronous subscription refusal leaves retry able to install a new watch [0.32ms]
(pass) a pushed recovery cancels the scheduled retry [0.26ms]
(pass) a pushed recovery supersedes an outstanding retry failure [0.37ms]
(pass) a retry snapshot at revision 1 is ordered against a pushed recovery [0.25ms]
(pass) a retry snapshot at revision 3 is ordered against a pushed recovery [0.10ms]
(pass) a pushed liveness expiry supersedes an equal-revision retry snapshot [0.26ms]
(pass) a forbidden withdrawal cancels retry work from the retained watch [0.22ms]
(pass) a withdrawn view ignores an earlier outstanding retry result [0.26ms]
(pass) initial Mesh list handles closed transport [0.15ms]
(pass) initial Mesh list handles liveness deadline [0.04ms]
(pass) initial Mesh list handles unreadable JSON [0.04ms]
(pass) initial Mesh list handles unavailable storage [0.07ms]
(pass) initial Mesh list handles forbidden action [0.04ms]
(pass) initial Mesh list handles invalid stored host [0.06ms]
(pass) Mesh watch withdrawal handles forbidden [0.09ms]
(pass) Mesh watch withdrawal handles mesh unavailable [0.04ms]
(pass) Mesh watch withdrawal handles plugin unavailable [0.02ms]

src/canvas/mesh/layout.test.ts:
(pass) a small mesh keeps the approved arrangement: tags down the left, hosts two to a row [0.48ms]
(pass) the layout is deterministic and does not depend on input order [1.94ms]
(pass) no two cards overlap, and every card lies inside the graph [3.67ms]
(pass) the sheet is wider than tall, roughly 16:10 [0.94ms]
(pass) a pinned node stays where it was put and the others do not move [2.15ms]
(pass) a pin beyond the sheet grows the graph [0.35ms]
(pass) a host's other tags do not move it; a tag nobody carries still has its node [0.15ms]
(pass) 1,000 nodes lay out in a few milliseconds [9.31ms]

src/canvas/layout/stops.test.ts:
(pass) a view that fits the viewport has one stop, centred [0.28ms]
(pass) a wide view has one stop per column and the last stop ends at the right edge [0.16ms]
(pass) a view taller than the viewport is scaled down so it fits [0.04ms]
(pass) nearestStop picks the stop whose centre is closest [0.12ms]
(pass) a big graph opens fitted whole, in one stop, and its canvas is free [0.20ms]
(pass) a small graph keeps one stop per node column [0.16ms]
(pass) on a narrow screen a big graph does not shrink past where its names can be read: it starts at the top left [0.05ms]
(pass) centred stops (a phone's strip) rest every column mid-screen, the first and last included [0.08ms]

src/canvas/layout/grid.test.ts:
(pass) split right in a stacked column makes a group: the window's column halves, its neighbours span both halves [1.44ms]
(pass) closing the new half gives the layout back exactly, in the model [0.77ms]
(pass) closing the window it came from makes the new half take its band, and the layout is one column again [0.30ms]
(pass) split right of a spanning window halves its span inside the existing columns, with the footprint unchanged [0.18ms]
(pass) split down in a group divides only the window's band: the partner window grows to keep its height [0.38ms]
(pass) closing the window split down gives its band back to the window above and to the partner [0.37ms]
(pass) a window split down in a plain column stacks under it and moves the windows below down [0.13ms]
(pass) new window right opens a full-size column after the whole group, never inside it [0.18ms]
(pass) runs: adjacent columns linked by a spanning window form one group, the rest stay plain [0.14ms]
(pass) spans are clamped to the columns that exist and a stale row is re-placed, never overlapped [0.08ms]
(pass) random sequences of split right, split down, new window right and close never break the grid [35.24ms]
(pass) closing every window of a group returns the view to nothing, with no problem on the way [0.42ms]
(pass) a full-width band under a group moves nothing and extends the group by one band [0.25ms]
(pass) a band inserted between two bands of one column grows the windows beside it and moves the rest [0.12ms]

src/canvas/layout/geometry.test.ts:
(pass) a dropped view pushes the one it lands on along the axis of least overlap, never itself [0.57ms]
(pass) a chain of neighbours is pushed in turn [0.11ms]
(pass) snapping rounds to whole cells [0.06ms]
(pass) reach follows grants through tags and keeps the relay [0.22ms]
(pass) phone edge to edge: a lone window is the whole area, in a strip it leaves the gap and PEEK px of each neighbour; full width is the whole area always [0.23ms]
(pass) comfortable phones: a column in a strip leaves PEEK px of each neighbour; a lone one keeps the screen less the margins [0.03ms]
(pass) a desktop column is the same alone and in a strip [0.01ms]

src/canvas/sessions/live-inventory.test.ts:
(pass) a host snapshot replaces cached session rows and keeps only live shims [1.83ms]
(pass) an unavailable agent hides remembered rows without ending them, then restores verified sessions [0.28ms]
(pass) inventory remembers a remote session and refuses a cross-host attach [0.26ms]
(pass) superseded status snapshots release records for sessions this device never opened [1.18ms]
(pass) superseding a sidecar preserves status for a window opened on this device [0.22ms]
(pass) a census predating a new shell does not permanently retire its confirmed live ID [0.19ms]
(pass) a final Close before the first positive census never revives a new ID [0.18ms]
(pass) a later absence retires a new ID after its first positive census [0.08ms]
(pass) another host's census cannot clear a new shell's census fence [0.06ms]
(pass) another host's close cannot clear a new shell's census fence [0.02ms]

src/canvas/sessions/details-live.test.ts:
(pass) a refused host facts action stops its recurring timer [0.76ms]
(pass) a detected operating system supplies the live popover mark [0.72ms]

src/canvas/sessions/live.test.ts:
(pass) the toolbar sessions seam exposes admitted host state and routes by identity [1.19ms]
(pass) an enrolled host opens by UUID and splits keep that authority [0.25ms]
(pass) an authoritative snapshot keeps an unjoined host visible while setup continues [0.20ms]
(pass) unknown and ambiguous labels never open an embedded shell [0.11ms]
(pass) removed hosts disappear from inventory and cannot route a new shell [0.20ms]
(pass) an authoritative host snapshot replaces admission with one notification [0.22ms]
(pass) the embedded inventory identity still opens locally beside an equally named remote [0.13ms]
(pass) the embedded host's mark does not wait for an account name, and no account is invented [0.05ms]

src/canvas/sessions/hosts.test.ts:
(pass) fresh storage lists an offline host added by another browser [0.91ms]
(pass) every welcome reconciles without duplicate subscriptions or hosts [0.23ms]
(pass) a removal in another browser withdraws the host [0.17ms]
(pass) a malformed page cannot partially replace the authoritative inventory [0.21ms]
(pass) a socket-authority refusal withdraws previously admitted hosts [0.22ms]
(pass) an invalidated read cannot enqueue an unsent call while the socket is down [0.26ms]

src/canvas/sessions/gone-review.test.ts:
(pass) selecting a known gone session keeps its final exited state [0.22ms]
(pass) a known retired status survives repeated selection and generic ended answers [0.15ms]

src/canvas/sessions/hosts-scale-review.test.ts:
(pass) a fresh browser discovers 10000 admitted offline hosts from complete bounded pages [11.11ms]
(pass) a fresh browser discovers 10001 admitted offline hosts from complete bounded pages [9.59ms]

src/canvas/sessions/open-refusal.test.ts:
(pass) memory refusal retains the reason and current counters [0.90ms]
(pass) legacy refusals still work and malformed counters never reach the message [0.28ms]
(pass) product copy names the host and counters and never renders untrusted server text [0.60ms]
(pass) oversized refusal JSON is ignored before parsing [0.16ms]

src/canvas/model/document.test.ts:
(pass) a document holds references and layout, never content [0.27ms]
(pass) a document survives JSON and rebuilds the same columns [0.48ms]
(pass) a target that no longer exists is dropped, and an emptied column with it [0.07ms]
(pass) parseDocument rejects anything that is not a document of this format [0.20ms]
(pass) remote affinity survives reload and invalid UUIDs cannot become local references [0.09ms]
(pass) a version 1 document from before D212 loads, with its split pair and a full-size window [0.17ms]
(pass) a grouped view saves its spans and bands and loads back to the same grid (D212) [0.22ms]
(pass) a plain view is saved without spans or bands, exactly as before D212 [0.06ms]

src/canvas/addhost/setup-feed.test.ts:
(pass) createSetupFeed > subscribes with the host and window, then hands over events in order [0.50ms]
(pass) createSetupFeed > a failure after the prompt, and a retry on the same socket [0.18ms]
(pass) createSetupFeed > a dropped socket resumes after the last sequence and repeats nothing [20.49ms]
(pass) createSetupFeed > a retry asked while offline is sent when the socket is back [20.53ms]
(pass) createSetupFeed > a resync resets the view; an error before any event reports the status lost, after one it is ignored [0.37ms]
(pass) createSetupFeed > gives up after the backoff is spent, and a release closes the socket [45.70ms]
(pass) review reconnect budget survives sockets that open then close without events [47.75ms]
(pass) review explicit retry resumes after the setup feed stops [46.42ms]

src/canvas/addhost/wizard.breakit2.test.ts:
(pass) breakit2 an explicit port on a listed host survives chip resolution [0.49ms]
(pass) breakit2 malformed bracketed IPv6 waits for correction [0.08ms]
(pass) listed host plus port retains its saved user in the serialized destination [0.09ms]
(pass) review listed inventory name plus port retains its resolved address [0.18ms]

src/canvas/addhost/setup-stages.test.ts:
(pass) parseSetupEvent > reads a well-formed event [0.06ms]
(pass) parseSetupEvent > drops anything malformed [0.04ms]
(pass) parseSetupEvent > ignores a failed step on a non-failure and an unknown step on a failure [0.03ms]
(pass) foldSetup > stages before the event's are done, later ones pending [0.10ms]
(pass) foldSetup > a stage that reports done alone still finishes [0.02ms]
(pass) foldSetup > ready done completes the run [0.02ms]
(pass) foldSetup > a failure marks the stage its step belongs to, and a retry clears it [0.08ms]
(pass) foldSetup > uploading belongs to install and the readiness check to ready [0.03ms]
(pass) setupGuide > says the terminal keeps working and what to do next, in plain words [0.09ms]
(pass) review malformed setup fields are dropped without coercion errors [0.13ms]
(pass) exhausted setup preserves eligibility and explains a new setup [0.18ms]

src/canvas/addhost/real.test.ts:
(pass) parsing the server's data > a discovery row keeps only known fields and valid ids [0.27ms]
(pass) parsing the server's data > the server key needs its public key and fingerprint [0.16ms]
(pass) parsing the server's data > an install command needs a lifetime [0.03ms]
(pass) a server that lacks an endpoint > serving the web app (200, HTML) for an unknown path is 'not available' [0.88ms]
(pass) a server that lacks an endpoint > 404 discovery is an empty list; 500 discovery is an error to show [0.15ms]
(pass) a server that lacks an endpoint > private sign-in stays local until a target-bound socket start [0.68ms]
(pass) a server that lacks an endpoint > a wrong target consumes the reference without sending private input [0.18ms]
(pass) a server that lacks an endpoint > a local reference cannot change SSH address while keeping the target id [0.13ms]
(pass) a server that lacks an endpoint > closing before open discards queued sign-in even if a late open fires [0.06ms]
(pass) a server that lacks an endpoint > pre-open commands stay bounded and events after close cannot revive a run [0.19ms]
(pass) a server that lacks an endpoint > trust waits for the exact acknowledgement, and ignores another target [0.37ms]
(pass) bootstrap failure parsing > an already-added failure keeps its existing host id [0.25ms]
(pass) bootstrap failure parsing > host ids are ignored on other failures and when malformed [0.10ms]

src/canvas/addhost/authority.on-demand.test.ts:
(pass) CA wrapping matches the contract's HKDF domain and separates generations [0.88ms]

src/canvas/addhost/model.test.ts:
(pass) stagesOf > a host with no event is waiting everywhere [0.28ms]
(pass) stagesOf > check before sign-in is detecting how to sign in [0.15ms]
(pass) stagesOf > the sign-in report finishes detect and starts the system check [0.14ms]
(pass) stagesOf > install, facts and connect map to install, enrol and first session [0.16ms]
(pass) stagesOf > an auth failure before sign-in fails detect and says it in plain words, not the server's [0.21ms]
(pass) stagesOf > an unsupported host fails the system check, after sign-in [0.09ms]
(pass) stagesOf > an install failure fails the install stage and keeps the earlier ones done [0.08ms]
(pass) stagesOf > a new attempt starts over and forgets the old sign-in [0.12ms]
(pass) authLabel > names the method and a trusted network provider only [0.06ms]
(pass) guideFor > installation failures never claim that incomplete cleanup succeeded [0.21ms]
(pass) guideFor > each failure kind names its fix [0.11ms]
(pass) guideFor > mesh-policy words say possible, not certain [0.03ms]
(pass) parseTarget > reads user, host and port [0.08ms]
(pass) parseTarget > refuses what cannot name a host [0.12ms]
(pass) parseSshConfig > reads aliases with HostName, User and Port, skipping wildcards and Match [0.56ms]
(pass) parseSshConfig > recognises config text [0.07ms]
(pass) parseSshConfig > a hostname that is an option is dropped [0.05ms]
(pass) plain words > an unknown or missing failure gets the generic sentence, never the server's text [0.08ms]
(pass) plain words > no headline carries an arrow, an id or an API noun [0.17ms]
(pass) only a completed canonical host identity becomes terminal authority [0.12ms]
(pass) parseTarget > accepts user@host, host, user@host:port, IPv4 and bracketed IPv6 with an optional port [0.09ms]
(pass) parseTarget > rejects partial and malformed tokens, so they wait or show the hint [0.06ms]
(pass) matchListed > a name that is exactly one host's id or address names that host [0.07ms]
(pass) matchListed > a name that is also the start of another host's name is named but still prefixed [0.27ms]
(pass) matchListed > a partial name that starts several hosts names none and waits [0.04ms]
(pass) matchListed > a new name that starts no host is neither named nor waiting [0.05ms]
(pass) install diagnostics name the failed step and public host error [0.08ms]
(pass) missing payload tells the operator the architecture and expected server path [0.06ms]
(pass) an already added host says so and offers opening its existing terminal [0.28ms]
(pass) release payload verification names the architecture step and plain reason [0.03ms]
(pass) leftovers pause (#169) > a check event with leftovers pauses the running attempt; the next event clears it [0.18ms]
(pass) leftovers pause (#169) > a pause without leftovers offers nothing to start fresh [1.63ms]
(pass) early terminal publication selects only its canonical host-bound shim session [0.20ms]

src/canvas/addhost/already-added-breakit.test.ts:
(pass) an already-added failure without a host id (older server) still says how to reach the terminal [0.12ms]

src/canvas/addhost/wizard.test.ts:
(pass) a saved-key prompt completing after close never starts an SSH attempt [0.55ms]
(pass) fresh CA requires setup before any SSH attempt and preserves root consent [0.43ms]
(pass) ready CA begins the requested installation mode without another prompt [0.19ms]
(pass) closing during CA confirmation never starts an SSH attempt [0.38ms]
(pass) a typed root login requires explicit consent before any installation [2.10ms]

src/canvas/views/body.test.ts:
(pass) a clean terminal exit keeps the window while host setup can still fail [0.03ms]
(pass) clean exits still close ordinary windows, and failed exits stay visible [0.01ms]

../../packages/ui/src/spring.test.ts:
(pass) a missed frame does not stretch a settled spring [0.75ms]
(pass) motion follows elapsed time across frame rates and damping regimes [1.12ms]

chunk-classes.test.ts:
(pass) the first screen is critical, the canvas product module and what only it uses are deferred [1.06ms]
(pass) a chunk that both sides use stays critical [0.60ms]
(pass) code only an action loads is on demand, even when the lazy canvas is what loads it [0.27ms]
(pass) post-terminal host inventory entry and its shared canvas imports stay deferred [0.17ms]

test/recovery-ui.test.ts:
(pass) compiled recovery UI mode off obeys its URL boundary [14.23ms]
(pass) compiled recovery UI mode preview obeys its URL boundary [3.88ms]
(pass) compiled recovery UI mode 1 obeys its URL boundary [2.46ms]

test/recovery-crypto.test.ts:
(pass) HKDF siblings match independent implementation and bind unwrap to domain, account, kind and version [14.38ms]
(pass) 100 repeated wrapping operations generate independent salts and nonces [18.56ms]

test/recovery-rotation.test.ts:
(pass) signed-in rotation sends only a local envelope and verifier after acknowledgement [10.38ms]
(pass) abandoned word acknowledgement uploads nothing [6.20ms]
(pass) settled acknowledgement cannot upload later (dismissed) [4.82ms]
(pass) settled acknowledgement cannot upload later (no acknowledgement) [4.18ms]

test/recovery-wait.test.ts:
(pass) server remaining wait 0s is accepted through the capability policy maximum [3.22ms]
(pass) server remaining wait 86400s is accepted through the capability policy maximum [5.44ms]
(pass) server remaining wait 90000s is accepted through the capability policy maximum [2.39ms]
(pass) server remaining wait 172800s is accepted through the capability policy maximum [2.24ms]
(pass) malformed or excessive remaining wait -1 is denied [2.55ms]
(pass) malformed or excessive remaining wait 0.5 is denied [2.08ms]
(pass) malformed or excessive remaining wait 172801 is denied [2.03ms]
(pass) malformed or excessive remaining wait 9007199254740992 is denied [2.40ms]
(pass) malformed or excessive remaining wait 90000 is denied [2.32ms]

test/link-doubt.test.ts:
(pass) a link doubt shows the indicator and keeps live replies and typing flowing [1.22ms]
(pass) recovery clears only its own indicator, and a real reconnect still owns the replay [0.36ms]
(pass) a notice type from a newer server is ignored, not a protocol failure [0.13ms]
(pass) the viewer announces the link-doubt capability in its Hello [1.72ms]

test/close-reasons.test.ts:
(pass) every reason the server and the agent send maps to a plain sentence, and unknown ones fall back [0.26ms]

src/close-reasons.test.ts:
(pass) a missed connection response keeps a plain and stable reason [0.03ms]
(pass) server and host close reasons identify why a terminal reconnects, in plain words [0.33ms]
(pass) routine detach and connection rotation reasons stay neutral [0.02ms]
(pass) a stream close that reattaches never says the terminal ended [0.11ms]
(pass) a recovering server link names its cause as routine status, never as a failure [0.05ms]
(pass) unknown close text is discarded instead of reaching the person or console [0.04ms]
(pass) a storm of closes prints one line per minute and counts the rest [0.27ms]
(pass) counted closes are reported when their window ends, without another close [0.06ms]

src/review-close-log.test.ts:
(pass) a reconnect the server refuses with a named Close frame still prints its console line [0.94ms]
(pass) a close summary does not claim closes from hours ago happened in the previous 60 s [0.04ms]

 257 pass
 0 fail
 11713 expect() calls
Ran 257 tests across 41 files. [1239.00ms]
$ bun run build.ts
built chunk-9dj44p0a.js, chunk-0jphd38d.js, chunk-nsssz620.js, chunk-9emh6mfy.js, chunk-rshddc30.js, chunk-04y8t6rk.js, chunk-vvfhgzxa.js, chunk-gxvqf3b8.js, chunk-gg7faby0.js, chunk-8z8q96zy.js, chunk-gzekwv56.js, chunk-g27ezx84.js, chunk-065hdb1d.js, main.js, chunk-sfgvybwa.js, chunk-e4t9f0jx.js, chunk-66twd4zb.js, chunk-5yfafb3s.js, chunk-j44va8e0.js, chunk-q02gbqrk.js, chunk-mtnxk89a.js, chunk-dyq060h4.js, chunk-kh5ft0g7.js, chunk-mdj6q6m3.js, chunk-70crbwp1.js, chunk-efr8q3g5.js, chunk-e9beyzj2.js, chunk-axbkkqp1.js, chunk-njk03r4y.js, chunk-086p2867.js, chunk-9307v2g8.js, chunk-bf3pzf22.js, chunk-nm0n7c2j.js, chunk-3q8heg5k.js, chunk-qe8mxr9k.js, chunk-e3pfp9kz.js, chunk-swyevgy1.js, chunk-69txhkhf.js, chunk-ztffnfsj.js, chunk-dndtd7wr.js, chunk-2ca69970.js, chunk-g71a46j0.js, chunk-ga7n3p96.js, chunk-0tnsam4w.js, chunk-20sr0ea5.js, chunk-v33nffnh.js, chunk-84ay34sh.js, chunk-fh0gd24c.js, chunk-xegrs9c9.js, chunk-xmm642rg.js, chunk-9xd3g65e.js, chunk-28rbcdd5.js, chunk-61xwpgvs.js, chunk-6hphcpbw.js, chunk-mmvf4v8e.js, chunk-z48tcwe1.js, chunk-vkabh9k4.js, chunk-jk5xheq9.js, backdrop.worker.js, faulty-terminal.worker.js, chunk-mvh7t168.js, chunk-f2r0hhqc.js, chunk-g548efbg.js, chunk-0h1atq4q.js, chunk-fb3p4x35.js
onDemand chunk-e3pfp9kz.js: identity=540 gzip=352 brotli=312 bytes
critical chunk-28rbcdd5.js: identity=39 gzip=39 brotli=39 bytes
onDemand chunk-8z8q96zy.js: identity=2420 gzip=1196 brotli=1075 bytes
onDemand chunk-84ay34sh.js: identity=6772 gzip=3176 brotli=2890 bytes
critical chunk-mtnxk89a.js: identity=590 gzip=329 brotli=304 bytes
onDemand chunk-04y8t6rk.js: identity=3891 gzip=1735 brotli=1504 bytes
onDemand chunk-z48tcwe1.js: identity=601 gzip=344 brotli=326 bytes
onDemand chunk-3q8heg5k.js: identity=2007 gzip=1005 brotli=857 bytes
onDemand chunk-g548efbg.js: identity=1063 gzip=651 brotli=520 bytes
onDemand chunk-9307v2g8.js: identity=6148 gzip=2779 brotli=2507 bytes
onDemand chunk-e9beyzj2.js: identity=1026 gzip=623 brotli=498 bytes
onDemand chunk-vkabh9k4.js: identity=1408 gzip=713 brotli=665 bytes
critical chunk-v33nffnh.js: identity=162 gzip=150 brotli=131 bytes
onDemand chunk-0jphd38d.js: identity=6503 gzip=2412 brotli=2148 bytes
critical chunk-sfgvybwa.js: identity=8377 gzip=3575 brotli=3181 bytes
onDemand chunk-xmm642rg.js: identity=1170 gzip=707 brotli=589 bytes
critical faulty-terminal.worker.js: identity=1086 gzip=557 brotli=487 bytes
critical backdrop.worker.js: identity=243 gzip=211 brotli=165 bytes
onDemand chunk-2ca69970.js: identity=14570 gzip=5429 brotli=4873 bytes
onDemand chunk-ztffnfsj.js: identity=4640 gzip=1932 brotli=1704 bytes
onDemand chunk-qe8mxr9k.js: identity=1649 gzip=774 brotli=675 bytes
critical chunk-kh5ft0g7.js: identity=386 gzip=239 brotli=196 bytes
onDemand chunk-swyevgy1.js: identity=11529 gzip=4655 brotli=4256 bytes
onDemand chunk-gzekwv56.js: identity=191 gzip=168 brotli=126 bytes
onDemand chunk-g27ezx84.js: identity=6265 gzip=2101 brotli=1865 bytes
onDemand chunk-fh0gd24c.js: identity=31922 gzip=12270 brotli=11044 bytes
critical chunk-axbkkqp1.js: identity=90 gzip=90 brotli=78 bytes
onDemand chunk-g71a46j0.js: identity=11067 gzip=4244 brotli=3870 bytes
critical chunk-fb3p4x35.js: identity=42576 gzip=14528 brotli=13018 bytes
deferred chunk-70crbwp1.js: identity=1565 gzip=809 brotli=731 bytes
critical chunk-mdj6q6m3.js: identity=1106 gzip=668 brotli=607 bytes
critical chunk-086p2867.js: identity=717054 gzip=207508 brotli=168542 bytes
deferred chunk-9emh6mfy.js: identity=37428 gzip=13600 brotli=12135 bytes
critical chunk-f2r0hhqc.js: identity=128 gzip=109 brotli=111 bytes
onDemand chunk-gg7faby0.js: identity=228 gzip=178 brotli=172 bytes
critical chunk-9xd3g65e.js: identity=39 gzip=39 brotli=39 bytes
critical chunk-vvfhgzxa.js: identity=707 gzip=369 brotli=309 bytes
deferred chunk-efr8q3g5.js: identity=102038 gzip=34673 brotli=30603 bytes
onDemand chunk-e4t9f0jx.js: identity=2557 gzip=1180 brotli=1003 bytes
onDemand chunk-6hphcpbw.js: identity=869 gzip=346 brotli=323 bytes
onDemand chunk-dndtd7wr.js: identity=7662 gzip=3397 brotli=2965 bytes
critical chunk-9dj44p0a.js: identity=30702 gzip=9232 brotli=8285 bytes
onDemand chunk-mmvf4v8e.js: identity=2723 gzip=1328 brotli=1142 bytes
critical chunk-q02gbqrk.js: identity=430 gzip=311 brotli=262 bytes
onDemand chunk-bf3pzf22.js: identity=2824 gzip=1386 brotli=1192 bytes
onDemand chunk-nm0n7c2j.js: identity=4596 gzip=2015 brotli=1783 bytes
onDemand chunk-0tnsam4w.js: identity=48336 gzip=15099 brotli=13455 bytes
critical chunk-gxvqf3b8.js: identity=88 gzip=88 brotli=76 bytes
critical chunk-5yfafb3s.js: identity=15639 gzip=6065 brotli=5409 bytes
onDemand chunk-njk03r4y.js: identity=10904 gzip=4424 brotli=4036 bytes
critical main.js: identity=113109 gzip=41121 brotli=35599 bytes
critical chunk-rshddc30.js: identity=4499 gzip=1858 brotli=1640 bytes
onDemand chunk-69txhkhf.js: identity=5359 gzip=2579 brotli=2304 bytes
onDemand chunk-xegrs9c9.js: identity=2466 gzip=1106 brotli=932 bytes
critical chunk-61xwpgvs.js: identity=49 gzip=49 brotli=49 bytes
critical chunk-66twd4zb.js: identity=5448 gzip=2611 brotli=2385 bytes
onDemand chunk-20sr0ea5.js: identity=6785 gzip=3029 brotli=2735 bytes
critical chunk-dyq060h4.js: identity=2519 gzip=1009 brotli=877 bytes
onDemand chunk-065hdb1d.js: identity=2108 gzip=1037 brotli=870 bytes
onDemand chunk-nsssz620.js: identity=5779 gzip=2370 brotli=2132 bytes
onDemand chunk-jk5xheq9.js: identity=724 gzip=403 brotli=361 bytes
critical chunk-mvh7t168.js: identity=9810 gzip=4017 brotli=3451 bytes
critical chunk-j44va8e0.js: identity=17627 gzip=6250 brotli=5558 bytes
onDemand chunk-ga7n3p96.js: identity=572 gzip=329 brotli=309 bytes
critical chunk-0h1atq4q.js: identity=199 gzip=163 brotli=137 bytes
JavaScript transfer, critical: identity=972702 gzip=301185/307200 brotli=250935/256000 bytes
JavaScript transfer, deferred: identity=141031 gzip=49082/51200 brotli=43469/45056 bytes
JavaScript transfer, onDemand: identity=219874 gzip=87472/20480 brotli=78018/18432 bytes
JavaScript transfer, onDemand largest chunk chunk-0tnsam4w.js: gzip=15099/20480 brotli=13455/18432 bytes (class total gzip=87472 brotli=78018, not limited)
fonts/monaspace-neon/italic.latin.woff2: identity=44324 gzip=44324 brotli=44324 bytes
fonts/monaspace-neon/roman.latin.woff2: identity=40016 gzip=40016 brotli=40016 bytes
fonts/jetbrains-mono/italic.latin.woff2: identity=36316 gzip=36316 brotli=36316 bytes
fonts/jetbrains-mono/roman.latin.woff2: identity=34068 gzip=34068 brotli=34068 bytes
fonts/source-code-pro/italic.latin.woff2: identity=23612 gzip=23612 brotli=23612 bytes
fonts/source-code-pro/roman.latin.woff2: identity=22872 gzip=22872 brotli=22872 bytes
fonts/geist-mono/italic.latin.woff2: identity=21380 gzip=21380 brotli=21380 bytes
fonts/geist-mono/roman.latin.woff2: identity=19984 gzip=19984 brotli=19981 bytes
fonts/ibm-plex-mono/italic.latin.woff2: identity=22296 gzip=22296 brotli=22296 bytes
fonts/ibm-plex-mono/roman.latin.woff2: identity=19048 gzip=19048 brotli=19047 bytes
fonts/cascadia-code/italic.latin.woff2: identity=44404 gzip=44404 brotli=44404 bytes
fonts/cascadia-code/roman.latin.woff2: identity=40604 gzip=40604 brotli=40604 bytes
fonts/maple-mono-nf/italic.latin.woff2: identity=53444 gzip=53444 brotli=53444 bytes
fonts/maple-mono-nf/roman.latin.woff2: identity=46432 gzip=46432 brotli=46432 bytes
fonts/nerd-symbols.woff2: identity=223748 gzip=223748 brotli=223748 bytes
fonts/fira-code/roman.latin.woff2: identity=36756 gzip=36756 brotli=36756 bytes
fonts/commit-mono/italic-400.latin.woff2: identity=18716 gzip=18716 brotli=18716 bytes
fonts/commit-mono/italic-700.latin.woff2: identity=18352 gzip=18352 brotli=18352 bytes
fonts/commit-mono/roman-400.latin.woff2: identity=17484 gzip=17484 brotli=17484 bytes
fonts/commit-mono/roman-700.latin.woff2: identity=17260 gzip=17260 brotli=17260 bytes
Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes

==> Rust stream oracle (for the differential test)

==> TypeScript protocol tests
bun test v1.4.2 (744846f84)

src/mesh-review-revocation.test.ts:
(pass) review forbidden event cancels pending snapshot publication [2.42ms]
(pass) subscription forbidden ends delivery before a late refresh rejection [1.47ms]
(pass) subscription not found ends delivery before a late refresh rejection [1.11ms]
(pass) subscription invalid input ends delivery before a late refresh rejection [1.15ms]
(pass) subscription mesh unavailable ends delivery before a late refresh rejection [1.13ms]
(pass) synchronous subscription refusal releases the transport exactly once [0.11ms]

src/codec.test.ts:
(pass) wire protocol golden vectors > encodes and decodes each frame exactly as the shared manifest describes [7.08ms]
(pass) wire protocol golden vectors > returns borrowed payload views and writes into reusable buffers [0.20ms]
(pass) wire protocol golden vectors > decodes muxed messages split across WebSocket messages [1.08ms]
(pass) wire protocol golden vectors > rejects oversized, non-canonical, unknown, and malformed frame bytes [0.25ms]
(pass) split mux header preserves trailing Close [0.23ms]
(pass) reply-marked Input uses an additive bounded layout without changing legacy input [0.81ms]
(pass) empty marked input reports the stable invalid-body decoder failure [0.09ms]

src/mesh-review-paged-error.test.ts:
(pass) review earlier snapshot continuation failure cannot replace a newer complete refresh [2.66ms]
(pass) review earlier snapshot continuation cannot overwrite a delivered revision [2.67ms]
(pass) a newer paged event owns publication before an earlier refresh resumes [2.46ms]

src/mesh-review-refresh.test.ts:
(pass) review superseded refresh failure cannot replace authoritative resync [1.43ms]
(pass) superseded failure preserves a newer pending refresh [2.68ms]

src/stream.test.ts:
stream differential: 141 streams, 11988 schedules, zero divergences
(pass) Rust and TypeScript preserve every frame at all boundaries and random multi-splits [2237.13ms]
(pass) maximum frame size and fragmented oversized prefix obey the allocation boundary [7.50ms]

src/mesh.test.ts:
(pass) Mesh actions map to their typed action IDs and JSON inputs [3.19ms]
(pass) Mesh watch coalesces change bursts and never publishes an older revision [4.06ms]
(pass) Mesh watch forwards server errors and stops delivering after unsubscribe [0.11ms]
(pass) Mesh enrollment carries an explicit authenticated host binding [0.24ms]

src/mesh-review-continuation.test.ts:
(pass) review continuation stops after stop [1.42ms]
(pass) review continuation stops after forbidden [1.16ms]
(pass) review continuation stops after superseded [1.15ms]

src/mesh-pagination.test.ts:
(pass) list assembles bounded pages using the same filter [0.25ms]
(pass) a changed revision discards earlier pages before assembling its restart [0.11ms]
(pass) malformed continuation is refused: {"revision":1,"offset":0} [0.15ms]
(pass) malformed continuation is refused: {"revision":2,"offset":1} [0.01ms]
(pass) malformed continuation is refused: {"revision":1,"offset":2}
(pass) watch never publishes a partial page; withdrawn=false [1.36ms]
(pass) watch never publishes a partial page; withdrawn=true [1.19ms]
(pass) a superseding equal-revision resync wins over pending page assembly [1.33ms]

src/mesh-review-resync.test.ts:
(pass) review watch applies same-revision authoritative resync [0.16ms]
(pass) authoritative resync keeps priority over an equal-revision pending list [1.41ms]

src/mesh-vectors.test.ts:
(pass) every shared Mesh action vector passes through the typed client unchanged [1.33ms]
(pass) shared Mesh event vectors drive the typed watch adapter [5.28ms]

 39 pass
 0 fail
 36135 expect() calls
Ran 39 tests across 10 files. [2.31s]
Completed D307 at **23723c0c836dd63e3415d478a56e4d87c9ce8e14**. Pushed atomically to origin/query-replies-d307 and fast-forwarded origin/query-replies from 372ec87ca. Working tree clean; no deployment. #206 is the parent tracking request. The additive capability-gated reply-marked Input binds renderer responses to the opening ESC output offset. The server admits one syntactically matching reply per query, retaining the original 1-second deadline through fan-out, replay and the bounded forwarding queue. One second covers the measured 300 ms link and browser/queue allowance while bounding stale answers; fragments and reconnect never renew it. Invalid marked text is refused without consuming the query, rather than risking typing it. Legacy unmarked Input remains ordinary typing. Unsupported surviving shims fail closed with a session notice asking for a new shell. Content-free cumulative drop diagnostics are sampled at powers of two. Bounds: 256-byte controls, 64 pending queries/session, 4,096 sessions, 1–1,024 reply bytes. Marked unknown input creates no state; terminal exits and authoritative censuses retire state. Replies cannot advance typing acknowledgements or choose viewer geometry. Validation: nine affected browser specs pass; real shipping static x86 PTY with three viewers, invalid marked bytes and 10,000 unknown replies produces QUERY_REPLIES:1 and TYPING_OK. Strict codec/golden vectors preserve u64 identities above JS's safe integer range; deterministic parser properties and the seeded 10,000-run smoke target pass (the smoke binary was not coverage-instrumented). Independent protocol/parser and screenshot review found no remaining change-specific correctness issue. Author checklist completed. Perf VM only, 50 PTYs: at 300 ms RTT native echo p99 323.47→326.03 ms (334 ms budget); browser predicted glyph p99 15.00→14.80 ms (17 ms), CPU/key p99 0.200 ms both. Paired 1,000-key native local runs show baseline 0.39–0.41 ms vs head 0.47–0.52 ms, a measured +0.08–0.11 ms rather than identical latency. Untrimmed D307 control was 0.57 ms. Complete first-run browser probes retain separate failures: baseline/head reconnect p99 1479.90/1513.30 ms vs 900 ms; head sign-in 5003.50 ms vs 5000 ms. These were not waived or reported green. Final static x86 21,223,696 bytes (same-recipe merge base 21,225,872; −2,176); ARM 19,415,776 (previous 19,427,688 ceiling; −11,912). Exact D243 ceilings ratcheted down. Only host orchestration changed s→z; no shipping dependency addition. Final JS critical identity 972,702 vs 969,830 (+2,872); gzip 301,185 vs 300,185 (+1,000); Brotli 250,935 vs 250,153 (+782). Both transfer budgets pass; compressed differences from the earlier candidate receipt are chunk-hash variation. **scripts/verify fast: exit 0 on this HEAD**, no failed or waived row. Environment: RUST_TEST_THREADS=1; explicit existing recovery-helper example; short disk-backed scratch/TMPDIR. Only recovery_support uses the documented private mount namespace alias, same uid 1001 with capabilities dropped before executing unchanged assertions. The host mount is unchanged. Earlier failed transcripts remain attached: first inode fixture allocation, then missing helper setting, then overlong absolute socket names. All now pass in the complete run. Exact reproduction and full raw transcript: [final-fast.log](https://git.kayg.org/attachments/3273429a-b36b-4c6d-a355-e21f6cf05ecc) [final-gate-reproduction.txt](https://git.kayg.org/attachments/01bd690f-878f-4c30-bda0-20f9960bebdc) Perf VM processes were gone and its entire job directory removed; own temporary baseline checkout, Cargo target, fixture roots and generated production bundle removed after verification. Raw evidence retained outside the checkout and attached above. No issues closed. Final push and cleanup receipts: [push.log](https://git.kayg.org/attachments/f6c0b1fe-5d4e-4c7d-b6b6-2993751d0885) [host-cleanup-audit.log](https://git.kayg.org/attachments/fb9c2ea0-ff88-46fe-802e-ee61c58c9eac) [build-cleanup.log](https://git.kayg.org/attachments/387bab19-98c3-4b83-b836-f912c421ee72) <details><summary>Verbatim scripts/verify fast output (exit 0)</summary> ````text ==> Repository artifact size gate repository artifact gate: PASS (40 changed path(s), merge base f29713863e5d) ==> Release deployment functional checks .....Release build failed for aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa; gate log retained .Build deferred: host capacity limit reached ......... ---------------------------------------------------------------------- Ran 15 tests in 0.686s OK . ---------------------------------------------------------------------- Ran 1 test in 0.098s OK bun test v1.4.2 (744846f84) scripts/release/deploy-review.test.ts: REMOTE_ADMISSION unsigned_x86_payload=true refused=true (pass) remote admission refuses an x86 payload outside the signed manifest [210.85ms] {"state": "deployed", "ca_unlocked": true} WEB_ONLY_RECORD candidate_binary_recorded=false (pass) web-only deployment does not record the candidate as the running binary [208.53ms] ALIAS_RECOVERY restart_requests=2 (pass) alias restoration failure still requests the retained warm rollback [190.09ms] 3 pass 0 fail 3 expect() calls Ran 3 tests across 1 file. [615.00ms] METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=295.97 p99_ms=307.61 result=PASS ==> fmt (fmt: 3s) ==> VT native fmt (VT native fmt: 0s) ==> CLI plugin compile-out disabled CLI plugin dependencies: absent from normal dependency graph warning: function `print_progress` is never used --> crates/infraternal/src/cli/output.rs:592:8 | 592 | pub fn print_progress<T: Serialize>(result: &CommandResult<T>, json: bool, to_stderr: bool) { | ^^^^^^^^^^^^^^ | = note: `#[warn(dead_code)]` (part of `#[warn(unused)]`) on by default warning: function `write_output` is never used --> crates/infraternal/src/cli/output.rs:616:8 | 616 | pub fn write_output(output: Result<String, serde_json::Error>, to_stderr: bool) { | ^^^^^^^^^^^^ warning: `infraternal` (bin "infraternal" test) generated 2 warnings Finished `test` profile [unoptimized + debuginfo] target(s) in 0.14s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal-9c4fc48b971836fc) running 37 tests test cli::actions::default_build_tests::default_build_registers_no_unbuilt_command ... ok test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok test cli::actions::tests::agent_session_integration_target_is_gated_by_agent_plugin ... ok test cli::actions::tests::compiled_out_mesh_has_no_registered_commands ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::no_default_plugins_register_no_component_commands ... ok test cli::actions::tests::server_only_dependencies_are_removed_with_server_plugin ... ok test cli::command_tree::tests::compiled_out_plugin_has_no_help_or_parse_path ... ok test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test cli::command_tree::tests::node_build_omits_and_refuses_server_commands ... ok test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok test cli::command_tree::tests::public_help_is_plain_words ... ok test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok test cli::output::tests::a_failure_says_why_and_what_to_do ... ok test cli::output::tests::exit_codes_follow_d303 ... ok test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}} {"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}} ok test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok test cli::usage::tests::missing_arguments_are_listed_by_name ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test result: ok. 37 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.25s Blocking waiting for file lock on package cache Blocking waiting for file lock on package cache Blocking waiting for file lock on package cache Finished `test` profile [unoptimized + debuginfo] target(s) in 0.53s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal-a2d65766d1f23d58) running 100 tests test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok test cli::actions::hosted_tests::production_descriptors_share_cli_registry_and_skills ... ok test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::hidden_ssh_session_bridge_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test cli::command_tree::tests::hidden_ssh_session_action_parses_existing_session_rendezvous ... ok test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok test cli::command_tree::tests::public_help_is_plain_words ... ok test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok test cli::output::tests::a_failure_says_why_and_what_to_do ... ok test cli::output::tests::exit_codes_follow_d303 ... ok test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}} {"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}} ok test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok test cli::usage::tests::missing_arguments_are_listed_by_name ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test remote::tests::join_re_enrolls_for_a_moved_server_but_not_a_renamed_one ... ok test remote::tests::join_re_enrolls_the_same_hosts_identity_and_refuses_another_host ... ok test remote::tests::join_refuses_the_same_host_id_from_another_server ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test remote::tests::replace_aborts_when_the_identity_changed_since_it_was_read ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test remote_service::tests::link_failure_does_not_wait_forever_for_blocking_work ... ok test remote_service::tests::polling_panic_reaches_bounded_shutdown ... ok test remote_service::tests::successful_link_return_is_a_service_failure ... ok test restart::recovery_tests::verified_exec_and_late_refusal_preserve_listener_and_ca ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test restart::tests::deleted_path_review::relative_recovery_after_atomic_install_keeps_live_install_path ... ok test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok test restart::tests::path_review::late_recovery_from_path_invocation_keeps_install_target ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ok test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ok test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ok test restart_binary::audit_tests::verification_twenty_megabytes ... ignored, optimized weighted 20 MiB signature and admission measurement test restart_image::tests::probe_never_inherits_the_control_descriptor ... ok test restart_image::tests::snapshot_refuses_every_mutation_and_preserves_source_offset ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok test ssh_internal::tests::connect_requires_exactly_a_host_and_numeric_port ... ok test ssh_internal::tests::connector_is_available_only_on_the_initiating_build ... ok test ssh_internal::tests::session_accepts_only_the_two_spawned_shapes ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test startup_tests::shared_reactor_preserves_borrows_errors_and_panic_cleanup ... ok test result: ok. 99 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 26.96s Blocking waiting for file lock on package cache Finished `test` profile [unoptimized + debuginfo] target(s) in 0.28s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal_agent-c0f5ee2d4c7be28c) running 1 test test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 72 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal_mesh-c7263890e5528429) running 1 test test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal_plugin_backup-63687278dacedd2d) running 1 test test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal_plugin_relay-05772b88ed06ec15) running 1 test test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal_plugin_ssh-8d15d5d3bffc0793) running 1 test test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 42 filtered out; finished in 0.00s (CLI plugin compile-out: 28s) ==> clippy Blocking waiting for file lock on package cache Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.80s (clippy: 1s) ==> test Finished `test` profile [unoptimized + debuginfo] target(s) in 0.70s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal-7de1f15af67158e9) running 100 tests test cli::actions::default_build_tests::default_build_registers_no_unbuilt_command ... ok test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::hidden_ssh_session_bridge_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test cli::command_tree::tests::hidden_ssh_session_action_parses_existing_session_rendezvous ... ok test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok test cli::command_tree::tests::public_help_is_plain_words ... ok test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok test cli::output::tests::a_failure_says_why_and_what_to_do ... ok test cli::output::tests::exit_codes_follow_d303 ... ok test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}} {"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}} ok test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok test cli::usage::tests::missing_arguments_are_listed_by_name ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test remote::tests::join_re_enrolls_for_a_moved_server_but_not_a_renamed_one ... ok test remote::tests::join_re_enrolls_the_same_hosts_identity_and_refuses_another_host ... ok test remote::tests::join_refuses_the_same_host_id_from_another_server ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test remote::tests::replace_aborts_when_the_identity_changed_since_it_was_read ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test remote_service::tests::link_failure_does_not_wait_forever_for_blocking_work ... ok test remote_service::tests::polling_panic_reaches_bounded_shutdown ... ok test remote_service::tests::successful_link_return_is_a_service_failure ... ok test restart::recovery_tests::verified_exec_and_late_refusal_preserve_listener_and_ca ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test restart::tests::deleted_path_review::relative_recovery_after_atomic_install_keeps_live_install_path ... ok test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok test restart::tests::path_review::late_recovery_from_path_invocation_keeps_install_target ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ok test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ok test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ok test restart_binary::audit_tests::verification_twenty_megabytes ... ignored, optimized weighted 20 MiB signature and admission measurement test restart_image::tests::probe_never_inherits_the_control_descriptor ... ok test restart_image::tests::snapshot_refuses_every_mutation_and_preserves_source_offset ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok test ssh_internal::tests::connect_requires_exactly_a_host_and_numeric_port ... ok test ssh_internal::tests::connector_is_available_only_on_the_initiating_build ... ok test ssh_internal::tests::session_accepts_only_the_two_spawned_shapes ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test startup_tests::shared_reactor_preserves_borrows_errors_and_panic_cleanup ... ok test result: ok. 99 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 41.35s Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/agent_daemon-eace6b0012b5a1db) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 32.97s Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/agent_queues-165eb353c7531f59) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 35.17s Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/agent_review-3ad2a12c0615b84c) running 8 tests test initial_attach_requires_explicit_credit_before_replay ... ok test last_typist_selects_its_own_real_pty_dimensions ... ok test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 34.99s Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/agent_sessions-f2332706b84f8f8c) running 3 tests test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test latency_fixture_accepts_the_unsolicited_startup_inventory ... ok test restart_discovery_keeps_a_live_shim_and_drops_clean_exit_and_sigkill ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.63s Running tests/cli_envelope.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/cli_envelope-661ccc970097d9ee) running 8 tests test a_missing_server_is_not_found_exit_4 ... ok test an_unknown_command_is_a_usage_envelope_that_does_not_echo_odd_input ... ok test bare_infraternal_is_the_overview_and_points_to_help ... ok test component_commands_fail_in_the_envelope_when_the_agent_is_not_there ... ok test every_command_reports_a_usage_error_in_the_envelope_naming_the_argument ... ok test read_only_commands_answer_in_the_envelope ... ok test status_exits_0_on_a_machine_with_nothing_installed ... ok test status_exits_5_when_something_that_should_run_is_down ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.37s Running tests/cli_review.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/cli_review-d55a30e0250e5756) running 16 tests test a_dry_run_plan_keeps_its_line_breaks ... ok test a_dumb_terminal_gets_neither_colour_nor_marks ... ok test a_failing_command_in_json_mode_prints_exactly_one_envelope ... ok test a_group_with_one_command_says_so_in_the_singular ... ok test a_malformed_host_id_is_a_usage_error_exit_2 ... ok test a_missing_runtime_directory_is_not_called_a_bad_reply ... ok test a_subcommand_does_not_advertise_options_it_ignores ... ok test a_usage_error_in_text_mode_does_not_echo_the_odd_input ... ok test an_empty_no_color_is_ignored ... ok test an_unknown_skill_is_not_found_exit_4 ... ok test ctrl_c_in_json_mode_ends_with_an_interrupted_envelope_and_exit_130 ... ok test json_help_and_version_are_envelopes_too ... ok test no_compiled_python_is_tracked ... ok test root_help_fits_80_columns ... ok test status_is_not_down_when_the_service_manager_cannot_be_asked ... ok test user_facing_text_never_says_agent_alone ... ok test result: ok. 16 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.02s Running tests/cli_review_r2.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/cli_review_r2-fb28189eb99511bc) running 11 tests test a_failed_later_page_emits_only_the_failure_envelope ... ok test a_later_runtime_handler_is_not_bypassed_by_the_interrupt_handler ... ok test a_mistyped_word_that_looks_like_a_token_is_not_echoed ... ok test a_paged_listing_is_still_one_envelope ... ok test an_unknown_skill_does_not_echo_what_was_typed ... ok test ctrl_c_in_a_script_loop_stops_the_loop ... ok test ctrl_c_while_the_result_is_being_written_never_leaves_a_broken_line ... ok test help_and_version_under_json_are_one_envelope_and_exit_0 ... ok test status_text_does_not_call_an_unanswered_unit_not_running ... ok test three_pages_preserve_order_and_only_the_final_cursor ... ok test usage_errors_under_json_are_one_envelope_and_exit_2 ... ok test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.04s Running tests/cli_review_r3.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/cli_review_r3-ab163f75bc325020) running 4 tests test a_pending_blocked_interrupt_emits_notice_and_terminates_by_sigint ... ok test a_pending_interrupt_during_final_output_preserves_result_and_sigint_status ... ok test inherited_ignored_sigint_stays_ignored_during_cli_output ... ok test signal_fixture ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.13s Running tests/cli_review_r3_arguments.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/cli_review_r3_arguments-48fd77d7d0173dff) running 1 test test inherited_fd_is_rejected_instead_of_ignored_by_remote_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/idle_canary-1e1ec5c3674e0f56) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.12s Running tests/key_memory.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/key_memory-db0b9ddee7c51dd5) running 1 test test diagnostic_requires_locked_pages_and_supports_json_without_public_help ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/remote_output-2e9aad8bb717b41b) running 1 test test remote_refusal_matches_its_declared_cli_output ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/session_bounds_review.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/session_bounds_review-c8d51c5accea5d04) running 1 test test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.97s Running tests/session_exit_events.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/session_exit_events-4b2712c16f493a8f) running 1 test test idle_daemon_discovers_unattached_and_adopted_shim_exit_without_requests ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.70s Running tests/session_retention.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/session_retention-19237533b041ac30) running 1 test test bounded_owned_exit_reconnects_as_ended_with_status ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.56s Running tests/setup_output.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/setup_output-8adba6b7d790f6d5) running 1 test test setup_output_keeps_legacy_and_versioned_readers ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/shim.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/shim-882f35597e3d6cb6) running 24 tests test attached_backpressure_and_detached_progress ... ok test delivered_exit_cannot_release_another_owning_window ... ok test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok test detached_shell_exit_reaps_shim_within_one_second ... ok test disallowed_signal_only_disconnects_peer ... ok test double_fork_survives_parent_death ... ok test dropped_deferred_peers_release_slots_before_the_pty_drains ... ok test fresh_shared_peer_negotiates_while_another_shared_input_is_deferred ... ok test independent_shared_writers_wait_for_the_same_global_queue ... ok test legacy_output_subscription_unblocks_deferred_shared_input ... ok test malformed_shared_successor_does_not_evict_the_live_shared_peer ... ok test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok test owned_exit_releases_promptly_on_window_close ... ok test parked_shared_writer_does_not_stop_detached_pty_progress ... ok test real_shell_reconnect_resize_and_delivered_exit ... ok test replacement_connection_and_malformed_limit ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test shared_input_waits_for_global_queue_space_without_losing_the_suffix ... ok test shared_writer_coexists_and_replayed_input_is_written_once ... ok test shared_writer_refusals_and_full_peer_limit_preserve_the_live_writer ... ok test shared_writer_restores_durable_geometry_after_another_writer_types ... ok test unowned_normal_exit_retires_promptly_and_records_status ... ok test user_scope_survives_parent_unit_stop ... active ok test writer_replacement_is_per_mode_and_fresh_ordinary_writers_stay_optional ... ok test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 10.66s Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/ssh_askpass-0d42995889fdce36) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 2.81s Running tests/ssh_connector_policy.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/ssh_connector_policy-76f290ff1302b128) running 1 test test connector_preserves_configured_bind_address_refusal ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.01s Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/vt_credit-a8057c0d8d11dc74) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 19.50s Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/vt_reconnect-3d554a4e2b9bb78d) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 15.13s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal_agent-5e7905dce98d9204) running 165 tests test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok test daemon::authenticated_tests::authenticated_uid_refusal_precedes_state_and_io ... ok test daemon::census_retry_tests::full_control_lane_retries_retirement_census_on_capacity_without_requests ... ok test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000 test daemon::liveness_tests::detached_ping_preserves_written_ack_without_output_credit ... ok test daemon::liveness_tests::input_state_probe_preserves_written_ack_after_input ... ok test daemon::liveness_tests::input_state_probe_preserves_written_ack_before_input ... ok test daemon::liveness_tests::terminal_probe_waits_for_the_shim_fence_and_keeps_stream_identity ... ok test daemon::readiness_exit_tests::ownership_eof_does_not_discard_private_terminal_output ... ok test daemon::readiness_tests::a_saturated_census_queue_cannot_establish_the_open_fence ... ok test daemon::readiness_tests::a_shut_down_peer_refuses_the_write_while_a_forked_copy_holds_it ... ok test daemon::readiness_tests::census_and_open_result_share_fifo_order ... ok test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::readiness_tests::fixture_fence_processes_messages_before_the_control_pong ... ok test daemon::readiness_tests::replay_complete_preserves_the_full_output_cursor_as_decimal ... ok test daemon::readiness_tests::replay_prefix_stops_at_the_shim_hello_head ... ok test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test daemon::readiness_tests::saturated_action_replies_preserve_connection ... ok test daemon::readiness_tests::saturated_ping_replies_preserve_connection ... ok test daemon::readiness_tests::the_unhealthy_handoff_case_survives_concurrent_spawns ... ok test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test daemon::remote_tests::reattach_dispatch_serves_while_another_runtime_holds_the_lifetime_lock ... ok test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::session_commands::tests::probe_at_full_command_capacity_preserves_accepted_input ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks test daemon::terminal_events::tests::census_uses_uuid_strings_and_replay_keeps_all_cursor_bits ... ok test daemon::terminal_events::tests::ordinary_exit_omits_retired_and_snapshot_sequences_stay_numeric ... ok test daemon::terminal_events::tests::reply_compatibility_notice_contains_only_session_identity ... ok test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok test plugin_control::tests::accepted_public_transaction_outlives_the_framing_deadline ... ok test plugin_control::tests::admission_observes_the_same_plugin_settings_as_actions ... ok test plugin_control::tests::dropping_a_listener_does_not_unlink_a_replacement_file ... ok test plugin_control::tests::empty_catalog_preserves_control_contract_without_an_os_worker ... ok test plugin_control::tests::local_frame_reader_retains_fragmentation_and_refuses_trailing_frames ... ok test plugin_control::tests::local_public_actions_refuse_controls_and_active_socket_replacement ... ok test plugin_control::tests::retained_path_and_observed_transport_cross_the_lazy_worker ... ok test plugin_control::tests::retained_runtime_registry_keeps_lifetime_ownership_after_listener_abort ... ok test plugin_control::tests::synchronous_plugin_work_does_not_park_the_current_thread_reactor ... ok test plugin_control::tests::worker_preserves_trusted_context_and_writer_owned_effect ... ok test process_exits::platform::tests::resource_failures_do_not_silently_disable_exit_tracking ... ok test process_exits::platform::tests::unavailable_kernel_has_no_timer_or_descriptor ... ok test process_exits_tests::exited_before_registration_is_not_a_live_registration ... ok test process_exits_tests::process_descriptor_is_cloexec_and_rejects_invalid_pid ... ok test process_exits_tests::shared_exit_queue_at_200_processes ... ignored, 200 live process lifetimes; run in a weighted benchmark scope test process_exits_tests::shared_queue_detects_exit_and_does_not_repeat_or_retain_descriptors ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test remote_client::dial_runtime::tests::owned_driver_clock_advances_with_its_timer_runtime ... ok test remote_client::server_path::tests::a_future_mesh_lease_and_silent_cut_keep_their_port_reserved ... ok test remote_client::server_path::tests::a_latched_mesh_reply_wakes_retry_without_selecting_the_path ... ok test remote_client::server_path::tests::backed_candidate_refusal_keeps_new_datagrams_on_mesh_discovery ... ok test remote_client::server_path::tests::backed_discovery_ends_with_its_owned_session ... ok test remote_client::server_path::tests::backed_discovery_keeps_control_cancellation_and_udp_recovery_bounded ... ok test remote_client::server_path::tests::backup_published_during_candidate_proof_keeps_enrolled_control_live ... ok test remote_client::server_path::tests::candidate_proof_keeps_probing_after_its_first_packet_is_lost ... ok test remote_client::server_path::tests::component_down_activates_the_warm_fallback_without_a_new_connection ... ok test remote_client::server_path::tests::component_down_keeps_its_reason_when_the_mesh_also_stops_answering ... ok test remote_client::server_path::tests::component_down_proves_tcp_fallback_when_enrolled_udp_is_unavailable ... ok test remote_client::server_path::tests::component_down_returns_the_live_connection_to_the_enrolled_address ... ok test remote_client::server_path::tests::dropped_return_replies_keep_the_admitted_connection ... ok test remote_client::server_path::tests::failed_control_worker_returns_to_retry_owner ... ok test remote_client::server_path::tests::healthy_mesh_path_is_never_declared_interrupted ... ignored, Timing assertion: run on the perf VM under the shared benchmark lock. test remote_client::server_path::tests::healthy_mesh_preserves_every_control_reply_on_the_admitted_connection ... ok test remote_client::server_path::tests::interrupted_mesh_is_retried_on_the_same_connection ... ok test remote_client::server_path::tests::invalid_mesh_hint_cannot_complete_fresh_path_proof ... ok test remote_client::server_path::tests::pending_enrolled_proof_does_not_hide_a_latched_mesh_hint ... ok test remote_client::server_path::tests::pending_enrolled_proof_does_not_hide_the_mesh_discovery_clock ... ok test remote_client::server_path::tests::proposed_mesh_moves_the_live_connection_and_a_silent_cut_returns_it ... ok test remote_client::server_path::tests::retained_mesh_proposal_connects_when_the_fallback_port_is_unavailable ... ok test remote_client::server_path::tests::returning_publishes_the_selected_path_before_its_proof_finishes ... ok test remote_client::server_path::tests::review_silent_mesh_interruption_returns_to_fallback_within_local_reconnect_budget ... ignored, Run alone on the perf VM under the shared benchmark lock. test remote_client::server_path::tests::silent_mesh_handshake_keeps_the_shared_timeout_classification ... ok test remote_client::server_path::tests::unadvertised_path_proof_keeps_the_existing_enrolled_connection ... ok test remote_client::server_path::tests::unanswered_mesh_address_keeps_the_live_connection ... ok test remote_client::server_path::tests::unavailable_credentials_do_not_end_server_link ... ok test remote_client::server_path::tests::unnegotiated_backup_preserves_the_enrolled_retry_cooling ... ok test remote_client::server_path::tests::untrusted_server_on_the_mesh_address_never_takes_the_connection ... ok test remote_client::supervisor::review_tests::durable_state::acknowledged_network_access_survives_superseded_worker_completion ... ok test remote_client::supervisor::review_tests::six_hour_server_outage_keeps_one_retry_owner_with_bounded_attempts ... ok test remote_client::supervisor::review_tests::terminated_factory_is_replaced_without_overlapping_live_workers ... ok test remote_client::supervisor::review_tests::watchdog_bounds_workers_when_local_path_discovery_stalls ... ok test remote_client::supervisor::tests::a_burst_then_a_stable_link_is_summarised_by_the_timer ... ok test remote_client::supervisor::tests::every_error_kind_and_successful_return_retries ... ok test remote_client::supervisor::tests::failed_attempt_cost_does_not_extend_the_retry_period ... ok test remote_client::supervisor::tests::healthy_link_has_no_watchdog_deadline ... ok test remote_client::supervisor::tests::link_close_notes_print_once_per_window_and_summarise_repeats ... ok test remote_client::supervisor::tests::watchdog_restarts_a_stalled_offline_attempt ... ok test remote_client::tests::capability_fixture_retries_a_port_held_by_the_other_transport ... ok test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test remote_client::tests::idle_timers::copy_cost::fresh_admission_accepts_dormant_replies_but_refuses_pending_recovery ... ok test remote_client::tests::idle_timers::copy_cost::fresh_copy_from_admission_at_one_thousand_transports ... ignored, Separate fresh-copy cohort on the perf VM under its shared benchmark lock. test remote_client::tests::idle_timers::copy_cost::mesh_probe_and_copy_cost_at_one_thousand_transports ... ignored, Optimized transport-only measurement on the perf VM under its shared benchmark lock. test remote_client::tests::idle_timers::copy_cost::physical_counters_include_both_source_paths ... ok test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::monotonic_origin_bounds_fail_closed_without_losing_receive_receipts ... ok test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::receive_diagnostic_counts_gro_and_only_fixed_sampled_ports ... ok test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::receive_diagnostic_gap_bins_have_explicit_bounds ... ok test remote_client::tests::idle_timers::copy_cost::runtime_configuration_trial_at_one_thousand_transports ... ignored, Explicit runtime scheduling control on the perf VM; ordinary runtime and guards unchanged. test remote_client::tests::idle_timers::copy_cost::socket_configuration_trial_at_one_thousand_transports ... ignored, Explicit socket-configuration diagnostic on the perf VM; ordinary scale gates stay unchanged. test remote_client::tests::idle_timers::copy_cost::udp_drop_receipt_counts_only_owned_live_sockets ... ok test remote_client::tests::idle_timers::mesh_idle_timer_cost_at_one_thousand_connections ... ignored, Release-only perf VM measurement under the shared benchmark lock. test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test remote_client::tests::raw_tcp_control_preserves_mux_envelopes_and_buffered_suffix ... ok test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test remote_client::tests::server_path_capability_is_advertised_on_native_and_fallback_transports ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test remote_client::tests::unavailable_local_credentials_retry_without_creating_state ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test remote_cursor::tests::exact_unsigned_cursor_and_whole_object_are_required ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test remote_native_tests::primed::negotiated_connection_keeps_unmarked_new_writers_ordinary ... ok test remote_native_tests::primed::ordinary_native_writer_refuses_the_additive_cursor_request ... ok test remote_native_tests::primed::prime_marker_is_canonical_and_requires_negotiated_permission ... ok test remote_native_tests::primed::primed_writer_acknowledges_before_reading_credit_funded_cursor ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test sessions::tests::ordinary_native_writer_negotiates_queue_backpressure_without_shared_selection ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test sessions::tests::shared_writer_helper_negotiates_before_sending_its_selector ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_kernel_latency ... ignored, Exact 50MiB kernel-latency control on the perf VM in an owned network namespace. test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test result: ok. 145 passed; 0 failed; 20 ignored; 0 measured; 0 filtered out; finished in 34.29s Running tests/transport.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/transport-779de0acdb61e1cf) running 2 tests test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test oversized_header_and_truncated_frame_are_rejected ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal_mesh-e13f00facaa1692a) running 1 test test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/default_arrow-7b090aec0682bcd2) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/properties.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/properties-983aa249d0580584) running 14 tests test addresses_are_unique_stable_and_not_recycled ... ok test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test directional_grants_union_and_minimal_updates ... ok test exhausted_versions_reject_mutations_without_changing_state ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test names_versions_and_backend_status ... ok test overlaps_are_reported_without_silent_range_changes ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.92s Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/rotation_time-0cf88f58b3d13cb7) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal_plugin_api-c601f0a1c341cc23) running 29 tests test action::tests::any_of_permissions_are_machine_readable_and_empty_authority_is_rejected ... ok test action::tests::command_result_schema_has_required_stable_fields_and_optional_next_step ... ok test action::tests::command_result_schema_keeps_action_data_typed_inside_stable_envelope ... ok test action::tests::only_hidden_internal_routes_may_use_the_reserved_prefix ... ok test action::tests::registry_keeps_plugin_ownership_and_exact_command_paths ... ok test action::tests::registry_rejects_inconsistent_json_schemas ... ok test action::tests::registry_rejects_missing_action_guidance_and_command_collisions ... ok test admission::tests::memory_refusal_round_trips_without_losing_legacy_error ... ok test component_tests::component_declarations_cannot_create_servers ... ok test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test present::tests::a_table_fits_its_width_by_wrapping_only_the_last_column ... ok test present::tests::a_table_has_a_header_only_from_two_rows ... ok test present::tests::pairs_align_values_and_wrap_under_them ... ok test present::tests::sizes_and_ages_use_units_a_person_would_say ... ok test present::tests::tint_wraps_text_after_padding_is_measured ... ok test present::tests::wide_leading_columns_are_cut_with_an_ellipsis ... ok test release_version::tests::accepts_only_worker_version_forms ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test server_path::tests::legacy_link_omits_the_optional_source_port ... ok test storage::tests::cancelled_begin_never_leaves_an_open_writer_transaction ... ok test storage::tests::writer_begin_at_1000_nodes ... ignored, Measure only on the perf VM under its benchmark lock, 31 batches of 1000 writes. test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test tests::machine_actions_are_declared_without_entering_human_discovery ... ok test tests::notifications_are_declared_json_bounded_and_drained_once ... ok test tests::operator_presentation_cannot_follow_a_private_control_action ... ok test tests::public_dispatch_cannot_call_a_machine_control_action ... ok test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test tests::registry_routes_only_declared_actions ... ok test result: ok. 28 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/routing_review-fe80451ff0776d50) running 2 tests test review_topic_borrows_plain_and_owns_escaped ... ok test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal_plugin_backup-85810caed1a02b63) running 1 test test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal_plugin_host_facts-2cac1c439992c347) running 14 tests test memory::tests::custom_policy_rounds_up_and_validates_all_settings_before_use ... ok test memory::tests::default_floor_refuses_only_below_headroom_even_above_128_sessions ... ok test session_counts_tests::host_owned_session_counts_are_additive_and_refresh_on_request ... ok test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test tests::configured_memory_floor_refuses_with_current_host_counters ... ok test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test tests::static_facts_report_the_machines_hostname ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal_plugin_mesh-3681764fe0ea9465) running 74 tests test access_updates::tests::compact_rules_reconstruct_the_exact_config_and_preserve_server_access ... ok test access_updates::tests::grouping_never_crosses_an_unchanged_protected_peer ... ok test access_updates::tests::identity_changes_and_snapshots_keep_the_original_encoding ... ok test access_updates::tests::malformed_ranges_refuse_before_any_rule_changes ... ok test connection_state::tests::narrowing_depends_on_services_and_direction_not_the_fallback_label ... ok test firewall::tests::already_removed_owned_table_does_not_block_component_cleanup ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::initial_apply_without_adoption_refuses_a_foreign_table ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::real_nft_ownership_atomicity_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::removal_plan_cannot_add_permissions_or_change_identity ... ok test firewall::tests::rule_count_is_independent_of_membership_and_policy_data_is_in_sets ... ok test iptables::tests::contiguous_open_members_use_ranges_without_opening_gaps ... ok test iptables::tests::initiating_prefixes_cover_only_owned_intervals_even_at_family_boundaries ... ok test iptables::tests::real_nf_tables_ownership_partial_family_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test iptables::tests::replacement_retains_established_rules_and_does_not_duplicate_hooks ... ok test netlink::tests::connection_tuple_uses_initiating_service_and_refuses_ambiguous_selectors ... ok test netlink::tests::host_prefix_decoder_refuses_ambiguous_or_malformed_ownership ... ok test netlink::tests::malformed_lengths_and_padding_are_rejected ... ok test netlink::tests::nested_attributes_roundtrip_without_copying_payloads ... ok test netlink::tests::public_host_prefixes_decode_both_families_without_claiming_subnets ... ok test node::rotation_tests::nf_tables_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173. test node::rotation_tests::nft_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173. test node::tests::chunked_snapshot_is_atomic_and_applies_1000_kernel_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN; use release for timing. test node::tests::explicit_up_recovers_disabled_intent_before_reusing_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node::tests::externally_removed_interface_does_not_block_down ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node::tests::server_identity_cannot_change_inside_a_staged_snapshot ... ok test node_actions::identity_upgrade_tests::ordinary_identity_reply_retains_the_legacy_shape ... ok test node_actions::peer_page_tests::peer_pages_cover_every_peer_once_within_the_frame ... ok test node_actions::peer_page_tests::poll_cost ... ignored, measurement test node_actions::tests::applied_server_route_and_observed_link_survive_only_explicit_component_up ... ignored, Run inside a dedicated kernel namespace with CAP_NET_ADMIN. test node_actions::tests::failed_cleanup_reports_stopping_and_reconnect_keeps_explicit_off ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node_actions::tests::node_actions_refuse_alternate_forms_duplicates_and_unbounded_input ... ok test node_actions::tests::node_actions_register_without_kernel_work_and_hide_machine_calls ... ok test node_coordination::tests::a_name_a_person_chose_is_kept ... ok test node_coordination::tests::a_reported_hostname_names_a_host_added_by_address ... ok test node_coordination::tests::explicit_off_waits_for_up_and_reconnect_requests_a_snapshot ... ok test node_coordination::tests::peer_route_precedes_configuration_and_retires_with_the_node ... ok test node_coordination::tests::placeholder_names_become_the_machines_names ... ok test node_coordination::tests::refused_delta_recovers_immediately_and_closed_channel_retires_worker ... ok test node_coordination::tests::refused_listener_replacement_preserves_the_current_lease ... ok test node_coordination::tests::removed_binding_can_attach_only_after_authorized_reenrollment ... ok test node_coordination::tests::server_listener_belongs_to_applied_enabled_worker ... ok test node_presentation::tests::a_wide_table_stays_within_the_width ... ok test node_presentation::tests::an_unproven_peer_gets_a_hint_that_names_it ... ok test node_presentation::tests::legacy_status_remains_readable_and_invalid_link_is_refused ... ok test node_presentation::tests::peers_show_units_ages_and_no_hint_when_every_path_is_direct ... ok test node_presentation::tests::status_explains_the_observed_server_transport ... ok test node_state::order_tests::accepted_snapshot_persistence_at_1000_peers ... ignored, Run release on the locked performance VM; public-state persistence at 1000 peers. test node_state::order_tests::concurrent_workers_serialize_revision_check_and_publication ... ok test node_state::order_tests::exact_legacy_binding_upgrade_preserves_the_revision_fence ... ok test node_state::order_tests::explicit_off_can_replace_a_corrupt_public_snapshot ... ok test node_state::order_tests::stale_and_conflicting_snapshots_cannot_replace_acknowledged_intent ... ok test node_state::order_tests::worker_start_stop_apply_interleavings_never_decrease_acknowledged_revision ... ok test node_state::restore_tests::public_restore_retains_large_intent_and_matches_reader ... ok test node_state::restore_tests::public_state_restore_at_1000_peers ... ignored, Run only on the perf VM under its lock; INFRATERNAL_STATE_RESTORE_MODE=reader|slice, separate processes. test node_state::restore_tests::restore_rejects_invalid_schema_trailing_data_and_unsafe_descriptors ... ok test node_state::tests::explicit_off_survives_restart_and_snapshot_contains_only_public_fields ... ok test node_state::tests::route_recording_preserves_the_legacy_accepted_state_format ... ok test node_state::tests::unsafe_route_journal_and_existing_temporary_files_are_preserved ... ok test node_state::tests::unsafe_snapshots_and_preexisting_temporary_files_are_not_followed_or_removed ... ok test presence::tests::a_mesh_that_is_off_shows_nobody_online ... ok test presence::tests::a_page_cursor_is_followed ... ok test presence::tests::a_reading_expires_when_the_node_stops_answering ... ok test presence::tests::a_recent_handshake_is_online_on_a_direct_path ... ok test presence::tests::an_unreadable_node_is_no_reading ... ok test presence::tests::no_handshake_a_stale_one_or_a_future_one_is_offline ... ok test presence::tests::nodes_go_offline_twenty_seconds_after_the_last_good_reading ... ok test presence::tests::receiving_a_keepalive_does_not_shorten_the_session_window ... ok test presence::tests::replace_reports_only_visible_changes ... ok test presence::tests::the_edge_of_the_session_window_is_still_online ... ok test presence::tests::the_server_and_a_peer_passing_traffic_are_online ... ok test presence::tests::traffic_proves_a_session_until_it_ends ... ok test settings::tests::settings_objects_are_bounded_and_strict_before_storage ... ok test store::naming_tests::a_numeric_or_invalid_address_gives_no_name ... ok test store::naming_tests::an_address_or_hostname_gives_the_machines_name ... ok test result: ok. 60 passed; 0 failed; 14 ignored; 0 measured; 0 filtered out; finished in 6.92s Running tests/access_updates.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/access_updates-53052323e562eb48) running 8 tests test compact_identity_support_requires_an_explicit_strict_probe ... ok test default_tightening_at_1000_peers_fits_one_round_trip ... ok test negotiated_access_chunk_is_accepted_by_the_strict_action_parser ... ok test nf_tables_compact_delta_preserves_identity_and_refuses_invalid_bases ... ignored, Run in an isolated user/network namespace with CAP_NET_ADMIN. test nft_compact_delta_preserves_identity_and_refuses_invalid_bases ... ignored, Run in an isolated user/network namespace with CAP_NET_ADMIN. test ordinary_up_and_identity_keep_the_legacy_reply_shape ... ignored, requires an isolated user/network namespace test range_objects_reject_unknown_duplicate_and_positional_fields ... ok test uniform_changes_fit_one_frame_after_churn_with_distinct_kept_services ... ok test result: ok. 5 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/authorized_local_binding.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/authorized_local_binding-b0ba79371698e19a) running 2 tests test nf_tables_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173. test nft_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/canonical_host_binding.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/canonical_host_binding-e711cf3ceab9f605) running 1 test test enrollment_requires_canonical_host_uuid_spelling ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/configuration.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/configuration-1ba9aa134b7936fb) running 5 tests test chunks_fit_body_budget_and_one_peer_delta_does_not_repeat_the_snapshot ... ok test compiled_chunks_identify_the_server_and_old_snapshots_have_no_proposal ... ok test edition_default_is_explicit_and_build_selected ... ok test large_valid_port_policy_is_split_without_a_port_count_cap ... ok test port_grant_narrows_allow_opens_deny_and_preserves_direction ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.28s Running tests/kernel.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/kernel-b9d7e07e114cbf35) running 6 tests test bulk_retirement_preserves_identity_and_routes_at_1000_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test created_interface_is_marked_for_restart_adoption ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test policy_table_route_conflict_is_refused ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test real_kernel_chunked_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test real_kernel_ephemeral_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test retired_host_routes_can_be_replayed ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/naming.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/naming-d44028e80092ceee) running 4 tests test a_person_takes_an_automatic_name_and_the_machine_moves_aside ... ok test a_squatter_yields_to_a_host_added_later_and_the_renames_are_audited ... ok test a_viewer_without_host_facts_does_not_see_reported_hostnames ... ok test the_servers_names_are_kept_for_the_server ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.22s Running tests/policy_enrollment_binding.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/policy_enrollment_binding-75c227a9fb54e935) running 4 tests test explicit_binding_preserves_identity_and_clears_removal_only_on_enrollment ... ok test host_binding_requires_global_authority_and_existing_unrevoked_host ... ok test noncanonical_host_binding_is_refused ... ok test refused_enrollment_preserves_removal_and_revision ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.23s Running tests/policy_enrollment_identity.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/policy_enrollment_identity-69a7fa4673b70170) running 1 test test unbound_enrollment_public_key_is_not_host_authority ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s Running tests/policy_snapshot_ordering.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/policy_snapshot_ordering-c646b4259a478ea0) running 6 tests test nf_tables_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173. test nf_tables_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173. test nf_tables_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173. test nft_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173. test nft_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173. test nft_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/presence.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/presence-ea261a44979699ea) running 2 tests test an_unchanged_reading_is_not_announced_and_a_lost_session_goes_offline ... ok test nodes_the_server_sees_are_online_with_their_path_and_named_by_machine ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s Running tests/restart_route_ownership.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/restart_route_ownership-f91cbf3125e5a193) running 1 test test orphan_route_retirement_preserves_foreign_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_authorized_reenrollment.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/review_authorized_reenrollment-c652db1c78c36ccf) running 2 tests test nf_tables_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173. test nft_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_endpoint_transaction.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/review_endpoint_transaction-ebc100d60783edf7) running 1 test test refused_endpoint_persistence_preserves_kernel_endpoint ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_firewall_marker.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/review_firewall_marker-6a53d4cc2a2b41d0) running 2 tests test nf_tables_marker_substring_is_not_chain_ownership ... ignored, Run in a disposable user/network namespace, #173. test nft_marker_substring_is_not_table_ownership ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_ingress_translation.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/review_ingress_translation-26a8eb974397df0c) running 2 tests test nf_tables_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test nft_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_local_delivery.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/review_local_delivery-85a98c2a0de72b0d) running 2 tests test nf_tables_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test nft_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_mesh_presence_r4.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/review_mesh_presence_r4-c892e66f54b71d7b) running 3 tests test a_counter_reset_discards_the_previous_peers_keepalive_classification ... ok test a_passive_keepalive_does_not_turn_later_silence_into_a_false_offline ... ok test a_peer_with_25_second_keepalives_stays_online_when_server_keepalives_suppress_its_sends ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_mesh_view_truth.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/review_mesh_view_truth-71d42bc9f3c8b78a) running 6 tests test a_hand_set_name_equal_to_the_placeholder_is_kept ... ok test a_host_record_name_beats_another_machines_reported_hostname ... ok test a_peer_does_not_stay_online_past_its_session_when_the_server_node_stops_answering ... ok test a_remote_machine_cannot_be_called_server ... ok test a_remote_machine_cannot_take_the_servers_hostname ... ok test an_address_that_is_an_ip_never_becomes_a_name ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.23s Running tests/review_mesh_view_truth_r2.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/review_mesh_view_truth_r2-80a2bad78c76cb80) running 9 tests test a_hex_ipv4_spelling_never_becomes_a_name ... ok test a_node_moved_aside_keeps_its_name_on_its_next_attach ... ok test a_person_can_take_a_name_a_machine_reported ... ok test a_viewer_without_host_facts_still_sees_distinct_names ... ok test an_idle_healthy_peer_without_its_own_keepalive_stays_online ... ok test evidence_a_silent_peer_expires_with_its_session_without_flapping ... ok test evidence_migration_0026_upgrades_a_realistic_database_without_churn ... ok test no_viewer_sees_a_remote_machine_called_server ... ok test the_previous_release_starts_on_a_database_this_release_migrated ... ignored, deploy gate, not code: production rollback restores the database copy (#236) test result: ok. 8 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.28s Running tests/review_mesh_view_truth_r3.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/review_mesh_view_truth_r3-488341cccf25afa7) running 5 tests test a_dead_peer_expires_at_session_end_without_inferring_a_sending_promise ... ok test a_node_moved_aside_by_a_person_is_audited_under_that_person ... ok test a_non_owner_cannot_confirm_the_servers_hidden_hostname ... ok test a_scoped_manager_cannot_rename_a_node_outside_their_scope_by_taking_its_name ... ok test an_idle_peer_that_started_its_session_stays_online_until_it_rekeys ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.16s Running tests/review_mesh_view_truth_r4.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/review_mesh_view_truth_r4-a73cddfca2e93724) running 7 tests test a_global_manager_cannot_probe_a_hidden_name_by_exhausting_move_aside_names ... ok test a_name_chosen_while_rewound_survives_rolling_forward_and_reattaching ... ok test a_scoped_manager_cannot_confirm_a_hidden_reported_hostname ... ok test evidence_a_refused_move_rolls_back_inventory_audit_and_revision ... ok test evidence_server_hostname_moves_only_with_server_rename_authority ... ok test hidden_names_are_indistinguishable_for_every_non_global_node_manager ... ok test rewind_reconciles_same_spelling_choices_without_freezing_untouched_names ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.54s Running tests/review_restart_routes.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/review_restart_routes-c0c7e8b6c3834047) running 1 test test restart_retires_orphan_peer_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_retire_ownership.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/review_retire_ownership-21b36c1c525f1f38) running 7 tests test retire_checks_every_object_before_deleting_any ... ignored, Run as root in a disposable network namespace with nft. test retire_decides_every_object_and_leaves_a_foreign_table ... ignored, Run as root in a disposable network namespace with WireGuard and nft. test retire_leaves_a_foreign_interface_without_failing_the_uninstall ... ignored, Run as root in a disposable network namespace. test retire_leaves_a_marked_interface_this_installation_never_recorded ... ignored, Run as root in a disposable network namespace. test retire_leaves_another_installations_interface_and_filter ... ignored, Run as root in a disposable network namespace with WireGuard and nft. test retire_removes_the_interface_and_filter_this_installation_created ... ignored, Run as root in a disposable network namespace with WireGuard and nft. test retire_with_a_record_leaves_a_foreign_interface_and_names_it ... ignored, Run as root in a disposable network namespace with WireGuard and nft. test result: ok. 0 passed; 0 failed; 7 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_reverse_recreation.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/review_reverse_recreation-6d38c3fb56765539) running 4 tests test nf_tables_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test nf_tables_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test nft_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test nft_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test result: ok. 0 passed; 0 failed; 4 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_revoked_host_policy.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/review_revoked_host_policy-493675b7a79ca70f) running 1 test test revoked_host_is_not_retained_in_compiled_peer_policy ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/review_route_inventory.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/review_route_inventory-2be052913f9e2e88) running 2 tests test refused_recovery_inventory_save_does_not_retire_kernel_peers_or_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test restart_preserves_unrecorded_direct_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_route_scope.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/review_route_scope-0539357dd2301f8b) running 1 test test restart_preserves_operator_gateway_host_route ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_shutdown_budget.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/review_shutdown_budget-1423441593702eda) running 1 test test shipping_mesh_down_1000_peers_finishes_within_one_second ... ignored, Run in a dedicated user/network namespace under CPUWeight=10000 with INFRATERNAL_BIN pointing to the shipping release binary. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_shutdown_restart.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/review_shutdown_restart-be3f21c60f64b594) running 3 tests test crash_child ... ignored, Child-only fixture for the weighted user/network namespace restart proof. test refused_journal_retirement_keeps_stopping_until_explicit_retry ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000. test restart_finishes_interrupted_down_at_1000_peers ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000. test result: ok. 0 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/settings.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/settings-9e22846e3f8e68e0) running 1 test test default_switch_requires_owner_freshness_and_the_preview_revision ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/store.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/store-6d4f7b5c8e54fbb6) running 6 tests test absent_discovery_preserves_the_last_known_endpoint ... ok test attach_cancelled_at_any_await_leaves_the_store_writable ... ok test key_replacement_preserves_identity_and_addresses_after_restart ... ok test removed_host_cannot_restore_membership_without_authorized_enrollment ... ok test required_server_membership_cannot_be_deleted ... ok test scale_preview_pages_do_not_allocate_the_pair_matrix ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.88s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal_plugin_relay-47b92256ba7e458c) running 1 test test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal_plugin_release-aec3b44056d5d9fc) running 8 tests test latest::tests::cancellation_joins_verification ... ok test latest::tests::startup_reclaims_only_owned_inactive_private_metadata ... ok test service::tests::api_setting_requires_owner_and_current_fresh_session ... ok test service::tests::authority_is_rechecked_after_the_setting_write_before_commit ... ok test service::tests::channel_reads_at_fifty_concurrent_callers ... ignored, run alone under CPUWeight=10000; measures SQLite action overhead, not terminal or full authenticated socket latency test service::tests::default_stable_refuses_silent_edge_and_persists_explicit_opt_in ... ok test service::tests::disabled_feature_starts_no_lookup_and_rejects_settings ... ok test service::tests::object_input_rejects_duplicates_unknown_fields_and_alternate_representations ... ok test result: ok. 7 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.61s Running tests/review_pool.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/review_pool-33b687260e254fc2) running 1 test test pending_channel_writers_preserve_authority_read_capacity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.59s Running tests/review_restart.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/review_restart-ca9f44eb8cb73b10) running 4 tests test lookup_creates_private_staging_under_owner_restrictive_umask ... ok test partial_metadata_restart_child ... ignored, subprocess helper for metadata restart verification test restarted_latest_reclaims_metadata_after_process_stop ... ok test restricted_umask_lookup_child ... ignored, subprocess helper for restricted-umask lookup verification test result: ok. 2 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.16s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal_plugin_remote-9d5cf8bf6727606f) running 113 tests test inventory::authority_tests::inventory_events_keep_the_subscription_generation ... ok test inventory::authority_tests::revocation_cancels_a_result_waiting_for_socket_credit ... ok test inventory::tests::inventory_descriptor_is_valid_for_server_startup ... ok test inventory::tests::list_input_refuses_parallel_authority_and_noncanonical_cursors ... ok test remote_bindings::receive_cost_tests::repeated_mesh_ingress_cost_at_one_thousand_retained_histories ... ignored, Component timing on the authorized perf VM under its fair lock; not transport acceptance. test remote_bindings::tests::a_copy_poll_bounds_work_before_servicing_receive ... ok test remote_bindings::tests::a_lease_added_while_waiting_is_polled_without_another_primary_datagram ... ok test remote_bindings::tests::a_negotiated_peer_copies_output_without_a_worker_and_off_cancels_it ... ok test remote_bindings::tests::admitted_path_proofs_survive_mesh_retirement_and_old_key_lease_drop ... ok test remote_bindings::tests::alias_retirement_restores_the_previous_reply_socket ... ok test remote_bindings::tests::alternating_fresh_hints_cannot_amplify_retained_ciphertext ... ok test remote_bindings::tests::an_encrypted_duplicate_cannot_move_the_reply_route ... ok test remote_bindings::tests::backup_withdrawal_reconciles_idle_peers_without_canceling_another_return ... ok test remote_bindings::tests::dropping_one_peer_removes_alternative_work_while_another_peer_lives ... ok test remote_bindings::tests::enrolled_dual_replies_preserve_primary_and_mesh_sources ... ok test remote_bindings::tests::lease_installed_during_a_pending_poll_cannot_lose_the_receive_wakeup ... ok test remote_bindings::tests::legacy_enrolled_return_replay_is_bounded_and_consumed_once ... ok test remote_bindings::tests::negotiated_enrolled_return_replay_is_bounded_and_consumed_once ... ok test remote_bindings::tests::peer_route_preserves_the_logical_tuple_and_replays_on_return ... ok test remote_bindings::tests::replies_follow_the_last_heard_address_and_leases_retire_their_routes ... ok test remote_bindings::tests::retiring_mesh_lease_cancels_only_queued_alternative_reply ... ok test remote_bindings::tests::retiring_one_route_preserves_another_peers_enrolled_return ... ok test remote_bindings::tests::unknown_mesh_reply_waits_for_duplicate_coordinates_and_off_retires_it ... ok test remote_bindings::tests::wildcard_reply_uses_the_destination_of_the_latest_peer_packet ... ok test remote_path_copies::tests::arming_after_pending_wakes_the_owned_endpoint_and_clear_drops_it ... ok test remote_path_copies::tests::cancelling_retired_work_keeps_the_next_send_receive_wakeup ... ok test remote_path_proof::tests::fixed_header_mac_matches_independent_sha256_vectors ... ok test remote_path_proof::tests::mixed_aggregation_preserves_all_neighboring_quic_bytes ... ok test remote_path_proof::tests::only_current_session_response_answers_a_sent_probe ... ok test remote_path_socket::tests::a_delayed_probe_waiter_keeps_first_send_clock_after_ack_only_traffic ... ok test remote_path_socket::tests::a_probe_request_latches_before_its_waiter_is_polled ... ok test remote_path_socket::tests::an_old_ack_only_send_cannot_complete_probe_emission ... ok test remote_path_socket::tests::an_old_ack_only_send_does_not_start_a_backpressured_probe_deadline ... ignored, timed watchdog ordering proof; run under the perf VM benchmark lock test remote_path_socket::tests::an_unrelated_reply_cannot_discard_ciphertext_needed_after_a_cut ... ok test remote_path_socket::tests::backpressure_never_starts_or_replaces_the_probe_send_clock ... ok test remote_path_socket::tests::cancelling_old_requests_cannot_clear_a_new_probe_generation ... ok test remote_path_socket::tests::dedicated_receive_preserves_segmented_sends_in_single_datagram_buffers ... ok test remote_path_socket::tests::exporting_path_keys_never_holds_the_receive_proof_lock ... ok test remote_path_socket::tests::mesh_route_maps_only_the_trusted_tuple_and_resends_unanswered_datagrams ... ok test remote_path_socket::tests::negotiated_copies_use_the_enrolled_socket_and_retire_on_return ... ok test remote_path_socket::tests::segmented_replay_evicts_enough_old_datagrams_to_keep_the_byte_bound ... ok test remote_path_socket::tests::send_gate_releases_only_one_successful_transmission ... ok test remote_peer_routes::bench::complete_tag_lookup_at_1000_peers ... ignored, Measure only on the perf VM under its benchmark lock. test remote_peer_routes::bench::routing_lookup_at_1000_nodes ... ignored, Measure only on the perf VM under its benchmark lock. test remote_peer_routes::copy_scan_tests::copy_poll_cost_at_one_thousand_retained_histories ... ignored, 31 bookkeeping samples per profile on the authorized perf VM under its fair lock; not transport acceptance. test remote_peer_routes::copy_scan_tests::history_mutation_after_an_idle_poll_still_sends_every_due_datagram ... ok test remote_peer_routes::tests::alternative_admission_never_evicts_pending_enrolled_return ... ok test remote_peer_routes::tests::alternative_backpressure_keeps_one_copy_and_hints_preserve_its_deadline ... ok test remote_peer_routes::tests::alternative_queue_shares_bounds_and_never_becomes_return_history ... ok test remote_peer_routes::tests::ciphertext_history_at_1000_peers ... ignored, Measure only on the perf VM: 31 batches of 20000 fresh/duplicate pairs across 1000 peers. test remote_peer_routes::tests::ciphertext_history_normalizes_gro_batches_and_stays_bounded ... ok test remote_peer_routes::tests::completed_backup_copies_cannot_be_replayed_as_a_second_return_burst ... ok test remote_peer_routes::tests::completed_return_entries_stay_consumed_when_new_mesh_history_arrives ... ok test remote_peer_routes::tests::output_evicting_the_oldest_copy_still_copies_one_bounded_batch ... ok test remote_peer_routes::tests::replay_is_bounded_for_large_segmented_transmits ... ok test remote_peer_routes::tests::retiring_an_old_lease_cannot_remove_a_reused_tuple ... ok test remote_peer_routes::tests::shared_copy_clock_preserves_each_datagrams_deadline ... ok test remote_peer_routes::tests::unsuccessful_backups_preserve_originals_for_explicit_recovery ... ok test remote_quic::design_scale_review::authenticated_mesh_health_at_design_scale ... ignored, Perf VM only: distinct physical tuple health at 1000 mTLS connections. test remote_quic::design_scale_review::authenticated_mesh_health_at_design_scale_100ms ... ignored, Perf VM only: authenticated physical health at 100ms cadence. test remote_quic::design_scale_review::review_fast_mesh_health_at_design_scale ... ignored, Perf VM only: fast detector at 1000 mTLS connections. test remote_quic::design_scale_review::review_production_adaptive_health_at_design_scale ... ignored, Perf VM only: production adaptive detector at 1000 mTLS connections. test remote_quic::mtu_tests::both_directions_keep_a_mesh_safe_payload_after_discovery ... ok test remote_quic::probe_tests::a_queued_probe_cannot_expire_before_the_socket_emits_it ... ok test remote_quic::probe_tests::copy_first_ack_only_probes_keep_authenticated_mesh_guard_live ... ignored, Physical 15ms/30ms guard comparison on the perf VM under its benchmark lock. test remote_quic::probe_tests::copy_first_ack_only_requested_ack_delay_five_ms_comparison ... ignored, ACK-delay hypothesis comparison on the quiet perf VM under its benchmark lock. test remote_quic::probe_tests::copy_first_real_mesh_originals_do_not_strand_the_authenticated_mesh_guard ... ok test remote_quic::probe_tests::enrolled_copy_replies_cannot_keep_a_dead_mesh_path_alive ... ok test remote_quic::probe_tests::healthy_path_proofs_keep_the_configured_polling_interval ... ok test remote_quic::probe_tests::lost_path_proof_spends_its_reserved_retry_margin ... ok test remote_quic::probe_tests::review_invalid_mesh_packets_cannot_borrow_enrolled_authentication ... ignored, Perf VM only: real socket scheduling and path-response deadline. test remote_quic::tests::acknowledged_idle_survives_and_replayed_packets_cannot_mask_failure ... ok test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test remote_quic::tests::mesh_liveness_keeps_authentication_and_refuses_invalid_intervals ... ok test remote_quic::tests::one_way_authenticated_output_keeps_the_path_fresh ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_renewal::tests::credential_snapshot_does_not_block_async_reconnect ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test remote_tls::tests::outgoing_tcp_detects_a_vanished_peer_without_application_traffic ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test runtime_lock::tests::a_live_legacy_runtime_cannot_publish_an_unheld_lifetime_file ... ok test runtime_lock::tests::cleanup_admission_prevents_starting_even_if_runtime_lock_was_removed ... ok test runtime_lock::tests::dump_datagrams_split_exactly ... ok test runtime_lock::tests::dump_records_accept_only_known_shapes ... ok test runtime_lock::tests::foreign_inode_twin_inner ... ignored, runs inside the namespace prepared by the foreign-inode test test runtime_lock::tests::internal_dispatch_checks_exact_argument_counts ... 2 ok test runtime_lock::tests::internal_dispatch_reads_only_the_normal_command_name ... ok test runtime_lock::tests::legacy_bound_endpoint_on_a_split_device_filesystem_is_kept ... running 1 test test runtime_lock::tests::split_device_inner ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 112 filtered out; finished in 0.00s ok test runtime_lock::tests::legacy_inspection_finds_a_real_bound_socket ... ok test runtime_lock::tests::legacy_inspection_is_independent_of_the_bound_name ... ok test runtime_lock::tests::lifetime_contention_preserves_would_block ... ok test runtime_lock::tests::lifetime_precedes_bind_and_survives_until_last_description_closes ... ok test runtime_lock::tests::lock_links_and_replacements_are_refused ... ok test runtime_lock::tests::managed_start_refuses_another_host_and_an_unfinished_receipt ... ok test runtime_lock::tests::session_inspection_finds_bound_endpoints_by_identity ... ok test runtime_lock::tests::split_device_inner ... ignored, runs inside the namespace prepared by the split-device test test runtime_lock::tests::stale_session_endpoint_is_not_held_live_by_a_foreign_inode_twin ... running 1 test test runtime_lock::tests::foreign_inode_twin_inner ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 112 filtered out; finished in 0.00s ok test runtime_lock::tests::unavailable_lock_support_does_not_claim_a_live_holder ... ok test uninstall::tests::a_failed_kernel_check_stops_cleanup_before_the_service ... ok test uninstall::tests::accepted_handoff_runs_on_a_thread_without_an_async_runtime ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test uninstall::tests::file_removal_keeps_what_setup_did_not_create ... ok test uninstall::tests::manual_uninstall_refuses_another_hosts_installation ... ok test uninstall::tests::replies_name_the_objects_left_as_valid_json ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test uninstall::tests::review_failed_launcher_leaves_no_plan ... ok test uninstall::tests::review_planted_plan_is_never_followed ... ok test uninstall::tests::uninstall_and_setup_exclude_each_other ... ok test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test result: ok. 98 passed; 0 failed; 15 ignored; 0 measured; 0 filtered out; finished in 14.38s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal_plugin_ssh-9c4623776f228fdb) running 46 tests test auth_evidence::tests::later_local_key_receipt_supersedes_an_earlier_banner ... ok test auth_evidence::tests::partial_and_malformed_receipts_are_not_method_evidence ... ok test auth_evidence::tests::receipt_is_identical_at_every_chunk_boundary ... ok test auth_evidence::tests::selected_local_authentication_diagnostics_keep_method_at_every_boundary ... ok test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok test auth_order::tests::only_exact_generated_read_only_checks_can_choose_credentials ... ok test bootstrap::proof_tests::failed_published_facts_clean_only_the_private_probe_and_never_commit ... ok test bootstrap::proof_tests::published_proofs_start_together_and_commit_requires_both ... ok test bootstrap::proof_tests::review_stopped_commit_channel_finishes_the_private_probe ... ok test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test duplex::tests::closed_receipt_channel_is_reported_as_unreachable ... ok test duplex::tests::duplex_preserves_binary_bytes_in_both_directions ... ok test install::tests::compaction_drops_only_comment_lines_and_indentation ... ok test install::tests::embedded_setup_programs_have_no_constructs_compaction_would_change ... ok test install::tests::transfer_caps_accept_only_the_fixed_record ... ok test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test model::failure_serialization_tests::uuid_reference_uses_the_outcome_specific_wire_key ... ok test model::failure_serialization_tests::wire_format_is_exact_and_failure_stays_small ... ok test payload::tests::concurrent_adds_share_the_cached_digest_allocation ... ok test payload::tests::payload_hash_cache_at_1600_adds ... ignored, #190 public payload hash/cache measurements on the locked perf VM only test payload::tests::replacement_and_removal_never_reuse_a_path_name_digest ... ok test payload::tests::same_size_in_place_edits_with_restored_mtime_invalidate_the_digest ... ok test payload::tests::settings_changes_keep_at_most_four_entries ... ok test payload_encoding::tests::binary_replacement_never_reuses_the_previous_encoding ... ok test payload_encoding::tests::gzip_roundtrip_and_repeated_adds_share_one_encoding ... ok test payload_encoding::tests::small_payloads_retain_raw_streaming ... ok test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test prompt_image::tests::helper_identity_refuses_in_place_and_path_replacement ... ok test session_bridge::tests::failed_dispatcher_does_not_publish_a_session ... ok test session_bridge::tests::publication_and_dispatcher_greeting_share_the_first_write ... ok test session_bridge::tests::publication_prefix_preserves_every_dispatcher_byte_across_reads ... ok test setup::tests::exhausted_setup_failure_retains_reason_without_offering_retry ... ok test setup::tests::host_status_outlives_its_subscriber_and_keeps_exact_identity ... ok test socket_connector::tests::connected_socket_has_nodelay_before_any_application_bytes ... ok test socket_connector::tests::descriptor_delivery_keeps_the_exact_peer_after_helper_copy_closes ... ok test socket_connector::tests::invalid_endpoint_cannot_send_a_descriptor ... ok test stdio::tests::pipes_preserve_bytes_and_do_not_escape_into_child_exec ... ok test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok test result: ok. 44 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.17s Running tests/already_added_breakit.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/already_added_breakit-99b38edbed8cc7cb) running 1 test test a_host_key_challenge_never_serializes_as_a_host_id ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/auth_order-7f1c9d76494c5086) running 11 tests test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test automatic_checked_channel_selects_bridge_after_read_only_authentication ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test manual_hosts_try_available_methods_without_a_separate_none_refusal ... ok test manual_method_trust_refusal_never_loads_later_credentials ... ok test only_exhausted_auth_returns_typed_choose_method ... ok test ownership_check_fallback_repeats_only_the_allowlisted_read_only_command ... ok test ownership_checks_authenticate_once_without_replaying_a_different_check ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/build_removal-36fc813e5dfe0bb4) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.32s Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/concurrency-1637a17738b74cc3) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test component_off_retires_a_real_native_helper ... ok test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/config_isolation-5136cd71a92e1d23) running 2 tests test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test synthetic_master_socket_is_private_at_creation ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/credentials-3016d009da101052) running 4 tests test credential_helper_refuses_host_trust_and_permission_prompts ... ok test kernel_running_helper_is_materialized_in_its_private_scope ... ok test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test password_socket_refuses_an_unrelated_same_user_process ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.06s Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/diagnostics-8016ef45d5daacbd) running 12 tests test bootstrap_status_mapping_covers_each_step_and_approved_mode ... ok test control_probe_statuses_preserve_actionable_setup_messages ... ok test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test engine_failures_keep_their_ssh_boundary_without_remote_bytes ... ok test every_failed_step_names_the_step_and_a_next_action ... ok test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test failure_diagnostics_distinguish_auth_trust_transport_and_channel_without_raw_text ... ok test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test script_status_diagnostics_are_honest_for_all_nonzero_codes ... ok test status_mapping_preserves_authentication_and_missing_payload_classification ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/event_metadata-735e17f4e6c1e8dc) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/foreground-0f3aada5376df028) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/host_trust-f2c4b08665836335) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/install-41cb897cde3a5ed0) running 95 tests test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test active_transaction_is_live_between_ssh_setup_commands ... ok test breakit2_interrupted_lock_creation_allows_cleanup_and_retry ... ok test breakit2_rollback_preserves_foreign_launcher_new ... ok test breakit2_rollback_preserves_foreign_unit_new ... ok test breakit2_stage_refuses_parent_that_cannot_be_rolled_back ... ok test buffering_setup_reader_receives_no_payload_until_selection ... ok test checked_staging_survives_a_buffering_payload_reader_and_reuses_the_cache ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test command_failure_names_upload_join_install_and_start_separately ... ok test commit_signal_retains_journal_until_proof_and_on_cancel ... ok test compound_activation_and_start_failures_keep_exact_step_and_rollback ... ok test compound_join_failure_preserves_the_original_status_and_boundary ... ok test compound_restaging_refuses_a_foreign_journal_before_upload ... ok test compound_setup_keeps_owned_rollback_and_linger_warning ... ok test compressed_stage_roundtrips_and_rejects_corruption_before_execution ... ok test concurrent_attempts_cannot_replace_or_clean_each_others_transaction ... ok test control_cleanup_never_follows_a_socket_symlink_or_removes_regular_data ... ok test crash_mid_install_can_roll_back_and_retry ... ok test declared_transfer_refuses_a_different_selection_or_a_named_refusal ... ok test declared_transfer_sends_the_payload_before_any_selection_receipt ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test duplex_check_refuses_named_failures_and_oversized_records_before_staging ... ok test earlier_attempt_classification_preserves_status_boundary_and_authentication ... ok test earlier_attempt_records_reject_suffixes_truncation_and_unbounded_counts ... ok test earlier_binary_cache_is_refreshed_before_owned_recovery ... ok test earlier_control_socket_receipt_recovers_before_a_new_setup ... ok test early_staging_preserves_canonical_foreign_root_refusal ... ok test enrollment_process_exit_71_is_not_reported_as_directory_refusal ... ok test every_setup_command_fits_one_kernel_argument_in_both_modes ... ok test facts_timeout_retires_stale_plugin_control_socket_before_retry ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test foreign_data_refusal_retains_exit_status_and_actionable_directory ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test framed_join_refusal_keeps_status_separate_from_upload ... ok test framed_receipts_preserve_upload_failures_and_reject_extra_output ... ok test framed_upload_keeps_invitation_after_verified_raw_and_compressed_payloads ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test full_payload_restaging_preserves_the_running_session_build ... ok test full_stage_frees_payload_before_allocating_a_cleanup_receipt ... ok test installed_infraternal_agent_always_restarts_without_start_limit ... ok test interrupted_acquisition_cleanup_receipt_can_resume ... ok test interrupted_control_cleanup_is_resumed_only_by_its_original_attempt ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test known_failed_setup_finishes_without_a_second_confirmation ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test live_setup_retry_preserves_the_bridge_and_host_identity_state ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test missing_payload_preserves_the_bootstrap_binary_remedy ... ok test negotiated_retry_reuses_only_a_verified_cache_after_activation_refusal ... ok test negotiated_transfer_delivers_the_invitation_after_a_buffering_head ... ok test one_command_channel_carries_check_verified_upload_and_bridge_bytes ... ok test optional_session_payload_is_architecture_scoped_and_refuses_symlinks ... ok test partial_full_upload_rebridges_from_a_verified_image ... ok test payload_reuse_never_adopts_a_foreign_cache_directory ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test refused_previous_service_stop_only_removes_staging ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test reported_cache_digest_selects_reuse_without_sending_payload ... ok test restart_recovers_partial_stage_retirement ... ok test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test retry_resends_payload_when_cache_content_changes ... ok test retry_reuses_verified_payload_after_owned_rollback ... ok test review_inode_reuse_after_diagnostics_preserves_live_replacement ... ok test review_interrupted_transaction_receipt_allows_owned_cleanup ... ok test review_live_relative_control_socket_preserves_its_receipt ... ok test review_restart_recovers_cleanup_after_base_retirement ... ok test review_restart_recovers_cleanup_after_owner_retirement ... ok test review_unrelated_user_relative_socket_does_not_block_stale_cleanup ... ignored, requires sudo -n to create an isolated listener as uid 65534 test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test session_restaging_uses_one_compound_command ... ok test setup_receipts_require_exact_order_and_preserve_failure_boundaries ... ok test setup_transaction_holds_a_live_lock_between_shell_commands ... ok test staged_shell_bridge_keeps_protocol_bytes_and_releases_setup_guard ... ok test stale_previous_attempt_socket_can_be_retired_without_manual_cleanup ... ok test start_fresh_resumes_the_same_attempt_after_owner_confirmation ... ok test stopped_control_socket_modes_from_service_manager_are_recoverable ... ok test streamed_digest_refuses_a_short_file_or_a_changed_stream_before_launch ... ok test streaming::decoded_image_and_hash_advance_before_the_transfer_tail_is_released ... ok test successful_stage_releases_the_parent_lock_from_its_lease_child ... ok test turning_off_paused_host_provisioning_preserves_earlier_leftovers ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test result: ok. 94 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 36.28s Running tests/mesh_ssh.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/mesh_ssh-280b4a3d88f915bc) running 1 test test network_identity_connect_check_and_changed_key_refusal ... ignored, requires the Go interoperability fixture; run research/ssh-client/mesh-fixture/run test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/model.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/model-1495450aa1e090c5) running 6 tests test addresses_never_become_options_or_shell_syntax ... ok test check_is_exact_bounded_and_rejects_every_truncation ... ok test consent_and_credential_references_are_the_only_request_authority ... ok test passwordless_sudo_keeps_default_rootless_without_explicit_consent ... ok test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test start_fresh_is_declared_as_an_owned_host_provisioning_action ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/payload_source.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/payload_source-2c319be05840be68) running 2 tests test stalled_download_retains_the_named_step_before_the_attempt_deadline ... ok test verification_failure_names_step_and_stops_before_upload ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/previous_attempt_liveness_review.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/previous_attempt_liveness_review-48e389662ef4f40f) running 1 test test home_alias_keeps_open_setup_descriptor_live ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.35s Running tests/previous_attempt_shell.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/previous_attempt_shell-ea23fd99bd99c666) running 1 test test shared_ownership_shell_preserves_recovery_and_refusal_invariants ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.34s Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/probe_check-1c2c88386281f5f7) running 3 tests test breakit2_no_systemd_names_the_required_manager ... ok test manager_availability_does_not_request_its_private_environment ... ok test shell_startup_refusal_names_an_interactive_only_remedy ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/process.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/process-2394f677df3eba95) running 10 tests test cancellation_retires_the_helper_descendant_too ... ok test completed_helper_retires_descendants_with_closed_pipes ... ok test declared_payload_flows_before_receipts_and_private_input_waits ... ok test declared_selection_mismatch_and_missing_verification_withhold_private_input ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test negotiated_sources_require_an_exact_receipt_before_private_input ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test review_compound_refusal_preserves_receipt_when_invitation_pipe_closes ... ok test reviewer_ssh_helper_does_not_inherit_server_reload_mask ... ok test unavailable_negotiated_codec_never_sends_invitation ... ok test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.34s Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/proxy_policy-95eaca5955b4de54) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/publication.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/publication-c8f03565e3a56074) running 4 tests test encoding_warmup_resolves_admitted_source_images_instead_of_configured_paths ... ok test refused_publication_reports_failure_to_the_waiting_wizard ... ok test retry_reopens_ssh_after_transport_loss_and_keeps_the_published_shell ... ok test signed_session_is_typable_before_full_resolution_and_late_failure_retries_the_same_shell ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/real_ssh-e4eb9fc1f871e6b5) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/recovery_support.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/recovery_support-04633aa0d48ae329) Private socket fixture: uid=1001 scratch=/mnt; capabilities dropped before test running 12 tests test cleanup_holds_runtime_lock_until_all_receipts_retire ... ok test cleanup_script_requires_the_shipped_helper_level ... ok test legacy_control_socket_in_newline_home_preserves_receipt ... ok test legacy_control_socket_in_spaced_home_preserves_receipt ... ok test legacy_control_socket_through_absolute_alias_preserves_receipt ... ok test private_legacy_control_socket_preserves_receipt ... ok test review_bound_control_socket_before_listen_preserves_receipt ... ok test review_cached_helper_without_session_mode_asks_for_a_refresh ... ok test review_live_session_socket_in_newline_home_blocks_cleanup ... ok test review_live_session_socket_in_plain_home_blocks_cleanup ... ok test review_stale_receipt_recovers_without_host_python ... ignored, requires sudo -n Docker and the local debian:trixie-slim image test unrelated_same_user_relative_socket_does_not_block_cleanup ... ok test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 2.21s Running tests/shadow_banner.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/shadow_banner-390b0804ed5bea42) running 1 test test a_long_pre_authentication_banner_does_not_refuse_the_host ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/shell_quoting.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/shell_quoting-e6b49b46dffcbe90) running 1 test test nested_scripts_preserve_bytes_without_expanding_public_text ... ignored, run on the owned disposable target with all supported login shells installed test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/single_connection-82df5df57e5d8a67) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/source_completeness-17850d7f3f46c0fe) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/trust_round2-acef8625a04561d9) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 8 tests test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test stream_tests::split_mux_header_preserves_trailing_close ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test tests::marked_input_preserves_legacy_bytes_and_bounds_reply_body ... ok test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal_server-1b97e649abad9095) running 626 tests test auth::cookies::measurement::cookie_latency_at_50_sessions ... ignored, local optimized cookie reader measurement at 50 browser sessions test auth::cookies::tests::duplicates_missing_invalid_and_nontext_fail_closed ... ok test auth::cookies::tests::joined_split_reordered_and_other_cookies ... ok test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::migration_compat_tests::committed_retag_can_resume_after_interruption_and_concurrent_startup ... ok test auth::migration_compat_tests::dev_history_keeps_its_mesh_checksum_and_data ... ok test auth::migration_compat_tests::dirty_production_migration_is_refused_without_retagging ... ok test auth::migration_compat_tests::fresh_history_has_unique_versions_and_both_schemas ... ok test auth::migration_compat_tests::live_production_retirement_history_survives_dev_upgrade ... ok test auth::migration_compat_tests::occupied_destination_leaves_the_production_ledger_unchanged ... ok test auth::migration_compat_tests::production_history_keeps_index_checksum_and_data ... ok test auth::migration_compat_tests::unrecognized_checksum_is_refused_without_retagging ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::tests::ca_administration_tests::audit_tests::private_copy_persistence_contains_only_ciphertext_and_public_metadata ... ok test auth::tests::ca_administration_tests::audit_tests::unlock_audit_cost_at_1000_memberships ... ignored, real 100-unlock/1000-membership audit formatting diagnostic; no own builds or browsers test auth::tests::ca_administration_tests::audit_tests::unlock_audit_records_principal_time_outcome_without_material ... ok test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::audit_tests::ca_start_budget_is_shared_by_routes_and_cookies_but_not_status_or_finish ... ok test auth::tests::ca_administration_tests::http_tests::audit_tests::sequential_unlock_starts_require_a_temporal_budget ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::signed_deploy_preserves_passkey_ca_and_live_sessions ... ignored, exclusive perf VM staging proof; requires signed run artifacts and systemd test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::staging_browser_services_probes_between_commands ... ignored, root shipping binary functional proof; requires INFRATERNAL_TEST_BINARY and private CA test root test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::authority_stall_soak::authority_fast_read_echo_rtt ... ignored, measurement for #240; run explicitly on the perf VM test auth::tests::socket_tests::authority_stall_soak::authority_stall_soak ... ignored, measurement for #240; run explicitly on the perf VM test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::close_logging::agent_stream_loss_logs_its_safe_close_reason_and_reaches_the_browser ... ok test auth::tests::socket_tests::close_logging::authority_read_timeout_during_a_frame_logs_authority_unavailable ... ok test auth::tests::socket_tests::close_logging::browser_websocket_close_logs_its_code_and_safe_reason_for_attached_sessions ... ok test auth::tests::socket_tests::close_logging::failed_client_resume_attempt_logs_each_retained_session ... ok test auth::tests::socket_tests::close_logging::rootless_attach_without_a_live_peer_logs_the_host_and_keeps_the_socket_up ... ok test auth::tests::socket_tests::close_logging::session_lookup_store_error_logs_authority_unavailable ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::plugin_lifecycle::plugin_exchange_correlates_results_after_subscription_events ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok test auth::tests::socket_tests::restart_open_liveness_review::responsive_socket_survives_a_held_terminal_open_with_an_existing_attachment ... ok test auth::tests::socket_tests::review_authority_retry::renewing_retries_do_not_drain_the_pool_during_a_write_stall ... ok test auth::tests::socket_tests::review_authority_retry::session_expiring_during_the_wait_is_not_revived_or_served ... ok test auth::tests::socket_tests::review_close_log::attaches_to_unowned_session_ids_cannot_flood_the_close_log ... ok test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_input_credit::browser_input_overload_retires_only_the_terminal_stream ... ok test auth::tests::socket_tests::review_input_credit::browser_output_credit_refusal_logs_the_stream_reason ... ok test auth::tests::socket_tests::review_input_credit::idle_browser_probes_do_not_renew_or_poll_session_authority ... ok test auth::tests::socket_tests::review_input_credit::idle_probe_authority_cancels_waiting_write_on_committed_revocation ... ok test auth::tests::socket_tests::review_input_credit::idle_probe_authority_refreshes_expiry_after_authorized_activity ... ok test auth::tests::socket_tests::review_input_credit::idle_server_probes_do_not_renew_session_authority ... ok test auth::tests::socket_tests::review_input_credit::pending_browser_input_counts_against_slots_and_cancels_on_drop ... ok test auth::tests::socket_tests::review_input_credit::pending_browser_input_has_a_wire_byte_bound ... ok test auth::tests::socket_tests::review_input_credit::review_full_input_writer_preserves_browser_control_progress ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket ... ok test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close ... ok test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery ... ok test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::socket_tests::transient_authority_stall::authority_read_stall_beyond_the_wait_still_fails_closed ... ok test auth::tests::socket_tests::transient_authority_stall::authority_read_stall_shorter_than_the_wait_keeps_the_socket_and_its_order ... ok test auth::tests::socket_tests::transient_authority_stall::teardown_does_not_renew_the_session ... ok test auth::tests::socket_tests::transient_authority_stall::teardown_with_a_busy_store_does_not_wait_for_authority ... ok test auth::tests::socket_tests::transient_authority_stall::terminal_stream_survives_authority_stalls_without_loss_or_reorder ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser ... ok test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies ... ok test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test bootstrap_api::tests::setup_status_tests::late_setup_subscriber_receives_failure_and_retry_completion ... ok test bootstrap_api::tests::setup_status_tests::setup_replay_outlives_its_socket_and_logout_retires_delivery ... ok test bootstrap_api::tests::split_cookie_fields_preserve_bootstrap_owner_authority ... ok test bootstrap_api::tests::start_fresh_request_is_bound_to_a_target_and_public_challenge ... ok test bootstrap_runtime::failure_log_tests::one_line_contains_only_classified_public_coordinates ... ok test bootstrap_runtime::failure_log_tests::start_fresh_logs_only_the_exact_public_ownership_journal_and_outcome ... ok test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test bootstrap_runtime::remote_backend::admission_tests::installed_admission_waits_for_the_active_route ... ok test bootstrap_runtime::remote_backend::canary_tests::cancellation_keeps_the_owned_session_available_for_cleanup ... ok test bootstrap_runtime::remote_backend::canary_tests::failed_attachment_finishes_the_private_command ... ok test bootstrap_runtime::remote_backend::canary_tests::private_writers_reserve_the_browser_allocator_without_publishing_sessions ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_primary_exit_without_reattaching_to_a_retired_session ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::already_added_breakit::a_non_owner_session_never_learns_the_owners_host_id ... ok test bootstrap_runtime::remote_backend::tests::already_added_breakit::a_revoked_host_never_names_its_id ... ok test bootstrap_runtime::remote_backend::tests::already_added_breakit::the_typed_address_decides_which_host_is_named_when_two_match ... ok test bootstrap_runtime::remote_backend::tests::automatic_cleanup_requires_the_exact_failed_server_host_binding ... ok test bootstrap_runtime::remote_backend::tests::breakit2_concurrent_same_destination_issues_only_one_invitation ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::breakit2_live_ssh_install_join_and_terminal ... ignored, #169 live disposable Docker target; invoke docs/verification/addhost-breakit2/measure.py test bootstrap_runtime::remote_backend::tests::breakit2_live::compound_retry_fixture_reaches_install_boundary ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::live_fixture_keeps_authority_after_connection_retirement ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::live_fixture_keeps_the_full_image_and_selects_the_explicit_session_image ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::provisioning_https_uses_production_tcp_admission ... ok test bootstrap_runtime::remote_backend::tests::breakit2_unpublished_invitation_retires_durable_authority ... ok test bootstrap_runtime::remote_backend::tests::cancelled_invitation_after_commit_retires_its_host_record ... ok test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::destination_reservation_admission_at_1600_pending_hosts ... ignored, #169 local bounded-journal scale evidence under CPUWeight scope test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_runtime::remote_backend::tests::retirement_contention::cancelled_invitation_retires_after_sqlite_busy_timeout ... ok test bootstrap_runtime::remote_backend::tests::review_cleanup::review_cancelled_committed_invitation_survives_temporary_writer_contention ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test ca_handoff::shipping_tests::browser_client::tests::probes_are_answered_without_assertion_reads_and_drop_closes_the_socket ... ok test ca_handoff::shipping_tests::shipping_child ... ok test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY test ca_handoff::tests::exec_child ... ok test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok test ca_http::intake_tests::chunked_intake_is_bounded_before_parsing ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test ca_memory::tests::unavailable_secure_heap_refuses_root_and_warns_for_nonroot ... ok test ca_update_audit_tests::every_ciphertext_byte_and_tag_mutation_refuses_without_material_in_errors ... ok test ca_update_audit_tests::handoff_descriptor_is_close_on_exec_and_prepare_failure_preserves_source ... ok test ca_update_audit_tests::handoff_memory_protection_failure_keeps_the_existing_signer ... ok test ca_update_audit_tests::no_timer_locks_signing_and_wrong_issuer_cannot_replace_the_unlocked_source ... ok test ca_update_audit_tests::secure_heap_capacity_at_10000_live_keys ... ignored, isolated secure heap sizing at 10000 live keys; run with no own builds/browser overlap test ca_update_audit_tests::unlocked_signer_requires_persistent_locked_pages ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test embedded::exit_latency_tests::shim_sigkill_to_server_inventory_latency ... ignored, real daemon artifact and 200 shim exits; run with INFRATERNAL_BIN in a weighted scope test embedded::priming::flights::tests::queued_sibling_failure_stays_owned_until_the_actor_observes_it ... ok test embedded::priming::flights::tests::stop_preserves_finished_success_and_identifies_unpolled_cancellation ... ok test embedded::priming::header_tests::blocked_promotion_header_does_not_stop_actor_control_progress ... ok test embedded::priming::header_tests::promoted_owned_attach_opens_a_missing_native_writer_binding ... ok test embedded::priming::header_tests::promotion_never_publishes_an_unstarted_shadow_flight_as_credited ... ok test embedded::priming::tests::abandoned_preparation_cancels_even_before_the_owned_task_first_polls ... ok test embedded::priming::tests::flow_control_blocked_shadow_does_not_stop_actor_control_progress ... ok test embedded::priming::tests::later_input_is_hedged_without_resending_the_first_suffix ... ok test embedded::priming::tests::overlap_and_stale_snapshot_do_not_spend_browser_credit ... ok test embedded::priming::tests::shadow_input_and_snapshot_credit_have_independent_bounded_windows ... ok test embedded::priming::tests::snapshot_notice_precedes_repaint_and_duplicates_spend_no_browser_credit ... ok test embedded::priming::tests::stream_reuse_waits_for_the_retired_flight_to_join ... ok test embedded::regressions::actor_batch_probes_every_ready_route_without_payload_notifications ... ok test embedded::regressions::agent_link_loss_invalidates_the_last_live_session_snapshot ... ok test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok test embedded::regressions::credit_tests::retained_input_credit_parks_only_the_full_writer_until_its_ack ... ok test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::expired_route_retires_full_consumer ... ok test embedded::regressions::expired_route_waits_for_browser_authority_before_rebind ... ok test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test embedded::regressions::greeted_links_that_die_young_escalate_the_actor_retry_delay ... ok test embedded::regressions::half_open_infraternal_agent_route_loses_inventory_without_eof ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test embedded::regressions::idle_route_proofs_do_not_queue_payload_notifications_at_capacity ... ok test embedded::regressions::liveness_doubt_breakit_r2_tests::a_pinned_dead_host_retires_within_two_ceilings_without_doubt ... ok test embedded::regressions::liveness_doubt_breakit_r2_tests::a_window_that_reconnects_mid_doubt_is_told_and_recovered ... ok test embedded::regressions::liveness_doubt_breakit_r2_tests::doubt_retry_sends_one_notice_per_window_per_episode ... ok test embedded::regressions::liveness_doubt_breakit_tests::a_window_full_at_doubt_start_is_told_on_a_later_tick ... ok test embedded::regressions::liveness_doubt_breakit_tests::doubt_and_retire_times_per_rtt ... ok test embedded::regressions::liveness_doubt_breakit_tests::inflated_host_link_still_retires_a_dead_host_within_four_seconds ... ok test embedded::regressions::liveness_doubt_breakit_tests::queued_path_at_the_ceiling_does_not_flap_doubt_every_probe ... ok test embedded::regressions::liveness_doubt_breakit_tests::retired_doubt_never_confirms_a_replacement_link_mid_replay ... ok test embedded::regressions::native_input_retention_leaves_terminal_probes_to_the_route ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test embedded::regressions::path_tests::full_ack_releases_retention_and_duplicate_input_is_not_replayed ... ok test embedded::regressions::path_tests::full_retention_replays_as_legal_frames_with_contiguous_offsets ... ok test embedded::regressions::path_tests::initial_attachment_keeps_input_cut_through_before_its_first_ack ... ok test embedded::regressions::path_tests::input_retention_cost_at_200_terminals ... ignored, Run alone on the perf VM under the shared benchmark lock. test embedded::regressions::path_tests::input_retention_refuses_excess_before_advancing_the_cursor ... ok test embedded::regressions::path_tests::replacement_replays_only_the_unacknowledged_suffix_and_queued_input ... ok test embedded::regressions::path_tests::reply_queue_deadline_and_live_reply_do_not_change_typing_offsets ... ok test embedded::regressions::path_tests::review_pending_input_limit_retires_only_its_attachment ... ok test embedded::regressions::plugin_control_notice_preserves_capability_invalidation ... ok test embedded::regressions::query_reply_compatibility_notice_is_strict_and_session_bound ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovered_route_ignores_stale_browser_rebind ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::replay_complete_notice_is_accepted_by_embedded_server ... ok test embedded::regressions::resumed_writer_closes_previous_route_before_shared_stream_reuse ... ok test embedded::regressions::resumed_writer_for_other_session_preserves_live_route ... ok test embedded::regressions::saturated_control_pong_does_not_retire_connection ... ok test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok test embedded::writes::tests::bounded_lane_metadata_and_flight_sizes ... ok test embedded::writes::tests::cached_promotion_ack_never_replays_inside_the_actor ... ok test embedded::writes::tests::enabling_owned_writes_preserves_unsent_replacement_input ... ok test embedded::writes::tests::full_control_lane_keeps_all_terminal_owner_slots_available ... ok test embedded::writes::tests::promotion_headers_preserve_attach_credit_ack_input_order ... ok test embedded::writes::tests::saturated_control_queue_preserves_fifo_and_shutdown_owns_flights ... ok test embedded::writes::tests::socket_completion_cannot_spend_unacknowledged_writer_credit ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test enrollment::bootstrap_retirement::ownership_regression::retirement_requires_an_unfinished_intent ... ok test enrollment::bootstrap_retirement::tests::proven_completion_is_owner_bound_and_survives_restart ... ok test enrollment::bootstrap_retirement::tests::retirement_consumes_only_its_owned_intent_with_the_tombstone ... ok test enrollment::bootstrap_retirement::tests::startup_preserves_a_published_live_session_and_its_setup_intent ... ok test enrollment::bootstrap_retirement::tests::startup_retires_only_unfinished_provisioning_and_is_idempotent ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test liveness::tests::a_doubt_recovered_at_the_ceiling_pins_until_the_path_drains ... ok test liveness::tests::a_recovered_doubt_below_the_ceiling_keeps_early_notice ... ok test liveness::tests::a_reply_during_doubt_clears_it_and_renews_the_route ... ok test liveness::tests::an_unanswered_host_link_retires_at_the_startup_grace_without_doubt ... ok test liveness::tests::delayed_server_probe_does_not_expire_an_answered_route ... ok test liveness::tests::healthy_reply_survives_a_150ms_server_stall ... ok test liveness::tests::host_allowance_covers_one_loss_recovery_and_browser_routes_keep_theirs ... ok test liveness::tests::host_allowance_has_a_floor_a_settled_long_haul_value_and_a_ceiling ... ok test liveness::tests::host_link_doubts_on_the_first_miss_and_retires_on_the_second ... ok test liveness::tests::jitter_allowance_decays_after_the_link_settles ... ok test liveness::tests::late_native_probe_keeps_its_unissued_reply_allowance ... ok test liveness::tests::missing_replies_expire_even_with_probes_in_flight ... ok test liveness::tests::pipelined_requests_do_not_renew_an_outstanding_deadline ... ok test liveness::tests::quiet_dead_peer_expires_within_floor_plus_one_interval ... ok test liveness::tests::ready_reply_only_pulls_forward_an_answered_probe_after_one_tick ... ok test liveness::tests::recent_application_progress_preserves_the_first_tick_cadence ... ok test liveness::tests::restarting_monitoring_never_reuses_an_old_issued_probe ... ok test liveness::tests::serial_probe_accepts_a_timely_rtt_step_without_renewing_unsolicited_replies ... ok test liveness::tests::serial_probe_deadline_includes_only_one_gap_and_the_estimated_allowance ... ok test liveness::tests::terminal_routes_still_end_their_lease_on_the_first_miss ... ok test liveness::tests::variation_uses_the_previous_smoothed_sample ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test mesh_api_tests::storage_diagnostics::changed_storage_failure_reports_the_previous_count ... ok test mesh_api_tests::storage_diagnostics::coordinator_clones_share_failure_counts_and_report_recovery ... ok test mesh_api_tests::storage_diagnostics::coordinator_loading_preserves_missing_server_and_sql_reasons ... ok test mesh_api_tests::storage_diagnostics::coordinator_stored_column_refuses_without_panic_and_recovers_after_repair ... ok test mesh_api_tests::storage_diagnostics::invalid_stored_column_is_skipped_without_panicking ... ok test mesh_api_tests::storage_diagnostics::invalid_stored_host_is_reported_once_by_id ... ok test mesh_api_tests::storage_diagnostics::malformed_host_keeps_healthy_inventory_readable ... ok test mesh_api_tests::storage_diagnostics::malformed_unrelated_host_preserves_scoped_inventory ... ok test mesh_api_tests::storage_diagnostics::repeated_storage_failure_has_bounded_diagnostics ... ok test mesh_api_tests::storage_diagnostics::settings_storage_failure_has_a_safe_original_reason ... ok test mesh_api_tests::storage_diagnostics::sqlite_admission_failures_have_distinct_safe_reasons ... ok test mesh_api_tests::storage_diagnostics::storage_failures_have_safe_reasons_and_recover_after_repair ... ok test mesh_api_tests::storage_diagnostics::unrelated_success_does_not_reset_a_persistent_write_failure ... ok test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test plugins::node_lifecycle::tests::disabling_replacement_and_retirement_join_the_correct_node_worker ... ok test release_build_tests::release_build_marker_is_explicit ... ok test release_http::tests::bounded_body_status_and_existing_destination_are_refused ... ok test release_http::tests::https_cannot_silently_accept_a_plaintext_bucket ... ok test release_http::tests::unsupported_scheme_credentials_query_and_fragment_never_connect ... ok test release_latest::tests::bench_bounded_metadata_verification ... ignored, local weighted-scope verification latency benchmark test release_latest::tests::bench_latest_fifty_callers ... ignored, local weighted-scope 50-caller real-engine RSS measurement test release_latest::tests::edge_pointer_is_verified_in_its_own_channel ... ok test release_latest::tests::pointer_authenticates_signed_version_and_refuses_replays_tampering_and_duplicates ... ok test release_latest::tests::stable_empty_reports_opt_in_without_edge_request ... ok test release_manifest::tests::noncanonical_or_cross_channel_identity_is_refused ... ok test release_manifest::tests::signed_identity_and_exact_bytes_are_required ... ok test release_payload::tests::a_missing_payload_never_enables_development_fallback ... ok test release_payload::tests::a_valid_older_release_replayed_under_the_requested_version_is_refused ... ok test release_payload::tests::advertised_session_missing_digest_or_signature_never_falls_back ... ok test release_payload::tests::cache_symlinks_and_shared_files_are_refused ... ok test release_payload::tests::concurrent_session_requests_publish_one_verified_artifact ... ok test release_payload::tests::cross_architecture_cold_and_warm_cache_measurements ... ignored, run release-profile measurements in a weighted scope test release_payload::tests::dangling_session_cache_symlink_is_refused_without_publication ... ok test release_payload::tests::development_session_fallback_only_uses_trusted_local_artifacts_for_missing_release ... ok test release_payload::tests::edge_add_host_keeps_exact_server_version_and_verified_cache ... ok test release_payload::tests::eight_concurrent_add_hosts_share_one_verified_download ... ok test release_payload::tests::missing_wrong_version_tampered_network_and_development_only_fallback ... ok test release_payload::tests::partial_download_restart_child ... ignored, subprocess helper for release-cache restart verification test release_payload::tests::refused_session_release_never_uses_development_fallback ... ok test release_payload::tests::resolver_startup_removes_only_owned_inactive_private_staging ... ok test release_payload::tests::restarted_resolution_reclaims_partial_downloads_after_process_stop ... ok test release_payload::tests::session_cache_refuses_shared_payloads_symlinks_and_unsafe_absence ... ok test release_payload::tests::session_payloads_are_signed_on_both_architectures_and_reused_offline ... ok test release_payload::tests::session_staging_cleanup_preserves_active_and_unknown_files ... ok test release_payload::tests::signed_download_cache_hit_offline_and_tampered_cache ... ok test release_payload::tests::signed_session_absence_is_cached_and_reauthenticated_offline ... ok test release_payload::tests::signed_session_version_replay_and_untrusted_key_are_refused ... ok test release_verify::tests::compiled_authorities_keep_production_and_isolate_staging ... ok test release_verify::tests::openssh_signatures_preserve_descriptor_and_reject_every_byte_mutation ... ok test release_verify::tests::per_run_signature_obeys_the_compiled_feature_boundary ... ok test release_verify::tests::trust_namespace_hash_trailing_data_and_manifest_ambiguity_are_refused ... ok test release_verify::tests::verification_twenty_megabytes_fifty_runs ... ignored, run release-profile measurements in a weighted scope test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test remote_guard::cut_tests::cancellation_survives_last_transport_until_durable_tombstone ... ok test remote_guard::cut_tests::provisional_ssh_authority_requires_exact_pending_owner_and_uid ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test remote_inventory::pagination_tests::long_destinations_stay_bounded_and_all_pages_are_complete ... ok test remote_inventory::tests::admitted_hosts_are_account_scoped_offline_and_revocation_filtered ... ok test remote_inventory::tests::unredeemed_invitations_are_not_admitted_and_cursors_are_canonical ... ok test remote_mesh_revocation_tests::committed_host_revocation_pushes_peer_withdrawal_without_polling ... ok test remote_removal::review_tests::accepted_uninstall_names_the_objects_it_leaves ... ok test remote_removal::review_tests::no_commands_for_a_host_setup_did_not_install ... ok test remote_removal::review_tests::review_manual_commands_are_gated_on_this_hosts_bootstrap_owner ... ok test remote_removal::review_tests::review_manual_commands_stop_only_this_installations_sessions ... ok test remote_removal::review_tests::review_manual_rootful_commands_delete_only_marked_kernel_objects ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test remote_runtime::tests::additional_listeners::additional_listener_keeps_underlay_address_and_retires_with_its_lease ... ok test remote_runtime::tests::additional_listeners::additional_listener_refuses_unenrolled_certificate_before_proof_reply ... ok test remote_runtime::tests::additional_listeners::admitted_connection_moves_to_a_leased_address_and_back_without_readmission ... ok test remote_runtime::tests::additional_listeners::initial_overlay_admission_has_no_underlay_guess ... ok test remote_runtime::tests::additional_listeners::ipv6_wildcard_listener_reuses_binding_and_preserves_ipv4_discovery ... ok test remote_runtime::tests::additional_listeners::leased_tcp_admits_current_identity_releases_lease_and_keeps_primary_usable ... ok test remote_runtime::tests::additional_listeners::wildcard_listener_reuses_binding_and_tracks_destination_lease_counts ... ok test remote_runtime::tests::cancelled_native_read_retains_dequeued_packet ... ok test remote_runtime::tests::candidate_proofs::candidate_proof_refuses_a_second_probe_and_invalid_hello ... ok test remote_runtime::tests::candidate_proofs::quic_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok test remote_runtime::tests::candidate_proofs::tls_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::late_native_detach_after_peer_close_keeps_the_control_connection ... ok test remote_runtime::tests::late_native_detach_after_peer_stop_keeps_the_control_connection ... ok test remote_runtime::tests::ping_flood::primary_ping_during_terminal_flood ... ignored, 10-minute real PTY measurement; pinned VM lock and INFRATERNAL_PING_BINARY required test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::remote_peer_routing_capability_does_not_retain_the_host_registry ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok test remote_runtime::tests::retired_native_writer_frames_cannot_close_or_ack_its_replacement ... ok test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::ssh_bridge::component_off_retires_ssh_fallback_after_installed_admission ... ok test remote_runtime::tests::ssh_bridge::refused_installed_reattachment_restores_the_ssh_writer ... ok test remote_runtime::tests::ssh_bridge::ssh_bridge_does_not_invent_node_path_capabilities ... ok test remote_runtime::tests::ssh_bridge::ssh_bridge_retires_only_after_installed_writer_acknowledges ... ok test remote_runtime::tests::ssh_bridge::ssh_greeting_keeps_full_capabilities_and_coalesced_frames ... ok test remote_runtime::tests::ssh_bridge::ssh_greeting_refuses_invalid_first_frames_and_releases_its_master ... ok test remote_runtime::tests::standby::a_second_parked_fallback_cannot_replace_the_first ... ok test remote_runtime::tests::standby::control_pause::cancelled_control_packet_survives_pause_and_resumes_before_queued_sibling ... ok test remote_runtime::tests::standby::control_queue::saturated_native_control_queue_does_not_hide_primary_terminal_output ... ok test remote_runtime::tests::standby::control_queue::scheduled_probe_preserves_primary_at_full_native_control_capacity ... ok test remote_runtime::tests::standby::detached_primed_writers_release_native_binding_budget ... ok test remote_runtime::tests::standby::liveness_doubt::one_missed_primary_reply_shows_reconnecting_and_only_a_second_retires_the_link ... ok test remote_runtime::tests::standby::parked_fallback_is_cancelled_by_ledger_revocation ... ok test remote_runtime::tests::standby::parked_fallback_survives_greeting_deadline_and_activates_without_another_hello ... ok test remote_runtime::tests::standby::primed_fallback_activates_after_the_primary_closes ... ok test remote_runtime::tests::standby::primed_fallback_hedges_when_credit_arrives_behind_a_blocked_primary_write ... ok test remote_runtime::tests::standby::primed_fallback_hedges_while_primary_native_send_buffer_is_full ... ok test remote_runtime::tests::standby::primed_hedge_survives_blocked_control_call ... ok test remote_runtime::tests::standby::primed_standby_greets_without_replacing_the_live_actor_before_activation ... ok test remote_runtime::tests::standby::tcp_fallback_parks_without_a_host_actor_and_activates_on_the_existing_tls_channel ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_standby::tests::bounded_standby_options_reject_ambiguous_or_unrecognized_fields ... ok test remote_standby::tests::cancelled_queue_admission_releases_parking_before_actor_poll ... ok test remote_standby::tests::parking_is_per_identity_bounded_and_released_on_drop ... ok test remote_standby_request::tests::requests_require_objects_and_exact_fields ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 test runtime::remote_demo_tests::cold_start::release_transition_recovers_enrolled_host_after_long_outage ... ignored, requires isolated release binaries and a ten-minute outage test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test runtime::temporal_admission_tests::ca_budget_cost_at_capacity ... ignored, isolated debug admission diagnostic at 4096 principals; run without own build overlap test runtime::temporal_admission_tests::windows_principals_and_capacity_remain_bounded ... ok test runtime::tests::empty_no_color_does_not_disable_terminal_logs ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test stream_close::tests::a_close_naming_no_owned_session_prints_none_for_session_and_host ... ok test stream_close::tests::a_dead_logger_is_counted_and_summarised_by_the_callers ... ok test stream_close::tests::a_full_queue_drops_and_counts_instead_of_blocking ... ok test stream_close::tests::a_full_table_keeps_rate_limiting_a_storm ... ok test stream_close::tests::an_unavailable_agent_stream_is_reported_as_a_link_drop ... ok test stream_close::tests::client_chosen_session_ids_share_their_accounts_window ... ok test stream_close::tests::close_line_has_session_counters_and_never_copies_untrusted_close_text ... ok test stream_close::tests::close_path_cost ... ignored, manual microbenchmark test stream_close::tests::different_accounts_and_reason_categories_each_get_their_first_line ... ok test stream_close::tests::mixed_reasons_and_closers_in_one_window_are_named_as_mixed ... ok test stream_close::tests::one_close_line_and_one_summary_bound_an_account_storm ... ok test stream_close::tests::the_thread_writes_the_first_close_and_summarises_the_rest_on_shutdown ... ok test terminal_queries::census_tests::census_cleanup_is_host_scoped_and_preserves_detached_live_queries ... ok test terminal_queries::corpus_tests::output_chunking_preserves_bounded_query_state ... ok test terminal_queries::grammar_tests::binds_reply_kind_and_all_color_query_fields ... ok test terminal_queries::lifecycle_tests::ended_sessions_release_query_slots ... ok test terminal_queries::overflow_tests::oversized_osc_does_not_hide_the_next_query ... ok test terminal_queries::tests::deadline_includes_incomplete_query ... ok test terminal_queries::tests::marked_flood_never_allocates_queries ... ok test terminal_queries::tests::only_one_reply_across_viewers_and_replay ... ok test terminal_queries::tests::response_grammars_refuse_trailing_typing_and_wrong_kind ... ok test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test websocket::cookie_tests::duplicate_cookie_fields_deny_socket_session ... ok test websocket::cookie_tests::split_cookie_fields_preserve_socket_session ... ok test websocket::link_notice_tests::doubt_notices_reach_only_viewers_that_announced_them_and_never_await_an_ack ... ok test websocket::receive_tests::browser_websocket_close_keeps_its_code_and_discards_unknown_reason_text ... ok test websocket::receive_tests::buffered_control_frames_cannot_monopolize_a_transport_turn ... ok test websocket::receive_tests::receive_failures_keep_protocol_size_and_idle_classifications ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test websocket::session_inventory_tests::available_snapshot_reports_live_rows_and_bounded_saved_exit_statuses ... ok test websocket::session_inventory_tests::census_waiting_for_database_does_not_close_a_newly_created_live_session ... ok test websocket::session_inventory_tests::inventory_reconciliation_at_200_sessions_and_50_accounts ... ignored, independent scale diagnostic; run in a weighted scope test websocket::session_inventory_tests::pending_agent_inventory_hides_cached_rows_until_the_first_census ... ok test websocket::session_inventory_tests::reconciliation_before_saved_exit_keeps_the_authoritative_exit_status ... ok test websocket::session_inventory_tests::restart_reconciliation_keeps_live_rows_and_closes_missing_rows ... ok test websocket::write_tests::a_stalled_group_has_one_absolute_write_budget ... ok test websocket::write_tests::ready_proofs_keep_message_boundaries_and_order_with_one_flush ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_fails_closed_at_the_bounded_wait ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_keeps_its_connection_owner_runnable ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_rejects_expiry_committed_by_its_operation ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_rejects_revocation_committed_by_its_operation ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_stops_side_effects_at_expiry ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_stops_side_effects_on_revocation ... ok test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test websocket_transport::queue_tests::full_browser_transport_proof_queue_keeps_connection_usable ... ok test websocket_transport::queue_tests::full_browser_wire_proof_queue_keeps_connection_usable ... ok test websocket_transport::tests::each_receive_end_has_a_structured_terminal_close_reason ... ok test websocket_transport::tests::no_probe_in_an_active_idle_active_window ... ok test result: ok. 574 passed; 0 failed; 52 ignored; 0 measured; 0 filtered out; finished in 380.05s Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/catalog_startup-0cc2a21db5bdb009) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/enrollment-da6f6bc526730a8e) running 6 tests test concurrent_redemption_has_one_winner_and_one_certificate ... ok test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.44s Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/mesh_parser-53adbbeaac9bee95) running 2 tests test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test review_grant_parser_rejects_unknown_nested_port_fields ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/mesh_review_plugin-2b5c5891c407e664) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/mesh_review_policy-b523d9249fd86f2a) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/mesh_review_role_scope-68bf054b7c4a424b) running 2 tests test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test role_scopes_require_an_array_when_provided ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/native_probe_correlation_review.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/native_probe_correlation_review-48536fc69a9add81) running 23 tests test healthy_real_socket_survives_a_150ms_server_stall ... ok test liveness::tests::a_doubt_recovered_at_the_ceiling_pins_until_the_path_drains ... ok test liveness::tests::a_recovered_doubt_below_the_ceiling_keeps_early_notice ... ok test liveness::tests::a_reply_during_doubt_clears_it_and_renews_the_route ... ok test liveness::tests::an_unanswered_host_link_retires_at_the_startup_grace_without_doubt ... ok test liveness::tests::delayed_server_probe_does_not_expire_an_answered_route ... ok test liveness::tests::healthy_reply_survives_a_150ms_server_stall ... ok test liveness::tests::host_allowance_covers_one_loss_recovery_and_browser_routes_keep_theirs ... ok test liveness::tests::host_allowance_has_a_floor_a_settled_long_haul_value_and_a_ceiling ... ok test liveness::tests::host_link_doubts_on_the_first_miss_and_retires_on_the_second ... ok test liveness::tests::jitter_allowance_decays_after_the_link_settles ... ok test liveness::tests::late_native_probe_keeps_its_unissued_reply_allowance ... ok test liveness::tests::missing_replies_expire_even_with_probes_in_flight ... ok test liveness::tests::pipelined_requests_do_not_renew_an_outstanding_deadline ... ok test liveness::tests::quiet_dead_peer_expires_within_floor_plus_one_interval ... ok test liveness::tests::ready_reply_only_pulls_forward_an_answered_probe_after_one_tick ... ok test liveness::tests::recent_application_progress_preserves_the_first_tick_cadence ... ok test liveness::tests::restarting_monitoring_never_reuses_an_old_issued_probe ... ok test liveness::tests::serial_probe_accepts_a_timely_rtt_step_without_renewing_unsolicited_replies ... ok test liveness::tests::serial_probe_deadline_includes_only_one_gap_and_the_estimated_allowance ... ok test liveness::tests::terminal_routes_still_end_their_lease_on_the_first_miss ... ok test liveness::tests::variation_uses_the_previous_smoothed_sample ... ok test unissued_native_probe_reply_cannot_extend_readiness ... ok test result: ok. 23 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.16s Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/plugin_host_review-7f78344df2b01660) running 7 tests test review_completed_call_survives_normal_worker_exit ... ok test review_core_topic_remains_core_owned_even_when_declared ... ok test review_disable_answers_inflight_call ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_exited_worker_ends_its_subscriptions ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_undeclared_topic_is_left_to_the_core ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.52s Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/plugin_settings_review-59a2888e459a1f74) running 3 tests test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.55s Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/remote_plugin_contract-b49df6bb39ae4b7e) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.30s Running tests/review_mesh_host_removal.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/review_mesh_host_removal-e63b2314fa088e86) running 1 test test revoked_remote_host_is_withdrawn_from_mesh_peer_policy ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal_session-6640403118fc7305) running 2 tests test tests::fresh_exec_closes_dumpability_before_private_startup ... running 1 test test tests::fresh_exec_closes_dumpability_before_private_startup ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 1 filtered out; finished in 0.00s ok test tests::unsupported_commands_cannot_start_operator_roles_or_open_state ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal_shim-022fbdb3b60fdd6e) running 96 tests test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::deferred_frame_keeps_its_borrowed_storage_and_ordered_trailing_bytes ... ok test frame::checks::golden::every_frozen_message ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test frame::checks::maximum_deferred_frame_retries_without_growing_storage ... ok test frame::checks::query_reply_extension_is_bounded_and_fragment_safe ... ok test frame::checks::shared_writer_selector_is_fixed_length_and_fragment_safe ... ok test frame::checks::tests::golden_and_fragmented ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok test locale::tests::invalid_shell_expressions_are_ignored ... ok test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok test pty::child_locale_tests::spawned_login_shell_receives_selected_locale_without_other_host_variables ... ok test pty::child_signal_tests::child_policy_closes_the_control_descriptor_before_direct_exec ... ok test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... running 1 test test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 95 filtered out; finished in 0.00s ok test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap test ring::checks::tests::wrap_and_exact_offsets ... ok test session::inputs::reply_tests::replies_preserve_selected_writer_cursor_and_geometry ... ok test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::sequenced_checks::a_completed_deferred_frame_gives_its_trailing_input_a_fresh_ticket ... ok test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::sequenced_checks::coalesced_probe_and_input_preserve_the_written_ack_in_both_orders ... ok test session::sequenced_checks::negotiated_queue_deferral_validates_ranges_before_waiting ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_seeded_smoke ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test result: ok. 83 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 50.63s Running tests/detach.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/detach-8befbd8d3fa85e20) running 2 tests test closed_standard_descriptors_become_dev_null ... ok test detached_child_restores_default_signals_without_changing_parent ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.35s Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/mouse-ea97bd9caecc8e0d) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.18s Running tests/process_exit_descriptor.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/process_exit_descriptor-50d77b6c4248f0f9) running 2 tests test descriptor_is_cloexec_and_observes_a_real_process_exit ... ok test invalid_pid_never_creates_a_descriptor ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-d307/target/debug/deps/infraternal_status-7910dde34bdac077) running 12 tests test tests::a_manager_that_does_not_answer_is_unknown_not_down ... ok test tests::an_unanswering_manager_only_makes_its_own_unit_unknown ... ok test tests::nothing_installed_says_so ... ok test tests::production_server_is_a_running_server_with_two_mesh_peers ... ok test tests::rootful_agent_is_a_host_with_its_own_state_directory ... ok test tests::rootful_agent_reads_mesh_peers_from_its_state_directory ... ok test tests::rootless_agent_is_read_from_the_user_manager ... ok test tests::server_and_host_on_one_machine_is_both ... ok test tests::snapshot_scan_counts_peers_through_nesting_strings_and_spacing ... ok test tests::stopped_server_unit_is_stopped_not_unknown ... ok test tests::the_headline_names_what_is_down_and_how_to_look ... ok test tests::the_headline_says_how_to_join_when_nothing_is_installed ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.19s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_backup running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_relay running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_release running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_status running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s (test: 796s) ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-d307/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-d307/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ └── infraternal-session v0.1.0 ├── infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ ├── infraternal-plugin-ssh v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-session v0.1.0 │ └── infraternal-server v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-d307/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── infraternal-plugin-remote v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.46 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.46 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-session v0.1.0 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.46 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.46 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-mesh v0.1.0 (*) ├── infraternal-plugin-release v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── (dev) infraternal-status v0.1.0 │ └── infraternal v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-d307/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-session v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ ├── hyper v1.11.1 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-d307/Cargo.lock:199:1 │ 199 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 200 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-session v0.1.0 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.46 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.46 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-mesh v0.1.0 (*) ├── infraternal-plugin-release v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── (dev) infraternal-status v0.1.0 │ └── infraternal v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-d307/Cargo.lock:201:1 │ 201 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 202 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ ├── infraternal-plugin-ssh v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-session v0.1.0 │ └── infraternal-server v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-d307/Cargo.lock:204:1 │ 204 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 205 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-d307/Cargo.lock:206:1 │ 206 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 207 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 208 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-session v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.46 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.15 │ │ └── rustls v0.23.46 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── (dev) infraternal-status v0.1.0 │ │ └── infraternal v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-d307/Cargo.lock:250:1 │ 250 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 251 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── infraternal-shim v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ └── infraternal-session v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ └── infraternal-shim v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ └── infraternal-session v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.46 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.15 │ │ │ └── rustls v0.23.46 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-shim v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── (dev) infraternal-status v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.46 (*) │ │ └── rustls-webpki v0.103.15 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.46 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.2 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── (dev) infraternal v0.1.0 (*) │ ├── (dev) infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── (dev) infraternal-plugin-remote v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-d307/Cargo.lock:253:1 │ 253 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 254 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-d307/Cargo.lock:256:1 │ 256 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 257 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-d307/Cargo.lock:258:1 │ 258 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 259 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-d307/Cargo.lock:316:1 │ 316 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 317 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.46 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.46 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ └── infraternal-shim v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ └── infraternal-session v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.2 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── (dev) infraternal v0.1.0 (*) │ ├── (dev) infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── (dev) infraternal-plugin-remote v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.2 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.2 (*) ├── tokio v1.53.2 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok (cargo-deny: 2s) ==> static builds x86_64-unknown-linux-musl: exact define removed; build directories remapped; explicit paths preserved; target override refused aarch64-unknown-linux-musl: exact define removed; build directories remapped; explicit paths preserved; target override refused x86_64 OpenSSL source: AVX-512 GCM dispatch removed idempotently native compiler metadata: path independent; platform/date retained; unexpected syntax refused Rust remapping: differently named checkout roots produce identical stripped artifacts . ---------------------------------------------------------------------- Ran 1 test in 0.001s OK Finished `release` profile [optimized] target(s) in 0.96s AES-128-GCM NIST vector encrypt/decrypt passed production trust: PASS (staging-trust authority absent) /home/kayg/.cache/codex-scratch/query-replies-d307/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 21223696 bytes; cap: 21223696 bytes; delta: +0 bytes key memory: x86_64-unknown-linux-musl; memlock=8388608 bytes Key memory initialization=1; locked pages and dump exclusion enabled Finished `release` profile [optimized] target(s) in 0.76s production trust: PASS (staging-trust authority absent) /home/kayg/.cache/codex-scratch/query-replies-d307/target/aarch64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB executable, ARM aarch64, version 1 (SYSV), statically linked, stripped PT_INTERP: absent; size: 19415776 bytes; cap: 19415776 bytes; delta: +0 bytes key memory: aarch64-unknown-linux-musl runtime not checked (host x86_64; native execution required) x86_64-unknown-linux-musl: exact 21223696-byte cap PASS; 21223697 bytes rejected PASS; smaller artifact requires ratchet PASS aarch64-unknown-linux-musl: exact 19415776-byte cap PASS; 19415777 bytes rejected PASS; smaller artifact requires ratchet PASS unsupported target: rejected PASS bun test v1.4.2 (744846f84) scripts/release/static-metadata-review.test.ts: (pass) x86_64-unknown-linux-musl compiler metadata is independent of the checkout location [28.51ms] (pass) aarch64-unknown-linux-musl compiler metadata is independent of the checkout location [26.15ms] 2 pass 0 fail 10 expect() calls Ran 2 tests across 1 file. [103.00ms] server subcommand: exit 2, versioned JSON unavailable result agent group: exit 0, one parsed versioned JSON listing of its commands (static builds: 5s) +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | PASS | +---------------------------+--------------+ ==> Compiler metadata generator checks bun test v1.4.2 (744846f84) scripts/release/build-metadata.test.ts: (pass) native metadata canonicalization retains version fields and refuses changed syntax [49.02ms] (pass) one compiler driver remaps all source roots and preserves argument boundaries [153.56ms] 2 pass 0 fail 12 expect() calls Ran 2 tests across 1 file. [215.00ms] ==> Vendored Ghostty artifact checksums dist/ghostty-web.js: OK dist/ghostty-vt.wasm: OK dist/index.d.ts: OK ==> TypeScript protocol compiler Saved lockfile ==> Tracer compiler, precompression and bundle transfer budget bun install v1.4.2 (744846f84) Checked 38 installs across 69 packages (no changes) [145.00ms] $ bun x tsc --project tsconfig.json bun test v1.4.2 (744846f84) precompress.test.ts: (pass) text sidecars round-trip deterministically; compressed formats remain identity [19.34ms] browser-build.test.ts: (pass) the browser renderer has no unresolved Vite Node-file shim request [17.76ms] src/perf-detector.test.ts: (pass) FrameDetector > estimates the refresh from the median and snaps it [0.78ms] (pass) FrameDetector > nothing is a drop before the rate is known [0.07ms] (pass) FrameDetector > a drop is over 1.5 refresh intervals, a freeze over 100 ms [0.27ms] (pass) FrameDetector > the refresh only goes up: a slow page is not a slower display [0.26ms] (pass) FrameDetector > the first frame after a pause is not an interval [0.07ms] (pass) FrameDetector > fps, p95 and window read the ring [0.13ms] (pass) FrameDetector > a throttled page (one frame a second) is neither a drop nor a freeze, and neither is its return [0.20ms] (pass) FrameDetector > a lone long stall is still a freeze and is not a throttled run [0.05ms] src/canvas/recency.test.ts: (pass) touch moves an item to the front and never duplicates it [0.15ms] (pass) repeating the front item changes nothing [0.06ms] (pass) the list is capped, so the oldest items fall off [0.09ms] (pass) top skips items that are no longer live, without losing them [0.12ms] (pass) recentRows: five used windows in reverse order of use, from 54 windows [0.22ms] (pass) recentRows: a view with three windows and no use shows them in order [0.08ms] (pass) recentRows: used windows lead, the rest fill up to five in window order [0.08ms] src/canvas/status.test.ts: (pass) a lost server connection is an error toast, never a success tick [0.56ms] (pass) routine connection states stay out of the toast [0.05ms] (pass) repeated connection closes do not reopen the persistent reason toast [0.12ms] (pass) a repeated close does not retake the shared toast after a newer message replaces it [0.22ms] (pass) a close reason stays visible through a quick reconnect and clears after a stable attach [671.11ms] src/canvas/toolbar/palette-actions.test.ts: (pass) a deferred split:right selection retains its original window [0.27ms] (pass) a deferred new:below selection retains its original window [0.02ms] (pass) a deferred close selection retains its original window [0.02ms] src/canvas/windows/details-facts.test.ts: (pass) host facts become plain-language details rows [2.80ms] (pass) unknown optional host facts stay absent instead of appearing as placeholders [0.29ms] (pass) by default the machine tab shows the D126 facts under System, Resources and Access, with no More section [0.41ms] (pass) extended info adds only init, virtualization, how it is reached, shell and locale [0.28ms] (pass) facts the host did not report are omitted by default, not shown as unknown [0.18ms] (pass) the header follows the machine's own facts, not the platform the host list guessed [0.14ms] (pass) before facts arrive the host's platform names the header [0.06ms] (pass) a reported system with no platform mark still names the header and shows no mark [0.04ms] src/canvas/mesh/api-retry-budget.test.ts: (pass) a retained watch outage bounds retry requests over two logical minutes [1.33ms] src/canvas/mesh/protocol.test.ts: (pass) the server's own list becomes nodes, tags and grants, by name [0.48ms] (pass) without `access` (today's server) the person may view and may not edit [0.21ms] (pass) fields the server does not send are absent, never invented [0.14ms] (pass) a node the server sees passing traffic is online, on its path, under its machine's name [0.04ms] (pass) anything that is not a list is refused, whole [2.19ms] (pass) a node's own tag list and the tag table agree even when a server sends only one [0.12ms] (pass) the subscription's events: a pushed list, a revision that invalidates, and the end of the subscription [0.27ms] (pass) answers carry the new revision, and a create the new arrow's id [0.07ms] (pass) endpoints go out as the server writes them: a node by id, a tag by name [0.06ms] src/canvas/mesh/api-recovery.test.ts: (pass) failed watch refreshes retain one subscription through retry and release it on disposal [1.22ms] (pass) a synchronous subscription refusal leaves retry able to install a new watch [0.32ms] (pass) a pushed recovery cancels the scheduled retry [0.26ms] (pass) a pushed recovery supersedes an outstanding retry failure [0.37ms] (pass) a retry snapshot at revision 1 is ordered against a pushed recovery [0.25ms] (pass) a retry snapshot at revision 3 is ordered against a pushed recovery [0.10ms] (pass) a pushed liveness expiry supersedes an equal-revision retry snapshot [0.26ms] (pass) a forbidden withdrawal cancels retry work from the retained watch [0.22ms] (pass) a withdrawn view ignores an earlier outstanding retry result [0.26ms] (pass) initial Mesh list handles closed transport [0.15ms] (pass) initial Mesh list handles liveness deadline [0.04ms] (pass) initial Mesh list handles unreadable JSON [0.04ms] (pass) initial Mesh list handles unavailable storage [0.07ms] (pass) initial Mesh list handles forbidden action [0.04ms] (pass) initial Mesh list handles invalid stored host [0.06ms] (pass) Mesh watch withdrawal handles forbidden [0.09ms] (pass) Mesh watch withdrawal handles mesh unavailable [0.04ms] (pass) Mesh watch withdrawal handles plugin unavailable [0.02ms] src/canvas/mesh/layout.test.ts: (pass) a small mesh keeps the approved arrangement: tags down the left, hosts two to a row [0.48ms] (pass) the layout is deterministic and does not depend on input order [1.94ms] (pass) no two cards overlap, and every card lies inside the graph [3.67ms] (pass) the sheet is wider than tall, roughly 16:10 [0.94ms] (pass) a pinned node stays where it was put and the others do not move [2.15ms] (pass) a pin beyond the sheet grows the graph [0.35ms] (pass) a host's other tags do not move it; a tag nobody carries still has its node [0.15ms] (pass) 1,000 nodes lay out in a few milliseconds [9.31ms] src/canvas/layout/stops.test.ts: (pass) a view that fits the viewport has one stop, centred [0.28ms] (pass) a wide view has one stop per column and the last stop ends at the right edge [0.16ms] (pass) a view taller than the viewport is scaled down so it fits [0.04ms] (pass) nearestStop picks the stop whose centre is closest [0.12ms] (pass) a big graph opens fitted whole, in one stop, and its canvas is free [0.20ms] (pass) a small graph keeps one stop per node column [0.16ms] (pass) on a narrow screen a big graph does not shrink past where its names can be read: it starts at the top left [0.05ms] (pass) centred stops (a phone's strip) rest every column mid-screen, the first and last included [0.08ms] src/canvas/layout/grid.test.ts: (pass) split right in a stacked column makes a group: the window's column halves, its neighbours span both halves [1.44ms] (pass) closing the new half gives the layout back exactly, in the model [0.77ms] (pass) closing the window it came from makes the new half take its band, and the layout is one column again [0.30ms] (pass) split right of a spanning window halves its span inside the existing columns, with the footprint unchanged [0.18ms] (pass) split down in a group divides only the window's band: the partner window grows to keep its height [0.38ms] (pass) closing the window split down gives its band back to the window above and to the partner [0.37ms] (pass) a window split down in a plain column stacks under it and moves the windows below down [0.13ms] (pass) new window right opens a full-size column after the whole group, never inside it [0.18ms] (pass) runs: adjacent columns linked by a spanning window form one group, the rest stay plain [0.14ms] (pass) spans are clamped to the columns that exist and a stale row is re-placed, never overlapped [0.08ms] (pass) random sequences of split right, split down, new window right and close never break the grid [35.24ms] (pass) closing every window of a group returns the view to nothing, with no problem on the way [0.42ms] (pass) a full-width band under a group moves nothing and extends the group by one band [0.25ms] (pass) a band inserted between two bands of one column grows the windows beside it and moves the rest [0.12ms] src/canvas/layout/geometry.test.ts: (pass) a dropped view pushes the one it lands on along the axis of least overlap, never itself [0.57ms] (pass) a chain of neighbours is pushed in turn [0.11ms] (pass) snapping rounds to whole cells [0.06ms] (pass) reach follows grants through tags and keeps the relay [0.22ms] (pass) phone edge to edge: a lone window is the whole area, in a strip it leaves the gap and PEEK px of each neighbour; full width is the whole area always [0.23ms] (pass) comfortable phones: a column in a strip leaves PEEK px of each neighbour; a lone one keeps the screen less the margins [0.03ms] (pass) a desktop column is the same alone and in a strip [0.01ms] src/canvas/sessions/live-inventory.test.ts: (pass) a host snapshot replaces cached session rows and keeps only live shims [1.83ms] (pass) an unavailable agent hides remembered rows without ending them, then restores verified sessions [0.28ms] (pass) inventory remembers a remote session and refuses a cross-host attach [0.26ms] (pass) superseded status snapshots release records for sessions this device never opened [1.18ms] (pass) superseding a sidecar preserves status for a window opened on this device [0.22ms] (pass) a census predating a new shell does not permanently retire its confirmed live ID [0.19ms] (pass) a final Close before the first positive census never revives a new ID [0.18ms] (pass) a later absence retires a new ID after its first positive census [0.08ms] (pass) another host's census cannot clear a new shell's census fence [0.06ms] (pass) another host's close cannot clear a new shell's census fence [0.02ms] src/canvas/sessions/details-live.test.ts: (pass) a refused host facts action stops its recurring timer [0.76ms] (pass) a detected operating system supplies the live popover mark [0.72ms] src/canvas/sessions/live.test.ts: (pass) the toolbar sessions seam exposes admitted host state and routes by identity [1.19ms] (pass) an enrolled host opens by UUID and splits keep that authority [0.25ms] (pass) an authoritative snapshot keeps an unjoined host visible while setup continues [0.20ms] (pass) unknown and ambiguous labels never open an embedded shell [0.11ms] (pass) removed hosts disappear from inventory and cannot route a new shell [0.20ms] (pass) an authoritative host snapshot replaces admission with one notification [0.22ms] (pass) the embedded inventory identity still opens locally beside an equally named remote [0.13ms] (pass) the embedded host's mark does not wait for an account name, and no account is invented [0.05ms] src/canvas/sessions/hosts.test.ts: (pass) fresh storage lists an offline host added by another browser [0.91ms] (pass) every welcome reconciles without duplicate subscriptions or hosts [0.23ms] (pass) a removal in another browser withdraws the host [0.17ms] (pass) a malformed page cannot partially replace the authoritative inventory [0.21ms] (pass) a socket-authority refusal withdraws previously admitted hosts [0.22ms] (pass) an invalidated read cannot enqueue an unsent call while the socket is down [0.26ms] src/canvas/sessions/gone-review.test.ts: (pass) selecting a known gone session keeps its final exited state [0.22ms] (pass) a known retired status survives repeated selection and generic ended answers [0.15ms] src/canvas/sessions/hosts-scale-review.test.ts: (pass) a fresh browser discovers 10000 admitted offline hosts from complete bounded pages [11.11ms] (pass) a fresh browser discovers 10001 admitted offline hosts from complete bounded pages [9.59ms] src/canvas/sessions/open-refusal.test.ts: (pass) memory refusal retains the reason and current counters [0.90ms] (pass) legacy refusals still work and malformed counters never reach the message [0.28ms] (pass) product copy names the host and counters and never renders untrusted server text [0.60ms] (pass) oversized refusal JSON is ignored before parsing [0.16ms] src/canvas/model/document.test.ts: (pass) a document holds references and layout, never content [0.27ms] (pass) a document survives JSON and rebuilds the same columns [0.48ms] (pass) a target that no longer exists is dropped, and an emptied column with it [0.07ms] (pass) parseDocument rejects anything that is not a document of this format [0.20ms] (pass) remote affinity survives reload and invalid UUIDs cannot become local references [0.09ms] (pass) a version 1 document from before D212 loads, with its split pair and a full-size window [0.17ms] (pass) a grouped view saves its spans and bands and loads back to the same grid (D212) [0.22ms] (pass) a plain view is saved without spans or bands, exactly as before D212 [0.06ms] src/canvas/addhost/setup-feed.test.ts: (pass) createSetupFeed > subscribes with the host and window, then hands over events in order [0.50ms] (pass) createSetupFeed > a failure after the prompt, and a retry on the same socket [0.18ms] (pass) createSetupFeed > a dropped socket resumes after the last sequence and repeats nothing [20.49ms] (pass) createSetupFeed > a retry asked while offline is sent when the socket is back [20.53ms] (pass) createSetupFeed > a resync resets the view; an error before any event reports the status lost, after one it is ignored [0.37ms] (pass) createSetupFeed > gives up after the backoff is spent, and a release closes the socket [45.70ms] (pass) review reconnect budget survives sockets that open then close without events [47.75ms] (pass) review explicit retry resumes after the setup feed stops [46.42ms] src/canvas/addhost/wizard.breakit2.test.ts: (pass) breakit2 an explicit port on a listed host survives chip resolution [0.49ms] (pass) breakit2 malformed bracketed IPv6 waits for correction [0.08ms] (pass) listed host plus port retains its saved user in the serialized destination [0.09ms] (pass) review listed inventory name plus port retains its resolved address [0.18ms] src/canvas/addhost/setup-stages.test.ts: (pass) parseSetupEvent > reads a well-formed event [0.06ms] (pass) parseSetupEvent > drops anything malformed [0.04ms] (pass) parseSetupEvent > ignores a failed step on a non-failure and an unknown step on a failure [0.03ms] (pass) foldSetup > stages before the event's are done, later ones pending [0.10ms] (pass) foldSetup > a stage that reports done alone still finishes [0.02ms] (pass) foldSetup > ready done completes the run [0.02ms] (pass) foldSetup > a failure marks the stage its step belongs to, and a retry clears it [0.08ms] (pass) foldSetup > uploading belongs to install and the readiness check to ready [0.03ms] (pass) setupGuide > says the terminal keeps working and what to do next, in plain words [0.09ms] (pass) review malformed setup fields are dropped without coercion errors [0.13ms] (pass) exhausted setup preserves eligibility and explains a new setup [0.18ms] src/canvas/addhost/real.test.ts: (pass) parsing the server's data > a discovery row keeps only known fields and valid ids [0.27ms] (pass) parsing the server's data > the server key needs its public key and fingerprint [0.16ms] (pass) parsing the server's data > an install command needs a lifetime [0.03ms] (pass) a server that lacks an endpoint > serving the web app (200, HTML) for an unknown path is 'not available' [0.88ms] (pass) a server that lacks an endpoint > 404 discovery is an empty list; 500 discovery is an error to show [0.15ms] (pass) a server that lacks an endpoint > private sign-in stays local until a target-bound socket start [0.68ms] (pass) a server that lacks an endpoint > a wrong target consumes the reference without sending private input [0.18ms] (pass) a server that lacks an endpoint > a local reference cannot change SSH address while keeping the target id [0.13ms] (pass) a server that lacks an endpoint > closing before open discards queued sign-in even if a late open fires [0.06ms] (pass) a server that lacks an endpoint > pre-open commands stay bounded and events after close cannot revive a run [0.19ms] (pass) a server that lacks an endpoint > trust waits for the exact acknowledgement, and ignores another target [0.37ms] (pass) bootstrap failure parsing > an already-added failure keeps its existing host id [0.25ms] (pass) bootstrap failure parsing > host ids are ignored on other failures and when malformed [0.10ms] src/canvas/addhost/authority.on-demand.test.ts: (pass) CA wrapping matches the contract's HKDF domain and separates generations [0.88ms] src/canvas/addhost/model.test.ts: (pass) stagesOf > a host with no event is waiting everywhere [0.28ms] (pass) stagesOf > check before sign-in is detecting how to sign in [0.15ms] (pass) stagesOf > the sign-in report finishes detect and starts the system check [0.14ms] (pass) stagesOf > install, facts and connect map to install, enrol and first session [0.16ms] (pass) stagesOf > an auth failure before sign-in fails detect and says it in plain words, not the server's [0.21ms] (pass) stagesOf > an unsupported host fails the system check, after sign-in [0.09ms] (pass) stagesOf > an install failure fails the install stage and keeps the earlier ones done [0.08ms] (pass) stagesOf > a new attempt starts over and forgets the old sign-in [0.12ms] (pass) authLabel > names the method and a trusted network provider only [0.06ms] (pass) guideFor > installation failures never claim that incomplete cleanup succeeded [0.21ms] (pass) guideFor > each failure kind names its fix [0.11ms] (pass) guideFor > mesh-policy words say possible, not certain [0.03ms] (pass) parseTarget > reads user, host and port [0.08ms] (pass) parseTarget > refuses what cannot name a host [0.12ms] (pass) parseSshConfig > reads aliases with HostName, User and Port, skipping wildcards and Match [0.56ms] (pass) parseSshConfig > recognises config text [0.07ms] (pass) parseSshConfig > a hostname that is an option is dropped [0.05ms] (pass) plain words > an unknown or missing failure gets the generic sentence, never the server's text [0.08ms] (pass) plain words > no headline carries an arrow, an id or an API noun [0.17ms] (pass) only a completed canonical host identity becomes terminal authority [0.12ms] (pass) parseTarget > accepts user@host, host, user@host:port, IPv4 and bracketed IPv6 with an optional port [0.09ms] (pass) parseTarget > rejects partial and malformed tokens, so they wait or show the hint [0.06ms] (pass) matchListed > a name that is exactly one host's id or address names that host [0.07ms] (pass) matchListed > a name that is also the start of another host's name is named but still prefixed [0.27ms] (pass) matchListed > a partial name that starts several hosts names none and waits [0.04ms] (pass) matchListed > a new name that starts no host is neither named nor waiting [0.05ms] (pass) install diagnostics name the failed step and public host error [0.08ms] (pass) missing payload tells the operator the architecture and expected server path [0.06ms] (pass) an already added host says so and offers opening its existing terminal [0.28ms] (pass) release payload verification names the architecture step and plain reason [0.03ms] (pass) leftovers pause (#169) > a check event with leftovers pauses the running attempt; the next event clears it [0.18ms] (pass) leftovers pause (#169) > a pause without leftovers offers nothing to start fresh [1.63ms] (pass) early terminal publication selects only its canonical host-bound shim session [0.20ms] src/canvas/addhost/already-added-breakit.test.ts: (pass) an already-added failure without a host id (older server) still says how to reach the terminal [0.12ms] src/canvas/addhost/wizard.test.ts: (pass) a saved-key prompt completing after close never starts an SSH attempt [0.55ms] (pass) fresh CA requires setup before any SSH attempt and preserves root consent [0.43ms] (pass) ready CA begins the requested installation mode without another prompt [0.19ms] (pass) closing during CA confirmation never starts an SSH attempt [0.38ms] (pass) a typed root login requires explicit consent before any installation [2.10ms] src/canvas/views/body.test.ts: (pass) a clean terminal exit keeps the window while host setup can still fail [0.03ms] (pass) clean exits still close ordinary windows, and failed exits stay visible [0.01ms] ../../packages/ui/src/spring.test.ts: (pass) a missed frame does not stretch a settled spring [0.75ms] (pass) motion follows elapsed time across frame rates and damping regimes [1.12ms] chunk-classes.test.ts: (pass) the first screen is critical, the canvas product module and what only it uses are deferred [1.06ms] (pass) a chunk that both sides use stays critical [0.60ms] (pass) code only an action loads is on demand, even when the lazy canvas is what loads it [0.27ms] (pass) post-terminal host inventory entry and its shared canvas imports stay deferred [0.17ms] test/recovery-ui.test.ts: (pass) compiled recovery UI mode off obeys its URL boundary [14.23ms] (pass) compiled recovery UI mode preview obeys its URL boundary [3.88ms] (pass) compiled recovery UI mode 1 obeys its URL boundary [2.46ms] test/recovery-crypto.test.ts: (pass) HKDF siblings match independent implementation and bind unwrap to domain, account, kind and version [14.38ms] (pass) 100 repeated wrapping operations generate independent salts and nonces [18.56ms] test/recovery-rotation.test.ts: (pass) signed-in rotation sends only a local envelope and verifier after acknowledgement [10.38ms] (pass) abandoned word acknowledgement uploads nothing [6.20ms] (pass) settled acknowledgement cannot upload later (dismissed) [4.82ms] (pass) settled acknowledgement cannot upload later (no acknowledgement) [4.18ms] test/recovery-wait.test.ts: (pass) server remaining wait 0s is accepted through the capability policy maximum [3.22ms] (pass) server remaining wait 86400s is accepted through the capability policy maximum [5.44ms] (pass) server remaining wait 90000s is accepted through the capability policy maximum [2.39ms] (pass) server remaining wait 172800s is accepted through the capability policy maximum [2.24ms] (pass) malformed or excessive remaining wait -1 is denied [2.55ms] (pass) malformed or excessive remaining wait 0.5 is denied [2.08ms] (pass) malformed or excessive remaining wait 172801 is denied [2.03ms] (pass) malformed or excessive remaining wait 9007199254740992 is denied [2.40ms] (pass) malformed or excessive remaining wait 90000 is denied [2.32ms] test/link-doubt.test.ts: (pass) a link doubt shows the indicator and keeps live replies and typing flowing [1.22ms] (pass) recovery clears only its own indicator, and a real reconnect still owns the replay [0.36ms] (pass) a notice type from a newer server is ignored, not a protocol failure [0.13ms] (pass) the viewer announces the link-doubt capability in its Hello [1.72ms] test/close-reasons.test.ts: (pass) every reason the server and the agent send maps to a plain sentence, and unknown ones fall back [0.26ms] src/close-reasons.test.ts: (pass) a missed connection response keeps a plain and stable reason [0.03ms] (pass) server and host close reasons identify why a terminal reconnects, in plain words [0.33ms] (pass) routine detach and connection rotation reasons stay neutral [0.02ms] (pass) a stream close that reattaches never says the terminal ended [0.11ms] (pass) a recovering server link names its cause as routine status, never as a failure [0.05ms] (pass) unknown close text is discarded instead of reaching the person or console [0.04ms] (pass) a storm of closes prints one line per minute and counts the rest [0.27ms] (pass) counted closes are reported when their window ends, without another close [0.06ms] src/review-close-log.test.ts: (pass) a reconnect the server refuses with a named Close frame still prints its console line [0.94ms] (pass) a close summary does not claim closes from hours ago happened in the previous 60 s [0.04ms] 257 pass 0 fail 11713 expect() calls Ran 257 tests across 41 files. [1239.00ms] $ bun run build.ts built chunk-9dj44p0a.js, chunk-0jphd38d.js, chunk-nsssz620.js, chunk-9emh6mfy.js, chunk-rshddc30.js, chunk-04y8t6rk.js, chunk-vvfhgzxa.js, chunk-gxvqf3b8.js, chunk-gg7faby0.js, chunk-8z8q96zy.js, chunk-gzekwv56.js, chunk-g27ezx84.js, chunk-065hdb1d.js, main.js, chunk-sfgvybwa.js, chunk-e4t9f0jx.js, chunk-66twd4zb.js, chunk-5yfafb3s.js, chunk-j44va8e0.js, chunk-q02gbqrk.js, chunk-mtnxk89a.js, chunk-dyq060h4.js, chunk-kh5ft0g7.js, chunk-mdj6q6m3.js, chunk-70crbwp1.js, chunk-efr8q3g5.js, chunk-e9beyzj2.js, chunk-axbkkqp1.js, chunk-njk03r4y.js, chunk-086p2867.js, chunk-9307v2g8.js, chunk-bf3pzf22.js, chunk-nm0n7c2j.js, chunk-3q8heg5k.js, chunk-qe8mxr9k.js, chunk-e3pfp9kz.js, chunk-swyevgy1.js, chunk-69txhkhf.js, chunk-ztffnfsj.js, chunk-dndtd7wr.js, chunk-2ca69970.js, chunk-g71a46j0.js, chunk-ga7n3p96.js, chunk-0tnsam4w.js, chunk-20sr0ea5.js, chunk-v33nffnh.js, chunk-84ay34sh.js, chunk-fh0gd24c.js, chunk-xegrs9c9.js, chunk-xmm642rg.js, chunk-9xd3g65e.js, chunk-28rbcdd5.js, chunk-61xwpgvs.js, chunk-6hphcpbw.js, chunk-mmvf4v8e.js, chunk-z48tcwe1.js, chunk-vkabh9k4.js, chunk-jk5xheq9.js, backdrop.worker.js, faulty-terminal.worker.js, chunk-mvh7t168.js, chunk-f2r0hhqc.js, chunk-g548efbg.js, chunk-0h1atq4q.js, chunk-fb3p4x35.js onDemand chunk-e3pfp9kz.js: identity=540 gzip=352 brotli=312 bytes critical chunk-28rbcdd5.js: identity=39 gzip=39 brotli=39 bytes onDemand chunk-8z8q96zy.js: identity=2420 gzip=1196 brotli=1075 bytes onDemand chunk-84ay34sh.js: identity=6772 gzip=3176 brotli=2890 bytes critical chunk-mtnxk89a.js: identity=590 gzip=329 brotli=304 bytes onDemand chunk-04y8t6rk.js: identity=3891 gzip=1735 brotli=1504 bytes onDemand chunk-z48tcwe1.js: identity=601 gzip=344 brotli=326 bytes onDemand chunk-3q8heg5k.js: identity=2007 gzip=1005 brotli=857 bytes onDemand chunk-g548efbg.js: identity=1063 gzip=651 brotli=520 bytes onDemand chunk-9307v2g8.js: identity=6148 gzip=2779 brotli=2507 bytes onDemand chunk-e9beyzj2.js: identity=1026 gzip=623 brotli=498 bytes onDemand chunk-vkabh9k4.js: identity=1408 gzip=713 brotli=665 bytes critical chunk-v33nffnh.js: identity=162 gzip=150 brotli=131 bytes onDemand chunk-0jphd38d.js: identity=6503 gzip=2412 brotli=2148 bytes critical chunk-sfgvybwa.js: identity=8377 gzip=3575 brotli=3181 bytes onDemand chunk-xmm642rg.js: identity=1170 gzip=707 brotli=589 bytes critical faulty-terminal.worker.js: identity=1086 gzip=557 brotli=487 bytes critical backdrop.worker.js: identity=243 gzip=211 brotli=165 bytes onDemand chunk-2ca69970.js: identity=14570 gzip=5429 brotli=4873 bytes onDemand chunk-ztffnfsj.js: identity=4640 gzip=1932 brotli=1704 bytes onDemand chunk-qe8mxr9k.js: identity=1649 gzip=774 brotli=675 bytes critical chunk-kh5ft0g7.js: identity=386 gzip=239 brotli=196 bytes onDemand chunk-swyevgy1.js: identity=11529 gzip=4655 brotli=4256 bytes onDemand chunk-gzekwv56.js: identity=191 gzip=168 brotli=126 bytes onDemand chunk-g27ezx84.js: identity=6265 gzip=2101 brotli=1865 bytes onDemand chunk-fh0gd24c.js: identity=31922 gzip=12270 brotli=11044 bytes critical chunk-axbkkqp1.js: identity=90 gzip=90 brotli=78 bytes onDemand chunk-g71a46j0.js: identity=11067 gzip=4244 brotli=3870 bytes critical chunk-fb3p4x35.js: identity=42576 gzip=14528 brotli=13018 bytes deferred chunk-70crbwp1.js: identity=1565 gzip=809 brotli=731 bytes critical chunk-mdj6q6m3.js: identity=1106 gzip=668 brotli=607 bytes critical chunk-086p2867.js: identity=717054 gzip=207508 brotli=168542 bytes deferred chunk-9emh6mfy.js: identity=37428 gzip=13600 brotli=12135 bytes critical chunk-f2r0hhqc.js: identity=128 gzip=109 brotli=111 bytes onDemand chunk-gg7faby0.js: identity=228 gzip=178 brotli=172 bytes critical chunk-9xd3g65e.js: identity=39 gzip=39 brotli=39 bytes critical chunk-vvfhgzxa.js: identity=707 gzip=369 brotli=309 bytes deferred chunk-efr8q3g5.js: identity=102038 gzip=34673 brotli=30603 bytes onDemand chunk-e4t9f0jx.js: identity=2557 gzip=1180 brotli=1003 bytes onDemand chunk-6hphcpbw.js: identity=869 gzip=346 brotli=323 bytes onDemand chunk-dndtd7wr.js: identity=7662 gzip=3397 brotli=2965 bytes critical chunk-9dj44p0a.js: identity=30702 gzip=9232 brotli=8285 bytes onDemand chunk-mmvf4v8e.js: identity=2723 gzip=1328 brotli=1142 bytes critical chunk-q02gbqrk.js: identity=430 gzip=311 brotli=262 bytes onDemand chunk-bf3pzf22.js: identity=2824 gzip=1386 brotli=1192 bytes onDemand chunk-nm0n7c2j.js: identity=4596 gzip=2015 brotli=1783 bytes onDemand chunk-0tnsam4w.js: identity=48336 gzip=15099 brotli=13455 bytes critical chunk-gxvqf3b8.js: identity=88 gzip=88 brotli=76 bytes critical chunk-5yfafb3s.js: identity=15639 gzip=6065 brotli=5409 bytes onDemand chunk-njk03r4y.js: identity=10904 gzip=4424 brotli=4036 bytes critical main.js: identity=113109 gzip=41121 brotli=35599 bytes critical chunk-rshddc30.js: identity=4499 gzip=1858 brotli=1640 bytes onDemand chunk-69txhkhf.js: identity=5359 gzip=2579 brotli=2304 bytes onDemand chunk-xegrs9c9.js: identity=2466 gzip=1106 brotli=932 bytes critical chunk-61xwpgvs.js: identity=49 gzip=49 brotli=49 bytes critical chunk-66twd4zb.js: identity=5448 gzip=2611 brotli=2385 bytes onDemand chunk-20sr0ea5.js: identity=6785 gzip=3029 brotli=2735 bytes critical chunk-dyq060h4.js: identity=2519 gzip=1009 brotli=877 bytes onDemand chunk-065hdb1d.js: identity=2108 gzip=1037 brotli=870 bytes onDemand chunk-nsssz620.js: identity=5779 gzip=2370 brotli=2132 bytes onDemand chunk-jk5xheq9.js: identity=724 gzip=403 brotli=361 bytes critical chunk-mvh7t168.js: identity=9810 gzip=4017 brotli=3451 bytes critical chunk-j44va8e0.js: identity=17627 gzip=6250 brotli=5558 bytes onDemand chunk-ga7n3p96.js: identity=572 gzip=329 brotli=309 bytes critical chunk-0h1atq4q.js: identity=199 gzip=163 brotli=137 bytes JavaScript transfer, critical: identity=972702 gzip=301185/307200 brotli=250935/256000 bytes JavaScript transfer, deferred: identity=141031 gzip=49082/51200 brotli=43469/45056 bytes JavaScript transfer, onDemand: identity=219874 gzip=87472/20480 brotli=78018/18432 bytes JavaScript transfer, onDemand largest chunk chunk-0tnsam4w.js: gzip=15099/20480 brotli=13455/18432 bytes (class total gzip=87472 brotli=78018, not limited) fonts/monaspace-neon/italic.latin.woff2: identity=44324 gzip=44324 brotli=44324 bytes fonts/monaspace-neon/roman.latin.woff2: identity=40016 gzip=40016 brotli=40016 bytes fonts/jetbrains-mono/italic.latin.woff2: identity=36316 gzip=36316 brotli=36316 bytes fonts/jetbrains-mono/roman.latin.woff2: identity=34068 gzip=34068 brotli=34068 bytes fonts/source-code-pro/italic.latin.woff2: identity=23612 gzip=23612 brotli=23612 bytes fonts/source-code-pro/roman.latin.woff2: identity=22872 gzip=22872 brotli=22872 bytes fonts/geist-mono/italic.latin.woff2: identity=21380 gzip=21380 brotli=21380 bytes fonts/geist-mono/roman.latin.woff2: identity=19984 gzip=19984 brotli=19981 bytes fonts/ibm-plex-mono/italic.latin.woff2: identity=22296 gzip=22296 brotli=22296 bytes fonts/ibm-plex-mono/roman.latin.woff2: identity=19048 gzip=19048 brotli=19047 bytes fonts/cascadia-code/italic.latin.woff2: identity=44404 gzip=44404 brotli=44404 bytes fonts/cascadia-code/roman.latin.woff2: identity=40604 gzip=40604 brotli=40604 bytes fonts/maple-mono-nf/italic.latin.woff2: identity=53444 gzip=53444 brotli=53444 bytes fonts/maple-mono-nf/roman.latin.woff2: identity=46432 gzip=46432 brotli=46432 bytes fonts/nerd-symbols.woff2: identity=223748 gzip=223748 brotli=223748 bytes fonts/fira-code/roman.latin.woff2: identity=36756 gzip=36756 brotli=36756 bytes fonts/commit-mono/italic-400.latin.woff2: identity=18716 gzip=18716 brotli=18716 bytes fonts/commit-mono/italic-700.latin.woff2: identity=18352 gzip=18352 brotli=18352 bytes fonts/commit-mono/roman-400.latin.woff2: identity=17484 gzip=17484 brotli=17484 bytes fonts/commit-mono/roman-700.latin.woff2: identity=17260 gzip=17260 brotli=17260 bytes Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes ==> Rust stream oracle (for the differential test) ==> TypeScript protocol tests bun test v1.4.2 (744846f84) src/mesh-review-revocation.test.ts: (pass) review forbidden event cancels pending snapshot publication [2.42ms] (pass) subscription forbidden ends delivery before a late refresh rejection [1.47ms] (pass) subscription not found ends delivery before a late refresh rejection [1.11ms] (pass) subscription invalid input ends delivery before a late refresh rejection [1.15ms] (pass) subscription mesh unavailable ends delivery before a late refresh rejection [1.13ms] (pass) synchronous subscription refusal releases the transport exactly once [0.11ms] src/codec.test.ts: (pass) wire protocol golden vectors > encodes and decodes each frame exactly as the shared manifest describes [7.08ms] (pass) wire protocol golden vectors > returns borrowed payload views and writes into reusable buffers [0.20ms] (pass) wire protocol golden vectors > decodes muxed messages split across WebSocket messages [1.08ms] (pass) wire protocol golden vectors > rejects oversized, non-canonical, unknown, and malformed frame bytes [0.25ms] (pass) split mux header preserves trailing Close [0.23ms] (pass) reply-marked Input uses an additive bounded layout without changing legacy input [0.81ms] (pass) empty marked input reports the stable invalid-body decoder failure [0.09ms] src/mesh-review-paged-error.test.ts: (pass) review earlier snapshot continuation failure cannot replace a newer complete refresh [2.66ms] (pass) review earlier snapshot continuation cannot overwrite a delivered revision [2.67ms] (pass) a newer paged event owns publication before an earlier refresh resumes [2.46ms] src/mesh-review-refresh.test.ts: (pass) review superseded refresh failure cannot replace authoritative resync [1.43ms] (pass) superseded failure preserves a newer pending refresh [2.68ms] src/stream.test.ts: stream differential: 141 streams, 11988 schedules, zero divergences (pass) Rust and TypeScript preserve every frame at all boundaries and random multi-splits [2237.13ms] (pass) maximum frame size and fragmented oversized prefix obey the allocation boundary [7.50ms] src/mesh.test.ts: (pass) Mesh actions map to their typed action IDs and JSON inputs [3.19ms] (pass) Mesh watch coalesces change bursts and never publishes an older revision [4.06ms] (pass) Mesh watch forwards server errors and stops delivering after unsubscribe [0.11ms] (pass) Mesh enrollment carries an explicit authenticated host binding [0.24ms] src/mesh-review-continuation.test.ts: (pass) review continuation stops after stop [1.42ms] (pass) review continuation stops after forbidden [1.16ms] (pass) review continuation stops after superseded [1.15ms] src/mesh-pagination.test.ts: (pass) list assembles bounded pages using the same filter [0.25ms] (pass) a changed revision discards earlier pages before assembling its restart [0.11ms] (pass) malformed continuation is refused: {"revision":1,"offset":0} [0.15ms] (pass) malformed continuation is refused: {"revision":2,"offset":1} [0.01ms] (pass) malformed continuation is refused: {"revision":1,"offset":2} (pass) watch never publishes a partial page; withdrawn=false [1.36ms] (pass) watch never publishes a partial page; withdrawn=true [1.19ms] (pass) a superseding equal-revision resync wins over pending page assembly [1.33ms] src/mesh-review-resync.test.ts: (pass) review watch applies same-revision authoritative resync [0.16ms] (pass) authoritative resync keeps priority over an equal-revision pending list [1.41ms] src/mesh-vectors.test.ts: (pass) every shared Mesh action vector passes through the typed client unchanged [1.33ms] (pass) shared Mesh event vectors drive the typed watch adapter [5.28ms] 39 pass 0 fail 36135 expect() calls Ran 39 tests across 10 files. [2.31s] ```` </details>
kayg commented 2026-10-19 07:20:22 +00:00
Author
Owner
Copy link

Independent D307 break-it review started on review-query-replies at 23723c0c83 (base origin/query-replies; review diff origin/dev...23723c0c8). Reading #160 and parent #206 history, then probing codec, scanner and real-shim multi-viewer behavior. Only test commits will be pushed; no deployment.

Independent D307 break-it review started on review-query-replies at 23723c0c836dd63e3415d478a56e4d87c9ce8e14 (base origin/query-replies; review diff origin/dev...23723c0c8). Reading #160 and parent #206 history, then probing codec, scanner and real-shim multi-viewer behavior. Only test commits will be pushed; no deployment.
kayg commented 2026-10-19 07:24:17 +00:00
Author
Owner
Copy link

P1 QR-001 confirmed at 23723c0c8: D307 silently removes replies to supported terminal query forms. The shipping VT WASM answers DECID (ESC Z), zero-padded CPR (ESC [ 06 n) and CPR containing an ignored NUL, but TerminalQueries emits zero identities for each. terminal.ts writes unrecognized spans with responses suppressed; the independent server scanner also omits these forms. Programs waiting on their terminal reply now stall.

Real-engine regressions committed/pushed as 47c5ccfc6 on review-query-replies: 0 pass, 3 fail (6 assertions; renderer response exists, identity absent). Tracer TypeScript check passes. Production browser and native admission regressions are in progress. Evidence: renderer-review.log. Findings file: $HOME/.cache/codex-scratch/review-query-replies/evidence/findings.md.

P1 QR-001 confirmed at 23723c0c8: D307 silently removes replies to supported terminal query forms. The shipping VT WASM answers DECID (ESC Z), zero-padded CPR (ESC [ 06 n) and CPR containing an ignored NUL, but TerminalQueries emits zero identities for each. terminal.ts writes unrecognized spans with responses suppressed; the independent server scanner also omits these forms. Programs waiting on their terminal reply now stall. Real-engine regressions committed/pushed as 47c5ccfc6 on review-query-replies: 0 pass, 3 fail (6 assertions; renderer response exists, identity absent). Tracer TypeScript check passes. Production browser and native admission regressions are in progress. Evidence: [renderer-review.log](https://git.kayg.org/attachments/6ac4db7c-a330-4fe5-b45c-1dffce3320ba). Findings file: $HOME/.cache/codex-scratch/review-query-replies/evidence/findings.md.
kayg commented 2026-10-19 07:29:49 +00:00
Author
Owner
Copy link

Started D307 round 2 on query-replies-r2, base 23723c0c83 (origin/query-replies). Read #160 and parent #206 histories. Cherry-picked unchanged review tests as 3129a8b23 and 064f82c9e; shipping-WASM review reproduction: 0 pass, 3 fail.

Design: remove all query-kind and response-text matching. Every synchronous renderer answer is marked. Keep generic control boundaries solely to give each write a stable absolute output identity: browsers coalesce/split output differently due paint/credit, so raw transport chunk identities would duplicate or lose replies. Both boundary scanners will accept every complete control sequence, with constant storage and no request-kind list; server records expiry from the opening byte and admits the first bounded reply for that identity. No reply syntax allow-list. Replay remains suppressed; unmarked Input remains typing. This follows the requested superset-scanner option while preserving multiple queries in one write and fragmented expiry.

Contract clarification proposed before implementation: query_seq remains opening control offset; acceptance checks identity, size, deadline and first claim, with renderer authoritative for response contents. No layout/capability change. No deployment. Explicit brief authorizes pushing query-replies-r2 and fast-forwarding query-replies when green.

Started D307 round 2 on query-replies-r2, base 23723c0c836dd63e3415d478a56e4d87c9ce8e14 (origin/query-replies). Read #160 and parent #206 histories. Cherry-picked unchanged review tests as 3129a8b23 and 064f82c9e; shipping-WASM review reproduction: 0 pass, 3 fail. Design: remove all query-kind and response-text matching. Every synchronous renderer answer is marked. Keep generic control boundaries solely to give each write a stable absolute output identity: browsers coalesce/split output differently due paint/credit, so raw transport chunk identities would duplicate or lose replies. Both boundary scanners will accept every complete control sequence, with constant storage and no request-kind list; server records expiry from the opening byte and admits the first bounded reply for that identity. No reply syntax allow-list. Replay remains suppressed; unmarked Input remains typing. This follows the requested superset-scanner option while preserving multiple queries in one write and fragmented expiry. Contract clarification proposed before implementation: query_seq remains opening control offset; acceptance checks identity, size, deadline and first claim, with renderer authoritative for response contents. No layout/capability change. No deployment. Explicit brief authorizes pushing query-replies-r2 and fast-forwarding query-replies when green.
kayg commented 2026-10-19 07:36:15 +00:00
Author
Owner
Copy link

Contract step: 5831e4a4a clarifies D307 renderer-authoritative contents, generic output positions and constant scanner storage without changing the wire layout. Rejected transport-chunk identity because paint/credit splits differ by viewer. Review commits remain unchanged.

Additional engine-backed finding: an ESC inside OSC/DCS cancels the old string, and a nested CPR is answered by the shipping VT. Boundary handling now restarts at that newer ESC instead of hiding the answer. The current source property covers 30 engine-answered corpus forms, every two-part split, three independent renderer instances: 1 passed / 0 failed / 1,546 assertions; each split has exactly 1 admitted response and 2 duplicates. Includes DECID, zero padding, ignored C0/DEL, cancelled strings and a 305-byte request containing 300 ignored NUL bytes. No query-kind/response-text list remains. This is functional evidence, not host timing evidence.

property.log

Touched-crate Rust validation is now compiling in the shared build slot. Next: real-server/shim/PTy corpus, production browser regression suite, same-base native/JS sizes and perf-VM typing comparisons. No push or deployment before final green gates.

Contract step: 5831e4a4a clarifies D307 renderer-authoritative contents, generic output positions and constant scanner storage without changing the wire layout. Rejected transport-chunk identity because paint/credit splits differ by viewer. Review commits remain unchanged. Additional engine-backed finding: an ESC inside OSC/DCS cancels the old string, and a nested CPR is answered by the shipping VT. Boundary handling now restarts at that newer ESC instead of hiding the answer. The current source property covers 30 engine-answered corpus forms, every two-part split, three independent renderer instances: 1 passed / 0 failed / 1,546 assertions; each split has exactly 1 admitted response and 2 duplicates. Includes DECID, zero padding, ignored C0/DEL, cancelled strings and a 305-byte request containing 300 ignored NUL bytes. No query-kind/response-text list remains. This is functional evidence, not host timing evidence. [property.log](https://git.kayg.org/attachments/5ddec812-849d-42aa-94c6-1aabadfa7f5b) Touched-crate Rust validation is now compiling in the shared build slot. Next: real-server/shim/PTy corpus, production browser regression suite, same-base native/JS sizes and perf-VM typing comparisons. No push or deployment before final green gates.
kayg commented 2026-10-19 07:39:36 +00:00
Author
Owner
Copy link

Design refinement while validating: recording every complete styling control would fill a per-control table and could displace a real unanswered query. Removed the server terminal scanner entirely. The server now timestamps bounded observed-output ranges and accepts the first bounded marked reply per position; original-byte timestamp supplies expiry across fragments/replay. Bounded claim tombstones are retained until expiry (full table refuses new claims rather than reopening duplicates). Styling consumes no claim slots. No server terminal grammar, request contents or reply-content matcher remains. Browser generic boundaries remain solely for stable per-write positions across independently coalesced viewers; actual answers are always renderer-produced.

This follows the preferred output-position design more directly and supersedes the earlier proposed server superset scanner. Contract clarification updated before committing this implementation. The unchanged reviewer tests remain present. Added a regression for a query followed by 100 styling controls and for claim-table saturation; final checks will cover both.

Design refinement while validating: recording every complete styling control would fill a per-control table and could displace a real unanswered query. Removed the server terminal scanner entirely. The server now timestamps bounded observed-output ranges and accepts the first bounded marked reply per position; original-byte timestamp supplies expiry across fragments/replay. Bounded claim tombstones are retained until expiry (full table refuses new claims rather than reopening duplicates). Styling consumes no claim slots. No server terminal grammar, request contents or reply-content matcher remains. Browser generic boundaries remain solely for stable per-write positions across independently coalesced viewers; actual answers are always renderer-produced. This follows the preferred output-position design more directly and supersedes the earlier proposed server superset scanner. Contract clarification updated before committing this implementation. The unchanged reviewer tests remain present. Added a regression for a query followed by 100 styling controls and for claim-table saturation; final checks will cover both.
kayg commented 2026-10-19 07:54:48 +00:00
Author
Owner
Copy link

Additional unchanged review regression reproduced: daemon::session_commands::tests::review_reply_at_full_command_capacity_preserves_accepted_input fails at session_commands_tests.rs:146 on base 23723c0c8 plus review commits (0 passed / 1 failed). A full 8-command FIFO returns Full for Command::Reply; daemon.rs:782 treats Full as stream retirement, cancelling previously accepted typing. The same run passed all 12 server arbitration tests.

Fix in progress: full best-effort replies follow the existing probe-drop path; Input/Resize capacity errors, closed-channel errors and FIFO order remain unchanged. Separate logical commit after touched-crate checks. No reviewer assertion changed. Contract commit was amended before push to a92ac87cf after the output-range design refinement.

Red queue regression and green server tests
Renderer properties: 8 passed / 0 failed / 1,617 assertions

Additional unchanged review regression reproduced: daemon::session_commands::tests::review_reply_at_full_command_capacity_preserves_accepted_input fails at session_commands_tests.rs:146 on base 23723c0c8 plus review commits (0 passed / 1 failed). A full 8-command FIFO returns Full for Command::Reply; daemon.rs:782 treats Full as stream retirement, cancelling previously accepted typing. The same run passed all 12 server arbitration tests. Fix in progress: full best-effort replies follow the existing probe-drop path; Input/Resize capacity errors, closed-channel errors and FIFO order remain unchanged. Separate logical commit after touched-crate checks. No reviewer assertion changed. Contract commit was amended before push to a92ac87cf after the output-range design refinement. [Red queue regression and green server tests](https://git.kayg.org/attachments/6955caa0-5d10-42e5-b04e-f810afc46804) [Renderer properties: 8 passed / 0 failed / 1,617 assertions](https://git.kayg.org/attachments/e8e946ce-338c-4dd9-a036-3e5b92e3d2e7)
kayg commented 2026-10-19 07:58:33 +00:00
Author
Owner
Copy link

Completed logical source steps (all remain on query-replies-r2, not pushed until final green):

  • 19019121d: preserve accepted typing when a full command FIFO meets a best-effort reply. Unchanged reviewer regression now passes; all 7 command-queue tests pass.
  • 86a6e1f0a: remove the server terminal grammar entirely; timestamp observed output ranges and retain bounded live claims. All 12 arbitration tests pass, including unchanged QR-001 admission, expiry, replay, gaps/overflow, 100 styling controls, saturated claims and unknown-position floods.
  • fed6a00d7: remove browser request matching; mark every renderer answer at stable generic write boundaries. No request text or local deadline retained; empty reply collection allocates no array. Tracer check and all 7 boundary/reviewer tests pass (71 assertions). No reviewer test changed.

fmt and touched-crate Clippy pass. Module gates

Comparison baseline for native, JavaScript and typing is exactly 23723c0c83, the merge base with origin/query-replies. Production recipes unchanged. Initial critical JS: identity 972702 -> 971990 (-712), gzip 301190 -> 300874 (-316), Brotli 251053 -> 250632 (-421) bytes; all transfer classes pass. Final exact-head compressed numbers follow the final gate because build metadata/chunk hashes also enter compression. Static builds and real-PTY/browser corpus checks are pending; locked perf-VM browser comparison is starting. No deployment.

Completed logical source steps (all remain on query-replies-r2, not pushed until final green): - 19019121d: preserve accepted typing when a full command FIFO meets a best-effort reply. Unchanged reviewer regression now passes; all 7 command-queue tests pass. - 86a6e1f0a: remove the server terminal grammar entirely; timestamp observed output ranges and retain bounded live claims. All 12 arbitration tests pass, including unchanged QR-001 admission, expiry, replay, gaps/overflow, 100 styling controls, saturated claims and unknown-position floods. - fed6a00d7: remove browser request matching; mark every renderer answer at stable generic write boundaries. No request text or local deadline retained; empty reply collection allocates no array. Tracer check and all 7 boundary/reviewer tests pass (71 assertions). No reviewer test changed. fmt and touched-crate Clippy pass. [Module gates](https://git.kayg.org/attachments/7b36a9a7-b4d7-4492-9804-ce618855dca3) Comparison baseline for native, JavaScript and typing is exactly 23723c0c836dd63e3415d478a56e4d87c9ce8e14, the merge base with origin/query-replies. Production recipes unchanged. Initial critical JS: identity 972702 -> 971990 (-712), gzip 301190 -> 300874 (-316), Brotli 251053 -> 250632 (-421) bytes; all transfer classes pass. Final exact-head compressed numbers follow the final gate because build metadata/chunk hashes also enter compression. Static builds and real-PTY/browser corpus checks are pending; locked perf-VM browser comparison is starting. No deployment.
kayg commented 2026-10-19 08:18:07 +00:00
Author
Owner
Copy link

196f18169 retains the original onData keyboard predicate and array field shape, using a shared empty sentinel and allocating privately only on an actual renderer answer. Rejected allocating per control span and the intermediate string field. Tracer check passes; 8 renderer/property tests pass (1,617 assertions). Checks

Earlier fed6a00d7 production artifact passes all 12 browser regressions on the locked perf VM (7 viewers including all unchanged review cases, 3 replay, 2 mobile/desktop Settings). Final collector artifact will repeat these gates. Functional receipt

Cold-browser 40-key comparisons at 300 ms RTT show glyph-frame outliers on both baseline and the intermediate string candidate: baseline p99 14.0–24.7 ms; candidate 14.2–30.7 ms against 17 ms. Input CPU median stays 0.1 ms, and all CPU p99 values stay below 5 ms. No glyph-budget pass claimed for that candidate and no assertion relaxed. Final source 196f18169 is repeating the same three paired 40-key cohorts; first pair glyph p99 is 14.3 -> 14.3 ms. Native baseline rebuilt exactly 21,223,696 bytes; branch/ARM builds pending.

All intermediate cohorts, including failures, first comparison. An initial 60-key setup could not fit the probe's fixed 15 s run window at 300 ms RTT and stopped at 49/60 on the unchanged baseline; setup receipt. Native measurements, real-PTY corpus, iterate and final fast gates still pending. No push or deployment.

196f18169 retains the original onData keyboard predicate and array field shape, using a shared empty sentinel and allocating privately only on an actual renderer answer. Rejected allocating per control span and the intermediate string field. Tracer check passes; 8 renderer/property tests pass (1,617 assertions). [Checks](https://git.kayg.org/attachments/e446a29c-6cdb-47ba-b297-9c9fc45245fb) Earlier fed6a00d7 production artifact passes all 12 browser regressions on the locked perf VM (7 viewers including all unchanged review cases, 3 replay, 2 mobile/desktop Settings). Final collector artifact will repeat these gates. [Functional receipt](https://git.kayg.org/attachments/db11ed0f-c30a-47bc-9134-278d6fe5be6e) Cold-browser 40-key comparisons at 300 ms RTT show glyph-frame outliers on both baseline and the intermediate string candidate: baseline p99 14.0–24.7 ms; candidate 14.2–30.7 ms against 17 ms. Input CPU median stays 0.1 ms, and all CPU p99 values stay below 5 ms. No glyph-budget pass claimed for that candidate and no assertion relaxed. Final source 196f18169 is repeating the same three paired 40-key cohorts; first pair glyph p99 is 14.3 -> 14.3 ms. Native baseline rebuilt exactly 21,223,696 bytes; branch/ARM builds pending. [All intermediate cohorts, including failures](https://git.kayg.org/attachments/cd5bad56-0f41-45c1-8f8c-4383a91f1e68), [first comparison](https://git.kayg.org/attachments/f8ab5289-08fe-4dcd-bd97-280f98864bf3). An initial 60-key setup could not fit the probe's fixed 15 s run window at 300 ms RTT and stopped at 49/60 on the unchanged baseline; [setup receipt](https://git.kayg.org/attachments/955ce505-9178-44c1-a5d4-82c61601c80c). Native measurements, real-PTY corpus, iterate and final fast gates still pending. No push or deployment.
kayg commented 2026-10-19 09:27:21 +00:00
Author
Owner
Copy link

D307 follow-up measurement: the generic boundary path introduced per-control native allocations and renderer write bookkeeping. On the named perf VM, two 4 MiB component cohorts measured dense styled text at baseline 11.59/10.51 MiB/s versus 9.73/8.37 MiB/s; these exclude canvas and are not UI throughput claims. Fix in progress: an additive scoped-write API in the existing pinned renderer JS bindings, one input allocation/copy and one metadata update per output region, with responses drained at every generic boundary. No parser, WASM ABI or foundational engine change. Rejecting the request allow-list and a permanent per-session buffer. Initial checks caught the zero-byte allocator sentinel; empty scopes now skip native allocation. Scope lifetime, thrown callbacks, invalid ends, allocation refusal and memory growth have explicit tests. Will remeasure before claiming completion.

D307 follow-up measurement: the generic boundary path introduced per-control native allocations and renderer write bookkeeping. On the named perf VM, two 4 MiB component cohorts measured dense styled text at baseline 11.59/10.51 MiB/s versus 9.73/8.37 MiB/s; these exclude canvas and are not UI throughput claims. Fix in progress: an additive scoped-write API in the existing pinned renderer JS bindings, one input allocation/copy and one metadata update per output region, with responses drained at every generic boundary. No parser, WASM ABI or foundational engine change. Rejecting the request allow-list and a permanent per-session buffer. Initial checks caught the zero-byte allocator sentinel; empty scopes now skip native allocation. Scope lifetime, thrown callbacks, invalid ends, allocation refusal and memory growth have explicit tests. Will remeasure before claiming completion.
kayg commented 2026-10-19 09:35:35 +00:00
Author
Owner
Copy link

Completed atomic steps: 93bb82a46 adds scoped renderer JS writes (same pinned engine; WASM hash unchanged); b6c922081 adds eight ownership/equivalence tests. Type check, 16 unit/property tests and all artifact checksums pass. Perf VM component rerun: dense styled parsing baseline 10.04/11.35 MiB/s, scoped head 12.83/12.46; sparse baseline 13.11/14.02, head 15.28/18.29. Component only, canvas excluded. Final scoped production artifact passes all 12 browser functional cases on perf VM, including all three unchanged review cases. Typing cohorts still running.

Real-PTY fixture finding: the socket used to send 10,000 refused marked frames was closed by the end of the flood (readyState=3), so counting it as one of three live renderers gave a false coverage assertion. Keep the flood and wait for its transport to finish; then attach two fresh shipping-renderer viewers alongside the production browser. The corpus requires an answer attempt from each of all three and exact PTY bytes once, observed beyond the expiry window. No review test weakened. Final rerun pending.

Completed atomic steps: 93bb82a46 adds scoped renderer JS writes (same pinned engine; WASM hash unchanged); b6c922081 adds eight ownership/equivalence tests. Type check, 16 unit/property tests and all artifact checksums pass. Perf VM component rerun: dense styled parsing baseline 10.04/11.35 MiB/s, scoped head 12.83/12.46; sparse baseline 13.11/14.02, head 15.28/18.29. Component only, canvas excluded. Final scoped production artifact passes all 12 browser functional cases on perf VM, including all three unchanged review cases. Typing cohorts still running. Real-PTY fixture finding: the socket used to send 10,000 refused marked frames was closed by the end of the flood (readyState=3), so counting it as one of three live renderers gave a false coverage assertion. Keep the flood and wait for its transport to finish; then attach two fresh shipping-renderer viewers alongside the production browser. The corpus requires an answer attempt from each of all three and exact PTY bytes once, observed beyond the expiry window. No review test weakened. Final rerun pending.
kayg commented 2026-10-19 09:39:11 +00:00
Author
Owner
Copy link

D307 completed steps: a83742024 integrates the scoped input API; 8c449896c counts content-free browser reply attempts; da3465219 adds the shipping-engine corpus; 24d0119d1 fences all queued typing before the existing byte-delta assertion. Type check and 16 tests pass (1,749 assertions). Property coverage: 30 answered forms × all 515 two-part splits × 3 renderer instances; one admitted answer and two duplicates for every split. Real server/infraternal agent/shim/PTY: all 30 forms, 3 answer attempts each, exact expected response bytes once after observing beyond expiry. Browser answer counters follow all fixture connections across reconnects. Full repository checks are now running on 24d0119d1.

Final scoped browser artifact on the perf VM: all 12 functional cases pass. Three paired 40-key/300 ms cohorts: glyph p99 baseline 14.4/14.2/14.2 ms, head 14.1/14.5/14.3 ms (17 ms budget); input CPU p99 baseline 4.4/0.6/0.4 ms, head 1.3/0.3/0.8 ms (5 ms budget), median 0.1 ms both. Retained all per-key samples and machine/load metadata. Confirmed echo p99 baseline 321.7/313.2/347.7 ms, head 302.6/320.2/304.4 ms; this browser fixture is distinct from real native echo measurements.

Real native typing at 500 attached PTYs: 4 isolated infraternal agents × 125 PTYs (production stream cap unchanged), 1,000 local keys per cohort. Two paired local echo p99 baseline 1.76/2.52 ms, head 1.97/2.79 ms (5 ms budget); 300 ms/200-key echo p99 baseline 325.97 ms, head 326.06 ms (334 ms budget). Daemon total RSS about 34–36 MB across four nodes; shim RSS about 2.93–3.19 GB across 500 (full cohorts in receipt). No new persistent per-session input buffer. Each cohort enumerates all 504 fixture PIDs and proves remaining=[].

Evidence and reproducible component/native harnesses:
browser-scoped-vm.log
control-cost-scoped.log
native-perf.log
measure-controls.txt
measure-typing-scale.txt

Production screenshot (functional evidence, no visual-quality verdict):
query-replies-real.png

D307 completed steps: a83742024 integrates the scoped input API; 8c449896c counts content-free browser reply attempts; da3465219 adds the shipping-engine corpus; 24d0119d1 fences all queued typing before the existing byte-delta assertion. Type check and 16 tests pass (1,749 assertions). Property coverage: 30 answered forms × all 515 two-part splits × 3 renderer instances; one admitted answer and two duplicates for every split. Real server/infraternal agent/shim/PTY: all 30 forms, 3 answer attempts each, exact expected response bytes once after observing beyond expiry. Browser answer counters follow all fixture connections across reconnects. Full repository checks are now running on 24d0119d1. Final scoped browser artifact on the perf VM: all 12 functional cases pass. Three paired 40-key/300 ms cohorts: glyph p99 baseline 14.4/14.2/14.2 ms, head 14.1/14.5/14.3 ms (17 ms budget); input CPU p99 baseline 4.4/0.6/0.4 ms, head 1.3/0.3/0.8 ms (5 ms budget), median 0.1 ms both. Retained all per-key samples and machine/load metadata. Confirmed echo p99 baseline 321.7/313.2/347.7 ms, head 302.6/320.2/304.4 ms; this browser fixture is distinct from real native echo measurements. Real native typing at 500 attached PTYs: 4 isolated infraternal agents × 125 PTYs (production stream cap unchanged), 1,000 local keys per cohort. Two paired local echo p99 baseline 1.76/2.52 ms, head 1.97/2.79 ms (5 ms budget); 300 ms/200-key echo p99 baseline 325.97 ms, head 326.06 ms (334 ms budget). Daemon total RSS about 34–36 MB across four nodes; shim RSS about 2.93–3.19 GB across 500 (full cohorts in receipt). No new persistent per-session input buffer. Each cohort enumerates all 504 fixture PIDs and proves remaining=[]. Evidence and reproducible component/native harnesses: [browser-scoped-vm.log](https://git.kayg.org/attachments/6434aebd-002c-49ab-bf2c-f81b9d3a177c) [control-cost-scoped.log](https://git.kayg.org/attachments/527e1a6a-c84d-43ee-bf36-268eea9a0997) [native-perf.log](https://git.kayg.org/attachments/5f1f53e7-07d9-4f7e-8567-9afabf3fa942) [measure-controls.txt](https://git.kayg.org/attachments/8ca08289-ea03-412a-b0db-6a87f8d9981b) [measure-typing-scale.txt](https://git.kayg.org/attachments/5a5003db-3acc-482a-b692-e6d3f65221a7) Production screenshot (functional evidence, no visual-quality verdict): ![query-replies-real.png](https://git.kayg.org/attachments/3c30c0ab-1d79-4fba-a301-eb23ab484e61)
kayg commented 2026-10-19 09:54:30 +00:00
Author
Owner
Copy link

Gate finding on unchanged head 24d0119d1: iterate passed fmt, VT native fmt, CLI plugin compile-out, clippy and cargo-deny; workspace agent unit test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up failed at daemon_gone_tests.rs:119 because its TMPDIR-derived rendezvous exceeded SUN_LEN (not a timeout). No waiver used. Extend the existing private short-path runner to the infraternal agent unit binary and export TMPDIR=/mnt inside that namespace, bind-mounted from this job's qrr2 scratch directory. Same uid=1001, capabilities dropped before tests, host mounts unchanged. The exact previously failing test now passes without changing source/assertions. Rerunning iterate and then final fast on the same committed head. Full evidence will include the fixture runner.

Gate finding on unchanged head 24d0119d1: iterate passed fmt, VT native fmt, CLI plugin compile-out, clippy and cargo-deny; workspace agent unit test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up failed at daemon_gone_tests.rs:119 because its TMPDIR-derived rendezvous exceeded SUN_LEN (not a timeout). No waiver used. Extend the existing private short-path runner to the infraternal agent unit binary and export TMPDIR=/mnt inside that namespace, bind-mounted from this job's qrr2 scratch directory. Same uid=1001, capabilities dropped before tests, host mounts unchanged. The exact previously failing test now passes without changing source/assertions. Rerunning iterate and then final fast on the same committed head. Full evidence will include the fixture runner.
kayg commented 2026-10-19 10:09:37 +00:00
Author
Owner
Copy link

Second iterate result on unchanged 24d0119d1: all infraternal agent tests pass, including the prior socket fixture; server suite has 576 pass / 52 ignored and one failure at runtime.rs:1358, setup-token fixture also exceeding SUN_LEN. This is another TMPDIR-derived path, not a timeout. No waiver or source/assertion change. Apply the private short TMPDIR runner uniformly to native test binaries (same uid=1001, capabilities dropped, scratch-backed /mnt only inside a private mount namespace). The exact setup-token test now passes. Proceeding directly to the full fast gate, which repeats every iterate check plus static release/linkage/key-heap/size checks. Same head, no production changes since passing corpus and perf runs.

Second iterate result on unchanged 24d0119d1: all infraternal agent tests pass, including the prior socket fixture; server suite has 576 pass / 52 ignored and one failure at runtime.rs:1358, setup-token fixture also exceeding SUN_LEN. This is another TMPDIR-derived path, not a timeout. No waiver or source/assertion change. Apply the private short TMPDIR runner uniformly to native test binaries (same uid=1001, capabilities dropped, scratch-backed /mnt only inside a private mount namespace). The exact setup-token test now passes. Proceeding directly to the full fast gate, which repeats every iterate check plus static release/linkage/key-heap/size checks. Same head, no production changes since passing corpus and perf runs.
kayg commented 2026-10-19 10:21:41 +00:00
Author
Owner
Copy link

ARM merge-base comparison completed with the locked static recipe on 23723c0c8: 19,415,776 bytes. Head is 19,408,192 bytes (-7,584).

Fixture correction: applying the private mount runner to every native test binary was too broad. Same-PID restart/exec fixtures fail under that environment. Stopped that fast attempt by the seven exact owned PIDs (pidfds; every PID gone), retained its transcript, and restored ordinary execution for all binaries except recovery_support, infraternal_agent and infraternal_server, whose short-socket fixtures require the alias. The previously failing verified-exec/recovery test now passes both replacement and late-refusal paths with the ordinary runner. No source/assertion/time-limit change or waiver. A fresh full fast run is now through CLI compile-out and clippy into workspace tests on unchanged 24d0119d1. Perf VM scopes are inactive and this job's VM scratch directory is removed.

ARM merge-base comparison completed with the locked static recipe on 23723c0c8: 19,415,776 bytes. Head is 19,408,192 bytes (-7,584). Fixture correction: applying the private mount runner to every native test binary was too broad. Same-PID restart/exec fixtures fail under that environment. Stopped that fast attempt by the seven exact owned PIDs (pidfds; every PID gone), retained its transcript, and restored ordinary execution for all binaries except recovery_support, infraternal_agent and infraternal_server, whose short-socket fixtures require the alias. The previously failing verified-exec/recovery test now passes both replacement and late-refusal paths with the ordinary runner. No source/assertion/time-limit change or waiver. A fresh full fast run is now through CLI compile-out and clippy into workspace tests on unchanged 24d0119d1. Perf VM scopes are inactive and this job's VM scratch directory is removed.
kayg commented 2026-10-19 10:48:41 +00:00
Author
Owner
Copy link

D307 round 2 complete. Head: 24d0119d15915a4cca18a094c81ba8c232bb46e0. Atomically pushed query-replies-r2 and fast-forwarded query-replies; both remote refs independently verified at this SHA. No deployment. Issue remains open.

QR-001: renderer-produced answers are marked without request/response text matching. Generic browser boundaries give stable byte identities across fragmented writes; the server arbitrates observed output positions without a terminal grammar. Replay never renews expiry, late/duplicate replies are refused, retained state remains bounded, and unmarked Input stays typing. Full best-effort reply queues preserve accepted typing. The scoped renderer JS API avoids per-control input allocations; the pinned WASM is unchanged. Review commits were cherry-picked unchanged as 3129a8b23 and 064f82c9e; their assertions were not weakened.

Validation: 16 renderer/boundary/property tests, 1,749 assertions; 30 answered forms across all 515 two-part splits with 3 independent renderers. Real server/infraternal agent/shim/PTY corpus: 30 forms, all 3 viewers attempt an answer, exact expected PTY bytes once per form, observed beyond expiry. All 12 final-production browser functional cases pass on the named perf VM.

Measured on the named perf VM under short locked foreground scopes: three paired 40-key/300 ms browser cohorts have glyph p99 baseline 14.4/14.2/14.2 ms versus head 14.1/14.5/14.3 ms (17 ms budget); input CPU p99 head 1.3/0.3/0.8 ms (5 ms budget). Real native typing with 500 attached PTYs (4 nodes ×125, one active typing PTY): local echo p99 head 1.97/2.79 ms versus baseline 1.76/2.52 ms (5 ms budget), 300 ms echo p99 head 326.06 ms versus baseline 325.97 ms (334 ms budget). Native measurements cover the direct infraternal-agent/PTY path; browser measurements use the production renderer and standard test double. Dense-style VT component throughput (canvas excluded) improves from baseline 10.04/11.35 MiB/s to head 12.83/12.46 MiB/s. Full samples, machine/load metadata and reproduction scripts are attached in earlier comments and below.

Same-merge-base size comparison (23723c0c836dd63e3415d478a56e4d87c9ce8e14), same production recipes:

Head: 24d0119d15915a4cca18a094c81ba8c232bb46e0
Merge base: 23723c0c836dd63e3415d478a56e4d87c9ce8e14
Native recipe: scripts/static-cargo build --locked --release --package infraternal --target <target>; same pinned toolchain and one job target directory.
JavaScript recipe: bun run build; bun run transfer-budget.ts; default production flags for both revisions.

Native stripped static bytes (baseline -> head; delta):
x86_64: 21223696 -> 21215664; -8032 B
head SHA-256 b252c5c00e8be8419e032cdabeeaa358274be6b1606244e499af8a87529b31f9
aarch64: 19415776 -> 19408192; -7584 B
head SHA-256 7c877eef56ef9f245ac0236123c8fa7810ee4475f358e38785f2b3e0381400de
Final x86_64 image is byte-identical to the measured perf-VM candidate.

JavaScript delivery bytes: identity / gzip / brotli (baseline -> head; delta):
critical: identity 972702 -> 972795 (+93 B); gzip 301190 -> 301112 (-78 B); brotli 251053 -> 250878 (-175 B)
deferred: identity 141031 -> 141031 (+0 B); gzip 49081 -> 49080 (-1 B); brotli 43518 -> 43473 (-45 B)
onDemand: identity 219874 -> 219874 (+0 B); gzip 87485 -> 87487 (+2 B); brotli 78059 -> 78064 (+5 B)
all classes: identity delta +93 B; gzip delta -77 B; brotli delta -215 B

Author review complete. Final scripts/verify fast exits 0 with no waivers; every Rust row, both static images, key-heap/linkage/metadata checks, TypeScript checks, production transfer budgets and protocol tests pass. Only the documented private short-path runner is used for socket fixtures; restart/exec fixtures use ordinary execution. Temporary build targets/comparison checkouts and this job’s VM directory are removed. No infraternal processes remain in the build job’s cgroup; all recorded perf scopes are inactive and native cohorts enumerate every owned PID as gone.

verify-fast-final.log
native-and-js-sizes.txt
author-review.txt
gate-driver.txt
test-runner.txt
private-fixture.txt

performance-reproduction.txt
perf-cleanup-final.log

pushed-refs.txt
build-host-cleanup.txt
local-scratch-cleanup.txt
restart-fixture-check.log
failed-gate-cleanup.txt

query-replies-real.png

Final gate output, verbatim (head above; exit status 0):

scripts/verify fast transcript 
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.12s

==> Repository artifact size gate
repository artifact gate: PASS (52 changed path(s), merge base f29713863e5d)

==> Release deployment functional checks
.....Release build failed for aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa; gate log retained
.Build deferred: host capacity limit reached
.........
----------------------------------------------------------------------
Ran 15 tests in 0.684s

OK
.
----------------------------------------------------------------------
Ran 1 test in 0.077s

OK
bun test v1.4.2 (744846f84)

scripts/release/deploy-review.test.ts:
REMOTE_ADMISSION unsigned_x86_payload=true refused=true
(pass) remote admission refuses an x86 payload outside the signed manifest [206.48ms]
{"state": "deployed", "ca_unlocked": true}
WEB_ONLY_RECORD candidate_binary_recorded=false
(pass) web-only deployment does not record the candidate as the running binary [203.53ms]
ALIAS_RECOVERY restart_requests=2
(pass) alias restoration failure still requests the retained warm rollback [184.21ms]

 3 pass
 0 fail
 3 expect() calls
Ran 3 tests across 1 file. [610.00ms]
METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=305.08 p99_ms=323.23 result=PASS

==> fmt
(fmt: 2s)

==> VT native fmt
(VT native fmt: 0s)

==> CLI plugin compile-out
disabled CLI plugin dependencies: absent from normal dependency graph
warning: function `print_progress` is never used
   --> crates/infraternal/src/cli/output.rs:592:8
    |
592 | pub fn print_progress<T: Serialize>(result: &CommandResult<T>, json: bool, to_stderr: bool) {
    |        ^^^^^^^^^^^^^^
    |
    = note: `#[warn(dead_code)]` (part of `#[warn(unused)]`) on by default

warning: function `write_output` is never used
   --> crates/infraternal/src/cli/output.rs:616:8
    |
616 | pub fn write_output(output: Result<String, serde_json::Error>, to_stderr: bool) {
    |        ^^^^^^^^^^^^

warning: `infraternal` (bin "infraternal" test) generated 2 warnings
    Finished `test` profile [unoptimized + debuginfo] target(s) in 0.09s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal-9c4fc48b971836fc)

running 37 tests
test cli::actions::default_build_tests::default_build_registers_no_unbuilt_command ... ok
test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok
test cli::actions::tests::agent_session_integration_target_is_gated_by_agent_plugin ... ok
test cli::actions::tests::compiled_out_mesh_has_no_registered_commands ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::no_default_plugins_register_no_component_commands ... ok
test cli::actions::tests::server_only_dependencies_are_removed_with_server_plugin ... ok
test cli::command_tree::tests::compiled_out_plugin_has_no_help_or_parse_path ... ok
test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test cli::command_tree::tests::node_build_omits_and_refuses_server_commands ... ok
test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok
test cli::command_tree::tests::public_help_is_plain_words ... ok
test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok
test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok
test cli::output::tests::a_failure_says_why_and_what_to_do ... ok
test cli::output::tests::exit_codes_follow_d303 ... ok
test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}}
{"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}}
ok
test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok
test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok
test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok
test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok
test cli::usage::tests::missing_arguments_are_listed_by_name ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok
test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok

test result: ok. 37 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.26s

    Finished `test` profile [unoptimized + debuginfo] target(s) in 0.19s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal-a2d65766d1f23d58)

running 100 tests
test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok
test cli::actions::hosted_tests::production_descriptors_share_cli_registry_and_skills ... ok
test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok
test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok
test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::hidden_ssh_session_bridge_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok
test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok
test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok
test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test cli::command_tree::tests::hidden_ssh_session_action_parses_existing_session_rendezvous ... ok
test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok
test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok
test cli::command_tree::tests::public_help_is_plain_words ... ok
test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok
test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok
test cli::output::tests::a_failure_says_why_and_what_to_do ... ok
test cli::output::tests::exit_codes_follow_d303 ... ok
test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}}
{"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}}
ok
test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok
test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok
test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok
test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok
test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok
test cli::usage::tests::missing_arguments_are_listed_by_name ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test remote::tests::join_re_enrolls_for_a_moved_server_but_not_a_renamed_one ... ok
test remote::tests::join_re_enrolls_the_same_hosts_identity_and_refuses_another_host ... ok
test remote::tests::join_refuses_the_same_host_id_from_another_server ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test remote::tests::replace_aborts_when_the_identity_changed_since_it_was_read ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test remote_service::tests::link_failure_does_not_wait_forever_for_blocking_work ... ok
test remote_service::tests::polling_panic_reaches_bounded_shutdown ... ok
test remote_service::tests::successful_link_return_is_a_service_failure ... ok
test restart::recovery_tests::verified_exec_and_late_refusal_preserve_listener_and_ca ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test restart::tests::deleted_path_review::relative_recovery_after_atomic_install_keeps_live_install_path ... ok
test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok
test restart::tests::path_review::late_recovery_from_path_invocation_keeps_install_target ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok
test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ok
test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok
test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok
test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ok
test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ok
test restart_binary::audit_tests::verification_twenty_megabytes ... ignored, optimized weighted 20 MiB signature and admission measurement
test restart_image::tests::probe_never_inherits_the_control_descriptor ... ok
test restart_image::tests::snapshot_refuses_every_mutation_and_preserves_source_offset ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok
test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok
test ssh_internal::tests::connect_requires_exactly_a_host_and_numeric_port ... ok
test ssh_internal::tests::connector_is_available_only_on_the_initiating_build ... ok
test ssh_internal::tests::session_accepts_only_the_two_spawned_shapes ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test startup_tests::shared_reactor_preserves_borrows_errors_and_panic_cleanup ... ok

test result: ok. 99 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 25.79s

    Finished `test` profile [unoptimized + debuginfo] target(s) in 0.13s
     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal_agent-c0f5ee2d4c7be28c)
Private socket fixture: uid=1001 scratch=/mnt; capabilities dropped before test

running 1 test
test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 73 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal_mesh-c7263890e5528429)

running 1 test
test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal_plugin_backup-63687278dacedd2d)

running 1 test
test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal_plugin_relay-05772b88ed06ec15)

running 1 test
test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal_plugin_ssh-8d15d5d3bffc0793)

running 1 test
test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 42 filtered out; finished in 0.00s

(CLI plugin compile-out: 27s)

==> clippy
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.33s
(clippy: 0s)

==> test
    Finished `test` profile [unoptimized + debuginfo] target(s) in 0.42s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal-7de1f15af67158e9)

running 100 tests
test cli::actions::default_build_tests::default_build_registers_no_unbuilt_command ... ok
test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok
test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok
test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok
test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::hidden_ssh_session_bridge_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok
test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok
test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok
test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test cli::command_tree::tests::hidden_ssh_session_action_parses_existing_session_rendezvous ... ok
test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok
test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok
test cli::command_tree::tests::public_help_is_plain_words ... ok
test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok
test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok
test cli::output::tests::a_failure_says_why_and_what_to_do ... ok
test cli::output::tests::exit_codes_follow_d303 ... ok
test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}}
{"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}}
ok
test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok
test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok
test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok
test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok
test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok
test cli::usage::tests::missing_arguments_are_listed_by_name ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test remote::tests::join_re_enrolls_for_a_moved_server_but_not_a_renamed_one ... ok
test remote::tests::join_re_enrolls_the_same_hosts_identity_and_refuses_another_host ... ok
test remote::tests::join_refuses_the_same_host_id_from_another_server ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test remote::tests::replace_aborts_when_the_identity_changed_since_it_was_read ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test remote_service::tests::link_failure_does_not_wait_forever_for_blocking_work ... ok
test remote_service::tests::polling_panic_reaches_bounded_shutdown ... ok
test remote_service::tests::successful_link_return_is_a_service_failure ... ok
test restart::recovery_tests::verified_exec_and_late_refusal_preserve_listener_and_ca ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test restart::tests::deleted_path_review::relative_recovery_after_atomic_install_keeps_live_install_path ... ok
test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok
test restart::tests::path_review::late_recovery_from_path_invocation_keeps_install_target ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok
test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ok
test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok
test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok
test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ok
test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ok
test restart_binary::audit_tests::verification_twenty_megabytes ... ignored, optimized weighted 20 MiB signature and admission measurement
test restart_image::tests::probe_never_inherits_the_control_descriptor ... ok
test restart_image::tests::snapshot_refuses_every_mutation_and_preserves_source_offset ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok
test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok
test ssh_internal::tests::connect_requires_exactly_a_host_and_numeric_port ... ok
test ssh_internal::tests::connector_is_available_only_on_the_initiating_build ... ok
test ssh_internal::tests::session_accepts_only_the_two_spawned_shapes ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test startup_tests::shared_reactor_preserves_borrows_errors_and_panic_cleanup ... ok

test result: ok. 99 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 27.35s

     Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/agent_daemon-eace6b0012b5a1db)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 32.54s

     Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/agent_queues-165eb353c7531f59)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 35.47s

     Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/agent_review-3ad2a12c0615b84c)

running 8 tests
test initial_attach_requires_explicit_credit_before_replay ... ok
test last_typist_selects_its_own_real_pty_dimensions ... ok
test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok
test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 35.91s

     Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/agent_sessions-f2332706b84f8f8c)

running 3 tests
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok
test latency_fixture_accepts_the_unsolicited_startup_inventory ... ok
test restart_discovery_keeps_a_live_shim_and_drops_clean_exit_and_sigkill ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.72s

     Running tests/cli_envelope.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/cli_envelope-661ccc970097d9ee)

running 8 tests
test a_missing_server_is_not_found_exit_4 ... ok
test an_unknown_command_is_a_usage_envelope_that_does_not_echo_odd_input ... ok
test bare_infraternal_is_the_overview_and_points_to_help ... ok
test component_commands_fail_in_the_envelope_when_the_agent_is_not_there ... ok
test every_command_reports_a_usage_error_in_the_envelope_naming_the_argument ... ok
test read_only_commands_answer_in_the_envelope ... ok
test status_exits_0_on_a_machine_with_nothing_installed ... ok
test status_exits_5_when_something_that_should_run_is_down ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.40s

     Running tests/cli_review.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/cli_review-d55a30e0250e5756)

running 16 tests
test a_dry_run_plan_keeps_its_line_breaks ... ok
test a_dumb_terminal_gets_neither_colour_nor_marks ... ok
test a_failing_command_in_json_mode_prints_exactly_one_envelope ... ok
test a_group_with_one_command_says_so_in_the_singular ... ok
test a_malformed_host_id_is_a_usage_error_exit_2 ... ok
test a_missing_runtime_directory_is_not_called_a_bad_reply ... ok
test a_subcommand_does_not_advertise_options_it_ignores ... ok
test a_usage_error_in_text_mode_does_not_echo_the_odd_input ... ok
test an_empty_no_color_is_ignored ... ok
test an_unknown_skill_is_not_found_exit_4 ... ok
test ctrl_c_in_json_mode_ends_with_an_interrupted_envelope_and_exit_130 ... ok
test json_help_and_version_are_envelopes_too ... ok
test no_compiled_python_is_tracked ... ok
test root_help_fits_80_columns ... ok
test status_is_not_down_when_the_service_manager_cannot_be_asked ... ok
test user_facing_text_never_says_agent_alone ... ok

test result: ok. 16 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.03s

     Running tests/cli_review_r2.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/cli_review_r2-fb28189eb99511bc)

running 11 tests
test a_failed_later_page_emits_only_the_failure_envelope ... ok
test a_later_runtime_handler_is_not_bypassed_by_the_interrupt_handler ... ok
test a_mistyped_word_that_looks_like_a_token_is_not_echoed ... ok
test a_paged_listing_is_still_one_envelope ... ok
test an_unknown_skill_does_not_echo_what_was_typed ... ok
test ctrl_c_in_a_script_loop_stops_the_loop ... ok
test ctrl_c_while_the_result_is_being_written_never_leaves_a_broken_line ... ok
test help_and_version_under_json_are_one_envelope_and_exit_0 ... ok
test status_text_does_not_call_an_unanswered_unit_not_running ... ok
test three_pages_preserve_order_and_only_the_final_cursor ... ok
test usage_errors_under_json_are_one_envelope_and_exit_2 ... ok

test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.03s

     Running tests/cli_review_r3.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/cli_review_r3-ab163f75bc325020)

running 4 tests
test a_pending_blocked_interrupt_emits_notice_and_terminates_by_sigint ... ok
test a_pending_interrupt_during_final_output_preserves_result_and_sigint_status ... ok
test inherited_ignored_sigint_stays_ignored_during_cli_output ... ok
test signal_fixture ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s

     Running tests/cli_review_r3_arguments.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/cli_review_r3_arguments-48fd77d7d0173dff)

running 1 test
test inherited_fd_is_rejected_instead_of_ignored_by_remote_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/idle_canary-1e1ec5c3674e0f56)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.11s

     Running tests/key_memory.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/key_memory-db0b9ddee7c51dd5)

running 1 test
test diagnostic_requires_locked_pages_and_supports_json_without_public_help ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/remote_output-2e9aad8bb717b41b)

running 1 test
test remote_refusal_matches_its_declared_cli_output ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/session_bounds_review.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/session_bounds_review-c8d51c5accea5d04)

running 1 test
test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.92s

     Running tests/session_exit_events.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/session_exit_events-4b2712c16f493a8f)

running 1 test
test idle_daemon_discovers_unattached_and_adopted_shim_exit_without_requests ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.73s

     Running tests/session_retention.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/session_retention-19237533b041ac30)

running 1 test
test bounded_owned_exit_reconnects_as_ended_with_status ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.61s

     Running tests/setup_output.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/setup_output-8adba6b7d790f6d5)

running 1 test
test setup_output_keeps_legacy_and_versioned_readers ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/shim.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/shim-882f35597e3d6cb6)

running 24 tests
test attached_backpressure_and_detached_progress ... ok
test delivered_exit_cannot_release_another_owning_window ... ok
test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok
test detached_shell_exit_reaps_shim_within_one_second ... ok
test disallowed_signal_only_disconnects_peer ... ok
test double_fork_survives_parent_death ... ok
test dropped_deferred_peers_release_slots_before_the_pty_drains ... ok
test fresh_shared_peer_negotiates_while_another_shared_input_is_deferred ... ok
test independent_shared_writers_wait_for_the_same_global_queue ... ok
test legacy_output_subscription_unblocks_deferred_shared_input ... ok
test malformed_shared_successor_does_not_evict_the_live_shared_peer ... ok
test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok
test owned_exit_releases_promptly_on_window_close ... ok
test parked_shared_writer_does_not_stop_detached_pty_progress ... ok
test real_shell_reconnect_resize_and_delivered_exit ... ok
test replacement_connection_and_malformed_limit ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok
test shared_input_waits_for_global_queue_space_without_losing_the_suffix ... ok
test shared_writer_coexists_and_replayed_input_is_written_once ... ok
test shared_writer_refusals_and_full_peer_limit_preserve_the_live_writer ... ok
test shared_writer_restores_durable_geometry_after_another_writer_types ... ok
test unowned_normal_exit_retires_promptly_and_records_status ... ok
test user_scope_survives_parent_unit_stop ... active
ok
test writer_replacement_is_per_mode_and_fresh_ordinary_writers_stay_optional ... ok

test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.87s

     Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/ssh_askpass-0d42995889fdce36)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 2.33s

     Running tests/ssh_connector_policy.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/ssh_connector_policy-76f290ff1302b128)

running 1 test
test connector_preserves_configured_bind_address_refusal ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.01s

     Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/vt_credit-a8057c0d8d11dc74)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 20.09s

     Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/vt_reconnect-3d554a4e2b9bb78d)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 16.46s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal_agent-5e7905dce98d9204)
Private socket fixture: uid=1001 scratch=/mnt; capabilities dropped before test

running 166 tests
test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok
test daemon::authenticated_tests::authenticated_uid_refusal_precedes_state_and_io ... ok
test daemon::census_retry_tests::full_control_lane_retries_retirement_census_on_capacity_without_requests ... ok
test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok
test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000
test daemon::liveness_tests::detached_ping_preserves_written_ack_without_output_credit ... ok
test daemon::liveness_tests::input_state_probe_preserves_written_ack_after_input ... ok
test daemon::liveness_tests::input_state_probe_preserves_written_ack_before_input ... ok
test daemon::liveness_tests::terminal_probe_waits_for_the_shim_fence_and_keeps_stream_identity ... ok
test daemon::readiness_exit_tests::ownership_eof_does_not_discard_private_terminal_output ... ok
test daemon::readiness_tests::a_saturated_census_queue_cannot_establish_the_open_fence ... ok
test daemon::readiness_tests::a_shut_down_peer_refuses_the_write_while_a_forked_copy_holds_it ... ok
test daemon::readiness_tests::census_and_open_result_share_fifo_order ... ok
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::readiness_tests::fixture_fence_processes_messages_before_the_control_pong ... ok
test daemon::readiness_tests::replay_complete_preserves_the_full_output_cursor_as_decimal ... ok
test daemon::readiness_tests::replay_prefix_stops_at_the_shim_hello_head ... ok
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test daemon::readiness_tests::saturated_action_replies_preserve_connection ... ok
test daemon::readiness_tests::saturated_ping_replies_preserve_connection ... ok
test daemon::readiness_tests::the_unhealthy_handoff_case_survives_concurrent_spawns ... ok
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test daemon::remote_tests::reattach_dispatch_serves_while_another_runtime_holds_the_lifetime_lock ... ok
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::session_commands::tests::probe_at_full_command_capacity_preserves_accepted_input ... ok
test daemon::session_commands::tests::review_reply_at_full_command_capacity_preserves_accepted_input ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks
test daemon::terminal_events::tests::census_uses_uuid_strings_and_replay_keeps_all_cursor_bits ... ok
test daemon::terminal_events::tests::ordinary_exit_omits_retired_and_snapshot_sequences_stay_numeric ... ok
test daemon::terminal_events::tests::reply_compatibility_notice_contains_only_session_identity ... ok
test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok
test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok
test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok
test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok
test plugin_control::tests::accepted_public_transaction_outlives_the_framing_deadline ... ok
test plugin_control::tests::admission_observes_the_same_plugin_settings_as_actions ... ok
test plugin_control::tests::dropping_a_listener_does_not_unlink_a_replacement_file ... ok
test plugin_control::tests::empty_catalog_preserves_control_contract_without_an_os_worker ... ok
test plugin_control::tests::local_frame_reader_retains_fragmentation_and_refuses_trailing_frames ... ok
test plugin_control::tests::local_public_actions_refuse_controls_and_active_socket_replacement ... ok
test plugin_control::tests::retained_path_and_observed_transport_cross_the_lazy_worker ... ok
test plugin_control::tests::retained_runtime_registry_keeps_lifetime_ownership_after_listener_abort ... ok
test plugin_control::tests::synchronous_plugin_work_does_not_park_the_current_thread_reactor ... ok
test plugin_control::tests::worker_preserves_trusted_context_and_writer_owned_effect ... ok
test process_exits::platform::tests::resource_failures_do_not_silently_disable_exit_tracking ... ok
test process_exits::platform::tests::unavailable_kernel_has_no_timer_or_descriptor ... ok
test process_exits_tests::exited_before_registration_is_not_a_live_registration ... ok
test process_exits_tests::process_descriptor_is_cloexec_and_rejects_invalid_pid ... ok
test process_exits_tests::shared_exit_queue_at_200_processes ... ignored, 200 live process lifetimes; run in a weighted benchmark scope
test process_exits_tests::shared_queue_detects_exit_and_does_not_repeat_or_retain_descriptors ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test remote_client::dial_runtime::tests::owned_driver_clock_advances_with_its_timer_runtime ... ok
test remote_client::server_path::tests::a_future_mesh_lease_and_silent_cut_keep_their_port_reserved ... ok
test remote_client::server_path::tests::a_latched_mesh_reply_wakes_retry_without_selecting_the_path ... ok
test remote_client::server_path::tests::backed_candidate_refusal_keeps_new_datagrams_on_mesh_discovery ... ok
test remote_client::server_path::tests::backed_discovery_ends_with_its_owned_session ... ok
test remote_client::server_path::tests::backed_discovery_keeps_control_cancellation_and_udp_recovery_bounded ... ok
test remote_client::server_path::tests::backup_published_during_candidate_proof_keeps_enrolled_control_live ... ok
test remote_client::server_path::tests::candidate_proof_keeps_probing_after_its_first_packet_is_lost ... ok
test remote_client::server_path::tests::component_down_activates_the_warm_fallback_without_a_new_connection ... ok
test remote_client::server_path::tests::component_down_keeps_its_reason_when_the_mesh_also_stops_answering ... ok
test remote_client::server_path::tests::component_down_proves_tcp_fallback_when_enrolled_udp_is_unavailable ... ok
test remote_client::server_path::tests::component_down_returns_the_live_connection_to_the_enrolled_address ... ok
test remote_client::server_path::tests::dropped_return_replies_keep_the_admitted_connection ... ok
test remote_client::server_path::tests::failed_control_worker_returns_to_retry_owner ... ok
test remote_client::server_path::tests::healthy_mesh_path_is_never_declared_interrupted ... ignored, Timing assertion: run on the perf VM under the shared benchmark lock.
test remote_client::server_path::tests::healthy_mesh_preserves_every_control_reply_on_the_admitted_connection ... ok
test remote_client::server_path::tests::interrupted_mesh_is_retried_on_the_same_connection ... ok
test remote_client::server_path::tests::invalid_mesh_hint_cannot_complete_fresh_path_proof ... ok
test remote_client::server_path::tests::pending_enrolled_proof_does_not_hide_a_latched_mesh_hint ... ok
test remote_client::server_path::tests::pending_enrolled_proof_does_not_hide_the_mesh_discovery_clock ... ok
test remote_client::server_path::tests::proposed_mesh_moves_the_live_connection_and_a_silent_cut_returns_it ... ok
test remote_client::server_path::tests::retained_mesh_proposal_connects_when_the_fallback_port_is_unavailable ... ok
test remote_client::server_path::tests::returning_publishes_the_selected_path_before_its_proof_finishes ... ok
test remote_client::server_path::tests::review_silent_mesh_interruption_returns_to_fallback_within_local_reconnect_budget ... ignored, Run alone on the perf VM under the shared benchmark lock.
test remote_client::server_path::tests::silent_mesh_handshake_keeps_the_shared_timeout_classification ... ok
test remote_client::server_path::tests::unadvertised_path_proof_keeps_the_existing_enrolled_connection ... ok
test remote_client::server_path::tests::unanswered_mesh_address_keeps_the_live_connection ... ok
test remote_client::server_path::tests::unavailable_credentials_do_not_end_server_link ... ok
test remote_client::server_path::tests::unnegotiated_backup_preserves_the_enrolled_retry_cooling ... ok
test remote_client::server_path::tests::untrusted_server_on_the_mesh_address_never_takes_the_connection ... ok
test remote_client::supervisor::review_tests::durable_state::acknowledged_network_access_survives_superseded_worker_completion ... ok
test remote_client::supervisor::review_tests::six_hour_server_outage_keeps_one_retry_owner_with_bounded_attempts ... ok
test remote_client::supervisor::review_tests::terminated_factory_is_replaced_without_overlapping_live_workers ... ok
test remote_client::supervisor::review_tests::watchdog_bounds_workers_when_local_path_discovery_stalls ... ok
test remote_client::supervisor::tests::a_burst_then_a_stable_link_is_summarised_by_the_timer ... ok
test remote_client::supervisor::tests::every_error_kind_and_successful_return_retries ... ok
test remote_client::supervisor::tests::failed_attempt_cost_does_not_extend_the_retry_period ... ok
test remote_client::supervisor::tests::healthy_link_has_no_watchdog_deadline ... ok
test remote_client::supervisor::tests::link_close_notes_print_once_per_window_and_summarise_repeats ... ok
test remote_client::supervisor::tests::watchdog_restarts_a_stalled_offline_attempt ... ok
test remote_client::tests::capability_fixture_retries_a_port_held_by_the_other_transport ... ok
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test remote_client::tests::idle_timers::copy_cost::fresh_admission_accepts_dormant_replies_but_refuses_pending_recovery ... ok
test remote_client::tests::idle_timers::copy_cost::fresh_copy_from_admission_at_one_thousand_transports ... ignored, Separate fresh-copy cohort on the perf VM under its shared benchmark lock.
test remote_client::tests::idle_timers::copy_cost::mesh_probe_and_copy_cost_at_one_thousand_transports ... ignored, Optimized transport-only measurement on the perf VM under its shared benchmark lock.
test remote_client::tests::idle_timers::copy_cost::physical_counters_include_both_source_paths ... ok
test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::monotonic_origin_bounds_fail_closed_without_losing_receive_receipts ... ok
test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::receive_diagnostic_counts_gro_and_only_fixed_sampled_ports ... ok
test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::receive_diagnostic_gap_bins_have_explicit_bounds ... ok
test remote_client::tests::idle_timers::copy_cost::runtime_configuration_trial_at_one_thousand_transports ... ignored, Explicit runtime scheduling control on the perf VM; ordinary runtime and guards unchanged.
test remote_client::tests::idle_timers::copy_cost::socket_configuration_trial_at_one_thousand_transports ... ignored, Explicit socket-configuration diagnostic on the perf VM; ordinary scale gates stay unchanged.
test remote_client::tests::idle_timers::copy_cost::udp_drop_receipt_counts_only_owned_live_sockets ... ok
test remote_client::tests::idle_timers::mesh_idle_timer_cost_at_one_thousand_connections ... ignored, Release-only perf VM measurement under the shared benchmark lock.
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test remote_client::tests::raw_tcp_control_preserves_mux_envelopes_and_buffered_suffix ... ok
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test remote_client::tests::server_path_capability_is_advertised_on_native_and_fallback_transports ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test remote_client::tests::unavailable_local_credentials_retry_without_creating_state ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test remote_cursor::tests::exact_unsigned_cursor_and_whole_object_are_required ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test remote_native_tests::primed::negotiated_connection_keeps_unmarked_new_writers_ordinary ... ok
test remote_native_tests::primed::ordinary_native_writer_refuses_the_additive_cursor_request ... ok
test remote_native_tests::primed::prime_marker_is_canonical_and_requires_negotiated_permission ... ok
test remote_native_tests::primed::primed_writer_acknowledges_before_reading_credit_funded_cursor ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok
test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok
test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok
test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok
test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test sessions::tests::ordinary_native_writer_negotiates_queue_backpressure_without_shared_selection ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test sessions::tests::shared_writer_helper_negotiates_before_sending_its_selector ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_kernel_latency ... ignored, Exact 50MiB kernel-latency control on the perf VM in an owned network namespace.
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap

test result: ok. 146 passed; 0 failed; 20 ignored; 0 measured; 0 filtered out; finished in 34.58s

     Running tests/transport.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/transport-779de0acdb61e1cf)

running 2 tests
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok
test oversized_header_and_truncated_frame_are_rejected ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal_mesh-e13f00facaa1692a)

running 1 test
test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/default_arrow-7b090aec0682bcd2)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/properties.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/properties-983aa249d0580584)

running 14 tests
test addresses_are_unique_stable_and_not_recycled ... ok
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test directional_grants_union_and_minimal_updates ... ok
test exhausted_versions_reject_mutations_without_changing_state ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test names_versions_and_backend_status ... ok
test overlaps_are_reported_without_silent_range_changes ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.47s

     Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/rotation_time-0cf88f58b3d13cb7)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal_plugin_api-c601f0a1c341cc23)

running 29 tests
test action::tests::any_of_permissions_are_machine_readable_and_empty_authority_is_rejected ... ok
test action::tests::command_result_schema_has_required_stable_fields_and_optional_next_step ... ok
test action::tests::command_result_schema_keeps_action_data_typed_inside_stable_envelope ... ok
test action::tests::only_hidden_internal_routes_may_use_the_reserved_prefix ... ok
test action::tests::registry_keeps_plugin_ownership_and_exact_command_paths ... ok
test action::tests::registry_rejects_inconsistent_json_schemas ... ok
test action::tests::registry_rejects_missing_action_guidance_and_command_collisions ... ok
test admission::tests::memory_refusal_round_trips_without_losing_legacy_error ... ok
test component_tests::component_declarations_cannot_create_servers ... ok
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok
test present::tests::a_table_fits_its_width_by_wrapping_only_the_last_column ... ok
test present::tests::a_table_has_a_header_only_from_two_rows ... ok
test present::tests::pairs_align_values_and_wrap_under_them ... ok
test present::tests::sizes_and_ages_use_units_a_person_would_say ... ok
test present::tests::tint_wraps_text_after_padding_is_measured ... ok
test present::tests::wide_leading_columns_are_cut_with_an_ellipsis ... ok
test release_version::tests::accepts_only_worker_version_forms ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok
test server_path::tests::legacy_link_omits_the_optional_source_port ... ok
test storage::tests::cancelled_begin_never_leaves_an_open_writer_transaction ... ok
test storage::tests::writer_begin_at_1000_nodes ... ignored, Measure only on the perf VM under its benchmark lock, 31 batches of 1000 writes.
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok
test tests::machine_actions_are_declared_without_entering_human_discovery ... ok
test tests::notifications_are_declared_json_bounded_and_drained_once ... ok
test tests::operator_presentation_cannot_follow_a_private_control_action ... ok
test tests::public_dispatch_cannot_call_a_machine_control_action ... ok
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test tests::registry_routes_only_declared_actions ... ok

test result: ok. 28 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/routing_review-fe80451ff0776d50)

running 2 tests
test review_topic_borrows_plain_and_owns_escaped ... ok
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal_plugin_backup-85810caed1a02b63)

running 1 test
test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal_plugin_host_facts-2cac1c439992c347)

running 14 tests
test memory::tests::custom_policy_rounds_up_and_validates_all_settings_before_use ... ok
test memory::tests::default_floor_refuses_only_below_headroom_even_above_128_sessions ... ok
test session_counts_tests::host_owned_session_counts_are_additive_and_refresh_on_request ... ok
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test tests::configured_memory_floor_refuses_with_current_host_counters ... ok
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok
test tests::static_facts_report_the_machines_hostname ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal_plugin_mesh-3681764fe0ea9465)

running 74 tests
test access_updates::tests::compact_rules_reconstruct_the_exact_config_and_preserve_server_access ... ok
test access_updates::tests::grouping_never_crosses_an_unchanged_protected_peer ... ok
test access_updates::tests::identity_changes_and_snapshots_keep_the_original_encoding ... ok
test access_updates::tests::malformed_ranges_refuse_before_any_rule_changes ... ok
test connection_state::tests::narrowing_depends_on_services_and_direction_not_the_fallback_label ... ok
test firewall::tests::already_removed_owned_table_does_not_block_component_cleanup ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::initial_apply_without_adoption_refuses_a_foreign_table ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::real_nft_ownership_atomicity_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::removal_plan_cannot_add_permissions_or_change_identity ... ok
test firewall::tests::rule_count_is_independent_of_membership_and_policy_data_is_in_sets ... ok
test iptables::tests::contiguous_open_members_use_ranges_without_opening_gaps ... ok
test iptables::tests::initiating_prefixes_cover_only_owned_intervals_even_at_family_boundaries ... ok
test iptables::tests::real_nf_tables_ownership_partial_family_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test iptables::tests::replacement_retains_established_rules_and_does_not_duplicate_hooks ... ok
test netlink::tests::connection_tuple_uses_initiating_service_and_refuses_ambiguous_selectors ... ok
test netlink::tests::host_prefix_decoder_refuses_ambiguous_or_malformed_ownership ... ok
test netlink::tests::malformed_lengths_and_padding_are_rejected ... ok
test netlink::tests::nested_attributes_roundtrip_without_copying_payloads ... ok
test netlink::tests::public_host_prefixes_decode_both_families_without_claiming_subnets ... ok
test node::rotation_tests::nf_tables_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173.
test node::rotation_tests::nft_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173.
test node::tests::chunked_snapshot_is_atomic_and_applies_1000_kernel_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN; use release for timing.
test node::tests::explicit_up_recovers_disabled_intent_before_reusing_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node::tests::externally_removed_interface_does_not_block_down ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node::tests::server_identity_cannot_change_inside_a_staged_snapshot ... ok
test node_actions::identity_upgrade_tests::ordinary_identity_reply_retains_the_legacy_shape ... ok
test node_actions::peer_page_tests::peer_pages_cover_every_peer_once_within_the_frame ... ok
test node_actions::peer_page_tests::poll_cost ... ignored, measurement
test node_actions::tests::applied_server_route_and_observed_link_survive_only_explicit_component_up ... ignored, Run inside a dedicated kernel namespace with CAP_NET_ADMIN.
test node_actions::tests::failed_cleanup_reports_stopping_and_reconnect_keeps_explicit_off ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node_actions::tests::node_actions_refuse_alternate_forms_duplicates_and_unbounded_input ... ok
test node_actions::tests::node_actions_register_without_kernel_work_and_hide_machine_calls ... ok
test node_coordination::tests::a_name_a_person_chose_is_kept ... ok
test node_coordination::tests::a_reported_hostname_names_a_host_added_by_address ... ok
test node_coordination::tests::explicit_off_waits_for_up_and_reconnect_requests_a_snapshot ... ok
test node_coordination::tests::peer_route_precedes_configuration_and_retires_with_the_node ... ok
test node_coordination::tests::placeholder_names_become_the_machines_names ... ok
test node_coordination::tests::refused_delta_recovers_immediately_and_closed_channel_retires_worker ... ok
test node_coordination::tests::refused_listener_replacement_preserves_the_current_lease ... ok
test node_coordination::tests::removed_binding_can_attach_only_after_authorized_reenrollment ... ok
test node_coordination::tests::server_listener_belongs_to_applied_enabled_worker ... ok
test node_presentation::tests::a_wide_table_stays_within_the_width ... ok
test node_presentation::tests::an_unproven_peer_gets_a_hint_that_names_it ... ok
test node_presentation::tests::legacy_status_remains_readable_and_invalid_link_is_refused ... ok
test node_presentation::tests::peers_show_units_ages_and_no_hint_when_every_path_is_direct ... ok
test node_presentation::tests::status_explains_the_observed_server_transport ... ok
test node_state::order_tests::accepted_snapshot_persistence_at_1000_peers ... ignored, Run release on the locked performance VM; public-state persistence at 1000 peers.
test node_state::order_tests::concurrent_workers_serialize_revision_check_and_publication ... ok
test node_state::order_tests::exact_legacy_binding_upgrade_preserves_the_revision_fence ... ok
test node_state::order_tests::explicit_off_can_replace_a_corrupt_public_snapshot ... ok
test node_state::order_tests::stale_and_conflicting_snapshots_cannot_replace_acknowledged_intent ... ok
test node_state::order_tests::worker_start_stop_apply_interleavings_never_decrease_acknowledged_revision ... ok
test node_state::restore_tests::public_restore_retains_large_intent_and_matches_reader ... ok
test node_state::restore_tests::public_state_restore_at_1000_peers ... ignored, Run only on the perf VM under its lock; INFRATERNAL_STATE_RESTORE_MODE=reader|slice, separate processes.
test node_state::restore_tests::restore_rejects_invalid_schema_trailing_data_and_unsafe_descriptors ... ok
test node_state::tests::explicit_off_survives_restart_and_snapshot_contains_only_public_fields ... ok
test node_state::tests::route_recording_preserves_the_legacy_accepted_state_format ... ok
test node_state::tests::unsafe_route_journal_and_existing_temporary_files_are_preserved ... ok
test node_state::tests::unsafe_snapshots_and_preexisting_temporary_files_are_not_followed_or_removed ... ok
test presence::tests::a_mesh_that_is_off_shows_nobody_online ... ok
test presence::tests::a_page_cursor_is_followed ... ok
test presence::tests::a_reading_expires_when_the_node_stops_answering ... ok
test presence::tests::a_recent_handshake_is_online_on_a_direct_path ... ok
test presence::tests::an_unreadable_node_is_no_reading ... ok
test presence::tests::no_handshake_a_stale_one_or_a_future_one_is_offline ... ok
test presence::tests::nodes_go_offline_twenty_seconds_after_the_last_good_reading ... ok
test presence::tests::receiving_a_keepalive_does_not_shorten_the_session_window ... ok
test presence::tests::replace_reports_only_visible_changes ... ok
test presence::tests::the_edge_of_the_session_window_is_still_online ... ok
test presence::tests::the_server_and_a_peer_passing_traffic_are_online ... ok
test presence::tests::traffic_proves_a_session_until_it_ends ... ok
test settings::tests::settings_objects_are_bounded_and_strict_before_storage ... ok
test store::naming_tests::a_numeric_or_invalid_address_gives_no_name ... ok
test store::naming_tests::an_address_or_hostname_gives_the_machines_name ... ok

test result: ok. 60 passed; 0 failed; 14 ignored; 0 measured; 0 filtered out; finished in 9.60s

     Running tests/access_updates.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/access_updates-53052323e562eb48)

running 8 tests
test compact_identity_support_requires_an_explicit_strict_probe ... ok
test default_tightening_at_1000_peers_fits_one_round_trip ... ok
test negotiated_access_chunk_is_accepted_by_the_strict_action_parser ... ok
test nf_tables_compact_delta_preserves_identity_and_refuses_invalid_bases ... ignored, Run in an isolated user/network namespace with CAP_NET_ADMIN.
test nft_compact_delta_preserves_identity_and_refuses_invalid_bases ... ignored, Run in an isolated user/network namespace with CAP_NET_ADMIN.
test ordinary_up_and_identity_keep_the_legacy_reply_shape ... ignored, requires an isolated user/network namespace
test range_objects_reject_unknown_duplicate_and_positional_fields ... ok
test uniform_changes_fit_one_frame_after_churn_with_distinct_kept_services ... ok

test result: ok. 5 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/authorized_local_binding.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/authorized_local_binding-b0ba79371698e19a)

running 2 tests
test nf_tables_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173.
test nft_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/canonical_host_binding.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/canonical_host_binding-e711cf3ceab9f605)

running 1 test
test enrollment_requires_canonical_host_uuid_spelling ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/configuration.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/configuration-1ba9aa134b7936fb)

running 5 tests
test chunks_fit_body_budget_and_one_peer_delta_does_not_repeat_the_snapshot ... ok
test compiled_chunks_identify_the_server_and_old_snapshots_have_no_proposal ... ok
test edition_default_is_explicit_and_build_selected ... ok
test large_valid_port_policy_is_split_without_a_port_count_cap ... ok
test port_grant_narrows_allow_opens_deny_and_preserves_direction ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.29s

     Running tests/kernel.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/kernel-b9d7e07e114cbf35)

running 6 tests
test bulk_retirement_preserves_identity_and_routes_at_1000_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test created_interface_is_marked_for_restart_adoption ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test policy_table_route_conflict_is_refused ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test real_kernel_chunked_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test real_kernel_ephemeral_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test retired_host_routes_can_be_replayed ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/naming.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/naming-d44028e80092ceee)

running 4 tests
test a_person_takes_an_automatic_name_and_the_machine_moves_aside ... ok
test a_squatter_yields_to_a_host_added_later_and_the_renames_are_audited ... ok
test a_viewer_without_host_facts_does_not_see_reported_hostnames ... ok
test the_servers_names_are_kept_for_the_server ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.18s

     Running tests/policy_enrollment_binding.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/policy_enrollment_binding-75c227a9fb54e935)

running 4 tests
test explicit_binding_preserves_identity_and_clears_removal_only_on_enrollment ... ok
test host_binding_requires_global_authority_and_existing_unrevoked_host ... ok
test noncanonical_host_binding_is_refused ... ok
test refused_enrollment_preserves_removal_and_revision ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.18s

     Running tests/policy_enrollment_identity.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/policy_enrollment_identity-69a7fa4673b70170)

running 1 test
test unbound_enrollment_public_key_is_not_host_authority ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running tests/policy_snapshot_ordering.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/policy_snapshot_ordering-c646b4259a478ea0)

running 6 tests
test nf_tables_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173.
test nf_tables_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173.
test nf_tables_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173.
test nft_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173.
test nft_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173.
test nft_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/presence.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/presence-ea261a44979699ea)

running 2 tests
test an_unchanged_reading_is_not_announced_and_a_lost_session_goes_offline ... ok
test nodes_the_server_sees_are_online_with_their_path_and_named_by_machine ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s

     Running tests/restart_route_ownership.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/restart_route_ownership-f91cbf3125e5a193)

running 1 test
test orphan_route_retirement_preserves_foreign_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_authorized_reenrollment.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/review_authorized_reenrollment-c652db1c78c36ccf)

running 2 tests
test nf_tables_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173.
test nft_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_endpoint_transaction.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/review_endpoint_transaction-ebc100d60783edf7)

running 1 test
test refused_endpoint_persistence_preserves_kernel_endpoint ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_firewall_marker.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/review_firewall_marker-6a53d4cc2a2b41d0)

running 2 tests
test nf_tables_marker_substring_is_not_chain_ownership ... ignored, Run in a disposable user/network namespace, #173.
test nft_marker_substring_is_not_table_ownership ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_ingress_translation.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/review_ingress_translation-26a8eb974397df0c)

running 2 tests
test nf_tables_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test nft_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_local_delivery.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/review_local_delivery-85a98c2a0de72b0d)

running 2 tests
test nf_tables_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test nft_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_mesh_presence_r4.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/review_mesh_presence_r4-c892e66f54b71d7b)

running 3 tests
test a_counter_reset_discards_the_previous_peers_keepalive_classification ... ok
test a_passive_keepalive_does_not_turn_later_silence_into_a_false_offline ... ok
test a_peer_with_25_second_keepalives_stays_online_when_server_keepalives_suppress_its_sends ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_mesh_view_truth.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/review_mesh_view_truth-71d42bc9f3c8b78a)

running 6 tests
test a_hand_set_name_equal_to_the_placeholder_is_kept ... ok
test a_host_record_name_beats_another_machines_reported_hostname ... ok
test a_peer_does_not_stay_online_past_its_session_when_the_server_node_stops_answering ... ok
test a_remote_machine_cannot_be_called_server ... ok
test a_remote_machine_cannot_take_the_servers_hostname ... ok
test an_address_that_is_an_ip_never_becomes_a_name ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.23s

     Running tests/review_mesh_view_truth_r2.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/review_mesh_view_truth_r2-80a2bad78c76cb80)

running 9 tests
test a_hex_ipv4_spelling_never_becomes_a_name ... ok
test a_node_moved_aside_keeps_its_name_on_its_next_attach ... ok
test a_person_can_take_a_name_a_machine_reported ... ok
test a_viewer_without_host_facts_still_sees_distinct_names ... ok
test an_idle_healthy_peer_without_its_own_keepalive_stays_online ... ok
test evidence_a_silent_peer_expires_with_its_session_without_flapping ... ok
test evidence_migration_0026_upgrades_a_realistic_database_without_churn ... ok
test no_viewer_sees_a_remote_machine_called_server ... ok
test the_previous_release_starts_on_a_database_this_release_migrated ... ignored, deploy gate, not code: production rollback restores the database copy (#236)

test result: ok. 8 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.34s

     Running tests/review_mesh_view_truth_r3.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/review_mesh_view_truth_r3-488341cccf25afa7)

running 5 tests
test a_dead_peer_expires_at_session_end_without_inferring_a_sending_promise ... ok
test a_node_moved_aside_by_a_person_is_audited_under_that_person ... ok
test a_non_owner_cannot_confirm_the_servers_hidden_hostname ... ok
test a_scoped_manager_cannot_rename_a_node_outside_their_scope_by_taking_its_name ... ok
test an_idle_peer_that_started_its_session_stays_online_until_it_rekeys ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.20s

     Running tests/review_mesh_view_truth_r4.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/review_mesh_view_truth_r4-a73cddfca2e93724)

running 7 tests
test a_global_manager_cannot_probe_a_hidden_name_by_exhausting_move_aside_names ... ok
test a_name_chosen_while_rewound_survives_rolling_forward_and_reattaching ... ok
test a_scoped_manager_cannot_confirm_a_hidden_reported_hostname ... ok
test evidence_a_refused_move_rolls_back_inventory_audit_and_revision ... ok
test evidence_server_hostname_moves_only_with_server_rename_authority ... ok
test hidden_names_are_indistinguishable_for_every_non_global_node_manager ... ok
test rewind_reconciles_same_spelling_choices_without_freezing_untouched_names ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.57s

     Running tests/review_restart_routes.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/review_restart_routes-c0c7e8b6c3834047)

running 1 test
test restart_retires_orphan_peer_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_retire_ownership.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/review_retire_ownership-21b36c1c525f1f38)

running 7 tests
test retire_checks_every_object_before_deleting_any ... ignored, Run as root in a disposable network namespace with nft.
test retire_decides_every_object_and_leaves_a_foreign_table ... ignored, Run as root in a disposable network namespace with WireGuard and nft.
test retire_leaves_a_foreign_interface_without_failing_the_uninstall ... ignored, Run as root in a disposable network namespace.
test retire_leaves_a_marked_interface_this_installation_never_recorded ... ignored, Run as root in a disposable network namespace.
test retire_leaves_another_installations_interface_and_filter ... ignored, Run as root in a disposable network namespace with WireGuard and nft.
test retire_removes_the_interface_and_filter_this_installation_created ... ignored, Run as root in a disposable network namespace with WireGuard and nft.
test retire_with_a_record_leaves_a_foreign_interface_and_names_it ... ignored, Run as root in a disposable network namespace with WireGuard and nft.

test result: ok. 0 passed; 0 failed; 7 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_reverse_recreation.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/review_reverse_recreation-6d38c3fb56765539)

running 4 tests
test nf_tables_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.
test nf_tables_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.
test nft_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.
test nft_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.

test result: ok. 0 passed; 0 failed; 4 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_revoked_host_policy.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/review_revoked_host_policy-493675b7a79ca70f)

running 1 test
test revoked_host_is_not_retained_in_compiled_peer_policy ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/review_route_inventory.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/review_route_inventory-2be052913f9e2e88)

running 2 tests
test refused_recovery_inventory_save_does_not_retire_kernel_peers_or_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test restart_preserves_unrecorded_direct_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_route_scope.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/review_route_scope-0539357dd2301f8b)

running 1 test
test restart_preserves_operator_gateway_host_route ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_shutdown_budget.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/review_shutdown_budget-1423441593702eda)

running 1 test
test shipping_mesh_down_1000_peers_finishes_within_one_second ... ignored, Run in a dedicated user/network namespace under CPUWeight=10000 with INFRATERNAL_BIN pointing to the shipping release binary.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_shutdown_restart.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/review_shutdown_restart-be3f21c60f64b594)

running 3 tests
test crash_child ... ignored, Child-only fixture for the weighted user/network namespace restart proof.
test refused_journal_retirement_keeps_stopping_until_explicit_retry ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000.
test restart_finishes_interrupted_down_at_1000_peers ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000.

test result: ok. 0 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/settings.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/settings-9e22846e3f8e68e0)

running 1 test
test default_switch_requires_owner_freshness_and_the_preview_revision ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s

     Running tests/store.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/store-6d4f7b5c8e54fbb6)

running 6 tests
test absent_discovery_preserves_the_last_known_endpoint ... ok
test attach_cancelled_at_any_await_leaves_the_store_writable ... ok
test key_replacement_preserves_identity_and_addresses_after_restart ... ok
test removed_host_cannot_restore_membership_without_authorized_enrollment ... ok
test required_server_membership_cannot_be_deleted ... ok
test scale_preview_pages_do_not_allocate_the_pair_matrix ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.12s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal_plugin_relay-47b92256ba7e458c)

running 1 test
test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal_plugin_release-aec3b44056d5d9fc)

running 8 tests
test latest::tests::cancellation_joins_verification ... ok
test latest::tests::startup_reclaims_only_owned_inactive_private_metadata ... ok
test service::tests::api_setting_requires_owner_and_current_fresh_session ... ok
test service::tests::authority_is_rechecked_after_the_setting_write_before_commit ... ok
test service::tests::channel_reads_at_fifty_concurrent_callers ... ignored, run alone under CPUWeight=10000; measures SQLite action overhead, not terminal or full authenticated socket latency
test service::tests::default_stable_refuses_silent_edge_and_persists_explicit_opt_in ... ok
test service::tests::disabled_feature_starts_no_lookup_and_rejects_settings ... ok
test service::tests::object_input_rejects_duplicates_unknown_fields_and_alternate_representations ... ok

test result: ok. 7 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 2.40s

     Running tests/review_pool.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/review_pool-33b687260e254fc2)

running 1 test
test pending_channel_writers_preserve_authority_read_capacity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.61s

     Running tests/review_restart.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/review_restart-ca9f44eb8cb73b10)

running 4 tests
test lookup_creates_private_staging_under_owner_restrictive_umask ... ok
test partial_metadata_restart_child ... ignored, subprocess helper for metadata restart verification
test restarted_latest_reclaims_metadata_after_process_stop ... ok
test restricted_umask_lookup_child ... ignored, subprocess helper for restricted-umask lookup verification

test result: ok. 2 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal_plugin_remote-9d5cf8bf6727606f)

running 113 tests
test inventory::authority_tests::inventory_events_keep_the_subscription_generation ... ok
test inventory::authority_tests::revocation_cancels_a_result_waiting_for_socket_credit ... ok
test inventory::tests::inventory_descriptor_is_valid_for_server_startup ... ok
test inventory::tests::list_input_refuses_parallel_authority_and_noncanonical_cursors ... ok
test remote_bindings::receive_cost_tests::repeated_mesh_ingress_cost_at_one_thousand_retained_histories ... ignored, Component timing on the authorized perf VM under its fair lock; not transport acceptance.
test remote_bindings::tests::a_copy_poll_bounds_work_before_servicing_receive ... ok
test remote_bindings::tests::a_lease_added_while_waiting_is_polled_without_another_primary_datagram ... ok
test remote_bindings::tests::a_negotiated_peer_copies_output_without_a_worker_and_off_cancels_it ... ok
test remote_bindings::tests::admitted_path_proofs_survive_mesh_retirement_and_old_key_lease_drop ... ok
test remote_bindings::tests::alias_retirement_restores_the_previous_reply_socket ... ok
test remote_bindings::tests::alternating_fresh_hints_cannot_amplify_retained_ciphertext ... ok
test remote_bindings::tests::an_encrypted_duplicate_cannot_move_the_reply_route ... ok
test remote_bindings::tests::backup_withdrawal_reconciles_idle_peers_without_canceling_another_return ... ok
test remote_bindings::tests::dropping_one_peer_removes_alternative_work_while_another_peer_lives ... ok
test remote_bindings::tests::enrolled_dual_replies_preserve_primary_and_mesh_sources ... ok
test remote_bindings::tests::lease_installed_during_a_pending_poll_cannot_lose_the_receive_wakeup ... ok
test remote_bindings::tests::legacy_enrolled_return_replay_is_bounded_and_consumed_once ... ok
test remote_bindings::tests::negotiated_enrolled_return_replay_is_bounded_and_consumed_once ... ok
test remote_bindings::tests::peer_route_preserves_the_logical_tuple_and_replays_on_return ... ok
test remote_bindings::tests::replies_follow_the_last_heard_address_and_leases_retire_their_routes ... ok
test remote_bindings::tests::retiring_mesh_lease_cancels_only_queued_alternative_reply ... ok
test remote_bindings::tests::retiring_one_route_preserves_another_peers_enrolled_return ... ok
test remote_bindings::tests::unknown_mesh_reply_waits_for_duplicate_coordinates_and_off_retires_it ... ok
test remote_bindings::tests::wildcard_reply_uses_the_destination_of_the_latest_peer_packet ... ok
test remote_path_copies::tests::arming_after_pending_wakes_the_owned_endpoint_and_clear_drops_it ... ok
test remote_path_copies::tests::cancelling_retired_work_keeps_the_next_send_receive_wakeup ... ok
test remote_path_proof::tests::fixed_header_mac_matches_independent_sha256_vectors ... ok
test remote_path_proof::tests::mixed_aggregation_preserves_all_neighboring_quic_bytes ... ok
test remote_path_proof::tests::only_current_session_response_answers_a_sent_probe ... ok
test remote_path_socket::tests::a_delayed_probe_waiter_keeps_first_send_clock_after_ack_only_traffic ... ok
test remote_path_socket::tests::a_probe_request_latches_before_its_waiter_is_polled ... ok
test remote_path_socket::tests::an_old_ack_only_send_cannot_complete_probe_emission ... ok
test remote_path_socket::tests::an_old_ack_only_send_does_not_start_a_backpressured_probe_deadline ... ignored, timed watchdog ordering proof; run under the perf VM benchmark lock
test remote_path_socket::tests::an_unrelated_reply_cannot_discard_ciphertext_needed_after_a_cut ... ok
test remote_path_socket::tests::backpressure_never_starts_or_replaces_the_probe_send_clock ... ok
test remote_path_socket::tests::cancelling_old_requests_cannot_clear_a_new_probe_generation ... ok
test remote_path_socket::tests::dedicated_receive_preserves_segmented_sends_in_single_datagram_buffers ... ok
test remote_path_socket::tests::exporting_path_keys_never_holds_the_receive_proof_lock ... ok
test remote_path_socket::tests::mesh_route_maps_only_the_trusted_tuple_and_resends_unanswered_datagrams ... ok
test remote_path_socket::tests::negotiated_copies_use_the_enrolled_socket_and_retire_on_return ... ok
test remote_path_socket::tests::segmented_replay_evicts_enough_old_datagrams_to_keep_the_byte_bound ... ok
test remote_path_socket::tests::send_gate_releases_only_one_successful_transmission ... ok
test remote_peer_routes::bench::complete_tag_lookup_at_1000_peers ... ignored, Measure only on the perf VM under its benchmark lock.
test remote_peer_routes::bench::routing_lookup_at_1000_nodes ... ignored, Measure only on the perf VM under its benchmark lock.
test remote_peer_routes::copy_scan_tests::copy_poll_cost_at_one_thousand_retained_histories ... ignored, 31 bookkeeping samples per profile on the authorized perf VM under its fair lock; not transport acceptance.
test remote_peer_routes::copy_scan_tests::history_mutation_after_an_idle_poll_still_sends_every_due_datagram ... ok
test remote_peer_routes::tests::alternative_admission_never_evicts_pending_enrolled_return ... ok
test remote_peer_routes::tests::alternative_backpressure_keeps_one_copy_and_hints_preserve_its_deadline ... ok
test remote_peer_routes::tests::alternative_queue_shares_bounds_and_never_becomes_return_history ... ok
test remote_peer_routes::tests::ciphertext_history_at_1000_peers ... ignored, Measure only on the perf VM: 31 batches of 20000 fresh/duplicate pairs across 1000 peers.
test remote_peer_routes::tests::ciphertext_history_normalizes_gro_batches_and_stays_bounded ... ok
test remote_peer_routes::tests::completed_backup_copies_cannot_be_replayed_as_a_second_return_burst ... ok
test remote_peer_routes::tests::completed_return_entries_stay_consumed_when_new_mesh_history_arrives ... ok
test remote_peer_routes::tests::output_evicting_the_oldest_copy_still_copies_one_bounded_batch ... ok
test remote_peer_routes::tests::replay_is_bounded_for_large_segmented_transmits ... ok
test remote_peer_routes::tests::retiring_an_old_lease_cannot_remove_a_reused_tuple ... ok
test remote_peer_routes::tests::shared_copy_clock_preserves_each_datagrams_deadline ... ok
test remote_peer_routes::tests::unsuccessful_backups_preserve_originals_for_explicit_recovery ... ok
test remote_quic::design_scale_review::authenticated_mesh_health_at_design_scale ... ignored, Perf VM only: distinct physical tuple health at 1000 mTLS connections.
test remote_quic::design_scale_review::authenticated_mesh_health_at_design_scale_100ms ... ignored, Perf VM only: authenticated physical health at 100ms cadence.
test remote_quic::design_scale_review::review_fast_mesh_health_at_design_scale ... ignored, Perf VM only: fast detector at 1000 mTLS connections.
test remote_quic::design_scale_review::review_production_adaptive_health_at_design_scale ... ignored, Perf VM only: production adaptive detector at 1000 mTLS connections.
test remote_quic::mtu_tests::both_directions_keep_a_mesh_safe_payload_after_discovery ... ok
test remote_quic::probe_tests::a_queued_probe_cannot_expire_before_the_socket_emits_it ... ok
test remote_quic::probe_tests::copy_first_ack_only_probes_keep_authenticated_mesh_guard_live ... ignored, Physical 15ms/30ms guard comparison on the perf VM under its benchmark lock.
test remote_quic::probe_tests::copy_first_ack_only_requested_ack_delay_five_ms_comparison ... ignored, ACK-delay hypothesis comparison on the quiet perf VM under its benchmark lock.
test remote_quic::probe_tests::copy_first_real_mesh_originals_do_not_strand_the_authenticated_mesh_guard ... ok
test remote_quic::probe_tests::enrolled_copy_replies_cannot_keep_a_dead_mesh_path_alive ... ok
test remote_quic::probe_tests::healthy_path_proofs_keep_the_configured_polling_interval ... ok
test remote_quic::probe_tests::lost_path_proof_spends_its_reserved_retry_margin ... ok
test remote_quic::probe_tests::review_invalid_mesh_packets_cannot_borrow_enrolled_authentication ... ignored, Perf VM only: real socket scheduling and path-response deadline.
test remote_quic::tests::acknowledged_idle_survives_and_replayed_packets_cannot_mask_failure ... ok
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test remote_quic::tests::mesh_liveness_keeps_authentication_and_refuses_invalid_intervals ... ok
test remote_quic::tests::one_way_authenticated_output_keeps_the_path_fresh ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_renewal::tests::credential_snapshot_does_not_block_async_reconnect ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test remote_tls::tests::outgoing_tcp_detects_a_vanished_peer_without_application_traffic ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test runtime_lock::tests::a_live_legacy_runtime_cannot_publish_an_unheld_lifetime_file ... ok
test runtime_lock::tests::cleanup_admission_prevents_starting_even_if_runtime_lock_was_removed ... ok
test runtime_lock::tests::dump_datagrams_split_exactly ... ok
test runtime_lock::tests::dump_records_accept_only_known_shapes ... ok
test runtime_lock::tests::foreign_inode_twin_inner ... ignored, runs inside the namespace prepared by the foreign-inode test
test runtime_lock::tests::internal_dispatch_checks_exact_argument_counts ... 2
ok
test runtime_lock::tests::internal_dispatch_reads_only_the_normal_command_name ... ok
test runtime_lock::tests::legacy_bound_endpoint_on_a_split_device_filesystem_is_kept ... 
running 1 test
test runtime_lock::tests::split_device_inner ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 112 filtered out; finished in 0.00s

ok
test runtime_lock::tests::legacy_inspection_finds_a_real_bound_socket ... ok
test runtime_lock::tests::legacy_inspection_is_independent_of_the_bound_name ... ok
test runtime_lock::tests::lifetime_contention_preserves_would_block ... ok
test runtime_lock::tests::lifetime_precedes_bind_and_survives_until_last_description_closes ... ok
test runtime_lock::tests::lock_links_and_replacements_are_refused ... ok
test runtime_lock::tests::managed_start_refuses_another_host_and_an_unfinished_receipt ... ok
test runtime_lock::tests::session_inspection_finds_bound_endpoints_by_identity ... ok
test runtime_lock::tests::split_device_inner ... ignored, runs inside the namespace prepared by the split-device test
test runtime_lock::tests::stale_session_endpoint_is_not_held_live_by_a_foreign_inode_twin ... 
running 1 test
test runtime_lock::tests::foreign_inode_twin_inner ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 112 filtered out; finished in 0.00s

ok
test runtime_lock::tests::unavailable_lock_support_does_not_claim_a_live_holder ... ok
test uninstall::tests::a_failed_kernel_check_stops_cleanup_before_the_service ... ok
test uninstall::tests::accepted_handoff_runs_on_a_thread_without_an_async_runtime ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test uninstall::tests::file_removal_keeps_what_setup_did_not_create ... ok
test uninstall::tests::manual_uninstall_refuses_another_hosts_installation ... ok
test uninstall::tests::replies_name_the_objects_left_as_valid_json ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test uninstall::tests::review_failed_launcher_leaves_no_plan ... ok
test uninstall::tests::review_planted_plan_is_never_followed ... ok
test uninstall::tests::uninstall_and_setup_exclude_each_other ... ok
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok

test result: ok. 98 passed; 0 failed; 15 ignored; 0 measured; 0 filtered out; finished in 14.50s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal_plugin_ssh-9c4623776f228fdb)

running 46 tests
test auth_evidence::tests::later_local_key_receipt_supersedes_an_earlier_banner ... ok
test auth_evidence::tests::partial_and_malformed_receipts_are_not_method_evidence ... ok
test auth_evidence::tests::receipt_is_identical_at_every_chunk_boundary ... ok
test auth_evidence::tests::selected_local_authentication_diagnostics_keep_method_at_every_boundary ... ok
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok
test auth_order::tests::only_exact_generated_read_only_checks_can_choose_credentials ... ok
test bootstrap::proof_tests::failed_published_facts_clean_only_the_private_probe_and_never_commit ... ok
test bootstrap::proof_tests::published_proofs_start_together_and_commit_requires_both ... ok
test bootstrap::proof_tests::review_stopped_commit_channel_finishes_the_private_probe ... ok
test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test duplex::tests::closed_receipt_channel_is_reported_as_unreachable ... ok
test duplex::tests::duplex_preserves_binary_bytes_in_both_directions ... ok
test install::tests::compaction_drops_only_comment_lines_and_indentation ... ok
test install::tests::embedded_setup_programs_have_no_constructs_compaction_would_change ... ok
test install::tests::transfer_caps_accept_only_the_fixed_record ... ok
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok
test model::failure_serialization_tests::uuid_reference_uses_the_outcome_specific_wire_key ... ok
test model::failure_serialization_tests::wire_format_is_exact_and_failure_stays_small ... ok
test payload::tests::concurrent_adds_share_the_cached_digest_allocation ... ok
test payload::tests::payload_hash_cache_at_1600_adds ... ignored, #190 public payload hash/cache measurements on the locked perf VM only
test payload::tests::replacement_and_removal_never_reuse_a_path_name_digest ... ok
test payload::tests::same_size_in_place_edits_with_restored_mtime_invalidate_the_digest ... ok
test payload::tests::settings_changes_keep_at_most_four_entries ... ok
test payload_encoding::tests::binary_replacement_never_reuses_the_previous_encoding ... ok
test payload_encoding::tests::gzip_roundtrip_and_repeated_adds_share_one_encoding ... ok
test payload_encoding::tests::small_payloads_retain_raw_streaming ... ok
test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test prompt_image::tests::helper_identity_refuses_in_place_and_path_replacement ... ok
test session_bridge::tests::failed_dispatcher_does_not_publish_a_session ... ok
test session_bridge::tests::publication_and_dispatcher_greeting_share_the_first_write ... ok
test session_bridge::tests::publication_prefix_preserves_every_dispatcher_byte_across_reads ... ok
test setup::tests::exhausted_setup_failure_retains_reason_without_offering_retry ... ok
test setup::tests::host_status_outlives_its_subscriber_and_keeps_exact_identity ... ok
test socket_connector::tests::connected_socket_has_nodelay_before_any_application_bytes ... ok
test socket_connector::tests::descriptor_delivery_keeps_the_exact_peer_after_helper_copy_closes ... ok
test socket_connector::tests::invalid_endpoint_cannot_send_a_descriptor ... ok
test stdio::tests::pipes_preserve_bytes_and_do_not_escape_into_child_exec ... ok
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok

test result: ok. 44 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.22s

     Running tests/already_added_breakit.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/already_added_breakit-99b38edbed8cc7cb)

running 1 test
test a_host_key_challenge_never_serializes_as_a_host_id ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/auth_order-7f1c9d76494c5086)

running 11 tests
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test automatic_checked_channel_selects_bridge_after_read_only_authentication ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test manual_hosts_try_available_methods_without_a_separate_none_refusal ... ok
test manual_method_trust_refusal_never_loads_later_credentials ... ok
test only_exhausted_auth_returns_typed_choose_method ... ok
test ownership_check_fallback_repeats_only_the_allowlisted_read_only_command ... ok
test ownership_checks_authenticate_once_without_replaying_a_different_check ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok

test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/build_removal-36fc813e5dfe0bb4)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.44s

     Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/concurrency-1637a17738b74cc3)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test component_off_retires_a_real_native_helper ... ok
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/config_isolation-5136cd71a92e1d23)

running 2 tests
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok
test synthetic_master_socket_is_private_at_creation ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/credentials-3016d009da101052)

running 4 tests
test credential_helper_refuses_host_trust_and_permission_prompts ... ok
test kernel_running_helper_is_materialized_in_its_private_scope ... ok
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok
test password_socket_refuses_an_unrelated_same_user_process ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.05s

     Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/diagnostics-8016ef45d5daacbd)

running 12 tests
test bootstrap_status_mapping_covers_each_step_and_approved_mode ... ok
test control_probe_statuses_preserve_actionable_setup_messages ... ok
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok
test engine_failures_keep_their_ssh_boundary_without_remote_bytes ... ok
test every_failed_step_names_the_step_and_a_next_action ... ok
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok
test failure_diagnostics_distinguish_auth_trust_transport_and_channel_without_raw_text ... ok
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok
test script_status_diagnostics_are_honest_for_all_nonzero_codes ... ok
test status_mapping_preserves_authentication_and_missing_payload_classification ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/event_metadata-735e17f4e6c1e8dc)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/foreground-0f3aada5376df028)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s

     Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/host_trust-f2c4b08665836335)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/install-41cb897cde3a5ed0)

running 95 tests
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test active_transaction_is_live_between_ssh_setup_commands ... ok
test breakit2_interrupted_lock_creation_allows_cleanup_and_retry ... ok
test breakit2_rollback_preserves_foreign_launcher_new ... ok
test breakit2_rollback_preserves_foreign_unit_new ... ok
test breakit2_stage_refuses_parent_that_cannot_be_rolled_back ... ok
test buffering_setup_reader_receives_no_payload_until_selection ... ok
test checked_staging_survives_a_buffering_payload_reader_and_reuses_the_cache ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test command_failure_names_upload_join_install_and_start_separately ... ok
test commit_signal_retains_journal_until_proof_and_on_cancel ... ok
test compound_activation_and_start_failures_keep_exact_step_and_rollback ... ok
test compound_join_failure_preserves_the_original_status_and_boundary ... ok
test compound_restaging_refuses_a_foreign_journal_before_upload ... ok
test compound_setup_keeps_owned_rollback_and_linger_warning ... ok
test compressed_stage_roundtrips_and_rejects_corruption_before_execution ... ok
test concurrent_attempts_cannot_replace_or_clean_each_others_transaction ... ok
test control_cleanup_never_follows_a_socket_symlink_or_removes_regular_data ... ok
test crash_mid_install_can_roll_back_and_retry ... ok
test declared_transfer_refuses_a_different_selection_or_a_named_refusal ... ok
test declared_transfer_sends_the_payload_before_any_selection_receipt ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test duplex_check_refuses_named_failures_and_oversized_records_before_staging ... ok
test earlier_attempt_classification_preserves_status_boundary_and_authentication ... ok
test earlier_attempt_records_reject_suffixes_truncation_and_unbounded_counts ... ok
test earlier_binary_cache_is_refreshed_before_owned_recovery ... ok
test earlier_control_socket_receipt_recovers_before_a_new_setup ... ok
test early_staging_preserves_canonical_foreign_root_refusal ... ok
test enrollment_process_exit_71_is_not_reported_as_directory_refusal ... ok
test every_setup_command_fits_one_kernel_argument_in_both_modes ... ok
test facts_timeout_retires_stale_plugin_control_socket_before_retry ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test foreign_data_refusal_retains_exit_status_and_actionable_directory ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test framed_join_refusal_keeps_status_separate_from_upload ... ok
test framed_receipts_preserve_upload_failures_and_reject_extra_output ... ok
test framed_upload_keeps_invitation_after_verified_raw_and_compressed_payloads ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test full_payload_restaging_preserves_the_running_session_build ... ok
test full_stage_frees_payload_before_allocating_a_cleanup_receipt ... ok
test installed_infraternal_agent_always_restarts_without_start_limit ... ok
test interrupted_acquisition_cleanup_receipt_can_resume ... ok
test interrupted_control_cleanup_is_resumed_only_by_its_original_attempt ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test known_failed_setup_finishes_without_a_second_confirmation ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test live_setup_retry_preserves_the_bridge_and_host_identity_state ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test missing_payload_preserves_the_bootstrap_binary_remedy ... ok
test negotiated_retry_reuses_only_a_verified_cache_after_activation_refusal ... ok
test negotiated_transfer_delivers_the_invitation_after_a_buffering_head ... ok
test one_command_channel_carries_check_verified_upload_and_bridge_bytes ... ok
test optional_session_payload_is_architecture_scoped_and_refuses_symlinks ... ok
test partial_full_upload_rebridges_from_a_verified_image ... ok
test payload_reuse_never_adopts_a_foreign_cache_directory ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test reported_cache_digest_selects_reuse_without_sending_payload ... ok
test restart_recovers_partial_stage_retirement ... ok
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test retry_resends_payload_when_cache_content_changes ... ok
test retry_reuses_verified_payload_after_owned_rollback ... ok
test review_inode_reuse_after_diagnostics_preserves_live_replacement ... ok
test review_interrupted_transaction_receipt_allows_owned_cleanup ... ok
test review_live_relative_control_socket_preserves_its_receipt ... ok
test review_restart_recovers_cleanup_after_base_retirement ... ok
test review_restart_recovers_cleanup_after_owner_retirement ... ok
test review_unrelated_user_relative_socket_does_not_block_stale_cleanup ... ignored, requires sudo -n to create an isolated listener as uid 65534
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok
test session_restaging_uses_one_compound_command ... ok
test setup_receipts_require_exact_order_and_preserve_failure_boundaries ... ok
test setup_transaction_holds_a_live_lock_between_shell_commands ... ok
test staged_shell_bridge_keeps_protocol_bytes_and_releases_setup_guard ... ok
test stale_previous_attempt_socket_can_be_retired_without_manual_cleanup ... ok
test start_fresh_resumes_the_same_attempt_after_owner_confirmation ... ok
test stopped_control_socket_modes_from_service_manager_are_recoverable ... ok
test streamed_digest_refuses_a_short_file_or_a_changed_stream_before_launch ... ok
test streaming::decoded_image_and_hash_advance_before_the_transfer_tail_is_released ... ok
test successful_stage_releases_the_parent_lock_from_its_lease_child ... ok
test turning_off_paused_host_provisioning_preserves_earlier_leftovers ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok

test result: ok. 94 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 59.65s

     Running tests/mesh_ssh.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/mesh_ssh-280b4a3d88f915bc)

running 1 test
test network_identity_connect_check_and_changed_key_refusal ... ignored, requires the Go interoperability fixture; run research/ssh-client/mesh-fixture/run

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/model.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/model-1495450aa1e090c5)

running 6 tests
test addresses_never_become_options_or_shell_syntax ... ok
test check_is_exact_bounded_and_rejects_every_truncation ... ok
test consent_and_credential_references_are_the_only_request_authority ... ok
test passwordless_sudo_keeps_default_rootless_without_explicit_consent ... ok
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok
test start_fresh_is_declared_as_an_owned_host_provisioning_action ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/payload_source.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/payload_source-2c319be05840be68)

running 2 tests
test stalled_download_retains_the_named_step_before_the_attempt_deadline ... ok
test verification_failure_names_step_and_stops_before_upload ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/previous_attempt_liveness_review.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/previous_attempt_liveness_review-48e389662ef4f40f)

running 1 test
test home_alias_keeps_open_setup_descriptor_live ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.34s

     Running tests/previous_attempt_shell.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/previous_attempt_shell-ea23fd99bd99c666)

running 1 test
test shared_ownership_shell_preserves_recovery_and_refusal_invariants ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 12.60s

     Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/probe_check-1c2c88386281f5f7)

running 3 tests
test breakit2_no_systemd_names_the_required_manager ... ok
test manager_availability_does_not_request_its_private_environment ... ok
test shell_startup_refusal_names_an_interactive_only_remedy ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s

     Running tests/process.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/process-2394f677df3eba95)

running 10 tests
test cancellation_retires_the_helper_descendant_too ... ok
test completed_helper_retires_descendants_with_closed_pipes ... ok
test declared_payload_flows_before_receipts_and_private_input_waits ... ok
test declared_selection_mismatch_and_missing_verification_withhold_private_input ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok
test negotiated_sources_require_an_exact_receipt_before_private_input ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok
test review_compound_refusal_preserves_receipt_when_invitation_pipe_closes ... ok
test reviewer_ssh_helper_does_not_inherit_server_reload_mask ... ok
test unavailable_negotiated_codec_never_sends_invitation ... ok

test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.50s

     Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/proxy_policy-95eaca5955b4de54)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/publication.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/publication-c8f03565e3a56074)

running 4 tests
test encoding_warmup_resolves_admitted_source_images_instead_of_configured_paths ... ok
test refused_publication_reports_failure_to_the_waiting_wizard ... ok
test retry_reopens_ssh_after_transport_loss_and_keeps_the_published_shell ... ok
test signed_session_is_typable_before_full_resolution_and_late_failure_retries_the_same_shell ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/real_ssh-e4eb9fc1f871e6b5)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/recovery_support.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/recovery_support-04633aa0d48ae329)
Private socket fixture: uid=1001 scratch=/mnt; capabilities dropped before test

running 12 tests
test cleanup_holds_runtime_lock_until_all_receipts_retire ... ok
test cleanup_script_requires_the_shipped_helper_level ... ok
test legacy_control_socket_in_newline_home_preserves_receipt ... ok
test legacy_control_socket_in_spaced_home_preserves_receipt ... ok
test legacy_control_socket_through_absolute_alias_preserves_receipt ... ok
test private_legacy_control_socket_preserves_receipt ... ok
test review_bound_control_socket_before_listen_preserves_receipt ... ok
test review_cached_helper_without_session_mode_asks_for_a_refresh ... ok
test review_live_session_socket_in_newline_home_blocks_cleanup ... ok
test review_live_session_socket_in_plain_home_blocks_cleanup ... ok
test review_stale_receipt_recovers_without_host_python ... ignored, requires sudo -n Docker and the local debian:trixie-slim image
test unrelated_same_user_relative_socket_does_not_block_cleanup ... ok

test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 4.33s

     Running tests/shadow_banner.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/shadow_banner-390b0804ed5bea42)

running 1 test
test a_long_pre_authentication_banner_does_not_refuse_the_host ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s

     Running tests/shell_quoting.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/shell_quoting-e6b49b46dffcbe90)

running 1 test
test nested_scripts_preserve_bytes_without_expanding_public_text ... ignored, run on the owned disposable target with all supported login shells installed

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/single_connection-82df5df57e5d8a67)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/source_completeness-17850d7f3f46c0fe)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/trust_round2-acef8625a04561d9)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 8 tests
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok
test stream_tests::split_mux_header_preserves_trailing_close ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok
test tests::marked_input_preserves_legacy_bytes_and_bounds_reply_body ... ok
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal_server-1b97e649abad9095)
Private socket fixture: uid=1001 scratch=/mnt; capabilities dropped before test

running 629 tests
test auth::cookies::measurement::cookie_latency_at_50_sessions ... ignored, local optimized cookie reader measurement at 50 browser sessions
test auth::cookies::tests::duplicates_missing_invalid_and_nontext_fail_closed ... ok
test auth::cookies::tests::joined_split_reordered_and_other_cookies ... ok
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::migration_compat_tests::committed_retag_can_resume_after_interruption_and_concurrent_startup ... ok
test auth::migration_compat_tests::dev_history_keeps_its_mesh_checksum_and_data ... ok
test auth::migration_compat_tests::dirty_production_migration_is_refused_without_retagging ... ok
test auth::migration_compat_tests::fresh_history_has_unique_versions_and_both_schemas ... ok
test auth::migration_compat_tests::live_production_retirement_history_survives_dev_upgrade ... ok
test auth::migration_compat_tests::occupied_destination_leaves_the_production_ledger_unchanged ... ok
test auth::migration_compat_tests::production_history_keeps_index_checksum_and_data ... ok
test auth::migration_compat_tests::unrecognized_checksum_is_refused_without_retagging ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::tests::ca_administration_tests::audit_tests::private_copy_persistence_contains_only_ciphertext_and_public_metadata ... ok
test auth::tests::ca_administration_tests::audit_tests::unlock_audit_cost_at_1000_memberships ... ignored, real 100-unlock/1000-membership audit formatting diagnostic; no own builds or browsers
test auth::tests::ca_administration_tests::audit_tests::unlock_audit_records_principal_time_outcome_without_material ... ok
test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::audit_tests::ca_start_budget_is_shared_by_routes_and_cookies_but_not_status_or_finish ... ok
test auth::tests::ca_administration_tests::http_tests::audit_tests::sequential_unlock_starts_require_a_temporal_budget ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::signed_deploy_preserves_passkey_ca_and_live_sessions ... ignored, exclusive perf VM staging proof; requires signed run artifacts and systemd
test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::staging_browser_services_probes_between_commands ... ignored, root shipping binary functional proof; requires INFRATERNAL_TEST_BINARY and private CA test root
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::authority_stall_soak::authority_fast_read_echo_rtt ... ignored, measurement for #240; run explicitly on the perf VM
test auth::tests::socket_tests::authority_stall_soak::authority_stall_soak ... ignored, measurement for #240; run explicitly on the perf VM
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::close_logging::agent_stream_loss_logs_its_safe_close_reason_and_reaches_the_browser ... ok
test auth::tests::socket_tests::close_logging::authority_read_timeout_during_a_frame_logs_authority_unavailable ... ok
test auth::tests::socket_tests::close_logging::browser_websocket_close_logs_its_code_and_safe_reason_for_attached_sessions ... ok
test auth::tests::socket_tests::close_logging::failed_client_resume_attempt_logs_each_retained_session ... ok
test auth::tests::socket_tests::close_logging::rootless_attach_without_a_live_peer_logs_the_host_and_keeps_the_socket_up ... ok
test auth::tests::socket_tests::close_logging::session_lookup_store_error_logs_authority_unavailable ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::plugin_lifecycle::plugin_exchange_correlates_results_after_subscription_events ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok
test auth::tests::socket_tests::restart_open_liveness_review::responsive_socket_survives_a_held_terminal_open_with_an_existing_attachment ... ok
test auth::tests::socket_tests::review_authority_retry::renewing_retries_do_not_drain_the_pool_during_a_write_stall ... ok
test auth::tests::socket_tests::review_authority_retry::session_expiring_during_the_wait_is_not_revived_or_served ... ok
test auth::tests::socket_tests::review_close_log::attaches_to_unowned_session_ids_cannot_flood_the_close_log ... ok
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_input_credit::browser_input_overload_retires_only_the_terminal_stream ... ok
test auth::tests::socket_tests::review_input_credit::browser_output_credit_refusal_logs_the_stream_reason ... ok
test auth::tests::socket_tests::review_input_credit::idle_browser_probes_do_not_renew_or_poll_session_authority ... ok
test auth::tests::socket_tests::review_input_credit::idle_probe_authority_cancels_waiting_write_on_committed_revocation ... ok
test auth::tests::socket_tests::review_input_credit::idle_probe_authority_refreshes_expiry_after_authorized_activity ... ok
test auth::tests::socket_tests::review_input_credit::idle_server_probes_do_not_renew_session_authority ... ok
test auth::tests::socket_tests::review_input_credit::pending_browser_input_counts_against_slots_and_cancels_on_drop ... ok
test auth::tests::socket_tests::review_input_credit::pending_browser_input_has_a_wire_byte_bound ... ok
test auth::tests::socket_tests::review_input_credit::review_full_input_writer_preserves_browser_control_progress ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket ... ok
test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close ... ok
test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery ... ok
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::socket_tests::transient_authority_stall::authority_read_stall_beyond_the_wait_still_fails_closed ... ok
test auth::tests::socket_tests::transient_authority_stall::authority_read_stall_shorter_than_the_wait_keeps_the_socket_and_its_order ... ok
test auth::tests::socket_tests::transient_authority_stall::teardown_does_not_renew_the_session ... ok
test auth::tests::socket_tests::transient_authority_stall::teardown_with_a_busy_store_does_not_wait_for_authority ... ok
test auth::tests::socket_tests::transient_authority_stall::terminal_stream_survives_authority_stalls_without_loss_or_reorder ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser ... ok
test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies ... ok
test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test bootstrap_api::tests::setup_status_tests::late_setup_subscriber_receives_failure_and_retry_completion ... ok
test bootstrap_api::tests::setup_status_tests::setup_replay_outlives_its_socket_and_logout_retires_delivery ... ok
test bootstrap_api::tests::split_cookie_fields_preserve_bootstrap_owner_authority ... ok
test bootstrap_api::tests::start_fresh_request_is_bound_to_a_target_and_public_challenge ... ok
test bootstrap_runtime::failure_log_tests::one_line_contains_only_classified_public_coordinates ... ok
test bootstrap_runtime::failure_log_tests::start_fresh_logs_only_the_exact_public_ownership_journal_and_outcome ... ok
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test bootstrap_runtime::remote_backend::admission_tests::installed_admission_waits_for_the_active_route ... ok
test bootstrap_runtime::remote_backend::canary_tests::cancellation_keeps_the_owned_session_available_for_cleanup ... ok
test bootstrap_runtime::remote_backend::canary_tests::failed_attachment_finishes_the_private_command ... ok
test bootstrap_runtime::remote_backend::canary_tests::private_writers_reserve_the_browser_allocator_without_publishing_sessions ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_primary_exit_without_reattaching_to_a_retired_session ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::already_added_breakit::a_non_owner_session_never_learns_the_owners_host_id ... ok
test bootstrap_runtime::remote_backend::tests::already_added_breakit::a_revoked_host_never_names_its_id ... ok
test bootstrap_runtime::remote_backend::tests::already_added_breakit::the_typed_address_decides_which_host_is_named_when_two_match ... ok
test bootstrap_runtime::remote_backend::tests::automatic_cleanup_requires_the_exact_failed_server_host_binding ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_concurrent_same_destination_issues_only_one_invitation ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::breakit2_live_ssh_install_join_and_terminal ... ignored, #169 live disposable Docker target; invoke docs/verification/addhost-breakit2/measure.py
test bootstrap_runtime::remote_backend::tests::breakit2_live::compound_retry_fixture_reaches_install_boundary ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::live_fixture_keeps_authority_after_connection_retirement ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::live_fixture_keeps_the_full_image_and_selects_the_explicit_session_image ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::provisioning_https_uses_production_tcp_admission ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_unpublished_invitation_retires_durable_authority ... ok
test bootstrap_runtime::remote_backend::tests::cancelled_invitation_after_commit_retires_its_host_record ... ok
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::destination_reservation_admission_at_1600_pending_hosts ... ignored, #169 local bounded-journal scale evidence under CPUWeight scope
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_runtime::remote_backend::tests::retirement_contention::cancelled_invitation_retires_after_sqlite_busy_timeout ... ok
test bootstrap_runtime::remote_backend::tests::review_cleanup::review_cancelled_committed_invitation_survives_temporary_writer_contention ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok
test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test ca_handoff::shipping_tests::browser_client::tests::probes_are_answered_without_assertion_reads_and_drop_closes_the_socket ... ok
test ca_handoff::shipping_tests::shipping_child ... ok
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY
test ca_handoff::tests::exec_child ... ok
test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok
test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok
test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok
test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok
test ca_http::intake_tests::chunked_intake_is_bounded_before_parsing ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test ca_memory::tests::unavailable_secure_heap_refuses_root_and_warns_for_nonroot ... ok
test ca_update_audit_tests::every_ciphertext_byte_and_tag_mutation_refuses_without_material_in_errors ... ok
test ca_update_audit_tests::handoff_descriptor_is_close_on_exec_and_prepare_failure_preserves_source ... ok
test ca_update_audit_tests::handoff_memory_protection_failure_keeps_the_existing_signer ... ok
test ca_update_audit_tests::no_timer_locks_signing_and_wrong_issuer_cannot_replace_the_unlocked_source ... ok
test ca_update_audit_tests::secure_heap_capacity_at_10000_live_keys ... ignored, isolated secure heap sizing at 10000 live keys; run with no own builds/browser overlap
test ca_update_audit_tests::unlocked_signer_requires_persistent_locked_pages ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok
test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test embedded::exit_latency_tests::shim_sigkill_to_server_inventory_latency ... ignored, real daemon artifact and 200 shim exits; run with INFRATERNAL_BIN in a weighted scope
test embedded::priming::flights::tests::queued_sibling_failure_stays_owned_until_the_actor_observes_it ... ok
test embedded::priming::flights::tests::stop_preserves_finished_success_and_identifies_unpolled_cancellation ... ok
test embedded::priming::header_tests::blocked_promotion_header_does_not_stop_actor_control_progress ... ok
test embedded::priming::header_tests::promoted_owned_attach_opens_a_missing_native_writer_binding ... ok
test embedded::priming::header_tests::promotion_never_publishes_an_unstarted_shadow_flight_as_credited ... ok
test embedded::priming::tests::abandoned_preparation_cancels_even_before_the_owned_task_first_polls ... ok
test embedded::priming::tests::flow_control_blocked_shadow_does_not_stop_actor_control_progress ... ok
test embedded::priming::tests::later_input_is_hedged_without_resending_the_first_suffix ... ok
test embedded::priming::tests::overlap_and_stale_snapshot_do_not_spend_browser_credit ... ok
test embedded::priming::tests::shadow_input_and_snapshot_credit_have_independent_bounded_windows ... ok
test embedded::priming::tests::snapshot_notice_precedes_repaint_and_duplicates_spend_no_browser_credit ... ok
test embedded::priming::tests::stream_reuse_waits_for_the_retired_flight_to_join ... ok
test embedded::regressions::actor_batch_probes_every_ready_route_without_payload_notifications ... ok
test embedded::regressions::agent_link_loss_invalidates_the_last_live_session_snapshot ... ok
test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok
test embedded::regressions::credit_tests::retained_input_credit_parks_only_the_full_writer_until_its_ack ... ok
test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::expired_route_retires_full_consumer ... ok
test embedded::regressions::expired_route_waits_for_browser_authority_before_rebind ... ok
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test embedded::regressions::greeted_links_that_die_young_escalate_the_actor_retry_delay ... ok
test embedded::regressions::half_open_infraternal_agent_route_loses_inventory_without_eof ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test embedded::regressions::idle_route_proofs_do_not_queue_payload_notifications_at_capacity ... ok
test embedded::regressions::liveness_doubt_breakit_r2_tests::a_pinned_dead_host_retires_within_two_ceilings_without_doubt ... ok
test embedded::regressions::liveness_doubt_breakit_r2_tests::a_window_that_reconnects_mid_doubt_is_told_and_recovered ... ok
test embedded::regressions::liveness_doubt_breakit_r2_tests::doubt_retry_sends_one_notice_per_window_per_episode ... ok
test embedded::regressions::liveness_doubt_breakit_tests::a_window_full_at_doubt_start_is_told_on_a_later_tick ... ok
test embedded::regressions::liveness_doubt_breakit_tests::doubt_and_retire_times_per_rtt ... ok
test embedded::regressions::liveness_doubt_breakit_tests::inflated_host_link_still_retires_a_dead_host_within_four_seconds ... ok
test embedded::regressions::liveness_doubt_breakit_tests::queued_path_at_the_ceiling_does_not_flap_doubt_every_probe ... ok
test embedded::regressions::liveness_doubt_breakit_tests::retired_doubt_never_confirms_a_replacement_link_mid_replay ... ok
test embedded::regressions::native_input_retention_leaves_terminal_probes_to_the_route ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test embedded::regressions::path_tests::full_ack_releases_retention_and_duplicate_input_is_not_replayed ... ok
test embedded::regressions::path_tests::full_retention_replays_as_legal_frames_with_contiguous_offsets ... ok
test embedded::regressions::path_tests::initial_attachment_keeps_input_cut_through_before_its_first_ack ... ok
test embedded::regressions::path_tests::input_retention_cost_at_200_terminals ... ignored, Run alone on the perf VM under the shared benchmark lock.
test embedded::regressions::path_tests::input_retention_refuses_excess_before_advancing_the_cursor ... ok
test embedded::regressions::path_tests::replacement_replays_only_the_unacknowledged_suffix_and_queued_input ... ok
test embedded::regressions::path_tests::reply_queue_deadline_and_live_reply_do_not_change_typing_offsets ... ok
test embedded::regressions::path_tests::review_pending_input_limit_retires_only_its_attachment ... ok
test embedded::regressions::plugin_control_notice_preserves_capability_invalidation ... ok
test embedded::regressions::query_reply_compatibility_notice_is_strict_and_session_bound ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovered_route_ignores_stale_browser_rebind ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::replay_complete_notice_is_accepted_by_embedded_server ... ok
test embedded::regressions::resumed_writer_closes_previous_route_before_shared_stream_reuse ... ok
test embedded::regressions::resumed_writer_for_other_session_preserves_live_route ... ok
test embedded::regressions::saturated_control_pong_does_not_retire_connection ... ok
test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok
test embedded::writes::tests::bounded_lane_metadata_and_flight_sizes ... ok
test embedded::writes::tests::cached_promotion_ack_never_replays_inside_the_actor ... ok
test embedded::writes::tests::enabling_owned_writes_preserves_unsent_replacement_input ... ok
test embedded::writes::tests::full_control_lane_keeps_all_terminal_owner_slots_available ... ok
test embedded::writes::tests::promotion_headers_preserve_attach_credit_ack_input_order ... ok
test embedded::writes::tests::saturated_control_queue_preserves_fifo_and_shutdown_owns_flights ... ok
test embedded::writes::tests::socket_completion_cannot_spend_unacknowledged_writer_credit ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test enrollment::bootstrap_retirement::ownership_regression::retirement_requires_an_unfinished_intent ... ok
test enrollment::bootstrap_retirement::tests::proven_completion_is_owner_bound_and_survives_restart ... ok
test enrollment::bootstrap_retirement::tests::retirement_consumes_only_its_owned_intent_with_the_tombstone ... ok
test enrollment::bootstrap_retirement::tests::startup_preserves_a_published_live_session_and_its_setup_intent ... ok
test enrollment::bootstrap_retirement::tests::startup_retires_only_unfinished_provisioning_and_is_idempotent ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test liveness::tests::a_doubt_recovered_at_the_ceiling_pins_until_the_path_drains ... ok
test liveness::tests::a_recovered_doubt_below_the_ceiling_keeps_early_notice ... ok
test liveness::tests::a_reply_during_doubt_clears_it_and_renews_the_route ... ok
test liveness::tests::an_unanswered_host_link_retires_at_the_startup_grace_without_doubt ... ok
test liveness::tests::delayed_server_probe_does_not_expire_an_answered_route ... ok
test liveness::tests::healthy_reply_survives_a_150ms_server_stall ... ok
test liveness::tests::host_allowance_covers_one_loss_recovery_and_browser_routes_keep_theirs ... ok
test liveness::tests::host_allowance_has_a_floor_a_settled_long_haul_value_and_a_ceiling ... ok
test liveness::tests::host_link_doubts_on_the_first_miss_and_retires_on_the_second ... ok
test liveness::tests::jitter_allowance_decays_after_the_link_settles ... ok
test liveness::tests::late_native_probe_keeps_its_unissued_reply_allowance ... ok
test liveness::tests::missing_replies_expire_even_with_probes_in_flight ... ok
test liveness::tests::pipelined_requests_do_not_renew_an_outstanding_deadline ... ok
test liveness::tests::quiet_dead_peer_expires_within_floor_plus_one_interval ... ok
test liveness::tests::ready_reply_only_pulls_forward_an_answered_probe_after_one_tick ... ok
test liveness::tests::recent_application_progress_preserves_the_first_tick_cadence ... ok
test liveness::tests::restarting_monitoring_never_reuses_an_old_issued_probe ... ok
test liveness::tests::serial_probe_accepts_a_timely_rtt_step_without_renewing_unsolicited_replies ... ok
test liveness::tests::serial_probe_deadline_includes_only_one_gap_and_the_estimated_allowance ... ok
test liveness::tests::terminal_routes_still_end_their_lease_on_the_first_miss ... ok
test liveness::tests::variation_uses_the_previous_smoothed_sample ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test mesh_api_tests::storage_diagnostics::changed_storage_failure_reports_the_previous_count ... ok
test mesh_api_tests::storage_diagnostics::coordinator_clones_share_failure_counts_and_report_recovery ... ok
test mesh_api_tests::storage_diagnostics::coordinator_loading_preserves_missing_server_and_sql_reasons ... ok
test mesh_api_tests::storage_diagnostics::coordinator_stored_column_refuses_without_panic_and_recovers_after_repair ... ok
test mesh_api_tests::storage_diagnostics::invalid_stored_column_is_skipped_without_panicking ... ok
test mesh_api_tests::storage_diagnostics::invalid_stored_host_is_reported_once_by_id ... ok
test mesh_api_tests::storage_diagnostics::malformed_host_keeps_healthy_inventory_readable ... ok
test mesh_api_tests::storage_diagnostics::malformed_unrelated_host_preserves_scoped_inventory ... ok
test mesh_api_tests::storage_diagnostics::repeated_storage_failure_has_bounded_diagnostics ... ok
test mesh_api_tests::storage_diagnostics::settings_storage_failure_has_a_safe_original_reason ... ok
test mesh_api_tests::storage_diagnostics::sqlite_admission_failures_have_distinct_safe_reasons ... ok
test mesh_api_tests::storage_diagnostics::storage_failures_have_safe_reasons_and_recover_after_repair ... ok
test mesh_api_tests::storage_diagnostics::unrelated_success_does_not_reset_a_persistent_write_failure ... ok
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test plugins::node_lifecycle::tests::disabling_replacement_and_retirement_join_the_correct_node_worker ... ok
test release_build_tests::release_build_marker_is_explicit ... ok
test release_http::tests::bounded_body_status_and_existing_destination_are_refused ... ok
test release_http::tests::https_cannot_silently_accept_a_plaintext_bucket ... ok
test release_http::tests::unsupported_scheme_credentials_query_and_fragment_never_connect ... ok
test release_latest::tests::bench_bounded_metadata_verification ... ignored, local weighted-scope verification latency benchmark
test release_latest::tests::bench_latest_fifty_callers ... ignored, local weighted-scope 50-caller real-engine RSS measurement
test release_latest::tests::edge_pointer_is_verified_in_its_own_channel ... ok
test release_latest::tests::pointer_authenticates_signed_version_and_refuses_replays_tampering_and_duplicates ... ok
test release_latest::tests::stable_empty_reports_opt_in_without_edge_request ... ok
test release_manifest::tests::noncanonical_or_cross_channel_identity_is_refused ... ok
test release_manifest::tests::signed_identity_and_exact_bytes_are_required ... ok
test release_payload::tests::a_missing_payload_never_enables_development_fallback ... ok
test release_payload::tests::a_valid_older_release_replayed_under_the_requested_version_is_refused ... ok
test release_payload::tests::advertised_session_missing_digest_or_signature_never_falls_back ... ok
test release_payload::tests::cache_symlinks_and_shared_files_are_refused ... ok
test release_payload::tests::concurrent_session_requests_publish_one_verified_artifact ... ok
test release_payload::tests::cross_architecture_cold_and_warm_cache_measurements ... ignored, run release-profile measurements in a weighted scope
test release_payload::tests::dangling_session_cache_symlink_is_refused_without_publication ... ok
test release_payload::tests::development_session_fallback_only_uses_trusted_local_artifacts_for_missing_release ... ok
test release_payload::tests::edge_add_host_keeps_exact_server_version_and_verified_cache ... ok
test release_payload::tests::eight_concurrent_add_hosts_share_one_verified_download ... ok
test release_payload::tests::missing_wrong_version_tampered_network_and_development_only_fallback ... ok
test release_payload::tests::partial_download_restart_child ... ignored, subprocess helper for release-cache restart verification
test release_payload::tests::refused_session_release_never_uses_development_fallback ... ok
test release_payload::tests::resolver_startup_removes_only_owned_inactive_private_staging ... ok
test release_payload::tests::restarted_resolution_reclaims_partial_downloads_after_process_stop ... ok
test release_payload::tests::session_cache_refuses_shared_payloads_symlinks_and_unsafe_absence ... ok
test release_payload::tests::session_payloads_are_signed_on_both_architectures_and_reused_offline ... ok
test release_payload::tests::session_staging_cleanup_preserves_active_and_unknown_files ... ok
test release_payload::tests::signed_download_cache_hit_offline_and_tampered_cache ... ok
test release_payload::tests::signed_session_absence_is_cached_and_reauthenticated_offline ... ok
test release_payload::tests::signed_session_version_replay_and_untrusted_key_are_refused ... ok
test release_verify::tests::compiled_authorities_keep_production_and_isolate_staging ... ok
test release_verify::tests::openssh_signatures_preserve_descriptor_and_reject_every_byte_mutation ... ok
test release_verify::tests::per_run_signature_obeys_the_compiled_feature_boundary ... ok
test release_verify::tests::trust_namespace_hash_trailing_data_and_manifest_ambiguity_are_refused ... ok
test release_verify::tests::verification_twenty_megabytes_fifty_runs ... ignored, run release-profile measurements in a weighted scope
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test remote_guard::cut_tests::cancellation_survives_last_transport_until_durable_tombstone ... ok
test remote_guard::cut_tests::provisional_ssh_authority_requires_exact_pending_owner_and_uid ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test remote_inventory::pagination_tests::long_destinations_stay_bounded_and_all_pages_are_complete ... ok
test remote_inventory::tests::admitted_hosts_are_account_scoped_offline_and_revocation_filtered ... ok
test remote_inventory::tests::unredeemed_invitations_are_not_admitted_and_cursors_are_canonical ... ok
test remote_mesh_revocation_tests::committed_host_revocation_pushes_peer_withdrawal_without_polling ... ok
test remote_removal::review_tests::accepted_uninstall_names_the_objects_it_leaves ... ok
test remote_removal::review_tests::no_commands_for_a_host_setup_did_not_install ... ok
test remote_removal::review_tests::review_manual_commands_are_gated_on_this_hosts_bootstrap_owner ... ok
test remote_removal::review_tests::review_manual_commands_stop_only_this_installations_sessions ... ok
test remote_removal::review_tests::review_manual_rootful_commands_delete_only_marked_kernel_objects ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test remote_runtime::tests::additional_listeners::additional_listener_keeps_underlay_address_and_retires_with_its_lease ... ok
test remote_runtime::tests::additional_listeners::additional_listener_refuses_unenrolled_certificate_before_proof_reply ... ok
test remote_runtime::tests::additional_listeners::admitted_connection_moves_to_a_leased_address_and_back_without_readmission ... ok
test remote_runtime::tests::additional_listeners::initial_overlay_admission_has_no_underlay_guess ... ok
test remote_runtime::tests::additional_listeners::ipv6_wildcard_listener_reuses_binding_and_preserves_ipv4_discovery ... ok
test remote_runtime::tests::additional_listeners::leased_tcp_admits_current_identity_releases_lease_and_keeps_primary_usable ... ok
test remote_runtime::tests::additional_listeners::wildcard_listener_reuses_binding_and_tracks_destination_lease_counts ... ok
test remote_runtime::tests::cancelled_native_read_retains_dequeued_packet ... ok
test remote_runtime::tests::candidate_proofs::candidate_proof_refuses_a_second_probe_and_invalid_hello ... ok
test remote_runtime::tests::candidate_proofs::quic_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok
test remote_runtime::tests::candidate_proofs::tls_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::late_native_detach_after_peer_close_keeps_the_control_connection ... ok
test remote_runtime::tests::late_native_detach_after_peer_stop_keeps_the_control_connection ... ok
test remote_runtime::tests::ping_flood::primary_ping_during_terminal_flood ... ignored, 10-minute real PTY measurement; pinned VM lock and INFRATERNAL_PING_BINARY required
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::remote_peer_routing_capability_does_not_retain_the_host_registry ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok
test remote_runtime::tests::retired_native_writer_frames_cannot_close_or_ack_its_replacement ... ok
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::ssh_bridge::component_off_retires_ssh_fallback_after_installed_admission ... ok
test remote_runtime::tests::ssh_bridge::refused_installed_reattachment_restores_the_ssh_writer ... ok
test remote_runtime::tests::ssh_bridge::ssh_bridge_does_not_invent_node_path_capabilities ... ok
test remote_runtime::tests::ssh_bridge::ssh_bridge_retires_only_after_installed_writer_acknowledges ... ok
test remote_runtime::tests::ssh_bridge::ssh_greeting_keeps_full_capabilities_and_coalesced_frames ... ok
test remote_runtime::tests::ssh_bridge::ssh_greeting_refuses_invalid_first_frames_and_releases_its_master ... ok
test remote_runtime::tests::standby::a_second_parked_fallback_cannot_replace_the_first ... ok
test remote_runtime::tests::standby::control_pause::cancelled_control_packet_survives_pause_and_resumes_before_queued_sibling ... ok
test remote_runtime::tests::standby::control_queue::saturated_native_control_queue_does_not_hide_primary_terminal_output ... ok
test remote_runtime::tests::standby::control_queue::scheduled_probe_preserves_primary_at_full_native_control_capacity ... ok
test remote_runtime::tests::standby::detached_primed_writers_release_native_binding_budget ... ok
test remote_runtime::tests::standby::liveness_doubt::one_missed_primary_reply_shows_reconnecting_and_only_a_second_retires_the_link ... ok
test remote_runtime::tests::standby::parked_fallback_is_cancelled_by_ledger_revocation ... ok
test remote_runtime::tests::standby::parked_fallback_survives_greeting_deadline_and_activates_without_another_hello ... ok
test remote_runtime::tests::standby::primed_fallback_activates_after_the_primary_closes ... ok
test remote_runtime::tests::standby::primed_fallback_hedges_when_credit_arrives_behind_a_blocked_primary_write ... ok
test remote_runtime::tests::standby::primed_fallback_hedges_while_primary_native_send_buffer_is_full ... ok
test remote_runtime::tests::standby::primed_hedge_survives_blocked_control_call ... ok
test remote_runtime::tests::standby::primed_standby_greets_without_replacing_the_live_actor_before_activation ... ok
test remote_runtime::tests::standby::tcp_fallback_parks_without_a_host_actor_and_activates_on_the_existing_tls_channel ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_standby::tests::bounded_standby_options_reject_ambiguous_or_unrecognized_fields ... ok
test remote_standby::tests::cancelled_queue_admission_releases_parking_before_actor_poll ... ok
test remote_standby::tests::parking_is_per_identity_bounded_and_released_on_drop ... ok
test remote_standby_request::tests::requests_require_objects_and_exact_fields ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
test runtime::remote_demo_tests::cold_start::release_transition_recovers_enrolled_host_after_long_outage ... ignored, requires isolated release binaries and a ten-minute outage
test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test runtime::temporal_admission_tests::ca_budget_cost_at_capacity ... ignored, isolated debug admission diagnostic at 4096 principals; run without own build overlap
test runtime::temporal_admission_tests::windows_principals_and_capacity_remain_bounded ... ok
test runtime::tests::empty_no_color_does_not_disable_terminal_logs ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test stream_close::tests::a_close_naming_no_owned_session_prints_none_for_session_and_host ... ok
test stream_close::tests::a_dead_logger_is_counted_and_summarised_by_the_callers ... ok
test stream_close::tests::a_full_queue_drops_and_counts_instead_of_blocking ... ok
test stream_close::tests::a_full_table_keeps_rate_limiting_a_storm ... ok
test stream_close::tests::an_unavailable_agent_stream_is_reported_as_a_link_drop ... ok
test stream_close::tests::client_chosen_session_ids_share_their_accounts_window ... ok
test stream_close::tests::close_line_has_session_counters_and_never_copies_untrusted_close_text ... ok
test stream_close::tests::close_path_cost ... ignored, manual microbenchmark
test stream_close::tests::different_accounts_and_reason_categories_each_get_their_first_line ... ok
test stream_close::tests::mixed_reasons_and_closers_in_one_window_are_named_as_mixed ... ok
test stream_close::tests::one_close_line_and_one_summary_bound_an_account_storm ... ok
test stream_close::tests::the_thread_writes_the_first_close_and_summarises_the_rest_on_shutdown ... ok
test terminal_queries::census_tests::census_cleanup_is_host_scoped_and_preserves_detached_live_queries ... ok
test terminal_queries::corpus_tests::output_chunking_preserves_bounded_query_state ... ok
test terminal_queries::lifecycle_tests::ended_sessions_release_query_slots ... ok
test terminal_queries::overflow_tests::oversized_osc_does_not_hide_the_next_query ... ok
test terminal_queries::tests::deadline_includes_incomplete_query ... ok
test terminal_queries::tests::every_observed_output_position_can_identify_a_renderer_answer ... ok
test terminal_queries::tests::gaps_and_replay_never_authorize_unobserved_or_expired_positions ... ok
test terminal_queries::tests::marked_flood_never_allocates_queries ... ok
test terminal_queries::tests::only_one_reply_across_viewers_and_replay ... ok
test terminal_queries::tests::renderer_owns_reply_contents_but_size_and_identity_are_bounded ... ok
test terminal_queries::tests::review_renderer_supported_query_forms_are_admitted ... ok
test terminal_queries::tests::style_controls_cannot_evict_queries_and_live_claims_never_reopen ... ok
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test websocket::cookie_tests::duplicate_cookie_fields_deny_socket_session ... ok
test websocket::cookie_tests::split_cookie_fields_preserve_socket_session ... ok
test websocket::link_notice_tests::doubt_notices_reach_only_viewers_that_announced_them_and_never_await_an_ack ... ok
test websocket::receive_tests::browser_websocket_close_keeps_its_code_and_discards_unknown_reason_text ... ok
test websocket::receive_tests::buffered_control_frames_cannot_monopolize_a_transport_turn ... ok
test websocket::receive_tests::receive_failures_keep_protocol_size_and_idle_classifications ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test websocket::session_inventory_tests::available_snapshot_reports_live_rows_and_bounded_saved_exit_statuses ... ok
test websocket::session_inventory_tests::census_waiting_for_database_does_not_close_a_newly_created_live_session ... ok
test websocket::session_inventory_tests::inventory_reconciliation_at_200_sessions_and_50_accounts ... ignored, independent scale diagnostic; run in a weighted scope
test websocket::session_inventory_tests::pending_agent_inventory_hides_cached_rows_until_the_first_census ... ok
test websocket::session_inventory_tests::reconciliation_before_saved_exit_keeps_the_authoritative_exit_status ... ok
test websocket::session_inventory_tests::restart_reconciliation_keeps_live_rows_and_closes_missing_rows ... ok
test websocket::write_tests::a_stalled_group_has_one_absolute_write_budget ... ok
test websocket::write_tests::ready_proofs_keep_message_boundaries_and_order_with_one_flush ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_fails_closed_at_the_bounded_wait ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_keeps_its_connection_owner_runnable ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_rejects_expiry_committed_by_its_operation ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_rejects_revocation_committed_by_its_operation ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_stops_side_effects_at_expiry ... ok
test websocket::writer_tests::authority_watchdog::periodic_authority_read_stops_side_effects_on_revocation ... ok
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok
test websocket_transport::queue_tests::full_browser_transport_proof_queue_keeps_connection_usable ... ok
test websocket_transport::queue_tests::full_browser_wire_proof_queue_keeps_connection_usable ... ok
test websocket_transport::tests::each_receive_end_has_a_structured_terminal_close_reason ... ok
test websocket_transport::tests::no_probe_in_an_active_idle_active_window ... ok

test result: ok. 577 passed; 0 failed; 52 ignored; 0 measured; 0 filtered out; finished in 386.69s

     Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/catalog_startup-0cc2a21db5bdb009)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/enrollment-da6f6bc526730a8e)

running 6 tests
test concurrent_redemption_has_one_winner_and_one_certificate ... ok
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.40s

     Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/mesh_parser-53adbbeaac9bee95)

running 2 tests
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok
test review_grant_parser_rejects_unknown_nested_port_fields ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/mesh_review_plugin-2b5c5891c407e664)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/mesh_review_policy-b523d9249fd86f2a)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/mesh_review_role_scope-68bf054b7c4a424b)

running 2 tests
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok
test role_scopes_require_an_array_when_provided ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/native_probe_correlation_review.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/native_probe_correlation_review-48536fc69a9add81)

running 23 tests
test healthy_real_socket_survives_a_150ms_server_stall ... ok
test liveness::tests::a_doubt_recovered_at_the_ceiling_pins_until_the_path_drains ... ok
test liveness::tests::a_recovered_doubt_below_the_ceiling_keeps_early_notice ... ok
test liveness::tests::a_reply_during_doubt_clears_it_and_renews_the_route ... ok
test liveness::tests::an_unanswered_host_link_retires_at_the_startup_grace_without_doubt ... ok
test liveness::tests::delayed_server_probe_does_not_expire_an_answered_route ... ok
test liveness::tests::healthy_reply_survives_a_150ms_server_stall ... ok
test liveness::tests::host_allowance_covers_one_loss_recovery_and_browser_routes_keep_theirs ... ok
test liveness::tests::host_allowance_has_a_floor_a_settled_long_haul_value_and_a_ceiling ... ok
test liveness::tests::host_link_doubts_on_the_first_miss_and_retires_on_the_second ... ok
test liveness::tests::jitter_allowance_decays_after_the_link_settles ... ok
test liveness::tests::late_native_probe_keeps_its_unissued_reply_allowance ... ok
test liveness::tests::missing_replies_expire_even_with_probes_in_flight ... ok
test liveness::tests::pipelined_requests_do_not_renew_an_outstanding_deadline ... ok
test liveness::tests::quiet_dead_peer_expires_within_floor_plus_one_interval ... ok
test liveness::tests::ready_reply_only_pulls_forward_an_answered_probe_after_one_tick ... ok
test liveness::tests::recent_application_progress_preserves_the_first_tick_cadence ... ok
test liveness::tests::restarting_monitoring_never_reuses_an_old_issued_probe ... ok
test liveness::tests::serial_probe_accepts_a_timely_rtt_step_without_renewing_unsolicited_replies ... ok
test liveness::tests::serial_probe_deadline_includes_only_one_gap_and_the_estimated_allowance ... ok
test liveness::tests::terminal_routes_still_end_their_lease_on_the_first_miss ... ok
test liveness::tests::variation_uses_the_previous_smoothed_sample ... ok
test unissued_native_probe_reply_cannot_extend_readiness ... ok

test result: ok. 23 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.16s

     Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/plugin_host_review-7f78344df2b01660)

running 7 tests
test review_completed_call_survives_normal_worker_exit ... ok
test review_core_topic_remains_core_owned_even_when_declared ... ok
test review_disable_answers_inflight_call ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_exited_worker_ends_its_subscriptions ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_undeclared_topic_is_left_to_the_core ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.51s

     Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/plugin_settings_review-59a2888e459a1f74)

running 3 tests
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.54s

     Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/remote_plugin_contract-b49df6bb39ae4b7e)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.36s

     Running tests/review_mesh_host_removal.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/review_mesh_host_removal-e63b2314fa088e86)

running 1 test
test revoked_remote_host_is_withdrawn_from_mesh_peer_policy ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal_session-6640403118fc7305)

running 2 tests
test tests::fresh_exec_closes_dumpability_before_private_startup ... 
running 1 test
test tests::fresh_exec_closes_dumpability_before_private_startup ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 1 filtered out; finished in 0.00s

ok
test tests::unsupported_commands_cannot_start_operator_roles_or_open_state ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal_shim-022fbdb3b60fdd6e)

running 96 tests
test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::deferred_frame_keeps_its_borrowed_storage_and_ordered_trailing_bytes ... ok
test frame::checks::golden::every_frozen_message ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test frame::checks::maximum_deferred_frame_retries_without_growing_storage ... ok
test frame::checks::query_reply_extension_is_bounded_and_fragment_safe ... ok
test frame::checks::shared_writer_selector_is_fixed_length_and_fragment_safe ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok
test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok
test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok
test locale::tests::invalid_shell_expressions_are_ignored ... ok
test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok
test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok
test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok
test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok
test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok
test pty::child_locale_tests::spawned_login_shell_receives_selected_locale_without_other_host_variables ... ok
test pty::child_signal_tests::child_policy_closes_the_control_descriptor_before_direct_exec ... ok
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... 
running 1 test
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 95 filtered out; finished in 0.00s

ok
test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap
test ring::checks::tests::wrap_and_exact_offsets ... ok
test session::inputs::reply_tests::replies_preserve_selected_writer_cursor_and_geometry ... ok
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::sequenced_checks::a_completed_deferred_frame_gives_its_trailing_input_a_fresh_ticket ... ok
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::sequenced_checks::coalesced_probe_and_input_preserve_the_written_ack_in_both_orders ... ok
test session::sequenced_checks::negotiated_queue_deferral_validates_ranges_before_waiting ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_seeded_smoke ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok

test result: ok. 83 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 57.45s

     Running tests/detach.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/detach-8befbd8d3fa85e20)

running 2 tests
test closed_standard_descriptors_become_dev_null ... ok
test detached_child_restores_default_signals_without_changing_parent ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.81s

     Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/mouse-ea97bd9caecc8e0d)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.00s

     Running tests/process_exit_descriptor.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/process_exit_descriptor-50d77b6c4248f0f9)

running 2 tests
test descriptor_is_cloexec_and_observes_a_real_process_exit ... ok
test invalid_pid_never_creates_a_descriptor ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal_status-7910dde34bdac077)

running 12 tests
test tests::a_manager_that_does_not_answer_is_unknown_not_down ... ok
test tests::an_unanswering_manager_only_makes_its_own_unit_unknown ... ok
test tests::nothing_installed_says_so ... ok
test tests::production_server_is_a_running_server_with_two_mesh_peers ... ok
test tests::rootful_agent_is_a_host_with_its_own_state_directory ... ok
test tests::rootful_agent_reads_mesh_peers_from_its_state_directory ... ok
test tests::rootless_agent_is_read_from_the_user_manager ... ok
test tests::server_and_host_on_one_machine_is_both ... ok
test tests::snapshot_scan_counts_peers_through_nesting_strings_and_spacing ... ok
test tests::stopped_server_unit_is_stopped_not_unknown ... ok
test tests::the_headline_names_what_is_down_and_how_to_look ... ok
test tests::the_headline_says_how_to_join_when_nothing_is_installed ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.21s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_backup

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_relay

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_release

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_status

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

(test: 834s)

==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-r2/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   ├── infraternal-fuzz v0.1.0
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0 (*)
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   ├── infraternal-server v0.1.0 (*)
         │   │   │   │   └── infraternal-session v0.1.0
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-mesh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   └── infraternal-plugin-mesh v0.1.0
         │   │   │       ├── infraternal v0.1.0 (*)
         │   │   │       ├── infraternal-agent v0.1.0 (*)
         │   │   │       ├── infraternal-fuzz v0.1.0 (*)
         │   │   │       └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-backup v0.1.0
         │   │   │   └── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   ├── infraternal-plugin-relay v0.1.0
         │   │   │   └── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-release v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   ├── infraternal-plugin-release v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-r2/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   ├── infraternal-server v0.1.0 (*)
         │   └── infraternal-session v0.1.0
         ├── infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-mesh v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   └── infraternal-plugin-mesh v0.1.0
         │   │   │   │       ├── infraternal v0.1.0 (*)
         │   │   │   │       ├── infraternal-agent v0.1.0 (*)
         │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │       └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-backup v0.1.0
         │   │   │   │   └── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-relay v0.1.0
         │   │   │   │   └── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-release v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   ├── infraternal-plugin-release v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   ├── infraternal-plugin-ssh v0.1.0
                     │   │   ├── infraternal v0.1.0 (*)
                     │   │   ├── infraternal-fuzz v0.1.0 (*)
                     │   │   ├── infraternal-server v0.1.0
                     │   │   │   ├── infraternal v0.1.0 (*)
                     │   │   │   └── infraternal-fuzz v0.1.0 (*)
                     │   │   └── infraternal-session v0.1.0
                     │   └── infraternal-server v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   ├── infraternal-fuzz v0.1.0 (*)
                     │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-r2/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   ├── infraternal-server v0.1.0 (*)
     │   │   │       │   └── infraternal-session v0.1.0
     │   │   │       ├── infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │       ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │       ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-backup v0.1.0
     │   │   │       │   │   │   │   └── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-relay v0.1.0
     │   │   │       │   │   │   │   └── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-release v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-release v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── infraternal-plugin-remote v0.1.0 (*)
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.46
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.15
             └── rustls v0.23.46 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   ├── infraternal-fuzz v0.1.0 (*)
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   │   ├── infraternal-server v0.1.0
     │       │       │   │   │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   │   └── infraternal-session v0.1.0
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-mesh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │       └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-backup v0.1.0
     │       │       │   │   │   └── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-relay v0.1.0
     │       │       │   │   │   └── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-release v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-shim v0.1.0
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │       │       │   │   ├── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-session v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── infraternal-plugin-remote v0.1.0 (*)
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.46
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.15
     │               └── rustls v0.23.46 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-mesh v0.1.0 (*)
         ├── infraternal-plugin-release v0.1.0 (*)
         ├── infraternal-plugin-remote v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── (dev) infraternal-status v0.1.0
         │   └── infraternal v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-r2/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   │   ├── infraternal-server v0.1.0
     │       │   │   │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   │   └── infraternal-session v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-mesh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   └── infraternal-plugin-mesh v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       ├── infraternal-agent v0.1.0 (*)
     │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │       └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-backup v0.1.0
     │       │   │   │   └── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-relay v0.1.0
     │       │   │   │   └── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-release v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   ├── infraternal-plugin-release v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   ├── hyper v1.11.1
         │   │   ├── axum v0.8.9
         │   │   │   ├── infraternal-fuzz v0.1.0
         │   │   │   └── infraternal-server v0.1.0
         │   │   │       ├── infraternal v0.1.0
         │   │   │       └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── axum-server v0.8.0
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── hyper-util v0.1.21
         │   │   │   ├── axum v0.8.9 (*)
         │   │   │   ├── axum-server v0.8.0 (*)
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   │   ├── infraternal v0.1.0 (*)
         │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal v0.1.0 (*)
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   │   ├── infraternal-server v0.1.0 (*)
             │   │   │   │   └── infraternal-session v0.1.0
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-mesh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   └── infraternal-plugin-mesh v0.1.0
             │   │   │       ├── infraternal v0.1.0 (*)
             │   │   │       ├── infraternal-agent v0.1.0 (*)
             │   │   │       ├── infraternal-fuzz v0.1.0 (*)
             │   │   │       └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-backup v0.1.0
             │   │   │   └── infraternal v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   │   ├── infraternal-plugin-relay v0.1.0
             │   │   │   └── infraternal v0.1.0 (*)
             │   │   ├── infraternal-plugin-release v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   ├── infraternal-plugin-release v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-r2/Cargo.lock:199:1
    │  
199 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
200 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   ├── infraternal-fuzz v0.1.0 (*)
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   │   ├── infraternal-server v0.1.0
          │       │       │   │   │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   │   └── infraternal-session v0.1.0
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-mesh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │       └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-backup v0.1.0
          │       │       │   │   │   └── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-relay v0.1.0
          │       │       │   │   │   └── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-release v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-shim v0.1.0
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
          │       │       │   │   ├── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-session v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── infraternal-plugin-remote v0.1.0 (*)
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.46
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.15
          │               └── rustls v0.23.46 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-mesh v0.1.0 (*)
              ├── infraternal-plugin-release v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── (dev) infraternal-status v0.1.0
              │   └── infraternal v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-r2/Cargo.lock:201:1
    │  
201 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
202 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   ├── infraternal-plugin-ssh v0.1.0
              │   │   ├── infraternal v0.1.0 (*)
              │   │   ├── infraternal-fuzz v0.1.0 (*)
              │   │   ├── infraternal-server v0.1.0
              │   │   │   ├── infraternal v0.1.0 (*)
              │   │   │   └── infraternal-fuzz v0.1.0 (*)
              │   │   └── infraternal-session v0.1.0
              │   └── infraternal-server v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   ├── infraternal-fuzz v0.1.0 (*)
              │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-r2/Cargo.lock:204:1
    │  
204 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
205 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-r2/Cargo.lock:206:1
    │  
206 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
207 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
208 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │   └── infraternal-session v0.1.0
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │       ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │       ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │       │   │   │   │   └── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │       │   │   │   │   └── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-release v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   ├── infraternal-plugin-ssh v0.1.0
      │               │   │   ├── infraternal v0.1.0 (*)
      │               │   │   ├── infraternal-fuzz v0.1.0 (*)
      │               │   │   ├── infraternal-server v0.1.0
      │               │   │   │   ├── infraternal v0.1.0 (*)
      │               │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │               │   │   └── infraternal-session v0.1.0
      │               │   └── infraternal-server v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   ├── infraternal-fuzz v0.1.0 (*)
      │               │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │       ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │       └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-backup v0.1.0
      │   │       │       │   │   │   └── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-relay v0.1.0
      │   │       │       │   │   │   └── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-release v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-shim v0.1.0
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-session v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.46
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.15
      │   │               └── rustls v0.23.46 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── (dev) infraternal-status v0.1.0
      │       │   └── infraternal v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-r2/Cargo.lock:250:1
    │  
250 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
251 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   ├── infraternal-server v0.1.0 (*)
      │           │   │   └── infraternal-session v0.1.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── infraternal-shim v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   ├── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-session v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-mesh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │       │   ├── infraternal-plugin-backup v0.1.0
      │       │   │   └── infraternal v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   ├── infraternal-plugin-relay v0.1.0
      │       │   │   └── infraternal v0.1.0 (*)
      │       │   ├── infraternal-plugin-release v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-release v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   │   ├── infraternal-server v0.1.0
      │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │       │   │   └── infraternal-session v0.1.0
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-release v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       └── infraternal-shim v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0 (*)
      │           ├── infraternal-fuzz v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── infraternal-plugin-ssh v0.1.0 (*)
      │           ├── infraternal-server v0.1.0 (*)
      │           └── infraternal-session v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-mesh v0.1.0
      │   │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.46
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.15
      │       │   │           └── rustls v0.23.46 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-shim v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-release v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── (dev) infraternal-status v0.1.0
      │       │   │       │   └── infraternal v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.46 (*)
      │       │           └── rustls-webpki v0.103.15 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.46 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.2
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── (dev) infraternal v0.1.0 (*)
      │       ├── (dev) infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-remote v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-r2/Cargo.lock:253:1
    │  
253 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
254 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   ├── infraternal-server v0.1.0
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   └── infraternal-session v0.1.0
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │       ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-backup v0.1.0
      │       │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-relay v0.1.0
      │       │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-release v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-r2/Cargo.lock:256:1
    │  
256 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
257 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   ├── infraternal v0.1.0 (*)
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   ├── infraternal-server v0.1.0
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-session v0.1.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-fuzz v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-release v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   ├── infraternal-fuzz v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-r2/Cargo.lock:258:1
    │  
258 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
259 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   ├── infraternal v0.1.0 (*)
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal v0.1.0 (*)
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   ├── infraternal-plugin-ssh v0.1.0
          │       │   │   ├── infraternal v0.1.0 (*)
          │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │   │   ├── infraternal-server v0.1.0
          │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │   │   └── infraternal-session v0.1.0
          │       │   └── infraternal-server v0.1.0 (*)
          │       ├── infraternal-fuzz v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-backup v0.1.0
          │   │   │   │   └── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-relay v0.1.0
          │   │   │   │   └── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-release v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   ├── infraternal-plugin-release v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   ├── infraternal-fuzz v0.1.0 (*)
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-r2/Cargo.lock:316:1
    │  
316 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
317 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── infraternal-plugin-remote v0.1.0
          │   ├── infraternal v0.1.0
          │   ├── infraternal-agent v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0
          │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-server v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   └── infraternal-session v0.1.0
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── infraternal-fuzz v0.1.0 (*)
          │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.46
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.15
              └── rustls v0.23.46 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   ├── infraternal-plugin-ssh v0.1.0
      │               │       │   │   ├── infraternal v0.1.0 (*)
      │               │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   │   ├── infraternal-server v0.1.0
      │               │       │   │   │   ├── infraternal v0.1.0 (*)
      │               │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │               │       │   │   └── infraternal-session v0.1.0
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-release v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               ├── infraternal v0.1.0 (*)
      │               └── infraternal-shim v0.1.0
      │                   ├── infraternal v0.1.0 (*)
      │                   ├── infraternal-agent v0.1.0 (*)
      │                   ├── infraternal-fuzz v0.1.0 (*)
      │                   ├── infraternal-plugin-remote v0.1.0 (*)
      │                   ├── infraternal-plugin-ssh v0.1.0 (*)
      │                   ├── infraternal-server v0.1.0 (*)
      │                   └── infraternal-session v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.2
      │           ├── axum v0.8.9
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   ├── hyper v1.11.1
      │           │   │   ├── axum v0.8.9 (*)
      │           │   │   ├── axum-server v0.8.0 (*)
      │           │   │   ├── hyper-util v0.1.21
      │           │   │   │   ├── axum v0.8.9 (*)
      │           │   │   │   ├── axum-server v0.8.0 (*)
      │           │   │   │   ├── infraternal v0.1.0 (*)
      │           │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── (dev) infraternal v0.1.0 (*)
      │           ├── (dev) infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-mesh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-backup v0.1.0
      │           │   │   └── infraternal v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-relay v0.1.0
      │           │   │   └── infraternal v0.1.0 (*)
      │           │   ├── infraternal-plugin-release v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-release v0.1.0 (*)
      │           ├── (dev) infraternal-plugin-remote v0.1.0 (*)
      │           ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.2 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.2 (*)
      ├── tokio v1.53.2 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok
(cargo-deny: 2s)

==> static builds
x86_64-unknown-linux-musl: exact define removed; build directories remapped; explicit paths preserved; target override refused
aarch64-unknown-linux-musl: exact define removed; build directories remapped; explicit paths preserved; target override refused
x86_64 OpenSSL source: AVX-512 GCM dispatch removed idempotently
native compiler metadata: path independent; platform/date retained; unexpected syntax refused
Rust remapping: differently named checkout roots produce identical stripped artifacts
.
----------------------------------------------------------------------
Ran 1 test in 0.002s

OK
    Finished `release` profile [optimized] target(s) in 0.85s
AES-128-GCM NIST vector encrypt/decrypt passed
production trust: PASS (staging-trust authority absent)
/home/kayg/.cache/codex-scratch/query-replies-r2/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 21215664 bytes; cap: 21215664 bytes; delta: +0 bytes
key memory: x86_64-unknown-linux-musl; memlock=8388608 bytes
Key memory initialization=1; locked pages and dump exclusion enabled
   Compiling cfg-if v1.0.5
   Compiling pin-project-lite v0.2.17
   Compiling bytes v1.12.1
   Compiling libc v0.2.190
   Compiling serde_core v1.0.229
   Compiling memchr v2.8.3
   Compiling once_cell v1.21.4
   Compiling log v0.4.34
   Compiling itoa v1.0.18
   Compiling futures-core v0.3.34
   Compiling zerofrom v0.1.8
   Compiling stable_deref_trait v1.2.1
   Compiling smallvec v1.16.2
   Compiling futures-sink v0.3.34
   Compiling subtle v2.6.1
   Compiling slab v0.4.12
   Compiling typenum v1.20.1
   Compiling litemap v0.8.3
   Compiling yoke v0.8.3
   Compiling tracing-core v0.1.36
   Compiling writeable v0.6.4
   Compiling utf8_iter v1.0.4
   Compiling num-traits v0.2.19
   Compiling equivalent v1.0.2
   Compiling percent-encoding v2.3.2
   Compiling icu_properties_data v2.3.0
   Compiling zerovec v0.11.8
   Compiling zerotrie v0.2.5
   Compiling errno v0.3.14
   Compiling socket2 v0.6.5
   Compiling tracing v0.1.44
   Compiling mio v1.2.4
   Compiling generic-array v0.14.7
   Compiling serde v1.0.229
   Compiling icu_normalizer_data v2.3.0
   Compiling hashbrown v0.17.1
   Compiling futures-io v0.3.34
   Compiling signal-hook-registry v1.4.8
   Compiling futures-task v0.3.34
   Compiling thiserror v2.0.21
   Compiling form_urlencoded v1.2.2
   Compiling cpufeatures v0.2.17
   Compiling tinystr v0.8.4
   Compiling potential_utf v0.1.6
   Compiling crypto-common v0.1.7
   Compiling block-buffer v0.10.4
   Compiling scopeguard v1.2.0
   Compiling zmij v1.0.23
   Compiling openssl-sys v0.9.117
   Compiling futures-util v0.3.34
   Compiling futures-channel v0.3.34
   Compiling tokio v1.53.2
   Compiling bitflags v2.13.2
   Compiling icu_locale_core v2.3.0
   Compiling parking_lot_core v0.9.12
   Compiling indexmap v2.14.2
   Compiling icu_collections v2.3.0
   Compiling digest v0.10.7
   Compiling lock_api v0.4.14
   Compiling serde_json v1.0.151
   Compiling allocator-api2 v0.2.21
   Compiling rand_core v0.10.1
   Compiling foldhash v0.1.5
   Compiling crossbeam-utils v0.8.23
   Compiling either v1.18.0
   Compiling getrandom v0.2.17
   Compiling parking_lot v0.12.5
   Compiling parking v2.2.1
   Compiling crc-catalog v2.5.0
   Compiling hashbrown v0.15.5
   Compiling icu_provider v2.3.1
   Compiling base64 v0.22.1
   Compiling zerocopy v0.8.60
   Compiling spin v0.9.9
   Compiling crossbeam-queue v0.3.14
   Compiling sha2 v0.10.9
   Compiling crc v3.4.0
   Compiling event-listener v5.4.2
   Compiling futures-intrusive v0.5.0
   Compiling icu_normalizer v2.3.0
   Compiling icu_properties v2.3.0
   Compiling libsqlite3-sys v0.30.1
   Compiling ryu v1.0.23
   Compiling hashlink v0.10.0
   Compiling flume v0.11.1
   Compiling getrandom v0.4.3
   Compiling futures-executor v0.3.34
   Compiling atoi v2.0.0
   Compiling serde_urlencoded v0.7.1
   Compiling foreign-types-shared v0.1.1
   Compiling http v1.5.0
   Compiling ring v0.17.14
   Compiling memoffset v0.9.1
   Compiling zeroize v1.9.0
   Compiling uuid v1.27.0
   Compiling getrandom v0.3.4
   Compiling untrusted v0.9.0
   Compiling idna_adapter v1.2.2
   Compiling foreign-types v0.3.2
   Compiling minimal-lexical v0.2.1
   Compiling nix v0.30.1
   Compiling utf8parse v0.2.2
   Compiling arrayvec v0.7.8
   Compiling idna v1.1.0
   Compiling rand_core v0.9.5
   Compiling rustls-pki-types v1.15.1
   Compiling http-body v1.1.0
   Compiling anstyle-parse v1.0.0
   Compiling nom v7.1.3
   Compiling deranged v0.5.8
   Compiling tokio-stream v0.1.19
   Compiling is_terminal_polyfill v1.70.2
   Compiling ppv-lite86 v0.2.21
   Compiling powerfmt v0.2.1
   Compiling url v2.5.8
   Compiling anstyle v1.0.14
   Compiling anstyle-query v1.1.5
   Compiling num-conv v0.2.2
   Compiling colorchoice v1.0.5
   Compiling tinyvec v1.13.3
   Compiling time-core v0.1.9
   Compiling rustls-webpki v0.103.15
   Compiling rand_chacha v0.9.0
   Compiling rustls v0.23.46
   Compiling tokio-util v0.7.19
   Compiling thiserror v1.0.69
   Compiling rusticata-macros v4.1.0
   Compiling anstream v1.0.0
   Compiling httparse v1.10.1
   Compiling time v0.3.55
   Compiling chacha20 v0.10.2
   Compiling strsim v0.11.1
   Compiling data-encoding v2.11.1
   Compiling sqlx-core v0.8.6
   Compiling clap_lex v1.1.1
   Compiling tower-service v0.3.3
   Compiling rand v0.9.5
   Compiling rand_core v0.6.4
   Compiling rand_pcg v0.10.2
   Compiling rand v0.10.3
   Compiling num-integer v0.1.47
   Compiling atomic-waker v1.1.2
   Compiling clap_builder v4.6.7
   Compiling infraternal-protocol v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/query-replies-r2/crates/infraternal-protocol)
   Compiling base64 v0.21.7
   Compiling lazy_static v1.5.1
   Compiling fnv v1.0.7
   Compiling rustc-hash v2.1.3
   Compiling try-lock v0.2.5
   Compiling httpdate v1.0.3
   Compiling asn1-rs v0.6.2
   Compiling lru-slab v0.1.3
   Compiling num-bigint v0.4.8
   Compiling h2 v0.4.19
   Compiling base64urlsafedata v0.5.5
   Compiling quinn-udp v0.5.16
   Compiling want v0.3.2
   Compiling sqlx-sqlite v0.8.6
   Compiling vte v0.15.0
   Compiling tower-layer v0.3.3
   Compiling mime v0.3.17
   Compiling http-body-util v0.1.5
   Compiling half v2.7.1
   Compiling oid-registry v0.7.1
   Compiling der-parser v9.0.0
   Compiling sha1 v0.10.7
   Compiling regex-syntax v0.8.11
   Compiling sync_wrapper v1.0.2
   Compiling serde_cbor_2 v0.13.0
   Compiling webauthn-rs-proto v0.5.5
   Compiling tungstenite v0.29.0
   Compiling rand_chacha v0.3.1
   Compiling clap v4.6.7
   Compiling x509-parser v0.16.0
   Compiling hex-conservative v0.2.3
   Compiling hyper v1.11.1
   Compiling hex v0.4.3
   Compiling base64ct v1.8.3
   Compiling unicase v2.10.0
   Compiling quinn-proto v0.11.19
   Compiling rand v0.8.8
   Compiling bitcoin_hashes v0.14.101
   Compiling tokio-tungstenite v0.29.0
   Compiling sqlx v0.8.6
   Compiling regex-automata v0.4.18
   Compiling mime_guess v2.0.5
   Compiling tower v0.5.3
   Compiling password-hash v0.5.0
   Compiling axum-core v0.5.6
   Compiling arc-swap v1.9.2
   Compiling infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/query-replies-r2/crates/infraternal-plugin-api)
   Compiling fs-err v3.3.2
   Compiling sharded-slab v0.1.7
   Compiling unicode-normalization v0.1.25
   Compiling blake2 v0.10.6
   Compiling hyper-util v0.1.21
   Compiling tracing-serde v0.2.0
   Compiling serde_path_to_error v0.1.20
   Compiling tracing-log v0.2.0
   Compiling thread_local v1.1.10
   Compiling matchit v0.8.4
   Compiling nu-ansi-term v0.50.3
   Compiling http-range-header v0.4.2
   Compiling bip39 v2.2.2
   Compiling argon2 v0.5.3
   Compiling infraternal-status v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/query-replies-r2/crates/infraternal-status)
   Compiling axum v0.8.9
   Compiling tower-http v0.6.11
   Compiling infraternal-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/query-replies-r2/crates/infraternal-mesh)
   Compiling infraternal-plugin-host-facts v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/query-replies-r2/crates/plugins/host-facts)
   Compiling infraternal-plugin-release v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/query-replies-r2/crates/plugins/release)
   Compiling infraternal-plugin-relay v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/query-replies-r2/crates/plugins/relay)
   Compiling infraternal-plugin-backup v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/query-replies-r2/crates/plugins/backup)
   Compiling matchers v0.2.0
   Compiling quinn v0.11.12
   Compiling tracing-subscriber v0.3.23
   Compiling openssl v0.10.81
   Compiling tokio-openssl v0.6.5
   Compiling webauthn-attestation-ca v0.5.5
   Compiling webauthn-rs-core v0.5.5
   Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/query-replies-r2/crates/infraternal-shim)
   Compiling infraternal-plugin-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/query-replies-r2/crates/plugins/mesh)
   Compiling axum-server v0.8.0
   Compiling infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/query-replies-r2/crates/plugins/remote)
   Compiling webauthn-rs v0.5.5
   Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/query-replies-r2/crates/infraternal-agent)
   Compiling infraternal-plugin-ssh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/query-replies-r2/crates/plugins/ssh)
   Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/query-replies-r2/crates/infraternal-server)
   Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/query-replies-r2/crates/infraternal)
    Finished `release` profile [optimized] target(s) in 7m 04s
production trust: PASS (staging-trust authority absent)
/home/kayg/.cache/codex-scratch/query-replies-r2/target/aarch64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB executable, ARM aarch64, version 1 (SYSV), statically linked, stripped
PT_INTERP: absent; size: 19408192 bytes; cap: 19408192 bytes; delta: +0 bytes
key memory: aarch64-unknown-linux-musl runtime not checked (host x86_64; native execution required)
x86_64-unknown-linux-musl: exact 21215664-byte cap PASS; 21215665 bytes rejected PASS; smaller artifact requires ratchet PASS
aarch64-unknown-linux-musl: exact 19408192-byte cap PASS; 19408193 bytes rejected PASS; smaller artifact requires ratchet PASS
unsupported target: rejected PASS
bun test v1.4.2 (744846f84)

scripts/release/static-metadata-review.test.ts:
(pass) x86_64-unknown-linux-musl compiler metadata is independent of the checkout location [27.32ms]
(pass) aarch64-unknown-linux-musl compiler metadata is independent of the checkout location [21.54ms]

 2 pass
 0 fail
 10 expect() calls
Ran 2 tests across 1 file. [62.00ms]
server subcommand: exit 2, versioned JSON unavailable result
agent group: exit 0, one parsed versioned JSON listing of its commands
(static builds: 481s)

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | PASS         |
+---------------------------+--------------+

==> Compiler metadata generator checks
bun test v1.4.2 (744846f84)

scripts/release/build-metadata.test.ts:
(pass) native metadata canonicalization retains version fields and refuses changed syntax [35.25ms]
(pass) one compiler driver remaps all source roots and preserves argument boundaries [135.56ms]

 2 pass
 0 fail
 12 expect() calls
Ran 2 tests across 1 file. [183.00ms]

==> Vendored Ghostty artifact checksums
dist/ghostty-web.js: OK
dist/ghostty-vt.wasm: OK
dist/index.d.ts: OK

==> TypeScript protocol compiler
Saved lockfile

==> Tracer compiler, precompression and bundle transfer budget
bun install v1.4.2 (744846f84)

Checked 38 installs across 69 packages (no changes) [21.00ms]
$ bun x tsc --project tsconfig.json
bun test v1.4.2 (744846f84)

precompress.test.ts:
(pass) text sidecars round-trip deterministically; compressed formats remain identity [21.69ms]

browser-build.test.ts:
(pass) the browser renderer has no unresolved Vite Node-file shim request [19.97ms]

src/perf-detector.test.ts:
(pass) FrameDetector > estimates the refresh from the median and snaps it [1.80ms]
(pass) FrameDetector > nothing is a drop before the rate is known [0.07ms]
(pass) FrameDetector > a drop is over 1.5 refresh intervals, a freeze over 100 ms [0.14ms]
(pass) FrameDetector > the refresh only goes up: a slow page is not a slower display [0.15ms]
(pass) FrameDetector > the first frame after a pause is not an interval [0.07ms]
(pass) FrameDetector > fps, p95 and window read the ring [0.28ms]
(pass) FrameDetector > a throttled page (one frame a second) is neither a drop nor a freeze, and neither is its return [0.28ms]
(pass) FrameDetector > a lone long stall is still a freeze and is not a throttled run [0.10ms]

src/canvas/recency.test.ts:
(pass) touch moves an item to the front and never duplicates it [0.24ms]
(pass) repeating the front item changes nothing [0.07ms]
(pass) the list is capped, so the oldest items fall off [0.08ms]
(pass) top skips items that are no longer live, without losing them [0.07ms]
(pass) recentRows: five used windows in reverse order of use, from 54 windows [0.18ms]
(pass) recentRows: a view with three windows and no use shows them in order [0.03ms]
(pass) recentRows: used windows lead, the rest fill up to five in window order [0.09ms]

src/canvas/status.test.ts:
(pass) a lost server connection is an error toast, never a success tick [0.66ms]
(pass) routine connection states stay out of the toast [0.05ms]
(pass) repeated connection closes do not reopen the persistent reason toast [0.10ms]
(pass) a repeated close does not retake the shared toast after a newer message replaces it [0.18ms]
(pass) a close reason stays visible through a quick reconnect and clears after a stable attach [671.37ms]

src/canvas/toolbar/palette-actions.test.ts:
(pass) a deferred split:right selection retains its original window [0.35ms]
(pass) a deferred new:below selection retains its original window [0.04ms]
(pass) a deferred close selection retains its original window [0.01ms]

src/canvas/windows/details-facts.test.ts:
(pass) host facts become plain-language details rows [2.56ms]
(pass) unknown optional host facts stay absent instead of appearing as placeholders [0.22ms]
(pass) by default the machine tab shows the D126 facts under System, Resources and Access, with no More section [0.26ms]
(pass) extended info adds only init, virtualization, how it is reached, shell and locale [0.23ms]
(pass) facts the host did not report are omitted by default, not shown as unknown [0.11ms]
(pass) the header follows the machine's own facts, not the platform the host list guessed [0.12ms]
(pass) before facts arrive the host's platform names the header [0.05ms]
(pass) a reported system with no platform mark still names the header and shows no mark [0.05ms]

src/canvas/mesh/api-retry-budget.test.ts:
(pass) a retained watch outage bounds retry requests over two logical minutes [2.46ms]

src/canvas/mesh/protocol.test.ts:
(pass) the server's own list becomes nodes, tags and grants, by name [0.64ms]
(pass) without `access` (today's server) the person may view and may not edit [0.33ms]
(pass) fields the server does not send are absent, never invented [0.36ms]
(pass) a node the server sees passing traffic is online, on its path, under its machine's name [0.07ms]
(pass) anything that is not a list is refused, whole [2.97ms]
(pass) a node's own tag list and the tag table agree even when a server sends only one [0.18ms]
(pass) the subscription's events: a pushed list, a revision that invalidates, and the end of the subscription [0.28ms]
(pass) answers carry the new revision, and a create the new arrow's id [0.09ms]
(pass) endpoints go out as the server writes them: a node by id, a tag by name [0.69ms]

src/canvas/mesh/api-recovery.test.ts:
(pass) failed watch refreshes retain one subscription through retry and release it on disposal [1.41ms]
(pass) a synchronous subscription refusal leaves retry able to install a new watch [0.22ms]
(pass) a pushed recovery cancels the scheduled retry [0.36ms]
(pass) a pushed recovery supersedes an outstanding retry failure [0.48ms]
(pass) a retry snapshot at revision 1 is ordered against a pushed recovery [0.36ms]
(pass) a retry snapshot at revision 3 is ordered against a pushed recovery [0.13ms]
(pass) a pushed liveness expiry supersedes an equal-revision retry snapshot [0.36ms]
(pass) a forbidden withdrawal cancels retry work from the retained watch [0.28ms]
(pass) a withdrawn view ignores an earlier outstanding retry result [0.30ms]
(pass) initial Mesh list handles closed transport [0.18ms]
(pass) initial Mesh list handles liveness deadline [0.05ms]
(pass) initial Mesh list handles unreadable JSON [0.07ms]
(pass) initial Mesh list handles unavailable storage [0.11ms]
(pass) initial Mesh list handles forbidden action [0.07ms]
(pass) initial Mesh list handles invalid stored host [0.07ms]
(pass) Mesh watch withdrawal handles forbidden [0.12ms]
(pass) Mesh watch withdrawal handles mesh unavailable [0.03ms]
(pass) Mesh watch withdrawal handles plugin unavailable [0.04ms]

src/canvas/mesh/layout.test.ts:
(pass) a small mesh keeps the approved arrangement: tags down the left, hosts two to a row [0.68ms]
(pass) the layout is deterministic and does not depend on input order [3.89ms]
(pass) no two cards overlap, and every card lies inside the graph [9.17ms]
(pass) the sheet is wider than tall, roughly 16:10 [2.89ms]
(pass) a pinned node stays where it was put and the others do not move [2.28ms]
(pass) a pin beyond the sheet grows the graph [0.32ms]
(pass) a host's other tags do not move it; a tag nobody carries still has its node [0.22ms]
(pass) 1,000 nodes lay out in a few milliseconds [8.52ms]

src/canvas/layout/stops.test.ts:
(pass) a view that fits the viewport has one stop, centred [0.35ms]
(pass) a wide view has one stop per column and the last stop ends at the right edge [0.21ms]
(pass) a view taller than the viewport is scaled down so it fits [0.03ms]
(pass) nearestStop picks the stop whose centre is closest [0.17ms]
(pass) a big graph opens fitted whole, in one stop, and its canvas is free [0.17ms]
(pass) a small graph keeps one stop per node column [0.14ms]
(pass) on a narrow screen a big graph does not shrink past where its names can be read: it starts at the top left [0.07ms]
(pass) centred stops (a phone's strip) rest every column mid-screen, the first and last included [0.10ms]

src/canvas/layout/grid.test.ts:
(pass) split right in a stacked column makes a group: the window's column halves, its neighbours span both halves [1.49ms]
(pass) closing the new half gives the layout back exactly, in the model [1.06ms]
(pass) closing the window it came from makes the new half take its band, and the layout is one column again [0.34ms]
(pass) split right of a spanning window halves its span inside the existing columns, with the footprint unchanged [0.22ms]
(pass) split down in a group divides only the window's band: the partner window grows to keep its height [0.55ms]
(pass) closing the window split down gives its band back to the window above and to the partner [0.68ms]
(pass) a window split down in a plain column stacks under it and moves the windows below down [0.14ms]
(pass) new window right opens a full-size column after the whole group, never inside it [0.16ms]
(pass) runs: adjacent columns linked by a spanning window form one group, the rest stay plain [0.08ms]
(pass) spans are clamped to the columns that exist and a stale row is re-placed, never overlapped [0.13ms]
(pass) random sequences of split right, split down, new window right and close never break the grid [45.83ms]
(pass) closing every window of a group returns the view to nothing, with no problem on the way [0.57ms]
(pass) a full-width band under a group moves nothing and extends the group by one band [0.31ms]
(pass) a band inserted between two bands of one column grows the windows beside it and moves the rest [0.21ms]

src/canvas/layout/geometry.test.ts:
(pass) a dropped view pushes the one it lands on along the axis of least overlap, never itself [0.57ms]
(pass) a chain of neighbours is pushed in turn [0.14ms]
(pass) snapping rounds to whole cells [0.04ms]
(pass) reach follows grants through tags and keeps the relay [0.30ms]
(pass) phone edge to edge: a lone window is the whole area, in a strip it leaves the gap and PEEK px of each neighbour; full width is the whole area always [0.24ms]
(pass) comfortable phones: a column in a strip leaves PEEK px of each neighbour; a lone one keeps the screen less the margins [0.06ms]
(pass) a desktop column is the same alone and in a strip [0.02ms]

src/canvas/sessions/live-inventory.test.ts:
(pass) a host snapshot replaces cached session rows and keeps only live shims [2.20ms]
(pass) an unavailable agent hides remembered rows without ending them, then restores verified sessions [0.33ms]
(pass) inventory remembers a remote session and refuses a cross-host attach [0.57ms]
(pass) superseded status snapshots release records for sessions this device never opened [1.38ms]
(pass) superseding a sidecar preserves status for a window opened on this device [0.15ms]
(pass) a census predating a new shell does not permanently retire its confirmed live ID [0.17ms]
(pass) a final Close before the first positive census never revives a new ID [0.09ms]
(pass) a later absence retires a new ID after its first positive census [0.07ms]
(pass) another host's census cannot clear a new shell's census fence [0.05ms]
(pass) another host's close cannot clear a new shell's census fence [0.01ms]

src/canvas/sessions/details-live.test.ts:
(pass) a refused host facts action stops its recurring timer [0.78ms]
(pass) a detected operating system supplies the live popover mark [0.68ms]

src/canvas/sessions/live.test.ts:
(pass) the toolbar sessions seam exposes admitted host state and routes by identity [1.82ms]
(pass) an enrolled host opens by UUID and splits keep that authority [0.19ms]
(pass) an authoritative snapshot keeps an unjoined host visible while setup continues [0.15ms]
(pass) unknown and ambiguous labels never open an embedded shell [0.15ms]
(pass) removed hosts disappear from inventory and cannot route a new shell [0.15ms]
(pass) an authoritative host snapshot replaces admission with one notification [0.20ms]
(pass) the embedded inventory identity still opens locally beside an equally named remote [0.09ms]
(pass) the embedded host's mark does not wait for an account name, and no account is invented [0.09ms]

src/canvas/sessions/hosts.test.ts:
(pass) fresh storage lists an offline host added by another browser [0.99ms]
(pass) every welcome reconciles without duplicate subscriptions or hosts [0.28ms]
(pass) a removal in another browser withdraws the host [0.18ms]
(pass) a malformed page cannot partially replace the authoritative inventory [0.29ms]
(pass) a socket-authority refusal withdraws previously admitted hosts [0.28ms]
(pass) an invalidated read cannot enqueue an unsent call while the socket is down [0.36ms]

src/canvas/sessions/gone-review.test.ts:
(pass) selecting a known gone session keeps its final exited state [0.20ms]
(pass) a known retired status survives repeated selection and generic ended answers [0.13ms]

src/canvas/sessions/hosts-scale-review.test.ts:
(pass) a fresh browser discovers 10000 admitted offline hosts from complete bounded pages [13.93ms]
(pass) a fresh browser discovers 10001 admitted offline hosts from complete bounded pages [12.16ms]

src/canvas/sessions/open-refusal.test.ts:
(pass) memory refusal retains the reason and current counters [1.00ms]
(pass) legacy refusals still work and malformed counters never reach the message [0.56ms]
(pass) product copy names the host and counters and never renders untrusted server text [0.78ms]
(pass) oversized refusal JSON is ignored before parsing [0.14ms]

src/canvas/model/document.test.ts:
(pass) a document holds references and layout, never content [0.70ms]
(pass) a document survives JSON and rebuilds the same columns [0.94ms]
(pass) a target that no longer exists is dropped, and an emptied column with it [0.10ms]
(pass) parseDocument rejects anything that is not a document of this format [0.38ms]
(pass) remote affinity survives reload and invalid UUIDs cannot become local references [0.21ms]
(pass) a version 1 document from before D212 loads, with its split pair and a full-size window [0.44ms]
(pass) a grouped view saves its spans and bands and loads back to the same grid (D212) [0.30ms]
(pass) a plain view is saved without spans or bands, exactly as before D212 [0.05ms]

src/canvas/addhost/setup-feed.test.ts:
(pass) createSetupFeed > subscribes with the host and window, then hands over events in order [0.76ms]
(pass) createSetupFeed > a failure after the prompt, and a retry on the same socket [0.36ms]
(pass) createSetupFeed > a dropped socket resumes after the last sequence and repeats nothing [20.59ms]
(pass) createSetupFeed > a retry asked while offline is sent when the socket is back [20.65ms]
(pass) createSetupFeed > a resync resets the view; an error before any event reports the status lost, after one it is ignored [0.48ms]
(pass) createSetupFeed > gives up after the backoff is spent, and a release closes the socket [48.20ms]
(pass) review reconnect budget survives sockets that open then close without events [46.26ms]
(pass) review explicit retry resumes after the setup feed stops [46.24ms]

src/canvas/addhost/wizard.breakit2.test.ts:
(pass) breakit2 an explicit port on a listed host survives chip resolution [0.47ms]
(pass) breakit2 malformed bracketed IPv6 waits for correction [0.13ms]
(pass) listed host plus port retains its saved user in the serialized destination [0.25ms]
(pass) review listed inventory name plus port retains its resolved address [0.28ms]

src/canvas/addhost/setup-stages.test.ts:
(pass) parseSetupEvent > reads a well-formed event [0.14ms]
(pass) parseSetupEvent > drops anything malformed [0.18ms]
(pass) parseSetupEvent > ignores a failed step on a non-failure and an unknown step on a failure [0.06ms]
(pass) foldSetup > stages before the event's are done, later ones pending [0.24ms]
(pass) foldSetup > a stage that reports done alone still finishes [0.04ms]
(pass) foldSetup > ready done completes the run [0.05ms]
(pass) foldSetup > a failure marks the stage its step belongs to, and a retry clears it [0.12ms]
(pass) foldSetup > uploading belongs to install and the readiness check to ready [0.07ms]
(pass) setupGuide > says the terminal keeps working and what to do next, in plain words [0.15ms]
(pass) review malformed setup fields are dropped without coercion errors [0.22ms]
(pass) exhausted setup preserves eligibility and explains a new setup [0.17ms]

src/canvas/addhost/real.test.ts:
(pass) parsing the server's data > a discovery row keeps only known fields and valid ids [0.36ms]
(pass) parsing the server's data > the server key needs its public key and fingerprint [0.07ms]
(pass) parsing the server's data > an install command needs a lifetime [0.05ms]
(pass) a server that lacks an endpoint > serving the web app (200, HTML) for an unknown path is 'not available' [1.54ms]
(pass) a server that lacks an endpoint > 404 discovery is an empty list; 500 discovery is an error to show [0.39ms]
(pass) a server that lacks an endpoint > private sign-in stays local until a target-bound socket start [1.25ms]
(pass) a server that lacks an endpoint > a wrong target consumes the reference without sending private input [0.35ms]
(pass) a server that lacks an endpoint > a local reference cannot change SSH address while keeping the target id [0.28ms]
(pass) a server that lacks an endpoint > closing before open discards queued sign-in even if a late open fires [0.19ms]
(pass) a server that lacks an endpoint > pre-open commands stay bounded and events after close cannot revive a run [0.40ms]
(pass) a server that lacks an endpoint > trust waits for the exact acknowledgement, and ignores another target [0.54ms]
(pass) bootstrap failure parsing > an already-added failure keeps its existing host id [0.52ms]
(pass) bootstrap failure parsing > host ids are ignored on other failures and when malformed [0.25ms]

src/canvas/addhost/authority.on-demand.test.ts:
(pass) CA wrapping matches the contract's HKDF domain and separates generations [6.63ms]

src/canvas/addhost/model.test.ts:
(pass) stagesOf > a host with no event is waiting everywhere [0.20ms]
(pass) stagesOf > check before sign-in is detecting how to sign in [0.12ms]
(pass) stagesOf > the sign-in report finishes detect and starts the system check [0.08ms]
(pass) stagesOf > install, facts and connect map to install, enrol and first session [0.09ms]
(pass) stagesOf > an auth failure before sign-in fails detect and says it in plain words, not the server's [0.15ms]
(pass) stagesOf > an unsupported host fails the system check, after sign-in [0.08ms]
(pass) stagesOf > an install failure fails the install stage and keeps the earlier ones done [0.06ms]
(pass) stagesOf > a new attempt starts over and forgets the old sign-in [0.07ms]
(pass) authLabel > names the method and a trusted network provider only [0.04ms]
(pass) guideFor > installation failures never claim that incomplete cleanup succeeded [0.12ms]
(pass) guideFor > each failure kind names its fix [0.06ms]
(pass) guideFor > mesh-policy words say possible, not certain [0.02ms]
(pass) parseTarget > reads user, host and port [0.04ms]
(pass) parseTarget > refuses what cannot name a host [0.02ms]
(pass) parseSshConfig > reads aliases with HostName, User and Port, skipping wildcards and Match [0.95ms]
(pass) parseSshConfig > recognises config text [0.05ms]
(pass) parseSshConfig > a hostname that is an option is dropped [0.04ms]
(pass) plain words > an unknown or missing failure gets the generic sentence, never the server's text [0.08ms]
(pass) plain words > no headline carries an arrow, an id or an API noun [0.10ms]
(pass) only a completed canonical host identity becomes terminal authority [0.11ms]
(pass) parseTarget > accepts user@host, host, user@host:port, IPv4 and bracketed IPv6 with an optional port [0.09ms]
(pass) parseTarget > rejects partial and malformed tokens, so they wait or show the hint [0.04ms]
(pass) matchListed > a name that is exactly one host's id or address names that host [0.07ms]
(pass) matchListed > a name that is also the start of another host's name is named but still prefixed [0.03ms]
(pass) matchListed > a partial name that starts several hosts names none and waits [0.02ms]
(pass) matchListed > a new name that starts no host is neither named nor waiting [0.02ms]
(pass) install diagnostics name the failed step and public host error [0.07ms]
(pass) missing payload tells the operator the architecture and expected server path [0.04ms]
(pass) an already added host says so and offers opening its existing terminal [0.25ms]
(pass) release payload verification names the architecture step and plain reason [0.03ms]
(pass) leftovers pause (#169) > a check event with leftovers pauses the running attempt; the next event clears it [0.08ms]
(pass) leftovers pause (#169) > a pause without leftovers offers nothing to start fresh [0.09ms]
(pass) early terminal publication selects only its canonical host-bound shim session [0.14ms]

src/canvas/addhost/already-added-breakit.test.ts:
(pass) an already-added failure without a host id (older server) still says how to reach the terminal [0.10ms]

src/canvas/addhost/wizard.test.ts:
(pass) a saved-key prompt completing after close never starts an SSH attempt [0.43ms]
(pass) fresh CA requires setup before any SSH attempt and preserves root consent [0.31ms]
(pass) ready CA begins the requested installation mode without another prompt [0.15ms]
(pass) closing during CA confirmation never starts an SSH attempt [0.32ms]
(pass) a typed root login requires explicit consent before any installation [0.13ms]

src/canvas/views/body.test.ts:
(pass) a clean terminal exit keeps the window while host setup can still fail [0.05ms]
(pass) clean exits still close ordinary windows, and failed exits stay visible [0.01ms]

../../packages/ui/src/spring.test.ts:
(pass) a missed frame does not stretch a settled spring [0.47ms]
(pass) motion follows elapsed time across frame rates and damping regimes [0.78ms]

chunk-classes.test.ts:
(pass) the first screen is critical, the canvas product module and what only it uses are deferred [1.30ms]
(pass) a chunk that both sides use stays critical [0.21ms]
(pass) code only an action loads is on demand, even when the lazy canvas is what loads it [0.21ms]
(pass) post-terminal host inventory entry and its shared canvas imports stay deferred [0.14ms]

test/recovery-ui.test.ts:
(pass) compiled recovery UI mode off obeys its URL boundary [3.88ms]
(pass) compiled recovery UI mode preview obeys its URL boundary [3.05ms]
(pass) compiled recovery UI mode 1 obeys its URL boundary [2.38ms]

test/recovery-crypto.test.ts:
(pass) HKDF siblings match independent implementation and bind unwrap to domain, account, kind and version [13.38ms]
(pass) 100 repeated wrapping operations generate independent salts and nonces [17.36ms]

test/recovery-rotation.test.ts:
(pass) signed-in rotation sends only a local envelope and verifier after acknowledgement [9.42ms]
(pass) abandoned word acknowledgement uploads nothing [2.62ms]
(pass) settled acknowledgement cannot upload later (dismissed) [3.02ms]
(pass) settled acknowledgement cannot upload later (no acknowledgement) [3.14ms]

test/recovery-wait.test.ts:
(pass) server remaining wait 0s is accepted through the capability policy maximum [1.72ms]
(pass) server remaining wait 86400s is accepted through the capability policy maximum [4.26ms]
(pass) server remaining wait 90000s is accepted through the capability policy maximum [0.81ms]
(pass) server remaining wait 172800s is accepted through the capability policy maximum [0.82ms]
(pass) malformed or excessive remaining wait -1 is denied [1.45ms]
(pass) malformed or excessive remaining wait 0.5 is denied [1.13ms]
(pass) malformed or excessive remaining wait 172801 is denied [1.89ms]
(pass) malformed or excessive remaining wait 9007199254740992 is denied [0.99ms]
(pass) malformed or excessive remaining wait 90000 is denied [1.77ms]

test/link-doubt.test.ts:
(pass) a link doubt shows the indicator and keeps live replies and typing flowing [2.36ms]
(pass) recovery clears only its own indicator, and a real reconnect still owns the replay [0.49ms]
(pass) a notice type from a newer server is ignored, not a protocol failure [0.10ms]
(pass) the viewer announces the link-doubt capability in its Hello [2.53ms]

test/close-reasons.test.ts:
(pass) every reason the server and the agent send maps to a plain sentence, and unknown ones fall back [0.26ms]

src/close-reasons.test.ts:
(pass) a missed connection response keeps a plain and stable reason [0.07ms]
(pass) server and host close reasons identify why a terminal reconnects, in plain words [0.34ms]
(pass) routine detach and connection rotation reasons stay neutral [0.03ms]
(pass) a stream close that reattaches never says the terminal ended [0.13ms]
(pass) a recovering server link names its cause as routine status, never as a failure [0.05ms]
(pass) unknown close text is discarded instead of reaching the person or console [0.07ms]
(pass) a storm of closes prints one line per minute and counts the rest [0.44ms]
(pass) counted closes are reported when their window ends, without another close [0.07ms]

src/review-close-log.test.ts:
(pass) a reconnect the server refuses with a named Close frame still prints its console line [1.78ms]
(pass) a close summary does not claim closes from hours ago happened in the previous 60 s [0.08ms]

 257 pass
 0 fail
 11713 expect() calls
Ran 257 tests across 41 files. [1315.00ms]
$ bun run build.ts
built chunk-9dj44p0a.js, chunk-0jphd38d.js, chunk-cnjctkrq.js, chunk-47f4tn7x.js, chunk-rshddc30.js, chunk-q467md24.js, chunk-vvfhgzxa.js, chunk-gxvqf3b8.js, chunk-gg7faby0.js, chunk-vhbcyq91.js, chunk-8hj7tbcp.js, chunk-zszpf2a9.js, chunk-065hdb1d.js, main.js, chunk-sfgvybwa.js, chunk-e4t9f0jx.js, chunk-66twd4zb.js, chunk-cevm39z1.js, chunk-js7mqtws.js, chunk-q02gbqrk.js, chunk-mtnxk89a.js, chunk-qy08p7pq.js, chunk-kh5ft0g7.js, chunk-mdj6q6m3.js, chunk-x5kjav4h.js, chunk-mc7zg1f6.js, chunk-7peczaex.js, chunk-axbkkqp1.js, chunk-9zghjb1g.js, chunk-z8mt9y1j.js, chunk-01abhgs8.js, chunk-767bkb6g.js, chunk-26a2dq35.js, chunk-g023gj2e.js, chunk-ygn6sf7q.js, chunk-1tfhe1dx.js, chunk-1zevcvt4.js, chunk-zj4er5rx.js, chunk-s7bsrm05.js, chunk-rr7pe45y.js, chunk-423hf1z3.js, chunk-g71a46j0.js, chunk-ga7n3p96.js, chunk-25tm8tfx.js, chunk-v09vcy66.js, chunk-v33nffnh.js, chunk-kbscn46e.js, chunk-fzenw0bj.js, chunk-syt2e5ba.js, chunk-xh53528d.js, chunk-9xd3g65e.js, chunk-28rbcdd5.js, chunk-61xwpgvs.js, chunk-6hphcpbw.js, chunk-mmvf4v8e.js, chunk-z48tcwe1.js, chunk-vkabh9k4.js, chunk-jk5xheq9.js, backdrop.worker.js, faulty-terminal.worker.js, chunk-m7p3gf3z.js, chunk-f2r0hhqc.js, chunk-g548efbg.js, chunk-0h1atq4q.js, chunk-eevbmngj.js
critical chunk-28rbcdd5.js: identity=39 gzip=39 brotli=39 bytes
onDemand chunk-25tm8tfx.js: identity=48336 gzip=15099 brotli=13444 bytes
onDemand chunk-767bkb6g.js: identity=2824 gzip=1386 brotli=1192 bytes
deferred chunk-x5kjav4h.js: identity=1565 gzip=810 brotli=732 bytes
onDemand chunk-syt2e5ba.js: identity=2466 gzip=1107 brotli=934 bytes
critical chunk-mtnxk89a.js: identity=590 gzip=329 brotli=304 bytes
onDemand chunk-z48tcwe1.js: identity=601 gzip=344 brotli=326 bytes
onDemand chunk-g548efbg.js: identity=1063 gzip=651 brotli=520 bytes
deferred chunk-47f4tn7x.js: identity=37428 gzip=13601 brotli=12156 bytes
onDemand chunk-vhbcyq91.js: identity=2420 gzip=1197 brotli=1074 bytes
onDemand chunk-q467md24.js: identity=3891 gzip=1735 brotli=1504 bytes
onDemand chunk-vkabh9k4.js: identity=1408 gzip=713 brotli=665 bytes
critical chunk-v33nffnh.js: identity=162 gzip=150 brotli=131 bytes
critical chunk-js7mqtws.js: identity=17627 gzip=6252 brotli=5560 bytes
onDemand chunk-0jphd38d.js: identity=6503 gzip=2412 brotli=2148 bytes
onDemand chunk-9zghjb1g.js: identity=10904 gzip=4424 brotli=4036 bytes
critical chunk-sfgvybwa.js: identity=8377 gzip=3575 brotli=3181 bytes
critical faulty-terminal.worker.js: identity=1086 gzip=557 brotli=487 bytes
critical backdrop.worker.js: identity=243 gzip=211 brotli=165 bytes
onDemand chunk-kbscn46e.js: identity=6772 gzip=3178 brotli=2889 bytes
onDemand chunk-1zevcvt4.js: identity=11529 gzip=4656 brotli=4257 bytes
critical chunk-kh5ft0g7.js: identity=386 gzip=239 brotli=196 bytes
onDemand chunk-zj4er5rx.js: identity=5359 gzip=2578 brotli=2297 bytes
critical chunk-eevbmngj.js: identity=42576 gzip=14526 brotli=13016 bytes
onDemand chunk-423hf1z3.js: identity=14570 gzip=5430 brotli=4877 bytes
critical chunk-m7p3gf3z.js: identity=9810 gzip=4017 brotli=3451 bytes
critical chunk-axbkkqp1.js: identity=90 gzip=90 brotli=78 bytes
onDemand chunk-g71a46j0.js: identity=11067 gzip=4244 brotli=3870 bytes
critical chunk-mdj6q6m3.js: identity=1106 gzip=668 brotli=607 bytes
onDemand chunk-7peczaex.js: identity=1026 gzip=623 brotli=497 bytes
critical chunk-f2r0hhqc.js: identity=128 gzip=109 brotli=111 bytes
onDemand chunk-gg7faby0.js: identity=228 gzip=178 brotli=172 bytes
critical chunk-9xd3g65e.js: identity=39 gzip=39 brotli=39 bytes
critical chunk-z8mt9y1j.js: identity=717147 gzip=207430 brotli=168466 bytes
critical chunk-vvfhgzxa.js: identity=707 gzip=369 brotli=309 bytes
onDemand chunk-v09vcy66.js: identity=6785 gzip=3028 brotli=2744 bytes
onDemand chunk-01abhgs8.js: identity=6148 gzip=2780 brotli=2518 bytes
onDemand chunk-g023gj2e.js: identity=2007 gzip=1005 brotli=857 bytes
onDemand chunk-e4t9f0jx.js: identity=2557 gzip=1180 brotli=1003 bytes
onDemand chunk-6hphcpbw.js: identity=869 gzip=346 brotli=323 bytes
onDemand chunk-1tfhe1dx.js: identity=540 gzip=353 brotli=314 bytes
critical chunk-cevm39z1.js: identity=15639 gzip=6065 brotli=5409 bytes
onDemand chunk-ygn6sf7q.js: identity=1649 gzip=775 brotli=675 bytes
critical chunk-9dj44p0a.js: identity=30702 gzip=9232 brotli=8285 bytes
onDemand chunk-mmvf4v8e.js: identity=2723 gzip=1328 brotli=1142 bytes
critical chunk-q02gbqrk.js: identity=430 gzip=311 brotli=262 bytes
critical chunk-qy08p7pq.js: identity=2519 gzip=1009 brotli=877 bytes
onDemand chunk-26a2dq35.js: identity=4596 gzip=2016 brotli=1792 bytes
onDemand chunk-8hj7tbcp.js: identity=191 gzip=168 brotli=126 bytes
critical chunk-gxvqf3b8.js: identity=88 gzip=88 brotli=76 bytes
critical main.js: identity=113109 gzip=41126 brotli=35618 bytes
critical chunk-rshddc30.js: identity=4499 gzip=1858 brotli=1640 bytes
onDemand chunk-zszpf2a9.js: identity=6265 gzip=2103 brotli=1863 bytes
onDemand chunk-xh53528d.js: identity=1170 gzip=708 brotli=620 bytes
critical chunk-61xwpgvs.js: identity=49 gzip=49 brotli=49 bytes
critical chunk-66twd4zb.js: identity=5448 gzip=2611 brotli=2385 bytes
deferred chunk-mc7zg1f6.js: identity=102038 gzip=34669 brotli=30585 bytes
onDemand chunk-065hdb1d.js: identity=2108 gzip=1037 brotli=870 bytes
onDemand chunk-jk5xheq9.js: identity=724 gzip=403 brotli=361 bytes
onDemand chunk-fzenw0bj.js: identity=31922 gzip=12271 brotli=11029 bytes
onDemand chunk-rr7pe45y.js: identity=7662 gzip=3399 brotli=2978 bytes
onDemand chunk-ga7n3p96.js: identity=572 gzip=329 brotli=309 bytes
critical chunk-0h1atq4q.js: identity=199 gzip=163 brotli=137 bytes
onDemand chunk-cnjctkrq.js: identity=5779 gzip=2370 brotli=2133 bytes
onDemand chunk-s7bsrm05.js: identity=4640 gzip=1933 brotli=1705 bytes
JavaScript transfer, critical: identity=972795 gzip=301112/307200 brotli=250878/256000 bytes
JavaScript transfer, deferred: identity=141031 gzip=49080/51200 brotli=43473/45056 bytes
JavaScript transfer, onDemand: identity=219874 gzip=87487/20480 brotli=78064/18432 bytes
JavaScript transfer, onDemand largest chunk chunk-25tm8tfx.js: gzip=15099/20480 brotli=13444/18432 bytes (class total gzip=87487 brotli=78064, not limited)
fonts/monaspace-neon/italic.latin.woff2: identity=44324 gzip=44324 brotli=44324 bytes
fonts/monaspace-neon/roman.latin.woff2: identity=40016 gzip=40016 brotli=40016 bytes
fonts/jetbrains-mono/italic.latin.woff2: identity=36316 gzip=36316 brotli=36316 bytes
fonts/jetbrains-mono/roman.latin.woff2: identity=34068 gzip=34068 brotli=34068 bytes
fonts/source-code-pro/italic.latin.woff2: identity=23612 gzip=23612 brotli=23612 bytes
fonts/source-code-pro/roman.latin.woff2: identity=22872 gzip=22872 brotli=22872 bytes
fonts/geist-mono/italic.latin.woff2: identity=21380 gzip=21380 brotli=21380 bytes
fonts/geist-mono/roman.latin.woff2: identity=19984 gzip=19984 brotli=19981 bytes
fonts/ibm-plex-mono/italic.latin.woff2: identity=22296 gzip=22296 brotli=22296 bytes
fonts/ibm-plex-mono/roman.latin.woff2: identity=19048 gzip=19048 brotli=19047 bytes
fonts/cascadia-code/italic.latin.woff2: identity=44404 gzip=44404 brotli=44404 bytes
fonts/cascadia-code/roman.latin.woff2: identity=40604 gzip=40604 brotli=40604 bytes
fonts/maple-mono-nf/italic.latin.woff2: identity=53444 gzip=53444 brotli=53444 bytes
fonts/maple-mono-nf/roman.latin.woff2: identity=46432 gzip=46432 brotli=46432 bytes
fonts/nerd-symbols.woff2: identity=223748 gzip=223748 brotli=223748 bytes
fonts/fira-code/roman.latin.woff2: identity=36756 gzip=36756 brotli=36756 bytes
fonts/commit-mono/italic-400.latin.woff2: identity=18716 gzip=18716 brotli=18716 bytes
fonts/commit-mono/italic-700.latin.woff2: identity=18352 gzip=18352 brotli=18352 bytes
fonts/commit-mono/roman-400.latin.woff2: identity=17484 gzip=17484 brotli=17484 bytes
fonts/commit-mono/roman-700.latin.woff2: identity=17260 gzip=17260 brotli=17260 bytes
Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes

==> Rust stream oracle (for the differential test)

==> TypeScript protocol tests
bun test v1.4.2 (744846f84)

src/mesh-review-revocation.test.ts:
(pass) review forbidden event cancels pending snapshot publication [4.44ms]
(pass) subscription forbidden ends delivery before a late refresh rejection [2.16ms]
(pass) subscription not found ends delivery before a late refresh rejection [1.29ms]
(pass) subscription invalid input ends delivery before a late refresh rejection [3.49ms]
(pass) subscription mesh unavailable ends delivery before a late refresh rejection [1.46ms]
(pass) synchronous subscription refusal releases the transport exactly once [0.28ms]

src/codec.test.ts:
(pass) wire protocol golden vectors > encodes and decodes each frame exactly as the shared manifest describes [11.38ms]
(pass) wire protocol golden vectors > returns borrowed payload views and writes into reusable buffers [0.19ms]
(pass) wire protocol golden vectors > decodes muxed messages split across WebSocket messages [0.65ms]
(pass) wire protocol golden vectors > rejects oversized, non-canonical, unknown, and malformed frame bytes [0.14ms]
(pass) split mux header preserves trailing Close [0.34ms]
(pass) reply-marked Input uses an additive bounded layout without changing legacy input [0.74ms]
(pass) empty marked input reports the stable invalid-body decoder failure [0.14ms]

src/mesh-review-paged-error.test.ts:
(pass) review earlier snapshot continuation failure cannot replace a newer complete refresh [3.54ms]
(pass) review earlier snapshot continuation cannot overwrite a delivered revision [3.81ms]
(pass) a newer paged event owns publication before an earlier refresh resumes [2.87ms]

src/mesh-review-refresh.test.ts:
(pass) review superseded refresh failure cannot replace authoritative resync [1.59ms]
(pass) superseded failure preserves a newer pending refresh [3.42ms]

src/stream.test.ts:
stream differential: 141 streams, 11988 schedules, zero divergences
(pass) Rust and TypeScript preserve every frame at all boundaries and random multi-splits [2910.42ms]
(pass) maximum frame size and fragmented oversized prefix obey the allocation boundary [7.37ms]

src/mesh.test.ts:
(pass) Mesh actions map to their typed action IDs and JSON inputs [2.58ms]
(pass) Mesh watch coalesces change bursts and never publishes an older revision [3.97ms]
(pass) Mesh watch forwards server errors and stops delivering after unsubscribe [0.09ms]
(pass) Mesh enrollment carries an explicit authenticated host binding [0.17ms]

src/mesh-review-continuation.test.ts:
(pass) review continuation stops after stop [1.37ms]
(pass) review continuation stops after forbidden [1.18ms]
(pass) review continuation stops after superseded [1.12ms]

src/mesh-pagination.test.ts:
(pass) list assembles bounded pages using the same filter [0.23ms]
(pass) a changed revision discards earlier pages before assembling its restart [0.17ms]
(pass) malformed continuation is refused: {"revision":1,"offset":0} [0.13ms]
(pass) malformed continuation is refused: {"revision":2,"offset":1} [0.01ms]
(pass) malformed continuation is refused: {"revision":1,"offset":2}
(pass) watch never publishes a partial page; withdrawn=false [1.33ms]
(pass) watch never publishes a partial page; withdrawn=true [1.26ms]
(pass) a superseding equal-revision resync wins over pending page assembly [1.43ms]

src/mesh-review-resync.test.ts:
(pass) review watch applies same-revision authoritative resync [0.21ms]
(pass) authoritative resync keeps priority over an equal-revision pending list [1.52ms]

src/mesh-vectors.test.ts:
(pass) every shared Mesh action vector passes through the typed client unchanged [1.42ms]
(pass) shared Mesh event vectors drive the typed watch adapter [5.29ms]

 39 pass
 0 fail
 36135 expect() calls
Ran 39 tests across 10 files. [3.11s]
D307 round 2 complete. Head: `24d0119d15915a4cca18a094c81ba8c232bb46e0`. Atomically pushed `query-replies-r2` and fast-forwarded `query-replies`; both remote refs independently verified at this SHA. No deployment. Issue remains open. QR-001: renderer-produced answers are marked without request/response text matching. Generic browser boundaries give stable byte identities across fragmented writes; the server arbitrates observed output positions without a terminal grammar. Replay never renews expiry, late/duplicate replies are refused, retained state remains bounded, and unmarked Input stays typing. Full best-effort reply queues preserve accepted typing. The scoped renderer JS API avoids per-control input allocations; the pinned WASM is unchanged. Review commits were cherry-picked unchanged as 3129a8b23 and 064f82c9e; their assertions were not weakened. Validation: 16 renderer/boundary/property tests, 1,749 assertions; 30 answered forms across all 515 two-part splits with 3 independent renderers. Real server/infraternal agent/shim/PTY corpus: 30 forms, all 3 viewers attempt an answer, exact expected PTY bytes once per form, observed beyond expiry. All 12 final-production browser functional cases pass on the named perf VM. Measured on the named perf VM under short locked foreground scopes: three paired 40-key/300 ms browser cohorts have glyph p99 baseline 14.4/14.2/14.2 ms versus head 14.1/14.5/14.3 ms (17 ms budget); input CPU p99 head 1.3/0.3/0.8 ms (5 ms budget). Real native typing with 500 attached PTYs (4 nodes ×125, one active typing PTY): local echo p99 head 1.97/2.79 ms versus baseline 1.76/2.52 ms (5 ms budget), 300 ms echo p99 head 326.06 ms versus baseline 325.97 ms (334 ms budget). Native measurements cover the direct infraternal-agent/PTY path; browser measurements use the production renderer and standard test double. Dense-style VT component throughput (canvas excluded) improves from baseline 10.04/11.35 MiB/s to head 12.83/12.46 MiB/s. Full samples, machine/load metadata and reproduction scripts are attached in earlier comments and below. Same-merge-base size comparison (`23723c0c836dd63e3415d478a56e4d87c9ce8e14`), same production recipes: ```text Head: 24d0119d15915a4cca18a094c81ba8c232bb46e0 Merge base: 23723c0c836dd63e3415d478a56e4d87c9ce8e14 Native recipe: scripts/static-cargo build --locked --release --package infraternal --target <target>; same pinned toolchain and one job target directory. JavaScript recipe: bun run build; bun run transfer-budget.ts; default production flags for both revisions. Native stripped static bytes (baseline -> head; delta): x86_64: 21223696 -> 21215664; -8032 B head SHA-256 b252c5c00e8be8419e032cdabeeaa358274be6b1606244e499af8a87529b31f9 aarch64: 19415776 -> 19408192; -7584 B head SHA-256 7c877eef56ef9f245ac0236123c8fa7810ee4475f358e38785f2b3e0381400de Final x86_64 image is byte-identical to the measured perf-VM candidate. JavaScript delivery bytes: identity / gzip / brotli (baseline -> head; delta): critical: identity 972702 -> 972795 (+93 B); gzip 301190 -> 301112 (-78 B); brotli 251053 -> 250878 (-175 B) deferred: identity 141031 -> 141031 (+0 B); gzip 49081 -> 49080 (-1 B); brotli 43518 -> 43473 (-45 B) onDemand: identity 219874 -> 219874 (+0 B); gzip 87485 -> 87487 (+2 B); brotli 78059 -> 78064 (+5 B) all classes: identity delta +93 B; gzip delta -77 B; brotli delta -215 B ``` Author review complete. Final `scripts/verify fast` exits 0 with no waivers; every Rust row, both static images, key-heap/linkage/metadata checks, TypeScript checks, production transfer budgets and protocol tests pass. Only the documented private short-path runner is used for socket fixtures; restart/exec fixtures use ordinary execution. Temporary build targets/comparison checkouts and this job’s VM directory are removed. No infraternal processes remain in the build job’s cgroup; all recorded perf scopes are inactive and native cohorts enumerate every owned PID as gone. [verify-fast-final.log](https://git.kayg.org/attachments/26b1db48-e345-4232-a130-587820198a95) [native-and-js-sizes.txt](https://git.kayg.org/attachments/0e4b6cef-519f-46cf-8619-e46bcf01f8bc) [author-review.txt](https://git.kayg.org/attachments/8fb74650-0669-4843-a62d-b48e2ac7dc62) [gate-driver.txt](https://git.kayg.org/attachments/7a1cf4c6-ebbf-4cd8-b59d-bfcb12f72cb7) [test-runner.txt](https://git.kayg.org/attachments/a9aea064-affb-4410-b27f-7b84e6c2adf2) [private-fixture.txt](https://git.kayg.org/attachments/1cf04c5b-ae2e-47ac-bf44-cab65df978a7) [performance-reproduction.txt](https://git.kayg.org/attachments/838f24f0-a955-40f1-802e-d96772708231) [perf-cleanup-final.log](https://git.kayg.org/attachments/544f3923-7db4-468b-bcf3-7c4356abf5c7) [pushed-refs.txt](https://git.kayg.org/attachments/b361236f-24b2-4f9b-96e7-417d751711c1) [build-host-cleanup.txt](https://git.kayg.org/attachments/9f2a3c66-980b-41f7-af7d-d9ec04cfc005) [local-scratch-cleanup.txt](https://git.kayg.org/attachments/c24ac49d-d7c1-4885-8830-9b22bc749d57) [restart-fixture-check.log](https://git.kayg.org/attachments/dbd7a42c-328f-4ca4-a261-047484f03b71) [failed-gate-cleanup.txt](https://git.kayg.org/attachments/19f5b1d1-dcac-474c-a00a-5fc3d4dc9420) ![query-replies-real.png](https://git.kayg.org/attachments/3c30c0ab-1d79-4fba-a301-eb23ab484e61) Final gate output, verbatim (head above; exit status 0): <details> <summary>scripts/verify fast transcript</summary> ```text Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.12s ==> Repository artifact size gate repository artifact gate: PASS (52 changed path(s), merge base f29713863e5d) ==> Release deployment functional checks .....Release build failed for aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa; gate log retained .Build deferred: host capacity limit reached ......... ---------------------------------------------------------------------- Ran 15 tests in 0.684s OK . ---------------------------------------------------------------------- Ran 1 test in 0.077s OK bun test v1.4.2 (744846f84) scripts/release/deploy-review.test.ts: REMOTE_ADMISSION unsigned_x86_payload=true refused=true (pass) remote admission refuses an x86 payload outside the signed manifest [206.48ms] {"state": "deployed", "ca_unlocked": true} WEB_ONLY_RECORD candidate_binary_recorded=false (pass) web-only deployment does not record the candidate as the running binary [203.53ms] ALIAS_RECOVERY restart_requests=2 (pass) alias restoration failure still requests the retained warm rollback [184.21ms] 3 pass 0 fail 3 expect() calls Ran 3 tests across 1 file. [610.00ms] METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=305.08 p99_ms=323.23 result=PASS ==> fmt (fmt: 2s) ==> VT native fmt (VT native fmt: 0s) ==> CLI plugin compile-out disabled CLI plugin dependencies: absent from normal dependency graph warning: function `print_progress` is never used --> crates/infraternal/src/cli/output.rs:592:8 | 592 | pub fn print_progress<T: Serialize>(result: &CommandResult<T>, json: bool, to_stderr: bool) { | ^^^^^^^^^^^^^^ | = note: `#[warn(dead_code)]` (part of `#[warn(unused)]`) on by default warning: function `write_output` is never used --> crates/infraternal/src/cli/output.rs:616:8 | 616 | pub fn write_output(output: Result<String, serde_json::Error>, to_stderr: bool) { | ^^^^^^^^^^^^ warning: `infraternal` (bin "infraternal" test) generated 2 warnings Finished `test` profile [unoptimized + debuginfo] target(s) in 0.09s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal-9c4fc48b971836fc) running 37 tests test cli::actions::default_build_tests::default_build_registers_no_unbuilt_command ... ok test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok test cli::actions::tests::agent_session_integration_target_is_gated_by_agent_plugin ... ok test cli::actions::tests::compiled_out_mesh_has_no_registered_commands ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::no_default_plugins_register_no_component_commands ... ok test cli::actions::tests::server_only_dependencies_are_removed_with_server_plugin ... ok test cli::command_tree::tests::compiled_out_plugin_has_no_help_or_parse_path ... ok test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test cli::command_tree::tests::node_build_omits_and_refuses_server_commands ... ok test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok test cli::command_tree::tests::public_help_is_plain_words ... ok test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok test cli::output::tests::a_failure_says_why_and_what_to_do ... ok test cli::output::tests::exit_codes_follow_d303 ... ok test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}} {"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}} ok test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok test cli::usage::tests::missing_arguments_are_listed_by_name ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test result: ok. 37 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.26s Finished `test` profile [unoptimized + debuginfo] target(s) in 0.19s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal-a2d65766d1f23d58) running 100 tests test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok test cli::actions::hosted_tests::production_descriptors_share_cli_registry_and_skills ... ok test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::hidden_ssh_session_bridge_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test cli::command_tree::tests::hidden_ssh_session_action_parses_existing_session_rendezvous ... ok test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok test cli::command_tree::tests::public_help_is_plain_words ... ok test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok test cli::output::tests::a_failure_says_why_and_what_to_do ... ok test cli::output::tests::exit_codes_follow_d303 ... ok test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}} {"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}} ok test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok test cli::usage::tests::missing_arguments_are_listed_by_name ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test remote::tests::join_re_enrolls_for_a_moved_server_but_not_a_renamed_one ... ok test remote::tests::join_re_enrolls_the_same_hosts_identity_and_refuses_another_host ... ok test remote::tests::join_refuses_the_same_host_id_from_another_server ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test remote::tests::replace_aborts_when_the_identity_changed_since_it_was_read ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test remote_service::tests::link_failure_does_not_wait_forever_for_blocking_work ... ok test remote_service::tests::polling_panic_reaches_bounded_shutdown ... ok test remote_service::tests::successful_link_return_is_a_service_failure ... ok test restart::recovery_tests::verified_exec_and_late_refusal_preserve_listener_and_ca ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test restart::tests::deleted_path_review::relative_recovery_after_atomic_install_keeps_live_install_path ... ok test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok test restart::tests::path_review::late_recovery_from_path_invocation_keeps_install_target ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ok test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ok test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ok test restart_binary::audit_tests::verification_twenty_megabytes ... ignored, optimized weighted 20 MiB signature and admission measurement test restart_image::tests::probe_never_inherits_the_control_descriptor ... ok test restart_image::tests::snapshot_refuses_every_mutation_and_preserves_source_offset ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok test ssh_internal::tests::connect_requires_exactly_a_host_and_numeric_port ... ok test ssh_internal::tests::connector_is_available_only_on_the_initiating_build ... ok test ssh_internal::tests::session_accepts_only_the_two_spawned_shapes ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test startup_tests::shared_reactor_preserves_borrows_errors_and_panic_cleanup ... ok test result: ok. 99 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 25.79s Finished `test` profile [unoptimized + debuginfo] target(s) in 0.13s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal_agent-c0f5ee2d4c7be28c) Private socket fixture: uid=1001 scratch=/mnt; capabilities dropped before test running 1 test test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 73 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal_mesh-c7263890e5528429) running 1 test test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal_plugin_backup-63687278dacedd2d) running 1 test test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal_plugin_relay-05772b88ed06ec15) running 1 test test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal_plugin_ssh-8d15d5d3bffc0793) running 1 test test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 42 filtered out; finished in 0.00s (CLI plugin compile-out: 27s) ==> clippy Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.33s (clippy: 0s) ==> test Finished `test` profile [unoptimized + debuginfo] target(s) in 0.42s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal-7de1f15af67158e9) running 100 tests test cli::actions::default_build_tests::default_build_registers_no_unbuilt_command ... ok test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::hidden_ssh_session_bridge_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test cli::command_tree::tests::hidden_ssh_session_action_parses_existing_session_rendezvous ... ok test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok test cli::command_tree::tests::public_help_is_plain_words ... ok test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok test cli::output::tests::a_failure_says_why_and_what_to_do ... ok test cli::output::tests::exit_codes_follow_d303 ... ok test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}} {"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}} ok test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok test cli::usage::tests::missing_arguments_are_listed_by_name ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test remote::tests::join_re_enrolls_for_a_moved_server_but_not_a_renamed_one ... ok test remote::tests::join_re_enrolls_the_same_hosts_identity_and_refuses_another_host ... ok test remote::tests::join_refuses_the_same_host_id_from_another_server ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test remote::tests::replace_aborts_when_the_identity_changed_since_it_was_read ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test remote_service::tests::link_failure_does_not_wait_forever_for_blocking_work ... ok test remote_service::tests::polling_panic_reaches_bounded_shutdown ... ok test remote_service::tests::successful_link_return_is_a_service_failure ... ok test restart::recovery_tests::verified_exec_and_late_refusal_preserve_listener_and_ca ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test restart::tests::deleted_path_review::relative_recovery_after_atomic_install_keeps_live_install_path ... ok test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok test restart::tests::path_review::late_recovery_from_path_invocation_keeps_install_target ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ok test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ok test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ok test restart_binary::audit_tests::verification_twenty_megabytes ... ignored, optimized weighted 20 MiB signature and admission measurement test restart_image::tests::probe_never_inherits_the_control_descriptor ... ok test restart_image::tests::snapshot_refuses_every_mutation_and_preserves_source_offset ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok test ssh_internal::tests::connect_requires_exactly_a_host_and_numeric_port ... ok test ssh_internal::tests::connector_is_available_only_on_the_initiating_build ... ok test ssh_internal::tests::session_accepts_only_the_two_spawned_shapes ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test startup_tests::shared_reactor_preserves_borrows_errors_and_panic_cleanup ... ok test result: ok. 99 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 27.35s Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/agent_daemon-eace6b0012b5a1db) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 32.54s Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/agent_queues-165eb353c7531f59) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 35.47s Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/agent_review-3ad2a12c0615b84c) running 8 tests test initial_attach_requires_explicit_credit_before_replay ... ok test last_typist_selects_its_own_real_pty_dimensions ... ok test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 35.91s Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/agent_sessions-f2332706b84f8f8c) running 3 tests test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test latency_fixture_accepts_the_unsolicited_startup_inventory ... ok test restart_discovery_keeps_a_live_shim_and_drops_clean_exit_and_sigkill ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.72s Running tests/cli_envelope.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/cli_envelope-661ccc970097d9ee) running 8 tests test a_missing_server_is_not_found_exit_4 ... ok test an_unknown_command_is_a_usage_envelope_that_does_not_echo_odd_input ... ok test bare_infraternal_is_the_overview_and_points_to_help ... ok test component_commands_fail_in_the_envelope_when_the_agent_is_not_there ... ok test every_command_reports_a_usage_error_in_the_envelope_naming_the_argument ... ok test read_only_commands_answer_in_the_envelope ... ok test status_exits_0_on_a_machine_with_nothing_installed ... ok test status_exits_5_when_something_that_should_run_is_down ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.40s Running tests/cli_review.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/cli_review-d55a30e0250e5756) running 16 tests test a_dry_run_plan_keeps_its_line_breaks ... ok test a_dumb_terminal_gets_neither_colour_nor_marks ... ok test a_failing_command_in_json_mode_prints_exactly_one_envelope ... ok test a_group_with_one_command_says_so_in_the_singular ... ok test a_malformed_host_id_is_a_usage_error_exit_2 ... ok test a_missing_runtime_directory_is_not_called_a_bad_reply ... ok test a_subcommand_does_not_advertise_options_it_ignores ... ok test a_usage_error_in_text_mode_does_not_echo_the_odd_input ... ok test an_empty_no_color_is_ignored ... ok test an_unknown_skill_is_not_found_exit_4 ... ok test ctrl_c_in_json_mode_ends_with_an_interrupted_envelope_and_exit_130 ... ok test json_help_and_version_are_envelopes_too ... ok test no_compiled_python_is_tracked ... ok test root_help_fits_80_columns ... ok test status_is_not_down_when_the_service_manager_cannot_be_asked ... ok test user_facing_text_never_says_agent_alone ... ok test result: ok. 16 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.03s Running tests/cli_review_r2.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/cli_review_r2-fb28189eb99511bc) running 11 tests test a_failed_later_page_emits_only_the_failure_envelope ... ok test a_later_runtime_handler_is_not_bypassed_by_the_interrupt_handler ... ok test a_mistyped_word_that_looks_like_a_token_is_not_echoed ... ok test a_paged_listing_is_still_one_envelope ... ok test an_unknown_skill_does_not_echo_what_was_typed ... ok test ctrl_c_in_a_script_loop_stops_the_loop ... ok test ctrl_c_while_the_result_is_being_written_never_leaves_a_broken_line ... ok test help_and_version_under_json_are_one_envelope_and_exit_0 ... ok test status_text_does_not_call_an_unanswered_unit_not_running ... ok test three_pages_preserve_order_and_only_the_final_cursor ... ok test usage_errors_under_json_are_one_envelope_and_exit_2 ... ok test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.03s Running tests/cli_review_r3.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/cli_review_r3-ab163f75bc325020) running 4 tests test a_pending_blocked_interrupt_emits_notice_and_terminates_by_sigint ... ok test a_pending_interrupt_during_final_output_preserves_result_and_sigint_status ... ok test inherited_ignored_sigint_stays_ignored_during_cli_output ... ok test signal_fixture ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s Running tests/cli_review_r3_arguments.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/cli_review_r3_arguments-48fd77d7d0173dff) running 1 test test inherited_fd_is_rejected_instead_of_ignored_by_remote_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/idle_canary-1e1ec5c3674e0f56) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.11s Running tests/key_memory.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/key_memory-db0b9ddee7c51dd5) running 1 test test diagnostic_requires_locked_pages_and_supports_json_without_public_help ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/remote_output-2e9aad8bb717b41b) running 1 test test remote_refusal_matches_its_declared_cli_output ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/session_bounds_review.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/session_bounds_review-c8d51c5accea5d04) running 1 test test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.92s Running tests/session_exit_events.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/session_exit_events-4b2712c16f493a8f) running 1 test test idle_daemon_discovers_unattached_and_adopted_shim_exit_without_requests ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.73s Running tests/session_retention.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/session_retention-19237533b041ac30) running 1 test test bounded_owned_exit_reconnects_as_ended_with_status ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.61s Running tests/setup_output.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/setup_output-8adba6b7d790f6d5) running 1 test test setup_output_keeps_legacy_and_versioned_readers ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/shim.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/shim-882f35597e3d6cb6) running 24 tests test attached_backpressure_and_detached_progress ... ok test delivered_exit_cannot_release_another_owning_window ... ok test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok test detached_shell_exit_reaps_shim_within_one_second ... ok test disallowed_signal_only_disconnects_peer ... ok test double_fork_survives_parent_death ... ok test dropped_deferred_peers_release_slots_before_the_pty_drains ... ok test fresh_shared_peer_negotiates_while_another_shared_input_is_deferred ... ok test independent_shared_writers_wait_for_the_same_global_queue ... ok test legacy_output_subscription_unblocks_deferred_shared_input ... ok test malformed_shared_successor_does_not_evict_the_live_shared_peer ... ok test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok test owned_exit_releases_promptly_on_window_close ... ok test parked_shared_writer_does_not_stop_detached_pty_progress ... ok test real_shell_reconnect_resize_and_delivered_exit ... ok test replacement_connection_and_malformed_limit ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test shared_input_waits_for_global_queue_space_without_losing_the_suffix ... ok test shared_writer_coexists_and_replayed_input_is_written_once ... ok test shared_writer_refusals_and_full_peer_limit_preserve_the_live_writer ... ok test shared_writer_restores_durable_geometry_after_another_writer_types ... ok test unowned_normal_exit_retires_promptly_and_records_status ... ok test user_scope_survives_parent_unit_stop ... active ok test writer_replacement_is_per_mode_and_fresh_ordinary_writers_stay_optional ... ok test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.87s Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/ssh_askpass-0d42995889fdce36) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 2.33s Running tests/ssh_connector_policy.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/ssh_connector_policy-76f290ff1302b128) running 1 test test connector_preserves_configured_bind_address_refusal ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.01s Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/vt_credit-a8057c0d8d11dc74) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 20.09s Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/vt_reconnect-3d554a4e2b9bb78d) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 16.46s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal_agent-5e7905dce98d9204) Private socket fixture: uid=1001 scratch=/mnt; capabilities dropped before test running 166 tests test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok test daemon::authenticated_tests::authenticated_uid_refusal_precedes_state_and_io ... ok test daemon::census_retry_tests::full_control_lane_retries_retirement_census_on_capacity_without_requests ... ok test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000 test daemon::liveness_tests::detached_ping_preserves_written_ack_without_output_credit ... ok test daemon::liveness_tests::input_state_probe_preserves_written_ack_after_input ... ok test daemon::liveness_tests::input_state_probe_preserves_written_ack_before_input ... ok test daemon::liveness_tests::terminal_probe_waits_for_the_shim_fence_and_keeps_stream_identity ... ok test daemon::readiness_exit_tests::ownership_eof_does_not_discard_private_terminal_output ... ok test daemon::readiness_tests::a_saturated_census_queue_cannot_establish_the_open_fence ... ok test daemon::readiness_tests::a_shut_down_peer_refuses_the_write_while_a_forked_copy_holds_it ... ok test daemon::readiness_tests::census_and_open_result_share_fifo_order ... ok test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::readiness_tests::fixture_fence_processes_messages_before_the_control_pong ... ok test daemon::readiness_tests::replay_complete_preserves_the_full_output_cursor_as_decimal ... ok test daemon::readiness_tests::replay_prefix_stops_at_the_shim_hello_head ... ok test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test daemon::readiness_tests::saturated_action_replies_preserve_connection ... ok test daemon::readiness_tests::saturated_ping_replies_preserve_connection ... ok test daemon::readiness_tests::the_unhealthy_handoff_case_survives_concurrent_spawns ... ok test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test daemon::remote_tests::reattach_dispatch_serves_while_another_runtime_holds_the_lifetime_lock ... ok test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::session_commands::tests::probe_at_full_command_capacity_preserves_accepted_input ... ok test daemon::session_commands::tests::review_reply_at_full_command_capacity_preserves_accepted_input ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks test daemon::terminal_events::tests::census_uses_uuid_strings_and_replay_keeps_all_cursor_bits ... ok test daemon::terminal_events::tests::ordinary_exit_omits_retired_and_snapshot_sequences_stay_numeric ... ok test daemon::terminal_events::tests::reply_compatibility_notice_contains_only_session_identity ... ok test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok test plugin_control::tests::accepted_public_transaction_outlives_the_framing_deadline ... ok test plugin_control::tests::admission_observes_the_same_plugin_settings_as_actions ... ok test plugin_control::tests::dropping_a_listener_does_not_unlink_a_replacement_file ... ok test plugin_control::tests::empty_catalog_preserves_control_contract_without_an_os_worker ... ok test plugin_control::tests::local_frame_reader_retains_fragmentation_and_refuses_trailing_frames ... ok test plugin_control::tests::local_public_actions_refuse_controls_and_active_socket_replacement ... ok test plugin_control::tests::retained_path_and_observed_transport_cross_the_lazy_worker ... ok test plugin_control::tests::retained_runtime_registry_keeps_lifetime_ownership_after_listener_abort ... ok test plugin_control::tests::synchronous_plugin_work_does_not_park_the_current_thread_reactor ... ok test plugin_control::tests::worker_preserves_trusted_context_and_writer_owned_effect ... ok test process_exits::platform::tests::resource_failures_do_not_silently_disable_exit_tracking ... ok test process_exits::platform::tests::unavailable_kernel_has_no_timer_or_descriptor ... ok test process_exits_tests::exited_before_registration_is_not_a_live_registration ... ok test process_exits_tests::process_descriptor_is_cloexec_and_rejects_invalid_pid ... ok test process_exits_tests::shared_exit_queue_at_200_processes ... ignored, 200 live process lifetimes; run in a weighted benchmark scope test process_exits_tests::shared_queue_detects_exit_and_does_not_repeat_or_retain_descriptors ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test remote_client::dial_runtime::tests::owned_driver_clock_advances_with_its_timer_runtime ... ok test remote_client::server_path::tests::a_future_mesh_lease_and_silent_cut_keep_their_port_reserved ... ok test remote_client::server_path::tests::a_latched_mesh_reply_wakes_retry_without_selecting_the_path ... ok test remote_client::server_path::tests::backed_candidate_refusal_keeps_new_datagrams_on_mesh_discovery ... ok test remote_client::server_path::tests::backed_discovery_ends_with_its_owned_session ... ok test remote_client::server_path::tests::backed_discovery_keeps_control_cancellation_and_udp_recovery_bounded ... ok test remote_client::server_path::tests::backup_published_during_candidate_proof_keeps_enrolled_control_live ... ok test remote_client::server_path::tests::candidate_proof_keeps_probing_after_its_first_packet_is_lost ... ok test remote_client::server_path::tests::component_down_activates_the_warm_fallback_without_a_new_connection ... ok test remote_client::server_path::tests::component_down_keeps_its_reason_when_the_mesh_also_stops_answering ... ok test remote_client::server_path::tests::component_down_proves_tcp_fallback_when_enrolled_udp_is_unavailable ... ok test remote_client::server_path::tests::component_down_returns_the_live_connection_to_the_enrolled_address ... ok test remote_client::server_path::tests::dropped_return_replies_keep_the_admitted_connection ... ok test remote_client::server_path::tests::failed_control_worker_returns_to_retry_owner ... ok test remote_client::server_path::tests::healthy_mesh_path_is_never_declared_interrupted ... ignored, Timing assertion: run on the perf VM under the shared benchmark lock. test remote_client::server_path::tests::healthy_mesh_preserves_every_control_reply_on_the_admitted_connection ... ok test remote_client::server_path::tests::interrupted_mesh_is_retried_on_the_same_connection ... ok test remote_client::server_path::tests::invalid_mesh_hint_cannot_complete_fresh_path_proof ... ok test remote_client::server_path::tests::pending_enrolled_proof_does_not_hide_a_latched_mesh_hint ... ok test remote_client::server_path::tests::pending_enrolled_proof_does_not_hide_the_mesh_discovery_clock ... ok test remote_client::server_path::tests::proposed_mesh_moves_the_live_connection_and_a_silent_cut_returns_it ... ok test remote_client::server_path::tests::retained_mesh_proposal_connects_when_the_fallback_port_is_unavailable ... ok test remote_client::server_path::tests::returning_publishes_the_selected_path_before_its_proof_finishes ... ok test remote_client::server_path::tests::review_silent_mesh_interruption_returns_to_fallback_within_local_reconnect_budget ... ignored, Run alone on the perf VM under the shared benchmark lock. test remote_client::server_path::tests::silent_mesh_handshake_keeps_the_shared_timeout_classification ... ok test remote_client::server_path::tests::unadvertised_path_proof_keeps_the_existing_enrolled_connection ... ok test remote_client::server_path::tests::unanswered_mesh_address_keeps_the_live_connection ... ok test remote_client::server_path::tests::unavailable_credentials_do_not_end_server_link ... ok test remote_client::server_path::tests::unnegotiated_backup_preserves_the_enrolled_retry_cooling ... ok test remote_client::server_path::tests::untrusted_server_on_the_mesh_address_never_takes_the_connection ... ok test remote_client::supervisor::review_tests::durable_state::acknowledged_network_access_survives_superseded_worker_completion ... ok test remote_client::supervisor::review_tests::six_hour_server_outage_keeps_one_retry_owner_with_bounded_attempts ... ok test remote_client::supervisor::review_tests::terminated_factory_is_replaced_without_overlapping_live_workers ... ok test remote_client::supervisor::review_tests::watchdog_bounds_workers_when_local_path_discovery_stalls ... ok test remote_client::supervisor::tests::a_burst_then_a_stable_link_is_summarised_by_the_timer ... ok test remote_client::supervisor::tests::every_error_kind_and_successful_return_retries ... ok test remote_client::supervisor::tests::failed_attempt_cost_does_not_extend_the_retry_period ... ok test remote_client::supervisor::tests::healthy_link_has_no_watchdog_deadline ... ok test remote_client::supervisor::tests::link_close_notes_print_once_per_window_and_summarise_repeats ... ok test remote_client::supervisor::tests::watchdog_restarts_a_stalled_offline_attempt ... ok test remote_client::tests::capability_fixture_retries_a_port_held_by_the_other_transport ... ok test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test remote_client::tests::idle_timers::copy_cost::fresh_admission_accepts_dormant_replies_but_refuses_pending_recovery ... ok test remote_client::tests::idle_timers::copy_cost::fresh_copy_from_admission_at_one_thousand_transports ... ignored, Separate fresh-copy cohort on the perf VM under its shared benchmark lock. test remote_client::tests::idle_timers::copy_cost::mesh_probe_and_copy_cost_at_one_thousand_transports ... ignored, Optimized transport-only measurement on the perf VM under its shared benchmark lock. test remote_client::tests::idle_timers::copy_cost::physical_counters_include_both_source_paths ... ok test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::monotonic_origin_bounds_fail_closed_without_losing_receive_receipts ... ok test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::receive_diagnostic_counts_gro_and_only_fixed_sampled_ports ... ok test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::receive_diagnostic_gap_bins_have_explicit_bounds ... ok test remote_client::tests::idle_timers::copy_cost::runtime_configuration_trial_at_one_thousand_transports ... ignored, Explicit runtime scheduling control on the perf VM; ordinary runtime and guards unchanged. test remote_client::tests::idle_timers::copy_cost::socket_configuration_trial_at_one_thousand_transports ... ignored, Explicit socket-configuration diagnostic on the perf VM; ordinary scale gates stay unchanged. test remote_client::tests::idle_timers::copy_cost::udp_drop_receipt_counts_only_owned_live_sockets ... ok test remote_client::tests::idle_timers::mesh_idle_timer_cost_at_one_thousand_connections ... ignored, Release-only perf VM measurement under the shared benchmark lock. test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test remote_client::tests::raw_tcp_control_preserves_mux_envelopes_and_buffered_suffix ... ok test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test remote_client::tests::server_path_capability_is_advertised_on_native_and_fallback_transports ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test remote_client::tests::unavailable_local_credentials_retry_without_creating_state ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test remote_cursor::tests::exact_unsigned_cursor_and_whole_object_are_required ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test remote_native_tests::primed::negotiated_connection_keeps_unmarked_new_writers_ordinary ... ok test remote_native_tests::primed::ordinary_native_writer_refuses_the_additive_cursor_request ... ok test remote_native_tests::primed::prime_marker_is_canonical_and_requires_negotiated_permission ... ok test remote_native_tests::primed::primed_writer_acknowledges_before_reading_credit_funded_cursor ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test sessions::tests::ordinary_native_writer_negotiates_queue_backpressure_without_shared_selection ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test sessions::tests::shared_writer_helper_negotiates_before_sending_its_selector ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_kernel_latency ... ignored, Exact 50MiB kernel-latency control on the perf VM in an owned network namespace. test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test result: ok. 146 passed; 0 failed; 20 ignored; 0 measured; 0 filtered out; finished in 34.58s Running tests/transport.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/transport-779de0acdb61e1cf) running 2 tests test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test oversized_header_and_truncated_frame_are_rejected ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal_mesh-e13f00facaa1692a) running 1 test test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/default_arrow-7b090aec0682bcd2) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/properties.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/properties-983aa249d0580584) running 14 tests test addresses_are_unique_stable_and_not_recycled ... ok test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test directional_grants_union_and_minimal_updates ... ok test exhausted_versions_reject_mutations_without_changing_state ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test names_versions_and_backend_status ... ok test overlaps_are_reported_without_silent_range_changes ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.47s Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/rotation_time-0cf88f58b3d13cb7) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal_plugin_api-c601f0a1c341cc23) running 29 tests test action::tests::any_of_permissions_are_machine_readable_and_empty_authority_is_rejected ... ok test action::tests::command_result_schema_has_required_stable_fields_and_optional_next_step ... ok test action::tests::command_result_schema_keeps_action_data_typed_inside_stable_envelope ... ok test action::tests::only_hidden_internal_routes_may_use_the_reserved_prefix ... ok test action::tests::registry_keeps_plugin_ownership_and_exact_command_paths ... ok test action::tests::registry_rejects_inconsistent_json_schemas ... ok test action::tests::registry_rejects_missing_action_guidance_and_command_collisions ... ok test admission::tests::memory_refusal_round_trips_without_losing_legacy_error ... ok test component_tests::component_declarations_cannot_create_servers ... ok test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test present::tests::a_table_fits_its_width_by_wrapping_only_the_last_column ... ok test present::tests::a_table_has_a_header_only_from_two_rows ... ok test present::tests::pairs_align_values_and_wrap_under_them ... ok test present::tests::sizes_and_ages_use_units_a_person_would_say ... ok test present::tests::tint_wraps_text_after_padding_is_measured ... ok test present::tests::wide_leading_columns_are_cut_with_an_ellipsis ... ok test release_version::tests::accepts_only_worker_version_forms ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test server_path::tests::legacy_link_omits_the_optional_source_port ... ok test storage::tests::cancelled_begin_never_leaves_an_open_writer_transaction ... ok test storage::tests::writer_begin_at_1000_nodes ... ignored, Measure only on the perf VM under its benchmark lock, 31 batches of 1000 writes. test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test tests::machine_actions_are_declared_without_entering_human_discovery ... ok test tests::notifications_are_declared_json_bounded_and_drained_once ... ok test tests::operator_presentation_cannot_follow_a_private_control_action ... ok test tests::public_dispatch_cannot_call_a_machine_control_action ... ok test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test tests::registry_routes_only_declared_actions ... ok test result: ok. 28 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/routing_review-fe80451ff0776d50) running 2 tests test review_topic_borrows_plain_and_owns_escaped ... ok test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal_plugin_backup-85810caed1a02b63) running 1 test test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal_plugin_host_facts-2cac1c439992c347) running 14 tests test memory::tests::custom_policy_rounds_up_and_validates_all_settings_before_use ... ok test memory::tests::default_floor_refuses_only_below_headroom_even_above_128_sessions ... ok test session_counts_tests::host_owned_session_counts_are_additive_and_refresh_on_request ... ok test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test tests::configured_memory_floor_refuses_with_current_host_counters ... ok test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test tests::static_facts_report_the_machines_hostname ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal_plugin_mesh-3681764fe0ea9465) running 74 tests test access_updates::tests::compact_rules_reconstruct_the_exact_config_and_preserve_server_access ... ok test access_updates::tests::grouping_never_crosses_an_unchanged_protected_peer ... ok test access_updates::tests::identity_changes_and_snapshots_keep_the_original_encoding ... ok test access_updates::tests::malformed_ranges_refuse_before_any_rule_changes ... ok test connection_state::tests::narrowing_depends_on_services_and_direction_not_the_fallback_label ... ok test firewall::tests::already_removed_owned_table_does_not_block_component_cleanup ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::initial_apply_without_adoption_refuses_a_foreign_table ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::real_nft_ownership_atomicity_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::removal_plan_cannot_add_permissions_or_change_identity ... ok test firewall::tests::rule_count_is_independent_of_membership_and_policy_data_is_in_sets ... ok test iptables::tests::contiguous_open_members_use_ranges_without_opening_gaps ... ok test iptables::tests::initiating_prefixes_cover_only_owned_intervals_even_at_family_boundaries ... ok test iptables::tests::real_nf_tables_ownership_partial_family_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test iptables::tests::replacement_retains_established_rules_and_does_not_duplicate_hooks ... ok test netlink::tests::connection_tuple_uses_initiating_service_and_refuses_ambiguous_selectors ... ok test netlink::tests::host_prefix_decoder_refuses_ambiguous_or_malformed_ownership ... ok test netlink::tests::malformed_lengths_and_padding_are_rejected ... ok test netlink::tests::nested_attributes_roundtrip_without_copying_payloads ... ok test netlink::tests::public_host_prefixes_decode_both_families_without_claiming_subnets ... ok test node::rotation_tests::nf_tables_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173. test node::rotation_tests::nft_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173. test node::tests::chunked_snapshot_is_atomic_and_applies_1000_kernel_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN; use release for timing. test node::tests::explicit_up_recovers_disabled_intent_before_reusing_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node::tests::externally_removed_interface_does_not_block_down ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node::tests::server_identity_cannot_change_inside_a_staged_snapshot ... ok test node_actions::identity_upgrade_tests::ordinary_identity_reply_retains_the_legacy_shape ... ok test node_actions::peer_page_tests::peer_pages_cover_every_peer_once_within_the_frame ... ok test node_actions::peer_page_tests::poll_cost ... ignored, measurement test node_actions::tests::applied_server_route_and_observed_link_survive_only_explicit_component_up ... ignored, Run inside a dedicated kernel namespace with CAP_NET_ADMIN. test node_actions::tests::failed_cleanup_reports_stopping_and_reconnect_keeps_explicit_off ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node_actions::tests::node_actions_refuse_alternate_forms_duplicates_and_unbounded_input ... ok test node_actions::tests::node_actions_register_without_kernel_work_and_hide_machine_calls ... ok test node_coordination::tests::a_name_a_person_chose_is_kept ... ok test node_coordination::tests::a_reported_hostname_names_a_host_added_by_address ... ok test node_coordination::tests::explicit_off_waits_for_up_and_reconnect_requests_a_snapshot ... ok test node_coordination::tests::peer_route_precedes_configuration_and_retires_with_the_node ... ok test node_coordination::tests::placeholder_names_become_the_machines_names ... ok test node_coordination::tests::refused_delta_recovers_immediately_and_closed_channel_retires_worker ... ok test node_coordination::tests::refused_listener_replacement_preserves_the_current_lease ... ok test node_coordination::tests::removed_binding_can_attach_only_after_authorized_reenrollment ... ok test node_coordination::tests::server_listener_belongs_to_applied_enabled_worker ... ok test node_presentation::tests::a_wide_table_stays_within_the_width ... ok test node_presentation::tests::an_unproven_peer_gets_a_hint_that_names_it ... ok test node_presentation::tests::legacy_status_remains_readable_and_invalid_link_is_refused ... ok test node_presentation::tests::peers_show_units_ages_and_no_hint_when_every_path_is_direct ... ok test node_presentation::tests::status_explains_the_observed_server_transport ... ok test node_state::order_tests::accepted_snapshot_persistence_at_1000_peers ... ignored, Run release on the locked performance VM; public-state persistence at 1000 peers. test node_state::order_tests::concurrent_workers_serialize_revision_check_and_publication ... ok test node_state::order_tests::exact_legacy_binding_upgrade_preserves_the_revision_fence ... ok test node_state::order_tests::explicit_off_can_replace_a_corrupt_public_snapshot ... ok test node_state::order_tests::stale_and_conflicting_snapshots_cannot_replace_acknowledged_intent ... ok test node_state::order_tests::worker_start_stop_apply_interleavings_never_decrease_acknowledged_revision ... ok test node_state::restore_tests::public_restore_retains_large_intent_and_matches_reader ... ok test node_state::restore_tests::public_state_restore_at_1000_peers ... ignored, Run only on the perf VM under its lock; INFRATERNAL_STATE_RESTORE_MODE=reader|slice, separate processes. test node_state::restore_tests::restore_rejects_invalid_schema_trailing_data_and_unsafe_descriptors ... ok test node_state::tests::explicit_off_survives_restart_and_snapshot_contains_only_public_fields ... ok test node_state::tests::route_recording_preserves_the_legacy_accepted_state_format ... ok test node_state::tests::unsafe_route_journal_and_existing_temporary_files_are_preserved ... ok test node_state::tests::unsafe_snapshots_and_preexisting_temporary_files_are_not_followed_or_removed ... ok test presence::tests::a_mesh_that_is_off_shows_nobody_online ... ok test presence::tests::a_page_cursor_is_followed ... ok test presence::tests::a_reading_expires_when_the_node_stops_answering ... ok test presence::tests::a_recent_handshake_is_online_on_a_direct_path ... ok test presence::tests::an_unreadable_node_is_no_reading ... ok test presence::tests::no_handshake_a_stale_one_or_a_future_one_is_offline ... ok test presence::tests::nodes_go_offline_twenty_seconds_after_the_last_good_reading ... ok test presence::tests::receiving_a_keepalive_does_not_shorten_the_session_window ... ok test presence::tests::replace_reports_only_visible_changes ... ok test presence::tests::the_edge_of_the_session_window_is_still_online ... ok test presence::tests::the_server_and_a_peer_passing_traffic_are_online ... ok test presence::tests::traffic_proves_a_session_until_it_ends ... ok test settings::tests::settings_objects_are_bounded_and_strict_before_storage ... ok test store::naming_tests::a_numeric_or_invalid_address_gives_no_name ... ok test store::naming_tests::an_address_or_hostname_gives_the_machines_name ... ok test result: ok. 60 passed; 0 failed; 14 ignored; 0 measured; 0 filtered out; finished in 9.60s Running tests/access_updates.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/access_updates-53052323e562eb48) running 8 tests test compact_identity_support_requires_an_explicit_strict_probe ... ok test default_tightening_at_1000_peers_fits_one_round_trip ... ok test negotiated_access_chunk_is_accepted_by_the_strict_action_parser ... ok test nf_tables_compact_delta_preserves_identity_and_refuses_invalid_bases ... ignored, Run in an isolated user/network namespace with CAP_NET_ADMIN. test nft_compact_delta_preserves_identity_and_refuses_invalid_bases ... ignored, Run in an isolated user/network namespace with CAP_NET_ADMIN. test ordinary_up_and_identity_keep_the_legacy_reply_shape ... ignored, requires an isolated user/network namespace test range_objects_reject_unknown_duplicate_and_positional_fields ... ok test uniform_changes_fit_one_frame_after_churn_with_distinct_kept_services ... ok test result: ok. 5 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/authorized_local_binding.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/authorized_local_binding-b0ba79371698e19a) running 2 tests test nf_tables_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173. test nft_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/canonical_host_binding.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/canonical_host_binding-e711cf3ceab9f605) running 1 test test enrollment_requires_canonical_host_uuid_spelling ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/configuration.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/configuration-1ba9aa134b7936fb) running 5 tests test chunks_fit_body_budget_and_one_peer_delta_does_not_repeat_the_snapshot ... ok test compiled_chunks_identify_the_server_and_old_snapshots_have_no_proposal ... ok test edition_default_is_explicit_and_build_selected ... ok test large_valid_port_policy_is_split_without_a_port_count_cap ... ok test port_grant_narrows_allow_opens_deny_and_preserves_direction ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.29s Running tests/kernel.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/kernel-b9d7e07e114cbf35) running 6 tests test bulk_retirement_preserves_identity_and_routes_at_1000_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test created_interface_is_marked_for_restart_adoption ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test policy_table_route_conflict_is_refused ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test real_kernel_chunked_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test real_kernel_ephemeral_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test retired_host_routes_can_be_replayed ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/naming.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/naming-d44028e80092ceee) running 4 tests test a_person_takes_an_automatic_name_and_the_machine_moves_aside ... ok test a_squatter_yields_to_a_host_added_later_and_the_renames_are_audited ... ok test a_viewer_without_host_facts_does_not_see_reported_hostnames ... ok test the_servers_names_are_kept_for_the_server ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.18s Running tests/policy_enrollment_binding.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/policy_enrollment_binding-75c227a9fb54e935) running 4 tests test explicit_binding_preserves_identity_and_clears_removal_only_on_enrollment ... ok test host_binding_requires_global_authority_and_existing_unrevoked_host ... ok test noncanonical_host_binding_is_refused ... ok test refused_enrollment_preserves_removal_and_revision ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.18s Running tests/policy_enrollment_identity.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/policy_enrollment_identity-69a7fa4673b70170) running 1 test test unbound_enrollment_public_key_is_not_host_authority ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running tests/policy_snapshot_ordering.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/policy_snapshot_ordering-c646b4259a478ea0) running 6 tests test nf_tables_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173. test nf_tables_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173. test nf_tables_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173. test nft_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173. test nft_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173. test nft_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/presence.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/presence-ea261a44979699ea) running 2 tests test an_unchanged_reading_is_not_announced_and_a_lost_session_goes_offline ... ok test nodes_the_server_sees_are_online_with_their_path_and_named_by_machine ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s Running tests/restart_route_ownership.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/restart_route_ownership-f91cbf3125e5a193) running 1 test test orphan_route_retirement_preserves_foreign_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_authorized_reenrollment.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/review_authorized_reenrollment-c652db1c78c36ccf) running 2 tests test nf_tables_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173. test nft_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_endpoint_transaction.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/review_endpoint_transaction-ebc100d60783edf7) running 1 test test refused_endpoint_persistence_preserves_kernel_endpoint ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_firewall_marker.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/review_firewall_marker-6a53d4cc2a2b41d0) running 2 tests test nf_tables_marker_substring_is_not_chain_ownership ... ignored, Run in a disposable user/network namespace, #173. test nft_marker_substring_is_not_table_ownership ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_ingress_translation.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/review_ingress_translation-26a8eb974397df0c) running 2 tests test nf_tables_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test nft_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_local_delivery.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/review_local_delivery-85a98c2a0de72b0d) running 2 tests test nf_tables_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test nft_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_mesh_presence_r4.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/review_mesh_presence_r4-c892e66f54b71d7b) running 3 tests test a_counter_reset_discards_the_previous_peers_keepalive_classification ... ok test a_passive_keepalive_does_not_turn_later_silence_into_a_false_offline ... ok test a_peer_with_25_second_keepalives_stays_online_when_server_keepalives_suppress_its_sends ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_mesh_view_truth.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/review_mesh_view_truth-71d42bc9f3c8b78a) running 6 tests test a_hand_set_name_equal_to_the_placeholder_is_kept ... ok test a_host_record_name_beats_another_machines_reported_hostname ... ok test a_peer_does_not_stay_online_past_its_session_when_the_server_node_stops_answering ... ok test a_remote_machine_cannot_be_called_server ... ok test a_remote_machine_cannot_take_the_servers_hostname ... ok test an_address_that_is_an_ip_never_becomes_a_name ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.23s Running tests/review_mesh_view_truth_r2.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/review_mesh_view_truth_r2-80a2bad78c76cb80) running 9 tests test a_hex_ipv4_spelling_never_becomes_a_name ... ok test a_node_moved_aside_keeps_its_name_on_its_next_attach ... ok test a_person_can_take_a_name_a_machine_reported ... ok test a_viewer_without_host_facts_still_sees_distinct_names ... ok test an_idle_healthy_peer_without_its_own_keepalive_stays_online ... ok test evidence_a_silent_peer_expires_with_its_session_without_flapping ... ok test evidence_migration_0026_upgrades_a_realistic_database_without_churn ... ok test no_viewer_sees_a_remote_machine_called_server ... ok test the_previous_release_starts_on_a_database_this_release_migrated ... ignored, deploy gate, not code: production rollback restores the database copy (#236) test result: ok. 8 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.34s Running tests/review_mesh_view_truth_r3.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/review_mesh_view_truth_r3-488341cccf25afa7) running 5 tests test a_dead_peer_expires_at_session_end_without_inferring_a_sending_promise ... ok test a_node_moved_aside_by_a_person_is_audited_under_that_person ... ok test a_non_owner_cannot_confirm_the_servers_hidden_hostname ... ok test a_scoped_manager_cannot_rename_a_node_outside_their_scope_by_taking_its_name ... ok test an_idle_peer_that_started_its_session_stays_online_until_it_rekeys ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.20s Running tests/review_mesh_view_truth_r4.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/review_mesh_view_truth_r4-a73cddfca2e93724) running 7 tests test a_global_manager_cannot_probe_a_hidden_name_by_exhausting_move_aside_names ... ok test a_name_chosen_while_rewound_survives_rolling_forward_and_reattaching ... ok test a_scoped_manager_cannot_confirm_a_hidden_reported_hostname ... ok test evidence_a_refused_move_rolls_back_inventory_audit_and_revision ... ok test evidence_server_hostname_moves_only_with_server_rename_authority ... ok test hidden_names_are_indistinguishable_for_every_non_global_node_manager ... ok test rewind_reconciles_same_spelling_choices_without_freezing_untouched_names ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.57s Running tests/review_restart_routes.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/review_restart_routes-c0c7e8b6c3834047) running 1 test test restart_retires_orphan_peer_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_retire_ownership.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/review_retire_ownership-21b36c1c525f1f38) running 7 tests test retire_checks_every_object_before_deleting_any ... ignored, Run as root in a disposable network namespace with nft. test retire_decides_every_object_and_leaves_a_foreign_table ... ignored, Run as root in a disposable network namespace with WireGuard and nft. test retire_leaves_a_foreign_interface_without_failing_the_uninstall ... ignored, Run as root in a disposable network namespace. test retire_leaves_a_marked_interface_this_installation_never_recorded ... ignored, Run as root in a disposable network namespace. test retire_leaves_another_installations_interface_and_filter ... ignored, Run as root in a disposable network namespace with WireGuard and nft. test retire_removes_the_interface_and_filter_this_installation_created ... ignored, Run as root in a disposable network namespace with WireGuard and nft. test retire_with_a_record_leaves_a_foreign_interface_and_names_it ... ignored, Run as root in a disposable network namespace with WireGuard and nft. test result: ok. 0 passed; 0 failed; 7 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_reverse_recreation.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/review_reverse_recreation-6d38c3fb56765539) running 4 tests test nf_tables_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test nf_tables_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test nft_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test nft_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test result: ok. 0 passed; 0 failed; 4 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_revoked_host_policy.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/review_revoked_host_policy-493675b7a79ca70f) running 1 test test revoked_host_is_not_retained_in_compiled_peer_policy ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/review_route_inventory.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/review_route_inventory-2be052913f9e2e88) running 2 tests test refused_recovery_inventory_save_does_not_retire_kernel_peers_or_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test restart_preserves_unrecorded_direct_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_route_scope.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/review_route_scope-0539357dd2301f8b) running 1 test test restart_preserves_operator_gateway_host_route ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_shutdown_budget.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/review_shutdown_budget-1423441593702eda) running 1 test test shipping_mesh_down_1000_peers_finishes_within_one_second ... ignored, Run in a dedicated user/network namespace under CPUWeight=10000 with INFRATERNAL_BIN pointing to the shipping release binary. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_shutdown_restart.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/review_shutdown_restart-be3f21c60f64b594) running 3 tests test crash_child ... ignored, Child-only fixture for the weighted user/network namespace restart proof. test refused_journal_retirement_keeps_stopping_until_explicit_retry ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000. test restart_finishes_interrupted_down_at_1000_peers ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000. test result: ok. 0 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/settings.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/settings-9e22846e3f8e68e0) running 1 test test default_switch_requires_owner_freshness_and_the_preview_revision ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s Running tests/store.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/store-6d4f7b5c8e54fbb6) running 6 tests test absent_discovery_preserves_the_last_known_endpoint ... ok test attach_cancelled_at_any_await_leaves_the_store_writable ... ok test key_replacement_preserves_identity_and_addresses_after_restart ... ok test removed_host_cannot_restore_membership_without_authorized_enrollment ... ok test required_server_membership_cannot_be_deleted ... ok test scale_preview_pages_do_not_allocate_the_pair_matrix ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.12s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal_plugin_relay-47b92256ba7e458c) running 1 test test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal_plugin_release-aec3b44056d5d9fc) running 8 tests test latest::tests::cancellation_joins_verification ... ok test latest::tests::startup_reclaims_only_owned_inactive_private_metadata ... ok test service::tests::api_setting_requires_owner_and_current_fresh_session ... ok test service::tests::authority_is_rechecked_after_the_setting_write_before_commit ... ok test service::tests::channel_reads_at_fifty_concurrent_callers ... ignored, run alone under CPUWeight=10000; measures SQLite action overhead, not terminal or full authenticated socket latency test service::tests::default_stable_refuses_silent_edge_and_persists_explicit_opt_in ... ok test service::tests::disabled_feature_starts_no_lookup_and_rejects_settings ... ok test service::tests::object_input_rejects_duplicates_unknown_fields_and_alternate_representations ... ok test result: ok. 7 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 2.40s Running tests/review_pool.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/review_pool-33b687260e254fc2) running 1 test test pending_channel_writers_preserve_authority_read_capacity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.61s Running tests/review_restart.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/review_restart-ca9f44eb8cb73b10) running 4 tests test lookup_creates_private_staging_under_owner_restrictive_umask ... ok test partial_metadata_restart_child ... ignored, subprocess helper for metadata restart verification test restarted_latest_reclaims_metadata_after_process_stop ... ok test restricted_umask_lookup_child ... ignored, subprocess helper for restricted-umask lookup verification test result: ok. 2 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.07s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal_plugin_remote-9d5cf8bf6727606f) running 113 tests test inventory::authority_tests::inventory_events_keep_the_subscription_generation ... ok test inventory::authority_tests::revocation_cancels_a_result_waiting_for_socket_credit ... ok test inventory::tests::inventory_descriptor_is_valid_for_server_startup ... ok test inventory::tests::list_input_refuses_parallel_authority_and_noncanonical_cursors ... ok test remote_bindings::receive_cost_tests::repeated_mesh_ingress_cost_at_one_thousand_retained_histories ... ignored, Component timing on the authorized perf VM under its fair lock; not transport acceptance. test remote_bindings::tests::a_copy_poll_bounds_work_before_servicing_receive ... ok test remote_bindings::tests::a_lease_added_while_waiting_is_polled_without_another_primary_datagram ... ok test remote_bindings::tests::a_negotiated_peer_copies_output_without_a_worker_and_off_cancels_it ... ok test remote_bindings::tests::admitted_path_proofs_survive_mesh_retirement_and_old_key_lease_drop ... ok test remote_bindings::tests::alias_retirement_restores_the_previous_reply_socket ... ok test remote_bindings::tests::alternating_fresh_hints_cannot_amplify_retained_ciphertext ... ok test remote_bindings::tests::an_encrypted_duplicate_cannot_move_the_reply_route ... ok test remote_bindings::tests::backup_withdrawal_reconciles_idle_peers_without_canceling_another_return ... ok test remote_bindings::tests::dropping_one_peer_removes_alternative_work_while_another_peer_lives ... ok test remote_bindings::tests::enrolled_dual_replies_preserve_primary_and_mesh_sources ... ok test remote_bindings::tests::lease_installed_during_a_pending_poll_cannot_lose_the_receive_wakeup ... ok test remote_bindings::tests::legacy_enrolled_return_replay_is_bounded_and_consumed_once ... ok test remote_bindings::tests::negotiated_enrolled_return_replay_is_bounded_and_consumed_once ... ok test remote_bindings::tests::peer_route_preserves_the_logical_tuple_and_replays_on_return ... ok test remote_bindings::tests::replies_follow_the_last_heard_address_and_leases_retire_their_routes ... ok test remote_bindings::tests::retiring_mesh_lease_cancels_only_queued_alternative_reply ... ok test remote_bindings::tests::retiring_one_route_preserves_another_peers_enrolled_return ... ok test remote_bindings::tests::unknown_mesh_reply_waits_for_duplicate_coordinates_and_off_retires_it ... ok test remote_bindings::tests::wildcard_reply_uses_the_destination_of_the_latest_peer_packet ... ok test remote_path_copies::tests::arming_after_pending_wakes_the_owned_endpoint_and_clear_drops_it ... ok test remote_path_copies::tests::cancelling_retired_work_keeps_the_next_send_receive_wakeup ... ok test remote_path_proof::tests::fixed_header_mac_matches_independent_sha256_vectors ... ok test remote_path_proof::tests::mixed_aggregation_preserves_all_neighboring_quic_bytes ... ok test remote_path_proof::tests::only_current_session_response_answers_a_sent_probe ... ok test remote_path_socket::tests::a_delayed_probe_waiter_keeps_first_send_clock_after_ack_only_traffic ... ok test remote_path_socket::tests::a_probe_request_latches_before_its_waiter_is_polled ... ok test remote_path_socket::tests::an_old_ack_only_send_cannot_complete_probe_emission ... ok test remote_path_socket::tests::an_old_ack_only_send_does_not_start_a_backpressured_probe_deadline ... ignored, timed watchdog ordering proof; run under the perf VM benchmark lock test remote_path_socket::tests::an_unrelated_reply_cannot_discard_ciphertext_needed_after_a_cut ... ok test remote_path_socket::tests::backpressure_never_starts_or_replaces_the_probe_send_clock ... ok test remote_path_socket::tests::cancelling_old_requests_cannot_clear_a_new_probe_generation ... ok test remote_path_socket::tests::dedicated_receive_preserves_segmented_sends_in_single_datagram_buffers ... ok test remote_path_socket::tests::exporting_path_keys_never_holds_the_receive_proof_lock ... ok test remote_path_socket::tests::mesh_route_maps_only_the_trusted_tuple_and_resends_unanswered_datagrams ... ok test remote_path_socket::tests::negotiated_copies_use_the_enrolled_socket_and_retire_on_return ... ok test remote_path_socket::tests::segmented_replay_evicts_enough_old_datagrams_to_keep_the_byte_bound ... ok test remote_path_socket::tests::send_gate_releases_only_one_successful_transmission ... ok test remote_peer_routes::bench::complete_tag_lookup_at_1000_peers ... ignored, Measure only on the perf VM under its benchmark lock. test remote_peer_routes::bench::routing_lookup_at_1000_nodes ... ignored, Measure only on the perf VM under its benchmark lock. test remote_peer_routes::copy_scan_tests::copy_poll_cost_at_one_thousand_retained_histories ... ignored, 31 bookkeeping samples per profile on the authorized perf VM under its fair lock; not transport acceptance. test remote_peer_routes::copy_scan_tests::history_mutation_after_an_idle_poll_still_sends_every_due_datagram ... ok test remote_peer_routes::tests::alternative_admission_never_evicts_pending_enrolled_return ... ok test remote_peer_routes::tests::alternative_backpressure_keeps_one_copy_and_hints_preserve_its_deadline ... ok test remote_peer_routes::tests::alternative_queue_shares_bounds_and_never_becomes_return_history ... ok test remote_peer_routes::tests::ciphertext_history_at_1000_peers ... ignored, Measure only on the perf VM: 31 batches of 20000 fresh/duplicate pairs across 1000 peers. test remote_peer_routes::tests::ciphertext_history_normalizes_gro_batches_and_stays_bounded ... ok test remote_peer_routes::tests::completed_backup_copies_cannot_be_replayed_as_a_second_return_burst ... ok test remote_peer_routes::tests::completed_return_entries_stay_consumed_when_new_mesh_history_arrives ... ok test remote_peer_routes::tests::output_evicting_the_oldest_copy_still_copies_one_bounded_batch ... ok test remote_peer_routes::tests::replay_is_bounded_for_large_segmented_transmits ... ok test remote_peer_routes::tests::retiring_an_old_lease_cannot_remove_a_reused_tuple ... ok test remote_peer_routes::tests::shared_copy_clock_preserves_each_datagrams_deadline ... ok test remote_peer_routes::tests::unsuccessful_backups_preserve_originals_for_explicit_recovery ... ok test remote_quic::design_scale_review::authenticated_mesh_health_at_design_scale ... ignored, Perf VM only: distinct physical tuple health at 1000 mTLS connections. test remote_quic::design_scale_review::authenticated_mesh_health_at_design_scale_100ms ... ignored, Perf VM only: authenticated physical health at 100ms cadence. test remote_quic::design_scale_review::review_fast_mesh_health_at_design_scale ... ignored, Perf VM only: fast detector at 1000 mTLS connections. test remote_quic::design_scale_review::review_production_adaptive_health_at_design_scale ... ignored, Perf VM only: production adaptive detector at 1000 mTLS connections. test remote_quic::mtu_tests::both_directions_keep_a_mesh_safe_payload_after_discovery ... ok test remote_quic::probe_tests::a_queued_probe_cannot_expire_before_the_socket_emits_it ... ok test remote_quic::probe_tests::copy_first_ack_only_probes_keep_authenticated_mesh_guard_live ... ignored, Physical 15ms/30ms guard comparison on the perf VM under its benchmark lock. test remote_quic::probe_tests::copy_first_ack_only_requested_ack_delay_five_ms_comparison ... ignored, ACK-delay hypothesis comparison on the quiet perf VM under its benchmark lock. test remote_quic::probe_tests::copy_first_real_mesh_originals_do_not_strand_the_authenticated_mesh_guard ... ok test remote_quic::probe_tests::enrolled_copy_replies_cannot_keep_a_dead_mesh_path_alive ... ok test remote_quic::probe_tests::healthy_path_proofs_keep_the_configured_polling_interval ... ok test remote_quic::probe_tests::lost_path_proof_spends_its_reserved_retry_margin ... ok test remote_quic::probe_tests::review_invalid_mesh_packets_cannot_borrow_enrolled_authentication ... ignored, Perf VM only: real socket scheduling and path-response deadline. test remote_quic::tests::acknowledged_idle_survives_and_replayed_packets_cannot_mask_failure ... ok test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test remote_quic::tests::mesh_liveness_keeps_authentication_and_refuses_invalid_intervals ... ok test remote_quic::tests::one_way_authenticated_output_keeps_the_path_fresh ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_renewal::tests::credential_snapshot_does_not_block_async_reconnect ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test remote_tls::tests::outgoing_tcp_detects_a_vanished_peer_without_application_traffic ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test runtime_lock::tests::a_live_legacy_runtime_cannot_publish_an_unheld_lifetime_file ... ok test runtime_lock::tests::cleanup_admission_prevents_starting_even_if_runtime_lock_was_removed ... ok test runtime_lock::tests::dump_datagrams_split_exactly ... ok test runtime_lock::tests::dump_records_accept_only_known_shapes ... ok test runtime_lock::tests::foreign_inode_twin_inner ... ignored, runs inside the namespace prepared by the foreign-inode test test runtime_lock::tests::internal_dispatch_checks_exact_argument_counts ... 2 ok test runtime_lock::tests::internal_dispatch_reads_only_the_normal_command_name ... ok test runtime_lock::tests::legacy_bound_endpoint_on_a_split_device_filesystem_is_kept ... running 1 test test runtime_lock::tests::split_device_inner ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 112 filtered out; finished in 0.00s ok test runtime_lock::tests::legacy_inspection_finds_a_real_bound_socket ... ok test runtime_lock::tests::legacy_inspection_is_independent_of_the_bound_name ... ok test runtime_lock::tests::lifetime_contention_preserves_would_block ... ok test runtime_lock::tests::lifetime_precedes_bind_and_survives_until_last_description_closes ... ok test runtime_lock::tests::lock_links_and_replacements_are_refused ... ok test runtime_lock::tests::managed_start_refuses_another_host_and_an_unfinished_receipt ... ok test runtime_lock::tests::session_inspection_finds_bound_endpoints_by_identity ... ok test runtime_lock::tests::split_device_inner ... ignored, runs inside the namespace prepared by the split-device test test runtime_lock::tests::stale_session_endpoint_is_not_held_live_by_a_foreign_inode_twin ... running 1 test test runtime_lock::tests::foreign_inode_twin_inner ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 112 filtered out; finished in 0.00s ok test runtime_lock::tests::unavailable_lock_support_does_not_claim_a_live_holder ... ok test uninstall::tests::a_failed_kernel_check_stops_cleanup_before_the_service ... ok test uninstall::tests::accepted_handoff_runs_on_a_thread_without_an_async_runtime ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test uninstall::tests::file_removal_keeps_what_setup_did_not_create ... ok test uninstall::tests::manual_uninstall_refuses_another_hosts_installation ... ok test uninstall::tests::replies_name_the_objects_left_as_valid_json ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test uninstall::tests::review_failed_launcher_leaves_no_plan ... ok test uninstall::tests::review_planted_plan_is_never_followed ... ok test uninstall::tests::uninstall_and_setup_exclude_each_other ... ok test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test result: ok. 98 passed; 0 failed; 15 ignored; 0 measured; 0 filtered out; finished in 14.50s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal_plugin_ssh-9c4623776f228fdb) running 46 tests test auth_evidence::tests::later_local_key_receipt_supersedes_an_earlier_banner ... ok test auth_evidence::tests::partial_and_malformed_receipts_are_not_method_evidence ... ok test auth_evidence::tests::receipt_is_identical_at_every_chunk_boundary ... ok test auth_evidence::tests::selected_local_authentication_diagnostics_keep_method_at_every_boundary ... ok test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok test auth_order::tests::only_exact_generated_read_only_checks_can_choose_credentials ... ok test bootstrap::proof_tests::failed_published_facts_clean_only_the_private_probe_and_never_commit ... ok test bootstrap::proof_tests::published_proofs_start_together_and_commit_requires_both ... ok test bootstrap::proof_tests::review_stopped_commit_channel_finishes_the_private_probe ... ok test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test duplex::tests::closed_receipt_channel_is_reported_as_unreachable ... ok test duplex::tests::duplex_preserves_binary_bytes_in_both_directions ... ok test install::tests::compaction_drops_only_comment_lines_and_indentation ... ok test install::tests::embedded_setup_programs_have_no_constructs_compaction_would_change ... ok test install::tests::transfer_caps_accept_only_the_fixed_record ... ok test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test model::failure_serialization_tests::uuid_reference_uses_the_outcome_specific_wire_key ... ok test model::failure_serialization_tests::wire_format_is_exact_and_failure_stays_small ... ok test payload::tests::concurrent_adds_share_the_cached_digest_allocation ... ok test payload::tests::payload_hash_cache_at_1600_adds ... ignored, #190 public payload hash/cache measurements on the locked perf VM only test payload::tests::replacement_and_removal_never_reuse_a_path_name_digest ... ok test payload::tests::same_size_in_place_edits_with_restored_mtime_invalidate_the_digest ... ok test payload::tests::settings_changes_keep_at_most_four_entries ... ok test payload_encoding::tests::binary_replacement_never_reuses_the_previous_encoding ... ok test payload_encoding::tests::gzip_roundtrip_and_repeated_adds_share_one_encoding ... ok test payload_encoding::tests::small_payloads_retain_raw_streaming ... ok test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test prompt_image::tests::helper_identity_refuses_in_place_and_path_replacement ... ok test session_bridge::tests::failed_dispatcher_does_not_publish_a_session ... ok test session_bridge::tests::publication_and_dispatcher_greeting_share_the_first_write ... ok test session_bridge::tests::publication_prefix_preserves_every_dispatcher_byte_across_reads ... ok test setup::tests::exhausted_setup_failure_retains_reason_without_offering_retry ... ok test setup::tests::host_status_outlives_its_subscriber_and_keeps_exact_identity ... ok test socket_connector::tests::connected_socket_has_nodelay_before_any_application_bytes ... ok test socket_connector::tests::descriptor_delivery_keeps_the_exact_peer_after_helper_copy_closes ... ok test socket_connector::tests::invalid_endpoint_cannot_send_a_descriptor ... ok test stdio::tests::pipes_preserve_bytes_and_do_not_escape_into_child_exec ... ok test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok test result: ok. 44 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.22s Running tests/already_added_breakit.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/already_added_breakit-99b38edbed8cc7cb) running 1 test test a_host_key_challenge_never_serializes_as_a_host_id ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/auth_order-7f1c9d76494c5086) running 11 tests test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test automatic_checked_channel_selects_bridge_after_read_only_authentication ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test manual_hosts_try_available_methods_without_a_separate_none_refusal ... ok test manual_method_trust_refusal_never_loads_later_credentials ... ok test only_exhausted_auth_returns_typed_choose_method ... ok test ownership_check_fallback_repeats_only_the_allowlisted_read_only_command ... ok test ownership_checks_authenticate_once_without_replaying_a_different_check ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/build_removal-36fc813e5dfe0bb4) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.44s Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/concurrency-1637a17738b74cc3) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test component_off_retires_a_real_native_helper ... ok test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/config_isolation-5136cd71a92e1d23) running 2 tests test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test synthetic_master_socket_is_private_at_creation ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/credentials-3016d009da101052) running 4 tests test credential_helper_refuses_host_trust_and_permission_prompts ... ok test kernel_running_helper_is_materialized_in_its_private_scope ... ok test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test password_socket_refuses_an_unrelated_same_user_process ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.05s Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/diagnostics-8016ef45d5daacbd) running 12 tests test bootstrap_status_mapping_covers_each_step_and_approved_mode ... ok test control_probe_statuses_preserve_actionable_setup_messages ... ok test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test engine_failures_keep_their_ssh_boundary_without_remote_bytes ... ok test every_failed_step_names_the_step_and_a_next_action ... ok test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test failure_diagnostics_distinguish_auth_trust_transport_and_channel_without_raw_text ... ok test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test script_status_diagnostics_are_honest_for_all_nonzero_codes ... ok test status_mapping_preserves_authentication_and_missing_payload_classification ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/event_metadata-735e17f4e6c1e8dc) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/foreground-0f3aada5376df028) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/host_trust-f2c4b08665836335) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/install-41cb897cde3a5ed0) running 95 tests test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test active_transaction_is_live_between_ssh_setup_commands ... ok test breakit2_interrupted_lock_creation_allows_cleanup_and_retry ... ok test breakit2_rollback_preserves_foreign_launcher_new ... ok test breakit2_rollback_preserves_foreign_unit_new ... ok test breakit2_stage_refuses_parent_that_cannot_be_rolled_back ... ok test buffering_setup_reader_receives_no_payload_until_selection ... ok test checked_staging_survives_a_buffering_payload_reader_and_reuses_the_cache ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test command_failure_names_upload_join_install_and_start_separately ... ok test commit_signal_retains_journal_until_proof_and_on_cancel ... ok test compound_activation_and_start_failures_keep_exact_step_and_rollback ... ok test compound_join_failure_preserves_the_original_status_and_boundary ... ok test compound_restaging_refuses_a_foreign_journal_before_upload ... ok test compound_setup_keeps_owned_rollback_and_linger_warning ... ok test compressed_stage_roundtrips_and_rejects_corruption_before_execution ... ok test concurrent_attempts_cannot_replace_or_clean_each_others_transaction ... ok test control_cleanup_never_follows_a_socket_symlink_or_removes_regular_data ... ok test crash_mid_install_can_roll_back_and_retry ... ok test declared_transfer_refuses_a_different_selection_or_a_named_refusal ... ok test declared_transfer_sends_the_payload_before_any_selection_receipt ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test duplex_check_refuses_named_failures_and_oversized_records_before_staging ... ok test earlier_attempt_classification_preserves_status_boundary_and_authentication ... ok test earlier_attempt_records_reject_suffixes_truncation_and_unbounded_counts ... ok test earlier_binary_cache_is_refreshed_before_owned_recovery ... ok test earlier_control_socket_receipt_recovers_before_a_new_setup ... ok test early_staging_preserves_canonical_foreign_root_refusal ... ok test enrollment_process_exit_71_is_not_reported_as_directory_refusal ... ok test every_setup_command_fits_one_kernel_argument_in_both_modes ... ok test facts_timeout_retires_stale_plugin_control_socket_before_retry ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test foreign_data_refusal_retains_exit_status_and_actionable_directory ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test framed_join_refusal_keeps_status_separate_from_upload ... ok test framed_receipts_preserve_upload_failures_and_reject_extra_output ... ok test framed_upload_keeps_invitation_after_verified_raw_and_compressed_payloads ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test full_payload_restaging_preserves_the_running_session_build ... ok test full_stage_frees_payload_before_allocating_a_cleanup_receipt ... ok test installed_infraternal_agent_always_restarts_without_start_limit ... ok test interrupted_acquisition_cleanup_receipt_can_resume ... ok test interrupted_control_cleanup_is_resumed_only_by_its_original_attempt ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test known_failed_setup_finishes_without_a_second_confirmation ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test live_setup_retry_preserves_the_bridge_and_host_identity_state ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test missing_payload_preserves_the_bootstrap_binary_remedy ... ok test negotiated_retry_reuses_only_a_verified_cache_after_activation_refusal ... ok test negotiated_transfer_delivers_the_invitation_after_a_buffering_head ... ok test one_command_channel_carries_check_verified_upload_and_bridge_bytes ... ok test optional_session_payload_is_architecture_scoped_and_refuses_symlinks ... ok test partial_full_upload_rebridges_from_a_verified_image ... ok test payload_reuse_never_adopts_a_foreign_cache_directory ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test refused_previous_service_stop_only_removes_staging ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test reported_cache_digest_selects_reuse_without_sending_payload ... ok test restart_recovers_partial_stage_retirement ... ok test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test retry_resends_payload_when_cache_content_changes ... ok test retry_reuses_verified_payload_after_owned_rollback ... ok test review_inode_reuse_after_diagnostics_preserves_live_replacement ... ok test review_interrupted_transaction_receipt_allows_owned_cleanup ... ok test review_live_relative_control_socket_preserves_its_receipt ... ok test review_restart_recovers_cleanup_after_base_retirement ... ok test review_restart_recovers_cleanup_after_owner_retirement ... ok test review_unrelated_user_relative_socket_does_not_block_stale_cleanup ... ignored, requires sudo -n to create an isolated listener as uid 65534 test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test session_restaging_uses_one_compound_command ... ok test setup_receipts_require_exact_order_and_preserve_failure_boundaries ... ok test setup_transaction_holds_a_live_lock_between_shell_commands ... ok test staged_shell_bridge_keeps_protocol_bytes_and_releases_setup_guard ... ok test stale_previous_attempt_socket_can_be_retired_without_manual_cleanup ... ok test start_fresh_resumes_the_same_attempt_after_owner_confirmation ... ok test stopped_control_socket_modes_from_service_manager_are_recoverable ... ok test streamed_digest_refuses_a_short_file_or_a_changed_stream_before_launch ... ok test streaming::decoded_image_and_hash_advance_before_the_transfer_tail_is_released ... ok test successful_stage_releases_the_parent_lock_from_its_lease_child ... ok test turning_off_paused_host_provisioning_preserves_earlier_leftovers ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test result: ok. 94 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 59.65s Running tests/mesh_ssh.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/mesh_ssh-280b4a3d88f915bc) running 1 test test network_identity_connect_check_and_changed_key_refusal ... ignored, requires the Go interoperability fixture; run research/ssh-client/mesh-fixture/run test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/model.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/model-1495450aa1e090c5) running 6 tests test addresses_never_become_options_or_shell_syntax ... ok test check_is_exact_bounded_and_rejects_every_truncation ... ok test consent_and_credential_references_are_the_only_request_authority ... ok test passwordless_sudo_keeps_default_rootless_without_explicit_consent ... ok test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test start_fresh_is_declared_as_an_owned_host_provisioning_action ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/payload_source.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/payload_source-2c319be05840be68) running 2 tests test stalled_download_retains_the_named_step_before_the_attempt_deadline ... ok test verification_failure_names_step_and_stops_before_upload ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/previous_attempt_liveness_review.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/previous_attempt_liveness_review-48e389662ef4f40f) running 1 test test home_alias_keeps_open_setup_descriptor_live ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.34s Running tests/previous_attempt_shell.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/previous_attempt_shell-ea23fd99bd99c666) running 1 test test shared_ownership_shell_preserves_recovery_and_refusal_invariants ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 12.60s Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/probe_check-1c2c88386281f5f7) running 3 tests test breakit2_no_systemd_names_the_required_manager ... ok test manager_availability_does_not_request_its_private_environment ... ok test shell_startup_refusal_names_an_interactive_only_remedy ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s Running tests/process.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/process-2394f677df3eba95) running 10 tests test cancellation_retires_the_helper_descendant_too ... ok test completed_helper_retires_descendants_with_closed_pipes ... ok test declared_payload_flows_before_receipts_and_private_input_waits ... ok test declared_selection_mismatch_and_missing_verification_withhold_private_input ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test negotiated_sources_require_an_exact_receipt_before_private_input ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test review_compound_refusal_preserves_receipt_when_invitation_pipe_closes ... ok test reviewer_ssh_helper_does_not_inherit_server_reload_mask ... ok test unavailable_negotiated_codec_never_sends_invitation ... ok test result: ok. 10 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.50s Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/proxy_policy-95eaca5955b4de54) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/publication.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/publication-c8f03565e3a56074) running 4 tests test encoding_warmup_resolves_admitted_source_images_instead_of_configured_paths ... ok test refused_publication_reports_failure_to_the_waiting_wizard ... ok test retry_reopens_ssh_after_transport_loss_and_keeps_the_published_shell ... ok test signed_session_is_typable_before_full_resolution_and_late_failure_retries_the_same_shell ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/real_ssh-e4eb9fc1f871e6b5) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/recovery_support.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/recovery_support-04633aa0d48ae329) Private socket fixture: uid=1001 scratch=/mnt; capabilities dropped before test running 12 tests test cleanup_holds_runtime_lock_until_all_receipts_retire ... ok test cleanup_script_requires_the_shipped_helper_level ... ok test legacy_control_socket_in_newline_home_preserves_receipt ... ok test legacy_control_socket_in_spaced_home_preserves_receipt ... ok test legacy_control_socket_through_absolute_alias_preserves_receipt ... ok test private_legacy_control_socket_preserves_receipt ... ok test review_bound_control_socket_before_listen_preserves_receipt ... ok test review_cached_helper_without_session_mode_asks_for_a_refresh ... ok test review_live_session_socket_in_newline_home_blocks_cleanup ... ok test review_live_session_socket_in_plain_home_blocks_cleanup ... ok test review_stale_receipt_recovers_without_host_python ... ignored, requires sudo -n Docker and the local debian:trixie-slim image test unrelated_same_user_relative_socket_does_not_block_cleanup ... ok test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 4.33s Running tests/shadow_banner.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/shadow_banner-390b0804ed5bea42) running 1 test test a_long_pre_authentication_banner_does_not_refuse_the_host ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s Running tests/shell_quoting.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/shell_quoting-e6b49b46dffcbe90) running 1 test test nested_scripts_preserve_bytes_without_expanding_public_text ... ignored, run on the owned disposable target with all supported login shells installed test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/single_connection-82df5df57e5d8a67) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/source_completeness-17850d7f3f46c0fe) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/trust_round2-acef8625a04561d9) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 8 tests test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test stream_tests::split_mux_header_preserves_trailing_close ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test tests::marked_input_preserves_legacy_bytes_and_bounds_reply_body ... ok test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal_server-1b97e649abad9095) Private socket fixture: uid=1001 scratch=/mnt; capabilities dropped before test running 629 tests test auth::cookies::measurement::cookie_latency_at_50_sessions ... ignored, local optimized cookie reader measurement at 50 browser sessions test auth::cookies::tests::duplicates_missing_invalid_and_nontext_fail_closed ... ok test auth::cookies::tests::joined_split_reordered_and_other_cookies ... ok test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::migration_compat_tests::committed_retag_can_resume_after_interruption_and_concurrent_startup ... ok test auth::migration_compat_tests::dev_history_keeps_its_mesh_checksum_and_data ... ok test auth::migration_compat_tests::dirty_production_migration_is_refused_without_retagging ... ok test auth::migration_compat_tests::fresh_history_has_unique_versions_and_both_schemas ... ok test auth::migration_compat_tests::live_production_retirement_history_survives_dev_upgrade ... ok test auth::migration_compat_tests::occupied_destination_leaves_the_production_ledger_unchanged ... ok test auth::migration_compat_tests::production_history_keeps_index_checksum_and_data ... ok test auth::migration_compat_tests::unrecognized_checksum_is_refused_without_retagging ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::tests::ca_administration_tests::audit_tests::private_copy_persistence_contains_only_ciphertext_and_public_metadata ... ok test auth::tests::ca_administration_tests::audit_tests::unlock_audit_cost_at_1000_memberships ... ignored, real 100-unlock/1000-membership audit formatting diagnostic; no own builds or browsers test auth::tests::ca_administration_tests::audit_tests::unlock_audit_records_principal_time_outcome_without_material ... ok test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::audit_tests::ca_start_budget_is_shared_by_routes_and_cookies_but_not_status_or_finish ... ok test auth::tests::ca_administration_tests::http_tests::audit_tests::sequential_unlock_starts_require_a_temporal_budget ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::signed_deploy_preserves_passkey_ca_and_live_sessions ... ignored, exclusive perf VM staging proof; requires signed run artifacts and systemd test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::staging_browser_services_probes_between_commands ... ignored, root shipping binary functional proof; requires INFRATERNAL_TEST_BINARY and private CA test root test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::authority_stall_soak::authority_fast_read_echo_rtt ... ignored, measurement for #240; run explicitly on the perf VM test auth::tests::socket_tests::authority_stall_soak::authority_stall_soak ... ignored, measurement for #240; run explicitly on the perf VM test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::close_logging::agent_stream_loss_logs_its_safe_close_reason_and_reaches_the_browser ... ok test auth::tests::socket_tests::close_logging::authority_read_timeout_during_a_frame_logs_authority_unavailable ... ok test auth::tests::socket_tests::close_logging::browser_websocket_close_logs_its_code_and_safe_reason_for_attached_sessions ... ok test auth::tests::socket_tests::close_logging::failed_client_resume_attempt_logs_each_retained_session ... ok test auth::tests::socket_tests::close_logging::rootless_attach_without_a_live_peer_logs_the_host_and_keeps_the_socket_up ... ok test auth::tests::socket_tests::close_logging::session_lookup_store_error_logs_authority_unavailable ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::plugin_lifecycle::plugin_exchange_correlates_results_after_subscription_events ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok test auth::tests::socket_tests::restart_open_liveness_review::responsive_socket_survives_a_held_terminal_open_with_an_existing_attachment ... ok test auth::tests::socket_tests::review_authority_retry::renewing_retries_do_not_drain_the_pool_during_a_write_stall ... ok test auth::tests::socket_tests::review_authority_retry::session_expiring_during_the_wait_is_not_revived_or_served ... ok test auth::tests::socket_tests::review_close_log::attaches_to_unowned_session_ids_cannot_flood_the_close_log ... ok test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_input_credit::browser_input_overload_retires_only_the_terminal_stream ... ok test auth::tests::socket_tests::review_input_credit::browser_output_credit_refusal_logs_the_stream_reason ... ok test auth::tests::socket_tests::review_input_credit::idle_browser_probes_do_not_renew_or_poll_session_authority ... ok test auth::tests::socket_tests::review_input_credit::idle_probe_authority_cancels_waiting_write_on_committed_revocation ... ok test auth::tests::socket_tests::review_input_credit::idle_probe_authority_refreshes_expiry_after_authorized_activity ... ok test auth::tests::socket_tests::review_input_credit::idle_server_probes_do_not_renew_session_authority ... ok test auth::tests::socket_tests::review_input_credit::pending_browser_input_counts_against_slots_and_cancels_on_drop ... ok test auth::tests::socket_tests::review_input_credit::pending_browser_input_has_a_wire_byte_bound ... ok test auth::tests::socket_tests::review_input_credit::review_full_input_writer_preserves_browser_control_progress ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket ... ok test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close ... ok test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery ... ok test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::socket_tests::transient_authority_stall::authority_read_stall_beyond_the_wait_still_fails_closed ... ok test auth::tests::socket_tests::transient_authority_stall::authority_read_stall_shorter_than_the_wait_keeps_the_socket_and_its_order ... ok test auth::tests::socket_tests::transient_authority_stall::teardown_does_not_renew_the_session ... ok test auth::tests::socket_tests::transient_authority_stall::teardown_with_a_busy_store_does_not_wait_for_authority ... ok test auth::tests::socket_tests::transient_authority_stall::terminal_stream_survives_authority_stalls_without_loss_or_reorder ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser ... ok test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies ... ok test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test bootstrap_api::tests::setup_status_tests::late_setup_subscriber_receives_failure_and_retry_completion ... ok test bootstrap_api::tests::setup_status_tests::setup_replay_outlives_its_socket_and_logout_retires_delivery ... ok test bootstrap_api::tests::split_cookie_fields_preserve_bootstrap_owner_authority ... ok test bootstrap_api::tests::start_fresh_request_is_bound_to_a_target_and_public_challenge ... ok test bootstrap_runtime::failure_log_tests::one_line_contains_only_classified_public_coordinates ... ok test bootstrap_runtime::failure_log_tests::start_fresh_logs_only_the_exact_public_ownership_journal_and_outcome ... ok test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test bootstrap_runtime::remote_backend::admission_tests::installed_admission_waits_for_the_active_route ... ok test bootstrap_runtime::remote_backend::canary_tests::cancellation_keeps_the_owned_session_available_for_cleanup ... ok test bootstrap_runtime::remote_backend::canary_tests::failed_attachment_finishes_the_private_command ... ok test bootstrap_runtime::remote_backend::canary_tests::private_writers_reserve_the_browser_allocator_without_publishing_sessions ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_primary_exit_without_reattaching_to_a_retired_session ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::already_added_breakit::a_non_owner_session_never_learns_the_owners_host_id ... ok test bootstrap_runtime::remote_backend::tests::already_added_breakit::a_revoked_host_never_names_its_id ... ok test bootstrap_runtime::remote_backend::tests::already_added_breakit::the_typed_address_decides_which_host_is_named_when_two_match ... ok test bootstrap_runtime::remote_backend::tests::automatic_cleanup_requires_the_exact_failed_server_host_binding ... ok test bootstrap_runtime::remote_backend::tests::breakit2_concurrent_same_destination_issues_only_one_invitation ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::breakit2_live_ssh_install_join_and_terminal ... ignored, #169 live disposable Docker target; invoke docs/verification/addhost-breakit2/measure.py test bootstrap_runtime::remote_backend::tests::breakit2_live::compound_retry_fixture_reaches_install_boundary ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::live_fixture_keeps_authority_after_connection_retirement ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::live_fixture_keeps_the_full_image_and_selects_the_explicit_session_image ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::provisioning_https_uses_production_tcp_admission ... ok test bootstrap_runtime::remote_backend::tests::breakit2_unpublished_invitation_retires_durable_authority ... ok test bootstrap_runtime::remote_backend::tests::cancelled_invitation_after_commit_retires_its_host_record ... ok test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::destination_reservation_admission_at_1600_pending_hosts ... ignored, #169 local bounded-journal scale evidence under CPUWeight scope test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_runtime::remote_backend::tests::retirement_contention::cancelled_invitation_retires_after_sqlite_busy_timeout ... ok test bootstrap_runtime::remote_backend::tests::review_cleanup::review_cancelled_committed_invitation_survives_temporary_writer_contention ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test ca_handoff::shipping_tests::browser_client::tests::probes_are_answered_without_assertion_reads_and_drop_closes_the_socket ... ok test ca_handoff::shipping_tests::shipping_child ... ok test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY test ca_handoff::tests::exec_child ... ok test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok test ca_http::intake_tests::chunked_intake_is_bounded_before_parsing ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test ca_memory::tests::unavailable_secure_heap_refuses_root_and_warns_for_nonroot ... ok test ca_update_audit_tests::every_ciphertext_byte_and_tag_mutation_refuses_without_material_in_errors ... ok test ca_update_audit_tests::handoff_descriptor_is_close_on_exec_and_prepare_failure_preserves_source ... ok test ca_update_audit_tests::handoff_memory_protection_failure_keeps_the_existing_signer ... ok test ca_update_audit_tests::no_timer_locks_signing_and_wrong_issuer_cannot_replace_the_unlocked_source ... ok test ca_update_audit_tests::secure_heap_capacity_at_10000_live_keys ... ignored, isolated secure heap sizing at 10000 live keys; run with no own builds/browser overlap test ca_update_audit_tests::unlocked_signer_requires_persistent_locked_pages ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test embedded::exit_latency_tests::shim_sigkill_to_server_inventory_latency ... ignored, real daemon artifact and 200 shim exits; run with INFRATERNAL_BIN in a weighted scope test embedded::priming::flights::tests::queued_sibling_failure_stays_owned_until_the_actor_observes_it ... ok test embedded::priming::flights::tests::stop_preserves_finished_success_and_identifies_unpolled_cancellation ... ok test embedded::priming::header_tests::blocked_promotion_header_does_not_stop_actor_control_progress ... ok test embedded::priming::header_tests::promoted_owned_attach_opens_a_missing_native_writer_binding ... ok test embedded::priming::header_tests::promotion_never_publishes_an_unstarted_shadow_flight_as_credited ... ok test embedded::priming::tests::abandoned_preparation_cancels_even_before_the_owned_task_first_polls ... ok test embedded::priming::tests::flow_control_blocked_shadow_does_not_stop_actor_control_progress ... ok test embedded::priming::tests::later_input_is_hedged_without_resending_the_first_suffix ... ok test embedded::priming::tests::overlap_and_stale_snapshot_do_not_spend_browser_credit ... ok test embedded::priming::tests::shadow_input_and_snapshot_credit_have_independent_bounded_windows ... ok test embedded::priming::tests::snapshot_notice_precedes_repaint_and_duplicates_spend_no_browser_credit ... ok test embedded::priming::tests::stream_reuse_waits_for_the_retired_flight_to_join ... ok test embedded::regressions::actor_batch_probes_every_ready_route_without_payload_notifications ... ok test embedded::regressions::agent_link_loss_invalidates_the_last_live_session_snapshot ... ok test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok test embedded::regressions::credit_tests::retained_input_credit_parks_only_the_full_writer_until_its_ack ... ok test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::expired_route_retires_full_consumer ... ok test embedded::regressions::expired_route_waits_for_browser_authority_before_rebind ... ok test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test embedded::regressions::greeted_links_that_die_young_escalate_the_actor_retry_delay ... ok test embedded::regressions::half_open_infraternal_agent_route_loses_inventory_without_eof ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test embedded::regressions::idle_route_proofs_do_not_queue_payload_notifications_at_capacity ... ok test embedded::regressions::liveness_doubt_breakit_r2_tests::a_pinned_dead_host_retires_within_two_ceilings_without_doubt ... ok test embedded::regressions::liveness_doubt_breakit_r2_tests::a_window_that_reconnects_mid_doubt_is_told_and_recovered ... ok test embedded::regressions::liveness_doubt_breakit_r2_tests::doubt_retry_sends_one_notice_per_window_per_episode ... ok test embedded::regressions::liveness_doubt_breakit_tests::a_window_full_at_doubt_start_is_told_on_a_later_tick ... ok test embedded::regressions::liveness_doubt_breakit_tests::doubt_and_retire_times_per_rtt ... ok test embedded::regressions::liveness_doubt_breakit_tests::inflated_host_link_still_retires_a_dead_host_within_four_seconds ... ok test embedded::regressions::liveness_doubt_breakit_tests::queued_path_at_the_ceiling_does_not_flap_doubt_every_probe ... ok test embedded::regressions::liveness_doubt_breakit_tests::retired_doubt_never_confirms_a_replacement_link_mid_replay ... ok test embedded::regressions::native_input_retention_leaves_terminal_probes_to_the_route ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test embedded::regressions::path_tests::full_ack_releases_retention_and_duplicate_input_is_not_replayed ... ok test embedded::regressions::path_tests::full_retention_replays_as_legal_frames_with_contiguous_offsets ... ok test embedded::regressions::path_tests::initial_attachment_keeps_input_cut_through_before_its_first_ack ... ok test embedded::regressions::path_tests::input_retention_cost_at_200_terminals ... ignored, Run alone on the perf VM under the shared benchmark lock. test embedded::regressions::path_tests::input_retention_refuses_excess_before_advancing_the_cursor ... ok test embedded::regressions::path_tests::replacement_replays_only_the_unacknowledged_suffix_and_queued_input ... ok test embedded::regressions::path_tests::reply_queue_deadline_and_live_reply_do_not_change_typing_offsets ... ok test embedded::regressions::path_tests::review_pending_input_limit_retires_only_its_attachment ... ok test embedded::regressions::plugin_control_notice_preserves_capability_invalidation ... ok test embedded::regressions::query_reply_compatibility_notice_is_strict_and_session_bound ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovered_route_ignores_stale_browser_rebind ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::replay_complete_notice_is_accepted_by_embedded_server ... ok test embedded::regressions::resumed_writer_closes_previous_route_before_shared_stream_reuse ... ok test embedded::regressions::resumed_writer_for_other_session_preserves_live_route ... ok test embedded::regressions::saturated_control_pong_does_not_retire_connection ... ok test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok test embedded::writes::tests::bounded_lane_metadata_and_flight_sizes ... ok test embedded::writes::tests::cached_promotion_ack_never_replays_inside_the_actor ... ok test embedded::writes::tests::enabling_owned_writes_preserves_unsent_replacement_input ... ok test embedded::writes::tests::full_control_lane_keeps_all_terminal_owner_slots_available ... ok test embedded::writes::tests::promotion_headers_preserve_attach_credit_ack_input_order ... ok test embedded::writes::tests::saturated_control_queue_preserves_fifo_and_shutdown_owns_flights ... ok test embedded::writes::tests::socket_completion_cannot_spend_unacknowledged_writer_credit ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test enrollment::bootstrap_retirement::ownership_regression::retirement_requires_an_unfinished_intent ... ok test enrollment::bootstrap_retirement::tests::proven_completion_is_owner_bound_and_survives_restart ... ok test enrollment::bootstrap_retirement::tests::retirement_consumes_only_its_owned_intent_with_the_tombstone ... ok test enrollment::bootstrap_retirement::tests::startup_preserves_a_published_live_session_and_its_setup_intent ... ok test enrollment::bootstrap_retirement::tests::startup_retires_only_unfinished_provisioning_and_is_idempotent ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test liveness::tests::a_doubt_recovered_at_the_ceiling_pins_until_the_path_drains ... ok test liveness::tests::a_recovered_doubt_below_the_ceiling_keeps_early_notice ... ok test liveness::tests::a_reply_during_doubt_clears_it_and_renews_the_route ... ok test liveness::tests::an_unanswered_host_link_retires_at_the_startup_grace_without_doubt ... ok test liveness::tests::delayed_server_probe_does_not_expire_an_answered_route ... ok test liveness::tests::healthy_reply_survives_a_150ms_server_stall ... ok test liveness::tests::host_allowance_covers_one_loss_recovery_and_browser_routes_keep_theirs ... ok test liveness::tests::host_allowance_has_a_floor_a_settled_long_haul_value_and_a_ceiling ... ok test liveness::tests::host_link_doubts_on_the_first_miss_and_retires_on_the_second ... ok test liveness::tests::jitter_allowance_decays_after_the_link_settles ... ok test liveness::tests::late_native_probe_keeps_its_unissued_reply_allowance ... ok test liveness::tests::missing_replies_expire_even_with_probes_in_flight ... ok test liveness::tests::pipelined_requests_do_not_renew_an_outstanding_deadline ... ok test liveness::tests::quiet_dead_peer_expires_within_floor_plus_one_interval ... ok test liveness::tests::ready_reply_only_pulls_forward_an_answered_probe_after_one_tick ... ok test liveness::tests::recent_application_progress_preserves_the_first_tick_cadence ... ok test liveness::tests::restarting_monitoring_never_reuses_an_old_issued_probe ... ok test liveness::tests::serial_probe_accepts_a_timely_rtt_step_without_renewing_unsolicited_replies ... ok test liveness::tests::serial_probe_deadline_includes_only_one_gap_and_the_estimated_allowance ... ok test liveness::tests::terminal_routes_still_end_their_lease_on_the_first_miss ... ok test liveness::tests::variation_uses_the_previous_smoothed_sample ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test mesh_api_tests::storage_diagnostics::changed_storage_failure_reports_the_previous_count ... ok test mesh_api_tests::storage_diagnostics::coordinator_clones_share_failure_counts_and_report_recovery ... ok test mesh_api_tests::storage_diagnostics::coordinator_loading_preserves_missing_server_and_sql_reasons ... ok test mesh_api_tests::storage_diagnostics::coordinator_stored_column_refuses_without_panic_and_recovers_after_repair ... ok test mesh_api_tests::storage_diagnostics::invalid_stored_column_is_skipped_without_panicking ... ok test mesh_api_tests::storage_diagnostics::invalid_stored_host_is_reported_once_by_id ... ok test mesh_api_tests::storage_diagnostics::malformed_host_keeps_healthy_inventory_readable ... ok test mesh_api_tests::storage_diagnostics::malformed_unrelated_host_preserves_scoped_inventory ... ok test mesh_api_tests::storage_diagnostics::repeated_storage_failure_has_bounded_diagnostics ... ok test mesh_api_tests::storage_diagnostics::settings_storage_failure_has_a_safe_original_reason ... ok test mesh_api_tests::storage_diagnostics::sqlite_admission_failures_have_distinct_safe_reasons ... ok test mesh_api_tests::storage_diagnostics::storage_failures_have_safe_reasons_and_recover_after_repair ... ok test mesh_api_tests::storage_diagnostics::unrelated_success_does_not_reset_a_persistent_write_failure ... ok test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test plugins::node_lifecycle::tests::disabling_replacement_and_retirement_join_the_correct_node_worker ... ok test release_build_tests::release_build_marker_is_explicit ... ok test release_http::tests::bounded_body_status_and_existing_destination_are_refused ... ok test release_http::tests::https_cannot_silently_accept_a_plaintext_bucket ... ok test release_http::tests::unsupported_scheme_credentials_query_and_fragment_never_connect ... ok test release_latest::tests::bench_bounded_metadata_verification ... ignored, local weighted-scope verification latency benchmark test release_latest::tests::bench_latest_fifty_callers ... ignored, local weighted-scope 50-caller real-engine RSS measurement test release_latest::tests::edge_pointer_is_verified_in_its_own_channel ... ok test release_latest::tests::pointer_authenticates_signed_version_and_refuses_replays_tampering_and_duplicates ... ok test release_latest::tests::stable_empty_reports_opt_in_without_edge_request ... ok test release_manifest::tests::noncanonical_or_cross_channel_identity_is_refused ... ok test release_manifest::tests::signed_identity_and_exact_bytes_are_required ... ok test release_payload::tests::a_missing_payload_never_enables_development_fallback ... ok test release_payload::tests::a_valid_older_release_replayed_under_the_requested_version_is_refused ... ok test release_payload::tests::advertised_session_missing_digest_or_signature_never_falls_back ... ok test release_payload::tests::cache_symlinks_and_shared_files_are_refused ... ok test release_payload::tests::concurrent_session_requests_publish_one_verified_artifact ... ok test release_payload::tests::cross_architecture_cold_and_warm_cache_measurements ... ignored, run release-profile measurements in a weighted scope test release_payload::tests::dangling_session_cache_symlink_is_refused_without_publication ... ok test release_payload::tests::development_session_fallback_only_uses_trusted_local_artifacts_for_missing_release ... ok test release_payload::tests::edge_add_host_keeps_exact_server_version_and_verified_cache ... ok test release_payload::tests::eight_concurrent_add_hosts_share_one_verified_download ... ok test release_payload::tests::missing_wrong_version_tampered_network_and_development_only_fallback ... ok test release_payload::tests::partial_download_restart_child ... ignored, subprocess helper for release-cache restart verification test release_payload::tests::refused_session_release_never_uses_development_fallback ... ok test release_payload::tests::resolver_startup_removes_only_owned_inactive_private_staging ... ok test release_payload::tests::restarted_resolution_reclaims_partial_downloads_after_process_stop ... ok test release_payload::tests::session_cache_refuses_shared_payloads_symlinks_and_unsafe_absence ... ok test release_payload::tests::session_payloads_are_signed_on_both_architectures_and_reused_offline ... ok test release_payload::tests::session_staging_cleanup_preserves_active_and_unknown_files ... ok test release_payload::tests::signed_download_cache_hit_offline_and_tampered_cache ... ok test release_payload::tests::signed_session_absence_is_cached_and_reauthenticated_offline ... ok test release_payload::tests::signed_session_version_replay_and_untrusted_key_are_refused ... ok test release_verify::tests::compiled_authorities_keep_production_and_isolate_staging ... ok test release_verify::tests::openssh_signatures_preserve_descriptor_and_reject_every_byte_mutation ... ok test release_verify::tests::per_run_signature_obeys_the_compiled_feature_boundary ... ok test release_verify::tests::trust_namespace_hash_trailing_data_and_manifest_ambiguity_are_refused ... ok test release_verify::tests::verification_twenty_megabytes_fifty_runs ... ignored, run release-profile measurements in a weighted scope test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test remote_guard::cut_tests::cancellation_survives_last_transport_until_durable_tombstone ... ok test remote_guard::cut_tests::provisional_ssh_authority_requires_exact_pending_owner_and_uid ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test remote_inventory::pagination_tests::long_destinations_stay_bounded_and_all_pages_are_complete ... ok test remote_inventory::tests::admitted_hosts_are_account_scoped_offline_and_revocation_filtered ... ok test remote_inventory::tests::unredeemed_invitations_are_not_admitted_and_cursors_are_canonical ... ok test remote_mesh_revocation_tests::committed_host_revocation_pushes_peer_withdrawal_without_polling ... ok test remote_removal::review_tests::accepted_uninstall_names_the_objects_it_leaves ... ok test remote_removal::review_tests::no_commands_for_a_host_setup_did_not_install ... ok test remote_removal::review_tests::review_manual_commands_are_gated_on_this_hosts_bootstrap_owner ... ok test remote_removal::review_tests::review_manual_commands_stop_only_this_installations_sessions ... ok test remote_removal::review_tests::review_manual_rootful_commands_delete_only_marked_kernel_objects ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test remote_runtime::tests::additional_listeners::additional_listener_keeps_underlay_address_and_retires_with_its_lease ... ok test remote_runtime::tests::additional_listeners::additional_listener_refuses_unenrolled_certificate_before_proof_reply ... ok test remote_runtime::tests::additional_listeners::admitted_connection_moves_to_a_leased_address_and_back_without_readmission ... ok test remote_runtime::tests::additional_listeners::initial_overlay_admission_has_no_underlay_guess ... ok test remote_runtime::tests::additional_listeners::ipv6_wildcard_listener_reuses_binding_and_preserves_ipv4_discovery ... ok test remote_runtime::tests::additional_listeners::leased_tcp_admits_current_identity_releases_lease_and_keeps_primary_usable ... ok test remote_runtime::tests::additional_listeners::wildcard_listener_reuses_binding_and_tracks_destination_lease_counts ... ok test remote_runtime::tests::cancelled_native_read_retains_dequeued_packet ... ok test remote_runtime::tests::candidate_proofs::candidate_proof_refuses_a_second_probe_and_invalid_hello ... ok test remote_runtime::tests::candidate_proofs::quic_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok test remote_runtime::tests::candidate_proofs::tls_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::late_native_detach_after_peer_close_keeps_the_control_connection ... ok test remote_runtime::tests::late_native_detach_after_peer_stop_keeps_the_control_connection ... ok test remote_runtime::tests::ping_flood::primary_ping_during_terminal_flood ... ignored, 10-minute real PTY measurement; pinned VM lock and INFRATERNAL_PING_BINARY required test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::remote_peer_routing_capability_does_not_retain_the_host_registry ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok test remote_runtime::tests::retired_native_writer_frames_cannot_close_or_ack_its_replacement ... ok test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::ssh_bridge::component_off_retires_ssh_fallback_after_installed_admission ... ok test remote_runtime::tests::ssh_bridge::refused_installed_reattachment_restores_the_ssh_writer ... ok test remote_runtime::tests::ssh_bridge::ssh_bridge_does_not_invent_node_path_capabilities ... ok test remote_runtime::tests::ssh_bridge::ssh_bridge_retires_only_after_installed_writer_acknowledges ... ok test remote_runtime::tests::ssh_bridge::ssh_greeting_keeps_full_capabilities_and_coalesced_frames ... ok test remote_runtime::tests::ssh_bridge::ssh_greeting_refuses_invalid_first_frames_and_releases_its_master ... ok test remote_runtime::tests::standby::a_second_parked_fallback_cannot_replace_the_first ... ok test remote_runtime::tests::standby::control_pause::cancelled_control_packet_survives_pause_and_resumes_before_queued_sibling ... ok test remote_runtime::tests::standby::control_queue::saturated_native_control_queue_does_not_hide_primary_terminal_output ... ok test remote_runtime::tests::standby::control_queue::scheduled_probe_preserves_primary_at_full_native_control_capacity ... ok test remote_runtime::tests::standby::detached_primed_writers_release_native_binding_budget ... ok test remote_runtime::tests::standby::liveness_doubt::one_missed_primary_reply_shows_reconnecting_and_only_a_second_retires_the_link ... ok test remote_runtime::tests::standby::parked_fallback_is_cancelled_by_ledger_revocation ... ok test remote_runtime::tests::standby::parked_fallback_survives_greeting_deadline_and_activates_without_another_hello ... ok test remote_runtime::tests::standby::primed_fallback_activates_after_the_primary_closes ... ok test remote_runtime::tests::standby::primed_fallback_hedges_when_credit_arrives_behind_a_blocked_primary_write ... ok test remote_runtime::tests::standby::primed_fallback_hedges_while_primary_native_send_buffer_is_full ... ok test remote_runtime::tests::standby::primed_hedge_survives_blocked_control_call ... ok test remote_runtime::tests::standby::primed_standby_greets_without_replacing_the_live_actor_before_activation ... ok test remote_runtime::tests::standby::tcp_fallback_parks_without_a_host_actor_and_activates_on_the_existing_tls_channel ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_standby::tests::bounded_standby_options_reject_ambiguous_or_unrecognized_fields ... ok test remote_standby::tests::cancelled_queue_admission_releases_parking_before_actor_poll ... ok test remote_standby::tests::parking_is_per_identity_bounded_and_released_on_drop ... ok test remote_standby_request::tests::requests_require_objects_and_exact_fields ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 test runtime::remote_demo_tests::cold_start::release_transition_recovers_enrolled_host_after_long_outage ... ignored, requires isolated release binaries and a ten-minute outage test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test runtime::temporal_admission_tests::ca_budget_cost_at_capacity ... ignored, isolated debug admission diagnostic at 4096 principals; run without own build overlap test runtime::temporal_admission_tests::windows_principals_and_capacity_remain_bounded ... ok test runtime::tests::empty_no_color_does_not_disable_terminal_logs ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test stream_close::tests::a_close_naming_no_owned_session_prints_none_for_session_and_host ... ok test stream_close::tests::a_dead_logger_is_counted_and_summarised_by_the_callers ... ok test stream_close::tests::a_full_queue_drops_and_counts_instead_of_blocking ... ok test stream_close::tests::a_full_table_keeps_rate_limiting_a_storm ... ok test stream_close::tests::an_unavailable_agent_stream_is_reported_as_a_link_drop ... ok test stream_close::tests::client_chosen_session_ids_share_their_accounts_window ... ok test stream_close::tests::close_line_has_session_counters_and_never_copies_untrusted_close_text ... ok test stream_close::tests::close_path_cost ... ignored, manual microbenchmark test stream_close::tests::different_accounts_and_reason_categories_each_get_their_first_line ... ok test stream_close::tests::mixed_reasons_and_closers_in_one_window_are_named_as_mixed ... ok test stream_close::tests::one_close_line_and_one_summary_bound_an_account_storm ... ok test stream_close::tests::the_thread_writes_the_first_close_and_summarises_the_rest_on_shutdown ... ok test terminal_queries::census_tests::census_cleanup_is_host_scoped_and_preserves_detached_live_queries ... ok test terminal_queries::corpus_tests::output_chunking_preserves_bounded_query_state ... ok test terminal_queries::lifecycle_tests::ended_sessions_release_query_slots ... ok test terminal_queries::overflow_tests::oversized_osc_does_not_hide_the_next_query ... ok test terminal_queries::tests::deadline_includes_incomplete_query ... ok test terminal_queries::tests::every_observed_output_position_can_identify_a_renderer_answer ... ok test terminal_queries::tests::gaps_and_replay_never_authorize_unobserved_or_expired_positions ... ok test terminal_queries::tests::marked_flood_never_allocates_queries ... ok test terminal_queries::tests::only_one_reply_across_viewers_and_replay ... ok test terminal_queries::tests::renderer_owns_reply_contents_but_size_and_identity_are_bounded ... ok test terminal_queries::tests::review_renderer_supported_query_forms_are_admitted ... ok test terminal_queries::tests::style_controls_cannot_evict_queries_and_live_claims_never_reopen ... ok test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test websocket::cookie_tests::duplicate_cookie_fields_deny_socket_session ... ok test websocket::cookie_tests::split_cookie_fields_preserve_socket_session ... ok test websocket::link_notice_tests::doubt_notices_reach_only_viewers_that_announced_them_and_never_await_an_ack ... ok test websocket::receive_tests::browser_websocket_close_keeps_its_code_and_discards_unknown_reason_text ... ok test websocket::receive_tests::buffered_control_frames_cannot_monopolize_a_transport_turn ... ok test websocket::receive_tests::receive_failures_keep_protocol_size_and_idle_classifications ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test websocket::session_inventory_tests::available_snapshot_reports_live_rows_and_bounded_saved_exit_statuses ... ok test websocket::session_inventory_tests::census_waiting_for_database_does_not_close_a_newly_created_live_session ... ok test websocket::session_inventory_tests::inventory_reconciliation_at_200_sessions_and_50_accounts ... ignored, independent scale diagnostic; run in a weighted scope test websocket::session_inventory_tests::pending_agent_inventory_hides_cached_rows_until_the_first_census ... ok test websocket::session_inventory_tests::reconciliation_before_saved_exit_keeps_the_authoritative_exit_status ... ok test websocket::session_inventory_tests::restart_reconciliation_keeps_live_rows_and_closes_missing_rows ... ok test websocket::write_tests::a_stalled_group_has_one_absolute_write_budget ... ok test websocket::write_tests::ready_proofs_keep_message_boundaries_and_order_with_one_flush ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_fails_closed_at_the_bounded_wait ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_keeps_its_connection_owner_runnable ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_rejects_expiry_committed_by_its_operation ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_rejects_revocation_committed_by_its_operation ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_stops_side_effects_at_expiry ... ok test websocket::writer_tests::authority_watchdog::periodic_authority_read_stops_side_effects_on_revocation ... ok test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test websocket_transport::queue_tests::full_browser_transport_proof_queue_keeps_connection_usable ... ok test websocket_transport::queue_tests::full_browser_wire_proof_queue_keeps_connection_usable ... ok test websocket_transport::tests::each_receive_end_has_a_structured_terminal_close_reason ... ok test websocket_transport::tests::no_probe_in_an_active_idle_active_window ... ok test result: ok. 577 passed; 0 failed; 52 ignored; 0 measured; 0 filtered out; finished in 386.69s Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/catalog_startup-0cc2a21db5bdb009) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/enrollment-da6f6bc526730a8e) running 6 tests test concurrent_redemption_has_one_winner_and_one_certificate ... ok test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.40s Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/mesh_parser-53adbbeaac9bee95) running 2 tests test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test review_grant_parser_rejects_unknown_nested_port_fields ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/mesh_review_plugin-2b5c5891c407e664) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/mesh_review_policy-b523d9249fd86f2a) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/mesh_review_role_scope-68bf054b7c4a424b) running 2 tests test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test role_scopes_require_an_array_when_provided ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/native_probe_correlation_review.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/native_probe_correlation_review-48536fc69a9add81) running 23 tests test healthy_real_socket_survives_a_150ms_server_stall ... ok test liveness::tests::a_doubt_recovered_at_the_ceiling_pins_until_the_path_drains ... ok test liveness::tests::a_recovered_doubt_below_the_ceiling_keeps_early_notice ... ok test liveness::tests::a_reply_during_doubt_clears_it_and_renews_the_route ... ok test liveness::tests::an_unanswered_host_link_retires_at_the_startup_grace_without_doubt ... ok test liveness::tests::delayed_server_probe_does_not_expire_an_answered_route ... ok test liveness::tests::healthy_reply_survives_a_150ms_server_stall ... ok test liveness::tests::host_allowance_covers_one_loss_recovery_and_browser_routes_keep_theirs ... ok test liveness::tests::host_allowance_has_a_floor_a_settled_long_haul_value_and_a_ceiling ... ok test liveness::tests::host_link_doubts_on_the_first_miss_and_retires_on_the_second ... ok test liveness::tests::jitter_allowance_decays_after_the_link_settles ... ok test liveness::tests::late_native_probe_keeps_its_unissued_reply_allowance ... ok test liveness::tests::missing_replies_expire_even_with_probes_in_flight ... ok test liveness::tests::pipelined_requests_do_not_renew_an_outstanding_deadline ... ok test liveness::tests::quiet_dead_peer_expires_within_floor_plus_one_interval ... ok test liveness::tests::ready_reply_only_pulls_forward_an_answered_probe_after_one_tick ... ok test liveness::tests::recent_application_progress_preserves_the_first_tick_cadence ... ok test liveness::tests::restarting_monitoring_never_reuses_an_old_issued_probe ... ok test liveness::tests::serial_probe_accepts_a_timely_rtt_step_without_renewing_unsolicited_replies ... ok test liveness::tests::serial_probe_deadline_includes_only_one_gap_and_the_estimated_allowance ... ok test liveness::tests::terminal_routes_still_end_their_lease_on_the_first_miss ... ok test liveness::tests::variation_uses_the_previous_smoothed_sample ... ok test unissued_native_probe_reply_cannot_extend_readiness ... ok test result: ok. 23 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.16s Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/plugin_host_review-7f78344df2b01660) running 7 tests test review_completed_call_survives_normal_worker_exit ... ok test review_core_topic_remains_core_owned_even_when_declared ... ok test review_disable_answers_inflight_call ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_exited_worker_ends_its_subscriptions ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_undeclared_topic_is_left_to_the_core ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.51s Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/plugin_settings_review-59a2888e459a1f74) running 3 tests test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.54s Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/remote_plugin_contract-b49df6bb39ae4b7e) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.36s Running tests/review_mesh_host_removal.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/review_mesh_host_removal-e63b2314fa088e86) running 1 test test revoked_remote_host_is_withdrawn_from_mesh_peer_policy ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal_session-6640403118fc7305) running 2 tests test tests::fresh_exec_closes_dumpability_before_private_startup ... running 1 test test tests::fresh_exec_closes_dumpability_before_private_startup ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 1 filtered out; finished in 0.00s ok test tests::unsupported_commands_cannot_start_operator_roles_or_open_state ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal_shim-022fbdb3b60fdd6e) running 96 tests test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::deferred_frame_keeps_its_borrowed_storage_and_ordered_trailing_bytes ... ok test frame::checks::golden::every_frozen_message ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test frame::checks::maximum_deferred_frame_retries_without_growing_storage ... ok test frame::checks::query_reply_extension_is_bounded_and_fragment_safe ... ok test frame::checks::shared_writer_selector_is_fixed_length_and_fragment_safe ... ok test frame::checks::tests::golden_and_fragmented ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok test locale::tests::invalid_shell_expressions_are_ignored ... ok test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok test pty::child_locale_tests::spawned_login_shell_receives_selected_locale_without_other_host_variables ... ok test pty::child_signal_tests::child_policy_closes_the_control_descriptor_before_direct_exec ... ok test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... running 1 test test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 95 filtered out; finished in 0.00s ok test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap test ring::checks::tests::wrap_and_exact_offsets ... ok test session::inputs::reply_tests::replies_preserve_selected_writer_cursor_and_geometry ... ok test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::sequenced_checks::a_completed_deferred_frame_gives_its_trailing_input_a_fresh_ticket ... ok test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::sequenced_checks::coalesced_probe_and_input_preserve_the_written_ack_in_both_orders ... ok test session::sequenced_checks::negotiated_queue_deferral_validates_ranges_before_waiting ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_seeded_smoke ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test result: ok. 83 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 57.45s Running tests/detach.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/detach-8befbd8d3fa85e20) running 2 tests test closed_standard_descriptors_become_dev_null ... ok test detached_child_restores_default_signals_without_changing_parent ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.81s Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/mouse-ea97bd9caecc8e0d) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.00s Running tests/process_exit_descriptor.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/process_exit_descriptor-50d77b6c4248f0f9) running 2 tests test descriptor_is_cloexec_and_observes_a_real_process_exit ... ok test invalid_pid_never_creates_a_descriptor ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/query-replies-r2/target/debug/deps/infraternal_status-7910dde34bdac077) running 12 tests test tests::a_manager_that_does_not_answer_is_unknown_not_down ... ok test tests::an_unanswering_manager_only_makes_its_own_unit_unknown ... ok test tests::nothing_installed_says_so ... ok test tests::production_server_is_a_running_server_with_two_mesh_peers ... ok test tests::rootful_agent_is_a_host_with_its_own_state_directory ... ok test tests::rootful_agent_reads_mesh_peers_from_its_state_directory ... ok test tests::rootless_agent_is_read_from_the_user_manager ... ok test tests::server_and_host_on_one_machine_is_both ... ok test tests::snapshot_scan_counts_peers_through_nesting_strings_and_spacing ... ok test tests::stopped_server_unit_is_stopped_not_unknown ... ok test tests::the_headline_names_what_is_down_and_how_to_look ... ok test tests::the_headline_says_how_to_join_when_nothing_is_installed ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.21s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_backup running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_relay running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_release running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_status running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s (test: 834s) ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-r2/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-r2/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ └── infraternal-session v0.1.0 ├── infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ ├── infraternal-plugin-ssh v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-session v0.1.0 │ └── infraternal-server v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-r2/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── infraternal-plugin-remote v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.46 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.46 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-session v0.1.0 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.46 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.46 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-mesh v0.1.0 (*) ├── infraternal-plugin-release v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── (dev) infraternal-status v0.1.0 │ └── infraternal v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-r2/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-session v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ ├── hyper v1.11.1 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-r2/Cargo.lock:199:1 │ 199 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 200 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-session v0.1.0 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.46 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.46 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-mesh v0.1.0 (*) ├── infraternal-plugin-release v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── (dev) infraternal-status v0.1.0 │ └── infraternal v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-r2/Cargo.lock:201:1 │ 201 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 202 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ ├── infraternal-plugin-ssh v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-session v0.1.0 │ └── infraternal-server v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-r2/Cargo.lock:204:1 │ 204 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 205 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-r2/Cargo.lock:206:1 │ 206 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 207 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 208 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-session v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.46 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.15 │ │ └── rustls v0.23.46 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── (dev) infraternal-status v0.1.0 │ │ └── infraternal v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-r2/Cargo.lock:250:1 │ 250 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 251 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── infraternal-shim v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ └── infraternal-session v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ └── infraternal-shim v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ └── infraternal-session v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.46 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.15 │ │ │ └── rustls v0.23.46 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-shim v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── (dev) infraternal-status v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.46 (*) │ │ └── rustls-webpki v0.103.15 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.46 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.2 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── (dev) infraternal v0.1.0 (*) │ ├── (dev) infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── (dev) infraternal-plugin-remote v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-r2/Cargo.lock:253:1 │ 253 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 254 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-r2/Cargo.lock:256:1 │ 256 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 257 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-r2/Cargo.lock:258:1 │ 258 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 259 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/kayg/Developer/infraternal/.worktrees/query-replies-r2/Cargo.lock:316:1 │ 316 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 317 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.46 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.46 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ └── infraternal-shim v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ └── infraternal-session v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.2 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── (dev) infraternal v0.1.0 (*) │ ├── (dev) infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── (dev) infraternal-plugin-remote v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.2 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.2 (*) ├── tokio v1.53.2 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok (cargo-deny: 2s) ==> static builds x86_64-unknown-linux-musl: exact define removed; build directories remapped; explicit paths preserved; target override refused aarch64-unknown-linux-musl: exact define removed; build directories remapped; explicit paths preserved; target override refused x86_64 OpenSSL source: AVX-512 GCM dispatch removed idempotently native compiler metadata: path independent; platform/date retained; unexpected syntax refused Rust remapping: differently named checkout roots produce identical stripped artifacts . ---------------------------------------------------------------------- Ran 1 test in 0.002s OK Finished `release` profile [optimized] target(s) in 0.85s AES-128-GCM NIST vector encrypt/decrypt passed production trust: PASS (staging-trust authority absent) /home/kayg/.cache/codex-scratch/query-replies-r2/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 21215664 bytes; cap: 21215664 bytes; delta: +0 bytes key memory: x86_64-unknown-linux-musl; memlock=8388608 bytes Key memory initialization=1; locked pages and dump exclusion enabled Compiling cfg-if v1.0.5 Compiling pin-project-lite v0.2.17 Compiling bytes v1.12.1 Compiling libc v0.2.190 Compiling serde_core v1.0.229 Compiling memchr v2.8.3 Compiling once_cell v1.21.4 Compiling log v0.4.34 Compiling itoa v1.0.18 Compiling futures-core v0.3.34 Compiling zerofrom v0.1.8 Compiling stable_deref_trait v1.2.1 Compiling smallvec v1.16.2 Compiling futures-sink v0.3.34 Compiling subtle v2.6.1 Compiling slab v0.4.12 Compiling typenum v1.20.1 Compiling litemap v0.8.3 Compiling yoke v0.8.3 Compiling tracing-core v0.1.36 Compiling writeable v0.6.4 Compiling utf8_iter v1.0.4 Compiling num-traits v0.2.19 Compiling equivalent v1.0.2 Compiling percent-encoding v2.3.2 Compiling icu_properties_data v2.3.0 Compiling zerovec v0.11.8 Compiling zerotrie v0.2.5 Compiling errno v0.3.14 Compiling socket2 v0.6.5 Compiling tracing v0.1.44 Compiling mio v1.2.4 Compiling generic-array v0.14.7 Compiling serde v1.0.229 Compiling icu_normalizer_data v2.3.0 Compiling hashbrown v0.17.1 Compiling futures-io v0.3.34 Compiling signal-hook-registry v1.4.8 Compiling futures-task v0.3.34 Compiling thiserror v2.0.21 Compiling form_urlencoded v1.2.2 Compiling cpufeatures v0.2.17 Compiling tinystr v0.8.4 Compiling potential_utf v0.1.6 Compiling crypto-common v0.1.7 Compiling block-buffer v0.10.4 Compiling scopeguard v1.2.0 Compiling zmij v1.0.23 Compiling openssl-sys v0.9.117 Compiling futures-util v0.3.34 Compiling futures-channel v0.3.34 Compiling tokio v1.53.2 Compiling bitflags v2.13.2 Compiling icu_locale_core v2.3.0 Compiling parking_lot_core v0.9.12 Compiling indexmap v2.14.2 Compiling icu_collections v2.3.0 Compiling digest v0.10.7 Compiling lock_api v0.4.14 Compiling serde_json v1.0.151 Compiling allocator-api2 v0.2.21 Compiling rand_core v0.10.1 Compiling foldhash v0.1.5 Compiling crossbeam-utils v0.8.23 Compiling either v1.18.0 Compiling getrandom v0.2.17 Compiling parking_lot v0.12.5 Compiling parking v2.2.1 Compiling crc-catalog v2.5.0 Compiling hashbrown v0.15.5 Compiling icu_provider v2.3.1 Compiling base64 v0.22.1 Compiling zerocopy v0.8.60 Compiling spin v0.9.9 Compiling crossbeam-queue v0.3.14 Compiling sha2 v0.10.9 Compiling crc v3.4.0 Compiling event-listener v5.4.2 Compiling futures-intrusive v0.5.0 Compiling icu_normalizer v2.3.0 Compiling icu_properties v2.3.0 Compiling libsqlite3-sys v0.30.1 Compiling ryu v1.0.23 Compiling hashlink v0.10.0 Compiling flume v0.11.1 Compiling getrandom v0.4.3 Compiling futures-executor v0.3.34 Compiling atoi v2.0.0 Compiling serde_urlencoded v0.7.1 Compiling foreign-types-shared v0.1.1 Compiling http v1.5.0 Compiling ring v0.17.14 Compiling memoffset v0.9.1 Compiling zeroize v1.9.0 Compiling uuid v1.27.0 Compiling getrandom v0.3.4 Compiling untrusted v0.9.0 Compiling idna_adapter v1.2.2 Compiling foreign-types v0.3.2 Compiling minimal-lexical v0.2.1 Compiling nix v0.30.1 Compiling utf8parse v0.2.2 Compiling arrayvec v0.7.8 Compiling idna v1.1.0 Compiling rand_core v0.9.5 Compiling rustls-pki-types v1.15.1 Compiling http-body v1.1.0 Compiling anstyle-parse v1.0.0 Compiling nom v7.1.3 Compiling deranged v0.5.8 Compiling tokio-stream v0.1.19 Compiling is_terminal_polyfill v1.70.2 Compiling ppv-lite86 v0.2.21 Compiling powerfmt v0.2.1 Compiling url v2.5.8 Compiling anstyle v1.0.14 Compiling anstyle-query v1.1.5 Compiling num-conv v0.2.2 Compiling colorchoice v1.0.5 Compiling tinyvec v1.13.3 Compiling time-core v0.1.9 Compiling rustls-webpki v0.103.15 Compiling rand_chacha v0.9.0 Compiling rustls v0.23.46 Compiling tokio-util v0.7.19 Compiling thiserror v1.0.69 Compiling rusticata-macros v4.1.0 Compiling anstream v1.0.0 Compiling httparse v1.10.1 Compiling time v0.3.55 Compiling chacha20 v0.10.2 Compiling strsim v0.11.1 Compiling data-encoding v2.11.1 Compiling sqlx-core v0.8.6 Compiling clap_lex v1.1.1 Compiling tower-service v0.3.3 Compiling rand v0.9.5 Compiling rand_core v0.6.4 Compiling rand_pcg v0.10.2 Compiling rand v0.10.3 Compiling num-integer v0.1.47 Compiling atomic-waker v1.1.2 Compiling clap_builder v4.6.7 Compiling infraternal-protocol v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/query-replies-r2/crates/infraternal-protocol) Compiling base64 v0.21.7 Compiling lazy_static v1.5.1 Compiling fnv v1.0.7 Compiling rustc-hash v2.1.3 Compiling try-lock v0.2.5 Compiling httpdate v1.0.3 Compiling asn1-rs v0.6.2 Compiling lru-slab v0.1.3 Compiling num-bigint v0.4.8 Compiling h2 v0.4.19 Compiling base64urlsafedata v0.5.5 Compiling quinn-udp v0.5.16 Compiling want v0.3.2 Compiling sqlx-sqlite v0.8.6 Compiling vte v0.15.0 Compiling tower-layer v0.3.3 Compiling mime v0.3.17 Compiling http-body-util v0.1.5 Compiling half v2.7.1 Compiling oid-registry v0.7.1 Compiling der-parser v9.0.0 Compiling sha1 v0.10.7 Compiling regex-syntax v0.8.11 Compiling sync_wrapper v1.0.2 Compiling serde_cbor_2 v0.13.0 Compiling webauthn-rs-proto v0.5.5 Compiling tungstenite v0.29.0 Compiling rand_chacha v0.3.1 Compiling clap v4.6.7 Compiling x509-parser v0.16.0 Compiling hex-conservative v0.2.3 Compiling hyper v1.11.1 Compiling hex v0.4.3 Compiling base64ct v1.8.3 Compiling unicase v2.10.0 Compiling quinn-proto v0.11.19 Compiling rand v0.8.8 Compiling bitcoin_hashes v0.14.101 Compiling tokio-tungstenite v0.29.0 Compiling sqlx v0.8.6 Compiling regex-automata v0.4.18 Compiling mime_guess v2.0.5 Compiling tower v0.5.3 Compiling password-hash v0.5.0 Compiling axum-core v0.5.6 Compiling arc-swap v1.9.2 Compiling infraternal-plugin-api v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/query-replies-r2/crates/infraternal-plugin-api) Compiling fs-err v3.3.2 Compiling sharded-slab v0.1.7 Compiling unicode-normalization v0.1.25 Compiling blake2 v0.10.6 Compiling hyper-util v0.1.21 Compiling tracing-serde v0.2.0 Compiling serde_path_to_error v0.1.20 Compiling tracing-log v0.2.0 Compiling thread_local v1.1.10 Compiling matchit v0.8.4 Compiling nu-ansi-term v0.50.3 Compiling http-range-header v0.4.2 Compiling bip39 v2.2.2 Compiling argon2 v0.5.3 Compiling infraternal-status v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/query-replies-r2/crates/infraternal-status) Compiling axum v0.8.9 Compiling tower-http v0.6.11 Compiling infraternal-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/query-replies-r2/crates/infraternal-mesh) Compiling infraternal-plugin-host-facts v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/query-replies-r2/crates/plugins/host-facts) Compiling infraternal-plugin-release v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/query-replies-r2/crates/plugins/release) Compiling infraternal-plugin-relay v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/query-replies-r2/crates/plugins/relay) Compiling infraternal-plugin-backup v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/query-replies-r2/crates/plugins/backup) Compiling matchers v0.2.0 Compiling quinn v0.11.12 Compiling tracing-subscriber v0.3.23 Compiling openssl v0.10.81 Compiling tokio-openssl v0.6.5 Compiling webauthn-attestation-ca v0.5.5 Compiling webauthn-rs-core v0.5.5 Compiling infraternal-shim v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/query-replies-r2/crates/infraternal-shim) Compiling infraternal-plugin-mesh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/query-replies-r2/crates/plugins/mesh) Compiling axum-server v0.8.0 Compiling infraternal-plugin-remote v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/query-replies-r2/crates/plugins/remote) Compiling webauthn-rs v0.5.5 Compiling infraternal-agent v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/query-replies-r2/crates/infraternal-agent) Compiling infraternal-plugin-ssh v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/query-replies-r2/crates/plugins/ssh) Compiling infraternal-server v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/query-replies-r2/crates/infraternal-server) Compiling infraternal v0.1.0 (/home/kayg/Developer/infraternal/.worktrees/query-replies-r2/crates/infraternal) Finished `release` profile [optimized] target(s) in 7m 04s production trust: PASS (staging-trust authority absent) /home/kayg/.cache/codex-scratch/query-replies-r2/target/aarch64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB executable, ARM aarch64, version 1 (SYSV), statically linked, stripped PT_INTERP: absent; size: 19408192 bytes; cap: 19408192 bytes; delta: +0 bytes key memory: aarch64-unknown-linux-musl runtime not checked (host x86_64; native execution required) x86_64-unknown-linux-musl: exact 21215664-byte cap PASS; 21215665 bytes rejected PASS; smaller artifact requires ratchet PASS aarch64-unknown-linux-musl: exact 19408192-byte cap PASS; 19408193 bytes rejected PASS; smaller artifact requires ratchet PASS unsupported target: rejected PASS bun test v1.4.2 (744846f84) scripts/release/static-metadata-review.test.ts: (pass) x86_64-unknown-linux-musl compiler metadata is independent of the checkout location [27.32ms] (pass) aarch64-unknown-linux-musl compiler metadata is independent of the checkout location [21.54ms] 2 pass 0 fail 10 expect() calls Ran 2 tests across 1 file. [62.00ms] server subcommand: exit 2, versioned JSON unavailable result agent group: exit 0, one parsed versioned JSON listing of its commands (static builds: 481s) +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | PASS | +---------------------------+--------------+ ==> Compiler metadata generator checks bun test v1.4.2 (744846f84) scripts/release/build-metadata.test.ts: (pass) native metadata canonicalization retains version fields and refuses changed syntax [35.25ms] (pass) one compiler driver remaps all source roots and preserves argument boundaries [135.56ms] 2 pass 0 fail 12 expect() calls Ran 2 tests across 1 file. [183.00ms] ==> Vendored Ghostty artifact checksums dist/ghostty-web.js: OK dist/ghostty-vt.wasm: OK dist/index.d.ts: OK ==> TypeScript protocol compiler Saved lockfile ==> Tracer compiler, precompression and bundle transfer budget bun install v1.4.2 (744846f84) Checked 38 installs across 69 packages (no changes) [21.00ms] $ bun x tsc --project tsconfig.json bun test v1.4.2 (744846f84) precompress.test.ts: (pass) text sidecars round-trip deterministically; compressed formats remain identity [21.69ms] browser-build.test.ts: (pass) the browser renderer has no unresolved Vite Node-file shim request [19.97ms] src/perf-detector.test.ts: (pass) FrameDetector > estimates the refresh from the median and snaps it [1.80ms] (pass) FrameDetector > nothing is a drop before the rate is known [0.07ms] (pass) FrameDetector > a drop is over 1.5 refresh intervals, a freeze over 100 ms [0.14ms] (pass) FrameDetector > the refresh only goes up: a slow page is not a slower display [0.15ms] (pass) FrameDetector > the first frame after a pause is not an interval [0.07ms] (pass) FrameDetector > fps, p95 and window read the ring [0.28ms] (pass) FrameDetector > a throttled page (one frame a second) is neither a drop nor a freeze, and neither is its return [0.28ms] (pass) FrameDetector > a lone long stall is still a freeze and is not a throttled run [0.10ms] src/canvas/recency.test.ts: (pass) touch moves an item to the front and never duplicates it [0.24ms] (pass) repeating the front item changes nothing [0.07ms] (pass) the list is capped, so the oldest items fall off [0.08ms] (pass) top skips items that are no longer live, without losing them [0.07ms] (pass) recentRows: five used windows in reverse order of use, from 54 windows [0.18ms] (pass) recentRows: a view with three windows and no use shows them in order [0.03ms] (pass) recentRows: used windows lead, the rest fill up to five in window order [0.09ms] src/canvas/status.test.ts: (pass) a lost server connection is an error toast, never a success tick [0.66ms] (pass) routine connection states stay out of the toast [0.05ms] (pass) repeated connection closes do not reopen the persistent reason toast [0.10ms] (pass) a repeated close does not retake the shared toast after a newer message replaces it [0.18ms] (pass) a close reason stays visible through a quick reconnect and clears after a stable attach [671.37ms] src/canvas/toolbar/palette-actions.test.ts: (pass) a deferred split:right selection retains its original window [0.35ms] (pass) a deferred new:below selection retains its original window [0.04ms] (pass) a deferred close selection retains its original window [0.01ms] src/canvas/windows/details-facts.test.ts: (pass) host facts become plain-language details rows [2.56ms] (pass) unknown optional host facts stay absent instead of appearing as placeholders [0.22ms] (pass) by default the machine tab shows the D126 facts under System, Resources and Access, with no More section [0.26ms] (pass) extended info adds only init, virtualization, how it is reached, shell and locale [0.23ms] (pass) facts the host did not report are omitted by default, not shown as unknown [0.11ms] (pass) the header follows the machine's own facts, not the platform the host list guessed [0.12ms] (pass) before facts arrive the host's platform names the header [0.05ms] (pass) a reported system with no platform mark still names the header and shows no mark [0.05ms] src/canvas/mesh/api-retry-budget.test.ts: (pass) a retained watch outage bounds retry requests over two logical minutes [2.46ms] src/canvas/mesh/protocol.test.ts: (pass) the server's own list becomes nodes, tags and grants, by name [0.64ms] (pass) without `access` (today's server) the person may view and may not edit [0.33ms] (pass) fields the server does not send are absent, never invented [0.36ms] (pass) a node the server sees passing traffic is online, on its path, under its machine's name [0.07ms] (pass) anything that is not a list is refused, whole [2.97ms] (pass) a node's own tag list and the tag table agree even when a server sends only one [0.18ms] (pass) the subscription's events: a pushed list, a revision that invalidates, and the end of the subscription [0.28ms] (pass) answers carry the new revision, and a create the new arrow's id [0.09ms] (pass) endpoints go out as the server writes them: a node by id, a tag by name [0.69ms] src/canvas/mesh/api-recovery.test.ts: (pass) failed watch refreshes retain one subscription through retry and release it on disposal [1.41ms] (pass) a synchronous subscription refusal leaves retry able to install a new watch [0.22ms] (pass) a pushed recovery cancels the scheduled retry [0.36ms] (pass) a pushed recovery supersedes an outstanding retry failure [0.48ms] (pass) a retry snapshot at revision 1 is ordered against a pushed recovery [0.36ms] (pass) a retry snapshot at revision 3 is ordered against a pushed recovery [0.13ms] (pass) a pushed liveness expiry supersedes an equal-revision retry snapshot [0.36ms] (pass) a forbidden withdrawal cancels retry work from the retained watch [0.28ms] (pass) a withdrawn view ignores an earlier outstanding retry result [0.30ms] (pass) initial Mesh list handles closed transport [0.18ms] (pass) initial Mesh list handles liveness deadline [0.05ms] (pass) initial Mesh list handles unreadable JSON [0.07ms] (pass) initial Mesh list handles unavailable storage [0.11ms] (pass) initial Mesh list handles forbidden action [0.07ms] (pass) initial Mesh list handles invalid stored host [0.07ms] (pass) Mesh watch withdrawal handles forbidden [0.12ms] (pass) Mesh watch withdrawal handles mesh unavailable [0.03ms] (pass) Mesh watch withdrawal handles plugin unavailable [0.04ms] src/canvas/mesh/layout.test.ts: (pass) a small mesh keeps the approved arrangement: tags down the left, hosts two to a row [0.68ms] (pass) the layout is deterministic and does not depend on input order [3.89ms] (pass) no two cards overlap, and every card lies inside the graph [9.17ms] (pass) the sheet is wider than tall, roughly 16:10 [2.89ms] (pass) a pinned node stays where it was put and the others do not move [2.28ms] (pass) a pin beyond the sheet grows the graph [0.32ms] (pass) a host's other tags do not move it; a tag nobody carries still has its node [0.22ms] (pass) 1,000 nodes lay out in a few milliseconds [8.52ms] src/canvas/layout/stops.test.ts: (pass) a view that fits the viewport has one stop, centred [0.35ms] (pass) a wide view has one stop per column and the last stop ends at the right edge [0.21ms] (pass) a view taller than the viewport is scaled down so it fits [0.03ms] (pass) nearestStop picks the stop whose centre is closest [0.17ms] (pass) a big graph opens fitted whole, in one stop, and its canvas is free [0.17ms] (pass) a small graph keeps one stop per node column [0.14ms] (pass) on a narrow screen a big graph does not shrink past where its names can be read: it starts at the top left [0.07ms] (pass) centred stops (a phone's strip) rest every column mid-screen, the first and last included [0.10ms] src/canvas/layout/grid.test.ts: (pass) split right in a stacked column makes a group: the window's column halves, its neighbours span both halves [1.49ms] (pass) closing the new half gives the layout back exactly, in the model [1.06ms] (pass) closing the window it came from makes the new half take its band, and the layout is one column again [0.34ms] (pass) split right of a spanning window halves its span inside the existing columns, with the footprint unchanged [0.22ms] (pass) split down in a group divides only the window's band: the partner window grows to keep its height [0.55ms] (pass) closing the window split down gives its band back to the window above and to the partner [0.68ms] (pass) a window split down in a plain column stacks under it and moves the windows below down [0.14ms] (pass) new window right opens a full-size column after the whole group, never inside it [0.16ms] (pass) runs: adjacent columns linked by a spanning window form one group, the rest stay plain [0.08ms] (pass) spans are clamped to the columns that exist and a stale row is re-placed, never overlapped [0.13ms] (pass) random sequences of split right, split down, new window right and close never break the grid [45.83ms] (pass) closing every window of a group returns the view to nothing, with no problem on the way [0.57ms] (pass) a full-width band under a group moves nothing and extends the group by one band [0.31ms] (pass) a band inserted between two bands of one column grows the windows beside it and moves the rest [0.21ms] src/canvas/layout/geometry.test.ts: (pass) a dropped view pushes the one it lands on along the axis of least overlap, never itself [0.57ms] (pass) a chain of neighbours is pushed in turn [0.14ms] (pass) snapping rounds to whole cells [0.04ms] (pass) reach follows grants through tags and keeps the relay [0.30ms] (pass) phone edge to edge: a lone window is the whole area, in a strip it leaves the gap and PEEK px of each neighbour; full width is the whole area always [0.24ms] (pass) comfortable phones: a column in a strip leaves PEEK px of each neighbour; a lone one keeps the screen less the margins [0.06ms] (pass) a desktop column is the same alone and in a strip [0.02ms] src/canvas/sessions/live-inventory.test.ts: (pass) a host snapshot replaces cached session rows and keeps only live shims [2.20ms] (pass) an unavailable agent hides remembered rows without ending them, then restores verified sessions [0.33ms] (pass) inventory remembers a remote session and refuses a cross-host attach [0.57ms] (pass) superseded status snapshots release records for sessions this device never opened [1.38ms] (pass) superseding a sidecar preserves status for a window opened on this device [0.15ms] (pass) a census predating a new shell does not permanently retire its confirmed live ID [0.17ms] (pass) a final Close before the first positive census never revives a new ID [0.09ms] (pass) a later absence retires a new ID after its first positive census [0.07ms] (pass) another host's census cannot clear a new shell's census fence [0.05ms] (pass) another host's close cannot clear a new shell's census fence [0.01ms] src/canvas/sessions/details-live.test.ts: (pass) a refused host facts action stops its recurring timer [0.78ms] (pass) a detected operating system supplies the live popover mark [0.68ms] src/canvas/sessions/live.test.ts: (pass) the toolbar sessions seam exposes admitted host state and routes by identity [1.82ms] (pass) an enrolled host opens by UUID and splits keep that authority [0.19ms] (pass) an authoritative snapshot keeps an unjoined host visible while setup continues [0.15ms] (pass) unknown and ambiguous labels never open an embedded shell [0.15ms] (pass) removed hosts disappear from inventory and cannot route a new shell [0.15ms] (pass) an authoritative host snapshot replaces admission with one notification [0.20ms] (pass) the embedded inventory identity still opens locally beside an equally named remote [0.09ms] (pass) the embedded host's mark does not wait for an account name, and no account is invented [0.09ms] src/canvas/sessions/hosts.test.ts: (pass) fresh storage lists an offline host added by another browser [0.99ms] (pass) every welcome reconciles without duplicate subscriptions or hosts [0.28ms] (pass) a removal in another browser withdraws the host [0.18ms] (pass) a malformed page cannot partially replace the authoritative inventory [0.29ms] (pass) a socket-authority refusal withdraws previously admitted hosts [0.28ms] (pass) an invalidated read cannot enqueue an unsent call while the socket is down [0.36ms] src/canvas/sessions/gone-review.test.ts: (pass) selecting a known gone session keeps its final exited state [0.20ms] (pass) a known retired status survives repeated selection and generic ended answers [0.13ms] src/canvas/sessions/hosts-scale-review.test.ts: (pass) a fresh browser discovers 10000 admitted offline hosts from complete bounded pages [13.93ms] (pass) a fresh browser discovers 10001 admitted offline hosts from complete bounded pages [12.16ms] src/canvas/sessions/open-refusal.test.ts: (pass) memory refusal retains the reason and current counters [1.00ms] (pass) legacy refusals still work and malformed counters never reach the message [0.56ms] (pass) product copy names the host and counters and never renders untrusted server text [0.78ms] (pass) oversized refusal JSON is ignored before parsing [0.14ms] src/canvas/model/document.test.ts: (pass) a document holds references and layout, never content [0.70ms] (pass) a document survives JSON and rebuilds the same columns [0.94ms] (pass) a target that no longer exists is dropped, and an emptied column with it [0.10ms] (pass) parseDocument rejects anything that is not a document of this format [0.38ms] (pass) remote affinity survives reload and invalid UUIDs cannot become local references [0.21ms] (pass) a version 1 document from before D212 loads, with its split pair and a full-size window [0.44ms] (pass) a grouped view saves its spans and bands and loads back to the same grid (D212) [0.30ms] (pass) a plain view is saved without spans or bands, exactly as before D212 [0.05ms] src/canvas/addhost/setup-feed.test.ts: (pass) createSetupFeed > subscribes with the host and window, then hands over events in order [0.76ms] (pass) createSetupFeed > a failure after the prompt, and a retry on the same socket [0.36ms] (pass) createSetupFeed > a dropped socket resumes after the last sequence and repeats nothing [20.59ms] (pass) createSetupFeed > a retry asked while offline is sent when the socket is back [20.65ms] (pass) createSetupFeed > a resync resets the view; an error before any event reports the status lost, after one it is ignored [0.48ms] (pass) createSetupFeed > gives up after the backoff is spent, and a release closes the socket [48.20ms] (pass) review reconnect budget survives sockets that open then close without events [46.26ms] (pass) review explicit retry resumes after the setup feed stops [46.24ms] src/canvas/addhost/wizard.breakit2.test.ts: (pass) breakit2 an explicit port on a listed host survives chip resolution [0.47ms] (pass) breakit2 malformed bracketed IPv6 waits for correction [0.13ms] (pass) listed host plus port retains its saved user in the serialized destination [0.25ms] (pass) review listed inventory name plus port retains its resolved address [0.28ms] src/canvas/addhost/setup-stages.test.ts: (pass) parseSetupEvent > reads a well-formed event [0.14ms] (pass) parseSetupEvent > drops anything malformed [0.18ms] (pass) parseSetupEvent > ignores a failed step on a non-failure and an unknown step on a failure [0.06ms] (pass) foldSetup > stages before the event's are done, later ones pending [0.24ms] (pass) foldSetup > a stage that reports done alone still finishes [0.04ms] (pass) foldSetup > ready done completes the run [0.05ms] (pass) foldSetup > a failure marks the stage its step belongs to, and a retry clears it [0.12ms] (pass) foldSetup > uploading belongs to install and the readiness check to ready [0.07ms] (pass) setupGuide > says the terminal keeps working and what to do next, in plain words [0.15ms] (pass) review malformed setup fields are dropped without coercion errors [0.22ms] (pass) exhausted setup preserves eligibility and explains a new setup [0.17ms] src/canvas/addhost/real.test.ts: (pass) parsing the server's data > a discovery row keeps only known fields and valid ids [0.36ms] (pass) parsing the server's data > the server key needs its public key and fingerprint [0.07ms] (pass) parsing the server's data > an install command needs a lifetime [0.05ms] (pass) a server that lacks an endpoint > serving the web app (200, HTML) for an unknown path is 'not available' [1.54ms] (pass) a server that lacks an endpoint > 404 discovery is an empty list; 500 discovery is an error to show [0.39ms] (pass) a server that lacks an endpoint > private sign-in stays local until a target-bound socket start [1.25ms] (pass) a server that lacks an endpoint > a wrong target consumes the reference without sending private input [0.35ms] (pass) a server that lacks an endpoint > a local reference cannot change SSH address while keeping the target id [0.28ms] (pass) a server that lacks an endpoint > closing before open discards queued sign-in even if a late open fires [0.19ms] (pass) a server that lacks an endpoint > pre-open commands stay bounded and events after close cannot revive a run [0.40ms] (pass) a server that lacks an endpoint > trust waits for the exact acknowledgement, and ignores another target [0.54ms] (pass) bootstrap failure parsing > an already-added failure keeps its existing host id [0.52ms] (pass) bootstrap failure parsing > host ids are ignored on other failures and when malformed [0.25ms] src/canvas/addhost/authority.on-demand.test.ts: (pass) CA wrapping matches the contract's HKDF domain and separates generations [6.63ms] src/canvas/addhost/model.test.ts: (pass) stagesOf > a host with no event is waiting everywhere [0.20ms] (pass) stagesOf > check before sign-in is detecting how to sign in [0.12ms] (pass) stagesOf > the sign-in report finishes detect and starts the system check [0.08ms] (pass) stagesOf > install, facts and connect map to install, enrol and first session [0.09ms] (pass) stagesOf > an auth failure before sign-in fails detect and says it in plain words, not the server's [0.15ms] (pass) stagesOf > an unsupported host fails the system check, after sign-in [0.08ms] (pass) stagesOf > an install failure fails the install stage and keeps the earlier ones done [0.06ms] (pass) stagesOf > a new attempt starts over and forgets the old sign-in [0.07ms] (pass) authLabel > names the method and a trusted network provider only [0.04ms] (pass) guideFor > installation failures never claim that incomplete cleanup succeeded [0.12ms] (pass) guideFor > each failure kind names its fix [0.06ms] (pass) guideFor > mesh-policy words say possible, not certain [0.02ms] (pass) parseTarget > reads user, host and port [0.04ms] (pass) parseTarget > refuses what cannot name a host [0.02ms] (pass) parseSshConfig > reads aliases with HostName, User and Port, skipping wildcards and Match [0.95ms] (pass) parseSshConfig > recognises config text [0.05ms] (pass) parseSshConfig > a hostname that is an option is dropped [0.04ms] (pass) plain words > an unknown or missing failure gets the generic sentence, never the server's text [0.08ms] (pass) plain words > no headline carries an arrow, an id or an API noun [0.10ms] (pass) only a completed canonical host identity becomes terminal authority [0.11ms] (pass) parseTarget > accepts user@host, host, user@host:port, IPv4 and bracketed IPv6 with an optional port [0.09ms] (pass) parseTarget > rejects partial and malformed tokens, so they wait or show the hint [0.04ms] (pass) matchListed > a name that is exactly one host's id or address names that host [0.07ms] (pass) matchListed > a name that is also the start of another host's name is named but still prefixed [0.03ms] (pass) matchListed > a partial name that starts several hosts names none and waits [0.02ms] (pass) matchListed > a new name that starts no host is neither named nor waiting [0.02ms] (pass) install diagnostics name the failed step and public host error [0.07ms] (pass) missing payload tells the operator the architecture and expected server path [0.04ms] (pass) an already added host says so and offers opening its existing terminal [0.25ms] (pass) release payload verification names the architecture step and plain reason [0.03ms] (pass) leftovers pause (#169) > a check event with leftovers pauses the running attempt; the next event clears it [0.08ms] (pass) leftovers pause (#169) > a pause without leftovers offers nothing to start fresh [0.09ms] (pass) early terminal publication selects only its canonical host-bound shim session [0.14ms] src/canvas/addhost/already-added-breakit.test.ts: (pass) an already-added failure without a host id (older server) still says how to reach the terminal [0.10ms] src/canvas/addhost/wizard.test.ts: (pass) a saved-key prompt completing after close never starts an SSH attempt [0.43ms] (pass) fresh CA requires setup before any SSH attempt and preserves root consent [0.31ms] (pass) ready CA begins the requested installation mode without another prompt [0.15ms] (pass) closing during CA confirmation never starts an SSH attempt [0.32ms] (pass) a typed root login requires explicit consent before any installation [0.13ms] src/canvas/views/body.test.ts: (pass) a clean terminal exit keeps the window while host setup can still fail [0.05ms] (pass) clean exits still close ordinary windows, and failed exits stay visible [0.01ms] ../../packages/ui/src/spring.test.ts: (pass) a missed frame does not stretch a settled spring [0.47ms] (pass) motion follows elapsed time across frame rates and damping regimes [0.78ms] chunk-classes.test.ts: (pass) the first screen is critical, the canvas product module and what only it uses are deferred [1.30ms] (pass) a chunk that both sides use stays critical [0.21ms] (pass) code only an action loads is on demand, even when the lazy canvas is what loads it [0.21ms] (pass) post-terminal host inventory entry and its shared canvas imports stay deferred [0.14ms] test/recovery-ui.test.ts: (pass) compiled recovery UI mode off obeys its URL boundary [3.88ms] (pass) compiled recovery UI mode preview obeys its URL boundary [3.05ms] (pass) compiled recovery UI mode 1 obeys its URL boundary [2.38ms] test/recovery-crypto.test.ts: (pass) HKDF siblings match independent implementation and bind unwrap to domain, account, kind and version [13.38ms] (pass) 100 repeated wrapping operations generate independent salts and nonces [17.36ms] test/recovery-rotation.test.ts: (pass) signed-in rotation sends only a local envelope and verifier after acknowledgement [9.42ms] (pass) abandoned word acknowledgement uploads nothing [2.62ms] (pass) settled acknowledgement cannot upload later (dismissed) [3.02ms] (pass) settled acknowledgement cannot upload later (no acknowledgement) [3.14ms] test/recovery-wait.test.ts: (pass) server remaining wait 0s is accepted through the capability policy maximum [1.72ms] (pass) server remaining wait 86400s is accepted through the capability policy maximum [4.26ms] (pass) server remaining wait 90000s is accepted through the capability policy maximum [0.81ms] (pass) server remaining wait 172800s is accepted through the capability policy maximum [0.82ms] (pass) malformed or excessive remaining wait -1 is denied [1.45ms] (pass) malformed or excessive remaining wait 0.5 is denied [1.13ms] (pass) malformed or excessive remaining wait 172801 is denied [1.89ms] (pass) malformed or excessive remaining wait 9007199254740992 is denied [0.99ms] (pass) malformed or excessive remaining wait 90000 is denied [1.77ms] test/link-doubt.test.ts: (pass) a link doubt shows the indicator and keeps live replies and typing flowing [2.36ms] (pass) recovery clears only its own indicator, and a real reconnect still owns the replay [0.49ms] (pass) a notice type from a newer server is ignored, not a protocol failure [0.10ms] (pass) the viewer announces the link-doubt capability in its Hello [2.53ms] test/close-reasons.test.ts: (pass) every reason the server and the agent send maps to a plain sentence, and unknown ones fall back [0.26ms] src/close-reasons.test.ts: (pass) a missed connection response keeps a plain and stable reason [0.07ms] (pass) server and host close reasons identify why a terminal reconnects, in plain words [0.34ms] (pass) routine detach and connection rotation reasons stay neutral [0.03ms] (pass) a stream close that reattaches never says the terminal ended [0.13ms] (pass) a recovering server link names its cause as routine status, never as a failure [0.05ms] (pass) unknown close text is discarded instead of reaching the person or console [0.07ms] (pass) a storm of closes prints one line per minute and counts the rest [0.44ms] (pass) counted closes are reported when their window ends, without another close [0.07ms] src/review-close-log.test.ts: (pass) a reconnect the server refuses with a named Close frame still prints its console line [1.78ms] (pass) a close summary does not claim closes from hours ago happened in the previous 60 s [0.08ms] 257 pass 0 fail 11713 expect() calls Ran 257 tests across 41 files. [1315.00ms] $ bun run build.ts built chunk-9dj44p0a.js, chunk-0jphd38d.js, chunk-cnjctkrq.js, chunk-47f4tn7x.js, chunk-rshddc30.js, chunk-q467md24.js, chunk-vvfhgzxa.js, chunk-gxvqf3b8.js, chunk-gg7faby0.js, chunk-vhbcyq91.js, chunk-8hj7tbcp.js, chunk-zszpf2a9.js, chunk-065hdb1d.js, main.js, chunk-sfgvybwa.js, chunk-e4t9f0jx.js, chunk-66twd4zb.js, chunk-cevm39z1.js, chunk-js7mqtws.js, chunk-q02gbqrk.js, chunk-mtnxk89a.js, chunk-qy08p7pq.js, chunk-kh5ft0g7.js, chunk-mdj6q6m3.js, chunk-x5kjav4h.js, chunk-mc7zg1f6.js, chunk-7peczaex.js, chunk-axbkkqp1.js, chunk-9zghjb1g.js, chunk-z8mt9y1j.js, chunk-01abhgs8.js, chunk-767bkb6g.js, chunk-26a2dq35.js, chunk-g023gj2e.js, chunk-ygn6sf7q.js, chunk-1tfhe1dx.js, chunk-1zevcvt4.js, chunk-zj4er5rx.js, chunk-s7bsrm05.js, chunk-rr7pe45y.js, chunk-423hf1z3.js, chunk-g71a46j0.js, chunk-ga7n3p96.js, chunk-25tm8tfx.js, chunk-v09vcy66.js, chunk-v33nffnh.js, chunk-kbscn46e.js, chunk-fzenw0bj.js, chunk-syt2e5ba.js, chunk-xh53528d.js, chunk-9xd3g65e.js, chunk-28rbcdd5.js, chunk-61xwpgvs.js, chunk-6hphcpbw.js, chunk-mmvf4v8e.js, chunk-z48tcwe1.js, chunk-vkabh9k4.js, chunk-jk5xheq9.js, backdrop.worker.js, faulty-terminal.worker.js, chunk-m7p3gf3z.js, chunk-f2r0hhqc.js, chunk-g548efbg.js, chunk-0h1atq4q.js, chunk-eevbmngj.js critical chunk-28rbcdd5.js: identity=39 gzip=39 brotli=39 bytes onDemand chunk-25tm8tfx.js: identity=48336 gzip=15099 brotli=13444 bytes onDemand chunk-767bkb6g.js: identity=2824 gzip=1386 brotli=1192 bytes deferred chunk-x5kjav4h.js: identity=1565 gzip=810 brotli=732 bytes onDemand chunk-syt2e5ba.js: identity=2466 gzip=1107 brotli=934 bytes critical chunk-mtnxk89a.js: identity=590 gzip=329 brotli=304 bytes onDemand chunk-z48tcwe1.js: identity=601 gzip=344 brotli=326 bytes onDemand chunk-g548efbg.js: identity=1063 gzip=651 brotli=520 bytes deferred chunk-47f4tn7x.js: identity=37428 gzip=13601 brotli=12156 bytes onDemand chunk-vhbcyq91.js: identity=2420 gzip=1197 brotli=1074 bytes onDemand chunk-q467md24.js: identity=3891 gzip=1735 brotli=1504 bytes onDemand chunk-vkabh9k4.js: identity=1408 gzip=713 brotli=665 bytes critical chunk-v33nffnh.js: identity=162 gzip=150 brotli=131 bytes critical chunk-js7mqtws.js: identity=17627 gzip=6252 brotli=5560 bytes onDemand chunk-0jphd38d.js: identity=6503 gzip=2412 brotli=2148 bytes onDemand chunk-9zghjb1g.js: identity=10904 gzip=4424 brotli=4036 bytes critical chunk-sfgvybwa.js: identity=8377 gzip=3575 brotli=3181 bytes critical faulty-terminal.worker.js: identity=1086 gzip=557 brotli=487 bytes critical backdrop.worker.js: identity=243 gzip=211 brotli=165 bytes onDemand chunk-kbscn46e.js: identity=6772 gzip=3178 brotli=2889 bytes onDemand chunk-1zevcvt4.js: identity=11529 gzip=4656 brotli=4257 bytes critical chunk-kh5ft0g7.js: identity=386 gzip=239 brotli=196 bytes onDemand chunk-zj4er5rx.js: identity=5359 gzip=2578 brotli=2297 bytes critical chunk-eevbmngj.js: identity=42576 gzip=14526 brotli=13016 bytes onDemand chunk-423hf1z3.js: identity=14570 gzip=5430 brotli=4877 bytes critical chunk-m7p3gf3z.js: identity=9810 gzip=4017 brotli=3451 bytes critical chunk-axbkkqp1.js: identity=90 gzip=90 brotli=78 bytes onDemand chunk-g71a46j0.js: identity=11067 gzip=4244 brotli=3870 bytes critical chunk-mdj6q6m3.js: identity=1106 gzip=668 brotli=607 bytes onDemand chunk-7peczaex.js: identity=1026 gzip=623 brotli=497 bytes critical chunk-f2r0hhqc.js: identity=128 gzip=109 brotli=111 bytes onDemand chunk-gg7faby0.js: identity=228 gzip=178 brotli=172 bytes critical chunk-9xd3g65e.js: identity=39 gzip=39 brotli=39 bytes critical chunk-z8mt9y1j.js: identity=717147 gzip=207430 brotli=168466 bytes critical chunk-vvfhgzxa.js: identity=707 gzip=369 brotli=309 bytes onDemand chunk-v09vcy66.js: identity=6785 gzip=3028 brotli=2744 bytes onDemand chunk-01abhgs8.js: identity=6148 gzip=2780 brotli=2518 bytes onDemand chunk-g023gj2e.js: identity=2007 gzip=1005 brotli=857 bytes onDemand chunk-e4t9f0jx.js: identity=2557 gzip=1180 brotli=1003 bytes onDemand chunk-6hphcpbw.js: identity=869 gzip=346 brotli=323 bytes onDemand chunk-1tfhe1dx.js: identity=540 gzip=353 brotli=314 bytes critical chunk-cevm39z1.js: identity=15639 gzip=6065 brotli=5409 bytes onDemand chunk-ygn6sf7q.js: identity=1649 gzip=775 brotli=675 bytes critical chunk-9dj44p0a.js: identity=30702 gzip=9232 brotli=8285 bytes onDemand chunk-mmvf4v8e.js: identity=2723 gzip=1328 brotli=1142 bytes critical chunk-q02gbqrk.js: identity=430 gzip=311 brotli=262 bytes critical chunk-qy08p7pq.js: identity=2519 gzip=1009 brotli=877 bytes onDemand chunk-26a2dq35.js: identity=4596 gzip=2016 brotli=1792 bytes onDemand chunk-8hj7tbcp.js: identity=191 gzip=168 brotli=126 bytes critical chunk-gxvqf3b8.js: identity=88 gzip=88 brotli=76 bytes critical main.js: identity=113109 gzip=41126 brotli=35618 bytes critical chunk-rshddc30.js: identity=4499 gzip=1858 brotli=1640 bytes onDemand chunk-zszpf2a9.js: identity=6265 gzip=2103 brotli=1863 bytes onDemand chunk-xh53528d.js: identity=1170 gzip=708 brotli=620 bytes critical chunk-61xwpgvs.js: identity=49 gzip=49 brotli=49 bytes critical chunk-66twd4zb.js: identity=5448 gzip=2611 brotli=2385 bytes deferred chunk-mc7zg1f6.js: identity=102038 gzip=34669 brotli=30585 bytes onDemand chunk-065hdb1d.js: identity=2108 gzip=1037 brotli=870 bytes onDemand chunk-jk5xheq9.js: identity=724 gzip=403 brotli=361 bytes onDemand chunk-fzenw0bj.js: identity=31922 gzip=12271 brotli=11029 bytes onDemand chunk-rr7pe45y.js: identity=7662 gzip=3399 brotli=2978 bytes onDemand chunk-ga7n3p96.js: identity=572 gzip=329 brotli=309 bytes critical chunk-0h1atq4q.js: identity=199 gzip=163 brotli=137 bytes onDemand chunk-cnjctkrq.js: identity=5779 gzip=2370 brotli=2133 bytes onDemand chunk-s7bsrm05.js: identity=4640 gzip=1933 brotli=1705 bytes JavaScript transfer, critical: identity=972795 gzip=301112/307200 brotli=250878/256000 bytes JavaScript transfer, deferred: identity=141031 gzip=49080/51200 brotli=43473/45056 bytes JavaScript transfer, onDemand: identity=219874 gzip=87487/20480 brotli=78064/18432 bytes JavaScript transfer, onDemand largest chunk chunk-25tm8tfx.js: gzip=15099/20480 brotli=13444/18432 bytes (class total gzip=87487 brotli=78064, not limited) fonts/monaspace-neon/italic.latin.woff2: identity=44324 gzip=44324 brotli=44324 bytes fonts/monaspace-neon/roman.latin.woff2: identity=40016 gzip=40016 brotli=40016 bytes fonts/jetbrains-mono/italic.latin.woff2: identity=36316 gzip=36316 brotli=36316 bytes fonts/jetbrains-mono/roman.latin.woff2: identity=34068 gzip=34068 brotli=34068 bytes fonts/source-code-pro/italic.latin.woff2: identity=23612 gzip=23612 brotli=23612 bytes fonts/source-code-pro/roman.latin.woff2: identity=22872 gzip=22872 brotli=22872 bytes fonts/geist-mono/italic.latin.woff2: identity=21380 gzip=21380 brotli=21380 bytes fonts/geist-mono/roman.latin.woff2: identity=19984 gzip=19984 brotli=19981 bytes fonts/ibm-plex-mono/italic.latin.woff2: identity=22296 gzip=22296 brotli=22296 bytes fonts/ibm-plex-mono/roman.latin.woff2: identity=19048 gzip=19048 brotli=19047 bytes fonts/cascadia-code/italic.latin.woff2: identity=44404 gzip=44404 brotli=44404 bytes fonts/cascadia-code/roman.latin.woff2: identity=40604 gzip=40604 brotli=40604 bytes fonts/maple-mono-nf/italic.latin.woff2: identity=53444 gzip=53444 brotli=53444 bytes fonts/maple-mono-nf/roman.latin.woff2: identity=46432 gzip=46432 brotli=46432 bytes fonts/nerd-symbols.woff2: identity=223748 gzip=223748 brotli=223748 bytes fonts/fira-code/roman.latin.woff2: identity=36756 gzip=36756 brotli=36756 bytes fonts/commit-mono/italic-400.latin.woff2: identity=18716 gzip=18716 brotli=18716 bytes fonts/commit-mono/italic-700.latin.woff2: identity=18352 gzip=18352 brotli=18352 bytes fonts/commit-mono/roman-400.latin.woff2: identity=17484 gzip=17484 brotli=17484 bytes fonts/commit-mono/roman-700.latin.woff2: identity=17260 gzip=17260 brotli=17260 bytes Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes ==> Rust stream oracle (for the differential test) ==> TypeScript protocol tests bun test v1.4.2 (744846f84) src/mesh-review-revocation.test.ts: (pass) review forbidden event cancels pending snapshot publication [4.44ms] (pass) subscription forbidden ends delivery before a late refresh rejection [2.16ms] (pass) subscription not found ends delivery before a late refresh rejection [1.29ms] (pass) subscription invalid input ends delivery before a late refresh rejection [3.49ms] (pass) subscription mesh unavailable ends delivery before a late refresh rejection [1.46ms] (pass) synchronous subscription refusal releases the transport exactly once [0.28ms] src/codec.test.ts: (pass) wire protocol golden vectors > encodes and decodes each frame exactly as the shared manifest describes [11.38ms] (pass) wire protocol golden vectors > returns borrowed payload views and writes into reusable buffers [0.19ms] (pass) wire protocol golden vectors > decodes muxed messages split across WebSocket messages [0.65ms] (pass) wire protocol golden vectors > rejects oversized, non-canonical, unknown, and malformed frame bytes [0.14ms] (pass) split mux header preserves trailing Close [0.34ms] (pass) reply-marked Input uses an additive bounded layout without changing legacy input [0.74ms] (pass) empty marked input reports the stable invalid-body decoder failure [0.14ms] src/mesh-review-paged-error.test.ts: (pass) review earlier snapshot continuation failure cannot replace a newer complete refresh [3.54ms] (pass) review earlier snapshot continuation cannot overwrite a delivered revision [3.81ms] (pass) a newer paged event owns publication before an earlier refresh resumes [2.87ms] src/mesh-review-refresh.test.ts: (pass) review superseded refresh failure cannot replace authoritative resync [1.59ms] (pass) superseded failure preserves a newer pending refresh [3.42ms] src/stream.test.ts: stream differential: 141 streams, 11988 schedules, zero divergences (pass) Rust and TypeScript preserve every frame at all boundaries and random multi-splits [2910.42ms] (pass) maximum frame size and fragmented oversized prefix obey the allocation boundary [7.37ms] src/mesh.test.ts: (pass) Mesh actions map to their typed action IDs and JSON inputs [2.58ms] (pass) Mesh watch coalesces change bursts and never publishes an older revision [3.97ms] (pass) Mesh watch forwards server errors and stops delivering after unsubscribe [0.09ms] (pass) Mesh enrollment carries an explicit authenticated host binding [0.17ms] src/mesh-review-continuation.test.ts: (pass) review continuation stops after stop [1.37ms] (pass) review continuation stops after forbidden [1.18ms] (pass) review continuation stops after superseded [1.12ms] src/mesh-pagination.test.ts: (pass) list assembles bounded pages using the same filter [0.23ms] (pass) a changed revision discards earlier pages before assembling its restart [0.17ms] (pass) malformed continuation is refused: {"revision":1,"offset":0} [0.13ms] (pass) malformed continuation is refused: {"revision":2,"offset":1} [0.01ms] (pass) malformed continuation is refused: {"revision":1,"offset":2} (pass) watch never publishes a partial page; withdrawn=false [1.33ms] (pass) watch never publishes a partial page; withdrawn=true [1.26ms] (pass) a superseding equal-revision resync wins over pending page assembly [1.43ms] src/mesh-review-resync.test.ts: (pass) review watch applies same-revision authoritative resync [0.21ms] (pass) authoritative resync keeps priority over an equal-revision pending list [1.52ms] src/mesh-vectors.test.ts: (pass) every shared Mesh action vector passes through the typed client unchanged [1.42ms] (pass) shared Mesh event vectors drive the typed watch adapter [5.29ms] 39 pass 0 fail 36135 expect() calls Ran 39 tests across 10 files. [3.11s] ``` </details>
kayg commented 2026-10-19 10:53:19 +00:00
Author
Owner
Copy link

Independent D307 round-2 correctness review started on review-query-replies-r2 at base/head 24d0119d15. Reviewing 23723c0c8..24d0119d1; read #160 and parent #206 histories. Test-only commits, real-shim multi-viewer checks, bounded-state and same-recipe size review; no deployment.

Independent D307 round-2 correctness review started on review-query-replies-r2 at base/head 24d0119d15915a4cca18a094c81ba8c232bb46e0. Reviewing 23723c0c8..24d0119d1; read #160 and parent #206 histories. Test-only commits, real-shim multi-viewer checks, bounded-state and same-recipe size review; no deployment.
kayg commented 2026-10-19 11:00:08 +00:00
Author
Owner
Copy link

Test step committed as 5662ef79f: adjacent cursor-position, device-attributes and status requests retain three distinct absolute identities across simultaneous bulk, split and bytewise viewers. Shipping-renderer review tests: 4 passed, 0 failed, 51 assertions; tracer TypeScript check and cargo fmt check pass. Existing 30-form / 515-split / 3-viewer property also passes unchanged (16 targeted tests, 1,749 assertions). Real-PTY ordering/expiry/replay/legacy checks and native bounded-state tests are prepared; static build is active through the shared slot. No confirmed new finding yet.

renderer-review.log

Test step committed as 5662ef79f: adjacent cursor-position, device-attributes and status requests retain three distinct absolute identities across simultaneous bulk, split and bytewise viewers. Shipping-renderer review tests: 4 passed, 0 failed, 51 assertions; tracer TypeScript check and cargo fmt check pass. Existing 30-form / 515-split / 3-viewer property also passes unchanged (16 targeted tests, 1,749 assertions). Real-PTY ordering/expiry/replay/legacy checks and native bounded-state tests are prepared; static build is active through the shared slot. No confirmed new finding yet. [renderer-review.log](https://git.kayg.org/attachments/5fa98ed5-db6f-473d-be3e-557233cf17a3)
kayg commented 2026-10-19 11:10:42 +00:00
Author
Owner
Copy link

Independent head static x86_64 build completes with the production recipe: stripped static PIE, 21,215,664 bytes, matching the exact round-2 ceiling. Same-base x86/ARM comparisons are prepared but not yet measured; no delta claim yet. Source attribution: round 2 removes server request storage/grammar and response matchers; Cargo.toml/Cargo.lock and the WASM SHA-256 are unchanged. Focused native/real-PTY checks are queued through build-slot.

head-size.txt

Independent head static x86_64 build completes with the production recipe: stripped static PIE, 21,215,664 bytes, matching the exact round-2 ceiling. Same-base x86/ARM comparisons are prepared but not yet measured; no delta claim yet. Source attribution: round 2 removes server request storage/grammar and response matchers; Cargo.toml/Cargo.lock and the WASM SHA-256 are unchanged. Focused native/real-PTY checks are queued through build-slot. [head-size.txt](https://git.kayg.org/attachments/4173896e-9812-4bde-b601-d51a10ea7b32)
kayg commented 2026-10-19 11:24:14 +00:00
Author
Owner
Copy link

Native test step e051b3346: 16 arbitration tests pass, including four new cases for two positions in one chunk, a trimmed position, duplicate replay after expiry, and all 4,096 session slots. The scale case fills 64 ranges and 64 claims per session (262,144 each); a 4,097th session creates no record. No runtime RSS or latency claim. Server all-target Clippy, fmt, TypeScript and production build pass. Five real-server/shim/PTy tests are now running on port 4292 through build-slot.

native-queries.log

Native test step e051b3346: 16 arbitration tests pass, including four new cases for two positions in one chunk, a trimmed position, duplicate replay after expiry, and all 4,096 session slots. The scale case fills 64 ranges and 64 claims per session (262,144 each); a 4,097th session creates no record. No runtime RSS or latency claim. Server all-target Clippy, fmt, TypeScript and production build pass. Five real-server/shim/PTy tests are now running on port 4292 through build-slot. [native-queries.log](https://git.kayg.org/attachments/f82aa689-d5b0-4204-9eed-3cd2e01f6fa6)
kayg commented 2026-10-19 11:30:17 +00:00
Author
Owner
Copy link

Real-PTY review iteration: corrected a new-fixture observation bug (the browser page was closed, leaving its bridge output frozen); protocol viewers now capture their own output. Corrected run: 4/4 pass—two adjacent requests with duplicate replay and a 1.2 s delayed viewer, typing/reply order in separate messages, legacy unmarked Input, and a 16-position burst with 3 viewers. No production defect inferred from that failed fixture run. A stricter same-message typing/reply batching case is queued.

The existing 30-form corpus failed its attempt-count assertion at the long ignored-control form: browser/helper/helper deltas [1,0,0], expected [1,1,1]; its exact PTY-byte assertion passed. This is not yet classified. Rerun will record helper socket states before any conclusion. Original failed receipt retained. Native tests remain 16/16 green.

real-review.log
focused.log

Real-PTY review iteration: corrected a new-fixture observation bug (the browser page was closed, leaving its bridge output frozen); protocol viewers now capture their own output. Corrected run: 4/4 pass—two adjacent requests with duplicate replay and a 1.2 s delayed viewer, typing/reply order in separate messages, legacy unmarked Input, and a 16-position burst with 3 viewers. No production defect inferred from that failed fixture run. A stricter same-message typing/reply batching case is queued. The existing 30-form corpus failed its attempt-count assertion at the long ignored-control form: browser/helper/helper deltas [1,0,0], expected [1,1,1]; its exact PTY-byte assertion passed. This is not yet classified. Rerun will record helper socket states before any conclusion. Original failed receipt retained. Native tests remain 16/16 green. [real-review.log](https://git.kayg.org/attachments/b5a7e7e0-074b-4299-b979-0a1052242378) [focused.log](https://git.kayg.org/attachments/a586dbdf-438d-46f1-a94c-1a262af57134)
kayg commented 2026-10-19 11:34:36 +00:00
Author
Owner
Copy link

QR2-001, severity pending end-to-end confirmation: deterministic native test review_typing_enqueued_before_a_reply_keeps_its_host_wire_order fails (0 passed / 1 failed). A typed byte admitted by websocket_input::InputQueue first is overtaken by a later AttachmentHandle::reply: replies enter the host command queue directly; typing traverses two forwarding tasks. No typing-credit exhaustion or queue saturation is involved. Source: websocket_input.rs:44-46; embedded.rs:151-175, 839-855. Same-message real-PTY probe is queued; ordinary separate-message case passes. Test-only source is retained in embedded_path_tests.rs, pending its Clippy check before commit.

order-unit.log

QR2-001, severity pending end-to-end confirmation: deterministic native test review_typing_enqueued_before_a_reply_keeps_its_host_wire_order fails (0 passed / 1 failed). A typed byte admitted by websocket_input::InputQueue first is overtaken by a later AttachmentHandle::reply: replies enter the host command queue directly; typing traverses two forwarding tasks. No typing-credit exhaustion or queue saturation is involved. Source: websocket_input.rs:44-46; embedded.rs:151-175, 839-855. Same-message real-PTY probe is queued; ordinary separate-message case passes. Test-only source is retained in embedded_path_tests.rs, pending its Clippy check before commit. [order-unit.log](https://git.kayg.org/attachments/050c98ec-0ce8-4e10-8274-28613258fae6)
kayg commented 2026-10-19 11:40:22 +00:00
Author
Owner
Copy link

QR2-001 native regression committed as a503d154a on review-query-replies-r2. cargo fmt and server all-target Clippy pass; the selected regression intentionally fails (0 passed / 1 failed): a reply is dequeued before previously admitted typing in an otherwise empty queue. No production changes. The real-PTY suite now includes both muxed frames in one WebSocket message; end-to-end confirmation and severity are pending. The same-message encoding is supported by websocket::receive_wire (websocket.rs:2822-2829).

QR2-001 native regression committed as a503d154a on review-query-replies-r2. cargo fmt and server all-target Clippy pass; the selected regression intentionally fails (0 passed / 1 failed): a reply is dequeued before previously admitted typing in an otherwise empty queue. No production changes. The real-PTY suite now includes both muxed frames in one WebSocket message; end-to-end confirmation and severity are pending. The same-message encoding is supported by websocket::receive_wire (websocket.rs:2822-2829).
kayg commented 2026-10-19 11:44:08 +00:00
Author
Owner
Copy link

Real-PTY tests committed as 5138aa512. Final run: 5/5 pass on the shipping static x86 image and production frontend, through build-slot, port 4292. Includes all 30 corpus forms (each of 3 viewers attempts once, exact expected PTY bytes once), adjacent requests, deliberately answered replay, expired delayed answers, both typing/reply frames in one WebSocket message, legacy unmarked input and 16 outstanding positions with 3 viewers. The prior corpus attempt-count failure does not repeat; assertions are unchanged and both receipts remain attached.

QR2-001 is withdrawn as a correctness finding: my native test asserted global FIFO between separate lanes, which D307 does not promise. contracts/wire.md:586-612 explicitly gives replies no typing credit/cursor and a separate bounded lane; embedded.rs:161-162 explicitly avoids a keyboard-credit waiter. Real-PTY ordinary and same-message order cases pass. The native test now verifies the actual contract: a reply bypasses queued typing, while that typing later reaches the host queue with the same cursor and byte. Corrected test passes 1/1; original red receipt and a503d154a remain in history for audit, with a separate correction commit pending Clippy. No production fix or waived check. No confirmed P0/P1/P2/P3 findings currently. Same-base static comparisons are queued.

order-batch.log
order-contract.log
query-replies-real.png

Real-PTY tests committed as 5138aa512. Final run: 5/5 pass on the shipping static x86 image and production frontend, through build-slot, port 4292. Includes all 30 corpus forms (each of 3 viewers attempts once, exact expected PTY bytes once), adjacent requests, deliberately answered replay, expired delayed answers, both typing/reply frames in one WebSocket message, legacy unmarked input and 16 outstanding positions with 3 viewers. The prior corpus attempt-count failure does not repeat; assertions are unchanged and both receipts remain attached. QR2-001 is withdrawn as a correctness finding: my native test asserted global FIFO between separate lanes, which D307 does not promise. contracts/wire.md:586-612 explicitly gives replies no typing credit/cursor and a separate bounded lane; embedded.rs:161-162 explicitly avoids a keyboard-credit waiter. Real-PTY ordinary and same-message order cases pass. The native test now verifies the actual contract: a reply bypasses queued typing, while that typing later reaches the host queue with the same cursor and byte. Corrected test passes 1/1; original red receipt and a503d154a remain in history for audit, with a separate correction commit pending Clippy. No production fix or waived check. No confirmed P0/P1/P2/P3 findings currently. Same-base static comparisons are queued. [order-batch.log](https://git.kayg.org/attachments/48e9561b-2d91-4685-bb66-388eba762bfa) [order-contract.log](https://git.kayg.org/attachments/55d1f359-3763-4156-a687-7ed715c806d2) ![query-replies-real.png](https://git.kayg.org/attachments/4d6806b6-5f64-4e02-9e25-0803d30dd8ab)
kayg commented 2026-10-19 11:45:51 +00:00
Author
Owner
Copy link

Completed test correction b429e5664: the independent reply progresses before queued typing forwarding, then the exact typing frame is observed with in_seq=0 and the original byte. Selected test 1/1, fmt and server all-target Clippy pass. This supersedes the unstated cross-lane FIFO assumption in a503d154a; QR2-001 remains withdrawn, with both receipts retained. Review branch contains only tests and their cfg(test) module inclusion. Final planned review head is b429e5664; same-base static comparisons are active and the complete scripts/verify fast gate follows on this head.

Completed test correction b429e5664: the independent reply progresses before queued typing forwarding, then the exact typing frame is observed with in_seq=0 and the original byte. Selected test 1/1, fmt and server all-target Clippy pass. This supersedes the unstated cross-lane FIFO assumption in a503d154a; QR2-001 remains withdrawn, with both receipts retained. Review branch contains only tests and their cfg(test) module inclusion. Final planned review head is b429e5664; same-base static comparisons are active and the complete scripts/verify fast gate follows on this head.
kayg commented 2026-10-19 12:00:18 +00:00
Author
Owner
Copy link

Same-base production-recipe builds complete at 23723c0c8: x86_64 21,223,696 B; ARM 19,415,776 B. Head static x86 is 21,215,664 B, confirming -8,032 B exactly. Head ARM is left to the final gate build; no ARM delta claimed yet. scripts/verify fast is active on b429e5664 through build-slot, using private short socket aliases backed by this job’s scratch, unchanged assertions and serial native test execution. No production changes or deployment.

comparison.log
size-comparison.txt

Same-base production-recipe builds complete at 23723c0c8: x86_64 21,223,696 B; ARM 19,415,776 B. Head static x86 is 21,215,664 B, confirming -8,032 B exactly. Head ARM is left to the final gate build; no ARM delta claimed yet. scripts/verify fast is active on b429e5664 through build-slot, using private short socket aliases backed by this job’s scratch, unchanged assertions and serial native test execution. No production changes or deployment. [comparison.log](https://git.kayg.org/attachments/c8216c09-5d2b-4287-a151-64cf9e1b7b78) [size-comparison.txt](https://git.kayg.org/attachments/75cf3416-98fd-4c8b-a0ff-629278131ade)
kayg commented 2026-10-19 12:07:15 +00:00
Author
Owner
Copy link

Final-gate setup correction on unchanged b429e5664: CLI feature tests failed 7/100 under my globally applied /proc//fd/3 state root. Errors include PermissionDenied in executable validation and an explicit pathname mismatch between the proc alias and its canonical scratch path (restart_tests.rs:443). The exact closed-stdin regression passes 1/1 when given the ordinary canonical job scratch root; no source/assertion changed.

Corrected runner: ordinary pathname/exec fixtures use the canonical job root. Only socket-heavy fixture binaries get a private mount namespace binding this job’s runtime directory at /mnt, retaining uid 1001 and dropping capabilities before exec; host /mnt and other jobs are unchanged. The current gate will retain its complete failed transcript and remaining rows; a fresh complete gate must pass on the same head. No failed row is waived.

restart-canonical.log

Final-gate setup correction on unchanged b429e5664: CLI feature tests failed 7/100 under my globally applied /proc/<controller>/fd/3 state root. Errors include PermissionDenied in executable validation and an explicit pathname mismatch between the proc alias and its canonical scratch path (restart_tests.rs:443). The exact closed-stdin regression passes 1/1 when given the ordinary canonical job scratch root; no source/assertion changed. Corrected runner: ordinary pathname/exec fixtures use the canonical job root. Only socket-heavy fixture binaries get a private mount namespace binding this job’s runtime directory at /mnt, retaining uid 1001 and dropping capabilities before exec; host /mnt and other jobs are unchanged. The current gate will retain its complete failed transcript and remaining rows; a fresh complete gate must pass on the same head. No failed row is waived. [restart-canonical.log](https://git.kayg.org/attachments/65674605-7200-4611-9418-88cc7f5b7a57)
kayg commented 2026-10-19 12:11:37 +00:00
Author
Owner
Copy link

Fixture validation on unchanged b429e5664: the workspace main binary now passes 99/99 (1 ignored), including all seven formerly failing restart cases, with the canonical root. The real daemon 24-stop integration also passes. Workspace then stopped at cli_review_r2: three test-setup UnixListener binds exceed SUN_LEN under the long TMPDIR (lines 72 and 292). Exact three_pages_preserve_order_and_only_the_final_cursor passes 1/1 in the isolated short-path namespace; CLI integration socket fixtures are now included in that runner selection. Server setup-token socket fixture also passes 1/1 in the namespace. No source/assertion changes or waivers. The first gate continues through static builds; the complete fresh gate follows with the final runner setup.

Fixture validation on unchanged b429e5664: the workspace main binary now passes 99/99 (1 ignored), including all seven formerly failing restart cases, with the canonical root. The real daemon 24-stop integration also passes. Workspace then stopped at cli_review_r2: three test-setup UnixListener binds exceed SUN_LEN under the long TMPDIR (lines 72 and 292). Exact three_pages_preserve_order_and_only_the_final_cursor passes 1/1 in the isolated short-path namespace; CLI integration socket fixtures are now included in that runner selection. Server setup-token socket fixture also passes 1/1 in the namespace. No source/assertion changes or waivers. The first gate continues through static builds; the complete fresh gate follows with the final runner setup.
kayg commented 2026-10-19 12:18:19 +00:00
Author
Owner
Copy link

Independent same-base size verification complete: x86 21,223,696 -> 21,215,664 B (-8,032); ARM 19,415,776 -> 19,408,192 B (-7,584), both exact claimed reductions and current caps. First full gate static/linkage/trust/key-memory/size row PASS. It exits 1 because the earlier fixture-root setup broke tests; transcript retained below. No row is waived. A fresh complete gate is active on unchanged b429e5664 with canonical ordinary roots and isolated short socket paths. Raw test output will be checked in addition to the summary.

final-size.txt
verify-fast.log
socket-namespace.log
cli-socket-namespace.log

Independent same-base size verification complete: x86 21,223,696 -> 21,215,664 B (-8,032); ARM 19,415,776 -> 19,408,192 B (-7,584), both exact claimed reductions and current caps. First full gate static/linkage/trust/key-memory/size row PASS. It exits 1 because the earlier fixture-root setup broke tests; transcript retained below. No row is waived. A fresh complete gate is active on unchanged b429e5664 with canonical ordinary roots and isolated short socket paths. Raw test output will be checked in addition to the summary. [final-size.txt](https://git.kayg.org/attachments/4c1c4696-5fd3-4833-9f16-c486d21d3231) [verify-fast.log](https://git.kayg.org/attachments/c83c39a1-67a1-40bd-8fd5-aeba11672d51) [socket-namespace.log](https://git.kayg.org/attachments/acbb4ed5-871b-4ff5-beef-7fd65de40fa8) [cli-socket-namespace.log](https://git.kayg.org/attachments/48c5f6bd-0048-4280-9f97-8dcef56696b8)
kayg commented 2026-10-19 12:20:33 +00:00
Author
Owner
Copy link

Second complete gate stopped at one additional fixture setup error: my runner’s umask 077 changed a deliberate mode-0755 directory to 0700, so runtime_directory_symlinks_and_public_permissions_are_refused no longer exercised public permissions (restart_tests.rs:222). Exact unchanged test passes 1/1 with umask 022. Runner now uses 022, canonical ordinary roots and isolated socket roots; third full gate is active on unchanged b429e5664. Prior transcript is retained; no assertion/source change and no failed row waived. Both static size/linkage checks continue to pass at the exact claimed reductions.

verify-fast-final.log
restart-public-permissions.log

Second complete gate stopped at one additional fixture setup error: my runner’s umask 077 changed a deliberate mode-0755 directory to 0700, so runtime_directory_symlinks_and_public_permissions_are_refused no longer exercised public permissions (restart_tests.rs:222). Exact unchanged test passes 1/1 with umask 022. Runner now uses 022, canonical ordinary roots and isolated socket roots; third full gate is active on unchanged b429e5664. Prior transcript is retained; no assertion/source change and no failed row waived. Both static size/linkage checks continue to pass at the exact claimed reductions. [verify-fast-final.log](https://git.kayg.org/attachments/44546cc3-3db6-4e88-ae74-063f7350ee42) [restart-public-permissions.log](https://git.kayg.org/attachments/81ed61bb-ba23-4f55-b569-532cdd41df8b)
kayg commented 2026-10-19 12:25:36 +00:00
Author
Owner
Copy link

Third gate reached cli_envelope after passing main 99/99, 24-stop daemon, queues/review/session integrations. Its status fixture saw exit 0 instead of 5 because sudo’s environment reset removed the user service-manager context in the short-path namespace. Exact unchanged status test passes 1/1 when the wrapper preserves the normal HOME/PATH, user runtime/bus context and required test environment. The wrapper now also preserves RUST_TEST_THREADS=1 and the runtime-helper path for selected tests. No source/assertion changes or waiver. Fresh complete gate is active on unchanged b429e5664; prior failed transcript retained below.

verify-fast-checked.log
cli-environment.log

Third gate reached cli_envelope after passing main 99/99, 24-stop daemon, queues/review/session integrations. Its status fixture saw exit 0 instead of 5 because sudo’s environment reset removed the user service-manager context in the short-path namespace. Exact unchanged status test passes 1/1 when the wrapper preserves the normal HOME/PATH, user runtime/bus context and required test environment. The wrapper now also preserves RUST_TEST_THREADS=1 and the runtime-helper path for selected tests. No source/assertion changes or waiver. Fresh complete gate is active on unchanged b429e5664; prior failed transcript retained below. [verify-fast-checked.log](https://git.kayg.org/attachments/00fff85f-b20f-472c-8c0f-eab5c57e5923) [cli-environment.log](https://git.kayg.org/attachments/a827b0b6-beaf-4635-b366-e83862ebee8a)
kayg commented 2026-10-19 12:33:28 +00:00
Author
Owner
Copy link

Fourth gate passed prior CLI/setup blockers and progressed through session retention, bounds and exit events, then stopped at the SSH prompt integration fixtures. Their configured scratch prefix is long enough to select the production short-runtime fallback (credentials.rs:66); the tests inspect their original configured directory and fail with NotFound. Exact unchanged real_cli_askpass_refuses_unregistered_parent_and_cleans_helper passes 1/1 with the isolated short root. SSH helper/credential fixtures now use that same short-root namespace; required user/test environment is preserved. Fifth complete fast gate is active on unchanged b429e5664. No source/assertion changes or waived rows.

verify-fast-complete.log
askpass-short-root.log

Fourth gate passed prior CLI/setup blockers and progressed through session retention, bounds and exit events, then stopped at the SSH prompt integration fixtures. Their configured scratch prefix is long enough to select the production short-runtime fallback (credentials.rs:66); the tests inspect their original configured directory and fail with NotFound. Exact unchanged real_cli_askpass_refuses_unregistered_parent_and_cleans_helper passes 1/1 with the isolated short root. SSH helper/credential fixtures now use that same short-root namespace; required user/test environment is preserved. Fifth complete fast gate is active on unchanged b429e5664. No source/assertion changes or waived rows. [verify-fast-complete.log](https://git.kayg.org/attachments/f28a081e-9bc1-4b80-90ab-76081e292b0b) [askpass-short-root.log](https://git.kayg.org/attachments/dbfddeb5-690e-4581-ba4b-8e69fdc5ed34)
kayg commented 2026-10-19 13:05:34 +00:00
Author
Owner
Copy link

P2 GF-001 (pre-existing gate fixture; outside 23723c0c8..24d0119d1): final scripts/verify fast on b429e5664 again fails review_inode_reuse_after_diagnostics_preserves_live_replacement at install.rs:3483 because the fixture cannot reproduce inode reuse in 256 allocations. Install: 93 passed, 1 failed, 1 ignored. The unchanged exact test passes alone; the same whole-suite failure is already recorded on #160 for 23723c0c8. No D307 production regression inferred.

This is outside the authorized waiver list and is not waived. All other final Rust gate rows pass (fmt, VT fmt, CLI compile-out, Clippy, cargo-deny, static builds); frontend checks skipped by the dispatcher are running separately before the finish record. The complete native diagnostic exercised every target: its only other failure was missing Zig in the diagnostic PATH, and that exact mouse probe passes with the normal verification PATH. All 582 active server tests pass (52 ignored), including all new D307 cases. Feature checks remain 5/5 real-PTY cases plus the 30-form, 515-split renderer property; both size reductions independently match. Final head is unchanged and all test commits are pushed. Gate transcript and final verdict follow after remaining checks and cleanup.
verify-fast-verified.log
native-preflight.log
inode-isolated.log
mouse-zig-path.log

P2 GF-001 (pre-existing gate fixture; outside 23723c0c8..24d0119d1): final scripts/verify fast on b429e5664 again fails review_inode_reuse_after_diagnostics_preserves_live_replacement at install.rs:3483 because the fixture cannot reproduce inode reuse in 256 allocations. Install: 93 passed, 1 failed, 1 ignored. The unchanged exact test passes alone; the same whole-suite failure is already recorded on #160 for 23723c0c8. No D307 production regression inferred. This is outside the authorized waiver list and is not waived. All other final Rust gate rows pass (fmt, VT fmt, CLI compile-out, Clippy, cargo-deny, static builds); frontend checks skipped by the dispatcher are running separately before the finish record. The complete native diagnostic exercised every target: its only other failure was missing Zig in the diagnostic PATH, and that exact mouse probe passes with the normal verification PATH. All 582 active server tests pass (52 ignored), including all new D307 cases. Feature checks remain 5/5 real-PTY cases plus the 30-form, 515-split renderer property; both size reductions independently match. Final head is unchanged and all test commits are pushed. Gate transcript and final verdict follow after remaining checks and cleanup. [verify-fast-verified.log](https://git.kayg.org/attachments/144b64c6-e3b7-48dd-a687-f2b4af7ef2de) [native-preflight.log](https://git.kayg.org/attachments/7d8fd304-05b1-4538-b28f-7935d2304a89) [inode-isolated.log](https://git.kayg.org/attachments/dd2ffa9c-5f5e-4b12-8763-0170e8c8501d) [mouse-zig-path.log](https://git.kayg.org/attachments/c8e5d44e-a736-4195-96fc-5427bd242474)
kayg commented 2026-10-19 13:15:08 +00:00
Author
Owner
Copy link

Verdict: HOLD. Final review head: b429e5664ffc886b492829972ad8ae38d91c2968 on review-query-replies-r2, independently verified pushed. Reviewed production delta: 23723c0c8..24d0119d1. All five review commits contain tests only (plus their cfg(test) module inclusion). Checkout is clean; no deployment; issue remains open.

Counts: P0=0, P1=0, P2=1, P3=0. No D307 production correctness finding remains. QR2-001 was withdrawn: cross-lane FIFO is not promised by the independent unsequenced reply contract; the corrected test checks reply progress and unchanged typing bytes/cursor.

P2 GF-001 — pre-existing mandatory-gate fixture, outside the reviewed delta. crates/plugins/ssh/tests/install.rs:3483, review_inode_reuse_after_diagnostics_preserves_live_replacement, cannot reproduce filesystem inode reuse in 256 allocations during whole-suite runs. Final install result: 93 passed, 1 failed, 1 ignored. The exact unchanged test passes alone; the same whole-suite failure is already recorded earlier on #160 for 23723c0c8. It is outside the permitted waiver list and is not waived. The mandatory gate remains exit 1, so this review cannot authorize merge. A follow-up must make this fixture reliably exercise its intended assertion and obtain a green complete gate.

Passing evidence on the final tree:

  • Real server/infraternal agent/shim/PTY: 5/5 cases, including all 30 forms, three answer attempts per form, exact expected PTY bytes once; adjacent requests, deliberately answered replay, a delayed expired viewer, typing/reply mux batching, legacy unmarked input and 16 outstanding positions.
  • Focused shipping-renderer tests: 17 passed, 0 failed, 1,794 assertions; 30 answered forms across all 515 splits, plus mixed bulk/split/bytewise viewers. Native bounds cover 4,096 sessions, each retaining at most 64 output ranges and 64 claims (262,144 of each).
  • Complete native diagnostic exercised every workspace target. All 582 active server tests passed (52 ignored), including the D307 tests. Its only other failure was a diagnostic PATH missing Zig; the unchanged C mouse probe passes with the normal verification PATH. All setup errors and raw failed runs remain attached in the preceding comments; no source assertions were relaxed.
  • fmt, VT fmt, CLI compile-out, Clippy, cargo-deny and both static-build/linkage/trust/key-memory/size checks pass. The standalone frontend verification function passes the compiler, production build, transfer budgets and protocol tests skipped by the failing Rust dispatcher. Critical JavaScript: gzip 301,115/307,200 B, Brotli 250,879/256,000 B.
  • Same production recipe and base 23723c0c8: x86_64 21,223,696 -> 21,215,664 B (-8,032); ARM 19,415,776 -> 19,408,192 B (-7,584). Both claimed reductions and exact caps are independently confirmed. The trim removes server request storage/grammar and response-content matching; Cargo dependencies and the shipping WASM checksum are unchanged. No required renderer answer disappeared in the tested corpus.

No new timing benchmarks were run on the shared build host; the implementation's VM performance receipts were reviewed on this issue. Own temporary comparison checkout, build targets and runtime fixtures were removed after a process scan found no matching job fixtures. Raw receipts, checklist and fixture reproduction scripts:

renderer-final.log
ts-final.log
cleanup.json
reproduce.txt
reviewer-checklist.txt
findings.md

verify-fast-verified.log
native-preflight.log
inode-isolated.log
mouse-zig-path.log

final-size.txt
verify-fast.log
socket-namespace.log
cli-socket-namespace.log

scripts/verify fast output, verbatim (head above; exit 1) 

==> Repository artifact size gate
repository artifact gate: PASS (54 changed path(s), merge base f29713863e5d)

==> Release deployment functional checks
.....Release build failed for aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa; gate log retained
.Build deferred: host capacity limit reached
.........
----------------------------------------------------------------------
Ran 15 tests in 0.653s

OK
.
----------------------------------------------------------------------
Ran 1 test in 0.072s

OK
bun test v1.4.2 (744846f84)

scripts/release/deploy-review.test.ts:
REMOTE_ADMISSION unsigned_x86_payload=true refused=true
(pass) remote admission refuses an x86 payload outside the signed manifest [192.69ms]
{"state": "deployed", "ca_unlocked": true}
WEB_ONLY_RECORD candidate_binary_recorded=false
(pass) web-only deployment does not record the candidate as the running binary [176.91ms]
ALIAS_RECOVERY restart_requests=2
(pass) alias restoration failure still requests the retained warm rollback [199.39ms]

 3 pass
 0 fail
 3 expect() calls
Ran 3 tests across 1 file. [578.00ms]
METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=296.59 p99_ms=304.24 result=PASS

==> fmt
(fmt: 2s)

==> VT native fmt
(VT native fmt: 0s)

==> CLI plugin compile-out
disabled CLI plugin dependencies: absent from normal dependency graph
warning: function `print_progress` is never used
   --> crates/infraternal/src/cli/output.rs:592:8
    |
592 | pub fn print_progress<T: Serialize>(result: &CommandResult<T>, json: bool, to_stderr: bool) {
    |        ^^^^^^^^^^^^^^
    |
    = note: `#[warn(dead_code)]` (part of `#[warn(unused)]`) on by default

warning: function `write_output` is never used
   --> crates/infraternal/src/cli/output.rs:616:8
    |
616 | pub fn write_output(output: Result<String, serde_json::Error>, to_stderr: bool) {
    |        ^^^^^^^^^^^^

warning: `infraternal` (bin "infraternal" test) generated 2 warnings
    Finished `test` profile [unoptimized + debuginfo] target(s) in 0.16s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/infraternal-9c4fc48b971836fc)

running 37 tests
test cli::actions::default_build_tests::default_build_registers_no_unbuilt_command ... ok
test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok
test cli::actions::tests::agent_session_integration_target_is_gated_by_agent_plugin ... ok
test cli::actions::tests::compiled_out_mesh_has_no_registered_commands ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::no_default_plugins_register_no_component_commands ... ok
test cli::actions::tests::server_only_dependencies_are_removed_with_server_plugin ... ok
test cli::command_tree::tests::compiled_out_plugin_has_no_help_or_parse_path ... ok
test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test cli::command_tree::tests::node_build_omits_and_refuses_server_commands ... ok
test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok
test cli::command_tree::tests::public_help_is_plain_words ... ok
test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok
test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok
test cli::output::tests::a_failure_says_why_and_what_to_do ... ok
test cli::output::tests::exit_codes_follow_d303 ... ok
test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}}
{"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}}
ok
test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok
test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok
test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok
test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok
test cli::usage::tests::missing_arguments_are_listed_by_name ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok
test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok

test result: ok. 37 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.25s

    Finished `test` profile [unoptimized + debuginfo] target(s) in 0.61s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/infraternal-a2d65766d1f23d58)

running 100 tests
test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok
test cli::actions::hosted_tests::production_descriptors_share_cli_registry_and_skills ... ok
test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok
test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok
test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::hidden_ssh_session_bridge_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok
test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok
test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok
test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test cli::command_tree::tests::hidden_ssh_session_action_parses_existing_session_rendezvous ... ok
test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok
test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok
test cli::command_tree::tests::public_help_is_plain_words ... ok
test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok
test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok
test cli::output::tests::a_failure_says_why_and_what_to_do ... ok
test cli::output::tests::exit_codes_follow_d303 ... ok
test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}}
{"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}}
ok
test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok
test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok
test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok
test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok
test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok
test cli::usage::tests::missing_arguments_are_listed_by_name ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test remote::tests::join_re_enrolls_for_a_moved_server_but_not_a_renamed_one ... ok
test remote::tests::join_re_enrolls_the_same_hosts_identity_and_refuses_another_host ... ok
test remote::tests::join_refuses_the_same_host_id_from_another_server ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test remote::tests::replace_aborts_when_the_identity_changed_since_it_was_read ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test remote_service::tests::link_failure_does_not_wait_forever_for_blocking_work ... ok
test remote_service::tests::polling_panic_reaches_bounded_shutdown ... ok
test remote_service::tests::successful_link_return_is_a_service_failure ... ok
test restart::recovery_tests::verified_exec_and_late_refusal_preserve_listener_and_ca ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test restart::tests::deleted_path_review::relative_recovery_after_atomic_install_keeps_live_install_path ... ok
test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok
test restart::tests::path_review::late_recovery_from_path_invocation_keeps_install_target ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok
test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ok
test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok
test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok
test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ok
test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ok
test restart_binary::audit_tests::verification_twenty_megabytes ... ignored, optimized weighted 20 MiB signature and admission measurement
test restart_image::tests::probe_never_inherits_the_control_descriptor ... ok
test restart_image::tests::snapshot_refuses_every_mutation_and_preserves_source_offset ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok
test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok
test ssh_internal::tests::connect_requires_exactly_a_host_and_numeric_port ... ok
test ssh_internal::tests::connector_is_available_only_on_the_initiating_build ... ok
test ssh_internal::tests::session_accepts_only_the_two_spawned_shapes ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test startup_tests::shared_reactor_preserves_borrows_errors_and_panic_cleanup ... ok

test result: ok. 99 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 33.32s

    Finished `test` profile [unoptimized + debuginfo] target(s) in 0.46s
     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/infraternal_agent-c0f5ee2d4c7be28c)

running 1 test
test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 73 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/infraternal_mesh-c7263890e5528429)

running 1 test
test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/infraternal_plugin_backup-63687278dacedd2d)

running 1 test
test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/infraternal_plugin_relay-05772b88ed06ec15)

running 1 test
test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/infraternal_plugin_ssh-8d15d5d3bffc0793)

running 1 test
test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 42 filtered out; finished in 0.00s

(CLI plugin compile-out: 36s)

==> clippy
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 2.19s
(clippy: 2s)

==> test
    Blocking waiting for file lock on package cache
    Finished `test` profile [unoptimized + debuginfo] target(s) in 1.46s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/infraternal-7de1f15af67158e9)

running 100 tests
test cli::actions::default_build_tests::default_build_registers_no_unbuilt_command ... ok
test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok
test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok
test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok
test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::hidden_ssh_session_bridge_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok
test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok
test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok
test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test cli::command_tree::tests::hidden_ssh_session_action_parses_existing_session_rendezvous ... ok
test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok
test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok
test cli::command_tree::tests::public_help_is_plain_words ... ok
test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok
test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok
test cli::output::tests::a_failure_says_why_and_what_to_do ... ok
test cli::output::tests::exit_codes_follow_d303 ... ok
test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}}
{"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}}
ok
test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok
test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok
test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok
test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok
test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok
test cli::usage::tests::missing_arguments_are_listed_by_name ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test remote::tests::join_re_enrolls_for_a_moved_server_but_not_a_renamed_one ... ok
test remote::tests::join_re_enrolls_the_same_hosts_identity_and_refuses_another_host ... ok
test remote::tests::join_refuses_the_same_host_id_from_another_server ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test remote::tests::replace_aborts_when_the_identity_changed_since_it_was_read ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test remote_service::tests::link_failure_does_not_wait_forever_for_blocking_work ... ok
test remote_service::tests::polling_panic_reaches_bounded_shutdown ... ok
test remote_service::tests::successful_link_return_is_a_service_failure ... ok
test restart::recovery_tests::verified_exec_and_late_refusal_preserve_listener_and_ca ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test restart::tests::deleted_path_review::relative_recovery_after_atomic_install_keeps_live_install_path ... ok
test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok
test restart::tests::path_review::late_recovery_from_path_invocation_keeps_install_target ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok
test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ok
test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok
test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok
test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ok
test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ok
test restart_binary::audit_tests::verification_twenty_megabytes ... ignored, optimized weighted 20 MiB signature and admission measurement
test restart_image::tests::probe_never_inherits_the_control_descriptor ... ok
test restart_image::tests::snapshot_refuses_every_mutation_and_preserves_source_offset ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok
test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok
test ssh_internal::tests::connect_requires_exactly_a_host_and_numeric_port ... ok
test ssh_internal::tests::connector_is_available_only_on_the_initiating_build ... ok
test ssh_internal::tests::session_accepts_only_the_two_spawned_shapes ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test startup_tests::shared_reactor_preserves_borrows_errors_and_panic_cleanup ... ok

test result: ok. 99 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 37.69s

     Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/agent_daemon-eace6b0012b5a1db)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 35.15s

     Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/agent_queues-165eb353c7531f59)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 37.60s

     Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/agent_review-3ad2a12c0615b84c)

running 8 tests
test initial_attach_requires_explicit_credit_before_replay ... ok
test last_typist_selects_its_own_real_pty_dimensions ... ok
test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok
test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 38.36s

     Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/agent_sessions-f2332706b84f8f8c)

running 3 tests
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok
test latency_fixture_accepts_the_unsolicited_startup_inventory ... ok
test restart_discovery_keeps_a_live_shim_and_drops_clean_exit_and_sigkill ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.08s

     Running tests/cli_envelope.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/cli_envelope-661ccc970097d9ee)

running 8 tests
test a_missing_server_is_not_found_exit_4 ... ok
test an_unknown_command_is_a_usage_envelope_that_does_not_echo_odd_input ... ok
test bare_infraternal_is_the_overview_and_points_to_help ... ok
test component_commands_fail_in_the_envelope_when_the_agent_is_not_there ... ok
test every_command_reports_a_usage_error_in_the_envelope_naming_the_argument ... ok
test read_only_commands_answer_in_the_envelope ... ok
test status_exits_0_on_a_machine_with_nothing_installed ... ok
test status_exits_5_when_something_that_should_run_is_down ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.61s

     Running tests/cli_review.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/cli_review-d55a30e0250e5756)

running 16 tests
test a_dry_run_plan_keeps_its_line_breaks ... ok
test a_dumb_terminal_gets_neither_colour_nor_marks ... ok
test a_failing_command_in_json_mode_prints_exactly_one_envelope ... ok
test a_group_with_one_command_says_so_in_the_singular ... ok
test a_malformed_host_id_is_a_usage_error_exit_2 ... ok
test a_missing_runtime_directory_is_not_called_a_bad_reply ... ok
test a_subcommand_does_not_advertise_options_it_ignores ... ok
test a_usage_error_in_text_mode_does_not_echo_the_odd_input ... ok
test an_empty_no_color_is_ignored ... ok
test an_unknown_skill_is_not_found_exit_4 ... ok
test ctrl_c_in_json_mode_ends_with_an_interrupted_envelope_and_exit_130 ... ok
test json_help_and_version_are_envelopes_too ... ok
test no_compiled_python_is_tracked ... ok
test root_help_fits_80_columns ... ok
test status_is_not_down_when_the_service_manager_cannot_be_asked ... ok
test user_facing_text_never_says_agent_alone ... ok

test result: ok. 16 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.16s

     Running tests/cli_review_r2.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/cli_review_r2-fb28189eb99511bc)

running 11 tests
test a_failed_later_page_emits_only_the_failure_envelope ... ok
test a_later_runtime_handler_is_not_bypassed_by_the_interrupt_handler ... ok
test a_mistyped_word_that_looks_like_a_token_is_not_echoed ... ok
test a_paged_listing_is_still_one_envelope ... ok
test an_unknown_skill_does_not_echo_what_was_typed ... ok
test ctrl_c_in_a_script_loop_stops_the_loop ... ok
test ctrl_c_while_the_result_is_being_written_never_leaves_a_broken_line ... ok
test help_and_version_under_json_are_one_envelope_and_exit_0 ... ok
test status_text_does_not_call_an_unanswered_unit_not_running ... ok
test three_pages_preserve_order_and_only_the_final_cursor ... ok
test usage_errors_under_json_are_one_envelope_and_exit_2 ... ok

test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.28s

     Running tests/cli_review_r3.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/cli_review_r3-ab163f75bc325020)

running 4 tests
test a_pending_blocked_interrupt_emits_notice_and_terminates_by_sigint ... ok
test a_pending_interrupt_during_final_output_preserves_result_and_sigint_status ... ok
test inherited_ignored_sigint_stays_ignored_during_cli_output ... ok
test signal_fixture ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.14s

     Running tests/cli_review_r3_arguments.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/cli_review_r3_arguments-48fd77d7d0173dff)

running 1 test
test inherited_fd_is_rejected_instead_of_ignored_by_remote_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s

     Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/idle_canary-1e1ec5c3674e0f56)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.21s

     Running tests/key_memory.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/key_memory-db0b9ddee7c51dd5)

running 1 test
test diagnostic_requires_locked_pages_and_supports_json_without_public_help ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/remote_output-2e9aad8bb717b41b)

running 1 test
test remote_refusal_matches_its_declared_cli_output ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/session_bounds_review.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/session_bounds_review-c8d51c5accea5d04)

running 1 test
test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.10s

     Running tests/session_exit_events.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/session_exit_events-4b2712c16f493a8f)

running 1 test
test idle_daemon_discovers_unattached_and_adopted_shim_exit_without_requests ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.47s

     Running tests/session_retention.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/session_retention-19237533b041ac30)

running 1 test
test bounded_owned_exit_reconnects_as_ended_with_status ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.79s

     Running tests/setup_output.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/setup_output-8adba6b7d790f6d5)

running 1 test
test setup_output_keeps_legacy_and_versioned_readers ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/shim.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/shim-882f35597e3d6cb6)

running 24 tests
test attached_backpressure_and_detached_progress ... ok
test delivered_exit_cannot_release_another_owning_window ... ok
test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok
test detached_shell_exit_reaps_shim_within_one_second ... ok
test disallowed_signal_only_disconnects_peer ... ok
test double_fork_survives_parent_death ... ok
test dropped_deferred_peers_release_slots_before_the_pty_drains ... ok
test fresh_shared_peer_negotiates_while_another_shared_input_is_deferred ... ok
test independent_shared_writers_wait_for_the_same_global_queue ... ok
test legacy_output_subscription_unblocks_deferred_shared_input ... ok
test malformed_shared_successor_does_not_evict_the_live_shared_peer ... ok
test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok
test owned_exit_releases_promptly_on_window_close ... ok
test parked_shared_writer_does_not_stop_detached_pty_progress ... ok
test real_shell_reconnect_resize_and_delivered_exit ... ok
test replacement_connection_and_malformed_limit ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok
test shared_input_waits_for_global_queue_space_without_losing_the_suffix ... ok
test shared_writer_coexists_and_replayed_input_is_written_once ... ok
test shared_writer_refusals_and_full_peer_limit_preserve_the_live_writer ... ok
test shared_writer_restores_durable_geometry_after_another_writer_types ... ok
test unowned_normal_exit_retires_promptly_and_records_status ... ok
test user_scope_survives_parent_unit_stop ... active
ok
test writer_replacement_is_per_mode_and_fresh_ordinary_writers_stay_optional ... ok

test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.31s

     Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/ssh_askpass-0d42995889fdce36)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 3.05s

     Running tests/ssh_connector_policy.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/ssh_connector_policy-76f290ff1302b128)

running 1 test
test connector_preserves_configured_bind_address_refusal ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.02s

     Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/vt_credit-a8057c0d8d11dc74)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 24.12s

     Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/vt_reconnect-3d554a4e2b9bb78d)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 16.83s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/infraternal_agent-5e7905dce98d9204)

running 166 tests
test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok
test daemon::authenticated_tests::authenticated_uid_refusal_precedes_state_and_io ... ok
test daemon::census_retry_tests::full_control_lane_retries_retirement_census_on_capacity_without_requests ... ok
test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok
test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000
test daemon::liveness_tests::detached_ping_preserves_written_ack_without_output_credit ... ok
test daemon::liveness_tests::input_state_probe_preserves_written_ack_after_input ... ok
test daemon::liveness_tests::input_state_probe_preserves_written_ack_before_input ... ok
test daemon::liveness_tests::terminal_probe_waits_for_the_shim_fence_and_keeps_stream_identity ... ok
test daemon::readiness_exit_tests::ownership_eof_does_not_discard_private_terminal_output ... ok
test daemon::readiness_tests::a_saturated_census_queue_cannot_establish_the_open_fence ... ok
test daemon::readiness_tests::a_shut_down_peer_refuses_the_write_while_a_forked_copy_holds_it ... ok
test daemon::readiness_tests::census_and_open_result_share_fifo_order ... ok
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::readiness_tests::fixture_fence_processes_messages_before_the_control_pong ... ok
test daemon::readiness_tests::replay_complete_preserves_the_full_output_cursor_as_decimal ... ok
test daemon::readiness_tests::replay_prefix_stops_at_the_shim_hello_head ... ok
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test daemon::readiness_tests::saturated_action_replies_preserve_connection ... ok
test daemon::readiness_tests::saturated_ping_replies_preserve_connection ... ok
test daemon::readiness_tests::the_unhealthy_handoff_case_survives_concurrent_spawns ... ok
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test daemon::remote_tests::reattach_dispatch_serves_while_another_runtime_holds_the_lifetime_lock ... ok
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::session_commands::tests::probe_at_full_command_capacity_preserves_accepted_input ... ok
test daemon::session_commands::tests::review_reply_at_full_command_capacity_preserves_accepted_input ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks
test daemon::terminal_events::tests::census_uses_uuid_strings_and_replay_keeps_all_cursor_bits ... ok
test daemon::terminal_events::tests::ordinary_exit_omits_retired_and_snapshot_sequences_stay_numeric ... ok
test daemon::terminal_events::tests::reply_compatibility_notice_contains_only_session_identity ... ok
test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok
test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok
test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok
test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok
test plugin_control::tests::accepted_public_transaction_outlives_the_framing_deadline ... ok
test plugin_control::tests::admission_observes_the_same_plugin_settings_as_actions ... ok
test plugin_control::tests::dropping_a_listener_does_not_unlink_a_replacement_file ... ok
test plugin_control::tests::empty_catalog_preserves_control_contract_without_an_os_worker ... ok
test plugin_control::tests::local_frame_reader_retains_fragmentation_and_refuses_trailing_frames ... ok
test plugin_control::tests::local_public_actions_refuse_controls_and_active_socket_replacement ... ok
test plugin_control::tests::retained_path_and_observed_transport_cross_the_lazy_worker ... ok
test plugin_control::tests::retained_runtime_registry_keeps_lifetime_ownership_after_listener_abort ... ok
test plugin_control::tests::synchronous_plugin_work_does_not_park_the_current_thread_reactor ... ok
test plugin_control::tests::worker_preserves_trusted_context_and_writer_owned_effect ... ok
test process_exits::platform::tests::resource_failures_do_not_silently_disable_exit_tracking ... ok
test process_exits::platform::tests::unavailable_kernel_has_no_timer_or_descriptor ... ok
test process_exits_tests::exited_before_registration_is_not_a_live_registration ... ok
test process_exits_tests::process_descriptor_is_cloexec_and_rejects_invalid_pid ... ok
test process_exits_tests::shared_exit_queue_at_200_processes ... ignored, 200 live process lifetimes; run in a weighted benchmark scope
test process_exits_tests::shared_queue_detects_exit_and_does_not_repeat_or_retain_descriptors ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test remote_client::dial_runtime::tests::owned_driver_clock_advances_with_its_timer_runtime ... ok
test remote_client::server_path::tests::a_future_mesh_lease_and_silent_cut_keep_their_port_reserved ... ok
test remote_client::server_path::tests::a_latched_mesh_reply_wakes_retry_without_selecting_the_path ... ok
test remote_client::server_path::tests::backed_candidate_refusal_keeps_new_datagrams_on_mesh_discovery ... ok
test remote_client::server_path::tests::backed_discovery_ends_with_its_owned_session ... ok
test remote_client::server_path::tests::backed_discovery_keeps_control_cancellation_and_udp_recovery_bounded ... ok
test remote_client::server_path::tests::backup_published_during_candidate_proof_keeps_enrolled_control_live ... ok
test remote_client::server_path::tests::candidate_proof_keeps_probing_after_its_first_packet_is_lost ... ok
test remote_client::server_path::tests::component_down_activates_the_warm_fallback_without_a_new_connection ... ok
test remote_client::server_path::tests::component_down_keeps_its_reason_when_the_mesh_also_stops_answering ... ok
test remote_client::server_path::tests::component_down_proves_tcp_fallback_when_enrolled_udp_is_unavailable ... ok
test remote_client::server_path::tests::component_down_returns_the_live_connection_to_the_enrolled_address ... ok
test remote_client::server_path::tests::dropped_return_replies_keep_the_admitted_connection ... ok
test remote_client::server_path::tests::failed_control_worker_returns_to_retry_owner ... ok
test remote_client::server_path::tests::healthy_mesh_path_is_never_declared_interrupted ... ignored, Timing assertion: run on the perf VM under the shared benchmark lock.
test remote_client::server_path::tests::healthy_mesh_preserves_every_control_reply_on_the_admitted_connection ... ok
test remote_client::server_path::tests::interrupted_mesh_is_retried_on_the_same_connection ... ok
test remote_client::server_path::tests::invalid_mesh_hint_cannot_complete_fresh_path_proof ... ok
test remote_client::server_path::tests::pending_enrolled_proof_does_not_hide_a_latched_mesh_hint ... ok
test remote_client::server_path::tests::pending_enrolled_proof_does_not_hide_the_mesh_discovery_clock ... ok
test remote_client::server_path::tests::proposed_mesh_moves_the_live_connection_and_a_silent_cut_returns_it ... ok
test remote_client::server_path::tests::retained_mesh_proposal_connects_when_the_fallback_port_is_unavailable ... ok
test remote_client::server_path::tests::returning_publishes_the_selected_path_before_its_proof_finishes ... ok
test remote_client::server_path::tests::review_silent_mesh_interruption_returns_to_fallback_within_local_reconnect_budget ... ignored, Run alone on the perf VM under the shared benchmark lock.
test remote_client::server_path::tests::silent_mesh_handshake_keeps_the_shared_timeout_classification ... ok
test remote_client::server_path::tests::unadvertised_path_proof_keeps_the_existing_enrolled_connection ... ok
test remote_client::server_path::tests::unanswered_mesh_address_keeps_the_live_connection ... ok
test remote_client::server_path::tests::unavailable_credentials_do_not_end_server_link ... ok
test remote_client::server_path::tests::unnegotiated_backup_preserves_the_enrolled_retry_cooling ... ok
test remote_client::server_path::tests::untrusted_server_on_the_mesh_address_never_takes_the_connection ... ok
test remote_client::supervisor::review_tests::durable_state::acknowledged_network_access_survives_superseded_worker_completion ... ok
test remote_client::supervisor::review_tests::six_hour_server_outage_keeps_one_retry_owner_with_bounded_attempts ... ok
test remote_client::supervisor::review_tests::terminated_factory_is_replaced_without_overlapping_live_workers ... ok
test remote_client::supervisor::review_tests::watchdog_bounds_workers_when_local_path_discovery_stalls ... ok
test remote_client::supervisor::tests::a_burst_then_a_stable_link_is_summarised_by_the_timer ... ok
test remote_client::supervisor::tests::every_error_kind_and_successful_return_retries ... ok
test remote_client::supervisor::tests::failed_attempt_cost_does_not_extend_the_retry_period ... ok
test remote_client::supervisor::tests::healthy_link_has_no_watchdog_deadline ... ok
test remote_client::supervisor::tests::link_close_notes_print_once_per_window_and_summarise_repeats ... ok
test remote_client::supervisor::tests::watchdog_restarts_a_stalled_offline_attempt ... ok
test remote_client::tests::capability_fixture_retries_a_port_held_by_the_other_transport ... ok
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test remote_client::tests::idle_timers::copy_cost::fresh_admission_accepts_dormant_replies_but_refuses_pending_recovery ... ok
test remote_client::tests::idle_timers::copy_cost::fresh_copy_from_admission_at_one_thousand_transports ... ignored, Separate fresh-copy cohort on the perf VM under its shared benchmark lock.
test remote_client::tests::idle_timers::copy_cost::mesh_probe_and_copy_cost_at_one_thousand_transports ... ignored, Optimized transport-only measurement on the perf VM under its shared benchmark lock.
test remote_client::tests::idle_timers::copy_cost::physical_counters_include_both_source_paths ... ok
test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::monotonic_origin_bounds_fail_closed_without_losing_receive_receipts ... ok
test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::receive_diagnostic_counts_gro_and_only_fixed_sampled_ports ... ok
test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::receive_diagnostic_gap_bins_have_explicit_bounds ... ok
test remote_client::tests::idle_timers::copy_cost::runtime_configuration_trial_at_one_thousand_transports ... ignored, Explicit runtime scheduling control on the perf VM; ordinary runtime and guards unchanged.
test remote_client::tests::idle_timers::copy_cost::socket_configuration_trial_at_one_thousand_transports ... ignored, Explicit socket-configuration diagnostic on the perf VM; ordinary scale gates stay unchanged.
test remote_client::tests::idle_timers::copy_cost::udp_drop_receipt_counts_only_owned_live_sockets ... ok
test remote_client::tests::idle_timers::mesh_idle_timer_cost_at_one_thousand_connections ... ignored, Release-only perf VM measurement under the shared benchmark lock.
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test remote_client::tests::raw_tcp_control_preserves_mux_envelopes_and_buffered_suffix ... ok
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test remote_client::tests::server_path_capability_is_advertised_on_native_and_fallback_transports ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test remote_client::tests::unavailable_local_credentials_retry_without_creating_state ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test remote_cursor::tests::exact_unsigned_cursor_and_whole_object_are_required ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test remote_native_tests::primed::negotiated_connection_keeps_unmarked_new_writers_ordinary ... ok
test remote_native_tests::primed::ordinary_native_writer_refuses_the_additive_cursor_request ... ok
test remote_native_tests::primed::prime_marker_is_canonical_and_requires_negotiated_permission ... ok
test remote_native_tests::primed::primed_writer_acknowledges_before_reading_credit_funded_cursor ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok
test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok
test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok
test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok
test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test sessions::tests::ordinary_native_writer_negotiates_queue_backpressure_without_shared_selection ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test sessions::tests::shared_writer_helper_negotiates_before_sending_its_selector ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_kernel_latency ... ignored, Exact 50MiB kernel-latency control on the perf VM in an owned network namespace.
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap

test result: ok. 146 passed; 0 failed; 20 ignored; 0 measured; 0 filtered out; finished in 34.92s

     Running tests/transport.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/transport-779de0acdb61e1cf)

running 2 tests
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok
test oversized_header_and_truncated_frame_are_rejected ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/infraternal_mesh-e13f00facaa1692a)

running 1 test
test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/default_arrow-7b090aec0682bcd2)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/properties.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/properties-983aa249d0580584)

running 14 tests
test addresses_are_unique_stable_and_not_recycled ... ok
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test directional_grants_union_and_minimal_updates ... ok
test exhausted_versions_reject_mutations_without_changing_state ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test names_versions_and_backend_status ... ok
test overlaps_are_reported_without_silent_range_changes ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.67s

     Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/rotation_time-0cf88f58b3d13cb7)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/infraternal_plugin_api-c601f0a1c341cc23)

running 29 tests
test action::tests::any_of_permissions_are_machine_readable_and_empty_authority_is_rejected ... ok
test action::tests::command_result_schema_has_required_stable_fields_and_optional_next_step ... ok
test action::tests::command_result_schema_keeps_action_data_typed_inside_stable_envelope ... ok
test action::tests::only_hidden_internal_routes_may_use_the_reserved_prefix ... ok
test action::tests::registry_keeps_plugin_ownership_and_exact_command_paths ... ok
test action::tests::registry_rejects_inconsistent_json_schemas ... ok
test action::tests::registry_rejects_missing_action_guidance_and_command_collisions ... ok
test admission::tests::memory_refusal_round_trips_without_losing_legacy_error ... ok
test component_tests::component_declarations_cannot_create_servers ... ok
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok
test present::tests::a_table_fits_its_width_by_wrapping_only_the_last_column ... ok
test present::tests::a_table_has_a_header_only_from_two_rows ... ok
test present::tests::pairs_align_values_and_wrap_under_them ... ok
test present::tests::sizes_and_ages_use_units_a_person_would_say ... ok
test present::tests::tint_wraps_text_after_padding_is_measured ... ok
test present::tests::wide_leading_columns_are_cut_with_an_ellipsis ... ok
test release_version::tests::accepts_only_worker_version_forms ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok
test server_path::tests::legacy_link_omits_the_optional_source_port ... ok
test storage::tests::cancelled_begin_never_leaves_an_open_writer_transaction ... ok
test storage::tests::writer_begin_at_1000_nodes ... ignored, Measure only on the perf VM under its benchmark lock, 31 batches of 1000 writes.
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok
test tests::machine_actions_are_declared_without_entering_human_discovery ... ok
test tests::notifications_are_declared_json_bounded_and_drained_once ... ok
test tests::operator_presentation_cannot_follow_a_private_control_action ... ok
test tests::public_dispatch_cannot_call_a_machine_control_action ... ok
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test tests::registry_routes_only_declared_actions ... ok

test result: ok. 28 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.10s

     Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/routing_review-fe80451ff0776d50)

running 2 tests
test review_topic_borrows_plain_and_owns_escaped ... ok
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/infraternal_plugin_backup-85810caed1a02b63)

running 1 test
test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/infraternal_plugin_host_facts-2cac1c439992c347)

running 14 tests
test memory::tests::custom_policy_rounds_up_and_validates_all_settings_before_use ... ok
test memory::tests::default_floor_refuses_only_below_headroom_even_above_128_sessions ... ok
test session_counts_tests::host_owned_session_counts_are_additive_and_refresh_on_request ... ok
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test tests::configured_memory_floor_refuses_with_current_host_counters ... ok
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok
test tests::static_facts_report_the_machines_hostname ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/infraternal_plugin_mesh-3681764fe0ea9465)

running 74 tests
test access_updates::tests::compact_rules_reconstruct_the_exact_config_and_preserve_server_access ... ok
test access_updates::tests::grouping_never_crosses_an_unchanged_protected_peer ... ok
test access_updates::tests::identity_changes_and_snapshots_keep_the_original_encoding ... ok
test access_updates::tests::malformed_ranges_refuse_before_any_rule_changes ... ok
test connection_state::tests::narrowing_depends_on_services_and_direction_not_the_fallback_label ... ok
test firewall::tests::already_removed_owned_table_does_not_block_component_cleanup ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::initial_apply_without_adoption_refuses_a_foreign_table ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::real_nft_ownership_atomicity_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::removal_plan_cannot_add_permissions_or_change_identity ... ok
test firewall::tests::rule_count_is_independent_of_membership_and_policy_data_is_in_sets ... ok
test iptables::tests::contiguous_open_members_use_ranges_without_opening_gaps ... ok
test iptables::tests::initiating_prefixes_cover_only_owned_intervals_even_at_family_boundaries ... ok
test iptables::tests::real_nf_tables_ownership_partial_family_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test iptables::tests::replacement_retains_established_rules_and_does_not_duplicate_hooks ... ok
test netlink::tests::connection_tuple_uses_initiating_service_and_refuses_ambiguous_selectors ... ok
test netlink::tests::host_prefix_decoder_refuses_ambiguous_or_malformed_ownership ... ok
test netlink::tests::malformed_lengths_and_padding_are_rejected ... ok
test netlink::tests::nested_attributes_roundtrip_without_copying_payloads ... ok
test netlink::tests::public_host_prefixes_decode_both_families_without_claiming_subnets ... ok
test node::rotation_tests::nf_tables_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173.
test node::rotation_tests::nft_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173.
test node::tests::chunked_snapshot_is_atomic_and_applies_1000_kernel_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN; use release for timing.
test node::tests::explicit_up_recovers_disabled_intent_before_reusing_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node::tests::externally_removed_interface_does_not_block_down ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node::tests::server_identity_cannot_change_inside_a_staged_snapshot ... ok
test node_actions::identity_upgrade_tests::ordinary_identity_reply_retains_the_legacy_shape ... ok
test node_actions::peer_page_tests::peer_pages_cover_every_peer_once_within_the_frame ... ok
test node_actions::peer_page_tests::poll_cost ... ignored, measurement
test node_actions::tests::applied_server_route_and_observed_link_survive_only_explicit_component_up ... ignored, Run inside a dedicated kernel namespace with CAP_NET_ADMIN.
test node_actions::tests::failed_cleanup_reports_stopping_and_reconnect_keeps_explicit_off ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node_actions::tests::node_actions_refuse_alternate_forms_duplicates_and_unbounded_input ... ok
test node_actions::tests::node_actions_register_without_kernel_work_and_hide_machine_calls ... ok
test node_coordination::tests::a_name_a_person_chose_is_kept ... ok
test node_coordination::tests::a_reported_hostname_names_a_host_added_by_address ... ok
test node_coordination::tests::explicit_off_waits_for_up_and_reconnect_requests_a_snapshot ... ok
test node_coordination::tests::peer_route_precedes_configuration_and_retires_with_the_node ... ok
test node_coordination::tests::placeholder_names_become_the_machines_names ... ok
test node_coordination::tests::refused_delta_recovers_immediately_and_closed_channel_retires_worker ... ok
test node_coordination::tests::refused_listener_replacement_preserves_the_current_lease ... ok
test node_coordination::tests::removed_binding_can_attach_only_after_authorized_reenrollment ... ok
test node_coordination::tests::server_listener_belongs_to_applied_enabled_worker ... ok
test node_presentation::tests::a_wide_table_stays_within_the_width ... ok
test node_presentation::tests::an_unproven_peer_gets_a_hint_that_names_it ... ok
test node_presentation::tests::legacy_status_remains_readable_and_invalid_link_is_refused ... ok
test node_presentation::tests::peers_show_units_ages_and_no_hint_when_every_path_is_direct ... ok
test node_presentation::tests::status_explains_the_observed_server_transport ... ok
test node_state::order_tests::accepted_snapshot_persistence_at_1000_peers ... ignored, Run release on the locked performance VM; public-state persistence at 1000 peers.
test node_state::order_tests::concurrent_workers_serialize_revision_check_and_publication ... ok
test node_state::order_tests::exact_legacy_binding_upgrade_preserves_the_revision_fence ... ok
test node_state::order_tests::explicit_off_can_replace_a_corrupt_public_snapshot ... ok
test node_state::order_tests::stale_and_conflicting_snapshots_cannot_replace_acknowledged_intent ... ok
test node_state::order_tests::worker_start_stop_apply_interleavings_never_decrease_acknowledged_revision ... ok
test node_state::restore_tests::public_restore_retains_large_intent_and_matches_reader ... ok
test node_state::restore_tests::public_state_restore_at_1000_peers ... ignored, Run only on the perf VM under its lock; INFRATERNAL_STATE_RESTORE_MODE=reader|slice, separate processes.
test node_state::restore_tests::restore_rejects_invalid_schema_trailing_data_and_unsafe_descriptors ... ok
test node_state::tests::explicit_off_survives_restart_and_snapshot_contains_only_public_fields ... ok
test node_state::tests::route_recording_preserves_the_legacy_accepted_state_format ... ok
test node_state::tests::unsafe_route_journal_and_existing_temporary_files_are_preserved ... ok
test node_state::tests::unsafe_snapshots_and_preexisting_temporary_files_are_not_followed_or_removed ... ok
test presence::tests::a_mesh_that_is_off_shows_nobody_online ... ok
test presence::tests::a_page_cursor_is_followed ... ok
test presence::tests::a_reading_expires_when_the_node_stops_answering ... ok
test presence::tests::a_recent_handshake_is_online_on_a_direct_path ... ok
test presence::tests::an_unreadable_node_is_no_reading ... ok
test presence::tests::no_handshake_a_stale_one_or_a_future_one_is_offline ... ok
test presence::tests::nodes_go_offline_twenty_seconds_after_the_last_good_reading ... ok
test presence::tests::receiving_a_keepalive_does_not_shorten_the_session_window ... ok
test presence::tests::replace_reports_only_visible_changes ... ok
test presence::tests::the_edge_of_the_session_window_is_still_online ... ok
test presence::tests::the_server_and_a_peer_passing_traffic_are_online ... ok
test presence::tests::traffic_proves_a_session_until_it_ends ... ok
test settings::tests::settings_objects_are_bounded_and_strict_before_storage ... ok
test store::naming_tests::a_numeric_or_invalid_address_gives_no_name ... ok
test store::naming_tests::an_address_or_hostname_gives_the_machines_name ... ok

test result: ok. 60 passed; 0 failed; 14 ignored; 0 measured; 0 filtered out; finished in 11.53s

     Running tests/access_updates.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/access_updates-53052323e562eb48)

running 8 tests
test compact_identity_support_requires_an_explicit_strict_probe ... ok
test default_tightening_at_1000_peers_fits_one_round_trip ... ok
test negotiated_access_chunk_is_accepted_by_the_strict_action_parser ... ok
test nf_tables_compact_delta_preserves_identity_and_refuses_invalid_bases ... ignored, Run in an isolated user/network namespace with CAP_NET_ADMIN.
test nft_compact_delta_preserves_identity_and_refuses_invalid_bases ... ignored, Run in an isolated user/network namespace with CAP_NET_ADMIN.
test ordinary_up_and_identity_keep_the_legacy_reply_shape ... ignored, requires an isolated user/network namespace
test range_objects_reject_unknown_duplicate_and_positional_fields ... ok
test uniform_changes_fit_one_frame_after_churn_with_distinct_kept_services ... ok

test result: ok. 5 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/authorized_local_binding.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/authorized_local_binding-b0ba79371698e19a)

running 2 tests
test nf_tables_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173.
test nft_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/canonical_host_binding.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/canonical_host_binding-e711cf3ceab9f605)

running 1 test
test enrollment_requires_canonical_host_uuid_spelling ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/configuration.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/configuration-1ba9aa134b7936fb)

running 5 tests
test chunks_fit_body_budget_and_one_peer_delta_does_not_repeat_the_snapshot ... ok
test compiled_chunks_identify_the_server_and_old_snapshots_have_no_proposal ... ok
test edition_default_is_explicit_and_build_selected ... ok
test large_valid_port_policy_is_split_without_a_port_count_cap ... ok
test port_grant_narrows_allow_opens_deny_and_preserves_direction ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.45s

     Running tests/kernel.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/kernel-b9d7e07e114cbf35)

running 6 tests
test bulk_retirement_preserves_identity_and_routes_at_1000_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test created_interface_is_marked_for_restart_adoption ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test policy_table_route_conflict_is_refused ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test real_kernel_chunked_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test real_kernel_ephemeral_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test retired_host_routes_can_be_replayed ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/naming.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/naming-d44028e80092ceee)

running 4 tests
test a_person_takes_an_automatic_name_and_the_machine_moves_aside ... ok
test a_squatter_yields_to_a_host_added_later_and_the_renames_are_audited ... ok
test a_viewer_without_host_facts_does_not_see_reported_hostnames ... ok
test the_servers_names_are_kept_for_the_server ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.26s

     Running tests/policy_enrollment_binding.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/policy_enrollment_binding-75c227a9fb54e935)

running 4 tests
test explicit_binding_preserves_identity_and_clears_removal_only_on_enrollment ... ok
test host_binding_requires_global_authority_and_existing_unrevoked_host ... ok
test noncanonical_host_binding_is_refused ... ok
test refused_enrollment_preserves_removal_and_revision ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.22s

     Running tests/policy_enrollment_identity.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/policy_enrollment_identity-69a7fa4673b70170)

running 1 test
test unbound_enrollment_public_key_is_not_host_authority ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/policy_snapshot_ordering.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/policy_snapshot_ordering-c646b4259a478ea0)

running 6 tests
test nf_tables_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173.
test nf_tables_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173.
test nf_tables_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173.
test nft_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173.
test nft_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173.
test nft_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/presence.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/presence-ea261a44979699ea)

running 2 tests
test an_unchanged_reading_is_not_announced_and_a_lost_session_goes_offline ... ok
test nodes_the_server_sees_are_online_with_their_path_and_named_by_machine ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s

     Running tests/restart_route_ownership.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/restart_route_ownership-f91cbf3125e5a193)

running 1 test
test orphan_route_retirement_preserves_foreign_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_authorized_reenrollment.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/review_authorized_reenrollment-c652db1c78c36ccf)

running 2 tests
test nf_tables_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173.
test nft_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_endpoint_transaction.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/review_endpoint_transaction-ebc100d60783edf7)

running 1 test
test refused_endpoint_persistence_preserves_kernel_endpoint ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_firewall_marker.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/review_firewall_marker-6a53d4cc2a2b41d0)

running 2 tests
test nf_tables_marker_substring_is_not_chain_ownership ... ignored, Run in a disposable user/network namespace, #173.
test nft_marker_substring_is_not_table_ownership ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_ingress_translation.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/review_ingress_translation-26a8eb974397df0c)

running 2 tests
test nf_tables_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test nft_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_local_delivery.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/review_local_delivery-85a98c2a0de72b0d)

running 2 tests
test nf_tables_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test nft_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_mesh_presence_r4.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/review_mesh_presence_r4-c892e66f54b71d7b)

running 3 tests
test a_counter_reset_discards_the_previous_peers_keepalive_classification ... ok
test a_passive_keepalive_does_not_turn_later_silence_into_a_false_offline ... ok
test a_peer_with_25_second_keepalives_stays_online_when_server_keepalives_suppress_its_sends ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_mesh_view_truth.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/review_mesh_view_truth-71d42bc9f3c8b78a)

running 6 tests
test a_hand_set_name_equal_to_the_placeholder_is_kept ... ok
test a_host_record_name_beats_another_machines_reported_hostname ... ok
test a_peer_does_not_stay_online_past_its_session_when_the_server_node_stops_answering ... ok
test a_remote_machine_cannot_be_called_server ... ok
test a_remote_machine_cannot_take_the_servers_hostname ... ok
test an_address_that_is_an_ip_never_becomes_a_name ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.30s

     Running tests/review_mesh_view_truth_r2.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/review_mesh_view_truth_r2-80a2bad78c76cb80)

running 9 tests
test a_hex_ipv4_spelling_never_becomes_a_name ... ok
test a_node_moved_aside_keeps_its_name_on_its_next_attach ... ok
test a_person_can_take_a_name_a_machine_reported ... ok
test a_viewer_without_host_facts_still_sees_distinct_names ... ok
test an_idle_healthy_peer_without_its_own_keepalive_stays_online ... ok
test evidence_a_silent_peer_expires_with_its_session_without_flapping ... ok
test evidence_migration_0026_upgrades_a_realistic_database_without_churn ... ok
test no_viewer_sees_a_remote_machine_called_server ... ok
test the_previous_release_starts_on_a_database_this_release_migrated ... ignored, deploy gate, not code: production rollback restores the database copy (#236)

test result: ok. 8 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.34s

     Running tests/review_mesh_view_truth_r3.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/review_mesh_view_truth_r3-488341cccf25afa7)

running 5 tests
test a_dead_peer_expires_at_session_end_without_inferring_a_sending_promise ... ok
test a_node_moved_aside_by_a_person_is_audited_under_that_person ... ok
test a_non_owner_cannot_confirm_the_servers_hidden_hostname ... ok
test a_scoped_manager_cannot_rename_a_node_outside_their_scope_by_taking_its_name ... ok
test an_idle_peer_that_started_its_session_stays_online_until_it_rekeys ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.20s

     Running tests/review_mesh_view_truth_r4.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/review_mesh_view_truth_r4-a73cddfca2e93724)

running 7 tests
test a_global_manager_cannot_probe_a_hidden_name_by_exhausting_move_aside_names ... ok
test a_name_chosen_while_rewound_survives_rolling_forward_and_reattaching ... ok
test a_scoped_manager_cannot_confirm_a_hidden_reported_hostname ... ok
test evidence_a_refused_move_rolls_back_inventory_audit_and_revision ... ok
test evidence_server_hostname_moves_only_with_server_rename_authority ... ok
test hidden_names_are_indistinguishable_for_every_non_global_node_manager ... ok
test rewind_reconciles_same_spelling_choices_without_freezing_untouched_names ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.66s

     Running tests/review_restart_routes.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/review_restart_routes-c0c7e8b6c3834047)

running 1 test
test restart_retires_orphan_peer_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_retire_ownership.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/review_retire_ownership-21b36c1c525f1f38)

running 7 tests
test retire_checks_every_object_before_deleting_any ... ignored, Run as root in a disposable network namespace with nft.
test retire_decides_every_object_and_leaves_a_foreign_table ... ignored, Run as root in a disposable network namespace with WireGuard and nft.
test retire_leaves_a_foreign_interface_without_failing_the_uninstall ... ignored, Run as root in a disposable network namespace.
test retire_leaves_a_marked_interface_this_installation_never_recorded ... ignored, Run as root in a disposable network namespace.
test retire_leaves_another_installations_interface_and_filter ... ignored, Run as root in a disposable network namespace with WireGuard and nft.
test retire_removes_the_interface_and_filter_this_installation_created ... ignored, Run as root in a disposable network namespace with WireGuard and nft.
test retire_with_a_record_leaves_a_foreign_interface_and_names_it ... ignored, Run as root in a disposable network namespace with WireGuard and nft.

test result: ok. 0 passed; 0 failed; 7 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_reverse_recreation.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/review_reverse_recreation-6d38c3fb56765539)

running 4 tests
test nf_tables_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.
test nf_tables_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.
test nft_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.
test nft_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.

test result: ok. 0 passed; 0 failed; 4 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_revoked_host_policy.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/review_revoked_host_policy-493675b7a79ca70f)

running 1 test
test revoked_host_is_not_retained_in_compiled_peer_policy ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s

     Running tests/review_route_inventory.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/review_route_inventory-2be052913f9e2e88)

running 2 tests
test refused_recovery_inventory_save_does_not_retire_kernel_peers_or_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test restart_preserves_unrecorded_direct_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_route_scope.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/review_route_scope-0539357dd2301f8b)

running 1 test
test restart_preserves_operator_gateway_host_route ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_shutdown_budget.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/review_shutdown_budget-1423441593702eda)

running 1 test
test shipping_mesh_down_1000_peers_finishes_within_one_second ... ignored, Run in a dedicated user/network namespace under CPUWeight=10000 with INFRATERNAL_BIN pointing to the shipping release binary.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_shutdown_restart.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/review_shutdown_restart-be3f21c60f64b594)

running 3 tests
test crash_child ... ignored, Child-only fixture for the weighted user/network namespace restart proof.
test refused_journal_retirement_keeps_stopping_until_explicit_retry ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000.
test restart_finishes_interrupted_down_at_1000_peers ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000.

test result: ok. 0 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/settings.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/settings-9e22846e3f8e68e0)

running 1 test
test default_switch_requires_owner_freshness_and_the_preview_revision ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s

     Running tests/store.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/store-6d4f7b5c8e54fbb6)

running 6 tests
test absent_discovery_preserves_the_last_known_endpoint ... ok
test attach_cancelled_at_any_await_leaves_the_store_writable ... ok
test key_replacement_preserves_identity_and_addresses_after_restart ... ok
test removed_host_cannot_restore_membership_without_authorized_enrollment ... ok
test required_server_membership_cannot_be_deleted ... ok
test scale_preview_pages_do_not_allocate_the_pair_matrix ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.16s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/infraternal_plugin_relay-47b92256ba7e458c)

running 1 test
test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/infraternal_plugin_release-aec3b44056d5d9fc)

running 8 tests
test latest::tests::cancellation_joins_verification ... ok
test latest::tests::startup_reclaims_only_owned_inactive_private_metadata ... ok
test service::tests::api_setting_requires_owner_and_current_fresh_session ... ok
test service::tests::authority_is_rechecked_after_the_setting_write_before_commit ... ok
test service::tests::channel_reads_at_fifty_concurrent_callers ... ignored, run alone under CPUWeight=10000; measures SQLite action overhead, not terminal or full authenticated socket latency
test service::tests::default_stable_refuses_silent_edge_and_persists_explicit_opt_in ... ok
test service::tests::disabled_feature_starts_no_lookup_and_rejects_settings ... ok
test service::tests::object_input_rejects_duplicates_unknown_fields_and_alternate_representations ... ok

test result: ok. 7 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.70s

     Running tests/review_pool.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/review_pool-33b687260e254fc2)

running 1 test
test pending_channel_writers_preserve_authority_read_capacity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.57s

     Running tests/review_restart.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/review_restart-ca9f44eb8cb73b10)

running 4 tests
test lookup_creates_private_staging_under_owner_restrictive_umask ... ok
test partial_metadata_restart_child ... ignored, subprocess helper for metadata restart verification
test restarted_latest_reclaims_metadata_after_process_stop ... ok
test restricted_umask_lookup_child ... ignored, subprocess helper for restricted-umask lookup verification

test result: ok. 2 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/infraternal_plugin_remote-9d5cf8bf6727606f)

running 113 tests
test inventory::authority_tests::inventory_events_keep_the_subscription_generation ... ok
test inventory::authority_tests::revocation_cancels_a_result_waiting_for_socket_credit ... ok
test inventory::tests::inventory_descriptor_is_valid_for_server_startup ... ok
test inventory::tests::list_input_refuses_parallel_authority_and_noncanonical_cursors ... ok
test remote_bindings::receive_cost_tests::repeated_mesh_ingress_cost_at_one_thousand_retained_histories ... ignored, Component timing on the authorized perf VM under its fair lock; not transport acceptance.
test remote_bindings::tests::a_copy_poll_bounds_work_before_servicing_receive ... ok
test remote_bindings::tests::a_lease_added_while_waiting_is_polled_without_another_primary_datagram ... ok
test remote_bindings::tests::a_negotiated_peer_copies_output_without_a_worker_and_off_cancels_it ... ok
test remote_bindings::tests::admitted_path_proofs_survive_mesh_retirement_and_old_key_lease_drop ... ok
test remote_bindings::tests::alias_retirement_restores_the_previous_reply_socket ... ok
test remote_bindings::tests::alternating_fresh_hints_cannot_amplify_retained_ciphertext ... ok
test remote_bindings::tests::an_encrypted_duplicate_cannot_move_the_reply_route ... ok
test remote_bindings::tests::backup_withdrawal_reconciles_idle_peers_without_canceling_another_return ... ok
test remote_bindings::tests::dropping_one_peer_removes_alternative_work_while_another_peer_lives ... ok
test remote_bindings::tests::enrolled_dual_replies_preserve_primary_and_mesh_sources ... ok
test remote_bindings::tests::lease_installed_during_a_pending_poll_cannot_lose_the_receive_wakeup ... ok
test remote_bindings::tests::legacy_enrolled_return_replay_is_bounded_and_consumed_once ... ok
test remote_bindings::tests::negotiated_enrolled_return_replay_is_bounded_and_consumed_once ... ok
test remote_bindings::tests::peer_route_preserves_the_logical_tuple_and_replays_on_return ... ok
test remote_bindings::tests::replies_follow_the_last_heard_address_and_leases_retire_their_routes ... ok
test remote_bindings::tests::retiring_mesh_lease_cancels_only_queued_alternative_reply ... ok
test remote_bindings::tests::retiring_one_route_preserves_another_peers_enrolled_return ... ok
test remote_bindings::tests::unknown_mesh_reply_waits_for_duplicate_coordinates_and_off_retires_it ... ok
test remote_bindings::tests::wildcard_reply_uses_the_destination_of_the_latest_peer_packet ... ok
test remote_path_copies::tests::arming_after_pending_wakes_the_owned_endpoint_and_clear_drops_it ... ok
test remote_path_copies::tests::cancelling_retired_work_keeps_the_next_send_receive_wakeup ... ok
test remote_path_proof::tests::fixed_header_mac_matches_independent_sha256_vectors ... ok
test remote_path_proof::tests::mixed_aggregation_preserves_all_neighboring_quic_bytes ... ok
test remote_path_proof::tests::only_current_session_response_answers_a_sent_probe ... ok
test remote_path_socket::tests::a_delayed_probe_waiter_keeps_first_send_clock_after_ack_only_traffic ... ok
test remote_path_socket::tests::a_probe_request_latches_before_its_waiter_is_polled ... ok
test remote_path_socket::tests::an_old_ack_only_send_cannot_complete_probe_emission ... ok
test remote_path_socket::tests::an_old_ack_only_send_does_not_start_a_backpressured_probe_deadline ... ignored, timed watchdog ordering proof; run under the perf VM benchmark lock
test remote_path_socket::tests::an_unrelated_reply_cannot_discard_ciphertext_needed_after_a_cut ... ok
test remote_path_socket::tests::backpressure_never_starts_or_replaces_the_probe_send_clock ... ok
test remote_path_socket::tests::cancelling_old_requests_cannot_clear_a_new_probe_generation ... ok
test remote_path_socket::tests::dedicated_receive_preserves_segmented_sends_in_single_datagram_buffers ... ok
test remote_path_socket::tests::exporting_path_keys_never_holds_the_receive_proof_lock ... ok
test remote_path_socket::tests::mesh_route_maps_only_the_trusted_tuple_and_resends_unanswered_datagrams ... ok
test remote_path_socket::tests::negotiated_copies_use_the_enrolled_socket_and_retire_on_return ... ok
test remote_path_socket::tests::segmented_replay_evicts_enough_old_datagrams_to_keep_the_byte_bound ... ok
test remote_path_socket::tests::send_gate_releases_only_one_successful_transmission ... ok
test remote_peer_routes::bench::complete_tag_lookup_at_1000_peers ... ignored, Measure only on the perf VM under its benchmark lock.
test remote_peer_routes::bench::routing_lookup_at_1000_nodes ... ignored, Measure only on the perf VM under its benchmark lock.
test remote_peer_routes::copy_scan_tests::copy_poll_cost_at_one_thousand_retained_histories ... ignored, 31 bookkeeping samples per profile on the authorized perf VM under its fair lock; not transport acceptance.
test remote_peer_routes::copy_scan_tests::history_mutation_after_an_idle_poll_still_sends_every_due_datagram ... ok
test remote_peer_routes::tests::alternative_admission_never_evicts_pending_enrolled_return ... ok
test remote_peer_routes::tests::alternative_backpressure_keeps_one_copy_and_hints_preserve_its_deadline ... ok
test remote_peer_routes::tests::alternative_queue_shares_bounds_and_never_becomes_return_history ... ok
test remote_peer_routes::tests::ciphertext_history_at_1000_peers ... ignored, Measure only on the perf VM: 31 batches of 20000 fresh/duplicate pairs across 1000 peers.
test remote_peer_routes::tests::ciphertext_history_normalizes_gro_batches_and_stays_bounded ... ok
test remote_peer_routes::tests::completed_backup_copies_cannot_be_replayed_as_a_second_return_burst ... ok
test remote_peer_routes::tests::completed_return_entries_stay_consumed_when_new_mesh_history_arrives ... ok
test remote_peer_routes::tests::output_evicting_the_oldest_copy_still_copies_one_bounded_batch ... ok
test remote_peer_routes::tests::replay_is_bounded_for_large_segmented_transmits ... ok
test remote_peer_routes::tests::retiring_an_old_lease_cannot_remove_a_reused_tuple ... ok
test remote_peer_routes::tests::shared_copy_clock_preserves_each_datagrams_deadline ... ok
test remote_peer_routes::tests::unsuccessful_backups_preserve_originals_for_explicit_recovery ... ok
test remote_quic::design_scale_review::authenticated_mesh_health_at_design_scale ... ignored, Perf VM only: distinct physical tuple health at 1000 mTLS connections.
test remote_quic::design_scale_review::authenticated_mesh_health_at_design_scale_100ms ... ignored, Perf VM only: authenticated physical health at 100ms cadence.
test remote_quic::design_scale_review::review_fast_mesh_health_at_design_scale ... ignored, Perf VM only: fast detector at 1000 mTLS connections.
test remote_quic::design_scale_review::review_production_adaptive_health_at_design_scale ... ignored, Perf VM only: production adaptive detector at 1000 mTLS connections.
test remote_quic::mtu_tests::both_directions_keep_a_mesh_safe_payload_after_discovery ... ok
test remote_quic::probe_tests::a_queued_probe_cannot_expire_before_the_socket_emits_it ... ok
test remote_quic::probe_tests::copy_first_ack_only_probes_keep_authenticated_mesh_guard_live ... ignored, Physical 15ms/30ms guard comparison on the perf VM under its benchmark lock.
test remote_quic::probe_tests::copy_first_ack_only_requested_ack_delay_five_ms_comparison ... ignored, ACK-delay hypothesis comparison on the quiet perf VM under its benchmark lock.
test remote_quic::probe_tests::copy_first_real_mesh_originals_do_not_strand_the_authenticated_mesh_guard ... ok
test remote_quic::probe_tests::enrolled_copy_replies_cannot_keep_a_dead_mesh_path_alive ... ok
test remote_quic::probe_tests::healthy_path_proofs_keep_the_configured_polling_interval ... ok
test remote_quic::probe_tests::lost_path_proof_spends_its_reserved_retry_margin ... ok
test remote_quic::probe_tests::review_invalid_mesh_packets_cannot_borrow_enrolled_authentication ... ignored, Perf VM only: real socket scheduling and path-response deadline.
test remote_quic::tests::acknowledged_idle_survives_and_replayed_packets_cannot_mask_failure ... ok
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test remote_quic::tests::mesh_liveness_keeps_authentication_and_refuses_invalid_intervals ... ok
test remote_quic::tests::one_way_authenticated_output_keeps_the_path_fresh ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_renewal::tests::credential_snapshot_does_not_block_async_reconnect ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test remote_tls::tests::outgoing_tcp_detects_a_vanished_peer_without_application_traffic ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test runtime_lock::tests::a_live_legacy_runtime_cannot_publish_an_unheld_lifetime_file ... ok
test runtime_lock::tests::cleanup_admission_prevents_starting_even_if_runtime_lock_was_removed ... ok
test runtime_lock::tests::dump_datagrams_split_exactly ... ok
test runtime_lock::tests::dump_records_accept_only_known_shapes ... ok
test runtime_lock::tests::foreign_inode_twin_inner ... ignored, runs inside the namespace prepared by the foreign-inode test
test runtime_lock::tests::internal_dispatch_checks_exact_argument_counts ... 2
ok
test runtime_lock::tests::internal_dispatch_reads_only_the_normal_command_name ... ok
test runtime_lock::tests::legacy_bound_endpoint_on_a_split_device_filesystem_is_kept ... 
running 1 test
test runtime_lock::tests::split_device_inner ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 112 filtered out; finished in 0.00s

ok
test runtime_lock::tests::legacy_inspection_finds_a_real_bound_socket ... ok
test runtime_lock::tests::legacy_inspection_is_independent_of_the_bound_name ... ok
test runtime_lock::tests::lifetime_contention_preserves_would_block ... ok
test runtime_lock::tests::lifetime_precedes_bind_and_survives_until_last_description_closes ... ok
test runtime_lock::tests::lock_links_and_replacements_are_refused ... ok
test runtime_lock::tests::managed_start_refuses_another_host_and_an_unfinished_receipt ... ok
test runtime_lock::tests::session_inspection_finds_bound_endpoints_by_identity ... ok
test runtime_lock::tests::split_device_inner ... ignored, runs inside the namespace prepared by the split-device test
test runtime_lock::tests::stale_session_endpoint_is_not_held_live_by_a_foreign_inode_twin ... 
running 1 test
test runtime_lock::tests::foreign_inode_twin_inner ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 112 filtered out; finished in 0.00s

ok
test runtime_lock::tests::unavailable_lock_support_does_not_claim_a_live_holder ... ok
test uninstall::tests::a_failed_kernel_check_stops_cleanup_before_the_service ... ok
test uninstall::tests::accepted_handoff_runs_on_a_thread_without_an_async_runtime ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test uninstall::tests::file_removal_keeps_what_setup_did_not_create ... ok
test uninstall::tests::manual_uninstall_refuses_another_hosts_installation ... ok
test uninstall::tests::replies_name_the_objects_left_as_valid_json ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test uninstall::tests::review_failed_launcher_leaves_no_plan ... ok
test uninstall::tests::review_planted_plan_is_never_followed ... ok
test uninstall::tests::uninstall_and_setup_exclude_each_other ... ok
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok

test result: ok. 98 passed; 0 failed; 15 ignored; 0 measured; 0 filtered out; finished in 14.77s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/infraternal_plugin_ssh-9c4623776f228fdb)

running 46 tests
test auth_evidence::tests::later_local_key_receipt_supersedes_an_earlier_banner ... ok
test auth_evidence::tests::partial_and_malformed_receipts_are_not_method_evidence ... ok
test auth_evidence::tests::receipt_is_identical_at_every_chunk_boundary ... ok
test auth_evidence::tests::selected_local_authentication_diagnostics_keep_method_at_every_boundary ... ok
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok
test auth_order::tests::only_exact_generated_read_only_checks_can_choose_credentials ... ok
test bootstrap::proof_tests::failed_published_facts_clean_only_the_private_probe_and_never_commit ... ok
test bootstrap::proof_tests::published_proofs_start_together_and_commit_requires_both ... ok
test bootstrap::proof_tests::review_stopped_commit_channel_finishes_the_private_probe ... ok
test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test duplex::tests::closed_receipt_channel_is_reported_as_unreachable ... ok
test duplex::tests::duplex_preserves_binary_bytes_in_both_directions ... ok
test install::tests::compaction_drops_only_comment_lines_and_indentation ... ok
test install::tests::embedded_setup_programs_have_no_constructs_compaction_would_change ... ok
test install::tests::transfer_caps_accept_only_the_fixed_record ... ok
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok
test model::failure_serialization_tests::uuid_reference_uses_the_outcome_specific_wire_key ... ok
test model::failure_serialization_tests::wire_format_is_exact_and_failure_stays_small ... ok
test payload::tests::concurrent_adds_share_the_cached_digest_allocation ... ok
test payload::tests::payload_hash_cache_at_1600_adds ... ignored, #190 public payload hash/cache measurements on the locked perf VM only
test payload::tests::replacement_and_removal_never_reuse_a_path_name_digest ... ok
test payload::tests::same_size_in_place_edits_with_restored_mtime_invalidate_the_digest ... ok
test payload::tests::settings_changes_keep_at_most_four_entries ... ok
test payload_encoding::tests::binary_replacement_never_reuses_the_previous_encoding ... ok
test payload_encoding::tests::gzip_roundtrip_and_repeated_adds_share_one_encoding ... ok
test payload_encoding::tests::small_payloads_retain_raw_streaming ... ok
test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test prompt_image::tests::helper_identity_refuses_in_place_and_path_replacement ... ok
test session_bridge::tests::failed_dispatcher_does_not_publish_a_session ... ok
test session_bridge::tests::publication_and_dispatcher_greeting_share_the_first_write ... ok
test session_bridge::tests::publication_prefix_preserves_every_dispatcher_byte_across_reads ... ok
test setup::tests::exhausted_setup_failure_retains_reason_without_offering_retry ... ok
test setup::tests::host_status_outlives_its_subscriber_and_keeps_exact_identity ... ok
test socket_connector::tests::connected_socket_has_nodelay_before_any_application_bytes ... ok
test socket_connector::tests::descriptor_delivery_keeps_the_exact_peer_after_helper_copy_closes ... ok
test socket_connector::tests::invalid_endpoint_cannot_send_a_descriptor ... ok
test stdio::tests::pipes_preserve_bytes_and_do_not_escape_into_child_exec ... ok
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok

test result: ok. 44 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.26s

     Running tests/already_added_breakit.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/already_added_breakit-99b38edbed8cc7cb)

running 1 test
test a_host_key_challenge_never_serializes_as_a_host_id ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/auth_order-7f1c9d76494c5086)

running 11 tests
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test automatic_checked_channel_selects_bridge_after_read_only_authentication ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test manual_hosts_try_available_methods_without_a_separate_none_refusal ... ok
test manual_method_trust_refusal_never_loads_later_credentials ... ok
test only_exhausted_auth_returns_typed_choose_method ... ok
test ownership_check_fallback_repeats_only_the_allowlisted_read_only_command ... ok
test ownership_checks_authenticate_once_without_replaying_a_different_check ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok

test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/build_removal-36fc813e5dfe0bb4)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.61s

     Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/concurrency-1637a17738b74cc3)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test component_off_retires_a_real_native_helper ... ok
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/config_isolation-5136cd71a92e1d23)

running 2 tests
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok
test synthetic_master_socket_is_private_at_creation ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/credentials-3016d009da101052)

running 4 tests
test credential_helper_refuses_host_trust_and_permission_prompts ... ok
test kernel_running_helper_is_materialized_in_its_private_scope ... ok
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok
test password_socket_refuses_an_unrelated_same_user_process ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.50s

     Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/diagnostics-8016ef45d5daacbd)

running 12 tests
test bootstrap_status_mapping_covers_each_step_and_approved_mode ... ok
test control_probe_statuses_preserve_actionable_setup_messages ... ok
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok
test engine_failures_keep_their_ssh_boundary_without_remote_bytes ... ok
test every_failed_step_names_the_step_and_a_next_action ... ok
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok
test failure_diagnostics_distinguish_auth_trust_transport_and_channel_without_raw_text ... ok
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok
test script_status_diagnostics_are_honest_for_all_nonzero_codes ... ok
test status_mapping_preserves_authentication_and_missing_payload_classification ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/event_metadata-735e17f4e6c1e8dc)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/foreground-0f3aada5376df028)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/host_trust-f2c4b08665836335)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/install-41cb897cde3a5ed0)

running 95 tests
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test active_transaction_is_live_between_ssh_setup_commands ... ok
test breakit2_interrupted_lock_creation_allows_cleanup_and_retry ... ok
test breakit2_rollback_preserves_foreign_launcher_new ... ok
test breakit2_rollback_preserves_foreign_unit_new ... ok
test breakit2_stage_refuses_parent_that_cannot_be_rolled_back ... ok
test buffering_setup_reader_receives_no_payload_until_selection ... ok
test checked_staging_survives_a_buffering_payload_reader_and_reuses_the_cache ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test command_failure_names_upload_join_install_and_start_separately ... ok
test commit_signal_retains_journal_until_proof_and_on_cancel ... ok
test compound_activation_and_start_failures_keep_exact_step_and_rollback ... ok
test compound_join_failure_preserves_the_original_status_and_boundary ... ok
test compound_restaging_refuses_a_foreign_journal_before_upload ... ok
test compound_setup_keeps_owned_rollback_and_linger_warning ... ok
test compressed_stage_roundtrips_and_rejects_corruption_before_execution ... ok
test concurrent_attempts_cannot_replace_or_clean_each_others_transaction ... ok
test control_cleanup_never_follows_a_socket_symlink_or_removes_regular_data ... ok
test crash_mid_install_can_roll_back_and_retry ... ok
test declared_transfer_refuses_a_different_selection_or_a_named_refusal ... ok
test declared_transfer_sends_the_payload_before_any_selection_receipt ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test duplex_check_refuses_named_failures_and_oversized_records_before_staging ... ok
test earlier_attempt_classification_preserves_status_boundary_and_authentication ... ok
test earlier_attempt_records_reject_suffixes_truncation_and_unbounded_counts ... ok
test earlier_binary_cache_is_refreshed_before_owned_recovery ... ok
test earlier_control_socket_receipt_recovers_before_a_new_setup ... ok
test early_staging_preserves_canonical_foreign_root_refusal ... ok
test enrollment_process_exit_71_is_not_reported_as_directory_refusal ... ok
test every_setup_command_fits_one_kernel_argument_in_both_modes ... ok
test facts_timeout_retires_stale_plugin_control_socket_before_retry ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test foreign_data_refusal_retains_exit_status_and_actionable_directory ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test framed_join_refusal_keeps_status_separate_from_upload ... ok
test framed_receipts_preserve_upload_failures_and_reject_extra_output ... ok
test framed_upload_keeps_invitation_after_verified_raw_and_compressed_payloads ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test full_payload_restaging_preserves_the_running_session_build ... ok
test full_stage_frees_payload_before_allocating_a_cleanup_receipt ... ok
test installed_infraternal_agent_always_restarts_without_start_limit ... ok
test interrupted_acquisition_cleanup_receipt_can_resume ... ok
test interrupted_control_cleanup_is_resumed_only_by_its_original_attempt ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test known_failed_setup_finishes_without_a_second_confirmation ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test live_setup_retry_preserves_the_bridge_and_host_identity_state ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test missing_payload_preserves_the_bootstrap_binary_remedy ... ok
test negotiated_retry_reuses_only_a_verified_cache_after_activation_refusal ... ok
test negotiated_transfer_delivers_the_invitation_after_a_buffering_head ... ok
test one_command_channel_carries_check_verified_upload_and_bridge_bytes ... ok
test optional_session_payload_is_architecture_scoped_and_refuses_symlinks ... ok
test partial_full_upload_rebridges_from_a_verified_image ... ok
test payload_reuse_never_adopts_a_foreign_cache_directory ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test reported_cache_digest_selects_reuse_without_sending_payload ... ok
test restart_recovers_partial_stage_retirement ... ok
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test retry_resends_payload_when_cache_content_changes ... ok
test retry_reuses_verified_payload_after_owned_rollback ... ok
test review_inode_reuse_after_diagnostics_preserves_live_replacement ... original 4987476 samples [4987565, 4987566, 4987567, 4987568, 4987569, 4987570, 4987571, 4987573]
FAILED
test review_interrupted_transaction_receipt_allows_owned_cleanup ... ok
test review_live_relative_control_socket_preserves_its_receipt ... ok
test review_restart_recovers_cleanup_after_base_retirement ... ok
test review_restart_recovers_cleanup_after_owner_retirement ... ok
test review_unrelated_user_relative_socket_does_not_block_stale_cleanup ... ignored, requires sudo -n to create an isolated listener as uid 65534
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok
test session_restaging_uses_one_compound_command ... ok
test setup_receipts_require_exact_order_and_preserve_failure_boundaries ... ok
test setup_transaction_holds_a_live_lock_between_shell_commands ... ok
test staged_shell_bridge_keeps_protocol_bytes_and_releases_setup_guard ... ok
test stale_previous_attempt_socket_can_be_retired_without_manual_cleanup ... ok
test start_fresh_resumes_the_same_attempt_after_owner_confirmation ... ok
test stopped_control_socket_modes_from_service_manager_are_recoverable ... ok
test streamed_digest_refuses_a_short_file_or_a_changed_stream_before_launch ... ok
test streaming::decoded_image_and_hash_advance_before_the_transfer_tail_is_released ... ok
test successful_stage_releases_the_parent_lock_from_its_lease_child ... ok
test turning_off_paused_host_provisioning_preserves_earlier_leftovers ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok

failures:

---- review_inode_reuse_after_diagnostics_preserves_live_replacement stdout ----

thread 'review_inode_reuse_after_diagnostics_preserves_live_replacement' (3314669) panicked at crates/plugins/ssh/tests/install.rs:3483:5:
assertion `left == right` failed: fixture could not reproduce inode reuse in 256 allocations
  left: [97, 98, 115, 101, 110, 116, 10]
 right: [114, 101, 117, 115, 101, 100, 10]
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace


failures:
    review_inode_reuse_after_diagnostics_preserves_live_replacement

test result: FAILED. 93 passed; 1 failed; 1 ignored; 0 measured; 0 filtered out; finished in 42.30s

error: test failed, to rerun pass `-p infraternal-plugin-ssh --test install`
(test: 371s)

==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/review-query-replies-r2/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   ├── infraternal-fuzz v0.1.0
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0 (*)
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   ├── infraternal-server v0.1.0 (*)
         │   │   │   │   └── infraternal-session v0.1.0
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-mesh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   └── infraternal-plugin-mesh v0.1.0
         │   │   │       ├── infraternal v0.1.0 (*)
         │   │   │       ├── infraternal-agent v0.1.0 (*)
         │   │   │       ├── infraternal-fuzz v0.1.0 (*)
         │   │   │       └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-backup v0.1.0
         │   │   │   └── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   ├── infraternal-plugin-relay v0.1.0
         │   │   │   └── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-release v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   ├── infraternal-plugin-release v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/review-query-replies-r2/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   ├── infraternal-server v0.1.0 (*)
         │   └── infraternal-session v0.1.0
         ├── infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-mesh v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   └── infraternal-plugin-mesh v0.1.0
         │   │   │   │       ├── infraternal v0.1.0 (*)
         │   │   │   │       ├── infraternal-agent v0.1.0 (*)
         │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │       └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-backup v0.1.0
         │   │   │   │   └── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-relay v0.1.0
         │   │   │   │   └── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-release v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   ├── infraternal-plugin-release v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   ├── infraternal-plugin-ssh v0.1.0
                     │   │   ├── infraternal v0.1.0 (*)
                     │   │   ├── infraternal-fuzz v0.1.0 (*)
                     │   │   ├── infraternal-server v0.1.0
                     │   │   │   ├── infraternal v0.1.0 (*)
                     │   │   │   └── infraternal-fuzz v0.1.0 (*)
                     │   │   └── infraternal-session v0.1.0
                     │   └── infraternal-server v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   ├── infraternal-fuzz v0.1.0 (*)
                     │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/review-query-replies-r2/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   ├── infraternal-server v0.1.0 (*)
     │   │   │       │   └── infraternal-session v0.1.0
     │   │   │       ├── infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │       ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │       ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-backup v0.1.0
     │   │   │       │   │   │   │   └── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-relay v0.1.0
     │   │   │       │   │   │   │   └── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-release v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-release v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── infraternal-plugin-remote v0.1.0 (*)
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.46
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.15
             └── rustls v0.23.46 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   ├── infraternal-fuzz v0.1.0 (*)
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   │   ├── infraternal-server v0.1.0
     │       │       │   │   │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   │   └── infraternal-session v0.1.0
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-mesh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │       └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-backup v0.1.0
     │       │       │   │   │   └── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-relay v0.1.0
     │       │       │   │   │   └── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-release v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-shim v0.1.0
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │       │       │   │   ├── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-session v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── infraternal-plugin-remote v0.1.0 (*)
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.46
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.15
     │               └── rustls v0.23.46 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-mesh v0.1.0 (*)
         ├── infraternal-plugin-release v0.1.0 (*)
         ├── infraternal-plugin-remote v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── (dev) infraternal-status v0.1.0
         │   └── infraternal v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/review-query-replies-r2/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   │   ├── infraternal-server v0.1.0
     │       │   │   │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   │   └── infraternal-session v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-mesh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   └── infraternal-plugin-mesh v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       ├── infraternal-agent v0.1.0 (*)
     │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │       └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-backup v0.1.0
     │       │   │   │   └── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-relay v0.1.0
     │       │   │   │   └── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-release v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   ├── infraternal-plugin-release v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   ├── hyper v1.11.1
         │   │   ├── axum v0.8.9
         │   │   │   ├── infraternal-fuzz v0.1.0
         │   │   │   └── infraternal-server v0.1.0
         │   │   │       ├── infraternal v0.1.0
         │   │   │       └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── axum-server v0.8.0
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── hyper-util v0.1.21
         │   │   │   ├── axum v0.8.9 (*)
         │   │   │   ├── axum-server v0.8.0 (*)
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   │   ├── infraternal v0.1.0 (*)
         │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal v0.1.0 (*)
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   │   ├── infraternal-server v0.1.0 (*)
             │   │   │   │   └── infraternal-session v0.1.0
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-mesh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   └── infraternal-plugin-mesh v0.1.0
             │   │   │       ├── infraternal v0.1.0 (*)
             │   │   │       ├── infraternal-agent v0.1.0 (*)
             │   │   │       ├── infraternal-fuzz v0.1.0 (*)
             │   │   │       └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-backup v0.1.0
             │   │   │   └── infraternal v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   │   ├── infraternal-plugin-relay v0.1.0
             │   │   │   └── infraternal v0.1.0 (*)
             │   │   ├── infraternal-plugin-release v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   ├── infraternal-plugin-release v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/review-query-replies-r2/Cargo.lock:199:1
    │  
199 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
200 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   ├── infraternal-fuzz v0.1.0 (*)
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   │   ├── infraternal-server v0.1.0
          │       │       │   │   │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   │   └── infraternal-session v0.1.0
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-mesh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │       └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-backup v0.1.0
          │       │       │   │   │   └── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-relay v0.1.0
          │       │       │   │   │   └── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-release v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-shim v0.1.0
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
          │       │       │   │   ├── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-session v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── infraternal-plugin-remote v0.1.0 (*)
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.46
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.15
          │               └── rustls v0.23.46 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-mesh v0.1.0 (*)
              ├── infraternal-plugin-release v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── (dev) infraternal-status v0.1.0
              │   └── infraternal v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/review-query-replies-r2/Cargo.lock:201:1
    │  
201 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
202 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   ├── infraternal-plugin-ssh v0.1.0
              │   │   ├── infraternal v0.1.0 (*)
              │   │   ├── infraternal-fuzz v0.1.0 (*)
              │   │   ├── infraternal-server v0.1.0
              │   │   │   ├── infraternal v0.1.0 (*)
              │   │   │   └── infraternal-fuzz v0.1.0 (*)
              │   │   └── infraternal-session v0.1.0
              │   └── infraternal-server v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   ├── infraternal-fuzz v0.1.0 (*)
              │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/review-query-replies-r2/Cargo.lock:204:1
    │  
204 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
205 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/review-query-replies-r2/Cargo.lock:206:1
    │  
206 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
207 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
208 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │   └── infraternal-session v0.1.0
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │       ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │       ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │       │   │   │   │   └── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │       │   │   │   │   └── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-release v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   ├── infraternal-plugin-ssh v0.1.0
      │               │   │   ├── infraternal v0.1.0 (*)
      │               │   │   ├── infraternal-fuzz v0.1.0 (*)
      │               │   │   ├── infraternal-server v0.1.0
      │               │   │   │   ├── infraternal v0.1.0 (*)
      │               │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │               │   │   └── infraternal-session v0.1.0
      │               │   └── infraternal-server v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   ├── infraternal-fuzz v0.1.0 (*)
      │               │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │       ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │       └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-backup v0.1.0
      │   │       │       │   │   │   └── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-relay v0.1.0
      │   │       │       │   │   │   └── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-release v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-shim v0.1.0
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-session v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.46
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.15
      │   │               └── rustls v0.23.46 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── (dev) infraternal-status v0.1.0
      │       │   └── infraternal v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/review-query-replies-r2/Cargo.lock:250:1
    │  
250 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
251 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   ├── infraternal-server v0.1.0 (*)
      │           │   │   └── infraternal-session v0.1.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── infraternal-shim v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   ├── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-session v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-mesh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │       │   ├── infraternal-plugin-backup v0.1.0
      │       │   │   └── infraternal v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   ├── infraternal-plugin-relay v0.1.0
      │       │   │   └── infraternal v0.1.0 (*)
      │       │   ├── infraternal-plugin-release v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-release v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   │   ├── infraternal-server v0.1.0
      │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │       │   │   └── infraternal-session v0.1.0
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-release v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       └── infraternal-shim v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0 (*)
      │           ├── infraternal-fuzz v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── infraternal-plugin-ssh v0.1.0 (*)
      │           ├── infraternal-server v0.1.0 (*)
      │           └── infraternal-session v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-mesh v0.1.0
      │   │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.46
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.15
      │       │   │           └── rustls v0.23.46 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-shim v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-release v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── (dev) infraternal-status v0.1.0
      │       │   │       │   └── infraternal v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.46 (*)
      │       │           └── rustls-webpki v0.103.15 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.46 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.2
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── (dev) infraternal v0.1.0 (*)
      │       ├── (dev) infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-remote v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/review-query-replies-r2/Cargo.lock:253:1
    │  
253 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
254 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   ├── infraternal-server v0.1.0
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   └── infraternal-session v0.1.0
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │       ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-backup v0.1.0
      │       │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-relay v0.1.0
      │       │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-release v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/review-query-replies-r2/Cargo.lock:256:1
    │  
256 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
257 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   ├── infraternal v0.1.0 (*)
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   ├── infraternal-server v0.1.0
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-session v0.1.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-fuzz v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-release v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   ├── infraternal-fuzz v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/review-query-replies-r2/Cargo.lock:258:1
    │  
258 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
259 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   ├── infraternal v0.1.0 (*)
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal v0.1.0 (*)
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   ├── infraternal-plugin-ssh v0.1.0
          │       │   │   ├── infraternal v0.1.0 (*)
          │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │   │   ├── infraternal-server v0.1.0
          │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │   │   └── infraternal-session v0.1.0
          │       │   └── infraternal-server v0.1.0 (*)
          │       ├── infraternal-fuzz v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-backup v0.1.0
          │   │   │   │   └── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-relay v0.1.0
          │   │   │   │   └── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-release v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   ├── infraternal-plugin-release v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   ├── infraternal-fuzz v0.1.0 (*)
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/review-query-replies-r2/Cargo.lock:316:1
    │  
316 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
317 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── infraternal-plugin-remote v0.1.0
          │   ├── infraternal v0.1.0
          │   ├── infraternal-agent v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0
          │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-server v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   └── infraternal-session v0.1.0
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── infraternal-fuzz v0.1.0 (*)
          │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.46
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.15
              └── rustls v0.23.46 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   ├── infraternal-plugin-ssh v0.1.0
      │               │       │   │   ├── infraternal v0.1.0 (*)
      │               │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   │   ├── infraternal-server v0.1.0
      │               │       │   │   │   ├── infraternal v0.1.0 (*)
      │               │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │               │       │   │   └── infraternal-session v0.1.0
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-release v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               ├── infraternal v0.1.0 (*)
      │               └── infraternal-shim v0.1.0
      │                   ├── infraternal v0.1.0 (*)
      │                   ├── infraternal-agent v0.1.0 (*)
      │                   ├── infraternal-fuzz v0.1.0 (*)
      │                   ├── infraternal-plugin-remote v0.1.0 (*)
      │                   ├── infraternal-plugin-ssh v0.1.0 (*)
      │                   ├── infraternal-server v0.1.0 (*)
      │                   └── infraternal-session v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.2
      │           ├── axum v0.8.9
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   ├── hyper v1.11.1
      │           │   │   ├── axum v0.8.9 (*)
      │           │   │   ├── axum-server v0.8.0 (*)
      │           │   │   ├── hyper-util v0.1.21
      │           │   │   │   ├── axum v0.8.9 (*)
      │           │   │   │   ├── axum-server v0.8.0 (*)
      │           │   │   │   ├── infraternal v0.1.0 (*)
      │           │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── (dev) infraternal v0.1.0 (*)
      │           ├── (dev) infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-mesh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-backup v0.1.0
      │           │   │   └── infraternal v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-relay v0.1.0
      │           │   │   └── infraternal v0.1.0 (*)
      │           │   ├── infraternal-plugin-release v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-release v0.1.0 (*)
      │           ├── (dev) infraternal-plugin-remote v0.1.0 (*)
      │           ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.2 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.2 (*)
      ├── tokio v1.53.2 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok
(cargo-deny: 2s)

==> static builds
x86_64-unknown-linux-musl: exact define removed; build directories remapped; explicit paths preserved; target override refused
aarch64-unknown-linux-musl: exact define removed; build directories remapped; explicit paths preserved; target override refused
x86_64 OpenSSL source: AVX-512 GCM dispatch removed idempotently
native compiler metadata: path independent; platform/date retained; unexpected syntax refused
Rust remapping: differently named checkout roots produce identical stripped artifacts
.
----------------------------------------------------------------------
Ran 1 test in 0.002s

OK
    Finished `release` profile [optimized] target(s) in 1.08s
AES-128-GCM NIST vector encrypt/decrypt passed
production trust: PASS (staging-trust authority absent)
/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 21215664 bytes; cap: 21215664 bytes; delta: +0 bytes
key memory: x86_64-unknown-linux-musl; memlock=8388608 bytes
Key memory initialization=1; locked pages and dump exclusion enabled
    Finished `release` profile [optimized] target(s) in 1.00s
production trust: PASS (staging-trust authority absent)
/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/aarch64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB executable, ARM aarch64, version 1 (SYSV), statically linked, stripped
PT_INTERP: absent; size: 19408192 bytes; cap: 19408192 bytes; delta: +0 bytes
key memory: aarch64-unknown-linux-musl runtime not checked (host x86_64; native execution required)
x86_64-unknown-linux-musl: exact 21215664-byte cap PASS; 21215665 bytes rejected PASS; smaller artifact requires ratchet PASS
aarch64-unknown-linux-musl: exact 19408192-byte cap PASS; 19408193 bytes rejected PASS; smaller artifact requires ratchet PASS
unsupported target: rejected PASS
bun test v1.4.2 (744846f84)

scripts/release/static-metadata-review.test.ts:
(pass) x86_64-unknown-linux-musl compiler metadata is independent of the checkout location [43.65ms]
(pass) aarch64-unknown-linux-musl compiler metadata is independent of the checkout location [35.95ms]

 2 pass
 0 fail
 10 expect() calls
Ran 2 tests across 1 file. [4.50s]
server subcommand: exit 2, versioned JSON unavailable result
agent group: exit 0, one parsed versioned JSON listing of its commands
(static builds: 11s)

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| test                      | FAIL (101)   |
| cargo-deny                | PASS         |
| static builds             | PASS         |
+---------------------------+--------------+
FINAL_GATE_EXIT=1
Verdict: **HOLD**. Final review head: `b429e5664ffc886b492829972ad8ae38d91c2968` on `review-query-replies-r2`, independently verified pushed. Reviewed production delta: `23723c0c8..24d0119d1`. All five review commits contain tests only (plus their cfg(test) module inclusion). Checkout is clean; no deployment; issue remains open. Counts: P0=0, P1=0, P2=1, P3=0. No D307 production correctness finding remains. QR2-001 was withdrawn: cross-lane FIFO is not promised by the independent unsequenced reply contract; the corrected test checks reply progress and unchanged typing bytes/cursor. **P2 GF-001 — pre-existing mandatory-gate fixture, outside the reviewed delta.** `crates/plugins/ssh/tests/install.rs:3483`, `review_inode_reuse_after_diagnostics_preserves_live_replacement`, cannot reproduce filesystem inode reuse in 256 allocations during whole-suite runs. Final install result: 93 passed, 1 failed, 1 ignored. The exact unchanged test passes alone; the same whole-suite failure is already recorded earlier on #160 for 23723c0c8. It is outside the permitted waiver list and is **not waived**. The mandatory gate remains exit 1, so this review cannot authorize merge. A follow-up must make this fixture reliably exercise its intended assertion and obtain a green complete gate. Passing evidence on the final tree: - Real server/infraternal agent/shim/PTY: **5/5 cases**, including all **30 forms**, three answer attempts per form, exact expected PTY bytes once; adjacent requests, deliberately answered replay, a delayed expired viewer, typing/reply mux batching, legacy unmarked input and 16 outstanding positions. - Focused shipping-renderer tests: **17 passed, 0 failed, 1,794 assertions**; 30 answered forms across all **515 splits**, plus mixed bulk/split/bytewise viewers. Native bounds cover **4,096 sessions**, each retaining at most 64 output ranges and 64 claims (262,144 of each). - Complete native diagnostic exercised every workspace target. All **582 active server tests passed** (52 ignored), including the D307 tests. Its only other failure was a diagnostic PATH missing Zig; the unchanged C mouse probe passes with the normal verification PATH. All setup errors and raw failed runs remain attached in the preceding comments; no source assertions were relaxed. - fmt, VT fmt, CLI compile-out, Clippy, cargo-deny and both static-build/linkage/trust/key-memory/size checks pass. The standalone frontend verification function passes the compiler, production build, transfer budgets and protocol tests skipped by the failing Rust dispatcher. Critical JavaScript: gzip **301,115/307,200 B**, Brotli **250,879/256,000 B**. - Same production recipe and base 23723c0c8: **x86_64 21,223,696 -> 21,215,664 B (-8,032)**; **ARM 19,415,776 -> 19,408,192 B (-7,584)**. Both claimed reductions and exact caps are independently confirmed. The trim removes server request storage/grammar and response-content matching; Cargo dependencies and the shipping WASM checksum are unchanged. No required renderer answer disappeared in the tested corpus. No new timing benchmarks were run on the shared build host; the implementation's VM performance receipts were reviewed on this issue. Own temporary comparison checkout, build targets and runtime fixtures were removed after a process scan found no matching job fixtures. Raw receipts, checklist and fixture reproduction scripts: [renderer-final.log](https://git.kayg.org/attachments/ac749e19-9f33-47f7-8fb0-2f3b5e31b961) [ts-final.log](https://git.kayg.org/attachments/f653a8e0-ac1c-416c-9fa5-9959c369f582) [cleanup.json](https://git.kayg.org/attachments/56b4a28c-e67a-4614-9b84-fe017862fe71) [reproduce.txt](https://git.kayg.org/attachments/0955f5a9-7a7b-4df3-900f-3e02e03801c5) [reviewer-checklist.txt](https://git.kayg.org/attachments/8b726828-12b6-46ec-a306-ec4f1fa0edd3) [findings.md](https://git.kayg.org/attachments/9fc4138f-0797-4a9b-bbd7-640d69c70444) [verify-fast-verified.log](https://git.kayg.org/attachments/144b64c6-e3b7-48dd-a687-f2b4af7ef2de) [native-preflight.log](https://git.kayg.org/attachments/7d8fd304-05b1-4538-b28f-7935d2304a89) [inode-isolated.log](https://git.kayg.org/attachments/dd2ffa9c-5f5e-4b12-8763-0170e8c8501d) [mouse-zig-path.log](https://git.kayg.org/attachments/c8e5d44e-a736-4195-96fc-5427bd242474) [final-size.txt](https://git.kayg.org/attachments/4c1c4696-5fd3-4833-9f16-c486d21d3231) [verify-fast.log](https://git.kayg.org/attachments/c83c39a1-67a1-40bd-8fd5-aeba11672d51) [socket-namespace.log](https://git.kayg.org/attachments/acbb4ed5-871b-4ff5-beef-7fd65de40fa8) [cli-socket-namespace.log](https://git.kayg.org/attachments/48c5f6bd-0048-4280-9f97-8dcef56696b8) <details> <summary>scripts/verify fast output, verbatim (head above; exit 1)</summary> ```text ==> Repository artifact size gate repository artifact gate: PASS (54 changed path(s), merge base f29713863e5d) ==> Release deployment functional checks .....Release build failed for aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa; gate log retained .Build deferred: host capacity limit reached ......... ---------------------------------------------------------------------- Ran 15 tests in 0.653s OK . ---------------------------------------------------------------------- Ran 1 test in 0.072s OK bun test v1.4.2 (744846f84) scripts/release/deploy-review.test.ts: REMOTE_ADMISSION unsigned_x86_payload=true refused=true (pass) remote admission refuses an x86 payload outside the signed manifest [192.69ms] {"state": "deployed", "ca_unlocked": true} WEB_ONLY_RECORD candidate_binary_recorded=false (pass) web-only deployment does not record the candidate as the running binary [176.91ms] ALIAS_RECOVERY restart_requests=2 (pass) alias restoration failure still requests the retained warm rollback [199.39ms] 3 pass 0 fail 3 expect() calls Ran 3 tests across 1 file. [578.00ms] METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=296.59 p99_ms=304.24 result=PASS ==> fmt (fmt: 2s) ==> VT native fmt (VT native fmt: 0s) ==> CLI plugin compile-out disabled CLI plugin dependencies: absent from normal dependency graph warning: function `print_progress` is never used --> crates/infraternal/src/cli/output.rs:592:8 | 592 | pub fn print_progress<T: Serialize>(result: &CommandResult<T>, json: bool, to_stderr: bool) { | ^^^^^^^^^^^^^^ | = note: `#[warn(dead_code)]` (part of `#[warn(unused)]`) on by default warning: function `write_output` is never used --> crates/infraternal/src/cli/output.rs:616:8 | 616 | pub fn write_output(output: Result<String, serde_json::Error>, to_stderr: bool) { | ^^^^^^^^^^^^ warning: `infraternal` (bin "infraternal" test) generated 2 warnings Finished `test` profile [unoptimized + debuginfo] target(s) in 0.16s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/infraternal-9c4fc48b971836fc) running 37 tests test cli::actions::default_build_tests::default_build_registers_no_unbuilt_command ... ok test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok test cli::actions::tests::agent_session_integration_target_is_gated_by_agent_plugin ... ok test cli::actions::tests::compiled_out_mesh_has_no_registered_commands ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::no_default_plugins_register_no_component_commands ... ok test cli::actions::tests::server_only_dependencies_are_removed_with_server_plugin ... ok test cli::command_tree::tests::compiled_out_plugin_has_no_help_or_parse_path ... ok test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test cli::command_tree::tests::node_build_omits_and_refuses_server_commands ... ok test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok test cli::command_tree::tests::public_help_is_plain_words ... ok test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok test cli::output::tests::a_failure_says_why_and_what_to_do ... ok test cli::output::tests::exit_codes_follow_d303 ... ok test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}} {"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}} ok test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok test cli::usage::tests::missing_arguments_are_listed_by_name ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test result: ok. 37 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.25s Finished `test` profile [unoptimized + debuginfo] target(s) in 0.61s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/infraternal-a2d65766d1f23d58) running 100 tests test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok test cli::actions::hosted_tests::production_descriptors_share_cli_registry_and_skills ... ok test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::hidden_ssh_session_bridge_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test cli::command_tree::tests::hidden_ssh_session_action_parses_existing_session_rendezvous ... ok test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok test cli::command_tree::tests::public_help_is_plain_words ... ok test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok test cli::output::tests::a_failure_says_why_and_what_to_do ... ok test cli::output::tests::exit_codes_follow_d303 ... ok test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}} {"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}} ok test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok test cli::usage::tests::missing_arguments_are_listed_by_name ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test remote::tests::join_re_enrolls_for_a_moved_server_but_not_a_renamed_one ... ok test remote::tests::join_re_enrolls_the_same_hosts_identity_and_refuses_another_host ... ok test remote::tests::join_refuses_the_same_host_id_from_another_server ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test remote::tests::replace_aborts_when_the_identity_changed_since_it_was_read ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test remote_service::tests::link_failure_does_not_wait_forever_for_blocking_work ... ok test remote_service::tests::polling_panic_reaches_bounded_shutdown ... ok test remote_service::tests::successful_link_return_is_a_service_failure ... ok test restart::recovery_tests::verified_exec_and_late_refusal_preserve_listener_and_ca ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test restart::tests::deleted_path_review::relative_recovery_after_atomic_install_keeps_live_install_path ... ok test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok test restart::tests::path_review::late_recovery_from_path_invocation_keeps_install_target ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ok test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ok test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ok test restart_binary::audit_tests::verification_twenty_megabytes ... ignored, optimized weighted 20 MiB signature and admission measurement test restart_image::tests::probe_never_inherits_the_control_descriptor ... ok test restart_image::tests::snapshot_refuses_every_mutation_and_preserves_source_offset ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok test ssh_internal::tests::connect_requires_exactly_a_host_and_numeric_port ... ok test ssh_internal::tests::connector_is_available_only_on_the_initiating_build ... ok test ssh_internal::tests::session_accepts_only_the_two_spawned_shapes ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test startup_tests::shared_reactor_preserves_borrows_errors_and_panic_cleanup ... ok test result: ok. 99 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 33.32s Finished `test` profile [unoptimized + debuginfo] target(s) in 0.46s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/infraternal_agent-c0f5ee2d4c7be28c) running 1 test test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 73 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/infraternal_mesh-c7263890e5528429) running 1 test test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/infraternal_plugin_backup-63687278dacedd2d) running 1 test test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/infraternal_plugin_relay-05772b88ed06ec15) running 1 test test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/infraternal_plugin_ssh-8d15d5d3bffc0793) running 1 test test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 42 filtered out; finished in 0.00s (CLI plugin compile-out: 36s) ==> clippy Finished `dev` profile [unoptimized + debuginfo] target(s) in 2.19s (clippy: 2s) ==> test Blocking waiting for file lock on package cache Finished `test` profile [unoptimized + debuginfo] target(s) in 1.46s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/infraternal-7de1f15af67158e9) running 100 tests test cli::actions::default_build_tests::default_build_registers_no_unbuilt_command ... ok test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::hidden_ssh_session_bridge_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok test cli::command_tree::tests::every_command_in_the_tree_takes_json ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test cli::command_tree::tests::hidden_ssh_session_action_parses_existing_session_rendezvous ... ok test cli::command_tree::tests::packaged_node_dependency_closure_omits_server_storage_and_release ... ok test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok test cli::command_tree::tests::public_help_is_plain_words ... ok test cli::command_tree::tests::root_help_lines_fit_80_columns ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test cli::command_tree::tests::unbuilt_placeholders_are_neither_shown_nor_parsed ... ok test cli::output::tests::a_body_replaces_the_generic_rendering_of_data ... ok test cli::output::tests::a_failure_says_why_and_what_to_do ... ok test cli::output::tests::exit_codes_follow_d303 ... ok test cli::output::tests::finishing_a_command_stamps_ok_and_the_error_from_the_exit ... {"schema_version":1,"command":"x","ok":false,"state":"failed","message":"It broke.","next":[],"details":"because","error":{"code":"failed","detail":"because"},"data":{}} {"schema_version":1,"command":"x","ok":true,"state":"ready","message":"Done.","next":[],"data":{}} ok test cli::output::tests::json_is_one_line_with_stable_fields_and_omits_absent_ones ... ok test cli::output::tests::plain_text_answers_first_then_aligned_blocks_then_next ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test cli::output::tests::tables_omit_empty_columns_and_rows_and_single_rows_have_no_header ... ok test cli::output::tests::terminal_output_has_a_mark_and_colour_and_wraps_to_the_width ... ok test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test cli::usage::tests::a_wrong_command_names_only_a_plain_word ... ok test cli::usage::tests::an_unknown_option_is_named_without_its_value ... ok test cli::usage::tests::missing_arguments_are_listed_by_name ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test remote::tests::join_re_enrolls_for_a_moved_server_but_not_a_renamed_one ... ok test remote::tests::join_re_enrolls_the_same_hosts_identity_and_refuses_another_host ... ok test remote::tests::join_refuses_the_same_host_id_from_another_server ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test remote::tests::replace_aborts_when_the_identity_changed_since_it_was_read ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test remote_service::tests::link_failure_does_not_wait_forever_for_blocking_work ... ok test remote_service::tests::polling_panic_reaches_bounded_shutdown ... ok test remote_service::tests::successful_link_return_is_a_service_failure ... ok test restart::recovery_tests::verified_exec_and_late_refusal_preserve_listener_and_ca ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test restart::tests::deleted_path_review::relative_recovery_after_atomic_install_keeps_live_install_path ... ok test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok test restart::tests::path_review::late_recovery_from_path_invocation_keeps_install_target ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ok test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ok test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ok test restart_binary::audit_tests::verification_twenty_megabytes ... ignored, optimized weighted 20 MiB signature and admission measurement test restart_image::tests::probe_never_inherits_the_control_descriptor ... ok test restart_image::tests::snapshot_refuses_every_mutation_and_preserves_source_offset ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test shim_cli::tests::spawned_decode_refuses_changes_to_the_fixed_shape_before_startup ... ok test shim_cli::tests::spawned_shapes_reuse_full_shim_options_and_defaults ... ok test ssh_internal::tests::connect_requires_exactly_a_host_and_numeric_port ... ok test ssh_internal::tests::connector_is_available_only_on_the_initiating_build ... ok test ssh_internal::tests::session_accepts_only_the_two_spawned_shapes ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test startup_tests::shared_reactor_preserves_borrows_errors_and_panic_cleanup ... ok test result: ok. 99 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 37.69s Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/agent_daemon-eace6b0012b5a1db) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 35.15s Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/agent_queues-165eb353c7531f59) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 37.60s Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/agent_review-3ad2a12c0615b84c) running 8 tests test initial_attach_requires_explicit_credit_before_replay ... ok test last_typist_selects_its_own_real_pty_dimensions ... ok test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 38.36s Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/agent_sessions-f2332706b84f8f8c) running 3 tests test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test latency_fixture_accepts_the_unsolicited_startup_inventory ... ok test restart_discovery_keeps_a_live_shim_and_drops_clean_exit_and_sigkill ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.08s Running tests/cli_envelope.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/cli_envelope-661ccc970097d9ee) running 8 tests test a_missing_server_is_not_found_exit_4 ... ok test an_unknown_command_is_a_usage_envelope_that_does_not_echo_odd_input ... ok test bare_infraternal_is_the_overview_and_points_to_help ... ok test component_commands_fail_in_the_envelope_when_the_agent_is_not_there ... ok test every_command_reports_a_usage_error_in_the_envelope_naming_the_argument ... ok test read_only_commands_answer_in_the_envelope ... ok test status_exits_0_on_a_machine_with_nothing_installed ... ok test status_exits_5_when_something_that_should_run_is_down ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.61s Running tests/cli_review.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/cli_review-d55a30e0250e5756) running 16 tests test a_dry_run_plan_keeps_its_line_breaks ... ok test a_dumb_terminal_gets_neither_colour_nor_marks ... ok test a_failing_command_in_json_mode_prints_exactly_one_envelope ... ok test a_group_with_one_command_says_so_in_the_singular ... ok test a_malformed_host_id_is_a_usage_error_exit_2 ... ok test a_missing_runtime_directory_is_not_called_a_bad_reply ... ok test a_subcommand_does_not_advertise_options_it_ignores ... ok test a_usage_error_in_text_mode_does_not_echo_the_odd_input ... ok test an_empty_no_color_is_ignored ... ok test an_unknown_skill_is_not_found_exit_4 ... ok test ctrl_c_in_json_mode_ends_with_an_interrupted_envelope_and_exit_130 ... ok test json_help_and_version_are_envelopes_too ... ok test no_compiled_python_is_tracked ... ok test root_help_fits_80_columns ... ok test status_is_not_down_when_the_service_manager_cannot_be_asked ... ok test user_facing_text_never_says_agent_alone ... ok test result: ok. 16 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.16s Running tests/cli_review_r2.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/cli_review_r2-fb28189eb99511bc) running 11 tests test a_failed_later_page_emits_only_the_failure_envelope ... ok test a_later_runtime_handler_is_not_bypassed_by_the_interrupt_handler ... ok test a_mistyped_word_that_looks_like_a_token_is_not_echoed ... ok test a_paged_listing_is_still_one_envelope ... ok test an_unknown_skill_does_not_echo_what_was_typed ... ok test ctrl_c_in_a_script_loop_stops_the_loop ... ok test ctrl_c_while_the_result_is_being_written_never_leaves_a_broken_line ... ok test help_and_version_under_json_are_one_envelope_and_exit_0 ... ok test status_text_does_not_call_an_unanswered_unit_not_running ... ok test three_pages_preserve_order_and_only_the_final_cursor ... ok test usage_errors_under_json_are_one_envelope_and_exit_2 ... ok test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.28s Running tests/cli_review_r3.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/cli_review_r3-ab163f75bc325020) running 4 tests test a_pending_blocked_interrupt_emits_notice_and_terminates_by_sigint ... ok test a_pending_interrupt_during_final_output_preserves_result_and_sigint_status ... ok test inherited_ignored_sigint_stays_ignored_during_cli_output ... ok test signal_fixture ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.14s Running tests/cli_review_r3_arguments.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/cli_review_r3_arguments-48fd77d7d0173dff) running 1 test test inherited_fd_is_rejected_instead_of_ignored_by_remote_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/idle_canary-1e1ec5c3674e0f56) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.21s Running tests/key_memory.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/key_memory-db0b9ddee7c51dd5) running 1 test test diagnostic_requires_locked_pages_and_supports_json_without_public_help ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/remote_output-2e9aad8bb717b41b) running 1 test test remote_refusal_matches_its_declared_cli_output ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/session_bounds_review.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/session_bounds_review-c8d51c5accea5d04) running 1 test test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.10s Running tests/session_exit_events.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/session_exit_events-4b2712c16f493a8f) running 1 test test idle_daemon_discovers_unattached_and_adopted_shim_exit_without_requests ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.47s Running tests/session_retention.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/session_retention-19237533b041ac30) running 1 test test bounded_owned_exit_reconnects_as_ended_with_status ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.79s Running tests/setup_output.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/setup_output-8adba6b7d790f6d5) running 1 test test setup_output_keeps_legacy_and_versioned_readers ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/shim.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/shim-882f35597e3d6cb6) running 24 tests test attached_backpressure_and_detached_progress ... ok test delivered_exit_cannot_release_another_owning_window ... ok test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok test detached_shell_exit_reaps_shim_within_one_second ... ok test disallowed_signal_only_disconnects_peer ... ok test double_fork_survives_parent_death ... ok test dropped_deferred_peers_release_slots_before_the_pty_drains ... ok test fresh_shared_peer_negotiates_while_another_shared_input_is_deferred ... ok test independent_shared_writers_wait_for_the_same_global_queue ... ok test legacy_output_subscription_unblocks_deferred_shared_input ... ok test malformed_shared_successor_does_not_evict_the_live_shared_peer ... ok test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok test owned_exit_releases_promptly_on_window_close ... ok test parked_shared_writer_does_not_stop_detached_pty_progress ... ok test real_shell_reconnect_resize_and_delivered_exit ... ok test replacement_connection_and_malformed_limit ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test shared_input_waits_for_global_queue_space_without_losing_the_suffix ... ok test shared_writer_coexists_and_replayed_input_is_written_once ... ok test shared_writer_refusals_and_full_peer_limit_preserve_the_live_writer ... ok test shared_writer_restores_durable_geometry_after_another_writer_types ... ok test unowned_normal_exit_retires_promptly_and_records_status ... ok test user_scope_survives_parent_unit_stop ... active ok test writer_replacement_is_per_mode_and_fresh_ordinary_writers_stay_optional ... ok test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.31s Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/ssh_askpass-0d42995889fdce36) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 3.05s Running tests/ssh_connector_policy.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/ssh_connector_policy-76f290ff1302b128) running 1 test test connector_preserves_configured_bind_address_refusal ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 8.02s Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/vt_credit-a8057c0d8d11dc74) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 24.12s Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/vt_reconnect-3d554a4e2b9bb78d) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 16.83s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/infraternal_agent-5e7905dce98d9204) running 166 tests test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok test daemon::authenticated_tests::authenticated_uid_refusal_precedes_state_and_io ... ok test daemon::census_retry_tests::full_control_lane_retries_retirement_census_on_capacity_without_requests ... ok test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000 test daemon::liveness_tests::detached_ping_preserves_written_ack_without_output_credit ... ok test daemon::liveness_tests::input_state_probe_preserves_written_ack_after_input ... ok test daemon::liveness_tests::input_state_probe_preserves_written_ack_before_input ... ok test daemon::liveness_tests::terminal_probe_waits_for_the_shim_fence_and_keeps_stream_identity ... ok test daemon::readiness_exit_tests::ownership_eof_does_not_discard_private_terminal_output ... ok test daemon::readiness_tests::a_saturated_census_queue_cannot_establish_the_open_fence ... ok test daemon::readiness_tests::a_shut_down_peer_refuses_the_write_while_a_forked_copy_holds_it ... ok test daemon::readiness_tests::census_and_open_result_share_fifo_order ... ok test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::readiness_tests::fixture_fence_processes_messages_before_the_control_pong ... ok test daemon::readiness_tests::replay_complete_preserves_the_full_output_cursor_as_decimal ... ok test daemon::readiness_tests::replay_prefix_stops_at_the_shim_hello_head ... ok test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test daemon::readiness_tests::saturated_action_replies_preserve_connection ... ok test daemon::readiness_tests::saturated_ping_replies_preserve_connection ... ok test daemon::readiness_tests::the_unhealthy_handoff_case_survives_concurrent_spawns ... ok test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test daemon::remote_tests::reattach_dispatch_serves_while_another_runtime_holds_the_lifetime_lock ... ok test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::session_commands::tests::probe_at_full_command_capacity_preserves_accepted_input ... ok test daemon::session_commands::tests::review_reply_at_full_command_capacity_preserves_accepted_input ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks test daemon::terminal_events::tests::census_uses_uuid_strings_and_replay_keeps_all_cursor_bits ... ok test daemon::terminal_events::tests::ordinary_exit_omits_retired_and_snapshot_sequences_stay_numeric ... ok test daemon::terminal_events::tests::reply_compatibility_notice_contains_only_session_identity ... ok test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok test plugin_control::tests::accepted_public_transaction_outlives_the_framing_deadline ... ok test plugin_control::tests::admission_observes_the_same_plugin_settings_as_actions ... ok test plugin_control::tests::dropping_a_listener_does_not_unlink_a_replacement_file ... ok test plugin_control::tests::empty_catalog_preserves_control_contract_without_an_os_worker ... ok test plugin_control::tests::local_frame_reader_retains_fragmentation_and_refuses_trailing_frames ... ok test plugin_control::tests::local_public_actions_refuse_controls_and_active_socket_replacement ... ok test plugin_control::tests::retained_path_and_observed_transport_cross_the_lazy_worker ... ok test plugin_control::tests::retained_runtime_registry_keeps_lifetime_ownership_after_listener_abort ... ok test plugin_control::tests::synchronous_plugin_work_does_not_park_the_current_thread_reactor ... ok test plugin_control::tests::worker_preserves_trusted_context_and_writer_owned_effect ... ok test process_exits::platform::tests::resource_failures_do_not_silently_disable_exit_tracking ... ok test process_exits::platform::tests::unavailable_kernel_has_no_timer_or_descriptor ... ok test process_exits_tests::exited_before_registration_is_not_a_live_registration ... ok test process_exits_tests::process_descriptor_is_cloexec_and_rejects_invalid_pid ... ok test process_exits_tests::shared_exit_queue_at_200_processes ... ignored, 200 live process lifetimes; run in a weighted benchmark scope test process_exits_tests::shared_queue_detects_exit_and_does_not_repeat_or_retain_descriptors ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test remote_client::dial_runtime::tests::owned_driver_clock_advances_with_its_timer_runtime ... ok test remote_client::server_path::tests::a_future_mesh_lease_and_silent_cut_keep_their_port_reserved ... ok test remote_client::server_path::tests::a_latched_mesh_reply_wakes_retry_without_selecting_the_path ... ok test remote_client::server_path::tests::backed_candidate_refusal_keeps_new_datagrams_on_mesh_discovery ... ok test remote_client::server_path::tests::backed_discovery_ends_with_its_owned_session ... ok test remote_client::server_path::tests::backed_discovery_keeps_control_cancellation_and_udp_recovery_bounded ... ok test remote_client::server_path::tests::backup_published_during_candidate_proof_keeps_enrolled_control_live ... ok test remote_client::server_path::tests::candidate_proof_keeps_probing_after_its_first_packet_is_lost ... ok test remote_client::server_path::tests::component_down_activates_the_warm_fallback_without_a_new_connection ... ok test remote_client::server_path::tests::component_down_keeps_its_reason_when_the_mesh_also_stops_answering ... ok test remote_client::server_path::tests::component_down_proves_tcp_fallback_when_enrolled_udp_is_unavailable ... ok test remote_client::server_path::tests::component_down_returns_the_live_connection_to_the_enrolled_address ... ok test remote_client::server_path::tests::dropped_return_replies_keep_the_admitted_connection ... ok test remote_client::server_path::tests::failed_control_worker_returns_to_retry_owner ... ok test remote_client::server_path::tests::healthy_mesh_path_is_never_declared_interrupted ... ignored, Timing assertion: run on the perf VM under the shared benchmark lock. test remote_client::server_path::tests::healthy_mesh_preserves_every_control_reply_on_the_admitted_connection ... ok test remote_client::server_path::tests::interrupted_mesh_is_retried_on_the_same_connection ... ok test remote_client::server_path::tests::invalid_mesh_hint_cannot_complete_fresh_path_proof ... ok test remote_client::server_path::tests::pending_enrolled_proof_does_not_hide_a_latched_mesh_hint ... ok test remote_client::server_path::tests::pending_enrolled_proof_does_not_hide_the_mesh_discovery_clock ... ok test remote_client::server_path::tests::proposed_mesh_moves_the_live_connection_and_a_silent_cut_returns_it ... ok test remote_client::server_path::tests::retained_mesh_proposal_connects_when_the_fallback_port_is_unavailable ... ok test remote_client::server_path::tests::returning_publishes_the_selected_path_before_its_proof_finishes ... ok test remote_client::server_path::tests::review_silent_mesh_interruption_returns_to_fallback_within_local_reconnect_budget ... ignored, Run alone on the perf VM under the shared benchmark lock. test remote_client::server_path::tests::silent_mesh_handshake_keeps_the_shared_timeout_classification ... ok test remote_client::server_path::tests::unadvertised_path_proof_keeps_the_existing_enrolled_connection ... ok test remote_client::server_path::tests::unanswered_mesh_address_keeps_the_live_connection ... ok test remote_client::server_path::tests::unavailable_credentials_do_not_end_server_link ... ok test remote_client::server_path::tests::unnegotiated_backup_preserves_the_enrolled_retry_cooling ... ok test remote_client::server_path::tests::untrusted_server_on_the_mesh_address_never_takes_the_connection ... ok test remote_client::supervisor::review_tests::durable_state::acknowledged_network_access_survives_superseded_worker_completion ... ok test remote_client::supervisor::review_tests::six_hour_server_outage_keeps_one_retry_owner_with_bounded_attempts ... ok test remote_client::supervisor::review_tests::terminated_factory_is_replaced_without_overlapping_live_workers ... ok test remote_client::supervisor::review_tests::watchdog_bounds_workers_when_local_path_discovery_stalls ... ok test remote_client::supervisor::tests::a_burst_then_a_stable_link_is_summarised_by_the_timer ... ok test remote_client::supervisor::tests::every_error_kind_and_successful_return_retries ... ok test remote_client::supervisor::tests::failed_attempt_cost_does_not_extend_the_retry_period ... ok test remote_client::supervisor::tests::healthy_link_has_no_watchdog_deadline ... ok test remote_client::supervisor::tests::link_close_notes_print_once_per_window_and_summarise_repeats ... ok test remote_client::supervisor::tests::watchdog_restarts_a_stalled_offline_attempt ... ok test remote_client::tests::capability_fixture_retries_a_port_held_by_the_other_transport ... ok test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test remote_client::tests::idle_timers::copy_cost::fresh_admission_accepts_dormant_replies_but_refuses_pending_recovery ... ok test remote_client::tests::idle_timers::copy_cost::fresh_copy_from_admission_at_one_thousand_transports ... ignored, Separate fresh-copy cohort on the perf VM under its shared benchmark lock. test remote_client::tests::idle_timers::copy_cost::mesh_probe_and_copy_cost_at_one_thousand_transports ... ignored, Optimized transport-only measurement on the perf VM under its shared benchmark lock. test remote_client::tests::idle_timers::copy_cost::physical_counters_include_both_source_paths ... ok test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::monotonic_origin_bounds_fail_closed_without_losing_receive_receipts ... ok test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::receive_diagnostic_counts_gro_and_only_fixed_sampled_ports ... ok test remote_client::tests::idle_timers::copy_cost::receive_diagnostic::receive_diagnostic_gap_bins_have_explicit_bounds ... ok test remote_client::tests::idle_timers::copy_cost::runtime_configuration_trial_at_one_thousand_transports ... ignored, Explicit runtime scheduling control on the perf VM; ordinary runtime and guards unchanged. test remote_client::tests::idle_timers::copy_cost::socket_configuration_trial_at_one_thousand_transports ... ignored, Explicit socket-configuration diagnostic on the perf VM; ordinary scale gates stay unchanged. test remote_client::tests::idle_timers::copy_cost::udp_drop_receipt_counts_only_owned_live_sockets ... ok test remote_client::tests::idle_timers::mesh_idle_timer_cost_at_one_thousand_connections ... ignored, Release-only perf VM measurement under the shared benchmark lock. test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test remote_client::tests::raw_tcp_control_preserves_mux_envelopes_and_buffered_suffix ... ok test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test remote_client::tests::server_path_capability_is_advertised_on_native_and_fallback_transports ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test remote_client::tests::unavailable_local_credentials_retry_without_creating_state ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test remote_cursor::tests::exact_unsigned_cursor_and_whole_object_are_required ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test remote_native_tests::primed::negotiated_connection_keeps_unmarked_new_writers_ordinary ... ok test remote_native_tests::primed::ordinary_native_writer_refuses_the_additive_cursor_request ... ok test remote_native_tests::primed::prime_marker_is_canonical_and_requires_negotiated_permission ... ok test remote_native_tests::primed::primed_writer_acknowledges_before_reading_credit_funded_cursor ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test sessions::tests::ordinary_native_writer_negotiates_queue_backpressure_without_shared_selection ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test sessions::tests::shared_writer_helper_negotiates_before_sending_its_selector ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_kernel_latency ... ignored, Exact 50MiB kernel-latency control on the perf VM in an owned network namespace. test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test result: ok. 146 passed; 0 failed; 20 ignored; 0 measured; 0 filtered out; finished in 34.92s Running tests/transport.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/transport-779de0acdb61e1cf) running 2 tests test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test oversized_header_and_truncated_frame_are_rejected ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/infraternal_mesh-e13f00facaa1692a) running 1 test test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/default_arrow-7b090aec0682bcd2) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/properties.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/properties-983aa249d0580584) running 14 tests test addresses_are_unique_stable_and_not_recycled ... ok test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test directional_grants_union_and_minimal_updates ... ok test exhausted_versions_reject_mutations_without_changing_state ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test names_versions_and_backend_status ... ok test overlaps_are_reported_without_silent_range_changes ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.67s Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/rotation_time-0cf88f58b3d13cb7) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/infraternal_plugin_api-c601f0a1c341cc23) running 29 tests test action::tests::any_of_permissions_are_machine_readable_and_empty_authority_is_rejected ... ok test action::tests::command_result_schema_has_required_stable_fields_and_optional_next_step ... ok test action::tests::command_result_schema_keeps_action_data_typed_inside_stable_envelope ... ok test action::tests::only_hidden_internal_routes_may_use_the_reserved_prefix ... ok test action::tests::registry_keeps_plugin_ownership_and_exact_command_paths ... ok test action::tests::registry_rejects_inconsistent_json_schemas ... ok test action::tests::registry_rejects_missing_action_guidance_and_command_collisions ... ok test admission::tests::memory_refusal_round_trips_without_losing_legacy_error ... ok test component_tests::component_declarations_cannot_create_servers ... ok test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test present::tests::a_table_fits_its_width_by_wrapping_only_the_last_column ... ok test present::tests::a_table_has_a_header_only_from_two_rows ... ok test present::tests::pairs_align_values_and_wrap_under_them ... ok test present::tests::sizes_and_ages_use_units_a_person_would_say ... ok test present::tests::tint_wraps_text_after_padding_is_measured ... ok test present::tests::wide_leading_columns_are_cut_with_an_ellipsis ... ok test release_version::tests::accepts_only_worker_version_forms ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test server_path::tests::legacy_link_omits_the_optional_source_port ... ok test storage::tests::cancelled_begin_never_leaves_an_open_writer_transaction ... ok test storage::tests::writer_begin_at_1000_nodes ... ignored, Measure only on the perf VM under its benchmark lock, 31 batches of 1000 writes. test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test tests::machine_actions_are_declared_without_entering_human_discovery ... ok test tests::notifications_are_declared_json_bounded_and_drained_once ... ok test tests::operator_presentation_cannot_follow_a_private_control_action ... ok test tests::public_dispatch_cannot_call_a_machine_control_action ... ok test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test tests::registry_routes_only_declared_actions ... ok test result: ok. 28 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.10s Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/routing_review-fe80451ff0776d50) running 2 tests test review_topic_borrows_plain_and_owns_escaped ... ok test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/infraternal_plugin_backup-85810caed1a02b63) running 1 test test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/infraternal_plugin_host_facts-2cac1c439992c347) running 14 tests test memory::tests::custom_policy_rounds_up_and_validates_all_settings_before_use ... ok test memory::tests::default_floor_refuses_only_below_headroom_even_above_128_sessions ... ok test session_counts_tests::host_owned_session_counts_are_additive_and_refresh_on_request ... ok test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test tests::configured_memory_floor_refuses_with_current_host_counters ... ok test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test tests::static_facts_report_the_machines_hostname ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/infraternal_plugin_mesh-3681764fe0ea9465) running 74 tests test access_updates::tests::compact_rules_reconstruct_the_exact_config_and_preserve_server_access ... ok test access_updates::tests::grouping_never_crosses_an_unchanged_protected_peer ... ok test access_updates::tests::identity_changes_and_snapshots_keep_the_original_encoding ... ok test access_updates::tests::malformed_ranges_refuse_before_any_rule_changes ... ok test connection_state::tests::narrowing_depends_on_services_and_direction_not_the_fallback_label ... ok test firewall::tests::already_removed_owned_table_does_not_block_component_cleanup ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::initial_apply_without_adoption_refuses_a_foreign_table ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::real_nft_ownership_atomicity_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::removal_plan_cannot_add_permissions_or_change_identity ... ok test firewall::tests::rule_count_is_independent_of_membership_and_policy_data_is_in_sets ... ok test iptables::tests::contiguous_open_members_use_ranges_without_opening_gaps ... ok test iptables::tests::initiating_prefixes_cover_only_owned_intervals_even_at_family_boundaries ... ok test iptables::tests::real_nf_tables_ownership_partial_family_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test iptables::tests::replacement_retains_established_rules_and_does_not_duplicate_hooks ... ok test netlink::tests::connection_tuple_uses_initiating_service_and_refuses_ambiguous_selectors ... ok test netlink::tests::host_prefix_decoder_refuses_ambiguous_or_malformed_ownership ... ok test netlink::tests::malformed_lengths_and_padding_are_rejected ... ok test netlink::tests::nested_attributes_roundtrip_without_copying_payloads ... ok test netlink::tests::public_host_prefixes_decode_both_families_without_claiming_subnets ... ok test node::rotation_tests::nf_tables_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173. test node::rotation_tests::nft_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173. test node::tests::chunked_snapshot_is_atomic_and_applies_1000_kernel_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN; use release for timing. test node::tests::explicit_up_recovers_disabled_intent_before_reusing_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node::tests::externally_removed_interface_does_not_block_down ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node::tests::server_identity_cannot_change_inside_a_staged_snapshot ... ok test node_actions::identity_upgrade_tests::ordinary_identity_reply_retains_the_legacy_shape ... ok test node_actions::peer_page_tests::peer_pages_cover_every_peer_once_within_the_frame ... ok test node_actions::peer_page_tests::poll_cost ... ignored, measurement test node_actions::tests::applied_server_route_and_observed_link_survive_only_explicit_component_up ... ignored, Run inside a dedicated kernel namespace with CAP_NET_ADMIN. test node_actions::tests::failed_cleanup_reports_stopping_and_reconnect_keeps_explicit_off ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node_actions::tests::node_actions_refuse_alternate_forms_duplicates_and_unbounded_input ... ok test node_actions::tests::node_actions_register_without_kernel_work_and_hide_machine_calls ... ok test node_coordination::tests::a_name_a_person_chose_is_kept ... ok test node_coordination::tests::a_reported_hostname_names_a_host_added_by_address ... ok test node_coordination::tests::explicit_off_waits_for_up_and_reconnect_requests_a_snapshot ... ok test node_coordination::tests::peer_route_precedes_configuration_and_retires_with_the_node ... ok test node_coordination::tests::placeholder_names_become_the_machines_names ... ok test node_coordination::tests::refused_delta_recovers_immediately_and_closed_channel_retires_worker ... ok test node_coordination::tests::refused_listener_replacement_preserves_the_current_lease ... ok test node_coordination::tests::removed_binding_can_attach_only_after_authorized_reenrollment ... ok test node_coordination::tests::server_listener_belongs_to_applied_enabled_worker ... ok test node_presentation::tests::a_wide_table_stays_within_the_width ... ok test node_presentation::tests::an_unproven_peer_gets_a_hint_that_names_it ... ok test node_presentation::tests::legacy_status_remains_readable_and_invalid_link_is_refused ... ok test node_presentation::tests::peers_show_units_ages_and_no_hint_when_every_path_is_direct ... ok test node_presentation::tests::status_explains_the_observed_server_transport ... ok test node_state::order_tests::accepted_snapshot_persistence_at_1000_peers ... ignored, Run release on the locked performance VM; public-state persistence at 1000 peers. test node_state::order_tests::concurrent_workers_serialize_revision_check_and_publication ... ok test node_state::order_tests::exact_legacy_binding_upgrade_preserves_the_revision_fence ... ok test node_state::order_tests::explicit_off_can_replace_a_corrupt_public_snapshot ... ok test node_state::order_tests::stale_and_conflicting_snapshots_cannot_replace_acknowledged_intent ... ok test node_state::order_tests::worker_start_stop_apply_interleavings_never_decrease_acknowledged_revision ... ok test node_state::restore_tests::public_restore_retains_large_intent_and_matches_reader ... ok test node_state::restore_tests::public_state_restore_at_1000_peers ... ignored, Run only on the perf VM under its lock; INFRATERNAL_STATE_RESTORE_MODE=reader|slice, separate processes. test node_state::restore_tests::restore_rejects_invalid_schema_trailing_data_and_unsafe_descriptors ... ok test node_state::tests::explicit_off_survives_restart_and_snapshot_contains_only_public_fields ... ok test node_state::tests::route_recording_preserves_the_legacy_accepted_state_format ... ok test node_state::tests::unsafe_route_journal_and_existing_temporary_files_are_preserved ... ok test node_state::tests::unsafe_snapshots_and_preexisting_temporary_files_are_not_followed_or_removed ... ok test presence::tests::a_mesh_that_is_off_shows_nobody_online ... ok test presence::tests::a_page_cursor_is_followed ... ok test presence::tests::a_reading_expires_when_the_node_stops_answering ... ok test presence::tests::a_recent_handshake_is_online_on_a_direct_path ... ok test presence::tests::an_unreadable_node_is_no_reading ... ok test presence::tests::no_handshake_a_stale_one_or_a_future_one_is_offline ... ok test presence::tests::nodes_go_offline_twenty_seconds_after_the_last_good_reading ... ok test presence::tests::receiving_a_keepalive_does_not_shorten_the_session_window ... ok test presence::tests::replace_reports_only_visible_changes ... ok test presence::tests::the_edge_of_the_session_window_is_still_online ... ok test presence::tests::the_server_and_a_peer_passing_traffic_are_online ... ok test presence::tests::traffic_proves_a_session_until_it_ends ... ok test settings::tests::settings_objects_are_bounded_and_strict_before_storage ... ok test store::naming_tests::a_numeric_or_invalid_address_gives_no_name ... ok test store::naming_tests::an_address_or_hostname_gives_the_machines_name ... ok test result: ok. 60 passed; 0 failed; 14 ignored; 0 measured; 0 filtered out; finished in 11.53s Running tests/access_updates.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/access_updates-53052323e562eb48) running 8 tests test compact_identity_support_requires_an_explicit_strict_probe ... ok test default_tightening_at_1000_peers_fits_one_round_trip ... ok test negotiated_access_chunk_is_accepted_by_the_strict_action_parser ... ok test nf_tables_compact_delta_preserves_identity_and_refuses_invalid_bases ... ignored, Run in an isolated user/network namespace with CAP_NET_ADMIN. test nft_compact_delta_preserves_identity_and_refuses_invalid_bases ... ignored, Run in an isolated user/network namespace with CAP_NET_ADMIN. test ordinary_up_and_identity_keep_the_legacy_reply_shape ... ignored, requires an isolated user/network namespace test range_objects_reject_unknown_duplicate_and_positional_fields ... ok test uniform_changes_fit_one_frame_after_churn_with_distinct_kept_services ... ok test result: ok. 5 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/authorized_local_binding.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/authorized_local_binding-b0ba79371698e19a) running 2 tests test nf_tables_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173. test nft_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/canonical_host_binding.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/canonical_host_binding-e711cf3ceab9f605) running 1 test test enrollment_requires_canonical_host_uuid_spelling ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/configuration.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/configuration-1ba9aa134b7936fb) running 5 tests test chunks_fit_body_budget_and_one_peer_delta_does_not_repeat_the_snapshot ... ok test compiled_chunks_identify_the_server_and_old_snapshots_have_no_proposal ... ok test edition_default_is_explicit_and_build_selected ... ok test large_valid_port_policy_is_split_without_a_port_count_cap ... ok test port_grant_narrows_allow_opens_deny_and_preserves_direction ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.45s Running tests/kernel.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/kernel-b9d7e07e114cbf35) running 6 tests test bulk_retirement_preserves_identity_and_routes_at_1000_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test created_interface_is_marked_for_restart_adoption ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test policy_table_route_conflict_is_refused ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test real_kernel_chunked_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test real_kernel_ephemeral_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test retired_host_routes_can_be_replayed ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/naming.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/naming-d44028e80092ceee) running 4 tests test a_person_takes_an_automatic_name_and_the_machine_moves_aside ... ok test a_squatter_yields_to_a_host_added_later_and_the_renames_are_audited ... ok test a_viewer_without_host_facts_does_not_see_reported_hostnames ... ok test the_servers_names_are_kept_for_the_server ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.26s Running tests/policy_enrollment_binding.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/policy_enrollment_binding-75c227a9fb54e935) running 4 tests test explicit_binding_preserves_identity_and_clears_removal_only_on_enrollment ... ok test host_binding_requires_global_authority_and_existing_unrevoked_host ... ok test noncanonical_host_binding_is_refused ... ok test refused_enrollment_preserves_removal_and_revision ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.22s Running tests/policy_enrollment_identity.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/policy_enrollment_identity-69a7fa4673b70170) running 1 test test unbound_enrollment_public_key_is_not_host_authority ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/policy_snapshot_ordering.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/policy_snapshot_ordering-c646b4259a478ea0) running 6 tests test nf_tables_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173. test nf_tables_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173. test nf_tables_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173. test nft_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173. test nft_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173. test nft_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/presence.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/presence-ea261a44979699ea) running 2 tests test an_unchanged_reading_is_not_announced_and_a_lost_session_goes_offline ... ok test nodes_the_server_sees_are_online_with_their_path_and_named_by_machine ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.12s Running tests/restart_route_ownership.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/restart_route_ownership-f91cbf3125e5a193) running 1 test test orphan_route_retirement_preserves_foreign_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_authorized_reenrollment.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/review_authorized_reenrollment-c652db1c78c36ccf) running 2 tests test nf_tables_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173. test nft_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_endpoint_transaction.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/review_endpoint_transaction-ebc100d60783edf7) running 1 test test refused_endpoint_persistence_preserves_kernel_endpoint ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_firewall_marker.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/review_firewall_marker-6a53d4cc2a2b41d0) running 2 tests test nf_tables_marker_substring_is_not_chain_ownership ... ignored, Run in a disposable user/network namespace, #173. test nft_marker_substring_is_not_table_ownership ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_ingress_translation.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/review_ingress_translation-26a8eb974397df0c) running 2 tests test nf_tables_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test nft_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_local_delivery.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/review_local_delivery-85a98c2a0de72b0d) running 2 tests test nf_tables_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test nft_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_mesh_presence_r4.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/review_mesh_presence_r4-c892e66f54b71d7b) running 3 tests test a_counter_reset_discards_the_previous_peers_keepalive_classification ... ok test a_passive_keepalive_does_not_turn_later_silence_into_a_false_offline ... ok test a_peer_with_25_second_keepalives_stays_online_when_server_keepalives_suppress_its_sends ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_mesh_view_truth.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/review_mesh_view_truth-71d42bc9f3c8b78a) running 6 tests test a_hand_set_name_equal_to_the_placeholder_is_kept ... ok test a_host_record_name_beats_another_machines_reported_hostname ... ok test a_peer_does_not_stay_online_past_its_session_when_the_server_node_stops_answering ... ok test a_remote_machine_cannot_be_called_server ... ok test a_remote_machine_cannot_take_the_servers_hostname ... ok test an_address_that_is_an_ip_never_becomes_a_name ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.30s Running tests/review_mesh_view_truth_r2.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/review_mesh_view_truth_r2-80a2bad78c76cb80) running 9 tests test a_hex_ipv4_spelling_never_becomes_a_name ... ok test a_node_moved_aside_keeps_its_name_on_its_next_attach ... ok test a_person_can_take_a_name_a_machine_reported ... ok test a_viewer_without_host_facts_still_sees_distinct_names ... ok test an_idle_healthy_peer_without_its_own_keepalive_stays_online ... ok test evidence_a_silent_peer_expires_with_its_session_without_flapping ... ok test evidence_migration_0026_upgrades_a_realistic_database_without_churn ... ok test no_viewer_sees_a_remote_machine_called_server ... ok test the_previous_release_starts_on_a_database_this_release_migrated ... ignored, deploy gate, not code: production rollback restores the database copy (#236) test result: ok. 8 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.34s Running tests/review_mesh_view_truth_r3.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/review_mesh_view_truth_r3-488341cccf25afa7) running 5 tests test a_dead_peer_expires_at_session_end_without_inferring_a_sending_promise ... ok test a_node_moved_aside_by_a_person_is_audited_under_that_person ... ok test a_non_owner_cannot_confirm_the_servers_hidden_hostname ... ok test a_scoped_manager_cannot_rename_a_node_outside_their_scope_by_taking_its_name ... ok test an_idle_peer_that_started_its_session_stays_online_until_it_rekeys ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.20s Running tests/review_mesh_view_truth_r4.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/review_mesh_view_truth_r4-a73cddfca2e93724) running 7 tests test a_global_manager_cannot_probe_a_hidden_name_by_exhausting_move_aside_names ... ok test a_name_chosen_while_rewound_survives_rolling_forward_and_reattaching ... ok test a_scoped_manager_cannot_confirm_a_hidden_reported_hostname ... ok test evidence_a_refused_move_rolls_back_inventory_audit_and_revision ... ok test evidence_server_hostname_moves_only_with_server_rename_authority ... ok test hidden_names_are_indistinguishable_for_every_non_global_node_manager ... ok test rewind_reconciles_same_spelling_choices_without_freezing_untouched_names ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.66s Running tests/review_restart_routes.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/review_restart_routes-c0c7e8b6c3834047) running 1 test test restart_retires_orphan_peer_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_retire_ownership.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/review_retire_ownership-21b36c1c525f1f38) running 7 tests test retire_checks_every_object_before_deleting_any ... ignored, Run as root in a disposable network namespace with nft. test retire_decides_every_object_and_leaves_a_foreign_table ... ignored, Run as root in a disposable network namespace with WireGuard and nft. test retire_leaves_a_foreign_interface_without_failing_the_uninstall ... ignored, Run as root in a disposable network namespace. test retire_leaves_a_marked_interface_this_installation_never_recorded ... ignored, Run as root in a disposable network namespace. test retire_leaves_another_installations_interface_and_filter ... ignored, Run as root in a disposable network namespace with WireGuard and nft. test retire_removes_the_interface_and_filter_this_installation_created ... ignored, Run as root in a disposable network namespace with WireGuard and nft. test retire_with_a_record_leaves_a_foreign_interface_and_names_it ... ignored, Run as root in a disposable network namespace with WireGuard and nft. test result: ok. 0 passed; 0 failed; 7 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_reverse_recreation.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/review_reverse_recreation-6d38c3fb56765539) running 4 tests test nf_tables_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test nf_tables_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test nft_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test nft_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test result: ok. 0 passed; 0 failed; 4 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_revoked_host_policy.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/review_revoked_host_policy-493675b7a79ca70f) running 1 test test revoked_host_is_not_retained_in_compiled_peer_policy ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s Running tests/review_route_inventory.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/review_route_inventory-2be052913f9e2e88) running 2 tests test refused_recovery_inventory_save_does_not_retire_kernel_peers_or_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test restart_preserves_unrecorded_direct_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_route_scope.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/review_route_scope-0539357dd2301f8b) running 1 test test restart_preserves_operator_gateway_host_route ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_shutdown_budget.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/review_shutdown_budget-1423441593702eda) running 1 test test shipping_mesh_down_1000_peers_finishes_within_one_second ... ignored, Run in a dedicated user/network namespace under CPUWeight=10000 with INFRATERNAL_BIN pointing to the shipping release binary. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_shutdown_restart.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/review_shutdown_restart-be3f21c60f64b594) running 3 tests test crash_child ... ignored, Child-only fixture for the weighted user/network namespace restart proof. test refused_journal_retirement_keeps_stopping_until_explicit_retry ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000. test restart_finishes_interrupted_down_at_1000_peers ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000. test result: ok. 0 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/settings.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/settings-9e22846e3f8e68e0) running 1 test test default_switch_requires_owner_freshness_and_the_preview_revision ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s Running tests/store.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/store-6d4f7b5c8e54fbb6) running 6 tests test absent_discovery_preserves_the_last_known_endpoint ... ok test attach_cancelled_at_any_await_leaves_the_store_writable ... ok test key_replacement_preserves_identity_and_addresses_after_restart ... ok test removed_host_cannot_restore_membership_without_authorized_enrollment ... ok test required_server_membership_cannot_be_deleted ... ok test scale_preview_pages_do_not_allocate_the_pair_matrix ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.16s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/infraternal_plugin_relay-47b92256ba7e458c) running 1 test test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/infraternal_plugin_release-aec3b44056d5d9fc) running 8 tests test latest::tests::cancellation_joins_verification ... ok test latest::tests::startup_reclaims_only_owned_inactive_private_metadata ... ok test service::tests::api_setting_requires_owner_and_current_fresh_session ... ok test service::tests::authority_is_rechecked_after_the_setting_write_before_commit ... ok test service::tests::channel_reads_at_fifty_concurrent_callers ... ignored, run alone under CPUWeight=10000; measures SQLite action overhead, not terminal or full authenticated socket latency test service::tests::default_stable_refuses_silent_edge_and_persists_explicit_opt_in ... ok test service::tests::disabled_feature_starts_no_lookup_and_rejects_settings ... ok test service::tests::object_input_rejects_duplicates_unknown_fields_and_alternate_representations ... ok test result: ok. 7 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.70s Running tests/review_pool.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/review_pool-33b687260e254fc2) running 1 test test pending_channel_writers_preserve_authority_read_capacity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.57s Running tests/review_restart.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/review_restart-ca9f44eb8cb73b10) running 4 tests test lookup_creates_private_staging_under_owner_restrictive_umask ... ok test partial_metadata_restart_child ... ignored, subprocess helper for metadata restart verification test restarted_latest_reclaims_metadata_after_process_stop ... ok test restricted_umask_lookup_child ... ignored, subprocess helper for restricted-umask lookup verification test result: ok. 2 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.06s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/infraternal_plugin_remote-9d5cf8bf6727606f) running 113 tests test inventory::authority_tests::inventory_events_keep_the_subscription_generation ... ok test inventory::authority_tests::revocation_cancels_a_result_waiting_for_socket_credit ... ok test inventory::tests::inventory_descriptor_is_valid_for_server_startup ... ok test inventory::tests::list_input_refuses_parallel_authority_and_noncanonical_cursors ... ok test remote_bindings::receive_cost_tests::repeated_mesh_ingress_cost_at_one_thousand_retained_histories ... ignored, Component timing on the authorized perf VM under its fair lock; not transport acceptance. test remote_bindings::tests::a_copy_poll_bounds_work_before_servicing_receive ... ok test remote_bindings::tests::a_lease_added_while_waiting_is_polled_without_another_primary_datagram ... ok test remote_bindings::tests::a_negotiated_peer_copies_output_without_a_worker_and_off_cancels_it ... ok test remote_bindings::tests::admitted_path_proofs_survive_mesh_retirement_and_old_key_lease_drop ... ok test remote_bindings::tests::alias_retirement_restores_the_previous_reply_socket ... ok test remote_bindings::tests::alternating_fresh_hints_cannot_amplify_retained_ciphertext ... ok test remote_bindings::tests::an_encrypted_duplicate_cannot_move_the_reply_route ... ok test remote_bindings::tests::backup_withdrawal_reconciles_idle_peers_without_canceling_another_return ... ok test remote_bindings::tests::dropping_one_peer_removes_alternative_work_while_another_peer_lives ... ok test remote_bindings::tests::enrolled_dual_replies_preserve_primary_and_mesh_sources ... ok test remote_bindings::tests::lease_installed_during_a_pending_poll_cannot_lose_the_receive_wakeup ... ok test remote_bindings::tests::legacy_enrolled_return_replay_is_bounded_and_consumed_once ... ok test remote_bindings::tests::negotiated_enrolled_return_replay_is_bounded_and_consumed_once ... ok test remote_bindings::tests::peer_route_preserves_the_logical_tuple_and_replays_on_return ... ok test remote_bindings::tests::replies_follow_the_last_heard_address_and_leases_retire_their_routes ... ok test remote_bindings::tests::retiring_mesh_lease_cancels_only_queued_alternative_reply ... ok test remote_bindings::tests::retiring_one_route_preserves_another_peers_enrolled_return ... ok test remote_bindings::tests::unknown_mesh_reply_waits_for_duplicate_coordinates_and_off_retires_it ... ok test remote_bindings::tests::wildcard_reply_uses_the_destination_of_the_latest_peer_packet ... ok test remote_path_copies::tests::arming_after_pending_wakes_the_owned_endpoint_and_clear_drops_it ... ok test remote_path_copies::tests::cancelling_retired_work_keeps_the_next_send_receive_wakeup ... ok test remote_path_proof::tests::fixed_header_mac_matches_independent_sha256_vectors ... ok test remote_path_proof::tests::mixed_aggregation_preserves_all_neighboring_quic_bytes ... ok test remote_path_proof::tests::only_current_session_response_answers_a_sent_probe ... ok test remote_path_socket::tests::a_delayed_probe_waiter_keeps_first_send_clock_after_ack_only_traffic ... ok test remote_path_socket::tests::a_probe_request_latches_before_its_waiter_is_polled ... ok test remote_path_socket::tests::an_old_ack_only_send_cannot_complete_probe_emission ... ok test remote_path_socket::tests::an_old_ack_only_send_does_not_start_a_backpressured_probe_deadline ... ignored, timed watchdog ordering proof; run under the perf VM benchmark lock test remote_path_socket::tests::an_unrelated_reply_cannot_discard_ciphertext_needed_after_a_cut ... ok test remote_path_socket::tests::backpressure_never_starts_or_replaces_the_probe_send_clock ... ok test remote_path_socket::tests::cancelling_old_requests_cannot_clear_a_new_probe_generation ... ok test remote_path_socket::tests::dedicated_receive_preserves_segmented_sends_in_single_datagram_buffers ... ok test remote_path_socket::tests::exporting_path_keys_never_holds_the_receive_proof_lock ... ok test remote_path_socket::tests::mesh_route_maps_only_the_trusted_tuple_and_resends_unanswered_datagrams ... ok test remote_path_socket::tests::negotiated_copies_use_the_enrolled_socket_and_retire_on_return ... ok test remote_path_socket::tests::segmented_replay_evicts_enough_old_datagrams_to_keep_the_byte_bound ... ok test remote_path_socket::tests::send_gate_releases_only_one_successful_transmission ... ok test remote_peer_routes::bench::complete_tag_lookup_at_1000_peers ... ignored, Measure only on the perf VM under its benchmark lock. test remote_peer_routes::bench::routing_lookup_at_1000_nodes ... ignored, Measure only on the perf VM under its benchmark lock. test remote_peer_routes::copy_scan_tests::copy_poll_cost_at_one_thousand_retained_histories ... ignored, 31 bookkeeping samples per profile on the authorized perf VM under its fair lock; not transport acceptance. test remote_peer_routes::copy_scan_tests::history_mutation_after_an_idle_poll_still_sends_every_due_datagram ... ok test remote_peer_routes::tests::alternative_admission_never_evicts_pending_enrolled_return ... ok test remote_peer_routes::tests::alternative_backpressure_keeps_one_copy_and_hints_preserve_its_deadline ... ok test remote_peer_routes::tests::alternative_queue_shares_bounds_and_never_becomes_return_history ... ok test remote_peer_routes::tests::ciphertext_history_at_1000_peers ... ignored, Measure only on the perf VM: 31 batches of 20000 fresh/duplicate pairs across 1000 peers. test remote_peer_routes::tests::ciphertext_history_normalizes_gro_batches_and_stays_bounded ... ok test remote_peer_routes::tests::completed_backup_copies_cannot_be_replayed_as_a_second_return_burst ... ok test remote_peer_routes::tests::completed_return_entries_stay_consumed_when_new_mesh_history_arrives ... ok test remote_peer_routes::tests::output_evicting_the_oldest_copy_still_copies_one_bounded_batch ... ok test remote_peer_routes::tests::replay_is_bounded_for_large_segmented_transmits ... ok test remote_peer_routes::tests::retiring_an_old_lease_cannot_remove_a_reused_tuple ... ok test remote_peer_routes::tests::shared_copy_clock_preserves_each_datagrams_deadline ... ok test remote_peer_routes::tests::unsuccessful_backups_preserve_originals_for_explicit_recovery ... ok test remote_quic::design_scale_review::authenticated_mesh_health_at_design_scale ... ignored, Perf VM only: distinct physical tuple health at 1000 mTLS connections. test remote_quic::design_scale_review::authenticated_mesh_health_at_design_scale_100ms ... ignored, Perf VM only: authenticated physical health at 100ms cadence. test remote_quic::design_scale_review::review_fast_mesh_health_at_design_scale ... ignored, Perf VM only: fast detector at 1000 mTLS connections. test remote_quic::design_scale_review::review_production_adaptive_health_at_design_scale ... ignored, Perf VM only: production adaptive detector at 1000 mTLS connections. test remote_quic::mtu_tests::both_directions_keep_a_mesh_safe_payload_after_discovery ... ok test remote_quic::probe_tests::a_queued_probe_cannot_expire_before_the_socket_emits_it ... ok test remote_quic::probe_tests::copy_first_ack_only_probes_keep_authenticated_mesh_guard_live ... ignored, Physical 15ms/30ms guard comparison on the perf VM under its benchmark lock. test remote_quic::probe_tests::copy_first_ack_only_requested_ack_delay_five_ms_comparison ... ignored, ACK-delay hypothesis comparison on the quiet perf VM under its benchmark lock. test remote_quic::probe_tests::copy_first_real_mesh_originals_do_not_strand_the_authenticated_mesh_guard ... ok test remote_quic::probe_tests::enrolled_copy_replies_cannot_keep_a_dead_mesh_path_alive ... ok test remote_quic::probe_tests::healthy_path_proofs_keep_the_configured_polling_interval ... ok test remote_quic::probe_tests::lost_path_proof_spends_its_reserved_retry_margin ... ok test remote_quic::probe_tests::review_invalid_mesh_packets_cannot_borrow_enrolled_authentication ... ignored, Perf VM only: real socket scheduling and path-response deadline. test remote_quic::tests::acknowledged_idle_survives_and_replayed_packets_cannot_mask_failure ... ok test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test remote_quic::tests::mesh_liveness_keeps_authentication_and_refuses_invalid_intervals ... ok test remote_quic::tests::one_way_authenticated_output_keeps_the_path_fresh ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_renewal::tests::credential_snapshot_does_not_block_async_reconnect ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test remote_tls::tests::outgoing_tcp_detects_a_vanished_peer_without_application_traffic ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test runtime_lock::tests::a_live_legacy_runtime_cannot_publish_an_unheld_lifetime_file ... ok test runtime_lock::tests::cleanup_admission_prevents_starting_even_if_runtime_lock_was_removed ... ok test runtime_lock::tests::dump_datagrams_split_exactly ... ok test runtime_lock::tests::dump_records_accept_only_known_shapes ... ok test runtime_lock::tests::foreign_inode_twin_inner ... ignored, runs inside the namespace prepared by the foreign-inode test test runtime_lock::tests::internal_dispatch_checks_exact_argument_counts ... 2 ok test runtime_lock::tests::internal_dispatch_reads_only_the_normal_command_name ... ok test runtime_lock::tests::legacy_bound_endpoint_on_a_split_device_filesystem_is_kept ... running 1 test test runtime_lock::tests::split_device_inner ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 112 filtered out; finished in 0.00s ok test runtime_lock::tests::legacy_inspection_finds_a_real_bound_socket ... ok test runtime_lock::tests::legacy_inspection_is_independent_of_the_bound_name ... ok test runtime_lock::tests::lifetime_contention_preserves_would_block ... ok test runtime_lock::tests::lifetime_precedes_bind_and_survives_until_last_description_closes ... ok test runtime_lock::tests::lock_links_and_replacements_are_refused ... ok test runtime_lock::tests::managed_start_refuses_another_host_and_an_unfinished_receipt ... ok test runtime_lock::tests::session_inspection_finds_bound_endpoints_by_identity ... ok test runtime_lock::tests::split_device_inner ... ignored, runs inside the namespace prepared by the split-device test test runtime_lock::tests::stale_session_endpoint_is_not_held_live_by_a_foreign_inode_twin ... running 1 test test runtime_lock::tests::foreign_inode_twin_inner ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 112 filtered out; finished in 0.00s ok test runtime_lock::tests::unavailable_lock_support_does_not_claim_a_live_holder ... ok test uninstall::tests::a_failed_kernel_check_stops_cleanup_before_the_service ... ok test uninstall::tests::accepted_handoff_runs_on_a_thread_without_an_async_runtime ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test uninstall::tests::file_removal_keeps_what_setup_did_not_create ... ok test uninstall::tests::manual_uninstall_refuses_another_hosts_installation ... ok test uninstall::tests::replies_name_the_objects_left_as_valid_json ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test uninstall::tests::review_failed_launcher_leaves_no_plan ... ok test uninstall::tests::review_planted_plan_is_never_followed ... ok test uninstall::tests::uninstall_and_setup_exclude_each_other ... ok test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test result: ok. 98 passed; 0 failed; 15 ignored; 0 measured; 0 filtered out; finished in 14.77s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/infraternal_plugin_ssh-9c4623776f228fdb) running 46 tests test auth_evidence::tests::later_local_key_receipt_supersedes_an_earlier_banner ... ok test auth_evidence::tests::partial_and_malformed_receipts_are_not_method_evidence ... ok test auth_evidence::tests::receipt_is_identical_at_every_chunk_boundary ... ok test auth_evidence::tests::selected_local_authentication_diagnostics_keep_method_at_every_boundary ... ok test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok test auth_order::tests::only_exact_generated_read_only_checks_can_choose_credentials ... ok test bootstrap::proof_tests::failed_published_facts_clean_only_the_private_probe_and_never_commit ... ok test bootstrap::proof_tests::published_proofs_start_together_and_commit_requires_both ... ok test bootstrap::proof_tests::review_stopped_commit_channel_finishes_the_private_probe ... ok test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test duplex::tests::closed_receipt_channel_is_reported_as_unreachable ... ok test duplex::tests::duplex_preserves_binary_bytes_in_both_directions ... ok test install::tests::compaction_drops_only_comment_lines_and_indentation ... ok test install::tests::embedded_setup_programs_have_no_constructs_compaction_would_change ... ok test install::tests::transfer_caps_accept_only_the_fixed_record ... ok test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test model::failure_serialization_tests::uuid_reference_uses_the_outcome_specific_wire_key ... ok test model::failure_serialization_tests::wire_format_is_exact_and_failure_stays_small ... ok test payload::tests::concurrent_adds_share_the_cached_digest_allocation ... ok test payload::tests::payload_hash_cache_at_1600_adds ... ignored, #190 public payload hash/cache measurements on the locked perf VM only test payload::tests::replacement_and_removal_never_reuse_a_path_name_digest ... ok test payload::tests::same_size_in_place_edits_with_restored_mtime_invalidate_the_digest ... ok test payload::tests::settings_changes_keep_at_most_four_entries ... ok test payload_encoding::tests::binary_replacement_never_reuses_the_previous_encoding ... ok test payload_encoding::tests::gzip_roundtrip_and_repeated_adds_share_one_encoding ... ok test payload_encoding::tests::small_payloads_retain_raw_streaming ... ok test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test prompt_image::tests::helper_identity_refuses_in_place_and_path_replacement ... ok test session_bridge::tests::failed_dispatcher_does_not_publish_a_session ... ok test session_bridge::tests::publication_and_dispatcher_greeting_share_the_first_write ... ok test session_bridge::tests::publication_prefix_preserves_every_dispatcher_byte_across_reads ... ok test setup::tests::exhausted_setup_failure_retains_reason_without_offering_retry ... ok test setup::tests::host_status_outlives_its_subscriber_and_keeps_exact_identity ... ok test socket_connector::tests::connected_socket_has_nodelay_before_any_application_bytes ... ok test socket_connector::tests::descriptor_delivery_keeps_the_exact_peer_after_helper_copy_closes ... ok test socket_connector::tests::invalid_endpoint_cannot_send_a_descriptor ... ok test stdio::tests::pipes_preserve_bytes_and_do_not_escape_into_child_exec ... ok test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok test result: ok. 44 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.26s Running tests/already_added_breakit.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/already_added_breakit-99b38edbed8cc7cb) running 1 test test a_host_key_challenge_never_serializes_as_a_host_id ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/auth_order-7f1c9d76494c5086) running 11 tests test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test automatic_checked_channel_selects_bridge_after_read_only_authentication ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test manual_hosts_try_available_methods_without_a_separate_none_refusal ... ok test manual_method_trust_refusal_never_loads_later_credentials ... ok test only_exhausted_auth_returns_typed_choose_method ... ok test ownership_check_fallback_repeats_only_the_allowlisted_read_only_command ... ok test ownership_checks_authenticate_once_without_replaying_a_different_check ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/build_removal-36fc813e5dfe0bb4) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.61s Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/concurrency-1637a17738b74cc3) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test component_off_retires_a_real_native_helper ... ok test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/config_isolation-5136cd71a92e1d23) running 2 tests test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test synthetic_master_socket_is_private_at_creation ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/credentials-3016d009da101052) running 4 tests test credential_helper_refuses_host_trust_and_permission_prompts ... ok test kernel_running_helper_is_materialized_in_its_private_scope ... ok test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test password_socket_refuses_an_unrelated_same_user_process ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.50s Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/diagnostics-8016ef45d5daacbd) running 12 tests test bootstrap_status_mapping_covers_each_step_and_approved_mode ... ok test control_probe_statuses_preserve_actionable_setup_messages ... ok test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test engine_failures_keep_their_ssh_boundary_without_remote_bytes ... ok test every_failed_step_names_the_step_and_a_next_action ... ok test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test failure_diagnostics_distinguish_auth_trust_transport_and_channel_without_raw_text ... ok test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test script_status_diagnostics_are_honest_for_all_nonzero_codes ... ok test status_mapping_preserves_authentication_and_missing_payload_classification ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/event_metadata-735e17f4e6c1e8dc) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/foreground-0f3aada5376df028) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/host_trust-f2c4b08665836335) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/kayg/.cache/codex-scratch/review-query-replies-r2/target/debug/deps/install-41cb897cde3a5ed0) running 95 tests test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test active_transaction_is_live_between_ssh_setup_commands ... ok test breakit2_interrupted_lock_creation_allows_cleanup_and_retry ... ok test breakit2_rollback_preserves_foreign_launcher_new ... ok test breakit2_rollback_preserves_foreign_unit_new ... ok test breakit2_stage_refuses_parent_that_cannot_be_rolled_back ... ok test buffering_setup_reader_receives_no_payload_until_selection ... ok test checked_staging_survives_a_buffering_payload_reader_and_reuses_the_cache ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test command_failure_names_upload_join_install_and_start_separately ... ok test commit_signal_retains_journal_until_proof_and_on_cancel ... ok test compound_activation_and_start_failures_keep_exact_step_and_rollback ... ok test compound_join_failure_preserves_the_original_status_and_boundary ... ok test compound_restaging_refuses_a_foreign_journal_before_upload ... ok test compound_setup_keeps_owned_rollback_and_linger_warning ... ok test compressed_stage_roundtrips_and_rejects_corruption_before_execution ... ok test concurrent_attempts_cannot_replace_or_clean_each_others_transaction ... ok test control_cleanup_never_follows_a_socket_symlink_or_removes_regular_data ... ok test crash_mid_install_can_roll_back_and_retry ... ok test declared_transfer_refuses_a_different_selection_or_a_named_refusal ... ok test declared_transfer_sends_the_payload_before_any_selection_receipt ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test duplex_check_refuses_named_failures_and_oversized_records_before_staging ... ok test earlier_attempt_classification_preserves_status_boundary_and_authentication ... ok test earlier_attempt_records_reject_suffixes_truncation_and_unbounded_counts ... ok test earlier_binary_cache_is_refreshed_before_owned_recovery ... ok test earlier_control_socket_receipt_recovers_before_a_new_setup ... ok test early_staging_preserves_canonical_foreign_root_refusal ... ok test enrollment_process_exit_71_is_not_reported_as_directory_refusal ... ok test every_setup_command_fits_one_kernel_argument_in_both_modes ... ok test facts_timeout_retires_stale_plugin_control_socket_before_retry ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test foreign_data_refusal_retains_exit_status_and_actionable_directory ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test framed_join_refusal_keeps_status_separate_from_upload ... ok test framed_receipts_preserve_upload_failures_and_reject_extra_output ... ok test framed_upload_keeps_invitation_after_verified_raw_and_compressed_payloads ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test full_payload_restaging_preserves_the_running_session_build ... ok test full_stage_frees_payload_before_allocating_a_cleanup_receipt ... ok test installed_infraternal_agent_always_restarts_without_start_limit ... ok test interrupted_acquisition_cleanup_receipt_can_resume ... ok test interrupted_control_cleanup_is_resumed_only_by_its_original_attempt ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test known_failed_setup_finishes_without_a_second_confirmation ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test live_setup_retry_preserves_the_bridge_and_host_identity_state ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test missing_payload_preserves_the_bootstrap_binary_remedy ... ok test negotiated_retry_reuses_only_a_verified_cache_after_activation_refusal ... ok test negotiated_transfer_delivers_the_invitation_after_a_buffering_head ... ok test one_command_channel_carries_check_verified_upload_and_bridge_bytes ... ok test optional_session_payload_is_architecture_scoped_and_refuses_symlinks ... ok test partial_full_upload_rebridges_from_a_verified_image ... ok test payload_reuse_never_adopts_a_foreign_cache_directory ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test refused_previous_service_stop_only_removes_staging ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test reported_cache_digest_selects_reuse_without_sending_payload ... ok test restart_recovers_partial_stage_retirement ... ok test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test retry_resends_payload_when_cache_content_changes ... ok test retry_reuses_verified_payload_after_owned_rollback ... ok test review_inode_reuse_after_diagnostics_preserves_live_replacement ... original 4987476 samples [4987565, 4987566, 4987567, 4987568, 4987569, 4987570, 4987571, 4987573] FAILED test review_interrupted_transaction_receipt_allows_owned_cleanup ... ok test review_live_relative_control_socket_preserves_its_receipt ... ok test review_restart_recovers_cleanup_after_base_retirement ... ok test review_restart_recovers_cleanup_after_owner_retirement ... ok test review_unrelated_user_relative_socket_does_not_block_stale_cleanup ... ignored, requires sudo -n to create an isolated listener as uid 65534 test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test session_restaging_uses_one_compound_command ... ok test setup_receipts_require_exact_order_and_preserve_failure_boundaries ... ok test setup_transaction_holds_a_live_lock_between_shell_commands ... ok test staged_shell_bridge_keeps_protocol_bytes_and_releases_setup_guard ... ok test stale_previous_attempt_socket_can_be_retired_without_manual_cleanup ... ok test start_fresh_resumes_the_same_attempt_after_owner_confirmation ... ok test stopped_control_socket_modes_from_service_manager_are_recoverable ... ok test streamed_digest_refuses_a_short_file_or_a_changed_stream_before_launch ... ok test streaming::decoded_image_and_hash_advance_before_the_transfer_tail_is_released ... ok test successful_stage_releases_the_parent_lock_from_its_lease_child ... ok test turning_off_paused_host_provisioning_preserves_earlier_leftovers ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok failures: ---- review_inode_reuse_after_diagnostics_preserves_live_replacement stdout ---- thread 'review_inode_reuse_after_diagnostics_preserves_live_replacement' (3314669) panicked at crates/plugins/ssh/tests/install.rs:3483:5: assertion `left == right` failed: fixture could not reproduce inode reuse in 256 allocations left: [97, 98, 115, 101, 110, 116, 10] right: [114, 101, 117, 115, 101, 100, 10] note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace failures: review_inode_reuse_after_diagnostics_preserves_live_replacement test result: FAILED. 93 passed; 1 failed; 1 ignored; 0 measured; 0 filtered out; finished in 42.30s error: test failed, to rerun pass `-p infraternal-plugin-ssh --test install` (test: 371s) ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-query-replies-r2/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-query-replies-r2/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ └── infraternal-session v0.1.0 ├── infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ ├── infraternal-plugin-ssh v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-session v0.1.0 │ └── infraternal-server v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-query-replies-r2/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── infraternal-plugin-remote v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.46 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.46 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-session v0.1.0 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.46 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.46 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-mesh v0.1.0 (*) ├── infraternal-plugin-release v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── (dev) infraternal-status v0.1.0 │ └── infraternal v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-query-replies-r2/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-session v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ ├── hyper v1.11.1 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-query-replies-r2/Cargo.lock:199:1 │ 199 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 200 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-session v0.1.0 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.46 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.46 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-mesh v0.1.0 (*) ├── infraternal-plugin-release v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── (dev) infraternal-status v0.1.0 │ └── infraternal v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-query-replies-r2/Cargo.lock:201:1 │ 201 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 202 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ ├── infraternal-plugin-ssh v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-session v0.1.0 │ └── infraternal-server v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-query-replies-r2/Cargo.lock:204:1 │ 204 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 205 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-query-replies-r2/Cargo.lock:206:1 │ 206 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 207 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 208 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-session v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.46 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.15 │ │ └── rustls v0.23.46 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── (dev) infraternal-status v0.1.0 │ │ └── infraternal v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-query-replies-r2/Cargo.lock:250:1 │ 250 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 251 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── infraternal-shim v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ └── infraternal-session v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ └── infraternal-shim v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ └── infraternal-session v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.46 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.15 │ │ │ └── rustls v0.23.46 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-shim v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── (dev) infraternal-status v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.46 (*) │ │ └── rustls-webpki v0.103.15 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.46 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.2 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── (dev) infraternal v0.1.0 (*) │ ├── (dev) infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── (dev) infraternal-plugin-remote v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-query-replies-r2/Cargo.lock:253:1 │ 253 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 254 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-query-replies-r2/Cargo.lock:256:1 │ 256 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 257 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-query-replies-r2/Cargo.lock:258:1 │ 258 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 259 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/kayg/Developer/infraternal/.worktrees/review-query-replies-r2/Cargo.lock:316:1 │ 316 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 317 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-session v0.1.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.46 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.46 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-session v0.1.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ └── infraternal-shim v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ └── infraternal-session v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.2 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── (dev) infraternal v0.1.0 (*) │ ├── (dev) infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── (dev) infraternal-plugin-remote v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.2 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.2 (*) ├── tokio v1.53.2 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok (cargo-deny: 2s) ==> static builds x86_64-unknown-linux-musl: exact define removed; build directories remapped; explicit paths preserved; target override refused aarch64-unknown-linux-musl: exact define removed; build directories remapped; explicit paths preserved; target override refused x86_64 OpenSSL source: AVX-512 GCM dispatch removed idempotently native compiler metadata: path independent; platform/date retained; unexpected syntax refused Rust remapping: differently named checkout roots produce identical stripped artifacts . ---------------------------------------------------------------------- Ran 1 test in 0.002s OK Finished `release` profile [optimized] target(s) in 1.08s AES-128-GCM NIST vector encrypt/decrypt passed production trust: PASS (staging-trust authority absent) /home/kayg/.cache/codex-scratch/review-query-replies-r2/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 21215664 bytes; cap: 21215664 bytes; delta: +0 bytes key memory: x86_64-unknown-linux-musl; memlock=8388608 bytes Key memory initialization=1; locked pages and dump exclusion enabled Finished `release` profile [optimized] target(s) in 1.00s production trust: PASS (staging-trust authority absent) /home/kayg/.cache/codex-scratch/review-query-replies-r2/target/aarch64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB executable, ARM aarch64, version 1 (SYSV), statically linked, stripped PT_INTERP: absent; size: 19408192 bytes; cap: 19408192 bytes; delta: +0 bytes key memory: aarch64-unknown-linux-musl runtime not checked (host x86_64; native execution required) x86_64-unknown-linux-musl: exact 21215664-byte cap PASS; 21215665 bytes rejected PASS; smaller artifact requires ratchet PASS aarch64-unknown-linux-musl: exact 19408192-byte cap PASS; 19408193 bytes rejected PASS; smaller artifact requires ratchet PASS unsupported target: rejected PASS bun test v1.4.2 (744846f84) scripts/release/static-metadata-review.test.ts: (pass) x86_64-unknown-linux-musl compiler metadata is independent of the checkout location [43.65ms] (pass) aarch64-unknown-linux-musl compiler metadata is independent of the checkout location [35.95ms] 2 pass 0 fail 10 expect() calls Ran 2 tests across 1 file. [4.50s] server subcommand: exit 2, versioned JSON unavailable result agent group: exit 0, one parsed versioned JSON listing of its commands (static builds: 11s) +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | test | FAIL (101) | | cargo-deny | PASS | | static builds | PASS | +---------------------------+--------------+ FINAL_GATE_EXIT=1 ``` </details>
kayg commented 2026-10-19 13:17:37 +00:00
Author
Owner
Copy link

Finish-record supplement for b429e5664f (verdict HOLD unchanged): the complete finish comment, including verbatim scripts/verify fast output and exit 1, has been independently read back from #160. The uploader rejected executable script extensions; the same fixture reproduction sources are attached below as inert plain text. Reproduction setup and cleanup receipts are linked in the finish record. No source changes, deployment or issue close.

run-final.py.txt
test-runner.sh.txt
socket-test-ns.sh.txt

Finish-record supplement for b429e5664ffc886b492829972ad8ae38d91c2968 (verdict HOLD unchanged): the complete finish comment, including verbatim scripts/verify fast output and exit 1, has been independently read back from #160. The uploader rejected executable script extensions; the same fixture reproduction sources are attached below as inert plain text. Reproduction setup and cleanup receipts are linked in the finish record. No source changes, deployment or issue close. [run-final.py.txt](https://git.kayg.org/attachments/d34c81e3-6a3c-47a8-b3cd-ccfd6f226181) [test-runner.sh.txt](https://git.kayg.org/attachments/4151c8bc-3351-45fb-90d7-8f1f1574591d) [socket-test-ns.sh.txt](https://git.kayg.org/attachments/a3c67194-6414-4bdf-9c7b-3337798cca47)
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
j470b-server-mesh-rejoin
mesh-compat-382
j444b-d381-key-wins-flood
j461b-macos-utun-reader-thread
j475b-remove-host-motion
fix-reconnect-new-link
j481-d380
dev
j479-mesh-soak
fix/j476-host-facts
j475-motion-pill-split
j470-mac-node-join
root-upgrade-d376
j474-review-merge
latency-targets-120hz
nightly-suite-shards
gotatun-pin-j469
macos-utun-reader-thread
fix-flood-echo-stall
wip/j416
motion-fast-ease-out
mesh-addhost-j259
takeover-close-terminals-d368
kbd-instant-followups
fix-trust-key-double-click
nightly-suite-partial-report
appwin-icons-j207
rusqlite-slice1
swipe-content-first-d374
mesh-mtu-381
addhost-instant-open
glass-contrast-d365-mock
glass-contrast-d365
signout-followups-442
fix-startup-toast-red
research-gotatun-matrix-j317
themes-sync-j304
fix-load-flakes
fix-nix-zig-patch
fix-compute01-browser-baseline
ratchet-size-baseline-419
predict-auto-d130
revoke-coverage-d367
nightly-suite-queue-timeout
nightly-browser-suite
fix-rustsec-2026-0459
fonts-ioskeley-obel
log-retention-d375
fix-kbd-no-anim-427
fix-dev-red-specs-2
takeover-proof-305-j205
wip/j410-server-pump
ui-consistency-d372
fix-osc52-clipboard
libghostty-vt-1.0
forget-retired-host-d369
j404-merge-426
fix-setup-lock-race
fix-touch-select-426
revoke-access-report-ui
fix-predictive-echo-specs
fix-selinux-agent-exec
wip/j395-checkpoint2
wip/j395
j391-review-scratch
ui-consistency-j195-deferred-rebased
fix-rustc-paths-421
decisions-wording-341
fix-install-suite-red
fix-dev-rtt-specs
fix-pending-removal-align
fix-privileged-skip
fix-install-suite-404
review-j368
mesh-dns-j254
revoke-access-report-d356b
revoke-privilege-round5
fix-removal-confirm
review-j360
gotatun-rotation-367
deps-refresh-340
review-j354
review-J351
review-j350
addhost-takeover-d359
revoke-report-items-347
revoke-end-sessions-d362
review-j348
size-mesh-ssh-346
size-trim-337
revoke-access-diff-d356
j259-pre-rebase-b06c5a6
j305-ended-at-start-spec
addhost-sudo-consent
fix-layout-real-specs-411
fix-shell-open-411
fix-console-hosts-373
fix-shell-exit
fuzz-host-name-353
fix-host-details-410
macos-filter-j197
research-gotatun-tricks
revoke-p3-j216l
stale-state-pill
revoke-followups-j216k
revoke-progress-j216e
backup/macos01-20261106/lume/j197
backup/macos01-20261106/lume/appwin-icons-j207-stash0
backup/macos01-20261106/claude/stash-0
backup/macos01-20261106/claude/stash-1
backup/macos01-20261106/claude/J80-macos-s1
backup/macos01-20261106/claude/J80
backup/macos01-20261106/claude/J80-slice1-20261102
backup/macos01-20261106/claude/J16b-appwin-on-dev
backup/macos01-20261106/claude/appwin-launch-idle-146
backup/macos01-20261106/claude/J80-s1-run
wip/j259
trust-285-p3c
runtime-lock-j216f
mesh-ssh-p3-j175
tun-proof-p3b
trust-285-p3
terminal-polish-j271
tun-proof-p3
ssh-install-flakes-j216i
fuzz-fixes-j264
trust-285-a
trust-285-b
restart-oversized-fixture-j198
backup/macos01-20261106/lume/appwin-icons-j207
restart-bound-j216h
up-preflight-p3-j198
backup/macos01-20261106/lume/j251
up-preflight-j198
wip/up-preflight-j198-j245-p2
wip/up-preflight-j198-j245-p1
agent-fsync-offloop-j196
wip/up-preflight-j198-j245
settings-offscreen-j231
wip/up-preflight-j198-j226-inspection
wip/j103f
themes-j206
wip/up-preflight-j198-j226
flakes-j216c
backup/macos01-20261106/claude/j197
flakes-j216b
backup/macos01-20261106/claude/j197-red
wip/up-preflight-j198-review
flakes-j216
backup/macos01-20261106/claude/appwin-icons-j207
engineering-j208b
appwin-mock-j209
toast-stack-j165
engineering-j208
decisions-d351
decisions-d350
decisions-d349
appearance-presets-mock-j129
decisions-d348
docs-audit-spec
doc-coverage-baseline-raise
decisions-d347
decisions-d346b
decisions-d346
j88h-profile
ui-consistency-j195-deferred
ui-consistency-j195
engineering-practices-j194
preferred-login-ui-j166
signin-pools-263-j174
macos-node-265-s1
decisions-d345
decisions-d344
proxy-cgroup-j164
verify-quick-fuzz-329
proxy-start-io-j168
timing-flakes-j163
up-263-s1
mcp-events-j147
verify-quick-fuzz-j158
proxy-p3-j159
agent-resource-j157-detect
wip/j103d-final
remote-cancel-hang-j155
proxy-traefik-281-j62d
j149-verify-quick
proxy-traefik-281-j62b
j150-drop-unnamed
wip/j79d-red-r4
wip/j103d-d332
rootless-toast-j142
wip/j103d-head
wip/j103d
j125c-mcp
macos-build-j136
backup/macos01-20261106/claude/j136
wip/j79d-red-cli
wip/j79d-red-server
j121-link-liveness
j118c-tracer-failures
wip/j79c-head
release-desktop-j131
j124c-signed-macos
wip/j79c-red-p3
wip/j79c-red-p23
wip/j79c-red-p22
merge-j128-check
perf-deferred-j128
sidebar-toggle-260
j127-shortcut-changed-dot
j125-mcp
j118-tracer-failures
j126-account-summary
settings-sections-mock-j92
j120-pinch-lock
sidebar-292
backup/macos01-20261106/claude/j120
taste-2026-11-03
row-actions-242-215
backup/macos01-20261106/claude/stash-0-untracked
backup/macos01-20261106/claude/J80-265-s1-run
backup/macos01-20261106/claude/J80-macos-s1-20261102
j112-canvas-commands
ui-no-overshoot-scroll
fix-recovery-restart
backup/macos01-20261106/claude/stash-1-untracked
taste-2026-11-02
size-baseline-ratchet
machine-cards-structure-j108
j109-boot-copy-mockups
fix-dev-red
wip/up-263-s1
j95b-settings-rows
proxy-traefik-281
j95-option-rows
docs-human-j91
docs-keys-palette
fix-flood-1013-270-j38d
mesh-ssh-s1
mesh-ssh-s0
addhost-d291-tunnel
test-stability-load
mesh-relay-220
repro-296
shim-thp-off-24
mesh-pins-258-v2
mesh-dns
signin-d311-merged
docs-pages
ui-size-283
fix-ui-batch-specs
wip/j12b-edge-update
gate-on-arm
fix-rename-sync-293
trust-285-j60b
fix-focus-ring-clip
integ-ui-1101
edge-update-v2
signin-d311
taste-2026-11-01
layout-per-tab-250
ui-approved-splitopt-224
ui-approved-splitopt-224-on-dev
icon-text-centre-282
ui-approved-189-212-216
research-reverse-proxy
transfer-budget-320
review-mesh-pins-258-r2
sidebar-pill-259
review-mesh-relay-220
wip/j12-edge-update-v2
nix-package
status-crash-loop-237
fix-dev-test-failures
fix-fixture-socket-path
wip/mesh-relay-220-pre-dev-advance-rebase
fix-canvas-side-clip
research-head-to-head
frosted-real-256
review-mesh-pins-258
wip/mesh-relay-220-pre-final-rebase
review-layout-per-tab-250-r2
broad-suite-triage
nix-devshell
review-status-crash-loop-237-r3
wip/nix-devshell-pre-p3
taste-frosted-real
wip/code-serve-demo-2026-10-30
wip/code-serve-glass-2026-10-30
wip/code-serve-clusters-2026-10-30
wip/code-merge-release94-dev-2026-10-30
wip/rproxy-delta-scratch-2026-10-30
wip/stale-note-257-staged-2026-10-30
wip/d241-size-staged-2026-10-30
review-broad-suite-207
wip/mesh-pins-258-pre-split
wip/mesh-relay-220-pre-rebase
mesh-measure-220
plan-211-update
review-edge-autoupdate-r3
perf24-reconnect
review-stale-note-r2
release-prod-live
d241-shell-marker
review-mesh-pins-server-258
review-revocation-r3
review-setup-token-r2
review-sync-journal-r3
wip/review-mesh-pins-258-prune-review-1995fee46
frosted-scroll-256
sync-journal-r3
revocation-per-account-wip
review-tokio-asyncfd-0386
review-sync-p3s
wip/stash-8by64-stash0-2026-10-30
mesh-drag-r2
setup-token-data-wip
release-9-4
auth-busy-1013
mesh-view-overlap
sync-p3s
review-auth-busy-wake
review-readd-r8-wip
mesh-drag-bounds
audit-auth-93
app-windows-stream-start
review-authority-cap-r3
app-windows-r7-measure
readd-minimal-r6
readd-minimal-r5
app-windows-r7-soak
readd-minimal-r4
app-windows-r7
app-windows-r6
readd-minimal-r3
readd-minimal-r2
readd-minimal
merge-release8-dev
review-busy-page-liveness-r2
review-busy-page-liveness
mesh-view-trim
review-authority-read-retry-r2
review-remove-uninstall-r2
release-retry-reattach
release-retry
review-remove-uninstall
review-authority-read-retry
app-windows-ship
mesh-autoswitch-p2
mesh-ssh
mesh-relay
mesh-macos-node
screen-and-control
session-labels
review-real-logins-r5
review-real-logins-r4
review-real-logins-r3
shim-memory-r2
review-real-logins-r2
shim-memory
shadow-addhost-instant
shadow-real-logins
shadow-same-session-flood
shadow-prod-perf-fix
hosts-from-server
app-windows-real
app-windows-transport
release-prod-6w
mesh-policy-verify
quiet-close-toast
dev-merge-r4
review-mesh-agent-transport
review-app-windows-transport
settings-roundtrip
review-release-pipeline-r4
mesh-agent-transport
ended-strip-fix
review-audit-ca-update-d244
settings-rows
phone-width
signout-clear
fix-restart-tests
dev-merge-rp
signer-hardening
review-audit-ca-update
terminal-fidelity
review-audit-ca-update-wip
mesh-integrate
review-mesh-agent-transport-515d3712
review-mesh-dataplane-feec1988
mesh-dataplane
signout
research-canvas-node
wip/review-renderer-cost
wip/review-terminal-fidelity
padlock-glyph
review-release-pipeline-2e95b689
phone-polish
sidebar-polish
inbox-generic
review-mesh-dataplane-378d4055
prod-batch
ui-inbox
ui-ca-unlock
ui-machine-sections
review-mesh-dataplane-a5f744fb
tls-session-prod
session-bounds-prod
fix-dead-session
session-bounds
tls-session
palette-polish
shortcuts-d222
research-appmeta
phone-gutter
ui-centre-button
wip/ui-centre-button
wip/tls-session
review-addhost-breakit
ui-platform
renderer-cost
remote-agents
mesh-api
ssh-bootstrap
prod-hotfix2
prod-fixes
review-remote-agents
review-mesh-dataplane
session-life
research-browser
review-mesh-api
research-capture
review-mesh-api-round3
review-mesh-api-round1
gate-stability
review-gate-stability
review-relay-direct
review-mesh-api-findings
proto-sessions
font-picker
proto-addhost
proto-windows
mesh-core
latency-gate
research-bsd
research-discovery
keytray-mods
mock-core
ui-tweaks
fix-motion-sel
fix-motion
integrate2
fix-robust
t-web
t-server
vt-ghostty
fix-snap-echo
t-web-auth
review-vt2
t-agent
lane-protocol
lane-shim
lane-auth
s1-base
s1-contracts
s1-workspace
No results found.
Labels
Clear labels   
launch-qa
Findings from launch QA.

No labels
launch-qa
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
kayg/infraternal#160
No description provided.