Production browser checks red: theme long tasks, terminal resume/latency probe, access-screen first paint #176

Open
opened 2026-10-12 03:50:31 +00:00 by kayg · 85 comments
Owner

Found by the prod3 A/B (~/.local/state/codex-jobs/infraternal/prod3-ab/ab.md, posted on #169): these fail on live production b4ae9e22 and on 1f77a449 alike. Owner 2026-10-12: fix immediately. Job: prod-perf-fix.

Found by the prod3 A/B (~/.local/state/codex-jobs/infraternal/prod3-ab/ab.md, posted on #169): these fail on live production b4ae9e22 and on 1f77a449 alike. Owner 2026-10-12: fix immediately. Job: prod-perf-fix.
Author
Owner

Starting #176 on prod-perf-fix, base/head 1f77a449ed (production release-prod-3). Read #176 and parent #169 history/A-B evidence; no prior #176 work. D81/D188 budgets and visuals remain unchanged. Browser plugin unavailable; use production Playwright at unique port 4976 under local CPUWeight=10000 scopes. First capture main-thread attribution and cold request waterfall, then atomic repairs, interleaved baseline/head 3 each, and final gates. No deployment.

Starting #176 on prod-perf-fix, base/head 1f77a449ede540281319ba01d149a2f60d584f3b (production release-prod-3). Read #176 and parent #169 history/A-B evidence; no prior #176 work. D81/D188 budgets and visuals remain unchanged. Browser plugin unavailable; use production Playwright at unique port 4976 under local CPUWeight=10000 scopes. First capture main-thread attribution and cold request waterfall, then atomic repairs, interleaved baseline/head 3 each, and final gates. No deployment.
Author
Owner

Baseline diagnostics (#176): production theme test fails with 5 long tasks (52,53,89,52,53 ms); switch p99=13.5ms, palette setters p50=0ms, repaint p50=26.7ms. LOAF attributes deferred repaint forced style/layout up to32.3ms. Chromium timeline separately shows UpdateLayoutTree/Layout/Paint/Layerize/Commit; a56.042ms timer callback used9.325ms thread CPU, so shared-host descheduling contributes. Renderer assigns canvas font per row (vendor renderAsciiRunsAndComplexCells); terminal.ts font wrapper currently calls native setter even for unchanged fonts. Testing a guarded native setter with reset detection; no pixel/geometry changes.
Cold baseline waterfall: HTML→main.js end1933.5ms→static dependencies2283.3→auth/status2630.5→auth/session2965.4; 8 blocking sheets209380B identity +main111556B +static9483B +default font46432B. Plain theme fixture retained10000rows/605847output bytes, WASM35848192B. Evidence diagnostic-base.log/theme-timeline-base.log and public asset/LOAF/timeline artifacts. Budgets/RTT/sample counts unchanged. Initial inline-document experiment remains red, not accepted; correcting early preload discovery and measuring again.

Baseline diagnostics (#176): production theme test fails with 5 long tasks (52,53,89,52,53 ms); switch p99=13.5ms, palette setters p50=0ms, repaint p50=26.7ms. LOAF attributes deferred repaint forced style/layout up to32.3ms. Chromium timeline separately shows UpdateLayoutTree/Layout/Paint/Layerize/Commit; a56.042ms timer callback used9.325ms thread CPU, so shared-host descheduling contributes. Renderer assigns canvas font per row (vendor renderAsciiRunsAndComplexCells); terminal.ts font wrapper currently calls native setter even for unchanged fonts. Testing a guarded native setter with reset detection; no pixel/geometry changes. Cold baseline waterfall: HTML→main.js end1933.5ms→static dependencies2283.3→auth/status2630.5→auth/session2965.4; 8 blocking sheets209380B identity +main111556B +static9483B +default font46432B. Plain theme fixture retained10000rows/605847output bytes, WASM35848192B. Evidence diagnostic-base.log/theme-timeline-base.log and public asset/LOAF/timeline artifacts. Budgets/RTT/sample counts unchanged. Initial inline-document experiment remains red, not accepted; correcting early preload discovery and measuring again.
Author
Owner

Login root cause: src/auth.ts made six serial requests login-start→login-finish→unlock-session→wraps→unlock-finish→session before terminal setup; at300ms RTT these alone cost1800ms. Restricted unlock-session and encrypted wraps are read-only under the same pending cookie; fetch them concurrently, preserving the transaction-bound unlock-finish, PRF fallback, unwrap and logout cleanup. Unchanged10-sample sign-in checks now p99=4524.6 and4484.7ms versus5000ms; these are exploratory loaded-host runs, not final interleaved evidence. No server/auth contract changes.
Prediction root cause: src/predictive-echo.ts draws immediately on input then redraws the unchanged overlay in its visibility rAF. New production-renderer regression fails on untouched1f77a449 (2draws, expected1), passes after repair (1draw; K still visible). Visibility still recorded at the next frame, never at JS insertion. Evidence prediction-red.log/head5.log. Reduced work does not yet establish glyph p99 or overall gate PASS.
Deferred repaint lowers median JS repaint27.2→7.1→4.4ms, but long tasks persist under load46–80 and are not waived. Access remains red. Kept main.js module identity after rejecting duplicate inline startup; now testing only access CSS inline, other unchanged sheets loaded alongside login before terminal mount, and lazy recovery codecs. All budgets/assertions/sample counts/RTT unchanged.

Login root cause: src/auth.ts made six serial requests login-start→login-finish→unlock-session→wraps→unlock-finish→session before terminal setup; at300ms RTT these alone cost1800ms. Restricted unlock-session and encrypted wraps are read-only under the same pending cookie; fetch them concurrently, preserving the transaction-bound unlock-finish, PRF fallback, unwrap and logout cleanup. Unchanged10-sample sign-in checks now p99=4524.6 and4484.7ms versus5000ms; these are exploratory loaded-host runs, not final interleaved evidence. No server/auth contract changes. Prediction root cause: src/predictive-echo.ts draws immediately on input then redraws the unchanged overlay in its visibility rAF. New production-renderer regression fails on untouched1f77a449 (2draws, expected1), passes after repair (1draw; K still visible). Visibility still recorded at the next frame, never at JS insertion. Evidence prediction-red.log/head5.log. Reduced work does not yet establish glyph p99 or overall gate PASS. Deferred repaint lowers median JS repaint27.2→7.1→4.4ms, but long tasks persist under load46–80 and are not waived. Access remains red. Kept main.js module identity after rejecting duplicate inline startup; now testing only access CSS inline, other unchanged sheets loaded alongside login before terminal mount, and lazy recovery codecs. All budgets/assertions/sample counts/RTT unchanged.
Author
Owner

Host-load finding: infraternal-dev reports12online CPUs; load reached107.08/79.63/59.50 during exploratory runs. All browser benchmarks stay in CPUWeight=10000 scopes. Own cold native gate scope reduced toCPUWeight=100 during browser investigation (native gate is not a benchmark) to avoid competing with the measured browser. No CPU load generators, SSH, perfVM, budget changes or exemptions. Prediction CPU p99=1.2ms passes2ms, but rAF visibility p99=70.6ms and reconnect1095.7ms still fail17/900ms; theme tasks persist despite median repaint4.4ms. These failures remain unwaived. Will finish prescribed interleaved baseline/head and separate actual scheduler limits from code work.

Host-load finding: infraternal-dev reports12online CPUs; load reached107.08/79.63/59.50 during exploratory runs. All browser benchmarks stay in CPUWeight=10000 scopes. Own cold native gate scope reduced toCPUWeight=100 during browser investigation (native gate is not a benchmark) to avoid competing with the measured browser. No CPU load generators, SSH, perfVM, budget changes or exemptions. Prediction CPU p99=1.2ms passes2ms, but rAF visibility p99=70.6ms and reconnect1095.7ms still fail17/900ms; theme tasks persist despite median repaint4.4ms. These failures remain unwaived. Will finish prescribed interleaved baseline/head and separate actual scheduler limits from code work.
Author
Owner

Completed logical step c2e5d528: unchanged predictive glyph is drawn once, then visibility is recorded at the next animation frame without a redraw. Pushed prod-perf-fix only. Baseline production renderer regression2draws→head1draw, visible K unchanged; head5.log. Typecheck PASS, source/crypto/document153PASS/0FAIL (step-check.log/step-tests.log). Overall browser budgets remain red and unwaived; no deployment.

Completed logical step c2e5d528: unchanged predictive glyph is drawn once, then visibility is recorded at the next animation frame without a redraw. Pushed prod-perf-fix only. Baseline production renderer regression2draws→head1draw, visible K unchanged; head5.log. Typecheck PASS, source/crypto/document153PASS/0FAIL (step-check.log/step-tests.log). Overall browser budgets remain red and unwaived; no deployment.
Author
Owner

Completed/pushed only prod-perf-fix: 8d72edaa concurrent restricted login reads; ecf956c6 two exact-transaction overlap/refusal regressions; c0db6ca7 native canvas font setter guard with reset detection. Per-step fmt/typecheck PASS; latest source/crypto/document gate155PASS/0FAIL/11254assertions,1029ms (head9-tests.log). Auth regressions baseline0PASS/2FAIL→head2PASS; native-font production regression baseline34assignments/unchanged redraw→head0, backing reset restores requested face (font-red.log/prod-head.log). No authority, appearance, budget or foundational dependency change. Actual production-build diagnostic also remains red under shared load, so no preview-build-only cause or completion claim. Input-before-painter regression is red on baseline and green experimentally; next atomic step pending.

Completed/pushed only prod-perf-fix: 8d72edaa concurrent restricted login reads; ecf956c6 two exact-transaction overlap/refusal regressions; c0db6ca7 native canvas font setter guard with reset detection. Per-step fmt/typecheck PASS; latest source/crypto/document gate155PASS/0FAIL/11254assertions,1029ms (head9-tests.log). Auth regressions baseline0PASS/2FAIL→head2PASS; native-font production regression baseline34assignments/unchanged redraw→head0, backing reset restores requested face (font-red.log/prod-head.log). No authority, appearance, budget or foundational dependency change. Actual production-build diagnostic also remains red under shared load, so no preview-build-only cause or completion claim. Input-before-painter regression is red on baseline and green experimentally; next atomic step pending.
Author
Owner

Milestone scripts/verify fast reached fmt/nativefmt/clippy/cargo-deny PASS. Test row FAIL(101) is exit101, not101failed tests: agent_review initial_attach_requires_explicit_credit_before_replay failed because its Python fixture assumes relative target/ exists despite CARGO_TARGET_DIR (FileNotFoundError target/ac4149150). Added only an ignored target symlink into this job's HOME scratch; isolated fixture rerun in progress. No product/Rust change or load exemption. Static row also fails unchanged production snapshot: static x86size20093776B >16404816B; same inherited #169 blocker, budget unchanged. Full milestone log fast-milestone.log; final full head gate still required. Browser exploratory head11 fixture stopped during the run (socket hang-up then ECONNREFUSED), after four regression cases passed; no app success claim from that incomplete run.

Milestone scripts/verify fast reached fmt/nativefmt/clippy/cargo-deny PASS. Test row FAIL(101) is exit101, not101failed tests: agent_review initial_attach_requires_explicit_credit_before_replay failed because its Python fixture assumes relative target/ exists despite CARGO_TARGET_DIR (FileNotFoundError target/ac4149150). Added only an ignored target symlink into this job's HOME scratch; isolated fixture rerun in progress. No product/Rust change or load exemption. Static row also fails unchanged production snapshot: static x86size20093776B >16404816B; same inherited #169 blocker, budget unchanged. Full milestone log fast-milestone.log; final full head gate still required. Browser exploratory head11 fixture stopped during the run (socket hang-up then ECONNREFUSED), after four regression cases passed; no app success claim from that incomplete run.
Author
Owner

Additional measured causes: plain/soft theme choices reinstalled an identical adopted backdrop stylesheet via CSSStyleSheet.replaceSync. Production-base regression records1replacement for Paper→Ink despite both using none; cached identical rules eliminate it without changing CSS. Native prediction font setter regression records1redundant assignment on a subsequent glyph; shared packages/ui cache now records0, with geometry invalidation/reset detection retained. Head11 four renderer/input regressions passed, then fixture vanished (socket hang-up/ECONNREFUSED); rerunning at new unique port5026. No timing waiver.
Cookie-read floor: previous document waited status→session (HTML300+status300+session300ms). Start both reads with the document; setup and invalid status must discard unused session snapshot before registration/retry. Regression0PASS/2FAIL on1f77a449; prototype invalid-status case1PASS/1FAIL before cleanup repair. Also prepare public core/terminal modules, selected font and WASM concurrently with the post-login cookie read; no terminal/socket/renderloop starts before existing identity checks. Inline bootstrap bytes now count against unchanged D188 JS limits. Final gates and interleaved comparison remain due.

Additional measured causes: plain/soft theme choices reinstalled an identical adopted backdrop stylesheet via CSSStyleSheet.replaceSync. Production-base regression records1replacement for Paper→Ink despite both using none; cached identical rules eliminate it without changing CSS. Native prediction font setter regression records1redundant assignment on a subsequent glyph; shared packages/ui cache now records0, with geometry invalidation/reset detection retained. Head11 four renderer/input regressions passed, then fixture vanished (socket hang-up/ECONNREFUSED); rerunning at new unique port5026. No timing waiver. Cookie-read floor: previous document waited status→session (HTML300+status300+session300ms). Start both reads with the document; setup and invalid status must discard unused session snapshot before registration/retry. Regression0PASS/2FAIL on1f77a449; prototype invalid-status case1PASS/1FAIL before cleanup repair. Also prepare public core/terminal modules, selected font and WASM concurrently with the post-login cookie read; no terminal/socket/renderloop starts before existing identity checks. Inline bootstrap bytes now count against unchanged D188 JS limits. Final gates and interleaved comparison remain due.
Author
Owner

Completed/pushed logical step bb22741c93: Send and predict input before waking the host painter. fmt/typecheck/source+crypto+document gate PASS; logs input-order-{fmt,check,tests}.log. The renderer wakes by painting synchronously. Handle input before that wake, Browser budgets remain unwaived; final interleaved/full gates pending.

Completed/pushed logical step bb22741c931bee9217c1ecedf55d1fbe5ec3dd7a: Send and predict input before waking the host painter. fmt/typecheck/source+crypto+document gate PASS; logs input-order-{fmt,check,tests}.log. The renderer wakes by painting synchronously. Handle input before that wake, Browser budgets remain unwaived; final interleaved/full gates pending.
Author
Owner

Completed/pushed logical step 84d3c7f794: Protect input dispatch ahead of the unchanged painter. fmt/typecheck/source+crypto+document gate PASS; logs input-order-test-{fmt,check,tests}.log. The regression captures only operation order, never frame contents. It fails Browser budgets remain unwaived; final interleaved/full gates pending.

Completed/pushed logical step 84d3c7f794d1f1efa83c7449deabdce77d51c239: Protect input dispatch ahead of the unchanged painter. fmt/typecheck/source+crypto+document gate PASS; logs input-order-test-{fmt,check,tests}.log. The regression captures only operation order, never frame contents. It fails Browser budgets remain unwaived; final interleaved/full gates pending.
Author
Owner

Completed/pushed logical step dbdc9f0111: Share in-flight terminal engine initialization. fmt/typecheck/source+crypto+document gate PASS; logs engine-prepare-{fmt,check,tests}.log. Fifty concurrent cold preparations created fifty real WASM instances and Browser budgets remain unwaived; final interleaved/full gates pending.

Completed/pushed logical step dbdc9f0111a16dda5018eedf4a75465e979e38a7: Share in-flight terminal engine initialization. fmt/typecheck/source+crypto+document gate PASS; logs engine-prepare-{fmt,check,tests}.log. Fifty concurrent cold preparations created fifty real WASM instances and Browser budgets remain unwaived; final interleaved/full gates pending.
Author
Owner

Completed/pushed logical step d17c83d75f: Exercise fifty concurrent preparations against real WASM. fmt/typecheck/source+crypto+document gate PASS; logs engine-prepare-test-{fmt,check,tests}.log. Measure actual compilation/instantiation and initial memory for fifty callers. Browser budgets remain unwaived; final interleaved/full gates pending.

Completed/pushed logical step d17c83d75fce1ddd2a2bf2ec9eff3bbaba4110ca: Exercise fifty concurrent preparations against real WASM. fmt/typecheck/source+crypto+document gate PASS; logs engine-prepare-test-{fmt,check,tests}.log. Measure actual compilation/instantiation and initial memory for fifty callers. Browser budgets remain unwaived; final interleaved/full gates pending.
Author
Owner

Completed/pushed logical step 8d66a294b6: Reuse the prediction canvas font until native state changes. fmt/typecheck/source+crypto+document gate PASS; logs overlay-font-{fmt,check,tests}.log. Every predicted glyph reassigned its unchanged native font. Cache the request Browser budgets remain unwaived; final interleaved/full gates pending.

Completed/pushed logical step 8d66a294b624f9cd574a489941241766b060002a: Reuse the prediction canvas font until native state changes. fmt/typecheck/source+crypto+document gate PASS; logs overlay-font-{fmt,check,tests}.log. Every predicted glyph reassigned its unchanged native font. Cache the request Browser budgets remain unwaived; final interleaved/full gates pending.
Author
Owner

Completed/pushed logical step 8be4e3c699: Protect native font reuse and backing reset recovery. fmt/typecheck/source+crypto+document gate PASS; logs font-state-tests-{fmt,check,tests}.log. Production renderer checks require zero setters on unchanged redraw/glyph Browser budgets remain unwaived; final interleaved/full gates pending.

Completed/pushed logical step 8be4e3c699d9744b65d82531b003ffddb7585134: Protect native font reuse and backing reset recovery. fmt/typecheck/source+crypto+document gate PASS; logs font-state-tests-{fmt,check,tests}.log. Production renderer checks require zero setters on unchanged redraw/glyph Browser budgets remain unwaived; final interleaved/full gates pending.
Author
Owner

Completed/pushed logical step 9206c76051: Load recovery codecs only when a ceremony needs them. fmt/typecheck/source+crypto+document gate PASS; logs recovery-codecs-{fmt,check,tests}.log. The English word list and recovery codec were on every access document Browser budgets remain unwaived; final interleaved/full gates pending.

Completed/pushed logical step 9206c76051114ee7b8c0278a0ea464f5823321e3: Load recovery codecs only when a ceremony needs them. fmt/typecheck/source+crypto+document gate PASS; logs recovery-codecs-{fmt,check,tests}.log. The English word list and recovery codec were on every access document Browser budgets remain unwaived; final interleaved/full gates pending.
Author
Owner

Completed/pushed logical step 17dc46bee9: Consume parallel startup reads once and discard stale snapshots. fmt/typecheck/source+crypto+document gate PASS; logs startup-auth-{fmt,check,tests}.log. The access document can start status and session in parallel with assets. Browser budgets remain unwaived; final interleaved/full gates pending.

Completed/pushed logical step 17dc46bee91dd16f9e4ea42b93314085913b6fe8: Consume parallel startup reads once and discard stale snapshots. fmt/typecheck/source+crypto+document gate PASS; logs startup-auth-{fmt,check,tests}.log. The access document can start status and session in parallel with assets. Browser budgets remain unwaived; final interleaved/full gates pending.
Author
Owner

Completed/pushed logical step 7afa3c4b13: Protect fresh cookie reads after setup and status failure. fmt/typecheck/source+crypto+document gate PASS; logs startup-auth-tests-{fmt,check,tests}.log. Both baseline regressions retain the unused startup response; head discards Browser budgets remain unwaived; final interleaved/full gates pending.

Completed/pushed logical step 7afa3c4b133c5334e66d8c0132f826509694cba3: Protect fresh cookie reads after setup and status failure. fmt/typecheck/source+crypto+document gate PASS; logs startup-auth-tests-{fmt,check,tests}.log. Both baseline regressions retain the unused startup response; head discards Browser budgets remain unwaived; final interleaved/full gates pending.
Author
Owner

Completed/pushed logical step 4b90d49886: Avoid redundant theme stylesheet work and separate repaints. fmt/typecheck/source+crypto+document gate PASS; logs theme-work-{fmt,check,tests}.log. Plain/soft theme choices replaced identical backdrop rules and globally Browser budgets remain unwaived; final interleaved/full gates pending.

Completed/pushed logical step 4b90d498864b07d1349a844cab33474901e9508e: Avoid redundant theme stylesheet work and separate repaints. fmt/typecheck/source+crypto+document gate PASS; logs theme-work-{fmt,check,tests}.log. Plain/soft theme choices replaced identical backdrop rules and globally Browser budgets remain unwaived; final interleaved/full gates pending.
Author
Owner

Completed/pushed logical step 4c6839431e: Protect reuse of unchanged backdrop rules. fmt/typecheck/source+crypto+document gate PASS; logs theme-work-test-{fmt,check,tests}.log. The real production-base palette action replaces an unchanged sheet once; Browser budgets remain unwaived; final interleaved/full gates pending.

Completed/pushed logical step 4c6839431e86f3b2378627855e0b6e8645ee08a7: Protect reuse of unchanged backdrop rules. fmt/typecheck/source+crypto+document gate PASS; logs theme-work-test-{fmt,check,tests}.log. The real production-base palette action replaces an unchanged sheet once; Browser budgets remain unwaived; final interleaved/full gates pending.
Author
Owner

Completed/pushed logical step d55a7bffb2: Build parallel asset discovery with the unchanged access styles. fmt/typecheck/source+crypto+document gate PASS; logs critical-document-{fmt,check,tests}.log. Preserve cascade bytes and entry-module URL identity, inline access styles, Browser budgets remain unwaived; final interleaved/full gates pending.

Completed/pushed logical step d55a7bffb2d7910ae0d96b17189f8673f918412d: Build parallel asset discovery with the unchanged access styles. fmt/typecheck/source+crypto+document gate PASS; logs critical-document-{fmt,check,tests}.log. Preserve cascade bytes and entry-module URL identity, inline access styles, Browser budgets remain unwaived; final interleaved/full gates pending.
Author
Owner

Completed/pushed logical step 9de27d59ae: Protect cascade order and entry identity in generated documents. fmt/typecheck/source+crypto+document gate PASS; logs critical-document-test-{fmt,check,tests}.log. Exercise static graph discovery, unchanged style ordering, preserved main Browser budgets remain unwaived; final interleaved/full gates pending.

Completed/pushed logical step 9de27d59aec024266f9e09a13b054bd7e5142bd0: Protect cascade order and entry identity in generated documents. fmt/typecheck/source+crypto+document gate PASS; logs critical-document-test-{fmt,check,tests}.log. Exercise static graph discovery, unchanged style ordering, preserved main Browser budgets remain unwaived; final interleaved/full gates pending.
Author
Owner

Completed/pushed logical step 42743c22f3: Overlap access assets and authenticated terminal preparation. fmt/typecheck/source+crypto+document gate PASS; logs access-startup-{fmt,check,tests}.log. Eight blocking sheets and serial script/font discovery consumed several Browser budgets remain unwaived; final interleaved/full gates pending.

Completed/pushed logical step 42743c22f3af72ca2a9d93f22b70ebdab642f2ce: Overlap access assets and authenticated terminal preparation. fmt/typecheck/source+crypto+document gate PASS; logs access-startup-{fmt,check,tests}.log. Eight blocking sheets and serial script/font discovery consumed several Browser budgets remain unwaived; final interleaved/full gates pending.
Author
Owner

Completed/pushed logical step 8a80d0690e: Check the built access critical path. fmt/typecheck/source+crypto+document gate PASS; logs cold-document-test-{fmt,check,tests}.log. The baseline built HTML has blocking terminal sheets and serial entry Browser budgets remain unwaived; final interleaved/full gates pending.

Completed/pushed logical step 8a80d0690e92111b20160ef745bd9f67be732404: Check the built access critical path. fmt/typecheck/source+crypto+document gate PASS; logs cold-document-test-{fmt,check,tests}.log. The baseline built HTML has blocking terminal sheets and serial entry Browser budgets remain unwaived; final interleaved/full gates pending.
Author
Owner

Completed/pushed logical step 9cf26b07f0: Include inline bootstrap in the strict transfer budget. fmt/typecheck/source+crypto+document gate PASS; logs inline-budget-{fmt,check,tests}.log. Inline discovery code still transfers before first paint. Count it with the Browser budgets remain unwaived; final interleaved/full gates pending.

Completed/pushed logical step 9cf26b07f0fe9c75a30e2a03af40c03ba533bf9d: Include inline bootstrap in the strict transfer budget. fmt/typecheck/source+crypto+document gate PASS; logs inline-budget-{fmt,check,tests}.log. Inline discovery code still transfers before first paint. Count it with the Browser budgets remain unwaived; final interleaved/full gates pending.
Author
Owner

Code head frozen at9cf26b07, all logical code/test slices pushed separately on prod-perf-fix; each SHA/gate recorded above. Source+crypto+document159PASS/0FAIL,11266assertions; typecheck/fmt PASS. Real50-caller initialization: baseline50instances/62259200initial bytes→head1/1245184; no terminal state included. Strict production transfer including787inline JS bytes: criticalgzip294968/307200,Brotli245444/256000; deferred48923/51200,43230/45056. Cold built-document regressionPASS. Author review reviewer-checklist.md.
Started exact prescribed original three-spec comparison (dead-session,terminal-theme,terminal), base1f77a449 thenhead9cf26b07 repeated3each; ports5036/5026; RTT300/jitter30; CPUWeight10000; no concurrent builds will replace either dist during the comparison. An earlier exploratory dist rebuild overlapped a browser run; its later samples are invalid and excluded from acceptance. Temporary target symlink is untracked (not ignored), will be removed with scratch at finish. Corrected real attach-credit fixture8PASS/0FAIL20.76s. No deployment or budget changes.

Code head frozen at9cf26b07, all logical code/test slices pushed separately on prod-perf-fix; each SHA/gate recorded above. Source+crypto+document159PASS/0FAIL,11266assertions; typecheck/fmt PASS. Real50-caller initialization: baseline50instances/62259200initial bytes→head1/1245184; no terminal state included. Strict production transfer including787inline JS bytes: criticalgzip294968/307200,Brotli245444/256000; deferred48923/51200,43230/45056. Cold built-document regressionPASS. Author review reviewer-checklist.md. Started exact prescribed original three-spec comparison (dead-session,terminal-theme,terminal), base1f77a449 thenhead9cf26b07 repeated3each; ports5036/5026; RTT300/jitter30; CPUWeight10000; no concurrent builds will replace either dist during the comparison. An earlier exploratory dist rebuild overlapped a browser run; its later samples are invalid and excluded from acceptance. Temporary target symlink is untracked (not ignored), will be removed with scratch at finish. Corrected real attach-credit fixture8PASS/0FAIL20.76s. No deployment or budget changes.
Author
Owner

Frozen code head 9cf26b07: required six interleaved 300ms RTT runs complete; all original specs/sample counts unchanged. Returning sign-in head p99 4173.1/4401.2/4612.8ms PASS. Theme repaint medians base11.9/11.0/13.6 -> head1.9/2.2/4.8ms, but head long-task counts1/2/2 FAIL. Prediction p99 21.0/18.6/41.1ms FAIL; negative rAF medians invalid evidence. Access head2 setup/signin p99 1843.2/1039.3ms FAIL; head3 1597.4/1358.1ms FAIL. Head1 reset socket hung. Baseline also has fixture errors; not waived. Evidence: evidence/prod-perf-176/ab-{base,head}-{1,2,3}.log and ab-runs.json. Full final native/additional browser gates underway. Acceptance not met; no deployment or issue closure.

Frozen code head 9cf26b07: required six interleaved 300ms RTT runs complete; all original specs/sample counts unchanged. Returning sign-in head p99 4173.1/4401.2/4612.8ms PASS. Theme repaint medians base11.9/11.0/13.6 -> head1.9/2.2/4.8ms, but head long-task counts1/2/2 FAIL. Prediction p99 21.0/18.6/41.1ms FAIL; negative rAF medians invalid evidence. Access head2 setup/signin p99 1843.2/1039.3ms FAIL; head3 1597.4/1358.1ms FAIL. Head1 reset socket hung. Baseline also has fixture errors; not waived. Evidence: evidence/prod-perf-176/ab-{base,head}-{1,2,3}.log and ab-runs.json. Full final native/additional browser gates underway. Acceptance not met; no deployment or issue closure.
Author
Owner

Remaining acceptance failures, not waived: Chromium diagnostic (full document + history + 50 unchanged switches) reports 24 switching long tasks under increased host load, theme repaint median2.2ms / clickp998.4ms. Trace slices include style/layout/paint/compositor; several >50ms wall tasks use9–19ms renderer CPU. Summary evidence/prod-perf-176/traces/final-main-thread-summary.json excludes payloads. Diagnostic returning signinp995059.8ms now FAIL; six-run comparison improvement is load-window limited. Prediction rAF timestamps can predate input (negative medians); no passing visibility claim can use them. Requires correcting measurement chronology, then new comparisons.

Potential design-sensitive next step: main.ts:157–161 deliberately awaits selected font or800ms timeout before rendering access UI. Removing that wait can expose fallback text (CSS font-display:swap). Brief prohibits appearance changes: defer such a change to the design pass rather than implementing it here. Default font is already preloaded and access CSS now inline; no new foundational library chosen. No assertion, budget, sample count, RTT or deadline raised/reduced. Host scheduling contribution is measured, not grounds to waive zero-long-task/17ms/1000ms requirements. Orchestrator needs to arrange a controlled load window for further physical paint evidence; this job will not touch other hosts or jobs.

Remaining acceptance failures, not waived: Chromium diagnostic (full document + history + 50 unchanged switches) reports 24 switching long tasks under increased host load, theme repaint median2.2ms / clickp998.4ms. Trace slices include style/layout/paint/compositor; several >50ms wall tasks use9–19ms renderer CPU. Summary evidence/prod-perf-176/traces/final-main-thread-summary.json excludes payloads. Diagnostic returning signinp995059.8ms now FAIL; six-run comparison improvement is load-window limited. Prediction rAF timestamps can predate input (negative medians); no passing visibility claim can use them. Requires correcting measurement chronology, then new comparisons. Potential design-sensitive next step: main.ts:157–161 deliberately awaits selected font or800ms timeout before rendering access UI. Removing that wait can expose fallback text (CSS font-display:swap). Brief prohibits appearance changes: defer such a change to the design pass rather than implementing it here. Default font is already preloaded and access CSS now inline; no new foundational library chosen. No assertion, budget, sample count, RTT or deadline raised/reduced. Host scheduling contribution is measured, not grounds to waive zero-long-task/17ms/1000ms requirements. Orchestrator needs to arrange a controlled load window for further physical paint evidence; this job will not touch other hosts or jobs.
Author
Owner

Additional gate on code9cf26b07: 54pass/2fail of56 checks. All27 addhost-wizard, font-switch3, native-font-state2, prediction-order/draw2, theme-rule1 and screenshotcapture1 pass; sessions-canvas18/20. Failures: combined empty/loading/error case hits unchanged30s timeout; manager idle script count39->43 afteropen. Same-window exact2case run on production1f77a449: combinedcase30s timeoutFAIL, managerPASS. Head targeted repeat: same combinedcaseFAIL, managerPASS. Thus combinedcase reproduces on both revisions; idlefetch failure intermittent, not erased/waived. Logs final-additional.log additional-baseline.log additional-head-repeat.log. Six explicit production screenshots retained evidence/prod-perf-176/screenshots at1440x900/393x852, empty setup/sign-in and mockterminal only; for independent review. Full native suite still running; no acceptance/completion claim.

Additional gate on code9cf26b07: 54pass/2fail of56 checks. All27 addhost-wizard, font-switch3, native-font-state2, prediction-order/draw2, theme-rule1 and screenshotcapture1 pass; sessions-canvas18/20. Failures: combined empty/loading/error case hits unchanged30s timeout; manager idle script count39->43 afteropen. Same-window exact2case run on production1f77a449: combinedcase30s timeoutFAIL, managerPASS. Head targeted repeat: same combinedcaseFAIL, managerPASS. Thus combinedcase reproduces on both revisions; idlefetch failure intermittent, not erased/waived. Logs final-additional.log additional-baseline.log additional-head-repeat.log. Six explicit production screenshots retained evidence/prod-perf-176/screenshots at1440x900/393x852, empty setup/sign-in and mockterminal only; for independent review. Full native suite still running; no acceptance/completion claim.
Author
Owner

Completed/pushed evidence step2562ee8895c4fc879aa367756f9dd9afe26ac972. Code remains9cf26b07; no source changes. Six interleaved logs, sanitized wall/CPU trace summaries, regression failures, full native/code-head outputs and six explicit production captures committed under evidence/prod-perf-176/README.md. Evidence commit fmt/check/155 source tests PASS. #176 acceptance remains unmet: three requested specs red; additional suite54pass2fail; inherited static-size gate red. Final full scripts/verify fast now running on2562ee88 withumask022/CPUWeight10000. No deployment/issue closure.

Completed/pushed evidence step2562ee8895c4fc879aa367756f9dd9afe26ac972. Code remains9cf26b07; no source changes. Six interleaved logs, sanitized wall/CPU trace summaries, regression failures, full native/code-head outputs and six explicit production captures committed under evidence/prod-perf-176/README.md. Evidence commit fmt/check/155 source tests PASS. #176 acceptance remains unmet: three requested specs red; additional suite54pass2fail; inherited static-size gate red. Final full scripts/verify fast now running on2562ee88 withumask022/CPUWeight10000. No deployment/issue closure.
Author
Owner

Final run record / acceptance NOT MET. Branch prod-perf-fix, pushed head 2562ee8895; source unchanged from9cf26b07. No deployment, issue remains open.

Six interleaved production1f77a449/head9cf26b07 runs at300ms RTT, unchanged counts/assertions. Returning sign-in head p994173.1/4401.2/4612.8ms passes in that window; heavier diagnostic5059.8ms fails. Theme head long tasks1/2/2, prediction p9921.0/18.6/41.1ms and access upper bounds remain red. Negative cached-rAF prediction medians are invalid paint evidence, not improvements. Reconnect also remains over900ms. Additional suite54pass2fail; combined-state timeout reproduces on baseline/head, idle-fetch failure intermittent and retained. No waivers/budget/sample/RTT changes.

Standalone required gates PASS: bun run check; bun test src155pass0fail10943assertions; production build; transfer critical gzip294980/307200 Brotli245433/256000, inline startup counted. Final scripts/verify fast on this exact head exits1: fmt/nativefmt/clippy/workspace tests/cargo-deny PASS; inherited static binary20093776 bytes >16404816 FAIL. Default group-writable umask permission failure was corrected withumask022, no source/assertion change. All per-step code/test commits were pushed; final evidence commit42 files9846lines, fmt/check/source tests PASS.

Evidence committed: evidence/prod-perf-176/README.md, six raw interleaved logs and ab-runs.json, sanitized wall/CPU trace summaries, failing-first regressions, original additional suite plus baseline/head diagnostics, production captures1440x900/393x852 (empty access and mockterminal only), reviewer-checklist.md. Independent visual review required; author makes no visual-quality/iPhone claim.

Remaining work: zero long tasks and17ms/1000ms tails still unmet. Orchestrator must arrange a controlled load window to separate scheduling from work; this job did not use another host or touch other jobs. Owner/design pass required for the proposed font-wait removal, since rendering before selected-font readiness can expose fallback text (main.ts157–161 currently waits selected font or800ms). Visibility measurement chronology must be corrected before accepting cached-rAF deltas as paint evidence. These are unresolved requirements, not a request to raise limits. This run stops short of completion under the brief's visual-change boundary.

Exact final branch-head command: umask022; systemd-run --user --scope -p CPUWeight=10000 env CARGO_TARGET_DIR=$HOME/.cache/codex-scratch/prod-perf-fix/target INFRATERNAL_TEST_STATE_ROOT=$HOME/.cache/codex-scratch/p176 RUST_TEST_THREADS=4 TRACER_TEST_PORT=5026 scripts/verify fast. Full output verbatim follows (no gate skipped or edited):

Running as unit: run-p1459649-i9847218.scope; invocation ID: 0f65a2d87063452bb32a62b4ea0ca5ad
METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=311.70 p99_ms=329.50 result=PASS

==> fmt

==> VT native fmt

==> clippy
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 1.21s

==> test
    Finished `test` profile [unoptimized + debuginfo] target(s) in 0.80s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal-695a777d772bb491)

running 36 tests
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok
test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok

test result: ok. 36 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.80s

     Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/agent_daemon-de8d28f3173c928a)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 41.82s

     Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/agent_queues-7ed77e0893c3f583)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 37.06s

     Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/agent_review-32b36c192f733cf1)

running 8 tests
test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok
test last_typist_selects_its_own_real_pty_dimensions ... ok
test initial_attach_requires_explicit_credit_before_replay ... ok
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 20.03s

     Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/agent_sessions-f1bbac7855060be7)

running 1 test
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/idle_canary-1919830791516ee3)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.20s

     Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/remote_output-4a8f568510237532)

running 3 tests
test human_remote_refusal_has_sections_and_next_steps_without_color ... ok
test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok
test json_remote_server_refuses_before_creating_storage_or_binding ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.10s

     Running tests/session_bounds_review.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/session_bounds_review-a607f03ae598f467)

running 1 test
test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.01s

     Running tests/session_retention.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/session_retention-51b18a22448c66c2)

running 1 test
test bounded_owned_exit_reconnects_as_ended_with_status ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.95s

     Running tests/shim.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/shim-2c3ca0d2bd6e9d87)

running 13 tests
test detached_shell_exit_reaps_shim_within_one_second ... ok
test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok
test disallowed_signal_only_disconnects_peer ... ok
test double_fork_survives_parent_death ... ok
test delivered_exit_cannot_release_another_owning_window ... ok
test real_shell_reconnect_resize_and_delivered_exit ... ok
test owned_exit_releases_promptly_on_window_close ... ok
test replacement_connection_and_malformed_limit ... ok
test unowned_normal_exit_retires_promptly_and_records_status ... ok
test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok
active
test attached_backpressure_and_detached_progress ... ok
test user_scope_survives_parent_unit_stop ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok

test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.94s

     Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/ssh_askpass-be2387df6f8b7f5c)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.17s

     Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/vt_credit-9ae10e7a767126f9)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 21.91s

     Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/vt_reconnect-71e394f96e9c8a37)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 17.30s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_agent-c125bbd12d7c2678)

running 66 tests
test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok
test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks
test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok
test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok
test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok
test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok
test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok
test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok

test result: ok. 55 passed; 0 failed; 11 ignored; 0 measured; 0 filtered out; finished in 5.19s

     Running tests/transport.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/transport-016f8bdfea5aebb7)

running 2 tests
test oversized_header_and_truncated_frame_are_rejected ... ok
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_mesh-3f967587718407e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/default_arrow-312553ba19630584)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/properties.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/properties-78f35bbe1b57dcd5)

running 14 tests
test directional_grants_union_and_minimal_updates ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test exhausted_versions_reject_mutations_without_changing_state ... ok
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test overlaps_are_reported_without_silent_range_changes ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test names_versions_and_backend_status ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test addresses_are_unique_stable_and_not_recycled ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.58s

     Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/rotation_time-a58dd287253d611d)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_plugin_api-5c728191785f01c7)

running 8 tests
test component_tests::component_declarations_cannot_create_servers ... ok
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok
test admission::tests::memory_refusal_round_trips_without_losing_legacy_error ... ok
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test tests::registry_routes_only_declared_actions ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/routing_review-9a16e71abd7f4bdb)

running 2 tests
test review_topic_borrows_plain_and_owns_escaped ... ok
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb)

running 13 tests
test session_counts_tests::host_owned_session_counts_are_additive_and_refresh_on_request ... ok
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test memory::tests::default_floor_refuses_only_below_headroom_even_above_128_sessions ... ok
test memory::tests::custom_policy_rounds_up_and_validates_all_settings_before_use ... ok
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test tests::configured_memory_floor_refuses_with_current_host_counters ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok

test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9)

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_plugin_remote-ce4b7bb3a4c213ff)

running 12 tests
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok

test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.21s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_plugin_ssh-02a30dda6db1246b)

running 12 tests
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok

running 1 test
test prompt::tests::reply_fixture ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.00s

test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok

test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/auth_order-8370e485a3f0346d)

running 6 tests
test only_exhausted_auth_returns_typed_choose_method ... ok
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/build_removal-3134bdbfb0e0f0e3)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.03s

     Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/concurrency-3766d6ae92ced0da)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test component_off_retires_a_real_native_helper ... ok
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/config_isolation-25472931ad04aef4)

running 1 test
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s

     Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/credentials-d8c6da88bd261bc7)

running 3 tests
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok
test password_socket_refuses_an_unrelated_same_user_process ... ok
test credential_helper_refuses_host_trust_and_permission_prompts ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/diagnostics-07d3289d1c3293b7)

running 8 tests
test every_failed_step_names_the_step_and_a_next_action ... ok
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok
test bootstrap_status_mapping_covers_each_step_and_approved_mode ... ok
test status_mapping_preserves_authentication_and_missing_payload_classification ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/event_metadata-bda517909c0068f9)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/foreground-8564c79536bd1ef7)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.15s

     Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/host_trust-8b1b0f67365e31ad)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/install-d349145bd9b0eef2)

running 30 tests
test command_failure_names_upload_join_install_and_start_separately ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test foreign_data_refusal_retains_exit_status_and_actionable_directory ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok

test result: ok. 30 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.95s

     Running tests/model.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/model-610654aa19e7b1f4)

running 5 tests
test addresses_never_become_options_or_shell_syntax ... ok
test check_is_exact_bounded_and_rejects_every_truncation ... ok
test consent_and_credential_references_are_the_only_request_authority ... ok
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok
test passwordless_sudo_keeps_default_rootless_without_explicit_consent ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/probe_check-61bf65a8dbec3acf)

running 1 test
test manager_availability_does_not_request_its_private_environment ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s

     Running tests/process.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/process-16290c97198e74ea)

running 5 tests
test completed_helper_retires_descendants_with_closed_pipes ... ok
test cancellation_retires_the_helper_descendant_too ... ok
test reviewer_ssh_helper_does_not_inherit_server_reload_mask ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.22s

     Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/proxy_policy-ca2b62d6c6e39405)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/real_ssh-b3256cc9f601cc72)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/single_connection-da56c522c3d0a816)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/source_completeness-55ae727bdca56f9e)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/trust_round2-2c16a67be95099fe)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 7 tests
test stream_tests::split_mux_header_preserves_trailing_close ... ok
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.17s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_server-4da00085bcd99910)

running 326 tests
test auth::cookies::measurement::cookie_latency_at_50_sessions ... ignored, local optimized cookie reader measurement at 50 browser sessions
test auth::cookies::tests::joined_split_reordered_and_other_cookies ... ok
test auth::cookies::tests::duplicates_missing_invalid_and_nontext_fail_closed ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds
test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket has been running for over 60 seconds
test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close has been running for over 60 seconds
test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery has been running for over 60 seconds
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket ... ok
test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close ... ok
test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery ... ok
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test bootstrap_runtime::failure_log_tests::one_line_contains_only_classified_public_coordinates ... ok
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test bootstrap_runtime::remote_backend::canary_tests::cancellation_keeps_the_owned_session_available_for_cleanup ... ok
test bootstrap_runtime::remote_backend::canary_tests::failed_attachment_finishes_the_private_command ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok
test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test ca_handoff::shipping_tests::shipping_child ... ok
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY
test ca_handoff::tests::exec_child ... ok
test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok
test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok
test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok
test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok
test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok
test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test bootstrap_api::tests::split_cookie_fields_preserve_bootstrap_owner_authority ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test websocket::cookie_tests::duplicate_cookie_fields_deny_socket_session ... ok
test websocket::cookie_tests::split_cookie_fields_preserve_socket_session ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok

test result: ok. 294 passed; 0 failed; 32 ignored; 0 measured; 0 filtered out; finished in 415.45s

     Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/catalog_startup-9d56f37d122f8c86)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.15s

     Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/enrollment-7407eff966a5f9da)

running 6 tests
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test concurrent_redemption_has_one_winner_and_one_certificate ... ok
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.46s

     Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/mesh_parser-9431ee71e664c06e)

running 2 tests
test review_grant_parser_rejects_unknown_nested_port_fields ... ok
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/mesh_review_plugin-a90a6dd2a989c757)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/mesh_review_policy-0f6a3397d95362e0)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/mesh_review_role_scope-d40c0064cd208dc9)

running 2 tests
test role_scopes_require_an_array_when_provided ... ok
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/plugin_host_review-a71c7ccd8453f4d9)

running 7 tests
test review_core_topic_remains_core_owned_even_when_declared ... ok
test review_completed_call_survives_normal_worker_exit ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_undeclared_topic_is_left_to_the_core ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_disable_answers_inflight_call ... ok
test review_exited_worker_ends_its_subscriptions ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.51s

     Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/plugin_settings_review-afd3f9dce76af585)

running 3 tests
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.75s

     Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/remote_plugin_contract-eaffd940139a77b1)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.75s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_shim-8d88872fb599c816)

running 78 tests
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::golden::every_frozen_message ... ok
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap
test ring::checks::tests::wrap_and_exact_offsets ... ok
test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement

running 1 test
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 77 filtered out; finished in 0.03s

test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_seeded_smoke has been running for over 60 seconds
test terminal::fidelity::fidelity_seeded_smoke ... ok

test result: ok. 65 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 92.15s

     Running tests/detach.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/detach-af6bf43868555110)

running 2 tests
test detached_child_restores_default_signals_without_changing_parent ... ok
test closed_standard_descriptors_become_dev_null ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.65s

     Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/mouse-3ee544922f442de4)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.42s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.68s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s


==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   ├── infraternal-fuzz v0.1.0
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0 (*)
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   └── infraternal-server v0.1.0
                     │       ├── infraternal v0.1.0 (*)
                     │       └── infraternal-fuzz v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   └── infraternal-server v0.1.0 (*)
     │   │   │       ├── infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.45
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.15
             └── rustls v0.23.45 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   ├── infraternal-fuzz v0.1.0 (*)
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.45
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.15
     │               └── rustls v0.23.45 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   ├── hyper v1.11.1
         │   │   ├── axum v0.8.9
         │   │   │   ├── infraternal-fuzz v0.1.0
         │   │   │   └── infraternal-server v0.1.0
         │   │   │       ├── infraternal v0.1.0
         │   │   │       └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── axum-server v0.8.0
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── hyper-util v0.1.21
         │   │   │   ├── axum v0.8.9 (*)
         │   │   │   ├── axum-server v0.8.0 (*)
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   │   ├── infraternal v0.1.0 (*)
         │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:194:1
    │  
194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   ├── infraternal-fuzz v0.1.0 (*)
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.45
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.15
          │               └── rustls v0.23.45 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:196:1
    │  
196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   └── infraternal-server v0.1.0
              │       ├── infraternal v0.1.0 (*)
              │       └── infraternal-fuzz v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:199:1
    │  
199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:201:1
    │  
201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   └── infraternal-server v0.1.0
      │               │       ├── infraternal v0.1.0 (*)
      │               │       └── infraternal-fuzz v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.45
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.15
      │   │               └── rustls v0.23.45 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:245:1
    │  
245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   └── infraternal-server v0.1.0
      │       │       │       ├── infraternal v0.1.0 (*)
      │       │       │       └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       └── infraternal v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0
      │   │   │               │   ├── infraternal v0.1.0 (*)
      │   │   │               │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   └── infraternal-server v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.45
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.15
      │       │   │           └── rustls v0.23.45 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.45 (*)
      │       │           └── rustls-webpki v0.103.15 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0
      │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   ├── axum v0.8.9 (*)
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.45 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.2
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:248:1
    │  
248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   └── infraternal-server v0.1.0
      │       │   │               │       ├── infraternal v0.1.0 (*)
      │       │   │               │       └── infraternal-fuzz v0.1.0 (*)
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:251:1
    │  
251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal-fuzz v0.1.0
      │       └── infraternal-server v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   ├── infraternal-fuzz v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:253:1
    │  
253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal-fuzz v0.1.0
          │       └── infraternal-server v0.1.0
          │           ├── infraternal v0.1.0 (*)
          │           └── infraternal-fuzz v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   ├── infraternal-fuzz v0.1.0 (*)
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:311:1
    │  
311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-agent v0.1.0 (*)
          │       │   └── infraternal-server v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.45
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.15
              └── rustls v0.23.45 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   └── infraternal-server v0.1.0
      │               │       │       ├── infraternal v0.1.0 (*)
      │               │       │       └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               └── infraternal v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.2
      │           ├── axum v0.8.9
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   ├── hyper v1.11.1
      │           │   │   ├── axum v0.8.9 (*)
      │           │   │   ├── axum-server v0.8.0 (*)
      │           │   │   ├── hyper-util v0.1.21
      │           │   │   │   ├── axum v0.8.9 (*)
      │           │   │   │   ├── axum-server v0.8.0 (*)
      │           │   │   │   ├── infraternal v0.1.0 (*)
      │           │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.2 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.2 (*)
      ├── tokio v1.53.2 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok

==> static builds
    Finished `release` profile [optimized] target(s) in 3.08s
/home/kayg/.cache/codex-scratch/prod-perf-fix/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 20093776 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 20093776 bytes

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Final run record / acceptance NOT MET. Branch prod-perf-fix, pushed head 2562ee8895c4fc879aa367756f9dd9afe26ac972; source unchanged from9cf26b07. No deployment, issue remains open. Six interleaved production1f77a449/head9cf26b07 runs at300ms RTT, unchanged counts/assertions. Returning sign-in head p994173.1/4401.2/4612.8ms passes in that window; heavier diagnostic5059.8ms fails. Theme head long tasks1/2/2, prediction p9921.0/18.6/41.1ms and access upper bounds remain red. Negative cached-rAF prediction medians are invalid paint evidence, not improvements. Reconnect also remains over900ms. Additional suite54pass2fail; combined-state timeout reproduces on baseline/head, idle-fetch failure intermittent and retained. No waivers/budget/sample/RTT changes. Standalone required gates PASS: bun run check; bun test src155pass0fail10943assertions; production build; transfer critical gzip294980/307200 Brotli245433/256000, inline startup counted. Final scripts/verify fast on this exact head exits1: fmt/nativefmt/clippy/workspace tests/cargo-deny PASS; inherited static binary20093776 bytes >16404816 FAIL. Default group-writable umask permission failure was corrected withumask022, no source/assertion change. All per-step code/test commits were pushed; final evidence commit42 files9846lines, fmt/check/source tests PASS. Evidence committed: evidence/prod-perf-176/README.md, six raw interleaved logs and ab-runs.json, sanitized wall/CPU trace summaries, failing-first regressions, original additional suite plus baseline/head diagnostics, production captures1440x900/393x852 (empty access and mockterminal only), reviewer-checklist.md. Independent visual review required; author makes no visual-quality/iPhone claim. Remaining work: zero long tasks and17ms/1000ms tails still unmet. Orchestrator must arrange a controlled load window to separate scheduling from work; this job did not use another host or touch other jobs. Owner/design pass required for the proposed font-wait removal, since rendering before selected-font readiness can expose fallback text (main.ts157–161 currently waits selected font or800ms). Visibility measurement chronology must be corrected before accepting cached-rAF deltas as paint evidence. These are unresolved requirements, not a request to raise limits. This run stops short of completion under the brief's visual-change boundary. Exact final branch-head command: umask022; systemd-run --user --scope -p CPUWeight=10000 env CARGO_TARGET_DIR=$HOME/.cache/codex-scratch/prod-perf-fix/target INFRATERNAL_TEST_STATE_ROOT=$HOME/.cache/codex-scratch/p176 RUST_TEST_THREADS=4 TRACER_TEST_PORT=5026 scripts/verify fast. Full output verbatim follows (no gate skipped or edited): ```text Running as unit: run-p1459649-i9847218.scope; invocation ID: 0f65a2d87063452bb32a62b4ea0ca5ad METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=311.70 p99_ms=329.50 result=PASS ==> fmt ==> VT native fmt ==> clippy Finished `dev` profile [unoptimized + debuginfo] target(s) in 1.21s ==> test Finished `test` profile [unoptimized + debuginfo] target(s) in 0.80s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal-695a777d772bb491) running 36 tests test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok test result: ok. 36 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 4.80s Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/agent_daemon-de8d28f3173c928a) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 41.82s Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/agent_queues-7ed77e0893c3f583) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 37.06s Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/agent_review-32b36c192f733cf1) running 8 tests test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok test last_typist_selects_its_own_real_pty_dimensions ... ok test initial_attach_requires_explicit_credit_before_replay ... ok test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 20.03s Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/agent_sessions-f1bbac7855060be7) running 1 test test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/idle_canary-1919830791516ee3) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.20s Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/remote_output-4a8f568510237532) running 3 tests test human_remote_refusal_has_sections_and_next_steps_without_color ... ok test json_remote_run_refuses_missing_identity_without_reflecting_its_path ... ok test json_remote_server_refuses_before_creating_storage_or_binding ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.10s Running tests/session_bounds_review.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/session_bounds_review-a607f03ae598f467) running 1 test test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.01s Running tests/session_retention.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/session_retention-51b18a22448c66c2) running 1 test test bounded_owned_exit_reconnects_as_ended_with_status ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.95s Running tests/shim.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/shim-2c3ca0d2bd6e9d87) running 13 tests test detached_shell_exit_reaps_shim_within_one_second ... ok test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok test disallowed_signal_only_disconnects_peer ... ok test double_fork_survives_parent_death ... ok test delivered_exit_cannot_release_another_owning_window ... ok test real_shell_reconnect_resize_and_delivered_exit ... ok test owned_exit_releases_promptly_on_window_close ... ok test replacement_connection_and_malformed_limit ... ok test unowned_normal_exit_retires_promptly_and_records_status ... ok test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok active test attached_backpressure_and_detached_progress ... ok test user_scope_survives_parent_unit_stop ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.94s Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/ssh_askpass-be2387df6f8b7f5c) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.17s Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/vt_credit-9ae10e7a767126f9) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 21.91s Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/vt_reconnect-71e394f96e9c8a37) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 17.30s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_agent-c125bbd12d7c2678) running 66 tests test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000 test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test result: ok. 55 passed; 0 failed; 11 ignored; 0 measured; 0 filtered out; finished in 5.19s Running tests/transport.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/transport-016f8bdfea5aebb7) running 2 tests test oversized_header_and_truncated_frame_are_rejected ... ok test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_mesh-3f967587718407e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/default_arrow-312553ba19630584) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/properties.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/properties-78f35bbe1b57dcd5) running 14 tests test directional_grants_union_and_minimal_updates ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test exhausted_versions_reject_mutations_without_changing_state ... ok test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test overlaps_are_reported_without_silent_range_changes ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test names_versions_and_backend_status ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test addresses_are_unique_stable_and_not_recycled ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.58s Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/rotation_time-a58dd287253d611d) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_plugin_api-5c728191785f01c7) running 8 tests test component_tests::component_declarations_cannot_create_servers ... ok test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test admission::tests::memory_refusal_round_trips_without_losing_legacy_error ... ok test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test tests::registry_routes_only_declared_actions ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/routing_review-9a16e71abd7f4bdb) running 2 tests test review_topic_borrows_plain_and_owns_escaped ... ok test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_plugin_host_facts-92fb8980e23d63eb) running 13 tests test session_counts_tests::host_owned_session_counts_are_additive_and_refresh_on_request ... ok test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test memory::tests::default_floor_refuses_only_below_headroom_even_above_128_sessions ... ok test memory::tests::custom_policy_rounds_up_and_validates_all_settings_before_use ... ok test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test tests::configured_memory_floor_refuses_with_current_host_counters ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_plugin_mesh-65b6dee3ae44f8e9) running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_plugin_remote-ce4b7bb3a4c213ff) running 12 tests test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test remote_quic::tests::acknowledged_idle_survives_and_a_silent_path_times_out ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test result: ok. 12 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 5.21s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_plugin_ssh-02a30dda6db1246b) running 12 tests test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok running 1 test test prompt::tests::reply_fixture ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 11 filtered out; finished in 0.00s test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok test result: ok. 11 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/auth_order-8370e485a3f0346d) running 6 tests test only_exhausted_auth_returns_typed_choose_method ... ok test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/build_removal-3134bdbfb0e0f0e3) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.03s Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/concurrency-3766d6ae92ced0da) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test component_off_retires_a_real_native_helper ... ok test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/config_isolation-25472931ad04aef4) running 1 test test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.09s Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/credentials-d8c6da88bd261bc7) running 3 tests test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test password_socket_refuses_an_unrelated_same_user_process ... ok test credential_helper_refuses_host_trust_and_permission_prompts ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/diagnostics-07d3289d1c3293b7) running 8 tests test every_failed_step_names_the_step_and_a_next_action ... ok test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test bootstrap_status_mapping_covers_each_step_and_approved_mode ... ok test status_mapping_preserves_authentication_and_missing_payload_classification ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/event_metadata-bda517909c0068f9) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/foreground-8564c79536bd1ef7) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.15s Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/host_trust-8b1b0f67365e31ad) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/install-d349145bd9b0eef2) running 30 tests test command_failure_names_upload_join_install_and_start_separately ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test foreign_data_refusal_retains_exit_status_and_actionable_directory ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test refused_previous_service_stop_only_removes_staging ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test result: ok. 30 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.95s Running tests/model.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/model-610654aa19e7b1f4) running 5 tests test addresses_never_become_options_or_shell_syntax ... ok test check_is_exact_bounded_and_rejects_every_truncation ... ok test consent_and_credential_references_are_the_only_request_authority ... ok test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test passwordless_sudo_keeps_default_rootless_without_explicit_consent ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/probe_check-61bf65a8dbec3acf) running 1 test test manager_availability_does_not_request_its_private_environment ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.07s Running tests/process.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/process-16290c97198e74ea) running 5 tests test completed_helper_retires_descendants_with_closed_pipes ... ok test cancellation_retires_the_helper_descendant_too ... ok test reviewer_ssh_helper_does_not_inherit_server_reload_mask ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.22s Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/proxy_policy-ca2b62d6c6e39405) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/real_ssh-b3256cc9f601cc72) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/single_connection-da56c522c3d0a816) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/source_completeness-55ae727bdca56f9e) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/trust_round2-2c16a67be95099fe) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 7 tests test stream_tests::split_mux_header_preserves_trailing_close ... ok test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.17s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_server-4da00085bcd99910) running 326 tests test auth::cookies::measurement::cookie_latency_at_50_sessions ... ignored, local optimized cookie reader measurement at 50 browser sessions test auth::cookies::tests::joined_split_reordered_and_other_cookies ... ok test auth::cookies::tests::duplicates_missing_invalid_and_nontext_fail_closed ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket has been running for over 60 seconds test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket has been running for over 60 seconds test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close has been running for over 60 seconds test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery has been running for over 60 seconds test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket ... ok test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close ... ok test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery ... ok test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test bootstrap_runtime::failure_log_tests::one_line_contains_only_classified_public_coordinates ... ok test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test bootstrap_runtime::remote_backend::canary_tests::cancellation_keeps_the_owned_session_available_for_cleanup ... ok test bootstrap_runtime::remote_backend::canary_tests::failed_attachment_finishes_the_private_command ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test ca_handoff::shipping_tests::shipping_child ... ok test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY test ca_handoff::tests::exec_child ... ok test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test bootstrap_api::tests::split_cookie_fields_preserve_bootstrap_owner_authority ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test websocket::cookie_tests::duplicate_cookie_fields_deny_socket_session ... ok test websocket::cookie_tests::split_cookie_fields_preserve_socket_session ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test result: ok. 294 passed; 0 failed; 32 ignored; 0 measured; 0 filtered out; finished in 415.45s Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/catalog_startup-9d56f37d122f8c86) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.15s Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/enrollment-7407eff966a5f9da) running 6 tests test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test concurrent_redemption_has_one_winner_and_one_certificate ... ok test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.46s Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/mesh_parser-9431ee71e664c06e) running 2 tests test review_grant_parser_rejects_unknown_nested_port_fields ... ok test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/mesh_review_plugin-a90a6dd2a989c757) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/mesh_review_policy-0f6a3397d95362e0) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/mesh_review_role_scope-d40c0064cd208dc9) running 2 tests test role_scopes_require_an_array_when_provided ... ok test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/plugin_host_review-a71c7ccd8453f4d9) running 7 tests test review_core_topic_remains_core_owned_even_when_declared ... ok test review_completed_call_survives_normal_worker_exit ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_undeclared_topic_is_left_to_the_core ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_disable_answers_inflight_call ... ok test review_exited_worker_ends_its_subscriptions ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.51s Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/plugin_settings_review-afd3f9dce76af585) running 3 tests test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.75s Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/remote_plugin_contract-eaffd940139a77b1) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.75s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_shim-8d88872fb599c816) running 78 tests test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::golden::every_frozen_message ... ok test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test frame::checks::tests::golden_and_fragmented ... ok test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap test ring::checks::tests::wrap_and_exact_offsets ... ok test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement running 1 test test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 77 filtered out; finished in 0.03s test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_seeded_smoke has been running for over 60 seconds test terminal::fidelity::fidelity_seeded_smoke ... ok test result: ok. 65 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 92.15s Running tests/detach.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/detach-af6bf43868555110) running 2 tests test detached_child_restores_default_signals_without_changing_parent ... ok test closed_standard_descriptors_become_dev_null ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.65s Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/mouse-3ee544922f442de4) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.42s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.68s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ ├── hyper v1.11.1 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:194:1 │ 194 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 195 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:196:1 │ 196 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 197 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 198 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:199:1 │ 199 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 200 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:201:1 │ 201 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 202 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.15 │ │ └── rustls v0.23.45 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:245:1 │ 245 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 246 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.45 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.15 │ │ │ └── rustls v0.23.45 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-webpki v0.103.15 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.2 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:248:1 │ 248 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 249 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:251:1 │ 251 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 252 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:253:1 │ 253 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 254 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:311:1 │ 311 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 312 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.2 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.2 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.2 (*) ├── tokio v1.53.2 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok ==> static builds Finished `release` profile [optimized] target(s) in 3.08s /home/kayg/.cache/codex-scratch/prod-perf-fix/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 20093776 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 20093776 bytes +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```
Author
Owner

Starting independent review on local branch review-prod-perf-fix. Target head: 2562ee8895; diff base: 93b00f5ab9. The Forgejo issue API is currently returning an invalid content type, so I could not read the existing comments before starting.

Starting independent review on local branch review-prod-perf-fix. Target head: 2562ee8895c4fc879aa367756f9dd9afe26ac972; diff base: 93b00f5ab965949b1a76a808e5734f98fed82fd4. The Forgejo issue API is currently returning an invalid content type, so I could not read the existing comments before starting.
Author
Owner

Finding F-001 (P1), committed as dfddaec3cc. crates/plugins/ssh/src/bootstrap.rs:413 ignores the failure-cleanup timeout. Regression bootstrap_runtime::remote_backend::tests::cancellation_retries_retirement_after_temporary_writer_contention uses the real SQLite backend, holds the writer during cancellation, then releases it. It failed in 5.07s: active remote_hosts was 2, expected 1. The invitation remains active after cleanup times out.

Finding F-001 (P1), committed as dfddaec3cc25357a40401128f7bdabd837279fd7. `crates/plugins/ssh/src/bootstrap.rs:413` ignores the failure-cleanup timeout. Regression `bootstrap_runtime::remote_backend::tests::cancellation_retries_retirement_after_temporary_writer_contention` uses the real SQLite backend, holds the writer during cancellation, then releases it. It failed in 5.07s: active `remote_hosts` was 2, expected 1. The invitation remains active after cleanup times out.
Author
Owner

Finding F-002 (P2), committed as 4e3a2692. In crates/plugins/ssh/src/install.rs:217, Join failures pass through Failure::in_mode; crates/plugins/ssh/src/model.rs:283 maps status 71 without considering the failed step. The Join script uses 71 for transaction-state guards, so the guidance wrongly claims the rootless data directory is foreign or unsafe. join_stage_state_refusal_keeps_join_recovery_guidance fails with that exact message. Test-only evidence is on review-prod-perf-fix.

Finding F-002 (P2), committed as 4e3a2692. In `crates/plugins/ssh/src/install.rs:217`, Join failures pass through `Failure::in_mode`; `crates/plugins/ssh/src/model.rs:283` maps status 71 without considering the failed step. The Join script uses 71 for transaction-state guards, so the guidance wrongly claims the rootless data directory is foreign or unsafe. `join_stage_state_refusal_keeps_join_recovery_guidance` fails with that exact message. Test-only evidence is on `review-prod-perf-fix`.
Author
Owner

Perf VM comparison complete: base 1f77a449 vs origin/release-prod-3w (4855e033), 3 interleaved runs each of test/terminal-theme.spec.ts and test/terminal.spec.ts, 300 ms RTT ±30 ms. Host: Debian 13, kernel 6.12.69, 4 vCPUs; Bun 1.4.2, Playwright 1.61.1, Chromium 149.0.7827.55. Each slot had a unique port and held /var/lock/perf-bench.lock; load below is 1/5/15-minute average immediately before the slot. Locally built production bundles were served by the VM. Results and raw reports: evidence/perf-vm-browser/20261012T083333Z-726800496-2080513/summary.md.

Run Pre-run load Theme p99 / long tasks >50 ms Resume p99 (900 ms budget) Setup / sign-in render p99 (1000 ms budget each)
BASE-1 0.21 / 0.36 / 0.35 1.0 ms / 0 1015.2 ms FAIL 1973.9 / 2196.1 ms FAIL
HEAD-1 0.60 / 0.63 / 0.47 1.6 ms / 0 996.6 ms FAIL 1655.3 / 2238.2 ms FAIL
BASE-2 0.56 / 0.62 / 0.52 2.0 ms / 0 973.0 ms FAIL 2279.3 / 2213.1 ms FAIL
HEAD-2 0.50 / 0.82 / 0.67 1.9 ms / 0 1011.6 ms FAIL 2256.3 / 2150.3 ms FAIL
BASE-3 0.21 / 0.51 / 0.58 2.0 ms / 0 no sample: terminal test connection predicate timed out at 5 s 2704.0 / 2273.7 ms FAIL
HEAD-3 0.89 / 0.59 / 0.60 2.5 ms / 0 1012.5 ms FAIL 2926.3 / 2322.7 ms FAIL

Interpretation: the theme long-task failure did not reproduce in any of the six low-load VM slots (0/50 long tasks each; switch p99 1.0–2.5 ms), so the earlier shared-host theme result is load-sensitive evidence. Resume remains over budget in all five slots that emitted a measurement (973.0–1015.2 ms vs 900 ms), and setup/sign-in render tails fail in all six (1.655–2.926 s vs 1 s), so those failures are real on both revisions and are not explained by the earlier build-host load. BASE-3 is recorded as a test failure, not a resume pass.

Additional terminal metrics varied by slot: returning sign-in p99 was 5013.4 / 5016.7 ms on BASE-1/2 and 4010.4 / 5015.0 / 4966.7 ms on HEAD-1/2/3 against 5000 ms; predicted glyph p99 was BASE 13.9 / 27.4 / — ms and HEAD 14.7 / 13.9 / 26.5 ms against 17 ms. Full first-contentful-paint samples, per-test outcomes, failures, versions, loads, and raw JSON are in the evidence directory above.

Perf VM comparison complete: base `1f77a449` vs `origin/release-prod-3w` (`4855e033`), 3 interleaved runs each of `test/terminal-theme.spec.ts` and `test/terminal.spec.ts`, 300 ms RTT ±30 ms. Host: Debian 13, kernel 6.12.69, 4 vCPUs; Bun 1.4.2, Playwright 1.61.1, Chromium 149.0.7827.55. Each slot had a unique port and held `/var/lock/perf-bench.lock`; load below is 1/5/15-minute average immediately before the slot. Locally built production bundles were served by the VM. Results and raw reports: `evidence/perf-vm-browser/20261012T083333Z-726800496-2080513/summary.md`. | Run | Pre-run load | Theme p99 / long tasks >50 ms | Resume p99 (900 ms budget) | Setup / sign-in render p99 (1000 ms budget each) | | --- | --- | --- | --- | --- | | BASE-1 | 0.21 / 0.36 / 0.35 | 1.0 ms / 0 | 1015.2 ms FAIL | 1973.9 / 2196.1 ms FAIL | | HEAD-1 | 0.60 / 0.63 / 0.47 | 1.6 ms / 0 | 996.6 ms FAIL | 1655.3 / 2238.2 ms FAIL | | BASE-2 | 0.56 / 0.62 / 0.52 | 2.0 ms / 0 | 973.0 ms FAIL | 2279.3 / 2213.1 ms FAIL | | HEAD-2 | 0.50 / 0.82 / 0.67 | 1.9 ms / 0 | 1011.6 ms FAIL | 2256.3 / 2150.3 ms FAIL | | BASE-3 | 0.21 / 0.51 / 0.58 | 2.0 ms / 0 | no sample: terminal test connection predicate timed out at 5 s | 2704.0 / 2273.7 ms FAIL | | HEAD-3 | 0.89 / 0.59 / 0.60 | 2.5 ms / 0 | 1012.5 ms FAIL | 2926.3 / 2322.7 ms FAIL | Interpretation: the theme long-task failure did not reproduce in any of the six low-load VM slots (0/50 long tasks each; switch p99 1.0–2.5 ms), so the earlier shared-host theme result is load-sensitive evidence. Resume remains over budget in all five slots that emitted a measurement (973.0–1015.2 ms vs 900 ms), and setup/sign-in render tails fail in all six (1.655–2.926 s vs 1 s), so those failures are real on both revisions and are not explained by the earlier build-host load. BASE-3 is recorded as a test failure, not a resume pass. Additional terminal metrics varied by slot: returning sign-in p99 was 5013.4 / 5016.7 ms on BASE-1/2 and 4010.4 / 5015.0 / 4966.7 ms on HEAD-1/2/3 against 5000 ms; predicted glyph p99 was BASE 13.9 / 27.4 / — ms and HEAD 14.7 / 13.9 / 26.5 ms against 17 ms. Full first-contentful-paint samples, per-test outcomes, failures, versions, loads, and raw JSON are in the evidence directory above.
Author
Owner

Review complete. Target head: 2562ee8895. Evidence branch head: 4e3a2692. Verdict: HOLD (P0/P1 present): 0 P0, 1 P1, 1 P2, 0 P3.

F-001 P1: cancellation_retries_retirement_after_temporary_writer_contention failed against the real SQLite/backend fixture: after the held one-connection BEGIN IMMEDIATE transaction was released, 2 remote hosts remained active; expected 1. Committed dfddaec3.
F-002 P2: join_stage_state_refusal_keeps_join_recovery_guidance failed because a Join-stage status 71 was reported as a rootless data-directory ownership refusal. Committed 4e3a2692.

scripts/verify fast on target head 2562ee8895, output summary verbatim:
+---------------------------+--------------+
| Rust gate | Result |
+---------------------------+--------------+
| fmt | PASS |
| VT native fmt | PASS |
| clippy | FAIL (101) |
| test | FAIL (101) |
| cargo-deny | PASS |
| static builds | FAIL (1) |
+---------------------------+--------------+

The Clippy build failed when Zig could not fetch pinned public dependencies (HttpConnectionClosing). The test row failed in remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving: HTTP startup deadline, with SQLite connection acquisition logged at 4.11s; this test is outside the brief's named load exemptions and remains unwaived. Static build output: x86_64 musl binary 20,093,776 bytes against a 16,404,816-byte budget. The job report also says theme long tasks, predicted glyph latency, and access paint tails remain red. I did not remeasure performance because this review brief explicitly prohibits using the performance VM, and build-host timing is not valid evidence.

No push or issue closure.

Review complete. Target head: 2562ee8895c4fc879aa367756f9dd9afe26ac972. Evidence branch head: 4e3a2692. Verdict: HOLD (P0/P1 present): 0 P0, 1 P1, 1 P2, 0 P3. F-001 P1: `cancellation_retries_retirement_after_temporary_writer_contention` failed against the real SQLite/backend fixture: after the held one-connection `BEGIN IMMEDIATE` transaction was released, 2 remote hosts remained active; expected 1. Committed dfddaec3. F-002 P2: `join_stage_state_refusal_keeps_join_recovery_guidance` failed because a Join-stage status 71 was reported as a rootless data-directory ownership refusal. Committed 4e3a2692. `scripts/verify fast` on target head 2562ee8895c4fc879aa367756f9dd9afe26ac972, output summary verbatim: +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | clippy | FAIL (101) | | test | FAIL (101) | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ The Clippy build failed when Zig could not fetch pinned public dependencies (`HttpConnectionClosing`). The test row failed in `remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving`: HTTP startup deadline, with SQLite connection acquisition logged at 4.11s; this test is outside the brief's named load exemptions and remains unwaived. Static build output: x86_64 musl binary 20,093,776 bytes against a 16,404,816-byte budget. The job report also says theme long tasks, predicted glyph latency, and access paint tails remain red. I did not remeasure performance because this review brief explicitly prohibits using the performance VM, and build-host timing is not valid evidence. No push or issue closure.
Author
Owner

Orchestrator: round-1 review HOLD findings F-001/F-002 are inherited add-host defects from the release-prod-3 base, fixed on addhost-fixes2 round 3 (6be5514d). Round 2 (queued after perf-vm-browser) merges dev/addhost-fixes2, confirms both review tests pass, and fixes the reported clippy failure.

Orchestrator: round-1 review HOLD findings F-001/F-002 are inherited add-host defects from the release-prod-3 base, fixed on addhost-fixes2 round 3 (6be5514d). Round 2 (queued after perf-vm-browser) merges dev/addhost-fixes2, confirms both review tests pass, and fixes the reported clippy failure.
Author
Owner

Starting round 2 on prod-perf-fix at 2562ee8895. Read #176 and parent #169 history, contracts, and round-1 evidence. Integrate origin/perf-vm-browser and current origin/dev (21b37bca), retaining original budgets/auth checks. Measurements only on VM208 via scripts/perf-vm/shared lock (D256); no deployment. Confirm inherited F-001/F-002 regressions and Clippy, then interleaved 1f77a449/HEAD baseline before repairs. D259 resume and single-surface theme fade acceptance included. Push only prod-perf-fix.

Starting round 2 on prod-perf-fix at 2562ee8895c4fc879aa367756f9dd9afe26ac972. Read #176 and parent #169 history, contracts, and round-1 evidence. Integrate origin/perf-vm-browser and current origin/dev (21b37bca), retaining original budgets/auth checks. Measurements only on VM208 via scripts/perf-vm/shared lock (D256); no deployment. Confirm inherited F-001/F-002 regressions and Clippy, then interleaved 1f77a449/HEAD baseline before repairs. D259 resume and single-surface theme fade acceptance included. Push only prod-perf-fix.
Author
Owner

Runner finding: scripts/perf-vm-remote.sh:101 acquires the shared lock once before all six A/B slots and releases only at process exit; scripts/perf-vm:remote_rsync_path also locks artifact transfers. This conflicts with D256 short measurement-only ownership. Baseline is already staged, no mutation of its inputs. Next runner slice will acquire/release per slot, avoid locking transfer, and use a run-specific temporary alias. Original specs/budgets unchanged.

Runner finding: scripts/perf-vm-remote.sh:101 acquires the shared lock once before all six A/B slots and releases only at process exit; scripts/perf-vm:remote_rsync_path also locks artifact transfers. This conflicts with D256 short measurement-only ownership. Baseline is already staged, no mutation of its inputs. Next runner slice will acquire/release per slot, avoid locking transfer, and use a run-specific temporary alias. Original specs/budgets unchanged.
Author
Owner

Integrated head finding: unchanged combined sessions empty/loading/error test passes (manager-original.log). New isolated Retry regression retains the loading assertion and six rows within original 6000ms deadline, verifies its HTTP response and zero page errors: 3/3 pass locally (functional evidence only). This does not erase release-prod-4 VM failures. No inventory source fix or timeout increase is justified yet; compare isolated and original cases on VM208 after current baseline. Integration merges 567cab9f/35382a10 pushed; tracer check/181 source tests passed. Runner history corrected to b6def4d3 with exact-head lease after accidental inclusion of pending review tests; tests remain uncommitted until their native gates finish.

Integrated head finding: unchanged combined sessions empty/loading/error test passes (manager-original.log). New isolated Retry regression retains the loading assertion and six rows within original 6000ms deadline, verifies its HTTP response and zero page errors: 3/3 pass locally (functional evidence only). This does not erase release-prod-4 VM failures. No inventory source fix or timeout increase is justified yet; compare isolated and original cases on VM208 after current baseline. Integration merges 567cab9f/35382a10 pushed; tracer check/181 source tests passed. Runner history corrected to b6def4d3 with exact-head lease after accidental inclusion of pending review tests; tests remain uncommitted until their native gates finish.
Author
Owner

Review continuation: 4e3a2692 exact Join status-71 test PASS; retained in da4f74eb. Default server/SSH all-target Clippy and fmt PASS without exceptions (round2/review-regressions.log). Initial F-001 invocation selected zero tests because remote is now a removable feature; corrected --features remote selected the exact test and failed at its obsolete fixture (RecvError, before durable-count assertion; review-remote-regression.log). Old HeldStage compares CHECK_SCRIPT equality, but current probe appends setup-state checks. Adapt fixture to the existing PausedInvitation committed-transaction barrier and watch channel completion; preserve active-host count=1 and original 7-second cancellation bound. Rerun in progress. Isolated Retry regression committed e172d166; 3/3 functional PASS, no inventory source change. Theme acceptance regression fails before prototype (0 surface transitions vs required 1); prototype functional 4/4 PASS, perf/frame evidence still pending.

Review continuation: 4e3a2692 exact Join status-71 test PASS; retained in da4f74eb. Default server/SSH all-target Clippy and fmt PASS without exceptions (round2/review-regressions.log). Initial F-001 invocation selected zero tests because remote is now a removable feature; corrected --features remote selected the exact test and failed at its obsolete fixture (RecvError, before durable-count assertion; review-remote-regression.log). Old HeldStage compares CHECK_SCRIPT equality, but current probe appends setup-state checks. Adapt fixture to the existing PausedInvitation committed-transaction barrier and watch channel completion; preserve active-host count=1 and original 7-second cancellation bound. Rerun in progress. Isolated Retry regression committed e172d166; 3/3 functional PASS, no inventory source change. Theme acceptance regression fails before prototype (0 surface transitions vs required 1); prototype functional 4/4 PASS, perf/frame evidence still pending.
Author
Owner

Perf VM browser A/B — #184

Setup

  • BASE: 1f77a449ede540281319ba01d149a2f60d584f3b.
  • HEAD: 35382a108cb8a0d0f5c34293fc04af9719e2ad53.
  • Specs: test/terminal-theme.spec.ts, test/terminal.spec.ts, test/dead-session.spec.ts.
  • Host: Debian GNU/Linux 13 (trixie), 4 vCPUs; each browser run records its pre/post load, kernel, Bun, Playwright, and browser versions.
  • Profile: 300 ms RTT with ±30 ms jitter; each invocation uses its own TRACER_TEST_PORT; tests use the locally built production bundle.
  • Playwright trace capture remains off per the test config; generated test-result files and explicit test attachments are retained.
  • Run order: base-1, head-1, base-2, head-2, base-3, head-3.

Runs

Run Revision Port Pre-run load (1/5/15 min) Playwright result Duration
BASE 1 1f77a449 4593 0.00 / 0.22 / 0.40 5 passed, 3 failed (exit 1) 322.9 s
HEAD 1 35382a10 4594 0.76 / 0.43 / 0.43 9 passed, 2 failed (exit 1) 267.4 s
BASE 2 1f77a449 4595 0.88 / 0.57 / 0.48 5 passed, 3 failed (exit 1) 330.8 s
HEAD 2 35382a10 4596 0.19 / 0.42 / 0.44 9 passed, 2 failed (exit 1) 261.1 s
BASE 3 1f77a449 4597 0.18 / 0.33 / 0.40 6 passed, 2 failed (exit 1) 325.0 s
HEAD 3 35382a10 4598 0.19 / 0.26 / 0.34 9 passed, 2 failed (exit 1) 262.1 s

Timing checks

Measurement Budget / meaning BASE 1 HEAD 1 BASE 2 HEAD 2 BASE 3 HEAD 3
Theme switch p99 + long tasks <16.67 ms; zero tasks >50 ms p50/p99 0.300/0.600 ms; long tasks >50 ms: 0 p50/p99 0.400/1.200 ms; long tasks >50 ms: 0 p50/p99 0.400/1.100 ms; long tasks >50 ms: 0 p50/p99 0.400/1.800 ms; long tasks >50 ms: 0 p50/p99 0.400/1.000 ms; long tasks >50 ms: 0 p50/p99 0.300/1.100 ms; long tasks >50 ms: 0
Returning sign-in to usable terminal p99 ≤ budget p50 3934.50 ms; p99 3979.00 ms; budget 5000 ms; PASS p50 4122.80 ms; p99 4133.40 ms; budget 5000 ms; PASS p50 3938.50 ms; p99 3981.10 ms; budget 5000 ms; PASS p50 4129.70 ms; p99 4131.80 ms; budget 5000 ms; PASS p50 3928.70 ms; p99 3985.30 ms; budget 5000 ms; PASS p50 4118.10 ms; p99 4234.00 ms; budget 5000 ms; PASS
Terminal resume after drop p99 ≤ RTT × 2 + 300 ms p50 947.00 ms; p99 947.00 ms; budget 900 ms; FAIL p50 996.80 ms; p99 996.80 ms; budget 900 ms; FAIL p50 964.30 ms; p99 964.30 ms; budget 900 ms; FAIL p50 680.40 ms; p99 996.90 ms; budget 900 ms; FAIL p50 1030.20 ms; p99 1030.20 ms; budget 900 ms; FAIL p50 996.10 ms; p99 996.10 ms; budget 900 ms; FAIL
Predicted glyph visibility p99 ≤ 17 ms p50 14.20 ms; p99 14.80 ms; budget 17 ms; PASS p50 5.20 ms; p99 13.00 ms; budget 17 ms; PASS p50 14.40 ms; p99 14.70 ms; budget 17 ms; PASS p50 7.20 ms; p99 14.20 ms; budget 17 ms; PASS p50 14.40 ms; p99 14.90 ms; budget 17 ms; PASS p50 5.00 ms; p99 14.50 ms; budget 17 ms; PASS
Predicted glyph visibility (renderer sample) p99 ≤ 17 ms p50 14.20 ms; p99 14.80 ms; budget 17 ms; PASS p50 5.20 ms; p99 13.00 ms; budget 17 ms; PASS p50 14.40 ms; p99 14.70 ms; budget 17 ms; PASS p50 7.20 ms; p99 14.20 ms; budget 17 ms; PASS p50 14.40 ms; p99 14.90 ms; budget 17 ms; PASS p50 5.00 ms; p99 14.50 ms; budget 17 ms; PASS
Setup screen painted upper bound p99 < 1000 ms p50 1343.70 ms; p99 1594.50 ms; budget 1000 ms; FAIL p50 716.20 ms; p99 1504.90 ms; budget 1000 ms; FAIL p50 1337.40 ms; p99 2156.40 ms; budget 1000 ms; FAIL p50 714.60 ms; p99 1291.20 ms; budget 1000 ms; FAIL p50 1332.10 ms; p99 1622.60 ms; budget 1000 ms; FAIL p50 718.70 ms; p99 1424.90 ms; budget 1000 ms; FAIL
Setup first-contentful-paint reported; 1000 ms reference p50 1288.10 ms; p99 1539.70 ms; budget 1000 ms; REPORT p50 661.00 ms; p99 1460.70 ms; budget 1000 ms; REPORT p50 1275.10 ms; p99 2091.20 ms; budget 1000 ms; REPORT p50 663.50 ms; p99 1234.20 ms; budget 1000 ms; REPORT p50 1270.10 ms; p99 1550.90 ms; budget 1000 ms; REPORT p50 658.00 ms; p99 1376.30 ms; budget 1000 ms; REPORT
Sign-in screen painted upper bound p99 < 1000 ms p50 2073.50 ms; p99 2145.50 ms; budget 1000 ms; FAIL p50 699.40 ms; p99 729.70 ms; budget 1000 ms; PASS p50 2076.80 ms; p99 2131.70 ms; budget 1000 ms; FAIL p50 694.60 ms; p99 725.30 ms; budget 1000 ms; PASS p50 2075.30 ms; p99 2125.70 ms; budget 1000 ms; FAIL p50 701.10 ms; p99 726.00 ms; budget 1000 ms; PASS
Sign-in first-contentful-paint reported; 1000 ms reference p50 2042.70 ms; p99 2117.50 ms; budget 1000 ms; REPORT p50 651.90 ms; p99 681.80 ms; budget 1000 ms; REPORT p50 2045.80 ms; p99 2102.80 ms; budget 1000 ms; REPORT p50 645.40 ms; p99 678.40 ms; budget 1000 ms; REPORT p50 2045.80 ms; p99 2092.00 ms; budget 1000 ms; REPORT p50 651.60 ms; p99 682.50 ms; budget 1000 ms; REPORT

Resume tails are not yet valid: the probe leaves the previous numeric result visible during the next trial. A new functional regression reproduces this stale-report defect; fix pending-state publication, then remeasure all trials. Captured frame prototype on VM208: p50/p99 frame gaps16.7/50ms,88 of299 gaps >16.7ms,zero long tasks. Not accepted. Its sanitized histogram/spans are under20261012T222010Z-1873564931-3332391/decoded. Access waterfall main body takes480ms after response headers, despite parallel discovery; fixture sends79KB identity main vs24KB Brotli shipped sidecar. Production web_assets.rs enables Brotli/gzip but mock serveDist serves identity only; confirm/repair fixture fidelity without claiming a production-source speedup. Native milestone fmt/VTfmt/compileout/Clippy/cargo-deny PASS, test FAIL due job TMPDIR-generated Unix socket path>SUN_LEN, static budgets FAIL22465520/19899080 bytes vs16404816/13817816; no waiver. Short real scratch path prepared for final gate.
Baseline driver completed all six measurements and copied results, then hit a shell parse error because its script file changed while running; frozen VM inputs unchanged and no run omitted. Original runner retained six-slot lock; future runs use per-slot ownership.

<!-- Role: records the perf-VM browser run setup, outcomes, and measurements. --> # Perf VM browser A/B — #184 ## Setup - BASE: `1f77a449ede540281319ba01d149a2f60d584f3b`. - HEAD: `35382a108cb8a0d0f5c34293fc04af9719e2ad53`. - Specs: `test/terminal-theme.spec.ts, test/terminal.spec.ts, test/dead-session.spec.ts`. - Host: Debian GNU/Linux 13 (trixie), 4 vCPUs; each browser run records its pre/post load, kernel, Bun, Playwright, and browser versions. - Profile: 300 ms RTT with ±30 ms jitter; each invocation uses its own `TRACER_TEST_PORT`; tests use the locally built production bundle. - Playwright trace capture remains off per the test config; generated test-result files and explicit test attachments are retained. - Run order: base-1, head-1, base-2, head-2, base-3, head-3. ## Runs | Run | Revision | Port | Pre-run load (1/5/15 min) | Playwright result | Duration | | --- | --- | ---: | --- | --- | ---: | | BASE 1 | `1f77a449` | 4593 | 0.00 / 0.22 / 0.40 | 5 passed, 3 failed (exit 1) | 322.9 s | | HEAD 1 | `35382a10` | 4594 | 0.76 / 0.43 / 0.43 | 9 passed, 2 failed (exit 1) | 267.4 s | | BASE 2 | `1f77a449` | 4595 | 0.88 / 0.57 / 0.48 | 5 passed, 3 failed (exit 1) | 330.8 s | | HEAD 2 | `35382a10` | 4596 | 0.19 / 0.42 / 0.44 | 9 passed, 2 failed (exit 1) | 261.1 s | | BASE 3 | `1f77a449` | 4597 | 0.18 / 0.33 / 0.40 | 6 passed, 2 failed (exit 1) | 325.0 s | | HEAD 3 | `35382a10` | 4598 | 0.19 / 0.26 / 0.34 | 9 passed, 2 failed (exit 1) | 262.1 s | ## Timing checks | Measurement | Budget / meaning | BASE 1 | HEAD 1 | BASE 2 | HEAD 2 | BASE 3 | HEAD 3 | | --- | --- | --- | --- | --- | --- | --- | --- | | Theme switch p99 + long tasks | <16.67 ms; zero tasks >50 ms | p50/p99 0.300/0.600 ms; long tasks >50 ms: 0 | p50/p99 0.400/1.200 ms; long tasks >50 ms: 0 | p50/p99 0.400/1.100 ms; long tasks >50 ms: 0 | p50/p99 0.400/1.800 ms; long tasks >50 ms: 0 | p50/p99 0.400/1.000 ms; long tasks >50 ms: 0 | p50/p99 0.300/1.100 ms; long tasks >50 ms: 0 | | Returning sign-in to usable terminal | p99 ≤ budget | p50 3934.50 ms; p99 3979.00 ms; budget 5000 ms; PASS | p50 4122.80 ms; p99 4133.40 ms; budget 5000 ms; PASS | p50 3938.50 ms; p99 3981.10 ms; budget 5000 ms; PASS | p50 4129.70 ms; p99 4131.80 ms; budget 5000 ms; PASS | p50 3928.70 ms; p99 3985.30 ms; budget 5000 ms; PASS | p50 4118.10 ms; p99 4234.00 ms; budget 5000 ms; PASS | | Terminal resume after drop | p99 ≤ RTT × 2 + 300 ms | p50 947.00 ms; p99 947.00 ms; budget 900 ms; FAIL | p50 996.80 ms; p99 996.80 ms; budget 900 ms; FAIL | p50 964.30 ms; p99 964.30 ms; budget 900 ms; FAIL | p50 680.40 ms; p99 996.90 ms; budget 900 ms; FAIL | p50 1030.20 ms; p99 1030.20 ms; budget 900 ms; FAIL | p50 996.10 ms; p99 996.10 ms; budget 900 ms; FAIL | | Predicted glyph visibility | p99 ≤ 17 ms | p50 14.20 ms; p99 14.80 ms; budget 17 ms; PASS | p50 5.20 ms; p99 13.00 ms; budget 17 ms; PASS | p50 14.40 ms; p99 14.70 ms; budget 17 ms; PASS | p50 7.20 ms; p99 14.20 ms; budget 17 ms; PASS | p50 14.40 ms; p99 14.90 ms; budget 17 ms; PASS | p50 5.00 ms; p99 14.50 ms; budget 17 ms; PASS | | Predicted glyph visibility (renderer sample) | p99 ≤ 17 ms | p50 14.20 ms; p99 14.80 ms; budget 17 ms; PASS | p50 5.20 ms; p99 13.00 ms; budget 17 ms; PASS | p50 14.40 ms; p99 14.70 ms; budget 17 ms; PASS | p50 7.20 ms; p99 14.20 ms; budget 17 ms; PASS | p50 14.40 ms; p99 14.90 ms; budget 17 ms; PASS | p50 5.00 ms; p99 14.50 ms; budget 17 ms; PASS | | Setup screen painted upper bound | p99 < 1000 ms | p50 1343.70 ms; p99 1594.50 ms; budget 1000 ms; FAIL | p50 716.20 ms; p99 1504.90 ms; budget 1000 ms; FAIL | p50 1337.40 ms; p99 2156.40 ms; budget 1000 ms; FAIL | p50 714.60 ms; p99 1291.20 ms; budget 1000 ms; FAIL | p50 1332.10 ms; p99 1622.60 ms; budget 1000 ms; FAIL | p50 718.70 ms; p99 1424.90 ms; budget 1000 ms; FAIL | | Setup first-contentful-paint | reported; 1000 ms reference | p50 1288.10 ms; p99 1539.70 ms; budget 1000 ms; REPORT | p50 661.00 ms; p99 1460.70 ms; budget 1000 ms; REPORT | p50 1275.10 ms; p99 2091.20 ms; budget 1000 ms; REPORT | p50 663.50 ms; p99 1234.20 ms; budget 1000 ms; REPORT | p50 1270.10 ms; p99 1550.90 ms; budget 1000 ms; REPORT | p50 658.00 ms; p99 1376.30 ms; budget 1000 ms; REPORT | | Sign-in screen painted upper bound | p99 < 1000 ms | p50 2073.50 ms; p99 2145.50 ms; budget 1000 ms; FAIL | p50 699.40 ms; p99 729.70 ms; budget 1000 ms; PASS | p50 2076.80 ms; p99 2131.70 ms; budget 1000 ms; FAIL | p50 694.60 ms; p99 725.30 ms; budget 1000 ms; PASS | p50 2075.30 ms; p99 2125.70 ms; budget 1000 ms; FAIL | p50 701.10 ms; p99 726.00 ms; budget 1000 ms; PASS | | Sign-in first-contentful-paint | reported; 1000 ms reference | p50 2042.70 ms; p99 2117.50 ms; budget 1000 ms; REPORT | p50 651.90 ms; p99 681.80 ms; budget 1000 ms; REPORT | p50 2045.80 ms; p99 2102.80 ms; budget 1000 ms; REPORT | p50 645.40 ms; p99 678.40 ms; budget 1000 ms; REPORT | p50 2045.80 ms; p99 2092.00 ms; budget 1000 ms; REPORT | p50 651.60 ms; p99 682.50 ms; budget 1000 ms; REPORT | Resume tails are not yet valid: the probe leaves the previous numeric result visible during the next trial. A new functional regression reproduces this stale-report defect; fix pending-state publication, then remeasure all trials. Captured frame prototype on VM208: p50/p99 frame gaps16.7/50ms,88 of299 gaps >16.7ms,zero long tasks. Not accepted. Its sanitized histogram/spans are under20261012T222010Z-1873564931-3332391/decoded. Access waterfall main body takes~480ms after response headers, despite parallel discovery; fixture sends79KB identity main vs~24KB Brotli shipped sidecar. Production web_assets.rs enables Brotli/gzip but mock serveDist serves identity only; confirm/repair fixture fidelity without claiming a production-source speedup. Native milestone fmt/VTfmt/compileout/Clippy/cargo-deny PASS, test FAIL due job TMPDIR-generated Unix socket path>SUN_LEN, static budgets FAIL22465520/19899080 bytes vs16404816/13817816; no waiver. Short real scratch path prepared for final gate. Baseline driver completed all six measurements and copied results, then hit a shell parse error because its script file changed while running; frozen VM inputs unchanged and no run omitted. Original runner retained six-slot lock; future runs use per-slot ownership.
Author
Owner

D259 protocol proposal (before code): the current resumed connection spends an HTTP upgrade RTT then an application restore RTT, with the graceful-close RTT before them. Keep the WebSocket transport and audited frame codec. Advertise an additive initializer capability in server Hello; only after that advertisement, permit a bounded initial Hello/Resume/AttachTerm/Credit/Resize packet in WebSocket subprotocol offers, selecting only a fixed protocol name in the response. No Input, Call or Subscribe, no capability in URLs/storage, no header/subprotocol logging. Seed the existing receive buffer after unchanged Origin/cookie admission; existing resume ownership, active=0, token rotation, plugin checks, quotas and replay-fence checks remain mandatory. A brief bounded wait for an authenticated old closing connection may preserve active=0 without a race; do not implement active-connection takeover or relax exclusivity. Overlap explicit reconnect with graceful-close acknowledgement, with legacy fallback for unadvertised servers; measure on VM208 at LAN/150/300ms. This adds no standby sockets or idle timers and chooses no new library/engine. Parser/authority tests and malformed-initializer fuzz coverage are required before accepting it. Current fade capture remains unaccepted (50ms frame gaps); investigate registration/scoping of inherited theme tokens without changing appearance. Source suite181/0 on VM208; held-fence and real renderer/query/clock functional gates7/7; stale resume-report test reproduced before fix and now2/2 functional gates pass, with unchanged budgets.

D259 protocol proposal (before code): the current resumed connection spends an HTTP upgrade RTT then an application restore RTT, with the graceful-close RTT before them. Keep the WebSocket transport and audited frame codec. Advertise an additive initializer capability in server Hello; only after that advertisement, permit a bounded initial Hello/Resume/AttachTerm/Credit/Resize packet in WebSocket subprotocol offers, selecting only a fixed protocol name in the response. No Input, Call or Subscribe, no capability in URLs/storage, no header/subprotocol logging. Seed the existing receive buffer after unchanged Origin/cookie admission; existing resume ownership, active=0, token rotation, plugin checks, quotas and replay-fence checks remain mandatory. A brief bounded wait for an authenticated old closing connection may preserve active=0 without a race; do not implement active-connection takeover or relax exclusivity. Overlap explicit reconnect with graceful-close acknowledgement, with legacy fallback for unadvertised servers; measure on VM208 at LAN/150/300ms. This adds no standby sockets or idle timers and chooses no new library/engine. Parser/authority tests and malformed-initializer fuzz coverage are required before accepting it. Current fade capture remains unaccepted (50ms frame gaps); investigate registration/scoping of inherited theme tokens without changing appearance. Source suite181/0 on VM208; held-fence and real renderer/query/clock functional gates7/7; stale resume-report test reproduced before fix and now2/2 functional gates pass, with unchanged budgets.
Author
Owner

Completed measurement fidelity corrections: 8e4f0d23 clears the previous completed resume value before each trial (regression cd1b3f12 was red before). 03bd529a serves prebuilt br/gzip and representation Content-Length in the browser fixture; production already does this in crates/infraternal-server/src/web_assets.rs. Regression d41b02e0 was red before (accepted br returned no Content-Encoding). Tracer check passed; asset negotiation, repeated-resume report and replay-readiness functional cases: 3 passed. Logs: evidence/prod-perf-176/round2/asset-representation-{check,functional}.log. 715129d1 removes redundant root attributes around captures; same 180ms single opacity fade, functional ready check passes. VM remeasure in progress; no speedup claimed until VM evidence.

Completed measurement fidelity corrections: 8e4f0d23 clears the previous completed resume value before each trial (regression cd1b3f12 was red before). 03bd529a serves prebuilt br/gzip and representation Content-Length in the browser fixture; production already does this in crates/infraternal-server/src/web_assets.rs. Regression d41b02e0 was red before (accepted br returned no Content-Encoding). Tracer check passed; asset negotiation, repeated-resume report and replay-readiness functional cases: 3 passed. Logs: evidence/prod-perf-176/round2/asset-representation-{check,functional}.log. 715129d1 removes redundant root attributes around captures; same 180ms single opacity fade, functional ready check passes. VM remeasure in progress; no speedup claimed until VM evidence.
Author
Owner

VM remeasure 715129d1 (evidence/perf-vm-browser/20261012T233835Z-2160640603-152699): corrected production precompressed asset fixture, setup upper p99 758.30ms / FCP 695.40ms; sign-in upper p99 727.60ms / FCP 673.40ms (30 samples each, 300ms RTT±30ms, pre-load .05/.07/.31, 4 vCPU). This is fixture fidelity, not a production-code startup speedup. Fresh independent resume n=20 p50 979.80/p99 996.70ms: still fails unchanged 900ms assertion. Predicted glyph n=20 p50 10.40/p99 15.30ms passes 17ms with corrected causal clock.

Theme removal of redundant capture root attribute: p99 50.1ms, 12 gaps >33.4ms, one long task. Candidate universal CSS token registration (80147f05), computed paint values identical, no improvement: both variants p99 50.1ms, 12 >33.4ms, zero long tasks in that separate run (evidence/perf-vm-browser/20261012T234017Z-142666671-159160). Candidate remains test-only.

New deterministic session-manager finding: a pointer close callback executes after a replacement manager opens and unconditionally clears the current manager reference (apps/tracer/src/canvas/windows/session-ui.on-demand.ts). Inventory updates then leave its visible rows stale. Regression evidence/prod-perf-176/round2/session-manager-owner-red.log: expected replacement row count 2, received 1; repeated-resume regression in same run passes. Fix guards cleanup by manager identity. The isolated retry VM failure occurs before the error card exists, a separate scene initialization issue still being investigated.

Reconnect ordering regression evidence/prod-perf-176/round2/reconnect-order-red.log: replacement socket count stays 1 when the old close event is withheld. Locally retiring a requested drop after sending Close lets the bounded retry overlap the closing flight; server active=0 resume exclusivity is unchanged. Functional regression passes after fix; VM speed evidence pending.

VM remeasure 715129d1 (evidence/perf-vm-browser/20261012T233835Z-2160640603-152699): corrected production precompressed asset fixture, setup upper p99 758.30ms / FCP 695.40ms; sign-in upper p99 727.60ms / FCP 673.40ms (30 samples each, 300ms RTT±30ms, pre-load .05/.07/.31, 4 vCPU). This is fixture fidelity, not a production-code startup speedup. Fresh independent resume n=20 p50 979.80/p99 996.70ms: still fails unchanged 900ms assertion. Predicted glyph n=20 p50 10.40/p99 15.30ms passes 17ms with corrected causal clock. Theme removal of redundant capture root attribute: p99 50.1ms, 12 gaps >33.4ms, one long task. Candidate universal CSS token registration (80147f05), computed paint values identical, no improvement: both variants p99 50.1ms, 12 >33.4ms, zero long tasks in that separate run (evidence/perf-vm-browser/20261012T234017Z-142666671-159160). Candidate remains test-only. New deterministic session-manager finding: a pointer close callback executes after a replacement manager opens and unconditionally clears the current manager reference (apps/tracer/src/canvas/windows/session-ui.on-demand.ts). Inventory updates then leave its visible rows stale. Regression evidence/prod-perf-176/round2/session-manager-owner-red.log: expected replacement row count 2, received 1; repeated-resume regression in same run passes. Fix guards cleanup by manager identity. The isolated retry VM failure occurs before the error card exists, a separate scene initialization issue still being investigated. Reconnect ordering regression evidence/prod-perf-176/round2/reconnect-order-red.log: replacement socket count stays 1 when the old close event is withheld. Locally retiring a requested drop after sending Close lets the bounded retry overlap the closing flight; server active=0 resume exclusivity is unchanged. Functional regression passes after fix; VM speed evidence pending.
Author
Owner

Completed 9c85d82a VM check: all 3 selected production-renderer tests pass (terminal interaction/prediction/resume, manager ownership, isolated error/retry). 300ms RTT±30ms, 4vCPU, pre-load .07/.08/.19. Fresh n=20 resume p50/p99 changes from 979.80/996.70ms at 715129d1 to 680.00/697.30ms after df3e2747 locally retires the closing socket (no authority/exclusive-writer change); unchanged 900ms gate now passes. Predicted glyph p50/p99 8.70/14.40ms, 17ms gate passes. Returning sign-in p50/p99 4122.00/4131.40ms under5000ms. Table/raw reports: latest evidence/perf-vm-browser run for 9c85d82a, evidence/prod-perf-176/round2/reconnect-manager-driver.log. Three interleaved before/after repetitions now running.

Manager repair 314e34f1, regression 9c85d82a: current card keeps inventory updates while prior pointer-close retires. Local exact regression passes; VM exact regression and Retry both pass. Reconnect regression 6d1bd70d: withheld old close callback passes; stale resume-result regression passes in isolated run. Tracer check passed. Batched local runs also recorded two fixture reset socket-hangups and intermittent absent scene manager, not papered over or timeout-raised.

WebKit attempt could not launch: existing shared config passed Chromium-only --disable-renderer-backgrounding, which WebKit rejects. Need engine-specific launch options before WebKit timing evidence; no numbers reported for that failure.

Completed 9c85d82a VM check: all 3 selected production-renderer tests pass (terminal interaction/prediction/resume, manager ownership, isolated error/retry). 300ms RTT±30ms, 4vCPU, pre-load .07/.08/.19. Fresh n=20 resume p50/p99 changes from 979.80/996.70ms at 715129d1 to 680.00/697.30ms after df3e2747 locally retires the closing socket (no authority/exclusive-writer change); unchanged 900ms gate now passes. Predicted glyph p50/p99 8.70/14.40ms, 17ms gate passes. Returning sign-in p50/p99 4122.00/4131.40ms under5000ms. Table/raw reports: latest evidence/perf-vm-browser run for 9c85d82a, evidence/prod-perf-176/round2/reconnect-manager-driver.log. Three interleaved before/after repetitions now running. Manager repair 314e34f1, regression 9c85d82a: current card keeps inventory updates while prior pointer-close retires. Local exact regression passes; VM exact regression and Retry both pass. Reconnect regression 6d1bd70d: withheld old close callback passes; stale resume-result regression passes in isolated run. Tracer check passed. Batched local runs also recorded two fixture reset socket-hangups and intermittent absent scene manager, not papered over or timeout-raised. WebKit attempt could not launch: existing shared config passed Chromium-only --disable-renderer-backgrounding, which WebKit rejects. Need engine-specific launch options before WebKit timing evidence; no numbers reported for that failure.
Author
Owner

Interleaved VM before/after completed (715129d1 -> 9c85d82a; evidence/perf-vm-browser/20261012T235254Z-2480351818-297896/summary.md). Both use corrected compressed-asset fixture and distinct resume samples.

Metric p99 ms Base1 Head1 Base2 Head2 Base3 Head3
Resume, 900ms budget 1030.2 714.0 1014.5 713.3 1013.9 696.7
Predicted glyph,17ms 15.1 14.3 15.2 15.4 15.7 14.7
Setup upper,1000ms 749.3 742.8 765.2 752.2 750.1 753.5
Sign-in upper,1000ms 731.1 741.2 724.6 728.6 730.5 741.8
Returning sign-in,5000ms 4136.9 4232.1 4139.2 4234.4 4134.9 4135.3

4vCPU VM208, 300ms RTT±30ms, unique ports4735..4740; pre-loads recorded per slot. All seven ended-session cases pass on all6slots. Retry absent initial error card: base1 andhead2; remaining4 pass. Theme retained-history/ANSI/colors and JS-click/long-task assertions pass, but selection after a theme choice fails unchanged distance<=3 with119 on all6slots. Investigating publication before the capture update completes, without weakening the assertion.

Source suite on VM after recovery-prediction change:181pass/0fail/11016expectations (evidence/prod-perf-176/round2/offline-prediction-source-vm.log). All-target native server clippy passes for bounded metadata parser and the initial real-TCP authority tests (3pass: rotation without body handshake, active/wrong-token refusal, Origin/cookie ordering). Metadata remains behind existing auth and inactive-writer checks; packet has no Input/Call/Subscribe and is bounded4KiB. Fuzz target being built.

New long-lived-socket finding: client spent its120s resume grace from Welcome even though server starts it at disconnect. Virtual-clock regression resume-window-red.log fails because neither binary Resume nor metadata is offered after10min of live use. Fix aligns grace with actual drop and never renews it for failed attempts.

Interleaved VM before/after completed (715129d1 -> 9c85d82a; evidence/perf-vm-browser/20261012T235254Z-2480351818-297896/summary.md). Both use corrected compressed-asset fixture and distinct resume samples. |Metric p99 ms|Base1|Head1|Base2|Head2|Base3|Head3| |---|---:|---:|---:|---:|---:|---:| |Resume, 900ms budget|1030.2|714.0|1014.5|713.3|1013.9|696.7| |Predicted glyph,17ms|15.1|14.3|15.2|15.4|15.7|14.7| |Setup upper,1000ms|749.3|742.8|765.2|752.2|750.1|753.5| |Sign-in upper,1000ms|731.1|741.2|724.6|728.6|730.5|741.8| |Returning sign-in,5000ms|4136.9|4232.1|4139.2|4234.4|4134.9|4135.3| 4vCPU VM208, 300ms RTT±30ms, unique ports4735..4740; pre-loads recorded per slot. All seven ended-session cases pass on all6slots. Retry absent initial error card: base1 andhead2; remaining4 pass. Theme retained-history/ANSI/colors and JS-click/long-task assertions pass, but selection after a theme choice fails unchanged distance<=3 with119 on all6slots. Investigating publication before the capture update completes, without weakening the assertion. Source suite on VM after recovery-prediction change:181pass/0fail/11016expectations (evidence/prod-perf-176/round2/offline-prediction-source-vm.log). All-target native server clippy passes for bounded metadata parser and the initial real-TCP authority tests (3pass: rotation without body handshake, active/wrong-token refusal, Origin/cookie ordering). Metadata remains behind existing auth and inactive-writer checks; packet has no Input/Call/Subscribe and is bounded4KiB. Fuzz target being built. New long-lived-socket finding: client spent its120s resume grace from Welcome even though server starts it at disconnect. Virtual-clock regression resume-window-red.log fails because neither binary Resume nor metadata is offered after10min of live use. Fix aligns grace with actual drop and never renews it for failed attempts.
Author
Owner

Round 2 progress at adb20e6a: bounded initialized-upgrade parser/client/native route and protocol description are committed separately (278f57d7, 51d79c88, 8d067a32, 2d8cdc91, 0381c780, 5ac3117a). Native upgrade authority tests: 3 pass; full auth suite: 109 pass, 0 fail; VM source tests: 183 pass, 0 fail. Seeded upgrade parser fuzz: 1000 runs pass, coverage/ASAN enabled (fuzz-only LTO disabled to resolve instrumentation link failure). No auth checks or active-writer guards relaxed.

New reproducible manager cause: lazy module completion retained a detached window/anchor after a rebuild. Held-chunk browser regression fails before the fix and passes after f02ab474; replacement-manager regression passes too. Test f093e751. Retry still intermittently fails before initial error-card opening, so it remains unresolved.

D259 strict retained-glyph/replay-fence test d9be3d3a now queued on VM at 150 ms together with original theme selection assertions. Prewarm-theme candidate 41e8ad4f queued on VM; no production culling shipped. Evidence/logs: evidence/prod-perf-176/round2/{session-rebuild-red.log,session-rebuild-green.log,upgrade-auth-full.log,upgrade-metadata-fuzz-seeded.log,upgrade-source-vm.log}. Final full fast gate still pending; static transfer caps previously fail on inherited production sizes (#175), no waiver applied.

Round 2 progress at adb20e6a: bounded initialized-upgrade parser/client/native route and protocol description are committed separately (278f57d7, 51d79c88, 8d067a32, 2d8cdc91, 0381c780, 5ac3117a). Native upgrade authority tests: 3 pass; full auth suite: 109 pass, 0 fail; VM source tests: 183 pass, 0 fail. Seeded upgrade parser fuzz: 1000 runs pass, coverage/ASAN enabled (fuzz-only LTO disabled to resolve instrumentation link failure). No auth checks or active-writer guards relaxed. New reproducible manager cause: lazy module completion retained a detached window/anchor after a rebuild. Held-chunk browser regression fails before the fix and passes after f02ab474; replacement-manager regression passes too. Test f093e751. Retry still intermittently fails before initial error-card opening, so it remains unresolved. D259 strict retained-glyph/replay-fence test d9be3d3a now queued on VM at 150 ms together with original theme selection assertions. Prewarm-theme candidate 41e8ad4f queued on VM; no production culling shipped. Evidence/logs: evidence/prod-perf-176/round2/{session-rebuild-red.log,session-rebuild-green.log,upgrade-auth-full.log,upgrade-metadata-fuzz-seeded.log,upgrade-source-vm.log}. Final full fast gate still pending; static transfer caps previously fail on inherited production sizes (#175), no waiver applied.
Author
Owner

Completed steps: 577bfc19/4a621e9c finish palette color transitions before capture and publish usable theme readiness after the native 180 ms opacity ends. Functional regression red: live input target was HTML and four independent color transitions survived capture; green: hit target is the terminal and zero paint transitions. CSS pointer overrides were tested and rejected; native captured contents cannot receive pointer input during the fade (https://www.w3.org/TR/css-view-transitions-1/). Production colors and duration unchanged.

468e4216/2f3ae76c give pending parsed output one local paint frame to publish its safe resume cursor before choosing the initialized upgrade; deterministic test red then 3 assertions green, tracer check passes. Longer writes retain binary fallback, no cursor/auth approximation. Current dev merged as 54cee075 (D250). Head ca108359 pushed; integrated fast gate and VM source gate running.

VM candidate 41e8ad4f: Chromium theme frames baseline p99 50.1 ms, narrow 120 px prewarm p99 16.8 ms, zero long tasks, identical body rectangles; raw >16.7 counts 93 baseline/79 prewarm include timestamp quantization and remain a literal acceptance miss. No production culling shipped yet. VM evidence 20261013T023643Z-647961738-1989884, 4 vCPU, load before 0.46/1.03/1.35. WebKit comparison queued.

Strict D259 first run adb20e6a at actual 150±30 ms: retained glyph p50/p99 3.7/5.4 ms (all retained); replay-ready 174.7/342.1 ms, FAIL 200 ms. Original theme selection still FAIL distance119. These failures remain evidence. New helper and pending-paint repair being remeasured. Runner zero-jitter descriptor initially did not reach relay; ca108359 includes deterministic red/green configuration tests and propagation repair. First requested-zero run still used historical ±30 ms and will not be cited as a zero-jitter result.

Completed steps: 577bfc19/4a621e9c finish palette color transitions before capture and publish usable theme readiness after the native 180 ms opacity ends. Functional regression red: live input target was HTML and four independent color transitions survived capture; green: hit target is the terminal and zero paint transitions. CSS pointer overrides were tested and rejected; native captured contents cannot receive pointer input during the fade (https://www.w3.org/TR/css-view-transitions-1/). Production colors and duration unchanged. 468e4216/2f3ae76c give pending parsed output one local paint frame to publish its safe resume cursor before choosing the initialized upgrade; deterministic test red then 3 assertions green, tracer check passes. Longer writes retain binary fallback, no cursor/auth approximation. Current dev merged as 54cee075 (D250). Head ca108359 pushed; integrated fast gate and VM source gate running. VM candidate 41e8ad4f: Chromium theme frames baseline p99 50.1 ms, narrow 120 px prewarm p99 16.8 ms, zero long tasks, identical body rectangles; raw >16.7 counts 93 baseline/79 prewarm include timestamp quantization and remain a literal acceptance miss. No production culling shipped yet. VM evidence 20261013T023643Z-647961738-1989884, 4 vCPU, load before 0.46/1.03/1.35. WebKit comparison queued. Strict D259 first run adb20e6a at actual 150±30 ms: retained glyph p50/p99 3.7/5.4 ms (all retained); replay-ready 174.7/342.1 ms, FAIL 200 ms. Original theme selection still FAIL distance119. These failures remain evidence. New helper and pending-paint repair being remeasured. Runner zero-jitter descriptor initially did not reach relay; ca108359 includes deterministic red/green configuration tests and propagation repair. First requested-zero run still used historical ±30 ms and will not be cited as a zero-jitter result.
Author
Owner

Head c596e243 pushed. Chromium production body parking eee61621/d470c8db/1b746d4a: opt-in shared window state, 120 px crossing-only prewarm observer, active/goo exceptions, unchanged intrinsic geometry; functional suite 4 pass including Retry, manager replacement and held-chunk rebuild. Build-host cluster tests must enable INFRATERNAL_CLUSTERS_PREVIEW=1; runs without it are fixture-admission misses, not application Retry evidence.

VM production 1b746d4a at LAN: retained glyph p50/p99 3.6/4.4 ms, replay fence 24.4/25.3 ms (50 ms budget), all retained; Chromium frame timeline p99 16.8 ms, zero long tasks, raw >16.7=97/330 includes quantization and is NOT claimed as strict zero-over acceptance. VM 20261013T025519Z-3108259674-2167494. Fixed 150 ms ca108359: cached 3.7/5.6 ms, replay 175.5/191.1 ms (200 ms budget), pass. At fixed 300 ms 1b746d4a: cached 3.7/4.8 ms, replay 325.2/341.1 ms (350 ms), pass; repeated runs pending.

WebKit production still HOLD: frame p99 480 ms with body parking (before baseline519 ms), all23 sampled gaps>16.7; longtask observer unsupported so zero cannot be proven. Its plain-HTTP single-terminal fixture reached auth instead of a probe. c596e243 now initializes via the existing HTTP preview-owner route; no native auth/cookie rule changed. Remeasure queued.

D259 common baseline object 9ff74a3d9f854194adcb599402c2a16f6260a3b9 derives from715129d1, changes only identical strict resume test and explicit RTT/jitter configuration. The first comparison object0226d06 lacked disconnect observation and is invalid for before/after: legacy ready bit survives socket closing. 3be6af8f strengthens the harness to observe disconnect before a new fence. Six interleaved slots per LAN/150/300 queued with the strengthened identical harness. No budget/assertion weakened.

Integrated VM source suite:184 pass,0 fail,11027 assertions. Full integrated fast gate still running; fmt/clippy passed so far, native lifecycle/auth suites progressing. Evidence under evidence/prod-perf-176/round2 and per-run VM environment records.

Head c596e243 pushed. Chromium production body parking eee61621/d470c8db/1b746d4a: opt-in shared window state, 120 px crossing-only prewarm observer, active/goo exceptions, unchanged intrinsic geometry; functional suite 4 pass including Retry, manager replacement and held-chunk rebuild. Build-host cluster tests must enable INFRATERNAL_CLUSTERS_PREVIEW=1; runs without it are fixture-admission misses, not application Retry evidence. VM production 1b746d4a at LAN: retained glyph p50/p99 3.6/4.4 ms, replay fence 24.4/25.3 ms (50 ms budget), all retained; Chromium frame timeline p99 16.8 ms, zero long tasks, raw >16.7=97/330 includes quantization and is NOT claimed as strict zero-over acceptance. VM 20261013T025519Z-3108259674-2167494. Fixed 150 ms ca108359: cached 3.7/5.6 ms, replay 175.5/191.1 ms (200 ms budget), pass. At fixed 300 ms 1b746d4a: cached 3.7/4.8 ms, replay 325.2/341.1 ms (350 ms), pass; repeated runs pending. WebKit production still HOLD: frame p99 480 ms with body parking (before baseline519 ms), all23 sampled gaps>16.7; longtask observer unsupported so zero cannot be proven. Its plain-HTTP single-terminal fixture reached auth instead of a probe. c596e243 now initializes via the existing HTTP preview-owner route; no native auth/cookie rule changed. Remeasure queued. D259 common baseline object 9ff74a3d9f854194adcb599402c2a16f6260a3b9 derives from715129d1, changes only identical strict resume test and explicit RTT/jitter configuration. The first comparison object0226d06 lacked disconnect observation and is invalid for before/after: legacy ready bit survives socket closing. 3be6af8f strengthens the harness to observe disconnect before a new fence. Six interleaved slots per LAN/150/300 queued with the strengthened identical harness. No budget/assertion weakened. Integrated VM source suite:184 pass,0 fail,11027 assertions. Full integrated fast gate still running; fmt/clippy passed so far, native lifecycle/auth suites progressing. Evidence under evidence/prod-perf-176/round2 and per-run VM environment records.
Author
Owner

Finding: VM b02aa832 Retry repeat3 is missing its initial card in2/3. Inventory is error, no admitted anchor, no page errors; public JS dependencies finish at5108/5547 ms versus4374 ms in the passing trial (evidence/perf-vm-browser/20261013T031749Z-3913223146-2474566 scene-state attachments). This is late manager module discovery, not a raised Retry budget. Testing public code warming alongside canvas setup instead of waiting for idle, without awaiting it or creating manager DOM. Existing on-demand byte class and all auth/error/loading/six-row assertions remain unchanged; first-paint and glyph VM remeasure required. Reject raising the five-second assertion or forcing an extra test click.

WebKit engine-only shared-helper control: idle p99 17 ms, surface p99 25 ms (37 frames), document visible. Production idle14–18 ms, old-capture entry214–255 ms, update83–99 ms, ready353–405 ms; opacity completion746–874 ms. A root opacity-layer hint lowers some old-capture entries to54 ms but updates80–89 ms and finishes652–746 ms, still HOLD. This is application capture/update work, not globally slow idle cadence. Evidence VM20261013T032207Z-1212980113-2532315 and20261013T032620Z-3170706403-2580361. No hint shipped.

Native integrated gate: all tests passed, x86 static artifact22541488 bytes >16404816 cap, unchanged HOLD #175. ARM/minimal CLI builds still running. Real native PTY initialized-resume regression79a7dcad staged on VM to test the TLS fixture bridge, which currently drops subprotocol metadata.

Finding: VM b02aa832 Retry repeat3 is missing its initial card in2/3. Inventory is error, no admitted anchor, no page errors; public JS dependencies finish at5108/5547 ms versus4374 ms in the passing trial (evidence/perf-vm-browser/20261013T031749Z-3913223146-2474566 scene-state attachments). This is late manager module discovery, not a raised Retry budget. Testing public code warming alongside canvas setup instead of waiting for idle, without awaiting it or creating manager DOM. Existing on-demand byte class and all auth/error/loading/six-row assertions remain unchanged; first-paint and glyph VM remeasure required. Reject raising the five-second assertion or forcing an extra test click. WebKit engine-only shared-helper control: idle p99 17 ms, surface p99 25 ms (37 frames), document visible. Production idle14–18 ms, old-capture entry214–255 ms, update83–99 ms, ready353–405 ms; opacity completion746–874 ms. A root opacity-layer hint lowers some old-capture entries to54 ms but updates80–89 ms and finishes652–746 ms, still HOLD. This is application capture/update work, not globally slow idle cadence. Evidence VM20261013T032207Z-1212980113-2532315 and20261013T032620Z-3170706403-2580361. No hint shipped. Native integrated gate: all tests passed, x86 static artifact22541488 bytes >16404816 cap, unchanged HOLD #175. ARM/minimal CLI builds still running. Real native PTY initialized-resume regression79a7dcad staged on VM to test the TLS fixture bridge, which currently drops subprotocol metadata.
Author
Owner

Strict D259 identical-harness interleaved3 is complete on c596e243 vs9ff74a3d (legacy715129d1 plus only test/link config). Per-run replay-ready p50/p99 ms:
|RTT|BASE1|HEAD1|BASE2|HEAD2|BASE3|HEAD3|
|0|74.9/91.9|24.2/27.1|74.8/91.5|24.4/26.0|74.5/90.8|23.5/24.8|
|150|see VM030234 receipt|all HEAD pass200ms|see receipt|all HEAD pass|see receipt|all HEAD pass|
|300|987.3/991.5|325.3/341.0|986.8/991.7|325.1/341.5|974.4/991.8|324.9/341.0|
Every cached glyph retained; exact per-trial/public frame projections collected under evidence/prod-perf-176/round2/vm-records, aggregate vm-results.json. Source VM runs030233Z-2032244995-2281431,030234Z-776270688-2281647,030235Z-2969516128-2281778. Re-baseline full browser slots on07c52166 all preserved: original theme/terminal/ended assertions pass on HEAD except intermittently missing initial Retry scene card; no assertions raised.

New finding resolves missing-card phase: loader READY, active eligible windows, but no toggle request/mount before deadline (VM045048Z-2776242115-3310704). Rejected eager-manager-warming candidate428691c6 (3/3 initial card misses). Fixture scene discovered after world/inventory and a spare400ms timer.6292e62d starts explicitly requested scene code alongside reads and removes that spare timer, preserving palette/camera settling and all five-second assertions; unchanged Retry VM repeat3 now passes.791f7794 held-code test matches actual createSessionUi export so exclusions in critical chunks cannot deadlock fixture startup.

Native PTY initialized resume: strengthened test requires an actual baseline echo, advertised capability, an initialized offer, native selection and resumed echo. It failed with empty output through the TLS fixture;75f189e5/93e36938 forward the offer in memory, echo only fixed protocol and close selection mismatch; real native functional case passes. No native auth checks changed. The old native VM fixture path failed SUN_LEN before auth;7a95c364 shortens owned aliases (byte-length regression passes). Functional native source equivalent to79a7dcad; no local timing used as evidence.

Full integrated fast gate ca108359: fmt PASS, VT native fmt PASS, CLI plugin compile-out PASS, clippy PASS, test PASS, cargo-deny PASS, static builds FAIL(1): x8622541488>16404816, ARM19955528>13817816 (#175 unchanged HOLD). Final exact-head gate still required.

Shared capsule refresh structural regression: same settled selection performs two needless geometry reads per control; appearance invokes three such controls in hidden Settings. Testing no-op refresh plus button ResizeObserver coverage, preserving existing in-flight glide behavior. WebKit native timeline now works: style max81.54ms, layout34.71ms, paint184.76ms, rendering-frame94.48ms and script scopes94.44ms, so strict zero-long-task/frame acceptance remains HOLD. Whole-frame parking and opacity-layer hints insufficient; canceling color transitions worsened p99 to660ms and is rejected.

Strict D259 identical-harness interleaved3 is complete on c596e243 vs9ff74a3d (legacy715129d1 plus only test/link config). Per-run replay-ready p50/p99 ms: |RTT|BASE1|HEAD1|BASE2|HEAD2|BASE3|HEAD3| |0|74.9/91.9|24.2/27.1|74.8/91.5|24.4/26.0|74.5/90.8|23.5/24.8| |150|see VM030234 receipt|all HEAD pass200ms|see receipt|all HEAD pass|see receipt|all HEAD pass| |300|987.3/991.5|325.3/341.0|986.8/991.7|325.1/341.5|974.4/991.8|324.9/341.0| Every cached glyph retained; exact per-trial/public frame projections collected under evidence/prod-perf-176/round2/vm-records, aggregate vm-results.json. Source VM runs030233Z-2032244995-2281431,030234Z-776270688-2281647,030235Z-2969516128-2281778. Re-baseline full browser slots on07c52166 all preserved: original theme/terminal/ended assertions pass on HEAD except intermittently missing initial Retry scene card; no assertions raised. New finding resolves missing-card phase: loader READY, active eligible windows, but no toggle request/mount before deadline (VM045048Z-2776242115-3310704). Rejected eager-manager-warming candidate428691c6 (3/3 initial card misses). Fixture scene discovered after world/inventory and a spare400ms timer.6292e62d starts explicitly requested scene code alongside reads and removes that spare timer, preserving palette/camera settling and all five-second assertions; unchanged Retry VM repeat3 now passes.791f7794 held-code test matches actual createSessionUi export so exclusions in critical chunks cannot deadlock fixture startup. Native PTY initialized resume: strengthened test requires an actual baseline echo, advertised capability, an initialized offer, native selection and resumed echo. It failed with empty output through the TLS fixture;75f189e5/93e36938 forward the offer in memory, echo only fixed protocol and close selection mismatch; real native functional case passes. No native auth checks changed. The old native VM fixture path failed SUN_LEN before auth;7a95c364 shortens owned aliases (byte-length regression passes). Functional native source equivalent to79a7dcad; no local timing used as evidence. Full integrated fast gate ca108359: fmt PASS, VT native fmt PASS, CLI plugin compile-out PASS, clippy PASS, test PASS, cargo-deny PASS, static builds FAIL(1): x8622541488>16404816, ARM19955528>13817816 (#175 unchanged HOLD). Final exact-head gate still required. Shared capsule refresh structural regression: same settled selection performs two needless geometry reads per control; appearance invokes three such controls in hidden Settings. Testing no-op refresh plus button ResizeObserver coverage, preserving existing in-flight glide behavior. WebKit native timeline now works: style max81.54ms, layout34.71ms, paint184.76ms, rendering-frame94.48ms and script scopes94.44ms, so strict zero-long-task/frame acceptance remains HOLD. Whole-frame parking and opacity-layer hints insufficient; canceling color transitions worsened p99 to660ms and is rejected.
Author
Owner

Step 2cddbef8 (implementation c5612ade): native WebKit attribution maps the ~80 ms forced RecalculateStyles call to perf-hud.on-demand.ts readColors (public bundle source retained from VM run 20261013T052011Z-4168058191-3510298). Its data-theme observer called getComputedStyle on the meter and forced document style work. Read the same literal root palette tokens instead; disabling the meter was rejected. Regression: old implementation 1 computed-style read; repaired 0, drawn color remains in the active palette. Tracer check and functional browser case pass (hud-theme-real-red.log / hud-theme-green.log). Interleaved WebKit and Chromium VM measurements queued; no frame-budget acceptance claim yet.

Step 2cddbef8 (implementation c5612ade): native WebKit attribution maps the ~80 ms forced RecalculateStyles call to perf-hud.on-demand.ts readColors (public bundle source retained from VM run 20261013T052011Z-4168058191-3510298). Its data-theme observer called getComputedStyle on the meter and forced document style work. Read the same literal root palette tokens instead; disabling the meter was rejected. Regression: old implementation 1 computed-style read; repaired 0, drawn color remains in the active palette. Tracer check and functional browser case pass (hud-theme-real-red.log / hud-theme-green.log). Interleaved WebKit and Chromium VM measurements queued; no frame-budget acceptance claim yet.
Author
Owner

Step a74377a3 (fixture c63cd564): exact-head native PTY resume check exposed a fixture race: relay output can precede the client paint callback, so immediate close correctly used the binary fallback (zero initialized offers). The fixture now retains only aggregate output/credit byte totals. The case requires returned credit covering all observed output before close, then still requires the initialized offer, native protocol selection and real resumed-54 PTY echo. Tracer check passes; real-resume-painted.log: 1 passed. This strengthens the precondition, not a timing/budget assertion; no native authority or production cursor eligibility changed.

Step a74377a3 (fixture c63cd564): exact-head native PTY resume check exposed a fixture race: relay output can precede the client paint callback, so immediate close correctly used the binary fallback (zero initialized offers). The fixture now retains only aggregate output/credit byte totals. The case requires returned credit covering all observed output before close, then still requires the initialized offer, native protocol selection and real resumed-54 PTY echo. Tracer check passes; real-resume-painted.log: 1 passed. This strengthens the precondition, not a timing/budget assertion; no native authority or production cursor eligibility changed.
Author
Owner

Continuing #176 on prod-perf-fix, base/head a74377a34b. Read issue history and parent #169, project contracts and round-2 record. Resume interleaved D259 evidence already passes; strict Chromium/WebKit theme timeline remains HOLD. Verify meter repair measurements, continue remaining native style/paint attribution and finalize exact-head gates without budget/auth/visual changes. Latest origin/dev contains owner D262: new evidence will attach to this issue rather than be committed. No deployment.

Continuing #176 on prod-perf-fix, base/head a74377a34bb758a4e2d962695b9a9657ad7ba4cc. Read issue history and parent #169, project contracts and round-2 record. Resume interleaved D259 evidence already passes; strict Chromium/WebKit theme timeline remains HOLD. Verify meter repair measurements, continue remaining native style/paint attribution and finalize exact-head gates without budget/auth/visual changes. Latest origin/dev contains owner D262: new evidence will attach to this issue rather than be committed. No deployment.
Author
Owner

Continuing #176 on prod-perf-fix, base/head 48dc925d0b. Read #176 and parent #169 history, round-1/round-2 evidence and repository contracts. Continue existing measurements and uncommitted detached-body candidate; D259 repairs already measured on VM208. Strict Chromium/WebKit theme frame target remains HOLD. Check final pending VM receipts and exact-head gates, keep all budgets/auth/visuals unchanged. Evidence attaches to this issue under D262. No deployment.

Continuing #176 on prod-perf-fix, base/head 48dc925d0ba8197c3b83eb3e5884821d495cc077. Read #176 and parent #169 history, round-1/round-2 evidence and repository contracts. Continue existing measurements and uncommitted detached-body candidate; D259 repairs already measured on VM208. Strict Chromium/WebKit theme frame target remains HOLD. Check final pending VM receipts and exact-head gates, keep all budgets/auth/visuals unchanged. Evidence attaches to this issue under D262. No deployment.
Author
Owner

Step 17f04abd pushed: VM-only theme attribution controls; no production behavior change. Tracer check PASS; VM diagnostics 3/3 complete, acceptance HOLD. VM208 Debian13, 4vCPU, WebKit26.5, Bun1.4.2/Playwright1.61.1, 300ms RTT±30ms, unique port4432, pre-load0.05/0.20/0.34.

Variant Frames p50 ms p99 ms Gaps >16.7ms
native timeline 32 289 521 32
untraced control 32 289 488 32
detached-body candidate 32 268 459 32

Inspector-free control still stalls: instrumentation does not explain WebKit failure. Off-document candidate preserves all19 body rectangles but reduces document nodes3068→1102 and still misses badly; rejected for production. WebKit longtask observation unsupported: task count unknown. No budget/assertion or auth/visual change. Native capture/update work remains the next profiling target. Latest original three-spec interleaved3 comparison is running on48dc925d; exact-head native fast gate is running.

Sanitized frame histograms (complete measured gaps and native capture phases; no network payload):

[{"switches":12,"frames":32,"frame_p50_ms":289,"frame_p99_ms":521,"histogram":{"under8":0,"under16_7":0,"under33_4":0,"over33_4":32},"frames_over16_7":32,"long_task_supported":false,"long_tasks":[],"gaps":[76,78,83,85,85,86,89,106,107,270,278,282,284,286,289,289,291,293,293,314,319,366,375,395,397,405,410,421,422,423,430,521],"idle_gaps":[16,16,16,17,16,16,27,5,16,17,17,15,17,16,16,16,17,15,17,16,16,16,16,16,16,17,16,16,16,16],"captures":[{"update_start_ms":269,"update_cost_ms":114,"update_ms":445,"ready_ms":445,"finished_ms":855},{"update_start_ms":221,"update_cost_ms":80,"update_ms":359,"ready_ms":359,"finished_ms":689},{"update_start_ms":54,"update_cost_ms":79,"update_ms":205,"ready_ms":205,"finished_ms":541},{"update_start_ms":5,"update_cost_ms":179,"update_ms":245,"ready_ms":245,"finished_ms":588},{"update_start_ms":5,"update_cost_ms":146,"update_ms":214,"ready_ms":214,"finished_ms":566},{"update_start_ms":4,"update_cost_ms":169,"update_ms":251,"ready_ms":251,"finished_ms":556},{"update_start_ms":4,"update_cost_ms":147,"update_ms":222,"ready_ms":222,"finished_ms":540},{"update_start_ms":5,"update_cost_ms":206,"update_ms":283,"ready_ms":283,"finished_ms":612},{"update_start_ms":4,"update_cost_ms":146,"update_ms":209,"ready_ms":209,"finished_ms":573},{"update_start_ms":4,"update_cost_ms":156,"update_ms":228,"ready_ms":228,"finished_ms":619},{"update_start_ms":5,"update_cost_ms":161,"update_ms":236,"ready_ms":236,"finished_ms":573},{"update_start_ms":5,"update_cost_ms":160,"update_ms":224,"ready_ms":224,"finished_ms":560}],"hidden":false},{"switches":12,"frames":32,"frame_p50_ms":289,"frame_p99_ms":488,"histogram":{"under8":0,"under16_7":0,"under33_4":0,"over33_4":32},"frames_over16_7":32,"long_task_supported":false,"long_tasks":[],"gaps":[75,77,79,80,82,83,88,98,101,255,269,275,277,281,283,289,290,294,301,302,312,375,378,386,400,401,410,413,422,426,464,488],"idle_gaps":[16,16,17,16,16,16,16,16,16,16,16,18,15,16,16,16,16,16,17,16,16,16,17,16,16,16,16,16,16,16],"captures":[{"update_start_ms":228,"update_cost_ms":84,"update_ms":372,"ready_ms":372,"finished_ms":764},{"update_start_ms":206,"update_cost_ms":76,"update_ms":340,"ready_ms":340,"finished_ms":700},{"update_start_ms":58,"update_cost_ms":80,"update_ms":195,"ready_ms":195,"finished_ms":545},{"update_start_ms":7,"update_cost_ms":165,"update_ms":234,"ready_ms":234,"finished_ms":569},{"update_start_ms":5,"update_cost_ms":143,"update_ms":207,"ready_ms":207,"finished_ms":532},{"update_start_ms":5,"update_cost_ms":162,"update_ms":225,"ready_ms":225,"finished_ms":595},{"update_start_ms":4,"update_cost_ms":177,"update_ms":245,"ready_ms":245,"finished_ms":606},{"update_start_ms":6,"update_cost_ms":145,"update_ms":213,"ready_ms":213,"finished_ms":541},{"update_start_ms":4,"update_cost_ms":148,"update_ms":209,"ready_ms":209,"finished_ms":532},{"update_start_ms":5,"update_cost_ms":153,"update_ms":222,"ready_ms":222,"finished_ms":553},{"update_start_ms":4,"update_cost_ms":188,"update_ms":253,"ready_ms":253,"finished_ms":568},{"update_start_ms":4,"update_cost_ms":147,"update_ms":210,"ready_ms":210,"finished_ms":559}],"hidden":false},{"switches":12,"frames":32,"frame_p50_ms":268,"frame_p99_ms":459,"histogram":{"under8":0,"under16_7":0,"under33_4":0,"over33_4":32},"frames_over16_7":32,"long_task_supported":false,"long_tasks":[],"gaps":[39,40,41,41,42,45,49,52,54,225,229,237,246,258,265,268,269,279,284,287,309,319,324,334,343,348,352,366,368,381,384,459],"idle_gaps":[13,16,16,17,24,8,16,18,16,16,16,16,16,16,17,16,16,16,16,16,17,16,16,16,17,15,17,16,16,16],"captures":[{"update_start_ms":222,"update_cost_ms":45,"update_ms":310,"ready_ms":310,"finished_ms":723},{"update_start_ms":195,"update_cost_ms":41,"update_ms":272,"ready_ms":272,"finished_ms":599},{"update_start_ms":36,"update_cost_ms":38,"update_ms":111,"ready_ms":111,"finished_ms":428},{"update_start_ms":5,"update_cost_ms":106,"update_ms":152,"ready_ms":152,"finished_ms":464},{"update_start_ms":5,"update_cost_ms":118,"update_ms":157,"ready_ms":157,"finished_ms":482},{"update_start_ms":3,"update_cost_ms":108,"update_ms":147,"ready_ms":147,"finished_ms":454},{"update_start_ms":4,"update_cost_ms":106,"update_ms":144,"ready_ms":144,"finished_ms":426},{"update_start_ms":4,"update_cost_ms":122,"update_ms":164,"ready_ms":164,"finished_ms":449},{"update_start_ms":4,"update_cost_ms":119,"update_ms":157,"ready_ms":157,"finished_ms":461},{"update_start_ms":4,"update_cost_ms":102,"update_ms":144,"ready_ms":144,"finished_ms":434},{"update_start_ms":6,"update_cost_ms":130,"update_ms":181,"ready_ms":181,"finished_ms":514},{"update_start_ms":4,"update_cost_ms":110,"update_ms":152,"ready_ms":152,"finished_ms":455}],"hidden":false}]
Step 17f04abd pushed: VM-only theme attribution controls; no production behavior change. Tracer check PASS; VM diagnostics 3/3 complete, acceptance HOLD. VM208 Debian13, 4vCPU, WebKit26.5, Bun1.4.2/Playwright1.61.1, 300ms RTT±30ms, unique port4432, pre-load0.05/0.20/0.34. |Variant|Frames|p50 ms|p99 ms|Gaps >16.7ms| |---|---:|---:|---:|---:| |native timeline|32|289|521|32| |untraced control|32|289|488|32| |detached-body candidate|32|268|459|32| Inspector-free control still stalls: instrumentation does not explain WebKit failure. Off-document candidate preserves all19 body rectangles but reduces document nodes3068→1102 and still misses badly; rejected for production. WebKit longtask observation unsupported: task count unknown. No budget/assertion or auth/visual change. Native capture/update work remains the next profiling target. Latest original three-spec interleaved3 comparison is running on48dc925d; exact-head native fast gate is running. Sanitized frame histograms (complete measured gaps and native capture phases; no network payload): ```json [{"switches":12,"frames":32,"frame_p50_ms":289,"frame_p99_ms":521,"histogram":{"under8":0,"under16_7":0,"under33_4":0,"over33_4":32},"frames_over16_7":32,"long_task_supported":false,"long_tasks":[],"gaps":[76,78,83,85,85,86,89,106,107,270,278,282,284,286,289,289,291,293,293,314,319,366,375,395,397,405,410,421,422,423,430,521],"idle_gaps":[16,16,16,17,16,16,27,5,16,17,17,15,17,16,16,16,17,15,17,16,16,16,16,16,16,17,16,16,16,16],"captures":[{"update_start_ms":269,"update_cost_ms":114,"update_ms":445,"ready_ms":445,"finished_ms":855},{"update_start_ms":221,"update_cost_ms":80,"update_ms":359,"ready_ms":359,"finished_ms":689},{"update_start_ms":54,"update_cost_ms":79,"update_ms":205,"ready_ms":205,"finished_ms":541},{"update_start_ms":5,"update_cost_ms":179,"update_ms":245,"ready_ms":245,"finished_ms":588},{"update_start_ms":5,"update_cost_ms":146,"update_ms":214,"ready_ms":214,"finished_ms":566},{"update_start_ms":4,"update_cost_ms":169,"update_ms":251,"ready_ms":251,"finished_ms":556},{"update_start_ms":4,"update_cost_ms":147,"update_ms":222,"ready_ms":222,"finished_ms":540},{"update_start_ms":5,"update_cost_ms":206,"update_ms":283,"ready_ms":283,"finished_ms":612},{"update_start_ms":4,"update_cost_ms":146,"update_ms":209,"ready_ms":209,"finished_ms":573},{"update_start_ms":4,"update_cost_ms":156,"update_ms":228,"ready_ms":228,"finished_ms":619},{"update_start_ms":5,"update_cost_ms":161,"update_ms":236,"ready_ms":236,"finished_ms":573},{"update_start_ms":5,"update_cost_ms":160,"update_ms":224,"ready_ms":224,"finished_ms":560}],"hidden":false},{"switches":12,"frames":32,"frame_p50_ms":289,"frame_p99_ms":488,"histogram":{"under8":0,"under16_7":0,"under33_4":0,"over33_4":32},"frames_over16_7":32,"long_task_supported":false,"long_tasks":[],"gaps":[75,77,79,80,82,83,88,98,101,255,269,275,277,281,283,289,290,294,301,302,312,375,378,386,400,401,410,413,422,426,464,488],"idle_gaps":[16,16,17,16,16,16,16,16,16,16,16,18,15,16,16,16,16,16,17,16,16,16,17,16,16,16,16,16,16,16],"captures":[{"update_start_ms":228,"update_cost_ms":84,"update_ms":372,"ready_ms":372,"finished_ms":764},{"update_start_ms":206,"update_cost_ms":76,"update_ms":340,"ready_ms":340,"finished_ms":700},{"update_start_ms":58,"update_cost_ms":80,"update_ms":195,"ready_ms":195,"finished_ms":545},{"update_start_ms":7,"update_cost_ms":165,"update_ms":234,"ready_ms":234,"finished_ms":569},{"update_start_ms":5,"update_cost_ms":143,"update_ms":207,"ready_ms":207,"finished_ms":532},{"update_start_ms":5,"update_cost_ms":162,"update_ms":225,"ready_ms":225,"finished_ms":595},{"update_start_ms":4,"update_cost_ms":177,"update_ms":245,"ready_ms":245,"finished_ms":606},{"update_start_ms":6,"update_cost_ms":145,"update_ms":213,"ready_ms":213,"finished_ms":541},{"update_start_ms":4,"update_cost_ms":148,"update_ms":209,"ready_ms":209,"finished_ms":532},{"update_start_ms":5,"update_cost_ms":153,"update_ms":222,"ready_ms":222,"finished_ms":553},{"update_start_ms":4,"update_cost_ms":188,"update_ms":253,"ready_ms":253,"finished_ms":568},{"update_start_ms":4,"update_cost_ms":147,"update_ms":210,"ready_ms":210,"finished_ms":559}],"hidden":false},{"switches":12,"frames":32,"frame_p50_ms":268,"frame_p99_ms":459,"histogram":{"under8":0,"under16_7":0,"under33_4":0,"over33_4":32},"frames_over16_7":32,"long_task_supported":false,"long_tasks":[],"gaps":[39,40,41,41,42,45,49,52,54,225,229,237,246,258,265,268,269,279,284,287,309,319,324,334,343,348,352,366,368,381,384,459],"idle_gaps":[13,16,16,17,24,8,16,18,16,16,16,16,16,16,17,16,16,16,16,16,17,16,16,16,17,15,17,16,16,16],"captures":[{"update_start_ms":222,"update_cost_ms":45,"update_ms":310,"ready_ms":310,"finished_ms":723},{"update_start_ms":195,"update_cost_ms":41,"update_ms":272,"ready_ms":272,"finished_ms":599},{"update_start_ms":36,"update_cost_ms":38,"update_ms":111,"ready_ms":111,"finished_ms":428},{"update_start_ms":5,"update_cost_ms":106,"update_ms":152,"ready_ms":152,"finished_ms":464},{"update_start_ms":5,"update_cost_ms":118,"update_ms":157,"ready_ms":157,"finished_ms":482},{"update_start_ms":3,"update_cost_ms":108,"update_ms":147,"ready_ms":147,"finished_ms":454},{"update_start_ms":4,"update_cost_ms":106,"update_ms":144,"ready_ms":144,"finished_ms":426},{"update_start_ms":4,"update_cost_ms":122,"update_ms":164,"ready_ms":164,"finished_ms":449},{"update_start_ms":4,"update_cost_ms":119,"update_ms":157,"ready_ms":157,"finished_ms":461},{"update_start_ms":4,"update_cost_ms":102,"update_ms":144,"ready_ms":144,"finished_ms":434},{"update_start_ms":6,"update_cost_ms":130,"update_ms":181,"ready_ms":181,"finished_ms":514},{"update_start_ms":4,"update_cost_ms":110,"update_ms":152,"ready_ms":152,"finished_ms":455}],"hidden":false}] ```
Author
Owner

Gate setup finding on17f04abd: daemon_gone_tests.rs:111 failed before its assertion with InvalidInput, path must be shorter than SUN_LEN. TMPDIR /home/kayg/.cache/codex-scratch/pf176 plus the 25-byte random fixture directory and sessions/32hex.sock exceeds108 bytes. Exact case passes with owned shorter TMPDIR /home/kayg/.cache/codex-scratch/p7 (short-path-test.log). No product/test/assertion change or #118 waiver; full gate will rerun with the short path. Tracer check/source199pass0fail/build/transfer pass: critical gzip298696/307200, Brotli248645/256000; deferred50912/51200 and44936/45056; largest on-demand15946/20480 and14179/18432 bytes. No performance claim from functional durations.

Gate setup finding on17f04abd: daemon_gone_tests.rs:111 failed before its assertion with InvalidInput, path must be shorter than SUN_LEN. TMPDIR /home/kayg/.cache/codex-scratch/pf176 plus the 25-byte random fixture directory and sessions/32hex.sock exceeds108 bytes. Exact case passes with owned shorter TMPDIR /home/kayg/.cache/codex-scratch/p7 (short-path-test.log). No product/test/assertion change or #118 waiver; full gate will rerun with the short path. Tracer check/source199pass0fail/build/transfer pass: critical gzip298696/307200, Brotli248645/256000; deferred50912/51200 and44936/45056; largest on-demand15946/20480 and14179/18432 bytes. No performance claim from functional durations.
Author
Owner

VM clipping candidate rejected: pinned WebKit26.5 reports CSS.supports(overflow-clip-margin,12px)=false, so the required 12px lock-shackle margin cannot be preserved by adding overflow:clip to the existing viewport. No clipping change shipped; candidate reverted. VM208 4vCPU, 300ms RTT±30ms, pre-load0.14/0.47/0.48, run20261013T061541Z-1598577385-4026965, original control completed; candidate failed its feature-support precondition before timing. Next measure an outer clip box with the existing viewport geometry retained; appearance checks required before any production change.

VM clipping candidate rejected: pinned WebKit26.5 reports CSS.supports(overflow-clip-margin,12px)=false, so the required 12px lock-shackle margin cannot be preserved by adding overflow:clip to the existing viewport. No clipping change shipped; candidate reverted. VM208 4vCPU, 300ms RTT±30ms, pre-load0.14/0.47/0.48, run20261013T061541Z-1598577385-4026965, original control completed; candidate failed its feature-support precondition before timing. Next measure an outer clip box with the existing viewport geometry retained; appearance checks required before any production change.
Author
Owner

Additional first-gate failure: static link used a stale cached build-script flag pointing to deleted perf-vm-browser/build.OeV0VO/repo/crates/infraternal/handoff-note.ld (build.rs:40 embeds CARGO_MANIFEST_DIR). Link failed before the size check. Refreshed only the existing build-script mtime to invalidate that cached output; no source/profile/linker/dependency changes. Re-running full scripts/verify fast with the short owned Unix-socket scratch path. Both original setup failures retained, no waiver.

Additional first-gate failure: static link used a stale cached build-script flag pointing to deleted perf-vm-browser/build.OeV0VO/repo/crates/infraternal/handoff-note.ld (build.rs:40 embeds CARGO_MANIFEST_DIR). Link failed before the size check. Refreshed only the existing build-script mtime to invalidate that cached output; no source/profile/linker/dependency changes. Re-running full scripts/verify fast with the short owned Unix-socket scratch path. Both original setup failures retained, no waiver.
Author
Owner

Outer clip-box VM candidate completed on2f83693b: exact viewport/all-window rectangles retained, control frame p50/p99=286/539ms, candidate245/478ms; every frame gap over16.7ms (32/32 and33/33). 4vCPU VM208, WebKit26.5, pre-load0.45/0.49/0.49, port4458, 300ms RTT±30ms. Geometry-only success is not visual equivalence or acceptance. Candidate reverted; no production clipping or lifecycle change. Existing clip-path preserves the12px lock-shackle allowance on engines lacking overflow-clip-margin. Inspector-free and detached-body controls also miss, so neither tracing nor offscreen body style work alone explains the capture cost. Native control maxima: RecalculateStyles92.798ms, Paint196.539ms; detached-body41.318ms/173.287ms (nested spans not summed as CPU). Continue holding strict theme acceptance, no budget/design waiver.

Outer clip-box VM candidate completed on2f83693b: exact viewport/all-window rectangles retained, control frame p50/p99=286/539ms, candidate245/478ms; every frame gap over16.7ms (32/32 and33/33). 4vCPU VM208, WebKit26.5, pre-load0.45/0.49/0.49, port4458, 300ms RTT±30ms. Geometry-only success is not visual equivalence or acceptance. Candidate reverted; no production clipping or lifecycle change. Existing clip-path preserves the12px lock-shackle allowance on engines lacking overflow-clip-margin. Inspector-free and detached-body controls also miss, so neither tracing nor offscreen body style work alone explains the capture cost. Native control maxima: RecalculateStyles92.798ms, Paint196.539ms; detached-body41.318ms/173.287ms (nested spans not summed as CPU). Continue holding strict theme acceptance, no budget/design waiver.
Author
Owner

Requested interleaved3 VM rebaseline complete: base1f77a449 vs head48dc925d (17f04abd differs only in the separately gated frame diagnostic). HEAD11/11,10/11,11/11; BASE5/8,6/8,5/8. Head2 pending-text "ok" failure is retained, not a missing/passing sample; base2 also fails a pending-text assertion. Terminal prediction cause remains under investigation. No budget/assertion changes. Setup/sign-in improvements include the already documented compressed-fixture fidelity correction, not solely a production-source speedup. Theme callback/long-task checks are NOT strict theme frame acceptance; native WebKit remains HOLD.

Perf VM browser A/B

Setup

  • BASE: 1f77a449ede540281319ba01d149a2f60d584f3b.
  • HEAD: 48dc925d0ba8197c3b83eb3e5884821d495cc077.
  • Specs: test/terminal-theme.spec.ts, test/terminal.spec.ts, test/dead-session.spec.ts.
  • Host: Debian GNU/Linux 13 (trixie), 4 vCPUs; each browser run records its pre/post load, kernel, Bun, Playwright, and browser versions.
  • Profile: 300 ms RTT with ±30 ms jitter; each invocation uses its own TRACER_TEST_PORT; tests use the locally built production bundle.
  • Playwright trace capture remains off per the test config; generated test-result files and explicit test attachments are retained.
  • Run order: base-1, head-1, base-2, head-2, base-3, head-3.

Runs

Run Revision Port Pre-run load (1/5/15 min) Playwright result Duration
BASE 1 1f77a449 4873 2.00 / 0.78 / 0.53 5 passed, 3 failed (exit 1) 326.5 s
HEAD 1 48dc925d 4874 0.52 / 0.53 / 0.50 11 passed, 0 failed (exit 0) 316.1 s
BASE 2 1f77a449 4875 1.31 / 0.69 / 0.56 6 passed, 2 failed (exit 1) 182.5 s
HEAD 2 48dc925d 4876 0.86 / 0.66 / 0.56 10 passed, 1 failed (exit 1) 236.5 s
BASE 3 1f77a449 4877 1.06 / 0.74 / 0.61 5 passed, 3 failed (exit 1) 207.8 s
HEAD 3 48dc925d 4878 0.90 / 0.70 / 0.62 11 passed, 0 failed (exit 0) 288.8 s

Per-test results

Test BASE 1 HEAD 1 BASE 2 HEAD 2 BASE 3 HEAD 3
dead-session.spec.ts: a dead session ends quietly: one attach, an ended state, and a new shell in the same window P — P — P —
dead-session.spec.ts: a retired session carries exit 7 through the same final ended path F P P P P P
dead-session.spec.ts: a retired session carries exit 0 through the same final ended path P P P P F P
dead-session.spec.ts: a drop between saved status and final Close resumes to the same ended answer P P P P P P
terminal-theme.spec.ts: every curated theme recolors the initial terminal and its existing ANSI text P P P P P P
terminal.spec.ts: first run, passkey login, terminal resume, and the latency probe F P F F F P
terminal.spec.ts: status failure, invalid setup token, and cancelled passkey have distinct guidance P P P P P P
terminal.spec.ts: access screens render within the local first-paint budget F P F P F P
dead-session.spec.ts: a dead session disappears and does not retry after the ended state — P — P — P
dead-session.spec.ts: the sidebar waits for the live-shim snapshot and never lists ended cached sessions — P — P — P
dead-session.spec.ts: a pushed ended-session snapshot removes its sidebar row and pill count within one second — P — P — P
dead-session.spec.ts: agent restart hides unverified cached rows and restores the fresh live snapshot — P — P — P

Failed test details

Run Test First error line
BASE 1 dead-session.spec.ts: a retired session carries exit 7 through the same final ended path Error: expect(received).toBe(expected) // Object.is equality (Received: 3)
BASE 1 terminal.spec.ts: first run, passkey login, terminal resume, and the latency probe Error: expect(received).toBeLessThanOrEqual(expected) (Received: 947.2)
BASE 1 terminal.spec.ts: access screens render within the local first-paint budget Error: expect(received).toBe(expected) // Object.is equality (Received: false)
BASE 2 terminal.spec.ts: first run, passkey login, terminal resume, and the latency probe Error: expect(received).toBe(expected) // Object.is equality (Received: "")
BASE 2 terminal.spec.ts: access screens render within the local first-paint budget Error: post: socket hang up
HEAD 2 terminal.spec.ts: first run, passkey login, terminal resume, and the latency probe Error: expect(received).toBe(expected) // Object.is equality (Received: "")
BASE 3 dead-session.spec.ts: a retired session carries exit 0 through the same final ended path Error: expect(received).toBe(expected) // Object.is equality (Received: 3)
BASE 3 terminal.spec.ts: first run, passkey login, terminal resume, and the latency probe Error: expect(received).toBe(expected) // Object.is equality (Received: false)
BASE 3 terminal.spec.ts: access screens render within the local first-paint budget Error: expect(received).toBe(expected) // Object.is equality (Received: false)

Timing checks

Measurement Budget / meaning BASE 1 HEAD 1 BASE 2 HEAD 2 BASE 3 HEAD 3
Theme callback JS + long tasks (excludes frame timeline) <16.67 ms; zero tasks >50 ms p50/p99 0.400/3.700 ms; long tasks >50 ms: 0 p50/p99 0.500/2.600 ms; long tasks >50 ms: 0 p50/p99 0.400/0.900 ms; long tasks >50 ms: 0 p50/p99 0.300/1.300 ms; long tasks >50 ms: 0 p50/p99 0.400/1.000 ms; long tasks >50 ms: 0 p50/p99 0.200/1.100 ms; long tasks >50 ms: 0
Returning sign-in to usable terminal p99 ≤ budget p50 3936.50 ms; p99 3994.00 ms; budget 5000 ms; PASS p50 4123.00 ms; p99 4236.70 ms; budget 5000 ms; PASS p50 3937.50 ms; p99 3994.90 ms; budget 5000 ms; PASS p50 4124.70 ms; p99 4133.80 ms; budget 5000 ms; PASS — p50 4124.60 ms; p99 4133.00 ms; budget 5000 ms; PASS
Terminal resume after drop p99 ≤ RTT × 2 + 300 ms p50 696.90 ms; p99 947.20 ms; budget 900 ms; FAIL p50 617.50 ms; p99 647.60 ms; budget 900 ms; PASS — — — p50 618.40 ms; p99 647.00 ms; budget 900 ms; PASS
Predicted glyph visibility p99 ≤ 17 ms p50 14.20 ms; p99 14.70 ms; budget 17 ms; PASS p50 9.60 ms; p99 15.70 ms; budget 17 ms; PASS — — — p50 9.30 ms; p99 15.50 ms; budget 17 ms; PASS
Predicted glyph visibility (renderer sample) p99 ≤ 17 ms p50 14.20 ms; p99 14.70 ms; budget 17 ms; PASS p50 9.60 ms; p99 15.70 ms; budget 17 ms; PASS — — — p50 9.30 ms; p99 15.50 ms; budget 17 ms; PASS
Setup screen painted upper bound p99 < 1000 ms p50 1344.00 ms; p99 2214.60 ms; budget 1000 ms; FAIL p50 722.70 ms; p99 750.20 ms; budget 1000 ms; PASS — p50 719.70 ms; p99 740.00 ms; budget 1000 ms; PASS p50 1341.50 ms; p99 2682.60 ms; budget 1000 ms; FAIL p50 710.40 ms; p99 754.10 ms; budget 1000 ms; PASS
Setup first-contentful-paint reported; 1000 ms reference p50 1279.30 ms; p99 2147.80 ms; budget 1000 ms; REPORT p50 660.90 ms; p99 688.80 ms; budget 1000 ms; REPORT — p50 660.10 ms; p99 692.70 ms; budget 1000 ms; REPORT p50 1279.20 ms; p99 2628.60 ms; budget 1000 ms; REPORT p50 654.50 ms; p99 693.60 ms; budget 1000 ms; REPORT
Sign-in screen painted upper bound p99 < 1000 ms p50 2085.60 ms; p99 2124.90 ms; budget 1000 ms; FAIL p50 701.80 ms; p99 720.30 ms; budget 1000 ms; PASS — p50 703.80 ms; p99 739.00 ms; budget 1000 ms; PASS p50 2073.30 ms; p99 2112.10 ms; budget 1000 ms; FAIL p50 706.60 ms; p99 742.70 ms; budget 1000 ms; PASS
Sign-in first-contentful-paint reported; 1000 ms reference p50 2055.80 ms; p99 2096.20 ms; budget 1000 ms; REPORT p50 651.90 ms; p99 685.60 ms; budget 1000 ms; REPORT — p50 655.70 ms; p99 680.70 ms; budget 1000 ms; REPORT p50 2042.10 ms; p99 2080.50 ms; budget 1000 ms; REPORT p50 648.70 ms; p99 676.30 ms; budget 1000 ms; REPORT

Conclusion

  • Theme long-task/switch check: this measured check passed on both revisions in this VM window.
  • Terminal resume after drop: observed only on the tested base.
  • Setup screen painted upper bound: observed only on the tested base.
  • Sign-in screen painted upper bound: observed only on the tested base.
  • A failure measured here is independent of shared build-host load. If a prior failure passes all three VM runs, that points to load sensitivity but does not prove the code is free of the issue.

Raw JSON reports, stderr, environment records, and generated test results are in runs/. No arbitrary browser traces were captured.

Requested interleaved3 VM rebaseline complete: base1f77a449 vs head48dc925d (17f04abd differs only in the separately gated frame diagnostic). HEAD11/11,10/11,11/11; BASE5/8,6/8,5/8. Head2 pending-text "ok" failure is retained, not a missing/passing sample; base2 also fails a pending-text assertion. Terminal prediction cause remains under investigation. No budget/assertion changes. Setup/sign-in improvements include the already documented compressed-fixture fidelity correction, not solely a production-source speedup. Theme callback/long-task checks are NOT strict theme frame acceptance; native WebKit remains HOLD. <!-- Role: records the perf-VM browser run setup, outcomes, and measurements. --> # Perf VM browser A/B ## Setup - BASE: `1f77a449ede540281319ba01d149a2f60d584f3b`. - HEAD: `48dc925d0ba8197c3b83eb3e5884821d495cc077`. - Specs: `test/terminal-theme.spec.ts, test/terminal.spec.ts, test/dead-session.spec.ts`. - Host: Debian GNU/Linux 13 (trixie), 4 vCPUs; each browser run records its pre/post load, kernel, Bun, Playwright, and browser versions. - Profile: 300 ms RTT with ±30 ms jitter; each invocation uses its own `TRACER_TEST_PORT`; tests use the locally built production bundle. - Playwright trace capture remains off per the test config; generated test-result files and explicit test attachments are retained. - Run order: base-1, head-1, base-2, head-2, base-3, head-3. ## Runs | Run | Revision | Port | Pre-run load (1/5/15 min) | Playwright result | Duration | | --- | --- | ---: | --- | --- | ---: | | BASE 1 | `1f77a449` | 4873 | 2.00 / 0.78 / 0.53 | 5 passed, 3 failed (exit 1) | 326.5 s | | HEAD 1 | `48dc925d` | 4874 | 0.52 / 0.53 / 0.50 | 11 passed, 0 failed (exit 0) | 316.1 s | | BASE 2 | `1f77a449` | 4875 | 1.31 / 0.69 / 0.56 | 6 passed, 2 failed (exit 1) | 182.5 s | | HEAD 2 | `48dc925d` | 4876 | 0.86 / 0.66 / 0.56 | 10 passed, 1 failed (exit 1) | 236.5 s | | BASE 3 | `1f77a449` | 4877 | 1.06 / 0.74 / 0.61 | 5 passed, 3 failed (exit 1) | 207.8 s | | HEAD 3 | `48dc925d` | 4878 | 0.90 / 0.70 / 0.62 | 11 passed, 0 failed (exit 0) | 288.8 s | ## Per-test results | Test | BASE 1 | HEAD 1 | BASE 2 | HEAD 2 | BASE 3 | HEAD 3 | | --- | --- | --- | --- | --- | --- | --- | | dead-session.spec.ts: a dead session ends quietly: one attach, an ended state, and a new shell in the same window | P | — | P | — | P | — | | dead-session.spec.ts: a retired session carries exit 7 through the same final ended path | F | P | P | P | P | P | | dead-session.spec.ts: a retired session carries exit 0 through the same final ended path | P | P | P | P | F | P | | dead-session.spec.ts: a drop between saved status and final Close resumes to the same ended answer | P | P | P | P | P | P | | terminal-theme.spec.ts: every curated theme recolors the initial terminal and its existing ANSI text | P | P | P | P | P | P | | terminal.spec.ts: first run, passkey login, terminal resume, and the latency probe | F | P | F | F | F | P | | terminal.spec.ts: status failure, invalid setup token, and cancelled passkey have distinct guidance | P | P | P | P | P | P | | terminal.spec.ts: access screens render within the local first-paint budget | F | P | F | P | F | P | | dead-session.spec.ts: a dead session disappears and does not retry after the ended state | — | P | — | P | — | P | | dead-session.spec.ts: the sidebar waits for the live-shim snapshot and never lists ended cached sessions | — | P | — | P | — | P | | dead-session.spec.ts: a pushed ended-session snapshot removes its sidebar row and pill count within one second | — | P | — | P | — | P | | dead-session.spec.ts: agent restart hides unverified cached rows and restores the fresh live snapshot | — | P | — | P | — | P | ## Failed test details | Run | Test | First error line | | --- | --- | --- | | BASE 1 | dead-session.spec.ts: a retired session carries exit 7 through the same final ended path | Error: expect(received).toBe(expected) // Object.is equality (Received: 3) | | BASE 1 | terminal.spec.ts: first run, passkey login, terminal resume, and the latency probe | Error: expect(received).toBeLessThanOrEqual(expected) (Received: 947.2) | | BASE 1 | terminal.spec.ts: access screens render within the local first-paint budget | Error: expect(received).toBe(expected) // Object.is equality (Received: false) | | BASE 2 | terminal.spec.ts: first run, passkey login, terminal resume, and the latency probe | Error: expect(received).toBe(expected) // Object.is equality (Received: "") | | BASE 2 | terminal.spec.ts: access screens render within the local first-paint budget | Error: post: socket hang up | | HEAD 2 | terminal.spec.ts: first run, passkey login, terminal resume, and the latency probe | Error: expect(received).toBe(expected) // Object.is equality (Received: "") | | BASE 3 | dead-session.spec.ts: a retired session carries exit 0 through the same final ended path | Error: expect(received).toBe(expected) // Object.is equality (Received: 3) | | BASE 3 | terminal.spec.ts: first run, passkey login, terminal resume, and the latency probe | Error: expect(received).toBe(expected) // Object.is equality (Received: false) | | BASE 3 | terminal.spec.ts: access screens render within the local first-paint budget | Error: expect(received).toBe(expected) // Object.is equality (Received: false) | ## Timing checks | Measurement | Budget / meaning | BASE 1 | HEAD 1 | BASE 2 | HEAD 2 | BASE 3 | HEAD 3 | | --- | --- | --- | --- | --- | --- | --- | --- | | Theme callback JS + long tasks (excludes frame timeline) | <16.67 ms; zero tasks >50 ms | p50/p99 0.400/3.700 ms; long tasks >50 ms: 0 | p50/p99 0.500/2.600 ms; long tasks >50 ms: 0 | p50/p99 0.400/0.900 ms; long tasks >50 ms: 0 | p50/p99 0.300/1.300 ms; long tasks >50 ms: 0 | p50/p99 0.400/1.000 ms; long tasks >50 ms: 0 | p50/p99 0.200/1.100 ms; long tasks >50 ms: 0 | | Returning sign-in to usable terminal | p99 ≤ budget | p50 3936.50 ms; p99 3994.00 ms; budget 5000 ms; PASS | p50 4123.00 ms; p99 4236.70 ms; budget 5000 ms; PASS | p50 3937.50 ms; p99 3994.90 ms; budget 5000 ms; PASS | p50 4124.70 ms; p99 4133.80 ms; budget 5000 ms; PASS | — | p50 4124.60 ms; p99 4133.00 ms; budget 5000 ms; PASS | | Terminal resume after drop | p99 ≤ RTT × 2 + 300 ms | p50 696.90 ms; p99 947.20 ms; budget 900 ms; FAIL | p50 617.50 ms; p99 647.60 ms; budget 900 ms; PASS | — | — | — | p50 618.40 ms; p99 647.00 ms; budget 900 ms; PASS | | Predicted glyph visibility | p99 ≤ 17 ms | p50 14.20 ms; p99 14.70 ms; budget 17 ms; PASS | p50 9.60 ms; p99 15.70 ms; budget 17 ms; PASS | — | — | — | p50 9.30 ms; p99 15.50 ms; budget 17 ms; PASS | | Predicted glyph visibility (renderer sample) | p99 ≤ 17 ms | p50 14.20 ms; p99 14.70 ms; budget 17 ms; PASS | p50 9.60 ms; p99 15.70 ms; budget 17 ms; PASS | — | — | — | p50 9.30 ms; p99 15.50 ms; budget 17 ms; PASS | | Setup screen painted upper bound | p99 < 1000 ms | p50 1344.00 ms; p99 2214.60 ms; budget 1000 ms; FAIL | p50 722.70 ms; p99 750.20 ms; budget 1000 ms; PASS | — | p50 719.70 ms; p99 740.00 ms; budget 1000 ms; PASS | p50 1341.50 ms; p99 2682.60 ms; budget 1000 ms; FAIL | p50 710.40 ms; p99 754.10 ms; budget 1000 ms; PASS | | Setup first-contentful-paint | reported; 1000 ms reference | p50 1279.30 ms; p99 2147.80 ms; budget 1000 ms; REPORT | p50 660.90 ms; p99 688.80 ms; budget 1000 ms; REPORT | — | p50 660.10 ms; p99 692.70 ms; budget 1000 ms; REPORT | p50 1279.20 ms; p99 2628.60 ms; budget 1000 ms; REPORT | p50 654.50 ms; p99 693.60 ms; budget 1000 ms; REPORT | | Sign-in screen painted upper bound | p99 < 1000 ms | p50 2085.60 ms; p99 2124.90 ms; budget 1000 ms; FAIL | p50 701.80 ms; p99 720.30 ms; budget 1000 ms; PASS | — | p50 703.80 ms; p99 739.00 ms; budget 1000 ms; PASS | p50 2073.30 ms; p99 2112.10 ms; budget 1000 ms; FAIL | p50 706.60 ms; p99 742.70 ms; budget 1000 ms; PASS | | Sign-in first-contentful-paint | reported; 1000 ms reference | p50 2055.80 ms; p99 2096.20 ms; budget 1000 ms; REPORT | p50 651.90 ms; p99 685.60 ms; budget 1000 ms; REPORT | — | p50 655.70 ms; p99 680.70 ms; budget 1000 ms; REPORT | p50 2042.10 ms; p99 2080.50 ms; budget 1000 ms; REPORT | p50 648.70 ms; p99 676.30 ms; budget 1000 ms; REPORT | ## Conclusion - Theme long-task/switch check: this measured check passed on both revisions in this VM window. - Terminal resume after drop: observed only on the tested base. - Setup screen painted upper bound: observed only on the tested base. - Sign-in screen painted upper bound: observed only on the tested base. - A failure measured here is independent of shared build-host load. If a prior failure passes all three VM runs, that points to load sensitivity but does not prove the code is free of the issue. Raw JSON reports, stderr, environment records, and generated test results are in `runs/`. No arbitrary browser traces were captured.
Author
Owner

Deterministic prediction cause reproduced before any fix: browser production PredictiveEcho class, virtual clock only. Cached RTT330ms followed by a completed split paste echo at270/280ms (both inside the ±30ms link profile) leaves enabled=false after the echo; regression expected true, received false. predict-fallback-proof.spec.ts:42, prediction-proof-red.log. hostWritten only releases waitingForOutput when arrival time>=echoExpectedAt; an earlier complete echo is forgotten and no later output can release the wait before the next key falls back. Proposed bounded repair: match the entire outstanding printable fallback echo across chunks before releasing early, keep time-based fallback for unproved/editing output; never simply lower the horizon or use a timer to invent proof. The actual long interaction failure is still being instrumented; no assertion, RTT/budget or auth change. Initial diagnostic grep anchored at title start selected no cases (invalid run, not evidence); corrected full-case repeat3 is queued.

Deterministic prediction cause reproduced before any fix: browser production PredictiveEcho class, virtual clock only. Cached RTT330ms followed by a completed split paste echo at270/280ms (both inside the ±30ms link profile) leaves enabled=false after the echo; regression expected true, received false. predict-fallback-proof.spec.ts:42, prediction-proof-red.log. hostWritten only releases waitingForOutput when arrival time>=echoExpectedAt; an earlier complete echo is forgotten and no later output can release the wait before the next key falls back. Proposed bounded repair: match the entire outstanding printable fallback echo across chunks before releasing early, keep time-based fallback for unproved/editing output; never simply lower the horizon or use a timer to invent proof. The actual long interaction failure is still being instrumented; no assertion, RTT/budget or auth change. Initial diagnostic grep anchored at title start selected no cases (invalid run, not evidence); corrected full-case repeat3 is queued.
Author
Owner

Shadow review of prod-perf-fix at 17f04abd

Diff reviewed against merge-base 6afc910c with origin/dev. I focused on connection and resume, the sessions Retry fix, setup paint and the transfer budgets. The failing tests are on branch shadow-prod-perf-fix, head 815f6bc7. Both commits are red on 17f04abd. I ran the tests with bun test only. I took no timings and changed nothing on prod-perf-fix.

Findings, most serious first

P1-1. The D259 "typable within one RTT + 50 ms" result comes from a harness that leaves out connection setup. (No test: proving it needs a timing measurement on the VM.)

  • scripts/latency_proxy.py accepts the client's TCP connection on loopback, so the TCP handshake is never delayed. The mock server also has no TLS.
  • resume-readiness.spec.ts drops the connection with forceDrop(). This branch changed forceDrop() to retire the socket locally and reconnect with zero delay (df3e2747). That path only runs in the probe.
  • A real reconnect in production first needs a TCP handshake (1 RTT) and a TLS 1.3 handshake (1 RTT), then the upgrade (1 RTT). The initialized upgrade removes one RTT after that. The measured 325/341 ms p50/p99 at 300 ms RTT therefore puts production at roughly 3 RTT, not at RTT + 50 ms.
  • The server sends no pings and has no idle timeout (websocket.rs). When a phone changes network, the old connection stays half-open with active=1. wait_for_closing_connection waits 50 ms and then refuses the resume. The client keeps retrying until its 120 s grace runs out, then opens a fresh connection, and restartCursors() clears any input that was never acknowledged.
  • Please don't report D259 (2) as met until a measurement on the VM includes TCP and TLS setup through the real TLS fixture and covers a drop that was not closed cleanly.

P1-2. The canvas connection indicator still shows live before the replay fence paints. On the initialized upgrade it shows live before Welcome. Test: apps/tracer/test/terminal-live-indicator.test.ts.

  • 3c25017c/bd499195 gate only the core screen (main.ts onReady).
  • The canvas drives core.setConnection from MuxConnection.streamAttached (product.ts:66, connection.ts:249). tryAttach() still calls conn.streamAttached(true) at once.
  • With the new path, tryAttach(true) runs inside onopen, before the server has validated the Resume. If the resume is refused, the canvas shows live and then drops back.
  • Mesh onReady (onTerminalAttached) fires at that same early point.
  • Red for both the initialized and the binary resume path.

P1-3. This branch conflicts with #199 (stuck-after-restart). I checked with git merge-tree: there are textual conflicts in apps/tracer/src/connection.ts, apps/tracer/src/terminal.ts and apps/tracer/src/canvas/sessions/live.ts.

  • The grace-start change is identical on both branches (a9efb6e4 here, 1e9d8a6b there), so that part does not regress.
  • The rest overlaps in ways the merge has to resolve:
    • Two fast-retry schemes. This branch has fastResume: delay 0, then one rAF, only when the server advertised capability 2. #199 has fastRecoveryUntil: 5–10 ms, only after a confirmed terminal, and it backs off after a greeted refusal. #199's connection-restart.test.ts expects a delay of at least 5 ms.
    • Two readiness flags. This branch has caughtUp/onReady and leaves streamAttached early. #199 has attachmentConfirmed and moves streamAttached, startPings and onAttached behind the fence.
  • If this branch's terminal.ts wins the conflict, #199's canvas-dot fix is lost (see P1-2).
  • Suggested order: merge #199 first, rebase this branch onto it, keep one readiness flag and make one retry policy that covers both cases. Both shadow tests here and #199's test should pass afterwards.

P1-4. D262: the branch puts evidence back into the repo.

  • It adds 463 files under evidence/ (about 26k lines plus PNGs and traces).
  • scripts/perf-vm writes its results to $REPO_ROOT/evidence/perf-vm-browser, and the docs/PROCESS.md hunk documents that path.
  • D262 (owner, 2026-10-13) removes evidence/ and rewrites history to drop it. Before merging, these files need to come off the branch, and the runner should write to a scratch directory outside the repo.

P2-5. Two sockets after openStream() while a reconnect is pending. Test: apps/tracer/src/connection-reconnect-race.test.ts.

  • openStream() calls connect() whenever this.socket is unset. It does not check retryTimer or the new retryFrame.
  • The scheduled reconnect then runs connect() again. The replaced socket's handlers ignore its events, so it stays open and holds the server row active=1. The next resume is refused.
  • This existed before on the backoff path. The branch makes it easier to hit: forceDrop now retires the socket at once, and the rAF wait adds another window.
  • Red for both the timer path and the rAF path.

P2-6. The wire and auth change was made inside the job.

  • The resume token now travels in Sec-WebSocket-Protocol (contracts/wire.md, upgrade_resume.rs).
  • The proposal is on this issue, but DECISIONS.md records no owner decision. This is the transport and auth path, which gets the strictest review.
  • Checked: the parser runs after the Origin and cookie checks, nothing the server writes logs the header, and the bounds match between client and server (32 streams, 8 MiB credit). The fuzz target exists.
  • Remaining risk: a bearer resume capability now sits in an HTTP header. Any proxy that terminates TLS and logs headers will see it, and it also appears in DevTools/HAR. The owner should approve this before merge.

P3-7. The rAF wait in scheduleReconnect has no fallback timer. If the page goes hidden, or the browser throttles rAF, between scheduling and the frame, the reconnect waits until the page is visible again. If that takes longer than the 120 s grace, the result is the same fresh connection and lost input as in P1-1.

What looked correct

  • Sessions Retry: the cause is plausible and the fix looks correct. 314e34f1 (if (manager === this) manager = undefined) stops a late close of an older card from cutting the current card off inventory updates. f02ab474 resolves the window again after the chunk loads.
  • D188: no limit was raised. The inline startup JS is now counted against the strict critical budget (9cf26b07).
  • Inlined access CSS: no caching is lost. Those stylesheets were already served no-cache, and inlining removes a revalidation round trip.
  • Setup paint: backed by numbers from the VM at 300 ms RTT: head p99 about 740–754 ms against base 2214/2682 ms.
  • Early /auth/session read: it is discarded after setup or a failed status check (checkStatus finally block), so a stale cookie snapshot is not reused.

Not verified

  • Reconnect timing over real TLS, and an unclean drop such as a network switch (needs the VM).
  • Real devices and iPhone.
  • I wrote no Rust tests and ran no Rust tests.
  • How the code behaves after a resolved merge with #199.
## Shadow review of `prod-perf-fix` at 17f04abd Diff reviewed against merge-base 6afc910c with `origin/dev`. I focused on connection and resume, the sessions Retry fix, setup paint and the transfer budgets. The failing tests are on branch `shadow-prod-perf-fix`, head **815f6bc7**. Both commits are red on 17f04abd. I ran the tests with `bun test` only. I took no timings and changed nothing on `prod-perf-fix`. ### Findings, most serious first **P1-1. The D259 "typable within one RTT + 50 ms" result comes from a harness that leaves out connection setup.** (No test: proving it needs a timing measurement on the VM.) - `scripts/latency_proxy.py` accepts the client's TCP connection on loopback, so the TCP handshake is never delayed. The mock server also has no TLS. - `resume-readiness.spec.ts` drops the connection with `forceDrop()`. This branch changed `forceDrop()` to retire the socket locally and reconnect with zero delay (df3e2747). That path only runs in the probe. - A real reconnect in production first needs a TCP handshake (1 RTT) and a TLS 1.3 handshake (1 RTT), then the upgrade (1 RTT). The initialized upgrade removes one RTT after that. The measured 325/341 ms p50/p99 at 300 ms RTT therefore puts production at roughly 3 RTT, not at RTT + 50 ms. - The server sends no pings and has no idle timeout (websocket.rs). When a phone changes network, the old connection stays half-open with `active=1`. `wait_for_closing_connection` waits 50 ms and then refuses the resume. The client keeps retrying until its 120 s grace runs out, then opens a fresh connection, and `restartCursors()` clears any input that was never acknowledged. - Please don't report D259 (2) as met until a measurement on the VM includes TCP and TLS setup through the real TLS fixture and covers a drop that was not closed cleanly. **P1-2. The canvas connection indicator still shows live before the replay fence paints. On the initialized upgrade it shows live before Welcome.** Test: `apps/tracer/test/terminal-live-indicator.test.ts`. - 3c25017c/bd499195 gate only the core screen (`main.ts` `onReady`). - The canvas drives `core.setConnection` from `MuxConnection.streamAttached` (product.ts:66, connection.ts:249). `tryAttach()` still calls `conn.streamAttached(true)` at once. - With the new path, `tryAttach(true)` runs inside `onopen`, before the server has validated the Resume. If the resume is refused, the canvas shows live and then drops back. - Mesh `onReady` (`onTerminalAttached`) fires at that same early point. - Red for both the initialized and the binary resume path. **P1-3. This branch conflicts with #199 (`stuck-after-restart`).** I checked with `git merge-tree`: there are textual conflicts in `apps/tracer/src/connection.ts`, `apps/tracer/src/terminal.ts` and `apps/tracer/src/canvas/sessions/live.ts`. - The grace-start change is identical on both branches (a9efb6e4 here, 1e9d8a6b there), so that part does not regress. - The rest overlaps in ways the merge has to resolve: - **Two fast-retry schemes.** This branch has `fastResume`: delay 0, then one rAF, only when the server advertised capability 2. #199 has `fastRecoveryUntil`: 5–10 ms, only after a confirmed terminal, and it backs off after a greeted refusal. #199's `connection-restart.test.ts` expects a delay of at least 5 ms. - **Two readiness flags.** This branch has `caughtUp`/`onReady` and leaves `streamAttached` early. #199 has `attachmentConfirmed` and moves `streamAttached`, `startPings` and `onAttached` behind the fence. - If this branch's `terminal.ts` wins the conflict, #199's canvas-dot fix is lost (see P1-2). - Suggested order: merge #199 first, rebase this branch onto it, keep one readiness flag and make one retry policy that covers both cases. Both shadow tests here and #199's test should pass afterwards. **P1-4. D262: the branch puts evidence back into the repo.** - It adds 463 files under `evidence/` (about 26k lines plus PNGs and traces). - `scripts/perf-vm` writes its results to `$REPO_ROOT/evidence/perf-vm-browser`, and the `docs/PROCESS.md` hunk documents that path. - D262 (owner, 2026-10-13) removes `evidence/` and rewrites history to drop it. Before merging, these files need to come off the branch, and the runner should write to a scratch directory outside the repo. **P2-5. Two sockets after `openStream()` while a reconnect is pending.** Test: `apps/tracer/src/connection-reconnect-race.test.ts`. - `openStream()` calls `connect()` whenever `this.socket` is unset. It does not check `retryTimer` or the new `retryFrame`. - The scheduled reconnect then runs `connect()` again. The replaced socket's handlers ignore its events, so it stays open and holds the server row `active=1`. The next resume is refused. - This existed before on the backoff path. The branch makes it easier to hit: `forceDrop` now retires the socket at once, and the rAF wait adds another window. - Red for both the timer path and the rAF path. **P2-6. The wire and auth change was made inside the job.** - The resume token now travels in `Sec-WebSocket-Protocol` (contracts/wire.md, `upgrade_resume.rs`). - The proposal is on this issue, but DECISIONS.md records no owner decision. This is the transport and auth path, which gets the strictest review. - Checked: the parser runs after the Origin and cookie checks, nothing the server writes logs the header, and the bounds match between client and server (32 streams, 8 MiB credit). The fuzz target exists. - Remaining risk: a bearer resume capability now sits in an HTTP header. Any proxy that terminates TLS and logs headers will see it, and it also appears in DevTools/HAR. The owner should approve this before merge. **P3-7. The rAF wait in `scheduleReconnect` has no fallback timer.** If the page goes hidden, or the browser throttles rAF, between scheduling and the frame, the reconnect waits until the page is visible again. If that takes longer than the 120 s grace, the result is the same fresh connection and lost input as in P1-1. ### What looked correct - **Sessions Retry:** the cause is plausible and the fix looks correct. 314e34f1 (`if (manager === this) manager = undefined`) stops a late close of an older card from cutting the current card off inventory updates. f02ab474 resolves the window again after the chunk loads. - **D188:** no limit was raised. The inline startup JS is now counted against the strict critical budget (9cf26b07). - **Inlined access CSS:** no caching is lost. Those stylesheets were already served `no-cache`, and inlining removes a revalidation round trip. - **Setup paint:** backed by numbers from the VM at 300 ms RTT: head p99 about 740–754 ms against base 2214/2682 ms. - **Early `/auth/session` read:** it is discarded after setup or a failed status check (`checkStatus` finally block), so a stale cookie snapshot is not reused. ### Not verified - Reconnect timing over real TLS, and an unclean drop such as a network switch (needs the VM). - Real devices and iPhone. - I wrote no Rust tests and ran no Rust tests. - How the code behaves after a resolved merge with #199.
Author
Owner

Completed/pushed module f2d91608: bounded complete fallback-echo evidence avoids losing an echo that arrived before the prior RTT estimate. No shortened horizon/timer-based release. Printable evidence includes older pending bytes and all newer fallbacks, <=512 bytes; settled horizontal controls require exact echo AND real parser cursor/row/dimensions, not an arbitrary output packet. Layout/snapshot/disposal clear it; editing, partial, mismatched, oversized and overtaken replies keep waiting. Deterministic paste and settled-cursor cases red before;12 functional guard cases green. Tracer check/source199pass0fail/build/transfer PASS: critical gzip299076/307200, Brotli249155/256000; deferred50913/51200 and44915/45056. Prior plaintext-only VM variant2d955d4a full original terminal repeat3 passes (predicted glyph last p99=14.3ms); final cursor-proof interleaved3 comparison against17f04abd queued. No auth, wire, design or budget changes. New proof test and safe failure-state diagnostic are separate commits next.

Completed/pushed module f2d91608: bounded complete fallback-echo evidence avoids losing an echo that arrived before the prior RTT estimate. No shortened horizon/timer-based release. Printable evidence includes older pending bytes and all newer fallbacks, <=512 bytes; settled horizontal controls require exact echo AND real parser cursor/row/dimensions, not an arbitrary output packet. Layout/snapshot/disposal clear it; editing, partial, mismatched, oversized and overtaken replies keep waiting. Deterministic paste and settled-cursor cases red before;12 functional guard cases green. Tracer check/source199pass0fail/build/transfer PASS: critical gzip299076/307200, Brotli249155/256000; deferred50913/51200 and44915/45056. Prior plaintext-only VM variant2d955d4a full original terminal repeat3 passes (predicted glyph last p99=14.3ms); final cursor-proof interleaved3 comparison against17f04abd queued. No auth, wire, design or budget changes. New proof test and safe failure-state diagnostic are separate commits next.
Author
Owner

Final gate on28bbc0b6 will run scripts/verify fast unchanged. Its one RTT self-test row must be on VM208 under D256, so a job-local Python dispatch wrapper routes ONLY the exact latency_proxy.py self-test --samples3 invocation to the copied identical script on VM208/shared lock. Every other Python call executes the original interpreter locally. No row/assertion/threshold is skipped or edited. Original source SHA is recorded; native functional transcript times are not performance evidence. This does not change the repository gate script or any other job.

Final gate on28bbc0b6 will run scripts/verify fast unchanged. Its one RTT self-test row must be on VM208 under D256, so a job-local Python dispatch wrapper routes ONLY the exact latency_proxy.py self-test --samples3 invocation to the copied identical script on VM208/shared lock. Every other Python call executes the original interpreter locally. No row/assertion/threshold is skipped or edited. Original source SHA is recorded; native functional transcript times are not performance evidence. This does not change the repository gate script or any other job.
Author
Owner

Owner decision D265 (dev 51a5a03a): resume token in the first message after the WebSocket opens (never a header/URL); one RTT + 50 ms when the link is reused/resumed with server pings; three RTT + 50 ms after a real network change; QUIC/WebTransport resumption researched next (queued research-quic-resume). The prod-perf-fix continuation carries this.

Owner decision **D265** (dev 51a5a03a): resume token in the first message after the WebSocket opens (never a header/URL); one RTT + 50 ms when the link is reused/resumed with server pings; three RTT + 50 ms after a real network change; QUIC/WebTransport resumption researched next (queued `research-quic-resume`). The prod-perf-fix continuation carries this.
Author
Owner

Completed steps d126e2f8 (12 proof guards) and28bbc0b6 (bounded pre-key/failure diagnostics), both pushed separately after tracer check/functional gates. Final interleaved3 comparison of production code17f04abd→f2d91608 completes all18 cases: both revisions pass9/9 in this window. Earlier original HEAD1/3 and diagnostic2/3 pending-text failures remain recorded; this passing comparison does not erase them or alone prove a frequency change. Deterministic red-before/green-after cases establish the repaired time-only wait defect; complete echo/cursor guards remain mandatory. Final branch28bbc0b6 has identical production code to measured f2d91608. Fresh exact-head D259 repeats and full fast gate are running. Strict theme acceptance remains HOLD; no design/budget/auth waiver.

Perf VM browser A/B

Setup

  • BASE: 17f04abd04206c1df568589a27ad786809f7fc3a.
  • HEAD: f2d91608353df83835105e47abb4a7e4101f8f82.
  • Specs: test/terminal.spec.ts.
  • Host: Debian GNU/Linux 13 (trixie), 4 vCPUs; each browser run records its pre/post load, kernel, Bun, Playwright, and browser versions.
  • Profile: 300 ms RTT with ±30 ms jitter; each invocation uses its own TRACER_TEST_PORT; tests use the locally built production bundle.
  • Playwright trace capture remains off per the test config; generated test-result files and explicit test attachments are retained.
  • Run order: base-1, head-1, base-2, head-2, base-3, head-3.

Runs

Run Revision Port Pre-run load (1/5/15 min) Playwright result Duration
BASE 1 17f04abd 4431 0.01 / 0.20 / 0.35 3 passed, 0 failed (exit 0) 181.1 s
HEAD 1 f2d91608 4432 0.26 / 0.25 / 0.34 3 passed, 0 failed (exit 0) 181.2 s
BASE 2 17f04abd 4433 0.42 / 0.31 / 0.35 3 passed, 0 failed (exit 0) 181.4 s
HEAD 2 f2d91608 4434 0.47 / 0.40 / 0.37 3 passed, 0 failed (exit 0) 181.4 s
BASE 3 17f04abd 4435 0.14 / 0.28 / 0.33 3 passed, 0 failed (exit 0) 181.3 s
HEAD 3 f2d91608 4436 0.50 / 0.32 / 0.33 3 passed, 0 failed (exit 0) 182.3 s

Per-test results

Test BASE 1 HEAD 1 BASE 2 HEAD 2 BASE 3 HEAD 3
terminal.spec.ts: first run, passkey login, terminal resume, and the latency probe P P P P P P
terminal.spec.ts: status failure, invalid setup token, and cancelled passkey have distinct guidance P P P P P P
terminal.spec.ts: access screens render within the local first-paint budget P P P P P P

Timing checks

Measurement Budget / meaning BASE 1 HEAD 1 BASE 2 HEAD 2 BASE 3 HEAD 3
Returning sign-in to usable terminal p99 ≤ budget p50 4126.00 ms; p99 4136.70 ms; budget 5000 ms; PASS p50 4122.50 ms; p99 4131.80 ms; budget 5000 ms; PASS p50 4128.10 ms; p99 4140.40 ms; budget 5000 ms; PASS p50 4123.00 ms; p99 4136.90 ms; budget 5000 ms; PASS p50 4118.10 ms; p99 4133.00 ms; budget 5000 ms; PASS p50 4127.30 ms; p99 4236.40 ms; budget 5000 ms; PASS
Terminal resume after drop p99 ≤ RTT × 2 + 300 ms p50 620.70 ms; p99 650.00 ms; budget 900 ms; PASS p50 620.90 ms; p99 656.60 ms; budget 900 ms; PASS p50 622.00 ms; p99 657.10 ms; budget 900 ms; PASS p50 624.50 ms; p99 645.70 ms; budget 900 ms; PASS p50 612.50 ms; p99 651.40 ms; budget 900 ms; PASS p50 623.90 ms; p99 659.30 ms; budget 900 ms; PASS
Predicted glyph visibility p99 ≤ 17 ms p50 10.40 ms; p99 15.30 ms; budget 17 ms; PASS p50 8.00 ms; p99 13.00 ms; budget 17 ms; PASS p50 8.60 ms; p99 15.20 ms; budget 17 ms; PASS p50 8.20 ms; p99 13.20 ms; budget 17 ms; PASS p50 9.80 ms; p99 15.10 ms; budget 17 ms; PASS p50 7.80 ms; p99 15.10 ms; budget 17 ms; PASS
Predicted glyph visibility (renderer sample) p99 ≤ 17 ms p50 10.40 ms; p99 15.30 ms; budget 17 ms; PASS p50 8.00 ms; p99 13.00 ms; budget 17 ms; PASS p50 8.60 ms; p99 15.20 ms; budget 17 ms; PASS p50 8.20 ms; p99 13.20 ms; budget 17 ms; PASS p50 9.80 ms; p99 15.10 ms; budget 17 ms; PASS p50 7.80 ms; p99 15.10 ms; budget 17 ms; PASS
Setup screen painted upper bound p99 < 1000 ms p50 710.90 ms; p99 758.60 ms; budget 1000 ms; PASS p50 710.60 ms; p99 743.40 ms; budget 1000 ms; PASS p50 716.90 ms; p99 753.80 ms; budget 1000 ms; PASS p50 711.70 ms; p99 749.80 ms; budget 1000 ms; PASS p50 708.90 ms; p99 759.00 ms; budget 1000 ms; PASS p50 717.00 ms; p99 780.30 ms; budget 1000 ms; PASS
Setup first-contentful-paint reported; 1000 ms reference p50 658.30 ms; p99 693.30 ms; budget 1000 ms; REPORT p50 652.50 ms; p99 683.60 ms; budget 1000 ms; REPORT p50 660.30 ms; p99 687.40 ms; budget 1000 ms; REPORT p50 661.80 ms; p99 693.40 ms; budget 1000 ms; REPORT p50 651.40 ms; p99 688.50 ms; budget 1000 ms; REPORT p50 661.30 ms; p99 684.50 ms; budget 1000 ms; REPORT
Sign-in screen painted upper bound p99 < 1000 ms p50 704.00 ms; p99 730.50 ms; budget 1000 ms; PASS p50 691.70 ms; p99 727.00 ms; budget 1000 ms; PASS p50 691.20 ms; p99 741.60 ms; budget 1000 ms; PASS p50 693.10 ms; p99 729.70 ms; budget 1000 ms; PASS p50 702.40 ms; p99 725.80 ms; budget 1000 ms; PASS p50 702.50 ms; p99 741.00 ms; budget 1000 ms; PASS
Sign-in first-contentful-paint reported; 1000 ms reference p50 655.20 ms; p99 679.70 ms; budget 1000 ms; REPORT p50 649.60 ms; p99 682.80 ms; budget 1000 ms; REPORT p50 652.70 ms; p99 696.80 ms; budget 1000 ms; REPORT p50 652.00 ms; p99 687.30 ms; budget 1000 ms; REPORT p50 656.90 ms; p99 680.50 ms; budget 1000 ms; REPORT p50 651.30 ms; p99 694.70 ms; budget 1000 ms; REPORT

Conclusion

  • A failure measured here is independent of shared build-host load. If a prior failure passes all three VM runs, that points to load sensitivity but does not prove the code is free of the issue.

Raw JSON reports, stderr, environment records, and generated test results are in runs/. No arbitrary browser traces were captured.

Completed steps d126e2f8 (12 proof guards) and28bbc0b6 (bounded pre-key/failure diagnostics), both pushed separately after tracer check/functional gates. Final interleaved3 comparison of production code17f04abd→f2d91608 completes all18 cases: both revisions pass9/9 in this window. Earlier original HEAD1/3 and diagnostic2/3 pending-text failures remain recorded; this passing comparison does not erase them or alone prove a frequency change. Deterministic red-before/green-after cases establish the repaired time-only wait defect; complete echo/cursor guards remain mandatory. Final branch28bbc0b6 has identical production code to measured f2d91608. Fresh exact-head D259 repeats and full fast gate are running. Strict theme acceptance remains HOLD; no design/budget/auth waiver. <!-- Role: records the perf-VM browser run setup, outcomes, and measurements. --> # Perf VM browser A/B ## Setup - BASE: `17f04abd04206c1df568589a27ad786809f7fc3a`. - HEAD: `f2d91608353df83835105e47abb4a7e4101f8f82`. - Specs: `test/terminal.spec.ts`. - Host: Debian GNU/Linux 13 (trixie), 4 vCPUs; each browser run records its pre/post load, kernel, Bun, Playwright, and browser versions. - Profile: 300 ms RTT with ±30 ms jitter; each invocation uses its own `TRACER_TEST_PORT`; tests use the locally built production bundle. - Playwright trace capture remains off per the test config; generated test-result files and explicit test attachments are retained. - Run order: base-1, head-1, base-2, head-2, base-3, head-3. ## Runs | Run | Revision | Port | Pre-run load (1/5/15 min) | Playwright result | Duration | | --- | --- | ---: | --- | --- | ---: | | BASE 1 | `17f04abd` | 4431 | 0.01 / 0.20 / 0.35 | 3 passed, 0 failed (exit 0) | 181.1 s | | HEAD 1 | `f2d91608` | 4432 | 0.26 / 0.25 / 0.34 | 3 passed, 0 failed (exit 0) | 181.2 s | | BASE 2 | `17f04abd` | 4433 | 0.42 / 0.31 / 0.35 | 3 passed, 0 failed (exit 0) | 181.4 s | | HEAD 2 | `f2d91608` | 4434 | 0.47 / 0.40 / 0.37 | 3 passed, 0 failed (exit 0) | 181.4 s | | BASE 3 | `17f04abd` | 4435 | 0.14 / 0.28 / 0.33 | 3 passed, 0 failed (exit 0) | 181.3 s | | HEAD 3 | `f2d91608` | 4436 | 0.50 / 0.32 / 0.33 | 3 passed, 0 failed (exit 0) | 182.3 s | ## Per-test results | Test | BASE 1 | HEAD 1 | BASE 2 | HEAD 2 | BASE 3 | HEAD 3 | | --- | --- | --- | --- | --- | --- | --- | | terminal.spec.ts: first run, passkey login, terminal resume, and the latency probe | P | P | P | P | P | P | | terminal.spec.ts: status failure, invalid setup token, and cancelled passkey have distinct guidance | P | P | P | P | P | P | | terminal.spec.ts: access screens render within the local first-paint budget | P | P | P | P | P | P | ## Timing checks | Measurement | Budget / meaning | BASE 1 | HEAD 1 | BASE 2 | HEAD 2 | BASE 3 | HEAD 3 | | --- | --- | --- | --- | --- | --- | --- | --- | | Returning sign-in to usable terminal | p99 ≤ budget | p50 4126.00 ms; p99 4136.70 ms; budget 5000 ms; PASS | p50 4122.50 ms; p99 4131.80 ms; budget 5000 ms; PASS | p50 4128.10 ms; p99 4140.40 ms; budget 5000 ms; PASS | p50 4123.00 ms; p99 4136.90 ms; budget 5000 ms; PASS | p50 4118.10 ms; p99 4133.00 ms; budget 5000 ms; PASS | p50 4127.30 ms; p99 4236.40 ms; budget 5000 ms; PASS | | Terminal resume after drop | p99 ≤ RTT × 2 + 300 ms | p50 620.70 ms; p99 650.00 ms; budget 900 ms; PASS | p50 620.90 ms; p99 656.60 ms; budget 900 ms; PASS | p50 622.00 ms; p99 657.10 ms; budget 900 ms; PASS | p50 624.50 ms; p99 645.70 ms; budget 900 ms; PASS | p50 612.50 ms; p99 651.40 ms; budget 900 ms; PASS | p50 623.90 ms; p99 659.30 ms; budget 900 ms; PASS | | Predicted glyph visibility | p99 ≤ 17 ms | p50 10.40 ms; p99 15.30 ms; budget 17 ms; PASS | p50 8.00 ms; p99 13.00 ms; budget 17 ms; PASS | p50 8.60 ms; p99 15.20 ms; budget 17 ms; PASS | p50 8.20 ms; p99 13.20 ms; budget 17 ms; PASS | p50 9.80 ms; p99 15.10 ms; budget 17 ms; PASS | p50 7.80 ms; p99 15.10 ms; budget 17 ms; PASS | | Predicted glyph visibility (renderer sample) | p99 ≤ 17 ms | p50 10.40 ms; p99 15.30 ms; budget 17 ms; PASS | p50 8.00 ms; p99 13.00 ms; budget 17 ms; PASS | p50 8.60 ms; p99 15.20 ms; budget 17 ms; PASS | p50 8.20 ms; p99 13.20 ms; budget 17 ms; PASS | p50 9.80 ms; p99 15.10 ms; budget 17 ms; PASS | p50 7.80 ms; p99 15.10 ms; budget 17 ms; PASS | | Setup screen painted upper bound | p99 < 1000 ms | p50 710.90 ms; p99 758.60 ms; budget 1000 ms; PASS | p50 710.60 ms; p99 743.40 ms; budget 1000 ms; PASS | p50 716.90 ms; p99 753.80 ms; budget 1000 ms; PASS | p50 711.70 ms; p99 749.80 ms; budget 1000 ms; PASS | p50 708.90 ms; p99 759.00 ms; budget 1000 ms; PASS | p50 717.00 ms; p99 780.30 ms; budget 1000 ms; PASS | | Setup first-contentful-paint | reported; 1000 ms reference | p50 658.30 ms; p99 693.30 ms; budget 1000 ms; REPORT | p50 652.50 ms; p99 683.60 ms; budget 1000 ms; REPORT | p50 660.30 ms; p99 687.40 ms; budget 1000 ms; REPORT | p50 661.80 ms; p99 693.40 ms; budget 1000 ms; REPORT | p50 651.40 ms; p99 688.50 ms; budget 1000 ms; REPORT | p50 661.30 ms; p99 684.50 ms; budget 1000 ms; REPORT | | Sign-in screen painted upper bound | p99 < 1000 ms | p50 704.00 ms; p99 730.50 ms; budget 1000 ms; PASS | p50 691.70 ms; p99 727.00 ms; budget 1000 ms; PASS | p50 691.20 ms; p99 741.60 ms; budget 1000 ms; PASS | p50 693.10 ms; p99 729.70 ms; budget 1000 ms; PASS | p50 702.40 ms; p99 725.80 ms; budget 1000 ms; PASS | p50 702.50 ms; p99 741.00 ms; budget 1000 ms; PASS | | Sign-in first-contentful-paint | reported; 1000 ms reference | p50 655.20 ms; p99 679.70 ms; budget 1000 ms; REPORT | p50 649.60 ms; p99 682.80 ms; budget 1000 ms; REPORT | p50 652.70 ms; p99 696.80 ms; budget 1000 ms; REPORT | p50 652.00 ms; p99 687.30 ms; budget 1000 ms; REPORT | p50 656.90 ms; p99 680.50 ms; budget 1000 ms; REPORT | p50 651.30 ms; p99 694.70 ms; budget 1000 ms; REPORT | ## Conclusion - A failure measured here is independent of shared build-host load. If a prior failure passes all three VM runs, that points to load sensitivity but does not prove the code is free of the issue. Raw JSON reports, stderr, environment records, and generated test results are in `runs/`. No arbitrary browser traces were captured.
Author
Owner

Final branch-head scripts/verify fast output verbatim, part 1/12. Head 28bbc0b6fa; exit1, only static sizes fail. SHA256 b935fbfa77756bb873f44a315d1f3f61b1a57f4622068c4961eea6d8e8421447. RTT row ran on VM208/shared lock with identical script SHA815c3bee752af0471ab9bf47b671e4729f2ef0cb7659a6655e8b8e24e4b7b73d. Functional transcript durations are not accepted performance measurements.


==> Release deployment functional checks
.....Release build failed for aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa; gate log retained
.Build deferred: host capacity limit reached
.........
----------------------------------------------------------------------
Ran 15 tests in 0.509s

OK
.
----------------------------------------------------------------------
Ran 1 test in 0.208s

OK
bun test v1.4.2 (744846f84)

scripts/release/deploy-review.test.ts:
REMOTE_ADMISSION unsigned_x86_payload=true refused=true
(pass) remote admission refuses an x86 payload outside the signed manifest [1008.18ms]
{"state": "deployed", "ca_unlocked": true}
WEB_ONLY_RECORD candidate_binary_recorded=false
(pass) web-only deployment does not record the candidate as the running binary [517.67ms]
ALIAS_RECOVERY restart_requests=2
(pass) alias restoration failure still requests the retained warm rollback [472.17ms]

 3 pass
 0 fail
 3 expect() calls
Ran 3 tests across 1 file. [2.01s]
ENVIRONMENT RTT gate peer=10.69.69.208 host=infraternal-perf-test
cores=4
0.47 0.40 0.37 2/250 2304318
METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=292.65 p99_ms=299.85 result=PASS

==> fmt

==> VT native fmt

==> CLI plugin compile-out
disabled CLI plugin dependencies: absent from normal dependency graph
    Finished `test` profile [unoptimized + debuginfo] target(s) in 1.12s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal-d0028d263474a180)

running 25 tests
test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok
test cli::actions::tests::agent_session_integration_target_is_gated_by_agent_plugin ... ok
test cli::actions::tests::compiled_out_mesh_has_no_registered_commands ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::no_default_plugins_register_no_component_commands ... ok
test cli::actions::tests::server_only_dependencies_are_removed_with_server_plugin ... ok
test cli::command_tree::tests::compiled_out_plugin_has_no_help_or_parse_path ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test cli::output::tests::json_snapshot_has_stable_versioned_fields_and_omits_absent_details ... ok
test cli::output::tests::non_terminal_pretty_snapshot_has_aligned_details_and_table ... ok
test cli::output::tests::pretty_snapshot_omits_empty_skill_write_sections ... ok
test cli::output::tests::pretty_tables_omit_empty_columns_and_rows ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test cli::output::tests::terminal_snapshot_uses_color_but_still_wraps_to_the_requested_width ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test status_tests::custom_named_server_service_is_reported_as_running ... ok
test status_tests::custom_named_stopped_server_service_is_reported_as_stopped ... ok
test status_tests::unrelated_services_do_not_appear_as_infraternal_servers ... ok

test result: ok. 25 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.17s


==> clippy
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 1.64s

==> test
    Finished `test` profile [unoptimized + debuginfo] target(s) in 1.56s
     Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal-ff26c3ff78ebab6f)

running 77 tests
test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok
test cli::actions::hosted_tests::production_descriptors_share_cli_registry_and_skills ... ok
test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok
test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok
test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok
test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok
test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok
test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok
test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok
test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok
test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok
test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok
test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok
test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok
test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok
test cli::output::tests::json_snapshot_has_stable_versioned_fields_and_omits_absent_details ... ok
test cli::output::tests::non_terminal_pretty_snapshot_has_aligned_details_and_table ... ok
test cli::output::tests::pretty_snapshot_omits_empty_skill_write_sections ... ok
test cli::output::tests::pretty_tables_omit_empty_columns_and_rows ... ok
test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok
test cli::output::tests::terminal_snapshot_uses_color_but_still_wraps_to_the_requested_width ... ok
test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok
test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok
test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok
test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok
test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok
test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok
test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok
test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok
test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok
test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok
test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok
test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok
test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok
test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok
test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok
test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok
test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok
test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok
test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok
test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok
test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok
test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok
test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok
test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok
test restart::recovery_tests::verified_exec_and_late_refusal_preserve_listener_and_ca ... ok
test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok
test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok
test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok
test restart::tests::deleted_path_review::relative_recovery_after_atomic_install_keeps_live_install_path ... ok
test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok
test restart::tests::path_review::late_recovery_from_path_invocation_keeps_install_target ... ok
test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok
test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok
test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok
test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok
test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok
test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok
test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok
test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok
test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok
test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok
test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok
test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok
test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ok
test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok
test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok
test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ok
test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ok
test restart_binary::audit_tests::verification_twenty_megabytes ... ignored, optimized weighted 20 MiB signature and admission measurement
test restart_image::tests::probe_never_inherits_the_control_descriptor ... ok
test restart_image::tests::snapshot_refuses_every_mutation_and_preserves_source_offset ... ok
test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok
test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok
test status_tests::custom_named_server_service_is_reported_as_running ... ok
test status_tests::custom_named_stopped_server_service_is_reported_as_stopped ... ok
test status_tests::unrelated_services_do_not_appear_as_infraternal_servers ... ok

test result: ok. 76 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 46.49s

     Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/agent_daemon-655727f9f0cc0d46)

running 1 test
test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 39.43s

     Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/agent_queues-0db8eea61c377b38)

running 1 test
test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 38.56s

     Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/agent_review-30a33faa48ae32cc)

running 8 tests
test initial_attach_requires_explicit_credit_before_replay ... ok
test last_typist_selects_its_own_real_pty_dimensions ... ok
test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok
test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok
test repeated_tiny_credit_pauses_preserve_shell_progress ... ok
test retained_unwritten_input_survives_interleaved_ack_restart ... ok
test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok
test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok

test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 46.97s

     Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/agent_sessions-8e431b0b38cea6e6)

running 3 tests
test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok
test latency_fixture_accepts_the_unsolicited_startup_inventory ... ok
test restart_discovery_keeps_a_live_shim_and_drops_clean_exit_and_sigkill ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.76s

     Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/idle_canary-be7f97f2723a1f42)

running 1 test
test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.38s

     Running tests/key_memory.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/key_memory-540eb1e738739f76)

running 1 test
test diagnostic_requires_locked_pages_and_supports_json_without_public_help ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.61s

     Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/remote_output-e3f64bf80a5c5efa)

running 1 test
test remote_refusal_matches_its_declared_cli_output ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/session_bounds_review.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/session_bounds_review-52d8c640e8ddf537)

running 1 test
test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.54s

     Running tests/session_exit_events.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/session_exit_events-bafddf2afef7b798)

running 1 test
test idle_daemon_discovers_unattached_and_adopted_shim_exit_without_requests ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 9.62s

     Running tests/session_retention.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/session_retention-13964017ec49e430)

running 1 test
test bounded_owned_exit_reconnects_as_ended_with_status ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.39s

     Running tests/setup_output.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/setup_output-80a777d2e95dde79)

running 1 test
test setup_output_keeps_legacy_and_versioned_readers ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/shim.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/shim-0b450d7b32e83e12)

running 24 tests
test attached_backpressure_and_detached_progress ... ok
test delivered_exit_cannot_release_another_owning_window ... ok
test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok
test detached_shell_exit_reaps_shim_within_one_second ... ok
test disallowed_signal_only_disconnects_peer ... ok
test double_fork_survives_parent_death ... ok
test dropped_deferred_peers_release_slots_before_the_pty_drains ... ok
test fresh_shared_peer_negotiates_while_another_shared_input_is_deferred ... ok
test independent_shared_writers_wait_for_the_same_global_queue ... ok
test legacy_output_subscription_unblocks_deferred_shared_input ... ok
test malformed_shared_successor_does_not_evict_the_live_shared_peer ... ok
test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok
test owned_exit_releases_promptly_on_window_close ... ok
test parked_shared_writer_does_not_stop_detached_pty_progress ... ok
test real_shell_reconnect_resize_and_delivered_exit ... ok
test replacement_connection_and_malformed_limit ... ok
test ring_wrap_snapshot_repaints_real_vim ... ok
test shared_input_waits_for_global_queue_space_without_losing_the_suffix ... ok
test shared_writer_coexists_and_replayed_input_is_written_once ... ok
test shared_writer_refusals_and_full_peer_limit_preserve_the_live_writer ... ok
test shared_writer_restores_durable_geometry_after_another_writer_types ... ok
test unowned_normal_exit_retires_promptly_and_records_status ... ok
test user_scope_survives_parent_unit_stop ... active
ok
test writer_replacement_is_per_mode_and_fresh_ordinary_writers_stay_optional ... ok

test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 12.55s

     Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/ssh_askpass-92b924c5ea0a32fa)

running 3 tests
test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness
test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok
test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok

test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 5.52s

     Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/vt_credit-393a6c6d6c7b57f0)

running 1 test
test unaffordable_repaints_park_until_sufficient_credit ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 25.94s

     Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/vt_reconnect-a434ebf1242fcdb9)

running 1 test
test snapshot_limits_never_close_live_reconnect ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 24.27s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_agent-a1f8a8c7795816f5)

running 110 tests
test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok
test daemon::census_retry_tests::full_control_lane_retries_retirement_census_on_capacity_without_requests ... ok
test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok
test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000
test daemon::readiness_exit_tests::ownership_eof_does_not_discard_private_terminal_output ... ok
test daemon::readiness_tests::a_saturated_census_queue_cannot_establish_the_open_fence ... ok
test daemon::readiness_tests::census_and_open_result_share_fifo_order ... ok
test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok
test daemon::readiness_tests::fixture_fence_processes_messages_before_the_control_pong ... ok
test daemon::readiness_tests::replay_complete_preserves_the_full_output_cursor_as_decimal ... ok
test daemon::readiness_tests::replay_prefix_stops_at_the_shim_hello_head ... ok
test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory
test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok
test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok
test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok
test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok
test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok
test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok
test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok
test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap
test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok
test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok
test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok
test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok
test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok
test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks
test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok
test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok
test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok
test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok
test plugin_control::tests::accepted_public_transaction_outlives_the_framing_deadline ... ok
test plugin_control::tests::admission_observes_the_same_plugin_settings_as_actions ... ok
test plugin_control::tests::dropping_a_listener_does_not_unlink_a_replacement_file ... ok
test plugin_control::tests::local_frame_reader_retains_fragmentation_and_refuses_trailing_frames ... ok
test plugin_control::tests::local_public_actions_refuse_controls_and_active_socket_replacement ... ok
test plugin_control::tests::retained_path_and_observed_transport_cross_the_lazy_worker ... ok
test plugin_control::tests::synchronous_plugin_work_does_not_park_the_current_thread_reactor ... ok
test plugin_control::tests::worker_preserves_trusted_context_and_writer_owned_effect ... ok
test process_exits::platform::tests::resource_failures_do_not_silently_disable_exit_tracking ... ok
test process_exits::platform::tests::unavailable_kernel_has_no_timer_or_descriptor ... ok
test process_exits_tests::exited_before_registration_is_not_a_live_registration ... ok
test process_exits_tests::process_descriptor_is_cloexec_and_rejects_invalid_pid ... ok
test process_exits_tests::shared_exit_queue_at_200_processes ... ignored, 200 live process lifetimes; run in a weighted benchmark scope
test process_exits_tests::shared_queue_detects_exit_and_does_not_repeat_or_retain_descriptors ... ok
test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok
test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok
test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok
test relay::tests::output_partial_credit_and_dedup ... ok
test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement
test relay::tests::overflowing_ranges_never_mutate_cursors ... ok
test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok
test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok
test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok
test remote_client::primed_native::tests::dropping_parked_service_retires_transport ... ok
test remote_client::server_path::tests::component_down_activates_the_warm_fallback_without_a_new_connection ... ok
test remote_client::server_path::tests::component_down_keeps_its_reason_when_mesh_closes_during_replacement ... ok
test remote_client::server_path::tests::component_down_proves_tcp_fallback_when_enrolled_udp_is_unavailable ... ok
test remote_client::server_path::tests::component_down_replaces_mesh_with_a_proven_fallback ... ok
Final branch-head scripts/verify fast output verbatim, part 1/12. Head 28bbc0b6fa18356a992c2ec215213d5d732d271b; exit1, only static sizes fail. SHA256 b935fbfa77756bb873f44a315d1f3f61b1a57f4622068c4961eea6d8e8421447. RTT row ran on VM208/shared lock with identical script SHA815c3bee752af0471ab9bf47b671e4729f2ef0cb7659a6655e8b8e24e4b7b73d. Functional transcript durations are not accepted performance measurements. ```text ==> Release deployment functional checks .....Release build failed for aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa; gate log retained .Build deferred: host capacity limit reached ......... ---------------------------------------------------------------------- Ran 15 tests in 0.509s OK . ---------------------------------------------------------------------- Ran 1 test in 0.208s OK bun test v1.4.2 (744846f84) scripts/release/deploy-review.test.ts: REMOTE_ADMISSION unsigned_x86_payload=true refused=true (pass) remote admission refuses an x86 payload outside the signed manifest [1008.18ms] {"state": "deployed", "ca_unlocked": true} WEB_ONLY_RECORD candidate_binary_recorded=false (pass) web-only deployment does not record the candidate as the running binary [517.67ms] ALIAS_RECOVERY restart_requests=2 (pass) alias restoration failure still requests the retained warm rollback [472.17ms] 3 pass 0 fail 3 expect() calls Ran 3 tests across 1 file. [2.01s] ENVIRONMENT RTT gate peer=10.69.69.208 host=infraternal-perf-test cores=4 0.47 0.40 0.37 2/250 2304318 METRIC name=network_rtt_selftest configured_rtt_ms=300 jitter_ms=30 loss=unsupported transport=tcp-stream n=3 p50_ms=292.65 p99_ms=299.85 result=PASS ==> fmt ==> VT native fmt ==> CLI plugin compile-out disabled CLI plugin dependencies: absent from normal dependency graph Finished `test` profile [unoptimized + debuginfo] target(s) in 1.12s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal-d0028d263474a180) running 25 tests test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok test cli::actions::tests::agent_session_integration_target_is_gated_by_agent_plugin ... ok test cli::actions::tests::compiled_out_mesh_has_no_registered_commands ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::no_default_plugins_register_no_component_commands ... ok test cli::actions::tests::server_only_dependencies_are_removed_with_server_plugin ... ok test cli::command_tree::tests::compiled_out_plugin_has_no_help_or_parse_path ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test cli::output::tests::json_snapshot_has_stable_versioned_fields_and_omits_absent_details ... ok test cli::output::tests::non_terminal_pretty_snapshot_has_aligned_details_and_table ... ok test cli::output::tests::pretty_snapshot_omits_empty_skill_write_sections ... ok test cli::output::tests::pretty_tables_omit_empty_columns_and_rows ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test cli::output::tests::terminal_snapshot_uses_color_but_still_wraps_to_the_requested_width ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test status_tests::custom_named_server_service_is_reported_as_running ... ok test status_tests::custom_named_stopped_server_service_is_reported_as_stopped ... ok test status_tests::unrelated_services_do_not_appear_as_infraternal_servers ... ok test result: ok. 25 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.17s ==> clippy Finished `dev` profile [unoptimized + debuginfo] target(s) in 1.64s ==> test Finished `test` profile [unoptimized + debuginfo] target(s) in 1.56s Running unittests src/main.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal-ff26c3ff78ebab6f) running 77 tests test cli::actions::factory_tests::plugin_command_materializes_only_its_owner_and_discovery_remains_complete ... ok test cli::actions::hosted_tests::production_descriptors_share_cli_registry_and_skills ... ok test cli::actions::key_memory_registry_tests::key_memory_diagnostic_follows_remote_feature ... ok test cli::actions::release_tests::server_commands_bind_release_without_losing_hosted_skills ... ok test cli::actions::tests::enabled_mesh_plugin_registers_its_component_commands ... ok test cli::actions::tests::every_registered_action_has_description_and_step_by_step_guidance ... ok test cli::actions::tests::hidden_session_shim_is_registered_to_its_runtime_handler ... ok test cli::actions::tests::registered_actions_include_plugin_permission_contract_fields ... ok test cli::command_tree::backmerge_tests::removal_and_retention_inputs_keep_the_production_runtime_bindings ... ok test cli::command_tree::backmerge_tests::restart_inherits_private_state_before_or_after_the_command ... ok test cli::command_tree::tests::hidden_session_shim_parser_uses_the_registered_input_schema ... ok test cli::command_tree::tests::parser_uses_plugin_inputs_and_accepts_json_after_a_leaf_command ... ok test cli::command_tree::tests::root_help_uses_registered_descriptions_and_long_action_guidance ... ok test cli::command_tree::tests::server_init_parses_confirmation_plan_and_server_configuration ... ok test cli::command_tree::tests::skill_parser_accepts_a_multi_part_command_and_write_directory ... ok test cli::output::tests::json_snapshot_has_stable_versioned_fields_and_omits_absent_details ... ok test cli::output::tests::non_terminal_pretty_snapshot_has_aligned_details_and_table ... ok test cli::output::tests::pretty_snapshot_omits_empty_skill_write_sections ... ok test cli::output::tests::pretty_tables_omit_empty_columns_and_rows ... ok test cli::output::tests::registered_action_output_schemas_accept_typed_json_envelopes ... ok test cli::output::tests::terminal_snapshot_uses_color_but_still_wraps_to_the_requested_width ... ok test cli::skills::tests::generated_skill_contains_front_matter_inputs_outputs_and_safety ... ok test cli::skills::tests::writing_skills_creates_one_file_per_visible_action ... ok test dispatch_tests::hidden_session_shim_dispatches_from_the_registered_action ... ok test embedded_cli::tests::dispatch_keeps_public_help_operator_modes_and_foreign_commands ... ok test embedded_cli::tests::inherited_flags_keep_public_parser_validation_and_values ... ok test failure_data_tests::server_errors_keep_the_registered_result_data_shapes ... ok test failure_data_tests::skill_errors_keep_the_registered_result_data_shape ... ok test failure_data_tests::unavailable_results_keep_registered_data_shapes ... ok test install::tests::dry_run_prints_a_process_surviving_user_unit ... ok test remote::tests::join_dns_failure_reports_resolution_instead_of_generic_refusal ... ok test remote::tests::local_identity_load_refuses_symlink_and_shared_file ... ok test remote::tests::ordinary_join_keeps_the_foreground_connection_default ... ok test remote::tests::oversized_or_invalid_invitation_fails_before_local_state_is_created ... ok test remote::tests::preparation_refuses_shared_and_symlinked_data_directories ... ok test remote::tests::publication_is_private_and_never_replaces_existing_identity ... ok test remote::tests::renewal_publication_replaces_only_certificate_and_preserves_private_metadata ... ok test remote::tests::ssh_installation_can_enroll_before_starting_the_service ... ok test remote::tests::uid_and_privilege_mismatch_fails_before_key_generation ... ok test remote_server::tests::failed_cold_configuration_still_disposes_handoff_stdin ... ok test remote_server::tests::failed_restart_endpoint_does_not_prevent_http_serving ... ok test remote_server::tests::independent_review_remote_operator_commands_accept_json_output ... ok test remote_server::tests::missing_ca_refuses_before_database_or_listener_creation ... ok test remote_server::tests::remote_activation_is_explicit_and_ca_override_requires_listener ... ok test remote_server::tests::service_dry_run_preserves_remote_listener_and_private_trust_path ... ok test restart::recovery_tests::verified_exec_and_late_refusal_preserve_listener_and_ca ... ok test restart::tests::closed_reply_and_missing_reload_target_do_not_end_restart_control ... ok test restart::tests::cold_exec_with_closed_stdin_keeps_the_image_pinned_and_maps_null ... ok test restart::tests::default_restart_opens_the_receiver_target_exactly_once ... ok test restart::tests::deleted_path_review::relative_recovery_after_atomic_install_keeps_live_install_path ... ok test restart::tests::early_hangup_is_queued_until_control_installs_its_handler ... ok test restart::tests::path_review::late_recovery_from_path_invocation_keeps_install_target ... ok test restart::tests::private_control_endpoint_cannot_be_stolen_or_created_by_a_client ... ok test restart::tests::private_path_prefix_cannot_authorize_a_parent_directory_escape ... ok test restart::tests::real_fd_exec_pins_replacement_and_cold_rollback_uses_null_stdin ... ok test restart::tests::reload_reopens_install_path_when_the_running_inode_was_replaced ... ok test restart::tests::replacement_never_exports_to_a_general_purpose_binary ... ok test restart::tests::restart_request_logs_kernel_peer_target_and_cold_outcome ... ok test restart::tests::restart_requests_use_the_servers_binary_and_reject_untrusted_paths ... ok test restart::tests::reviewer_fifo_replacement_is_refused_without_waiting_for_a_writer ... ok test restart::tests::root_owned_marked_target_requires_protected_root_parents ... ok test restart::tests::rootless_even_marked_replacement_is_cold_and_open_fd_pins_the_inode ... ok test restart::tests::runtime_directory_symlinks_and_public_permissions_are_refused ... ok test restart::tests::runtime_shutdown_never_waits_forever_on_a_blocking_waiter ... ok test restart_binary::audit_tests::admitted_inode_cannot_change_in_place_before_execution ... ok test restart_binary::audit_tests::pathname_replacement_keeps_the_admitted_inode ... ok test restart_binary::audit_tests::symlink_parent_escape_and_writable_candidates_are_refused ... ok test restart_binary::audit_tests::unsigned_or_tampered_replacement_is_refused_before_exec ... ok test restart_binary::audit_tests::unusable_admitted_image_keeps_the_existing_service_running ... ok test restart_binary::audit_tests::verification_twenty_megabytes ... ignored, optimized weighted 20 MiB signature and admission measurement test restart_image::tests::probe_never_inherits_the_control_descriptor ... ok test restart_image::tests::snapshot_refuses_every_mutation_and_preserves_source_offset ... ok test setup_token_tests::setup_token_command_reads_only_the_expected_socket_response ... ok test startup_tests::process_dumpability_is_disabled_before_dispatch ... ok test status_tests::custom_named_server_service_is_reported_as_running ... ok test status_tests::custom_named_stopped_server_service_is_reported_as_stopped ... ok test status_tests::unrelated_services_do_not_appear_as_infraternal_servers ... ok test result: ok. 76 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 46.49s Running tests/agent_daemon.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/agent_daemon-655727f9f0cc0d46) running 1 test test real_binary_preserves_input_and_output_across_24_abrupt_stops ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 39.43s Running tests/agent_queues.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/agent_queues-0db8eea61c377b38) running 1 test test saturated_terminal_queues_preserve_every_byte_and_daemon_liveness ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 38.56s Running tests/agent_review.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/agent_review-30a33faa48ae32cc) running 8 tests test initial_attach_requires_explicit_credit_before_replay ... ok test last_typist_selects_its_own_real_pty_dimensions ... ok test local_session_counts_and_memory_refusals_follow_real_lifecycle ... ok test reaped_shim_exit_survives_credit_after_starvation_deadline ... ok test repeated_tiny_credit_pauses_preserve_shell_progress ... ok test retained_unwritten_input_survives_interleaved_ack_restart ... ok test stalled_terminal_never_delays_control_or_sibling_dispatch ... ok test two_writers_keep_independent_ack_and_exact_input_after_restart ... ok test result: ok. 8 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 46.97s Running tests/agent_sessions.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/agent_sessions-8e431b0b38cea6e6) running 3 tests test detached_shim_is_discovered_and_replays_from_the_last_observed_offset ... ok test latency_fixture_accepts_the_unsolicited_startup_inventory ... ok test restart_discovery_keeps_a_live_shim_and_drops_clean_exit_and_sigkill ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.76s Running tests/idle_canary.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/idle_canary-be7f97f2723a1f42) running 1 test test one_hertz_wakeup_is_detected_past_the_legacy_half_second_window ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 3.38s Running tests/key_memory.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/key_memory-540eb1e738739f76) running 1 test test diagnostic_requires_locked_pages_and_supports_json_without_public_help ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.61s Running tests/remote_output.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/remote_output-e3f64bf80a5c5efa) running 1 test test remote_refusal_matches_its_declared_cli_output ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/session_bounds_review.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/session_bounds_review-52d8c640e8ddf537) running 1 test test attached_window_recovers_final_output_and_exit_after_shim_link_detaches ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.54s Running tests/session_exit_events.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/session_exit_events-bafddf2afef7b798) running 1 test test idle_daemon_discovers_unattached_and_adopted_shim_exit_without_requests ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 9.62s Running tests/session_retention.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/session_retention-13964017ec49e430) running 1 test test bounded_owned_exit_reconnects_as_ended_with_status ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.39s Running tests/setup_output.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/setup_output-80a777d2e95dde79) running 1 test test setup_output_keeps_legacy_and_versioned_readers ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/shim.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/shim-0b450d7b32e83e12) running 24 tests test attached_backpressure_and_detached_progress ... ok test delivered_exit_cannot_release_another_owning_window ... ok test detached_shell_exit_reaps_even_with_a_live_background_descendant ... ok test detached_shell_exit_reaps_shim_within_one_second ... ok test disallowed_signal_only_disconnects_peer ... ok test double_fork_survives_parent_death ... ok test dropped_deferred_peers_release_slots_before_the_pty_drains ... ok test fresh_shared_peer_negotiates_while_another_shared_input_is_deferred ... ok test independent_shared_writers_wait_for_the_same_global_queue ... ok test legacy_output_subscription_unblocks_deferred_shared_input ... ok test malformed_shared_successor_does_not_evict_the_live_shared_peer ... ok test owned_exit_maximum_retires_with_status_even_with_an_unread_data_peer ... ok test owned_exit_releases_promptly_on_window_close ... ok test parked_shared_writer_does_not_stop_detached_pty_progress ... ok test real_shell_reconnect_resize_and_delivered_exit ... ok test replacement_connection_and_malformed_limit ... ok test ring_wrap_snapshot_repaints_real_vim ... ok test shared_input_waits_for_global_queue_space_without_losing_the_suffix ... ok test shared_writer_coexists_and_replayed_input_is_written_once ... ok test shared_writer_refusals_and_full_peer_limit_preserve_the_live_writer ... ok test shared_writer_restores_durable_geometry_after_another_writer_types ... ok test unowned_normal_exit_retires_promptly_and_records_status ... ok test user_scope_survives_parent_unit_stop ... active ok test writer_replacement_is_per_mode_and_fresh_ordinary_writers_stay_optional ... ok test result: ok. 24 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 12.55s Running tests/ssh_askpass.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/ssh_askpass-92b924c5ea0a32fa) running 3 tests test encrypted_key_without_passphrase_never_prompts_on_a_controlling_terminal ... ignored, run under the disposable controlling-terminal harness test real_cli_askpass_refuses_unregistered_parent_and_cleans_helper ... ok test real_cli_unlocks_an_encrypted_synthetic_key_on_private_pipes ... ok test result: ok. 2 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 5.52s Running tests/vt_credit.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/vt_credit-393a6c6d6c7b57f0) running 1 test test unaffordable_repaints_park_until_sufficient_credit ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 25.94s Running tests/vt_reconnect.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/vt_reconnect-a434ebf1242fcdb9) running 1 test test snapshot_limits_never_close_live_reconnect ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 24.27s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_agent-a1f8a8c7795816f5) running 110 tests test cli::tests::agent_actions_are_complete_and_unavailable_until_lifecycle_exists ... ok test daemon::census_retry_tests::full_control_lane_retries_retirement_census_on_capacity_without_requests ... ok test daemon::gone_tests::a_vanished_session_gets_a_final_close_and_the_channel_stays_up ... ok test daemon::gone_tests::scale_review::two_hundred_vanished_sessions_preserve_the_same_channel ... ignored, scale measurement; run alone under CPUWeight=10000 test daemon::readiness_exit_tests::ownership_eof_does_not_discard_private_terminal_output ... ok test daemon::readiness_tests::a_saturated_census_queue_cannot_establish_the_open_fence ... ok test daemon::readiness_tests::census_and_open_result_share_fifo_order ... ok test daemon::readiness_tests::control_precedes_bulk_without_reordering_snapshot_notice ... ok test daemon::readiness_tests::fixture_fence_processes_messages_before_the_control_pong ... ok test daemon::readiness_tests::replay_complete_preserves_the_full_output_cursor_as_decimal ... ok test daemon::readiness_tests::replay_prefix_stops_at_the_shim_hello_head ... ok test daemon::readiness_tests::reply_lane_memory_at_1000_channels ... ignored, queue-only scale diagnostic; run alone without build/browser overlap, not whole-daemon memory test daemon::readiness_tests::saturated_replies_retire_connection_without_awaiting_writer_capacity ... ok test daemon::readiness_tests::uninstall_handoff_runs_only_after_a_successful_real_socket_write ... ok test daemon::remote_tests::cancelling_remote_dispatch_retires_the_borrowed_authenticated_channel ... ok test daemon::remote_tests::control_greeting_precedes_actions_and_odd_writers_are_refused ... ok test daemon::remote_tests::silent_authenticated_peer_has_a_greeting_deadline ... ok test daemon::remote_tests::wrong_enrolled_uid_is_refused_before_state_creation ... ok test daemon::remote_tests::wrong_open_uid_is_rejected_while_control_remains_usable ... ok test daemon::session_commands::measurements::command_coordination_cost_against_existing_fifo ... ignored, release command coordination diagnostic, not end-to-end throughput; run without own build overlap test daemon::session_commands::tests::credit_above_one_wire_word_is_exact_and_idle_after_drain ... ok test daemon::session_commands::tests::credit_allowance_does_not_cross_ordered_command_barriers ... ok test daemon::session_commands::tests::credit_bursts_do_not_consume_ordered_input_capacity ... ok test daemon::session_commands::tests::input_and_resize_keep_their_shared_fifo_order_around_credit ... ok test daemon::session_commands::tests::zero_credit_is_idle_and_overflow_refuses_without_mutating_accounting ... ok test daemon::stream_memory_tests::terminal_stream_memory_at_200 ... ignored, weighted release measurement of 200 idle relay tasks test lifecycle::tests::directory_inode_changes_do_not_retire_the_same_process ... ok test lifecycle::tests::nondumpable_process_keeps_its_authenticated_lifetime ... ok test lifecycle::tests::process_birth_parser_handles_command_bytes_and_numeric_bounds ... ok test lifecycle::tests::window_ownership_and_process_identity_bound_live_counts ... ok test plugin_control::tests::accepted_public_transaction_outlives_the_framing_deadline ... ok test plugin_control::tests::admission_observes_the_same_plugin_settings_as_actions ... ok test plugin_control::tests::dropping_a_listener_does_not_unlink_a_replacement_file ... ok test plugin_control::tests::local_frame_reader_retains_fragmentation_and_refuses_trailing_frames ... ok test plugin_control::tests::local_public_actions_refuse_controls_and_active_socket_replacement ... ok test plugin_control::tests::retained_path_and_observed_transport_cross_the_lazy_worker ... ok test plugin_control::tests::synchronous_plugin_work_does_not_park_the_current_thread_reactor ... ok test plugin_control::tests::worker_preserves_trusted_context_and_writer_owned_effect ... ok test process_exits::platform::tests::resource_failures_do_not_silently_disable_exit_tracking ... ok test process_exits::platform::tests::unavailable_kernel_has_no_timer_or_descriptor ... ok test process_exits_tests::exited_before_registration_is_not_a_live_registration ... ok test process_exits_tests::process_descriptor_is_cloexec_and_rejects_invalid_pid ... ok test process_exits_tests::shared_exit_queue_at_200_processes ... ignored, 200 live process lifetimes; run in a weighted benchmark scope test process_exits_tests::shared_queue_detects_exit_and_does_not_repeat_or_retain_descriptors ... ok test relay::tests::attachment_has_no_implicit_output_or_snapshot_credit ... ok test relay::tests::expired_credit_resumes_retained_bytes_at_the_same_cursor ... ok test relay::tests::input_overlap_gap_and_restart_from_confirmed_offset ... ok test relay::tests::output_partial_credit_and_dedup ... ok test relay::tests::output_payload_move_measurement ... ignored, release ownership versus payload-copy measurement test relay::tests::overflowing_ranges_never_mutate_cursors ... ok test relay::tests::positive_insufficient_credit_arms_a_one_shot_deadline ... ok test relay::tests::returned_credit_cancels_starvation_and_state_has_no_payload_buffer ... ok test relay::tests::starvation_is_one_shot_and_snapshot_length_does_not_advance_sequence ... ok test remote_client::primed_native::tests::dropping_parked_service_retires_transport ... ok test remote_client::server_path::tests::component_down_activates_the_warm_fallback_without_a_new_connection ... ok test remote_client::server_path::tests::component_down_keeps_its_reason_when_mesh_closes_during_replacement ... ok test remote_client::server_path::tests::component_down_proves_tcp_fallback_when_enrolled_udp_is_unavailable ... ok test remote_client::server_path::tests::component_down_replaces_mesh_with_a_proven_fallback ... ok ```
Author
Owner

Final branch-head scripts/verify fast output verbatim, part 2/12. Head 28bbc0b6fa; exit1, only static sizes fail. SHA256 b935fbfa77756bb873f44a315d1f3f61b1a57f4622068c4961eea6d8e8421447. RTT row ran on VM208/shared lock with identical script SHA815c3bee752af0471ab9bf47b671e4729f2ef0cb7659a6655e8b8e24e4b7b73d. Functional transcript durations are not accepted performance measurements.

test remote_client::server_path::tests::healthy_mesh_probes_do_not_inherit_the_previous_paths_rtt ... ok
test remote_client::server_path::tests::invalid_application_proof_keeps_the_live_fallback ... ok
test remote_client::server_path::tests::parked_fallback_recovers_mesh_and_keeps_control_actions_usable ... ok
test remote_client::server_path::tests::proven_mesh_destination_is_preferred_and_failure_returns_to_enrolled_port ... ok
test remote_client::server_path::tests::retained_mesh_proposal_connects_when_the_fallback_port_is_unavailable ... ok
test remote_client::server_path::tests::review_silent_mesh_interruption_returns_to_fallback_within_local_reconnect_budget ... ignored, Run alone on the perf VM under the shared benchmark lock.
test remote_client::server_path::tests::untrusted_candidate_never_retires_the_authenticated_fallback ... ok
test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok
test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok
test remote_client::tests::idle_timers::mesh_idle_timer_cost_at_one_thousand_connections ... ignored, Release-only perf VM measurement under the shared benchmark lock.
test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok
test remote_client::tests::proven_tcp_decoder_preserves_mux_envelopes_and_buffered_suffix ... ok
test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok
test remote_client::tests::server_path_capability_is_advertised_on_native_and_fallback_transports ... ok
test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers
test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok
test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok
test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok
test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok
test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok
test remote_cursor::tests::exact_unsigned_cursor_and_whole_object_are_required ... ok
test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok
test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok
test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok
test remote_native_tests::primed::negotiated_connection_keeps_unmarked_new_writers_ordinary ... ok
test remote_native_tests::primed::ordinary_native_writer_refuses_the_additive_cursor_request ... ok
test remote_native_tests::primed::prime_marker_is_canonical_and_requires_negotiated_permission ... ok
test remote_native_tests::primed::primed_writer_acknowledges_before_reading_credit_funded_cursor ... ok
test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok
test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok
test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok
test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok
test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok
test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok
test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000
test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok
test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok
test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok
test sessions::tests::ordinary_native_writer_negotiates_queue_backpressure_without_shared_selection ... ok
test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok
test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement
test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok
test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok
test sessions::tests::shared_writer_helper_negotiates_before_sending_its_selector ... ok
test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok
test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok
test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok
test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok
test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok
test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap
test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap
test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap

test result: ok. 96 passed; 0 failed; 14 ignored; 0 measured; 0 filtered out; finished in 32.02s

     Running tests/transport.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/transport-0c6a2226704f5d95)

running 2 tests
test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok
test oversized_header_and_truncated_frame_are_rejected ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_mesh-b05cf1923316cb2f)

running 1 test
test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/default_arrow-c3dcd9519cdc97fa)

running 1 test
test omitted_arrow_ports_default_to_all_services ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/properties.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/properties-5179c55b52944b40)

running 14 tests
test addresses_are_unique_stable_and_not_recycled ... ok
test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok
test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok
test directional_grants_union_and_minimal_updates ... ok
test exhausted_versions_reject_mutations_without_changing_state ... ok
test join_to_same_tag_grants_both_initiation_directions ... ok
test names_versions_and_backend_status ... ok
test overlaps_are_reported_without_silent_range_changes ... ok
test private_material_never_enters_debug_or_coordination_serialization ... ok
test protocol_port_unions_never_grant_an_unlisted_service ... ok
test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok
test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok
test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok
test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok

test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.29s

     Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/rotation_time-a76bcb54ef244af6)

running 1 test
test unrepresentable_rotation_overlap_rejects_before_mutation ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_plugin_api-c601f0a1c341cc23)

running 20 tests
test action::tests::any_of_permissions_are_machine_readable_and_empty_authority_is_rejected ... ok
test action::tests::command_result_schema_has_required_stable_fields_and_optional_next_step ... ok
test action::tests::command_result_schema_keeps_action_data_typed_inside_stable_envelope ... ok
test action::tests::only_hidden_internal_routes_may_use_the_reserved_prefix ... ok
test action::tests::registry_keeps_plugin_ownership_and_exact_command_paths ... ok
test action::tests::registry_rejects_inconsistent_json_schemas ... ok
test action::tests::registry_rejects_missing_action_guidance_and_command_collisions ... ok
test admission::tests::memory_refusal_round_trips_without_losing_legacy_error ... ok
test component_tests::component_declarations_cannot_create_servers ... ok
test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok
test release_version::tests::accepts_only_worker_version_forms ... ok
test routing::tests::invalid_or_oversized_topics_are_refused ... ok
test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok
test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok
test tests::machine_actions_are_declared_without_entering_human_discovery ... ok
test tests::notifications_are_declared_json_bounded_and_drained_once ... ok
test tests::operator_presentation_cannot_follow_a_private_control_action ... ok
test tests::public_dispatch_cannot_call_a_machine_control_action ... ok
test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok
test tests::registry_routes_only_declared_actions ... ok

test result: ok. 20 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/routing_review-fe80451ff0776d50)

running 2 tests
test review_topic_borrows_plain_and_owns_escaped ... ok
test review_topic_refuses_oversize_duplicate_and_deep_input ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_plugin_backup-85810caed1a02b63)

running 1 test
test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_plugin_host_facts-1e12c32f02c35c56)

running 13 tests
test memory::tests::custom_policy_rounds_up_and_validates_all_settings_before_use ... ok
test memory::tests::default_floor_refuses_only_below_headroom_even_above_128_sessions ... ok
test session_counts_tests::host_owned_session_counts_are_additive_and_refresh_on_request ... ok
test tests::action_decoders_reject_unknown_and_oversized_fields ... ok
test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok
test tests::configured_memory_floor_refuses_with_current_host_counters ... ok
test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok
test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok
test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok
test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok
test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok
test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok
test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok

test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_plugin_mesh-6f41f5cbba421507)

running 36 tests
test connection_state::tests::narrowing_depends_on_services_and_direction_not_the_fallback_label ... ok
test firewall::tests::already_removed_owned_table_does_not_block_component_cleanup ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::initial_apply_without_adoption_refuses_a_foreign_table ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::real_nft_ownership_atomicity_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test firewall::tests::rule_count_is_independent_of_membership_and_policy_data_is_in_sets ... ok
test iptables::tests::contiguous_open_members_use_ranges_without_opening_gaps ... ok
test iptables::tests::initiating_prefixes_cover_only_owned_intervals_even_at_family_boundaries ... ok
test iptables::tests::real_nf_tables_ownership_partial_family_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test iptables::tests::replacement_retains_established_rules_and_does_not_duplicate_hooks ... ok
test netlink::tests::connection_tuple_uses_initiating_service_and_refuses_ambiguous_selectors ... ok
test netlink::tests::host_prefix_decoder_refuses_ambiguous_or_malformed_ownership ... ok
test netlink::tests::malformed_lengths_and_padding_are_rejected ... ok
test netlink::tests::nested_attributes_roundtrip_without_copying_payloads ... ok
test netlink::tests::public_host_prefixes_decode_both_families_without_claiming_subnets ... ok
test node::rotation_tests::nf_tables_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173.
test node::rotation_tests::nft_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173.
test node::tests::chunked_snapshot_is_atomic_and_applies_1000_kernel_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN; use release for timing.
test node::tests::explicit_up_recovers_disabled_intent_before_reusing_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node::tests::externally_removed_interface_does_not_block_down ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node::tests::server_identity_cannot_change_inside_a_staged_snapshot ... ok
test node_actions::tests::applied_server_route_and_observed_link_survive_only_explicit_component_up ... ignored, Run inside a dedicated kernel namespace with CAP_NET_ADMIN.
test node_actions::tests::failed_cleanup_reports_stopping_and_reconnect_keeps_explicit_off ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test node_actions::tests::node_actions_refuse_alternate_forms_duplicates_and_unbounded_input ... ok
test node_actions::tests::node_actions_register_without_kernel_work_and_hide_machine_calls ... ok
test node_coordination::tests::explicit_off_waits_for_up_and_reconnect_requests_a_snapshot ... ok
test node_coordination::tests::refused_delta_recovers_immediately_and_closed_channel_retires_worker ... ok
test node_coordination::tests::refused_listener_replacement_preserves_the_current_lease ... ok
test node_coordination::tests::removed_binding_can_attach_only_after_authorized_reenrollment ... ok
test node_coordination::tests::server_listener_belongs_to_applied_enabled_worker ... ok
test node_presentation::tests::legacy_status_remains_readable_and_invalid_link_is_refused ... ok
test node_presentation::tests::status_explains_the_observed_server_transport ... ok
test node_state::tests::explicit_off_survives_restart_and_snapshot_contains_only_public_fields ... ok
test node_state::tests::route_recording_preserves_the_legacy_accepted_state_format ... ok
test node_state::tests::unsafe_route_journal_and_existing_temporary_files_are_preserved ... ok
test node_state::tests::unsafe_snapshots_and_preexisting_temporary_files_are_not_followed_or_removed ... ok
test settings::tests::settings_objects_are_bounded_and_strict_before_storage ... ok

test result: ok. 25 passed; 0 failed; 11 ignored; 0 measured; 0 filtered out; finished in 0.66s

     Running tests/authorized_local_binding.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/authorized_local_binding-02e1712d695000e1)

running 2 tests
test nf_tables_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173.
test nft_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/canonical_host_binding.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/canonical_host_binding-916e8fce54d8a01d)

running 1 test
test enrollment_requires_canonical_host_uuid_spelling ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s

     Running tests/configuration.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/configuration-6f70d40a46624bab)

running 5 tests
test chunks_fit_body_budget_and_one_peer_delta_does_not_repeat_the_snapshot ... ok
test compiled_chunks_identify_the_server_and_old_snapshots_have_no_proposal ... ok
test edition_default_is_explicit_and_build_selected ... ok
test large_valid_port_policy_is_split_without_a_port_count_cap ... ok
test port_grant_narrows_allow_opens_deny_and_preserves_direction ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.99s

     Running tests/kernel.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/kernel-5b936888583d9b02)

running 6 tests
test bulk_retirement_preserves_identity_and_routes_at_1000_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test created_interface_is_marked_for_restart_adoption ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test policy_table_route_conflict_is_refused ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test real_kernel_chunked_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test real_kernel_ephemeral_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.
test retired_host_routes_can_be_replayed ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/policy_enrollment_binding.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/policy_enrollment_binding-1e6cb1af5276547b)

running 4 tests
test explicit_binding_preserves_identity_and_clears_removal_only_on_enrollment ... ok
test host_binding_requires_global_authority_and_existing_unrevoked_host ... ok
test noncanonical_host_binding_is_refused ... ok
test refused_enrollment_preserves_removal_and_revision ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.39s

     Running tests/policy_enrollment_identity.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/policy_enrollment_identity-4dedd940fcf80b80)

running 1 test
test unbound_enrollment_public_key_is_not_host_authority ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s

     Running tests/policy_snapshot_ordering.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/policy_snapshot_ordering-786d38945646c0be)

running 6 tests
test nf_tables_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173.
test nf_tables_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173.
test nf_tables_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173.
test nft_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173.
test nft_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173.
test nft_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/restart_route_ownership.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/restart_route_ownership-992b255b044a9651)

running 1 test
test orphan_route_retirement_preserves_foreign_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_authorized_reenrollment.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/review_authorized_reenrollment-d2ed2d46cb4dbd65)

running 2 tests
test nf_tables_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173.
test nft_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_endpoint_transaction.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/review_endpoint_transaction-7aa2e6d5c84483ef)

running 1 test
test refused_endpoint_persistence_preserves_kernel_endpoint ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_firewall_marker.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/review_firewall_marker-ad98c08959d40740)

running 2 tests
test nf_tables_marker_substring_is_not_chain_ownership ... ignored, Run in a disposable user/network namespace, #173.
test nft_marker_substring_is_not_table_ownership ... ignored, Run in a disposable user/network namespace, #173.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_ingress_translation.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/review_ingress_translation-9963f8f8e8768c22)

running 2 tests
test nf_tables_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test nft_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_local_delivery.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/review_local_delivery-19483e34d744b3a5)

running 2 tests
test nf_tables_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test nft_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_restart_routes.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/review_restart_routes-625128aab2b72d2b)

running 1 test
test restart_retires_orphan_peer_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_reverse_recreation.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/review_reverse_recreation-a132d0ddcd375f4c)

running 4 tests
Final branch-head scripts/verify fast output verbatim, part 2/12. Head 28bbc0b6fa18356a992c2ec215213d5d732d271b; exit1, only static sizes fail. SHA256 b935fbfa77756bb873f44a315d1f3f61b1a57f4622068c4961eea6d8e8421447. RTT row ran on VM208/shared lock with identical script SHA815c3bee752af0471ab9bf47b671e4729f2ef0cb7659a6655e8b8e24e4b7b73d. Functional transcript durations are not accepted performance measurements. ```text test remote_client::server_path::tests::healthy_mesh_probes_do_not_inherit_the_previous_paths_rtt ... ok test remote_client::server_path::tests::invalid_application_proof_keeps_the_live_fallback ... ok test remote_client::server_path::tests::parked_fallback_recovers_mesh_and_keeps_control_actions_usable ... ok test remote_client::server_path::tests::proven_mesh_destination_is_preferred_and_failure_returns_to_enrolled_port ... ok test remote_client::server_path::tests::retained_mesh_proposal_connects_when_the_fallback_port_is_unavailable ... ok test remote_client::server_path::tests::review_silent_mesh_interruption_returns_to_fallback_within_local_reconnect_budget ... ignored, Run alone on the perf VM under the shared benchmark lock. test remote_client::server_path::tests::untrusted_candidate_never_retires_the_authenticated_fallback ... ok test remote_client::tests::delayed_proxy_keeps_replies_bound_to_the_original_udp_client ... ok test remote_client::tests::expired_local_identity_stops_instead_of_retrying_forever ... ok test remote_client::tests::idle_timers::mesh_idle_timer_cost_at_one_thousand_connections ... ignored, Release-only perf VM measurement under the shared benchmark lock. test remote_client::tests::prefixed_control_keeps_coalesced_suffix_and_suppresses_only_its_greeting ... ok test remote_client::tests::proven_tcp_decoder_preserves_mux_envelopes_and_buffered_suffix ... ok test remote_client::tests::rootless_uid_mismatch_is_refused_before_dial ... ok test remote_client::tests::server_path_capability_is_advertised_on_native_and_fallback_transports ... ok test remote_client::tests::supervisor_300ms_quic_and_blocked_udp_fallback ... ignored, supervisor establishment diagnostic; run alone without builds or browsers test remote_client::tests::tcp_proxy_flushes_bounded_flood_before_half_close ... ok test remote_client::tests::tcp_proxy_preserves_spacing_between_packets_already_in_flight ... ok test remote_client::tests::tcp_winner_cancels_silent_udp_drivers_without_waiting_for_drain ... ok test remote_client::tests::unavailable_udp_does_not_add_seconds_before_tcp_admission ... ok test remote_client::tests::winning_quic_drops_the_unfinished_tls_dial_before_control_dispatch ... ok test remote_cursor::tests::exact_unsigned_cursor_and_whole_object_are_required ... ok test remote_native_tests::bound_writer_uses_raw_frames_and_rejects_cross_writer_transmit ... ok test remote_native_tests::control_must_be_host_initiated_stream_zero_and_terminal_halves_cannot_impersonate_it ... ok test remote_native_tests::partial_native_write_cancellation_retires_both_directions ... ok test remote_native_tests::primed::negotiated_connection_keeps_unmarked_new_writers_ordinary ... ok test remote_native_tests::primed::ordinary_native_writer_refuses_the_additive_cursor_request ... ok test remote_native_tests::primed::prime_marker_is_canonical_and_requires_negotiated_permission ... ok test remote_native_tests::primed::primed_writer_acknowledges_before_reading_credit_funded_cursor ... ok test remote_native_tests::terminal::credits::private_credit_burst_waits_for_its_shim_without_retiring_native_stream ... ok test remote_native_tests::terminal::gone_review::retired_native_session_delivers_saved_status_then_final_close_before_retirement ... ok test remote_native_tests::terminal::gone_review::retired_native_status_bounds_final_reply_drain_for_a_stuck_peer ... ok test remote_native_tests::terminal::gone_review::retiring_native_handshake_preserves_final_answer_with_inflight_commands ... ok test remote_native_tests::terminal::gone_review::vanished_native_session_bounds_final_reply_drain_for_a_stuck_peer ... ok test remote_native_tests::terminal::gone_review::vanished_native_session_delivers_final_close_before_stream_retirement ... ok test remote_native_tests::terminal::real_pty_resumes_native_writer_after_25_connection_replacements ... ignored, real CLI/shim oracle; set INFRATERNAL_TEST_BINARY and run alone under CPUWeight10000 test sessions::tests::borrowed_reader_payload_uses_reusable_cancel_safe_storage ... ok test sessions::tests::bounds::discovery_recovers_more_than_128_authenticated_sockets ... ok test sessions::tests::cancelled_fragmented_shim_read_retains_header_and_body_progress ... ok test sessions::tests::ordinary_native_writer_negotiates_queue_backpressure_without_shared_selection ... ok test sessions::tests::post_listen_chmod_wakes_a_connection_refused_at_bind ... ok test sessions::tests::reader_borrow_measurement ... ignored, release borrowed versus owned asynchronous receive measurement test sessions::tests::refused_socket_is_removed_but_insecure_directory_is_rejected ... ok test sessions::tests::sequenced_attach_intersects_caps_and_legacy_attach_stays_zero ... ok test sessions::tests::shared_writer_helper_negotiates_before_sending_its_selector ... ok test sessions::tests::symlink_state_cannot_redirect_private_runtime_storage ... ok test transport::remote_deadline_tests::coalesced_partial_suffix_keeps_its_arrival_deadline ... ok test transport::remote_deadline_tests::queued_suffix_cannot_complete_an_expired_cancelled_frame ... ok test transport::remote_deadline_tests::remote_partial_frame_deadline_survives_receive_cancellation ... ok test transport::remote_deadline_tests::wholly_idle_remote_channel_has_no_frame_expiry ... ok test transport_diagnostics::quic_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test transport_diagnostics::quic_bulk_50m_exact_bytes ... ignored, size investigation diagnostic; run alone without build or browser overlap test transport_diagnostics::tcp_300ms_and_1000_connection_pairs ... ignored, diagnostic only; run alone without build or browser overlap test result: ok. 96 passed; 0 failed; 14 ignored; 0 measured; 0 filtered out; finished in 32.02s Running tests/transport.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/transport-0c6a2226704f5d95) running 2 tests test fragmented_headers_coalesced_frames_and_reusable_transmit ... ok test oversized_header_and_truncated_frame_are_rejected ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.08s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_mesh-b05cf1923316cb2f) running 1 test test cli::tests::mesh_actions_are_complete_with_optional_ssh_connectivity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/default_arrow.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/default_arrow-c3dcd9519cdc97fa) running 1 test test omitted_arrow_ports_default_to_all_services ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/properties.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/properties-5179c55b52944b40) running 14 tests test addresses_are_unique_stable_and_not_recycled ... ok test arrow_replacement_is_atomic_and_unrelated_nodes_keep_their_versions ... ok test checkpoint_after_suffix_change_restores_without_reallocating_addresses ... ok test directional_grants_union_and_minimal_updates ... ok test exhausted_versions_reject_mutations_without_changing_state ... ok test join_to_same_tag_grants_both_initiation_directions ... ok test names_versions_and_backend_status ... ok test overlaps_are_reported_without_silent_range_changes ... ok test private_material_never_enters_debug_or_coordination_serialization ... ok test protocol_port_unions_never_grant_an_unlisted_service ... ok test public_checkpoint_preserves_addresses_rules_versions_and_overlap ... ok test rotation_waits_for_overlap_and_delivery_and_removal_drops_every_key ... ok test seeded_random_sequences_equal_full_compile_and_deny_without_grants ... ok test server_rotation_has_continuous_keys_for_every_node_during_delivery ... ok test result: ok. 14 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 11.29s Running tests/rotation_time.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/rotation_time-a76bcb54ef244af6) running 1 test test unrepresentable_rotation_overlap_rejects_before_mutation ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.05s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_plugin_api-c601f0a1c341cc23) running 20 tests test action::tests::any_of_permissions_are_machine_readable_and_empty_authority_is_rejected ... ok test action::tests::command_result_schema_has_required_stable_fields_and_optional_next_step ... ok test action::tests::command_result_schema_keeps_action_data_typed_inside_stable_envelope ... ok test action::tests::only_hidden_internal_routes_may_use_the_reserved_prefix ... ok test action::tests::registry_keeps_plugin_ownership_and_exact_command_paths ... ok test action::tests::registry_rejects_inconsistent_json_schemas ... ok test action::tests::registry_rejects_missing_action_guidance_and_command_collisions ... ok test admission::tests::memory_refusal_round_trips_without_losing_legacy_error ... ok test component_tests::component_declarations_cannot_create_servers ... ok test component_tests::destructive_actions_require_a_dry_run_and_every_action_has_instructions ... ok test release_version::tests::accepts_only_worker_version_forms ... ok test routing::tests::invalid_or_oversized_topics_are_refused ... ok test routing::tests::topic_is_borrowed_and_other_filter_fields_are_left_to_the_plugin ... ok test tests::deferred_plugin_effect_waits_for_successful_reply_and_drops_on_cancellation ... ok test tests::machine_actions_are_declared_without_entering_human_discovery ... ok test tests::notifications_are_declared_json_bounded_and_drained_once ... ok test tests::operator_presentation_cannot_follow_a_private_control_action ... ok test tests::public_dispatch_cannot_call_a_machine_control_action ... ok test tests::registry_rejects_oversized_json_before_plugin_dispatch ... ok test tests::registry_routes_only_declared_actions ... ok test result: ok. 20 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/routing_review.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/routing_review-fe80451ff0776d50) running 2 tests test review_topic_borrows_plain_and_owns_escaped ... ok test review_topic_refuses_oversize_duplicate_and_deep_input ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_plugin_backup-85810caed1a02b63) running 1 test test cli::tests::backup_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_plugin_host_facts-1e12c32f02c35c56) running 13 tests test memory::tests::custom_policy_rounds_up_and_validates_all_settings_before_use ... ok test memory::tests::default_floor_refuses_only_below_headroom_even_above_128_sessions ... ok test session_counts_tests::host_owned_session_counts_are_additive_and_refresh_on_request ... ok test tests::action_decoders_reject_unknown_and_oversized_fields ... ok test tests::compatibility_fields_are_kept_in_the_rust_shape_and_architecture_on_wire ... ok test tests::configured_memory_floor_refuses_with_current_host_counters ... ok test tests::descriptor_declares_default_settings_actions_and_no_hidden_role_dependency ... ok test tests::linux_load_average_text_ignores_proc_metadata_and_rejects_invalid_values ... ok test tests::macos_load_average_decodes_the_bounded_64_bit_sysctl_shape ... ok test tests::os_release_parser_rejects_unbounded_input_and_ignores_untrusted_lines ... ok test tests::os_release_uses_distribution_name_and_version_without_shell_evaluation ... ok test tests::runtime_disable_drops_cached_facts_and_reenable_collects_them_again ... ok test tests::static_facts_are_cached_and_live_counters_are_collected_only_when_requested ... ok test result: ok. 13 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_plugin_mesh-6f41f5cbba421507) running 36 tests test connection_state::tests::narrowing_depends_on_services_and_direction_not_the_fallback_label ... ok test firewall::tests::already_removed_owned_table_does_not_block_component_cleanup ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::initial_apply_without_adoption_refuses_a_foreign_table ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::real_nft_ownership_atomicity_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test firewall::tests::rule_count_is_independent_of_membership_and_policy_data_is_in_sets ... ok test iptables::tests::contiguous_open_members_use_ranges_without_opening_gaps ... ok test iptables::tests::initiating_prefixes_cover_only_owned_intervals_even_at_family_boundaries ... ok test iptables::tests::real_nf_tables_ownership_partial_family_and_scaled_apply ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test iptables::tests::replacement_retains_established_rules_and_does_not_duplicate_hooks ... ok test netlink::tests::connection_tuple_uses_initiating_service_and_refuses_ambiguous_selectors ... ok test netlink::tests::host_prefix_decoder_refuses_ambiguous_or_malformed_ownership ... ok test netlink::tests::malformed_lengths_and_padding_are_rejected ... ok test netlink::tests::nested_attributes_roundtrip_without_copying_payloads ... ok test netlink::tests::public_host_prefixes_decode_both_families_without_claiming_subnets ... ok test node::rotation_tests::nf_tables_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173. test node::rotation_tests::nft_restart_fences_retained_replacement_address ... ignored, Run in a disposable user/network namespace, #173. test node::tests::chunked_snapshot_is_atomic_and_applies_1000_kernel_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN; use release for timing. test node::tests::explicit_up_recovers_disabled_intent_before_reusing_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node::tests::externally_removed_interface_does_not_block_down ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node::tests::server_identity_cannot_change_inside_a_staged_snapshot ... ok test node_actions::tests::applied_server_route_and_observed_link_survive_only_explicit_component_up ... ignored, Run inside a dedicated kernel namespace with CAP_NET_ADMIN. test node_actions::tests::failed_cleanup_reports_stopping_and_reconnect_keeps_explicit_off ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test node_actions::tests::node_actions_refuse_alternate_forms_duplicates_and_unbounded_input ... ok test node_actions::tests::node_actions_register_without_kernel_work_and_hide_machine_calls ... ok test node_coordination::tests::explicit_off_waits_for_up_and_reconnect_requests_a_snapshot ... ok test node_coordination::tests::refused_delta_recovers_immediately_and_closed_channel_retires_worker ... ok test node_coordination::tests::refused_listener_replacement_preserves_the_current_lease ... ok test node_coordination::tests::removed_binding_can_attach_only_after_authorized_reenrollment ... ok test node_coordination::tests::server_listener_belongs_to_applied_enabled_worker ... ok test node_presentation::tests::legacy_status_remains_readable_and_invalid_link_is_refused ... ok test node_presentation::tests::status_explains_the_observed_server_transport ... ok test node_state::tests::explicit_off_survives_restart_and_snapshot_contains_only_public_fields ... ok test node_state::tests::route_recording_preserves_the_legacy_accepted_state_format ... ok test node_state::tests::unsafe_route_journal_and_existing_temporary_files_are_preserved ... ok test node_state::tests::unsafe_snapshots_and_preexisting_temporary_files_are_not_followed_or_removed ... ok test settings::tests::settings_objects_are_bounded_and_strict_before_storage ... ok test result: ok. 25 passed; 0 failed; 11 ignored; 0 measured; 0 filtered out; finished in 0.66s Running tests/authorized_local_binding.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/authorized_local_binding-02e1712d695000e1) running 2 tests test nf_tables_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173. test nft_local_binding_and_address_recovery ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/canonical_host_binding.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/canonical_host_binding-916e8fce54d8a01d) running 1 test test enrollment_requires_canonical_host_uuid_spelling ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s Running tests/configuration.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/configuration-6f70d40a46624bab) running 5 tests test chunks_fit_body_budget_and_one_peer_delta_does_not_repeat_the_snapshot ... ok test compiled_chunks_identify_the_server_and_old_snapshots_have_no_proposal ... ok test edition_default_is_explicit_and_build_selected ... ok test large_valid_port_policy_is_split_without_a_port_count_cap ... ok test port_grant_narrows_allow_opens_deny_and_preserves_direction ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.99s Running tests/kernel.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/kernel-5b936888583d9b02) running 6 tests test bulk_retirement_preserves_identity_and_routes_at_1000_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test created_interface_is_marked_for_restart_adoption ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test policy_table_route_conflict_is_refused ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test real_kernel_chunked_peers ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test real_kernel_ephemeral_identity ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test retired_host_routes_can_be_replayed ... ignored, Run inside a dedicated network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/policy_enrollment_binding.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/policy_enrollment_binding-1e6cb1af5276547b) running 4 tests test explicit_binding_preserves_identity_and_clears_removal_only_on_enrollment ... ok test host_binding_requires_global_authority_and_existing_unrevoked_host ... ok test noncanonical_host_binding_is_refused ... ok test refused_enrollment_preserves_removal_and_revision ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.39s Running tests/policy_enrollment_identity.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/policy_enrollment_identity-4dedd940fcf80b80) running 1 test test unbound_enrollment_public_key_is_not_host_authority ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.11s Running tests/policy_snapshot_ordering.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/policy_snapshot_ordering-786d38945646c0be) running 6 tests test nf_tables_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173. test nf_tables_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173. test nf_tables_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173. test nft_equal_version_conflicting_snapshot_is_refused ... ignored, Run in a disposable user/network namespace, #173. test nft_snapshot_cannot_replace_local_node_identity ... ignored, Run in a disposable user/network namespace, #173. test nft_split_snapshot_replay_requires_complete_identical_contents ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 6 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/restart_route_ownership.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/restart_route_ownership-992b255b044a9651) running 1 test test orphan_route_retirement_preserves_foreign_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_authorized_reenrollment.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/review_authorized_reenrollment-d2ed2d46cb4dbd65) running 2 tests test nf_tables_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173. test nft_authorized_reenrollment_reaches_the_live_node ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_endpoint_transaction.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/review_endpoint_transaction-7aa2e6d5c84483ef) running 1 test test refused_endpoint_persistence_preserves_kernel_endpoint ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_firewall_marker.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/review_firewall_marker-ad98c08959d40740) running 2 tests test nf_tables_marker_substring_is_not_chain_ownership ... ignored, Run in a disposable user/network namespace, #173. test nft_marker_substring_is_not_table_ownership ... ignored, Run in a disposable user/network namespace, #173. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_ingress_translation.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/review_ingress_translation-9963f8f8e8768c22) running 2 tests test nf_tables_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test nft_translated_underlay_ingress_is_refused ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_local_delivery.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/review_local_delivery-19483e34d744b3a5) running 2 tests test nf_tables_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test nft_node_local_mesh_delivery_remains_available ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_restart_routes.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/review_restart_routes-625128aab2b72d2b) running 1 test test restart_retires_orphan_peer_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_reverse_recreation.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/review_reverse_recreation-a132d0ddcd375f4c) running 4 tests ```
Author
Owner

Final branch-head scripts/verify fast output verbatim, part 3/12. Head 28bbc0b6fa; exit1, only static sizes fail. SHA256 b935fbfa77756bb873f44a315d1f3f61b1a57f4622068c4961eea6d8e8421447. RTT row ran on VM208/shared lock with identical script SHA815c3bee752af0471ab9bf47b671e4729f2ef0cb7659a6655e8b8e24e4b7b73d. Functional transcript durations are not accepted performance measurements.

test nf_tables_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.
test nf_tables_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.
test nft_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.
test nft_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173.

test result: ok. 0 passed; 0 failed; 4 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_revoked_host_policy.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/review_revoked_host_policy-2fd90bdd996ee373)

running 1 test
test revoked_host_is_not_retained_in_compiled_peer_policy ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.15s

     Running tests/review_route_inventory.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/review_route_inventory-a2c11b0ea4c09fa0)

running 2 tests
test refused_recovery_inventory_save_does_not_retire_kernel_peers_or_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.
test restart_preserves_unrecorded_direct_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_route_scope.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/review_route_scope-82ef3cd668a5c05b)

running 1 test
test restart_preserves_operator_gateway_host_route ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_shutdown_budget.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/review_shutdown_budget-92a56d096d3b9b35)

running 1 test
test shipping_mesh_down_1000_peers_finishes_within_one_second ... ignored, Run in a dedicated user/network namespace under CPUWeight=10000 with INFRATERNAL_BIN pointing to the shipping release binary.

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/review_shutdown_restart.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/review_shutdown_restart-6fb2514720e23bbe)

running 3 tests
test crash_child ... ignored, Child-only fixture for the weighted user/network namespace restart proof.
test refused_journal_retirement_keeps_stopping_until_explicit_retry ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000.
test restart_finishes_interrupted_down_at_1000_peers ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000.

test result: ok. 0 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/settings.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/settings-09c6f45130d46b90)

running 1 test
test default_switch_requires_owner_freshness_and_the_preview_revision ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.21s

     Running tests/store.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/store-85e53d30e28569e2)

running 5 tests
test absent_discovery_preserves_the_last_known_endpoint ... ok
test key_replacement_preserves_identity_and_addresses_after_restart ... ok
test removed_host_cannot_restore_membership_without_authorized_enrollment ... ok
test required_server_membership_cannot_be_deleted ... ok
test scale_preview_pages_do_not_allocate_the_pair_matrix ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.02s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_plugin_relay-47b92256ba7e458c)

running 1 test
test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_plugin_release-16e9e73589b1e60f)

running 8 tests
test latest::tests::cancellation_joins_verification ... ok
test latest::tests::startup_reclaims_only_owned_inactive_private_metadata ... ok
test service::tests::api_setting_requires_owner_and_current_fresh_session ... ok
test service::tests::authority_is_rechecked_after_the_setting_write_before_commit ... ok
test service::tests::channel_reads_at_fifty_concurrent_callers ... ignored, run alone under CPUWeight=10000; measures SQLite action overhead, not terminal or full authenticated socket latency
test service::tests::default_stable_refuses_silent_edge_and_persists_explicit_opt_in ... ok
test service::tests::disabled_feature_starts_no_lookup_and_rejects_settings ... ok
test service::tests::object_input_rejects_duplicates_unknown_fields_and_alternate_representations ... ok

test result: ok. 7 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 1.15s

     Running tests/review_pool.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/review_pool-a5ae45463b56b863)

running 1 test
test pending_channel_writers_preserve_authority_read_capacity ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.62s

     Running tests/review_restart.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/review_restart-d5419ea9777c8002)

running 4 tests
test lookup_creates_private_staging_under_owner_restrictive_umask ... ok
test partial_metadata_restart_child ... ignored, subprocess helper for metadata restart verification
test restarted_latest_reclaims_metadata_after_process_stop ... ok
test restricted_umask_lookup_child ... ignored, subprocess helper for restricted-umask lookup verification

test result: ok. 2 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.31s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_plugin_remote-0cc47222d049d6a1)

running 18 tests
test inventory::authority_tests::inventory_events_keep_the_subscription_generation ... ok
test inventory::authority_tests::revocation_cancels_a_result_waiting_for_socket_credit ... ok
test inventory::tests::inventory_descriptor_is_valid_for_server_startup ... ok
test inventory::tests::list_input_refuses_parallel_authority_and_noncanonical_cursors ... ok
test remote_quic::tests::acknowledged_idle_survives_and_replayed_packets_cannot_mask_failure ... ok
test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok
test remote_quic::tests::mesh_liveness_keeps_authentication_and_refuses_invalid_intervals ... ok
test remote_quic::tests::one_way_authenticated_output_keeps_the_path_fresh ... ok
test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok
test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok
test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok
test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok
test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok
test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok
test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok
test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok
test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok
test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok

test result: ok. 18 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.91s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_plugin_ssh-6a6f63606bc9ecad)

running 15 tests
test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok
test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok
test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok
test auth_order::tests::only_exact_generated_read_only_checks_can_choose_credentials ... ok
test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok
test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok
test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok
test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok
test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok
test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok
test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok
test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok
test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle
test prompt_image::tests::helper_identity_refuses_in_place_and_path_replacement ... ok
test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok

test result: ok. 14 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.26s

     Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/auth_order-f78cc1dee4b06c31)

running 7 tests
test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok
test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok
test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok
test only_exhausted_auth_returns_typed_choose_method ... ok
test ownership_check_fallback_repeats_only_the_allowlisted_read_only_command ... ok
test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok
test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s

     Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/build_removal-253a4c925e5f39ec)

running 1 test
test build_without_default_plugins_excludes_ssh_dependency ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.95s

     Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/concurrency-be6c561d159ecb5d)

running 7 tests
test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend
test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok
test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok
test component_off_retires_a_real_native_helper ... ok
test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok
test entire_batch_validates_before_start_and_duplicates_are_refused ... ok
test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok

test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.13s

     Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/config_isolation-36494b162d480b2b)

running 2 tests
test configured_identity_paths_are_not_inherited_by_the_command_child ... ok
test synthetic_master_socket_is_private_at_creation ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.34s

     Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/credentials-ebf5e138f5fb987d)

running 4 tests
test credential_helper_refuses_host_trust_and_permission_prompts ... ok
test kernel_running_helper_is_materialized_in_its_private_scope ... ok
test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok
test password_socket_refuses_an_unrelated_same_user_process ... ok

test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.53s

     Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/diagnostics-e49727da7f718425)

running 11 tests
test bootstrap_status_mapping_covers_each_step_and_approved_mode ... ok
test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok
test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok
test engine_failures_keep_their_ssh_boundary_without_remote_bytes ... ok
test every_failed_step_names_the_step_and_a_next_action ... ok
test failed_join_retains_only_the_allowlisted_host_dns_error ... ok
test failure_diagnostics_distinguish_auth_trust_transport_and_channel_without_raw_text ... ok
test join_stage_state_refusal_keeps_join_recovery_guidance ... ok
test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok
test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok
test status_mapping_preserves_authentication_and_missing_payload_classification ... ok

test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/event_metadata-1e4844aa689cc5bb)

running 1 test
test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/foreground-dd7cdc0f2219b614)

running 1 test
test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.23s

     Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/host_trust-0b542cac1c02e799)

running 2 tests
test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key
test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/install.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/install-6999211aa6d0fbca)

running 48 tests
test acknowledged_linger_noop_does_not_own_later_external_enable ... ok
test active_service_stop_failure_never_replaces_live_artifacts ... ok
test active_transaction_is_live_between_ssh_setup_commands ... ok
test breakit2_interrupted_lock_creation_allows_cleanup_and_retry ... ok
test breakit2_rollback_preserves_foreign_launcher_new ... ok
test breakit2_rollback_preserves_foreign_unit_new ... ok
test breakit2_stage_refuses_parent_that_cannot_be_rolled_back ... ok
test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok
test command_failure_names_upload_join_install_and_start_separately ... ok
test denied_linger_request_does_not_undo_a_later_external_enable ... ok
test earlier_attempt_classification_preserves_status_boundary_and_authentication ... ok
test earlier_attempt_records_reject_suffixes_truncation_and_unbounded_counts ... ok
test enrollment_process_exit_71_is_not_reported_as_directory_refusal ... ok
test failed_upgrade_preserves_previous_binary_state_and_unit ... ok
test foreign_data_refusal_retains_exit_status_and_actionable_directory ... ok
test foreign_files_and_another_attempt_lock_are_never_removed ... ok
test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok
test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok
test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok
test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok
test fresh_receipt_is_removed_before_transaction_rollback ... ok
test fresh_rollback_resumes_after_transaction_directory_removal ... ok
test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok
test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok
test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok
test full_stage_frees_payload_before_allocating_a_cleanup_receipt ... ok
test interrupted_acquisition_cleanup_receipt_can_resume ... ok
test interrupted_linger_reply_retains_intent_for_cleanup ... ok
test interrupted_restore_recreates_links_without_deleting_the_original ... ok
test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok
test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok
test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok
test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok
test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok
test payload_reuse_never_adopts_a_foreign_cache_directory ... ok
test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok
test refused_previous_service_stop_only_removes_staging ... ok
test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok
test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok
test retry_resends_payload_when_cache_content_changes ... ok
test retry_reuses_verified_payload_after_owned_rollback ... ok
test review_interrupted_transaction_receipt_allows_owned_cleanup ... ok
test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok
test setup_transaction_holds_a_live_lock_between_shell_commands ... ok
test stale_previous_attempt_socket_can_be_retired_without_manual_cleanup ... ok
test start_fresh_resumes_the_same_attempt_after_owner_confirmation ... ok
test turning_off_paused_host_provisioning_preserves_earlier_leftovers ... ok
test writable_installation_is_refused_before_upload_or_cleanup ... ok

test result: ok. 48 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 46.59s

     Running tests/mesh_ssh.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/mesh_ssh-4a0f79768b79bf0e)

running 1 test
test network_identity_connect_check_and_changed_key_refusal ... ignored, requires the Go interoperability fixture; run research/ssh-client/mesh-fixture/run

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/model.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/model-aa5d54a8fa1538a1)

running 6 tests
test addresses_never_become_options_or_shell_syntax ... ok
test check_is_exact_bounded_and_rejects_every_truncation ... ok
test consent_and_credential_references_are_the_only_request_authority ... ok
test passwordless_sudo_keeps_default_rootless_without_explicit_consent ... ok
test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok
test start_fresh_is_declared_as_an_owned_host_provisioning_action ... ok

test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running tests/payload_source.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/payload_source-d6f1e1c864fc0b02)

running 2 tests
test stalled_download_retains_the_named_step_before_the_attempt_deadline ... ok
test verification_failure_names_step_and_stops_before_upload ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/previous_attempt_liveness_review.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/previous_attempt_liveness_review-654b7d16bab6d33d)

running 1 test
test home_alias_keeps_open_setup_descriptor_live ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.44s

     Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/probe_check-f3b0fb8475856a2e)

running 3 tests
test breakit2_no_systemd_names_the_required_manager ... ok
test manager_availability_does_not_request_its_private_environment ... ok
test shell_startup_refusal_names_an_interactive_only_remedy ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.17s

     Running tests/process.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/process-ee385aa3b6bba8e2)

running 5 tests
test cancellation_retires_the_helper_descendant_too ... ok
test completed_helper_retires_descendants_with_closed_pipes ... ok
test group_identity_is_retained_until_inherited_pipes_finish ... ok
test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok
test reviewer_ssh_helper_does_not_inherit_server_reload_mask ... ok

test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.46s

     Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/proxy_policy-6168b25c0aef8710)

running 1 test
test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/real_ssh-64ea6957d0d5a5fd)

running 1 test
test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/single_connection-3376e0f2c78cf37d)

running 1 test
test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only

test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/source_completeness-a25b442d7fcaea9f)

running 1 test
test declared_public_modules_have_committed_sources ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s

     Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/trust_round2-941560f7296ab4d7)

running 2 tests
test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target
test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials

test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68)

running 7 tests
test stream_tests::all_short_frame_splits_match_direct_decoding ... ok
test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok
test stream_tests::split_mux_header_preserves_trailing_close ... ok
test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok
test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok
test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok
test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_server-91a469d241a2f514)

running 471 tests
Final branch-head scripts/verify fast output verbatim, part 3/12. Head 28bbc0b6fa18356a992c2ec215213d5d732d271b; exit1, only static sizes fail. SHA256 b935fbfa77756bb873f44a315d1f3f61b1a57f4622068c4961eea6d8e8421447. RTT row ran on VM208/shared lock with identical script SHA815c3bee752af0471ab9bf47b671e4729f2ef0cb7659a6655e8b8e24e4b7b73d. Functional transcript durations are not accepted performance measurements. ```text test nf_tables_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test nf_tables_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test nft_ipv4_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test nft_ipv6_retired_tcp_stops_after_reverse_traffic ... ignored, Run in a disposable user/network namespace with the kernel_node example built, #173. test result: ok. 0 passed; 0 failed; 4 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_revoked_host_policy.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/review_revoked_host_policy-2fd90bdd996ee373) running 1 test test revoked_host_is_not_retained_in_compiled_peer_policy ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.15s Running tests/review_route_inventory.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/review_route_inventory-a2c11b0ea4c09fa0) running 2 tests test refused_recovery_inventory_save_does_not_retire_kernel_peers_or_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test restart_preserves_unrecorded_direct_host_routes ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_route_scope.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/review_route_scope-82ef3cd668a5c05b) running 1 test test restart_preserves_operator_gateway_host_route ... ignored, Run inside a dedicated user/network namespace with CAP_NET_ADMIN. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_shutdown_budget.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/review_shutdown_budget-92a56d096d3b9b35) running 1 test test shipping_mesh_down_1000_peers_finishes_within_one_second ... ignored, Run in a dedicated user/network namespace under CPUWeight=10000 with INFRATERNAL_BIN pointing to the shipping release binary. test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/review_shutdown_restart.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/review_shutdown_restart-6fb2514720e23bbe) running 3 tests test crash_child ... ignored, Child-only fixture for the weighted user/network namespace restart proof. test refused_journal_retirement_keeps_stopping_until_explicit_retry ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000. test restart_finishes_interrupted_down_at_1000_peers ... ignored, Run inside a dedicated user/network namespace under CPUWeight=10000. test result: ok. 0 passed; 0 failed; 3 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/settings.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/settings-09c6f45130d46b90) running 1 test test default_switch_requires_owner_freshness_and_the_preview_revision ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.21s Running tests/store.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/store-85e53d30e28569e2) running 5 tests test absent_discovery_preserves_the_last_known_endpoint ... ok test key_replacement_preserves_identity_and_addresses_after_restart ... ok test removed_host_cannot_restore_membership_without_authorized_enrollment ... ok test required_server_membership_cannot_be_deleted ... ok test scale_preview_pages_do_not_allocate_the_pair_matrix ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.02s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_plugin_relay-47b92256ba7e458c) running 1 test test cli::tests::relay_actions_are_complete_and_unavailable_until_runtime_exists ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_plugin_release-16e9e73589b1e60f) running 8 tests test latest::tests::cancellation_joins_verification ... ok test latest::tests::startup_reclaims_only_owned_inactive_private_metadata ... ok test service::tests::api_setting_requires_owner_and_current_fresh_session ... ok test service::tests::authority_is_rechecked_after_the_setting_write_before_commit ... ok test service::tests::channel_reads_at_fifty_concurrent_callers ... ignored, run alone under CPUWeight=10000; measures SQLite action overhead, not terminal or full authenticated socket latency test service::tests::default_stable_refuses_silent_edge_and_persists_explicit_opt_in ... ok test service::tests::disabled_feature_starts_no_lookup_and_rejects_settings ... ok test service::tests::object_input_rejects_duplicates_unknown_fields_and_alternate_representations ... ok test result: ok. 7 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 1.15s Running tests/review_pool.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/review_pool-a5ae45463b56b863) running 1 test test pending_channel_writers_preserve_authority_read_capacity ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.62s Running tests/review_restart.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/review_restart-d5419ea9777c8002) running 4 tests test lookup_creates_private_staging_under_owner_restrictive_umask ... ok test partial_metadata_restart_child ... ignored, subprocess helper for metadata restart verification test restarted_latest_reclaims_metadata_after_process_stop ... ok test restricted_umask_lookup_child ... ignored, subprocess helper for restricted-umask lookup verification test result: ok. 2 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.31s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_plugin_remote-0cc47222d049d6a1) running 18 tests test inventory::authority_tests::inventory_events_keep_the_subscription_generation ... ok test inventory::authority_tests::revocation_cancels_a_result_waiting_for_socket_credit ... ok test inventory::tests::inventory_descriptor_is_valid_for_server_startup ... ok test inventory::tests::list_input_refuses_parallel_authority_and_noncanonical_cursors ... ok test remote_quic::tests::acknowledged_idle_survives_and_replayed_packets_cannot_mask_failure ... ok test remote_quic::tests::host_cannot_open_a_second_server_control_stream ... ok test remote_quic::tests::mesh_liveness_keeps_authentication_and_refuses_invalid_intervals ... ok test remote_quic::tests::one_way_authenticated_output_keeps_the_path_fresh ... ok test remote_quic::tests::repeated_native_id_has_distinct_server_writer_authority_and_preserves_suffix ... ok test remote_quic::tests::wrong_server_name_never_yields_authenticated_connection ... ok test remote_tls::tests::cancelled_partial_write_cannot_reuse_the_channel ... ok test remote_tls::tests::mutual_tls_delivers_exact_bytes_and_verified_leaf_fingerprints ... ok test remote_tls::tests::stalled_write_retires_both_directions_without_idle_polling ... ok test remote_tls::tests::untrusted_client_never_reaches_server_admission ... ok test remote_tls::tests::untrusted_server_or_wrong_server_name_is_refused_before_bytes ... ok test uninstall::tests::bootstrap_lock_delays_uninstall_without_omitting_its_handler ... ok test uninstall::tests::retirement_signals_the_shell_after_its_foreground_job_exits ... ok test uninstall::tests::uninstall_never_accepts_request_selected_paths_or_foreign_identity ... ok test result: ok. 18 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 7.91s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_plugin_ssh-6a6f63606bc9ecad) running 15 tests test auth_once::tests::caller_cannot_choose_or_extend_the_expiry_clock ... ok test auth_once::tests::each_method_consumes_once_and_expiry_erases_both_methods ... ok test auth_once::tests::invalid_material_is_refused_before_any_helper_or_scheduling ... ok test auth_order::tests::only_exact_generated_read_only_checks_can_choose_credentials ... ok test cli::tests::ssh_actions_are_complete_and_marked_unavailable ... ok test config::tests::configured_private_sources_are_excluded_and_public_trust_is_retained ... ok test config::tests::flattened_quoted_public_filenames_are_refused_when_existing_trust_would_be_lost ... ok test config::tests::malformed_public_policy_is_refused_before_it_can_change_command_arguments ... ok test config::tests::trust_lookup_uses_every_explicit_alias_verbatim ... ok test config::tests::unresolved_or_relative_public_paths_cannot_admit_first_contact ... ok test manifest::tests::node_provisioning_declares_an_existing_server_and_only_node_components ... ok test prompt::tests::helper_reply_requires_the_registered_parent_and_is_served_once ... ok test prompt::tests::reply_fixture ... ignored, private subprocess for the one-reply peer oracle test prompt_image::tests::helper_identity_refuses_in_place_and_path_replacement ... ok test transport::secret_tests::secret_input_has_a_fixed_bound_and_accepts_only_strings ... ok test result: ok. 14 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.26s Running tests/auth_order.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/auth_order-f78cc1dee4b06c31) running 7 tests test authentication_never_replays_a_mutating_first_command_or_reuses_a_failed_scope ... ok test cancelling_authentication_consumes_the_attempt_without_requesting_secrets ... ok test later_command_auth_errors_never_restart_the_selected_method_sequence ... ok test only_exhausted_auth_returns_typed_choose_method ... ok test ownership_check_fallback_repeats_only_the_allowlisted_read_only_command ... ok test successful_authentication_is_reported_and_later_secrets_are_never_requested ... ok test trust_network_and_remote_command_failures_stop_without_loading_local_secrets ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.02s Running tests/build_removal.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/build_removal-253a4c925e5f39ec) running 1 test test build_without_default_plugins_excludes_ssh_dependency ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.95s Running tests/concurrency.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/concurrency-be6c561d159ecb5d) running 7 tests test a_thousand_admitted_targets_keep_eight_active_backend_calls ... ignored, explicit CPUWeight10000 scale measurement with a controlled unavailable backend test an_interrupted_disable_keeps_admission_closed_until_its_adapter_retires ... ok test authenticated_batches_retain_an_opaque_session_for_trusted_issuance ... ok test component_off_retires_a_real_native_helper ... ok test concurrency_is_eight_across_batches_and_all_ten_hosts_fail_independently ... ok test entire_batch_validates_before_start_and_duplicates_are_refused ... ok test turning_off_drains_queued_work_and_reenable_never_resumes_old_batches ... ok test result: ok. 6 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.13s Running tests/config_isolation.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/config_isolation-36494b162d480b2b) running 2 tests test configured_identity_paths_are_not_inherited_by_the_command_child ... ok test synthetic_master_socket_is_private_at_creation ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.34s Running tests/credentials.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/credentials-ebf5e138f5fb987d) running 4 tests test credential_helper_refuses_host_trust_and_permission_prompts ... ok test kernel_running_helper_is_materialized_in_its_private_scope ... ok test password_helpers_prepare_a_fresh_private_root_and_remove_only_their_directory ... ok test password_socket_refuses_an_unrelated_same_user_process ... ok test result: ok. 4 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 2.53s Running tests/diagnostics.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/diagnostics-e49727da7f718425) running 11 tests test bootstrap_status_mapping_covers_each_step_and_approved_mode ... ok test dynamic_public_trust_is_retained_without_becoming_file_only_admission ... ok test effective_configuration_never_scans_a_proxy_or_invalid_endpoint ... ok test engine_failures_keep_their_ssh_boundary_without_remote_bytes ... ok test every_failed_step_names_the_step_and_a_next_action ... ok test failed_join_retains_only_the_allowlisted_host_dns_error ... ok test failure_diagnostics_distinguish_auth_trust_transport_and_channel_without_raw_text ... ok test join_stage_state_refusal_keeps_join_recovery_guidance ... ok test mesh_policy_requires_both_discovery_facts_and_a_transport_refusal ... ok test remote_command_text_is_not_ssh_authority_and_never_enters_logs ... ok test status_mapping_preserves_authentication_and_missing_payload_classification ... ok test result: ok. 11 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/event_metadata.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/event_metadata-1e4844aa689cc5bb) running 1 test test unsupported_host_reports_method_and_retry_never_replays_it_as_current ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/foreground.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/foreground-dd7cdc0f2219b614) running 1 test test configured_backgrounding_is_overridden_for_owned_bootstrap_commands ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.23s Running tests/host_trust.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/host_trust-0b542cac1c02e799) running 2 tests test configured_known_hosts_command_revocation_cannot_offer_first_contact ... ignored, run through research/ssh-client/measure.py with its synthetic public host key test first_contact_needs_fresh_authority_and_never_replaces_existing_trust ... ignored, run through research/ssh-client/measure.py --negative-trust-oracle with its memory-held synthetic key test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/install.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/install-6999211aa6d0fbca) running 48 tests test acknowledged_linger_noop_does_not_own_later_external_enable ... ok test active_service_stop_failure_never_replaces_live_artifacts ... ok test active_transaction_is_live_between_ssh_setup_commands ... ok test breakit2_interrupted_lock_creation_allows_cleanup_and_retry ... ok test breakit2_rollback_preserves_foreign_launcher_new ... ok test breakit2_rollback_preserves_foreign_unit_new ... ok test breakit2_stage_refuses_parent_that_cannot_be_rolled_back ... ok test cleanup_receipt_cannot_authorize_a_replaced_unowned_directory ... ok test command_failure_names_upload_join_install_and_start_separately ... ok test denied_linger_request_does_not_undo_a_later_external_enable ... ok test earlier_attempt_classification_preserves_status_boundary_and_authentication ... ok test earlier_attempt_records_reject_suffixes_truncation_and_unbounded_counts ... ok test enrollment_process_exit_71_is_not_reported_as_directory_refusal ... ok test failed_upgrade_preserves_previous_binary_state_and_unit ... ok test foreign_data_refusal_retains_exit_status_and_actionable_directory ... ok test foreign_files_and_another_attempt_lock_are_never_removed ... ok test fresh_cleanup_refuses_a_shared_writable_receipt_parent_before_mutation ... ok test fresh_cleanup_resumes_after_base_removal_and_retires_its_receipt ... ok test fresh_cleanup_resumes_after_owner_marker_removal_with_a_fresh_session ... ok test fresh_failure_removes_owned_artifacts_and_success_can_rejoin ... ok test fresh_receipt_is_removed_before_transaction_rollback ... ok test fresh_rollback_resumes_after_transaction_directory_removal ... ok test fresh_runtime_empty_directories_do_not_block_rollback_and_retry ... ok test fresh_runtime_symlink_never_removes_foreign_empty_directories ... ok test fresh_runtime_unexpected_data_keeps_ownership_and_cleanup_receipt ... ok test full_stage_frees_payload_before_allocating_a_cleanup_receipt ... ok test interrupted_acquisition_cleanup_receipt_can_resume ... ok test interrupted_linger_reply_retains_intent_for_cleanup ... ok test interrupted_restore_recreates_links_without_deleting_the_original ... ok test interrupted_rollback_never_deletes_already_restored_state_on_retry ... ok test interrupted_upgrade_after_acknowledged_stop_restarts_the_previous_service ... ok test linger_policy_denial_is_a_warning_and_owned_changes_are_reversible ... ok test linked_owner_marker_is_refused_before_retiring_the_transaction ... ok test malformed_or_exposed_cleanup_receipts_never_remove_the_owned_root ... ok test payload_reuse_never_adopts_a_foreign_cache_directory ... ok test pending_fresh_cleanup_refuses_replacement_staging_until_finished ... ok test refused_previous_service_stop_only_removes_staging ... ok test rejoin_preserves_existing_host_identity_in_the_private_staging_state ... ok test retry_cleanup_uses_fresh_session_and_preserves_privilege_consent ... ok test retry_resends_payload_when_cache_content_changes ... ok test retry_reuses_verified_payload_after_owned_rollback ... ok test review_interrupted_transaction_receipt_allows_owned_cleanup ... ok test rollback_stop_refusal_retains_artifacts_for_later_cleanup ... ok test setup_transaction_holds_a_live_lock_between_shell_commands ... ok test stale_previous_attempt_socket_can_be_retired_without_manual_cleanup ... ok test start_fresh_resumes_the_same_attempt_after_owner_confirmation ... ok test turning_off_paused_host_provisioning_preserves_earlier_leftovers ... ok test writable_installation_is_refused_before_upload_or_cleanup ... ok test result: ok. 48 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 46.59s Running tests/mesh_ssh.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/mesh_ssh-4a0f79768b79bf0e) running 1 test test network_identity_connect_check_and_changed_key_refusal ... ignored, requires the Go interoperability fixture; run research/ssh-client/mesh-fixture/run test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/model.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/model-aa5d54a8fa1538a1) running 6 tests test addresses_never_become_options_or_shell_syntax ... ok test check_is_exact_bounded_and_rejects_every_truncation ... ok test consent_and_credential_references_are_the_only_request_authority ... ok test passwordless_sudo_keeps_default_rootless_without_explicit_consent ... ok test root_consent_is_required_before_ssh_and_uid_zero_cannot_be_rootless ... ok test start_fresh_is_declared_as_an_owned_host_provisioning_action ... ok test result: ok. 6 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running tests/payload_source.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/payload_source-d6f1e1c864fc0b02) running 2 tests test stalled_download_retains_the_named_step_before_the_attempt_deadline ... ok test verification_failure_names_step_and_stops_before_upload ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/previous_attempt_liveness_review.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/previous_attempt_liveness_review-654b7d16bab6d33d) running 1 test test home_alias_keeps_open_setup_descriptor_live ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.44s Running tests/probe_check.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/probe_check-f3b0fb8475856a2e) running 3 tests test breakit2_no_systemd_names_the_required_manager ... ok test manager_availability_does_not_request_its_private_environment ... ok test shell_startup_refusal_names_an_interactive_only_remedy ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.17s Running tests/process.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/process-ee385aa3b6bba8e2) running 5 tests test cancellation_retires_the_helper_descendant_too ... ok test completed_helper_retires_descendants_with_closed_pipes ... ok test group_identity_is_retained_until_inherited_pipes_finish ... ok test oversized_remote_output_is_bounded_and_active_timeout_is_enforced ... ok test reviewer_ssh_helper_does_not_inherit_server_reload_mask ... ok test result: ok. 5 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.46s Running tests/proxy_policy.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/proxy_policy-6168b25c0aef8710) running 1 test test unchecked_proxy_hops_are_refused_before_credential_helpers_or_network ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/real_ssh.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/real_ssh-64ea6957d0d5a5fd) running 1 test test actual_ssh_authentication_check_and_strict_host_key_rejection ... ignored, run through research/ssh-client/measure.py with the synthetic rootless sshd fixture test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/single_connection.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/single_connection-3376e0f2c78cf37d) running 1 test test one_physical_connection_erases_helpers_and_refuses_reconnect ... ignored, run through the rootless real-sshd fixture, selecting this test only test result: ok. 0 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/source_completeness.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/source_completeness-a25b442d7fcaea9f) running 1 test test declared_public_modules_have_committed_sources ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s Running tests/trust_round2.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/trust_round2-941560f7296ab4d7) running 2 tests test long_data_directory_does_not_bound_the_ssh_helper_socket ... ignored, scripts/test-ssh-host-trust.py supplies the real multi-key target test multi_key_target_trusts_once_and_reconnects_without_a_loop ... ignored, scripts/test-ssh-host-trust.py supplies a real multi-key sshd and memory-held credentials test result: ok. 0 passed; 0 failed; 2 ignored; 0 measured; 0 filtered out; finished in 0.00s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_protocol-e4eeb92d35d69a68) running 7 tests test stream_tests::all_short_frame_splits_match_direct_decoding ... ok test stream_tests::maximum_sized_fragmented_frame_is_not_rejected ... ok test stream_tests::split_mux_header_preserves_trailing_close ... ok test tests::golden_vectors_encode_and_decode_every_contract_frame ... ok test tests::mux_round_trip_and_incremental_decoders_preserve_frame_order ... ok test tests::oversized_encode_keeps_the_reusable_output_unchanged ... ok test tests::rejects_oversized_noncanonical_and_malformed_frames_before_buffering_body ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_server-91a469d241a2f514) running 471 tests ```
Author
Owner

Final branch-head scripts/verify fast output verbatim, part 4/12. Head 28bbc0b6fa; exit1, only static sizes fail. SHA256 b935fbfa77756bb873f44a315d1f3f61b1a57f4622068c4961eea6d8e8421447. RTT row ran on VM208/shared lock with identical script SHA815c3bee752af0471ab9bf47b671e4729f2ef0cb7659a6655e8b8e24e4b7b73d. Functional transcript durations are not accepted performance measurements.

test auth::cookies::measurement::cookie_latency_at_50_sessions ... ignored, local optimized cookie reader measurement at 50 browser sessions
test auth::cookies::tests::duplicates_missing_invalid_and_nontext_fail_closed ... ok
test auth::cookies::tests::joined_split_reordered_and_other_cookies ... ok
test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok
test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok
test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok
test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok
test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok
test auth::migration_compat_tests::committed_retag_can_resume_after_interruption_and_concurrent_startup ... ok
test auth::migration_compat_tests::dev_history_keeps_its_mesh_checksum_and_data ... ok
test auth::migration_compat_tests::dirty_production_migration_is_refused_without_retagging ... ok
test auth::migration_compat_tests::fresh_history_has_unique_versions_and_both_schemas ... ok
test auth::migration_compat_tests::live_production_retirement_history_survives_dev_upgrade ... ok
test auth::migration_compat_tests::occupied_destination_leaves_the_production_ledger_unchanged ... ok
test auth::migration_compat_tests::production_history_keeps_index_checksum_and_data ... ok
test auth::migration_compat_tests::unrecognized_checksum_is_refused_without_retagging ... ok
test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok
test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok
test auth::tests::account_identity_migration_backfills_legacy_users ... ok
test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok
test auth::tests::audit_ceremony_browser_binding ... ok
test auth::tests::audit_logout_survives_admission_exhaustion ... ok
test auth::tests::audit_no_public_credential_listing ... ok
test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok
test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok
test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok
test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok
test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser
test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok
test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok
test auth::tests::ca_administration_tests::audit_tests::private_copy_persistence_contains_only_ciphertext_and_public_metadata ... ok
test auth::tests::ca_administration_tests::audit_tests::unlock_audit_cost_at_1000_memberships ... ignored, real 100-unlock/1000-membership audit formatting diagnostic; no own builds or browsers
test auth::tests::ca_administration_tests::audit_tests::unlock_audit_records_principal_time_outcome_without_material ... ok
test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok
test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok
test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok
test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::audit_tests::ca_start_budget_is_shared_by_routes_and_cookies_but_not_status_or_finish ... ok
test auth::tests::ca_administration_tests::http_tests::audit_tests::sequential_unlock_starts_require_a_temporal_budget ... ok
test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds
test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok
test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok
test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok
test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok
test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok
test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok
test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok
test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok
test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok
test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok
test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok
test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok
test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443
test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::signed_deploy_preserves_passkey_ca_and_live_sessions ... ignored, exclusive perf VM staging proof; requires signed run artifacts and systemd
test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok
test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok
test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok
test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap
test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok
test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok
test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds
test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok
test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok
test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok
test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok
test auth::tests::pending_unlock_expires_without_terminal_authority ... ok
test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok
test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds
test auth::tests::public_status_and_discoverable_http_login ... ok
test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok
test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok
test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok
test auth::tests::recovery_http_live_same_account_is_immediate ... ok
test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok
test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok
test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok
test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation
test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok
test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok
test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately
test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok
test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok
test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok
test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok
test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok
test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok
test auth::tests::review3_tests::review3_busy_expiry ... ok
test auth::tests::review3_tests::review3_busy_logout ... ok
test auth::tests::review3_tests::review3_busy_recovery ... ok
test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok
test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok
test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok
test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok
test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok
test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok
test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok
test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok
test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds
test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok
test auth::tests::review_old_words_race_rotation ... ok
test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok
test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok
test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok
test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok
test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok
test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok
test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok
test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok
test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok
test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok
test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok
test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok
test auth::tests::setup_identity_validation_and_uniqueness ... ok
test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok
test auth::tests::setup_start_accepts_username_and_display_name ... ok
test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok
test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok
test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok
test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok
test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok
test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok
test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok
test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok
test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok
test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement
test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok
test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok
test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok
test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok
test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok
test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok
test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok
test auth::tests::socket_tests::review_input_credit::browser_input_overload_retires_only_the_terminal_stream ... ok
test auth::tests::socket_tests::review_input_credit::pending_browser_input_counts_against_slots_and_cancels_on_drop ... ok
test auth::tests::socket_tests::review_input_credit::pending_browser_input_has_a_wire_byte_bound ... ok
test auth::tests::socket_tests::review_input_credit::review_full_input_writer_preserves_browser_control_progress ... ok
test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok
test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok
test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok
test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok
test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok
test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket ... ok
test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close ... ok
test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation
test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery ... ok
test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok
test auth::tests::socket_tests::upgrade_metadata::active_writer_and_wrong_resume_token_are_still_rejected ... ok
test auth::tests::socket_tests::upgrade_metadata::metadata_resumes_without_a_client_binary_handshake_and_rotates_the_token ... ok
test auth::tests::socket_tests::upgrade_metadata::origin_and_cookie_admission_precede_metadata_validation ... ok
test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok
test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser ... ok
test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies ... ok
test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies ... ok
test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok
test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok
test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok
test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok
test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok
test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok
test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok
test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok
test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok
test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok
test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok
test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok
test bootstrap_api::tests::split_cookie_fields_preserve_bootstrap_owner_authority ... ok
test bootstrap_api::tests::start_fresh_request_is_bound_to_a_target_and_public_challenge ... ok
test bootstrap_runtime::failure_log_tests::one_line_contains_only_classified_public_coordinates ... ok
test bootstrap_runtime::failure_log_tests::start_fresh_logs_only_the_exact_public_ownership_journal_and_outcome ... ok
test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok
test bootstrap_runtime::remote_backend::canary_tests::cancellation_keeps_the_owned_session_available_for_cleanup ... ok
test bootstrap_runtime::remote_backend::canary_tests::failed_attachment_finishes_the_private_command ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_primary_exit_without_reattaching_to_a_retired_session ... ok
test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_concurrent_same_destination_issues_only_one_invitation ... ok
test bootstrap_runtime::remote_backend::tests::breakit2_live::breakit2_live_ssh_install_join_and_terminal ... ignored, #169 live disposable Docker target; invoke docs/verification/addhost-breakit2/measure.py
test bootstrap_runtime::remote_backend::tests::breakit2_unpublished_invitation_retires_durable_authority ... ok
test bootstrap_runtime::remote_backend::tests::cancellation_retries_retirement_after_temporary_writer_contention ... ok
test bootstrap_runtime::remote_backend::tests::cancelled_invitation_after_commit_retires_its_host_record ... ok
test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok
test bootstrap_runtime::remote_backend::tests::destination_reservation_admission_at_1600_pending_hosts ... ignored, #169 local bounded-journal scale evidence under CPUWeight scope
test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok
test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok
test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok
test bootstrap_runtime::remote_backend::tests::retirement_contention::cancelled_invitation_retires_after_sqlite_busy_timeout ... ok
test bootstrap_runtime::remote_backend::tests::review_cleanup::review_cancelled_committed_invitation_survives_temporary_writer_contention ... ok
test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok
test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok
test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok
test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS
test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok
test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok
test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok
test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok
test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap
test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok
test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok
test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok
test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok
test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap
test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok
test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok
test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok
test ca_handoff::shipping_tests::shipping_child ... ok
test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY
test ca_handoff::tests::exec_child ... ok
test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok
test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok
test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok
test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok
test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok
Final branch-head scripts/verify fast output verbatim, part 4/12. Head 28bbc0b6fa18356a992c2ec215213d5d732d271b; exit1, only static sizes fail. SHA256 b935fbfa77756bb873f44a315d1f3f61b1a57f4622068c4961eea6d8e8421447. RTT row ran on VM208/shared lock with identical script SHA815c3bee752af0471ab9bf47b671e4729f2ef0cb7659a6655e8b8e24e4b7b73d. Functional transcript durations are not accepted performance measurements. ```text test auth::cookies::measurement::cookie_latency_at_50_sessions ... ignored, local optimized cookie reader measurement at 50 browser sessions test auth::cookies::tests::duplicates_missing_invalid_and_nontext_fail_closed ... ok test auth::cookies::tests::joined_split_reordered_and_other_cookies ... ok test auth::crypto::verifier_tests::browser_secret_hashing_is_canonical_and_bounded ... ok test auth::crypto::verifier_tests::fixture_waits_while_production_hashing_refuses_capacity ... ok test auth::crypto::verifier_tests::recovery_capacity_denial_is_not_a_legacy_credential_signal ... ok test auth::http::hostname_tests::authenticated_session_response_includes_system_hostname ... ok test auth::http::tests::admission_partitions_reset_without_trusting_forwarded_headers ... ok test auth::migration_compat_tests::committed_retag_can_resume_after_interruption_and_concurrent_startup ... ok test auth::migration_compat_tests::dev_history_keeps_its_mesh_checksum_and_data ... ok test auth::migration_compat_tests::dirty_production_migration_is_refused_without_retagging ... ok test auth::migration_compat_tests::fresh_history_has_unique_versions_and_both_schemas ... ok test auth::migration_compat_tests::live_production_retirement_history_survives_dev_upgrade ... ok test auth::migration_compat_tests::occupied_destination_leaves_the_production_ledger_unchanged ... ok test auth::migration_compat_tests::production_history_keeps_index_checksum_and_data ... ok test auth::migration_compat_tests::unrecognized_checksum_is_refused_without_retagging ... ok test auth::tests::aaguid_migration_preserves_legacy_credentials_and_sessions ... ok test auth::tests::aaguid_projection_rejects_malformed_cbor_corpus ... ok test auth::tests::account_identity_migration_backfills_legacy_users ... ok test auth::tests::account_identity_schema_has_unique_usernames_and_display_names ... ok test auth::tests::audit_ceremony_browser_binding ... ok test auth::tests::audit_logout_survives_admission_exhaustion ... ok test auth::tests::audit_no_public_credential_listing ... ok test auth::tests::audit_recovery_after_page_discard_can_resume_at_original_deadline ... ok test auth::tests::audit_recovery_pending_is_visible_to_signed_in_device ... ok test auth::tests::audit_recovery_session_expiring_during_verification_keeps_delay ... ok test auth::tests::authenticated_prf_metadata_preserves_legacy_envelopes ... ok test auth::tests::ca_administration_tests::actual_ca_unlock_cost_at_1000_administrator_records ... ignored, release real authority diagnostic at1000 memberships/copies; no concurrent own build/browser test auth::tests::ca_administration_tests::actual_passkey_unlocks_cold_ca_once_and_leaves_no_extra_browser_session ... ok test auth::tests::ca_administration_tests::administrator_with_stale_tap_must_make_a_new_verified_proof_to_unlock ... ok test auth::tests::ca_administration_tests::audit_tests::private_copy_persistence_contains_only_ciphertext_and_public_metadata ... ok test auth::tests::ca_administration_tests::audit_tests::unlock_audit_cost_at_1000_memberships ... ignored, real 100-unlock/1000-membership audit formatting diagnostic; no own builds or browsers test auth::tests::ca_administration_tests::audit_tests::unlock_audit_records_principal_time_outcome_without_material ... ok test auth::tests::ca_administration_tests::bootstrap_requires_a_fresh_real_proof_and_publishes_only_wrapped_ca_material ... ok test auth::tests::ca_administration_tests::changed_generation_expired_session_or_removed_credential_cannot_unlock ... ok test auth::tests::ca_administration_tests::concurrent_bootstrap_ceremonies_retain_one_issuer_and_replay_is_refused ... ok test auth::tests::ca_administration_tests::foreign_browser_cannot_consume_the_original_ca_unlock_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::audit_tests::ca_start_budget_is_shared_by_routes_and_cookies_but_not_status_or_finish ... ok test auth::tests::ca_administration_tests::http_tests::audit_tests::sequential_unlock_starts_require_a_temporal_budget ... ok test auth::tests::ca_administration_tests::http_tests::ca_body_admission_at_1000_requests ... ignored, 1000-request body admission diagnostic; run alone without builds test auth::tests::ca_administration_tests::http_tests::ca_finish_body_deadline_returns_its_admission_slot ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_exact_origin_and_live_cookie_are_required ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_parser_is_bounded_and_errors_do_not_reflect_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_real_passkey_unlock_returns_only_lock_status_without_a_session_cookie ... ok test auth::tests::ca_administration_tests::http_tests::ca_http_refuses_origin_and_cookie_before_decoding_wrapping_material ... ok test auth::tests::ca_administration_tests::http_tests::ca_status_distinguishes_initial_setup_from_locked_retained_trust ... ok test auth::tests::ca_administration_tests::http_tests::first_machine_certificate_setup_starts_a_fresh_passkey_ceremony ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_body_reads_share_the_eight_request_admission_limit ... ok test auth::tests::ca_administration_tests::http_tests::independent_review_ca_headers_are_refused_before_reading_an_unfinished_body ... ok test auth::tests::ca_administration_tests::new_administrator_device_rewraps_pending_copy_and_role_generation_never_resurrects_it ... ok test auth::tests::ca_administration_tests::ordinary_login_ceremony_has_no_ca_unlock_purpose ... ok test auth::tests::ca_administration_tests::pending_administrator_cannot_replace_the_last_retained_wrapped_copy ... ok test auth::tests::ca_administration_tests::published_issuer_without_memory_projection_is_recovered_as_locked_trust ... ok test auth::tests::ca_administration_tests::revoked_membership_or_original_session_cannot_finish_an_existing_ca_ceremony ... ok test auth::tests::ca_administration_tests::role_changes_require_fresh_purpose_bound_proofs_and_recheck_owner_permission ... ok test auth::tests::ca_administration_tests::role_grant_is_pending_and_revoke_removes_old_copy_without_restoring_old_authority ... ok test auth::tests::ca_administration_tests::shipping_cli_tests::bootstrap_cli::fresh_release_bootstrap_join_renew_revoke_cuts_a_live_connection ... ignored, configured release E2E requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::configured_release_cli_cold_lock_real_passkey_unlock_and_cold_restart ... ignored, configured release CLI proof needs INFRATERNAL_REMOTE_TEST_BINARY and exclusive4701/7443 test auth::tests::ca_administration_tests::shipping_cli_tests::deploy_staging::signed_deploy_preserves_passkey_ca_and_live_sessions ... ignored, exclusive perf VM staging proof; requires signed run artifacts and systemd test auth::tests::ca_administration_tests::wrong_wrapping_key_or_missing_user_verification_leaves_ca_locked ... ok test auth::tests::ca_membership_tests::administrator_bootstrap_is_explicit_and_owner_flag_cannot_replace_revoked_role ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_deleted_passkey_or_session ... ok test auth::tests::ca_membership_tests::administrator_copy_refuses_pending_expired_stale_or_future_session ... ok test auth::tests::ca_membership_tests::administrator_guard_cost_at_1000_memberships ... ignored, optimized administrator guard diagnostic at1000 memberships; no own build/browser overlap test auth::tests::ceremony_prf_wraps_and_optional_second_passkey ... ok test auth::tests::concurrent_owner_and_optional_passkey_enrollment_fail_closed ... ok test auth::tests::discoverable_latency_at_pending_capacity ... ignored, run --release --ignored --nocapture without concurrent builds test auth::tests::discoverable_login_handle_credential_counter_and_replay ... ok test auth::tests::enrollment_prf_input_matches_discoverable_login ... ok test auth::tests::host_facts_review_tests::pending_host_facts_read_keeps_control_ping_responsive ... ok test auth::tests::http_csrf_cookie_flags_body_limit_and_latency_evidence ... ok test auth::tests::pending_unlock_expires_without_terminal_authority ... ok test auth::tests::provider_labels_cover_the_cited_registry_without_guessing ... ok test auth::tests::provider_session_latency_at_50_devices ... ignored, local auth session scale measurement; run without concurrent builds test auth::tests::public_status_and_discoverable_http_login ... ok test auth::tests::recovery_audit_commits_once_with_start_cancel_and_complete ... ok test auth::tests::recovery_delay_cancel_and_replacement_revokes_every_capability ... ok test auth::tests::recovery_expiry_revocation_and_cross_user_isolation ... ok test auth::tests::recovery_http_live_same_account_is_immediate ... ok test auth::tests::recovery_http_other_expired_pending_and_missing_sessions_wait ... ok test auth::tests::recovery_live_session_cannot_accelerate_an_active_delayed_request ... ok test auth::tests::recovery_live_session_revoked_during_verification_cannot_waive_delay ... ok test auth::tests::recovery_session_delay_latency_at_capacity ... ignored, release-only recovery measurement at 50 live sessions; run without concurrent compilation test auth::tests::recovery_unknown_identity_pays_the_same_database_and_verifier_work ... ok test auth::tests::recovery_username_identity_is_additive_and_ambiguous_forms_fail ... ok test auth::tests::recovery_verifier_latency_at_capacity ... ignored, release-only v2 diagnostic at 50 live session rows; record host load separately test auth::tests::redacted_unknown_and_failed_registrations_do_not_claim_a_provider ... ok test auth::tests::registration_aaguid_survives_none_attestation_and_binds_session_provider ... ok test auth::tests::rejected_origin_uv_challenge_signature_prf_and_expired_ceremonies ... ok test auth::tests::remote_removal_tests::fresh_removal_revokes_offline_host_and_cannot_replay ... ok test auth::tests::remote_removal_tests::logout_or_role_loss_after_removal_start_preserves_host ... ok test auth::tests::review3_tests::review3_backend_reply_has_a_deadline ... ok test auth::tests::review3_tests::review3_busy_expiry ... ok test auth::tests::review3_tests::review3_busy_logout ... ok test auth::tests::review3_tests::review3_busy_recovery ... ok test auth::tests::review3_tests::review3_completion_and_cleanup_are_transaction_bound ... ok test auth::tests::review3_tests::review3_expired_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_identified_privacy_timing_and_binding_replays ... ok test auth::tests::review3_tests::review3_pending_routes_and_idle_expiry_recovery ... ok test auth::tests::review3_tests::review3_revoked_handshake_must_not_welcome ... ok test auth::tests::review3_tests::review3_revoked_resume_must_not_welcome ... ok test auth::tests::review3_tests::review3_unwrap_cannot_be_skipped ... ok test auth::tests::review3_tests::review3_waiting_handshake_loses_authority ... ok test auth::tests::review3_tests::review4_open_reply_and_revocation_preserve_authority ... ok test auth::tests::review3_tests::review4_slow_open_at_user_capacity ... ignored, release-only connect scale measurement; run without concurrent builds test auth::tests::review_invalid_device_polling_exhausts_browser_budget ... ok test auth::tests::review_old_words_race_rotation ... ok test auth::tests::reviewer_tests::reviewer_disk_cancel_complete_races ... ok test auth::tests::reviewer_tests::reviewer_disk_restart_and_concurrent_resume ... ok test auth::tests::reviewer_tests::reviewer_http_denials_and_recovery_admission ... ok test auth::tests::reviewer_tests::reviewer_http_expired_capability_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_http_expired_ceremony_cannot_complete_after_writer_wait ... ok test auth::tests::reviewer_tests::reviewer_server_clock_rollback_retains_deadline_and_reports_more_than_day ... ok test auth::tests::rotation_tests::recovery_phrase_routes_are_removed_and_words_fail_closed ... ok test auth::tests::rotation_tests::recovery_rotation_cannot_follow_a_cookie_account_switch ... ok test auth::tests::rotation_tests::recovery_rotation_denies_pending_expired_and_stale_sessions ... ok test auth::tests::rotation_tests::recovery_rotation_requires_session_and_replaces_legacy_envelope ... ok test auth::tests::rotation_tests::reviewer_concurrent_signed_in_rotations_commit_once ... ok test auth::tests::server_setup_terminal_echo_and_resume_preserve_offsets_once ... ok test auth::tests::sessions_slide_but_fresh_tap_does_not_and_device_keys_are_scoped ... ok test auth::tests::setup_check_is_non_consuming_and_closes_after_owner_creation ... ok test auth::tests::setup_identity_validation_and_uniqueness ... ok test auth::tests::setup_restart_rotation_expiry_and_parallel_redemption ... ok test auth::tests::setup_start_accepts_username_and_display_name ... ok test auth::tests::socket_tests::authenticated_idle_socket_survives_the_former_read_timeout ... ok test auth::tests::socket_tests::claude_review_visible_liveness::claude_review_watch_expires_host_made_visible_by_membership_edit ... ok test auth::tests::socket_tests::clean_control_close_is_not_an_internal_error ... ok test auth::tests::socket_tests::expired_handshake_releases_user_permits ... ok test auth::tests::socket_tests::fragmented_wire_frame_has_a_completion_deadline ... ok test auth::tests::socket_tests::fresh_delete::review_mesh_delete_requires_fresh_passkey_tap ... ok test auth::tests::socket_tests::half_open_sockets_obey_user_limit ... ok test auth::tests::socket_tests::incomplete_rfc_message_still_loses_authority_on_revocation ... ok test auth::tests::socket_tests::mesh_calls_and_subscriptions_deliver_scoped_live_inventory ... ok test auth::tests::socket_tests::mesh_latency::mesh_snapshot_keystroke_latency_at_10000_nodes ... ignored, weighted real-binary 300 ms Mesh/PTY measurement test auth::tests::socket_tests::non_owner_without_host_configure_permission_is_refused_before_leg_b ... ok test auth::tests::socket_tests::plugin_lifecycle::disabling_mesh_joins_pending_writer_and_refuses_nonowner_switches ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_coordinator_requires_an_existing_server_role ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_destructive_metadata_matches_frozen_confirmation_requirements ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_lifecycle_withdrawals_survive_calls_but_never_end_a_replacement ... ok test auth::tests::socket_tests::plugin_lifecycle::mesh_plugin_discovery_disable_and_restart_preserve_control_socket ... ok test auth::tests::socket_tests::recovery_subscription_updates_every_signed_in_socket ... ok test auth::tests::socket_tests::review_control::pending_mesh_writers_preserve_authority_pool_capacity ... ok test auth::tests::socket_tests::review_control::review_pending_mesh_write_keeps_control_dispatch_available ... ok test auth::tests::socket_tests::review_fresh_wait::review_mesh_delete_refused_when_freshness_expires_during_writer_wait ... ok test auth::tests::socket_tests::review_input_credit::browser_input_overload_retires_only_the_terminal_stream ... ok test auth::tests::socket_tests::review_input_credit::pending_browser_input_counts_against_slots_and_cancels_on_drop ... ok test auth::tests::socket_tests::review_input_credit::pending_browser_input_has_a_wire_byte_bound ... ok test auth::tests::socket_tests::review_input_credit::review_full_input_writer_preserves_browser_control_progress ... ok test auth::tests::socket_tests::review_liveness::review_mesh_watch_reports_liveness_expiry_without_another_edit ... ok test auth::tests::socket_tests::review_subscription_refusal::oversized_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::review_oversized_replacement_ends_the_previous_mesh_subscription ... ok test auth::tests::socket_tests::review_subscription_refusal::saturated_refusal_cannot_reinstall_a_queued_mesh_subscription ... ok test auth::tests::socket_tests::revoked_idle_socket_loses_all_authority ... ok test auth::tests::socket_tests::scale::review_mesh_headroom_snapshot_does_not_close_shared_socket ... ok test auth::tests::socket_tests::session_gone::an_ended_or_unknown_session_gets_the_final_close_without_losing_the_socket ... ok test auth::tests::socket_tests::session_gone::the_infraternal_agent_saying_gone_reaches_the_browser_as_the_final_close ... ok test auth::tests::socket_tests::socket_authority_latency_at_user_capacity ... ignored, release-only measurement without concurrent compilation test auth::tests::socket_tests::terminal_exit::retired_exit_preserves_status_without_claiming_final_output_delivery ... ok test auth::tests::socket_tests::terminal_exit::terminal_exit_persists_once_under_current_ownership_and_session ... ok test auth::tests::socket_tests::upgrade_metadata::active_writer_and_wrong_resume_token_are_still_rejected ... ok test auth::tests::socket_tests::upgrade_metadata::metadata_resumes_without_a_client_binary_handshake_and_rotates_the_token ... ok test auth::tests::socket_tests::upgrade_metadata::origin_and_cookie_admission_precede_metadata_validation ... ok test auth::tests::stale_counters_recovery_cancellation_and_wrap_tampering ... ok test auth::tests::terminal_refusal_tests::memory_refusal_preserves_reason_and_counters_to_browser ... ok test auth::tests::tls_tests::proxy_tls_registration_session_split_cookies ... ok test auth::tests::tls_tests::standalone_tls_registration_session_split_cookies ... ok test auth::tests::verified_passkey_tests::canceled_proof_before_writer_admission_leaves_no_new_session_or_pending_ceremony ... ok test auth::tests::verified_passkey_tests::proof_only_ceremony_expiring_during_writer_wait_cannot_commit_a_counter_or_session ... ok test auth::tests::verified_passkey_tests::proof_only_verification_preserves_monotone_registered_credential_counter ... ok test auth::tests::verified_passkey_tests::proof_only_verification_refuses_missing_uv_or_deleted_credential ... ok test auth::tests::verified_passkey_tests::verified_passkey_has_live_registered_identity_and_creates_no_session ... ok test bootstrap_api::tests::a_client_request_during_a_pending_confirmation_keeps_the_batch ... ok test bootstrap_api::tests::admission_stream_is_ordered_and_logout_retires_an_idle_socket ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::component_off_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::component_off_retires_idle_sockets_and_refuses_new_admission ... ok test bootstrap_api::tests::control_frames_do_not_cancel_bootstrap_or_starve_progress ... ok test bootstrap_api::tests::host_key_confirmation_rechecks_the_exact_live_owner_capability ... ok test bootstrap_api::tests::logout_interrupts_a_stalled_host_key_confirmation_lookup ... ok test bootstrap_api::tests::origin_owner_unlock_and_whole_request_consent_are_required ... ok test bootstrap_api::tests::revocation_interrupts_a_stalled_progress_send ... ok test bootstrap_api::tests::settings_public_key_requires_exact_origin_and_live_unlocked_owner ... ok test bootstrap_api::tests::split_cookie_fields_preserve_bootstrap_owner_authority ... ok test bootstrap_api::tests::start_fresh_request_is_bound_to_a_target_and_public_challenge ... ok test bootstrap_runtime::failure_log_tests::one_line_contains_only_classified_public_coordinates ... ok test bootstrap_runtime::failure_log_tests::start_fresh_logs_only_the_exact_public_ownership_journal_and_outcome ... ok test bootstrap_runtime::key_authority_tests::key_export_rechecks_role_session_and_cold_lock ... ok test bootstrap_runtime::remote_backend::canary_tests::cancellation_keeps_the_owned_session_available_for_cleanup ... ok test bootstrap_runtime::remote_backend::canary_tests::failed_attachment_finishes_the_private_command ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_authoritative_snapshot_output ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_accepts_primary_exit_without_reattaching_to_a_retired_session ... ok test bootstrap_runtime::remote_backend::canary_tests::readiness_input_preserves_the_terminal_actor_and_host_connection ... ok test bootstrap_runtime::remote_backend::tests::breakit2_concurrent_same_destination_issues_only_one_invitation ... ok test bootstrap_runtime::remote_backend::tests::breakit2_live::breakit2_live_ssh_install_join_and_terminal ... ignored, #169 live disposable Docker target; invoke docs/verification/addhost-breakit2/measure.py test bootstrap_runtime::remote_backend::tests::breakit2_unpublished_invitation_retires_durable_authority ... ok test bootstrap_runtime::remote_backend::tests::cancellation_retries_retirement_after_temporary_writer_contention ... ok test bootstrap_runtime::remote_backend::tests::cancelled_invitation_after_commit_retires_its_host_record ... ok test bootstrap_runtime::remote_backend::tests::cold_ca_refuses_before_invitation_or_upload ... ok test bootstrap_runtime::remote_backend::tests::destination_reservation_admission_at_1600_pending_hosts ... ignored, #169 local bounded-journal scale evidence under CPUWeight scope test bootstrap_runtime::remote_backend::tests::failed_upload_retires_only_the_new_host ... ok test bootstrap_runtime::remote_backend::tests::foreign_or_revoked_authority_never_opens_ssh ... ok test bootstrap_runtime::remote_backend::tests::readding_a_live_host_reports_already_added_before_issuing_a_certificate ... ok test bootstrap_runtime::remote_backend::tests::retirement_contention::cancelled_invitation_retires_after_sqlite_busy_timeout ... ok test bootstrap_runtime::remote_backend::tests::review_cleanup::review_cancelled_committed_invitation_survives_temporary_writer_contention ... ok test bootstrap_runtime::remote_backend::tests::unpublished_attempt_drop_releases_only_its_ownership ... ok test bootstrap_runtime::tests::pending_integration_refuses_enrollment_vault_and_discovery ... ok test ca::tests::signed_identity_has_only_server_constructed_host_authority_and_seven_days ... ok test ca::tests::signing_boundary_at_1000_public_identities ... ignored, explicit signing-boundary diagnostic; not live renewal or connected-agent RSS test ca::tests::source_mismatch_locked_and_uncovered_validity_fail_closed ... ok test ca::wrapping::tests::bounded_decoder_rejects_duplicate_unknown_fields_and_exact_oversize ... ok test ca::wrapping::tests::ciphertext_nonce_salt_and_issuer_tampering_fail_authenticated_decryption ... ok test ca::wrapping::tests::creation_rejects_unbound_membership_and_malformed_copies_cannot_open ... ok test ca::wrapping::tests::encrypted_copy_cost_at_1000_administrators ... ignored, optimized CA copy diagnostic; no own builds/browser overlap test ca::wrapping::tests::invalid_issuer_key_binding_is_refused_before_a_copy_is_persisted ... ok test ca::wrapping::tests::wrapped_seed_roundtrip_validates_the_same_issuer_key ... ok test ca::wrapping::tests::wrong_key_member_epoch_or_issuer_cannot_unwrap_a_copy ... ok test ca_bootstrap::tests::generated_remote_leaf_is_verifiable_after_cold_restart ... ok test ca_copies::tests::copy_store_cost_at_1000_administrators ... ignored, release-only private CA-copy disk diagnostic; no own build/browser overlap test ca_copies::tests::encrypted_copy_is_private_durable_and_bound_to_member_generation ... ok test ca_copies::tests::removal_is_member_generation_scoped_and_idempotent ... ok test ca_copies::tests::unsafe_copy_directory_or_file_is_refused_without_following_symlinks ... ok test ca_handoff::shipping_tests::shipping_child ... ok test ca_handoff::shipping_tests::shipping_restart_reload_rollback_and_cold_start ... ignored, explicit shipping-binary integration/benchmark; set INFRATERNAL_TEST_BINARY test ca_handoff::tests::exec_child ... ok test ca_handoff::tests::failed_null_open_or_duplication_closes_private_stdin ... ok test ca_handoff::tests::parser_property_corpus_is_bounded_and_never_accepts_trailing_bytes ... ok test ca_handoff::tests::real_exec_failures_and_killed_receiver_never_unlock_a_cold_successor ... ok test ca_handoff::tests::real_exec_retains_unlock_but_another_process_cannot_import_the_channel ... ok test ca_handoff::tests::serialized_seed_frame_is_locked_and_excluded_from_core_dumps ... ok ```
Author
Owner

Final branch-head scripts/verify fast output verbatim, part 5/12. Head 28bbc0b6fa; exit1, only static sizes fail. SHA256 b935fbfa77756bb873f44a315d1f3f61b1a57f4622068c4961eea6d8e8421447. RTT row ran on VM208/shared lock with identical script SHA815c3bee752af0471ab9bf47b671e4729f2ef0cb7659a6655e8b8e24e4b7b73d. Functional transcript durations are not accepted performance measurements.

test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok
test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok
test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok
test ca_http::intake_tests::chunked_intake_is_bounded_before_parsing ... ok
test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok
test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok
test ca_memory::tests::unavailable_secure_heap_refuses_root_and_warns_for_nonroot ... ok
test ca_update_audit_tests::every_ciphertext_byte_and_tag_mutation_refuses_without_material_in_errors ... ok
test ca_update_audit_tests::handoff_descriptor_is_close_on_exec_and_prepare_failure_preserves_source ... ok
test ca_update_audit_tests::handoff_memory_protection_failure_keeps_the_existing_signer ... ok
test ca_update_audit_tests::no_timer_locks_signing_and_wrong_issuer_cannot_replace_the_unlocked_source ... ok
test ca_update_audit_tests::secure_heap_capacity_at_10000_live_keys ... ignored, isolated secure heap sizing at 10000 live keys; run with no own builds/browser overlap
test ca_update_audit_tests::unlocked_signer_requires_persistent_locked_pages ... ok
test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok
test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok
test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok
test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok
test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok
test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok
test embedded::exit_latency_tests::shim_sigkill_to_server_inventory_latency ... ignored, real daemon artifact and 200 shim exits; run with INFRATERNAL_BIN in a weighted scope
test embedded::priming::flights::tests::queued_sibling_failure_stays_owned_until_the_actor_observes_it ... ok
test embedded::priming::flights::tests::stop_preserves_finished_success_and_identifies_unpolled_cancellation ... ok
test embedded::priming::header_tests::blocked_promotion_header_does_not_stop_actor_control_progress ... ok
test embedded::priming::header_tests::promoted_owned_attach_opens_a_missing_native_writer_binding ... ok
test embedded::priming::header_tests::promotion_never_publishes_an_unstarted_shadow_flight_as_credited ... ok
test embedded::priming::tests::abandoned_preparation_cancels_even_before_the_owned_task_first_polls ... ok
test embedded::priming::tests::flow_control_blocked_shadow_does_not_stop_actor_control_progress ... ok
test embedded::priming::tests::later_input_is_hedged_without_resending_the_first_suffix ... ok
test embedded::priming::tests::overlap_and_stale_snapshot_do_not_spend_browser_credit ... ok
test embedded::priming::tests::shadow_input_and_snapshot_credit_have_independent_bounded_windows ... ok
test embedded::priming::tests::snapshot_notice_precedes_repaint_and_duplicates_spend_no_browser_credit ... ok
test embedded::priming::tests::stream_reuse_waits_for_the_retired_flight_to_join ... ok
test embedded::regressions::agent_link_loss_invalidates_the_last_live_session_snapshot ... ok
test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok
test embedded::regressions::credit_tests::retained_input_credit_parks_only_the_full_writer_until_its_ack ... ok
test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok
test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds
test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok
test embedded::regressions::greeted_links_that_die_young_escalate_the_actor_retry_delay ... ok
test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok
test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok
test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok
test embedded::regressions::path_tests::full_ack_releases_retention_and_duplicate_input_is_not_replayed ... ok
test embedded::regressions::path_tests::full_retention_replays_as_legal_frames_with_contiguous_offsets ... ok
test embedded::regressions::path_tests::initial_attachment_keeps_input_cut_through_before_its_first_ack ... ok
test embedded::regressions::path_tests::input_retention_cost_at_200_terminals ... ignored, Run alone on the perf VM under the shared benchmark lock.
test embedded::regressions::path_tests::input_retention_refuses_excess_before_advancing_the_cursor ... ok
test embedded::regressions::path_tests::replacement_replays_only_the_unacknowledged_suffix_and_queued_input ... ok
test embedded::regressions::path_tests::review_pending_input_limit_retires_only_its_attachment ... ok
test embedded::regressions::plugin_control_notice_preserves_capability_invalidation ... ok
test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok
test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok
test embedded::regressions::reattach_must_restore_output_credit ... ok
test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok
test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok
test embedded::regressions::replay_complete_notice_is_accepted_by_embedded_server ... ok
test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok
test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok
test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok
test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok
test embedded::writes::tests::bounded_lane_metadata_and_flight_sizes ... ok
test embedded::writes::tests::cached_promotion_ack_never_replays_inside_the_actor ... ok
test embedded::writes::tests::enabling_owned_writes_preserves_unsent_replacement_input ... ok
test embedded::writes::tests::full_control_lane_keeps_all_terminal_owner_slots_available ... ok
test embedded::writes::tests::promotion_headers_preserve_attach_credit_ack_input_order ... ok
test embedded::writes::tests::saturated_control_queue_preserves_fifo_and_shutdown_owns_flights ... ok
test embedded::writes::tests::socket_completion_cannot_spend_unacknowledged_writer_credit ... ok
test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok
test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok
test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok
test enrollment::bootstrap_retirement::ownership_regression::retirement_requires_an_unfinished_intent ... ok
test enrollment::bootstrap_retirement::tests::proven_completion_is_owner_bound_and_survives_restart ... ok
test enrollment::bootstrap_retirement::tests::retirement_consumes_only_its_owned_intent_with_the_tombstone ... ok
test enrollment::bootstrap_retirement::tests::startup_retires_only_unfinished_provisioning_and_is_idempotent ... ok
test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok
test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok
test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok
test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok
test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok
test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok
test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok
test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok
test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok
test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok
test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok
test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok
test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope
test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok
test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok
test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok
test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok
test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok
test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok
test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok
test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok
test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok
test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok
test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation
test plugins::node_lifecycle::tests::disabling_replacement_and_retirement_join_the_correct_node_worker ... ok
test release_build_tests::release_build_marker_is_explicit ... ok
test release_http::tests::bounded_body_status_and_existing_destination_are_refused ... ok
test release_http::tests::https_cannot_silently_accept_a_plaintext_bucket ... ok
test release_http::tests::unsupported_scheme_credentials_query_and_fragment_never_connect ... ok
test release_latest::tests::bench_bounded_metadata_verification ... ignored, local weighted-scope verification latency benchmark
test release_latest::tests::bench_latest_fifty_callers ... ignored, local weighted-scope 50-caller real-engine RSS measurement
test release_latest::tests::edge_pointer_is_verified_in_its_own_channel ... ok
test release_latest::tests::pointer_authenticates_signed_version_and_refuses_replays_tampering_and_duplicates ... ok
test release_latest::tests::stable_empty_reports_opt_in_without_edge_request ... ok
test release_manifest::tests::noncanonical_or_cross_channel_identity_is_refused ... ok
test release_manifest::tests::signed_identity_and_exact_bytes_are_required ... ok
test release_payload::tests::a_missing_payload_never_enables_development_fallback ... ok
test release_payload::tests::a_valid_older_release_replayed_under_the_requested_version_is_refused ... ok
test release_payload::tests::cache_symlinks_and_shared_files_are_refused ... ok
test release_payload::tests::cross_architecture_cold_and_warm_cache_measurements ... ignored, run release-profile measurements in a weighted scope
test release_payload::tests::edge_add_host_keeps_exact_server_version_and_verified_cache ... ok
test release_payload::tests::eight_concurrent_add_hosts_share_one_verified_download ... ok
test release_payload::tests::missing_wrong_version_tampered_network_and_development_only_fallback ... ok
test release_payload::tests::partial_download_restart_child ... ignored, subprocess helper for release-cache restart verification
test release_payload::tests::resolver_startup_removes_only_owned_inactive_private_staging ... ok
test release_payload::tests::restarted_resolution_reclaims_partial_downloads_after_process_stop ... ok
test release_payload::tests::signed_download_cache_hit_offline_and_tampered_cache ... ok
test release_verify::tests::compiled_authorities_keep_production_and_isolate_staging ... ok
test release_verify::tests::openssh_signatures_preserve_descriptor_and_reject_every_byte_mutation ... ok
test release_verify::tests::per_run_signature_obeys_the_compiled_feature_boundary ... ok
test release_verify::tests::trust_namespace_hash_trailing_data_and_manifest_ambiguity_are_refused ... ok
test release_verify::tests::verification_twenty_megabytes_fifty_runs ... ignored, run release-profile measurements in a weighted scope
test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok
test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok
test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap
test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok
test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok
test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok
test remote_guard::cut_tests::cancellation_survives_last_transport_until_durable_tombstone ... ok
test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence
test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok
test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok
test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok
test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok
test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok
test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok
test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok
test remote_inventory::pagination_tests::long_destinations_stay_bounded_and_all_pages_are_complete ... ok
test remote_inventory::tests::admitted_hosts_are_account_scoped_offline_and_revocation_filtered ... ok
test remote_inventory::tests::unredeemed_invitations_are_not_admitted_and_cursors_are_canonical ... ok
test remote_mesh_revocation_tests::committed_host_revocation_pushes_peer_withdrawal_without_polling ... ok
test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok
test remote_runtime::tests::additional_listeners::additional_listener_keeps_underlay_address_and_retires_with_its_lease ... ok
test remote_runtime::tests::additional_listeners::additional_listener_refuses_unenrolled_certificate_before_proof_reply ... ok
test remote_runtime::tests::additional_listeners::initial_overlay_admission_has_no_underlay_guess ... ok
test remote_runtime::tests::additional_listeners::ipv6_wildcard_listener_reuses_binding_and_preserves_ipv4_discovery ... ok
test remote_runtime::tests::additional_listeners::wildcard_listener_reuses_binding_and_tracks_destination_lease_counts ... ok
test remote_runtime::tests::cancelled_native_read_retains_dequeued_packet ... ok
test remote_runtime::tests::candidate_proofs::candidate_proof_refuses_a_second_probe_and_invalid_hello ... ok
test remote_runtime::tests::candidate_proofs::quic_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok
test remote_runtime::tests::candidate_proofs::tls_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok
test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok
test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok
test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok
test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence
test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok
test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok
test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok
test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok
test remote_runtime::tests::retired_native_writer_frames_cannot_close_or_ack_its_replacement ... ok
test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok
test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok
test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements
test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok
test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap
test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok
test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok
test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok
test remote_runtime::tests::standby::a_second_parked_fallback_cannot_replace_the_first ... ok
test remote_runtime::tests::standby::control_pause::cancelled_control_packet_survives_pause_and_resumes_before_queued_sibling ... ok
test remote_runtime::tests::standby::control_queue::saturated_native_control_queue_does_not_hide_primary_terminal_output ... ok
test remote_runtime::tests::standby::detached_primed_writers_release_native_binding_budget ... ok
test remote_runtime::tests::standby::parked_fallback_is_cancelled_by_ledger_revocation ... ok
test remote_runtime::tests::standby::parked_fallback_survives_greeting_deadline_and_activates_without_another_hello ... ok
test remote_runtime::tests::standby::primed_fallback_activates_after_the_primary_closes ... ok
test remote_runtime::tests::standby::primed_fallback_hedges_when_credit_arrives_behind_a_blocked_primary_write ... ok
test remote_runtime::tests::standby::primed_fallback_hedges_while_primary_native_send_buffer_is_full ... ok
test remote_runtime::tests::standby::primed_hedge_survives_blocked_control_call ... ok
test remote_runtime::tests::standby::primed_standby_greets_without_replacing_the_live_actor_before_activation ... ok
test remote_runtime::tests::standby::tcp_fallback_parks_without_a_host_actor_and_activates_on_the_existing_tls_channel ... ok
test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok
test remote_standby::tests::bounded_standby_options_reject_ambiguous_or_unrecognized_fields ... ok
test remote_standby::tests::cancelled_queue_admission_releases_parking_before_actor_poll ... ok
test remote_standby::tests::parking_is_per_identity_bounded_and_released_on_drop ... ok
test remote_standby_request::tests::requests_require_objects_and_exact_fields ... ok
test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok
test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok
test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok
test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok
test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443
test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok
test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701
test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok
test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok
test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok
test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap
test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap
test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok
test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok
test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok
test runtime::temporal_admission_tests::ca_budget_cost_at_capacity ... ignored, isolated debug admission diagnostic at 4096 principals; run without own build overlap
test runtime::temporal_admission_tests::windows_principals_and_capacity_remain_bounded ... ok
test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok
test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok
test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok
test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok
test runtime::tests::router_migrates_private_storage_and_serves_health ... ok
test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok
test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok
test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok
test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok
test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok
test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok
test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok
test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok
test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok
test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok
test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok
test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok
test upgrade_resume::tests::complete_metadata_round_trips_and_every_truncation_is_rejected ... ok
test upgrade_resume::tests::input_actions_duplicate_streams_and_trailing_frames_are_rejected ... ok
test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok
test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok
test websocket::cookie_tests::duplicate_cookie_fields_deny_socket_session ... ok
Final branch-head scripts/verify fast output verbatim, part 5/12. Head 28bbc0b6fa18356a992c2ec215213d5d732d271b; exit1, only static sizes fail. SHA256 b935fbfa77756bb873f44a315d1f3f61b1a57f4622068c4961eea6d8e8421447. RTT row ran on VM208/shared lock with identical script SHA815c3bee752af0471ab9bf47b671e4729f2ef0cb7659a6655e8b8e24e4b7b73d. Functional transcript durations are not accepted performance measurements. ```text test ca_handoff::tests::socketpair_preserves_unlock_and_cold_start_still_locks ... ok test ca_handoff::tests::truncated_wrong_generation_and_wrong_version_leave_successor_locked ... ok test ca_handoff_binary::tests::marker_is_an_exact_versioned_note_not_a_byte_substring ... ok test ca_http::intake_tests::chunked_intake_is_bounded_before_parsing ... ok test ca_memory::tests::accepted_unlock_notifies_and_memory_handoff_preserves_signing_without_a_timer ... ok test ca_memory::tests::cold_start_retains_public_trust_and_denied_unlock_leaves_signing_locked ... ok test ca_memory::tests::unavailable_secure_heap_refuses_root_and_warns_for_nonroot ... ok test ca_update_audit_tests::every_ciphertext_byte_and_tag_mutation_refuses_without_material_in_errors ... ok test ca_update_audit_tests::handoff_descriptor_is_close_on_exec_and_prepare_failure_preserves_source ... ok test ca_update_audit_tests::handoff_memory_protection_failure_keeps_the_existing_signer ... ok test ca_update_audit_tests::no_timer_locks_signing_and_wrong_issuer_cannot_replace_the_unlocked_source ... ok test ca_update_audit_tests::secure_heap_capacity_at_10000_live_keys ... ignored, isolated secure heap sizing at 10000 live keys; run with no own builds/browser overlap test ca_update_audit_tests::unlocked_signer_requires_persistent_locked_pages ... ok test csr::tests::incomplete_suffix_oversized_forged_and_wrong_algorithm_requests_are_refused ... ok test csr::tests::nonminimal_outer_lengths_and_real_oversized_requests_are_refused ... ok test csr::tests::signed_cached_noncanonical_or_incomplete_shapes_are_refused ... ok test csr::tests::signed_constructed_primitive_attribute_is_refused ... ok test csr::tests::signed_noncanonical_ignored_values_are_refused ... ok test csr::tests::verified_host_key_is_admitted_without_trusting_requested_identity ... ok test embedded::exit_latency_tests::shim_sigkill_to_server_inventory_latency ... ignored, real daemon artifact and 200 shim exits; run with INFRATERNAL_BIN in a weighted scope test embedded::priming::flights::tests::queued_sibling_failure_stays_owned_until_the_actor_observes_it ... ok test embedded::priming::flights::tests::stop_preserves_finished_success_and_identifies_unpolled_cancellation ... ok test embedded::priming::header_tests::blocked_promotion_header_does_not_stop_actor_control_progress ... ok test embedded::priming::header_tests::promoted_owned_attach_opens_a_missing_native_writer_binding ... ok test embedded::priming::header_tests::promotion_never_publishes_an_unstarted_shadow_flight_as_credited ... ok test embedded::priming::tests::abandoned_preparation_cancels_even_before_the_owned_task_first_polls ... ok test embedded::priming::tests::flow_control_blocked_shadow_does_not_stop_actor_control_progress ... ok test embedded::priming::tests::later_input_is_hedged_without_resending_the_first_suffix ... ok test embedded::priming::tests::overlap_and_stale_snapshot_do_not_spend_browser_credit ... ok test embedded::priming::tests::shadow_input_and_snapshot_credit_have_independent_bounded_windows ... ok test embedded::priming::tests::snapshot_notice_precedes_repaint_and_duplicates_spend_no_browser_credit ... ok test embedded::priming::tests::stream_reuse_waits_for_the_retired_flight_to_join ... ok test embedded::regressions::agent_link_loss_invalidates_the_last_live_session_snapshot ... ok test embedded::regressions::child_spawn_disposes_inherited_stdin ... ok test embedded::regressions::credit_tests::retained_input_credit_parks_only_the_full_writer_until_its_ack ... ok test embedded::regressions::credited_bulk_output_survives_forwarder_io_pause ... ok test embedded::regressions::credited_output_queue_at_stream_capacity ... ignored, debug actor memory/scheduling measurement; run without concurrent builds test embedded::regressions::full_output_queue_must_not_block_shared_actor ... ok test embedded::regressions::greeted_links_that_die_young_escalate_the_actor_retry_delay ... ok test embedded::regressions::healthy_receiver_survives_ready_native_output_burst ... ok test embedded::regressions::healthy_streams_progress_at_user_attachment_capacity ... ok test embedded::regressions::output_and_snapshot_spend_remaining_restart_credit ... ok test embedded::regressions::path_tests::full_ack_releases_retention_and_duplicate_input_is_not_replayed ... ok test embedded::regressions::path_tests::full_retention_replays_as_legal_frames_with_contiguous_offsets ... ok test embedded::regressions::path_tests::initial_attachment_keeps_input_cut_through_before_its_first_ack ... ok test embedded::regressions::path_tests::input_retention_cost_at_200_terminals ... ignored, Run alone on the perf VM under the shared benchmark lock. test embedded::regressions::path_tests::input_retention_refuses_excess_before_advancing_the_cursor ... ok test embedded::regressions::path_tests::replacement_replays_only_the_unacknowledged_suffix_and_queued_input ... ok test embedded::regressions::path_tests::review_pending_input_limit_retires_only_its_attachment ... ok test embedded::regressions::plugin_control_notice_preserves_capability_invalidation ... ok test embedded::regressions::real_agent_canonical_uuid_result_is_accepted ... ok test embedded::regressions::real_agent_open_uses_uid_and_character_dimensions ... ok test embedded::regressions::reattach_must_restore_output_credit ... ok test embedded::regressions::recovery_event_then_snapshot_keeps_embedded_connection_live ... ok test embedded::regressions::recovery_notices_preserve_order_credit_and_session_isolation ... ok test embedded::regressions::replay_complete_notice_is_accepted_by_embedded_server ... ok test embedded::regressions::server_reload_mask_is_not_inherited_by_embedded_children ... ok test embedded::regressions::stream_close_must_not_restart_all_sessions ... ok test embedded::regressions::uncredited_output_or_repaint_is_rejected_before_queueing ... ok test embedded::regressions::unresponsive_child_is_killed_and_reaped_within_the_shutdown_bound ... ok test embedded::writes::tests::bounded_lane_metadata_and_flight_sizes ... ok test embedded::writes::tests::cached_promotion_ack_never_replays_inside_the_actor ... ok test embedded::writes::tests::enabling_owned_writes_preserves_unsent_replacement_input ... ok test embedded::writes::tests::full_control_lane_keeps_all_terminal_owner_slots_available ... ok test embedded::writes::tests::promotion_headers_preserve_attach_credit_ack_input_order ... ok test embedded::writes::tests::saturated_control_queue_preserves_fifo_and_shutdown_owns_flights ... ok test embedded::writes::tests::socket_completion_cannot_spend_unacknowledged_writer_credit ... ok test enrollment::authority::tests::admission_uses_enrolled_uid_and_exact_public_identity_validity ... ok test enrollment::authority::tests::renewal_preserves_overlap_and_refuses_changed_key_or_expired_predecessor ... ok test enrollment::authority::tests::revocation_is_owner_bound_and_denies_admission_and_renewal_after_commit ... ok test enrollment::bootstrap_retirement::ownership_regression::retirement_requires_an_unfinished_intent ... ok test enrollment::bootstrap_retirement::tests::proven_completion_is_owner_bound_and_survives_restart ... ok test enrollment::bootstrap_retirement::tests::retirement_consumes_only_its_owned_intent_with_the_tombstone ... ok test enrollment::bootstrap_retirement::tests::startup_retires_only_unfinished_provisioning_and_is_idempotent ... ok test enrollment::migration_tests::remote_identity_and_sessions_upgrade_dev_v11_and_remain_idempotent ... ok test mesh_api_tests::claude_review::claude_review_late_committing_observation_does_not_rewind_last_seen ... ok test mesh_api_tests::claude_review::claude_review_scoped_grant_cannot_target_node_in_unscoped_tag ... ok test mesh_api_tests::concurrent_tag_edits_serialize_revisions_and_unique_names ... ok test mesh_api_tests::identity::identity_migration_preserves_inventory_and_retired_audit_ids ... ok test mesh_api_tests::identity::retired_identity_survives_database_reopen_and_exhaustion_is_atomic ... ok test mesh_api_tests::identity::review_deleted_node_identity_is_not_reused ... ok test mesh_api_tests::invalidation::filtered_view_invalidations_follow_every_affected_host_tag ... ok test mesh_api_tests::invalidation::review_membership_change_notifies_other_visible_tag ... ok test mesh_api_tests::inventory_lifecycle_preserves_policy_identity_and_audits_every_edit ... ok test mesh_api_tests::membership::review_scoped_membership_cannot_claim_hidden_node ... ok test mesh_api_tests::membership::scoped_membership_checks_pre_edit_host_scope ... ok test mesh_api_tests::mesh_api_scale_benchmark ... ignored, scale measurement; run on infraternal-dev under the weighted user scope test mesh_api_tests::pagination::an_unsendable_object_returns_a_sanitized_service_error ... ok test mesh_api_tests::pagination::continuation_restarts_on_change_and_rechecks_permissions ... ok test mesh_api_tests::parser_rejects_unknown_fields_user_endpoints_and_invalid_bounds ... ok test mesh_api_tests::review_filtered::review_global_viewers_do_not_refresh_unrelated_filtered_inventory ... ok test mesh_api_tests::review_frame_budget::review_mesh_design_point_frames_fit_shared_socket_budget ... ok test mesh_api_tests::review_null_policy::review_null_port_policy_does_not_create_unrestricted_grant ... ok test mesh_api_tests::review_null_scope::review_null_role_scopes_preserve_denied_inventory_access ... ok test mesh_api_tests::scoped_grant_role_filters_inventory_and_cannot_cross_tags ... ok test mesh_api_tests::shared_mesh_vectors_cover_each_production_action_and_wire_shape ... ok test mesh_api_tests::watch_deadline::watch_deadline_matches_complete_filtered_snapshots ... ok test mesh_api_tests::watch_deadline::watch_deadline_scale_benchmark ... ignored, weighted local scale measurement; run optimized without concurrent compilation test plugins::node_lifecycle::tests::disabling_replacement_and_retirement_join_the_correct_node_worker ... ok test release_build_tests::release_build_marker_is_explicit ... ok test release_http::tests::bounded_body_status_and_existing_destination_are_refused ... ok test release_http::tests::https_cannot_silently_accept_a_plaintext_bucket ... ok test release_http::tests::unsupported_scheme_credentials_query_and_fragment_never_connect ... ok test release_latest::tests::bench_bounded_metadata_verification ... ignored, local weighted-scope verification latency benchmark test release_latest::tests::bench_latest_fifty_callers ... ignored, local weighted-scope 50-caller real-engine RSS measurement test release_latest::tests::edge_pointer_is_verified_in_its_own_channel ... ok test release_latest::tests::pointer_authenticates_signed_version_and_refuses_replays_tampering_and_duplicates ... ok test release_latest::tests::stable_empty_reports_opt_in_without_edge_request ... ok test release_manifest::tests::noncanonical_or_cross_channel_identity_is_refused ... ok test release_manifest::tests::signed_identity_and_exact_bytes_are_required ... ok test release_payload::tests::a_missing_payload_never_enables_development_fallback ... ok test release_payload::tests::a_valid_older_release_replayed_under_the_requested_version_is_refused ... ok test release_payload::tests::cache_symlinks_and_shared_files_are_refused ... ok test release_payload::tests::cross_architecture_cold_and_warm_cache_measurements ... ignored, run release-profile measurements in a weighted scope test release_payload::tests::edge_add_host_keeps_exact_server_version_and_verified_cache ... ok test release_payload::tests::eight_concurrent_add_hosts_share_one_verified_download ... ok test release_payload::tests::missing_wrong_version_tampered_network_and_development_only_fallback ... ok test release_payload::tests::partial_download_restart_child ... ignored, subprocess helper for release-cache restart verification test release_payload::tests::resolver_startup_removes_only_owned_inactive_private_staging ... ok test release_payload::tests::restarted_resolution_reclaims_partial_downloads_after_process_stop ... ok test release_payload::tests::signed_download_cache_hit_offline_and_tampered_cache ... ok test release_verify::tests::compiled_authorities_keep_production_and_isolate_staging ... ok test release_verify::tests::openssh_signatures_preserve_descriptor_and_reject_every_byte_mutation ... ok test release_verify::tests::per_run_signature_obeys_the_compiled_feature_boundary ... ok test release_verify::tests::trust_namespace_hash_trailing_data_and_manifest_ambiguity_are_refused ... ok test release_verify::tests::verification_twenty_megabytes_fifty_runs ... ignored, run release-profile measurements in a weighted scope test remote_accept::tests::anonymous_capacity_and_single_source_cannot_consume_known_reserve ... ok test remote_admission::tests::ports_do_not_change_source_capacity_and_mapped_addresses_share_it ... ok test remote_admission::tests::source_admission_cost_at_1000_sources ... ignored, optimized source admission diagnostic; no own build overlap test remote_enrollment::tests::cold_locked_signer_preserves_admission_and_token_until_authenticated_unlock ... ok test remote_enrollment::tests::invalid_csr_does_not_burn_token_and_join_returns_only_committed_authority ... ok test remote_enrollment::tests::invalid_invitations_never_load_the_private_signer ... ok test remote_guard::cut_tests::cancellation_survives_last_transport_until_durable_tombstone ... ok test remote_http::tests::enrollment_api_at_1000_hosts ... ignored, explicit real HTTP-adapter/SQLite signing measurement at 1000 hosts; not transport or whole-daemon evidence test remote_http::tests::enrollment_http_is_bound_single_use_and_preserves_token_while_locked ... ok test remote_http::tests::invitation_publication_rechecks_session_after_host_creation ... ok test remote_http::tests::revocation::abandoned_revocation_write_cannot_leave_committed_authority_live ... ok test remote_http::tests::revocation::claude_review_anonymous_stalled_joins_cannot_block_owner_revocation ... ok test remote_http::tests::revocation::cold_signer_does_not_block_owner_revocation_or_cancellation ... ok test remote_http::tests::revocation::permission_revoked_while_waiting_for_sqlite_writer_refuses_tombstone ... ok test remote_http::tests::revocation::revocation_rechecks_locked_expired_logged_out_and_wrong_owner_sessions ... ok test remote_inventory::pagination_tests::long_destinations_stay_bounded_and_all_pages_are_complete ... ok test remote_inventory::tests::admitted_hosts_are_account_scoped_offline_and_revocation_filtered ... ok test remote_inventory::tests::unredeemed_invitations_are_not_admitted_and_cursors_are_canonical ... ok test remote_mesh_revocation_tests::committed_host_revocation_pushes_peer_withdrawal_without_polling ... ok test remote_removal_http::tests::removal_parsers_refuse_positional_duplicate_and_unbounded_inputs ... ok test remote_runtime::tests::additional_listeners::additional_listener_keeps_underlay_address_and_retires_with_its_lease ... ok test remote_runtime::tests::additional_listeners::additional_listener_refuses_unenrolled_certificate_before_proof_reply ... ok test remote_runtime::tests::additional_listeners::initial_overlay_admission_has_no_underlay_guess ... ok test remote_runtime::tests::additional_listeners::ipv6_wildcard_listener_reuses_binding_and_preserves_ipv4_discovery ... ok test remote_runtime::tests::additional_listeners::wildcard_listener_reuses_binding_and_tracks_destination_lease_counts ... ok test remote_runtime::tests::cancelled_native_read_retains_dequeued_packet ... ok test remote_runtime::tests::candidate_proofs::candidate_proof_refuses_a_second_probe_and_invalid_hello ... ok test remote_runtime::tests::candidate_proofs::quic_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok test remote_runtime::tests::candidate_proofs::tls_candidate_proof_waits_for_hello_and_preserves_its_suffix ... ok test remote_runtime::tests::claude_review_idle_anonymous_sockets_cannot_starve_host_handshakes ... ok test remote_runtime::tests::ephemeral_listener_pair_retries_real_udp_collision_without_leaking_tcp ... ok test remote_runtime::tests::explicit_listener_pair_never_moves_an_occupied_operator_port ... ok test remote_runtime::tests::independent_review::admitted_frame_write_fence_cost ... ignored, write-fence CPU diagnostic; run release alone, not whole-transport evidence test remote_runtime::tests::independent_review::committed_tombstone_cannot_forward_input_before_finalizer_returns ... ok test remote_runtime::tests::independent_review::review_expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::independent_review::review_revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::quic_actor_binds_durable_writer_and_recovery_offsets ... ok test remote_runtime::tests::renewal_checks::renewal_refuses_same_issuer_wrong_key_purpose_or_lifetime_before_publication ... ok test remote_runtime::tests::renewal_checks::renewal_validates_host_dates_json_and_durable_publication_before_ack ... ok test remote_runtime::tests::retired_native_writer_frames_cannot_close_or_ack_its_replacement ... ok test remote_runtime::tests::revocation::admitted_guard_expires_and_prior_revocation_cannot_reregister ... ok test remote_runtime::tests::revocation::expired_identity_must_refuse_new_attachment_on_existing_transport ... ok test remote_runtime::tests::revocation::guard_bookkeeping_at_1000_hosts ... ignored, guard component diagnostic; run alone without builds or browser measurements test remote_runtime::tests::revocation::retirement::old_expiry_cannot_remove_a_fresh_tls_replacement ... ok test remote_runtime::tests::revocation::retirement::registry_retention_at_1000_actual_tls_hosts ... ignored, 1000-host registry diagnostic; optimized, FD limit8192, no own build/browser overlap test remote_runtime::tests::revocation::retirement::revoked_host_releases_its_registry_entry_and_retained_actor ... ok test remote_runtime::tests::revocation::revocation_closes_admitted_idle_quic_connection ... ok test remote_runtime::tests::revocation::revocation_must_cancel_input_on_existing_tls_transport ... ok test remote_runtime::tests::standby::a_second_parked_fallback_cannot_replace_the_first ... ok test remote_runtime::tests::standby::control_pause::cancelled_control_packet_survives_pause_and_resumes_before_queued_sibling ... ok test remote_runtime::tests::standby::control_queue::saturated_native_control_queue_does_not_hide_primary_terminal_output ... ok test remote_runtime::tests::standby::detached_primed_writers_release_native_binding_budget ... ok test remote_runtime::tests::standby::parked_fallback_is_cancelled_by_ledger_revocation ... ok test remote_runtime::tests::standby::parked_fallback_survives_greeting_deadline_and_activates_without_another_hello ... ok test remote_runtime::tests::standby::primed_fallback_activates_after_the_primary_closes ... ok test remote_runtime::tests::standby::primed_fallback_hedges_when_credit_arrives_behind_a_blocked_primary_write ... ok test remote_runtime::tests::standby::primed_fallback_hedges_while_primary_native_send_buffer_is_full ... ok test remote_runtime::tests::standby::primed_hedge_survives_blocked_control_call ... ok test remote_runtime::tests::standby::primed_standby_greets_without_replacing_the_live_actor_before_activation ... ok test remote_runtime::tests::standby::tcp_fallback_parks_without_a_host_actor_and_activates_on_the_existing_tls_channel ... ok test remote_runtime::tests::tcp_actor_uses_enrolled_uid_and_replays_admission_hello ... ok test remote_standby::tests::bounded_standby_options_reject_ambiguous_or_unrecognized_fields ... ok test remote_standby::tests::cancelled_queue_admission_releases_parking_before_actor_poll ... ok test remote_standby::tests::parking_is_per_identity_bounded_and_released_on_drop ... ok test remote_standby_request::tests::requests_require_objects_and_exact_fields ... ok test remote_startup::tests::normal_cold_start_uses_public_trust_without_loading_or_generating_ca_key ... ok test remote_startup::tests::symlink_shared_oversized_or_special_trust_files_fail_closed ... ok test remote_startup::tests::wrong_issuer_key_name_or_unpinned_https_refuses_startup ... ok test runtime::key_runtime_tests::configured_startup_generates_once_and_settings_shares_its_cold_lock ... ok test runtime::remote_demo_tests::cold_start::normal_cli_cold_start_keeps_enrolled_remote_terminal_while_signing_locked ... ignored, normal CLI cold-start proof requires static INFRATERNAL_REMOTE_TEST_BINARY and exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_rootless_join_terminal_and_cleanup ... ignored, authorised o1 proof requires pinned INFRATERNAL_O1_KNOWN_HOSTS and aarch64 INFRATERNAL_REMOTE_TEST_BINARY; exclusive 4701/7443 test runtime::remote_demo_tests::real_host::o1_runtime_path_admits_real_unix_socket_address ... ok test runtime::remote_demo_tests::remote_cli_enrollment_and_browser_terminal_two_processes ... ignored, two-process proof requires INFRATERNAL_REMOTE_TEST_BINARY and exclusive port 4701 test runtime::remote_demo_tests::renewal::half_life_requests_proof_on_live_authenticated_control ... ok test runtime::remote_demo_tests::renewal_ack::failed_publication_retains_original_admission_without_interrupting_terminal ... ok test runtime::remote_demo_tests::renewal_ack::unlock_renews_live_identity_only_after_publication_ack_with_terminal_intact ... ok test runtime::remote_demo_tests::renewal_cli::cli_live_renewal_cost_and_durable_identity_on_unchanged_transport ... ignored, real CLI renewal measurement requires release binary and exclusive port4701; no own compilation/browser overlap test runtime::remote_demo_tests::renewal_cli::flood::remote_cli_renewal_under_50m_load_preserves_every_byte_and_writer ... ignored, real CLI 50MiB renewal proof: exclusive4701 and release binary; no own build/browser overlap test runtime::remote_demo_tests::shipping_route::independent_review_configured_server_mounts_ca_unlock_routes ... ok test runtime::remote_demo_tests::shipping_route::review_default_server_must_register_remote_join ... ok test runtime::reviewer_admission::reviewer_recovery_source_limit_covers_all_routes_without_forwarding_bypass ... ok test runtime::temporal_admission_tests::ca_budget_cost_at_capacity ... ignored, isolated debug admission diagnostic at 4096 principals; run without own build overlap test runtime::temporal_admission_tests::windows_principals_and_capacity_remain_bounded ... ok test runtime::tests::production_router_exposes_bootstrap_owner_admission ... ok test runtime::tests::proxy_mode_requires_an_explicit_peer_allowlist ... ok test runtime::tests::proxy_networks_match_only_their_address_family_and_prefix ... ok test runtime::tests::restart_serves_fresh_setup_token_and_completes_owner_enrollment ... ok test runtime::tests::router_migrates_private_storage_and_serves_health ... ok test runtime::tests::setup_socket_cleanup_preserves_symlinks_and_regular_files ... ok test runtime::tests::setup_token_socket_is_private_and_requires_explicit_request ... ok test runtime::tests::startup_with_owner_unlinks_stale_setup_token_socket ... ok test server_tls::tests::standalone_https_disables_nagle_before_application_bytes ... ok test ssh_key::tests::concurrent_initialization_retains_one_identity_and_unwrap_cannot_replace_it ... ok test ssh_key::tests::first_start_is_wrapped_once_and_every_cold_start_is_locked ... ok test ssh_key::tests::lock_during_administrator_unwrap_cannot_reinstall_private_material ... ok test ssh_key::tests::lock_generation_exhaustion_never_wraps_into_an_unlocked_source ... ok test ssh_key::tests::malformed_existing_storage_is_refused_without_generating_a_replacement ... ok test ssh_key::tests::material_refuses_invalid_pem_and_non_ed25519_algorithms ... ok test ssh_key::tests::unavailable_or_empty_custody_publishes_no_key ... ok test ssh_key::tests::update_handoff_preserves_unlocked_identity_but_cold_restart_does_not ... ok test upgrade_resume::tests::complete_metadata_round_trips_and_every_truncation_is_rejected ... ok test upgrade_resume::tests::input_actions_duplicate_streams_and_trailing_frames_are_rejected ... ok test web_assets::tests::encodings_and_identity_have_correct_headers_and_sizes ... ok test web_assets::tests::spa_and_mutable_assets_revalidate_and_missing_brotli_uses_gzip ... ok test websocket::cookie_tests::duplicate_cookie_fields_deny_socket_session ... ok ```
Author
Owner

Final branch-head scripts/verify fast output verbatim, part 6/12. Head 28bbc0b6fa; exit1, only static sizes fail. SHA256 b935fbfa77756bb873f44a315d1f3f61b1a57f4622068c4961eea6d8e8421447. RTT row ran on VM208/shared lock with identical script SHA815c3bee752af0471ab9bf47b671e4729f2ef0cb7659a6655e8b8e24e4b7b73d. Functional transcript durations are not accepted performance measurements.

test websocket::cookie_tests::split_cookie_fields_preserve_socket_session ... ok
test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification
test websocket::session_inventory_tests::available_snapshot_reports_live_rows_and_bounded_saved_exit_statuses ... ok
test websocket::session_inventory_tests::census_waiting_for_database_does_not_close_a_newly_created_live_session ... ok
test websocket::session_inventory_tests::inventory_reconciliation_at_200_sessions_and_50_accounts ... ignored, independent scale diagnostic; run in a weighted scope
test websocket::session_inventory_tests::pending_agent_inventory_hides_cached_rows_until_the_first_census ... ok
test websocket::session_inventory_tests::reconciliation_before_saved_exit_keeps_the_authoritative_exit_status ... ok
test websocket::session_inventory_tests::restart_reconciliation_keeps_live_rows_and_closes_missing_rows ... ok
test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok
test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds
test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok

test result: ok. 425 passed; 0 failed; 46 ignored; 0 measured; 0 filtered out; finished in 552.73s

     Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/catalog_startup-ec71f4283e741d89)

running 1 test
test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s

     Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/enrollment-7997973c1f408dea)

running 6 tests
test concurrent_redemption_has_one_winner_and_one_certificate ... ok
test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget
test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok
test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok
test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok
test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok

test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.51s

     Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/mesh_parser-a11bed8d1d607ff0)

running 2 tests
test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok
test review_grant_parser_rejects_unknown_nested_port_fields ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/mesh_review_plugin-528f6046d03cdfce)

running 1 test
test review_mesh_dependency_is_removable_at_build_time ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s

     Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/mesh_review_policy-e5bc26f6d161f96f)

running 1 test
test review_null_port_policy_is_refused ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/mesh_review_role_scope-902722ff9982fa55)

running 2 tests
test review_explicit_null_role_scopes_do_not_become_global_authority ... ok
test role_scopes_require_an_array_when_provided ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

     Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/plugin_host_review-49f33e2f08350a85)

running 7 tests
test review_completed_call_survives_normal_worker_exit ... ok
test review_core_topic_remains_core_owned_even_when_declared ... ok
test review_disable_answers_inflight_call ... ok
test review_disable_withdraws_view_and_keeps_socket ... ok
test review_exited_worker_ends_its_subscriptions ... ok
test review_reenable_preserves_cancelled_calls_until_delivery ... ok
test review_undeclared_topic_is_left_to_the_core ... ok

test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.52s

     Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/plugin_settings_review-0663564c599d9896)

running 3 tests
test failed_plugin_save_restores_previous_state_without_workers ... ok
test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok
test plugin_switches_survive_database_reopen ... ok

test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.68s

     Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/remote_plugin_contract-7d7ed66e1a653a4f)

running 1 test
test independent_review_core_build_without_features_omits_remote_transport ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.34s

     Running tests/review_mesh_host_removal.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/review_mesh_host_removal-13d0cf7411f1b21b)

running 1 test
test revoked_remote_host_is_withdrawn_from_mesh_peer_policy ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s

     Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_shim-7eaae763d080ce29)

running 93 tests
test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok
test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok
test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok
test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement
test frame::checks::deferred_frame_keeps_its_borrowed_storage_and_ordered_trailing_bytes ... ok
test frame::checks::golden::every_frozen_message ... ok
test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok
test frame::checks::maximum_deferred_frame_retries_without_growing_storage ... ok
test frame::checks::shared_writer_selector_is_fixed_length_and_fragment_safe ... ok
test frame::checks::tests::golden_and_fragmented ... ok
test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok
test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok
test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok
test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok
test locale::tests::invalid_shell_expressions_are_ignored ... ok
test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok
test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok
test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok
test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok
test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok
test pty::child_locale_tests::spawned_login_shell_receives_selected_locale_without_other_host_variables ... ok
test pty::child_signal_tests::child_policy_closes_the_control_descriptor_before_direct_exec ... ok
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... 
running 1 test
test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 92 filtered out; finished in 0.00s

ok
test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap
test ring::checks::tests::wrap_and_exact_offsets ... ok
test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok
test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok
test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok
test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile
test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement
test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok
test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile
test session::sequenced_checks::a_completed_deferred_frame_gives_its_trailing_input_a_fresh_ticket ... ok
test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok
test session::sequenced_checks::negotiated_queue_deferral_validates_ranges_before_waiting ... ok
test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok
test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok
test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok
test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok
test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok
test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok
test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok
test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok
test terminal::checks::tests::fixtures_and_continuations_repaint ... ok
test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok
test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok
test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok
test terminal::checks::tests::partial_csi_and_utf8_continue ... ok
test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok
test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok
test terminal::checks::tests::saved_origin_survives_changed_margins ... ok
test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok
test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_cursor ... ok
test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file
test terminal::fidelity::fidelity_edge ... ok
test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_extended_smoke ... ok
test terminal::fidelity::fidelity_f1_rep ... ok
test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_handwritten ... ok
test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok
test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok
test terminal::fidelity::fidelity_iso_protection_erase ... ok
test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok
test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok
test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok
test terminal::fidelity::fidelity_orphaned_spacer_head ... ok
test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok
test terminal::fidelity::fidelity_recorded_corpus ... ok
test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok
test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok
test terminal::fidelity::fidelity_saved_modes_future_restore ... ok
test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok
test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases
test terminal::fidelity::fidelity_seeded_smoke ... ok
test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok
test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok
test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok
test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok
test terminal::fidelity::fidelity_spacer_head_attributes ... ok
test terminal::fidelity::fidelity_variation_tail_attributes ... ok
test terminal::fidelity::fidelity_variation_wrap_attributes ... ok
test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture
test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host
test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process
test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement
test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup
test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok
test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok
test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok
test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok
test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok

test result: ok. 80 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 60.45s

     Running tests/detach.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/detach-c00818a1c892d25b)

running 2 tests
test closed_standard_descriptors_become_dev_null ... ok
test detached_child_restores_default_signals_without_changing_parent ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.12s

     Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/mouse-23bf423bbf4a1258)

running 1 test
test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.80s

     Running tests/process_exit_descriptor.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/process_exit_descriptor-7ee4f082c1b7d9c3)

running 2 tests
test descriptor_is_cloexec_and_observes_a_real_process_exit ... ok
test invalid_pid_never_creates_a_descriptor ... ok

test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_agent

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_mesh

running 1 test
test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok

test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.25s

   Doc-tests infraternal_plugin_api

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_backup

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_host_facts

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_mesh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_relay

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_release

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_remote

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_plugin_ssh

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_protocol

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_server

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s

   Doc-tests infraternal_shim

running 0 tests

test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s


==> cargo-deny
warning[duplicate]: found 2 duplicate entries for crate 'base64'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:24:1
   │  
24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index
25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ base64 v0.21.7
     ├── base64urlsafedata v0.5.5
     │   ├── webauthn-attestation-ca v0.5.5
     │   │   └── webauthn-rs-core v0.5.5
     │   │       └── webauthn-rs v0.5.5
     │   │           └── infraternal-server v0.1.0
     │   │               ├── infraternal v0.1.0
     │   │               └── infraternal-fuzz v0.1.0
     │   ├── webauthn-rs v0.5.5 (*)
     │   ├── webauthn-rs-core v0.5.5 (*)
     │   └── webauthn-rs-proto v0.5.5
     │       └── webauthn-rs-core v0.5.5 (*)
     ├── webauthn-rs-core v0.5.5 (*)
     └── webauthn-rs-proto v0.5.5 (*)
   ├ base64 v0.22.1
     ├── axum v0.8.9
     │   ├── infraternal-fuzz v0.1.0
     │   └── infraternal-server v0.1.0
     │       ├── infraternal v0.1.0
     │       └── infraternal-fuzz v0.1.0 (*)
     ├── infraternal v0.1.0 (*)
     ├── infraternal-server v0.1.0 (*)
     └── sqlx-core v0.8.6
         ├── sqlx v0.8.6
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-plugin-api v0.1.0
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-agent v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-mesh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   └── infraternal-plugin-mesh v0.1.0
         │   │   │       ├── infraternal v0.1.0 (*)
         │   │   │       ├── infraternal-agent v0.1.0 (*)
         │   │   │       ├── infraternal-fuzz v0.1.0 (*)
         │   │   │       └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-backup v0.1.0
         │   │   │   └── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   ├── infraternal-plugin-relay v0.1.0
         │   │   │   └── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-release v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-ssh v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   ├── infraternal-plugin-release v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── sqlx-macros v0.8.6
         │   └── sqlx v0.8.6 (*)
         ├── sqlx-macros-core v0.8.6
         │   └── sqlx-macros v0.8.6 (*)
         └── sqlx-sqlite v0.8.6
             ├── sqlx v0.8.6 (*)
             └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:50:1
   │  
50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index
51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ cpufeatures v0.2.17
     ├── aes v0.8.4
     │   └── aes-gcm v0.10.3
     │       └── (dev) infraternal-server v0.1.0
     │           ├── infraternal v0.1.0
     │           └── infraternal-fuzz v0.1.0
     ├── argon2 v0.5.3
     │   └── infraternal-server v0.1.0 (*)
     ├── polyval v0.6.2
     │   └── ghash v0.5.1
     │       └── aes-gcm v0.10.3 (*)
     ├── sha1 v0.10.7
     │   ├── axum v0.8.9
     │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   └── infraternal-server v0.1.0 (*)
     │   └── tungstenite v0.29.0
     │       └── tokio-tungstenite v0.29.0
     │           ├── axum v0.8.9 (*)
     │           └── (dev) infraternal-server v0.1.0 (*)
     └── sha2 v0.10.9
         ├── infraternal-plugin-ssh v0.1.0
         │   ├── infraternal v0.1.0 (*)
         │   ├── infraternal-fuzz v0.1.0 (*)
         │   └── infraternal-server v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── sqlx-core v0.8.6
         │   ├── sqlx v0.8.6
         │   │   ├── infraternal v0.1.0 (*)
         │   │   ├── infraternal-plugin-api v0.1.0
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-agent v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-mesh v0.1.0
Final branch-head scripts/verify fast output verbatim, part 6/12. Head 28bbc0b6fa18356a992c2ec215213d5d732d271b; exit1, only static sizes fail. SHA256 b935fbfa77756bb873f44a315d1f3f61b1a57f4622068c4961eea6d8e8421447. RTT row ran on VM208/shared lock with identical script SHA815c3bee752af0471ab9bf47b671e4729f2ef0cb7659a6655e8b8e24e4b7b73d. Functional transcript durations are not accepted performance measurements. ```text test websocket::cookie_tests::split_cookie_fields_preserve_socket_session ... ok test websocket::recovery_notification_bench::recovery_notification_state_at_socket_capacity ... ignored, notification state sizing diagnostic, not allocator-inclusive RSS certification test websocket::session_inventory_tests::available_snapshot_reports_live_rows_and_bounded_saved_exit_statuses ... ok test websocket::session_inventory_tests::census_waiting_for_database_does_not_close_a_newly_created_live_session ... ok test websocket::session_inventory_tests::inventory_reconciliation_at_200_sessions_and_50_accounts ... ignored, independent scale diagnostic; run in a weighted scope test websocket::session_inventory_tests::pending_agent_inventory_hides_cached_rows_until_the_first_census ... ok test websocket::session_inventory_tests::reconciliation_before_saved_exit_keeps_the_authoritative_exit_status ... ok test websocket::session_inventory_tests::restart_reconciliation_keeps_live_rows_and_closes_missing_rows ... ok test websocket::writer_tests::second_device_does_not_inherit_first_device_input_ack ... ok test websocket::writer_tests::writer_admission_at_user_capacity ... ignored, release-only scale measurement; run without concurrent builds test websocket::writer_tests::writer_ownership_capacity_unsigned_offsets_and_identity_reuse ... ok test result: ok. 425 passed; 0 failed; 46 ignored; 0 measured; 0 filtered out; finished in 552.73s Running tests/catalog_startup.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/catalog_startup-ec71f4283e741d89) running 1 test test explicit_catalog_startup_remains_public_and_validates_before_storage ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.04s Running tests/enrollment.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/enrollment-7997973c1f408dea) running 6 tests test concurrent_redemption_has_one_winner_and_one_certificate ... ok test enrollment_storage_at_500_hosts ... ignored, explicit 500-host storage measurement; not a remote transport budget test invalid_certificate_and_failed_insert_preserve_the_invitation ... ok test invitation_is_hashed_replaced_and_bound_to_owner_host_mode_and_exact_expiry ... ok test malformed_capabilities_and_certificate_overflow_are_refused_before_mutation ... ok test revocation_tombstone_refuses_existing_and_new_invitations_after_restart ... ok test result: ok. 5 passed; 0 failed; 1 ignored; 0 measured; 0 filtered out; finished in 0.51s Running tests/mesh_parser.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/mesh_parser-a11bed8d1d607ff0) running 2 tests test nested_endpoint_and_policy_fields_are_strict_without_rejecting_valid_ports ... ok test review_grant_parser_rejects_unknown_nested_port_fields ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_plugin.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/mesh_review_plugin-528f6046d03cdfce) running 1 test test review_mesh_dependency_is_removable_at_build_time ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.03s Running tests/mesh_review_policy.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/mesh_review_policy-e5bc26f6d161f96f) running 1 test test review_null_port_policy_is_refused ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/mesh_review_role_scope.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/mesh_review_role_scope-902722ff9982fa55) running 2 tests test review_explicit_null_role_scopes_do_not_become_global_authority ... ok test role_scopes_require_an_array_when_provided ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Running tests/plugin_host_review.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/plugin_host_review-49f33e2f08350a85) running 7 tests test review_completed_call_survives_normal_worker_exit ... ok test review_core_topic_remains_core_owned_even_when_declared ... ok test review_disable_answers_inflight_call ... ok test review_disable_withdraws_view_and_keeps_socket ... ok test review_exited_worker_ends_its_subscriptions ... ok test review_reenable_preserves_cancelled_calls_until_delivery ... ok test review_undeclared_topic_is_left_to_the_core ... ok test result: ok. 7 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.52s Running tests/plugin_settings_review.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/plugin_settings_review-0663564c599d9896) running 3 tests test failed_plugin_save_restores_previous_state_without_workers ... ok test plugin_settings_enforce_boolean_and_role_plugin_identity ... ok test plugin_switches_survive_database_reopen ... ok test result: ok. 3 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.68s Running tests/remote_plugin_contract.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/remote_plugin_contract-7d7ed66e1a653a4f) running 1 test test independent_review_core_build_without_features_omits_remote_transport ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.34s Running tests/review_mesh_host_removal.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/review_mesh_host_removal-13d0cf7411f1b21b) running 1 test test revoked_remote_host_is_withdrawn_from_mesh_peer_policy ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.06s Running unittests src/lib.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/infraternal_shim-7eaae763d080ce29) running 93 tests test ended::tests::bounded_record_preserves_status_and_rejects_malformed_or_linked_data ... ok test frame::checks::approximate_snapshot_codec_is_bounded_and_canonical ... ok test frame::checks::borrowed_and_owned_decoders_agree_at_every_fragment_boundary ... ok test frame::checks::codec_reuse_measurement ... ignored, release codec and allocation-path measurement test frame::checks::deferred_frame_keeps_its_borrowed_storage_and_ordered_trailing_bytes ... ok test frame::checks::golden::every_frozen_message ... ok test frame::checks::golden::exact_maximum_and_coalesced_frames ... ok test frame::checks::maximum_deferred_frame_retries_without_growing_storage ... ok test frame::checks::shared_writer_selector_is_fixed_length_and_fragment_safe ... ok test frame::checks::tests::golden_and_fragmented ... ok test frame::checks::tests::invalid_lengths_types_and_utf8 ... ok test locale::tests::absent_locale_uses_fallback_only_when_it_is_installed ... ok test locale::tests::configured_locale_is_selected_from_login_locale_files ... ok test locale::tests::existing_user_locale_values_are_preserved_without_replacement ... ok test locale::tests::invalid_shell_expressions_are_ignored ... ok test locale::tests::macos_locale_identifier_gets_a_utf8_codeset ... ok test locale::tests::missing_lang_preserves_other_locale_values_and_fills_only_lang ... ok test locale::tests::non_locale_values_do_not_cross_the_scrubbed_shell_boundary ... ok test locale::tests::unsupported_configured_locale_uses_installed_utf8_fallback ... ok test locked_bytes::tests::anonymous_transfer_pages_are_locked_and_excluded_from_core_dumps ... ok test pty::child_locale_tests::spawned_login_shell_receives_selected_locale_without_other_host_variables ... ok test pty::child_signal_tests::child_policy_closes_the_control_descriptor_before_direct_exec ... ok test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... running 1 test test pty::child_signal_tests::child_reset_restores_ignored_dispositions_and_leaves_parent_mask ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 92 filtered out; finished in 0.00s ok test pty::child_signal_tests::child_signal_reset_spawn_cost_at_128_children ... ignored, child spawn diagnostic; run locally in a weighted scope without own build overlap test ring::checks::tests::wrap_and_exact_offsets ... ok test session::inputs::tests::identity_cap_preserves_all_existing_cursors ... ok test session::inputs::tests::partial_writes_credit_only_the_owner_and_replay_trims_per_writer ... ok test session::measurements::budgets::allowlisted_signal_after_real_pty_exit_keeps_exit_ack_available ... ok test session::measurements::budgets::input_to_pty_write ... ignored, real-PTY performance measurement; set ZDOTDIR to tests/profile test session::measurements::poll_storage_measurement ... ignored, release poll-storage allocation measurement test session::resize_checks::native_resize_refusal_preserves_peer_and_pty ... ok test session::resize_checks::resize_refusal_session_probe ... ignored, isolated session probe invoked by its parent with a controlled shell profile test session::sequenced_checks::a_completed_deferred_frame_gives_its_trailing_input_a_fresh_ticket ... ok test session::sequenced_checks::coalesced_ack_never_overwrites_a_partial_output_and_cursors_survive_peer_loss ... ok test session::sequenced_checks::negotiated_queue_deferral_validates_ranges_before_waiting ... ok test session::sequenced_checks::new_frames_roundtrip_and_refuse_noncanonical_payloads ... ok test session::sequenced_checks::reusable_encoder_retains_capacity_and_refuses_growth_before_mutation ... ok test session::sequenced_checks::trim_duplicates_gaps_overflow_and_capacity_are_transactional ... ok test session::sequenced_checks::writer_selection_has_a_frozen_little_endian_layout ... ok test terminal::checks::approximate_repaint_is_bounded_clips_at_complete_cells_and_preserves_source ... ok test terminal::checks::approximate_repaint_keeps_complete_pending_syntax_or_omits_it_whole ... ok test terminal::checks::tests::alternate_variants_and_nested_switches_repaint ... ok test terminal::checks::tests::byte_budget_prunes_history_and_resize_remains_repaintable ... ok test terminal::checks::tests::fixtures_and_continuations_repaint ... ok test terminal::checks::tests::implicit_hyperlinks_retain_groups_across_rows_and_continuation ... ok test terminal::checks::tests::long_unfinished_hyperlink_and_control_strings_continue ... ok test terminal::checks::tests::margins_tabs_charsets_and_modes_continue ... ok test terminal::checks::tests::partial_csi_and_utf8_continue ... ok test terminal::checks::tests::pending_wrap_and_saved_wrap_continue_with_wide_cells ... ok test terminal::checks::tests::retained_alternate_saved_cursor_and_keyboard_stack_continue ... ok test terminal::checks::tests::saved_origin_survives_changed_margins ... ok test terminal::checks::tests::unfinished_sequence_over_frame_limit_fails_without_losing_runtime_state ... ok test terminal::fidelity::fidelity_charset_mapped_wide_space_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_cursor ... ok test terminal::fidelity::fidelity_diagnostic_fixture ... ignored, diagnostic replay of an explicitly selected fixture file test terminal::fidelity::fidelity_edge ... ok test terminal::fidelity::fidelity_extended_nightly ... ignored, nightly expanded differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_extended_smoke ... ok test terminal::fidelity::fidelity_f1_rep ... ok test terminal::fidelity::fidelity_fresh_c_redraw_default_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_handwritten ... ok test terminal::fidelity::fidelity_inherited_protection_off_mode_is_explicitly_rejected ... ok test terminal::fidelity::fidelity_iso_protection_does_not_keep_rep_scratch ... ok test terminal::fidelity::fidelity_iso_protection_erase ... ok test terminal::fidelity::fidelity_mouse_effective_fields_follow_order_independently_of_booleans ... ok test terminal::fidelity::fidelity_oracle_detects_hidden_state ... ok test terminal::fidelity::fidelity_oracle_observes_archived_cells_with_equal_active_screens ... ok test terminal::fidelity::fidelity_orphaned_spacer_head ... ok test terminal::fidelity::fidelity_prompt_resize_requires_explicit_rejection ... ok test terminal::fidelity::fidelity_recorded_corpus ... ok test terminal::fidelity::fidelity_rejects_unrepresentable_rep_without_mutating_source ... ok test terminal::fidelity::fidelity_saved_cursor_over_changed_edge ... ok test terminal::fidelity::fidelity_saved_modes_future_restore ... ok test terminal::fidelity::fidelity_screen_entry_consumes_inherited_shift_before_saving ... ok test terminal::fidelity::fidelity_seeded_nightly ... ignored, nightly differential corpus: 20,000 deterministic cases test terminal::fidelity::fidelity_seeded_smoke ... ok test terminal::fidelity::fidelity_semantic_validation_matches_exported_history_extent ... ok test terminal::fidelity::fidelity_single_shift_survives_rep_seed ... ok test terminal::fidelity::fidelity_snapshot_history_tail_contains_no_padding_rows ... ok test terminal::fidelity::fidelity_snapshot_resets_stale_viewer_color_overrides ... ok test terminal::fidelity::fidelity_spacer_head_attributes ... ok test terminal::fidelity::fidelity_variation_tail_attributes ... ok test terminal::fidelity::fidelity_variation_wrap_attributes ... ok test terminal::fidelity::fresh_captures::fidelity_fresh_real_program_captures ... ignored, manual fresh capture oracle; set VT_CAPTURE_DIR after real program capture test terminal::measurements::budgets::snapshot_200x60 ... ignored, performance measurement; run release on the perf host test terminal::measurements::memory::measured_terminal_rss ... ignored, RSS measurement; run this filter alone in a fresh release process test terminal::measurements::throughput::measured_parser ... ignored, VT observer and history throughput measurement test terminal::recovery_measurements::measured_full_ring_reconstruction ... ignored, release reconstruction measurement; old healthy handles permit repeated cleanup test terminal::resize_recovery::absent_ring_keeps_last_good_size_and_later_output_usable ... ok test terminal::resize_recovery::complete_ring_restores_screens_mouse_and_unfinished_syntax ... ok test terminal::resize_recovery::earlier_geometry_changes_require_approximation_even_with_origin_coverage ... ok test terminal::resize_recovery::ring_gap_requires_clean_approximate_recovery ... ok test terminal_native::allocation::resize_allocation_refusal_retires_native_handle ... ok test result: ok. 80 passed; 0 failed; 13 ignored; 0 measured; 0 filtered out; finished in 60.45s Running tests/detach.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/detach-c00818a1c892d25b) running 2 tests test closed_standard_descriptors_become_dev_null ... ok test detached_child_restores_default_signals_without_changing_parent ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.12s Running tests/mouse.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/mouse-23bf423bbf4a1258) running 1 test test faithful_snapshot_preserves_public_mouse_encoder_reports ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.80s Running tests/process_exit_descriptor.rs (/home/kayg/.cache/codex-scratch/prod-perf-fix/target/debug/deps/process_exit_descriptor-7ee4f082c1b7d9c3) running 2 tests test descriptor_is_cloexec_and_observes_a_real_process_exit ... ok test invalid_pid_never_creates_a_descriptor ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_agent running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_mesh running 1 test test crates/infraternal-mesh/src/model.rs - model::LocalPrivateKey (line 20) - compile fail ... ok test result: ok. 1 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.25s Doc-tests infraternal_plugin_api running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_backup running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_host_facts running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_mesh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_relay running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_release running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_remote running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_plugin_ssh running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_protocol running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_server running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s Doc-tests infraternal_shim running 0 tests test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s ==> cargo-deny warning[duplicate]: found 2 duplicate entries for crate 'base64' ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:24:1 │ 24 │ ╭ base64 0.21.7 registry+https://github.com/rust-lang/crates.io-index 25 │ │ base64 0.22.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────┘ lock entries │ ├ base64 v0.21.7 ├── base64urlsafedata v0.5.5 │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── webauthn-rs v0.5.5 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-proto v0.5.5 │ └── webauthn-rs-core v0.5.5 (*) ├── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-proto v0.5.5 (*) ├ base64 v0.22.1 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal v0.1.0 (*) ├── infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'cpufeatures' ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:50:1 │ 50 │ ╭ cpufeatures 0.2.17 registry+https://github.com/rust-lang/crates.io-index 51 │ │ cpufeatures 0.3.1 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ cpufeatures v0.2.17 ├── aes v0.8.4 │ └── aes-gcm v0.10.3 │ └── (dev) infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── argon2 v0.5.3 │ └── infraternal-server v0.1.0 (*) ├── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── sha1 v0.10.7 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sha2 v0.10.9 ├── infraternal-plugin-ssh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 ```
Author
Owner

Final branch-head scripts/verify fast output verbatim, part 7/12. Head 28bbc0b6fa; exit1, only static sizes fail. SHA256 b935fbfa77756bb873f44a315d1f3f61b1a57f4622068c4961eea6d8e8421447. RTT row ran on VM208/shared lock with identical script SHA815c3bee752af0471ab9bf47b671e4729f2ef0cb7659a6655e8b8e24e4b7b73d. Functional transcript durations are not accepted performance measurements.

         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   └── infraternal-plugin-mesh v0.1.0
         │   │   │   │       ├── infraternal v0.1.0 (*)
         │   │   │   │       ├── infraternal-agent v0.1.0 (*)
         │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │       └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-backup v0.1.0
         │   │   │   │   └── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-host-facts v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-relay v0.1.0
         │   │   │   │   └── infraternal v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-release v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-remote v0.1.0
         │   │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   │   ├── infraternal-agent v0.1.0 (*)
         │   │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
         │   │   ├── infraternal-plugin-release v0.1.0 (*)
         │   │   └── infraternal-server v0.1.0 (*)
         │   ├── sqlx-macros v0.8.6
         │   │   └── sqlx v0.8.6 (*)
         │   ├── sqlx-macros-core v0.8.6
         │   │   └── sqlx-macros v0.8.6 (*)
         │   └── sqlx-sqlite v0.8.6
         │       ├── sqlx v0.8.6 (*)
         │       └── sqlx-macros-core v0.8.6 (*)
         └── sqlx-macros-core v0.8.6 (*)
   ├ cpufeatures v0.3.1
     └── chacha20 v0.10.2
         └── rand v0.10.3
             └── quinn-proto v0.11.19
                 └── quinn v0.11.12
                     ├── infraternal-agent v0.1.0
                     │   ├── infraternal v0.1.0
                     │   ├── infraternal-fuzz v0.1.0
                     │   └── infraternal-server v0.1.0
                     │       ├── infraternal v0.1.0 (*)
                     │       └── infraternal-fuzz v0.1.0 (*)
                     ├── infraternal-plugin-remote v0.1.0
                     │   ├── infraternal v0.1.0 (*)
                     │   ├── infraternal-agent v0.1.0 (*)
                     │   └── infraternal-server v0.1.0 (*)
                     └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 3 duplicate entries for crate 'getrandom'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:92:1
   │  
92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index
93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index
94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index
   │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ getrandom v0.2.17
     ├── rand_core v0.6.4
     │   ├── bip39 v2.2.2
     │   │   └── infraternal-server v0.1.0
     │   │       ├── infraternal v0.1.0
     │   │       └── infraternal-fuzz v0.1.0
     │   ├── crypto-common v0.1.7
     │   │   ├── aead v0.5.2
     │   │   │   └── aes-gcm v0.10.3
     │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   ├── cipher v0.4.4
     │   │   │   ├── aes v0.8.4
     │   │   │   │   └── aes-gcm v0.10.3 (*)
     │   │   │   ├── aes-gcm v0.10.3 (*)
     │   │   │   └── ctr v0.9.2
     │   │   │       └── aes-gcm v0.10.3 (*)
     │   │   ├── digest v0.10.7
     │   │   │   ├── blake2 v0.10.6
     │   │   │   │   └── argon2 v0.5.3
     │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │   ├── hmac v0.12.1
     │   │   │   │   └── hkdf v0.12.4
     │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   ├── sha1 v0.10.7
     │   │   │   │   ├── axum v0.8.9
     │   │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │   │   └── tungstenite v0.29.0
     │   │   │   │       └── tokio-tungstenite v0.29.0
     │   │   │   │           ├── axum v0.8.9 (*)
     │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
     │   │   │   └── sha2 v0.10.9
     │   │   │       ├── infraternal-plugin-ssh v0.1.0
     │   │   │       │   ├── infraternal v0.1.0 (*)
     │   │   │       │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   └── infraternal-server v0.1.0 (*)
     │   │   │       ├── infraternal-server v0.1.0 (*)
     │   │   │       ├── sqlx-core v0.8.6
     │   │   │       │   ├── sqlx v0.8.6
     │   │   │       │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-api v0.1.0
     │   │   │       │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-agent v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-mesh v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-plugin-mesh v0.1.0
     │   │   │       │   │   │   │       ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │       ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │       └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-backup v0.1.0
     │   │   │       │   │   │   │   └── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-relay v0.1.0
     │   │   │       │   │   │   │   └── infraternal v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-release v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
     │   │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
     │   │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
     │   │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │   │   │       │   │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │   │   │       │   │   ├── infraternal-plugin-release v0.1.0 (*)
     │   │   │       │   │   └── infraternal-server v0.1.0 (*)
     │   │   │       │   ├── sqlx-macros v0.8.6
     │   │   │       │   │   └── sqlx v0.8.6 (*)
     │   │   │       │   ├── sqlx-macros-core v0.8.6
     │   │   │       │   │   └── sqlx-macros v0.8.6 (*)
     │   │   │       │   └── sqlx-sqlite v0.8.6
     │   │   │       │       ├── sqlx v0.8.6 (*)
     │   │   │       │       └── sqlx-macros-core v0.8.6 (*)
     │   │   │       └── sqlx-macros-core v0.8.6 (*)
     │   │   └── universal-hash v0.5.1
     │   │       └── polyval v0.6.2
     │   │           └── ghash v0.5.1
     │   │               └── aes-gcm v0.10.3 (*)
     │   ├── password-hash v0.5.0
     │   │   └── argon2 v0.5.3 (*)
     │   ├── rand v0.8.8
     │   │   └── bip39 v2.2.2 (*)
     │   └── rand_chacha v0.3.1
     │       └── rand v0.8.8 (*)
     └── ring v0.17.14
         ├── quinn-proto v0.11.19
         │   └── quinn v0.11.12
         │       ├── infraternal-agent v0.1.0 (*)
         │       ├── infraternal-plugin-remote v0.1.0 (*)
         │       └── infraternal-server v0.1.0 (*)
         ├── rustls v0.23.45
         │   ├── infraternal-plugin-remote v0.1.0 (*)
         │   ├── quinn v0.11.12 (*)
         │   └── quinn-proto v0.11.19 (*)
         └── rustls-webpki v0.103.15
             └── rustls v0.23.45 (*)
   ├ getrandom v0.3.4
     └── rand_core v0.9.5
         ├── rand v0.9.5
         │   ├── infraternal-server v0.1.0
         │   │   ├── infraternal v0.1.0
         │   │   └── infraternal-fuzz v0.1.0
         │   ├── tungstenite v0.29.0
         │   │   └── tokio-tungstenite v0.29.0
         │   │       ├── axum v0.8.9
         │   │       │   ├── infraternal-fuzz v0.1.0 (*)
         │   │       │   └── infraternal-server v0.1.0 (*)
         │   │       └── (dev) infraternal-server v0.1.0 (*)
         │   └── webauthn-rs-core v0.5.5
         │       └── webauthn-rs v0.5.5
         │           └── infraternal-server v0.1.0 (*)
         └── rand_chacha v0.9.0
             ├── rand v0.9.5 (*)
             └── webauthn-rs-core v0.5.5 (*)
   ├ getrandom v0.4.3
     ├── jobserver v0.1.35
     │   └── cc v1.6.0
     │       ├── (build) libfuzzer-sys v0.4.13
     │       │   └── infraternal-fuzz v0.1.0
     │       ├── (build) libsqlite3-sys v0.30.1
     │       │   └── sqlx-sqlite v0.8.6
     │       │       ├── sqlx v0.8.6
     │       │       │   ├── infraternal v0.1.0
     │       │       │   ├── infraternal-plugin-api v0.1.0
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-mesh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
     │       │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │       └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-backup v0.1.0
     │       │       │   │   │   └── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-relay v0.1.0
     │       │       │   │   │   └── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-release v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       └── sqlx-macros-core v0.8.6
     │       │           └── sqlx-macros v0.8.6
     │       │               └── sqlx v0.8.6 (*)
     │       ├── openssl-src v300.6.1+3.6.3
     │       │   └── (build) openssl-sys v0.9.117
     │       │       ├── axum-server v0.8.0
     │       │       │   └── infraternal-server v0.1.0 (*)
     │       │       ├── openssl v0.10.81
     │       │       │   ├── axum-server v0.8.0 (*)
     │       │       │   ├── infraternal v0.1.0 (*)
     │       │       │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   ├── infraternal-server v0.1.0 (*)
     │       │       │   ├── infraternal-shim v0.1.0
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
     │       │       │   │   └── infraternal-server v0.1.0 (*)
     │       │       │   ├── tokio-openssl v0.6.5
     │       │       │   │   ├── axum-server v0.8.0 (*)
     │       │       │   │   ├── infraternal v0.1.0 (*)
     │       │       │   │   ├── infraternal-agent v0.1.0 (*)
     │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
     │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
     │       │       │   ├── webauthn-attestation-ca v0.5.5
     │       │       │   │   └── webauthn-rs-core v0.5.5
     │       │       │   │       └── webauthn-rs v0.5.5
     │       │       │   │           └── infraternal-server v0.1.0 (*)
     │       │       │   └── webauthn-rs-core v0.5.5 (*)
     │       │       ├── tokio-openssl v0.6.5 (*)
     │       │       ├── webauthn-attestation-ca v0.5.5 (*)
     │       │       └── webauthn-rs-core v0.5.5 (*)
     │       ├── (build) openssl-sys v0.9.117 (*)
     │       └── (build) ring v0.17.14
     │           ├── quinn-proto v0.11.19
     │           │   └── quinn v0.11.12
     │           │       ├── infraternal-agent v0.1.0 (*)
     │           │       ├── infraternal-plugin-remote v0.1.0 (*)
     │           │       └── infraternal-server v0.1.0 (*)
     │           ├── rustls v0.23.45
     │           │   ├── infraternal-plugin-remote v0.1.0 (*)
     │           │   ├── quinn v0.11.12 (*)
     │           │   └── quinn-proto v0.11.19 (*)
     │           └── rustls-webpki v0.103.15
     │               └── rustls v0.23.45 (*)
     ├── quinn-proto v0.11.19 (*)
     ├── rand v0.10.3
     │   └── quinn-proto v0.11.19 (*)
     └── uuid v1.27.0
         ├── infraternal v0.1.0 (*)
         ├── infraternal-agent v0.1.0 (*)
         ├── infraternal-plugin-mesh v0.1.0 (*)
         ├── infraternal-plugin-release v0.1.0 (*)
         ├── infraternal-plugin-ssh v0.1.0 (*)
         ├── infraternal-server v0.1.0 (*)
         ├── webauthn-attestation-ca v0.5.5 (*)
         ├── webauthn-rs v0.5.5 (*)
         └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 2 duplicate entries for crate 'hashbrown'
   ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:98:1
   │  
98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index
99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index
   │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
   │  
   ├ hashbrown v0.15.5
     ├── hashlink v0.10.0
     │   └── sqlx-core v0.8.6
     │       ├── sqlx v0.8.6
     │       │   ├── infraternal v0.1.0
     │       │   ├── infraternal-plugin-api v0.1.0
     │       │   │   ├── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-agent v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0
     │       │   │   │   └── infraternal-server v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-mesh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   └── infraternal-plugin-mesh v0.1.0
     │       │   │   │       ├── infraternal v0.1.0 (*)
     │       │   │   │       ├── infraternal-agent v0.1.0 (*)
     │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │       └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-backup v0.1.0
     │       │   │   │   └── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-host-facts v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-relay v0.1.0
     │       │   │   │   └── infraternal v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-release v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-remote v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-agent v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   ├── infraternal-plugin-ssh v0.1.0
     │       │   │   │   ├── infraternal v0.1.0 (*)
     │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
     │       │   │   │   └── infraternal-server v0.1.0 (*)
     │       │   │   └── infraternal-server v0.1.0 (*)
     │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
     │       │   ├── infraternal-plugin-release v0.1.0 (*)
     │       │   └── infraternal-server v0.1.0 (*)
     │       ├── sqlx-macros v0.8.6
     │       │   └── sqlx v0.8.6 (*)
     │       ├── sqlx-macros-core v0.8.6
     │       │   └── sqlx-macros v0.8.6 (*)
     │       └── sqlx-sqlite v0.8.6
     │           ├── sqlx v0.8.6 (*)
     │           └── sqlx-macros-core v0.8.6 (*)
     └── sqlx-core v0.8.6 (*)
   ├ hashbrown v0.17.1
     └── indexmap v2.14.2
         ├── h2 v0.4.19
         │   ├── hyper v1.11.1
         │   │   ├── axum v0.8.9
         │   │   │   ├── infraternal-fuzz v0.1.0
         │   │   │   └── infraternal-server v0.1.0
         │   │   │       ├── infraternal v0.1.0
         │   │   │       └── infraternal-fuzz v0.1.0 (*)
         │   │   ├── axum-server v0.8.0
         │   │   │   └── infraternal-server v0.1.0 (*)
         │   │   ├── hyper-util v0.1.21
         │   │   │   ├── axum v0.8.9 (*)
         │   │   │   ├── axum-server v0.8.0 (*)
         │   │   │   ├── infraternal v0.1.0 (*)
         │   │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   │   ├── infraternal v0.1.0 (*)
         │   │   └── (dev) infraternal-server v0.1.0 (*)
         │   └── (dev) infraternal-server v0.1.0 (*)
         └── sqlx-core v0.8.6
             ├── sqlx v0.8.6
             │   ├── infraternal v0.1.0 (*)
             │   ├── infraternal-plugin-api v0.1.0
             │   │   ├── infraternal v0.1.0 (*)
             │   │   ├── infraternal-agent v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
Final branch-head scripts/verify fast output verbatim, part 7/12. Head 28bbc0b6fa18356a992c2ec215213d5d732d271b; exit1, only static sizes fail. SHA256 b935fbfa77756bb873f44a315d1f3f61b1a57f4622068c4961eea6d8e8421447. RTT row ran on VM208/shared lock with identical script SHA815c3bee752af0471ab9bf47b671e4729f2ef0cb7659a6655e8b8e24e4b7b73d. Functional transcript durations are not accepted performance measurements. ```text │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) ├ cpufeatures v0.3.1 └── chacha20 v0.10.2 └── rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 3 duplicate entries for crate 'getrandom' ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:92:1 │ 92 │ ╭ getrandom 0.2.17 registry+https://github.com/rust-lang/crates.io-index 93 │ │ getrandom 0.3.4 registry+https://github.com/rust-lang/crates.io-index 94 │ │ getrandom 0.4.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────┘ lock entries │ ├ getrandom v0.2.17 ├── rand_core v0.6.4 │ ├── bip39 v2.2.2 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── crypto-common v0.1.7 │ │ ├── aead v0.5.2 │ │ │ └── aes-gcm v0.10.3 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── cipher v0.4.4 │ │ │ ├── aes v0.8.4 │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ └── ctr v0.9.2 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── digest v0.10.7 │ │ │ ├── blake2 v0.10.6 │ │ │ │ └── argon2 v0.5.3 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── hmac v0.12.1 │ │ │ │ └── hkdf v0.12.4 │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── sha1 v0.10.7 │ │ │ │ ├── axum v0.8.9 │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ └── sha2 v0.10.9 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── universal-hash v0.5.1 │ │ └── polyval v0.6.2 │ │ └── ghash v0.5.1 │ │ └── aes-gcm v0.10.3 (*) │ ├── password-hash v0.5.0 │ │ └── argon2 v0.5.3 (*) │ ├── rand v0.8.8 │ │ └── bip39 v2.2.2 (*) │ └── rand_chacha v0.3.1 │ └── rand v0.8.8 (*) └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-mesh v0.1.0 (*) ├── infraternal-plugin-release v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 2 duplicate entries for crate 'hashbrown' ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:98:1 │ 98 │ ╭ hashbrown 0.15.5 registry+https://github.com/rust-lang/crates.io-index 99 │ │ hashbrown 0.17.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ hashbrown v0.15.5 ├── hashlink v0.10.0 │ └── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) └── sqlx-core v0.8.6 (*) ├ hashbrown v0.17.1 └── indexmap v2.14.2 ├── h2 v0.4.19 │ ├── hyper v1.11.1 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hyper-util v0.1.21 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── sqlx-core v0.8.6 ├── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) ```
Author
Owner

Final branch-head scripts/verify fast output verbatim, part 8/12. Head 28bbc0b6fa; exit1, only static sizes fail. SHA256 b935fbfa77756bb873f44a315d1f3f61b1a57f4622068c4961eea6d8e8421447. RTT row ran on VM208/shared lock with identical script SHA815c3bee752af0471ab9bf47b671e4729f2ef0cb7659a6655e8b8e24e4b7b73d. Functional transcript durations are not accepted performance measurements.

             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-mesh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   └── infraternal-plugin-mesh v0.1.0
             │   │   │       ├── infraternal v0.1.0 (*)
             │   │   │       ├── infraternal-agent v0.1.0 (*)
             │   │   │       ├── infraternal-fuzz v0.1.0 (*)
             │   │   │       └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-backup v0.1.0
             │   │   │   └── infraternal v0.1.0 (*)
             │   │   ├── infraternal-plugin-host-facts v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-fuzz v0.1.0 (*)
             │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   │   ├── infraternal-plugin-relay v0.1.0
             │   │   │   └── infraternal v0.1.0 (*)
             │   │   ├── infraternal-plugin-release v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-remote v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-agent v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   ├── infraternal-plugin-ssh v0.1.0
             │   │   │   ├── infraternal v0.1.0 (*)
             │   │   │   ├── infraternal-fuzz v0.1.0 (*)
             │   │   │   └── infraternal-server v0.1.0 (*)
             │   │   └── infraternal-server v0.1.0 (*)
             │   ├── infraternal-plugin-mesh v0.1.0 (*)
             │   ├── infraternal-plugin-release v0.1.0 (*)
             │   └── infraternal-server v0.1.0 (*)
             ├── sqlx-macros v0.8.6
             │   └── sqlx v0.8.6 (*)
             ├── sqlx-macros-core v0.8.6
             │   └── sqlx-macros v0.8.6 (*)
             └── sqlx-sqlite v0.8.6
                 ├── sqlx v0.8.6 (*)
                 └── sqlx-macros-core v0.8.6 (*)

warning[duplicate]: found 2 duplicate entries for crate 'r-efi'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:197:1
    │  
197 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index
198 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ r-efi v5.3.0
      └── getrandom v0.3.4
          └── rand_core v0.9.5
              ├── rand v0.9.5
              │   ├── infraternal-server v0.1.0
              │   │   ├── infraternal v0.1.0
              │   │   └── infraternal-fuzz v0.1.0
              │   ├── tungstenite v0.29.0
              │   │   └── tokio-tungstenite v0.29.0
              │   │       ├── axum v0.8.9
              │   │       │   ├── infraternal-fuzz v0.1.0 (*)
              │   │       │   └── infraternal-server v0.1.0 (*)
              │   │       └── (dev) infraternal-server v0.1.0 (*)
              │   └── webauthn-rs-core v0.5.5
              │       └── webauthn-rs v0.5.5
              │           └── infraternal-server v0.1.0 (*)
              └── rand_chacha v0.9.0
                  ├── rand v0.9.5 (*)
                  └── webauthn-rs-core v0.5.5 (*)
    ├ r-efi v6.0.0
      └── getrandom v0.4.3
          ├── jobserver v0.1.35
          │   └── cc v1.6.0
          │       ├── (build) libfuzzer-sys v0.4.13
          │       │   └── infraternal-fuzz v0.1.0
          │       ├── (build) libsqlite3-sys v0.30.1
          │       │   └── sqlx-sqlite v0.8.6
          │       │       ├── sqlx v0.8.6
          │       │       │   ├── infraternal v0.1.0
          │       │       │   ├── infraternal-plugin-api v0.1.0
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-mesh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
          │       │       │   │   │       ├── infraternal v0.1.0 (*)
          │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │       └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-backup v0.1.0
          │       │       │   │   │   └── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-relay v0.1.0
          │       │       │   │   │   └── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-release v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
          │       │       │   │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       └── sqlx-macros-core v0.8.6
          │       │           └── sqlx-macros v0.8.6
          │       │               └── sqlx v0.8.6 (*)
          │       ├── openssl-src v300.6.1+3.6.3
          │       │   └── (build) openssl-sys v0.9.117
          │       │       ├── axum-server v0.8.0
          │       │       │   └── infraternal-server v0.1.0 (*)
          │       │       ├── openssl v0.10.81
          │       │       │   ├── axum-server v0.8.0 (*)
          │       │       │   ├── infraternal v0.1.0 (*)
          │       │       │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   ├── infraternal-server v0.1.0 (*)
          │       │       │   ├── infraternal-shim v0.1.0
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
          │       │       │   │   └── infraternal-server v0.1.0 (*)
          │       │       │   ├── tokio-openssl v0.6.5
          │       │       │   │   ├── axum-server v0.8.0 (*)
          │       │       │   │   ├── infraternal v0.1.0 (*)
          │       │       │   │   ├── infraternal-agent v0.1.0 (*)
          │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
          │       │       │   ├── webauthn-attestation-ca v0.5.5
          │       │       │   │   └── webauthn-rs-core v0.5.5
          │       │       │   │       └── webauthn-rs v0.5.5
          │       │       │   │           └── infraternal-server v0.1.0 (*)
          │       │       │   └── webauthn-rs-core v0.5.5 (*)
          │       │       ├── tokio-openssl v0.6.5 (*)
          │       │       ├── webauthn-attestation-ca v0.5.5 (*)
          │       │       └── webauthn-rs-core v0.5.5 (*)
          │       ├── (build) openssl-sys v0.9.117 (*)
          │       └── (build) ring v0.17.14
          │           ├── quinn-proto v0.11.19
          │           │   └── quinn v0.11.12
          │           │       ├── infraternal-agent v0.1.0 (*)
          │           │       ├── infraternal-plugin-remote v0.1.0 (*)
          │           │       └── infraternal-server v0.1.0 (*)
          │           ├── rustls v0.23.45
          │           │   ├── infraternal-plugin-remote v0.1.0 (*)
          │           │   ├── quinn v0.11.12 (*)
          │           │   └── quinn-proto v0.11.19 (*)
          │           └── rustls-webpki v0.103.15
          │               └── rustls v0.23.45 (*)
          ├── quinn-proto v0.11.19 (*)
          ├── rand v0.10.3
          │   └── quinn-proto v0.11.19 (*)
          └── uuid v1.27.0
              ├── infraternal v0.1.0 (*)
              ├── infraternal-agent v0.1.0 (*)
              ├── infraternal-plugin-mesh v0.1.0 (*)
              ├── infraternal-plugin-release v0.1.0 (*)
              ├── infraternal-plugin-ssh v0.1.0 (*)
              ├── infraternal-server v0.1.0 (*)
              ├── webauthn-attestation-ca v0.5.5 (*)
              ├── webauthn-rs v0.5.5 (*)
              └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:199:1
    │  
199 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index
200 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index
201 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand v0.8.8
      └── bip39 v2.2.2
          └── infraternal-server v0.1.0
              ├── infraternal v0.1.0
              └── infraternal-fuzz v0.1.0
    ├ rand v0.9.5
      ├── infraternal-server v0.1.0
      │   ├── infraternal v0.1.0
      │   └── infraternal-fuzz v0.1.0
      ├── tungstenite v0.29.0
      │   └── tokio-tungstenite v0.29.0
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       └── (dev) infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5
          └── webauthn-rs v0.5.5
              └── infraternal-server v0.1.0 (*)
    ├ rand v0.10.3
      └── quinn-proto v0.11.19
          └── quinn v0.11.12
              ├── infraternal-agent v0.1.0
              │   ├── infraternal v0.1.0
              │   ├── infraternal-fuzz v0.1.0
              │   └── infraternal-server v0.1.0
              │       ├── infraternal v0.1.0 (*)
              │       └── infraternal-fuzz v0.1.0 (*)
              ├── infraternal-plugin-remote v0.1.0
              │   ├── infraternal v0.1.0 (*)
              │   ├── infraternal-agent v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:202:1
    │  
202 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index
203 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_chacha v0.3.1
      └── rand v0.8.8
          └── bip39 v2.2.2
              └── infraternal-server v0.1.0
                  ├── infraternal v0.1.0
                  └── infraternal-fuzz v0.1.0
    ├ rand_chacha v0.9.0
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── webauthn-rs-core v0.5.5 (*)

warning[duplicate]: found 3 duplicate entries for crate 'rand_core'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:204:1
    │  
204 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index
205 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index
206 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ rand_core v0.6.4
      ├── bip39 v2.2.2
      │   └── infraternal-server v0.1.0
      │       ├── infraternal v0.1.0
      │       └── infraternal-fuzz v0.1.0
      ├── crypto-common v0.1.7
      │   ├── aead v0.5.2
      │   │   └── aes-gcm v0.10.3
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   ├── cipher v0.4.4
      │   │   ├── aes v0.8.4
      │   │   │   └── aes-gcm v0.10.3 (*)
      │   │   ├── aes-gcm v0.10.3 (*)
      │   │   └── ctr v0.9.2
      │   │       └── aes-gcm v0.10.3 (*)
      │   ├── digest v0.10.7
      │   │   ├── blake2 v0.10.6
      │   │   │   └── argon2 v0.5.3
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── hmac v0.12.1
      │   │   │   └── hkdf v0.12.4
      │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   │   ├── sha1 v0.10.7
      │   │   │   ├── axum v0.8.9
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── tungstenite v0.29.0
      │   │   │       └── tokio-tungstenite v0.29.0
      │   │   │           ├── axum v0.8.9 (*)
      │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │   │   └── sha2 v0.10.9
      │   │       ├── infraternal-plugin-ssh v0.1.0
      │   │       │   ├── infraternal v0.1.0 (*)
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── sqlx-core v0.8.6
      │   │       │   ├── sqlx v0.8.6
      │   │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-api v0.1.0
      │   │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-agent v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-mesh v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-plugin-mesh v0.1.0
      │   │       │   │   │   │       ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │       ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │       │   │   │   │   └── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │       │   │   │   │   └── infraternal v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-release v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-remote v0.1.0
      │   │       │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │   ├── sqlx-macros v0.8.6
      │   │       │   │   └── sqlx v0.8.6 (*)
      │   │       │   ├── sqlx-macros-core v0.8.6
      │   │       │   │   └── sqlx-macros v0.8.6 (*)
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6 (*)
      │   │       │       └── sqlx-macros-core v0.8.6 (*)
      │   │       └── sqlx-macros-core v0.8.6 (*)
      │   └── universal-hash v0.5.1
      │       └── polyval v0.6.2
      │           └── ghash v0.5.1
      │               └── aes-gcm v0.10.3 (*)
      ├── password-hash v0.5.0
      │   └── argon2 v0.5.3 (*)
      ├── rand v0.8.8
      │   └── bip39 v2.2.2 (*)
      └── rand_chacha v0.3.1
          └── rand v0.8.8 (*)
    ├ rand_core v0.9.5
      ├── rand v0.9.5
      │   ├── infraternal-server v0.1.0
      │   │   ├── infraternal v0.1.0
      │   │   └── infraternal-fuzz v0.1.0
      │   ├── tungstenite v0.29.0
      │   │   └── tokio-tungstenite v0.29.0
      │   │       ├── axum v0.8.9
      │   │       │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │   └── infraternal-server v0.1.0 (*)
      │   │       └── (dev) infraternal-server v0.1.0 (*)
      │   └── webauthn-rs-core v0.5.5
      │       └── webauthn-rs v0.5.5
      │           └── infraternal-server v0.1.0 (*)
      └── rand_chacha v0.9.0
          ├── rand v0.9.5 (*)
          └── webauthn-rs-core v0.5.5 (*)
    ├ rand_core v0.10.1
      ├── chacha20 v0.10.2
      │   └── rand v0.10.3
      │       └── quinn-proto v0.11.19
      │           └── quinn v0.11.12
      │               ├── infraternal-agent v0.1.0
      │               │   ├── infraternal v0.1.0
      │               │   ├── infraternal-fuzz v0.1.0
      │               │   └── infraternal-server v0.1.0
      │               │       ├── infraternal v0.1.0 (*)
      │               │       └── infraternal-fuzz v0.1.0 (*)
      │               ├── infraternal-plugin-remote v0.1.0
      │               │   ├── infraternal v0.1.0 (*)
      │               │   ├── infraternal-agent v0.1.0 (*)
      │               │   └── infraternal-server v0.1.0 (*)
      │               └── infraternal-server v0.1.0 (*)
      ├── getrandom v0.4.3
      │   ├── jobserver v0.1.35
      │   │   └── cc v1.6.0
      │   │       ├── (build) libfuzzer-sys v0.4.13
      │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │   │       ├── (build) libsqlite3-sys v0.30.1
      │   │       │   └── sqlx-sqlite v0.8.6
      │   │       │       ├── sqlx v0.8.6
Final branch-head scripts/verify fast output verbatim, part 8/12. Head 28bbc0b6fa18356a992c2ec215213d5d732d271b; exit1, only static sizes fail. SHA256 b935fbfa77756bb873f44a315d1f3f61b1a57f4622068c4961eea6d8e8421447. RTT row ran on VM208/shared lock with identical script SHA815c3bee752af0471ab9bf47b671e4729f2ef0cb7659a6655e8b8e24e4b7b73d. Functional transcript durations are not accepted performance measurements. ```text │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) └── sqlx-sqlite v0.8.6 ├── sqlx v0.8.6 (*) └── sqlx-macros-core v0.8.6 (*) warning[duplicate]: found 2 duplicate entries for crate 'r-efi' ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:197:1 │ 197 │ ╭ r-efi 5.3.0 registry+https://github.com/rust-lang/crates.io-index 198 │ │ r-efi 6.0.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ r-efi v5.3.0 └── getrandom v0.3.4 └── rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ r-efi v6.0.0 └── getrandom v0.4.3 ├── jobserver v0.1.35 │ └── cc v1.6.0 │ ├── (build) libfuzzer-sys v0.4.13 │ │ └── infraternal-fuzz v0.1.0 │ ├── (build) libsqlite3-sys v0.30.1 │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── openssl-src v300.6.1+3.6.3 │ │ └── (build) openssl-sys v0.9.117 │ │ ├── axum-server v0.8.0 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── openssl v0.10.81 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── tokio-openssl v0.6.5 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── (build) openssl-sys v0.9.117 (*) │ └── (build) ring v0.17.14 │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── rustls v0.23.45 │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── quinn v0.11.12 (*) │ │ └── quinn-proto v0.11.19 (*) │ └── rustls-webpki v0.103.15 │ └── rustls v0.23.45 (*) ├── quinn-proto v0.11.19 (*) ├── rand v0.10.3 │ └── quinn-proto v0.11.19 (*) └── uuid v1.27.0 ├── infraternal v0.1.0 (*) ├── infraternal-agent v0.1.0 (*) ├── infraternal-plugin-mesh v0.1.0 (*) ├── infraternal-plugin-release v0.1.0 (*) ├── infraternal-plugin-ssh v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── webauthn-attestation-ca v0.5.5 (*) ├── webauthn-rs v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand' ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:199:1 │ 199 │ ╭ rand 0.8.8 registry+https://github.com/rust-lang/crates.io-index 200 │ │ rand 0.9.5 registry+https://github.com/rust-lang/crates.io-index 201 │ │ rand 0.10.3 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand v0.9.5 ├── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── tungstenite v0.29.0 │ └── tokio-tungstenite v0.29.0 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── (dev) infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 └── webauthn-rs v0.5.5 └── infraternal-server v0.1.0 (*) ├ rand v0.10.3 └── quinn-proto v0.11.19 └── quinn v0.11.12 ├── infraternal-agent v0.1.0 │ ├── infraternal v0.1.0 │ ├── infraternal-fuzz v0.1.0 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── infraternal-plugin-remote v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'rand_chacha' ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:202:1 │ 202 │ ╭ rand_chacha 0.3.1 registry+https://github.com/rust-lang/crates.io-index 203 │ │ rand_chacha 0.9.0 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_chacha v0.3.1 └── rand v0.8.8 └── bip39 v2.2.2 └── infraternal-server v0.1.0 ├── infraternal v0.1.0 └── infraternal-fuzz v0.1.0 ├ rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── webauthn-rs-core v0.5.5 (*) warning[duplicate]: found 3 duplicate entries for crate 'rand_core' ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:204:1 │ 204 │ ╭ rand_core 0.6.4 registry+https://github.com/rust-lang/crates.io-index 205 │ │ rand_core 0.9.5 registry+https://github.com/rust-lang/crates.io-index 206 │ │ rand_core 0.10.1 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ rand_core v0.6.4 ├── bip39 v2.2.2 │ └── infraternal-server v0.1.0 │ ├── infraternal v0.1.0 │ └── infraternal-fuzz v0.1.0 ├── crypto-common v0.1.7 │ ├── aead v0.5.2 │ │ └── aes-gcm v0.10.3 │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── cipher v0.4.4 │ │ ├── aes v0.8.4 │ │ │ └── aes-gcm v0.10.3 (*) │ │ ├── aes-gcm v0.10.3 (*) │ │ └── ctr v0.9.2 │ │ └── aes-gcm v0.10.3 (*) │ ├── digest v0.10.7 │ │ ├── blake2 v0.10.6 │ │ │ └── argon2 v0.5.3 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── hmac v0.12.1 │ │ │ └── hkdf v0.12.4 │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ ├── sha1 v0.10.7 │ │ │ ├── axum v0.8.9 │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── tungstenite v0.29.0 │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── sha2 v0.10.9 │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── sqlx-core v0.8.6 │ │ │ ├── sqlx v0.8.6 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ └── universal-hash v0.5.1 │ └── polyval v0.6.2 │ └── ghash v0.5.1 │ └── aes-gcm v0.10.3 (*) ├── password-hash v0.5.0 │ └── argon2 v0.5.3 (*) ├── rand v0.8.8 │ └── bip39 v2.2.2 (*) └── rand_chacha v0.3.1 └── rand v0.8.8 (*) ├ rand_core v0.9.5 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 │ └── webauthn-rs v0.5.5 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ rand_core v0.10.1 ├── chacha20 v0.10.2 │ └── rand v0.10.3 │ └── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── getrandom v0.4.3 │ ├── jobserver v0.1.35 │ │ └── cc v1.6.0 │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ ├── sqlx v0.8.6 ```
Author
Owner

Final branch-head scripts/verify fast output verbatim, part 9/12. Head 28bbc0b6fa; exit1, only static sizes fail. SHA256 b935fbfa77756bb873f44a315d1f3f61b1a57f4622068c4961eea6d8e8421447. RTT row ran on VM208/shared lock with identical script SHA815c3bee752af0471ab9bf47b671e4729f2ef0cb7659a6655e8b8e24e4b7b73d. Functional transcript durations are not accepted performance measurements.

      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-api v0.1.0
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-mesh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-plugin-mesh v0.1.0
      │   │       │       │   │   │       ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │       ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │       └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-backup v0.1.0
      │   │       │       │   │   │   └── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-relay v0.1.0
      │   │       │       │   │   │   └── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-release v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │       │       │   │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       └── sqlx-macros-core v0.8.6
      │   │       │           └── sqlx-macros v0.8.6
      │   │       │               └── sqlx v0.8.6 (*)
      │   │       ├── openssl-src v300.6.1+3.6.3
      │   │       │   └── (build) openssl-sys v0.9.117
      │   │       │       ├── axum-server v0.8.0
      │   │       │       │   └── infraternal-server v0.1.0 (*)
      │   │       │       ├── openssl v0.10.81
      │   │       │       │   ├── axum-server v0.8.0 (*)
      │   │       │       │   ├── infraternal v0.1.0 (*)
      │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── infraternal-shim v0.1.0
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │   │       │       │   ├── tokio-openssl v0.6.5
      │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │   │       │       │   │   └── webauthn-rs-core v0.5.5
      │   │       │       │   │       └── webauthn-rs v0.5.5
      │   │       │       │   │           └── infraternal-server v0.1.0 (*)
      │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │   │       │       ├── tokio-openssl v0.6.5 (*)
      │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │   │       ├── (build) openssl-sys v0.9.117 (*)
      │   │       └── (build) ring v0.17.14
      │   │           ├── quinn-proto v0.11.19 (*)
      │   │           ├── rustls v0.23.45
      │   │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │           │   ├── quinn v0.11.12 (*)
      │   │           │   └── quinn-proto v0.11.19 (*)
      │   │           └── rustls-webpki v0.103.15
      │   │               └── rustls v0.23.45 (*)
      │   ├── quinn-proto v0.11.19 (*)
      │   ├── rand v0.10.3 (*)
      │   └── uuid v1.27.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── rand v0.10.3 (*)
      └── rand_pcg v0.10.2
          └── quinn-proto v0.11.19 (*)

warning[duplicate]: found 2 duplicate entries for crate 'syn'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:248:1
    │  
248 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index
249 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ syn v2.0.119
      ├── asn1-rs-derive v0.5.1
      │   └── asn1-rs v0.6.2
      │       ├── der-parser v9.0.0
      │       │   ├── webauthn-rs-core v0.5.5
      │       │   │   └── webauthn-rs v0.5.5
      │       │   │       └── infraternal-server v0.1.0
      │       │   │           ├── infraternal v0.1.0
      │       │   │           └── infraternal-fuzz v0.1.0
      │       │   └── x509-parser v0.16.0
      │       │       └── webauthn-rs-core v0.5.5 (*)
      │       ├── oid-registry v0.7.1
      │       │   └── x509-parser v0.16.0 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── asn1-rs-impl v0.2.0
      │   └── asn1-rs v0.6.2 (*)
      ├── enum-as-inner v0.6.1
      │   └── sysctl v0.7.1
      │       └── infraternal-plugin-host-facts v0.1.0
      │           ├── infraternal v0.1.0 (*)
      │           ├── infraternal-agent v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           └── infraternal-fuzz v0.1.0 (*)
      ├── openssl-macros v0.1.1
      │   └── openssl v0.10.81
      │       ├── axum-server v0.8.0
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── infraternal-shim v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── tokio-openssl v0.6.5
      │       │   ├── axum-server v0.8.0 (*)
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5
      │       │   └── webauthn-rs-core v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      ├── sqlx-macros v0.8.6
      │   └── sqlx v0.8.6
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   ├── infraternal-mesh v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │       │   ├── infraternal-plugin-backup v0.1.0
      │       │   │   └── infraternal v0.1.0 (*)
      │       │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   ├── infraternal-plugin-relay v0.1.0
      │       │   │   └── infraternal v0.1.0 (*)
      │       │   ├── infraternal-plugin-release v0.1.0
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── sqlx-macros-core v0.8.6
      │   └── sqlx-macros v0.8.6 (*)
      ├── synstructure v0.13.2
      │   └── asn1-rs-derive v0.5.1 (*)
      ├── thiserror-impl v1.0.69
      │   └── thiserror v1.0.69
      │       ├── asn1-rs v0.6.2 (*)
      │       ├── webauthn-rs-core v0.5.5 (*)
      │       └── x509-parser v0.16.0 (*)
      ├── tracing-attributes v0.1.31
      │   └── tracing v0.1.44
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── axum-core v0.5.6
      │       │   └── axum v0.8.9 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12
      │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── quinn-proto v0.11.19
      │       │   └── quinn v0.11.12 (*)
      │       ├── quinn-udp v0.5.16
      │       │   └── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6
      │       │   ├── sqlx v0.8.6 (*)
      │       │   ├── sqlx-macros v0.8.6 (*)
      │       │   ├── sqlx-macros-core v0.8.6 (*)
      │       │   └── sqlx-sqlite v0.8.6
      │       │       ├── sqlx v0.8.6 (*)
      │       │       └── sqlx-macros-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── tracing-subscriber v0.3.23
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       ├── webauthn-rs v0.5.5 (*)
      │       └── webauthn-rs-core v0.5.5 (*)
      └── zerocopy-derive v0.8.60
          └── zerocopy v0.8.60
              ├── half v2.7.1
              │   ├── ciborium-ll v0.2.2
              │   │   └── ciborium v0.2.2
              │   │       └── criterion v0.7.0
              │   │           └── (dev) infraternal-protocol v0.1.0
              │   │               ├── infraternal-agent v0.1.0 (*)
              │   │               ├── infraternal-fuzz v0.1.0 (*)
              │   │               ├── (dev) infraternal-plugin-host-facts v0.1.0 (*)
              │   │               ├── infraternal-plugin-mesh v0.1.0 (*)
              │   │               ├── infraternal-plugin-release v0.1.0 (*)
              │   │               ├── infraternal-plugin-remote v0.1.0 (*)
              │   │               └── infraternal-server v0.1.0 (*)
              │   └── serde_cbor_2 v0.13.0
              │       ├── infraternal-server v0.1.0 (*)
              │       └── webauthn-rs-core v0.5.5 (*)
              └── ppv-lite86 v0.2.21
                  ├── rand_chacha v0.3.1
                  │   └── rand v0.8.8
                  │       └── bip39 v2.2.2
                  │           └── infraternal-server v0.1.0 (*)
                  └── rand_chacha v0.9.0
                      ├── rand v0.9.5
                      │   ├── infraternal-server v0.1.0 (*)
                      │   ├── tungstenite v0.29.0
                      │   │   └── tokio-tungstenite v0.29.0
                      │   │       ├── axum v0.8.9 (*)
                      │   │       └── (dev) infraternal-server v0.1.0 (*)
                      │   └── webauthn-rs-core v0.5.5 (*)
                      └── webauthn-rs-core v0.5.5 (*)
    ├ syn v3.0.6
      ├── clap_derive v4.6.7
      │   └── clap v4.6.7
      │       ├── criterion v0.7.0
      │       │   └── (dev) infraternal-protocol v0.1.0
      │       │       ├── infraternal-agent v0.1.0
      │       │       │   ├── infraternal v0.1.0
      │       │       │   ├── infraternal-fuzz v0.1.0
      │       │       │   └── infraternal-server v0.1.0
      │       │       │       ├── infraternal v0.1.0 (*)
      │       │       │       └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-fuzz v0.1.0 (*)
      │       │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │       ├── infraternal-plugin-mesh v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-release v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       ├── infraternal-plugin-remote v0.1.0
      │       │       │   ├── infraternal v0.1.0 (*)
      │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │       │   └── infraternal-server v0.1.0 (*)
      │       │       └── infraternal-server v0.1.0 (*)
      │       └── infraternal v0.1.0 (*)
      ├── displaydoc v0.2.7
      │   ├── asn1-rs v0.6.2
      │   │   ├── der-parser v9.0.0
      │   │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   │   └── webauthn-rs v0.5.5
      │   │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   │   └── x509-parser v0.16.0
      │   │   │       └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── oid-registry v0.7.1
      │   │   │   └── x509-parser v0.16.0 (*)
      │   │   └── x509-parser v0.16.0 (*)
      │   ├── der-parser v9.0.0 (*)
      │   ├── icu_collections v2.3.0
      │   │   ├── icu_normalizer v2.3.0
      │   │   │   └── idna_adapter v1.2.2
      │   │   │       └── idna v1.1.0
      │   │   │           └── url v2.5.8
      │   │   │               ├── infraternal v0.1.0 (*)
      │   │   │               ├── infraternal-plugin-ssh v0.1.0
      │   │   │               │   ├── infraternal v0.1.0 (*)
      │   │   │               │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   └── infraternal-server v0.1.0 (*)
      │   │   │               ├── infraternal-server v0.1.0 (*)
      │   │   │               ├── sqlx-core v0.8.6
      │   │   │               │   ├── sqlx v0.8.6
      │   │   │               │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │               │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-mesh v0.1.0
      │   │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │               │   │   │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │               │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   │               │   │   └── infraternal-server v0.1.0 (*)
      │   │   │               │   ├── sqlx-macros v0.8.6
      │   │   │               │   │   └── sqlx v0.8.6 (*)
      │   │   │               │   ├── sqlx-macros-core v0.8.6
      │   │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │   │   │               │   └── sqlx-sqlite v0.8.6
      │   │   │               │       ├── sqlx v0.8.6 (*)
      │   │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-macros-core v0.8.6 (*)
      │   │   │               ├── sqlx-sqlite v0.8.6 (*)
      │   │   │               ├── webauthn-rs v0.5.5 (*)
      │   │   │               ├── webauthn-rs-core v0.5.5 (*)
      │   │   │               └── webauthn-rs-proto v0.5.5
      │   │   │                   └── webauthn-rs-core v0.5.5 (*)
      │   │   └── icu_properties v2.3.0
      │   │       └── idna_adapter v1.2.2 (*)
      │   ├── icu_locale_core v2.3.0
      │   │   ├── icu_properties v2.3.0 (*)
      │   │   └── icu_provider v2.3.1
      │   │       ├── icu_normalizer v2.3.0 (*)
      │   │       └── icu_properties v2.3.0 (*)
      │   ├── icu_properties v2.3.0 (*)
      │   ├── icu_provider v2.3.1 (*)
      │   ├── tinystr v0.8.4
      │   │   └── icu_locale_core v2.3.0 (*)
      │   └── zerotrie v0.2.5
      │       ├── icu_properties v2.3.0 (*)
      │       └── icu_provider v2.3.1 (*)
      ├── futures-macro v0.3.34
      │   └── futures-util v0.3.34
      │       ├── axum v0.8.9
      │       │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   └── infraternal-server v0.1.0 (*)
      │       ├── futures-executor v0.3.34
      │       │   └── sqlx-sqlite v0.8.6 (*)
Final branch-head scripts/verify fast output verbatim, part 9/12. Head 28bbc0b6fa18356a992c2ec215213d5d732d271b; exit1, only static sizes fail. SHA256 b935fbfa77756bb873f44a315d1f3f61b1a57f4622068c4961eea6d8e8421447. RTT row ran on VM208/shared lock with identical script SHA815c3bee752af0471ab9bf47b671e4729f2ef0cb7659a6655e8b8e24e4b7b73d. Functional transcript durations are not accepted performance measurements. ```text │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ ├── axum-server v0.8.0 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── openssl v0.10.81 │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ └── webauthn-rs-core v0.5.5 │ │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ └── (build) ring v0.17.14 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── quinn v0.11.12 (*) │ │ │ └── quinn-proto v0.11.19 (*) │ │ └── rustls-webpki v0.103.15 │ │ └── rustls v0.23.45 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── rand v0.10.3 (*) │ └── uuid v1.27.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── rand v0.10.3 (*) └── rand_pcg v0.10.2 └── quinn-proto v0.11.19 (*) warning[duplicate]: found 2 duplicate entries for crate 'syn' ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:248:1 │ 248 │ ╭ syn 2.0.119 registry+https://github.com/rust-lang/crates.io-index 249 │ │ syn 3.0.6 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────┘ lock entries │ ├ syn v2.0.119 ├── asn1-rs-derive v0.5.1 │ └── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── asn1-rs-impl v0.2.0 │ └── asn1-rs v0.6.2 (*) ├── enum-as-inner v0.6.1 │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-fuzz v0.1.0 (*) ├── openssl-macros v0.1.1 │ └── openssl v0.10.81 │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── infraternal-shim v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 │ │ └── webauthn-rs-core v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) ├── sqlx-macros v0.8.6 │ └── sqlx v0.8.6 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── sqlx-macros-core v0.8.6 │ └── sqlx-macros v0.8.6 (*) ├── synstructure v0.13.2 │ └── asn1-rs-derive v0.5.1 (*) ├── thiserror-impl v1.0.69 │ └── thiserror v1.0.69 │ ├── asn1-rs v0.6.2 (*) │ ├── webauthn-rs-core v0.5.5 (*) │ └── x509-parser v0.16.0 (*) ├── tracing-attributes v0.1.31 │ └── tracing v0.1.44 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-core v0.5.6 │ │ └── axum v0.8.9 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── infraternal v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── quinn-proto v0.11.19 │ │ └── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 │ │ └── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ ├── sqlx-macros v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tracing-subscriber v0.3.23 │ │ └── infraternal-server v0.1.0 (*) │ ├── webauthn-attestation-ca v0.5.5 (*) │ ├── webauthn-rs v0.5.5 (*) │ └── webauthn-rs-core v0.5.5 (*) └── zerocopy-derive v0.8.60 └── zerocopy v0.8.60 ├── half v2.7.1 │ ├── ciborium-ll v0.2.2 │ │ └── ciborium v0.2.2 │ │ └── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── serde_cbor_2 v0.13.0 │ ├── infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── ppv-lite86 v0.2.21 ├── rand_chacha v0.3.1 │ └── rand v0.8.8 │ └── bip39 v2.2.2 │ └── infraternal-server v0.1.0 (*) └── rand_chacha v0.9.0 ├── rand v0.9.5 │ ├── infraternal-server v0.1.0 (*) │ ├── tungstenite v0.29.0 │ │ └── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── webauthn-rs-core v0.5.5 (*) └── webauthn-rs-core v0.5.5 (*) ├ syn v3.0.6 ├── clap_derive v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── displaydoc v0.2.7 │ ├── asn1-rs v0.6.2 │ │ ├── der-parser v9.0.0 │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── x509-parser v0.16.0 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── oid-registry v0.7.1 │ │ │ └── x509-parser v0.16.0 (*) │ │ └── x509-parser v0.16.0 (*) │ ├── der-parser v9.0.0 (*) │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── tinystr v0.8.4 │ │ └── icu_locale_core v2.3.0 (*) │ └── zerotrie v0.2.5 │ ├── icu_properties v2.3.0 (*) │ └── icu_provider v2.3.1 (*) ├── futures-macro v0.3.34 │ └── futures-util v0.3.34 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── futures-executor v0.3.34 │ │ └── sqlx-sqlite v0.8.6 (*) ```
Author
Owner

Final branch-head scripts/verify fast output verbatim, part 10/12. Head 28bbc0b6fa; exit1, only static sizes fail. SHA256 b935fbfa77756bb873f44a315d1f3f61b1a57f4622068c4961eea6d8e8421447. RTT row ran on VM208/shared lock with identical script SHA815c3bee752af0471ab9bf47b671e4729f2ef0cb7659a6655e8b8e24e4b7b73d. Functional transcript durations are not accepted performance measurements.

      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── js-sys v0.3.106
      │       │   ├── getrandom v0.2.17
      │       │   │   ├── rand_core v0.6.4
      │       │   │   │   ├── bip39 v2.2.2
      │       │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │   ├── crypto-common v0.1.7
      │       │   │   │   │   ├── aead v0.5.2
      │       │   │   │   │   │   └── aes-gcm v0.10.3
      │       │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   ├── cipher v0.4.4
      │       │   │   │   │   │   ├── aes v0.8.4
      │       │   │   │   │   │   │   └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   ├── aes-gcm v0.10.3 (*)
      │       │   │   │   │   │   └── ctr v0.9.2
      │       │   │   │   │   │       └── aes-gcm v0.10.3 (*)
      │       │   │   │   │   ├── digest v0.10.7
      │       │   │   │   │   │   ├── blake2 v0.10.6
      │       │   │   │   │   │   │   └── argon2 v0.5.3
      │       │   │   │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── hmac v0.12.1
      │       │   │   │   │   │   │   └── hkdf v0.12.4
      │       │   │   │   │   │   │       └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   ├── sha1 v0.10.7
      │       │   │   │   │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │   └── tungstenite v0.29.0
      │       │   │   │   │   │   │       └── tokio-tungstenite v0.29.0
      │       │   │   │   │   │   │           ├── axum v0.8.9 (*)
      │       │   │   │   │   │   │           └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │   │   │   └── sha2 v0.10.9
      │       │   │   │   │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │   │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │   │   │   │       ├── sqlx-core v0.8.6 (*)
      │       │   │   │   │   │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │   │   │   └── universal-hash v0.5.1
      │       │   │   │   │       └── polyval v0.6.2
      │       │   │   │   │           └── ghash v0.5.1
      │       │   │   │   │               └── aes-gcm v0.10.3 (*)
      │       │   │   │   ├── password-hash v0.5.0
      │       │   │   │   │   └── argon2 v0.5.3 (*)
      │       │   │   │   ├── rand v0.8.8
      │       │   │   │   │   └── bip39 v2.2.2 (*)
      │       │   │   │   └── rand_chacha v0.3.1
      │       │   │   │       └── rand v0.8.8 (*)
      │       │   │   └── ring v0.17.14
      │       │   │       ├── quinn-proto v0.11.19
      │       │   │       │   └── quinn v0.11.12
      │       │   │       │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │       └── infraternal-server v0.1.0 (*)
      │       │   │       ├── rustls v0.23.45
      │       │   │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │       │   ├── quinn v0.11.12 (*)
      │       │   │       │   └── quinn-proto v0.11.19 (*)
      │       │   │       └── rustls-webpki v0.103.15
      │       │   │           └── rustls v0.23.45 (*)
      │       │   ├── getrandom v0.4.3
      │       │   │   ├── jobserver v0.1.35
      │       │   │   │   └── cc v1.6.0
      │       │   │   │       ├── (build) libfuzzer-sys v0.4.13
      │       │   │   │       │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       ├── (build) libsqlite3-sys v0.30.1
      │       │   │   │       │   └── sqlx-sqlite v0.8.6 (*)
      │       │   │   │       ├── openssl-src v300.6.1+3.6.3
      │       │   │   │       │   └── (build) openssl-sys v0.9.117
      │       │   │   │       │       ├── axum-server v0.8.0
      │       │   │   │       │       │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       ├── openssl v0.10.81
      │       │   │   │       │       │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── infraternal-shim v0.1.0
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │   │       │       │   │   └── infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── tokio-openssl v0.6.5
      │       │   │   │       │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │       │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │   │       │       │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │       │   │   │       │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   │       │       │   ├── webauthn-attestation-ca v0.5.5
      │       │   │   │       │       │   │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       │   └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       │       ├── tokio-openssl v0.6.5 (*)
      │       │   │   │       │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │   │       │       └── webauthn-rs-core v0.5.5 (*)
      │       │   │   │       ├── (build) openssl-sys v0.9.117 (*)
      │       │   │   │       └── (build) ring v0.17.14 (*)
      │       │   │   ├── quinn-proto v0.11.19 (*)
      │       │   │   ├── rand v0.10.3
      │       │   │   │   └── quinn-proto v0.11.19 (*)
      │       │   │   └── uuid v1.27.0
      │       │   │       ├── infraternal v0.1.0 (*)
      │       │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-release v0.1.0 (*)
      │       │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │       ├── infraternal-server v0.1.0 (*)
      │       │   │       ├── webauthn-attestation-ca v0.5.5 (*)
      │       │   │       ├── webauthn-rs v0.5.5 (*)
      │       │   │       └── webauthn-rs-core v0.5.5 (*)
      │       │   ├── web-sys v0.3.106
      │       │   │   └── plotters v0.3.7
      │       │   │       └── criterion v0.7.0 (*)
      │       │   └── web-time v1.1.0
      │       │       ├── quinn v0.11.12 (*)
      │       │       ├── quinn-proto v0.11.19 (*)
      │       │       └── rustls-pki-types v1.15.1
      │       │           ├── quinn-proto v0.11.19 (*)
      │       │           ├── rustls v0.23.45 (*)
      │       │           └── rustls-webpki v0.103.15 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tower v0.5.3
      │       │   ├── axum v0.8.9 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       └── tower-http v0.6.11
      │           └── infraternal-server v0.1.0 (*)
      ├── serde_derive v1.0.229
      │   ├── serde v1.0.229
      │   │   ├── base64urlsafedata v0.5.5
      │   │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   │   └── webauthn-rs-proto v0.5.5 (*)
      │   │   ├── bip39 v2.2.2 (*)
      │   │   ├── ciborium v0.2.2
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── criterion v0.7.0 (*)
      │   │   ├── either v1.18.0
      │   │   │   ├── axum-server v0.8.0 (*)
      │   │   │   ├── itertools v0.13.0
      │   │   │   │   ├── criterion v0.7.0 (*)
      │   │   │   │   └── criterion-plot v0.6.0
      │   │   │   │       └── criterion v0.7.0 (*)
      │   │   │   ├── rayon v1.12.0
      │   │   │   │   └── criterion v0.7.0 (*)
      │   │   │   ├── sqlx-core v0.8.6 (*)
      │   │   │   └── sqlx-macros-core v0.8.6 (*)
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   ├── infraternal-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │   │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │   ├── infraternal-server v0.1.0 (*)
      │   │   ├── serde_cbor_2 v0.13.0
      │   │   │   ├── infraternal-server v0.1.0 (*)
      │   │   │   └── webauthn-rs-core v0.5.5 (*)
      │   │   ├── serde_urlencoded v0.7.1
      │   │   │   ├── axum v0.8.9 (*)
      │   │   │   └── sqlx-sqlite v0.8.6 (*)
      │   │   ├── sqlx-core v0.8.6 (*)
      │   │   ├── sqlx-macros-core v0.8.6 (*)
      │   │   ├── sqlx-sqlite v0.8.6 (*)
      │   │   ├── tinytemplate v1.2.1
      │   │   │   └── criterion v0.7.0 (*)
      │   │   ├── tracing-serde v0.2.0
      │   │   │   └── tracing-subscriber v0.3.23
      │   │   │       └── infraternal-server v0.1.0 (*)
      │   │   ├── tracing-subscriber v0.3.23 (*)
      │   │   ├── url v2.5.8 (*)
      │   │   ├── webauthn-attestation-ca v0.5.5 (*)
      │   │   ├── webauthn-rs v0.5.5 (*)
      │   │   ├── webauthn-rs-core v0.5.5 (*)
      │   │   ├── webauthn-rs-proto v0.5.5 (*)
      │   │   └── zeroize v1.9.0
      │   │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │       ├── infraternal-plugin-ssh v0.1.0 (*)
      │   │       ├── infraternal-server v0.1.0 (*)
      │   │       ├── rustls v0.23.45 (*)
      │   │       └── rustls-pki-types v1.15.1 (*)
      │   └── url v2.5.8 (*)
      ├── synstructure v0.14.0
      │   ├── yoke-derive v0.8.4
      │   │   └── yoke v0.8.3
      │   │       ├── icu_collections v2.3.0 (*)
      │   │       ├── icu_provider v2.3.1 (*)
      │   │       ├── zerotrie v0.2.5 (*)
      │   │       └── zerovec v0.11.8
      │   │           ├── icu_collections v2.3.0 (*)
      │   │           ├── icu_locale_core v2.3.0 (*)
      │   │           ├── icu_normalizer v2.3.0 (*)
      │   │           ├── icu_properties v2.3.0 (*)
      │   │           ├── icu_provider v2.3.1 (*)
      │   │           ├── potential_utf v0.1.6
      │   │           │   └── icu_collections v2.3.0 (*)
      │   │           └── tinystr v0.8.4 (*)
      │   └── zerofrom-derive v0.1.8
      │       └── zerofrom v0.1.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── yoke v0.8.3 (*)
      │           ├── zerotrie v0.2.5 (*)
      │           └── zerovec v0.11.8 (*)
      ├── thiserror-impl v2.0.21
      │   └── thiserror v2.0.21
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-mesh v0.1.0 (*)
      │       ├── infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── quinn-proto v0.11.19 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-sqlite v0.8.6 (*)
      │       ├── sysctl v0.7.1
      │       │   └── infraternal-plugin-host-facts v0.1.0 (*)
      │       └── tungstenite v0.29.0 (*)
      ├── tokio-macros v2.7.2
      │   └── tokio v1.53.2
      │       ├── axum v0.8.9 (*)
      │       ├── axum-server v0.8.0 (*)
      │       ├── fs-err v3.3.2
      │       │   └── axum-server v0.8.0 (*)
      │       ├── h2 v0.4.19
      │       │   ├── hyper v1.11.1
      │       │   │   ├── axum v0.8.9 (*)
      │       │   │   ├── axum-server v0.8.0 (*)
      │       │   │   ├── hyper-util v0.1.21
      │       │   │   │   ├── axum v0.8.9 (*)
      │       │   │   │   ├── axum-server v0.8.0 (*)
      │       │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   │   ├── infraternal v0.1.0 (*)
      │       │   │   └── (dev) infraternal-server v0.1.0 (*)
      │       │   └── (dev) infraternal-server v0.1.0 (*)
      │       ├── hyper v1.11.1 (*)
      │       ├── hyper-util v0.1.21 (*)
      │       ├── (dev) infraternal v0.1.0 (*)
      │       ├── (dev) infraternal-agent v0.1.0 (*)
      │       ├── infraternal-plugin-api v0.1.0 (*)
      │       ├── infraternal-plugin-mesh v0.1.0 (*)
      │       ├── infraternal-plugin-release v0.1.0 (*)
      │       ├── infraternal-plugin-remote v0.1.0 (*)
      │       ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │       ├── (dev) infraternal-server v0.1.0 (*)
      │       ├── quinn v0.11.12 (*)
      │       ├── sqlx-core v0.8.6 (*)
      │       ├── sqlx-macros-core v0.8.6 (*)
      │       ├── tokio-openssl v0.6.5 (*)
      │       ├── tokio-stream v0.1.19
      │       │   └── sqlx-core v0.8.6 (*)
      │       ├── tokio-tungstenite v0.29.0 (*)
      │       ├── tokio-util v0.7.19
      │       │   ├── h2 v0.4.19 (*)
      │       │   └── tower-http v0.6.11 (*)
      │       ├── tower v0.5.3 (*)
      │       └── tower-http v0.6.11 (*)
      ├── wasm-bindgen-macro-support v0.2.129
      │   └── wasm-bindgen-macro v0.2.129
      │       └── wasm-bindgen v0.2.129
      │           ├── getrandom v0.2.17 (*)
      │           ├── getrandom v0.4.3 (*)
      │           ├── js-sys v0.3.106 (*)
      │           ├── plotters v0.3.7 (*)
      │           ├── web-sys v0.3.106 (*)
      │           └── web-time v1.1.0 (*)
      ├── yoke-derive v0.8.4 (*)
      ├── zerofrom-derive v0.1.8 (*)
      └── zerovec-derive v0.11.6
          └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'synstructure'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:251:1
    │  
251 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index
252 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index
    │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ synstructure v0.13.2
      └── asn1-rs-derive v0.5.1
          └── asn1-rs v0.6.2
              ├── der-parser v9.0.0
              │   ├── webauthn-rs-core v0.5.5
              │   │   └── webauthn-rs v0.5.5
              │   │       └── infraternal-server v0.1.0
              │   │           ├── infraternal v0.1.0
              │   │           └── infraternal-fuzz v0.1.0
              │   └── x509-parser v0.16.0
              │       └── webauthn-rs-core v0.5.5 (*)
              ├── oid-registry v0.7.1
              │   └── x509-parser v0.16.0 (*)
              └── x509-parser v0.16.0 (*)
    ├ synstructure v0.14.0
      ├── yoke-derive v0.8.4
      │   └── yoke v0.8.3
      │       ├── icu_collections v2.3.0
      │       │   ├── icu_normalizer v2.3.0
      │       │   │   └── idna_adapter v1.2.2
      │       │   │       └── idna v1.1.0
      │       │   │           └── url v2.5.8
      │       │   │               ├── infraternal v0.1.0
      │       │   │               ├── infraternal-plugin-ssh v0.1.0
      │       │   │               │   ├── infraternal v0.1.0 (*)
      │       │   │               │   ├── infraternal-fuzz v0.1.0
      │       │   │               │   └── infraternal-server v0.1.0
      │       │   │               │       ├── infraternal v0.1.0 (*)
      │       │   │               │       └── infraternal-fuzz v0.1.0 (*)
      │       │   │               ├── infraternal-server v0.1.0 (*)
      │       │   │               ├── sqlx-core v0.8.6
      │       │   │               │   ├── sqlx v0.8.6
      │       │   │               │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-api v0.1.0
      │       │   │               │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-agent v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-mesh v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-plugin-mesh v0.1.0
      │       │   │               │   │   │   │       ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │       ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │       ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │       └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-backup v0.1.0
      │       │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-relay v0.1.0
      │       │   │               │   │   │   │   └── infraternal v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-release v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-remote v0.1.0
      │       │   │               │   │   │   │   ├── infraternal v0.1.0 (*)
      │       │   │               │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │       │   │               │   │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   │   ├── infraternal-plugin-ssh v0.1.0 (*)
      │       │   │               │   │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │       │   │               │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │       │   │               │   │   └── infraternal-server v0.1.0 (*)
      │       │   │               │   ├── sqlx-macros v0.8.6
      │       │   │               │   │   └── sqlx v0.8.6 (*)
      │       │   │               │   ├── sqlx-macros-core v0.8.6
      │       │   │               │   │   └── sqlx-macros v0.8.6 (*)
      │       │   │               │   └── sqlx-sqlite v0.8.6
      │       │   │               │       ├── sqlx v0.8.6 (*)
      │       │   │               │       └── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-macros-core v0.8.6 (*)
      │       │   │               ├── sqlx-sqlite v0.8.6 (*)
      │       │   │               ├── webauthn-rs v0.5.5
      │       │   │               │   └── infraternal-server v0.1.0 (*)
      │       │   │               ├── webauthn-rs-core v0.5.5
      │       │   │               │   └── webauthn-rs v0.5.5 (*)
Final branch-head scripts/verify fast output verbatim, part 10/12. Head 28bbc0b6fa18356a992c2ec215213d5d732d271b; exit1, only static sizes fail. SHA256 b935fbfa77756bb873f44a315d1f3f61b1a57f4622068c4961eea6d8e8421447. RTT row ran on VM208/shared lock with identical script SHA815c3bee752af0471ab9bf47b671e4729f2ef0cb7659a6655e8b8e24e4b7b73d. Functional transcript durations are not accepted performance measurements. ```text │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── js-sys v0.3.106 │ │ ├── getrandom v0.2.17 │ │ │ ├── rand_core v0.6.4 │ │ │ │ ├── bip39 v2.2.2 │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── crypto-common v0.1.7 │ │ │ │ │ ├── aead v0.5.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ ├── cipher v0.4.4 │ │ │ │ │ │ ├── aes v0.8.4 │ │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ │ ├── aes-gcm v0.10.3 (*) │ │ │ │ │ │ └── ctr v0.9.2 │ │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ │ ├── digest v0.10.7 │ │ │ │ │ │ ├── blake2 v0.10.6 │ │ │ │ │ │ │ └── argon2 v0.5.3 │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── hmac v0.12.1 │ │ │ │ │ │ │ └── hkdf v0.12.4 │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sha1 v0.10.7 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── tungstenite v0.29.0 │ │ │ │ │ │ │ └── tokio-tungstenite v0.29.0 │ │ │ │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ └── sha2 v0.10.9 │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ │ │ └── universal-hash v0.5.1 │ │ │ │ │ └── polyval v0.6.2 │ │ │ │ │ └── ghash v0.5.1 │ │ │ │ │ └── aes-gcm v0.10.3 (*) │ │ │ │ ├── password-hash v0.5.0 │ │ │ │ │ └── argon2 v0.5.3 (*) │ │ │ │ ├── rand v0.8.8 │ │ │ │ │ └── bip39 v2.2.2 (*) │ │ │ │ └── rand_chacha v0.3.1 │ │ │ │ └── rand v0.8.8 (*) │ │ │ └── ring v0.17.14 │ │ │ ├── quinn-proto v0.11.19 │ │ │ │ └── quinn v0.11.12 │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── rustls v0.23.45 │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ ├── quinn v0.11.12 (*) │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── rustls-webpki v0.103.15 │ │ │ └── rustls v0.23.45 (*) │ │ ├── getrandom v0.4.3 │ │ │ ├── jobserver v0.1.35 │ │ │ │ └── cc v1.6.0 │ │ │ │ ├── (build) libfuzzer-sys v0.4.13 │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ ├── (build) libsqlite3-sys v0.30.1 │ │ │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ │ │ ├── openssl-src v300.6.1+3.6.3 │ │ │ │ │ └── (build) openssl-sys v0.9.117 │ │ │ │ │ ├── axum-server v0.8.0 │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── openssl v0.10.81 │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-shim v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── tokio-openssl v0.6.5 │ │ │ │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 │ │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ │ ├── tokio-openssl v0.6.5 (*) │ │ │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ │ │ ├── (build) openssl-sys v0.9.117 (*) │ │ │ │ └── (build) ring v0.17.14 (*) │ │ │ ├── quinn-proto v0.11.19 (*) │ │ │ ├── rand v0.10.3 │ │ │ │ └── quinn-proto v0.11.19 (*) │ │ │ └── uuid v1.27.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── web-sys v0.3.106 │ │ │ └── plotters v0.3.7 │ │ │ └── criterion v0.7.0 (*) │ │ └── web-time v1.1.0 │ │ ├── quinn v0.11.12 (*) │ │ ├── quinn-proto v0.11.19 (*) │ │ └── rustls-pki-types v1.15.1 │ │ ├── quinn-proto v0.11.19 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-webpki v0.103.15 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 │ └── infraternal-server v0.1.0 (*) ├── serde_derive v1.0.229 │ ├── serde v1.0.229 │ │ ├── base64urlsafedata v0.5.5 │ │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ │ ├── webauthn-rs v0.5.5 (*) │ │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ │ └── webauthn-rs-proto v0.5.5 (*) │ │ ├── bip39 v2.2.2 (*) │ │ ├── ciborium v0.2.2 │ │ │ └── criterion v0.7.0 (*) │ │ ├── criterion v0.7.0 (*) │ │ ├── either v1.18.0 │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── itertools v0.13.0 │ │ │ │ ├── criterion v0.7.0 (*) │ │ │ │ └── criterion-plot v0.6.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── rayon v1.12.0 │ │ │ │ └── criterion v0.7.0 (*) │ │ │ ├── sqlx-core v0.8.6 (*) │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── serde_cbor_2 v0.13.0 │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ ├── serde_urlencoded v0.7.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ └── sqlx-sqlite v0.8.6 (*) │ │ ├── sqlx-core v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ ├── tinytemplate v1.2.1 │ │ │ └── criterion v0.7.0 (*) │ │ ├── tracing-serde v0.2.0 │ │ │ └── tracing-subscriber v0.3.23 │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── tracing-subscriber v0.3.23 (*) │ │ ├── url v2.5.8 (*) │ │ ├── webauthn-attestation-ca v0.5.5 (*) │ │ ├── webauthn-rs v0.5.5 (*) │ │ ├── webauthn-rs-core v0.5.5 (*) │ │ ├── webauthn-rs-proto v0.5.5 (*) │ │ └── zeroize v1.9.0 │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ ├── infraternal-server v0.1.0 (*) │ │ ├── rustls v0.23.45 (*) │ │ └── rustls-pki-types v1.15.1 (*) │ └── url v2.5.8 (*) ├── synstructure v0.14.0 │ ├── yoke-derive v0.8.4 │ │ └── yoke v0.8.3 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── zerotrie v0.2.5 (*) │ │ └── zerovec v0.11.8 │ │ ├── icu_collections v2.3.0 (*) │ │ ├── icu_locale_core v2.3.0 (*) │ │ ├── icu_normalizer v2.3.0 (*) │ │ ├── icu_properties v2.3.0 (*) │ │ ├── icu_provider v2.3.1 (*) │ │ ├── potential_utf v0.1.6 │ │ │ └── icu_collections v2.3.0 (*) │ │ └── tinystr v0.8.4 (*) │ └── zerofrom-derive v0.1.8 │ └── zerofrom v0.1.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── yoke v0.8.3 (*) │ ├── zerotrie v0.2.5 (*) │ └── zerovec v0.11.8 (*) ├── thiserror-impl v2.0.21 │ └── thiserror v2.0.21 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-mesh v0.1.0 (*) │ ├── infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── quinn-proto v0.11.19 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-sqlite v0.8.6 (*) │ ├── sysctl v0.7.1 │ │ └── infraternal-plugin-host-facts v0.1.0 (*) │ └── tungstenite v0.29.0 (*) ├── tokio-macros v2.7.2 │ └── tokio v1.53.2 │ ├── axum v0.8.9 (*) │ ├── axum-server v0.8.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── (dev) infraternal v0.1.0 (*) │ ├── (dev) infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ ├── sqlx-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 (*) │ ├── tower v0.5.3 (*) │ └── tower-http v0.6.11 (*) ├── wasm-bindgen-macro-support v0.2.129 │ └── wasm-bindgen-macro v0.2.129 │ └── wasm-bindgen v0.2.129 │ ├── getrandom v0.2.17 (*) │ ├── getrandom v0.4.3 (*) │ ├── js-sys v0.3.106 (*) │ ├── plotters v0.3.7 (*) │ ├── web-sys v0.3.106 (*) │ └── web-time v1.1.0 (*) ├── yoke-derive v0.8.4 (*) ├── zerofrom-derive v0.1.8 (*) └── zerovec-derive v0.11.6 └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'synstructure' ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:251:1 │ 251 │ ╭ synstructure 0.13.2 registry+https://github.com/rust-lang/crates.io-index 252 │ │ synstructure 0.14.0 registry+https://github.com/rust-lang/crates.io-index │ ╰─────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ synstructure v0.13.2 └── asn1-rs-derive v0.5.1 └── asn1-rs v0.6.2 ├── der-parser v9.0.0 │ ├── webauthn-rs-core v0.5.5 │ │ └── webauthn-rs v0.5.5 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 │ │ └── infraternal-fuzz v0.1.0 │ └── x509-parser v0.16.0 │ └── webauthn-rs-core v0.5.5 (*) ├── oid-registry v0.7.1 │ └── x509-parser v0.16.0 (*) └── x509-parser v0.16.0 (*) ├ synstructure v0.14.0 ├── yoke-derive v0.8.4 │ └── yoke v0.8.3 │ ├── icu_collections v2.3.0 │ │ ├── icu_normalizer v2.3.0 │ │ │ └── idna_adapter v1.2.2 │ │ │ └── idna v1.1.0 │ │ │ └── url v2.5.8 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ │ └── infraternal-server v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-server v0.1.0 (*) │ │ │ ├── sqlx-core v0.8.6 │ │ │ │ ├── sqlx v0.8.6 │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-agent v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-plugin-mesh v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ │ ├── infraternal-plugin-ssh v0.1.0 (*) │ │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ │ ├── sqlx-macros v0.8.6 │ │ │ │ │ └── sqlx v0.8.6 (*) │ │ │ │ ├── sqlx-macros-core v0.8.6 │ │ │ │ │ └── sqlx-macros v0.8.6 (*) │ │ │ │ └── sqlx-sqlite v0.8.6 │ │ │ │ ├── sqlx v0.8.6 (*) │ │ │ │ └── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-macros-core v0.8.6 (*) │ │ │ ├── sqlx-sqlite v0.8.6 (*) │ │ │ ├── webauthn-rs v0.5.5 │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── webauthn-rs-core v0.5.5 │ │ │ │ └── webauthn-rs v0.5.5 (*) ```
Author
Owner

Final branch-head scripts/verify fast output verbatim, part 11/12. Head 28bbc0b6fa; exit1, only static sizes fail. SHA256 b935fbfa77756bb873f44a315d1f3f61b1a57f4622068c4961eea6d8e8421447. RTT row ran on VM208/shared lock with identical script SHA815c3bee752af0471ab9bf47b671e4729f2ef0cb7659a6655e8b8e24e4b7b73d. Functional transcript durations are not accepted performance measurements.

      │       │   │               └── webauthn-rs-proto v0.5.5
      │       │   │                   └── webauthn-rs-core v0.5.5 (*)
      │       │   └── icu_properties v2.3.0
      │       │       └── idna_adapter v1.2.2 (*)
      │       ├── icu_provider v2.3.1
      │       │   ├── icu_normalizer v2.3.0 (*)
      │       │   └── icu_properties v2.3.0 (*)
      │       ├── zerotrie v0.2.5
      │       │   ├── icu_properties v2.3.0 (*)
      │       │   └── icu_provider v2.3.1 (*)
      │       └── zerovec v0.11.8
      │           ├── icu_collections v2.3.0 (*)
      │           ├── icu_locale_core v2.3.0
      │           │   ├── icu_properties v2.3.0 (*)
      │           │   └── icu_provider v2.3.1 (*)
      │           ├── icu_normalizer v2.3.0 (*)
      │           ├── icu_properties v2.3.0 (*)
      │           ├── icu_provider v2.3.1 (*)
      │           ├── potential_utf v0.1.6
      │           │   └── icu_collections v2.3.0 (*)
      │           └── tinystr v0.8.4
      │               └── icu_locale_core v2.3.0 (*)
      └── zerofrom-derive v0.1.8
          └── zerofrom v0.1.8
              ├── icu_collections v2.3.0 (*)
              ├── icu_provider v2.3.1 (*)
              ├── yoke v0.8.3 (*)
              ├── zerotrie v0.2.5 (*)
              └── zerovec v0.11.8 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:254:1
    │  
254 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index
255 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror v1.0.69
      ├── asn1-rs v0.6.2
      │   ├── der-parser v9.0.0
      │   │   ├── webauthn-rs-core v0.5.5
      │   │   │   └── webauthn-rs v0.5.5
      │   │   │       └── infraternal-server v0.1.0
      │   │   │           ├── infraternal v0.1.0
      │   │   │           └── infraternal-fuzz v0.1.0
      │   │   └── x509-parser v0.16.0
      │   │       └── webauthn-rs-core v0.5.5 (*)
      │   ├── oid-registry v0.7.1
      │   │   └── x509-parser v0.16.0 (*)
      │   └── x509-parser v0.16.0 (*)
      ├── webauthn-rs-core v0.5.5 (*)
      └── x509-parser v0.16.0 (*)
    ├ thiserror v2.0.21
      ├── infraternal v0.1.0
      ├── infraternal-mesh v0.1.0
      │   ├── infraternal v0.1.0 (*)
      │   └── infraternal-plugin-mesh v0.1.0
      │       ├── infraternal v0.1.0 (*)
      │       ├── infraternal-agent v0.1.0
      │       │   ├── infraternal v0.1.0 (*)
      │       │   ├── infraternal-fuzz v0.1.0
      │       │   └── infraternal-server v0.1.0
      │       │       ├── infraternal v0.1.0 (*)
      │       │       └── infraternal-fuzz v0.1.0 (*)
      │       ├── infraternal-fuzz v0.1.0 (*)
      │       └── infraternal-server v0.1.0 (*)
      ├── infraternal-server v0.1.0 (*)
      ├── quinn v0.11.12
      │   ├── infraternal-agent v0.1.0 (*)
      │   ├── infraternal-plugin-remote v0.1.0
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   └── infraternal-server v0.1.0 (*)
      ├── quinn-proto v0.11.19
      │   └── quinn v0.11.12 (*)
      ├── sqlx-core v0.8.6
      │   ├── sqlx v0.8.6
      │   │   ├── infraternal v0.1.0 (*)
      │   │   ├── infraternal-plugin-api v0.1.0
      │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-backup v0.1.0
      │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-host-facts v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-agent v0.1.0 (*)
      │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-relay v0.1.0
      │   │   │   │   └── infraternal v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-release v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
      │   │   │   ├── infraternal-plugin-ssh v0.1.0
      │   │   │   │   ├── infraternal v0.1.0 (*)
      │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
      │   │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   │   └── infraternal-server v0.1.0 (*)
      │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │   │   └── infraternal-server v0.1.0 (*)
      │   ├── sqlx-macros v0.8.6
      │   │   └── sqlx v0.8.6 (*)
      │   ├── sqlx-macros-core v0.8.6
      │   │   └── sqlx-macros v0.8.6 (*)
      │   └── sqlx-sqlite v0.8.6
      │       ├── sqlx v0.8.6 (*)
      │       └── sqlx-macros-core v0.8.6 (*)
      ├── sqlx-sqlite v0.8.6 (*)
      ├── sysctl v0.7.1
      │   └── infraternal-plugin-host-facts v0.1.0 (*)
      └── tungstenite v0.29.0
          └── tokio-tungstenite v0.29.0
              ├── axum v0.8.9
              │   ├── infraternal-fuzz v0.1.0 (*)
              │   └── infraternal-server v0.1.0 (*)
              └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:256:1
    │  
256 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index
257 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index
    │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ thiserror-impl v1.0.69
      └── thiserror v1.0.69
          ├── asn1-rs v0.6.2
          │   ├── der-parser v9.0.0
          │   │   ├── webauthn-rs-core v0.5.5
          │   │   │   └── webauthn-rs v0.5.5
          │   │   │       └── infraternal-server v0.1.0
          │   │   │           ├── infraternal v0.1.0
          │   │   │           └── infraternal-fuzz v0.1.0
          │   │   └── x509-parser v0.16.0
          │   │       └── webauthn-rs-core v0.5.5 (*)
          │   ├── oid-registry v0.7.1
          │   │   └── x509-parser v0.16.0 (*)
          │   └── x509-parser v0.16.0 (*)
          ├── webauthn-rs-core v0.5.5 (*)
          └── x509-parser v0.16.0 (*)
    ├ thiserror-impl v2.0.21
      └── thiserror v2.0.21
          ├── infraternal v0.1.0
          ├── infraternal-mesh v0.1.0
          │   ├── infraternal v0.1.0 (*)
          │   └── infraternal-plugin-mesh v0.1.0
          │       ├── infraternal v0.1.0 (*)
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-fuzz v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── infraternal-server v0.1.0 (*)
          ├── quinn v0.11.12
          │   ├── infraternal-agent v0.1.0 (*)
          │   ├── infraternal-plugin-remote v0.1.0
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   └── infraternal-server v0.1.0 (*)
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12 (*)
          ├── sqlx-core v0.8.6
          │   ├── sqlx v0.8.6
          │   │   ├── infraternal v0.1.0 (*)
          │   │   ├── infraternal-plugin-api v0.1.0
          │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-backup v0.1.0
          │   │   │   │   └── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-host-facts v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-agent v0.1.0 (*)
          │   │   │   │   └── infraternal-fuzz v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-relay v0.1.0
          │   │   │   │   └── infraternal v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-release v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   │   │   ├── infraternal-plugin-ssh v0.1.0
          │   │   │   │   ├── infraternal v0.1.0 (*)
          │   │   │   │   ├── infraternal-fuzz v0.1.0 (*)
          │   │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   │   └── infraternal-server v0.1.0 (*)
          │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
          │   │   ├── infraternal-plugin-release v0.1.0 (*)
          │   │   └── infraternal-server v0.1.0 (*)
          │   ├── sqlx-macros v0.8.6
          │   │   └── sqlx v0.8.6 (*)
          │   ├── sqlx-macros-core v0.8.6
          │   │   └── sqlx-macros v0.8.6 (*)
          │   └── sqlx-sqlite v0.8.6
          │       ├── sqlx v0.8.6 (*)
          │       └── sqlx-macros-core v0.8.6 (*)
          ├── sqlx-sqlite v0.8.6 (*)
          ├── sysctl v0.7.1
          │   └── infraternal-plugin-host-facts v0.1.0 (*)
          └── tungstenite v0.29.0
              └── tokio-tungstenite v0.29.0
                  ├── axum v0.8.9
                  │   ├── infraternal-fuzz v0.1.0 (*)
                  │   └── infraternal-server v0.1.0 (*)
                  └── (dev) infraternal-server v0.1.0 (*)

warning[duplicate]: found 2 duplicate entries for crate 'windows-sys'
    ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:314:1
    │  
314 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index
315 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index
    │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries
    │  
    ├ windows-sys v0.52.0
      └── ring v0.17.14
          ├── quinn-proto v0.11.19
          │   └── quinn v0.11.12
          │       ├── infraternal-agent v0.1.0
          │       │   ├── infraternal v0.1.0
          │       │   ├── infraternal-fuzz v0.1.0
          │       │   └── infraternal-server v0.1.0
          │       │       ├── infraternal v0.1.0 (*)
          │       │       └── infraternal-fuzz v0.1.0 (*)
          │       ├── infraternal-plugin-remote v0.1.0
          │       │   ├── infraternal v0.1.0 (*)
          │       │   ├── infraternal-agent v0.1.0 (*)
          │       │   └── infraternal-server v0.1.0 (*)
          │       └── infraternal-server v0.1.0 (*)
          ├── rustls v0.23.45
          │   ├── infraternal-plugin-remote v0.1.0 (*)
          │   ├── quinn v0.11.12 (*)
          │   └── quinn-proto v0.11.19 (*)
          └── rustls-webpki v0.103.15
              └── rustls v0.23.45 (*)
    ├ windows-sys v0.61.2
      ├── anstyle-query v1.1.5
      │   └── anstream v1.0.0
      │       └── clap_builder v4.6.7
      │           └── clap v4.6.7
      │               ├── criterion v0.7.0
      │               │   └── (dev) infraternal-protocol v0.1.0
      │               │       ├── infraternal-agent v0.1.0
      │               │       │   ├── infraternal v0.1.0
      │               │       │   ├── infraternal-fuzz v0.1.0
      │               │       │   └── infraternal-server v0.1.0
      │               │       │       ├── infraternal v0.1.0 (*)
      │               │       │       └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-fuzz v0.1.0 (*)
      │               │       ├── (dev) infraternal-plugin-host-facts v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-fuzz v0.1.0 (*)
      │               │       ├── infraternal-plugin-mesh v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-release v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-fuzz v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       ├── infraternal-plugin-remote v0.1.0
      │               │       │   ├── infraternal v0.1.0 (*)
      │               │       │   ├── infraternal-agent v0.1.0 (*)
      │               │       │   └── infraternal-server v0.1.0 (*)
      │               │       └── infraternal-server v0.1.0 (*)
      │               └── infraternal v0.1.0 (*)
      ├── anstyle-wincon v3.0.11
      │   └── anstream v1.0.0 (*)
      ├── errno v0.3.14
      │   └── signal-hook-registry v1.4.8
      │       └── tokio v1.53.2
      │           ├── axum v0.8.9
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── axum-server v0.8.0
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── fs-err v3.3.2
      │           │   └── axum-server v0.8.0 (*)
      │           ├── h2 v0.4.19
      │           │   ├── hyper v1.11.1
      │           │   │   ├── axum v0.8.9 (*)
      │           │   │   ├── axum-server v0.8.0 (*)
      │           │   │   ├── hyper-util v0.1.21
      │           │   │   │   ├── axum v0.8.9 (*)
      │           │   │   │   ├── axum-server v0.8.0 (*)
      │           │   │   │   ├── infraternal v0.1.0 (*)
      │           │   │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   └── (dev) infraternal-server v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── hyper v1.11.1 (*)
      │           ├── hyper-util v0.1.21 (*)
      │           ├── (dev) infraternal v0.1.0 (*)
      │           ├── (dev) infraternal-agent v0.1.0 (*)
      │           ├── infraternal-plugin-api v0.1.0
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   ├── infraternal-mesh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   └── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-backup v0.1.0
      │           │   │   └── infraternal v0.1.0 (*)
      │           │   ├── infraternal-plugin-host-facts v0.1.0 (*)
      │           │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   ├── infraternal-plugin-relay v0.1.0
      │           │   │   └── infraternal v0.1.0 (*)
      │           │   ├── infraternal-plugin-release v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   ├── infraternal-plugin-ssh v0.1.0
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-fuzz v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── infraternal-plugin-mesh v0.1.0 (*)
      │           ├── infraternal-plugin-release v0.1.0 (*)
      │           ├── infraternal-plugin-remote v0.1.0 (*)
      │           ├── (dev) infraternal-plugin-ssh v0.1.0 (*)
      │           ├── (dev) infraternal-server v0.1.0 (*)
      │           ├── quinn v0.11.12
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── infraternal-server v0.1.0 (*)
      │           ├── sqlx-core v0.8.6
      │           │   ├── sqlx v0.8.6
      │           │   │   ├── infraternal v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-api v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-mesh v0.1.0 (*)
      │           │   │   ├── infraternal-plugin-release v0.1.0 (*)
      │           │   │   └── infraternal-server v0.1.0 (*)
      │           │   ├── sqlx-macros v0.8.6
      │           │   │   └── sqlx v0.8.6 (*)
      │           │   ├── sqlx-macros-core v0.8.6
      │           │   │   └── sqlx-macros v0.8.6 (*)
      │           │   └── sqlx-sqlite v0.8.6
      │           │       ├── sqlx v0.8.6 (*)
      │           │       └── sqlx-macros-core v0.8.6 (*)
      │           ├── sqlx-macros-core v0.8.6 (*)
      │           ├── tokio-openssl v0.6.5
      │           │   ├── axum-server v0.8.0 (*)
      │           │   ├── infraternal v0.1.0 (*)
      │           │   ├── infraternal-agent v0.1.0 (*)
      │           │   ├── infraternal-plugin-remote v0.1.0 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-stream v0.1.19
      │           │   └── sqlx-core v0.8.6 (*)
      │           ├── tokio-tungstenite v0.29.0
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           ├── tokio-util v0.7.19
      │           │   ├── h2 v0.4.19 (*)
      │           │   └── tower-http v0.6.11
      │           │       └── infraternal-server v0.1.0 (*)
      │           ├── tower v0.5.3
      │           │   ├── axum v0.8.9 (*)
      │           │   └── (dev) infraternal-server v0.1.0 (*)
      │           └── tower-http v0.6.11 (*)
      ├── mio v1.2.4
      │   └── tokio v1.53.2 (*)
      ├── nu-ansi-term v0.50.3
      │   └── tracing-subscriber v0.3.23
      │       └── infraternal-server v0.1.0 (*)
      ├── quinn-udp v0.5.16
      │   └── quinn v0.11.12 (*)
      ├── socket2 v0.6.5
      │   ├── quinn v0.11.12 (*)
      │   ├── quinn-udp v0.5.16 (*)
      │   └── tokio v1.53.2 (*)
      ├── tokio v1.53.2 (*)
      └── winapi-util v0.1.11
          ├── same-file v1.0.6
          │   └── walkdir v2.5.0
          │       ├── criterion v0.7.0 (*)
          │       └── sysctl v0.7.1
          │           └── infraternal-plugin-host-facts v0.1.0 (*)
          └── walkdir v2.5.0 (*)

advisories ok, bans ok, licenses ok, sources ok

==> static builds
x86_64-unknown-linux-musl: exact define removed; other arguments preserved; override refused
aarch64-unknown-linux-musl: exact define removed; other arguments preserved; override refused
.
----------------------------------------------------------------------
Ran 1 test in 0.002s

OK
    Finished `release` profile [optimized] target(s) in 0.70s
production trust: PASS (staging-trust authority absent)
/home/kayg/.cache/codex-scratch/prod-perf-fix/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped
PT_INTERP: absent; size: 22587984 bytes (baseline 16142672 + allowance 262144 = max 16404816)
binary exceeds the 16404816-byte size budget: 22587984 bytes
key memory: x86_64-unknown-linux-musl; memlock=8388608 bytes
Command
  State   ready
  Detail  Key memory initialization=1; locked pages and dump exclusion enabled
  Next    Run this check under an 8 MiB memlock limit.
    Finished `release` profile [optimized] target(s) in 0.51s
production trust: PASS (staging-trust authority absent)
/home/kayg/.cache/codex-scratch/prod-perf-fix/target/aarch64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB executable, ARM aarch64, version 1 (SYSV), statically linked, stripped
PT_INTERP: absent; size: 19992104 bytes (baseline 13555672 + allowance 262144 = max 13817816)
binary exceeds the 13817816-byte size budget: 19992104 bytes
key memory: aarch64-unknown-linux-musl runtime not checked (host x86_64; native execution required)
server subcommand: exit 2, versioned JSON unavailable result
agent subcommand: exit 2, versioned JSON unavailable result

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
Final branch-head scripts/verify fast output verbatim, part 11/12. Head 28bbc0b6fa18356a992c2ec215213d5d732d271b; exit1, only static sizes fail. SHA256 b935fbfa77756bb873f44a315d1f3f61b1a57f4622068c4961eea6d8e8421447. RTT row ran on VM208/shared lock with identical script SHA815c3bee752af0471ab9bf47b671e4729f2ef0cb7659a6655e8b8e24e4b7b73d. Functional transcript durations are not accepted performance measurements. ```text │ │ │ └── webauthn-rs-proto v0.5.5 │ │ │ └── webauthn-rs-core v0.5.5 (*) │ │ └── icu_properties v2.3.0 │ │ └── idna_adapter v1.2.2 (*) │ ├── icu_provider v2.3.1 │ │ ├── icu_normalizer v2.3.0 (*) │ │ └── icu_properties v2.3.0 (*) │ ├── zerotrie v0.2.5 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ └── zerovec v0.11.8 │ ├── icu_collections v2.3.0 (*) │ ├── icu_locale_core v2.3.0 │ │ ├── icu_properties v2.3.0 (*) │ │ └── icu_provider v2.3.1 (*) │ ├── icu_normalizer v2.3.0 (*) │ ├── icu_properties v2.3.0 (*) │ ├── icu_provider v2.3.1 (*) │ ├── potential_utf v0.1.6 │ │ └── icu_collections v2.3.0 (*) │ └── tinystr v0.8.4 │ └── icu_locale_core v2.3.0 (*) └── zerofrom-derive v0.1.8 └── zerofrom v0.1.8 ├── icu_collections v2.3.0 (*) ├── icu_provider v2.3.1 (*) ├── yoke v0.8.3 (*) ├── zerotrie v0.2.5 (*) └── zerovec v0.11.8 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror' ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:254:1 │ 254 │ ╭ thiserror 1.0.69 registry+https://github.com/rust-lang/crates.io-index 255 │ │ thiserror 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰──────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'thiserror-impl' ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:256:1 │ 256 │ ╭ thiserror-impl 1.0.69 registry+https://github.com/rust-lang/crates.io-index 257 │ │ thiserror-impl 2.0.21 registry+https://github.com/rust-lang/crates.io-index │ ╰───────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ thiserror-impl v1.0.69 └── thiserror v1.0.69 ├── asn1-rs v0.6.2 │ ├── der-parser v9.0.0 │ │ ├── webauthn-rs-core v0.5.5 │ │ │ └── webauthn-rs v0.5.5 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ └── infraternal-fuzz v0.1.0 │ │ └── x509-parser v0.16.0 │ │ └── webauthn-rs-core v0.5.5 (*) │ ├── oid-registry v0.7.1 │ │ └── x509-parser v0.16.0 (*) │ └── x509-parser v0.16.0 (*) ├── webauthn-rs-core v0.5.5 (*) └── x509-parser v0.16.0 (*) ├ thiserror-impl v2.0.21 └── thiserror v2.0.21 ├── infraternal v0.1.0 ├── infraternal-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ └── infraternal-plugin-mesh v0.1.0 │ ├── infraternal v0.1.0 (*) │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── infraternal-server v0.1.0 (*) ├── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 (*) ├── sqlx-core v0.8.6 │ ├── sqlx v0.8.6 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-api v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-host-facts v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ │ └── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ │ └── infraternal-server v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-macros v0.8.6 │ │ └── sqlx v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 │ │ └── sqlx-macros v0.8.6 (*) │ └── sqlx-sqlite v0.8.6 │ ├── sqlx v0.8.6 (*) │ └── sqlx-macros-core v0.8.6 (*) ├── sqlx-sqlite v0.8.6 (*) ├── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── tungstenite v0.29.0 └── tokio-tungstenite v0.29.0 ├── axum v0.8.9 │ ├── infraternal-fuzz v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) └── (dev) infraternal-server v0.1.0 (*) warning[duplicate]: found 2 duplicate entries for crate 'windows-sys' ┌─ /home/kayg/Developer/infraternal/.worktrees/prod-perf-fix/Cargo.lock:314:1 │ 314 │ ╭ windows-sys 0.52.0 registry+https://github.com/rust-lang/crates.io-index 315 │ │ windows-sys 0.61.2 registry+https://github.com/rust-lang/crates.io-index │ ╰────────────────────────────────────────────────────────────────────────┘ lock entries │ ├ windows-sys v0.52.0 └── ring v0.17.14 ├── quinn-proto v0.11.19 │ └── quinn v0.11.12 │ ├── infraternal-agent v0.1.0 │ │ ├── infraternal v0.1.0 │ │ ├── infraternal-fuzz v0.1.0 │ │ └── infraternal-server v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ └── infraternal-fuzz v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal-server v0.1.0 (*) ├── rustls v0.23.45 │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── quinn v0.11.12 (*) │ └── quinn-proto v0.11.19 (*) └── rustls-webpki v0.103.15 └── rustls v0.23.45 (*) ├ windows-sys v0.61.2 ├── anstyle-query v1.1.5 │ └── anstream v1.0.0 │ └── clap_builder v4.6.7 │ └── clap v4.6.7 │ ├── criterion v0.7.0 │ │ └── (dev) infraternal-protocol v0.1.0 │ │ ├── infraternal-agent v0.1.0 │ │ │ ├── infraternal v0.1.0 │ │ │ ├── infraternal-fuzz v0.1.0 │ │ │ └── infraternal-server v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── (dev) infraternal-plugin-host-facts v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-agent v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ └── infraternal v0.1.0 (*) ├── anstyle-wincon v3.0.11 │ └── anstream v1.0.0 (*) ├── errno v0.3.14 │ └── signal-hook-registry v1.4.8 │ └── tokio v1.53.2 │ ├── axum v0.8.9 │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── axum-server v0.8.0 │ │ └── infraternal-server v0.1.0 (*) │ ├── fs-err v3.3.2 │ │ └── axum-server v0.8.0 (*) │ ├── h2 v0.4.19 │ │ ├── hyper v1.11.1 │ │ │ ├── axum v0.8.9 (*) │ │ │ ├── axum-server v0.8.0 (*) │ │ │ ├── hyper-util v0.1.21 │ │ │ │ ├── axum v0.8.9 (*) │ │ │ │ ├── axum-server v0.8.0 (*) │ │ │ │ ├── infraternal v0.1.0 (*) │ │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── (dev) infraternal-server v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── hyper v1.11.1 (*) │ ├── hyper-util v0.1.21 (*) │ ├── (dev) infraternal v0.1.0 (*) │ ├── (dev) infraternal-agent v0.1.0 (*) │ ├── infraternal-plugin-api v0.1.0 │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ ├── infraternal-mesh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ └── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-backup v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-host-facts v0.1.0 (*) │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ ├── infraternal-plugin-relay v0.1.0 │ │ │ └── infraternal v0.1.0 (*) │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ ├── infraternal-plugin-ssh v0.1.0 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-fuzz v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── infraternal-plugin-mesh v0.1.0 (*) │ ├── infraternal-plugin-release v0.1.0 (*) │ ├── infraternal-plugin-remote v0.1.0 (*) │ ├── (dev) infraternal-plugin-ssh v0.1.0 (*) │ ├── (dev) infraternal-server v0.1.0 (*) │ ├── quinn v0.11.12 │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── infraternal-server v0.1.0 (*) │ ├── sqlx-core v0.8.6 │ │ ├── sqlx v0.8.6 │ │ │ ├── infraternal v0.1.0 (*) │ │ │ ├── infraternal-plugin-api v0.1.0 (*) │ │ │ ├── infraternal-plugin-mesh v0.1.0 (*) │ │ │ ├── infraternal-plugin-release v0.1.0 (*) │ │ │ └── infraternal-server v0.1.0 (*) │ │ ├── sqlx-macros v0.8.6 │ │ │ └── sqlx v0.8.6 (*) │ │ ├── sqlx-macros-core v0.8.6 │ │ │ └── sqlx-macros v0.8.6 (*) │ │ └── sqlx-sqlite v0.8.6 │ │ ├── sqlx v0.8.6 (*) │ │ └── sqlx-macros-core v0.8.6 (*) │ ├── sqlx-macros-core v0.8.6 (*) │ ├── tokio-openssl v0.6.5 │ │ ├── axum-server v0.8.0 (*) │ │ ├── infraternal v0.1.0 (*) │ │ ├── infraternal-agent v0.1.0 (*) │ │ ├── infraternal-plugin-remote v0.1.0 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-stream v0.1.19 │ │ └── sqlx-core v0.8.6 (*) │ ├── tokio-tungstenite v0.29.0 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ ├── tokio-util v0.7.19 │ │ ├── h2 v0.4.19 (*) │ │ └── tower-http v0.6.11 │ │ └── infraternal-server v0.1.0 (*) │ ├── tower v0.5.3 │ │ ├── axum v0.8.9 (*) │ │ └── (dev) infraternal-server v0.1.0 (*) │ └── tower-http v0.6.11 (*) ├── mio v1.2.4 │ └── tokio v1.53.2 (*) ├── nu-ansi-term v0.50.3 │ └── tracing-subscriber v0.3.23 │ └── infraternal-server v0.1.0 (*) ├── quinn-udp v0.5.16 │ └── quinn v0.11.12 (*) ├── socket2 v0.6.5 │ ├── quinn v0.11.12 (*) │ ├── quinn-udp v0.5.16 (*) │ └── tokio v1.53.2 (*) ├── tokio v1.53.2 (*) └── winapi-util v0.1.11 ├── same-file v1.0.6 │ └── walkdir v2.5.0 │ ├── criterion v0.7.0 (*) │ └── sysctl v0.7.1 │ └── infraternal-plugin-host-facts v0.1.0 (*) └── walkdir v2.5.0 (*) advisories ok, bans ok, licenses ok, sources ok ==> static builds x86_64-unknown-linux-musl: exact define removed; other arguments preserved; override refused aarch64-unknown-linux-musl: exact define removed; other arguments preserved; override refused . ---------------------------------------------------------------------- Ran 1 test in 0.002s OK Finished `release` profile [optimized] target(s) in 0.70s production trust: PASS (staging-trust authority absent) /home/kayg/.cache/codex-scratch/prod-perf-fix/target/x86_64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), static-pie linked, stripped PT_INTERP: absent; size: 22587984 bytes (baseline 16142672 + allowance 262144 = max 16404816) binary exceeds the 16404816-byte size budget: 22587984 bytes key memory: x86_64-unknown-linux-musl; memlock=8388608 bytes Command State ready Detail Key memory initialization=1; locked pages and dump exclusion enabled Next Run this check under an 8 MiB memlock limit. Finished `release` profile [optimized] target(s) in 0.51s production trust: PASS (staging-trust authority absent) /home/kayg/.cache/codex-scratch/prod-perf-fix/target/aarch64-unknown-linux-musl/release/infraternal: ELF 64-bit LSB executable, ARM aarch64, version 1 (SYSV), statically linked, stripped PT_INTERP: absent; size: 19992104 bytes (baseline 13555672 + allowance 262144 = max 13817816) binary exceeds the 13817816-byte size budget: 19992104 bytes key memory: aarch64-unknown-linux-musl runtime not checked (host x86_64; native execution required) server subcommand: exit 2, versioned JSON unavailable result agent subcommand: exit 2, versioned JSON unavailable result +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | ```
Author
Owner

Final branch-head scripts/verify fast output verbatim, part 12/12. Head 28bbc0b6fa; exit1, only static sizes fail. SHA256 b935fbfa77756bb873f44a315d1f3f61b1a57f4622068c4961eea6d8e8421447. RTT row ran on VM208/shared lock with identical script SHA815c3bee752af0471ab9bf47b671e4729f2ef0cb7659a6655e8b8e24e4b7b73d. Functional transcript durations are not accepted performance measurements.

| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+
Final branch-head scripts/verify fast output verbatim, part 12/12. Head 28bbc0b6fa18356a992c2ec215213d5d732d271b; exit1, only static sizes fail. SHA256 b935fbfa77756bb873f44a315d1f3f61b1a57f4622068c4961eea6d8e8421447. RTT row ran on VM208/shared lock with identical script SHA815c3bee752af0471ab9bf47b671e4729f2ef0cb7659a6655e8b8e24e4b7b73d. Functional transcript durations are not accepted performance measurements. ```text | CLI plugin compile-out | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ```
Author
Owner

Final TypeScript/compiler/build/transfer gate on28bbc0b6, exit0, output verbatim. Fast dispatcher stops after the unchanged native size failure, so ts_verify_fast was run separately. SHA256 367261b55bf2c4ff6b4ef27d68ee353ee570a21d5e2103dbe9931ba043aab484. Required separate bun test src:199pass0fail; proof guards12pass0fail. Functional durations are not performance evidence.


==> Vendored Ghostty artifact checksums
dist/ghostty-web.js: OK
dist/ghostty-vt.wasm: OK
dist/index.d.ts: OK

==> TypeScript protocol compiler

==> Tracer compiler, precompression and bundle transfer budget
bun install v1.4.2 (744846f84)

Checked 38 installs across 69 packages (no changes) [24.00ms]
$ bun x tsc --project tsconfig.json
bun test v1.4.2 (744846f84)

precompress.test.ts:
(pass) text sidecars round-trip deterministically; compressed formats remain identity [26.19ms]

browser-build.test.ts:
(pass) the browser renderer has no unresolved Vite Node-file shim request [19.06ms]

src/perf-detector.test.ts:
(pass) FrameDetector > estimates the refresh from the median and snaps it [1.06ms]
(pass) FrameDetector > nothing is a drop before the rate is known [0.08ms]
(pass) FrameDetector > a drop is over 1.5 refresh intervals, a freeze over 100 ms [0.22ms]
(pass) FrameDetector > the refresh only goes up: a slow page is not a slower display [0.17ms]
(pass) FrameDetector > the first frame after a pause is not an interval [0.12ms]
(pass) FrameDetector > fps, p95 and window read the ring [0.24ms]
(pass) FrameDetector > a throttled page (one frame a second) is neither a drop nor a freeze, and neither is its return [0.40ms]
(pass) FrameDetector > a lone long stall is still a freeze and is not a throttled run [0.11ms]

src/canvas/recency.test.ts:
(pass) touch moves an item to the front and never duplicates it [0.34ms]
(pass) repeating the front item changes nothing [0.06ms]
(pass) the list is capped, so the oldest items fall off [0.07ms]
(pass) top skips items that are no longer live, without losing them [0.11ms]
(pass) recentRows: five used windows in reverse order of use, from 54 windows [0.21ms]
(pass) recentRows: a view with three windows and no use shows them in order [0.04ms]
(pass) recentRows: used windows lead, the rest fill up to five in window order [0.08ms]

src/canvas/status.test.ts:
(pass) a lost server connection is an error toast, never a success tick [0.50ms]
(pass) routine connection states stay out of the toast [0.09ms]

src/canvas/toolbar/palette-actions.test.ts:
(pass) a deferred split:right selection retains its original window [0.50ms]
(pass) a deferred new:below selection retains its original window [0.05ms]
(pass) a deferred close selection retains its original window [0.03ms]

src/canvas/windows/details-facts.test.ts:
(pass) host facts become plain-language details rows [0.96ms]
(pass) unknown optional host facts stay absent instead of appearing as placeholders [0.64ms]
(pass) extended info off: the machine tab shows only the essentials, ungrouped, and there is no More section [0.63ms]
(pass) extended info on: every fact sits under System, Resources or Access [0.31ms]
(pass) the header follows the machine's own facts, not the platform the host list guessed [0.19ms]
(pass) before facts arrive the host's platform names the header [0.06ms]
(pass) a reported system with no platform mark still names the header and shows no mark [0.09ms]

src/canvas/mesh/protocol.test.ts:
(pass) the server's own list becomes nodes, tags and grants, by name [0.79ms]
(pass) without `access` (today's server) the person may view and may not edit [0.44ms]
(pass) fields the server does not send are absent, never invented [0.28ms]
(pass) anything that is not a list is refused, whole [6.14ms]
(pass) a node's own tag list and the tag table agree even when a server sends only one [0.23ms]
(pass) the subscription's events: a pushed list, a revision that invalidates, and the end of the subscription [0.39ms]
(pass) answers carry the new revision, and a create the new arrow's id [0.10ms]
(pass) endpoints go out as the server writes them: a node by id, a tag by name [0.10ms]

src/canvas/mesh/layout.test.ts:
(pass) a small mesh keeps the approved arrangement: tags down the left, hosts two to a row [1.97ms]
(pass) the layout is deterministic and does not depend on input order [3.85ms]
(pass) no two cards overlap, and every card lies inside the graph [7.05ms]
(pass) the sheet is wider than tall, roughly 16:10 [2.22ms]
(pass) a pinned node stays where it was put and the others do not move [2.65ms]
(pass) a pin beyond the sheet grows the graph [0.33ms]
(pass) a host's other tags do not move it; a tag nobody carries still has its node [0.21ms]
(pass) 1,000 nodes lay out in a few milliseconds [8.99ms]

src/canvas/layout/stops.test.ts:
(pass) a view that fits the viewport has one stop, centred [0.43ms]
(pass) a wide view has one stop per column and the last stop ends at the right edge [0.28ms]
(pass) a view taller than the viewport is scaled down so it fits [0.04ms]
(pass) nearestStop picks the stop whose centre is closest [0.22ms]
(pass) a big graph opens fitted whole, in one stop, and its canvas is free [0.22ms]
(pass) a small graph keeps one stop per node column [0.09ms]
(pass) on a narrow screen a big graph does not shrink past where its names can be read: it starts at the top left [0.14ms]
(pass) centred stops (a phone's strip) rest every column mid-screen, the first and last included [0.18ms]

src/canvas/layout/grid.test.ts:
(pass) split right in a stacked column makes a group: the window's column halves, its neighbours span both halves [1.55ms]
(pass) closing the new half gives the layout back exactly, in the model [1.35ms]
(pass) closing the window it came from makes the new half take its band, and the layout is one column again [0.48ms]
(pass) split right of a spanning window halves its span inside the existing columns, with the footprint unchanged [0.36ms]
(pass) split down in a group divides only the window's band: the partner window grows to keep its height [0.71ms]
(pass) closing the window split down gives its band back to the window above and to the partner [0.54ms]
(pass) a window split down in a plain column stacks under it and moves the windows below down [0.19ms]
(pass) new window right opens a full-size column after the whole group, never inside it [0.34ms]
(pass) runs: adjacent columns linked by a spanning window form one group, the rest stay plain [0.17ms]
(pass) spans are clamped to the columns that exist and a stale row is re-placed, never overlapped [0.17ms]
(pass) random sequences of split right, split down, new window right and close never break the grid [46.11ms]
(pass) closing every window of a group returns the view to nothing, with no problem on the way [0.52ms]
(pass) a full-width band under a group moves nothing and extends the group by one band [0.21ms]
(pass) a band inserted between two bands of one column grows the windows beside it and moves the rest [0.14ms]

src/canvas/layout/geometry.test.ts:
(pass) a dropped view pushes the one it lands on along the axis of least overlap, never itself [0.56ms]
(pass) a chain of neighbours is pushed in turn [0.11ms]
(pass) snapping rounds to whole cells [0.05ms]
(pass) reach follows grants through tags and keeps the relay [0.29ms]
(pass) phone edge to edge: a lone window is the whole area, in a strip it leaves the gap and PEEK px of each neighbour; full width is the whole area always [0.32ms]
(pass) comfortable phones: a column in a strip leaves PEEK px of each neighbour; a lone one keeps the screen less the margins [0.04ms]
(pass) a desktop column is the same alone and in a strip [0.02ms]

src/canvas/sessions/live-inventory.test.ts:
(pass) a host snapshot replaces cached session rows and keeps only live shims [2.40ms]
(pass) an unavailable agent hides remembered rows without ending them, then restores verified sessions [2.79ms]
(pass) inventory remembers a remote session and refuses a cross-host attach [0.58ms]
(pass) superseded status snapshots release records for sessions this device never opened [2.78ms]
(pass) superseding a sidecar preserves status for a window opened on this device [0.27ms]
(pass) a census predating a new shell does not permanently retire its confirmed live ID [0.16ms]
(pass) a final Close before the first positive census never revives a new ID [0.11ms]
(pass) a later absence retires a new ID after its first positive census [0.11ms]
(pass) another host's census cannot clear a new shell's census fence [0.10ms]
(pass) another host's close cannot clear a new shell's census fence [0.03ms]

src/canvas/sessions/details-live.test.ts:
(pass) a refused host facts action stops its recurring timer [0.87ms]
(pass) a detected operating system supplies the live popover mark [1.03ms]

src/canvas/sessions/live.test.ts:
(pass) the toolbar sessions seam exposes admitted host state and routes by identity [0.91ms]
(pass) an enrolled host opens by UUID and splits keep that authority [0.12ms]
(pass) unknown and ambiguous labels never open an embedded shell [0.05ms]
(pass) removed hosts disappear from inventory and cannot route a new shell [0.09ms]
(pass) an authoritative host snapshot replaces admission with one notification [0.14ms]
(pass) the embedded inventory identity still opens locally beside an equally named remote [0.06ms]

src/canvas/sessions/hosts.test.ts:
(pass) fresh storage lists an offline host added by another browser [1.34ms]
(pass) every welcome reconciles without duplicate subscriptions or hosts [0.32ms]
(pass) a removal in another browser withdraws the host [0.21ms]
(pass) a malformed page cannot partially replace the authoritative inventory [0.30ms]
(pass) a socket-authority refusal withdraws previously admitted hosts [0.49ms]
(pass) an invalidated read cannot enqueue an unsent call while the socket is down [0.75ms]

src/canvas/sessions/gone-review.test.ts:
(pass) selecting a known gone session keeps its final exited state [0.49ms]
(pass) a known retired status survives repeated selection and generic ended answers [0.17ms]

src/canvas/sessions/hosts-scale-review.test.ts:
(pass) a fresh browser discovers 10000 admitted offline hosts from complete bounded pages [13.58ms]
(pass) a fresh browser discovers 10001 admitted offline hosts from complete bounded pages [15.37ms]

src/canvas/sessions/open-refusal.test.ts:
(pass) memory refusal retains the reason and current counters [1.41ms]
(pass) legacy refusals still work and malformed counters never reach the message [0.55ms]
(pass) product copy names the host and counters and never renders untrusted server text [0.80ms]
(pass) oversized refusal JSON is ignored before parsing [0.19ms]

src/canvas/model/document.test.ts:
(pass) a document holds references and layout, never content [0.51ms]
(pass) a document survives JSON and rebuilds the same columns [0.89ms]
(pass) a target that no longer exists is dropped, and an emptied column with it [0.14ms]
(pass) parseDocument rejects anything that is not a document of this format [0.34ms]
(pass) remote affinity survives reload and invalid UUIDs cannot become local references [0.20ms]
(pass) a version 1 document from before D212 loads, with its split pair and a full-size window [0.34ms]
(pass) a grouped view saves its spans and bands and loads back to the same grid (D212) [0.32ms]
(pass) a plain view is saved without spans or bands, exactly as before D212 [0.06ms]

src/canvas/addhost/wizard.breakit2.test.ts:
(pass) breakit2 an explicit port on a listed host survives chip resolution [0.33ms]
(pass) breakit2 malformed bracketed IPv6 waits for correction [0.08ms]
(pass) listed host plus port retains its saved user in the serialized destination [0.09ms]
(pass) review listed inventory name plus port retains its resolved address [0.19ms]

src/canvas/addhost/real.test.ts:
(pass) parsing the server's data > a discovery row keeps only known fields and valid ids [0.20ms]
(pass) parsing the server's data > the server key needs its public key and fingerprint [0.05ms]
(pass) parsing the server's data > an install command needs a lifetime [0.06ms]
(pass) a server that lacks an endpoint > serving the web app (200, HTML) for an unknown path is 'not available' [0.90ms]
(pass) a server that lacks an endpoint > 404 discovery is an empty list; 500 discovery is an error to show [0.16ms]
(pass) a server that lacks an endpoint > private sign-in stays local until a target-bound socket start [0.74ms]
(pass) a server that lacks an endpoint > a wrong target consumes the reference without sending private input [0.17ms]
(pass) a server that lacks an endpoint > a local reference cannot change SSH address while keeping the target id [0.12ms]
(pass) a server that lacks an endpoint > closing before open discards queued sign-in even if a late open fires [0.07ms]
(pass) a server that lacks an endpoint > pre-open commands stay bounded and events after close cannot revive a run [0.24ms]
(pass) a server that lacks an endpoint > trust waits for the exact acknowledgement, and ignores another target [0.39ms]

src/canvas/addhost/authority.on-demand.test.ts:
(pass) CA wrapping matches the contract's HKDF domain and separates generations [1.01ms]

src/canvas/addhost/model.test.ts:
(pass) stagesOf > a host with no event is waiting everywhere [0.37ms]
(pass) stagesOf > check before sign-in is detecting how to sign in [0.22ms]
(pass) stagesOf > the sign-in report finishes detect and starts the system check [0.12ms]
(pass) stagesOf > install, facts and connect map to install, enrol and first session [0.18ms]
(pass) stagesOf > an auth failure before sign-in fails detect and says it in plain words, not the server's [0.25ms]
(pass) stagesOf > an unsupported host fails the system check, after sign-in [0.09ms]
(pass) stagesOf > an install failure fails the install stage and keeps the earlier ones done [0.06ms]
(pass) stagesOf > a new attempt starts over and forgets the old sign-in [0.10ms]
(pass) authLabel > names the method and a trusted network provider only [0.05ms]
(pass) guideFor > installation failures never claim that incomplete cleanup succeeded [0.17ms]
(pass) guideFor > each failure kind names its fix [0.12ms]
(pass) guideFor > mesh-policy words say possible, not certain [0.03ms]
(pass) parseTarget > reads user, host and port [0.10ms]
(pass) parseTarget > refuses what cannot name a host [0.04ms]
(pass) parseSshConfig > reads aliases with HostName, User and Port, skipping wildcards and Match [0.55ms]
(pass) parseSshConfig > recognises config text [0.07ms]
(pass) parseSshConfig > a hostname that is an option is dropped [0.06ms]
(pass) plain words > an unknown or missing failure gets the generic sentence, never the server's text [0.10ms]
(pass) plain words > no headline carries an arrow, an id or an API noun [0.14ms]
(pass) only a completed canonical host identity becomes terminal authority [0.11ms]
(pass) parseTarget > accepts user@host, host, user@host:port, IPv4 and bracketed IPv6 with an optional port [0.11ms]
(pass) parseTarget > rejects partial and malformed tokens, so they wait or show the hint [0.06ms]
(pass) matchListed > a name that is exactly one host's id or address names that host [0.07ms]
(pass) matchListed > a name that is also the start of another host's name is named but still prefixed [0.06ms]
(pass) matchListed > a partial name that starts several hosts names none and waits [0.04ms]
(pass) matchListed > a new name that starts no host is neither named nor waiting [0.03ms]
(pass) install diagnostics name the failed step and public host error [0.09ms]
(pass) missing payload tells the operator the architecture and expected server path [0.07ms]
(pass) an already added host says so and offers opening its existing terminal [0.05ms]
(pass) release payload verification names the architecture step and plain reason [0.03ms]
(pass) leftovers pause (#169) > a check event with leftovers pauses the running attempt; the next event clears it [0.10ms]
(pass) leftovers pause (#169) > a pause without leftovers offers nothing to start fresh [0.23ms]

src/canvas/addhost/wizard.test.ts:
(pass) a saved-key prompt completing after close never starts an SSH attempt [0.61ms]
(pass) fresh CA requires setup before any SSH attempt and preserves root consent [0.42ms]
(pass) ready CA begins the requested installation mode without another prompt [0.17ms]
(pass) closing during CA confirmation never starts an SSH attempt [0.36ms]
(pass) a typed root login requires explicit consent before any installation [0.18ms]

../../packages/ui/src/spring.test.ts:
(pass) a missed frame does not stretch a settled spring [1.06ms]
(pass) motion follows elapsed time across frame rates and damping regimes [0.98ms]

chunk-classes.test.ts:
(pass) the first screen is critical, the canvas product module and what only it uses are deferred [1.32ms]
(pass) a chunk that both sides use stays critical [0.28ms]
(pass) code only an action loads is on demand, even when the lazy canvas is what loads it [0.23ms]
(pass) post-terminal host inventory entry and its shared canvas imports stay deferred [0.17ms]

test/recovery-ui.test.ts:
(pass) compiled recovery UI mode off obeys its URL boundary [5.63ms]
(pass) compiled recovery UI mode preview obeys its URL boundary [2.66ms]
(pass) compiled recovery UI mode 1 obeys its URL boundary [2.28ms]

test/recovery-crypto.test.ts:
(pass) HKDF siblings match independent implementation and bind unwrap to domain, account, kind and version [66.36ms]
(pass) 100 repeated wrapping operations generate independent salts and nonces [20.26ms]

test/recovery-rotation.test.ts:
(pass) signed-in rotation sends only a local envelope and verifier after acknowledgement [8.85ms]
(pass) abandoned word acknowledgement uploads nothing [2.30ms]
(pass) settled acknowledgement cannot upload later (dismissed) [2.26ms]
(pass) settled acknowledgement cannot upload later (no acknowledgement) [1.88ms]

test/recovery-wait.test.ts:
(pass) server remaining wait 0s is accepted through the capability policy maximum [2.48ms]
(pass) server remaining wait 86400s is accepted through the capability policy maximum [1.06ms]
(pass) server remaining wait 90000s is accepted through the capability policy maximum [1.10ms]
(pass) server remaining wait 172800s is accepted through the capability policy maximum [0.99ms]
(pass) malformed or excessive remaining wait -1 is denied [2.04ms]
(pass) malformed or excessive remaining wait 0.5 is denied [1.99ms]
(pass) malformed or excessive remaining wait 172801 is denied [1.19ms]
(pass) malformed or excessive remaining wait 9007199254740992 is denied [1.00ms]
(pass) malformed or excessive remaining wait 90000 is denied [1.21ms]

 191 pass
 0 fail
 11387 expect() calls
Ran 191 tests across 31 files. [451.00ms]
$ bun run build.ts
built chunk-rq1pwb22.js, chunk-536gnh2w.js, chunk-aeaeyzke.js, chunk-awacp8kx.js, chunk-7s25zb9p.js, chunk-zfyssrc8.js, chunk-3y40yxzy.js, chunk-axf07vdg.js, chunk-pt834qxr.js, chunk-gxvqf3b8.js, chunk-9hhb0wj2.js, chunk-p576pdvj.js, chunk-asa2hdrj.js, chunk-e3hk4vwa.js, chunk-b57h38d2.js, chunk-fnsnjw70.js, chunk-mdmywjzx.js, main.js, chunk-4838ym0j.js, chunk-qret526c.js, chunk-2xhazfyb.js, chunk-fwxf65yx.js, chunk-jxcphf31.js, chunk-wh5e7b0v.js, chunk-rpysc9eh.js, chunk-c7k2fv94.js, chunk-yeewdg15.js, chunk-9nhxhwxf.js, chunk-gywzbyv1.js, chunk-nj4myags.js, chunk-vkqwg90r.js, chunk-7dhyw9q3.js, chunk-pwvj9ttv.js, chunk-bbe7v8ze.js, chunk-48t9m5yz.js, chunk-j4qvhpsp.js, chunk-ckq7yz0j.js, chunk-k1g8n3wz.js, chunk-xfxmh4fk.js, chunk-673bz3hx.js, chunk-x13phwds.js, chunk-q1yapcwf.js, chunk-rqrpwbr8.js, chunk-8cws9p9g.js, chunk-wx0dadkf.js, chunk-gwccb17v.js, chunk-mfrvxq80.js, chunk-axbkkqp1.js, chunk-65ppmgaq.js, chunk-9xd3g65e.js, chunk-28rbcdd5.js, chunk-61xwpgvs.js, chunk-acwg7z73.js, backdrop.worker.js, faulty-terminal.worker.js, chunk-jymww87a.js, chunk-de5cx0n1.js, chunk-hapgzkqk.js, chunk-f2r0hhqc.js, chunk-yncgqw69.js
critical chunk-de5cx0n1.js: identity=60 gzip=60 brotli=60 bytes
critical chunk-28rbcdd5.js: identity=39 gzip=39 brotli=39 bytes
onDemand chunk-536gnh2w.js: identity=191 gzip=168 brotli=128 bytes
critical chunk-b57h38d2.js: identity=2519 gzip=1008 brotli=877 bytes
onDemand chunk-9hhb0wj2.js: identity=2420 gzip=1195 brotli=1076 bytes
onDemand chunk-48t9m5yz.js: identity=1026 gzip=623 brotli=499 bytes
onDemand chunk-acwg7z73.js: identity=51051 gzip=15945 brotli=14183 bytes
critical faulty-terminal.worker.js: identity=1086 gzip=559 brotli=480 bytes
critical backdrop.worker.js: identity=243 gzip=212 brotli=158 bytes
onDemand chunk-pwvj9ttv.js: identity=14543 gzip=5420 brotli=4859 bytes
onDemand chunk-wh5e7b0v.js: identity=2557 gzip=1180 brotli=1009 bytes
critical chunk-fnsnjw70.js: identity=386 gzip=238 brotli=196 bytes
onDemand chunk-nj4myags.js: identity=5359 gzip=2579 brotli=2309 bytes
onDemand chunk-asa2hdrj.js: identity=2173 gzip=1055 brotli=890 bytes
critical chunk-gywzbyv1.js: identity=8123 gzip=2683 brotli=2380 bytes
onDemand chunk-rpysc9eh.js: identity=4575 gzip=2013 brotli=1798 bytes
onDemand chunk-xfxmh4fk.js: identity=6772 gzip=3178 brotli=2889 bytes
critical chunk-axbkkqp1.js: identity=90 gzip=90 brotli=78 bytes
onDemand chunk-j4qvhpsp.js: identity=6195 gzip=2788 brotli=2520 bytes
critical chunk-4838ym0j.js: identity=5443 gzip=2606 brotli=2377 bytes
onDemand chunk-wx0dadkf.js: identity=11529 gzip=4655 brotli=4254 bytes
onDemand chunk-ckq7yz0j.js: identity=2824 gzip=1384 brotli=1196 bytes
onDemand chunk-7dhyw9q3.js: identity=7662 gzip=3397 brotli=2979 bytes
deferred chunk-9nhxhwxf.js: identity=98536 gzip=33522 brotli=29572 bytes
critical chunk-f2r0hhqc.js: identity=128 gzip=109 brotli=111 bytes
onDemand chunk-axf07vdg.js: identity=3891 gzip=1737 brotli=1516 bytes
critical chunk-9xd3g65e.js: identity=39 gzip=39 brotli=39 bytes
onDemand chunk-rqrpwbr8.js: identity=1649 gzip=776 brotli=676 bytes
critical chunk-65ppmgaq.js: identity=711020 gzip=205483 brotli=166751 bytes
critical chunk-mdmywjzx.js: identity=4646 gzip=1906 brotli=1662 bytes
deferred chunk-3y40yxzy.js: identity=43046 gzip=16602 brotli=14652 bytes
onDemand chunk-vkqwg90r.js: identity=4640 gzip=1932 brotli=1702 bytes
critical chunk-7s25zb9p.js: identity=590 gzip=327 brotli=303 bytes
critical chunk-awacp8kx.js: identity=23766 gzip=7705 brotli=6892 bytes
onDemand chunk-yncgqw69.js: identity=1063 gzip=653 brotli=523 bytes
onDemand chunk-673bz3hx.js: identity=31922 gzip=12263 brotli=11015 bytes
critical chunk-qret526c.js: identity=1104 gzip=666 brotli=604 bytes
onDemand chunk-8cws9p9g.js: identity=540 gzip=355 brotli=319 bytes
critical chunk-jxcphf31.js: identity=13164 gzip=6342 brotli=5249 bytes
onDemand chunk-bbe7v8ze.js: identity=10693 gzip=4127 brotli=3764 bytes
critical chunk-pt834qxr.js: identity=707 gzip=371 brotli=306 bytes
onDemand chunk-c7k2fv94.js: identity=1616 gzip=862 brotli=737 bytes
critical chunk-aeaeyzke.js: identity=16025 gzip=6220 brotli=5542 bytes
onDemand chunk-q1yapcwf.js: identity=1170 gzip=709 brotli=628 bytes
critical chunk-jymww87a.js: identity=122 gzip=118 brotli=106 bytes
critical chunk-gxvqf3b8.js: identity=88 gzip=88 brotli=76 bytes
critical chunk-hapgzkqk.js: identity=9885 gzip=4048 brotli=3485 bytes
critical main.js: identity=77929 gzip=26494 brotli=23248 bytes
deferred chunk-yeewdg15.js: identity=1541 gzip=791 brotli=713 bytes
critical chunk-61xwpgvs.js: identity=49 gzip=49 brotli=49 bytes
onDemand chunk-rq1pwb22.js: identity=228 gzip=181 brotli=165 bytes
onDemand chunk-zfyssrc8.js: identity=6357 gzip=2370 brotli=2111 bytes
onDemand chunk-x13phwds.js: identity=2462 gzip=1109 brotli=930 bytes
critical chunk-mfrvxq80.js: identity=44258 gzip=15210 brotli=13631 bytes
critical chunk-gwccb17v.js: identity=199 gzip=162 brotli=138 bytes
critical chunk-2xhazfyb.js: identity=8377 gzip=3574 brotli=3184 bytes
critical chunk-e3hk4vwa.js: identity=17627 gzip=6249 brotli=5563 bytes
critical chunk-fwxf65yx.js: identity=14345 gzip=5825 brotli=5143 bytes
onDemand chunk-p576pdvj.js: identity=6265 gzip=2100 brotli=1863 bytes
critical chunk-k1g8n3wz.js: identity=162 gzip=150 brotli=124 bytes
critical inline scripts: identity=787 gzip=447 brotli=318 bytes
JavaScript transfer, critical: identity=963006 gzip=299077/307200 brotli=249169/256000 bytes
JavaScript transfer, deferred: identity=143123 gzip=50915/51200 brotli=44937/45056 bytes
JavaScript transfer, onDemand: identity=191373 gzip=74754/20480 brotli=66538/18432 bytes
JavaScript transfer, onDemand largest chunk chunk-acwg7z73.js: gzip=15945/20480 brotli=14183/18432 bytes (class total gzip=74754 brotli=66538, not limited)
fonts/monaspace-neon/italic.latin.woff2: identity=44324 gzip=44324 brotli=44324 bytes
fonts/monaspace-neon/roman.latin.woff2: identity=40016 gzip=40016 brotli=40016 bytes
fonts/jetbrains-mono/italic.latin.woff2: identity=36316 gzip=36316 brotli=36316 bytes
fonts/jetbrains-mono/roman.latin.woff2: identity=34068 gzip=34068 brotli=34068 bytes
fonts/source-code-pro/italic.latin.woff2: identity=23612 gzip=23612 brotli=23612 bytes
fonts/source-code-pro/roman.latin.woff2: identity=22872 gzip=22872 brotli=22872 bytes
fonts/geist-mono/italic.latin.woff2: identity=21380 gzip=21380 brotli=21380 bytes
fonts/geist-mono/roman.latin.woff2: identity=19984 gzip=19984 brotli=19981 bytes
fonts/ibm-plex-mono/italic.latin.woff2: identity=22296 gzip=22296 brotli=22296 bytes
fonts/ibm-plex-mono/roman.latin.woff2: identity=19048 gzip=19048 brotli=19047 bytes
fonts/cascadia-code/italic.latin.woff2: identity=44404 gzip=44404 brotli=44404 bytes
fonts/cascadia-code/roman.latin.woff2: identity=40604 gzip=40604 brotli=40604 bytes
fonts/maple-mono-nf/italic.latin.woff2: identity=53444 gzip=53444 brotli=53444 bytes
fonts/maple-mono-nf/roman.latin.woff2: identity=46432 gzip=46432 brotli=46432 bytes
fonts/nerd-symbols.woff2: identity=223748 gzip=223748 brotli=223748 bytes
fonts/fira-code/roman.latin.woff2: identity=36756 gzip=36756 brotli=36756 bytes
fonts/commit-mono/italic-400.latin.woff2: identity=18716 gzip=18716 brotli=18716 bytes
fonts/commit-mono/italic-700.latin.woff2: identity=18352 gzip=18352 brotli=18352 bytes
fonts/commit-mono/roman-400.latin.woff2: identity=17484 gzip=17484 brotli=17484 bytes
fonts/commit-mono/roman-700.latin.woff2: identity=17260 gzip=17260 brotli=17260 bytes
Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes

==> Rust stream oracle (for the differential test)

==> TypeScript protocol tests
bun test v1.4.2 (744846f84)

src/mesh-review-revocation.test.ts:
(pass) review forbidden event cancels pending snapshot publication [2.72ms]
(pass) subscription forbidden ends delivery before a late refresh rejection [1.58ms]
(pass) subscription not found ends delivery before a late refresh rejection [1.17ms]
(pass) subscription invalid input ends delivery before a late refresh rejection [1.16ms]
(pass) subscription mesh unavailable ends delivery before a late refresh rejection [1.13ms]
(pass) synchronous subscription refusal releases the transport exactly once [0.28ms]

src/codec.test.ts:
(pass) wire protocol golden vectors > encodes and decodes each frame exactly as the shared manifest describes [9.12ms]
(pass) wire protocol golden vectors > returns borrowed payload views and writes into reusable buffers [0.29ms]
(pass) wire protocol golden vectors > decodes muxed messages split across WebSocket messages [1.05ms]
(pass) wire protocol golden vectors > rejects oversized, non-canonical, unknown, and malformed frame bytes [0.24ms]
(pass) split mux header preserves trailing Close [0.25ms]

src/mesh-review-paged-error.test.ts:
(pass) review earlier snapshot continuation failure cannot replace a newer complete refresh [2.95ms]
(pass) review earlier snapshot continuation cannot overwrite a delivered revision [3.02ms]
(pass) a newer paged event owns publication before an earlier refresh resumes [2.70ms]

src/mesh-review-refresh.test.ts:
(pass) review superseded refresh failure cannot replace authoritative resync [1.49ms]
(pass) superseded failure preserves a newer pending refresh [2.58ms]

src/stream.test.ts:
stream differential: 134 streams, 11439 schedules, zero divergences
(pass) Rust and TypeScript preserve every frame at all boundaries and random multi-splits [2967.39ms]
(pass) maximum frame size and fragmented oversized prefix obey the allocation boundary [10.72ms]

src/mesh.test.ts:
(pass) Mesh actions map to their typed action IDs and JSON inputs [2.51ms]
(pass) Mesh watch coalesces change bursts and never publishes an older revision [4.31ms]
(pass) Mesh watch forwards server errors and stops delivering after unsubscribe [0.17ms]
(pass) Mesh enrollment carries an explicit authenticated host binding [0.29ms]

src/mesh-review-continuation.test.ts:
(pass) review continuation stops after stop [1.72ms]
(pass) review continuation stops after forbidden [1.25ms]
(pass) review continuation stops after superseded [1.22ms]

src/mesh-pagination.test.ts:
(pass) list assembles bounded pages using the same filter [0.39ms]
(pass) a changed revision discards earlier pages before assembling its restart [0.18ms]
(pass) malformed continuation is refused: {"revision":1,"offset":0} [0.30ms]
(pass) malformed continuation is refused: {"revision":2,"offset":1} [0.02ms]
(pass) malformed continuation is refused: {"revision":1,"offset":2} [0.01ms]
(pass) watch never publishes a partial page; withdrawn=false [1.48ms]
(pass) watch never publishes a partial page; withdrawn=true [1.17ms]
(pass) a superseding equal-revision resync wins over pending page assembly [1.58ms]

src/mesh-review-resync.test.ts:
(pass) review watch applies same-revision authoritative resync [0.25ms]
(pass) authoritative resync keeps priority over an equal-revision pending list [1.62ms]

src/mesh-vectors.test.ts:
(pass) every shared Mesh action vector passes through the typed client unchanged [1.86ms]
(pass) shared Mesh event vectors drive the typed watch adapter [5.59ms]

 37 pass
 0 fail
 34463 expect() calls
Ran 37 tests across 10 files. [3.05s]
Final TypeScript/compiler/build/transfer gate on28bbc0b6, exit0, output verbatim. Fast dispatcher stops after the unchanged native size failure, so ts_verify_fast was run separately. SHA256 367261b55bf2c4ff6b4ef27d68ee353ee570a21d5e2103dbe9931ba043aab484. Required separate bun test src:199pass0fail; proof guards12pass0fail. Functional durations are not performance evidence. ```text ==> Vendored Ghostty artifact checksums dist/ghostty-web.js: OK dist/ghostty-vt.wasm: OK dist/index.d.ts: OK ==> TypeScript protocol compiler ==> Tracer compiler, precompression and bundle transfer budget bun install v1.4.2 (744846f84) Checked 38 installs across 69 packages (no changes) [24.00ms] $ bun x tsc --project tsconfig.json bun test v1.4.2 (744846f84) precompress.test.ts: (pass) text sidecars round-trip deterministically; compressed formats remain identity [26.19ms] browser-build.test.ts: (pass) the browser renderer has no unresolved Vite Node-file shim request [19.06ms] src/perf-detector.test.ts: (pass) FrameDetector > estimates the refresh from the median and snaps it [1.06ms] (pass) FrameDetector > nothing is a drop before the rate is known [0.08ms] (pass) FrameDetector > a drop is over 1.5 refresh intervals, a freeze over 100 ms [0.22ms] (pass) FrameDetector > the refresh only goes up: a slow page is not a slower display [0.17ms] (pass) FrameDetector > the first frame after a pause is not an interval [0.12ms] (pass) FrameDetector > fps, p95 and window read the ring [0.24ms] (pass) FrameDetector > a throttled page (one frame a second) is neither a drop nor a freeze, and neither is its return [0.40ms] (pass) FrameDetector > a lone long stall is still a freeze and is not a throttled run [0.11ms] src/canvas/recency.test.ts: (pass) touch moves an item to the front and never duplicates it [0.34ms] (pass) repeating the front item changes nothing [0.06ms] (pass) the list is capped, so the oldest items fall off [0.07ms] (pass) top skips items that are no longer live, without losing them [0.11ms] (pass) recentRows: five used windows in reverse order of use, from 54 windows [0.21ms] (pass) recentRows: a view with three windows and no use shows them in order [0.04ms] (pass) recentRows: used windows lead, the rest fill up to five in window order [0.08ms] src/canvas/status.test.ts: (pass) a lost server connection is an error toast, never a success tick [0.50ms] (pass) routine connection states stay out of the toast [0.09ms] src/canvas/toolbar/palette-actions.test.ts: (pass) a deferred split:right selection retains its original window [0.50ms] (pass) a deferred new:below selection retains its original window [0.05ms] (pass) a deferred close selection retains its original window [0.03ms] src/canvas/windows/details-facts.test.ts: (pass) host facts become plain-language details rows [0.96ms] (pass) unknown optional host facts stay absent instead of appearing as placeholders [0.64ms] (pass) extended info off: the machine tab shows only the essentials, ungrouped, and there is no More section [0.63ms] (pass) extended info on: every fact sits under System, Resources or Access [0.31ms] (pass) the header follows the machine's own facts, not the platform the host list guessed [0.19ms] (pass) before facts arrive the host's platform names the header [0.06ms] (pass) a reported system with no platform mark still names the header and shows no mark [0.09ms] src/canvas/mesh/protocol.test.ts: (pass) the server's own list becomes nodes, tags and grants, by name [0.79ms] (pass) without `access` (today's server) the person may view and may not edit [0.44ms] (pass) fields the server does not send are absent, never invented [0.28ms] (pass) anything that is not a list is refused, whole [6.14ms] (pass) a node's own tag list and the tag table agree even when a server sends only one [0.23ms] (pass) the subscription's events: a pushed list, a revision that invalidates, and the end of the subscription [0.39ms] (pass) answers carry the new revision, and a create the new arrow's id [0.10ms] (pass) endpoints go out as the server writes them: a node by id, a tag by name [0.10ms] src/canvas/mesh/layout.test.ts: (pass) a small mesh keeps the approved arrangement: tags down the left, hosts two to a row [1.97ms] (pass) the layout is deterministic and does not depend on input order [3.85ms] (pass) no two cards overlap, and every card lies inside the graph [7.05ms] (pass) the sheet is wider than tall, roughly 16:10 [2.22ms] (pass) a pinned node stays where it was put and the others do not move [2.65ms] (pass) a pin beyond the sheet grows the graph [0.33ms] (pass) a host's other tags do not move it; a tag nobody carries still has its node [0.21ms] (pass) 1,000 nodes lay out in a few milliseconds [8.99ms] src/canvas/layout/stops.test.ts: (pass) a view that fits the viewport has one stop, centred [0.43ms] (pass) a wide view has one stop per column and the last stop ends at the right edge [0.28ms] (pass) a view taller than the viewport is scaled down so it fits [0.04ms] (pass) nearestStop picks the stop whose centre is closest [0.22ms] (pass) a big graph opens fitted whole, in one stop, and its canvas is free [0.22ms] (pass) a small graph keeps one stop per node column [0.09ms] (pass) on a narrow screen a big graph does not shrink past where its names can be read: it starts at the top left [0.14ms] (pass) centred stops (a phone's strip) rest every column mid-screen, the first and last included [0.18ms] src/canvas/layout/grid.test.ts: (pass) split right in a stacked column makes a group: the window's column halves, its neighbours span both halves [1.55ms] (pass) closing the new half gives the layout back exactly, in the model [1.35ms] (pass) closing the window it came from makes the new half take its band, and the layout is one column again [0.48ms] (pass) split right of a spanning window halves its span inside the existing columns, with the footprint unchanged [0.36ms] (pass) split down in a group divides only the window's band: the partner window grows to keep its height [0.71ms] (pass) closing the window split down gives its band back to the window above and to the partner [0.54ms] (pass) a window split down in a plain column stacks under it and moves the windows below down [0.19ms] (pass) new window right opens a full-size column after the whole group, never inside it [0.34ms] (pass) runs: adjacent columns linked by a spanning window form one group, the rest stay plain [0.17ms] (pass) spans are clamped to the columns that exist and a stale row is re-placed, never overlapped [0.17ms] (pass) random sequences of split right, split down, new window right and close never break the grid [46.11ms] (pass) closing every window of a group returns the view to nothing, with no problem on the way [0.52ms] (pass) a full-width band under a group moves nothing and extends the group by one band [0.21ms] (pass) a band inserted between two bands of one column grows the windows beside it and moves the rest [0.14ms] src/canvas/layout/geometry.test.ts: (pass) a dropped view pushes the one it lands on along the axis of least overlap, never itself [0.56ms] (pass) a chain of neighbours is pushed in turn [0.11ms] (pass) snapping rounds to whole cells [0.05ms] (pass) reach follows grants through tags and keeps the relay [0.29ms] (pass) phone edge to edge: a lone window is the whole area, in a strip it leaves the gap and PEEK px of each neighbour; full width is the whole area always [0.32ms] (pass) comfortable phones: a column in a strip leaves PEEK px of each neighbour; a lone one keeps the screen less the margins [0.04ms] (pass) a desktop column is the same alone and in a strip [0.02ms] src/canvas/sessions/live-inventory.test.ts: (pass) a host snapshot replaces cached session rows and keeps only live shims [2.40ms] (pass) an unavailable agent hides remembered rows without ending them, then restores verified sessions [2.79ms] (pass) inventory remembers a remote session and refuses a cross-host attach [0.58ms] (pass) superseded status snapshots release records for sessions this device never opened [2.78ms] (pass) superseding a sidecar preserves status for a window opened on this device [0.27ms] (pass) a census predating a new shell does not permanently retire its confirmed live ID [0.16ms] (pass) a final Close before the first positive census never revives a new ID [0.11ms] (pass) a later absence retires a new ID after its first positive census [0.11ms] (pass) another host's census cannot clear a new shell's census fence [0.10ms] (pass) another host's close cannot clear a new shell's census fence [0.03ms] src/canvas/sessions/details-live.test.ts: (pass) a refused host facts action stops its recurring timer [0.87ms] (pass) a detected operating system supplies the live popover mark [1.03ms] src/canvas/sessions/live.test.ts: (pass) the toolbar sessions seam exposes admitted host state and routes by identity [0.91ms] (pass) an enrolled host opens by UUID and splits keep that authority [0.12ms] (pass) unknown and ambiguous labels never open an embedded shell [0.05ms] (pass) removed hosts disappear from inventory and cannot route a new shell [0.09ms] (pass) an authoritative host snapshot replaces admission with one notification [0.14ms] (pass) the embedded inventory identity still opens locally beside an equally named remote [0.06ms] src/canvas/sessions/hosts.test.ts: (pass) fresh storage lists an offline host added by another browser [1.34ms] (pass) every welcome reconciles without duplicate subscriptions or hosts [0.32ms] (pass) a removal in another browser withdraws the host [0.21ms] (pass) a malformed page cannot partially replace the authoritative inventory [0.30ms] (pass) a socket-authority refusal withdraws previously admitted hosts [0.49ms] (pass) an invalidated read cannot enqueue an unsent call while the socket is down [0.75ms] src/canvas/sessions/gone-review.test.ts: (pass) selecting a known gone session keeps its final exited state [0.49ms] (pass) a known retired status survives repeated selection and generic ended answers [0.17ms] src/canvas/sessions/hosts-scale-review.test.ts: (pass) a fresh browser discovers 10000 admitted offline hosts from complete bounded pages [13.58ms] (pass) a fresh browser discovers 10001 admitted offline hosts from complete bounded pages [15.37ms] src/canvas/sessions/open-refusal.test.ts: (pass) memory refusal retains the reason and current counters [1.41ms] (pass) legacy refusals still work and malformed counters never reach the message [0.55ms] (pass) product copy names the host and counters and never renders untrusted server text [0.80ms] (pass) oversized refusal JSON is ignored before parsing [0.19ms] src/canvas/model/document.test.ts: (pass) a document holds references and layout, never content [0.51ms] (pass) a document survives JSON and rebuilds the same columns [0.89ms] (pass) a target that no longer exists is dropped, and an emptied column with it [0.14ms] (pass) parseDocument rejects anything that is not a document of this format [0.34ms] (pass) remote affinity survives reload and invalid UUIDs cannot become local references [0.20ms] (pass) a version 1 document from before D212 loads, with its split pair and a full-size window [0.34ms] (pass) a grouped view saves its spans and bands and loads back to the same grid (D212) [0.32ms] (pass) a plain view is saved without spans or bands, exactly as before D212 [0.06ms] src/canvas/addhost/wizard.breakit2.test.ts: (pass) breakit2 an explicit port on a listed host survives chip resolution [0.33ms] (pass) breakit2 malformed bracketed IPv6 waits for correction [0.08ms] (pass) listed host plus port retains its saved user in the serialized destination [0.09ms] (pass) review listed inventory name plus port retains its resolved address [0.19ms] src/canvas/addhost/real.test.ts: (pass) parsing the server's data > a discovery row keeps only known fields and valid ids [0.20ms] (pass) parsing the server's data > the server key needs its public key and fingerprint [0.05ms] (pass) parsing the server's data > an install command needs a lifetime [0.06ms] (pass) a server that lacks an endpoint > serving the web app (200, HTML) for an unknown path is 'not available' [0.90ms] (pass) a server that lacks an endpoint > 404 discovery is an empty list; 500 discovery is an error to show [0.16ms] (pass) a server that lacks an endpoint > private sign-in stays local until a target-bound socket start [0.74ms] (pass) a server that lacks an endpoint > a wrong target consumes the reference without sending private input [0.17ms] (pass) a server that lacks an endpoint > a local reference cannot change SSH address while keeping the target id [0.12ms] (pass) a server that lacks an endpoint > closing before open discards queued sign-in even if a late open fires [0.07ms] (pass) a server that lacks an endpoint > pre-open commands stay bounded and events after close cannot revive a run [0.24ms] (pass) a server that lacks an endpoint > trust waits for the exact acknowledgement, and ignores another target [0.39ms] src/canvas/addhost/authority.on-demand.test.ts: (pass) CA wrapping matches the contract's HKDF domain and separates generations [1.01ms] src/canvas/addhost/model.test.ts: (pass) stagesOf > a host with no event is waiting everywhere [0.37ms] (pass) stagesOf > check before sign-in is detecting how to sign in [0.22ms] (pass) stagesOf > the sign-in report finishes detect and starts the system check [0.12ms] (pass) stagesOf > install, facts and connect map to install, enrol and first session [0.18ms] (pass) stagesOf > an auth failure before sign-in fails detect and says it in plain words, not the server's [0.25ms] (pass) stagesOf > an unsupported host fails the system check, after sign-in [0.09ms] (pass) stagesOf > an install failure fails the install stage and keeps the earlier ones done [0.06ms] (pass) stagesOf > a new attempt starts over and forgets the old sign-in [0.10ms] (pass) authLabel > names the method and a trusted network provider only [0.05ms] (pass) guideFor > installation failures never claim that incomplete cleanup succeeded [0.17ms] (pass) guideFor > each failure kind names its fix [0.12ms] (pass) guideFor > mesh-policy words say possible, not certain [0.03ms] (pass) parseTarget > reads user, host and port [0.10ms] (pass) parseTarget > refuses what cannot name a host [0.04ms] (pass) parseSshConfig > reads aliases with HostName, User and Port, skipping wildcards and Match [0.55ms] (pass) parseSshConfig > recognises config text [0.07ms] (pass) parseSshConfig > a hostname that is an option is dropped [0.06ms] (pass) plain words > an unknown or missing failure gets the generic sentence, never the server's text [0.10ms] (pass) plain words > no headline carries an arrow, an id or an API noun [0.14ms] (pass) only a completed canonical host identity becomes terminal authority [0.11ms] (pass) parseTarget > accepts user@host, host, user@host:port, IPv4 and bracketed IPv6 with an optional port [0.11ms] (pass) parseTarget > rejects partial and malformed tokens, so they wait or show the hint [0.06ms] (pass) matchListed > a name that is exactly one host's id or address names that host [0.07ms] (pass) matchListed > a name that is also the start of another host's name is named but still prefixed [0.06ms] (pass) matchListed > a partial name that starts several hosts names none and waits [0.04ms] (pass) matchListed > a new name that starts no host is neither named nor waiting [0.03ms] (pass) install diagnostics name the failed step and public host error [0.09ms] (pass) missing payload tells the operator the architecture and expected server path [0.07ms] (pass) an already added host says so and offers opening its existing terminal [0.05ms] (pass) release payload verification names the architecture step and plain reason [0.03ms] (pass) leftovers pause (#169) > a check event with leftovers pauses the running attempt; the next event clears it [0.10ms] (pass) leftovers pause (#169) > a pause without leftovers offers nothing to start fresh [0.23ms] src/canvas/addhost/wizard.test.ts: (pass) a saved-key prompt completing after close never starts an SSH attempt [0.61ms] (pass) fresh CA requires setup before any SSH attempt and preserves root consent [0.42ms] (pass) ready CA begins the requested installation mode without another prompt [0.17ms] (pass) closing during CA confirmation never starts an SSH attempt [0.36ms] (pass) a typed root login requires explicit consent before any installation [0.18ms] ../../packages/ui/src/spring.test.ts: (pass) a missed frame does not stretch a settled spring [1.06ms] (pass) motion follows elapsed time across frame rates and damping regimes [0.98ms] chunk-classes.test.ts: (pass) the first screen is critical, the canvas product module and what only it uses are deferred [1.32ms] (pass) a chunk that both sides use stays critical [0.28ms] (pass) code only an action loads is on demand, even when the lazy canvas is what loads it [0.23ms] (pass) post-terminal host inventory entry and its shared canvas imports stay deferred [0.17ms] test/recovery-ui.test.ts: (pass) compiled recovery UI mode off obeys its URL boundary [5.63ms] (pass) compiled recovery UI mode preview obeys its URL boundary [2.66ms] (pass) compiled recovery UI mode 1 obeys its URL boundary [2.28ms] test/recovery-crypto.test.ts: (pass) HKDF siblings match independent implementation and bind unwrap to domain, account, kind and version [66.36ms] (pass) 100 repeated wrapping operations generate independent salts and nonces [20.26ms] test/recovery-rotation.test.ts: (pass) signed-in rotation sends only a local envelope and verifier after acknowledgement [8.85ms] (pass) abandoned word acknowledgement uploads nothing [2.30ms] (pass) settled acknowledgement cannot upload later (dismissed) [2.26ms] (pass) settled acknowledgement cannot upload later (no acknowledgement) [1.88ms] test/recovery-wait.test.ts: (pass) server remaining wait 0s is accepted through the capability policy maximum [2.48ms] (pass) server remaining wait 86400s is accepted through the capability policy maximum [1.06ms] (pass) server remaining wait 90000s is accepted through the capability policy maximum [1.10ms] (pass) server remaining wait 172800s is accepted through the capability policy maximum [0.99ms] (pass) malformed or excessive remaining wait -1 is denied [2.04ms] (pass) malformed or excessive remaining wait 0.5 is denied [1.99ms] (pass) malformed or excessive remaining wait 172801 is denied [1.19ms] (pass) malformed or excessive remaining wait 9007199254740992 is denied [1.00ms] (pass) malformed or excessive remaining wait 90000 is denied [1.21ms] 191 pass 0 fail 11387 expect() calls Ran 191 tests across 31 files. [451.00ms] $ bun run build.ts built chunk-rq1pwb22.js, chunk-536gnh2w.js, chunk-aeaeyzke.js, chunk-awacp8kx.js, chunk-7s25zb9p.js, chunk-zfyssrc8.js, chunk-3y40yxzy.js, chunk-axf07vdg.js, chunk-pt834qxr.js, chunk-gxvqf3b8.js, chunk-9hhb0wj2.js, chunk-p576pdvj.js, chunk-asa2hdrj.js, chunk-e3hk4vwa.js, chunk-b57h38d2.js, chunk-fnsnjw70.js, chunk-mdmywjzx.js, main.js, chunk-4838ym0j.js, chunk-qret526c.js, chunk-2xhazfyb.js, chunk-fwxf65yx.js, chunk-jxcphf31.js, chunk-wh5e7b0v.js, chunk-rpysc9eh.js, chunk-c7k2fv94.js, chunk-yeewdg15.js, chunk-9nhxhwxf.js, chunk-gywzbyv1.js, chunk-nj4myags.js, chunk-vkqwg90r.js, chunk-7dhyw9q3.js, chunk-pwvj9ttv.js, chunk-bbe7v8ze.js, chunk-48t9m5yz.js, chunk-j4qvhpsp.js, chunk-ckq7yz0j.js, chunk-k1g8n3wz.js, chunk-xfxmh4fk.js, chunk-673bz3hx.js, chunk-x13phwds.js, chunk-q1yapcwf.js, chunk-rqrpwbr8.js, chunk-8cws9p9g.js, chunk-wx0dadkf.js, chunk-gwccb17v.js, chunk-mfrvxq80.js, chunk-axbkkqp1.js, chunk-65ppmgaq.js, chunk-9xd3g65e.js, chunk-28rbcdd5.js, chunk-61xwpgvs.js, chunk-acwg7z73.js, backdrop.worker.js, faulty-terminal.worker.js, chunk-jymww87a.js, chunk-de5cx0n1.js, chunk-hapgzkqk.js, chunk-f2r0hhqc.js, chunk-yncgqw69.js critical chunk-de5cx0n1.js: identity=60 gzip=60 brotli=60 bytes critical chunk-28rbcdd5.js: identity=39 gzip=39 brotli=39 bytes onDemand chunk-536gnh2w.js: identity=191 gzip=168 brotli=128 bytes critical chunk-b57h38d2.js: identity=2519 gzip=1008 brotli=877 bytes onDemand chunk-9hhb0wj2.js: identity=2420 gzip=1195 brotli=1076 bytes onDemand chunk-48t9m5yz.js: identity=1026 gzip=623 brotli=499 bytes onDemand chunk-acwg7z73.js: identity=51051 gzip=15945 brotli=14183 bytes critical faulty-terminal.worker.js: identity=1086 gzip=559 brotli=480 bytes critical backdrop.worker.js: identity=243 gzip=212 brotli=158 bytes onDemand chunk-pwvj9ttv.js: identity=14543 gzip=5420 brotli=4859 bytes onDemand chunk-wh5e7b0v.js: identity=2557 gzip=1180 brotli=1009 bytes critical chunk-fnsnjw70.js: identity=386 gzip=238 brotli=196 bytes onDemand chunk-nj4myags.js: identity=5359 gzip=2579 brotli=2309 bytes onDemand chunk-asa2hdrj.js: identity=2173 gzip=1055 brotli=890 bytes critical chunk-gywzbyv1.js: identity=8123 gzip=2683 brotli=2380 bytes onDemand chunk-rpysc9eh.js: identity=4575 gzip=2013 brotli=1798 bytes onDemand chunk-xfxmh4fk.js: identity=6772 gzip=3178 brotli=2889 bytes critical chunk-axbkkqp1.js: identity=90 gzip=90 brotli=78 bytes onDemand chunk-j4qvhpsp.js: identity=6195 gzip=2788 brotli=2520 bytes critical chunk-4838ym0j.js: identity=5443 gzip=2606 brotli=2377 bytes onDemand chunk-wx0dadkf.js: identity=11529 gzip=4655 brotli=4254 bytes onDemand chunk-ckq7yz0j.js: identity=2824 gzip=1384 brotli=1196 bytes onDemand chunk-7dhyw9q3.js: identity=7662 gzip=3397 brotli=2979 bytes deferred chunk-9nhxhwxf.js: identity=98536 gzip=33522 brotli=29572 bytes critical chunk-f2r0hhqc.js: identity=128 gzip=109 brotli=111 bytes onDemand chunk-axf07vdg.js: identity=3891 gzip=1737 brotli=1516 bytes critical chunk-9xd3g65e.js: identity=39 gzip=39 brotli=39 bytes onDemand chunk-rqrpwbr8.js: identity=1649 gzip=776 brotli=676 bytes critical chunk-65ppmgaq.js: identity=711020 gzip=205483 brotli=166751 bytes critical chunk-mdmywjzx.js: identity=4646 gzip=1906 brotli=1662 bytes deferred chunk-3y40yxzy.js: identity=43046 gzip=16602 brotli=14652 bytes onDemand chunk-vkqwg90r.js: identity=4640 gzip=1932 brotli=1702 bytes critical chunk-7s25zb9p.js: identity=590 gzip=327 brotli=303 bytes critical chunk-awacp8kx.js: identity=23766 gzip=7705 brotli=6892 bytes onDemand chunk-yncgqw69.js: identity=1063 gzip=653 brotli=523 bytes onDemand chunk-673bz3hx.js: identity=31922 gzip=12263 brotli=11015 bytes critical chunk-qret526c.js: identity=1104 gzip=666 brotli=604 bytes onDemand chunk-8cws9p9g.js: identity=540 gzip=355 brotli=319 bytes critical chunk-jxcphf31.js: identity=13164 gzip=6342 brotli=5249 bytes onDemand chunk-bbe7v8ze.js: identity=10693 gzip=4127 brotli=3764 bytes critical chunk-pt834qxr.js: identity=707 gzip=371 brotli=306 bytes onDemand chunk-c7k2fv94.js: identity=1616 gzip=862 brotli=737 bytes critical chunk-aeaeyzke.js: identity=16025 gzip=6220 brotli=5542 bytes onDemand chunk-q1yapcwf.js: identity=1170 gzip=709 brotli=628 bytes critical chunk-jymww87a.js: identity=122 gzip=118 brotli=106 bytes critical chunk-gxvqf3b8.js: identity=88 gzip=88 brotli=76 bytes critical chunk-hapgzkqk.js: identity=9885 gzip=4048 brotli=3485 bytes critical main.js: identity=77929 gzip=26494 brotli=23248 bytes deferred chunk-yeewdg15.js: identity=1541 gzip=791 brotli=713 bytes critical chunk-61xwpgvs.js: identity=49 gzip=49 brotli=49 bytes onDemand chunk-rq1pwb22.js: identity=228 gzip=181 brotli=165 bytes onDemand chunk-zfyssrc8.js: identity=6357 gzip=2370 brotli=2111 bytes onDemand chunk-x13phwds.js: identity=2462 gzip=1109 brotli=930 bytes critical chunk-mfrvxq80.js: identity=44258 gzip=15210 brotli=13631 bytes critical chunk-gwccb17v.js: identity=199 gzip=162 brotli=138 bytes critical chunk-2xhazfyb.js: identity=8377 gzip=3574 brotli=3184 bytes critical chunk-e3hk4vwa.js: identity=17627 gzip=6249 brotli=5563 bytes critical chunk-fwxf65yx.js: identity=14345 gzip=5825 brotli=5143 bytes onDemand chunk-p576pdvj.js: identity=6265 gzip=2100 brotli=1863 bytes critical chunk-k1g8n3wz.js: identity=162 gzip=150 brotli=124 bytes critical inline scripts: identity=787 gzip=447 brotli=318 bytes JavaScript transfer, critical: identity=963006 gzip=299077/307200 brotli=249169/256000 bytes JavaScript transfer, deferred: identity=143123 gzip=50915/51200 brotli=44937/45056 bytes JavaScript transfer, onDemand: identity=191373 gzip=74754/20480 brotli=66538/18432 bytes JavaScript transfer, onDemand largest chunk chunk-acwg7z73.js: gzip=15945/20480 brotli=14183/18432 bytes (class total gzip=74754 brotli=66538, not limited) fonts/monaspace-neon/italic.latin.woff2: identity=44324 gzip=44324 brotli=44324 bytes fonts/monaspace-neon/roman.latin.woff2: identity=40016 gzip=40016 brotli=40016 bytes fonts/jetbrains-mono/italic.latin.woff2: identity=36316 gzip=36316 brotli=36316 bytes fonts/jetbrains-mono/roman.latin.woff2: identity=34068 gzip=34068 brotli=34068 bytes fonts/source-code-pro/italic.latin.woff2: identity=23612 gzip=23612 brotli=23612 bytes fonts/source-code-pro/roman.latin.woff2: identity=22872 gzip=22872 brotli=22872 bytes fonts/geist-mono/italic.latin.woff2: identity=21380 gzip=21380 brotli=21380 bytes fonts/geist-mono/roman.latin.woff2: identity=19984 gzip=19984 brotli=19981 bytes fonts/ibm-plex-mono/italic.latin.woff2: identity=22296 gzip=22296 brotli=22296 bytes fonts/ibm-plex-mono/roman.latin.woff2: identity=19048 gzip=19048 brotli=19047 bytes fonts/cascadia-code/italic.latin.woff2: identity=44404 gzip=44404 brotli=44404 bytes fonts/cascadia-code/roman.latin.woff2: identity=40604 gzip=40604 brotli=40604 bytes fonts/maple-mono-nf/italic.latin.woff2: identity=53444 gzip=53444 brotli=53444 bytes fonts/maple-mono-nf/roman.latin.woff2: identity=46432 gzip=46432 brotli=46432 bytes fonts/nerd-symbols.woff2: identity=223748 gzip=223748 brotli=223748 bytes fonts/fira-code/roman.latin.woff2: identity=36756 gzip=36756 brotli=36756 bytes fonts/commit-mono/italic-400.latin.woff2: identity=18716 gzip=18716 brotli=18716 bytes fonts/commit-mono/italic-700.latin.woff2: identity=18352 gzip=18352 brotli=18352 bytes fonts/commit-mono/roman-400.latin.woff2: identity=17484 gzip=17484 brotli=17484 bytes fonts/commit-mono/roman-700.latin.woff2: identity=17260 gzip=17260 brotli=17260 bytes Font transfer: monaspace-neon=84340/88064 jetbrains-mono=70384/75776 source-code-pro=46484/49152 geist-mono=41364/45056 ibm-plex-mono=41344/45056 cascadia-code=85008/88064 maple-mono-nf=99876/106496 (critical 46432/51200) symbols=223748/235520 fira-code=36756/40960 commit-mono=71812/75776 bytes ==> Rust stream oracle (for the differential test) ==> TypeScript protocol tests bun test v1.4.2 (744846f84) src/mesh-review-revocation.test.ts: (pass) review forbidden event cancels pending snapshot publication [2.72ms] (pass) subscription forbidden ends delivery before a late refresh rejection [1.58ms] (pass) subscription not found ends delivery before a late refresh rejection [1.17ms] (pass) subscription invalid input ends delivery before a late refresh rejection [1.16ms] (pass) subscription mesh unavailable ends delivery before a late refresh rejection [1.13ms] (pass) synchronous subscription refusal releases the transport exactly once [0.28ms] src/codec.test.ts: (pass) wire protocol golden vectors > encodes and decodes each frame exactly as the shared manifest describes [9.12ms] (pass) wire protocol golden vectors > returns borrowed payload views and writes into reusable buffers [0.29ms] (pass) wire protocol golden vectors > decodes muxed messages split across WebSocket messages [1.05ms] (pass) wire protocol golden vectors > rejects oversized, non-canonical, unknown, and malformed frame bytes [0.24ms] (pass) split mux header preserves trailing Close [0.25ms] src/mesh-review-paged-error.test.ts: (pass) review earlier snapshot continuation failure cannot replace a newer complete refresh [2.95ms] (pass) review earlier snapshot continuation cannot overwrite a delivered revision [3.02ms] (pass) a newer paged event owns publication before an earlier refresh resumes [2.70ms] src/mesh-review-refresh.test.ts: (pass) review superseded refresh failure cannot replace authoritative resync [1.49ms] (pass) superseded failure preserves a newer pending refresh [2.58ms] src/stream.test.ts: stream differential: 134 streams, 11439 schedules, zero divergences (pass) Rust and TypeScript preserve every frame at all boundaries and random multi-splits [2967.39ms] (pass) maximum frame size and fragmented oversized prefix obey the allocation boundary [10.72ms] src/mesh.test.ts: (pass) Mesh actions map to their typed action IDs and JSON inputs [2.51ms] (pass) Mesh watch coalesces change bursts and never publishes an older revision [4.31ms] (pass) Mesh watch forwards server errors and stops delivering after unsubscribe [0.17ms] (pass) Mesh enrollment carries an explicit authenticated host binding [0.29ms] src/mesh-review-continuation.test.ts: (pass) review continuation stops after stop [1.72ms] (pass) review continuation stops after forbidden [1.25ms] (pass) review continuation stops after superseded [1.22ms] src/mesh-pagination.test.ts: (pass) list assembles bounded pages using the same filter [0.39ms] (pass) a changed revision discards earlier pages before assembling its restart [0.18ms] (pass) malformed continuation is refused: {"revision":1,"offset":0} [0.30ms] (pass) malformed continuation is refused: {"revision":2,"offset":1} [0.02ms] (pass) malformed continuation is refused: {"revision":1,"offset":2} [0.01ms] (pass) watch never publishes a partial page; withdrawn=false [1.48ms] (pass) watch never publishes a partial page; withdrawn=true [1.17ms] (pass) a superseding equal-revision resync wins over pending page assembly [1.58ms] src/mesh-review-resync.test.ts: (pass) review watch applies same-revision authoritative resync [0.25ms] (pass) authoritative resync keeps priority over an equal-revision pending list [1.62ms] src/mesh-vectors.test.ts: (pass) every shared Mesh action vector passes through the typed client unchanged [1.86ms] (pass) shared Mesh event vectors drive the typed watch adapter [5.59ms] 37 pass 0 fail 34463 expect() calls Ran 37 tests across 10 files. [3.05s] ```
Author
Owner

Final D259 measurements on branch head28bbc0b6, VM208 Debian13/4vCPU, Chromium149.0.7827.55, Bun1.4.2/Playwright1.61.1, three20-trial repetitions per fixed RTT (jitter0), shared lock. All9 cases pass; all glyphs retained. These final-head repeats follow the already posted interleaved common-baseline comparison; they are not themselves newly interleaved.

Before replay-ready p50/p99 by run, identical strict harness9ff74a3d (production715129d1 plus test/config only): LAN74.9/91.9,74.8/91.5,74.5/90.8ms;150ms539.6/541.8,524.8/541.5,524.7/542.0ms;300ms987.3/991.5,986.8/991.7,974.4/991.8ms. Before cached-screen p99 ranges4.3–4.7/4.6–6.6/4.5–5.2ms respectively.

RTT ms Run Cached p50 ms Cached p99 ms Ready p50 ms Ready p99 ms All retained
0 1 3.70 5.60 24.40 25.00 True
0 2 3.70 4.40 24.40 25.30 True
0 3 3.60 5.00 24.60 25.60 True
150 1 3.60 4.50 175.60 191.50 True
150 2 3.80 4.90 175.50 191.30 True
150 3 3.60 4.70 175.30 191.50 True
300 1 4.20 8.80 324.80 342.90 True
300 2 3.60 6.90 325.40 341.10 True
300 3 3.90 6.10 325.90 340.90 True

Budgets: cached<=16.7ms; ready<=RTT+50ms (50/200/350). No changed sample count, readiness/disconnect assertion or budget.

Public environment receipts (complete, no capabilities):

run=run-1
label=run
revision=28bbc0b6fa18356a992c2ec215213d5d732d271b
port=4257
mode=test
config=playwright.config.ts
rtt_ms=0
jitter_ms=0
tmpdir=/root/infraternal-bench/ta165c6b387ac
nproc=4
kernel=Linux 6.12.69+deb13-amd64 x86_64 GNU/Linux
os=Debian GNU/Linux 13 (trixie)
bun=1.4.2
playwright=Version 1.61.1
# Role: records the pinned browser VM runtime and font versions.
bun=1.4.2
playwright=Version 1.61.1
browsers_path=/root/infraternal-bench/browser/browsers
playwright_install_list:

Playwright version: 1.61.1
  Browsers:
    /root/infraternal-bench/browser/browsers/chromium-1228
    /root/infraternal-bench/browser/browsers/chromium_headless_shell-1228
    /root/infraternal-bench/browser/browsers/ffmpeg-1011
    /root/infraternal-bench/browser/browsers/webkit-2311
  References:
    /root/infraternal-bench/browser/runtime/apps/tracer/node_modules/playwright-core
browser_versions:
chromium=149.0.7827.55
webkit=26.5
font_packages:
fontconfig=2.15.0-2.3
fonts-dejavu-core=2.37-8
fonts-dejavu-mono=2.37-8
fonts-freefont-ttf=20211204+svn4273-2
fonts-ipafont-gothic=00303-23
fonts-liberation=1:2.1.5-3
fonts-noto-color-emoji=2.051-0+deb13u1
fonts-noto-core=20201225-2
fonts-noto-mono=20201225-2
fonts-tlwg-loma-otf=1:0.7.3-1
fonts-unifont=1:15.1.01-1
fonts-wqy-zenhei=0.9.45-8
xfonts-scalable=1:1.0.3-1.3
font_matches:
LiberationSans-Regular.ttf: "Liberation Sans" "Regular"
DejaVuSansMono.ttf: "DejaVu Sans Mono" "Book"
NotoColorEmoji.ttf: "Noto Color Emoji" "Regular"
os=Debian GNU/Linux 13 (trixie)
load_before=0.03 0.33 0.38
exit_status=0
duration_ms=7502
load_after=0.19 0.35 0.38
run=run-1
label=run
revision=28bbc0b6fa18356a992c2ec215213d5d732d271b
port=4807
mode=test
config=playwright.config.ts
rtt_ms=150
jitter_ms=0
tmpdir=/root/infraternal-bench/td579d1edd390
nproc=4
kernel=Linux 6.12.69+deb13-amd64 x86_64 GNU/Linux
os=Debian GNU/Linux 13 (trixie)
bun=1.4.2
playwright=Version 1.61.1
# Role: records the pinned browser VM runtime and font versions.
bun=1.4.2
playwright=Version 1.61.1
browsers_path=/root/infraternal-bench/browser/browsers
playwright_install_list:

Playwright version: 1.61.1
  Browsers:
    /root/infraternal-bench/browser/browsers/chromium-1228
    /root/infraternal-bench/browser/browsers/chromium_headless_shell-1228
    /root/infraternal-bench/browser/browsers/ffmpeg-1011
    /root/infraternal-bench/browser/browsers/webkit-2311
  References:
    /root/infraternal-bench/browser/runtime/apps/tracer/node_modules/playwright-core
browser_versions:
chromium=149.0.7827.55
webkit=26.5
font_packages:
fontconfig=2.15.0-2.3
fonts-dejavu-core=2.37-8
fonts-dejavu-mono=2.37-8
fonts-freefont-ttf=20211204+svn4273-2
fonts-ipafont-gothic=00303-23
fonts-liberation=1:2.1.5-3
fonts-noto-color-emoji=2.051-0+deb13u1
fonts-noto-core=20201225-2
fonts-noto-mono=20201225-2
fonts-tlwg-loma-otf=1:0.7.3-1
fonts-unifont=1:15.1.01-1
fonts-wqy-zenhei=0.9.45-8
xfonts-scalable=1:1.0.3-1.3
font_matches:
LiberationSans-Regular.ttf: "Liberation Sans" "Regular"
DejaVuSansMono.ttf: "DejaVu Sans Mono" "Book"
NotoColorEmoji.ttf: "Noto Color Emoji" "Regular"
os=Debian GNU/Linux 13 (trixie)
load_before=0.16 0.34 0.38
exit_status=0
duration_ms=34246
load_after=0.38 0.38 0.39
run=run-1
label=run
revision=28bbc0b6fa18356a992c2ec215213d5d732d271b
port=4691
mode=test
config=playwright.config.ts
rtt_ms=300
jitter_ms=0
tmpdir=/root/infraternal-bench/tc27e616d3516
nproc=4
kernel=Linux 6.12.69+deb13-amd64 x86_64 GNU/Linux
os=Debian GNU/Linux 13 (trixie)
bun=1.4.2
playwright=Version 1.61.1
# Role: records the pinned browser VM runtime and font versions.
bun=1.4.2
playwright=Version 1.61.1
browsers_path=/root/infraternal-bench/browser/browsers
playwright_install_list:

Playwright version: 1.61.1
  Browsers:
    /root/infraternal-bench/browser/browsers/chromium-1228
    /root/infraternal-bench/browser/browsers/chromium_headless_shell-1228
    /root/infraternal-bench/browser/browsers/ffmpeg-1011
    /root/infraternal-bench/browser/browsers/webkit-2311
  References:
    /root/infraternal-bench/browser/runtime/apps/tracer/node_modules/playwright-core
browser_versions:
chromium=149.0.7827.55
webkit=26.5
font_packages:
fontconfig=2.15.0-2.3
fonts-dejavu-core=2.37-8
fonts-dejavu-mono=2.37-8
fonts-freefont-ttf=20211204+svn4273-2
fonts-ipafont-gothic=00303-23
fonts-liberation=1:2.1.5-3
fonts-noto-color-emoji=2.051-0+deb13u1
fonts-noto-core=20201225-2
fonts-noto-mono=20201225-2
fonts-tlwg-loma-otf=1:0.7.3-1
fonts-unifont=1:15.1.01-1
fonts-wqy-zenhei=0.9.45-8
xfonts-scalable=1:1.0.3-1.3
font_matches:
LiberationSans-Regular.ttf: "Liberation Sans" "Regular"
DejaVuSansMono.ttf: "DejaVu Sans Mono" "Book"
NotoColorEmoji.ttf: "Noto Color Emoji" "Regular"
os=Debian GNU/Linux 13 (trixie)
load_before=0.32 0.37 0.38
exit_status=0
duration_ms=57522
load_after=0.18 0.31 0.36
Final D259 measurements on branch head28bbc0b6, VM208 Debian13/4vCPU, Chromium149.0.7827.55, Bun1.4.2/Playwright1.61.1, three20-trial repetitions per fixed RTT (jitter0), shared lock. All9 cases pass; all glyphs retained. These final-head repeats follow the already posted interleaved common-baseline comparison; they are not themselves newly interleaved. Before replay-ready p50/p99 by run, identical strict harness9ff74a3d (production715129d1 plus test/config only): LAN74.9/91.9,74.8/91.5,74.5/90.8ms;150ms539.6/541.8,524.8/541.5,524.7/542.0ms;300ms987.3/991.5,986.8/991.7,974.4/991.8ms. Before cached-screen p99 ranges4.3–4.7/4.6–6.6/4.5–5.2ms respectively. |RTT ms|Run|Cached p50 ms|Cached p99 ms|Ready p50 ms|Ready p99 ms|All retained| |---|---:|---:|---:|---:|---:|---| |0|1|3.70|5.60|24.40|25.00|True| |0|2|3.70|4.40|24.40|25.30|True| |0|3|3.60|5.00|24.60|25.60|True| |150|1|3.60|4.50|175.60|191.50|True| |150|2|3.80|4.90|175.50|191.30|True| |150|3|3.60|4.70|175.30|191.50|True| |300|1|4.20|8.80|324.80|342.90|True| |300|2|3.60|6.90|325.40|341.10|True| |300|3|3.90|6.10|325.90|340.90|True| Budgets: cached<=16.7ms; ready<=RTT+50ms (50/200/350). No changed sample count, readiness/disconnect assertion or budget. Public environment receipts (complete, no capabilities): ```text run=run-1 label=run revision=28bbc0b6fa18356a992c2ec215213d5d732d271b port=4257 mode=test config=playwright.config.ts rtt_ms=0 jitter_ms=0 tmpdir=/root/infraternal-bench/ta165c6b387ac nproc=4 kernel=Linux 6.12.69+deb13-amd64 x86_64 GNU/Linux os=Debian GNU/Linux 13 (trixie) bun=1.4.2 playwright=Version 1.61.1 # Role: records the pinned browser VM runtime and font versions. bun=1.4.2 playwright=Version 1.61.1 browsers_path=/root/infraternal-bench/browser/browsers playwright_install_list: Playwright version: 1.61.1 Browsers: /root/infraternal-bench/browser/browsers/chromium-1228 /root/infraternal-bench/browser/browsers/chromium_headless_shell-1228 /root/infraternal-bench/browser/browsers/ffmpeg-1011 /root/infraternal-bench/browser/browsers/webkit-2311 References: /root/infraternal-bench/browser/runtime/apps/tracer/node_modules/playwright-core browser_versions: chromium=149.0.7827.55 webkit=26.5 font_packages: fontconfig=2.15.0-2.3 fonts-dejavu-core=2.37-8 fonts-dejavu-mono=2.37-8 fonts-freefont-ttf=20211204+svn4273-2 fonts-ipafont-gothic=00303-23 fonts-liberation=1:2.1.5-3 fonts-noto-color-emoji=2.051-0+deb13u1 fonts-noto-core=20201225-2 fonts-noto-mono=20201225-2 fonts-tlwg-loma-otf=1:0.7.3-1 fonts-unifont=1:15.1.01-1 fonts-wqy-zenhei=0.9.45-8 xfonts-scalable=1:1.0.3-1.3 font_matches: LiberationSans-Regular.ttf: "Liberation Sans" "Regular" DejaVuSansMono.ttf: "DejaVu Sans Mono" "Book" NotoColorEmoji.ttf: "Noto Color Emoji" "Regular" os=Debian GNU/Linux 13 (trixie) load_before=0.03 0.33 0.38 exit_status=0 duration_ms=7502 load_after=0.19 0.35 0.38 ``` ```text run=run-1 label=run revision=28bbc0b6fa18356a992c2ec215213d5d732d271b port=4807 mode=test config=playwright.config.ts rtt_ms=150 jitter_ms=0 tmpdir=/root/infraternal-bench/td579d1edd390 nproc=4 kernel=Linux 6.12.69+deb13-amd64 x86_64 GNU/Linux os=Debian GNU/Linux 13 (trixie) bun=1.4.2 playwright=Version 1.61.1 # Role: records the pinned browser VM runtime and font versions. bun=1.4.2 playwright=Version 1.61.1 browsers_path=/root/infraternal-bench/browser/browsers playwright_install_list: Playwright version: 1.61.1 Browsers: /root/infraternal-bench/browser/browsers/chromium-1228 /root/infraternal-bench/browser/browsers/chromium_headless_shell-1228 /root/infraternal-bench/browser/browsers/ffmpeg-1011 /root/infraternal-bench/browser/browsers/webkit-2311 References: /root/infraternal-bench/browser/runtime/apps/tracer/node_modules/playwright-core browser_versions: chromium=149.0.7827.55 webkit=26.5 font_packages: fontconfig=2.15.0-2.3 fonts-dejavu-core=2.37-8 fonts-dejavu-mono=2.37-8 fonts-freefont-ttf=20211204+svn4273-2 fonts-ipafont-gothic=00303-23 fonts-liberation=1:2.1.5-3 fonts-noto-color-emoji=2.051-0+deb13u1 fonts-noto-core=20201225-2 fonts-noto-mono=20201225-2 fonts-tlwg-loma-otf=1:0.7.3-1 fonts-unifont=1:15.1.01-1 fonts-wqy-zenhei=0.9.45-8 xfonts-scalable=1:1.0.3-1.3 font_matches: LiberationSans-Regular.ttf: "Liberation Sans" "Regular" DejaVuSansMono.ttf: "DejaVu Sans Mono" "Book" NotoColorEmoji.ttf: "Noto Color Emoji" "Regular" os=Debian GNU/Linux 13 (trixie) load_before=0.16 0.34 0.38 exit_status=0 duration_ms=34246 load_after=0.38 0.38 0.39 ``` ```text run=run-1 label=run revision=28bbc0b6fa18356a992c2ec215213d5d732d271b port=4691 mode=test config=playwright.config.ts rtt_ms=300 jitter_ms=0 tmpdir=/root/infraternal-bench/tc27e616d3516 nproc=4 kernel=Linux 6.12.69+deb13-amd64 x86_64 GNU/Linux os=Debian GNU/Linux 13 (trixie) bun=1.4.2 playwright=Version 1.61.1 # Role: records the pinned browser VM runtime and font versions. bun=1.4.2 playwright=Version 1.61.1 browsers_path=/root/infraternal-bench/browser/browsers playwright_install_list: Playwright version: 1.61.1 Browsers: /root/infraternal-bench/browser/browsers/chromium-1228 /root/infraternal-bench/browser/browsers/chromium_headless_shell-1228 /root/infraternal-bench/browser/browsers/ffmpeg-1011 /root/infraternal-bench/browser/browsers/webkit-2311 References: /root/infraternal-bench/browser/runtime/apps/tracer/node_modules/playwright-core browser_versions: chromium=149.0.7827.55 webkit=26.5 font_packages: fontconfig=2.15.0-2.3 fonts-dejavu-core=2.37-8 fonts-dejavu-mono=2.37-8 fonts-freefont-ttf=20211204+svn4273-2 fonts-ipafont-gothic=00303-23 fonts-liberation=1:2.1.5-3 fonts-noto-color-emoji=2.051-0+deb13u1 fonts-noto-core=20201225-2 fonts-noto-mono=20201225-2 fonts-tlwg-loma-otf=1:0.7.3-1 fonts-unifont=1:15.1.01-1 fonts-wqy-zenhei=0.9.45-8 xfonts-scalable=1:1.0.3-1.3 font_matches: LiberationSans-Regular.ttf: "Liberation Sans" "Regular" DejaVuSansMono.ttf: "DejaVu Sans Mono" "Book" NotoColorEmoji.ttf: "Noto Color Emoji" "Regular" os=Debian GNU/Linux 13 (trixie) load_before=0.32 0.37 0.38 exit_status=0 duration_ms=57522 load_after=0.18 0.31 0.36 ```
Author
Owner

Result: HOLD. Pushed branch prod-perf-fix head 28bbc0b6fa; production code is f2d91608. No deployment or issue closure. All authorized source/test slices are atomic and pushed; no new evidence files committed (D262).

New repair: a complete early paste/cursor echo was forgotten by a time-only prediction wait. Bounded ordered proof now releases only a complete echo; horizontal control also requires the native cursor/row/grid result. Partial, unrelated, oversized, stale and overtaken output stays blocked. Deterministic red-before/green-after guards12/12; source199/0; final TS/compiler/build/budget191/0 plus protocol37/0/34463assertions; native1029/0/135ignored. Review F-001 cancellation and F-002 Join71 both pass; no lint exceptions or #118 waiver.

Requested original1f77a449/head48dc925d interleaved3 table is posted above: HEAD11/11,10/11,11/11; one pending-ok failure retained. Subsequent diagnostic original-case repeat1/3passed (ok/Z failures retained); printable-proof variant3/3passed. Final unchanged original terminal spec interleaved17f04abd→f2d91608: both revisions9/9pass; this window does not prove a failure-frequency change. Final code's per-run p99s,300ms RTT±30ms on4-vCPU VM208:

Metric Before1 After1 Before2 After2 Before3 After3
Predicted glyph,17ms 15.3 13.0 15.2 13.2 15.1 15.1
Legacy resume,900ms 650.0 656.6 657.1 645.7 651.4 659.3
Setup upper paint,1000ms 758.6 743.4 753.8 749.8 759.0 780.3
Sign-in upper paint,1000ms 730.5 727.0 741.6 729.7 725.8 741.0
Returning sign-in,5000ms 4136.7 4131.8 4140.4 4136.9 4133.0 4236.4

D259 final-head fixed-link/jitter0 repeats are posted above (3×20/link): cached glyph p99≤8.8ms, all retained; replay-ready p99 LAN25.0–25.6ms/50,150ms191.3–191.5ms/200,300ms340.9–342.9ms/350. Earlier identical-harness interleaved baseline p99s90.8–91.9,541.5–542.0,991.5–991.8ms respectively. Machine/load/version receipts accompany the tables.

Still HOLD: strict theme frames. Chromium raw p99≈16.8–33.4ms, zero measured long tasks; literal zero-over16.7 target is not met. WebKit current inspector-free control488ms; native control521ms, detached candidate459ms; all32/32 gaps over16.7. Unsupported longtask API means unknown, not zero. Detaching19 bodies3068→1102nodes cuts native style92.798→41.318ms but paint196.539→173.287ms still dominates. Geometry-preserving outer clip539→478ms also fails. Both candidates rejected/reverted; no production visual/lifecycle change. Next unresolved work is whole-surface native capture/style/paint, with single180ms opacity maintained. No budget waiver or more-resource request.

Final scripts/verify fast exit1 only at inherited D243/#175 static sizes: x8622587984>16404816bytes; ARM19992104>13817816bytes. All other native rows pass. Full269271-byte output quoted verbatim in12preceding comments; SHA256b935fbfa77756bb873f44a315d1f3f61b1a57f4622068c4961eea6d8e8421447. RTT row was the identical source on VM208/shared lock (p99=299.85ms); functional transcript durations are not performance evidence.

+---------------------------+--------------+
| Rust gate                 | Result       |
+---------------------------+--------------+
| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| test                      | PASS         |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
+---------------------------+--------------+

Author review: no auth/wire/owner decision/dependency/threshold changes; native admission and replay fences retained; no new UI primitive; no idle loop/timer for fallback proof; proof bytes bound512/session; lifecycle/snapshot cleanup covered. Existing production captures require independent visual review. Attachment limitation: fj exposes comments but no authenticated file-upload operation. Text/JSON receipts and complete gates are on this issue; binary captures remain untracked locally under evidence/perf-vm-browser for the orchestrator's authenticated uploader. No credentials inspected. Remaining theme/design review and size-reduction work are explicit holds, not completion claims.

Owned build/fixture scratch cleanup follows; worktree source is clean.

Result: HOLD. Pushed branch prod-perf-fix head 28bbc0b6fa18356a992c2ec215213d5d732d271b; production code is f2d91608. No deployment or issue closure. All authorized source/test slices are atomic and pushed; no new evidence files committed (D262). New repair: a complete early paste/cursor echo was forgotten by a time-only prediction wait. Bounded ordered proof now releases only a complete echo; horizontal control also requires the native cursor/row/grid result. Partial, unrelated, oversized, stale and overtaken output stays blocked. Deterministic red-before/green-after guards12/12; source199/0; final TS/compiler/build/budget191/0 plus protocol37/0/34463assertions; native1029/0/135ignored. Review F-001 cancellation and F-002 Join71 both pass; no lint exceptions or #118 waiver. Requested original1f77a449/head48dc925d interleaved3 table is posted above: HEAD11/11,10/11,11/11; one pending-ok failure retained. Subsequent diagnostic original-case repeat1/3passed (ok/Z failures retained); printable-proof variant3/3passed. Final unchanged original terminal spec interleaved17f04abd→f2d91608: both revisions9/9pass; this window does not prove a failure-frequency change. Final code's per-run p99s,300ms RTT±30ms on4-vCPU VM208: |Metric|Before1|After1|Before2|After2|Before3|After3| |---|---:|---:|---:|---:|---:|---:| |Predicted glyph,17ms|15.3|13.0|15.2|13.2|15.1|15.1| |Legacy resume,900ms|650.0|656.6|657.1|645.7|651.4|659.3| |Setup upper paint,1000ms|758.6|743.4|753.8|749.8|759.0|780.3| |Sign-in upper paint,1000ms|730.5|727.0|741.6|729.7|725.8|741.0| |Returning sign-in,5000ms|4136.7|4131.8|4140.4|4136.9|4133.0|4236.4| D259 final-head fixed-link/jitter0 repeats are posted above (3×20/link): cached glyph p99≤8.8ms, all retained; replay-ready p99 LAN25.0–25.6ms/50,150ms191.3–191.5ms/200,300ms340.9–342.9ms/350. Earlier identical-harness interleaved baseline p99s90.8–91.9,541.5–542.0,991.5–991.8ms respectively. Machine/load/version receipts accompany the tables. Still HOLD: strict theme frames. Chromium raw p99≈16.8–33.4ms, zero measured long tasks; literal zero-over16.7 target is not met. WebKit current inspector-free control488ms; native control521ms, detached candidate459ms; all32/32 gaps over16.7. Unsupported longtask API means unknown, not zero. Detaching19 bodies3068→1102nodes cuts native style92.798→41.318ms but paint196.539→173.287ms still dominates. Geometry-preserving outer clip539→478ms also fails. Both candidates rejected/reverted; no production visual/lifecycle change. Next unresolved work is whole-surface native capture/style/paint, with single180ms opacity maintained. No budget waiver or more-resource request. Final scripts/verify fast exit1 only at inherited D243/#175 static sizes: x8622587984>16404816bytes; ARM19992104>13817816bytes. All other native rows pass. Full269271-byte output quoted verbatim in12preceding comments; SHA256b935fbfa77756bb873f44a315d1f3f61b1a57f4622068c4961eea6d8e8421447. RTT row was the identical source on VM208/shared lock (p99=299.85ms); functional transcript durations are not performance evidence. ```text +---------------------------+--------------+ | Rust gate | Result | +---------------------------+--------------+ | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | test | PASS | | cargo-deny | PASS | | static builds | FAIL (1) | +---------------------------+--------------+ ``` Author review: no auth/wire/owner decision/dependency/threshold changes; native admission and replay fences retained; no new UI primitive; no idle loop/timer for fallback proof; proof bytes bound512/session; lifecycle/snapshot cleanup covered. Existing production captures require independent visual review. Attachment limitation: fj exposes comments but no authenticated file-upload operation. Text/JSON receipts and complete gates are on this issue; binary captures remain untracked locally under evidence/perf-vm-browser for the orchestrator's authenticated uploader. No credentials inspected. Remaining theme/design review and size-reduction work are explicit holds, not completion claims. Owned build/fixture scratch cleanup follows; worktree source is clean.
Author
Owner

Cleanup complete at pushed28bbc0b6fa18356a992c2ec215213d5d732d271b. Tracked source clean; remote branch matches. Removed owned51GiB build/fixture scratch and the VM-only final RTT script directory after every run finished. No registered scratch worktrees remain. Source/test commits and full gates/numbers remain on this issue; untracked binary captures are retained locally for the authenticated attachment uploader. HOLD remains: strict theme frames and unwaived D243/#175 sizes. No deployment or issue closure.

Cleanup complete at pushed28bbc0b6fa18356a992c2ec215213d5d732d271b. Tracked source clean; remote branch matches. Removed owned51GiB build/fixture scratch and the VM-only final RTT script directory after every run finished. No registered scratch worktrees remain. Source/test commits and full gates/numbers remain on this issue; untracked binary captures are retained locally for the authenticated attachment uploader. HOLD remains: strict theme frames and unwaived D243/#175 sizes. No deployment or issue closure.
Author
Owner

Start: QUIC/WebTransport resumption research (D265). Branch research-quic-resume, base dcf9dbb94b52d5d2e805a0474e74dd42764159fe (origin/dev). Research only, no product code: browser support survey, stack/size/replay-safety analysis, native-client prototype measuring resume after a client address change at 150 ms RTT on the perf VM, recommendation in research/quic-resume/README.md.

Start: QUIC/WebTransport resumption research (D265). Branch `research-quic-resume`, base `dcf9dbb94b52d5d2e805a0474e74dd42764159fe` (origin/dev). Research only, no product code: browser support survey, stack/size/replay-safety analysis, native-client prototype measuring resume after a client address change at 150 ms RTT on the perf VM, recommendation in research/quic-resume/README.md.
Author
Owner

QUIC/WebTransport resumption research (D265): finished

The report is at research/quic-resume/README.md on branch research-quic-resume: head 3f32aea4, base dcf9dbb9 (origin/dev). It is research only. No product code changed. The owner decides.

Short answer: 0–1 round trips after a real network change cannot be reached in browsers in 2026.

  • Chrome: its WebTransport client has no connection migration and no TLS session cache. (Chrome migrates normal HTTP/3 connections on network change, but only on Android.)
  • Firefox: opens a new QUIC connection on every network change (bug 1962425).
  • Safari 26.4: ships WebTransport on macOS and iOS, with an HTTP/2 fallback. Whether it migrates is unconfirmed.
  • 0-RTT: the WebTransport draft (-16, §3.2) forbids starting a session in 0-RTT.
  • What WebTransport realistically gains in browsers: one round trip (4 → 3), and only if our server sends its HTTP/3 SETTINGS in its first flight (0.5-RTT).
  • Migration does give 1 round trip for native clients, and for NAT rebinding in any client. That holds only when the resume message is padded past QUIC's 3× anti-amplification limit.

Measured on the perf VM with native clients (no headless browser is available there, and browsers cannot exercise migration anyway). Setup: netns + netem at 150 ms RTT, no jitter. The client moves to its second address on every sample. 41 samples per row; times are from the address change until the reply has fully arrived. Lock held 12:30–12:37 UTC (18:00–18:07 IST). Load average was 0.17 at the start and 0.07 at the end.

Path after the address change Reply Open p50/p99 (ms) Reply p50/p99 (ms) Round trips
WebSocket: TCP + TLS 1.3 + upgrade + token 1 KiB 451.5/452.0 602.0/602.4 4
WebTransport, new session (library default) 1 KiB 452.8/453.6 603.4/604.3 4
WebTransport, new session, SETTINGS at 0.5-RTT 1 KiB 302.1/302.6 452.7/453.1 3
WebTransport, migrated connection 1 KiB – 301.3/301.7 2
WebTransport, migrated, resume padded to 4 KiB 1 KiB – 150.8/151.1 1
live connection (floor), WebSocket / WebTransport 1 KiB – 150.5 / 150.7 1
WebSocket, new connection 32 KiB 451.4/452.0 788.5/790.1 5.3
WebTransport, new session, 0.5-RTT 32 KiB 302.1/302.5 753.8/754.2 5
WebTransport, migrated, padded 32 KiB – 452.0/519.2 3

Size (static musl release probes, same echo server built three ways):

  • quinn + rustls/ring alone: 2,240,888 B.
  • with wtransport 0.7.2: +307,296 B.
  • with web-transport-quinn 0.13.2: +484,832 B.

These deltas are upper bounds, because the product already links url, http, futures and similar crates. The delta in the product binary still needs to be measured. Both libraries are MIT OR Apache-2.0, which is compatible with AGPL.

Recommendation for the owner to decide:

  1. Do not add WebTransport for resumption now. It saves one round trip, and the cost is: D243 binary growth, a second transport, two fallbacks (Chrome and Firefox have no fallback when UDP is blocked), and a proxy change (Traefik cannot proxy WebTransport, #11204).
  2. Correct the D265 budget wording. A fresh WebSocket resume is 3 round trips to onopen and 4 to the first resumed byte, because the token is sent after open.
  3. Keep QUIC migration for native clients: pad the first message after a path change, and keep early data off.
  4. Revisit if Chrome or Safari starts migrating WebTransport sessions, or if Traefik can proxy WebTransport.

0-RTT replay safety: terminal input, actions, sign-in, and any rotation or consumption of the resume token must never travel in 0-RTT. The D265 first-message token is safe on WebTransport, because the draft forbids 0-RTT session setup. After a migration, no token is needed at all: it is the same authenticated connection.

Evidence (attached above): summary.csv, results-20261013T123020Z.tgz (raw CSVs and host record), proto-source.tgz (prototype and size probe), wtransport-0.7.2-research.patch (Endpoint::rebind and an opt-in 0.5-RTT accept; these exist only for the research), run-vm.sh.txt, size-probes.txt. The perf VM work directory was removed after the run.

Gate (scripts/verify fast on 3f32aea4; the only change on top of dev is a markdown file). It fails on the dev base itself, and the failures are unrelated to this change. Full log: verify-fast.txt

| fmt                       | PASS         |
| VT native fmt             | PASS         |
| CLI plugin compile-out    | PASS         |
| clippy                    | PASS         |
| test                      | FAIL (101)   |
| cargo-deny                | PASS         |
| static builds             | FAIL (1)     |
binary exceeds the 16404816-byte size budget: 22612848 bytes
binary exceeds the 13817816-byte size budget: 20014520 bytes
test result: FAILED. 71 passed; 5 failed; 1 ignored  (-p infraternal: restart/restart_image tests;
  restart_image.rs:240 unwraps CARGO_TARGET_DIR (unset in this run); one 6 s timeout under host load 30-44)

The size failures are dev's known overshoot (D263 one-time exception, #198).

## QUIC/WebTransport resumption research (D265): finished The report is at `research/quic-resume/README.md` on branch `research-quic-resume`: head `3f32aea4`, base `dcf9dbb9` (origin/dev). It is research only. No product code changed. The owner decides. **Short answer: 0–1 round trips after a real network change cannot be reached in browsers in 2026.** - **Chrome:** its WebTransport client has no connection migration and no TLS session cache. (Chrome migrates normal HTTP/3 connections on network change, but only on Android.) - **Firefox:** opens a new QUIC connection on every network change (bug 1962425). - **Safari 26.4:** ships WebTransport on macOS and iOS, with an HTTP/2 fallback. Whether it migrates is unconfirmed. - **0-RTT:** the WebTransport draft (-16, §3.2) forbids starting a session in 0-RTT. - **What WebTransport realistically gains in browsers: one round trip (4 → 3)**, and only if our server sends its HTTP/3 SETTINGS in its first flight (0.5-RTT). - **Migration does give 1 round trip** for native clients, and for NAT rebinding in any client. That holds only when the resume message is padded past QUIC's 3× anti-amplification limit. **Measured** on the perf VM with native clients (no headless browser is available there, and browsers cannot exercise migration anyway). Setup: netns + netem at 150 ms RTT, no jitter. The client moves to its second address on every sample. 41 samples per row; times are from the address change until the reply has fully arrived. Lock held 12:30–12:37 UTC (18:00–18:07 IST). Load average was 0.17 at the start and 0.07 at the end. | Path after the address change | Reply | Open p50/p99 (ms) | Reply p50/p99 (ms) | Round trips | |---|---:|---:|---:|---:| | WebSocket: TCP + TLS 1.3 + upgrade + token | 1 KiB | 451.5/452.0 | 602.0/602.4 | 4 | | WebTransport, new session (library default) | 1 KiB | 452.8/453.6 | 603.4/604.3 | 4 | | WebTransport, new session, SETTINGS at 0.5-RTT | 1 KiB | 302.1/302.6 | 452.7/453.1 | 3 | | WebTransport, migrated connection | 1 KiB | – | 301.3/301.7 | 2 | | WebTransport, migrated, resume padded to 4 KiB | 1 KiB | – | 150.8/151.1 | 1 | | live connection (floor), WebSocket / WebTransport | 1 KiB | – | 150.5 / 150.7 | 1 | | WebSocket, new connection | 32 KiB | 451.4/452.0 | 788.5/790.1 | 5.3 | | WebTransport, new session, 0.5-RTT | 32 KiB | 302.1/302.5 | 753.8/754.2 | 5 | | WebTransport, migrated, padded | 32 KiB | – | 452.0/519.2 | 3 | **Size** (static musl release probes, same echo server built three ways): - quinn + rustls/ring alone: 2,240,888 B. - with wtransport 0.7.2: +307,296 B. - with web-transport-quinn 0.13.2: +484,832 B. These deltas are upper bounds, because the product already links url, http, futures and similar crates. The delta in the product binary still needs to be measured. Both libraries are MIT OR Apache-2.0, which is compatible with AGPL. **Recommendation for the owner to decide:** 1. Do not add WebTransport for resumption now. It saves one round trip, and the cost is: D243 binary growth, a second transport, two fallbacks (Chrome and Firefox have no fallback when UDP is blocked), and a proxy change (Traefik cannot proxy WebTransport, #11204). 2. Correct the D265 budget wording. A fresh WebSocket resume is 3 round trips to `onopen` and **4 to the first resumed byte**, because the token is sent after open. 3. Keep QUIC migration for native clients: pad the first message after a path change, and keep early data off. 4. Revisit if Chrome or Safari starts migrating WebTransport sessions, or if Traefik can proxy WebTransport. **0-RTT replay safety:** terminal input, actions, sign-in, and any rotation or consumption of the resume token must never travel in 0-RTT. The D265 first-message token is safe on WebTransport, because the draft forbids 0-RTT session setup. After a migration, no token is needed at all: it is the same authenticated connection. **Evidence** (attached above): summary.csv, results-20261013T123020Z.tgz (raw CSVs and host record), proto-source.tgz (prototype and size probe), wtransport-0.7.2-research.patch (`Endpoint::rebind` and an opt-in 0.5-RTT accept; these exist only for the research), run-vm.sh.txt, size-probes.txt. The perf VM work directory was removed after the run. **Gate** (`scripts/verify fast` on 3f32aea4; the only change on top of dev is a markdown file). It fails on the dev base itself, and the failures are unrelated to this change. Full log: [verify-fast.txt](https://git.kayg.org/attachments/2db35f9e-f9e1-48f2-b71e-4a4578ed174e) ``` | fmt | PASS | | VT native fmt | PASS | | CLI plugin compile-out | PASS | | clippy | PASS | | test | FAIL (101) | | cargo-deny | PASS | | static builds | FAIL (1) | binary exceeds the 16404816-byte size budget: 22612848 bytes binary exceeds the 13817816-byte size budget: 20014520 bytes test result: FAILED. 71 passed; 5 failed; 1 ignored (-p infraternal: restart/restart_image tests; restart_image.rs:240 unwraps CARGO_TARGET_DIR (unset in this run); one 6 s timeout under host load 30-44) ``` The size failures are dev's known overshoot (D263 one-time exception, #198).
Sign in to join this conversation.
No labels
launch-qa
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
kayg/infraternal#176
No description provided.